@gitroll/tacitt-cli 0.2.0 → 0.4.0

package/dist/{src-k0Ya1Bri.mjs → src-CmP73EcD.mjs}

@@ -1,6 +1,6 @@
-import { Bn as validatePlan, Cn as sessionNonce, Dn as entityDictionaryVersion, En as cleanupImplementationVersion, Fn as frameRecords, Gn as detectStatic, H as codePointLength, Hn as defaultLimits, Ht as ApplicationError, In as retainedMainTextNodes, Jn as jsonSpans, Jt as reviewFamilies, Ln as validateProfile, Nn as nativeText, On as nativeParserVersion, Pn as transformRecords, Qt as sourceSnapshotId, Sn as createReplacementKey, Tn as parseNativeRecord, Un as recordPointerLimits, V as bDigest, Wn as resolveLimits, Wt as safeCode, Xn as createEntityMatcher, Xt as sourceKey, Yn as agentContextLocation, an as withMandatoryCustomTerms, c as textDigest, cn as mainReviewRole, dn as renderNative, fn as createSessionPreparation, gn as createDetectionSummary, in as nativeSourceIdentitySchema, ir as isProcessingCode, j as bDuplicateShift, jn as nativeField, k as bBindingCap, kn as redactionImplementationVersion, ln as reviewRoles, nr as ProcessingError, o as reviewDigest, on as processNativeRecord, pn as bindInspection, qt as familySelected, rr as fail$1, sn as projectNativeReviewInput, tr as defaultDetectionLimits, un as createSentenceContext, vn as walkNativeFields, wn as projectNativeRecord, x as createBAnalysisUnits, zn as buildPlan } from "./locate-U3-nkird.mjs";
+import { Bn as validatePlan, Cn as sessionNonce, Dn as entityDictionaryVersion, En as cleanupImplementationVersion, Fn as frameRecords, Gn as detectStatic, H as codePointLength, Hn as defaultLimits, Ht as ApplicationError, In as retainedMainTextNodes, Jn as jsonSpans, Jt as reviewFamilies, Ln as validateProfile, Mn as nativeItems, Nn as nativeText, On as nativeParserVersion, Pn as transformRecords, Qt as sourceSnapshotId, Sn as createReplacementKey, Tn as parseNativeRecord, Un as recordPointerLimits, V as bDigest, Wn as resolveLimits, Wt as safeCode, Xn as createEntityMatcher, Xt as sourceKey, Yn as agentContextLocation, an as withMandatoryCustomTerms, c as textDigest, cn as mainReviewRole, dn as renderNative, fn as createSessionPreparation, gn as createDetectionSummary, in as nativeSourceIdentitySchema, ir as isProcessingCode, j as bDuplicateShift, jn as nativeField, k as bBindingCap, kn as redactionImplementationVersion, ln as reviewRoles, nr as ProcessingError, o as reviewDigest, on as processNativeRecord, pn as bindInspection, qt as familySelected, rr as fail$1, sn as projectNativeReviewInput, tr as defaultDetectionLimits, un as createSentenceContext, vn as walkNativeFields, wn as projectNativeRecord, x as createBAnalysisUnits, zn as buildPlan } from "./locate-U3-nkird.mjs";
 import { t as createZstdFrameCheck } from "./frame-waS5FnN5.mjs";
-import { $r as sourceChangePolicy, It as metadataProcessingVersion, L as sourceIdentityEvidence, Ln as bWordBounded, Nn as bContainment, Pn as bExceptionRanges, R as withSourceEvidence, oi as staticCatalogRef, ot as classifyAgentSetup, pr as resolveSourceSelection, st as defaultAgentSetupInclusion, ti as approvedTreatmentSchema, z as agentSetupKey } from "./src-CC95LYYp.mjs";
+import { An as bContainment, Dt as metadataProcessingVersion, F as withSourceEvidence, I as agentSetupKey, Mr as agentSourceSchema, P as sourceIdentityEvidence, Pn as bWordBounded, ai as sourceChangePolicy, fi as staticCatalogRef, it as defaultAgentSetupInclusion, jn as bExceptionRanges, jr as agentSourcePathSegment, rt as classifyAgentSetup, si as approvedTreatmentSchema, ur as resolveSourceSelection } from "./src-DNn7SifS.mjs";
 import { constants } from "node:fs";
 import { link, lstat, mkdir, open, readFile, readdir, realpath, rm, rmdir, stat, unlink } from "node:fs/promises";
 import { execFile, fork, spawn } from "node:child_process";
@@ -16,6 +16,7 @@ import "node:perf_hooks";
 import { availableParallelism, platform, tmpdir, totalmem } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { constants as constants$1, createZstdDecompress } from "node:zlib";
+import { parse } from "@decimalturn/toml-patch";
 //#region packages/file-privacy/src/windows/descriptor.ts
 const system = "S-1-5-18";
 const administrators = "S-1-5-32-544";
@@ -678,10 +679,16 @@ const chooseFinal = async (directory, start = 0) => {
 	}
 	return fail("ARTIFACT_LIMIT");
 };
-const createTemporary = async (options) => {
+/**
+* `onPath` receives the temporary path before the file exists, so an owner that stops this
+* process mid-call can remove it. On Windows the privacy checks after creation take ACL helper
+* round trips, so a name reported only afterwards could leave an unreported file.
+*/
+const createTemporary = async (options, onPath) => {
 	const directory = await outputDirectory(options);
 	const finalPath = await chooseFinal(directory);
 	const tempPath = join(directory, `.sess-pilot-${randomUUID()}.part`);
+	onPath?.(tempPath);
 	const handle = await openPrivateFile(tempPath, constants.O_CREAT | constants.O_EXCL | constants.O_RDWR | constants.O_NOFOLLOW, 384);
 	try {
 		const value = await handle.stat({ bigint: true });
@@ -729,6 +736,13 @@ const removeSpools = async (directory, temporary) => {
 		else if (!name.endsWith(".parallel") && value.isFile()) await unlink(path);
 	}
 };
+/**
+* Removes the `<temp>.<uuid>.<kind>` spools beside each temporary file a stopped packaging child
+* named (ADR 0228); the child's own cleanup never ran. Other named files are left to their owner.
+*/
+const removeNamedTemporarySpools = async (paths) => {
+	for (const path of paths) if (/\.sess-pilot-[a-f0-9-]{36}\.part$/.test(basename(path))) await removeSpools(dirname(path), { tempPath: path });
+};
 //#endregion
 //#region packages/artifact/src/file/reader.ts
 var FileReader = class extends Reader {
@@ -818,9 +832,9 @@ const readMetadata = async (entry, signal, maximumBytes = metadataLimitBytes) =>
 };
 //#endregion
 //#region packages/artifact/src/manifest/fields.ts
-const isRecord$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-const record = (value) => {
-	if (!isRecord$1(value)) return fail("ARTIFACT_INVALID_MANIFEST");
+const isRecord$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const record$1 = (value) => {
+	if (!isRecord$2(value)) return fail("ARTIFACT_INVALID_MANIFEST");
 	return value;
 };
 const string = (value) => {
@@ -847,7 +861,7 @@ const keys = (value, expected) => {
 //#endregion
 //#region packages/artifact/src/manifest/parse.ts
 const parseCounts = (value) => {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"workspaces",
 		"sessions",
@@ -1073,7 +1087,7 @@ const nativeId = (value) => {
 };
 const nullableId = (value) => value === null ? null : nativeId(value);
 const parsePosition = (value) => {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, ["kind", "value"]);
 	const kind = item["kind"];
 	if (kind === "unknown" && item["value"] === null) return {
@@ -1102,7 +1116,7 @@ const parsePosition = (value) => {
 	return fail("ARTIFACT_INVALID_MANIFEST");
 };
 const parseFork = (value) => {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, ["parentSessionId", "position"]);
 	return {
 		parentSessionId: nativeId(item["parentSessionId"]),
@@ -1111,7 +1125,7 @@ const parseFork = (value) => {
 };
 /** Relationships are explicit native metadata; names never determine roles. */
 const parseNativeIdentity = (value) => {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"role",
 		"sessionId",
@@ -1130,7 +1144,7 @@ const parseNativeIdentity = (value) => {
 	};
 };
 const parseNativeRelation = (value) => {
-	const item = record(value);
+	const item = record$1(value);
 	const kind = item["kind"];
 	if (kind === "call" || kind === "result") {
 		keys(item, ["kind", "callId"]);
@@ -1415,7 +1429,7 @@ function parseWorkspaceConfiguration(input, expectedDigest) {
 /** The talent-platform `challengeIdSchema`; an identifier outside it would fail the upload. */
 const challengeIdPattern = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/;
 const markerLimitBytes = 4096;
-const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const isAbsent = (error) => error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 /** One fixed line; never the path, the file content or the native error message. */
 function ignored(code) {
@@ -1468,7 +1482,7 @@ async function readChallengeId(workspacePath, signal) {
 	} catch {
 		return ignored("CHALLENGE_MARKER_INVALID");
 	}
-	if (!isRecord(marker)) return ignored("CHALLENGE_MARKER_INVALID");
+	if (!isRecord$1(marker)) return ignored("CHALLENGE_MARKER_INVALID");
 	const challengeId = marker["challengeId"];
 	return marker["version"] === 1 && typeof challengeId === "string" && challengeIdPattern.test(challengeId) ? challengeId : ignored("CHALLENGE_MARKER_INVALID");
 }
@@ -1477,7 +1491,7 @@ async function readChallengeId(workspacePath, signal) {
 const uuid$3 = /^[a-f0-9]{8}-(?:[a-f0-9]{4}-){3}[a-f0-9]{12}$/;
 const digest$6 = /^[a-f0-9]{64}$/;
 function parseConfiguredWork(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"id",
 		"metadataPath",
@@ -1493,7 +1507,7 @@ function parseConfiguredWork(value) {
 	};
 }
 function parseConfiguredSourceWorkspace(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"id",
 		"metadataPath",
@@ -1513,7 +1527,7 @@ function parseConfiguredSourceWorkspace(value) {
 	};
 }
 function parseConfiguredWorkMetadata(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"version",
 		"id",
@@ -1532,7 +1546,7 @@ function parseConfiguredWorkMetadata(value) {
 }
 /** Physical hashes are never synthesized from a logical Work identity. */
 function validateConfiguredSourceMetadata(value, expected) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"version",
 		"title",
@@ -1563,7 +1577,7 @@ function digestString(value) {
 	return result;
 }
 function parseConfiguredEntry(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"entryPath",
 		"kind",
@@ -1584,7 +1598,7 @@ function parseConfiguredEntry(value) {
 	};
 }
 function parseConfiguredPart(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"id",
 		"sourceId",
@@ -1596,7 +1610,7 @@ function parseConfiguredPart(value) {
 		"retainedRecordCount",
 		"equivalence"
 	]);
-	const source = record(item["source"]);
+	const source = record$1(item["source"]);
 	keys(source, [
 		"representation",
 		"byteLength",
@@ -1621,7 +1635,7 @@ function parseConfiguredPart(value) {
 	};
 }
 function session$1(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"id",
 		"workspaceId",
@@ -1644,7 +1658,7 @@ function session$1(value) {
 	};
 }
 function exclusion$1(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"sessionId",
 		"sourceId",
@@ -1659,7 +1673,7 @@ function exclusion$1(value) {
 	};
 }
 function parseConfiguredManifest(text) {
-	const item = record(strictJson(text, manifestLimitBytes, manifestNodeLimit));
+	const item = record$1(strictJson(text, manifestLimitBytes, manifestNodeLimit));
 	keys(item, [
 		"format",
 		"formatVersion",
@@ -1686,11 +1700,11 @@ function parseConfiguredManifest(text) {
 	]);
 	const challengeId = item["challengeId"] === void 0 ? null : string(item["challengeId"]);
 	if (challengeId !== null && !challengeIdPattern.test(challengeId)) fail("ARTIFACT_INVALID_MANIFEST");
-	const producer = record(item["producer"]);
+	const producer = record$1(item["producer"]);
 	keys(producer, ["name", "version"]);
-	const adapters = record(item["adapterVersions"]);
+	const adapters = record$1(item["adapterVersions"]);
 	keys(adapters, ["claude", "codex"]);
-	const setup = record(item["agentSetup"]);
+	const setup = record$1(item["agentSetup"]);
 	keys(setup, ["version", "files"]);
 	const configurationDigest = digestString(item["configurationDigest"]);
 	return {
@@ -1717,7 +1731,7 @@ function parseConfiguredManifest(text) {
 		configurationDigest,
 		configuration: parseWorkspaceConfiguration(item["configuration"], configurationDigest),
 		sourceScope: array(item["sourceScope"], (value) => {
-			const source = record(value);
+			const source = record$1(value);
 			keys(source, ["sessionId", "sourceId"]);
 			return {
 				sessionId: string(source["sessionId"]),
@@ -1729,7 +1743,7 @@ function parseConfiguredManifest(text) {
 		agentSetup: {
 			version: literal(setup["version"], 1),
 			files: array(setup["files"], (value) => {
-				const file = record(value);
+				const file = record$1(value);
 				keys(file, [
 					"id",
 					"category",
@@ -1845,7 +1859,7 @@ const digestPattern = /^[a-f0-9]{64}$/;
 const sessionIdPattern = /^s[0-9]{6}$/;
 const sourceIdPattern = /^src[0-9]{6}$/;
 function description(value) {
-	const item = record(value);
+	const item = record$1(value);
 	const kind = item["kind"];
 	const representation = item["representation"];
 	if (kind !== "data" && kind !== "facts" && kind !== "metadata" && kind !== "agent-setup" || representation !== "json" && representation !== "jsonl" && representation !== "jsonl.zst") return fail("ARTIFACT_INVALID_MANIFEST");
@@ -1861,16 +1875,16 @@ function description(value) {
 	};
 }
 function checkWorkspaceManifest(text, entries, bundleId, expectedPathHash, summary) {
-	const manifest = record(strictJson(text, manifestLimitBytes, manifestNodeLimit));
+	const manifest = record$1(strictJson(text, manifestLimitBytes, manifestNodeLimit));
 	const treatment = manifest["contentTreatment"];
 	const configured = treatment === "configured";
 	const configuredManifest = configured ? parseConfiguredManifest(text) : null;
 	if (configuredManifest) validateConfiguredManifest(configuredManifest);
-	const sourceWorkspaces = configuredManifest?.sourceWorkspaces ?? [record(manifest["workspace"])];
+	const sourceWorkspaces = configuredManifest?.sourceWorkspaces ?? [record$1(manifest["workspace"])];
 	const workspaceIds = new Set(sourceWorkspaces.map((workspace) => string(workspace["id"])));
 	if (literal(manifest["format"], "sess-pilot-workspace-bundle") !== "sess-pilot-workspace-bundle" || manifest["formatVersion"] !== (configured ? 5 : 3) || string(manifest["bundleId"]) !== bundleId || summary.bundleId !== bundleId || treatment !== "original" && treatment !== "legacy-plan" && treatment !== "configured") fail("ARTIFACT_INVALID_MANIFEST");
 	if (!configured) {
-		const workspace = record(manifest["workspace"]);
+		const workspace = record$1(manifest["workspace"]);
 		keys(workspace, [
 			"id",
 			"metadataPath",
@@ -1880,7 +1894,7 @@ function checkWorkspaceManifest(text, entries, bundleId, expectedPathHash, summa
 		if (workspace["id"] !== "w000001" || pathHash !== null && !digestPattern.test(pathHash) || pathHash !== expectedPathHash || workspace["metadataPath"] !== "workspace/metadata.json") fail("ARTIFACT_INVALID_MANIFEST");
 	} else if ((sourceWorkspaces.length === 1 ? sourceWorkspaces[0]?.["pathHash"] : null) !== expectedPathHash) fail("ARTIFACT_INVALID_MANIFEST");
 	const counts = parseCounts(manifest["counts"]);
-	const sessions = array(manifest["sessions"], record);
+	const sessions = array(manifest["sessions"], record$1);
 	if (counts.workspaces !== sourceWorkspaces.length || sessions.length === 0 || sessions.length !== summary.sessions.length || !countsEqual(counts, summary.counts)) fail("ARTIFACT_INVALID_MANIFEST");
 	const descriptions = /* @__PURE__ */ new Map();
 	for (const item of array(manifest["entries"], description)) {
@@ -1899,10 +1913,10 @@ function checkWorkspaceManifest(text, entries, bundleId, expectedPathHash, summa
 		for (const workspace of configuredManifest.sourceWorkspaces) requireEntry(workspace.metadataPath, "metadata", "json");
 	} else requireEntry("workspace/metadata.json", "metadata", "json");
 	if (configured) {
-		const setup = record(manifest["agentSetup"]);
+		const setup = record$1(manifest["agentSetup"]);
 		keys(setup, ["version", "files"]);
 		if (setup["version"] !== 1) fail("ARTIFACT_INVALID_MANIFEST");
-		for (const [index, value] of array(setup["files"], record).entries()) {
+		for (const [index, value] of array(setup["files"], record$1).entries()) {
 			keys(value, [
 				"id",
 				"category",
@@ -1939,7 +1953,7 @@ function checkWorkspaceManifest(text, entries, bundleId, expectedPathHash, summa
 			if (rawSession["metadataPath"] !== metadataPath) fail("ARTIFACT_INVALID_MANIFEST");
 			requireEntry(metadataPath, "metadata", "json");
 		}
-		const sessionParts = array(rawSession["parts"], record);
+		const sessionParts = array(rawSession["parts"], record$1);
 		if (sessionParts.length === 0 || sessionParts.length !== expected.sources.length) fail("ARTIFACT_INVALID_MANIFEST");
 		for (const [partIndex, part] of sessionParts.entries()) {
 			const source = expected.sources[partIndex] ?? fail("ARTIFACT_INVALID_MANIFEST");
@@ -1949,7 +1963,7 @@ function checkWorkspaceManifest(text, entries, bundleId, expectedPathHash, summa
 			admitted.set(sourceId, id);
 			if (configured) {
 				if (source.native === null || !isDeepStrictEqual(parseNativeIdentity(part["native"]), source.native)) fail("ARTIFACT_INVALID_MANIFEST");
-				const sourceFacts = record(part["source"]);
+				const sourceFacts = record$1(part["source"]);
 				sourceBytes += integer(sourceFacts["byteLength"]);
 				const data = `sessions/${id}/parts/${partId}.jsonl`;
 				const facts = `sessions/${id}/facts/${partId}.jsonl`;
@@ -1964,21 +1978,21 @@ function checkWorkspaceManifest(text, entries, bundleId, expectedPathHash, summa
 				const data = `sessions/${id}/parts/${partId}.${representation}`;
 				if (part["entryPath"] !== data) fail("ARTIFACT_INVALID_MANIFEST");
 				requireEntry(data, "data", representation);
-				sourceBytes += part["source"] === void 0 ? integer(part["byteLength"]) : integer(record(part["source"])["byteLength"]);
+				sourceBytes += part["source"] === void 0 ? integer(part["byteLength"]) : integer(record$1(part["source"])["byteLength"]);
 			}
 			parts++;
 		}
 	}
 	if (parts !== counts.parts || sourceBytes !== counts.sourceBytes || referenced.size !== descriptions.size) fail("ARTIFACT_INVALID_MANIFEST");
 	const scope = /* @__PURE__ */ new Map();
-	for (const item of array(manifest["sourceScope"], record)) {
+	for (const item of array(manifest["sourceScope"], record$1)) {
 		const sourceId = string(item["sourceId"]);
 		const sessionId = string(item["sessionId"]);
 		if (!sourceIdPattern.test(sourceId) || !sessionIdPattern.test(sessionId) || scope.has(sourceId)) fail("ARTIFACT_INVALID_MANIFEST");
 		scope.set(sourceId, sessionId);
 	}
 	const excluded = /* @__PURE__ */ new Set();
-	for (const item of array(manifest["exclusions"], record)) {
+	for (const item of array(manifest["exclusions"], record$1)) {
 		const sourceId = string(item["sourceId"]);
 		if (scope.get(sourceId) !== item["sessionId"] || excluded.has(sourceId)) fail("ARTIFACT_INVALID_MANIFEST");
 		excluded.add(sourceId);
@@ -2052,7 +2066,7 @@ async function checkWrittenWorkspaceBundle(path, identity, expectedManifestText,
 //#endregion
 //#region packages/artifact/src/collection/companion.ts
 function companionManifest(primaryText, primary, entries) {
-	const manifest = record(strictJson(primaryText, manifestLimitBytes, manifestNodeLimit));
+	const manifest = record$1(strictJson(primaryText, manifestLimitBytes, manifestNodeLimit));
 	if (manifest["formatVersion"] !== 5 || manifest["companionVersion"] !== 3 || manifest["contentTreatment"] !== "configured") return fail("ARTIFACT_INVALID_MANIFEST");
 	return JSON.stringify({
 		format: "sess-pilot-workspace-companion",
@@ -2067,7 +2081,7 @@ function companionManifest(primaryText, primary, entries) {
 	});
 }
 function checkCompanionManifest(text, entries, primaryText, primary) {
-	const value = record(strictJson(text, manifestLimitBytes, manifestNodeLimit));
+	const value = record$1(strictJson(text, manifestLimitBytes, manifestNodeLimit));
 	keys(value, [
 		"format",
 		"formatVersion",
@@ -2079,12 +2093,12 @@ function checkCompanionManifest(text, entries, primaryText, primary) {
 	literal(value["format"], "sess-pilot-workspace-companion");
 	literal(value["formatVersion"], 1);
 	literal(value["companionVersion"], 3);
-	const descriptions = array(value["entries"], record);
-	const expected = record(strictJson(companionManifest(primaryText, primary, descriptions), manifestLimitBytes, manifestNodeLimit));
+	const descriptions = array(value["entries"], record$1);
+	const expected = record$1(strictJson(companionManifest(primaryText, primary, descriptions), manifestLimitBytes, manifestNodeLimit));
 	if (!isDeepStrictEqual(value, expected)) fail("ARTIFACT_INVALID_MANIFEST");
 	const paths = /* @__PURE__ */ new Set();
-	const primaryManifest = record(strictJson(primaryText, manifestLimitBytes, manifestNodeLimit));
-	const parts = array(primaryManifest["sessions"], record).flatMap((session) => array(session["parts"], record));
+	const primaryManifest = record$1(strictJson(primaryText, manifestLimitBytes, manifestNodeLimit));
+	const parts = array(primaryManifest["sessions"], record$1).flatMap((session) => array(session["parts"], record$1));
 	for (const part of parts) {
 		const path = string(part["factsPath"]);
 		if (paths.has(path)) fail("ARTIFACT_INVALID_MANIFEST");
@@ -2208,7 +2222,7 @@ const roles = [
 ];
 const parseRole = (value) => roles.find((role) => role === value) ?? fail("ARTIFACT_INVALID_MANIFEST");
 const parseBody = (value) => {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"bodyId",
 		"fieldId",
@@ -2258,7 +2272,7 @@ function sampleLocations(bodies, fields, locations) {
 	return synthetic;
 }
 const measured$1 = (value, parse) => {
-	const item = record(value);
+	const item = record$1(value);
 	const state = item["state"];
 	keys(item, [
 		"state",
@@ -2282,8 +2296,8 @@ const measured$1 = (value, parse) => {
 	};
 	return fail("ARTIFACT_INVALID_MANIFEST");
 };
-const patch$1 = (value) => {
-	const item = record(value);
+const patch$2 = (value) => {
+	const item = record$1(value);
 	keys(item, [
 		"grammarVersion",
 		"basis",
@@ -2302,7 +2316,7 @@ const patch$1 = (value) => {
 	};
 };
 const parseFacts = (value) => {
-	const item = record(value);
+	const item = record$1(value);
 	const optional = [
 		"decodedUtf8Bytes",
 		"logicalLines",
@@ -2325,7 +2339,7 @@ const parseFacts = (value) => {
 		extractorVersion: literal(item["extractorVersion"], "native-retention-v1"),
 		...Object.hasOwn(item, "decodedUtf8Bytes") ? { decodedUtf8Bytes: measured$1(item["decodedUtf8Bytes"], integer) } : {},
 		...Object.hasOwn(item, "logicalLines") ? { logicalLines: measured$1(item["logicalLines"], integer) } : {},
-		...Object.hasOwn(item, "patchDelta") ? { patchDelta: measured$1(item["patchDelta"], patch$1) } : {}
+		...Object.hasOwn(item, "patchDelta") ? { patchDelta: measured$1(item["patchDelta"], patch$2) } : {}
 	};
 };
 /** IDs address original nodes, never mutable output positions. */
@@ -2630,7 +2644,7 @@ async function verifyConfiguredPart(part, entries, descriptions, signal) {
 //#region packages/artifact/src/read/configured/workspace.ts
 /** Public primary facts are parsed independently; no source file is opened. */
 function workspaceSummary(text) {
-	const manifest = record(parseConfiguredManifest(text));
+	const manifest = record$1(parseConfiguredManifest(text));
 	if (manifest["contentTreatment"] !== "configured" || manifest["formatVersion"] !== 5 || manifest["companionVersion"] !== 3) return fail("ARTIFACT_INVALID_MANIFEST");
 	return {
 		format: "sess-pilot-workspace-summary",
@@ -2638,7 +2652,7 @@ function workspaceSummary(text) {
 		bundleId: string(manifest["bundleId"]),
 		counts: parseCounts(manifest["counts"]),
 		sessions: array(manifest["sessions"], (value) => {
-			const session = record(value);
+			const session = record$1(value);
 			const harness = session["harness"];
 			if (harness !== "claude" && harness !== "codex") return fail("ARTIFACT_INVALID_MANIFEST");
 			return {
@@ -2668,7 +2682,7 @@ async function readPrimaryMetadata(primaryEntries, primaryText, signal, only) {
 		if (description.representation !== "jsonl" && (!only || only.has(description.entryPath))) {
 			const text = await readMetadata(entry, signal);
 			if (createHash("sha256").update(text).digest("hex") !== description.sha256) fail("ARTIFACT_INVALID_ARCHIVE");
-			const metadata = record(strictJson(text, metadataLimitBytes));
+			const metadata = record$1(strictJson(text, metadataLimitBytes));
 			if (description.entryPath === manifest.work.metadataPath) {
 				if (parseConfiguredWorkMetadata(metadata).id !== manifest.work.id) fail("ARTIFACT_INVALID_MANIFEST");
 			}
@@ -2677,7 +2691,7 @@ async function readPrimaryMetadata(primaryEntries, primaryText, signal, only) {
 			if (description.entryPath.startsWith("sessions/")) {
 				keys(metadata, ["version", "session"]);
 				if (metadata["version"] !== 3) fail("ARTIFACT_INVALID_MANIFEST");
-				const session = record(metadata["session"]);
+				const session = record$1(metadata["session"]);
 				keys(session, [
 					"id",
 					"harness",
@@ -2702,11 +2716,11 @@ async function readPrimaryMetadata(primaryEntries, primaryText, signal, only) {
 async function readConfiguredWorkspacePair(primaryEntries, primaryText, companionEntries, companionText, primary, signal, only) {
 	const { summary } = await readPrimaryMetadata(primaryEntries, primaryText, signal, only);
 	checkCompanionManifest(companionText, companionEntries, primaryText, primary);
-	const manifest = record(strictJson(primaryText, manifestLimitBytes, manifestNodeLimit));
-	const companion = record(strictJson(companionText, manifestLimitBytes, manifestNodeLimit));
+	const manifest = record$1(strictJson(primaryText, manifestLimitBytes, manifestNodeLimit));
+	const companion = record$1(strictJson(companionText, manifestLimitBytes, manifestNodeLimit));
 	const descriptions = new Map([...array(manifest["entries"], parseConfiguredEntry), ...array(companion["entries"], parseConfiguredEntry)].map((entry) => [entry.entryPath, entry]));
 	const entries = new Map([...primaryEntries, ...[...companionEntries].filter(([path]) => path !== "manifest.json")]);
-	for (const session of array(manifest["sessions"], record)) for (const part of array(session["parts"], parseConfiguredPart)) if (!only || only.has(part.dataPath)) await verifyConfiguredPart(part, entries, descriptions, signal);
+	for (const session of array(manifest["sessions"], record$1)) for (const part of array(session["parts"], parseConfiguredPart)) if (!only || only.has(part.dataPath)) await verifyConfiguredPart(part, entries, descriptions, signal);
 	return summary;
 }
 //#endregion
@@ -3294,6 +3308,7 @@ async function createSessionArchiveSpool(temporary, signal, options = {}) {
 	checkAbort(signal);
 	const path = options.directory === void 0 ? `${temporary.tempPath}.${randomUUID()}.session` : `${options.directory}/${randomUUID()}.session`;
 	let handle;
+	if (options.keepPath === true) options.onPath?.(path);
 	try {
 		handle = await (options.directory === void 0 ? openPrivateFile : open)(path, constants.O_CREAT | constants.O_EXCL | constants.O_RDWR | constants.O_NOFOLLOW, 384);
 		if (options.keepPath !== true) await unlink(path);
@@ -4715,6 +4730,277 @@ function createInspectionProcessor(processing) {
 	} };
 }
 //#endregion
+//#region packages/artifact/src/agent-sources/model.ts
+function isRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function record(value) {
+	return isRecord(value) ? value : {};
+}
+function publicName(value) {
+	return typeof value === "string" && /^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,199}$/.test(value);
+}
+function repository(value) {
+	if (typeof value !== "string") return false;
+	const segments = value.split("/");
+	return segments.length === 2 && segments.every((part) => part.length <= 100 && agentSourcePathSegment(part));
+}
+function repoPath(value) {
+	return value.length <= 500 && value.split("/").every(agentSourcePathSegment);
+}
+//#endregion
+//#region packages/artifact/src/agent-sources/mcp.ts
+/** Only direct npx invocation has npm provenance; never preserve its arguments. */
+function npmPackage(value) {
+	const entry = record(value);
+	if (entry["command"] !== "npx" || entry["url"] !== void 0 || entry["type"] !== void 0 && entry["type"] !== "stdio") return void 0;
+	const args = entry["args"];
+	if (!Array.isArray(args) || !args.every((arg) => typeof arg === "string")) return void 0;
+	if (args.some((arg) => /registry|userconfig/i.test(arg)) || Object.keys(record(entry["env"])).some((key) => /registry|userconfig/i.test(key))) return void 0;
+	let position = 0;
+	while (args[position] === "-y" || args[position] === "--yes" || args[position] === "--no") position++;
+	const candidate = args[position];
+	if (candidate === void 0) return void 0;
+	const name = /^((?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*)(?:@[a-zA-Z0-9][a-zA-Z0-9._~^*-]*)?$/.exec(candidate)?.[1];
+	return name !== void 0 && name.length <= 214 ? name : void 0;
+}
+function mcpCandidates(value, names) {
+	const output = [];
+	for (const [name, entry] of Object.entries(record(value)).slice(0, 500)) {
+		if (!publicName(name) || !names.has(name)) continue;
+		const packageName = npmPackage(entry);
+		if (packageName) output.push({
+			kind: "mcp",
+			name,
+			source: {
+				type: "npm",
+				package: packageName
+			}
+		});
+	}
+	return output;
+}
+//#endregion
+//#region packages/artifact/src/agent-sources/read.ts
+/** Optional enrichment treats missing, malformed and unreadable config as omissions. */
+async function readText(path) {
+	try {
+		const file = await open(path, constants.O_RDONLY | constants.O_NONBLOCK);
+		try {
+			const info = await file.stat();
+			if (!info.isFile() || info.size > 1048576) return void 0;
+			const buffer = Buffer.alloc(1048577);
+			const { bytesRead } = await file.read(buffer, 0, buffer.length, 0);
+			return bytesRead <= 1048576 ? buffer.subarray(0, bytesRead).toString("utf8") : void 0;
+		} finally {
+			await file.close();
+		}
+	} catch {
+		return;
+	}
+}
+async function readJson(path) {
+	const text = await readText(path);
+	if (text === void 0) return void 0;
+	try {
+		return JSON.parse(text);
+	} catch {
+		return;
+	}
+}
+//#endregion
+//#region packages/artifact/src/agent-sources/plugins.ts
+async function skillsAt(root) {
+	try {
+		const entries = await readdir(join(root, "skills"), { withFileTypes: true });
+		const result = [];
+		for (const entry of entries.slice(0, 500)) {
+			if (!entry.isDirectory() || !repoPath(entry.name)) continue;
+			const path = `skills/${entry.name}/SKILL.md`;
+			const text = await readText(join(root, path));
+			const frontmatter = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(text ?? "")?.[1];
+			const name = /^name:\s*["']?([a-zA-Z0-9][a-zA-Z0-9_.:-]*)["']?\s*$/m.exec(frontmatter ?? "")?.[1];
+			if (name && publicName(name)) result.push({
+				name,
+				path
+			});
+		}
+		return result;
+	} catch {
+		return [];
+	}
+}
+async function pluginCandidates(home, workspacePath, skills, mcps) {
+	const base = join(home, ".claude", "plugins");
+	const installed = record(record(await readJson(join(base, "installed_plugins.json")))["plugins"]);
+	const marketplaces = record(await readJson(join(base, "known_marketplaces.json")));
+	const personalAndProject = new Set((await Promise.all([skillsAt(join(home, ".claude")), skillsAt(join(workspacePath, ".claude"))])).flat().map((skill) => skill.name));
+	const definitions = /* @__PURE__ */ new Map();
+	const bareCandidates = /* @__PURE__ */ new Set();
+	const output = [];
+	for (const [key, entries] of Object.entries(installed).slice(0, 128)) {
+		const [plugin, marketplace, extra] = key.split("@");
+		if (!plugin || !marketplace || extra !== void 0 || !publicName(plugin)) continue;
+		const market = record(marketplaces[marketplace]);
+		const marketSource = record(market["source"]);
+		const location = market["installLocation"];
+		const catalog = typeof location === "string" ? record(await readJson(join(location, ".claude-plugin", "marketplace.json")))["plugins"] : void 0;
+		const catalogEntry = Array.isArray(catalog) ? catalog.find((item) => record(item)["name"] === plugin) : void 0;
+		const descriptor = record(catalogEntry);
+		const source = record(descriptor["source"]);
+		const relativeSource = descriptor["source"];
+		const prefix = typeof relativeSource === "string" && relativeSource.startsWith("./") && repoPath(relativeSource.slice(2)) ? relativeSource.slice(2) : void 0;
+		const repo = source["source"] === "github" ? source["repo"] : catalogEntry !== void 0 && (relativeSource === void 0 || prefix !== void 0) && (marketSource["source"] === void 0 || marketSource["source"] === "github") ? marketSource["repo"] : void 0;
+		if (!Array.isArray(entries)) continue;
+		const rank = (value) => {
+			const entry = record(value);
+			const scope = entry["scope"];
+			if (scope === "local" || scope === "project") {
+				const projectPath = entry["projectPath"];
+				if (typeof projectPath !== "string" || resolve(projectPath) !== resolve(workspacePath)) return -1;
+				return scope === "local" ? 3 : 2;
+			}
+			return scope === void 0 || scope === "user" ? 1 : -1;
+		};
+		const selected = entries.slice(0, 8).filter((entry) => rank(entry) >= 0).sort((left, right) => rank(right) - rank(left)).slice(0, 1);
+		for (const raw of selected) {
+			const entry = record(raw);
+			const root = entry["installPath"];
+			if (typeof root !== "string") continue;
+			const pluginMcp = record(await readJson(join(root, ".mcp.json")));
+			const servers = record(pluginMcp["mcpServers"] ?? pluginMcp);
+			output.push(...mcpCandidates(servers, mcps));
+			for (const [server, configuration] of Object.entries(servers).slice(0, 500)) {
+				const alias = `plugin_${plugin}_${server}`;
+				if (mcps.has(alias)) output.push(...mcpCandidates({ [alias]: configuration }, mcps));
+			}
+			const directSource = record(entry["source"]);
+			const candidateRepo = directSource["source"] === "github" ? directSource["repo"] : entry["source"] === void 0 ? repo : void 0;
+			const installedSkills = await skillsAt(root);
+			for (const skill of installedSkills) {
+				const owners = definitions.get(skill.name) ?? /* @__PURE__ */ new Set();
+				owners.add(key);
+				definitions.set(skill.name, owners);
+			}
+			if (!repository(candidateRepo)) continue;
+			const commit = entry["gitCommitSha"];
+			for (const skill of installedSkills) for (const name of [`${plugin}:${skill.name}`, skill.name]) {
+				if (!skills.has(name)) continue;
+				const path = directSource["source"] === "github" || source["source"] === "github" ? skill.path : prefix ? `${prefix}/${skill.path}` : void 0;
+				const candidate = {
+					kind: "skill",
+					name,
+					source: {
+						type: "github",
+						repo: candidateRepo,
+						...path === void 0 ? {} : { path },
+						...typeof commit === "string" && /^[a-fA-F0-9]{40}$/.test(commit) ? { commit } : {}
+					}
+				};
+				output.push(candidate);
+				if (name === skill.name) bareCandidates.add(candidate);
+			}
+		}
+	}
+	return output.filter((item) => !bareCandidates.has(item) || definitions.get(item.name)?.size === 1 && !personalAndProject.has(item.name)).slice(0, 500);
+}
+//#endregion
+//#region packages/artifact/src/agent-sources/index.ts
+/** Collection-time candidates stay local until anonymous upload-time admission. */
+async function collectAgentSourceCandidates(options) {
+	const skills = new Set(options.skills.slice(0, 500));
+	const mcps = new Set(options.mcps.slice(0, 500));
+	if (skills.size === 0 && mcps.size === 0) return [];
+	const output = [];
+	if (options.harness !== "codex") {
+		const user = record(await readJson(join(options.userHome, ".claude.json")));
+		const project = record(await readJson(join(options.workspacePath, ".mcp.json")));
+		const local = record(record(user["projects"])[options.workspacePath]);
+		const servers = {
+			...record(user["mcpServers"]),
+			...record(project["mcpServers"]),
+			...record(local["mcpServers"])
+		};
+		const plugins = await pluginCandidates(options.userHome, options.workspacePath, skills, mcps);
+		output.push(...plugins.filter((item) => item.kind !== "mcp" || !(item.name in servers)));
+		output.push(...mcpCandidates(servers, mcps));
+	}
+	const toml = options.harness === "claude" ? void 0 : await readText(join(options.userHome, ".codex", "config.toml"));
+	if (toml !== void 0) try {
+		output.push(...mcpCandidates(record(parse(toml))["mcp_servers"], mcps));
+	} catch {}
+	const customRegistry = (await Promise.all([readText(join(options.workspacePath, ".npmrc")), readText(join(options.userHome, ".npmrc"))])).some((text) => text?.split(/\r?\n/u).some((line) => /^\s*(?:@[^:=\s]+:)?registry\s*=/iu.test(line)));
+	const privateTerms = [basename(options.userHome), ...options.customTerms ?? []].map((term) => term.normalize("NFC").toLowerCase()).filter(Boolean);
+	const admitted = output.filter((item) => !(customRegistry && item.source.type === "npm") && ![item.name, ...item.source.type === "github" ? [item.source.repo, item.source.path ?? ""] : [item.source.package]].some((value) => privateTerms.some((term) => value.normalize("NFC").toLowerCase().includes(term))));
+	return [...new Map(admitted.map((item) => [`${item.kind}:${item.name}`, item])).values()].slice(0, 500);
+}
+//#endregion
+//#region packages/artifact/src/configured/session/agent-sources.ts
+/** Recognized call positions only: arbitrary prose and tool results never establish usage. */
+function createAgentSourceCollector(harness) {
+	const skills = /* @__PURE__ */ new Set();
+	const mcps = /* @__PURE__ */ new Set();
+	const add = (set, name) => {
+		if (name && set.size < 500 && /^[A-Za-z0-9_][A-Za-z0-9_.:-]{0,199}$/u.test(name)) set.add(name);
+	};
+	const mcp = (name) => {
+		if (!name?.startsWith("mcp__")) return;
+		const server = name.slice(5).split("__")[0];
+		if (server && /^[A-Za-z0-9_-]+$/u.test(server)) add(mcps, server);
+	};
+	return {
+		add(root) {
+			const type = nativeText(nativeField(root, "type"));
+			if (harness === "claude" && type === "assistant") {
+				const message = nativeField(root, "message");
+				const role = nativeText(nativeField(message, "role"));
+				if (role !== void 0 && role !== "assistant") return;
+				for (const item of nativeItems(nativeField(message, "content"))) {
+					if (nativeText(nativeField(item, "type")) !== "tool_use") continue;
+					const name = nativeText(nativeField(item, "name"));
+					if (name === "Skill") add(skills, nativeText(nativeField(nativeField(item, "input"), "skill")));
+					else mcp(name);
+				}
+			}
+			if (harness === "codex") {
+				const payload = nativeField(root, "payload");
+				const payloadType = nativeText(nativeField(payload, "type"));
+				if (type === "response_item" && payloadType === "function_call") {
+					mcp(nativeText(nativeField(payload, "name")));
+					mcp(nativeText(nativeField(payload, "namespace")));
+				}
+				if (type === "event_msg" && payloadType === "mcp_tool_call_begin") add(mcps, nativeText(nativeField(nativeField(payload, "invocation"), "server")));
+			}
+		},
+		names: () => ({
+			skills: [...skills],
+			mcps: [...mcps]
+		})
+	};
+}
+async function collectSessionAgentSources(request, names) {
+	const userHome = request.processing.environment.userHome;
+	if (!userHome || !request.workspace.path || names.skills.length === 0 && names.mcps.length === 0) return [];
+	try {
+		const candidates = await collectAgentSourceCandidates({
+			userHome,
+			harness: request.session.harness,
+			customTerms: request.processing.customTerms?.terms ?? [],
+			workspacePath: request.workspace.path,
+			...names
+		});
+		const items = [];
+		for (const candidate of candidates) {
+			const parsed = agentSourceSchema.safeParse(candidate);
+			if (parsed.success) items.push(parsed.data);
+		}
+		return items.slice(0, 500);
+	} catch {
+		console.error("AGENT_SOURCES_COLLECTION_UNAVAILABLE");
+		return [];
+	}
+}
+//#endregion
 //#region packages/artifact/src/configured/masks/text.ts
 /** Generated title input is local metadata, not an asserted location inside a captured native row. */
 function titleMasks(input, output) {
@@ -4914,8 +5200,12 @@ async function prepareConfiguredSession(request) {
 		const metadata = metadataRoot(request, owner.limits);
 		const gitIdentity = await prepareGit(request, owner.signal, owner.preparation);
 		const agentSetup = request.collectAgentSetup ? createAgentSetupCollector(request) : void 0;
+		const agentSources = request.collectAgentSetup ? createAgentSourceCollector(request.session.harness) : void 0;
 		let images = 0;
-		const snapshots = await prepareSources(request, owner, metadata, agentSetup?.add, (count) => {
+		const snapshots = await prepareSources(request, owner, metadata, (root) => {
+			agentSetup?.add(root);
+			agentSources?.add(root);
+		}, (count) => {
 			images += count;
 		});
 		owner.seal();
@@ -4982,6 +5272,7 @@ async function prepareConfiguredSession(request) {
 						...processedMetadata.masks === void 0 ? {} : { metadataMasks: processedMetadata.masks },
 						sources: Object.freeze(sources),
 						agentSetup: Object.freeze(setup),
+						...agentSources ? { agentSources: await collectSessionAgentSources(request, agentSources.names()) } : {},
 						images
 					});
 					await owner.close();
@@ -5005,10 +5296,10 @@ async function prepareConfiguredSession(request) {
 //#region packages/artifact/src/collection/producer/session-metadata.ts
 /** Validate the session-only shape already projected before configured processing. */
 function sessionMetadata(metadata) {
-	const root = record(strictJson(metadata, metadataLimitBytes));
+	const root = record$1(strictJson(metadata, metadataLimitBytes));
 	keys(root, ["version", "session"]);
 	literal(root["version"], 3);
-	const session = record(root["session"]);
+	const session = record$1(root["session"]);
 	const compact = JSON.stringify({
 		version: 3,
 		session
@@ -5615,7 +5906,7 @@ function boundedHash(value) {
 	return result;
 }
 function parseIdentityMap(value) {
-	const input = record(value);
+	const input = record$1(value);
 	keys(input, [
 		"format",
 		"formatVersion",
@@ -5624,7 +5915,7 @@ function parseIdentityMap(value) {
 	]);
 	const bundleId = string(input["bundleId"]);
 	validBundleId(bundleId);
-	const workspace = record(input["workspace"]);
+	const workspace = record$1(input["workspace"]);
 	keys(workspace, [
 		"path",
 		"pathHash",
@@ -5638,7 +5929,7 @@ function parseIdentityMap(value) {
 	if (!Array.isArray(rawRemotes)) return fail("ARTIFACT_INVALID_MANIFEST");
 	if (rawRemotes.length > maximumRemotes) fail("ARTIFACT_METADATA_LIMIT");
 	const remotes = rawRemotes.map((entry) => {
-		const remote = record(entry);
+		const remote = record$1(entry);
 		keys(remote, ["url", "hash"]);
 		return {
 			url: boundedLocator(remote["url"]),
@@ -6345,7 +6636,7 @@ const pointer$3 = (value) => {
 	return text;
 };
 const range$2 = (value) => {
-	const v = record(value);
+	const v = record$1(value);
 	keys(v, ["start", "end"]);
 	const start = integer(v["start"]), end = integer(v["end"]);
 	if (end <= start) fail("ARTIFACT_INVALID_MANIFEST");
@@ -6371,7 +6662,7 @@ function rowRanges(value, fields) {
 	});
 }
 function mask(value) {
-	const v = record(value);
+	const v = record$1(value);
 	keys(v, [
 		"inputRange",
 		"outputRange",
@@ -6380,9 +6671,9 @@ function mask(value) {
 		"node",
 		"ruleId"
 	]);
-	const node = record(v["node"]);
+	const node = record$1(v["node"]);
 	keys(node, ["id", "version"]);
-	const output = record(v["outputRange"]);
+	const output = record$1(v["outputRange"]);
 	keys(output, ["start", "end"]);
 	const start = integer(output["start"]), end = integer(output["end"]);
 	const replacement = string(v["replacement"]);
@@ -6403,7 +6694,7 @@ function mask(value) {
 	};
 }
 function field(value) {
-	const v = record(value);
+	const v = record$1(value);
 	keys(v, [
 		"pointer",
 		"cleanedPointer",
@@ -6446,7 +6737,7 @@ function field(value) {
 	return result;
 }
 function parsePrivateReviewRow(text) {
-	const v = record(strictJson(text, 67108864));
+	const v = record$1(strictJson(text, 67108864));
 	keys(v, [
 		"entryPath",
 		"recordIndex",
@@ -6472,7 +6763,7 @@ function parsePrivateReviewRow(text) {
 	};
 }
 function parsePrivateReviewManifest(text, entries, primary) {
-	const v = record(strictJson(text, manifestLimitBytes, manifestNodeLimit));
+	const v = record$1(strictJson(text, manifestLimitBytes, manifestNodeLimit));
 	keys(v, [
 		"format",
 		"version",
@@ -6482,11 +6773,11 @@ function parsePrivateReviewManifest(text, entries, primary) {
 		"entries",
 		"rows"
 	]);
-	const bound = record(v["primary"]);
+	const bound = record$1(v["primary"]);
 	keys(bound, ["sha256", "archiveBytes"]);
 	if (v["bundleId"] !== primary.manifest.bundleId || v["workId"] !== primary.manifest.work.id || bound["sha256"] !== primary.sha256 || bound["archiveBytes"] !== primary.archiveBytes) fail("ARTIFACT_PROCESSING_MISMATCH");
 	const descriptions = array(v["entries"], (value) => {
-		const e = record(value);
+		const e = record$1(value);
 		keys(e, [
 			"entryPath",
 			"kind",
@@ -7713,7 +8004,7 @@ function createMaskContexts() {
 		/** Resolves a stored context of the next row read; a reference must name an earlier one. */
 		read(row, inputSha256, value) {
 			enter(row);
-			const data = record(value);
+			const data = record$1(value);
 			const start = integer(data["start"]);
 			if (!Object.hasOwn(data, "text")) {
 				keys(data, ["start", "end"]);
@@ -7741,7 +8032,7 @@ const hash$3 = (value) => {
 	return text;
 };
 const range$1 = (value) => {
-	const data = record(value);
+	const data = record$1(value);
 	keys(data, ["start", "end"]);
 	const start = integer(data["start"]);
 	const end = integer(data["end"]);
@@ -7758,7 +8049,7 @@ const pointer$2 = (value) => {
 };
 /** Parses one row in ledger order; `contexts` resolves context references (ADR 0084). */
 function parsePrivateMaskRow(text, contexts) {
-	const row = record(strictJson(text, 33554432));
+	const row = record$1(strictJson(text, 33554432));
 	keys(row, [
 		"entryPath",
 		"recordIndex",
@@ -7767,7 +8058,7 @@ function parsePrivateMaskRow(text, contexts) {
 		"archiveSessionId",
 		"mask"
 	]);
-	const item = record(row["mask"]);
+	const item = record$1(row["mask"]);
 	keys(item, [
 		"inputRange",
 		"outputRange",
@@ -7784,7 +8075,7 @@ function parsePrivateMaskRow(text, contexts) {
 		"outputSha256",
 		"context"
 	]);
-	const node = record(item["node"]);
+	const node = record$1(item["node"]);
 	keys(node, ["id", "version"]);
 	const entryPath = string(row["entryPath"]);
 	const recordIndex = integer(row["recordIndex"]);
@@ -7829,7 +8120,7 @@ function parsePrivateMaskRow(text, contexts) {
 	};
 }
 function parsePrivateMaskManifest(text, entries, primary) {
-	const data = record(strictJson(text, manifestLimitBytes, manifestNodeLimit));
+	const data = record$1(strictJson(text, manifestLimitBytes, manifestNodeLimit));
 	keys(data, [
 		"format",
 		"version",
@@ -7840,11 +8131,11 @@ function parsePrivateMaskManifest(text, entries, primary) {
 		"entries",
 		"rows"
 	]);
-	const binding = record(data["primary"]);
+	const binding = record$1(data["primary"]);
 	keys(binding, ["sha256", "archiveBytes"]);
 	if (data["bundleId"] !== primary.manifest.bundleId || data["workId"] !== primary.manifest.work.id || binding["sha256"] !== primary.sha256 || binding["archiveBytes"] !== primary.archiveBytes) return fail("ARTIFACT_PROCESSING_MISMATCH");
 	const descriptions = array(data["entries"], (value) => {
-		const entry = record(value);
+		const entry = record$1(value);
 		keys(entry, [
 			"entryPath",
 			"kind",
@@ -7911,7 +8202,7 @@ function maskHash(value) {
 	return text;
 }
 function maskRange(value) {
-	const data = record(value);
+	const data = record$1(value);
 	keys(data, ["start", "end"]);
 	const result = {
 		start: integer(data["start"]),
@@ -7926,7 +8217,7 @@ function pointer$1(value) {
 	return text;
 }
 function semantic(value, scope, contexts) {
-	const data = record(value);
+	const data = record$1(value);
 	keys(data, [
 		"pointer",
 		"inputSha256",
@@ -7953,7 +8244,7 @@ function semantic(value, scope, contexts) {
 }
 /** Parses one row in ledger order; `contexts` resolves static context references (ADR 0084). */
 function parseFinalMaskRow(text, contexts) {
-	const data = record(strictJson(text, 33554432));
+	const data = record$1(strictJson(text, 33554432));
 	keys(data, [
 		"entryPath",
 		"recordIndex",
@@ -7968,7 +8259,7 @@ function parseFinalMaskRow(text, contexts) {
 	const subject = data["subject"];
 	if (subject !== "key" && subject !== "value") return fail("ARTIFACT_INVALID_MANIFEST");
 	const contributors = array(data["contributors"], (value) => {
-		const item = record(value);
+		const item = record$1(value);
 		keys(item, [
 			"id",
 			"kind",
@@ -8017,7 +8308,7 @@ function parseFinalMaskRow(text, contexts) {
 //#endregion
 //#region packages/artifact/src/configured/masks/final/manifest.ts
 function categories(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"identity",
 		"credentials",
@@ -8032,7 +8323,7 @@ function categories(value) {
 	};
 }
 function maskSummary(value) {
-	const data = record(value);
+	const data = record$1(value);
 	keys(data, [
 		"occurrences",
 		"contributors",
@@ -8050,7 +8341,7 @@ function maskSummariesEqual(a, b) {
 	return a.occurrences === b.occurrences && a.contributors === b.contributors && a.categories.identity === b.categories.identity && a.categories.credentials === b.categories.credentials && a.categories.internal === b.categories.internal && a.categories.private === b.categories.private;
 }
 function parseFinalMaskManifest(text, entries, primary) {
-	const data = record(strictJson(text, manifestLimitBytes, manifestNodeLimit));
+	const data = record$1(strictJson(text, manifestLimitBytes, manifestNodeLimit));
 	keys(data, [
 		"format",
 		"version",
@@ -8064,13 +8355,13 @@ function parseFinalMaskManifest(text, entries, primary) {
 		"entries",
 		"summary"
 	]);
-	const binding = record(data["primary"]);
+	const binding = record$1(data["primary"]);
 	keys(binding, ["sha256", "archiveBytes"]);
 	if (data["bundleId"] !== primary.manifest.bundleId || data["workId"] !== primary.manifest.work.id || binding["sha256"] !== primary.sha256 || binding["archiveBytes"] !== primary.archiveBytes) fail("ARTIFACT_PROCESSING_MISMATCH");
 	const expected = new Set(primary.manifest.entries.map((entry) => `${entry.entryPath}.masks.jsonl`));
 	let total = emptyMaskSummary();
 	const descriptions = array(data["entries"], (value) => {
-		const row = record(value);
+		const row = record$1(value);
 		keys(row, [
 			"entryPath",
 			"kind",
@@ -8936,7 +9227,7 @@ async function rewriteConfiguredOutput(request, handle, signal = new AbortContro
 			archiveBytes: primaryResult.archiveBytes
 		};
 		const finalMaskLedger = await masks?.finish(changed, finalPrimary, { rows: request.shards === void 0 });
-		const companionValue = record(strictJson(companion.manifestText, manifestLimitBytes, manifestNodeLimit));
+		const companionValue = record$1(strictJson(companion.manifestText, manifestLimitBytes, manifestNodeLimit));
 		const companionEntries = [];
 		for (const description of array(companionValue["entries"], parseConfiguredEntry)) {
 			const entry = companion.entries.get(description.entryPath) ?? fail("ARTIFACT_INVALID_ARCHIVE");
@@ -8996,17 +9287,16 @@ async function privateJourneyDirectory(path) {
 //#region packages/artifact/src/configured/journey/output.ts
 /**
 * The same checked private publication used for bases, with a fresh immutable output ID.
-* `onPath` names each file this call may leave behind: a temporary file once created, a published
-* one before it is linked, so a packaging worker's owner can remove them when it stops the worker
-* mid-write (ADR 0181).
+* `onPath` names each file this call may leave behind: a temporary file before it is created, a
+* published one before it is linked, so a packaging worker's owner can remove them when it stops
+* the worker mid-write (ADR 0181).
 */
 async function writeLogicalJourneyOutput(request, signal, onPath) {
 	const directory = await privateJourneyDirectory(request.directory);
 	const primary = await createTemporary({
 		outputDir: directory,
 		keepTemp: false
-	});
-	onPath?.(primary.temporary.tempPath);
+	}, onPath);
 	let companion;
 	let masks;
 	const cleanup = createCleanup(), linked = [];
@@ -9016,15 +9306,11 @@ async function writeLogicalJourneyOutput(request, signal, onPath) {
 		companion = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
-		onPath?.(companion.temporary.tempPath);
-		if (request.maskEvidence) {
-			masks = await createTemporary({
-				outputDir: directory,
-				keepTemp: false
-			});
-			onPath?.(masks.temporary.tempPath);
-		}
+		}, onPath);
+		if (request.maskEvidence) masks = await createTemporary({
+			outputDir: directory,
+			keepTemp: false
+		}, onPath);
 		const written = await rewriteConfiguredOutput({
 			...request,
 			bundleId,
@@ -9300,6 +9586,14 @@ function isResult(value) {
 		};
 		return file("primary") && file("ledger") && typeof pieces === "object" && pieces !== null && Array.isArray(Reflect.get(pieces, "entries")) && Array.isArray(Reflect.get(pieces, "maskEntries")) && Array.isArray(Reflect.get(value, "tokens")) && typeof Reflect.get(value, "tokensComplete") === "boolean";
 	}
+	if (Reflect.get(value, "kind") === "journey-base") {
+		const base = Reflect.get(value, "base");
+		const file = (key) => {
+			const item = typeof base === "object" && base !== null ? Reflect.get(base, key) : void 0;
+			return typeof item === "object" && item !== null && typeof Reflect.get(item, "path") === "string";
+		};
+		return typeof base === "object" && base !== null && Reflect.get(base, "kind") === "base" && typeof Reflect.get(base, "bundleId") === "string" && file("primary") && file("companion") && file("maskLedger") && Array.isArray(Reflect.get(base, "sessions")) && Array.isArray(Reflect.get(base, "sourceBindings"));
+	}
 	if (Reflect.get(value, "kind") === "journey-output") {
 		const output = Reflect.get(value, "output");
 		return typeof output === "object" && output !== null && typeof Reflect.get(output, "bundleId") === "string" && typeof Reflect.get(output, "primary") === "object" && typeof Reflect.get(output, "companion") === "object" && Array.isArray(Reflect.get(value, "tokens")) && typeof Reflect.get(value, "tokensComplete") === "boolean";
@@ -9320,6 +9614,8 @@ function isWorkerMessage(value) {
 	if (kind === "worker-error") return code === "ARTIFACT_WORKER_MEMORY" || code === "ARTIFACT_PROCESSING_FAILED";
 	return kind === "error" && typeof code === "string" && code.length > 0 && (sourceId === void 0 || typeof sourceId === "string");
 }
+/** How long a stopped controller may take to end its Worker and flush its messages (ADR 0219). */
+const stopGraceMs = 2e3;
 /** One active request per process; IPC backpressure never causes a resend or another queue. */
 function createSessionProcess(workerUrl, heapMb, onMessage, onFailure) {
 	const options = {
@@ -9354,7 +9650,7 @@ function createSessionProcess(workerUrl, heapMb, onMessage, onFailure) {
 		closed.then(() => onFailure(memoryFailure ? "ARTIFACT_WORKER_MEMORY" : "ARTIFACT_PROCESSING_FAILED"));
 	};
 	child.on("message", (message) => {
-		if (!closing) onMessage(message);
+		if (!closing || Reflect.get(Object(message), "kind") === "spool") onMessage(message);
 	});
 	child.on("error", fail);
 	child.on("disconnect", fail);
@@ -9376,7 +9672,20 @@ function createSessionProcess(workerUrl, heapMb, onMessage, onFailure) {
 		async close() {
 			if (!closing) {
 				closing = true;
-				if (child.exitCode === null && child.signalCode === null) child.kill("SIGKILL");
+				if (child.exitCode === null && child.signalCode === null) {
+					const kill = () => {
+						if (child.exitCode === null && child.signalCode === null) child.kill("SIGKILL");
+					};
+					const timer = setTimeout(kill, stopGraceMs);
+					try {
+						if (child.connected) child.send({ kind: "stop" }, (error) => error && kill());
+						else kill();
+					} catch {
+						kill();
+					}
+					await closed;
+					clearTimeout(timer);
+				}
 			}
 			await closed;
 		}
@@ -9411,6 +9720,34 @@ function sessionWorkerFailure(error) {
 function requestKind(task) {
 	return typeof task.message === "object" && task.message !== null ? Reflect.get(task.message, "kind") : void 0;
 }
+/**
+* Files one job may name: a journey output its three final files and three temporary files
+* (ADR 0181), an output shard its two archives and a shard readback none (ADR 0199).
+*/
+/**
+* A journey output or base names its three final files and three temporary files (ADR 0181,
+* ADR 0228); an output shard its two archives and a shard readback none (ADR 0199).
+*/
+function spoolLimit(task) {
+	const kind = requestKind(task);
+	return kind === "journey-output" || kind === "journey-base" ? 6 : kind === "journey-output-shard" ? 2 : kind === "journey-output-verify" ? 0 : 4;
+}
+const factsName = /^(.+)\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.facts$/;
+/**
+* Best-effort removal of a stopped job's files: its named spools and the facts files created
+* beside them (`<spool>.<uuid>.facts`), which are unlinked once open but can keep their name
+* when the process stops in between; on Windows that spans two ACL helper round trips.
+*/
+async function removeStoppedSpools(paths) {
+	for (const [directory, spools] of Map.groupBy(paths, (path) => dirname(path))) {
+		for (const path of spools) await unlink(path).catch(() => {});
+		const names = new Set(spools.map((path) => basename(path)));
+		for (const entry of await readdir(directory).catch(() => [])) {
+			const spool = factsName.exec(entry)?.[1];
+			if (spool !== void 0 && names.has(spool)) await unlink(join(directory, entry)).catch(() => {});
+		}
+	}
+}
 /** Best-effort removal of a worker spool that no longer has an owner. */
 function removeSpool(path) {
 	if (path === void 0) return;
@@ -9484,7 +9821,7 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 		stopping = Promise.all(slots.map(async (slot) => {
 			try {
 				await slot.process.close();
-				for (const path of slot.task?.spoolPaths ?? []) await unlink(path).catch(() => {});
+				if (slot.task) await removeStoppedSpools(slot.task.spoolPaths);
 			} finally {
 				slot.task?.reject(blame(slot));
 				slot.task = void 0;
@@ -9499,8 +9836,11 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 	};
 	const onAbort = () => stop(/* @__PURE__ */ new Error("ARTIFACT_ABORTED"));
 	const receive = (slot, message) => {
-		if (closed) return;
 		const task = slot.task;
+		if (closed) {
+			if (task && isWorkerMessage(message) && message.kind === "spool" && (task.spoolPaths.has(message.path) || task.spoolPaths.size < spoolLimit(task))) task.spoolPaths.add(message.path);
+			return;
+		}
 		if (!isWorkerMessage(message)) {
 			failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
 			return;
@@ -9516,9 +9856,7 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 		try {
 			if (message.kind === "source") task.onSourceProgress?.(message.bytes);
 			else if (message.kind === "spool") {
-				const kind = requestKind(task);
-				const spoolLimit = kind === "journey-output" ? 6 : kind === "journey-output-shard" ? 2 : kind === "journey-output-verify" ? 0 : 4;
-				if (!task.spoolPaths.has(message.path) && task.spoolPaths.size >= spoolLimit) {
+				if (!task.spoolPaths.has(message.path) && task.spoolPaths.size >= spoolLimit(task)) {
 					failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
 					return;
 				}
@@ -9526,7 +9864,7 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 				task.onSpool?.(message.path);
 			} else if (message.kind === "result") {
 				const requestedKind = requestKind(task);
-				if ((requestedKind === "render" || requestedKind === "capture" || requestedKind === "scan" || requestedKind === "journey-output" || requestedKind === "journey-output-shard" || requestedKind === "journey-output-verify") && message.result.kind !== requestedKind) {
+				if ((requestedKind === "render" || requestedKind === "capture" || requestedKind === "scan" || requestedKind === "journey-output" || requestedKind === "journey-output-shard" || requestedKind === "journey-output-verify" || requestedKind === "journey-base") && message.result.kind !== requestedKind) {
 					failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
 					return;
 				}
@@ -9542,6 +9880,15 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 					settle(slot, void 0, message.result);
 					return;
 				}
+				if (message.result.kind === "journey-base") {
+					const { primary, companion, maskLedger } = message.result.base;
+					if (!task.spoolPaths.has(primary.path) || !task.spoolPaths.has(companion.path) || !task.spoolPaths.has(maskLedger.path)) {
+						failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
+						return;
+					}
+					settle(slot, void 0, message.result);
+					return;
+				}
 				if (message.result.kind === "journey-output") {
 					if (!task.spoolPaths.has(message.result.output.primary.path) || !task.spoolPaths.has(message.result.output.companion.path)) {
 						failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
@@ -10234,7 +10581,7 @@ function validateCollectionIndex(index) {
 const maximumCollectionIndexBytes = 16777216;
 const maximumCollectionNodes = 1e6;
 function source(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"sourceId",
 		"sourceOrdinal",
@@ -10247,7 +10594,7 @@ function source(value) {
 	};
 }
 function session(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"sessionId",
 		"scopeOrdinal",
@@ -10268,7 +10615,7 @@ function session(value) {
 	};
 }
 function parseCollectionWorkspaceSummary(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"format",
 		"formatVersion",
@@ -10285,7 +10632,7 @@ function parseCollectionWorkspaceSummary(value) {
 	};
 }
 function parseCompanionDescriptor(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"path",
 		"archiveBytes",
@@ -10298,7 +10645,7 @@ function parseCompanionDescriptor(value) {
 	};
 }
 function bundle(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"workspaceSlot",
 		"workspaceVersion",
@@ -10333,7 +10680,7 @@ function bundle(value) {
 	};
 }
 function sourceScope(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, ["applicationSessionId", "sourceId"]);
 	return {
 		applicationSessionId: string(item["applicationSessionId"]),
@@ -10341,7 +10688,7 @@ function sourceScope(value) {
 	};
 }
 function exclusion(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"applicationSessionId",
 		"sourceId",
@@ -10356,7 +10703,7 @@ function exclusion(value) {
 	};
 }
 function sessionBinding(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"applicationSessionId",
 		"bundleId",
@@ -10371,7 +10718,7 @@ function sessionBinding(value) {
 	};
 }
 function sourceBinding(value) {
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"applicationSessionId",
 		"sourceId",
@@ -10397,7 +10744,7 @@ function parseCollectionIndex(text) {
 		if (error instanceof Error && error.message === "ARTIFACT_METADATA_LIMIT") fail("ARTIFACT_INDEX_LIMIT", { cause: error });
 		throw error;
 	}
-	const item = record(value);
+	const item = record$1(value);
 	keys(item, [
 		"format",
 		"formatVersion",
@@ -10493,7 +10840,7 @@ function measured(value, copy) {
 		reasonCode: value.reasonCode
 	};
 }
-function patch(value) {
+function patch$1(value) {
 	return {
 		grammarVersion: value.grammarVersion,
 		basis: value.basis,
@@ -10512,7 +10859,7 @@ function fact(value) {
 		extractorVersion: value.extractorVersion,
 		...value.decodedUtf8Bytes === void 0 ? {} : { decodedUtf8Bytes: measured(value.decodedUtf8Bytes, (number) => number) },
 		...value.logicalLines === void 0 ? {} : { logicalLines: measured(value.logicalLines, (number) => number) },
-		...value.patchDelta === void 0 ? {} : { patchDelta: measured(value.patchDelta, patch) }
+		...value.patchDelta === void 0 ? {} : { patchDelta: measured(value.patchDelta, patch$1) }
 	};
 }
 function relation(value) {
@@ -10640,7 +10987,7 @@ function pointer(value) {
 	return result;
 }
 function parseInputField(value) {
-	const v = record(value);
+	const v = record$1(value);
 	keys(v, [
 		"fieldId",
 		"sourceFieldId",
@@ -10662,13 +11009,13 @@ function parseInputField(value) {
 	if (scalarKind !== void 0 && scalarKind !== "literal" && scalarKind !== "structure" && scalarKind !== "container") return fail("ARTIFACT_INVALID_MANIFEST");
 	const text = string(v["text"]), fieldHash = digest(v["fieldHash"]);
 	if (!text.length || hash$1(text) !== fieldHash) fail("ARTIFACT_PROCESSING_MISMATCH");
-	const c = v["cleanedRange"] === void 0 ? void 0 : record(v["cleanedRange"]);
+	const c = v["cleanedRange"] === void 0 ? void 0 : record$1(v["cleanedRange"]);
 	if (c) keys(c, ["start", "end"]);
 	const cleanedRange = c ? {
 		start: integer(c["start"]),
 		end: integer(c["end"])
 	} : void 0;
-	const r = v["originalRange"] === void 0 ? void 0 : record(v["originalRange"]);
+	const r = v["originalRange"] === void 0 ? void 0 : record$1(v["originalRange"]);
 	if (r) keys(r, ["start", "end"]);
 	const range = r ? {
 		start: integer(r["start"]),
@@ -10949,25 +11296,18 @@ async function runConfiguredSessionJob(job, processing, signal, onSourceProgress
 	let processingMs = 0;
 	const spoolOptions = {
 		keepPath: true,
+		...onSpool === void 0 ? {} : { onPath: onSpool },
 		...job.spoolDirectory === void 0 ? {} : { directory: job.spoolDirectory }
 	};
 	const spool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-	onSpool?.(spool.path);
 	let companion;
 	let maskSpool;
 	let reviewSpool;
 	let session;
 	try {
 		companion = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-		onSpool?.(companion.path);
-		if (job.captureMasks) {
-			maskSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-			onSpool?.(maskSpool.path);
-		}
-		if (job.captureReview) {
-			reviewSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-			onSpool?.(reviewSpool.path);
-		}
+		if (job.captureMasks) maskSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
+		if (job.captureReview) reviewSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
 		const readPass = /* @__PURE__ */ new Map();
 		const captures = new Map((job.captures ?? []).map((capture) => [capture.partId, capture]));
 		session = await prepareConfiguredSession({
@@ -11045,6 +11385,7 @@ async function runConfiguredSessionJob(job, processing, signal, onSourceProgress
 			parts,
 			entries,
 			agentSetup: completed.agentSetup,
+			...completed.agentSources === void 0 ? {} : { agentSources: completed.agentSources },
 			images: completed.images
 		};
 	} catch (error) {
@@ -14683,13 +15024,18 @@ async function writePrivateReviewPayload(request, signal) {
 }
 //#endregion
 //#region packages/artifact/src/configured/journey/base.ts
-/** Publish an immutable, private base pair for review/resume without a public collection index. */
-async function writeLogicalJourneyBase(request, hooks) {
+/**
+* Publish an immutable, private base pair for review/resume without a public collection index.
+* `onPath` names each file this call may leave behind: a temporary file before it is created, a
+* published one before it is linked, so a packaging worker's owner can remove them when it stops
+* the worker mid-write (ADR 0228). Session spools live under `<temporary>.<uuid>.parallel`.
+*/
+async function writeLogicalJourneyBase(request, hooks, onPath) {
 	const directory = await privateJourneyDirectory(request.directory);
 	const primary = await createTemporary({
 		outputDir: directory,
 		keepTemp: false
-	});
+	}, onPath);
 	const cleanup = createCleanup();
 	let companion;
 	let masks;
@@ -14710,15 +15056,15 @@ async function writeLogicalJourneyBase(request, hooks) {
 		companion = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
+		}, onPath);
 		masks = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
+		}, onPath);
 		if (request.captureReview) review = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
+		}, onPath);
 		const written = await writeLogicalWorkBundle({
 			production: request.production,
 			work: request.work,
@@ -14734,15 +15080,19 @@ async function writeLogicalJourneyBase(request, hooks) {
 		const primaryPath = join(directory, `${bundleId}.primary.zip`);
 		const companionPath = join(directory, `${bundleId}.companion.zip`);
 		const maskPath = join(directory, `${bundleId}.private-masks.zip`);
+		onPath?.(primaryPath);
 		await link(primary.temporary.tempPath, primaryPath);
 		linked.push(primaryPath);
+		onPath?.(companionPath);
 		await link(companion.temporary.tempPath, companionPath);
 		linked.push(companionPath);
+		onPath?.(maskPath);
 		await link(masks.temporary.tempPath, maskPath);
 		linked.push(maskPath);
 		if (!identityMatches(await lstat(primaryPath, { bigint: true }), primary.temporary.identity) || !identityMatches(await lstat(companionPath, { bigint: true }), companion.temporary.identity) || !identityMatches(await lstat(maskPath, { bigint: true }), masks.temporary.identity)) fail("ARTIFACT_IDENTITY_MISMATCH");
 		const reviewPath = join(directory, `${bundleId}.private-review.zip`);
 		if (review) {
+			onPath?.(reviewPath);
 			await link(review.temporary.tempPath, reviewPath);
 			linked.push(reviewPath);
 			if (!identityMatches(await lstat(reviewPath, { bigint: true }), review.temporary.identity)) fail("ARTIFACT_IDENTITY_MISMATCH");
@@ -15093,16 +15443,14 @@ async function writeOutputShard(request, signal, onPath) {
 		const output = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
-		onPath?.(output.temporary.tempPath);
+		}, onPath);
 		created.push(output.temporary.tempPath);
 		handles.push(output.handle);
 		sink = fileWriter(output.handle, signal);
 		const ledger = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
-		onPath?.(ledger.temporary.tempPath);
+		}, onPath);
 		created.push(ledger.temporary.tempPath);
 		handles.push(ledger.handle);
 		masks = await createFinalMaskWriter({
@@ -15185,11 +15533,12 @@ function protectedRanges(field, host, ranges) {
 */
 async function runConfiguredScanJob(job, processing, signal, onSourceProgress, onSpool) {
 	const directory = await privateJourneyDirectory(job.directory);
-	const fields = await openRowFile(join(directory, `${randomUUID()}.scan.jsonl`), signal);
+	const fieldsPath = join(directory, `${randomUUID()}.scan.jsonl`);
+	onSpool?.(fieldsPath);
+	const fields = await openRowFile(fieldsPath, signal);
 	const cleanup = createCleanup();
 	let success = false;
 	try {
-		onSpool?.(fields.path);
 		const captures = new Map(job.captures.map((capture) => [capture.partId, capture]));
 		if (captures.size !== job.captures.length || job.sources.some((source) => !captures.has(source.source.id))) fail("ARTIFACT_SOURCE_CHANGED");
 		if (job.sources.length === 0 || job.sources.length > 1e4) fail("ARTIFACT_EMPTY_SCOPE");
@@ -15542,7 +15891,7 @@ function hash(value) {
 	return text;
 }
 function range(value) {
-	const v = record(value);
+	const v = record$1(value);
 	keys(v, ["start", "end"]);
 	const start = integer(v["start"]), end = integer(v["end"]);
 	if (end <= start) fail("ARTIFACT_PROCESSING_MISMATCH");
@@ -15563,7 +15912,7 @@ function rowIdentity(v, input) {
 	};
 }
 function parseSessionScanRow(value, input) {
-	const v = record(value);
+	const v = record$1(value);
 	keys(v, [
 		"sourceId",
 		"ordinal",
@@ -15573,7 +15922,7 @@ function parseSessionScanRow(value, input) {
 	const { sourceId, ordinal, id, source } = rowIdentity(v, input);
 	const ids = /* @__PURE__ */ new Set();
 	const fields = array(v["fields"], (item) => {
-		const { sessionId, sourceId: fieldSource, ordinal: fieldOrdinal, recordId: fieldRecord, protectedRanges, ...plain } = record(item);
+		const { sessionId, sourceId: fieldSource, ordinal: fieldOrdinal, recordId: fieldRecord, protectedRanges, ...plain } = record$1(item);
 		const field = parseInputField(plain);
 		if (!source || source.native.role !== "main" || sessionId !== input.sessionId || fieldSource !== sourceId || fieldOrdinal !== ordinal || fieldRecord !== id || field.role === "tool-output" || field.scalarKind !== void 0 || ids.has(field.fieldId) || !field.sourceFieldId.startsWith(`${id}-f`)) fail("ARTIFACT_PROCESSING_MISMATCH");
 		const node = field.sourceFieldId.slice(`${id}-f`.length);
@@ -15600,20 +15949,20 @@ function parseSessionScanRow(value, input) {
 	};
 }
 function scanFile(value) {
-	const file = record(value);
+	const file = record$1(value);
 	keys(file, [
 		"path",
 		"identity",
 		"sha256",
 		"byteLength"
 	]);
-	const identity = record(file["identity"]);
+	const identity = record$1(file["identity"]);
 	keys(identity, ["dev", "ino"]);
 	if (!string(file["path"]) || !string(identity["dev"]) || !string(identity["ino"]) || integer(file["byteLength"]) > maximumPartBytes) fail("ARTIFACT_PROCESSING_MISMATCH");
 	hash(file["sha256"]);
 }
 function validateSessionScanInput(input) {
-	keys(record(input), [
+	keys(record$1(input), [
 		"version",
 		"sessionId",
 		"emptyReviewVerified",
@@ -15630,7 +15979,7 @@ function validateSessionScanInput(input) {
 	integer(input.fieldCount);
 	integer(input.inputUtf16);
 	const sources = /* @__PURE__ */ new Set(), parts = /* @__PURE__ */ new Set();
-	for (const item of array(input.sources, record)) {
+	for (const item of array(input.sources, record$1)) {
 		keys(item, [
 			"sourceId",
 			"sourcePartId",
@@ -15641,7 +15990,7 @@ function validateSessionScanInput(input) {
 		if (!id || !part || sources.has(id) || parts.has(part) || !nativeSourceIdentitySchema.safeParse(item["native"]).success) fail("ARTIFACT_PROCESSING_MISMATCH");
 		sources.add(id);
 		parts.add(part);
-		const facts = record(item["facts"]);
+		const facts = record$1(item["facts"]);
 		keys(facts, [
 			"representation",
 			"byteLength",
@@ -15677,7 +16026,7 @@ async function* scan(handle, input, signal) {
 	const ordinals = /* @__PURE__ */ new Map();
 	for await (const value of frames(handle, input.file, signal)) {
 		if (footer) fail("ARTIFACT_PROCESSING_MISMATCH");
-		if (record(value)["kind"] === "session-scan-footer") {
+		if (record$1(value)["kind"] === "session-scan-footer") {
 			const { file: _file, ...descriptor } = input;
 			if (!isDeepStrictEqual(value, {
 				kind: "session-scan-footer",
@@ -16419,4 +16768,4 @@ async function verifyPreparedSessionSources(prepared, input, signal) {
 	}
 }
 //#endregion
-export { exclusiveLock as $, runConfiguredSessionJob as A, writeLogicalJourneyOutput as B, readConfiguredSearchFields as C, captureLogicalJourneySources as D, prepareCollectionProduction as E, sessionWorkerFailure as F, staticMaskCategory as G, readLogicalJourneyFinalMasks as H, privateCollectionDirectory as I, createConfiguredPreviewStream as J, readWorkspacePair as K, defaultParallelism as L, parseCollectionWorkspaceSummary as M, createSharedSessionPool as N, capturedJourneyScope as O, SessionWorkerError as P, safeError as Q, gitSeedsProvider as R, readOriginalSearchFields as S, checkReusableBundle as T, readConfiguredOutputInfo as U, privateJourneyDirectory as V, processJourneyMetadataFields as W, createTemporary as X, createInspectionProcessor as Y, createCleanup as Z, readStaticSessionMasks as _, scanReviewFields as a, windowsAclCodes as at, writePrivateReviewPayload as b, readSessionScanRecords as c, verifyOutputShard as d, makePrivateDirectory as et, writeOutputShard as f, processJourneyMetadata as g, readCapturedOriginalRows as h, buildWorkScanBatches as i, isWindowsAclFailure as it, readCollectionIndex as j, renderJobDigest as k, scanPreparedSession as l, captureConfiguredSessionJob as m, verifyPreparedSessionSources as n, restrictToOwner as nt, createWorkPieces as o, openConfiguredUpload as p, listAgentSetup as q, prepareSessionScans as r, windowsOwnerOnly as rt, readSessionScanFields as s, preparedScanConfiguration as t, openPrivateFile as tt, runConfiguredScanJob as u, staticSessionJobs as v, createCollectionArtifacts as w, readPrivateReviewPayload as x, writeLogicalJourneyBase as y, parallelismLimits as z };
+export { safeError as $, runConfiguredSessionJob as A, writeLogicalJourneyOutput as B, readConfiguredSearchFields as C, captureLogicalJourneySources as D, prepareCollectionProduction as E, sessionWorkerFailure as F, staticMaskCategory as G, readLogicalJourneyFinalMasks as H, privateCollectionDirectory as I, createConfiguredPreviewStream as J, readWorkspacePair as K, defaultParallelism as L, parseCollectionWorkspaceSummary as M, createSharedSessionPool as N, capturedJourneyScope as O, SessionWorkerError as P, createCleanup as Q, gitSeedsProvider as R, readOriginalSearchFields as S, checkReusableBundle as T, readConfiguredOutputInfo as U, privateJourneyDirectory as V, processJourneyMetadataFields as W, createTemporary as X, createInspectionProcessor as Y, removeNamedTemporarySpools as Z, readStaticSessionMasks as _, scanReviewFields as a, isWindowsAclFailure as at, writePrivateReviewPayload as b, readSessionScanRecords as c, verifyOutputShard as d, exclusiveLock as et, writeOutputShard as f, processJourneyMetadata as g, readCapturedOriginalRows as h, buildWorkScanBatches as i, windowsOwnerOnly as it, readCollectionIndex as j, renderJobDigest as k, scanPreparedSession as l, captureConfiguredSessionJob as m, verifyPreparedSessionSources as n, openPrivateFile as nt, createWorkPieces as o, windowsAclCodes as ot, openConfiguredUpload as p, listAgentSetup as q, prepareSessionScans as r, restrictToOwner as rt, readSessionScanFields as s, preparedScanConfiguration as t, makePrivateDirectory as tt, runConfiguredScanJob as u, staticSessionJobs as v, createCollectionArtifacts as w, readPrivateReviewPayload as x, writeLogicalJourneyBase as y, parallelismLimits as z };