@flowmind/cli 0.3.8 → 0.3.9

package/dist/index.js

@@ -293,9 +293,9 @@ var isHttpEvidenceUrl = (value) => {
 };
 
 // src/agent-session.ts
-import { createHash as createHash3 } from "node:crypto";
-import { appendFile, mkdir as mkdir3, readdir as readdir4, readFile as readFile4, rm, stat as stat2 } from "node:fs/promises";
-import { join as join6 } from "node:path";
+import { createHash as createHash4 } from "node:crypto";
+import { appendFile, mkdir as mkdir5, readdir as readdir7, readFile as readFile6, rename as rename4, rm as rm3, rmdir, stat as stat3, utimes, writeFile as writeFile5 } from "node:fs/promises";
+import { join as join8 } from "node:path";
 
 // src/awake-clock.ts
 import { execFileSync } from "node:child_process";
@@ -513,6 +513,33 @@ function bindAccount(apiKey, account, since, url = API_URL) {
   if (url === API_URL) Object.assign(snapshot, updated);
 }
 var accountBinding = () => checkedBinding(snapshot, API_URL);
+var legacySessionsDir = () => join3(dirname(config.path), "agent-sessions");
+function soleAccountProfile() {
+  const current = config.store;
+  const periods = current.signedOutPeriods;
+  return checkedBinding(current, API_URL) !== null && (periods === void 0 || Object.keys(periods).length === 0);
+}
+function extendSignInStart(since) {
+  const current = config.store;
+  const binding = checkedBinding(current, API_URL);
+  const pinned = accountBinding();
+  if (!binding || !pinned || binding.credential !== pinned.credential || binding.account !== pinned.account) {
+    throw new Error("The sign-in changed while Flowmind adopted older local records. Run the command again.");
+  }
+  if (!soleAccountProfile() || !validPoint(since) || Date.parse(since.at) >= Date.parse(binding.since.at)) return;
+  const updated = { ...current, binding: { ...binding, since } };
+  config.store = updated;
+  Object.assign(snapshot, updated);
+}
+function refreshSignInStart() {
+  const pinned = accountBinding();
+  if (!pinned) return;
+  const stored = checkedBinding(config.store, API_URL);
+  if (!stored || stored.account !== pinned.account || stored.credential !== pinned.credential || (stored.origin ?? API_URL) !== (pinned.origin ?? API_URL)) {
+    throw new Error("The sign-in changed while this command ran. Run it again.");
+  }
+  if (Date.parse(stored.since.at) < Date.parse(pinned.since.at)) snapshot.binding = { ...pinned, since: stored.since };
+}
 function ownershipPeriods() {
   const binding = accountBinding();
   if (!binding) throw new Error("Sign in to measure agent time.");
@@ -612,9 +639,12 @@ async function writeIgnore(start, reason) {
 }
 
 // src/manual-save.ts
-import { createHash as createHash2, randomUUID as randomUUID2 } from "node:crypto";
-import { mkdir as mkdir2, readdir as readdir3, readFile as readFile3, rename, unlink as unlink2, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join5 } from "node:path";
+import { createHash as createHash3, randomUUID as randomUUID3 } from "node:crypto";
+import { mkdir as mkdir4, readdir as readdir6, readFile as readFile5, rename as rename3, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { join as join7 } from "node:path";
+
+// src/account.ts
+import { readdir as readdir5 } from "node:fs/promises";
 
 // ../../packages/contracts/src/generated/revision.ts
 var contractRevision = "3620e18f995dfc34dee05d8a132148178ce03b4a0223aafb99778e00e5585ef4";
@@ -944,292 +974,694 @@ async function apiRequest(endpoint, args, options = {}) {
   }
 }
 
-// src/account.ts
-var bindingStartNow = () => ({ at: (/* @__PURE__ */ new Date()).toISOString(), up: awakeMs() });
-async function withConfigWriters(change) {
-  let lock = await configWriters();
-  for (let waited = 0; !lock && waited < 15e3; waited += 250) {
-    await new Promise((resolve3) => setTimeout(resolve3, 250));
-    lock = await configWriters();
-  }
-  if (!lock) throw new Error("Another Flowmind process is changing the sign-in. Try again when it finishes.");
-  try {
-    return await change();
-  } finally {
-    await lock.release();
-  }
-}
-async function ensureAccount() {
-  if (accountBinding()) return;
-  const key = requireApiKey();
-  await withConfigWriters(async () => {
-    const before = config.store;
-    if (before.binding !== void 0 || before.apiKey !== key || (before.apiUrl ?? "https://api.flowmind.pro") !== API_URL) {
-      throw new Error("The sign-in changed while Flowmind checked it. Run the command again.");
-    }
-    let account;
-    try {
-      account = (await apiRequest(getV1Me, {}, { signal: AbortSignal.timeout(1e4) })).userId;
-    } catch (error) {
-      if (error instanceof BridgeError && error.context.kind === "api" && error.context.status === 401) {
-        throw new Error("Flowmind refused the saved sign-in. Run: flowmind auth login");
-      }
-      throw new Error(
-        "Could not verify the signed-in account: " + (error instanceof Error ? error.message : String(error))
-      );
-    }
-    const current = config.store;
-    if (current.apiKey !== key || (current.apiUrl ?? "https://api.flowmind.pro") !== API_URL) {
-      throw new Error("The sign-in changed while Flowmind checked it. Run the command again.");
-    }
-    bindAccount(key, account, bindingStartNow());
-  });
+// src/legacy-proofs.ts
+import { mkdir as mkdir3, readdir as readdir4, readFile as readFile4, rename as rename2, rm as rm2, stat as stat2 } from "node:fs/promises";
+import { join as join6 } from "node:path";
+
+// src/pending-stages.ts
+import { spawn } from "node:child_process";
+import { createHash as createHash2, randomUUID as randomUUID2 } from "node:crypto";
+import { mkdir as mkdir2, readdir as readdir3, readFile as readFile3, rename, rm, writeFile as writeFile3 } from "node:fs/promises";
+import { basename, join as join5 } from "node:path";
+
+// src/stored-stage-input.ts
+var SOURCE_KINDS = [
+  "calendar",
+  "claude_code",
+  "cli",
+  "codex",
+  "github",
+  "linear",
+  "manual",
+  "session_log",
+  "other"
+];
+var evidenceKinds = ["calendar_event", "commit", "issue", "linear_issue", "pr", "session_log", "other"];
+var shape = (v6, keys2) => v6 !== null && typeof v6 === "object" && !Array.isArray(v6) && Object.keys(v6).every((key) => keys2.includes(key));
+var text = (v6, max) => typeof v6 === "string" && v6.trim().length > 0 && [...v6].length <= max;
+var optionalText = (v6, max) => v6 === void 0 || v6 === null || text(v6, max);
+var member = (v6, kinds) => typeof v6 === "string" && kinds.includes(v6);
+var isoDate = (v6) => typeof v6 === "string" && Number.isFinite(Date.parse(v6)) && new Date(v6).toISOString() === v6;
+var keys = [
+  "targetKind",
+  "projectId",
+  "startedAt",
+  "durationMinutes",
+  "description",
+  "note",
+  "details",
+  "artifactUrl",
+  "source",
+  "evidence"
+];
+function isStoredStageInput(v6) {
+  if (!shape(v6, keys) || v6.targetKind !== "project" || typeof v6.projectId !== "string" || !isProjectId(v6.projectId) || !isoDate(v6.startedAt) || typeof v6.durationMinutes !== "number" || !Number.isSafeInteger(v6.durationMinutes) || v6.durationMinutes < 1 || !text(v6.description, 280) || !text(v6.note, AGENT_OUTCOME_MAX_LENGTH) || /[\r\n]/.test(v6.note) || v6.artifactUrl !== void 0 && (!text(v6.artifactUrl, 2048) || !isHttpEvidenceUrl(v6.artifactUrl)))
+    return false;
+  const details = v6.details === void 0 ? [] : v6.details;
+  if (!Array.isArray(details) || !details.every((d5) => text(d5, AGENT_DETAIL_MAX_LENGTH) && !/[\r\n]/.test(d5)) || agentProofIssues({ outcome: v6.note, details }).length)
+    return false;
+  const source = v6.source;
+  return shape(source, ["kind", "externalId", "label"]) && member(source.kind, SOURCE_KINDS) && optionalText(source.externalId, 200) && optionalText(source.label, 160) && Array.isArray(v6.evidence) && v6.evidence.length <= 20 && v6.evidence.every(
+    (e4) => shape(e4, ["kind", "label", "externalId", "url"]) && member(e4.kind, evidenceKinds) && text(e4.label, 160) && optionalText(e4.externalId, 200) && (e4.url === null || e4.url === void 0 || text(e4.url, 500) && isHttpEvidenceUrl(e4.url))
+  );
 }
 
-// src/manual-save.ts
-var RECEIPT_MS = 24 * 60 * 6e4;
-var savesDir = () => join5(accountDirectory(), "manual-saves");
-var fileOf = (id) => join5(savesDir(), id + ".json");
-async function withWriters(work) {
-  await mkdir2(savesDir(), { recursive: true, mode: 448 });
-  const lock = await tryLock(join5(savesDir(), "writers"));
-  if (!lock) throw new Error("Another Flowmind process is saving a log. Try again when it finishes.");
-  try {
-    return await work();
-  } finally {
-    await lock.release();
-  }
+// src/pending-stages.ts
+var STAGE_KEY_IN_USE = "This stage key is already in use";
+var MAX_BACKOFF_MINUTES = 60;
+var outboxDir = () => join5(accountDirectory(), "pending-stages");
+var takeStageLock = () => tryLock(join5(accountDirectory(), "stage-writers"));
+var fileOf = (id) => join5(outboxDir(), id + ".json");
+var nextAttempt = (attempts, now) => new Date(now.getTime() + Math.min(MAX_BACKOFF_MINUTES, 2 ** Math.max(0, attempts - 1)) * 6e4).toISOString();
+var errorText = (error) => error instanceof Error ? error.message : String(error);
+var classifyStageFailure = (error) => {
+  if (!(error instanceof BridgeError)) return { kind: "unexpected", reason: errorText(error) };
+  const { kind, status } = error.context;
+  if (kind === "transport") return { kind: "retry", reason: "The Flowmind API could not be reached in time" };
+  if (kind === "contract")
+    return {
+      kind: "retry",
+      reason: "Flowmind's answer could not be read" + (status === null ? "" : " (HTTP " + status + ")")
+    };
+  const message = error instanceof ApiRejectionError ? error.rejectionMessage : "The Flowmind API answered HTTP " + status;
+  if (status === 401 || status === 403) return { kind: "login", reason: message };
+  if (status === 409 && message === STAGE_KEY_IN_USE) return { kind: "conflict", reason: message };
+  if (status !== null && status >= 400 && status < 500 && status !== 408 && status !== 429)
+    return { kind: "reject", reason: message };
+  return { kind: "retry", reason: message };
+};
+var stageIdOf = (idempotencyKey, input2) => createHash2("sha256").update(idempotencyKey + "\n" + JSON.stringify(input2)).digest("hex").slice(0, 16);
+var cutDigestOf = (id, sessionId, cut) => createHash2("sha256").update(JSON.stringify([id, sessionId, cut === null ? null : [cut.at, cut.up]])).digest("hex");
+function readStage(value, fileName, legacy = false) {
+  const stage = value;
+  if (typeof stage !== "object" || stage === null) return null;
+  const input2 = stage.input;
+  const { id, sessionId, cut } = stage;
+  const valid = typeof id === "string" && /^[a-f0-9]{16}$/.test(id) && fileName === id + ".json" && typeof stage.idempotencyKey === "string" && stage.idempotencyKey.trim() === stage.idempotencyKey && /^[\x20-\x7e]+$/.test(stage.idempotencyKey) && typeof stage.apiUrl === "string" && isStoredStageInput(input2) && (legacy && stage.credentialFingerprint === void 0 || typeof stage.credentialFingerprint === "string" && /^[a-f0-9]{64}$/.test(stage.credentialFingerprint)) && stageIdOf(stage.idempotencyKey, input2) === id && isoDate(stage.savedAt) && isoDate(stage.nextAttemptAt) && (stage.lastAttemptAt === null || isoDate(stage.lastAttemptAt)) && (sessionId === null || typeof sessionId === "string" && sessionId.length > 0) && (cut === null || typeof cut === "object" && isoDate(cut.at) && Date.parse(cut.at) <= Date.parse(stage.savedAt) && (cut.up === null || Number.isFinite(cut.up))) && sessionId === null === (cut === null) && (stage.state === "waiting" || stage.state === "rejected" || stage.state === "conflict") && Number.isSafeInteger(stage.attempts) && stage.attempts >= 0 && (typeof stage.lastError === "string" || stage.state === "waiting" && stage.lastError === null);
+  if (!valid) return null;
+  const cutDigest = cutDigestOf(id, sessionId, cut);
+  if (stage.cutDigest !== cutDigest && !(legacy && stage.cutDigest === void 0)) return null;
+  return { ...stage, credentialFingerprint: stage.credentialFingerprint ?? null, cutDigest };
 }
-function readSaved(text2, id) {
-  const saved = JSON.parse(text2);
-  if (!saved || saved.id !== id || !Number.isFinite(saved.savedAt) || typeof saved.key !== "string" || typeof saved.body !== "object" || saved.body === null) {
-    throw new Error("Unreadable saved log " + id + " in " + savesDir());
+var writePendingStage = async (stage) => {
+  await mkdir2(outboxDir(), { recursive: true });
+  const temporary = fileOf(stage.id) + "." + process.pid + "." + randomUUID2() + ".tmp";
+  await writeFile3(temporary, JSON.stringify(stage, null, 2) + "\n", { encoding: "utf8", mode: 384 });
+  await rename(temporary, fileOf(stage.id));
+};
+async function saveStageBeforeSending(input2) {
+  const at2 = input2.now.toISOString();
+  const id = stageIdOf(input2.idempotencyKey, input2.stage);
+  const pending = {
+    id,
+    savedAt: at2,
+    apiUrl: API_URL,
+    idempotencyKey: input2.idempotencyKey,
+    credentialFingerprint: accountBinding().credential,
+    input: input2.stage,
+    sessionId: input2.sessionId,
+    cut: input2.cut,
+    cutDigest: cutDigestOf(id, input2.sessionId, input2.cut),
+    state: "waiting",
+    attempts: 0,
+    lastAttemptAt: null,
+    nextAttemptAt: at2,
+    lastError: null
+  };
+  if (!readStage(pending, pending.id + ".json"))
+    throw new Error("The stage request does not match the Flowmind proof contract. Check its fields before retrying.");
+  const { stages, unreadable } = await listPendingStages();
+  if (unreadable.includes(fileOf(pending.id)) || stages.some((stage) => stage.id === pending.id)) {
+    throw new Error("This proof (" + pending.id + ") is already saved. See: flowmind agent pending");
   }
-  return saved;
+  await writePendingStage(pending);
+  return pending;
 }
-async function manualSave(identity, prepare, send) {
-  await ensureAccount();
-  const id = createHash2("sha256").update(JSON.stringify(identity)).digest("hex").slice(0, 16);
-  return withWriters(async () => {
-    let saved;
-    try {
-      saved = readSaved(await readFile3(fileOf(id), "utf8"), id);
-    } catch (error) {
-      if (error.code !== "ENOENT") throw error;
-      const body = await prepare();
-      if (body === null) return null;
-      saved = { id, body, key: randomUUID2(), savedAt: Date.now() };
-      const temp = fileOf(id) + "." + randomUUID2() + ".tmp";
-      await writeFile3(temp, JSON.stringify(saved), { mode: 384, flag: "wx" });
-      await rename(temp, fileOf(id));
-    }
-    if (Date.now() - saved.savedAt >= RECEIPT_MS) {
-      throw new Error(
-        `This log (${id}) was not confirmed within 24 hours. Check Activity, then run flowmind pending-logs done ${id} if it is there, or flowmind pending-logs discard ${id} to log it again.`
-      );
-    }
-    let result;
-    try {
-      result = await send(saved.body, saved.key);
-    } catch (error) {
-      const status = error instanceof BridgeError && error.context.kind === "api" ? error.context.status : null;
-      if (status !== null && status >= 400 && status < 500 && ![401, 403, 408, 409, 429].includes(status))
-        await unlink2(fileOf(id));
-      else console.error(`This log (${id}) was not confirmed. Run the same command to retry the saved request.`);
-      throw error;
-    }
-    await unlink2(fileOf(id));
-    return result;
-  });
+async function recordStageFailure(stage, failure, now) {
+  const attempts = stage.attempts + 1;
+  const next = {
+    ...stage,
+    state: failure.kind === "conflict" || stage.state === "conflict" ? "conflict" : failure.kind === "reject" ? "rejected" : "waiting",
+    attempts,
+    lastAttemptAt: now.toISOString(),
+    nextAttemptAt: nextAttempt(attempts, now),
+    lastError: failure.kind === "conflict" || stage.state === "conflict" ? conflictAdvice(stage.id) : failure.reason
+  };
+  await writePendingStage(next);
+  return next;
 }
-async function listSavedLogs() {
-  await ensureAccount();
+async function forgetStage(id) {
+  await rm(fileOf(id), { force: true });
+}
+async function listPendingStages() {
   let names;
   try {
-    names = await readdir3(savesDir());
+    names = await readdir3(outboxDir());
   } catch (error) {
-    if (error.code === "ENOENT") return [];
+    if (error.code === "ENOENT") return { stages: [], unreadable: [] };
     throw error;
   }
-  const logs = [];
-  for (const name of names.filter((entry) => /^[a-f0-9]{16}\.json$/.test(entry))) {
-    const id = name.slice(0, 16);
-    const saved = readSaved(await readFile3(fileOf(id), "utf8"), id);
-    const field = (key, test) => test(saved.body[key]) ? saved.body[key] : null;
-    const text2 = (value) => typeof value === "string";
-    logs.push({
-      id,
-      savedAt: new Date(saved.savedAt).toISOString(),
-      expired: Date.now() - saved.savedAt >= RECEIPT_MS,
-      projectId: field("projectId", text2),
-      durationMinutes: field("durationMinutes", Number.isSafeInteger),
-      startedAt: field("startedAt", text2),
-      date: field("date", text2)
-    });
-  }
-  return logs.sort((a5, b4) => Date.parse(a5.savedAt) - Date.parse(b4.savedAt));
-}
-async function resolveSavedLog(id, resolution) {
-  await ensureAccount();
-  if (!/^[a-f0-9]{16}$/.test(id)) throw new Error("No saved log " + id + ". See: flowmind pending-logs");
-  await withWriters(async () => {
-    let saved;
+  const stages = [];
+  const unreadable = [];
+  for (const name of names.filter((entry) => entry.endsWith(".json"))) {
+    const path = join5(outboxDir(), name);
+    let text2;
     try {
-      saved = readSaved(await readFile3(fileOf(id), "utf8"), id);
+      text2 = await readFile3(path, "utf8");
     } catch (error) {
-      if (error.code === "ENOENT")
-        throw new Error("No saved log " + id + ". See: flowmind pending-logs");
-      throw error;
+      if (error.code === "ENOENT") continue;
+      unreadable.push(path);
+      continue;
     }
-    if (resolution === "discard") return unlink2(fileOf(id));
-    await mkdir2(join5(savesDir(), "resolved"), { recursive: true, mode: 448 });
-    await writeFile3(
-      join5(savesDir(), "resolved", id + "-" + saved.savedAt + ".json"),
-      JSON.stringify({ ...saved, resolution: "checked-in-activity", resolvedAt: (/* @__PURE__ */ new Date()).toISOString() }),
-      { mode: 384, flag: "wx" }
-    );
-    await unlink2(fileOf(id));
-  });
-}
-
-// ../../packages/contracts/src/generated/validators/shared/OUWE7ZSG.js
-var U = c((r2) => {
-  "use strict";
-  Object.defineProperty(r2, "__esModule", { value: true });
-  r2.formatNames = r2.fastFormats = r2.fullFormats = void 0;
-  function n7(a5, d5) {
-    return { validate: a5, compare: d5 };
-  }
-  r2.fullFormats = { date: n7(b4, m6), time: n7(c5(true), $2), "date-time": n7(v6(true), N2), "iso-time": n7(c5(), A2), "iso-date-time": n7(v6(), g), duration: /^P(?!$)((\d+Y)?(\d+M)?(\d+D)?(T(?=\d)(\d+H)?(\d+M)?(\d+S)?)?|(\d+W)?)$/, uri: R2, "uri-reference": /^(?:[a-z][a-z0-9+\-.]*:)?(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'"()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*)?(?:\?(?:[a-z0-9\-._~!$&'"()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'"()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i, "uri-template": /^(?:(?:[^\x00-\x20"'<>%\\^`{|}]|%[0-9a-f]{2})|\{[+#./;?&=,!@|]?(?:[a-z0-9_]|%[0-9a-f]{2})+(?::[1-9][0-9]{0,3}|\*)?(?:,(?:[a-z0-9_]|%[0-9a-f]{2})+(?::[1-9][0-9]{0,3}|\*)?)*\})*$/i, url: /^(?:https?|ftp):\/\/(?:\S+(?::\S*)?@)?(?:(?!(?:10|127)(?:\.\d{1,3}){3})(?!(?:169\.254|192\.168)(?:\.\d{1,3}){2})(?!172\.(?:1[6-9]|2\d|3[0-1])(?:\.\d{1,3}){2})(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z0-9\u{00a1}-\u{ffff}]+-)*[a-z0-9\u{00a1}-\u{ffff}]+)(?:\.(?:[a-z0-9\u{00a1}-\u{ffff}]+-)*[a-z0-9\u{00a1}-\u{ffff}]+)*(?:\.(?:[a-z\u{00a1}-\u{ffff}]{2,})))(?::\d{2,5})?(?:\/[^\s]*)?$/iu, email: /^[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*@(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i, hostname: /^(?=.{1,253}\.?$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[-0-9a-z]{0,61}[0-9a-z])?)*\.?$/i, ipv4: /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/, ipv6: /^((([0-9a-f]{1,4}:){7}([0-9a-f]{1,4}|:))|(([0-9a-f]{1,4}:){6}(:[0-9a-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9a-f]{1,4}:){5}(((:[0-9a-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9a-f]{1,4}:){4}(((:[0-9a-f]{1,4}){1,3})|((:[0-9a-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){3}(((:[0-9a-f]{1,4}){1,4})|((:[0-9a-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){2}(((:[0-9a-f]{1,4}){1,5})|((:[0-9a-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){1}(((:[0-9a-f]{1,4}){1,6})|((:[0-9a-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9a-f]{1,4}){1,7})|((:[0-9a-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))$/i, regex: P4, uuid: /^(?:urn:uuid:)?[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i, "json-pointer": /^(?:\/(?:[^~/]|~0|~1)*)*$/, "json-pointer-uri-fragment": /^#(?:\/(?:[a-z0-9_\-.!$&'()*+,;:=@]|%[0-9a-f]{2}|~0|~1)*)*$/i, "relative-json-pointer": /^(?:0|[1-9][0-9]*)(?:#|(?:\/(?:[^~/]|~0|~1)*)*)$/, byte: w3, int32: { type: "number", validate: Z }, int64: { type: "number", validate: H2 }, float: { type: "number", validate: D2 }, double: { type: "number", validate: D2 }, password: true, binary: true };
-  r2.fastFormats = { ...r2.fullFormats, date: n7(/^\d\d\d\d-[0-1]\d-[0-3]\d$/, m6), time: n7(/^(?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)$/i, $2), "date-time": n7(/^\d\d\d\d-[0-1]\d-[0-3]\dt(?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)$/i, N2), "iso-time": n7(/^(?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)?$/i, A2), "iso-date-time": n7(/^\d\d\d\d-[0-1]\d-[0-3]\d[t\s](?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)?$/i, g), uri: /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/)?[^\s]*$/i, "uri-reference": /^(?:(?:[a-z][a-z0-9+\-.]*:)?\/?\/)?(?:[^\\\s#][^\s#]*)?(?:#[^\\\s]*)?$/i, email: /^[a-z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/i };
-  r2.formatNames = Object.keys(r2.fullFormats);
-  function y3(a5) {
-    return a5 % 4 === 0 && (a5 % 100 !== 0 || a5 % 400 === 0);
-  }
-  var O2 = /^(\d\d\d\d)-(\d\d)-(\d\d)$/, h10 = [0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
-  function b4(a5) {
-    let d5 = O2.exec(a5);
-    if (!d5) return false;
-    let t8 = +d5[1], e4 = +d5[2], f3 = +d5[3];
-    return e4 >= 1 && e4 <= 12 && f3 >= 1 && f3 <= (e4 === 2 && y3(t8) ? 29 : h10[e4]);
-  }
-  function m6(a5, d5) {
-    if (a5 && d5) return a5 > d5 ? 1 : a5 < d5 ? -1 : 0;
-  }
-  var s7 = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
-  function c5(a5) {
-    return function(t8) {
-      let e4 = s7.exec(t8);
-      if (!e4) return false;
-      let f3 = +e4[1], u4 = +e4[2], i5 = +e4[3], M = e4[4], l4 = e4[5] === "-" ? -1 : 1, _ = +(e4[6] || 0), p6 = +(e4[7] || 0);
-      if (_ > 23 || p6 > 59 || a5 && !M) return false;
-      if (f3 <= 23 && u4 <= 59 && i5 < 60) return true;
-      let o11 = u4 - p6 * l4, T2 = f3 - _ * l4 - (o11 < 0 ? 1 : 0);
-      return (T2 === 23 || T2 === -1) && (o11 === 59 || o11 === -1) && i5 < 61;
-    };
-  }
-  function $2(a5, d5) {
-    if (!(a5 && d5)) return;
-    let t8 = (/* @__PURE__ */ new Date("2020-01-01T" + a5)).valueOf(), e4 = (/* @__PURE__ */ new Date("2020-01-01T" + d5)).valueOf();
-    if (t8 && e4) return t8 - e4;
-  }
-  function A2(a5, d5) {
-    if (!(a5 && d5)) return;
-    let t8 = s7.exec(a5), e4 = s7.exec(d5);
-    if (t8 && e4) return a5 = t8[1] + t8[2] + t8[3], d5 = e4[1] + e4[2] + e4[3], a5 > d5 ? 1 : a5 < d5 ? -1 : 0;
-  }
-  var z = /t|\s/i;
-  function v6(a5) {
-    let d5 = c5(a5);
-    return function(e4) {
-      let f3 = e4.split(z);
-      return f3.length === 2 && b4(f3[0]) && d5(f3[1]);
-    };
-  }
-  function N2(a5, d5) {
-    if (!(a5 && d5)) return;
-    let t8 = new Date(a5).valueOf(), e4 = new Date(d5).valueOf();
-    if (t8 && e4) return t8 - e4;
-  }
-  function g(a5, d5) {
-    if (!(a5 && d5)) return;
-    let [t8, e4] = a5.split(z), [f3, u4] = d5.split(z), i5 = m6(t8, f3);
-    if (i5 !== void 0) return i5 || $2(e4, u4);
-  }
-  var E = /\/|:/, F2 = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-  function R2(a5) {
-    return E.test(a5) && F2.test(a5);
-  }
-  var I2 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-  function w3(a5) {
-    return I2.lastIndex = 0, I2.test(a5);
-  }
-  var S3 = -(2 ** 31), j2 = 2 ** 31 - 1;
-  function Z(a5) {
-    return Number.isInteger(a5) && a5 <= j2 && a5 >= S3;
-  }
-  function H2(a5) {
-    return Number.isInteger(a5);
-  }
-  function D2() {
-    return true;
-  }
-  var Y = /[^\\]\\Z/;
-  function P4(a5) {
-    if (Y.test(a5)) return false;
+    let value;
     try {
-      return new RegExp(a5), true;
+      value = JSON.parse(text2);
     } catch {
-      return false;
+      value = null;
     }
+    const stage = readStage(value, name);
+    if (stage && stage.apiUrl === API_URL) stages.push(stage);
+    else unreadable.push(path);
   }
-});
-
-// ../../packages/contracts/src/generated/validators/shared/J43X2ZUC.js
-var t3 = U().fullFormats.date;
-
-// ../../packages/contracts/src/generated/validators/shared/HNC2DQA2.js
-function s(e4, { instancePath: a5 = "", parentData: n7, parentDataProperty: u4, rootData: l4 = e4 } = {}) {
-  let m6 = null, r2 = 0;
-  if (r2 === 0) if (e4 && typeof e4 == "object" && !Array.isArray(e4)) {
-    let i5;
-    if (e4.text === void 0 && (i5 = "text") || e4.sourceDay === void 0 && (i5 = "sourceDay")) return s.errors = [{ instancePath: a5, schemaPath: "#/required", keyword: "required", params: { missingProperty: i5 }, message: "must have required property '" + i5 + "'" }], false;
-    {
-      let y3 = r2;
-      for (let t8 in e4) if (!(t8 === "sourceDay" || t8 === "text")) {
-        return s.errors = [{ instancePath: a5, schemaPath: "#/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: t8 }, message: "must NOT have additional properties" }], false;
-        break;
+  return { stages: stages.sort((a5, b4) => Date.parse(a5.savedAt) - Date.parse(b4.savedAt)), unreadable };
+}
+async function restoreSavedStageMarks(measuring = false) {
+  const { stages, unreadable } = await listPendingStages();
+  if (measuring && unreadable.length) {
+    throw new Error(
+      "Cannot measure new work: unreadable reservation " + unreadable[0] + ". Check Activity. Restore the original file and run flowmind agent retry, or discard the reservation with flowmind agent discard " + basename(unreadable[0], ".json") + ". An unowned original needs flowmind agent adopt <id>."
+    );
+  }
+  for (const stage of stages) {
+    if (stage.sessionId === null || stage.cut === null) continue;
+    const mark = { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id };
+    if (await restoreStageMark(stage.sessionId, mark) === "accepted") {
+      await forgetStage(stage.id);
+      continue;
+    }
+    if ((stage.state === "rejected" || stage.state === "conflict") && stage.lastError !== null) {
+      await settleStageMark(stage.sessionId, mark, { state: stage.state, reason: stage.lastError });
+    }
+  }
+}
+var isDue = (stage, now) => stage.state === "waiting" && stage.apiUrl === API_URL && Date.parse(stage.nextAttemptAt) <= now.getTime();
+async function sendPendingStages(options) {
+  const clock = options.now ?? (() => /* @__PURE__ */ new Date());
+  const count = async () => {
+    const { stages, unreadable } = await listPendingStages();
+    return { waiting: stages.filter((stage) => stage.state === "waiting").length, unreadable };
+  };
+  const result = {
+    busy: false,
+    sent: [],
+    rejected: [],
+    conflicts: [],
+    stoppedBy: null,
+    waiting: 0,
+    unreadable: []
+  };
+  const lock = await takeStageLock();
+  if (!lock) return { ...result, busy: true, ...await count() };
+  try {
+    await restoreSavedStageMarks();
+    const candidates = (await listPendingStages()).stages.filter((stage) => {
+      const now = clock();
+      if (stage.state === "conflict") {
+        if (options.manual && stage.credentialFingerprint === accountBinding().credential) return true;
+        if (options.manual) result.conflicts.push({ id: stage.id, reason: conflictAdvice(stage.id) });
+        return false;
       }
-      if (y3 === r2) {
-        if (e4.sourceDay !== void 0) {
-          let t8 = e4.sourceDay, p6 = r2;
-          if (r2 === p6 && r2 === p6) if (typeof t8 == "string") {
-            if (!t3.validate(t8)) return s.errors = [{ instancePath: a5 + "/sourceDay", schemaPath: "#/properties/sourceDay/format", keyword: "format", params: { format: "date" }, message: 'must match format "date"' }], false;
-          } else return s.errors = [{ instancePath: a5 + "/sourceDay", schemaPath: "#/properties/sourceDay/type", keyword: "type", params: { type: "string" }, message: "must be string" }], false;
-          var o11 = p6 === r2;
-        } else var o11 = true;
-        if (o11) if (e4.text !== void 0) {
-          let t8 = r2;
-          if (typeof e4.text != "string") return s.errors = [{ instancePath: a5 + "/text", schemaPath: "#/properties/text/type", keyword: "type", params: { type: "string" }, message: "must be string" }], false;
-          var o11 = t8 === r2;
-        } else var o11 = true;
+      return options.due ? isDue(stage, now) : stage.state === "waiting" && stage.apiUrl === API_URL;
+    });
+    for (const stage of candidates) {
+      let proposal;
+      try {
+        proposal = await createAgentLogProposal(stage.input, stage.idempotencyKey);
+      } catch (error) {
+        const failure = classifyStageFailure(error);
+        const saved = await recordStageFailure(stage, failure, clock());
+        if (saved.state === "conflict") {
+          if (stage.sessionId && stage.cut)
+            await settleStageMark(
+              stage.sessionId,
+              { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id },
+              { state: "conflict", reason: conflictAdvice(stage.id) }
+            );
+          result.conflicts.push({ id: stage.id, reason: conflictAdvice(stage.id) });
+          continue;
+        }
+        if (failure.kind === "reject") {
+          if (stage.sessionId && stage.cut)
+            await settleStageMark(
+              stage.sessionId,
+              { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id },
+              { state: "rejected", reason: failure.reason }
+            );
+          result.rejected.push({ id: stage.id, reason: failure.reason });
+          continue;
+        }
+        result.stoppedBy = failure.reason;
+        break;
       }
+      if (stage.sessionId && stage.cut)
+        await settleStageMark(
+          stage.sessionId,
+          { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id },
+          { state: "accepted", proposalId: proposal.id }
+        );
+      await forgetStage(stage.id);
+      result.sent.push({ id: stage.id, proposal });
     }
-  } else return s.errors = [{ instancePath: a5, schemaPath: "#/type", keyword: "type", params: { type: "object" }, message: "must be object" }], false;
-  return s.errors = m6, r2 === 0;
+  } finally {
+    await lock.release();
+  }
+  return { ...result, ...await count() };
+}
+var conflictAdvice = (id) => "Stage key conflict (" + id + "). Delivery is unknown. Check Activity, then retry with the original credential or run flowmind agent discard " + id + ".";
+async function discardReservation(id) {
+  if (!id || basename(id) !== id || id === "." || id === "..") return false;
+  const { stages, unreadable } = await listPendingStages();
+  const stage = stages.find((item) => item.id === id);
+  if (!stage && !unreadable.includes(fileOf(id))) return false;
+  if (stage && stage.state !== "conflict")
+    throw new Error("This account already has a saved proof " + id + ". See: flowmind agent pending");
+  if (stage?.sessionId && stage.cut)
+    await settleStageMark(
+      stage.sessionId,
+      { at: stage.savedAt, cut: stage.cut, pendingStageId: id },
+      { state: "discarded", reason: "Discarded after checking Activity." }
+    );
+  await forgetStage(id);
+  return true;
+}
+async function startDueRetry(now) {
+  const { stages } = await listPendingStages();
+  if (!stages.some((stage) => isDue(stage, now))) return false;
+  const script = process.argv[1];
+  if (!script) throw new Error("Cannot find the Flowmind CLI script to send saved stages");
+  const child = spawn(process.execPath, [script, "agent", "retry", "--due"], {
+    detached: true,
+    stdio: "ignore",
+    windowsHide: true
+  });
+  child.on("error", (error) => {
+    console.error("Flowmind could not start sending saved stages: " + error.message);
+    process.exitCode = 1;
+  });
+  child.unref();
+  return true;
 }
 
-// ../../packages/contracts/src/generated/validators/shared/VSRNQHIL.js
-var e = U().fullFormats["date-time"];
-
-// ../../packages/contracts/src/generated/validators/shared/CA7CC2WJ.js
-var a2 = /^(?:urn:uuid:)?[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i;
-
-// ../../packages/contracts/src/generated/validators/getV1Projects200.js
-var D = { description: "A listed project with its time totals. totalSeconds counts every non-voided entry, including approved agent work; agentSeconds is the agent share of that total.", properties: { agentSeconds: { minimum: 0, type: "integer" }, archivedAt: { format: "date-time", nullable: true, type: "string" }, category: { type: "string" }, color: { type: "string" }, completedAt: { format: "date-time", nullable: true, type: "string" }, createdAt: { format: "date-time", type: "string" }, description: { nullable: true, type: "string" }, details: { description: "Private details for lastOutcome, or an empty array when no outcome exists.", items: { type: "string" }, type: "array" }, estimatedHours: { nullable: true, type: "integer" }, icon: { type: "string" }, id: { format: "uuid", type: "string" }, lastActiveDay: { format: "date", nullable: true, type: "string" }, lastOutcome: { nullable: true, type: "string" }, launchDescription: { nullable: true, type: "string" }, launchUrl: { nullable: true, type: "string" }, launchedAt: { format: "date-time", nullable: true, type: "string" }, name: { type: "string" }, nextStep: { anyOf: [{ $ref: "urn:flowmind:schema:ProjectNextStep" }, { enum: [null], nullable: true, type: "object" }] }, totalSeconds: { minimum: 0, type: "integer" }, updatedAt: { format: "date-time", type: "string" } }, required: ["id", "name", "description", "color", "icon", "category", "estimatedHours", "launchedAt", "completedAt", "launchDescription", "launchUrl", "createdAt", "updatedAt", "archivedAt", "nextStep", "lastOutcome", "details", "lastActiveDay", "totalSeconds", "agentSeconds"], type: "object" };
-function n(t8, { instancePath: i5 = "", parentData: w3, parentDataProperty: k3, rootData: d5 = t8 } = {}) {
-  let o11 = null, r2 = 0;
-  if (r2 === 0) if (t8 && typeof t8 == "object" && !Array.isArray(t8)) {
+// src/legacy-proofs.ts
+async function legacyStages() {
+  let names;
+  try {
+    names = await readdir4(legacyOutboxDir());
+  } catch (error) {
+    if (error.code === "ENOENT") return { stages: [], unreadable: [] };
+    throw error;
+  }
+  const stages = [];
+  const unreadable = [];
+  for (const name of names.filter((entry) => entry.endsWith(".json"))) {
+    const path = join6(legacyOutboxDir(), name);
+    let value = null;
+    try {
+      value = JSON.parse(await readFile4(path, "utf8"));
+    } catch (error) {
+      if (error.code === "ENOENT") continue;
+      if (!(error instanceof SyntaxError)) throw error;
+    }
+    const stage = readStage(value, name, true);
+    if (stage) stages.push(stage);
+    else unreadable.push(path);
+  }
+  return { stages, unreadable };
+}
+async function moveIntoAccount(stage) {
+  await mkdir3(outboxDir(), { recursive: true, mode: 448 });
+  const target = join6(outboxDir(), stage.id + ".json");
+  const present = await stat2(target).then(
+    () => true,
+    (error) => {
+      if (error.code === "ENOENT") return false;
+      throw error;
+    }
+  );
+  if (present) return false;
+  await rename2(join6(legacyOutboxDir(), stage.id + ".json"), target);
+  await writePendingStage({ ...stage, credentialFingerprint: accountBinding().credential });
+  return true;
+}
+async function adoptLegacyProofs() {
+  for (const stage of (await legacyStages()).stages) if (stage.apiUrl === API_URL) await moveIntoAccount(stage);
+}
+async function listUnownedProofs() {
+  const { stages, unreadable } = await legacyStages();
+  const unowned = stages.map((stage) => ({
+    id: stage.id,
+    projectId: stage.input.projectId,
+    durationMinutes: stage.input.durationMinutes,
+    savedAt: stage.savedAt,
+    apiUrl: stage.apiUrl
+  })).sort((a5, b4) => Date.parse(a5.savedAt) - Date.parse(b4.savedAt));
+  return { unowned, unreadable };
+}
+async function findUnowned(id) {
+  if (!/^[a-f0-9]{16}$/.test(id)) throw new Error("No unowned saved proof " + id + ". See: flowmind agent pending");
+  const stage = (await legacyStages()).stages.find((candidate) => candidate.id === id);
+  if (!stage) throw new Error("No unowned saved proof " + id + ". See: flowmind agent pending");
+  return stage;
+}
+async function adoptUnownedProof(id) {
+  const stage = await findUnowned(id);
+  if (stage.apiUrl !== API_URL)
+    throw new Error("Saved proof " + id + " belongs to " + stage.apiUrl + ", not " + API_URL + ".");
+  if (!await moveIntoAccount(stage))
+    throw new Error("This account already has a reservation for " + id + ". Check Activity before adopting it.");
+}
+async function discardUnownedProof(id) {
+  await findUnowned(id);
+  await rm2(join6(legacyOutboxDir(), id + ".json"));
+}
+
+// src/account.ts
+var bindingStartNow = () => ({ at: (/* @__PURE__ */ new Date()).toISOString(), up: awakeMs() });
+async function withConfigWriters(change) {
+  let lock = await configWriters();
+  for (let waited = 0; !lock && waited < 15e3; waited += 250) {
+    await new Promise((resolve3) => setTimeout(resolve3, 250));
+    lock = await configWriters();
+  }
+  if (!lock) throw new Error("Another Flowmind process is changing the sign-in. Try again when it finishes.");
+  try {
+    return await change();
+  } finally {
+    await lock.release();
+  }
+}
+async function ensureAccount() {
+  if (!accountBinding()) await learnAccount();
+  if (!await legacyStateWaits()) return;
+  const lock = await takeStageLock();
+  if (!lock) return;
+  try {
+    await adoptLegacyStateHeld();
+  } finally {
+    await lock.release();
+  }
+}
+async function learnAccount() {
+  const key = requireApiKey();
+  await withConfigWriters(async () => {
+    const before = config.store;
+    if (before.binding !== void 0 || before.apiKey !== key || (before.apiUrl ?? "https://api.flowmind.pro") !== API_URL) {
+      throw new Error("The sign-in changed while Flowmind checked it. Run the command again.");
+    }
+    let account;
+    try {
+      account = (await apiRequest(getV1Me, {}, { signal: AbortSignal.timeout(1e4) })).userId;
+    } catch (error) {
+      if (error instanceof BridgeError && error.context.kind === "api" && error.context.status === 401) {
+        throw new Error("Flowmind refused the saved sign-in. Run: flowmind auth login");
+      }
+      throw new Error(
+        "Could not verify the signed-in account: " + (error instanceof Error ? error.message : String(error))
+      );
+    }
+    const current = config.store;
+    if (current.apiKey !== key || (current.apiUrl ?? "https://api.flowmind.pro") !== API_URL) {
+      throw new Error("The sign-in changed while Flowmind checked it. Run the command again.");
+    }
+    bindAccount(key, account, bindingStartNow());
+  });
+}
+async function holdsFiles(directory, suffix) {
+  try {
+    return (await readdir5(directory)).some((name) => name.endsWith(suffix));
+  } catch (error) {
+    if (error.code === "ENOENT") return false;
+    throw error;
+  }
+}
+async function legacyStateWaits() {
+  return soleAccountProfile() && (await legacyJournalsWaiting(legacySessionsDir()) || await holdsFiles(legacyOutboxDir(), ".json"));
+}
+async function adoptLegacyStateHeld() {
+  if (await legacyStateWaits()) {
+    await adoptLegacyJournals(
+      legacySessionsDir(),
+      (earliest) => withConfigWriters(() => extendSignInStart({ at: new Date(earliest).toISOString(), up: null }))
+    );
+    await adoptLegacyProofs();
+  }
+  refreshSignInStart();
+}
+
+// src/manual-save.ts
+var RECEIPT_MS = 24 * 60 * 6e4;
+var savesDir = () => join7(accountDirectory(), "manual-saves");
+var fileOf2 = (id) => join7(savesDir(), id + ".json");
+async function withWriters(work) {
+  await mkdir4(savesDir(), { recursive: true, mode: 448 });
+  const lock = await tryLock(join7(savesDir(), "writers"));
+  if (!lock) throw new Error("Another Flowmind process is saving a log. Try again when it finishes.");
+  try {
+    return await work();
+  } finally {
+    await lock.release();
+  }
+}
+function readSaved(text2, id) {
+  const saved = JSON.parse(text2);
+  if (!saved || saved.id !== id || !Number.isFinite(saved.savedAt) || typeof saved.key !== "string" || typeof saved.body !== "object" || saved.body === null) {
+    throw new Error("Unreadable saved log " + id + " in " + savesDir());
+  }
+  return saved;
+}
+async function manualSave(identity, prepare, send) {
+  await ensureAccount();
+  const id = createHash3("sha256").update(JSON.stringify(identity)).digest("hex").slice(0, 16);
+  return withWriters(async () => {
+    let saved;
+    try {
+      saved = readSaved(await readFile5(fileOf2(id), "utf8"), id);
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+      const body = await prepare();
+      if (body === null) return null;
+      saved = { id, body, key: randomUUID3(), savedAt: Date.now() };
+      const temp = fileOf2(id) + "." + randomUUID3() + ".tmp";
+      await writeFile4(temp, JSON.stringify(saved), { mode: 384, flag: "wx" });
+      await rename3(temp, fileOf2(id));
+    }
+    if (Date.now() - saved.savedAt >= RECEIPT_MS) {
+      throw new Error(
+        `This log (${id}) was not confirmed within 24 hours. Check Activity, then run flowmind pending-logs done ${id} if it is there, or flowmind pending-logs discard ${id} to log it again.`
+      );
+    }
+    let result;
+    try {
+      result = await send(saved.body, saved.key);
+    } catch (error) {
+      const status = error instanceof BridgeError && error.context.kind === "api" ? error.context.status : null;
+      if (status !== null && status >= 400 && status < 500 && ![401, 403, 408, 409, 429].includes(status))
+        await unlink2(fileOf2(id));
+      else console.error(`This log (${id}) was not confirmed. Run the same command to retry the saved request.`);
+      throw error;
+    }
+    await unlink2(fileOf2(id));
+    return result;
+  });
+}
+async function listSavedLogs() {
+  await ensureAccount();
+  let names;
+  try {
+    names = await readdir6(savesDir());
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+  const logs = [];
+  for (const name of names.filter((entry) => /^[a-f0-9]{16}\.json$/.test(entry))) {
+    const id = name.slice(0, 16);
+    const saved = readSaved(await readFile5(fileOf2(id), "utf8"), id);
+    const field = (key, test) => test(saved.body[key]) ? saved.body[key] : null;
+    const text2 = (value) => typeof value === "string";
+    logs.push({
+      id,
+      savedAt: new Date(saved.savedAt).toISOString(),
+      expired: Date.now() - saved.savedAt >= RECEIPT_MS,
+      projectId: field("projectId", text2),
+      durationMinutes: field("durationMinutes", Number.isSafeInteger),
+      startedAt: field("startedAt", text2),
+      date: field("date", text2)
+    });
+  }
+  return logs.sort((a5, b4) => Date.parse(a5.savedAt) - Date.parse(b4.savedAt));
+}
+async function resolveSavedLog(id, resolution) {
+  await ensureAccount();
+  if (!/^[a-f0-9]{16}$/.test(id)) throw new Error("No saved log " + id + ". See: flowmind pending-logs");
+  await withWriters(async () => {
+    let saved;
+    try {
+      saved = readSaved(await readFile5(fileOf2(id), "utf8"), id);
+    } catch (error) {
+      if (error.code === "ENOENT")
+        throw new Error("No saved log " + id + ". See: flowmind pending-logs");
+      throw error;
+    }
+    if (resolution === "discard") return unlink2(fileOf2(id));
+    await mkdir4(join7(savesDir(), "resolved"), { recursive: true, mode: 448 });
+    await writeFile4(
+      join7(savesDir(), "resolved", id + "-" + saved.savedAt + ".json"),
+      JSON.stringify({ ...saved, resolution: "checked-in-activity", resolvedAt: (/* @__PURE__ */ new Date()).toISOString() }),
+      { mode: 384, flag: "wx" }
+    );
+    await unlink2(fileOf2(id));
+  });
+}
+
+// ../../packages/contracts/src/generated/validators/shared/OUWE7ZSG.js
+var U = c((r2) => {
+  "use strict";
+  Object.defineProperty(r2, "__esModule", { value: true });
+  r2.formatNames = r2.fastFormats = r2.fullFormats = void 0;
+  function n7(a5, d5) {
+    return { validate: a5, compare: d5 };
+  }
+  r2.fullFormats = { date: n7(b4, m6), time: n7(c5(true), $2), "date-time": n7(v6(true), N2), "iso-time": n7(c5(), A2), "iso-date-time": n7(v6(), g), duration: /^P(?!$)((\d+Y)?(\d+M)?(\d+D)?(T(?=\d)(\d+H)?(\d+M)?(\d+S)?)?|(\d+W)?)$/, uri: R2, "uri-reference": /^(?:[a-z][a-z0-9+\-.]*:)?(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'"()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*)?(?:\?(?:[a-z0-9\-._~!$&'"()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'"()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i, "uri-template": /^(?:(?:[^\x00-\x20"'<>%\\^`{|}]|%[0-9a-f]{2})|\{[+#./;?&=,!@|]?(?:[a-z0-9_]|%[0-9a-f]{2})+(?::[1-9][0-9]{0,3}|\*)?(?:,(?:[a-z0-9_]|%[0-9a-f]{2})+(?::[1-9][0-9]{0,3}|\*)?)*\})*$/i, url: /^(?:https?|ftp):\/\/(?:\S+(?::\S*)?@)?(?:(?!(?:10|127)(?:\.\d{1,3}){3})(?!(?:169\.254|192\.168)(?:\.\d{1,3}){2})(?!172\.(?:1[6-9]|2\d|3[0-1])(?:\.\d{1,3}){2})(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z0-9\u{00a1}-\u{ffff}]+-)*[a-z0-9\u{00a1}-\u{ffff}]+)(?:\.(?:[a-z0-9\u{00a1}-\u{ffff}]+-)*[a-z0-9\u{00a1}-\u{ffff}]+)*(?:\.(?:[a-z\u{00a1}-\u{ffff}]{2,})))(?::\d{2,5})?(?:\/[^\s]*)?$/iu, email: /^[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*@(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i, hostname: /^(?=.{1,253}\.?$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[-0-9a-z]{0,61}[0-9a-z])?)*\.?$/i, ipv4: /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/, ipv6: /^((([0-9a-f]{1,4}:){7}([0-9a-f]{1,4}|:))|(([0-9a-f]{1,4}:){6}(:[0-9a-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9a-f]{1,4}:){5}(((:[0-9a-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9a-f]{1,4}:){4}(((:[0-9a-f]{1,4}){1,3})|((:[0-9a-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){3}(((:[0-9a-f]{1,4}){1,4})|((:[0-9a-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){2}(((:[0-9a-f]{1,4}){1,5})|((:[0-9a-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){1}(((:[0-9a-f]{1,4}){1,6})|((:[0-9a-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9a-f]{1,4}){1,7})|((:[0-9a-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))$/i, regex: P4, uuid: /^(?:urn:uuid:)?[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i, "json-pointer": /^(?:\/(?:[^~/]|~0|~1)*)*$/, "json-pointer-uri-fragment": /^#(?:\/(?:[a-z0-9_\-.!$&'()*+,;:=@]|%[0-9a-f]{2}|~0|~1)*)*$/i, "relative-json-pointer": /^(?:0|[1-9][0-9]*)(?:#|(?:\/(?:[^~/]|~0|~1)*)*)$/, byte: w3, int32: { type: "number", validate: Z }, int64: { type: "number", validate: H2 }, float: { type: "number", validate: D2 }, double: { type: "number", validate: D2 }, password: true, binary: true };
+  r2.fastFormats = { ...r2.fullFormats, date: n7(/^\d\d\d\d-[0-1]\d-[0-3]\d$/, m6), time: n7(/^(?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)$/i, $2), "date-time": n7(/^\d\d\d\d-[0-1]\d-[0-3]\dt(?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)$/i, N2), "iso-time": n7(/^(?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)?$/i, A2), "iso-date-time": n7(/^\d\d\d\d-[0-1]\d-[0-3]\d[t\s](?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)?$/i, g), uri: /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/)?[^\s]*$/i, "uri-reference": /^(?:(?:[a-z][a-z0-9+\-.]*:)?\/?\/)?(?:[^\\\s#][^\s#]*)?(?:#[^\\\s]*)?$/i, email: /^[a-z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/i };
+  r2.formatNames = Object.keys(r2.fullFormats);
+  function y3(a5) {
+    return a5 % 4 === 0 && (a5 % 100 !== 0 || a5 % 400 === 0);
+  }
+  var O2 = /^(\d\d\d\d)-(\d\d)-(\d\d)$/, h10 = [0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+  function b4(a5) {
+    let d5 = O2.exec(a5);
+    if (!d5) return false;
+    let t8 = +d5[1], e4 = +d5[2], f3 = +d5[3];
+    return e4 >= 1 && e4 <= 12 && f3 >= 1 && f3 <= (e4 === 2 && y3(t8) ? 29 : h10[e4]);
+  }
+  function m6(a5, d5) {
+    if (a5 && d5) return a5 > d5 ? 1 : a5 < d5 ? -1 : 0;
+  }
+  var s7 = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
+  function c5(a5) {
+    return function(t8) {
+      let e4 = s7.exec(t8);
+      if (!e4) return false;
+      let f3 = +e4[1], u4 = +e4[2], i5 = +e4[3], M = e4[4], l4 = e4[5] === "-" ? -1 : 1, _ = +(e4[6] || 0), p6 = +(e4[7] || 0);
+      if (_ > 23 || p6 > 59 || a5 && !M) return false;
+      if (f3 <= 23 && u4 <= 59 && i5 < 60) return true;
+      let o11 = u4 - p6 * l4, T2 = f3 - _ * l4 - (o11 < 0 ? 1 : 0);
+      return (T2 === 23 || T2 === -1) && (o11 === 59 || o11 === -1) && i5 < 61;
+    };
+  }
+  function $2(a5, d5) {
+    if (!(a5 && d5)) return;
+    let t8 = (/* @__PURE__ */ new Date("2020-01-01T" + a5)).valueOf(), e4 = (/* @__PURE__ */ new Date("2020-01-01T" + d5)).valueOf();
+    if (t8 && e4) return t8 - e4;
+  }
+  function A2(a5, d5) {
+    if (!(a5 && d5)) return;
+    let t8 = s7.exec(a5), e4 = s7.exec(d5);
+    if (t8 && e4) return a5 = t8[1] + t8[2] + t8[3], d5 = e4[1] + e4[2] + e4[3], a5 > d5 ? 1 : a5 < d5 ? -1 : 0;
+  }
+  var z = /t|\s/i;
+  function v6(a5) {
+    let d5 = c5(a5);
+    return function(e4) {
+      let f3 = e4.split(z);
+      return f3.length === 2 && b4(f3[0]) && d5(f3[1]);
+    };
+  }
+  function N2(a5, d5) {
+    if (!(a5 && d5)) return;
+    let t8 = new Date(a5).valueOf(), e4 = new Date(d5).valueOf();
+    if (t8 && e4) return t8 - e4;
+  }
+  function g(a5, d5) {
+    if (!(a5 && d5)) return;
+    let [t8, e4] = a5.split(z), [f3, u4] = d5.split(z), i5 = m6(t8, f3);
+    if (i5 !== void 0) return i5 || $2(e4, u4);
+  }
+  var E = /\/|:/, F2 = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
+  function R2(a5) {
+    return E.test(a5) && F2.test(a5);
+  }
+  var I2 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
+  function w3(a5) {
+    return I2.lastIndex = 0, I2.test(a5);
+  }
+  var S3 = -(2 ** 31), j2 = 2 ** 31 - 1;
+  function Z(a5) {
+    return Number.isInteger(a5) && a5 <= j2 && a5 >= S3;
+  }
+  function H2(a5) {
+    return Number.isInteger(a5);
+  }
+  function D2() {
+    return true;
+  }
+  var Y = /[^\\]\\Z/;
+  function P4(a5) {
+    if (Y.test(a5)) return false;
+    try {
+      return new RegExp(a5), true;
+    } catch {
+      return false;
+    }
+  }
+});
+
+// ../../packages/contracts/src/generated/validators/shared/J43X2ZUC.js
+var t3 = U().fullFormats.date;
+
+// ../../packages/contracts/src/generated/validators/shared/HNC2DQA2.js
+function s(e4, { instancePath: a5 = "", parentData: n7, parentDataProperty: u4, rootData: l4 = e4 } = {}) {
+  let m6 = null, r2 = 0;
+  if (r2 === 0) if (e4 && typeof e4 == "object" && !Array.isArray(e4)) {
+    let i5;
+    if (e4.text === void 0 && (i5 = "text") || e4.sourceDay === void 0 && (i5 = "sourceDay")) return s.errors = [{ instancePath: a5, schemaPath: "#/required", keyword: "required", params: { missingProperty: i5 }, message: "must have required property '" + i5 + "'" }], false;
+    {
+      let y3 = r2;
+      for (let t8 in e4) if (!(t8 === "sourceDay" || t8 === "text")) {
+        return s.errors = [{ instancePath: a5, schemaPath: "#/additionalProperties", keyword: "additionalProperties", params: { additionalProperty: t8 }, message: "must NOT have additional properties" }], false;
+        break;
+      }
+      if (y3 === r2) {
+        if (e4.sourceDay !== void 0) {
+          let t8 = e4.sourceDay, p6 = r2;
+          if (r2 === p6 && r2 === p6) if (typeof t8 == "string") {
+            if (!t3.validate(t8)) return s.errors = [{ instancePath: a5 + "/sourceDay", schemaPath: "#/properties/sourceDay/format", keyword: "format", params: { format: "date" }, message: 'must match format "date"' }], false;
+          } else return s.errors = [{ instancePath: a5 + "/sourceDay", schemaPath: "#/properties/sourceDay/type", keyword: "type", params: { type: "string" }, message: "must be string" }], false;
+          var o11 = p6 === r2;
+        } else var o11 = true;
+        if (o11) if (e4.text !== void 0) {
+          let t8 = r2;
+          if (typeof e4.text != "string") return s.errors = [{ instancePath: a5 + "/text", schemaPath: "#/properties/text/type", keyword: "type", params: { type: "string" }, message: "must be string" }], false;
+          var o11 = t8 === r2;
+        } else var o11 = true;
+      }
+    }
+  } else return s.errors = [{ instancePath: a5, schemaPath: "#/type", keyword: "type", params: { type: "object" }, message: "must be object" }], false;
+  return s.errors = m6, r2 === 0;
+}
+
+// ../../packages/contracts/src/generated/validators/shared/VSRNQHIL.js
+var e = U().fullFormats["date-time"];
+
+// ../../packages/contracts/src/generated/validators/shared/CA7CC2WJ.js
+var a2 = /^(?:urn:uuid:)?[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i;
+
+// ../../packages/contracts/src/generated/validators/getV1Projects200.js
+var D = { description: "A listed project with its time totals. totalSeconds counts every non-voided entry, including approved agent work; agentSeconds is the agent share of that total.", properties: { agentSeconds: { minimum: 0, type: "integer" }, archivedAt: { format: "date-time", nullable: true, type: "string" }, category: { type: "string" }, color: { type: "string" }, completedAt: { format: "date-time", nullable: true, type: "string" }, createdAt: { format: "date-time", type: "string" }, description: { nullable: true, type: "string" }, details: { description: "Private details for lastOutcome, or an empty array when no outcome exists.", items: { type: "string" }, type: "array" }, estimatedHours: { nullable: true, type: "integer" }, icon: { type: "string" }, id: { format: "uuid", type: "string" }, lastActiveDay: { format: "date", nullable: true, type: "string" }, lastOutcome: { nullable: true, type: "string" }, launchDescription: { nullable: true, type: "string" }, launchUrl: { nullable: true, type: "string" }, launchedAt: { format: "date-time", nullable: true, type: "string" }, name: { type: "string" }, nextStep: { anyOf: [{ $ref: "urn:flowmind:schema:ProjectNextStep" }, { enum: [null], nullable: true, type: "object" }] }, totalSeconds: { minimum: 0, type: "integer" }, updatedAt: { format: "date-time", type: "string" } }, required: ["id", "name", "description", "color", "icon", "category", "estimatedHours", "launchedAt", "completedAt", "launchDescription", "launchUrl", "createdAt", "updatedAt", "archivedAt", "nextStep", "lastOutcome", "details", "lastActiveDay", "totalSeconds", "agentSeconds"], type: "object" };
+function n(t8, { instancePath: i5 = "", parentData: w3, parentDataProperty: k3, rootData: d5 = t8 } = {}) {
+  let o11 = null, r2 = 0;
+  if (r2 === 0) if (t8 && typeof t8 == "object" && !Array.isArray(t8)) {
     let l4;
     if (t8.id === void 0 && (l4 = "id") || t8.name === void 0 && (l4 = "name") || t8.description === void 0 && (l4 = "description") || t8.color === void 0 && (l4 = "color") || t8.icon === void 0 && (l4 = "icon") || t8.category === void 0 && (l4 = "category") || t8.estimatedHours === void 0 && (l4 = "estimatedHours") || t8.launchedAt === void 0 && (l4 = "launchedAt") || t8.completedAt === void 0 && (l4 = "completedAt") || t8.launchDescription === void 0 && (l4 = "launchDescription") || t8.launchUrl === void 0 && (l4 = "launchUrl") || t8.createdAt === void 0 && (l4 = "createdAt") || t8.updatedAt === void 0 && (l4 = "updatedAt") || t8.archivedAt === void 0 && (l4 = "archivedAt") || t8.nextStep === void 0 && (l4 = "nextStep") || t8.lastOutcome === void 0 && (l4 = "lastOutcome") || t8.details === void 0 && (l4 = "details") || t8.lastActiveDay === void 0 && (l4 = "lastActiveDay") || t8.totalSeconds === void 0 && (l4 = "totalSeconds") || t8.agentSeconds === void 0 && (l4 = "agentSeconds")) return n.errors = [{ instancePath: i5, schemaPath: "#/required", keyword: "required", params: { missingProperty: l4 }, message: "must have required property '" + l4 + "'" }], false;
     if (t8.agentSeconds !== void 0) {
@@ -3268,1165 +3700,925 @@ function h7(r2, { instancePath: s7 = "", parentData: P4, parentDataProperty: w3,
   let p6 = null, e4 = 0, a5 = e4;
   i(r2, { instancePath: s7, parentData: P4, parentDataProperty: w3, rootData: g }) || (p6 = p6 === null ? i.errors : p6.concat(i.errors), e4 = p6.length);
   var f3 = a5 === e4;
-  if (f3) {
-    let l4 = e4;
-    if (e4 === l4) if (r2 && typeof r2 == "object" && !Array.isArray(r2)) {
-      let m6;
-      if (r2.data === void 0 && (m6 = "data")) return h7.errors = [{ instancePath: s7, schemaPath: "#/allOf/1/required", keyword: "required", params: { missingProperty: m6 }, message: "must have required property '" + m6 + "'" }], false;
-      r2.data !== void 0 && (u3(r2.data, { instancePath: s7 + "/data", parentData: r2, parentDataProperty: "data", rootData: g }) || (p6 = p6 === null ? u3.errors : p6.concat(u3.errors), e4 = p6.length));
-    } else return h7.errors = [{ instancePath: s7, schemaPath: "#/allOf/1/type", keyword: "type", params: { type: "object" }, message: "must be object" }], false;
-    var f3 = l4 === e4;
-  }
-  return h7.errors = p6, e4 === 0;
-}
-var C = h7;
-
-// ../../packages/contracts/src/generated/endpoints/getV1HourBank.ts
-var getV1HourBank = {
-  method: "GET",
-  path: "/v1/hour-bank/",
-  operation: "GET /v1/hour-bank/",
-  revision: contractRevision,
-  responses: {
-    200: { mediaType: "application/json", schemaId: "urn:flowmind:getV1HourBank:200", validate: C }
-  },
-  error: { mediaType: "application/json", schemaId: "ApiErrorEnvelope", validate: N }
-};
-
-// src/contracts.ts
-var STAGE_TIMEOUT_MS = 3e4;
-var projectStatus = (project) => {
-  if (project.archivedAt) return "archived";
-  if (project.completedAt) return "completed";
-  if (project.launchedAt) return "launched";
-  return "active";
-};
-var listProjects = async (request = apiRequest) => {
-  const data = await request(getV1Projects, {});
-  return data.projects;
-};
-var getAgentCapabilities = (request = apiRequest) => request(getV1AgentCapabilities, {});
-var listAgentProjects = async (request = apiRequest) => {
-  const data = await request(getV1AgentProjects, {});
-  return data.projects;
-};
-var listAgentRoutines = async (request = apiRequest) => {
-  const data = await request(getV1AgentRoutines, {});
-  return data.routines;
-};
-var withIdempotencyKey = (idempotencyKey) => ({
-  headers: { "Idempotency-Key": idempotencyKey }
-});
-var createAgentLogProposal = async (input2, idempotencyKey, request = apiRequest) => {
-  const data = await request(
-    postV1AgentLogProposals,
-    { body: input2 },
-    { ...withIdempotencyKey(idempotencyKey), preserveRejectionMessage: true, signal: AbortSignal.timeout(STAGE_TIMEOUT_MS) }
-  );
-  return data.proposal;
-};
-var listAgentLogProposals = async (status, request = apiRequest) => {
-  const data = await request(getV1AgentLogProposals, { query: { status } });
-  return data.proposals;
-};
-var cancelAgentLogProposal = async (proposalId, idempotencyKey, request = apiRequest) => {
-  const data = await request(
-    postV1AgentLogProposalsByProposalIdCancel,
-    { params: { proposalId } },
-    withIdempotencyKey(idempotencyKey)
-  );
-  return data.proposal;
-};
-var parseNaturalLog = (message, request = apiRequest) => request(postV1AiLog, { body: { message } });
-var confirmNaturalLog = async (input2, idempotencyKey, request = apiRequest) => {
-  return request(postV1AiLogConfirm, { body: input2 }, withIdempotencyKey(idempotencyKey));
-};
-var durationMinutesFromHours = (hours) => {
-  const minutes = hours * 60;
-  if (!Number.isSafeInteger(Math.round(minutes)) || Math.round(minutes) / 60 !== hours) {
-    throw new Error("Hours must resolve to whole minutes.");
-  }
-  return Math.round(minutes);
-};
-var resolveActiveProjectByName = (projects, projectName) => {
-  const matches = projects.filter((project) => project.name === projectName && project.archivedAt === null);
-  if (matches.length === 0) {
-    throw new Error(`No active project named "${projectName}"`);
-  }
-  if (matches.length > 1) {
-    throw new Error(`Multiple active projects named "${projectName}". Use Flowmind web to disambiguate before logging.`);
-  }
-  return matches[0];
-};
-var createStructuredTimeEntry = async (input2, request = apiRequest) => {
-  const durationMinutes = durationMinutesFromHours(input2.hours);
-  const now = input2.now ?? /* @__PURE__ */ new Date();
-  let start = new Date(now.getTime() - durationMinutes * 6e4);
-  if (input2.startedAt !== void 0) {
-    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(?::\d{2}(?:\.\d{1,3})?)?(?:Z|[+-]\d{2}:\d{2})$/.test(input2.startedAt)) {
-      throw new Error("started-at must be a valid ISO date-time with a timezone.");
-    }
-    const calendarDay = /* @__PURE__ */ new Date(`${input2.startedAt.slice(0, 10)}T00:00:00.000Z`);
-    if (Number.isNaN(calendarDay.getTime()) || calendarDay.toISOString().slice(0, 10) !== input2.startedAt.slice(0, 10)) {
-      throw new Error("started-at must be a valid ISO date-time.");
-    }
-    start = new Date(input2.startedAt);
-    if (Number.isNaN(start.getTime())) throw new Error("started-at must be a valid ISO date-time.");
-  }
-  if (start.getTime() + durationMinutes * 6e4 > now.getTime()) {
-    throw new Error("Logged work cannot end in the future");
-  }
-  const prepare = async () => {
-    const project = resolveActiveProjectByName(await listProjects(request), input2.projectName);
-    return {
-      projectId: project.id,
-      startedAt: input2.startedAt === void 0 ? new Date((input2.now ?? /* @__PURE__ */ new Date()).getTime() - durationMinutes * 6e4).toISOString() : start.toISOString(),
-      durationMinutes,
-      ...input2.nextStep !== void 0 ? { nextStep: input2.nextStep } : {},
-      ...input2.description !== void 0 ? { description: input2.description } : {},
-      ...input2.note !== void 0 ? { note: input2.note } : {},
-      ...input2.artifactUrl !== void 0 ? { artifactUrl: input2.artifactUrl } : {}
-    };
-  };
-  return manualSave(["structured", input2], prepare, (body, key) => request(postV1TimeEntries, { body }, { headers: { [IDEMPOTENCY_KEY_HEADER]: key } }));
-};
-var getStatusSnapshot = async (request = apiRequest) => {
-  const [publicStats, streak, xp] = await Promise.all([
-    request(getV1MePublicStats, {}),
-    request(getV1MeStreak, {}),
-    request(getV1XpSummary, {})
-  ]);
-  return { publicStats, streak, xp };
-};
-var getDetailedStats = async (request = apiRequest) => {
-  const [status, badges, hourBank] = await Promise.all([
-    getStatusSnapshot(request),
-    request(getV1MeBadges, {}),
-    request(getV1HourBank, {})
-  ]);
-  return { ...status, badges, hourBank };
-};
-
-// src/project-ref.ts
-async function resolveAgentProject(reference) {
-  const wanted = reference.trim();
-  const projects = await listAgentProjects();
-  const matches = isProjectId(wanted) ? projects.filter((project) => project.id.toLowerCase() === wanted.toLowerCase()) : projects.filter((project) => project.name.toLowerCase() === wanted.toLowerCase());
-  if (matches.length === 1) return matches[0];
-  const list = (matches.length > 1 ? matches : projects).map((project) => `  ${terminalText(project.name)} (${project.id})`).join("\n");
-  if (matches.length > 1) {
-    throw new Error(`Several projects are named "${terminalText(wanted)}". Use a project id:
-${list}`);
-  }
-  throw new Error(
-    `No active project matches "${terminalText(wanted)}".` + (list ? `
-Active projects:
-${list}` : " No active projects exist.")
-  );
-}
-
-// src/repository-status.ts
-import { execFile } from "node:child_process";
-var GIT_TIMEOUT_MS = 3e3;
-function git(root, args, absentCode) {
-  return new Promise((resolve3, reject) => {
-    execFile(
-      "git",
-      args,
-      {
-        cwd: root,
-        encoding: "utf8",
-        timeout: GIT_TIMEOUT_MS,
-        windowsHide: true,
-        env: { ...process.env, GIT_OPTIONAL_LOCKS: "0", GIT_TERMINAL_PROMPT: "0" }
-      },
-      (error, stdout) => {
-        if (!error) resolve3(stdout);
-        else if (!error.killed && absentCode !== void 0 && error.code === absentCode) resolve3(null);
-        else reject(new Error("Git lookup failed (" + args[0] + "): " + (error.killed ? "timed out" : error.code)));
-      }
-    );
-  });
-}
-async function readRemoteLink(root) {
-  const branch = (await git(root, ["symbolic-ref", "--quiet", "HEAD"], 1))?.trim();
-  const upstream = branch ? (await git(root, ["for-each-ref", "--format=%(upstream)", branch]))?.trim() : null;
-  const refs = [
-    ...upstream?.startsWith("refs/remotes/") ? [upstream] : [],
-    "refs/remotes/origin/HEAD",
-    "refs/remotes/origin/main",
-    "refs/remotes/origin/master"
-  ];
-  for (const ref of new Set(refs)) {
-    if (await git(root, ["rev-parse", "--verify", "--quiet", ref], 1) === null) continue;
-    if (!(await git(root, ["ls-tree", "--name-only", ref, "--", LINK_FILE]))?.trim()) continue;
-    const text2 = await git(root, ["show", `${ref}:${LINK_FILE}`]);
-    return { ref, link: parseLink(text2, `${ref}:${LINK_FILE}`, root) };
-  }
-  return null;
-}
-async function remoteStatus(root) {
-  const remote = await readRemoteLink(root);
-  if (remote?.link.kind === "linked") return { status: "remote-linked", root, link: remote.link, ref: remote.ref };
-  if (remote?.link.kind === "ignored") return { status: "ignored", root, link: remote.link };
-  return { status: "unlinked", root };
-}
-async function repositoryStatus(cwd) {
-  const local = await readLink(cwd);
-  if (local?.kind === "linked") return { status: "linked", root: local.root, link: local };
-  if (local?.kind === "ignored") return { status: "ignored", root: local.root, link: local };
-  const root = await findGitRoot(cwd);
-  return root === null ? { status: "outside-git" } : remoteStatus(root);
-}
-async function originUrl(root) {
-  const url = (await git(root, ["config", "--get", "remote.origin.url"], 1))?.trim();
-  if (!url) return null;
-  let parsed;
-  try {
-    parsed = new URL(url);
-  } catch {
-    return url;
-  }
-  if (!parsed.username && !parsed.password) return url;
-  parsed.username = "";
-  parsed.password = "";
-  return parsed.toString();
-}
-
-// src/agent-session.ts
-var RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
-var ACTIVE_WINDOW_MS = 2 * 24 * 60 * 60 * 1e3;
-var REMINDER_MINUTES = 20;
-var OPEN_TURN_LIMIT_MS = 12 * 60 * 60 * 1e3;
-var MISSED_START_MS = 15e3;
-var CLOCK_DRIFT_MS = 1e3;
-var EVENTS = /* @__PURE__ */ new Set(["session", "start", "stop", "subagent", "staged", "unlinked-reminder"]);
-var sessionsDir = () => join6(accountDirectory(), "agent-sessions");
-var periodPoint = (p6) => ({ wall: Date.parse(p6.at), up: p6.up });
-var signedInPeriods = () => ownershipPeriods().map(({ start, end }) => ({
-  start: periodPoint(start),
-  end: end && periodPoint(end)
-}));
-function sessionFile(sessionId) {
-  const name = /^[A-Za-z0-9_-][A-Za-z0-9._-]{0,127}$/.test(sessionId) ? sessionId : createHash3("sha256").update(sessionId).digest("hex");
-  return join6(sessionsDir(), `${name}.jsonl`);
-}
-async function append(sessionId, event) {
-  await mkdir3(sessionsDir(), { recursive: true });
-  await appendFile(sessionFile(sessionId), `${JSON.stringify(event)}
-`, { encoding: "utf8", mode: 384 });
-}
-var byTime = (events) => events.sort((a5, b4) => Date.parse(a5.at) - Date.parse(b4.at));
-function parseEvent(line, path) {
-  const value = JSON.parse(line);
-  if (typeof value === "object" && value !== null) {
-    const { event, at: at2, up, cutAt, cutUp } = value;
-    if (typeof event === "string" && EVENTS.has(event) && typeof at2 === "string" && !Number.isNaN(Date.parse(at2)) && (up === void 0 || Number.isFinite(up)) && (cutAt === void 0 || typeof cutAt === "string" && !Number.isNaN(Date.parse(cutAt))) && (cutUp === void 0 || Number.isFinite(cutUp))) {
-      if (event === "staged") {
-        const mark = value;
-        if (typeof cutAt !== "string" || typeof mark.pendingStageId !== "string" || !(mark.state === "waiting" || mark.state === "accepted" && typeof mark.proposalId === "string" || (mark.state === "rejected" || mark.state === "conflict" || mark.state === "discarded") && typeof mark.reason === "string")) throw new Error("Unreadable stage mark in " + path);
-      }
-      return value;
-    }
+  if (f3) {
+    let l4 = e4;
+    if (e4 === l4) if (r2 && typeof r2 == "object" && !Array.isArray(r2)) {
+      let m6;
+      if (r2.data === void 0 && (m6 = "data")) return h7.errors = [{ instancePath: s7, schemaPath: "#/allOf/1/required", keyword: "required", params: { missingProperty: m6 }, message: "must have required property '" + m6 + "'" }], false;
+      r2.data !== void 0 && (u3(r2.data, { instancePath: s7 + "/data", parentData: r2, parentDataProperty: "data", rootData: g }) || (p6 = p6 === null ? u3.errors : p6.concat(u3.errors), e4 = p6.length));
+    } else return h7.errors = [{ instancePath: s7, schemaPath: "#/allOf/1/type", keyword: "type", params: { type: "object" }, message: "must be object" }], false;
+    var f3 = l4 === e4;
   }
-  throw new Error(`Unreadable agent session record in ${path}`);
+  return h7.errors = p6, e4 === 0;
 }
-async function readEventsAt(path) {
-  let text2;
-  try {
-    text2 = await readFile4(path, "utf8");
-  } catch (error) {
-    if (error.code === "ENOENT") return null;
-    throw error;
-  }
-  return byTime(
-    text2.split("\n").filter((line) => line.trim() !== "").map((line) => parseEvent(line, path))
+var C = h7;
+
+// ../../packages/contracts/src/generated/endpoints/getV1HourBank.ts
+var getV1HourBank = {
+  method: "GET",
+  path: "/v1/hour-bank/",
+  operation: "GET /v1/hour-bank/",
+  revision: contractRevision,
+  responses: {
+    200: { mediaType: "application/json", schemaId: "urn:flowmind:getV1HourBank:200", validate: C }
+  },
+  error: { mediaType: "application/json", schemaId: "ApiErrorEnvelope", validate: N }
+};
+
+// src/contracts.ts
+var STAGE_TIMEOUT_MS = 3e4;
+var projectStatus = (project) => {
+  if (project.archivedAt) return "archived";
+  if (project.completedAt) return "completed";
+  if (project.launchedAt) return "launched";
+  return "active";
+};
+var listProjects = async (request = apiRequest) => {
+  const data = await request(getV1Projects, {});
+  return data.projects;
+};
+var getAgentCapabilities = (request = apiRequest) => request(getV1AgentCapabilities, {});
+var listAgentProjects = async (request = apiRequest) => {
+  const data = await request(getV1AgentProjects, {});
+  return data.projects;
+};
+var listAgentRoutines = async (request = apiRequest) => {
+  const data = await request(getV1AgentRoutines, {});
+  return data.routines;
+};
+var withIdempotencyKey = (idempotencyKey) => ({
+  headers: { "Idempotency-Key": idempotencyKey }
+});
+var createAgentLogProposal = async (input2, idempotencyKey, request = apiRequest) => {
+  const data = await request(
+    postV1AgentLogProposals,
+    { body: input2 },
+    { ...withIdempotencyKey(idempotencyKey), preserveRejectionMessage: true, signal: AbortSignal.timeout(STAGE_TIMEOUT_MS) }
   );
-}
-function parseHookInput(raw) {
-  const value = JSON.parse(raw);
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    throw new Error("Hook input must be a JSON object.");
-  }
-  const {
-    session_id: sessionId,
-    hook_event_name: event,
-    cwd,
-    turn_id: turnId,
-    agent_id: agentId,
-    transcript_path: transcriptPath
-  } = value;
-  if (typeof sessionId !== "string" || sessionId === "") throw new Error("Hook input needs a session_id string.");
-  if (typeof event !== "string") throw new Error("Hook input needs a hook_event_name string.");
-  if (typeof cwd !== "string") throw new Error("Hook input needs a cwd string.");
-  if (turnId !== void 0 && turnId !== null && typeof turnId !== "string") {
-    throw new Error("Hook input turn_id must be a string when present.");
-  }
-  if (agentId !== void 0 && agentId !== null && typeof agentId !== "string") {
-    throw new Error("Hook input agent_id must be a string when present.");
-  }
-  if (transcriptPath !== void 0 && transcriptPath !== null && typeof transcriptPath !== "string") {
-    throw new Error("Hook input transcript_path must be a string when present.");
+  return data.proposal;
+};
+var listAgentLogProposals = async (status, request = apiRequest) => {
+  const data = await request(getV1AgentLogProposals, { query: { status } });
+  return data.proposals;
+};
+var cancelAgentLogProposal = async (proposalId, idempotencyKey, request = apiRequest) => {
+  const data = await request(
+    postV1AgentLogProposalsByProposalIdCancel,
+    { params: { proposalId } },
+    withIdempotencyKey(idempotencyKey)
+  );
+  return data.proposal;
+};
+var parseNaturalLog = (message, request = apiRequest) => request(postV1AiLog, { body: { message } });
+var confirmNaturalLog = async (input2, idempotencyKey, request = apiRequest) => {
+  return request(postV1AiLogConfirm, { body: input2 }, withIdempotencyKey(idempotencyKey));
+};
+var durationMinutesFromHours = (hours) => {
+  const minutes = hours * 60;
+  if (!Number.isSafeInteger(Math.round(minutes)) || Math.round(minutes) / 60 !== hours) {
+    throw new Error("Hours must resolve to whole minutes.");
   }
-  return {
-    sessionId,
-    event,
-    cwd,
-    turnId: typeof turnId === "string" ? turnId : null,
-    agentId: typeof agentId === "string" && agentId !== "" ? agentId : null,
-    transcriptPath: typeof transcriptPath === "string" && transcriptPath !== "" ? transcriptPath : null
-  };
-}
-var proofRule = `Write the outcome as one line of at most ${AGENT_OUTCOME_MAX_LENGTH} characters: what changed. Add up to ${AGENT_DETAILS_MAX_COUNT} optional details for proof or open items, each one line of at most ${AGENT_DETAIL_MAX_LENGTH} characters.`;
-function sessionContext(projectName) {
-  return [
-    `Flowmind: this repository is linked to the Flowmind project "${terminalText(projectName)}".`,
-    "When you finish a material unit of work here, stage it before you start the next one, with",
-    '`flowmind agent stage --intention "<goal>" --outcome "<what changed>" --detail "<proof or open item>" --json`,',
-    "adding `--artifact-url <commit, PR, or document URL>` when one exists.",
-    proofRule,
-    "When several units finish together, stage them as one proof.",
-    "The CLI fills in the project and the recorded session time, including the time of your subagents.",
-    "Subagents do not stage. Share the returned review URL with the user.",
-    "Do not use `flowmind log` for agent work."
-  ].join(" ");
-}
-function unstagedReminder(projectName, minutes) {
-  return [
-    `Flowmind: ${minutes} minutes of agent work in this session are not staged yet for "${terminalText(projectName)}".`,
-    "When the current unit of work is complete, stage it with",
-    '`flowmind agent stage --intention "<goal>" --outcome "<what changed>" --detail "<proof or open item>" --json`',
-    "and share the review URL.",
-    proofRule
-  ].join(" ");
-}
-var projectLabel = (link2) => `"${terminalText(link2.name)}" (${link2.projectId})`;
-function remoteLinkedContext(link2) {
-  return [
-    `Flowmind: the remote already links this repository to the Flowmind project ${projectLabel(link2)},`,
-    "but this checkout has no .flowmind.json yet.",
-    "Run `git pull` to get .flowmind.json. Never create a new Flowmind project for this repository.",
-    'After the pull, stage finished work with `flowmind agent stage --intention "<goal>" --outcome "<what changed>" --detail "<proof or open item>" --json`.',
-    proofRule
-  ].join(" ");
-}
-function unlinkedContext() {
-  return [
-    "Flowmind: this git repository is not linked to a Flowmind project.",
-    "If it is a project the user works on, link it before you finish:",
-    "1. Run `git pull` first. Another machine may have linked it already.",
-    "2. Look for the existing project with `flowmind projects --json`. One product is one project on every machine; match by product, repository and name.",
-    '3. Only for a new product, create one with `flowmind projects add "<name>" --description "<one line>" --json`.',
-    "4. Run `flowmind link <project-id>` and commit .flowmind.json.",
-    "For a third-party clone or a scratch folder, run `flowmind link --ignore`. Ask the user once when you are unsure."
-  ].join("\n");
-}
-function remoteLinkedReminder(link2, minutes) {
-  return [
-    `Flowmind: ${minutes} minutes of agent work, and this checkout still has no .flowmind.json.`,
-    `The remote links this repository to ${projectLabel(link2)}. Run \`git pull\`; never create a new project for it.`
-  ].join(" ");
-}
-function unlinkedReminder(minutes) {
-  return [
-    `Flowmind: ${minutes} minutes of agent work, and this repository is still not linked to a Flowmind project.`,
-    "Before you finish: run `git pull`, find the project with `flowmind projects --json`",
-    "(create one with `flowmind projects add` only for a new product), run `flowmind link <project-id>`, and commit .flowmind.json.",
-    "For a third-party clone or a scratch folder, run `flowmind link --ignore`."
-  ].join(" ");
-}
-async function pruneOldSessions(now) {
-  let names;
-  try {
-    names = await readdir4(sessionsDir());
-  } catch (error) {
-    if (error.code === "ENOENT") return;
-    throw error;
+  return Math.round(minutes);
+};
+var resolveActiveProjectByName = (projects, projectName) => {
+  const matches = projects.filter((project) => project.name === projectName && project.archivedAt === null);
+  if (matches.length === 0) {
+    throw new Error(`No active project named "${projectName}"`);
   }
-  for (const name of names.filter((entry) => entry.endsWith(".jsonl"))) {
-    const path = join6(sessionsDir(), name);
-    if (now.getTime() - (await stat2(path)).mtimeMs > RETENTION_MS) await rm(path, { force: true });
+  if (matches.length > 1) {
+    throw new Error(`Multiple active projects named "${projectName}". Use Flowmind web to disambiguate before logging.`);
   }
-}
-async function handleHook(agent, raw, now = currentMoment()) {
-  const input2 = parseHookInput(raw);
-  const at2 = now.at.toISOString();
-  const { up } = now;
-  const subagent = input2.agentId;
-  switch (input2.event) {
-    case "SessionStart": {
-      if (subagent !== null) return "";
-      await append(input2.sessionId, {
-        event: "session",
-        at: at2,
-        up,
-        sessionId: input2.sessionId,
-        agent,
-        cwd: input2.cwd,
-        ...input2.transcriptPath === null ? {} : { transcriptPath: input2.transcriptPath }
-      });
-      await pruneOldSessions(now.at);
-      const repository = await repositoryStatus(input2.cwd);
-      switch (repository.status) {
-        case "linked":
-          return sessionContext(repository.link.name);
-        case "remote-linked":
-          return remoteLinkedContext(repository.link);
-        case "unlinked":
-          return unlinkedContext();
-        case "ignored":
-        case "outside-git":
-          return "";
-      }
+  return matches[0];
+};
+var createStructuredTimeEntry = async (input2, request = apiRequest) => {
+  const durationMinutes = durationMinutesFromHours(input2.hours);
+  const now = input2.now ?? /* @__PURE__ */ new Date();
+  let start = new Date(now.getTime() - durationMinutes * 6e4);
+  if (input2.startedAt !== void 0) {
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(?::\d{2}(?:\.\d{1,3})?)?(?:Z|[+-]\d{2}:\d{2})$/.test(input2.startedAt)) {
+      throw new Error("started-at must be a valid ISO date-time with a timezone.");
     }
-    case "UserPromptSubmit":
-      if (subagent !== null) {
-        await append(input2.sessionId, { event: "subagent", at: at2, up, agentId: subagent, turnId: input2.turnId });
-        return "";
-      }
-      await append(input2.sessionId, {
-        event: "start",
-        at: at2,
-        up,
-        sessionId: input2.sessionId,
-        agent,
-        cwd: input2.cwd,
-        turnId: input2.turnId
-      });
-      return promptReminder(input2.sessionId, input2.cwd, now);
-    case "Stop":
-    case "Interrupt":
-      if (subagent !== null) return "";
-      await append(input2.sessionId, { event: "stop", at: at2, up, turnId: input2.turnId });
-      if (agent === "codex" && input2.turnId !== null) await addMissedTurnStart(input2, now);
-      return "";
-    default:
-      throw new Error(`Unsupported hook event: ${input2.event}`);
+    const calendarDay = /* @__PURE__ */ new Date(`${input2.startedAt.slice(0, 10)}T00:00:00.000Z`);
+    if (Number.isNaN(calendarDay.getTime()) || calendarDay.toISOString().slice(0, 10) !== input2.startedAt.slice(0, 10)) {
+      throw new Error("started-at must be a valid ISO date-time.");
+    }
+    start = new Date(input2.startedAt);
+    if (Number.isNaN(start.getTime())) throw new Error("started-at must be a valid ISO date-time.");
   }
-}
-function turnIdTime(turnId) {
-  const hex = turnId.replaceAll("-", "");
-  if (!/^[0-9a-f]{32}$/i.test(hex) || hex[12] !== "7") return null;
-  return Number.parseInt(hex.slice(0, 12), 16);
-}
-var firstRecordedStart = (events, turnId) => {
-  const first = events.find((event) => event.event === "start" && event.turnId === turnId);
-  return first ? Date.parse(first.at) : null;
+  if (start.getTime() + durationMinutes * 6e4 > now.getTime()) {
+    throw new Error("Logged work cannot end in the future");
+  }
+  const prepare = async () => {
+    const project = resolveActiveProjectByName(await listProjects(request), input2.projectName);
+    return {
+      projectId: project.id,
+      startedAt: input2.startedAt === void 0 ? new Date((input2.now ?? /* @__PURE__ */ new Date()).getTime() - durationMinutes * 6e4).toISOString() : start.toISOString(),
+      durationMinutes,
+      ...input2.nextStep !== void 0 ? { nextStep: input2.nextStep } : {},
+      ...input2.description !== void 0 ? { description: input2.description } : {},
+      ...input2.note !== void 0 ? { note: input2.note } : {},
+      ...input2.artifactUrl !== void 0 ? { artifactUrl: input2.artifactUrl } : {}
+    };
+  };
+  return manualSave(["structured", input2], prepare, (body, key) => request(postV1TimeEntries, { body }, { headers: { [IDEMPOTENCY_KEY_HEADER]: key } }));
 };
-function hooksSawStart(events, turnId) {
-  const first = firstRecordedStart(events, turnId);
-  const created = turnIdTime(turnId);
-  return first !== null && created !== null && first - created <= MISSED_START_MS;
-}
-var transcriptPathOf = (events) => events.filter((event) => event.event === "session").filter((event) => event.transcriptPath !== void 0).at(-1)?.transcriptPath ?? null;
-async function codexTurnsOf(sessionId, knownPath) {
-  const known = knownPath === null ? null : await readCodexTurns(knownPath);
-  if (known !== null) return { path: knownPath, turns: known };
-  const found = await findCodexSessionFile(sessionId);
-  const turns = found === null ? null : await readCodexTurns(found);
-  return turns === null ? null : { path: found, turns };
-}
-function countBack(wall, events, now, lastWake) {
-  const nowWall = now.at.getTime();
-  if (wall > nowWall) return null;
-  const back = { wall, up: now.up - (nowWall - wall) };
-  if (lastWake !== null && lastWake <= nowWall) return lastWake <= wall ? back : null;
-  const before = awakeSamples(events).filter((point) => point.wall <= wall).at(-1);
-  return before && Math.abs(nowWall - now.up - (before.wall - before.up)) <= CLOCK_DRIFT_MS ? back : null;
+var getStatusSnapshot = async (request = apiRequest) => {
+  const [publicStats, streak, xp] = await Promise.all([
+    request(getV1MePublicStats, {}),
+    request(getV1MeStreak, {}),
+    request(getV1XpSummary, {})
+  ]);
+  return { publicStats, streak, xp };
+};
+var getDetailedStats = async (request = apiRequest) => {
+  const [status, badges, hourBank] = await Promise.all([
+    getStatusSnapshot(request),
+    request(getV1MeBadges, {}),
+    request(getV1HourBank, {})
+  ]);
+  return { ...status, badges, hourBank };
+};
+
+// src/project-ref.ts
+async function resolveAgentProject(reference) {
+  const wanted = reference.trim();
+  const projects = await listAgentProjects();
+  const matches = isProjectId(wanted) ? projects.filter((project) => project.id.toLowerCase() === wanted.toLowerCase()) : projects.filter((project) => project.name.toLowerCase() === wanted.toLowerCase());
+  if (matches.length === 1) return matches[0];
+  const list = (matches.length > 1 ? matches : projects).map((project) => `  ${terminalText(project.name)} (${project.id})`).join("\n");
+  if (matches.length > 1) {
+    throw new Error(`Several projects are named "${terminalText(wanted)}". Use a project id:
+${list}`);
+  }
+  throw new Error(
+    `No active project matches "${terminalText(wanted)}".` + (list ? `
+Active projects:
+${list}` : " No active projects exist.")
+  );
 }
-var awakeSamples = (events) => events.flatMap((event) => event.event !== "unlinked-reminder" && event.up !== void 0 ? [pointOf(event.at, event.up)] : []);
-function awakePointAt(wall, events, now, lastWake) {
-  const exact = countBack(wall, events, now, lastWake);
-  if (exact) return exact;
-  const nowWall = now.at.getTime();
-  if (lastWake !== null && lastWake <= nowWall) return countBack(lastWake, events, now, lastWake);
-  return awakeSamples(events).find((point) => point.wall > wall && point.wall < nowWall) ?? null;
+
+// src/repository-status.ts
+import { execFile } from "node:child_process";
+var GIT_TIMEOUT_MS = 3e3;
+function git(root, args, absentCode) {
+  return new Promise((resolve3, reject) => {
+    execFile(
+      "git",
+      args,
+      {
+        cwd: root,
+        encoding: "utf8",
+        timeout: GIT_TIMEOUT_MS,
+        windowsHide: true,
+        env: { ...process.env, GIT_OPTIONAL_LOCKS: "0", GIT_TERMINAL_PROMPT: "0" }
+      },
+      (error, stdout) => {
+        if (!error) resolve3(stdout);
+        else if (!error.killed && absentCode !== void 0 && error.code === absentCode) resolve3(null);
+        else reject(new Error("Git lookup failed (" + args[0] + "): " + (error.killed ? "timed out" : error.code)));
+      }
+    );
+  });
 }
-function missedStartEvent(events, turn, owner, now, lastWake) {
-  const first = firstRecordedStart(events, turn.turnId);
-  if (first !== null && first - turn.startedAt <= MISSED_START_MS) return null;
-  const point = awakePointAt(turn.startedAt, events, now, lastWake);
-  if (point === null) return null;
-  return {
-    event: "start",
-    at: new Date(point.wall).toISOString(),
-    ...point.up === null ? {} : { up: point.up },
-    sessionId: owner.sessionId,
-    agent: "codex",
-    cwd: owner.cwd,
-    turnId: turn.turnId,
-    source: "session-file"
-  };
+async function readRemoteLink(root) {
+  const branch = (await git(root, ["symbolic-ref", "--quiet", "HEAD"], 1))?.trim();
+  const upstream = branch ? (await git(root, ["for-each-ref", "--format=%(upstream)", branch]))?.trim() : null;
+  const refs = [
+    ...upstream?.startsWith("refs/remotes/") ? [upstream] : [],
+    "refs/remotes/origin/HEAD",
+    "refs/remotes/origin/main",
+    "refs/remotes/origin/master"
+  ];
+  for (const ref of new Set(refs)) {
+    if (await git(root, ["rev-parse", "--verify", "--quiet", ref], 1) === null) continue;
+    if (!(await git(root, ["ls-tree", "--name-only", ref, "--", LINK_FILE]))?.trim()) continue;
+    const text2 = await git(root, ["show", `${ref}:${LINK_FILE}`]);
+    return { ref, link: parseLink(text2, `${ref}:${LINK_FILE}`, root) };
+  }
+  return null;
 }
-async function addMissedTurnStart(input2, now) {
-  const turnId = input2.turnId;
-  const events = await readEventsAt(sessionFile(input2.sessionId)) ?? [];
-  if (hooksSawStart(events, turnId)) return;
-  const file = await codexTurnsOf(input2.sessionId, input2.transcriptPath ?? transcriptPathOf(events));
-  if (file === null) return;
-  const turn = file.turns.find((candidate) => candidate.turnId === turnId);
-  if (!turn) throw new Error(`The Codex session file ${file.path} has no start for turn ${turnId}.`);
-  const start = missedStartEvent(events, turn, input2, now, lastWakeMs());
-  if (start) await append(input2.sessionId, start);
+async function remoteStatus(root) {
+  const remote = await readRemoteLink(root);
+  if (remote?.link.kind === "linked") return { status: "remote-linked", root, link: remote.link, ref: remote.ref };
+  if (remote?.link.kind === "ignored") return { status: "ignored", root, link: remote.link };
+  return { status: "unlinked", root };
 }
-var pointOf = (at2, up) => ({ wall: Date.parse(at2), up: up ?? null });
-var cutOf = (event) => pointOf(event.cutAt, event.cutUp);
-function span(from, to) {
-  const wall = to.wall - from.wall;
-  if (wall <= 0 || from.up !== null && to.up !== null && to.up < from.up) return { from, to, ms: 0, awake: false };
-  const ms = from.up === null || to.up === null ? wall : Math.min(to.up - from.up, wall);
-  return { from, to, ms: ms > OPEN_TURN_LIMIT_MS ? 0 : ms, awake: from.up !== null && to.up !== null };
+async function repositoryStatus(cwd) {
+  const local = await readLink(cwd);
+  if (local?.kind === "linked") return { status: "linked", root: local.root, link: local };
+  if (local?.kind === "ignored") return { status: "ignored", root: local.root, link: local };
+  const root = await findGitRoot(cwd);
+  return root === null ? { status: "outside-git" } : remoteStatus(root);
 }
-var sameEpoch = (from, to) => from.up === null || to.up === null || to.up >= from.up;
-function supportedEdge(start, edge, end) {
-  const follows = (a5, b4) => a5.up !== null && b4.up !== null && b4.up >= a5.up && b4.up - a5.up <= b4.wall - a5.wall + CLOCK_DRIFT_MS;
-  return follows(start, edge) && follows(edge, end);
+async function originUrl(root) {
+  const url = (await git(root, ["config", "--get", "remote.origin.url"], 1))?.trim();
+  if (!url) return null;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return url;
+  }
+  if (!parsed.username && !parsed.password) return url;
+  parsed.username = "";
+  parsed.password = "";
+  return parsed.toString();
 }
-function ownedParts(start, end, cut, periods) {
-  if (end.wall <= start.wall || end.wall - start.wall > OPEN_TURN_LIMIT_MS || !sameEpoch(start, end)) return [];
-  return periods.flatMap((period) => {
-    if (period.start.wall >= end.wall || period.end && period.end.wall <= start.wall) return [];
-    let from = start, to = end;
-    if (period.start.wall > start.wall) {
-      if (!supportedEdge(start, period.start, end)) return [];
-      from = period.start;
-    }
-    if (period.end && period.end.wall < end.wall) {
-      if (!supportedEdge(start, period.end, end)) return [];
-      to = period.end;
-    }
-    if (cut && cut.wall > from.wall) from = cut;
-    const part = span(from, to);
-    return part.ms > 0 ? [part] : [];
-  });
+
+// src/agent-session.ts
+var RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
+var ACTIVE_WINDOW_MS = 2 * 24 * 60 * 60 * 1e3;
+var REMINDER_MINUTES = 20;
+var OPEN_TURN_LIMIT_MS = 12 * 60 * 60 * 1e3;
+var MISSED_START_MS = 15e3;
+var CLOCK_DRIFT_MS = 1e3;
+var EVENTS = /* @__PURE__ */ new Set(["session", "start", "stop", "subagent", "staged", "unlinked-reminder"]);
+var sessionsDir = () => join8(accountDirectory(), "agent-sessions");
+var periodPoint = (p6) => ({ wall: Date.parse(p6.at), up: p6.up });
+var signedInPeriods = () => ownershipPeriods().map(({ start, end }) => ({
+  start: periodPoint(start),
+  end: end && periodPoint(end)
+}));
+function sessionFile(sessionId) {
+  const name = /^[A-Za-z0-9_-][A-Za-z0-9._-]{0,127}$/.test(sessionId) ? sessionId : createHash4("sha256").update(sessionId).digest("hex");
+  return join8(sessionsDir(), `${name}.jsonl`);
 }
-function measureRecordedTime(events, now, periods) {
-  const first = events.find((event) => event.event === "session" || event.event === "start");
-  if (!first || first.event !== "session" && first.event !== "start") return null;
-  const nowPoint = { wall: now.at.getTime(), up: now.up };
-  const turns = [];
-  let open2 = null;
-  let unknownStarts = 0;
-  let lastStage = null;
-  for (const event of events) {
-    if (event.event === "session" || event.event === "unlinked-reminder") continue;
-    const point = pointOf(event.at, event.up);
-    switch (event.event) {
-      case "start":
-        if (event.turnId === null && (unknownStarts > 0 || open2 && open2.turnId === null)) {
-          unknownStarts = unknownStarts ? unknownStarts + 1 : 2;
-          open2 = null;
-          break;
-        }
-        if (open2 && open2.turnId !== null && open2.turnId === event.turnId) {
-          if (sameEpoch(open2.start, point)) open2.last = point;
-          break;
-        }
-        if (open2) turns.push({ start: open2.start, end: open2.last });
-        open2 = { start: point, last: point, turnId: event.turnId };
-        break;
-      case "stop": {
-        if (event.turnId === null && unknownStarts > 0) {
-          unknownStarts--;
-          break;
-        }
-        const matches = open2 !== null && event.turnId === open2.turnId;
-        if (open2 && matches) {
-          turns.push({ start: open2.start, end: sameEpoch(open2.start, point) ? point : open2.last });
-          open2 = null;
-        }
-        break;
+async function append(sessionId, event) {
+  await mkdir5(sessionsDir(), { recursive: true });
+  await appendFile(sessionFile(sessionId), `${JSON.stringify(event)}
+`, { encoding: "utf8", mode: 384 });
+}
+var byTime = (events) => events.sort((a5, b4) => Date.parse(a5.at) - Date.parse(b4.at));
+function parseEvent(line, path) {
+  const value = JSON.parse(line);
+  if (typeof value === "object" && value !== null) {
+    const { event, at: at2, up, cutAt, cutUp } = value;
+    if (typeof event === "string" && EVENTS.has(event) && typeof at2 === "string" && !Number.isNaN(Date.parse(at2)) && (up === void 0 || Number.isFinite(up)) && (cutAt === void 0 || typeof cutAt === "string" && !Number.isNaN(Date.parse(cutAt))) && (cutUp === void 0 || Number.isFinite(cutUp))) {
+      if (event === "staged") {
+        const mark = value;
+        if (typeof cutAt !== "string" || typeof mark.pendingStageId !== "string" || !(mark.state === "waiting" || mark.state === "accepted" && typeof mark.proposalId === "string" || (mark.state === "rejected" || mark.state === "conflict" || mark.state === "discarded") && typeof mark.reason === "string")) throw new Error("Unreadable stage mark in " + path);
       }
-      case "staged":
-        if (!lastStage || cutOf(event).wall >= cutOf(lastStage).wall) lastStage = event;
-        break;
-      case "subagent":
-        if (open2 && open2.turnId === event.turnId && sameEpoch(open2.start, point)) open2.last = point;
-        break;
+      return value;
     }
   }
-  if (open2) turns.push({ start: open2.start, end: open2.last });
-  const stagedCut = lastStage ? cutOf(lastStage) : null;
-  const counted = turns.flatMap(
-    ({ start, end }) => ownedParts(start, end.wall > nowPoint.wall ? nowPoint : end, stagedCut, periods)
+  throw new Error(`Unreadable agent session record in ${path}`);
+}
+async function readEventsAt(path) {
+  if (await readIfPresent(path + RETIRED) !== null) return null;
+  const sources = await Promise.all([path + ADOPTED, path].map(async (file) => ({ file, text: await readIfPresent(file) })));
+  if (sources.every((source) => source.text === null)) return null;
+  return byTime(
+    sources.flatMap(
+      ({ file, text: text2 }) => (text2 ?? "").split("\n").filter((line) => line.trim() !== "").map((line) => parseEvent(line, file))
+    )
   );
-  const unstagedMs = counted.reduce((sum, part) => sum + part.ms, 0);
-  const minutes = Math.floor(unstagedMs / 6e4);
-  let cut = { at: now.at.toISOString(), up: now.up };
-  let remaining = minutes * 6e4;
-  for (const part of counted) {
-    if (remaining > part.ms) {
-      remaining -= part.ms;
-      continue;
+}
+var ADOPTED = ".adopted";
+var RETIRED = ".retired";
+async function readIfPresent(path) {
+  try {
+    return await readFile6(path, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+}
+var journalNames = (names) => [
+  ...new Set(
+    names.flatMap((name) => {
+      if (name.endsWith(".jsonl")) return [name];
+      for (const suffix of [ADOPTED, RETIRED]) if (name.endsWith(".jsonl" + suffix)) return [name.slice(0, -suffix.length)];
+      return [];
+    })
+  )
+];
+async function lastWritten(path) {
+  let newest = -Infinity;
+  for (const file of [path, path + ADOPTED]) {
+    try {
+      newest = Math.max(newest, (await stat3(file)).mtimeMs);
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
     }
-    cut = {
-      at: new Date(part.from.wall + remaining).toISOString(),
-      up: part.awake && part.from.up !== null ? part.from.up + remaining : null
-    };
-    break;
   }
-  return {
-    agent: first.agent,
-    unstagedMs,
-    minutes,
-    startedAt: counted.length > 0 ? new Date(counted[0].from.wall).toISOString() : null,
-    cut,
-    lastProposalId: lastStage?.state === "accepted" ? lastStage.proposalId : null,
-    lastPendingStageId: lastStage && lastStage.state !== "accepted" ? lastStage.pendingStageId : null,
-    lastHold: lastStage?.state === "conflict" || lastStage?.state === "discarded" ? lastStage.reason : null,
-    lastRejection: lastStage?.state === "rejected" ? lastStage.reason : null
-  };
+  return newest;
 }
-async function recordedTime(sessionId, now) {
-  const events = await readEventsAt(sessionFile(sessionId));
-  return events ? measureRecordedTime(events, now, signedInPeriods()) : null;
+function currentFormOf(line, path) {
+  const value = JSON.parse(line);
+  if (typeof value !== "object" || value === null || value.event !== "staged" || "state" in value) {
+    return parseEvent(line, path);
+  }
+  const { proposalId, pendingStageId, cutAt, cutUp, at: at2, up, ...rest } = value;
+  const cut = cutAt === void 0 ? { cutAt: at2, ...up === void 0 ? {} : { cutUp: up } } : { cutAt, ...cutUp === void 0 ? {} : { cutUp } };
+  const mark = typeof proposalId === "string" ? { pendingStageId: "legacy-" + proposalId, state: "accepted", proposalId } : { pendingStageId, state: "waiting" };
+  return parseEvent(JSON.stringify({ ...rest, at: at2, ...up === void 0 ? {} : { up }, ...cut, ...mark }), path);
+}
+var SOURCES = "0.3.7-sources.json";
+async function adoptedSources() {
+  const text2 = await readIfPresent(join8(sessionsDir(), SOURCES));
+  if (text2 === null) return {};
+  try {
+    const value = JSON.parse(text2);
+    if (typeof value === "object" && value !== null && !Array.isArray(value)) return value;
+  } catch (error) {
+    if (!(error instanceof SyntaxError)) throw error;
+  }
+  return {};
 }
-function missedTurnEvents(events, turns, owner, now, lastWake) {
-  const added = [];
-  for (const turn of turns) {
-    const first = firstRecordedStart(events, turn.turnId);
-    if (first !== null && first - turn.startedAt <= MISSED_START_MS) continue;
-    if (turn.endedAt === null) {
-      const start = missedStartEvent(events, turn, owner, now, lastWake);
-      if (start) added.push(start);
-      continue;
+async function legacyJournals(fromDir, now) {
+  let names;
+  try {
+    names = await readdir7(fromDir);
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+  const journals = [];
+  for (const name of names.filter((entry) => entry.endsWith(".jsonl"))) {
+    const from = join8(fromDir, name);
+    try {
+      const info = await stat3(from);
+      journals.push({ name, from, size: info.size, mtimeMs: info.mtimeMs, modified: info.mtime, expired: now - info.mtimeMs > RETENTION_MS });
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
     }
-    if (turn.durationMs === null) continue;
-    const stop = events.find(
-      (event) => event.event === "stop" && event.turnId === turn.turnId
-    );
-    let end;
-    let awakeToEnd;
-    if (stop?.up !== void 0) {
-      end = pointOf(stop.at, stop.up);
-      awakeToEnd = turn.durationMs - Math.max(0, turn.endedAt - end.wall);
-    } else {
-      end = countBack(turn.endedAt, events, now, lastWake);
-      awakeToEnd = turn.durationMs;
-      if (end === null) {
-        const sample = awakeSamples(events).filter((point) => point.wall > turn.startedAt && point.wall <= turn.endedAt).at(-1);
-        if (sample) {
-          end = sample;
-          awakeToEnd = turn.durationMs - (turn.endedAt - sample.wall);
-        }
-      }
-      if (end) added.push({ event: "stop", at: new Date(end.wall).toISOString(), up: end.up, turnId: turn.turnId });
+  }
+  return journals;
+}
+var unchanged = (journal, sources) => sources[journal.name]?.size === journal.size && sources[journal.name]?.mtimeMs === journal.mtimeMs;
+async function legacyJournalsWaiting(fromDir, now = Date.now()) {
+  const journals = await legacyJournals(fromDir, now);
+  if (journals.length === 0) return false;
+  const sources = await adoptedSources();
+  return journals.some((journal) => journal.expired || !unchanged(journal, sources));
+}
+async function adoptLegacyJournals(fromDir, extendStart, now = Date.now()) {
+  const sources = await adoptedSources();
+  const copies = [];
+  let earliest = Infinity;
+  for (const journal of await legacyJournals(fromDir, now)) {
+    if (unchanged(journal, sources)) continue;
+    const text2 = await readIfPresent(journal.from);
+    if (text2 === null) continue;
+    let events;
+    try {
+      events = text2.split("\n").filter((line) => line.trim() !== "").map((line) => currentFormOf(line, journal.from));
+    } catch {
+      await rename4(journal.from, journal.from + ".unreadable");
+      continue;
     }
-    if (end === null || awakeToEnd <= 0) continue;
-    added.push({
-      event: "start",
-      at: new Date(turn.startedAt).toISOString(),
-      up: end.up - awakeToEnd,
-      sessionId: owner.sessionId,
-      agent: "codex",
-      cwd: owner.cwd,
-      turnId: turn.turnId,
-      source: "session-file"
-    });
+    for (const event of events) earliest = Math.min(earliest, Date.parse(event.at));
+    copies.push({ journal, copy: events.map((event) => JSON.stringify(event) + "\n").join("") });
+  }
+  if (earliest !== Infinity) await extendStart(earliest);
+  await mkdir5(sessionsDir(), { recursive: true });
+  for (const { journal, copy } of copies) {
+    const target = join8(sessionsDir(), journal.name + ADOPTED);
+    await writeFile5(target + ".partial", copy, { mode: 384 });
+    await utimes(target + ".partial", journal.modified, journal.modified);
+    await rename4(target + ".partial", target);
+    sources[journal.name] = { size: journal.size, mtimeMs: journal.mtimeMs };
+  }
+  for (const journal of await legacyJournals(fromDir, now)) {
+    if (!journal.expired || !unchanged(journal, sources)) continue;
+    await rm3(journal.from, { force: true });
+    delete sources[journal.name];
+  }
+  const manifest = join8(sessionsDir(), SOURCES);
+  await writeFile5(manifest + ".partial", JSON.stringify(sources), { mode: 384 });
+  await rename4(manifest + ".partial", manifest);
+  try {
+    await rmdir(fromDir);
+  } catch (error) {
+    const code = error.code;
+    if (code !== "ENOTEMPTY" && code !== "EEXIST" && code !== "ENOENT") throw error;
   }
-  return added;
-}
-async function stageTime(sessionId, now) {
-  const events = await readEventsAt(sessionFile(sessionId));
-  if (!events) return null;
-  const owner = events.find(
-    (event) => event.event === "session" || event.event === "start"
-  );
-  if (owner?.agent !== "codex") return measureRecordedTime(events, now, signedInPeriods());
-  const file = await codexTurnsOf(sessionId, transcriptPathOf(events));
-  if (file === null) return measureRecordedTime(events, now, signedInPeriods());
-  const added = missedTurnEvents(events, file.turns, owner, now, lastWakeMs());
-  return measureRecordedTime(byTime([...events, ...added]), now, signedInPeriods());
 }
-async function promptReminder(sessionId, cwd, now) {
-  const link2 = await readLink(cwd);
-  if (link2?.kind === "ignored") return "";
-  if (link2?.kind === "linked") {
-    const recorded2 = await recordedTime(sessionId, now);
-    return recorded2 && recorded2.minutes >= REMINDER_MINUTES ? unstagedReminder(link2.name, recorded2.minutes) : "";
+function parseHookInput(raw) {
+  const value = JSON.parse(raw);
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    throw new Error("Hook input must be a JSON object.");
   }
-  const root = await findGitRoot(cwd);
-  if (root === null) return "";
-  const events = await readEventsAt(sessionFile(sessionId)) ?? [];
-  if (events.some((event) => event.event === "unlinked-reminder")) return "";
-  const recorded = measureRecordedTime(events, now, signedInPeriods());
-  if (!recorded || recorded.minutes < REMINDER_MINUTES) return "";
-  const repository = await remoteStatus(root);
-  if (repository.status !== "remote-linked" && repository.status !== "unlinked") return "";
-  await append(sessionId, { event: "unlinked-reminder", at: now.at.toISOString() });
-  return repository.status === "remote-linked" ? remoteLinkedReminder(repository.link, recorded.minutes) : unlinkedReminder(recorded.minutes);
+  const {
+    session_id: sessionId,
+    hook_event_name: event,
+    cwd,
+    turn_id: turnId,
+    agent_id: agentId,
+    transcript_path: transcriptPath
+  } = value;
+  if (typeof sessionId !== "string" || sessionId === "") throw new Error("Hook input needs a session_id string.");
+  if (typeof event !== "string") throw new Error("Hook input needs a hook_event_name string.");
+  if (typeof cwd !== "string") throw new Error("Hook input needs a cwd string.");
+  if (turnId !== void 0 && turnId !== null && typeof turnId !== "string") {
+    throw new Error("Hook input turn_id must be a string when present.");
+  }
+  if (agentId !== void 0 && agentId !== null && typeof agentId !== "string") {
+    throw new Error("Hook input agent_id must be a string when present.");
+  }
+  if (transcriptPath !== void 0 && transcriptPath !== null && typeof transcriptPath !== "string") {
+    throw new Error("Hook input transcript_path must be a string when present.");
+  }
+  return {
+    sessionId,
+    event,
+    cwd,
+    turnId: typeof turnId === "string" ? turnId : null,
+    agentId: typeof agentId === "string" && agentId !== "" ? agentId : null,
+    transcriptPath: typeof transcriptPath === "string" && transcriptPath !== "" ? transcriptPath : null
+  };
 }
-async function restoreStageMark(sessionId, mark) {
-  const events = await readEventsAt(sessionFile(sessionId));
-  const existing = events?.filter((event) => event.event === "staged" && event.pendingStageId === mark.pendingStageId);
-  if (existing?.some((event) => event.event === "staged" && event.state === "accepted")) return "accepted";
-  if (existing?.length) return "pending";
-  await append(sessionId, {
-    event: "staged",
-    state: "waiting",
-    at: mark.at,
-    pendingStageId: mark.pendingStageId,
-    cutAt: mark.cut.at,
-    ...mark.cut.up === null ? {} : { cutUp: mark.cut.up }
-  });
-  return "pending";
+var proofRule = `Write the outcome as one line of at most ${AGENT_OUTCOME_MAX_LENGTH} characters: what changed. Add up to ${AGENT_DETAILS_MAX_COUNT} optional details for proof or open items, each one line of at most ${AGENT_DETAIL_MAX_LENGTH} characters.`;
+function sessionContext(projectName) {
+  return [
+    `Flowmind: this repository is linked to the Flowmind project "${terminalText(projectName)}".`,
+    "When you finish a material unit of work here, stage it before you start the next one, with",
+    '`flowmind agent stage --intention "<goal>" --outcome "<what changed>" --detail "<proof or open item>" --json`,',
+    "adding `--artifact-url <commit, PR, or document URL>` when one exists.",
+    proofRule,
+    "When several units finish together, stage them as one proof.",
+    "The CLI fills in the project and the recorded session time, including the time of your subagents.",
+    "Subagents do not stage. Share the returned review URL with the user.",
+    "Do not use `flowmind log` for agent work."
+  ].join(" ");
 }
-async function settleStageMark(sessionId, mark, outcome) {
-  const events = await readEventsAt(sessionFile(sessionId));
-  if (events?.some((e4) => e4.event === "staged" && e4.pendingStageId === mark.pendingStageId && (outcome.state === "accepted" ? e4.state === "accepted" && e4.proposalId === outcome.proposalId : e4.state === outcome.state && e4.reason === outcome.reason))) return;
-  await append(sessionId, {
-    event: "staged",
-    at: mark.at,
-    pendingStageId: mark.pendingStageId,
-    ...outcome,
-    cutAt: mark.cut.at,
-    ...mark.cut.up === null ? {} : { cutUp: mark.cut.up }
-  });
+function unstagedReminder(projectName, minutes) {
+  return [
+    `Flowmind: ${minutes} minutes of agent work in this session are not staged yet for "${terminalText(projectName)}".`,
+    "When the current unit of work is complete, stage it with",
+    '`flowmind agent stage --intention "<goal>" --outcome "<what changed>" --detail "<proof or open item>" --json`',
+    "and share the review URL.",
+    proofRule
+  ].join(" ");
+}
+var projectLabel = (link2) => `"${terminalText(link2.name)}" (${link2.projectId})`;
+function remoteLinkedContext(link2) {
+  return [
+    `Flowmind: the remote already links this repository to the Flowmind project ${projectLabel(link2)},`,
+    "but this checkout has no .flowmind.json yet.",
+    "Run `git pull` to get .flowmind.json. Never create a new Flowmind project for this repository.",
+    'After the pull, stage finished work with `flowmind agent stage --intention "<goal>" --outcome "<what changed>" --detail "<proof or open item>" --json`.',
+    proofRule
+  ].join(" ");
+}
+function unlinkedContext() {
+  return [
+    "Flowmind: this git repository is not linked to a Flowmind project.",
+    "If it is a project the user works on, link it before you finish:",
+    "1. Run `git pull` first. Another machine may have linked it already.",
+    "2. Look for the existing project with `flowmind projects --json`. One product is one project on every machine; match by product, repository and name.",
+    '3. Only for a new product, create one with `flowmind projects add "<name>" --description "<one line>" --json`.',
+    "4. Run `flowmind link <project-id>` and commit .flowmind.json.",
+    "For a third-party clone or a scratch folder, run `flowmind link --ignore`. Ask the user once when you are unsure."
+  ].join("\n");
+}
+function remoteLinkedReminder(link2, minutes) {
+  return [
+    `Flowmind: ${minutes} minutes of agent work, and this checkout still has no .flowmind.json.`,
+    `The remote links this repository to ${projectLabel(link2)}. Run \`git pull\`; never create a new project for it.`
+  ].join(" ");
 }
-async function resolveSession(explicit, cwd, now = /* @__PURE__ */ new Date()) {
-  if (explicit) return { sessionId: explicit, source: "flag" };
-  const codexThread = process.env.CODEX_THREAD_ID || void 0;
-  if (codexThread && await readEventsAt(sessionFile(codexThread))) return { sessionId: codexThread, source: "codex-env" };
-  const root = await findRepoRoot(cwd);
-  const active = /* @__PURE__ */ new Set();
-  let names = [];
+function unlinkedReminder(minutes) {
+  return [
+    `Flowmind: ${minutes} minutes of agent work, and this repository is still not linked to a Flowmind project.`,
+    "Before you finish: run `git pull`, find the project with `flowmind projects --json`",
+    "(create one with `flowmind projects add` only for a new product), run `flowmind link <project-id>`, and commit .flowmind.json.",
+    "For a third-party clone or a scratch folder, run `flowmind link --ignore`."
+  ].join(" ");
+}
+async function pruneOldSessions(now) {
+  let names;
   try {
-    names = await readdir4(sessionsDir());
+    names = await readdir7(sessionsDir());
   } catch (error) {
-    if (error.code !== "ENOENT") throw error;
-  }
-  for (const name of names.filter((entry) => entry.endsWith(".jsonl"))) {
-    const path = join6(sessionsDir(), name);
-    if (now.getTime() - (await stat2(path)).mtimeMs > ACTIVE_WINDOW_MS) continue;
-    const events = await readEventsAt(path) ?? [];
-    if (codexThread && events.some((event) => event.event === "subagent" && event.agentId === codexThread)) {
-      const main = events.find(
-        (event) => event.event === "session" || event.event === "start"
-      );
-      if (main) return { sessionId: main.sessionId, source: "subagent" };
-    }
-    let last = null;
-    for (const event of events) {
-      if (event.event === "start") last = event;
-      if (event.event === "stop" && event.turnId === last?.turnId) last = null;
-    }
-    if (last?.event === "start" && now.getTime() - Date.parse(last.at) < OPEN_TURN_LIMIT_MS && await findRepoRoot(last.cwd) === root) {
-      active.add(last.sessionId);
-    }
+    if (error.code === "ENOENT") return;
+    throw error;
   }
-  if (active.size > 1) {
-    throw new Error("Several agent sessions have a turn in progress in this repository. Pass --session-id.");
+  for (const name of journalNames(names)) {
+    const path = join8(sessionsDir(), name);
+    const retiring = await readIfPresent(path + RETIRED) !== null;
+    if (!retiring && now.getTime() - await lastWritten(path) <= RETENTION_MS) continue;
+    if (!retiring && await lastWritten(join8(legacySessionsDir(), name)) !== -Infinity) continue;
+    if (!retiring) await writeFile5(path + RETIRED, "", { mode: 384 });
+    await rm3(path, { force: true });
+    await rm3(path + ADOPTED, { force: true });
+    await rm3(path + RETIRED, { force: true });
   }
-  const [only] = active;
-  if (only) return { sessionId: only, source: "active-turn" };
-  return codexThread ? { sessionId: codexThread, source: "codex-env" } : { sessionId: null, source: null };
 }
-
-// src/command-error.ts
-var LIMIT_WORDS = {
-  "projects.active": (limit) => `${limit} active projects`,
-  "logs.personal.month": (limit) => `${limit} personal logs this month`,
-  "logs.agent.month": (limit) => `${limit} agent logs this month`
-};
-var describePlanLimit = ({ limit, limitKey, resetAt }) => {
-  const what = (LIMIT_WORDS[limitKey] ?? ((count) => `${count} of ${limitKey}`))(limit);
-  const frees = resetAt === null ? "Archiving a finished project frees a slot (archiving is final), or upgrade to Pro." : `It resets on ${new Date(resetAt).toLocaleDateString("en-GB", { day: "numeric", month: "long", year: "numeric", timeZone: "UTC" })}, or upgrade to Pro.`;
-  return `Your plan allows ${what}. ${frees} Everything you already logged stays. Upgrade in the Flowmind web app under Settings > Plan.`;
-};
-var printCommandError = (action, error, json = false, extra) => {
-  let diagnostic;
-  if (error instanceof PlanLimitError) {
-    const message = describePlanLimit(error.details);
-    console.error(json ? JSON.stringify({ error: message, code: error.code, ...error.details, ...extra }) : `${terminalText(message)}${extra ? `
-${terminalText(extra.message)}` : ""}`);
-    process.exitCode = 1;
-    return;
-  }
-  if (error instanceof BridgeError) {
-    const context2 = error.context;
-    const schema = `${context2.schemaId ?? "unavailable"}${context2.schemaPath ?? ""}`;
-    diagnostic = `${action} failed: ${error.code} (${context2.kind}); operation=${context2.operation ?? "unavailable"}; stage=${context2.stage ?? "request"}; schema=${schema}; requestId=${context2.requestId ?? "unavailable"}`;
-  } else {
-    diagnostic = `${action} failed: ${error instanceof Error ? error.message : "Unknown error"}`;
-  }
-  if (error instanceof ApiRejectionError) {
-    console.error(json ? JSON.stringify({ error: error.rejectionMessage, diagnostic, ...extra }) : `${terminalText(error.rejectionMessage)}
-Error: ${terminalText(diagnostic)}${extra ? `
-${terminalText(extra.message)}` : ""}`);
-  } else {
-    console.error(json ? JSON.stringify({ error: diagnostic, ...extra }) : `Error: ${terminalText(diagnostic)}${extra ? `
-${terminalText(extra.message)}` : ""}`);
+async function handleHook(agent, raw, prune, now = currentMoment()) {
+  const input2 = parseHookInput(raw);
+  const at2 = now.at.toISOString();
+  const { up } = now;
+  const subagent = input2.agentId;
+  switch (input2.event) {
+    case "SessionStart": {
+      if (subagent !== null) return "";
+      await append(input2.sessionId, {
+        event: "session",
+        at: at2,
+        up,
+        sessionId: input2.sessionId,
+        agent,
+        cwd: input2.cwd,
+        ...input2.transcriptPath === null ? {} : { transcriptPath: input2.transcriptPath }
+      });
+      await prune(now.at);
+      const repository = await repositoryStatus(input2.cwd);
+      switch (repository.status) {
+        case "linked":
+          return sessionContext(repository.link.name);
+        case "remote-linked":
+          return remoteLinkedContext(repository.link);
+        case "unlinked":
+          return unlinkedContext();
+        case "ignored":
+        case "outside-git":
+          return "";
+      }
+    }
+    case "UserPromptSubmit":
+      if (subagent !== null) {
+        await append(input2.sessionId, { event: "subagent", at: at2, up, agentId: subagent, turnId: input2.turnId });
+        return "";
+      }
+      await append(input2.sessionId, {
+        event: "start",
+        at: at2,
+        up,
+        sessionId: input2.sessionId,
+        agent,
+        cwd: input2.cwd,
+        turnId: input2.turnId
+      });
+      return promptReminder(input2.sessionId, input2.cwd, now);
+    case "Stop":
+    case "Interrupt":
+      if (subagent !== null) return "";
+      await append(input2.sessionId, { event: "stop", at: at2, up, turnId: input2.turnId });
+      if (agent === "codex" && input2.turnId !== null) await addMissedTurnStart(input2, now);
+      return "";
+    default:
+      throw new Error(`Unsupported hook event: ${input2.event}`);
   }
-  process.exitCode = 1;
-};
-
-// src/legacy-proofs.ts
-import { mkdir as mkdir5, readdir as readdir6, readFile as readFile6, rename as rename3, rm as rm3, stat as stat3 } from "node:fs/promises";
-import { join as join8 } from "node:path";
-
-// src/pending-stages.ts
-import { spawn } from "node:child_process";
-import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
-import { mkdir as mkdir4, readdir as readdir5, readFile as readFile5, rename as rename2, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
-import { basename, join as join7 } from "node:path";
-
-// src/stored-stage-input.ts
-var SOURCE_KINDS = [
-  "calendar",
-  "claude_code",
-  "cli",
-  "codex",
-  "github",
-  "linear",
-  "manual",
-  "session_log",
-  "other"
-];
-var evidenceKinds = ["calendar_event", "commit", "issue", "linear_issue", "pr", "session_log", "other"];
-var shape = (v6, keys2) => v6 !== null && typeof v6 === "object" && !Array.isArray(v6) && Object.keys(v6).every((key) => keys2.includes(key));
-var text = (v6, max) => typeof v6 === "string" && v6.trim().length > 0 && [...v6].length <= max;
-var optionalText = (v6, max) => v6 === void 0 || v6 === null || text(v6, max);
-var member = (v6, kinds) => typeof v6 === "string" && kinds.includes(v6);
-var isoDate = (v6) => typeof v6 === "string" && Number.isFinite(Date.parse(v6)) && new Date(v6).toISOString() === v6;
-var keys = [
-  "targetKind",
-  "projectId",
-  "startedAt",
-  "durationMinutes",
-  "description",
-  "note",
-  "details",
-  "artifactUrl",
-  "source",
-  "evidence"
-];
-function isStoredStageInput(v6) {
-  if (!shape(v6, keys) || v6.targetKind !== "project" || typeof v6.projectId !== "string" || !isProjectId(v6.projectId) || !isoDate(v6.startedAt) || typeof v6.durationMinutes !== "number" || !Number.isSafeInteger(v6.durationMinutes) || v6.durationMinutes < 1 || !text(v6.description, 280) || !text(v6.note, AGENT_OUTCOME_MAX_LENGTH) || /[\r\n]/.test(v6.note) || v6.artifactUrl !== void 0 && (!text(v6.artifactUrl, 2048) || !isHttpEvidenceUrl(v6.artifactUrl)))
-    return false;
-  const details = v6.details === void 0 ? [] : v6.details;
-  if (!Array.isArray(details) || !details.every((d5) => text(d5, AGENT_DETAIL_MAX_LENGTH) && !/[\r\n]/.test(d5)) || agentProofIssues({ outcome: v6.note, details }).length)
-    return false;
-  const source = v6.source;
-  return shape(source, ["kind", "externalId", "label"]) && member(source.kind, SOURCE_KINDS) && optionalText(source.externalId, 200) && optionalText(source.label, 160) && Array.isArray(v6.evidence) && v6.evidence.length <= 20 && v6.evidence.every(
-    (e4) => shape(e4, ["kind", "label", "externalId", "url"]) && member(e4.kind, evidenceKinds) && text(e4.label, 160) && optionalText(e4.externalId, 200) && (e4.url === null || e4.url === void 0 || text(e4.url, 500) && isHttpEvidenceUrl(e4.url))
-  );
 }
-
-// src/pending-stages.ts
-var STAGE_KEY_IN_USE = "This stage key is already in use";
-var MAX_BACKOFF_MINUTES = 60;
-var outboxDir = () => join7(accountDirectory(), "pending-stages");
-var takeStageLock = () => tryLock(join7(accountDirectory(), "stage-writers"));
-var fileOf2 = (id) => join7(outboxDir(), id + ".json");
-var nextAttempt = (attempts, now) => new Date(now.getTime() + Math.min(MAX_BACKOFF_MINUTES, 2 ** Math.max(0, attempts - 1)) * 6e4).toISOString();
-var errorText = (error) => error instanceof Error ? error.message : String(error);
-var classifyStageFailure = (error) => {
-  if (!(error instanceof BridgeError)) return { kind: "unexpected", reason: errorText(error) };
-  const { kind, status } = error.context;
-  if (kind === "transport") return { kind: "retry", reason: "The Flowmind API could not be reached in time" };
-  if (kind === "contract")
-    return {
-      kind: "retry",
-      reason: "Flowmind's answer could not be read" + (status === null ? "" : " (HTTP " + status + ")")
-    };
-  const message = error instanceof ApiRejectionError ? error.rejectionMessage : "The Flowmind API answered HTTP " + status;
-  if (status === 401 || status === 403) return { kind: "login", reason: message };
-  if (status === 409 && message === STAGE_KEY_IN_USE) return { kind: "conflict", reason: message };
-  if (status !== null && status >= 400 && status < 500 && status !== 408 && status !== 429)
-    return { kind: "reject", reason: message };
-  return { kind: "retry", reason: message };
-};
-var stageIdOf = (idempotencyKey, input2) => createHash4("sha256").update(idempotencyKey + "\n" + JSON.stringify(input2)).digest("hex").slice(0, 16);
-var cutDigestOf = (id, sessionId, cut) => createHash4("sha256").update(JSON.stringify([id, sessionId, cut === null ? null : [cut.at, cut.up]])).digest("hex");
-function readStage(value, fileName, legacy = false) {
-  const stage = value;
-  if (typeof stage !== "object" || stage === null) return null;
-  const input2 = stage.input;
-  const { id, sessionId, cut } = stage;
-  const valid = typeof id === "string" && /^[a-f0-9]{16}$/.test(id) && fileName === id + ".json" && typeof stage.idempotencyKey === "string" && stage.idempotencyKey.trim() === stage.idempotencyKey && /^[\x20-\x7e]+$/.test(stage.idempotencyKey) && typeof stage.apiUrl === "string" && isStoredStageInput(input2) && (legacy && stage.credentialFingerprint === void 0 || typeof stage.credentialFingerprint === "string" && /^[a-f0-9]{64}$/.test(stage.credentialFingerprint)) && stageIdOf(stage.idempotencyKey, input2) === id && isoDate(stage.savedAt) && isoDate(stage.nextAttemptAt) && (stage.lastAttemptAt === null || isoDate(stage.lastAttemptAt)) && (sessionId === null || typeof sessionId === "string" && sessionId.length > 0) && (cut === null || typeof cut === "object" && isoDate(cut.at) && Date.parse(cut.at) <= Date.parse(stage.savedAt) && (cut.up === null || Number.isFinite(cut.up))) && sessionId === null === (cut === null) && (stage.state === "waiting" || stage.state === "rejected" || stage.state === "conflict") && Number.isSafeInteger(stage.attempts) && stage.attempts >= 0 && (typeof stage.lastError === "string" || stage.state === "waiting" && stage.lastError === null);
-  if (!valid) return null;
-  const cutDigest = cutDigestOf(id, sessionId, cut);
-  if (stage.cutDigest !== cutDigest && !(legacy && stage.cutDigest === void 0)) return null;
-  return { ...stage, credentialFingerprint: stage.credentialFingerprint ?? null, cutDigest };
+function turnIdTime(turnId) {
+  const hex = turnId.replaceAll("-", "");
+  if (!/^[0-9a-f]{32}$/i.test(hex) || hex[12] !== "7") return null;
+  return Number.parseInt(hex.slice(0, 12), 16);
 }
-var writePendingStage = async (stage) => {
-  await mkdir4(outboxDir(), { recursive: true });
-  const temporary = fileOf2(stage.id) + "." + process.pid + "." + randomUUID3() + ".tmp";
-  await writeFile4(temporary, JSON.stringify(stage, null, 2) + "\n", { encoding: "utf8", mode: 384 });
-  await rename2(temporary, fileOf2(stage.id));
+var firstRecordedStart = (events, turnId) => {
+  const first = events.find((event) => event.event === "start" && event.turnId === turnId);
+  return first ? Date.parse(first.at) : null;
 };
-async function saveStageBeforeSending(input2) {
-  const at2 = input2.now.toISOString();
-  const id = stageIdOf(input2.idempotencyKey, input2.stage);
-  const pending = {
-    id,
-    savedAt: at2,
-    apiUrl: API_URL,
-    idempotencyKey: input2.idempotencyKey,
-    credentialFingerprint: accountBinding().credential,
-    input: input2.stage,
-    sessionId: input2.sessionId,
-    cut: input2.cut,
-    cutDigest: cutDigestOf(id, input2.sessionId, input2.cut),
-    state: "waiting",
-    attempts: 0,
-    lastAttemptAt: null,
-    nextAttemptAt: at2,
-    lastError: null
-  };
-  if (!readStage(pending, pending.id + ".json"))
-    throw new Error("The stage request does not match the Flowmind proof contract. Check its fields before retrying.");
-  const { stages, unreadable } = await listPendingStages();
-  if (unreadable.includes(fileOf2(pending.id)) || stages.some((stage) => stage.id === pending.id)) {
-    throw new Error("This proof (" + pending.id + ") is already saved. See: flowmind agent pending");
-  }
-  await writePendingStage(pending);
-  return pending;
+function hooksSawStart(events, turnId) {
+  const first = firstRecordedStart(events, turnId);
+  const created = turnIdTime(turnId);
+  return first !== null && created !== null && first - created <= MISSED_START_MS;
+}
+var transcriptPathOf = (events) => events.filter((event) => event.event === "session").filter((event) => event.transcriptPath !== void 0).at(-1)?.transcriptPath ?? null;
+async function codexTurnsOf(sessionId, knownPath) {
+  const known = knownPath === null ? null : await readCodexTurns(knownPath);
+  if (known !== null) return { path: knownPath, turns: known };
+  const found = await findCodexSessionFile(sessionId);
+  const turns = found === null ? null : await readCodexTurns(found);
+  return turns === null ? null : { path: found, turns };
 }
-async function recordStageFailure(stage, failure, now) {
-  const attempts = stage.attempts + 1;
-  const next = {
-    ...stage,
-    state: failure.kind === "conflict" || stage.state === "conflict" ? "conflict" : failure.kind === "reject" ? "rejected" : "waiting",
-    attempts,
-    lastAttemptAt: now.toISOString(),
-    nextAttemptAt: nextAttempt(attempts, now),
-    lastError: failure.kind === "conflict" || stage.state === "conflict" ? conflictAdvice(stage.id) : failure.reason
+function countBack(wall, events, now, lastWake) {
+  const nowWall = now.at.getTime();
+  if (wall > nowWall) return null;
+  const back = { wall, up: now.up - (nowWall - wall) };
+  if (lastWake !== null && lastWake <= nowWall) return lastWake <= wall ? back : null;
+  const before = awakeSamples(events).filter((point) => point.wall <= wall).at(-1);
+  return before && Math.abs(nowWall - now.up - (before.wall - before.up)) <= CLOCK_DRIFT_MS ? back : null;
+}
+var awakeSamples = (events) => events.flatMap((event) => event.event !== "unlinked-reminder" && event.up !== void 0 ? [pointOf(event.at, event.up)] : []);
+function awakePointAt(wall, events, now, lastWake) {
+  const exact = countBack(wall, events, now, lastWake);
+  if (exact) return exact;
+  const nowWall = now.at.getTime();
+  if (lastWake !== null && lastWake <= nowWall) return countBack(lastWake, events, now, lastWake);
+  return awakeSamples(events).find((point) => point.wall > wall && point.wall < nowWall) ?? null;
+}
+function missedStartEvent(events, turn, owner, now, lastWake) {
+  const first = firstRecordedStart(events, turn.turnId);
+  if (first !== null && first - turn.startedAt <= MISSED_START_MS) return null;
+  const point = awakePointAt(turn.startedAt, events, now, lastWake);
+  if (point === null) return null;
+  return {
+    event: "start",
+    at: new Date(point.wall).toISOString(),
+    ...point.up === null ? {} : { up: point.up },
+    sessionId: owner.sessionId,
+    agent: "codex",
+    cwd: owner.cwd,
+    turnId: turn.turnId,
+    source: "session-file"
   };
-  await writePendingStage(next);
-  return next;
 }
-async function forgetStage(id) {
-  await rm2(fileOf2(id), { force: true });
+async function addMissedTurnStart(input2, now) {
+  const turnId = input2.turnId;
+  const events = await readEventsAt(sessionFile(input2.sessionId)) ?? [];
+  if (hooksSawStart(events, turnId)) return;
+  const file = await codexTurnsOf(input2.sessionId, input2.transcriptPath ?? transcriptPathOf(events));
+  if (file === null) return;
+  const turn = file.turns.find((candidate) => candidate.turnId === turnId);
+  if (!turn) throw new Error(`The Codex session file ${file.path} has no start for turn ${turnId}.`);
+  const start = missedStartEvent(events, turn, input2, now, lastWakeMs());
+  if (start) await append(input2.sessionId, start);
 }
-async function listPendingStages() {
-  let names;
-  try {
-    names = await readdir5(outboxDir());
-  } catch (error) {
-    if (error.code === "ENOENT") return { stages: [], unreadable: [] };
-    throw error;
-  }
-  const stages = [];
-  const unreadable = [];
-  for (const name of names.filter((entry) => entry.endsWith(".json"))) {
-    const path = join7(outboxDir(), name);
-    let text2;
-    try {
-      text2 = await readFile5(path, "utf8");
-    } catch (error) {
-      if (error.code === "ENOENT") continue;
-      unreadable.push(path);
-      continue;
+var pointOf = (at2, up) => ({ wall: Date.parse(at2), up: up ?? null });
+var cutOf = (event) => pointOf(event.cutAt, event.cutUp);
+function span(from, to) {
+  const wall = to.wall - from.wall;
+  if (wall <= 0 || from.up !== null && to.up !== null && to.up < from.up) return { from, to, ms: 0, awake: false };
+  const ms = from.up === null || to.up === null ? wall : Math.min(to.up - from.up, wall);
+  return { from, to, ms: ms > OPEN_TURN_LIMIT_MS ? 0 : ms, awake: from.up !== null && to.up !== null };
+}
+var sameEpoch = (from, to) => from.up === null || to.up === null || to.up >= from.up;
+function supportedEdge(start, edge, end) {
+  const follows = (a5, b4) => a5.up !== null && b4.up !== null && b4.up >= a5.up && b4.up - a5.up <= b4.wall - a5.wall + CLOCK_DRIFT_MS;
+  return follows(start, edge) && follows(edge, end);
+}
+function ownedParts(start, end, cut, periods) {
+  if (end.wall <= start.wall || end.wall - start.wall > OPEN_TURN_LIMIT_MS || !sameEpoch(start, end)) return [];
+  return periods.flatMap((period) => {
+    if (period.start.wall >= end.wall || period.end && period.end.wall <= start.wall) return [];
+    let from = start, to = end;
+    if (period.start.wall > start.wall) {
+      if (!supportedEdge(start, period.start, end)) return [];
+      from = period.start;
     }
-    let value;
-    try {
-      value = JSON.parse(text2);
-    } catch {
-      value = null;
+    if (period.end && period.end.wall < end.wall) {
+      if (!supportedEdge(start, period.end, end)) return [];
+      to = period.end;
     }
-    const stage = readStage(value, name);
-    if (stage && stage.apiUrl === API_URL) stages.push(stage);
-    else unreadable.push(path);
-  }
-  return { stages: stages.sort((a5, b4) => Date.parse(a5.savedAt) - Date.parse(b4.savedAt)), unreadable };
+    if (cut && cut.wall > from.wall) from = cut;
+    const part = span(from, to);
+    return part.ms > 0 ? [part] : [];
+  });
 }
-async function restoreSavedStageMarks(measuring = false) {
-  const { stages, unreadable } = await listPendingStages();
-  if (measuring && unreadable.length) {
-    throw new Error(
-      "Cannot measure new work: unreadable reservation " + unreadable[0] + ". Check Activity. Restore the original file and run flowmind agent retry, or discard the reservation with flowmind agent discard " + basename(unreadable[0], ".json") + ". An unowned original needs flowmind agent adopt <id>."
-    );
+function measureRecordedTime(events, now, periods) {
+  const first = events.find((event) => event.event === "session" || event.event === "start");
+  if (!first || first.event !== "session" && first.event !== "start") return null;
+  const nowPoint = { wall: now.at.getTime(), up: now.up };
+  const turns = [];
+  let open2 = null;
+  let unknownStarts = 0;
+  let lastStage = null;
+  const settled = new Set(events.flatMap((event) => event.event === "staged" && event.state !== "waiting" ? [event.pendingStageId] : []));
+  for (const event of events) {
+    if (event.event === "session" || event.event === "unlinked-reminder") continue;
+    const point = pointOf(event.at, event.up);
+    switch (event.event) {
+      case "start":
+        if (event.turnId === null && (unknownStarts > 0 || open2 && open2.turnId === null)) {
+          unknownStarts = unknownStarts ? unknownStarts + 1 : 2;
+          open2 = null;
+          break;
+        }
+        if (open2 && open2.turnId !== null && open2.turnId === event.turnId) {
+          if (sameEpoch(open2.start, point)) open2.last = point;
+          break;
+        }
+        if (open2) turns.push({ start: open2.start, end: open2.last });
+        open2 = { start: point, last: point, turnId: event.turnId };
+        break;
+      case "stop": {
+        if (event.turnId === null && unknownStarts > 0) {
+          unknownStarts--;
+          break;
+        }
+        const matches = open2 !== null && event.turnId === open2.turnId;
+        if (open2 && matches) {
+          turns.push({ start: open2.start, end: sameEpoch(open2.start, point) ? point : open2.last });
+          open2 = null;
+        }
+        break;
+      }
+      case "staged":
+        if (event.state === "waiting" && settled.has(event.pendingStageId)) break;
+        if (!lastStage || cutOf(event).wall >= cutOf(lastStage).wall) lastStage = event;
+        break;
+      case "subagent":
+        if (open2 && open2.turnId === event.turnId && sameEpoch(open2.start, point)) open2.last = point;
+        break;
+    }
   }
-  for (const stage of stages) {
-    if (stage.sessionId === null || stage.cut === null) continue;
-    const mark = { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id };
-    if (await restoreStageMark(stage.sessionId, mark) === "accepted") {
-      await forgetStage(stage.id);
+  if (open2) turns.push({ start: open2.start, end: open2.last });
+  const stagedCut = lastStage ? cutOf(lastStage) : null;
+  const counted = turns.flatMap(
+    ({ start, end }) => ownedParts(start, end.wall > nowPoint.wall ? nowPoint : end, stagedCut, periods)
+  );
+  const unstagedMs = counted.reduce((sum, part) => sum + part.ms, 0);
+  const minutes = Math.floor(unstagedMs / 6e4);
+  let cut = { at: now.at.toISOString(), up: now.up };
+  let remaining = minutes * 6e4;
+  for (const part of counted) {
+    if (remaining > part.ms) {
+      remaining -= part.ms;
       continue;
     }
-    if ((stage.state === "rejected" || stage.state === "conflict") && stage.lastError !== null) {
-      await settleStageMark(stage.sessionId, mark, { state: stage.state, reason: stage.lastError });
-    }
+    cut = {
+      at: new Date(part.from.wall + remaining).toISOString(),
+      up: part.awake && part.from.up !== null ? part.from.up + remaining : null
+    };
+    break;
   }
-}
-var isDue = (stage, now) => stage.state === "waiting" && stage.apiUrl === API_URL && Date.parse(stage.nextAttemptAt) <= now.getTime();
-async function sendPendingStages(options) {
-  const clock = options.now ?? (() => /* @__PURE__ */ new Date());
-  const count = async () => {
-    const { stages, unreadable } = await listPendingStages();
-    return { waiting: stages.filter((stage) => stage.state === "waiting").length, unreadable };
-  };
-  const result = {
-    busy: false,
-    sent: [],
-    rejected: [],
-    conflicts: [],
-    stoppedBy: null,
-    waiting: 0,
-    unreadable: []
+  return {
+    agent: first.agent,
+    unstagedMs,
+    minutes,
+    startedAt: counted.length > 0 ? new Date(counted[0].from.wall).toISOString() : null,
+    cut,
+    lastProposalId: lastStage?.state === "accepted" ? lastStage.proposalId : null,
+    lastPendingStageId: lastStage && lastStage.state !== "accepted" ? lastStage.pendingStageId : null,
+    lastHold: lastStage?.state === "conflict" || lastStage?.state === "discarded" ? lastStage.reason : null,
+    lastRejection: lastStage?.state === "rejected" ? lastStage.reason : null
   };
-  const lock = await takeStageLock();
-  if (!lock) return { ...result, busy: true, ...await count() };
-  try {
-    await restoreSavedStageMarks();
-    const candidates = (await listPendingStages()).stages.filter((stage) => {
-      const now = clock();
-      if (stage.state === "conflict") {
-        if (options.manual && stage.credentialFingerprint === accountBinding().credential) return true;
-        if (options.manual) result.conflicts.push({ id: stage.id, reason: conflictAdvice(stage.id) });
-        return false;
-      }
-      return options.due ? isDue(stage, now) : stage.state === "waiting" && stage.apiUrl === API_URL;
-    });
-    for (const stage of candidates) {
-      let proposal;
-      try {
-        proposal = await createAgentLogProposal(stage.input, stage.idempotencyKey);
-      } catch (error) {
-        const failure = classifyStageFailure(error);
-        const saved = await recordStageFailure(stage, failure, clock());
-        if (saved.state === "conflict") {
-          if (stage.sessionId && stage.cut)
-            await settleStageMark(
-              stage.sessionId,
-              { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id },
-              { state: "conflict", reason: conflictAdvice(stage.id) }
-            );
-          result.conflicts.push({ id: stage.id, reason: conflictAdvice(stage.id) });
-          continue;
-        }
-        if (failure.kind === "reject") {
-          if (stage.sessionId && stage.cut)
-            await settleStageMark(
-              stage.sessionId,
-              { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id },
-              { state: "rejected", reason: failure.reason }
-            );
-          result.rejected.push({ id: stage.id, reason: failure.reason });
-          continue;
+}
+async function recordedTime(sessionId, now) {
+  const events = await readEventsAt(sessionFile(sessionId));
+  return events ? measureRecordedTime(events, now, signedInPeriods()) : null;
+}
+function missedTurnEvents(events, turns, owner, now, lastWake) {
+  const added = [];
+  for (const turn of turns) {
+    const first = firstRecordedStart(events, turn.turnId);
+    if (first !== null && first - turn.startedAt <= MISSED_START_MS) continue;
+    if (turn.endedAt === null) {
+      const start = missedStartEvent(events, turn, owner, now, lastWake);
+      if (start) added.push(start);
+      continue;
+    }
+    if (turn.durationMs === null) continue;
+    const stop = events.find(
+      (event) => event.event === "stop" && event.turnId === turn.turnId
+    );
+    let end;
+    let awakeToEnd;
+    if (stop?.up !== void 0) {
+      end = pointOf(stop.at, stop.up);
+      awakeToEnd = turn.durationMs - Math.max(0, turn.endedAt - end.wall);
+    } else {
+      end = countBack(turn.endedAt, events, now, lastWake);
+      awakeToEnd = turn.durationMs;
+      if (end === null) {
+        const sample = awakeSamples(events).filter((point) => point.wall > turn.startedAt && point.wall <= turn.endedAt).at(-1);
+        if (sample) {
+          end = sample;
+          awakeToEnd = turn.durationMs - (turn.endedAt - sample.wall);
         }
-        result.stoppedBy = failure.reason;
-        break;
       }
-      if (stage.sessionId && stage.cut)
-        await settleStageMark(
-          stage.sessionId,
-          { at: stage.savedAt, cut: stage.cut, pendingStageId: stage.id },
-          { state: "accepted", proposalId: proposal.id }
-        );
-      await forgetStage(stage.id);
-      result.sent.push({ id: stage.id, proposal });
+      if (end) added.push({ event: "stop", at: new Date(end.wall).toISOString(), up: end.up, turnId: turn.turnId });
     }
-  } finally {
-    await lock.release();
+    if (end === null || awakeToEnd <= 0) continue;
+    added.push({
+      event: "start",
+      at: new Date(turn.startedAt).toISOString(),
+      up: end.up - awakeToEnd,
+      sessionId: owner.sessionId,
+      agent: "codex",
+      cwd: owner.cwd,
+      turnId: turn.turnId,
+      source: "session-file"
+    });
   }
-  return { ...result, ...await count() };
+  return added;
 }
-var conflictAdvice = (id) => "Stage key conflict (" + id + "). Delivery is unknown. Check Activity, then retry with the original credential or run flowmind agent discard " + id + ".";
-async function discardReservation(id) {
-  if (!id || basename(id) !== id || id === "." || id === "..") return false;
-  const { stages, unreadable } = await listPendingStages();
-  const stage = stages.find((item) => item.id === id);
-  if (!stage && !unreadable.includes(fileOf2(id))) return false;
-  if (stage && stage.state !== "conflict")
-    throw new Error("This account already has a saved proof " + id + ". See: flowmind agent pending");
-  if (stage?.sessionId && stage.cut)
-    await settleStageMark(
-      stage.sessionId,
-      { at: stage.savedAt, cut: stage.cut, pendingStageId: id },
-      { state: "discarded", reason: "Discarded after checking Activity." }
-    );
-  await forgetStage(id);
-  return true;
+async function stageTime(sessionId, now) {
+  const events = await readEventsAt(sessionFile(sessionId));
+  if (!events) return null;
+  const owner = events.find(
+    (event) => event.event === "session" || event.event === "start"
+  );
+  if (owner?.agent !== "codex") return measureRecordedTime(events, now, signedInPeriods());
+  const file = await codexTurnsOf(sessionId, transcriptPathOf(events));
+  if (file === null) return measureRecordedTime(events, now, signedInPeriods());
+  const added = missedTurnEvents(events, file.turns, owner, now, lastWakeMs());
+  return measureRecordedTime(byTime([...events, ...added]), now, signedInPeriods());
 }
-async function startDueRetry(now) {
-  const { stages } = await listPendingStages();
-  if (!stages.some((stage) => isDue(stage, now))) return false;
-  const script = process.argv[1];
-  if (!script) throw new Error("Cannot find the Flowmind CLI script to send saved stages");
-  const child = spawn(process.execPath, [script, "agent", "retry", "--due"], {
-    detached: true,
-    stdio: "ignore",
-    windowsHide: true
+async function promptReminder(sessionId, cwd, now) {
+  const link2 = await readLink(cwd);
+  if (link2?.kind === "ignored") return "";
+  if (link2?.kind === "linked") {
+    const recorded2 = await recordedTime(sessionId, now);
+    return recorded2 && recorded2.minutes >= REMINDER_MINUTES ? unstagedReminder(link2.name, recorded2.minutes) : "";
+  }
+  const root = await findGitRoot(cwd);
+  if (root === null) return "";
+  const events = await readEventsAt(sessionFile(sessionId)) ?? [];
+  if (events.some((event) => event.event === "unlinked-reminder")) return "";
+  const recorded = measureRecordedTime(events, now, signedInPeriods());
+  if (!recorded || recorded.minutes < REMINDER_MINUTES) return "";
+  const repository = await remoteStatus(root);
+  if (repository.status !== "remote-linked" && repository.status !== "unlinked") return "";
+  await append(sessionId, { event: "unlinked-reminder", at: now.at.toISOString() });
+  return repository.status === "remote-linked" ? remoteLinkedReminder(repository.link, recorded.minutes) : unlinkedReminder(recorded.minutes);
+}
+async function restoreStageMark(sessionId, mark) {
+  const events = await readEventsAt(sessionFile(sessionId));
+  const existing = events?.filter((event) => event.event === "staged" && event.pendingStageId === mark.pendingStageId);
+  if (existing?.some((event) => event.event === "staged" && event.state === "accepted")) return "accepted";
+  if (existing?.length) return "pending";
+  await append(sessionId, {
+    event: "staged",
+    state: "waiting",
+    at: mark.at,
+    pendingStageId: mark.pendingStageId,
+    cutAt: mark.cut.at,
+    ...mark.cut.up === null ? {} : { cutUp: mark.cut.up }
   });
-  child.on("error", (error) => {
-    console.error("Flowmind could not start sending saved stages: " + error.message);
-    process.exitCode = 1;
+  return "pending";
+}
+async function settleStageMark(sessionId, mark, outcome) {
+  const events = await readEventsAt(sessionFile(sessionId));
+  if (events?.some((e4) => e4.event === "staged" && e4.pendingStageId === mark.pendingStageId && (outcome.state === "accepted" ? e4.state === "accepted" && e4.proposalId === outcome.proposalId : e4.state === outcome.state && e4.reason === outcome.reason))) return;
+  await append(sessionId, {
+    event: "staged",
+    at: mark.at,
+    pendingStageId: mark.pendingStageId,
+    ...outcome,
+    cutAt: mark.cut.at,
+    ...mark.cut.up === null ? {} : { cutUp: mark.cut.up }
   });
-  child.unref();
-  return true;
 }
-
-// src/legacy-proofs.ts
-async function legacyStages() {
-  let names;
+async function resolveSession(explicit, cwd, now = /* @__PURE__ */ new Date()) {
+  if (explicit) return { sessionId: explicit, source: "flag" };
+  const codexThread = process.env.CODEX_THREAD_ID || void 0;
+  if (codexThread && await readEventsAt(sessionFile(codexThread))) return { sessionId: codexThread, source: "codex-env" };
+  const root = await findRepoRoot(cwd);
+  const active = /* @__PURE__ */ new Set();
+  let names = [];
   try {
-    names = await readdir6(legacyOutboxDir());
+    names = await readdir7(sessionsDir());
   } catch (error) {
-    if (error.code === "ENOENT") return { stages: [], unreadable: [] };
-    throw error;
+    if (error.code !== "ENOENT") throw error;
   }
-  const stages = [];
-  const unreadable = [];
-  for (const name of names.filter((entry) => entry.endsWith(".json"))) {
-    const path = join8(legacyOutboxDir(), name);
-    let value = null;
-    try {
-      value = JSON.parse(await readFile6(path, "utf8"));
-    } catch (error) {
-      if (error.code === "ENOENT") continue;
-      if (!(error instanceof SyntaxError)) throw error;
+  for (const name of journalNames(names)) {
+    const path = join8(sessionsDir(), name);
+    if (now.getTime() - await lastWritten(path) > ACTIVE_WINDOW_MS) continue;
+    const events = await readEventsAt(path) ?? [];
+    if (codexThread && events.some((event) => event.event === "subagent" && event.agentId === codexThread)) {
+      const main = events.find(
+        (event) => event.event === "session" || event.event === "start"
+      );
+      if (main) return { sessionId: main.sessionId, source: "subagent" };
     }
-    const stage = readStage(value, name, true);
-    if (stage) stages.push(stage);
-    else unreadable.push(path);
-  }
-  return { stages, unreadable };
-}
-async function moveIntoAccount(stage) {
-  await mkdir5(outboxDir(), { recursive: true, mode: 448 });
-  const target = join8(outboxDir(), stage.id + ".json");
-  const present = await stat3(target).then(
-    () => true,
-    (error) => {
-      if (error.code === "ENOENT") return false;
-      throw error;
+    let last = null;
+    for (const event of events) {
+      if (event.event === "start") last = event;
+      if (event.event === "stop" && event.turnId === last?.turnId) last = null;
     }
-  );
-  if (present)
-    throw new Error("This account already has a reservation for " + stage.id + ". Check Activity before adopting it.");
-  await rename3(join8(legacyOutboxDir(), stage.id + ".json"), target);
-  await writePendingStage({ ...stage, credentialFingerprint: accountBinding().credential });
-}
-async function listUnownedProofs() {
-  const { stages, unreadable } = await legacyStages();
-  const unowned = stages.map((stage) => ({
-    id: stage.id,
-    projectId: stage.input.projectId,
-    durationMinutes: stage.input.durationMinutes,
-    savedAt: stage.savedAt,
-    apiUrl: stage.apiUrl
-  })).sort((a5, b4) => Date.parse(a5.savedAt) - Date.parse(b4.savedAt));
-  return { unowned, unreadable };
-}
-async function findUnowned(id) {
-  if (!/^[a-f0-9]{16}$/.test(id)) throw new Error("No unowned saved proof " + id + ". See: flowmind agent pending");
-  const stage = (await legacyStages()).stages.find((candidate) => candidate.id === id);
-  if (!stage) throw new Error("No unowned saved proof " + id + ". See: flowmind agent pending");
-  return stage;
-}
-async function adoptUnownedProof(id) {
-  const stage = await findUnowned(id);
-  if (stage.apiUrl !== API_URL)
-    throw new Error("Saved proof " + id + " belongs to " + stage.apiUrl + ", not " + API_URL + ".");
-  await moveIntoAccount(stage);
-}
-async function discardUnownedProof(id) {
-  await findUnowned(id);
-  await rm3(join8(legacyOutboxDir(), id + ".json"));
+    if (last?.event === "start" && now.getTime() - Date.parse(last.at) < OPEN_TURN_LIMIT_MS && await findRepoRoot(last.cwd) === root) {
+      active.add(last.sessionId);
+    }
+  }
+  if (active.size > 1) {
+    throw new Error("Several agent sessions have a turn in progress in this repository. Pass --session-id.");
+  }
+  const [only] = active;
+  if (only) return { sessionId: only, source: "active-turn" };
+  return codexThread ? { sessionId: codexThread, source: "codex-env" } : { sessionId: null, source: null };
 }
 
+// src/command-error.ts
+var LIMIT_WORDS = {
+  "projects.active": (limit) => `${limit} active projects`,
+  "logs.personal.month": (limit) => `${limit} personal logs this month`,
+  "logs.agent.month": (limit) => `${limit} agent logs this month`
+};
+var describePlanLimit = ({ limit, limitKey, resetAt }) => {
+  const what = (LIMIT_WORDS[limitKey] ?? ((count) => `${count} of ${limitKey}`))(limit);
+  const frees = resetAt === null ? "Archiving a finished project frees a slot (archiving is final), or upgrade to Pro." : `It resets on ${new Date(resetAt).toLocaleDateString("en-GB", { day: "numeric", month: "long", year: "numeric", timeZone: "UTC" })}, or upgrade to Pro.`;
+  return `Your plan allows ${what}. ${frees} Everything you already logged stays. Upgrade in the Flowmind web app under Settings > Plan.`;
+};
+var printCommandError = (action, error, json = false, extra) => {
+  let diagnostic;
+  if (error instanceof PlanLimitError) {
+    const message = describePlanLimit(error.details);
+    console.error(json ? JSON.stringify({ error: message, code: error.code, ...error.details, ...extra }) : `${terminalText(message)}${extra ? `
+${terminalText(extra.message)}` : ""}`);
+    process.exitCode = 1;
+    return;
+  }
+  if (error instanceof BridgeError) {
+    const context2 = error.context;
+    const schema = `${context2.schemaId ?? "unavailable"}${context2.schemaPath ?? ""}`;
+    diagnostic = `${action} failed: ${error.code} (${context2.kind}); operation=${context2.operation ?? "unavailable"}; stage=${context2.stage ?? "request"}; schema=${schema}; requestId=${context2.requestId ?? "unavailable"}`;
+  } else {
+    diagnostic = `${action} failed: ${error instanceof Error ? error.message : "Unknown error"}`;
+  }
+  if (error instanceof ApiRejectionError) {
+    console.error(json ? JSON.stringify({ error: error.rejectionMessage, diagnostic, ...extra }) : `${terminalText(error.rejectionMessage)}
+Error: ${terminalText(diagnostic)}${extra ? `
+${terminalText(extra.message)}` : ""}`);
+  } else {
+    console.error(json ? JSON.stringify({ error: diagnostic, ...extra }) : `Error: ${terminalText(diagnostic)}${extra ? `
+${terminalText(extra.message)}` : ""}`);
+  }
+  process.exitCode = 1;
+};
+
 // src/commands/agent-stage.ts
 import { createHash as createHash5 } from "node:crypto";
 var trimRequired = (value, field) => {
@@ -4612,7 +4804,7 @@ async function resolveStageOptions(options, cwd, now) {
     recorded = session.sessionId ? await stageTime(session.sessionId, now) : null;
     if (!recorded) {
       throw new Error(
-        "No recorded agent time for this session. Install the session hooks with `flowmind hooks install`, or pass --minutes and --started-at."
+        "No recorded agent time for this session. If the session hooks are not installed, run `flowmind hooks install`; for this session, pass --minutes and --started-at."
       );
     }
     if (recorded.minutes < 1 || recorded.startedAt === null) {
@@ -4785,6 +4977,7 @@ agentCommand.command("stage").description("Stage completed agent work as a proje
     await ensureAccount();
     lock = await takeStageLock();
     if (!lock) throw new Error("Another Flowmind process is staging or sending proofs. Try again when it finishes.");
+    await adoptLegacyStateHeld();
     await restoreSavedStageMarks(options.minutes === void 0 && options.startedAt === void 0);
     const resolved = await resolveStageOptions({ ...stageOptions, detail }, process.cwd(), now);
     if (resolved.kind === "skip") {
@@ -4961,7 +5154,16 @@ agentCommand.command("hook").description('Record agent session time from Codex o
   try {
     if (!getApiKey()) return;
     await ensureAccount();
-    const context2 = await handleHook(options.agent, await readStdin());
+    const pruneWhenFree = async (at2) => {
+      const pruning = await takeStageLock();
+      if (!pruning) return;
+      try {
+        await pruneOldSessions(at2);
+      } finally {
+        await pruning.release();
+      }
+    };
+    const context2 = await handleHook(options.agent, await readStdin(), pruneWhenFree);
     if (context2) process.stdout.write(`${context2}
 `);
     await startDueRetry(/* @__PURE__ */ new Date());
@@ -5219,9 +5421,28 @@ var reviewNaturalLog = async (preview) => {
 
 // src/commands/log.ts
 var FLOW_SESSION_MIN_HOURS = 1.5;
+var HOUR_UNIT = "(?:h|hr|hrs|hour|hours)";
+var MINUTE_UNIT = "(?:m|min|mins|minute|minutes)";
+var HOURS = new RegExp("^(\\d+(?:[.,]\\d+)?|[.,]\\d+)(?:\\s*" + HOUR_UNIT + ")?$");
+var MINUTES = new RegExp("^(\\d+)\\s*" + MINUTE_UNIT + "$");
+var HOURS_AND_MINUTES = new RegExp("^(\\d+)\\s*" + HOUR_UNIT + "\\s*(\\d+)(?:\\s*" + MINUTE_UNIT + ")?$");
+function parseHours(value) {
+  const text2 = value.trim().toLowerCase();
+  let match;
+  let minutes = Number.NaN;
+  if (match = HOURS.exec(text2)) minutes = Number(match[1].replace(",", ".")) * 60;
+  else if (match = MINUTES.exec(text2)) minutes = Number(match[1]);
+  else if (match = HOURS_AND_MINUTES.exec(text2)) minutes = Number(match[1]) * 60 + Number(match[2]);
+  const whole = Math.round(minutes);
+  if (!Number.isSafeInteger(whole) || whole < 1) {
+    throw new InvalidArgumentError2("Give the time as hours or minutes, for example 1.5, 1,5, 2h, 90m or 1h30m.");
+  }
+  return whole / 60;
+}
+var duration = (minutes) => [minutes >= 60 ? Math.floor(minutes / 60) + "h" : "", minutes % 60 ? minutes % 60 + "m" : ""].filter(Boolean).join(" ");
 function printCreated(result) {
   console.log(chalk3.green(`
-\u2713 Logged ${result.hours}h successfully.`));
+\u2713 Logged ${duration(Math.round(result.hours * 60))} successfully.`));
   if (result.xpAwarded !== null) {
     console.log(chalk3.green(`  +${result.xpAwarded} XP earned`));
   }
@@ -5236,16 +5457,7 @@ function printCreatedTimeEntry(result) {
     isFlowSession: result.isFlowSession
   });
 }
-var logCommand = new Command3("log").description("Log time with natural language or explicit project/hours").helpOption("-H, --help", "display help for command").argument("[text]", 'Natural language input, e.g. "worked 2.5h on API"').option("-p, --project <project>", "Project name").option("-h, --hours <hours>", "Hours worked", (value) => {
-  if (!/^(?:\d+(?:\.\d+)?|\.\d+)$/.test(value) || !Number.isFinite(Number(value)) || Number(value) <= 0) {
-    throw new InvalidArgumentError2("Hours must be a positive decimal number, for example 1.5.");
-  }
-  const fraction = (value.split(".")[1] ?? "").replace(/0+$/, "");
-  if (fraction.length > 2 || Number(fraction.padEnd(2, "0")) % 5 !== 0) {
-    throw new InvalidArgumentError2("Hours must resolve to whole minutes.");
-  }
-  return Number(value);
-}).option("--started-at <ISO 8601 date-time>", "Session start with timezone; defaults to save time minus duration").option("-i, --intention <text>", "What the session intended to complete").option("-o, --outcome <text>", "What changed, shipped, or became clear").option("--next <text>", "Private next step saved with this session").option("-a, --artifact-url <url>", "Commit, document, design, or published artifact URL").action(async (text2, options) => {
+var logCommand = new Command3("log").description("Log time with natural language or explicit project/hours").helpOption("-H, --help", "display help for command").argument("[text]", 'Natural language input, e.g. "worked 2.5h on API"').option("-p, --project <project>", "Project name").option("-h, --hours <time>", "Time worked: 1.5, 1,5, 2h, 90m or 1h30m", parseHours).option("--started-at <ISO 8601 date-time>", "Session start with timezone; defaults to save time minus duration").option("-i, --intention <text>", "What the session intended to complete").option("-o, --outcome <text>", "What changed, shipped, or became clear").option("--next <text>", "Private next step saved with this session").option("-a, --artifact-url <url>", "Commit, document, design, or published artifact URL").action(async (text2, options) => {
   const usesStructuredOptions = options.next !== void 0 || options.project !== void 0 || options.hours !== void 0 || options.intention !== void 0 || options.outcome !== void 0 || options.artifactUrl !== void 0 || options.startedAt !== void 0;
   if (text2 && usesStructuredOptions) {
     console.error(chalk3.red("Use either natural language input OR -p/-h options, not both in the same command."));
@@ -5305,7 +5517,7 @@ var logCommand = new Command3("log").description("Log time with natural language
 // src/commands/hooks.ts
 import { createHash as createHash6, randomUUID as randomUUID4 } from "node:crypto";
 import { realpathSync } from "node:fs";
-import { readFile as readFile7, link, lstat, mkdir as mkdir6, rename as rename4, rm as rm4, writeFile as writeFile5 } from "node:fs/promises";
+import { readFile as readFile7, link, lstat, mkdir as mkdir6, rename as rename5, rm as rm4, writeFile as writeFile6 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname3, join as join9 } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -5508,7 +5720,7 @@ async function updateHookFile(agent, action, base) {
   const changed = () => new Error(path + " changed while Flowmind was updating it. Nothing was written; run the command again.");
   const removeFile = agent === "codex" && action === "uninstall" && Object.keys(next).length === 0;
   const temporary = path + "." + randomUUID4() + ".tmp";
-  if (!removeFile) await writeFile5(temporary, serialize(next), { mode: info ? info.mode & 511 : 384, flag: "wx" });
+  if (!removeFile) await writeFile6(temporary, serialize(next), { mode: info ? info.mode & 511 : 384, flag: "wx" });
   try {
     let onDisk;
     try {
@@ -5526,7 +5738,7 @@ async function updateHookFile(agent, action, base) {
         if (error.code === "EEXIST") throw changed();
         throw error;
       }
-    } else await rename4(temporary, path);
+    } else await rename5(temporary, path);
   } finally {
     await rm4(temporary, { force: true });
   }
@@ -5568,10 +5780,10 @@ hooksCommand.command("install").description(
       }
       await mkdir6(dirname3(target.path), { recursive: true });
       if (writeSkill) {
-        await writeFile5(target.path, content, { flag: "w", mode: 420 });
+        await writeFile6(target.path, content, { flag: "w", mode: 420 });
         console.log(terminalLine`Wrote ${target.path}`);
       }
-      await writeFile5(target.markerPath, `${nextHash}
+      await writeFile6(target.markerPath, `${nextHash}
 `, { flag: "w", mode: 420 });
       console.log(terminalLine`Wrote ${target.markerPath}`);
     }
@@ -5678,7 +5890,7 @@ hooksCommand.command("uninstall").description("Remove unmodified Flowmind-manage
 });
 
 // src/commands/link.ts
-import { readdir as readdir7 } from "node:fs/promises";
+import { readdir as readdir8 } from "node:fs/promises";
 import { join as join10, resolve as resolve2 } from "node:path";
 import { Command as Command5, InvalidArgumentError as InvalidArgumentError4 } from "commander";
 import chalk4 from "chalk";
@@ -5696,7 +5908,7 @@ async function findRepositories(dir, depth, found) {
   if (depth === 0) return;
   let entries;
   try {
-    entries = await readdir7(dir, { withFileTypes: true });
+    entries = await readdir8(dir, { withFileTypes: true });
   } catch (error) {
     const code = error.code;
     if (code === "EACCES" || code === "EPERM") return;
@@ -7637,7 +7849,7 @@ for (const [name, description, done] of [
 
 // src/index.ts
 var program = new Command12();
-program.name("flowmind").description("Flowmind CLI (also installed as fm)").version("0.3.8").enablePositionalOptions();
+program.name("flowmind").description("Flowmind CLI (also installed as fm)").version("0.3.9").enablePositionalOptions();
 program.addCommand(agentCommand);
 program.addCommand(authCommand);
 program.addCommand(logCommand);