@chibitek/chibi 0.1.169 → 0.1.171

package/dist-server/openmausbot.js

@@ -16312,6 +16312,7 @@ var init_proxy_paths = __esm({
       hook: resolveProxy("hooks/omb-hook"),
       // the RTK add-on's Claude PreToolUse hook (bypassPermissions turns only)
       rtkHook: resolveProxy("hooks/rtk-hook"),
+      planHook: resolveProxy("hooks/plan-hook"),
       // Loaded by the external `pi` process via `-e`, not by this server — but
       // resolved through the same single source of truth so the packaged layout
       // check can assert it ships.
@@ -16436,8 +16437,8 @@ function pathExts(host) {
 }
 function whichWindows(name, host) {
   const exts = pathExts(host);
-  const probe = (base3) => {
-    const order = extname(base3) ? [base3, ...exts.map((e) => base3 + e)] : [...exts.map((e) => base3 + e), base3];
+  const probe = (base2) => {
+    const order = extname(base2) ? [base2, ...exts.map((e) => base2 + e)] : [...exts.map((e) => base2 + e), base2];
     return order.find((p3) => host.isFile(p3)) ?? null;
   };
   if (isPathLike(name)) return probe(name);
@@ -16584,8 +16585,8 @@ import { homedir as homedir4 } from "node:os";
 import { delimiter as delimiter3, join as join9, posix as posix4, win32 as win322 } from "node:path";
 function nvmBinDirs() {
   try {
-    const base3 = join9(homedir4(), ".nvm", "versions", "node");
-    return readdirSync2(base3).filter((v3) => v3.startsWith("v")).sort((a2, b3) => b3.localeCompare(a2, void 0, { numeric: true })).map((v3) => join9(base3, v3, "bin"));
+    const base2 = join9(homedir4(), ".nvm", "versions", "node");
+    return readdirSync2(base2).filter((v3) => v3.startsWith("v")).sort((a2, b3) => b3.localeCompare(a2, void 0, { numeric: true })).map((v3) => join9(base2, v3, "bin"));
   } catch {
     return [];
   }
@@ -19555,7 +19556,7 @@ var init_provider_accounts = __esm({
       // Kimi Code reads its whole data root (login included) from KIMI_CODE_HOME.
       { id: "kimi", kind: "signIn", label: "Kimi Code", billing: "subscription", driver: "kimiAgent", homeEnv: "KIMI_CODE_HOME", loginArgs: ["login"], signupUrl: "https://www.kimi.com/code" },
       // Droid resolves <FACTORY_HOME_OVERRIDE>/.factory, so the folder is a home, not the data root.
-      { id: "droid", kind: "signIn", label: "Factory Droid", billing: "subscription", driver: "droidAgent", homeEnv: "FACTORY_HOME_OVERRIDE", loginArgs: [], signupUrl: "https://factory.ai/pricing" },
+      { id: "droid", kind: "signIn", label: "Factory Droid", billing: "subscription", driver: "droidAgent", homeEnv: "FACTORY_HOME_OVERRIDE", loginArgs: [], signupUrl: "https://factory.com/pricing" },
       {
         id: "anthropic",
         kind: "apiKey",
@@ -19566,7 +19567,7 @@ var init_provider_accounts = __esm({
         icon: "anthropic",
         config: {},
         keyTest: { provider: "anthropic" },
-        keyUrl: "https://console.anthropic.com/settings/keys"
+        keyUrl: "https://platform.claude.com/settings/keys"
       },
       {
         id: "openai",
@@ -19604,7 +19605,7 @@ var init_provider_accounts = __esm({
         envVar: "PERPLEXITY_API_KEY",
         icon: "perplexity",
         config: { url: "https://api.perplexity.ai", apiKeyEnv: "PERPLEXITY_API_KEY", model: "sonar-pro", provider: "" },
-        keyUrl: "https://www.perplexity.ai/account/api/keys"
+        keyUrl: "https://console.perplexity.ai/project/keys"
       },
       {
         // Alibaba's flat-price Qwen Coding Plan: one plan key serves Qwen, GLM, Kimi and MiniMax models.
@@ -19617,7 +19618,7 @@ var init_provider_accounts = __esm({
         icon: "qwen",
         config: { url: "https://coding-intl.dashscope.aliyuncs.com/v1", apiKeyEnv: "QWEN_CODING_PLAN_API_KEY", model: "qwen3.7-plus", provider: "" },
         keyTest: { provider: "openaiCompat", url: "https://coding-intl.dashscope.aliyuncs.com/v1" },
-        keyUrl: "https://modelstudio.console.alibabacloud.com/",
+        keyUrl: "https://modelstudio.console.alibabacloud.com/ap-southeast-1/subscription/coding-plan",
         signupUrl: "https://www.alibabacloud.com/help/en/model-studio/coding-plan"
       },
       {
@@ -19682,7 +19683,7 @@ var init_provider_accounts = __esm({
         driver: "opencodeGo",
         envVar: "OPENCODE_API_KEY",
         config: {},
-        keyUrl: "https://opencode.ai/docs/providers/",
+        keyUrl: "https://opencode.ai/go",
         signupUrl: "https://opencode.ai/go"
       }
     ];
@@ -20130,10 +20131,10 @@ function normalizeVpsConfig(raw) {
   }
   return { sshAlias: alias };
 }
-function suffixedBrowserProfileId(base3, unavailable) {
+function suffixedBrowserProfileId(base2, unavailable) {
   for (let suffix = 2; ; suffix += 1) {
     const ending = `-${suffix}`;
-    const candidate = `${base3.slice(0, 40 - ending.length)}${ending}`;
+    const candidate = `${base2.slice(0, 40 - ending.length)}${ending}`;
     if (candidate !== "guest" && !unavailable.has(candidate)) return candidate;
   }
 }
@@ -20143,25 +20144,25 @@ function migrateStoredBrowserProfiles(profiles) {
   const canonicalIds = Array(profiles.length).fill(void 0);
   const used = /* @__PURE__ */ new Set();
   const baseOwner = /* @__PURE__ */ new Map();
-  rawBases.forEach((base3, index) => {
-    if (base3 === "guest") return;
-    const current = baseOwner.get(base3);
-    if (current === void 0 || profiles[index].id === base3 && profiles[current].id !== base3) {
-      baseOwner.set(base3, index);
+  rawBases.forEach((base2, index) => {
+    if (base2 === "guest") return;
+    const current = baseOwner.get(base2);
+    if (current === void 0 || profiles[index].id === base2 && profiles[current].id !== base2) {
+      baseOwner.set(base2, index);
     }
   });
-  for (const [base3, index] of baseOwner) {
-    canonicalIds[index] = base3;
-    used.add(base3);
+  for (const [base2, index] of baseOwner) {
+    canonicalIds[index] = base2;
+    used.add(base2);
   }
   const reserved = /* @__PURE__ */ new Set([
     "guest",
     ...rawBases,
     ...requestedPartitions.map((partitionId) => partitionId.toLowerCase())
   ]);
-  rawBases.forEach((base3, index) => {
+  rawBases.forEach((base2, index) => {
     if (canonicalIds[index] !== void 0) return;
-    const id = suffixedBrowserProfileId(base3, /* @__PURE__ */ new Set([...reserved, ...used]));
+    const id = suffixedBrowserProfileId(base2, /* @__PURE__ */ new Set([...reserved, ...used]));
     canonicalIds[index] = id;
     used.add(id);
   });
@@ -20497,6 +20498,8 @@ function instanceConfigs(cfg, onDevice = onDeviceFleet(), accountKeys = instance
     }
   }
   for (const [id, fallback] of Object.entries(ATOMIC_FLEET)) {
+    const savedCli = map3[id]?.config?.cli;
+    if (id === "atomic-engine" && map3[id]?.driver === "customAcp" && (savedCli === void 0 || savedCli === "atomic acp")) map3[id] = { ...map3[id], driver: "atomicEngine" };
     if (Object.hasOwn(map3, id)) map3[id] = withFleetDefaults(map3[id], fallback);
   }
   dropEnginesOffPlatform(map3, platform);
@@ -20978,7 +20981,7 @@ var init_config = __esm({
     ];
     configSaveListeners = /* @__PURE__ */ new Set();
     ATOMIC_FLEET = {
-      "atomic-engine": { driver: "customAcp", displayName: "Atomic Engine", config: { cli: "atomic acp" } },
+      "atomic-engine": { driver: "atomicEngine", displayName: "Atomic Engine", config: { cli: "atomic acp" } },
       ollamaCloud: { driver: "ollamaCloud", displayName: "Ollama Cloud" }
     };
   }
@@ -25050,11 +25053,11 @@ function loadedIdsFromPayloads(_host, catalog2, extra) {
   const loaded = /* @__PURE__ */ new Set();
   const catalogIds = new Set(idsFromModelsPayload(catalog2));
   const add = (id) => {
-    const base3 = id.split(":")[0];
-    if (catalogIds.size && !catalogIds.has(id) && !catalogIds.has(base3)) return;
+    const base2 = id.split(":")[0];
+    if (catalogIds.size && !catalogIds.has(id) && !catalogIds.has(base2)) return;
     if (!MODEL_ID.test(id)) return;
     loaded.add(id);
-    if (catalogIds.has(base3)) loaded.add(base3);
+    if (catalogIds.has(base2)) loaded.add(base2);
   };
   if (extra && typeof extra === "object") {
     const rec = extra;
@@ -25238,6 +25241,7 @@ var init_prompt_shape = __esm({
 
 // shared/approval-mode.ts
 function supportsApprovalMode(driverKind, mode) {
+  if (mode === "plan") return ["atomicEngine", "codex", "claudeAgent", "grok", "openai-compat", "minimax", "mistral", "ollamaCloud"].includes(driverKind ?? "");
   if (mode === "custom") return driverKind === "codex";
   if (mode === "edits") return ["claudeAgent", "grokAgent", "antigravityAgent", "qwenAgent", "geminiAgent", "vibeAgent"].includes(driverKind ?? "");
   if (mode !== "full") return true;
@@ -25967,9 +25971,9 @@ var init_engine_failure = __esm({
 
 // server/drivers/retry.ts
 function computeCredentialRefreshBackoff(attempt, random = Math.random) {
-  const base3 = CREDENTIAL_REFRESH_BACKOFF_MS[Math.min(Math.max(attempt, 0), CREDENTIAL_REFRESH_BACKOFF_MS.length - 1)];
-  const jitter = base3 * 0.5;
-  return Math.round(base3 - jitter + random() * jitter * 2);
+  const base2 = CREDENTIAL_REFRESH_BACKOFF_MS[Math.min(Math.max(attempt, 0), CREDENTIAL_REFRESH_BACKOFF_MS.length - 1)];
+  const jitter = base2 * 0.5;
+  return Math.round(base2 - jitter + random() * jitter * 2);
 }
 function isModelRejection(error51, requested) {
   const message2 = error51 instanceof Error ? error51.message : String(error51 ?? "");
@@ -26008,9 +26012,9 @@ function classifyError(err) {
   return { transient: false, reason: "unknown" };
 }
 function computeBackoff(attempt, random = Math.random) {
-  const base3 = BACKOFF_BASE_MS[Math.min(Math.max(attempt, 0), BACKOFF_BASE_MS.length - 1)];
-  const jitter = base3 * 0.25;
-  return Math.round(base3 - jitter + random() * jitter * 2);
+  const base2 = BACKOFF_BASE_MS[Math.min(Math.max(attempt, 0), BACKOFF_BASE_MS.length - 1)];
+  const jitter = base2 * 0.25;
+  return Math.round(base2 - jitter + random() * jitter * 2);
 }
 function interruptibleDelay(ms2, signal) {
   let timer = null;
@@ -26455,7 +26459,7 @@ function createAcpDriver(support12) {
         };
         return support12.sanitizeToolPayload ? sanitizeAcpToolMessage(redacted) : redacted;
       };
-      const base3 = (threadId, turnId) => ({
+      const base2 = (threadId, turnId) => ({
         eventId: newEventId(),
         provider: DRIVER_KIND8,
         threadId,
@@ -26478,7 +26482,7 @@ function createAcpDriver(support12) {
         if (isAntigravityCheckpointReply(DRIVER_KIND8, current.state.text)) {
           ok = false;
           stopReason = "invalid_checkpoint";
-          emit({ ...base3(threadId, current.turnId), type: "runtime.error", message: current.state.text.trim() });
+          emit({ ...base2(threadId, current.turnId), type: "runtime.error", message: current.state.text.trim() });
           closeSession(threadId, "invalid-checkpoint");
         }
         current.flushAssistantText();
@@ -26488,12 +26492,12 @@ function createAcpDriver(support12) {
           finalOk = false;
           finalStopReason = "empty_turn";
           emit({
-            ...base3(threadId, current.turnId),
+            ...base2(threadId, current.turnId),
             type: "runtime.error",
             message: `${DRIVER_KIND8} ended the turn with no reply, image, or tool result`
           });
         }
-        emit({ ...base3(threadId, current.turnId), type: "turn.completed", ok: finalOk, stopReason: finalStopReason, cost: null });
+        emit({ ...base2(threadId, current.turnId), type: "turn.completed", ok: finalOk, stopReason: finalStopReason, cost: null });
         if (session.child.exitCode === null && !session.closing && !session.dead) {
           armIdle(threadId);
         } else if (session.dead && sessions.get(threadId) === session) {
@@ -26660,6 +26664,7 @@ function createAcpDriver(support12) {
           if (msg.method !== "session/request_permission") {
             return send({ jsonrpc: "2.0", id: msg.id, error: { code: -32601, message: "method not found" } });
           }
+          if (current.turn.approvalMode === "plan") return send({ jsonrpc: "2.0", id: msg.id, result: { outcome: { outcome: "cancelled" } } });
           const params = msg.params ?? {};
           current.flushAssistantText();
           const options = Array.isArray(params.options) ? params.options : [];
@@ -26667,7 +26672,7 @@ function createAcpDriver(support12) {
           const optionAlways = options.find((o) => o.kind === "allow_always" && typeof o.optionId === "string")?.optionId ?? null;
           const cancelled = { outcome: { outcome: "cancelled" } };
           const missing = (want) => emit({
-            ...base3(threadId, current.turnId),
+            ...base2(threadId, current.turnId),
             type: "runtime.error",
             message: `${DRIVER_KIND8} offered no "${want}" permission option \u2014 cancelling the request instead of guessing`
           });
@@ -26713,7 +26718,7 @@ function createAcpDriver(support12) {
               result: optionId ? { outcome: { outcome: "selected", optionId } } : cancelled
             });
             emit({
-              ...base3(threadId, current.turnId),
+              ...base2(threadId, current.turnId),
               type: "request.resolved",
               requestId,
               behavior: optionId && isQuestion ? "answer" : optionId && behavior === "allow" ? "allow" : "deny",
@@ -26722,13 +26727,13 @@ function createAcpDriver(support12) {
             });
           };
           const timer = setTimeout(() => {
-            emit({ ...base3(threadId, current.turnId), type: "runtime.error", message: DENY_TIMEOUT_NOTE3 });
+            emit({ ...base2(threadId, current.turnId), type: "runtime.error", message: DENY_TIMEOUT_NOTE3 });
             finish("deny", "timeout");
           }, 15 * 6e4);
           timer.unref?.();
           current.asks.set(requestId, finish);
           emit({
-            ...base3(threadId, current.turnId),
+            ...base2(threadId, current.turnId),
             type: "request.opened",
             requestId,
             requestType: isQuestion ? "question" : "permission",
@@ -26760,7 +26765,7 @@ function createAcpDriver(support12) {
                 current.flushAssistantText();
                 current.state.producedItem = true;
                 emit({
-                  ...base3(threadId, current.turnId),
+                  ...base2(threadId, current.turnId),
                   type: "item.completed",
                   itemType: "assistant_image",
                   data: content.data,
@@ -26768,14 +26773,14 @@ function createAcpDriver(support12) {
                 });
               } else if (typeof delta === "string" && delta) {
                 current.state.text += delta;
-                emit({ ...base3(threadId, current.turnId), type: "content.delta", streamKind: "assistant_text", delta });
+                emit({ ...base2(threadId, current.turnId), type: "content.delta", streamKind: "assistant_text", delta });
               }
               break;
             }
             case "agent_thought_chunk": {
               const delta = u5.content?.text;
               if (typeof delta === "string" && delta) {
-                emit({ ...base3(threadId, current.turnId), type: "content.delta", streamKind: "reasoning_text", delta });
+                emit({ ...base2(threadId, current.turnId), type: "content.delta", streamKind: "reasoning_text", delta });
               }
               break;
             }
@@ -26783,7 +26788,7 @@ function createAcpDriver(support12) {
               current.flushAssistantText();
               if (u5.status !== "completed" && u5.status !== "failed" && typeof u5.toolCallId === "string") current.runningTools.set(u5.toolCallId, Date.now());
               emit({
-                ...base3(threadId, current.turnId),
+                ...base2(threadId, current.turnId),
                 type: "item.started",
                 itemType: "tool",
                 itemId: u5.toolCallId,
@@ -26798,7 +26803,7 @@ function createAcpDriver(support12) {
                 current.runningTools.delete(u5.toolCallId);
                 current.state.producedItem = true;
                 emit({
-                  ...base3(threadId, current.turnId),
+                  ...base2(threadId, current.turnId),
                   type: "item.completed",
                   itemType: "tool",
                   itemId: u5.toolCallId,
@@ -26806,7 +26811,7 @@ function createAcpDriver(support12) {
                   output: toolDetailPreview(u5.rawOutput ?? u5.content)
                 });
                 for (const img of extractMcpImages(u5.content ?? u5.rawOutput)) {
-                  emit({ ...base3(threadId, current.turnId), type: "item.completed", itemType: "assistant_image", data: img.data });
+                  emit({ ...base2(threadId, current.turnId), type: "item.completed", itemType: "assistant_image", data: img.data });
                 }
               }
               break;
@@ -26902,7 +26907,7 @@ function createAcpDriver(support12) {
           session.dead = true;
           const current = session.current;
           if (!current) return;
-          emit({ ...base3(threadId, current.turnId), type: "runtime.error", ...describeSpawnFailure(e, launch.command) });
+          emit({ ...base2(threadId, current.turnId), type: "runtime.error", ...describeSpawnFailure(e, launch.command) });
           settle(threadId, session, false, "spawn_error");
         });
         child.on("close", (code) => {
@@ -26910,7 +26915,7 @@ function createAcpDriver(support12) {
           const current = session.current;
           if (current) {
             emit({
-              ...base3(threadId, current.turnId),
+              ...base2(threadId, current.turnId),
               type: "runtime.error",
               message: `${DRIVER_KIND8} exited ${code} before the prompt result${session.stderr ? `: ${session.stderr.trim().slice(-300)}` : ""}`
             });
@@ -26923,6 +26928,7 @@ function createAcpDriver(support12) {
       };
       const sendTurn = async (turn) => {
         const { threadId } = turn;
+        if (turn.approvalMode === "plan" && !supportsApprovalMode(DRIVER_KIND8, "plan")) throw new Error("Plan is not available for this engine yet");
         if (active.has(threadId)) throw new Error("a turn is already running on this thread");
         const turnConfig = turn.approvalMode === void 0 ? config2 : { ...config2, fullAuto: turn.approvalMode === "full" && supportsApprovalMode(DRIVER_KIND8, "full") };
         const controlsHost = turn.integrations?.localComputer?.scope === "local-computer";
@@ -26933,27 +26939,27 @@ function createAcpDriver(support12) {
         const cwd = turn.cwd ?? turnConfig.workspace ?? homedir7();
         const env = childEnv(turnConfig);
         if (support12.requireAuthenticationBeforeSpawn && !skipSubscriptionAuthForLocalInject(turn.model) && !await support12.isAuthenticated(env, turnConfig, instanceId)) {
-          emit({ ...base3(threadId, turnId), type: "turn.started" });
-          emit({ ...base3(threadId, turnId), type: "runtime.error", message: support12.loginNote, setup: true, failure: "auth_failed" });
-          emit({ ...base3(threadId, turnId), type: "turn.completed", ok: false, stopReason: "auth_required", cost: null });
+          emit({ ...base2(threadId, turnId), type: "turn.started" });
+          emit({ ...base2(threadId, turnId), type: "runtime.error", message: support12.loginNote, setup: true, failure: "auth_failed" });
+          emit({ ...base2(threadId, turnId), type: "turn.completed", ok: false, stopReason: "auth_required", cost: null });
           return { turnId };
         }
         const resolvedModel = support12.resolveTurnModel?.(turn.model, env);
         support12.applyTurnEnv?.(env, { model: resolvedModel, requestedModel: turn.model, fullAuto: turnConfig.fullAuto === true });
         let cliTurn = resolvedModel !== void 0 && resolvedModel !== turn.model ? { ...turn, model: resolvedModel } : turn;
-        const mcpServers = acpMcpServers(turn);
+        const mcpServers = turn.approvalMode === "plan" ? [] : acpMcpServers(turn);
         let launch;
         try {
           launch = support12.resolveCommand ? await support12.resolveCommand(env, turnConfig, instanceId) : { command: turnConfig.cli };
         } catch (error51) {
-          emit({ ...base3(threadId, turnId), type: "turn.started" });
+          emit({ ...base2(threadId, turnId), type: "turn.started" });
           emit({
-            ...base3(threadId, turnId),
+            ...base2(threadId, turnId),
             type: "runtime.error",
             message: error51 instanceof Error ? error51.message : String(error51),
             setup: true
           });
-          emit({ ...base3(threadId, turnId), type: "turn.completed", ok: false, stopReason: "setup_required", cost: null });
+          emit({ ...base2(threadId, turnId), type: "turn.completed", ok: false, stopReason: "setup_required", cost: null });
           return { turnId };
         }
         const spawnArgs = support12.spawnArgs(turnConfig, cliTurn);
@@ -26995,7 +27001,7 @@ function createAcpDriver(support12) {
           if (!nativeModel) return;
           const option = acpVariantOption(result);
           emit({
-            ...base3(threadId, turnId),
+            ...base2(threadId, turnId),
             type: "session.model-variants",
             model: nativeModel === cliTurn.model ? turn.model ?? nativeModel : nativeModel,
             variants: {
@@ -27017,7 +27023,7 @@ function createAcpDriver(support12) {
           state2.text = "";
           if (!text4.trim()) return;
           state2.producedItem = true;
-          emit({ ...base3(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
+          emit({ ...base2(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
         };
         const current = {
           turnId,
@@ -27045,7 +27051,7 @@ function createAcpDriver(support12) {
           }
         };
         active.set(threadId, { stop: () => closeSession(threadId, "stop"), interrupt, turnId, asks });
-        emit({ ...base3(threadId, turnId), type: "turn.started" });
+        emit({ ...base2(threadId, turnId), type: "turn.started" });
         session.current = current;
         (async () => {
           try {
@@ -27163,7 +27169,7 @@ function createAcpDriver(support12) {
               if (sessionStarted) return;
               sessionStarted = true;
               emit({
-                ...base3(threadId, turnId),
+                ...base2(threadId, turnId),
                 type: "session.started",
                 sessionId,
                 model: selectedModel ?? init?._meta?.modelState?.currentModelId ?? cliTurn.model ?? null,
@@ -27218,7 +27224,7 @@ function createAcpDriver(support12) {
                   cliTurn = { ...cliTurn, model: fallback };
                   selectedModel = fallback;
                   emit({
-                    ...base3(threadId, turnId),
+                    ...base2(threadId, turnId),
                     type: "session.model-fallback",
                     requested,
                     model: fallback,
@@ -27271,7 +27277,7 @@ ${instructed.text}` : instructed.text;
             const usage = result?.usage ?? result?._meta ?? {};
             if (typeof usage.inputTokens === "number" || typeof usage.outputTokens === "number") {
               emit({
-                ...base3(threadId, turnId),
+                ...base2(threadId, turnId),
                 type: "thread.token-usage.updated",
                 input: usage.inputTokens ?? 0,
                 output: usage.outputTokens ?? 0
@@ -27283,7 +27289,7 @@ ${instructed.text}` : instructed.text;
             else {
               const errorMessage = typeof result?.error === "string" && result.error ? result.error : typeof result?.message === "string" && result.message ? result.message : `Model turn failed: ${reason ?? "unknown error"}`;
               emit({
-                ...base3(threadId, turnId),
+                ...base2(threadId, turnId),
                 type: "runtime.error",
                 message: errorMessage
               });
@@ -27299,7 +27305,7 @@ ${instructed.text}` : instructed.text;
               const needsAuth = code === "invalid_credentials" || code === "inactive_subscription" || message2 === support12.loginNote || logAuth;
               const failure = needsAuth ? "auth_failed" : stalled ? "stalled" : engineFailureFromCode(code) ?? (isOpaqueRequestRejection(message2) ? "request_rejected" : void 0);
               emit({
-                ...base3(threadId, turnId),
+                ...base2(threadId, turnId),
                 type: "runtime.error",
                 message: message2,
                 ...needsAuth ? { setup: true } : {},
@@ -28543,7 +28549,7 @@ var init_antigravity = __esm({
     AntigravityDriver = {
       ...AcpAntigravityDriver,
       async create(input) {
-        const base3 = await AcpAntigravityDriver.create(input);
+        const base2 = await AcpAntigravityDriver.create(input);
         const auth = new AntigravityAuthController();
         let installFailure;
         const runtimeAndProfile = async () => {
@@ -28557,12 +28563,12 @@ var init_antigravity = __esm({
           return { runtime, profile };
         };
         return {
-          ...base3,
+          ...base2,
           get models() {
-            return base3.models;
+            return base2.models;
           },
           snapshot: async () => {
-            const snapshot = await base3.snapshot();
+            const snapshot = await base2.snapshot();
             if (snapshot.state === "available") installFailure = void 0;
             return snapshot.state === "unavailable" && installFailure ? { ...snapshot, reason: installFailure } : snapshot;
           },
@@ -28585,7 +28591,7 @@ var init_antigravity = __esm({
           cancelAuthentication: async () => auth.cancel(),
           dispose: async () => {
             auth.cancel();
-            await base3.dispose();
+            await base2.dispose();
           }
         };
       }
@@ -28641,7 +28647,7 @@ var init_boxagent = __esm({
         const emit = (event) => {
           for (const l of Array.from(listeners)) l(event);
         };
-        const base3 = (threadId, turnId) => ({
+        const base2 = (threadId, turnId) => ({
           eventId: newEventId(),
           provider: DRIVER_KIND,
           threadId,
@@ -28694,8 +28700,8 @@ var init_boxagent = __esm({
               });
             }
           });
-          emit({ ...base3(threadId, turnId), type: "turn.started" });
-          emit({ ...base3(threadId, turnId), type: "session.started", sessionId: promptId, model });
+          emit({ ...base2(threadId, turnId), type: "turn.started" });
+          emit({ ...base2(threadId, turnId), type: "session.started", sessionId: promptId, model });
           (async () => {
             const seen = /* @__PURE__ */ new Set();
             const startedAt = Date.now();
@@ -28706,14 +28712,14 @@ var init_boxagent = __esm({
               const text4 = pendingText;
               pendingText = "";
               if (!text4.trim()) return;
-              emit({ ...base3(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
+              emit({ ...base2(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
             };
             const ingest = (text4) => {
               const delta = text4.startsWith(lastText) ? text4.slice(lastText.length) : text4;
               lastText = text4;
               if (!delta) return;
               pendingText += delta;
-              emit({ ...base3(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta });
+              emit({ ...base2(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta });
             };
             try {
               for (; ; ) {
@@ -28737,7 +28743,7 @@ var init_boxagent = __esm({
                   } else if (/tool|command|exec|browse/i.test(kind)) {
                     flushAssistantText();
                     emit({
-                      ...base3(threadId, turnId),
+                      ...base2(threadId, turnId),
                       type: "item.started",
                       itemType: "tool",
                       itemId: id,
@@ -28748,7 +28754,7 @@ var init_boxagent = __esm({
                     active.delete(threadId);
                     flushAssistantText();
                     const failed2 = /fail|error/i.test(kind);
-                    emit({ ...base3(threadId, turnId), type: "turn.completed", ok: !failed2, stopReason: failed2 ? kind : null, cost: null });
+                    emit({ ...base2(threadId, turnId), type: "turn.completed", ok: !failed2, stopReason: failed2 ? kind : null, cost: null });
                     return;
                   }
                 }
@@ -28768,7 +28774,7 @@ var init_boxagent = __esm({
                     }
                     flushAssistantText();
                     active.delete(threadId);
-                    emit({ ...base3(threadId, turnId), type: "turn.completed", ok: true, stopReason: null, cost: null });
+                    emit({ ...base2(threadId, turnId), type: "turn.completed", ok: true, stopReason: null, cost: null });
                     return;
                   }
                   if (/failed|error|cancelled|interrupted/i.test(state2)) {
@@ -28776,7 +28782,7 @@ var init_boxagent = __esm({
                     if (problem || runError || /failed|error/i.test(state2)) throw new Error(problem ?? runError ?? `the box run ${state2}`);
                     flushAssistantText();
                     active.delete(threadId);
-                    emit({ ...base3(threadId, turnId), type: "turn.completed", ok: false, stopReason: state2, cost: null });
+                    emit({ ...base2(threadId, turnId), type: "turn.completed", ok: false, stopReason: state2, cost: null });
                     return;
                   }
                 }
@@ -28786,12 +28792,12 @@ var init_boxagent = __esm({
               }
               flushAssistantText();
               active.delete(threadId);
-              emit({ ...base3(threadId, turnId), type: "turn.completed", ok: false, stopReason: "interrupted", cost: null });
+              emit({ ...base2(threadId, turnId), type: "turn.completed", ok: false, stopReason: "interrupted", cost: null });
             } catch (e) {
               flushAssistantText();
               active.delete(threadId);
-              emit({ ...base3(threadId, turnId), type: "runtime.error", message: e.message });
-              emit({ ...base3(threadId, turnId), type: "turn.completed", ok: false, stopReason: "error", cost: null });
+              emit({ ...base2(threadId, turnId), type: "runtime.error", message: e.message });
+              emit({ ...base2(threadId, turnId), type: "turn.completed", ok: false, stopReason: "error", cost: null });
             }
           })();
           return { turnId };
@@ -28840,6 +28846,24 @@ var init_boxagent = __esm({
   }
 });
 
+// server/plan-policy.ts
+function planToolAllowed(tool2) {
+  return typeof tool2 === "string" && PLAN_READ_TOOLS.includes(tool2);
+}
+function claudePlanHook(node, helper) {
+  const quote2 = (s4) => "'" + s4.replace(/'/g, "'\\''") + "'";
+  const command = process.platform === "win32" ? '"%OMB_PLAN_NODE%" "%OMB_PLAN_HOOK%" || exit /b 2' : `${quote2(node)} ${quote2(helper)} || exit 2`;
+  return [{ matcher: "", hooks: [{ type: "command", command, timeout: 5 }] }];
+}
+var PLAN_READ_TOOLS, PLAN_REFUSAL;
+var init_plan_policy = __esm({
+  "server/plan-policy.ts"() {
+    "use strict";
+    PLAN_READ_TOOLS = ["Read", "Glob", "Grep"];
+    PLAN_REFUSAL = "Plan mode blocked this action. Review the plan and approve it in Atomic before making changes.";
+  }
+});
+
 // server/drivers/claude-message.ts
 function firstText(content) {
   if (typeof content === "string") return content;
@@ -29829,15 +29853,15 @@ function permissionSocketPath(threadId, botId) {
   return brokerSocketPath(DATA_DIR, `${prefix}${digest2}`);
 }
 function brokerSocketCandidates(threadId, botId) {
-  const base3 = permissionSocketPath(threadId, botId);
+  const base2 = permissionSocketPath(threadId, botId);
   if (process.platform !== "win32") {
     const scope = createHash7("sha256").update(`${DATA_DIR}\0${process.pid}\0${botId ?? ""}\0${threadId}`).digest("hex").slice(0, 16);
-    return [base3, join23(tmpdir3(), `omb-perm-${scope}.sock`)];
+    return [base2, join23(tmpdir3(), `omb-perm-${scope}.sock`)];
   }
   return [
-    base3,
-    `${base3}-${randomBytes2(3).toString("hex")}`,
-    `${base3}-${randomBytes2(3).toString("hex")}`
+    base2,
+    `${base2}-${randomBytes2(3).toString("hex")}`,
+    `${base2}-${randomBytes2(3).toString("hex")}`
   ];
 }
 async function createPermissionBroker(opts) {
@@ -29887,6 +29911,12 @@ async function createPermissionBroker(opts) {
           continue;
         }
         const ask = { id: askId, kind, tool: msg.tool ?? "tool", input: msg.input ?? {}, at: Date.now() };
+        if (opts.plan && kind === "permission" && !planToolAllowed(ask.tool)) {
+          const behavior = "deny";
+          conn.write(JSON.stringify({ t: "answer", id: askId, behavior, source: "system", message: PLAN_REFUSAL }) + "\n");
+          opts.onResolve({ ...ask, behavior, source: "system" });
+          continue;
+        }
         const sessionKey = kind === "permission" && opts.sessionAllows && (opts.canAllowForSession?.(ask) ?? true) ? sessionAllowKey(ask) : null;
         if (sessionKey && opts.sessionAllows?.has(sessionKey)) {
           const updatedInput = opts.inputOnAllow?.(ask);
@@ -30045,6 +30075,7 @@ var CONNECTOR_CACHE_MS, CLAUDE_ACCOUNT_ENV_KEYS, DEFAULT_AUTOCOMPACT_TOKENS, CLA
 var init_claude = __esm({
   "server/drivers/claude.ts"() {
     "use strict";
+    init_plan_policy();
     init_claude_message();
     init_config();
     init_atomic();
@@ -30182,7 +30213,7 @@ var init_claude = __esm({
         const sumCost = (a2, b3) => a2 === null ? b3 : b3 === null ? a2 : a2 + b3;
         const STEER_FOLLOWUP_MS = 1500;
         const sessions = /* @__PURE__ */ new Map();
-        const elicitations = createClaudeElicitations({ emit: (event) => emit(event), base: (threadId, turnId) => base3(threadId, turnId) });
+        const elicitations = createClaudeElicitations({ emit: (event) => emit(event), base: (threadId, turnId) => base2(threadId, turnId) });
         const sessionAllows = /* @__PURE__ */ new Map();
         const deliveredVolatile = /* @__PURE__ */ new Map();
         const volatileNoteFor = (threadId, sessionId, turn) => {
@@ -30250,7 +30281,7 @@ var init_claude = __esm({
         const emit = (event) => {
           for (const l of Array.from(listeners)) l(event);
         };
-        const base3 = (threadId, turnId) => ({
+        const base2 = (threadId, turnId) => ({
           eventId: newEventId(),
           provider: DRIVER_KIND2,
           threadId,
@@ -30266,6 +30297,8 @@ var init_claude = __esm({
           const { threadId, botId } = turn;
           const relaunch = logicalTurnId !== void 0;
           if (active.has(threadId) && !relaunch) throw new Error("a turn is already running on this thread");
+          const plan = turn.approvalMode === "plan";
+          if (plan) turn = { ...turn, integrations: void 0, mcpFromUserConfig: false, pluginDirs: [] };
           const permissionMode = turn.approvalMode === void 0 ? config2.permissionMode : turn.approvalMode === "full" ? "bypassPermissions" : turn.approvalMode === "auto" ? "auto" : turn.approvalMode === "edits" ? "acceptEdits" : "default";
           const controlsHost = turn.integrations?.localComputer?.scope === "local-computer";
           if (controlsHost && permissionMode === "bypassPermissions" && turn.approvalMode !== "full") {
@@ -30297,7 +30330,8 @@ var init_claude = __esm({
             "--permission-mode",
             permissionMode
           ];
-          if (turn.builtinTools === false) args.push("--tools", "");
+          if (plan) args.push("--tools", "Read,Glob,Grep", "--strict-mcp-config", "--setting-sources", "");
+          else if (turn.builtinTools === false) args.push("--tools", "");
           else if (config2.tools !== void 0) args.push("--tools", config2.tools.join(","));
           const denied = [.../* @__PURE__ */ new Set([
             ...config2.tools === void 0 ? HARNESS_REPLACED_BUILTINS : [],
@@ -30318,8 +30352,8 @@ var init_claude = __esm({
               cliVersionChecked = true;
             }
           }
-          const isolated = !inheritsUserConfig(turnEnvironment);
-          if (isolated) {
+          const isolated = plan || !inheritsUserConfig(turnEnvironment);
+          if (isolated && !plan) {
             if (!turn.mcpFromUserConfig && claudeCliSupports(cliVersion, "--strict-mcp-config")) args.push("--strict-mcp-config");
             if (claudeCliSupports(cliVersion, "--setting-sources")) args.push("--setting-sources", "project");
           }
@@ -30384,7 +30418,7 @@ var init_claude = __esm({
             mcpServers[name] = { ...server };
             botOwned.add(name);
           }
-          if (isolated && turn.cwd) {
+          if (isolated && turn.cwd && !plan) {
             for (const [name, server] of Object.entries(projectMcpServers(turn.cwd))) {
               if (Object.hasOwn(mcpServers, name)) continue;
               mcpServers[name] = server;
@@ -30410,6 +30444,11 @@ var init_claude = __esm({
             args.push("--allowedTools", allowed.join(","));
           }
           const env = environment(turnModel);
+          if (plan) {
+            env.OMB_PLAN_NODE = process.execPath;
+            env.OMB_PLAN_HOOK = SPAWNED_PROXIES.planHook;
+            if (process.versions.electron) env.ELECTRON_RUN_AS_NODE = "1";
+          }
           const authSettings = isolated && !injected.injected ? readClaudeAuthSettings(env, input.environment) : {};
           const hooks = turn.integrations?.hooks;
           const hookTokenPath = hooks ? hookTokenFile(threadId, botId) : null;
@@ -30432,7 +30471,8 @@ var init_claude = __esm({
           const settings2 = { ...authSettings };
           const hookBlock = {
             ...hooks ? claudeHookSettings(HOOK_HELPER_PATH) : {},
-            ...rtkHook ? { PreToolUse: rtkHookSettings(RTK_HOOK_PATH) } : {}
+            ...rtkHook ? { PreToolUse: rtkHookSettings(RTK_HOOK_PATH) } : {},
+            ...plan ? { PreToolUse: claudePlanHook(process.execPath, SPAWNED_PROXIES.planHook) } : {}
           };
           if (Object.keys(hookBlock).length) settings2.hooks = hookBlock;
           const authSettingsPath = mcpConfigPath && Object.keys(settings2).length ? join23(dirname9(mcpConfigPath), "auth-settings.json") : null;
@@ -30471,7 +30511,7 @@ var init_claude = __esm({
               retryAbort.abort();
               stopSession(live2);
             }, turnId, broker: live2.broker });
-            emit({ ...base3(threadId, turnId), type: "turn.started" });
+            emit({ ...base2(threadId, turnId), type: "turn.started" });
             const note = volatileNoteFor(threadId, live2.sessionId, turn);
             const message2 = note ? claudeUserMessage(withNote(turn.text, note), turn.images) : promptMsg;
             const running3 = live2.turn;
@@ -30526,6 +30566,7 @@ var init_claude = __esm({
               const askTools = /* @__PURE__ */ new Map();
               broker = await createPermissionBroker({
                 socketPaths: brokerSocketCandidates(threadId, botId),
+                plan,
                 isActive: () => Boolean(sessions.get(threadId)?.turn),
                 inputOnAllow: (ask) => {
                   const current = sessions.get(threadId)?.turn?.input ?? turn;
@@ -30548,7 +30589,7 @@ var init_claude = __esm({
                   const nativeReview = permissionMode === "auto" && nativeMode !== null ? nativeMode === "auto" ? "active" : "inactive" : void 0;
                   const questions = askQuestions(ask);
                   emit({
-                    ...base3(threadId, eventTurnId),
+                    ...base2(threadId, eventTurnId),
                     type: "request.opened",
                     requestId: ask.id,
                     requestType: ask.kind,
@@ -30566,9 +30607,13 @@ var init_claude = __esm({
                   });
                 },
                 onResolve: (resolved) => {
+                  if (plan && resolved.behavior === "deny") {
+                    emit({ ...base2(threadId, turnId), type: "item.started", itemType: "tool", itemId: resolved.id, title: "Plan blocked an action" });
+                    emit({ ...base2(threadId, turnId), type: "item.completed", itemType: "tool", itemId: resolved.id, ok: false, output: PLAN_REFUSAL });
+                  }
                   const eventTurnId = sessions.get(threadId)?.turn?.turnId ?? turnId;
                   emit({
-                    ...base3(threadId, eventTurnId),
+                    ...base2(threadId, eventTurnId),
                     type: "request.resolved",
                     requestId: resolved.id,
                     behavior: resolved.behavior,
@@ -30597,7 +30642,7 @@ var init_claude = __esm({
           if (relaunch && retry.cancelled) {
             cleanupUnownedLaunch();
             if (active.get(threadId)?.turnId === turnId) active.delete(threadId);
-            emit({ ...base3(threadId, turnId), type: "turn.completed", ok: false, stopReason: "interrupted", cost: null });
+            emit({ ...base2(threadId, turnId), type: "turn.completed", ok: false, stopReason: "interrupted", cost: null });
             return { turnId };
           }
           let targetExisted = false;
@@ -30652,7 +30697,7 @@ var init_claude = __esm({
             session.turn = null;
             retryState.delete(threadId);
             if (t2.authFailed) closeSession(threadId, "sign-in required");
-            emit({ ...base3(threadId, t2.turnId), type: "turn.completed", ok, stopReason, cost, ...usage ? { usage } : {} });
+            emit({ ...base2(threadId, t2.turnId), type: "turn.completed", ok, stopReason, cost, ...usage ? { usage } : {} });
             if (session.child.exitCode === null && !session.closing) armIdle(threadId);
           };
           const currentTurnId = () => session.turn?.turnId ?? turnId;
@@ -30681,7 +30726,7 @@ var init_claude = __esm({
             retry2.attempt++;
             const delayMs = backoff(retry2.attempt - 1);
             emit({
-              ...base3(threadId, turnId2),
+              ...base2(threadId, turnId2),
               type: "turn.retrying",
               attempt: retry2.attempt,
               delayMs,
@@ -30694,7 +30739,7 @@ var init_claude = __esm({
                 active.delete(threadId);
                 retryState.delete(threadId);
                 emit({
-                  ...base3(threadId, turnId2),
+                  ...base2(threadId, turnId2),
                   type: "turn.completed",
                   ok: false,
                   stopReason: "interrupted",
@@ -30714,12 +30759,12 @@ var init_claude = __esm({
                 if (active.get(threadId)?.turnId === turnId2) active.delete(threadId);
                 retryState.delete(threadId);
                 emit({
-                  ...base3(threadId, turnId2),
+                  ...base2(threadId, turnId2),
                   type: "runtime.error",
                   message: e instanceof Error ? e.message : String(e)
                 });
                 emit({
-                  ...base3(threadId, turnId2),
+                  ...base2(threadId, turnId2),
                   type: "turn.completed",
                   ok: false,
                   stopReason: "exit_before_result",
@@ -30755,11 +30800,11 @@ var init_claude = __esm({
                     if (delivered && delivered.sessionId === session.sessionId) delivered.sessionId = o.session_id;
                     session.sessionId = o.session_id;
                   }
-                  emit({ ...base3(threadId, currentTurnId()), type: "session.started", sessionId: o.session_id, model: o.model, modelEvidenceLevel: "session-reported", ...retry.rebuilt ? { rebuilt: true } : {} });
+                  emit({ ...base2(threadId, currentTurnId()), type: "session.started", sessionId: o.session_id, model: o.model, modelEvidenceLevel: "session-reported", ...retry.rebuilt ? { rebuilt: true } : {} });
                 } else if (o.subtype === "compact_boundary") {
                   deliveredVolatile.delete(threadId);
                 } else if (o.subtype === "thinking_tokens") {
-                  emit({ ...base3(threadId, currentTurnId()), type: "item.updated", itemType: "reasoning", tokens: o.estimated_tokens });
+                  emit({ ...base2(threadId, currentTurnId()), type: "item.updated", itemType: "reasoning", tokens: o.estimated_tokens });
                 }
                 break;
               case "stream_event": {
@@ -30772,9 +30817,9 @@ var init_claude = __esm({
                     session.turn.sawStreamDelta = true;
                     session.turn.produced = true;
                   }
-                  emit({ ...base3(threadId, currentTurnId()), type: "content.delta", streamKind: "assistant_text", delta: d.text });
+                  emit({ ...base2(threadId, currentTurnId()), type: "content.delta", streamKind: "assistant_text", delta: d.text });
                 } else if (d.type === "thinking_delta" && typeof d.thinking === "string" && d.thinking) {
-                  emit({ ...base3(threadId, currentTurnId()), type: "content.delta", streamKind: "reasoning_text", delta: d.thinking });
+                  emit({ ...base2(threadId, currentTurnId()), type: "content.delta", streamKind: "reasoning_text", delta: d.thinking });
                 }
                 break;
               }
@@ -30782,7 +30827,7 @@ var init_claude = __esm({
                 const msg = o.message ?? {};
                 if (o.is_api_error_message !== true && typeof o.error !== "string") {
                   emit({
-                    ...base3(threadId, currentTurnId()),
+                    ...base2(threadId, currentTurnId()),
                     type: "model.evidence",
                     callId: typeof msg.id === "string" ? msg.id : newId(),
                     responseId: typeof msg.id === "string" ? msg.id : void 0,
@@ -30793,7 +30838,7 @@ var init_claude = __esm({
                 const text4 = firstText(msg.content);
                 if (claudeAuthFailure(o, text4)) {
                   if (session.turn) session.turn.authFailed = true;
-                  emit({ ...base3(threadId, currentTurnId()), type: "runtime.error", message: text4, setup: true, failure: "auth_failed" });
+                  emit({ ...base2(threadId, currentTurnId()), type: "runtime.error", message: text4, setup: true, failure: "auth_failed" });
                   break;
                 }
                 if (claudeCredentialRefreshConflict(o, text4)) {
@@ -30804,16 +30849,16 @@ var init_claude = __esm({
                 if (text4.trim()) {
                   const synthetic = o.is_api_error_message === true || typeof o.error === "string" ? { synthetic: true } : {};
                   if (!session.turn?.sawStreamDelta) {
-                    emit({ ...base3(threadId, currentTurnId()), ...synthetic, type: "content.delta", streamKind: "assistant_text", delta: text4 });
+                    emit({ ...base2(threadId, currentTurnId()), ...synthetic, type: "content.delta", streamKind: "assistant_text", delta: text4 });
                   }
                   if (session.turn) session.turn.sawStreamDelta = false;
-                  emit({ ...base3(threadId, currentTurnId()), ...synthetic, type: "item.completed", itemType: "assistant_text", text: text4 });
+                  emit({ ...base2(threadId, currentTurnId()), ...synthetic, type: "item.completed", itemType: "assistant_text", text: text4 });
                 }
                 for (const b3 of Array.isArray(msg.content) ? msg.content : []) {
                   if (b3.type === "tool_use") {
                     if (session.turn) session.turn.produced = true;
                     emit({
-                      ...base3(threadId, currentTurnId()),
+                      ...base2(threadId, currentTurnId()),
                       type: "item.started",
                       itemType: "tool",
                       itemId: b3.id,
@@ -30825,7 +30870,7 @@ var init_claude = __esm({
                 }
                 if (msg.usage) {
                   emit({
-                    ...base3(threadId, currentTurnId()),
+                    ...base2(threadId, currentTurnId()),
                     type: "thread.token-usage.updated",
                     input: (msg.usage.input_tokens || 0) + (msg.usage.cache_read_input_tokens || 0),
                     output: msg.usage.output_tokens || 0,
@@ -30854,9 +30899,9 @@ var init_claude = __esm({
               case "user":
                 for (const b3 of Array.isArray(o.message?.content) ? o.message.content : []) {
                   if (b3.type === "tool_result") {
-                    emit({ ...base3(threadId, currentTurnId()), type: "item.completed", itemType: "tool", itemId: b3.tool_use_id, ok: !b3.is_error, output: toolDetailPreview(b3.content) });
+                    emit({ ...base2(threadId, currentTurnId()), type: "item.completed", itemType: "tool", itemId: b3.tool_use_id, ok: !b3.is_error, output: toolDetailPreview(b3.content) });
                     for (const img of extractMcpImages(b3.content)) {
-                      emit({ ...base3(threadId, currentTurnId()), type: "item.completed", itemType: "assistant_image", data: img.data });
+                      emit({ ...base2(threadId, currentTurnId()), type: "item.completed", itemType: "assistant_image", data: img.data });
                     }
                   }
                 }
@@ -30868,7 +30913,7 @@ var init_claude = __esm({
                   const resultError = [o.result, ...Array.isArray(o.errors) ? o.errors : []].filter((value) => typeof value === "string").join("\n");
                   if (o.is_error === true && !t2?.authFailed && claudeAuthFailure({ error: o.error ?? "api_error" }, resultError)) {
                     if (t2) t2.authFailed = true;
-                    emit({ ...base3(threadId, currentTurnId()), type: "runtime.error", message: resultError, setup: true, failure: "auth_failed" });
+                    emit({ ...base2(threadId, currentTurnId()), type: "runtime.error", message: resultError, setup: true, failure: "auth_failed" });
                   }
                   const usage = o.usage ? {
                     input: (o.usage.input_tokens || 0) + (o.usage.cache_read_input_tokens || 0) + (o.usage.cache_creation_input_tokens || 0),
@@ -30892,7 +30937,7 @@ var init_claude = __esm({
                       break;
                     }
                     emit({
-                      ...base3(threadId, t2.turnId),
+                      ...base2(threadId, t2.turnId),
                       type: "runtime.error",
                       message: "Claude could not renew its sign-in because another Claude process on this account was renewing it at the same moment. Try again in a minute; if it keeps happening, sign in to Claude again in Settings."
                     });
@@ -30936,7 +30981,7 @@ var init_claude = __esm({
               relaunchTurn(`could not start (${e.code ?? "error"})`, computeBackoff);
               return;
             }
-            emit({ ...base3(threadId, currentTurnId()), type: "runtime.error", ...describeSpawnFailure(e, config2.cli) });
+            emit({ ...base2(threadId, currentTurnId()), type: "runtime.error", ...describeSpawnFailure(e, config2.cli) });
             settle(false, "spawn_error");
           });
           let closeFinalized = false;
@@ -30945,7 +30990,7 @@ var init_claude = __esm({
             if (!await killCliTree(child, 0)) {
               session.broker?.close();
               session.broker = void 0;
-              emit({ ...base3(threadId, currentTurnId()), type: "runtime.error", message: "Claude could not be confirmed stopped; its helper processes may still be running." });
+              emit({ ...base2(threadId, currentTurnId()), type: "runtime.error", message: "Claude could not be confirmed stopped; its helper processes may still be running." });
               return;
             }
             if (closeFinalized) return;
@@ -30995,7 +31040,7 @@ var init_claude = __esm({
                   retryAbort2.abort();
                 }, turnId: turnId2 });
                 emit({
-                  ...base3(threadId, turnId2),
+                  ...base2(threadId, turnId2),
                   type: "turn.retrying",
                   attempt: retry2.attempt + 1,
                   delayMs: 0,
@@ -31008,18 +31053,18 @@ var init_claude = __esm({
                     if (active.get(threadId)?.turnId === turnId2) active.delete(threadId);
                     retryState.delete(threadId);
                     emit({
-                      ...base3(threadId, turnId2),
+                      ...base2(threadId, turnId2),
                       type: "runtime.error",
                       message: e instanceof Error ? e.message : String(e)
                     });
-                    emit({ ...base3(threadId, turnId2), type: "turn.completed", ok: false, stopReason: "exit_before_result", cost: null });
+                    emit({ ...base2(threadId, turnId2), type: "turn.completed", ok: false, stopReason: "exit_before_result", cost: null });
                   }
                 })();
                 return;
               }
               retryState.delete(threadId);
               emit({
-                ...base3(threadId, currentTurnId()),
+                ...base2(threadId, currentTurnId()),
                 type: "runtime.error",
                 message: message2
               });
@@ -31048,7 +31093,7 @@ var init_claude = __esm({
             stopSession(session);
           };
           active.set(threadId, { stop, turnId, broker });
-          emit({ ...base3(threadId, turnId), type: "turn.started" });
+          emit({ ...base2(threadId, turnId), type: "turn.started" });
           if (relaunch) deliveredVolatile.delete(threadId);
           const launchNote = turn.systemStable !== void 0 ? volatileNoteFor(threadId, sessionId ?? newSessionId, turn) : "";
           const launchMsg = launchNote ? claudeUserMessage(withNote(turn.text, launchNote), turn.images) : promptMsg;
@@ -31234,6 +31279,45 @@ var init_claude = __esm({
   }
 });
 
+// server/drivers/codex-approval-presets.ts
+function namedApprovalParams(mode) {
+  if (mode === "plan") return {
+    thread: { approvalPolicy: "never", approvalsReviewer: "user", sandbox: "read-only" },
+    turn: { approvalPolicy: "never", approvalsReviewer: "user", sandboxPolicy: { type: "readOnly" } }
+  };
+  if (mode === "full") {
+    return {
+      thread: {
+        approvalPolicy: "never",
+        approvalsReviewer: "user",
+        sandbox: "danger-full-access"
+      },
+      turn: {
+        approvalPolicy: "never",
+        approvalsReviewer: "user",
+        sandboxPolicy: { type: "dangerFullAccess" }
+      }
+    };
+  }
+  return {
+    thread: {
+      approvalPolicy: "on-request",
+      approvalsReviewer: mode === "auto" ? "auto_review" : "user",
+      sandbox: "workspace-write"
+    },
+    turn: {
+      approvalPolicy: "on-request",
+      approvalsReviewer: mode === "auto" ? "auto_review" : "user",
+      sandboxPolicy: { type: "workspaceWrite" }
+    }
+  };
+}
+var init_codex_approval_presets = __esm({
+  "server/drivers/codex-approval-presets.ts"() {
+    "use strict";
+  }
+});
+
 // server/drivers/codex-tool-surface.ts
 function codexToolSurfaceArgs() {
   return [
@@ -31393,8 +31477,8 @@ function parseTomlLite(text4) {
     if (raw) return raw;
     throw new TomlError("expected a value");
   };
-  const tableAt = (base3, path4) => {
-    let table = base3;
+  const tableAt = (base2, path4) => {
+    let table = base2;
     for (const part of path4) {
       const next = table[part];
       if (next && typeof next === "object" && !Array.isArray(next)) table = next;
@@ -31406,8 +31490,8 @@ function parseTomlLite(text4) {
     }
     return table;
   };
-  function assign(base3, path4, item) {
-    const parent = tableAt(base3, path4.slice(0, -1));
+  function assign(base2, path4, item) {
+    const parent = tableAt(base2, path4.slice(0, -1));
     parent[path4[path4.length - 1]] = item;
   }
   while (pos < text4.length) {
@@ -32775,34 +32859,6 @@ function additionalPermissionSummary(permissions, reason) {
   const prefix = typeof reason === "string" && reason.trim() ? `${reason.trim()} \u2014 ` : "";
   return `${prefix}Requested permissions: ${exact}`;
 }
-function namedApprovalParams(mode) {
-  if (mode === "full") {
-    return {
-      thread: {
-        approvalPolicy: "never",
-        approvalsReviewer: "user",
-        sandbox: "danger-full-access"
-      },
-      turn: {
-        approvalPolicy: "never",
-        approvalsReviewer: "user",
-        sandboxPolicy: { type: "dangerFullAccess" }
-      }
-    };
-  }
-  return {
-    thread: {
-      approvalPolicy: "on-request",
-      approvalsReviewer: mode === "auto" ? "auto_review" : "user",
-      sandbox: "workspace-write"
-    },
-    turn: {
-      approvalPolicy: "on-request",
-      approvalsReviewer: mode === "auto" ? "auto_review" : "user",
-      sandboxPolicy: { type: "workspaceWrite" }
-    }
-  };
-}
 function withWritableRoots(turnParams, dirs) {
   if (!dirs?.length) return turnParams;
   const policy = plainRecord2(turnParams.sandboxPolicy);
@@ -32975,6 +33031,7 @@ var DRIVER_KIND3, ASTRA_MODEL_ID, ASTRA_MIN_CODEX_VERSION, CodexRpcError, QUESTI
 var init_codex = __esm({
   "server/drivers/codex.ts"() {
     "use strict";
+    init_codex_approval_presets();
     init_codex_tool_surface();
     init_codex_image();
     init_codex_personal();
@@ -33078,7 +33135,7 @@ var init_codex = __esm({
         const emit = (event) => {
           for (const l of Array.from(listeners)) l(event);
         };
-        const base3 = (threadId, turnId) => ({
+        const base2 = (threadId, turnId) => ({
           eventId: newEventId(),
           provider: DRIVER_KIND3,
           threadId,
@@ -33106,6 +33163,7 @@ var init_codex = __esm({
           const stopSignal = new AbortController();
           const { threadId } = turn;
           const approvalMode = turn.approvalMode ?? (config2.fullAuto ? "full" : "ask");
+          if (approvalMode === "plan") turn = { ...turn, integrations: void 0, mcpFromUserConfig: false };
           const customServers = {};
           for (const [name, server] of Object.entries(turn.integrations?.custom ?? {})) {
             const reserved = "url" in server ? void 0 : Object.entries(server.env).find(([key, value]) => isHarnessOwnedMcpEnvName(key) && !(key === "ELECTRON_RUN_AS_NODE" && value === "1"))?.[0];
@@ -33143,7 +33201,7 @@ var init_codex = __esm({
             const declaredInCodexConfig = codexConfigMcpServers(env, childCwd);
             if (!turn.mcpFromUserConfig) {
               const harnessMounts = /* @__PURE__ */ new Set(["openmausbot_connectors", "atomic_accounts", "agents", "computer", "browser", "openmausbot_phone"]);
-              appServerArgs.push(...codexUserMcpOffArgs(new Map([...declaredInCodexConfig].filter(([name]) => !harnessMounts.has(name)))));
+              appServerArgs.push(...codexUserMcpOffArgs(new Map([...declaredInCodexConfig].filter(([name]) => approvalMode === "plan" || !harnessMounts.has(name)))));
               appServerArgs.push(...codexPersonalSetupOffArgs(env, childCwd));
             }
             const customByMountName = /* @__PURE__ */ new Map();
@@ -33172,6 +33230,7 @@ var init_codex = __esm({
                 `${prefix}.default_tools_approval_mode="auto"`
               );
             }
+            if (approvalMode === "plan") appServerArgs.push("-c", 'web_search="disabled"', "-c", "features.apps=false", "-c", "features.multi_agent=false");
             const child = spawnCli(config2.cli, appServerArgs, {
               cwd: childCwd,
               env,
@@ -33282,11 +33341,11 @@ var init_codex = __esm({
               const complete = () => {
                 if (active.get(threadId)?.stop !== stop) return;
                 active.delete(threadId);
-                emit({ ...base3(threadId, turnId), type: "turn.completed", ok, stopReason, cost: null, ...state2.usage ? { usage: state2.usage } : {} });
+                emit({ ...base2(threadId, turnId), type: "turn.completed", ok, stopReason, cost: null, ...state2.usage ? { usage: state2.usage } : {} });
               };
               completeStoppedTurn = complete;
               if (!await stop()) {
-                emit({ ...base3(threadId, turnId), type: "runtime.error", message: "codex did not shut down after termination was requested" });
+                emit({ ...base2(threadId, turnId), type: "runtime.error", message: "codex did not shut down after termination was requested" });
               }
             };
             const steerActiveTurn = async (text4) => {
@@ -33348,6 +33407,10 @@ var init_codex = __esm({
               const mcpToolRef = customServer && mcpTool ? { server: customServer, tool: mcpTool, ...toolAnnotations(params?._meta?.annotations) ? { annotations: toolAnnotations(params._meta.annotations) } : {} } : void 0;
               const tool2 = serverConfirm ? elicitationTool(customByMountName.get(params.serverName)) : mcpAppApproval ? mcpAppApproval.tool : isLegacyMcpPermission ? mcpTool ?? "mcp" : isAdditionalPermission ? "permissions" : method === "item/fileChange/requestApproval" || method === "applyPatchApproval" ? "edit" : isQuestion ? "ask_user" : "shell";
               const permissionResult = (allow) => serverConfirm ? elicitationAnswer(serverConfirm, allow) : isMcpPermission ? allow ? mcpAppApproval?.allowResult ?? { action: "accept", content: {} } : { action: "decline" } : isAdditionalPermission ? { permissions: allow ? grantedPermissions(params.permissions) : {}, scope: "turn" } : { decision: allow ? legacy ? "approved" : "accept" : legacy ? "denied" : "decline" };
+              if (approvalMode === "plan" && isPermission) {
+                send({ jsonrpc: "2.0", id: msg.id, result: permissionResult(false) });
+                return;
+              }
               if (autoAcceptPermissions && isPermission && !serverConfirm) {
                 return send({
                   jsonrpc: "2.0",
@@ -33375,7 +33438,7 @@ var init_codex = __esm({
                     result: serverConfirm && source2 !== "user" ? { action: "cancel" } : permissionResult(behavior === "allow")
                   });
                 }
-                emit({ ...base3(threadId, turnId), type: "request.resolved", requestId, behavior, source: source2 });
+                emit({ ...base2(threadId, turnId), type: "request.resolved", requestId, behavior, source: source2 });
               };
               const timer = setTimeout(
                 () => isQuestion ? finish("answer", QUESTION_TIMEOUT_NOTE2, "timeout") : finish("deny", DENY_TIMEOUT_NOTE2, "timeout"),
@@ -33384,7 +33447,7 @@ var init_codex = __esm({
               timer.unref?.();
               asks.set(requestId, finish);
               emit({
-                ...base3(threadId, turnId),
+                ...base2(threadId, turnId),
                 type: "request.opened",
                 requestId,
                 requestType: isQuestion ? "question" : "permission",
@@ -33427,14 +33490,14 @@ var init_codex = __esm({
                   const delta = typeof p3.delta === "string" ? p3.delta : "";
                   if (delta) {
                     state2.sawStreamDelta = true;
-                    emit({ ...base3(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta });
+                    emit({ ...base2(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta });
                   }
                   break;
                 }
                 case "item/reasoning/textDelta":
                 case "item/reasoning/summaryTextDelta": {
                   const delta = typeof p3.delta === "string" ? p3.delta : "";
-                  if (delta) emit({ ...base3(threadId, turnId), type: "content.delta", streamKind: "reasoning_text", delta });
+                  if (delta) emit({ ...base2(threadId, turnId), type: "content.delta", streamKind: "reasoning_text", delta });
                   break;
                 }
                 case "item/started": {
@@ -33442,7 +33505,7 @@ var init_codex = __esm({
                   const title = item.type === "commandExecution" ? String(item.command ?? "shell") : item.type === "fileChange" ? "edit" : item.type === "mcpToolCall" ? typeof item.server === "string" && item.server && typeof item.tool === "string" && item.tool ? `mcp__${item.server}__${item.tool}` : item.tool ?? item.name ?? "mcp" : item.type === "webSearch" ? "web_search" : null;
                   if (title) {
                     emit({
-                      ...base3(threadId, turnId),
+                      ...base2(threadId, turnId),
                       type: "item.started",
                       itemType: "tool",
                       itemId: item.id,
@@ -33459,15 +33522,15 @@ var init_codex = __esm({
                     if (item.text?.trim()) {
                       state2.lastText = item.text;
                       if (!state2.sawStreamDelta) {
-                        emit({ ...base3(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta: item.text });
+                        emit({ ...base2(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta: item.text });
                       }
                       state2.sawStreamDelta = false;
-                      emit({ ...base3(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: item.text });
+                      emit({ ...base2(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: item.text });
                     }
                   } else if (item.type === "imageGeneration" && item.status !== "failed") {
                     if (typeof item.result === "string" && item.result.trim()) {
                       emit({
-                        ...base3(threadId, turnId),
+                        ...base2(threadId, turnId),
                         type: "item.completed",
                         itemType: "assistant_image",
                         itemId: item.id,
@@ -33477,7 +33540,7 @@ var init_codex = __esm({
                     }
                   } else if (["commandExecution", "fileChange", "mcpToolCall", "webSearch"].includes(item.type)) {
                     emit({
-                      ...base3(threadId, turnId),
+                      ...base2(threadId, turnId),
                       type: "item.completed",
                       itemType: "tool",
                       itemId: item.id,
@@ -33486,11 +33549,11 @@ var init_codex = __esm({
                     });
                     if (item.type === "mcpToolCall") {
                       for (const img of extractMcpImages(item.result)) {
-                        emit({ ...base3(threadId, turnId), type: "item.completed", itemType: "assistant_image", data: img.data });
+                        emit({ ...base2(threadId, turnId), type: "item.completed", itemType: "assistant_image", data: img.data });
                       }
                     }
                   } else if (item.type === "reasoning") {
-                    emit({ ...base3(threadId, turnId), type: "item.updated", itemType: "reasoning", tokens: null });
+                    emit({ ...base2(threadId, turnId), type: "item.updated", itemType: "reasoning", tokens: null });
                   }
                   break;
                 }
@@ -33516,7 +33579,7 @@ var init_codex = __esm({
                   if (t2) {
                     const window = p3.tokenUsage?.modelContextWindow;
                     emit({
-                      ...base3(threadId, turnId),
+                      ...base2(threadId, turnId),
                       type: "thread.token-usage.updated",
                       input: t2.inputTokens ?? 0,
                       output: t2.outputTokens ?? 0,
@@ -33535,7 +33598,7 @@ var init_codex = __esm({
                   if (t2.status !== "completed" && message2 && message2 !== state2.lastError) {
                     state2.lastError = message2;
                     emit({
-                      ...base3(threadId, turnId),
+                      ...base2(threadId, turnId),
                       type: "runtime.error",
                       message: message2,
                       ...failure === "auth_failed" || classifyError({ text: message2 }).reason === "auth_failed" ? { setup: true } : {},
@@ -33554,7 +33617,7 @@ var init_codex = __esm({
                       if (status === 401 || status === 403) {
                         const said = typeof p3.error?.additionalDetails === "string" && p3.error.additionalDetails ? p3.error.additionalDetails : `unexpected status ${status} Unauthorized`;
                         state2.lastError = said;
-                        emit({ ...base3(threadId, turnId), type: "runtime.error", message: said, failure: "auth_failed", setup: true });
+                        emit({ ...base2(threadId, turnId), type: "runtime.error", message: said, failure: "auth_failed", setup: true });
                         void settle(false, "auth_failed");
                       }
                       break;
@@ -33562,7 +33625,7 @@ var init_codex = __esm({
                     if (message2) {
                       state2.lastError = withCodexReset(String(message2), p3.error?.codexErrorInfo ?? p3.codexErrorInfo);
                       const failure = engineFailureFromCodexInfo(p3.error?.codexErrorInfo ?? p3.codexErrorInfo);
-                      emit({ ...base3(threadId, turnId), type: "runtime.error", message: state2.lastError, ...failure ? { failure } : {} });
+                      emit({ ...base2(threadId, turnId), type: "runtime.error", message: state2.lastError, ...failure ? { failure } : {} });
                     }
                   }
                   break;
@@ -33611,7 +33674,7 @@ var init_codex = __esm({
             });
             child.on("error", (e) => {
               if (abandoned) return;
-              emit({ ...base3(threadId, turnId), type: "runtime.error", ...describeSpawnFailure(e, config2.cli) });
+              emit({ ...base2(threadId, turnId), type: "runtime.error", ...describeSpawnFailure(e, config2.cli) });
               void settle(false, "spawn_error");
             });
             child.on("close", (code, signal) => {
@@ -33631,7 +33694,7 @@ var init_codex = __esm({
                 const delayMs = computeBackoff(attempt);
                 attempt++;
                 emit({
-                  ...base3(threadId, turnId),
+                  ...base2(threadId, turnId),
                   type: "turn.retrying",
                   attempt,
                   delayMs,
@@ -33656,14 +33719,14 @@ var init_codex = __esm({
                 return;
               }
               emit({
-                ...base3(threadId, turnId),
+                ...base2(threadId, turnId),
                 type: "runtime.error",
                 message: `codex exited ${code}${signal ? ` (signal ${signal})` : ""} before turn/completed${recentStderr ? `: ${recentStderr.slice(-300)}` : hadStreamedOutput && stderr.trim() ? "; no stderr after the last app-server output" : ""}`
               });
               void settle(false, "exit_before_result");
             });
             active.set(threadId, { stop, turnId, asks, steer: steerActiveTurn });
-            if (attempt === 0) emit({ ...base3(threadId, turnId), type: "turn.started" });
+            if (attempt === 0) emit({ ...base2(threadId, turnId), type: "turn.started" });
             try {
               await request("initialize", {
                 clientInfo: { name: "openmausbot", version: "1" },
@@ -33755,7 +33818,7 @@ var init_codex = __esm({
               }
               if (!codexThreadId) throw new Error("Codex did not return a native thread id");
               await syncCodexInstructions(threadId, codexThreadId, developerInstructions, resumedNativeThread, request);
-              emit({ ...base3(threadId, turnId), type: "session.started", sessionId: codexThreadId, model: startedModel ?? turn.model ?? null, modelEvidenceLevel: startedModel ? "session-reported" : "requested-only", ...rebuiltFromReplay ? { rebuilt: true } : {} });
+              emit({ ...base2(threadId, turnId), type: "session.started", sessionId: codexThreadId, model: startedModel ?? turn.model ?? null, modelEvidenceLevel: startedModel ? "session-reported" : "requested-only", ...rebuiltFromReplay ? { rebuilt: true } : {} });
               const note = turn.systemStable !== void 0 ? volatileNoteFor(threadId, codexThreadId, !resumedNativeThread || rebuiltFromReplay, turn) : "";
               const inputText = withNote(promptText, note);
               const turnInput = [
@@ -33802,7 +33865,7 @@ var init_codex = __esm({
                 const delayMs = computeBackoff(attempt);
                 attempt++;
                 emit({
-                  ...base3(threadId, turnId),
+                  ...base2(threadId, turnId),
                   type: "turn.retrying",
                   attempt,
                   delayMs,
@@ -33824,7 +33887,7 @@ var init_codex = __esm({
               }
               if (!state2.settled && !abandoned) {
                 emit({
-                  ...base3(threadId, turnId),
+                  ...base2(threadId, turnId),
                   type: "runtime.error",
                   message: message2,
                   ...needsAuth ? { setup: true } : {}
@@ -37771,10 +37834,10 @@ var require_fast_uri = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base3, relative3, options, skipNormalization) {
+    function resolveComponent(base2, relative3, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
-        base3 = parse4(serialize(base3, options), options);
+        base2 = parse4(serialize(base2, options), options);
         relative3 = parse4(serialize(relative3, options), options);
       }
       options = options || {};
@@ -37794,32 +37857,32 @@ var require_fast_uri = __commonJS({
           target.query = relative3.query;
         } else {
           if (!relative3.path) {
-            target.path = base3.path;
+            target.path = base2.path;
             if (relative3.query !== void 0) {
               target.query = relative3.query;
             } else {
-              target.query = base3.query;
+              target.query = base2.query;
             }
           } else {
             if (relative3.path[0] === "/") {
               target.path = removeDotSegments(relative3.path);
             } else {
-              if ((base3.userinfo !== void 0 || base3.host !== void 0 || base3.port !== void 0) && !base3.path) {
+              if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) {
                 target.path = "/" + relative3.path;
-              } else if (!base3.path) {
+              } else if (!base2.path) {
                 target.path = relative3.path;
               } else {
-                target.path = base3.path.slice(0, base3.path.lastIndexOf("/") + 1) + relative3.path;
+                target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative3.path;
               }
               target.path = removeDotSegments(target.path);
             }
             target.query = relative3.query;
           }
-          target.userinfo = base3.userinfo;
-          target.host = base3.host;
-          target.port = base3.port;
+          target.userinfo = base2.userinfo;
+          target.host = base2.host;
+          target.port = base2.port;
         }
-        target.scheme = base3.scheme;
+        target.scheme = base2.scheme;
       }
       target.fragment = relative3.fragment;
       return target;
@@ -43142,11 +43205,11 @@ async function mountChatTools(integrations, signal, computerUse = false, report
         }
       }
       const description = (typeof tool2.description === "string" ? tool2.description : "Configured MCP tool") + (Object.keys(constraints).length ? " Additional argument constraints (validated before execution): " + JSON.stringify(constraints) : "");
-      const base3 = `${server}_${tool2.name}`.toLowerCase().replace(/[^a-z0-9_]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 64) || "mcp_tool";
-      let name = base3;
+      const base2 = `${server}_${tool2.name}`.toLowerCase().replace(/[^a-z0-9_]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 64) || "mcp_tool";
+      let name = base2;
       for (let index = 2; registered.has(name); index += 1) {
         const suffix = `_${index}`;
-        name = base3.slice(0, 64 - suffix.length) + suffix;
+        name = base2.slice(0, 64 - suffix.length) + suffix;
       }
       registered.set(name, { client, server, name: tool2.name, schema: schema4 });
       if (customNames.has(server)) customTools.set(name, { server, tool: tool2.name, annotations: toolAnnotations(tool2.annotations) ?? {} });
@@ -43166,6 +43229,10 @@ async function mountChatTools(integrations, signal, computerUse = false, report
     validate,
     close,
     customTool: (name) => customTools.get(name),
+    planReadOnly: (name) => {
+      const tool2 = registered.get(name);
+      return tool2?.client instanceof ChatBoxClient && ["screenshot", "get_screen_size"].includes(tool2.name);
+    },
     async execute(name, args, callSignal) {
       validate(name, args);
       if (callSignal.aborted) {
@@ -43556,7 +43623,7 @@ function createOpenAIChatRuntime(options) {
   const emit = (event) => {
     for (const listener of Array.from(listeners)) listener(event);
   };
-  const base3 = (threadId, turnId) => ({
+  const base2 = (threadId, turnId) => ({
     eventId: newEventId(),
     provider: options.driverKind,
     threadId,
@@ -43750,7 +43817,7 @@ function createOpenAIChatRuntime(options) {
     const approval = createChatToolApproval({
       signal: abort.signal,
       open: (ask) => emit({
-        ...base3(turn.threadId, turnId),
+        ...base2(turn.threadId, turnId),
         type: "request.opened",
         requestType: "permission",
         requestId: ask.id,
@@ -43760,7 +43827,7 @@ function createOpenAIChatRuntime(options) {
         ...ask.mcpTool ? { mcpTool: ask.mcpTool } : {}
       }),
       resolved: (ask, allowed, source2) => emit({
-        ...base3(turn.threadId, turnId),
+        ...base2(turn.threadId, turnId),
         type: "request.resolved",
         requestId: ask.id,
         behavior: allowed ? "allow" : "deny",
@@ -43772,8 +43839,8 @@ function createOpenAIChatRuntime(options) {
       resolveDone = resolve14;
     });
     active.set(turn.threadId, { abort, turnId, done, approval });
-    emit({ ...base3(turn.threadId, turnId), type: "turn.started" });
-    emit({ ...base3(turn.threadId, turnId), type: "session.started", sessionId: null, model });
+    emit({ ...base2(turn.threadId, turnId), type: "turn.started" });
+    emit({ ...base2(turn.threadId, turnId), type: "session.started", sessionId: null, model });
     void (async () => {
       let tools;
       const usage = { input: 0, output: 0 };
@@ -43808,11 +43875,11 @@ function createOpenAIChatRuntime(options) {
               }
               pending[streamKind] = hold ? combined.slice(-hold) : "";
               const visible = safeText(hold ? combined.slice(0, -hold) : combined);
-              if (visible) emit({ ...base3(turn.threadId, turnId), type: "content.delta", streamKind, delta: visible });
+              if (visible) emit({ ...base2(turn.threadId, turnId), type: "content.delta", streamKind, delta: visible });
             };
             try {
               const callId = newId();
-              emit({ ...base3(turn.threadId, turnId), type: "model.call", callId });
+              emit({ ...base2(turn.threadId, turnId), type: "model.call", callId });
               let previousIdentity = "";
               completion = await complete(messages, model, true, abort.signal, (text4, streamKind) => {
                 streamed = true;
@@ -43821,7 +43888,7 @@ function createOpenAIChatRuntime(options) {
                 const identity = JSON.stringify([reportedModel, responseId]);
                 if (identity === previousIdentity) return;
                 previousIdentity = identity;
-                emit({ ...base3(turn.threadId, turnId), type: "model.evidence", callId, model: reportedModel, responseId, level: reportedModel ? "response-reported" : "unknown" });
+                emit({ ...base2(turn.threadId, turnId), type: "model.evidence", callId, model: reportedModel, responseId, level: reportedModel ? "response-reported" : "unknown" });
               });
               delta("", "assistant_text", true);
               delta("", "reasoning_text", true);
@@ -43831,7 +43898,7 @@ function createOpenAIChatRuntime(options) {
               const verdict = classifyError(error51);
               if (options.retryScale === void 0 || abort.signal.aborted || streamed || seenCalls.size || error51 instanceof ChatProtocolError || !verdict.transient || attempt >= RETRY_MAX_ATTEMPTS - 1) throw error51;
               const delayMs = computeBackoff(attempt++);
-              emit({ ...base3(turn.threadId, turnId), type: "turn.retrying", attempt, delayMs, reason: verdict.reason });
+              emit({ ...base2(turn.threadId, turnId), type: "turn.retrying", attempt, delayMs, reason: verdict.reason });
               await interruptibleDelay(delayMs * options.retryScale, abort.signal).promise;
               abort.signal.throwIfAborted();
             }
@@ -43841,10 +43908,10 @@ function createOpenAIChatRuntime(options) {
             usage.input += completion.usage.input;
             usage.output += completion.usage.output;
             hasUsage = true;
-            emit({ ...base3(turn.threadId, turnId), type: "thread.token-usage.updated", ...usage });
+            emit({ ...base2(turn.threadId, turnId), type: "thread.token-usage.updated", ...usage });
           }
           const reply = completion.text.trim() ? completion.text : completion.toolCalls.length ? "" : completion.reasoning;
-          if (reply.trim()) emit({ ...base3(turn.threadId, turnId), type: "item.completed", itemType: "assistant_text", text: safeText(reply) });
+          if (reply.trim()) emit({ ...base2(turn.threadId, turnId), type: "item.completed", itemType: "assistant_text", text: safeText(reply) });
           abort.signal.throwIfAborted();
           if (!completion.toolCalls.length) {
             if (!reply.trim()) throw new ChatProtocolError("provider returned an empty response");
@@ -43887,10 +43954,10 @@ function createOpenAIChatRuntime(options) {
               if (!object3(args)) throw new ChatProtocolError("tool arguments must be a JSON object");
               tools.validate(call.function.name, args);
               const inputPreview = preview(args);
-              const allowed = turn.approvalMode === "full" || await approval.ask(call.function.name, inputPreview ?? "This tool has no arguments.", tools.customTool?.(call.function.name));
+              const allowed = (turn.approvalMode !== "plan" || tools.planReadOnly?.(call.function.name) === true) && (turn.approvalMode === "full" || await approval.ask(call.function.name, inputPreview ?? "This tool has no arguments.", tools.customTool?.(call.function.name)));
               abort.signal.throwIfAborted();
               emit({
-                ...base3(turn.threadId, turnId),
+                ...base2(turn.threadId, turnId),
                 type: "item.started",
                 itemType: "tool",
                 itemId: call.id,
@@ -43910,16 +43977,16 @@ function createOpenAIChatRuntime(options) {
                 }
               } else {
                 denials.push(call.function.name);
-                result = { ok: false, text: "Permission denied or expired; the tool was not executed." };
+                result = { ok: false, text: turn.approvalMode === "plan" && tools.planReadOnly?.(call.function.name) !== true ? PLAN_REFUSAL : "Permission denied or expired; the tool was not executed." };
               }
             } catch (error51) {
               if (error51 instanceof ChatToolSessionError) fatal = error51;
               result = { ok: false, text: abort.signal.aborted ? "Tool interrupted; an operation already dispatched may have taken effect. Verify its state before retrying." : safeText(asError(error51).message).slice(0, 2e3) };
             }
-            if (!started) emit({ ...base3(turn.threadId, turnId), type: "item.started", itemType: "tool", itemId: call.id, title: call.function.name });
+            if (!started) emit({ ...base2(turn.threadId, turnId), type: "item.started", itemType: "tool", itemId: call.id, title: call.function.name });
             const text4 = safeText(result.text);
             const output = preview({ ok: result.ok, result: text4 });
-            emit({ ...base3(turn.threadId, turnId), type: "item.completed", itemType: "tool", itemId: call.id, ok: result.ok, output });
+            emit({ ...base2(turn.threadId, turnId), type: "item.completed", itemType: "tool", itemId: call.id, ok: result.ok, output });
             if (!result.ok) toolFailed = true;
             messages.push({ role: "tool", tool_call_id: call.id, content: JSON.stringify({ ok: result.ok, result: text4 }) });
             screenshotParts.push(...chatToolImages(call.id, result.images));
@@ -43948,11 +44015,11 @@ function createOpenAIChatRuntime(options) {
           stopReason = "interrupted";
         }
         if (failure && (!abort.signal.aborted || cleanupFailed)) {
-          emit({ ...base3(turn.threadId, turnId), type: "runtime.error", message: failure, terminal: !abort.signal.aborted });
+          emit({ ...base2(turn.threadId, turnId), type: "runtime.error", message: failure, terminal: !abort.signal.aborted });
         }
         active.delete(turn.threadId);
         emit({
-          ...base3(turn.threadId, turnId),
+          ...base2(turn.threadId, turnId),
           type: "turn.completed",
           ok,
           stopReason,
@@ -44029,6 +44096,7 @@ var usageFrom, asError;
 var init_openai_chat = __esm({
   "server/drivers/openai-chat.ts"() {
     "use strict";
+    init_plan_policy();
     init_contracts();
     init_redact2();
     init_tool_summary();
@@ -44149,15 +44217,15 @@ function unquote2(raw) {
   }
   return value;
 }
-function readGrokModelCatalog(env = process.env, base3 = STATIC_GROK_MODELS) {
+function readGrokModelCatalog(env = process.env, base2 = STATIC_GROK_MODELS) {
   const path4 = join35(grokHome(env), "config.toml");
   let text4 = "";
   try {
     text4 = readFileSync19(path4, "utf8");
   } catch {
-    return base3;
+    return base2;
   }
-  const options = base3.options.map((o) => ({ ...o }));
+  const options = base2.options.map((o) => ({ ...o }));
   const seen = new Set(options.map((o) => o.id));
   let configuredDefault = null;
   let current = null;
@@ -44200,7 +44268,7 @@ function readGrokModelCatalog(env = process.env, base3 = STATIC_GROK_MODELS) {
   }
   flush();
   return {
-    default: configuredDefault && seen.has(configuredDefault) ? configuredDefault : base3.default,
+    default: configuredDefault && seen.has(configuredDefault) ? configuredDefault : base2.default,
     options
   };
 }
@@ -44211,12 +44279,12 @@ function classifyGrokError(error51) {
   return classifyEngineFailure(text4)?.kind === "usage_limited" ? "quota_or_region_restriction" : void 0;
 }
 function suggestGrokSlug(host, model, taken) {
-  let base3 = `${host}-${model}`.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
-  if (!base3 || !/^[a-z]/.test(base3)) base3 = `m-${base3 || "model"}`;
-  let slug = base3;
+  let base2 = `${host}-${model}`.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+  if (!base2 || !/^[a-z]/.test(base2)) base2 = `m-${base2 || "model"}`;
+  let slug = base2;
   let n3 = 2;
   while (taken.has(slug)) {
-    slug = `${base3}-${n3}`;
+    slug = `${base2}-${n3}`;
     n3 += 1;
   }
   return slug;
@@ -45150,15 +45218,15 @@ function resolveCursorAcpModelId(available, wanted) {
   if (!want) return null;
   const ids = available.filter((m3) => typeof m3?.modelId === "string" && m3.modelId);
   if (!ids.length) return null;
-  const base3 = (id) => id.split("[")[0].trim().toLowerCase();
+  const base2 = (id) => id.split("[")[0].trim().toLowerCase();
   const exact = ids.find((m3) => m3.modelId.toLowerCase() === want);
   if (exact) return exact.modelId;
-  const byBase = ids.find((m3) => base3(m3.modelId) === want);
+  const byBase = ids.find((m3) => base2(m3.modelId) === want);
   if (byBase) return byBase.modelId;
   const byName = ids.find((m3) => (m3.name ?? "").trim().toLowerCase() === want);
   if (byName) return byName.modelId;
   if (want === "auto" || want === "default") {
-    const dflt = ids.find((m3) => base3(m3.modelId) === "default");
+    const dflt = ids.find((m3) => base2(m3.modelId) === "default");
     if (dflt) return dflt.modelId;
   }
   return null;
@@ -48738,25 +48806,25 @@ var init_atomic_engine_release = __esm({
     "use strict";
     ASSETS = [
       {
-        version: "0.21.4-7eb41cb",
+        version: "0.21.4-4cc340e",
         platform: "darwin-arm64",
-        url: "https://ugmbfkqvogfuvufzjxtb.supabase.co/storage/v1/object/public/atomic-updates/atomic/K_5FMcrZFZ5AE2K-Lydn-Tis/atomic-engine-0.21.4-7eb41cb-darwin-arm64.tar.gz",
-        bytes: 114827855,
-        sha512: "357648850bc4042960fa0f1ef01415f9066c1beb445f5a0edd66a2f9c05e8fcf68b1d692ec6d81bb45c80b7d7dadedf828721d8020c6e12639de7730370177af"
+        url: "https://ugmbfkqvogfuvufzjxtb.supabase.co/storage/v1/object/public/atomic-updates/atomic/K_5FMcrZFZ5AE2K-Lydn-Tis/atomic-engine-0.21.4-4cc340e-darwin-arm64.tar.gz",
+        bytes: 115631334,
+        sha512: "666626a535dce48f22087e26f7c14702dda4028b2c6759952017cffa73f37d86b16f5d8b6f81fb0efb535cb285ba4ddb6a5da3fd7e709ea0aa8b2b8c783e0c17"
       },
       {
-        version: "0.21.4-7eb41cb",
+        version: "0.21.4-4cc340e",
         platform: "win32-x64",
-        url: "https://ugmbfkqvogfuvufzjxtb.supabase.co/storage/v1/object/public/atomic-updates/atomic/K_5FMcrZFZ5AE2K-Lydn-Tis/atomic-engine-0.21.4-7eb41cb-win32-x64.tar.gz",
-        bytes: 102379095,
-        sha512: "e3f3ff51513df37f79165e9408395d771f6136cfeb3207417741b421347f7f183209a2865c70fe3175a20dc35ef5bc409213bd3bbc5f8b614d7d08f2ff8edd07"
+        url: "https://ugmbfkqvogfuvufzjxtb.supabase.co/storage/v1/object/public/atomic-updates/atomic/K_5FMcrZFZ5AE2K-Lydn-Tis/atomic-engine-0.21.4-4cc340e-win32-x64.tar.gz",
+        bytes: 103355479,
+        sha512: "4a074d1d2254ce697ed7ddf794b6d56e1f62374d1ae5f533f7fea12c7f18af46f47f33fd38f9e09d3ca048ef027882b6b271dd229f40a9ffcb7f3f23db5d1bb0"
       },
       {
-        version: "0.21.4-acc9ee6",
+        version: "0.21.4-4cc340e",
         platform: "darwin-x64",
-        url: "https://ugmbfkqvogfuvufzjxtb.supabase.co/storage/v1/object/public/atomic-updates/atomic/K_5FMcrZFZ5AE2K-Lydn-Tis/atomic-engine-0.21.4-acc9ee6-darwin-x64.tar.gz",
-        bytes: 92108962,
-        sha512: "12c3fcba9ff17ec2a53fdbd39e8f14fb23786be256f2e19ce63ba011c2317231e58052b1b1b0a5bdcd7be2b23d9cf7edaeb267ad312e1ac862e128ac70f3aa00"
+        url: "https://ugmbfkqvogfuvufzjxtb.supabase.co/storage/v1/object/public/atomic-updates/atomic/K_5FMcrZFZ5AE2K-Lydn-Tis/atomic-engine-0.21.4-4cc340e-darwin-x64.tar.gz",
+        bytes: 92883251,
+        sha512: "eec5fcbbcdbe44db76f938cb3dd98fedfc6c644cc054c75d0ad3daaf66e39f60dc6b75fa3f8cdbbc2cc3760a2ea7d3fc608a1cf7a42c4a020e6cd4d6dc823df0"
       }
     ];
   }
@@ -56352,7 +56420,43 @@ function customAcpTurnModel(model, env) {
   if (model && decodeInjectId(model)) ensureHermesInjectProvider(model, env, atomicEngineHome2(env));
   return model;
 }
-var PASSTHROUGH, DEFAULT_ATOMIC_ENGINE_CLI, CONFIGURE_HINT, support11, base2, CustomAcpDriver;
+function customDriver(options) {
+  const base2 = createAcpDriver(options);
+  return {
+    ...base2,
+    // decodeAcpConfig never throws (a missing cli falls back to defaultCli,
+    // which is empty here). Turn every blank-command path into the same
+    // teaching shadow row instead of a bare spawn ENOENT at first send.
+    decodeConfig(raw) {
+      const decoded = base2.decodeConfig(raw);
+      if (!decoded.cli.trim()) throw new Error(CONFIGURE_HINT);
+      return decoded;
+    },
+    async create(input) {
+      if (!input.config.cli.trim()) throw new Error(CONFIGURE_HINT);
+      const instance = await base2.create(input);
+      const asset = atomicEngineAsset();
+      if (!asset || !isAtomicEngine(input.instanceId, input.config.cli) || input.config.cli.trim() !== DEFAULT_ATOMIC_ENGINE_CLI) return instance;
+      const install = {
+        managed: { label: "Install Atomic Engine", downloadBytes: asset.bytes }
+      };
+      return {
+        ...instance,
+        get models() {
+          return instance.models;
+        },
+        install,
+        installRuntime: async (onProgress) => {
+          await installAtomicEngine({
+            // "verifying" is part of the download as far as setup's progress bar goes
+            onProgress: (progress) => onProgress?.({ ...progress, phase: progress.phase === "verifying" ? "downloading" : progress.phase })
+          });
+        }
+      };
+    }
+  };
+}
+var PASSTHROUGH, DEFAULT_ATOMIC_ENGINE_CLI, CONFIGURE_HINT, support11, CustomAcpDriver, AtomicEngineDriver;
 var init_custom = __esm({
   "server/drivers/acp/custom.ts"() {
     "use strict";
@@ -56409,40 +56513,21 @@ var init_custom = __esm({
       },
       snapshot: (env, config2, instanceId) => customAcpSnapshot(env, config2.cli, instanceId)
     };
-    base2 = createAcpDriver(support11);
-    CustomAcpDriver = {
-      ...base2,
-      // decodeAcpConfig never throws (a missing cli falls back to defaultCli,
-      // which is empty here). Turn every blank-command path into the same
-      // teaching shadow row instead of a bare spawn ENOENT at first send.
-      decodeConfig(raw) {
-        const decoded = base2.decodeConfig(raw);
-        if (!decoded.cli.trim()) throw new Error(CONFIGURE_HINT);
-        return decoded;
-      },
-      async create(input) {
-        if (!input.config.cli.trim()) throw new Error(CONFIGURE_HINT);
-        const instance = await base2.create(input);
-        const asset = atomicEngineAsset();
-        if (!asset || !isAtomicEngine(input.instanceId, input.config.cli) || input.config.cli.trim() !== DEFAULT_ATOMIC_ENGINE_CLI) return instance;
-        const install = {
-          managed: { label: "Install Atomic Engine", downloadBytes: asset.bytes }
-        };
-        return {
-          ...instance,
-          get models() {
-            return instance.models;
-          },
-          install,
-          installRuntime: async (onProgress) => {
-            await installAtomicEngine({
-              // "verifying" is part of the download as far as setup's progress bar goes
-              onProgress: (progress) => onProgress?.({ ...progress, phase: progress.phase === "verifying" ? "downloading" : progress.phase })
-            });
-          }
-        };
+    CustomAcpDriver = customDriver(support11);
+    AtomicEngineDriver = customDriver({
+      ...support11,
+      driverKind: "atomicEngine",
+      displayName: "Atomic Engine",
+      defaultCli: DEFAULT_ATOMIC_ENGINE_CLI,
+      async configureSession(context) {
+        await support11.configureSession?.(context);
+        const modeId = context.turn.approvalMode === "plan" ? "atomic-plan-v1" : "default";
+        const reply = await context.request("session/set_mode", { sessionId: context.sessionId, modeId });
+        if (modeId === "atomic-plan-v1" && (reply?._meta?.atomicPlanVersion !== 1 || reply?._meta?.mode !== modeId)) {
+          throw new Error("Update Atomic Engine before using Plan: this build does not enforce read-only tools");
+        }
       }
-    };
+    });
   }
 });
 
@@ -57020,17 +57105,17 @@ var init_pi = __esm({
         const catalogEnv = piEnvironment({ ...process.env, ...input.environment });
         let models2 = EMPTY3;
         const readModels = async () => {
-          let base4 = models2;
+          let base3 = models2;
           try {
             const resolved = await fetchPiModels(config2.cli, catalogEnv);
-            if (resolved.options.length) base4 = resolved;
+            if (resolved.options.length) base3 = resolved;
           } catch {
           }
           try {
-            const next = await applyPiLocalCatalog(base4, catalogEnv);
+            const next = await applyPiLocalCatalog(base3, catalogEnv);
             if (next.options.length) models2 = next;
           } catch {
-            if (base4.options.length) models2 = base4;
+            if (base3.options.length) models2 = base3;
           }
         };
         const refreshModels = async () => {
@@ -57043,7 +57128,7 @@ var init_pi = __esm({
         const emit = (event) => {
           for (const l of Array.from(listeners)) l(event);
         };
-        const base3 = (threadId, turnId) => ({
+        const base2 = (threadId, turnId) => ({
           eventId: newEventId(),
           provider: DRIVER_KIND6,
           providerInstanceId: instanceId,
@@ -57130,14 +57215,14 @@ var init_pi = __esm({
             const text4 = assistantText;
             assistantText = "";
             if (!text4.trim()) return;
-            emit({ ...base3(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
+            emit({ ...base2(threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
           };
           const settle = (ok, stopReason, usage) => {
             if (settled) return;
             settled = true;
             flushAssistantText();
             emit({
-              ...base3(threadId, turnId),
+              ...base2(threadId, turnId),
               type: "turn.completed",
               ok,
               stopReason: stopReason ?? (ok ? "end_turn" : "failed"),
@@ -57189,16 +57274,16 @@ var init_pi = __esm({
                 if (!e) return;
                 if (e.type === "text_delta" && typeof e.delta === "string") {
                   assistantText += e.delta;
-                  emit({ ...base3(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta: e.delta });
+                  emit({ ...base2(threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta: e.delta });
                 } else if (e.type === "thinking_delta" && typeof e.delta === "string") {
-                  emit({ ...base3(threadId, turnId), type: "content.delta", streamKind: "reasoning_text", delta: e.delta });
+                  emit({ ...base2(threadId, turnId), type: "content.delta", streamKind: "reasoning_text", delta: e.delta });
                 }
                 return;
               }
               case "tool_execution_start": {
                 flushAssistantText();
                 emit({
-                  ...base3(threadId, turnId),
+                  ...base2(threadId, turnId),
                   type: "item.started",
                   itemType: "tool",
                   itemId: evt.toolCallId,
@@ -57210,7 +57295,7 @@ var init_pi = __esm({
               }
               case "tool_execution_end": {
                 emit({
-                  ...base3(threadId, turnId),
+                  ...base2(threadId, turnId),
                   type: "item.completed",
                   itemType: "tool",
                   itemId: evt.toolCallId,
@@ -57240,7 +57325,7 @@ var init_pi = __esm({
                     mcpTempDir ? join47(mcpTempDir, PI_TOOL_HINTS_FILE) : null
                   );
                   emit({
-                    ...base3(threadId, turnId),
+                    ...base2(threadId, turnId),
                     requestId: reqId,
                     type: "request.opened",
                     requestType: isQuestion ? "question" : "permission",
@@ -57259,7 +57344,7 @@ var init_pi = __esm({
                 const usage = evt.usage ?? evt.message?.usage;
                 if (sr2 === "error" || sr2 === "failed") {
                   emit({
-                    ...base3(threadId, turnId),
+                    ...base2(threadId, turnId),
                     type: "runtime.error",
                     message: String(evt.message?.errorMessage ?? "pi turn failed").slice(0, 2e3)
                   });
@@ -57290,14 +57375,14 @@ var init_pi = __esm({
           child.on("error", (err) => {
             const fail = describeSpawnFailure(err, config2.cli);
             rejectWaiters(new Error(fail.message));
-            emit({ ...base3(threadId, turnId), type: "runtime.error", message: fail.message, setup: fail.setup });
+            emit({ ...base2(threadId, turnId), type: "runtime.error", message: fail.message, setup: fail.setup });
             settle(false);
           });
           child.on("close", () => {
             rejectWaiters(new Error("pi process exited before replying"));
             settle(false);
           });
-          emit({ ...base3(threadId, turnId), type: "turn.started" });
+          emit({ ...base2(threadId, turnId), type: "turn.started" });
           const sessionPath = typeof turn.resumeCursor === "string" ? turn.resumeCursor : null;
           let sessionFile = sessionPath;
           try {
@@ -57307,7 +57392,7 @@ var init_pi = __esm({
             const hs2 = await hsPromise;
             if (hs2?.sessionFile) sessionFile = hs2.sessionFile;
             emit({
-              ...base3(threadId, turnId),
+              ...base2(threadId, turnId),
               type: "session.started",
               sessionId: sessionFile ?? hs2?.sessionId ?? null,
               model: turn.model ?? null
@@ -57419,7 +57504,7 @@ ${turn.text}` : turn.text;
               entry.pending.delete(requestId);
               answer({ behavior: decision.behavior, message: decision.message });
               emit({
-                ...base3(threadId, entry.turnId),
+                ...base2(threadId, entry.turnId),
                 requestId,
                 type: "request.resolved",
                 behavior: decision.behavior,
@@ -57929,7 +58014,7 @@ function createAppleIntelligenceInstance(input, deps = {}) {
   const emit = (event) => {
     for (const listener of Array.from(listeners)) listener(event);
   };
-  const base3 = (threadId, turnId) => ({
+  const base2 = (threadId, turnId) => ({
     eventId: newEventId(),
     provider: "appleIntelligence",
     threadId,
@@ -57947,25 +58032,25 @@ function createAppleIntelligenceInstance(input, deps = {}) {
       resolveDone = resolve14;
     });
     active.set(turn.threadId, { abort, turnId, done });
-    emit({ ...base3(turn.threadId, turnId), type: "turn.started" });
-    emit({ ...base3(turn.threadId, turnId), type: "session.started", sessionId: null, model: APPLE_ON_DEVICE_MODEL });
+    emit({ ...base2(turn.threadId, turnId), type: "turn.started" });
+    emit({ ...base2(turn.threadId, turnId), type: "session.started", sessionId: null, model: APPLE_ON_DEVICE_MODEL });
     void (async () => {
       let ok = false;
       let failure;
       try {
         const request = shapeRequest(turn, inputBudget(availability.contextSize));
-        const text4 = await client.stream(request, (delta) => emit({ ...base3(turn.threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta }), abort.signal);
+        const text4 = await client.stream(request, (delta) => emit({ ...base2(turn.threadId, turnId), type: "content.delta", streamKind: "assistant_text", delta }), abort.signal);
         if (!text4.trim()) throw new Error("Apple Intelligence returned an empty response.");
-        emit({ ...base3(turn.threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
+        emit({ ...base2(turn.threadId, turnId), type: "item.completed", itemType: "assistant_text", text: text4 });
         ok = true;
       } catch (error51) {
         failure = error51 instanceof Error ? error51.message : String(error51);
       } finally {
         const interrupted = abort.signal.aborted;
-        if (failure && !interrupted) emit({ ...base3(turn.threadId, turnId), type: "runtime.error", message: failure, terminal: true });
+        if (failure && !interrupted) emit({ ...base2(turn.threadId, turnId), type: "runtime.error", message: failure, terminal: true });
         active.delete(turn.threadId);
         emit({
-          ...base3(turn.threadId, turnId),
+          ...base2(turn.threadId, turnId),
           type: "turn.completed",
           ok: ok && !interrupted,
           stopReason: interrupted ? "interrupted" : ok ? null : "error",
@@ -58098,6 +58183,7 @@ var init_builtIn = __esm({
       VibeAgentDriver,
       HermesAgentDriver,
       CustomAcpDriver,
+      AtomicEngineDriver,
       PiDriver,
       OpenAICompatDriver,
       ClaudeDriver,
@@ -58143,7 +58229,7 @@ function httpFailure(status, completion) {
   return new SetupApiError(`${prefix} Check the API URL and provider settings, then try again.`);
 }
 async function setupJson(url2, key, body) {
-  const base3 = normalizeApiUrl(url2);
+  const base2 = normalizeApiUrl(url2);
   const token = key;
   if (!token || /[\u0000-\u0020\u007f]/u.test(token)) throw new SetupApiError("Enter a non-empty API key without spaces or line breaks.");
   const completion = body !== void 0;
@@ -58154,7 +58240,7 @@ async function setupJson(url2, key, body) {
   try {
     return await Promise.race([
       (async () => {
-        const response = await fetch(`${base3}${completion ? "/chat/completions" : "/models"}`, {
+        const response = await fetch(`${base2}${completion ? "/chat/completions" : "/models"}`, {
           method: completion ? "POST" : "GET",
           headers: { authorization: `Bearer ${token}`, ...completion ? { "content-type": "application/json" } : {} },
           ...completion ? { body: JSON.stringify(body) } : {},
@@ -59137,7 +59223,7 @@ async function clearBrowserSessionState(binaryPath, session, options = {}) {
     }
   };
   try {
-    for (const base3 of bases) for (const suffix of [".json", ".json.enc", ".json.previous", ".json.enc.previous"]) remove(join53(directory, base3 + suffix));
+    for (const base2 of bases) for (const suffix of [".json", ".json.enc", ".json.previous", ".json.enc.previous"]) remove(join53(directory, base2 + suffix));
     const pendingDirectory = join53(directory, ".tmp");
     let pendingFiles = [];
     try {
@@ -59145,7 +59231,7 @@ async function clearBrowserSessionState(binaryPath, session, options = {}) {
     } catch (error51) {
       if (error51.code !== "ENOENT") throw error51;
     }
-    const candidates = bases.map((base3) => new RegExp(`^${base3}-candidate-[0-9]+\\.json(?:\\.enc)?$`));
+    const candidates = bases.map((base2) => new RegExp(`^${base2}-candidate-[0-9]+\\.json(?:\\.enc)?$`));
     for (const name of pendingFiles) if (candidates.some((candidate) => candidate.test(name))) remove(join53(pendingDirectory, name));
     preparedBrowserSessions.delete(join53(directory, session));
     return true;
@@ -62335,7 +62421,7 @@ function createFleetAgent(options) {
   const layout = fleetLayout(options.root ?? "/");
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const auditFile = options.auditFile ?? layout.auditFile;
-  const base3 = () => ({
+  const base2 = () => ({
     action: "list",
     admins: [],
     members: [],
@@ -62411,7 +62497,7 @@ function createFleetAgent(options) {
       if (method === "POST" && url2.pathname === "/workspaces") {
         const body = await readBody(req);
         const result = await act({
-          ...base3(),
+          ...base2(),
           action: "create",
           slug: text(body.slug),
           admins: strings(body.admins),
@@ -62430,7 +62516,7 @@ function createFleetAgent(options) {
         return send(result.status, result.body);
       }
       if (method === "POST" && url2.pathname === "/upgrade") {
-        const result = await act({ ...base3(), action: "upgrade" });
+        const result = await act({ ...base2(), action: "upgrade" });
         return send(result.status, result.body);
       }
       const match = /^\/workspaces\/([a-z0-9-]+)(?:\/(users|providers|suspend|resume))?$/.exec(url2.pathname);
@@ -62440,22 +62526,22 @@ function createFleetAgent(options) {
         const sub = match[2];
         if (method === "POST" && sub === "providers") {
           const body = await readBody(req);
-          const result = await act({ ...base3(), action: "providers", slug, openrouterModels: models(body.models) });
+          const result = await act({ ...base2(), action: "providers", slug, openrouterModels: models(body.models) });
           return send(result.status, result.body);
         }
         if (method === "POST" && sub === "users") {
           const body = await readBody(req);
           const action = body.action === "remove" ? "remove" : body.action === "add" ? "add" : void 0;
-          const result = await act({ ...base3(), action: "users", slug, userAction: action, email: text(body.email), chatOnly: body.chatOnly === true });
+          const result = await act({ ...base2(), action: "users", slug, userAction: action, email: text(body.email), chatOnly: body.chatOnly === true });
           return send(result.status, result.body);
         }
         if (method === "POST" && (sub === "suspend" || sub === "resume")) {
-          const result = await act({ ...base3(), action: sub, slug });
+          const result = await act({ ...base2(), action: sub, slug });
           return send(result.status, result.body);
         }
         if (method === "DELETE" && !sub) {
           const body = await readBody(req);
-          const result = await act({ ...base3(), action: "delete", slug, yes: true, keepData: body.keepData === true });
+          const result = await act({ ...base2(), action: "delete", slug, yes: true, keepData: body.keepData === true });
           return send(result.status, result.body);
         }
       }