@gitroll/tacitt-cli 0.4.0 → 0.4.2

package/dist/{query-ByD0Rp_o.mjs → query-CVqWNFYf.mjs}

@@ -1,10 +1,10 @@
-import { A as runConfiguredSessionJob, C as readConfiguredSearchFields, D as captureLogicalJourneySources, F as sessionWorkerFailure, G as staticMaskCategory, H as readLogicalJourneyFinalMasks, I as privateCollectionDirectory, K as readWorkspacePair, L as defaultParallelism, M as parseCollectionWorkspaceSummary, N as createSharedSessionPool, O as capturedJourneyScope, P as SessionWorkerError, Q as createCleanup, R as gitSeedsProvider, S as readOriginalSearchFields, T as checkReusableBundle, U as readConfiguredOutputInfo, V as privateJourneyDirectory, W as processJourneyMetadataFields, X as createTemporary, Z as removeNamedTemporarySpools, _ as readStaticSessionMasks, a as scanReviewFields, at as isWindowsAclFailure, c as readSessionScanRecords, g as processJourneyMetadata, h as readCapturedOriginalRows, i as buildWorkScanBatches, it as windowsOwnerOnly, j as readCollectionIndex, l as scanPreparedSession, n as verifyPreparedSessionSources, nt as openPrivateFile, o as createWorkPieces, ot as windowsAclCodes, p as openConfiguredUpload, r as prepareSessionScans, rt as restrictToOwner, s as readSessionScanFields, t as preparedScanConfiguration, tt as makePrivateDirectory, v as staticSessionJobs, w as createCollectionArtifacts, z as parallelismLimits } from "./src-CmP73EcD.mjs";
-import { Bt as sessionPeriodSchema, Dn as entityDictionaryVersion, F as bClassificationKey, Fn as frameRecords, Ft as termTypeInfo, Gt as safeField, H as codePointLength, Ht as ApplicationError, Jt as reviewFamilies, K as utf16Offset, N as bUnitFragments, Ot as privacyTermKey, Qn as admitGitName, T as bLiteralTerms, Ut as UnfinishedJourneyError, V as bDigest, Wt as safeCode, Xn as createEntityMatcher, Zn as admitCustomTerm, Zt as observeSource, b as validateBReview, c as textDigest, h as reviewFindingsDigest, ht as journeyDescribeSchema, jt as reviewTermsInputSchema, l as validateReview, mn as currentDetectorVersion, n as compileBFindings, r as reviewBatchChunks, s as reviewSubmitSchema, t as locateTerms, yn as createStaticProcessor, z as bAnchorKey } from "./locate-U3-nkird.mjs";
-import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-DES7hBAP.mjs";
-import { $ as settingsQuerySchema, $r as packageCommandSchema, A as deviceProfileScopeSchema, B as validateInspectionBatch, Bn as journeyConfirmedHides, Br as hasCompleteWorkDescription, Bt as newJourneyWork, C as rebindReviewSubmit, Cr as privacyDecisionDigest, Ct as sendStartSchema, D as createAccount, Dr as hasCurrentStaticReview, E as staticallyHiddenFindings, Er as nativeRespondSchema, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Fr as sendArtifactSchema, Gr as withReadingProgress, Hr as isReadingComplete, Ht as journeyContextQuerySchema, Ir as sendReceiptSchema, Jn as reviewCandidateResourceSchema, Jr as journeyFindingsSchema, Kn as workCorrectionBinding, L as createApplication, Ln as confirmedHideKinds, Lr as sendReplaceResultSchema, Lt as classificationPartition, M as readAccountAvatarUrl, Mr as agentSourceSchema, Mt as applyClassification, N as storedCredentialSchema, Nn as bTermMatcher, Nr as agentSourcesSchema, O as accountProfileSchema, Or as staticReviewDigest, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Q as settingsBatchSchema, Qn as bReviewDigest, Qr as commandSchema, Qt as journeyResourceQuerySchema, R as inspectionCancelSchema, Rr as sendResolutionSchema, Rt as classificationWorks, S as rebindReviewOverlay, Sn as readConfirmedHideChange, Sr as assertJourneyPrivacyReady, St as sendPrepareSchema, T as guardedFindingText, Tn as termHideAdditions, Tr as nativeGetSchema, Tt as currentJourneyAdapters, U as inspectionQuerySchema, Un as retireWorkDescription, Ur as isSelectedWork, Vn as maskedHitsStale, Vr as isClassifying, Vt as reviewCompileSchema, Wn as workDecisionDigest, Xn as reviewRepairResourceSchema, Xr as journeyRenderInputSchema, Xt as journeyPolicyRespondSchema, Yn as reviewRepairInputSchema, Yr as journeyPreviewSchema, Yt as searchScopeDigest, Zr as journeyRenderSchema, _t as maximumTermsFileBytes, a as bCrossSegmentReviewSchema, ar as scanGitSeedsId, b as bReviewScope, bn as confirmedHideAdditions, br as journeyClassificationSessionsSchema, bt as sendActionSchema, c as reconstructBFields, cr as scanExclusionResourceSchema, ct as validateFailureLocation, d as selectedValueMembers, dn as sessionReviewInputSchema, dr as journeyInventoryQuerySchema, dt as manualUploadChoiceSchema, ei as selectionBatchSchema, er as planBRepair, et as readWorkspaceOutcomes, f as splitSelectorValues, fn as sessionReviewQuerySchema, ft as manualUploadPrepareSchema, g as changeJourney, gt as emptyTermsRevision, hn as sessionUsefulnessInputSchema, hr as emptyPreparationFacts, i as validateBCrossSegmentReview, ii as stateSchema, ir as scanSessionResourceSchema, j as profileUrlMatchesIdentity, k as deviceAuthorizationSchema, ln as sessionRereadInputSchema, lt as manualUploadActionSchema, m as hideScopeDigest, mt as manualUploadStartSchema, n as scanBatchEquivalenceDigest, nt as appendSensitiveTerms, o as bRereadDigest, oi as recommendParallelism, on as sessionReconcileInputSchema, or as scanGitSeedsResource, ot as artifactFailureDetailSchema, p as activeJourneyTerms, pt as manualUploadSchema, qn as reviewCandidateInputSchema, qr as journeyFindingImpactSchema, qt as journeySearchResultSchema, r as locateTermEvidence, ri as producerVersion, rn as reviewAttemptResourceSchema, rr as scanPreparationDigest, s as reconcileBSession, sr as verifiedScanGitSeeds, st as resolveFailureLocation, t as scanBatchContextDigest, ti as selectionSchema, tn as journeyPlaceSchema, vt as normalizeSensitiveTerms, w as reviewBatchReuse, wr as nativeEventsSchema, x as rebindReviewAlignment, xt as sendChoiceSchema, y as isGenericPublicTerm, yt as replaceSensitiveTermsSchema, z as inspectionStartSchema, zr as sendSettingsSchema, zt as retireScanGeneration } from "./src-DNn7SifS.mjs";
-import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-BaTNC9kf.mjs";
-import { _ as staticBaseProduction, a as writeJourneyOutput, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, y as workApproval } from "./job-DrcpSL_9.mjs";
-import { t as createAgentSetupPort } from "./agent-setup-CQRWVUWR.mjs";
+import { $ as createCleanup, B as parallelismLimits, C as readOriginalSearchFields, E as checkReusableBundle, F as SessionWorkerError, G as processJourneyMetadataFields, H as privateJourneyDirectory, I as sessionWorkerFailure, K as staticMaskCategory, L as privateCollectionDirectory, M as readCollectionIndex, N as parseCollectionWorkspaceSummary, O as captureLogicalJourneySources, P as createSharedSessionPool, Q as removeNamedTemporarySpools, R as defaultParallelism, T as createCollectionArtifacts, U as readLogicalJourneyFinalMasks, W as readConfiguredOutputInfo, Z as createTemporary, _ as processJourneyMetadata, a as scanReviewFields, at as windowsOwnerOnly, c as readSessionScanRecords, g as readCapturedOriginalRows, i as buildWorkScanBatches, it as restrictToOwner, j as runConfiguredSessionJob, k as capturedJourneyScope, l as scanPreparedSession, m as openConfiguredUpload, n as verifyPreparedSessionSources, nt as makePrivateDirectory, o as createWorkPieces, ot as isWindowsAclFailure, p as configuredSessionUploads, q as readWorkspacePair, r as prepareSessionScans, rt as openPrivateFile, s as readSessionScanFields, st as windowsAclCodes, t as preparedScanConfiguration, v as readStaticSessionMasks, w as readConfiguredSearchFields, y as staticSessionJobs, z as gitSeedsProvider } from "./src-D4nrfC2S.mjs";
+import { Bt as sessionPeriodSchema, Dn as entityDictionaryVersion, F as bClassificationKey, Fn as frameRecords, Ft as termTypeInfo, Gt as safeField, H as codePointLength, Ht as ApplicationError, Jt as reviewFamilies, K as utf16Offset, N as bUnitFragments, Ot as privacyTermKey, Qn as admitGitName, T as bLiteralTerms, Ut as UnfinishedJourneyError, V as bDigest, Wt as safeCode, Xn as createEntityMatcher, Zn as admitCustomTerm, Zt as observeSource, b as validateBReview, c as textDigest, h as reviewFindingsDigest, ht as journeyDescribeSchema, jt as reviewTermsInputSchema, l as validateReview, mn as currentDetectorVersion, n as compileBFindings, r as reviewBatchChunks, s as reviewSubmitSchema, t as locateTerms, yn as createStaticProcessor, z as bAnchorKey } from "./locate-CBiw-CJK.mjs";
+import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-37kIclGK.mjs";
+import { $ as settingsQuerySchema, $r as packageCommandSchema, A as deviceProfileScopeSchema, B as validateInspectionBatch, Bn as journeyConfirmedHides, Br as hasCompleteWorkDescription, Bt as newJourneyWork, C as rebindReviewSubmit, Cr as privacyDecisionDigest, Ct as sendStartSchema, D as createAccount, Dr as hasCurrentStaticReview, E as staticallyHiddenFindings, Er as nativeRespondSchema, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Fr as sendArtifactSchema, Gr as withReadingProgress, Hr as isReadingComplete, Ht as journeyContextQuerySchema, Ir as sendReceiptSchema, Jn as reviewCandidateResourceSchema, Jr as journeyFindingsSchema, Kn as workCorrectionBinding, L as createApplication, Ln as confirmedHideKinds, Lr as sendReplaceResultSchema, Lt as classificationPartition, M as readAccountAvatarUrl, Mr as agentSourceSchema, Mt as applyClassification, N as storedCredentialSchema, Nn as bTermMatcher, Nr as agentSourcesSchema, O as accountProfileSchema, Or as staticReviewDigest, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Q as settingsBatchSchema, Qn as bReviewDigest, Qr as commandSchema, Qt as journeyResourceQuerySchema, R as inspectionCancelSchema, Rr as sendResolutionSchema, Rt as classificationWorks, S as rebindReviewOverlay, Sn as readConfirmedHideChange, Sr as assertJourneyPrivacyReady, St as sendPrepareSchema, T as guardedFindingText, Tn as termHideAdditions, Tr as nativeGetSchema, Tt as currentJourneyAdapters, U as inspectionQuerySchema, Un as retireWorkDescription, Ur as isSelectedWork, Vn as maskedHitsStale, Vr as isClassifying, Vt as reviewCompileSchema, Wn as workDecisionDigest, Xn as reviewRepairResourceSchema, Xr as journeyRenderInputSchema, Xt as journeyPolicyRespondSchema, Yn as reviewRepairInputSchema, Yr as journeyPreviewSchema, Yt as searchScopeDigest, Zr as journeyRenderSchema, _t as maximumTermsFileBytes, a as bCrossSegmentReviewSchema, ar as scanGitSeedsId, b as bReviewScope, bn as confirmedHideAdditions, br as journeyClassificationSessionsSchema, bt as sendActionSchema, c as reconstructBFields, cr as scanExclusionResourceSchema, ct as validateFailureLocation, d as selectedValueMembers, dn as sessionReviewInputSchema, dr as journeyInventoryQuerySchema, dt as manualUploadChoiceSchema, ei as selectionBatchSchema, er as planBRepair, et as readWorkspaceOutcomes, f as splitSelectorValues, fn as sessionReviewQuerySchema, ft as manualUploadPrepareSchema, g as changeJourney, gt as emptyTermsRevision, hn as sessionUsefulnessInputSchema, hr as emptyPreparationFacts, i as validateBCrossSegmentReview, ii as stateSchema, ir as scanSessionResourceSchema, j as profileUrlMatchesIdentity, k as deviceAuthorizationSchema, ln as sessionRereadInputSchema, lt as manualUploadActionSchema, m as hideScopeDigest, mt as manualUploadStartSchema, n as scanBatchEquivalenceDigest, nt as appendSensitiveTerms, o as bRereadDigest, oi as recommendParallelism, on as sessionReconcileInputSchema, or as scanGitSeedsResource, ot as artifactFailureDetailSchema, p as activeJourneyTerms, pt as manualUploadSchema, qn as reviewCandidateInputSchema, qr as journeyFindingImpactSchema, qt as journeySearchResultSchema, r as locateTermEvidence, ri as producerVersion, rn as reviewAttemptResourceSchema, rr as scanPreparationDigest, s as reconcileBSession, sr as verifiedScanGitSeeds, st as resolveFailureLocation, t as scanBatchContextDigest, ti as selectionSchema, tn as journeyPlaceSchema, vt as normalizeSensitiveTerms, w as reviewBatchReuse, wr as nativeEventsSchema, x as rebindReviewAlignment, xt as sendChoiceSchema, y as isGenericPublicTerm, yt as replaceSensitiveTermsSchema, z as inspectionStartSchema, zr as sendSettingsSchema, zt as retireScanGeneration } from "./src-CBTvOa44.mjs";
+import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-DiOlSa8T.mjs";
+import { _ as staticBaseProduction, a as writeJourneyOutput, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, y as workApproval } from "./job-BII94L2c.mjs";
+import { t as createAgentSetupPort } from "./agent-setup-Bpsi-BCv.mjs";
 import { t as workerMessageSchema } from "./messages-D3m3bhva.mjs";
 import { constants, write } from "node:fs";
 import { z } from "zod";
@@ -166,14 +166,14 @@ async function readThroughContention(read, signal, delaysMs = [
 }
 //#endregion
 //#region packages/local-host/src/native-inspection.ts
-const count$4 = z.number().int().nonnegative();
+const count$5 = z.number().int().nonnegative();
 const originalViewSchema = z.object({
 	journeyId: z.uuid(),
 	workId: z.uuid(),
 	cursor: z.object({
 		snapshotId: z.string().regex(/^[a-f0-9]{64}$/u),
-		inputRevision: count$4,
-		partIndex: count$4,
+		inputRevision: count$5,
+		partIndex: count$5,
 		afterOrdinal: z.number().int().min(-1)
 	}).strict().optional()
 }).strict();
@@ -195,7 +195,7 @@ const outputViewSchema = z.object({
 const sourceViewSchema = z.object({
 	journeyId: z.uuid(),
 	workId: z.uuid(),
-	inputRevision: count$4.positive(),
+	inputRevision: count$5.positive(),
 	sessionId: z.string().min(1).max(128)
 }).strict();
 const masksViewSchema = z.object({
@@ -563,8 +563,8 @@ function createDeliveryService(application) {
 //#endregion
 //#region packages/local-host/src/current-view/model.ts
 const sequenceHeader = "x-sess-pilot-ci-current-sequence";
-const count$3 = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
-const identifier$1 = count$3.min(1);
+const count$4 = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+const identifier$1 = count$4.min(1);
 const requestId = z.string().regex(/^req-[a-z0-9]{1,7}$/u);
 const leg = z.enum(["ownership", "procedure"]);
 const operation = z.enum([
@@ -708,27 +708,27 @@ const rowSchema = z.strictObject({
 		"stopped"
 	]),
 	phase: phase.nullable(),
-	elapsedMs: count$3,
-	queueMs: count$3.nullable(),
-	activeMs: count$3.nullable(),
-	phaseMs: count$3.nullable()
+	elapsedMs: count$4,
+	queueMs: count$4.nullable(),
+	activeMs: count$4.nullable(),
+	phaseMs: count$4.nullable()
 });
 const pendingSchema = z.strictObject({
 	accessId: identifier$1,
 	operation,
 	write: z.boolean(),
 	phase,
-	queueDepth: count$3,
-	queueMs: count$3,
-	activeMs: count$3,
-	phaseMs: count$3,
+	queueDepth: count$4,
+	queueMs: count$4,
+	activeMs: count$4,
+	phaseMs: count$4,
 	association: associationSchema.nullable()
 });
 const storeSchema = z.strictObject({
 	executor: z.enum(["worker", "inline"]),
-	lastAccessId: count$3,
-	dequeuedAccessId: count$3,
-	queueDepth: count$3,
+	lastAccessId: count$4,
+	dequeuedAccessId: count$4,
+	queueDepth: count$4,
 	pending: pendingSchema.nullable()
 });
 const legState = z.enum([
@@ -743,17 +743,17 @@ const disconnectSchema = z.strictObject({
 	procedure: z.literal("workflow.getCurrent"),
 	requestId,
 	sequence: identifier$1.nullable(),
-	elapsedMs: count$3,
+	elapsedMs: count$4,
 	ownership: legState,
 	procedureState: legState,
-	pendingAccesses: count$3,
-	truncatedAccesses: count$3,
-	stoppedBeforeEnqueue: count$3,
+	pendingAccesses: count$4,
+	truncatedAccesses: count$4,
+	stoppedBeforeEnqueue: count$4,
 	accesses: z.array(rowSchema).max(16),
 	store: storeSchema.nullable(),
-	droppedFrames: count$3,
-	droppedSnapshots: count$3,
-	observerFailures: count$3
+	droppedFrames: count$4,
+	droppedSnapshots: count$4,
+	observerFailures: count$4
 });
 function parseSequence(value) {
 	if (typeof value !== "string" || !/^[1-9][0-9]{0,15}$/u.test(value)) return null;
@@ -925,7 +925,7 @@ function createRouter(application, account, stopping, delivery, nativeInspection
 			})
 		}),
 		send: t.router({
-			get: t.procedure.input(sendAddress.partial({ sendId: true })).query(({ input }) => sending().get(input)),
+			get: t.procedure.input(sendAddress.partial({ sendId: true })).query(({ input, signal }) => readThroughContention(() => sending().get(input), signal)),
 			prepare: t.procedure.input(sendPrepareSchema).mutation(({ input, signal }) => sending().prepare(input, signal)),
 			start: t.procedure.input(sendStartSchema).mutation(({ input, signal }) => sending().start(input, signal)),
 			respond: t.procedure.input(sendChoiceSchema).mutation(({ input }) => sending().respond(input)),
@@ -5078,10 +5078,10 @@ async function readStateDump(stateDir) {
 //#endregion
 //#region packages/local-host/src/execution/progress.ts
 const maximumBytes = 65536;
-const count$2 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$3 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const scope = z.object({
-	completed: count$2,
-	total: count$2
+	completed: count$3,
+	total: count$3
 }).strict().nullable();
 const recordSchema = z.object({
 	databaseId: z.string(),
@@ -5090,14 +5090,14 @@ const recordSchema = z.object({
 		operationId: z.string(),
 		step: z.enum(["preparing", "processing"]),
 		activeWorkspace: z.string().nullable(),
-		workspaceSequence: count$2,
+		workspaceSequence: count$3,
 		workspaces: scope,
 		sessions: scope,
 		sourceBytes: z.object({
-			processed: count$2,
-			total: count$2
+			processed: count$3,
+			total: count$3
 		}).strict().nullable(),
-		archiveBytes: count$2
+		archiveBytes: count$3
 	}).strict()
 }).strict();
 /** Disposable progress only. The workflow claim serializes publishers and matching clears. */
@@ -6660,6 +6660,7 @@ async function prepareScanContext(storage, journeyId, work, selected, processing
 }
 //#endregion
 //#region apps/cli/src/journey/prepare/scan-plan.ts
+let publication = Promise.resolve();
 /**
 * The second pass of a Work's Track A (ADR 0177): with every session's receipt saved, its
 * authenticated fields files are read in the Work's reading order twice, once to find each
@@ -6667,6 +6668,18 @@ async function prepareScanContext(storage, journeyId, work, selected, processing
 * Only the plan's outlines stay in memory between the reads, never the Work's text.
 */
 async function publishWorkBatches(storage, plan, work, resources, signal) {
+	const previous = publication;
+	const turn = Promise.withResolvers();
+	publication = turn.promise;
+	await previous;
+	try {
+		signal.throwIfAborted();
+		return await publishAdmittedWork(storage, plan, work, resources, signal);
+	} finally {
+		turn.resolve();
+	}
+}
+async function publishAdmittedWork(storage, plan, work, resources, signal) {
 	const order = new Map(plan.approval.inventory.sessions.map((item, index) => [item.id, index]));
 	const workIndex = (resource) => {
 		const index = order.get(resource.input.sessionId);
@@ -8188,7 +8201,7 @@ async function draftSend(journey, dependencies, signal) {
 	const omitted = [];
 	for (const work of journey.works) {
 		signal.throwIfAborted();
-		const reason = !isSelectedWork(work) ? work.access === "drop" ? "drop" : "empty" : work.status !== "ready" || !hasCompleteWorkDescription(work) || !work.accessConfirmed || !work.artifact || work.artifact.revision !== work.revision ? "not-ready" : work.binding?.sentBundleId === work.artifact.bundleId && work.binding.sentAccess === work.access ? "sent" : work.artifact.archiveBytes > 5368709120 ? "too-large" : null;
+		const reason = !isSelectedWork(work) ? work.access === "drop" ? "drop" : "empty" : work.status !== "ready" || !hasCompleteWorkDescription(work) || !work.accessConfirmed || !work.artifact || work.artifact.revision !== work.revision ? "not-ready" : !dependencies.artifacts.sessions && work.binding?.sentBundleId === work.artifact.bundleId && work.binding.sentAccess === work.access ? "sent" : work.artifact.archiveBytes > 5368709120 ? "too-large" : null;
 		if (reason !== null || work.access === "drop") {
 			omitted.push({
 				workId: work.id,
@@ -8766,18 +8779,18 @@ function createFrozenPathRouter(repositories, folderPaths) {
 }
 //#endregion
 //#region apps/cli/src/journey/works/project-evidence.ts
-const count$1 = z.number().int().nonnegative();
+const count$2 = z.number().int().nonnegative();
 const resultSchema = z.object({
 	repositories: z.array(z.object({
 		id: z.string(),
 		path: z.string(),
-		references: count$1,
-		reads: count$1,
-		changes: count$1,
-		commands: count$1
+		references: count$2,
+		reads: count$2,
+		changes: count$2,
+		commands: count$2
 	})),
 	incomplete: z.boolean(),
-	ignored: count$1
+	ignored: count$2
 });
 const cacheSchema = z.object({
 	key: z.string(),
@@ -8992,7 +9005,7 @@ function createClassificationSessions(storage, processing, stateDir) {
 }
 //#endregion
 //#region apps/cli/src/journey/works/projection.ts
-const digest = (bytes) => createHash("sha256").update(bytes).digest();
+const digest$1 = (bytes) => createHash("sha256").update(bytes).digest();
 async function buildProjection(directory, key, source, role, signal) {
 	const temporary = await mkdtemp(join(directory, ".classification-"));
 	const target = join(directory, `classification-${key}`);
@@ -9025,7 +9038,7 @@ async function buildProjection(directory, key, source, role, signal) {
 						const entry = Buffer.alloc(48);
 						entry.writeBigUInt64LE(BigInt(offset), 0);
 						entry.writeBigUInt64LE(BigInt(bytes.length), 8);
-						digest(bytes).copy(entry, 16);
+						digest$1(bytes).copy(entry, 16);
 						await data.writeFile(bytes);
 						await index.writeFile(entry);
 						offset += bytes.length;
@@ -9076,7 +9089,7 @@ async function buildProjection(directory, key, source, role, signal) {
 /** Persisted derived content, never a scan receipt. Only the first read replays the capture. */
 async function readClassificationProjection(source, options, signal) {
 	signal.throwIfAborted();
-	const key = digest(JSON.stringify([
+	const key = digest$1(JSON.stringify([
 		1,
 		options.snapshotId,
 		source,
@@ -9103,7 +9116,7 @@ async function readClassificationProjection(source, options, signal) {
 		const offset = Number(entry.readBigUInt64LE(0)), length = Number(entry.readBigUInt64LE(8));
 		if (!Number.isSafeInteger(offset) || !Number.isSafeInteger(length) || length > 1048576) throw new ApplicationError("CORRUPTED_STATE");
 		const bytes = await readProjectionBytes(dataPath, offset, length, manifest.data);
-		if (!digest(bytes).equals(entry.subarray(16))) throw new ApplicationError("CORRUPTED_STATE");
+		if (!digest$1(bytes).equals(entry.subarray(16))) throw new ApplicationError("CORRUPTED_STATE");
 		const row = projectionRowSchema.parse(JSON.parse(bytes.toString("utf8")));
 		if (row.sessionId !== source.sessionId || row.sourcePartId !== source.capture.partId) throw new ApplicationError("CORRUPTED_STATE");
 		rows.push(row);
@@ -9771,6 +9784,82 @@ function protectedSourceText(field, hidden) {
 	return text;
 }
 //#endregion
+//#region apps/cli/src/account/journey/remote-error.ts
+const refusalSchema = z.object({
+	error: z.string(),
+	preview: sendSettingsSchema.nullable().optional(),
+	resolution: sendResolutionSchema.optional(),
+	/** `unknown_keep_work_ids`: the kept IDs Passport did not accept (ADR 0204). */
+	workIds: z.array(z.string()).optional()
+});
+var JourneyRemoteError = class extends Error {
+	status;
+	code;
+	details;
+	constructor(status, code, details, options) {
+		super(code, options);
+		this.name = "JourneyRemoteError";
+		this.status = status;
+		this.code = code;
+		this.details = details;
+	}
+};
+//#endregion
+//#region apps/cli/src/journey/send-sessions.ts
+/** Build upload identities from frozen local metadata and bytes from the final primary only. */
+async function* sessionArtifacts(storage, find, journeyId, artifact, signal) {
+	const output = await find(journeyId, artifact.workId, artifact.revision);
+	if (output.bundleId !== artifact.bundleId || output.primary.sha256 !== artifact.sha256 || output.primary.archiveBytes !== artifact.byteLength) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+	const base = (await storage.resources({
+		journeyId,
+		kind: "base"
+	})).find((item) => item.kind === "base" && item.workId === artifact.workId && item.inputRevision === output.finalMaskLedger.inputRevision && item.primary.sha256 === output.finalMaskLedger.basePrimarySha256);
+	const plan = (await storage.resources({
+		journeyId,
+		kind: "plan"
+	})).find((item) => item.kind === "plan");
+	if (base?.kind !== "base" || plan?.kind !== "plan") throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+	const identities = base.sessions.map((binding) => {
+		const session = plan.approval.inventory.sessions.find((item) => item.id === binding.applicationSessionId);
+		const part = session?.parts[0];
+		const lastAt = session?.lastInteractionAt ?? session?.createdAt;
+		if (!session || !part || !lastAt || !Number.isFinite(Date.parse(lastAt))) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+		const nativeId = part.nativeEvidence?.identity?.sessionId ?? session.sourceSessionId;
+		const path = part.harnessRelativePath ?? "";
+		if (!path && !nativeId?.trim() || isAbsolute(path) || path.includes("\\") || path.split("/").some((segment) => segment === ".." || segment === ".")) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+		return {
+			archiveSessionId: binding.archiveSessionId,
+			relativePath: path,
+			lastAt: new Date(lastAt).toISOString()
+		};
+	});
+	for await (const session of configuredSessionUploads(output.primary, identities, signal)) yield {
+		...session,
+		async upload(upload, uploadSignal) {
+			await find(journeyId, artifact.workId, artifact.revision);
+			const url = new URL(upload.uploadUrl);
+			if (url.protocol !== "https:" || url.username || url.password || url.hash) throw new ApplicationError("INVALID_ARGUMENTS");
+			const request = {
+				method: "PUT",
+				body: session.stream(),
+				signal: uploadSignal,
+				redirect: "error",
+				credentials: "omit",
+				referrerPolicy: "no-referrer",
+				headers: {
+					"content-type": "application/zip",
+					"content-length": String(session.byteLength),
+					...upload.headers
+				},
+				duplex: "half"
+			};
+			const response = await fetch(url, request);
+			await response.body?.cancel();
+			if (!response.ok) throw new JourneyRemoteError(response.status, "UPLOAD_FAILED", null);
+		}
+	};
+}
+//#endregion
 //#region apps/cli/src/journey/send-artifacts.ts
 function createJourneySendArtifacts(storage) {
 	async function find(journeyId, workId, revision) {
@@ -9788,6 +9877,7 @@ function createJourneySendArtifacts(storage) {
 		return output;
 	}
 	return {
+		sessions: (journeyId, artifact, signal) => sessionArtifacts(storage, find, journeyId, artifact, signal),
 		async describe(journey, work, signal) {
 			const output = await find(journey.journeyId, work.id, work.revision);
 			const info = await readConfiguredOutputInfo(output.primary, signal);
@@ -9871,69 +9961,61 @@ async function putPrimary(primary, byteLength, upload, signal) {
 	}
 }
 //#endregion
-//#region apps/cli/src/account/journey/state.ts
-function requireSend(snapshot) {
-	if (!snapshot?.send) throw new ApplicationError("UNKNOWN_ITEM");
-	return {
-		...snapshot,
-		send: snapshot.send
-	};
-}
-function matchesAction(snapshot, action) {
-	return snapshot.journey.revision === action.expectedJourneyRevision && snapshot.send.revision === action.expectedSendRevision;
-}
-async function saveSend(dependencies, snapshot, next, action) {
-	return dependencies.storage.commitSend({
-		journeyId: snapshot.journey.journeyId,
-		expectedJourneyRevision: action?.expectedJourneyRevision ?? snapshot.journey.revision,
-		expectedSendRevision: action?.expectedSendRevision ?? (snapshot.send?.id === next.id ? snapshot.send.revision : null),
-		requestKey: action?.idempotencyKey ?? randomUUID(),
-		requestHash: hash$1(action ?? next),
-		state: journeySendSchema.parse({
-			...next,
-			status: next.status === "completed" && !next.replaced ? "sending" : next.status,
-			revision: (snapshot.send?.id === next.id ? snapshot.send.revision : -1) + 1
-		}),
-		at: dependencies.now()
-	});
-}
-function aggregate(send) {
-	if (send.status === "paused") return send;
-	const statuses = send.items.map((item) => item.status);
-	return {
-		...send,
-		status: statuses.length === 0 ? "blocked" : statuses.every((status) => status === "completed") ? "completed" : statuses.some((status) => status === "target" || status === "settings") ? "review" : statuses.some((status) => status === "ready" || status === "uploading") ? "sending" : statuses.some((status) => status === "assessing") ? "waiting" : "blocked"
-	};
+//#region apps/cli/src/account/journey/session-key.ts
+/** Engine native identity, or harness-root-relative path identity when native identity is absent. */
+async function sessionKeyFor(input) {
+	const native = input.nativeSessionId;
+	const path = input.relativePath?.replaceAll("\\", "/");
+	if (!input.harness || (!native || !native.trim()) && !path) throw new TypeError("SESSION_RELATIVE_PATH_REQUIRED");
+	const source = native && native.trim() ? JSON.stringify([
+		"native-v1",
+		input.harness,
+		"session",
+		native
+	]) : `path-v1|${input.harness}|${path}`;
+	return createHash("sha256").update(source, "utf8").digest("hex");
+}
+//#endregion
+//#region apps/cli/src/account/journey/session-access.ts
+/** Check the entire pending Send before admitting any session mutation. */
+async function sessionAccessBlocked(dependencies, journeyId, items, inventory, signal) {
+	const sessions = dependencies.artifacts.sessions;
+	if (!sessions) return false;
+	const requestedAccess = /* @__PURE__ */ new Map();
+	const requestedDigests = /* @__PURE__ */ new Map();
+	for (const item of items) {
+		if (item.sessionAssembly || item.status === "completed") continue;
+		const destination = inventory.works.find((work) => work.logicalWorkId === item.workId);
+		if (destination?.access === "removed") throw new ApplicationError("WORK_REMOVED");
+		for await (const session of sessions(journeyId, item.artifact, signal)) {
+			const key = await sessionKeyFor(session);
+			const otherAccess = requestedAccess.get(key);
+			if (otherAccess !== void 0 && otherAccess !== item.access) return true;
+			requestedAccess.set(key, item.access);
+			const otherDigest = requestedDigests.get(key);
+			if (otherDigest !== void 0 && otherDigest !== session.sha256) throw new ApplicationError("SESSION_CONTENT_CONFLICT");
+			requestedDigests.set(key, session.sha256);
+			const source = inventory.works.find((work) => work.sessions.some((entry) => entry.key === key));
+			if (source && source.logicalWorkId !== item.workId && source.access !== item.access) return true;
+			if (destination && destination.access !== item.access && !destination.sessions.some((entry) => entry.key === key && entry.sha256 === session.sha256)) return true;
+		}
+	}
+	return false;
 }
-/** Explicit resume retries recoverable items and recaptures a pending sign-in or profile. */
-function resumeState(send) {
-	const profileRequired = ["paused", "sign-in"].includes(send.status) || send.subject === null || ["ACCOUNT_PROFILE_UNAVAILABLE", "ACCOUNT_CHANGED"].includes(send.error ?? "") || send.status === "blocked" && send.items.some((item) => [
-		"ready",
-		"uploading",
-		"assessing",
-		"target",
-		"settings"
-	].includes(item.status));
-	const next = aggregate({
-		...send,
-		status: "sending",
-		error: null,
-		items: send.items.map((item) => item.status === "blocked" && [
-			"OPERATION_FAILED",
-			"UPLOAD_FAILED",
-			"SEND_REMOTE_REFUSED",
-			"IDENTITY_UNAVAILABLE",
-			"ACCOUNT_SIGNED_OUT"
-		].includes(item.error ?? "") ? {
-			...item,
-			status: item.receipt ? item.receipt.state === "awaiting_upload" ? "uploading" : "assessing" : "ready",
-			error: null
-		} : item)
-	});
-	return profileRequired && !["blocked", "completed"].includes(next.status) ? {
-		...next,
-		status: "sign-in"
-	} : next;
+/** Keep overlapping session ownership serial through membership, including retained members. */
+async function sessionIndependentItems(dependencies, journeyId, items, inventory, signal) {
+	const sessions = dependencies.artifacts.sessions;
+	if (!sessions) return [];
+	const pending = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => Number(right.status === "uploading") - Number(left.status === "uploading") || right.artifact.byteLength - left.artifact.byteLength);
+	const claimed = /* @__PURE__ */ new Set();
+	const independent = [];
+	for (const item of pending) {
+		const keys = /* @__PURE__ */ new Set([...inventory.works.find((work) => work.logicalWorkId === item.workId)?.sessions.map((session) => session.key) ?? [], ...item.sessionMembership?.keys ?? []]);
+		for await (const session of sessions(journeyId, item.artifact, signal)) keys.add(await sessionKeyFor(session));
+		if (![...keys].some((key) => claimed.has(key))) independent.push(item);
+		for (const key of keys) claimed.add(key);
+	}
+	return independent;
 }
 //#endregion
 //#region apps/cli/src/account/journey/receipt.ts
@@ -10057,14 +10139,154 @@ async function checkPublicAgentSources(candidates, requestFetch = fetch, signal)
 	return results.filter((item) => item !== null);
 }
 //#endregion
-//#region apps/cli/src/account/journey/client.ts
-const refusalSchema = z.object({
-	error: z.string(),
-	preview: sendSettingsSchema.nullable().optional(),
-	resolution: sendResolutionSchema.optional(),
-	/** `unknown_keep_work_ids`: the kept IDs Passport did not accept (ADR 0204). */
-	workIds: z.array(z.string()).optional()
+//#region apps/cli/src/account/journey/session-schema.ts
+const digest = z.string().regex(/^[0-9a-f]{64}$/u);
+const stored = z.strictObject({
+	key: digest,
+	sessionKey: z.string().regex(/^sess-pilot\/[^/]+\/[^/]+\/[^/]+$/u).nullable(),
+	sha256: digest,
+	byteLength: z.number().int().positive(),
+	lastAt: z.iso.datetime()
+});
+const work = z.strictObject({
+	logicalWorkId: z.uuid(),
+	access: z.enum([
+		"public",
+		"private",
+		"removed"
+	]),
+	sessions: z.array(stored)
 });
+const cursor = z.string().nullable();
+const inventory$1 = z.strictObject({
+	works: z.array(work),
+	unassigned: z.array(stored),
+	nextCursor: cursor,
+	unassignedNextCursor: cursor
+});
+const reserve = z.discriminatedUnion("state", [z.strictObject({ state: z.literal("already_stored") }), z.strictObject({
+	state: z.literal("awaiting_upload"),
+	uploadUrl: z.url({ protocol: /^https?$/u }),
+	expiresAt: z.iso.datetime(),
+	headers: z.strictObject({ "x-amz-checksum-sha256": z.base64().length(44) })
+})]);
+const count$1 = z.number().int().nonnegative();
+const assembly = z.strictObject({
+	revision: count$1,
+	completedRevision: count$1,
+	scanId: z.uuid().nullable(),
+	assembledByteCount: count$1.nullable(),
+	wallMs: count$1.nullable(),
+	attempts: count$1,
+	error: z.string().nullable()
+});
+//#endregion
+//#region apps/cli/src/account/journey/session-client.ts
+function continuation(seen, next) {
+	if (next !== null && seen.has(next)) throw new JourneyRemoteError(200, "REMOTE_CURSOR_CYCLE", null);
+	if (next !== null) seen.add(next);
+	return next;
+}
+/** Session endpoints share the owner client's authentication, bounds and refusal classification. */
+function createSessionClient(request) {
+	let writes = Promise.resolve();
+	function mutate(signal, effect) {
+		const result = writes.then(() => {
+			signal.throwIfAborted();
+			return effect();
+		});
+		writes = result.then(() => void 0, () => void 0);
+		return result;
+	}
+	return {
+		async inventory(signal) {
+			const works = /* @__PURE__ */ new Map();
+			const unassigned = /* @__PURE__ */ new Map();
+			let workCursor = null;
+			let unassignedCursor = null;
+			let workDone = false;
+			let unassignedDone = false;
+			const workSeen = /* @__PURE__ */ new Set();
+			const unassignedSeen = /* @__PURE__ */ new Set();
+			do {
+				const query = new URLSearchParams({ limit: "500" });
+				if (workCursor !== null) query.set("cursor", workCursor);
+				if (unassignedCursor !== null) query.set("unassignedCursor", unassignedCursor);
+				const page = await request(`/me/sessions?${query}`, inventory$1, signal, void 0, "GET");
+				if (!workDone) {
+					for (const item of page.works) {
+						const sessions = new Map((works.get(item.logicalWorkId)?.sessions ?? []).map((session) => [session.key, session]));
+						for (const session of item.sessions) sessions.set(session.key, session);
+						works.set(item.logicalWorkId, {
+							...item,
+							sessions: [...sessions.values()]
+						});
+					}
+					workCursor = continuation(workSeen, page.nextCursor);
+					workDone = workCursor === null;
+				}
+				if (!unassignedDone) {
+					for (const session of page.unassigned) unassigned.set(session.key, session);
+					unassignedCursor = continuation(unassignedSeen, page.unassignedNextCursor);
+					unassignedDone = unassignedCursor === null;
+				}
+			} while (!workDone || !unassignedDone);
+			return {
+				works: [...works.values()],
+				unassigned: [...unassigned.values()]
+			};
+		},
+		async work(id, signal) {
+			let next = null;
+			const seen = /* @__PURE__ */ new Set();
+			const sessions = /* @__PURE__ */ new Map();
+			let value;
+			do {
+				const query = new URLSearchParams({ limit: "500" });
+				if (next !== null) query.set("cursor", next);
+				const page = await request(`/me/works/${encodeURIComponent(id)}/sessions?${query}`, work.extend({ nextCursor: cursor }).refine((item) => item.logicalWorkId === id), signal, void 0, "GET");
+				for (const session of page.sessions) sessions.set(session.key, session);
+				value = {
+					logicalWorkId: page.logicalWorkId,
+					access: page.access,
+					sessions: [...sessions.values()]
+				};
+				next = continuation(seen, page.nextCursor);
+			} while (next !== null);
+			return value;
+		},
+		reserve: (input, signal) => request("/me/sessions/reserve", reserve, signal, input),
+		complete: (input, signal) => mutate(signal, () => request("/me/sessions/complete", z.strictObject({ state: z.literal("stored") }), signal, input, "POST", void 0, 6e5)),
+		membership: (id, input, signal) => mutate(signal, () => request(`/me/works/${encodeURIComponent(id)}/sessions`, z.strictObject({
+			revision: count$1,
+			affectedWorks: z.array(z.uuid())
+		}), signal, input, "PUT", void 0, void 0, false, 202)),
+		async assembly(id, signal) {
+			try {
+				return await request(`/me/works/${encodeURIComponent(id)}/assembly`, assembly, signal, void 0, "GET");
+			} catch (error) {
+				if (error instanceof JourneyRemoteError && error.status === 404 && error.code === "not_found") return null;
+				throw error;
+			}
+		},
+		async assessment(scanId, signal) {
+			return (await request(`/me/tasks/${encodeURIComponent(scanId)}/log`, z.strictObject({
+				taskId: z.literal(scanId),
+				state: z.enum([
+					"accepted",
+					"running",
+					"succeeded",
+					"partial",
+					"failed"
+				]),
+				progress: z.number().min(0).max(1),
+				lines: z.array(z.string())
+			}), signal, void 0, "GET")).state;
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/account/journey/client.ts
 const publicProfileSchema = z.strictObject({
 	displayName: z.string().trim().min(1).max(300).nullable(),
 	avatarUrl: z.url().max(2048).refine((value) => {
@@ -10073,18 +10295,6 @@ const publicProfileSchema = z.strictObject({
 		return url.protocol === "https:" && !url.username && !url.password;
 	}).nullable()
 });
-var JourneyRemoteError = class extends Error {
-	status;
-	code;
-	details;
-	constructor(status, code, details, options) {
-		super(code, options);
-		this.name = "JourneyRemoteError";
-		this.status = status;
-		this.code = code;
-		this.details = details;
-	}
-};
 function apiBase(value) {
 	const url = new URL(value);
 	const local = [
@@ -10105,7 +10315,7 @@ const completeTimeoutMs = 6e5;
 function createJourneyOwnerClient(options) {
 	const base = apiBase(options.apiUrl);
 	const requestFetch = options.fetch ?? fetch;
-	async function request(path, schema, signal, body, method = "POST", key, timeoutMs = requestTimeoutMs$2, checksumUpload = false) {
+	async function requestWithHeaders(path, schema, signal, body, method = "POST", key, timeoutMs = requestTimeoutMs$2, checksumUpload = false, expectedStatus = 200) {
 		const token = await options.authorize();
 		signal.throwIfAborted();
 		const response = await requestFetch(new URL(path, base), {
@@ -10133,7 +10343,7 @@ function createJourneyOwnerClient(options) {
 			throw new JourneyRemoteError(response.status, "REMOTE_PROTOCOL", null);
 		}
 		const value = await readOwnerJson(response);
-		if (response.status !== 200) {
+		if (response.status !== expectedStatus) {
 			const refusal = refusalSchema.safeParse(value);
 			throw new JourneyRemoteError(response.status, refusal.success ? refusal.data.error : "REMOTE_PROTOCOL", refusal.success ? refusal.data : null);
 		}
@@ -10141,11 +10351,18 @@ function createJourneyOwnerClient(options) {
 		if (!parsed.success) throw new JourneyRemoteError(response.status, "REMOTE_PROTOCOL", null, { cause: parsed.error });
 		await options.authorize();
 		signal.throwIfAborted();
-		return parsed.data;
+		return {
+			data: parsed.data,
+			headers: response.headers
+		};
+	}
+	async function request(...args) {
+		return (await requestWithHeaders(...args)).data;
 	}
 	const receipt = (id) => sendReceiptSchema.refine((value) => value.receiptId === id);
 	return {
 		subject: options.subject,
+		sessions: createSessionClient(request),
 		checkAgentSources(candidates, signal) {
 			return checkPublicAgentSources(candidates, requestFetch, signal);
 		},
@@ -10154,7 +10371,8 @@ function createJourneyOwnerClient(options) {
 			signal.throwIfAborted();
 		},
 		async syncProfile(signal) {
-			await request("/me/profile", publicProfileSchema, signal);
+			const { headers } = await requestWithHeaders("/me/profile", publicProfileSchema, signal);
+			return { parallelCompletes: (headers.get("passport-capabilities") ?? "").split(",").some((token) => token.trim() === "parallel-completes") };
 		},
 		resolve(input, signal) {
 			return request("/me/work-bundles/resolve", sendResolutionSchema.refine((value) => value.logicalWorkId === input.logicalWorkId), signal, input);
@@ -10252,6 +10470,23 @@ async function applySettings(item, connection, signal, guard, auto = false) {
 }
 //#endregion
 //#region apps/cli/src/account/journey/resolve.ts
+/**
+* Whether the reservation's target survives other Works' completions, which move the owner's
+* scope version: Passport then still admits a new Work that resolves new with no candidate, or
+* the same matched binding at the requested access (ADR 0235).
+*/
+function keepsTarget(resolution, reservation) {
+	const [only] = resolution.candidates;
+	return reservation.target.kind === "new" ? resolution.status === "new" && only === void 0 : resolution.status === "matched" && only?.bindingId === reservation.target.bindingId && only.access === reservation.access;
+}
+/**
+* Whether Passport still admits the reservation under this fresh resolution: the access version
+* must not move, and a moved scope version needs a kept target (ADR 0235).
+*/
+function admits(resolution, reservation) {
+	if (resolution.accessVersion !== reservation.expectedAccessVersion) return false;
+	return resolution.scopeVersion === reservation.expectedScopeVersion || keepsTarget(resolution, reservation);
+}
 function resolveInput(item, bindingId) {
 	return {
 		logicalWorkId: item.workId,
@@ -10386,6 +10621,7 @@ async function perform(context, item, connection, signal) {
 		return next;
 	}
 	if (!item.receipt) {
+		if (item.resolution && !keepsTarget(item.resolution, item.reservation) && !admits(await connection.resolve(item.reservation.work, signal), item.reservation)) return renewed(item, null);
 		const reserved = await connection.reserve(item.operationKey, item.reservation, signal, context.checksumUploads !== false);
 		const next = await observe(item, reserved, connection, signal, auto);
 		if (context.fresh?.has(item.workId) && reserved.upload && next.status === "uploading") context.fresh.set(item.workId, {
@@ -10414,24 +10650,24 @@ async function perform(context, item, connection, signal) {
 			return withoutUpload(item);
 		}
 	}
-	const current = await connection.resolve(item.reservation.work, signal);
-	if (current.scopeVersion !== item.reservation.expectedScopeVersion || current.accessVersion !== item.reservation.expectedAccessVersion) return renewed(item, null);
+	if (!admits(await connection.resolve(item.reservation.work, signal), item.reservation)) return renewed(item, null);
 	return put(context, item, receipt.receiptId, receipt.upload, connection, signal, guard);
 }
 /** Uploads the bytes to the receipt's signed URL and completes it. */
 async function put(context, item, receiptId, upload, connection, signal, guard) {
 	await guard();
 	await context.upload(item.artifact, upload, signal);
+	const sent = withoutBusy(item);
 	await guard();
 	try {
-		return observe(item, await connection.complete(receiptId, signal), connection, signal, context.snapshot === true);
+		return observe(sent, await connection.complete(receiptId, signal), connection, signal, context.snapshot === true);
 	} catch (error) {
 		if (upload.headers !== void 0 && error instanceof JourneyRemoteError && error.code === "bundle_mismatch") return {
 			...renewed(withoutUpload(item), null),
 			checksumUploadRefused: true
 		};
 		if (error instanceof Object) uploaded.set(error, {
-			...item,
+			...sent,
 			uploadedReceiptId: receiptId
 		});
 		throw error;
@@ -10443,10 +10679,24 @@ function uploadedItem(error) {
 	return error instanceof Object ? uploaded.get(error) : void 0;
 }
 function withoutUpload(item) {
-	if (item.uploadedReceiptId === void 0) return item;
-	const { uploadedReceiptId: _, ...rest } = item;
+	if (item.uploadedReceiptId === void 0 && item.busyRefusals === void 0) return item;
+	const { uploadedReceiptId: _, busyRefusals: __, ...rest } = item;
+	return rest;
+}
+/** The busy count spans one upload and its completion: a Work that leaves the upload keeps none (ADR 0235). */
+function withoutBusy(item) {
+	const { busyRefusals: _busy, ...rest } = item;
 	return rest;
 }
+/**
+* A `settings_changed` without a resolution after the bytes were staged: other activations or
+* assessments moved the scope until Passport's retry budget ran out, which says nothing about this
+* Work's target. Completing again needs no second upload; the advance records `SEND_SCOPE_BUSY`
+* and waits longer before each further try (ADR 0235).
+*/
+function stagedRetry(error, item) {
+	return error instanceof JourneyRemoteError && error.code === "settings_changed" && error.details?.resolution === void 0 && item.uploadedReceiptId !== void 0;
+}
 /** A definite stale refusal can renew the intent; unknown outcomes always retry the same key. */
 async function stepItem(context, item, connection, signal) {
 	try {
@@ -10459,10 +10709,11 @@ async function stepItem(context, item, connection, signal) {
 			"target_conflict",
 			"work_removed"
 		].includes(error.code)) throw error;
+		if (stagedRetry(error, uploadedItem(error) ?? item)) throw error;
 		if (item.receipt) {
 			const observed = await connection.status(item.receipt.receiptId, signal);
 			await connection.assertCurrent(signal);
-			if (observed.state !== "awaiting_upload") return observe(item, observed, connection, signal, context.snapshot === true);
+			if (observed.state !== "awaiting_upload") return withoutBusy(await observe(item, observed, connection, signal, context.snapshot === true));
 		}
 		const candidate = error.details?.resolution?.candidates[0];
 		if (error.code === "target_conflict" && item.target?.kind === "existing" && candidate?.bindingId === item.target.bindingId) return {
@@ -10475,6 +10726,17 @@ async function stepItem(context, item, connection, signal) {
 			status: "blocked",
 			error: "WORK_REMOVED"
 		};
+		if (error.code === "settings_changed" && error.details?.resolution === void 0) {
+			const busyRefusals = (item.busyRefusals ?? 0) + 1;
+			if (item.receipt) return {
+				...item,
+				busyRefusals
+			};
+			return {
+				...renewed(item, null),
+				busyRefusals
+			};
+		}
 		return renewed(item, "SETTINGS_CHANGED");
 	}
 }
@@ -10491,18 +10753,268 @@ function renewed(item, error) {
 		error
 	};
 }
+//#endregion
+//#region apps/cli/src/account/journey/session-step.ts
+/** Reconcile against completed server facts on every retry, including after process loss. */
+async function stepSessionWork(dependencies, journeyId, context, item, connection, signal) {
+	const remote = connection.sessions;
+	const sessions = dependencies.artifacts.sessions;
+	if (!remote || !sessions) throw new ApplicationError("INVALID_STATE");
+	async function guard() {
+		await connection.assertCurrent(signal);
+		await context.active();
+		signal.throwIfAborted();
+	}
+	await guard();
+	if (!item.sessionAssembly && (item.status !== "uploading" || item.receipt || item.reservation)) return {
+		...item,
+		receipt: null,
+		reservation: null,
+		target: null,
+		previousReceipts: item.receipt ? [...item.previousReceipts, item.receipt] : item.previousReceipts,
+		status: "uploading",
+		error: null
+	};
+	if (item.sessionAssembly) {
+		const assembly = await remote.assembly(item.workId, signal);
+		if (!assembly) throw new ApplicationError("INVALID_STATE");
+		if (assembly.revision < item.sessionAssembly.revision) return item;
+		if (assembly.error) return {
+			...item,
+			status: "blocked",
+			error: "ASSESSMENT_INCOMPLETE"
+		};
+		const scanId = assembly.completedRevision === assembly.revision ? assembly.scanId : null;
+		const state = scanId ? await remote.assessment(scanId, signal) : "accepted";
+		await guard();
+		const failed = state === "failed" || state === "partial";
+		return {
+			...item,
+			sessionAssembly: {
+				revision: assembly.revision,
+				scanId
+			},
+			status: state === "succeeded" ? "completed" : failed ? "blocked" : "assessing",
+			error: failed ? "ASSESSMENT_INCOMPLETE" : null
+		};
+	}
+	if (item.sessionMembership) {
+		const intent = item.sessionMembership;
+		const assembly = await remote.assembly(intent.workId, signal);
+		const conflict = async () => {
+			const current = await remote.inventory(signal);
+			const revision = await remote.assembly(intent.workId, signal);
+			await guard();
+			return {
+				...item,
+				status: "blocked",
+				error: "SESSION_MEMBERSHIP_CONFLICT",
+				membershipConflict: {
+					revision: revision?.revision ?? 0,
+					keys: current.works.find((work) => work.logicalWorkId === intent.workId)?.sessions.map((session) => session.key) ?? []
+				}
+			};
+		};
+		if ((assembly?.revision ?? 0) !== intent.expectedRevision) return conflict();
+		await guard();
+		try {
+			const { workId, ...input } = intent;
+			const result = await remote.membership(workId, input, signal);
+			await guard();
+			return {
+				...item,
+				sessionAssembly: {
+					revision: result.revision,
+					scanId: null
+				},
+				status: "assessing",
+				error: null
+			};
+		} catch (error) {
+			if (error instanceof JourneyRemoteError && error.status === 409) return conflict();
+			throw error;
+		}
+	}
+	const assembly = await remote.assembly(item.workId, signal);
+	const inventory = await remote.inventory(signal);
+	const stored = new Map([...inventory.unassigned, ...inventory.works.flatMap((work) => work.sessions)].map((session) => [session.key, session]));
+	const keys = [];
+	for await (const session of sessions(journeyId, item.artifact, signal)) {
+		const key = await sessionKeyFor(session);
+		keys.push(key);
+		if (stored.get(key)?.sha256 === session.sha256) continue;
+		const input = {
+			key,
+			sha256: session.sha256,
+			byteLength: session.byteLength,
+			crc32: session.crc32,
+			lastAt: session.lastAt,
+			harness: session.harness
+		};
+		if (item.sessionUpload?.key !== key || item.sessionUpload.sha256 !== session.sha256) return {
+			...item,
+			sessionUpload: {
+				key,
+				sha256: session.sha256
+			}
+		};
+		await guard();
+		try {
+			await remote.complete({
+				...input,
+				metadata: session.metadata
+			}, signal);
+		} catch (error) {
+			if (!(error instanceof JourneyRemoteError) || error.status !== 409 || error.code !== "upload_incomplete") throw error;
+			await guard();
+			const reservation = await remote.reserve(input, signal);
+			if (reservation.state === "awaiting_upload") {
+				await guard();
+				await session.upload(reservation, signal);
+				await guard();
+				await remote.complete({
+					...input,
+					metadata: session.metadata
+				}, signal);
+			}
+		}
+		await guard();
+		return {
+			...item,
+			sessionUpload: null
+		};
+	}
+	await guard();
+	const current = inventory.works.find((work) => work.logicalWorkId === item.workId);
+	if (current && current.access !== item.access) {
+		const resolution = await connection.resolve(resolveInput(item, context.bindingId), signal);
+		const [candidate] = resolution.candidates;
+		if (resolution.status === "blocked" || candidate?.access === "removed") throw new ApplicationError("WORK_REMOVED");
+		if (resolution.status !== "matched" || resolution.logicalWorkId !== item.workId || resolution.candidates.length !== 1 || !candidate || context.bindingId !== void 0 && candidate.bindingId !== context.bindingId) throw new ApplicationError("INVALID_STATE");
+		const settings = await connection.preview(candidate.workId, item.access, signal);
+		await guard();
+		await connection.confirm(settings, signal);
+	}
+	await guard();
+	return {
+		...item,
+		sessionUpload: null,
+		sessionMembership: {
+			workId: item.workId,
+			expectedRevision: assembly?.revision ?? 0,
+			keys: [.../* @__PURE__ */ new Set([...current?.sessions.map((session) => session.key) ?? [], ...keys])],
+			title: item.title,
+			access: item.access
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/account/journey/state.ts
+function requireSend(snapshot) {
+	if (!snapshot?.send) throw new ApplicationError("UNKNOWN_ITEM");
+	return {
+		...snapshot,
+		send: snapshot.send
+	};
+}
+function matchesAction(snapshot, action) {
+	return snapshot.journey.revision === action.expectedJourneyRevision && snapshot.send.revision === action.expectedSendRevision;
+}
+/** Preserve an in-flight whole-Work protocol across upgrades to the session sender. */
+function usesSessionSend(dependencies, send) {
+	if (!dependencies.artifacts.sessions) return false;
+	if (send.items.some((item) => item.sessionUpload !== void 0 || item.sessionMembership || item.sessionAssembly)) return true;
+	return !send.items.some((item) => item.receipt || item.reservation || item.previousReceipts.length > 0);
+}
+async function saveSend(dependencies, snapshot, next, action) {
+	return dependencies.storage.commitSend({
+		journeyId: snapshot.journey.journeyId,
+		expectedJourneyRevision: action?.expectedJourneyRevision ?? snapshot.journey.revision,
+		expectedSendRevision: action?.expectedSendRevision ?? (snapshot.send?.id === next.id ? snapshot.send.revision : null),
+		requestKey: action?.idempotencyKey ?? randomUUID(),
+		requestHash: hash$1(action ?? next),
+		state: journeySendSchema.parse({
+			...next,
+			status: snapshot.send?.id === next.id && snapshot.send.status === "completed" ? "completed" : next.status,
+			revision: (snapshot.send?.id === next.id ? snapshot.send.revision : -1) + 1
+		}),
+		at: dependencies.now()
+	});
+}
+function aggregate(send) {
+	if (send.status === "paused") return send;
+	const statuses = send.items.map((item) => item.status);
+	return {
+		...send,
+		status: statuses.length === 0 ? "blocked" : statuses.every((status) => status === "completed") ? "completed" : statuses.some((status) => status === "target" || status === "settings") ? "review" : statuses.some((status) => status === "ready" || status === "uploading") ? "sending" : statuses.some((status) => status === "assessing") ? "waiting" : "blocked"
+	};
+}
+/**
+* A completed Send that Passport has not finished with: a Work is still assessed or reapplied
+* (ADR 0233). A blocked Work waits on the person's Retry, not on Passport.
+*/
+function awaitingPassport(send) {
+	return send.status === "completed" && send.items.some((item) => !["completed", "blocked"].includes(item.status));
+}
+/** Explicit resume retries recoverable items and recaptures a pending sign-in or profile. */
+function resumeState(send) {
+	if (send.status !== "completed" && send.items.length && send.items.every((item) => item.status === "completed") && send.items.some((item) => !item.sessionAssembly)) return {
+		...send,
+		status: "sign-in",
+		error: null
+	};
+	const profileRequired = ["paused", "sign-in"].includes(send.status) || send.subject === null || ["ACCOUNT_PROFILE_UNAVAILABLE", "ACCOUNT_CHANGED"].includes(send.error ?? "") || send.status === "blocked" && send.items.some((item) => [
+		"ready",
+		"uploading",
+		"assessing",
+		"target",
+		"settings"
+	].includes(item.status));
+	const next = aggregate({
+		...send,
+		status: "sending",
+		error: null,
+		items: send.items.map((item) => item.status === "blocked" && [
+			"OPERATION_FAILED",
+			"UPLOAD_FAILED",
+			"SEND_REMOTE_REFUSED",
+			"SESSION_MOVE_ACCESS_REQUIRED",
+			"IDENTITY_UNAVAILABLE",
+			"ACCOUNT_SIGNED_OUT"
+		].includes(item.error ?? "") ? {
+			...item,
+			status: item.receipt ? item.receipt.state === "awaiting_upload" ? "uploading" : "assessing" : "ready",
+			error: null
+		} : item)
+	});
+	return profileRequired && !["blocked", "completed"].includes(next.status) ? {
+		...next,
+		status: "sign-in"
+	} : next;
+}
 const confirmedSettings = (item) => item.settings !== null && item.settingsConfirmed;
+const started = (item) => Number(item.status === "uploading");
+/**
+* Works that share a workspace path or a git remote: once one completes, Passport offers it as
+* the other's candidate, so the other's target no longer resolves the same (ADR 0235).
+*/
+function related(left, right) {
+	return left.artifact.sources.some((one) => right.artifact.sources.some((other) => one.pathHash !== null && one.pathHash === other.pathHash || one.remoteHashes.some((hash) => other.remoteHashes.includes(hash))));
+}
 /**
-* The Works one advance steps together. Upload work comes before assessment checks, smallest
-* ZIP first. Completing
-* an upload advances the owner's scope version, which every resolution and reservation carries,
-* so one Work's resolve-to-complete steps never overlap another's: uploads step one Work at a
-* time (ADR 0214). Assessment checks change nothing and step up to three together; a confirmed
-* linked Settings change alters access versions, so it always steps alone.
+* The Works one advance steps together. Upload work comes before assessment checks: up to three
+* Works, started uploads first, then the largest ZIP, so the slowest Work starts earliest.
+* Completing an upload moves the owner's scope version, which Passport accepts while a Work's
+* own target resolves the same (ADR 0235). A Work related to one already picked waits for the
+* next batch. A reserved Work whose target would not survive that steps alone, and so does a
+* confirmed linked Settings change, which moves the access version every reservation carries,
+* once no upload has started. Assessment checks change nothing and step up to three together.
 */
-function pickBatch(items, now = Date.now()) {
-	const uploading = items.find((item) => item.status === "uploading") ?? items.filter((item) => item.status === "ready").reduce((smallest, item) => !smallest || item.artifact.byteLength < smallest.artifact.byteLength ? item : smallest, void 0);
-	if (uploading) return [uploading];
+function pickBatch(items, now, limit) {
+	const uploads = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => started(right) - started(left) || right.artifact.byteLength - left.artifact.byteLength);
+	const alone = uploads.find((item) => item.status === "uploading" && item.reservation !== null && item.resolution !== null && !keepsTarget(item.resolution, item.reservation)) ?? (uploads[0] && confirmedSettings(uploads[0]) ? uploads[0] : void 0);
+	if (alone) return [alone];
+	if (uploads.length) return uploads.filter((item) => !confirmedSettings(item)).reduce((batch, item) => batch.length < limit && !batch.some((picked) => related(picked, item)) ? [...batch, item] : batch, []);
 	const assessing = items.filter((item) => item.status === "assessing");
 	const first = assessing[0];
 	if (!first) return [];
@@ -10541,11 +11053,12 @@ async function prepareProfile(dependencies, snapshot, connection, signal) {
 async function captureProfile(connection, guard, signal, failure) {
 	try {
 		await guard();
-		await connection.syncProfile(signal);
+		const { parallelCompletes } = await connection.syncProfile(signal);
 		await guard();
 		return {
 			status: "sending",
-			error: null
+			error: null,
+			parallelCompletes: parallelCompletes ? true : void 0
 		};
 	} catch (error) {
 		if (signal.aborted) throw error;
@@ -10570,6 +11083,8 @@ async function captureProfile(connection, guard, signal, failure) {
 }
 //#endregion
 //#region apps/cli/src/account/journey/advance.ts
+/** A Work Passport is done with: assessed, or stopped unless Resume retries it. */
+const settled = (item) => ["completed", "blocked"].includes(item.status);
 /** The stored Send still holds exactly this Work state, whatever else changed meanwhile. */
 function sameItem(items, item) {
 	return JSON.stringify(items.find((value) => value.workId === item.workId)) === JSON.stringify(item);
@@ -10589,22 +11104,50 @@ async function advanceItems(host, signal) {
 			status: "blocked",
 			error: "ACCOUNT_CHANGED"
 		});
+		if (send.items.length && send.items.every((item) => item.status === "completed")) {
+			const items = send.items.map((item) => {
+				if (item.sessionAssembly) return item;
+				try {
+					if (item.receipt && acceptReceipt(item, {
+						...item.receipt,
+						upload: null
+					}).status === "completed") return item;
+				} catch (error) {
+					host.failure("LEGACY_SEND_RECOVERY_REQUIRED", error);
+				}
+				return {
+					...item,
+					status: "blocked",
+					error: "LEGACY_SEND_RECOVERY_REQUIRED"
+				};
+			});
+			return host.save({
+				...send,
+				items,
+				status: items.every((item) => item.status === "completed") ? "completed" : "blocked",
+				error: items.some((item) => item.status === "blocked") ? "LEGACY_SEND_RECOVERY_REQUIRED" : null
+			});
+		}
 		if (send.subject === null || send.status === "sign-in") {
+			const { parallelCompletes: captured, ...profile } = await host.profile(connection, signal);
+			const parallelCompletes = send.subject === null ? captured : send.parallelCompletes && captured;
 			const prepared = {
 				...send,
 				subject: connection.subject,
-				...await host.profile(connection, signal)
+				...profile
 			};
+			if (parallelCompletes) prepared.parallelCompletes = true;
+			else delete prepared.parallelCompletes;
 			return host.save(prepared.status === "sending" ? aggregate(prepared) : prepared);
 		}
-		const batch = pickBatch(send.items);
-		if (host.finish && batch.every((item) => item.status === "assessing")) {
-			const finished = await host.finish(connection, signal);
-			if (finished !== null) return finished;
-		}
+		const blocked = await host.preflight?.(connection, signal);
+		if (blocked) return blocked;
+		const batch = host.batch?.() ?? pickBatch(send.items, Date.now(), send.parallelCompletes ? 3 : 1);
 		if (!batch.length) return host.applied();
+		const busy = Math.max(0, ...batch.map((item) => item.busyRefusals ?? 0));
+		if (busy) await wait(busyDelay(busy), signal);
 		const checksumUploads = !send.items.some((item) => item.checksumUploadRefused);
-		const results = await Promise.allSettled(batch.map((item) => stepItem({
+		const results = await Promise.allSettled(batch.map((item) => (host.step ?? stepItem)({
 			...host.context(item),
 			checksumUploads
 		}, item, connection, signal)));
@@ -10628,7 +11171,15 @@ async function advanceItems(host, signal) {
 			if (progressed) next.set(item.workId, progressed);
 			if (cause instanceof JourneyRemoteError && cause.status === 401 || isCode(cause, "ACCOUNT_SIGNED_OUT")) signIn = true;
 			else if (isCode(cause, "IDENTITY_REJECTED")) changed = true;
-			else if (isInterrupted(cause) || isTransientRefusal(cause)) {
+			else if (stagedRetry(cause, progressed ?? item)) {
+				const staged = progressed ?? item;
+				next.set(item.workId, {
+					...staged,
+					busyRefusals: (staged.busyRefusals ?? 0) + 1
+				});
+				host.failure("SEND_SCOPE_BUSY", cause);
+				error = "SEND_SCOPE_BUSY";
+			} else if (isInterrupted(cause) || isTransientRefusal(cause)) {
 				host.failure("SEND_INTERRUPTED", cause);
 				error = "SEND_INTERRUPTED";
 			} else {
@@ -10683,42 +11234,6 @@ function blockSend(host, error, signal) {
 		error: code
 	});
 }
-/**
-* The public Work IDs this Send keeps on the owner's Passport: every sent Work's receipt and
-* every Work left out only because the same bundle and access were already sent to this
-* account. Dropped and other omitted Works are not kept (ADR 0204).
-*/
-function keepWorkIds(journey, send) {
-	const unchanged = send.omitted.flatMap((omitted) => {
-		const binding = journey.works.find((work) => work.id === omitted.workId)?.binding;
-		return omitted.reason === "sent" && binding && binding.subject === send.subject ? [binding.publicWorkId] : [];
-	});
-	return [.../* @__PURE__ */ new Set([...send.items.flatMap((item) => item.receipt?.workId ?? []), ...unchanged])];
-}
-/**
-* Passport refused kept IDs it no longer has: a Work omitted as already sent whose Passport copy
-* an earlier Send retired. Those Works are sent again (a retired Work no longer matches, so each
-* becomes a new Work) and replace runs again once they are uploaded. Null when no refused ID is one.
-*/
-async function requeueRetired(journey, send, error, signal, dependencies) {
-	if (error.code !== "unknown_keep_work_ids") return null;
-	const refused = new Set(error.details?.workIds ?? []);
-	const works = send.omitted.flatMap((omitted) => {
-		const work = journey.works.find((value) => value.id === omitted.workId);
-		return omitted.reason === "sent" && work?.binding?.subject === send.subject && refused.has(work.binding.publicWorkId) ? [work] : [];
-	});
-	if (!works.length) return null;
-	const items = [];
-	for (const work of works) items.push(await describeItem(journey, work, dependencies, signal));
-	const ids = new Set(works.map((work) => work.id));
-	return {
-		...send,
-		status: "sending",
-		error: null,
-		items: [...send.items, ...items],
-		omitted: send.omitted.filter((omitted) => !ids.has(omitted.workId))
-	};
-}
 /** A Send saved before ADR 0204 may wait on a target or Settings question that is never asked. */
 function withoutQuestions(send) {
 	if (!send.items.some((item) => ["target", "settings"].includes(item.status))) return send;
@@ -10736,6 +11251,18 @@ function withoutQuestions(send) {
 	};
 	return send.status === "review" ? aggregate(next) : next;
 }
+/** Native completion follows acknowledged upload/membership, independently of assessment. */
+function completeAtUpload(send, sessions) {
+	if (!send.confirmedAt || ![
+		"sending",
+		"waiting",
+		"completed"
+	].includes(send.status) || !send.items.length || !send.items.every((item) => sessions ? !!item.sessionAssembly : ["assessing", "completed"].includes(item.status) && !!item.receipt && item.receipt.state !== "awaiting_upload")) return send;
+	return {
+		...send,
+		status: "completed"
+	};
+}
 async function advanceSend(dependencies, address, signal, chain) {
 	const snapshot = requireSend(await dependencies.storage.loadSend(address.journeyId, address.sendId));
 	if (chain) chain.revision = snapshot.send.revision;
@@ -10743,18 +11270,29 @@ async function advanceSend(dependencies, address, signal, chain) {
 		...snapshot,
 		status: "stale"
 	};
-	if (snapshot.journey.phase === "paused" || !snapshot.send.confirmedAt || [
-		"paused",
-		"completed",
-		"prepared"
-	].includes(snapshot.send.status)) return {
+	const completed = snapshot.send.status === "completed";
+	if (snapshot.journey.phase === "paused" || !snapshot.send.confirmedAt || ["paused", "prepared"].includes(snapshot.send.status) || completed && snapshot.send.items.every(settled)) return {
 		...snapshot,
 		status: "applied"
 	};
-	const save = (next) => saveSend(dependencies, snapshot, next);
+	const save = (next) => !completed ? saveSend(dependencies, snapshot, completeAtUpload(next, usesSessionSend(dependencies, next))) : JSON.stringify(next.items) === JSON.stringify(snapshot.send.items) ? Promise.resolve({
+		...snapshot,
+		status: "applied"
+	}) : saveSend(dependencies, snapshot, {
+		...snapshot.send,
+		items: next.items
+	});
 	try {
 		assertScope(snapshot.journey, snapshot.send);
 	} catch (error) {
+		if (completed) return save({
+			...snapshot.send,
+			items: snapshot.send.items.map((item) => settled(item) ? item : {
+				...item,
+				status: "blocked",
+				error: "SEND_SCOPE_CHANGED"
+			})
+		});
 		return blockSend({
 			send: snapshot.send,
 			failure: dependencies.failure,
@@ -10767,14 +11305,39 @@ async function advanceSend(dependencies, address, signal, chain) {
 	};
 	const send = withoutQuestions(snapshot.send);
 	if (send !== snapshot.send) return save(send);
+	let independentItems = [];
 	return advanceItems({
 		send,
 		failure: dependencies.failure,
+		...usesSessionSend(dependencies, send) ? {
+			batch: () => {
+				const limit = send.parallelCompletes ? 3 : 1;
+				return independentItems.length ? pickBatch(independentItems, Date.now(), limit) : pickBatch(send.items, Date.now(), limit);
+			},
+			preflight: async (connection, preflightSignal) => {
+				if (!connection.sessions) throw new ApplicationError("INVALID_STATE");
+				const inventory = await connection.sessions.inventory(preflightSignal);
+				if (!await sessionAccessBlocked(dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal)) {
+					independentItems = await sessionIndependentItems(dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal);
+					return null;
+				}
+				await connection.assertCurrent(preflightSignal);
+				return save({
+					...send,
+					status: "blocked",
+					items: send.items.map((item) => item.sessionAssembly || item.status === "completed" ? item : {
+						...item,
+						status: "blocked",
+						error: "SESSION_MOVE_ACCESS_REQUIRED"
+					})
+				});
+			},
+			step: (context, item, connection, stepSignal) => stepSessionWork(dependencies, snapshot.journey.journeyId, context, item, connection, stepSignal)
+		} : {},
 		connect: chain?.connect ?? dependencies.auth.connect,
 		profile: (connection, profileSignal) => prepareProfile(dependencies, snapshot, connection, profileSignal),
 		context: (item) => {
 			const binding = snapshot.journey.works.find((value) => value.id === item.workId)?.binding;
-			const retired = !item.receipt && binding?.sentBundleId === item.artifact.bundleId && binding.sentAccess === item.access;
 			return {
 				snapshot: true,
 				...chain ? { fresh: chain.fresh } : {},
@@ -10783,7 +11346,7 @@ async function advanceSend(dependencies, address, signal, chain) {
 					if (current.send.id !== snapshot.send.id || !sameItem(current.send.items, item) || current.send.status === "paused" || current.journey.phase === "paused") throw new ApplicationError("REVISION_CONFLICT");
 					assertScope(current.journey, current.send);
 				},
-				bindingId: binding?.subject === send.subject && !retired ? binding.bundleRecordId : void 0,
+				bindingId: binding?.subject === send.subject ? binding.bundleRecordId : void 0,
 				upload: async (artifact, upload, uploadSignal) => {
 					const started = performance.now();
 					await dependencies.artifacts.upload(snapshot.journey.journeyId, artifact, upload, uploadSignal);
@@ -10791,36 +11354,6 @@ async function advanceSend(dependencies, address, signal, chain) {
 				}
 			};
 		},
-		finish: async (connection, finishSignal) => {
-			if (send.replaced || !send.items.every((item) => ["assessing", "completed"].includes(item.status))) return null;
-			let retired;
-			try {
-				({retiredWorkIds: retired} = await connection.replace(keepWorkIds(snapshot.journey, send), finishSignal));
-			} catch (error) {
-				if (error instanceof JourneyRemoteError && error.status === 401) return save({
-					...send,
-					status: "sign-in",
-					error: null
-				});
-				if (!(error instanceof JourneyRemoteError) || error.status !== 400) throw error;
-				const requeued = await requeueRetired(snapshot.journey, send, error, finishSignal, dependencies);
-				if (requeued) return save(requeued);
-				dependencies.failure("SEND_REPLACE_REFUSED", error);
-				return save({
-					...send,
-					status: "blocked",
-					error: "SEND_REPLACE_REFUSED"
-				});
-			}
-			return save(aggregate({
-				...send,
-				error: null,
-				replaced: {
-					at: dependencies.now(),
-					retiredWorkCount: retired.length
-				}
-			}));
-		},
 		save,
 		applied: () => ({
 			...snapshot,
@@ -10832,6 +11365,28 @@ async function advanceSend(dependencies, address, signal, chain) {
 		})
 	}, signal);
 }
+/** The first wait after a bare refusal of staged bytes, doubled per refusal up to the cap. */
+const busyBaseMs = 2e3;
+/** Short, because a waiting advance holds the panel's single advance in flight. */
+const busyMaxMs = 16e3;
+function busyDelay(refusals) {
+	return Math.min(busyBaseMs * 2 ** (refusals - 1), busyMaxMs);
+}
+/** Waits `ms`; Pause aborts the wait with the advance. */
+function wait(ms, signal) {
+	return new Promise((resolve, reject) => {
+		signal.throwIfAborted();
+		const stop = () => {
+			clearTimeout(timer);
+			reject(signal.reason);
+		};
+		const timer = setTimeout(() => {
+			signal.removeEventListener("abort", stop);
+			resolve();
+		}, ms);
+		signal.addEventListener("abort", stop, { once: true });
+	});
+}
 /**
 * A refusal Passport answers while it or Identity is briefly unavailable. It says nothing about
 * the Work, so the step is retried instead of blocking it (the 2026-11-01 recorded run blocked a
@@ -12350,12 +12905,12 @@ function createJourneyFiles(storage) {
 	};
 }
 /**
-* One advance carries the Work being uploaded through its phases with one verified connection,
-* instead of one phase per panel round trip, and uploads a receipt it just resolved and reserved
-* without reading it again (ADR 0229). Each phase is still fenced and saved on its own, so Pause, a
-* revision change or a failure stops the chain at the next phase exactly as between advances.
-* The advance returns once that Work leaves its upload phases, so the next Work starts from the
-* caller's next advance as before.
+* One advance carries the Works being uploaded, up to three at once (ADR 0235), through their
+* phases with one verified connection, instead of one phase per panel round trip, and uploads a
+* receipt it just resolved and reserved without reading it again (ADR 0229). Each phase is still
+* fenced and saved on its own, so Pause, a revision change or a failure stops the chain at the
+* next phase exactly as between advances. The advance returns after three phases or once no
+* picked Work is mid-upload, so later Works continue from the caller's next advance.
 */
 async function advanceWork(dependencies, address, signal, phases = 3) {
 	let connection;
@@ -12373,7 +12928,7 @@ async function advanceWork(dependencies, address, signal, phases = 3) {
 /** The phase saved progress and left its Work mid-upload, with nothing else to report. */
 function uploading(result, before) {
 	const send = result.send;
-	return result.status === "applied" && send !== null && before !== void 0 && send.revision > before && send.status === "sending" && send.error === null && pickBatch(send.items)[0]?.status === "uploading";
+	return result.status === "applied" && send !== null && before !== void 0 && send.revision > before && send.status === "sending" && send.error === null && pickBatch(send.items, Date.now(), send.parallelCompletes ? 3 : 1)[0]?.status === "uploading";
 }
 //#endregion
 //#region apps/cli/src/account/journey/send.ts
@@ -12405,7 +12960,42 @@ function createJourneySender(dependencies, phases = 3) {
 				status: "stale"
 			};
 			const draft = await draftSend(snapshot.journey, dependencies, signal);
-			const reuse = snapshot.send?.scopeDigest === draft.scopeDigest && snapshot.send.subject === draft.subject;
+			const recover = snapshot.send && [
+				"blocked",
+				"paused",
+				"completed"
+			].includes(snapshot.send.status) && snapshot.send.items.some((item) => [
+				"SESSION_MEMBERSHIP_CONFLICT",
+				"LEGACY_SEND_RECOVERY_REQUIRED",
+				"ASSESSMENT_INCOMPLETE",
+				"SESSION_PUBLICATION_FENCE_REQUIRED"
+			].includes(item.error ?? ""));
+			if (recover && snapshot.send) {
+				const connection = await dependencies.auth.connect(signal);
+				if (!connection) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
+				if (snapshot.send.subject !== null && snapshot.send.subject !== connection.subject) throw new ApplicationError("IDENTITY_REJECTED");
+				const sessions = dependencies.artifacts.sessions;
+				const remote = connection.sessions;
+				if (sessions && remote) {
+					const inventory = await remote.inventory(signal);
+					for (const item of draft.items) {
+						const current = inventory.works.find((work) => work.logicalWorkId === item.workId);
+						const assembly = await remote.assembly(item.workId, signal);
+						const selected = [];
+						for await (const session of sessions(input.journeyId, item.artifact, signal)) selected.push(await sessionKeyFor(session));
+						const currentKeys = current?.sessions.map((session) => session.key) ?? [];
+						item.recoveryReview = {
+							previousSendId: snapshot.send.id,
+							revision: assembly?.revision ?? 0,
+							currentAccess: current?.access ?? null,
+							currentKeys,
+							proposedKeys: [.../* @__PURE__ */ new Set([...currentKeys, ...selected])]
+						};
+					}
+					await connection.assertCurrent(signal);
+				}
+			}
+			const reuse = !recover && snapshot.send?.scopeDigest === draft.scopeDigest && snapshot.send.subject === draft.subject;
 			const next = reuse && snapshot.send ? {
 				...snapshot.send,
 				revision: snapshot.send.revision + 1
@@ -12428,6 +13018,7 @@ function createJourneySender(dependencies, phases = 3) {
 			if (!sameIds(input.confirmedWorkIds, snapshot.send.items.map((item) => item.workId)) || !sameIds(input.confirmedOmittedWorkIds, snapshot.send.omitted.map((item) => item.workId)) || input.scopeDigest !== snapshot.send.scopeDigest || snapshot.send.items.length === 0) throw new ApplicationError("CONFIRMATION_REQUIRED");
 			if (snapshot.send.confirmedAt !== null) return saveSend(dependencies, snapshot, snapshot.send, input);
 			const connection = await dependencies.auth.connect(signal);
+			if (!connection && !dependencies.auth.configured) throw new ApplicationError("ACCOUNT_NOT_CONFIGURED");
 			if (connection && snapshot.send.subject !== null && snapshot.send.subject !== connection.subject) throw new ApplicationError("IDENTITY_REJECTED");
 			let profile = {
 				status: "sign-in",
@@ -12462,6 +13053,7 @@ function createJourneySender(dependencies, phases = 3) {
 		async pause(raw) {
 			const input = sendActionSchema.parse(raw);
 			const snapshot = await load(input);
+			if (snapshot.send.status === "completed" || snapshot.send.replaced) throw new ApplicationError("INVALID_TRANSITION");
 			const result = await saveSend(dependencies, snapshot, {
 				...snapshot.send,
 				status: "paused"
@@ -12474,7 +13066,7 @@ function createJourneySender(dependencies, phases = 3) {
 			const input = sendActionSchema.parse(raw);
 			const snapshot = await load(input);
 			if (!matchesAction(snapshot, input)) return saveSend(dependencies, snapshot, snapshot.send, input);
-			if (snapshot.send.status !== "sign-in" || snapshot.send.items.some((item) => item.receipt)) throw new ApplicationError("INVALID_TRANSITION");
+			if (snapshot.send.status !== "sign-in" || snapshot.send.items.some((item) => item.receipt || item.previousReceipts.length > 0 || item.sessionUpload !== void 0 || item.sessionMembership || item.sessionAssembly)) throw new ApplicationError("INVALID_TRANSITION");
 			const result = await saveSend(dependencies, snapshot, {
 				...snapshot.send,
 				status: "prepared",
@@ -12602,33 +13194,36 @@ function createJourneySendAuth(account, requestFetch) {
 		}
 		return response;
 	};
-	return { async connect(signal) {
-		let credential = await current();
-		if (!credential) return null;
-		let verified = await account.identity.readIdentity(credential.accessToken, signal);
-		if (!verified) {
-			await refuse(credential.accessToken);
-			credential = await current();
+	return {
+		configured: account.configuration.clientId !== null,
+		async connect(signal) {
+			let credential = await current();
 			if (!credential) return null;
-			verified = await account.identity.readIdentity(credential.accessToken, signal);
+			let verified = await account.identity.readIdentity(credential.accessToken, signal);
 			if (!verified) {
-				await expire(credential.accessToken);
-				return null;
+				await refuse(credential.accessToken);
+				credential = await current();
+				if (!credential) return null;
+				verified = await account.identity.readIdentity(credential.accessToken, signal);
+				if (!verified) {
+					await expire(credential.accessToken);
+					return null;
+				}
 			}
+			if (verified.identityId !== credential.identityId) throw new ApplicationError("IDENTITY_REJECTED");
+			return createJourneyOwnerClient({
+				apiUrl: account.configuration.passportApiUrl,
+				subject: verified.identityId,
+				fetch: ownerFetch,
+				async authorize() {
+					const latest = await current();
+					if (!latest) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
+					if (latest.identityId !== verified.identityId) throw new ApplicationError("IDENTITY_REJECTED");
+					return latest.accessToken;
+				}
+			});
 		}
-		if (verified.identityId !== credential.identityId) throw new ApplicationError("IDENTITY_REJECTED");
-		return createJourneyOwnerClient({
-			apiUrl: account.configuration.passportApiUrl,
-			subject: verified.identityId,
-			fetch: ownerFetch,
-			async authorize() {
-				const latest = await current();
-				if (!latest) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
-				if (latest.identityId !== verified.identityId) throw new ApplicationError("IDENTITY_REJECTED");
-				return latest.accessToken;
-			}
-		});
-	} };
+	};
 }
 //#endregion
 //#region apps/cli/src/operation/protocol.ts
@@ -12646,6 +13241,15 @@ const sourceExclusionReasonSchema = z.enum([
 ]);
 const identifier = z.string().regex(/^[A-Za-z0-9_-]{1,128}$/);
 const count = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+const driftCountsSchema = z.object({
+	"claude-row": count.optional(),
+	"claude-block": count.optional(),
+	"codex-row": count.optional(),
+	"codex-event": count.optional(),
+	"codex-item": count.optional(),
+	"codex-extension": count.optional(),
+	launch: count.optional()
+});
 const safeDiagnosticSchema = z.object({
 	code: z.string().regex(/^[A-Z][A-Z0-9_]{0,79}$/),
 	stage: z.string().regex(/^[a-z][a-z0-9.-]{0,63}$/).default("runtime"),
@@ -12655,6 +13259,7 @@ const safeDiagnosticSchema = z.object({
 	at: z.string().datetime().max(64).optional(),
 	reason: sourceExclusionReasonSchema.optional(),
 	sourceId: z.string().regex(/^src[0-9]{1,12}$/).optional(),
+	driftCounts: driftCountsSchema.optional(),
 	counts: z.object({
 		workspaces: count,
 		sessions: count,
@@ -12722,6 +13327,7 @@ function projectSafeDiagnostic(value) {
 		operationId: Reflect.get(value, "operationId"),
 		at: Reflect.get(value, "at"),
 		counts: Reflect.get(value, "counts"),
+		driftCounts: Reflect.get(value, "driftCounts"),
 		location: safeLocation,
 		reason: Reflect.get(value, "reason"),
 		sourceId: Reflect.get(value, "sourceId")
@@ -12736,11 +13342,22 @@ function createSafeProducerCallbacks(emit, record) {
 			code: diagnostic.code,
 			stage: diagnostic.stage,
 			...diagnostic.reason ? { reason: diagnostic.reason } : {},
-			...diagnostic.sourceId ? { sourceId: diagnostic.sourceId } : {}
+			...diagnostic.sourceId ? { sourceId: diagnostic.sourceId } : {},
+			...diagnostic.driftCounts ? { driftCounts: diagnostic.driftCounts } : {}
 		});
 		emit(diagnostic);
 	}
 	function anomaly(stage, event) {
+		if (event.code === "tolerated-harness-drift") {
+			const counts = driftCountsSchema.safeParse(event.driftCounts);
+			publish({
+				code: "HARNESS_DRIFT_TOLERATED",
+				...counts.success ? { driftCounts: counts.data } : {},
+				stage,
+				.../^src[0-9]{1,12}$/.test(event.sourceId) ? { sourceId: event.sourceId } : {}
+			});
+			return;
+		}
 		const reason = sourceExclusionReasonSchema.safeParse(event.code);
 		if (!reason.success) return;
 		publish({
@@ -14706,4 +15323,4 @@ async function cancelOperation(runtime, id) {
 	return readOperation(runtime, id);
 }
 //#endregion
-export { createExecutionPort as _, readAgentPresence as a, executorRequestSchema as c, parseOptions as d, businessCommands as f, readStateDump as g, startupFailure as h, invoke as i, createRenderActivity as l, permissionDiagnostic as m, readOperation as n, createRuntime as o, longCommands as p, waitOperation as r, executorEventSchema as s, cancelOperation as t, helpText as u, startHost as v, traceStartup as y };
+export { readStateDump as _, readAgentPresence as a, traceStartup as b, executorRequestSchema as c, helpText as d, parseOptions as f, startupFailure as g, permissionDiagnostic as h, invoke as i, awaitingPassport as l, longCommands as m, readOperation as n, createRuntime as o, businessCommands as p, waitOperation as r, executorEventSchema as s, cancelOperation as t, createRenderActivity as u, createExecutionPort as v, startHost as y };