@gitroll/tacitt-cli 0.6.11 → 0.6.13

package/dist/{query-AMZerUh8.mjs → query-BC7MIaWc.mjs}

@@ -1,11 +1,11 @@
-import { $ as removeNamedTemporarySpools, B as parallelismLimits, C as readOriginalSearchFields, F as SessionWorkerError, G as processJourneyMetadataFields, H as privateJourneyDirectory, I as sessionWorkerFailure, K as staticMaskCategory, O as captureLogicalJourneySources, P as createSharedSessionPool, Q as createTemporary, R as defaultParallelism, T as createCollectionArtifacts, U as readLogicalJourneyFinalMasks, W as readConfiguredOutputInfo, Z as decodeZstd, _ as processJourneyMetadata, a as scanReviewFields, at as restrictToOwner, c as readSessionScanRecords, ct as windowsAclCodes, et as createCleanup, g as readCapturedOriginalRows, i as buildWorkScanBatches, it as openPrivateFile, j as runConfiguredSessionJob, k as capturedJourneyScope, l as scanPreparedSession, m as openConfiguredUpload, n as verifyPreparedSessionSources, o as createWorkPieces, ot as windowsOwnerOnly, p as configuredSessionUploads, q as readWorkspacePair, r as prepareSessionScans, rt as makePrivateDirectory, s as readSessionScanFields, st as isWindowsAclFailure, t as preparedScanConfiguration, v as readStaticSessionMasks, w as readConfiguredSearchFields, y as staticSessionJobs, z as gitSeedsProvider } from "./src-DlVbGB32.mjs";
-import { A as createExecutionPort, C as saveRemoteState, D as createPackagingProgressPort, E as exportDelivery, F as loadDeliveryResults, L as inBackgroundStoreLane, M as withStateMutex, N as createDeliveryService, O as createStore, P as preflight, R as isBackgroundStatusPoll, S as readRemoteState, T as collectRemoteWorkers, _ as staticBaseProduction, a as writeJourneyOutput, b as workApproval, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as readSelectedCaptures, w as journeyDirectory, x as isRemoteImport, y as prepareSourcePlan, z as retrySharingViolation } from "./job-BKsifhyv.mjs";
-import { $t as profileHasChoices, D as bLiteralTerms, Gt as filterInventoryByPeriod, Kt as sessionPeriodSchema, Mt as privacyTermKey, Nn as createStaticProcessor, On as currentDetectorVersion, Qt as passportAddressSchema, Vn as entityDictionaryVersion, Vt as termTypeInfo, Xt as mergeOwnerProfile, Yn as frameRecords, Zt as ownerProfileSchema, an as safeField, br as processingSite, cn as reviewFamilies, dn as observeSource, dr as admitCustomTerm, fr as admitGitName, gr as ProcessingError, in as safeCode, nn as ApplicationError, rn as UnfinishedJourneyError, sn as familySelected, u as textDigest, ur as createEntityMatcher, xr as siteFields } from "./locate-Cx52Zqxv.mjs";
-import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-wZx_v0Ih.mjs";
-import { $r as sendReplaceResultSchema, An as scanGitSeedsResource, At as obsoleteJourney, B as createApplication, Bn as journeySearchResultSchema, Bt as classificationPartition, Ct as sendActionSchema, Dn as scanPreparationDigest, Dt as sendStartSchema, Et as sendRequestSchema, F as readAccountAvatarUrl, H as inspectionStartSchema, Hn as searchScopeDigest, Ht as retireScanGeneration, I as storedCredentialSchema, Ir as assertJourneyPrivacyReady, Jr as agentSourceSchema, K as inspectionQuerySchema, Lr as privacyDecisionDigest, M as deviceAuthorizationSchema, Mn as scanExclusionResourceSchema, N as deviceProfileScopeSchema, Nr as displayedScopeDigest, O as createAccount, On as scanSessionResourceSchema, P as profileUrlMatchesIdentity, Pr as requestedScope, Qr as sendReceiptSchema, St as replaceSensitiveTermsSchema, Tt as sendPrepareSchema, U as validateInspectionBatch, Ur as hasCurrentStaticReview, Ut as newJourneyWork, V as inspectionCancelSchema, Vt as classificationWorks, Wr as staticReviewDigest, Xr as journeySendSchema, Yr as agentSourcesSchema, Zr as sendArtifactSchema, _ as changeJourney, _t as manualUploadStartSchema, ai as isReadingComplete, ar as bTermMatcher, at as appendSensitiveTerms, di as packageCommandSchema, dt as validateFailureLocation, ei as sendResolutionSchema, fi as selectionBatchSchema, fr as journeyConfirmedHides, ft as manualUploadActionSchema, gr as workDecisionDigest, gt as manualUploadSchema, h as hideScopeDigest, hi as producerVersion, hr as retireWorkDescription, ht as manualUploadPrepareSchema, ii as isIncludedWork, j as accountProfileSchema, jn as verifiedScanGitSeeds, k as renew, kn as scanGitSeedsId, kt as currentJourneyAdapters, li as withReadingProgress, lr as confirmedHideKinds, lt as artifactFailureDetailSchema, m as activeJourneyTerms, mt as manualUploadChoiceSchema, ni as hasCompleteWorkDescription, nt as settingsQuerySchema, oi as isSelectedWork, pi as selectionSchema, ri as isClassifying, ti as sendSettingsSchema, tt as settingsBatchSchema, ui as commandSchema, vi as recommendParallelism, vr as workCorrectionBinding, wt as sendChoiceSchema, xt as normalizeSensitiveTerms, yr as emptyPreparationFacts, yt as emptyTermsRevision, zn as applyClassification } from "./src-D1iONla3.mjs";
-import { vt as isCoordinationBusy } from "./heap-CV8Eca8V.mjs";
-import { d as checkOpenSource, h as openSource } from "./run-CaPktPhH.mjs";
-import { t as createAgentSetupPort } from "./agent-setup-DdfF3zch.mjs";
+import { A as captureLogicalJourneySources, B as defaultParallelism, D as createCollectionArtifacts, E as readConfiguredSearchFields, G as readLogicalJourneyFinalMasks, H as parallelismLimits, I as createSharedSessionPool, J as confirmedFamily, K as readConfiguredOutputInfo, L as SessionWorkerError, N as runConfiguredSessionJob, R as sessionWorkerFailure, T as readOriginalSearchFields, V as gitSeedsProvider, W as privateJourneyDirectory, X as staticMaskCategory, Y as confirmedTitleSpans, Z as readWorkspacePair, a as prepareSessionScans, b as readStaticSessionMasks, c as createWorkPieces, ct as openPrivateFile, d as scanPreparedSession, dt as isWindowsAclFailure, ft as windowsAclCodes, g as openConfiguredUpload, h as configuredSessionUploads, i as verifyPreparedSessionSources, it as createCleanup, j as capturedJourneyScope, l as readSessionScanFields, lt as restrictToOwner, n as sessionExtensions, nt as createTemporary, o as buildWorkScanBatches, q as processJourneyMetadataFields, r as preparedScanConfiguration, rt as removeNamedTemporarySpools, s as scanReviewFields, st as makePrivateDirectory, t as hasRetiredSessionMarker, tt as decodeZstd, u as readSessionScanRecords, ut as windowsOwnerOnly, v as readCapturedOriginalRows, x as staticSessionJobs, y as processJourneyMetadata } from "./src-CP-K2PBv.mjs";
+import { A as exportDelivery, C as prepareSourcePlan, D as saveRemoteState, E as readRemoteState, H as isBackgroundStatusPoll, I as withStateMutex, L as createDeliveryService, M as createStore, O as journeyDirectory, P as createExecutionPort, R as preflight, S as changePreparation, T as isRemoteImport, U as retrySharingViolation, V as inBackgroundStoreLane, _ as staticBaseProduction, a as writeJourneyOutput, b as blockedCodes, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, j as createPackagingProgressPort, k as collectRemoteWorkers, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as readSelectedCaptures, w as workApproval, x as isolateFailingRoots, y as RootPreparationFailure, z as loadDeliveryResults } from "./job--zxwgaPy.mjs";
+import { $t as ownerProfileSchema, An as currentDetectorVersion, Cr as siteFields, Fn as createStaticProcessor, Jt as sessionPeriodSchema, P as bLiteralTerms, Pt as privacyTermKey, Qt as mergeOwnerProfile, Sr as processingSite, Un as entityDictionaryVersion, Ut as termTypeInfo, Zn as frameRecords, an as UnfinishedJourneyError, en as passportAddressSchema, f as textDigest, fr as createEntityMatcher, in as ApplicationError, ln as familySelected, mr as admitGitName, on as safeCode, pn as observeSource, pr as admitCustomTerm, qt as filterInventoryByPeriod, sn as safeField, tn as profileHasChoices, un as reviewFamilies, vr as ProcessingError } from "./locate-PLEyLYW-.mjs";
+import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-dL6y2mcu.mjs";
+import { $r as sendReplaceResultSchema, An as scanExclusionResourceSchema, B as createApplication, Bt as newJourneyWork, Ci as bTermMatcher, Cr as privacyDecisionDigest, Ct as sendActionSchema, Di as packageCommandSchema, Dn as scanGitSeedsId, Dt as sendStartSchema, Ei as commandSchema, En as scanSessionResourceSchema, Et as sendRequestSchema, F as readAccountAvatarUrl, Fr as itemAtPassport, Gr as staticSessionId, H as inspectionStartSchema, I as storedCredentialSchema, Ir as obsoleteJourney, It as classificationPartition, Jr as agentSourceSchema, K as inspectionQuerySchema, Lt as classificationWorks, M as deviceAuthorizationSchema, N as deviceProfileScopeSchema, Nr as currentJourneyAdapters, O as createAccount, Oi as selectionBatchSchema, On as scanGitSeedsResource, P as profileUrlMatchesIdentity, Pi as recommendParallelism, Pr as hostDrives, Qr as sendReceiptSchema, Rn as applyClassification, Rt as retireScanGeneration, Sr as assertJourneyPrivacyReady, St as replaceSensitiveTermsSchema, Ti as replacementMarkerPattern, Tn as scanPreparationDigest, Tr as rememberedHideValues, Tt as sendPrepareSchema, U as validateInspectionBatch, Ur as hasCurrentStaticReview, V as inspectionCancelSchema, Vn as searchScopeDigest, Wr as staticReviewDigest, Xr as journeySendSchema, Yr as agentSourcesSchema, Zr as sendArtifactSchema, _ as changeJourney, _i as journeyConfirmedHides, _t as manualUploadStartSchema, ai as isIncludedWork, ar as emptyPreparationFacts, at as appendSensitiveTerms, br as requestedScope, di as withReadingProgress, dt as validateFailureLocation, ei as sendResolutionSchema, ft as manualUploadActionSchema, gt as manualUploadSchema, h as hideScopeDigest, ht as manualUploadPrepareSchema, ii as isClassifying, ir as workCorrectionBinding, j as accountProfileSchema, ji as producerVersion, jr as advanceStepsSend, k as renew, ki as selectionSchema, kn as verifiedScanGitSeeds, kr as nativeStartSchema, lt as artifactFailureDetailSchema, m as activeJourneyTerms, mi as confirmedHideKinds, mt as manualUploadChoiceSchema, ni as sendSettingsSchema, nr as workDecisionDigest, nt as settingsQuerySchema, oi as isReadingComplete, ri as hasCompleteWorkDescription, si as isSelectedWork, tr as retireWorkDescription, tt as settingsBatchSchema, ui as unfinishedPackagingCode, wt as sendChoiceSchema, xt as normalizeSensitiveTerms, yr as displayedScopeDigest, yt as emptyTermsRevision, zn as journeySearchResultSchema, zr as sendsOnNextAdvance, zt as isolatedWorkId } from "./src-CttNuxOn.mjs";
+import { vt as isCoordinationBusy } from "./heap-DCS_WXIA.mjs";
+import { d as checkOpenSource, h as openSource } from "./run-Dod7Vykp.mjs";
+import { t as createAgentSetupPort } from "./agent-setup-Doy_AnPY.mjs";
 import { t as workerMessageSchema } from "./messages-D3m3bhva.mjs";
 import { constants, write } from "node:fs";
 import { z } from "zod";
@@ -124,6 +124,7 @@ const businessCommands = [
 	"journey.classificationSessions",
 	"journey.classificationProgress",
 	"journey.classificationSubmit",
+	"journey.recoverIsolatedMetadata",
 	"journey.cardsRead",
 	"journey.cardsSubmit",
 	"journey.resolve",
@@ -165,6 +166,7 @@ const businessCommands = [
 	"workflow.events",
 	"bundleLibrary.get",
 	"bundleLibrary.save",
+	"rememberedHides.remove",
 	"sensitiveTerms.get",
 	"sensitiveTerms.replace",
 	"processing.catalog",
@@ -216,6 +218,23 @@ const accountDefaults = {
 	clientId: "BdSyvRSunWdXfJUdfvaKuAgoRjaZQpOZ",
 	passportApiUrl: "https://talent-api.catalyte.ai"
 };
+/** The web origin paired with each deployed Passport API; custom targets supply theirs. */
+function passportWebOrigin(apiUrl, configured) {
+	if (configured) {
+		const url = new URL(configured);
+		const local = [
+			"127.0.0.1",
+			"[::1]",
+			"localhost"
+		].includes(url.hostname);
+		if (url.protocol !== "https:" && !(local && url.protocol === "http:") || url.username || url.password || url.pathname !== "/" || url.search || url.hash) throw new Error("INVALID_ARGUMENTS");
+		return url.origin;
+	}
+	return {
+		"https://talent-api.catalyte.ai": "https://talent.catalyte.ai",
+		"https://talent-api-dev.catalyte.ai": "https://talent-dev.catalyte.ai"
+	}[new URL(apiUrl).origin];
+}
 //#endregion
 //#region apps/cli/src/options.ts
 /** An HTTP(S) origin without path, query, credentials or fragment. */
@@ -335,6 +354,7 @@ function parseOptions(args, source = sourceCheckout) {
 		sessionPeriod: period.data,
 		identityUrl: readOrigin(parsed.values["identity-url"] ?? process.env["SESS_PILOT_IDENTITY_URL"] ?? accountDefaults.identityUrl),
 		identityClientId: identityClientId === "" ? null : identityClientId,
+		...process.env["SESS_PILOT_PASSPORT_WEB_ORIGIN"] ? { passportWebOrigin: readOrigin(process.env["SESS_PILOT_PASSPORT_WEB_ORIGIN"]) } : {},
 		passportApiUrl: readOrigin(parsed.values["profile-api-url"] ?? parsed.values["passport-api-url"] ?? process.env["SESS_PILOT_PROFILE_API_URL"] ?? process.env["SESS_PILOT_PASSPORT_API_URL"] ?? accountDefaults.passportApiUrl),
 		stateDir: resolve(parsed.values["state-dir"] ?? defaultState),
 		bundleDir: parsed.values["bundle-dir"] === void 0 ? void 0 : resolve(parsed.values["bundle-dir"]),
@@ -359,7 +379,8 @@ ${Array.from(businessCommands).join("\n")}
 Business commands invoke the shared Application directly without an HTTP server.
 journey.serve starts a focused confirmation host, emits JSON readiness, and waits until stopped.
 journey.serve --detach starts that host in its own process, prints its readiness with the host's
-pid, and exits; stop the host with that pid. A detached host already serving the journey is
+pid, and exits. The launcher verifies the release and process identity before reusing a panel.
+A detached host already serving the journey with the paired release is
 reused and reported with reused: true.
 It does not discover sessions or open a browser. The agent opens its private URL in the right pane.
 Workflow mutations require protocolVersion, runId and expectedRevision in JSON input.
@@ -451,6 +472,81 @@ function commands$1(command) {
 		return [];
 	}
 }
+/** Transparent prefixes that run their operand command; `sudo` is deliberately absent. */
+const wrappers = {
+	nohup: {
+		flags: [],
+		valued: []
+	},
+	command: {
+		flags: ["-p"],
+		valued: []
+	},
+	time: {
+		flags: ["-p"],
+		valued: []
+	},
+	nice: {
+		flags: [],
+		valued: ["-n", "--adjustment"]
+	},
+	timeout: {
+		flags: [
+			"--preserve-status",
+			"--foreground",
+			"-v",
+			"--verbose"
+		],
+		valued: [
+			"-s",
+			"--signal",
+			"-k",
+			"--kill-after"
+		],
+		operand: /^\d+(?:\.\d+)?[smhd]?$/u
+	},
+	env: {
+		flags: [
+			"-i",
+			"-",
+			"--ignore-environment"
+		],
+		valued: ["-u", "--unset"],
+		assignments: true
+	}
+};
+/** Strip known wrappers; an unknown wrapper option fails closed rather than guessing. */
+function unwrap(words) {
+	let rest = words;
+	for (let depth = 0; depth < 8; depth++) {
+		const name = posix.basename(rest[0] ?? "");
+		const wrapper = Object.hasOwn(wrappers, name) ? wrappers[name] : void 0;
+		if (!wrapper) return rest;
+		let index = 1;
+		for (; index < rest.length; index++) {
+			const word = rest[index] ?? "";
+			if (word === "--") {
+				index++;
+				break;
+			}
+			if (wrapper.flags.includes(word)) continue;
+			if (wrapper.valued.includes(word)) {
+				index++;
+				continue;
+			}
+			if (wrapper.valued.some((flag) => word.startsWith(flag.startsWith("--") ? `${flag}=` : flag))) continue;
+			if (word.startsWith("-")) return [];
+			break;
+		}
+		if (wrapper.operand) {
+			if (!wrapper.operand.test(rest[index] ?? "")) return [];
+			index++;
+		}
+		if (wrapper.assignments) while (/^[A-Za-z_][A-Za-z0-9_]*=/u.test(rest[index] ?? "")) index++;
+		rest = rest.slice(index);
+	}
+	return [];
+}
 function agent(words) {
 	const executable = posix.basename(words[0] ?? "");
 	if (words.some((word) => [
@@ -462,6 +558,38 @@ function agent(words) {
 	if (executable === "claude" && words.slice(1).some((word) => word === "-p" || word === "--print")) return "claude";
 	return null;
 }
+const shells = /* @__PURE__ */ new Set([
+	"sh",
+	"bash",
+	"zsh",
+	"dash",
+	"ksh"
+]);
+const interpreters = /* @__PURE__ */ new Set([
+	...shells,
+	"python",
+	"python3"
+]);
+/**
+* Literal agents at command positions, including inside `sh -c` strings. A script file
+* run by a shell or Python interpreter, or a relative or script-named path executable,
+* is a launcher that may start an agent the log cannot show.
+*/
+function launches(command, depth = 0) {
+	return commands$1(command).flatMap((parsed) => {
+		const words = unwrap(parsed);
+		const found = agent(words);
+		if (found) return [found];
+		const executable = words[0] ?? "";
+		const name = posix.basename(executable);
+		if (!interpreters.has(name)) return /^(?:\.\.?|~)\//u.test(executable) || executable.includes("/") && /\.(?:sh|bash|zsh|py)$/u.test(executable) ? ["script"] : [];
+		const operand = words.findIndex((word, index) => index > 0 && !word.startsWith("-"));
+		const options = words.slice(1, operand === -1 ? void 0 : operand);
+		if (options.some((word) => /^-[a-zA-Z]*c[a-zA-Z]*$/u.test(word))) return shells.has(name) && operand !== -1 && depth < 2 ? launches(words[operand] ?? "", depth + 1) : [];
+		if (options.some((word) => /^-[a-zA-Z]*[ms]|^--help$/u.test(word))) return [];
+		return operand === -1 ? [] : ["script"];
+	});
+}
 const validHost = (host) => /^(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*@)?(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*|\[[a-fA-F0-9:]+\])$/u.test(host);
 /** Consent and import identity include every retained connection selector. */
 function endpoint(host, transport, args) {
@@ -525,20 +653,27 @@ function gcloud(words) {
 }
 /** Matches executables at shell command positions, never mentions in prose or other commands. */
 function parseRemoteDispatch(command) {
-	return commands$1(command).flatMap((words) => {
+	return commands$1(command).flatMap((parsed) => {
+		const words = unwrap(parsed);
 		const executable = posix.basename(words[0] ?? "");
 		const remote = executable === "ssh" ? ssh(words) : executable === "gcloud" ? gcloud(words) : null;
 		if (!remote) return [];
-		return [...new Set(commands$1(remote.command).map(agent))].flatMap((harness) => harness ? [{
+		const found = new Set(launches(remote.command));
+		const agents = [...found].filter((harness) => harness !== "script");
+		return (agents.length ? agents : found.has("script") ? ["unknown"] : []).map((harness) => ({
 			host: endpoint(remote.host, remote.transport, remote.args),
 			harness,
 			transport: remote.transport,
 			args: remote.args
-		}] : []);
+		}));
 	});
 }
 //#endregion
 //#region apps/cli/src/remote/scan.ts
+/** Escapes and shell quotes may split executable spelling; retain those candidates. */
+function mayContainRemoteDispatch(line) {
+	return line.includes("ssh") || line.includes("gcloud") || line.includes("\\") || line.includes("'");
+}
 function object(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -616,11 +751,12 @@ async function scanRemoteDispatches(sessions, signal) {
 		const pending = /* @__PURE__ */ new Map();
 		for (const part of session.parts) {
 			signal.throwIfAborted();
-			const file = await openSource(part);
+			const mode = part.representation === "jsonl" ? "append" : "snapshot";
+			const file = await openSource(part, mode);
 			try {
 				if (!part.snapshot.size) {
 					if (part.representation === "jsonl.zst") throw new Error("ARTIFACT_PROCESSING_DECODE_FAILED");
-					await checkOpenSource(part, file);
+					await checkOpenSource(part, file, mode);
 					continue;
 				}
 				const stream = file.createReadStream({
@@ -643,6 +779,7 @@ async function scanRemoteDispatches(sessions, signal) {
 						signal.throwIfAborted();
 						const line = framed.endsWith("\r") ? framed.slice(0, -1) : framed;
 						if (!line.trim()) continue;
+						if (!pending.size && !mayContainRemoteDispatch(line)) continue;
 						let row;
 						try {
 							row = JSON.parse(line);
@@ -674,7 +811,7 @@ async function scanRemoteDispatches(sessions, signal) {
 							if (found.length) pending.set(command.id, found);
 						}
 					}
-					await checkOpenSource(part, file);
+					await checkOpenSource(part, file, mode);
 				} finally {
 					stream.destroy();
 				}
@@ -773,13 +910,17 @@ function createRemotePreflight(options) {
 }
 function result(state) {
 	return {
-		hosts: [...new Set(state.windows.map((window) => window.host))].filter((host) => !Object.hasOwn(state.decisions, host)).map((host) => ({
-			host,
-			windows: state.windows.filter((window) => window.host === host).map(({ start, end }) => ({
-				start,
-				end
-			}))
-		})),
+		hosts: [...new Set(state.windows.map((window) => window.host))].filter((host) => !Object.hasOwn(state.decisions, host)).map((host) => {
+			const windows = state.windows.filter((window) => window.host === host);
+			return {
+				host,
+				windows: windows.map(({ start, end }) => ({
+					start,
+					end
+				})),
+				...windows.some((window) => window.harness === "unknown") ? { scriptLaunch: true } : {}
+			};
+		}),
 		copied: state.copied.length,
 		failures: state.failures,
 		...state.sourceFailureCounts ? { sourceFailureCounts: state.sourceFailureCounts } : {},
@@ -1054,14 +1195,16 @@ function createJourneyTitles(storage, processing) {
 		if (state.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
 		const work = state.works.find((item) => item.id === action.workId);
 		if (!work) throw new ApplicationError("UNKNOWN_WORKSPACE");
-		if (action.title === work.title) return commit();
+		if (action.title === work.title && (work.titleOrigin === "explicit" || new RegExp(replacementMarkerPattern).test(work.title))) return commit();
 		let title;
+		let staticMasks = [];
 		try {
 			const [processed] = await processJourneyMetadataFields({
 				...await metadataProcessing(storage, state, work, processing),
 				fields: [{ text: action.title }]
 			}, signal);
 			title = processed?.text;
+			staticMasks = processed?.staticMasks ?? [];
 		} catch (error) {
 			if (typeof error === "object" && error !== null && "code" in error && error.code === "PROCESSING_INVALID_RECORD") throw new ApplicationError("GENERATED_METADATA_REPHRASE_REQUIRED", void 0, { cause: error });
 			throw error;
@@ -1074,10 +1217,36 @@ function createJourneyTitles(storage, processing) {
 			id: input.idempotencyKey,
 			title: action.title
 		});
+		let suggestion = null;
+		const described = work.suggestion ? (await storage.resources({
+			journeyId: state.journeyId,
+			kind: "work-description",
+			id: work.suggestion.id
+		}))[0] : void 0;
+		if (work.suggestion && described?.kind === "work-description" && described.workId === work.id && described.inputRevision === work.inputRevision) {
+			const id = randomUUID();
+			await storage.saveResource({
+				...described,
+				id,
+				explicitTitleId: input.idempotencyKey,
+				appliedFields: {
+					...described.appliedFields,
+					title
+				},
+				appliedTitleStaticMasks: [...staticMasks],
+				appliedTitleStaticText: title
+			});
+			suggestion = {
+				...work.suggestion,
+				id,
+				title
+			};
+		}
 		return commit({
 			...state,
 			works: state.works.map((item) => item.id !== work.id ? item : {
 				...retireWorkDescription(item),
+				suggestion,
 				title,
 				titleOrigin: "explicit",
 				explicitTitleId: input.idempotencyKey,
@@ -1171,6 +1340,10 @@ function bindJourneyDestination(storage, destination, options = {}) {
 	};
 	return {
 		current,
+		async readSendOutput(input) {
+			await guard(input.journeyId);
+			return storage.readSendOutput(input);
+		},
 		async preparationState(id) {
 			await guard(id);
 			return storage.preparationState(id);
@@ -1236,6 +1409,10 @@ function bindJourneyDestination(storage, destination, options = {}) {
 			await guard(input.journeyId);
 			return storage.saveResource(input);
 		},
+		async receiptRevision(input) {
+			await guard(input.journeyId);
+			return storage.receiptRevision(input);
+		},
 		async commitClassification(input) {
 			await guard(input.journeyId);
 			return storage.commitClassification(input);
@@ -1340,10 +1517,29 @@ function bindJourneyDestination(storage, destination, options = {}) {
 	};
 }
 function bindSendDestination(storage, destination) {
+	const verified = /* @__PURE__ */ new Set();
+	async function verify(id) {
+		if (verified.has(id)) return;
+		const snapshot = await storage.loadSend(id);
+		if (!snapshot) throw new ApplicationError("UNKNOWN_ITEM");
+		check(snapshot.journey, destination);
+		verified.add(id);
+	}
 	return {
-		async loadSend(id, sendId) {
-			const result = await storage.loadSend(id, sendId);
-			if (result) check(result.journey, destination);
+		async isCurrentSend(id, sendId, revision) {
+			await verify(id);
+			return storage.isCurrentSend(id, sendId, revision);
+		},
+		async checkpointTransfer(input) {
+			await verify(input.journeyId);
+			return storage.checkpointTransfer(input);
+		},
+		async loadSend(id, sendId, observedRevision) {
+			const result = await storage.loadSend(id, sendId, verified.has(id) ? observedRevision : void 0);
+			if (result) {
+				check(result.journey, destination);
+				verified.add(result.journey.journeyId);
+			}
 			return result;
 		},
 		async commitSend(input) {
@@ -1356,31 +1552,6 @@ function bindSendDestination(storage, destination) {
 	};
 }
 //#endregion
-//#region apps/cli/src/journey/prepare/update.ts
-/** Preparation owns only the changed Work rows, progress and package invalidation. */
-async function changePreparation(storage, journeyId, kind, change, attempts = Number.POSITIVE_INFINITY, clearPackageApproval = false) {
-	for (let attempt = 0; attempt < attempts; attempt++) {
-		const before = await storage.preparationState(journeyId);
-		if (!before?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
-		const after = change(before);
-		const previous = new Map(before.works.map((work) => [work.id, work]));
-		const result = await storage.updatePreparation({
-			journeyId,
-			expectedRevision: before.revision,
-			requestKey: randomUUID(),
-			at: (/* @__PURE__ */ new Date()).toISOString(),
-			kind,
-			works: after.works.filter((work) => work !== previous.get(work.id)),
-			phase: after.phase,
-			readingComplete: after.readingComplete,
-			readingStartedAt: after.readingStartedAt,
-			clearPackageApproval: clearPackageApproval && before !== after
-		});
-		if (result.status !== "stale") return result.state;
-	}
-	throw new ApplicationError("REVISION_CONFLICT");
-}
-//#endregion
 //#region apps/cli/src/journey/works/metadata.ts
 /** Original classification fields remain durable; only the derived display cache is replaced. */
 const classificationMetadataInput = (work) => ({
@@ -1389,7 +1560,7 @@ const classificationMetadataInput = (work) => ({
 	description: work.description,
 	reason: work.classificationRecommendation?.reason ?? work.reason
 });
-async function prepareClassificationMetadata(storage, state, work, processing, signal, plan) {
+async function processedClassificationMetadata(storage, state, work, processing, signal, plan) {
 	if (state.scope.status !== "confirmed") throw new ApplicationError("CONFIRMATION_REQUIRED");
 	if (work.classificationMetadata && (work.explicitTitleId || work.suggestion)) return;
 	const identity = classificationMetadataInput(work);
@@ -1428,6 +1599,19 @@ async function prepareClassificationMetadata(storage, state, work, processing, s
 		fields: Object.values(raw).map((text) => ({ text }))
 	}, signal);
 	if (title === void 0 || projectName === void 0 || description === void 0 || reason === void 0) throw new ApplicationError("CORRUPTED_STATE");
+	return {
+		digest,
+		title: title.text,
+		projectName: projectName.text,
+		description: description.text,
+		reason: reason.text,
+		titleOriginalSha256: textDigest(raw.title),
+		titleStaticMasks: [...title.staticMasks]
+	};
+}
+async function prepareClassificationMetadata(storage, state, work, processing, signal, plan) {
+	const metadata = await processedClassificationMetadata(storage, state, work, processing, signal, plan);
+	if (!metadata) return;
 	await changePreparation(storage, state.journeyId, "snapshot", (before) => {
 		const active = before.works.find((item) => item.id === work.id);
 		if (before.scope.status !== "confirmed" || !active || textDigest(JSON.stringify([
@@ -1436,20 +1620,12 @@ async function prepareClassificationMetadata(storage, state, work, processing, s
 			active.suggestion?.id,
 			active.explicitTitleId,
 			before.exceptions.filter((item) => item.workId === active.id)
-		])) !== digest) throw new ApplicationError("REVISION_CONFLICT");
+		])) !== metadata.digest) throw new ApplicationError("REVISION_CONFLICT");
 		return {
 			...before,
 			works: before.works.map((item) => item.id === work.id ? {
 				...item,
-				classificationMetadata: {
-					digest,
-					title: title.text,
-					projectName: projectName.text,
-					description: description.text,
-					reason: reason.text,
-					titleOriginalSha256: textDigest(raw.title),
-					titleStaticMasks: [...title.staticMasks]
-				}
+				classificationMetadata: metadata
 			} : item)
 		};
 	});
@@ -1730,49 +1906,6 @@ function preparationFacts(inventory, rootIds) {
 	};
 }
 //#endregion
-//#region apps/cli/src/journey/prepare/isolation.ts
-/** A Work-level refusal caused by identified roots, each with its own public-safe code. */
-var RootPreparationFailure = class extends ApplicationError {
-	roots;
-	constructor(code, roots, options) {
-		super(code, void 0, options);
-		this.roots = roots;
-	}
-};
-/** The distinct public-safe codes of the identified failing roots, else the Work-level code. */
-function blockedCodes(error, code) {
-	return error instanceof RootPreparationFailure && error.roots.size ? [...new Set(error.roots.values())] : [code];
-}
-/**
-* ADR 0188 (restoring ADR 0059 D06): moves the failing roots of a multi-root Work into its
-* stable blocked "<title> – couldn't prepare" Work so the rest can be prepared again. False
-* when the failure names no root or every root, or the Work changed or left pending.
-*/
-async function isolateFailingRoots(storage, journeyId, work, error) {
-	if (!(error instanceof RootPreparationFailure)) return false;
-	const roots = work.rootSessionIds.flatMap((sessionId) => {
-		const code = error.roots.get(sessionId);
-		return code ? [{
-			sessionId,
-			code
-		}] : [];
-	});
-	if (roots.length === 0 || roots.length === work.rootSessionIds.length) return false;
-	for (;;) {
-		const state = await storage.preparationState(journeyId);
-		const current = state?.works.find((item) => item.id === work.id);
-		if (!state || state.phase === "paused" || state.pendingHideId || current?.inputRevision !== work.inputRevision || current.status !== "pending") return false;
-		if ((await storage.isolateRoots({
-			journeyId,
-			workId: work.id,
-			inputRevision: work.inputRevision,
-			roots,
-			expectedRevision: state.revision,
-			idempotencyKey: randomUUID()
-		})).status !== "stale") return true;
-	}
-}
-//#endregion
 //#region apps/cli/src/journey/prepare/empty-review.ts
 /** Empty AI coverage requires authenticated scanner proof and the original frozen source bindings. */
 async function verifyEmptyScanRoots(resources, roots, signal, storage, plan) {
@@ -1900,14 +2033,27 @@ async function prepareScanContext(storage, journeyId, work, selected, processing
 		} } : {}
 	}, signal);
 	const seeds = frozenGitNames(storage, journeyId, current.snapshotId, processing.gitNames);
+	const families = reviewFamilies(approval.inventory);
 	const roots = /* @__PURE__ */ new Map();
 	for (const session of approval.inventory.sessions) {
 		const workspace = approval.inventory.workspaces.find((item) => item.id === session.workspaceId);
 		if (!workspace) throw new ApplicationError("CORRUPTED_STATE");
 		const paths = workspace.path === null ? [] : [workspace.path];
-		roots.set(JSON.stringify(paths), paths);
+		const key = JSON.stringify(paths);
+		const entry = roots.get(key) ?? {
+			paths,
+			rootIds: /* @__PURE__ */ new Set()
+		};
+		const root = families.owners.get(session.id);
+		if (root) entry.rootIds.add(root.id);
+		roots.set(key, entry);
+	}
+	for (const { paths, rootIds } of roots.values()) try {
+		await seeds(paths, signal);
+	} catch (error) {
+		if (!(error instanceof ProcessingError) || error.code === "PROCESSING_CANCELED") throw error;
+		throw new RootPreparationFailure(error.code, new Map([...rootIds].map((id) => [id, error.code])), { cause: error });
 	}
-	for (const paths of roots.values()) await seeds(paths, signal);
 	return {
 		prepared,
 		configurationDigest: textDigest(JSON.stringify({
@@ -2715,6 +2861,7 @@ function createJourneyPreparation(options) {
 			const plan = await prepareSourcePlan(storage, options.harnesses, journeyId, terms, abort.signal, current.period, options.stateDir);
 			const initial = await storage.preparationState(journeyId);
 			if (!initial?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+			const remembered = initial.snapshotId ? [] : await options.rememberedHides?.() ?? [];
 			const formed = initial.snapshotId ? [] : namedJourneyWorks(formJourneyWorks(plan.approval, options.processing.environment), options.processing, abort.signal);
 			let state;
 			if (!initial.snapshotId) state = await changeJourney(storage, journeyId, "snapshot", (before) => ({
@@ -2725,6 +2872,7 @@ function createJourneyPreparation(options) {
 					reviewMethod: "dictionary"
 				},
 				works: before.snapshotId ? before.works : formed,
+				...before.snapshotId || !remembered.length ? {} : { rememberedHides: [...remembered] },
 				phase: before.phase !== "paused" && (!before.snapshotId || before.works.some(pendingSelected)) ? "processing" : before.phase
 			}));
 			else if (initial.phase !== "processing" && initial.phase !== "paused" && initial.works.some(pendingSelected)) state = await changePreparation(storage, journeyId, "snapshot", (before) => before.phase !== "paused" && before.works.some(pendingSelected) ? {
@@ -2768,7 +2916,9 @@ function createJourneyPreparation(options) {
 			};
 			const releaseAdmission = /* @__PURE__ */ new Map();
 			const retryWork = async (work, error, attempt) => {
-				if (blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING") || work.blockedCodes.includes("PRIVACY_CHANGE_PENDING")) return false;
+				const code = safeCode(error);
+				if (deterministicGitFailure(error)) return false;
+				if (blockedCodes(error, code).includes("PRIVACY_CHANGE_PENDING") || work.blockedCodes.includes("PRIVACY_CHANGE_PENDING")) return false;
 				const delay = workRetryDelaysMs[attempt];
 				if (attempt >= retryLimit || delay === void 0) return false;
 				const blocked = await blockWork(work, error);
@@ -2801,9 +2951,9 @@ function createJourneyPreparation(options) {
 			const readRetries = /* @__PURE__ */ new Map();
 			const staticRetries = /* @__PURE__ */ new Map();
 			/** A failed isolation leaves the Work blocked as before; cancellation and contention escape. */
-			const isolateRoots = async (work, error) => {
+			const isolateRoots = async (work, error, afterRead = false) => {
 				try {
-					return await isolateFailingRoots(storage, journeyId, work, error);
+					return await isolateFailingRoots(storage, journeyId, work, error, afterRead);
 				} catch (isolation) {
 					abort.signal.throwIfAborted();
 					const code = safeCode(isolation);
@@ -2881,7 +3031,7 @@ function createJourneyPreparation(options) {
 						if (work) await blockWork(work, error);
 						return false;
 					}
-					if (attempt < retryLimit) return false;
+					if (attempt < retryLimit && !deterministicGitFailure(error)) return false;
 					if (work && await isolateRoots(work, error)) {
 						readRetries.delete(generation(work));
 						return true;
@@ -2934,7 +3084,13 @@ function createJourneyPreparation(options) {
 						return staticWork(planned, passSubmitted);
 					}
 					const now = await storage.preparationState(journeyId);
-					if (now?.phase !== "sending" && now?.phase !== "completed" && (attempt >= retryLimit || blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING"))) await blockWork(work, error);
+					if (now?.phase !== "sending" && now?.phase !== "completed" && (attempt >= retryLimit || deterministicGitFailure(error) || blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING"))) {
+						if (await isolateRoots(work, error, true)) {
+							staticRetries.delete(generation(work));
+							return;
+						}
+						await blockWork(work, error);
+					}
 				}
 			};
 			let fatal;
@@ -3066,6 +3222,10 @@ function createJourneyPreparation(options) {
 		}
 	};
 }
+/** A broken local Git command will not recover by rereading the same snapshot. */
+function deterministicGitFailure(error) {
+	return /^git-(?:show-ref|log|config|for-each-ref|rev-parse|cat-file)-exit-\d+$/.test(processingSite(error)?.site ?? "");
+}
 /** Two automatic retries per Work, after two then five seconds. */
 const workRetryDelaysMs = [2e3, 5e3];
 async function waitForWorkRetry(milliseconds, signal) {
@@ -3190,14 +3350,15 @@ async function readJourneyPlan(storage, journeyId) {
 async function finalKeywordDictionary(storage, state, sessionIds, plan) {
 	if (!state.snapshotId) throw new ApplicationError("CONFIRMATION_REQUIRED");
 	const dictionary = /* @__PURE__ */ new Map();
-	const add = (term, kind, bounded) => {
+	const add = (term, kind, bounded, toolResultEscapes = false) => {
 		const prior = dictionary.get(term);
 		dictionary.set(term, {
 			kind: prior && confirmedHideKinds.indexOf(prior.kind) > confirmedHideKinds.indexOf(kind) ? prior.kind : kind,
-			bounded: bounded && (prior?.bounded ?? true)
+			bounded: bounded && (prior?.bounded ?? true),
+			...toolResultEscapes || prior?.toolResultEscapes ? { toolResultEscapes: true } : {}
 		});
 	};
-	for (const [term, { kind }] of await journeyConfirmedHides(storage, state)) add(term, kind, true);
+	for (const [term, { kind }] of await journeyConfirmedHides(storage, state)) add(term, kind, true, true);
 	for (const value of (await activeJourneyTerms(storage, state)).terms) {
 		const admitted = admitCustomTerm(value);
 		if (admitted) add(admitted.value, "private", false);
@@ -3303,10 +3464,11 @@ function createFamilyHides() {
 				families.set(sessionId, terms);
 			}
 			const members = (root, role) => sessions.filter((session) => session.role === role && session.rootSessionId === root).map((session) => session.archiveSessionId);
-			const all = [...confirmed].map(([term, { kind, bounded }]) => ({
+			const all = [...confirmed].map(([term, { kind, bounded, toolResultEscapes }]) => ({
 				term,
 				category: kind,
-				...bounded ? { bounded: true } : {}
+				...bounded ? { bounded: true } : {},
+				...bounded && toolResultEscapes ? { toolResultEscapes: true } : {}
 			}));
 			return [...families].flatMap(([root, terms]) => {
 				const auto = terms.size ? all.filter(({ term }) => !terms.has(term)) : all;
@@ -3564,8 +3726,10 @@ function createRenderWorkers(workers, size) {
 			if (result.kind !== "journey-base") throw new Error("ARTIFACT_PROCESSING_FAILED");
 			return result.base;
 		} catch (error) {
-			await removeNamedTemporarySpools(named).catch((cleanup) => workers.onFallback?.(cleanup));
-			if (error instanceof SessionWorkerError) throw new ApplicationError(error.message, void 0, { cause: error });
+			if (error instanceof SessionWorkerError) {
+				await removeNamedTemporarySpools(named).catch((cleanup) => workers.onFallback?.(cleanup));
+				throw new ApplicationError(error.message, void 0, { cause: error });
+			}
 			if (signal.aborted) throw error;
 			workers.onFallback?.(error);
 			return pool.serial(() => writeJourneyBase(work, signal));
@@ -3648,6 +3812,14 @@ function renderRetry(signal, slots = 1) {
 //#region apps/cli/src/journey/metadata/render.ts
 /** Reuse private raw provenance, never a displayed anonymized title as new source text. */
 async function renderTitle(storage, state, work) {
+	const terms = [...await journeyConfirmedHides(storage, state)].map(([term, { kind }]) => ({
+		term,
+		category: kind
+	}));
+	const semantic = (text) => ({
+		textSha256: textDigest(text),
+		spans: work.titleOrigin === "explicit" ? [] : confirmedTitleSpans(text, confirmedFamily(terms, workExceptions(state, work.id)))
+	});
 	if (!work.suggestion) {
 		if (work.explicitTitleId) throw new ApplicationError("INCOMPLETE_REVIEW");
 		const cached = work.classificationMetadata;
@@ -3655,10 +3827,7 @@ async function renderTitle(storage, state, work) {
 		return { cachedTitle: {
 			text: cached.title,
 			staticMasks: cached.titleStaticMasks,
-			semantic: {
-				textSha256: textDigest(cached.title),
-				spans: []
-			}
+			semantic: semantic(cached.title)
 		} };
 	}
 	const description = (await storage.resources({
@@ -3672,10 +3841,7 @@ async function renderTitle(storage, state, work) {
 	return { cachedTitle: {
 		text: title,
 		staticMasks: description.appliedTitleStaticMasks,
-		semantic: {
-			textSha256: textDigest(title),
-			spans: []
-		}
+		semantic: semantic(title)
 	} };
 }
 //#endregion
@@ -3726,7 +3892,7 @@ async function describeItem(journey, work, dependencies, signal) {
 	if (work.access === "drop") throw new ApplicationError("INVALID_STATE");
 	return {
 		workId: work.id,
-		title: work.title,
+		title: artifact.title,
 		access: work.access,
 		artifact,
 		operationKey: randomUUID(),
@@ -3808,6 +3974,7 @@ function createJourneyRenderer(options) {
 	async function admit(workId, session) {
 		const state = await session.current();
 		if (!state?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		if (state.phase === "completed" && state.outputVersion !== 1) throw new ApplicationError("SCOPE_NOT_READY");
 		assertJourneyPrivacyReady(state, true);
 		if (obsoleteJourney(state)) throw new ApplicationError("JOURNEY_OBSOLETE");
 		if (state.pendingHideId) throw new ApplicationError("SCOPE_NOT_READY");
@@ -4065,6 +4232,14 @@ async function journeyOutputRequest(storage, state, work, processingConfig, _sig
 			families: hides.request(base.sessions, dictionary, exceptions),
 			metadata: {
 				...title,
+				workspaceTitleHides: {
+					terms: [...dictionary].flatMap(([term, keyword]) => confirmed.has(term) || !keyword.bounded ? [{
+						term,
+						category: keyword.kind,
+						bounded: keyword.bounded
+					}] : []),
+					exceptions
+				},
 				access: work.access === "private" ? "private" : "public"
 			},
 			processing: {
@@ -4582,6 +4757,38 @@ function createClassificationSessions(storage, processing, stateDir) {
 	};
 }
 //#endregion
+//#region apps/cli/src/journey/works/projection-prefix.ts
+async function readClassificationPrefix(source, options, signal) {
+	const stamp = await projectionStamp(source.capture.path);
+	const rows = [];
+	let ordinal = -1;
+	outer: for await (const original of readCapturedOriginalRows(source, {
+		directory: options.directory,
+		verification: "classification-prefix"
+	}, signal)) {
+		const value = JSON.parse(original.text);
+		for (const field of mainTextFields(value, original.harness, "main", true)) for (const chunk of mainTextChunks(field)) {
+			signal.throwIfAborted();
+			if (++ordinal <= options.after) continue;
+			rows.push({
+				sessionId: original.sessionId,
+				sourcePartId: original.sourcePartId,
+				recordIndex: original.recordIndex,
+				pointer: chunk.pointer,
+				offset: chunk.offset,
+				role: chunk.role,
+				text: chunk.text
+			});
+			if (rows.length === options.limit) break outer;
+		}
+	}
+	if (await projectionStamp(source.capture.path) !== stamp) throw new ApplicationError("CORRUPTED_STATE");
+	return {
+		rows,
+		count: ordinal + 1
+	};
+}
+//#endregion
 //#region apps/cli/src/journey/works/projection.ts
 const digest$1 = (bytes) => createHash("sha256").update(bytes).digest();
 async function buildProjection(directory, key, source, role, signal) {
@@ -4664,9 +4871,14 @@ async function buildProjection(directory, key, source, role, signal) {
 		}));
 	}
 }
-/** Persisted derived content, never a scan receipt. Only the first read replays the capture. */
+/** Explicit prefixes stream; default reads reuse a fully verified projection. Neither is a scan receipt. */
 async function readClassificationProjection(source, options, signal) {
 	signal.throwIfAborted();
+	if (options.role !== "main") return {
+		rows: [],
+		count: 0
+	};
+	if (options.prefix) return readClassificationPrefix(source, options, signal);
 	const key = digest$1(JSON.stringify([
 		1,
 		options.snapshotId,
@@ -4736,9 +4948,11 @@ function createClassificationReader(storage, stateDir) {
 		const directory = await journeyDirectory(stateDir, state.journeyId);
 		const rows = [];
 		let cursor = null;
+		const limit = input.limit ?? 8;
 		outer: for (let partIndex = input.cursor?.partIndex ?? 0; partIndex < sources.length; partIndex++) {
 			const source = sources[partIndex];
 			if (!source) throw new ApplicationError("CORRUPTED_STATE");
+			if (!work.rootSessionIds.includes(source.session.id)) continue;
 			const capture = captures.find((item) => item.kind === "capture" && item.capture.partId === source.part.id);
 			if (capture?.kind !== "capture") throw new ApplicationError("SCOPE_NOT_READY");
 			const after = partIndex === input.cursor?.partIndex ? input.cursor.afterOrdinal : -1;
@@ -4749,12 +4963,13 @@ function createClassificationReader(storage, stateDir) {
 			}, {
 				directory,
 				snapshotId: state.snapshotId,
-				role: work.rootSessionIds.includes(source.session.id) ? "main" : "worker",
+				role: "main",
 				after,
-				limit: 9 - rows.length
+				limit: limit + (input.limit === void 0 ? 1 : 0) - rows.length,
+				prefix: input.limit !== void 0
 			}, signal);
 			for (const [index, row] of page.rows.entries()) {
-				if (rows.length === 8) {
+				if (rows.length === limit) {
 					cursor = {
 						snapshotId: state.snapshotId,
 						inputRevision: work.inputRevision,
@@ -4765,6 +4980,16 @@ function createClassificationReader(storage, stateDir) {
 					break outer;
 				}
 				rows.push(row);
+				if (input.limit !== void 0 && rows.length === limit) {
+					cursor = {
+						snapshotId: state.snapshotId,
+						inputRevision: work.inputRevision,
+						...input.rootSessionId ? { rootSessionId: input.rootSessionId } : {},
+						partIndex,
+						afterOrdinal: after + index + 1
+					};
+					break outer;
+				}
 			}
 		}
 		const current = await storage.current(state.journeyId);
@@ -4816,6 +5041,22 @@ async function resolveChunkSessions(storage, state, works, signal) {
 }
 //#endregion
 //#region apps/cli/src/journey/works/proposal.ts
+/** Materialize exactly the Work families accepted by classification, preserving first-name spelling. */
+function groupedClassificationItems(items) {
+	const merged = /* @__PURE__ */ new Map();
+	for (const item of items) {
+		const key = projectNameKey(item.projectName);
+		const prior = merged.get(key);
+		if (prior) {
+			if (prior.description !== item.description || prior.projectType !== item.projectType || JSON.stringify(prior.recommendation) !== JSON.stringify(item.recommendation)) throw new ApplicationError("INVALID_SELECTION");
+			merged.set(key, {
+				...prior,
+				rootSessionIds: [...prior.rootSessionIds, ...item.rootSessionIds]
+			});
+		} else merged.set(key, item);
+	}
+	return [...merged.values()];
+}
 /**
 * One atomic root partition; recommendations have no access authority. Roots still being grouped
 * wait in one unread Work while the other Works are confirmed and read; the submission that
@@ -4855,21 +5096,9 @@ function createClassificationProposal(storage, accountAccess) {
 		if (plan?.kind !== "plan") throw new ApplicationError("SCOPE_NOT_READY");
 		const roots = new Set(state.works.flatMap((work) => work.rootSessionIds));
 		const seen = /* @__PURE__ */ new Set();
-		const merged = /* @__PURE__ */ new Map();
-		for (const item of input.items) {
-			for (const root of item.rootSessionIds) {
-				if (!roots.has(root) || seen.has(root)) throw new ApplicationError("INVALID_SELECTION");
-				seen.add(root);
-			}
-			const key = projectNameKey(item.projectName);
-			const prior = merged.get(key);
-			if (prior) {
-				if (prior.description !== item.description || prior.projectType !== item.projectType || JSON.stringify(prior.recommendation) !== JSON.stringify(item.recommendation)) throw new ApplicationError("INVALID_SELECTION");
-				merged.set(key, {
-					...prior,
-					rootSessionIds: [...prior.rootSessionIds, ...item.rootSessionIds]
-				});
-			} else merged.set(key, item);
+		for (const item of input.items) for (const root of item.rootSessionIds) {
+			if (!roots.has(root) || seen.has(root)) throw new ApplicationError("INVALID_SELECTION");
+			seen.add(root);
 		}
 		const pending = input.pendingRootSessionIds ?? [];
 		for (const root of pending) {
@@ -4889,7 +5118,7 @@ function createClassificationProposal(storage, accountAccess) {
 			return [...new Set(sessions.map((session) => session.workspaceId))];
 		};
 		const items = [];
-		for (const item of merged.values()) {
+		for (const item of groupedClassificationItems(input.items)) {
 			signal.throwIfAborted();
 			items.push({
 				...item,
@@ -4933,6 +5162,102 @@ function createClassificationProposal(storage, accountAccess) {
 	};
 }
 //#endregion
+//#region apps/cli/src/journey/works/recover-isolated.ts
+/** Match the entire original family partition, including other isolated siblings of this parent. */
+function approvedItem(state, child, items) {
+	const matches = items.filter((item) => child.rootSessionIds.every((id) => item.rootSessionIds.includes(id)));
+	const item = matches[0];
+	if (matches.length !== 1 || !item) throw new ApplicationError("INVALID_SELECTION");
+	const parents = state.works.filter((work) => work.projectName === item.projectName && work.description === item.description && work.classificationRecommendation?.access === item.recommendation.access && work.classificationRecommendation.reason === item.recommendation.reason);
+	const parent = parents[0];
+	if (parents.length !== 1 || !parent) throw new ApplicationError("INVALID_SELECTION");
+	const siblingIds = new Set(Array.from({ length: state.works.length + 1 }, (_, i) => isolatedWorkId(parent.id, i)));
+	if (!siblingIds.has(child.id)) throw new ApplicationError("INVALID_SELECTION");
+	const roots = state.works.filter((w) => w.id === parent.id || siblingIds.has(w.id)).flatMap((w) => w.rootSessionIds);
+	if (roots.length !== item.rootSessionIds.length || new Set(roots).size !== roots.length || !roots.every((root) => item.rootSessionIds.includes(root))) throw new ApplicationError("INVALID_SELECTION");
+	return item;
+}
+/** Repair the missing classification only, using its immutable receipt and the ordinary static metadata policy. */
+function createIsolatedMetadataRecovery(storage, processing) {
+	return async (input, signal) => {
+		const { proposal, workIds, idempotencyKey } = input;
+		const journeyId = proposal.journeyId;
+		const hash = textDigest(JSON.stringify(input));
+		const state = await storage.current();
+		if (!state || state.journeyId !== journeyId) throw new ApplicationError("UNKNOWN_ITEM");
+		if (await storage.receiptRevision({
+			journeyId,
+			key: idempotencyKey,
+			hash
+		}) !== null) return {
+			status: "replayed",
+			state
+		};
+		const accepted = await storage.receiptRevision({
+			journeyId,
+			key: proposal.idempotencyKey,
+			hash: textDigest(JSON.stringify(proposal))
+		});
+		if (accepted === null || accepted !== state.classificationRevision) throw new ApplicationError("REVISION_CONFLICT");
+		if (!state.consent || state.scope.status !== "confirmed" || state.abandonedAt || !state.readingComplete || state.pendingHideId || !["ready", "review"].includes(state.phase)) throw new ApplicationError("SCOPE_NOT_READY");
+		if (new Set(workIds).size !== workIds.length || proposal.pendingRootSessionIds?.length) throw new ApplicationError("INVALID_SELECTION");
+		const plan = (await storage.resources({
+			journeyId,
+			kind: "plan",
+			id: "plan"
+		}))[0];
+		if (plan?.kind !== "plan") throw new ApplicationError("SCOPE_NOT_READY");
+		const recovered = /* @__PURE__ */ new Map();
+		const families = groupedClassificationItems(proposal.items);
+		for (const id of workIds) {
+			signal.throwIfAborted();
+			const work = state.works.find((w) => w.id === id);
+			if (!work || !work.createdByPlacement || work.placement !== "placed" || work.description || work.classificationRecommendation || work.suggestion || work.explicitTitleId || work.titleOrigin !== "model" || !work.rootSessionIds.length || !work.accessConfirmed || work.access === "drop" || work.status !== "review" || !work.artifact || work.artifact.revision !== work.revision || work.completedBatches !== work.totalBatches) throw new ApplicationError("INVALID_SELECTION");
+			const item = approvedItem(state, work, families);
+			const restored = {
+				...work,
+				description: item.description,
+				classificationRecommendation: item.recommendation,
+				reason: item.recommendation.reason,
+				projectType: work.projectType ?? {
+					type: item.projectType,
+					reason: item.recommendation.reason,
+					origin: "model"
+				},
+				artifact: null,
+				revision: work.revision + 1
+			};
+			const metadata = await processedClassificationMetadata(storage, state, restored, processing, signal, plan);
+			if (!metadata || !hasCompleteWorkDescription(restored)) throw new ApplicationError("INVALID_SELECTION");
+			recovered.set(id, {
+				...restored,
+				classificationMetadata: metadata
+			});
+		}
+		signal.throwIfAborted();
+		return storage.commit({
+			expectedRevision: state.revision,
+			requestKey: idempotencyKey,
+			requestHash: hash,
+			state: {
+				...state,
+				phase: "review",
+				works: state.works.map((w) => recovered.get(w.id) ?? w),
+				privacy: {
+					...state.privacy,
+					packageApproval: null
+				}
+			},
+			event: {
+				journeyId,
+				kind: "snapshot",
+				source: "system",
+				at: (/* @__PURE__ */ new Date()).toISOString()
+			}
+		});
+	};
+}
+//#endregion
 //#region apps/cli/src/journey/works/catalog-project-evidence.ts
 /** Collects every unresolved root's frozen structural evidence with bounded I/O fan-out. */
 async function collectCatalogProjectEvidence(options, signal) {
@@ -5276,6 +5601,7 @@ function createJourneyClassification(storage, _processing) {
 /** The journey local port's project catalog and project-type suggestions. */
 function createJourneyWorks(storage, processing, stateDir, accountAccess) {
 	return {
+		recoverIsolatedMetadata: createIsolatedMetadataRecovery(storage, processing),
 		classificationSessions: createClassificationSessions(storage, processing, stateDir),
 		classificationRead: createClassificationReader(storage, stateDir),
 		classificationSubmit: createClassificationProposal(storage, accountAccess),
@@ -5326,7 +5652,7 @@ function createJourneyPreview(storage) {
 		const title = protectedSourceText({
 			text: cachedTitle.text,
 			protectedRanges: []
-		}, cachedTitle.semantic.spans);
+		}, cachedTitle.semantic.spans, "[hidden]", false);
 		await scanViewFence(storage, state, work, sha256);
 		return {
 			workId: work.id,
@@ -5358,16 +5684,16 @@ async function* conversationFields(fields) {
 	}
 }
 /** Static detector spans cannot be restored by a semantic Keep or exception. */
-function protectedSourceText(field, hidden) {
+function protectedSourceText(field, hidden, replacement = "[Hidden]", joinAdjacent = true) {
 	const merged = [];
 	for (const range of [...field.protectedRanges, ...hidden].sort((a, b) => a.start - b.start || b.end - a.end)) {
 		if (range.start < 0 || range.end > field.text.length || range.end <= range.start) throw new ApplicationError("CORRUPTED_STATE");
 		const prior = merged.at(-1);
-		if (prior && range.start <= prior.end) prior.end = Math.max(prior.end, range.end);
+		if (prior && (range.start < prior.end || joinAdjacent && range.start === prior.end)) prior.end = Math.max(prior.end, range.end);
 		else merged.push({ ...range });
 	}
 	let text = field.text;
-	for (const range of merged.toReversed()) text = text.slice(0, range.start) + "[Hidden]" + text.slice(range.end);
+	for (const range of merged.toReversed()) text = text.slice(0, range.start) + replacement + text.slice(range.end);
 	return text;
 }
 //#endregion
@@ -5394,6 +5720,8 @@ const packagingRefusalCodes = [
 */
 const finalPackagingCodes = [
 	...packagingRefusalCodes,
+	"WORK_METADATA_INCOMPLETE",
+	"PACKAGING_FAILED",
 	...rootScanRefusals,
 	"ARTIFACT_ARCHIVE_LIMIT",
 	"ARTIFACT_ENTRY_LIMIT",
@@ -5429,22 +5757,45 @@ function createSendPackager(ports) {
 			current = await ports.current(journeyId);
 			if (!current) throw new ApplicationError("UNKNOWN_ITEM");
 		}
-		const ready = (works, id) => works.some((work) => work.id === id && packaged(work));
-		const batch = workIds.filter((id) => !ready(current.works, id));
+		const ready = new Set(current.works.filter(packaged).map((work) => work.id));
+		const batch = workIds.filter((id) => !ready.has(id));
 		if (!batch.length) return true;
+		const selected = new Set(batch);
+		if (current.works.some((work) => selected.has(work.id) && !hasCompleteWorkDescription(work))) throw new ApplicationError("WORK_METADATA_INCOMPLETE");
 		signal.throwIfAborted();
 		const result = await ports.render({
 			journeyId,
 			workIds: batch
 		}, signal);
-		const failures = result.renders?.filter((item) => item.status === "failed") ?? [];
-		const failure = failures.find((item) => packagingRefusalCodes.includes(item.code)) ?? failures.find((item) => finalPackagingCodes.includes(item.code)) ?? failures[0];
-		if (failure) throw new ApplicationError(failure.code);
-		if (batch.some((id) => !ready(result.works, id))) throw new Error("PACKAGING_FAILED");
+		const works = new Map(result.works.map((work) => [work.id, work]));
+		const failures = new Map(result.renders?.filter((item) => item.status === "failed").map((item) => [item.workId, item.code]));
+		for (const id of batch) {
+			const work = works.get(id);
+			if ((!work || !packaged(work)) && !failures.has(id)) failures.set(id, unfinishedPackagingCode(work));
+		}
+		const codes = [...failures.values()];
+		const failure = codes.find((code) => packagingRefusalCodes.includes(code)) ?? codes.find((code) => finalPackagingCodes.includes(code)) ?? codes[0];
+		if (failure) throw new ApplicationError(failure);
 		return false;
 	};
 }
 //#endregion
+//#region apps/cli/src/package-identity.ts
+/** Release identity stays independent of producer/processing format versions. */
+const packageIdentity = Object.freeze(z.object({
+	name: z.literal("@gitroll/tacitt-cli"),
+	version: z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/)
+}).parse(JSON.parse(await readFile(new URL("../package.json", import.meta.url), "utf8"))));
+//#endregion
+//#region apps/cli/skills/tacitt/scripts/journey-panel-host.mjs
+/** Only the host's canonical browser bootstrap may be handed to a fresh browser. */
+function focusedPanelUrl(value, journeyId) {
+	if (typeof value !== "string") return null;
+	const url = URL.parse(value);
+	if (!url || url.href !== value || url.protocol !== "http:" || url.hostname !== "127.0.0.1" || !url.port || url.username || url.password || !/^\/session-[a-f0-9]{16}\/$/u.test(url.pathname) || url.searchParams.size !== 2 || url.searchParams.get("view") !== "skill" || url.searchParams.get("journey") !== journeyId || !/^#token=[A-Za-z0-9_-]{43}$/u.test(url.hash)) return null;
+	return url;
+}
+//#endregion
 //#region apps/cli/src/serve-process.ts
 const execute = promisify(execFile);
 /** OS process creation identity, independent of PID recycling. */
@@ -5509,8 +5860,14 @@ const recordSchema$1 = z.object({
 	journeyId: z.string(),
 	pid: z.number().int().positive(),
 	log: z.string(),
+	version: z.string().optional(),
+	currentKeepAuthority: z.boolean().optional(),
+	outputVersion: z.number().int().optional(),
 	processStart: z.string().optional()
 });
+function enforcesPrivacy(record) {
+	return record?.currentKeepAuthority && record.outputVersion === 1;
+}
 const recordPath$1 = (directory, journeyId) => join(directory, `${journeyId}.host.json`);
 function running(pid) {
 	try {
@@ -5521,19 +5878,18 @@ function running(pid) {
 	}
 }
 /** Only verified absence admits a replacement; transport failure is inconclusive. */
-async function liveHost(directory, journeyId) {
+async function liveHost(directory, journeyId, strictRecord = false) {
 	let record;
 	try {
 		const parsed = recordSchema$1.safeParse(JSON.parse(await readFile(recordPath$1(directory, journeyId), "utf8")));
-		if (!parsed.success || parsed.data.journeyId !== journeyId) return { status: "dead" };
+		if (!parsed.success || parsed.data.journeyId !== journeyId) return { status: strictRecord ? "unknown" : "dead" };
 		record = parsed.data;
 	} catch (error) {
-		if (error instanceof SyntaxError || error instanceof Error && "code" in error && error.code === "ENOENT") return { status: "dead" };
+		if (!strictRecord && error instanceof SyntaxError || error instanceof Error && "code" in error && error.code === "ENOENT") return { status: "dead" };
 		process.stderr.write("HOST_RECORD_UNAVAILABLE\n");
 		return { status: "unknown" };
 	}
-	const state = running(record.pid);
-	if (state === "dead") return { status: "dead" };
+	if (running(record.pid) === "dead") return { status: "dead" };
 	if (record.processStart !== void 0) try {
 		if (await processStart(record.pid) !== record.processStart) return { status: "dead" };
 	} catch {
@@ -5543,19 +5899,37 @@ async function liveHost(directory, journeyId) {
 			record
 		};
 	}
-	else if (state === "unknown") return { status: "dead" };
 	if (!record.url) return {
 		status: "unknown",
 		record
 	};
+	if (!record.processStart) return {
+		status: "unknown",
+		record
+	};
+	if (record.version !== packageIdentity.version || !enforcesPrivacy(record)) return {
+		status: "obsolete",
+		record
+	};
+	const url = focusedPanelUrl(record.url, journeyId);
+	if (!url) return {
+		status: "obsolete",
+		record
+	};
+	url.hash = "";
 	try {
-		await fetch(record.url, { signal: AbortSignal.timeout(2e3) });
-		return {
+		return (await fetch(url, {
+			method: "HEAD",
+			redirect: "manual",
+			signal: AbortSignal.timeout(2e3)
+		})).ok ? {
 			status: "alive",
 			record
+		} : {
+			status: "unknown",
+			record
 		};
-	} catch (error) {
-		if (record.processStart === void 0 && loopbackRefused(record.url, error)) return { status: "dead" };
+	} catch {
 		process.stderr.write("HOST_PROBE_UNAVAILABLE\n");
 		return {
 			status: "unknown",
@@ -5563,16 +5937,57 @@ async function liveHost(directory, journeyId) {
 		};
 	}
 }
-function loopbackRefused(url, error) {
-	const host = URL.parse(url)?.hostname;
-	if (host !== "127.0.0.1" && host !== "[::1]" && host !== "localhost") return false;
-	if (!(error instanceof Error)) return false;
-	if ("code" in error && error.code === "ECONNREFUSED") return true;
-	if (error instanceof AggregateError) return error.errors.length > 0 && error.errors.every((item) => loopbackRefused(url, item));
-	return loopbackRefused(url, error.cause);
+/** Called only while the launch mutex is held. Never start alongside an old owner. */
+async function relinquish(record) {
+	const sameOwner = async () => running(record.pid) !== "dead" && await processStart(record.pid) === record.processStart;
+	try {
+		if (!await sameOwner()) return true;
+		process.kill(record.pid, "SIGTERM");
+		const deadline = Date.now() + 1e4;
+		while (Date.now() < deadline) {
+			if (!await sameOwner()) return true;
+			await setTimeout$1(100);
+		}
+	} catch {
+		if (running(record.pid) === "dead") return true;
+	}
+	process.stderr.write("HOST_REPLACEMENT_PENDING: the previous panel host has not confirmed shutdown. Retry the handoff.\n");
+	return false;
+}
+/** A previous sender cannot observe a new policy by reusing its cached approval.
+* Only a live, PID-and-birth-verified owner may be signalled. */
+async function fenceUnapprovedSendHost(stateDir, journey) {
+	if (journey?.phase !== "sending" || journey.privacy.packageApproval !== null) return;
+	const directory = join(stateDir, "serve");
+	const status = await liveHost(directory, journey.journeyId, true);
+	if (status.status === "dead" || enforcesPrivacy(status.record)) return;
+	await withStateMutex(directory, async () => {
+		const current = await liveHost(directory, journey.journeyId, true);
+		if (current.status === "dead" || enforcesPrivacy(current.record)) return;
+		if (current.status !== "obsolete" || !await relinquish(current.record)) throw new ApplicationError("HOST_REPLACEMENT_PENDING");
+	});
+}
+/** Best-effort cleanup before an obsolete journey can lose its current ID. */
+async function relinquishObsoleteHost(stateDir, journeyId) {
+	const directory = join(stateDir, "serve");
+	try {
+		await readFile(recordPath$1(directory, journeyId), "utf8");
+		await withStateMutex(directory, async () => {
+			const current = await liveHost(directory, journeyId);
+			if (current.status === "obsolete" && current.record.version !== packageIdentity.version) await relinquish(current.record);
+		});
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return;
+		process.stderr.write("HOST_REPLACEMENT_PENDING: obsolete journey host cleanup failed.\n");
+	}
 }
 function reuse(existing) {
 	if (existing.status === "dead") return false;
+	if (existing.status === "obsolete") {
+		process.stderr.write("HOST_REPLACEMENT_PENDING: retry the handoff.\n");
+		process.exitCode = 1;
+		return true;
+	}
 	if (existing.status === "alive") process.stdout.write(`${JSON.stringify({
 		ok: true,
 		event: "ready",
@@ -5634,7 +6049,12 @@ async function serveDetached(args, stateDir, journeyId) {
 					recursive: true,
 					force: true
 				});
-				if (reuse(current)) return;
+				if (current.status === "obsolete") {
+					if (!await relinquish(current.record)) {
+						process.exitCode = 1;
+						return;
+					}
+				} else if (reuse(current)) return;
 				let retries = 0;
 				let delay = 500;
 				for (;;) {
@@ -5698,6 +6118,11 @@ async function startHost(args, directory, journeyId, deadline) {
 		await output.close();
 		throw error;
 	}
+	let ready;
+	child.on("message", (message) => {
+		const parsed = readySchema.safeParse(message);
+		if (parsed.success) ready ??= parsed.data.result;
+	});
 	let exited = null;
 	child.once("exit", (code) => exited = code ?? 1);
 	let spawnFailure;
@@ -5713,6 +6138,9 @@ async function startHost(args, directory, journeyId, deadline) {
 			identity = await processStart(child.pid);
 			await publishRecord(directory, id, {
 				url: "",
+				version: packageIdentity.version,
+				currentKeepAuthority: true,
+				outputVersion: 1,
 				journeyId,
 				pid: child.pid,
 				processStart: identity,
@@ -5740,7 +6168,8 @@ async function startHost(args, directory, journeyId, deadline) {
 			deadline
 		}, () => ({
 			exited,
-			spawnFailure
+			spawnFailure,
+			ready
 		}));
 	} finally {
 		if (child.connected) child.disconnect();
@@ -5753,29 +6182,27 @@ async function publishRecord(directory, id, record) {
 }
 async function readStartup(log) {
 	let busy = false;
-	let ready;
 	for (const line of (await readFile(log, "utf8")).split("\n")) try {
 		const parsed = JSON.parse(line);
 		const failure = failureSchema.safeParse(parsed);
 		if (failure.success) busy = failure.data.error.code === "COORDINATION_BUSY";
-		const value = readySchema.safeParse(parsed);
-		if (value.success) ready ??= value.data.result;
 	} catch {}
-	return {
-		busy,
-		ready
-	};
+	return { busy };
 }
 async function waitForReady(child, startup, state) {
 	let busy = false;
 	while (Date.now() < startup.deadline) {
 		const failure = state().spawnFailure;
 		if (failure) throw new Error("HOST_START_FAILED", { cause: failure });
-		const observed = await readStartup(startup.log);
-		busy = observed.busy;
-		if (observed.ready?.journeyId === startup.journeyId && child.pid !== void 0) {
+		busy = (await readStartup(startup.log)).busy;
+		const ready = state().ready;
+		if (ready?.journeyId === startup.journeyId && child.pid !== void 0) {
+			if (!focusedPanelUrl(ready.url, startup.journeyId)) throw new Error("INVALID_PANEL_URL");
 			const record = {
-				...observed.ready,
+				...ready,
+				version: packageIdentity.version,
+				currentKeepAuthority: true,
+				outputVersion: 1,
 				pid: child.pid,
 				processStart: startup.identity,
 				log: startup.log
@@ -5860,357 +6287,61 @@ async function readSendHost(stateDir) {
 	}
 }
 //#endregion
-//#region apps/cli/src/account/journey/remote-error.ts
-const refusalSchema = z.object({
-	error: z.string(),
-	preview: sendSettingsSchema.nullable().optional(),
-	resolution: sendResolutionSchema.optional(),
-	/** `unknown_keep_work_ids`: the kept IDs Passport did not accept (ADR 0204). */
-	workIds: z.array(z.string()).optional()
-});
-var JourneyRemoteError = class extends Error {
-	retryAfter;
-	status;
-	code;
-	details;
-	constructor(status, code, details, options, retryAfter) {
-		super(code, options);
-		this.name = "JourneyRemoteError";
-		this.retryAfter = retryAfter;
-		this.status = status;
-		this.code = code;
-		this.details = details;
-	}
-};
-//#endregion
-//#region apps/cli/src/account/journey/session-transport.ts
-/** Session requests allow ten minutes for response headers and response-body inactivity. */
-const sessionRequestTimeoutMs = 6e5;
-/**
-* Node 24 bundles undici but does not expose its Agent as a public built-in module.
-* Reuse its dispatcher through the versioned compatibility symbol, without changing
-* global transport policy. Constructing Request initializes undici without any I/O.
-* Fail closed if a future runtime removes this bridge; never fall back to five minutes.
-*/
-function runtimeSessionDispatcher() {
-	new Request("https://session-transport.invalid");
-	const dispatcher = Reflect.get(globalThis, Symbol.for("undici.globalDispatcher.1"));
-	if (typeof dispatcher !== "object" || dispatcher === null || !("dispatch" in dispatcher) || typeof dispatcher.dispatch !== "function") throw new ApplicationError("SESSION_TRANSPORT_UNAVAILABLE");
-	const dispatch = dispatcher.dispatch.bind(dispatcher);
-	return { dispatch(options, handler) {
-		return dispatch(options, handler);
-	} };
-}
-/** Per-request overrides reach undici's parser; AbortSignal alone does not change these. */
-function sessionDispatcher(delegate = runtimeSessionDispatcher(), timeoutMs = sessionRequestTimeoutMs) {
-	return { dispatch(options, handler) {
-		return delegate.dispatch({
-			...options,
-			headersTimeout: timeoutMs,
-			bodyTimeout: timeoutMs
-		}, handler);
-	} };
+//#region apps/cli/src/journey/send-extension.ts
+function selectionKey({ output, extension, identities }) {
+	return hash$1([
+		output.journeyId,
+		output.workId,
+		output.primary.sha256,
+		output.finalMaskLedger.sha256,
+		identities,
+		extension
+	]);
 }
-//#endregion
-//#region apps/cli/src/journey/send-sessions.ts
-/** Build upload identities from frozen local metadata and bytes from the final primary only. */
-async function* sessionArtifacts(storage, find, journeyId, artifact, signal) {
-	const output = await find(journeyId, artifact.workId, artifact.revision);
-	if (output.bundleId !== artifact.bundleId || output.primary.sha256 !== artifact.sha256 || output.primary.archiveBytes !== artifact.byteLength) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-	const base = (await storage.resources({
-		journeyId,
-		kind: "base"
-	})).find((item) => item.kind === "base" && item.workId === artifact.workId && item.inputRevision === output.finalMaskLedger.inputRevision && item.primary.sha256 === output.finalMaskLedger.basePrimarySha256);
-	const plan = (await storage.resources({
-		journeyId,
-		kind: "plan"
-	})).find((item) => item.kind === "plan");
-	if (base?.kind !== "base" || plan?.kind !== "plan") throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-	const identities = base.sessions.map((binding) => {
-		const session = plan.approval.inventory.sessions.find((item) => item.id === binding.applicationSessionId);
-		const part = session?.parts[0];
-		const lastAt = session?.lastInteractionAt ?? session?.createdAt;
-		if (!session || !part || !lastAt || !Number.isFinite(Date.parse(lastAt))) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-		const nativeId = part.nativeEvidence?.identity?.sessionId ?? session.sourceSessionId;
-		const path = part.harnessRelativePath ?? "";
-		if (!path && !nativeId?.trim() || isAbsolute(path) || path.includes("\\") || path.split("/").some((segment) => segment === ".." || segment === ".")) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-		return {
-			archiveSessionId: binding.archiveSessionId,
-			relativePath: path,
-			lastAt: new Date(lastAt).toISOString()
-		};
-	});
-	for await (const session of configuredSessionUploads(output.primary, identities, signal)) yield {
-		...session,
-		async upload(upload, uploadSignal, onProgress) {
-			await find(journeyId, artifact.workId, artifact.revision);
-			const url = new URL(upload.uploadUrl);
-			if (url.protocol !== "https:" || url.username || url.password || url.hash) throw new ApplicationError("INVALID_ARGUMENTS");
-			const dispatcher = sessionDispatcher();
-			let bytes = 0;
-			const progressFailure = {};
-			const request = {
-				method: "PUT",
-				body: session.stream().pipeThrough(new TransformStream({ async transform(chunk, controller) {
-					bytes += chunk.byteLength;
-					try {
-						await onProgress?.(bytes);
-					} catch (cause) {
-						progressFailure.error = { cause };
-						throw cause;
-					}
-					controller.enqueue(chunk);
-				} })),
-				signal: uploadSignal,
-				dispatcher,
-				redirect: "error",
-				credentials: "omit",
-				referrerPolicy: "no-referrer",
-				headers: {
-					"content-type": "application/zip",
-					"content-length": String(session.byteLength),
-					...upload.headers
-				},
-				duplex: "half"
-			};
-			const response = await fetch(url, request).catch((error) => {
-				if (progressFailure.error) throw progressFailure.error.cause;
-				throw error;
-			});
-			await response.body?.cancel();
-			if (!response.ok) throw new JourneyRemoteError(response.status, "UPLOAD_FAILED", null, void 0, response.headers.get("retry-after") ?? void 0);
-		}
-	};
-}
-/** Own one live upload iterator; advancing it releases the preceding session ZIP. */
-async function prepareSessionArtifacts(storage, find, journeyId, artifact, signal) {
-	const source = sessionArtifacts(storage, find, journeyId, artifact, signal);
-	let closed = false;
-	async function* iterate() {
-		try {
-			yield* source;
-		} finally {
-			closed = true;
-		}
-	}
-	const items = iterate();
-	return {
-		items,
-		async close() {
-			if (closed) return;
-			closed = true;
-			await items.return(void 0);
-		}
-	};
-}
-//#endregion
-//#region apps/cli/src/journey/send-artifacts.ts
-function createJourneySendArtifacts(storage) {
-	async function find(journeyId, workId, revision) {
-		const state = await storage.current(journeyId);
-		if (!state?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
-		assertJourneyPrivacyReady(state, true);
-		if (state.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
-		const work = state.works.find((item) => item.id === workId);
-		if (!work?.artifact || work.revision !== revision || work.artifact.revision !== revision) throw new ApplicationError("REVISION_CONFLICT");
-		const output = (await storage.resources({
-			journeyId,
-			kind: "output"
-		})).find((item) => item.kind === "output" && item.workId === workId && item.revision === revision);
-		if (output?.kind !== "output" || output.primary.sha256 !== work.artifact.sha256) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-		return output;
-	}
-	return {
-		prepareSessions: (journeyId, artifact, signal) => prepareSessionArtifacts(storage, find, journeyId, artifact, signal),
-		sessions: (journeyId, artifact, signal) => sessionArtifacts(storage, find, journeyId, artifact, signal),
-		async describe(journey, work, signal) {
-			const output = await find(journey.journeyId, work.id, work.revision);
-			const info = await readConfiguredOutputInfo(output.primary, signal);
-			if (info.work.id !== work.id || info.work.access !== work.access) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-			let agentSources = [];
-			try {
-				const base = (await storage.resources({
-					journeyId: journey.journeyId,
-					kind: "base"
-				})).find((item) => item.kind === "base" && item.workId === work.id && item.inputRevision === output.finalMaskLedger.inputRevision && item.primary.sha256 === output.finalMaskLedger.basePrimarySha256);
-				if (base?.kind === "base") {
-					const included = new Set(base.sessions.map((item) => item.applicationSessionId));
-					const resources = await storage.resources({
-						journeyId: journey.journeyId,
-						kind: "static-session"
-					});
-					const unique = /* @__PURE__ */ new Map();
-					for (const resource of resources) {
-						if (resource.kind !== "static-session" || resource.workId !== work.id || resource.inputRevision !== base.inputRevision || !included.has(resource.sessionId)) continue;
-						for (const candidate of resource.agentSources ?? []) {
-							const parsed = agentSourceSchema.safeParse(candidate);
-							if (parsed.success && unique.size < 500) unique.set(JSON.stringify(parsed.data), parsed.data);
-						}
-					}
-					agentSources = [...unique.values()];
-				}
-			} catch {
-				console.error("AGENT_SOURCES_METADATA_UNAVAILABLE");
-			}
-			return sendArtifactSchema.parse({
-				...agentSources.length === 0 ? {} : { agentSources },
-				workId: work.id,
+/** Sender-local cache. Its only values are archive IDs already covered by a scope-bound proof. */
+function createSendExtensionSelection() {
+	const cache = /* @__PURE__ */ new Map();
+	return async function select(storage, descriptor, signal) {
+		const { output, identities, extension } = descriptor;
+		if (!extension) return /* @__PURE__ */ new Set();
+		const key = selectionKey(descriptor);
+		const prior = cache.get(key);
+		if (prior) return prior;
+		const bindings = /* @__PURE__ */ new Map();
+		for (const binding of extension.sources) {
+			const location = JSON.stringify([binding.session, binding.source]);
+			if (bindings.has(location)) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+			bindings.set(location, binding.part);
+		}
+		const dates = new Map(identities.map((item) => [item.archiveSessionId, item.lastAt]));
+		const proof = await sessionExtensions({
+			primary: output.primary,
+			ledger: output.finalMaskLedger,
+			groups: extension.groups,
+			sourceFor: (session, source) => bindings.get(JSON.stringify([session, source])),
+			lastAt: (session) => dates.get(session) ?? ""
+		}, signal);
+		if (!proof) return /* @__PURE__ */ new Set();
+		if (proof.retired.size) for (const work of extension.outputs) {
+			const { output: candidate } = await storage.readSendOutput({
+				journeyId: output.journeyId,
+				workId: work.workId,
 				revision: work.revision,
-				bundleId: info.manifest.bundleId,
-				createdAt: info.createdAt,
-				title: info.work.title,
-				sessionCount: info.sessionCount,
-				grouping: info.manifest.work.grouping,
-				sources: info.sources,
-				byteLength: output.primary.archiveBytes,
-				sha256: output.primary.sha256
+				sessions: false
 			});
-		},
-		async upload(journeyId, artifact, upload, signal) {
-			const output = await find(journeyId, artifact.workId, artifact.revision);
-			if (output.bundleId !== artifact.bundleId || output.primary.sha256 !== artifact.sha256 || output.primary.archiveBytes !== artifact.byteLength || artifact.byteLength > 5368709120) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-			await putPrimary(output.primary, artifact.byteLength, upload, signal);
-		}
-	};
-}
-/**
-* Stream a verified primary to a signed HTTPS URL; shared by native Send and Manual upload. A
-* checksum upload also sends the SHA-256 header the URL signs, so storage refuses other bytes.
-*/
-async function putPrimary(primary, byteLength, upload, signal) {
-	const url = new URL(upload.uploadUrl);
-	if (url.protocol !== "https:" || url.username || url.password || url.hash) throw new ApplicationError("INVALID_ARGUMENTS");
-	const source = await openConfiguredUpload(primary, signal);
-	const cleanup = createCleanup();
-	try {
-		const request = {
-			method: "PUT",
-			body: source.stream,
-			signal,
-			redirect: "error",
-			headers: {
-				"Content-Type": "application/zip",
-				"Content-Length": String(byteLength),
-				...upload.headers
-			},
-			duplex: "half"
-		};
-		const result = await fetch(url, request);
-		await result.body?.cancel();
-		if (!result.ok) throw new ApplicationError("UPLOAD_FAILED");
-	} catch (error) {
-		cleanup.failed(error);
-		throw error;
-	} finally {
-		await cleanup.run(() => source.close());
-	}
-}
-//#endregion
-//#region apps/cli/src/account/journey/session-facts-cache.ts
-const keyFor = (journeyId, artifact) => JSON.stringify([
-	journeyId,
-	artifact.workId,
-	artifact.revision,
-	artifact.sha256
-]);
-/** Sender-owned facts only. In-flight computations never enter the bounded cache. */
-function createSessionFactsCache(limit = 256) {
-	const facts = /* @__PURE__ */ new Map();
-	let owner = "";
-	let generation = 0;
-	let allowed = /* @__PURE__ */ new Set();
-	return {
-		retain(journeyId, send) {
-			const nextOwner = JSON.stringify([journeyId, send?.id]);
-			const ended = !send || [
-				"completed",
-				"blocked",
-				"prepared"
-			].includes(send.status);
-			if (owner !== nextOwner || ended) {
-				facts.clear();
-				generation += 1;
-			}
-			owner = nextOwner;
-			allowed = new Set(ended || !send ? [] : send.items.filter((item) => !item.sessionAssembly && item.status !== "completed").map((item) => keyFor(journeyId, item.artifact)));
-			for (const key of facts.keys()) if (!allowed.has(key)) facts.delete(key);
-		},
-		async get(journeyId, artifact, signal, compute) {
-			signal.throwIfAborted();
-			const key = keyFor(journeyId, artifact);
-			const cached = facts.get(key);
-			if (cached) return cached;
-			const started = generation;
-			const items = await compute();
-			signal.throwIfAborted();
-			if (started === generation && allowed.has(key)) {
-				facts.set(key, items);
-				while (facts.size > limit) {
-					const oldest = facts.keys().next().value;
-					if (oldest === void 0) break;
-					facts.delete(oldest);
-				}
-			}
-			return items;
-		}
-	};
-}
-//#endregion
-//#region apps/cli/src/account/journey/session-preparation.ts
-/** Shared facts retain no bytes; only upload steps acquire phase-local live iterators. */
-function createSessionPreparation(dependencies, facts) {
-	const prepare = dependencies.artifacts.prepareSessions;
-	const prepared = [];
-	const sessions = async function* (journeyId, artifact, signal) {
-		if (!prepare) {
-			const original = dependencies.artifacts.sessions;
-			if (original) yield* original(journeyId, artifact, signal);
-			return;
-		}
-		const result = await prepare(journeyId, artifact, signal);
-		prepared.push(result);
-		for await (const item of result.items) {
-			signal.throwIfAborted();
-			yield item;
-		}
-	};
-	const sessionFacts = async function* (journeyId, artifact, signal) {
-		const items = await facts.get(journeyId, artifact, signal, async () => {
-			const original = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
-			const items = [];
-			if (original) for await (const item of original(journeyId, artifact, signal)) {
-				const { workerIdentity, nativeSessionId, relativePath, harness, lastAt, metadata, sha256, byteLength, crc32 } = item;
-				items.push({
-					...workerIdentity ? { workerIdentity } : {},
-					nativeSessionId,
-					relativePath,
-					harness,
-					lastAt,
-					metadata,
-					sha256,
-					byteLength,
-					crc32
-				});
-			}
-			return items;
-		});
-		for (const item of items) {
-			signal.throwIfAborted();
-			yield item;
-		}
-	};
-	return {
-		dependencies: {
-			...dependencies,
-			artifacts: {
-				...dependencies.artifacts,
-				sessions,
-				sessionFacts
-			}
-		},
-		async close() {
-			await createCleanup().run(...prepared.map((result) => () => result.close()));
+			if (candidate.primary.sha256 !== work.sha256 || candidate.bundleId !== work.bundleId) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+			const omitted = candidate.workId === output.workId ? proof.omitted : /* @__PURE__ */ new Set();
+			if (await hasRetiredSessionMarker(candidate.primary, omitted, proof.retired, signal)) return /* @__PURE__ */ new Set();
 		}
+		if (selectionKey(await storage.readSendOutput({
+			journeyId: output.journeyId,
+			workId: output.workId,
+			revision: output.revision,
+			sessions: true
+		})) !== key) throw new ApplicationError("REVISION_CONFLICT");
+		if (cache.size >= 32) cache.clear();
+		cache.set(key, proof.omitted);
+		return proof.omitted;
 	};
 }
 //#endregion
@@ -6279,15 +6410,86 @@ function createSessionKeys() {
 	};
 }
 //#endregion
-//#region apps/cli/src/account/journey/session-access.ts
+//#region apps/cli/src/account/journey/session-content-claims.ts
 /** Safe facts for a local preflight conflict; no paths or session content escape. */
 var SessionContentConflict = class extends ApplicationError {
 	contentConflict;
-	constructor(contentConflict) {
+	affectedWorkIds;
+	constructor(contentConflict, affectedWorkIds) {
 		super("SESSION_CONTENT_CONFLICT");
 		this.contentConflict = contentConflict;
+		this.affectedWorkIds = affectedWorkIds;
 	}
 };
+function sessionContentClaims(items, inventory) {
+	const requestedDigests = /* @__PURE__ */ new Map();
+	const divergent = /* @__PURE__ */ new Set();
+	const contentOwners = /* @__PURE__ */ new Map();
+	const savedUploads = /* @__PURE__ */ new Map();
+	const owners = /* @__PURE__ */ new Map();
+	const holdings = /* @__PURE__ */ new Map();
+	function hold(key, workId) {
+		const byKey = owners.get(key) ?? /* @__PURE__ */ new Set();
+		const byWork = holdings.get(workId) ?? /* @__PURE__ */ new Set();
+		byKey.add(workId);
+		byWork.add(key);
+		owners.set(key, byKey);
+		holdings.set(workId, byWork);
+	}
+	const byId = new Map(items.map((item) => [item.workId, item]));
+	for (const work of inventory.works) if (byId.has(work.logicalWorkId)) for (const stored of work.sessions) hold(stored.key, work.logicalWorkId);
+	for (const item of items) {
+		if (item.sessionUpload) {
+			hold(item.sessionUpload.key, item.workId);
+			const claims = savedUploads.get(item.sessionUpload.key) ?? /* @__PURE__ */ new Map();
+			claims.set(item.workId, item.sessionUpload.sha256);
+			savedUploads.set(item.sessionUpload.key, claims);
+		}
+		for (const key of item.sessionMembership?.keys ?? []) hold(key, item.workId);
+	}
+	return {
+		observe(key, sha256, item) {
+			hold(key, item.workId);
+			const requestedBy = contentOwners.get(key) ?? /* @__PURE__ */ new Set();
+			requestedBy.add(item.workId);
+			contentOwners.set(key, requestedBy);
+			for (const [owner, sha] of savedUploads.get(key) ?? []) if (owner !== item.workId && byId.get(owner)?.access === item.access && sha !== sha256) divergent.add(key);
+			const otherDigest = requestedDigests.get(key);
+			if (otherDigest !== void 0 && otherDigest !== sha256) divergent.add(key);
+			requestedDigests.set(key, sha256);
+		},
+		requireIndependent() {
+			for (const [key, claims] of savedUploads) {
+				for (const access of ["private", "public"]) if (new Set([...claims].filter(([id]) => byId.get(id)?.access === access).map(([, sha]) => sha)).size > 1) divergent.add(key);
+				if (!divergent.has(key)) continue;
+				const requestedBy = contentOwners.get(key) ?? /* @__PURE__ */ new Set();
+				for (const owner of claims.keys()) requestedBy.add(owner);
+				contentOwners.set(key, requestedBy);
+			}
+			const [first] = divergent;
+			if (first) {
+				const affected = /* @__PURE__ */ new Set();
+				const pending = [...divergent];
+				const visited = new Set(pending);
+				for (const key of pending) for (const workId of owners.get(key) ?? []) {
+					if (affected.has(workId)) continue;
+					affected.add(workId);
+					for (const owned of holdings.get(workId) ?? []) if (!visited.has(owned)) {
+						visited.add(owned);
+						pending.push(owned);
+					}
+				}
+				if (items.some((item) => affected.has(item.workId) && !["blocked", "completed"].includes(item.status) && !item.sessionAssembly)) throw new SessionContentConflict({
+					workIds: items.filter((item) => contentOwners.get(first)?.has(item.workId)).map((item) => item.workId),
+					sessionKey: first
+				}, affected);
+			}
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/account/journey/session-access.ts
+const passportSessionPartByteLimit = 5 * 1024 ** 3 - 128 * 1024 ** 2;
 /** Collect safe conflicts across the entire pending Send before any session mutation. */
 async function sessionAccessBlocked(dependencies, journeyId, items, inventory, signal) {
 	const sessions = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
@@ -6312,7 +6514,7 @@ async function sessionAccessBlocked(dependencies, journeyId, items, inventory, s
 		conflicts.set(JSON.stringify(conflict), conflict);
 	}
 	const requestedAccess = /* @__PURE__ */ new Map();
-	const requestedDigests = /* @__PURE__ */ new Map();
+	const content = sessionContentClaims(items, inventory);
 	const contentAccess = /* @__PURE__ */ new Map();
 	function claim(claims, identity, key, item, rule) {
 		const previous = claims.get(identity) ?? [];
@@ -6343,26 +6545,28 @@ async function sessionAccessBlocked(dependencies, journeyId, items, inventory, s
 		}
 	}
 	for (const item of items) {
-		if (item.sessionAssembly || item.sessionMembership || ["completed", "blocked"].includes(item.status)) continue;
+		if (item.sessionAssembly || item.sessionMembership || item.status === "completed" || item.status === "blocked" && item.error !== "SESSION_CONTENT_CONFLICT") continue;
 		const destination = inventory.works.find((work) => work.logicalWorkId === item.workId);
 		if (destination?.access === "removed") throw new ApplicationError("WORK_REMOVED");
 		if (destination) observe(item, destination.access);
+		const selected = createSessionKeys();
+		const measured = /* @__PURE__ */ new Set();
+		let partBytes = 0;
+		let partCount = 0;
 		for await (const session of sessions(journeyId, item.artifact, signal)) {
-			const key = await sessionKeyFor(session);
-			const { workerIdentity: _, ...original } = session;
-			const legacyKey = session.workerIdentity ? await sessionKeyFor(original) : key;
+			const identity = await selected.add(session);
+			const key = identity.key;
+			const legacyKey = identity.legacyKey ?? key;
+			if (!measured.has(key)) {
+				measured.add(key);
+				partCount += session.metadata.parts.length;
+				for (const part of session.metadata.parts) partBytes += part.byteLength;
+			}
+			content.observe(key, session.sha256, item);
+			if (item.status === "blocked") continue;
 			claimContent(key, session.sha256, item);
 			if (legacyKey !== key) claimContent(legacyKey, session.sha256, item);
 			claim(requestedAccess, key, key, item, "requested-access");
-			const otherDigest = requestedDigests.get(key);
-			if (otherDigest !== void 0 && otherDigest.sha256 !== session.sha256) throw new SessionContentConflict({
-				workIds: [.../* @__PURE__ */ new Set([...otherDigest.workIds, item.workId])],
-				sessionKey: key
-			});
-			requestedDigests.set(key, {
-				sha256: session.sha256,
-				workIds: [.../* @__PURE__ */ new Set([...otherDigest?.workIds ?? [], item.workId])]
-			});
 			for (const work of inventory.works) for (const entry of work.sessions) {
 				if (entry.key !== key && !(entry.key === legacyKey && entry.sha256 === session.sha256)) continue;
 				observe(item, work.access);
@@ -6370,48 +6574,288 @@ async function sessionAccessBlocked(dependencies, journeyId, items, inventory, s
 			}
 			if (destination && destination.access !== item.access) record(item, key, "destination-access", destination);
 		}
+		if (selected.membership(destination?.sessions ?? []).length > 1e3 || partCount > 1e4 || partBytes > passportSessionPartByteLimit) throw new ApplicationError("WORK_SESSION_CAPACITY_EXCEEDED");
 	}
+	content.requireIndependent();
 	return [...conflicts.values()].map((conflict) => (accountAccesses.get(conflict.workId)?.size ?? 0) > 1 ? {
 		...conflict,
 		accountAccess: "mixed"
 	} : conflict);
 }
-/** Keep overlapping session ownership serial through membership, including retained members. */
-async function sessionIndependentItems(dependencies, journeyId, items, inventory, signal) {
-	const sessions = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
-	if (!sessions) return [];
-	const pending = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => Number(right.status === "uploading") - Number(left.status === "uploading") || right.artifact.byteLength - left.artifact.byteLength);
-	const claimed = /* @__PURE__ */ new Set();
-	const independent = [];
-	for (const item of pending) {
-		const keys = /* @__PURE__ */ new Set([
-			...inventory.works.find((work) => work.logicalWorkId === item.workId)?.sessions.map((session) => session.key) ?? [],
-			...item.sessionMembership?.keys ?? [],
-			...item.sessionUpload ? [item.sessionUpload.key] : []
-		]);
-		if (!item.sessionMembership && !item.sessionAssembly) for await (const session of sessions(journeyId, item.artifact, signal)) keys.add(await sessionKeyFor(session));
-		if (![...keys].some((key) => claimed.has(key))) independent.push(item);
-		for (const key of keys) claimed.add(key);
+/** Keep overlapping session ownership serial through membership, including retained members. */
+async function sessionIndependentItems(dependencies, journeyId, items, inventory, signal) {
+	const sessions = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
+	if (!sessions) return [];
+	const pending = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => Number(right.status === "uploading") - Number(left.status === "uploading") || right.artifact.byteLength - left.artifact.byteLength);
+	const claimed = /* @__PURE__ */ new Set();
+	const independent = [];
+	for (const item of pending) {
+		const keys = /* @__PURE__ */ new Set([
+			...inventory.works.find((work) => work.logicalWorkId === item.workId)?.sessions.map((session) => session.key) ?? [],
+			...item.sessionMembership?.keys ?? [],
+			...item.sessionUpload ? [item.sessionUpload.key] : []
+		]);
+		if (!item.sessionMembership && !item.sessionAssembly) for await (const session of sessions(journeyId, item.artifact, signal)) keys.add(await sessionKeyFor(session));
+		if (![...keys].some((key) => claimed.has(key))) independent.push(item);
+		for (const key of keys) claimed.add(key);
+	}
+	return independent;
+}
+//#endregion
+//#region apps/cli/src/account/journey/remote-error.ts
+const refusalSchema = z.object({
+	error: z.string(),
+	preview: sendSettingsSchema.nullable().optional(),
+	resolution: sendResolutionSchema.optional(),
+	/** `unknown_keep_work_ids`: the kept IDs Passport did not accept (ADR 0204). */
+	workIds: z.array(z.string()).optional()
+});
+var JourneyRemoteError = class extends Error {
+	retryAfter;
+	status;
+	code;
+	details;
+	constructor(status, code, details, options, retryAfter) {
+		super(code, options);
+		this.name = "JourneyRemoteError";
+		this.retryAfter = retryAfter;
+		this.status = status;
+		this.code = code;
+		this.details = details;
+	}
+};
+//#endregion
+//#region apps/cli/src/account/journey/session-transport.ts
+/** Session requests allow ten minutes for response headers and response-body inactivity. */
+const sessionRequestTimeoutMs = 6e5;
+/**
+* Node 24 bundles undici but does not expose its Agent as a public built-in module.
+* Reuse its dispatcher through the versioned compatibility symbol, without changing
+* global transport policy. Constructing Request initializes undici without any I/O.
+* Fail closed if a future runtime removes this bridge; never fall back to five minutes.
+*/
+function runtimeSessionDispatcher() {
+	new Request("https://session-transport.invalid");
+	const dispatcher = Reflect.get(globalThis, Symbol.for("undici.globalDispatcher.1"));
+	if (typeof dispatcher !== "object" || dispatcher === null || !("dispatch" in dispatcher) || typeof dispatcher.dispatch !== "function") throw new ApplicationError("SESSION_TRANSPORT_UNAVAILABLE");
+	const dispatch = dispatcher.dispatch.bind(dispatcher);
+	return { dispatch(options, handler) {
+		return dispatch(options, handler);
+	} };
+}
+/** Per-request overrides reach undici's parser; AbortSignal alone does not change these. */
+function sessionDispatcher(delegate = runtimeSessionDispatcher(), timeoutMs = sessionRequestTimeoutMs) {
+	return { dispatch(options, handler) {
+		return delegate.dispatch({
+			...options,
+			headersTimeout: timeoutMs,
+			bodyTimeout: timeoutMs
+		}, handler);
+	} };
+}
+//#endregion
+//#region apps/cli/src/journey/send-sessions.ts
+/** Build upload identities from frozen local metadata and bytes from the final primary only. */
+async function sessionInputs(storage, journeyId, artifact, signal, select) {
+	const query = {
+		journeyId,
+		workId: artifact.workId,
+		revision: artifact.revision
+	};
+	const descriptor = await storage.readSendOutput({
+		...query,
+		sessions: true
+	});
+	const { output, identities } = descriptor;
+	if (output.bundleId !== artifact.bundleId || output.primary.sha256 !== artifact.sha256 || output.primary.archiveBytes !== artifact.byteLength) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+	return {
+		output,
+		identities,
+		omitted: await select(storage, descriptor, signal)
+	};
+}
+async function* sessionFacts(storage, journeyId, artifact, signal, select = createSendExtensionSelection()) {
+	const { output, identities, omitted } = await sessionInputs(storage, journeyId, artifact, signal, select);
+	yield* configuredSessionUploads(output.primary, identities, signal, "facts", omitted, (bytes) => {
+		if (bytes > passportSessionPartByteLimit) throw new ApplicationError("WORK_SESSION_CAPACITY_EXCEEDED");
+	});
+}
+async function* sessionArtifacts(storage, journeyId, artifact, signal, select = createSendExtensionSelection()) {
+	const { output, identities, omitted } = await sessionInputs(storage, journeyId, artifact, signal, select);
+	for await (const session of configuredSessionUploads(output.primary, identities, signal, "upload", omitted)) yield {
+		...session,
+		async upload(upload, uploadSignal, onProgress) {
+			await storage.readSendOutput({
+				journeyId,
+				workId: artifact.workId,
+				revision: artifact.revision,
+				sessions: false
+			});
+			const url = new URL(upload.uploadUrl);
+			if (url.protocol !== "https:" || url.username || url.password || url.hash) throw new ApplicationError("INVALID_ARGUMENTS");
+			const dispatcher = sessionDispatcher();
+			let bytes = 0;
+			const progressFailure = {};
+			const request = {
+				method: "PUT",
+				body: session.stream().pipeThrough(new TransformStream({ async transform(chunk, controller) {
+					bytes += chunk.byteLength;
+					try {
+						await onProgress?.(bytes);
+					} catch (cause) {
+						progressFailure.error = { cause };
+						throw cause;
+					}
+					controller.enqueue(chunk);
+				} })),
+				signal: uploadSignal,
+				dispatcher,
+				redirect: "error",
+				credentials: "omit",
+				referrerPolicy: "no-referrer",
+				headers: {
+					"content-type": "application/zip",
+					"content-length": String(session.byteLength),
+					...upload.headers
+				},
+				duplex: "half"
+			};
+			const response = await fetch(url, request).catch((error) => {
+				if (progressFailure.error) throw progressFailure.error.cause;
+				throw error;
+			});
+			await response.body?.cancel();
+			if (!response.ok) throw new JourneyRemoteError(response.status, "UPLOAD_FAILED", null, void 0, response.headers.get("retry-after") ?? void 0);
+		}
+	};
+}
+/** Own one live upload iterator; advancing it releases the preceding session ZIP. */
+async function prepareSessionArtifacts(storage, journeyId, artifact, signal, select = createSendExtensionSelection()) {
+	const source = sessionArtifacts(storage, journeyId, artifact, signal, select);
+	let closed = false;
+	async function* iterate() {
+		try {
+			yield* source;
+		} finally {
+			closed = true;
+		}
+	}
+	const items = iterate();
+	return {
+		items,
+		async close() {
+			if (closed) return;
+			closed = true;
+			await items.return(void 0);
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/journey/send-artifacts.ts
+function createJourneySendArtifacts(storage) {
+	const selection = createSendExtensionSelection();
+	return {
+		sessionFacts: (journeyId, artifact, signal) => sessionFacts(storage, journeyId, artifact, signal, selection),
+		prepareSessions: (journeyId, artifact, signal) => prepareSessionArtifacts(storage, journeyId, artifact, signal, selection),
+		sessions: (journeyId, artifact, signal) => sessionArtifacts(storage, journeyId, artifact, signal, selection),
+		async describe(journey, work, signal) {
+			const { output } = await storage.readSendOutput({
+				journeyId: journey.journeyId,
+				workId: work.id,
+				revision: work.revision,
+				sessions: false
+			});
+			const info = await readConfiguredOutputInfo(output.primary, signal);
+			if (info.work.id !== work.id || info.work.access !== work.access) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+			let agentSources = [];
+			try {
+				const base = (await storage.resources({
+					journeyId: journey.journeyId,
+					kind: "base",
+					id: `${work.id}:${output.finalMaskLedger.inputRevision}`
+				})).find((item) => item.kind === "base" && item.workId === work.id && item.inputRevision === output.finalMaskLedger.inputRevision && item.primary.sha256 === output.finalMaskLedger.basePrimarySha256);
+				if (base?.kind === "base") {
+					const ids = base.sessions.map((item) => staticSessionId({
+						workId: work.id,
+						inputRevision: base.inputRevision,
+						sessionId: item.applicationSessionId
+					}));
+					const included = new Set(base.sessions.map((item) => item.applicationSessionId));
+					const resources = ids.length ? await storage.resources({
+						journeyId: journey.journeyId,
+						kind: "static-session",
+						ids
+					}) : [];
+					const unique = /* @__PURE__ */ new Map();
+					for (const resource of resources) {
+						if (resource.kind !== "static-session" || resource.workId !== work.id || resource.inputRevision !== base.inputRevision || !included.has(resource.sessionId)) continue;
+						for (const candidate of resource.agentSources ?? []) {
+							const parsed = agentSourceSchema.safeParse(candidate);
+							if (parsed.success && unique.size < 500) unique.set(JSON.stringify(parsed.data), parsed.data);
+						}
+					}
+					agentSources = [...unique.values()];
+				}
+			} catch {
+				console.error("AGENT_SOURCES_METADATA_UNAVAILABLE");
+			}
+			return sendArtifactSchema.parse({
+				...agentSources.length === 0 ? {} : { agentSources },
+				workId: work.id,
+				revision: work.revision,
+				bundleId: info.manifest.bundleId,
+				createdAt: info.createdAt,
+				title: info.work.title,
+				sessionCount: info.sessionCount,
+				grouping: info.manifest.work.grouping,
+				sources: info.sources,
+				byteLength: output.primary.archiveBytes,
+				sha256: output.primary.sha256
+			});
+		},
+		async upload(journeyId, artifact, upload, signal) {
+			const { output } = await storage.readSendOutput({
+				journeyId,
+				workId: artifact.workId,
+				revision: artifact.revision,
+				sessions: false
+			});
+			if (output.bundleId !== artifact.bundleId || output.primary.sha256 !== artifact.sha256 || output.primary.archiveBytes !== artifact.byteLength || artifact.byteLength > 5368709120) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+			await putPrimary(output.primary, artifact.byteLength, upload, signal);
+		}
+	};
+}
+/**
+* Stream a verified primary to a signed HTTPS URL; shared by native Send and Manual upload. A
+* checksum upload also sends the SHA-256 header the URL signs, so storage refuses other bytes.
+*/
+async function putPrimary(primary, byteLength, upload, signal) {
+	const url = new URL(upload.uploadUrl);
+	if (url.protocol !== "https:" || url.username || url.password || url.hash) throw new ApplicationError("INVALID_ARGUMENTS");
+	const source = await openConfiguredUpload(primary, signal);
+	const cleanup = createCleanup();
+	try {
+		const request = {
+			method: "PUT",
+			body: source.stream,
+			signal,
+			redirect: "error",
+			headers: {
+				"Content-Type": "application/zip",
+				"Content-Length": String(byteLength),
+				...upload.headers
+			},
+			duplex: "half"
+		};
+		const result = await fetch(url, request);
+		await result.body?.cancel();
+		if (!result.ok) throw new ApplicationError("UPLOAD_FAILED");
+	} catch (error) {
+		cleanup.failed(error);
+		throw error;
+	} finally {
+		await cleanup.run(() => source.close());
 	}
-	return independent;
-}
-//#endregion
-//#region apps/cli/src/account/journey/receipt.ts
-function acceptReceipt(item, receipt) {
-	if (receipt.logicalWorkId !== item.workId || receipt.bundleId !== item.artifact.bundleId || receipt.outputRevision !== item.artifact.revision || receipt.sha256 !== item.artifact.sha256 || receipt.byteLength !== item.artifact.byteLength || receipt.access !== item.access || item.receipt !== null && (receipt.receiptId !== item.receipt.receiptId || receipt.scanId !== item.receipt.scanId || receipt.bindingId !== item.receipt.bindingId) || item.target?.kind === "existing" && receipt.bindingId !== item.target.bindingId) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
-	const { upload: _upload, ...saved } = receipt;
-	const success = receipt.state === "succeeded" && receipt.assessmentState === "succeeded" && receipt.passportIncluded && receipt.effectiveAccess === item.access;
-	const failure = [
-		"failed",
-		"partial",
-		"superseded"
-	].includes(receipt.state) || receipt.state === "succeeded" && !success;
-	return {
-		...item,
-		receipt: saved,
-		status: success ? "completed" : failure ? "blocked" : receipt.state === "awaiting_upload" ? "uploading" : "assessing",
-		error: failure ? receipt.state === "succeeded" ? "PASSPORT_NOT_CURRENT" : "ASSESSMENT_INCOMPLETE" : null
-	};
 }
 //#endregion
 //#region apps/cli/src/account/journey/protocol.ts
@@ -6520,6 +6964,7 @@ async function checkPublicAgentSources(candidates, requestFetch = fetch, signal)
 //#region apps/cli/src/account/journey/session-schema.ts
 const digest = z.string().regex(/^[0-9a-f]{64}$/u);
 const stored = z.strictObject({
+	metadataSha256: digest.nullable(),
 	key: digest,
 	sessionKey: z.string().regex(/^sess-pilot\/[^/]+\/[^/]+\/[^/]+$/u).nullable(),
 	sha256: digest,
@@ -6618,20 +7063,24 @@ function createSessionClient(request) {
 			let next = null;
 			const seen = /* @__PURE__ */ new Set();
 			const sessions = /* @__PURE__ */ new Map();
-			let value;
+			let access;
 			do {
 				const query = new URLSearchParams({ limit: "500" });
 				if (next !== null) query.set("cursor", next);
-				const page = await request(`/me/works/${encodeURIComponent(id)}/sessions?${query}`, work.extend({ nextCursor: cursor }).refine((item) => item.logicalWorkId === id), signal, void 0, "GET");
+				const page = await request(`/me/works/${encodeURIComponent(id)}/sessions?${query}`, work.extend({ nextCursor: cursor }).refine((item) => item.logicalWorkId === id), signal, void 0, "GET").catch((error) => {
+					if (next === null && error instanceof JourneyRemoteError && error.status === 404 && error.code === "not_found") return null;
+					throw error;
+				});
+				if (!page) return null;
 				for (const session of page.sessions) sessions.set(session.key, session);
-				value = {
-					logicalWorkId: page.logicalWorkId,
-					access: page.access,
-					sessions: [...sessions.values()]
-				};
+				access = page.access;
 				next = continuation(seen, page.nextCursor);
 			} while (next !== null);
-			return value;
+			return {
+				logicalWorkId: id,
+				access,
+				sessions: [...sessions.values()]
+			};
 		},
 		reserve: (input, signal) => request("/me/sessions/reserve", reserve, signal, input),
 		complete: (input, signal) => mutate(signal, () => request("/me/sessions/complete", z.strictObject({ state: z.literal("stored") }), signal, input, "POST", void 0, sessionRequestTimeoutMs, false, 200, "session")),
@@ -6752,6 +7201,21 @@ function createJourneyOwnerClient(options) {
 			const { headers } = await requestWithHeaders("/me/profile", publicProfileSchema, signal);
 			return { parallelCompletes: (headers.get("passport-capabilities") ?? "").split(",").some((token) => token.trim() === "parallel-completes") };
 		},
+		async ownedPassport(signal) {
+			const webOrigin = passportWebOrigin(options.apiUrl, options.webOrigin);
+			if (!webOrigin) throw new ApplicationError("ACCOUNT_PROFILE_UNAVAILABLE");
+			try {
+				const result = await request("/me/passport", z.strictObject({ publicId: sendReceiptSchema.shape.publicId }), signal, void 0, "GET");
+				return new URL("/" + result.publicId, webOrigin).href;
+			} catch (error) {
+				if (error instanceof JourneyRemoteError && error.status === 404 && error.code === "passport not found") {
+					await options.authorize();
+					signal.throwIfAborted();
+					return null;
+				}
+				throw error;
+			}
+		},
 		readProfile(signal) {
 			return request("/me/profile", ownerProfileSchema, signal, void 0, "GET");
 		},
@@ -6952,43 +7416,262 @@ async function resolveItem(item, bindingId, connection, signal, snapshot = false
 		status: "target",
 		error: null
 	};
-	if (!target) throw new ApplicationError("INVALID_STATE");
-	const targetId = target.kind === "existing" ? target.bindingId : null;
-	const candidate = resolution.candidates.find((value) => value.bindingId === targetId);
-	if (candidate && candidate.access !== item.access) {
-		const settings = await connection.preview(candidate.workId, item.access, signal);
-		return askSettings({
-			...item,
-			target,
-			resolution
-		}, settings, null, snapshot);
-	}
-	const agentSources = await connection.checkAgentSources?.(item.artifact.agentSources, signal);
-	signal.throwIfAborted();
+	if (!target) throw new ApplicationError("INVALID_STATE");
+	const targetId = target.kind === "existing" ? target.bindingId : null;
+	const candidate = resolution.candidates.find((value) => value.bindingId === targetId);
+	if (candidate && candidate.access !== item.access) {
+		const settings = await connection.preview(candidate.workId, item.access, signal);
+		return askSettings({
+			...item,
+			target,
+			resolution
+		}, settings, null, snapshot);
+	}
+	const agentSources = await connection.checkAgentSources?.(item.artifact.agentSources, signal);
+	signal.throwIfAborted();
+	return {
+		...item,
+		target,
+		resolution,
+		status: "uploading",
+		error: null,
+		reservation: {
+			...agentSources?.length ? { agentSources } : {},
+			work,
+			target,
+			bundleId: item.artifact.bundleId,
+			createdAt: item.artifact.createdAt,
+			title: item.artifact.title,
+			sessionCount: item.artifact.sessionCount,
+			access: item.access,
+			outputRevision: item.artifact.revision,
+			byteLength: item.artifact.byteLength,
+			sha256: item.artifact.sha256,
+			expectedAccessVersion: resolution.accessVersion,
+			expectedScopeVersion: resolution.scopeVersion
+		}
+	};
+}
+/** Keep only the current Send's pending assessment IDs. New arrivals wait behind unpolled peers. */
+function createAssessmentPoll() {
+	let owner = null;
+	let sendId;
+	let pending = [];
+	return (send, works) => {
+		const byId = new Map(works.map((work) => [work.workId, work]));
+		if (send.subject !== owner || send.id !== sendId) pending = [];
+		owner = send.subject;
+		sendId = send.id;
+		const order = new Set(pending.filter((id) => byId.has(id)));
+		for (const id of byId.keys()) order.add(id);
+		pending = [...order];
+		const selected = pending.splice(0, 3);
+		pending.push(...selected);
+		return selected.flatMap((id) => byId.get(id) ?? []);
+	};
+}
+const confirmedSettings = (item) => item.settings !== null && item.settingsConfirmed;
+const started = (item) => Number(item.status === "uploading");
+/**
+* Works that share a workspace path or a git remote: once one completes, Passport offers it as
+* the other's candidate, so the other's target no longer resolves the same (ADR 0235).
+*/
+function related(left, right) {
+	return left.artifact.sources.some((one) => right.artifact.sources.some((other) => one.pathHash !== null && one.pathHash === other.pathHash || one.remoteHashes.some((hash) => other.remoteHashes.includes(hash))));
+}
+/**
+* The Works one advance steps together. Upload work comes before assessment checks: up to three
+* Works, started uploads first, then the largest ZIP, so the slowest Work starts earliest.
+* Completing an upload moves the owner's scope version, which Passport accepts while a Work's
+* own target resolves the same (ADR 0235). A Work related to one already picked waits for the
+* next batch. A reserved Work whose target would not survive that steps alone, and so does a
+* confirmed linked Settings change, which moves the access version every reservation carries,
+* once no upload has started. Assessment checks change nothing and step up to three together.
+*/
+function pickBatch(items, limit, poll) {
+	const uploads = items.filter(sendsOnNextAdvance).toSorted((left, right) => started(right) - started(left) || right.artifact.byteLength - left.artifact.byteLength);
+	const alone = uploads.find((item) => item.status === "uploading" && item.reservation !== null && item.resolution !== null && !keepsTarget(item.resolution, item.reservation)) ?? (uploads[0] && confirmedSettings(uploads[0]) ? uploads[0] : void 0);
+	if (alone) return [alone];
+	if (uploads.length) return uploads.filter((item) => !confirmedSettings(item)).reduce((batch, item) => batch.length < limit && !batch.some((picked) => related(picked, item)) ? [...batch, item] : batch, []);
+	const assessing = items.filter((item) => item.status === "assessing");
+	const first = assessing[0];
+	if (!first) return [];
+	if (confirmedSettings(first)) return [first];
+	const checks = assessing.filter((item) => !confirmedSettings(item));
+	return poll ? poll(checks) : checks.slice(0, 3);
+}
+function isCode(error, code) {
+	return error instanceof ApplicationError && error.code === code;
+}
+/**
+* A step that ended without a definite answer and is safe to repeat: a request timeout or abort
+* that is not the Send's own cancellation, or a connection failure from `fetch`: `fetch failed`
+* before the response, `terminated` when the socket resets while the body is read. The Work keeps
+* its state, so the next advance repeats the same idempotent step (ADR 0197).
+*/
+function isInterrupted(error) {
+	if (!(error instanceof Error)) return false;
+	if (error.name === "TimeoutError" || error.name === "AbortError") return true;
+	return error instanceof TypeError && (error.message === "fetch failed" || error.message === "terminated");
+}
+//#endregion
+//#region apps/cli/src/account/journey/session-facts-cache.ts
+const keyFor = (journeyId, artifact) => JSON.stringify([
+	journeyId,
+	artifact.workId,
+	artifact.revision,
+	artifact.sha256
+]);
+/** Sender-owned facts only. In-flight computations never enter the bounded cache. */
+function createSessionFactsCache(limit = 256) {
+	const facts = /* @__PURE__ */ new Map();
+	let owner = "";
+	let generation = 0;
+	let allowed = /* @__PURE__ */ new Set();
+	return {
+		retain(journeyId, send) {
+			const nextOwner = JSON.stringify([journeyId, send?.id]);
+			const ended = !send || [
+				"completed",
+				"blocked",
+				"prepared"
+			].includes(send.status);
+			if (owner !== nextOwner || ended) {
+				facts.clear();
+				generation += 1;
+			}
+			owner = nextOwner;
+			allowed = new Set(ended || !send ? [] : send.items.filter((item) => !item.sessionAssembly && item.status !== "completed").map((item) => keyFor(journeyId, item.artifact)));
+			for (const key of facts.keys()) if (!allowed.has(key)) facts.delete(key);
+		},
+		async get(journeyId, artifact, signal, compute) {
+			signal.throwIfAborted();
+			const key = keyFor(journeyId, artifact);
+			const cached = facts.get(key);
+			if (cached) return cached;
+			const started = generation;
+			const items = await compute();
+			signal.throwIfAborted();
+			if (started === generation && allowed.has(key)) {
+				facts.set(key, items);
+				while (facts.size > limit) {
+					const oldest = facts.keys().next().value;
+					if (oldest === void 0) break;
+					facts.delete(oldest);
+				}
+			}
+			return items;
+		}
+	};
+}
+//#endregion
+//#region apps/cli/src/account/journey/session-preparation.ts
+/** Shared facts retain no bytes; only upload steps acquire phase-local live iterators. */
+function createSessionPreparation(dependencies, facts) {
+	const prepare = dependencies.artifacts.prepareSessions;
+	const prepared = [];
+	const sessions = async function* (journeyId, artifact, signal) {
+		if (!prepare) {
+			const original = dependencies.artifacts.sessions;
+			if (original) yield* original(journeyId, artifact, signal);
+			return;
+		}
+		const result = await prepare(journeyId, artifact, signal);
+		prepared.push(result);
+		for await (const item of result.items) {
+			signal.throwIfAborted();
+			yield item;
+		}
+	};
+	const sessionFacts = async function* (journeyId, artifact, signal) {
+		const items = await facts.get(journeyId, artifact, signal, async () => {
+			const original = dependencies.artifacts.sessionFacts ?? dependencies.artifacts.sessions;
+			const items = [];
+			if (original) for await (const item of original(journeyId, artifact, signal)) {
+				const { workerIdentity, nativeSessionId, relativePath, harness, lastAt, metadata, sha256, byteLength, crc32 } = item;
+				items.push({
+					...workerIdentity ? { workerIdentity } : {},
+					nativeSessionId,
+					relativePath,
+					harness,
+					lastAt,
+					metadata,
+					sha256,
+					byteLength,
+					crc32
+				});
+			}
+			return items;
+		});
+		for (const item of items) {
+			signal.throwIfAborted();
+			yield item;
+		}
+	};
 	return {
-		...item,
-		target,
-		resolution,
-		status: "uploading",
-		error: null,
-		reservation: {
-			...agentSources?.length ? { agentSources } : {},
-			work,
-			target,
-			bundleId: item.artifact.bundleId,
-			createdAt: item.artifact.createdAt,
-			title: item.artifact.title,
-			sessionCount: item.artifact.sessionCount,
-			access: item.access,
-			outputRevision: item.artifact.revision,
-			byteLength: item.artifact.byteLength,
-			sha256: item.artifact.sha256,
-			expectedAccessVersion: resolution.accessVersion,
-			expectedScopeVersion: resolution.scopeVersion
+		dependencies: {
+			...dependencies,
+			artifacts: {
+				...dependencies.artifacts,
+				sessions,
+				sessionFacts
+			}
+		},
+		async close() {
+			await createCleanup().run(...prepared.map((result) => () => result.close()));
 		}
 	};
 }
 //#endregion
+//#region apps/cli/src/account/journey/session-metadata.ts
+/** The owner API uses this exact tuple; object key insertion order is not a wire dependency. */
+function sessionMetadataSha256(metadata) {
+	return createHash("sha256").update(JSON.stringify([
+		metadata.workspace.title,
+		metadata.workspace.pathHash,
+		metadata.workspace.remoteHashes,
+		metadata.workspace.primaryRemoteHash,
+		metadata.sourceSessionId,
+		metadata.harness,
+		metadata.lastAt,
+		metadata.parts.map((part) => [
+			part.path,
+			part.byteLength,
+			part.sha256,
+			part.crc32,
+			[
+				part.native.role,
+				part.native.sessionId,
+				part.native.agentId,
+				part.native.dispatchParentSessionId,
+				part.native.fork ? [
+					part.native.fork.parentSessionId,
+					part.native.fork.position.kind,
+					part.native.fork.position.value
+				] : null
+			]
+		])
+	])).digest("hex");
+}
+//#endregion
+//#region apps/cli/src/account/journey/receipt.ts
+function acceptReceipt(item, receipt) {
+	if (receipt.logicalWorkId !== item.workId || receipt.bundleId !== item.artifact.bundleId || receipt.outputRevision !== item.artifact.revision || receipt.sha256 !== item.artifact.sha256 || receipt.byteLength !== item.artifact.byteLength || receipt.access !== item.access || item.receipt !== null && (receipt.receiptId !== item.receipt.receiptId || receipt.scanId !== item.receipt.scanId || receipt.bindingId !== item.receipt.bindingId) || item.target?.kind === "existing" && receipt.bindingId !== item.target.bindingId) throw new ApplicationError("ARTIFACT_IDENTITY_MISMATCH");
+	const { upload: _upload, ...saved } = receipt;
+	const success = receipt.state === "succeeded" && receipt.assessmentState === "succeeded" && receipt.passportIncluded && receipt.effectiveAccess === item.access;
+	const failure = [
+		"failed",
+		"partial",
+		"superseded"
+	].includes(receipt.state) || receipt.state === "succeeded" && !success;
+	return {
+		...item,
+		receipt: saved,
+		status: success ? "completed" : failure ? "blocked" : receipt.state === "awaiting_upload" ? "uploading" : "assessing",
+		error: failure ? receipt.state === "succeeded" ? "PASSPORT_NOT_CURRENT" : "ASSESSMENT_INCOMPLETE" : null
+	};
+}
+//#endregion
 //#region apps/cli/src/account/journey/step.ts
 async function observe(item, receipt, connection, signal, auto) {
 	const observed = acceptReceipt(item, receipt);
@@ -7147,51 +7830,6 @@ function renewed(item, error) {
 		error
 	};
 }
-const confirmedSettings = (item) => item.settings !== null && item.settingsConfirmed;
-const started = (item) => Number(item.status === "uploading");
-/**
-* Works that share a workspace path or a git remote: once one completes, Passport offers it as
-* the other's candidate, so the other's target no longer resolves the same (ADR 0235).
-*/
-function related(left, right) {
-	return left.artifact.sources.some((one) => right.artifact.sources.some((other) => one.pathHash !== null && one.pathHash === other.pathHash || one.remoteHashes.some((hash) => other.remoteHashes.includes(hash))));
-}
-/**
-* The Works one advance steps together. Upload work comes before assessment checks: up to three
-* Works, started uploads first, then the largest ZIP, so the slowest Work starts earliest.
-* Completing an upload moves the owner's scope version, which Passport accepts while a Work's
-* own target resolves the same (ADR 0235). A Work related to one already picked waits for the
-* next batch. A reserved Work whose target would not survive that steps alone, and so does a
-* confirmed linked Settings change, which moves the access version every reservation carries,
-* once no upload has started. Assessment checks change nothing and step up to three together.
-*/
-function pickBatch(items, now, limit) {
-	const uploads = items.filter((item) => item.status === "uploading" || item.status === "ready").toSorted((left, right) => started(right) - started(left) || right.artifact.byteLength - left.artifact.byteLength);
-	const alone = uploads.find((item) => item.status === "uploading" && item.reservation !== null && item.resolution !== null && !keepsTarget(item.resolution, item.reservation)) ?? (uploads[0] && confirmedSettings(uploads[0]) ? uploads[0] : void 0);
-	if (alone) return [alone];
-	if (uploads.length) return uploads.filter((item) => !confirmedSettings(item)).reduce((batch, item) => batch.length < limit && !batch.some((picked) => related(picked, item)) ? [...batch, item] : batch, []);
-	const assessing = items.filter((item) => item.status === "assessing");
-	const first = assessing[0];
-	if (!first) return [];
-	if (confirmedSettings(first)) return [first];
-	const checks = assessing.filter((item) => !confirmedSettings(item));
-	const start = Math.floor(now / 1e3) * 3 % checks.length;
-	return [...checks.slice(start), ...checks.slice(0, start)].slice(0, 3);
-}
-function isCode(error, code) {
-	return error instanceof ApplicationError && error.code === code;
-}
-/**
-* A step that ended without a definite answer and is safe to repeat: a request timeout or abort
-* that is not the Send's own cancellation, or a connection failure from `fetch`: `fetch failed`
-* before the response, `terminated` when the socket resets while the body is read. The Work keeps
-* its state, so the next advance repeats the same idempotent step (ADR 0197).
-*/
-function isInterrupted(error) {
-	if (!(error instanceof Error)) return false;
-	if (error.name === "TimeoutError" || error.name === "AbortError") return true;
-	return error instanceof TypeError && (error.message === "fetch failed" || error.message === "terminated");
-}
 const sessionBackoffMs = (attempt) => 1e3 * 2 ** (attempt - 1);
 const zeroByteBackoffMs = (count) => [
 	15e3,
@@ -7206,7 +7844,7 @@ function retryDelay(error, fallback, now) {
 	return Number.isFinite(delay) ? Math.max(fallback, delay) : fallback;
 }
 /** Reconcile retained intents; only byte-started failures charge the durable budget. */
-async function attemptSession({ dependencies, original, session, key, remote, signal, guard, checkpoint }) {
+async function attemptSession({ dependencies, original, countCompletion, session, key, remote, signal, guard, checkpoint }) {
 	const previous = original.sessionUpload?.key === key && original.sessionUpload.sha256 === session.sha256 ? original.sessionUpload : null;
 	let failures = previous?.attempt ?? 0;
 	let retryCount = previous?.retryCount ?? 0;
@@ -7259,12 +7897,12 @@ async function attemptSession({ dependencies, original, session, key, remote, si
 					lastReported = Date.now();
 				}
 			});
-			await guard();
-			await remote.complete({
-				...input,
-				metadata: session.metadata
-			}, signal);
 		}
+		await guard();
+		await remote.complete({
+			...input,
+			metadata: session.metadata
+		}, signal);
 	};
 	try {
 		if (previous === null) await reserveUploadComplete();
@@ -7278,6 +7916,10 @@ async function attemptSession({ dependencies, original, session, key, remote, si
 			if (failures >= 3) throw new ApplicationError("SESSION_UPLOAD_EXHAUSTED");
 			await reserveUploadComplete();
 		}
+		if (countCompletion) item = {
+			...item,
+			storedSessions: (original.storedSessions ?? 0) + 1
+		};
 		transfer.bytesAcknowledged = session.byteLength;
 		await guard();
 		await save();
@@ -7317,6 +7959,7 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 	if (!item.sessionAssembly && (item.status !== "uploading" || item.receipt || item.reservation)) return {
 		...item,
 		receipt: null,
+		storedSessions: item.sessionMembership ? item.storedSessions : 0,
 		reservation: null,
 		target: null,
 		previousReceipts: item.receipt ? [...item.previousReceipts, item.receipt] : item.previousReceipts,
@@ -7350,7 +7993,7 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 		const intent = item.sessionMembership;
 		const assembly = await remote.assembly(intent.workId, signal);
 		const conflict = async () => {
-			const current = await remote.inventory(signal);
+			const current = await remote.work(intent.workId, signal);
 			const revision = await remote.assembly(intent.workId, signal);
 			await guard();
 			return {
@@ -7359,7 +8002,7 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 				error: "SESSION_MEMBERSHIP_CONFLICT",
 				membershipConflict: {
 					revision: revision?.revision ?? 0,
-					keys: current.works.find((work) => work.logicalWorkId === intent.workId)?.sessions.map((session) => session.key) ?? []
+					keys: current?.sessions.map((session) => session.key) ?? []
 				}
 			};
 		};
@@ -7376,7 +8019,7 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 			const { workId, ...input } = intent;
 			const result = await remote.membership(workId, input, signal);
 			await guard();
-			if (migrate) {
+			if (migrate || item.sessionMembershipMetadataVersion !== 1) {
 				const { sessionMembership: _, ...rest } = item;
 				return {
 					...rest,
@@ -7394,6 +8037,7 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 				error: null
 			};
 		} catch (error) {
+			if (error instanceof JourneyRemoteError && error.status === 413 && error.code === "work_session_capacity_exceeded") throw new ApplicationError("WORK_SESSION_CAPACITY_EXCEEDED");
 			if (error instanceof JourneyRemoteError && error.status === 409) return conflict();
 			throw error;
 		}
@@ -7412,21 +8056,30 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 		}
 	}
 	const ownKeys = /* @__PURE__ */ new Set();
+	if (!recoverLegacy) item = {
+		...item,
+		storedSessions: 0
+	};
 	for await (const session of sessions(journeyId, item.artifact, signal)) {
 		const identity = await keys.add(session);
 		ownKeys.add(identity.key);
 		if (recoverLegacy && (identity.legacyKey !== pending?.key || session.sha256 !== pending?.sha256)) continue;
 		const key = recoverLegacy && pending ? pending.key : identity.key;
-		if (stored.get(key)?.sha256 === session.sha256) {
+		if (stored.get(key)?.sha256 === session.sha256 && stored.get(key)?.metadataSha256 === sessionMetadataSha256(session.metadata)) {
 			if (recoverLegacy) return {
 				...item,
 				sessionUpload: null
 			};
+			item = {
+				...item,
+				storedSessions: (item.storedSessions ?? 0) + 1
+			};
 			continue;
 		}
 		item = await attemptSession({
 			dependencies,
 			original: item,
+			countCompletion: !recoverLegacy,
 			session,
 			key,
 			remote,
@@ -7438,7 +8091,7 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 	}
 	await guard();
 	const assembly = await remote.assembly(item.workId, signal);
-	const current = (await remote.inventory(signal)).works.find((work) => work.logicalWorkId === item.workId);
+	const current = await remote.work(item.workId, signal);
 	if (current && current.access !== item.access) {
 		if (current.access === "removed") throw new ApplicationError("WORK_REMOVED");
 		const [ownKey] = ownKeys;
@@ -7463,6 +8116,7 @@ async function stepSessionWork(dependencies, journeyId, context, item, connectio
 		...item,
 		sessionUpload: null,
 		sessionMembershipKeyVersion: 2,
+		sessionMembershipMetadataVersion: 1,
 		sessionMembership: {
 			workId: item.workId,
 			expectedRevision: assembly?.revision ?? 0,
@@ -7505,6 +8159,35 @@ async function saveSend(dependencies, snapshot, next, action, expectedJourneyRev
 		at: dependencies.now()
 	});
 }
+/** This transaction changes only the supplied transfer fields and durable cursor. */
+async function saveTransfer(dependencies, current, workId, patch) {
+	const progress = await dependencies.storage.checkpointTransfer({
+		journeyId: current.journey.journeyId,
+		sendId: current.send.id,
+		workId,
+		expectedJourneyRevision: current.journey.revision,
+		expectedSendRevision: current.send.revision,
+		requestKey: randomUUID(),
+		at: dependencies.now(),
+		...patch
+	});
+	if (progress.status !== "applied") throw new ApplicationError("REVISION_CONFLICT");
+	return {
+		journey: {
+			...current.journey,
+			revision: progress.revision,
+			lastEvent: progress.lastEvent
+		},
+		send: {
+			...current.send,
+			revision: progress.sendRevision,
+			items: current.send.items.map((item) => item.workId === workId ? {
+				...item,
+				...patch
+			} : item)
+		}
+	};
+}
 function aggregate(send) {
 	if (send.status === "paused") return send;
 	const statuses = send.items.map((item) => item.status);
@@ -7513,17 +8196,6 @@ function aggregate(send) {
 		status: statuses.length === 0 ? "blocked" : statuses.every((status) => status === "completed") ? "completed" : statuses.some((status) => status === "target" || status === "settings") ? "review" : statuses.some((status) => status === "ready" || status === "uploading") ? "sending" : statuses.some((status) => status === "assessing") ? "waiting" : "blocked"
 	};
 }
-/**
-* A completed Send that Passport has not finished with: a Work is still assessed or reapplied
-* (ADR 0233). A blocked Work waits on the person's Retry, not on Passport.
-*/
-function awaitingPassport(send) {
-	return send.status === "completed" && send.items.some((item) => !["completed", "blocked"].includes(item.status));
-}
-/** The host continues confirmed uploads and unfinished Passport assessments without a panel. */
-function hostDrives(send) {
-	return awaitingPassport(send) || send.confirmedAt != null && ["sending", "waiting"].includes(send.status);
-}
 /** Explicit resume retries recoverable items and recaptures a pending sign-in or profile. */
 function resumeState(send) {
 	if (send.status !== "completed" && send.items.length && send.items.every((item) => item.status === "completed") && send.items.some((item) => !item.sessionAssembly)) return {
@@ -7652,15 +8324,126 @@ async function captureProfile(connection, guard, signal, failure) {
 	}
 }
 //#endregion
+//#region apps/cli/src/account/journey/remote-guard.ts
+/**
+* The class of every method. Adding a method to either remote without classifying it here fails
+* the type check, and the guarded remote exposes only the methods named below.
+*/
+const connectionClasses = {
+	assertCurrent: "read",
+	syncProfile: "profile-sync",
+	readProfile: "read",
+	addressTaken: "read",
+	status: "read",
+	checkAgentSources: "agent-sources-check",
+	resolve: "work-resolve",
+	preview: "settings-preview",
+	confirm: "settings-confirm",
+	reserve: "work-reserve",
+	complete: "work-complete",
+	replace: "works-replace",
+	saveProfile: "profile-save",
+	ownedPassport: "read"
+};
+const sessionClasses = {
+	inventory: "read",
+	assessment: "read",
+	work: "session-work",
+	assembly: "session-assembly",
+	reserve: "session-reserve",
+	complete: "session-complete",
+	membership: "session-membership"
+};
+/**
+* The one place that decides whether a Send-path call may send something about the person's
+* work (ADR 0284). Rules of this kind belong here, never in a caller; `mutation` is for the
+* rules to come.
+*/
+function assertMayLeave(scope, mutation) {
+	if (!mayLeave(scope, mutation)) throw new ApplicationError("JOURNEY_OBSOLETE");
+}
+/** `assertMayLeave` as a question, for a caller that must skip what the guard would refuse. */
+function mayLeave(scope, _mutation) {
+	const atPassport = scope.item ? itemAtPassport(scope.item) : scope.send?.items.some(itemAtPassport) ?? false;
+	return !(scope.journey && obsoleteJourney(scope.journey) && !atPassport);
+}
+/**
+* The remote a Send uses, closed by default: it holds only the methods classified above. A read
+* passes through; every other method asks `assertMayLeave` first. A refusal rejects like a failed
+* remote call, so the advance blocks only that Work.
+*/
+function guardSendRemote(connection, scope) {
+	const through = (kind, call) => kind === "read" ? call : (...args) => guardedSendMutation(scope, kind, () => call(...args));
+	const work = connectionClasses;
+	const { sessions, checkAgentSources } = connection;
+	return {
+		subject: connection.subject,
+		assertCurrent: through(work.assertCurrent, connection.assertCurrent),
+		syncProfile: through(work.syncProfile, connection.syncProfile),
+		readProfile: through(work.readProfile, connection.readProfile),
+		addressTaken: through(work.addressTaken, connection.addressTaken),
+		status: through(work.status, connection.status),
+		resolve: through(work.resolve, connection.resolve),
+		preview: through(work.preview, connection.preview),
+		confirm: through(work.confirm, connection.confirm),
+		reserve: through(work.reserve, connection.reserve),
+		complete: through(work.complete, connection.complete),
+		replace: through(work.replace, connection.replace),
+		saveProfile: through(work.saveProfile, connection.saveProfile),
+		ownedPassport: through(work.ownedPassport, connection.ownedPassport),
+		...checkAgentSources ? { checkAgentSources: through(work.checkAgentSources, checkAgentSources) } : {},
+		...sessions ? { sessions: {
+			inventory: through(sessionClasses.inventory, sessions.inventory),
+			assessment: through(sessionClasses.assessment, sessions.assessment),
+			work: through(sessionClasses.work, sessions.work),
+			assembly: through(sessionClasses.assembly, sessions.assembly),
+			reserve: through(sessionClasses.reserve, sessions.reserve),
+			complete: through(sessionClasses.complete, sessions.complete),
+			membership: through(sessionClasses.membership, sessions.membership)
+		} } : {}
+	};
+}
+/** A guarded call that is not a remote method: the byte upload to a signed address. */
+function guardSendCall(scope, mutation, call) {
+	return guardedSendMutation(scope, mutation, call);
+}
+/** Each session's byte upload to a signed address asks the guard too (ADR 0284). */
+function guardSessionUploads(sessions, scope) {
+	return async function* (journeyId, artifact, signal) {
+		for await (const session of sessions(journeyId, artifact, signal)) yield {
+			...session,
+			upload: (upload, uploadSignal, progress) => guardedSendMutation(scope, "session-upload", () => session.upload(upload, uploadSignal, progress))
+		};
+	};
+}
+/** Named so a test can tell a guarded call from one that bypassed the guard. */
+function guardedSendMutation(scope, mutation, call) {
+	try {
+		assertMayLeave(scope, mutation);
+	} catch (error) {
+		return Promise.reject(error);
+	}
+	return call();
+}
+//#endregion
 //#region apps/cli/src/account/journey/advance.ts
 /** A Work Passport is done with: assessed, or stopped unless Resume retries it. */
 const settled = (item) => ["completed", "blocked"].includes(item.status);
+/** The byte upload to a signed address is a guarded call too (ADR 0284). */
+function guardedContext(context, scope, checksumUploads) {
+	const upload = context.upload;
+	return {
+		...context,
+		checksumUploads,
+		upload: (artifact, signed, signal) => guardSendCall(scope, "work-upload", () => upload(artifact, signed, signal))
+	};
+}
 /** Stored state equality: key order and explicit undefined fields do not count. */
 const sameJson = (left, right) => isDeepStrictEqual(JSON.parse(JSON.stringify(left)), JSON.parse(JSON.stringify(right)));
 /** The stored Send still holds exactly this Work state, whatever else changed meanwhile. */
 function sameItem(items, item) {
 	const current = items.find((value) => value.workId === item.workId);
-	return current !== void 0 && sameJson(current, item);
+	return current === item || current !== void 0 && sameJson(current, item);
 }
 /** Shared sign-in, account and per-item rules for native Send and Manual upload. */
 async function advanceItems(host, signal) {
@@ -7702,7 +8485,7 @@ async function advanceItems(host, signal) {
 			});
 		}
 		if (send.subject === null || send.status === "sign-in") {
-			const { parallelCompletes: captured, ...profile } = await host.profile(connection, signal);
+			const { parallelCompletes: captured, ...profile } = await host.profile(guardSendRemote(connection, host.scope(null)), signal);
 			const parallelCompletes = send.subject === null ? captured : send.parallelCompletes && captured;
 			const prepared = {
 				...send,
@@ -7713,17 +8496,16 @@ async function advanceItems(host, signal) {
 			else delete prepared.parallelCompletes;
 			return host.save(prepared.status === "sending" ? aggregate(prepared) : prepared);
 		}
-		const blocked = await host.preflight?.(connection, signal);
+		const blocked = await host.preflight?.(guardSendRemote(connection, host.scope(null)), signal);
 		if (blocked) return blocked;
-		const batch = host.batch?.() ?? pickBatch(send.items, Date.now(), send.parallelCompletes ? 3 : 1);
+		const batch = host.batch?.() ?? pickBatch(send.items, send.parallelCompletes ? 3 : 1, host.poll?.bind(void 0, send));
 		if (!batch.length) return host.applied();
 		const busy = Math.max(0, ...batch.map((item) => item.busyRefusals ?? 0));
 		if (busy) await wait(busyDelay(busy), signal);
 		const checksumUploads = !send.items.some((item) => item.checksumUploadRefused);
-		const results = await Promise.allSettled(batch.map((item) => (host.step ?? stepItem)({
-			...host.context(item),
-			checksumUploads
-		}, item, connection, signal)));
+		const run = (item) => (host.step ?? stepItem)(guardedContext(host.context(item), host.scope(item), checksumUploads), item, guardSendRemote(connection, host.scope(item)), signal);
+		const refill = host.refill;
+		const results = refill && batch.length > 3 ? await runSessionQueue(batch, run, () => refill(guardSendRemote(connection, host.scope(null)), signal), signal) : await Promise.allSettled(batch.map(run));
 		const failures = results.flatMap((result) => result.status === "rejected" ? [result] : []);
 		if (failures.some(({ reason }) => isCode(reason, "REVISION_CONFLICT") || isCode(reason, "SEND_SCOPE_INVALIDATED"))) return host.stale();
 		const first = failures[0];
@@ -7734,7 +8516,7 @@ async function advanceItems(host, signal) {
 		const next = /* @__PURE__ */ new Map();
 		for (const [index, result] of results.entries()) {
 			const item = batch[index];
-			if (!item) continue;
+			if (!item || !result) continue;
 			if (result.status === "fulfilled") {
 				next.set(item.workId, result.value);
 				continue;
@@ -7803,6 +8585,44 @@ async function advanceItems(host, signal) {
 		return blockSend(host, error, signal);
 	}
 }
+/** Every queued Work was admitted as independent at preflight. Recheck delayed slots before use. */
+async function runSessionQueue(batch, run, admit, signal) {
+	const results = [];
+	let next = 0;
+	let stopped = false;
+	let admission;
+	async function worker() {
+		while (!stopped && next < batch.length) {
+			const index = next++;
+			const item = batch[index];
+			if (!item) return;
+			try {
+				if (index >= 3) {
+					admission ??= admit().finally(() => {
+						admission = void 0;
+					});
+					if (!await admission) stopped = true;
+					if (stopped) return;
+				}
+				signal.throwIfAborted();
+				const value = await run(item);
+				results[index] = {
+					status: "fulfilled",
+					value
+				};
+				if (value.status === "blocked") stopped = true;
+			} catch (reason) {
+				stopped = true;
+				results[index] = {
+					status: "rejected",
+					reason
+				};
+			}
+		}
+	}
+	await Promise.all(Array.from({ length: 3 }, worker));
+	return results;
+}
 /** An unexpected failure blocks the whole send with a safe code; abort keeps propagating. */
 function blockSend(host, error, signal) {
 	if (signal.aborted) throw error;
@@ -7846,35 +8666,47 @@ function completeAtUpload(send, sessions) {
 }
 async function advanceSend(dependencies, address, signal, chain) {
 	let snapshot = requireSend(await dependencies.storage.loadSend(address.journeyId, address.sendId));
-	const sessionFacts = chain?.sessionFacts ?? createSessionFactsCache();
+	const sessionFacts = chain.sessionFacts;
 	sessionFacts.retain(address.journeyId, snapshot.send);
-	if (chain) chain.revision = snapshot.send.revision;
+	chain.revision = snapshot.send.revision;
 	if ((await dependencies.storage.loadSend(address.journeyId))?.send?.id !== snapshot.send.id) return {
 		...snapshot,
 		status: "stale"
 	};
 	const completed = snapshot.send.status === "completed";
-	if (snapshot.journey.phase === "paused" || !snapshot.send.confirmedAt || ["paused", "prepared"].includes(snapshot.send.status) || completed && snapshot.send.items.every(settled)) return {
+	if (!advanceStepsSend(snapshot.journey, snapshot.send)) return {
 		...snapshot,
 		status: "applied"
 	};
 	const checkpoints = /* @__PURE__ */ new Map();
 	const fulfilled = /* @__PURE__ */ new Set();
 	let saving = Promise.resolve();
+	let validated;
 	async function active(item) {
-		const current = requireSend(await dependencies.storage.loadSend(address.journeyId));
-		if (current.send.id !== snapshot.send.id || !sameItem(current.send.items, checkpoints.get(item.workId) ?? item) || current.send.status === "paused" || current.journey.phase === "paused") throw new ApplicationError("REVISION_CONFLICT");
-		assertScope(current.journey, current.send);
+		const observed = snapshot;
+		const isCurrent = (candidate) => dependencies.storage.isCurrentSend(address.journeyId, candidate.send.id, candidate.journey.revision);
+		let current = observed;
+		if (!await isCurrent(observed)) {
+			current = requireSend(await dependencies.storage.loadSend(address.journeyId));
+			if (current.send.id !== observed.send.id || !await isCurrent(current)) throw new ApplicationError("REVISION_CONFLICT");
+		}
+		if (!sameItem(current.send.items, checkpoints.get(item.workId) ?? item) || current.send.status === "paused" || current.journey.phase === "paused") throw new ApplicationError("REVISION_CONFLICT");
+		if (current !== validated) {
+			assertScope(current.journey, current.send);
+			validated = current;
+		}
 		return current;
 	}
 	const save = (proposed) => {
 		const next = {
 			...proposed,
+			error: proposed.status === "blocked" && !proposed.error && proposed.contentConflict && proposed.items.some((item) => item.error === "SESSION_CONTENT_CONFLICT") ? "SESSION_CONTENT_CONFLICT" : proposed.error,
 			items: proposed.items.map((item) => {
 				const checkpoint = checkpoints.get(item.workId);
 				return checkpoint && !fulfilled.has(item.workId) ? {
 					...checkpoint,
 					...item,
+					...checkpoint.storedSessions !== void 0 ? { storedSessions: checkpoint.storedSessions } : {},
 					sessionUpload: checkpoint.sessionUpload
 				} : item;
 			})
@@ -7890,6 +8722,7 @@ async function advanceSend(dependencies, address, signal, chain) {
 	const send = withoutQuestions(snapshot.send);
 	try {
 		assertScope(snapshot.journey, snapshot.send);
+		validated = snapshot;
 	} catch (error) {
 		if (completed) return save({
 			...snapshot.send,
@@ -7925,24 +8758,83 @@ async function advanceSend(dependencies, address, signal, chain) {
 	};
 	if (send !== snapshot.send) return save(send);
 	let independentItems = [];
+	let queuedIds = [];
 	const preparation = createSessionPreparation(dependencies, sessionFacts);
+	const sessionStepDependencies = (item) => {
+		const { artifacts } = preparation.dependencies;
+		if (!artifacts.sessions) return preparation.dependencies;
+		const scope = {
+			journey: snapshot.journey,
+			send: snapshot.send,
+			item
+		};
+		return {
+			...preparation.dependencies,
+			artifacts: {
+				...artifacts,
+				sessions: guardSessionUploads(artifacts.sessions, scope)
+			}
+		};
+	};
+	let queueActive = false;
+	async function readAdmission(connection, currentItems, signal) {
+		if (!connection.sessions) throw new ApplicationError("INVALID_STATE");
+		const inventory = await connection.sessions.inventory(signal);
+		const conflicts = await sessionAccessBlocked(preparation.dependencies, snapshot.journey.journeyId, currentItems, inventory, signal);
+		return {
+			conflicts,
+			independent: conflicts.length ? [] : await sessionIndependentItems(preparation.dependencies, snapshot.journey.journeyId, currentItems, inventory, signal)
+		};
+	}
+	let stopObservation;
 	const cleanup = createCleanup();
 	try {
 		return await advanceItems({
 			send,
+			poll: chain.poll,
 			failure: dependencies.failure,
 			...usesSessionSend(dependencies, send) ? {
 				batch: () => {
 					const limit = send.parallelCompletes ? 3 : 1;
-					return independentItems.length ? pickBatch(independentItems, Date.now(), limit) : pickBatch(send.items, Date.now(), limit);
+					const candidates = independentItems.length ? independentItems : send.items;
+					const planned = pickBatch(candidates, limit === 3 && independentItems.length ? candidates.length : limit, (works) => chain.poll(send, works));
+					queueActive = limit === 3 && planned.length > limit && planned.some((item) => item.status === "uploading") && planned.every((item) => !item.busyRefusals && !item.sessionUpload?.nextAttemptAt);
+					if (queueActive) queuedIds = planned.map((item) => item.workId);
+					return queueActive ? planned : planned.slice(0, limit);
 				},
 				preflight: async (connection, preflightSignal) => {
 					if (!connection.sessions) throw new ApplicationError("INVALID_STATE");
-					if (!send.items.some((item) => item.status === "uploading" && !item.sessionAssembly && !item.receipt && !item.reservation)) return null;
-					const inventory = await connection.sessions.inventory(preflightSignal);
-					const conflicts = await sessionAccessBlocked(preparation.dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal);
-					if (conflicts.length === 0) {
-						independentItems = await sessionIndependentItems(preparation.dependencies, snapshot.journey.journeyId, send.items, inventory, preflightSignal);
+					const checked = send.items.filter((item) => mayLeave({
+						journey: snapshot.journey,
+						send: snapshot.send,
+						item
+					}, "session-membership"));
+					if (!checked.some((item) => item.status === "uploading" && !item.sessionAssembly && !item.receipt && !item.reservation)) return null;
+					let admission;
+					try {
+						admission = await readAdmission(connection, checked, preflightSignal);
+					} catch (error) {
+						if (!(error instanceof SessionContentConflict)) throw error;
+						await connection.assertCurrent(preflightSignal);
+						dependencies.failure(error.code, error);
+						const items = send.items.map((item) => error.affectedWorkIds.has(item.workId) && !["completed", "blocked"].includes(item.status) && !item.sessionAssembly ? {
+							...item,
+							status: "blocked",
+							error: error.code
+						} : item);
+						const next = aggregate({
+							...send,
+							items,
+							contentConflict: error.contentConflict
+						});
+						return save({
+							...next,
+							error: next.status === "blocked" ? error.code : null
+						});
+					}
+					const { conflicts, independent } = admission;
+					if (!conflicts.length) {
+						independentItems = independent;
 						return null;
 					}
 					await connection.assertCurrent(preflightSignal);
@@ -7962,6 +8854,7 @@ async function advanceSend(dependencies, address, signal, chain) {
 							const { accessConflict: _previous, accessConflictSessionCount: _count, ...current } = item;
 							const itemConflicts = conflicts.filter((entry) => entry.workId === item.workId);
 							const conflict = itemConflicts.find((entry) => entry.accountAccess !== null) ?? itemConflicts[0];
+							if (item.status === "blocked" && item.error === "SESSION_CONTENT_CONFLICT") return item;
 							if (!conflict) return {
 								...current,
 								status: "blocked",
@@ -7978,35 +8871,74 @@ async function advanceSend(dependencies, address, signal, chain) {
 						})
 					});
 				},
-				step: (context, item, connection, stepSignal) => stepSessionWork(preparation.dependencies, snapshot.journey.journeyId, context, item, connection, stepSignal, (next) => {
-					const pending = saving.then(async () => {
-						const current = await active(item);
-						if (current.send.revision !== snapshot.send.revision || current.journey.revision !== snapshot.journey.revision) throw new ApplicationError("REVISION_CONFLICT");
-						stepSignal.throwIfAborted();
-						const result = await saveSend(dependencies, current, {
-							...current.send,
-							items: current.send.items.map((value) => value.workId === next.workId ? next : value)
-						});
-						if (result.status === "stale") throw new ApplicationError("REVISION_CONFLICT");
-						snapshot = requireSend(result);
-						const saved = snapshot.send.items.find((value) => value.workId === next.workId);
-						if (!saved) throw new ApplicationError("INVALID_STATE");
-						checkpoints.set(next.workId, saved);
+				refill: async (connection, refillSignal) => {
+					let checked;
+					try {
+						checked = await readAdmission(connection, snapshot.send.items, refillSignal);
+					} catch {
+						refillSignal.throwIfAborted();
+						return false;
+					}
+					return !checked.conflicts.length && queuedIds.every((workId) => {
+						return snapshot.send.items.find((entry) => entry.workId === workId)?.sessionAssembly || checked.independent.some((entry) => entry.workId === workId);
 					});
-					saving = pending.catch(() => void 0);
-					return pending;
-				}).then(({ busyRefusals: _busy, ...result }) => {
+				},
+				step: async (context, item, connection, stepSignal) => {
+					if (!stopObservation && (item.status === "ready" || item.status === "uploading")) stopObservation = dependencies.observeUpload?.(connection, () => snapshot.send, stepSignal);
+					const checkpoint = (next, transfer = false) => {
+						const pending = saving.then(async () => {
+							const current = await active(item);
+							if (current.send.revision !== snapshot.send.revision || current.journey.revision !== snapshot.journey.revision) throw new ApplicationError("REVISION_CONFLICT");
+							stepSignal.throwIfAborted();
+							if (transfer && next.sessionUpload) {
+								snapshot = await saveTransfer(dependencies, current, next.workId, {
+									sessionUpload: next.sessionUpload,
+									...next.storedSessions === void 0 ? {} : { storedSessions: next.storedSessions }
+								});
+								validated = snapshot;
+							} else {
+								const result = await saveSend(dependencies, current, {
+									...current.send,
+									items: current.send.items.map((value) => value.workId === next.workId ? next : value)
+								});
+								if (result.status === "stale") throw new ApplicationError("REVISION_CONFLICT");
+								snapshot = requireSend(result);
+							}
+							const saved = snapshot.send.items.find((value) => value.workId === next.workId);
+							if (!saved) throw new ApplicationError("INVALID_STATE");
+							checkpoints.set(next.workId, saved);
+						});
+						saving = pending.catch(() => void 0);
+						return pending;
+					};
+					const step = (current) => stepSessionWork(sessionStepDependencies(current), snapshot.journey.journeyId, context, current, connection, stepSignal, (next) => checkpoint(next, true));
+					let result = await step(item);
+					if (queueActive && item.status === "ready" && result.status === "uploading" && mayLeave({
+						journey: snapshot.journey,
+						send: snapshot.send,
+						item: result
+					}, "session-reserve")) {
+						await checkpoint(result);
+						result = await step(result);
+					}
+					if (queueActive && !sameJson(result, checkpoints.get(item.workId) ?? item)) await checkpoint(result);
 					fulfilled.add(item.workId);
-					return result;
-				})
+					const { busyRefusals: _busy, ...finished } = result;
+					return finished;
+				}
 			} : {},
-			connect: chain?.connect ?? dependencies.auth.connect,
+			connect: chain.connect,
+			scope: (item) => ({
+				journey: snapshot.journey,
+				send: snapshot.send,
+				item
+			}),
 			profile: (connection, profileSignal) => prepareProfile(dependencies, snapshot, connection, profileSignal),
 			context: (item) => {
 				const binding = snapshot.journey.works.find((value) => value.id === item.workId)?.binding;
 				return {
 					snapshot: true,
-					...chain ? { fresh: chain.fresh } : {},
+					fresh: chain.fresh,
 					active: async () => {
 						await active(item);
 					},
@@ -8032,6 +8964,7 @@ async function advanceSend(dependencies, address, signal, chain) {
 		cleanup.failed(error);
 		throw error;
 	} finally {
+		stopObservation?.();
 		await cleanup.run(() => preparation.close());
 	}
 }
@@ -8102,6 +9035,7 @@ function pathHash(item) {
 /** Manual upload: native Send's commands and recovery rules over one completed result's ZIPs. */
 function createManualUploader(dependencies) {
 	const { storage } = dependencies;
+	const poll = createAssessmentPoll();
 	const running = /* @__PURE__ */ new Map();
 	function save(prior, next, action) {
 		return storage.commit({
@@ -8240,7 +9174,11 @@ function createManualUploader(dependencies) {
 				error: null
 			};
 			if (connection) try {
-				profile = await captureProfile(connection, guard(upload), signal, dependencies.failure);
+				profile = await captureProfile(guardSendRemote(connection, {
+					journey: null,
+					send: upload,
+					item: null
+				}), guard(upload), signal, dependencies.failure);
 			} catch (error) {
 				if (error instanceof ApplicationError && error.code === "REVISION_CONFLICT") return save(upload, upload, input);
 				throw error;
@@ -8319,12 +9257,18 @@ function createManualUploader(dependencies) {
 		let bindings = [];
 		return advanceItems({
 			send: upload,
+			poll,
 			failure: dependencies.failure,
 			save: (next) => save(upload, next),
 			connect: async (connectSignal) => {
 				bindings = await storage.bindings();
 				return dependencies.auth.connect(connectSignal);
 			},
+			scope: (item) => ({
+				journey: null,
+				send: upload,
+				item
+			}),
 			profile: (connection, profileSignal) => captureProfile(connection, guard(upload), profileSignal, dependencies.failure),
 			context: (item) => ({
 				active: guard(upload, item),
@@ -9541,6 +10485,7 @@ function createJourneyFiles(storage) {
 	return async (journeyId, workId, signal) => {
 		const state = await storage.current(journeyId);
 		if (!state?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		if (state.phase === "completed" && state.outputVersion !== 1) throw new ApplicationError("SCOPE_NOT_READY");
 		assertJourneyPrivacyReady(state, true);
 		if (state.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
 		const work = state.works.find((item) => item.id === workId);
@@ -9575,6 +10520,7 @@ function createJourneyFiles(storage) {
 const sendRecoveryCodes = [
 	"SESSION_MEMBERSHIP_CONFLICT",
 	"SESSION_UPLOAD_EXHAUSTED",
+	"WORK_SESSION_CAPACITY_EXCEEDED",
 	"LEGACY_SEND_RECOVERY_REQUIRED",
 	"ASSESSMENT_INCOMPLETE",
 	"SESSION_PUBLICATION_FENCE_REQUIRED"
@@ -9630,10 +10576,14 @@ async function requestSend(dependencies, raw, hostId, source) {
 		if (!hostId) throw new ApplicationError("INVALID_TRANSITION");
 		const included = current.journey.works.filter(isIncludedWork);
 		if (!sameIds$1(input.included.map((work) => work.workId), included.map((work) => work.id)) || !input.included.every((item) => included.some((work) => work.id === item.workId && work.access === item.access && work.accessConfirmed)) || !sameIds$1(input.omittedWorkIds, current.journey.works.filter((work) => !isIncludedWork(work)).map((work) => work.id))) throw new ApplicationError("CONFIRMATION_REQUIRED");
-		if (!binding) binding = {
-			subject: (await dependencies.auth.connect(new AbortController().signal))?.subject ?? null,
-			at: dependencies.now()
-		};
+		if (!binding) {
+			const connection = await dependencies.auth.connect(new AbortController().signal);
+			if (!connection) throw new ApplicationError(dependencies.auth.configured ? "ACCOUNT_SIGNED_OUT" : "ACCOUNT_NOT_CONFIGURED");
+			binding = {
+				subject: connection.subject,
+				at: dependencies.now()
+			};
+		}
 		const { subject, at } = binding;
 		const result = await dependencies.storage.commitSend({
 			journeyId: input.journeyId,
@@ -9695,10 +10645,11 @@ async function requestError(dependencies, send, hostId, signal) {
 * next phase exactly as between advances. The advance returns after three phases or once no
 * picked Work is mid-upload, so later Works continue from the caller's next advance.
 */
-async function advanceWork(dependencies, address, signal, phases = 3, sessionFacts = createSessionFactsCache()) {
+async function advanceWork(dependencies, address, signal, phases = 3, sessionFacts = createSessionFactsCache(), poll = createAssessmentPoll()) {
 	let connection;
 	const chain = {
 		sessionFacts,
+		poll,
 		fresh: /* @__PURE__ */ new Map(),
 		async connect(connectSignal) {
 			if (connection === void 0) connection = await dependencies.auth.connect(connectSignal);
@@ -9713,7 +10664,102 @@ async function advanceWork(dependencies, address, signal, phases = 3, sessionFac
 /** The phase saved progress and left its Work mid-upload, with nothing else to report. */
 function uploading(result, before) {
 	const send = result.send;
-	return result.status === "applied" && send !== null && before !== void 0 && send.revision > before && send.status === "sending" && send.error === null && pickBatch(send.items, Date.now(), send.parallelCompletes ? 3 : 1)[0]?.status === "uploading";
+	return result.status === "applied" && send !== null && before !== void 0 && send.revision > before && send.status === "sending" && send.error === null && pickBatch(send.items, send.parallelCompletes ? 3 : 1)[0]?.status === "uploading";
+}
+//#endregion
+//#region apps/cli/src/account/journey/upload-observer.ts
+const intervalMs = 15e3;
+const budget = 3;
+/** A tab polls only the in-flight upload owner's read capability. No store or upload-slot acquisition. */
+function createUploadObserver() {
+	let active;
+	let retained = "";
+	let cursor = 0;
+	let next = 0;
+	let reading;
+	const observations = /* @__PURE__ */ new Map();
+	function start(connection, current, signal) {
+		const send = current();
+		const scope = JSON.stringify([
+			send.journeyId,
+			send.id,
+			send.subject
+		]);
+		if (scope !== retained) {
+			observations.clear();
+			cursor = 0;
+			next = 0;
+			retained = scope;
+		}
+		const stop = new AbortController();
+		const flight = {
+			connection,
+			current,
+			signal: AbortSignal.any([signal, stop.signal])
+		};
+		active = flight;
+		return () => {
+			stop.abort();
+			if (active === flight) active = void 0;
+		};
+	}
+	function accepted(send) {
+		return send.items.filter((item) => item.status === "assessing" && item.sessionAssembly);
+	}
+	async function refresh(flight) {
+		const remote = flight.connection.sessions;
+		if (!remote) return;
+		const items = accepted(flight.current());
+		if (!items.length) return;
+		const startAt = cursor % items.length;
+		const selected = [...items.slice(startAt), ...items.slice(0, startAt)].slice(0, budget);
+		const signal = AbortSignal.any([flight.signal, AbortSignal.timeout(8e3)]);
+		for (const item of selected) {
+			const revision = item.sessionAssembly?.revision;
+			if (revision === void 0 || signal.aborted) break;
+			cursor = (cursor + 1) % items.length;
+			let state = "unavailable";
+			try {
+				const assembly = await remote.assembly(item.workId, signal);
+				if (assembly?.revision === revision) {
+					if (assembly.error) state = "failed";
+					else if (assembly.completedRevision !== revision || !assembly.scanId) state = "assembling";
+					else state = await remote.assessment(assembly.scanId, signal);
+				}
+			} catch {
+				state = "unavailable";
+			}
+			if (flight.signal.aborted || active !== flight) return;
+			observations.set(item.workId, {
+				workId: item.workId,
+				revision,
+				checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				state
+			});
+		}
+	}
+	async function read(address) {
+		const flight = active;
+		if (!flight || flight.signal.aborted) return [];
+		const send = flight.current();
+		if (send.journeyId !== address.journeyId || send.id !== address.sendId || send.subject !== flight.connection.subject || send.status !== "sending") return [];
+		if (!reading && Date.now() >= next) {
+			next = Date.now() + intervalMs;
+			reading = refresh(flight).finally(() => {
+				reading = void 0;
+			});
+		}
+		await reading;
+		if (active !== flight || flight.signal.aborted) return [];
+		return accepted(flight.current()).flatMap((item) => {
+			const value = observations.get(item.workId);
+			return value && value.revision === item.sessionAssembly?.revision ? [value] : [];
+		});
+	}
+	return {
+		start,
+		read
+	};
 }
 //#endregion
 //#region apps/cli/src/account/journey/send.ts
@@ -9741,9 +10787,21 @@ function createJourneySender(dependencies, phases = 3, host = {
 	const pendingElsewhere = (send) => !host.serving && send?.request !== void 0 && !send.confirmedAt;
 	const progress = /* @__PURE__ */ new Map();
 	let packagingRetry;
+	const observer = createUploadObserver();
 	const sessionFacts = createSessionFactsCache();
+	const poll = createAssessmentPoll();
 	const running = /* @__PURE__ */ new Map();
 	const runKey = (address) => `${address.journeyId}:${address.sendId}`;
+	const remembered = /* @__PURE__ */ new Set();
+	const remember = async (journey) => {
+		if (!dependencies.rememberHides || remembered.has(journey.journeyId)) return;
+		try {
+			await dependencies.rememberHides(journey);
+			remembered.add(journey.journeyId);
+		} catch (error) {
+			dependencies.failure("REMEMBERED_HIDES_FAILED", error);
+		}
+	};
 	const load = async (address) => {
 		const latest = requireSend(await dependencies.storage.loadSend(address.journeyId));
 		sessionFacts.retain(address.journeyId, latest.send);
@@ -9751,12 +10809,14 @@ function createJourneySender(dependencies, phases = 3, host = {
 		return latest;
 	};
 	const sender = {
+		uploadAssessments: observer.read,
 		scopeValid(snapshot) {
 			return !snapshot.send || (snapshot.send.request && !snapshot.send.confirmedAt ? requestMatches(snapshot.send, snapshot.journey) : scopeDigest(snapshot.journey) === snapshot.send.scopeDigest);
 		},
 		request: (input, source = "conversation") => requestSend(dependencies, input, hostId, source),
 		async get(address) {
-			const snapshot = await dependencies.storage.loadSend(address.journeyId, address.sendId);
+			const snapshot = await dependencies.storage.loadSend(address.journeyId, address.sendId, address.observedRevision);
+			if (!snapshot && address.observedRevision !== void 0) return null;
 			sessionFacts.retain(address.journeyId, snapshot?.send ?? null);
 			if (host.serving && !address.sendId && snapshot?.send?.request && !snapshot.send.confirmedAt && snapshot.send.status !== "blocked") {
 				const error = await requestError(dependencies, snapshot.send, hostId, new AbortController().signal);
@@ -9784,6 +10844,18 @@ function createJourneySender(dependencies, phases = 3, host = {
 				}
 			};
 		},
+		/** Link for the current native Send's authenticated owner, independent of Work assessment. */
+		async ownedPassport(address, signal) {
+			const { send } = await load(address);
+			if (!send.confirmedAt || send.status !== "completed" || !send.subject || !send.items.length || !send.items.every((item) => item.sessionAssembly)) throw new ApplicationError("INVALID_TRANSITION");
+			const connection = await dependencies.auth.connect(signal);
+			if (!connection) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
+			if (connection.subject !== send.subject) throw new ApplicationError("IDENTITY_REJECTED");
+			const url = await connection.ownedPassport(signal);
+			await load(address);
+			await connection.assertCurrent(signal);
+			return { url };
+		},
 		/** The owner's current address, links and account email; null while signed out. */
 		async ownerProfile(signal) {
 			const connection = await dependencies.auth.connect(signal);
@@ -9814,8 +10886,12 @@ function createJourneySender(dependencies, phases = 3, host = {
 			if (!connection) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
 			if (latest.send.subject !== connection.subject) throw new ApplicationError("IDENTITY_REJECTED");
 			try {
-				const current = await connection.readProfile(signal);
-				await connection.saveProfile(mergeOwnerProfile(current.profile, chosen), signal);
+				const remote = guardSendRemote(connection, {
+					...latest,
+					item: null
+				});
+				const current = await remote.readProfile(signal);
+				await remote.saveProfile(mergeOwnerProfile(current.profile, chosen), signal);
 			} catch (error) {
 				if (signal.aborted || error instanceof ApplicationError) throw error;
 				const code = error instanceof JourneyRemoteError && error.status === 409 ? addressRefusals[error.code] : void 0;
@@ -9879,7 +10955,12 @@ function createJourneySender(dependencies, phases = 3, host = {
 					}
 					for (const item of inventory && recover && snapshot.send ? draft.items : []) {
 						const current = inventory?.works.find((work) => work.logicalWorkId === item.workId);
-						const assembly = await remote.assembly(item.workId, signal);
+						const earlier = snapshot.send?.items.find((value) => value.workId === item.workId);
+						const assembly = await guardSendRemote(connection, {
+							journey: snapshot.journey,
+							send: snapshot.send,
+							item: earlier ?? item
+						}).sessions?.assembly(item.workId, signal);
 						const selected = createSessionKeys();
 						for await (const session of sessions(input.journeyId, item.artifact, signal)) await selected.add(session);
 						const currentKeys = current?.sessions.map((session) => session.key) ?? [];
@@ -9955,7 +11036,10 @@ function createJourneySender(dependencies, phases = 3, host = {
 				error: null
 			};
 			if (connection) try {
-				profile = await prepareProfile(dependencies, snapshot, connection, signal);
+				profile = await prepareProfile(dependencies, snapshot, guardSendRemote(connection, {
+					...snapshot,
+					item: null
+				}), signal);
 			} catch (error) {
 				if (error instanceof ApplicationError && error.code === "REVISION_CONFLICT") return saveStart(snapshot.send);
 				throw error;
@@ -9963,12 +11047,14 @@ function createJourneySender(dependencies, phases = 3, host = {
 			signal.throwIfAborted();
 			const finalAuthorizationError = await requestError(dependencies, snapshot.send, hostId, signal);
 			if (finalAuthorizationError) return block(snapshot, snapshot.send, finalAuthorizationError);
-			return saveStart({
+			const started = await saveStart({
 				...snapshot.send,
 				subject: connection?.subject ?? snapshot.send.subject,
 				confirmedAt: snapshot.send.request && !connection ? null : dependencies.now(),
 				...profile
 			});
+			if (started.send?.confirmedAt) await remember(snapshot.journey);
+			return started;
 		},
 		async respond(raw) {
 			const input = sendChoiceSchema.parse(raw);
@@ -10031,6 +11117,7 @@ function createJourneySender(dependencies, phases = 3, host = {
 			const stop = new AbortController();
 			const transferDependencies = {
 				...dependencies,
+				...host.serving ? { observeUpload: observer.start } : {},
 				sessionTransfer: (workId, transfer) => {
 					progress.set(`${key}:${workId}`, transfer);
 					dependencies.sessionTransfer?.(workId, transfer);
@@ -10039,17 +11126,18 @@ function createJourneySender(dependencies, phases = 3, host = {
 			const lifetime = AbortSignal.any([signal, stop.signal]);
 			const result = (async () => {
 				const currentSnapshot = await dependencies.storage.loadSend(address.journeyId);
-				if (!currentSnapshot?.send) return advanceWork(transferDependencies, address, lifetime, phases, sessionFacts);
+				if (!currentSnapshot?.send) return advanceWork(transferDependencies, address, lifetime, phases, sessionFacts, poll);
 				let snapshot = requireSend(currentSnapshot);
 				if (snapshot.send.id !== address.sendId) return {
 					...snapshot,
 					status: "stale"
 				};
+				if (snapshot.send.confirmedAt) await remember(snapshot.journey);
 				if (!host.serving && snapshot.send.request && !snapshot.send.confirmedAt) return {
 					...snapshot,
 					status: "applied"
 				};
-				if (!host.serving && hostDrives(snapshot.send) && await host.focused?.(address.journeyId)) return {
+				if (!host.serving && hostDrives(snapshot.journey, snapshot.send) && await host.focused?.(address.journeyId)) return {
 					...snapshot,
 					status: "applied"
 				};
@@ -10145,7 +11233,7 @@ function createJourneySender(dependencies, phases = 3, host = {
 						confirmedOmittedWorkIds: snapshot.send.omitted.map((item) => item.workId)
 					}, lifetime);
 				}
-				return advanceWork(transferDependencies, address, lifetime, phases, sessionFacts);
+				return advanceWork(transferDependencies, address, lifetime, phases, sessionFacts, poll);
 			})().catch(async (error) => {
 				if (!stop.signal.aborted || signal.aborted) throw error;
 				return {
@@ -10242,6 +11330,7 @@ function createJourneySendAuth(account, requestFetch) {
 			if (verified.identityId !== credential.identityId) throw new ApplicationError("IDENTITY_REJECTED");
 			return createJourneyOwnerClient({
 				apiUrl: account.configuration.passportApiUrl,
+				...account.configuration.passportWebOrigin ? { webOrigin: account.configuration.passportWebOrigin } : {},
 				subject: verified.identityId,
 				fetch: ownerFetch,
 				async authorize() {
@@ -10631,9 +11720,9 @@ async function privateStat$2(path, stat, directory) {
 	if (!(process.platform === "win32" ? await windowsOwnerOnly(path, directory ? "directory" : "file") : stat.uid === process.getuid?.() && (stat.mode & 63) === 0)) throw new ApplicationError("SENSITIVE_TERMS_UNSAFE_PATH");
 }
 /** Private user settings survive control-plane database reset. No learned entities enter here. */
-function createSensitiveTermsFile(stateDirectory) {
+function createSensitiveTermsFile(stateDirectory, fileName = "sensitive-terms.json") {
 	const directory = join(stateDirectory, "settings");
-	const path = join(directory, "sensitive-terms.json");
+	const path = join(directory, fileName);
 	let observed = false;
 	async function checkedDirectory(create) {
 		await privateStat$2(stateDirectory, await lstat(stateDirectory), true);
@@ -10740,6 +11829,41 @@ function createSensitiveTermsFile(stateDirectory) {
 	};
 }
 //#endregion
+//#region apps/cli/src/remembered-hides.ts
+/**
+* Each value on its own: one value the file cannot hold never drops the others. `journeys` records
+* the journeys already kept, so a later restart never brings back a value the person removed.
+*/
+async function appendRememberedHides(store, journeys, journeyId, candidates) {
+	const done = await journeys.read();
+	if (done.terms.includes(journeyId)) return;
+	const values = candidates.filter((value) => {
+		try {
+			return normalizeSensitiveTerms([value]).length === 1;
+		} catch {
+			return false;
+		}
+	});
+	if (values.length) {
+		const saved = await store.read();
+		const next = normalizeSensitiveTerms([...saved.terms, ...values]);
+		if (next.length !== saved.terms.length) await store.replace(saved.revision, next);
+	}
+	await journeys.replace(done.revision, [...done.terms, journeyId]);
+}
+/** Counts only, so no other remembered value reaches the agent that asked. */
+async function removeRememberedHides(store, values) {
+	const removed = new Set(values.map((item) => item.trim().normalize("NFC")));
+	const saved = await store.read();
+	const kept = saved.terms.filter((term) => !removed.has(term));
+	if (kept.length !== saved.terms.length) await store.replace(saved.revision, kept);
+	const found = saved.terms.length - kept.length;
+	return {
+		removed: found,
+		notFound: removed.size - found
+	};
+}
+//#endregion
 //#region apps/cli/src/account/snapshot.ts
 function accountSnapshot(value) {
 	const empty = {
@@ -11164,8 +12288,10 @@ function createPassportConnection(options) {
 //#region apps/cli/src/account/index.ts
 /** Composes the concrete Identity client, credential file and backend check for the account. */
 function createAccountPorts(options) {
+	const webOrigin = passportWebOrigin(options.passportApiUrl, options.passportWebOrigin);
 	return {
 		configuration: {
+			...webOrigin ? { passportWebOrigin: webOrigin } : {},
 			identityUrl: options.identityUrl,
 			clientId: options.clientId,
 			passportApiUrl: options.passportApiUrl
@@ -11958,6 +13084,8 @@ async function compose(options, callbacks, bundles) {
 		traceStartup("library-end");
 		const outputDir = library.path;
 		const sensitiveTerms = createSensitiveTermsFile(stateDir);
+		const rememberedHides = createSensitiveTermsFile(stateDir, "remembered-hides.json");
+		const rememberedJourneys = createSensitiveTermsFile(stateDir, "remembered-hides-journeys.json");
 		const processing = {
 			sensitiveTerms,
 			adapters: createNativeAdapters(),
@@ -11996,6 +13124,7 @@ async function compose(options, callbacks, bundles) {
 		};
 		const prepareJourney = createJourneyPreparation({
 			storage: journeyStorage,
+			rememberedHides: async () => (await rememberedHides.read()).terms,
 			harnesses,
 			processing,
 			execution,
@@ -12019,6 +13148,7 @@ async function compose(options, callbacks, bundles) {
 			identityUrl: options.identityUrl,
 			clientId: options.identityClientId,
 			passportApiUrl: options.passportApiUrl,
+			...options.passportWebOrigin ? { passportWebOrigin: options.passportWebOrigin } : {},
 			onFatal: fatalStore.fail
 		});
 		const account = createAccount(accountPorts);
@@ -12043,6 +13173,7 @@ async function compose(options, callbacks, bundles) {
 				auth: sendAuth,
 				now: () => (/* @__PURE__ */ new Date()).toISOString(),
 				failure: (code, cause) => diagnostics.onFailure(code, cause),
+				rememberHides: (journey) => appendRememberedHides(rememberedHides, rememberedJourneys, journey.journeyId, rememberedHideValues(journey)),
 				sessionTransfer: (workId, transfer) => diagnostics.onActivity({
 					event: "journey.session_transfer",
 					at: (/* @__PURE__ */ new Date()).toISOString(),
@@ -12203,6 +13334,7 @@ async function compose(options, callbacks, bundles) {
 		})();
 		return {
 			application,
+			rememberedHides,
 			remoteWorkers: createRemotePreflight({
 				storage: journeyStorage,
 				harnesses,
@@ -12315,7 +13447,7 @@ const delivery = z.object({
 	output: z.string().min(1).max(4096)
 });
 /** `signal` carries the process's SIGINT/SIGTERM to long procedures such as journey.prepare. */
-async function invoke(runtime, command, value, signal) {
+async function invoke(runtime, command, value, signal, getAudience = "agent") {
 	const app = runtime.application;
 	markAgentPresence(runtime.stateDir, value);
 	switch (command) {
@@ -12326,15 +13458,37 @@ async function invoke(runtime, command, value, signal) {
 		case "send.start": return app.journeySend?.start(sendStartSchema.parse(value));
 		case "send.respond": return app.journeySend?.respond(sendChoiceSchema.parse(value));
 		case "send.pause": return app.journeySend?.pause(sendActionSchema.parse(value));
-		case "send.resume": return app.journeySend?.resume(sendActionSchema.parse(value));
-		case "send.advance": return app.journeySend?.advance(sendAddress.parse(value));
-		case "journey.start": return app.journey?.start(value);
-		case "journey.get": return app.journey?.get(value ?? {}, "agent");
+		case "send.resume": {
+			const input = sendActionSchema.parse(value);
+			const current = await runtime.store.journey?.current(input.journeyId);
+			await fenceUnapprovedSendHost(runtime.stateDir, current);
+			return app.journeySend?.resume(input);
+		}
+		case "send.advance": {
+			const input = sendAddress.parse(value);
+			const current = await runtime.store.journey?.current(input.journeyId);
+			await fenceUnapprovedSendHost(runtime.stateDir, current);
+			return app.journeySend?.advance(input);
+		}
+		case "journey.start": {
+			const input = nativeStartSchema.parse(value);
+			const current = await runtime.store.journey?.current();
+			await fenceUnapprovedSendHost(runtime.stateDir, current);
+			if (current && obsoleteJourney(current)) await relinquishObsoleteHost(runtime.stateDir, current.journeyId);
+			return app.journey?.start(input);
+		}
+		case "journey.get": {
+			const result = await app.journey?.get(value ?? {}, getAudience);
+			await fenceUnapprovedSendHost(runtime.stateDir, result);
+			if (result?.obsolete) await relinquishObsoleteHost(runtime.stateDir, result.journeyId);
+			return result;
+		}
 		case "journey.groupItems": return app.journey?.groupItems(value);
 		case "journey.inventory": return app.journey?.inventory(value);
 		case "journey.classificationSessions": return app.journey?.classificationSessions(value);
 		case "journey.classificationProgress": return app.journey?.classificationProgress(value);
 		case "journey.classificationRead": return app.journey?.classificationRead(value);
+		case "journey.recoverIsolatedMetadata": return app.journey?.recoverIsolatedMetadata(value, signal);
 		case "journey.classificationSubmit": return app.journey?.classificationSubmit(value);
 		case "journey.cardsRead": return app.journey?.cardsRead(value);
 		case "journey.cardsSubmit": return app.journey?.cardsSubmit(value);
@@ -12395,6 +13549,7 @@ async function invoke(runtime, command, value, signal) {
 		case "workflow.resume": return app.resume(commandSchema.parse(value));
 		case "bundleLibrary.get": return app.getBundleLibrary();
 		case "bundleLibrary.save": return app.saveBundleLibrary(z.object({ directory: z.string().max(4096).nullable() }).parse(value).directory);
+		case "rememberedHides.remove": return removeRememberedHides(runtime.rememberedHides, z.object({ values: z.array(z.string()).min(1).max(1e3) }).strict().parse(value).values);
 		case "sensitiveTerms.get": return app.getSensitiveTerms();
 		case "sensitiveTerms.replace": return app.replaceSensitiveTerms(replaceSensitiveTermsSchema.parse(value));
 		case "processing.catalog": return app.getProcessingCatalog();
@@ -12561,4 +13716,4 @@ async function cancelOperation(runtime, id) {
 	return readOperation(runtime, id);
 }
 //#endregion
-export { longCommands as _, readAgentPresence as a, traceStartup as b, executorRequestSchema as c, serveDetached as d, guardDetachedStartup as f, businessCommands as g, parseOptions as h, invoke as i, awaitingPassport as l, helpText as m, readOperation as n, createRuntime as o, createRenderActivity as p, waitOperation as r, executorEventSchema as s, cancelOperation as t, hostDrives as u, permissionDiagnostic as v, startupFailure as y };
+export { permissionDiagnostic as _, readAgentPresence as a, executorRequestSchema as c, packageIdentity as d, createRenderActivity as f, longCommands as g, businessCommands as h, invoke as i, serveDetached as l, parseOptions as m, readOperation as n, createRuntime as o, helpText as p, waitOperation as r, executorEventSchema as s, cancelOperation as t, guardDetachedStartup as u, startupFailure as v, traceStartup as y };