@hey-hey/cli 3.0.2 → 3.1.0

package/dist/index.js

@@ -403,7 +403,7 @@ var require_cli_options = __commonJS({
 var version;
 var init_package = __esm({
   "package.json"() {
-    version = "3.0.2";
+    version = "3.1.0";
   }
 });
 
@@ -1382,7 +1382,7 @@ search_implementation_hints({
 \`\`\`
 
 If a hint contradicts what you observe in the code, trust the code and update or delete the hint \u2014 hints can go stale.`;
-    ephemeralAgentIterationGuidance = `When updating or iterating on existing work, remember that agents are ephemeral and do not share an ongoing dialogue with prior iterations; avoid telling an agent not to do something it could not otherwise know about, because that context only creates confusion.`;
+    ephemeralAgentIterationGuidance = `When updating or iterating on existing work, remember that agents are ephemeral and do not share an ongoing dialogue with prior iterations; avoid telling an agent not to do something it could not otherwise know about, because that context only creates confusion. Because future agents do not inherit the current conversation, preserve its material conclusions in authored entities.`;
     deferredMcpTools = `## Deferred MCP Tools Are Not Disconnected
 
 MCP tools listed as "deferred" or behind "still connecting" reminders are not disconnected \u2014 they are lazy-loaded via \`ToolSearch\`. The platform MCP server is connected; the tool schemas just have not been fetched yet.
@@ -32734,7 +32734,7 @@ var init_api2 = __esm({
     MachinesApiAxiosParamCreator = function(configuration) {
       return {
         /**
-         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Unknown, expired, consumed, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Recognized same-claimant lifecycle failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable.
          * @summary Abandon a machine enrollment claim
          * @param {AbandonMachineEnrollmentClaimRequestDto} abandonMachineEnrollmentClaimRequestDto
          * @param {*} [options] Override http request option.
@@ -32763,7 +32763,7 @@ var init_api2 = __esm({
           };
         },
         /**
-         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn and rotates the opaque HttpOnly browser identity needed to observe local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown codes, cross-account enrollments, and otherwise privacy-sensitive failures remain indistinguishable.
          * @summary Begin a machine enrollment claim
          * @param {BeginMachineEnrollmentClaimRequestDto} beginMachineEnrollmentClaimRequestDto
          * @param {*} [options] Override http request option.
@@ -32792,7 +32792,7 @@ var init_api2 = __esm({
           };
         },
         /**
-         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. It also issues an opaque HttpOnly browser identity whose hash is promoted to the exact controller credential only after successful local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable.
          * @summary Complete a machine enrollment claim
          * @param {CompleteMachineEnrollmentClaimRequestDto} completeMachineEnrollmentClaimRequestDto
          * @param {*} [options] Override http request option.
@@ -33049,13 +33049,12 @@ var init_api2 = __esm({
           };
         },
         /**
-         * Returns every machine currently paired to the authenticated user and optionally projects the requesting controller installation\'s binding eligibility independently from global machine execution readiness.
+         * Returns every machine currently paired to the authenticated user and projects the server-resolved browser controller identity independently from global machine execution readiness. An expired authorization window cannot be reused, but its still-valid browser identity can select the exact controller credential for a fresh passkey authorization.
          * @summary List paired machines
-         * @param {string} [controllerInstallationId] Optional stable identifier for the passkey-prompting browser installation. When supplied, the API resolves an enrolled controller binding for each machine; the identifier alone grants no authority. Non-browser inventory callers omit it.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listMachines: async (controllerInstallationId, options = {}) => {
+        listMachines: async (options = {}) => {
           const localVarPath = `/machines`;
           const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
           let baseOptions;
@@ -33066,9 +33065,6 @@ var init_api2 = __esm({
           const localVarHeaderParameter = {};
           const localVarQueryParameter = {};
           await setBearerAuthToObject(localVarHeaderParameter, configuration);
-          if (controllerInstallationId !== void 0) {
-            localVarQueryParameter["controllerInstallationId"] = controllerInstallationId;
-          }
           setSearchParams(localVarUrlObj, localVarQueryParameter);
           let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
           localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
@@ -33352,7 +33348,7 @@ var init_api2 = __esm({
       const localVarAxiosParamCreator = MachinesApiAxiosParamCreator(configuration);
       return {
         /**
-         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Unknown, expired, consumed, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Recognized same-claimant lifecycle failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable.
          * @summary Abandon a machine enrollment claim
          * @param {AbandonMachineEnrollmentClaimRequestDto} abandonMachineEnrollmentClaimRequestDto
          * @param {*} [options] Override http request option.
@@ -33365,7 +33361,7 @@ var init_api2 = __esm({
           return (axios3, basePath) => createRequestFunction(localVarAxiosArgs, axios_default, BASE_PATH, configuration)(axios3, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn and rotates the opaque HttpOnly browser identity needed to observe local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown codes, cross-account enrollments, and otherwise privacy-sensitive failures remain indistinguishable.
          * @summary Begin a machine enrollment claim
          * @param {BeginMachineEnrollmentClaimRequestDto} beginMachineEnrollmentClaimRequestDto
          * @param {*} [options] Override http request option.
@@ -33378,7 +33374,7 @@ var init_api2 = __esm({
           return (axios3, basePath) => createRequestFunction(localVarAxiosArgs, axios_default, BASE_PATH, configuration)(axios3, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. It also issues an opaque HttpOnly browser identity whose hash is promoted to the exact controller credential only after successful local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable.
          * @summary Complete a machine enrollment claim
          * @param {CompleteMachineEnrollmentClaimRequestDto} completeMachineEnrollmentClaimRequestDto
          * @param {*} [options] Override http request option.
@@ -33499,14 +33495,13 @@ var init_api2 = __esm({
           return (axios3, basePath) => createRequestFunction(localVarAxiosArgs, axios_default, BASE_PATH, configuration)(axios3, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Returns every machine currently paired to the authenticated user and optionally projects the requesting controller installation\'s binding eligibility independently from global machine execution readiness.
+         * Returns every machine currently paired to the authenticated user and projects the server-resolved browser controller identity independently from global machine execution readiness. An expired authorization window cannot be reused, but its still-valid browser identity can select the exact controller credential for a fresh passkey authorization.
          * @summary List paired machines
-         * @param {string} [controllerInstallationId] Optional stable identifier for the passkey-prompting browser installation. When supplied, the API resolves an enrolled controller binding for each machine; the identifier alone grants no authority. Non-browser inventory callers omit it.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listMachines(controllerInstallationId, options) {
-          const localVarAxiosArgs = await localVarAxiosParamCreator.listMachines(controllerInstallationId, options);
+        async listMachines(options) {
+          const localVarAxiosArgs = await localVarAxiosParamCreator.listMachines(options);
           const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
           const localVarOperationServerBasePath = operationServerMap["MachinesApi.listMachines"]?.[localVarOperationServerIndex]?.url;
           return (axios3, basePath) => createRequestFunction(localVarAxiosArgs, axios_default, BASE_PATH, configuration)(axios3, localVarOperationServerBasePath || basePath);
@@ -33640,7 +33635,7 @@ var init_api2 = __esm({
     };
     MachinesApi = class extends BaseAPI {
       /**
-       * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Unknown, expired, consumed, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+       * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Recognized same-claimant lifecycle failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable.
        * @summary Abandon a machine enrollment claim
        * @param {MachinesApiAbandonMachineEnrollmentClaimRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
@@ -33651,7 +33646,7 @@ var init_api2 = __esm({
         return MachinesApiFp(this.configuration).abandonMachineEnrollmentClaim(requestParameters.abandonMachineEnrollmentClaimRequestDto, options).then((request) => request(this.axios, this.basePath));
       }
       /**
-       * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+       * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn and rotates the opaque HttpOnly browser identity needed to observe local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown codes, cross-account enrollments, and otherwise privacy-sensitive failures remain indistinguishable.
        * @summary Begin a machine enrollment claim
        * @param {MachinesApiBeginMachineEnrollmentClaimRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
@@ -33662,7 +33657,7 @@ var init_api2 = __esm({
         return MachinesApiFp(this.configuration).beginMachineEnrollmentClaim(requestParameters.beginMachineEnrollmentClaimRequestDto, options).then((request) => request(this.axios, this.basePath));
       }
       /**
-       * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response.
+       * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. It also issues an opaque HttpOnly browser identity whose hash is promoted to the exact controller credential only after successful local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable.
        * @summary Complete a machine enrollment claim
        * @param {MachinesApiCompleteMachineEnrollmentClaimRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
@@ -33762,15 +33757,14 @@ var init_api2 = __esm({
         return MachinesApiFp(this.configuration).listMachineSecurityEvents(requestParameters.machineId, options).then((request) => request(this.axios, this.basePath));
       }
       /**
-       * Returns every machine currently paired to the authenticated user and optionally projects the requesting controller installation\'s binding eligibility independently from global machine execution readiness.
+       * Returns every machine currently paired to the authenticated user and projects the server-resolved browser controller identity independently from global machine execution readiness. An expired authorization window cannot be reused, but its still-valid browser identity can select the exact controller credential for a fresh passkey authorization.
        * @summary List paired machines
-       * @param {MachinesApiListMachinesRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
        * @throws {RequiredError}
        * @memberof MachinesApi
        */
-      listMachines(requestParameters = {}, options) {
-        return MachinesApiFp(this.configuration).listMachines(requestParameters.controllerInstallationId, options).then((request) => request(this.axios, this.basePath));
+      listMachines(options) {
+        return MachinesApiFp(this.configuration).listMachines(options).then((request) => request(this.axios, this.basePath));
       }
       /**
        * Acknowledged pre-flight liveness check. Emits a lightweight `machine.ping` frame over the authenticated WebSocket to the machine and awaits a socket acknowledgement within a short timeout. Unlike `MachineDto.active` (a heartbeat-maintained Redis presence flag, up to ~90s stale) this performs an actual round-trip, confirming the CLI will respond *right now*. Intended to gate submit actions on press so an unreachable machine surfaces an actionable error before any navigation, rather than as a later failed dispatch. Always responds 200 with `{ acknowledged }`; a machine that is not connected or does not ack within the timeout yields `acknowledged: false` rather than an error status, leaving the UX decision to the caller. The machine must belong to the authenticated user and not be revoked.
@@ -39404,6 +39398,24 @@ var init_create_commit_report_tool = __esm({
         const summary = summaryRaw;
         const files = Array.isArray(filesRaw) ? filesRaw : [];
         const hashes = Array.isArray(hashesRaw) ? hashesRaw : [];
+        const entities = run2.taskId ? [
+          {
+            entityType: "TASK",
+            entityId: run2.taskId,
+            relation: "PRIMARY"
+          }
+        ] : [
+          {
+            entityType: "AGENT_SESSION",
+            entityId: run2.runId,
+            relation: "PRIMARY"
+          },
+          ...hashes.map(({ service }) => ({
+            entityType: "SERVICE",
+            entityId: service,
+            relation: "CONTEXT"
+          }))
+        ];
         const platformArgs = {
           reportType: "COMMIT",
           audience: "PROJECT_VISIBLE",
@@ -39412,7 +39424,8 @@ var init_create_commit_report_tool = __esm({
             summary,
             files,
             hashes
-          }
+          },
+          entities
         };
         const proxyResult = await this.proxy.create({
           runId: ctx.runId,
@@ -39941,7 +39954,7 @@ var init_file_change_facts = __esm({
 });
 
 // src/agents/commit/commit-executor.ts
-var import_node_child_process3, import_node_path3, import_node_util2, execFileAsync2, MAX_GIT_BUFFER, git, runGitOperation, readCommittedFiles, getServiceWorkspaces, buildScopes, validateTraceability, executeValidatedCommit, executeCanonicalCommit;
+var import_node_child_process3, import_node_path3, import_node_util2, execFileAsync2, MAX_GIT_BUFFER, git, runGitOperation, readCommittedFiles, getServiceWorkspaces, buildScopes, deriveCommitTraceability, buildCommitTrailers, executeValidatedCommit, executeCanonicalCommit;
 var init_commit_executor = __esm({
   "src/agents/commit/commit-executor.ts"() {
     "use strict";
@@ -40103,20 +40116,40 @@ var init_commit_executor = __esm({
       });
       return resolvedScopes;
     };
-    validateTraceability = (run2, payload) => {
-      if (!run2.taskId) {
-        throw new Error("Commit validation failed: the active Run has no task identifier.");
-      }
-      if (payload.taskId && payload.taskId !== run2.taskId) {
-        throw new Error("Commit validation failed: caller task identifier disagrees with Run context.");
-      }
+    deriveCommitTraceability = (run2, payload) => {
       if (payload.codingSessionId && payload.codingSessionId !== run2.runId) {
         throw new Error(
           "Commit validation failed: caller coding-session identifier disagrees with Run context."
         );
       }
-      return run2.taskId;
+      if (run2.taskId) {
+        if (payload.taskId && payload.taskId !== run2.taskId) {
+          throw new Error(
+            "Commit validation failed: caller task identifier disagrees with Run context."
+          );
+        }
+        return { kind: "task", taskId: run2.taskId, runId: run2.runId };
+      }
+      if (payload.taskId) {
+        throw new Error(
+          "Commit validation failed: taskless Run cannot accept caller task traceability."
+        );
+      }
+      const serviceIds = [...new Set(run2.session.services.map(({ id }) => id))].sort();
+      const subject = run2.entity;
+      if (subject?.entityType !== "SERVICE" || !serviceIds.includes(subject.entityId) || !run2.session.launchServiceId || !serviceIds.includes(run2.session.launchServiceId)) {
+        throw new Error(
+          "Commit validation failed: the taskless Run has no valid Service execution scope."
+        );
+      }
+      return { kind: "service", runId: run2.runId, serviceIds };
     };
+    buildCommitTrailers = (traceability, serviceId, planId) => [
+      ...traceability.kind === "task" ? [`Task-Id: ${traceability.taskId}`] : [],
+      ...planId ? [`Plan-Id: ${planId}`] : [],
+      `Coding-Session-Id: ${traceability.runId}`,
+      ...traceability.kind === "service" ? [`Service-Id: ${serviceId}`] : []
+    ];
     executeValidatedCommit = async (input) => {
       const { run: run2, payload, liveFiles, message, commitReportTool, logger } = input;
       logger.debug("local.commit_runtime.validation_started", {
@@ -40129,7 +40162,12 @@ var init_commit_executor = __esm({
           "Commit validation failed: commit agent did not submit a typed message result."
         );
       }
-      const taskId = validateTraceability(run2, payload);
+      const traceability = deriveCommitTraceability(run2, payload);
+      logger.debug("local.commit_runtime.traceability_derived", {
+        runId: run2.runId,
+        traceabilityKind: traceability.kind,
+        ...traceability.kind === "task" ? { taskId: traceability.taskId } : { serviceIds: traceability.serviceIds }
+      });
       const scopes = buildScopes(run2, liveFiles, logger);
       if (scopes.length === 0) {
         throw new Error("Commit validation failed: no uncommitted canonical Run files remain.");
@@ -40138,11 +40176,10 @@ var init_commit_executor = __esm({
         runId: run2.runId,
         services: scopes.map((scope) => ({ serviceId: scope.serviceId, files: scope.files }))
       });
-      const trailers = [`Task-Id: ${taskId}`, `Coding-Session-Id: ${run2.runId}`];
       const planId = run2.session.contextMetadata.launchPlanId;
-      if (planId) trailers.splice(1, 0, `Plan-Id: ${planId}`);
       const commits = [];
       for (const scope of scopes) {
+        const trailers = buildCommitTrailers(traceability, scope.serviceId, planId);
         logger.info("local.commit_runtime.staging_started", {
           runId: run2.runId,
           serviceId: scope.serviceId,
@@ -40229,7 +40266,7 @@ var init_commit_message_result = __esm({
     "use strict";
     init_zod();
     commitMessageSchema = external_exports.string().trim().min(1).max(72).refine((message) => !message.includes("\n"), "Commit message must be a single line").refine(
-      (message) => !/^(Task-Id|Plan-Id|Coding-Session-Id):/imu.test(message),
+      (message) => !/^(Task-Id|Plan-Id|Coding-Session-Id|Service-Id):/imu.test(message),
       "Commit message must not contain runtime-owned trailers"
     );
     CommitMessageResultStore = class {
@@ -67031,7 +67068,7 @@ var init_axios4 = __esm({
   }
 });
 
-// ../ui-common/dist/chunk-T6JACYZU.mjs
+// ../ui-common/dist/chunk-Y256XDSH.mjs
 function setFlattenedQueryParams2(urlSearchParams, parameter, key = "") {
   if (parameter == null) return;
   if (typeof parameter === "object") {
@@ -67051,8 +67088,8 @@ function setFlattenedQueryParams2(urlSearchParams, parameter, key = "") {
   }
 }
 var BASE_PATH2, COLLECTION_FORMATS2, BaseAPI2, RequiredError3, operationServerMap2, DUMMY_BASE_URL2, assertParamExists2, setBearerAuthToObject2, setSearchParams2, serializeDataIfNeeded2, toPathString2, createRequestFunction2, ConversationStartRunRequestDtoProviderEnum2, CreateImplementationHintDtoSourceTypeEnum, DesignDocSectionUpdateSource, EvidenceItemTypeEnum2, EvidenceItemSourceEnum, LocalPromptType2, RunEntityReferenceEntityTypeEnum2, TaskSectionUpdateSource2, WorkStatus2, WorkflowName2, ActivityCorrelationApiAxiosParamCreator, ActivityCorrelationApiFp, ActivityCorrelationApi, AgentEdgesApiAxiosParamCreator, AgentEdgesApiFp, AgentEdgesApi, AgentSessionsApiAxiosParamCreator2, AgentSessionsApiFp2, AgentSessionsApi, AnalyticsApiAxiosParamCreator, AnalyticsApiFp, AnalyticsApi, ControllerAuthorizationApiAxiosParamCreator, ControllerAuthorizationApiFp, ControllerAuthorizationApi, DebugAdminApiAxiosParamCreator, DebugAdminApiFp, DebugAdminApi, DefaultApiAxiosParamCreator2, DefaultApiFp2, DefaultApi2, DesignDocsApiAxiosParamCreator, DesignDocsApiFp, DesignDocsApi, EntitiesApiAxiosParamCreator, EntitiesApiFp, EntitiesApi, EntityContextApiAxiosParamCreator, EntityContextApiFp, EntityContextApi, HelpApiAxiosParamCreator, HelpApiFp, HelpApi, MachinesApiAxiosParamCreator2, MachinesApiFp2, MachinesApi2, NotificationsApiAxiosParamCreator, NotificationsApiFp, NotificationsApi, PlansApiAxiosParamCreator, PlansApiFp, PlansApi, PrivateBetaAccessApiAxiosParamCreator, PrivateBetaAccessApiFp, PrivateBetaAccessApi, ProjectsApiAxiosParamCreator, ProjectsApiFp, ProjectsApi, ProposalsApiAxiosParamCreator, ProposalsApiFp, ProposalsApi, ReportBugsApiAxiosParamCreator, ReportBugsApiFp, ReportBugsApi, ReportsApiAxiosParamCreator, ReportsApiFp, ReportsApi, SecondaryActionsApiAxiosParamCreator, SecondaryActionsApiFp, SecondaryActionsApi, StagedContentApiAxiosParamCreator, StagedContentApiFp, StagedContentApi, SuggestionsApiAxiosParamCreator, SuggestionsApiFp, SuggestionsApi, TasksApiAxiosParamCreator, TasksApiFp, TasksApi, WorkItemRefinementApiAxiosParamCreator, WorkItemRefinementApiFp, WorkItemRefinementApi, WorkflowsApiAxiosParamCreator, WorkflowsApiFp, WorkflowsApi, Configuration2;
-var init_chunk_T6JACYZU = __esm({
-  "../ui-common/dist/chunk-T6JACYZU.mjs"() {
+var init_chunk_Y256XDSH = __esm({
+  "../ui-common/dist/chunk-Y256XDSH.mjs"() {
     "use strict";
     init_axios4();
     init_axios4();
@@ -83101,7 +83138,7 @@ var init_chunk_T6JACYZU = __esm({
     MachinesApiAxiosParamCreator2 = function(configuration) {
       return {
         /**
-         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Unknown, expired, consumed, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Recognized same-claimant lifecycle failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable. 
          * @summary Abandon a machine enrollment claim
          * @param {AbandonMachineEnrollmentClaimRequestDto} abandonMachineEnrollmentClaimRequestDto 
          * @param {*} [options] Override http request option.
@@ -83130,7 +83167,7 @@ var init_chunk_T6JACYZU = __esm({
           };
         },
         /**
-         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn and rotates the opaque HttpOnly browser identity needed to observe local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown codes, cross-account enrollments, and otherwise privacy-sensitive failures remain indistinguishable. 
          * @summary Begin a machine enrollment claim
          * @param {BeginMachineEnrollmentClaimRequestDto} beginMachineEnrollmentClaimRequestDto 
          * @param {*} [options] Override http request option.
@@ -83159,7 +83196,7 @@ var init_chunk_T6JACYZU = __esm({
           };
         },
         /**
-         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. It also issues an opaque HttpOnly browser identity whose hash is promoted to the exact controller credential only after successful local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable. 
          * @summary Complete a machine enrollment claim
          * @param {CompleteMachineEnrollmentClaimRequestDto} completeMachineEnrollmentClaimRequestDto 
          * @param {*} [options] Override http request option.
@@ -83416,13 +83453,12 @@ var init_chunk_T6JACYZU = __esm({
           };
         },
         /**
-         * Returns every machine currently paired to the authenticated user and optionally projects the requesting controller installation\'s binding eligibility independently from global machine execution readiness.
+         * Returns every machine currently paired to the authenticated user and projects the server-resolved browser controller identity independently from global machine execution readiness. An expired authorization window cannot be reused, but its still-valid browser identity can select the exact controller credential for a fresh passkey authorization.
          * @summary List paired machines
-         * @param {string} [controllerInstallationId] Optional stable identifier for the passkey-prompting browser installation. When supplied, the API resolves an enrolled controller binding for each machine; the identifier alone grants no authority. Non-browser inventory callers omit it.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        listMachines: async (controllerInstallationId, options = {}) => {
+        listMachines: async (options = {}) => {
           const localVarPath = `/machines`;
           const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL2);
           let baseOptions;
@@ -83433,9 +83469,6 @@ var init_chunk_T6JACYZU = __esm({
           const localVarHeaderParameter = {};
           const localVarQueryParameter = {};
           await setBearerAuthToObject2(localVarHeaderParameter, configuration);
-          if (controllerInstallationId !== void 0) {
-            localVarQueryParameter["controllerInstallationId"] = controllerInstallationId;
-          }
           setSearchParams2(localVarUrlObj, localVarQueryParameter);
           let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
           localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
@@ -83719,7 +83752,7 @@ var init_chunk_T6JACYZU = __esm({
       const localVarAxiosParamCreator = MachinesApiAxiosParamCreator2(configuration);
       return {
         /**
-         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Unknown, expired, consumed, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+         * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Recognized same-claimant lifecycle failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable. 
          * @summary Abandon a machine enrollment claim
          * @param {AbandonMachineEnrollmentClaimRequestDto} abandonMachineEnrollmentClaimRequestDto 
          * @param {*} [options] Override http request option.
@@ -83733,7 +83766,7 @@ var init_chunk_T6JACYZU = __esm({
           return (axios3, basePath) => createRequestFunction2(localVarAxiosArgs, axios_default2, BASE_PATH2, configuration)(axios3, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+         * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn and rotates the opaque HttpOnly browser identity needed to observe local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown codes, cross-account enrollments, and otherwise privacy-sensitive failures remain indistinguishable. 
          * @summary Begin a machine enrollment claim
          * @param {BeginMachineEnrollmentClaimRequestDto} beginMachineEnrollmentClaimRequestDto 
          * @param {*} [options] Override http request option.
@@ -83747,7 +83780,7 @@ var init_chunk_T6JACYZU = __esm({
           return (axios3, basePath) => createRequestFunction2(localVarAxiosArgs, axios_default2, BASE_PATH2, configuration)(axios3, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+         * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. It also issues an opaque HttpOnly browser identity whose hash is promoted to the exact controller credential only after successful local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable. 
          * @summary Complete a machine enrollment claim
          * @param {CompleteMachineEnrollmentClaimRequestDto} completeMachineEnrollmentClaimRequestDto 
          * @param {*} [options] Override http request option.
@@ -83877,15 +83910,14 @@ var init_chunk_T6JACYZU = __esm({
           return (axios3, basePath) => createRequestFunction2(localVarAxiosArgs, axios_default2, BASE_PATH2, configuration)(axios3, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Returns every machine currently paired to the authenticated user and optionally projects the requesting controller installation\'s binding eligibility independently from global machine execution readiness.
+         * Returns every machine currently paired to the authenticated user and projects the server-resolved browser controller identity independently from global machine execution readiness. An expired authorization window cannot be reused, but its still-valid browser identity can select the exact controller credential for a fresh passkey authorization.
          * @summary List paired machines
-         * @param {string} [controllerInstallationId] Optional stable identifier for the passkey-prompting browser installation. When supplied, the API resolves an enrolled controller binding for each machine; the identifier alone grants no authority. Non-browser inventory callers omit it.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async listMachines(controllerInstallationId, options) {
+        async listMachines(options) {
           var _a, _b, _c;
-          const localVarAxiosArgs = await localVarAxiosParamCreator.listMachines(controllerInstallationId, options);
+          const localVarAxiosArgs = await localVarAxiosParamCreator.listMachines(options);
           const localVarOperationServerIndex = (_a = configuration == null ? void 0 : configuration.serverIndex) != null ? _a : 0;
           const localVarOperationServerBasePath = (_c = (_b = operationServerMap2["MachinesApi.listMachines"]) == null ? void 0 : _b[localVarOperationServerIndex]) == null ? void 0 : _c.url;
           return (axios3, basePath) => createRequestFunction2(localVarAxiosArgs, axios_default2, BASE_PATH2, configuration)(axios3, localVarOperationServerBasePath || basePath);
@@ -84028,7 +84060,7 @@ var init_chunk_T6JACYZU = __esm({
     };
     MachinesApi2 = class extends BaseAPI2 {
       /**
-       * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Unknown, expired, consumed, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+       * Reject a protocol-version-2 enrollment after the authenticated browser has begun its claim but cannot complete WebAuthn registration. Only the user and organization that claimed the unexpired enrollment can abandon it. A retry by the same claimant also succeeds when the enrollment is already rejected, including when rejection completed before an earlier response was received. Success consumes any outstanding challenge and confirms the enrollment is terminal without activating the machine. Recognized same-claimant lifecycle failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable. 
        * @summary Abandon a machine enrollment claim
        * @param {MachinesApiAbandonMachineEnrollmentClaimRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
@@ -84039,7 +84071,7 @@ var init_chunk_T6JACYZU = __esm({
         return MachinesApiFp2(this.configuration).abandonMachineEnrollmentClaim(requestParameters.abandonMachineEnrollmentClaimRequestDto, options).then((request) => request(this.axios, this.basePath));
       }
       /**
-       * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+       * Begin the authenticated browser half of a protocol-version-2 machine enrollment. The caller supplies the normalized human enrollment code and controller label in the context of the authenticated account and current organization. A claimable enrollment returns its original non-secret review data and server-fixed WebAuthn creation options. A claim already completed by the same claimant returns the authoritative awaiting-machine-confirmation state without reopening WebAuthn and rotates the opaque HttpOnly browser identity needed to observe local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown codes, cross-account enrollments, and otherwise privacy-sensitive failures remain indistinguishable. 
        * @summary Begin a machine enrollment claim
        * @param {MachinesApiBeginMachineEnrollmentClaimRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
@@ -84050,7 +84082,7 @@ var init_chunk_T6JACYZU = __esm({
         return MachinesApiFp2(this.configuration).beginMachineEnrollmentClaim(requestParameters.beginMachineEnrollmentClaimRequestDto, options).then((request) => request(this.axios, this.basePath));
       }
       /**
-       * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. Unknown, expired, consumed, invalid, cross-account, and invalid-transition enrollments use the same browser-visible failure response. 
+       * Submit the browser\'s WebAuthn registration credential for a previously begun protocol-version-2 enrollment claim. The API verifies the stored challenge, exact origin and RP ID, user presence and verification, ES256, credential uniqueness, and expected enrollment state. Success records the controller evidence and stops at `awaiting-machine-confirmation`; it never activates the machine or returns a machine credential. It also issues an opaque HttpOnly browser identity whose hash is promoted to the exact controller credential only after successful local confirmation. Recognized same-claimant lifecycle and client compatibility failures return truthful browser-safe guidance. Unknown, cross-account, and otherwise privacy-sensitive failures remain indistinguishable. 
        * @summary Complete a machine enrollment claim
        * @param {MachinesApiCompleteMachineEnrollmentClaimRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
@@ -84150,15 +84182,14 @@ var init_chunk_T6JACYZU = __esm({
         return MachinesApiFp2(this.configuration).listMachineSecurityEvents(requestParameters.machineId, options).then((request) => request(this.axios, this.basePath));
       }
       /**
-       * Returns every machine currently paired to the authenticated user and optionally projects the requesting controller installation\'s binding eligibility independently from global machine execution readiness.
+       * Returns every machine currently paired to the authenticated user and projects the server-resolved browser controller identity independently from global machine execution readiness. An expired authorization window cannot be reused, but its still-valid browser identity can select the exact controller credential for a fresh passkey authorization.
        * @summary List paired machines
-       * @param {MachinesApiListMachinesRequest} requestParameters Request parameters.
        * @param {*} [options] Override http request option.
        * @throws {RequiredError}
        * @memberof MachinesApi
        */
-      listMachines(requestParameters = {}, options) {
-        return MachinesApiFp2(this.configuration).listMachines(requestParameters.controllerInstallationId, options).then((request) => request(this.axios, this.basePath));
+      listMachines(options) {
+        return MachinesApiFp2(this.configuration).listMachines(options).then((request) => request(this.axios, this.basePath));
       }
       /**
        * Acknowledged pre-flight liveness check. Emits a lightweight `machine.ping` frame over the authenticated WebSocket to the machine and awaits a socket acknowledgement within a short timeout. Unlike `MachineDto.active` (a heartbeat-maintained Redis presence flag, up to ~90s stale) this performs an actual round-trip, confirming the CLI will respond *right now*. Intended to gate submit actions on press so an unreachable machine surfaces an actionable error before any navigation, rather than as a later failed dispatch. Always responds 200 with `{ acknowledged }`; a machine that is not connected or does not ack within the timeout yields `acknowledged: false` rather than an error status, leaving the UX decision to the caller. The machine must belong to the authenticated user and not be revoked. 
@@ -90336,7 +90367,7 @@ var init_chunk_T6JACYZU = __esm({
   }
 });
 
-// ../ui-common/dist/chunk-7YOBXJPW.mjs
+// ../ui-common/dist/chunk-H5IGJ4AG.mjs
 function getCurrentInitiator() {
   return currentInitiator;
 }
@@ -90346,10 +90377,10 @@ function isInitiatorTrackingEnabled() {
   return host === "localhost" || host === "heyhey.dev" || host === "127.0.0.1" || host === "0.0.0.0" || host.endsWith(".local");
 }
 var currentInitiator, createAccessToken, ensureAxiosHeaders, getRequestPath, coerceAccessToken, createFallbackApiClient, createLegacyAuthAdapter, createClientSet, attachAuthInterceptors, createApiRuntime, attachInitiatorBaseOptions, createBrowserApiRuntime, toGeneratedCreateAgentEdgeRequest, fallbackAxios, fallbackRuntime, runtimeClients, runtimeUnifiedClient, registerRuntimeClients, registerRuntimeUnifiedClient, getResolvedClients, createClientProxy, defaultClient, identityClient, platformClient, knowledgeClient, conversationsClient, workflowsClient, eventsClient, tasksClient, projectsClient, workItemRefinementClient, suggestionsClient, plansClient, debugAdminClient, stagedContentClient, designDocsClient, agentSessionsClient, analyticsClient, reportsClient, notificationsClient, privateBetaAccessClient, activityCorrelationClient, agentEdgesClient, secondaryActionsClient, entityContextClient, helpClient, entitiesClient, proposalsClient, reportBugsClient, machinesClient, controllerAuthorizationClient, UnifiedApiClient, fallbackUnifiedApiClient, unifiedApiClient, createUnifiedApiClient;
-var init_chunk_7YOBXJPW = __esm({
-  "../ui-common/dist/chunk-7YOBXJPW.mjs"() {
+var init_chunk_H5IGJ4AG = __esm({
+  "../ui-common/dist/chunk-H5IGJ4AG.mjs"() {
     "use strict";
-    init_chunk_T6JACYZU();
+    init_chunk_Y256XDSH();
     init_axios4();
     init_axios4();
     createAccessToken = (token) => token;
@@ -90486,7 +90517,7 @@ var init_chunk_7YOBXJPW = __esm({
     attachAuthInterceptors = ({
       axiosInstance,
       authAdapter,
-      includeAuthCookies
+      includeBrowserCredentials
     }) => {
       var _a;
       let authToken = (_a = authAdapter == null ? void 0 : authAdapter.getAccessToken()) != null ? _a : null;
@@ -90542,7 +90573,7 @@ var init_chunk_7YOBXJPW = __esm({
         if (authToken) {
           headers.set("Authorization", `Bearer ${authToken}`);
         }
-        if (includeAuthCookies && config3.url && config3.url.includes("/auth/")) {
+        if (includeBrowserCredentials) {
           config3.withCredentials = true;
         }
         config3.headers = headers;
@@ -90640,7 +90671,7 @@ var init_chunk_7YOBXJPW = __esm({
       const authControls = attachAuthInterceptors({
         axiosInstance,
         authAdapter,
-        includeAuthCookies: true
+        includeBrowserCredentials: true
       });
       if (options.onUnauthorized && options.authAdapter) {
         authControls.onUnauthorized(options.onUnauthorized);
@@ -91326,14 +91357,14 @@ var init_chunk_7YOBXJPW = __esm({
   }
 });
 
-// ../ui-common/dist/chunk-3BOLOLCV.mjs
+// ../ui-common/dist/chunk-R2IVSE3G.mjs
 var buildTaskEntity, buildSetSplittingPayload, SESSION_METHOD_REGISTRY, DEFAULT_HANDLER_PROMPT_TYPE, groupOrder, toneByGroup, methodOrder, SESSION_METHOD_GROUP_LISTINGS, WORKFLOW_NAME_VALUES;
-var init_chunk_3BOLOLCV = __esm({
-  "../ui-common/dist/chunk-3BOLOLCV.mjs"() {
+var init_chunk_R2IVSE3G = __esm({
+  "../ui-common/dist/chunk-R2IVSE3G.mjs"() {
     "use strict";
     init_chunk_O2CI6TZP();
-    init_chunk_7YOBXJPW();
-    init_chunk_T6JACYZU();
+    init_chunk_H5IGJ4AG();
+    init_chunk_Y256XDSH();
     buildTaskEntity = (startupInput) => {
       var _a;
       const entityId = (_a = startupInput.task.id) == null ? void 0 : _a.trim();
@@ -95755,12 +95786,12 @@ var init_zod2 = __esm({
   }
 });
 
-// ../ui-common/dist/chunk-BJEDXRLF.mjs
+// ../ui-common/dist/chunk-5JBQCMKR.mjs
 var evidenceItemTypeSchema, startupSourceTypeSchema2, startupSourceRefSchema2, startupPlanReferenceSchema2, startupPlanStepSchema2, startupPrimaryImplementationConnectionSchema2, startupPrimaryImplementationSchema2, startupDiscrepancySchema2, startupClarificationQuestionSchema2, startupRequiredServiceIdsSchema, startupEvidenceItemSchema, startupSessionPlanResponseSchema2, finalAssessmentSourceTypeSchema, finalAssessmentSourceRefSchema, finalTaskTargetSchema, finalDesignDocTargetSchema, finalImplementationHintTargetSchema, finalEvidenceItemTargetSchema, finalValidationRecommendationTargetOptionalFieldsSchema, finalValidationRecommendationTargetSchema, finalValidationRecommendationFileReferenceSchema, finalValidationRecommendationSchema, finalAssessmentResponseSchema2, verificationResponseSourceTypeSchema2, verificationPlanResponseSchema2, toErrorString2, parseStartupSessionPlanResponse2, childTaskDescriptionUpdateResponseSchema2, setSplittingGeneratedTaskSchema2, setSplittingResponseSchema2, extractJsonFromFence2, extractJsonFromBraces2, extractStructuredJsonPayload2, parseTextAsJson2, parseStartupSessionPlanResponseFromText2;
-var init_chunk_BJEDXRLF = __esm({
-  "../ui-common/dist/chunk-BJEDXRLF.mjs"() {
+var init_chunk_5JBQCMKR = __esm({
+  "../ui-common/dist/chunk-5JBQCMKR.mjs"() {
     "use strict";
-    init_chunk_T6JACYZU();
+    init_chunk_Y256XDSH();
     init_zod2();
     evidenceItemTypeSchema = external_exports2.nativeEnum(EvidenceItemTypeEnum2);
     startupSourceTypeSchema2 = external_exports2.enum([
@@ -109215,12 +109246,12 @@ var import_promises8, import_os, import_path2, import_os2, import_path3, import_
 var init_agents = __esm({
   "../ui-common/dist/agents.mjs"() {
     "use strict";
-    init_chunk_3BOLOLCV();
+    init_chunk_R2IVSE3G();
     init_chunk_QRG63FEH();
-    init_chunk_BJEDXRLF();
+    init_chunk_5JBQCMKR();
     init_chunk_O2CI6TZP();
-    init_chunk_7YOBXJPW();
-    init_chunk_T6JACYZU();
+    init_chunk_H5IGJ4AG();
+    init_chunk_Y256XDSH();
     import_promises8 = require("fs/promises");
     import_os = require("os");
     import_path2 = require("path");
@@ -119187,6 +119218,12 @@ Go wide. A handful of calls does not cover a real project \u2014 half a dozen se
 
 The toolset carries no file-reading tools. The project graph is the only investigation surface.
 
+## Source-conversation continuity
+
+Treat the focal entity's proposal lineage as a research input for every focal entity type. When an applicable proposal identifies an originating conversation, resolve the Agent Session that owns that conversation and call \`get_agent_session\` for its canonical session plus a newest-first page of Conversation messages. Read the first page before deciding whether more history is needed; when \`nextCursor\` is present, pass it back as \`cursor\` to continue toward older messages until you have enough context to understand the material conclusions and any later corrections. Do not substitute \`get_agent_sessions\`, which is the separate accomplishment-summary lookup, or a Conversations \`since\` cursor, which pages forward from an existing message.
+
+Inspect at least the latest relevant messages, and do not assume the focal entity's title, summary, description, requirements, or acceptance criteria fully preserve the discussion. Carry material settled reasoning, decisions, debugging conclusions, design choices, agreed direction, and later corrections into the downstream \`frame\`, \`analysis\`, and \`summary\`; preserve the corrected conclusion rather than an earlier superseded interpretation. This source-conversation duty is independent of recent Project Assistant report reuse: do not change report selection, age or staleness caveats, advisory freshness checks, or the behavior when no reusable report exists.
+
 ## Capability gates
 
 ${edgePosture}
@@ -147068,29 +147105,29 @@ var init_runtime = __esm({
         this.store = store;
         this.logger = logger;
       }
-      async admit(definition, admitted) {
+      async admit(definition, admitted2) {
         this.logger.debug("state_machine.runtime.admission.received", {
-          machineType: admitted.identity.machineType,
-          instanceId: admitted.identity.instanceId,
-          ingressId: admitted.ingressId,
-          eventType: admitted.event.type
-        });
-        return this.runSerial(admitted.identity.instanceId, async () => {
-          const stored = await this.store.findByInstanceId(admitted.identity.instanceId);
-          if (stored && stored.snapshot.identity.machineType !== admitted.identity.machineType) {
+          machineType: admitted2.identity.machineType,
+          instanceId: admitted2.identity.instanceId,
+          ingressId: admitted2.ingressId,
+          eventType: admitted2.event.type
+        });
+        return this.runSerial(admitted2.identity.instanceId, async () => {
+          const stored = await this.store.findByInstanceId(admitted2.identity.instanceId);
+          if (stored && stored.snapshot.identity.machineType !== admitted2.identity.machineType) {
             this.logger.debug("state_machine.runtime.admission.identity_mismatch", {
-              requestedMachineType: admitted.identity.machineType,
+              requestedMachineType: admitted2.identity.machineType,
               persistedMachineType: stored.snapshot.identity.machineType,
-              instanceId: admitted.identity.instanceId,
-              ingressId: admitted.ingressId
+              instanceId: admitted2.identity.instanceId,
+              ingressId: admitted2.ingressId
             });
             return {
               status: "rejected",
               code: "identity_mismatch",
-              reason: `Machine instance ${admitted.identity.instanceId} belongs to ${stored.snapshot.identity.machineType}, not ${admitted.identity.machineType}.`
+              reason: `Machine instance ${admitted2.identity.instanceId} belongs to ${stored.snapshot.identity.machineType}, not ${admitted2.identity.machineType}.`
             };
           }
-          const previous = stored?.acceptedIngress.get(admitted.ingressId);
+          const previous = stored?.acceptedIngress.get(admitted2.ingressId);
           if (previous) {
             const replay = {
               status: "replayed",
@@ -147099,9 +147136,9 @@ var init_runtime = __esm({
               effects: previous.effects
             };
             this.logger.debug("state_machine.runtime.admission.replayed", {
-              machineType: admitted.identity.machineType,
-              instanceId: admitted.identity.instanceId,
-              ingressId: admitted.ingressId,
+              machineType: admitted2.identity.machineType,
+              instanceId: admitted2.identity.instanceId,
+              ingressId: admitted2.ingressId,
               revision: previous.snapshot.revision,
               effectCount: previous.effects.length
             });
@@ -147118,24 +147155,24 @@ var init_runtime = __esm({
           } else {
             const [createdSnapshot, createdActions] = initialTransition(
               definition.machine,
-              definition.createInitialInput(admitted.identity)
+              definition.createInitialInput(admitted2.identity)
             );
             initialSnapshot = createdSnapshot;
             initialActions = createdActions;
           }
           const snapshot = stored?.snapshot ?? {
-            identity: admitted.identity,
+            identity: admitted2.identity,
             revision: 0,
             ...definition.readSnapshot(initialSnapshot)
           };
           this.logger.debug("state_machine.runtime.transition.evaluating", {
-            machineType: admitted.identity.machineType,
-            instanceId: admitted.identity.instanceId,
-            ingressId: admitted.ingressId,
+            machineType: admitted2.identity.machineType,
+            instanceId: admitted2.identity.instanceId,
+            ingressId: admitted2.ingressId,
             currentRevision: snapshot.revision,
             isInitialEvent: stored === null
           });
-          const xstateEvent = definition.toXStateEvent(admitted.event);
+          const xstateEvent = definition.toXStateEvent(admitted2.event);
           const [evaluatedSnapshot, transitionActions] = transition(
             definition.machine,
             initialSnapshot,
@@ -147146,11 +147183,11 @@ var init_runtime = __esm({
           const candidateTransitions = transitionChangedSnapshot || transitionActions.length > 0 ? [true] : definition.machine.getTransitionData(initialSnapshot, xstateEvent);
           if (candidateTransitions.length === 0) {
             const code = stored ? "transition_rejected" : "unsupported_initial_event";
-            const reason = `Event ${admitted.event.type} is not accepted from the current state.`;
+            const reason = `Event ${admitted2.event.type} is not accepted from the current state.`;
             this.logger.debug("state_machine.runtime.transition.rejected", {
-              machineType: admitted.identity.machineType,
-              instanceId: admitted.identity.instanceId,
-              ingressId: admitted.ingressId,
+              machineType: admitted2.identity.machineType,
+              instanceId: admitted2.identity.instanceId,
+              ingressId: admitted2.ingressId,
               code,
               reason
             });
@@ -147161,20 +147198,20 @@ var init_runtime = __esm({
             return effect === null ? [] : [effect];
           });
           const nextSnapshot = {
-            identity: admitted.identity,
+            identity: admitted2.identity,
             revision: snapshot.revision + 1,
             ...definition.readSnapshot(nextXStateSnapshot)
           };
           const accepted = {
             status: "accepted",
-            ingressId: admitted.ingressId,
+            ingressId: admitted2.ingressId,
             snapshot: nextSnapshot,
             effects
           };
           this.logger.debug("state_machine.runtime.commit.started", {
-            machineType: admitted.identity.machineType,
-            instanceId: admitted.identity.instanceId,
-            ingressId: admitted.ingressId,
+            machineType: admitted2.identity.machineType,
+            instanceId: admitted2.identity.instanceId,
+            ingressId: admitted2.ingressId,
             expectedRevision: stored?.snapshot.revision ?? null,
             nextRevision: nextSnapshot.revision,
             effectCount: accepted.effects.length
@@ -147184,9 +147221,9 @@ var init_runtime = __esm({
             result: accepted
           });
           this.logger.debug("state_machine.runtime.commit.completed", {
-            machineType: admitted.identity.machineType,
-            instanceId: admitted.identity.instanceId,
-            ingressId: admitted.ingressId,
+            machineType: admitted2.identity.machineType,
+            instanceId: admitted2.identity.instanceId,
+            ingressId: admitted2.ingressId,
             revision: nextSnapshot.revision,
             effectCount: accepted.effects.length
           });
@@ -151934,12 +151971,12 @@ var require_jsx_runtime = __commonJS({
   }
 });
 
-// ../ui-common/dist/chunk-HL2BGDUB.mjs
+// ../ui-common/dist/chunk-ASBL2UIR.mjs
 var import_react, import_memoize, import_jsx_runtime, import_meta, ConfigService, configService, currentRuntime, currentClient, runtimeListeners, registerApiRuntime, getApiClient, apiClient, BrowserSessionContinuityDecision, browserSessionContinuityDecision, base64UrlDecode2, decodeJwtPayload2;
-var init_chunk_HL2BGDUB = __esm({
-  "../ui-common/dist/chunk-HL2BGDUB.mjs"() {
+var init_chunk_ASBL2UIR = __esm({
+  "../ui-common/dist/chunk-ASBL2UIR.mjs"() {
     "use strict";
-    init_chunk_7YOBXJPW();
+    init_chunk_H5IGJ4AG();
     import_react = __toESM(require_react(), 1);
     import_memoize = __toESM(require_memoize(), 1);
     import_jsx_runtime = __toESM(require_jsx_runtime(), 1);
@@ -152119,9 +152156,9 @@ var init_chunk_HL2BGDUB = __esm({
 var init_clients = __esm({
   "../ui-common/dist/clients.mjs"() {
     "use strict";
-    init_chunk_HL2BGDUB();
-    init_chunk_7YOBXJPW();
-    init_chunk_T6JACYZU();
+    init_chunk_ASBL2UIR();
+    init_chunk_H5IGJ4AG();
+    init_chunk_Y256XDSH();
   }
 });
 
@@ -156524,7 +156561,7 @@ var init_authorization_replay_store = __esm({
 });
 
 // src/server/controller-authorization/types.ts
-var CURRENT_AGENT_OPERATIONS, CURRENT_AGENT_OPERATION_SET, CURRENT_AGENT_OPERATION_CATEGORY, isCurrentAgentOperation, hasExactCurrentAgentOperations;
+var CURRENT_AGENT_OPERATIONS, CURRENT_AGENT_OPERATION_SET, CURRENT_AGENT_OPERATION_CATEGORY, isCurrentAgentOperation, hasExactCurrentAgentOperations, AdmittedHostAction;
 var init_types5 = __esm({
   "src/server/controller-authorization/types.ts"() {
     "use strict";
@@ -156559,9 +156596,18 @@ var init_types5 = __esm({
       EXACT_ACTION_DELIVERY: "EXACT_ACTION"
     };
     isCurrentAgentOperation = (value2) => CURRENT_AGENT_OPERATION_SET.has(value2);
-    hasExactCurrentAgentOperations = (values) => values.length === CURRENT_AGENT_OPERATIONS.length && new Set(values).size === CURRENT_AGENT_OPERATIONS.length && values.every(
-      (value2) => typeof value2 === "string" && CURRENT_AGENT_OPERATION_SET.has(value2)
-    );
+    hasExactCurrentAgentOperations = (values) => values.length === CURRENT_AGENT_OPERATIONS.length && new Set(values).size === CURRENT_AGENT_OPERATIONS.length && values.every((value2) => typeof value2 === "string" && CURRENT_AGENT_OPERATION_SET.has(value2));
+    AdmittedHostAction = class {
+      constructor(actionType, authorizationId, envelopeNonce) {
+        this.actionType = actionType;
+        this.authorizationId = authorizationId;
+        this.envelopeNonce = envelopeNonce;
+      }
+      actionType;
+      authorizationId;
+      envelopeNonce;
+      #admittedHostAction = true;
+    };
   }
 });
 
@@ -157287,11 +157333,12 @@ var init_execution_grant_store = __esm({
 });
 
 // src/server/controller-authorization/host-action-admission.ts
-var denialFromError, HostActionAdmission;
+var denialFromError, AdmittedHostActionCapability, admitted, HostActionAdmission;
 var init_host_action_admission = __esm({
   "src/server/controller-authorization/host-action-admission.ts"() {
     "use strict";
     init_types5();
+    init_types5();
     denialFromError = (error41) => {
       switch (error41.message) {
         case "GRANT_SCOPE_MISMATCH":
@@ -157302,6 +157349,21 @@ var init_host_action_admission = __esm({
           return "STORAGE_UNAVAILABLE";
       }
     };
+    AdmittedHostActionCapability = class extends AdmittedHostAction {
+      constructor(actionType, authorizationId, envelopeNonce) {
+        super(actionType, authorizationId, envelopeNonce);
+      }
+    };
+    admitted = (request, authorizationId, grantId) => ({
+      admitted: true,
+      authorizationId,
+      ...grantId ? { grantId } : {},
+      capability: new AdmittedHostActionCapability(
+        request.actionType,
+        authorizationId,
+        request.envelopeNonce
+      )
+    });
     HostActionAdmission = class {
       constructor(options) {
         this.options = options;
@@ -157317,7 +157379,7 @@ var init_host_action_admission = __esm({
             actionType: context.actionType,
             actionCategory: context.actionCategory
           });
-          return { admitted: true, authorizationId: authorization.grantId, grantId: grant.grantId };
+          return admitted(context, authorization.grantId, grant.grantId);
         } catch (error41) {
           return {
             admitted: false,
@@ -157348,15 +157410,9 @@ var init_host_action_admission = __esm({
               actionType: request.actionType,
               actionCategory: request.actionCategory
             });
-            const freshEnvelope = await this.options.replayStore.consume(
-              request.envelopeNonce
-            );
+            const freshEnvelope = await this.options.replayStore.consume(request.envelopeNonce);
             if (!freshEnvelope) return { admitted: false, reason: "REPLAY_DETECTED" };
-            return {
-              admitted: true,
-              authorizationId: assertion.authorizationId,
-              grantId: existingGrant.grantId
-            };
+            return admitted(request, assertion.authorizationId, existingGrant.grantId);
           } catch (error41) {
             if (error41 instanceof Error && error41.message !== "GRANT_NOT_ACTIVE") {
               return { admitted: false, reason: denialFromError(error41) };
@@ -157373,7 +157429,7 @@ var init_host_action_admission = __esm({
           return { admitted: false, reason: "STORAGE_UNAVAILABLE" };
         }
         if (authorization.grantId === null) {
-          return { admitted: true, authorizationId: assertion.authorizationId };
+          return admitted(request, assertion.authorizationId);
         }
         try {
           const grant = await this.options.grantStore.create({
@@ -157382,7 +157438,7 @@ var init_host_action_admission = __esm({
             descriptorHash: assertion.intent.grantDescriptorHash,
             controllerCredentialFingerprint: assertion.credentialFingerprint
           });
-          return { admitted: true, authorizationId: assertion.authorizationId, grantId: grant.grantId };
+          return admitted(request, assertion.authorizationId, grant.grantId);
         } catch {
           return { admitted: false, reason: "STORAGE_UNAVAILABLE" };
         }
@@ -157408,7 +157464,15 @@ var init_host_action_admission = __esm({
       async admitReduction(envelopeNonce) {
         try {
           const fresh = await this.options.replayStore.consume(envelopeNonce);
-          return fresh ? { admitted: true, authorizationId: envelopeNonce } : { admitted: false, reason: "REPLAY_DETECTED" };
+          return fresh ? {
+            admitted: true,
+            authorizationId: envelopeNonce,
+            capability: new AdmittedHostActionCapability(
+              "CONVERSATION_TRIGGER",
+              envelopeNonce,
+              envelopeNonce
+            )
+          } : { admitted: false, reason: "REPLAY_DETECTED" };
         } catch {
           return { admitted: false, reason: "STORAGE_UNAVAILABLE" };
         }
@@ -181415,12 +181479,12 @@ var init_task_monitor_launch_authorization = __esm({
   }
 });
 
-// ../ui-common/dist/chunk-FKF3DMHU.mjs
+// ../ui-common/dist/chunk-CECF2WYD.mjs
 var CAPABILITY_CATALOG, activeCatalog, loadState, getCatalog, isLocalReasoningEffort, listModels, listEfforts, getOpencodeModelRef, supportsFastMode;
-var init_chunk_FKF3DMHU = __esm({
-  "../ui-common/dist/chunk-FKF3DMHU.mjs"() {
+var init_chunk_CECF2WYD = __esm({
+  "../ui-common/dist/chunk-CECF2WYD.mjs"() {
     "use strict";
-    init_chunk_T6JACYZU();
+    init_chunk_Y256XDSH();
     CAPABILITY_CATALOG = [
       {
         provider: ConversationStartRunRequestDtoProviderEnum2.Claude,
@@ -181573,8 +181637,8 @@ var init_chunk_FKF3DMHU = __esm({
 var init_capability_catalog = __esm({
   "../ui-common/dist/capability-catalog.mjs"() {
     "use strict";
-    init_chunk_FKF3DMHU();
-    init_chunk_T6JACYZU();
+    init_chunk_CECF2WYD();
+    init_chunk_Y256XDSH();
   }
 });
 
@@ -185211,7 +185275,7 @@ var init_session_monitor_turn_evaluator = __esm({
             timeoutMs: this.dependencies.timeoutMs ?? DEFAULT_EVALUATION_TIMEOUT_MS
           });
         }, this.dependencies.timeoutMs ?? DEFAULT_EVALUATION_TIMEOUT_MS);
-        void agentService.sendMessage(monitorRunId, {
+        void agentService.sendSystemMessage(monitorRunId, {
           promptType: LocalPromptType.SessionMonitor,
           payload: {
             promptType: LocalPromptType.SessionMonitor,
@@ -185690,7 +185754,7 @@ var init_runner = __esm({
           },
           ...command2.launchConfig ? { taskMonitorLaunchConfig: command2.launchConfig } : {}
         });
-        await agentService.sendMessage(runId, {
+        await agentService.sendSystemMessage(runId, {
           promptType: LocalPromptType.TaskMonitor,
           payload: {
             promptType: LocalPromptType.TaskMonitor,
@@ -185776,7 +185840,7 @@ var init_runner = __esm({
         });
         await runStore.updateRunSessionContext(runId, { triggerDelta: delta });
         logger.info(DAILY_SESSION_MONITOR_LOG_EVENT, { stage: "turn_dispatch_started", runId });
-        await agentService.sendMessage(runId, {
+        await agentService.sendSystemMessage(runId, {
           promptType: LocalPromptType.DailySession,
           payload: { promptType: LocalPromptType.DailySession, payloadVersion: 1 },
           references: { resolved: [], unresolved: [] }
@@ -185951,7 +186015,7 @@ var init_supervision_effect_handlers = __esm({
         throw new Error("Selected Task read returned an invalid response.");
       }
       requestReview(agentSessionId, rationale) {
-        return this.dependencies.agentService.sendMessage(agentSessionId, buildCodeReviewRequest(rationale)).then(() => void 0);
+        return this.dependencies.agentService.sendSystemMessage(agentSessionId, buildCodeReviewRequest(rationale)).then(() => void 0);
       }
       sendGuidance(auth2, conversationId, guidance) {
         return postTaskMonitorGuidanceMessage({
@@ -186066,7 +186130,10 @@ var init_supervision_effect_handlers = __esm({
             effect.agentSessionId
           );
           if (monitor.status !== WorkStatus.Active || entry?.agentSessionId !== effect.agentSessionId || !session?.conversationId || session.config?.type !== "CODING_SESSION" || session.config.version !== "v2" || session.config.taskMonitorId !== effect.taskMonitorId) {
-            return this.failed(effect, "Settled-Run supervision no longer matches canonical ownership.");
+            return this.failed(
+              effect,
+              "Settled-Run supervision no longer matches canonical ownership."
+            );
           }
           const completedAssistantMessage = effect.completedAssistantMessageId ? await this.dependencies.agentService.readAssistantMessage({
             organizationId: auth2.organizationId,
@@ -186077,10 +186144,7 @@ var init_supervision_effect_handlers = __esm({
           if (effect.completedAssistantMessageId && !completedAssistantMessage) {
             return this.failed(effect, "Completed assistant Message could not be resolved.");
           }
-          const launchConfig = launchConfigFor(
-            entry,
-            monitor.definition.launchPolicy.worktree
-          );
+          const launchConfig = launchConfigFor(entry, monitor.definition.launchPolicy.worktree);
           const evaluation = await this.coordinator.runTaskMonitor(
             {
               monitorId: effect.taskMonitorId,
@@ -186112,7 +186176,10 @@ var init_supervision_effect_handlers = __esm({
           });
           const currentEntry = current.definition.executionPlan[current.definition.cursor];
           if (current.status !== WorkStatus.Active || current.definition.cursor !== executionIndex || currentEntry?.taskId !== entry.taskId || currentEntry.agentSessionId !== effect.agentSessionId) {
-            return this.failed(effect, "Task Monitor changed while settled-Run supervision was active.");
+            return this.failed(
+              effect,
+              "Task Monitor changed while settled-Run supervision was active."
+            );
           }
           return await this.applyDecision(
             effect,
@@ -186196,11 +186263,7 @@ var init_supervision_effect_handlers = __esm({
                 return this.failed(effect, "Next Agent Session has no Conversation owner.");
               }
               await this.owners.publishDecision(auth2, coordinatorRunId, decision);
-              return this.continues(
-                effect,
-                startResult.agentSessionId,
-                nextSession.conversationId
-              );
+              return this.continues(effect, startResult.agentSessionId, nextSession.conversationId);
             }
             if (startResult.status !== "exhausted") {
               return this.failed(effect, `Next launch did not settle (${startResult.status}).`);
@@ -186570,9 +186633,9 @@ var init_monitors = __esm({
             if (!subscribed) {
               continue;
             }
-            let admitted;
+            let admitted2;
             try {
-              admitted = await monitor.admits(event);
+              admitted2 = await monitor.admits(event);
             } catch (error41) {
               logger.error("monitors.pipeline.opt-in-failed", {
                 declarationId: monitor.id,
@@ -186580,7 +186643,7 @@ var init_monitors = __esm({
               });
               continue;
             }
-            if (!admitted) {
+            if (!admitted2) {
               logger.info("monitors.pipeline.opt-in-rejected", {
                 declarationId: monitor.id,
                 eventType: event.eventType
@@ -189409,7 +189472,9 @@ var init_dispatch = __esm({
         if (verified.kind === "trigger.authority_reduction") {
           return { admitted: false, reason: "acknowledged_route_required" };
         }
-        if (verified.envelope.protocolVersion !== 2) return { admitted: true };
+        if (verified.envelope.protocolVersion !== 2) {
+          return { admitted: false, reason: "protocol_version" };
+        }
         const admission = this.dependencies.hostActionAdmission;
         if (!admission) {
           this.dependencies.logger.warn("trigger-verification.authority.denied", {
@@ -189420,6 +189485,15 @@ var init_dispatch = __esm({
           return { admitted: false, reason: "admission_not_ready" };
         }
         if (!verified.envelope.authorization) {
+          const isAuthorityNonIncreasing = verified.kind === "trigger.control" && verified.body.kind === "stop_run" || verified.kind === "trigger.monitor_command" && (verified.body.command.cause === "PAUSE" || verified.body.command.cause === "STOP" || verified.body.command.cause === "HALT" || verified.body.command.cause === "GUIDANCE_CHANGED" || verified.body.command.cause === "HUMAN_DECISION");
+          if (!isAuthorityNonIncreasing) {
+            this.dependencies.logger.warn("trigger-verification.authority.denied", {
+              reason: "authorization_not_found",
+              frameType: verified.kind,
+              nonce: verified.envelope.nonce
+            });
+            return { admitted: false, reason: "authorization_not_found" };
+          }
           const result2 = await admission.admitReduction(verified.envelope.nonce);
           if (!result2.admitted) {
             this.dependencies.logger.warn("trigger-verification.authority.denied", {
@@ -189429,7 +189503,7 @@ var init_dispatch = __esm({
             });
             return { admitted: false, reason: result2.reason };
           }
-          return { admitted: true };
+          return { admitted: true, capability: result2.capability };
         }
         const request = await this.admissionRequestFor(verified);
         if (!request) return { admitted: false, reason: "routing_mismatch" };
@@ -189450,10 +189524,11 @@ var init_dispatch = __esm({
         });
         return {
           admitted: true,
+          capability: result.capability,
           authorization: toAdmissionAuthorization(verified.envelope.authorization)
         };
       }
-      async dispatchVerified(verified) {
+      async dispatchVerified(verified, capability) {
         const { agentService, logger, runRegistry } = this.dependencies;
         if (verified.kind === "trigger.authority_reduction") {
           logger.warn("trigger-verification.authority_reduction.dropped", {
@@ -189473,7 +189548,7 @@ var init_dispatch = __esm({
             });
             return;
           }
-          void executor.execute(verified.body).catch((error41) => {
+          void executor.execute(capability, verified.body).catch((error41) => {
             logger.error("trigger-verification.application_effect.failed", {
               effectId: verified.body.effectId,
               nonce: verified.envelope.nonce,
@@ -189492,7 +189567,7 @@ var init_dispatch = __esm({
             });
             return;
           }
-          void executor.execute(verified.body).catch((error41) => {
+          void executor.execute(capability, verified.body).catch((error41) => {
             logger.error("trigger-verification.exact_action.failed", {
               exactActionId: verified.body.exactActionId,
               nonce: verified.envelope.nonce,
@@ -189541,6 +189616,18 @@ var init_dispatch = __esm({
             });
             return;
           }
+          if (body.kind === "compact_run" && binding2.runId !== body.runId) {
+            logDropped(logger, {
+              frameType: "trigger.control",
+              reason: "run_binding_mismatch",
+              kind: body.kind,
+              conversationId: conversationId2,
+              runId: binding2.runId,
+              envelopeRunId: body.runId,
+              nonce: verified.envelope.nonce
+            });
+            return;
+          }
           logger.info("trigger-verification.control.dispatch", {
             kind: body.kind,
             conversationId: conversationId2,
@@ -189548,7 +189635,7 @@ var init_dispatch = __esm({
             envelopeRunId: body.runId,
             nonce: verified.envelope.nonce
           });
-          const controlOperation = body.kind === "compact_run" ? agentService.compactRun(binding2.runId) : agentService.stopRun(binding2.runId);
+          const controlOperation = body.kind === "compact_run" ? agentService.compactRun(capability, binding2.runId) : agentService.stopRun(binding2.runId);
           controlOperation.catch((error41) => {
             logger.error("trigger-verification.control.dispatch_failed", {
               kind: body.kind,
@@ -189659,7 +189746,7 @@ var init_dispatch = __esm({
             nonce: verified.envelope.nonce
           });
           try {
-            await agentService.createRunFromTrigger(request2);
+            await agentService.createRunFromTrigger(capability, request2);
             await this.operationReceiptStore.complete(operationId2, operationFingerprint2, true);
             return {
               status: "ACCEPTED",
@@ -189780,7 +189867,7 @@ var init_dispatch = __esm({
           nonce: verified.envelope.nonce
         });
         try {
-          await agentService.sendMessage(binding.runId, request);
+          await agentService.sendMessage(capability, binding.runId, request);
           if (operationId && operationFingerprint)
             await this.operationReceiptStore.complete(operationId, operationFingerprint, true);
           if (operationId && operationFingerprint) {
@@ -189843,16 +189930,13 @@ var init_dispatch = __esm({
         if (typeof event.conversationId === "string") {
           this.dropRecoverySurface.reset(event.conversationId);
         }
-        if (result.verified.envelope.protocolVersion === 2) {
-          return this.admitVerified(result.verified).then(
-            (admission) => admission.admitted ? this.dispatchVerified(result.verified) : {
-              status: "REJECTED",
-              stage: "ADMISSION",
-              reason: "AUTHORIZATION_REJECTED"
-            }
-          );
-        }
-        return this.dispatchVerified(result.verified);
+        return this.admitVerified(result.verified).then(
+          (admission) => admission.admitted ? this.dispatchVerified(result.verified, admission.capability) : {
+            status: "REJECTED",
+            stage: "ADMISSION",
+            reason: "AUTHORIZATION_REJECTED"
+          }
+        );
       }
       verificationRejectionReason(reason) {
         const mapped = reason === "signature_invalid" || reason === "signature_decode" ? "SIGNATURE_INVALID" : reason === "machine_id_mismatch" ? "MACHINE_MISMATCH" : reason === "user_id_mismatch" ? "OWNER_MISMATCH" : reason === "timestamp_window" ? "STALE" : reason === "nonce_replay" ? "NONCE_REPLAY" : reason === "allowlist" ? "KIND_NOT_ALLOWED" : reason === "expired" ? "EXPIRED" : reason === "routing_mismatch" ? "ROUTING_MISMATCH" : "SCHEMA_INVALID";
@@ -189939,7 +190023,7 @@ var init_dispatch = __esm({
             reason: "KIND_NOT_ALLOWED"
           };
         }
-        const admission = result.verified.envelope.protocolVersion === 2 ? await this.admitVerified(result.verified) : { admitted: true };
+        const admission = await this.admitVerified(result.verified);
         if (!admission.admitted) {
           return {
             status: "REJECTED",
@@ -190739,7 +190823,7 @@ var init_schemas5 = __esm({
 });
 
 // src/server/trigger-verification/verify.ts
-var import_node_crypto21, CONVERSATION_PROMPT_TYPE_ACCEPTANCE, CONVERSATION_PROMPT_TYPE_ALLOWLIST, PLATFORM_EVENT_KIND_ALLOWLIST, CONTROL_KIND_ALLOWLIST, TIMESTAMP_WINDOW_MS, ED25519_SPKI_DER_PREFIX2, rawEd25519PublicKeyToKeyObject, reconstructCanonicalBytes, decodeBase64, TriggerVerifier;
+var import_node_crypto21, cliSettingsFrameV2Schema, CONVERSATION_PROMPT_TYPE_ACCEPTANCE, CONVERSATION_PROMPT_TYPE_ALLOWLIST, PLATFORM_EVENT_KIND_ALLOWLIST, CONTROL_KIND_ALLOWLIST, TIMESTAMP_WINDOW_MS, ED25519_SPKI_DER_PREFIX2, rawEd25519PublicKeyToKeyObject, reconstructCanonicalBytes, decodeBase64, TriggerVerifier;
 var init_verify = __esm({
   "src/server/trigger-verification/verify.ts"() {
     "use strict";
@@ -190748,6 +190832,15 @@ var init_verify = __esm({
     init_jcs();
     init_nonce_store();
     init_schemas5();
+    cliSettingsFrameV2Schema = cliSettingsFrameSchema.extend({
+      organizationId: cliReadFrameV2Schema.shape.organizationId,
+      projectId: cliReadFrameV2Schema.shape.projectId,
+      conversationId: cliReadFrameV2Schema.shape.conversationId,
+      userId: cliReadFrameV2Schema.shape.userId,
+      envelope: cliReadFrameV2Schema.shape.envelope.extend({
+        event: signedCliSettingsEnvelopeSchema.shape.event
+      })
+    });
     CONVERSATION_PROMPT_TYPE_ACCEPTANCE = {
       feature_sync_analyze: true,
       feature_sync_iterate: true,
@@ -191485,7 +191578,15 @@ var init_verify = __esm({
         };
       }
       verifyCliSettingsFrame(rawFrame) {
-        const parsed = cliSettingsFrameSchema.safeParse(rawFrame);
+        const rawEnvelope = typeof rawFrame === "object" && rawFrame !== null && "envelope" in rawFrame && typeof rawFrame.envelope === "object" && rawFrame.envelope !== null ? rawFrame.envelope : void 0;
+        if (this.requireProtocolVersion2 && rawEnvelope?.protocolVersion !== 2) {
+          return {
+            ok: false,
+            reason: "protocol_version",
+            details: { frameType: "cli.settings.request" }
+          };
+        }
+        const parsed = cliSettingsFrameV2Schema.safeParse(rawFrame);
         if (!parsed.success) {
           return {
             ok: false,
@@ -191503,6 +191604,8 @@ var init_verify = __esm({
         const envelope = frame.envelope;
         const common = this.runCommonChecks("cli.settings.request", envelope);
         if (common) return common;
+        const addressing = this.checkV2FrameAddressing(frame, envelope, envelope.event.projectId);
+        if (addressing) return addressing;
         return {
           ok: true,
           verified: {
@@ -191618,7 +191721,7 @@ var init_trigger_verification_runtime = __esm({
           expectedMachineId: machineId,
           expectedUserId: userId,
           ...activatedBinding ? { expectedOrganizationId: activatedBinding.organizationId } : {},
-          requireProtocolVersion2: Boolean(controllerRegistryStore),
+          requireProtocolVersion2: true,
           logger
         });
         this.router = new TriggerFrameRouter({
@@ -210177,18 +210280,30 @@ var init_local_agent_service = __esm({
       createRun(input) {
         return this.runCreationCoordinator.createRun(input);
       }
-      createRunFromTrigger(input) {
+      createRunFromTrigger(capability, input) {
+        this.assertCapability(capability, "CONVERSATION_TRIGGER");
         return this.runCreationCoordinator.createRunFromTrigger(input);
       }
       stopRun(runId) {
         return this.runService.stopRun(runId);
       }
-      compactRun(runId) {
+      compactRun(capability, runId) {
+        this.assertCapability(capability, "CONVERSATION_CONTROL_COMPACT_RUN");
         return this.runService.compactRun(runId);
       }
-      sendMessage(runId, input, options) {
+      sendMessage(capability, runId, input, options) {
+        this.assertCapability(capability, "CONVERSATION_TRIGGER");
+        return this.messageService.sendMessage(runId, input, options);
+      }
+      /** Local lifecycle continuations that do not originate from a browser request. */
+      sendSystemMessage(runId, input, options) {
         return this.messageService.sendMessage(runId, input, options);
       }
+      assertCapability(capability, expectedAction) {
+        if (capability.actionType !== expectedAction) {
+          throw new Error(`Host action capability does not admit ${expectedAction}.`);
+        }
+      }
       readWorkflowVerdict(identity) {
         return this.messageService.readWorkflowVerdict(identity);
       }