@gitroll/tacitt-cli 0.6.12 → 0.6.13

package/dist/{query-BYDcNKy2.mjs → query-BC7MIaWc.mjs}

@@ -1,11 +1,11 @@
-import { $ as decodeZstd, A as captureLogicalJourneySources, B as defaultParallelism, D as createCollectionArtifacts, E as readConfiguredSearchFields, G as readLogicalJourneyFinalMasks, H as parallelismLimits, I as createSharedSessionPool, J as staticMaskCategory, K as readConfiguredOutputInfo, L as SessionWorkerError, N as runConfiguredSessionJob, R as sessionWorkerFailure, T as readOriginalSearchFields, V as gitSeedsProvider, W as privateJourneyDirectory, Y as readWorkspacePair, a as prepareSessionScans, at as makePrivateDirectory, b as readStaticSessionMasks, c as createWorkPieces, ct as windowsOwnerOnly, d as scanPreparedSession, et as createTemporary, g as openConfiguredUpload, h as configuredSessionUploads, i as verifyPreparedSessionSources, j as capturedJourneyScope, l as readSessionScanFields, lt as isWindowsAclFailure, n as sessionExtensions, nt as createCleanup, o as buildWorkScanBatches, ot as openPrivateFile, q as processJourneyMetadataFields, r as preparedScanConfiguration, s as scanReviewFields, st as restrictToOwner, t as hasRetiredSessionMarker, tt as removeNamedTemporarySpools, u as readSessionScanRecords, ut as windowsAclCodes, v as readCapturedOriginalRows, x as staticSessionJobs, y as processJourneyMetadata } from "./src-DeNJ8vOD.mjs";
-import { A as createExecutionPort, C as saveRemoteState, D as createPackagingProgressPort, E as exportDelivery, F as loadDeliveryResults, L as inBackgroundStoreLane, M as withStateMutex, N as createDeliveryService, O as createStore, P as preflight, R as isBackgroundStatusPoll, S as readRemoteState, T as collectRemoteWorkers, _ as staticBaseProduction, a as writeJourneyOutput, b as workApproval, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as readSelectedCaptures, w as journeyDirectory, x as isRemoteImport, y as prepareSourcePlan, z as retrySharingViolation } from "./job-CBuIMTQ0.mjs";
-import { $t as profileHasChoices, D as bLiteralTerms, Gt as filterInventoryByPeriod, Kt as sessionPeriodSchema, Mt as privacyTermKey, Nn as createStaticProcessor, On as currentDetectorVersion, Qt as passportAddressSchema, Vn as entityDictionaryVersion, Vt as termTypeInfo, Xt as mergeOwnerProfile, Yn as frameRecords, Zt as ownerProfileSchema, an as safeField, br as processingSite, cn as reviewFamilies, dn as observeSource, dr as admitCustomTerm, fr as admitGitName, gr as ProcessingError, in as safeCode, nn as ApplicationError, rn as UnfinishedJourneyError, sn as familySelected, u as textDigest, ur as createEntityMatcher, xr as siteFields } from "./locate-D-ZaHpI0.mjs";
-import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-CKQlTA2Z.mjs";
-import { An as scanExclusionResourceSchema, B as createApplication, Bt as newJourneyWork, Ci as withReadingProgress, Ct as sendActionSchema, Di as selectionSchema, Dn as scanGitSeedsId, Dt as sendStartSchema, Ei as selectionBatchSchema, En as scanSessionResourceSchema, Et as sendRequestSchema, F as readAccountAvatarUrl, Fr as assertJourneyPrivacyReady, Gr as currentJourneyAdapters, H as inspectionStartSchema, I as storedCredentialSchema, Ir as privacyDecisionDigest, It as classificationPartition, Jr as obsoleteJourney, K as inspectionQuerySchema, Kr as hostDrives, Lt as classificationWorks, M as deviceAuthorizationSchema, Mi as recommendParallelism, Mr as displayedScopeDigest, N as deviceProfileScopeSchema, Nr as requestedScope, O as createAccount, On as scanGitSeedsResource, P as profileUrlMatchesIdentity, Rn as applyClassification, Rt as retireScanGeneration, Si as unfinishedPackagingCode, St as replaceSensitiveTermsSchema, Ti as packageCommandSchema, Tn as scanPreparationDigest, Tt as sendPrepareSchema, U as validateInspectionBatch, Ur as advanceStepsSend, V as inspectionCancelSchema, Vn as searchScopeDigest, Vr as nativeStartSchema, Zr as sendsOnNextAdvance, _ as changeJourney, _i as isIncludedWork, _r as workCorrectionBinding, _t as manualUploadStartSchema, at as appendSensitiveTerms, ci as journeySendSchema, cr as confirmedHideKinds, di as sendReplaceResultSchema, dr as journeyConfirmedHides, dt as validateFailureLocation, fi as sendResolutionSchema, ft as manualUploadActionSchema, gi as isClassifying, gt as manualUploadSchema, h as hideScopeDigest, hi as hasCompleteWorkDescription, hr as workDecisionDigest, ht as manualUploadPrepareSchema, ir as bTermMatcher, j as accountProfileSchema, k as renew, ki as producerVersion, kn as verifiedScanGitSeeds, li as sendArtifactSchema, lt as artifactFailureDetailSchema, m as activeJourneyTerms, mi as sendSettingsSchema, mr as retireWorkDescription, mt as manualUploadChoiceSchema, ni as staticReviewDigest, nt as settingsQuerySchema, oi as agentSourceSchema, qr as itemAtPassport, ri as staticSessionId, si as agentSourcesSchema, ti as hasCurrentStaticReview, tt as settingsBatchSchema, ui as sendReceiptSchema, vi as isReadingComplete, vr as emptyPreparationFacts, wi as commandSchema, wt as sendChoiceSchema, xt as normalizeSensitiveTerms, yi as isSelectedWork, yt as emptyTermsRevision, zn as journeySearchResultSchema, zt as isolatedWorkId } from "./src-Do-qzuMn.mjs";
-import { vt as isCoordinationBusy } from "./heap-Blrat--4.mjs";
-import { d as checkOpenSource, h as openSource } from "./run-DQ9xyKSt.mjs";
-import { t as createAgentSetupPort } from "./agent-setup-B12VbvN_.mjs";
+import { A as captureLogicalJourneySources, B as defaultParallelism, D as createCollectionArtifacts, E as readConfiguredSearchFields, G as readLogicalJourneyFinalMasks, H as parallelismLimits, I as createSharedSessionPool, J as confirmedFamily, K as readConfiguredOutputInfo, L as SessionWorkerError, N as runConfiguredSessionJob, R as sessionWorkerFailure, T as readOriginalSearchFields, V as gitSeedsProvider, W as privateJourneyDirectory, X as staticMaskCategory, Y as confirmedTitleSpans, Z as readWorkspacePair, a as prepareSessionScans, b as readStaticSessionMasks, c as createWorkPieces, ct as openPrivateFile, d as scanPreparedSession, dt as isWindowsAclFailure, ft as windowsAclCodes, g as openConfiguredUpload, h as configuredSessionUploads, i as verifyPreparedSessionSources, it as createCleanup, j as capturedJourneyScope, l as readSessionScanFields, lt as restrictToOwner, n as sessionExtensions, nt as createTemporary, o as buildWorkScanBatches, q as processJourneyMetadataFields, r as preparedScanConfiguration, rt as removeNamedTemporarySpools, s as scanReviewFields, st as makePrivateDirectory, t as hasRetiredSessionMarker, tt as decodeZstd, u as readSessionScanRecords, ut as windowsOwnerOnly, v as readCapturedOriginalRows, x as staticSessionJobs, y as processJourneyMetadata } from "./src-CP-K2PBv.mjs";
+import { A as exportDelivery, C as prepareSourcePlan, D as saveRemoteState, E as readRemoteState, H as isBackgroundStatusPoll, I as withStateMutex, L as createDeliveryService, M as createStore, O as journeyDirectory, P as createExecutionPort, R as preflight, S as changePreparation, T as isRemoteImport, U as retrySharingViolation, V as inBackgroundStoreLane, _ as staticBaseProduction, a as writeJourneyOutput, b as blockedCodes, c as mergeHideIndexTokens, f as writeJourneyBase, g as staticBaseInputs, h as staticSessions, j as createPackagingProgressPort, k as collectRemoteWorkers, l as packRenderHideIndex, m as saveStaticSession, o as createHideIndexTokens, p as readStaticResult, s as hideIndexTexts, t as journeyOutputJob, u as journeyBaseJob, v as readSelectedCaptures, w as workApproval, x as isolateFailingRoots, y as RootPreparationFailure, z as loadDeliveryResults } from "./job--zxwgaPy.mjs";
+import { $t as ownerProfileSchema, An as currentDetectorVersion, Cr as siteFields, Fn as createStaticProcessor, Jt as sessionPeriodSchema, P as bLiteralTerms, Pt as privacyTermKey, Qt as mergeOwnerProfile, Sr as processingSite, Un as entityDictionaryVersion, Ut as termTypeInfo, Zn as frameRecords, an as UnfinishedJourneyError, en as passportAddressSchema, f as textDigest, fr as createEntityMatcher, in as ApplicationError, ln as familySelected, mr as admitGitName, on as safeCode, pn as observeSource, pr as admitCustomTerm, qt as filterInventoryByPeriod, sn as safeField, tn as profileHasChoices, un as reviewFamilies, vr as ProcessingError } from "./locate-PLEyLYW-.mjs";
+import { a as mainTextChunks, c as previewInWorker, i as nearestSortingRepository, l as createNativeAdapters, n as createProjectEvidenceCollector, o as mainTextFields, r as sortingRepositoryId, s as textChunks, t as createHarnesses, u as createGitNameSeedProvider } from "./src-dL6y2mcu.mjs";
+import { $r as sendReplaceResultSchema, An as scanExclusionResourceSchema, B as createApplication, Bt as newJourneyWork, Ci as bTermMatcher, Cr as privacyDecisionDigest, Ct as sendActionSchema, Di as packageCommandSchema, Dn as scanGitSeedsId, Dt as sendStartSchema, Ei as commandSchema, En as scanSessionResourceSchema, Et as sendRequestSchema, F as readAccountAvatarUrl, Fr as itemAtPassport, Gr as staticSessionId, H as inspectionStartSchema, I as storedCredentialSchema, Ir as obsoleteJourney, It as classificationPartition, Jr as agentSourceSchema, K as inspectionQuerySchema, Lt as classificationWorks, M as deviceAuthorizationSchema, N as deviceProfileScopeSchema, Nr as currentJourneyAdapters, O as createAccount, Oi as selectionBatchSchema, On as scanGitSeedsResource, P as profileUrlMatchesIdentity, Pi as recommendParallelism, Pr as hostDrives, Qr as sendReceiptSchema, Rn as applyClassification, Rt as retireScanGeneration, Sr as assertJourneyPrivacyReady, St as replaceSensitiveTermsSchema, Ti as replacementMarkerPattern, Tn as scanPreparationDigest, Tr as rememberedHideValues, Tt as sendPrepareSchema, U as validateInspectionBatch, Ur as hasCurrentStaticReview, V as inspectionCancelSchema, Vn as searchScopeDigest, Wr as staticReviewDigest, Xr as journeySendSchema, Yr as agentSourcesSchema, Zr as sendArtifactSchema, _ as changeJourney, _i as journeyConfirmedHides, _t as manualUploadStartSchema, ai as isIncludedWork, ar as emptyPreparationFacts, at as appendSensitiveTerms, br as requestedScope, di as withReadingProgress, dt as validateFailureLocation, ei as sendResolutionSchema, ft as manualUploadActionSchema, gt as manualUploadSchema, h as hideScopeDigest, ht as manualUploadPrepareSchema, ii as isClassifying, ir as workCorrectionBinding, j as accountProfileSchema, ji as producerVersion, jr as advanceStepsSend, k as renew, ki as selectionSchema, kn as verifiedScanGitSeeds, kr as nativeStartSchema, lt as artifactFailureDetailSchema, m as activeJourneyTerms, mi as confirmedHideKinds, mt as manualUploadChoiceSchema, ni as sendSettingsSchema, nr as workDecisionDigest, nt as settingsQuerySchema, oi as isReadingComplete, ri as hasCompleteWorkDescription, si as isSelectedWork, tr as retireWorkDescription, tt as settingsBatchSchema, ui as unfinishedPackagingCode, wt as sendChoiceSchema, xt as normalizeSensitiveTerms, yr as displayedScopeDigest, yt as emptyTermsRevision, zn as journeySearchResultSchema, zr as sendsOnNextAdvance, zt as isolatedWorkId } from "./src-CttNuxOn.mjs";
+import { vt as isCoordinationBusy } from "./heap-DCS_WXIA.mjs";
+import { d as checkOpenSource, h as openSource } from "./run-Dod7Vykp.mjs";
+import { t as createAgentSetupPort } from "./agent-setup-Doy_AnPY.mjs";
 import { t as workerMessageSchema } from "./messages-D3m3bhva.mjs";
 import { constants, write } from "node:fs";
 import { z } from "zod";
@@ -166,6 +166,7 @@ const businessCommands = [
 	"workflow.events",
 	"bundleLibrary.get",
 	"bundleLibrary.save",
+	"rememberedHides.remove",
 	"sensitiveTerms.get",
 	"sensitiveTerms.replace",
 	"processing.catalog",
@@ -471,6 +472,81 @@ function commands$1(command) {
 		return [];
 	}
 }
+/** Transparent prefixes that run their operand command; `sudo` is deliberately absent. */
+const wrappers = {
+	nohup: {
+		flags: [],
+		valued: []
+	},
+	command: {
+		flags: ["-p"],
+		valued: []
+	},
+	time: {
+		flags: ["-p"],
+		valued: []
+	},
+	nice: {
+		flags: [],
+		valued: ["-n", "--adjustment"]
+	},
+	timeout: {
+		flags: [
+			"--preserve-status",
+			"--foreground",
+			"-v",
+			"--verbose"
+		],
+		valued: [
+			"-s",
+			"--signal",
+			"-k",
+			"--kill-after"
+		],
+		operand: /^\d+(?:\.\d+)?[smhd]?$/u
+	},
+	env: {
+		flags: [
+			"-i",
+			"-",
+			"--ignore-environment"
+		],
+		valued: ["-u", "--unset"],
+		assignments: true
+	}
+};
+/** Strip known wrappers; an unknown wrapper option fails closed rather than guessing. */
+function unwrap(words) {
+	let rest = words;
+	for (let depth = 0; depth < 8; depth++) {
+		const name = posix.basename(rest[0] ?? "");
+		const wrapper = Object.hasOwn(wrappers, name) ? wrappers[name] : void 0;
+		if (!wrapper) return rest;
+		let index = 1;
+		for (; index < rest.length; index++) {
+			const word = rest[index] ?? "";
+			if (word === "--") {
+				index++;
+				break;
+			}
+			if (wrapper.flags.includes(word)) continue;
+			if (wrapper.valued.includes(word)) {
+				index++;
+				continue;
+			}
+			if (wrapper.valued.some((flag) => word.startsWith(flag.startsWith("--") ? `${flag}=` : flag))) continue;
+			if (word.startsWith("-")) return [];
+			break;
+		}
+		if (wrapper.operand) {
+			if (!wrapper.operand.test(rest[index] ?? "")) return [];
+			index++;
+		}
+		if (wrapper.assignments) while (/^[A-Za-z_][A-Za-z0-9_]*=/u.test(rest[index] ?? "")) index++;
+		rest = rest.slice(index);
+	}
+	return [];
+}
 function agent(words) {
 	const executable = posix.basename(words[0] ?? "");
 	if (words.some((word) => [
@@ -482,6 +558,38 @@ function agent(words) {
 	if (executable === "claude" && words.slice(1).some((word) => word === "-p" || word === "--print")) return "claude";
 	return null;
 }
+const shells = /* @__PURE__ */ new Set([
+	"sh",
+	"bash",
+	"zsh",
+	"dash",
+	"ksh"
+]);
+const interpreters = /* @__PURE__ */ new Set([
+	...shells,
+	"python",
+	"python3"
+]);
+/**
+* Literal agents at command positions, including inside `sh -c` strings. A script file
+* run by a shell or Python interpreter, or a relative or script-named path executable,
+* is a launcher that may start an agent the log cannot show.
+*/
+function launches(command, depth = 0) {
+	return commands$1(command).flatMap((parsed) => {
+		const words = unwrap(parsed);
+		const found = agent(words);
+		if (found) return [found];
+		const executable = words[0] ?? "";
+		const name = posix.basename(executable);
+		if (!interpreters.has(name)) return /^(?:\.\.?|~)\//u.test(executable) || executable.includes("/") && /\.(?:sh|bash|zsh|py)$/u.test(executable) ? ["script"] : [];
+		const operand = words.findIndex((word, index) => index > 0 && !word.startsWith("-"));
+		const options = words.slice(1, operand === -1 ? void 0 : operand);
+		if (options.some((word) => /^-[a-zA-Z]*c[a-zA-Z]*$/u.test(word))) return shells.has(name) && operand !== -1 && depth < 2 ? launches(words[operand] ?? "", depth + 1) : [];
+		if (options.some((word) => /^-[a-zA-Z]*[ms]|^--help$/u.test(word))) return [];
+		return operand === -1 ? [] : ["script"];
+	});
+}
 const validHost = (host) => /^(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*@)?(?:[a-zA-Z0-9_][a-zA-Z0-9_.-]*|\[[a-fA-F0-9:]+\])$/u.test(host);
 /** Consent and import identity include every retained connection selector. */
 function endpoint(host, transport, args) {
@@ -545,20 +653,27 @@ function gcloud(words) {
 }
 /** Matches executables at shell command positions, never mentions in prose or other commands. */
 function parseRemoteDispatch(command) {
-	return commands$1(command).flatMap((words) => {
+	return commands$1(command).flatMap((parsed) => {
+		const words = unwrap(parsed);
 		const executable = posix.basename(words[0] ?? "");
 		const remote = executable === "ssh" ? ssh(words) : executable === "gcloud" ? gcloud(words) : null;
 		if (!remote) return [];
-		return [...new Set(commands$1(remote.command).map(agent))].flatMap((harness) => harness ? [{
+		const found = new Set(launches(remote.command));
+		const agents = [...found].filter((harness) => harness !== "script");
+		return (agents.length ? agents : found.has("script") ? ["unknown"] : []).map((harness) => ({
 			host: endpoint(remote.host, remote.transport, remote.args),
 			harness,
 			transport: remote.transport,
 			args: remote.args
-		}] : []);
+		}));
 	});
 }
 //#endregion
 //#region apps/cli/src/remote/scan.ts
+/** Escapes and shell quotes may split executable spelling; retain those candidates. */
+function mayContainRemoteDispatch(line) {
+	return line.includes("ssh") || line.includes("gcloud") || line.includes("\\") || line.includes("'");
+}
 function object(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -664,6 +779,7 @@ async function scanRemoteDispatches(sessions, signal) {
 						signal.throwIfAborted();
 						const line = framed.endsWith("\r") ? framed.slice(0, -1) : framed;
 						if (!line.trim()) continue;
+						if (!pending.size && !mayContainRemoteDispatch(line)) continue;
 						let row;
 						try {
 							row = JSON.parse(line);
@@ -794,13 +910,17 @@ function createRemotePreflight(options) {
 }
 function result(state) {
 	return {
-		hosts: [...new Set(state.windows.map((window) => window.host))].filter((host) => !Object.hasOwn(state.decisions, host)).map((host) => ({
-			host,
-			windows: state.windows.filter((window) => window.host === host).map(({ start, end }) => ({
-				start,
-				end
-			}))
-		})),
+		hosts: [...new Set(state.windows.map((window) => window.host))].filter((host) => !Object.hasOwn(state.decisions, host)).map((host) => {
+			const windows = state.windows.filter((window) => window.host === host);
+			return {
+				host,
+				windows: windows.map(({ start, end }) => ({
+					start,
+					end
+				})),
+				...windows.some((window) => window.harness === "unknown") ? { scriptLaunch: true } : {}
+			};
+		}),
 		copied: state.copied.length,
 		failures: state.failures,
 		...state.sourceFailureCounts ? { sourceFailureCounts: state.sourceFailureCounts } : {},
@@ -1075,14 +1195,16 @@ function createJourneyTitles(storage, processing) {
 		if (state.phase === "paused") throw new ApplicationError("OPERATION_CANCELED");
 		const work = state.works.find((item) => item.id === action.workId);
 		if (!work) throw new ApplicationError("UNKNOWN_WORKSPACE");
-		if (action.title === work.title) return commit();
+		if (action.title === work.title && (work.titleOrigin === "explicit" || new RegExp(replacementMarkerPattern).test(work.title))) return commit();
 		let title;
+		let staticMasks = [];
 		try {
 			const [processed] = await processJourneyMetadataFields({
 				...await metadataProcessing(storage, state, work, processing),
 				fields: [{ text: action.title }]
 			}, signal);
 			title = processed?.text;
+			staticMasks = processed?.staticMasks ?? [];
 		} catch (error) {
 			if (typeof error === "object" && error !== null && "code" in error && error.code === "PROCESSING_INVALID_RECORD") throw new ApplicationError("GENERATED_METADATA_REPHRASE_REQUIRED", void 0, { cause: error });
 			throw error;
@@ -1095,10 +1217,36 @@ function createJourneyTitles(storage, processing) {
 			id: input.idempotencyKey,
 			title: action.title
 		});
+		let suggestion = null;
+		const described = work.suggestion ? (await storage.resources({
+			journeyId: state.journeyId,
+			kind: "work-description",
+			id: work.suggestion.id
+		}))[0] : void 0;
+		if (work.suggestion && described?.kind === "work-description" && described.workId === work.id && described.inputRevision === work.inputRevision) {
+			const id = randomUUID();
+			await storage.saveResource({
+				...described,
+				id,
+				explicitTitleId: input.idempotencyKey,
+				appliedFields: {
+					...described.appliedFields,
+					title
+				},
+				appliedTitleStaticMasks: [...staticMasks],
+				appliedTitleStaticText: title
+			});
+			suggestion = {
+				...work.suggestion,
+				id,
+				title
+			};
+		}
 		return commit({
 			...state,
 			works: state.works.map((item) => item.id !== work.id ? item : {
 				...retireWorkDescription(item),
+				suggestion,
 				title,
 				titleOrigin: "explicit",
 				explicitTitleId: input.idempotencyKey,
@@ -1404,32 +1552,6 @@ function bindSendDestination(storage, destination) {
 	};
 }
 //#endregion
-//#region apps/cli/src/journey/prepare/update.ts
-/** Preparation owns only the changed Work rows, progress and package invalidation. */
-async function changePreparation(storage, journeyId, kind, change, attempts = Number.POSITIVE_INFINITY, clearPackageApproval = false) {
-	for (let attempt = 0; attempt < attempts; attempt++) {
-		const before = await storage.preparationState(journeyId);
-		if (!before?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
-		const after = change(before);
-		if (after === before) return before;
-		const previous = new Map(before.works.map((work) => [work.id, work]));
-		const result = await storage.updatePreparation({
-			journeyId,
-			expectedRevision: before.revision,
-			requestKey: randomUUID(),
-			at: (/* @__PURE__ */ new Date()).toISOString(),
-			kind,
-			works: after.works.filter((work) => work !== previous.get(work.id)),
-			phase: after.phase,
-			readingComplete: after.readingComplete,
-			readingStartedAt: after.readingStartedAt,
-			clearPackageApproval: clearPackageApproval && before !== after
-		});
-		if (result.status !== "stale") return result.state;
-	}
-	throw new ApplicationError("REVISION_CONFLICT");
-}
-//#endregion
 //#region apps/cli/src/journey/works/metadata.ts
 /** Original classification fields remain durable; only the derived display cache is replaced. */
 const classificationMetadataInput = (work) => ({
@@ -1784,49 +1906,6 @@ function preparationFacts(inventory, rootIds) {
 	};
 }
 //#endregion
-//#region apps/cli/src/journey/prepare/isolation.ts
-/** A Work-level refusal caused by identified roots, each with its own public-safe code. */
-var RootPreparationFailure = class extends ApplicationError {
-	roots;
-	constructor(code, roots, options) {
-		super(code, void 0, options);
-		this.roots = roots;
-	}
-};
-/** The distinct public-safe codes of the identified failing roots, else the Work-level code. */
-function blockedCodes(error, code) {
-	return error instanceof RootPreparationFailure && error.roots.size ? [...new Set(error.roots.values())] : [code];
-}
-/**
-* ADR 0188 (restoring ADR 0059 D06): moves the failing roots of a multi-root Work into its
-* stable blocked "<title> – couldn't prepare" Work so the rest can be prepared again. False
-* when the failure names no root or every root, or the Work changed or left pending.
-*/
-async function isolateFailingRoots(storage, journeyId, work, error) {
-	if (!(error instanceof RootPreparationFailure)) return false;
-	const roots = work.rootSessionIds.flatMap((sessionId) => {
-		const code = error.roots.get(sessionId);
-		return code ? [{
-			sessionId,
-			code
-		}] : [];
-	});
-	if (roots.length === 0 || roots.length === work.rootSessionIds.length) return false;
-	for (;;) {
-		const state = await storage.preparationState(journeyId);
-		const current = state?.works.find((item) => item.id === work.id);
-		if (!state || state.phase === "paused" || state.pendingHideId || current?.inputRevision !== work.inputRevision || current.status !== "pending") return false;
-		if ((await storage.isolateRoots({
-			journeyId,
-			workId: work.id,
-			inputRevision: work.inputRevision,
-			roots,
-			expectedRevision: state.revision,
-			idempotencyKey: randomUUID()
-		})).status !== "stale") return true;
-	}
-}
-//#endregion
 //#region apps/cli/src/journey/prepare/empty-review.ts
 /** Empty AI coverage requires authenticated scanner proof and the original frozen source bindings. */
 async function verifyEmptyScanRoots(resources, roots, signal, storage, plan) {
@@ -1954,14 +2033,27 @@ async function prepareScanContext(storage, journeyId, work, selected, processing
 		} } : {}
 	}, signal);
 	const seeds = frozenGitNames(storage, journeyId, current.snapshotId, processing.gitNames);
+	const families = reviewFamilies(approval.inventory);
 	const roots = /* @__PURE__ */ new Map();
 	for (const session of approval.inventory.sessions) {
 		const workspace = approval.inventory.workspaces.find((item) => item.id === session.workspaceId);
 		if (!workspace) throw new ApplicationError("CORRUPTED_STATE");
 		const paths = workspace.path === null ? [] : [workspace.path];
-		roots.set(JSON.stringify(paths), paths);
+		const key = JSON.stringify(paths);
+		const entry = roots.get(key) ?? {
+			paths,
+			rootIds: /* @__PURE__ */ new Set()
+		};
+		const root = families.owners.get(session.id);
+		if (root) entry.rootIds.add(root.id);
+		roots.set(key, entry);
+	}
+	for (const { paths, rootIds } of roots.values()) try {
+		await seeds(paths, signal);
+	} catch (error) {
+		if (!(error instanceof ProcessingError) || error.code === "PROCESSING_CANCELED") throw error;
+		throw new RootPreparationFailure(error.code, new Map([...rootIds].map((id) => [id, error.code])), { cause: error });
 	}
-	for (const paths of roots.values()) await seeds(paths, signal);
 	return {
 		prepared,
 		configurationDigest: textDigest(JSON.stringify({
@@ -2769,6 +2861,7 @@ function createJourneyPreparation(options) {
 			const plan = await prepareSourcePlan(storage, options.harnesses, journeyId, terms, abort.signal, current.period, options.stateDir);
 			const initial = await storage.preparationState(journeyId);
 			if (!initial?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+			const remembered = initial.snapshotId ? [] : await options.rememberedHides?.() ?? [];
 			const formed = initial.snapshotId ? [] : namedJourneyWorks(formJourneyWorks(plan.approval, options.processing.environment), options.processing, abort.signal);
 			let state;
 			if (!initial.snapshotId) state = await changeJourney(storage, journeyId, "snapshot", (before) => ({
@@ -2779,6 +2872,7 @@ function createJourneyPreparation(options) {
 					reviewMethod: "dictionary"
 				},
 				works: before.snapshotId ? before.works : formed,
+				...before.snapshotId || !remembered.length ? {} : { rememberedHides: [...remembered] },
 				phase: before.phase !== "paused" && (!before.snapshotId || before.works.some(pendingSelected)) ? "processing" : before.phase
 			}));
 			else if (initial.phase !== "processing" && initial.phase !== "paused" && initial.works.some(pendingSelected)) state = await changePreparation(storage, journeyId, "snapshot", (before) => before.phase !== "paused" && before.works.some(pendingSelected) ? {
@@ -2822,7 +2916,9 @@ function createJourneyPreparation(options) {
 			};
 			const releaseAdmission = /* @__PURE__ */ new Map();
 			const retryWork = async (work, error, attempt) => {
-				if (blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING") || work.blockedCodes.includes("PRIVACY_CHANGE_PENDING")) return false;
+				const code = safeCode(error);
+				if (deterministicGitFailure(error)) return false;
+				if (blockedCodes(error, code).includes("PRIVACY_CHANGE_PENDING") || work.blockedCodes.includes("PRIVACY_CHANGE_PENDING")) return false;
 				const delay = workRetryDelaysMs[attempt];
 				if (attempt >= retryLimit || delay === void 0) return false;
 				const blocked = await blockWork(work, error);
@@ -2855,9 +2951,9 @@ function createJourneyPreparation(options) {
 			const readRetries = /* @__PURE__ */ new Map();
 			const staticRetries = /* @__PURE__ */ new Map();
 			/** A failed isolation leaves the Work blocked as before; cancellation and contention escape. */
-			const isolateRoots = async (work, error) => {
+			const isolateRoots = async (work, error, afterRead = false) => {
 				try {
-					return await isolateFailingRoots(storage, journeyId, work, error);
+					return await isolateFailingRoots(storage, journeyId, work, error, afterRead);
 				} catch (isolation) {
 					abort.signal.throwIfAborted();
 					const code = safeCode(isolation);
@@ -2935,7 +3031,7 @@ function createJourneyPreparation(options) {
 						if (work) await blockWork(work, error);
 						return false;
 					}
-					if (attempt < retryLimit) return false;
+					if (attempt < retryLimit && !deterministicGitFailure(error)) return false;
 					if (work && await isolateRoots(work, error)) {
 						readRetries.delete(generation(work));
 						return true;
@@ -2988,7 +3084,13 @@ function createJourneyPreparation(options) {
 						return staticWork(planned, passSubmitted);
 					}
 					const now = await storage.preparationState(journeyId);
-					if (now?.phase !== "sending" && now?.phase !== "completed" && (attempt >= retryLimit || blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING"))) await blockWork(work, error);
+					if (now?.phase !== "sending" && now?.phase !== "completed" && (attempt >= retryLimit || deterministicGitFailure(error) || blockedCodes(error, safeCode(error)).includes("PRIVACY_CHANGE_PENDING"))) {
+						if (await isolateRoots(work, error, true)) {
+							staticRetries.delete(generation(work));
+							return;
+						}
+						await blockWork(work, error);
+					}
 				}
 			};
 			let fatal;
@@ -3120,6 +3222,10 @@ function createJourneyPreparation(options) {
 		}
 	};
 }
+/** A broken local Git command will not recover by rereading the same snapshot. */
+function deterministicGitFailure(error) {
+	return /^git-(?:show-ref|log|config|for-each-ref|rev-parse|cat-file)-exit-\d+$/.test(processingSite(error)?.site ?? "");
+}
 /** Two automatic retries per Work, after two then five seconds. */
 const workRetryDelaysMs = [2e3, 5e3];
 async function waitForWorkRetry(milliseconds, signal) {
@@ -3706,6 +3812,14 @@ function renderRetry(signal, slots = 1) {
 //#region apps/cli/src/journey/metadata/render.ts
 /** Reuse private raw provenance, never a displayed anonymized title as new source text. */
 async function renderTitle(storage, state, work) {
+	const terms = [...await journeyConfirmedHides(storage, state)].map(([term, { kind }]) => ({
+		term,
+		category: kind
+	}));
+	const semantic = (text) => ({
+		textSha256: textDigest(text),
+		spans: work.titleOrigin === "explicit" ? [] : confirmedTitleSpans(text, confirmedFamily(terms, workExceptions(state, work.id)))
+	});
 	if (!work.suggestion) {
 		if (work.explicitTitleId) throw new ApplicationError("INCOMPLETE_REVIEW");
 		const cached = work.classificationMetadata;
@@ -3713,10 +3827,7 @@ async function renderTitle(storage, state, work) {
 		return { cachedTitle: {
 			text: cached.title,
 			staticMasks: cached.titleStaticMasks,
-			semantic: {
-				textSha256: textDigest(cached.title),
-				spans: []
-			}
+			semantic: semantic(cached.title)
 		} };
 	}
 	const description = (await storage.resources({
@@ -3730,10 +3841,7 @@ async function renderTitle(storage, state, work) {
 	return { cachedTitle: {
 		text: title,
 		staticMasks: description.appliedTitleStaticMasks,
-		semantic: {
-			textSha256: textDigest(title),
-			spans: []
-		}
+		semantic: semantic(title)
 	} };
 }
 //#endregion
@@ -3784,7 +3892,7 @@ async function describeItem(journey, work, dependencies, signal) {
 	if (work.access === "drop") throw new ApplicationError("INVALID_STATE");
 	return {
 		workId: work.id,
-		title: work.title,
+		title: artifact.title,
 		access: work.access,
 		artifact,
 		operationKey: randomUUID(),
@@ -4124,6 +4232,14 @@ async function journeyOutputRequest(storage, state, work, processingConfig, _sig
 			families: hides.request(base.sessions, dictionary, exceptions),
 			metadata: {
 				...title,
+				workspaceTitleHides: {
+					terms: [...dictionary].flatMap(([term, keyword]) => confirmed.has(term) || !keyword.bounded ? [{
+						term,
+						category: keyword.kind,
+						bounded: keyword.bounded
+					}] : []),
+					exceptions
+				},
 				access: work.access === "private" ? "private" : "public"
 			},
 			processing: {
@@ -4641,6 +4757,38 @@ function createClassificationSessions(storage, processing, stateDir) {
 	};
 }
 //#endregion
+//#region apps/cli/src/journey/works/projection-prefix.ts
+async function readClassificationPrefix(source, options, signal) {
+	const stamp = await projectionStamp(source.capture.path);
+	const rows = [];
+	let ordinal = -1;
+	outer: for await (const original of readCapturedOriginalRows(source, {
+		directory: options.directory,
+		verification: "classification-prefix"
+	}, signal)) {
+		const value = JSON.parse(original.text);
+		for (const field of mainTextFields(value, original.harness, "main", true)) for (const chunk of mainTextChunks(field)) {
+			signal.throwIfAborted();
+			if (++ordinal <= options.after) continue;
+			rows.push({
+				sessionId: original.sessionId,
+				sourcePartId: original.sourcePartId,
+				recordIndex: original.recordIndex,
+				pointer: chunk.pointer,
+				offset: chunk.offset,
+				role: chunk.role,
+				text: chunk.text
+			});
+			if (rows.length === options.limit) break outer;
+		}
+	}
+	if (await projectionStamp(source.capture.path) !== stamp) throw new ApplicationError("CORRUPTED_STATE");
+	return {
+		rows,
+		count: ordinal + 1
+	};
+}
+//#endregion
 //#region apps/cli/src/journey/works/projection.ts
 const digest$1 = (bytes) => createHash("sha256").update(bytes).digest();
 async function buildProjection(directory, key, source, role, signal) {
@@ -4723,9 +4871,14 @@ async function buildProjection(directory, key, source, role, signal) {
 		}));
 	}
 }
-/** Persisted derived content, never a scan receipt. Only the first read replays the capture. */
+/** Explicit prefixes stream; default reads reuse a fully verified projection. Neither is a scan receipt. */
 async function readClassificationProjection(source, options, signal) {
 	signal.throwIfAborted();
+	if (options.role !== "main") return {
+		rows: [],
+		count: 0
+	};
+	if (options.prefix) return readClassificationPrefix(source, options, signal);
 	const key = digest$1(JSON.stringify([
 		1,
 		options.snapshotId,
@@ -4795,9 +4948,11 @@ function createClassificationReader(storage, stateDir) {
 		const directory = await journeyDirectory(stateDir, state.journeyId);
 		const rows = [];
 		let cursor = null;
+		const limit = input.limit ?? 8;
 		outer: for (let partIndex = input.cursor?.partIndex ?? 0; partIndex < sources.length; partIndex++) {
 			const source = sources[partIndex];
 			if (!source) throw new ApplicationError("CORRUPTED_STATE");
+			if (!work.rootSessionIds.includes(source.session.id)) continue;
 			const capture = captures.find((item) => item.kind === "capture" && item.capture.partId === source.part.id);
 			if (capture?.kind !== "capture") throw new ApplicationError("SCOPE_NOT_READY");
 			const after = partIndex === input.cursor?.partIndex ? input.cursor.afterOrdinal : -1;
@@ -4808,12 +4963,13 @@ function createClassificationReader(storage, stateDir) {
 			}, {
 				directory,
 				snapshotId: state.snapshotId,
-				role: work.rootSessionIds.includes(source.session.id) ? "main" : "worker",
+				role: "main",
 				after,
-				limit: 9 - rows.length
+				limit: limit + (input.limit === void 0 ? 1 : 0) - rows.length,
+				prefix: input.limit !== void 0
 			}, signal);
 			for (const [index, row] of page.rows.entries()) {
-				if (rows.length === 8) {
+				if (rows.length === limit) {
 					cursor = {
 						snapshotId: state.snapshotId,
 						inputRevision: work.inputRevision,
@@ -4824,6 +4980,16 @@ function createClassificationReader(storage, stateDir) {
 					break outer;
 				}
 				rows.push(row);
+				if (input.limit !== void 0 && rows.length === limit) {
+					cursor = {
+						snapshotId: state.snapshotId,
+						inputRevision: work.inputRevision,
+						...input.rootSessionId ? { rootSessionId: input.rootSessionId } : {},
+						partIndex,
+						afterOrdinal: after + index + 1
+					};
+					break outer;
+				}
 			}
 		}
 		const current = await storage.current(state.journeyId);
@@ -5486,7 +5652,7 @@ function createJourneyPreview(storage) {
 		const title = protectedSourceText({
 			text: cachedTitle.text,
 			protectedRanges: []
-		}, cachedTitle.semantic.spans);
+		}, cachedTitle.semantic.spans, "[hidden]", false);
 		await scanViewFence(storage, state, work, sha256);
 		return {
 			workId: work.id,
@@ -5518,16 +5684,16 @@ async function* conversationFields(fields) {
 	}
 }
 /** Static detector spans cannot be restored by a semantic Keep or exception. */
-function protectedSourceText(field, hidden) {
+function protectedSourceText(field, hidden, replacement = "[Hidden]", joinAdjacent = true) {
 	const merged = [];
 	for (const range of [...field.protectedRanges, ...hidden].sort((a, b) => a.start - b.start || b.end - a.end)) {
 		if (range.start < 0 || range.end > field.text.length || range.end <= range.start) throw new ApplicationError("CORRUPTED_STATE");
 		const prior = merged.at(-1);
-		if (prior && range.start <= prior.end) prior.end = Math.max(prior.end, range.end);
+		if (prior && (range.start < prior.end || joinAdjacent && range.start === prior.end)) prior.end = Math.max(prior.end, range.end);
 		else merged.push({ ...range });
 	}
 	let text = field.text;
-	for (const range of merged.toReversed()) text = text.slice(0, range.start) + "[Hidden]" + text.slice(range.end);
+	for (const range of merged.toReversed()) text = text.slice(0, range.start) + replacement + text.slice(range.end);
 	return text;
 }
 //#endregion
@@ -10626,6 +10792,16 @@ function createJourneySender(dependencies, phases = 3, host = {
 	const poll = createAssessmentPoll();
 	const running = /* @__PURE__ */ new Map();
 	const runKey = (address) => `${address.journeyId}:${address.sendId}`;
+	const remembered = /* @__PURE__ */ new Set();
+	const remember = async (journey) => {
+		if (!dependencies.rememberHides || remembered.has(journey.journeyId)) return;
+		try {
+			await dependencies.rememberHides(journey);
+			remembered.add(journey.journeyId);
+		} catch (error) {
+			dependencies.failure("REMEMBERED_HIDES_FAILED", error);
+		}
+	};
 	const load = async (address) => {
 		const latest = requireSend(await dependencies.storage.loadSend(address.journeyId));
 		sessionFacts.retain(address.journeyId, latest.send);
@@ -10871,12 +11047,14 @@ function createJourneySender(dependencies, phases = 3, host = {
 			signal.throwIfAborted();
 			const finalAuthorizationError = await requestError(dependencies, snapshot.send, hostId, signal);
 			if (finalAuthorizationError) return block(snapshot, snapshot.send, finalAuthorizationError);
-			return saveStart({
+			const started = await saveStart({
 				...snapshot.send,
 				subject: connection?.subject ?? snapshot.send.subject,
 				confirmedAt: snapshot.send.request && !connection ? null : dependencies.now(),
 				...profile
 			});
+			if (started.send?.confirmedAt) await remember(snapshot.journey);
+			return started;
 		},
 		async respond(raw) {
 			const input = sendChoiceSchema.parse(raw);
@@ -10954,6 +11132,7 @@ function createJourneySender(dependencies, phases = 3, host = {
 					...snapshot,
 					status: "stale"
 				};
+				if (snapshot.send.confirmedAt) await remember(snapshot.journey);
 				if (!host.serving && snapshot.send.request && !snapshot.send.confirmedAt) return {
 					...snapshot,
 					status: "applied"
@@ -11541,9 +11720,9 @@ async function privateStat$2(path, stat, directory) {
 	if (!(process.platform === "win32" ? await windowsOwnerOnly(path, directory ? "directory" : "file") : stat.uid === process.getuid?.() && (stat.mode & 63) === 0)) throw new ApplicationError("SENSITIVE_TERMS_UNSAFE_PATH");
 }
 /** Private user settings survive control-plane database reset. No learned entities enter here. */
-function createSensitiveTermsFile(stateDirectory) {
+function createSensitiveTermsFile(stateDirectory, fileName = "sensitive-terms.json") {
 	const directory = join(stateDirectory, "settings");
-	const path = join(directory, "sensitive-terms.json");
+	const path = join(directory, fileName);
 	let observed = false;
 	async function checkedDirectory(create) {
 		await privateStat$2(stateDirectory, await lstat(stateDirectory), true);
@@ -11650,6 +11829,41 @@ function createSensitiveTermsFile(stateDirectory) {
 	};
 }
 //#endregion
+//#region apps/cli/src/remembered-hides.ts
+/**
+* Each value on its own: one value the file cannot hold never drops the others. `journeys` records
+* the journeys already kept, so a later restart never brings back a value the person removed.
+*/
+async function appendRememberedHides(store, journeys, journeyId, candidates) {
+	const done = await journeys.read();
+	if (done.terms.includes(journeyId)) return;
+	const values = candidates.filter((value) => {
+		try {
+			return normalizeSensitiveTerms([value]).length === 1;
+		} catch {
+			return false;
+		}
+	});
+	if (values.length) {
+		const saved = await store.read();
+		const next = normalizeSensitiveTerms([...saved.terms, ...values]);
+		if (next.length !== saved.terms.length) await store.replace(saved.revision, next);
+	}
+	await journeys.replace(done.revision, [...done.terms, journeyId]);
+}
+/** Counts only, so no other remembered value reaches the agent that asked. */
+async function removeRememberedHides(store, values) {
+	const removed = new Set(values.map((item) => item.trim().normalize("NFC")));
+	const saved = await store.read();
+	const kept = saved.terms.filter((term) => !removed.has(term));
+	if (kept.length !== saved.terms.length) await store.replace(saved.revision, kept);
+	const found = saved.terms.length - kept.length;
+	return {
+		removed: found,
+		notFound: removed.size - found
+	};
+}
+//#endregion
 //#region apps/cli/src/account/snapshot.ts
 function accountSnapshot(value) {
 	const empty = {
@@ -12870,6 +13084,8 @@ async function compose(options, callbacks, bundles) {
 		traceStartup("library-end");
 		const outputDir = library.path;
 		const sensitiveTerms = createSensitiveTermsFile(stateDir);
+		const rememberedHides = createSensitiveTermsFile(stateDir, "remembered-hides.json");
+		const rememberedJourneys = createSensitiveTermsFile(stateDir, "remembered-hides-journeys.json");
 		const processing = {
 			sensitiveTerms,
 			adapters: createNativeAdapters(),
@@ -12908,6 +13124,7 @@ async function compose(options, callbacks, bundles) {
 		};
 		const prepareJourney = createJourneyPreparation({
 			storage: journeyStorage,
+			rememberedHides: async () => (await rememberedHides.read()).terms,
 			harnesses,
 			processing,
 			execution,
@@ -12956,6 +13173,7 @@ async function compose(options, callbacks, bundles) {
 				auth: sendAuth,
 				now: () => (/* @__PURE__ */ new Date()).toISOString(),
 				failure: (code, cause) => diagnostics.onFailure(code, cause),
+				rememberHides: (journey) => appendRememberedHides(rememberedHides, rememberedJourneys, journey.journeyId, rememberedHideValues(journey)),
 				sessionTransfer: (workId, transfer) => diagnostics.onActivity({
 					event: "journey.session_transfer",
 					at: (/* @__PURE__ */ new Date()).toISOString(),
@@ -13116,6 +13334,7 @@ async function compose(options, callbacks, bundles) {
 		})();
 		return {
 			application,
+			rememberedHides,
 			remoteWorkers: createRemotePreflight({
 				storage: journeyStorage,
 				harnesses,
@@ -13330,6 +13549,7 @@ async function invoke(runtime, command, value, signal, getAudience = "agent") {
 		case "workflow.resume": return app.resume(commandSchema.parse(value));
 		case "bundleLibrary.get": return app.getBundleLibrary();
 		case "bundleLibrary.save": return app.saveBundleLibrary(z.object({ directory: z.string().max(4096).nullable() }).parse(value).directory);
+		case "rememberedHides.remove": return removeRememberedHides(runtime.rememberedHides, z.object({ values: z.array(z.string()).min(1).max(1e3) }).strict().parse(value).values);
 		case "sensitiveTerms.get": return app.getSensitiveTerms();
 		case "sensitiveTerms.replace": return app.replaceSensitiveTerms(replaceSensitiveTermsSchema.parse(value));
 		case "processing.catalog": return app.getProcessingCatalog();