@centralu/darwin-arm64 0.1.0-beta.39 → 0.1.0-beta.41

package/Centralu.app/Contents/Resources/resources/host/main.mjs

@@ -1470,7 +1470,7 @@ var require_sender = __commonJS({
        */
       static frame(data, options) {
         let mask;
-        let merge2 = false;
+        let merge3 = false;
         let offset = 2;
         let skipMasking = false;
         if (options.mask) {
@@ -1503,7 +1503,7 @@ var require_sender = __commonJS({
           }
         } else {
           dataLength = data.length;
-          merge2 = options.mask && options.readOnly && !skipMasking;
+          merge3 = options.mask && options.readOnly && !skipMasking;
         }
         let payloadLength = dataLength;
         if (dataLength >= 65536) {
@@ -1513,7 +1513,7 @@ var require_sender = __commonJS({
           offset += 2;
           payloadLength = 126;
         }
-        const target = Buffer.allocUnsafe(merge2 ? dataLength + offset : offset);
+        const target = Buffer.allocUnsafe(merge3 ? dataLength + offset : offset);
         target[0] = options.fin ? options.opcode | 128 : options.opcode;
         if (options.rsv1) target[0] |= 64;
         target[1] = payloadLength;
@@ -1530,7 +1530,7 @@ var require_sender = __commonJS({
         target[offset - 2] = mask[2];
         target[offset - 1] = mask[3];
         if (skipMasking) return [target, data];
-        if (merge2) {
+        if (merge3) {
           applyMask(data, mask, target, offset, dataLength);
           return [target];
         }
@@ -2286,7 +2286,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes12, createHash: createHash11 } = __require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash11 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -2824,7 +2824,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes12(16).toString("base64");
+      const key = randomBytes13(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -43048,13 +43048,13 @@ function refuse(message, io2 = realIo) {
 
 // packages/agent-host/src/main.ts
 import { parseArgs } from "node:util";
-import { randomBytes as randomBytes11 } from "node:crypto";
+import { randomBytes as randomBytes12 } from "node:crypto";
 import { hostname as hostname5 } from "node:os";
-import { dirname as dirname23, join as join52 } from "node:path";
-import { mkdirSync as mkdirSync19, writeSync as writeSync3 } from "node:fs";
+import { dirname as dirname26, join as join57 } from "node:path";
+import { mkdirSync as mkdirSync20, writeSync as writeSync3 } from "node:fs";
 
 // packages/protocol/src/version.generated.ts
-var APP_VERSION = "0.1.0-beta.39";
+var APP_VERSION = "0.1.0-beta.41";
 
 // packages/protocol/src/brand.ts
 var APP_NAME = "Centralu";
@@ -43998,14 +43998,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str4 = "";
+  let str5 = "";
   for (let i = 0; i < length; i++) {
-    str4 += chars[Math.floor(Math.random() * chars.length)];
+    str5 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str4;
+  return str5;
 }
-function esc(str4) {
-  return JSON.stringify(str4);
+function esc(str5) {
+  return JSON.stringify(str5);
 }
 function slugify(input) {
   return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -44119,8 +44119,8 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex(str4) {
-  return str4.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str5) {
+  return str5.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl2 = new inst._zod.constr(def ?? inst._zod.def);
@@ -57740,6 +57740,7 @@ function isProjectId(value) {
 }
 var ToolName = external_exports.string().min(1);
 var AppId = external_exports.string();
+var PermissionPreset = external_exports.enum(["safe", "normal", "edits", "auto"]);
 
 // packages/protocol/src/entities/sessions.ts
 var SessionState = external_exports.enum(["idle", "working", "waiting_approval", "waiting_input", "limited", "error"]);
@@ -57885,7 +57886,9 @@ var MachineOperation = external_exports.object({
   step: external_exports.string(),
   /** The version it brings the machine to, when there is one */
   target: external_exports.string().nullable().default(null),
-  at: external_exports.number()
+  at: external_exports.number(),
+  /** What `wait_idle` (sessions in a turn) or `wait_open` (open terminals and project commands) waits for: how many. Additive (#1579) */
+  count: external_exports.number().optional()
 });
 var MachineAutostart = external_exports.object({
   on: external_exports.boolean().catch(false),
@@ -58502,8 +58505,40 @@ var AdapterCapabilities = external_exports.object({
    * process reads the prompt cache as a live one does (~100% at 2, 6 and 10 minutes on the 1 h lifetime), for +0.7 s
    * (p50) before the first token (#561). Absent is false: a tool whose resume is slow or untested keeps its process.
    */
-  sleep: external_exports.boolean().optional()
+  sleep: external_exports.boolean().optional(),
+  /**
+   * The permission presets this tool can keep (docs/plans/acp-adapter.md §5.3). Absent: every preset. Cursor's ACP
+   * server has no switch that makes it ask before every change, so it does not list `safe`, and a session asked to run
+   * it under `safe` is refused (`launchRefusal`) rather than run under a promise it cannot keep.
+   */
+  presets: external_exports.array(PermissionPreset).optional(),
+  /**
+   * Whether the tool can be kept from reading the repository's own files (`.cursor/rules`, `AGENTS.md`, its config)
+   * when the project is not trusted (#92). Absent: true. False: it runs only in trusted projects.
+   */
+  keepsRepoFilesOut: external_exports.boolean().optional(),
+  /**
+   * Whether the tool takes Centralu's role text (`systemPromptAppend`). Absent: true. False: it cannot be a session that
+   * is given one (the orchestrator, a coordinator, an app's agent), nor one that must read no setting files.
+   */
+  roleText: external_exports.boolean().optional()
 });
+var ORCHESTRATOR_DEMANDS = { permissionPreset: "normal", projectTrusted: false, noSettingFiles: true, roleText: true };
+function launchRefusal(caps, label, demands) {
+  if (caps.roleText === false && (demands.roleText || demands.noSettingFiles)) {
+    return `${label} cannot take Centralu's role instructions yet, so it cannot run the orchestrator, a coordinator or an app's agent.`;
+  }
+  if (caps.keepsRepoFilesOut === false && !demands.projectTrusted) {
+    return `${label} cannot be kept from reading a project's own files (such as AGENTS.md and its rules), so it runs only in trusted projects.`;
+  }
+  if (caps.presets && !caps.presets.includes(demands.permissionPreset)) {
+    const kept = caps.presets.map((p) => PRESET_LABEL[p]).join(" or ");
+    const asked = PRESET_LABEL[demands.permissionPreset];
+    return `${label} cannot be made to ask before a change as ${asked} does, so it cannot run under ${asked}${kept ? ` (only under ${kept})` : ""}.`;
+  }
+  return null;
+}
+var PRESET_LABEL = { safe: "Safe", normal: "Normal", edits: "Edits", auto: "Auto" };
 var ModelOption = external_exports.object({
   id: external_exports.string(),
   label: external_exports.string(),
@@ -58522,7 +58557,6 @@ var ModelOption = external_exports.object({
 });
 
 // packages/protocol/src/entities/approvals.ts
-var PermissionPreset = external_exports.enum(["safe", "normal", "edits", "auto"]);
 var ApprovalDecision = external_exports.enum(["allow", "deny", "always"]);
 var ProjectConsentKind = external_exports.enum(["delegate", "apps", "agents"]);
 var ApprovalScope = external_exports.enum(["session", "project"]);
@@ -59440,8 +59474,8 @@ function alwaysAllowKey(detail) {
   if (detail.kind === "file_edit" && detail.path.trim() !== "" && detail.path !== NO_PATH) return detail.path;
   return "";
 }
-function matchesAllowRule(key, matcher) {
-  return key === matcher;
+function matchesAllowRule(key, matcher2) {
+  return key === matcher2;
 }
 
 // packages/protocol/src/events.ts
@@ -64520,6 +64554,9 @@ function commandInterpreter(env = process.env) {
 function clonesFiles(platform = HOST_PLATFORM) {
   return platform === "darwin";
 }
+function installsCliAsVersionFolders(platform = HOST_PLATFORM) {
+  return platform === "win32";
+}
 function locksRunningPrograms(platform = HOST_PLATFORM) {
   return platform === "win32";
 }
@@ -64529,6 +64566,13 @@ function usesShippedConpty(platform = HOST_PLATFORM) {
 function locksWatchedFolders(platform = HOST_PLATFORM) {
   return platform === "win32";
 }
+function systemSettingsFolder(app2, env = process.env, platform = HOST_PLATFORM) {
+  if (platform === "win32") return win32.join(env.ProgramData || "C:\\ProgramData", app2);
+  return platform === "darwin" ? `/Library/Application Support/${app2}` : `/etc/${app2}`;
+}
+function openCodeMatchesAnyCase(platform = HOST_PLATFORM) {
+  return platform === "win32";
+}
 function programFile(name, platform = HOST_PLATFORM) {
   return platform === "win32" ? `${name}.exe` : name;
 }
@@ -66281,15 +66325,15 @@ function buildViewCsp(csp) {
   const frame = sanitizeDomains(csp?.frameDomains);
   const base2 = sanitizeDomains(csp?.baseUriDomains);
   const r = resource.kept.join(" ");
-  const join53 = (...parts) => parts.filter(Boolean).join(" ");
+  const join58 = (...parts) => parts.filter(Boolean).join(" ");
   const policy = [
     "default-src 'none'",
-    `script-src ${join53("'unsafe-inline'", r)}`,
-    `style-src ${join53("'unsafe-inline'", r)}`,
-    `img-src ${join53("data: blob:", r)}`,
-    `font-src ${join53("data:", r)}`,
-    `media-src ${join53("data: blob:", r)}`,
-    `worker-src ${join53("blob:", r)}`,
+    `script-src ${join58("'unsafe-inline'", r)}`,
+    `style-src ${join58("'unsafe-inline'", r)}`,
+    `img-src ${join58("data: blob:", r)}`,
+    `font-src ${join58("data:", r)}`,
+    `media-src ${join58("data: blob:", r)}`,
+    `worker-src ${join58("blob:", r)}`,
     `connect-src ${connect2.kept.length ? connect2.kept.join(" ") : "'none'"}`,
     `frame-src ${frame.kept.length ? frame.kept.join(" ") : "'none'"}`,
     "form-action 'none'",
@@ -67050,8 +67094,8 @@ function launchFor(path2, deps = realDeps(), depth = 0) {
     return plain3;
   }
   const dir = win325.dirname(path2);
-  const relative9 = shimTarget(text2);
-  const target = relative9 ? win325.resolve(dir, relative9) : nodeShimEntry(text2, dir, deps);
+  const relative10 = shimTarget(text2);
+  const target = relative10 ? win325.resolve(dir, relative10) : nodeShimEntry(text2, dir, deps);
   if (!target || !deps.exists(target)) return plain3;
   if (/\.(c|m)?js$/i.test(target)) return { command: deps.node, args: [target] };
   if (/\.exe$/i.test(target)) return { command: target, args: [] };
@@ -67073,9 +67117,9 @@ function nodeShimEntry(text2, dir, deps) {
   const started = /^\s*"%NODE_EXE%"\s+"%(\w+)%"\s+%\*\s*$/m.exec(text2)?.[1];
   if (!started) return null;
   const set3 = (name) => new RegExp(`^\\s*SET\\s+"${name}=%~dp0\\\\?([^"%]+)"`, "im").exec(text2)?.[1]?.trim() ?? null;
-  const relative9 = set3(started);
-  if (!relative9) return null;
-  const base2 = win325.resolve(dir, relative9);
+  const relative10 = set3(started);
+  if (!relative10) return null;
+  const base2 = win325.resolve(dir, relative10);
   const prefixJs = set3("NPM_PREFIX_JS");
   if (!prefixJs || !deps.runJs) return base2;
   const prefix = deps.runJs(win325.resolve(dir, prefixJs))?.trim().split(/\r?\n/).pop()?.trim();
@@ -67251,6 +67295,24 @@ function shoot(handle, signal, os2 = REAL_OS) {
   const tree = descendants(rows3, [pid]);
   return rows3.filter((r) => tree.has(r.pid));
 }
+function notedGroups(rows3, root3, known, self2) {
+  if (rows3.length === 0) return new Set(known);
+  const live2 = new Set(rows3.map((r) => r.pgid));
+  const kept = new Set([...known].filter((g5) => live2.has(g5)));
+  if (rows3.some((r) => r.pid === root3)) {
+    for (const g5 of killTargets([...rows3], root3, self2)) if (g5 !== root3) kept.add(g5);
+  }
+  return kept;
+}
+async function noteGroups(root3, known, platform = process.platform) {
+  if (platform === "win32") return /* @__PURE__ */ new Set();
+  let rows3 = [];
+  try {
+    rows3 = parsePs((await runFile("ps", ["-A", "-o", "pid=,ppid=,pgid="], { encoding: "utf8", timeout: 2e3, windowsHide: true })).stdout);
+  } catch {
+  }
+  return notedGroups(rows3, root3, known, process.pid);
+}
 function killTree(handle, signal, os2 = REAL_OS) {
   shoot(handle, signal, os2);
 }
@@ -68233,7 +68295,7 @@ var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
   }
   exports._ = _;
   const plus = new _Code("+");
-  function str4(strs, ...args) {
+  function str5(strs, ...args) {
     const expr = [safeStringify(strs[0])];
     let i = 0;
     while (i < args.length) {
@@ -68244,7 +68306,7 @@ var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
     optimize(expr);
     return new _Code(expr);
   }
-  exports.str = str4;
+  exports.str = str5;
   function addCodeArg(code2, arg) {
     if (arg instanceof _Code) code2.push(...arg._items);
     else if (arg instanceof Name) code2.push(arg);
@@ -68277,7 +68339,7 @@ var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
     if (typeof b2 == "string" && b2[0] === '"' && !(a instanceof Name)) return `"${a}${b2.slice(1)}`;
   }
   function strConcat(c1, c2) {
-    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str4`${c1}${c2}`;
+    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str5`${c1}${c2}`;
   }
   exports.strConcat = strConcat;
   function interpolate(x) {
@@ -69156,21 +69218,21 @@ var require_util = /* @__PURE__ */ __commonJSMin(((exports) => {
     return (0, codegen_1._)`${topSchemaRef}${schemaPath}${(0, codegen_1.getProperty)(keyword)}`;
   }
   exports.schemaRefOrVal = schemaRefOrVal;
-  function unescapeFragment(str4) {
-    return unescapeJsonPointer(decodeURIComponent(str4));
+  function unescapeFragment(str5) {
+    return unescapeJsonPointer(decodeURIComponent(str5));
   }
   exports.unescapeFragment = unescapeFragment;
-  function escapeFragment(str4) {
-    return encodeURIComponent(escapeJsonPointer(str4));
+  function escapeFragment(str5) {
+    return encodeURIComponent(escapeJsonPointer(str5));
   }
   exports.escapeFragment = escapeFragment;
-  function escapeJsonPointer(str4) {
-    if (typeof str4 == "number") return `${str4}`;
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPointer(str5) {
+    if (typeof str5 == "number") return `${str5}`;
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
   exports.escapeJsonPointer = escapeJsonPointer;
-  function unescapeJsonPointer(str4) {
-    return str4.replace(/~1/g, "/").replace(/~0/g, "~");
+  function unescapeJsonPointer(str5) {
+    return str5.replace(/~1/g, "/").replace(/~0/g, "~");
   }
   exports.unescapeJsonPointer = unescapeJsonPointer;
   function eachItem(xs2, f) {
@@ -70056,8 +70118,8 @@ var require_json_schema_traverse = /* @__PURE__ */ __commonJSMin(((exports, modu
       post(schema, jsonPtr, rootSchema, parentJsonPtr, parentKeyword, parentSchema, keyIndex);
     }
   }
-  function escapeJsonPtr(str4) {
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPtr(str5) {
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
 }));
 var require_resolve = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -70949,9 +71011,9 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       isIPV6: false
     };
   }
-  function findToken(str4, token2) {
+  function findToken(str5, token2) {
     let ind = 0;
-    for (let i = 0; i < str4.length; i++) if (str4[i] === token2) ind++;
+    for (let i = 0; i < str5.length; i++) if (str5[i] === token2) ind++;
     return ind;
   }
   function removeDotSegments(path2) {
@@ -71225,41 +71287,41 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base2, relative9, options, skipNormalization) {
+  function resolveComponent(base2, relative10, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base2 = parse6(serialize(base2, options), options);
-      relative9 = parse6(serialize(relative9, options), options);
+      relative10 = parse6(serialize(relative10, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative9.scheme) {
-      target.scheme = relative9.scheme;
-      target.userinfo = relative9.userinfo;
-      target.host = relative9.host;
-      target.port = relative9.port;
-      target.path = removeDotSegments(relative9.path || "");
-      target.query = relative9.query;
+    if (!options.tolerant && relative10.scheme) {
+      target.scheme = relative10.scheme;
+      target.userinfo = relative10.userinfo;
+      target.host = relative10.host;
+      target.port = relative10.port;
+      target.path = removeDotSegments(relative10.path || "");
+      target.query = relative10.query;
     } else {
-      if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
-        target.userinfo = relative9.userinfo;
-        target.host = relative9.host;
-        target.port = relative9.port;
-        target.path = removeDotSegments(relative9.path || "");
-        target.query = relative9.query;
+      if (relative10.userinfo !== void 0 || relative10.host !== void 0 || relative10.port !== void 0) {
+        target.userinfo = relative10.userinfo;
+        target.host = relative10.host;
+        target.port = relative10.port;
+        target.path = removeDotSegments(relative10.path || "");
+        target.query = relative10.query;
       } else {
-        if (!relative9.path) {
+        if (!relative10.path) {
           target.path = base2.path;
-          if (relative9.query !== void 0) target.query = relative9.query;
+          if (relative10.query !== void 0) target.query = relative10.query;
           else target.query = base2.query;
         } else {
-          if (relative9.path[0] === "/") target.path = removeDotSegments(relative9.path);
+          if (relative10.path[0] === "/") target.path = removeDotSegments(relative10.path);
           else {
-            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative9.path;
-            else if (!base2.path) target.path = relative9.path;
-            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative9.path;
+            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative10.path;
+            else if (!base2.path) target.path = relative10.path;
+            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative10.path;
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative9.query;
+          target.query = relative10.query;
         }
         target.userinfo = base2.userinfo;
         target.host = base2.host;
@@ -71267,7 +71329,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       }
       target.scheme = base2.scheme;
     }
-    target.fragment = relative9.fragment;
+    target.fragment = relative10.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -71466,7 +71528,7 @@ var require_core$3 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const util_1 = require_util();
   const $dataRefSchema = require_data();
   const uri_1 = require_uri();
-  const defaultRegExp = (str4, flags) => new RegExp(str4, flags);
+  const defaultRegExp = (str5, flags) => new RegExp(str5, flags);
   defaultRegExp.code = "new RegExp";
   const META_IGNORE_OPTIONS = [
     "removeAdditional",
@@ -72172,16 +72234,16 @@ var require_multipleOf = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 var require_ucs2length = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  function ucs2length(str4) {
-    const len = str4.length;
+  function ucs2length(str5) {
+    const len = str5.length;
     let length = 0;
     let pos = 0;
     let value;
     while (pos < len) {
       length++;
-      value = str4.charCodeAt(pos++);
+      value = str5.charCodeAt(pos++);
       if (value >= 55296 && value <= 56319 && pos < len) {
-        value = str4.charCodeAt(pos);
+        value = str5.charCodeAt(pos);
         if ((value & 64512) === 56320) pos++;
       }
     }
@@ -74892,8 +74954,8 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
     30,
     31
   ];
-  function date5(str4) {
-    const matches2 = DATE.exec(str4);
+  function date5(str5) {
+    const matches2 = DATE.exec(str5);
     if (!matches2) return false;
     const year = +matches2[1];
     const month = +matches2[2];
@@ -74908,8 +74970,8 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
   }
   const TIME = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
   function getTime(strictTimeZone) {
-    return function time3(str4) {
-      const matches2 = TIME.exec(str4);
+    return function time3(str5) {
+      const matches2 = TIME.exec(str5);
       if (!matches2) return false;
       const hr2 = +matches2[1];
       const min = +matches2[2];
@@ -74946,8 +75008,8 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
   const DATE_TIME_SEPARATOR = /t|\s/i;
   function getDateTime(strictTimeZone) {
     const time3 = getTime(strictTimeZone);
-    return function date_time(str4) {
-      const dateTime = str4.split(DATE_TIME_SEPARATOR);
+    return function date_time(str5) {
+      const dateTime = str5.split(DATE_TIME_SEPARATOR);
       return dateTime.length === 2 && date5(dateTime[0]) && time3(dateTime[1]);
     };
   }
@@ -74968,13 +75030,13 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
   }
   const NOT_URI_FRAGMENT = /\/|:/;
   const URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-  function uri(str4) {
-    return NOT_URI_FRAGMENT.test(str4) && URI.test(str4);
+  function uri(str5) {
+    return NOT_URI_FRAGMENT.test(str5) && URI.test(str5);
   }
   const BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-  function byte(str4) {
+  function byte(str5) {
     BYTE.lastIndex = 0;
-    return BYTE.test(str4);
+    return BYTE.test(str5);
   }
   const MIN_INT32 = -(2 ** 31);
   const MAX_INT32 = 2 ** 31 - 1;
@@ -74988,10 +75050,10 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
     return true;
   }
   const Z_ANCHOR = /[^\\]\\Z/;
-  function regex(str4) {
-    if (Z_ANCHOR.test(str4)) return false;
+  function regex(str5) {
+    if (Z_ANCHOR.test(str5)) return false;
     try {
-      new RegExp(str4);
+      new RegExp(str5);
       return true;
     } catch (e) {
       return false;
@@ -81172,8 +81234,8 @@ var Server = class extends Protocol {
   _registerLoggingHandler() {
     this.setRequestHandler("logging/setLevel", async (request, ctx) => {
       const transportSessionId = ctx.sessionId || ctx.http?.req?.headers.get("mcp-session-id") || void 0;
-      const { level } = request.params;
-      const parseResult = parseSchema(LoggingLevelSchema, level);
+      const { level: level2 } = request.params;
+      const parseResult = parseSchema(LoggingLevelSchema, level2);
       if (parseResult.success) this._loggingLevels.set(transportSessionId, parseResult.data);
       return {};
     });
@@ -81184,18 +81246,18 @@ var Server = class extends Protocol {
       ...ctx,
       mcpReq: {
         ...ctx.mcpReq,
-        log: (level, data, logger) => {
+        log: (level2, data, logger) => {
           if (!this._capabilities.logging) return Promise.resolve();
           let threshold;
           if (this._servedModernEra()) {
             threshold = ctx.mcpReq.envelope?.[LOG_LEVEL_META_KEY];
             if (threshold === void 0) return Promise.resolve();
           } else threshold = this._loggingLevels.get(ctx.sessionId) ?? this._loggingLevels.get(void 0);
-          if (threshold !== void 0 && this.LOG_LEVEL_SEVERITY.get(level) < this.LOG_LEVEL_SEVERITY.get(threshold)) return Promise.resolve();
+          if (threshold !== void 0 && this.LOG_LEVEL_SEVERITY.get(level2) < this.LOG_LEVEL_SEVERITY.get(threshold)) return Promise.resolve();
           return ctx.mcpReq.notify({
             method: "notifications/message",
             params: {
-              level,
+              level: level2,
               data,
               logger
             }
@@ -81213,10 +81275,10 @@ var Server = class extends Protocol {
     };
   }
   _loggingLevels = /* @__PURE__ */ new Map();
-  LOG_LEVEL_SEVERITY = new Map(LoggingLevelSchema.options.map((level, index) => [level, index]));
-  isMessageIgnored = (level, sessionId) => {
+  LOG_LEVEL_SEVERITY = new Map(LoggingLevelSchema.options.map((level2, index) => [level2, index]));
+  isMessageIgnored = (level2, sessionId) => {
     const currentLevel = this._loggingLevels.get(sessionId);
-    return currentLevel ? this.LOG_LEVEL_SEVERITY.get(level) < this.LOG_LEVEL_SEVERITY.get(currentLevel) : false;
+    return currentLevel ? this.LOG_LEVEL_SEVERITY.get(level2) < this.LOG_LEVEL_SEVERITY.get(currentLevel) : false;
   };
   /**
   * Registers new capabilities. This can only be called before connecting to a transport.
@@ -89604,7 +89666,7 @@ var require_code$12 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   }
   exports._ = _;
   const plus = new _Code("+");
-  function str4(strs, ...args) {
+  function str5(strs, ...args) {
     const expr = [safeStringify(strs[0])];
     let i = 0;
     while (i < args.length) {
@@ -89615,7 +89677,7 @@ var require_code$12 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     optimize(expr);
     return new _Code(expr);
   }
-  exports.str = str4;
+  exports.str = str5;
   function addCodeArg(code2, arg) {
     if (arg instanceof _Code) code2.push(...arg._items);
     else if (arg instanceof Name) code2.push(arg);
@@ -89648,7 +89710,7 @@ var require_code$12 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     if (typeof b2 == "string" && b2[0] === '"' && !(a instanceof Name)) return `"${a}${b2.slice(1)}`;
   }
   function strConcat(c1, c2) {
-    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str4`${c1}${c2}`;
+    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str5`${c1}${c2}`;
   }
   exports.strConcat = strConcat;
   function interpolate(x) {
@@ -90527,21 +90589,21 @@ var require_util2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     return (0, codegen_1._)`${topSchemaRef}${schemaPath}${(0, codegen_1.getProperty)(keyword)}`;
   }
   exports.schemaRefOrVal = schemaRefOrVal;
-  function unescapeFragment(str4) {
-    return unescapeJsonPointer(decodeURIComponent(str4));
+  function unescapeFragment(str5) {
+    return unescapeJsonPointer(decodeURIComponent(str5));
   }
   exports.unescapeFragment = unescapeFragment;
-  function escapeFragment(str4) {
-    return encodeURIComponent(escapeJsonPointer(str4));
+  function escapeFragment(str5) {
+    return encodeURIComponent(escapeJsonPointer(str5));
   }
   exports.escapeFragment = escapeFragment;
-  function escapeJsonPointer(str4) {
-    if (typeof str4 == "number") return `${str4}`;
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPointer(str5) {
+    if (typeof str5 == "number") return `${str5}`;
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
   exports.escapeJsonPointer = escapeJsonPointer;
-  function unescapeJsonPointer(str4) {
-    return str4.replace(/~1/g, "/").replace(/~0/g, "~");
+  function unescapeJsonPointer(str5) {
+    return str5.replace(/~1/g, "/").replace(/~0/g, "~");
   }
   exports.unescapeJsonPointer = unescapeJsonPointer;
   function eachItem(xs2, f) {
@@ -91427,8 +91489,8 @@ var require_json_schema_traverse2 = /* @__PURE__ */ __commonJSMin2(((exports, mo
       post(schema, jsonPtr, rootSchema, parentJsonPtr, parentKeyword, parentSchema, keyIndex);
     }
   }
-  function escapeJsonPtr(str4) {
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPtr(str5) {
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
 }));
 var require_resolve2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
@@ -92320,9 +92382,9 @@ var require_utils2 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
       isIPV6: false
     };
   }
-  function findToken(str4, token2) {
+  function findToken(str5, token2) {
     let ind = 0;
-    for (let i = 0; i < str4.length; i++) if (str4[i] === token2) ind++;
+    for (let i = 0; i < str5.length; i++) if (str5[i] === token2) ind++;
     return ind;
   }
   function removeDotSegments(path2) {
@@ -92596,41 +92658,41 @@ var require_fast_uri2 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base2, relative9, options, skipNormalization) {
+  function resolveComponent(base2, relative10, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base2 = parse6(serialize(base2, options), options);
-      relative9 = parse6(serialize(relative9, options), options);
+      relative10 = parse6(serialize(relative10, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative9.scheme) {
-      target.scheme = relative9.scheme;
-      target.userinfo = relative9.userinfo;
-      target.host = relative9.host;
-      target.port = relative9.port;
-      target.path = removeDotSegments(relative9.path || "");
-      target.query = relative9.query;
+    if (!options.tolerant && relative10.scheme) {
+      target.scheme = relative10.scheme;
+      target.userinfo = relative10.userinfo;
+      target.host = relative10.host;
+      target.port = relative10.port;
+      target.path = removeDotSegments(relative10.path || "");
+      target.query = relative10.query;
     } else {
-      if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
-        target.userinfo = relative9.userinfo;
-        target.host = relative9.host;
-        target.port = relative9.port;
-        target.path = removeDotSegments(relative9.path || "");
-        target.query = relative9.query;
+      if (relative10.userinfo !== void 0 || relative10.host !== void 0 || relative10.port !== void 0) {
+        target.userinfo = relative10.userinfo;
+        target.host = relative10.host;
+        target.port = relative10.port;
+        target.path = removeDotSegments(relative10.path || "");
+        target.query = relative10.query;
       } else {
-        if (!relative9.path) {
+        if (!relative10.path) {
           target.path = base2.path;
-          if (relative9.query !== void 0) target.query = relative9.query;
+          if (relative10.query !== void 0) target.query = relative10.query;
           else target.query = base2.query;
         } else {
-          if (relative9.path[0] === "/") target.path = removeDotSegments(relative9.path);
+          if (relative10.path[0] === "/") target.path = removeDotSegments(relative10.path);
           else {
-            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative9.path;
-            else if (!base2.path) target.path = relative9.path;
-            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative9.path;
+            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative10.path;
+            else if (!base2.path) target.path = relative10.path;
+            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative10.path;
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative9.query;
+          target.query = relative10.query;
         }
         target.userinfo = base2.userinfo;
         target.host = base2.host;
@@ -92638,7 +92700,7 @@ var require_fast_uri2 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
       }
       target.scheme = base2.scheme;
     }
-    target.fragment = relative9.fragment;
+    target.fragment = relative10.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -92837,7 +92899,7 @@ var require_core$32 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   const util_1 = require_util2();
   const $dataRefSchema = require_data2();
   const uri_1 = require_uri2();
-  const defaultRegExp = (str4, flags) => new RegExp(str4, flags);
+  const defaultRegExp = (str5, flags) => new RegExp(str5, flags);
   defaultRegExp.code = "new RegExp";
   const META_IGNORE_OPTIONS = [
     "removeAdditional",
@@ -93543,16 +93605,16 @@ var require_multipleOf2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
 }));
 var require_ucs2length2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  function ucs2length(str4) {
-    const len = str4.length;
+  function ucs2length(str5) {
+    const len = str5.length;
     let length = 0;
     let pos = 0;
     let value;
     while (pos < len) {
       length++;
-      value = str4.charCodeAt(pos++);
+      value = str5.charCodeAt(pos++);
       if (value >= 55296 && value <= 56319 && pos < len) {
-        value = str4.charCodeAt(pos);
+        value = str5.charCodeAt(pos);
         if ((value & 64512) === 56320) pos++;
       }
     }
@@ -96263,8 +96325,8 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     30,
     31
   ];
-  function date5(str4) {
-    const matches2 = DATE.exec(str4);
+  function date5(str5) {
+    const matches2 = DATE.exec(str5);
     if (!matches2) return false;
     const year = +matches2[1];
     const month = +matches2[2];
@@ -96279,8 +96341,8 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   }
   const TIME = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
   function getTime(strictTimeZone) {
-    return function time3(str4) {
-      const matches2 = TIME.exec(str4);
+    return function time3(str5) {
+      const matches2 = TIME.exec(str5);
       if (!matches2) return false;
       const hr2 = +matches2[1];
       const min = +matches2[2];
@@ -96317,8 +96379,8 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   const DATE_TIME_SEPARATOR = /t|\s/i;
   function getDateTime(strictTimeZone) {
     const time3 = getTime(strictTimeZone);
-    return function date_time(str4) {
-      const dateTime = str4.split(DATE_TIME_SEPARATOR);
+    return function date_time(str5) {
+      const dateTime = str5.split(DATE_TIME_SEPARATOR);
       return dateTime.length === 2 && date5(dateTime[0]) && time3(dateTime[1]);
     };
   }
@@ -96339,13 +96401,13 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   }
   const NOT_URI_FRAGMENT = /\/|:/;
   const URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-  function uri(str4) {
-    return NOT_URI_FRAGMENT.test(str4) && URI.test(str4);
+  function uri(str5) {
+    return NOT_URI_FRAGMENT.test(str5) && URI.test(str5);
   }
   const BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-  function byte(str4) {
+  function byte(str5) {
     BYTE.lastIndex = 0;
-    return BYTE.test(str4);
+    return BYTE.test(str5);
   }
   const MIN_INT32 = -(2 ** 31);
   const MAX_INT32 = 2 ** 31 - 1;
@@ -96359,10 +96421,10 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     return true;
   }
   const Z_ANCHOR = /[^\\]\\Z/;
-  function regex(str4) {
-    if (Z_ANCHOR.test(str4)) return false;
+  function regex(str5) {
+    if (Z_ANCHOR.test(str5)) return false;
     try {
-      new RegExp(str4);
+      new RegExp(str5);
       return true;
     } catch (e) {
       return false;
@@ -98240,10 +98302,10 @@ var Client = class extends Protocol2 {
   * Remains functional during the deprecation window (at least twelve months).
   * Migrate to stderr logging (STDIO servers) or OpenTelemetry.
   */
-  async setLoggingLevel(level, options) {
+  async setLoggingLevel(level2, options) {
     return this.request({
       method: "logging/setLevel",
-      params: { level }
+      params: { level: level2 }
     }, options);
   }
   /** Retrieves a prompt by name from the server, passing the given arguments for template substitution. */
@@ -107449,13 +107511,13 @@ One session = one agent process (Claude Code or Codex).
   handoff by default (it can be restored from Settings \u2192 Archive); a checkbox keeps it instead. The orchestrator can hand a session off too
   (its handoff_session command), after you approve its card unless the session is at rest and runs under a preset the orchestrator has itself; the original stays. A worktree session cannot be
   handed off yet.
-- Archiving: session's \u22EF \u2192 Archive session. The session leaves the sidebar and goes to the session
+- Archiving: session's \u22EF \u2192 Archive session\u2026. The session leaves the sidebar and goes to the session
   archive (Settings \u2192 Archive), where the person can read it, restore it, or delete it for good.
-  An idle session is archived at once and the toast offers Undo; one that is working, waiting on the
-  person or running a background job asks first, in a dialog that also asks whether deleting it for
-  good should delete the conversation file on the tool's side (on by default). Nothing is deleted on
-  its own; turning that off leaves the conversation on the tool, so it can be loaded again from the
-  past-conversation list in the New session window.
+  A dialog asks first, for every session, and also asks whether deleting it for good should delete the
+  conversation file on the tool's side (on by default); with the worktree kept it lists anything the archive drops that Undo does
+  not bring back, and the toast after it offers Undo. Nothing is
+  deleted on its own; turning that off leaves the conversation on the tool, so it can be loaded again
+  from the past-conversation list in the New session window.
 - There is no menu to change a session's agent (claude \u2194 codex). A new tool does not know the old
   conversation, so use a handoff to continue with a different tool. The orchestrator is the one
   exception (Settings \u2192 Orchestrator).`,
@@ -108706,14 +108768,43 @@ var RoutedCards = class {
   }
 };
 
+// packages/agent-host/src/mail/address.ts
+var SEGMENT = "[A-Za-z0-9][A-Za-z0-9._~-]{0,63}";
+var SEGMENT_RE = new RegExp(`^${SEGMENT}$`);
+var SESSION_RE = new RegExp(`^session:(${SEGMENT})/(${SEGMENT})$`);
+var APP_RE = new RegExp(`^app:(${SEGMENT})/(${SEGMENT})/(${SEGMENT})$`);
+var PERSON = "person";
+var CENTRALU = "centralu";
+function sessionAddress(host, sessionId) {
+  return checked(`session:${host}/${sessionId}`);
+}
+function parseAddress(address) {
+  if (address === PERSON) return { kind: "person" };
+  if (address === CENTRALU) return { kind: "centralu" };
+  const [, host, sessionId] = SESSION_RE.exec(address) ?? [];
+  if (host !== void 0 && sessionId !== void 0) return { kind: "session", host, sessionId };
+  const [, appHost, projectId, appId] = APP_RE.exec(address) ?? [];
+  if (appHost !== void 0 && projectId !== void 0 && appId !== void 0) return { kind: "app", host: appHost, projectId, appId };
+  return null;
+}
+function checked(address) {
+  if (!parseAddress(address)) throw new Error(`Not a mail address: ${JSON.stringify(address)}`);
+  return address;
+}
+
 // packages/agent-host/src/sessions/handoff-children.ts
 var SETTLED_CHILD = "finished; waiting for more work";
 function movedChildrenNote(moved, commands = "") {
   return [
     "## Work handed over with this note (added by Centralu)",
     "",
-    "The previous session started or asked for these. They now answer to you as each line says (a finished one waits",
-    "for more work); use the handle with the tool it names.",
+    ...moved.some((c) => c.thread) ? [
+      "The previous session started or asked for these, or held these mail threads. They are yours now as each line says",
+      "(a finished session waits for more work); use the handle with the tool it names."
+    ] : [
+      "The previous session started or asked for these. They now answer to you as each line says (a finished one waits",
+      "for more work); use the handle with the tool it names."
+    ],
     ...commands ? [commands] : [],
     "",
     ...moved.map((c) => `- ${movedLabel(c)} \u2014 ${c.state} \u2014 handle: ${c.handle}. ${c.can}`),
@@ -108725,6 +108816,7 @@ function movedChildrenNote(moved, commands = "") {
 }
 function movedLabel(c) {
   if (c.request) return "start_agent request";
+  if (c.thread) return `mail thread "${oneLineText(c.name, 120)}"`;
   return `"${oneLineText(c.name, 120)}"${c.project ? ` (project ${c.project})` : ""}`;
 }
 var HandoffChildren = class {
@@ -108827,18 +108919,30 @@ var HandoffChildren = class {
         can: "The card stands in your session; if the person allows it, the session it starts is yours and its report comes to you. agent_session (status, wait, stop) works on the handle meanwhile."
       });
     }
-    if (!moved.length) return [];
+    const mailWhich = scope === "live" ? sessions.length ? { assignees: sessions } : null : "all";
+    if (!moved.length && mailWhich === null) return [];
+    let threads = [];
     try {
-      this.host.store.children.moveChildren(from, to, {
-        sessions,
-        startRequests: starts.map((r) => ({ requestId: r.req.requestId, request: { ...r.req, callerId: to } })),
-        armReports,
-        queued: !removed
-      });
+      this.host.store.children.moveChildren(
+        from,
+        to,
+        {
+          sessions,
+          startRequests: starts.map((r) => ({ requestId: r.req.requestId, request: { ...r.req, callerId: to } })),
+          armReports,
+          // With no child moving, the memory side does not run, so the queue's rows do not move either
+          queued: !removed && moved.length > 0
+        },
+        mailWhich === null ? void 0 : () => void (threads = this.host.mailHandOver(from, to, mailWhich))
+      );
     } catch (e) {
-      console.error(`[agent-host] handoff left the children with ${from.slice(0, 8)}: ${e.message}`);
+      console.error(`[agent-host] handoff left the children and the mail with ${from.slice(0, 8)}: ${e.message}`);
       return [];
     }
+    const childCount = moved.length;
+    moved.push(...threads.map((t) => movedThread(t)));
+    if (!moved.length) return [];
+    if (removed && threads.some((t) => t.unread > 0)) this.host.mailPoke(to);
     for (const id3 of sessions) {
       const s = this.host.meta.get(id3);
       if (s.askedBy !== from && s.parentSessionId !== from) continue;
@@ -108846,7 +108950,7 @@ var HandoffChildren = class {
       if (s.parentSessionId === from) s.parentSessionId = to;
       this.host.emit({ type: "session_owner", sessionId: id3, askedBy: s.askedBy ?? null, parentSessionId: s.parentSessionId ?? null });
     }
-    this.host.children.moveOwner(from, to, { sessions, armReports, starts, queued: !removed }, () => {
+    if (childCount) this.host.children.moveOwner(from, to, { sessions, armReports, starts, queued: !removed }, () => {
       for (const r of starts) {
         r.req.callerId = to;
         const ask = this.host.hostCards.hostAsks.get(r.req.requestId);
@@ -108874,10 +108978,22 @@ var HandoffChildren = class {
         text: `Handed over to \u201C${heir.name}\u201D [${to}], which follows them from now on: ${items.join("; ")}. This session no longer does.`
       });
     }
-    console.error(`[agent-host] handoff ${from.slice(0, 8)} -> ${to.slice(0, 8)} (${scope}): moved ${sessions.length} session(s), ${starts.length} start request(s)`);
+    console.error(`[agent-host] handoff ${from.slice(0, 8)} -> ${to.slice(0, 8)} (${scope}): moved ${sessions.length} session(s), ${starts.length} start request(s), ${threads.length} mail thread(s)`);
     return moved;
   }
 };
+function movedThread(t) {
+  const unread = t.unread ? `, ${t.unread} unread message${t.unread === 1 ? "" : "s"} now waiting for you` : "";
+  const other = (address) => {
+    const p = address === null ? null : parseAddress(address);
+    if (!p) return "nobody";
+    if (p.kind === "session") return `session ${p.sessionId}`;
+    return p.kind === "person" ? "the person" : p.kind === "app" ? `app ${p.appId}` : "Centralu";
+  };
+  const can = t.kind === "closed" ? "It is closed; what the previous session had not read of it waits for you. Read it with the mail tool." : t.kind === "left" ? t.role === "owner" ? "You are its assignee and the previous session was its owner, so it did not move: once that session is archived, the person owns it." : "You own it and the previous session had its work, so it did not move: once that session is archived, it is open with nobody on it; reassign or close it." : t.role === "owner" ? `You own it now (assignee: ${other(t.thread.assignee)}); its reports come to you in it. Read and answer it with the mail tool.` : t.role === "assignee" ? `It is assigned to you now (owner: ${other(t.thread.owner)}): the work is yours to do, and your report goes to its owner. Read it with the mail tool.` : "You are in it in the previous session's place. Read it with the mail tool.";
+  const state = t.kind === "closed" ? `done${t.thread.outcome ? ` (${t.thread.outcome})` : ""}` : t.thread.state;
+  return { handle: t.thread.id, name: t.thread.subject, state: `${state}${unread}`, can, thread: true };
+}
 
 // packages/agent-host/src/sessions/child-ownership.ts
 import { randomUUID as randomUUID12 } from "node:crypto";
@@ -108932,6 +109048,8 @@ var ChildOwnership = class {
    * work's, as every turn was.
    */
   starters = /* @__PURE__ */ new Map();
+  /** Turns the tool started by itself, no message behind them (`turnStarted`, #1576); memory only, a swap forgets it */
+  cliTurns = /* @__PURE__ */ new Set();
   lastBy = /* @__PURE__ */ new Map();
   /** Messages that went into the running turn and may not have been taken into it (#1377), by session */
   pending = /* @__PURE__ */ new Map();
@@ -109278,6 +109396,8 @@ var ChildOwnership = class {
     const next = found && Date.now() - found.at < NEXT_STARTER_MS ? found : void 0;
     const { at: _at, ...starter } = next ?? { by: "work", at: 0 };
     this.starters.set(sessionId, starter);
+    if (next) this.cliTurns.delete(sessionId);
+    else this.cliTurns.add(sessionId);
     this.persistTurn(sessionId);
     const source = next ? this.nextSource.get(sessionId) ?? "caller" : "caller";
     this.nextSource.delete(sessionId);
@@ -109298,6 +109418,7 @@ var ChildOwnership = class {
   turnEnded(sessionId, taken) {
     const starter = { ...this.starters.get(sessionId) ?? { by: "work" } };
     this.starters.delete(sessionId);
+    this.cliTurns.delete(sessionId);
     const pending = this.pending.get(sessionId) ?? [];
     this.pending.delete(sessionId);
     for (const p of pending) {
@@ -109312,6 +109433,24 @@ var ChildOwnership = class {
     this.store.settings.deleteAppSetting(reportTurnKey(sessionId));
     return starter;
   }
+  /**
+   * Whether the turn running is the paused work's continuing (#1576): the caller's report is held over the session's own
+   * background work, and the turn the tool started when that work ended is the work's (`turnStarted`, no message began
+   * it) with no person's message in it. That turn's end is the report the caller is owed, so it is the caller's too.
+   * The one place that says so, as `reportBackIfAwaited` reads the same turn for its report
+   */
+  continuesPause(sessionId, callerId) {
+    if (this.reports.get(sessionId) !== callerId || !this.paused.has(sessionId)) return false;
+    const owner = this.turns.get(sessionId)?.callerId;
+    if (owner && owner !== callerId || this.mailTurns.get(sessionId) && this.mailTurns.get(sessionId)?.ownerId !== callerId) return false;
+    const starter = this.starters.get(sessionId);
+    return this.cliTurns.has(sessionId) && starter?.by === "work" && !this.personInTurn(sessionId);
+  }
+  /** Whether a person started the running turn or wrote into it (#1576): a refusal says "the person may be using it" for no other */
+  personInTurn(sessionId) {
+    const starter = this.starters.get(sessionId);
+    return starter?.by !== "work" || !!starter.wrote || !!starter.added || (this.pending.get(sessionId) ?? []).some((p) => p.by === "person");
+  }
   /** Whose the session's last turn was (#1377): its last response is the person's answer when it was theirs */
   lastTurnBy(sessionId) {
     return this.lastBy.get(sessionId);
@@ -112244,7 +112383,8 @@ var AgentSessionActions = class {
             };
           }
           const from = { sessionId: callerId, name: labelOf(this.host.store.messages, caller) };
-          if (d2 && !d2.settled && observing || (!d2 || d2.settled) && this.host.busyForCaller(callerId, child.id)) {
+          const continuing = (!d2 || d2.settled) && inTurn(child.state) && this.host.children.continuesPause(child.id, callerId);
+          if (d2 && !d2.settled && observing || (!d2 || d2.settled) && !continuing && this.host.busyForCaller(callerId, child.id)) {
             if (!opts.ifBusy) return { ok: true, tool: child.tool, ...this.host.busyAnswer(callerId, child, "agent_session") };
             if (opts.ifBusy === "queue") return { ok: true, tool: child.tool, ...this.host.enqueue(callerId, child, "agent_session", opts.text ?? "") };
             if (opts.ifBusy === "fork" || opts.ifBusy === "fork_read") {
@@ -112258,16 +112398,18 @@ var AgentSessionActions = class {
             if (!note2.available || !d2 || d2.settled) return { ok: false, error: `No note to "${child.name}": ${note2.why ?? "nothing is running there to add it to"}. Queue it or fork it instead.` };
             this.host.autoBoundaryOpen(callerId, "a note into a turn that is not its own");
           }
-          if (d2 && !d2.settled) {
+          if (d2 && !d2.settled || continuing) {
             const text2 = agentNoteFrame(from.name, opts.text ?? "");
             if (!this.host.adapters.get(child.tool)?.capabilities.midTurnInput || !this.host.handles.get(child.id)?.sendTracked) {
               return { ok: false, error: `"${child.name}" cannot take messages while working. Wait for it (action "wait") or stop it first.` };
             }
-            const own = observing ? this.flow.observeTurn(child, true, true) : void 0;
+            const own = observing || continuing ? this.flow.observeTurn(child, true, true) : void 0;
             if (own) void own.run.wait.done.then(own.release, own.release);
-            const record2 = own ? { run: own.run, waiters: 0, told: false } : void 0;
+            const record2 = own && !continuing ? { run: own.run, waiters: 0, told: false } : void 0;
             if (record2) this.host.children.setObserverNote(key, record2);
-            const wait = own?.run.wait ?? d2.wait;
+            const run4 = own?.run ?? d2;
+            if (!run4) return { ok: false, error: `No note to "${child.name}": nothing is running there to add it to.` };
+            const wait = run4.wait;
             const releaseHold = wait.holdInput();
             const release = () => {
               releaseHold();
@@ -112278,7 +112420,9 @@ var AgentSessionActions = class {
                 const fail4 = (e) => {
                   if (!record2) {
                     wait.fail(e);
-                    return release();
+                    release();
+                    if (continuing) void this.flow.tellNoteRefused(callerId, child.id, e.message);
+                    return;
                   }
                   wait.fail(new Error(`your note was not delivered: ${e.message}`));
                   release();
@@ -112298,11 +112442,13 @@ var AgentSessionActions = class {
               return { ok: false, error: `Could not send it: ${e.message}` };
             }
             if (!observing) this.host.children.delegated(callerId, child.id, "agent_session", opts.text ?? "");
-            const working = this.flow.agentWorking(d2, false, observing);
+            const working = this.flow.agentWorking(run4, false, observing || continuing);
+            if (continuing && working.ok && working.state === "working") return { ...working, reported: this.host.children.awaitingReport.get(child.id) === callerId, via: "note" };
             return working.ok && observing ? { ...working, via: "note" } : working;
           }
           if (inTurn(child.state) || this.host.agentRuns.has(child.id) && !this.host.agentRuns.get(child.id).finished) {
-            return { ok: false, error: `"${child.name}" is busy with something else (the person may be using it). Try again later.` };
+            const person = this.host.children.personInTurn(child.id);
+            return { ok: false, error: `"${child.name}" is busy with ${person ? "something else (the person may be using it)" : "a turn you did not give it (another session, or its own tool, started it)"}. Try again later.` };
           }
           if (d2) this.host.children.dropDelegation(key);
           const full = this.flow.starts.agentCeilingError(callerId, child.projectId ?? "");
@@ -112430,6 +112576,10 @@ var RemoteAgents = class {
   toldCards = /* @__PURE__ */ new Set();
   /** Whose each child's turn is, as settled in this host (`Whose`); one not here is read from its record (`whoseOf`) */
   whose = /* @__PURE__ */ new Map();
+  /** What made a turn another's, when it is told (#1576): a message from another session of this hub, else it is read as the person's */
+  otherBy = /* @__PURE__ */ new Map();
+  /** Notes sent into a running turn whose record has not come back yet (memory only): two quick notes both are the caller's own */
+  notesSent = /* @__PURE__ */ new Map();
   /** Children an instruction is on its way to: its own send's answer says what came of it, and the machine is not read meanwhile */
   pending = /* @__PURE__ */ new Set();
   /** Children whose turn's end the linked reports held back while whose the turn was could not be told (`reportGate`) */
@@ -112760,14 +112910,19 @@ var RemoteAgents = class {
         if (now.running) {
           const g5 = await this.gate(rec, reader);
           if (!g5.live) {
-            return { ok: false, error: `"${rec.name}" is busy on ${rec.machine} with a turn you did not give it (the person may be using it there). A queue or a fork does not reach another machine: try again once it is at rest.` };
+            return { ok: false, error: `"${rec.name}" is busy on ${rec.machine} with ${this.otherTurn(rec, g5)}. A queue or a fork does not reach another machine: try again once it is at rest.` };
           }
           const refused3 = this.gateError(callerId);
           if (refused3) return { ok: false, error: refused3 };
           const framed3 = agentNoteFrame(label, text2);
           this.sentNow(rec.sessionId, framed3);
+          this.notesSent.set(rec.sessionId, [...this.notesSent.get(rec.sessionId) ?? [], framed3]);
           const sent2 = await reader.send(rec.sessionId, framed3, label, { depth: depthOf(this.host, callerId) + 1 });
-          if (!sent2.ok) return { ok: false, error: `Could not send to "${rec.name}" on ${rec.machine}: ${bare(sent2.error)}.` };
+          if (!sent2.ok) {
+            const at2 = (this.notesSent.get(rec.sessionId) ?? []).lastIndexOf(framed3);
+            if (at2 >= 0) this.notesSent.set(rec.sessionId, (this.notesSent.get(rec.sessionId) ?? []).filter((_, i) => i !== at2));
+            return { ok: false, error: `Could not send to "${rec.name}" on ${rec.machine}: ${bare(sent2.error)}.` };
+          }
           return this.gateNow(rec).live ? this.working(rec, this.reportArmed(rec) || this.waits.has(rec.sessionId)) : this.wentElsewhere(rec);
         }
         const refused2 = this.gateError(callerId);
@@ -112776,6 +112931,7 @@ var RemoteAgents = class {
         if (full) return { ok: false, error: full };
         const framed2 = agentNoteFrame(label, text2);
         this.save(this.records().map((r) => r.sessionId === rec.sessionId ? { ...r, turn: randomUUID17(), sent: framed2 } : r));
+        this.notesSent.delete(rec.sessionId);
         this.whose.set(rec.sessionId, "unknown");
         this.pending.add(rec.sessionId);
         this.host.children.setLinkedReport(rec.sessionId, { orchestratorId: callerId, busy: false });
@@ -112891,7 +113047,9 @@ var RemoteAgents = class {
     const whose = this.whoseOf(rec);
     const owned = whose === "caller";
     const report = this.host.children.linkedReports.get(rec.sessionId);
-    const running2 = this.waits.has(rec.sessionId) || report?.orchestratorId === rec.callerId && !report.paused;
+    const mine = report?.orchestratorId === rec.callerId;
+    const continuesPause = mine && !!report.paused && report.busy && report.turn?.by === "work";
+    const running2 = this.waits.has(rec.sessionId) || mine && (!report.paused || continuesPause);
     return { owned, live: owned && running2, whose };
   }
   /** Whose the child's turn is (`Whose`): as settled here, else as its record kept it; `caller` is re-read after a restart */
@@ -112905,6 +113063,7 @@ var RemoteAgents = class {
    */
   setWhose(rec, whose, why) {
     const was = this.whoseOf(rec);
+    if (was !== "other" || whose !== "other") this.otherBy.delete(rec.sessionId);
     this.whose.set(rec.sessionId, whose);
     const kept = whose === "unknown" ? void 0 : whose;
     const stored = this.of(rec.sessionId);
@@ -112956,12 +113115,26 @@ var RemoteAgents = class {
     if (whose === "unknown") this.setWhose(rec, "other");
     return this.wentElsewhere(rec);
   }
+  /**
+   * What the running turn is, said for a caller it is not live for (#1576): named by what started it, so only a message
+   * of a person's on that machine is "the person may be using it". A turn the hub has no sight of the start of (a swap,
+   * a machine that lists no background work) is said to be the child's own, not a person's
+   */
+  otherTurn(rec, g5) {
+    if (g5.whose === "unknown") return "a turn the hub cannot tell the owner of (the link dropped, or Centralu restarted, and the machine cannot be read now)";
+    if (g5.whose === "other") {
+      return this.otherBy.get(rec.sessionId) === "session" ? "a turn another session asked of it (it is not the one you gave it)" : "a turn you did not give it (the person may be using it there)";
+    }
+    const report = this.host.children.linkedReports.get(rec.sessionId);
+    if (report && report.orchestratorId !== rec.callerId) return "a turn another session is owed the end of (it is not the one you gave it)";
+    return "a turn it started by itself that this hub cannot tie to the work you gave it";
+  }
   /**
    * What the caller gets of a child whose turn the gate does not let through: the fact and the state word. Nothing of
    * the turn: no card, no words, and nothing owed or armed for it
    */
   notYours(rec, g5, running2, state) {
-    const why = g5.whose === "unknown" ? `The hub could not tell whose its last turn on ${rec.machine} was (the link dropped, or Centralu restarted, and the machine cannot be read now)` : running2 ? `It is in a turn on ${rec.machine} that you did not give it (the person is using it there)` : `Its last turn on ${rec.machine} was not one you gave it (the person's)`;
+    const why = g5.whose === "unknown" ? `The hub could not tell whose its last turn on ${rec.machine} was (the link dropped, or Centralu restarted, and the machine cannot be read now)` : running2 ? `It is in ${this.otherTurn(rec, g5)} on ${rec.machine}` : `Its last turn on ${rec.machine} was not one you gave it (the person's)`;
     const notice = `${why}: nothing of that turn is yours to read, and none of it is reported to you.${running2 ? " Send to it once it is at rest." : ""}`;
     if (running2) return { ...this.working(rec, false), notice };
     return { ok: true, state: "at_rest", sessionId: rec.sessionId, sessionName: rec.name, tool: rec.tool, answer: "(not yours to read: a turn you did not give it)", sessionState: state, notice };
@@ -112981,13 +113154,23 @@ var RemoteAgents = class {
       if (e.seq <= (this.lastSeq.get(sessionId) ?? -1)) return;
       this.lastSeq.set(sessionId, e.seq);
     }
+    const own = this.notesSent.get(sessionId) ?? [];
+    const earlier = typeof e.text === "string" && e.text !== rec.sent ? own.indexOf(e.text) : -1;
+    if (earlier >= 0 && this.fromHubHere(rec, e.from)) {
+      this.notesSent.set(sessionId, own.filter((_, i) => i !== earlier));
+      if (this.whoseOf(rec) === "caller" && this.gateNow(rec).live) return;
+    }
     if (this.fromHubHere(rec, e.from) && e.text === rec.sent) {
+      const at2 = own.indexOf(rec.sent ?? "");
+      if (at2 >= 0) this.notesSent.set(sessionId, own.filter((_, i) => i !== at2));
       if (this.whoseOf(rec) === "caller" && this.gateNow(rec).live) return;
       if (this.busy.has(sessionId)) return this.setWhose(rec, "other", "took what you sent as a message into a turn already running there that you did not give it (the person's, most likely)");
       this.tookInstruction(rec);
       return;
     }
     this.setWhose(rec, "other", "took a message there that you did not send (the person on that machine, most likely)");
+    if (this.fromHubHere(rec, e.from)) this.otherBy.set(sessionId, "session");
+    else this.otherBy.delete(sessionId);
   }
   /**
    * The machine recorded the instruction this hub last sent the child, with no other turn running there: the turn that
@@ -113278,6 +113461,8 @@ var RemoteAgents = class {
     if (this.records().some((r) => r.sessionId === sessionId)) this.save(this.records().filter((r) => r.sessionId !== sessionId));
     this.toldDown.delete(sessionId);
     this.whose.delete(sessionId);
+    this.otherBy.delete(sessionId);
+    this.notesSent.delete(sessionId);
     this.pending.delete(sessionId);
     this.deferred.delete(sessionId);
     this.busy.delete(sessionId);
@@ -114137,6 +114322,20 @@ var LaunchRecords = class {
   rememberBackgroundTasks(m) {
     this.host.store.settings.setAppSetting(this.backgroundTasksKey(m.id), JSON.stringify(m.backgroundTasks.filter((t) => t.status === "running")));
   }
+  /**
+   * The running cost total of the conversation a session's tool reports (`CreateSessionOpts.runningCost`), as its last process
+   * read it: kept so the next process, after a restart, a wake or a host swap, takes a turn's cost as what it added. Read only
+   * for a resumed conversation; anything but a number at or above 0 is none.
+   */
+  runningCostFor(sessionId, resumed) {
+    const key = `running_cost:${sessionId}`;
+    const raw = resumed ? this.host.store.settings.appSetting(key) : null;
+    const last = raw === null ? null : Number(raw);
+    return {
+      last: last !== null && Number.isFinite(last) && last >= 0 ? last : null,
+      keep: (total) => this.host.store.settings.setAppSetting(key, String(total))
+    };
+  }
   /** The persisted prefix a process was started with. It is separate from SessionInfo: a screen never needs it. */
   toolPrefixKey(sessionId) {
     return `tool_prefix:${sessionId}`;
@@ -118056,30 +118255,6 @@ ${note}` : note;
   }
 };
 
-// packages/agent-host/src/mail/address.ts
-var SEGMENT = "[A-Za-z0-9][A-Za-z0-9._~-]{0,63}";
-var SEGMENT_RE = new RegExp(`^${SEGMENT}$`);
-var SESSION_RE = new RegExp(`^session:(${SEGMENT})/(${SEGMENT})$`);
-var APP_RE = new RegExp(`^app:(${SEGMENT})/(${SEGMENT})/(${SEGMENT})$`);
-var PERSON = "person";
-var CENTRALU = "centralu";
-function sessionAddress(host, sessionId) {
-  return checked(`session:${host}/${sessionId}`);
-}
-function parseAddress(address) {
-  if (address === PERSON) return { kind: "person" };
-  if (address === CENTRALU) return { kind: "centralu" };
-  const [, host, sessionId] = SESSION_RE.exec(address) ?? [];
-  if (host !== void 0 && sessionId !== void 0) return { kind: "session", host, sessionId };
-  const [, appHost, projectId, appId] = APP_RE.exec(address) ?? [];
-  if (appHost !== void 0 && projectId !== void 0 && appId !== void 0) return { kind: "app", host: appHost, projectId, appId };
-  return null;
-}
-function checked(address) {
-  if (!parseAddress(address)) throw new Error(`Not a mail address: ${JSON.stringify(address)}`);
-  return address;
-}
-
 // packages/agent-host/src/mail/ids.ts
 import { randomBytes as randomBytes5 } from "node:crypto";
 var CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
@@ -118169,10 +118344,10 @@ function sweepMail(db, now, limits = {}) {
     result.messages += db.prepare(`DELETE FROM mail_messages WHERE id IN (SELECT value FROM json_each(?))`).run(json2).changes;
   };
   const dropThreads = (where2, cut2) => {
-    const pick3 = db.prepare(`SELECT t.id FROM mail_threads t WHERE ${where2} ORDER BY t.created_at LIMIT @batch`);
+    const pick4 = db.prepare(`SELECT t.id FROM mail_threads t WHERE ${where2} ORDER BY t.created_at LIMIT @batch`);
     for (; ; ) {
       const done2 = db.transaction(() => {
-        const ids = pick3.all({ cut: cut2, batch: l.batch }).map((r) => r.id);
+        const ids = pick4.all({ cut: cut2, batch: l.batch }).map((r) => r.id);
         if (ids.length === 0) return true;
         const json2 = JSON.stringify(ids);
         db.prepare(`DELETE FROM mail_receipts WHERE message_id IN (SELECT id FROM mail_messages WHERE thread_id IN (SELECT value FROM json_each(?)))`).run(json2);
@@ -118415,6 +118590,64 @@ var MailRecords = class {
     const rows3 = this.db.prepare(`SELECT * FROM mail_threads WHERE ${column} = ? ORDER BY created_at, id`).all(address);
     return rows3.map(toThread).filter((t) => !states || states.includes(t.state));
   }
+  /** The threads that are not done in which a party is still a participant, whatever its role: what a handoff moves of it (§4.1) */
+  openThreadsWith(address) {
+    const rows3 = this.db.prepare(
+      `SELECT t.* FROM mail_threads t JOIN mail_participants p ON p.thread_id = t.id AND p.address = ? AND p.left_at IS NULL
+          WHERE t.state <> 'done' ORDER BY t.created_at, t.id`
+    ).all(address);
+    return rows3.map(toThread);
+  }
+  /** The done threads in which `address` has mail it has neither read nor handled: what a handoff's move of its receipts looks at too (§4.1) */
+  doneThreadsWithUnread(address) {
+    const rows3 = this.db.prepare(
+      `SELECT t.* FROM mail_threads t WHERE t.state = 'done' AND EXISTS (
+            SELECT 1 FROM mail_receipts r JOIN mail_messages m ON m.id = r.message_id
+             WHERE m.thread_id = t.id AND r.recipient = ? AND r.read_at IS NULL AND r.handled_at IS NULL)
+          ORDER BY t.created_at, t.id`
+    ).all(address);
+    return rows3.map(toThread);
+  }
+  /**
+   * A handoff's move of what `from` has not read in a thread to `to` (§4.1): each receipt neither read nor handled is `to`'s, and
+   * waits to be delivered to it, delivered to `from` or not (what went into the original's conversation never reached its
+   * successor). A hold about the original itself (its delivery `uncertain` or `failed`, its `loop`, `budget` or `policy`, each
+   * judged for the original's wakes) is let go, for the delivery to judge again for the successor; one the person settled
+   * (`released`, `dismissed`) stays. Not moved, and handled for `from` instead: a receipt for a message `to` sent itself (nobody
+   * is sent their own words), and one for a message `to` already has a receipt for (it keeps its own). So nothing of the
+   * original's stays waiting (`handleUnread`), and a restored original is not woken for mail of a thread it has left. Returns how many moved
+   */
+  moveUnreadReceipts(threadId, from, to, now) {
+    const moved = this.db.prepare(
+      `UPDATE OR IGNORE mail_receipts
+            SET recipient = @to, delivered_at = NULL, attempt_at = NULL, attempts = 0, last_error = NULL,
+                held = CASE WHEN held IN ('uncertain', 'failed', 'loop', 'budget', 'policy') THEN NULL ELSE held END
+          WHERE recipient = @from AND read_at IS NULL AND handled_at IS NULL
+            AND message_id IN (SELECT id FROM mail_messages WHERE thread_id = @threadId AND sender <> @to)`
+    ).run({ threadId, from, to }).changes;
+    this.handleUnread(threadId, from, now);
+    return moved;
+  }
+  /** How many of `from`'s unread receipts in the thread `moveUnreadReceipts` would give `to`: not those of `to`'s own messages, nor those it has already */
+  movableUnread(threadId, from, to) {
+    const row = this.db.prepare(
+      `SELECT COUNT(*) AS n FROM mail_receipts r JOIN mail_messages m ON m.id = r.message_id
+          WHERE r.recipient = @from AND r.read_at IS NULL AND r.handled_at IS NULL AND m.thread_id = @threadId AND m.sender <> @to
+            AND NOT EXISTS (SELECT 1 FROM mail_receipts o WHERE o.message_id = r.message_id AND o.recipient = @to)`
+    ).get({ threadId, from, to });
+    return row?.n ?? 0;
+  }
+  /**
+   * `from`'s receipts in a thread that are neither read nor handled are handled: a handoff's original left the thread, or is about to
+   * when it goes (§4.1), and nothing of it waits there, so a restored original is not woken for a thread it no longer holds
+   */
+  handleUnread(threadId, from, now) {
+    this.db.prepare(
+      `UPDATE mail_receipts SET handled_at = @now
+          WHERE recipient = @from AND read_at IS NULL AND handled_at IS NULL
+            AND message_id IN (SELECT id FROM mail_messages WHERE thread_id = @threadId)`
+    ).run({ threadId, from, now });
+  }
   /**
    * What a party's mailbox holds (§9.3, §10.1): the threads it is in that are not done, and the done ones it has mail unread
    * in, with how much it has not read. Unread first, then the latest change. A mail held back for the person (a loop, a spent
@@ -118945,6 +119178,19 @@ function scriptMessageFrame(credential, text2) {
 ` + quoted2(text2);
 }
 
+// packages/agent-host/src/sessions/tool-fit.ts
+function sessionDemands(m, files, preset = m.permissionPreset) {
+  return {
+    permissionPreset: preset,
+    ...files.projectTrusted === void 0 ? {} : { projectTrusted: files.projectTrusted },
+    ...files.noSettingFiles ? { noSettingFiles: true } : {},
+    roleText: m.kind === "orchestrator" || !!m.roleAppend
+  };
+}
+function unfitError(reason) {
+  return rpcError(reason, "refused", { retryable: false, data: { reason: "tool_unfit" } });
+}
+
 // packages/agent-host/src/sessions/session-start.ts
 import { randomUUID as randomUUID19 } from "node:crypto";
 
@@ -119367,7 +119613,8 @@ var SessionStarts = class {
         ...params.lsp !== void 0 ? { lsp: params.lsp } : {}
       });
       const from = this.host.handleSink();
-      handle = await adapter.createSession(
+      handle = await startFit(
+        adapter,
         this.launchOptions(info, {
           tool: params.tool,
           cwd,
@@ -119535,6 +119782,7 @@ var SessionStarts = class {
       ...this.autoCompactFor(m, !!o.adopt),
       permissionPreset: o.permissionPreset,
       resumeExternalId: o.resumeExternalId,
+      runningCost: this.host.launches.runningCostFor(m.id, !!o.resumeExternalId),
       ...o.knownGoal ? { knownGoal: o.knownGoal } : {},
       // Which settings files reach this session (decision 3, #92, #152) — what the session is,
       // and the trust at this exact moment of launch. If this is a builder session, the
@@ -119678,7 +119926,8 @@ var SessionStarts = class {
     if (!adopt) m.agentVersion = this.host.versionHint?.(tool) ?? null;
     const kept = adopt ? this.host.launches.keptBackgroundTasks(sessionId) : null;
     try {
-      const creating = adapter.createSession(
+      const creating = startFit(
+        adapter,
         this.launchOptions(m, {
           tool,
           cwd,
@@ -119776,6 +120025,15 @@ var SessionStarts = class {
     }
   }
 };
+function startFit(adapter, opts, sink) {
+  const reason = launchRefusal(adapter.capabilities, adapter.descriptor.label, {
+    permissionPreset: opts.permissionPreset,
+    projectTrusted: opts.projectTrusted,
+    noSettingFiles: opts.noSettingFiles,
+    roleText: !!opts.systemPromptAppend
+  });
+  return reason ? Promise.reject(unfitError(reason)) : adapter.createSession(opts, sink);
+}
 
 // packages/agent-host/src/sessions/session-events.ts
 import { randomUUID as randomUUID20 } from "node:crypto";
@@ -120834,7 +121092,7 @@ ${adapterText}` : adapterText;
     if (!handle) throw rpcError("The session is not running");
     this.host.record.closeStream(sessionId);
     this.host.cardRests.turnAsked(sessionId);
-    handle.send(text2);
+    handle.send(text2, { compact: true });
   }
   /**
    * Turns a touched file into a path relative to the project (#185).
@@ -122628,6 +122886,11 @@ var InputReceipts = class {
 // packages/agent-host/src/adapters/local-process.ts
 import { EventEmitter as EventEmitter3 } from "node:events";
 import { PassThrough as PassThrough2 } from "node:stream";
+var HOST_WATCH = '{ g=; while read -r l; do case $l in +*) g="$g ${l#+}";; -*) n=; for p in $g; do [ "$p" = "${l#-}" ] || n="$n $p"; done; g=$n;; esac; done; for p in $g $(' + watchTreeGroups() + '); do kill -9 -"$p" 2>/dev/null; done; kill -9 0 2>/dev/null; } <&3 >/dev/null 2>&1 & exec "$@" 3<&-';
+function watchTreeGroups() {
+  return `ps -A -o pid= -o ppid= -o pgid= 2>/dev/null | awk -v r="$$" '{ p[$1] = $2; g[$1] = $3 } END { d[r] = 1; do { c = 0; for (k in p) if (!(k in d) && (p[k] in d)) { d[k] = 1; c = 1 } } while (c); for (k in d) if (g[k] != g[r] && g[k] > 1) print g[k] }'`;
+}
+var GROUP_CHECK_MS = 2e3;
 var STDERR_TAIL2 = 8 * 1024;
 var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   constructor(child, spawnedAt, os2) {
@@ -122641,6 +122904,8 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
     child.stderr?.on("data", (d2) => this.tail.push(d2));
     child.stdin?.on("error", () => {
     });
+    child.stdio[3]?.on("error", () => {
+    });
     child.on("error", (e) => {
       this.emit("error", e);
       if (child.pid === void 0) this.onExit();
@@ -122655,12 +122920,18 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   stderr;
   killed = false;
   tail = new Tail(STDERR_TAIL2);
+  /** The helper groups its tree had when last asked (`noteTree`) and that still have a member, swept once it has gone */
+  groups = /* @__PURE__ */ new Set();
+  /** While groups are held: they are read again, so one that has emptied is dropped before its number is reused */
+  groupClock = null;
+  noting = null;
   /** Reported once the output has all arrived, so a reader never sees the exit before the last line */
   exitReport = new ExitAfterDrain(() => this.emit("exit", this.child.exitCode, this.child.signalCode));
   static spawn(spec, os2) {
     let started;
     try {
-      started = spawnGrouped(spec.command, spec.args, { cwd: spec.cwd, env: spec.env, stdio: ["pipe", "pipe", "pipe"] }, os2?.platform);
+      const watched = !!spec.endsWithHost && hasProcessGroups(os2?.platform);
+      started = watched ? spawnGrouped("/bin/sh", ["-c", HOST_WATCH, "centralu-agent", spec.command, ...spec.args], { cwd: spec.cwd, env: spec.env, stdio: ["pipe", "pipe", "pipe", "pipe"] }, os2?.platform) : spawnGrouped(spec.command, spec.args, { cwd: spec.cwd, env: spec.env, stdio: ["pipe", "pipe", "pipe"] }, os2?.platform);
     } catch (err) {
       started = { child: notStarted(err), spawnedAt: Date.now() };
     }
@@ -122680,6 +122951,38 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   get signalCode() {
     return this.child.signalCode;
   }
+  noteTree() {
+    const pid = this.child.pid;
+    if (pid === void 0 || this.ended || !this.grouped) return Promise.resolve();
+    this.noting ??= noteGroups(pid, this.groups, this.os?.platform).then((groups) => {
+      if (this.ended) return;
+      this.tellWatch(this.groups, groups);
+      this.groups = groups;
+      if (groups.size === 0) this.stopGroupClock();
+      else if (!this.groupClock) {
+        this.groupClock = setInterval(() => void this.noteTree(), GROUP_CHECK_MS);
+        this.groupClock.unref?.();
+      }
+    }).finally(() => {
+      this.noting = null;
+    });
+    return this.noting;
+  }
+  /**
+   * The host watch (`HOST_WATCH`) is told each helper group as it is noted and as it is dropped, so a host killed outright
+   * still ends them: they are in groups of their own, which the watch's own `kill -9 0` does not reach (#1562 Mac re-check:
+   * Cursor's `zsh -c` and its `sleep 300` outlived a SIGKILLed host)
+   */
+  tellWatch(before, after) {
+    const watch3 = this.child.stdio[3];
+    if (!watch3 || !("write" in watch3) || watch3.destroyed) return;
+    const lines = [...[...after].filter((g5) => !before.has(g5)).map((g5) => `+${g5}`), ...[...before].filter((g5) => !after.has(g5)).map((g5) => `-${g5}`)];
+    if (lines.length) watch3.write(lines.join("\n") + "\n");
+  }
+  stopGroupClock() {
+    if (this.groupClock) clearInterval(this.groupClock);
+    this.groupClock = null;
+  }
   /** The end of what the CLI wrote to stderr */
   stderrTail() {
     return this.tail.text;
@@ -122710,6 +123013,8 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
     return true;
   }
   onExit() {
+    const watch3 = this.child.stdio[3];
+    if (watch3 && "destroy" in watch3) watch3.destroy();
     this.sweep();
     if (!this.stdout.readableEnded) this.stdout.once("end", () => this.exitReport.drained());
     this.exitReport.exited(this.stdout.readableEnded);
@@ -122718,6 +123023,8 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   sweep() {
     const pid = this.child.pid;
     if (pid === void 0) return;
+    this.stopGroupClock();
+    for (const g5 of this.groups) stopGroup(g5, KILL_GRACE_MS);
     const root3 = { pid, spawnedAt: this.spawnedAt, exitedAt: Date.now() };
     void sweepExited(root3, this.os?.platform, this.os?.listProcesses ? { listProcesses: this.os.listProcesses, taskkill: this.os.taskkill } : void 0).then((ended) => {
       if (ended.length > 0) console.error(`[agent] ended ${ended.length} process(es) pid ${pid} left running: ${ended.join(", ")}`);
@@ -122728,7 +123035,8 @@ function notStarted(err) {
   const stand = new EventEmitter3();
   const stdout = new PassThrough2();
   stdout.end();
-  Object.assign(stand, { stdin: new PassThrough2(), stdout, stderr: null, pid: void 0, exitCode: null, signalCode: null, kill: () => false });
+  const stdin = new PassThrough2();
+  Object.assign(stand, { stdin, stdout, stderr: null, stdio: [stdin, stdout, null], pid: void 0, exitCode: null, signalCode: null, kill: () => false });
   process.nextTick(() => stand.emit("error", err));
   return stand;
 }
@@ -123167,13 +123475,13 @@ function systemEvents(m, sessionId) {
 function informationalEvents(m, sessionId) {
   const out = [];
   const text2 = str(m.content).trim();
-  const level = str(m.level);
-  if (text2 && level !== "info") {
+  const level2 = str(m.level);
+  if (text2 && level2 !== "info") {
     const hook = /\bblocked by hook\b/.test(text2);
     out.push({
       type: "notice",
       sessionId,
-      level: level === "warning" ? "warning" : "info",
+      level: level2 === "warning" ? "warning" : "info",
       text: text2,
       from: "Claude Code",
       label: hook ? "hook" : "notice",
@@ -123188,8 +123496,8 @@ function notificationEvents(m, sessionId) {
   if (!text2 || str(m.key) === "error-compacting-conversation") return out;
   const color = str(m.color);
   const priority = str(m.priority);
-  const level = color === "error" ? "error" : color === "warning" || priority === "high" || priority === "immediate" ? "warning" : "info";
-  out.push({ type: "notice", sessionId, level, text: text2, from: "Claude Code", label: "notice" });
+  const level2 = color === "error" ? "error" : color === "warning" || priority === "high" || priority === "immediate" ? "warning" : "info";
+  out.push({ type: "notice", sessionId, level: level2, text: text2, from: "Claude Code", label: "notice" });
   return out;
 }
 function apiRetryEvents(m, sessionId) {
@@ -123898,8 +124206,8 @@ import { resolve as resolve18 } from "node:path";
 // packages/agent-host/src/adapters/always-allow.ts
 var AlwaysAllowRules = class {
   matchers = /* @__PURE__ */ new Set();
-  add(matcher) {
-    this.matchers.add(matcher);
+  add(matcher2) {
+    this.matchers.add(matcher2);
   }
   addAll(matchers) {
     for (const m of matchers) this.matchers.add(m);
@@ -124002,13 +124310,13 @@ var ClaudeCards = class {
       this.releaseOnCancel(requestId, options?.signal);
     });
   }
-  respondApproval(requestId, decision, scope, matcher) {
+  respondApproval(requestId, decision, scope, matcher2) {
     const p = this.pending.take(requestId);
     if (!p) return false;
     if (decision === "deny") {
       p.resolve({ behavior: "deny", message: "Denied by user" });
     } else {
-      if (decision === "always" && matcher) this.alwaysAllow.add(matcher);
+      if (decision === "always" && matcher2) this.alwaysAllow.add(matcher2);
       p.resolve({ behavior: "allow", updatedInput: p.input });
     }
     this.host.emit({ type: "approval_resolved", sessionId: this.host.sessionId, requestId, decision });
@@ -125315,8 +125623,8 @@ var ClaudeSession = class {
     this.notify = null;
     if (starting) this.emit({ type: "state_change", sessionId: this.sessionId, state: "working" });
   }
-  respondApproval(requestId, decision, scope, matcher) {
-    return this.cards.respondApproval(requestId, decision, scope, matcher);
+  respondApproval(requestId, decision, scope, matcher2) {
+    return this.cards.respondApproval(requestId, decision, scope, matcher2);
   }
   answerQuestion(requestId, answers) {
     return this.cards.answerQuestion(requestId, answers);
@@ -127283,7 +127591,7 @@ function reconcileOpenedThread(sessionId, answered, recorded) {
 // packages/agent-host/src/adapters/codex/sandbox.ts
 import { realpath as realpath8 } from "node:fs/promises";
 import { resolve as resolve19 } from "node:path";
-async function sandboxConfig(cwd, preset, readConfig) {
+async function sandboxConfig(cwd, preset, readConfig2) {
   const roots = [];
   try {
     const stdout = await runGit(cwd, ["rev-parse", "--path-format=absolute", "--git-dir", "--git-common-dir"], { timeout: 5e3 });
@@ -127296,7 +127604,7 @@ async function sandboxConfig(cwd, preset, readConfig) {
   } catch {
   }
   if (roots.length) {
-    const config2 = await readConfig();
+    const config2 = await readConfig2();
     const workspace = config2.sandbox_workspace_write;
     if (Array.isArray(workspace?.writable_roots)) {
       roots.push(...workspace.writable_roots.filter((p) => typeof p === "string"));
@@ -127476,7 +127784,7 @@ var CodexRequests = class {
   applyRules(matchers) {
     this.alwaysAllow.addAll(matchers);
   }
-  respondApproval(requestId, decision, _scope, matcher) {
+  respondApproval(requestId, decision, _scope, matcher2) {
     const open6 = this.approvals.take(requestId);
     if (open6 === void 0) return false;
     const serverId = open6.serverId;
@@ -127489,7 +127797,7 @@ var CodexRequests = class {
       this.host.emit({ type: "approval_resolved", sessionId: this.host.sessionId, requestId, decision });
       return true;
     }
-    if (decision === "always" && matcher) this.alwaysAllow.add(matcher);
+    if (decision === "always" && matcher2) this.alwaysAllow.add(matcher2);
     this.host.respond(serverId, { decision: toCodexDecision(decision) });
     this.host.emit({ type: "approval_resolved", sessionId: this.host.sessionId, requestId, decision });
     return true;
@@ -127519,12 +127827,12 @@ function requestOrigin(r) {
   };
 }
 
-// packages/agent-host/src/adapters/codex/bridge-path.ts
+// packages/agent-host/src/adapters/bridge-path.ts
 import { existsSync as existsSync16 } from "node:fs";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function bridgePath() {
   const candidates = [
-    new URL("./orchestrator-bridge.mjs", import.meta.url),
+    new URL("./codex/orchestrator-bridge.mjs", import.meta.url),
     // the source tree
     new URL("./codex-orchestrator-bridge.mjs", import.meta.url)
     // the bundled build-output layout
@@ -128290,7 +128598,7 @@ var CodexSession = class {
   turns = new CodexTurns();
   /**
    * Messages that arrived while a compact/review turn was running (measured while dogfooding,
-   * 2026-09-02, MGH session).
+   * 2026-09-02, a dogfooding session).
    *
    * In codex 0.147.0, turn/start **answers success while dropping the input** while a compact
    * turn is running — the rollout kept only the settings application (thread_settings_applied)
@@ -128658,8 +128966,8 @@ var CodexSession = class {
   outputSchemaParam() {
     return this.opts.outputSchema ? { outputSchema: this.opts.outputSchema } : {};
   }
-  respondApproval(requestId, decision, _scope, matcher) {
-    return this.serverRequests.respondApproval(requestId, decision, _scope, matcher);
+  respondApproval(requestId, decision, _scope, matcher2) {
+    return this.serverRequests.respondApproval(requestId, decision, _scope, matcher2);
   }
   applyRules(matchers) {
     this.serverRequests.applyRules(matchers);
@@ -129258,9 +129566,1776 @@ var CodexAdapter = class {
   }
 };
 
+// packages/agent-host/src/adapters/cursor-agent/index.ts
+import { execFile as execFile9 } from "node:child_process";
+import { promisify as promisify8 } from "node:util";
+
+// packages/agent-host/src/adapters/frames/recorder.ts
+import { appendFileSync as appendFileSync2, existsSync as existsSync18, mkdirSync as mkdirSync19 } from "node:fs";
+import { join as join44 } from "node:path";
+var processes = /* @__PURE__ */ new Map();
+function frameRecorder(sessionId, env = process.env) {
+  const dir = env.CC_RECORD_FRAMES;
+  if (!dir) return void 0;
+  mkdirSync19(dir, { recursive: true });
+  let n = (processes.get(sessionId) ?? 0) + 1;
+  while (existsSync18(join44(dir, `${sessionId}.${n}.jsonl`))) n++;
+  processes.set(sessionId, n);
+  const file2 = join44(dir, `${sessionId}.${n}.jsonl`);
+  const start2 = Date.now();
+  const write = (entry) => {
+    try {
+      appendFileSync2(file2, `${JSON.stringify({ t: Date.now() - start2, ...entry })}
+`);
+    } catch (e) {
+      console.error("[acp] recorder could not write", file2, errorMessage(e));
+    }
+  };
+  return {
+    frame: (direction, line) => write({ dir: direction, line }),
+    exit: (code2, signal) => write({ dir: "exit", msg: { code: code2, sig: signal } })
+  };
+}
+
+// packages/agent-host/src/adapters/acp/session.ts
+import { isAbsolute as isAbsolute10, join as join45 } from "node:path";
+
+// packages/agent-host/src/adapters/acp/connection.ts
+import { randomBytes as randomBytes8 } from "node:crypto";
+var RpcError = class extends Error {
+  constructor(code2, message, data) {
+    super(message);
+    this.code = code2;
+    this.data = data;
+  }
+  code;
+  data;
+};
+var METHOD_NOT_FOUND2 = -32601;
+var AUTH_REQUIRED = -32e3;
+var FRAME = external_exports.looseObject({
+  id: external_exports.union([external_exports.string(), external_exports.number(), external_exports.null()]).optional(),
+  method: external_exports.string().optional(),
+  params: external_exports.unknown().optional(),
+  result: external_exports.unknown().optional(),
+  error: external_exports.looseObject({ code: external_exports.number(), message: external_exports.string(), data: external_exports.unknown().optional() }).optional()
+});
+var NO_TIMEOUT_MS = 2 ** 31 - 1;
+var AcpConnection = class {
+  constructor(proc, handlers, label) {
+    this.proc = proc;
+    this.handlers = handlers;
+    this.label = label;
+    proc.on("error", (err) => this.finish(null, new Error(`${label} failed to start: ${err.message}`)));
+    proc.stdin.on("error", () => {
+    });
+    const lines = lineSplitter((line) => this.onLine(line));
+    proc.stdout.on("data", (chunk) => lines.push(chunk));
+    proc.stderr?.on("data", (d2) => {
+      const s = String(d2).trim();
+      if (s) console.error(`[${label}]`, s.slice(0, 500));
+    });
+    proc.on("exit", (code2) => this.finish(code2, null));
+  }
+  proc;
+  handlers;
+  label;
+  /**
+   * String ids with a per-connection prefix: a host that adopts a process the previous host was talking to can
+   * receive answers to that host's requests (§4.4), and plain counters on both would have collided.
+   */
+  idPrefix = `c${randomBytes8(3).toString("hex")}-`;
+  nextId = 1;
+  pending = new PendingRequests();
+  closed = false;
+  finished = false;
+  finish(code2, startError) {
+    if (this.finished) return;
+    this.finished = true;
+    const expected = this.closed && !startError;
+    this.closed = true;
+    this.pending.rejectAll(startError ?? new Error(expected ? `request cancelled while closing ${this.label}` : `${this.label} exited`));
+    this.handlers.onExit(code2, expected);
+  }
+  onLine(line) {
+    if (!line.trim()) return;
+    this.handlers.onFrame?.("in", line);
+    let raw;
+    try {
+      raw = JSON.parse(line);
+    } catch {
+      console.error(`[${this.label}] non-JSON output:`, line.slice(0, 200));
+      return;
+    }
+    const parsed = FRAME.safeParse(raw);
+    if (!parsed.success) {
+      console.error(`[${this.label}] a frame that is not a JSON-RPC message:`, line.slice(0, 200));
+      return;
+    }
+    const msg = parsed.data;
+    const id3 = msg.id ?? void 0;
+    if (id3 !== void 0 && msg.method === void 0) {
+      const error51 = msg.error ? new RpcError(msg.error.code, msg.error.message, msg.error.data) : null;
+      const settled = error51 ? this.pending.reject(id3, error51) : this.pending.resolve(id3, msg.result);
+      if (!settled) this.handlers.onStrayResponse?.(id3, msg.result, error51);
+      return;
+    }
+    if (id3 !== void 0 && msg.method !== void 0) {
+      void this.answer(id3, msg.method, msg.params);
+      return;
+    }
+    if (msg.method !== void 0) this.handlers.onNotification(msg.method, msg.params);
+  }
+  async answer(id3, method, params) {
+    try {
+      const result = await this.handlers.onRequest(id3, method, params);
+      this.write({ jsonrpc: "2.0", id: id3, result: result ?? null });
+    } catch (err) {
+      const e = err instanceof RpcError ? err : new RpcError(-32603, errorMessage(err));
+      this.write({ jsonrpc: "2.0", id: id3, error: { code: e.code, message: e.message, ...e.data === void 0 ? {} : { data: e.data } } });
+    }
+  }
+  /** The answer, unread: each caller parses it with the schema of what it asked (`wire.ts`) */
+  request(method, params, timeoutMs = 12e4) {
+    if (this.closed) return Promise.reject(new Error(`${this.label} has already exited`));
+    const id3 = `${this.idPrefix}${this.nextId++}`;
+    const answer = this.pending.wait(id3, timeoutMs, `No response for ${method}`);
+    this.write({ jsonrpc: "2.0", id: id3, method, params });
+    return answer;
+  }
+  notify(method, params) {
+    this.write({ jsonrpc: "2.0", method, params });
+  }
+  get isClosed() {
+    return this.closed;
+  }
+  stderrTail() {
+    return this.proc.stderrTail?.() ?? "";
+  }
+  write(obj) {
+    if (this.closed) return;
+    const line = JSON.stringify(obj);
+    this.handlers.onFrame?.("out", line);
+    this.proc.stdin.write(line + "\n");
+  }
+  /** stdin EOF first, so the agent can end its own children; the whole tree is killed after `graceMs` */
+  async dispose(graceMs = 2e3) {
+    if (this.closed) return;
+    this.closed = true;
+    this.proc.stdin.end();
+    const exited = this.finished || await waitForExit(this.proc, graceMs);
+    if (!exited) this.proc.kill("SIGKILL");
+  }
+  /** Lets go of the process without closing it (a host swap under the keeper): no EOF, no signal */
+  async detach() {
+    if (this.closed) return;
+    await this.proc.detach?.();
+    this.closed = true;
+    this.finished = true;
+    this.pending.rejectAll(new Error(`request abandoned: this host let go of ${this.label}`));
+  }
+};
+
+// packages/agent-host/src/adapters/acp/known-updates.ts
+var KNOWN_UPDATES = /* @__PURE__ */ new Set([
+  "agent_message_chunk",
+  "agent_thought_chunk",
+  "user_message_chunk",
+  "tool_call",
+  "tool_call_update",
+  "plan",
+  "available_commands_update",
+  "current_mode_update",
+  "config_option_update",
+  "session_info_update",
+  "usage_update",
+  "compaction_update",
+  "compaction_summary_chunk",
+  "notice",
+  "session/update",
+  "session/request_permission"
+]);
+
+// packages/agent-host/src/adapters/acp/wire.ts
+var nullish3 = (t) => t.nullish().transform((v) => v ?? void 0);
+var InitializeResult = external_exports.looseObject({
+  protocolVersion: external_exports.number(),
+  agentCapabilities: nullish3(
+    external_exports.looseObject({
+      loadSession: nullish3(external_exports.boolean()),
+      promptCapabilities: nullish3(external_exports.looseObject({ image: nullish3(external_exports.boolean()) })),
+      sessionCapabilities: nullish3(
+        external_exports.looseObject({ resume: external_exports.unknown().optional(), list: external_exports.unknown().optional(), close: external_exports.unknown().optional() })
+      )
+    })
+  ),
+  agentInfo: nullish3(external_exports.looseObject({ name: nullish3(external_exports.string()), version: nullish3(external_exports.string()) }))
+});
+var SelectOption = external_exports.looseObject({ value: external_exports.string(), name: nullish3(external_exports.string()) });
+var ConfigOption = external_exports.looseObject({
+  id: external_exports.string(),
+  category: nullish3(external_exports.string()),
+  type: nullish3(external_exports.string()),
+  currentValue: external_exports.unknown().optional(),
+  options: nullish3(external_exports.array(external_exports.union([SelectOption, external_exports.looseObject({ options: external_exports.array(SelectOption) })])))
+});
+var OpenedSession = external_exports.looseObject({
+  sessionId: nullish3(external_exports.string()),
+  configOptions: nullish3(external_exports.array(ConfigOption))
+});
+var StopReason = external_exports.enum(["end_turn", "max_tokens", "max_turn_requests", "refusal", "cancelled"]);
+var PromptResult = external_exports.looseObject({
+  stopReason: external_exports.union([StopReason, external_exports.string()]),
+  usage: nullish3(
+    external_exports.looseObject({
+      inputTokens: nullish3(external_exports.number()),
+      outputTokens: nullish3(external_exports.number()),
+      cachedReadTokens: nullish3(external_exports.number()),
+      cachedWriteTokens: nullish3(external_exports.number()),
+      thoughtTokens: nullish3(external_exports.number())
+    })
+  )
+});
+var ContentBlock = external_exports.looseObject({
+  type: external_exports.string(),
+  text: nullish3(external_exports.string()),
+  data: nullish3(external_exports.string()),
+  mimeType: nullish3(external_exports.string())
+});
+var ToolCallContent = external_exports.looseObject({
+  type: external_exports.string(),
+  content: nullish3(ContentBlock),
+  path: nullish3(external_exports.string()),
+  oldText: nullish3(external_exports.string()),
+  newText: nullish3(external_exports.string())
+});
+var CallStatus = external_exports.enum(["pending", "in_progress", "completed", "failed"]);
+var ToolCallFields = external_exports.looseObject({
+  toolCallId: external_exports.string(),
+  title: nullish3(external_exports.string()),
+  kind: nullish3(external_exports.string()),
+  status: nullish3(external_exports.union([CallStatus, external_exports.string()])),
+  rawInput: external_exports.unknown().optional(),
+  rawOutput: external_exports.unknown().optional(),
+  content: nullish3(external_exports.array(ToolCallContent)),
+  locations: nullish3(external_exports.array(external_exports.looseObject({ path: external_exports.string() })))
+});
+var Chunk = external_exports.looseObject({ content: ContentBlock, messageId: nullish3(external_exports.string()) });
+var SessionUpdate = external_exports.discriminatedUnion("sessionUpdate", [
+  Chunk.extend({ sessionUpdate: external_exports.literal("agent_message_chunk") }),
+  Chunk.extend({ sessionUpdate: external_exports.literal("agent_thought_chunk") }),
+  Chunk.extend({ sessionUpdate: external_exports.literal("user_message_chunk") }),
+  ToolCallFields.extend({ sessionUpdate: external_exports.literal("tool_call") }),
+  ToolCallFields.extend({ sessionUpdate: external_exports.literal("tool_call_update") }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("plan"),
+    entries: external_exports.array(external_exports.looseObject({ content: external_exports.string(), status: external_exports.string(), priority: nullish3(external_exports.string()) }))
+  }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("available_commands_update"),
+    availableCommands: external_exports.array(
+      external_exports.looseObject({ name: external_exports.string(), description: nullish3(external_exports.string()), input: nullish3(external_exports.looseObject({ hint: nullish3(external_exports.string()) })) })
+    )
+  }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("session_info_update"), title: nullish3(external_exports.string()) }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("usage_update"),
+    used: external_exports.number(),
+    size: external_exports.number(),
+    cost: external_exports.looseObject({ amount: external_exports.number(), currency: external_exports.string() }).nullish()
+  }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("current_mode_update"), currentModeId: external_exports.string() }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("config_option_update"), configOptions: external_exports.array(ConfigOption) }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("compaction_update"),
+    compactionId: external_exports.string(),
+    status: external_exports.string(),
+    summary: nullish3(external_exports.array(ContentBlock)),
+    error: nullish3(external_exports.string())
+  }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("compaction_summary_chunk"), compactionId: external_exports.string(), content: ContentBlock }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("notice"), severity: external_exports.string(), title: external_exports.string(), description: nullish3(external_exports.string()) })
+]);
+var SessionNotification = external_exports.looseObject({ sessionId: external_exports.string(), update: external_exports.looseObject({ sessionUpdate: external_exports.string() }) });
+function readUpdate(params) {
+  const n = SessionNotification.safeParse(params);
+  if (!n.success) return null;
+  const u = SessionUpdate.safeParse(n.data.update);
+  return u.success ? { sessionId: n.data.sessionId, update: u.data } : { sessionId: n.data.sessionId, other: n.data.update.sessionUpdate };
+}
+var PermissionOptionKind = external_exports.enum(["allow_once", "allow_always", "reject_once", "reject_always"]);
+var PermissionOption = external_exports.looseObject({ optionId: external_exports.string(), kind: external_exports.union([PermissionOptionKind, external_exports.string()]), name: nullish3(external_exports.string()) });
+var RequestPermission = external_exports.looseObject({
+  sessionId: external_exports.string(),
+  toolCall: ToolCallFields,
+  options: external_exports.array(PermissionOption)
+});
+function blockText(block) {
+  return block?.type === "text" ? block.text ?? "" : "";
+}
+
+// packages/agent-host/src/adapters/acp/normalize.ts
+var KIND_TOOL = {
+  execute: "Bash",
+  edit: "Edit",
+  delete: "Edit",
+  move: "Edit",
+  read: "Read",
+  search: "Grep",
+  fetch: "WebFetch",
+  think: "Think"
+};
+var OPEN_TAG = "<think>";
+var CLOSE_TAG = "</think>";
+function heldTail(text2) {
+  for (let n = Math.min(CLOSE_TAG.length - 1, text2.length); n > 0; n--) if (CLOSE_TAG.startsWith(text2.slice(text2.length - n))) return n;
+  return 0;
+}
+var AcpNormalizer = class {
+  constructor(sessionId, label = "The tool") {
+    this.sessionId = sessionId;
+    this.label = label;
+  }
+  sessionId;
+  label;
+  /** Calls announced as `tool_call` and not yet ended, by `toolCallId` */
+  open = /* @__PURE__ */ new Map();
+  /** Every field said of each call this turn, merged: a permission request may carry less than the call did (measured, Cursor) */
+  known = /* @__PURE__ */ new Map();
+  compactions = /* @__PURE__ */ new Map();
+  segment = 0;
+  lastChunk = "other";
+  /** The events one update says. `available_commands_update` and the like are read by the session, not here */
+  update(u) {
+    const sessionId = this.sessionId;
+    const held3 = u.sessionUpdate === "agent_message_chunk" ? [] : this.releaseHeld();
+    return [...held3, ...this.translate(u, sessionId)];
+  }
+  translate(u, sessionId) {
+    switch (u.sessionUpdate) {
+      case "agent_message_chunk": {
+        const text2 = blockText(u.content);
+        if (u.content.type === "image" && u.content.data && u.content.mimeType) {
+          return [{ type: "message_image", sessionId, mime: u.content.mimeType, data: u.content.data }];
+        }
+        if (this.lastChunk !== "message") this.segment++;
+        this.lastChunk = "message";
+        return this.messageText(u.messageId ?? `acp-${this.segment}`, text2);
+      }
+      case "agent_thought_chunk": {
+        this.lastChunk = "thought";
+        const text2 = blockText(u.content);
+        return text2 ? [{ type: "reasoning_delta", sessionId, text: text2 }] : [];
+      }
+      case "tool_call":
+      case "tool_call_update":
+        this.lastChunk = "other";
+        return this.toolCall(u);
+      case "plan":
+        return [planUpdate(sessionId, u.entries, "content")];
+      case "session_info_update":
+        return u.title ? [{ type: "session_title", sessionId, title: u.title, auto: true }] : [];
+      case "compaction_summary_chunk":
+        this.compactions.set(u.compactionId, (this.compactions.get(u.compactionId) ?? "") + blockText(u.content));
+        return [];
+      case "compaction_update":
+        return this.compaction(u);
+      case "notice":
+        return [{ type: "notice", sessionId, level: u.severity === "error" ? "error" : u.severity === "warning" ? "warning" : "info", text: [u.title, u.description].filter(Boolean).join("\n") }];
+      default:
+        return [];
+    }
+  }
+  /**
+   * A message's text, without the `</think>` a model leaves where it put its reasoning in the reply (OpenCode's free
+   * model, measured in its own store: a step's text is the reasoning, then `</think>`, then the reply, with no `<think>`
+   * before it). The first such tag of a message is dropped with the space after it; a tag split over two chunks is held
+   * until the next one says whether it is one. The reasoning before it stays reply text: it was shown as it came.
+   */
+  messageText(messageId, text2) {
+    const before = this.lastMessage === messageId ? [] : this.releaseHeld();
+    const m = this.messages.get(messageId) ?? { held: "", settled: false, trim: false };
+    this.messages.set(messageId, m);
+    let out = m.held + text2;
+    m.held = "";
+    if (m.trim) {
+      out = out.replace(/^\s+/, "");
+      m.trim = out === "";
+    }
+    if (!m.settled) {
+      const open6 = out.indexOf(OPEN_TAG);
+      const close = out.indexOf(CLOSE_TAG);
+      if (close !== -1 && (open6 === -1 || open6 > close)) {
+        const after = out.slice(close + CLOSE_TAG.length).replace(/^\s+/, "");
+        m.trim = after === "";
+        out = out.slice(0, close) + after;
+        m.settled = true;
+      } else if (open6 !== -1) m.settled = true;
+      else {
+        const keep = heldTail(out);
+        m.held = out.slice(out.length - keep);
+        out = out.slice(0, out.length - keep);
+      }
+    }
+    this.lastMessage = messageId;
+    return [...before, ...out ? [{ type: "message_delta", sessionId: this.sessionId, role: "assistant", text: out, messageId }] : []];
+  }
+  /** What a message held back, once something else comes: it was no tag */
+  releaseHeld() {
+    const m = this.lastMessage === null ? void 0 : this.messages.get(this.lastMessage);
+    if (!m?.held || this.lastMessage === null) return [];
+    const text2 = m.held;
+    m.held = "";
+    return [{ type: "message_delta", sessionId: this.sessionId, role: "assistant", text: text2, messageId: this.lastMessage }];
+  }
+  messages = /* @__PURE__ */ new Map();
+  lastMessage = null;
+  /** Calls the person (or a Stop) refused this turn: whatever the agent says of them after, they did not run as asked */
+  refused = /* @__PURE__ */ new Set();
+  /**
+   * What this turn has heard of a call, merged with `u`. `asked`: `u` is a permission request's, which may carry less than
+   * the call did (no input, measured on Cursor) and a looser kind: Cursor asks about a `delete` call as `kind: edit`
+   * (measured), so the call's own kind wins over the request's label
+   */
+  call(u, asked = false) {
+    const before = this.known.get(u.toolCallId);
+    const merged = { ...before, ...definedFields(u) };
+    return ToolCallFields.parse(asked && before?.kind ? { ...merged, kind: before.kind } : merged);
+  }
+  /** The call was answered no (a reject, or cancelled by a Stop): its end is said as not ok */
+  refuse(callId) {
+    this.refused.add(callId);
+  }
+  toolCall(u) {
+    const id3 = u.toolCallId;
+    const seen = this.call(u);
+    this.known.set(id3, seen);
+    const events2 = [];
+    let call2 = this.open.get(id3);
+    if (!call2) {
+      const ready = hasInput(seen.rawInput) || seen.status !== void 0 && seen.status !== "pending";
+      if (!ready) return [];
+      call2 = { output: "" };
+      this.open.set(id3, call2);
+      events2.push({ type: "tool_call", sessionId: this.sessionId, callId: id3, summary: summaryOf2(seen), ...seen.rawInput === void 0 ? {} : { input: seen.rawInput } });
+      if (seen.kind === "edit" || seen.kind === "delete" || seen.kind === "move") {
+        const paths = pathsOf2(seen);
+        if (paths.length) events2.push({ type: "files_touched", sessionId: this.sessionId, paths });
+      }
+    }
+    const output = outputOf(u);
+    if (output !== null && output.startsWith(call2.output) && output.length > call2.output.length && u.status !== "completed" && u.status !== "failed") {
+      events2.push({ type: "tool_output_delta", sessionId: this.sessionId, callId: id3, text: output.slice(call2.output.length) });
+      call2.output = output;
+    }
+    if (u.status === "completed" || u.status === "failed") {
+      this.open.delete(id3);
+      const refused2 = this.refused.delete(id3);
+      const ok = u.status === "completed" && !refused2 && rawOutputOk(seen.rawOutput);
+      const text2 = output ?? rawOutputText(seen.rawOutput) ?? call2.output;
+      events2.push(toolResultEvent(this.sessionId, id3, ok, text2 || (refused2 ? "Not run: the request was refused." : ""), `${this.label} did not return the output`));
+    }
+    return events2;
+  }
+  /** Calls still open when the turn ended: closed as failed, so no card spins forever (`why`: what ended them) */
+  endTurn(why = "the turn ended before this call finished") {
+    const events2 = [...this.releaseHeld(), ...[...this.open.keys()].map((id3) => toolResultEvent(this.sessionId, id3, false, "", why))];
+    this.open.clear();
+    this.known.clear();
+    this.refused.clear();
+    this.messages.clear();
+    this.lastChunk = "other";
+    return events2;
+  }
+  compaction(u) {
+    if (u.status === "in_progress") return [{ type: "activity", sessionId: this.sessionId, activity: "compacting" }];
+    const summary = u.summary?.map(blockText).join("") || this.compactions.get(u.compactionId) || "";
+    this.compactions.delete(u.compactionId);
+    const done2 = { type: "activity", sessionId: this.sessionId, activity: null };
+    if (u.status === "completed") return [done2, { type: "compaction", sessionId: this.sessionId, failed: false, ...summary ? { reason: firstLine2(summary, 300) } : {} }];
+    if (u.status === "failed") return [done2, { type: "compaction", sessionId: this.sessionId, failed: true, ...u.error ? { reason: u.error } : {} }];
+    return [done2];
+  }
+};
+function tokenUsage(result) {
+  const u = result.usage;
+  if (!u || u.inputTokens === void 0 && u.outputTokens === void 0) return null;
+  return {
+    inputTokens: u.inputTokens ?? 0,
+    outputTokens: (u.outputTokens ?? 0) + (u.thoughtTokens ?? 0),
+    cacheReadTokens: u.cachedReadTokens ?? 0,
+    cacheCreationTokens: u.cachedWriteTokens ?? 0
+  };
+}
+function definedFields(u) {
+  return Object.fromEntries(Object.entries(u).filter(([k2, v]) => v !== void 0 && k2 !== "sessionUpdate"));
+}
+function hasInput(v) {
+  return typeof v === "object" && v !== null && Object.keys(v).some((k2) => k2 !== "cwd");
+}
+function pathsOf2(u) {
+  const fromDiffs = (u.content ?? []).flatMap((c) => c.type === "diff" && c.path ? [c.path] : []);
+  return [.../* @__PURE__ */ new Set([...(u.locations ?? []).map((l) => l.path), ...fromDiffs])];
+}
+function summaryOf2(u) {
+  const tool = u.kind && KIND_TOOL[u.kind] || u.title || "tool";
+  const command = u.kind === "execute" ? commandOf(u) : "";
+  return { tool, title: firstLine2(command || u.title || tool), paths: pathsOf2(u) };
+}
+function outputOf(u) {
+  if (!u.content?.length) return null;
+  return u.content.map((c) => c.type === "content" ? blockText(c.content) : c.type === "diff" ? `${c.path ?? ""}
+${c.newText ?? ""}` : "").join("");
+}
+function rawOutputText(raw) {
+  if (typeof raw === "string") return raw;
+  const o = asObj(raw);
+  if (typeof o.output === "string") return o.output;
+  const streams = [o.stdout, o.stderr].filter((s) => typeof s === "string" && s.length > 0);
+  if (streams.length) return streams.join(streams[0]?.endsWith("\n") ? "" : "\n");
+  if (typeof o.error === "string") return o.error;
+  return null;
+}
+function rawOutputOk(raw) {
+  const o = asObj(raw);
+  if (typeof o.exitCode === "number" && o.exitCode !== 0) return false;
+  return o.success !== false;
+}
+function commandOf(u) {
+  const command = asObj(u.rawInput).command;
+  return typeof command === "string" ? command : "";
+}
+
+// packages/agent-host/src/adapters/acp/session.ts
+var TREE_NOTE_MS = 2e3;
+var CANCELLED = { outcome: { outcome: "cancelled" } };
+var AcpSession = class {
+  constructor(opts, emit, deps) {
+    this.opts = opts;
+    this.emit = emit;
+    this.deps = deps;
+    this.preset = opts.permissionPreset;
+    this.normalizer = new AcpNormalizer(opts.sessionId, deps.label);
+    this.unmapped = new UnmappedTypes(deps.label, opts.sessionId, KNOWN_UPDATES);
+    this.conn = new AcpConnection(
+      deps.process,
+      {
+        onNotification: (method, params) => this.onNotification(method, params),
+        onRequest: (id3, method, params) => this.onRequest(id3, method, params),
+        onExit: (code2, expected) => this.onExit(code2, expected),
+        ...deps.onFrame ? { onFrame: deps.onFrame } : {}
+      },
+      deps.label
+    );
+    this.ready = this.open();
+    this.ready.catch(() => {
+    });
+  }
+  opts;
+  emit;
+  deps;
+  externalId = null;
+  /**
+   * A process a previous host left is ended and the conversation opened again in a new one (`AcpAdapter`): a turn it was
+   * running is not carried on, so the host ends it as one the restart stopped (`SessionManager.adoptKept`)
+   */
+  takesOverTurn = false;
+  ready;
+  phase = "opening";
+  conn;
+  normalizer;
+  unmapped;
+  cards = new PendingCards();
+  cardIds = new CardIds();
+  rules = new AlwaysAllowRules();
+  queue = [];
+  turn = null;
+  /** While `session/load` is answered, every update is the replay of the conversation, not this turn (§4.3) */
+  replaying = false;
+  canClose = false;
+  preset;
+  commands = [];
+  lastTurnInputs = [];
+  /** Commands running now, by call id, and the clock that notes the tree while any runs */
+  commandsRunning = /* @__PURE__ */ new Set();
+  treeClock = null;
+  /** The last context reading taken, for the compact turn's comparison */
+  lastUsed = null;
+  /** The session's running cost as last read at a turn's end: a turn's own cost is what it adds (OpenCode sends the total) */
+  costTotal = null;
+  get sessionId() {
+    return this.opts.sessionId;
+  }
+  async open() {
+    try {
+      const init = InitializeResult.parse(
+        await this.conn.request(
+          "initialize",
+          {
+            protocolVersion: 1,
+            clientInfo: { name: "centralu", version: "1" },
+            // No fs and no terminal: the agent uses its own tools, whose approvals come as `session/request_permission`
+            clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false, session: { compaction: {} } }
+          },
+          6e4
+        )
+      );
+      const version2 = init.agentInfo?.version ?? await this.deps.version();
+      if (version2) this.emit({ type: "agent_version", sessionId: this.sessionId, version: version2 });
+      this.canClose = init.agentCapabilities?.sessionCapabilities?.close !== void 0;
+      const base2 = { cwd: this.opts.cwd, mcpServers: this.mcpServers() };
+      const resume = this.opts.resumeExternalId;
+      if (resume) {
+        const caps = init.agentCapabilities;
+        const method = caps?.loadSession ? "session/load" : caps?.sessionCapabilities?.resume !== void 0 ? "session/resume" : null;
+        if (!method) throw rpcError(`${this.deps.label} cannot reopen a conversation`, "session_not_found");
+        this.replaying = method === "session/load";
+        try {
+          OpenedSession.parse(await this.conn.request(method, { ...base2, sessionId: resume }, 15e4) ?? {});
+        } finally {
+          this.replaying = false;
+        }
+        this.externalId = resume;
+        this.costTotal = this.opts.runningCost?.last ?? null;
+      } else {
+        const opened = OpenedSession.parse(await this.conn.request("session/new", base2, 12e4));
+        if (!opened.sessionId) throw new Error(`${this.deps.label} opened a session without an id`);
+        this.externalId = opened.sessionId;
+        this.costTotal = 0;
+        this.opts.runningCost?.keep(0);
+      }
+      this.phase = "ready";
+      this.next();
+    } catch (err) {
+      throw this.openError(err);
+    }
+  }
+  openError(err) {
+    if (err instanceof RpcError && err.code === AUTH_REQUIRED) {
+      return rpcError(`${this.deps.label} is not logged in. Log in from a terminal, then try again.`, "not_logged_in");
+    }
+    if (err instanceof RpcError) return rpcError(`${this.deps.label}: ${err.message}`, "internal");
+    return err instanceof Error ? err : new Error(String(err));
+  }
+  /** Centralu's own tools through the same stdio bridge Codex starts (§6). Apps are not attached to an ACP agent yet */
+  mcpServers() {
+    const bridge = this.opts.orchestratorBridge;
+    if (!this.opts.orchestratorTools || !bridge) return [];
+    return [
+      {
+        name: ORCHESTRATOR_MCP_NAME,
+        command: process.execPath,
+        args: [bridgePath()],
+        env: [
+          { name: "CC_HOST_URL", value: bridge.url },
+          { name: "CC_BRIDGE_TOKEN", value: bridge.token },
+          { name: "CC_SESSION_ID", value: this.opts.sessionId }
+        ]
+      }
+    ];
+  }
+  appAttachment() {
+    return "failed";
+  }
+  send(text2, opts) {
+    this.enqueue({ text: text2, ...opts?.id ? { id: opts.id } : {}, ...opts?.compact ? { compact: true } : {} });
+  }
+  sendTracked(text2, observer) {
+    return new Promise((resolve21, reject) => this.enqueue({ text: text2, ...observer ? { observer } : {}, done: { resolve: resolve21, reject } }));
+  }
+  enqueue(input) {
+    if (this.phase === "closed") {
+      const e = new Error(`${this.deps.label} session is closed`);
+      input.observer?.fail(e);
+      input.done?.reject(e);
+      return;
+    }
+    this.queue.push(input);
+    this.next();
+  }
+  /** ACP runs one prompt at a time; a message sent during a turn waits for it (§5.4) */
+  next() {
+    if (this.phase !== "ready" || this.turn) return;
+    const input = this.queue.shift();
+    if (input) void this.run(input);
+  }
+  turnInputs() {
+    return this.lastTurnInputs;
+  }
+  async run(input) {
+    const turn = { input, stopAsked: false, cancelResent: false, usedBefore: this.lastUsed, used: null, compacted: false, costTotal: null };
+    this.turn = turn;
+    this.emit({ type: "state_change", sessionId: this.sessionId, state: "working" });
+    input.observer?.accepted?.();
+    let result = null;
+    let failure3 = null;
+    try {
+      result = PromptResult.parse(
+        await this.conn.request("session/prompt", { sessionId: this.externalId, prompt: [{ type: "text", text: input.text }] }, NO_TIMEOUT_MS)
+      );
+    } catch (err) {
+      failure3 = err instanceof Error ? err : new Error(String(err));
+    }
+    if (turn.stopTimer) clearTimeout(turn.stopTimer);
+    if (this.phase === "closed") return;
+    for (const e of this.normalizer.endTurn()) this.emit(e);
+    this.stopTreeClock();
+    this.closeCards();
+    this.lastTurnInputs = input.id ? [input.id] : [];
+    this.turn = null;
+    if (failure3) {
+      this.emit({ type: "error", sessionId: this.sessionId, error: { code: "internal", message: `${this.deps.label}: ${failure3.message}`, retryable: true } });
+      input.observer?.fail(failure3);
+      input.done?.reject(failure3);
+    } else if (result) {
+      this.endTurn(result, turn);
+      input.observer?.complete();
+      input.done?.resolve();
+    }
+    this.next();
+  }
+  endTurn(result, turn) {
+    const sessionId = this.sessionId;
+    const tokens = tokenUsage(result);
+    const cost = tokens ? this.turnCost(turn) : null;
+    if (tokens) this.emit({ type: "usage_update", sessionId, tokens: cost === null ? tokens : { ...tokens, costUsd: cost } });
+    if (result.stopReason === "end_turn" && this.inferredCompaction(turn)) {
+      this.emit({ type: "compaction", sessionId, failed: false, trigger: "manual" });
+    }
+    switch (result.stopReason) {
+      case "cancelled":
+        this.emit({ type: "state_change", sessionId, state: "waiting_input", reason: turn.stopAsked ? "interrupted" : INTERRUPTED_BY_TOOL });
+        return;
+      case "refusal":
+        this.emit({ type: "error", sessionId, error: { code: "internal", message: `${this.deps.label} refused to go on with this turn.`, retryable: false } });
+        return;
+      case "max_tokens":
+      case "max_turn_requests":
+        this.emit({
+          type: "notice",
+          sessionId,
+          level: "warning",
+          from: this.deps.label,
+          text: result.stopReason === "max_tokens" ? `${this.deps.label} stopped: the reply reached its length limit.` : `${this.deps.label} stopped: the turn reached its limit of steps.`
+        });
+        this.emit({ type: "turn_complete", sessionId });
+        return;
+      default:
+        this.emit({ type: "turn_complete", sessionId });
+    }
+  }
+  /**
+   * A command the tool runs may start helpers in a group of their own (Cursor's shell, measured on macOS), which outlive
+   * the tool if it is killed: its tree is noted while a command runs, so they are ended with it (`noteTree`)
+   */
+  watchCommands(e) {
+    const proc = this.deps.process;
+    if (!proc.noteTree) return;
+    if (e.type === "tool_call" && e.summary.tool === "Bash") {
+      this.commandsRunning.add(e.callId);
+      void proc.noteTree();
+      if (!this.treeClock) {
+        this.treeClock = setInterval(() => void proc.noteTree?.(), TREE_NOTE_MS);
+        this.treeClock.unref?.();
+      }
+    } else if (e.type === "tool_result") {
+      this.commandsRunning.delete(e.callId);
+      if (this.commandsRunning.size === 0) this.stopTreeClock();
+    }
+  }
+  stopTreeClock() {
+    this.commandsRunning.clear();
+    if (this.treeClock) clearInterval(this.treeClock);
+    this.treeClock = null;
+  }
+  /** What this turn added to the conversation's running cost, once a total from before it is known (`CreateSessionOpts.runningCost`); null otherwise */
+  turnCost(turn) {
+    if (turn.costTotal === null) return null;
+    const before = this.costTotal;
+    this.costTotal = turn.costTotal;
+    this.opts.runningCost?.keep(turn.costTotal);
+    return before === null || turn.costTotal < before ? null : turn.costTotal - before;
+  }
+  /** Centralu's own compact turn, with no protocol frame for it, whose reading went down (§5.6) */
+  inferredCompaction(turn) {
+    if (!this.deps.infersCompaction || !turn.input.compact || turn.compacted) return false;
+    return turn.usedBefore !== null && turn.used !== null && turn.used < turn.usedBefore;
+  }
+  interrupt() {
+    const turn = this.turn;
+    if (!turn || this.phase !== "ready") return;
+    turn.stopAsked = true;
+    this.conn.notify("session/cancel", { sessionId: this.externalId });
+    this.closeCards();
+    if (!turn.stopTimer) {
+      turn.stopTimer = setTimeout(() => {
+        if (this.turn === turn) this.emit(stopNotConfirmed(this.sessionId, `${this.deps.label} has not confirmed the stop; the turn may still be running.`));
+      }, this.deps.stopConfirmMs);
+      turn.stopTimer.unref?.();
+    }
+  }
+  onNotification(method, params) {
+    if (method !== "session/update") {
+      this.unmapped.note(method);
+      return;
+    }
+    const read = readUpdate(params);
+    if (!read || read.sessionId !== this.externalId || this.replaying) return;
+    const turn = this.turn;
+    this.resendLostCancel();
+    if ("other" in read) {
+      this.unmapped.note(read.other);
+      return;
+    }
+    const u = read.update;
+    switch (u.sessionUpdate) {
+      case "available_commands_update":
+        this.commands = u.availableCommands.map((c) => ({ name: c.name, ...c.description ? { description: c.description } : {}, ...c.input?.hint ? { argumentHint: c.input.hint } : {} }));
+        return;
+      case "usage_update":
+        if (u.used > 0 && u.size > 0) {
+          this.emit({ type: "context_update", sessionId: this.sessionId, used: u.used, window: u.size, exactness: "exact" });
+          this.lastUsed = u.used;
+          if (turn) turn.used = u.used;
+        }
+        if (turn && u.cost?.currency === "USD") turn.costTotal = u.cost.amount;
+        return;
+      default:
+        for (const e of this.normalizer.update(u)) {
+          this.watchCommands(e);
+          if (e.type !== "compaction") {
+            this.emit(e);
+            continue;
+          }
+          if (turn) turn.compacted = true;
+          this.emit({ ...e, trigger: turn?.input.compact ? "manual" : "auto" });
+        }
+    }
+  }
+  /**
+   * A cancel that reached the agent before its turn had begun is lost (ACP's cancel is a notification, answered by nothing
+   * but the turn's end): the turn going on after it, by an update or by a question, gets the cancel once more
+   */
+  resendLostCancel() {
+    const turn = this.turn;
+    if (!turn?.stopAsked || turn.cancelResent) return;
+    turn.cancelResent = true;
+    this.conn.notify("session/cancel", { sessionId: this.externalId });
+  }
+  /** Answers a question cancelled, and remembers the call did not run as asked */
+  refused(callId) {
+    this.normalizer.refuse(callId);
+    return CANCELLED;
+  }
+  /** Whether a question asked now belongs to a turn that still runs: none after Stop or after the turn's end */
+  askable(turn) {
+    return this.phase !== "closed" && turn !== null && this.turn === turn && !turn.stopAsked;
+  }
+  async onRequest(_id, method, params) {
+    if (method !== "session/request_permission") {
+      this.unmapped.note(method);
+      throw new RpcError(METHOD_NOT_FOUND2, `Method not found: ${method}`);
+    }
+    const req = RequestPermission.parse(params);
+    const turn = this.turn;
+    this.resendLostCancel();
+    if (!this.askable(turn)) return this.refused(req.toolCall.toolCallId);
+    const call2 = this.normalizer.call(req.toolCall, true);
+    const detail = detailOf(call2, this.opts.cwd);
+    const once = pick3(req.options, "allow_once");
+    const granted = once !== void 0 && await this.grantedWithoutCard(detail, call2);
+    if (!this.askable(turn)) return this.refused(req.toolCall.toolCallId);
+    if (granted && once) return selected(once);
+    const requestId = this.cardIds.next("acp-req");
+    return new Promise((resolve21) => {
+      this.cards.set(requestId, { callId: req.toolCall.toolCallId, options: req.options, answer: resolve21 });
+      this.emit({ type: "approval_request", sessionId: this.sessionId, requestId, detail });
+    });
+  }
+  /** `auto`, Centralu's own tool, an `edits` grant inside the folder, or a rule the person saved: answered `allow_once` without a card */
+  async grantedWithoutCard(detail, call2) {
+    if (this.preset === "auto" || this.deps.centraluToolOf?.(call2)) return true;
+    if (this.preset === "edits" && call2.kind === "edit" && detail.kind === "file_edit") {
+      const paths = editPaths(call2).map((p) => isAbsolute10(p) ? p : join45(this.opts.cwd, p));
+      if (await insideFolder(this.opts.cwd, paths)) return true;
+    }
+    const key = alwaysAllowKey(detail);
+    return key !== null && this.rules.allows(key);
+  }
+  respondApproval(requestId, decision, _scope, matcher2) {
+    const card = this.cards.take(requestId);
+    if (!card) return false;
+    if (decision === "always" && matcher2) this.rules.add(matcher2);
+    const option = pick3(card.options, decision === "deny" ? "reject_once" : "allow_once");
+    if (decision === "deny" || !option) this.normalizer.refuse(card.callId);
+    card.answer(option ? selected(option) : CANCELLED);
+    this.emit({ type: "approval_resolved", sessionId: this.sessionId, requestId, decision });
+    return true;
+  }
+  applyRules(matchers) {
+    this.rules.addAll(matchers);
+  }
+  setPermissionPreset(preset) {
+    this.preset = preset;
+  }
+  async listCommands() {
+    return this.commands;
+  }
+  closeCards() {
+    this.cards.release((requestId, card) => {
+      this.normalizer.refuse(card.callId);
+      card.answer(CANCELLED);
+      this.emit({ type: "approval_resolved", sessionId: this.sessionId, requestId, decision: "deny" });
+    });
+  }
+  onExit(code2, expected) {
+    if (expected || this.phase === "closed") return;
+    const wasOpen = this.phase === "ready";
+    this.phase = "closed";
+    this.closeCards();
+    const turn = this.turn;
+    this.turn = null;
+    if (turn?.stopTimer) clearTimeout(turn.stopTimer);
+    this.dropQueue("were still queued when the agent exited");
+    const failure3 = new Error(`${this.deps.label} exited${code2 === null ? "" : ` (code ${code2})`}`);
+    if (turn) {
+      for (const e of this.normalizer.endTurn()) this.emit(e);
+      this.stopTreeClock();
+      turn.input.observer?.fail(failure3);
+      turn.input.done?.reject(failure3);
+    }
+    if (turn || !wasOpen) {
+      const tail = this.conn.stderrTail().trim().split("\n").slice(-5).join("\n");
+      this.emit({ type: "error", sessionId: this.sessionId, error: { code: "adapter_crashed", message: tail ? `${failure3.message}: ${tail}` : failure3.message, retryable: true } });
+    } else {
+      this.emit({ type: "session_live", sessionId: this.sessionId, live: false, reason: "asleep" });
+    }
+  }
+  dropQueue(when) {
+    const left = this.queue.splice(0);
+    if (left.length === 0) return;
+    const e = new Error(`${left.length} message(s) ${when}`);
+    for (const i of left) {
+      i.observer?.fail(e);
+      i.done?.reject(e);
+    }
+    this.emit(undeliveredError(this.sessionId, left.length, when));
+  }
+  async dispose() {
+    if (this.phase === "closed") return;
+    const turn = this.turn;
+    this.phase = "closed";
+    this.closeCards();
+    this.dropQueue("were still queued when the session closed");
+    if (turn) {
+      for (const e of this.normalizer.endTurn("Centralu stopped this session while the call ran")) this.emit(e);
+      this.stopTreeClock();
+    }
+    if (turn && this.externalId) {
+      if (turn.stopTimer) clearTimeout(turn.stopTimer);
+      this.conn.notify("session/cancel", { sessionId: this.externalId });
+      turn.input.observer?.fail(new Error("the session closed"));
+      turn.input.done?.reject(new Error("the session closed"));
+    }
+    if (this.canClose && this.externalId && !this.conn.isClosed) {
+      await this.conn.request("session/close", { sessionId: this.externalId }, 2e3).catch(() => {
+      });
+    }
+    await this.conn.dispose();
+  }
+};
+function pick3(options, kind) {
+  return options.find((o) => o.kind === kind);
+}
+function selected(option) {
+  return { outcome: { outcome: "selected", optionId: option.optionId } };
+}
+var str2 = (v) => typeof v === "string" ? v : "";
+function editPaths(call2) {
+  const input = asObj(call2.rawInput);
+  const fromDiffs = (call2.content ?? []).flatMap((c) => c.type === "diff" && c.path ? [c.path] : []);
+  const named = [str2(input.filePath), str2(input.path), str2(input.file_path)].filter(Boolean);
+  return [.../* @__PURE__ */ new Set([...fromDiffs, ...(call2.locations ?? []).map((l) => l.path), ...named])];
+}
+function detailOf(call2, cwd) {
+  const input = asObj(call2.rawInput);
+  if (call2.kind === "execute") return { kind: "command", command: str2(input.command) || call2.title || "", cwd: str2(input.cwd) || cwd };
+  if (call2.kind === "edit" || call2.kind === "delete" || call2.kind === "move") {
+    const diffs = (call2.content ?? []).flatMap((c) => c.type === "diff" && c.path ? [{ path: c.path, diff: c.newText ?? "" }] : []);
+    const changes = diffs.length ? diffs : editPaths(call2).map((path2) => ({ path: path2, diff: str2(input.content) || str2(input.newString) || str2(input.new_string) }));
+    return fileEditDetail(call2.kind === "delete" ? changes.map((c) => ({ ...c, change: "delete" })) : changes);
+  }
+  return { kind: "other", raw: JSON.stringify({ title: call2.title, kind: call2.kind, input: call2.rawInput }).slice(0, 2e3) };
+}
+
+// packages/agent-host/src/adapters/acp/adapter.ts
+var STOP_CONFIRM_MS2 = 1e4;
+var AcpAdapter = class {
+  constructor(profile, spawn6 = spawnLocalAgent, stopConfirmMs = STOP_CONFIRM_MS2) {
+    this.profile = profile;
+    this.spawn = spawn6;
+    this.stopConfirmMs = stopConfirmMs;
+  }
+  profile;
+  spawn;
+  stopConfirmMs;
+  get descriptor() {
+    return this.profile.descriptor;
+  }
+  get capabilities() {
+    return this.profile.capabilities;
+  }
+  get surface() {
+    return this.profile.surface;
+  }
+  detect() {
+    return this.profile.detect();
+  }
+  installedVersion() {
+    return this.profile.installedVersion();
+  }
+  async createSession(opts, emit) {
+    const label = this.profile.descriptor.label;
+    const launch2 = await this.profile.launch(opts);
+    if (!launch2) throw rpcError(`${label} is not installed. ${this.profile.descriptor.install}`, "tool_not_installed");
+    const recorder = frameRecorder(opts.sessionId);
+    const spec = { command: launch2.command, args: launch2.args, cwd: opts.cwd, env: { ...process.env, ...launch2.env } };
+    const source = opts.processSource;
+    if (source?.adopt) await closeAdopted(source.adopt, opts.sessionId, emit);
+    const proc = source ? source.spawn(spec) : this.spawn({ ...spec, endsWithHost: true });
+    if (recorder) proc.once("exit", (code2, signal) => recorder.exit(code2, signal));
+    const session2 = new AcpSession(opts, emit, {
+      label,
+      process: proc,
+      version: () => this.profile.installedVersion(),
+      stopConfirmMs: this.stopConfirmMs,
+      ...this.profile.centraluToolOf ? { centraluToolOf: (call2) => this.profile.centraluToolOf?.(call2) ?? null } : {},
+      ...this.profile.infersCompaction ? { infersCompaction: true } : {},
+      ...recorder ? { onFrame: recorder.frame } : {}
+    });
+    try {
+      await session2.ready;
+    } catch (err) {
+      await session2.dispose().catch(() => {
+      });
+      throw err;
+    }
+    return session2;
+  }
+};
+var ADOPTED_EXIT_MS = 5e3;
+async function closeAdopted(adopt, sessionId, emit) {
+  adopt.process.kill("SIGKILL");
+  await waitForExit(adopt.process, ADOPTED_EXIT_MS);
+  for (const call2 of adopt.openCalls) emit(toolResultEvent(sessionId, call2.callId, false, "", "Centralu restarted while this call ran; it was stopped"));
+}
+
+// packages/agent-host/src/adapters/cursor-agent/install.ts
+import { existsSync as existsSync19, readdirSync as readdirSync11, realpathSync as realpathSync10 } from "node:fs";
+import { dirname as dirname22, join as join46, win32 as win327 } from "node:path";
+var realFs = {
+  exists: existsSync19,
+  list: (dir) => {
+    try {
+      return readdirSync11(dir);
+    } catch {
+      return [];
+    }
+  },
+  real: (p) => {
+    try {
+      return realpathSync10(p);
+    } catch {
+      return p;
+    }
+  }
+};
+var VERSION = /^(\d{4})\.(\d{1,2})\.(\d{1,2})(?:-(\d{2})-(\d{2})-(\d{2}))?-[a-f0-9]+$/;
+function newestVersion(names) {
+  const key = (n) => {
+    const m = VERSION.exec(n);
+    if (!m) return null;
+    const pad = (s) => (s ?? "00").padStart(2, "0");
+    return `${m[1]}${pad(m[2])}${pad(m[3])}${pad(m[4])}${pad(m[5])}${pad(m[6])}`;
+  };
+  const dated = names.flatMap((n) => {
+    const k2 = key(n);
+    return k2 ? [{ n, k: k2 }] : [];
+  });
+  dated.sort((a, b2) => a.k < b2.k ? 1 : a.k > b2.k ? -1 : 0);
+  return dated[0]?.n ?? null;
+}
+function findCursor(env = process.env, platform, fs2 = realFs) {
+  if (installsCliAsVersionFolders(platform)) {
+    const roots = [whichTool("agent", env, platform), whichTool("cursor-agent", env, platform)].flatMap((p) => p ? [win327.dirname(p)] : []).concat(env.LOCALAPPDATA ? [win327.join(env.LOCALAPPDATA, "cursor-agent")] : []);
+    for (const root3 of roots) {
+      const version2 = newestVersion(fs2.list(win327.join(root3, "versions")));
+      if (!version2) continue;
+      const dir = win327.join(root3, "versions", version2);
+      const node = win327.join(dir, "node.exe");
+      const entry = win327.join(dir, "index.js");
+      if (fs2.exists(node) && fs2.exists(entry)) return { version: version2, command: node, args: [entry], env: { CURSOR_INVOKED_AS: "agent.cmd" } };
+    }
+    return null;
+  }
+  for (const name of ["cursor-agent", "agent"]) {
+    const found = whichTool(name, env, platform);
+    if (!found) continue;
+    const real3 = fs2.real(found);
+    const dir = dirname22(real3);
+    const version2 = dir.split(/[\\/]/).pop() ?? "";
+    if (VERSION.test(version2) && fs2.exists(join46(dir, "index.js"))) return { version: version2, command: real3, args: [], env: {} };
+  }
+  return null;
+}
+
+// packages/agent-host/src/adapters/cursor-agent/surface.ts
+import { execFile as execFile8 } from "node:child_process";
+import { readdirSync as readdirSync12, readFileSync as readFileSync16 } from "node:fs";
+import { dirname as dirname23, join as join47 } from "node:path";
+import { promisify as promisify7 } from "node:util";
+
+// packages/agent-host/src/adapters/cursor-agent/surface-baseline.ts
+var SURFACE_BASELINE3 = {
+  recorded: "2026-10-26",
+  version: "agent 2026.10.22-27dcf5f",
+  offered: {
+    command: [
+      "about",
+      "agent",
+      "bedrock",
+      "create-chat",
+      "cursor/ask_question",
+      "cursor/create_plan",
+      "cursor/generate_image",
+      "cursor/list_available_models",
+      "cursor/task",
+      "cursor/update_todos",
+      "help",
+      "login",
+      "logout",
+      "ls",
+      "mcp",
+      "models",
+      "persist",
+      "plugin",
+      "prompt",
+      "resume",
+      "team",
+      "update",
+      "worker"
+    ],
+    message: [
+      "agent_message_chunk",
+      "agent_thought_chunk",
+      "available_commands_update",
+      "current_mode_update",
+      "plan",
+      "session_info_update",
+      "subagent_spawned",
+      "subagent_state_update",
+      "tool_call",
+      "tool_call_update",
+      "user_message_chunk"
+    ],
+    capability: [
+      "authMethods.cursor_login",
+      "loadSession",
+      "mcpCapabilities.http",
+      "mcpCapabilities.sse",
+      "promptCapabilities.audio",
+      "promptCapabilities.embeddedContext",
+      "promptCapabilities.image",
+      "sessionCapabilities.list"
+    ]
+  }
+};
+
+// packages/agent-host/src/adapters/cursor-agent/surface.ts
+var exec6 = promisify7(execFile8);
+var Initialized = external_exports.looseObject({ agentCapabilities: external_exports.unknown().optional(), authMethods: external_exports.array(external_exports.looseObject({ id: external_exports.string() })).optional() });
+async function gather() {
+  const install = findCursor();
+  if (!install) throw new Error("Cursor CLI is not installed on this machine (https://cursor.com/install)");
+  const env = { ...process.env, ...install.env };
+  const { stdout: help } = await exec6(install.command, [...install.args, "--help"], { timeout: 3e4, windowsHide: true, env });
+  const proc = spawnLocalAgent({ command: install.command, args: [...install.args, "acp"], cwd: process.cwd(), env });
+  const conn = new AcpConnection(proc, { onNotification: () => {
+  }, onRequest: async () => null, onExit: () => {
+  } }, "cursor-surface");
+  let init;
+  try {
+    init = await conn.request("initialize", { protocolVersion: 1, clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false }, clientInfo: { name: "centralu-surface", version: "1" } }, 6e4);
+  } finally {
+    await conn.dispose();
+  }
+  const dir = dirname23(install.args[0] ?? install.command);
+  const names = /* @__PURE__ */ new Set();
+  for (const f of readdirSync12(dir).filter((n) => n.endsWith(".js"))) {
+    const text2 = readFileSync16(join47(dir, f), "utf8");
+    if (!text2.includes("session/request_permission") && !text2.includes("cursor_login")) continue;
+    for (const m of text2.matchAll(/sessionUpdate:"([a-z_]+)"|"(cursor\/[a-z_]+)"/g)) {
+      const name = m[1] ?? m[2];
+      if (name) names.add(name);
+    }
+  }
+  return { version: install.version, help, initialize: JSON.stringify(init), bundle: JSON.stringify([...names].sort()) };
+}
+function capabilityNames(value, prefix = "") {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return prefix ? [prefix] : [];
+  const entries = Object.entries(asObj(value));
+  if (entries.length === 0) return prefix ? [prefix] : [];
+  return entries.flatMap(([k2, v]) => typeof v === "object" && v !== null ? capabilityNames(v, prefix ? `${prefix}.${k2}` : k2) : [prefix ? `${prefix}.${k2}` : k2]);
+}
+function readCursorSurface(inputs) {
+  const init = Initialized.parse(JSON.parse(inputs.initialize ?? "{}"));
+  const commands = [...(inputs.help ?? "").matchAll(/^ {2}([a-z][\w-]*)(?: |$)/gm)].flatMap((m) => m[1] ? [m[1]] : []);
+  const bundle = external_exports.array(external_exports.string()).parse(JSON.parse(inputs.bundle ?? "[]"));
+  return {
+    version: `agent ${inputs.version ?? "unknown"}`,
+    offered: {
+      command: [.../* @__PURE__ */ new Set([...commands, ...bundle.filter((n) => n.startsWith("cursor/"))])].sort(),
+      message: bundle.filter((n) => !n.startsWith("cursor/")).sort(),
+      capability: [...capabilityNames(init.agentCapabilities), ...(init.authMethods ?? []).map((a) => `authMethods.${a.id}`)].sort()
+    }
+  };
+}
+var BUNDLE = "read in the 2026.10.22-27dcf5f bundle (3635.index.js), 2026-10-26";
+var CURSOR_SURFACE = {
+  gather,
+  read: readCursorSurface,
+  limitations: [
+    {
+      kind: "capability",
+      name: "authMethods.cursor_login",
+      treatment: "blocked",
+      measured: "agent 2026.10.22-27dcf5f, not logged in: authenticate {methodId: cursor_login} started the browser login flow and did not answer in 8 s",
+      offeredWhenMeasured: true,
+      note: "Never called: a background session must not open a browser. Logging in stays `agent login` in a terminal."
+    },
+    {
+      kind: "message",
+      name: "current_mode_update",
+      treatment: "dropped",
+      measured: BUNDLE,
+      offeredWhenMeasured: true,
+      note: "Modes (agent, plan, ask) are not offered until the settings menu maps them (PR 2)."
+    },
+    {
+      kind: "message",
+      name: "subagent_spawned",
+      treatment: "dropped",
+      measured: `${BUNDLE}: sent only when the client advertises sub-agent support, which Centralu does not yet`,
+      offeredWhenMeasured: true,
+      note: "Sub-agents run as ordinary tool calls until they are mapped onto subagent_event (PR 2)."
+    },
+    {
+      kind: "message",
+      name: "subagent_state_update",
+      treatment: "dropped",
+      measured: `${BUNDLE}: as subagent_spawned`,
+      offeredWhenMeasured: true,
+      note: "As subagent_spawned."
+    },
+    ...["cursor/ask_question", "cursor/create_plan", "cursor/update_todos", "cursor/task", "cursor/generate_image"].map((name) => ({
+      kind: "command",
+      name,
+      treatment: "blocked",
+      measured: `${BUNDLE}: Cursor's own request to the client`,
+      offeredWhenMeasured: true,
+      note: name === "cursor/ask_question" ? "Answered method-not-found, so Cursor asks each question as a session/request_permission whose options are the answers (its own fallback). Question cards come in PR 2." : "Answered method-not-found; mapped in PR 2."
+    })),
+    {
+      kind: "command",
+      name: "cursor/list_available_models",
+      treatment: "dropped",
+      measured: "agent 2026.10.22-27dcf5f, logged in: answers every model with its options (effort as category thought_level, context and fast as model_config)",
+      offeredWhenMeasured: true,
+      note: "The model list comes in PR 2. Setting a model through session/set_config_option also writes it to ~/.cursor/acp-config.json (measured), which would change the default of every Cursor session the person runs, so PR 1 runs Cursor\u2019s default model."
+    }
+  ],
+  baseline: SURFACE_BASELINE3
+};
+
+// packages/agent-host/src/adapters/cursor-agent/index.ts
+var exec7 = promisify8(execFile9);
+var CAPABILITIES = {
+  approvals: true,
+  contextUsage: "none",
+  resume: true,
+  autoTitle: true,
+  attachments: [],
+  verbosities: [],
+  exclusiveWriter: false,
+  backgroundTasks: false,
+  midTurnInput: false,
+  gatesSteps: false,
+  toolDeferral: false,
+  instructionChannel: "server",
+  processModel: "per-session",
+  builtInSubagents: false,
+  peerMessaging: false,
+  sleep: false,
+  presets: ["auto"],
+  keepsRepoFilesOut: false,
+  roleText: false
+};
+var DESCRIPTOR = {
+  name: "cursor-agent",
+  label: "Cursor",
+  mark: "\u25B2",
+  install: "curl https://cursor.com/install -fsS | bash (Windows: irm 'https://cursor.com/install?win32=true' | iex)",
+  login: "agent login"
+};
+function centraluToolOfCall(call2) {
+  if (call2.kind !== "other") return null;
+  const m = /^([\w-]+): ([\w-]+)$/.exec(call2.title ?? "");
+  return m?.[2] && m[1] === `${ORCHESTRATOR_MCP_NAME}-${m[2]}` ? m[2] : null;
+}
+var STATUS_FOR_MS = 6e4;
+function cursorProfile() {
+  let status = null;
+  return {
+    descriptor: DESCRIPTOR,
+    capabilities: CAPABILITIES,
+    surface: CURSOR_SURFACE,
+    async launch() {
+      const install = findCursor();
+      return install ? { command: install.command, args: [...install.args, "acp"], env: install.env } : null;
+    },
+    async installedVersion() {
+      return findCursor()?.version ?? null;
+    },
+    centraluToolOf: centraluToolOfCall,
+    async detect() {
+      if (status && Date.now() - status.at < STATUS_FOR_MS) return status.result;
+      const install = findCursor();
+      let result;
+      if (!install) {
+        result = { tool: DESCRIPTOR.name, installed: false, loggedIn: false, detail: "Cursor CLI not found (install it from https://cursor.com/cli)" };
+      } else {
+        const out = await exec7(install.command, [...install.args, "status"], { timeout: 2e4, windowsHide: true, env: { ...process.env, ...install.env } }).then((r) => r.stdout, (e) => e.stdout ?? "");
+        const loggedIn = /\bLogged in\b/.test(out) && !/Not logged in/i.test(out);
+        result = { tool: DESCRIPTOR.name, installed: true, loggedIn, detail: loggedIn ? `agent ${install.version}` : `agent ${install.version} \xB7 login required` };
+      }
+      status = { at: Date.now(), result };
+      return result;
+    }
+  };
+}
+var CursorAgentAdapter = class extends AcpAdapter {
+  tool = "cursor-agent";
+  constructor() {
+    super(cursorProfile());
+  }
+};
+
+// packages/agent-host/src/adapters/opencode/index.ts
+import { execFile as execFile11 } from "node:child_process";
+import { promisify as promisify10 } from "node:util";
+
+// packages/agent-host/src/adapters/opencode/config-files.ts
+import { existsSync as existsSync20, readdirSync as readdirSync13, readFileSync as readFileSync17 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { dirname as dirname24, extname as extname3, join as join48, relative as relative7 } from "node:path";
+function readOpenCodeConfigs(cwd, env, home = homedir13()) {
+  const global2 = join48(env.XDG_CONFIG_HOME || join48(home, ".config"), "opencode");
+  const project2 = !env.OPENCODE_DISABLE_PROJECT_CONFIG;
+  const upward = project2 ? foldersUp(cwd) : [];
+  const dotFolders = [...upward.map((d2) => join48(d2, ".opencode")), join48(home, ".opencode"), ...env.OPENCODE_CONFIG_DIR ? [env.OPENCODE_CONFIG_DIR] : []];
+  const files = [
+    ...["config.json", "opencode.json", "opencode.jsonc"].map((f) => join48(global2, f)),
+    ...env.OPENCODE_CONFIG ? [env.OPENCODE_CONFIG] : [],
+    ...upward.flatMap((d2) => CONFIG_NAMES.map((f) => join48(d2, f))),
+    ...dotFolders.flatMap((d2) => CONFIG_NAMES.map((f) => join48(d2, f))),
+    ...CONFIG_NAMES.map((f) => join48(managedFolder(env), f))
+  ];
+  return {
+    layers: files.map(readConfig).filter((c) => c !== null),
+    agentFiles: [...new Set([global2, ...dotFolders].flatMap(agentNames))]
+  };
+}
+var CONFIG_NAMES = ["opencode.json", "opencode.jsonc"];
+function foldersUp(cwd) {
+  const out = [];
+  for (let d2 = cwd; ; d2 = dirname24(d2)) {
+    out.push(d2);
+    if (existsSync20(join48(d2, ".git")) || dirname24(d2) === d2) return out;
+  }
+}
+function managedFolder(env) {
+  if (env.OPENCODE_TEST_MANAGED_CONFIG_DIR) return env.OPENCODE_TEST_MANAGED_CONFIG_DIR;
+  return systemSettingsFolder("opencode", env);
+}
+function readConfig(path2) {
+  try {
+    const v = JSON.parse(withoutComments(readFileSync17(path2, "utf8")));
+    return isObj(v) ? v : null;
+  } catch {
+    return null;
+  }
+}
+function withoutComments(text2) {
+  let out = "";
+  for (let i = 0; i < text2.length; i++) {
+    const c = text2[i];
+    if (c === '"') {
+      const end = stringEnd(text2, i);
+      out += text2.slice(i, end);
+      i = end - 1;
+    } else if (c === "/" && text2[i + 1] === "/") {
+      while (i < text2.length && text2[i] !== "\n") i++;
+      out += "\n";
+    } else if (c === "/" && text2[i + 1] === "*") {
+      i = text2.indexOf("*/", i + 2);
+      if (i === -1) break;
+      i++;
+    } else out += c;
+  }
+  return out.replace(/,(\s*[}\]])/g, "$1");
+}
+function stringEnd(text2, start2) {
+  for (let i = start2 + 1; i < text2.length; i++) {
+    if (text2[i] === "\\") i++;
+    else if (text2[i] === '"') return i + 1;
+  }
+  return text2.length;
+}
+function agentNames(folder) {
+  const named = (sub, deep) => markdown(join48(folder, sub), deep).map((f) => relative7(join48(folder, sub), f).replaceAll("\\", "/").slice(0, -extname3(f).length));
+  return [...named("agent", true), ...named("agents", true), ...named("mode", false), ...named("modes", false)];
+}
+function markdown(folder, deep) {
+  try {
+    return readdirSync13(folder, { withFileTypes: true }).flatMap((e) => {
+      const path2 = join48(folder, e.name);
+      if (e.isDirectory()) return deep ? markdown(path2, deep) : [];
+      return e.name.endsWith(".md") ? [path2] : [];
+    });
+  } catch {
+    return [];
+  }
+}
+
+// packages/agent-host/src/adapters/opencode/config.ts
+function presetEnv(preset, env, configs, platform = HOST_PLATFORM) {
+  if (preset === "auto") return {};
+  const theirs = jsonObject(env.OPENCODE_CONFIG_CONTENT ?? "");
+  const all = [...configs.layers, theirs, ...env.OPENCODE_PERMISSION === void 0 ? [] : [{ permission: jsonObject(env.OPENCODE_PERMISSION) }]];
+  return holdEnv(preset === "safe" ? "safe" : "normal", theirs, all, configs.agentFiles, env.OPENCODE_PERMISSION, matcher(platform));
+}
+var NORMAL_ASKS = ["edit", "bash"];
+var SAFE_ASKS = ["edit", "bash", "webfetch", "websearch"];
+var NATIVE_AGENTS = ["build", "plan", "general", "explore"];
+var DEFAULT_ASKS = {
+  read: [["*", "allow"], ["*.env", "ask"], ["*.env.*", "ask"], ["*.env.example", "allow"]],
+  doom_loop: [["*", "ask"]]
+};
+function holdEnv(hold, theirs, all, agentFiles, permissionEnv, matches2) {
+  const named = (group) => all.flatMap((c) => Object.keys(asObj(c[group])));
+  const modes = new Set(named("mode"));
+  const configured = [.../* @__PURE__ */ new Set([...named("agent"), ...modes])];
+  const held3 = [.../* @__PURE__ */ new Set([...NATIVE_AGENTS, ...configured, ...agentFiles])];
+  const primary = hold === "safe" ? "build" : [...all].reverse().map((c) => c.default_agent).find((a) => typeof a === "string") ?? "build";
+  const entered = hold === "safe" ? held3 : [.../* @__PURE__ */ new Set([primary, ...NATIVE_AGENTS, ...configured])];
+  const globalLevel = level(all);
+  const levelOf = (name) => level([...all.map((c) => asObj(asObj(c.agent)[name])), ...all.map((c) => asObj(asObj(c.mode)[name]))]);
+  const rulesFor = (levels, asks) => ({ ...ownRules(hold, levels, asks, matches2), ...taskRules(hold, levels, held3, primary, asks, matches2) });
+  const globalRules = rulesFor([globalLevel], false);
+  const entries = (group, names) => Object.fromEntries(
+    names.map((name) => {
+      const entry = asObj(asObj(theirs[group])[name]);
+      return [name, { ...entry, permission: withRules(entry.permission, rulesFor([globalLevel, levelOf(name)], name === primary)) }];
+    })
+  );
+  const config2 = {
+    ...theirs,
+    permission: withRules(theirs.permission, globalRules),
+    agent: { ...asObj(theirs.agent), ...entries("agent", entered.filter((n) => !modes.has(n))) },
+    ...entered.some((n) => modes.has(n)) ? { mode: { ...asObj(theirs.mode), ...entries("mode", entered.filter((n) => modes.has(n))) } } : {},
+    ...hold === "safe" ? { default_agent: "build" } : {}
+  };
+  const out = { OPENCODE_CONFIG_CONTENT: JSON.stringify(config2) };
+  if (permissionEnv !== void 0 && hold === "safe") out.OPENCODE_PERMISSION = JSON.stringify(withRules(jsonObject(permissionEnv), globalRules));
+  return out;
+}
+function ownRules(hold, levels, asks, matches2) {
+  const presetTools = hold === "safe" ? SAFE_ASKS : NORMAL_ASKS;
+  const askedHere = levels.flatMap((l) => Object.entries(l).filter(([key, v]) => !/[*?]/.test(key) && key !== "task" && rulesOfValue(v).some(([, a]) => a === "ask")).map(([key]) => key));
+  const tools = [.../* @__PURE__ */ new Set([...Object.keys(DEFAULT_ASKS), ...askedHere, ...presetTools])];
+  return Object.fromEntries(
+    tools.flatMap((tool) => {
+      const theirs = levels.flatMap((l) => toolRules(l, tool, matches2));
+      const rules = hold === "safe" && SAFE_ASKS.includes(tool) ? [["*", "ask"], ...theirs.filter(([, a]) => a === "deny")] : [...DEFAULT_ASKS[tool] ?? (presetTools.includes(tool) ? [["*", "ask"]] : []), ...theirs];
+      const ordered = Object.entries(inOrder(rules));
+      const first = ordered.findIndex(([, a]) => a === "ask");
+      if (first < 0) return [];
+      const fromAsk = ordered.slice(first);
+      return [[ownKey(tool), Object.fromEntries(asks ? fromAsk : fromAsk.map(([p, a]) => [p, a === "ask" ? "deny" : a]))]];
+    })
+  );
+}
+function taskRules(hold, levels, held3, primary, asks, matches2) {
+  const theirs = levels.flatMap((l) => toolRules(l, "task", matches2));
+  const denies = theirs.filter(([, a]) => a === "deny");
+  const base2 = hold === "safe" ? [["*", "ask"], ...denies.some(([p]) => p === "*") ? [] : held3.map((n) => [n, "allow"])] : theirs;
+  const rules = [...base2, [primary, "deny"], ...denies];
+  return { [ownKey("task")]: inOrder(asks ? rules : rules.map(([p, a]) => [p, a === "ask" ? "deny" : a])) };
+}
+var ownKey = (tool) => `${tool}*`;
+var withRules = (p, rules) => ({ ...Object.fromEntries(Object.entries(permissionOf(p)).filter(([k2]) => !(k2 in rules))), ...rules });
+var permissionOf = (p) => typeof p === "string" ? { "*": p } : asObj(p);
+function merge2(a, b2) {
+  if (!isObj(a) || !isObj(b2)) return b2;
+  const out = { ...a, ...b2 };
+  for (const k2 of Object.keys(b2)) if (k2 in a && isObj(a[k2]) && isObj(b2[k2])) out[k2] = merge2(a[k2], b2[k2]);
+  return out;
+}
+function level(cs2) {
+  const tools = cs2.map((c) => c.tools).filter(isObj).reduce(merge2, {});
+  const fromTools = Object.fromEntries(Object.entries(asObj(tools)).map(([t, on2]) => [["write", "patch"].includes(t) ? "edit" : t, on2 ? "allow" : "deny"]));
+  const permission = cs2.flatMap((c) => c.permission === void 0 ? [] : [permissionOf(c.permission)]).reduce(merge2, {});
+  return asObj(merge2(fromTools, permission));
+}
+var rulesOfValue = (v) => typeof v === "string" ? [["*", v]] : Object.entries(asObj(v)).flatMap(([p, a]) => typeof a === "string" ? [[p, a]] : []);
+var toolRules = (l, tool, matches2) => Object.entries(l).filter(([key]) => matches2(tool, key)).flatMap(([, v]) => rulesOfValue(v));
+function inOrder(rules) {
+  const out = /* @__PURE__ */ new Map();
+  for (const [pattern, action] of rules) {
+    if (pattern === "*") out.clear();
+    out.delete(pattern);
+    out.set(pattern, action);
+  }
+  return Object.fromEntries(out);
+}
+function matcher(platform) {
+  const flags = openCodeMatchesAnyCase(platform) ? "si" : "s";
+  return (value, pattern) => {
+    const re2 = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
+    return new RegExp(`^${re2.endsWith(" .*") ? `${re2.slice(0, -3)}( .*)?` : re2}$`, flags).test(value);
+  };
+}
+
+// packages/agent-host/src/adapters/opencode/install.ts
+function findOpenCode(env = process.env) {
+  const path2 = whichTool("opencode", env);
+  return path2 ? launchFor(path2) : null;
+}
+
+// packages/agent-host/src/adapters/opencode/surface.ts
+import { execFile as execFile10 } from "node:child_process";
+import { readFileSync as readFileSync18 } from "node:fs";
+import { promisify as promisify9 } from "node:util";
+
+// packages/agent-host/src/adapters/opencode/surface-baseline.ts
+var SURFACE_BASELINE4 = {
+  recorded: "2026-10-25",
+  version: "opencode 1.19.4",
+  offered: {
+    command: [
+      "acp",
+      "agent",
+      "attach",
+      "completion",
+      "db",
+      "debug",
+      "export",
+      "github",
+      "import",
+      "mcp",
+      "models",
+      "plugin",
+      "pr",
+      "providers",
+      "run",
+      "serve",
+      "session",
+      "stats",
+      "uninstall",
+      "upgrade",
+      "web"
+    ],
+    message: [
+      "agent_message_chunk",
+      "agent_thought_chunk",
+      "available_commands_update",
+      "config_option_update",
+      "tool_call",
+      "tool_call_update",
+      "usage_update"
+    ],
+    capability: [
+      "authMethods.opencode-login",
+      "loadSession",
+      "mcpCapabilities.http",
+      "mcpCapabilities.sse",
+      "promptCapabilities.embeddedContext",
+      "promptCapabilities.image",
+      "sessionCapabilities.close",
+      "sessionCapabilities.fork",
+      "sessionCapabilities.list",
+      "sessionCapabilities.resume"
+    ]
+  }
+};
+
+// packages/agent-host/src/adapters/opencode/surface.ts
+var exec8 = promisify9(execFile10);
+var Initialized2 = external_exports.looseObject({ agentCapabilities: external_exports.unknown().optional(), authMethods: external_exports.array(external_exports.looseObject({ id: external_exports.string() })).optional() });
+async function gather2() {
+  const install = findOpenCode();
+  if (!install) throw new Error("OpenCode is not installed on this machine (npm i -g opencode-ai)");
+  const [{ stdout: version2 }, shown3] = await Promise.all([
+    exec8(install.command, [...install.args, "--version"], { timeout: 3e4, windowsHide: true }),
+    exec8(install.command, [...install.args, "--help"], { timeout: 3e4, windowsHide: true })
+  ]);
+  const help = shown3.stdout + shown3.stderr;
+  const proc = spawnLocalAgent({ command: install.command, args: [...install.args, "acp"], cwd: process.cwd(), env: process.env });
+  const conn = new AcpConnection(proc, { onNotification: () => {
+  }, onRequest: async () => null, onExit: () => {
+  } }, "opencode-surface");
+  let init;
+  try {
+    init = await conn.request("initialize", { protocolVersion: 1, clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false }, clientInfo: { name: "centralu-surface", version: "1" } }, 6e4);
+  } finally {
+    await conn.dispose();
+  }
+  const names = new Set([...readFileSync18(install.command).toString("latin1").matchAll(/sessionUpdate:"([a-z_]+)"/g)].flatMap((m) => m[1] ? [m[1]] : []));
+  return { version: version2.trim(), help, initialize: JSON.stringify(init), bundle: JSON.stringify([...names].sort()) };
+}
+function capabilityNames2(value, prefix = "") {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return prefix ? [prefix] : [];
+  const entries = Object.entries(asObj(value));
+  if (entries.length === 0) return prefix ? [prefix] : [];
+  return entries.flatMap(([k2, v]) => typeof v === "object" && v !== null ? capabilityNames2(v, prefix ? `${prefix}.${k2}` : k2) : [prefix ? `${prefix}.${k2}` : k2]);
+}
+function readOpenCodeSurface(inputs) {
+  const init = Initialized2.parse(JSON.parse(inputs.initialize ?? "{}"));
+  const commands = [...(inputs.help ?? "").matchAll(/^ {2}opencode ([a-z][\w-]*)/gm)].flatMap((m) => m[1] ? [m[1]] : []);
+  return {
+    version: `opencode ${inputs.version ?? "unknown"}`,
+    offered: {
+      command: [...new Set(commands)].sort(),
+      message: external_exports.array(external_exports.string()).parse(JSON.parse(inputs.bundle ?? "[]")).sort(),
+      capability: [...capabilityNames2(init.agentCapabilities), ...(init.authMethods ?? []).map((a) => `authMethods.${a.id}`)].sort()
+    }
+  };
+}
+var MEASURED = "opencode 1.19.4, 2026-10-26";
+var OPENCODE_SURFACE = {
+  gather: gather2,
+  read: readOpenCodeSurface,
+  limitations: [
+    {
+      kind: "message",
+      name: "compaction_update",
+      treatment: "worked-around",
+      measured: `${MEASURED}: /compact ran with the client advertising session.compaction and sent no compaction frame, only text and a smaller usage_update`,
+      offeredWhenMeasured: false,
+      note: "Its compaction is read from the compact turn Centralu started (infersCompaction, \xA75.6): ended end_turn with a smaller reading. When this kind appears, the frames can replace the inference."
+    },
+    {
+      kind: "capability",
+      name: "authMethods.opencode-login",
+      treatment: "blocked",
+      measured: `${MEASURED}: session/new works without authenticate (its own free models), and a provider's key is the person's OpenCode settings`,
+      offeredWhenMeasured: true,
+      note: "Never called: logging in stays `opencode auth login` in a terminal."
+    },
+    {
+      kind: "capability",
+      name: "sessionCapabilities.resume",
+      treatment: "dropped",
+      measured: `${MEASURED}: session/load answered in about 1 s, session/resume in about 45 s`,
+      offeredWhenMeasured: true,
+      note: "A conversation is reopened with session/load, whose replay is dropped."
+    },
+    {
+      kind: "capability",
+      name: "sessionCapabilities.fork",
+      treatment: "dropped",
+      measured: MEASURED,
+      offeredWhenMeasured: true,
+      note: "Forks start a new conversation with the handoff, as for any tool, until a fork maps onto session/fork."
+    },
+    {
+      kind: "message",
+      name: "config_option_update",
+      treatment: "dropped",
+      measured: MEASURED,
+      offeredWhenMeasured: true,
+      note: "The model and mode options are not offered in the settings menu yet; the person\u2019s OpenCode default model runs."
+    }
+  ],
+  baseline: SURFACE_BASELINE4
+};
+
+// packages/agent-host/src/adapters/opencode/index.ts
+var exec9 = promisify10(execFile11);
+var CAPABILITIES2 = {
+  approvals: true,
+  contextUsage: "exact",
+  resume: true,
+  autoTitle: true,
+  attachments: [],
+  verbosities: [],
+  exclusiveWriter: false,
+  backgroundTasks: false,
+  midTurnInput: false,
+  gatesSteps: false,
+  toolDeferral: false,
+  instructionChannel: "server",
+  processModel: "per-session",
+  builtInSubagents: false,
+  peerMessaging: false,
+  sleep: false,
+  keepsRepoFilesOut: false,
+  roleText: false
+};
+var DESCRIPTOR2 = {
+  name: "opencode",
+  label: "OpenCode",
+  mark: "O",
+  install: "npm i -g opencode-ai (or: curl -fsSL https://opencode.ai/install | bash)",
+  login: "opencode auth login"
+};
+var VERSION_FOR_MS = 6e4;
+function openCodeProfile() {
+  let known = null;
+  const version2 = async () => {
+    if (known && Date.now() - known.at < VERSION_FOR_MS) return known.version;
+    const l = findOpenCode();
+    const v = l ? await exec9(l.command, [...l.args, "--version"], { timeout: 2e4, windowsHide: true }).then((r) => r.stdout.trim() || null, () => null) : null;
+    known = { at: Date.now(), version: v };
+    return v;
+  };
+  return {
+    descriptor: DESCRIPTOR2,
+    capabilities: CAPABILITIES2,
+    surface: OPENCODE_SURFACE,
+    infersCompaction: true,
+    async launch(opts) {
+      const l = findOpenCode();
+      return l ? { command: l.command, args: [...l.args, "acp"], env: presetEnv(opts.permissionPreset, process.env, readOpenCodeConfigs(opts.cwd, process.env)) } : null;
+    },
+    installedVersion: version2,
+    async detect() {
+      if (!findOpenCode()) return { tool: DESCRIPTOR2.name, installed: false, loggedIn: false, detail: "OpenCode not found (npm i -g opencode-ai)" };
+      const v = await version2();
+      return { tool: DESCRIPTOR2.name, installed: true, loggedIn: true, detail: v ? `opencode ${v}` : "opencode" };
+    }
+  };
+}
+var OpenCodeAdapter = class extends AcpAdapter {
+  tool = "opencode";
+  constructor() {
+    super(openCodeProfile());
+  }
+};
+
 // packages/agent-host/src/adapters/registry.ts
 function createAdapters() {
-  const all = [new ClaudeAdapter(), new CodexAdapter()];
+  const all = [new ClaudeAdapter(), new CodexAdapter(), new CursorAgentAdapter(), new OpenCodeAdapter()];
   return new Map(all.map((a) => [a.tool, a]));
 }
 function registeredTool(adapters2, preferred) {
@@ -129306,6 +131381,14 @@ var ToolRegistry = class {
     }
     return this.firstTool(this.host.store.settings.appSetting("orchestrator_tool"));
   }
+  /**
+   * Why `tool` cannot run a session that demands this (`launchRefusal`), or null: the one rule, for every path that puts
+   * a tool on a session (`tool-fit.ts`). A tool this host does not run is `toolProblem`'s to say
+   */
+  refusal(tool, demands) {
+    const adapter = this.host.adapters.get(tool);
+    return adapter ? launchRefusal(adapter.capabilities, adapter.descriptor.label, demands) : null;
+  }
   /** Why `tool` cannot start a session here now (not registered, not installed, not logged in), or null when it can */
   async toolProblem(tool) {
     const adapter = this.host.adapters.get(tool);
@@ -129351,13 +131434,13 @@ var ApprovalRules = class {
    * restart (C-2). `matcher` is the card's own key, which the caller has checked (`respondApproval`).
    * A session with no project (#994) has no project to remember for: its project answer is kept for the session.
    */
-  rememberAlways(sessionId, sessionProjectId, scope, matcher) {
+  rememberAlways(sessionId, sessionProjectId, scope, matcher2) {
     const projectId = scope === "project" ? sessionProjectId : null;
     this.host.store.permissions.addApprovalRule({
       scope: projectId !== null ? "project" : "session",
       sessionId: projectId !== null ? void 0 : sessionId,
       projectId: projectId ?? void 0,
-      matcher,
+      matcher: matcher2,
       decision: "allow"
     });
   }
@@ -130331,6 +132414,8 @@ var OrchestratorSlot = class {
    * session's own settings takes over — this value is never read again after that.
    */
   configureOrchestrator(tool) {
+    const refused2 = this.host.refusal(tool, ORCHESTRATOR_DEMANDS);
+    if (refused2) throw unfitError(refused2);
     this.host.store.settings.setAppSetting("orchestrator_tool", tool);
   }
   /** The orchestrator being created (#839): a second ask while it is made waits on this one, never makes another */
@@ -130367,7 +132452,7 @@ var OrchestratorSlot = class {
       kind: "orchestrator",
       cwd: orchestratorHome(),
       tool: this.host.firstTool(configured),
-      permissionPreset: "normal"
+      permissionPreset: ORCHESTRATOR_DEMANDS.permissionPreset
     });
     this.host.rename(info.id, "Orchestrator");
     return this.host.meta.get(info.id);
@@ -130487,6 +132572,8 @@ var SessionSettings = class {
   host;
   async updateSettings(sessionId, s, by = "person") {
     const m = this.host.openSession(sessionId);
+    const refused2 = s.permissionPreset ? this.host.toolRefusal(m, m.tool, s.permissionPreset) : null;
+    if (refused2) throw unfitError(refused2);
     if (s.model !== void 0 && s.model !== m.model) this.host.cacheLedger.note(sessionId, "model_change");
     if (s.model !== void 0) m.model = s.model;
     if (s.effort !== void 0) m.effort = s.effort;
@@ -130998,8 +133085,8 @@ var UsageRecorder = class {
 };
 
 // packages/agent-host/src/sessions/manager.ts
-import { homedir as homedir14 } from "node:os";
-import { join as join46 } from "node:path";
+import { homedir as homedir15 } from "node:os";
+import { join as join51 } from "node:path";
 
 // packages/agent-host/src/dev-services/store.ts
 import Database2 from "better-sqlite3";
@@ -131016,7 +133103,7 @@ function pragmaNumber(db, name) {
 }
 
 // packages/agent-host/src/dev-services/store.ts
-import { existsSync as existsSync19, readFileSync as readFileSync16 } from "node:fs";
+import { existsSync as existsSync22, readFileSync as readFileSync19 } from "node:fs";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // packages/agent-host/src/dev-services/store/app-runs.ts
@@ -131626,8 +133713,10 @@ var ChildOwnershipRecords = class {
    * stored request names its caller too). A crash before the commit leaves every row on the original; after it, every
    * row on the new session, so the next host (a swap or a restart) reads one owner either way. `armReports`: children
    * whose report the original was waiting for in a call (its wait had taken the mark down), now owed to the new session.
+   * `then`: the rest of the handoff's move that is stored elsewhere (the mail, `MailService.handOver`), run last in the same
+   * transaction, so a refusal there leaves every row of both on the original.
    */
-  moveChildren(from, to, move) {
+  moveChildren(from, to, move, then) {
     this.db.transaction(() => {
       const owner = this.db.prepare(
         `UPDATE sessions SET
@@ -131650,6 +133739,7 @@ var ChildOwnershipRecords = class {
            ON CONFLICT(session_id) DO UPDATE SET caller_session_id = excluded.caller_session_id, marked_at = excluded.marked_at`
       );
       for (const id3 of move.armReports ?? []) arm.run(id3, to, Date.now());
+      then?.();
     })();
   }
 };
@@ -132180,7 +134270,7 @@ var UserAppAdoptionRecords = class {
 
 // packages/agent-host/src/dev-services/store/migrate-runner.ts
 import Database from "better-sqlite3";
-import { existsSync as existsSync18 } from "node:fs";
+import { existsSync as existsSync21 } from "node:fs";
 
 // packages/agent-host/src/dev-services/store/store-keys.ts
 var APP_SETTINGS_DDL = `
@@ -132524,7 +134614,7 @@ var MigrationRunner = class extends ReaderGate {
     const probe = bare2;
     const steps = probe.migrationSteps();
     const known = steps.at(-1)?.to ?? 0;
-    if (dbPath2 === ":memory:" || !existsSync18(dbPath2)) return empty(known);
+    if (dbPath2 === ":memory:" || !existsSync21(dbPath2)) return empty(known);
     const db = new Database(dbPath2, { readonly: true, fileMustExist: true });
     try {
       probe.db = db;
@@ -133415,11 +135505,11 @@ var StepsV28ToV40 = class extends MigrationRange {
           );
         `);
         const insert = this.db.prepare(`INSERT INTO messages_fts (rowid, body, session_id, seq) VALUES (?, ?, ?, ?)`);
-        const pick3 = this.db.prepare(
+        const pick4 = this.db.prepare(
           `SELECT rowid, session_id, seq, kind, payload FROM messages
            WHERE kind IN ${kinds} AND session_id NOT IN (SELECT id FROM sessions WHERE deleted_at IS NOT NULL)`
         );
-        for (const r of pick3.all()) {
+        for (const r of pick4.all()) {
           const body = indexedText(r.kind, r.payload);
           if (!body) continue;
           insert.run(r.rowid, body, r.session_id, r.seq);
@@ -134935,7 +137025,7 @@ var TrashRecords = class {
    */
   async purgeSession(sessionId, chunk = DELETE_CHUNK) {
     if (!this.isTrashed(sessionId)) return false;
-    const pick3 = this.db.prepare(`SELECT rowid FROM messages WHERE session_id = ? LIMIT ?`);
+    const pick4 = this.db.prepare(`SELECT rowid FROM messages WHERE session_id = ? LIMIT ?`);
     const dropFts = this.db.prepare(`DELETE FROM messages_fts WHERE rowid = ?`);
     const dropMsg = this.db.prepare(`DELETE FROM messages WHERE rowid = ?`);
     const pickSub = this.db.prepare(`SELECT rowid FROM subagent_messages WHERE session_id = ? LIMIT ?`);
@@ -134944,7 +137034,7 @@ var TrashRecords = class {
       const subs = pickSub.all(sessionId, chunk);
       for (const { rowid } of subs) dropSub.run(rowid);
       if (subs.length === chunk) return false;
-      const rows3 = pick3.all(sessionId, chunk);
+      const rows3 = pick4.all(sessionId, chunk);
       for (const { rowid } of rows3) {
         dropFts.run(rowid);
         dropMsg.run(rowid);
@@ -134975,12 +137065,12 @@ var TrashRecords = class {
   }
   /** One session's messages in seq order, one transaction per chunk, letting the event loop go between chunks (#179) */
   async walkMessages(sessionId, chunk, withPayload, each2) {
-    const pick3 = this.db.prepare(
+    const pick4 = this.db.prepare(
       `SELECT rowid, seq${withPayload ? ", kind, payload" : ""} FROM messages WHERE session_id = ? AND seq > ? ORDER BY seq LIMIT ?`
     );
     let after = Number.MIN_SAFE_INTEGER;
     const step = this.db.transaction(() => {
-      const rows3 = pick3.all(sessionId, after, chunk);
+      const rows3 = pick4.all(sessionId, after, chunk);
       each2(rows3);
       const last = rows3.at(-1);
       if (last) after = last.seq;
@@ -135156,14 +137246,14 @@ var SubagentStepRecords = class {
       this.db.prepare(`SELECT MAX(trashed_at) as prev FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL`).get(sessionId)
     );
     const at2 = prev !== null && prev >= now ? prev + 1 : now;
-    const pick3 = this.db.prepare(
+    const pick4 = this.db.prepare(
       `SELECT rowid, LENGTH(CAST(payload AS BLOB)) as bytes FROM subagent_messages
         WHERE session_id = ? AND trashed_at IS NULL AND rowid <= ? LIMIT ?`
     );
     const mark = this.db.prepare(`UPDATE subagent_messages SET trashed_at = ? WHERE rowid = ?`);
     const moved = { steps: 0, bytes: 0 };
     await this.inChunks(() => {
-      const rows3 = pick3.all(sessionId, last, chunk);
+      const rows3 = pick4.all(sessionId, last, chunk);
       for (const r of rows3) {
         mark.run(at2, r.rowid);
         moved.steps++;
@@ -135176,10 +137266,10 @@ var SubagentStepRecords = class {
   /** Puts a live session's trashed steps back under their cards. False when it had none in the trash */
   async restore(sessionId, chunk = CHUNK) {
     if (!this.hasTrashed(sessionId)) return false;
-    const pick3 = this.db.prepare(`SELECT rowid FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL LIMIT ?`);
+    const pick4 = this.db.prepare(`SELECT rowid FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL LIMIT ?`);
     const unmark = this.db.prepare(`UPDATE subagent_messages SET trashed_at = NULL WHERE rowid = ?`);
     await this.inChunks(() => {
-      const rows3 = pick3.all(sessionId, chunk);
+      const rows3 = pick4.all(sessionId, chunk);
       for (const r of rows3) unmark.run(r.rowid);
       return rows3.length < chunk;
     });
@@ -135193,12 +137283,12 @@ var SubagentStepRecords = class {
    */
   async purge(sessionId, upTo, chunk = CHUNK) {
     if (!this.hasTrashed(sessionId, upTo)) return false;
-    const pick3 = this.db.prepare(
+    const pick4 = this.db.prepare(
       `SELECT rowid FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL AND trashed_at <= ? LIMIT ?`
     );
     const drop = this.db.prepare(`DELETE FROM subagent_messages WHERE rowid = ?`);
     await this.inChunks(() => {
-      const rows3 = pick3.all(sessionId, upTo, chunk);
+      const rows3 = pick4.all(sessionId, upTo, chunk);
       for (const r of rows3) drop.run(r.rowid);
       return rows3.length < chunk;
     });
@@ -135236,7 +137326,7 @@ function resolveSchemaPath() {
     new URL("../../../protocol/src/schema/schema.sql", import.meta.url)
     // source tree
   ].map((u) => fileURLToPath4(u));
-  const found = candidates.find((p) => existsSync19(p));
+  const found = candidates.find((p) => existsSync22(p));
   if (!found) throw new Error(`schema.sql not found: ${candidates.join(", ")}`);
   return found;
 }
@@ -135271,7 +137361,7 @@ var Store = class extends MigrationRunner {
       this.db.pragma("synchronous = FULL");
       this.db.pragma("busy_timeout = 5000");
       this.db.pragma(`journal_size_limit = ${WAL_SIZE_LIMIT}`);
-      this.db.exec(readFileSync16(SCHEMA_PATH, "utf8"));
+      this.db.exec(readFileSync19(SCHEMA_PATH, "utf8"));
       this.migrate();
     } catch (e) {
       this.db.close();
@@ -135513,7 +137603,7 @@ async function gitBranchPr(projectCwd, branch, signal, timeoutMs = OK2.timeout)
 
 // packages/agent-host/src/dev-services/file-search.ts
 import { readdir as readdir11 } from "node:fs/promises";
-import { join as join44 } from "node:path";
+import { join as join49 } from "node:path";
 var MAX_FILES2 = 2e4;
 var TTL_MS2 = 15e3;
 var WALK_DEPTH = 6;
@@ -135551,7 +137641,7 @@ async function walk(root3) {
       if (e.name.startsWith(".") && e.name !== ".env") continue;
       if (e.isDirectory()) {
         if (SKIP.has(e.name) || depth >= WALK_DEPTH) continue;
-        queue.push({ dir: join44(dir, e.name), rel: wireJoin(rel, e.name), depth: depth + 1 });
+        queue.push({ dir: join49(dir, e.name), rel: wireJoin(rel, e.name), depth: depth + 1 });
       } else {
         out.push(wireJoin(rel, e.name).normalize("NFC"));
         if (out.length >= MAX_FILES2) break;
@@ -136639,8 +138729,8 @@ var HostCards = class {
 // packages/agent-host/src/dev-services/message-image.ts
 import { constants as constants8 } from "node:fs";
 import { open as open5, realpath as realpath9 } from "node:fs/promises";
-import { homedir as homedir13 } from "node:os";
-import { posix as posix3, sep as sep10, win32 as win327 } from "node:path";
+import { homedir as homedir14 } from "node:os";
+import { posix as posix3, sep as sep10, win32 as win328 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var OPEN_FLAGS = constants8.O_RDONLY | constants8.O_NONBLOCK | (constants8.O_NOFOLLOW ?? 0);
 var MESSAGE_IMAGE_KINDS = "PNG, JPEG, GIF or WebP";
@@ -136675,7 +138765,7 @@ function mentions(text2, written) {
   }
   return false;
 }
-function resolveWrittenPath(written, cwd, home = homedir13(), p = sep10 === "\\" ? win327 : posix3) {
+function resolveWrittenPath(written, cwd, home = homedir14(), p = sep10 === "\\" ? win328 : posix3) {
   const windows2 = p.sep === "\\";
   let abs;
   if (/^file:/i.test(written)) {
@@ -136742,13 +138832,13 @@ async function readMessageImage(abs, max = IMAGE_PREVIEW_MAX_BYTES) {
 
 // packages/agent-host/src/dev-services/attachments.ts
 import { lstat as lstat9, mkdir as mkdir6, readdir as readdir12, rm as rm8, writeFile as writeFile4 } from "node:fs/promises";
-import { extname as extname3, join as join45 } from "node:path";
-var root2 = () => join45(dataRoot(), "attachments");
+import { extname as extname4, join as join50 } from "node:path";
+var root2 = () => join50(dataRoot(), "attachments");
 function sessionDir(sessionId) {
   if (!isSessionId(sessionId)) {
     throw rpcError(`Not a session id: ${sessionId}`);
   }
-  return join45(root2(), sessionId);
+  return join50(root2(), sessionId);
 }
 var EXT = {
   "image/png": ".png",
@@ -136759,8 +138849,8 @@ var EXT = {
 async function saveAttachment(sessionId, name, mime, dataBase64) {
   const dir = sessionDir(sessionId);
   await mkdir6(dir, { recursive: true });
-  const ext2 = extname3(name) || EXT[mime] || "";
-  const file2 = join45(dir, `${Date.now()}-${Math.random().toString(36).slice(2, 8)}${ext2}`);
+  const ext2 = extname4(name) || EXT[mime] || "";
+  const file2 = join50(dir, `${Date.now()}-${Math.random().toString(36).slice(2, 8)}${ext2}`);
   const buf = Buffer.from(dataBase64, "base64");
   await writeFile4(file2, buf);
   return { kind: mime.startsWith("image/") ? "image" : "file", path: file2, name, mime, bytes: buf.length };
@@ -136781,10 +138871,10 @@ async function sweepAttachments(maxBytes = ATTACHMENTS_MAX_BYTES) {
     return 0;
   }
   for (const d2 of dirs) {
-    const dir = join45(root2(), d2);
+    const dir = join50(root2(), d2);
     const names = await readdir12(dir).catch(() => []);
     for (const name of names) {
-      const p = join45(dir, name);
+      const p = join50(dir, name);
       const s = await lstat9(p).catch(() => null);
       if (s?.isFile()) files.push({ path: p, size: s.size, mtime: s.mtimeMs });
     }
@@ -137230,10 +139320,10 @@ var ToolQueries = class {
 import { rmSync as rmSync6 } from "node:fs";
 
 // packages/agent-host/src/sessions/app-builder.ts
-import { relative as relative7 } from "node:path";
+import { relative as relative8 } from "node:path";
 function builderRole(app2, cwd) {
   const name = JSON.stringify(frameField(app2.name ?? app2.appId));
-  const rel = relative7(cwd, app2.dir) || ".";
+  const rel = relative8(cwd, app2.dir) || ".";
   const where2 = app2.projectId === null ? `This is a user-folder app (used across several projects). Your working folder is the app folder: ${app2.dir}` : app2.root ? `This project is the app: its manifest stands at the project's root, so your working folder is the app folder: ${app2.dir}` : `This is this project's app (committed to the repository and shared with the team). App folder: ${rel}/ (${app2.dir})`;
   const idRule = app2.root ? "whose id names the app" : "whose id matches the folder name";
   return `You are the session that builds the Centralu app ${name} (id ${app2.appId}). ${where2}
@@ -137687,7 +139777,7 @@ async function gitStatusForApp(summary, files) {
 // packages/agent-host/src/sessions/session-trash.ts
 import { basename as basename12 } from "node:path";
 import { rm as rm9 } from "node:fs/promises";
-import { existsSync as existsSync20, statSync as statSync14 } from "node:fs";
+import { existsSync as existsSync23, statSync as statSync14 } from "node:fs";
 var SessionTrash = class {
   constructor(host) {
     this.host = host;
@@ -137815,8 +139905,35 @@ var SessionTrash = class {
     if (this.host.readGrants.get(sessionId)?.size || this.host.delegationFlow.starts.agentConsents.has(sessionId)) {
       out.push("What the person allowed it (reading other sessions, starting agents) is dropped; a restored session asks again.");
     }
-    const mail2 = this.host.mailWork(sessionId);
-    if (!mail2) out.push("Its mailbox could not be read, so what it holds there is not known.");
+    const heir = this.host.handoffHeir(sessionId);
+    const plan = heir ? this.host.mailHandOverPreview(sessionId, heir) : null;
+    const mail2 = heir && plan ? null : this.host.mailWork(sessionId);
+    const listed2 = (list) => list.slice(0, 3).map((x) => plainQuoted(x.subject, 60)).join(", ") + (list.length > 3 ? ", \u2026" : "");
+    const threads = (n, what = "unfinished mail thread") => n === 1 ? `${/^[aeiou]/.test(what) ? "an" : "a"} ${what}` : `${n} ${what}s`;
+    if (heir && plan) {
+      const goes = plan.moved;
+      if (goes.length) {
+        const of2 = (role) => goes.filter((g5) => g5.role === role).length;
+        const parts = [
+          ...of2("assignee") ? [`is the assignee of ${threads(of2("assignee"))}`] : [],
+          ...of2("owner") ? [`owns ${threads(of2("owner"))}`] : [],
+          ...of2("member") ? [`is in ${threads(of2("member"))} as a member`] : []
+        ];
+        const joined = parts.length > 1 ? `${parts.slice(0, -1).join(", ")} and ${parts.at(-1)}` : parts[0];
+        out.push(`It ${joined} (${listed2(goes)}); ${goes.length === 1 ? "it goes" : "they go"} to ${name(heir)}, which took over from it, and ${goes.length === 1 ? "stays" : "stay"} there if it is restored.`);
+      }
+      if (plan.closed.length) {
+        out.push(`It has unread mail in ${threads(plan.closed.length, "closed mail thread")} (${listed2(plan.closed)}); that mail goes to ${name(heir)}.`);
+      }
+      const ownedLeft = plan.left.filter((l) => l.role === "owner");
+      if (ownedLeft.length) {
+        out.push(`It owns ${threads(ownedLeft.length)} whose assignee is ${name(heir)} (${listed2(ownedLeft)}); ${ownedLeft.length === 1 ? "it becomes" : "they become"} the person's.`);
+      }
+      const assignedLeft = plan.left.filter((l) => l.role === "assignee");
+      if (assignedLeft.length) {
+        out.push(`It is the assignee of ${threads(assignedLeft.length)} ${name(heir)} owns (${listed2(assignedLeft)}); ${assignedLeft.length === 1 ? "it goes" : "they go"} back to open with nobody on ${assignedLeft.length === 1 ? "it" : "them"}.`);
+      }
+    } else if (!mail2) out.push("Its mailbox could not be read, so what it holds there is not known.");
     else {
       const subjects = (list) => list.slice(0, 3).map((x) => plainQuoted(x, 60)).join(", ") + (list.length > 3 ? ", \u2026" : "");
       if (mail2.assigned.length) {
@@ -137965,7 +140082,7 @@ var SessionTrash = class {
           bytes: r.bytes + files,
           conversationFile: !r.hasConversationFile ? "none" : record2.removeExternal ? "remove" : "keep",
           // Only a worktree still on disk is listed — the merged-worktree cleanup removes the folder before the session archive is emptied
-          worktree: r.worktree && existsSync20(r.worktree.path) ? { ...r.worktree, remove: record2.removeWorktree } : null
+          worktree: r.worktree && existsSync23(r.worktree.path) ? { ...r.worktree, remove: record2.removeWorktree } : null
         };
       })
     );
@@ -138037,7 +140154,7 @@ var SessionTrash = class {
         const home = projects.find((p) => p.id === record2.projectId) ?? (record2.projectPath ? projects.find((p) => p.path === record2.projectPath) : void 0);
         if (home) {
           projectId = home.id;
-        } else if (record2.projectPath && existsSync20(record2.projectPath) && statSync14(record2.projectPath).isDirectory()) {
+        } else if (record2.projectPath && existsSync23(record2.projectPath) && statSync14(record2.projectPath).isDirectory()) {
           this.host.store.projects.addProject({
             id: record2.projectId,
             path: record2.projectPath,
@@ -138106,8 +140223,8 @@ var SessionTrash = class {
         const path2 = s.worktree.path;
         const repo = record2.projectPath;
         await gitWorktreeRemove(repo, path2, true).catch((e) => {
-          if (!existsSync20(path2)) return;
-          if (!existsSync20(repo)) {
+          if (!existsSync23(path2)) return;
+          if (!existsSync23(repo)) {
             throw rpcError(`The project folder ${repo} is not there any more (moved or deleted), so git cannot remove its worktree at ${path2}. It stays in the session archive: delete that folder yourself, then delete this entry again.`);
           }
           throw rpcError(`Could not remove the worktree at ${path2}: ${e.message.trim()}. It stays in the session archive; remove the folder or fix the cause, then delete it again.`);
@@ -138417,7 +140534,7 @@ ${list}` : `${label} has no ordinary session. The person has to open one there;
 
 // packages/agent-host/src/sessions/manager.ts
 var SessionManager = class {
-  constructor(store2, adapters2, emit, endpoint, worktreeRoot = join46(homedir14(), DATA_DIR, "worktrees"), keeperOpts = {}) {
+  constructor(store2, adapters2, emit, endpoint, worktreeRoot = join51(homedir15(), DATA_DIR, "worktrees"), keeperOpts = {}) {
     this.store = store2;
     this.adapters = adapters2;
     this.emit = emit;
@@ -139200,6 +141317,23 @@ var SessionManager = class {
     const text2 = this.projectRegistry.projectTrusted(m.projectId) ? "Restarted the agent to apply this project's new trust: it now reads the project's own settings and instruction files (CLAUDE.md, AGENTS.md)." : "Restarted the agent to apply this project's removed trust: it now reads only your own settings, not the project's files.";
     this.onEvent({ type: "notice", sessionId, level: "info", from: "Centralu", label: "restart", text: text2 });
   }
+  /**
+   * The turn a kept process was running is over after a swap (#698): the session goes idle with the quit mark and its line,
+   * and the report it owed goes now, rather than naming a later turn
+   */
+  turnLostInSwap(m) {
+    const change = { type: "state_change", sessionId: m.id, state: "idle", reason: "reattach_failed" };
+    this.events.applyStateHint(change, m);
+    this.interruptions.markStoppedByQuit(m, true);
+    this.store.sessions.upsertSession(m);
+    this.emit(change);
+    const turnBy = this.children.turnEnded(m.id, null);
+    if (this.children.awaitingReport.has(m.id)) void this.reports.reportBackIfAwaited(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, void 0, turnBy);
+    else {
+      if (turnBy.by !== "person") void this.reports.tellAskerOfInterruption(m.id, this.children.turnOwners.get(m.id)?.callerId);
+      void this.reports.reportToPersonIfOwed(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, turnBy);
+    }
+  }
   /**
    * Re-attaches the tool processes a previous host left running in the keeper (#280 step 2), so
    * those sessions come back live — mid-turn, with a waiting approval re-delivered by the tool —
@@ -139220,21 +141354,12 @@ var SessionManager = class {
         const r = await this.resumeSession(k2.sessionId, k2.process).catch((err) => ({ resumed: false, reason: err.message }));
         const adopted = r.resumed ? this.handles.get(k2.sessionId) : void 0;
         if (adopted) this.adoptedProcesses.add(adopted);
+        if (adopted?.takesOverTurn === false && inTurn(m.state)) this.turnLostInSwap(m);
         if (this.children.queued.has(k2.sessionId)) this.queue.scheduleDrain(k2.sessionId);
         if (!r.resumed) {
           console.error(`[agent-host] could not re-attach ${k2.sessionId.slice(0, 8)}: ${r.reason ?? "unknown"}`);
           if (inTurn(m.state)) {
-            const change = { type: "state_change", sessionId: m.id, state: "idle", reason: "reattach_failed" };
-            this.events.applyStateHint(change, m);
-            this.interruptions.markStoppedByQuit(m, true);
-            this.store.sessions.upsertSession(m);
-            this.emit(change);
-            const turnBy = this.children.turnEnded(m.id, null);
-            if (this.children.awaitingReport.has(m.id)) void this.reports.reportBackIfAwaited(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, void 0, turnBy);
-            else {
-              if (turnBy.by !== "person") void this.reports.tellAskerOfInterruption(m.id, this.children.turnOwners.get(m.id)?.callerId);
-              void this.reports.reportToPersonIfOwed(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, turnBy);
-            }
+            this.turnLostInSwap(m);
           } else if (this.children.pausedReports.has(m.id)) {
             void this.reports.reportBackIfAwaited(m.id, { type: "state_change", sessionId: m.id, state: "idle" });
           }
@@ -139468,6 +141593,10 @@ var SessionManager = class {
    * A session is a slot, and the agent is a tool — the slot (name, order, history, grid panel) is left
    * untouched, and only the tool underneath it is swapped.
    */
+  /** Why `tool` cannot run this session as its next launch would, under `preset` (its own by default), or null (`tool-fit.ts`) */
+  toolRefusal(m, tool = m.tool, preset = m.permissionPreset) {
+    return this.toolRegistry.refusal(tool, sessionDemands(m, this.launchInputs.settingFilesFor(m), preset));
+  }
   async switchTool(sessionId, tool) {
     this.notBeingRemoved(sessionId);
     this.refuseWhileLettingGo();
@@ -139475,6 +141604,8 @@ var SessionManager = class {
     if (m.tool === tool) return { ...m, live: this.handles.has(sessionId) };
     const adapter = this.adapters.get(tool);
     if (!adapter) throw rpcError(`Unknown tool: ${tool}`, "tool_not_installed");
+    const refused2 = this.toolRefusal(m, tool);
+    if (refused2) throw unfitError(refused2);
     const d2 = await adapter.detect();
     if (!d2.installed || !d2.loggedIn) {
       throw rpcError(`Cannot use ${tool}: ${d2.detail}`, "tool_not_installed");
@@ -139506,7 +141637,7 @@ var SessionManager = class {
     this.events.settleState(m, { type: "state_change", sessionId, state: "idle", reason: "tool_changed" });
     return { ...m, live: false };
   }
-  respondApproval(sessionId, requestId, decision, scope, matcher) {
+  respondApproval(sessionId, requestId, decision, scope, matcher2) {
     const m = this.meta.get(sessionId);
     const ask = this.hostCards.hostAsks.get(requestId);
     if (ask && ask.sessionId === sessionId) {
@@ -139521,7 +141652,7 @@ var SessionManager = class {
     }
     const pending = m?.pendingApproval;
     const key = pending?.requestId === requestId ? alwaysAllowKey(pending.detail) : "";
-    const remembered = decision === "always" && matcher !== void 0 && key !== "" && matcher === key ? matcher : void 0;
+    const remembered = decision === "always" && matcher2 !== void 0 && key !== "" && matcher2 === key ? matcher2 : void 0;
     const landed = this.requireHandle(sessionId).respondApproval(requestId, decision, scope, remembered);
     if (!landed && this.hostCards.answeredApprovals.get(requestId) === sessionId) return;
     if (landed) {
@@ -140067,6 +142198,15 @@ var SessionManager = class {
           return null;
         }
       },
+      mailHandOver: (...a) => self2.mailHooks?.handOver?.(...a) ?? [],
+      mailHandOverPreview: (from, to) => {
+        try {
+          return self2.mailHooks?.handOverPreview?.(from, to) ?? { moved: [], closed: [], left: [] };
+        } catch (e) {
+          console.error(`[mail] ${from.slice(0, 8)}: what a handoff would move could not be read (${errorMessage(e)})`);
+          return null;
+        }
+      },
       mailGone: (id3) => {
         try {
           self2.mailHooks?.sessionGone(id3);
@@ -140233,6 +142373,8 @@ var SessionManager = class {
       },
       nameOf: (...a) => self2.reports.nameOf(...a),
       toolProblem: (...a) => self2.toolRegistry.toolProblem(...a),
+      toolRefusal: (...a) => self2.toolRefusal(...a),
+      refusal: (...a) => self2.toolRegistry.refusal(...a),
       trashSession: (...a) => self2.trashSession(...a),
       purgeSession: (...a) => self2.purgeSession(...a),
       trashIf: (...a) => self2.trash.trashIf(...a),
@@ -141394,6 +143536,91 @@ id: ${sessionIdOf(assignee)}` : "";
       return moved;
     });
   }
+  /**
+   * A handoff moves the original session's mail to the session that took over (§4.1, #693, #738, #1574): in each thread that moves,
+   * the successor takes the original's place, as owner, as assignee or as a member, and what the original has not read waits for the
+   * successor instead (`moveUnreadReceipts`). Each thread keeps its state and leaves an `event`; nobody is woken inside the move
+   * (it runs before the successor's first message); the unread mail waits for the successor's next rest or the caller's poke. The
+   * host's own write, like `partyGone`'s: no policy or rate check, since the handoff's own checks came first (`HandoffChildren.moveChildren` trusts its caller the same way).
+   *
+   * `which`: `all` for an original that goes (every thread not done it is in), or the sessions whose work moved to the successor
+   * while the original stays (the threads the original owns with one of them as assignee). A thread the successor already holds
+   * the other side of (it owns what the original is assigned, or the reverse) stays where it is: the two sides of a thread are two
+   * parties, and the original's departure moves it on as before (`partyGone`); it is returned as `left`, so the note says so. A
+   * done thread the original has unread mail in (a closing report it never read) stays done and keeps its parties; the successor
+   * joins it and the unread mail waits for it (`closed`). Called inside the transaction of the children's move
+   * (`ChildOwnershipRecords.moveChildren`), so the mail and the children move together or not at all. Returns every thread it
+   * looked at by what became of it, for the handoff note (`handOverPreview` reads the same plan without writing)
+   */
+  handOver(fromSessionId, toSessionId, which) {
+    if (fromSessionId === toSessionId || !this.records.hasThreads()) return [];
+    const from = this.sessionAddress(fromSessionId);
+    const to = this.sessionAddress(toSessionId);
+    return this.run(() => {
+      const now = this.now();
+      const done2 = this.handOverPlan(from, to, which).map((p) => {
+        const { thread: t, role, kind } = p;
+        if (kind === "left") {
+          this.records.handleUnread(t.id, from, now);
+          return { ...p, unread: 0 };
+        }
+        if (kind === "closed") {
+          this.records.putParticipantIfAbsent(t.id, to, "member", now);
+          return { ...p, unread: this.records.moveUnreadReceipts(t.id, from, to, now) };
+        }
+        this.records.leaveParticipant(t.id, from, now);
+        if (role === "member") this.records.putParticipantIfAbsent(t.id, to, "member", now);
+        else this.records.putParticipant(t.id, to, role, now);
+        const facts = { change: "handed_over", party: from, to, role };
+        const after = role === "member" ? (this.insertEvent(t.id, "The session in this thread handed over: the session that took over is in it instead.", facts, now), t) : this.moveState(
+          t,
+          role === "owner" ? { owner: to } : { assignee: to },
+          now,
+          facts,
+          role === "owner" ? "The owner handed over: the session that took over owns the thread." : "The assignee handed over: the session that took over has the work."
+        );
+        return { thread: after, role, kind, unread: this.records.moveUnreadReceipts(t.id, from, to, now) };
+      });
+      if (which === "all") for (const t of this.records.doneThreadsWithUnread(from)) this.records.handleUnread(t.id, from, now);
+      return done2;
+    });
+  }
+  /**
+   * What `handOver` would do with the original's mail, read only: the archive preview of an original with an heir says it thread by
+   * thread (#1574), from the same plan the move follows
+   */
+  handOverPreview(fromSessionId, toSessionId, which = "all") {
+    const preview = { moved: [], closed: [], left: [] };
+    if (fromSessionId === toSessionId || !this.records.hasThreads()) return preview;
+    for (const p of this.handOverPlan(this.sessionAddress(fromSessionId), this.sessionAddress(toSessionId), which)) preview[p.kind].push({ subject: p.thread.subject, role: p.role });
+    return preview;
+  }
+  /**
+   * The threads a handoff looks at, and what becomes of each (`HandedOverThread.kind`): those not done the original owns, is assigned or
+   * is in, and the done ones it has unread mail in; with `assignees`, only those it owns whose assignee is one of them. A thread in a
+   * state a newer build wrote is not touched
+   */
+  handOverPlan(from, to, which) {
+    const assignees = which === "all" ? null : new Set(which.assignees.map((id3) => this.sessionAddress(id3)));
+    const open6 = ["open", "running", "review", "blocked"];
+    const threads = /* @__PURE__ */ new Map();
+    for (const t of [
+      ...this.records.threadsOfParty(from, "owner", open6),
+      ...this.records.threadsOfParty(from, "assignee", open6),
+      ...this.records.openThreadsWith(from),
+      ...this.records.doneThreadsWithUnread(from)
+    ]) threads.set(t.id, t);
+    const plan = [];
+    for (const t of threads.values()) {
+      if (t.state === "unknown") continue;
+      const role = t.owner === from ? "owner" : t.assignee === from ? "assignee" : "member";
+      if (assignees && !(role === "owner" && t.assignee !== null && assignees.has(t.assignee))) continue;
+      if (t.state === "done" && (assignees || this.records.movableUnread(t.id, from, to) === 0)) continue;
+      const kind = t.state === "done" ? "closed" : role === "owner" && t.assignee === to || role === "assignee" && t.owner === to ? "left" : "moved";
+      plan.push({ thread: t, role, kind });
+    }
+    return plan;
+  }
   /**
    * A turn of delegated work ended (§6): Centralu's `report` in the thread, for its owner, and the thread's state moves with it: `review`
    * when the work was reported, `running` when it paused on the session's own background work, and `done` (`dropped`, taken over) when the
@@ -142966,13 +145193,13 @@ function mailRelations(host) {
 }
 
 // packages/agent-host/src/rpc.ts
-import { relative as relative8 } from "node:path";
+import { relative as relative9 } from "node:path";
 
 // packages/agent-host/src/themes.ts
-import { randomBytes as randomBytes8 } from "node:crypto";
+import { randomBytes as randomBytes9 } from "node:crypto";
 import { watch as watch2 } from "node:fs";
 import { mkdir as mkdir7, readdir as readdir13, readFile as readFile7, rename as rename5, stat as stat9, unlink as unlink2, writeFile as writeFile5 } from "node:fs/promises";
-import { basename as basename13, join as join47 } from "node:path";
+import { basename as basename13, join as join52 } from "node:path";
 var MAX_FILE_BYTES = 256 * 1024;
 var SETTLE_MS = 100;
 var ID_PATTERN = /^[a-z0-9][a-z0-9-]{0,59}$/;
@@ -143017,7 +145244,7 @@ var ThemeFiles = class {
    * a token updates it, and an unchanged one does not touch the folder (or wake the watcher).
    */
   async writeSchema() {
-    const path2 = join47(this.dir, THEME_SCHEMA_FILE);
+    const path2 = join52(this.dir, THEME_SCHEMA_FILE);
     const text2 = `${JSON.stringify(themeFileJsonSchema(), null, 2)}
 `;
     const current = await readFile7(path2, "utf8").catch(() => null);
@@ -143066,7 +145293,7 @@ var ThemeFiles = class {
   /** The absolute path for an id, for the shell to trash or reveal. Refuses anything that is not an id. */
   pathOf(id3) {
     if (!ID_PATTERN.test(id3)) throw rpcError(`Not a theme id: ${id3}`);
-    return join47(this.dir, `${id3}.json`);
+    return join52(this.dir, `${id3}.json`);
   }
   async freeId(name) {
     const base2 = name.toLowerCase().normalize("NFKD").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "theme";
@@ -143078,11 +145305,11 @@ var ThemeFiles = class {
       );
       if (!taken) return id3;
     }
-    return `${base2}-${randomBytes8(4).toString("hex")}`;
+    return `${base2}-${randomBytes9(4).toString("hex")}`;
   }
   /** Temp file and rename: a reader (the watcher, an editor, an agent) never sees half a file */
   async atomicWrite(path2, text2) {
-    const tmp = `${path2}.${randomBytes8(6).toString("hex")}.tmp`;
+    const tmp = `${path2}.${randomBytes9(6).toString("hex")}.tmp`;
     try {
       await writeFile5(tmp, text2, "utf8");
       await rename5(tmp, path2);
@@ -143095,11 +145322,11 @@ var ThemeFiles = class {
 };
 
 // packages/agent-host/src/dev-services/strays.ts
-import { execFile as execFile8 } from "node:child_process";
-import { realpathSync as realpathSync10 } from "node:fs";
-import { promisify as promisify7 } from "node:util";
+import { execFile as execFile12 } from "node:child_process";
+import { realpathSync as realpathSync11 } from "node:fs";
+import { promisify as promisify11 } from "node:util";
 import { userInfo } from "node:os";
-var exec6 = promisify7(execFile8);
+var exec10 = promisify11(execFile12);
 function parsePsRows(out) {
   const rows3 = [];
   for (const line of out.split("\n")) {
@@ -143165,7 +145392,7 @@ function pickStrays(rows3, cwdOf, roots, selfPid, held3 = []) {
 }
 async function psRows() {
   try {
-    const { stdout } = await exec6("ps", ["-U", userInfo().username, "-o", "pid=,ppid=,tty=,command="], {
+    const { stdout } = await exec10("ps", ["-U", userInfo().username, "-o", "pid=,ppid=,tty=,command="], {
       maxBuffer: 8 * 1024 * 1024,
       timeout: 5e3,
       windowsHide: true
@@ -143178,7 +145405,7 @@ async function psRows() {
 async function cwdsOf(pids) {
   if (pids.length === 0) return /* @__PURE__ */ new Map();
   try {
-    const { stdout } = await exec6("lsof", ["-a", "-d", "cwd", "-p", pids.join(","), "-Fpn"], {
+    const { stdout } = await exec10("lsof", ["-a", "-d", "cwd", "-p", pids.join(","), "-Fpn"], {
       maxBuffer: 8 * 1024 * 1024,
       timeout: 5e3,
       windowsHide: true
@@ -143201,7 +145428,7 @@ function resolveRoots(roots) {
   for (const r of roots) {
     out.add(r);
     try {
-      out.add(realpathSync10(r));
+      out.add(realpathSync11(r));
     } catch {
     }
   }
@@ -143383,8 +145610,8 @@ function createRpcHandler(mgr2, adapters2, { settleDeletedProjects, deleteOutloo
     },
     "agents.reportOwed": async (p) => ({ owed: mgr2.reportOwed(RpcMethods["agents.reportOwed"].params.parse(p).sessionId) }),
     "agents.respondApproval": async (p) => {
-      const { sessionId, requestId, decision, scope, matcher } = RpcMethods["agents.respondApproval"].params.parse(p);
-      mgr2.respondApproval(sessionId, requestId, decision, scope, matcher);
+      const { sessionId, requestId, decision, scope, matcher: matcher2 } = RpcMethods["agents.respondApproval"].params.parse(p);
+      mgr2.respondApproval(sessionId, requestId, decision, scope, matcher2);
       return { ok: true };
     },
     "agents.answerQuestion": async (p) => {
@@ -143735,7 +145962,7 @@ function createRpcHandler(mgr2, adapters2, { settleDeletedProjects, deleteOutloo
       const project2 = (await mgr2.listProjects()).find((x) => x.id === projectId);
       const app2 = apps.list().find((a) => a.appId === appId && a.projectId === projectId);
       if (!project2 || !app2) throw rpcError(noSuchAppText({ projectId, appId }));
-      const { repo, commits } = await gitLogPath(project2.path, relative8(project2.path, app2.dir), 20);
+      const { repo, commits } = await gitLogPath(project2.path, relative9(project2.path, app2.dir), 20);
       return { kind: "git", repo, commits };
     },
     "apps.restoreVersion": async (p) => {
@@ -144460,7 +146687,7 @@ var sameCause = (a, b2) => a !== null && b2 !== null && JSON.stringify(a) === JS
 
 // packages/agent-host/src/dev-services/terminal.ts
 import { createRequire } from "node:module";
-import { existsSync as existsSync21 } from "node:fs";
+import { existsSync as existsSync24 } from "node:fs";
 
 // packages/agent-host/src/dev-services/pty-slot.ts
 function isPtyModule(m) {
@@ -144792,9 +147019,9 @@ function commandShell(command, platform = process.platform, env = process.env) {
 }
 function shellPath() {
   const fromEnv = process.env.SHELL;
-  if (fromEnv && existsSync21(fromEnv)) return fromEnv;
+  if (fromEnv && existsSync24(fromEnv)) return fromEnv;
   for (const candidate of ["/bin/zsh", "/bin/bash", "/bin/sh"]) {
-    if (existsSync21(candidate)) return candidate;
+    if (existsSync24(candidate)) return candidate;
   }
   return process.platform === "win32" ? "powershell.exe" : "/bin/sh";
 }
@@ -144941,9 +147168,9 @@ var CommandRunner = class {
 };
 
 // packages/agent-host/src/updates.ts
-import { execFile as execFile9, execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync22, readFileSync as readFileSync17 } from "node:fs";
-import { join as join48 } from "node:path";
+import { execFile as execFile13, execFileSync as execFileSync3 } from "node:child_process";
+import { existsSync as existsSync25, readFileSync as readFileSync20 } from "node:fs";
+import { join as join53 } from "node:path";
 var REGISTRY_URL = `https://registry.npmjs.org/${APP_SLUG}/latest`;
 var CHECK_INTERVAL_MS = 6 * 60 * 60 * 1e3;
 var SCHEDULED_TIMEOUT_MS = 3e3;
@@ -144963,13 +147190,13 @@ function hubUpdatesMachines(f) {
 }
 function existingInstalledCopy() {
   const path2 = installedCopyPath();
-  return existsSync22(path2) ? path2 : null;
+  return existsSync25(path2) ? path2 : null;
 }
 function readInstalledCopyVersion(copy, platform = HOST_PLATFORM) {
   const source = installedCopyVersionSource(copy, platform);
   if (!source) return null;
   try {
-    const text2 = source.kind === "command" ? execFileSync3(source.file, source.args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3, windowsHide: true }) : readFileSync17(join48(copy, source.name), "utf8");
+    const text2 = source.kind === "command" ? execFileSync3(source.file, source.args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3, windowsHide: true }) : readFileSync20(join53(copy, source.name), "utf8");
     return text2.trim() || null;
   } catch {
     return null;
@@ -144998,7 +147225,7 @@ function failureDetail(file2, stderr) {
 function runCommand(file2, args, resolve21) {
   const cmd = commandFor(file2, args, resolve21);
   return new Promise((done2, reject) => {
-    execFile9(cmd.file, cmd.args, { timeout: INSTALL_TIMEOUT_MS, windowsHide: true }, (err, _stdout, stderr) => {
+    execFile13(cmd.file, cmd.args, { timeout: INSTALL_TIMEOUT_MS, windowsHide: true }, (err, _stdout, stderr) => {
       if (!err) return done2();
       if (err.code === "ENOENT") {
         return reject(new Error(`${file2} was not found on PATH (${err.message})`));
@@ -145729,8 +147956,8 @@ var SessionSleeper = class {
 
 // packages/agent-host/src/dev-services/instance-lock.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { readFileSync as readFileSync18, unlinkSync as unlinkSync3, writeFileSync as writeFileSync10 } from "node:fs";
-import { dirname as dirname22, join as join49 } from "node:path";
+import { readFileSync as readFileSync21, unlinkSync as unlinkSync3, writeFileSync as writeFileSync10 } from "node:fs";
+import { dirname as dirname25, join as join54 } from "node:path";
 import Database3 from "better-sqlite3";
 var OWNERSHIP_FILE = "host-ownership.sqlite";
 var held = /* @__PURE__ */ new Set();
@@ -145776,15 +148003,15 @@ function parseHolder(raw) {
 function acquireInstanceLock(dbPath2, startOf = processStartTime, describe4 = {}, now = Date.now) {
   if (dbPath2 === ":memory:") return { ok: true, release: () => {
   } };
-  const lockPath = join49(dirname22(dbPath2), "host.lock");
+  const lockPath = join54(dirname25(dbPath2), "host.lock");
   const readHolder = () => {
     try {
-      return parseHolder(readFileSync18(lockPath, "utf8"));
+      return parseHolder(readFileSync21(lockPath, "utf8"));
     } catch {
       return null;
     }
   };
-  const owner = takeOwnership(join49(dirname22(dbPath2), OWNERSHIP_FILE));
+  const owner = takeOwnership(join54(dirname25(dbPath2), OWNERSHIP_FILE));
   if (!owner) {
     const holder = readHolder();
     const pid = holder && Number.isInteger(holder.pid) && holder.pid > 0 ? holder.pid : null;
@@ -145801,7 +148028,7 @@ function acquireInstanceLock(dbPath2, startOf = processStartTime, describe4 = {}
       if (released) return;
       released = true;
       try {
-        if (parseHolder(readFileSync18(lockPath, "utf8")).pid === process.pid) unlinkSync3(lockPath);
+        if (parseHolder(readFileSync21(lockPath, "utf8")).pid === process.pid) unlinkSync3(lockPath);
       } catch {
       }
       giveUp(owner);
@@ -145880,8 +148107,8 @@ function methodParams(method) {
 var EFFECTS = {
   "agents.deleteSession": (p) => "The session moves to the session archive" + (p.deleteWorktree === true ? ", and its worktree is marked to be deleted when the session is deleted from the archive for good" : "") + (p.deleteExternal === true ? ", and the tool's own conversation file with it" : "") + ".",
   "agents.archiveIfAtRest": () => "The session moves to the session archive if that loses nothing it holds.",
-  "agents.deleteAgentChild": (p) => `The session moves to the session archive, and the worktree on the branch ${plainQuoted(str2(p.worktreeBranch), 120)} is deleted when nothing in it would be lost.`,
-  "agents.deleteOrchestratorSkill": (p) => `The orchestrator skill ${plainQuoted(str2(p.name), 120)} is deleted.`,
+  "agents.deleteAgentChild": (p) => `The session moves to the session archive, and the worktree on the branch ${plainQuoted(str3(p.worktreeBranch), 120)} is deleted when nothing in it would be lost.`,
+  "agents.deleteOrchestratorSkill": (p) => `The orchestrator skill ${plainQuoted(str3(p.name), 120)} is deleted.`,
   "projects.delete": () => "Centralu's records of the project are erased: its sessions, their conversations, its search index and approval rules. Its folder stays.",
   "apps.remove": () => "The app's folder moves to app-trash in the data folder, and it is taken off every session it was attached to.",
   "machines.remove": () => "The machine is unlinked: its sessions and projects leave this computer's lists.",
@@ -145942,7 +148169,7 @@ var quoted3 = (name) => plainQuoted(name, 120);
 function fields2(v) {
   return v !== null && typeof v === "object" && !Array.isArray(v) ? { ...v } : {};
 }
-var str2 = (v) => typeof v === "string" ? v : "";
+var str3 = (v) => typeof v === "string" ? v : "";
 
 // packages/agent-host/src/host-requests.ts
 var HOST_REQUEST_LIMITS = { maxOpen: 8, lifetimeMs: 15 * 6e4, windowGoneMs: 3e4 };
@@ -145976,9 +148203,9 @@ var HostRequests = class {
     const p = fields3(params);
     switch (method) {
       case "trash.purge":
-        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str3(p.sessionId), what: "session" }, () => ({ ok: true }));
+        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str4(p.sessionId), what: "session" }, () => ({ ok: true }));
       case "trash.purgeSubagentSteps":
-        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str3(p.sessionId), what: "steps" }, () => ({ ok: true }));
+        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str4(p.sessionId), what: "steps" }, () => ({ ok: true }));
       case "trash.empty":
         return this.viaTrash(method, from, signal, { action: "empty" }, (purged, text2, failed3) => ({ purged, failed: failed3, text: text2 }));
       default:
@@ -146073,7 +148300,7 @@ var HostRequests = class {
         return r;
       } catch (e) {
         if (m === "trash.purge") {
-          const sessionId = str3(fields3(p).sessionId);
+          const sessionId = str4(fields3(p).sessionId);
           failed3.push({ sessionId, name: names.get(sessionId) ?? sessionId, error: e instanceof Error ? e.message : String(e) });
         }
         throw e;
@@ -146121,7 +148348,7 @@ var HostRequests = class {
 function fields3(params) {
   return params !== null && typeof params === "object" && !Array.isArray(params) ? { ...params } : {};
 }
-var str3 = (v) => typeof v === "string" ? v : "";
+var str4 = (v) => typeof v === "string" ? v : "";
 function refusalOf(outcome) {
   if (outcome === "too_many_requests" || outcome === "no_window") return outcome;
   return outcome === "denied" ? "denied" : outcome === "expired" ? "expired" : "withdrawn";
@@ -146331,7 +148558,7 @@ var Shutdown = class {
 var SHUTDOWN_BOUND_MS = 1e4;
 
 // packages/agent-host/src/lifecycle/endings.ts
-import { appendFileSync as appendFileSync2 } from "node:fs";
+import { appendFileSync as appendFileSync3 } from "node:fs";
 var SIGNALS = ["SIGINT", "SIGTERM", "SIGHUP"];
 var REPEAT_AFTER_MS = 1e3;
 function deliberateRepeat(first, now) {
@@ -146380,7 +148607,7 @@ function crashRecorder(path2, log, maxBytes = MAX_LOG_BYTES) {
     log(`[agent-host] ${kind} ${detail}`);
     try {
       rotateIfLarge(path2, maxBytes);
-      appendFileSync2(path2, `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind}: ${detail}
+      appendFileSync3(path2, `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind}: ${detail}
 `);
     } catch {
     }
@@ -146415,17 +148642,17 @@ function wireEndings(o) {
 
 // packages/agent-host/src/lifecycle/stopped-mark.ts
 import { rmSync as rmSync7, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join50 } from "node:path";
+import { join as join55 } from "node:path";
 var STOPPED_MARK_FILE = "stopped.json";
 function clearStoppedMark(dataDir) {
   try {
-    rmSync7(join50(dataDir, STOPPED_MARK_FILE), { force: true });
+    rmSync7(join55(dataDir, STOPPED_MARK_FILE), { force: true });
   } catch {
   }
 }
 function markQuit(dataDir, now = Date.now()) {
   try {
-    writeFileSync11(join50(dataDir, STOPPED_MARK_FILE), `${JSON.stringify({ v: 1, by: "quit", at: now })}
+    writeFileSync11(join55(dataDir, STOPPED_MARK_FILE), `${JSON.stringify({ v: 1, by: "quit", at: now })}
 `);
   } catch {
   }
@@ -146566,7 +148793,7 @@ async function runDrain(bound, deps) {
 }
 
 // packages/agent-host/src/links/install.ts
-import { existsSync as existsSync23, readFileSync as readFileSync19 } from "node:fs";
+import { existsSync as existsSync26, readFileSync as readFileSync22 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import { gzipSync } from "node:zlib";
@@ -146575,7 +148802,7 @@ import { gzipSync } from "node:zlib";
 import { createPublicKey, verify } from "node:crypto";
 var NPM_REGISTRY = "https://registry.npmjs.org";
 var PACKAGE_NAME = /^(@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
-var VERSION = /^[0-9A-Za-z][0-9A-Za-z.+-]{0,63}$/;
+var VERSION2 = /^[0-9A-Za-z][0-9A-Za-z.+-]{0,63}$/;
 var NotPublished = class extends Error {
   constructor(id3) {
     super(`${id3} is not on the npm registry`);
@@ -146596,7 +148823,7 @@ async function getJson(url2, f, id3) {
   return res.json();
 }
 async function verifiedPackage(name, version2, opts = {}) {
-  if (!PACKAGE_NAME.test(name) || !VERSION.test(version2)) throw new Error(`Not a package to install: ${name}@${version2}`);
+  if (!PACKAGE_NAME.test(name) || !VERSION2.test(version2)) throw new Error(`Not a package to install: ${name}@${version2}`);
   const registry2 = (opts.registry ?? NPM_REGISTRY).replace(/\/+$/, "");
   const f = opts.fetch ?? globalThis.fetch;
   const now = opts.now?.() ?? Date.now();
@@ -146694,7 +148921,7 @@ function updateNodeSentence(o) {
 // packages/agent-host/src/links/tunnel.ts
 import { execFileSync as execFileSync5, spawn as spawn5 } from "node:child_process";
 import { createConnection as createConnection2, createServer as createServer3 } from "node:net";
-import { win32 as win328 } from "node:path";
+import { win32 as win329 } from "node:path";
 import { hostname as hostname3 } from "node:os";
 
 // packages/agent-host/src/links/ssh-run.ts
@@ -147315,8 +149542,8 @@ function ansiText(bytes2) {
     ansiDecoder = null;
     if (process.platform !== "win32") return null;
     try {
-      const root3 = process.env.SystemRoot && win328.isAbsolute(process.env.SystemRoot) ? process.env.SystemRoot : "C:\\Windows";
-      const out = execFileSync5(win328.join(root3, "System32", "reg.exe"), ["query", "HKLM\\SYSTEM\\CurrentControlSet\\Control\\Nls\\CodePage", "/v", "ACP"], { encoding: "utf8", timeout: 5e3, windowsHide: true });
+      const root3 = process.env.SystemRoot && win329.isAbsolute(process.env.SystemRoot) ? process.env.SystemRoot : "C:\\Windows";
+      const out = execFileSync5(win329.join(root3, "System32", "reg.exe"), ["query", "HKLM\\SYSTEM\\CurrentControlSet\\Control\\Nls\\CodePage", "/v", "ACP"], { encoding: "utf8", timeout: 5e3, windowsHide: true });
       const page = /\bACP\s+REG_SZ\s+(\d+)/.exec(out)?.[1];
       if (page) ansiDecoder = new TextDecoder(CODE_PAGE_NAMES[page] ?? `windows-${page}`, { fatal: true });
     } catch {
@@ -147606,7 +149833,7 @@ async function installRemote(o) {
 function bundled(name, source) {
   for (const url2 of [new URL(`./${name}`, import.meta.url), new URL(source, import.meta.url)]) {
     const file2 = fileURLToPath6(url2);
-    if (existsSync23(file2)) return readFileSync19(file2, "utf8");
+    if (existsSync26(file2)) return readFileSync22(file2, "utf8");
   }
   throw new Error(`${name} is missing from this host`);
 }
@@ -147677,7 +149904,7 @@ async function removeAutostart(c) {
 }
 
 // packages/agent-host/src/links/machine-ids.ts
-import { randomBytes as randomBytes9 } from "node:crypto";
+import { randomBytes as randomBytes10 } from "node:crypto";
 function isMachineId(value) {
   return MACHINE_ID_RE.test(value);
 }
@@ -147705,10 +149932,10 @@ function decodeNumber(value) {
 }
 function newMachineId(name, taken) {
   const slug = name.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^[^a-z]+/, "").replace(/-+$/, "").slice(0, 24);
-  const base2 = slug && MACHINE_ID_RE.test(slug) ? slug : `m-${randomBytes9(3).toString("hex")}`;
+  const base2 = slug && MACHINE_ID_RE.test(slug) ? slug : `m-${randomBytes10(3).toString("hex")}`;
   if (!taken.has(base2)) return base2;
   for (let i = 2; i < 1e3; i++) if (!taken.has(`${base2}-${i}`)) return `${base2}-${i}`;
-  return `m-${randomBytes9(4).toString("hex")}`;
+  return `m-${randomBytes10(4).toString("hex")}`;
 }
 
 // packages/agent-host/src/links/qualifier.ts
@@ -149438,14 +151665,14 @@ var LinkedMachine = class extends LinkedMachineConnection {
    * again at once, and finds the managed launcher first
    */
   async install() {
-    const pick3 = await this.versionToInstall();
-    return this.operate("install", pick3.version, async (c, installer) => {
-      if (pick3.note) this.deps.log?.(`[links] ${this.name}: ${pick3.note}`);
+    const pick4 = await this.versionToInstall();
+    return this.operate("install", pick4.version, async (c, installer) => {
+      if (pick4.note) this.deps.log?.(`[links] ${this.name}: ${pick4.note}`);
       const r = await installRemote({
         exec: c.exec,
         spec: c.spec,
         target: c.target,
-        version: pick3.version,
+        version: pick4.version,
         runtime: installer.runtime(),
         script: c.script,
         registry: installer.registry,
@@ -149454,7 +151681,7 @@ var LinkedMachine = class extends LinkedMachineConnection {
       });
       this.removedByPerson = false;
       this.deps.log?.(`[links] ${this.name}: installed Centralu ${r.current.version} on Node ${r.current.node}${r.previous ? `; ${r.previous.version} kept to roll back to` : ""}`);
-      return { ...this.installedNow(r), ...pick3.note ? { note: pick3.note } : {} };
+      return { ...this.installedNow(r), ...pick4.note ? { note: pick4.note } : {} };
     });
   }
   /**
@@ -149468,22 +151695,22 @@ var LinkedMachine = class extends LinkedMachineConnection {
   }
   async updateNow(opts) {
     if (opts.unasked === true) await this.probeActivity();
-    const pick3 = await this.versionToInstall();
+    const pick4 = await this.versionToInstall();
     const there = this.versions?.remote.version;
-    if (there && releaseOf(there) !== pick3.version && isNewerVersion(there, pick3.version)) {
-      throw linkError2(`${this.name} runs Centralu ${there}, newer than ${pick3.version}, the version this computer would install; updating would downgrade it, so nothing was changed`);
+    if (there && releaseOf(there) !== pick4.version && isNewerVersion(there, pick4.version)) {
+      throw linkError2(`${this.name} runs Centralu ${there}, newer than ${pick4.version}, the version this computer would install; updating would downgrade it, so nothing was changed`);
     }
-    return this.operate("update", pick3.version, async (c, installer) => {
-      if (pick3.note) this.deps.log?.(`[links] ${this.name}: ${pick3.note}`);
+    return this.operate("update", pick4.version, async (c, installer) => {
+      if (pick4.note) this.deps.log?.(`[links] ${this.name}: ${pick4.note}`);
       c.beforeStop = () => this.beforeStop(c, opts.when ?? "idle", opts.unasked === true);
       const r = await updateRemote(c, {
-        version: pick3.version,
+        version: pick4.version,
         runtime: installer.runtime(),
         registry: installer.registry,
         nodeDist: installer.nodeDist
       });
       this.deps.log?.(`[links] ${this.name}: updated to Centralu ${r.current.version}${r.previous ? `; ${r.previous.version} kept to roll back to` : ""}`);
-      const note = [pick3.note, r.note].filter(Boolean).join(" ");
+      const note = [pick4.note, r.note].filter(Boolean).join(" ");
       return { ...this.installedNow(r), ...note ? { note } : {} };
     });
   }
@@ -149546,42 +151773,48 @@ var LinkedMachine = class extends LinkedMachineConnection {
       let shown3 = null;
       let seen = false;
       let blind = 0;
-      const show = (step, why) => {
-        if (shown3 === step) return;
-        shown3 = step;
-        c.step(step);
+      const show = (step, why, count) => {
+        const key = `${step}:${count ?? ""}`;
+        if (shown3 === key) return;
+        shown3 = key;
+        c.step(step, count);
         this.deps.log?.(`[links] ${this.name}: ${why}`);
       };
       const unread = () => show("wait_unread", "what runs there cannot be read now; the update keeps waiting, since the sessions there may be in a turn (Cancel ends it)");
-      const busy = (n) => show("wait_idle", `the update waits for ${n} ${n === 1 ? "session" : "sessions"} in a turn`);
+      const busy = (a) => {
+        const turns = turnsRunning(a);
+        const n = open6(a);
+        if (turns > 0) show("wait_idle", `the update waits for ${turns} ${turns === 1 ? "session" : "sessions"} in a turn`, turns);
+        else show("wait_open", `the update waits for ${n} open ${n === 1 ? "terminal or project command" : "terminals and project commands"}, which an update this computer starts by itself closes none of`, n);
+      };
       const open6 = (a) => unasked ? a.terminals + a.commandRuns : 0;
       const holding = (a) => turnsRunning(a) + open6(a);
       let openSince = null;
+      const now = this.deps.now ?? Date.now;
       const openLimit = this.deps.openWorkWaitMs ?? OPEN_WORK_WAIT_MS;
       for (; ; ) {
         const r = await read();
         if (r.activity) {
           seen = true;
           blind = 0;
-          if (turnsRunning(r.activity) === 0 && open6(r.activity) > 0) {
-            openSince ??= Date.now();
-            if (Date.now() - openSince >= openLimit) {
+          if (open6(r.activity) > 0) {
+            openSince ??= now();
+            if (now() - openSince >= openLimit) {
               throw new Error(
                 `Terminals or project commands stayed open on ${this.name}, and an update this computer starts by itself closes none of them; nothing was switched`
               );
             }
           } else openSince = null;
-          const running2 = holding(r.activity);
-          if (running2 === 0) {
+          if (holding(r.activity) === 0) {
             await pause(settle, wait.signal);
             const again = await read();
             if (again.activity && holding(again.activity) === 0) {
               if (shown3) c.step("stop");
               return null;
             }
-            if (again.activity) busy(holding(again.activity));
+            if (again.activity) busy(again.activity);
             else unread();
-          } else busy(running2);
+          } else busy(r.activity);
         } else if (seen) {
           unread();
         } else if (r.cannot || ++blind > ACTIVITY_UNREAD_RETRIES) {
@@ -149754,13 +151987,13 @@ var LinkedMachine = class extends LinkedMachineConnection {
    * may be removing
    */
   async autostart(on2) {
-    const exec7 = this.tunnel.exec?.bind(this.tunnel);
-    if (!exec7) throw linkError2(`This computer has no shell on ${this.name} to change how it starts`);
+    const exec11 = this.tunnel.exec?.bind(this.tunnel);
+    if (!exec11) throw linkError2(`This computer has no shell on ${this.name} to change how it starts`);
     const action = on2 === void 0 ? "status" : on2 ? "on" : "off";
     const done2 = this.begin("autostart", action, null);
     let state;
     try {
-      const a = await autostartRemote({ exec: exec7, spec: this.record.remote, target: this.record.sshTarget }, action);
+      const a = await autostartRemote({ exec: exec11, spec: this.record.remote, target: this.record.sshTarget }, action);
       state = { on: a.on, how: a.how, linger: a.linger };
       this.bootStart = state;
       if (on2 !== void 0) {
@@ -149882,9 +152115,9 @@ var LinkedMachine = class extends LinkedMachineConnection {
     const tunnelExec = this.tunnel.exec.bind(this.tunnel);
     const done2 = this.begin(kind, null, target);
     const at2 = Date.now();
-    const step = (s) => {
+    const step = (s, count) => {
       this.deps.log?.(`[links] ${this.name}: ${kind}${target ? ` ${target}` : ""}: ${s}`);
-      this.operation = { kind, step: s, target, at: at2 };
+      this.operation = { kind, step: s, target, at: at2, ...count === void 0 ? {} : { count } };
       this.deps.broadcast({ type: "machine_status", machine: this.info() });
     };
     let result;
@@ -149903,7 +152136,7 @@ var LinkedMachine = class extends LinkedMachineConnection {
     return result && typeof result === "object" && "machine" in result ? { ...result, machine: this.info() } : result;
   }
   /** What update.ts runs things there with */
-  control(exec7, script, step) {
+  control(exec11, script, step) {
     const hold = async () => {
       this.held = true;
       this.clearRetry();
@@ -149914,7 +152147,7 @@ var LinkedMachine = class extends LinkedMachineConnection {
       this.setStatus("updating", null);
     };
     return {
-      exec: exec7,
+      exec: exec11,
       spec: this.record.remote,
       target: this.record.sshTarget,
       script,
@@ -150037,9 +152270,9 @@ function probeTarget(target, opts = {}) {
 }
 
 // packages/agent-host/src/links/ssh-config.ts
-import { readdirSync as readdirSync11, readFileSync as readFileSync20, statSync as statSync15 } from "node:fs";
-import { homedir as homedir15 } from "node:os";
-import { isAbsolute as isAbsolute10, join as join51, normalize, parse as parse5, sep as sep11 } from "node:path";
+import { readdirSync as readdirSync14, readFileSync as readFileSync23, statSync as statSync15 } from "node:fs";
+import { homedir as homedir16 } from "node:os";
+import { isAbsolute as isAbsolute11, join as join56, normalize, parse as parse5, sep as sep11 } from "node:path";
 var MAX_DEPTH = 16;
 function splitConfigLine(raw) {
   const m = /^\s*([^\s=#]+)\s*(?:=\s*)?([\s\S]*)$/.exec(raw);
@@ -150105,19 +152338,19 @@ function expandGlob(path2) {
     const next = [];
     for (const base2 of found) {
       if (!MAGIC.test(seg)) {
-        next.push(join51(base2, seg));
+        next.push(join56(base2, seg));
         continue;
       }
       let names;
       try {
-        names = readdirSync11(base2);
+        names = readdirSync14(base2);
       } catch {
         continue;
       }
       const re2 = segmentRe(seg);
       for (const name of names.sort()) {
         if (name.startsWith(".") && !seg.startsWith(".")) continue;
-        if (re2.test(name)) next.push(join51(base2, name));
+        if (re2.test(name)) next.push(join56(base2, name));
       }
     }
     found = next;
@@ -150147,7 +152380,7 @@ function readSshConfig(opts) {
     }
     let text2;
     try {
-      text2 = readFileSync20(file2, "utf8");
+      text2 = readFileSync23(file2, "utf8");
     } catch (err) {
       if (depth > 0 && err.code !== "ENOENT") notes.push(`${tildePath(file2, opts.home)} could not be read`);
       return;
@@ -150172,11 +152405,11 @@ function readSshConfig(opts) {
         }
         for (const arg of split2.args) {
           let path2 = arg;
-          if (path2.startsWith("~/") || process.platform === "win32" && path2.startsWith("~\\")) path2 = join51(opts.home, path2.slice(2));
+          if (path2.startsWith("~/") || process.platform === "win32" && path2.startsWith("~\\")) path2 = join56(opts.home, path2.slice(2));
           else if (path2.startsWith("~")) {
             notes.push(`An Include of another user's folder (${where2(file2, n + 1)}) was not read`);
             continue;
-          } else if (!isAbsolute10(path2)) path2 = join51(opts.home, ".ssh", path2);
+          } else if (!isAbsolute11(path2)) path2 = join56(opts.home, ".ssh", path2);
           for (const f of expandGlob(path2)) read(f, depth + 1);
         }
       }
@@ -150222,8 +152455,8 @@ function resolveAlias(alias, opts = {}) {
 var MAX_HOSTS = 100;
 var RESOLVE_AT_ONCE = 8;
 async function listSshHosts(opts = {}) {
-  const home = opts.home ?? homedir15();
-  const file2 = opts.configFile ?? join51(home, ".ssh", "config");
+  const home = opts.home ?? homedir16();
+  const file2 = opts.configFile ?? join56(home, ".ssh", "config");
   const read = readSshConfig({ file: file2, home });
   const notes = [...read.notes];
   const listed2 = read.hosts.slice(0, MAX_HOSTS);
@@ -151759,7 +153992,7 @@ function keepUnseen(ordered, kept) {
 }
 
 // packages/agent-host/src/links/stored.ts
-import { randomBytes as randomBytes10 } from "node:crypto";
+import { randomBytes as randomBytes11 } from "node:crypto";
 function storeRegistry(store2) {
   return {
     list: () => store2.machines.listLinkedMachines(),
@@ -151775,7 +154008,7 @@ var HUB_SELF_ID = /^hub-[0-9a-f]{8}$/;
 function hubSelfId(store2) {
   const kept = store2.settings.appSetting(HUB_SELF_KEY);
   if (kept && HUB_SELF_ID.test(kept)) return kept;
-  const made = `hub-${randomBytes10(4).toString("hex")}`;
+  const made = `hub-${randomBytes11(4).toString("hex")}`;
   store2.settings.updateAppSetting(HUB_SELF_KEY, (current) => current !== null && HUB_SELF_ID.test(current) ? current : made);
   return store2.settings.appSetting(HUB_SELF_KEY) ?? made;
 }
@@ -151896,8 +154129,8 @@ function reverseCalls(o) {
 }
 
 // packages/agent-host/src/lifecycle/work-job.ts
-import { execFile as execFile10 } from "node:child_process";
-import { promisify as promisify8 } from "node:util";
+import { execFile as execFile14 } from "node:child_process";
+import { promisify as promisify12 } from "node:util";
 var WORK_JOB_LIMITS = 8192;
 var JOIN_SCRIPT = (pid, limits) => `
 $ErrorActionPreference = 'Stop'
@@ -151937,7 +154170,7 @@ public static class CentraluWorkJob {
 '@
 [CentraluWorkJob]::Join(${pid}, ${limits})
 `;
-var run3 = promisify8(execFile10);
+var run3 = promisify12(execFile14);
 var REAL_OS2 = {
   needed: endsWorkWithJob(),
   powershell: async (script) => {
@@ -151969,7 +154202,7 @@ function workJobLine(job) {
 
 // packages/agent-host/src/dev-services/broker-pty.ts
 import { spawn as startProcess } from "node:child_process";
-import { existsSync as existsSync24 } from "node:fs";
+import { existsSync as existsSync27 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 import { createInterface as createInterface2 } from "node:readline";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
@@ -151995,7 +154228,7 @@ function parseBrokerEvent(line) {
 }
 function brokerPath() {
   const path2 = fileURLToPath7(new URL("./pty-broker.mjs", import.meta.url));
-  if (!existsSync24(path2)) throw new Error(`terminal broker not found: ${path2}`);
+  if (!existsSync27(path2)) throw new Error(`terminal broker not found: ${path2}`);
   return path2;
 }
 var BrokerPty = class {
@@ -152151,7 +154384,7 @@ function brokerPtyModule(broker, fallback = loadNodePty) {
 }
 
 // packages/agent-host/src/elevation.ts
-import { execFile as execFile11 } from "node:child_process";
+import { execFile as execFile15 } from "node:child_process";
 function detectToken(o = {}) {
   const source = elevationSource(o.platform ?? HOST_PLATFORM, o.env ?? process.env);
   if (source.kind === "uid") {
@@ -152159,7 +154392,7 @@ function detectToken(o = {}) {
     return Promise.resolve({ elevated: getuid ? getuid() === 0 : null, logon: null });
   }
   const run4 = o.run ?? ((file2, args) => new Promise(
-    (resolve21, reject) => execFile11(file2, args, { windowsHide: true, timeout: 1e4, encoding: "utf8" }, (err, stdout) => err ? reject(err) : resolve21(stdout))
+    (resolve21, reject) => execFile15(file2, args, { windowsHide: true, timeout: 1e4, encoding: "utf8" }, (err, stdout) => err ? reject(err) : resolve21(stdout))
   ));
   return run4(source.file, source.args).then(
     (out) => ({ elevated: elevatedFromGroups(out), logon: logonFromGroups(out) }),
@@ -152184,7 +154417,7 @@ var handedToken = launch.tokenOnStdin ? await readHandedToken(process.stdin).cat
   console.error(`[agent-host] the launcher did not hand over the token: ${e.message}`);
   process.exit(1);
 }) : launch.token;
-var BUILD = true ? "bd398a1" : "dev";
+var BUILD = true ? "0a894cb" : "dev";
 var { values } = parseArgs({
   options: {
     port: { type: "string", default: "5175" },
@@ -152198,24 +154431,24 @@ var { values } = parseArgs({
   }
 });
 var control = launch.underKeeper ? new ControlChannel(process.stdin) : null;
-var token = values.token || handedToken || randomBytes11(16).toString("hex");
+var token = values.token || handedToken || randomBytes12(16).toString("hex");
 var keeperToken = launch.underKeeper && !values.token && handedToken ? token : null;
-var httpSecret = keeperToken ? deriveHttpSecret(keeperToken) : randomBytes11(32).toString("base64url");
+var httpSecret = keeperToken ? deriveHttpSecret(keeperToken) : randomBytes12(32).toString("base64url");
 start.at("data folder");
 var movedNote = null;
 function defaultDbPath() {
   const { dir, legacy } = chooseDataDir();
   movedNote = legacy && migrateLegacyDataDir(legacy, dir) ? `[agent-host] data folder moved: ${legacy} -> ${dir}` : null;
-  mkdirSync19(dir, { recursive: true });
+  mkdirSync20(dir, { recursive: true });
   process.env.CC_DATA_DIR = dir;
-  return join52(dir, "store.db");
+  return join57(dir, "store.db");
 }
 var dbPath = values.memory ? ":memory:" : values.db ?? defaultDbPath();
 var privateFolder = privateDataFolderFor(dbPath);
 var madePrivate = privateFolder ? keepDataFolderPrivate(privateFolder) : [];
 start.at("log");
 var stopLog = dbPath === ":memory:" ? () => {
-} : teeStderrToFile(hostLogPath(dirname23(dbPath)));
+} : teeStderrToFile(hostLogPath(dirname26(dbPath)));
 if (dbPath !== ":memory:") console.error(startupBanner({ build: BUILD, db: dbPath, pid: process.pid }));
 if (movedNote) console.error(movedNote);
 if (madePrivate.length > 0) console.error(`[agent-host] data folder made private: ${madePrivate.join(", ")}`);
@@ -152262,7 +154495,7 @@ if (!lock.ok) {
 }
 var ownership = lock;
 process.on("exit", ownership.release);
-if (dbPath !== ":memory:") clearStoppedMark(dirname23(dbPath));
+if (dbPath !== ":memory:") clearStoppedMark(dirname26(dbPath));
 start.at("hold signals");
 var signals = holdSignals(process, (line) => console.error(line));
 start.at("store");
@@ -152279,7 +154512,7 @@ start.at("work job");
 var workJobSaid = workJobLine(await workJob);
 if (workJobSaid) console.error(workJobSaid);
 start.at("keeper children");
-var held2 = launch.underKeeper ? await connectHeldChildren(dirname23(dbPath)) : null;
+var held2 = launch.underKeeper ? await connectHeldChildren(dirname26(dbPath)) : null;
 start.at("services");
 var screens = new Gate();
 var events = new Gate();
@@ -152296,7 +154529,7 @@ var mgr = new SessionManager(
   },
   (sessionId) => bridgeAddress(launch.frontDoor, port, token, sessionId),
   // Worktrees are created next to the data folder — dev and the packaged app never touch each other's worktrees
-  join52(dirname23(dbPath), "worktrees"),
+  join57(dirname26(dbPath), "worktrees"),
   held2 ? { processes: held2.processes, keptSessions: held2.kept.sessionIds } : {}
 );
 mgr.useProjectsHome(() => projectsHome());
@@ -152390,6 +154623,8 @@ mail.onChange((c) => events.push({ type: "mail_changed", threadId: c.threadId, t
 mgr.useMail({
   askedBy: (id3) => askedBy(askedByHost, mailTurns, id3),
   sessionGone: (id3) => void mail.sessionGone(id3),
+  handOver: (from, to, which) => mail.handOver(from, to, which),
+  handOverPreview: (from, to) => mail.handOverPreview(from, to),
   openWork: (id3) => mail.openWorkOf(id3),
   sessionChanged: (id3) => mailDelivery.poke(id3),
   sessionEvent: (e, ended) => mailTurns.observe(e, ended),
@@ -152444,7 +154679,7 @@ var installByDefault = installsByDefault({
   env: process.env
 });
 var { auto: autoUpdateCheck, autoApply: autoApplyUpdates } = updateSwitches(store.settings, { installByDefault });
-var themes = new ThemeFiles(join52(dataRoot(), "themes"), () => events.push({ type: "themes_changed" }));
+var themes = new ThemeFiles(join57(dataRoot(), "themes"), () => events.push({ type: "themes_changed" }));
 await themes.start().catch((e) => console.error(`[themes] the themes folder is unavailable: ${e.message}`));
 var updates = new UpdateService((status) => events.push({ type: "update_status", status }), {
   // A host from source never installs by itself, whatever is stored (#1501 review, `installsByItself`)
@@ -152758,13 +154993,13 @@ var endings = wireEndings({
   heldChildren: held2 !== null,
   leave: (mode, handOver) => void shutdown.leave(mode, handOver),
   force: (why) => shutdown.force(why),
-  record: crashRecorder(join52(dirname23(dbPath), "host-errors.log"), (line) => console.error(line)),
+  record: crashRecorder(join57(dirname26(dbPath), "host-errors.log"), (line) => console.error(line)),
   stdin: process.stdin,
   watchParent: values["watch-parent"] === true,
   log: (line) => console.error(line),
   // The person quit Centralu here: a linked hub must not start a host in this folder by itself (#1143)
   quit: () => {
-    if (dbPath !== ":memory:") markQuit(dirname23(dbPath));
+    if (dbPath !== ":memory:") markQuit(dirname26(dbPath));
   }
 });
 stopNow = endings.stopAsked;