@gitroll/tacitt-cli 0.4.1 → 0.5.0

package/dist/{query-7uY266qY.mjs → query-BZvNsP1u.mjs}

@@ -1,16 +1,17 @@
-import { A as runConfiguredSessionJob, C as readConfiguredSearchFields, D as captureLogicalJourneySources, F as sessionWorkerFailure, G as staticMaskCategory, H as readLogicalJourneyFinalMasks, I as privateCollectionDirectory, K as readWorkspacePair, L as defaultParallelism, M as parseCollectionWorkspaceSummary, N as createSharedSessionPool, O as capturedJourneyScope, P as SessionWorkerError, Q as createCleanup, R as gitSeedsProvider, S as readOriginalSearchFields, T as checkReusableBundle, U as readConfiguredOutputInfo, V as privateJourneyDirectory, W as processJourneyMetadataFields, X as createTemporary, Z as removeNamedTemporarySpools, _ as readStaticSessionMasks, a as scanReviewFields, at as isWindowsAclFailure, c as readSessionScanRecords, g as processJourneyMetadata, h as readCapturedOriginalRows, i as buildWorkScanBatches, it as windowsOwnerOnly, j as readCollectionIndex, l as scanPreparedSession, n as verifyPreparedSessionSources, nt as openPrivateFile, o as createWorkPieces, ot as windowsAclCodes, p as openConfiguredUpload, r as prepareSessionScans, rt as restrictToOwner, s as readSessionScanFields, t as preparedScanConfiguration, tt as makePrivateDirectory, v as staticSessionJobs, w as createCollectionArtifacts, z as parallelismLimits } from "./src-DIuh0LHk.mjs";
-import { Bt as sessionPeriodSchema, Dn as entityDictionaryVersion, F as bClassificationKey, Fn as frameRecords, Ft as termTypeInfo, Gt as safeField, H as codePointLength, Ht as ApplicationError, Jt as reviewFamilies, K as utf16Offset, N as bUnitFragments, Ot as privacyTermKey, Qn as admitGitName, T as bLiteralTerms, Ut as UnfinishedJourneyError, V as bDigest, Wt as safeCode, Xn as createEntityMatcher, Zn as admitCustomTerm, Zt as observeSource, b as validateBReview, c as textDigest, h as reviewFindingsDigest, ht as journeyDescribeSchema, jt as reviewTermsInputSchema, l as validateReview, mn as currentDetectorVersion, n as compileBFindings, r as reviewBatchChunks, s as reviewSubmitSchema, t as locateTerms, yn as createStaticProcessor, z as bAnchorKey } from "./locate-U3-nkird.mjs";
-import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-BESjwh7X.mjs";
-import { $ as settingsQuerySchema, $r as packageCommandSchema, A as deviceProfileScopeSchema, B as validateInspectionBatch, Bn as journeyConfirmedHides, Br as hasCompleteWorkDescription, Bt as newJourneyWork, C as rebindReviewSubmit, Cr as privacyDecisionDigest, Ct as sendStartSchema, D as createAccount, Dr as hasCurrentStaticReview, E as staticallyHiddenFindings, Er as nativeRespondSchema, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Fr as sendArtifactSchema, Gr as withReadingProgress, Hr as isReadingComplete, Ht as journeyContextQuerySchema, Ir as sendReceiptSchema, Jn as reviewCandidateResourceSchema, Jr as journeyFindingsSchema, Kn as workCorrectionBinding, L as createApplication, Ln as confirmedHideKinds, Lr as sendReplaceResultSchema, Lt as classificationPartition, M as readAccountAvatarUrl, Mr as agentSourceSchema, Mt as applyClassification, N as storedCredentialSchema, Nn as bTermMatcher, Nr as agentSourcesSchema, O as accountProfileSchema, Or as staticReviewDigest, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Q as settingsBatchSchema, Qn as bReviewDigest, Qr as commandSchema, Qt as journeyResourceQuerySchema, R as inspectionCancelSchema, Rr as sendResolutionSchema, Rt as classificationWorks, S as rebindReviewOverlay, Sn as readConfirmedHideChange, Sr as assertJourneyPrivacyReady, St as sendPrepareSchema, T as guardedFindingText, Tn as termHideAdditions, Tr as nativeGetSchema, Tt as currentJourneyAdapters, U as inspectionQuerySchema, Un as retireWorkDescription, Ur as isSelectedWork, Vn as maskedHitsStale, Vr as isClassifying, Vt as reviewCompileSchema, Wn as workDecisionDigest, Xn as reviewRepairResourceSchema, Xr as journeyRenderInputSchema, Xt as journeyPolicyRespondSchema, Yn as reviewRepairInputSchema, Yr as journeyPreviewSchema, Yt as searchScopeDigest, Zr as journeyRenderSchema, _t as maximumTermsFileBytes, a as bCrossSegmentReviewSchema, ar as scanGitSeedsId, b as bReviewScope, bn as confirmedHideAdditions, br as journeyClassificationSessionsSchema, bt as sendActionSchema, c as reconstructBFields, cr as scanExclusionResourceSchema, ct as validateFailureLocation, d as selectedValueMembers, dn as sessionReviewInputSchema, dr as journeyInventoryQuerySchema, dt as manualUploadChoiceSchema, ei as selectionBatchSchema, er as planBRepair, et as readWorkspaceOutcomes, f as splitSelectorValues, fn as sessionReviewQuerySchema, ft as manualUploadPrepareSchema, g as changeJourney, gt as emptyTermsRevision, hn as sessionUsefulnessInputSchema, hr as emptyPreparationFacts, i as validateBCrossSegmentReview, ii as stateSchema, ir as scanSessionResourceSchema, j as profileUrlMatchesIdentity, k as deviceAuthorizationSchema, ln as sessionRereadInputSchema, lt as manualUploadActionSchema, m as hideScopeDigest, mt as manualUploadStartSchema, n as scanBatchEquivalenceDigest, nt as appendSensitiveTerms, o as bRereadDigest, oi as recommendParallelism, on as sessionReconcileInputSchema, or as scanGitSeedsResource, ot as artifactFailureDetailSchema, p as activeJourneyTerms, pt as manualUploadSchema, qn as reviewCandidateInputSchema, qr as journeyFindingImpactSchema, qt as journeySearchResultSchema, r as locateTermEvidence, ri as producerVersion, rn as reviewAttemptResourceSchema, rr as scanPreparationDigest, s as reconcileBSession, sr as verifiedScanGitSeeds, st as resolveFailureLocation, t as scanBatchContextDigest, ti as selectionSchema, tn as journeyPlaceSchema, vt as normalizeSensitiveTerms, w as reviewBatchReuse, wr as nativeEventsSchema, x as rebindReviewAlignment, xt as sendChoiceSchema, y as isGenericPublicTerm, yt as replaceSensitiveTermsSchema, z as inspectionStartSchema, zr as sendSettingsSchema, zt as retireScanGeneration } from "./src-DSDRF7i6.mjs";
-import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-eZTo0VYj.mjs";
-import { _ as staticBaseProduction, a as writeJourneyOutput, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, y as workApproval } from "./job-Bi57uRU-.mjs";
-import { t as createAgentSetupPort } from "./agent-setup-Cb_spmGb.mjs";
+import { $ as createCleanup, B as parallelismLimits, C as readOriginalSearchFields, E as checkReusableBundle, F as SessionWorkerError, G as processJourneyMetadataFields, H as privateJourneyDirectory, I as sessionWorkerFailure, K as staticMaskCategory, L as privateCollectionDirectory, M as readCollectionIndex, N as parseCollectionWorkspaceSummary, O as captureLogicalJourneySources, P as createSharedSessionPool, Q as removeNamedTemporarySpools, R as defaultParallelism, T as createCollectionArtifacts, U as readLogicalJourneyFinalMasks, W as readConfiguredOutputInfo, Z as createTemporary, _ as processJourneyMetadata, a as scanReviewFields, at as windowsOwnerOnly, c as readSessionScanRecords, g as readCapturedOriginalRows, i as buildWorkScanBatches, it as restrictToOwner, j as runConfiguredSessionJob, k as capturedJourneyScope, l as scanPreparedSession, m as openConfiguredUpload, n as verifyPreparedSessionSources, nt as makePrivateDirectory, o as createWorkPieces, ot as isWindowsAclFailure, p as configuredSessionUploads, q as readWorkspacePair, r as prepareSessionScans, rt as openPrivateFile, s as readSessionScanFields, st as windowsAclCodes, t as preparedScanConfiguration, v as readStaticSessionMasks, w as readConfiguredSearchFields, y as staticSessionJobs, z as gitSeedsProvider } from "./src-CQeUBG2Y.mjs";
+import { $t as safeField, Bt as sessionPeriodSchema, Dn as createStaticProcessor, F as bClassificationKey, Fn as entityDictionaryVersion, Ft as termTypeInfo, Gt as ownerProfileSchema, H as codePointLength, Ht as journeyProfileAddressActionSchema, K as utf16Offset, Kt as passportAddressSchema, N as bUnitFragments, Ot as privacyTermKey, Qt as safeCode, Sn as currentDetectorVersion, T as bLiteralTerms, Un as frameRecords, Ut as journeyProfileLinksActionSchema, V as bDigest, Wt as mergeOwnerProfile, Xt as ApplicationError, Zt as UnfinishedJourneyError, an as observeSource, ar as admitCustomTerm, b as validateBReview, c as textDigest, h as reviewFindingsDigest, ht as journeyDescribeSchema, ir as createEntityMatcher, jt as reviewTermsInputSchema, l as validateReview, n as compileBFindings, nn as reviewFamilies, or as admitGitName, qt as profileHasChoices, r as reviewBatchChunks, s as reviewSubmitSchema, t as locateTerms, tn as familySelected, z as bAnchorKey, zt as filterInventoryByPeriod } from "./locate-JYtFmKu-.mjs";
+import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-xidy0yF7.mjs";
+import { $ as settingsQuerySchema, $r as packageCommandSchema, A as deviceProfileScopeSchema, B as validateInspectionBatch, Bn as journeyConfirmedHides, Br as hasCompleteWorkDescription, Bt as newJourneyWork, C as rebindReviewSubmit, Cr as privacyDecisionDigest, Ct as sendStartSchema, D as createAccount, Dr as hasCurrentStaticReview, E as staticallyHiddenFindings, Er as nativeRespondSchema, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Fr as sendArtifactSchema, Gr as withReadingProgress, Hr as isReadingComplete, Ht as journeyContextQuerySchema, Ir as sendReceiptSchema, Jn as reviewCandidateResourceSchema, Jr as journeyFindingsSchema, Kn as workCorrectionBinding, L as createApplication, Ln as confirmedHideKinds, Lr as sendReplaceResultSchema, Lt as classificationPartition, M as readAccountAvatarUrl, Mr as agentSourceSchema, Mt as applyClassification, N as storedCredentialSchema, Nn as bTermMatcher, Nr as agentSourcesSchema, O as accountProfileSchema, Or as staticReviewDigest, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Q as settingsBatchSchema, Qn as bReviewDigest, Qr as commandSchema, Qt as journeyResourceQuerySchema, R as inspectionCancelSchema, Rr as sendResolutionSchema, Rt as classificationWorks, S as rebindReviewOverlay, Sn as readConfirmedHideChange, Sr as assertJourneyPrivacyReady, St as sendPrepareSchema, T as guardedFindingText, Tn as termHideAdditions, Tr as nativeGetSchema, Tt as currentJourneyAdapters, U as inspectionQuerySchema, Un as retireWorkDescription, Ur as isSelectedWork, Vn as maskedHitsStale, Vr as isClassifying, Vt as reviewCompileSchema, Wn as workDecisionDigest, Xn as reviewRepairResourceSchema, Xr as journeyRenderInputSchema, Xt as journeyPolicyRespondSchema, Yn as reviewRepairInputSchema, Yr as journeyPreviewSchema, Yt as searchScopeDigest, Zr as journeyRenderSchema, _t as maximumTermsFileBytes, a as bCrossSegmentReviewSchema, ar as scanGitSeedsId, b as bReviewScope, bn as confirmedHideAdditions, br as journeyClassificationSessionsSchema, bt as sendActionSchema, c as reconstructBFields, cr as scanExclusionResourceSchema, ct as validateFailureLocation, d as selectedValueMembers, dn as sessionReviewInputSchema, dr as journeyInventoryQuerySchema, dt as manualUploadChoiceSchema, ei as selectionBatchSchema, er as planBRepair, et as readWorkspaceOutcomes, f as splitSelectorValues, fn as sessionReviewQuerySchema, ft as manualUploadPrepareSchema, g as changeJourney, gt as emptyTermsRevision, hn as sessionUsefulnessInputSchema, hr as emptyPreparationFacts, i as validateBCrossSegmentReview, ii as stateSchema, ir as scanSessionResourceSchema, j as profileUrlMatchesIdentity, k as deviceAuthorizationSchema, ln as sessionRereadInputSchema, lt as manualUploadActionSchema, m as hideScopeDigest, mt as manualUploadStartSchema, n as scanBatchEquivalenceDigest, nt as appendSensitiveTerms, o as bRereadDigest, oi as recommendParallelism, on as sessionReconcileInputSchema, or as scanGitSeedsResource, ot as artifactFailureDetailSchema, p as activeJourneyTerms, pt as manualUploadSchema, qn as reviewCandidateInputSchema, qr as journeyFindingImpactSchema, qt as journeySearchResultSchema, r as locateTermEvidence, ri as producerVersion, rn as reviewAttemptResourceSchema, rr as scanPreparationDigest, s as reconcileBSession, sr as verifiedScanGitSeeds, st as resolveFailureLocation, t as scanBatchContextDigest, ti as selectionSchema, tn as journeyPlaceSchema, vt as normalizeSensitiveTerms, w as reviewBatchReuse, wr as nativeEventsSchema, x as rebindReviewAlignment, xt as sendChoiceSchema, y as isGenericPublicTerm, yt as replaceSensitiveTermsSchema, z as inspectionStartSchema, zr as sendSettingsSchema, zt as retireScanGeneration } from "./src-C1SjCDx0.mjs";
+import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-NDnGBXH6.mjs";
+import { C as journeyDirectory, S as saveRemoteState, _ as staticBaseProduction, a as writeJourneyOutput, b as isRemoteImport, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, w as collectRemoteWorkers, x as readRemoteState, y as workApproval } from "./job-BO0a67HQ.mjs";
+import { t as createAgentSetupPort } from "./agent-setup-BZbgLgHg.mjs";
 import { t as workerMessageSchema } from "./messages-D3m3bhva.mjs";
 import { constants, write } from "node:fs";
 import { z } from "zod";
 import { copyFile, link, lstat, mkdir, mkdtemp, open, opendir, readFile, readdir, realpath, rename, rm, unlink, writeFile } from "node:fs/promises";
 import { execFile, spawn } from "node:child_process";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
+import { createInterface } from "node:readline";
 import { Writable } from "node:stream";
 import { parseArgs, promisify, types } from "node:util";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -27,6 +28,7 @@ import { pipeline } from "node:stream/promises";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { DatabaseSync } from "node:sqlite";
 import { Worker } from "node:worker_threads";
+import { parse } from "shell-quote";
 import { rgPath } from "@vscode/ripgrep";
 import { pino } from "pino";
 import { SeverityNumber } from "@opentelemetry/api-logs";
@@ -166,14 +168,14 @@ async function readThroughContention(read, signal, delaysMs = [
 }
 //#endregion
 //#region packages/local-host/src/native-inspection.ts
-const count$4 = z.number().int().nonnegative();
+const count$5 = z.number().int().nonnegative();
 const originalViewSchema = z.object({
 	journeyId: z.uuid(),
 	workId: z.uuid(),
 	cursor: z.object({
 		snapshotId: z.string().regex(/^[a-f0-9]{64}$/u),
-		inputRevision: count$4,
-		partIndex: count$4,
+		inputRevision: count$5,
+		partIndex: count$5,
 		afterOrdinal: z.number().int().min(-1)
 	}).strict().optional()
 }).strict();
@@ -195,7 +197,7 @@ const outputViewSchema = z.object({
 const sourceViewSchema = z.object({
 	journeyId: z.uuid(),
 	workId: z.uuid(),
-	inputRevision: count$4.positive(),
+	inputRevision: count$5.positive(),
 	sessionId: z.string().min(1).max(128)
 }).strict();
 const masksViewSchema = z.object({
@@ -563,8 +565,8 @@ function createDeliveryService(application) {
 //#endregion
 //#region packages/local-host/src/current-view/model.ts
 const sequenceHeader = "x-sess-pilot-ci-current-sequence";
-const count$3 = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
-const identifier$1 = count$3.min(1);
+const count$4 = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+const identifier$1 = count$4.min(1);
 const requestId = z.string().regex(/^req-[a-z0-9]{1,7}$/u);
 const leg = z.enum(["ownership", "procedure"]);
 const operation = z.enum([
@@ -708,27 +710,27 @@ const rowSchema = z.strictObject({
 		"stopped"
 	]),
 	phase: phase.nullable(),
-	elapsedMs: count$3,
-	queueMs: count$3.nullable(),
-	activeMs: count$3.nullable(),
-	phaseMs: count$3.nullable()
+	elapsedMs: count$4,
+	queueMs: count$4.nullable(),
+	activeMs: count$4.nullable(),
+	phaseMs: count$4.nullable()
 });
 const pendingSchema = z.strictObject({
 	accessId: identifier$1,
 	operation,
 	write: z.boolean(),
 	phase,
-	queueDepth: count$3,
-	queueMs: count$3,
-	activeMs: count$3,
-	phaseMs: count$3,
+	queueDepth: count$4,
+	queueMs: count$4,
+	activeMs: count$4,
+	phaseMs: count$4,
 	association: associationSchema.nullable()
 });
 const storeSchema = z.strictObject({
 	executor: z.enum(["worker", "inline"]),
-	lastAccessId: count$3,
-	dequeuedAccessId: count$3,
-	queueDepth: count$3,
+	lastAccessId: count$4,
+	dequeuedAccessId: count$4,
+	queueDepth: count$4,
 	pending: pendingSchema.nullable()
 });
 const legState = z.enum([
@@ -743,17 +745,17 @@ const disconnectSchema = z.strictObject({
 	procedure: z.literal("workflow.getCurrent"),
 	requestId,
 	sequence: identifier$1.nullable(),
-	elapsedMs: count$3,
+	elapsedMs: count$4,
 	ownership: legState,
 	procedureState: legState,
-	pendingAccesses: count$3,
-	truncatedAccesses: count$3,
-	stoppedBeforeEnqueue: count$3,
+	pendingAccesses: count$4,
+	truncatedAccesses: count$4,
+	stoppedBeforeEnqueue: count$4,
 	accesses: z.array(rowSchema).max(16),
 	store: storeSchema.nullable(),
-	droppedFrames: count$3,
-	droppedSnapshots: count$3,
-	observerFailures: count$3
+	droppedFrames: count$4,
+	droppedSnapshots: count$4,
+	observerFailures: count$4
 });
 function parseSequence(value) {
 	if (typeof value !== "string" || !/^[1-9][0-9]{0,15}$/u.test(value)) return null;
@@ -858,7 +860,9 @@ const nativePanelRespondSchema = z.object({
 		z.object({
 			kind: z.literal("retry-work"),
 			workId: z.uuid()
-		}).strict()
+		}).strict(),
+		journeyProfileAddressActionSchema,
+		journeyProfileLinksActionSchema
 	])
 }).strict();
 function createRouter(application, account, stopping, delivery, nativeInspection, agentPresence) {
@@ -932,7 +936,10 @@ function createRouter(application, account, stopping, delivery, nativeInspection
 			pause: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().pause(input)),
 			resume: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().resume(input)),
 			withdraw: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().withdraw(input)),
-			advance: t.procedure.input(sendAddress).mutation(({ input }) => sending().advance(input, stopping))
+			advance: t.procedure.input(sendAddress).mutation(({ input }) => sending().advance(input, stopping)),
+			ownerProfile: t.procedure.query(({ signal }) => sending().ownerProfile(signal ?? stopping)),
+			addressTaken: t.procedure.input(z.object({ address: passportAddressSchema }).strict()).query(({ input, signal }) => sending().addressTaken(input, signal ?? stopping)),
+			saveSentProfile: t.procedure.input(z.object({ journeyId: z.uuid() }).strict()).mutation(({ input }) => sending().saveSentProfile(input, stopping))
 		}),
 		manualUpload: t.router({
 			get: t.procedure.input(z.object({ uploadId: z.uuid().optional() }).strict()).query(({ input }) => uploading().get(input.uploadId)),
@@ -5078,10 +5085,10 @@ async function readStateDump(stateDir) {
 //#endregion
 //#region packages/local-host/src/execution/progress.ts
 const maximumBytes = 65536;
-const count$2 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$3 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const scope = z.object({
-	completed: count$2,
-	total: count$2
+	completed: count$3,
+	total: count$3
 }).strict().nullable();
 const recordSchema = z.object({
 	databaseId: z.string(),
@@ -5090,14 +5097,14 @@ const recordSchema = z.object({
 		operationId: z.string(),
 		step: z.enum(["preparing", "processing"]),
 		activeWorkspace: z.string().nullable(),
-		workspaceSequence: count$2,
+		workspaceSequence: count$3,
 		workspaces: scope,
 		sessions: scope,
 		sourceBytes: z.object({
-			processed: count$2,
-			total: count$2
+			processed: count$3,
+			total: count$3
 		}).strict().nullable(),
-		archiveBytes: count$2
+		archiveBytes: count$3
 	}).strict()
 }).strict();
 /** Disposable progress only. The workflow claim serializes publishers and matching clears. */
@@ -5345,6 +5352,7 @@ const businessCommands = [
 	"send.resume",
 	"send.advance",
 	"journey.start",
+	"journey.remoteWorkers",
 	"journey.serve",
 	"journey.get",
 	"journey.groupItems",
@@ -5634,6 +5642,334 @@ function helpText(source = sourceCheckout) {
 	return source ? fullHelp : fullHelp.replace(/^ {2}--dev .*\n/m, "");
 }
 //#endregion
+//#region apps/cli/src/remote/dispatch.ts
+function balancedQuotes(command) {
+	let quote = "";
+	let escaped = false;
+	for (const character of command) {
+		if (escaped) {
+			escaped = false;
+			continue;
+		}
+		if (character === "\\" && quote !== "'") escaped = true;
+		else if (quote === character) quote = "";
+		else if (!quote && (character === "'" || character === "\"")) quote = character;
+	}
+	return !quote && !escaped;
+}
+/** Parse inert simple commands. Expansions and unsupported compound syntax fail closed. */
+function commands$1(command) {
+	if (Buffer.byteLength(command) > 65536 || /`|\$\(|[\0\r]/u.test(command) || !balancedQuotes(command)) return [];
+	try {
+		const segments = [[]];
+		let redirect = false;
+		for (const token of parse(command.replaceAll("\n", ";"), () => "\0")) if (typeof token === "string") {
+			if (token.includes("\0")) return [];
+			if (redirect) redirect = false;
+			else segments.at(-1)?.push(token);
+		} else if ("comment" in token) continue;
+		else if ("op" in token && [
+			">",
+			">>",
+			"<",
+			">&",
+			"<&"
+		].includes(token.op)) {
+			if (redirect) return [];
+			redirect = true;
+		} else if ("op" in token && [
+			";",
+			"&&",
+			"||",
+			"|",
+			"&"
+		].includes(token.op)) segments.push([]);
+		else return [];
+		return redirect ? [] : segments.filter((words) => words.length > 0);
+	} catch {
+		return [];
+	}
+}
+function agent(words) {
+	const executable = posix.basename(words[0] ?? "");
+	if (words.some((word) => [
+		"--help",
+		"-h",
+		"--version"
+	].includes(word))) return null;
+	if (executable === "codex" && words[1] === "exec") return "codex";
+	if (executable === "claude" && words.slice(1).some((word) => word === "-p" || word === "--print")) return "claude";
+	return null;
+}
+const validHost = (host) => /^(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*@)?(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*|\[[a-fA-F0-9:]+\])$/u.test(host);
+/** Consent and import identity include every retained connection selector. */
+function endpoint(host, transport, args) {
+	return transport === "ssh" && args.length === 1 ? host : `${host} (${transport}: ${args.join(" ")})`;
+}
+function ssh(words) {
+	const args = [];
+	let index = 1;
+	for (; index < words.length; index++) {
+		const word = words[index] ?? "";
+		if (word === "--") {
+			index++;
+			break;
+		}
+		if (!word.startsWith("-")) break;
+		if (word === "--help" || /^-[^-]*[NVGQOW]/u.test(word)) return null;
+		if (/^-[pLlIiFJoObcDEeRSwWQ]/u.test(word)) {
+			const flag = word.slice(0, 2);
+			const value = word.length > 2 ? word.slice(2) : words[++index];
+			if (!value) return null;
+			if (flag === "-p" && /^\d{1,5}$/u.test(value)) args.push(flag, value);
+			if (flag === "-l" && /^[a-zA-Z0-9_.-]+$/u.test(value)) args.push(flag, value);
+		} else if (!/^-[46AaCfKkMnqsTtVvXxYy]+$/u.test(word)) return null;
+	}
+	const host = words[index];
+	if (!host || !validHost(host) || index + 1 >= words.length) return null;
+	return {
+		host,
+		transport: "ssh",
+		args: [...args, host],
+		command: words.slice(index + 1).join(" ")
+	};
+}
+function gcloud(words) {
+	if (words[1] !== "compute" || words[2] !== "ssh") return null;
+	let host;
+	let command;
+	const selectors = [];
+	for (let index = 3; index < words.length; index++) {
+		const word = words[index] ?? "";
+		if (word === "--help" || word === "-h" || word === "--dry-run") return null;
+		if (word === "--command" || word.startsWith("--command=")) command = word === "--command" ? words[++index] : word.slice(10);
+		else if (["--zone", "--project"].some((flag) => word === flag || word.startsWith(`${flag}=`))) {
+			const separator = word.indexOf("=");
+			const flag = separator === -1 ? word : word.slice(0, separator);
+			const value = separator === -1 ? words[++index] : word.slice(separator + 1);
+			if (!value || !/^[a-zA-Z0-9_.:-]+$/u.test(value)) return null;
+			selectors.push(`${flag}=${value}`);
+		} else if (word === "--tunnel-through-iap" || word === "--internal-ip") selectors.push(word);
+		else if (word === "--quiet" || word === "-q") continue;
+		else if (!word.startsWith("-") && !host) host = word;
+		else return null;
+	}
+	if (!host || !validHost(host) || !command) return null;
+	return {
+		host,
+		transport: "gcloud",
+		args: [host, ...selectors],
+		command
+	};
+}
+/** Matches executables at shell command positions, never mentions in prose or other commands. */
+function parseRemoteDispatch(command) {
+	return commands$1(command).flatMap((words) => {
+		const executable = posix.basename(words[0] ?? "");
+		const remote = executable === "ssh" ? ssh(words) : executable === "gcloud" ? gcloud(words) : null;
+		if (!remote) return [];
+		return [...new Set(commands$1(remote.command).map(agent))].flatMap((harness) => harness ? [{
+			host: endpoint(remote.host, remote.transport, remote.args),
+			harness,
+			transport: remote.transport,
+			args: remote.args
+		}] : []);
+	});
+}
+//#endregion
+//#region apps/cli/src/remote/scan.ts
+function object(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function timestamp(value) {
+	return typeof value === "string" && Number.isFinite(Date.parse(value)) ? new Date(value).toISOString() : null;
+}
+function commands(row) {
+	const payload = row["payload"];
+	if (row["type"] === "response_item" && object(payload) && payload["type"] === "function_call" && typeof payload["name"] === "string" && [
+		"exec_command",
+		"shell_command",
+		"shell"
+	].includes(payload["name"])) {
+		let args = payload["arguments"];
+		if (typeof args === "string") try {
+			args = JSON.parse(args);
+		} catch {
+			return [];
+		}
+		if (!object(args)) return [];
+		const command = args["cmd"] ?? args["command"];
+		return typeof command === "string" ? [{
+			id: typeof payload["call_id"] === "string" ? payload["call_id"] : "",
+			command
+		}] : [];
+	}
+	const message = row["message"];
+	if (row["type"] !== "assistant" || !object(message) || !Array.isArray(message["content"])) return [];
+	return message["content"].flatMap((block) => {
+		if (!object(block) || block["type"] !== "tool_use" || block["name"] !== "Bash" || !object(block["input"]) || typeof block["input"]["command"] !== "string") return [];
+		return [{
+			id: typeof block["id"] === "string" ? block["id"] : "",
+			command: block["input"]["command"]
+		}];
+	});
+}
+function resultIds(row) {
+	const payload = row["payload"];
+	if (object(payload) && payload["type"] === "function_call_output" && typeof payload["call_id"] === "string") return [payload["call_id"]];
+	const message = row["message"];
+	if (!object(message) || !Array.isArray(message["content"])) return [];
+	return message["content"].flatMap((block) => object(block) && block["type"] === "tool_result" && typeof block["tool_use_id"] === "string" ? [block["tool_use_id"]] : []);
+}
+/** Tool executable positions only. Source bytes stay inside this deterministic CLI scanner. */
+async function scanRemoteDispatches(sessions, signal) {
+	const windows = [];
+	for (const session of sessions) {
+		const pending = /* @__PURE__ */ new Map();
+		for (const part of session.parts) {
+			signal.throwIfAborted();
+			if (part.representation !== "jsonl") throw new Error("REMOTE_SOURCE_FORMAT_UNSUPPORTED");
+			const file = await open(part.path, constants.O_RDONLY | constants.O_NOFOLLOW);
+			try {
+				const before = await file.stat({ bigint: true });
+				if (String(before.dev) !== part.snapshot.dev || String(before.ino) !== part.snapshot.ino || before.size !== BigInt(part.snapshot.size) || String(before.mtimeNs) !== part.snapshot.mtimeNs || String(before.ctimeNs) !== part.snapshot.ctimeNs) throw new Error("REMOTE_SOURCE_CHANGED");
+				if (!part.snapshot.size) continue;
+				const stream = file.createReadStream({
+					autoClose: false,
+					start: 0,
+					end: part.snapshot.size - 1,
+					signal
+				});
+				const lines = createInterface({
+					input: stream,
+					crlfDelay: Infinity
+				});
+				try {
+					for await (const line of lines) {
+						signal.throwIfAborted();
+						if (line.length > 16777216) throw new Error("REMOTE_SOURCE_RECORD_TOO_LARGE");
+						if (!line.trim()) continue;
+						const row = JSON.parse(line);
+						if (!object(row)) continue;
+						const at = timestamp(row["timestamp"]);
+						if (!at) continue;
+						for (const id of resultIds(row)) {
+							for (const window of pending.get(id) ?? []) if (at >= window.start) window.end = at;
+							pending.delete(id);
+						}
+						for (const command of commands(row)) {
+							const end = timestamp(session.lastInteractionAt);
+							const found = parseRemoteDispatch(command.command).map((dispatch) => ({
+								...dispatch,
+								sourceSessionId: session.id,
+								start: at,
+								end: end && end >= at ? end : at
+							}));
+							windows.push(...found);
+							pending.set(command.id, found);
+						}
+					}
+					const after = await file.stat({ bigint: true });
+					if (after.mtimeNs !== before.mtimeNs || after.size !== before.size) throw new Error("REMOTE_SOURCE_CHANGED");
+				} finally {
+					lines.close();
+					stream.destroy();
+				}
+			} finally {
+				await file.close();
+			}
+		}
+	}
+	return windows;
+}
+//#endregion
+//#region apps/cli/src/remote/preflight.ts
+const inputSchema = z.object({
+	journeyId: z.uuid(),
+	confirmations: z.record(z.string(), z.boolean()).optional()
+}).strict();
+function createRemotePreflight(options) {
+	return async (value, signal = new AbortController().signal) => {
+		const input = inputSchema.parse(value);
+		const current = await options.storage.current(input.journeyId);
+		if (!current?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		if (current.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
+		if (current.snapshotId) return {
+			hosts: [],
+			copied: 0,
+			failures: [],
+			skipped: "already-frozen"
+		};
+		const lease = await options.execution.tryAcquire("workflow");
+		if (!lease) throw new ApplicationError("DISCOVERY_BUSY");
+		try {
+			const admitted = await options.storage.current(input.journeyId);
+			if (!admitted?.consent || admitted.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
+			if (admitted.snapshotId) return {
+				hosts: [],
+				copied: 0,
+				failures: [],
+				skipped: "already-frozen"
+			};
+			let state = await readRemoteState(options.stateDir, input.journeyId);
+			if (!state) {
+				const discovered = await options.harnesses.discover(signal);
+				if (!discovered.complete) throw new ApplicationError("SCOPE_NOT_READY");
+				const inventory = filterInventoryByPeriod(discovered, current.period ?? {});
+				const families = reviewFamilies(inventory);
+				const sessions = inventory.sessions.filter((session) => familySelected(inventory, families, session) && !session.warnings.includes("NON_INTERACTIVE_LAUNCH") && session.parts.every((part) => !isRemoteImport(part.path)));
+				state = {
+					windows: [],
+					decisions: {},
+					parents: Object.fromEntries(sessions.map((session) => [session.id, session.sourceKey])),
+					copied: [],
+					failures: []
+				};
+				for (const session of sessions) try {
+					state.windows.push(...await scanRemoteDispatches([session], signal));
+				} catch (error) {
+					signal.throwIfAborted();
+					options.reportFailure(error);
+					state.failures.push("source-scan");
+				}
+				await saveRemoteState(options.stateDir, input.journeyId, state);
+			}
+			const decisions = input.confirmations ?? {};
+			const known = new Set(state.windows.map((window) => window.host));
+			if (Object.keys(decisions).some((host) => !known.has(host))) throw new ApplicationError("INVALID_ARGUMENTS");
+			const fresh = {};
+			for (const [host, allow] of Object.entries(decisions)) {
+				if (Object.hasOwn(state.decisions, host)) continue;
+				fresh[host] = allow;
+				state.decisions[host] = allow;
+			}
+			await saveRemoteState(options.stateDir, input.journeyId, state);
+			if (Object.keys(fresh).length) {
+				const collected = await collectRemoteWorkers(state.windows, fresh, options.home, options.transport, (_host, error) => options.reportFailure(new Error("REMOTE_COLLECTION_FAILED", { cause: error })), options.roots);
+				state.copied.push(...collected.copied);
+				state.failures.push(...collected.failures);
+				await saveRemoteState(options.stateDir, input.journeyId, state);
+			}
+			return result(state);
+		} finally {
+			await lease.release();
+		}
+	};
+}
+function result(state) {
+	return {
+		hosts: [...new Set(state.windows.map((window) => window.host))].filter((host) => !Object.hasOwn(state.decisions, host)).map((host) => ({
+			host,
+			windows: state.windows.filter((window) => window.host === host).map(({ start, end }) => ({
+				start,
+				end
+			}))
+		})),
+		copied: state.copied.length,
+		failures: state.failures
+	};
+}
+//#endregion
 //#region apps/cli/src/journey/confirmed-hides.ts
 /** The Work's explicit exception values; an occurrence inside one stays visible (ADR 0069). */
 const workExceptions = (state, workId) => state.exceptions.filter((item) => item.workId === workId).map((item) => item.value);
@@ -7193,22 +7529,6 @@ async function prepareStaticWork(options) {
 	});
 }
 //#endregion
-//#region apps/cli/src/journey/directory.ts
-async function journeyDirectory(stateDir, journeyId) {
-	let path = stateDir;
-	for (const name of ["journeys", journeyId]) {
-		path = join(path, name);
-		try {
-			await makePrivateDirectory(path);
-		} catch (cause) {
-			if (!(cause instanceof Error && "code" in cause && cause.code === "EEXIST")) throw cause;
-		}
-		const stat = await lstat(path, { bigint: true });
-		if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(path) !== path || (process.platform === "win32" ? !await windowsOwnerOnly(path, "directory") : stat.uid !== BigInt(process.getuid?.() ?? -1) || (stat.mode & 63n) !== 0n)) throw new ApplicationError("UNSAFE_STATE_PATH");
-	}
-	return path;
-}
-//#endregion
 //#region apps/cli/src/journey/observe.ts
 /** Observe whole-journey pause while a single large Work is still being processed. */
 function observeJourneyPause(storage, journeyId, processing, onFailure, requireConfirmedScope = false) {
@@ -7396,7 +7716,7 @@ function createJourneyPreparation(options) {
 				revision: "empty",
 				terms: []
 			};
-			const plan = await prepareSourcePlan(storage, options.harnesses, journeyId, terms, abort.signal, current.period);
+			const plan = await prepareSourcePlan(storage, options.harnesses, journeyId, terms, abort.signal, current.period, options.stateDir);
 			const initial = await storage.current(journeyId);
 			if (!initial?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
 			const formed = initial.snapshotId ? [] : namedJourneyWorks(formJourneyWorks(plan.approval, options.processing.environment), options.processing, abort.signal);
@@ -8201,7 +8521,7 @@ async function draftSend(journey, dependencies, signal) {
 	const omitted = [];
 	for (const work of journey.works) {
 		signal.throwIfAborted();
-		const reason = !isSelectedWork(work) ? work.access === "drop" ? "drop" : "empty" : work.status !== "ready" || !hasCompleteWorkDescription(work) || !work.accessConfirmed || !work.artifact || work.artifact.revision !== work.revision ? "not-ready" : work.binding?.sentBundleId === work.artifact.bundleId && work.binding.sentAccess === work.access ? "sent" : work.artifact.archiveBytes > 5368709120 ? "too-large" : null;
+		const reason = !isSelectedWork(work) ? work.access === "drop" ? "drop" : "empty" : work.status !== "ready" || !hasCompleteWorkDescription(work) || !work.accessConfirmed || !work.artifact || work.artifact.revision !== work.revision ? "not-ready" : !dependencies.artifacts.sessions && work.binding?.sentBundleId === work.artifact.bundleId && work.binding.sentAccess === work.access ? "sent" : work.artifact.archiveBytes > 5368709120 ? "too-large" : null;
 		if (reason !== null || work.access === "drop") {
 			omitted.push({
 				workId: work.id,
@@ -8779,18 +9099,18 @@ function createFrozenPathRouter(repositories, folderPaths) {
 }
 //#endregion
 //#region apps/cli/src/journey/works/project-evidence.ts
-const count$1 = z.number().int().nonnegative();
+const count$2 = z.number().int().nonnegative();
 const resultSchema = z.object({
 	repositories: z.array(z.object({
 		id: z.string(),
 		path: z.string(),
-		references: count$1,
-		reads: count$1,
-		changes: count$1,
-		commands: count$1
+		references: count$2,
+		reads: count$2,
+		changes: count$2,
+		commands: count$2
 	})),
 	incomplete: z.boolean(),
-	ignored: count$1
+	ignored: count$2
 });
 const cacheSchema = z.object({
 	key: z.string(),
@@ -9005,7 +9325,7 @@ function createClassificationSessions(storage, processing, stateDir) {
 }
 //#endregion
 //#region apps/cli/src/journey/works/projection.ts
-const digest = (bytes) => createHash("sha256").update(bytes).digest();
+const digest$1 = (bytes) => createHash("sha256").update(bytes).digest();
 async function buildProjection(directory, key, source, role, signal) {
 	const temporary = await mkdtemp(join(directory, ".classification-"));
 	const target = join(directory, `classification-${key}`);
@@ -9038,7 +9358,7 @@ async function buildProjection(directory, key, source, role, signal) {
 						const entry = Buffer.alloc(48);
 						entry.writeBigUInt64LE(BigInt(offset), 0);
 						entry.writeBigUInt64LE(BigInt(bytes.length), 8);
-						digest(bytes).copy(entry, 16);
+						digest$1(bytes).copy(entry, 16);
 						await data.writeFile(bytes);
 						await index.writeFile(entry);
 						offset += bytes.length;
@@ -9089,7 +9409,7 @@ async function buildProjection(directory, key, source, role, signal) {
 /** Persisted derived content, never a scan receipt. Only the first read replays the capture. */
 async function readClassificationProjection(source, options, signal) {
 	signal.throwIfAborted();
-	const key = digest(JSON.stringify([
+	const key = digest$1(JSON.stringify([
 		1,
 		options.snapshotId,
 		source,
@@ -9116,7 +9436,7 @@ async function readClassificationProjection(source, options, signal) {
 		const offset = Number(entry.readBigUInt64LE(0)), length = Number(entry.readBigUInt64LE(8));
 		if (!Number.isSafeInteger(offset) || !Number.isSafeInteger(length) || length > 1048576) throw new ApplicationError("CORRUPTED_STATE");
 		const bytes = await readProjectionBytes(dataPath, offset, length, manifest.data);
-		if (!digest(bytes).equals(entry.subarray(16))) throw new ApplicationError("CORRUPTED_STATE");
+		if (!digest$1(bytes).equals(entry.subarray(16))) throw new ApplicationError("CORRUPTED_STATE");
 		const row = projectionRowSchema.parse(JSON.parse(bytes.toString("utf8")));
 		if (row.sessionId !== source.sessionId || row.sourcePartId !== source.capture.partId) throw new ApplicationError("CORRUPTED_STATE");
 		rows.push(row);
@@ -9784,6 +10104,82 @@ function protectedSourceText(field, hidden) {
 	return text;
 }
 //#endregion
+//#region apps/cli/src/account/journey/remote-error.ts
+const refusalSchema = z.object({
+	error: z.string(),
+	preview: sendSettingsSchema.nullable().optional(),
+	resolution: sendResolutionSchema.optional(),
+	/** `unknown_keep_work_ids`: the kept IDs Passport did not accept (ADR 0204). */
+	workIds: z.array(z.string()).optional()
+});
+var JourneyRemoteError = class extends Error {
+	status;
+	code;
+	details;
+	constructor(status, code, details, options) {
+		super(code, options);
+		this.name = "JourneyRemoteError";
+		this.status = status;
+		this.code = code;
+		this.details = details;
+	}
+};
+//#endregion
+//#region apps/cli/src/journey/send-sessions.ts
+/** Build upload identities from frozen local metadata and bytes from the final primary only. */
+async function* sessionArtifacts(storage, find, journeyId, artifact, signal) {
+	const output = await find(journeyId, artifact.workId, artifact.revision);
+	if (output.bundleId !== artifact.bundleId || output.primary.sha256 !== artifact.sha256 || output.primary.archiveBytes !== artifact.byteLength) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+	const base = (await storage.resources({
+		journeyId,
+		kind: "base"
+	})).find((item) => item.kind === "base" && item.workId === artifact.workId && item.inputRevision === output.finalMaskLedger.inputRevision && item.primary.sha256 === output.finalMaskLedger.basePrimarySha256);
+	const plan = (await storage.resources({
+		journeyId,
+		kind: "plan"
+	})).find((item) => item.kind === "plan");
+	if (base?.kind !== "base" || plan?.kind !== "plan") throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+	const identities = base.sessions.map((binding) => {
+		const session = plan.approval.inventory.sessions.find((item) => item.id === binding.applicationSessionId);
+		const part = session?.parts[0];
+		const lastAt = session?.lastInteractionAt ?? session?.createdAt;
+		if (!session || !part || !lastAt || !Number.isFinite(Date.parse(lastAt))) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+		const nativeId = part.nativeEvidence?.identity?.sessionId ?? session.sourceSessionId;
+		const path = part.harnessRelativePath ?? "";
+		if (!path && !nativeId?.trim() || isAbsolute(path) || path.includes("\\") || path.split("/").some((segment) => segment === ".." || segment === ".")) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+		return {
+			archiveSessionId: binding.archiveSessionId,
+			relativePath: path,
+			lastAt: new Date(lastAt).toISOString()
+		};
+	});
+	for await (const session of configuredSessionUploads(output.primary, identities, signal)) yield {
+		...session,
+		async upload(upload, uploadSignal) {
+			await find(journeyId, artifact.workId, artifact.revision);
+			const url = new URL(upload.uploadUrl);
+			if (url.protocol !== "https:" || url.username || url.password || url.hash) throw new ApplicationError("INVALID_ARGUMENTS");
+			const request = {
+				method: "PUT",
+				body: session.stream(),
+				signal: uploadSignal,
+				redirect: "error",
+				credentials: "omit",
+				referrerPolicy: "no-referrer",
+				headers: {
+					"content-type": "application/zip",
+					"content-length": String(session.byteLength),
+					...upload.headers
+				},
+				duplex: "half"
+			};
+			const response = await fetch(url, request);
+			await response.body?.cancel();
+			if (!response.ok) throw new JourneyRemoteError(response.status, "UPLOAD_FAILED", null);
+		}
+	};
+}
+//#endregion
 //#region apps/cli/src/journey/send-artifacts.ts
 function createJourneySendArtifacts(storage) {
 	async function find(journeyId, workId, revision) {
@@ -9801,6 +10197,7 @@ function createJourneySendArtifacts(storage) {
 		return output;
 	}
 	return {
+		sessions: (journeyId, artifact, signal) => sessionArtifacts(storage, find, journeyId, artifact, signal),
 		async describe(journey, work, signal) {
 			const output = await find(journey.journeyId, work.id, work.revision);
 			const info = await readConfiguredOutputInfo(output.primary, signal);
@@ -9884,69 +10281,61 @@ async function putPrimary(primary, byteLength, upload, signal) {
 	}
 }
 //#endregion
-//#region apps/cli/src/account/journey/state.ts
-function requireSend(snapshot) {
-	if (!snapshot?.send) throw new ApplicationError("UNKNOWN_ITEM");
-	return {
-		...snapshot,
-		send: snapshot.send
-	};
-}
-function matchesAction(snapshot, action) {
-	return snapshot.journey.revision === action.expectedJourneyRevision && snapshot.send.revision === action.expectedSendRevision;
-}
-async function saveSend(dependencies, snapshot, next, action) {
-	return dependencies.storage.commitSend({
-		journeyId: snapshot.journey.journeyId,
-		expectedJourneyRevision: action?.expectedJourneyRevision ?? snapshot.journey.revision,
-		expectedSendRevision: action?.expectedSendRevision ?? (snapshot.send?.id === next.id ? snapshot.send.revision : null),
-		requestKey: action?.idempotencyKey ?? randomUUID(),
-		requestHash: hash$1(action ?? next),
-		state: journeySendSchema.parse({
-			...next,
-			status: next.status === "completed" && !next.replaced ? "sending" : next.status,
-			revision: (snapshot.send?.id === next.id ? snapshot.send.revision : -1) + 1
-		}),
-		at: dependencies.now()
-	});
-}
-function aggregate(send) {
-	if (send.status === "paused") return send;
-	const statuses = send.items.map((item) => item.status);
-	return {
-		...send,
-		status: statuses.length === 0 ? "blocked" : statuses.every((status) => status === "completed") ? "completed" : statuses.some((status) => status === "target" || status === "settings") ? "review" : statuses.some((status) => status === "ready" || status === "uploading") ? "sending" : statuses.some((status) => status === "assessing") ? "waiting" : "blocked"
-	};
+//#region apps/cli/src/account/journey/session-key.ts
+/** Engine native identity, or harness-root-relative path identity when native identity is absent. */
+async function sessionKeyFor(input) {
+	const native = input.nativeSessionId;
+	const path = input.relativePath?.replaceAll("\\", "/");
+	if (!input.harness || (!native || !native.trim()) && !path) throw new TypeError("SESSION_RELATIVE_PATH_REQUIRED");
+	const source = native && native.trim() ? JSON.stringify([
+		"native-v1",
+		input.harness,
+		"session",
+		native
+	]) : `path-v1|${input.harness}|${path}`;
+	return createHash("sha256").update(source, "utf8").digest("hex");
+}
+//#endregion
+//#region apps/cli/src/account/journey/session-access.ts
+/** Check the entire pending Send before admitting any session mutation. */
+async function sessionAccessBlocked(dependencies, journeyId, items, inventory, signal) {
+	const sessions = dependencies.artifacts.sessions;
+	if (!sessions) return false;
+	const requestedAccess = /* @__PURE__ */ new Map();
+	const requestedDigests = /* @__PURE__ */ new Map();
+	for (const item of items) {
+		if (item.sessionAssembly || item.status === "completed") continue;
+		const destination = inventory.works.find((work) => work.logicalWorkId === item.workId);
+		if (destination?.access === "removed") throw new ApplicationError("WORK_REMOVED");
+		for await (const session of sessions(journeyId, item.artifact, signal)) {
+			const key = await sessionKeyFor(session);
+			const otherAccess = requestedAccess.get(key);
+			if (otherAccess !== void 0 && otherAccess !== item.access) return true;
+			requestedAccess.set(key, item.access);
+			const otherDigest = requestedDigests.get(key);
+			if (otherDigest !== void 0 && otherDigest !== session.sha256) throw new ApplicationError("SESSION_CONTENT_CONFLICT");
+			requestedDigests.set(key, session.sha256);
+			const source = inventory.works.find((work) => work.sessions.some((entry) => entry.key === key));
+			if (source && source.logicalWorkId !== item.workId && source.access !== item.access) return true;
+			if (destination && destination.access !== item.access && !destination.sessions.some((entry) => entry.key === key && entry.sha256 === session.sha256)) return true;
+		}
+	}
+	return false;
 }
-/** Explicit resume retries recoverable items and recaptures a pending sign-in or profile. */
-function resumeState(send) {
-	const profileRequired = ["paused", "sign-in"].includes(send.status) || send.subject === null || ["ACCOUNT_PROFILE_UNAVAILABLE", "ACCOUNT_CHANGED"].includes(send.error ?? "") || send.status === "blocked" && send.items.some((item) => [
-		"ready",
-		"uploading",
-		"assessing",
-		"target",
-		"settings"
-	].includes(item.status));
-	const next = aggregate({
-		...send,
-		status: "sending",
-		error: null,
-		items: send.items.map((item) => item.status === "blocked" && [
-			"OPERATION_FAILED",
-			"UPLOAD_FAILED",
-			"SEND_REMOTE_REFUSED",
-			"IDENTITY_UNAVAILABLE",
-			"ACCOUNT_SIGNED_OUT"
-		].includes(item.error ?? "") ? {
-			...item,
-			status: item.receipt ? item.receipt.state === "awaiting_upload" ? "uploading" : "assessing" : "ready",
-			error: null
-		} : item)
-	});
-	return profileRequired && !["blocked", "completed"].includes(next.status) ? {
-		...next,
-		status: "sign-in"
-	} : next;
+/** Keep overlapping session ownership serial through membership, including retained members. */
+async function sessionIndependentItems(dependencies, journeyId, items, inventory, signal) {
+	const sessions = dependencies.artifacts.sessions;
+	if (!sessions) return [];
+	const pending = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => Number(right.status === "uploading") - Number(left.status === "uploading") || right.artifact.byteLength - left.artifact.byteLength);
+	const claimed = /* @__PURE__ */ new Set();
+	const independent = [];
+	for (const item of pending) {
+		const keys = /* @__PURE__ */ new Set([...inventory.works.find((work) => work.logicalWorkId === item.workId)?.sessions.map((session) => session.key) ?? [], ...item.sessionMembership?.keys ?? []]);
+		for await (const session of sessions(journeyId, item.artifact, signal)) keys.add(await sessionKeyFor(session));
+		if (![...keys].some((key) => claimed.has(key))) independent.push(item);
+		for (const key of keys) claimed.add(key);
+	}
+	return independent;
 }
 //#endregion
 //#region apps/cli/src/account/journey/receipt.ts
@@ -10070,14 +10459,154 @@ async function checkPublicAgentSources(candidates, requestFetch = fetch, signal)
 	return results.filter((item) => item !== null);
 }
 //#endregion
-//#region apps/cli/src/account/journey/client.ts
-const refusalSchema = z.object({
-	error: z.string(),
-	preview: sendSettingsSchema.nullable().optional(),
-	resolution: sendResolutionSchema.optional(),
-	/** `unknown_keep_work_ids`: the kept IDs Passport did not accept (ADR 0204). */
-	workIds: z.array(z.string()).optional()
+//#region apps/cli/src/account/journey/session-schema.ts
+const digest = z.string().regex(/^[0-9a-f]{64}$/u);
+const stored = z.strictObject({
+	key: digest,
+	sessionKey: z.string().regex(/^sess-pilot\/[^/]+\/[^/]+\/[^/]+$/u).nullable(),
+	sha256: digest,
+	byteLength: z.number().int().positive(),
+	lastAt: z.iso.datetime()
 });
+const work = z.strictObject({
+	logicalWorkId: z.uuid(),
+	access: z.enum([
+		"public",
+		"private",
+		"removed"
+	]),
+	sessions: z.array(stored)
+});
+const cursor = z.string().nullable();
+const inventory$1 = z.strictObject({
+	works: z.array(work),
+	unassigned: z.array(stored),
+	nextCursor: cursor,
+	unassignedNextCursor: cursor
+});
+const reserve = z.discriminatedUnion("state", [z.strictObject({ state: z.literal("already_stored") }), z.strictObject({
+	state: z.literal("awaiting_upload"),
+	uploadUrl: z.url({ protocol: /^https?$/u }),
+	expiresAt: z.iso.datetime(),
+	headers: z.strictObject({ "x-amz-checksum-sha256": z.base64().length(44) })
+})]);
+const count$1 = z.number().int().nonnegative();
+const assembly = z.strictObject({
+	revision: count$1,
+	completedRevision: count$1,
+	scanId: z.uuid().nullable(),
+	assembledByteCount: count$1.nullable(),
+	wallMs: count$1.nullable(),
+	attempts: count$1,
+	error: z.string().nullable()
+});
+//#endregion
+//#region apps/cli/src/account/journey/session-client.ts
+function continuation(seen, next) {
+	if (next !== null && seen.has(next)) throw new JourneyRemoteError(200, "REMOTE_CURSOR_CYCLE", null);
+	if (next !== null) seen.add(next);
+	return next;
+}
+/** Session endpoints share the owner client's authentication, bounds and refusal classification. */
+function createSessionClient(request) {
+	let writes = Promise.resolve();
+	function mutate(signal, effect) {
+		const result = writes.then(() => {
+			signal.throwIfAborted();
+			return effect();
+		});
+		writes = result.then(() => void 0, () => void 0);
+		return result;
+	}
+	return {
+		async inventory(signal) {
+			const works = /* @__PURE__ */ new Map();
+			const unassigned = /* @__PURE__ */ new Map();
+			let workCursor = null;
+			let unassignedCursor = null;
+			let workDone = false;
+			let unassignedDone = false;
+			const workSeen = /* @__PURE__ */ new Set();
+			const unassignedSeen = /* @__PURE__ */ new Set();
+			do {
+				const query = new URLSearchParams({ limit: "500" });
+				if (workCursor !== null) query.set("cursor", workCursor);
+				if (unassignedCursor !== null) query.set("unassignedCursor", unassignedCursor);
+				const page = await request(`/me/sessions?${query}`, inventory$1, signal, void 0, "GET");
+				if (!workDone) {
+					for (const item of page.works) {
+						const sessions = new Map((works.get(item.logicalWorkId)?.sessions ?? []).map((session) => [session.key, session]));
+						for (const session of item.sessions) sessions.set(session.key, session);
+						works.set(item.logicalWorkId, {
+							...item,
+							sessions: [...sessions.values()]
+						});
+					}
+					workCursor = continuation(workSeen, page.nextCursor);
+					workDone = workCursor === null;
+				}
+				if (!unassignedDone) {
+					for (const session of page.unassigned) unassigned.set(session.key, session);
+					unassignedCursor = continuation(unassignedSeen, page.unassignedNextCursor);
+					unassignedDone = unassignedCursor === null;
+				}
+			} while (!workDone || !unassignedDone);
+			return {
+				works: [...works.values()],
+				unassigned: [...unassigned.values()]
+			};
+		},
+		async work(id, signal) {
+			let next = null;
+			const seen = /* @__PURE__ */ new Set();
+			const sessions = /* @__PURE__ */ new Map();
+			let value;
+			do {
+				const query = new URLSearchParams({ limit: "500" });
+				if (next !== null) query.set("cursor", next);
+				const page = await request(`/me/works/${encodeURIComponent(id)}/sessions?${query}`, work.extend({ nextCursor: cursor }).refine((item) => item.logicalWorkId === id), signal, void 0, "GET");
+				for (const session of page.sessions) sessions.set(session.key, session);
+				value = {
+					logicalWorkId: page.logicalWorkId,
+					access: page.access,
+					sessions: [...sessions.values()]
+				};
+				next = continuation(seen, page.nextCursor);
+			} while (next !== null);
+			return value;
+		},
+		reserve: (input, signal) => request("/me/sessions/reserve", reserve, signal, input),
+		complete: (input, signal) => mutate(signal, () => request("/me/sessions/complete", z.strictObject({ state: z.literal("stored") }), signal, input, "POST", void 0, 6e5)),
+		membership: (id, input, signal) => mutate(signal, () => request(`/me/works/${encodeURIComponent(id)}/sessions`, z.strictObject({
+			revision: count$1,
+			affectedWorks: z.array(z.uuid())
+		}), signal, input, "PUT", void 0, void 0, false, 202)),
+		async assembly(id, signal) {
+			try {
+				return await request(`/me/works/${encodeURIComponent(id)}/assembly`, assembly, signal, void 0, "GET");
+			} catch (error) {
+				if (error instanceof JourneyRemoteError && error.status === 404 && error.code === "not_found") return null;
+				throw error;
+			}
+		},
+		async assessment(scanId, signal) {
+			return (await request(`/me/tasks/${encodeURIComponent(scanId)}/log`, z.strictObject({
+				taskId: z.literal(scanId),
+				state: z.enum([
+					"accepted",
+					"running",
+					"succeeded",
+					"partial",
+					"failed"
+				]),
+				progress: z.number().min(0).max(1),
+				lines: z.array(z.string())
+			}), signal, void 0, "GET")).state;
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/account/journey/client.ts
 const publicProfileSchema = z.strictObject({
 	displayName: z.string().trim().min(1).max(300).nullable(),
 	avatarUrl: z.url().max(2048).refine((value) => {
@@ -10086,18 +10615,6 @@ const publicProfileSchema = z.strictObject({
 		return url.protocol === "https:" && !url.username && !url.password;
 	}).nullable()
 });
-var JourneyRemoteError = class extends Error {
-	status;
-	code;
-	details;
-	constructor(status, code, details, options) {
-		super(code, options);
-		this.name = "JourneyRemoteError";
-		this.status = status;
-		this.code = code;
-		this.details = details;
-	}
-};
 function apiBase(value) {
 	const url = new URL(value);
 	const local = [
@@ -10118,7 +10635,7 @@ const completeTimeoutMs = 6e5;
 function createJourneyOwnerClient(options) {
 	const base = apiBase(options.apiUrl);
 	const requestFetch = options.fetch ?? fetch;
-	async function request(path, schema, signal, body, method = "POST", key, timeoutMs = requestTimeoutMs$2, checksumUpload = false) {
+	async function requestWithHeaders(path, schema, signal, body, method = "POST", key, timeoutMs = requestTimeoutMs$2, checksumUpload = false, expectedStatus = 200) {
 		const token = await options.authorize();
 		signal.throwIfAborted();
 		const response = await requestFetch(new URL(path, base), {
@@ -10146,7 +10663,7 @@ function createJourneyOwnerClient(options) {
 			throw new JourneyRemoteError(response.status, "REMOTE_PROTOCOL", null);
 		}
 		const value = await readOwnerJson(response);
-		if (response.status !== 200) {
+		if (response.status !== expectedStatus) {
 			const refusal = refusalSchema.safeParse(value);
 			throw new JourneyRemoteError(response.status, refusal.success ? refusal.data.error : "REMOTE_PROTOCOL", refusal.success ? refusal.data : null);
 		}
@@ -10154,11 +10671,18 @@ function createJourneyOwnerClient(options) {
 		if (!parsed.success) throw new JourneyRemoteError(response.status, "REMOTE_PROTOCOL", null, { cause: parsed.error });
 		await options.authorize();
 		signal.throwIfAborted();
-		return parsed.data;
+		return {
+			data: parsed.data,
+			headers: response.headers
+		};
+	}
+	async function request(...args) {
+		return (await requestWithHeaders(...args)).data;
 	}
 	const receipt = (id) => sendReceiptSchema.refine((value) => value.receiptId === id);
 	return {
 		subject: options.subject,
+		sessions: createSessionClient(request),
 		checkAgentSources(candidates, signal) {
 			return checkPublicAgentSources(candidates, requestFetch, signal);
 		},
@@ -10167,7 +10691,24 @@ function createJourneyOwnerClient(options) {
 			signal.throwIfAborted();
 		},
 		async syncProfile(signal) {
-			await request("/me/profile", publicProfileSchema, signal);
+			const { headers } = await requestWithHeaders("/me/profile", publicProfileSchema, signal);
+			return { parallelCompletes: (headers.get("passport-capabilities") ?? "").split(",").some((token) => token.trim() === "parallel-completes") };
+		},
+		readProfile(signal) {
+			return request("/me/profile", ownerProfileSchema, signal, void 0, "GET");
+		},
+		async saveProfile(profile, signal) {
+			await request("/me/profile", ownerProfileSchema, signal, profile, "PUT");
+		},
+		async addressTaken(address, signal) {
+			const path = `/addresses/${encodeURIComponent(passportAddressSchema.parse(address))}`;
+			try {
+				await request(path, z.object({ publicId: z.string() }).strict(), signal, void 0, "GET");
+				return true;
+			} catch (error) {
+				if (error instanceof JourneyRemoteError && error.status === 404) return false;
+				throw error;
+			}
 		},
 		resolve(input, signal) {
 			return request("/me/work-bundles/resolve", sendResolutionSchema.refine((value) => value.logicalWorkId === input.logicalWorkId), signal, input);
@@ -10265,6 +10806,23 @@ async function applySettings(item, connection, signal, guard, auto = false) {
 }
 //#endregion
 //#region apps/cli/src/account/journey/resolve.ts
+/**
+* Whether the reservation's target survives other Works' completions, which move the owner's
+* scope version: Passport then still admits a new Work that resolves new with no candidate, or
+* the same matched binding at the requested access (ADR 0235).
+*/
+function keepsTarget(resolution, reservation) {
+	const [only] = resolution.candidates;
+	return reservation.target.kind === "new" ? resolution.status === "new" && only === void 0 : resolution.status === "matched" && only?.bindingId === reservation.target.bindingId && only.access === reservation.access;
+}
+/**
+* Whether Passport still admits the reservation under this fresh resolution: the access version
+* must not move, and a moved scope version needs a kept target (ADR 0235).
+*/
+function admits(resolution, reservation) {
+	if (resolution.accessVersion !== reservation.expectedAccessVersion) return false;
+	return resolution.scopeVersion === reservation.expectedScopeVersion || keepsTarget(resolution, reservation);
+}
 function resolveInput(item, bindingId) {
 	return {
 		logicalWorkId: item.workId,
@@ -10399,6 +10957,7 @@ async function perform(context, item, connection, signal) {
 		return next;
 	}
 	if (!item.receipt) {
+		if (item.resolution && !keepsTarget(item.resolution, item.reservation) && !admits(await connection.resolve(item.reservation.work, signal), item.reservation)) return renewed(item, null);
 		const reserved = await connection.reserve(item.operationKey, item.reservation, signal, context.checksumUploads !== false);
 		const next = await observe(item, reserved, connection, signal, auto);
 		if (context.fresh?.has(item.workId) && reserved.upload && next.status === "uploading") context.fresh.set(item.workId, {
@@ -10427,24 +10986,24 @@ async function perform(context, item, connection, signal) {
 			return withoutUpload(item);
 		}
 	}
-	const current = await connection.resolve(item.reservation.work, signal);
-	if (current.scopeVersion !== item.reservation.expectedScopeVersion || current.accessVersion !== item.reservation.expectedAccessVersion) return renewed(item, null);
+	if (!admits(await connection.resolve(item.reservation.work, signal), item.reservation)) return renewed(item, null);
 	return put(context, item, receipt.receiptId, receipt.upload, connection, signal, guard);
 }
 /** Uploads the bytes to the receipt's signed URL and completes it. */
 async function put(context, item, receiptId, upload, connection, signal, guard) {
 	await guard();
 	await context.upload(item.artifact, upload, signal);
+	const sent = withoutBusy(item);
 	await guard();
 	try {
-		return observe(item, await connection.complete(receiptId, signal), connection, signal, context.snapshot === true);
+		return observe(sent, await connection.complete(receiptId, signal), connection, signal, context.snapshot === true);
 	} catch (error) {
 		if (upload.headers !== void 0 && error instanceof JourneyRemoteError && error.code === "bundle_mismatch") return {
 			...renewed(withoutUpload(item), null),
 			checksumUploadRefused: true
 		};
 		if (error instanceof Object) uploaded.set(error, {
-			...item,
+			...sent,
 			uploadedReceiptId: receiptId
 		});
 		throw error;
@@ -10456,10 +11015,24 @@ function uploadedItem(error) {
 	return error instanceof Object ? uploaded.get(error) : void 0;
 }
 function withoutUpload(item) {
-	if (item.uploadedReceiptId === void 0) return item;
-	const { uploadedReceiptId: _, ...rest } = item;
+	if (item.uploadedReceiptId === void 0 && item.busyRefusals === void 0) return item;
+	const { uploadedReceiptId: _, busyRefusals: __, ...rest } = item;
 	return rest;
 }
+/** The busy count spans one upload and its completion: a Work that leaves the upload keeps none (ADR 0235). */
+function withoutBusy(item) {
+	const { busyRefusals: _busy, ...rest } = item;
+	return rest;
+}
+/**
+* A `settings_changed` without a resolution after the bytes were staged: other activations or
+* assessments moved the scope until Passport's retry budget ran out, which says nothing about this
+* Work's target. Completing again needs no second upload; the advance records `SEND_SCOPE_BUSY`
+* and waits longer before each further try (ADR 0235).
+*/
+function stagedRetry(error, item) {
+	return error instanceof JourneyRemoteError && error.code === "settings_changed" && error.details?.resolution === void 0 && item.uploadedReceiptId !== void 0;
+}
 /** A definite stale refusal can renew the intent; unknown outcomes always retry the same key. */
 async function stepItem(context, item, connection, signal) {
 	try {
@@ -10472,10 +11045,11 @@ async function stepItem(context, item, connection, signal) {
 			"target_conflict",
 			"work_removed"
 		].includes(error.code)) throw error;
+		if (stagedRetry(error, uploadedItem(error) ?? item)) throw error;
 		if (item.receipt) {
 			const observed = await connection.status(item.receipt.receiptId, signal);
 			await connection.assertCurrent(signal);
-			if (observed.state !== "awaiting_upload") return observe(item, observed, connection, signal, context.snapshot === true);
+			if (observed.state !== "awaiting_upload") return withoutBusy(await observe(item, observed, connection, signal, context.snapshot === true));
 		}
 		const candidate = error.details?.resolution?.candidates[0];
 		if (error.code === "target_conflict" && item.target?.kind === "existing" && candidate?.bindingId === item.target.bindingId) return {
@@ -10488,6 +11062,17 @@ async function stepItem(context, item, connection, signal) {
 			status: "blocked",
 			error: "WORK_REMOVED"
 		};
+		if (error.code === "settings_changed" && error.details?.resolution === void 0) {
+			const busyRefusals = (item.busyRefusals ?? 0) + 1;
+			if (item.receipt) return {
+				...item,
+				busyRefusals
+			};
+			return {
+				...renewed(item, null),
+				busyRefusals
+			};
+		}
 		return renewed(item, "SETTINGS_CHANGED");
 	}
 }
@@ -10504,18 +11089,274 @@ function renewed(item, error) {
 		error
 	};
 }
+//#endregion
+//#region apps/cli/src/account/journey/session-step.ts
+/** Reconcile against completed server facts on every retry, including after process loss. */
+async function stepSessionWork(dependencies, journeyId, context, item, connection, signal) {
+	const remote = connection.sessions;
+	const sessions = dependencies.artifacts.sessions;
+	if (!remote || !sessions) throw new ApplicationError("INVALID_STATE");
+	async function guard() {
+		await connection.assertCurrent(signal);
+		await context.active();
+		signal.throwIfAborted();
+	}
+	await guard();
+	if (!item.sessionAssembly && (item.status !== "uploading" || item.receipt || item.reservation)) return {
+		...item,
+		receipt: null,
+		reservation: null,
+		target: null,
+		previousReceipts: item.receipt ? [...item.previousReceipts, item.receipt] : item.previousReceipts,
+		status: "uploading",
+		error: null
+	};
+	if (item.sessionAssembly) {
+		const assembly = await remote.assembly(item.workId, signal);
+		if (!assembly) throw new ApplicationError("INVALID_STATE");
+		if (assembly.revision < item.sessionAssembly.revision) return item;
+		if (assembly.error) return {
+			...item,
+			status: "blocked",
+			error: "ASSESSMENT_INCOMPLETE"
+		};
+		const scanId = assembly.completedRevision === assembly.revision ? assembly.scanId : null;
+		const state = scanId ? await remote.assessment(scanId, signal) : "accepted";
+		await guard();
+		const failed = state === "failed" || state === "partial";
+		return {
+			...item,
+			sessionAssembly: {
+				revision: assembly.revision,
+				scanId
+			},
+			status: state === "succeeded" ? "completed" : failed ? "blocked" : "assessing",
+			error: failed ? "ASSESSMENT_INCOMPLETE" : null
+		};
+	}
+	if (item.sessionMembership) {
+		const intent = item.sessionMembership;
+		const assembly = await remote.assembly(intent.workId, signal);
+		const conflict = async () => {
+			const current = await remote.inventory(signal);
+			const revision = await remote.assembly(intent.workId, signal);
+			await guard();
+			return {
+				...item,
+				status: "blocked",
+				error: "SESSION_MEMBERSHIP_CONFLICT",
+				membershipConflict: {
+					revision: revision?.revision ?? 0,
+					keys: current.works.find((work) => work.logicalWorkId === intent.workId)?.sessions.map((session) => session.key) ?? []
+				}
+			};
+		};
+		if ((assembly?.revision ?? 0) !== intent.expectedRevision) return conflict();
+		await guard();
+		try {
+			const { workId, ...input } = intent;
+			const result = await remote.membership(workId, input, signal);
+			await guard();
+			return {
+				...item,
+				sessionAssembly: {
+					revision: result.revision,
+					scanId: null
+				},
+				status: "assessing",
+				error: null
+			};
+		} catch (error) {
+			if (error instanceof JourneyRemoteError && error.status === 409) return conflict();
+			throw error;
+		}
+	}
+	const assembly = await remote.assembly(item.workId, signal);
+	const inventory = await remote.inventory(signal);
+	const stored = new Map([...inventory.unassigned, ...inventory.works.flatMap((work) => work.sessions)].map((session) => [session.key, session]));
+	const keys = [];
+	for await (const session of sessions(journeyId, item.artifact, signal)) {
+		const key = await sessionKeyFor(session);
+		keys.push(key);
+		if (stored.get(key)?.sha256 === session.sha256) continue;
+		const input = {
+			key,
+			sha256: session.sha256,
+			byteLength: session.byteLength,
+			crc32: session.crc32,
+			lastAt: session.lastAt,
+			harness: session.harness
+		};
+		if (item.sessionUpload?.key !== key || item.sessionUpload.sha256 !== session.sha256) return {
+			...item,
+			sessionUpload: {
+				key,
+				sha256: session.sha256
+			}
+		};
+		await guard();
+		try {
+			await remote.complete({
+				...input,
+				metadata: session.metadata
+			}, signal);
+		} catch (error) {
+			if (!(error instanceof JourneyRemoteError) || error.status !== 409 || error.code !== "upload_incomplete") throw error;
+			await guard();
+			const reservation = await remote.reserve(input, signal);
+			if (reservation.state === "awaiting_upload") {
+				await guard();
+				await session.upload(reservation, signal);
+				await guard();
+				await remote.complete({
+					...input,
+					metadata: session.metadata
+				}, signal);
+			}
+		}
+		await guard();
+		return {
+			...item,
+			sessionUpload: null
+		};
+	}
+	await guard();
+	const current = inventory.works.find((work) => work.logicalWorkId === item.workId);
+	if (current && current.access !== item.access) {
+		const resolution = await connection.resolve(resolveInput(item, context.bindingId), signal);
+		const [candidate] = resolution.candidates;
+		if (resolution.status === "blocked" || candidate?.access === "removed") throw new ApplicationError("WORK_REMOVED");
+		if (resolution.status !== "matched" || resolution.logicalWorkId !== item.workId || resolution.candidates.length !== 1 || !candidate || context.bindingId !== void 0 && candidate.bindingId !== context.bindingId) throw new ApplicationError("INVALID_STATE");
+		const settings = await connection.preview(candidate.workId, item.access, signal);
+		await guard();
+		await connection.confirm(settings, signal);
+	}
+	await guard();
+	return {
+		...item,
+		sessionUpload: null,
+		sessionMembership: {
+			workId: item.workId,
+			expectedRevision: assembly?.revision ?? 0,
+			keys: [.../* @__PURE__ */ new Set([...current?.sessions.map((session) => session.key) ?? [], ...keys])],
+			title: item.title,
+			access: item.access
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/account/journey/state.ts
+function requireSend(snapshot) {
+	if (!snapshot?.send) throw new ApplicationError("UNKNOWN_ITEM");
+	return {
+		...snapshot,
+		send: snapshot.send
+	};
+}
+function matchesAction(snapshot, action) {
+	return snapshot.journey.revision === action.expectedJourneyRevision && snapshot.send.revision === action.expectedSendRevision;
+}
+/** Preserve an in-flight whole-Work protocol across upgrades to the session sender. */
+function usesSessionSend(dependencies, send) {
+	if (!dependencies.artifacts.sessions) return false;
+	if (send.items.some((item) => item.sessionUpload !== void 0 || item.sessionMembership || item.sessionAssembly)) return true;
+	return !send.items.some((item) => item.receipt || item.reservation || item.previousReceipts.length > 0);
+}
+async function saveSend(dependencies, snapshot, next, action) {
+	return dependencies.storage.commitSend({
+		journeyId: snapshot.journey.journeyId,
+		expectedJourneyRevision: action?.expectedJourneyRevision ?? snapshot.journey.revision,
+		expectedSendRevision: action?.expectedSendRevision ?? (snapshot.send?.id === next.id ? snapshot.send.revision : null),
+		requestKey: action?.idempotencyKey ?? randomUUID(),
+		requestHash: hash$1(action ?? next),
+		state: journeySendSchema.parse({
+			...next,
+			status: snapshot.send?.id === next.id && snapshot.send.status === "completed" ? "completed" : next.status,
+			revision: (snapshot.send?.id === next.id ? snapshot.send.revision : -1) + 1
+		}),
+		at: dependencies.now()
+	});
+}
+function aggregate(send) {
+	if (send.status === "paused") return send;
+	const statuses = send.items.map((item) => item.status);
+	return {
+		...send,
+		status: statuses.length === 0 ? "blocked" : statuses.every((status) => status === "completed") ? "completed" : statuses.some((status) => status === "target" || status === "settings") ? "review" : statuses.some((status) => status === "ready" || status === "uploading") ? "sending" : statuses.some((status) => status === "assessing") ? "waiting" : "blocked"
+	};
+}
+/**
+* A completed Send that Passport has not finished with: a Work is still assessed or reapplied
+* (ADR 0233). A blocked Work waits on the person's Retry, not on Passport.
+*/
+function awaitingPassport(send) {
+	return send.status === "completed" && send.items.some((item) => !["completed", "blocked"].includes(item.status));
+}
+/** Explicit resume retries recoverable items and recaptures a pending sign-in or profile. */
+function resumeState(send) {
+	if (send.status !== "completed" && send.items.length && send.items.every((item) => item.status === "completed") && send.items.some((item) => !item.sessionAssembly)) return {
+		...send,
+		status: "sign-in",
+		error: null
+	};
+	const profileRequired = ["paused", "sign-in"].includes(send.status) || send.subject === null || [
+		"ACCOUNT_PROFILE_UNAVAILABLE",
+		"ACCOUNT_CHANGED",
+		"PASSPORT_ADDRESS_TAKEN",
+		"PASSPORT_ADDRESS_RESERVED",
+		"PASSPORT_ADDRESS_LIMIT"
+	].includes(send.error ?? "") || send.status === "blocked" && send.items.some((item) => [
+		"ready",
+		"uploading",
+		"assessing",
+		"target",
+		"settings"
+	].includes(item.status));
+	const next = aggregate({
+		...send,
+		status: "sending",
+		error: null,
+		items: send.items.map((item) => item.status === "blocked" && [
+			"OPERATION_FAILED",
+			"UPLOAD_FAILED",
+			"SEND_REMOTE_REFUSED",
+			"SESSION_MOVE_ACCESS_REQUIRED",
+			"IDENTITY_UNAVAILABLE",
+			"ACCOUNT_SIGNED_OUT"
+		].includes(item.error ?? "") ? {
+			...item,
+			status: item.receipt ? item.receipt.state === "awaiting_upload" ? "uploading" : "assessing" : "ready",
+			error: null
+		} : item)
+	});
+	return profileRequired && !["blocked", "completed"].includes(next.status) ? {
+		...next,
+		status: "sign-in"
+	} : next;
+}
 const confirmedSettings = (item) => item.settings !== null && item.settingsConfirmed;
+const started = (item) => Number(item.status === "uploading");
+/**
+* Works that share a workspace path or a git remote: once one completes, Passport offers it as
+* the other's candidate, so the other's target no longer resolves the same (ADR 0235).
+*/
+function related(left, right) {
+	return left.artifact.sources.some((one) => right.artifact.sources.some((other) => one.pathHash !== null && one.pathHash === other.pathHash || one.remoteHashes.some((hash) => other.remoteHashes.includes(hash))));
+}
 /**
-* The Works one advance steps together. Upload work comes before assessment checks, smallest
-* ZIP first. Completing
-* an upload advances the owner's scope version, which every resolution and reservation carries,
-* so one Work's resolve-to-complete steps never overlap another's: uploads step one Work at a
-* time (ADR 0214). Assessment checks change nothing and step up to three together; a confirmed
-* linked Settings change alters access versions, so it always steps alone.
+* The Works one advance steps together. Upload work comes before assessment checks: up to three
+* Works, started uploads first, then the largest ZIP, so the slowest Work starts earliest.
+* Completing an upload moves the owner's scope version, which Passport accepts while a Work's
+* own target resolves the same (ADR 0235). A Work related to one already picked waits for the
+* next batch. A reserved Work whose target would not survive that steps alone, and so does a
+* confirmed linked Settings change, which moves the access version every reservation carries,
+* once no upload has started. Assessment checks change nothing and step up to three together.
 */
-function pickBatch(items, now = Date.now()) {
-	const uploading = items.find((item) => item.status === "uploading") ?? items.filter((item) => item.status === "ready").reduce((smallest, item) => !smallest || item.artifact.byteLength < smallest.artifact.byteLength ? item : smallest, void 0);
-	if (uploading) return [uploading];
+function pickBatch(items, now, limit) {
+	const uploads = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => started(right) - started(left) || right.artifact.byteLength - left.artifact.byteLength);
+	const alone = uploads.find((item) => item.status === "uploading" && item.reservation !== null && item.resolution !== null && !keepsTarget(item.resolution, item.reservation)) ?? (uploads[0] && confirmedSettings(uploads[0]) ? uploads[0] : void 0);
+	if (alone) return [alone];
+	if (uploads.length) return uploads.filter((item) => !confirmedSettings(item)).reduce((batch, item) => batch.length < limit && !batch.some((picked) => related(picked, item)) ? [...batch, item] : batch, []);
 	const assessing = items.filter((item) => item.status === "assessing");
 	const first = assessing[0];
 	if (!first) return [];
@@ -10548,17 +11389,53 @@ async function prepareProfile(dependencies, snapshot, connection, signal) {
 		assertScope(latest.journey, latest.send);
 		signal.throwIfAborted();
 	}
-	return captureProfile(connection, guard, signal, dependencies.failure);
+	const captured = await captureProfile(connection, guard, signal, dependencies.failure);
+	const chosen = snapshot.journey.profile;
+	if (captured.status !== "sending" || !chosen || !profileHasChoices(chosen)) return captured;
+	return writeProfile(connection, chosen, guard, signal, dependencies.failure, captured);
+}
+/** Passport's refusal of the chosen address, as the code that re-shows the address card. */
+const addressRefusals = {
+	address_taken: "PASSPORT_ADDRESS_TAKEN",
+	address_reserved: "PASSPORT_ADDRESS_RESERVED",
+	address_limit_reached: "PASSPORT_ADDRESS_LIMIT"
+};
+/**
+* The Journey's address and links over the owner's current settings, saved before the first
+* Work upload (ADR 0246). A refused address blocks the Send until the person keeps another.
+*/
+async function writeProfile(connection, chosen, guard, signal, failure, captured) {
+	try {
+		const current = await connection.readProfile(signal);
+		await guard();
+		await connection.saveProfile(mergeOwnerProfile(current.profile, chosen), signal);
+		await guard();
+		return captured;
+	} catch (error) {
+		if (signal.aborted) throw error;
+		if (error instanceof JourneyRemoteError && error.status === 409 && addressRefusals[error.code]) return {
+			status: "blocked",
+			error: addressRefusals[error.code] ?? null
+		};
+		if (error instanceof ApplicationError) throw error;
+		const unavailable = new ApplicationError("ACCOUNT_PROFILE_UNAVAILABLE", void 0, { cause: error });
+		failure(unavailable.code, unavailable);
+		return {
+			status: "blocked",
+			error: unavailable.code
+		};
+	}
 }
 /** Shared by native Send and Manual upload; `guard` rechecks the caller's own scope. */
 async function captureProfile(connection, guard, signal, failure) {
 	try {
 		await guard();
-		await connection.syncProfile(signal);
+		const { parallelCompletes } = await connection.syncProfile(signal);
 		await guard();
 		return {
 			status: "sending",
-			error: null
+			error: null,
+			parallelCompletes: parallelCompletes ? true : void 0
 		};
 	} catch (error) {
 		if (signal.aborted) throw error;
@@ -10583,6 +11460,8 @@ async function captureProfile(connection, guard, signal, failure) {
 }
 //#endregion
 //#region apps/cli/src/account/journey/advance.ts
+/** A Work Passport is done with: assessed, or stopped unless Resume retries it. */
+const settled = (item) => ["completed", "blocked"].includes(item.status);
 /** The stored Send still holds exactly this Work state, whatever else changed meanwhile. */
 function sameItem(items, item) {
 	return JSON.stringify(items.find((value) => value.workId === item.workId)) === JSON.stringify(item);
@@ -10602,22 +11481,50 @@ async function advanceItems(host, signal) {
 			status: "blocked",
 			error: "ACCOUNT_CHANGED"
 		});
+		if (send.items.length && send.items.every((item) => item.status === "completed")) {
+			const items = send.items.map((item) => {
+				if (item.sessionAssembly) return item;
+				try {
+					if (item.receipt && acceptReceipt(item, {
+						...item.receipt,
+						upload: null
+					}).status === "completed") return item;
+				} catch (error) {
+					host.failure("LEGACY_SEND_RECOVERY_REQUIRED", error);
+				}
+				return {
+					...item,
+					status: "blocked",
+					error: "LEGACY_SEND_RECOVERY_REQUIRED"
+				};
+			});
+			return host.save({
+				...send,
+				items,
+				status: items.every((item) => item.status === "completed") ? "completed" : "blocked",
+				error: items.some((item) => item.status === "blocked") ? "LEGACY_SEND_RECOVERY_REQUIRED" : null
+			});
+		}
 		if (send.subject === null || send.status === "sign-in") {
+			const { parallelCompletes: captured, ...profile } = await host.profile(connection, signal);
+			const parallelCompletes = send.subject === null ? captured : send.parallelCompletes && captured;
 			const prepared = {
 				...send,
 				subject: connection.subject,
-				...await host.profile(connection, signal)
+				...profile
 			};
+			if (parallelCompletes) prepared.parallelCompletes = true;
+			else delete prepared.parallelCompletes;
 			return host.save(prepared.status === "sending" ? aggregate(prepared) : prepared);
 		}
-		const batch = pickBatch(send.items);
-		if (host.finish && batch.every((item) => item.status === "assessing")) {
-			const finished = await host.finish(connection, signal);
-			if (finished !== null) return finished;
-		}
+		const blocked = await host.preflight?.(connection, signal);
+		if (blocked) return blocked;
+		const batch = host.batch?.() ?? pickBatch(send.items, Date.now(), send.parallelCompletes ? 3 : 1);
 		if (!batch.length) return host.applied();
+		const busy = Math.max(0, ...batch.map((item) => item.busyRefusals ?? 0));
+		if (busy) await wait(busyDelay(busy), signal);
 		const checksumUploads = !send.items.some((item) => item.checksumUploadRefused);
-		const results = await Promise.allSettled(batch.map((item) => stepItem({
+		const results = await Promise.allSettled(batch.map((item) => (host.step ?? stepItem)({
 			...host.context(item),
 			checksumUploads
 		}, item, connection, signal)));
@@ -10641,7 +11548,15 @@ async function advanceItems(host, signal) {
 			if (progressed) next.set(item.workId, progressed);
 			if (cause instanceof JourneyRemoteError && cause.status === 401 || isCode(cause, "ACCOUNT_SIGNED_OUT")) signIn = true;
 			else if (isCode(cause, "IDENTITY_REJECTED")) changed = true;
-			else if (isInterrupted(cause) || isTransientRefusal(cause)) {
+			else if (stagedRetry(cause, progressed ?? item)) {
+				const staged = progressed ?? item;
+				next.set(item.workId, {
+					...staged,
+					busyRefusals: (staged.busyRefusals ?? 0) + 1
+				});
+				host.failure("SEND_SCOPE_BUSY", cause);
+				error = "SEND_SCOPE_BUSY";
+			} else if (isInterrupted(cause) || isTransientRefusal(cause)) {
 				host.failure("SEND_INTERRUPTED", cause);
 				error = "SEND_INTERRUPTED";
 			} else {
@@ -10696,42 +11611,6 @@ function blockSend(host, error, signal) {
 		error: code
 	});
 }
-/**
-* The public Work IDs this Send keeps on the owner's Passport: every sent Work's receipt and
-* every Work left out only because the same bundle and access were already sent to this
-* account. Dropped and other omitted Works are not kept (ADR 0204).
-*/
-function keepWorkIds(journey, send) {
-	const unchanged = send.omitted.flatMap((omitted) => {
-		const binding = journey.works.find((work) => work.id === omitted.workId)?.binding;
-		return omitted.reason === "sent" && binding && binding.subject === send.subject ? [binding.publicWorkId] : [];
-	});
-	return [.../* @__PURE__ */ new Set([...send.items.flatMap((item) => item.receipt?.workId ?? []), ...unchanged])];
-}
-/**
-* Passport refused kept IDs it no longer has: a Work omitted as already sent whose Passport copy
-* an earlier Send retired. Those Works are sent again (a retired Work no longer matches, so each
-* becomes a new Work) and replace runs again once they are uploaded. Null when no refused ID is one.
-*/
-async function requeueRetired(journey, send, error, signal, dependencies) {
-	if (error.code !== "unknown_keep_work_ids") return null;
-	const refused = new Set(error.details?.workIds ?? []);
-	const works = send.omitted.flatMap((omitted) => {
-		const work = journey.works.find((value) => value.id === omitted.workId);
-		return omitted.reason === "sent" && work?.binding?.subject === send.subject && refused.has(work.binding.publicWorkId) ? [work] : [];
-	});
-	if (!works.length) return null;
-	const items = [];
-	for (const work of works) items.push(await describeItem(journey, work, dependencies, signal));
-	const ids = new Set(works.map((work) => work.id));
-	return {
-		...send,
-		status: "sending",
-		error: null,
-		items: [...send.items, ...items],
-		omitted: send.omitted.filter((omitted) => !ids.has(omitted.workId))
-	};
-}
 /** A Send saved before ADR 0204 may wait on a target or Settings question that is never asked. */
 function withoutQuestions(send) {
 	if (!send.items.some((item) => ["target", "settings"].includes(item.status))) return send;
@@ -10749,6 +11628,18 @@ function withoutQuestions(send) {
 	};
 	return send.status === "review" ? aggregate(next) : next;
 }
+/** Native completion follows acknowledged upload/membership, independently of assessment. */
+function completeAtUpload(send, sessions) {
+	if (!send.confirmedAt || ![
+		"sending",
+		"waiting",
+		"completed"
+	].includes(send.status) || !send.items.length || !send.items.every((item) => sessions ? !!item.sessionAssembly : ["assessing", "completed"].includes(item.status) && !!item.receipt && item.receipt.state !== "awaiting_upload")) return send;
+	return {
+		...send,
+		status: "completed"
+	};
+}
 async function advanceSend(dependencies, address, signal, chain) {
 	const snapshot = requireSend(await dependencies.storage.loadSend(address.journeyId, address.sendId));
 	if (chain) chain.revision = snapshot.send.revision;
@@ -10756,18 +11647,29 @@ async function advanceSend(dependencies, address, signal, chain) {
 		...snapshot,
 		status: "stale"
 	};
-	if (snapshot.journey.phase === "paused" || !snapshot.send.confirmedAt || [
-		"paused",
-		"completed",
-		"prepared"
-	].includes(snapshot.send.status)) return {
+	const completed = snapshot.send.status === "completed";
+	if (snapshot.journey.phase === "paused" || !snapshot.send.confirmedAt || ["paused", "prepared"].includes(snapshot.send.status) || completed && snapshot.send.items.every(settled)) return {
 		...snapshot,
 		status: "applied"
 	};
-	const save = (next) => saveSend(dependencies, snapshot, next);
+	const save = (next) => !completed ? saveSend(dependencies, snapshot, completeAtUpload(next, usesSessionSend(dependencies, next))) : JSON.stringify(next.items) === JSON.stringify(snapshot.send.items) ? Promise.resolve({
+		...snapshot,
+		status: "applied"
+	}) : saveSend(dependencies, snapshot, {
+		...snapshot.send,
+		items: next.items
+	});
 	try {
 		assertScope(snapshot.journey, snapshot.send);
 	} catch (error) {
+		if (completed) return save({
+			...snapshot.send,
+			items: snapshot.send.items.map((item) => settled(item) ? item : {
+				...item,
+				status: "blocked",
+				error: "SEND_SCOPE_CHANGED"
+			})
+		});
 		return blockSend({
 			send: snapshot.send,
 			failure: dependencies.failure,
@@ -10780,14 +11682,39 @@ async function advanceSend(dependencies, address, signal, chain) {
 	};
 	const send = withoutQuestions(snapshot.send);
 	if (send !== snapshot.send) return save(send);
+	let independentItems = [];
 	return advanceItems({
 		send,
 		failure: dependencies.failure,
+		...usesSessionSend(dependencies, send) ? {
+			batch: () => {
+				const limit = send.parallelCompletes ? 3 : 1;
+				return independentItems.length ? pickBatch(independentItems, Date.now(), limit) : pickBatch(send.items, Date.now(), limit);
+			},
+			preflight: async (connection, preflightSignal) => {
+				if (!connection.sessions) throw new ApplicationError("INVALID_STATE");
+				const inventory = await connection.sessions.inventory(preflightSignal);
+				if (!await sessionAccessBlocked(dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal)) {
+					independentItems = await sessionIndependentItems(dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal);
+					return null;
+				}
+				await connection.assertCurrent(preflightSignal);
+				return save({
+					...send,
+					status: "blocked",
+					items: send.items.map((item) => item.sessionAssembly || item.status === "completed" ? item : {
+						...item,
+						status: "blocked",
+						error: "SESSION_MOVE_ACCESS_REQUIRED"
+					})
+				});
+			},
+			step: (context, item, connection, stepSignal) => stepSessionWork(dependencies, snapshot.journey.journeyId, context, item, connection, stepSignal)
+		} : {},
 		connect: chain?.connect ?? dependencies.auth.connect,
 		profile: (connection, profileSignal) => prepareProfile(dependencies, snapshot, connection, profileSignal),
 		context: (item) => {
 			const binding = snapshot.journey.works.find((value) => value.id === item.workId)?.binding;
-			const retired = !item.receipt && binding?.sentBundleId === item.artifact.bundleId && binding.sentAccess === item.access;
 			return {
 				snapshot: true,
 				...chain ? { fresh: chain.fresh } : {},
@@ -10796,7 +11723,7 @@ async function advanceSend(dependencies, address, signal, chain) {
 					if (current.send.id !== snapshot.send.id || !sameItem(current.send.items, item) || current.send.status === "paused" || current.journey.phase === "paused") throw new ApplicationError("REVISION_CONFLICT");
 					assertScope(current.journey, current.send);
 				},
-				bindingId: binding?.subject === send.subject && !retired ? binding.bundleRecordId : void 0,
+				bindingId: binding?.subject === send.subject ? binding.bundleRecordId : void 0,
 				upload: async (artifact, upload, uploadSignal) => {
 					const started = performance.now();
 					await dependencies.artifacts.upload(snapshot.journey.journeyId, artifact, upload, uploadSignal);
@@ -10804,36 +11731,6 @@ async function advanceSend(dependencies, address, signal, chain) {
 				}
 			};
 		},
-		finish: async (connection, finishSignal) => {
-			if (send.replaced || !send.items.every((item) => ["assessing", "completed"].includes(item.status))) return null;
-			let retired;
-			try {
-				({retiredWorkIds: retired} = await connection.replace(keepWorkIds(snapshot.journey, send), finishSignal));
-			} catch (error) {
-				if (error instanceof JourneyRemoteError && error.status === 401) return save({
-					...send,
-					status: "sign-in",
-					error: null
-				});
-				if (!(error instanceof JourneyRemoteError) || error.status !== 400) throw error;
-				const requeued = await requeueRetired(snapshot.journey, send, error, finishSignal, dependencies);
-				if (requeued) return save(requeued);
-				dependencies.failure("SEND_REPLACE_REFUSED", error);
-				return save({
-					...send,
-					status: "blocked",
-					error: "SEND_REPLACE_REFUSED"
-				});
-			}
-			return save(aggregate({
-				...send,
-				error: null,
-				replaced: {
-					at: dependencies.now(),
-					retiredWorkCount: retired.length
-				}
-			}));
-		},
 		save,
 		applied: () => ({
 			...snapshot,
@@ -10845,6 +11742,28 @@ async function advanceSend(dependencies, address, signal, chain) {
 		})
 	}, signal);
 }
+/** The first wait after a bare refusal of staged bytes, doubled per refusal up to the cap. */
+const busyBaseMs = 2e3;
+/** Short, because a waiting advance holds the panel's single advance in flight. */
+const busyMaxMs = 16e3;
+function busyDelay(refusals) {
+	return Math.min(busyBaseMs * 2 ** (refusals - 1), busyMaxMs);
+}
+/** Waits `ms`; Pause aborts the wait with the advance. */
+function wait(ms, signal) {
+	return new Promise((resolve, reject) => {
+		signal.throwIfAborted();
+		const stop = () => {
+			clearTimeout(timer);
+			reject(signal.reason);
+		};
+		const timer = setTimeout(() => {
+			signal.removeEventListener("abort", stop);
+			resolve();
+		}, ms);
+		signal.addEventListener("abort", stop, { once: true });
+	});
+}
 /**
 * A refusal Passport answers while it or Identity is briefly unavailable. It says nothing about
 * the Work, so the step is retried instead of blocking it (the 2026-11-01 recorded run blocked a
@@ -12363,12 +13282,12 @@ function createJourneyFiles(storage) {
 	};
 }
 /**
-* One advance carries the Work being uploaded through its phases with one verified connection,
-* instead of one phase per panel round trip, and uploads a receipt it just resolved and reserved
-* without reading it again (ADR 0229). Each phase is still fenced and saved on its own, so Pause, a
-* revision change or a failure stops the chain at the next phase exactly as between advances.
-* The advance returns once that Work leaves its upload phases, so the next Work starts from the
-* caller's next advance as before.
+* One advance carries the Works being uploaded, up to three at once (ADR 0235), through their
+* phases with one verified connection, instead of one phase per panel round trip, and uploads a
+* receipt it just resolved and reserved without reading it again (ADR 0229). Each phase is still
+* fenced and saved on its own, so Pause, a revision change or a failure stops the chain at the
+* next phase exactly as between advances. The advance returns after three phases or once no
+* picked Work is mid-upload, so later Works continue from the caller's next advance.
 */
 async function advanceWork(dependencies, address, signal, phases = 3) {
 	let connection;
@@ -12386,7 +13305,7 @@ async function advanceWork(dependencies, address, signal, phases = 3) {
 /** The phase saved progress and left its Work mid-upload, with nothing else to report. */
 function uploading(result, before) {
 	const send = result.send;
-	return result.status === "applied" && send !== null && before !== void 0 && send.revision > before && send.status === "sending" && send.error === null && pickBatch(send.items)[0]?.status === "uploading";
+	return result.status === "applied" && send !== null && before !== void 0 && send.revision > before && send.status === "sending" && send.error === null && pickBatch(send.items, Date.now(), send.parallelCompletes ? 3 : 1)[0]?.status === "uploading";
 }
 //#endregion
 //#region apps/cli/src/account/journey/send.ts
@@ -12409,6 +13328,45 @@ function createJourneySender(dependencies, phases = 3) {
 		get(address) {
 			return dependencies.storage.loadSend(address.journeyId, address.sendId);
 		},
+		/** The owner's current address, links and account email; null while signed out. */
+		async ownerProfile(signal) {
+			const connection = await dependencies.auth.connect(signal);
+			if (!connection) return null;
+			const { profile, accountEmail } = await connection.readProfile(signal);
+			return {
+				address: profile.address,
+				links: profile.links,
+				accountEmail
+			};
+		},
+		/** A best-effort availability check for the address card; Send's save decides. */
+		async addressTaken(input, signal) {
+			const address = passportAddressSchema.parse(input.address);
+			const connection = await dependencies.auth.connect(signal);
+			if (!connection) return null;
+			return { taken: await connection.addressTaken(address, signal) };
+		},
+		/**
+		* The address or links chosen on the Sent page, after the Send reached Passport (ADR 0246,
+		* BL-230): an explicit Keep or Add saves them at once over the current settings.
+		*/
+		async saveSentProfile(input, signal) {
+			const latest = requireSend(await dependencies.storage.loadSend(input.journeyId));
+			const chosen = latest.journey.profile;
+			if (latest.send.status !== "completed" || !chosen || !profileHasChoices(chosen)) throw new ApplicationError("INVALID_TRANSITION");
+			const connection = await dependencies.auth.connect(signal);
+			if (!connection) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
+			if (latest.send.subject !== connection.subject) throw new ApplicationError("IDENTITY_REJECTED");
+			try {
+				const current = await connection.readProfile(signal);
+				await connection.saveProfile(mergeOwnerProfile(current.profile, chosen), signal);
+			} catch (error) {
+				if (signal.aborted || error instanceof ApplicationError) throw error;
+				const code = error instanceof JourneyRemoteError && error.status === 409 ? addressRefusals[error.code] : void 0;
+				if (code) throw new ApplicationError(code);
+				throw new ApplicationError("ACCOUNT_PROFILE_UNAVAILABLE", void 0, { cause: error });
+			}
+		},
 		async prepare(raw, signal) {
 			const input = sendPrepareSchema.parse(raw);
 			const snapshot = await dependencies.storage.loadSend(input.journeyId);
@@ -12418,7 +13376,42 @@ function createJourneySender(dependencies, phases = 3) {
 				status: "stale"
 			};
 			const draft = await draftSend(snapshot.journey, dependencies, signal);
-			const reuse = snapshot.send?.scopeDigest === draft.scopeDigest && snapshot.send.subject === draft.subject;
+			const recover = snapshot.send && [
+				"blocked",
+				"paused",
+				"completed"
+			].includes(snapshot.send.status) && snapshot.send.items.some((item) => [
+				"SESSION_MEMBERSHIP_CONFLICT",
+				"LEGACY_SEND_RECOVERY_REQUIRED",
+				"ASSESSMENT_INCOMPLETE",
+				"SESSION_PUBLICATION_FENCE_REQUIRED"
+			].includes(item.error ?? ""));
+			if (recover && snapshot.send) {
+				const connection = await dependencies.auth.connect(signal);
+				if (!connection) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
+				if (snapshot.send.subject !== null && snapshot.send.subject !== connection.subject) throw new ApplicationError("IDENTITY_REJECTED");
+				const sessions = dependencies.artifacts.sessions;
+				const remote = connection.sessions;
+				if (sessions && remote) {
+					const inventory = await remote.inventory(signal);
+					for (const item of draft.items) {
+						const current = inventory.works.find((work) => work.logicalWorkId === item.workId);
+						const assembly = await remote.assembly(item.workId, signal);
+						const selected = [];
+						for await (const session of sessions(input.journeyId, item.artifact, signal)) selected.push(await sessionKeyFor(session));
+						const currentKeys = current?.sessions.map((session) => session.key) ?? [];
+						item.recoveryReview = {
+							previousSendId: snapshot.send.id,
+							revision: assembly?.revision ?? 0,
+							currentAccess: current?.access ?? null,
+							currentKeys,
+							proposedKeys: [.../* @__PURE__ */ new Set([...currentKeys, ...selected])]
+						};
+					}
+					await connection.assertCurrent(signal);
+				}
+			}
+			const reuse = !recover && snapshot.send?.scopeDigest === draft.scopeDigest && snapshot.send.subject === draft.subject;
 			const next = reuse && snapshot.send ? {
 				...snapshot.send,
 				revision: snapshot.send.revision + 1
@@ -12476,6 +13469,7 @@ function createJourneySender(dependencies, phases = 3) {
 		async pause(raw) {
 			const input = sendActionSchema.parse(raw);
 			const snapshot = await load(input);
+			if (snapshot.send.status === "completed" || snapshot.send.replaced) throw new ApplicationError("INVALID_TRANSITION");
 			const result = await saveSend(dependencies, snapshot, {
 				...snapshot.send,
 				status: "paused"
@@ -12488,7 +13482,7 @@ function createJourneySender(dependencies, phases = 3) {
 			const input = sendActionSchema.parse(raw);
 			const snapshot = await load(input);
 			if (!matchesAction(snapshot, input)) return saveSend(dependencies, snapshot, snapshot.send, input);
-			if (snapshot.send.status !== "sign-in" || snapshot.send.items.some((item) => item.receipt)) throw new ApplicationError("INVALID_TRANSITION");
+			if (snapshot.send.status !== "sign-in" || snapshot.send.items.some((item) => item.receipt || item.previousReceipts.length > 0 || item.sessionUpload !== void 0 || item.sessionMembership || item.sessionAssembly)) throw new ApplicationError("INVALID_TRANSITION");
 			const result = await saveSend(dependencies, snapshot, {
 				...snapshot.send,
 				status: "prepared",
@@ -14408,6 +15402,18 @@ async function compose(options, callbacks, bundles) {
 		})();
 		return {
 			application,
+			remoteWorkers: createRemotePreflight({
+				storage: journeyStorage,
+				harnesses,
+				execution,
+				stateDir,
+				home: homedir(),
+				roots: {
+					codexHome: options.codexHome,
+					claudeHome: options.claudeHome
+				},
+				reportFailure: (error) => diagnostics.onFailure("remote-workers", error)
+			}),
 			nativeInspection: {
 				originals: createOriginalView(journeyStorage, stateDir),
 				output: createOutputView(journeyStorage, processing),
@@ -14512,6 +15518,7 @@ async function invoke(runtime, command, value, signal) {
 	const app = runtime.application;
 	markAgentPresence(runtime.stateDir, value);
 	switch (command) {
+		case "journey.remoteWorkers": return runtime.remoteWorkers(value, signal);
 		case "send.get": return app.journeySend?.get(sendAddress.partial({ sendId: true }).parse(value));
 		case "send.prepare": return app.journeySend?.prepare(sendPrepareSchema.parse(value));
 		case "send.start": return app.journeySend?.start(sendStartSchema.parse(value));
@@ -14745,4 +15752,4 @@ async function cancelOperation(runtime, id) {
 	return readOperation(runtime, id);
 }
 //#endregion
-export { createExecutionPort as _, readAgentPresence as a, executorRequestSchema as c, parseOptions as d, businessCommands as f, readStateDump as g, startupFailure as h, invoke as i, createRenderActivity as l, permissionDiagnostic as m, readOperation as n, createRuntime as o, longCommands as p, waitOperation as r, executorEventSchema as s, cancelOperation as t, helpText as u, startHost as v, traceStartup as y };
+export { readStateDump as _, readAgentPresence as a, traceStartup as b, executorRequestSchema as c, helpText as d, parseOptions as f, startupFailure as g, permissionDiagnostic as h, invoke as i, awaitingPassport as l, longCommands as m, readOperation as n, createRuntime as o, businessCommands as p, waitOperation as r, executorEventSchema as s, cancelOperation as t, createRenderActivity as u, createExecutionPort as v, startHost as y };