@cabane/companion 0.6.169 → 0.6.171

package/dist/cli.js

@@ -2084,9 +2084,15 @@ var init_turn_request = __esm({
     resolvedMcpServersSchema = z9.record(z9.string(), resolvedMcpServerSchema);
     hostInjectedServersSchema = z9.record(z9.string(), z9.unknown());
     turnRequestSchema = z9.object({
-      // Server-composed system prompt (core + capability prose + adapter addendum +
-      // charter). One string to the adapter.
+      // Server-composed standing instructions: the core segment (body, tool naming, identity, agent
+      // charter) and, after it, the conversation segment (workspace and room charters, skill indexes,
+      // roster). One string to the adapter, current as of this dispatch.
       systemPrompt: z9.string(),
+      // The same text as its two ordered segments, so an adapter that writes standing text into the
+      // conversation (Codex's input preamble) can tell which half changed. `systemPrompt` is
+      // `joinStanding(standing)`. Optional: absent from an API older than the split, where
+      // `systemPrompt` is the core alone and the conversation material rides `prompt`.
+      standing: z9.object({ core: z9.string(), conversation: z9.string() }).optional(),
       // Server-composed per-turn user text (anchor reminder + the triggering message).
       prompt: z9.string(),
       // The multi-block user-message body (text + vision).
@@ -2136,6 +2142,22 @@ var init_turn_request = __esm({
   }
 });
 
+// packages/agent-runtime/src/standing.ts
+function joinStanding(segments) {
+  const conversation = segments.conversation.trim();
+  return conversation.length > 0 ? `${segments.core}${STANDING_SEPARATOR}${conversation}` : segments.core;
+}
+function standingSegments(req) {
+  return req.standing ?? { core: req.systemPrompt, conversation: "" };
+}
+var STANDING_SEPARATOR;
+var init_standing = __esm({
+  "packages/agent-runtime/src/standing.ts"() {
+    "use strict";
+    STANDING_SEPARATOR = "\n\n---\n\n";
+  }
+});
+
 // packages/agent-runtime/src/conformance.ts
 import { z as z10 } from "zod";
 var conformanceFixtureSchema;
@@ -2520,8 +2542,15 @@ var init_descriptions = __esm({
       "withdraw_ask"
     ];
     TURN_CONTROL_TOOL_DESCRIPTIONS = {
-      ask: `Ask a HUMAN a structured question (or a short LIST of them) you need answered to continue, then END your turn \u2014 don't wait for the reply. Use it when you can't proceed without a person's input (a decision only they can make, a missing fact). Pass \`targetUserId\`. Two forms: a SINGLE question \u2014 a \`headline\` plus a short \`question\` body for the framing the headline can't hold \u2014 OR, when a plan ends with SEVERAL bounded decisions at once, a \`questions\` array of 1\u2013${MAX_ASK_ITEMS} items, each \`{ headline, body?, options? }\`. Provide EITHER \`question\` (single) or \`questions\` (array), never both. **Several decisions landing together are ONE call with \`questions\`** \u2014 never cram the extras into prose, drop all but one, or fire an ask each: a second \`ask\` is a second inbox item competing with the first, never an edit to it. Each question keeps the same form: a one-sentence \`headline\`, a short \`body\` frame (NOT a report \u2014 your status, links and detail go in your REPLY; inline markdown only, no lists or headings), and ${MIN_ASK_OPTIONS}\u2013${MAX_ASK_OPTIONS} \`options\` when the answer is a bounded choice \u2014 for a yes/no go-ahead always pass them, so it's one click, not a typed reply. Your final reply carries the CONTEXT, the ask carries the QUESTION(S). Your question is RECORDED when you call this and delivered when your turn ends \u2014 beside the reply that frames it, or earlier on a long turn, so they can answer while you work. Ask as soon as you know it, and write it to stand alone: in every headline, body and option, say "I" for yourself and name anyone else who acts \u2014 never "you", "we" or "they". The human sends ONE response: supplied answers are recorded, omissions become terminally Unanswered. A person can DISMISS a question instead of answering it \u2014 it ends, you are not told, nothing wakes you. Check an ask's status before re-raising a vanished one. \`replaces\` withdraws a stale ask of yours (or anyone's) in this conversation in the same write, with the reason shown to the person. Targets a human only; to bring a peer AGENT in, name them by \`@handle\` in your reply.`,
-      cancel_wake: `Stand down your own wake \u2014 the inverse of \`wake_me\`. No arguments: it cancels the wake you have armed in this conversation, NOW, when you call it. Reach for it when the thing you armed a wake to check has already happened, or the work it was watching is over \u2014 an armed wake you no longer need fires into a turn with nothing to do, and a supervision loop with no off switch is one you can only end by leaving it running. Whether you have one armed is printed in your turn context ("Wake armed: \u2026"); calling this with nothing armed is a clean no-op, no error. Each call acts as it arrives: \`cancel_wake\` then \`wake_me\` leaves the NEW wake armed; \`wake_me\` then \`cancel_wake\` leaves nothing armed. It reaches only your own wake in this conversation \u2014 never a peer's, and never a recurring schedule (those are \`schedules.*\`).`,
+      ask: `Ask a person a structured question you need answered to continue, then end your turn; don't wait for the reply. \`targetUserId\` is a person on your roster; to bring in an agent, name it with \`@handle\` in your reply.
+- Form: one question (\`headline\`, optional \`question\` body, \`options\`) or \`questions\`, 1\u2013${MAX_ASK_ITEMS} \`{ headline, body?, options? }\`; never both. Decisions that arise together go in ONE call, in the order you want them answered. A second \`ask\` is a separate item, never an edit; raise one only for a genuinely new question.
+- \`headline\`: one sentence ending in \`?\`. Body (\`question\` or each item's \`body\`): a sentence or two of framing, not a report; inline Markdown only, no lists or headings. \`options\`: ${MIN_ASK_OPTIONS}\u2013${MAX_ASK_OPTIONS} one-click answers (always for a yes/no go-ahead), each a distinct course of action you can carry out without asking back.
+- Voice, in headline, body and options: "I" for yourself, never your own name; name everyone else who decides or acts, as on your roster. Never "you", "your", "we", "us", "our" or their contractions, nor "he", "she" or "they" for a named actor. Each option reads correctly alone. A quotation stays accurate: say who said it.
+- It must stand alone, since it can arrive first: the reply carries the findings, the ask the question; don't repeat the reply in it.
+- Recorded when you call this; delivered when your turn ends, or after 3 minutes if it is still running. Ask as soon as you know. The answer reaches you on a later turn.
+- The person sends one response; unanswered questions end as Unanswered. A person can dismiss an ask; you aren't told and nothing wakes you. Check an ask's status before raising it again.
+- To replace a stale ask (yours or anyone's here), pass \`replaces: { askId, reason }\`: both land in one write and the person sees the reason. To withdraw without a replacement, use \`withdraw_ask\`.`,
+      cancel_wake: `Stand down your own wake \u2014 the inverse of \`wake_me\`. No arguments: it cancels the wake you have armed in this conversation, NOW, when you call it. Reach for it when the thing you armed a wake to check has already happened, or the work it was watching is over \u2014 an armed wake you no longer need fires into a turn with nothing to do, and a supervision loop with no off switch is one you can only end by leaving it running. Whether you have one armed is printed in your turn context ("Wake armed: \u2026"); a wake you armed that is no longer printed there has fired or been dismissed. Calling this with nothing armed is a clean no-op, no error. Each call acts as it arrives: \`cancel_wake\` then \`wake_me\` leaves the NEW wake armed; \`wake_me\` then \`cancel_wake\` leaves nothing armed. It reaches only your own wake in this conversation \u2014 never a peer's, and never a recurring schedule (those are \`schedules.*\`).`,
       skip_turn: `End your current turn WITHOUT posting a reply. Call this when you've been woken to read a message that genuinely doesn't need a response from you \u2014 a thanks/aside, a question already answered, chatter outside your lane, or something another participant clearly owns. Your turn ends silently: no message bubble is posted. The \`reason\` is a short free-text note for telemetry (e.g. "already answered by cabane", "thanks, nothing to add"). Prefer this over posting a low-value "ok!"/"got it" reply. Don't also write a reply when you skip \u2014 skipping IS the whole turn.`,
       wake_me: `Wake yourself later \u2014 end this turn now and be re-dispatched at a time you pick, with a note you write to yourself. Use it for "wait until X": when the thing you need hasn't happened yet (a PR isn't merged, a human hasn't answered), arm a wake, end your turn, and you're woken later to CHECK \u2014 read the workspace, and either act or re-arm. Ground the delay before you arm it. Almost every wake is short \u2014 seconds to a couple of hours \u2014 waiting on a condition you can name: a session limit resetting, a PR merging. Reach past a few hours only when (a) a human asked for that timing, or (b) the wait is pinned to a real external event you can name \u2014 a report that only runs Mondays, a known reset time. A speculative far-future check-in you invented yourself is the one thing not to arm: if no one asked and you can't name both what clears the wait and why it takes that long, don't arm it \u2014 finish now, or raise an \`ask\`. Pass EXACTLY ONE of \`afterSeconds\` (a relative delay \u2014 \`300\` for five minutes) or \`at\` (an absolute ISO-8601 timestamp WITH a zone, e.g. \`2026-07-16T09:00:00-07:00\` \u2014 YOU compute it; the system never parses natural-language time). \`note\` is a message to your future self \u2014 it becomes the body of the wake message that re-dispatches you, so write the condition to re-check ("check whether CT441 merged yet"). The wake arms NOW, when you call this, and the delay counts from this call; a later \`wake_me\` in the same turn replaces it, and \`cancel_wake\` stands it down. A wake that comes due while your turn is still running waits and is delivered after your reply. This is the ONLY sanctioned way to schedule your own continuation; never reach for a host cron/scheduler. Guardrails: at least 60s out, at most 14 days \u2014 a wake that can't be armed returns an error here, in this call, so you can recompute; widen the interval as a loop ages (5m \u2192 15m \u2192 1h\u2026) rather than hammering; after many consecutive re-arms with no other activity you'll be steered to raise an \`ask\` to the human instead.`,
       withdraw_ask: `Withdraw an open ask \u2014 yours or anyone's in this conversation \u2014 because the question is moot, was wrong, or has been overtaken. \`reason\` is required and is shown to the person and, if it wasn't your ask, to the agent who asked it. If there is a current question to put in its place, don't call this \u2014 call \`ask\` with \`replaces\` so the two land as one and the person never sees neither or both. Never withdraw to hurry an answer; to act on a deadline, arm a \`wake_me\` and decide then.`
@@ -2529,13 +2558,13 @@ var init_descriptions = __esm({
     TURN_CONTROL_FIELD_DESCRIPTIONS = {
       ask: {
         targetUserId: "The workspace member (human) to ask \u2014 a user id, from your turn context's roster.",
-        question: `SINGLE-question form: a short body \u2014 one or two sentences of framing the headline can't hold. NOT a report (up to ${MAX_ASK_QUESTION_BYTES} characters, inline markdown only). Provide EITHER this or \`questions\`, not both. Put the crisp one-sentence question in \`headline\`. Say "I" for yourself; name anyone else described, never "you", "we" or "they".`,
-        headline: `SINGLE-question form: the question itself as ONE clear, capitalized sentence ending in \`?\` ("Should Ledger deploy once Mia approves?"), up to ${MAX_ASK_HEADLINE_BYTES} characters. What the human reads first in the inbox and the chip \u2014 one scannable question, no elaboration (that goes in \`question\`). Strongly encouraged. Say "I" for yourself; name anyone else described, never "you", "we" or "they".`,
-        options: `SINGLE-question form: optional ${MIN_ASK_OPTIONS}\u2013${MAX_ASK_OPTIONS} suggested one-click answers, up to ${MAX_ASK_OPTION_BYTES} characters each. Each option must stand alone: "I" for yourself, anyone else responsible for its action by name \u2014 never "you", "we" or "they".`,
+        question: `SINGLE-question form: a short body \u2014 one or two sentences of framing the headline can't hold. NOT a report (up to ${MAX_ASK_QUESTION_BYTES} characters, inline markdown only). Provide EITHER this or \`questions\`, not both. Put the crisp one-sentence question in \`headline\`.`,
+        headline: `SINGLE-question form: the question itself as ONE clear, capitalized sentence ending in \`?\` ("Should Ledger deploy once Mia approves?"), up to ${MAX_ASK_HEADLINE_BYTES} characters. What the person reads first in For you and on the chip \u2014 one scannable question, no elaboration (that goes in \`question\`). Strongly encouraged.`,
+        options: `SINGLE-question form: optional ${MIN_ASK_OPTIONS}\u2013${MAX_ASK_OPTIONS} suggested one-click answers, up to ${MAX_ASK_OPTION_BYTES} characters each. Each option must make sense on its own.`,
         questions: `MULTI-question form: 1\u2013${MAX_ASK_ITEMS} questions to ask at once, when a plan ends with several bounded decisions. Provide EITHER this or \`question\`/\`headline\`/\`options\`, not both.`,
-        "questions.headline": `The one-sentence question ("Should Ledger deploy once Mia approves?") \u2014 required for each item, up to ${MAX_ASK_HEADLINE_BYTES} characters. Say "I" for yourself; name anyone else described, never "you", "we" or "they".`,
-        "questions.body": `Optional short framing beneath the headline, up to ${MAX_ASK_QUESTION_BYTES} characters. NOT a report. Say "I" for yourself; name anyone else described, never "you", "we" or "they".`,
-        "questions.options": `Optional ${MIN_ASK_OPTIONS}\u2013${MAX_ASK_OPTIONS} one-click answers for this question, up to ${MAX_ASK_OPTION_BYTES} characters each. Each option must stand alone: "I" for yourself, anyone else responsible for its action by name \u2014 never "you", "we" or "they".`,
+        "questions.headline": `The one-sentence question ("Should Ledger deploy once Mia approves?") \u2014 required for each item, up to ${MAX_ASK_HEADLINE_BYTES} characters.`,
+        "questions.body": `Optional short framing beneath the headline, up to ${MAX_ASK_QUESTION_BYTES} characters, inline markdown only. NOT a report.`,
+        "questions.options": `Optional ${MIN_ASK_OPTIONS}\u2013${MAX_ASK_OPTIONS} one-click answers for this question, up to ${MAX_ASK_OPTION_BYTES} characters each. Each option must make sense on its own.`,
         replaces: "Withdraw a stale ask in this conversation as part of raising this one. Both land in a single write, so the person goes from the old question to the new one and never sees neither or both.",
         "replaces.askId": "The id of the open ask to withdraw.",
         "replaces.reason": `Why the old question is no longer the question \u2014 shown to the person on their Done row. Up to ${MAX_WITHDRAW_REASON_BYTES} characters.`
@@ -5374,7 +5403,14 @@ function fingerprintPrompt(prompt) {
   return `${prompt.length}.${(fnv >>> 0).toString(36)}.${(djb >>> 0).toString(36)}`;
 }
 function encodeSession3(state) {
-  return JSON.stringify(state);
+  return JSON.stringify({
+    threadId: state.threadId,
+    cwd: state.cwd,
+    promptFingerprint: state.promptFingerprint,
+    conversationFingerprint: state.conversationFingerprint ?? null,
+    compactions: state.compactions ?? null,
+    usageBaseline: state.usageBaseline
+  });
 }
 function decideResume3(stored, currentCwd) {
   if (!stored) return { fresh: true, reason: "no_session" };
@@ -5395,6 +5431,8 @@ function decideResume3(stored, currentCwd) {
   return {
     resume: state.threadId,
     promptFingerprint: typeof state.promptFingerprint === "string" ? state.promptFingerprint : null,
+    conversationFingerprint: typeof state.conversationFingerprint === "string" ? state.conversationFingerprint : null,
+    compactions: typeof state.compactions === "number" && Number.isInteger(state.compactions) && state.compactions >= 0 ? state.compactions : null,
     usageBaseline: readUsageBaseline(state.usageBaseline)
   };
 }
@@ -5432,6 +5470,7 @@ async function* decodeCodexStream(events, ctx2) {
   let usage;
   let cumulativeUsage;
   let threadIdForSession = ctx2.resumedThreadId;
+  let lastState = ctx2.storedState ?? null;
   let settled = false;
   function* flushInterim() {
     const sealed = sealHeld2(held, false);
@@ -5447,14 +5486,14 @@ async function* decodeCodexStream(events, ctx2) {
         const state = encodeSession3({
           threadId,
           cwd: ctx2.cwd ?? "",
-          promptFingerprint: ctx2.promptFingerprint ?? null,
-          // The baseline this turn inherited, carried through unchanged. This early write records the
-          // thread id even if the turn dies mid-stream; it can't yet know what the turn will spend. The
-          // closing write records the new baseline.
+          promptFingerprint: ctx2.heldStanding?.promptFingerprint ?? null,
+          conversationFingerprint: ctx2.heldStanding?.conversationFingerprint ?? null,
+          compactions: ctx2.heldStanding?.compactions ?? null,
           usageBaseline: ctx2.usageBaseline ?? null
         });
         if (threadId !== ctx2.resumedThreadId || state !== ctx2.storedState) {
           sessionEmitted = true;
+          lastState = state;
           yield {
             type: "session",
             state,
@@ -5553,14 +5592,16 @@ async function* decodeCodexStream(events, ctx2) {
     if (sealed) yield sealed;
     reason = "no_terminal";
   }
-  if (ok && cumulativeUsage && threadIdForSession) {
+  if (ok && threadIdForSession) {
     const closing = encodeSession3({
       threadId: threadIdForSession,
       cwd: ctx2.cwd ?? "",
       promptFingerprint: ctx2.promptFingerprint ?? null,
-      usageBaseline: cumulativeUsage
+      conversationFingerprint: ctx2.conversationFingerprint ?? null,
+      compactions: ctx2.compactions ?? null,
+      usageBaseline: cumulativeUsage ?? ctx2.usageBaseline ?? null
     });
-    yield { type: "session", state: closing };
+    if (closing !== lastState) yield { type: "session", state: closing };
   }
   const resolvedConfig = ctx2.resolvedReasoningEffort ? { reasoningEffort: ctx2.resolvedReasoningEffort } : void 0;
   yield {
@@ -5640,15 +5681,27 @@ var init_model3 = __esm({
 });
 
 // packages/agent-runtime/src/codex/run-spec.ts
-function buildRunSpec2(req, resumeThreadId, instructionsFile = null, threadPromptFingerprint = null, imagePaths = []) {
+function buildRunSpec2(req, resumeThreadId, instructionsFile = null, threadStanding = null, imagePaths = []) {
   const { policy, config } = req;
   const directory = req.local.cwd ?? "";
   const dialect = readCodexDialect(config.runtimeOptions);
   const baseInstructionsFile = !policy.hostFs && instructionsFile ? instructionsFile : null;
   const model = config.model ? parseCodexModel(config.model) : null;
-  const promptFingerprint = fingerprintPrompt(req.systemPrompt);
-  const threadHasThisPrompt = resumeThreadId !== null && threadPromptFingerprint !== null && threadPromptFingerprint === promptFingerprint;
-  const promptRidesInput = baseInstructionsFile === null && !threadHasThisPrompt;
+  const segments = standingSegments(req);
+  const conversationText = segments.conversation.trim();
+  const fingerprints = {
+    core: fingerprintPrompt(segments.core),
+    conversation: conversationText.length > 0 ? fingerprintPrompt(conversationText) : null
+  };
+  const resumed = resumeThreadId !== null;
+  const held = resumed ? threadStanding : null;
+  const viaInput = baseInstructionsFile === null;
+  const preamble = {
+    core: viaInput && (held?.core ?? null) !== fingerprints.core,
+    // Compared both ways: a held segment that is now empty differs from it, and nothing held
+    // equals nothing to send.
+    conversation: viaInput && (held?.conversation ?? null) !== fingerprints.conversation
+  };
   return {
     resumeThreadId,
     directory,
@@ -5657,9 +5710,9 @@ function buildRunSpec2(req, resumeThreadId, instructionsFile = null, threadPromp
     skipGitRepoCheck: true,
     ...dialect.modelReasoningEffort ? { modelReasoningEffort: dialect.modelReasoningEffort } : {},
     baseInstructionsFile,
-    input: withImages(buildInput(req, promptRidesInput), imagePaths),
-    promptRidesInput,
-    promptFingerprint,
+    input: withImages(buildInput(req, segments, preamble, resumed), imagePaths),
+    preamble,
+    fingerprints,
     config: buildConfig(req, baseInstructionsFile),
     secretEnv: codexSecretEnv(req)
   };
@@ -5675,12 +5728,24 @@ function codexSecretEnv(req) {
   }
   return Object.keys(env).length > 0 ? env : null;
 }
-function buildInput(req, promptRidesInput) {
+function buildInput(req, segments, preamble, resumed) {
   const userText = req.content.filter((b) => b.type === "text").map((b) => b.text).join("\n\n");
   const body = userText.trim().length > 0 ? userText : req.prompt;
-  if (!promptRidesInput) return body;
-  const system = req.systemPrompt.trim();
-  return system.length > 0 ? `${system}
+  const standing = [];
+  if (!resumed) {
+    if (preamble.core) standing.push(joinStanding(segments).trim());
+  } else {
+    if (preamble.core) standing.push(`${CORE_REPLACES}
+
+${segments.core.trim()}`);
+    if (preamble.conversation) {
+      standing.push(`${CONVERSATION_REPLACES}
+
+${segments.conversation.trim()}`.trim());
+    }
+  }
+  const lead = standing.filter((s) => s.length > 0);
+  return lead.length > 0 ? `${lead.join("\n\n---\n\n")}
 
 ${body}` : body;
 }
@@ -5766,10 +5831,11 @@ function buildConfig(req, baseInstructionsFile) {
 function isStringRecord2(v) {
   return !!v && typeof v === "object" && Object.values(v).every((x) => typeof x === "string");
 }
-var CABANE_MCP_SERVER3, TURN_CONTROL_MCP_SERVER2, ACTIVE_CONVERSATION_HEADER3, ENV_ENVELOPE_KEYS;
+var CABANE_MCP_SERVER3, TURN_CONTROL_MCP_SERVER2, ACTIVE_CONVERSATION_HEADER3, ENV_ENVELOPE_KEYS, CORE_REPLACES, CONVERSATION_REPLACES;
 var init_run_spec2 = __esm({
   "packages/agent-runtime/src/codex/run-spec.ts"() {
     "use strict";
+    init_standing();
     init_policy3();
     init_model3();
     init_session3();
@@ -5784,6 +5850,8 @@ var init_run_spec2 = __esm({
       "CABANE_CONVERSATION_TITLE",
       "CABANE_HOST_ACCESS"
     ];
+    CORE_REPLACES = "Your standing instructions changed since an earlier copy in this conversation, or that copy may have been compacted away. This copy replaces every earlier one: where they differ, this one holds, and anything an earlier copy said that this one does not no longer applies.";
+    CONVERSATION_REPLACES = "This conversation's standing context \u2014 its charters, skill indexes and roster \u2014 changed since an earlier copy in this conversation, or that copy may have been compacted away. This copy replaces every earlier one, including charters and skills an earlier turn carried in its own text: where they differ, this one holds, and anything an earlier copy said that this one does not no longer applies.";
   }
 });
 
@@ -5922,7 +5990,6 @@ function createCodexAdapter(deps = {}) {
       const directory = req.local.cwd ?? "";
       const decision = decideResume3(req.session, directory);
       const resumeThreadId = "resume" in decision ? decision.resume : null;
-      const threadPromptFingerprint = "resume" in decision ? decision.promptFingerprint : null;
       const threadUsageBaseline = "resume" in decision ? decision.usageBaseline : null;
       if ("fresh" in decision && decision.reason === "cwd_mismatch") {
         deps.onWarn?.(
@@ -5939,6 +6006,32 @@ function createCodexAdapter(deps = {}) {
           degraded = false;
         }
       }
+      let compactions = 0;
+      let threadStanding = null;
+      if ("resume" in decision) {
+        compactions = deps.countCompactions ? await deps.countCompactions(decision.resume) : null;
+        if (signal.aborted) return;
+        if (compactions === null) {
+          deps.onWarn?.(
+            "codex adapter: the thread's compaction count could not be read \u2014 re-sending the standing instructions (ENG210)",
+            { threadId: decision.resume }
+          );
+        } else if (decision.compactions === compactions) {
+          threadStanding = {
+            core: decision.promptFingerprint,
+            conversation: decision.conversationFingerprint
+          };
+        } else if (decision.compactions !== null && compactions > decision.compactions) {
+          deps.onWarn?.(
+            "codex adapter: the thread compacted since the last turn \u2014 re-sending the standing instructions (ENG210)",
+            {
+              threadId: decision.resume,
+              compactions,
+              compactionsSince: compactions - decision.compactions
+            }
+          );
+        }
+      }
       let instructions = null;
       if (!req.policy.hostFs) {
         if (!deps.writeInstructionsFile) {
@@ -5983,7 +6076,7 @@ function createCodexAdapter(deps = {}) {
           req,
           resumeThreadId,
           instructions?.path ?? null,
-          threadPromptFingerprint,
+          threadStanding,
           images?.paths ?? []
         );
         if (spec.model === null) {
@@ -5998,10 +6091,18 @@ function createCodexAdapter(deps = {}) {
           cwd: req.local.cwd,
           resumedThreadId: resumeThreadId,
           degraded,
-          // Which prompt the thread carries once this turn lands. If we sent one, it's that one — the
-          // later copy is what the model reads. If we withheld it, the thread carries what it did. Read
-          // off the spec, so the record can't disagree with what was sent.
-          promptFingerprint: spec.promptRidesInput ? spec.promptFingerprint : threadPromptFingerprint,
+          // Which segments the thread carries once this turn lands. A segment sent is that one —
+          // the later copy is what the model reads. One withheld is what the thread had. Read off
+          // the spec, so the record can't disagree with what was sent.
+          promptFingerprint: spec.preamble.core ? spec.fingerprints.core : threadStanding?.core ?? null,
+          conversationFingerprint: spec.preamble.conversation ? spec.fingerprints.conversation : threadStanding?.conversation ?? null,
+          compactions,
+          // What the thread held before this turn, for the write at `thread.started`.
+          heldStanding: {
+            promptFingerprint: threadStanding?.core ?? null,
+            conversationFingerprint: threadStanding?.conversation ?? null,
+            compactions: threadStanding ? compactions : null
+          },
           storedState: req.session,
           usageBaseline: threadUsageBaseline,
           // Codex reports no model in-stream, so record what the thread was started with (null on the
@@ -6072,7 +6173,7 @@ function makeRequest3(overrides2 = {}) {
     ...overrides2
   };
 }
-var ABORT_SENTINEL3, NEW_THREAD_ID, BOUNDED_NOTICE2, COMPANION_POLICY2, DIR2, PROMPT, threadStarted, agentMessage, reasoning, toolFrame, turnCompleted, turnFailed, fatalError, errorItem, OP_SUCCESS, OP_FAILURE, sessionEvent3, CODEX_CONFORMANCE_FIXTURES;
+var ABORT_SENTINEL3, NEW_THREAD_ID, BOUNDED_NOTICE2, COMPANION_POLICY2, DIR2, PROMPT, threadStarted, agentMessage, reasoning, toolFrame, turnCompleted, turnFailed, fatalError, errorItem, OP_SUCCESS, OP_FAILURE, startedSession, closingSession, CODEX_CONFORMANCE_FIXTURES;
 var init_conformance4 = __esm({
   "packages/agent-runtime/src/codex/conformance.ts"() {
     "use strict";
@@ -6127,11 +6228,21 @@ var init_conformance4 = __esm({
         message: "files.read returned more than the result ceiling"
       }
     };
-    sessionEvent3 = (threadId, cwd = DIR2, degraded = false, promptFingerprint = fingerprintPrompt(PROMPT), usageBaseline = null) => ({
+    startedSession = (threadId, cwd = DIR2, degraded = false) => ({
       type: "session",
-      state: encodeSession3({ threadId, cwd, promptFingerprint, usageBaseline }),
+      state: encodeSession3({ threadId, cwd, promptFingerprint: null, usageBaseline: null }),
       ...degraded ? { degraded: true } : {}
     });
+    closingSession = (threadId, usageBaseline = null) => ({
+      type: "session",
+      state: encodeSession3({
+        threadId,
+        cwd: DIR2,
+        promptFingerprint: fingerprintPrompt(PROMPT),
+        usageBaseline,
+        compactions: 0
+      })
+    });
     CODEX_CONFORMANCE_FIXTURES = [
       {
         // A plain text reply: the held agent message seals as the terminal final at `turn.completed`;
@@ -6154,11 +6265,11 @@ var init_conformance4 = __esm({
           })
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "text", body: "Hello there.", terminal: true },
           // The closing session write — the thread's ending totals, recorded as the baseline the next turn
           // subtracts. A fresh thread, so the `result` usage below is the frame verbatim.
-          sessionEvent3(NEW_THREAD_ID, DIR2, false, fingerprintPrompt(PROMPT), {
+          closingSession(NEW_THREAD_ID, {
             inputTokens: 100,
             outputTokens: 50,
             cacheReadTokens: 20,
@@ -6205,7 +6316,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "text", body: "Reading your notes.", terminal: false },
           {
             type: "tool",
@@ -6225,6 +6336,7 @@ var init_conformance4 = __esm({
             result: [{ type: "text", text: "sleep early" }]
           },
           { type: "text", body: "Here's the summary.", terminal: true },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6258,7 +6370,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "tool",
             id: "query-success",
@@ -6276,6 +6388,7 @@ var init_conformance4 = __esm({
             input: { op: "files.read", args: { path: "/ABOUT.md" } },
             result: OP_SUCCESS
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6311,7 +6424,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "tool",
             id: "query-failed",
@@ -6329,6 +6442,7 @@ var init_conformance4 = __esm({
             input: { op: "files.read", args: { path: "/ABOUT.md" } },
             result: OP_FAILURE
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6352,7 +6466,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "tool",
             id: "mcp-failed",
@@ -6370,6 +6484,7 @@ var init_conformance4 = __esm({
             input: { q: "receipt" },
             result: "connection closed"
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6395,7 +6510,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "tool",
             id: "mcp-image",
@@ -6413,6 +6528,7 @@ var init_conformance4 = __esm({
             input: {},
             result: [{ type: "image", data: "base64-bytes", mimeType: "image/png" }]
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6453,7 +6569,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "tool", id: "t1", name: "list", phase: "start", summary: "", input: {} },
           {
             type: "tool",
@@ -6464,6 +6580,7 @@ var init_conformance4 = __esm({
             input: { path: "/product/tasks" },
             result: [{ type: "text", text: "CT481.md" }]
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6481,7 +6598,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "tool",
             id: "ws1",
@@ -6498,6 +6615,7 @@ var init_conformance4 = __esm({
             summary: "best pizza in nyc",
             input: { query: "best pizza in nyc" }
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6513,7 +6631,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "tool",
             id: "ws2",
@@ -6530,6 +6648,7 @@ var init_conformance4 = __esm({
             summary: "",
             input: { query: "" }
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6560,7 +6679,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "text", body: "Working on it.", terminal: false },
           {
             type: "tool",
@@ -6592,7 +6711,7 @@ var init_conformance4 = __esm({
           turnFailed("provider exploded")
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "text", body: "Partial work.", terminal: false },
           { type: "runtime_notice", body: "provider exploded" },
           { type: "result", ok: false, reason: "error:provider exploded" }
@@ -6609,7 +6728,7 @@ var init_conformance4 = __esm({
           fatalError("stream died")
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "text", body: "Starting.", terminal: false },
           { type: "runtime_notice", body: "stream died" },
           { type: "result", ok: false, reason: "error:stream died" }
@@ -6622,7 +6741,7 @@ var init_conformance4 = __esm({
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("429 Too Many Requests")],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "runtime_notice", body: "429 Too Many Requests" },
           { type: "result", ok: false, reason: "rate_limited" }
         ]
@@ -6632,7 +6751,7 @@ var init_conformance4 = __esm({
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("503 Service Unavailable")],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "runtime_notice", body: "503 Service Unavailable" },
           { type: "result", ok: false, reason: "server_error" }
         ]
@@ -6645,7 +6764,7 @@ var init_conformance4 = __esm({
           turnFailed("You've hit your session limit \xB7 resets 8:20pm (UTC)")
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "runtime_notice",
             body: "You've hit your session limit \xB7 resets 8:20pm (UTC)"
@@ -6658,7 +6777,7 @@ var init_conformance4 = __esm({
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("401 Unauthorized: invalid api key")],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "runtime_notice", body: "401 Unauthorized: invalid api key" },
           { type: "result", ok: false, reason: "auth_expired" }
         ]
@@ -6670,7 +6789,7 @@ var init_conformance4 = __esm({
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("something local broke")],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "runtime_notice", body: "something local broke" },
           { type: "result", ok: false, reason: "error:something local broke" }
         ]
@@ -6683,7 +6802,7 @@ var init_conformance4 = __esm({
           turnFailed(`  ${BOUNDED_NOTICE2}${"y".repeat(20)}  `)
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "runtime_notice", body: BOUNDED_NOTICE2 },
           { type: "result", ok: false, reason: "usage_capped" }
         ]
@@ -6694,26 +6813,32 @@ var init_conformance4 = __esm({
         name: "empty failure text emits no runtime notice",
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("")],
-        expected: [sessionEvent3(NEW_THREAD_ID), { type: "result", ok: false, reason: "error:unknown" }]
+        expected: [
+          startedSession(NEW_THREAD_ID),
+          { type: "result", ok: false, reason: "error:unknown" }
+        ]
       },
       {
         name: "whitespace-only failure text emits no runtime notice",
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("   ")],
-        expected: [sessionEvent3(NEW_THREAD_ID), { type: "result", ok: false, reason: "error:   " }]
+        expected: [startedSession(NEW_THREAD_ID), { type: "result", ok: false, reason: "error:   " }]
       },
       {
         name: "bare status token emits no runtime notice",
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("429")],
-        expected: [sessionEvent3(NEW_THREAD_ID), { type: "result", ok: false, reason: "rate_limited" }]
+        expected: [
+          startedSession(NEW_THREAD_ID),
+          { type: "result", ok: false, reason: "rate_limited" }
+        ]
       },
       {
         name: "single-word provider sentence emits a runtime notice",
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnFailed("Unavailable.")],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "runtime_notice", body: "Unavailable." },
           { type: "result", ok: false, reason: "error:Unavailable." }
         ]
@@ -6741,7 +6866,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "result",
             ok: false,
@@ -6761,8 +6886,9 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "text", body: "All good now.", terminal: true },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6774,7 +6900,11 @@ var init_conformance4 = __esm({
         name: "zero-content success (empty runtime result)",
         request: makeRequest3(),
         nativeStream: [threadStarted(NEW_THREAD_ID), turnCompleted()],
-        expected: [sessionEvent3(NEW_THREAD_ID), { type: "result", ok: true }]
+        expected: [
+          startedSession(NEW_THREAD_ID),
+          closingSession(NEW_THREAD_ID),
+          { type: "result", ok: true }
+        ]
       },
       {
         // Empty-final: a clean turn that ended on a tool call with no closing message.
@@ -6799,7 +6929,7 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           {
             type: "tool",
             id: "t1",
@@ -6817,6 +6947,7 @@ var init_conformance4 = __esm({
             input: { changes: [{ path: "a.md", kind: "add" }] },
             result: [{ path: "a.md", kind: "add" }]
           },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6832,9 +6963,10 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "thinking", text: "Let me check the notes." },
           { type: "text", body: "All set.", terminal: true },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       },
@@ -6852,8 +6984,9 @@ var init_conformance4 = __esm({
         }),
         nativeStream: [threadStarted(NEW_THREAD_ID), agentMessage("m1", "Done."), turnCompleted()],
         expected: [
-          sessionEvent3(NEW_THREAD_ID),
+          startedSession(NEW_THREAD_ID),
           { type: "text", body: "Done.", terminal: true },
+          closingSession(NEW_THREAD_ID),
           {
             type: "result",
             ok: true,
@@ -6875,7 +7008,8 @@ var init_conformance4 = __esm({
             threadId: "th1",
             cwd: DIR2,
             promptFingerprint: fingerprintPrompt(PROMPT),
-            usageBaseline: null
+            usageBaseline: null,
+            compactions: 0
           })
         }),
         nativeStream: [threadStarted("th1"), agentMessage("m1", "Back again."), turnCompleted()],
@@ -6897,8 +7031,9 @@ var init_conformance4 = __esm({
         }),
         nativeStream: [threadStarted("th1"), agentMessage("m1", "Back again."), turnCompleted()],
         expected: [
-          sessionEvent3("th1"),
+          startedSession("th1"),
           { type: "text", body: "Back again.", terminal: true },
+          closingSession("th1"),
           { type: "result", ok: true }
         ]
       },
@@ -6920,8 +7055,9 @@ var init_conformance4 = __esm({
         }),
         nativeStream: [threadStarted("th1"), agentMessage("m1", "Back again."), turnCompleted()],
         expected: [
-          sessionEvent3("th1"),
+          startedSession("th1"),
           { type: "text", body: "Back again.", terminal: true },
+          closingSession("th1"),
           { type: "result", ok: true }
         ]
       },
@@ -6947,8 +7083,9 @@ var init_conformance4 = __esm({
           turnCompleted()
         ],
         expected: [
-          sessionEvent3(NEW_THREAD_ID, DIR2, true),
+          startedSession(NEW_THREAD_ID, DIR2, true),
           { type: "text", body: "Fresh start.", terminal: true },
+          closingSession(NEW_THREAD_ID),
           { type: "result", ok: true }
         ]
       }
@@ -6976,6 +7113,7 @@ var init_src = __esm({
     init_empty_result();
     init_failure();
     init_turn_request();
+    init_standing();
     init_conformance();
     init_transcript();
     init_transcript_sink();
@@ -8529,6 +8667,7 @@ function buildCompanionTurnRequest(params) {
   const { turnContext: t } = params;
   return {
     systemPrompt: t.systemPrompt,
+    ...t.standing ? { standing: t.standing } : {},
     prompt: t.prompt,
     content: t.content,
     config: t.config,
@@ -8658,6 +8797,68 @@ var init_codex_images = __esm({
   }
 });
 
+// src/codex-compactions.ts
+import { createReadStream } from "fs";
+import { readdir } from "fs/promises";
+import { homedir as homedir8 } from "os";
+import { join as join23 } from "path";
+import { createInterface as createInterface2 } from "readline";
+function createCodexCompactionCounter(codexHome = process.env.CODEX_HOME || join23(homedir8(), ".codex")) {
+  return async (threadId) => {
+    try {
+      const rollout = await findRollout(codexHome, threadId);
+      return rollout ? await countCompactions(rollout) : null;
+    } catch {
+      return null;
+    }
+  };
+}
+async function findRollout(codexHome, threadId) {
+  const id = UUID_V7.exec(threadId);
+  if (!id) return null;
+  const createdAt = parseInt(`${id[1]}${id[2]}`, 16);
+  const suffix = `-${threadId}.jsonl`;
+  for (const offset of [0, -DAY_MS, DAY_MS]) {
+    const day = new Date(createdAt + offset);
+    const dir2 = join23(
+      codexHome,
+      "sessions",
+      String(day.getUTCFullYear()),
+      String(day.getUTCMonth() + 1).padStart(2, "0"),
+      String(day.getUTCDate()).padStart(2, "0")
+    );
+    let names;
+    try {
+      names = await readdir(dir2);
+    } catch {
+      continue;
+    }
+    const name = names.find((n) => n.startsWith("rollout-") && n.endsWith(suffix));
+    if (name) return join23(dir2, name);
+  }
+  return null;
+}
+async function countCompactions(rollout) {
+  const lines2 = createInterface2({
+    input: createReadStream(rollout, { encoding: "utf8" }),
+    crlfDelay: Infinity
+  });
+  let count = 0;
+  for await (const line of lines2) {
+    if (line.slice(0, RECORD_HEAD_CHARS).includes('"type":"compacted"')) count += 1;
+  }
+  return count;
+}
+var DAY_MS, UUID_V7, RECORD_HEAD_CHARS;
+var init_codex_compactions = __esm({
+  "src/codex-compactions.ts"() {
+    "use strict";
+    DAY_MS = 864e5;
+    UUID_V7 = /^([0-9a-f]{8})-([0-9a-f]{4})-7[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    RECORD_HEAD_CHARS = 200;
+  }
+});
+
 // src/turn-seq-floor.ts
 function resolveSeqFloor(sources, ctx2) {
   const { serverFloor, outboxFloor } = sources;
@@ -8766,15 +8967,15 @@ var init_prepare_failure = __esm({
 
 // src/prepared.ts
 import { mkdirSync as mkdirSync13, readFileSync as readFileSync13, rmSync as rmSync9, writeFileSync as writeFileSync8, existsSync as existsSync13 } from "fs";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 function dirFor(workspaceId) {
-  return join23(cabaneDir(), "prepared", encodeURIComponent(workspaceId));
+  return join24(cabaneDir(), "prepared", encodeURIComponent(workspaceId));
 }
 function conversationDir(workspaceId, conversationId) {
-  return join23(dirFor(workspaceId), encodeURIComponent(conversationId));
+  return join24(dirFor(workspaceId), encodeURIComponent(conversationId));
 }
 function pathFor2(workspaceId, conversationId, agentId) {
-  return join23(conversationDir(workspaceId, conversationId), `${encodeURIComponent(agentId)}.json`);
+  return join24(conversationDir(workspaceId, conversationId), `${encodeURIComponent(agentId)}.json`);
 }
 function readPrepared(workspaceId, conversationId, agentId) {
   const path = pathFor2(workspaceId, conversationId, agentId);
@@ -8812,9 +9013,9 @@ var init_prepared = __esm({
 
 // src/transcript-writer.ts
 import { appendFileSync, chmodSync as chmodSync5, copyFileSync as copyFileSync2, mkdirSync as mkdirSync14, readdirSync as readdirSync2, rmSync as rmSync10 } from "fs";
-import { basename as basename3, dirname as dirname12, join as join24 } from "path";
+import { basename as basename3, dirname as dirname12, join as join25 } from "path";
 function transcriptsDir() {
-  return join24(runnerStateDir(), "transcripts");
+  return join25(runnerStateDir(), "transcripts");
 }
 function fileName(meta) {
   const d = new Date(meta.ts);
@@ -8840,7 +9041,7 @@ function pruneOld(dir2, retain) {
   const drop = files.sort().slice(0, files.length - retain);
   for (const f of drop) {
     try {
-      rmSync10(join24(dir2, f), { force: true });
+      rmSync10(join25(dir2, f), { force: true });
     } catch {
     }
   }
@@ -8858,7 +9059,7 @@ var init_transcript_writer = __esm({
       onWarn;
       constructor(dir2, meta, onWarn) {
         this.onWarn = onWarn;
-        this.path = join24(dir2, fileName(meta));
+        this.path = join25(dir2, fileName(meta));
         try {
           mkdirSync14(dir2, { recursive: true });
           try {
@@ -8887,10 +9088,10 @@ var init_transcript_writer = __esm({
       preserveAnomaly() {
         if (this.broken) return;
         try {
-          const dir2 = join24(dirname12(this.path), "anomalies");
+          const dir2 = join25(dirname12(this.path), "anomalies");
           mkdirSync14(dir2, { recursive: true, mode: 448 });
           chmodSync5(dir2, 448);
-          const target = join24(dir2, basename3(this.path));
+          const target = join25(dir2, basename3(this.path));
           copyFileSync2(this.path, target);
           chmodSync5(target, 384);
           pruneOld(dir2, ANOMALY_RETAIN);
@@ -9190,6 +9391,7 @@ var init_turn_execution = __esm({
     init_bundled_binaries();
     init_codex_instructions();
     init_codex_images();
+    init_codex_compactions();
     init_config();
     init_api_error_shape();
     init_errors();
@@ -9875,6 +10077,8 @@ var init_turn_execution = __esm({
                 turnId: this.turnId,
                 warn: (meta, msg) => turnLog.warn(meta, msg)
               }),
+              // Whether a resumed thread compacted since its standing preamble was sent.
+              countCompactions: createCodexCompactionCounter(),
               ...codexPath ? { transport: createSdkCodexTransport({ codexPathOverride: codexPath }) } : {}
             })
           );
@@ -9935,6 +10139,9 @@ var init_turn_execution = __esm({
           );
           return {
             systemPrompt: context.systemPrompt,
+            // Replaced even when absent, so the segments can't outlive the
+            // `systemPrompt` they were split from.
+            standing: context.standing,
             prompt: context.prompt,
             content: context.content
           };
@@ -10327,7 +10534,7 @@ var init_turn_execution = __esm({
 // src/dispatcher.ts
 import { randomUUID as randomUUID4 } from "crypto";
 import { existsSync as existsSync15, readdirSync as readdirSync3, statSync as statSync3 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 function checkoutState(cwd) {
   if (!cwd) return { ok: false, reason: "no working directory was resolved for this turn" };
   if (!existsSync15(cwd)) return { ok: false, reason: `the working directory is gone (${cwd})` };
@@ -10340,7 +10547,7 @@ function checkoutState(cwd) {
   if (entries.length === 0) {
     return { ok: false, reason: `${cwd} is empty \u2014 a recreated shell, not a prepared directory` };
   }
-  const gitPath = join25(cwd, ".git");
+  const gitPath = join26(cwd, ".git");
   if (!existsSync15(gitPath)) return { ok: true, reason: "usable" };
   let stat;
   try {
@@ -10348,7 +10555,7 @@ function checkoutState(cwd) {
   } catch (error) {
     return { ok: false, reason: `${gitPath} is unreadable (${error.message})` };
   }
-  if (stat.isDirectory() && !existsSync15(join25(gitPath, "HEAD")))
+  if (stat.isDirectory() && !existsSync15(join26(gitPath, "HEAD")))
     return { ok: false, reason: `${gitPath} has no HEAD \u2014 an empty shell, not a checkout` };
   return { ok: true, reason: "usable" };
 }
@@ -10726,8 +10933,8 @@ import {
 } from "fs";
 import { createRequire as createRequire3 } from "module";
 import { isIP } from "net";
-import { homedir as homedir8, networkInterfaces, tmpdir as tmpdir4, userInfo as userInfo3 } from "os";
-import { dirname as dirname14, join as join29, sep as sep5 } from "path";
+import { homedir as homedir9, networkInterfaces, tmpdir as tmpdir4, userInfo as userInfo3 } from "os";
+import { dirname as dirname14, join as join30, sep as sep5 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 import { SandboxManager } from "@anthropic-ai/sandbox-runtime";
 function accountHome() {
@@ -10761,7 +10968,7 @@ async function resolvedAddresses(baseUrl) {
 function companionPackageRoot(modulePath) {
   for (let dir2 = dirname14(modulePath); ; dir2 = dirname14(dir2)) {
     try {
-      const manifest = JSON.parse(readFileSync16(join29(dir2, "package.json"), "utf8"));
+      const manifest = JSON.parse(readFileSync16(join30(dir2, "package.json"), "utf8"));
       if (manifest.name === "@cabane/companion") return dir2;
     } catch {
     }
@@ -10838,22 +11045,22 @@ function companionStoreDenies(input) {
   const always = [
     cabaneDir2,
     ...homes.flatMap((home) => [
-      join29(home, ".cabane"),
-      join29(home, "*", ".cabane"),
-      join29(home, "*", "*", ".cabane")
+      join30(home, ".cabane"),
+      join30(home, "*", ".cabane"),
+      join30(home, "*", "*", ".cabane")
     ]),
     // A glob anchored at the root has no directory to start from.
-    ...dirname14(parent) === parent ? [] : [join29(parent, "*", ".cabane")]
+    ...dirname14(parent) === parent ? [] : [join30(parent, "*", ".cabane")]
   ];
   const companionHome = dirname14(cabaneDir2);
-  const otherLogins = foundStores.map((store) => dirname14(store)).filter((home) => home !== companionHome).flatMap((home) => [join29(home, ".claude"), join29(home, ".codex")]).filter((path) => !input.ownState.some((own) => isAtOrUnder(own, path)));
+  const otherLogins = foundStores.map((store) => dirname14(store)).filter((home) => home !== companionHome).flatMap((home) => [join30(home, ".claude"), join30(home, ".codex")]).filter((path) => !input.ownState.some((own) => isAtOrUnder(own, path)));
   return [.../* @__PURE__ */ new Set([...always, ...foundStores, ...otherLogins])];
 }
 function companionStoreWatch(log2) {
   return new CompanionStoreWatch({
     log: log2,
     roots: () => {
-      const home = homedir8();
+      const home = homedir9();
       return storeWalkRoots([.../* @__PURE__ */ new Set([home, accountHome() ?? home])], cabaneDir());
     }
   });
@@ -10863,7 +11070,7 @@ function isAtOrUnder(path, dir2) {
 }
 function expandHome(path, home) {
   if (path === "~") return home;
-  return path.startsWith("~/") ? join29(home, path.slice(2)) : path;
+  return path.startsWith("~/") ? join30(home, path.slice(2)) : path;
 }
 function stripPort(pattern) {
   return pattern.startsWith("[") ? pattern.replace(/^\[([^\]]+)\](:\d+)?$/, "$1") : pattern.replace(/:\d+$/, "");
@@ -10881,8 +11088,8 @@ function patternsOverlap(a, b) {
 }
 function harnessSandboxConfig(input) {
   const { policy } = input;
-  const claudeDir = input.claudeConfigDir ?? join29(input.home, ".claude");
-  const codexDir = input.codexHome ?? join29(input.home, ".codex");
+  const claudeDir = input.claudeConfigDir ?? join30(input.home, ".claude");
+  const codexDir = input.codexHome ?? join30(input.home, ".codex");
   const homes = [.../* @__PURE__ */ new Set([input.home, input.accountHome ?? input.home])];
   const expand = (paths) => (paths ?? []).map((p) => expandHome(p, input.home));
   const cabane2 = cabaneHostEntries(input.baseUrl, input.resolved, input.ownAddresses);
@@ -10899,7 +11106,7 @@ function harnessSandboxConfig(input) {
       foundStores: input.foundStores,
       ownState: [claudeDir, codexDir]
     }),
-    ...homes.flatMap((home) => SECRET_PATHS_UNDER_HOME.map((p) => join29(home, p))),
+    ...homes.flatMap((home) => SECRET_PATHS_UNDER_HOME.map((p) => join30(home, p))),
     ...expand(policy.filesystem?.denyRead)
   ];
   const strict = policy.filesystem?.mode === "strict";
@@ -10907,7 +11114,7 @@ function harnessSandboxConfig(input) {
   const allowRead = strict ? [
     ...input.cwd ? [input.cwd] : [],
     claudeDir,
-    join29(input.home, ".claude.json"),
+    join30(input.home, ".claude.json"),
     codexDir,
     ...input.runtimePaths ?? [],
     ...expand(policy.filesystem?.allowRead)
@@ -10947,7 +11154,7 @@ function harnessSandboxConfig(input) {
         ...input.cwd ? [input.cwd] : [],
         input.tmp,
         claudeDir,
-        join29(input.home, ".claude.json"),
+        join30(input.home, ".claude.json"),
         codexDir,
         ...expand(policy.filesystem?.allowWrite)
       ],
@@ -10998,7 +11205,7 @@ async function prepareHarnessSandbox(input) {
       baseUrl: input.baseUrl,
       resolved: await resolvedAddresses(input.baseUrl),
       ownAddresses: ownAddresses(),
-      home: homedir8(),
+      home: homedir9(),
       accountHome: accountHome(),
       tmp: tmpdir4(),
       cabaneDir: cabaneDir(),
@@ -11049,9 +11256,9 @@ async function prepareHarnessSandbox(input) {
   } finally {
     for (const name of held) delete process.env[name];
   }
-  mkdirSync17(join29(cabaneDir(), "sandbox"), { recursive: true });
-  const dir2 = mkdtempSync(join29(cabaneDir(), "sandbox", "turn-"));
-  const script = join29(dir2, "exec-sandboxed");
+  mkdirSync17(join30(cabaneDir(), "sandbox"), { recursive: true });
+  const dir2 = mkdtempSync(join30(cabaneDir(), "sandbox", "turn-"));
+  const script = join30(dir2, "exec-sandboxed");
   writeFileSync10(
     script,
     [
@@ -11067,7 +11274,7 @@ async function prepareHarnessSandbox(input) {
   return {
     wrap: (command, args) => ({ command: script, args: [command, ...args] }),
     executableFor: (real) => {
-      const shim = join29(dir2, `exec-${++shims}`);
+      const shim = join30(dir2, `exec-${++shims}`);
       writeFileSync10(shim, `#!/bin/bash
 exec ${shellQuote(script)} ${shellQuote(real)} "$@"
 `);
@@ -11160,7 +11367,7 @@ import {
   rmSync as rmSync15,
   writeFileSync as writeFileSync11
 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 var MAX_ENTRIES, MAX_AGE_MS, Outbox;
 var init_outbox = __esm({
   "src/outbox.ts"() {
@@ -11178,10 +11385,10 @@ var init_outbox = __esm({
       // Resolved lazily (per call) so tests that swap HOME between
       // cases route writes at the right tmpdir.
       dir() {
-        return join30(runnerStateDir(), "outbox", encodeURIComponent(this.workspaceId));
+        return join31(runnerStateDir(), "outbox", encodeURIComponent(this.workspaceId));
       }
       fileFor(turnId, seq) {
-        return join30(this.dir(), `${encodeURIComponent(turnId)}__${seq}.json`);
+        return join31(this.dir(), `${encodeURIComponent(turnId)}__${seq}.json`);
       }
       // Persist a commit for later draining. Atomic (temp file + rename) so a
       // concurrent `list()` never reads a half-written entry, then enforces the
@@ -11223,7 +11430,7 @@ var init_outbox = __esm({
         const entries = [];
         for (const name of names) {
           if (!name.endsWith(".json")) continue;
-          const full = join30(dir2, name);
+          const full = join31(dir2, name);
           try {
             const parsed = JSON.parse(readFileSync17(full, "utf8"));
             if (parsed && typeof parsed.turnId === "string" && typeof parsed.seq === "number" && typeof parsed.path === "string") {
@@ -11352,7 +11559,7 @@ var init_image_manifest = __esm({
 
 // src/runner/exec-shim.ts
 import { chmodSync as chmodSync8, mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync2, rmSync as rmSync17, writeFileSync as writeFileSync13 } from "fs";
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 function shellQuote2(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
@@ -11362,10 +11569,10 @@ function createShimDir() {
   return {
     write(argv) {
       if (!dir2) {
-        mkdirSync20(join34(cabaneDir(), "runner"), { recursive: true });
-        dir2 = mkdtempSync2(join34(cabaneDir(), "runner", "turn-"));
+        mkdirSync20(join35(cabaneDir(), "runner"), { recursive: true });
+        dir2 = mkdtempSync2(join35(cabaneDir(), "runner", "turn-"));
       }
-      const path = join34(dir2, `exec-${++count}`);
+      const path = join35(dir2, `exec-${++count}`);
       writeFileSync13(path, `#!/bin/sh
 exec ${argv.map(shellQuote2).join(" ")} "$@"
 `);
@@ -11386,7 +11593,7 @@ var init_exec_shim = __esm({
 });
 
 // src/runner/launcher-channel.ts
-import { createInterface as createInterface2 } from "readline";
+import { createInterface as createInterface3 } from "readline";
 function openLauncherChannel(stdin, emit, onLauncherGone) {
   const waiting = /* @__PURE__ */ new Map();
   const replies = /* @__PURE__ */ new Map();
@@ -11394,7 +11601,7 @@ function openLauncherChannel(stdin, emit, onLauncherGone) {
   let resolveFirst;
   let gotFirst = false;
   const first = new Promise((resolve2) => resolveFirst = resolve2);
-  const lines2 = createInterface2({ input: stdin, crlfDelay: Infinity });
+  const lines2 = createInterface3({ input: stdin, crlfDelay: Infinity });
   lines2.on("line", (line) => {
     if (!gotFirst) {
       gotFirst = true;
@@ -15754,7 +15961,7 @@ function createLocalProcessProvider(opts = {}) {
 import { createHash as createHash5, randomUUID as randomUUID5 } from "crypto";
 import { constants as constants3, tmpdir as tmpdir3 } from "os";
 import {
-  createReadStream,
+  createReadStream as createReadStream2,
   createWriteStream as createWriteStream2,
   existsSync as existsSync18,
   mkdirSync as mkdirSync16,
@@ -15765,7 +15972,7 @@ import {
   statSync as statSync4,
   writeFileSync as writeFileSync9
 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 import { Writable } from "stream";
 
 // src/providers/docker-cli.ts
@@ -15838,7 +16045,7 @@ import {
   renameSync as renameSync10,
   rmSync as rmSync12
 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 function routes(t) {
   const conv = `/api/workspaces/${t.workspaceId}/conversations/${t.conversationId}`;
   const agent = `${conv}/participants/agents/${t.agentId}`;
@@ -15884,7 +16091,7 @@ function publishStaged(from, to, move = atomicMove) {
   const staged = readdirSync4(from).filter((n) => n.endsWith(".json")).map((name) => {
     let entry = {};
     try {
-      entry = JSON.parse(readFileSync14(join26(from, name), "utf8"));
+      entry = JSON.parse(readFileSync14(join27(from, name), "utf8"));
     } catch {
     }
     return { name, entry };
@@ -15897,7 +16104,7 @@ function publishStaged(from, to, move = atomicMove) {
   let published = 0;
   for (const { name } of staged) {
     try {
-      move(join26(from, name), join26(to, name));
+      move(join27(from, name), join27(to, name));
     } catch {
       return { published, complete: false };
     }
@@ -15910,7 +16117,7 @@ function publishStaged(from, to, move = atomicMove) {
 // src/providers/runner-base.ts
 import { createHash as createHash4 } from "crypto";
 import { existsSync as existsSync17, realpathSync as realpathSync6 } from "fs";
-import { dirname as dirname13, join as join27, sep as sep4 } from "path";
+import { dirname as dirname13, join as join28, sep as sep4 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 var COMPANION_MOUNT = "/opt/cabane/companion";
 var BASE_DOCKERFILE = `FROM node:22-slim
@@ -15958,11 +16165,11 @@ async function ensureBaseImage(docker, image, log2) {
 function ownInstall(moduleFile = fileURLToPath6(import.meta.url)) {
   let dir2 = dirname13(moduleFile);
   for (let i = 0; i < 4; i++) {
-    if (existsSync17(join27(dir2, "dist", "cli.js")) && existsSync17(join27(dir2, "package.json"))) break;
+    if (existsSync17(join28(dir2, "dist", "cli.js")) && existsSync17(join28(dir2, "package.json"))) break;
     dir2 = dirname13(dir2);
   }
-  if (!existsSync17(join27(dir2, "dist", "cli.js"))) return null;
-  const sdk = join27(dir2, "node_modules", "@anthropic-ai", "claude-agent-sdk");
+  if (!existsSync17(join28(dir2, "dist", "cli.js"))) return null;
+  const sdk = join28(dir2, "node_modules", "@anthropic-ai", "claude-agent-sdk");
   if (!existsSync17(sdk)) return null;
   const root = realpathSync6(dir2);
   return realpathSync6(sdk).startsWith(root + sep4) ? root : null;
@@ -16101,39 +16308,39 @@ function networkCreateError(stderr) {
 }
 function sessionArchivePath(deviceDir, attemptId) {
   if (!UUID_RE.test(attemptId)) throw new Error(`docker: not an attempt id: ${attemptId}`);
-  return join28(deviceDir, "attempts", attemptId, "session.tar");
+  return join29(deviceDir, "attempts", attemptId, "session.tar");
 }
 function pruneOtherAttempts(deviceDir, pair2, keep) {
-  const root = join28(deviceDir, "attempts");
+  const root = join29(deviceDir, "attempts");
   if (!existsSync18(root)) return;
   for (const id of readdirSync5(root)) {
     if (id === keep || !UUID_RE.test(id)) continue;
     let pairOf = "";
     try {
-      pairOf = readFileSync15(join28(root, id, "pair"), "utf8");
+      pairOf = readFileSync15(join29(root, id, "pair"), "utf8");
     } catch {
       continue;
     }
     if (pairOf === `${pair2.conversationId}/${pair2.agentId}`) {
-      rmSync13(join28(root, id), { recursive: true, force: true });
+      rmSync13(join29(root, id), { recursive: true, force: true });
     }
   }
 }
 var IDLE_SESSION_ARCHIVE_MS = 30 * 24 * 60 * 6e4;
 function pruneIdleSessionArchives(deviceDir, now = Date.now(), maxAgeMs = IDLE_SESSION_ARCHIVE_MS) {
-  const root = join28(deviceDir, "attempts");
+  const root = join29(deviceDir, "attempts");
   if (!existsSync18(root)) return [];
   const removed = [];
   for (const id of readdirSync5(root)) {
     if (!UUID_RE.test(id)) continue;
     let kept;
     try {
-      kept = statSync4(join28(root, id)).mtimeMs;
+      kept = statSync4(join29(root, id)).mtimeMs;
     } catch {
       continue;
     }
     if (now - kept < maxAgeMs) continue;
-    rmSync13(join28(root, id), { recursive: true, force: true });
+    rmSync13(join29(root, id), { recursive: true, force: true });
     removed.push(id);
   }
   return removed;
@@ -16334,11 +16541,11 @@ function createDockerProvider(opts) {
       await must(["network", "disconnect", "-f", other, name], "moving the container");
     if (others.includes(sharedNetwork)) await retireSharedNetwork();
   };
-  const socketRoot = opts.socketRoot ?? join28(
+  const socketRoot = opts.socketRoot ?? join29(
     process.env.XDG_RUNTIME_DIR && existsSync18(process.env.XDG_RUNTIME_DIR) ? process.env.XDG_RUNTIME_DIR : tmpdir3(),
     `cabane-runners-${opts.deviceKey}`
   );
-  const socketDir = (name) => join28(socketRoot, createHash5("sha256").update(name).digest("hex").slice(0, 12));
+  const socketDir = (name) => join29(socketRoot, createHash5("sha256").update(name).digest("hex").slice(0, 12));
   const create = async (name, attempt) => {
     mkdirSync16(socketRoot, { recursive: true, mode: 448 });
     mkdirSync16(socketDir(name), { recursive: true, mode: 457 });
@@ -16480,7 +16687,7 @@ function createDockerProvider(opts) {
     }
   };
   const removeIn = (name, from, names) => names.length ? execIn(name, ["sh", "-c", 'cd "$1" && shift && rm -f -- "$@"', "sh", from, ...names]) : Promise.resolve(null);
-  const pendingPath = (name) => join28(opts.deviceDir, "runners-pending", `${name}.json`);
+  const pendingPath = (name) => join29(opts.deviceDir, "runners-pending", `${name}.json`);
   const readPending = (name) => {
     try {
       const ids = JSON.parse(readFileSync15(pendingPath(name), "utf8"));
@@ -16494,12 +16701,12 @@ function createDockerProvider(opts) {
       rmSync13(pendingPath(name), { force: true });
       return;
     }
-    mkdirSync16(join28(opts.deviceDir, "runners-pending"), { recursive: true });
+    mkdirSync16(join29(opts.deviceDir, "runners-pending"), { recursive: true });
     writeFileSync9(pendingPath(name), JSON.stringify([...new Set(ids)]));
   };
   const keepSession = async (name, attempt, attemptId) => {
     const archive = sessionArchivePath(opts.deviceDir, attemptId);
-    mkdirSync16(join28(archive, ".."), { recursive: true });
+    mkdirSync16(join29(archive, ".."), { recursive: true });
     const partial = `${archive}.${process.pid}.partial`;
     const file = new CappedFile(partial, sessionCap);
     const r = await execIn(
@@ -16516,7 +16723,7 @@ function createDockerProvider(opts) {
     );
     if (r.code === 0 && !file.over) {
       renameSync11(partial, archive);
-      writeFileSync9(join28(archive, "..", "pair"), `${attempt.conversationId}/${attempt.agentId}`);
+      writeFileSync9(join29(archive, "..", "pair"), `${attempt.conversationId}/${attempt.agentId}`);
       pruneOtherAttempts(opts.deviceDir, attempt, attemptId);
       await writeMarker(name, attemptId);
       log2.debug({ container: name, attemptId, bytes: file.bytes }, "runners: session files kept");
@@ -16530,7 +16737,7 @@ function createDockerProvider(opts) {
       file.over ? "runners: the session files are over the size cap and weren't kept; the next new container starts the session over" : "runners: couldn't keep the session files; the next new container starts the session over"
     );
   };
-  const stagingDir = (name) => join28(opts.deviceDir, "runners-pending", `${name}.outbox`);
+  const stagingDir = (name) => join29(opts.deviceDir, "runners-pending", `${name}.outbox`);
   const ensureRunning = async (name) => {
     const seen = await docker.run(["inspect", "-f", "{{.State.Running}}", name]);
     if (seen.code !== 0) return false;
@@ -16538,7 +16745,7 @@ function createDockerProvider(opts) {
     return (await docker.run(["start", name])).code === 0;
   };
   const dropArchive = (attemptId) => {
-    rmSync13(join28(sessionArchivePath(opts.deviceDir, attemptId), ".."), {
+    rmSync13(join29(sessionArchivePath(opts.deviceDir, attemptId), ".."), {
       recursive: true,
       force: true
     });
@@ -16607,7 +16814,7 @@ function createDockerProvider(opts) {
         if (seen.stdout.trim().split(" ")[0] !== "true")
           await must(["start", name], "starting the container");
         const git = await serveGitCredentials({
-          socketPath: join28(socketDir(name), "git.sock"),
+          socketPath: join29(socketDir(name), "git.sock"),
           hosts: opts.gitHosts,
           fill: opts.gitFill,
           log: log2
@@ -16643,7 +16850,7 @@ function createDockerProvider(opts) {
         const archive = sessionArchivePath(opts.deviceDir, attemptId);
         if (existsSync18(archive)) {
           const r = await execIn(name, ["tar", "-x", "-C", CONTAINER_HOME, "-f", "-"], {
-            input: createReadStream(archive)
+            input: createReadStream2(archive)
           });
           if (r.code !== 0) {
             log2.warn(
@@ -16756,15 +16963,15 @@ function createDockerProvider(opts) {
       const transcripts = await readDir(name, `${CONTAINER_STATE}/transcripts`);
       if (transcripts) {
         const kept = transcripts.files.filter((f) => SAFE_NAME_RE.test(f.name));
-        if (kept.length) mkdirSync16(join28(opts.hostStateDir, "transcripts"), { recursive: true });
-        for (const f of kept) writeFileSync9(join28(opts.hostStateDir, "transcripts", f.name), f.data);
+        if (kept.length) mkdirSync16(join29(opts.hostStateDir, "transcripts"), { recursive: true });
+        for (const f of kept) writeFileSync9(join29(opts.hostStateDir, "transcripts", f.name), f.data);
         await removeIn(
           name,
           `${CONTAINER_STATE}/transcripts`,
           kept.map((f) => f.name)
         );
       }
-      const outboxRel = join28("outbox", encodeURIComponent(attempt.agentId));
+      const outboxRel = join29("outbox", encodeURIComponent(attempt.agentId));
       const outbox = await readDir(name, `${CONTAINER_STATE}/${outboxRel}`);
       let unpublished = false;
       if (outbox) {
@@ -16790,7 +16997,7 @@ function createDockerProvider(opts) {
           const staged = stagingDir(name);
           mkdirSync16(staged, { recursive: true });
           writeFileSync9(
-            join28(staged, `${encodeURIComponent(entry.turnId)}__${entry.seq}.json`),
+            join29(staged, `${encodeURIComponent(entry.turnId)}__${entry.seq}.json`),
             `${JSON.stringify(entry)}
 `
           );
@@ -16803,7 +17010,7 @@ function createDockerProvider(opts) {
         if (outbox.complete) {
           const published = publishStaged(
             stagingDir(name),
-            join28(opts.hostStateDir, outboxRel),
+            join29(opts.hostStateDir, outboxRel),
             opts.moveFile
           );
           queued = published.published;
@@ -18778,9 +18985,9 @@ function handleUncaught(log2, err, origin) {
 // src/crash-marker.ts
 init_config();
 import { existsSync as existsSync20, mkdirSync as mkdirSync19, readFileSync as readFileSync18, rmSync as rmSync16, writeFileSync as writeFileSync12 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 function crashMarkerPath() {
-  return join31(cabaneDir(), "last-error.json");
+  return join32(cabaneDir(), "last-error.json");
 }
 function recordCrash(rec2) {
   try {
@@ -19093,8 +19300,8 @@ async function runAttached(runtime) {
 init_install_kind();
 init_cabane_command();
 import { readdirSync as readdirSync7, realpathSync as realpathSync8, existsSync as existsSync21 } from "fs";
-import { homedir as homedir9 } from "os";
-import { dirname as dirname15, join as join32 } from "path";
+import { homedir as homedir10 } from "os";
+import { dirname as dirname15, join as join33 } from "path";
 init_config();
 init_sandbox_policy();
 init_secrets();
@@ -19163,7 +19370,7 @@ function versionLine() {
   const install = companionInstall();
   const own = installedCommandPath({ install });
   if (install === "script") {
-    return `Cabane ${COMPANION_VERSION} \xB7 installed by the install script (${tildePath(join32(homedir9(), ".cabane"))})`;
+    return `Cabane ${COMPANION_VERSION} \xB7 installed by the install script (${tildePath(join33(homedir10(), ".cabane"))})`;
   }
   if (own)
     return `Cabane ${COMPANION_VERSION} \xB7 installed with npm (${tildePath(dirname15(dirname15(own)))})`;
@@ -19189,8 +19396,8 @@ function otherInstall(install, own) {
     }
   };
   if (install === "npm") {
-    const script = join32(
-      homedir9(),
+    const script = join33(
+      homedir10(),
       ".cabane",
       "node",
       "lib",
@@ -19198,11 +19405,11 @@ function otherInstall(install, own) {
       "@cabane",
       "companion"
     );
-    return existsSync21(script) ? join32(homedir9(), ".cabane") : null;
+    return existsSync21(script) ? join33(homedir10(), ".cabane") : null;
   }
   const found = firstOnPath("cabane-companion", process.env.PATH);
   if (!found) return null;
-  const ownAlias = own ? real(join32(dirname15(own), "cabane-companion")) : null;
+  const ownAlias = own ? real(join33(dirname15(own), "cabane-companion")) : null;
   return real(found) === ownAlias ? null : dirname15(found);
 }
 async function liveState() {
@@ -19429,7 +19636,7 @@ init_errors();
 init_src();
 init_transcript_writer();
 import { existsSync as existsSync22, readFileSync as readFileSync19, readdirSync as readdirSync8 } from "fs";
-import { isAbsolute, join as join33 } from "path";
+import { isAbsolute, join as join34 } from "path";
 async function transcript(opts = {}) {
   const dir2 = transcriptsDir();
   if (opts.follow) {
@@ -19446,7 +19653,7 @@ async function transcript(opts = {}) {
       process.stdout.write(emptyMessage(dir2));
       return;
     }
-    process.stdout.write(renderFile(join33(dir2, newest)) + "\n");
+    process.stdout.write(renderFile(join34(dir2, newest)) + "\n");
     return;
   }
   printList(dir2);
@@ -19529,7 +19736,7 @@ function isComplete(content) {
 async function followTranscripts(dir2) {
   const follower = new TranscriptFollower({
     listFiles: () => listFiles(dir2),
-    read: (f) => readFileSync19(join33(dir2, f), "utf8"),
+    read: (f) => readFileSync19(join34(dir2, f), "utf8"),
     write: (s) => process.stdout.write(s),
     // CSI: cursor up `n` lines, then erase from cursor to end of screen.
     clearLines: (n) => process.stdout.write(`\x1B[${n}A\x1B[0J`),
@@ -19569,7 +19776,7 @@ function printList(dir2) {
 
 `);
   for (const f of files.slice(0, 20)) {
-    const { meta, outcome } = peek(join33(dir2, f));
+    const { meta, outcome } = peek(join34(dir2, f));
     const when = fmtTime(rec(meta)?.ts);
     const ws = str2(rec(meta)?.workspaceSlug);
     const o = rec(outcome);
@@ -19607,10 +19814,10 @@ function resolveTarget(dir2, target) {
     if (existsSync22(target)) return target;
     throw new CompanionError(`no transcript at ${target}.`);
   }
-  const exact = join33(dir2, target);
+  const exact = join34(dir2, target);
   if (existsSync22(exact)) return exact;
   const matches = listFiles(dir2).filter((f) => f.includes(target));
-  if (matches.length === 1) return join33(dir2, matches[0]);
+  if (matches.length === 1) return join34(dir2, matches[0]);
   if (matches.length === 0) {
     throw new CompanionError(
       `no transcript matching "${target}" in ${dir2}. Run \`${cabane("transcript")}\` to list them.`