@gitroll/tacitt-cli 0.4.2 → 0.6.0

package/dist/{query-CVqWNFYf.mjs → query-Cm5lumS4.mjs}

@@ -1,16 +1,17 @@
-import { $ as createCleanup, B as parallelismLimits, C as readOriginalSearchFields, E as checkReusableBundle, F as SessionWorkerError, G as processJourneyMetadataFields, H as privateJourneyDirectory, I as sessionWorkerFailure, K as staticMaskCategory, L as privateCollectionDirectory, M as readCollectionIndex, N as parseCollectionWorkspaceSummary, O as captureLogicalJourneySources, P as createSharedSessionPool, Q as removeNamedTemporarySpools, R as defaultParallelism, T as createCollectionArtifacts, U as readLogicalJourneyFinalMasks, W as readConfiguredOutputInfo, Z as createTemporary, _ as processJourneyMetadata, a as scanReviewFields, at as windowsOwnerOnly, c as readSessionScanRecords, g as readCapturedOriginalRows, i as buildWorkScanBatches, it as restrictToOwner, j as runConfiguredSessionJob, k as capturedJourneyScope, l as scanPreparedSession, m as openConfiguredUpload, n as verifyPreparedSessionSources, nt as makePrivateDirectory, o as createWorkPieces, ot as isWindowsAclFailure, p as configuredSessionUploads, q as readWorkspacePair, r as prepareSessionScans, rt as openPrivateFile, s as readSessionScanFields, st as windowsAclCodes, t as preparedScanConfiguration, v as readStaticSessionMasks, w as readConfiguredSearchFields, y as staticSessionJobs, z as gitSeedsProvider } from "./src-D4nrfC2S.mjs";
-import { Bt as sessionPeriodSchema, Dn as entityDictionaryVersion, F as bClassificationKey, Fn as frameRecords, Ft as termTypeInfo, Gt as safeField, H as codePointLength, Ht as ApplicationError, Jt as reviewFamilies, K as utf16Offset, N as bUnitFragments, Ot as privacyTermKey, Qn as admitGitName, T as bLiteralTerms, Ut as UnfinishedJourneyError, V as bDigest, Wt as safeCode, Xn as createEntityMatcher, Zn as admitCustomTerm, Zt as observeSource, b as validateBReview, c as textDigest, h as reviewFindingsDigest, ht as journeyDescribeSchema, jt as reviewTermsInputSchema, l as validateReview, mn as currentDetectorVersion, n as compileBFindings, r as reviewBatchChunks, s as reviewSubmitSchema, t as locateTerms, yn as createStaticProcessor, z as bAnchorKey } from "./locate-CBiw-CJK.mjs";
-import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-37kIclGK.mjs";
-import { $ as settingsQuerySchema, $r as packageCommandSchema, A as deviceProfileScopeSchema, B as validateInspectionBatch, Bn as journeyConfirmedHides, Br as hasCompleteWorkDescription, Bt as newJourneyWork, C as rebindReviewSubmit, Cr as privacyDecisionDigest, Ct as sendStartSchema, D as createAccount, Dr as hasCurrentStaticReview, E as staticallyHiddenFindings, Er as nativeRespondSchema, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Fr as sendArtifactSchema, Gr as withReadingProgress, Hr as isReadingComplete, Ht as journeyContextQuerySchema, Ir as sendReceiptSchema, Jn as reviewCandidateResourceSchema, Jr as journeyFindingsSchema, Kn as workCorrectionBinding, L as createApplication, Ln as confirmedHideKinds, Lr as sendReplaceResultSchema, Lt as classificationPartition, M as readAccountAvatarUrl, Mr as agentSourceSchema, Mt as applyClassification, N as storedCredentialSchema, Nn as bTermMatcher, Nr as agentSourcesSchema, O as accountProfileSchema, Or as staticReviewDigest, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Q as settingsBatchSchema, Qn as bReviewDigest, Qr as commandSchema, Qt as journeyResourceQuerySchema, R as inspectionCancelSchema, Rr as sendResolutionSchema, Rt as classificationWorks, S as rebindReviewOverlay, Sn as readConfirmedHideChange, Sr as assertJourneyPrivacyReady, St as sendPrepareSchema, T as guardedFindingText, Tn as termHideAdditions, Tr as nativeGetSchema, Tt as currentJourneyAdapters, U as inspectionQuerySchema, Un as retireWorkDescription, Ur as isSelectedWork, Vn as maskedHitsStale, Vr as isClassifying, Vt as reviewCompileSchema, Wn as workDecisionDigest, Xn as reviewRepairResourceSchema, Xr as journeyRenderInputSchema, Xt as journeyPolicyRespondSchema, Yn as reviewRepairInputSchema, Yr as journeyPreviewSchema, Yt as searchScopeDigest, Zr as journeyRenderSchema, _t as maximumTermsFileBytes, a as bCrossSegmentReviewSchema, ar as scanGitSeedsId, b as bReviewScope, bn as confirmedHideAdditions, br as journeyClassificationSessionsSchema, bt as sendActionSchema, c as reconstructBFields, cr as scanExclusionResourceSchema, ct as validateFailureLocation, d as selectedValueMembers, dn as sessionReviewInputSchema, dr as journeyInventoryQuerySchema, dt as manualUploadChoiceSchema, ei as selectionBatchSchema, er as planBRepair, et as readWorkspaceOutcomes, f as splitSelectorValues, fn as sessionReviewQuerySchema, ft as manualUploadPrepareSchema, g as changeJourney, gt as emptyTermsRevision, hn as sessionUsefulnessInputSchema, hr as emptyPreparationFacts, i as validateBCrossSegmentReview, ii as stateSchema, ir as scanSessionResourceSchema, j as profileUrlMatchesIdentity, k as deviceAuthorizationSchema, ln as sessionRereadInputSchema, lt as manualUploadActionSchema, m as hideScopeDigest, mt as manualUploadStartSchema, n as scanBatchEquivalenceDigest, nt as appendSensitiveTerms, o as bRereadDigest, oi as recommendParallelism, on as sessionReconcileInputSchema, or as scanGitSeedsResource, ot as artifactFailureDetailSchema, p as activeJourneyTerms, pt as manualUploadSchema, qn as reviewCandidateInputSchema, qr as journeyFindingImpactSchema, qt as journeySearchResultSchema, r as locateTermEvidence, ri as producerVersion, rn as reviewAttemptResourceSchema, rr as scanPreparationDigest, s as reconcileBSession, sr as verifiedScanGitSeeds, st as resolveFailureLocation, t as scanBatchContextDigest, ti as selectionSchema, tn as journeyPlaceSchema, vt as normalizeSensitiveTerms, w as reviewBatchReuse, wr as nativeEventsSchema, x as rebindReviewAlignment, xt as sendChoiceSchema, y as isGenericPublicTerm, yt as replaceSensitiveTermsSchema, z as inspectionStartSchema, zr as sendSettingsSchema, zt as retireScanGeneration } from "./src-CBTvOa44.mjs";
-import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-DiOlSa8T.mjs";
-import { _ as staticBaseProduction, a as writeJourneyOutput, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, y as workApproval } from "./job-BII94L2c.mjs";
-import { t as createAgentSetupPort } from "./agent-setup-Bpsi-BCv.mjs";
+import { $ as createCleanup, B as parallelismLimits, C as readOriginalSearchFields, E as checkReusableBundle, F as SessionWorkerError, G as processJourneyMetadataFields, H as privateJourneyDirectory, I as sessionWorkerFailure, K as staticMaskCategory, L as privateCollectionDirectory, M as readCollectionIndex, N as parseCollectionWorkspaceSummary, O as captureLogicalJourneySources, P as createSharedSessionPool, Q as removeNamedTemporarySpools, R as defaultParallelism, T as createCollectionArtifacts, U as readLogicalJourneyFinalMasks, W as readConfiguredOutputInfo, Z as createTemporary, _ as processJourneyMetadata, a as scanReviewFields, at as windowsOwnerOnly, c as readSessionScanRecords, g as readCapturedOriginalRows, i as buildWorkScanBatches, it as restrictToOwner, j as runConfiguredSessionJob, k as capturedJourneyScope, l as scanPreparedSession, m as openConfiguredUpload, n as verifyPreparedSessionSources, nt as makePrivateDirectory, o as createWorkPieces, ot as isWindowsAclFailure, p as configuredSessionUploads, q as readWorkspacePair, r as prepareSessionScans, rt as openPrivateFile, s as readSessionScanFields, st as windowsAclCodes, t as preparedScanConfiguration, v as readStaticSessionMasks, w as readConfiguredSearchFields, y as staticSessionJobs, z as gitSeedsProvider } from "./src-BMSLVcgs.mjs";
+import { $t as safeField, Bt as sessionPeriodSchema, Dn as createStaticProcessor, F as bClassificationKey, Fn as entityDictionaryVersion, Ft as termTypeInfo, Gt as ownerProfileSchema, H as codePointLength, Ht as journeyProfileAddressActionSchema, K as utf16Offset, Kt as passportAddressSchema, N as bUnitFragments, Ot as privacyTermKey, Qt as safeCode, Sn as currentDetectorVersion, T as bLiteralTerms, Un as frameRecords, Ut as journeyProfileLinksActionSchema, V as bDigest, Wt as mergeOwnerProfile, Xt as ApplicationError, Zt as UnfinishedJourneyError, an as observeSource, ar as admitCustomTerm, b as validateBReview, c as textDigest, h as reviewFindingsDigest, ht as journeyDescribeSchema, ir as createEntityMatcher, jt as reviewTermsInputSchema, l as validateReview, n as compileBFindings, nn as reviewFamilies, or as admitGitName, qt as profileHasChoices, r as reviewBatchChunks, s as reviewSubmitSchema, t as locateTerms, tn as familySelected, z as bAnchorKey, zt as filterInventoryByPeriod } from "./locate-JYtFmKu-.mjs";
+import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-CGFwLUd6.mjs";
+import { $ as settingsQuerySchema, $r as journeyRenderSchema, A as deviceProfileScopeSchema, B as validateInspectionBatch, Bn as journeyConfirmedHides, Br as hasCompleteWorkDescription, Bt as newJourneyWork, C as rebindReviewSubmit, Cr as privacyDecisionDigest, Ct as sendStartSchema, D as createAccount, Dr as hasCurrentStaticReview, E as staticallyHiddenFindings, Er as nativeRespondSchema, Et as obsoleteJourney, Fn as confirmedHideGroupIds, Fr as sendArtifactSchema, Hr as isIncludedWork, Ht as journeyContextQuerySchema, Ir as sendReceiptSchema, Jn as reviewCandidateResourceSchema, Kn as workCorrectionBinding, L as createApplication, Ln as confirmedHideKinds, Lr as sendReplaceResultSchema, Lt as classificationPartition, M as readAccountAvatarUrl, Mr as agentSourceSchema, Mt as applyClassification, N as storedCredentialSchema, Nn as bTermMatcher, Nr as agentSourcesSchema, O as accountProfileSchema, Or as staticReviewDigest, Pr as journeySendSchema, Pt as journeyReviewStorageQuerySchema, Q as settingsBatchSchema, Qn as bReviewDigest, Qr as journeyRenderInputSchema, Qt as journeyResourceQuerySchema, R as inspectionCancelSchema, Rr as sendResolutionSchema, Rt as classificationWorks, S as rebindReviewOverlay, Sn as readConfirmedHideChange, Sr as assertJourneyPrivacyReady, St as sendPrepareSchema, T as guardedFindingText, Tn as termHideAdditions, Tr as nativeGetSchema, Tt as currentJourneyAdapters, U as inspectionQuerySchema, Un as retireWorkDescription, Ur as isReadingComplete, Vn as maskedHitsStale, Vr as isClassifying, Vt as reviewCompileSchema, Wn as workDecisionDigest, Wr as isSelectedWork, Xn as reviewRepairResourceSchema, Xr as journeyFindingsSchema, Xt as journeyPolicyRespondSchema, Yn as reviewRepairInputSchema, Yr as journeyFindingImpactSchema, Yt as searchScopeDigest, Zr as journeyPreviewSchema, _t as maximumTermsFileBytes, a as bCrossSegmentReviewSchema, ai as producerVersion, ar as scanGitSeedsId, b as bReviewScope, bn as confirmedHideAdditions, br as journeyClassificationSessionsSchema, bt as sendActionSchema, c as reconstructBFields, ci as recommendParallelism, cr as scanExclusionResourceSchema, ct as validateFailureLocation, d as selectedValueMembers, dn as sessionReviewInputSchema, dr as journeyInventoryQuerySchema, dt as manualUploadChoiceSchema, ei as commandSchema, er as planBRepair, et as readWorkspaceOutcomes, f as splitSelectorValues, fn as sessionReviewQuerySchema, ft as manualUploadPrepareSchema, g as changeJourney, gt as emptyTermsRevision, hn as sessionUsefulnessInputSchema, hr as emptyPreparationFacts, i as validateBCrossSegmentReview, ir as scanSessionResourceSchema, j as profileUrlMatchesIdentity, k as deviceAuthorizationSchema, ln as sessionRereadInputSchema, lt as manualUploadActionSchema, m as hideScopeDigest, mt as manualUploadStartSchema, n as scanBatchEquivalenceDigest, ni as selectionBatchSchema, nt as appendSensitiveTerms, o as bRereadDigest, oi as stateSchema, on as sessionReconcileInputSchema, or as scanGitSeedsResource, ot as artifactFailureDetailSchema, p as activeJourneyTerms, pt as manualUploadSchema, qn as reviewCandidateInputSchema, qr as withReadingProgress, qt as journeySearchResultSchema, r as locateTermEvidence, ri as selectionSchema, rn as reviewAttemptResourceSchema, rr as scanPreparationDigest, s as reconcileBSession, sr as verifiedScanGitSeeds, st as resolveFailureLocation, t as scanBatchContextDigest, ti as packageCommandSchema, tn as journeyPlaceSchema, vt as normalizeSensitiveTerms, w as reviewBatchReuse, wr as nativeEventsSchema, x as rebindReviewAlignment, xt as sendChoiceSchema, y as isGenericPublicTerm, yt as replaceSensitiveTermsSchema, z as inspectionStartSchema, zr as sendSettingsSchema, zt as retireScanGeneration } from "./src--Ln5GHdz.mjs";
+import { $ as checkVersion, A as resourceSelectionQuerySchema, B as termReuseQuerySchema, C as loadAcceptedReview, D as aggregateUsefulness, E as loadPrivateResource, F as validateUnitCandidate, G as requireActiveBatch, H as batchHeader, I as reuseQuerySchema, J as validateDatabase, K as initializeAndClaim, L as batchQuery, M as evaluateUnitEvidence, N as sameCandidateRequest, O as sessionUsefulnessRecommendation, P as validateCandidateAttempt, Q as validateState, R as isPrivateResourceKind, S as validateSessionBindings, T as loadBatch, U as createJourneyPayloadFiles, V as privateReviewHash, W as validateBatchBody, X as readBundleDirectory, Y as withDatabase, Z as readStoredState, _ as loadReconciliation, _t as isCoordinationBusy, a as decodeError, at as hasResetMarker, b as validatePreparationSelection, c as dropsAnchor, ct as privatePath, d as parseDelivery, dt as stateDirectory, et as schemaVersion, f as validateCandidate, ft as syncDirectory, g as loadPreparedBodies, gt as errorCode$1, h as loadPreparation, ht as StoreError, i as createExecutor, it as finishReset, j as inspectionQuerySchema$1, k as sessionQuery, l as replySchema, lt as readResetMarker, m as loadStatus, mt as withFileCheckTimings, n as releaseInheritedHeapFlags, nt as createDatabaseFile, o as ProtocolError, ot as inspectStateFiles, p as classificationJourneyCommit, pt as withStateSnapshot, q as ownership, r as storeHeapLimits, rt as databaseName, s as allowedReplies, st as present, tt as beginReset, u as operations, ut as recheckPrivatePath, v as loadRereadBodies, vt as isSqliteCorruption, w as loadAuthenticatedReview, x as validateSessionReconciliation, y as loadSessionBodies, z as privateResourceHeader } from "./heap-DY5n4EVC.mjs";
+import { C as journeyDirectory, S as saveRemoteState, _ as staticBaseProduction, a as writeJourneyOutput, b as isRemoteImport, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as prepareSourcePlan, w as collectRemoteWorkers, x as readRemoteState, y as workApproval } from "./job-BxUVFocm.mjs";
+import { t as createAgentSetupPort } from "./agent-setup-Dv_mQ38P.mjs";
 import { t as workerMessageSchema } from "./messages-D3m3bhva.mjs";
 import { constants, write } from "node:fs";
 import { z } from "zod";
 import { copyFile, link, lstat, mkdir, mkdtemp, open, opendir, readFile, readdir, realpath, rename, rm, unlink, writeFile } from "node:fs/promises";
 import { execFile, spawn } from "node:child_process";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
+import { createInterface } from "node:readline";
 import { Writable } from "node:stream";
 import { parseArgs, promisify, types } from "node:util";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -27,6 +28,7 @@ import { pipeline } from "node:stream/promises";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { DatabaseSync } from "node:sqlite";
 import { Worker } from "node:worker_threads";
+import { parse } from "shell-quote";
 import { rgPath } from "@vscode/ripgrep";
 import { pino } from "pino";
 import { SeverityNumber } from "@opentelemetry/api-logs";
@@ -858,7 +860,9 @@ const nativePanelRespondSchema = z.object({
 		z.object({
 			kind: z.literal("retry-work"),
 			workId: z.uuid()
-		}).strict()
+		}).strict(),
+		journeyProfileAddressActionSchema,
+		journeyProfileLinksActionSchema
 	])
 }).strict();
 function createRouter(application, account, stopping, delivery, nativeInspection, agentPresence) {
@@ -932,7 +936,10 @@ function createRouter(application, account, stopping, delivery, nativeInspection
 			pause: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().pause(input)),
 			resume: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().resume(input)),
 			withdraw: t.procedure.input(sendActionSchema).mutation(({ input }) => sending().withdraw(input)),
-			advance: t.procedure.input(sendAddress).mutation(({ input }) => sending().advance(input, stopping))
+			advance: t.procedure.input(sendAddress).mutation(({ input }) => sending().advance(input, stopping)),
+			ownerProfile: t.procedure.query(({ signal }) => sending().ownerProfile(signal ?? stopping)),
+			addressTaken: t.procedure.input(z.object({ address: passportAddressSchema }).strict()).query(({ input, signal }) => sending().addressTaken(input, signal ?? stopping)),
+			saveSentProfile: t.procedure.input(z.object({ journeyId: z.uuid() }).strict()).mutation(({ input }) => sending().saveSentProfile(input, stopping))
 		}),
 		manualUpload: t.router({
 			get: t.procedure.input(z.object({ uploadId: z.uuid().optional() }).strict()).query(({ input }) => uploading().get(input.uploadId)),
@@ -5345,6 +5352,7 @@ const businessCommands = [
 	"send.resume",
 	"send.advance",
 	"journey.start",
+	"journey.remoteWorkers",
 	"journey.serve",
 	"journey.get",
 	"journey.groupItems",
@@ -5634,6 +5642,334 @@ function helpText(source = sourceCheckout) {
 	return source ? fullHelp : fullHelp.replace(/^ {2}--dev .*\n/m, "");
 }
 //#endregion
+//#region apps/cli/src/remote/dispatch.ts
+function balancedQuotes(command) {
+	let quote = "";
+	let escaped = false;
+	for (const character of command) {
+		if (escaped) {
+			escaped = false;
+			continue;
+		}
+		if (character === "\\" && quote !== "'") escaped = true;
+		else if (quote === character) quote = "";
+		else if (!quote && (character === "'" || character === "\"")) quote = character;
+	}
+	return !quote && !escaped;
+}
+/** Parse inert simple commands. Expansions and unsupported compound syntax fail closed. */
+function commands$1(command) {
+	if (Buffer.byteLength(command) > 65536 || /`|\$\(|[\0\r]/u.test(command) || !balancedQuotes(command)) return [];
+	try {
+		const segments = [[]];
+		let redirect = false;
+		for (const token of parse(command.replaceAll("\n", ";"), () => "\0")) if (typeof token === "string") {
+			if (token.includes("\0")) return [];
+			if (redirect) redirect = false;
+			else segments.at(-1)?.push(token);
+		} else if ("comment" in token) continue;
+		else if ("op" in token && [
+			">",
+			">>",
+			"<",
+			">&",
+			"<&"
+		].includes(token.op)) {
+			if (redirect) return [];
+			redirect = true;
+		} else if ("op" in token && [
+			";",
+			"&&",
+			"||",
+			"|",
+			"&"
+		].includes(token.op)) segments.push([]);
+		else return [];
+		return redirect ? [] : segments.filter((words) => words.length > 0);
+	} catch {
+		return [];
+	}
+}
+function agent(words) {
+	const executable = posix.basename(words[0] ?? "");
+	if (words.some((word) => [
+		"--help",
+		"-h",
+		"--version"
+	].includes(word))) return null;
+	if (executable === "codex" && words[1] === "exec") return "codex";
+	if (executable === "claude" && words.slice(1).some((word) => word === "-p" || word === "--print")) return "claude";
+	return null;
+}
+const validHost = (host) => /^(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*@)?(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*|\[[a-fA-F0-9:]+\])$/u.test(host);
+/** Consent and import identity include every retained connection selector. */
+function endpoint(host, transport, args) {
+	return transport === "ssh" && args.length === 1 ? host : `${host} (${transport}: ${args.join(" ")})`;
+}
+function ssh(words) {
+	const args = [];
+	let index = 1;
+	for (; index < words.length; index++) {
+		const word = words[index] ?? "";
+		if (word === "--") {
+			index++;
+			break;
+		}
+		if (!word.startsWith("-")) break;
+		if (word === "--help" || /^-[^-]*[NVGQOW]/u.test(word)) return null;
+		if (/^-[pLlIiFJoObcDEeRSwWQ]/u.test(word)) {
+			const flag = word.slice(0, 2);
+			const value = word.length > 2 ? word.slice(2) : words[++index];
+			if (!value) return null;
+			if (flag === "-p" && /^\d{1,5}$/u.test(value)) args.push(flag, value);
+			if (flag === "-l" && /^[a-zA-Z0-9_.-]+$/u.test(value)) args.push(flag, value);
+		} else if (!/^-[46AaCfKkMnqsTtVvXxYy]+$/u.test(word)) return null;
+	}
+	const host = words[index];
+	if (!host || !validHost(host) || index + 1 >= words.length) return null;
+	return {
+		host,
+		transport: "ssh",
+		args: [...args, host],
+		command: words.slice(index + 1).join(" ")
+	};
+}
+function gcloud(words) {
+	if (words[1] !== "compute" || words[2] !== "ssh") return null;
+	let host;
+	let command;
+	const selectors = [];
+	for (let index = 3; index < words.length; index++) {
+		const word = words[index] ?? "";
+		if (word === "--help" || word === "-h" || word === "--dry-run") return null;
+		if (word === "--command" || word.startsWith("--command=")) command = word === "--command" ? words[++index] : word.slice(10);
+		else if (["--zone", "--project"].some((flag) => word === flag || word.startsWith(`${flag}=`))) {
+			const separator = word.indexOf("=");
+			const flag = separator === -1 ? word : word.slice(0, separator);
+			const value = separator === -1 ? words[++index] : word.slice(separator + 1);
+			if (!value || !/^[a-zA-Z0-9_.:-]+$/u.test(value)) return null;
+			selectors.push(`${flag}=${value}`);
+		} else if (word === "--tunnel-through-iap" || word === "--internal-ip") selectors.push(word);
+		else if (word === "--quiet" || word === "-q") continue;
+		else if (!word.startsWith("-") && !host) host = word;
+		else return null;
+	}
+	if (!host || !validHost(host) || !command) return null;
+	return {
+		host,
+		transport: "gcloud",
+		args: [host, ...selectors],
+		command
+	};
+}
+/** Matches executables at shell command positions, never mentions in prose or other commands. */
+function parseRemoteDispatch(command) {
+	return commands$1(command).flatMap((words) => {
+		const executable = posix.basename(words[0] ?? "");
+		const remote = executable === "ssh" ? ssh(words) : executable === "gcloud" ? gcloud(words) : null;
+		if (!remote) return [];
+		return [...new Set(commands$1(remote.command).map(agent))].flatMap((harness) => harness ? [{
+			host: endpoint(remote.host, remote.transport, remote.args),
+			harness,
+			transport: remote.transport,
+			args: remote.args
+		}] : []);
+	});
+}
+//#endregion
+//#region apps/cli/src/remote/scan.ts
+function object(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function timestamp(value) {
+	return typeof value === "string" && Number.isFinite(Date.parse(value)) ? new Date(value).toISOString() : null;
+}
+function commands(row) {
+	const payload = row["payload"];
+	if (row["type"] === "response_item" && object(payload) && payload["type"] === "function_call" && typeof payload["name"] === "string" && [
+		"exec_command",
+		"shell_command",
+		"shell"
+	].includes(payload["name"])) {
+		let args = payload["arguments"];
+		if (typeof args === "string") try {
+			args = JSON.parse(args);
+		} catch {
+			return [];
+		}
+		if (!object(args)) return [];
+		const command = args["cmd"] ?? args["command"];
+		return typeof command === "string" ? [{
+			id: typeof payload["call_id"] === "string" ? payload["call_id"] : "",
+			command
+		}] : [];
+	}
+	const message = row["message"];
+	if (row["type"] !== "assistant" || !object(message) || !Array.isArray(message["content"])) return [];
+	return message["content"].flatMap((block) => {
+		if (!object(block) || block["type"] !== "tool_use" || block["name"] !== "Bash" || !object(block["input"]) || typeof block["input"]["command"] !== "string") return [];
+		return [{
+			id: typeof block["id"] === "string" ? block["id"] : "",
+			command: block["input"]["command"]
+		}];
+	});
+}
+function resultIds(row) {
+	const payload = row["payload"];
+	if (object(payload) && payload["type"] === "function_call_output" && typeof payload["call_id"] === "string") return [payload["call_id"]];
+	const message = row["message"];
+	if (!object(message) || !Array.isArray(message["content"])) return [];
+	return message["content"].flatMap((block) => object(block) && block["type"] === "tool_result" && typeof block["tool_use_id"] === "string" ? [block["tool_use_id"]] : []);
+}
+/** Tool executable positions only. Source bytes stay inside this deterministic CLI scanner. */
+async function scanRemoteDispatches(sessions, signal) {
+	const windows = [];
+	for (const session of sessions) {
+		const pending = /* @__PURE__ */ new Map();
+		for (const part of session.parts) {
+			signal.throwIfAborted();
+			if (part.representation !== "jsonl") throw new Error("REMOTE_SOURCE_FORMAT_UNSUPPORTED");
+			const file = await open(part.path, constants.O_RDONLY | constants.O_NOFOLLOW);
+			try {
+				const before = await file.stat({ bigint: true });
+				if (String(before.dev) !== part.snapshot.dev || String(before.ino) !== part.snapshot.ino || before.size !== BigInt(part.snapshot.size) || String(before.mtimeNs) !== part.snapshot.mtimeNs || String(before.ctimeNs) !== part.snapshot.ctimeNs) throw new Error("REMOTE_SOURCE_CHANGED");
+				if (!part.snapshot.size) continue;
+				const stream = file.createReadStream({
+					autoClose: false,
+					start: 0,
+					end: part.snapshot.size - 1,
+					signal
+				});
+				const lines = createInterface({
+					input: stream,
+					crlfDelay: Infinity
+				});
+				try {
+					for await (const line of lines) {
+						signal.throwIfAborted();
+						if (line.length > 16777216) throw new Error("REMOTE_SOURCE_RECORD_TOO_LARGE");
+						if (!line.trim()) continue;
+						const row = JSON.parse(line);
+						if (!object(row)) continue;
+						const at = timestamp(row["timestamp"]);
+						if (!at) continue;
+						for (const id of resultIds(row)) {
+							for (const window of pending.get(id) ?? []) if (at >= window.start) window.end = at;
+							pending.delete(id);
+						}
+						for (const command of commands(row)) {
+							const end = timestamp(session.lastInteractionAt);
+							const found = parseRemoteDispatch(command.command).map((dispatch) => ({
+								...dispatch,
+								sourceSessionId: session.id,
+								start: at,
+								end: end && end >= at ? end : at
+							}));
+							windows.push(...found);
+							pending.set(command.id, found);
+						}
+					}
+					const after = await file.stat({ bigint: true });
+					if (after.mtimeNs !== before.mtimeNs || after.size !== before.size) throw new Error("REMOTE_SOURCE_CHANGED");
+				} finally {
+					lines.close();
+					stream.destroy();
+				}
+			} finally {
+				await file.close();
+			}
+		}
+	}
+	return windows;
+}
+//#endregion
+//#region apps/cli/src/remote/preflight.ts
+const inputSchema = z.object({
+	journeyId: z.uuid(),
+	confirmations: z.record(z.string(), z.boolean()).optional()
+}).strict();
+function createRemotePreflight(options) {
+	return async (value, signal = new AbortController().signal) => {
+		const input = inputSchema.parse(value);
+		const current = await options.storage.current(input.journeyId);
+		if (!current?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		if (current.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
+		if (current.snapshotId) return {
+			hosts: [],
+			copied: 0,
+			failures: [],
+			skipped: "already-frozen"
+		};
+		const lease = await options.execution.tryAcquire("workflow");
+		if (!lease) throw new ApplicationError("DISCOVERY_BUSY");
+		try {
+			const admitted = await options.storage.current(input.journeyId);
+			if (!admitted?.consent || admitted.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
+			if (admitted.snapshotId) return {
+				hosts: [],
+				copied: 0,
+				failures: [],
+				skipped: "already-frozen"
+			};
+			let state = await readRemoteState(options.stateDir, input.journeyId);
+			if (!state) {
+				const discovered = await options.harnesses.discover(signal);
+				if (!discovered.complete) throw new ApplicationError("SCOPE_NOT_READY");
+				const inventory = filterInventoryByPeriod(discovered, current.period ?? {});
+				const families = reviewFamilies(inventory);
+				const sessions = inventory.sessions.filter((session) => familySelected(inventory, families, session) && !session.warnings.includes("NON_INTERACTIVE_LAUNCH") && session.parts.every((part) => !isRemoteImport(part.path)));
+				state = {
+					windows: [],
+					decisions: {},
+					parents: Object.fromEntries(sessions.map((session) => [session.id, session.sourceKey])),
+					copied: [],
+					failures: []
+				};
+				for (const session of sessions) try {
+					state.windows.push(...await scanRemoteDispatches([session], signal));
+				} catch (error) {
+					signal.throwIfAborted();
+					options.reportFailure(error);
+					state.failures.push("source-scan");
+				}
+				await saveRemoteState(options.stateDir, input.journeyId, state);
+			}
+			const decisions = input.confirmations ?? {};
+			const known = new Set(state.windows.map((window) => window.host));
+			if (Object.keys(decisions).some((host) => !known.has(host))) throw new ApplicationError("INVALID_ARGUMENTS");
+			const fresh = {};
+			for (const [host, allow] of Object.entries(decisions)) {
+				if (Object.hasOwn(state.decisions, host)) continue;
+				fresh[host] = allow;
+				state.decisions[host] = allow;
+			}
+			await saveRemoteState(options.stateDir, input.journeyId, state);
+			if (Object.keys(fresh).length) {
+				const collected = await collectRemoteWorkers(state.windows, fresh, options.home, options.transport, (_host, error) => options.reportFailure(new Error("REMOTE_COLLECTION_FAILED", { cause: error })), options.roots);
+				state.copied.push(...collected.copied);
+				state.failures.push(...collected.failures);
+				await saveRemoteState(options.stateDir, input.journeyId, state);
+			}
+			return result(state);
+		} finally {
+			await lease.release();
+		}
+	};
+}
+function result(state) {
+	return {
+		hosts: [...new Set(state.windows.map((window) => window.host))].filter((host) => !Object.hasOwn(state.decisions, host)).map((host) => ({
+			host,
+			windows: state.windows.filter((window) => window.host === host).map(({ start, end }) => ({
+				start,
+				end
+			}))
+		})),
+		copied: state.copied.length,
+		failures: state.failures
+	};
+}
+//#endregion
 //#region apps/cli/src/journey/confirmed-hides.ts
 /** The Work's explicit exception values; an occurrence inside one stays visible (ADR 0069). */
 const workExceptions = (state, workId) => state.exceptions.filter((item) => item.workId === workId).map((item) => item.value);
@@ -7193,22 +7529,6 @@ async function prepareStaticWork(options) {
 	});
 }
 //#endregion
-//#region apps/cli/src/journey/directory.ts
-async function journeyDirectory(stateDir, journeyId) {
-	let path = stateDir;
-	for (const name of ["journeys", journeyId]) {
-		path = join(path, name);
-		try {
-			await makePrivateDirectory(path);
-		} catch (cause) {
-			if (!(cause instanceof Error && "code" in cause && cause.code === "EEXIST")) throw cause;
-		}
-		const stat = await lstat(path, { bigint: true });
-		if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(path) !== path || (process.platform === "win32" ? !await windowsOwnerOnly(path, "directory") : stat.uid !== BigInt(process.getuid?.() ?? -1) || (stat.mode & 63n) !== 0n)) throw new ApplicationError("UNSAFE_STATE_PATH");
-	}
-	return path;
-}
-//#endregion
 //#region apps/cli/src/journey/observe.ts
 /** Observe whole-journey pause while a single large Work is still being processed. */
 function observeJourneyPause(storage, journeyId, processing, onFailure, requireConfirmedScope = false) {
@@ -7396,7 +7716,7 @@ function createJourneyPreparation(options) {
 				revision: "empty",
 				terms: []
 			};
-			const plan = await prepareSourcePlan(storage, options.harnesses, journeyId, terms, abort.signal, current.period);
+			const plan = await prepareSourcePlan(storage, options.harnesses, journeyId, terms, abort.signal, current.period, options.stateDir);
 			const initial = await storage.current(journeyId);
 			if (!initial?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
 			const formed = initial.snapshotId ? [] : namedJourneyWorks(formJourneyWorks(plan.approval, options.processing.environment), options.processing, abort.signal);
@@ -7417,26 +7737,61 @@ function createJourneyPreparation(options) {
 			const frozen = state;
 			const blockWork = (work, error) => changeJourney(storage, journeyId, "snapshot", (before) => {
 				if (before.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
+				if (before.phase === "sending" || before.phase === "completed") return before;
 				return withReadingProgress({
 					...before,
-					works: before.works.map((item) => item.id === work.id && item.inputRevision === work.inputRevision ? {
+					works: before.works.map((item) => item.id === work.id && item.inputRevision === work.inputRevision && !item.blockedCodes.includes("PRIVACY_CHANGE_PENDING") ? {
 						...item,
 						status: "blocked",
 						blockedCodes: blockedCodes(error, safeCode(error))
 					} : item)
 				});
 			}, 100);
-			let submittedWorks = 0;
-			let works = [];
-			let submitted = Promise.withResolvers();
-			const submission = () => {
-				let done = false;
-				return () => {
-					if (done) return;
-					done = true;
-					if (++submittedWorks === works.length) submitted.resolve();
-				};
+			const retryLimit = options.retryLimit ?? workRetryDelaysMs.length;
+			const generation = (work) => `${work.id}:${work.inputRevision}`;
+			let serialAdmission = Promise.resolve();
+			const acquireRead = async () => {
+				if (run.pool) return () => {};
+				const previous = serialAdmission;
+				const released = Promise.withResolvers();
+				serialAdmission = released.promise;
+				await previous;
+				return () => released.resolve();
 			};
+			const releaseAdmission = /* @__PURE__ */ new Map();
+			const retryWork = async (work, error, attempt) => {
+				if (blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING") || work.blockedCodes.includes("PRIVACY_CHANGE_PENDING")) return false;
+				const delay = workRetryDelaysMs[attempt];
+				if (attempt >= retryLimit || delay === void 0) return false;
+				const blocked = await blockWork(work, error);
+				const target = blocked.works.find((item) => item.id === work.id);
+				if (blocked.phase === "sending" || blocked.phase === "completed" || target?.blockedCodes.includes("PRIVACY_CHANGE_PENDING")) return false;
+				releaseAdmission.get(work.id)?.();
+				await (options.retryDelay ?? waitForWorkRetry)(delay, abort.signal);
+				abort.signal.throwIfAborted();
+				let resumed = false;
+				await changeJourney(storage, journeyId, "snapshot", (before) => {
+					resumed = false;
+					const target = before.works.find((item) => item.id === work.id);
+					if (before.phase === "sending" || before.phase === "completed" || before.phase === "paused" || !target || !isSelectedWork(target) || target.inputRevision !== work.inputRevision || target.status !== "blocked" || target.blockedCodes.includes("PRIVACY_CHANGE_PENDING")) return before;
+					resumed = !before.pendingHideId;
+					return withReadingProgress({
+						...before,
+						privacy: {
+							...before.privacy,
+							packageApproval: null
+						},
+						works: before.works.map((item) => item.id === work.id ? {
+							...item,
+							status: resumed ? work.status : "pending",
+							blockedCodes: []
+						} : item)
+					});
+				}, 100);
+				return resumed;
+			};
+			const readRetries = /* @__PURE__ */ new Map();
+			const staticRetries = /* @__PURE__ */ new Map();
 			/** A failed isolation leaves the Work blocked as before; cancellation and contention escape. */
 			const isolateRoots = async (work, error) => {
 				try {
@@ -7458,19 +7813,19 @@ function createJourneyPreparation(options) {
 			/** Scan generations this run prepared, including those its own isolation started. */
 			const prepared = /* @__PURE__ */ new Set();
 			/** True when failing roots left the Work, which is then prepared again (ADR 0188). */
-			const prepareWorkOnce = async (planned, onSubmitted) => {
+			const prepareWorkAttempt = async (planned, onSubmitted, releaseRead) => {
 				abort.signal.throwIfAborted();
 				const latest = await storage.current(journeyId) ?? frozen;
 				abort.signal.throwIfAborted();
 				if (latest.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
 				let work = latest.works.find((item) => item.id === planned.id);
-				if (!work || !isSelectedWork(work)) return false;
+				if (!work || !isSelectedWork(work) || latest.phase === "sending" || latest.phase === "completed") return false;
 				if (![
 					"pending",
 					"reading",
 					"review"
 				].includes(work.status)) return false;
-				prepared.add(`${work.id}:${work.inputRevision}`);
+				prepared.add(generation(work));
 				await prepareClassificationMetadata(storage, latest, work, options.processing, abort.signal);
 				let failures = collectPreparationFailures(plan.approval.inventory, work.rootSessionIds, {
 					journeyId,
@@ -7504,11 +7859,36 @@ function createJourneyPreparation(options) {
 						if (await droppedMidScan(planned.id)) return false;
 						throw error;
 					}
-					if (work && await isolateRoots(work, error)) return true;
+					onSubmitted();
+					releaseRead();
+					const attempt = work ? readRetries.get(generation(work)) ?? 0 : 0;
+					if (work && await retryWork(work, error, attempt)) {
+						readRetries.set(generation(work), attempt + 1);
+						return prepareWorkOnce(planned, onSubmitted);
+					}
+					const now = await storage.current(journeyId);
+					if (now?.phase === "sending" || now?.phase === "completed") return false;
+					if (blockedCodes(error, code).includes("PRIVACY_CHANGE_PENDING")) {
+						if (work) await blockWork(work, error);
+						return false;
+					}
+					if (attempt < retryLimit) return false;
+					if (work && await isolateRoots(work, error)) {
+						readRetries.delete(generation(work));
+						return true;
+					}
 					if (work) await blockWork(work, error);
 				}
 				return false;
 			};
+			const prepareWorkOnce = async (planned, onSubmitted) => {
+				const releaseRead = await acquireRead();
+				try {
+					return await prepareWorkAttempt(planned, onSubmitted, releaseRead);
+				} finally {
+					releaseRead();
+				}
+			};
 			const prepareWork = async (planned, onSubmitted) => {
 				for (let attempt = 0; attempt < planned.rootSessionIds.length; attempt++) if (!await prepareWorkOnce(planned, onSubmitted)) return;
 			};
@@ -7520,7 +7900,8 @@ function createJourneyPreparation(options) {
 				abort.signal.throwIfAborted();
 				if (!latest?.consent || latest.phase === "paused" || latest.scope.status !== "confirmed") throw new ApplicationError("OPERATION_CANCELED");
 				const work = latest.works.find((item) => item.id === planned.id);
-				if (!work || !isSelectedWork(work)) return;
+				if (!work || !isSelectedWork(work) || latest.phase === "sending" || latest.phase === "completed") return;
+				const attempt = staticRetries.get(generation(work)) ?? 0;
 				try {
 					await inBackgroundStoreLane(() => prepareStaticWork({
 						storage,
@@ -7538,38 +7919,63 @@ function createJourneyPreparation(options) {
 					if (code === "OPERATION_CANCELED" && await droppedMidScan(work.id)) return;
 					if (code === "COORDINATION_BUSY" || code === "OPERATION_CANCELED") throw error;
 					options.onFailure(error);
-					await blockWork(work, error);
+					if (await retryWork(work, error, attempt)) {
+						staticRetries.set(generation(work), attempt + 1);
+						return staticWork(planned, passSubmitted);
+					}
+					const now = await storage.current(journeyId);
+					if (now?.phase !== "sending" && now?.phase !== "completed" && (attempt >= retryLimit || blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING"))) await blockWork(work, error);
 				}
 			};
-			let next = 0;
 			let fatal;
 			const stop = (error) => {
 				fatal ??= { error };
 				abort.abort(error);
 			};
 			const statics = [];
-			const pass = async (batch) => {
-				works = batch;
-				next = 0;
-				submittedWorks = 0;
-				submitted = Promise.withResolvers();
+			const reads = [];
+			const pass = async (works) => {
+				let submittedWorks = 0;
+				const submitted = Promise.withResolvers();
+				const submission = () => {
+					let done = false;
+					return () => {
+						if (done) return;
+						done = true;
+						if (++submittedWorks === works.length) submitted.resolve();
+					};
+				};
 				if (!works.length) submitted.resolve();
 				const passSubmitted = submitted.promise;
-				await Promise.all(Array.from({ length: run.pool ? works.length : Math.min(1, works.length) }, async () => {
-					for (let work = works[next++]; work && !fatal; work = works[next++]) {
-						const planned = work;
-						const onSubmitted = submission();
+				let admission = Promise.resolve();
+				const admissions = [];
+				for (const planned of works) {
+					const previous = admission;
+					const released = Promise.withResolvers();
+					admission = released.promise;
+					admissions.push(admission);
+					releaseAdmission.set(planned.id, () => released.resolve());
+					const onSubmitted = submission();
+					const read = async () => {
+						if (!run.pool) await previous;
+						if (fatal) {
+							onSubmitted();
+							released.resolve();
+							return;
+						}
 						try {
 							await retryContention(() => prepareWork(planned, onSubmitted), (error) => options.onFailure(error), abort.signal);
 						} catch (error) {
 							stop(error);
 						} finally {
 							onSubmitted();
+							released.resolve();
 						}
 						statics.push(retryContention(() => staticWork(planned, passSubmitted), (error) => options.onFailure(error), abort.signal).catch(stop));
-					}
-				}));
-				while (submittedWorks < works.length) submission()();
+					};
+					reads.push(read());
+				}
+				await Promise.all(admissions);
 			};
 			/** Selected Works this run has not prepared yet, waiting while grouping continues (E2). */
 			const later = async () => {
@@ -7586,11 +7992,15 @@ function createJourneyPreparation(options) {
 					await setTimeout$1(laterWorksPollMs, void 0, { signal: abort.signal }).catch(() => abort.signal.throwIfAborted());
 				}
 			};
-			for (let batch = scanWorks; batch.length && !fatal; batch = await later()) {
-				if (!run.workers && !run.pool) run = await runWorkers(options.workers);
-				await pass(batch);
+			try {
+				for (let batch = scanWorks; batch.length && !fatal; batch = await later()) {
+					if (!run.workers && !run.pool) run = await runWorkers(options.workers);
+					await pass(batch);
+				}
+			} finally {
+				await Promise.all(reads);
+				await Promise.all(statics);
 			}
-			await Promise.all(statics);
 			if (scanWorks.length) options.onTiming?.(journeyId, {
 				scope: "preparation",
 				phases: { "journey-prepare": Math.round(performance$1.now() - startedAt) },
@@ -7616,6 +8026,11 @@ function createJourneyPreparation(options) {
 		}
 	};
 }
+/** Ray, 2026-11-05: two automatic retries per Work, after two then five seconds. */
+const workRetryDelaysMs = [2e3, 5e3];
+async function waitForWorkRetry(milliseconds, signal) {
+	await setTimeout$1(milliseconds, void 0, { signal }).catch(() => signal.throwIfAborted());
+}
 /** How often a run waiting for grouping to publish more Works checks the journey (E2). */
 const laterWorksPollMs = 2e3;
 /**
@@ -8396,7 +8811,7 @@ function createJourneyRenderer(options) {
 			return {
 				...current,
 				works,
-				phase: current.phase === "paused" ? "paused" : current.readingComplete && works.every((item) => !isSelectedWork(item) || item.status === "ready") ? "ready" : current.phase
+				phase: current.phase === "paused" ? "paused" : current.readingComplete && works.every((item) => !isIncludedWork(item) || item.status === "ready") ? "ready" : current.phase
 			};
 		});
 	}
@@ -10374,6 +10789,22 @@ function createJourneyOwnerClient(options) {
 			const { headers } = await requestWithHeaders("/me/profile", publicProfileSchema, signal);
 			return { parallelCompletes: (headers.get("passport-capabilities") ?? "").split(",").some((token) => token.trim() === "parallel-completes") };
 		},
+		readProfile(signal) {
+			return request("/me/profile", ownerProfileSchema, signal, void 0, "GET");
+		},
+		async saveProfile(profile, signal) {
+			await request("/me/profile", ownerProfileSchema, signal, profile, "PUT");
+		},
+		async addressTaken(address, signal) {
+			const path = `/addresses/${encodeURIComponent(passportAddressSchema.parse(address))}`;
+			try {
+				await request(path, z.object({ publicId: z.string() }).strict(), signal, void 0, "GET");
+				return true;
+			} catch (error) {
+				if (error instanceof JourneyRemoteError && error.status === 404) return false;
+				throw error;
+			}
+		},
 		resolve(input, signal) {
 			return request("/me/work-bundles/resolve", sendResolutionSchema.refine((value) => value.logicalWorkId === input.logicalWorkId), signal, input);
 		},
@@ -10963,7 +11394,13 @@ function resumeState(send) {
 		status: "sign-in",
 		error: null
 	};
-	const profileRequired = ["paused", "sign-in"].includes(send.status) || send.subject === null || ["ACCOUNT_PROFILE_UNAVAILABLE", "ACCOUNT_CHANGED"].includes(send.error ?? "") || send.status === "blocked" && send.items.some((item) => [
+	const profileRequired = ["paused", "sign-in"].includes(send.status) || send.subject === null || [
+		"ACCOUNT_PROFILE_UNAVAILABLE",
+		"ACCOUNT_CHANGED",
+		"PASSPORT_ADDRESS_TAKEN",
+		"PASSPORT_ADDRESS_RESERVED",
+		"PASSPORT_ADDRESS_LIMIT"
+	].includes(send.error ?? "") || send.status === "blocked" && send.items.some((item) => [
 		"ready",
 		"uploading",
 		"assessing",
@@ -11047,7 +11484,42 @@ async function prepareProfile(dependencies, snapshot, connection, signal) {
 		assertScope(latest.journey, latest.send);
 		signal.throwIfAborted();
 	}
-	return captureProfile(connection, guard, signal, dependencies.failure);
+	const captured = await captureProfile(connection, guard, signal, dependencies.failure);
+	const chosen = snapshot.journey.profile;
+	if (captured.status !== "sending" || !chosen || !profileHasChoices(chosen)) return captured;
+	return writeProfile(connection, chosen, guard, signal, dependencies.failure, captured);
+}
+/** Passport's refusal of the chosen address, as the code that re-shows the address card. */
+const addressRefusals = {
+	address_taken: "PASSPORT_ADDRESS_TAKEN",
+	address_reserved: "PASSPORT_ADDRESS_RESERVED",
+	address_limit_reached: "PASSPORT_ADDRESS_LIMIT"
+};
+/**
+* The Journey's address and links over the owner's current settings, saved before the first
+* Work upload (ADR 0246). A refused address blocks the Send until the person keeps another.
+*/
+async function writeProfile(connection, chosen, guard, signal, failure, captured) {
+	try {
+		const current = await connection.readProfile(signal);
+		await guard();
+		await connection.saveProfile(mergeOwnerProfile(current.profile, chosen), signal);
+		await guard();
+		return captured;
+	} catch (error) {
+		if (signal.aborted) throw error;
+		if (error instanceof JourneyRemoteError && error.status === 409 && addressRefusals[error.code]) return {
+			status: "blocked",
+			error: addressRefusals[error.code] ?? null
+		};
+		if (error instanceof ApplicationError) throw error;
+		const unavailable = new ApplicationError("ACCOUNT_PROFILE_UNAVAILABLE", void 0, { cause: error });
+		failure(unavailable.code, unavailable);
+		return {
+			status: "blocked",
+			error: unavailable.code
+		};
+	}
 }
 /** Shared by native Send and Manual upload; `guard` rechecks the caller's own scope. */
 async function captureProfile(connection, guard, signal, failure) {
@@ -12951,6 +13423,45 @@ function createJourneySender(dependencies, phases = 3) {
 		get(address) {
 			return dependencies.storage.loadSend(address.journeyId, address.sendId);
 		},
+		/** The owner's current address, links and account email; null while signed out. */
+		async ownerProfile(signal) {
+			const connection = await dependencies.auth.connect(signal);
+			if (!connection) return null;
+			const { profile, accountEmail } = await connection.readProfile(signal);
+			return {
+				address: profile.address,
+				links: profile.links,
+				accountEmail
+			};
+		},
+		/** A best-effort availability check for the address card; Send's save decides. */
+		async addressTaken(input, signal) {
+			const address = passportAddressSchema.parse(input.address);
+			const connection = await dependencies.auth.connect(signal);
+			if (!connection) return null;
+			return { taken: await connection.addressTaken(address, signal) };
+		},
+		/**
+		* The address or links chosen on the Sent page, after the Send reached Passport (ADR 0246,
+		* BL-230): an explicit Keep or Add saves them at once over the current settings.
+		*/
+		async saveSentProfile(input, signal) {
+			const latest = requireSend(await dependencies.storage.loadSend(input.journeyId));
+			const chosen = latest.journey.profile;
+			if (latest.send.status !== "completed" || !chosen || !profileHasChoices(chosen)) throw new ApplicationError("INVALID_TRANSITION");
+			const connection = await dependencies.auth.connect(signal);
+			if (!connection) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
+			if (latest.send.subject !== connection.subject) throw new ApplicationError("IDENTITY_REJECTED");
+			try {
+				const current = await connection.readProfile(signal);
+				await connection.saveProfile(mergeOwnerProfile(current.profile, chosen), signal);
+			} catch (error) {
+				if (signal.aborted || error instanceof ApplicationError) throw error;
+				const code = error instanceof JourneyRemoteError && error.status === 409 ? addressRefusals[error.code] : void 0;
+				if (code) throw new ApplicationError(code);
+				throw new ApplicationError("ACCOUNT_PROFILE_UNAVAILABLE", void 0, { cause: error });
+			}
+		},
 		async prepare(raw, signal) {
 			const input = sendPrepareSchema.parse(raw);
 			const snapshot = await dependencies.storage.loadSend(input.journeyId);
@@ -14986,6 +15497,18 @@ async function compose(options, callbacks, bundles) {
 		})();
 		return {
 			application,
+			remoteWorkers: createRemotePreflight({
+				storage: journeyStorage,
+				harnesses,
+				execution,
+				stateDir,
+				home: homedir(),
+				roots: {
+					codexHome: options.codexHome,
+					claudeHome: options.claudeHome
+				},
+				reportFailure: (error) => diagnostics.onFailure("remote-workers", error)
+			}),
 			nativeInspection: {
 				originals: createOriginalView(journeyStorage, stateDir),
 				output: createOutputView(journeyStorage, processing),
@@ -15090,6 +15613,7 @@ async function invoke(runtime, command, value, signal) {
 	const app = runtime.application;
 	markAgentPresence(runtime.stateDir, value);
 	switch (command) {
+		case "journey.remoteWorkers": return runtime.remoteWorkers(value, signal);
 		case "send.get": return app.journeySend?.get(sendAddress.partial({ sendId: true }).parse(value));
 		case "send.prepare": return app.journeySend?.prepare(sendPrepareSchema.parse(value));
 		case "send.start": return app.journeySend?.start(sendStartSchema.parse(value));