@gitroll/tacitt-cli 0.4.1 → 0.5.0

package/dist/{agent-setup-Cb_spmGb.mjs → agent-setup-BZbgLgHg.mjs}

@@ -1,5 +1,5 @@
-import "./locate-U3-nkird.mjs";
-import "./src-DSDRF7i6.mjs";
+import "./locate-JYtFmKu-.mjs";
+import "./src-C1SjCDx0.mjs";
 import { z } from "zod";
 import { Worker } from "node:worker_threads";
 //#region apps/cli/src/agent-setup/index.ts

package/dist/agent-setup-worker.mjs

@@ -1,8 +1,8 @@
-import { q as listAgentSetup } from "./src-DIuh0LHk.mjs";
-import { rn as workspaceSchema, tn as sessionSchema, yn as createStaticProcessor } from "./locate-U3-nkird.mjs";
-import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-BESjwh7X.mjs";
-import { at as maximumAgentSetupSessions, ci as effectiveTreatmentSchema } from "./src-DSDRF7i6.mjs";
-import "./agent-setup-Cb_spmGb.mjs";
+import { J as listAgentSetup } from "./src-CQeUBG2Y.mjs";
+import { Dn as createStaticProcessor, dn as workspaceSchema, ln as sessionSchema } from "./locate-JYtFmKu-.mjs";
+import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-xidy0yF7.mjs";
+import { at as maximumAgentSetupSessions, ci as effectiveTreatmentSchema } from "./src-C1SjCDx0.mjs";
+import "./agent-setup-BZbgLgHg.mjs";
 import { z } from "zod";
 import { parentPort, workerData } from "node:worker_threads";
 //#region apps/cli/src/agent-setup/worker.ts

package/dist/cli.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { _ as createExecutionPort, a as readAgentPresence, d as parseOptions, f as businessCommands, g as readStateDump, h as startupFailure, i as invoke, l as createRenderActivity, m as permissionDiagnostic, n as readOperation, o as createRuntime, p as longCommands, r as waitOperation, s as executorEventSchema, t as cancelOperation, u as helpText, v as startHost$1, y as traceStartup } from "./query-7uY266qY.mjs";
-import { nt as openPrivateFile, tt as makePrivateDirectory } from "./src-DIuh0LHk.mjs";
-import { Gt as safeField, Ht as ApplicationError, Wt as safeCode } from "./locate-U3-nkird.mjs";
-import { Zn as reviewTransportBytes, et as readWorkspaceOutcomes, ii as stateSchema, st as resolveFailureLocation } from "./src-DSDRF7i6.mjs";
-import { _t as isCoordinationBusy } from "./heap-eZTo0VYj.mjs";
+import { _ as readStateDump, a as readAgentPresence, b as traceStartup, d as helpText, f as parseOptions, g as startupFailure, h as permissionDiagnostic, i as invoke, l as awaitingPassport, m as longCommands, n as readOperation, o as createRuntime, p as businessCommands, r as waitOperation, s as executorEventSchema, t as cancelOperation, u as createRenderActivity, v as createExecutionPort, y as startHost$1 } from "./query-BZvNsP1u.mjs";
+import { nt as makePrivateDirectory, rt as openPrivateFile } from "./src-CQeUBG2Y.mjs";
+import { $t as safeField, Qt as safeCode, Xt as ApplicationError } from "./locate-JYtFmKu-.mjs";
+import { Zn as reviewTransportBytes, et as readWorkspaceOutcomes, ii as stateSchema, st as resolveFailureLocation } from "./src-C1SjCDx0.mjs";
+import { _t as isCoordinationBusy } from "./heap-NDnGBXH6.mjs";
 import { constants, createReadStream, write } from "node:fs";
 import { z } from "zod";
 import { lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, writeFile } from "node:fs/promises";
@@ -140,6 +140,13 @@ function reportOwnershipCheckDeferred() {
 		})}\n`, (_error) => {});
 	} catch {}
 }
+/**
+* A focused host stops 30 minutes after its journey ended and Passport finished with the last
+* Send, and at most 3 hours after the journey ended (ADR 0233).
+*/
+function hostFinished(now, endedAt, settledAt) {
+	return now - endedAt >= 108e5 || settledAt !== void 0 && now - settledAt >= 18e5;
+}
 async function serve(options, journeyId) {
 	let initializing;
 	let shutdownPhase = "application-and-account";
@@ -147,6 +154,7 @@ async function serve(options, journeyId) {
 	let host;
 	let ownerTimer;
 	let finishTimer;
+	const hostLife = new AbortController();
 	let observedStore = void 0;
 	const timing = process.env["CI"] ? createHostTimingSampler() : void 0;
 	const timingTimer = process.env["CI"] ? setInterval(() => {
@@ -197,6 +205,7 @@ async function serve(options, journeyId) {
 		}, 5e3);
 		if (ownerTimer) clearInterval(ownerTimer);
 		if (finishTimer) clearInterval(finishTimer);
+		hostLife.abort();
 		host?.beginStop();
 		try {
 			await runtime.close();
@@ -286,12 +295,29 @@ async function serve(options, journeyId) {
 		process.on("SIGTERM", onSignal);
 		if (journeyId) {
 			let endedAt;
+			let settledAt;
+			let following = false;
 			finishTimer = setInterval(() => {
-				runtime.application.journey?.get({ journeyId }).then((journey) => {
-					endedAt = journey?.phase === "completed" || journey?.abandonedAt !== void 0 ? endedAt ?? Date.now() : void 0;
-					if (endedAt !== void 0 && Date.now() - endedAt >= 18e5) scheduleStop();
-				}).catch(() => {});
-			}, 6e4);
+				if (following) return;
+				following = true;
+				(async () => {
+					const { journey: journeys, journeySend } = runtime.application;
+					const journey = await journeys?.get({ journeyId });
+					const ended = journey?.phase === "completed" || journey?.abandonedAt !== void 0;
+					const send = (await journeys?.get({}))?.journeyId === journeyId ? (await journeySend?.get({ journeyId }))?.send : null;
+					const waiting = Boolean(send && awaitingPassport(send));
+					const now = Date.now();
+					endedAt = ended ? endedAt ?? now : void 0;
+					settledAt = ended && !waiting ? settledAt ?? now : void 0;
+					if (endedAt !== void 0 && hostFinished(now, endedAt, settledAt)) return scheduleStop();
+					if (waiting && send) await journeySend?.advance({
+						journeyId,
+						sendId: send.id
+					}, hostLife.signal);
+				})().catch(() => {}).finally(() => {
+					following = false;
+				});
+			}, 15e3);
 			finishTimer.unref();
 			const url = new URL(host.url);
 			url.searchParams.set("view", "skill");
@@ -1135,6 +1161,7 @@ const writeJson = (value) => new Promise((resolve, reject) => {
 /** Procedures the review helper sends; each runs exactly as its own `--input` command would. */
 const streamProcedures = /* @__PURE__ */ new Set([
 	"journey.get",
+	"journey.remoteWorkers",
 	"journey.prepare",
 	"journey.catalog",
 	"journey.classificationSessions",

package/dist/codex-title-worker.mjs

@@ -1,4 +1,4 @@
-import { i as errorCode } from "./model-BDrntocp.mjs";
+import { i as errorCode } from "./model-CmHypB0p.mjs";
 import { a as titleHintLimits, i as encodeTitleError, o as titleInputSchema, t as assertTitleHeap } from "./heap-1FYhGds4.mjs";
 import { stat } from "node:fs/promises";
 import { isAbsolute, join } from "node:path";

package/dist/configured-preview-worker.mjs

@@ -1,8 +1,8 @@
-import { J as createConfiguredPreviewStream } from "./src-DIuh0LHk.mjs";
-import { rn as workspaceSchema, tn as sessionSchema, yn as createStaticProcessor } from "./locate-U3-nkird.mjs";
-import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-BESjwh7X.mjs";
-import { ci as effectiveTreatmentSchema } from "./src-DSDRF7i6.mjs";
-import { a as classifyRecord, n as assertPreviewHeap, t as runPreview } from "./run-CV6Io7CS.mjs";
+import { Y as createConfiguredPreviewStream } from "./src-CQeUBG2Y.mjs";
+import { Dn as createStaticProcessor, dn as workspaceSchema, ln as sessionSchema } from "./locate-JYtFmKu-.mjs";
+import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-xidy0yF7.mjs";
+import { ci as effectiveTreatmentSchema } from "./src-C1SjCDx0.mjs";
+import { a as classifyRecord, n as assertPreviewHeap, t as runPreview } from "./run-DvRM-NR8.mjs";
 import { z } from "zod";
 import { parentPort, workerData } from "node:worker_threads";
 //#region apps/cli/src/preview/run.ts

package/dist/configured-session-worker.mjs

@@ -1,8 +1,8 @@
-import { $ as safeError, A as runConfiguredSessionJob, R as gitSeedsProvider, m as captureConfiguredSessionJob, u as runConfiguredScanJob } from "./src-DIuh0LHk.mjs";
-import { Wt as safeCode, yn as createStaticProcessor } from "./locate-U3-nkird.mjs";
-import { l as createNativeAdapters } from "./src-BESjwh7X.mjs";
-import "./src-DSDRF7i6.mjs";
-import { d as runJourneyBaseJob, i as runJourneyOutputVerifyJob, n as runJourneyOutputJob, r as runJourneyOutputShardJob } from "./job-Bi57uRU-.mjs";
+import { et as safeError, h as captureConfiguredSessionJob, j as runConfiguredSessionJob, u as runConfiguredScanJob, z as gitSeedsProvider } from "./src-CQeUBG2Y.mjs";
+import { Dn as createStaticProcessor, Qt as safeCode } from "./locate-JYtFmKu-.mjs";
+import { l as createNativeAdapters } from "./src-xidy0yF7.mjs";
+import "./src-C1SjCDx0.mjs";
+import { d as runJourneyBaseJob, i as runJourneyOutputVerifyJob, n as runJourneyOutputJob, r as runJourneyOutputShardJob } from "./job-BO0a67HQ.mjs";
 import { parentPort } from "node:worker_threads";
 //#region apps/cli/src/configured-session-worker.ts
 const port = parentPort;

package/dist/{frame-waS5FnN5.mjs → frame-DGun31Uc.mjs}

@@ -1,4 +1,4 @@
-import { nr as ProcessingError } from "./locate-U3-nkird.mjs";
+import { ur as ProcessingError } from "./locate-JYtFmKu-.mjs";
 //#region packages/processing/src/compression/frame.ts
 function createZstdFrameCheck(fail = () => {
 	throw new ProcessingError("PROCESSING_INVALID_RECORD");

package/dist/{heap-eZTo0VYj.mjs → heap-NDnGBXH6.mjs}

@@ -1,6 +1,6 @@
-import { b as writePrivateReviewPayload, et as exclusiveLock, it as windowsOwnerOnly, nt as openPrivateFile, rt as restrictToOwner, x as readPrivateReviewPayload } from "./src-DIuh0LHk.mjs";
-import { $t as fileIdentitySchema, At as journeyTermSchema, Ht as ApplicationError, It as termTypeSchema, Jt as reviewFamilies, Kn as isStaticCategory, Mt as reviewTermsResultSchema, _ as semanticFindingSchema, b as validateBReview, c as textDigest, d as reviewAlignmentAudit, dt as nativeJourneySchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, gn as createDetectionSummary, gt as journeyWorkSuggestionSchema, ht as journeyDescribeSchema, i as reviewBatchSchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, kt as privacyTermSchema, l as validateReview, m as reviewAlignmentSchema, o as reviewDigest, ot as journeyIdSchema, qn as staticCategories, qt as familySelected, r as reviewBatchChunks, s as reviewSubmitSchema, u as findingReferenceKey, v as bContextEvidence } from "./locate-U3-nkird.mjs";
-import { $n as mergeBRepair, $t as journeyResourceSchema, At as validateAttemptAppend, B as validateInspectionBatch, Bt as newJourneyWork, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Ft as applyClassificationProposal, G as validateInspectionFence, Gn as workPrivacyDecisions, Gr as withReadingProgress, Gt as hideFinishSchema, Hn as syncTermGroups, Hr as isReadingComplete, Ht as journeyContextQuerySchema, In as confirmedHideKey, It as classificationCommitSchema, J as validateInspectionQuery, Jn as reviewCandidateResourceSchema, Jt as journeySearchSaveSchema, K as validateInspectionHead, Kr as mergePrivacyTerms, Kt as hidePublishSchema, Mn as bMaskedHits, Nt as journeyBatchReadSchema, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Qn as bReviewDigest, Qt as journeyResourceQuerySchema, Rn as confirmedHideTerms, Un as retireWorkDescription, Ur as isSelectedWork, Ut as journeyContextSchema, V as validateInspectionBatches, Vn as maskedHitsStale, W as validateInspectionClaim, Wn as workDecisionDigest, Wr as selectedWorks, Wt as hideBeginSchema, X as validateDetectionSummary, Xn as reviewRepairResourceSchema, Xt as journeyPolicyRespondSchema, Y as validateInspectionContribution, Yt as searchScopeDigest, Z as inspectionInputs, Zt as projectPreparationProgress, _ as projectJourneyInventory, _n as journeyCommitResultSchema, _r as preparationSettlementSchema, an as reviewAttemptsResultSchema, ar as scanGitSeedsId, b as bReviewScope, c as reconstructBFields, cn as sessionReconciliationResourceSchema, en as journeyIsolateSchema, fn as sessionReviewQuerySchema, fr as journeyInventoryReadSchema, gn as sessionUsefulnessResourceSchema, gr as preparationBeginSchema, h as semanticGroupKey, hn as sessionUsefulnessInputSchema, ht as candidateSortAvailable, ii as stateSchema, in as reviewAttemptsQuerySchema, ir as scanSessionResourceSchema, jt as journeyGuidance, kr as staticSessionId, kt as attemptBudgetCodePoints, l as reviseGroupMembership, lr as validateScanExclusion, m as hideScopeDigest, mn as sessionReviewStatusSchema, mr as journeyPreparationProgressSchema, nn as sortingApplySchema, nr as scanCanonicalResourceSchema, o as bRereadDigest, pn as sessionReviewResourceSchema, pr as journeyInventorySchema, pt as manualUploadSchema, q as validateInspectionInputs, qt as journeySearchResultSchema, rn as reviewAttemptResourceSchema, s as reconcileBSession, sn as sessionReconcileResultSchema, t as scanBatchContextDigest, tn as journeyPlaceSchema, tr as scanAliasResourceSchema, u as resolveGroupSplit, un as sessionRereadResourceSchema, ut as manualUploadBindingSchema, v as preparationScope, vn as journeyCommitSchema, vr as preparationStartSchema, wn as settleConfirmedHides, wt as settleCorrections, xn as confirmedHideDeltaSchema, xr as applyCardAnswers, yn as journeyEventSchema, yr as validatePreparationFacts, zn as dictionaryHides } from "./src-DSDRF7i6.mjs";
+import { S as readPrivateReviewPayload, at as windowsOwnerOnly, it as restrictToOwner, rt as openPrivateFile, tt as exclusiveLock, x as writePrivateReviewPayload } from "./src-CQeUBG2Y.mjs";
+import { At as journeyTermSchema, It as termTypeSchema, Mt as reviewTermsResultSchema, Xt as ApplicationError, _ as semanticFindingSchema, b as validateBReview, c as textDigest, d as reviewAlignmentAudit, dt as nativeJourneySchema, er as isStaticCategory, ft as journeyGuidanceSchema, g as validateReviewAlignment, gt as journeyWorkSuggestionSchema, ht as journeyDescribeSchema, i as reviewBatchSchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, kt as privacyTermSchema, l as validateReview, m as reviewAlignmentSchema, nn as reviewFamilies, o as reviewDigest, ot as journeyIdSchema, r as reviewBatchChunks, s as reviewSubmitSchema, sn as fileIdentitySchema, tn as familySelected, tr as staticCategories, u as findingReferenceKey, v as bContextEvidence, wn as createDetectionSummary } from "./locate-JYtFmKu-.mjs";
+import { $n as mergeBRepair, $t as journeyResourceSchema, At as validateAttemptAppend, B as validateInspectionBatch, Bt as newJourneyWork, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Ft as applyClassificationProposal, G as validateInspectionFence, Gn as workPrivacyDecisions, Gr as withReadingProgress, Gt as hideFinishSchema, Hn as syncTermGroups, Hr as isReadingComplete, Ht as journeyContextQuerySchema, In as confirmedHideKey, It as classificationCommitSchema, J as validateInspectionQuery, Jn as reviewCandidateResourceSchema, Jt as journeySearchSaveSchema, K as validateInspectionHead, Kr as mergePrivacyTerms, Kt as hidePublishSchema, Mn as bMaskedHits, Nt as journeyBatchReadSchema, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Qn as bReviewDigest, Qt as journeyResourceQuerySchema, Rn as confirmedHideTerms, Un as retireWorkDescription, Ur as isSelectedWork, Ut as journeyContextSchema, V as validateInspectionBatches, Vn as maskedHitsStale, W as validateInspectionClaim, Wn as workDecisionDigest, Wr as selectedWorks, Wt as hideBeginSchema, X as validateDetectionSummary, Xn as reviewRepairResourceSchema, Xt as journeyPolicyRespondSchema, Y as validateInspectionContribution, Yt as searchScopeDigest, Z as inspectionInputs, Zt as projectPreparationProgress, _ as projectJourneyInventory, _n as journeyCommitResultSchema, _r as preparationSettlementSchema, an as reviewAttemptsResultSchema, ar as scanGitSeedsId, b as bReviewScope, c as reconstructBFields, cn as sessionReconciliationResourceSchema, en as journeyIsolateSchema, fn as sessionReviewQuerySchema, fr as journeyInventoryReadSchema, gn as sessionUsefulnessResourceSchema, gr as preparationBeginSchema, h as semanticGroupKey, hn as sessionUsefulnessInputSchema, ht as candidateSortAvailable, ii as stateSchema, in as reviewAttemptsQuerySchema, ir as scanSessionResourceSchema, jt as journeyGuidance, kr as staticSessionId, kt as attemptBudgetCodePoints, l as reviseGroupMembership, lr as validateScanExclusion, m as hideScopeDigest, mn as sessionReviewStatusSchema, mr as journeyPreparationProgressSchema, nn as sortingApplySchema, nr as scanCanonicalResourceSchema, o as bRereadDigest, pn as sessionReviewResourceSchema, pr as journeyInventorySchema, pt as manualUploadSchema, q as validateInspectionInputs, qt as journeySearchResultSchema, rn as reviewAttemptResourceSchema, s as reconcileBSession, sn as sessionReconcileResultSchema, t as scanBatchContextDigest, tn as journeyPlaceSchema, tr as scanAliasResourceSchema, u as resolveGroupSplit, un as sessionRereadResourceSchema, ut as manualUploadBindingSchema, v as preparationScope, vn as journeyCommitSchema, vr as preparationStartSchema, wn as settleConfirmedHides, wt as settleCorrections, xn as confirmedHideDeltaSchema, xr as applyCardAnswers, yn as journeyEventSchema, yr as validatePreparationFacts, zn as dictionaryHides } from "./src-C1SjCDx0.mjs";
 import { constants } from "node:fs";
 import { z } from "zod";
 import { copyFile, link, lstat, mkdir, mkdtemp, open, readFile, realpath, rm, unlink } from "node:fs/promises";
@@ -415,11 +415,11 @@ function insertCorrectionReport(db, resource) {
 * A snapshot of an earlier release cannot render, so a new Journey may replace it, but never
 * one with a Send record or a sent Work: that Send stays for the person to finish.
 */
-/** Passport holds a receipt from one of this Journey's Sends, so a Work may have reached it. */
+/** A receipt or persisted session mutation intent means a Send may have reached Passport. */
 function reachedPassport(db, journeyId) {
 	return db.prepare("SELECT json FROM journey_sends WHERE journey_id=?").all(journeyId).some((row) => {
 		if (typeof row["json"] !== "string") throw new ApplicationError("CORRUPTED_STATE");
-		return journeySendSchema.parse(JSON.parse(row["json"])).items.some((item) => item.receipt || item.previousReceipts.length);
+		return journeySendSchema.parse(JSON.parse(row["json"])).items.some((item) => item.receipt || item.previousReceipts.length || item.sessionUpload !== void 0 || item.sessionMembership || item.sessionAssembly);
 	});
 }
 /** An abandoned Journey gives way to a new one unless one of its Sends reached Passport. */
@@ -4828,7 +4828,7 @@ function commitJourneySend(db, input) {
 	].includes(work.reason));
 	const journey = {
 		...current.journey,
-		phase: current.journey.phase === "paused" ? "paused" : finished ? "completed" : [
+		phase: current.journey.phase === "paused" || prior?.status === "completed" ? current.journey.phase : finished ? "completed" : [
 			"completed",
 			"blocked",
 			"paused"

package/dist/inspection-worker.mjs

@@ -1,7 +1,7 @@
-import { Y as createInspectionProcessor } from "./src-DIuh0LHk.mjs";
-import { yn as createStaticProcessor } from "./locate-U3-nkird.mjs";
-import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-BESjwh7X.mjs";
-import { H as validateInspectionRequest } from "./src-DSDRF7i6.mjs";
+import { X as createInspectionProcessor } from "./src-CQeUBG2Y.mjs";
+import { Dn as createStaticProcessor } from "./locate-JYtFmKu-.mjs";
+import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-xidy0yF7.mjs";
+import { H as validateInspectionRequest } from "./src-C1SjCDx0.mjs";
 import "./messages-D3m3bhva.mjs";
 import { z } from "zod";
 import { parentPort, workerData } from "node:worker_threads";

package/dist/{job-Bi57uRU-.mjs → job-BO0a67HQ.mjs}

@@ -1,12 +1,386 @@
-import { B as writeLogicalJourneyOutput, C as readConfiguredSearchFields, E as prepareCollectionProduction, R as gitSeedsProvider, U as readConfiguredOutputInfo, d as verifyOutputShard, f as writeOutputShard, k as renderJobDigest, y as writeLogicalJourneyBase } from "./src-DIuh0LHk.mjs";
-import { Ht as ApplicationError, Jt as reviewFamilies, zt as filterInventoryByPeriod } from "./locate-U3-nkird.mjs";
-import { Ar as staticSessionResourceSchema, Cn as renderedHideValue, Dn as hideKeyId, En as addHideIndexTokens, di as selectFrozenConfiguration, kn as packHideIndex, li as defaultScopedSettings, ui as freezeConfiguration } from "./src-DSDRF7i6.mjs";
+import { A as renderJobDigest, D as prepareCollectionProduction, V as writeLogicalJourneyOutput, W as readConfiguredOutputInfo, at as windowsOwnerOnly, b as writeLogicalJourneyBase, d as verifyOutputShard, f as writeOutputShard, nt as makePrivateDirectory, w as readConfiguredSearchFields, z as gitSeedsProvider } from "./src-CQeUBG2Y.mjs";
+import { Xt as ApplicationError, nn as reviewFamilies, zt as filterInventoryByPeriod } from "./locate-JYtFmKu-.mjs";
+import { Ar as staticSessionResourceSchema, Cn as renderedHideValue, Dn as hideKeyId, En as addHideIndexTokens, di as selectFrozenConfiguration, kn as packHideIndex, li as defaultScopedSettings, ui as freezeConfiguration } from "./src-C1SjCDx0.mjs";
 import { constants } from "node:fs";
-import { link, lstat, open, unlink } from "node:fs/promises";
-import { join } from "node:path";
+import { z } from "zod";
+import { copyFile, link, lstat, mkdir, mkdtemp, open, readFile, realpath, rename, rm, unlink, writeFile } from "node:fs/promises";
+import { execFile } from "node:child_process";
+import { dirname, join } from "node:path";
+import { promisify } from "node:util";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { tmpdir } from "node:os";
+import { quote } from "shell-quote";
+//#region apps/cli/src/remote/model.ts
+function validRemotePath(path, harness) {
+	return harness === "codex" ? /^\.codex\/sessions\/\d{4}\/\d{2}\/\d{2}\/rollout-[A-Za-z0-9_.-]+\.jsonl$/u.test(path) : /^\.claude\/projects\/[A-Za-z0-9_-]+\/[A-Za-z0-9_-]+\.jsonl$/u.test(path);
+}
+function insideWindow(start, window) {
+	const time = Date.parse(start);
+	return Number.isFinite(time) && time >= Date.parse(window.start) && time <= Date.parse(window.end);
+}
+//#endregion
+//#region apps/cli/src/remote/transport.ts
+const execute = promisify(execFile);
+/** Pin every component to the signed-in user's home without following links. */
+const sourceReader = `def source_open(relative):
+ parts=relative.split('/')
+ if any(part in ('','.', '..') for part in parts): raise RuntimeError('invalid source')
+ directory=os.open(os.path.expanduser('~'),os.O_RDONLY|os.O_DIRECTORY|os.O_NOFOLLOW)
+ try:
+  for part in parts[:-1]:
+   child=os.open(part,os.O_RDONLY|os.O_DIRECTORY|os.O_NOFOLLOW,dir_fd=directory)
+   os.close(directory)
+   directory=child
+  descriptor=os.open(parts[-1],os.O_RDONLY|os.O_NOFOLLOW|os.O_NONBLOCK,dir_fd=directory)
+  try:
+   metadata=os.fstat(descriptor)
+   if not stat.S_ISREG(metadata.st_mode) or metadata.st_uid!=os.getuid(): raise RuntimeError('invalid source owner or type')
+   return os.fdopen(descriptor,'rb')
+  except BaseException:
+   os.close(descriptor)
+   raise
+ finally: os.close(directory)`;
+/** Read only a bounded prefix, ignoring Claude bookkeeping before native session records. */
+const startReader = `def session_start(f,harness):
+ prefix=f.read(262145)
+ lines=prefix[:262144].split(b'\\n')
+ if len(prefix)>262144: lines.pop()
+ types=('user','assistant','system','progress','summary','result','queue-operation')
+ for line in lines:
+  if not line.strip(): continue
+  record=json.loads(line)
+  if not isinstance(record,dict): continue
+  if harness=='codex' and record.get('type')!='session_meta': return None
+  if harness=='claude' and record.get('type') not in types: continue
+  time=record.get('timestamp')
+  if isinstance(time,str):
+   try:
+    stamp(time)
+    return time
+   except ValueError: pass
+  if harness=='codex': return None
+ return None`;
+/** Fixed remote program: bounded first-record metadata only, never directory copying. */
+const listing = `import os,glob,json,datetime,stat
+harness,start,end=INPUT
+home=os.path.expanduser('~')
+def stamp(s):
+ return datetime.datetime.fromisoformat(s.replace('Z','+00:00')).timestamp()
+${startReader}
+${sourceReader}
+low,high=stamp(start),stamp(end)
+pattern='.codex/sessions/*/*/*/rollout-*.jsonl' if harness=='codex' else '.claude/projects/*/*.jsonl'
+result=[]
+for count,relative in enumerate(glob.iglob(pattern,root_dir=home)):
+ if count>=100000: raise RuntimeError('listing limit')
+ path=os.path.join(home,relative)
+ if os.path.realpath(path)!=path or not stat.S_ISREG(os.stat(path).st_mode): continue
+ try:
+  with source_open(relative) as f: time=session_start(f,harness)
+  if isinstance(time,str) and low<=stamp(time)<=high: result.append({'path':relative,'start':time})
+ except (ValueError,KeyError,TypeError,OSError,RuntimeError): continue
+ if len(result)>10000: raise RuntimeError('file limit')
+print(json.dumps(result))`;
+function invocation(window, script) {
+	const command = quote([
+		"python3",
+		"-c",
+		script
+	]);
+	return window.transport === "ssh" ? {
+		executable: "ssh",
+		args: [
+			"-oBatchMode=yes",
+			"-oConnectTimeout=10",
+			"-oStrictHostKeyChecking=yes",
+			"-n",
+			...window.args,
+			command
+		]
+	} : {
+		executable: "gcloud",
+		args: [
+			"compute",
+			"ssh",
+			...window.args,
+			"--quiet",
+			"--ssh-flag=-oBatchMode=yes",
+			"--ssh-flag=-oConnectTimeout=10",
+			"--ssh-flag=-oStrictHostKeyChecking=yes",
+			"--ssh-flag=-n",
+			"--command",
+			command
+		]
+	};
+}
+async function run(window, script, maxBuffer) {
+	const call = invocation(window, script);
+	const execution = execute(call.executable, call.args, {
+		timeout: 6e4,
+		killSignal: "SIGKILL",
+		maxBuffer,
+		encoding: "buffer",
+		env: {
+			...process.env,
+			SSH_ASKPASS_REQUIRE: "never",
+			CLOUDSDK_CORE_DISABLE_PROMPTS: "1"
+		}
+	});
+	let timer;
+	const deadline = new Promise((_resolve, reject) => {
+		timer = setTimeout(() => {
+			execution.child?.kill("SIGKILL");
+			execution.child?.stdin?.destroy();
+			execution.child?.stdout?.destroy();
+			execution.child?.stderr?.destroy();
+			reject(/* @__PURE__ */ new Error("REMOTE_TRANSPORT_TIMEOUT"));
+		}, 6e4);
+	});
+	try {
+		return await Promise.race([execution, deadline]);
+	} finally {
+		clearTimeout(timer);
+	}
+}
+function createRemoteTransport() {
+	return {
+		async list(window) {
+			const input = JSON.stringify([
+				window.harness,
+				window.start,
+				window.end
+			]);
+			const { stdout } = await run(window, listing.replace("INPUT", input), 4194304);
+			const value = JSON.parse(stdout.toString("utf8"));
+			if (!Array.isArray(value)) throw new Error("INVALID_REMOTE_LIST");
+			const files = [];
+			for (const item of value) {
+				if (!item || typeof item !== "object" || !("path" in item) || !("start" in item) || typeof item.path !== "string" || typeof item.start !== "string") throw new Error("INVALID_REMOTE_FILE");
+				files.push({
+					path: item.path,
+					start: item.start
+				});
+			}
+			return files;
+		},
+		async copy(window, file, destination) {
+			if (!validRemotePath(file.path, window.harness)) throw new Error("INVALID_REMOTE_PATH");
+			const { stdout } = await run(window, `import os,sys,stat,json,datetime
+def stamp(value): return datetime.datetime.fromisoformat(value.replace('Z','+00:00')).timestamp()
+${startReader}
+${sourceReader}
+with source_open(${JSON.stringify(file.path)}) as f:
+ s=os.fstat(f.fileno())
+ if not stat.S_ISREG(s.st_mode) or s.st_size>268435456: raise RuntimeError('source limit')
+ time=session_start(f,${JSON.stringify(window.harness)})
+ if time is None or not stamp(${JSON.stringify(window.start)})<=stamp(time)<=stamp(${JSON.stringify(window.end)}): raise RuntimeError('source outside window')
+ f.seek(0)
+ data=f.read(268435457)
+ if len(data)>268435456: raise RuntimeError('source limit')
+ sys.stdout.buffer.write(data)`, 268435456);
+			await writeFile(destination, stdout, {
+				flag: "wx",
+				mode: 384
+			});
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/remote/collect.ts
+/** Validate the copied bounded native start records rather than trusting a stale remote listing. */
+async function copiedStart(path, harness) {
+	const handle = await open(path, "r");
+	try {
+		if ((await handle.stat()).size > 268435456) throw new Error("REMOTE_FILE_TOO_LARGE");
+		const limit = 262144;
+		const buffer = Buffer.alloc(262145);
+		const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+		const lines = buffer.toString("utf8", 0, Math.min(bytesRead, limit)).split("\n");
+		if (bytesRead > limit) lines.pop();
+		const types = [
+			"user",
+			"assistant",
+			"system",
+			"progress",
+			"summary",
+			"result",
+			"queue-operation"
+		];
+		for (const line of lines) {
+			if (!line.trim()) continue;
+			const value = JSON.parse(line);
+			if (!value || typeof value !== "object" || !("type" in value)) continue;
+			if (harness === "codex" && value.type !== "session_meta") return null;
+			if (harness === "claude" && (typeof value.type !== "string" || !types.includes(value.type))) continue;
+			if ("timestamp" in value && typeof value.timestamp === "string" && Number.isFinite(Date.parse(value.timestamp))) return value.timestamp;
+			if (harness === "codex") return null;
+		}
+		return null;
+	} finally {
+		await handle.close();
+	}
+}
+/** Only consented hosts are contacted. Every copy is exclusive and normal discovery reads it next. */
+async function collectRemoteWorkers(dispatches, confirmations, home, transport = createRemoteTransport(), reportFailure = () => console.error("REMOTE_WORKER_COLLECTION_FAILED"), roots = {}) {
+	const copied = [];
+	const failures = /* @__PURE__ */ new Set();
+	const seen = /* @__PURE__ */ new Set();
+	for (const window of dispatches) {
+		if (confirmations[window.host] !== true || failures.has(window.host)) continue;
+		let temporary;
+		try {
+			temporary = await mkdtemp(join(tmpdir(), "tacitt-remote-"));
+			const files = await transport.list(window);
+			if (files.length > 1e4) throw new Error("REMOTE_LIST_TOO_LARGE");
+			for (const file of files) {
+				if (!validRemotePath(file.path, window.harness) || !insideWindow(file.start, window)) continue;
+				const key = JSON.stringify([window.host, file.path]);
+				if (seen.has(key)) continue;
+				const staging = join(temporary, "worker.jsonl");
+				await transport.copy(window, file, staging);
+				const start = await copiedStart(staging, window.harness);
+				if (!start || !insideWindow(start, window)) {
+					await rm(staging, { force: true });
+					continue;
+				}
+				const hash = createHash("sha256").update(key).digest("hex");
+				const date = new Date(start).toISOString().slice(0, 10).split("-");
+				const path = window.harness === "codex" ? join(roots.codexHome ?? join(home, ".codex"), "sessions", ...date, `rollout-remote-${hash}.jsonl`) : join(roots.claudeHome ?? join(home, ".claude"), "projects", `remote-${hash.slice(0, 16)}`, `${hash}.jsonl`);
+				await mkdir(dirname(path), {
+					recursive: true,
+					mode: 448
+				});
+				try {
+					await copyFile(staging, path, constants.COPYFILE_EXCL);
+					copied.push({
+						path,
+						sourceSessionId: window.sourceSessionId
+					});
+				} catch (error) {
+					if (!(error instanceof Error) || !("code" in error) || error.code !== "EEXIST") throw error;
+					const existing = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+					try {
+						if ((await existing.stat()).size <= 268435456) {
+							const incoming = await open(staging, "r");
+							try {
+								const [left, right] = await Promise.all([existing.readFile(), incoming.readFile()]);
+								if (left.equals(right)) copied.push({
+									path,
+									sourceSessionId: window.sourceSessionId
+								});
+							} finally {
+								await incoming.close();
+							}
+						}
+					} finally {
+						await existing.close();
+					}
+				}
+				seen.add(key);
+				await rm(staging, { force: true });
+			}
+		} catch (error) {
+			failures.add(window.host);
+			reportFailure(window.host, error);
+		} finally {
+			if (temporary) try {
+				await rm(temporary, {
+					recursive: true,
+					force: true
+				});
+			} catch (error) {
+				failures.add(window.host);
+				reportFailure(window.host, error);
+			}
+		}
+	}
+	return {
+		copied,
+		failures: [...failures]
+	};
+}
+//#endregion
+//#region apps/cli/src/journey/directory.ts
+async function journeyDirectory(stateDir, journeyId) {
+	let path = stateDir;
+	for (const name of ["journeys", journeyId]) {
+		path = join(path, name);
+		try {
+			await makePrivateDirectory(path);
+		} catch (cause) {
+			if (!(cause instanceof Error && "code" in cause && cause.code === "EEXIST")) throw cause;
+		}
+		const stat = await lstat(path, { bigint: true });
+		if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(path) !== path || (process.platform === "win32" ? !await windowsOwnerOnly(path, "directory") : stat.uid !== BigInt(process.getuid?.() ?? -1) || (stat.mode & 63n) !== 0n)) throw new ApplicationError("UNSAFE_STATE_PATH");
+	}
+	return path;
+}
+//#endregion
+//#region apps/cli/src/remote/state.ts
+const attachment = z.object({
+	path: z.string(),
+	sourceSessionId: z.string()
+}).strict();
+async function readRemoteState(stateDir, journeyId) {
+	const path = join(await journeyDirectory(stateDir, journeyId), "remote-workers.json");
+	try {
+		const value = JSON.parse(await readFile(path, "utf8"));
+		return z.object({
+			windows: z.array(z.object({
+				host: z.string(),
+				harness: z.enum(["codex", "claude"]),
+				transport: z.enum(["ssh", "gcloud"]),
+				args: z.array(z.string()),
+				sourceSessionId: z.string(),
+				start: z.string(),
+				end: z.string()
+			}).strict()),
+			decisions: z.record(z.string(), z.boolean()),
+			parents: z.record(z.string(), z.string()),
+			copied: z.array(attachment),
+			failures: z.array(z.string())
+		}).strict().parse(value);
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return null;
+		throw error;
+	}
+}
+async function saveRemoteState(stateDir, journeyId, state) {
+	const path = join(await journeyDirectory(stateDir, journeyId), "remote-workers.json");
+	const temporary = `${path}.${randomUUID()}`;
+	await writeFile(temporary, JSON.stringify(state), {
+		mode: 384,
+		flag: "wx"
+	});
+	await rename(temporary, path);
+}
+async function attachRemoteWorkers(inventory, stateDir, journeyId) {
+	const state = await readRemoteState(stateDir, journeyId);
+	const allowed = new Set(state?.copied.map((copy) => copy.path) ?? []);
+	const sessions = inventory.sessions.filter((session) => session.parts.every((part) => !isRemoteImport(part.path) || allowed.has(part.path))).flatMap((session) => {
+		const imports = (state?.copied ?? []).filter((copy) => session.parts.some((part) => part.path === copy.path));
+		const parent = imports[0]?.sourceSessionId;
+		const key = parent ? state?.parents[parent] : void 0;
+		const parents = key ? inventory.sessions.filter((candidate) => candidate.sourceKey === key && candidate.parts.every((part) => !isRemoteImport(part.path))) : [];
+		const resolved = parents.length === 1 ? parents[0] : void 0;
+		if (!resolved || imports.some((copy) => copy.sourceSessionId !== parent)) return session.parts.some((part) => isRemoteImport(part.path)) ? [] : [session];
+		return [{
+			...session,
+			remoteParentSessionId: resolved.id
+		}];
+	});
+	return {
+		...inventory,
+		sessions
+	};
+}
+/** Reserved importer names never enter a later Send without that Send's consent receipt. */
+function isRemoteImport(path) {
+	return /(?:^|[/\\])rollout-remote-[a-f0-9]{64}\.jsonl$/u.test(path) || /(?:^|[/\\])projects[/\\]remote-[a-f0-9]{16}[/\\][a-f0-9]{64}\.jsonl$/u.test(path);
+}
+//#endregion
 //#region apps/cli/src/journey/plan.ts
-async function prepareSourcePlan(storage, harnesses, journeyId, sensitiveTerms, signal, period = {}) {
+async function prepareSourcePlan(storage, harnesses, journeyId, sensitiveTerms, signal, period = {}, stateDir) {
 	const saved = (await storage.resources({
 		journeyId,
 		kind: "plan"
@@ -14,7 +388,8 @@ async function prepareSourcePlan(storage, harnesses, journeyId, sensitiveTerms,
 	if (saved?.kind === "plan") return saved;
 	const discovered = await harnesses.discover(signal);
 	if (!discovered.complete) throw new ApplicationError("SCOPE_NOT_READY");
-	const inventory = filterInventoryByPeriod(discovered, period);
+	const linked = stateDir ? await attachRemoteWorkers(discovered, stateDir, journeyId) : discovered;
+	const inventory = filterInventoryByPeriod(linked, period);
 	if (inventory.sessions.length === 0) throw new ApplicationError("INVALID_SELECTION");
 	const families = reviewFamilies(inventory);
 	const defaults = defaultScopedSettings();
@@ -612,4 +987,4 @@ async function runJourneyOutputJob(job, live, signal, onPath) {
 	};
 }
 //#endregion
-export { staticBaseProduction as _, writeJourneyOutput as a, mergeHideIndexTokens as c, runJourneyBaseJob as d, writeJourneyBase as f, staticBaseInputs as g, staticSessions as h, runJourneyOutputVerifyJob as i, packRenderHideIndex as l, saveStaticSession as m, runJourneyOutputJob as n, createHideIndexTokens as o, readStaticResult as p, runJourneyOutputShardJob as r, hideIndexTexts as s, journeyOutputJob as t, journeyBaseJob as u, prepareSourcePlan as v, workApproval as y };
+export { journeyDirectory as C, saveRemoteState as S, staticBaseProduction as _, writeJourneyOutput as a, isRemoteImport as b, mergeHideIndexTokens as c, runJourneyBaseJob as d, writeJourneyBase as f, staticBaseInputs as g, staticSessions as h, runJourneyOutputVerifyJob as i, packRenderHideIndex as l, saveStaticSession as m, runJourneyOutputJob as n, createHideIndexTokens as o, readStaticResult as p, runJourneyOutputShardJob as r, hideIndexTexts as s, journeyOutputJob as t, journeyBaseJob as u, prepareSourcePlan as v, collectRemoteWorkers as w, readRemoteState as x, workApproval as y };