@centralu/win32-x64 0.1.0-beta.39 → 0.1.0-beta.40

package/Centralu/resources/host/main.mjs

@@ -1470,7 +1470,7 @@ var require_sender = __commonJS({
        */
       static frame(data, options) {
         let mask;
-        let merge2 = false;
+        let merge3 = false;
         let offset = 2;
         let skipMasking = false;
         if (options.mask) {
@@ -1503,7 +1503,7 @@ var require_sender = __commonJS({
           }
         } else {
           dataLength = data.length;
-          merge2 = options.mask && options.readOnly && !skipMasking;
+          merge3 = options.mask && options.readOnly && !skipMasking;
         }
         let payloadLength = dataLength;
         if (dataLength >= 65536) {
@@ -1513,7 +1513,7 @@ var require_sender = __commonJS({
           offset += 2;
           payloadLength = 126;
         }
-        const target = Buffer.allocUnsafe(merge2 ? dataLength + offset : offset);
+        const target = Buffer.allocUnsafe(merge3 ? dataLength + offset : offset);
         target[0] = options.fin ? options.opcode | 128 : options.opcode;
         if (options.rsv1) target[0] |= 64;
         target[1] = payloadLength;
@@ -1530,7 +1530,7 @@ var require_sender = __commonJS({
         target[offset - 2] = mask[2];
         target[offset - 1] = mask[3];
         if (skipMasking) return [target, data];
-        if (merge2) {
+        if (merge3) {
           applyMask(data, mask, target, offset, dataLength);
           return [target];
         }
@@ -2286,7 +2286,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes12, createHash: createHash11 } = __require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash11 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -2824,7 +2824,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes12(16).toString("base64");
+      const key = randomBytes13(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -43048,13 +43048,13 @@ function refuse(message, io2 = realIo) {
 
 // packages/agent-host/src/main.ts
 import { parseArgs } from "node:util";
-import { randomBytes as randomBytes11 } from "node:crypto";
+import { randomBytes as randomBytes12 } from "node:crypto";
 import { hostname as hostname5 } from "node:os";
-import { dirname as dirname23, join as join52 } from "node:path";
-import { mkdirSync as mkdirSync19, writeSync as writeSync3 } from "node:fs";
+import { dirname as dirname26, join as join57 } from "node:path";
+import { mkdirSync as mkdirSync20, writeSync as writeSync3 } from "node:fs";
 
 // packages/protocol/src/version.generated.ts
-var APP_VERSION = "0.1.0-beta.39";
+var APP_VERSION = "0.1.0-beta.40";
 
 // packages/protocol/src/brand.ts
 var APP_NAME = "Centralu";
@@ -43998,14 +43998,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str4 = "";
+  let str5 = "";
   for (let i = 0; i < length; i++) {
-    str4 += chars[Math.floor(Math.random() * chars.length)];
+    str5 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str4;
+  return str5;
 }
-function esc(str4) {
-  return JSON.stringify(str4);
+function esc(str5) {
+  return JSON.stringify(str5);
 }
 function slugify(input) {
   return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -44119,8 +44119,8 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex(str4) {
-  return str4.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str5) {
+  return str5.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl2 = new inst._zod.constr(def ?? inst._zod.def);
@@ -57740,6 +57740,7 @@ function isProjectId(value) {
 }
 var ToolName = external_exports.string().min(1);
 var AppId = external_exports.string();
+var PermissionPreset = external_exports.enum(["safe", "normal", "edits", "auto"]);
 
 // packages/protocol/src/entities/sessions.ts
 var SessionState = external_exports.enum(["idle", "working", "waiting_approval", "waiting_input", "limited", "error"]);
@@ -57885,7 +57886,9 @@ var MachineOperation = external_exports.object({
   step: external_exports.string(),
   /** The version it brings the machine to, when there is one */
   target: external_exports.string().nullable().default(null),
-  at: external_exports.number()
+  at: external_exports.number(),
+  /** What `wait_idle` (sessions in a turn) or `wait_open` (open terminals and project commands) waits for: how many. Additive (#1579) */
+  count: external_exports.number().optional()
 });
 var MachineAutostart = external_exports.object({
   on: external_exports.boolean().catch(false),
@@ -58502,8 +58505,40 @@ var AdapterCapabilities = external_exports.object({
    * process reads the prompt cache as a live one does (~100% at 2, 6 and 10 minutes on the 1 h lifetime), for +0.7 s
    * (p50) before the first token (#561). Absent is false: a tool whose resume is slow or untested keeps its process.
    */
-  sleep: external_exports.boolean().optional()
+  sleep: external_exports.boolean().optional(),
+  /**
+   * The permission presets this tool can keep (docs/plans/acp-adapter.md §5.3). Absent: every preset. Cursor's ACP
+   * server has no switch that makes it ask before every change, so it does not list `safe`, and a session asked to run
+   * it under `safe` is refused (`launchRefusal`) rather than run under a promise it cannot keep.
+   */
+  presets: external_exports.array(PermissionPreset).optional(),
+  /**
+   * Whether the tool can be kept from reading the repository's own files (`.cursor/rules`, `AGENTS.md`, its config)
+   * when the project is not trusted (#92). Absent: true. False: it runs only in trusted projects.
+   */
+  keepsRepoFilesOut: external_exports.boolean().optional(),
+  /**
+   * Whether the tool takes Centralu's role text (`systemPromptAppend`). Absent: true. False: it cannot be a session that
+   * is given one (the orchestrator, a coordinator, an app's agent), nor one that must read no setting files.
+   */
+  roleText: external_exports.boolean().optional()
 });
+var ORCHESTRATOR_DEMANDS = { permissionPreset: "normal", projectTrusted: false, noSettingFiles: true, roleText: true };
+function launchRefusal(caps, label, demands) {
+  if (caps.roleText === false && (demands.roleText || demands.noSettingFiles)) {
+    return `${label} cannot take Centralu's role instructions yet, so it cannot run the orchestrator, a coordinator or an app's agent.`;
+  }
+  if (caps.keepsRepoFilesOut === false && !demands.projectTrusted) {
+    return `${label} cannot be kept from reading a project's own files (such as AGENTS.md and its rules), so it runs only in trusted projects.`;
+  }
+  if (caps.presets && !caps.presets.includes(demands.permissionPreset)) {
+    const kept = caps.presets.map((p) => PRESET_LABEL[p]).join(" or ");
+    const asked = PRESET_LABEL[demands.permissionPreset];
+    return `${label} cannot be made to ask before a change as ${asked} does, so it cannot run under ${asked}${kept ? ` (only under ${kept})` : ""}.`;
+  }
+  return null;
+}
+var PRESET_LABEL = { safe: "Safe", normal: "Normal", edits: "Edits", auto: "Auto" };
 var ModelOption = external_exports.object({
   id: external_exports.string(),
   label: external_exports.string(),
@@ -58522,7 +58557,6 @@ var ModelOption = external_exports.object({
 });
 
 // packages/protocol/src/entities/approvals.ts
-var PermissionPreset = external_exports.enum(["safe", "normal", "edits", "auto"]);
 var ApprovalDecision = external_exports.enum(["allow", "deny", "always"]);
 var ProjectConsentKind = external_exports.enum(["delegate", "apps", "agents"]);
 var ApprovalScope = external_exports.enum(["session", "project"]);
@@ -59440,8 +59474,8 @@ function alwaysAllowKey(detail) {
   if (detail.kind === "file_edit" && detail.path.trim() !== "" && detail.path !== NO_PATH) return detail.path;
   return "";
 }
-function matchesAllowRule(key, matcher) {
-  return key === matcher;
+function matchesAllowRule(key, matcher2) {
+  return key === matcher2;
 }
 
 // packages/protocol/src/events.ts
@@ -64520,6 +64554,9 @@ function commandInterpreter(env = process.env) {
 function clonesFiles(platform = HOST_PLATFORM) {
   return platform === "darwin";
 }
+function installsCliAsVersionFolders(platform = HOST_PLATFORM) {
+  return platform === "win32";
+}
 function locksRunningPrograms(platform = HOST_PLATFORM) {
   return platform === "win32";
 }
@@ -64529,6 +64566,13 @@ function usesShippedConpty(platform = HOST_PLATFORM) {
 function locksWatchedFolders(platform = HOST_PLATFORM) {
   return platform === "win32";
 }
+function systemSettingsFolder(app2, env = process.env, platform = HOST_PLATFORM) {
+  if (platform === "win32") return win32.join(env.ProgramData || "C:\\ProgramData", app2);
+  return platform === "darwin" ? `/Library/Application Support/${app2}` : `/etc/${app2}`;
+}
+function openCodeMatchesAnyCase(platform = HOST_PLATFORM) {
+  return platform === "win32";
+}
 function programFile(name, platform = HOST_PLATFORM) {
   return platform === "win32" ? `${name}.exe` : name;
 }
@@ -66281,15 +66325,15 @@ function buildViewCsp(csp) {
   const frame = sanitizeDomains(csp?.frameDomains);
   const base2 = sanitizeDomains(csp?.baseUriDomains);
   const r = resource.kept.join(" ");
-  const join53 = (...parts) => parts.filter(Boolean).join(" ");
+  const join58 = (...parts) => parts.filter(Boolean).join(" ");
   const policy = [
     "default-src 'none'",
-    `script-src ${join53("'unsafe-inline'", r)}`,
-    `style-src ${join53("'unsafe-inline'", r)}`,
-    `img-src ${join53("data: blob:", r)}`,
-    `font-src ${join53("data:", r)}`,
-    `media-src ${join53("data: blob:", r)}`,
-    `worker-src ${join53("blob:", r)}`,
+    `script-src ${join58("'unsafe-inline'", r)}`,
+    `style-src ${join58("'unsafe-inline'", r)}`,
+    `img-src ${join58("data: blob:", r)}`,
+    `font-src ${join58("data:", r)}`,
+    `media-src ${join58("data: blob:", r)}`,
+    `worker-src ${join58("blob:", r)}`,
     `connect-src ${connect2.kept.length ? connect2.kept.join(" ") : "'none'"}`,
     `frame-src ${frame.kept.length ? frame.kept.join(" ") : "'none'"}`,
     "form-action 'none'",
@@ -67050,8 +67094,8 @@ function launchFor(path2, deps = realDeps(), depth = 0) {
     return plain3;
   }
   const dir = win325.dirname(path2);
-  const relative9 = shimTarget(text2);
-  const target = relative9 ? win325.resolve(dir, relative9) : nodeShimEntry(text2, dir, deps);
+  const relative10 = shimTarget(text2);
+  const target = relative10 ? win325.resolve(dir, relative10) : nodeShimEntry(text2, dir, deps);
   if (!target || !deps.exists(target)) return plain3;
   if (/\.(c|m)?js$/i.test(target)) return { command: deps.node, args: [target] };
   if (/\.exe$/i.test(target)) return { command: target, args: [] };
@@ -67073,9 +67117,9 @@ function nodeShimEntry(text2, dir, deps) {
   const started = /^\s*"%NODE_EXE%"\s+"%(\w+)%"\s+%\*\s*$/m.exec(text2)?.[1];
   if (!started) return null;
   const set3 = (name) => new RegExp(`^\\s*SET\\s+"${name}=%~dp0\\\\?([^"%]+)"`, "im").exec(text2)?.[1]?.trim() ?? null;
-  const relative9 = set3(started);
-  if (!relative9) return null;
-  const base2 = win325.resolve(dir, relative9);
+  const relative10 = set3(started);
+  if (!relative10) return null;
+  const base2 = win325.resolve(dir, relative10);
   const prefixJs = set3("NPM_PREFIX_JS");
   if (!prefixJs || !deps.runJs) return base2;
   const prefix = deps.runJs(win325.resolve(dir, prefixJs))?.trim().split(/\r?\n/).pop()?.trim();
@@ -67251,6 +67295,24 @@ function shoot(handle, signal, os2 = REAL_OS) {
   const tree = descendants(rows3, [pid]);
   return rows3.filter((r) => tree.has(r.pid));
 }
+function notedGroups(rows3, root3, known, self2) {
+  if (rows3.length === 0) return new Set(known);
+  const live2 = new Set(rows3.map((r) => r.pgid));
+  const kept = new Set([...known].filter((g5) => live2.has(g5)));
+  if (rows3.some((r) => r.pid === root3)) {
+    for (const g5 of killTargets([...rows3], root3, self2)) if (g5 !== root3) kept.add(g5);
+  }
+  return kept;
+}
+async function noteGroups(root3, known, platform = process.platform) {
+  if (platform === "win32") return /* @__PURE__ */ new Set();
+  let rows3 = [];
+  try {
+    rows3 = parsePs((await runFile("ps", ["-A", "-o", "pid=,ppid=,pgid="], { encoding: "utf8", timeout: 2e3, windowsHide: true })).stdout);
+  } catch {
+  }
+  return notedGroups(rows3, root3, known, process.pid);
+}
 function killTree(handle, signal, os2 = REAL_OS) {
   shoot(handle, signal, os2);
 }
@@ -68233,7 +68295,7 @@ var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
   }
   exports._ = _;
   const plus = new _Code("+");
-  function str4(strs, ...args) {
+  function str5(strs, ...args) {
     const expr = [safeStringify(strs[0])];
     let i = 0;
     while (i < args.length) {
@@ -68244,7 +68306,7 @@ var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
     optimize(expr);
     return new _Code(expr);
   }
-  exports.str = str4;
+  exports.str = str5;
   function addCodeArg(code2, arg) {
     if (arg instanceof _Code) code2.push(...arg._items);
     else if (arg instanceof Name) code2.push(arg);
@@ -68277,7 +68339,7 @@ var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
     if (typeof b2 == "string" && b2[0] === '"' && !(a instanceof Name)) return `"${a}${b2.slice(1)}`;
   }
   function strConcat(c1, c2) {
-    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str4`${c1}${c2}`;
+    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str5`${c1}${c2}`;
   }
   exports.strConcat = strConcat;
   function interpolate(x) {
@@ -69156,21 +69218,21 @@ var require_util = /* @__PURE__ */ __commonJSMin(((exports) => {
     return (0, codegen_1._)`${topSchemaRef}${schemaPath}${(0, codegen_1.getProperty)(keyword)}`;
   }
   exports.schemaRefOrVal = schemaRefOrVal;
-  function unescapeFragment(str4) {
-    return unescapeJsonPointer(decodeURIComponent(str4));
+  function unescapeFragment(str5) {
+    return unescapeJsonPointer(decodeURIComponent(str5));
   }
   exports.unescapeFragment = unescapeFragment;
-  function escapeFragment(str4) {
-    return encodeURIComponent(escapeJsonPointer(str4));
+  function escapeFragment(str5) {
+    return encodeURIComponent(escapeJsonPointer(str5));
   }
   exports.escapeFragment = escapeFragment;
-  function escapeJsonPointer(str4) {
-    if (typeof str4 == "number") return `${str4}`;
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPointer(str5) {
+    if (typeof str5 == "number") return `${str5}`;
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
   exports.escapeJsonPointer = escapeJsonPointer;
-  function unescapeJsonPointer(str4) {
-    return str4.replace(/~1/g, "/").replace(/~0/g, "~");
+  function unescapeJsonPointer(str5) {
+    return str5.replace(/~1/g, "/").replace(/~0/g, "~");
   }
   exports.unescapeJsonPointer = unescapeJsonPointer;
   function eachItem(xs2, f) {
@@ -70056,8 +70118,8 @@ var require_json_schema_traverse = /* @__PURE__ */ __commonJSMin(((exports, modu
       post(schema, jsonPtr, rootSchema, parentJsonPtr, parentKeyword, parentSchema, keyIndex);
     }
   }
-  function escapeJsonPtr(str4) {
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPtr(str5) {
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
 }));
 var require_resolve = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -70949,9 +71011,9 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       isIPV6: false
     };
   }
-  function findToken(str4, token2) {
+  function findToken(str5, token2) {
     let ind = 0;
-    for (let i = 0; i < str4.length; i++) if (str4[i] === token2) ind++;
+    for (let i = 0; i < str5.length; i++) if (str5[i] === token2) ind++;
     return ind;
   }
   function removeDotSegments(path2) {
@@ -71225,41 +71287,41 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base2, relative9, options, skipNormalization) {
+  function resolveComponent(base2, relative10, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base2 = parse6(serialize(base2, options), options);
-      relative9 = parse6(serialize(relative9, options), options);
+      relative10 = parse6(serialize(relative10, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative9.scheme) {
-      target.scheme = relative9.scheme;
-      target.userinfo = relative9.userinfo;
-      target.host = relative9.host;
-      target.port = relative9.port;
-      target.path = removeDotSegments(relative9.path || "");
-      target.query = relative9.query;
+    if (!options.tolerant && relative10.scheme) {
+      target.scheme = relative10.scheme;
+      target.userinfo = relative10.userinfo;
+      target.host = relative10.host;
+      target.port = relative10.port;
+      target.path = removeDotSegments(relative10.path || "");
+      target.query = relative10.query;
     } else {
-      if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
-        target.userinfo = relative9.userinfo;
-        target.host = relative9.host;
-        target.port = relative9.port;
-        target.path = removeDotSegments(relative9.path || "");
-        target.query = relative9.query;
+      if (relative10.userinfo !== void 0 || relative10.host !== void 0 || relative10.port !== void 0) {
+        target.userinfo = relative10.userinfo;
+        target.host = relative10.host;
+        target.port = relative10.port;
+        target.path = removeDotSegments(relative10.path || "");
+        target.query = relative10.query;
       } else {
-        if (!relative9.path) {
+        if (!relative10.path) {
           target.path = base2.path;
-          if (relative9.query !== void 0) target.query = relative9.query;
+          if (relative10.query !== void 0) target.query = relative10.query;
           else target.query = base2.query;
         } else {
-          if (relative9.path[0] === "/") target.path = removeDotSegments(relative9.path);
+          if (relative10.path[0] === "/") target.path = removeDotSegments(relative10.path);
           else {
-            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative9.path;
-            else if (!base2.path) target.path = relative9.path;
-            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative9.path;
+            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative10.path;
+            else if (!base2.path) target.path = relative10.path;
+            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative10.path;
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative9.query;
+          target.query = relative10.query;
         }
         target.userinfo = base2.userinfo;
         target.host = base2.host;
@@ -71267,7 +71329,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       }
       target.scheme = base2.scheme;
     }
-    target.fragment = relative9.fragment;
+    target.fragment = relative10.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -71466,7 +71528,7 @@ var require_core$3 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const util_1 = require_util();
   const $dataRefSchema = require_data();
   const uri_1 = require_uri();
-  const defaultRegExp = (str4, flags) => new RegExp(str4, flags);
+  const defaultRegExp = (str5, flags) => new RegExp(str5, flags);
   defaultRegExp.code = "new RegExp";
   const META_IGNORE_OPTIONS = [
     "removeAdditional",
@@ -72172,16 +72234,16 @@ var require_multipleOf = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 var require_ucs2length = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  function ucs2length(str4) {
-    const len = str4.length;
+  function ucs2length(str5) {
+    const len = str5.length;
     let length = 0;
     let pos = 0;
     let value;
     while (pos < len) {
       length++;
-      value = str4.charCodeAt(pos++);
+      value = str5.charCodeAt(pos++);
       if (value >= 55296 && value <= 56319 && pos < len) {
-        value = str4.charCodeAt(pos);
+        value = str5.charCodeAt(pos);
         if ((value & 64512) === 56320) pos++;
       }
     }
@@ -74892,8 +74954,8 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
     30,
     31
   ];
-  function date5(str4) {
-    const matches2 = DATE.exec(str4);
+  function date5(str5) {
+    const matches2 = DATE.exec(str5);
     if (!matches2) return false;
     const year = +matches2[1];
     const month = +matches2[2];
@@ -74908,8 +74970,8 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
   }
   const TIME = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
   function getTime(strictTimeZone) {
-    return function time3(str4) {
-      const matches2 = TIME.exec(str4);
+    return function time3(str5) {
+      const matches2 = TIME.exec(str5);
       if (!matches2) return false;
       const hr2 = +matches2[1];
       const min = +matches2[2];
@@ -74946,8 +75008,8 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
   const DATE_TIME_SEPARATOR = /t|\s/i;
   function getDateTime(strictTimeZone) {
     const time3 = getTime(strictTimeZone);
-    return function date_time(str4) {
-      const dateTime = str4.split(DATE_TIME_SEPARATOR);
+    return function date_time(str5) {
+      const dateTime = str5.split(DATE_TIME_SEPARATOR);
       return dateTime.length === 2 && date5(dateTime[0]) && time3(dateTime[1]);
     };
   }
@@ -74968,13 +75030,13 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
   }
   const NOT_URI_FRAGMENT = /\/|:/;
   const URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-  function uri(str4) {
-    return NOT_URI_FRAGMENT.test(str4) && URI.test(str4);
+  function uri(str5) {
+    return NOT_URI_FRAGMENT.test(str5) && URI.test(str5);
   }
   const BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-  function byte(str4) {
+  function byte(str5) {
     BYTE.lastIndex = 0;
-    return BYTE.test(str4);
+    return BYTE.test(str5);
   }
   const MIN_INT32 = -(2 ** 31);
   const MAX_INT32 = 2 ** 31 - 1;
@@ -74988,10 +75050,10 @@ var require_formats = /* @__PURE__ */ __commonJSMin(((exports) => {
     return true;
   }
   const Z_ANCHOR = /[^\\]\\Z/;
-  function regex(str4) {
-    if (Z_ANCHOR.test(str4)) return false;
+  function regex(str5) {
+    if (Z_ANCHOR.test(str5)) return false;
     try {
-      new RegExp(str4);
+      new RegExp(str5);
       return true;
     } catch (e) {
       return false;
@@ -81172,8 +81234,8 @@ var Server = class extends Protocol {
   _registerLoggingHandler() {
     this.setRequestHandler("logging/setLevel", async (request, ctx) => {
       const transportSessionId = ctx.sessionId || ctx.http?.req?.headers.get("mcp-session-id") || void 0;
-      const { level } = request.params;
-      const parseResult = parseSchema(LoggingLevelSchema, level);
+      const { level: level2 } = request.params;
+      const parseResult = parseSchema(LoggingLevelSchema, level2);
       if (parseResult.success) this._loggingLevels.set(transportSessionId, parseResult.data);
       return {};
     });
@@ -81184,18 +81246,18 @@ var Server = class extends Protocol {
       ...ctx,
       mcpReq: {
         ...ctx.mcpReq,
-        log: (level, data, logger) => {
+        log: (level2, data, logger) => {
           if (!this._capabilities.logging) return Promise.resolve();
           let threshold;
           if (this._servedModernEra()) {
             threshold = ctx.mcpReq.envelope?.[LOG_LEVEL_META_KEY];
             if (threshold === void 0) return Promise.resolve();
           } else threshold = this._loggingLevels.get(ctx.sessionId) ?? this._loggingLevels.get(void 0);
-          if (threshold !== void 0 && this.LOG_LEVEL_SEVERITY.get(level) < this.LOG_LEVEL_SEVERITY.get(threshold)) return Promise.resolve();
+          if (threshold !== void 0 && this.LOG_LEVEL_SEVERITY.get(level2) < this.LOG_LEVEL_SEVERITY.get(threshold)) return Promise.resolve();
           return ctx.mcpReq.notify({
             method: "notifications/message",
             params: {
-              level,
+              level: level2,
               data,
               logger
             }
@@ -81213,10 +81275,10 @@ var Server = class extends Protocol {
     };
   }
   _loggingLevels = /* @__PURE__ */ new Map();
-  LOG_LEVEL_SEVERITY = new Map(LoggingLevelSchema.options.map((level, index) => [level, index]));
-  isMessageIgnored = (level, sessionId) => {
+  LOG_LEVEL_SEVERITY = new Map(LoggingLevelSchema.options.map((level2, index) => [level2, index]));
+  isMessageIgnored = (level2, sessionId) => {
     const currentLevel = this._loggingLevels.get(sessionId);
-    return currentLevel ? this.LOG_LEVEL_SEVERITY.get(level) < this.LOG_LEVEL_SEVERITY.get(currentLevel) : false;
+    return currentLevel ? this.LOG_LEVEL_SEVERITY.get(level2) < this.LOG_LEVEL_SEVERITY.get(currentLevel) : false;
   };
   /**
   * Registers new capabilities. This can only be called before connecting to a transport.
@@ -89604,7 +89666,7 @@ var require_code$12 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   }
   exports._ = _;
   const plus = new _Code("+");
-  function str4(strs, ...args) {
+  function str5(strs, ...args) {
     const expr = [safeStringify(strs[0])];
     let i = 0;
     while (i < args.length) {
@@ -89615,7 +89677,7 @@ var require_code$12 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     optimize(expr);
     return new _Code(expr);
   }
-  exports.str = str4;
+  exports.str = str5;
   function addCodeArg(code2, arg) {
     if (arg instanceof _Code) code2.push(...arg._items);
     else if (arg instanceof Name) code2.push(arg);
@@ -89648,7 +89710,7 @@ var require_code$12 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     if (typeof b2 == "string" && b2[0] === '"' && !(a instanceof Name)) return `"${a}${b2.slice(1)}`;
   }
   function strConcat(c1, c2) {
-    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str4`${c1}${c2}`;
+    return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str5`${c1}${c2}`;
   }
   exports.strConcat = strConcat;
   function interpolate(x) {
@@ -90527,21 +90589,21 @@ var require_util2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     return (0, codegen_1._)`${topSchemaRef}${schemaPath}${(0, codegen_1.getProperty)(keyword)}`;
   }
   exports.schemaRefOrVal = schemaRefOrVal;
-  function unescapeFragment(str4) {
-    return unescapeJsonPointer(decodeURIComponent(str4));
+  function unescapeFragment(str5) {
+    return unescapeJsonPointer(decodeURIComponent(str5));
   }
   exports.unescapeFragment = unescapeFragment;
-  function escapeFragment(str4) {
-    return encodeURIComponent(escapeJsonPointer(str4));
+  function escapeFragment(str5) {
+    return encodeURIComponent(escapeJsonPointer(str5));
   }
   exports.escapeFragment = escapeFragment;
-  function escapeJsonPointer(str4) {
-    if (typeof str4 == "number") return `${str4}`;
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPointer(str5) {
+    if (typeof str5 == "number") return `${str5}`;
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
   exports.escapeJsonPointer = escapeJsonPointer;
-  function unescapeJsonPointer(str4) {
-    return str4.replace(/~1/g, "/").replace(/~0/g, "~");
+  function unescapeJsonPointer(str5) {
+    return str5.replace(/~1/g, "/").replace(/~0/g, "~");
   }
   exports.unescapeJsonPointer = unescapeJsonPointer;
   function eachItem(xs2, f) {
@@ -91427,8 +91489,8 @@ var require_json_schema_traverse2 = /* @__PURE__ */ __commonJSMin2(((exports, mo
       post(schema, jsonPtr, rootSchema, parentJsonPtr, parentKeyword, parentSchema, keyIndex);
     }
   }
-  function escapeJsonPtr(str4) {
-    return str4.replace(/~/g, "~0").replace(/\//g, "~1");
+  function escapeJsonPtr(str5) {
+    return str5.replace(/~/g, "~0").replace(/\//g, "~1");
   }
 }));
 var require_resolve2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
@@ -92320,9 +92382,9 @@ var require_utils2 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
       isIPV6: false
     };
   }
-  function findToken(str4, token2) {
+  function findToken(str5, token2) {
     let ind = 0;
-    for (let i = 0; i < str4.length; i++) if (str4[i] === token2) ind++;
+    for (let i = 0; i < str5.length; i++) if (str5[i] === token2) ind++;
     return ind;
   }
   function removeDotSegments(path2) {
@@ -92596,41 +92658,41 @@ var require_fast_uri2 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base2, relative9, options, skipNormalization) {
+  function resolveComponent(base2, relative10, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base2 = parse6(serialize(base2, options), options);
-      relative9 = parse6(serialize(relative9, options), options);
+      relative10 = parse6(serialize(relative10, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative9.scheme) {
-      target.scheme = relative9.scheme;
-      target.userinfo = relative9.userinfo;
-      target.host = relative9.host;
-      target.port = relative9.port;
-      target.path = removeDotSegments(relative9.path || "");
-      target.query = relative9.query;
+    if (!options.tolerant && relative10.scheme) {
+      target.scheme = relative10.scheme;
+      target.userinfo = relative10.userinfo;
+      target.host = relative10.host;
+      target.port = relative10.port;
+      target.path = removeDotSegments(relative10.path || "");
+      target.query = relative10.query;
     } else {
-      if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
-        target.userinfo = relative9.userinfo;
-        target.host = relative9.host;
-        target.port = relative9.port;
-        target.path = removeDotSegments(relative9.path || "");
-        target.query = relative9.query;
+      if (relative10.userinfo !== void 0 || relative10.host !== void 0 || relative10.port !== void 0) {
+        target.userinfo = relative10.userinfo;
+        target.host = relative10.host;
+        target.port = relative10.port;
+        target.path = removeDotSegments(relative10.path || "");
+        target.query = relative10.query;
       } else {
-        if (!relative9.path) {
+        if (!relative10.path) {
           target.path = base2.path;
-          if (relative9.query !== void 0) target.query = relative9.query;
+          if (relative10.query !== void 0) target.query = relative10.query;
           else target.query = base2.query;
         } else {
-          if (relative9.path[0] === "/") target.path = removeDotSegments(relative9.path);
+          if (relative10.path[0] === "/") target.path = removeDotSegments(relative10.path);
           else {
-            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative9.path;
-            else if (!base2.path) target.path = relative9.path;
-            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative9.path;
+            if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) target.path = "/" + relative10.path;
+            else if (!base2.path) target.path = relative10.path;
+            else target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative10.path;
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative9.query;
+          target.query = relative10.query;
         }
         target.userinfo = base2.userinfo;
         target.host = base2.host;
@@ -92638,7 +92700,7 @@ var require_fast_uri2 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
       }
       target.scheme = base2.scheme;
     }
-    target.fragment = relative9.fragment;
+    target.fragment = relative10.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -92837,7 +92899,7 @@ var require_core$32 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   const util_1 = require_util2();
   const $dataRefSchema = require_data2();
   const uri_1 = require_uri2();
-  const defaultRegExp = (str4, flags) => new RegExp(str4, flags);
+  const defaultRegExp = (str5, flags) => new RegExp(str5, flags);
   defaultRegExp.code = "new RegExp";
   const META_IGNORE_OPTIONS = [
     "removeAdditional",
@@ -93543,16 +93605,16 @@ var require_multipleOf2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
 }));
 var require_ucs2length2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  function ucs2length(str4) {
-    const len = str4.length;
+  function ucs2length(str5) {
+    const len = str5.length;
     let length = 0;
     let pos = 0;
     let value;
     while (pos < len) {
       length++;
-      value = str4.charCodeAt(pos++);
+      value = str5.charCodeAt(pos++);
       if (value >= 55296 && value <= 56319 && pos < len) {
-        value = str4.charCodeAt(pos);
+        value = str5.charCodeAt(pos);
         if ((value & 64512) === 56320) pos++;
       }
     }
@@ -96263,8 +96325,8 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     30,
     31
   ];
-  function date5(str4) {
-    const matches2 = DATE.exec(str4);
+  function date5(str5) {
+    const matches2 = DATE.exec(str5);
     if (!matches2) return false;
     const year = +matches2[1];
     const month = +matches2[2];
@@ -96279,8 +96341,8 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   }
   const TIME = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
   function getTime(strictTimeZone) {
-    return function time3(str4) {
-      const matches2 = TIME.exec(str4);
+    return function time3(str5) {
+      const matches2 = TIME.exec(str5);
       if (!matches2) return false;
       const hr2 = +matches2[1];
       const min = +matches2[2];
@@ -96317,8 +96379,8 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   const DATE_TIME_SEPARATOR = /t|\s/i;
   function getDateTime(strictTimeZone) {
     const time3 = getTime(strictTimeZone);
-    return function date_time(str4) {
-      const dateTime = str4.split(DATE_TIME_SEPARATOR);
+    return function date_time(str5) {
+      const dateTime = str5.split(DATE_TIME_SEPARATOR);
       return dateTime.length === 2 && date5(dateTime[0]) && time3(dateTime[1]);
     };
   }
@@ -96339,13 +96401,13 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   }
   const NOT_URI_FRAGMENT = /\/|:/;
   const URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-  function uri(str4) {
-    return NOT_URI_FRAGMENT.test(str4) && URI.test(str4);
+  function uri(str5) {
+    return NOT_URI_FRAGMENT.test(str5) && URI.test(str5);
   }
   const BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-  function byte(str4) {
+  function byte(str5) {
     BYTE.lastIndex = 0;
-    return BYTE.test(str4);
+    return BYTE.test(str5);
   }
   const MIN_INT32 = -(2 ** 31);
   const MAX_INT32 = 2 ** 31 - 1;
@@ -96359,10 +96421,10 @@ var require_formats2 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     return true;
   }
   const Z_ANCHOR = /[^\\]\\Z/;
-  function regex(str4) {
-    if (Z_ANCHOR.test(str4)) return false;
+  function regex(str5) {
+    if (Z_ANCHOR.test(str5)) return false;
     try {
-      new RegExp(str4);
+      new RegExp(str5);
       return true;
     } catch (e) {
       return false;
@@ -98240,10 +98302,10 @@ var Client = class extends Protocol2 {
   * Remains functional during the deprecation window (at least twelve months).
   * Migrate to stderr logging (STDIO servers) or OpenTelemetry.
   */
-  async setLoggingLevel(level, options) {
+  async setLoggingLevel(level2, options) {
     return this.request({
       method: "logging/setLevel",
-      params: { level }
+      params: { level: level2 }
     }, options);
   }
   /** Retrieves a prompt by name from the server, passing the given arguments for template substitution. */
@@ -108706,14 +108768,43 @@ var RoutedCards = class {
   }
 };
 
+// packages/agent-host/src/mail/address.ts
+var SEGMENT = "[A-Za-z0-9][A-Za-z0-9._~-]{0,63}";
+var SEGMENT_RE = new RegExp(`^${SEGMENT}$`);
+var SESSION_RE = new RegExp(`^session:(${SEGMENT})/(${SEGMENT})$`);
+var APP_RE = new RegExp(`^app:(${SEGMENT})/(${SEGMENT})/(${SEGMENT})$`);
+var PERSON = "person";
+var CENTRALU = "centralu";
+function sessionAddress(host, sessionId) {
+  return checked(`session:${host}/${sessionId}`);
+}
+function parseAddress(address) {
+  if (address === PERSON) return { kind: "person" };
+  if (address === CENTRALU) return { kind: "centralu" };
+  const [, host, sessionId] = SESSION_RE.exec(address) ?? [];
+  if (host !== void 0 && sessionId !== void 0) return { kind: "session", host, sessionId };
+  const [, appHost, projectId, appId] = APP_RE.exec(address) ?? [];
+  if (appHost !== void 0 && projectId !== void 0 && appId !== void 0) return { kind: "app", host: appHost, projectId, appId };
+  return null;
+}
+function checked(address) {
+  if (!parseAddress(address)) throw new Error(`Not a mail address: ${JSON.stringify(address)}`);
+  return address;
+}
+
 // packages/agent-host/src/sessions/handoff-children.ts
 var SETTLED_CHILD = "finished; waiting for more work";
 function movedChildrenNote(moved, commands = "") {
   return [
     "## Work handed over with this note (added by Centralu)",
     "",
-    "The previous session started or asked for these. They now answer to you as each line says (a finished one waits",
-    "for more work); use the handle with the tool it names.",
+    ...moved.some((c) => c.thread) ? [
+      "The previous session started or asked for these, or held these mail threads. They are yours now as each line says",
+      "(a finished session waits for more work); use the handle with the tool it names."
+    ] : [
+      "The previous session started or asked for these. They now answer to you as each line says (a finished one waits",
+      "for more work); use the handle with the tool it names."
+    ],
     ...commands ? [commands] : [],
     "",
     ...moved.map((c) => `- ${movedLabel(c)} \u2014 ${c.state} \u2014 handle: ${c.handle}. ${c.can}`),
@@ -108725,6 +108816,7 @@ function movedChildrenNote(moved, commands = "") {
 }
 function movedLabel(c) {
   if (c.request) return "start_agent request";
+  if (c.thread) return `mail thread "${oneLineText(c.name, 120)}"`;
   return `"${oneLineText(c.name, 120)}"${c.project ? ` (project ${c.project})` : ""}`;
 }
 var HandoffChildren = class {
@@ -108827,18 +108919,30 @@ var HandoffChildren = class {
         can: "The card stands in your session; if the person allows it, the session it starts is yours and its report comes to you. agent_session (status, wait, stop) works on the handle meanwhile."
       });
     }
-    if (!moved.length) return [];
+    const mailWhich = scope === "live" ? sessions.length ? { assignees: sessions } : null : "all";
+    if (!moved.length && mailWhich === null) return [];
+    let threads = [];
     try {
-      this.host.store.children.moveChildren(from, to, {
-        sessions,
-        startRequests: starts.map((r) => ({ requestId: r.req.requestId, request: { ...r.req, callerId: to } })),
-        armReports,
-        queued: !removed
-      });
+      this.host.store.children.moveChildren(
+        from,
+        to,
+        {
+          sessions,
+          startRequests: starts.map((r) => ({ requestId: r.req.requestId, request: { ...r.req, callerId: to } })),
+          armReports,
+          // With no child moving, the memory side does not run, so the queue's rows do not move either
+          queued: !removed && moved.length > 0
+        },
+        mailWhich === null ? void 0 : () => void (threads = this.host.mailHandOver(from, to, mailWhich))
+      );
     } catch (e) {
-      console.error(`[agent-host] handoff left the children with ${from.slice(0, 8)}: ${e.message}`);
+      console.error(`[agent-host] handoff left the children and the mail with ${from.slice(0, 8)}: ${e.message}`);
       return [];
     }
+    const childCount = moved.length;
+    moved.push(...threads.map((t) => movedThread(t)));
+    if (!moved.length) return [];
+    if (removed && threads.some((t) => t.unread > 0)) this.host.mailPoke(to);
     for (const id3 of sessions) {
       const s = this.host.meta.get(id3);
       if (s.askedBy !== from && s.parentSessionId !== from) continue;
@@ -108846,7 +108950,7 @@ var HandoffChildren = class {
       if (s.parentSessionId === from) s.parentSessionId = to;
       this.host.emit({ type: "session_owner", sessionId: id3, askedBy: s.askedBy ?? null, parentSessionId: s.parentSessionId ?? null });
     }
-    this.host.children.moveOwner(from, to, { sessions, armReports, starts, queued: !removed }, () => {
+    if (childCount) this.host.children.moveOwner(from, to, { sessions, armReports, starts, queued: !removed }, () => {
       for (const r of starts) {
         r.req.callerId = to;
         const ask = this.host.hostCards.hostAsks.get(r.req.requestId);
@@ -108874,10 +108978,22 @@ var HandoffChildren = class {
         text: `Handed over to \u201C${heir.name}\u201D [${to}], which follows them from now on: ${items.join("; ")}. This session no longer does.`
       });
     }
-    console.error(`[agent-host] handoff ${from.slice(0, 8)} -> ${to.slice(0, 8)} (${scope}): moved ${sessions.length} session(s), ${starts.length} start request(s)`);
+    console.error(`[agent-host] handoff ${from.slice(0, 8)} -> ${to.slice(0, 8)} (${scope}): moved ${sessions.length} session(s), ${starts.length} start request(s), ${threads.length} mail thread(s)`);
     return moved;
   }
 };
+function movedThread(t) {
+  const unread = t.unread ? `, ${t.unread} unread message${t.unread === 1 ? "" : "s"} now waiting for you` : "";
+  const other = (address) => {
+    const p = address === null ? null : parseAddress(address);
+    if (!p) return "nobody";
+    if (p.kind === "session") return `session ${p.sessionId}`;
+    return p.kind === "person" ? "the person" : p.kind === "app" ? `app ${p.appId}` : "Centralu";
+  };
+  const can = t.kind === "closed" ? "It is closed; what the previous session had not read of it waits for you. Read it with the mail tool." : t.kind === "left" ? t.role === "owner" ? "You are its assignee and the previous session was its owner, so it did not move: once that session is archived, the person owns it." : "You own it and the previous session had its work, so it did not move: once that session is archived, it is open with nobody on it; reassign or close it." : t.role === "owner" ? `You own it now (assignee: ${other(t.thread.assignee)}); its reports come to you in it. Read and answer it with the mail tool.` : t.role === "assignee" ? `It is assigned to you now (owner: ${other(t.thread.owner)}): the work is yours to do, and your report goes to its owner. Read it with the mail tool.` : "You are in it in the previous session's place. Read it with the mail tool.";
+  const state = t.kind === "closed" ? `done${t.thread.outcome ? ` (${t.thread.outcome})` : ""}` : t.thread.state;
+  return { handle: t.thread.id, name: t.thread.subject, state: `${state}${unread}`, can, thread: true };
+}
 
 // packages/agent-host/src/sessions/child-ownership.ts
 import { randomUUID as randomUUID12 } from "node:crypto";
@@ -108932,6 +109048,8 @@ var ChildOwnership = class {
    * work's, as every turn was.
    */
   starters = /* @__PURE__ */ new Map();
+  /** Turns the tool started by itself, no message behind them (`turnStarted`, #1576); memory only, a swap forgets it */
+  cliTurns = /* @__PURE__ */ new Set();
   lastBy = /* @__PURE__ */ new Map();
   /** Messages that went into the running turn and may not have been taken into it (#1377), by session */
   pending = /* @__PURE__ */ new Map();
@@ -109278,6 +109396,8 @@ var ChildOwnership = class {
     const next = found && Date.now() - found.at < NEXT_STARTER_MS ? found : void 0;
     const { at: _at, ...starter } = next ?? { by: "work", at: 0 };
     this.starters.set(sessionId, starter);
+    if (next) this.cliTurns.delete(sessionId);
+    else this.cliTurns.add(sessionId);
     this.persistTurn(sessionId);
     const source = next ? this.nextSource.get(sessionId) ?? "caller" : "caller";
     this.nextSource.delete(sessionId);
@@ -109298,6 +109418,7 @@ var ChildOwnership = class {
   turnEnded(sessionId, taken) {
     const starter = { ...this.starters.get(sessionId) ?? { by: "work" } };
     this.starters.delete(sessionId);
+    this.cliTurns.delete(sessionId);
     const pending = this.pending.get(sessionId) ?? [];
     this.pending.delete(sessionId);
     for (const p of pending) {
@@ -109312,6 +109433,24 @@ var ChildOwnership = class {
     this.store.settings.deleteAppSetting(reportTurnKey(sessionId));
     return starter;
   }
+  /**
+   * Whether the turn running is the paused work's continuing (#1576): the caller's report is held over the session's own
+   * background work, and the turn the tool started when that work ended is the work's (`turnStarted`, no message began
+   * it) with no person's message in it. That turn's end is the report the caller is owed, so it is the caller's too.
+   * The one place that says so, as `reportBackIfAwaited` reads the same turn for its report
+   */
+  continuesPause(sessionId, callerId) {
+    if (this.reports.get(sessionId) !== callerId || !this.paused.has(sessionId)) return false;
+    const owner = this.turns.get(sessionId)?.callerId;
+    if (owner && owner !== callerId || this.mailTurns.get(sessionId) && this.mailTurns.get(sessionId)?.ownerId !== callerId) return false;
+    const starter = this.starters.get(sessionId);
+    return this.cliTurns.has(sessionId) && starter?.by === "work" && !this.personInTurn(sessionId);
+  }
+  /** Whether a person started the running turn or wrote into it (#1576): a refusal says "the person may be using it" for no other */
+  personInTurn(sessionId) {
+    const starter = this.starters.get(sessionId);
+    return starter?.by !== "work" || !!starter.wrote || !!starter.added || (this.pending.get(sessionId) ?? []).some((p) => p.by === "person");
+  }
   /** Whose the session's last turn was (#1377): its last response is the person's answer when it was theirs */
   lastTurnBy(sessionId) {
     return this.lastBy.get(sessionId);
@@ -112244,7 +112383,8 @@ var AgentSessionActions = class {
             };
           }
           const from = { sessionId: callerId, name: labelOf(this.host.store.messages, caller) };
-          if (d2 && !d2.settled && observing || (!d2 || d2.settled) && this.host.busyForCaller(callerId, child.id)) {
+          const continuing = (!d2 || d2.settled) && inTurn(child.state) && this.host.children.continuesPause(child.id, callerId);
+          if (d2 && !d2.settled && observing || (!d2 || d2.settled) && !continuing && this.host.busyForCaller(callerId, child.id)) {
             if (!opts.ifBusy) return { ok: true, tool: child.tool, ...this.host.busyAnswer(callerId, child, "agent_session") };
             if (opts.ifBusy === "queue") return { ok: true, tool: child.tool, ...this.host.enqueue(callerId, child, "agent_session", opts.text ?? "") };
             if (opts.ifBusy === "fork" || opts.ifBusy === "fork_read") {
@@ -112258,16 +112398,18 @@ var AgentSessionActions = class {
             if (!note2.available || !d2 || d2.settled) return { ok: false, error: `No note to "${child.name}": ${note2.why ?? "nothing is running there to add it to"}. Queue it or fork it instead.` };
             this.host.autoBoundaryOpen(callerId, "a note into a turn that is not its own");
           }
-          if (d2 && !d2.settled) {
+          if (d2 && !d2.settled || continuing) {
             const text2 = agentNoteFrame(from.name, opts.text ?? "");
             if (!this.host.adapters.get(child.tool)?.capabilities.midTurnInput || !this.host.handles.get(child.id)?.sendTracked) {
               return { ok: false, error: `"${child.name}" cannot take messages while working. Wait for it (action "wait") or stop it first.` };
             }
-            const own = observing ? this.flow.observeTurn(child, true, true) : void 0;
+            const own = observing || continuing ? this.flow.observeTurn(child, true, true) : void 0;
             if (own) void own.run.wait.done.then(own.release, own.release);
-            const record2 = own ? { run: own.run, waiters: 0, told: false } : void 0;
+            const record2 = own && !continuing ? { run: own.run, waiters: 0, told: false } : void 0;
             if (record2) this.host.children.setObserverNote(key, record2);
-            const wait = own?.run.wait ?? d2.wait;
+            const run4 = own?.run ?? d2;
+            if (!run4) return { ok: false, error: `No note to "${child.name}": nothing is running there to add it to.` };
+            const wait = run4.wait;
             const releaseHold = wait.holdInput();
             const release = () => {
               releaseHold();
@@ -112278,7 +112420,9 @@ var AgentSessionActions = class {
                 const fail4 = (e) => {
                   if (!record2) {
                     wait.fail(e);
-                    return release();
+                    release();
+                    if (continuing) void this.flow.tellNoteRefused(callerId, child.id, e.message);
+                    return;
                   }
                   wait.fail(new Error(`your note was not delivered: ${e.message}`));
                   release();
@@ -112298,11 +112442,13 @@ var AgentSessionActions = class {
               return { ok: false, error: `Could not send it: ${e.message}` };
             }
             if (!observing) this.host.children.delegated(callerId, child.id, "agent_session", opts.text ?? "");
-            const working = this.flow.agentWorking(d2, false, observing);
+            const working = this.flow.agentWorking(run4, false, observing || continuing);
+            if (continuing && working.ok && working.state === "working") return { ...working, reported: this.host.children.awaitingReport.get(child.id) === callerId, via: "note" };
             return working.ok && observing ? { ...working, via: "note" } : working;
           }
           if (inTurn(child.state) || this.host.agentRuns.has(child.id) && !this.host.agentRuns.get(child.id).finished) {
-            return { ok: false, error: `"${child.name}" is busy with something else (the person may be using it). Try again later.` };
+            const person = this.host.children.personInTurn(child.id);
+            return { ok: false, error: `"${child.name}" is busy with ${person ? "something else (the person may be using it)" : "a turn you did not give it (another session, or its own tool, started it)"}. Try again later.` };
           }
           if (d2) this.host.children.dropDelegation(key);
           const full = this.flow.starts.agentCeilingError(callerId, child.projectId ?? "");
@@ -112430,6 +112576,10 @@ var RemoteAgents = class {
   toldCards = /* @__PURE__ */ new Set();
   /** Whose each child's turn is, as settled in this host (`Whose`); one not here is read from its record (`whoseOf`) */
   whose = /* @__PURE__ */ new Map();
+  /** What made a turn another's, when it is told (#1576): a message from another session of this hub, else it is read as the person's */
+  otherBy = /* @__PURE__ */ new Map();
+  /** Notes sent into a running turn whose record has not come back yet (memory only): two quick notes both are the caller's own */
+  notesSent = /* @__PURE__ */ new Map();
   /** Children an instruction is on its way to: its own send's answer says what came of it, and the machine is not read meanwhile */
   pending = /* @__PURE__ */ new Set();
   /** Children whose turn's end the linked reports held back while whose the turn was could not be told (`reportGate`) */
@@ -112760,14 +112910,19 @@ var RemoteAgents = class {
         if (now.running) {
           const g5 = await this.gate(rec, reader);
           if (!g5.live) {
-            return { ok: false, error: `"${rec.name}" is busy on ${rec.machine} with a turn you did not give it (the person may be using it there). A queue or a fork does not reach another machine: try again once it is at rest.` };
+            return { ok: false, error: `"${rec.name}" is busy on ${rec.machine} with ${this.otherTurn(rec, g5)}. A queue or a fork does not reach another machine: try again once it is at rest.` };
           }
           const refused3 = this.gateError(callerId);
           if (refused3) return { ok: false, error: refused3 };
           const framed3 = agentNoteFrame(label, text2);
           this.sentNow(rec.sessionId, framed3);
+          this.notesSent.set(rec.sessionId, [...this.notesSent.get(rec.sessionId) ?? [], framed3]);
           const sent2 = await reader.send(rec.sessionId, framed3, label, { depth: depthOf(this.host, callerId) + 1 });
-          if (!sent2.ok) return { ok: false, error: `Could not send to "${rec.name}" on ${rec.machine}: ${bare(sent2.error)}.` };
+          if (!sent2.ok) {
+            const at2 = (this.notesSent.get(rec.sessionId) ?? []).lastIndexOf(framed3);
+            if (at2 >= 0) this.notesSent.set(rec.sessionId, (this.notesSent.get(rec.sessionId) ?? []).filter((_, i) => i !== at2));
+            return { ok: false, error: `Could not send to "${rec.name}" on ${rec.machine}: ${bare(sent2.error)}.` };
+          }
           return this.gateNow(rec).live ? this.working(rec, this.reportArmed(rec) || this.waits.has(rec.sessionId)) : this.wentElsewhere(rec);
         }
         const refused2 = this.gateError(callerId);
@@ -112776,6 +112931,7 @@ var RemoteAgents = class {
         if (full) return { ok: false, error: full };
         const framed2 = agentNoteFrame(label, text2);
         this.save(this.records().map((r) => r.sessionId === rec.sessionId ? { ...r, turn: randomUUID17(), sent: framed2 } : r));
+        this.notesSent.delete(rec.sessionId);
         this.whose.set(rec.sessionId, "unknown");
         this.pending.add(rec.sessionId);
         this.host.children.setLinkedReport(rec.sessionId, { orchestratorId: callerId, busy: false });
@@ -112891,7 +113047,9 @@ var RemoteAgents = class {
     const whose = this.whoseOf(rec);
     const owned = whose === "caller";
     const report = this.host.children.linkedReports.get(rec.sessionId);
-    const running2 = this.waits.has(rec.sessionId) || report?.orchestratorId === rec.callerId && !report.paused;
+    const mine = report?.orchestratorId === rec.callerId;
+    const continuesPause = mine && !!report.paused && report.busy && report.turn?.by === "work";
+    const running2 = this.waits.has(rec.sessionId) || mine && (!report.paused || continuesPause);
     return { owned, live: owned && running2, whose };
   }
   /** Whose the child's turn is (`Whose`): as settled here, else as its record kept it; `caller` is re-read after a restart */
@@ -112905,6 +113063,7 @@ var RemoteAgents = class {
    */
   setWhose(rec, whose, why) {
     const was = this.whoseOf(rec);
+    if (was !== "other" || whose !== "other") this.otherBy.delete(rec.sessionId);
     this.whose.set(rec.sessionId, whose);
     const kept = whose === "unknown" ? void 0 : whose;
     const stored = this.of(rec.sessionId);
@@ -112956,12 +113115,26 @@ var RemoteAgents = class {
     if (whose === "unknown") this.setWhose(rec, "other");
     return this.wentElsewhere(rec);
   }
+  /**
+   * What the running turn is, said for a caller it is not live for (#1576): named by what started it, so only a message
+   * of a person's on that machine is "the person may be using it". A turn the hub has no sight of the start of (a swap,
+   * a machine that lists no background work) is said to be the child's own, not a person's
+   */
+  otherTurn(rec, g5) {
+    if (g5.whose === "unknown") return "a turn the hub cannot tell the owner of (the link dropped, or Centralu restarted, and the machine cannot be read now)";
+    if (g5.whose === "other") {
+      return this.otherBy.get(rec.sessionId) === "session" ? "a turn another session asked of it (it is not the one you gave it)" : "a turn you did not give it (the person may be using it there)";
+    }
+    const report = this.host.children.linkedReports.get(rec.sessionId);
+    if (report && report.orchestratorId !== rec.callerId) return "a turn another session is owed the end of (it is not the one you gave it)";
+    return "a turn it started by itself that this hub cannot tie to the work you gave it";
+  }
   /**
    * What the caller gets of a child whose turn the gate does not let through: the fact and the state word. Nothing of
    * the turn: no card, no words, and nothing owed or armed for it
    */
   notYours(rec, g5, running2, state) {
-    const why = g5.whose === "unknown" ? `The hub could not tell whose its last turn on ${rec.machine} was (the link dropped, or Centralu restarted, and the machine cannot be read now)` : running2 ? `It is in a turn on ${rec.machine} that you did not give it (the person is using it there)` : `Its last turn on ${rec.machine} was not one you gave it (the person's)`;
+    const why = g5.whose === "unknown" ? `The hub could not tell whose its last turn on ${rec.machine} was (the link dropped, or Centralu restarted, and the machine cannot be read now)` : running2 ? `It is in ${this.otherTurn(rec, g5)} on ${rec.machine}` : `Its last turn on ${rec.machine} was not one you gave it (the person's)`;
     const notice = `${why}: nothing of that turn is yours to read, and none of it is reported to you.${running2 ? " Send to it once it is at rest." : ""}`;
     if (running2) return { ...this.working(rec, false), notice };
     return { ok: true, state: "at_rest", sessionId: rec.sessionId, sessionName: rec.name, tool: rec.tool, answer: "(not yours to read: a turn you did not give it)", sessionState: state, notice };
@@ -112981,13 +113154,23 @@ var RemoteAgents = class {
       if (e.seq <= (this.lastSeq.get(sessionId) ?? -1)) return;
       this.lastSeq.set(sessionId, e.seq);
     }
+    const own = this.notesSent.get(sessionId) ?? [];
+    const earlier = typeof e.text === "string" && e.text !== rec.sent ? own.indexOf(e.text) : -1;
+    if (earlier >= 0 && this.fromHubHere(rec, e.from)) {
+      this.notesSent.set(sessionId, own.filter((_, i) => i !== earlier));
+      if (this.whoseOf(rec) === "caller" && this.gateNow(rec).live) return;
+    }
     if (this.fromHubHere(rec, e.from) && e.text === rec.sent) {
+      const at2 = own.indexOf(rec.sent ?? "");
+      if (at2 >= 0) this.notesSent.set(sessionId, own.filter((_, i) => i !== at2));
       if (this.whoseOf(rec) === "caller" && this.gateNow(rec).live) return;
       if (this.busy.has(sessionId)) return this.setWhose(rec, "other", "took what you sent as a message into a turn already running there that you did not give it (the person's, most likely)");
       this.tookInstruction(rec);
       return;
     }
     this.setWhose(rec, "other", "took a message there that you did not send (the person on that machine, most likely)");
+    if (this.fromHubHere(rec, e.from)) this.otherBy.set(sessionId, "session");
+    else this.otherBy.delete(sessionId);
   }
   /**
    * The machine recorded the instruction this hub last sent the child, with no other turn running there: the turn that
@@ -113278,6 +113461,8 @@ var RemoteAgents = class {
     if (this.records().some((r) => r.sessionId === sessionId)) this.save(this.records().filter((r) => r.sessionId !== sessionId));
     this.toldDown.delete(sessionId);
     this.whose.delete(sessionId);
+    this.otherBy.delete(sessionId);
+    this.notesSent.delete(sessionId);
     this.pending.delete(sessionId);
     this.deferred.delete(sessionId);
     this.busy.delete(sessionId);
@@ -114137,6 +114322,20 @@ var LaunchRecords = class {
   rememberBackgroundTasks(m) {
     this.host.store.settings.setAppSetting(this.backgroundTasksKey(m.id), JSON.stringify(m.backgroundTasks.filter((t) => t.status === "running")));
   }
+  /**
+   * The running cost total of the conversation a session's tool reports (`CreateSessionOpts.runningCost`), as its last process
+   * read it: kept so the next process, after a restart, a wake or a host swap, takes a turn's cost as what it added. Read only
+   * for a resumed conversation; anything but a number at or above 0 is none.
+   */
+  runningCostFor(sessionId, resumed) {
+    const key = `running_cost:${sessionId}`;
+    const raw = resumed ? this.host.store.settings.appSetting(key) : null;
+    const last = raw === null ? null : Number(raw);
+    return {
+      last: last !== null && Number.isFinite(last) && last >= 0 ? last : null,
+      keep: (total) => this.host.store.settings.setAppSetting(key, String(total))
+    };
+  }
   /** The persisted prefix a process was started with. It is separate from SessionInfo: a screen never needs it. */
   toolPrefixKey(sessionId) {
     return `tool_prefix:${sessionId}`;
@@ -118056,30 +118255,6 @@ ${note}` : note;
   }
 };
 
-// packages/agent-host/src/mail/address.ts
-var SEGMENT = "[A-Za-z0-9][A-Za-z0-9._~-]{0,63}";
-var SEGMENT_RE = new RegExp(`^${SEGMENT}$`);
-var SESSION_RE = new RegExp(`^session:(${SEGMENT})/(${SEGMENT})$`);
-var APP_RE = new RegExp(`^app:(${SEGMENT})/(${SEGMENT})/(${SEGMENT})$`);
-var PERSON = "person";
-var CENTRALU = "centralu";
-function sessionAddress(host, sessionId) {
-  return checked(`session:${host}/${sessionId}`);
-}
-function parseAddress(address) {
-  if (address === PERSON) return { kind: "person" };
-  if (address === CENTRALU) return { kind: "centralu" };
-  const [, host, sessionId] = SESSION_RE.exec(address) ?? [];
-  if (host !== void 0 && sessionId !== void 0) return { kind: "session", host, sessionId };
-  const [, appHost, projectId, appId] = APP_RE.exec(address) ?? [];
-  if (appHost !== void 0 && projectId !== void 0 && appId !== void 0) return { kind: "app", host: appHost, projectId, appId };
-  return null;
-}
-function checked(address) {
-  if (!parseAddress(address)) throw new Error(`Not a mail address: ${JSON.stringify(address)}`);
-  return address;
-}
-
 // packages/agent-host/src/mail/ids.ts
 import { randomBytes as randomBytes5 } from "node:crypto";
 var CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
@@ -118169,10 +118344,10 @@ function sweepMail(db, now, limits = {}) {
     result.messages += db.prepare(`DELETE FROM mail_messages WHERE id IN (SELECT value FROM json_each(?))`).run(json2).changes;
   };
   const dropThreads = (where2, cut2) => {
-    const pick3 = db.prepare(`SELECT t.id FROM mail_threads t WHERE ${where2} ORDER BY t.created_at LIMIT @batch`);
+    const pick4 = db.prepare(`SELECT t.id FROM mail_threads t WHERE ${where2} ORDER BY t.created_at LIMIT @batch`);
     for (; ; ) {
       const done2 = db.transaction(() => {
-        const ids = pick3.all({ cut: cut2, batch: l.batch }).map((r) => r.id);
+        const ids = pick4.all({ cut: cut2, batch: l.batch }).map((r) => r.id);
         if (ids.length === 0) return true;
         const json2 = JSON.stringify(ids);
         db.prepare(`DELETE FROM mail_receipts WHERE message_id IN (SELECT id FROM mail_messages WHERE thread_id IN (SELECT value FROM json_each(?)))`).run(json2);
@@ -118415,6 +118590,64 @@ var MailRecords = class {
     const rows3 = this.db.prepare(`SELECT * FROM mail_threads WHERE ${column} = ? ORDER BY created_at, id`).all(address);
     return rows3.map(toThread).filter((t) => !states || states.includes(t.state));
   }
+  /** The threads that are not done in which a party is still a participant, whatever its role: what a handoff moves of it (§4.1) */
+  openThreadsWith(address) {
+    const rows3 = this.db.prepare(
+      `SELECT t.* FROM mail_threads t JOIN mail_participants p ON p.thread_id = t.id AND p.address = ? AND p.left_at IS NULL
+          WHERE t.state <> 'done' ORDER BY t.created_at, t.id`
+    ).all(address);
+    return rows3.map(toThread);
+  }
+  /** The done threads in which `address` has mail it has neither read nor handled: what a handoff's move of its receipts looks at too (§4.1) */
+  doneThreadsWithUnread(address) {
+    const rows3 = this.db.prepare(
+      `SELECT t.* FROM mail_threads t WHERE t.state = 'done' AND EXISTS (
+            SELECT 1 FROM mail_receipts r JOIN mail_messages m ON m.id = r.message_id
+             WHERE m.thread_id = t.id AND r.recipient = ? AND r.read_at IS NULL AND r.handled_at IS NULL)
+          ORDER BY t.created_at, t.id`
+    ).all(address);
+    return rows3.map(toThread);
+  }
+  /**
+   * A handoff's move of what `from` has not read in a thread to `to` (§4.1): each receipt neither read nor handled is `to`'s, and
+   * waits to be delivered to it, delivered to `from` or not (what went into the original's conversation never reached its
+   * successor). A hold about the original itself (its delivery `uncertain` or `failed`, its `loop`, `budget` or `policy`, each
+   * judged for the original's wakes) is let go, for the delivery to judge again for the successor; one the person settled
+   * (`released`, `dismissed`) stays. Not moved, and handled for `from` instead: a receipt for a message `to` sent itself (nobody
+   * is sent their own words), and one for a message `to` already has a receipt for (it keeps its own). So nothing of the
+   * original's stays waiting (`handleUnread`), and a restored original is not woken for mail of a thread it has left. Returns how many moved
+   */
+  moveUnreadReceipts(threadId, from, to, now) {
+    const moved = this.db.prepare(
+      `UPDATE OR IGNORE mail_receipts
+            SET recipient = @to, delivered_at = NULL, attempt_at = NULL, attempts = 0, last_error = NULL,
+                held = CASE WHEN held IN ('uncertain', 'failed', 'loop', 'budget', 'policy') THEN NULL ELSE held END
+          WHERE recipient = @from AND read_at IS NULL AND handled_at IS NULL
+            AND message_id IN (SELECT id FROM mail_messages WHERE thread_id = @threadId AND sender <> @to)`
+    ).run({ threadId, from, to }).changes;
+    this.handleUnread(threadId, from, now);
+    return moved;
+  }
+  /** How many of `from`'s unread receipts in the thread `moveUnreadReceipts` would give `to`: not those of `to`'s own messages, nor those it has already */
+  movableUnread(threadId, from, to) {
+    const row = this.db.prepare(
+      `SELECT COUNT(*) AS n FROM mail_receipts r JOIN mail_messages m ON m.id = r.message_id
+          WHERE r.recipient = @from AND r.read_at IS NULL AND r.handled_at IS NULL AND m.thread_id = @threadId AND m.sender <> @to
+            AND NOT EXISTS (SELECT 1 FROM mail_receipts o WHERE o.message_id = r.message_id AND o.recipient = @to)`
+    ).get({ threadId, from, to });
+    return row?.n ?? 0;
+  }
+  /**
+   * `from`'s receipts in a thread that are neither read nor handled are handled: a handoff's original left the thread, or is about to
+   * when it goes (§4.1), and nothing of it waits there, so a restored original is not woken for a thread it no longer holds
+   */
+  handleUnread(threadId, from, now) {
+    this.db.prepare(
+      `UPDATE mail_receipts SET handled_at = @now
+          WHERE recipient = @from AND read_at IS NULL AND handled_at IS NULL
+            AND message_id IN (SELECT id FROM mail_messages WHERE thread_id = @threadId)`
+    ).run({ threadId, from, now });
+  }
   /**
    * What a party's mailbox holds (§9.3, §10.1): the threads it is in that are not done, and the done ones it has mail unread
    * in, with how much it has not read. Unread first, then the latest change. A mail held back for the person (a loop, a spent
@@ -118945,6 +119178,19 @@ function scriptMessageFrame(credential, text2) {
 ` + quoted2(text2);
 }
 
+// packages/agent-host/src/sessions/tool-fit.ts
+function sessionDemands(m, files, preset = m.permissionPreset) {
+  return {
+    permissionPreset: preset,
+    ...files.projectTrusted === void 0 ? {} : { projectTrusted: files.projectTrusted },
+    ...files.noSettingFiles ? { noSettingFiles: true } : {},
+    roleText: m.kind === "orchestrator" || !!m.roleAppend
+  };
+}
+function unfitError(reason) {
+  return rpcError(reason, "refused", { retryable: false, data: { reason: "tool_unfit" } });
+}
+
 // packages/agent-host/src/sessions/session-start.ts
 import { randomUUID as randomUUID19 } from "node:crypto";
 
@@ -119367,7 +119613,8 @@ var SessionStarts = class {
         ...params.lsp !== void 0 ? { lsp: params.lsp } : {}
       });
       const from = this.host.handleSink();
-      handle = await adapter.createSession(
+      handle = await startFit(
+        adapter,
         this.launchOptions(info, {
           tool: params.tool,
           cwd,
@@ -119535,6 +119782,7 @@ var SessionStarts = class {
       ...this.autoCompactFor(m, !!o.adopt),
       permissionPreset: o.permissionPreset,
       resumeExternalId: o.resumeExternalId,
+      runningCost: this.host.launches.runningCostFor(m.id, !!o.resumeExternalId),
       ...o.knownGoal ? { knownGoal: o.knownGoal } : {},
       // Which settings files reach this session (decision 3, #92, #152) — what the session is,
       // and the trust at this exact moment of launch. If this is a builder session, the
@@ -119678,7 +119926,8 @@ var SessionStarts = class {
     if (!adopt) m.agentVersion = this.host.versionHint?.(tool) ?? null;
     const kept = adopt ? this.host.launches.keptBackgroundTasks(sessionId) : null;
     try {
-      const creating = adapter.createSession(
+      const creating = startFit(
+        adapter,
         this.launchOptions(m, {
           tool,
           cwd,
@@ -119776,6 +120025,15 @@ var SessionStarts = class {
     }
   }
 };
+function startFit(adapter, opts, sink) {
+  const reason = launchRefusal(adapter.capabilities, adapter.descriptor.label, {
+    permissionPreset: opts.permissionPreset,
+    projectTrusted: opts.projectTrusted,
+    noSettingFiles: opts.noSettingFiles,
+    roleText: !!opts.systemPromptAppend
+  });
+  return reason ? Promise.reject(unfitError(reason)) : adapter.createSession(opts, sink);
+}
 
 // packages/agent-host/src/sessions/session-events.ts
 import { randomUUID as randomUUID20 } from "node:crypto";
@@ -120834,7 +121092,7 @@ ${adapterText}` : adapterText;
     if (!handle) throw rpcError("The session is not running");
     this.host.record.closeStream(sessionId);
     this.host.cardRests.turnAsked(sessionId);
-    handle.send(text2);
+    handle.send(text2, { compact: true });
   }
   /**
    * Turns a touched file into a path relative to the project (#185).
@@ -122628,6 +122886,11 @@ var InputReceipts = class {
 // packages/agent-host/src/adapters/local-process.ts
 import { EventEmitter as EventEmitter3 } from "node:events";
 import { PassThrough as PassThrough2 } from "node:stream";
+var HOST_WATCH = '{ g=; while read -r l; do case $l in +*) g="$g ${l#+}";; -*) n=; for p in $g; do [ "$p" = "${l#-}" ] || n="$n $p"; done; g=$n;; esac; done; for p in $g $(' + watchTreeGroups() + '); do kill -9 -"$p" 2>/dev/null; done; kill -9 0 2>/dev/null; } <&3 >/dev/null 2>&1 & exec "$@" 3<&-';
+function watchTreeGroups() {
+  return `ps -A -o pid= -o ppid= -o pgid= 2>/dev/null | awk -v r="$$" '{ p[$1] = $2; g[$1] = $3 } END { d[r] = 1; do { c = 0; for (k in p) if (!(k in d) && (p[k] in d)) { d[k] = 1; c = 1 } } while (c); for (k in d) if (g[k] != g[r] && g[k] > 1) print g[k] }'`;
+}
+var GROUP_CHECK_MS = 2e3;
 var STDERR_TAIL2 = 8 * 1024;
 var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   constructor(child, spawnedAt, os2) {
@@ -122641,6 +122904,8 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
     child.stderr?.on("data", (d2) => this.tail.push(d2));
     child.stdin?.on("error", () => {
     });
+    child.stdio[3]?.on("error", () => {
+    });
     child.on("error", (e) => {
       this.emit("error", e);
       if (child.pid === void 0) this.onExit();
@@ -122655,12 +122920,18 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   stderr;
   killed = false;
   tail = new Tail(STDERR_TAIL2);
+  /** The helper groups its tree had when last asked (`noteTree`) and that still have a member, swept once it has gone */
+  groups = /* @__PURE__ */ new Set();
+  /** While groups are held: they are read again, so one that has emptied is dropped before its number is reused */
+  groupClock = null;
+  noting = null;
   /** Reported once the output has all arrived, so a reader never sees the exit before the last line */
   exitReport = new ExitAfterDrain(() => this.emit("exit", this.child.exitCode, this.child.signalCode));
   static spawn(spec, os2) {
     let started;
     try {
-      started = spawnGrouped(spec.command, spec.args, { cwd: spec.cwd, env: spec.env, stdio: ["pipe", "pipe", "pipe"] }, os2?.platform);
+      const watched = !!spec.endsWithHost && hasProcessGroups(os2?.platform);
+      started = watched ? spawnGrouped("/bin/sh", ["-c", HOST_WATCH, "centralu-agent", spec.command, ...spec.args], { cwd: spec.cwd, env: spec.env, stdio: ["pipe", "pipe", "pipe", "pipe"] }, os2?.platform) : spawnGrouped(spec.command, spec.args, { cwd: spec.cwd, env: spec.env, stdio: ["pipe", "pipe", "pipe"] }, os2?.platform);
     } catch (err) {
       started = { child: notStarted(err), spawnedAt: Date.now() };
     }
@@ -122680,6 +122951,38 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   get signalCode() {
     return this.child.signalCode;
   }
+  noteTree() {
+    const pid = this.child.pid;
+    if (pid === void 0 || this.ended || !this.grouped) return Promise.resolve();
+    this.noting ??= noteGroups(pid, this.groups, this.os?.platform).then((groups) => {
+      if (this.ended) return;
+      this.tellWatch(this.groups, groups);
+      this.groups = groups;
+      if (groups.size === 0) this.stopGroupClock();
+      else if (!this.groupClock) {
+        this.groupClock = setInterval(() => void this.noteTree(), GROUP_CHECK_MS);
+        this.groupClock.unref?.();
+      }
+    }).finally(() => {
+      this.noting = null;
+    });
+    return this.noting;
+  }
+  /**
+   * The host watch (`HOST_WATCH`) is told each helper group as it is noted and as it is dropped, so a host killed outright
+   * still ends them: they are in groups of their own, which the watch's own `kill -9 0` does not reach (#1562 Mac re-check:
+   * Cursor's `zsh -c` and its `sleep 300` outlived a SIGKILLed host)
+   */
+  tellWatch(before, after) {
+    const watch3 = this.child.stdio[3];
+    if (!watch3 || !("write" in watch3) || watch3.destroyed) return;
+    const lines = [...[...after].filter((g5) => !before.has(g5)).map((g5) => `+${g5}`), ...[...before].filter((g5) => !after.has(g5)).map((g5) => `-${g5}`)];
+    if (lines.length) watch3.write(lines.join("\n") + "\n");
+  }
+  stopGroupClock() {
+    if (this.groupClock) clearInterval(this.groupClock);
+    this.groupClock = null;
+  }
   /** The end of what the CLI wrote to stderr */
   stderrTail() {
     return this.tail.text;
@@ -122710,6 +123013,8 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
     return true;
   }
   onExit() {
+    const watch3 = this.child.stdio[3];
+    if (watch3 && "destroy" in watch3) watch3.destroy();
     this.sweep();
     if (!this.stdout.readableEnded) this.stdout.once("end", () => this.exitReport.drained());
     this.exitReport.exited(this.stdout.readableEnded);
@@ -122718,6 +123023,8 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   sweep() {
     const pid = this.child.pid;
     if (pid === void 0) return;
+    this.stopGroupClock();
+    for (const g5 of this.groups) stopGroup(g5, KILL_GRACE_MS);
     const root3 = { pid, spawnedAt: this.spawnedAt, exitedAt: Date.now() };
     void sweepExited(root3, this.os?.platform, this.os?.listProcesses ? { listProcesses: this.os.listProcesses, taskkill: this.os.taskkill } : void 0).then((ended) => {
       if (ended.length > 0) console.error(`[agent] ended ${ended.length} process(es) pid ${pid} left running: ${ended.join(", ")}`);
@@ -122728,7 +123035,8 @@ function notStarted(err) {
   const stand = new EventEmitter3();
   const stdout = new PassThrough2();
   stdout.end();
-  Object.assign(stand, { stdin: new PassThrough2(), stdout, stderr: null, pid: void 0, exitCode: null, signalCode: null, kill: () => false });
+  const stdin = new PassThrough2();
+  Object.assign(stand, { stdin, stdout, stderr: null, stdio: [stdin, stdout, null], pid: void 0, exitCode: null, signalCode: null, kill: () => false });
   process.nextTick(() => stand.emit("error", err));
   return stand;
 }
@@ -123167,13 +123475,13 @@ function systemEvents(m, sessionId) {
 function informationalEvents(m, sessionId) {
   const out = [];
   const text2 = str(m.content).trim();
-  const level = str(m.level);
-  if (text2 && level !== "info") {
+  const level2 = str(m.level);
+  if (text2 && level2 !== "info") {
     const hook = /\bblocked by hook\b/.test(text2);
     out.push({
       type: "notice",
       sessionId,
-      level: level === "warning" ? "warning" : "info",
+      level: level2 === "warning" ? "warning" : "info",
       text: text2,
       from: "Claude Code",
       label: hook ? "hook" : "notice",
@@ -123188,8 +123496,8 @@ function notificationEvents(m, sessionId) {
   if (!text2 || str(m.key) === "error-compacting-conversation") return out;
   const color = str(m.color);
   const priority = str(m.priority);
-  const level = color === "error" ? "error" : color === "warning" || priority === "high" || priority === "immediate" ? "warning" : "info";
-  out.push({ type: "notice", sessionId, level, text: text2, from: "Claude Code", label: "notice" });
+  const level2 = color === "error" ? "error" : color === "warning" || priority === "high" || priority === "immediate" ? "warning" : "info";
+  out.push({ type: "notice", sessionId, level: level2, text: text2, from: "Claude Code", label: "notice" });
   return out;
 }
 function apiRetryEvents(m, sessionId) {
@@ -123898,8 +124206,8 @@ import { resolve as resolve18 } from "node:path";
 // packages/agent-host/src/adapters/always-allow.ts
 var AlwaysAllowRules = class {
   matchers = /* @__PURE__ */ new Set();
-  add(matcher) {
-    this.matchers.add(matcher);
+  add(matcher2) {
+    this.matchers.add(matcher2);
   }
   addAll(matchers) {
     for (const m of matchers) this.matchers.add(m);
@@ -124002,13 +124310,13 @@ var ClaudeCards = class {
       this.releaseOnCancel(requestId, options?.signal);
     });
   }
-  respondApproval(requestId, decision, scope, matcher) {
+  respondApproval(requestId, decision, scope, matcher2) {
     const p = this.pending.take(requestId);
     if (!p) return false;
     if (decision === "deny") {
       p.resolve({ behavior: "deny", message: "Denied by user" });
     } else {
-      if (decision === "always" && matcher) this.alwaysAllow.add(matcher);
+      if (decision === "always" && matcher2) this.alwaysAllow.add(matcher2);
       p.resolve({ behavior: "allow", updatedInput: p.input });
     }
     this.host.emit({ type: "approval_resolved", sessionId: this.host.sessionId, requestId, decision });
@@ -125315,8 +125623,8 @@ var ClaudeSession = class {
     this.notify = null;
     if (starting) this.emit({ type: "state_change", sessionId: this.sessionId, state: "working" });
   }
-  respondApproval(requestId, decision, scope, matcher) {
-    return this.cards.respondApproval(requestId, decision, scope, matcher);
+  respondApproval(requestId, decision, scope, matcher2) {
+    return this.cards.respondApproval(requestId, decision, scope, matcher2);
   }
   answerQuestion(requestId, answers) {
     return this.cards.answerQuestion(requestId, answers);
@@ -127283,7 +127591,7 @@ function reconcileOpenedThread(sessionId, answered, recorded) {
 // packages/agent-host/src/adapters/codex/sandbox.ts
 import { realpath as realpath8 } from "node:fs/promises";
 import { resolve as resolve19 } from "node:path";
-async function sandboxConfig(cwd, preset, readConfig) {
+async function sandboxConfig(cwd, preset, readConfig2) {
   const roots = [];
   try {
     const stdout = await runGit(cwd, ["rev-parse", "--path-format=absolute", "--git-dir", "--git-common-dir"], { timeout: 5e3 });
@@ -127296,7 +127604,7 @@ async function sandboxConfig(cwd, preset, readConfig) {
   } catch {
   }
   if (roots.length) {
-    const config2 = await readConfig();
+    const config2 = await readConfig2();
     const workspace = config2.sandbox_workspace_write;
     if (Array.isArray(workspace?.writable_roots)) {
       roots.push(...workspace.writable_roots.filter((p) => typeof p === "string"));
@@ -127476,7 +127784,7 @@ var CodexRequests = class {
   applyRules(matchers) {
     this.alwaysAllow.addAll(matchers);
   }
-  respondApproval(requestId, decision, _scope, matcher) {
+  respondApproval(requestId, decision, _scope, matcher2) {
     const open6 = this.approvals.take(requestId);
     if (open6 === void 0) return false;
     const serverId = open6.serverId;
@@ -127489,7 +127797,7 @@ var CodexRequests = class {
       this.host.emit({ type: "approval_resolved", sessionId: this.host.sessionId, requestId, decision });
       return true;
     }
-    if (decision === "always" && matcher) this.alwaysAllow.add(matcher);
+    if (decision === "always" && matcher2) this.alwaysAllow.add(matcher2);
     this.host.respond(serverId, { decision: toCodexDecision(decision) });
     this.host.emit({ type: "approval_resolved", sessionId: this.host.sessionId, requestId, decision });
     return true;
@@ -127519,12 +127827,12 @@ function requestOrigin(r) {
   };
 }
 
-// packages/agent-host/src/adapters/codex/bridge-path.ts
+// packages/agent-host/src/adapters/bridge-path.ts
 import { existsSync as existsSync16 } from "node:fs";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function bridgePath() {
   const candidates = [
-    new URL("./orchestrator-bridge.mjs", import.meta.url),
+    new URL("./codex/orchestrator-bridge.mjs", import.meta.url),
     // the source tree
     new URL("./codex-orchestrator-bridge.mjs", import.meta.url)
     // the bundled build-output layout
@@ -128290,7 +128598,7 @@ var CodexSession = class {
   turns = new CodexTurns();
   /**
    * Messages that arrived while a compact/review turn was running (measured while dogfooding,
-   * 2026-09-02, MGH session).
+   * 2026-09-02, a dogfooding session).
    *
    * In codex 0.147.0, turn/start **answers success while dropping the input** while a compact
    * turn is running — the rollout kept only the settings application (thread_settings_applied)
@@ -128658,8 +128966,8 @@ var CodexSession = class {
   outputSchemaParam() {
     return this.opts.outputSchema ? { outputSchema: this.opts.outputSchema } : {};
   }
-  respondApproval(requestId, decision, _scope, matcher) {
-    return this.serverRequests.respondApproval(requestId, decision, _scope, matcher);
+  respondApproval(requestId, decision, _scope, matcher2) {
+    return this.serverRequests.respondApproval(requestId, decision, _scope, matcher2);
   }
   applyRules(matchers) {
     this.serverRequests.applyRules(matchers);
@@ -129258,9 +129566,1776 @@ var CodexAdapter = class {
   }
 };
 
+// packages/agent-host/src/adapters/cursor-agent/index.ts
+import { execFile as execFile9 } from "node:child_process";
+import { promisify as promisify8 } from "node:util";
+
+// packages/agent-host/src/adapters/frames/recorder.ts
+import { appendFileSync as appendFileSync2, existsSync as existsSync18, mkdirSync as mkdirSync19 } from "node:fs";
+import { join as join44 } from "node:path";
+var processes = /* @__PURE__ */ new Map();
+function frameRecorder(sessionId, env = process.env) {
+  const dir = env.CC_RECORD_FRAMES;
+  if (!dir) return void 0;
+  mkdirSync19(dir, { recursive: true });
+  let n = (processes.get(sessionId) ?? 0) + 1;
+  while (existsSync18(join44(dir, `${sessionId}.${n}.jsonl`))) n++;
+  processes.set(sessionId, n);
+  const file2 = join44(dir, `${sessionId}.${n}.jsonl`);
+  const start2 = Date.now();
+  const write = (entry) => {
+    try {
+      appendFileSync2(file2, `${JSON.stringify({ t: Date.now() - start2, ...entry })}
+`);
+    } catch (e) {
+      console.error("[acp] recorder could not write", file2, errorMessage(e));
+    }
+  };
+  return {
+    frame: (direction, line) => write({ dir: direction, line }),
+    exit: (code2, signal) => write({ dir: "exit", msg: { code: code2, sig: signal } })
+  };
+}
+
+// packages/agent-host/src/adapters/acp/session.ts
+import { isAbsolute as isAbsolute10, join as join45 } from "node:path";
+
+// packages/agent-host/src/adapters/acp/connection.ts
+import { randomBytes as randomBytes8 } from "node:crypto";
+var RpcError = class extends Error {
+  constructor(code2, message, data) {
+    super(message);
+    this.code = code2;
+    this.data = data;
+  }
+  code;
+  data;
+};
+var METHOD_NOT_FOUND2 = -32601;
+var AUTH_REQUIRED = -32e3;
+var FRAME = external_exports.looseObject({
+  id: external_exports.union([external_exports.string(), external_exports.number(), external_exports.null()]).optional(),
+  method: external_exports.string().optional(),
+  params: external_exports.unknown().optional(),
+  result: external_exports.unknown().optional(),
+  error: external_exports.looseObject({ code: external_exports.number(), message: external_exports.string(), data: external_exports.unknown().optional() }).optional()
+});
+var NO_TIMEOUT_MS = 2 ** 31 - 1;
+var AcpConnection = class {
+  constructor(proc, handlers, label) {
+    this.proc = proc;
+    this.handlers = handlers;
+    this.label = label;
+    proc.on("error", (err) => this.finish(null, new Error(`${label} failed to start: ${err.message}`)));
+    proc.stdin.on("error", () => {
+    });
+    const lines = lineSplitter((line) => this.onLine(line));
+    proc.stdout.on("data", (chunk) => lines.push(chunk));
+    proc.stderr?.on("data", (d2) => {
+      const s = String(d2).trim();
+      if (s) console.error(`[${label}]`, s.slice(0, 500));
+    });
+    proc.on("exit", (code2) => this.finish(code2, null));
+  }
+  proc;
+  handlers;
+  label;
+  /**
+   * String ids with a per-connection prefix: a host that adopts a process the previous host was talking to can
+   * receive answers to that host's requests (§4.4), and plain counters on both would have collided.
+   */
+  idPrefix = `c${randomBytes8(3).toString("hex")}-`;
+  nextId = 1;
+  pending = new PendingRequests();
+  closed = false;
+  finished = false;
+  finish(code2, startError) {
+    if (this.finished) return;
+    this.finished = true;
+    const expected = this.closed && !startError;
+    this.closed = true;
+    this.pending.rejectAll(startError ?? new Error(expected ? `request cancelled while closing ${this.label}` : `${this.label} exited`));
+    this.handlers.onExit(code2, expected);
+  }
+  onLine(line) {
+    if (!line.trim()) return;
+    this.handlers.onFrame?.("in", line);
+    let raw;
+    try {
+      raw = JSON.parse(line);
+    } catch {
+      console.error(`[${this.label}] non-JSON output:`, line.slice(0, 200));
+      return;
+    }
+    const parsed = FRAME.safeParse(raw);
+    if (!parsed.success) {
+      console.error(`[${this.label}] a frame that is not a JSON-RPC message:`, line.slice(0, 200));
+      return;
+    }
+    const msg = parsed.data;
+    const id3 = msg.id ?? void 0;
+    if (id3 !== void 0 && msg.method === void 0) {
+      const error51 = msg.error ? new RpcError(msg.error.code, msg.error.message, msg.error.data) : null;
+      const settled = error51 ? this.pending.reject(id3, error51) : this.pending.resolve(id3, msg.result);
+      if (!settled) this.handlers.onStrayResponse?.(id3, msg.result, error51);
+      return;
+    }
+    if (id3 !== void 0 && msg.method !== void 0) {
+      void this.answer(id3, msg.method, msg.params);
+      return;
+    }
+    if (msg.method !== void 0) this.handlers.onNotification(msg.method, msg.params);
+  }
+  async answer(id3, method, params) {
+    try {
+      const result = await this.handlers.onRequest(id3, method, params);
+      this.write({ jsonrpc: "2.0", id: id3, result: result ?? null });
+    } catch (err) {
+      const e = err instanceof RpcError ? err : new RpcError(-32603, errorMessage(err));
+      this.write({ jsonrpc: "2.0", id: id3, error: { code: e.code, message: e.message, ...e.data === void 0 ? {} : { data: e.data } } });
+    }
+  }
+  /** The answer, unread: each caller parses it with the schema of what it asked (`wire.ts`) */
+  request(method, params, timeoutMs = 12e4) {
+    if (this.closed) return Promise.reject(new Error(`${this.label} has already exited`));
+    const id3 = `${this.idPrefix}${this.nextId++}`;
+    const answer = this.pending.wait(id3, timeoutMs, `No response for ${method}`);
+    this.write({ jsonrpc: "2.0", id: id3, method, params });
+    return answer;
+  }
+  notify(method, params) {
+    this.write({ jsonrpc: "2.0", method, params });
+  }
+  get isClosed() {
+    return this.closed;
+  }
+  stderrTail() {
+    return this.proc.stderrTail?.() ?? "";
+  }
+  write(obj) {
+    if (this.closed) return;
+    const line = JSON.stringify(obj);
+    this.handlers.onFrame?.("out", line);
+    this.proc.stdin.write(line + "\n");
+  }
+  /** stdin EOF first, so the agent can end its own children; the whole tree is killed after `graceMs` */
+  async dispose(graceMs = 2e3) {
+    if (this.closed) return;
+    this.closed = true;
+    this.proc.stdin.end();
+    const exited = this.finished || await waitForExit(this.proc, graceMs);
+    if (!exited) this.proc.kill("SIGKILL");
+  }
+  /** Lets go of the process without closing it (a host swap under the keeper): no EOF, no signal */
+  async detach() {
+    if (this.closed) return;
+    await this.proc.detach?.();
+    this.closed = true;
+    this.finished = true;
+    this.pending.rejectAll(new Error(`request abandoned: this host let go of ${this.label}`));
+  }
+};
+
+// packages/agent-host/src/adapters/acp/known-updates.ts
+var KNOWN_UPDATES = /* @__PURE__ */ new Set([
+  "agent_message_chunk",
+  "agent_thought_chunk",
+  "user_message_chunk",
+  "tool_call",
+  "tool_call_update",
+  "plan",
+  "available_commands_update",
+  "current_mode_update",
+  "config_option_update",
+  "session_info_update",
+  "usage_update",
+  "compaction_update",
+  "compaction_summary_chunk",
+  "notice",
+  "session/update",
+  "session/request_permission"
+]);
+
+// packages/agent-host/src/adapters/acp/wire.ts
+var nullish3 = (t) => t.nullish().transform((v) => v ?? void 0);
+var InitializeResult = external_exports.looseObject({
+  protocolVersion: external_exports.number(),
+  agentCapabilities: nullish3(
+    external_exports.looseObject({
+      loadSession: nullish3(external_exports.boolean()),
+      promptCapabilities: nullish3(external_exports.looseObject({ image: nullish3(external_exports.boolean()) })),
+      sessionCapabilities: nullish3(
+        external_exports.looseObject({ resume: external_exports.unknown().optional(), list: external_exports.unknown().optional(), close: external_exports.unknown().optional() })
+      )
+    })
+  ),
+  agentInfo: nullish3(external_exports.looseObject({ name: nullish3(external_exports.string()), version: nullish3(external_exports.string()) }))
+});
+var SelectOption = external_exports.looseObject({ value: external_exports.string(), name: nullish3(external_exports.string()) });
+var ConfigOption = external_exports.looseObject({
+  id: external_exports.string(),
+  category: nullish3(external_exports.string()),
+  type: nullish3(external_exports.string()),
+  currentValue: external_exports.unknown().optional(),
+  options: nullish3(external_exports.array(external_exports.union([SelectOption, external_exports.looseObject({ options: external_exports.array(SelectOption) })])))
+});
+var OpenedSession = external_exports.looseObject({
+  sessionId: nullish3(external_exports.string()),
+  configOptions: nullish3(external_exports.array(ConfigOption))
+});
+var StopReason = external_exports.enum(["end_turn", "max_tokens", "max_turn_requests", "refusal", "cancelled"]);
+var PromptResult = external_exports.looseObject({
+  stopReason: external_exports.union([StopReason, external_exports.string()]),
+  usage: nullish3(
+    external_exports.looseObject({
+      inputTokens: nullish3(external_exports.number()),
+      outputTokens: nullish3(external_exports.number()),
+      cachedReadTokens: nullish3(external_exports.number()),
+      cachedWriteTokens: nullish3(external_exports.number()),
+      thoughtTokens: nullish3(external_exports.number())
+    })
+  )
+});
+var ContentBlock = external_exports.looseObject({
+  type: external_exports.string(),
+  text: nullish3(external_exports.string()),
+  data: nullish3(external_exports.string()),
+  mimeType: nullish3(external_exports.string())
+});
+var ToolCallContent = external_exports.looseObject({
+  type: external_exports.string(),
+  content: nullish3(ContentBlock),
+  path: nullish3(external_exports.string()),
+  oldText: nullish3(external_exports.string()),
+  newText: nullish3(external_exports.string())
+});
+var CallStatus = external_exports.enum(["pending", "in_progress", "completed", "failed"]);
+var ToolCallFields = external_exports.looseObject({
+  toolCallId: external_exports.string(),
+  title: nullish3(external_exports.string()),
+  kind: nullish3(external_exports.string()),
+  status: nullish3(external_exports.union([CallStatus, external_exports.string()])),
+  rawInput: external_exports.unknown().optional(),
+  rawOutput: external_exports.unknown().optional(),
+  content: nullish3(external_exports.array(ToolCallContent)),
+  locations: nullish3(external_exports.array(external_exports.looseObject({ path: external_exports.string() })))
+});
+var Chunk = external_exports.looseObject({ content: ContentBlock, messageId: nullish3(external_exports.string()) });
+var SessionUpdate = external_exports.discriminatedUnion("sessionUpdate", [
+  Chunk.extend({ sessionUpdate: external_exports.literal("agent_message_chunk") }),
+  Chunk.extend({ sessionUpdate: external_exports.literal("agent_thought_chunk") }),
+  Chunk.extend({ sessionUpdate: external_exports.literal("user_message_chunk") }),
+  ToolCallFields.extend({ sessionUpdate: external_exports.literal("tool_call") }),
+  ToolCallFields.extend({ sessionUpdate: external_exports.literal("tool_call_update") }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("plan"),
+    entries: external_exports.array(external_exports.looseObject({ content: external_exports.string(), status: external_exports.string(), priority: nullish3(external_exports.string()) }))
+  }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("available_commands_update"),
+    availableCommands: external_exports.array(
+      external_exports.looseObject({ name: external_exports.string(), description: nullish3(external_exports.string()), input: nullish3(external_exports.looseObject({ hint: nullish3(external_exports.string()) })) })
+    )
+  }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("session_info_update"), title: nullish3(external_exports.string()) }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("usage_update"),
+    used: external_exports.number(),
+    size: external_exports.number(),
+    cost: external_exports.looseObject({ amount: external_exports.number(), currency: external_exports.string() }).nullish()
+  }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("current_mode_update"), currentModeId: external_exports.string() }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("config_option_update"), configOptions: external_exports.array(ConfigOption) }),
+  external_exports.looseObject({
+    sessionUpdate: external_exports.literal("compaction_update"),
+    compactionId: external_exports.string(),
+    status: external_exports.string(),
+    summary: nullish3(external_exports.array(ContentBlock)),
+    error: nullish3(external_exports.string())
+  }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("compaction_summary_chunk"), compactionId: external_exports.string(), content: ContentBlock }),
+  external_exports.looseObject({ sessionUpdate: external_exports.literal("notice"), severity: external_exports.string(), title: external_exports.string(), description: nullish3(external_exports.string()) })
+]);
+var SessionNotification = external_exports.looseObject({ sessionId: external_exports.string(), update: external_exports.looseObject({ sessionUpdate: external_exports.string() }) });
+function readUpdate(params) {
+  const n = SessionNotification.safeParse(params);
+  if (!n.success) return null;
+  const u = SessionUpdate.safeParse(n.data.update);
+  return u.success ? { sessionId: n.data.sessionId, update: u.data } : { sessionId: n.data.sessionId, other: n.data.update.sessionUpdate };
+}
+var PermissionOptionKind = external_exports.enum(["allow_once", "allow_always", "reject_once", "reject_always"]);
+var PermissionOption = external_exports.looseObject({ optionId: external_exports.string(), kind: external_exports.union([PermissionOptionKind, external_exports.string()]), name: nullish3(external_exports.string()) });
+var RequestPermission = external_exports.looseObject({
+  sessionId: external_exports.string(),
+  toolCall: ToolCallFields,
+  options: external_exports.array(PermissionOption)
+});
+function blockText(block) {
+  return block?.type === "text" ? block.text ?? "" : "";
+}
+
+// packages/agent-host/src/adapters/acp/normalize.ts
+var KIND_TOOL = {
+  execute: "Bash",
+  edit: "Edit",
+  delete: "Edit",
+  move: "Edit",
+  read: "Read",
+  search: "Grep",
+  fetch: "WebFetch",
+  think: "Think"
+};
+var OPEN_TAG = "<think>";
+var CLOSE_TAG = "</think>";
+function heldTail(text2) {
+  for (let n = Math.min(CLOSE_TAG.length - 1, text2.length); n > 0; n--) if (CLOSE_TAG.startsWith(text2.slice(text2.length - n))) return n;
+  return 0;
+}
+var AcpNormalizer = class {
+  constructor(sessionId, label = "The tool") {
+    this.sessionId = sessionId;
+    this.label = label;
+  }
+  sessionId;
+  label;
+  /** Calls announced as `tool_call` and not yet ended, by `toolCallId` */
+  open = /* @__PURE__ */ new Map();
+  /** Every field said of each call this turn, merged: a permission request may carry less than the call did (measured, Cursor) */
+  known = /* @__PURE__ */ new Map();
+  compactions = /* @__PURE__ */ new Map();
+  segment = 0;
+  lastChunk = "other";
+  /** The events one update says. `available_commands_update` and the like are read by the session, not here */
+  update(u) {
+    const sessionId = this.sessionId;
+    const held3 = u.sessionUpdate === "agent_message_chunk" ? [] : this.releaseHeld();
+    return [...held3, ...this.translate(u, sessionId)];
+  }
+  translate(u, sessionId) {
+    switch (u.sessionUpdate) {
+      case "agent_message_chunk": {
+        const text2 = blockText(u.content);
+        if (u.content.type === "image" && u.content.data && u.content.mimeType) {
+          return [{ type: "message_image", sessionId, mime: u.content.mimeType, data: u.content.data }];
+        }
+        if (this.lastChunk !== "message") this.segment++;
+        this.lastChunk = "message";
+        return this.messageText(u.messageId ?? `acp-${this.segment}`, text2);
+      }
+      case "agent_thought_chunk": {
+        this.lastChunk = "thought";
+        const text2 = blockText(u.content);
+        return text2 ? [{ type: "reasoning_delta", sessionId, text: text2 }] : [];
+      }
+      case "tool_call":
+      case "tool_call_update":
+        this.lastChunk = "other";
+        return this.toolCall(u);
+      case "plan":
+        return [planUpdate(sessionId, u.entries, "content")];
+      case "session_info_update":
+        return u.title ? [{ type: "session_title", sessionId, title: u.title, auto: true }] : [];
+      case "compaction_summary_chunk":
+        this.compactions.set(u.compactionId, (this.compactions.get(u.compactionId) ?? "") + blockText(u.content));
+        return [];
+      case "compaction_update":
+        return this.compaction(u);
+      case "notice":
+        return [{ type: "notice", sessionId, level: u.severity === "error" ? "error" : u.severity === "warning" ? "warning" : "info", text: [u.title, u.description].filter(Boolean).join("\n") }];
+      default:
+        return [];
+    }
+  }
+  /**
+   * A message's text, without the `</think>` a model leaves where it put its reasoning in the reply (OpenCode's free
+   * model, measured in its own store: a step's text is the reasoning, then `</think>`, then the reply, with no `<think>`
+   * before it). The first such tag of a message is dropped with the space after it; a tag split over two chunks is held
+   * until the next one says whether it is one. The reasoning before it stays reply text: it was shown as it came.
+   */
+  messageText(messageId, text2) {
+    const before = this.lastMessage === messageId ? [] : this.releaseHeld();
+    const m = this.messages.get(messageId) ?? { held: "", settled: false, trim: false };
+    this.messages.set(messageId, m);
+    let out = m.held + text2;
+    m.held = "";
+    if (m.trim) {
+      out = out.replace(/^\s+/, "");
+      m.trim = out === "";
+    }
+    if (!m.settled) {
+      const open6 = out.indexOf(OPEN_TAG);
+      const close = out.indexOf(CLOSE_TAG);
+      if (close !== -1 && (open6 === -1 || open6 > close)) {
+        const after = out.slice(close + CLOSE_TAG.length).replace(/^\s+/, "");
+        m.trim = after === "";
+        out = out.slice(0, close) + after;
+        m.settled = true;
+      } else if (open6 !== -1) m.settled = true;
+      else {
+        const keep = heldTail(out);
+        m.held = out.slice(out.length - keep);
+        out = out.slice(0, out.length - keep);
+      }
+    }
+    this.lastMessage = messageId;
+    return [...before, ...out ? [{ type: "message_delta", sessionId: this.sessionId, role: "assistant", text: out, messageId }] : []];
+  }
+  /** What a message held back, once something else comes: it was no tag */
+  releaseHeld() {
+    const m = this.lastMessage === null ? void 0 : this.messages.get(this.lastMessage);
+    if (!m?.held || this.lastMessage === null) return [];
+    const text2 = m.held;
+    m.held = "";
+    return [{ type: "message_delta", sessionId: this.sessionId, role: "assistant", text: text2, messageId: this.lastMessage }];
+  }
+  messages = /* @__PURE__ */ new Map();
+  lastMessage = null;
+  /** Calls the person (or a Stop) refused this turn: whatever the agent says of them after, they did not run as asked */
+  refused = /* @__PURE__ */ new Set();
+  /**
+   * What this turn has heard of a call, merged with `u`. `asked`: `u` is a permission request's, which may carry less than
+   * the call did (no input, measured on Cursor) and a looser kind: Cursor asks about a `delete` call as `kind: edit`
+   * (measured), so the call's own kind wins over the request's label
+   */
+  call(u, asked = false) {
+    const before = this.known.get(u.toolCallId);
+    const merged = { ...before, ...definedFields(u) };
+    return ToolCallFields.parse(asked && before?.kind ? { ...merged, kind: before.kind } : merged);
+  }
+  /** The call was answered no (a reject, or cancelled by a Stop): its end is said as not ok */
+  refuse(callId) {
+    this.refused.add(callId);
+  }
+  toolCall(u) {
+    const id3 = u.toolCallId;
+    const seen = this.call(u);
+    this.known.set(id3, seen);
+    const events2 = [];
+    let call2 = this.open.get(id3);
+    if (!call2) {
+      const ready = hasInput(seen.rawInput) || seen.status !== void 0 && seen.status !== "pending";
+      if (!ready) return [];
+      call2 = { output: "" };
+      this.open.set(id3, call2);
+      events2.push({ type: "tool_call", sessionId: this.sessionId, callId: id3, summary: summaryOf2(seen), ...seen.rawInput === void 0 ? {} : { input: seen.rawInput } });
+      if (seen.kind === "edit" || seen.kind === "delete" || seen.kind === "move") {
+        const paths = pathsOf2(seen);
+        if (paths.length) events2.push({ type: "files_touched", sessionId: this.sessionId, paths });
+      }
+    }
+    const output = outputOf(u);
+    if (output !== null && output.startsWith(call2.output) && output.length > call2.output.length && u.status !== "completed" && u.status !== "failed") {
+      events2.push({ type: "tool_output_delta", sessionId: this.sessionId, callId: id3, text: output.slice(call2.output.length) });
+      call2.output = output;
+    }
+    if (u.status === "completed" || u.status === "failed") {
+      this.open.delete(id3);
+      const refused2 = this.refused.delete(id3);
+      const ok = u.status === "completed" && !refused2 && rawOutputOk(seen.rawOutput);
+      const text2 = output ?? rawOutputText(seen.rawOutput) ?? call2.output;
+      events2.push(toolResultEvent(this.sessionId, id3, ok, text2 || (refused2 ? "Not run: the request was refused." : ""), `${this.label} did not return the output`));
+    }
+    return events2;
+  }
+  /** Calls still open when the turn ended: closed as failed, so no card spins forever (`why`: what ended them) */
+  endTurn(why = "the turn ended before this call finished") {
+    const events2 = [...this.releaseHeld(), ...[...this.open.keys()].map((id3) => toolResultEvent(this.sessionId, id3, false, "", why))];
+    this.open.clear();
+    this.known.clear();
+    this.refused.clear();
+    this.messages.clear();
+    this.lastChunk = "other";
+    return events2;
+  }
+  compaction(u) {
+    if (u.status === "in_progress") return [{ type: "activity", sessionId: this.sessionId, activity: "compacting" }];
+    const summary = u.summary?.map(blockText).join("") || this.compactions.get(u.compactionId) || "";
+    this.compactions.delete(u.compactionId);
+    const done2 = { type: "activity", sessionId: this.sessionId, activity: null };
+    if (u.status === "completed") return [done2, { type: "compaction", sessionId: this.sessionId, failed: false, ...summary ? { reason: firstLine2(summary, 300) } : {} }];
+    if (u.status === "failed") return [done2, { type: "compaction", sessionId: this.sessionId, failed: true, ...u.error ? { reason: u.error } : {} }];
+    return [done2];
+  }
+};
+function tokenUsage(result) {
+  const u = result.usage;
+  if (!u || u.inputTokens === void 0 && u.outputTokens === void 0) return null;
+  return {
+    inputTokens: u.inputTokens ?? 0,
+    outputTokens: (u.outputTokens ?? 0) + (u.thoughtTokens ?? 0),
+    cacheReadTokens: u.cachedReadTokens ?? 0,
+    cacheCreationTokens: u.cachedWriteTokens ?? 0
+  };
+}
+function definedFields(u) {
+  return Object.fromEntries(Object.entries(u).filter(([k2, v]) => v !== void 0 && k2 !== "sessionUpdate"));
+}
+function hasInput(v) {
+  return typeof v === "object" && v !== null && Object.keys(v).some((k2) => k2 !== "cwd");
+}
+function pathsOf2(u) {
+  const fromDiffs = (u.content ?? []).flatMap((c) => c.type === "diff" && c.path ? [c.path] : []);
+  return [.../* @__PURE__ */ new Set([...(u.locations ?? []).map((l) => l.path), ...fromDiffs])];
+}
+function summaryOf2(u) {
+  const tool = u.kind && KIND_TOOL[u.kind] || u.title || "tool";
+  const command = u.kind === "execute" ? commandOf(u) : "";
+  return { tool, title: firstLine2(command || u.title || tool), paths: pathsOf2(u) };
+}
+function outputOf(u) {
+  if (!u.content?.length) return null;
+  return u.content.map((c) => c.type === "content" ? blockText(c.content) : c.type === "diff" ? `${c.path ?? ""}
+${c.newText ?? ""}` : "").join("");
+}
+function rawOutputText(raw) {
+  if (typeof raw === "string") return raw;
+  const o = asObj(raw);
+  if (typeof o.output === "string") return o.output;
+  const streams = [o.stdout, o.stderr].filter((s) => typeof s === "string" && s.length > 0);
+  if (streams.length) return streams.join(streams[0]?.endsWith("\n") ? "" : "\n");
+  if (typeof o.error === "string") return o.error;
+  return null;
+}
+function rawOutputOk(raw) {
+  const o = asObj(raw);
+  if (typeof o.exitCode === "number" && o.exitCode !== 0) return false;
+  return o.success !== false;
+}
+function commandOf(u) {
+  const command = asObj(u.rawInput).command;
+  return typeof command === "string" ? command : "";
+}
+
+// packages/agent-host/src/adapters/acp/session.ts
+var TREE_NOTE_MS = 2e3;
+var CANCELLED = { outcome: { outcome: "cancelled" } };
+var AcpSession = class {
+  constructor(opts, emit, deps) {
+    this.opts = opts;
+    this.emit = emit;
+    this.deps = deps;
+    this.preset = opts.permissionPreset;
+    this.normalizer = new AcpNormalizer(opts.sessionId, deps.label);
+    this.unmapped = new UnmappedTypes(deps.label, opts.sessionId, KNOWN_UPDATES);
+    this.conn = new AcpConnection(
+      deps.process,
+      {
+        onNotification: (method, params) => this.onNotification(method, params),
+        onRequest: (id3, method, params) => this.onRequest(id3, method, params),
+        onExit: (code2, expected) => this.onExit(code2, expected),
+        ...deps.onFrame ? { onFrame: deps.onFrame } : {}
+      },
+      deps.label
+    );
+    this.ready = this.open();
+    this.ready.catch(() => {
+    });
+  }
+  opts;
+  emit;
+  deps;
+  externalId = null;
+  /**
+   * A process a previous host left is ended and the conversation opened again in a new one (`AcpAdapter`): a turn it was
+   * running is not carried on, so the host ends it as one the restart stopped (`SessionManager.adoptKept`)
+   */
+  takesOverTurn = false;
+  ready;
+  phase = "opening";
+  conn;
+  normalizer;
+  unmapped;
+  cards = new PendingCards();
+  cardIds = new CardIds();
+  rules = new AlwaysAllowRules();
+  queue = [];
+  turn = null;
+  /** While `session/load` is answered, every update is the replay of the conversation, not this turn (§4.3) */
+  replaying = false;
+  canClose = false;
+  preset;
+  commands = [];
+  lastTurnInputs = [];
+  /** Commands running now, by call id, and the clock that notes the tree while any runs */
+  commandsRunning = /* @__PURE__ */ new Set();
+  treeClock = null;
+  /** The last context reading taken, for the compact turn's comparison */
+  lastUsed = null;
+  /** The session's running cost as last read at a turn's end: a turn's own cost is what it adds (OpenCode sends the total) */
+  costTotal = null;
+  get sessionId() {
+    return this.opts.sessionId;
+  }
+  async open() {
+    try {
+      const init = InitializeResult.parse(
+        await this.conn.request(
+          "initialize",
+          {
+            protocolVersion: 1,
+            clientInfo: { name: "centralu", version: "1" },
+            // No fs and no terminal: the agent uses its own tools, whose approvals come as `session/request_permission`
+            clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false, session: { compaction: {} } }
+          },
+          6e4
+        )
+      );
+      const version2 = init.agentInfo?.version ?? await this.deps.version();
+      if (version2) this.emit({ type: "agent_version", sessionId: this.sessionId, version: version2 });
+      this.canClose = init.agentCapabilities?.sessionCapabilities?.close !== void 0;
+      const base2 = { cwd: this.opts.cwd, mcpServers: this.mcpServers() };
+      const resume = this.opts.resumeExternalId;
+      if (resume) {
+        const caps = init.agentCapabilities;
+        const method = caps?.loadSession ? "session/load" : caps?.sessionCapabilities?.resume !== void 0 ? "session/resume" : null;
+        if (!method) throw rpcError(`${this.deps.label} cannot reopen a conversation`, "session_not_found");
+        this.replaying = method === "session/load";
+        try {
+          OpenedSession.parse(await this.conn.request(method, { ...base2, sessionId: resume }, 15e4) ?? {});
+        } finally {
+          this.replaying = false;
+        }
+        this.externalId = resume;
+        this.costTotal = this.opts.runningCost?.last ?? null;
+      } else {
+        const opened = OpenedSession.parse(await this.conn.request("session/new", base2, 12e4));
+        if (!opened.sessionId) throw new Error(`${this.deps.label} opened a session without an id`);
+        this.externalId = opened.sessionId;
+        this.costTotal = 0;
+        this.opts.runningCost?.keep(0);
+      }
+      this.phase = "ready";
+      this.next();
+    } catch (err) {
+      throw this.openError(err);
+    }
+  }
+  openError(err) {
+    if (err instanceof RpcError && err.code === AUTH_REQUIRED) {
+      return rpcError(`${this.deps.label} is not logged in. Log in from a terminal, then try again.`, "not_logged_in");
+    }
+    if (err instanceof RpcError) return rpcError(`${this.deps.label}: ${err.message}`, "internal");
+    return err instanceof Error ? err : new Error(String(err));
+  }
+  /** Centralu's own tools through the same stdio bridge Codex starts (§6). Apps are not attached to an ACP agent yet */
+  mcpServers() {
+    const bridge = this.opts.orchestratorBridge;
+    if (!this.opts.orchestratorTools || !bridge) return [];
+    return [
+      {
+        name: ORCHESTRATOR_MCP_NAME,
+        command: process.execPath,
+        args: [bridgePath()],
+        env: [
+          { name: "CC_HOST_URL", value: bridge.url },
+          { name: "CC_BRIDGE_TOKEN", value: bridge.token },
+          { name: "CC_SESSION_ID", value: this.opts.sessionId }
+        ]
+      }
+    ];
+  }
+  appAttachment() {
+    return "failed";
+  }
+  send(text2, opts) {
+    this.enqueue({ text: text2, ...opts?.id ? { id: opts.id } : {}, ...opts?.compact ? { compact: true } : {} });
+  }
+  sendTracked(text2, observer) {
+    return new Promise((resolve21, reject) => this.enqueue({ text: text2, ...observer ? { observer } : {}, done: { resolve: resolve21, reject } }));
+  }
+  enqueue(input) {
+    if (this.phase === "closed") {
+      const e = new Error(`${this.deps.label} session is closed`);
+      input.observer?.fail(e);
+      input.done?.reject(e);
+      return;
+    }
+    this.queue.push(input);
+    this.next();
+  }
+  /** ACP runs one prompt at a time; a message sent during a turn waits for it (§5.4) */
+  next() {
+    if (this.phase !== "ready" || this.turn) return;
+    const input = this.queue.shift();
+    if (input) void this.run(input);
+  }
+  turnInputs() {
+    return this.lastTurnInputs;
+  }
+  async run(input) {
+    const turn = { input, stopAsked: false, cancelResent: false, usedBefore: this.lastUsed, used: null, compacted: false, costTotal: null };
+    this.turn = turn;
+    this.emit({ type: "state_change", sessionId: this.sessionId, state: "working" });
+    input.observer?.accepted?.();
+    let result = null;
+    let failure3 = null;
+    try {
+      result = PromptResult.parse(
+        await this.conn.request("session/prompt", { sessionId: this.externalId, prompt: [{ type: "text", text: input.text }] }, NO_TIMEOUT_MS)
+      );
+    } catch (err) {
+      failure3 = err instanceof Error ? err : new Error(String(err));
+    }
+    if (turn.stopTimer) clearTimeout(turn.stopTimer);
+    if (this.phase === "closed") return;
+    for (const e of this.normalizer.endTurn()) this.emit(e);
+    this.stopTreeClock();
+    this.closeCards();
+    this.lastTurnInputs = input.id ? [input.id] : [];
+    this.turn = null;
+    if (failure3) {
+      this.emit({ type: "error", sessionId: this.sessionId, error: { code: "internal", message: `${this.deps.label}: ${failure3.message}`, retryable: true } });
+      input.observer?.fail(failure3);
+      input.done?.reject(failure3);
+    } else if (result) {
+      this.endTurn(result, turn);
+      input.observer?.complete();
+      input.done?.resolve();
+    }
+    this.next();
+  }
+  endTurn(result, turn) {
+    const sessionId = this.sessionId;
+    const tokens = tokenUsage(result);
+    const cost = tokens ? this.turnCost(turn) : null;
+    if (tokens) this.emit({ type: "usage_update", sessionId, tokens: cost === null ? tokens : { ...tokens, costUsd: cost } });
+    if (result.stopReason === "end_turn" && this.inferredCompaction(turn)) {
+      this.emit({ type: "compaction", sessionId, failed: false, trigger: "manual" });
+    }
+    switch (result.stopReason) {
+      case "cancelled":
+        this.emit({ type: "state_change", sessionId, state: "waiting_input", reason: turn.stopAsked ? "interrupted" : INTERRUPTED_BY_TOOL });
+        return;
+      case "refusal":
+        this.emit({ type: "error", sessionId, error: { code: "internal", message: `${this.deps.label} refused to go on with this turn.`, retryable: false } });
+        return;
+      case "max_tokens":
+      case "max_turn_requests":
+        this.emit({
+          type: "notice",
+          sessionId,
+          level: "warning",
+          from: this.deps.label,
+          text: result.stopReason === "max_tokens" ? `${this.deps.label} stopped: the reply reached its length limit.` : `${this.deps.label} stopped: the turn reached its limit of steps.`
+        });
+        this.emit({ type: "turn_complete", sessionId });
+        return;
+      default:
+        this.emit({ type: "turn_complete", sessionId });
+    }
+  }
+  /**
+   * A command the tool runs may start helpers in a group of their own (Cursor's shell, measured on macOS), which outlive
+   * the tool if it is killed: its tree is noted while a command runs, so they are ended with it (`noteTree`)
+   */
+  watchCommands(e) {
+    const proc = this.deps.process;
+    if (!proc.noteTree) return;
+    if (e.type === "tool_call" && e.summary.tool === "Bash") {
+      this.commandsRunning.add(e.callId);
+      void proc.noteTree();
+      if (!this.treeClock) {
+        this.treeClock = setInterval(() => void proc.noteTree?.(), TREE_NOTE_MS);
+        this.treeClock.unref?.();
+      }
+    } else if (e.type === "tool_result") {
+      this.commandsRunning.delete(e.callId);
+      if (this.commandsRunning.size === 0) this.stopTreeClock();
+    }
+  }
+  stopTreeClock() {
+    this.commandsRunning.clear();
+    if (this.treeClock) clearInterval(this.treeClock);
+    this.treeClock = null;
+  }
+  /** What this turn added to the conversation's running cost, once a total from before it is known (`CreateSessionOpts.runningCost`); null otherwise */
+  turnCost(turn) {
+    if (turn.costTotal === null) return null;
+    const before = this.costTotal;
+    this.costTotal = turn.costTotal;
+    this.opts.runningCost?.keep(turn.costTotal);
+    return before === null || turn.costTotal < before ? null : turn.costTotal - before;
+  }
+  /** Centralu's own compact turn, with no protocol frame for it, whose reading went down (§5.6) */
+  inferredCompaction(turn) {
+    if (!this.deps.infersCompaction || !turn.input.compact || turn.compacted) return false;
+    return turn.usedBefore !== null && turn.used !== null && turn.used < turn.usedBefore;
+  }
+  interrupt() {
+    const turn = this.turn;
+    if (!turn || this.phase !== "ready") return;
+    turn.stopAsked = true;
+    this.conn.notify("session/cancel", { sessionId: this.externalId });
+    this.closeCards();
+    if (!turn.stopTimer) {
+      turn.stopTimer = setTimeout(() => {
+        if (this.turn === turn) this.emit(stopNotConfirmed(this.sessionId, `${this.deps.label} has not confirmed the stop; the turn may still be running.`));
+      }, this.deps.stopConfirmMs);
+      turn.stopTimer.unref?.();
+    }
+  }
+  onNotification(method, params) {
+    if (method !== "session/update") {
+      this.unmapped.note(method);
+      return;
+    }
+    const read = readUpdate(params);
+    if (!read || read.sessionId !== this.externalId || this.replaying) return;
+    const turn = this.turn;
+    this.resendLostCancel();
+    if ("other" in read) {
+      this.unmapped.note(read.other);
+      return;
+    }
+    const u = read.update;
+    switch (u.sessionUpdate) {
+      case "available_commands_update":
+        this.commands = u.availableCommands.map((c) => ({ name: c.name, ...c.description ? { description: c.description } : {}, ...c.input?.hint ? { argumentHint: c.input.hint } : {} }));
+        return;
+      case "usage_update":
+        if (u.used > 0 && u.size > 0) {
+          this.emit({ type: "context_update", sessionId: this.sessionId, used: u.used, window: u.size, exactness: "exact" });
+          this.lastUsed = u.used;
+          if (turn) turn.used = u.used;
+        }
+        if (turn && u.cost?.currency === "USD") turn.costTotal = u.cost.amount;
+        return;
+      default:
+        for (const e of this.normalizer.update(u)) {
+          this.watchCommands(e);
+          if (e.type !== "compaction") {
+            this.emit(e);
+            continue;
+          }
+          if (turn) turn.compacted = true;
+          this.emit({ ...e, trigger: turn?.input.compact ? "manual" : "auto" });
+        }
+    }
+  }
+  /**
+   * A cancel that reached the agent before its turn had begun is lost (ACP's cancel is a notification, answered by nothing
+   * but the turn's end): the turn going on after it, by an update or by a question, gets the cancel once more
+   */
+  resendLostCancel() {
+    const turn = this.turn;
+    if (!turn?.stopAsked || turn.cancelResent) return;
+    turn.cancelResent = true;
+    this.conn.notify("session/cancel", { sessionId: this.externalId });
+  }
+  /** Answers a question cancelled, and remembers the call did not run as asked */
+  refused(callId) {
+    this.normalizer.refuse(callId);
+    return CANCELLED;
+  }
+  /** Whether a question asked now belongs to a turn that still runs: none after Stop or after the turn's end */
+  askable(turn) {
+    return this.phase !== "closed" && turn !== null && this.turn === turn && !turn.stopAsked;
+  }
+  async onRequest(_id, method, params) {
+    if (method !== "session/request_permission") {
+      this.unmapped.note(method);
+      throw new RpcError(METHOD_NOT_FOUND2, `Method not found: ${method}`);
+    }
+    const req = RequestPermission.parse(params);
+    const turn = this.turn;
+    this.resendLostCancel();
+    if (!this.askable(turn)) return this.refused(req.toolCall.toolCallId);
+    const call2 = this.normalizer.call(req.toolCall, true);
+    const detail = detailOf(call2, this.opts.cwd);
+    const once = pick3(req.options, "allow_once");
+    const granted = once !== void 0 && await this.grantedWithoutCard(detail, call2);
+    if (!this.askable(turn)) return this.refused(req.toolCall.toolCallId);
+    if (granted && once) return selected(once);
+    const requestId = this.cardIds.next("acp-req");
+    return new Promise((resolve21) => {
+      this.cards.set(requestId, { callId: req.toolCall.toolCallId, options: req.options, answer: resolve21 });
+      this.emit({ type: "approval_request", sessionId: this.sessionId, requestId, detail });
+    });
+  }
+  /** `auto`, Centralu's own tool, an `edits` grant inside the folder, or a rule the person saved: answered `allow_once` without a card */
+  async grantedWithoutCard(detail, call2) {
+    if (this.preset === "auto" || this.deps.centraluToolOf?.(call2)) return true;
+    if (this.preset === "edits" && call2.kind === "edit" && detail.kind === "file_edit") {
+      const paths = editPaths(call2).map((p) => isAbsolute10(p) ? p : join45(this.opts.cwd, p));
+      if (await insideFolder(this.opts.cwd, paths)) return true;
+    }
+    const key = alwaysAllowKey(detail);
+    return key !== null && this.rules.allows(key);
+  }
+  respondApproval(requestId, decision, _scope, matcher2) {
+    const card = this.cards.take(requestId);
+    if (!card) return false;
+    if (decision === "always" && matcher2) this.rules.add(matcher2);
+    const option = pick3(card.options, decision === "deny" ? "reject_once" : "allow_once");
+    if (decision === "deny" || !option) this.normalizer.refuse(card.callId);
+    card.answer(option ? selected(option) : CANCELLED);
+    this.emit({ type: "approval_resolved", sessionId: this.sessionId, requestId, decision });
+    return true;
+  }
+  applyRules(matchers) {
+    this.rules.addAll(matchers);
+  }
+  setPermissionPreset(preset) {
+    this.preset = preset;
+  }
+  async listCommands() {
+    return this.commands;
+  }
+  closeCards() {
+    this.cards.release((requestId, card) => {
+      this.normalizer.refuse(card.callId);
+      card.answer(CANCELLED);
+      this.emit({ type: "approval_resolved", sessionId: this.sessionId, requestId, decision: "deny" });
+    });
+  }
+  onExit(code2, expected) {
+    if (expected || this.phase === "closed") return;
+    const wasOpen = this.phase === "ready";
+    this.phase = "closed";
+    this.closeCards();
+    const turn = this.turn;
+    this.turn = null;
+    if (turn?.stopTimer) clearTimeout(turn.stopTimer);
+    this.dropQueue("were still queued when the agent exited");
+    const failure3 = new Error(`${this.deps.label} exited${code2 === null ? "" : ` (code ${code2})`}`);
+    if (turn) {
+      for (const e of this.normalizer.endTurn()) this.emit(e);
+      this.stopTreeClock();
+      turn.input.observer?.fail(failure3);
+      turn.input.done?.reject(failure3);
+    }
+    if (turn || !wasOpen) {
+      const tail = this.conn.stderrTail().trim().split("\n").slice(-5).join("\n");
+      this.emit({ type: "error", sessionId: this.sessionId, error: { code: "adapter_crashed", message: tail ? `${failure3.message}: ${tail}` : failure3.message, retryable: true } });
+    } else {
+      this.emit({ type: "session_live", sessionId: this.sessionId, live: false, reason: "asleep" });
+    }
+  }
+  dropQueue(when) {
+    const left = this.queue.splice(0);
+    if (left.length === 0) return;
+    const e = new Error(`${left.length} message(s) ${when}`);
+    for (const i of left) {
+      i.observer?.fail(e);
+      i.done?.reject(e);
+    }
+    this.emit(undeliveredError(this.sessionId, left.length, when));
+  }
+  async dispose() {
+    if (this.phase === "closed") return;
+    const turn = this.turn;
+    this.phase = "closed";
+    this.closeCards();
+    this.dropQueue("were still queued when the session closed");
+    if (turn) {
+      for (const e of this.normalizer.endTurn("Centralu stopped this session while the call ran")) this.emit(e);
+      this.stopTreeClock();
+    }
+    if (turn && this.externalId) {
+      if (turn.stopTimer) clearTimeout(turn.stopTimer);
+      this.conn.notify("session/cancel", { sessionId: this.externalId });
+      turn.input.observer?.fail(new Error("the session closed"));
+      turn.input.done?.reject(new Error("the session closed"));
+    }
+    if (this.canClose && this.externalId && !this.conn.isClosed) {
+      await this.conn.request("session/close", { sessionId: this.externalId }, 2e3).catch(() => {
+      });
+    }
+    await this.conn.dispose();
+  }
+};
+function pick3(options, kind) {
+  return options.find((o) => o.kind === kind);
+}
+function selected(option) {
+  return { outcome: { outcome: "selected", optionId: option.optionId } };
+}
+var str2 = (v) => typeof v === "string" ? v : "";
+function editPaths(call2) {
+  const input = asObj(call2.rawInput);
+  const fromDiffs = (call2.content ?? []).flatMap((c) => c.type === "diff" && c.path ? [c.path] : []);
+  const named = [str2(input.filePath), str2(input.path), str2(input.file_path)].filter(Boolean);
+  return [.../* @__PURE__ */ new Set([...fromDiffs, ...(call2.locations ?? []).map((l) => l.path), ...named])];
+}
+function detailOf(call2, cwd) {
+  const input = asObj(call2.rawInput);
+  if (call2.kind === "execute") return { kind: "command", command: str2(input.command) || call2.title || "", cwd: str2(input.cwd) || cwd };
+  if (call2.kind === "edit" || call2.kind === "delete" || call2.kind === "move") {
+    const diffs = (call2.content ?? []).flatMap((c) => c.type === "diff" && c.path ? [{ path: c.path, diff: c.newText ?? "" }] : []);
+    const changes = diffs.length ? diffs : editPaths(call2).map((path2) => ({ path: path2, diff: str2(input.content) || str2(input.newString) || str2(input.new_string) }));
+    return fileEditDetail(call2.kind === "delete" ? changes.map((c) => ({ ...c, change: "delete" })) : changes);
+  }
+  return { kind: "other", raw: JSON.stringify({ title: call2.title, kind: call2.kind, input: call2.rawInput }).slice(0, 2e3) };
+}
+
+// packages/agent-host/src/adapters/acp/adapter.ts
+var STOP_CONFIRM_MS2 = 1e4;
+var AcpAdapter = class {
+  constructor(profile, spawn6 = spawnLocalAgent, stopConfirmMs = STOP_CONFIRM_MS2) {
+    this.profile = profile;
+    this.spawn = spawn6;
+    this.stopConfirmMs = stopConfirmMs;
+  }
+  profile;
+  spawn;
+  stopConfirmMs;
+  get descriptor() {
+    return this.profile.descriptor;
+  }
+  get capabilities() {
+    return this.profile.capabilities;
+  }
+  get surface() {
+    return this.profile.surface;
+  }
+  detect() {
+    return this.profile.detect();
+  }
+  installedVersion() {
+    return this.profile.installedVersion();
+  }
+  async createSession(opts, emit) {
+    const label = this.profile.descriptor.label;
+    const launch2 = await this.profile.launch(opts);
+    if (!launch2) throw rpcError(`${label} is not installed. ${this.profile.descriptor.install}`, "tool_not_installed");
+    const recorder = frameRecorder(opts.sessionId);
+    const spec = { command: launch2.command, args: launch2.args, cwd: opts.cwd, env: { ...process.env, ...launch2.env } };
+    const source = opts.processSource;
+    if (source?.adopt) await closeAdopted(source.adopt, opts.sessionId, emit);
+    const proc = source ? source.spawn(spec) : this.spawn({ ...spec, endsWithHost: true });
+    if (recorder) proc.once("exit", (code2, signal) => recorder.exit(code2, signal));
+    const session2 = new AcpSession(opts, emit, {
+      label,
+      process: proc,
+      version: () => this.profile.installedVersion(),
+      stopConfirmMs: this.stopConfirmMs,
+      ...this.profile.centraluToolOf ? { centraluToolOf: (call2) => this.profile.centraluToolOf?.(call2) ?? null } : {},
+      ...this.profile.infersCompaction ? { infersCompaction: true } : {},
+      ...recorder ? { onFrame: recorder.frame } : {}
+    });
+    try {
+      await session2.ready;
+    } catch (err) {
+      await session2.dispose().catch(() => {
+      });
+      throw err;
+    }
+    return session2;
+  }
+};
+var ADOPTED_EXIT_MS = 5e3;
+async function closeAdopted(adopt, sessionId, emit) {
+  adopt.process.kill("SIGKILL");
+  await waitForExit(adopt.process, ADOPTED_EXIT_MS);
+  for (const call2 of adopt.openCalls) emit(toolResultEvent(sessionId, call2.callId, false, "", "Centralu restarted while this call ran; it was stopped"));
+}
+
+// packages/agent-host/src/adapters/cursor-agent/install.ts
+import { existsSync as existsSync19, readdirSync as readdirSync11, realpathSync as realpathSync10 } from "node:fs";
+import { dirname as dirname22, join as join46, win32 as win327 } from "node:path";
+var realFs = {
+  exists: existsSync19,
+  list: (dir) => {
+    try {
+      return readdirSync11(dir);
+    } catch {
+      return [];
+    }
+  },
+  real: (p) => {
+    try {
+      return realpathSync10(p);
+    } catch {
+      return p;
+    }
+  }
+};
+var VERSION = /^(\d{4})\.(\d{1,2})\.(\d{1,2})(?:-(\d{2})-(\d{2})-(\d{2}))?-[a-f0-9]+$/;
+function newestVersion(names) {
+  const key = (n) => {
+    const m = VERSION.exec(n);
+    if (!m) return null;
+    const pad = (s) => (s ?? "00").padStart(2, "0");
+    return `${m[1]}${pad(m[2])}${pad(m[3])}${pad(m[4])}${pad(m[5])}${pad(m[6])}`;
+  };
+  const dated = names.flatMap((n) => {
+    const k2 = key(n);
+    return k2 ? [{ n, k: k2 }] : [];
+  });
+  dated.sort((a, b2) => a.k < b2.k ? 1 : a.k > b2.k ? -1 : 0);
+  return dated[0]?.n ?? null;
+}
+function findCursor(env = process.env, platform, fs2 = realFs) {
+  if (installsCliAsVersionFolders(platform)) {
+    const roots = [whichTool("agent", env, platform), whichTool("cursor-agent", env, platform)].flatMap((p) => p ? [win327.dirname(p)] : []).concat(env.LOCALAPPDATA ? [win327.join(env.LOCALAPPDATA, "cursor-agent")] : []);
+    for (const root3 of roots) {
+      const version2 = newestVersion(fs2.list(win327.join(root3, "versions")));
+      if (!version2) continue;
+      const dir = win327.join(root3, "versions", version2);
+      const node = win327.join(dir, "node.exe");
+      const entry = win327.join(dir, "index.js");
+      if (fs2.exists(node) && fs2.exists(entry)) return { version: version2, command: node, args: [entry], env: { CURSOR_INVOKED_AS: "agent.cmd" } };
+    }
+    return null;
+  }
+  for (const name of ["cursor-agent", "agent"]) {
+    const found = whichTool(name, env, platform);
+    if (!found) continue;
+    const real3 = fs2.real(found);
+    const dir = dirname22(real3);
+    const version2 = dir.split(/[\\/]/).pop() ?? "";
+    if (VERSION.test(version2) && fs2.exists(join46(dir, "index.js"))) return { version: version2, command: real3, args: [], env: {} };
+  }
+  return null;
+}
+
+// packages/agent-host/src/adapters/cursor-agent/surface.ts
+import { execFile as execFile8 } from "node:child_process";
+import { readdirSync as readdirSync12, readFileSync as readFileSync16 } from "node:fs";
+import { dirname as dirname23, join as join47 } from "node:path";
+import { promisify as promisify7 } from "node:util";
+
+// packages/agent-host/src/adapters/cursor-agent/surface-baseline.ts
+var SURFACE_BASELINE3 = {
+  recorded: "2026-10-26",
+  version: "agent 2026.10.22-27dcf5f",
+  offered: {
+    command: [
+      "about",
+      "agent",
+      "bedrock",
+      "create-chat",
+      "cursor/ask_question",
+      "cursor/create_plan",
+      "cursor/generate_image",
+      "cursor/list_available_models",
+      "cursor/task",
+      "cursor/update_todos",
+      "help",
+      "login",
+      "logout",
+      "ls",
+      "mcp",
+      "models",
+      "persist",
+      "plugin",
+      "prompt",
+      "resume",
+      "team",
+      "update",
+      "worker"
+    ],
+    message: [
+      "agent_message_chunk",
+      "agent_thought_chunk",
+      "available_commands_update",
+      "current_mode_update",
+      "plan",
+      "session_info_update",
+      "subagent_spawned",
+      "subagent_state_update",
+      "tool_call",
+      "tool_call_update",
+      "user_message_chunk"
+    ],
+    capability: [
+      "authMethods.cursor_login",
+      "loadSession",
+      "mcpCapabilities.http",
+      "mcpCapabilities.sse",
+      "promptCapabilities.audio",
+      "promptCapabilities.embeddedContext",
+      "promptCapabilities.image",
+      "sessionCapabilities.list"
+    ]
+  }
+};
+
+// packages/agent-host/src/adapters/cursor-agent/surface.ts
+var exec6 = promisify7(execFile8);
+var Initialized = external_exports.looseObject({ agentCapabilities: external_exports.unknown().optional(), authMethods: external_exports.array(external_exports.looseObject({ id: external_exports.string() })).optional() });
+async function gather() {
+  const install = findCursor();
+  if (!install) throw new Error("Cursor CLI is not installed on this machine (https://cursor.com/install)");
+  const env = { ...process.env, ...install.env };
+  const { stdout: help } = await exec6(install.command, [...install.args, "--help"], { timeout: 3e4, windowsHide: true, env });
+  const proc = spawnLocalAgent({ command: install.command, args: [...install.args, "acp"], cwd: process.cwd(), env });
+  const conn = new AcpConnection(proc, { onNotification: () => {
+  }, onRequest: async () => null, onExit: () => {
+  } }, "cursor-surface");
+  let init;
+  try {
+    init = await conn.request("initialize", { protocolVersion: 1, clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false }, clientInfo: { name: "centralu-surface", version: "1" } }, 6e4);
+  } finally {
+    await conn.dispose();
+  }
+  const dir = dirname23(install.args[0] ?? install.command);
+  const names = /* @__PURE__ */ new Set();
+  for (const f of readdirSync12(dir).filter((n) => n.endsWith(".js"))) {
+    const text2 = readFileSync16(join47(dir, f), "utf8");
+    if (!text2.includes("session/request_permission") && !text2.includes("cursor_login")) continue;
+    for (const m of text2.matchAll(/sessionUpdate:"([a-z_]+)"|"(cursor\/[a-z_]+)"/g)) {
+      const name = m[1] ?? m[2];
+      if (name) names.add(name);
+    }
+  }
+  return { version: install.version, help, initialize: JSON.stringify(init), bundle: JSON.stringify([...names].sort()) };
+}
+function capabilityNames(value, prefix = "") {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return prefix ? [prefix] : [];
+  const entries = Object.entries(asObj(value));
+  if (entries.length === 0) return prefix ? [prefix] : [];
+  return entries.flatMap(([k2, v]) => typeof v === "object" && v !== null ? capabilityNames(v, prefix ? `${prefix}.${k2}` : k2) : [prefix ? `${prefix}.${k2}` : k2]);
+}
+function readCursorSurface(inputs) {
+  const init = Initialized.parse(JSON.parse(inputs.initialize ?? "{}"));
+  const commands = [...(inputs.help ?? "").matchAll(/^ {2}([a-z][\w-]*)(?: |$)/gm)].flatMap((m) => m[1] ? [m[1]] : []);
+  const bundle = external_exports.array(external_exports.string()).parse(JSON.parse(inputs.bundle ?? "[]"));
+  return {
+    version: `agent ${inputs.version ?? "unknown"}`,
+    offered: {
+      command: [.../* @__PURE__ */ new Set([...commands, ...bundle.filter((n) => n.startsWith("cursor/"))])].sort(),
+      message: bundle.filter((n) => !n.startsWith("cursor/")).sort(),
+      capability: [...capabilityNames(init.agentCapabilities), ...(init.authMethods ?? []).map((a) => `authMethods.${a.id}`)].sort()
+    }
+  };
+}
+var BUNDLE = "read in the 2026.10.22-27dcf5f bundle (3635.index.js), 2026-10-26";
+var CURSOR_SURFACE = {
+  gather,
+  read: readCursorSurface,
+  limitations: [
+    {
+      kind: "capability",
+      name: "authMethods.cursor_login",
+      treatment: "blocked",
+      measured: "agent 2026.10.22-27dcf5f, not logged in: authenticate {methodId: cursor_login} started the browser login flow and did not answer in 8 s",
+      offeredWhenMeasured: true,
+      note: "Never called: a background session must not open a browser. Logging in stays `agent login` in a terminal."
+    },
+    {
+      kind: "message",
+      name: "current_mode_update",
+      treatment: "dropped",
+      measured: BUNDLE,
+      offeredWhenMeasured: true,
+      note: "Modes (agent, plan, ask) are not offered until the settings menu maps them (PR 2)."
+    },
+    {
+      kind: "message",
+      name: "subagent_spawned",
+      treatment: "dropped",
+      measured: `${BUNDLE}: sent only when the client advertises sub-agent support, which Centralu does not yet`,
+      offeredWhenMeasured: true,
+      note: "Sub-agents run as ordinary tool calls until they are mapped onto subagent_event (PR 2)."
+    },
+    {
+      kind: "message",
+      name: "subagent_state_update",
+      treatment: "dropped",
+      measured: `${BUNDLE}: as subagent_spawned`,
+      offeredWhenMeasured: true,
+      note: "As subagent_spawned."
+    },
+    ...["cursor/ask_question", "cursor/create_plan", "cursor/update_todos", "cursor/task", "cursor/generate_image"].map((name) => ({
+      kind: "command",
+      name,
+      treatment: "blocked",
+      measured: `${BUNDLE}: Cursor's own request to the client`,
+      offeredWhenMeasured: true,
+      note: name === "cursor/ask_question" ? "Answered method-not-found, so Cursor asks each question as a session/request_permission whose options are the answers (its own fallback). Question cards come in PR 2." : "Answered method-not-found; mapped in PR 2."
+    })),
+    {
+      kind: "command",
+      name: "cursor/list_available_models",
+      treatment: "dropped",
+      measured: "agent 2026.10.22-27dcf5f, logged in: answers every model with its options (effort as category thought_level, context and fast as model_config)",
+      offeredWhenMeasured: true,
+      note: "The model list comes in PR 2. Setting a model through session/set_config_option also writes it to ~/.cursor/acp-config.json (measured), which would change the default of every Cursor session the person runs, so PR 1 runs Cursor\u2019s default model."
+    }
+  ],
+  baseline: SURFACE_BASELINE3
+};
+
+// packages/agent-host/src/adapters/cursor-agent/index.ts
+var exec7 = promisify8(execFile9);
+var CAPABILITIES = {
+  approvals: true,
+  contextUsage: "none",
+  resume: true,
+  autoTitle: true,
+  attachments: [],
+  verbosities: [],
+  exclusiveWriter: false,
+  backgroundTasks: false,
+  midTurnInput: false,
+  gatesSteps: false,
+  toolDeferral: false,
+  instructionChannel: "server",
+  processModel: "per-session",
+  builtInSubagents: false,
+  peerMessaging: false,
+  sleep: false,
+  presets: ["auto"],
+  keepsRepoFilesOut: false,
+  roleText: false
+};
+var DESCRIPTOR = {
+  name: "cursor-agent",
+  label: "Cursor",
+  mark: "\u25B2",
+  install: "curl https://cursor.com/install -fsS | bash (Windows: irm 'https://cursor.com/install?win32=true' | iex)",
+  login: "agent login"
+};
+function centraluToolOfCall(call2) {
+  if (call2.kind !== "other") return null;
+  const m = /^([\w-]+): ([\w-]+)$/.exec(call2.title ?? "");
+  return m?.[2] && m[1] === `${ORCHESTRATOR_MCP_NAME}-${m[2]}` ? m[2] : null;
+}
+var STATUS_FOR_MS = 6e4;
+function cursorProfile() {
+  let status = null;
+  return {
+    descriptor: DESCRIPTOR,
+    capabilities: CAPABILITIES,
+    surface: CURSOR_SURFACE,
+    async launch() {
+      const install = findCursor();
+      return install ? { command: install.command, args: [...install.args, "acp"], env: install.env } : null;
+    },
+    async installedVersion() {
+      return findCursor()?.version ?? null;
+    },
+    centraluToolOf: centraluToolOfCall,
+    async detect() {
+      if (status && Date.now() - status.at < STATUS_FOR_MS) return status.result;
+      const install = findCursor();
+      let result;
+      if (!install) {
+        result = { tool: DESCRIPTOR.name, installed: false, loggedIn: false, detail: "Cursor CLI not found (install it from https://cursor.com/cli)" };
+      } else {
+        const out = await exec7(install.command, [...install.args, "status"], { timeout: 2e4, windowsHide: true, env: { ...process.env, ...install.env } }).then((r) => r.stdout, (e) => e.stdout ?? "");
+        const loggedIn = /\bLogged in\b/.test(out) && !/Not logged in/i.test(out);
+        result = { tool: DESCRIPTOR.name, installed: true, loggedIn, detail: loggedIn ? `agent ${install.version}` : `agent ${install.version} \xB7 login required` };
+      }
+      status = { at: Date.now(), result };
+      return result;
+    }
+  };
+}
+var CursorAgentAdapter = class extends AcpAdapter {
+  tool = "cursor-agent";
+  constructor() {
+    super(cursorProfile());
+  }
+};
+
+// packages/agent-host/src/adapters/opencode/index.ts
+import { execFile as execFile11 } from "node:child_process";
+import { promisify as promisify10 } from "node:util";
+
+// packages/agent-host/src/adapters/opencode/config-files.ts
+import { existsSync as existsSync20, readdirSync as readdirSync13, readFileSync as readFileSync17 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { dirname as dirname24, extname as extname3, join as join48, relative as relative7 } from "node:path";
+function readOpenCodeConfigs(cwd, env, home = homedir13()) {
+  const global2 = join48(env.XDG_CONFIG_HOME || join48(home, ".config"), "opencode");
+  const project2 = !env.OPENCODE_DISABLE_PROJECT_CONFIG;
+  const upward = project2 ? foldersUp(cwd) : [];
+  const dotFolders = [...upward.map((d2) => join48(d2, ".opencode")), join48(home, ".opencode"), ...env.OPENCODE_CONFIG_DIR ? [env.OPENCODE_CONFIG_DIR] : []];
+  const files = [
+    ...["config.json", "opencode.json", "opencode.jsonc"].map((f) => join48(global2, f)),
+    ...env.OPENCODE_CONFIG ? [env.OPENCODE_CONFIG] : [],
+    ...upward.flatMap((d2) => CONFIG_NAMES.map((f) => join48(d2, f))),
+    ...dotFolders.flatMap((d2) => CONFIG_NAMES.map((f) => join48(d2, f))),
+    ...CONFIG_NAMES.map((f) => join48(managedFolder(env), f))
+  ];
+  return {
+    layers: files.map(readConfig).filter((c) => c !== null),
+    agentFiles: [...new Set([global2, ...dotFolders].flatMap(agentNames))]
+  };
+}
+var CONFIG_NAMES = ["opencode.json", "opencode.jsonc"];
+function foldersUp(cwd) {
+  const out = [];
+  for (let d2 = cwd; ; d2 = dirname24(d2)) {
+    out.push(d2);
+    if (existsSync20(join48(d2, ".git")) || dirname24(d2) === d2) return out;
+  }
+}
+function managedFolder(env) {
+  if (env.OPENCODE_TEST_MANAGED_CONFIG_DIR) return env.OPENCODE_TEST_MANAGED_CONFIG_DIR;
+  return systemSettingsFolder("opencode", env);
+}
+function readConfig(path2) {
+  try {
+    const v = JSON.parse(withoutComments(readFileSync17(path2, "utf8")));
+    return isObj(v) ? v : null;
+  } catch {
+    return null;
+  }
+}
+function withoutComments(text2) {
+  let out = "";
+  for (let i = 0; i < text2.length; i++) {
+    const c = text2[i];
+    if (c === '"') {
+      const end = stringEnd(text2, i);
+      out += text2.slice(i, end);
+      i = end - 1;
+    } else if (c === "/" && text2[i + 1] === "/") {
+      while (i < text2.length && text2[i] !== "\n") i++;
+      out += "\n";
+    } else if (c === "/" && text2[i + 1] === "*") {
+      i = text2.indexOf("*/", i + 2);
+      if (i === -1) break;
+      i++;
+    } else out += c;
+  }
+  return out.replace(/,(\s*[}\]])/g, "$1");
+}
+function stringEnd(text2, start2) {
+  for (let i = start2 + 1; i < text2.length; i++) {
+    if (text2[i] === "\\") i++;
+    else if (text2[i] === '"') return i + 1;
+  }
+  return text2.length;
+}
+function agentNames(folder) {
+  const named = (sub, deep) => markdown(join48(folder, sub), deep).map((f) => relative7(join48(folder, sub), f).replaceAll("\\", "/").slice(0, -extname3(f).length));
+  return [...named("agent", true), ...named("agents", true), ...named("mode", false), ...named("modes", false)];
+}
+function markdown(folder, deep) {
+  try {
+    return readdirSync13(folder, { withFileTypes: true }).flatMap((e) => {
+      const path2 = join48(folder, e.name);
+      if (e.isDirectory()) return deep ? markdown(path2, deep) : [];
+      return e.name.endsWith(".md") ? [path2] : [];
+    });
+  } catch {
+    return [];
+  }
+}
+
+// packages/agent-host/src/adapters/opencode/config.ts
+function presetEnv(preset, env, configs, platform = HOST_PLATFORM) {
+  if (preset === "auto") return {};
+  const theirs = jsonObject(env.OPENCODE_CONFIG_CONTENT ?? "");
+  const all = [...configs.layers, theirs, ...env.OPENCODE_PERMISSION === void 0 ? [] : [{ permission: jsonObject(env.OPENCODE_PERMISSION) }]];
+  return holdEnv(preset === "safe" ? "safe" : "normal", theirs, all, configs.agentFiles, env.OPENCODE_PERMISSION, matcher(platform));
+}
+var NORMAL_ASKS = ["edit", "bash"];
+var SAFE_ASKS = ["edit", "bash", "webfetch", "websearch"];
+var NATIVE_AGENTS = ["build", "plan", "general", "explore"];
+var DEFAULT_ASKS = {
+  read: [["*", "allow"], ["*.env", "ask"], ["*.env.*", "ask"], ["*.env.example", "allow"]],
+  doom_loop: [["*", "ask"]]
+};
+function holdEnv(hold, theirs, all, agentFiles, permissionEnv, matches2) {
+  const named = (group) => all.flatMap((c) => Object.keys(asObj(c[group])));
+  const modes = new Set(named("mode"));
+  const configured = [.../* @__PURE__ */ new Set([...named("agent"), ...modes])];
+  const held3 = [.../* @__PURE__ */ new Set([...NATIVE_AGENTS, ...configured, ...agentFiles])];
+  const primary = hold === "safe" ? "build" : [...all].reverse().map((c) => c.default_agent).find((a) => typeof a === "string") ?? "build";
+  const entered = hold === "safe" ? held3 : [.../* @__PURE__ */ new Set([primary, ...NATIVE_AGENTS, ...configured])];
+  const globalLevel = level(all);
+  const levelOf = (name) => level([...all.map((c) => asObj(asObj(c.agent)[name])), ...all.map((c) => asObj(asObj(c.mode)[name]))]);
+  const rulesFor = (levels, asks) => ({ ...ownRules(hold, levels, asks, matches2), ...taskRules(hold, levels, held3, primary, asks, matches2) });
+  const globalRules = rulesFor([globalLevel], false);
+  const entries = (group, names) => Object.fromEntries(
+    names.map((name) => {
+      const entry = asObj(asObj(theirs[group])[name]);
+      return [name, { ...entry, permission: withRules(entry.permission, rulesFor([globalLevel, levelOf(name)], name === primary)) }];
+    })
+  );
+  const config2 = {
+    ...theirs,
+    permission: withRules(theirs.permission, globalRules),
+    agent: { ...asObj(theirs.agent), ...entries("agent", entered.filter((n) => !modes.has(n))) },
+    ...entered.some((n) => modes.has(n)) ? { mode: { ...asObj(theirs.mode), ...entries("mode", entered.filter((n) => modes.has(n))) } } : {},
+    ...hold === "safe" ? { default_agent: "build" } : {}
+  };
+  const out = { OPENCODE_CONFIG_CONTENT: JSON.stringify(config2) };
+  if (permissionEnv !== void 0 && hold === "safe") out.OPENCODE_PERMISSION = JSON.stringify(withRules(jsonObject(permissionEnv), globalRules));
+  return out;
+}
+function ownRules(hold, levels, asks, matches2) {
+  const presetTools = hold === "safe" ? SAFE_ASKS : NORMAL_ASKS;
+  const askedHere = levels.flatMap((l) => Object.entries(l).filter(([key, v]) => !/[*?]/.test(key) && key !== "task" && rulesOfValue(v).some(([, a]) => a === "ask")).map(([key]) => key));
+  const tools = [.../* @__PURE__ */ new Set([...Object.keys(DEFAULT_ASKS), ...askedHere, ...presetTools])];
+  return Object.fromEntries(
+    tools.flatMap((tool) => {
+      const theirs = levels.flatMap((l) => toolRules(l, tool, matches2));
+      const rules = hold === "safe" && SAFE_ASKS.includes(tool) ? [["*", "ask"], ...theirs.filter(([, a]) => a === "deny")] : [...DEFAULT_ASKS[tool] ?? (presetTools.includes(tool) ? [["*", "ask"]] : []), ...theirs];
+      const ordered = Object.entries(inOrder(rules));
+      const first = ordered.findIndex(([, a]) => a === "ask");
+      if (first < 0) return [];
+      const fromAsk = ordered.slice(first);
+      return [[ownKey(tool), Object.fromEntries(asks ? fromAsk : fromAsk.map(([p, a]) => [p, a === "ask" ? "deny" : a]))]];
+    })
+  );
+}
+function taskRules(hold, levels, held3, primary, asks, matches2) {
+  const theirs = levels.flatMap((l) => toolRules(l, "task", matches2));
+  const denies = theirs.filter(([, a]) => a === "deny");
+  const base2 = hold === "safe" ? [["*", "ask"], ...denies.some(([p]) => p === "*") ? [] : held3.map((n) => [n, "allow"])] : theirs;
+  const rules = [...base2, [primary, "deny"], ...denies];
+  return { [ownKey("task")]: inOrder(asks ? rules : rules.map(([p, a]) => [p, a === "ask" ? "deny" : a])) };
+}
+var ownKey = (tool) => `${tool}*`;
+var withRules = (p, rules) => ({ ...Object.fromEntries(Object.entries(permissionOf(p)).filter(([k2]) => !(k2 in rules))), ...rules });
+var permissionOf = (p) => typeof p === "string" ? { "*": p } : asObj(p);
+function merge2(a, b2) {
+  if (!isObj(a) || !isObj(b2)) return b2;
+  const out = { ...a, ...b2 };
+  for (const k2 of Object.keys(b2)) if (k2 in a && isObj(a[k2]) && isObj(b2[k2])) out[k2] = merge2(a[k2], b2[k2]);
+  return out;
+}
+function level(cs2) {
+  const tools = cs2.map((c) => c.tools).filter(isObj).reduce(merge2, {});
+  const fromTools = Object.fromEntries(Object.entries(asObj(tools)).map(([t, on2]) => [["write", "patch"].includes(t) ? "edit" : t, on2 ? "allow" : "deny"]));
+  const permission = cs2.flatMap((c) => c.permission === void 0 ? [] : [permissionOf(c.permission)]).reduce(merge2, {});
+  return asObj(merge2(fromTools, permission));
+}
+var rulesOfValue = (v) => typeof v === "string" ? [["*", v]] : Object.entries(asObj(v)).flatMap(([p, a]) => typeof a === "string" ? [[p, a]] : []);
+var toolRules = (l, tool, matches2) => Object.entries(l).filter(([key]) => matches2(tool, key)).flatMap(([, v]) => rulesOfValue(v));
+function inOrder(rules) {
+  const out = /* @__PURE__ */ new Map();
+  for (const [pattern, action] of rules) {
+    if (pattern === "*") out.clear();
+    out.delete(pattern);
+    out.set(pattern, action);
+  }
+  return Object.fromEntries(out);
+}
+function matcher(platform) {
+  const flags = openCodeMatchesAnyCase(platform) ? "si" : "s";
+  return (value, pattern) => {
+    const re2 = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
+    return new RegExp(`^${re2.endsWith(" .*") ? `${re2.slice(0, -3)}( .*)?` : re2}$`, flags).test(value);
+  };
+}
+
+// packages/agent-host/src/adapters/opencode/install.ts
+function findOpenCode(env = process.env) {
+  const path2 = whichTool("opencode", env);
+  return path2 ? launchFor(path2) : null;
+}
+
+// packages/agent-host/src/adapters/opencode/surface.ts
+import { execFile as execFile10 } from "node:child_process";
+import { readFileSync as readFileSync18 } from "node:fs";
+import { promisify as promisify9 } from "node:util";
+
+// packages/agent-host/src/adapters/opencode/surface-baseline.ts
+var SURFACE_BASELINE4 = {
+  recorded: "2026-10-25",
+  version: "opencode 1.19.4",
+  offered: {
+    command: [
+      "acp",
+      "agent",
+      "attach",
+      "completion",
+      "db",
+      "debug",
+      "export",
+      "github",
+      "import",
+      "mcp",
+      "models",
+      "plugin",
+      "pr",
+      "providers",
+      "run",
+      "serve",
+      "session",
+      "stats",
+      "uninstall",
+      "upgrade",
+      "web"
+    ],
+    message: [
+      "agent_message_chunk",
+      "agent_thought_chunk",
+      "available_commands_update",
+      "config_option_update",
+      "tool_call",
+      "tool_call_update",
+      "usage_update"
+    ],
+    capability: [
+      "authMethods.opencode-login",
+      "loadSession",
+      "mcpCapabilities.http",
+      "mcpCapabilities.sse",
+      "promptCapabilities.embeddedContext",
+      "promptCapabilities.image",
+      "sessionCapabilities.close",
+      "sessionCapabilities.fork",
+      "sessionCapabilities.list",
+      "sessionCapabilities.resume"
+    ]
+  }
+};
+
+// packages/agent-host/src/adapters/opencode/surface.ts
+var exec8 = promisify9(execFile10);
+var Initialized2 = external_exports.looseObject({ agentCapabilities: external_exports.unknown().optional(), authMethods: external_exports.array(external_exports.looseObject({ id: external_exports.string() })).optional() });
+async function gather2() {
+  const install = findOpenCode();
+  if (!install) throw new Error("OpenCode is not installed on this machine (npm i -g opencode-ai)");
+  const [{ stdout: version2 }, shown3] = await Promise.all([
+    exec8(install.command, [...install.args, "--version"], { timeout: 3e4, windowsHide: true }),
+    exec8(install.command, [...install.args, "--help"], { timeout: 3e4, windowsHide: true })
+  ]);
+  const help = shown3.stdout + shown3.stderr;
+  const proc = spawnLocalAgent({ command: install.command, args: [...install.args, "acp"], cwd: process.cwd(), env: process.env });
+  const conn = new AcpConnection(proc, { onNotification: () => {
+  }, onRequest: async () => null, onExit: () => {
+  } }, "opencode-surface");
+  let init;
+  try {
+    init = await conn.request("initialize", { protocolVersion: 1, clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false }, clientInfo: { name: "centralu-surface", version: "1" } }, 6e4);
+  } finally {
+    await conn.dispose();
+  }
+  const names = new Set([...readFileSync18(install.command).toString("latin1").matchAll(/sessionUpdate:"([a-z_]+)"/g)].flatMap((m) => m[1] ? [m[1]] : []));
+  return { version: version2.trim(), help, initialize: JSON.stringify(init), bundle: JSON.stringify([...names].sort()) };
+}
+function capabilityNames2(value, prefix = "") {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return prefix ? [prefix] : [];
+  const entries = Object.entries(asObj(value));
+  if (entries.length === 0) return prefix ? [prefix] : [];
+  return entries.flatMap(([k2, v]) => typeof v === "object" && v !== null ? capabilityNames2(v, prefix ? `${prefix}.${k2}` : k2) : [prefix ? `${prefix}.${k2}` : k2]);
+}
+function readOpenCodeSurface(inputs) {
+  const init = Initialized2.parse(JSON.parse(inputs.initialize ?? "{}"));
+  const commands = [...(inputs.help ?? "").matchAll(/^ {2}opencode ([a-z][\w-]*)/gm)].flatMap((m) => m[1] ? [m[1]] : []);
+  return {
+    version: `opencode ${inputs.version ?? "unknown"}`,
+    offered: {
+      command: [...new Set(commands)].sort(),
+      message: external_exports.array(external_exports.string()).parse(JSON.parse(inputs.bundle ?? "[]")).sort(),
+      capability: [...capabilityNames2(init.agentCapabilities), ...(init.authMethods ?? []).map((a) => `authMethods.${a.id}`)].sort()
+    }
+  };
+}
+var MEASURED = "opencode 1.19.4, 2026-10-26";
+var OPENCODE_SURFACE = {
+  gather: gather2,
+  read: readOpenCodeSurface,
+  limitations: [
+    {
+      kind: "message",
+      name: "compaction_update",
+      treatment: "worked-around",
+      measured: `${MEASURED}: /compact ran with the client advertising session.compaction and sent no compaction frame, only text and a smaller usage_update`,
+      offeredWhenMeasured: false,
+      note: "Its compaction is read from the compact turn Centralu started (infersCompaction, \xA75.6): ended end_turn with a smaller reading. When this kind appears, the frames can replace the inference."
+    },
+    {
+      kind: "capability",
+      name: "authMethods.opencode-login",
+      treatment: "blocked",
+      measured: `${MEASURED}: session/new works without authenticate (its own free models), and a provider's key is the person's OpenCode settings`,
+      offeredWhenMeasured: true,
+      note: "Never called: logging in stays `opencode auth login` in a terminal."
+    },
+    {
+      kind: "capability",
+      name: "sessionCapabilities.resume",
+      treatment: "dropped",
+      measured: `${MEASURED}: session/load answered in about 1 s, session/resume in about 45 s`,
+      offeredWhenMeasured: true,
+      note: "A conversation is reopened with session/load, whose replay is dropped."
+    },
+    {
+      kind: "capability",
+      name: "sessionCapabilities.fork",
+      treatment: "dropped",
+      measured: MEASURED,
+      offeredWhenMeasured: true,
+      note: "Forks start a new conversation with the handoff, as for any tool, until a fork maps onto session/fork."
+    },
+    {
+      kind: "message",
+      name: "config_option_update",
+      treatment: "dropped",
+      measured: MEASURED,
+      offeredWhenMeasured: true,
+      note: "The model and mode options are not offered in the settings menu yet; the person\u2019s OpenCode default model runs."
+    }
+  ],
+  baseline: SURFACE_BASELINE4
+};
+
+// packages/agent-host/src/adapters/opencode/index.ts
+var exec9 = promisify10(execFile11);
+var CAPABILITIES2 = {
+  approvals: true,
+  contextUsage: "exact",
+  resume: true,
+  autoTitle: true,
+  attachments: [],
+  verbosities: [],
+  exclusiveWriter: false,
+  backgroundTasks: false,
+  midTurnInput: false,
+  gatesSteps: false,
+  toolDeferral: false,
+  instructionChannel: "server",
+  processModel: "per-session",
+  builtInSubagents: false,
+  peerMessaging: false,
+  sleep: false,
+  keepsRepoFilesOut: false,
+  roleText: false
+};
+var DESCRIPTOR2 = {
+  name: "opencode",
+  label: "OpenCode",
+  mark: "O",
+  install: "npm i -g opencode-ai (or: curl -fsSL https://opencode.ai/install | bash)",
+  login: "opencode auth login"
+};
+var VERSION_FOR_MS = 6e4;
+function openCodeProfile() {
+  let known = null;
+  const version2 = async () => {
+    if (known && Date.now() - known.at < VERSION_FOR_MS) return known.version;
+    const l = findOpenCode();
+    const v = l ? await exec9(l.command, [...l.args, "--version"], { timeout: 2e4, windowsHide: true }).then((r) => r.stdout.trim() || null, () => null) : null;
+    known = { at: Date.now(), version: v };
+    return v;
+  };
+  return {
+    descriptor: DESCRIPTOR2,
+    capabilities: CAPABILITIES2,
+    surface: OPENCODE_SURFACE,
+    infersCompaction: true,
+    async launch(opts) {
+      const l = findOpenCode();
+      return l ? { command: l.command, args: [...l.args, "acp"], env: presetEnv(opts.permissionPreset, process.env, readOpenCodeConfigs(opts.cwd, process.env)) } : null;
+    },
+    installedVersion: version2,
+    async detect() {
+      if (!findOpenCode()) return { tool: DESCRIPTOR2.name, installed: false, loggedIn: false, detail: "OpenCode not found (npm i -g opencode-ai)" };
+      const v = await version2();
+      return { tool: DESCRIPTOR2.name, installed: true, loggedIn: true, detail: v ? `opencode ${v}` : "opencode" };
+    }
+  };
+}
+var OpenCodeAdapter = class extends AcpAdapter {
+  tool = "opencode";
+  constructor() {
+    super(openCodeProfile());
+  }
+};
+
 // packages/agent-host/src/adapters/registry.ts
 function createAdapters() {
-  const all = [new ClaudeAdapter(), new CodexAdapter()];
+  const all = [new ClaudeAdapter(), new CodexAdapter(), new CursorAgentAdapter(), new OpenCodeAdapter()];
   return new Map(all.map((a) => [a.tool, a]));
 }
 function registeredTool(adapters2, preferred) {
@@ -129306,6 +131381,14 @@ var ToolRegistry = class {
     }
     return this.firstTool(this.host.store.settings.appSetting("orchestrator_tool"));
   }
+  /**
+   * Why `tool` cannot run a session that demands this (`launchRefusal`), or null: the one rule, for every path that puts
+   * a tool on a session (`tool-fit.ts`). A tool this host does not run is `toolProblem`'s to say
+   */
+  refusal(tool, demands) {
+    const adapter = this.host.adapters.get(tool);
+    return adapter ? launchRefusal(adapter.capabilities, adapter.descriptor.label, demands) : null;
+  }
   /** Why `tool` cannot start a session here now (not registered, not installed, not logged in), or null when it can */
   async toolProblem(tool) {
     const adapter = this.host.adapters.get(tool);
@@ -129351,13 +131434,13 @@ var ApprovalRules = class {
    * restart (C-2). `matcher` is the card's own key, which the caller has checked (`respondApproval`).
    * A session with no project (#994) has no project to remember for: its project answer is kept for the session.
    */
-  rememberAlways(sessionId, sessionProjectId, scope, matcher) {
+  rememberAlways(sessionId, sessionProjectId, scope, matcher2) {
     const projectId = scope === "project" ? sessionProjectId : null;
     this.host.store.permissions.addApprovalRule({
       scope: projectId !== null ? "project" : "session",
       sessionId: projectId !== null ? void 0 : sessionId,
       projectId: projectId ?? void 0,
-      matcher,
+      matcher: matcher2,
       decision: "allow"
     });
   }
@@ -130331,6 +132414,8 @@ var OrchestratorSlot = class {
    * session's own settings takes over — this value is never read again after that.
    */
   configureOrchestrator(tool) {
+    const refused2 = this.host.refusal(tool, ORCHESTRATOR_DEMANDS);
+    if (refused2) throw unfitError(refused2);
     this.host.store.settings.setAppSetting("orchestrator_tool", tool);
   }
   /** The orchestrator being created (#839): a second ask while it is made waits on this one, never makes another */
@@ -130367,7 +132452,7 @@ var OrchestratorSlot = class {
       kind: "orchestrator",
       cwd: orchestratorHome(),
       tool: this.host.firstTool(configured),
-      permissionPreset: "normal"
+      permissionPreset: ORCHESTRATOR_DEMANDS.permissionPreset
     });
     this.host.rename(info.id, "Orchestrator");
     return this.host.meta.get(info.id);
@@ -130487,6 +132572,8 @@ var SessionSettings = class {
   host;
   async updateSettings(sessionId, s, by = "person") {
     const m = this.host.openSession(sessionId);
+    const refused2 = s.permissionPreset ? this.host.toolRefusal(m, m.tool, s.permissionPreset) : null;
+    if (refused2) throw unfitError(refused2);
     if (s.model !== void 0 && s.model !== m.model) this.host.cacheLedger.note(sessionId, "model_change");
     if (s.model !== void 0) m.model = s.model;
     if (s.effort !== void 0) m.effort = s.effort;
@@ -130998,8 +133085,8 @@ var UsageRecorder = class {
 };
 
 // packages/agent-host/src/sessions/manager.ts
-import { homedir as homedir14 } from "node:os";
-import { join as join46 } from "node:path";
+import { homedir as homedir15 } from "node:os";
+import { join as join51 } from "node:path";
 
 // packages/agent-host/src/dev-services/store.ts
 import Database2 from "better-sqlite3";
@@ -131016,7 +133103,7 @@ function pragmaNumber(db, name) {
 }
 
 // packages/agent-host/src/dev-services/store.ts
-import { existsSync as existsSync19, readFileSync as readFileSync16 } from "node:fs";
+import { existsSync as existsSync22, readFileSync as readFileSync19 } from "node:fs";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // packages/agent-host/src/dev-services/store/app-runs.ts
@@ -131626,8 +133713,10 @@ var ChildOwnershipRecords = class {
    * stored request names its caller too). A crash before the commit leaves every row on the original; after it, every
    * row on the new session, so the next host (a swap or a restart) reads one owner either way. `armReports`: children
    * whose report the original was waiting for in a call (its wait had taken the mark down), now owed to the new session.
+   * `then`: the rest of the handoff's move that is stored elsewhere (the mail, `MailService.handOver`), run last in the same
+   * transaction, so a refusal there leaves every row of both on the original.
    */
-  moveChildren(from, to, move) {
+  moveChildren(from, to, move, then) {
     this.db.transaction(() => {
       const owner = this.db.prepare(
         `UPDATE sessions SET
@@ -131650,6 +133739,7 @@ var ChildOwnershipRecords = class {
            ON CONFLICT(session_id) DO UPDATE SET caller_session_id = excluded.caller_session_id, marked_at = excluded.marked_at`
       );
       for (const id3 of move.armReports ?? []) arm.run(id3, to, Date.now());
+      then?.();
     })();
   }
 };
@@ -132180,7 +134270,7 @@ var UserAppAdoptionRecords = class {
 
 // packages/agent-host/src/dev-services/store/migrate-runner.ts
 import Database from "better-sqlite3";
-import { existsSync as existsSync18 } from "node:fs";
+import { existsSync as existsSync21 } from "node:fs";
 
 // packages/agent-host/src/dev-services/store/store-keys.ts
 var APP_SETTINGS_DDL = `
@@ -132524,7 +134614,7 @@ var MigrationRunner = class extends ReaderGate {
     const probe = bare2;
     const steps = probe.migrationSteps();
     const known = steps.at(-1)?.to ?? 0;
-    if (dbPath2 === ":memory:" || !existsSync18(dbPath2)) return empty(known);
+    if (dbPath2 === ":memory:" || !existsSync21(dbPath2)) return empty(known);
     const db = new Database(dbPath2, { readonly: true, fileMustExist: true });
     try {
       probe.db = db;
@@ -133415,11 +135505,11 @@ var StepsV28ToV40 = class extends MigrationRange {
           );
         `);
         const insert = this.db.prepare(`INSERT INTO messages_fts (rowid, body, session_id, seq) VALUES (?, ?, ?, ?)`);
-        const pick3 = this.db.prepare(
+        const pick4 = this.db.prepare(
           `SELECT rowid, session_id, seq, kind, payload FROM messages
            WHERE kind IN ${kinds} AND session_id NOT IN (SELECT id FROM sessions WHERE deleted_at IS NOT NULL)`
         );
-        for (const r of pick3.all()) {
+        for (const r of pick4.all()) {
           const body = indexedText(r.kind, r.payload);
           if (!body) continue;
           insert.run(r.rowid, body, r.session_id, r.seq);
@@ -134935,7 +137025,7 @@ var TrashRecords = class {
    */
   async purgeSession(sessionId, chunk = DELETE_CHUNK) {
     if (!this.isTrashed(sessionId)) return false;
-    const pick3 = this.db.prepare(`SELECT rowid FROM messages WHERE session_id = ? LIMIT ?`);
+    const pick4 = this.db.prepare(`SELECT rowid FROM messages WHERE session_id = ? LIMIT ?`);
     const dropFts = this.db.prepare(`DELETE FROM messages_fts WHERE rowid = ?`);
     const dropMsg = this.db.prepare(`DELETE FROM messages WHERE rowid = ?`);
     const pickSub = this.db.prepare(`SELECT rowid FROM subagent_messages WHERE session_id = ? LIMIT ?`);
@@ -134944,7 +137034,7 @@ var TrashRecords = class {
       const subs = pickSub.all(sessionId, chunk);
       for (const { rowid } of subs) dropSub.run(rowid);
       if (subs.length === chunk) return false;
-      const rows3 = pick3.all(sessionId, chunk);
+      const rows3 = pick4.all(sessionId, chunk);
       for (const { rowid } of rows3) {
         dropFts.run(rowid);
         dropMsg.run(rowid);
@@ -134975,12 +137065,12 @@ var TrashRecords = class {
   }
   /** One session's messages in seq order, one transaction per chunk, letting the event loop go between chunks (#179) */
   async walkMessages(sessionId, chunk, withPayload, each2) {
-    const pick3 = this.db.prepare(
+    const pick4 = this.db.prepare(
       `SELECT rowid, seq${withPayload ? ", kind, payload" : ""} FROM messages WHERE session_id = ? AND seq > ? ORDER BY seq LIMIT ?`
     );
     let after = Number.MIN_SAFE_INTEGER;
     const step = this.db.transaction(() => {
-      const rows3 = pick3.all(sessionId, after, chunk);
+      const rows3 = pick4.all(sessionId, after, chunk);
       each2(rows3);
       const last = rows3.at(-1);
       if (last) after = last.seq;
@@ -135156,14 +137246,14 @@ var SubagentStepRecords = class {
       this.db.prepare(`SELECT MAX(trashed_at) as prev FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL`).get(sessionId)
     );
     const at2 = prev !== null && prev >= now ? prev + 1 : now;
-    const pick3 = this.db.prepare(
+    const pick4 = this.db.prepare(
       `SELECT rowid, LENGTH(CAST(payload AS BLOB)) as bytes FROM subagent_messages
         WHERE session_id = ? AND trashed_at IS NULL AND rowid <= ? LIMIT ?`
     );
     const mark = this.db.prepare(`UPDATE subagent_messages SET trashed_at = ? WHERE rowid = ?`);
     const moved = { steps: 0, bytes: 0 };
     await this.inChunks(() => {
-      const rows3 = pick3.all(sessionId, last, chunk);
+      const rows3 = pick4.all(sessionId, last, chunk);
       for (const r of rows3) {
         mark.run(at2, r.rowid);
         moved.steps++;
@@ -135176,10 +137266,10 @@ var SubagentStepRecords = class {
   /** Puts a live session's trashed steps back under their cards. False when it had none in the trash */
   async restore(sessionId, chunk = CHUNK) {
     if (!this.hasTrashed(sessionId)) return false;
-    const pick3 = this.db.prepare(`SELECT rowid FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL LIMIT ?`);
+    const pick4 = this.db.prepare(`SELECT rowid FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL LIMIT ?`);
     const unmark = this.db.prepare(`UPDATE subagent_messages SET trashed_at = NULL WHERE rowid = ?`);
     await this.inChunks(() => {
-      const rows3 = pick3.all(sessionId, chunk);
+      const rows3 = pick4.all(sessionId, chunk);
       for (const r of rows3) unmark.run(r.rowid);
       return rows3.length < chunk;
     });
@@ -135193,12 +137283,12 @@ var SubagentStepRecords = class {
    */
   async purge(sessionId, upTo, chunk = CHUNK) {
     if (!this.hasTrashed(sessionId, upTo)) return false;
-    const pick3 = this.db.prepare(
+    const pick4 = this.db.prepare(
       `SELECT rowid FROM subagent_messages WHERE session_id = ? AND trashed_at IS NOT NULL AND trashed_at <= ? LIMIT ?`
     );
     const drop = this.db.prepare(`DELETE FROM subagent_messages WHERE rowid = ?`);
     await this.inChunks(() => {
-      const rows3 = pick3.all(sessionId, upTo, chunk);
+      const rows3 = pick4.all(sessionId, upTo, chunk);
       for (const r of rows3) drop.run(r.rowid);
       return rows3.length < chunk;
     });
@@ -135236,7 +137326,7 @@ function resolveSchemaPath() {
     new URL("../../../protocol/src/schema/schema.sql", import.meta.url)
     // source tree
   ].map((u) => fileURLToPath4(u));
-  const found = candidates.find((p) => existsSync19(p));
+  const found = candidates.find((p) => existsSync22(p));
   if (!found) throw new Error(`schema.sql not found: ${candidates.join(", ")}`);
   return found;
 }
@@ -135271,7 +137361,7 @@ var Store = class extends MigrationRunner {
       this.db.pragma("synchronous = FULL");
       this.db.pragma("busy_timeout = 5000");
       this.db.pragma(`journal_size_limit = ${WAL_SIZE_LIMIT}`);
-      this.db.exec(readFileSync16(SCHEMA_PATH, "utf8"));
+      this.db.exec(readFileSync19(SCHEMA_PATH, "utf8"));
       this.migrate();
     } catch (e) {
       this.db.close();
@@ -135513,7 +137603,7 @@ async function gitBranchPr(projectCwd, branch, signal, timeoutMs = OK2.timeout)
 
 // packages/agent-host/src/dev-services/file-search.ts
 import { readdir as readdir11 } from "node:fs/promises";
-import { join as join44 } from "node:path";
+import { join as join49 } from "node:path";
 var MAX_FILES2 = 2e4;
 var TTL_MS2 = 15e3;
 var WALK_DEPTH = 6;
@@ -135551,7 +137641,7 @@ async function walk(root3) {
       if (e.name.startsWith(".") && e.name !== ".env") continue;
       if (e.isDirectory()) {
         if (SKIP.has(e.name) || depth >= WALK_DEPTH) continue;
-        queue.push({ dir: join44(dir, e.name), rel: wireJoin(rel, e.name), depth: depth + 1 });
+        queue.push({ dir: join49(dir, e.name), rel: wireJoin(rel, e.name), depth: depth + 1 });
       } else {
         out.push(wireJoin(rel, e.name).normalize("NFC"));
         if (out.length >= MAX_FILES2) break;
@@ -136639,8 +138729,8 @@ var HostCards = class {
 // packages/agent-host/src/dev-services/message-image.ts
 import { constants as constants8 } from "node:fs";
 import { open as open5, realpath as realpath9 } from "node:fs/promises";
-import { homedir as homedir13 } from "node:os";
-import { posix as posix3, sep as sep10, win32 as win327 } from "node:path";
+import { homedir as homedir14 } from "node:os";
+import { posix as posix3, sep as sep10, win32 as win328 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var OPEN_FLAGS = constants8.O_RDONLY | constants8.O_NONBLOCK | (constants8.O_NOFOLLOW ?? 0);
 var MESSAGE_IMAGE_KINDS = "PNG, JPEG, GIF or WebP";
@@ -136675,7 +138765,7 @@ function mentions(text2, written) {
   }
   return false;
 }
-function resolveWrittenPath(written, cwd, home = homedir13(), p = sep10 === "\\" ? win327 : posix3) {
+function resolveWrittenPath(written, cwd, home = homedir14(), p = sep10 === "\\" ? win328 : posix3) {
   const windows2 = p.sep === "\\";
   let abs;
   if (/^file:/i.test(written)) {
@@ -136742,13 +138832,13 @@ async function readMessageImage(abs, max = IMAGE_PREVIEW_MAX_BYTES) {
 
 // packages/agent-host/src/dev-services/attachments.ts
 import { lstat as lstat9, mkdir as mkdir6, readdir as readdir12, rm as rm8, writeFile as writeFile4 } from "node:fs/promises";
-import { extname as extname3, join as join45 } from "node:path";
-var root2 = () => join45(dataRoot(), "attachments");
+import { extname as extname4, join as join50 } from "node:path";
+var root2 = () => join50(dataRoot(), "attachments");
 function sessionDir(sessionId) {
   if (!isSessionId(sessionId)) {
     throw rpcError(`Not a session id: ${sessionId}`);
   }
-  return join45(root2(), sessionId);
+  return join50(root2(), sessionId);
 }
 var EXT = {
   "image/png": ".png",
@@ -136759,8 +138849,8 @@ var EXT = {
 async function saveAttachment(sessionId, name, mime, dataBase64) {
   const dir = sessionDir(sessionId);
   await mkdir6(dir, { recursive: true });
-  const ext2 = extname3(name) || EXT[mime] || "";
-  const file2 = join45(dir, `${Date.now()}-${Math.random().toString(36).slice(2, 8)}${ext2}`);
+  const ext2 = extname4(name) || EXT[mime] || "";
+  const file2 = join50(dir, `${Date.now()}-${Math.random().toString(36).slice(2, 8)}${ext2}`);
   const buf = Buffer.from(dataBase64, "base64");
   await writeFile4(file2, buf);
   return { kind: mime.startsWith("image/") ? "image" : "file", path: file2, name, mime, bytes: buf.length };
@@ -136781,10 +138871,10 @@ async function sweepAttachments(maxBytes = ATTACHMENTS_MAX_BYTES) {
     return 0;
   }
   for (const d2 of dirs) {
-    const dir = join45(root2(), d2);
+    const dir = join50(root2(), d2);
     const names = await readdir12(dir).catch(() => []);
     for (const name of names) {
-      const p = join45(dir, name);
+      const p = join50(dir, name);
       const s = await lstat9(p).catch(() => null);
       if (s?.isFile()) files.push({ path: p, size: s.size, mtime: s.mtimeMs });
     }
@@ -137230,10 +139320,10 @@ var ToolQueries = class {
 import { rmSync as rmSync6 } from "node:fs";
 
 // packages/agent-host/src/sessions/app-builder.ts
-import { relative as relative7 } from "node:path";
+import { relative as relative8 } from "node:path";
 function builderRole(app2, cwd) {
   const name = JSON.stringify(frameField(app2.name ?? app2.appId));
-  const rel = relative7(cwd, app2.dir) || ".";
+  const rel = relative8(cwd, app2.dir) || ".";
   const where2 = app2.projectId === null ? `This is a user-folder app (used across several projects). Your working folder is the app folder: ${app2.dir}` : app2.root ? `This project is the app: its manifest stands at the project's root, so your working folder is the app folder: ${app2.dir}` : `This is this project's app (committed to the repository and shared with the team). App folder: ${rel}/ (${app2.dir})`;
   const idRule = app2.root ? "whose id names the app" : "whose id matches the folder name";
   return `You are the session that builds the Centralu app ${name} (id ${app2.appId}). ${where2}
@@ -137687,7 +139777,7 @@ async function gitStatusForApp(summary, files) {
 // packages/agent-host/src/sessions/session-trash.ts
 import { basename as basename12 } from "node:path";
 import { rm as rm9 } from "node:fs/promises";
-import { existsSync as existsSync20, statSync as statSync14 } from "node:fs";
+import { existsSync as existsSync23, statSync as statSync14 } from "node:fs";
 var SessionTrash = class {
   constructor(host) {
     this.host = host;
@@ -137815,8 +139905,35 @@ var SessionTrash = class {
     if (this.host.readGrants.get(sessionId)?.size || this.host.delegationFlow.starts.agentConsents.has(sessionId)) {
       out.push("What the person allowed it (reading other sessions, starting agents) is dropped; a restored session asks again.");
     }
-    const mail2 = this.host.mailWork(sessionId);
-    if (!mail2) out.push("Its mailbox could not be read, so what it holds there is not known.");
+    const heir = this.host.handoffHeir(sessionId);
+    const plan = heir ? this.host.mailHandOverPreview(sessionId, heir) : null;
+    const mail2 = heir && plan ? null : this.host.mailWork(sessionId);
+    const listed2 = (list) => list.slice(0, 3).map((x) => plainQuoted(x.subject, 60)).join(", ") + (list.length > 3 ? ", \u2026" : "");
+    const threads = (n, what = "unfinished mail thread") => n === 1 ? `${/^[aeiou]/.test(what) ? "an" : "a"} ${what}` : `${n} ${what}s`;
+    if (heir && plan) {
+      const goes = plan.moved;
+      if (goes.length) {
+        const of2 = (role) => goes.filter((g5) => g5.role === role).length;
+        const parts = [
+          ...of2("assignee") ? [`is the assignee of ${threads(of2("assignee"))}`] : [],
+          ...of2("owner") ? [`owns ${threads(of2("owner"))}`] : [],
+          ...of2("member") ? [`is in ${threads(of2("member"))} as a member`] : []
+        ];
+        const joined = parts.length > 1 ? `${parts.slice(0, -1).join(", ")} and ${parts.at(-1)}` : parts[0];
+        out.push(`It ${joined} (${listed2(goes)}); ${goes.length === 1 ? "it goes" : "they go"} to ${name(heir)}, which took over from it, and ${goes.length === 1 ? "stays" : "stay"} there if it is restored.`);
+      }
+      if (plan.closed.length) {
+        out.push(`It has unread mail in ${threads(plan.closed.length, "closed mail thread")} (${listed2(plan.closed)}); that mail goes to ${name(heir)}.`);
+      }
+      const ownedLeft = plan.left.filter((l) => l.role === "owner");
+      if (ownedLeft.length) {
+        out.push(`It owns ${threads(ownedLeft.length)} whose assignee is ${name(heir)} (${listed2(ownedLeft)}); ${ownedLeft.length === 1 ? "it becomes" : "they become"} the person's.`);
+      }
+      const assignedLeft = plan.left.filter((l) => l.role === "assignee");
+      if (assignedLeft.length) {
+        out.push(`It is the assignee of ${threads(assignedLeft.length)} ${name(heir)} owns (${listed2(assignedLeft)}); ${assignedLeft.length === 1 ? "it goes" : "they go"} back to open with nobody on ${assignedLeft.length === 1 ? "it" : "them"}.`);
+      }
+    } else if (!mail2) out.push("Its mailbox could not be read, so what it holds there is not known.");
     else {
       const subjects = (list) => list.slice(0, 3).map((x) => plainQuoted(x, 60)).join(", ") + (list.length > 3 ? ", \u2026" : "");
       if (mail2.assigned.length) {
@@ -137965,7 +140082,7 @@ var SessionTrash = class {
           bytes: r.bytes + files,
           conversationFile: !r.hasConversationFile ? "none" : record2.removeExternal ? "remove" : "keep",
           // Only a worktree still on disk is listed — the merged-worktree cleanup removes the folder before the session archive is emptied
-          worktree: r.worktree && existsSync20(r.worktree.path) ? { ...r.worktree, remove: record2.removeWorktree } : null
+          worktree: r.worktree && existsSync23(r.worktree.path) ? { ...r.worktree, remove: record2.removeWorktree } : null
         };
       })
     );
@@ -138037,7 +140154,7 @@ var SessionTrash = class {
         const home = projects.find((p) => p.id === record2.projectId) ?? (record2.projectPath ? projects.find((p) => p.path === record2.projectPath) : void 0);
         if (home) {
           projectId = home.id;
-        } else if (record2.projectPath && existsSync20(record2.projectPath) && statSync14(record2.projectPath).isDirectory()) {
+        } else if (record2.projectPath && existsSync23(record2.projectPath) && statSync14(record2.projectPath).isDirectory()) {
           this.host.store.projects.addProject({
             id: record2.projectId,
             path: record2.projectPath,
@@ -138106,8 +140223,8 @@ var SessionTrash = class {
         const path2 = s.worktree.path;
         const repo = record2.projectPath;
         await gitWorktreeRemove(repo, path2, true).catch((e) => {
-          if (!existsSync20(path2)) return;
-          if (!existsSync20(repo)) {
+          if (!existsSync23(path2)) return;
+          if (!existsSync23(repo)) {
             throw rpcError(`The project folder ${repo} is not there any more (moved or deleted), so git cannot remove its worktree at ${path2}. It stays in the session archive: delete that folder yourself, then delete this entry again.`);
           }
           throw rpcError(`Could not remove the worktree at ${path2}: ${e.message.trim()}. It stays in the session archive; remove the folder or fix the cause, then delete it again.`);
@@ -138417,7 +140534,7 @@ ${list}` : `${label} has no ordinary session. The person has to open one there;
 
 // packages/agent-host/src/sessions/manager.ts
 var SessionManager = class {
-  constructor(store2, adapters2, emit, endpoint, worktreeRoot = join46(homedir14(), DATA_DIR, "worktrees"), keeperOpts = {}) {
+  constructor(store2, adapters2, emit, endpoint, worktreeRoot = join51(homedir15(), DATA_DIR, "worktrees"), keeperOpts = {}) {
     this.store = store2;
     this.adapters = adapters2;
     this.emit = emit;
@@ -139200,6 +141317,23 @@ var SessionManager = class {
     const text2 = this.projectRegistry.projectTrusted(m.projectId) ? "Restarted the agent to apply this project's new trust: it now reads the project's own settings and instruction files (CLAUDE.md, AGENTS.md)." : "Restarted the agent to apply this project's removed trust: it now reads only your own settings, not the project's files.";
     this.onEvent({ type: "notice", sessionId, level: "info", from: "Centralu", label: "restart", text: text2 });
   }
+  /**
+   * The turn a kept process was running is over after a swap (#698): the session goes idle with the quit mark and its line,
+   * and the report it owed goes now, rather than naming a later turn
+   */
+  turnLostInSwap(m) {
+    const change = { type: "state_change", sessionId: m.id, state: "idle", reason: "reattach_failed" };
+    this.events.applyStateHint(change, m);
+    this.interruptions.markStoppedByQuit(m, true);
+    this.store.sessions.upsertSession(m);
+    this.emit(change);
+    const turnBy = this.children.turnEnded(m.id, null);
+    if (this.children.awaitingReport.has(m.id)) void this.reports.reportBackIfAwaited(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, void 0, turnBy);
+    else {
+      if (turnBy.by !== "person") void this.reports.tellAskerOfInterruption(m.id, this.children.turnOwners.get(m.id)?.callerId);
+      void this.reports.reportToPersonIfOwed(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, turnBy);
+    }
+  }
   /**
    * Re-attaches the tool processes a previous host left running in the keeper (#280 step 2), so
    * those sessions come back live — mid-turn, with a waiting approval re-delivered by the tool —
@@ -139220,21 +141354,12 @@ var SessionManager = class {
         const r = await this.resumeSession(k2.sessionId, k2.process).catch((err) => ({ resumed: false, reason: err.message }));
         const adopted = r.resumed ? this.handles.get(k2.sessionId) : void 0;
         if (adopted) this.adoptedProcesses.add(adopted);
+        if (adopted?.takesOverTurn === false && inTurn(m.state)) this.turnLostInSwap(m);
         if (this.children.queued.has(k2.sessionId)) this.queue.scheduleDrain(k2.sessionId);
         if (!r.resumed) {
           console.error(`[agent-host] could not re-attach ${k2.sessionId.slice(0, 8)}: ${r.reason ?? "unknown"}`);
           if (inTurn(m.state)) {
-            const change = { type: "state_change", sessionId: m.id, state: "idle", reason: "reattach_failed" };
-            this.events.applyStateHint(change, m);
-            this.interruptions.markStoppedByQuit(m, true);
-            this.store.sessions.upsertSession(m);
-            this.emit(change);
-            const turnBy = this.children.turnEnded(m.id, null);
-            if (this.children.awaitingReport.has(m.id)) void this.reports.reportBackIfAwaited(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, void 0, turnBy);
-            else {
-              if (turnBy.by !== "person") void this.reports.tellAskerOfInterruption(m.id, this.children.turnOwners.get(m.id)?.callerId);
-              void this.reports.reportToPersonIfOwed(m.id, { type: "state_change", sessionId: m.id, state: "idle" }, void 0, turnBy);
-            }
+            this.turnLostInSwap(m);
           } else if (this.children.pausedReports.has(m.id)) {
             void this.reports.reportBackIfAwaited(m.id, { type: "state_change", sessionId: m.id, state: "idle" });
           }
@@ -139468,6 +141593,10 @@ var SessionManager = class {
    * A session is a slot, and the agent is a tool — the slot (name, order, history, grid panel) is left
    * untouched, and only the tool underneath it is swapped.
    */
+  /** Why `tool` cannot run this session as its next launch would, under `preset` (its own by default), or null (`tool-fit.ts`) */
+  toolRefusal(m, tool = m.tool, preset = m.permissionPreset) {
+    return this.toolRegistry.refusal(tool, sessionDemands(m, this.launchInputs.settingFilesFor(m), preset));
+  }
   async switchTool(sessionId, tool) {
     this.notBeingRemoved(sessionId);
     this.refuseWhileLettingGo();
@@ -139475,6 +141604,8 @@ var SessionManager = class {
     if (m.tool === tool) return { ...m, live: this.handles.has(sessionId) };
     const adapter = this.adapters.get(tool);
     if (!adapter) throw rpcError(`Unknown tool: ${tool}`, "tool_not_installed");
+    const refused2 = this.toolRefusal(m, tool);
+    if (refused2) throw unfitError(refused2);
     const d2 = await adapter.detect();
     if (!d2.installed || !d2.loggedIn) {
       throw rpcError(`Cannot use ${tool}: ${d2.detail}`, "tool_not_installed");
@@ -139506,7 +141637,7 @@ var SessionManager = class {
     this.events.settleState(m, { type: "state_change", sessionId, state: "idle", reason: "tool_changed" });
     return { ...m, live: false };
   }
-  respondApproval(sessionId, requestId, decision, scope, matcher) {
+  respondApproval(sessionId, requestId, decision, scope, matcher2) {
     const m = this.meta.get(sessionId);
     const ask = this.hostCards.hostAsks.get(requestId);
     if (ask && ask.sessionId === sessionId) {
@@ -139521,7 +141652,7 @@ var SessionManager = class {
     }
     const pending = m?.pendingApproval;
     const key = pending?.requestId === requestId ? alwaysAllowKey(pending.detail) : "";
-    const remembered = decision === "always" && matcher !== void 0 && key !== "" && matcher === key ? matcher : void 0;
+    const remembered = decision === "always" && matcher2 !== void 0 && key !== "" && matcher2 === key ? matcher2 : void 0;
     const landed = this.requireHandle(sessionId).respondApproval(requestId, decision, scope, remembered);
     if (!landed && this.hostCards.answeredApprovals.get(requestId) === sessionId) return;
     if (landed) {
@@ -140067,6 +142198,15 @@ var SessionManager = class {
           return null;
         }
       },
+      mailHandOver: (...a) => self2.mailHooks?.handOver?.(...a) ?? [],
+      mailHandOverPreview: (from, to) => {
+        try {
+          return self2.mailHooks?.handOverPreview?.(from, to) ?? { moved: [], closed: [], left: [] };
+        } catch (e) {
+          console.error(`[mail] ${from.slice(0, 8)}: what a handoff would move could not be read (${errorMessage(e)})`);
+          return null;
+        }
+      },
       mailGone: (id3) => {
         try {
           self2.mailHooks?.sessionGone(id3);
@@ -140233,6 +142373,8 @@ var SessionManager = class {
       },
       nameOf: (...a) => self2.reports.nameOf(...a),
       toolProblem: (...a) => self2.toolRegistry.toolProblem(...a),
+      toolRefusal: (...a) => self2.toolRefusal(...a),
+      refusal: (...a) => self2.toolRegistry.refusal(...a),
       trashSession: (...a) => self2.trashSession(...a),
       purgeSession: (...a) => self2.purgeSession(...a),
       trashIf: (...a) => self2.trash.trashIf(...a),
@@ -141394,6 +143536,91 @@ id: ${sessionIdOf(assignee)}` : "";
       return moved;
     });
   }
+  /**
+   * A handoff moves the original session's mail to the session that took over (§4.1, #693, #738, #1574): in each thread that moves,
+   * the successor takes the original's place, as owner, as assignee or as a member, and what the original has not read waits for the
+   * successor instead (`moveUnreadReceipts`). Each thread keeps its state and leaves an `event`; nobody is woken inside the move
+   * (it runs before the successor's first message); the unread mail waits for the successor's next rest or the caller's poke. The
+   * host's own write, like `partyGone`'s: no policy or rate check, since the handoff's own checks came first (`HandoffChildren.moveChildren` trusts its caller the same way).
+   *
+   * `which`: `all` for an original that goes (every thread not done it is in), or the sessions whose work moved to the successor
+   * while the original stays (the threads the original owns with one of them as assignee). A thread the successor already holds
+   * the other side of (it owns what the original is assigned, or the reverse) stays where it is: the two sides of a thread are two
+   * parties, and the original's departure moves it on as before (`partyGone`); it is returned as `left`, so the note says so. A
+   * done thread the original has unread mail in (a closing report it never read) stays done and keeps its parties; the successor
+   * joins it and the unread mail waits for it (`closed`). Called inside the transaction of the children's move
+   * (`ChildOwnershipRecords.moveChildren`), so the mail and the children move together or not at all. Returns every thread it
+   * looked at by what became of it, for the handoff note (`handOverPreview` reads the same plan without writing)
+   */
+  handOver(fromSessionId, toSessionId, which) {
+    if (fromSessionId === toSessionId || !this.records.hasThreads()) return [];
+    const from = this.sessionAddress(fromSessionId);
+    const to = this.sessionAddress(toSessionId);
+    return this.run(() => {
+      const now = this.now();
+      const done2 = this.handOverPlan(from, to, which).map((p) => {
+        const { thread: t, role, kind } = p;
+        if (kind === "left") {
+          this.records.handleUnread(t.id, from, now);
+          return { ...p, unread: 0 };
+        }
+        if (kind === "closed") {
+          this.records.putParticipantIfAbsent(t.id, to, "member", now);
+          return { ...p, unread: this.records.moveUnreadReceipts(t.id, from, to, now) };
+        }
+        this.records.leaveParticipant(t.id, from, now);
+        if (role === "member") this.records.putParticipantIfAbsent(t.id, to, "member", now);
+        else this.records.putParticipant(t.id, to, role, now);
+        const facts = { change: "handed_over", party: from, to, role };
+        const after = role === "member" ? (this.insertEvent(t.id, "The session in this thread handed over: the session that took over is in it instead.", facts, now), t) : this.moveState(
+          t,
+          role === "owner" ? { owner: to } : { assignee: to },
+          now,
+          facts,
+          role === "owner" ? "The owner handed over: the session that took over owns the thread." : "The assignee handed over: the session that took over has the work."
+        );
+        return { thread: after, role, kind, unread: this.records.moveUnreadReceipts(t.id, from, to, now) };
+      });
+      if (which === "all") for (const t of this.records.doneThreadsWithUnread(from)) this.records.handleUnread(t.id, from, now);
+      return done2;
+    });
+  }
+  /**
+   * What `handOver` would do with the original's mail, read only: the archive preview of an original with an heir says it thread by
+   * thread (#1574), from the same plan the move follows
+   */
+  handOverPreview(fromSessionId, toSessionId, which = "all") {
+    const preview = { moved: [], closed: [], left: [] };
+    if (fromSessionId === toSessionId || !this.records.hasThreads()) return preview;
+    for (const p of this.handOverPlan(this.sessionAddress(fromSessionId), this.sessionAddress(toSessionId), which)) preview[p.kind].push({ subject: p.thread.subject, role: p.role });
+    return preview;
+  }
+  /**
+   * The threads a handoff looks at, and what becomes of each (`HandedOverThread.kind`): those not done the original owns, is assigned or
+   * is in, and the done ones it has unread mail in; with `assignees`, only those it owns whose assignee is one of them. A thread in a
+   * state a newer build wrote is not touched
+   */
+  handOverPlan(from, to, which) {
+    const assignees = which === "all" ? null : new Set(which.assignees.map((id3) => this.sessionAddress(id3)));
+    const open6 = ["open", "running", "review", "blocked"];
+    const threads = /* @__PURE__ */ new Map();
+    for (const t of [
+      ...this.records.threadsOfParty(from, "owner", open6),
+      ...this.records.threadsOfParty(from, "assignee", open6),
+      ...this.records.openThreadsWith(from),
+      ...this.records.doneThreadsWithUnread(from)
+    ]) threads.set(t.id, t);
+    const plan = [];
+    for (const t of threads.values()) {
+      if (t.state === "unknown") continue;
+      const role = t.owner === from ? "owner" : t.assignee === from ? "assignee" : "member";
+      if (assignees && !(role === "owner" && t.assignee !== null && assignees.has(t.assignee))) continue;
+      if (t.state === "done" && (assignees || this.records.movableUnread(t.id, from, to) === 0)) continue;
+      const kind = t.state === "done" ? "closed" : role === "owner" && t.assignee === to || role === "assignee" && t.owner === to ? "left" : "moved";
+      plan.push({ thread: t, role, kind });
+    }
+    return plan;
+  }
   /**
    * A turn of delegated work ended (§6): Centralu's `report` in the thread, for its owner, and the thread's state moves with it: `review`
    * when the work was reported, `running` when it paused on the session's own background work, and `done` (`dropped`, taken over) when the
@@ -142966,13 +145193,13 @@ function mailRelations(host) {
 }
 
 // packages/agent-host/src/rpc.ts
-import { relative as relative8 } from "node:path";
+import { relative as relative9 } from "node:path";
 
 // packages/agent-host/src/themes.ts
-import { randomBytes as randomBytes8 } from "node:crypto";
+import { randomBytes as randomBytes9 } from "node:crypto";
 import { watch as watch2 } from "node:fs";
 import { mkdir as mkdir7, readdir as readdir13, readFile as readFile7, rename as rename5, stat as stat9, unlink as unlink2, writeFile as writeFile5 } from "node:fs/promises";
-import { basename as basename13, join as join47 } from "node:path";
+import { basename as basename13, join as join52 } from "node:path";
 var MAX_FILE_BYTES = 256 * 1024;
 var SETTLE_MS = 100;
 var ID_PATTERN = /^[a-z0-9][a-z0-9-]{0,59}$/;
@@ -143017,7 +145244,7 @@ var ThemeFiles = class {
    * a token updates it, and an unchanged one does not touch the folder (or wake the watcher).
    */
   async writeSchema() {
-    const path2 = join47(this.dir, THEME_SCHEMA_FILE);
+    const path2 = join52(this.dir, THEME_SCHEMA_FILE);
     const text2 = `${JSON.stringify(themeFileJsonSchema(), null, 2)}
 `;
     const current = await readFile7(path2, "utf8").catch(() => null);
@@ -143066,7 +145293,7 @@ var ThemeFiles = class {
   /** The absolute path for an id, for the shell to trash or reveal. Refuses anything that is not an id. */
   pathOf(id3) {
     if (!ID_PATTERN.test(id3)) throw rpcError(`Not a theme id: ${id3}`);
-    return join47(this.dir, `${id3}.json`);
+    return join52(this.dir, `${id3}.json`);
   }
   async freeId(name) {
     const base2 = name.toLowerCase().normalize("NFKD").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "theme";
@@ -143078,11 +145305,11 @@ var ThemeFiles = class {
       );
       if (!taken) return id3;
     }
-    return `${base2}-${randomBytes8(4).toString("hex")}`;
+    return `${base2}-${randomBytes9(4).toString("hex")}`;
   }
   /** Temp file and rename: a reader (the watcher, an editor, an agent) never sees half a file */
   async atomicWrite(path2, text2) {
-    const tmp = `${path2}.${randomBytes8(6).toString("hex")}.tmp`;
+    const tmp = `${path2}.${randomBytes9(6).toString("hex")}.tmp`;
     try {
       await writeFile5(tmp, text2, "utf8");
       await rename5(tmp, path2);
@@ -143095,11 +145322,11 @@ var ThemeFiles = class {
 };
 
 // packages/agent-host/src/dev-services/strays.ts
-import { execFile as execFile8 } from "node:child_process";
-import { realpathSync as realpathSync10 } from "node:fs";
-import { promisify as promisify7 } from "node:util";
+import { execFile as execFile12 } from "node:child_process";
+import { realpathSync as realpathSync11 } from "node:fs";
+import { promisify as promisify11 } from "node:util";
 import { userInfo } from "node:os";
-var exec6 = promisify7(execFile8);
+var exec10 = promisify11(execFile12);
 function parsePsRows(out) {
   const rows3 = [];
   for (const line of out.split("\n")) {
@@ -143165,7 +145392,7 @@ function pickStrays(rows3, cwdOf, roots, selfPid, held3 = []) {
 }
 async function psRows() {
   try {
-    const { stdout } = await exec6("ps", ["-U", userInfo().username, "-o", "pid=,ppid=,tty=,command="], {
+    const { stdout } = await exec10("ps", ["-U", userInfo().username, "-o", "pid=,ppid=,tty=,command="], {
       maxBuffer: 8 * 1024 * 1024,
       timeout: 5e3,
       windowsHide: true
@@ -143178,7 +145405,7 @@ async function psRows() {
 async function cwdsOf(pids) {
   if (pids.length === 0) return /* @__PURE__ */ new Map();
   try {
-    const { stdout } = await exec6("lsof", ["-a", "-d", "cwd", "-p", pids.join(","), "-Fpn"], {
+    const { stdout } = await exec10("lsof", ["-a", "-d", "cwd", "-p", pids.join(","), "-Fpn"], {
       maxBuffer: 8 * 1024 * 1024,
       timeout: 5e3,
       windowsHide: true
@@ -143201,7 +145428,7 @@ function resolveRoots(roots) {
   for (const r of roots) {
     out.add(r);
     try {
-      out.add(realpathSync10(r));
+      out.add(realpathSync11(r));
     } catch {
     }
   }
@@ -143383,8 +145610,8 @@ function createRpcHandler(mgr2, adapters2, { settleDeletedProjects, deleteOutloo
     },
     "agents.reportOwed": async (p) => ({ owed: mgr2.reportOwed(RpcMethods["agents.reportOwed"].params.parse(p).sessionId) }),
     "agents.respondApproval": async (p) => {
-      const { sessionId, requestId, decision, scope, matcher } = RpcMethods["agents.respondApproval"].params.parse(p);
-      mgr2.respondApproval(sessionId, requestId, decision, scope, matcher);
+      const { sessionId, requestId, decision, scope, matcher: matcher2 } = RpcMethods["agents.respondApproval"].params.parse(p);
+      mgr2.respondApproval(sessionId, requestId, decision, scope, matcher2);
       return { ok: true };
     },
     "agents.answerQuestion": async (p) => {
@@ -143735,7 +145962,7 @@ function createRpcHandler(mgr2, adapters2, { settleDeletedProjects, deleteOutloo
       const project2 = (await mgr2.listProjects()).find((x) => x.id === projectId);
       const app2 = apps.list().find((a) => a.appId === appId && a.projectId === projectId);
       if (!project2 || !app2) throw rpcError(noSuchAppText({ projectId, appId }));
-      const { repo, commits } = await gitLogPath(project2.path, relative8(project2.path, app2.dir), 20);
+      const { repo, commits } = await gitLogPath(project2.path, relative9(project2.path, app2.dir), 20);
       return { kind: "git", repo, commits };
     },
     "apps.restoreVersion": async (p) => {
@@ -144460,7 +146687,7 @@ var sameCause = (a, b2) => a !== null && b2 !== null && JSON.stringify(a) === JS
 
 // packages/agent-host/src/dev-services/terminal.ts
 import { createRequire } from "node:module";
-import { existsSync as existsSync21 } from "node:fs";
+import { existsSync as existsSync24 } from "node:fs";
 
 // packages/agent-host/src/dev-services/pty-slot.ts
 function isPtyModule(m) {
@@ -144792,9 +147019,9 @@ function commandShell(command, platform = process.platform, env = process.env) {
 }
 function shellPath() {
   const fromEnv = process.env.SHELL;
-  if (fromEnv && existsSync21(fromEnv)) return fromEnv;
+  if (fromEnv && existsSync24(fromEnv)) return fromEnv;
   for (const candidate of ["/bin/zsh", "/bin/bash", "/bin/sh"]) {
-    if (existsSync21(candidate)) return candidate;
+    if (existsSync24(candidate)) return candidate;
   }
   return process.platform === "win32" ? "powershell.exe" : "/bin/sh";
 }
@@ -144941,9 +147168,9 @@ var CommandRunner = class {
 };
 
 // packages/agent-host/src/updates.ts
-import { execFile as execFile9, execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync22, readFileSync as readFileSync17 } from "node:fs";
-import { join as join48 } from "node:path";
+import { execFile as execFile13, execFileSync as execFileSync3 } from "node:child_process";
+import { existsSync as existsSync25, readFileSync as readFileSync20 } from "node:fs";
+import { join as join53 } from "node:path";
 var REGISTRY_URL = `https://registry.npmjs.org/${APP_SLUG}/latest`;
 var CHECK_INTERVAL_MS = 6 * 60 * 60 * 1e3;
 var SCHEDULED_TIMEOUT_MS = 3e3;
@@ -144963,13 +147190,13 @@ function hubUpdatesMachines(f) {
 }
 function existingInstalledCopy() {
   const path2 = installedCopyPath();
-  return existsSync22(path2) ? path2 : null;
+  return existsSync25(path2) ? path2 : null;
 }
 function readInstalledCopyVersion(copy, platform = HOST_PLATFORM) {
   const source = installedCopyVersionSource(copy, platform);
   if (!source) return null;
   try {
-    const text2 = source.kind === "command" ? execFileSync3(source.file, source.args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3, windowsHide: true }) : readFileSync17(join48(copy, source.name), "utf8");
+    const text2 = source.kind === "command" ? execFileSync3(source.file, source.args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3, windowsHide: true }) : readFileSync20(join53(copy, source.name), "utf8");
     return text2.trim() || null;
   } catch {
     return null;
@@ -144998,7 +147225,7 @@ function failureDetail(file2, stderr) {
 function runCommand(file2, args, resolve21) {
   const cmd = commandFor(file2, args, resolve21);
   return new Promise((done2, reject) => {
-    execFile9(cmd.file, cmd.args, { timeout: INSTALL_TIMEOUT_MS, windowsHide: true }, (err, _stdout, stderr) => {
+    execFile13(cmd.file, cmd.args, { timeout: INSTALL_TIMEOUT_MS, windowsHide: true }, (err, _stdout, stderr) => {
       if (!err) return done2();
       if (err.code === "ENOENT") {
         return reject(new Error(`${file2} was not found on PATH (${err.message})`));
@@ -145729,8 +147956,8 @@ var SessionSleeper = class {
 
 // packages/agent-host/src/dev-services/instance-lock.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { readFileSync as readFileSync18, unlinkSync as unlinkSync3, writeFileSync as writeFileSync10 } from "node:fs";
-import { dirname as dirname22, join as join49 } from "node:path";
+import { readFileSync as readFileSync21, unlinkSync as unlinkSync3, writeFileSync as writeFileSync10 } from "node:fs";
+import { dirname as dirname25, join as join54 } from "node:path";
 import Database3 from "better-sqlite3";
 var OWNERSHIP_FILE = "host-ownership.sqlite";
 var held = /* @__PURE__ */ new Set();
@@ -145776,15 +148003,15 @@ function parseHolder(raw) {
 function acquireInstanceLock(dbPath2, startOf = processStartTime, describe4 = {}, now = Date.now) {
   if (dbPath2 === ":memory:") return { ok: true, release: () => {
   } };
-  const lockPath = join49(dirname22(dbPath2), "host.lock");
+  const lockPath = join54(dirname25(dbPath2), "host.lock");
   const readHolder = () => {
     try {
-      return parseHolder(readFileSync18(lockPath, "utf8"));
+      return parseHolder(readFileSync21(lockPath, "utf8"));
     } catch {
       return null;
     }
   };
-  const owner = takeOwnership(join49(dirname22(dbPath2), OWNERSHIP_FILE));
+  const owner = takeOwnership(join54(dirname25(dbPath2), OWNERSHIP_FILE));
   if (!owner) {
     const holder = readHolder();
     const pid = holder && Number.isInteger(holder.pid) && holder.pid > 0 ? holder.pid : null;
@@ -145801,7 +148028,7 @@ function acquireInstanceLock(dbPath2, startOf = processStartTime, describe4 = {}
       if (released) return;
       released = true;
       try {
-        if (parseHolder(readFileSync18(lockPath, "utf8")).pid === process.pid) unlinkSync3(lockPath);
+        if (parseHolder(readFileSync21(lockPath, "utf8")).pid === process.pid) unlinkSync3(lockPath);
       } catch {
       }
       giveUp(owner);
@@ -145880,8 +148107,8 @@ function methodParams(method) {
 var EFFECTS = {
   "agents.deleteSession": (p) => "The session moves to the session archive" + (p.deleteWorktree === true ? ", and its worktree is marked to be deleted when the session is deleted from the archive for good" : "") + (p.deleteExternal === true ? ", and the tool's own conversation file with it" : "") + ".",
   "agents.archiveIfAtRest": () => "The session moves to the session archive if that loses nothing it holds.",
-  "agents.deleteAgentChild": (p) => `The session moves to the session archive, and the worktree on the branch ${plainQuoted(str2(p.worktreeBranch), 120)} is deleted when nothing in it would be lost.`,
-  "agents.deleteOrchestratorSkill": (p) => `The orchestrator skill ${plainQuoted(str2(p.name), 120)} is deleted.`,
+  "agents.deleteAgentChild": (p) => `The session moves to the session archive, and the worktree on the branch ${plainQuoted(str3(p.worktreeBranch), 120)} is deleted when nothing in it would be lost.`,
+  "agents.deleteOrchestratorSkill": (p) => `The orchestrator skill ${plainQuoted(str3(p.name), 120)} is deleted.`,
   "projects.delete": () => "Centralu's records of the project are erased: its sessions, their conversations, its search index and approval rules. Its folder stays.",
   "apps.remove": () => "The app's folder moves to app-trash in the data folder, and it is taken off every session it was attached to.",
   "machines.remove": () => "The machine is unlinked: its sessions and projects leave this computer's lists.",
@@ -145942,7 +148169,7 @@ var quoted3 = (name) => plainQuoted(name, 120);
 function fields2(v) {
   return v !== null && typeof v === "object" && !Array.isArray(v) ? { ...v } : {};
 }
-var str2 = (v) => typeof v === "string" ? v : "";
+var str3 = (v) => typeof v === "string" ? v : "";
 
 // packages/agent-host/src/host-requests.ts
 var HOST_REQUEST_LIMITS = { maxOpen: 8, lifetimeMs: 15 * 6e4, windowGoneMs: 3e4 };
@@ -145976,9 +148203,9 @@ var HostRequests = class {
     const p = fields3(params);
     switch (method) {
       case "trash.purge":
-        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str3(p.sessionId), what: "session" }, () => ({ ok: true }));
+        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str4(p.sessionId), what: "session" }, () => ({ ok: true }));
       case "trash.purgeSubagentSteps":
-        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str3(p.sessionId), what: "steps" }, () => ({ ok: true }));
+        return this.viaTrash(method, from, signal, { action: "delete", sessionId: str4(p.sessionId), what: "steps" }, () => ({ ok: true }));
       case "trash.empty":
         return this.viaTrash(method, from, signal, { action: "empty" }, (purged, text2, failed3) => ({ purged, failed: failed3, text: text2 }));
       default:
@@ -146073,7 +148300,7 @@ var HostRequests = class {
         return r;
       } catch (e) {
         if (m === "trash.purge") {
-          const sessionId = str3(fields3(p).sessionId);
+          const sessionId = str4(fields3(p).sessionId);
           failed3.push({ sessionId, name: names.get(sessionId) ?? sessionId, error: e instanceof Error ? e.message : String(e) });
         }
         throw e;
@@ -146121,7 +148348,7 @@ var HostRequests = class {
 function fields3(params) {
   return params !== null && typeof params === "object" && !Array.isArray(params) ? { ...params } : {};
 }
-var str3 = (v) => typeof v === "string" ? v : "";
+var str4 = (v) => typeof v === "string" ? v : "";
 function refusalOf(outcome) {
   if (outcome === "too_many_requests" || outcome === "no_window") return outcome;
   return outcome === "denied" ? "denied" : outcome === "expired" ? "expired" : "withdrawn";
@@ -146331,7 +148558,7 @@ var Shutdown = class {
 var SHUTDOWN_BOUND_MS = 1e4;
 
 // packages/agent-host/src/lifecycle/endings.ts
-import { appendFileSync as appendFileSync2 } from "node:fs";
+import { appendFileSync as appendFileSync3 } from "node:fs";
 var SIGNALS = ["SIGINT", "SIGTERM", "SIGHUP"];
 var REPEAT_AFTER_MS = 1e3;
 function deliberateRepeat(first, now) {
@@ -146380,7 +148607,7 @@ function crashRecorder(path2, log, maxBytes = MAX_LOG_BYTES) {
     log(`[agent-host] ${kind} ${detail}`);
     try {
       rotateIfLarge(path2, maxBytes);
-      appendFileSync2(path2, `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind}: ${detail}
+      appendFileSync3(path2, `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind}: ${detail}
 `);
     } catch {
     }
@@ -146415,17 +148642,17 @@ function wireEndings(o) {
 
 // packages/agent-host/src/lifecycle/stopped-mark.ts
 import { rmSync as rmSync7, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join50 } from "node:path";
+import { join as join55 } from "node:path";
 var STOPPED_MARK_FILE = "stopped.json";
 function clearStoppedMark(dataDir) {
   try {
-    rmSync7(join50(dataDir, STOPPED_MARK_FILE), { force: true });
+    rmSync7(join55(dataDir, STOPPED_MARK_FILE), { force: true });
   } catch {
   }
 }
 function markQuit(dataDir, now = Date.now()) {
   try {
-    writeFileSync11(join50(dataDir, STOPPED_MARK_FILE), `${JSON.stringify({ v: 1, by: "quit", at: now })}
+    writeFileSync11(join55(dataDir, STOPPED_MARK_FILE), `${JSON.stringify({ v: 1, by: "quit", at: now })}
 `);
   } catch {
   }
@@ -146566,7 +148793,7 @@ async function runDrain(bound, deps) {
 }
 
 // packages/agent-host/src/links/install.ts
-import { existsSync as existsSync23, readFileSync as readFileSync19 } from "node:fs";
+import { existsSync as existsSync26, readFileSync as readFileSync22 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 import { gzipSync } from "node:zlib";
@@ -146575,7 +148802,7 @@ import { gzipSync } from "node:zlib";
 import { createPublicKey, verify } from "node:crypto";
 var NPM_REGISTRY = "https://registry.npmjs.org";
 var PACKAGE_NAME = /^(@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
-var VERSION = /^[0-9A-Za-z][0-9A-Za-z.+-]{0,63}$/;
+var VERSION2 = /^[0-9A-Za-z][0-9A-Za-z.+-]{0,63}$/;
 var NotPublished = class extends Error {
   constructor(id3) {
     super(`${id3} is not on the npm registry`);
@@ -146596,7 +148823,7 @@ async function getJson(url2, f, id3) {
   return res.json();
 }
 async function verifiedPackage(name, version2, opts = {}) {
-  if (!PACKAGE_NAME.test(name) || !VERSION.test(version2)) throw new Error(`Not a package to install: ${name}@${version2}`);
+  if (!PACKAGE_NAME.test(name) || !VERSION2.test(version2)) throw new Error(`Not a package to install: ${name}@${version2}`);
   const registry2 = (opts.registry ?? NPM_REGISTRY).replace(/\/+$/, "");
   const f = opts.fetch ?? globalThis.fetch;
   const now = opts.now?.() ?? Date.now();
@@ -146694,7 +148921,7 @@ function updateNodeSentence(o) {
 // packages/agent-host/src/links/tunnel.ts
 import { execFileSync as execFileSync5, spawn as spawn5 } from "node:child_process";
 import { createConnection as createConnection2, createServer as createServer3 } from "node:net";
-import { win32 as win328 } from "node:path";
+import { win32 as win329 } from "node:path";
 import { hostname as hostname3 } from "node:os";
 
 // packages/agent-host/src/links/ssh-run.ts
@@ -147315,8 +149542,8 @@ function ansiText(bytes2) {
     ansiDecoder = null;
     if (process.platform !== "win32") return null;
     try {
-      const root3 = process.env.SystemRoot && win328.isAbsolute(process.env.SystemRoot) ? process.env.SystemRoot : "C:\\Windows";
-      const out = execFileSync5(win328.join(root3, "System32", "reg.exe"), ["query", "HKLM\\SYSTEM\\CurrentControlSet\\Control\\Nls\\CodePage", "/v", "ACP"], { encoding: "utf8", timeout: 5e3, windowsHide: true });
+      const root3 = process.env.SystemRoot && win329.isAbsolute(process.env.SystemRoot) ? process.env.SystemRoot : "C:\\Windows";
+      const out = execFileSync5(win329.join(root3, "System32", "reg.exe"), ["query", "HKLM\\SYSTEM\\CurrentControlSet\\Control\\Nls\\CodePage", "/v", "ACP"], { encoding: "utf8", timeout: 5e3, windowsHide: true });
       const page = /\bACP\s+REG_SZ\s+(\d+)/.exec(out)?.[1];
       if (page) ansiDecoder = new TextDecoder(CODE_PAGE_NAMES[page] ?? `windows-${page}`, { fatal: true });
     } catch {
@@ -147606,7 +149833,7 @@ async function installRemote(o) {
 function bundled(name, source) {
   for (const url2 of [new URL(`./${name}`, import.meta.url), new URL(source, import.meta.url)]) {
     const file2 = fileURLToPath6(url2);
-    if (existsSync23(file2)) return readFileSync19(file2, "utf8");
+    if (existsSync26(file2)) return readFileSync22(file2, "utf8");
   }
   throw new Error(`${name} is missing from this host`);
 }
@@ -147677,7 +149904,7 @@ async function removeAutostart(c) {
 }
 
 // packages/agent-host/src/links/machine-ids.ts
-import { randomBytes as randomBytes9 } from "node:crypto";
+import { randomBytes as randomBytes10 } from "node:crypto";
 function isMachineId(value) {
   return MACHINE_ID_RE.test(value);
 }
@@ -147705,10 +149932,10 @@ function decodeNumber(value) {
 }
 function newMachineId(name, taken) {
   const slug = name.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^[^a-z]+/, "").replace(/-+$/, "").slice(0, 24);
-  const base2 = slug && MACHINE_ID_RE.test(slug) ? slug : `m-${randomBytes9(3).toString("hex")}`;
+  const base2 = slug && MACHINE_ID_RE.test(slug) ? slug : `m-${randomBytes10(3).toString("hex")}`;
   if (!taken.has(base2)) return base2;
   for (let i = 2; i < 1e3; i++) if (!taken.has(`${base2}-${i}`)) return `${base2}-${i}`;
-  return `m-${randomBytes9(4).toString("hex")}`;
+  return `m-${randomBytes10(4).toString("hex")}`;
 }
 
 // packages/agent-host/src/links/qualifier.ts
@@ -149438,14 +151665,14 @@ var LinkedMachine = class extends LinkedMachineConnection {
    * again at once, and finds the managed launcher first
    */
   async install() {
-    const pick3 = await this.versionToInstall();
-    return this.operate("install", pick3.version, async (c, installer) => {
-      if (pick3.note) this.deps.log?.(`[links] ${this.name}: ${pick3.note}`);
+    const pick4 = await this.versionToInstall();
+    return this.operate("install", pick4.version, async (c, installer) => {
+      if (pick4.note) this.deps.log?.(`[links] ${this.name}: ${pick4.note}`);
       const r = await installRemote({
         exec: c.exec,
         spec: c.spec,
         target: c.target,
-        version: pick3.version,
+        version: pick4.version,
         runtime: installer.runtime(),
         script: c.script,
         registry: installer.registry,
@@ -149454,7 +151681,7 @@ var LinkedMachine = class extends LinkedMachineConnection {
       });
       this.removedByPerson = false;
       this.deps.log?.(`[links] ${this.name}: installed Centralu ${r.current.version} on Node ${r.current.node}${r.previous ? `; ${r.previous.version} kept to roll back to` : ""}`);
-      return { ...this.installedNow(r), ...pick3.note ? { note: pick3.note } : {} };
+      return { ...this.installedNow(r), ...pick4.note ? { note: pick4.note } : {} };
     });
   }
   /**
@@ -149468,22 +151695,22 @@ var LinkedMachine = class extends LinkedMachineConnection {
   }
   async updateNow(opts) {
     if (opts.unasked === true) await this.probeActivity();
-    const pick3 = await this.versionToInstall();
+    const pick4 = await this.versionToInstall();
     const there = this.versions?.remote.version;
-    if (there && releaseOf(there) !== pick3.version && isNewerVersion(there, pick3.version)) {
-      throw linkError2(`${this.name} runs Centralu ${there}, newer than ${pick3.version}, the version this computer would install; updating would downgrade it, so nothing was changed`);
+    if (there && releaseOf(there) !== pick4.version && isNewerVersion(there, pick4.version)) {
+      throw linkError2(`${this.name} runs Centralu ${there}, newer than ${pick4.version}, the version this computer would install; updating would downgrade it, so nothing was changed`);
     }
-    return this.operate("update", pick3.version, async (c, installer) => {
-      if (pick3.note) this.deps.log?.(`[links] ${this.name}: ${pick3.note}`);
+    return this.operate("update", pick4.version, async (c, installer) => {
+      if (pick4.note) this.deps.log?.(`[links] ${this.name}: ${pick4.note}`);
       c.beforeStop = () => this.beforeStop(c, opts.when ?? "idle", opts.unasked === true);
       const r = await updateRemote(c, {
-        version: pick3.version,
+        version: pick4.version,
         runtime: installer.runtime(),
         registry: installer.registry,
         nodeDist: installer.nodeDist
       });
       this.deps.log?.(`[links] ${this.name}: updated to Centralu ${r.current.version}${r.previous ? `; ${r.previous.version} kept to roll back to` : ""}`);
-      const note = [pick3.note, r.note].filter(Boolean).join(" ");
+      const note = [pick4.note, r.note].filter(Boolean).join(" ");
       return { ...this.installedNow(r), ...note ? { note } : {} };
     });
   }
@@ -149546,42 +151773,48 @@ var LinkedMachine = class extends LinkedMachineConnection {
       let shown3 = null;
       let seen = false;
       let blind = 0;
-      const show = (step, why) => {
-        if (shown3 === step) return;
-        shown3 = step;
-        c.step(step);
+      const show = (step, why, count) => {
+        const key = `${step}:${count ?? ""}`;
+        if (shown3 === key) return;
+        shown3 = key;
+        c.step(step, count);
         this.deps.log?.(`[links] ${this.name}: ${why}`);
       };
       const unread = () => show("wait_unread", "what runs there cannot be read now; the update keeps waiting, since the sessions there may be in a turn (Cancel ends it)");
-      const busy = (n) => show("wait_idle", `the update waits for ${n} ${n === 1 ? "session" : "sessions"} in a turn`);
+      const busy = (a) => {
+        const turns = turnsRunning(a);
+        const n = open6(a);
+        if (turns > 0) show("wait_idle", `the update waits for ${turns} ${turns === 1 ? "session" : "sessions"} in a turn`, turns);
+        else show("wait_open", `the update waits for ${n} open ${n === 1 ? "terminal or project command" : "terminals and project commands"}, which an update this computer starts by itself closes none of`, n);
+      };
       const open6 = (a) => unasked ? a.terminals + a.commandRuns : 0;
       const holding = (a) => turnsRunning(a) + open6(a);
       let openSince = null;
+      const now = this.deps.now ?? Date.now;
       const openLimit = this.deps.openWorkWaitMs ?? OPEN_WORK_WAIT_MS;
       for (; ; ) {
         const r = await read();
         if (r.activity) {
           seen = true;
           blind = 0;
-          if (turnsRunning(r.activity) === 0 && open6(r.activity) > 0) {
-            openSince ??= Date.now();
-            if (Date.now() - openSince >= openLimit) {
+          if (open6(r.activity) > 0) {
+            openSince ??= now();
+            if (now() - openSince >= openLimit) {
               throw new Error(
                 `Terminals or project commands stayed open on ${this.name}, and an update this computer starts by itself closes none of them; nothing was switched`
               );
             }
           } else openSince = null;
-          const running2 = holding(r.activity);
-          if (running2 === 0) {
+          if (holding(r.activity) === 0) {
             await pause(settle, wait.signal);
             const again = await read();
             if (again.activity && holding(again.activity) === 0) {
               if (shown3) c.step("stop");
               return null;
             }
-            if (again.activity) busy(holding(again.activity));
+            if (again.activity) busy(again.activity);
             else unread();
-          } else busy(running2);
+          } else busy(r.activity);
         } else if (seen) {
           unread();
         } else if (r.cannot || ++blind > ACTIVITY_UNREAD_RETRIES) {
@@ -149754,13 +151987,13 @@ var LinkedMachine = class extends LinkedMachineConnection {
    * may be removing
    */
   async autostart(on2) {
-    const exec7 = this.tunnel.exec?.bind(this.tunnel);
-    if (!exec7) throw linkError2(`This computer has no shell on ${this.name} to change how it starts`);
+    const exec11 = this.tunnel.exec?.bind(this.tunnel);
+    if (!exec11) throw linkError2(`This computer has no shell on ${this.name} to change how it starts`);
     const action = on2 === void 0 ? "status" : on2 ? "on" : "off";
     const done2 = this.begin("autostart", action, null);
     let state;
     try {
-      const a = await autostartRemote({ exec: exec7, spec: this.record.remote, target: this.record.sshTarget }, action);
+      const a = await autostartRemote({ exec: exec11, spec: this.record.remote, target: this.record.sshTarget }, action);
       state = { on: a.on, how: a.how, linger: a.linger };
       this.bootStart = state;
       if (on2 !== void 0) {
@@ -149882,9 +152115,9 @@ var LinkedMachine = class extends LinkedMachineConnection {
     const tunnelExec = this.tunnel.exec.bind(this.tunnel);
     const done2 = this.begin(kind, null, target);
     const at2 = Date.now();
-    const step = (s) => {
+    const step = (s, count) => {
       this.deps.log?.(`[links] ${this.name}: ${kind}${target ? ` ${target}` : ""}: ${s}`);
-      this.operation = { kind, step: s, target, at: at2 };
+      this.operation = { kind, step: s, target, at: at2, ...count === void 0 ? {} : { count } };
       this.deps.broadcast({ type: "machine_status", machine: this.info() });
     };
     let result;
@@ -149903,7 +152136,7 @@ var LinkedMachine = class extends LinkedMachineConnection {
     return result && typeof result === "object" && "machine" in result ? { ...result, machine: this.info() } : result;
   }
   /** What update.ts runs things there with */
-  control(exec7, script, step) {
+  control(exec11, script, step) {
     const hold = async () => {
       this.held = true;
       this.clearRetry();
@@ -149914,7 +152147,7 @@ var LinkedMachine = class extends LinkedMachineConnection {
       this.setStatus("updating", null);
     };
     return {
-      exec: exec7,
+      exec: exec11,
       spec: this.record.remote,
       target: this.record.sshTarget,
       script,
@@ -150037,9 +152270,9 @@ function probeTarget(target, opts = {}) {
 }
 
 // packages/agent-host/src/links/ssh-config.ts
-import { readdirSync as readdirSync11, readFileSync as readFileSync20, statSync as statSync15 } from "node:fs";
-import { homedir as homedir15 } from "node:os";
-import { isAbsolute as isAbsolute10, join as join51, normalize, parse as parse5, sep as sep11 } from "node:path";
+import { readdirSync as readdirSync14, readFileSync as readFileSync23, statSync as statSync15 } from "node:fs";
+import { homedir as homedir16 } from "node:os";
+import { isAbsolute as isAbsolute11, join as join56, normalize, parse as parse5, sep as sep11 } from "node:path";
 var MAX_DEPTH = 16;
 function splitConfigLine(raw) {
   const m = /^\s*([^\s=#]+)\s*(?:=\s*)?([\s\S]*)$/.exec(raw);
@@ -150105,19 +152338,19 @@ function expandGlob(path2) {
     const next = [];
     for (const base2 of found) {
       if (!MAGIC.test(seg)) {
-        next.push(join51(base2, seg));
+        next.push(join56(base2, seg));
         continue;
       }
       let names;
       try {
-        names = readdirSync11(base2);
+        names = readdirSync14(base2);
       } catch {
         continue;
       }
       const re2 = segmentRe(seg);
       for (const name of names.sort()) {
         if (name.startsWith(".") && !seg.startsWith(".")) continue;
-        if (re2.test(name)) next.push(join51(base2, name));
+        if (re2.test(name)) next.push(join56(base2, name));
       }
     }
     found = next;
@@ -150147,7 +152380,7 @@ function readSshConfig(opts) {
     }
     let text2;
     try {
-      text2 = readFileSync20(file2, "utf8");
+      text2 = readFileSync23(file2, "utf8");
     } catch (err) {
       if (depth > 0 && err.code !== "ENOENT") notes.push(`${tildePath(file2, opts.home)} could not be read`);
       return;
@@ -150172,11 +152405,11 @@ function readSshConfig(opts) {
         }
         for (const arg of split2.args) {
           let path2 = arg;
-          if (path2.startsWith("~/") || process.platform === "win32" && path2.startsWith("~\\")) path2 = join51(opts.home, path2.slice(2));
+          if (path2.startsWith("~/") || process.platform === "win32" && path2.startsWith("~\\")) path2 = join56(opts.home, path2.slice(2));
           else if (path2.startsWith("~")) {
             notes.push(`An Include of another user's folder (${where2(file2, n + 1)}) was not read`);
             continue;
-          } else if (!isAbsolute10(path2)) path2 = join51(opts.home, ".ssh", path2);
+          } else if (!isAbsolute11(path2)) path2 = join56(opts.home, ".ssh", path2);
           for (const f of expandGlob(path2)) read(f, depth + 1);
         }
       }
@@ -150222,8 +152455,8 @@ function resolveAlias(alias, opts = {}) {
 var MAX_HOSTS = 100;
 var RESOLVE_AT_ONCE = 8;
 async function listSshHosts(opts = {}) {
-  const home = opts.home ?? homedir15();
-  const file2 = opts.configFile ?? join51(home, ".ssh", "config");
+  const home = opts.home ?? homedir16();
+  const file2 = opts.configFile ?? join56(home, ".ssh", "config");
   const read = readSshConfig({ file: file2, home });
   const notes = [...read.notes];
   const listed2 = read.hosts.slice(0, MAX_HOSTS);
@@ -151759,7 +153992,7 @@ function keepUnseen(ordered, kept) {
 }
 
 // packages/agent-host/src/links/stored.ts
-import { randomBytes as randomBytes10 } from "node:crypto";
+import { randomBytes as randomBytes11 } from "node:crypto";
 function storeRegistry(store2) {
   return {
     list: () => store2.machines.listLinkedMachines(),
@@ -151775,7 +154008,7 @@ var HUB_SELF_ID = /^hub-[0-9a-f]{8}$/;
 function hubSelfId(store2) {
   const kept = store2.settings.appSetting(HUB_SELF_KEY);
   if (kept && HUB_SELF_ID.test(kept)) return kept;
-  const made = `hub-${randomBytes10(4).toString("hex")}`;
+  const made = `hub-${randomBytes11(4).toString("hex")}`;
   store2.settings.updateAppSetting(HUB_SELF_KEY, (current) => current !== null && HUB_SELF_ID.test(current) ? current : made);
   return store2.settings.appSetting(HUB_SELF_KEY) ?? made;
 }
@@ -151896,8 +154129,8 @@ function reverseCalls(o) {
 }
 
 // packages/agent-host/src/lifecycle/work-job.ts
-import { execFile as execFile10 } from "node:child_process";
-import { promisify as promisify8 } from "node:util";
+import { execFile as execFile14 } from "node:child_process";
+import { promisify as promisify12 } from "node:util";
 var WORK_JOB_LIMITS = 8192;
 var JOIN_SCRIPT = (pid, limits) => `
 $ErrorActionPreference = 'Stop'
@@ -151937,7 +154170,7 @@ public static class CentraluWorkJob {
 '@
 [CentraluWorkJob]::Join(${pid}, ${limits})
 `;
-var run3 = promisify8(execFile10);
+var run3 = promisify12(execFile14);
 var REAL_OS2 = {
   needed: endsWorkWithJob(),
   powershell: async (script) => {
@@ -151969,7 +154202,7 @@ function workJobLine(job) {
 
 // packages/agent-host/src/dev-services/broker-pty.ts
 import { spawn as startProcess } from "node:child_process";
-import { existsSync as existsSync24 } from "node:fs";
+import { existsSync as existsSync27 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 import { createInterface as createInterface2 } from "node:readline";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
@@ -151995,7 +154228,7 @@ function parseBrokerEvent(line) {
 }
 function brokerPath() {
   const path2 = fileURLToPath7(new URL("./pty-broker.mjs", import.meta.url));
-  if (!existsSync24(path2)) throw new Error(`terminal broker not found: ${path2}`);
+  if (!existsSync27(path2)) throw new Error(`terminal broker not found: ${path2}`);
   return path2;
 }
 var BrokerPty = class {
@@ -152151,7 +154384,7 @@ function brokerPtyModule(broker, fallback = loadNodePty) {
 }
 
 // packages/agent-host/src/elevation.ts
-import { execFile as execFile11 } from "node:child_process";
+import { execFile as execFile15 } from "node:child_process";
 function detectToken(o = {}) {
   const source = elevationSource(o.platform ?? HOST_PLATFORM, o.env ?? process.env);
   if (source.kind === "uid") {
@@ -152159,7 +154392,7 @@ function detectToken(o = {}) {
     return Promise.resolve({ elevated: getuid ? getuid() === 0 : null, logon: null });
   }
   const run4 = o.run ?? ((file2, args) => new Promise(
-    (resolve21, reject) => execFile11(file2, args, { windowsHide: true, timeout: 1e4, encoding: "utf8" }, (err, stdout) => err ? reject(err) : resolve21(stdout))
+    (resolve21, reject) => execFile15(file2, args, { windowsHide: true, timeout: 1e4, encoding: "utf8" }, (err, stdout) => err ? reject(err) : resolve21(stdout))
   ));
   return run4(source.file, source.args).then(
     (out) => ({ elevated: elevatedFromGroups(out), logon: logonFromGroups(out) }),
@@ -152184,7 +154417,7 @@ var handedToken = launch.tokenOnStdin ? await readHandedToken(process.stdin).cat
   console.error(`[agent-host] the launcher did not hand over the token: ${e.message}`);
   process.exit(1);
 }) : launch.token;
-var BUILD = true ? "bd398a1" : "dev";
+var BUILD = true ? "f369f5c" : "dev";
 var { values } = parseArgs({
   options: {
     port: { type: "string", default: "5175" },
@@ -152198,24 +154431,24 @@ var { values } = parseArgs({
   }
 });
 var control = launch.underKeeper ? new ControlChannel(process.stdin) : null;
-var token = values.token || handedToken || randomBytes11(16).toString("hex");
+var token = values.token || handedToken || randomBytes12(16).toString("hex");
 var keeperToken = launch.underKeeper && !values.token && handedToken ? token : null;
-var httpSecret = keeperToken ? deriveHttpSecret(keeperToken) : randomBytes11(32).toString("base64url");
+var httpSecret = keeperToken ? deriveHttpSecret(keeperToken) : randomBytes12(32).toString("base64url");
 start.at("data folder");
 var movedNote = null;
 function defaultDbPath() {
   const { dir, legacy } = chooseDataDir();
   movedNote = legacy && migrateLegacyDataDir(legacy, dir) ? `[agent-host] data folder moved: ${legacy} -> ${dir}` : null;
-  mkdirSync19(dir, { recursive: true });
+  mkdirSync20(dir, { recursive: true });
   process.env.CC_DATA_DIR = dir;
-  return join52(dir, "store.db");
+  return join57(dir, "store.db");
 }
 var dbPath = values.memory ? ":memory:" : values.db ?? defaultDbPath();
 var privateFolder = privateDataFolderFor(dbPath);
 var madePrivate = privateFolder ? keepDataFolderPrivate(privateFolder) : [];
 start.at("log");
 var stopLog = dbPath === ":memory:" ? () => {
-} : teeStderrToFile(hostLogPath(dirname23(dbPath)));
+} : teeStderrToFile(hostLogPath(dirname26(dbPath)));
 if (dbPath !== ":memory:") console.error(startupBanner({ build: BUILD, db: dbPath, pid: process.pid }));
 if (movedNote) console.error(movedNote);
 if (madePrivate.length > 0) console.error(`[agent-host] data folder made private: ${madePrivate.join(", ")}`);
@@ -152262,7 +154495,7 @@ if (!lock.ok) {
 }
 var ownership = lock;
 process.on("exit", ownership.release);
-if (dbPath !== ":memory:") clearStoppedMark(dirname23(dbPath));
+if (dbPath !== ":memory:") clearStoppedMark(dirname26(dbPath));
 start.at("hold signals");
 var signals = holdSignals(process, (line) => console.error(line));
 start.at("store");
@@ -152279,7 +154512,7 @@ start.at("work job");
 var workJobSaid = workJobLine(await workJob);
 if (workJobSaid) console.error(workJobSaid);
 start.at("keeper children");
-var held2 = launch.underKeeper ? await connectHeldChildren(dirname23(dbPath)) : null;
+var held2 = launch.underKeeper ? await connectHeldChildren(dirname26(dbPath)) : null;
 start.at("services");
 var screens = new Gate();
 var events = new Gate();
@@ -152296,7 +154529,7 @@ var mgr = new SessionManager(
   },
   (sessionId) => bridgeAddress(launch.frontDoor, port, token, sessionId),
   // Worktrees are created next to the data folder — dev and the packaged app never touch each other's worktrees
-  join52(dirname23(dbPath), "worktrees"),
+  join57(dirname26(dbPath), "worktrees"),
   held2 ? { processes: held2.processes, keptSessions: held2.kept.sessionIds } : {}
 );
 mgr.useProjectsHome(() => projectsHome());
@@ -152390,6 +154623,8 @@ mail.onChange((c) => events.push({ type: "mail_changed", threadId: c.threadId, t
 mgr.useMail({
   askedBy: (id3) => askedBy(askedByHost, mailTurns, id3),
   sessionGone: (id3) => void mail.sessionGone(id3),
+  handOver: (from, to, which) => mail.handOver(from, to, which),
+  handOverPreview: (from, to) => mail.handOverPreview(from, to),
   openWork: (id3) => mail.openWorkOf(id3),
   sessionChanged: (id3) => mailDelivery.poke(id3),
   sessionEvent: (e, ended) => mailTurns.observe(e, ended),
@@ -152444,7 +154679,7 @@ var installByDefault = installsByDefault({
   env: process.env
 });
 var { auto: autoUpdateCheck, autoApply: autoApplyUpdates } = updateSwitches(store.settings, { installByDefault });
-var themes = new ThemeFiles(join52(dataRoot(), "themes"), () => events.push({ type: "themes_changed" }));
+var themes = new ThemeFiles(join57(dataRoot(), "themes"), () => events.push({ type: "themes_changed" }));
 await themes.start().catch((e) => console.error(`[themes] the themes folder is unavailable: ${e.message}`));
 var updates = new UpdateService((status) => events.push({ type: "update_status", status }), {
   // A host from source never installs by itself, whatever is stored (#1501 review, `installsByItself`)
@@ -152758,13 +154993,13 @@ var endings = wireEndings({
   heldChildren: held2 !== null,
   leave: (mode, handOver) => void shutdown.leave(mode, handOver),
   force: (why) => shutdown.force(why),
-  record: crashRecorder(join52(dirname23(dbPath), "host-errors.log"), (line) => console.error(line)),
+  record: crashRecorder(join57(dirname26(dbPath), "host-errors.log"), (line) => console.error(line)),
   stdin: process.stdin,
   watchParent: values["watch-parent"] === true,
   log: (line) => console.error(line),
   // The person quit Centralu here: a linked hub must not start a host in this folder by itself (#1143)
   quit: () => {
-    if (dbPath !== ":memory:") markQuit(dirname23(dbPath));
+    if (dbPath !== ":memory:") markQuit(dirname26(dbPath));
   }
 });
 stopNow = endings.stopAsked;