@clipboard-health/groundcrew 4.36.1 → 4.37.0

package/dist/commands/resumeWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAenE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;CACd;AA0ID,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA8Ef;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}
+{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgBnE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;CACd;AA0ID,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAuFf;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}

package/dist/commands/resumeWorkspace.js

@@ -6,6 +6,7 @@ import { composeAgentLaunch, openAgentWorkspace, prepareAgentLaunch } from "../l
 import { workerEnvironmentForTask } from "../lib/launchCommand.js";
 import { readRunState, recordRunState } from "../lib/runState.js";
 import { removeStagedPrompt, stageBuildSecrets, stagePromptText, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
+import { taskSourceWritePathsForCompletion } from "../lib/taskSourceFilesystem.js";
 import { naturalIdFromCanonical, toCanonicalId } from "../lib/taskSource.js";
 import { errorMessage, log } from "../lib/util.js";
 import { workspaces } from "../lib/workspaces.js";
@@ -141,6 +142,13 @@ export async function resumeWorkspace(config, options) {
     let srtSettingsDir;
     try {
         let launchCommand;
+        const taskSourceWritePaths = runner === "safehouse" || runner === "srt"
+            ? taskSourceWritePathsForCompletion({
+                config,
+                taskId: context.completionTaskId,
+                workingDir: launchDir,
+            })
+            : undefined;
         ({ launchCommand, srtSettingsDir } = composeAgentLaunch({
             runner,
             task,
@@ -152,6 +160,7 @@ export async function resumeWorkspace(config, options) {
             sandboxName,
             workspaceKind,
             workerEnvironment: workerEnvironmentForTask(context.completionTaskId),
+            taskSourceWritePaths,
         }));
         const launchCmd = stageWorkspaceLaunchCommand(stagedPrompt.directory, launchCommand);
         await openAgentWorkspace({

package/dist/commands/setupWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAuBnE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAuBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CA+Hf;AAgJD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CA6Cf"}
+{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAwBnE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAuBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CAwIf;AAgJD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CA6Cf"}

package/dist/commands/setupWorkspace.js

@@ -7,6 +7,7 @@ import { workerEnvironmentForTask } from "../lib/launchCommand.js";
 import { resolvePrepareWorktreeCommand } from "../lib/repositoryHooks.js";
 import { recordRunState } from "../lib/runState.js";
 import { stageBuildSecrets, stagePromptFromTemplate, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
+import { taskSourceWritePathsForCompletion } from "../lib/taskSourceFilesystem.js";
 import { naturalIdFromCanonical } from "../lib/taskSource.js";
 import { debug, errorMessage, log, okMark } from "../lib/util.js";
 import { workspaces } from "../lib/workspaces.js";
@@ -82,6 +83,13 @@ export async function setupWorkspace(config, options, runOptions = {}) {
         });
         const secretsFile = prepareWorktreeCommand === undefined ? undefined : stageBuildSecrets(promptDir);
         const completionTaskId = options.completionTaskId ?? task;
+        const taskSourceWritePaths = runner === "safehouse" || runner === "srt"
+            ? taskSourceWritePathsForCompletion({
+                config,
+                taskId: completionTaskId,
+                workingDir: launchDir,
+            })
+            : undefined;
         const { launchCommand, srtSettingsDir: stagedSrtSettingsDir } = composeAgentLaunch({
             runner,
             task,
@@ -94,6 +102,7 @@ export async function setupWorkspace(config, options, runOptions = {}) {
             sandboxName,
             workspaceKind,
             workerEnvironment: workerEnvironmentForTask(completionTaskId),
+            taskSourceWritePaths,
         });
         srtSettingsDir = stagedSrtSettingsDir;
         const launchCmd = stageWorkspaceLaunchCommand(promptDir, launchCommand);

package/dist/lib/adapters/todo-txt/fileErrors.d.ts

@@ -0,0 +1,4 @@
+export declare function fileErrorCode(error: unknown): string | undefined;
+export declare function isFileErrorCode(error: unknown, code: string): boolean;
+export declare function describeFileError(error: unknown): string;
+//# sourceMappingURL=fileErrors.d.ts.map

package/dist/lib/adapters/todo-txt/fileErrors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileErrors.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapters/todo-txt/fileErrors.ts"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMhE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErE;AAMD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMxD"}

package/dist/lib/adapters/todo-txt/fileErrors.js

@@ -0,0 +1,20 @@
+export function fileErrorCode(error) {
+    /* v8 ignore next @preserve -- fs failures are Error objects carrying a string code */
+    if (!(error instanceof Error) || !errorHasCode(error)) {
+        return undefined;
+    }
+    return String(error.code);
+}
+export function isFileErrorCode(error, code) {
+    return fileErrorCode(error) === code;
+}
+function errorHasCode(error) {
+    return Object.hasOwn(error, "code");
+}
+export function describeFileError(error) {
+    const code = fileErrorCode(error);
+    /* v8 ignore next @preserve -- callers pass filesystem Error objects; fallback is defensive */
+    const message = error instanceof Error ? error.message : String(error);
+    /* v8 ignore next @preserve -- filesystem Error objects carry a code; fallback is defensive */
+    return code === undefined ? message : `${code}: ${message}`;
+}

package/dist/lib/adapters/todo-txt/source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapters/todo-txt/source.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAKL,KAAK,UAAU,EAEhB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AA8VxD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,cAAc,GACtB,UAAU,CA2KZ"}
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapters/todo-txt/source.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAKL,KAAK,UAAU,EAEhB,MAAM,qBAAqB,CAAC;AAM7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AA2WxD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,cAAc,GACtB,UAAU,CA2KZ"}

package/dist/lib/adapters/todo-txt/source.js

@@ -5,6 +5,7 @@ import { AGENT_ANY } from "../../config.js";
 import { toCanonicalId, } from "../../taskSource.js";
 import { formatKnownRepositories } from "../../repositoryValidation.js";
 import { readEnvironmentVariable } from "../../util.js";
+import { describeFileError, isFileErrorCode } from "./fileErrors.js";
 import { isActiveForFetch, normalizeToIssue } from "./normalizer.js";
 import { DATE_RE, getMetadataFirst, parseAllLines } from "./parser.js";
 import { copyPromptFile, updateTaskStatus, validateTodoFile, withLock } from "./writeback.js";
@@ -33,8 +34,11 @@ function fileUpdatedAt(filePath) {
     try {
         return new Date(statSync(filePath).mtimeMs).toISOString();
     }
-    catch {
-        /* v8 ignore next @preserve -- statSync failing means file missing; covered by empty-file tests */
+    catch (error) {
+        /* v8 ignore next @preserve -- statSync failing with ENOENT means file missing; covered by empty-file tests */
+        if (!isFileErrorCode(error, "ENOENT")) {
+            throw todoFileAccessError("stat", filePath, error);
+        }
         return new Date().toISOString();
     }
 }
@@ -43,13 +47,19 @@ function readAndParseTodo(todoPath) {
     try {
         content = readFileSync(todoPath, "utf8");
     }
-    catch {
+    catch (error) {
+        if (!isFileErrorCode(error, "ENOENT")) {
+            throw todoFileAccessError("read", todoPath, error);
+        }
         content = "";
     }
     return {
         parsedAll: parseAllLines(content),
     };
 }
+function todoFileAccessError(operation, filePath, error) {
+    return new Error(`todo-txt: could not ${operation} todo file ${filePath}: ${describeFileError(error)}`);
+}
 function buildIssue(options) {
     const { parsedIndex, parsedAll, sourceName, todoPath, tasksDir, defaultRepository, updatedAt } = options;
     const parsed = parsedAll[parsedIndex];
@@ -255,8 +265,9 @@ function appendTodoLine(todoPath, line) {
         separator = current.length === 0 || current.endsWith("\n") ? "" : "\n";
     }
     catch (error) {
-        /* v8 ignore else @preserve -- no explicit else branch; full-suite V8 coverage remaps the synthetic else inconsistently. */
-        if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) {
+        /* v8 ignore next @preserve -- non-ENOENT append failures are an fs passthrough, not todo-txt logic */
+        if (!isFileErrorCode(error, "ENOENT")) {
+            /* v8 ignore next @preserve -- non-ENOENT append failures are an fs passthrough, not todo-txt logic */
             throw error;
         }
     }

package/dist/lib/adapters/todo-txt/writeback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"writeback.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapters/todo-txt/writeback.ts"],"names":[],"mappings":"AAYA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAqOD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,gBAAgB,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAQxF;AAED,KAAK,cAAc,GAAG,aAAa,GAAG,WAAW,GAAG,MAAM,CAAC;AAwF3D,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,cAAc,GACxB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CA+ElC;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAQrE;AA8GD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,MAAM,EAAE,CA0CV"}
+{"version":3,"file":"writeback.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapters/todo-txt/writeback.ts"],"names":[],"mappings":"AAaA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAqOD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,gBAAgB,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAQxF;AAED,KAAK,cAAc,GAAG,aAAa,GAAG,WAAW,GAAG,MAAM,CAAC;AAwF3D,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,cAAc,GACxB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CA+ElC;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAQrE;AAsHD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,MAAM,EAAE,CA0CV"}

package/dist/lib/adapters/todo-txt/writeback.js

@@ -1,5 +1,6 @@
 import { closeSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import path from "node:path";
+import { describeFileError, fileErrorCode } from "./fileErrors.js";
 import { DATE_RE, hashLine, parseAllLines } from "./parser.js";
 import { isValidThresholdValue } from "./normalizer.js";
 function isoDate(date) {
@@ -334,6 +335,13 @@ export function copyPromptFile(oldPath, newPath) {
         // prompt file is optional — copy is best-effort
     }
 }
+function todoFileReadError(todoPath, error) {
+    const code = fileErrorCode(error);
+    if (code === "ENOENT") {
+        return `missing todo file: ${todoPath}`;
+    }
+    return `could not read todo file ${todoPath}: ${describeFileError(error)}`;
+}
 function validatePromptFile(tasksDir, id, promptOverride, title, prefix, errors) {
     const promptPath = promptOverride ?? path.join(tasksDir, `${id}.md`);
     const shouldRequirePrompt = promptOverride !== undefined || title.trim().length === 0;
@@ -405,8 +413,8 @@ export function validateTodoFile(todoPath, tasksDir, knownAgents) {
     try {
         content = readFileSync(todoPath, "utf8");
     }
-    catch {
-        return [`missing todo file: ${todoPath}`];
+    catch (error) {
+        return [todoFileReadError(todoPath, error)];
     }
     const parsedAll = parseAllLines(content);
     const idsSeen = new Map();

package/dist/lib/agentLaunch.d.ts

@@ -20,6 +20,7 @@ export declare function composeAgentLaunch(input: {
     sandboxName?: string | undefined;
     workspaceKind: WorkspaceKind;
     workerEnvironment?: WorkerEnvironment | undefined;
+    taskSourceWritePaths?: readonly string[] | undefined;
 }): {
     launchCommand: string;
     srtSettingsDir: string | undefined;

package/dist/lib/agentLaunch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACnD,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAgChE;AAmDD,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsD/B;AAwBD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB"}
+{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAClD,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACtD,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAmChE;AAmDD,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsD/B;AAwBD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB"}

package/dist/lib/agentLaunch.js

@@ -21,6 +21,7 @@ export function composeAgentLaunch(input) {
             task: input.task,
             worktreeDir: input.worktreeDir,
             definition: input.definition,
+            taskSourceWritePaths: input.taskSourceWritePaths,
         })
         : undefined;
     const safehouseAgentIntegration = input.runner === "safehouse"
@@ -41,6 +42,7 @@ export function composeAgentLaunch(input) {
         srtAgentConfigDirEnv: staged?.agentConfigDirEnv,
         workerEnvironment: input.workerEnvironment,
         safehouseAddDirs: input.runner === "safehouse" ? resolveSafehouseAddDirs(input.worktreeDir) : undefined,
+        safehouseAgentAddDirs: input.runner === "safehouse" ? (input.taskSourceWritePaths ?? []) : undefined,
         safehouseAgentIntegration,
     });
     return { launchCommand, srtSettingsDir: staged?.directory };

package/dist/lib/launchCommand.d.ts

@@ -120,6 +120,11 @@ interface LaunchCommandArguments {
      * pre-existing behavior). Only consumed by the safehouse wrap.
      */
     safehouseAddDirs?: readonly string[] | undefined;
+    /**
+     * Extra read/write paths granted only to the Safehouse agent wrap. These are
+     * intentionally withheld from the repo-controlled prepareWorktree wrap.
+     */
+    safehouseAgentAddDirs?: readonly string[] | undefined;
     /**
      * Extra host-terminal integration surface granted only to the Safehouse agent
      * wrap. The agent may need to execute host shims and reach their sockets

package/dist/lib/launchCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchCommand.d.ts","sourceRoot":"","sources":["../../src/lib/launchCommand.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAcvF;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAgB3E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,MAAM,CAMvF;AAsMD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA8B9D;AAED,QAAA,MAAM,wBAAwB,YAAI,oBAAoB,EAAE,qBAAqB,CAAU,CAAC;AAExF,KAAK,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAK1E;AAsBD,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,UAAU,sBAAsB;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACnE;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAClE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,CAkC7E"}
+{"version":3,"file":"launchCommand.d.ts","sourceRoot":"","sources":["../../src/lib/launchCommand.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAcvF;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAgB3E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,MAAM,CAMvF;AAsMD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA8B9D;AAED,QAAA,MAAM,wBAAwB,YAAI,oBAAoB,EAAE,qBAAqB,CAAU,CAAC;AAExF,KAAK,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAK1E;AAsBD,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,UAAU,sBAAsB;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACnE;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAClE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,CAkC7E"}

package/dist/lib/launchCommand.js

@@ -404,7 +404,13 @@ function buildSafehouseLaunchCommand(arguments_) {
     // Quote the whole value so shell-special chars survive; the trailing space
     // separates it from the next argv token. See `resolveSafehouseAddDirs` for
     // which paths these are and why.
-    const safehouseAddDirsFlag = safehousePathListFlag("--add-dirs", arguments_.safehouseAddDirs ?? []);
+    const safehousePrepareAddDirs = arguments_.safehouseAddDirs ?? [];
+    const safehouseAgentAddDirs = uniqueStrings([
+        ...safehousePrepareAddDirs,
+        ...(arguments_.safehouseAgentAddDirs ?? []),
+    ]);
+    const safehouseAddDirsFlag = safehousePathListFlag("--add-dirs", safehousePrepareAddDirs);
+    const safehouseAgentAddDirsFlag = safehousePathListFlag("--add-dirs", safehouseAgentAddDirs);
     const safehouseAgentAddDirsReadOnlyFlag = safehousePathListFlag("--add-dirs-ro", safehouseAgentIntegration?.addDirsReadOnly ?? []);
     const safehouseWrapper = safehouseClearanceWrapperCommand();
     // Defensive shim+promptDir trap: by the time we arm it, `rm -rf <promptDir>`
@@ -435,12 +441,15 @@ function buildSafehouseLaunchCommand(arguments_) {
     // Running the real launch chain as `sh -c` would make it see `sh`, so use
     // an agent-named symlink to /bin/sh. This preserves per-agent profile
     // selection without enabling every agent profile.
-    `{ ${safehouseWrapper} ${safehouseAddDirsFlag}${safehouseAgentAddDirsReadOnlyFlag}${agentEnvPassFlag}"$_safehouse_shim" -c ${shellSingleQuote(agentCommand)} sh "$_p"; _safehouse_status=$?; rm -rf "$_safehouse_shim_dir"; trap - EXIT; exit "$_safehouse_status"; }`);
+    `{ ${safehouseWrapper} ${safehouseAgentAddDirsFlag}${safehouseAgentAddDirsReadOnlyFlag}${agentEnvPassFlag}"$_safehouse_shim" -c ${shellSingleQuote(agentCommand)} sh "$_p"; _safehouse_status=$?; rm -rf "$_safehouse_shim_dir"; trap - EXIT; exit "$_safehouse_status"; }`);
     return lines.join(" && ");
 }
 function safehousePathListFlag(flagName, paths) {
     return paths.length === 0 ? "" : `${flagName}=${shellSingleQuote(paths.join(":"))} `;
 }
+function uniqueStrings(values) {
+    return [...new Set(values)];
+}
 /**
  * Benign baseline env the srt wraps run under (via `env -i`). This is an
  * allowlist on purpose: srt's CLI spawns its child with the *inherited* host

package/dist/lib/srtLaunch.d.ts

@@ -51,6 +51,8 @@ export declare function buildAndStageSrtLaunch(input: {
     task: string;
     worktreeDir: string;
     definition: AgentDefinition;
+    /** Local task-source directories the agent needs for self-completion writeback. */
+    taskSourceWritePaths?: readonly string[] | undefined;
     /** Defaults to `os.homedir()`. Injected in tests to seed from a fixture home. */
     homeDir?: string;
 }): StagedSrtLaunch;

package/dist/lib/srtLaunch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"srtLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/srtLaunch.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKnD,MAAM,WAAW,eAAe;IAC9B,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAQ/D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;IAC5B,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,eAAe,CA6ClB"}
+{"version":3,"file":"srtLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/srtLaunch.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKnD,MAAM,WAAW,eAAe;IAC9B,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAQ/D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;IAC5B,mFAAmF;IACnF,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACrD,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,eAAe,CA8ClB"}

package/dist/lib/srtLaunch.js

@@ -75,6 +75,7 @@ export function buildAndStageSrtLaunch(input) {
     const agentSettings = buildSrtSettings({
         ...base,
         agent,
+        taskSourceWritePaths: input.taskSourceWritePaths ?? [],
         ...(relocatedConfigDir === undefined ? {} : { relocatedConfigDir }),
     });
     const prepareFile = path.join(directory, "prepare-settings.json");

package/dist/lib/srtPolicy.d.ts

@@ -64,6 +64,11 @@ export interface BuildSrtSettingsInput {
      * to the default config dir), so this is omitted for it.
      */
     relocatedConfigDir?: string;
+    /**
+     * Local task-source directories the worker needs for self-completion
+     * writeback, such as a todo-txt file's parent directory and task prompt dir.
+     */
+    taskSourceWritePaths?: readonly string[];
     /** Defaults to `process.platform`. Injected in tests to exercise both deny-read roots. */
     platform?: NodeJS.Platform;
     /** Defaults to `os.homedir()`. Injected in tests. */

package/dist/lib/srtPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"srtPolicy.d.ts","sourceRoot":"","sources":["../../src/lib/srtPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAMH,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,qBAAqB;IACpC,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAEtF;AAsMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,oBAAoB,CAuHnF"}
+{"version":3,"file":"srtPolicy.d.ts","sourceRoot":"","sources":["../../src/lib/srtPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAMH,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,qBAAqB;IACpC,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAEtF;AAsMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,oBAAoB,CAyHnF"}

package/dist/lib/srtPolicy.js

@@ -251,6 +251,7 @@ export function buildSrtSettings(input) {
         ...profile.readPaths.map(underHome),
         ...keychainRead,
         ...(input.relocatedConfigDir === undefined ? [] : [input.relocatedConfigDir]),
+        ...(input.taskSourceWritePaths ?? []),
     ]);
     const allowWrite = unique([
         input.worktreeDir,
@@ -262,6 +263,7 @@ export function buildSrtSettings(input) {
         // The agent's relocated, writable config home (codex). Absent for agents
         // that write their real home behind a deny-list (claude).
         ...(input.relocatedConfigDir === undefined ? [] : [input.relocatedConfigDir]),
+        ...(input.taskSourceWritePaths ?? []),
     ]);
     const denyWrite = unique([
         nodeGlobalModules,

package/dist/lib/taskSourceFilesystem.d.ts

@@ -0,0 +1,7 @@
+import type { ResolvedConfig } from "./config.ts";
+export declare function taskSourceWritePathsForCompletion(input: {
+    config: Pick<ResolvedConfig, "sources">;
+    taskId: string;
+    workingDir: string;
+}): readonly string[];
+//# sourceMappingURL=taskSourceFilesystem.d.ts.map

package/dist/lib/taskSourceFilesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taskSourceFilesystem.d.ts","sourceRoot":"","sources":["../../src/lib/taskSourceFilesystem.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAUlD,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,SAAS,MAAM,EAAE,CAwBpB"}

package/dist/lib/taskSourceFilesystem.js

@@ -0,0 +1,39 @@
+import path from "node:path";
+import { z } from "zod";
+import { todoTxtAdapterConfigSchema } from "./adapters/todo-txt/schema.js";
+const sourceSelectorShape = z.looseObject({
+    kind: z.string().optional(),
+    name: z.string().optional(),
+    enabled: z.boolean().optional(),
+});
+const DEFAULT_TODO_SOURCE_NAME = "todo";
+export function taskSourceWritePathsForCompletion(input) {
+    const targetSourceName = sourceNameFromTaskId(input.taskId);
+    const paths = [];
+    for (const rawSource of input.config.sources) {
+        const selector = sourceSelectorShape.parse(rawSource);
+        if (selector.enabled === false || selector.kind !== "todo-txt") {
+            continue;
+        }
+        const sourceName = selector.name ?? DEFAULT_TODO_SOURCE_NAME;
+        if (targetSourceName !== undefined && sourceName !== targetSourceName) {
+            continue;
+        }
+        const source = todoTxtAdapterConfigSchema.parse(rawSource);
+        // Completion writeback writes the todo file plus lock/tmp siblings, so the
+        // sandbox grant must cover the todo file's parent directory.
+        paths.push(resolveForWorker(input.workingDir, path.dirname(source.todoPath)));
+        paths.push(resolveForWorker(input.workingDir, source.tasksDir));
+    }
+    return [...new Set(paths)];
+}
+function sourceNameFromTaskId(taskId) {
+    const colonIndex = taskId.indexOf(":");
+    if (colonIndex <= 0) {
+        return undefined;
+    }
+    return taskId.slice(0, colonIndex);
+}
+function resolveForWorker(workingDir, filePath) {
+    return path.resolve(workingDir, filePath);
+}

package/dist/lib/tmuxAdapter.d.ts

@@ -1,9 +1,26 @@
 /**
- * tmux Workspace backend. Workspaces live as windows inside one dedicated
- * `groundcrew` tmux session; the window name is the task id. tmux can't
- * paint status pills, so `open` silently drops `spec.status`. This is the
- * Linux/WSL path where cmux is unavailable.
+ * tmux Workspace backend. Two layouts, chosen by the caller via
+ * `createTmuxAdapter({ sessionPerTask })`. `workspaces.ts` resolves the flag
+ * from the `GROUNDCREW_TMUX_SESSION_PER_TASK` env var.
+ *
+ * - Window model (`sessionPerTask: false`): workspaces live as windows inside
+ *   one dedicated `groundcrew` tmux session; the window name is the task id.
+ * - Session model (`sessionPerTask: true`): each workspace is its own dedicated
+ *   tmux session named after the task id, so windows act as tabs and panes as
+ *   splits without polluting a shared session. Sessions we create are tagged
+ *   with the `@groundcrew_managed` user option so `list`/`close` ignore the
+ *   user's own same-named sessions.
+ *
+ * Either way tmux can't paint status pills, so `open` silently drops
+ * `spec.status`. This is the Linux/WSL path where cmux is unavailable.
  */
 import { type Adapter } from "./workspaceAdapter.ts";
-export declare const tmuxAdapter: Adapter;
+/**
+ * Builds the tmux adapter for the resolved layout. `sessionPerTask` is decided
+ * by `workspaces.ts` from the `GROUNDCREW_TMUX_SESSION_PER_TASK` env var, so
+ * the adapter itself stays config-agnostic.
+ */
+export declare function createTmuxAdapter({ sessionPerTask }: {
+    sessionPerTask: boolean;
+}): Adapter;
 //# sourceMappingURL=tmuxAdapter.d.ts.map

package/dist/lib/tmuxAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tmuxAdapter.d.ts","sourceRoot":"","sources":["../../src/lib/tmuxAdapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,uBAAuB,CAAC;AAY/B,eAAO,MAAM,WAAW,EAAE,OA+DzB,CAAC"}
+{"version":3,"file":"tmuxAdapter.d.ts","sourceRoot":"","sources":["../../src/lib/tmuxAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,KAAK,OAAO,EAMb,MAAM,uBAAuB,CAAC;AAqB/B;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,cAAc,EAAE,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAiB1F"}

package/dist/lib/tmuxAdapter.js

@@ -1,8 +1,18 @@
 /**
- * tmux Workspace backend. Workspaces live as windows inside one dedicated
- * `groundcrew` tmux session; the window name is the task id. tmux can't
- * paint status pills, so `open` silently drops `spec.status`. This is the
- * Linux/WSL path where cmux is unavailable.
+ * tmux Workspace backend. Two layouts, chosen by the caller via
+ * `createTmuxAdapter({ sessionPerTask })`. `workspaces.ts` resolves the flag
+ * from the `GROUNDCREW_TMUX_SESSION_PER_TASK` env var.
+ *
+ * - Window model (`sessionPerTask: false`): workspaces live as windows inside
+ *   one dedicated `groundcrew` tmux session; the window name is the task id.
+ * - Session model (`sessionPerTask: true`): each workspace is its own dedicated
+ *   tmux session named after the task id, so windows act as tabs and panes as
+ *   splits without polluting a shared session. Sessions we create are tagged
+ *   with the `@groundcrew_managed` user option so `list`/`close` ignore the
+ *   user's own same-named sessions.
+ *
+ * Either way tmux can't paint status pills, so `open` silently drops
+ * `spec.status`. This is the Linux/WSL path where cmux is unavailable.
  */
 import { isSignalAborted, runWorkspaceCommand, } from "./workspaceAdapter.js";
 import { debug, errorMessage, readEnvironmentVariable } from "./util.js";
@@ -13,99 +23,87 @@ const TMUX_SESSION = "groundcrew";
 // sentinel and filter it out — it stays around as a placeholder so the
 // session doesn't collapse when the last task window closes.
 const TMUX_IDLE_WINDOW = "_groundcrew_idle";
-export const tmuxAdapter = {
-    async open(spec, signal) {
-        await ensureTmuxSession(signal);
-        const target = tmuxTarget(spec.name);
-        const keepDeadWindows = shouldKeepDeadWindows();
-        await runWorkspaceCommand("tmux", [
-            "new-window",
-            "-d",
-            "-t",
-            TMUX_SESSION,
-            "-n",
-            spec.name,
-            "-c",
-            spec.cwd,
-            spec.command,
-            ";",
-            "set-window-option",
-            "-t",
-            target,
-            "remain-on-exit",
-            keepDeadWindows ? "on" : "off",
-            ";",
-            "set-window-option",
-            "-t",
-            target,
-            "allow-rename",
-            "off",
-        ], signal);
-        // tmux can't paint status pills; spec.status is silently dropped.
-    },
-    async list(signal) {
-        const probe = await probeTmuxList("#{window_name}\t#{pane_dead}", signal);
-        if (probe.status === "missing") {
-            return [];
-        }
-        if (probe.status === "failed") {
-            debug(`tmux list-windows failed: ${probe.reason}`);
-            // oxlint-disable-next-line unicorn/no-useless-undefined -- undefined marks the workspace backend as unavailable.
-            return undefined;
-        }
-        return parseTmuxWindows(probe.output, { includeExited: shouldKeepDeadWindows() });
-    },
-    async close(name, signal) {
-        try {
-            await runWorkspaceCommand("tmux", ["kill-window", "-t", tmuxTarget(name)], signal);
-            return { kind: "closed" };
-        }
-        catch (error) {
-            if (isSignalAborted(signal)) {
-                throw error;
-            }
-            if (isTmuxNotFoundError(error)) {
-                return { kind: "missing" };
-            }
-            throw error;
-        }
-    },
-    accessHint(name) {
-        return { kind: "attachCommand", command: `tmux attach -t ${tmuxTarget(name)}` };
-    },
-};
-function tmuxTarget(name) {
-    return `${TMUX_SESSION}:${name}`;
+// User option stamped on every session we create in the session model, so
+// `list`/`close` can tell our sessions apart from the user's own (task-id
+// session names carry no prefix and could collide).
+const MANAGED_OPTION = "@groundcrew_managed";
+// One row per window across every session: session name, our managed tag
+// (empty for sessions we didn't create), and the active pane's dead flag.
+const SESSION_PROBE_FORMAT = `#{session_name}\t#{${MANAGED_OPTION}}\t#{pane_dead}`;
+/**
+ * Builds the tmux adapter for the resolved layout. `sessionPerTask` is decided
+ * by `workspaces.ts` from the `GROUNDCREW_TMUX_SESSION_PER_TASK` env var, so
+ * the adapter itself stays config-agnostic.
+ */
+export function createTmuxAdapter({ sessionPerTask }) {
+    return {
+        async open(spec, signal) {
+            await (sessionPerTask ? openSession(spec, signal) : openWindow(spec, signal));
+            // tmux can't paint status pills; spec.status is silently dropped.
+        },
+        async list(signal) {
+            return await (sessionPerTask ? listSessions(signal) : listWindows(signal));
+        },
+        async close(name, signal) {
+            return await (sessionPerTask ? closeSession(name, signal) : closeWindow(name, signal));
+        },
+        accessHint(name) {
+            const target = sessionPerTask ? name : tmuxTarget(name);
+            return { kind: "attachCommand", command: `tmux attach -t ${target}` };
+        },
+    };
 }
 function shouldKeepDeadWindows() {
     const keepDeadWindowsEnv = readEnvironmentVariable("GROUNDCREW_KEEP_DEAD_WINDOWS");
     return keepDeadWindowsEnv === "1";
 }
-function isTmuxNotFoundError(error) {
-    // runCommand surfaces the child's stderr in error.message, so the "no
-    // server" / "missing session" / "can't find window" signatures are visible
-    // without a separate stderr probe.
-    const message = errorMessage(error);
-    return (message.includes("no server running") ||
-        message.includes("can't find session") ||
-        message.includes("can't find window"));
+// ---------------------------------------------------------------------------
+// Window model (default): one window per task inside the `groundcrew` session.
+// ---------------------------------------------------------------------------
+async function openWindow(spec, signal) {
+    await ensureTmuxSession(signal);
+    const target = tmuxTarget(spec.name);
+    const keepDeadWindows = shouldKeepDeadWindows();
+    await runWorkspaceCommand("tmux", [
+        "new-window",
+        "-d",
+        "-t",
+        TMUX_SESSION,
+        "-n",
+        spec.name,
+        "-c",
+        spec.cwd,
+        spec.command,
+        ";",
+        "set-window-option",
+        "-t",
+        target,
+        "remain-on-exit",
+        keepDeadWindows ? "on" : "off",
+        ";",
+        "set-window-option",
+        "-t",
+        target,
+        "allow-rename",
+        "off",
+    ], signal);
 }
-async function probeTmuxList(format, signal) {
-    try {
-        return {
-            status: "ok",
-            output: await runWorkspaceCommand("tmux", ["list-windows", "-t", TMUX_SESSION, "-F", format], signal),
-        };
+async function listWindows(signal) {
+    const probe = await probeTmuxCommand(["list-windows", "-t", TMUX_SESSION, "-F", "#{window_name}\t#{pane_dead}"], signal);
+    if (probe.status === "missing") {
+        return [];
     }
-    catch (error) {
-        if (isSignalAborted(signal)) {
-            throw error;
-        }
-        if (isTmuxNotFoundError(error)) {
-            return { status: "missing" };
-        }
-        return { status: "failed", reason: errorMessage(error) };
+    if (probe.status === "failed") {
+        debug(`tmux list-windows failed: ${probe.reason}`);
+        return undefined;
     }
+    return parseTmuxWindows(probe.output, { includeExited: shouldKeepDeadWindows() });
+}
+async function closeWindow(name, signal) {
+    return await killTmuxTarget(["kill-window", "-t", tmuxTarget(name)], signal);
+}
+function tmuxTarget(name) {
+    return `${TMUX_SESSION}:${name}`;
 }
 async function ensureTmuxSession(signal) {
     try {
@@ -158,3 +156,185 @@ function parseTmuxWindows(output, options = {}) {
     }
     return items;
 }
+// ---------------------------------------------------------------------------
+// Session model: one dedicated session per task, tagged @groundcrew_managed.
+// ---------------------------------------------------------------------------
+async function openSession(spec, signal) {
+    try {
+        await createSession(spec, signal);
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        if (!isTmuxDuplicateSessionError(error)) {
+            throw error;
+        }
+        // A session of this name already exists. Only recreate it if it's one of
+        // ours; never clobber a same-named session the user opened themselves.
+        const probe = await probeManagedSessions(signal);
+        if (probe.status !== "ok" || !probe.sessions.has(spec.name)) {
+            throw error;
+        }
+        await runWorkspaceCommand("tmux", ["kill-session", "-t", spec.name], signal);
+        try {
+            await createSession(spec, signal);
+        }
+        catch (recreateError) {
+            if (isSignalAborted(signal)) {
+                throw recreateError;
+            }
+            // We already killed a stale copy; a failure here (e.g. the session was
+            // recreated in the gap) is unexpected, so surface it with context rather
+            // than a bare tmux message or an unbounded kill/recreate loop.
+            throw new Error(`Failed to recreate tmux session "${spec.name}" after killing a stale copy: ${errorMessage(recreateError)}`, { cause: recreateError });
+        }
+    }
+}
+async function createSession(spec, signal) {
+    const keepDeadWindows = shouldKeepDeadWindows();
+    await runWorkspaceCommand("tmux", [
+        "new-session",
+        "-d",
+        "-s",
+        spec.name,
+        "-c",
+        spec.cwd,
+        spec.command,
+        ";",
+        "set-option",
+        "-t",
+        spec.name,
+        MANAGED_OPTION,
+        "1",
+        ";",
+        "set-window-option",
+        "-t",
+        spec.name,
+        "remain-on-exit",
+        keepDeadWindows ? "on" : "off",
+        ";",
+        "set-window-option",
+        "-t",
+        spec.name,
+        "allow-rename",
+        "off",
+    ], signal);
+}
+async function listSessions(signal) {
+    const probe = await probeManagedSessions(signal);
+    if (probe.status === "missing") {
+        return [];
+    }
+    if (probe.status === "failed") {
+        debug(`tmux list-windows -a failed: ${probe.reason}`);
+        return undefined;
+    }
+    const includeExited = shouldKeepDeadWindows();
+    const items = [];
+    for (const [name, hasLivePane] of probe.sessions) {
+        if (hasLivePane) {
+            items.push({ name });
+            continue;
+        }
+        // No live pane left: the agent command exited but the session lingers
+        // because remain-on-exit kept the dead pane around. Mirror the window
+        // model and only surface it when callers opted into keeping dead windows.
+        if (includeExited) {
+            items.push({ name, state: "exited" });
+        }
+    }
+    return items;
+}
+async function closeSession(name, signal) {
+    const probe = await probeManagedSessions(signal);
+    if (probe.status === "missing") {
+        return { kind: "missing" };
+    }
+    if (probe.status === "failed") {
+        // Can't confirm ownership; refuse rather than risk killing a user session.
+        debug(`tmux kill-session skipped for ${name}: list-windows -a failed: ${probe.reason}`);
+        return { kind: "unavailable" };
+    }
+    if (!probe.sessions.has(name)) {
+        return { kind: "missing" };
+    }
+    return await killTmuxTarget(["kill-session", "-t", name], signal);
+}
+async function probeManagedSessions(signal) {
+    const probe = await probeTmuxCommand(["list-windows", "-a", "-F", SESSION_PROBE_FORMAT], signal);
+    if (probe.status === "ok") {
+        return { status: "ok", sessions: parseManagedSessions(probe.output) };
+    }
+    return probe;
+}
+function parseManagedSessions(output) {
+    const sessions = new Map();
+    for (const line of output.split("\n")) {
+        if (line.length === 0) {
+            continue;
+        }
+        const [name, managedFlag, deadFlag] = line.split("\t");
+        /* v8 ignore next 3 @preserve -- split on a non-empty string always yields a non-empty first element */
+        if (name === undefined || name.length === 0) {
+            continue;
+        }
+        // Only sessions we stamped carry the tag; everything else is the user's.
+        if (managedFlag !== "1") {
+            continue;
+        }
+        // Mirror parseTmuxWindows: a pane is live unless tmux explicitly reports it
+        // dead. A missing field (malformed row) counts as live, not exited, so both
+        // models read identical output the same way.
+        const isDeadPane = deadFlag !== undefined && deadFlag !== "0";
+        sessions.set(name, (sessions.get(name) ?? false) || !isDeadPane);
+    }
+    return sessions;
+}
+// ---------------------------------------------------------------------------
+// Shared tmux helpers.
+// ---------------------------------------------------------------------------
+function isTmuxNotFoundError(error) {
+    // runCommand surfaces the child's stderr in error.message, so the "no
+    // server" / "missing session" / "can't find window" signatures are visible
+    // without a separate stderr probe.
+    const message = errorMessage(error);
+    return (message.includes("no server running") ||
+        message.includes("can't find session") ||
+        message.includes("can't find window"));
+}
+function isTmuxDuplicateSessionError(error) {
+    return errorMessage(error).includes("duplicate session");
+}
+// Runs a tmux kill-* command and maps the outcome: success closes, a
+// not-found signature means it was already gone, and the shutdown signal
+// rethrows so callers can abort.
+async function killTmuxTarget(arguments_, signal) {
+    try {
+        await runWorkspaceCommand("tmux", arguments_, signal);
+        return { kind: "closed" };
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        if (isTmuxNotFoundError(error)) {
+            return { kind: "missing" };
+        }
+        throw error;
+    }
+}
+async function probeTmuxCommand(arguments_, signal) {
+    try {
+        return { status: "ok", output: await runWorkspaceCommand("tmux", arguments_, signal) };
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        if (isTmuxNotFoundError(error)) {
+            return { status: "missing" };
+        }
+        return { status: "failed", reason: errorMessage(error) };
+    }
+}

package/dist/lib/workspaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/lib/workspaces.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,QAAQ,EACR,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,oBAAoB,CAAC;IAChC,QAAQ,EAAE,aAAa,CAAC;IACxB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,gBAAgB;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,GAAG,mBAAmB,CAUtF;AAsED,iBAAe,eAAe,CAC5B,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAiBzB;AAED,iBAAe,sBAAsB,CACnC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAG1C;AAED,iBAAe,kBAAkB,CAC/B,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAenC;AAED,eAAO,MAAM,UAAU;IACf,IAAI,SAAS,cAAc,QAAQ,QAAQ,WAAW,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvF,KAAK;IACC,KAAK,SACD,cAAc,QAChB,MAAM,WACH,WAAW,GACnB,OAAO,CAAC,oBAAoB,CAAC;IAIhC,SAAS;IACT,UAAU;CACX,CAAC"}
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/lib/workspaces.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE1E,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,QAAQ,EACR,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,oBAAoB,CAAC;IAChC,QAAQ,EAAE,aAAa,CAAC;IACxB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,gBAAgB;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,GAAG,mBAAmB,CAUtF;AAsFD,iBAAe,eAAe,CAC5B,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAiBzB;AAED,iBAAe,sBAAsB,CACnC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAG1C;AAED,iBAAe,kBAAkB,CAC/B,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAenC;AAED,eAAO,MAAM,UAAU;IACf,IAAI,SAAS,cAAc,QAAQ,QAAQ,WAAW,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvF,KAAK;IACC,KAAK,SACD,cAAc,QAChB,MAAM,WACH,WAAW,GACnB,OAAO,CAAC,oBAAoB,CAAC;IAIhC,SAAS;IACT,UAAU;CACX,CAAC"}

package/dist/lib/workspaces.js

@@ -7,6 +7,7 @@
  * the `workspaces` API.
  */
 import { detectHostCapabilities } from "./host.js";
+import { readEnvironmentVariable, writeError } from "./util.js";
 import { isSignalAborted, } from "./workspaceAdapter.js";
 export function resolveWorkspaceKind(arguments_) {
     const { config, host } = arguments_;
@@ -36,20 +37,33 @@ const HOST_CAPABILITY_BY_KIND = {
     tmux: "hasTmux",
     zellij: "hasZellij",
 };
+const TMUX_SESSION_PER_TASK_ENV = "GROUNDCREW_TMUX_SESSION_PER_TASK";
+const TMUX_SESSION_DEFAULT_WARNING = [
+    "WARNING: tmux window mode is deprecated; tmux session-per-task mode will become the default soon.",
+    `Opt in now with ${TMUX_SESSION_PER_TASK_ENV}=1.`,
+    "Migration: attach with `tmux attach -t <task>` instead of `tmux attach -t groundcrew:<task>`; each task gets its own tmux session; `crew stop` and `crew cleanup` close that managed session; set GROUNDCREW_KEEP_DEAD_WINDOWS=1 to keep exited scrollback.",
+].join("\n");
 const ADAPTER_LOADER_BY_KIND = {
     cmux: async () => {
         const { cmuxAdapter } = await import("./cmuxAdapter.js");
         return cmuxAdapter;
     },
     tmux: async () => {
-        const { tmuxAdapter } = await import("./tmuxAdapter.js");
-        return tmuxAdapter;
+        const { createTmuxAdapter } = await import("./tmuxAdapter.js");
+        const sessionPerTask = resolveTmuxSessionPerTask();
+        if (!sessionPerTask) {
+            writeError(TMUX_SESSION_DEFAULT_WARNING);
+        }
+        return createTmuxAdapter({ sessionPerTask });
     },
     zellij: async () => {
         const { zellijAdapter } = await import("./zellijAdapter.js");
         return zellijAdapter;
     },
 };
+function resolveTmuxSessionPerTask() {
+    return readEnvironmentVariable(TMUX_SESSION_PER_TASK_ENV) === "1";
+}
 function failIfBinaryUnavailable(kind, host) {
     if (!host[HOST_CAPABILITY_BY_KIND[kind]]) {
         throw new Error(`workspaceKind '${kind}' is set but the ${kind} binary is not on PATH. Install ${kind} or change the setting.`);

package/docs/troubleshooting.md

@@ -27,6 +27,21 @@ When a wrapped agent command fails, the tmux window closes immediately and the e
 
 This applies to the tmux backend only.
 
+## Tmux Workspaces Share One Session By Default
+
+By default the tmux backend runs every task as a window inside one shared `groundcrew` session, so opening your own extra window or split while attached lands it next to every other task. This window mode is deprecated; when `crew` starts on the tmux backend without the new mode enabled, it warns that session-per-task mode will become the default soon.
+
+To opt in before the default changes, set `GROUNDCREW_TMUX_SESSION_PER_TASK=1` in the env you launch `crew` from. Each task gets its own dedicated tmux session named after the task id (cmux-style), tagged with the `@groundcrew_managed` tmux option.
+
+Migration plan:
+
+- Attach with `tmux attach -t <task>` instead of `tmux attach -t groundcrew:<task>`.
+- Treat each task as a full tmux session: windows are task-local tabs and panes are task-local splits.
+- `crew stop` and `crew cleanup` close the whole managed task session, including extra windows and panes you opened inside it. Same-named user sessions without `@groundcrew_managed` are ignored.
+- Finished task sessions disappear once the command exits unless `GROUNDCREW_KEEP_DEAD_WINDOWS=1` is set; with that env, `crew status` reports the kept session as `exited` for scrollback inspection.
+
+This applies to the tmux backend only.
+
 ## Tasks Stay In-Progress
 
 Groundcrew marks a task `In Progress` when it provisions a workspace. When a PR opens on that worktree branch, the reviewer pass attempts to mark the task `In Review`. Linear's default `In Review` status works out of the box; if your team renamed it, configure `sources: [{ kind: "linear", statuses: { inReview: ["Code Review"] } }]`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clipboard-health/groundcrew",
-  "version": "4.36.1",
+  "version": "4.37.0",
   "description": "Linear-driven orchestrator that launches AI coding agents in git worktrees, with workspace lifecycle and usage tracking.",
   "keywords": [
     "agent",
@@ -68,7 +68,7 @@
     "verify": "node scripts/verifyAll.mts"
   },
   "dependencies": {
-    "@anthropic-ai/sandbox-runtime": "0.0.52",
+    "@anthropic-ai/sandbox-runtime": "0.0.54",
     "@clipboard-health/clearance": "1.3.2",
     "@linear/sdk": "86.0.0",
     "cosmiconfig": "9.0.1",