@coreplane/switchboard 1.217.0 → 1.218.0

package/dist/cli.js

@@ -206,6 +206,9 @@ async function ensureWorkArea(at, version2, workers, deps) {
   }
   return { ok: true, copied: plan3.copy, installed: plan3.install };
 }
+function checkoutInstallHolds(root, dir, exists) {
+  return exists(join3(root, dir, "node_modules", "wrangler")) || exists(join3(root, "node_modules", "wrangler"));
+}
 function imageBuiltOutsideDir(renderedConfig) {
   const code = renderedConfig.split("\n").filter((l) => !l.trimStart().startsWith("//")).join("\n");
   for (const m of code.matchAll(/"image"\s*:\s*"([^"]+)"/g)) {
@@ -1796,7 +1799,7 @@ function getAgent(name) {
   }
   return a;
 }
-var MACHINE_CLASSES, IDENTITIES, HARNESSES, RUNAWAY_TURNS_PER_MINUTE, PR_DESCRIPTION_TEMPLATE, NEVER_MERGE, CONTRACT_HEADINGS_LIST, UNIT_CONTRACT, UNIT_HANDOFF, IMAGE_TOOLCHAIN, SANDBOX_TOOLCHAIN, RESIDENT_TOOLCHAIN, SHOW_FILES, CODING_SYSTEM, CODING_SYSTEM_RESIDENT, REVIEW_VERDICT_INSTRUCTION, REVIEW_SPEC_CHECK, REVIEW_UNIT_CONTRACT, REVIEW_WHOLE_CHANGE, REVIEW_SYSTEM, REVIEW_SYSTEM_RESIDENT, RESEARCH_SYSTEM, GENERAL_SYSTEM, EXPLORE_SYSTEM, COMPOUND_PRESET, WORK_PRESETS, AGENTS;
+var MACHINE_CLASSES, IDENTITIES, HARNESSES, RUNAWAY_TURNS_PER_MINUTE, PR_DESCRIPTION_TEMPLATE, NEVER_MERGE, CONTRACT_HEADINGS_LIST, UNIT_CONTRACT, UNIT_HANDOFF, IMAGE_TOOLCHAIN, SANDBOX_TOOLCHAIN, RESIDENT_TOOLCHAIN, SHOW_FILES, NOTEPAD, CODING_SYSTEM, CODING_SYSTEM_RESIDENT, REVIEW_VERDICT_INSTRUCTION, REVIEW_SPEC_CHECK, REVIEW_UNIT_CONTRACT, REVIEW_WHOLE_CHANGE, REVIEW_SYSTEM, REVIEW_SYSTEM_RESIDENT, RESEARCH_SYSTEM, GENERAL_SYSTEM, EXPLORE_SYSTEM, COMPOUND_PRESET, WORK_PRESETS, AGENTS;
 var init_registry = __esm({
   "../../src/agents/registry.ts"() {
     "use strict";
@@ -1827,6 +1830,8 @@ SCREENSHOTS GO TO BOTH PLACES, ALL OF THEM: when the request asks for screenshot
 Whole files: up to 1 GiB where the artifact store is configured (a recording, a large PDF), 10 MiB otherwise \u2014 the tool's result says which applies; over the limit, link to the file.
 Files the person dropped on the thread that were too large to show you inline are already in ./attachments/ in your workspace when the turn's text names them (a video for ffmpeg, a large PDF, a zip); read them from there \u2014 never ask for a re-upload.
 Text stays in your message; do not attach what you can say.`;
+    NOTEPAD = `YOUR NOTES AND YOUR REACH BACK. This thread's conversation outlives your context window and this run: every turn \u2014 yours, the person's, every tool call and its output, from this run and the runs before it in this thread \u2014 is kept in a log you can search with the \`recall\` tool (words \u2192 the matching turns with their numbers; a turn number \u2192 that turn whole). When something you need is no longer in front of you, recall it instead of redoing the work or guessing.
+Keep notes with the \`notes\` tool: one short document, replaced whole each time, at most 8 KiB \u2014 decisions and their reasons, the names of things you found (files, tests, commits, the head your tests were green at), what is not yet proven. They are the one thing sure to survive a compaction and to reach the next run in this thread: they ride your system prompt at its start and come back to you right after a compaction. Write them when you decide something worth keeping, not only at the end.`;
     CODING_SYSTEM = `You are Switchboard's coding agent, operating from a Slack request.
 
 You work inside a dedicated workspace directory with bash, read_file, and write_file tools. ${SANDBOX_TOOLCHAIN}
@@ -1856,6 +1861,8 @@ ${PR_DESCRIPTION_TEMPLATE}
 
 ${SHOW_FILES}
 
+${NOTEPAD}
+
 Maintain the user-facing status card with the update_status tool: right after you decide your plan, post it as a checklist (\u25CB pending items), then update it whenever an item starts (\u2731) or finishes (\u2713). Items are short outcomes ("Clone repo and read the diff", "Run the test suite"), never commands. Mark an item \u2713 only after it has actually happened \u2014 never pre-mark reporting/posting steps. This is the only progress the user sees while you work.
 
 If the request doesn't name a repository and you can't infer it, ask for it instead of guessing.
@@ -1890,6 +1897,8 @@ ${PR_DESCRIPTION_TEMPLATE}
 
 ${SHOW_FILES}
 
+${NOTEPAD}
+
 Maintain the user-facing status card with the update_status tool: right after you decide your plan, post it as a checklist (\u25CB pending items), then update it whenever an item starts (\u2731) or finishes (\u2713). Items are short outcomes ("Implement the fix", "Run the test suite"), never commands. Mark an item \u2713 only after it has actually happened \u2014 never pre-mark reporting/posting steps. This is the only progress the user sees while you work.
 
 Report outcomes faithfully: if tests fail or a step was skipped, say so plainly.
@@ -1922,6 +1931,8 @@ REVIEW THE PR'S OWN HEAD, NOTHING ELSE: the commit you read must be the PR's hea
 
 ${REVIEW_VERDICT_INSTRUCTION}
 
+${NOTEPAD}
+
 Maintain the user-facing status card with the update_status tool: post your plan as a checklist (\u25CB pending), update as items start (\u2731) and finish (\u2713 \u2014 only after they actually happened; never pre-mark reporting steps). Items are short outcomes, never commands.
 
 Your final message is posted to Slack. Lead with a one-line verdict, then the findings.`;
@@ -1948,6 +1959,8 @@ REVIEW THE PR'S OWN HEAD, NOTHING ELSE: the commit you read must be the PR's hea
 
 ${REVIEW_VERDICT_INSTRUCTION}
 
+${NOTEPAD}
+
 Maintain the user-facing status card with the update_status tool: post your plan as a checklist (\u25CB pending), update as items start (\u2731) and finish (\u2713 \u2014 only after they actually happened; never pre-mark reporting steps). Items are short outcomes, never commands.
 
 Your final message is posted to Slack. Lead with a one-line verdict, then the findings.`;
@@ -1981,6 +1994,8 @@ READ-ONLY: NEVER open a pull request, and never commit or push \u2014 no branch,
 
 Maintain the user-facing status card with the update_status tool: post your plan as a checklist (\u25CB pending) once you have it, and update items as they start (\u2731) and finish (\u2713 \u2014 only after they actually happened). Items are short outcomes ("Clone and install", "Time the full suite"), never commands.
 
+${NOTEPAD}
+
 Report outcomes faithfully: a check you could not run is "could not check", never a guess. Use Slack-friendly formatting (no markdown headers; *bold*, bullets, code blocks \u2014 render the claim table as aligned rows inside a code block). Your final message is posted to Slack: lead with the overall verdict in one line, then the claim table, then what a follow-up should do.`;
     COMPOUND_PRESET = "conductor";
     WORK_PRESETS = {
@@ -2603,6 +2618,11 @@ function splitCredentialKey(key) {
   const name = key.slice(slash + 1);
   return parseMcpScopeKey(scopeKey) && MCP_SERVER_NAME_RE.test(name) ? { scopeKey, name } : void 0;
 }
+function isHeadersEnv(v) {
+  if (!v || typeof v !== "object" || Array.isArray(v)) return false;
+  const entries = Object.entries(v);
+  return entries.length > 0 && entries.length <= MCP_HEADERS_MAX && entries.every(([name, envVar]) => isStr(name, 64) && isStr(envVar, 128));
+}
 function isOutcome(v) {
   if (!v || typeof v !== "object" || Array.isArray(v)) return false;
   const o = v;
@@ -2611,7 +2631,7 @@ function isOutcome(v) {
 function isMcpServerEntry(v) {
   if (!v || typeof v !== "object" || Array.isArray(v)) return false;
   const e = v;
-  return isStr(e.url, MCP_URL_MAX) && (e.agents === void 0 || Array.isArray(e.agents) && e.agents.length > 0 && e.agents.length <= MCP_AGENTS_MAX && e.agents.every((a) => isStr(a, 32))) && (e.auth === "none" || e.auth === "bearer" || e.auth === "oauth") && (e.tokenEnv === void 0 || isStr(e.tokenEnv, 128)) && (e.addedBy === void 0 || isStr(e.addedBy, 260)) && (e.addedAt === void 0 || isNum(e.addedAt));
+  return isStr(e.url, MCP_URL_MAX) && (e.agents === void 0 || Array.isArray(e.agents) && e.agents.length > 0 && e.agents.length <= MCP_AGENTS_MAX && e.agents.every((a) => isStr(a, 32))) && (e.auth === "none" || e.auth === "bearer" || e.auth === "oauth") && (e.tokenEnv === void 0 || isStr(e.tokenEnv, 128)) && (e.headersEnv === void 0 || isHeadersEnv(e.headersEnv)) && (e.addedBy === void 0 || isStr(e.addedBy, 260)) && (e.addedAt === void 0 || isNum(e.addedAt));
 }
 function isSealedCredential(v) {
   if (!v || typeof v !== "object") return false;
@@ -2626,7 +2646,7 @@ function isMcpTicket(v) {
 }
 function serverView(scopeKey, name, entry, opts) {
   const parsed = parseMcpScopeKey(scopeKey);
-  const state = entry.auth === "none" ? "connected" : entry.tokenEnv ? "static" : opts.hasCredential ? "connected" : "awaiting_credential";
+  const state = entry.auth === "none" ? entry.headersEnv ? "static" : "connected" : entry.tokenEnv ? "static" : opts.hasCredential ? "connected" : "awaiting_credential";
   return {
     name,
     scope: parsed?.kind ?? "org",
@@ -2648,7 +2668,7 @@ function safeUrl(raw) {
     return "(invalid url)";
   }
 }
-var MCP_TICKET_STATES, MCP_TICKET_TTL_MS, MCP_SERVER_NAME_MAX, MCP_SERVER_NAME_RE, MCP_URL_MAX, MCP_AGENTS_MAX, MCP_SELF_SERVE_AGENTS, MCP_TOKEN_MAX_CHARS, MCP_SERVERS_PER_SCOPE_MAX, isStr, isNum;
+var MCP_TICKET_STATES, MCP_TICKET_TTL_MS, MCP_SERVER_NAME_MAX, MCP_SERVER_NAME_RE, MCP_URL_MAX, MCP_AGENTS_MAX, MCP_SELF_SERVE_AGENTS, MCP_TOKEN_MAX_CHARS, MCP_SERVERS_PER_SCOPE_MAX, isStr, isNum, MCP_HEADERS_MAX, MCP_HEADER_NAME_RE;
 var init_registry2 = __esm({
   "../../src/mcp/registry.ts"() {
     "use strict";
@@ -2669,6 +2689,8 @@ var init_registry2 = __esm({
     MCP_SERVERS_PER_SCOPE_MAX = 32;
     isStr = (v, max = 4096) => typeof v === "string" && v.length > 0 && v.length <= max;
     isNum = (v) => typeof v === "number" && Number.isFinite(v);
+    MCP_HEADERS_MAX = 8;
+    MCP_HEADER_NAME_RE = /^[!#$%&'*+.^_`|~0-9A-Za-z-]{1,64}$/;
   }
 });
 
@@ -2753,7 +2775,9 @@ function validateMcpServers(layer, source2) {
           `${source2}: ${path}.${name}: server names are slugs (lowercase letters, digits, dashes; \u2264 ${MCP_SERVER_NAME_MAX} chars)`
         );
       if (!isMcpServerEntry(raw))
-        throw new Error(`${source2}: ${path}.${name} must be { url, auth: none|bearer|oauth, agents?, tokenEnv? }`);
+        throw new Error(
+          `${source2}: ${path}.${name} must be { url, auth: none|bearer|oauth, agents?, tokenEnv?, headersEnv? }`
+        );
       try {
         assertUrlAllowed(raw.url);
       } catch (err2) {
@@ -2774,6 +2798,14 @@ function validateMcpServers(layer, source2) {
       }
       if (raw.tokenEnv !== void 0 && raw.auth !== "bearer")
         throw new Error(`${source2}: ${path}.${name}.tokenEnv only applies to auth: bearer`);
+      for (const header4 of Object.keys(raw.headersEnv ?? {})) {
+        if (!MCP_HEADER_NAME_RE.test(header4))
+          throw new Error(`${source2}: ${path}.${name}.headersEnv: "${header4}" is not an HTTP header name`);
+        if (header4.toLowerCase() === "authorization")
+          throw new Error(
+            `${source2}: ${path}.${name}.headersEnv: the Authorization header is \`auth\`'s \u2014 use auth: bearer with tokenEnv`
+          );
+      }
     }
   };
   check("defaults.mcpServers", "org", layer.defaults?.mcpServers);
@@ -4989,7 +5021,7 @@ function planDeploy(opts, host, loaded, images) {
 function formatPlan(plan3) {
   const missing = plan3.checks.nodeModulesMissing;
   const checkout = plan3.root.mode === "checkout";
-  const nodeModules = missing.length === 0 ? "node_modules present in every dir" : checkout ? `node_modules missing in ${missing.join(", ")} \u2014 the runner will \`npm ci\` there first` : `${missing.join(", ")} not installed under ${WORK_AREA_DIR}/ \u2014 the runner will \`npm ci\` them there first`;
+  const nodeModules = missing.length === 0 ? "node_modules present in every dir" : checkout ? `install missing for ${missing.join(", ")} \u2014 the runner will \`npm ci\` at the checkout's root first` : `${missing.join(", ")} not installed under ${WORK_AREA_DIR}/ \u2014 the runner will \`npm ci\` them there first`;
   const tree = checkout ? `${plan3.checks.cleanTree ? "clean tree" : "tree unchecked"}; ${plan3.checks.atOriginMain ? "HEAD == origin/main" : "any branch (--allow-branch)"}` : `Worker sources are the package's (version ${plan3.root.version ?? "?"}), materialised under ${WORK_AREA_DIR}/ \u2014 no git`;
   const lines = [
     ...plan3.affected ? [formatAffectedText(plan3.affected)] : [],
@@ -6241,7 +6273,7 @@ var init_sandboxLiveGate = __esm({
 // ../../src/deploy/run.ts
 import { spawn as spawn3 } from "node:child_process";
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname4, isAbsolute as isAbsolute3, join as join5 } from "node:path";
+import { dirname as dirname4, isAbsolute as isAbsolute3 } from "node:path";
 function run(cmd, args, opts) {
   const env = { ...process.env, ...opts.set ?? {} };
   for (const k of opts.unset ?? []) delete env[k];
@@ -6348,7 +6380,7 @@ function packageModeProblems(plan3) {
   return problems;
 }
 function hasNodeModules(dir) {
-  if (OPERATOR_ROOT.mode === "checkout") return existsSync5(join5(OPERATOR_ROOT.root, dir, "node_modules"));
+  if (OPERATOR_ROOT.mode === "checkout") return checkoutInstallHolds(OPERATOR_ROOT.root, dir, existsSync5);
   const state = readWorkAreaState(OPERATOR_ROOT.workArea);
   return state.kind === "stamped" && state.stamp.installed.includes(dir);
 }
@@ -6514,10 +6546,10 @@ async function pushConfigOnHost(opts) {
   return pushConfigDocument(read, { stateWorkerUrl: opts.stateWorkerUrl, key: opts.key, env: process.env });
 }
 async function ensureNodeModules(step, io) {
-  const dir = workerDir(step.dir);
   if (hasNodeModules(step.dir)) return true;
-  io.log(`[deploy:all] ${step.name}: node_modules missing \u2014 npm ci`);
-  const r = await run("npm", ["ci", "--silent"], { cwd: dir });
+  const cwd = OPERATOR_ROOT.mode === "checkout" ? OPERATOR_ROOT.root : workerDir(step.dir);
+  io.log(`[deploy:all] ${step.name}: install missing \u2014 npm ci in ${cwd}`);
+  const r = await run("npm", ["ci", "--silent"], { cwd });
   if (r.code !== 0) io.warn(r.output);
   return r.code === 0;
 }
@@ -7824,9 +7856,9 @@ var init_secrets = __esm({
 import { spawn as spawn4 } from "node:child_process";
 import { existsSync as existsSync6, readFileSync as readFileSync7 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { isAbsolute as isAbsolute4, join as join6, resolve as resolve4 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join5, resolve as resolve4 } from "node:path";
 function expandDir(path, root = OPERATOR_ROOT.root) {
-  if (path === "~" || path.startsWith("~/")) return join6(homedir2(), path.slice(1));
+  if (path === "~" || path.startsWith("~/")) return join5(homedir2(), path.slice(1));
   if (isAbsolute4(path)) return path;
   return resolve4(root, path);
 }
@@ -7870,7 +7902,7 @@ async function opFieldLabels(source2) {
 }
 function wranglerBin(dir, workspaceRoot, exists = existsSync6) {
   for (const base of [dir, workspaceRoot]) {
-    const bin = join6(base, "node_modules", ".bin", "wrangler");
+    const bin = join5(base, "node_modules", ".bin", "wrangler");
     if (exists(bin)) return bin;
   }
   return "wrangler";
@@ -7891,7 +7923,7 @@ var init_secretsHost = __esm({
         if (source2.kind === "dir") {
           const dir = expandDir(source2.path);
           if (!existsSync6(dir)) return { ok: false, problem: `secretsSource ${source2.path}: no such directory (${dir})` };
-          return { ok: true, present: new Set(names.filter((n2) => existsSync6(join6(dir, n2)))) };
+          return { ok: true, present: new Set(names.filter((n2) => existsSync6(join5(dir, n2)))) };
         }
         const labels = await opFieldLabels(source2);
         if (!labels.ok) return labels;
@@ -7900,7 +7932,7 @@ var init_secretsHost = __esm({
       put: async (source2, dir, name) => {
         let value;
         if (source2.kind === "dir") {
-          value = readFileSync7(join6(expandDir(source2.path), name), "utf8");
+          value = readFileSync7(join5(expandDir(source2.path), name), "utf8");
         } else {
           const r2 = await spawnCollect("op", ["read", `op://${source2.vault}/${source2.item}/${name}`]);
           if (r2.code !== 0) return { code: r2.code, output: `op read exited ${r2.code} \u2014 ${r2.stderr.trim()}` };
@@ -8114,11 +8146,11 @@ var init_readingDiff = __esm({
 // ../../src/core/meatProcess.ts
 import { spawn as spawn5 } from "node:child_process";
 import { accessSync, constants } from "node:fs";
-import { delimiter, join as join7 } from "node:path";
+import { delimiter, join as join6 } from "node:path";
 function meatOnPath(env, binary = MEAT_BINARY) {
   return (env.PATH ?? "").split(delimiter).filter((dir) => dir !== "").some((dir) => {
     try {
-      accessSync(join7(dir, binary), constants.X_OK);
+      accessSync(join6(dir, binary), constants.X_OK);
       return true;
     } catch {
       return false;
@@ -8198,10 +8230,10 @@ import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises"
 import { randomBytes } from "node:crypto";
 import { createInterface } from "node:readline/promises";
 import { Writable } from "node:stream";
-import { dirname as dirname5, join as join8, resolve as resolve5 } from "node:path";
+import { dirname as dirname5, join as join7, resolve as resolve5 } from "node:path";
 async function readTemplates(root = PACKAGE_ROOT) {
   const read = async (key) => {
-    const path = join8(root, TEMPLATE_PATHS[key]);
+    const path = join7(root, TEMPLATE_PATHS[key]);
     if (!existsSync7(path)) throw new Error(`${TEMPLATE_PATHS[key]}: no such file under ${root}`);
     return readFile(path, "utf8");
   };
@@ -8215,7 +8247,7 @@ function isCheckoutRoot(cwd = process.cwd(), root = PACKAGE_ROOT) {
   }
 }
 async function writePlannedFile(file, cwd = process.cwd()) {
-  const path = join8(cwd, file.path);
+  const path = join7(cwd, file.path);
   await mkdir(dirname5(path), { recursive: true });
   const temp = `${path}.${randomBytes(6).toString("hex")}.tmp`;
   try {
@@ -8250,7 +8282,7 @@ function ttyPrompter(io = { stdin: process.stdin, stdout: process.stdout }) {
   };
 }
 function projectFact(name, root) {
-  const facts2 = JSON.parse(readFileSync8(join8(root, "project.json"), "utf8"));
+  const facts2 = JSON.parse(readFileSync8(join7(root, "project.json"), "utf8"));
   const value = facts2[name];
   if (typeof value !== "string") throw new Error(`project.json: no \`${name}\` fact`);
   return value;
@@ -8266,7 +8298,7 @@ function hostSetupIO(cwd = OPERATOR_ROOT.root, startedIn = process.cwd()) {
     templates: () => readTemplates(),
     // Where the files went when that is not where the operator stands — `init` prints it.
     root: () => resolve5(cwd) === resolve5(startedIn) ? void 0 : cwd,
-    exists: async (path) => existsSync7(join8(cwd, path)),
+    exists: async (path) => existsSync7(join7(cwd, path)),
     write: (file) => writePlannedFile(file, cwd),
     // A file the operator NAMED (`--github-private-key-file app.pem`) is where the operator stands,
     // not in the installation: `init` run from ~/Downloads reads ~/Downloads/app.pem.
@@ -8322,9 +8354,9 @@ var init_binaryRead = __esm({
 
 // ../../src/secrets.ts
 import { readFileSync as readFileSync9 } from "node:fs";
-import { join as join9 } from "node:path";
+import { join as join8 } from "node:path";
 function manifestNames() {
-  const raw = JSON.parse(readFileSync9(join9(PACKAGE_ROOT, MANIFEST_PATH), "utf8"));
+  const raw = JSON.parse(readFileSync9(join8(PACKAGE_ROOT, MANIFEST_PATH), "utf8"));
   const parsed = parseManifest2(raw);
   if (!parsed.ok) throw new Error(`${MANIFEST_PATH} is invalid \u2014 ${parsed.problems.join("; ")}`);
   return parsed.manifest.secrets.map((s) => s.name);
@@ -12482,7 +12514,7 @@ ${quote(current ?? "")}`;
 });
 
 // ../../src/core/commands/contract.ts
-import { basename, dirname as dirname8, join as join10 } from "node:path";
+import { basename, dirname as dirname8, join as join9 } from "node:path";
 import { z as z7 } from "zod";
 function repoRootOfPlan(planPath) {
   const plans = dirname8(planPath);
@@ -12508,7 +12540,7 @@ var init_contract2 = __esm({
     init_commandRegistry();
     init_contract();
     defineCommand4 = commandDefiner();
-    SPECS_DIR = join10("docs", "reference", "specs");
+    SPECS_DIR = join9("docs", "reference", "specs");
     RULES_FILES = ["AGENTS.md", "CLAUDE.md"];
     contractRender = defineCommand4({
       id: "contract.render",
@@ -12532,10 +12564,10 @@ var init_contract2 = __esm({
         const unit = parsePlanUnit(planMarkdown, options.unit);
         const specs = /* @__PURE__ */ new Map();
         for (const spec of new Set(unit ? specItemRefs(unit.section).map((r) => r.spec) : []))
-          specs.set(spec, await deps.contract.readFile(join10(root, SPECS_DIR, spec)));
+          specs.set(spec, await deps.contract.readFile(join9(root, SPECS_DIR, spec)));
         let agentRules;
         for (const file of RULES_FILES) {
-          const text = await deps.contract.readFile(join10(root, file));
+          const text = await deps.contract.readFile(join9(root, file));
           if (text !== void 0) {
             agentRules = { file, text };
             break;
@@ -13460,7 +13492,7 @@ function isSetupInstallCommand(summary) {
   return INSTALL_SEGMENT.test(cmd.replace(QUOTED, '""'));
 }
 function isNarrative(ev) {
-  return ev.type === "input" || ev.type === "context" || ev.type === "assistant" || ev.type === "answer" || ev.type === "run_meta";
+  return ev.type === "input" || ev.type === "context" || ev.type === "assistant" || ev.type === "answer" || ev.type === "notes" || ev.type === "run_meta";
 }
 function spanSet(events) {
   const normalized = normalizeSpans(events);
@@ -15383,6 +15415,7 @@ function isRunEvent(v) {
     case "input":
     case "assistant":
     case "context":
+    case "notes":
       return typeof o.text === "string";
     // the narrative events carry text, not a summary
     case "run_meta":
@@ -17231,7 +17264,11 @@ var init_service = __esm({
       /** A fresh connect link for a runtime bearer/oauth server (first connect, or a re-key). */
       async connect(actor, target, name) {
         const { scopeKey, entry, source: source2 } = this.owned(target, name);
-        if (entry.auth === "none") throw new McpServiceError("invalid_input", `"${name}" needs no credential (auth: none)`);
+        if (entry.auth === "none")
+          throw new McpServiceError(
+            "invalid_input",
+            entry.headersEnv ? `"${name}" is pinned in config.yaml with headersEnv \u2014 its headers are environment variables on the bot, not a stored credential` : `"${name}" needs no credential (auth: none)`
+          );
         if (entry.tokenEnv)
           throw new McpServiceError(
             "invalid_input",
@@ -17708,6 +17745,15 @@ var init_service = __esm({
           url: r.entry.url,
           agents: r.entry.agents ?? [...MCP_SELF_SERVE_AGENTS]
         };
+        if (r.entry.headersEnv) {
+          const headers = {};
+          for (const [header4, envVar] of Object.entries(r.entry.headersEnv)) {
+            const value = this.opts.bearers.named(envVar);
+            if (!value) return { name: r.name, unavailable: `${envVar} is not set on the bot` };
+            headers[header4] = value.reveal();
+          }
+          base.headers = headers;
+        }
         if (r.entry.auth === "none") return { spec: base };
         if (r.entry.tokenEnv) {
           const token2 = this.opts.bearers.named(r.entry.tokenEnv);
@@ -17827,7 +17873,7 @@ async function settleConnect(deps, output) {
   }
 }
 function renderServerLine(r) {
-  const state = r.state === "connected" ? "\u2705 connected" : r.state === "static" ? "\u2705 static (tokenEnv)" : "\u23F3 awaiting credential";
+  const state = r.state === "connected" ? "\u2705 connected" : r.state === "static" ? "\u2705 static (bot env)" : "\u23F3 awaiting credential";
   const agents = Array.isArray(r.agents) ? r.agents.join(", ") : "";
   const pinned = r.source === "config" ? " \xB7 pinned in config.yaml" : "";
   return `\u2022 \`${String(r.name)}\` (${String(r.scope)}) ${state} \u2014 ${String(r.url)} \xB7 agents: ${agents} \xB7 auth: ${String(r.auth)}${pinned}`;
@@ -21929,6 +21975,8 @@ function activityLine(e) {
       return "request received";
     case "context":
       return "context recorded";
+    case "notes":
+      return "\u{1F4DD} notes saved";
     case "answer":
       return "answer ready";
     case "run_meta":
@@ -26916,6 +26964,134 @@ var init_runs2 = __esm({
   }
 });
 
+// ../../src/core/runLedger/sessionLog.ts
+function sessionKey(threadKey, agent) {
+  return `${threadKey}:${agent ?? "-"}`;
+}
+function requestIndex(seed) {
+  for (let i = seed.length - 1; i >= 0; i--) if (seed[i].role === "user") return i;
+  return 0;
+}
+var DEFAULT_SESSION_LOG_MAX_BYTES, NOTEPAD_MAX_BYTES, GAP_MARKER;
+var init_sessionLog = __esm({
+  "../../src/core/runLedger/sessionLog.ts"() {
+    "use strict";
+    init_runRecord();
+    init_runRecord();
+    DEFAULT_SESSION_LOG_MAX_BYTES = DEFAULT_RETENTION_POLICY.sessionLogMaxBytes;
+    NOTEPAD_MAX_BYTES = 8192;
+    GAP_MARKER = "[The log of this conversation ends short of what the previous run saw: its connection to the ledger broke, so its later turns and its final reply are not here.]";
+  }
+});
+
+// ../../src/tools/session.ts
+function sessionCapabilityFor(run2, ledger) {
+  const session = run2?.session;
+  if (!session) return void 0;
+  return {
+    session,
+    search: (query, limit) => ledger.searchSession(session.key, query, limit),
+    readTurn: async (idx) => (await ledger.readSession(session.key, idx, idx)).messages[0],
+    readNotepad: () => ledger.readNotepad(session.key),
+    writeNotepad: (text) => ledger.writeNotepad(session.key, text)
+  };
+}
+async function mayRead(ctx) {
+  if (!ctx.runs?.runId) return false;
+  const res = await ctx.runs.service.getRun(ctx.runs.runId);
+  return res.ok && authorize(ctx.runs.actor, "runs:read", runResource(res.value)).allow;
+}
+var UNAVAILABLE3, DEFAULT_HITS, MAX_HITS, SNIPPET_CHARS, snippetOf, recallTool, notesTool, SESSION_TOOLS;
+var init_session = __esm({
+  "../../src/tools/session.ts"() {
+    "use strict";
+    init_authorize();
+    init_runEvents();
+    init_sessionLog();
+    init_runRecord();
+    init_runsService();
+    UNAVAILABLE3 = "the session tools are not available in this context: this run has no session log.";
+    DEFAULT_HITS = 5;
+    MAX_HITS = 50;
+    SNIPPET_CHARS = 300;
+    snippetOf = (text) => {
+      const line3 = text.replace(/\s+/g, " ").trim();
+      return line3.length > SNIPPET_CHARS ? `${line3.slice(0, SNIPPET_CHARS - 1)}\u2026` : line3;
+    };
+    recallTool = {
+      name: "recall",
+      description: "Search this conversation's whole log \u2014 every turn of this thread on this agent, earlier runs' included and everything a compaction removed from your window \u2014 for words, and get the matching turns in relevance order with their turn numbers and a snippet; or pass `turn` to read one turn whole (a tool result, a command, a message). Use it when you need something said or seen earlier that is not in front of you: a failing test's name, a command's output, a decision. `limit` defaults to 5 (at most 50).",
+      inputSchema: {
+        type: "object",
+        properties: {
+          query: { type: "string", description: "Words to search for; matching is by word, in relevance order" },
+          limit: { type: "integer", description: "How many turns to return (default 5, at most 50)" },
+          turn: {
+            type: "integer",
+            description: "A turn number from an earlier recall: returns that turn whole instead of searching"
+          }
+        }
+      },
+      sideEffectFree: true,
+      async run(input, ctx) {
+        if (!ctx.session) return UNAVAILABLE3;
+        const turn = typeof input.turn === "number" ? Math.trunc(input.turn) : void 0;
+        const query = typeof input.query === "string" ? input.query.trim() : "";
+        if (turn === void 0 && query.length === 0) return "recall needs a query or a turn number.";
+        if (!await mayRead(ctx)) return JSON.stringify(turn !== void 0 ? { turn, content: null } : { hits: [] });
+        if (turn !== void 0) {
+          const message2 = turn >= 0 ? await ctx.session.readTurn(turn) : void 0;
+          if (!message2) return `no turn ${turn} in this session's log.`;
+          return JSON.stringify({ turn, role: message2.role, content: message2.content });
+        }
+        const limit = Math.min(
+          MAX_HITS,
+          Math.max(1, typeof input.limit === "number" ? Math.trunc(input.limit) : DEFAULT_HITS)
+        );
+        const { hits, gaps } = await ctx.session.search(query, limit);
+        const notes = [];
+        if (hits.length === 0)
+          notes.push("no turn of this session's log matches; your notes (notes {}) may hold what you look for");
+        if (ctx.session.session.seedFrom === 0) notes.push("this is the first run of its session: the log begins with it");
+        return JSON.stringify({
+          hits: hits.map((h) => ({
+            turn: h.idx,
+            ...h.role !== void 0 ? { role: h.role } : {},
+            snippet: snippetOf(h.text)
+          })),
+          ...gaps.length ? {
+            gaps: `the log has a gap at ${gaps.map((g) => `turn ${g}`).join(", ")}: a run before it detached from the ledger, so turns it saw after that point are not here`
+          } : {},
+          ...notes.length ? { note: notes.join("; ") } : {}
+        });
+      }
+    };
+    notesTool = {
+      name: "notes",
+      description: "Your notes for this thread \u2014 one document, replaced whole on every write, at most 8 KiB. Keep in it what must survive a compaction and reach the next run in this thread: decisions and their reasons, the names of things you found (files, tests, commits), what is not yet proven. They ride your system prompt at the start of every later run and reach you again right after a compaction. Call with `text` to write; with nothing to read.",
+      inputSchema: {
+        type: "object",
+        properties: { text: { type: "string", description: "The whole notepad as it should read from now on" } }
+      },
+      async run(input, ctx) {
+        if (!ctx.session) return UNAVAILABLE3;
+        if (typeof input.text !== "string") {
+          const current = await ctx.session.readNotepad();
+          return current && current.text.length > 0 ? current.text : "(your notes for this thread are empty)";
+        }
+        const bytes = utf8ByteLength(input.text);
+        if (bytes > NOTEPAD_MAX_BYTES)
+          return `your notes are ${bytes} bytes; the notepad holds at most ${NOTEPAD_MAX_BYTES} \u2014 shorten them and write again.`;
+        const written = await ctx.session.writeNotepad(input.text);
+        if (!written.ok) return `notes not saved (${written.reason}): another generation drives this run now.`;
+        ctx.publish?.({ type: "notes", text: redactSecrets(input.text) });
+        return `notes saved (${bytes} bytes); they ride your system prompt at the next run in this thread and reach you again after a compaction.`;
+      }
+    };
+    SESSION_TOOLS = [recallTool, notesTool];
+  }
+});
+
 // ../../src/tools/workspace.ts
 import { z as z21 } from "zod";
 var bashTool, readFileTool, writeFileTool, NAME_STATUS_MARK, NAME_STATUS_MARK_LINE, OUTPUT_CUT_RE, diffDigestTool, submitVerdictTool, submitDispositionsTool, submitPrDescriptionTool, handoffEntry, submitHandoffTool, updateStatusTool, TOOLSETS;
@@ -26934,6 +27110,7 @@ var init_workspace = __esm({
     init_skills();
     init_attach();
     init_runs2();
+    init_session();
     bashTool = {
       name: "bash",
       description: "Run a bash command in the workspace directory. Use for git, gh, tests, builds, and inspecting files. Commands time out after 5 minutes (300000 ms) by default; pass timeoutMs when a command legitimately needs longer \u2014 a full test suite, a large build \u2014 up to the 1200000 ms (20 minute) maximum; a command is also clipped to the run's own remaining time, so it can never outlive the run. Output is truncated at 30k characters.",
@@ -27303,7 +27480,8 @@ ${raw.trim()}`;
         listSkillsTool,
         useSkillTool,
         ...GITHUB_READ_TOOLS,
-        ...GITHUB_ISSUE_WRITE_TOOLS
+        ...GITHUB_ISSUE_WRITE_TOOLS,
+        ...SESSION_TOOLS
       ],
       readonly: [
         bashTool,
@@ -27314,7 +27492,8 @@ ${raw.trim()}`;
         diffDigestTool,
         listSkillsTool,
         useSkillTool,
-        ...GITHUB_READ_TOOLS
+        ...GITHUB_READ_TOOLS,
+        ...SESSION_TOOLS
       ],
       web: [webFetchTool, webSearchTool, updateStatusTool, ...GITHUB_READ_TOOLS],
       /** The general agent: no workspace, no shell — GitHub reads + issue writes
@@ -27334,7 +27513,8 @@ ${raw.trim()}`;
         webSearchTool,
         listSkillsTool,
         useSkillTool,
-        ...GITHUB_READ_TOOLS
+        ...GITHUB_READ_TOOLS,
+        ...SESSION_TOOLS
       ],
       /** The conductor (docs/reference/specs/agent-conductor.md): the five run
        *  tools — the only toolset that holds them, so no other preset can start,
@@ -28212,7 +28392,7 @@ Target repository: ${input.repo}. ` + (workspace ? `Your shell starts in the wor
   const agentSystem = (head) => {
     return [residentSystem ?? agent.system, targetBlock(head), input.contract, blocks.skills, blocks.mcp].filter((b) => Boolean(b)).join("\n\n");
   };
-  return (head) => [blocks.memory, blocks.config, blocks.about, blocks.instructions, agentSystem(head)].filter((part) => Boolean(part)).join("\n\n");
+  return (head) => [blocks.memory, blocks.notes, blocks.config, blocks.about, blocks.instructions, agentSystem(head)].filter((part) => Boolean(part)).join("\n\n");
 }
 async function settleReviewedHead(input) {
   return input.span ? input.span.span("run.settle_reviewed_head", (span) => settle(input, span)) : settle(input, void 0);
@@ -29055,13 +29235,13 @@ var init_frontmatter = __esm({
 
 // ../../src/skills/stores.ts
 import { existsSync as existsSync11, readFileSync as readFileSync13, readdirSync as readdirSync2 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join10 } from "node:path";
 function loadBundledSkills(dir) {
   if (!existsSync11(dir)) return [];
   const skills = [];
   for (const entry of readdirSync2(dir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const file = join11(dir, entry.name, "SKILL.md");
+    const file = join10(dir, entry.name, "SKILL.md");
     if (!existsSync11(file)) continue;
     try {
       skills.push(parseSkillMarkdown(readFileSync13(file, "utf8")));
@@ -29618,6 +29798,20 @@ function mintRunBearer(deps, ctx) {
     publish: (event) => registry.publish(runId3, event)
   });
 }
+function sessionNotesBlock(session) {
+  const parts = [];
+  const notepad = session.notepad?.trim();
+  const summary = session.summary?.trim();
+  if (notepad)
+    parts.push(
+      "YOUR NOTES FOR THIS THREAD (kept with the `notes` tool \u2014 the one thing sure to survive a compaction and reach the next run here; replace them whole when they change):\n" + notepad
+    );
+  if (summary)
+    parts.push(
+      "SUMMARY OF THE EARLIER CONVERSATION (written when the context was compacted; every earlier turn is still reachable with `recall`):\n" + summary
+    );
+  return parts.length ? parts.join("\n\n") : void 0;
+}
 async function composePrompt(deps, ctx) {
   const {
     msg,
@@ -29680,6 +29874,7 @@ async function composePrompt(deps, ctx) {
   );
   const instructionsBlock = customInstructionsBlock(scopes);
   const memoryBlock = await root.span("dispatch.compose", () => memoryBlockP);
+  const notesBlock = ctx.session ? sessionNotesBlock(ctx.session) : void 0;
   const composeSystem = makeSystemComposer({
     agent,
     resident: resident === true,
@@ -29695,6 +29890,7 @@ async function composePrompt(deps, ctx) {
     ...ctx.contract !== void 0 ? { contract: ctx.contract } : {},
     blocks: {
       memory: memoryBlock,
+      notes: notesBlock,
       config: configBlock,
       about: aboutBlock,
       instructions: instructionsBlock,
@@ -30872,6 +31068,14 @@ var init_transport = __esm({
 function relayedTools(tools) {
   return tools.filter((t) => !NATIVE_WORKSPACE_TOOLS.has(t.name));
 }
+function compactionSteer(notepad, opts = {}) {
+  const notes = notepad?.trim();
+  const reach = "Your context was just compacted: the summary now standing in for the earlier turns is pi's, and every one of those turns is still reachable with the `recall` tool (search by words, or read a turn by its number).\n\n";
+  if (opts.unavailable)
+    return reach + "Your notes for this thread could not be read just now; `notes {}` reads them on demand, and `notes { text }` still writes them.";
+  return reach + (notes ? `YOUR NOTES FOR THIS THREAD, as you last wrote them with \`notes\`:
+${notes}` : "Your notes for this thread are empty. Write them with the `notes` tool when you have decisions, the names of things you found and what is not yet proven worth keeping \u2014 they survive every compaction and reach the next run in this thread.");
+}
 function splitSeed(seed) {
   for (let i = seed.length - 1; i >= 0; i--) {
     if (seed[i].role === "user") return { session: seed.slice(0, i), prompt: seed[i] };
@@ -31150,7 +31354,23 @@ async function runPiHarness(deps, run2) {
         }
       }
       if (obs.message) await mirror.onMessage(obs.message, bridge.turns);
-      if (obs.compaction) await mirror.onCompaction(obs.compaction, bridge.turns);
+      if (obs.compaction) {
+        await mirror.onCompaction(obs.compaction, bridge.turns);
+        if (!writeUp && !hardStopped && !catchingUp) {
+          let notepad;
+          let unavailable = false;
+          try {
+            notepad = run2.notepad ? (await run2.notepad())?.text : void 0;
+          } catch (err2) {
+            unavailable = true;
+            note(
+              "harness_error",
+              `the notepad could not be read for the compaction steer (${err2 instanceof Error ? err2.message : String(err2)}); steered without it`
+            );
+          }
+          transport.send({ type: "steer", message: compactionSteer(notepad, { unavailable }) });
+        }
+      }
       if (obs.providerError !== void 0) {
         if (catchingUp)
           note("harness_error", `a model call failed while the bot was away (${obs.providerError}); continuing`);
@@ -31738,6 +31958,7 @@ async function runLoop2(deps, ctx) {
     runs,
     steer,
     wait,
+    session,
     parentRunId,
     coordinator,
     seed
@@ -31885,6 +32106,7 @@ async function runLoop2(deps, ctx) {
     ...runs ? { runs } : {},
     ...steer ? { steer } : {},
     ...wait ? { wait } : {},
+    ...session ? { session } : {},
     onVerdict,
     onDigest,
     onPrDescription,
@@ -31932,6 +32154,7 @@ async function runLoop2(deps, ctx) {
           messages,
           tools: relayedTools(mergeTools(TOOLSETS[agent.toolset] ?? [], mcpForRun?.tools)),
           toolContext,
+          ...session ? { notepad: () => session.readNotepad() } : {},
           rules: {
             checkout: binding?.workspace ?? "/workspace",
             ...ownBranch !== void 0 ? { branch: ownBranch } : {},
@@ -33665,24 +33888,6 @@ var init_lineage = __esm({
   }
 });
 
-// ../../src/core/runLedger/sessionLog.ts
-function sessionKey(threadKey, agent) {
-  return `${threadKey}:${agent ?? "-"}`;
-}
-function requestIndex(seed) {
-  for (let i = seed.length - 1; i >= 0; i--) if (seed[i].role === "user") return i;
-  return 0;
-}
-var DEFAULT_SESSION_LOG_MAX_BYTES;
-var init_sessionLog = __esm({
-  "../../src/core/runLedger/sessionLog.ts"() {
-    "use strict";
-    init_runRecord();
-    init_runRecord();
-    DEFAULT_SESSION_LOG_MAX_BYTES = DEFAULT_RETENTION_POLICY.sessionLogMaxBytes;
-  }
-});
-
 // ../../src/core/dispatch/thread.ts
 async function readThread(service, threadKey) {
   try {
@@ -33798,7 +34003,15 @@ async function sessionSeedFor(input) {
     history: input.history,
     request: input.request
   });
-  return seed ? { seed, notes: seed.notes } : { notes: [] };
+  if (!seed) return { notes: [] };
+  try {
+    const notepad = await input.ledger.readNotepad(key);
+    if (notepad && notepad.text.trim().length > 0) seed.notepad = notepad.text;
+  } catch (err2) {
+    const why = err2 instanceof Error ? err2.message : String(err2);
+    seed.notes.push(`session seed: the notepad of ${key} could not be read (${why}) \u2014 the run starts without it`);
+  }
+  return { seed, notes: seed.notes };
 }
 function withoutThinking(message2) {
   if (message2.role !== "assistant") return message2;
@@ -33806,7 +34019,7 @@ function withoutThinking(message2) {
   if (content.length === message2.content.length) return message2;
   return { ...message2, content: content.length ? content : [{ type: "text", text: "(reasoning omitted)" }] };
 }
-var SEED_BUDGET_TOKENS, SEED_BUDGET_BYTES, GAP_MARKER, settledResult;
+var SEED_BUDGET_TOKENS, SEED_BUDGET_BYTES, settledResult;
 var init_seed = __esm({
   "../../src/core/dispatch/seed.ts"() {
     "use strict";
@@ -33815,7 +34028,6 @@ var init_seed = __esm({
     init_thread();
     SEED_BUDGET_TOKENS = 6e4;
     SEED_BUDGET_BYTES = SEED_BUDGET_TOKENS * 4;
-    GAP_MARKER = "[The log of this conversation ends short of what the previous run saw: its connection to the ledger broke, so its later turns and its final reply are not here.]";
     settledResult = (toolName) => `The run that made this call ended before this ${toolName} call's result was recorded; its effects are unknown \u2014 re-check them before repeating it.`;
   }
 });
@@ -34289,7 +34501,15 @@ async function dispatch(deps, msg, io, opts = {}) {
       verifiedAtAttach,
       resume,
       root,
-      ...contractBlock !== void 0 && agent.name === "review" ? { contract: contractBlock } : {}
+      ...contractBlock !== void 0 && agent.name === "review" ? { contract: contractBlock } : {},
+      // What the session already knows (session-log item 10): the notepad and
+      // the newest compaction's summary the seed brought back, for the prompt.
+      ...session && (session.notepad !== void 0 || session.summary !== void 0) ? {
+        session: {
+          ...session.notepad !== void 0 ? { notepad: session.notepad } : {},
+          ...session.summary !== void 0 ? { summary: session.summary } : {}
+        }
+      } : {}
     });
     const { mcpForRun, composeSystem, system } = prompt;
     const reviewHead = prompt.reviewHead;
@@ -34347,6 +34567,7 @@ async function dispatch(deps, msg, io, opts = {}) {
       seed,
       ...session ? { seedLog: session.log } : {}
     });
+    const sessionTools = sessionCapabilityFor(ledgerRun, deps.runLedger);
     const { spawn: spawn7, runs, steer, wait } = runToolCapabilities(
       { core: deps, dispatch, registry, clock: clock3 },
       {
@@ -34397,6 +34618,7 @@ async function dispatch(deps, msg, io, opts = {}) {
       runs,
       steer,
       wait,
+      ...sessionTools ? { session: sessionTools } : {},
       parentRunId,
       coordinator,
       seed,
@@ -34527,6 +34749,7 @@ var init_dispatcher = __esm({
     init_settle();
     init_lineage();
     init_seed();
+    init_session();
     init_thread();
     init_select();
     init_spawn();
@@ -34645,7 +34868,7 @@ var init_runHistoryWriter = __esm({
 
 // ../../src/core/runStore.ts
 import { chmodSync as chmodSync2, existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync14, renameSync as renameSync2, rmSync as rmSync3, statSync as statSync2, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join12, resolve as resolve9 } from "node:path";
+import { join as join11, resolve as resolve9 } from "node:path";
 function isValidRunId(id) {
   return typeof id === "string" && RUN_ID_PATTERN.test(id);
 }
@@ -34693,7 +34916,7 @@ function buildRunStore(cfg, secrets, deps) {
   const now = deps.now ?? Date.now;
   const policy = retentionPolicyOf(cfg);
   if (cfg.store === "file") {
-    const store = new FileRunStore(join12(deps.dataDir, RUNS_DIR), { policy, now });
+    const store = new FileRunStore(join11(deps.dataDir, RUNS_DIR), { policy, now });
     store.sweep();
     const timer = (deps.setInterval ?? setInterval)(() => store.sweep(), SWEEP_INTERVAL_MS);
     timer.unref?.();
@@ -34760,7 +34983,7 @@ var init_runStore = __esm({
         this.now = opts.now ?? Date.now;
       }
       recordPath(id) {
-        return join12(this.dir, `${id}.json`);
+        return join11(this.dir, `${id}.json`);
       }
       ensureDir() {
         mkdirSync8(this.dir, { recursive: true, mode: DIR_MODE });
@@ -34782,7 +35005,7 @@ var init_runStore = __esm({
       }
       /** Every valid index line, a repeated id resolved to its last line. */
       readIndex() {
-        const path = join12(this.dir, INDEX_FILE);
+        const path = join11(this.dir, INDEX_FILE);
         if (!existsSync12(path)) return [];
         const byId = /* @__PURE__ */ new Map();
         for (const line3 of readFileSync14(path, "utf8").split("\n")) {
@@ -34814,7 +35037,7 @@ var init_runStore = __esm({
         const keptIds = new Set(kept.map((r) => r.id));
         for (const item of index) if (!keptIds.has(item.id)) rmSync3(this.recordPath(item.id), { force: true });
         this.writeAtomic(
-          join12(this.dir, INDEX_FILE),
+          join11(this.dir, INDEX_FILE),
           kept.map((r) => JSON.stringify(r)).join("\n") + (kept.length ? "\n" : "")
         );
         return kept;
@@ -35044,7 +35267,10 @@ function createLedgerWriteThrough(opts) {
     /** The run's place in its session log (session-log item 2); undefined for
      *  a run without a conversation of its own and for an adopted row claimed
      *  before the log existed. */
-    session;
+    sessionRow;
+    get session() {
+      return this.sessionRow;
+    }
     /** Turns of the run's conversation on the ledger, counted from its seed —
      *  the last step record's `turnIndex` — so the finish can close the range. */
     turnsWritten;
@@ -35082,11 +35308,11 @@ function createLedgerWriteThrough(opts) {
       this.stepNo = from.stepNo;
       this.lastSeq = from.lastSeq;
       this.adopted = from.resumable === true;
-      this.session = from.session;
+      this.sessionRow = from.session;
     }
     /** A reservation learns its session when the prompt's claim promotes it. */
     bindSession(session) {
-      this.session = session;
+      this.sessionRow = session;
     }
     get resumable() {
       return !this.detached && (this.seeded || this.adopted);
@@ -35099,11 +35325,11 @@ function createLedgerWriteThrough(opts) {
      *  ends short of what the model saw, and the next run in the session must
      *  know. A run that wrote no turn leaves the range open. */
     sessionOnRecord() {
-      if (!this.session) return void 0;
-      if (this.broken) return { ...this.session, range: "broken" };
-      const from = this.session.range === "broken" ? this.session.seedFrom : this.session.range.from;
-      const to = this.turnsWritten !== void 0 && this.turnsWritten > 0 ? this.session.seedFrom + this.turnsWritten - 1 : void 0;
-      return { ...this.session, range: to !== void 0 && to >= from ? { from, to } : { from } };
+      if (!this.sessionRow) return void 0;
+      if (this.broken) return { ...this.sessionRow, range: "broken" };
+      const from = this.sessionRow.range === "broken" ? this.sessionRow.seedFrom : this.sessionRow.range.from;
+      const to = this.turnsWritten !== void 0 && this.turnsWritten > 0 ? this.sessionRow.seedFrom + this.turnsWritten - 1 : void 0;
+      return { ...this.sessionRow, range: to !== void 0 && to >= from ? { from, to } : { from } };
     }
     sink = {
       put: async (plain4) => {
@@ -35150,11 +35376,11 @@ function createLedgerWriteThrough(opts) {
      *  no record at all was killed before its conversation was stored and
      *  closes `interrupted`. */
     async seed(messages, budgetMs) {
-      const base = this.session?.seedFrom ?? 0;
-      const reused = this.session && this.session.range !== "broken" ? this.session.range.from - this.session.seedFrom : 0;
+      const base = this.sessionRow?.seedFrom ?? 0;
+      const reused = this.sessionRow && this.sessionRow.range !== "broken" ? this.sessionRow.range.from - this.sessionRow.seedFrom : 0;
       const turns = messages.slice(reused).map((message2, i) => ({ idx: base + reused + i, message: message2 }));
       try {
-        const seeded = await ledger.seed(this.runId, gen, turns, this.session?.key);
+        const seeded = await ledger.seed(this.runId, gen, turns, this.sessionRow?.key);
         if (!seeded.ok) {
           this.detach(`seed refused (${seeded.reason})`);
           return;
@@ -35174,7 +35400,7 @@ function createLedgerWriteThrough(opts) {
             iteration: 0
           },
           [],
-          this.session?.key
+          this.sessionRow?.key
         );
         if (!recorded.ok) this.detach(`seed record refused (${recorded.reason})`);
         else this.seeded = true;
@@ -35184,7 +35410,7 @@ function createLedgerWriteThrough(opts) {
     }
     async step(report2) {
       if (this.detached) return;
-      const base = this.session?.seedFrom ?? 0;
+      const base = this.sessionRow?.seedFrom ?? 0;
       const turns = report2.turns.map((message2, i) => ({ idx: base + report2.firstIdx + i, message: message2 }));
       if (report2.compaction)
         turns.push({ idx: base + report2.firstIdx + report2.turns.length, compaction: report2.compaction });
@@ -35200,7 +35426,7 @@ function createLedgerWriteThrough(opts) {
       };
       for (let attempt = 1; ; attempt++) {
         try {
-          const result = await ledger.step(this.runId, gen, record2, turns, this.session?.key);
+          const result = await ledger.step(this.runId, gen, record2, turns, this.sessionRow?.key);
           if (!result.ok) this.detach(`step ${record2.step} refused (${result.reason})`);
           else this.turnsWritten = record2.turnIndex;
           return;
@@ -35386,6 +35612,10 @@ function createLedgerWriteThrough(opts) {
       }
     },
     readSessionTail: (key, maxBytes) => ledger.readSessionTail(key, maxBytes),
+    readSession: (key, from, to) => ledger.readSession(key, from, to),
+    searchSession: (key, query, limit) => ledger.searchSession(key, query, limit),
+    readNotepad: (key) => ledger.readNotepad(key),
+    writeNotepad: (key, text) => ledger.writeNotepad(key, gen, text),
     async handoff() {
       const candidates = [...live].filter((r) => r.resumable && r.tracked() && !r.handedOff);
       if (candidates.length === 0) return { marked: [] };
@@ -35439,6 +35669,18 @@ var init_writeThrough = __esm({
       async readSessionTail(_key, _maxBytes) {
         return { from: 0, transcript: { complete: true, turns: 0, messages: [], compactions: [] } };
       }
+      async readSession(_key, _from, _to) {
+        return { complete: true, turns: 0, messages: [], compactions: [] };
+      }
+      async searchSession(_key, _query, _limit) {
+        return { hits: [], gaps: [] };
+      }
+      async readNotepad(_key) {
+        return null;
+      }
+      async writeNotepad(_key, _text) {
+        return { ok: false, reason: "unknown-run" };
+      }
       async handoff() {
         return { marked: [] };
       }
@@ -35452,6 +35694,7 @@ var init_writeThrough = __esm({
       sink;
       resumable = false;
       handedOff = false;
+      session = void 0;
       tracked() {
         return false;
       }
@@ -35931,7 +36174,10 @@ function httpMcpClientFactory(fetchImpl) {
   return (server) => new StreamableHttpMcpClient({
     url: server.url,
     fetch: fetchImpl,
-    ...server.auth?.type === "bearer" ? { headers: { authorization: `Bearer ${server.auth.token}` } } : {}
+    headers: {
+      ...server.headers,
+      ...server.auth?.type === "bearer" ? { authorization: `Bearer ${server.auth.token}` } : {}
+    }
   });
 }
 var init_mcp2 = __esm({
@@ -38760,18 +39006,18 @@ var init_liveView = __esm({
 
 // ../../src/channels/webAssets.ts
 import { readdirSync as readdirSync3, readFileSync as readFileSync16, statSync as statSync3 } from "node:fs";
-import { join as join13 } from "node:path";
+import { join as join12 } from "node:path";
 function contentTypeFor2(path) {
   const dot = path.lastIndexOf(".");
   return (dot === -1 ? void 0 : CONTENT_TYPES[path.slice(dot)]) ?? "application/octet-stream";
 }
 function webDistDir(env, packageRoot) {
-  return env.SWITCHBOARD_WEB_DIST ?? join13(packageRoot, WEB_DIST_DIR);
+  return env.SWITCHBOARD_WEB_DIST ?? join12(packageRoot, WEB_DIST_DIR);
 }
 function loadWebAssets(distDir) {
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync16(join13(distDir, ".vite", "manifest.json"), "utf8"));
+    manifest = JSON.parse(readFileSync16(join12(distDir, ".vite", "manifest.json"), "utf8"));
   } catch (err2) {
     throw new Error(
       `web app manifest not found under ${distDir} \u2014 build it first (npm run build in web/): ${err2 instanceof Error ? err2.message : String(err2)}`,
@@ -38785,9 +39031,9 @@ function loadWebAssets(distDir) {
     css: (entryChunk.css ?? []).map((f) => `/${f}`)
   };
   const files = /* @__PURE__ */ new Map();
-  const assetsDir = join13(distDir, "assets");
+  const assetsDir = join12(distDir, "assets");
   for (const name of readdirSync3(assetsDir)) {
-    const full = join13(assetsDir, name);
+    const full = join12(assetsDir, name);
     if (statSync3(full).isFile()) files.set(`/assets/${name}`, readFileSync16(full));
   }
   const serve2 = (req, res) => {
@@ -39977,6 +40223,25 @@ var init_runLedgerWorker = __esm({
           )
         };
       }
+      async searchSession(key, query, limit) {
+        this.checkSessionKey(key);
+        const r = await this.post("/runs/session/search", { key, query, limit });
+        return {
+          hits: Array.isArray(r.data.hits) ? r.data.hits : [],
+          gaps: Array.isArray(r.data.gaps) ? r.data.gaps : []
+        };
+      }
+      async readNotepad(key) {
+        this.checkSessionKey(key);
+        const r = await this.post("/runs/session/notepad", { key });
+        const n2 = r.data.notepad;
+        return n2 && typeof n2.text === "string" && typeof n2.updatedAt === "number" ? { text: n2.text, updatedAt: n2.updatedAt } : null;
+      }
+      async writeNotepad(key, gen, text) {
+        this.checkSessionKey(key);
+        if (!GEN_PATTERN.test(gen)) throw new PermanentStoreError(`run ledger: malformed generation`);
+        return this.fenceResult(await this.post("/runs/session/notepad/write", { key, gen, text }));
+      }
       async heartbeat(runId3, gen, leaseMs) {
         this.checkIds(runId3, gen);
         const r = await this.post("/runs/heartbeat", { storeKey: this.opts.storeKey, runId: runId3, gen, leaseMs });
@@ -42834,7 +43099,7 @@ __export(index_exports, {
   runBot: () => runBot
 });
 import { createServer } from "node:http";
-import { join as join14 } from "node:path";
+import { join as join13 } from "node:path";
 async function runBot() {
   for (const v of ["SLACK_BOT_TOKEN", "SLACK_APP_TOKEN"]) {
     if (!processSecrets.get(v)) {
@@ -43512,7 +43777,7 @@ var init_index = __esm({
     init_secrets2();
     DATA_DIR = installationPath(OPERATOR_ROOT, "data");
     CONFIG_PATH2 = process.env.SWITCHBOARD_CONFIG ?? installationPath(OPERATOR_ROOT, "config/config.yaml");
-    OVERRIDES_PATH = process.env.SWITCHBOARD_OVERRIDES ?? join14(DATA_DIR, "overrides.json");
+    OVERRIDES_PATH = process.env.SWITCHBOARD_OVERRIDES ?? join13(DATA_DIR, "overrides.json");
     PROCESS_STARTED_AT = systemClock();
     sampleProcessMetrics = startProcessMetrics();
     INTERRUPTED_WRITE_BUDGET_MS = 1e4;
@@ -43559,7 +43824,7 @@ init_secrets2();
 import { Console } from "node:console";
 import { existsSync as existsSync14, mkdtempSync, writeFileSync as writeFileSync9 } from "node:fs";
 import { tmpdir } from "node:os";
-import { basename as basename3, join as join15 } from "node:path";
+import { basename as basename3, join as join14 } from "node:path";
 var CONFIG_PATH3 = process.env.SWITCHBOARD_CONFIG ?? installationPath(OPERATOR_ROOT, "config/config.yaml");
 var DATA_DIR2 = installationPath(OPERATOR_ROOT, "data");
 var CLI_CALLER = { kind: "cli", id: CLI_ACTOR.id, actor: CLI_ACTOR };
@@ -43733,8 +43998,8 @@ var ConsoleIO = class _ConsoleIO {
   /** The harness's file upload: the bytes written under the attachments dir,
    *  the lead printed like a reply with the path a person can open. */
   async attachFile(file) {
-    this.attachments.dir ??= mkdtempSync(join15(tmpdir(), "switchboard-attachments-"));
-    const path = join15(this.attachments.dir, basename3(file.name));
+    this.attachments.dir ??= mkdtempSync(join14(tmpdir(), "switchboard-attachments-"));
+    const path = join14(this.attachments.dir, basename3(file.name));
     writeFileSync9(path, file.bytes);
     await this.reply(`${file.lead}
 \u{1F4CE} ${file.name} (${file.bytes.byteLength} bytes) \u2192 ${path}`);
@@ -43815,7 +44080,7 @@ function cliCapabilities(configPath, env, secrets, opts = {}) {
 }
 function wireCli() {
   const warn = (m) => console.error(m);
-  const botConfig = bindBotConfig(CONFIG_PATH3, join15(DATA_DIR2, "cli-overrides.json"));
+  const botConfig = bindBotConfig(CONFIG_PATH3, join14(DATA_DIR2, "cli-overrides.json"));
   let loaded;
   const bot = () => loaded ??= botConfig().then((config) => ({
     config,