@inerrata-corporation/errata 2.0.17-dev.3421 → 2.0.17-dev.3426

package/errata.mjs

@@ -960,7 +960,7 @@ function lemma(token) {
   }
   return token;
 }
-function tokenize(text, resolve8) {
+function tokenize(text, resolve9) {
   const matches = text.normalize("NFC").toLowerCase().match(TOKEN_RE) ?? [];
   const out2 = /* @__PURE__ */ new Set();
   for (const raw2 of matches) {
@@ -970,7 +970,7 @@ function tokenize(text, resolve8) {
       out2.add(token);
       continue;
     }
-    const canonical = resolve8(token);
+    const canonical = resolve9(token);
     out2.add(canonical ?? lemma(token));
   }
   return [...out2].sort();
@@ -25119,11 +25119,13 @@ function buildSnapshot(opts) {
   const stillOpen = problems.filter((p) => p.attrs["resolvedAt"] == null);
   const allProblems = stillOpen.filter((p) => !isConstraintProblem(p));
   allProblems.sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt);
-  const recent3 = allProblems.slice(0, 8).map((p) => ({
+  const openPool = allProblems.slice(0, RECENT_OPEN * SCOPE_POOL_FACTOR).map((p) => ({
     node: p,
     anchors: opts.store.outEdges(p.id, ["MANIFESTED_IN", "EVIDENCED_BY"])
   }));
-  const recentConstraints = stillOpen.filter((p) => isConstraintProblem(p)).sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt).slice(0, 3);
+  const recent3 = openPool.slice(0, RECENT_OPEN);
+  const constraintPool = stillOpen.filter((p) => isConstraintProblem(p)).sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt).slice(0, RECENT_CONSTRAINTS * SCOPE_POOL_FACTOR);
+  const recentConstraints = constraintPool.slice(0, RECENT_CONSTRAINTS);
   const regressions = problems.filter((p) => p.attrs["resolvedAt"] == null && p.attrs["mergedInto"] === void 0).flatMap(
     (open2) => opts.store.outEdges(open2.id, ["REGRESSION_OF"]).flatMap((e) => {
       const closed = opts.store.getNode(e.to);
@@ -25136,11 +25138,12 @@ function buildSnapshot(opts) {
     })
   ).sort((a, b) => Number(b.closed.attrs["recurredAt"] ?? 0) - Number(a.closed.attrs["recurredAt"] ?? 0)).slice(0, 2);
   const regressionClosedIds = new Set(regressions.map((r) => r.closed.id));
-  const recentResolved = problems.filter((p) => p.attrs["resolvedAt"] != null && p.attrs["resolvedAs"] == null).filter((p) => !regressionClosedIds.has(p.id)).sort((a, b) => Number(b.attrs["resolvedAt"] ?? 0) - Number(a.attrs["resolvedAt"] ?? 0)).slice(0, 4).map((p) => {
+  const resolvedPool = problems.filter((p) => p.attrs["resolvedAt"] != null && p.attrs["resolvedAs"] == null).filter((p) => !regressionClosedIds.has(p.id)).sort((a, b) => Number(b.attrs["resolvedAt"] ?? 0) - Number(a.attrs["resolvedAt"] ?? 0)).slice(0, RECENT_RESOLVED * SCOPE_POOL_FACTOR).map((p) => {
     const solEdge = opts.store.outEdges(p.id, ["SOLVED_BY"])[0];
     const solution = solEdge ? opts.store.getNode(solEdge.to) ?? void 0 : void 0;
     return { node: p, ...solution ? { solution } : {} };
   });
+  const recentResolved = resolvedPool.slice(0, RECENT_RESOLVED);
   const motifs = [
     ...opts.store.findNodesByLabel("Pattern"),
     ...opts.store.findNodesByLabel("Technique"),
@@ -25218,9 +25221,23 @@ function buildSnapshot(opts) {
     pendingEnrichment,
     skills: opts.skills ?? [],
     needsRevisit,
+    scopePool: { open: openPool, resolved: resolvedPool, constraints: constraintPool },
     generatedAt: (opts.now ?? /* @__PURE__ */ new Date()).toISOString()
   };
 }
+function scopeSnapshot(s, keep) {
+  const pool = s.scopePool;
+  if (!pool) return s;
+  const open2 = pool.open.filter((r) => keep(r.node));
+  return {
+    ...s,
+    recentProblems: open2.slice(0, RECENT_OPEN),
+    recentResolved: pool.resolved.filter((r) => keep(r.node)).slice(0, RECENT_RESOLVED),
+    recentConstraints: pool.constraints.filter(keep).slice(0, RECENT_CONSTRAINTS),
+    regressions: s.regressions.filter((r) => keep(r.open)),
+    scopePool: { ...pool, open: open2 }
+  };
+}
 function sliceForFile(store, relPath, atCommit) {
   const candidates = store.findNodesByLabel("File");
   const file2 = candidates.find((n) => n.description === relPath);
@@ -25688,6 +25705,7 @@ function isolateSnapshot(s) {
     causalNudge: _causalNudge,
     domainNudge: _domainNudge,
     sharedPriors: _sharedPriors,
+    scopePool: _scopePool,
     ...graphWide
   } = s;
   return {
@@ -25773,13 +25791,17 @@ function diffRenderLedger(before, after) {
   for (const i2 of before) (survived.has(key(i2)) ? shown : evicted).push(i2);
   return { shown, evicted };
 }
-var RECALL_FIRST_HEADER, RECALL_FIRST_BODY, RECALL_FIRST_BLOCK, SEARCH_IMPERATIVE_HEADER, SEARCH_IMPERATIVE_BODY, SPAWN_SHARE_HINT, SUBAGENT_OWN_BLOCK_NOTE, EVICTION_ORDER, MOTIF_FLOOR, REMOTE_FLOOR, PROBLEM_FLOOR, REVIEW_ITEM_FLOOR, DEFAULT_AGENT_CONTEXT_BUDGET;
+var RECENT_OPEN, RECENT_RESOLVED, RECENT_CONSTRAINTS, SCOPE_POOL_FACTOR, RECALL_FIRST_HEADER, RECALL_FIRST_BODY, RECALL_FIRST_BLOCK, SEARCH_IMPERATIVE_HEADER, SEARCH_IMPERATIVE_BODY, SPAWN_SHARE_HINT, SUBAGENT_OWN_BLOCK_NOTE, EVICTION_ORDER, MOTIF_FLOOR, REMOTE_FLOOR, PROBLEM_FLOOR, REVIEW_ITEM_FLOOR, DEFAULT_AGENT_CONTEXT_BUDGET;
 var init_render = __esm({
   "../../packages/context-writer/src/render.ts"() {
     "use strict";
     init_src5();
     init_src2();
     init_src();
+    RECENT_OPEN = 8;
+    RECENT_RESOLVED = 4;
+    RECENT_CONSTRAINTS = 3;
+    SCOPE_POOL_FACTOR = 3;
     RECALL_FIRST_HEADER = "## errata \u2014 recall before you work";
     RECALL_FIRST_BODY = "Before investigating any bug or error, your FIRST tool call must be `mcp__errata__errata_search` with a few words describing the problem. This machine's knowledge graph records previously solved problems \u2014 the answer may already be recorded. Read what it returns before touching any files.";
     RECALL_FIRST_BLOCK = `${RECALL_FIRST_HEADER}
@@ -32330,18 +32352,141 @@ var init_recall_signal = __esm({
   }
 });
 
+// src/session-registry.ts
+import { existsSync as existsSync8, readFileSync as readFileSync6, realpathSync, writeFileSync as writeFileSync7 } from "node:fs";
+import { tmpdir as tmpdir2 } from "node:os";
+import { resolve } from "node:path";
+function shipsFromWorkspace(root, env2 = process.env) {
+  return Boolean(env2["VITEST"]) || !isScratchWorkspace(root);
+}
+function isScratchWorkspace(root, tmp = tmpdir2()) {
+  const norm = (p) => {
+    let real = p;
+    try {
+      real = realpathSync.native(p);
+    } catch {
+    }
+    return resolve(real).replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+  };
+  const r = norm(root);
+  const t = norm(tmp);
+  return r === t || r.startsWith(`${t}/`);
+}
+function parseOrigin(raw2) {
+  if (typeof raw2 !== "string") return void 0;
+  const v = raw2.trim();
+  if (!v || v.includes("%")) return void 0;
+  return /^[\w.:-]{1,64}$/.test(v) ? v : void 0;
+}
+function createSessionRegistry(opts = {}) {
+  const idleMs = opts.idleMs ?? SESSION_IDLE_MS;
+  const lastSeen = /* @__PURE__ */ new Map();
+  const parentOf = /* @__PURE__ */ new Map();
+  const ended = /* @__PURE__ */ new Set();
+  const origins = new Map(loadOrigins(opts.originsPath));
+  let ver = 0;
+  let lastLiveCount = -1;
+  const persist = () => {
+    if (!opts.originsPath) return;
+    try {
+      while (origins.size > MAX_ORIGINS) origins.delete(origins.keys().next().value);
+      writeFileSync7(opts.originsPath, JSON.stringify(Object.fromEntries(origins)));
+    } catch {
+    }
+  };
+  const ownLive = (id, nowMs) => {
+    const seen = lastSeen.get(id);
+    return seen !== void 0 && !ended.has(id) && nowMs - seen < idleMs;
+  };
+  const registry2 = {
+    touch(sessionId, nowMs, o = {}) {
+      if (!sessionId) return;
+      const wasLive = ownLive(sessionId, nowMs);
+      lastSeen.set(sessionId, nowMs);
+      ended.delete(sessionId);
+      if (o.parent) parentOf.set(sessionId, o.parent);
+      const origin = o.origin ?? (o.parent ? origins.get(o.parent) : void 0);
+      if (origin && origins.get(sessionId) !== origin) {
+        origins.set(sessionId, origin);
+        persist();
+        ver++;
+      }
+      if (!wasLive) ver++;
+    },
+    end(sessionId) {
+      if (!sessionId || ended.has(sessionId)) return;
+      ended.add(sessionId);
+      ver++;
+    },
+    isLive(sessionId, nowMs) {
+      if (ownLive(sessionId, nowMs)) return true;
+      const parent = parentOf.get(sessionId);
+      return parent !== void 0 && ownLive(parent, nowMs);
+    },
+    originOf: (sessionId) => origins.get(sessionId) ?? origins.get(parentOf.get(sessionId) ?? ""),
+    originSessions: () => [...origins.keys()],
+    isOwn: (sessionId, viewer) => sessionId === viewer || parentOf.get(sessionId) === viewer,
+    version(nowMs) {
+      let live3 = 0;
+      for (const id of lastSeen.keys()) if (ownLive(id, nowMs)) live3++;
+      if (live3 !== lastLiveCount) {
+        lastLiveCount = live3;
+        ver++;
+      }
+      return ver;
+    }
+  };
+  return registry2;
+}
+function loadOrigins(path2) {
+  if (!path2 || !existsSync8(path2)) return [];
+  try {
+    const raw2 = JSON.parse(readFileSync6(path2, "utf8"));
+    return Object.entries(raw2).flatMap(([k, v]) => typeof v === "string" ? [[k, v]] : []);
+  } catch {
+    return [];
+  }
+}
+function sessionsOf(node2) {
+  const s = node2.attrs["sources"];
+  return Array.isArray(s) ? s.filter((x) => typeof x === "string" && x.length > 0) : [];
+}
+function capturedOnlyBy(node2, sessions) {
+  const recorded = sessionsOf(node2);
+  return recorded.length > 0 && recorded.every((s) => sessions.has(s));
+}
+function isQuarantined(node2, reg) {
+  const sessions = sessionsOf(node2);
+  return sessions.length > 0 && sessions.every((s) => reg.originOf(s) !== void 0);
+}
+function hiddenFrom(node2, viewer, reg, nowMs) {
+  const sessions = sessionsOf(node2);
+  if (sessions.length === 0 || sessions.some((s) => reg.isOwn(s, viewer))) return false;
+  if (isQuarantined(node2, reg)) return true;
+  return sessions.every((s) => reg.isLive(s, nowMs));
+}
+var ORIGIN_HEADER, SESSION_IDLE_MS, MAX_ORIGINS;
+var init_session_registry = __esm({
+  "src/session-registry.ts"() {
+    "use strict";
+    ORIGIN_HEADER = "x-errata-origin";
+    SESSION_IDLE_MS = 20 * 6e4;
+    MAX_ORIGINS = 5e4;
+  }
+});
+
 // src/review.ts
-import { existsSync as existsSync8, readFileSync as readFileSync6, writeFileSync as writeFileSync7 } from "node:fs";
+import { existsSync as existsSync9, readFileSync as readFileSync7, writeFileSync as writeFileSync8 } from "node:fs";
 function loadReviewQueue(paths) {
-  if (!existsSync8(paths.reviewQueue)) return [];
+  if (!existsSync9(paths.reviewQueue)) return [];
   try {
-    return JSON.parse(readFileSync6(paths.reviewQueue, "utf8"));
+    return JSON.parse(readFileSync7(paths.reviewQueue, "utf8"));
   } catch {
     return [];
   }
 }
 function saveReviewQueue(paths, queue) {
-  writeFileSync7(paths.reviewQueue, JSON.stringify(queue, null, 2), "utf8");
+  writeFileSync8(paths.reviewQueue, JSON.stringify(queue, null, 2), "utf8");
 }
 function addProposal(paths, store, node2, reason, surprise) {
   const queue = loadReviewQueue(paths);
@@ -32411,26 +32556,26 @@ var init_consent = __esm({
 });
 
 // src/git-remote.ts
-import { existsSync as existsSync9, readFileSync as readFileSync7, statSync } from "node:fs";
-import { isAbsolute as isAbsolute2, join as join8, resolve } from "node:path";
+import { existsSync as existsSync10, readFileSync as readFileSync8, statSync } from "node:fs";
+import { isAbsolute as isAbsolute2, join as join8, resolve as resolve2 } from "node:path";
 function resolveGitDir(root) {
   const dotGit = join8(root, ".git");
   try {
     const st = statSync(dotGit);
     if (st.isDirectory()) return dotGit;
-    const m = /^gitdir:\s*(.+?)\s*$/m.exec(readFileSync7(dotGit, "utf8"));
+    const m = /^gitdir:\s*(.+?)\s*$/m.exec(readFileSync8(dotGit, "utf8"));
     if (!m) return null;
     const dir = m[1];
-    return isAbsolute2(dir) ? dir : resolve(root, dir);
+    return isAbsolute2(dir) ? dir : resolve2(root, dir);
   } catch {
     return null;
   }
 }
 function gitConfigPath(gitDir) {
   const commondirFile = join8(gitDir, "commondir");
-  if (existsSync9(commondirFile)) {
-    const common = readFileSync7(commondirFile, "utf8").trim();
-    const commonDir = isAbsolute2(common) ? common : resolve(gitDir, common);
+  if (existsSync10(commondirFile)) {
+    const common = readFileSync8(commondirFile, "utf8").trim();
+    const commonDir = isAbsolute2(common) ? common : resolve2(gitDir, common);
     return join8(commonDir, "config");
   }
   return join8(gitDir, "config");
@@ -32439,10 +32584,10 @@ function readRemotes(root) {
   const gitDir = resolveGitDir(root);
   if (!gitDir) return [];
   const cfgPath = gitConfigPath(gitDir);
-  if (!existsSync9(cfgPath)) return [];
+  if (!existsSync10(cfgPath)) return [];
   let txt;
   try {
-    txt = readFileSync7(cfgPath, "utf8");
+    txt = readFileSync8(cfgPath, "utf8");
   } catch {
     return [];
   }
@@ -32468,7 +32613,7 @@ var init_git_remote = __esm({
 });
 
 // src/profile.ts
-import { existsSync as existsSync10, readFileSync as readFileSync8, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync9, writeFileSync as writeFileSync9 } from "node:fs";
 import { createHash as createHash5 } from "node:crypto";
 import { join as join9 } from "node:path";
 function workspaceId(root) {
@@ -32493,13 +32638,13 @@ function refreshRepoLocator(root, profile) {
 }
 function loadProfile(root) {
   const p = workspacePaths(root);
-  if (!existsSync10(p.workspaceJson)) return null;
-  return JSON.parse(readFileSync8(p.workspaceJson, "utf8"));
+  if (!existsSync11(p.workspaceJson)) return null;
+  return JSON.parse(readFileSync9(p.workspaceJson, "utf8"));
 }
 function saveProfile(root, profile) {
   const p = workspacePaths(root);
   ensureDir(p.configDir);
-  writeFileSync8(p.workspaceJson, JSON.stringify(profile, null, 2), "utf8");
+  writeFileSync9(p.workspaceJson, JSON.stringify(profile, null, 2), "utf8");
 }
 function autodetectProfile(root) {
   const id = workspaceId(root);
@@ -32508,12 +32653,12 @@ function autodetectProfile(root) {
   const locator = detectRepoLocator(root);
   if (locator) p.repoLocator = locator;
   const pkgPath = join9(root, "package.json");
-  if (existsSync10(pkgPath)) {
+  if (existsSync11(pkgPath)) {
     try {
-      const pkg = JSON.parse(readFileSync8(pkgPath, "utf8"));
+      const pkg = JSON.parse(readFileSync9(pkgPath, "utf8"));
       const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
       p.languages.push("javascript");
-      if (existsSync10(join9(root, "tsconfig.json")) || deps["typescript"]) {
+      if (existsSync11(join9(root, "tsconfig.json")) || deps["typescript"]) {
         p.languages.push("typescript");
       }
       const nodeVer = pkg.engines?.node?.trim();
@@ -32535,9 +32680,9 @@ function autodetectProfile(root) {
     }
   }
   const pyproject = join9(root, "pyproject.toml");
-  if (existsSync10(pyproject)) {
+  if (existsSync11(pyproject)) {
     try {
-      const txt = readFileSync8(pyproject, "utf8");
+      const txt = readFileSync9(pyproject, "utf8");
       const py = /python\s*=\s*"([^"]+)"/.exec(txt)?.[1];
       p.languages.push("python");
       p.stack.push(`python@${py ?? "3"}`);
@@ -32549,15 +32694,15 @@ function autodetectProfile(root) {
     }
   }
   const reqs = join9(root, "requirements.txt");
-  if (existsSync10(reqs)) {
+  if (existsSync11(reqs)) {
     if (!p.languages.includes("python")) p.languages.push("python");
     if (!p.stack.includes("python@3")) p.stack.push("python@3");
   }
-  if (existsSync10(join9(root, "go.mod"))) {
+  if (existsSync11(join9(root, "go.mod"))) {
     p.languages.push("go");
     p.stack.push("go");
   }
-  if (existsSync10(join9(root, "Cargo.toml"))) {
+  if (existsSync11(join9(root, "Cargo.toml"))) {
     p.languages.push("rust");
     p.stack.push("rust");
   }
@@ -32662,12 +32807,12 @@ var init_identity2 = __esm({
 });
 
 // src/checkout-root.ts
-import { existsSync as existsSync11, readFileSync as readFileSync9 } from "node:fs";
-import { basename as basename2, dirname as dirname6, isAbsolute as isAbsolute3, join as join10, resolve as resolve2 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync10 } from "node:fs";
+import { basename as basename2, dirname as dirname6, isAbsolute as isAbsolute3, join as join10, resolve as resolve3 } from "node:path";
 function nearestGitRoot(dir) {
-  let cur = resolve2(dir);
+  let cur = resolve3(dir);
   for (; ; ) {
-    if (existsSync11(join10(cur, ".git"))) return cur;
+    if (existsSync12(join10(cur, ".git"))) return cur;
     const parent = dirname6(cur);
     if (parent === cur) return null;
     cur = parent;
@@ -32677,22 +32822,22 @@ function mainCheckoutOfWorktree(root) {
   const gitDir = resolveGitDir(root);
   if (!gitDir || gitDir === join10(root, ".git")) return null;
   const commondirFile = join10(gitDir, "commondir");
-  if (!existsSync11(commondirFile)) return null;
+  if (!existsSync12(commondirFile)) return null;
   let common;
   try {
-    common = readFileSync9(commondirFile, "utf8").trim();
+    common = readFileSync10(commondirFile, "utf8").trim();
   } catch {
     return null;
   }
-  const commonDir = resolve2(isAbsolute3(common) ? common : resolve2(gitDir, common));
+  const commonDir = resolve3(isAbsolute3(common) ? common : resolve3(gitDir, common));
   if (basename2(commonDir) !== ".git") return null;
   const main2 = dirname6(commonDir);
-  return existsSync11(join10(main2, ".git")) ? main2 : null;
+  return existsSync12(join10(main2, ".git")) ? main2 : null;
 }
 function checkoutRootOf(cwd) {
   const root = nearestGitRoot(cwd);
   const main2 = root ? mainCheckoutOfWorktree(root) : null;
-  return main2 ?? resolve2(cwd);
+  return main2 ?? resolve3(cwd);
 }
 function isLinkedWorktree(root) {
   return mainCheckoutOfWorktree(root) !== null;
@@ -32706,7 +32851,7 @@ var init_checkout_root = __esm({
 
 // src/process-identity.ts
 import { execFileSync } from "node:child_process";
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync11 } from "node:fs";
 function readProcessIdentity(pid, fresh = false) {
   if (!Number.isSafeInteger(pid) || pid <= 0) return null;
   if (pid === process.pid && self) return self;
@@ -32731,10 +32876,10 @@ function readProcessIdentity(pid, fresh = false) {
       if (!/^\d+$/.test(ticks)) return null;
       value = { key: `win32:${ticks}`, bornAt: Number((BigInt(ticks) - 621355968000000000n) / 10000n) };
     } else if (process.platform === "linux") {
-      const stat4 = readFileSync10(`/proc/${pid}/stat`, "utf8");
+      const stat4 = readFileSync11(`/proc/${pid}/stat`, "utf8");
       const ticks = stat4.slice(stat4.lastIndexOf(")") + 2).split(" ")[19];
-      const bootId = readFileSync10("/proc/sys/kernel/random/boot_id", "utf8").trim();
-      const boot = /^btime (\d+)$/m.exec(readFileSync10("/proc/stat", "utf8"))?.[1];
+      const bootId = readFileSync11("/proc/sys/kernel/random/boot_id", "utf8").trim();
+      const boot = /^btime (\d+)$/m.exec(readFileSync11("/proc/stat", "utf8"))?.[1];
       const hz = Number(run3("getconf", ["CLK_TCK"]));
       if (!boot || !/^\d+$/.test(ticks) || !Number.isFinite(hz) || hz <= 0) return null;
       value = { key: `linux:${bootId}:${ticks}`, bornAt: Number(boot) * 1e3 + Number(ticks) * 1e3 / hz };
@@ -32760,7 +32905,7 @@ var init_process_identity = __esm({
 });
 
 // src/lock.ts
-import { existsSync as existsSync12, readFileSync as readFileSync11, unlinkSync as unlinkSync2 } from "node:fs";
+import { existsSync as existsSync13, readFileSync as readFileSync12, unlinkSync as unlinkSync2 } from "node:fs";
 function daemonLockPayload(lock) {
   return JSON.stringify({
     pid: lock.pid,
@@ -32795,9 +32940,9 @@ function isProcessAlive(pid) {
   }
 }
 function readDaemonLock(lockPath) {
-  if (!existsSync12(lockPath)) return null;
+  if (!existsSync13(lockPath)) return null;
   try {
-    return parseDaemonLock(readFileSync11(lockPath, "utf8"));
+    return parseDaemonLock(readFileSync12(lockPath, "utf8"));
   } catch {
     return null;
   }
@@ -32827,7 +32972,7 @@ function daemonLockBlocksStartup(lockPath) {
 function stopLockedDaemon(lockPath) {
   let original;
   try {
-    original = readFileSync11(lockPath, "utf8");
+    original = readFileSync12(lockPath, "utf8");
   } catch {
     return "missing";
   }
@@ -32835,7 +32980,7 @@ function stopLockedDaemon(lockPath) {
   if (!lock) return "unknown";
   const state = daemonLockState(lock, true);
   try {
-    if (readFileSync11(lockPath, "utf8") !== original) return "changed";
+    if (readFileSync12(lockPath, "utf8") !== original) return "changed";
   } catch {
     return "changed";
   }
@@ -32860,16 +33005,16 @@ var init_lock = __esm({
 });
 
 // src/registry.ts
-import { existsSync as existsSync13, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync14, readFileSync as readFileSync13, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join11 } from "node:path";
 function registryPath() {
   return process.env["ERRATA_REGISTRY_PATH"] ?? join11(globalDir(), "workspaces.json");
 }
 function read() {
   const p = registryPath();
-  if (!existsSync13(p)) return { version: 1, workspaces: {} };
+  if (!existsSync14(p)) return { version: 1, workspaces: {} };
   try {
-    const parsed = JSON.parse(readFileSync12(p, "utf8"));
+    const parsed = JSON.parse(readFileSync13(p, "utf8"));
     return { version: 1, workspaces: parsed.workspaces ?? {} };
   } catch {
     return { version: 1, workspaces: {} };
@@ -32877,9 +33022,9 @@ function read() {
 }
 function registryCorrupt() {
   const p = registryPath();
-  if (!existsSync13(p)) return false;
+  if (!existsSync14(p)) return false;
   try {
-    JSON.parse(readFileSync12(p, "utf8"));
+    JSON.parse(readFileSync13(p, "utf8"));
     return false;
   } catch {
     return true;
@@ -32887,7 +33032,7 @@ function registryCorrupt() {
 }
 function write(reg) {
   ensureDir(globalDir());
-  writeFileSync9(registryPath(), JSON.stringify(reg, null, 2), "utf8");
+  writeFileSync10(registryPath(), JSON.stringify(reg, null, 2), "utf8");
 }
 function registerWorkspace(profile, root, now = Date.now()) {
   if (isLinkedWorktree(root)) return;
@@ -32932,7 +33077,7 @@ function pruneMissingWorkspaces() {
   const reg = read();
   const removed = [];
   for (const [id, entry] of Object.entries(reg.workspaces)) {
-    if (!existsSync13(entry.path)) {
+    if (!existsSync14(entry.path)) {
       removed.push(entry);
       delete reg.workspaces[id];
     }
@@ -32941,7 +33086,7 @@ function pruneMissingWorkspaces() {
   return removed;
 }
 function workspaceStatus(entry) {
-  const missing = !existsSync13(entry.path);
+  const missing = !existsSync14(entry.path);
   const lockPath = workspacePaths(entry.path).daemonLock;
   let running = false;
   let webUiUrl = null;
@@ -34260,7 +34405,7 @@ var init_dual_augment = __esm({
 
 // ../../packages/indexer/src/parse-cache.ts
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync14, mkdirSync as mkdirSync6, readFileSync as readFileSync13, readdirSync as readdirSync2, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync6, readFileSync as readFileSync14, readdirSync as readdirSync2, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync11 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join12 } from "node:path";
 function parseCacheDir() {
@@ -34275,7 +34420,7 @@ function entryPath(dir, key) {
 function readParseCache(dir, key) {
   const file2 = entryPath(dir, key);
   try {
-    const raw2 = readFileSync13(file2, "utf8");
+    const raw2 = readFileSync14(file2, "utf8");
     const parsed = JSON.parse(raw2);
     if (parsed.v !== PARSE_CACHE_VERSION || !Array.isArray(parsed.symbols)) return null;
     return { symbols: parsed.symbols, reExports: parsed.reExports ?? [] };
@@ -34295,7 +34440,7 @@ function writeParseCache(dir, key, providerId, value) {
     if (body2.length > MAX_ENTRY_BYTES) return;
     const file2 = entryPath(dir, key);
     mkdirSync6(join12(dir, key.slice(0, 2)), { recursive: true });
-    writeFileSync10(file2, body2);
+    writeFileSync11(file2, body2);
   } catch {
   }
 }
@@ -34304,7 +34449,7 @@ function sweepParseCacheOnce(dir, now = Date.now()) {
   sweptThisProcess = true;
   let removed = 0;
   try {
-    if (!existsSync14(dir)) return 0;
+    if (!existsSync15(dir)) return 0;
     for (const bucket of readdirSync2(dir)) {
       const bucketDir = join12(dir, bucket);
       let names;
@@ -34562,7 +34707,7 @@ var init_identity3 = __esm({
 });
 
 // ../../packages/indexer/src/pipeline.ts
-import { appendFileSync, readFileSync as readFileSync14, statSync as statSync3 } from "node:fs";
+import { appendFileSync, readFileSync as readFileSync15, statSync as statSync3 } from "node:fs";
 import { readdir } from "node:fs/promises";
 import { extname, join as join13, relative as relative2, sep } from "node:path";
 import { createHash as createHash7 } from "node:crypto";
@@ -34702,7 +34847,7 @@ async function incrementalReindex(store, rootPath, workspaceId2, changedAbsPaths
   for (const rel of [...changedRelPaths]) {
     let h;
     try {
-      h = createHash7("sha256").update(readFileSync14(join13(rootPath, rel))).digest("hex");
+      h = createHash7("sha256").update(readFileSync15(join13(rootPath, rel))).digest("hex");
     } catch {
       continue;
     }
@@ -34757,7 +34902,7 @@ async function incrementalReindex(store, rootPath, workspaceId2, changedAbsPaths
     if (!provider) continue;
     let symbols;
     try {
-      symbols = provider.extractSymbols(readFileSync14(abs, "utf8"), abs);
+      symbols = provider.extractSymbols(readFileSync15(abs, "utf8"), abs);
     } catch {
       continue;
     }
@@ -35077,7 +35222,7 @@ async function runIndexer(store, opts) {
         report.filesSkipped++;
         continue;
       }
-      source = readFileSync14(f.absPath, "utf8");
+      source = readFileSync15(f.absPath, "utf8");
     } catch {
       report.filesSkipped++;
       continue;
@@ -35149,7 +35294,7 @@ async function runIndexer(store, opts) {
     const depth = fileNode.relPath.split("/").length;
     if (depth !== 3) continue;
     try {
-      const pkg = JSON.parse(readFileSync14(fileNode.absPath, "utf8"));
+      const pkg = JSON.parse(readFileSync15(fileNode.absPath, "utf8"));
       if (!pkg.name) continue;
       const pkgDir = fileNode.relPath.replace(/\/package\.json$/, "");
       const candidates = [
@@ -35625,7 +35770,7 @@ function upsertFile(store, id, f, workspaceId2, skip) {
   if (existing && fileUnchanged(existing.attrs, f, skip)) return;
   let contentHash;
   try {
-    contentHash = createHash7("sha256").update(readFileSync14(f.absPath)).digest("hex");
+    contentHash = createHash7("sha256").update(readFileSync15(f.absPath)).digest("hex");
   } catch {
   }
   const carried = { ...existing?.attrs ?? {} };
@@ -36242,13 +36387,13 @@ async function Module2(moduleArg = {}) {
       }
       readAsync = /* @__PURE__ */ __name(async (url2) => {
         if (isFileURI(url2)) {
-          return new Promise((resolve8, reject) => {
+          return new Promise((resolve9, reject) => {
             var xhr = new XMLHttpRequest();
             xhr.open("GET", url2, true);
             xhr.responseType = "arraybuffer";
             xhr.onload = () => {
               if (xhr.status == 200 || xhr.status == 0 && xhr.response) {
-                resolve8(xhr.response);
+                resolve9(xhr.response);
                 return;
               }
               reject(xhr.status);
@@ -36444,9 +36589,9 @@ async function Module2(moduleArg = {}) {
     __name(receiveInstantiationResult, "receiveInstantiationResult");
     var info2 = getWasmImports();
     if (Module["instantiateWasm"]) {
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         Module["instantiateWasm"](info2, (mod, inst) => {
-          resolve8(receiveInstance(mod, inst));
+          resolve9(receiveInstance(mod, inst));
         });
       });
     }
@@ -37777,8 +37922,8 @@ async function Module2(moduleArg = {}) {
   if (runtimeInitialized) {
     moduleRtn = Module;
   } else {
-    moduleRtn = new Promise((resolve8, reject) => {
-      readyPromiseResolve = resolve8;
+    moduleRtn = new Promise((resolve9, reject) => {
+      readyPromiseResolve = resolve9;
       readyPromiseReject = reject;
     });
   }
@@ -40009,7 +40154,7 @@ ${JSON.stringify(symbolNames, null, 2)}`);
 // ../../packages/indexer/src/languages/tree-sitter-loader.ts
 import { fileURLToPath } from "node:url";
 import { dirname as dirname7, join as join14 } from "node:path";
-import { existsSync as existsSync15, readdirSync as readdirSync3 } from "node:fs";
+import { existsSync as existsSync16, readdirSync as readdirSync3 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
 function entryDir() {
   try {
@@ -40024,7 +40169,7 @@ function entryDir() {
 function findWasmDir() {
   const here = entryDir();
   const seaWasm = join14(here, "resources", "wasm");
-  if (existsSync15(join14(seaWasm, "tree-sitter-typescript.wasm"))) return seaWasm;
+  if (existsSync16(join14(seaWasm, "tree-sitter-typescript.wasm"))) return seaWasm;
   let dir = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const flat = join14(
@@ -40034,13 +40179,13 @@ function findWasmDir() {
       "tree-sitter-wasm",
       "wasm"
     );
-    if (existsSync15(join14(flat, "tree-sitter-typescript.wasm"))) return flat;
+    if (existsSync16(join14(flat, "tree-sitter-typescript.wasm"))) return flat;
     dir = dirname7(dir);
   }
   let root = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const pnpmDir = join14(root, "node_modules", ".pnpm");
-    if (existsSync15(pnpmDir)) {
+    if (existsSync16(pnpmDir)) {
       for (const entry of readdirSync3(pnpmDir)) {
         if (entry.startsWith("@vscode+tree-sitter-wasm@")) {
           const candidate = join14(
@@ -40051,7 +40196,7 @@ function findWasmDir() {
             "tree-sitter-wasm",
             "wasm"
           );
-          if (existsSync15(join14(candidate, "tree-sitter-typescript.wasm"))) {
+          if (existsSync16(join14(candidate, "tree-sitter-typescript.wasm"))) {
             return candidate;
           }
         }
@@ -40066,17 +40211,17 @@ function findWasmDir() {
 function findRuntimeDir() {
   const here = entryDir();
   const seaRuntime = join14(here, "resources", "wasm");
-  if (existsSync15(join14(seaRuntime, "web-tree-sitter.wasm"))) return seaRuntime;
+  if (existsSync16(join14(seaRuntime, "web-tree-sitter.wasm"))) return seaRuntime;
   let dir = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const flat = join14(dir, "node_modules", "web-tree-sitter");
-    if (existsSync15(join14(flat, "web-tree-sitter.wasm"))) return flat;
+    if (existsSync16(join14(flat, "web-tree-sitter.wasm"))) return flat;
     dir = dirname7(dir);
   }
   let root = here;
   for (let i2 = 0; i2 < 6; i2++) {
     const pnpmDir = join14(root, "node_modules", ".pnpm");
-    if (existsSync15(pnpmDir)) {
+    if (existsSync16(pnpmDir)) {
       for (const entry of readdirSync3(pnpmDir)) {
         if (entry.startsWith("web-tree-sitter@")) {
           const candidate = join14(
@@ -40085,7 +40230,7 @@ function findRuntimeDir() {
             "node_modules",
             "web-tree-sitter"
           );
-          if (existsSync15(join14(candidate, "web-tree-sitter.wasm"))) {
+          if (existsSync16(join14(candidate, "web-tree-sitter.wasm"))) {
             return candidate;
           }
         }
@@ -43224,8 +43369,8 @@ __export(mcp_exports, {
   runTool: () => runTool,
   searchGraph: () => searchGraph
 });
-import { existsSync as existsSync16, readFileSync as readFileSync15 } from "node:fs";
-import { resolve as resolve3 } from "node:path";
+import { existsSync as existsSync17, readFileSync as readFileSync16 } from "node:fs";
+import { resolve as resolve4 } from "node:path";
 function collectEnrichmentPulls(store, opts = {}) {
   const pending = store.findNodesByLabel("Solution").filter((s) => s.attrs["enrichmentPending"] === true).filter((s) => !opts.onlyUnsurfaced || s.attrs["enrichmentSurfaced"] !== true);
   const byEpisode = /* @__PURE__ */ new Map();
@@ -43261,7 +43406,7 @@ function takeEnrichmentNudge(store) {
 ` + items;
 }
 function takeDiscriminatorNudge(path2) {
-  if (!path2 || !existsSync16(path2)) return null;
+  if (!path2 || !existsSync17(path2)) return null;
   let shared;
   try {
     shared = openGraphStore({ path: path2 });
@@ -43391,11 +43536,11 @@ function showNode(store, node2, maxLines) {
   const relPath = ownerFilePath(store, node2);
   if (!relPath) return { found: false, reason: "no file owner for node" };
   const workspaceRoot = process.cwd();
-  const absPath = resolve3(workspaceRoot, relPath);
-  if (!existsSync16(absPath)) {
+  const absPath = resolve4(workspaceRoot, relPath);
+  if (!existsSync17(absPath)) {
     return { found: false, reason: `file not found on disk: ${absPath}` };
   }
-  const source = readFileSync15(absPath, "utf8");
+  const source = readFileSync16(absPath, "utf8");
   const attrs = node2.attrs;
   let startByte = attrs["bodyStartByte"] ?? attrs["startByte"];
   let endByte = attrs["bodyEndByte"] ?? attrs["endByte"];
@@ -43621,7 +43766,7 @@ function buildToolContext(workspaceRoot) {
   const base = { switchInstallationProfile: useInstallationProfile };
   try {
     const cfg = loadConfig();
-    const entry = workspaceRoot ? workspaceEntryForPath(resolve3(workspaceRoot)) : null;
+    const entry = workspaceRoot ? workspaceEntryForPath(resolve4(workspaceRoot)) : null;
     const syncOk = effectiveConsent(cfg, entry ? loadProfile(entry.path) : null).sync;
     const identity = resolveWorkspaceIdentity(cfg, entry);
     if (identity.invalid) {
@@ -44114,7 +44259,7 @@ var init_mcp = __esm({
           const local = causalChain(store, { seedId: id, direction: "both", maxHops, limit });
           try {
             const path2 = sharedStorePath();
-            if (!existsSync16(path2)) return { found: true, ...local };
+            if (!existsSync17(path2)) return { found: true, ...local };
             const shared = openGraphStore({ path: path2 });
             try {
               if (!shared.getNode(id)) return { found: true, ...local };
@@ -44717,7 +44862,7 @@ var init_mcp = __esm({
         inputSchema: { type: "object", properties: {} },
         handler: () => {
           const path2 = sharedStorePath();
-          if (!existsSync16(path2)) return { count: 0, pending: [] };
+          if (!existsSync17(path2)) return { count: 0, pending: [] };
           const shared = openGraphStore({ path: path2 });
           try {
             const pending = pendingAbstractions(shared);
@@ -44745,7 +44890,7 @@ var init_mcp = __esm({
         },
         handler: (args2) => {
           const path2 = sharedStorePath();
-          if (!existsSync16(path2)) return { count: 0, pending: [] };
+          if (!existsSync17(path2)) return { count: 0, pending: [] };
           const shared = openGraphStore({ path: path2 });
           try {
             const pending = pendingDiscriminators(shared, {
@@ -44789,7 +44934,7 @@ var init_mcp = __esm({
         },
         handler: (args2) => {
           const path2 = sharedStorePath();
-          if (!existsSync16(path2)) return { count: 0, routes: [] };
+          if (!existsSync17(path2)) return { count: 0, routes: [] };
           const shared = openGraphStore({ path: path2 });
           try {
             const result = triageOf(shared, {
@@ -45174,8 +45319,8 @@ __export(vfile_exports, {
   resolvePath: () => resolvePath,
   segmentsOf: () => segmentsOf
 });
-import { writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join16, resolve as resolve4, sep as sep3 } from "node:path";
+import { writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join16, resolve as resolve5, sep as sep3 } from "node:path";
 function segmentsOf(rawPath) {
   let p = rawPath.replace(/\\/g, "/");
   p = p.replace(/^.*\.errata\/g\//, "").replace(/^\/?g\//, "").replace(/^\/+/, "");
@@ -45250,13 +45395,13 @@ async function renderVFile(rawPath, store, ctx = {}) {
 async function materializeVFile(rawPath, workspaceRoot, store, ctx = {}) {
   const segs = segmentsOf(rawPath);
   const gRoot = join16(workspaceRoot, ".errata", "g");
-  const abs = resolve4(gRoot, ...segs.length ? segs : ["index"]);
+  const abs = resolve5(gRoot, ...segs.length ? segs : ["index"]);
   if (abs !== gRoot && !abs.startsWith(gRoot + sep3)) {
     throw new Error(`refusing to materialize outside .errata/g: ${rawPath}`);
   }
   const text = await renderVFile(rawPath, store, ctx);
   ensureParent(abs);
-  writeFileSync11(abs, text, "utf8");
+  writeFileSync12(abs, text, "utf8");
   return abs;
 }
 async function materializeOverview(workspaceRoot, store, ctx = {}) {
@@ -52676,12 +52821,12 @@ var init_tool_index = __esm({
 
 // src/outbox.ts
 import {
-  existsSync as existsSync17,
+  existsSync as existsSync18,
   readdirSync as readdirSync5,
-  readFileSync as readFileSync16,
+  readFileSync as readFileSync17,
   renameSync as renameSync2,
   unlinkSync as unlinkSync3,
-  writeFileSync as writeFileSync12
+  writeFileSync as writeFileSync13
 } from "node:fs";
 import { join as join17 } from "node:path";
 import { createHash as createHash15 } from "node:crypto";
@@ -52689,12 +52834,12 @@ function enqueueOutbox(paths, payload) {
   ensureDir(paths.outbox);
   const id = createHash15("sha256").update(JSON.stringify(payload)).digest("hex").slice(0, 16);
   const file2 = join17(paths.outbox, `${Date.now()}-${id}.json`);
-  writeFileSync12(file2, JSON.stringify(payload, null, 2), "utf8");
+  writeFileSync13(file2, JSON.stringify(payload, null, 2), "utf8");
   return file2;
 }
 async function flushOutbox(paths, client, store) {
   ensureDir(paths.outbox);
-  const entries = existsSync17(paths.outbox) ? readdirSync5(paths.outbox) : [];
+  const entries = existsSync18(paths.outbox) ? readdirSync5(paths.outbox) : [];
   let uploaded = 0;
   let failed = 0;
   const quarantine = (abs, reason) => {
@@ -52708,7 +52853,7 @@ async function flushOutbox(paths, client, store) {
     const abs = join17(paths.outbox, f);
     let payload;
     try {
-      payload = JSON.parse(readFileSync16(abs, "utf8"));
+      payload = JSON.parse(readFileSync17(abs, "utf8"));
     } catch {
       failed++;
       quarantine(abs, "unparseable JSON");
@@ -52753,7 +52898,7 @@ async function flushOutbox(paths, client, store) {
       }
     }
   }
-  const remainingFiles = existsSync17(paths.outbox) ? readdirSync5(paths.outbox).filter((e) => e.endsWith(".json")) : [];
+  const remainingFiles = existsSync18(paths.outbox) ? readdirSync5(paths.outbox).filter((e) => e.endsWith(".json")) : [];
   return { uploaded, failed, remaining: remainingFiles.length };
 }
 var init_outbox = __esm({
@@ -52993,6 +53138,20 @@ function buildWebUi(deps) {
   const lastInjectedHash = /* @__PURE__ */ new Map();
   const fileRecallSeen = /* @__PURE__ */ new Map();
   const lastSubagentInjectAt = /* @__PURE__ */ new Map();
+  const noteSessionFrom = (headerOrigin, body2, ended = false) => {
+    const { sessionId, agentId } = hookAudience(body2);
+    if (!sessionId || !deps.noteSession) return;
+    const origin = parseOrigin(headerOrigin) ?? parseOrigin(body2["errata_origin"]);
+    try {
+      deps.noteSession({
+        sessionId,
+        ...agentId ? { agentId } : {},
+        ...origin ? { origin } : {},
+        ...ended ? { ended } : {}
+      });
+    } catch {
+    }
+  };
   app.get(
     "/",
     (c) => c.json({
@@ -53136,6 +53295,7 @@ function buildWebUi(deps) {
     const event = hookEvent === "PostToolUseFailure" ? "PostToolUse" : hookEvent;
     let recall = null;
     const audience = hookAudience(body2);
+    noteSessionFrom(c.req.header(ORIGIN_HEADER), body2);
     if (event === "PreToolUse" && (tool === "Agent" || tool === "Task") && audience.subagent === null) {
       try {
         deps.onSubagentSpawn?.(audience.sessionId, input);
@@ -53323,6 +53483,9 @@ function buildWebUi(deps) {
     }
     if (body2["hook_event_name"] === "SubagentStop" && typeof body2["agent_id"] === "string" && body2["agent_id"]) {
       deps.onSubagentStop?.(body2["agent_id"]);
+      noteSessionFrom(c.req.header(ORIGIN_HEADER), body2, true);
+    } else {
+      noteSessionFrom(c.req.header(ORIGIN_HEADER), body2);
     }
     return c.json({ ok: true });
   });
@@ -53335,6 +53498,7 @@ function buildWebUi(deps) {
     }
     const delta = String(body2["delta"] ?? "");
     const sessionId = String(body2["session_id"] ?? "");
+    noteSessionFrom(c.req.header(ORIGIN_HEADER), body2);
     const messageId = typeof body2["message_id"] === "string" ? body2["message_id"] : void 0;
     const index = typeof body2["index"] === "number" ? body2["index"] : 0;
     const isFinal = body2["final"] !== false;
@@ -53362,6 +53526,7 @@ function buildWebUi(deps) {
     if (transcriptPath && deps.onSessionEnd) {
       deps.onSessionEnd({ sessionId, transcriptPath });
     }
+    noteSessionFrom(c.req.header(ORIGIN_HEADER), body2, true);
     return c.json({ ok: true });
   });
   app.post("/api/context-inject", async (c) => {
@@ -53372,6 +53537,7 @@ function buildWebUi(deps) {
       return c.json({});
     }
     const { sessionId: sid, contextKey: contextKey2, subagent, agentId } = hookAudience(body2);
+    noteSessionFrom(c.req.header(ORIGIN_HEADER), body2);
     const hookEvent = String(body2["hook_event_name"] ?? "UserPromptSubmit");
     const atPrompt = hookEvent === "UserPromptSubmit" || hookEvent === "SessionStart" || hookEvent === "SubagentStart";
     if (sid && recallCardEnabled() && atPrompt) {
@@ -53395,8 +53561,9 @@ function buildWebUi(deps) {
       block = own;
       storedCard = own?.card ?? null;
     } else {
-      block = readContextFileWithHash(deps.paths.root);
-      storedCard = block ? readContextCard(deps.paths.root, block.hash) : null;
+      const own = sid ? deps.sessionContext?.(sid) ?? null : null;
+      block = own ?? readContextFileWithHash(deps.paths.root);
+      storedCard = own ? own.card : block ? readContextCard(deps.paths.root, block.hash) : null;
     }
     const decision = decideContextInject({
       event: hookEvent,
@@ -53610,6 +53777,7 @@ var init_webui = __esm({
     init_agent_signals();
     init_recall_signal();
     init_recall_card();
+    init_session_registry();
     init_review2();
     init_vfile();
     init_tool_index();
@@ -54944,7 +55112,7 @@ var require_util = __commonJS({
       }
       return url2;
     }
-    function parseOrigin(url2) {
+    function parseOrigin2(url2) {
       url2 = parseURL(url2);
       if (url2.pathname !== "/" || url2.search || url2.hash) {
         throw new InvalidArgumentError("invalid url");
@@ -55279,7 +55447,7 @@ var require_util = __commonJS({
       toUSVString,
       isUSVString,
       isBlobLike,
-      parseOrigin,
+      parseOrigin: parseOrigin2,
       parseURL,
       getServerName,
       isStream,
@@ -55937,9 +56105,9 @@ var require_dispatcher_base = __commonJS({
       }
       close(callback) {
         if (callback === void 0) {
-          return new Promise((resolve8, reject) => {
+          return new Promise((resolve9, reject) => {
             this.close((err2, data) => {
-              return err2 ? reject(err2) : resolve8(data);
+              return err2 ? reject(err2) : resolve9(data);
             });
           });
         }
@@ -55977,12 +56145,12 @@ var require_dispatcher_base = __commonJS({
           err2 = null;
         }
         if (callback === void 0) {
-          return new Promise((resolve8, reject) => {
+          return new Promise((resolve9, reject) => {
             this.destroy(err2, (err3, data) => {
               return err3 ? (
                 /* istanbul ignore next: should never error */
                 reject(err3)
-              ) : resolve8(data);
+              ) : resolve9(data);
             });
           });
         }
@@ -58249,8 +58417,8 @@ var require_util2 = __commonJS({
     function createDeferredPromise() {
       let res;
       let rej;
-      const promise2 = new Promise((resolve8, reject) => {
-        res = resolve8;
+      const promise2 = new Promise((resolve9, reject) => {
+        res = resolve9;
         rej = reject;
       });
       return { promise: promise2, resolve: res, reject: rej };
@@ -60391,12 +60559,12 @@ upgrade: ${upgrade}\r
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve8, reject) => {
+      const waitForDrain = () => new Promise((resolve9, reject) => {
         assert2(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve8;
+          callback = resolve9;
         }
       });
       socket.on("close", onDrain).on("drain", onDrain);
@@ -61033,12 +61201,12 @@ var require_client_h2 = __commonJS({
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve8, reject) => {
+      const waitForDrain = () => new Promise((resolve9, reject) => {
         assert2(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve8;
+          callback = resolve9;
         }
       });
       h2stream.on("close", onDrain).on("drain", onDrain);
@@ -61515,16 +61683,16 @@ var require_client = __commonJS({
         return this[kNeedDrain] < 2;
       }
       async [kClose]() {
-        return new Promise((resolve8) => {
+        return new Promise((resolve9) => {
           if (this[kSize]) {
-            this[kClosedResolve] = resolve8;
+            this[kClosedResolve] = resolve9;
           } else {
-            resolve8(null);
+            resolve9(null);
           }
         });
       }
       async [kDestroy](err2) {
-        return new Promise((resolve8) => {
+        return new Promise((resolve9) => {
           const requests = this[kQueue].splice(this[kPendingIdx]);
           for (let i2 = 0; i2 < requests.length; i2++) {
             const request = requests[i2];
@@ -61535,7 +61703,7 @@ var require_client = __commonJS({
               this[kClosedResolve]();
               this[kClosedResolve] = null;
             }
-            resolve8(null);
+            resolve9(null);
           };
           if (this[kHTTPContext]) {
             this[kHTTPContext].destroy(err2, callback);
@@ -61586,7 +61754,7 @@ var require_client = __commonJS({
         });
       }
       try {
-        const socket = await new Promise((resolve8, reject) => {
+        const socket = await new Promise((resolve9, reject) => {
           client[kConnector]({
             host,
             hostname: hostname3,
@@ -61598,7 +61766,7 @@ var require_client = __commonJS({
             if (err2) {
               reject(err2);
             } else {
-              resolve8(socket2);
+              resolve9(socket2);
             }
           });
         });
@@ -61934,8 +62102,8 @@ var require_pool_base = __commonJS({
         if (this[kQueue].isEmpty()) {
           await Promise.all(this[kClients].map((c) => c.close()));
         } else {
-          await new Promise((resolve8) => {
-            this[kClosedResolve] = resolve8;
+          await new Promise((resolve9) => {
+            this[kClosedResolve] = resolve9;
           });
         }
       }
@@ -62103,7 +62271,7 @@ var require_balanced_pool = __commonJS({
     } = require_pool_base();
     var Pool = require_pool();
     var { kUrl, kInterceptors } = require_symbols();
-    var { parseOrigin } = require_util();
+    var { parseOrigin: parseOrigin2 } = require_util();
     var kFactory = Symbol("factory");
     var kOptions = Symbol("options");
     var kGreatestCommonDivisor = Symbol("kGreatestCommonDivisor");
@@ -62146,7 +62314,7 @@ var require_balanced_pool = __commonJS({
         this._updateBalancedPoolStats();
       }
       addUpstream(upstream) {
-        const upstreamOrigin = parseOrigin(upstream).origin;
+        const upstreamOrigin = parseOrigin2(upstream).origin;
         if (this[kClients].find((pool2) => pool2[kUrl].origin === upstreamOrigin && pool2.closed !== true && pool2.destroyed !== true)) {
           return this;
         }
@@ -62180,7 +62348,7 @@ var require_balanced_pool = __commonJS({
         this[kGreatestCommonDivisor] = result;
       }
       removeUpstream(upstream) {
-        const upstreamOrigin = parseOrigin(upstream).origin;
+        const upstreamOrigin = parseOrigin2(upstream).origin;
         const pool = this[kClients].find((pool2) => pool2[kUrl].origin === upstreamOrigin && pool2.closed !== true && pool2.destroyed !== true);
         if (pool) {
           this[kRemoveClient](pool);
@@ -63150,7 +63318,7 @@ var require_readable = __commonJS({
         if (this._readableState.closeEmitted) {
           return null;
         }
-        return await new Promise((resolve8, reject) => {
+        return await new Promise((resolve9, reject) => {
           if (this[kContentLength] > limit) {
             this.destroy(new AbortError());
           }
@@ -63163,7 +63331,7 @@ var require_readable = __commonJS({
             if (signal?.aborted) {
               reject(signal.reason ?? new AbortError());
             } else {
-              resolve8(null);
+              resolve9(null);
             }
           }).on("error", noop).on("data", function(chunk) {
             limit -= chunk.length;
@@ -63182,7 +63350,7 @@ var require_readable = __commonJS({
     }
     async function consume(stream, type) {
       assert2(!stream[kConsume]);
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         if (isUnusable(stream)) {
           const rState = stream._readableState;
           if (rState.destroyed && rState.closeEmitted === false) {
@@ -63199,7 +63367,7 @@ var require_readable = __commonJS({
             stream[kConsume] = {
               type,
               stream,
-              resolve: resolve8,
+              resolve: resolve9,
               reject,
               length: 0,
               body: []
@@ -63269,18 +63437,18 @@ var require_readable = __commonJS({
       return buffer;
     }
     function consumeEnd(consume2) {
-      const { type, body: body2, resolve: resolve8, stream, length } = consume2;
+      const { type, body: body2, resolve: resolve9, stream, length } = consume2;
       try {
         if (type === "text") {
-          resolve8(chunksDecode(body2, length));
+          resolve9(chunksDecode(body2, length));
         } else if (type === "json") {
-          resolve8(JSON.parse(chunksDecode(body2, length)));
+          resolve9(JSON.parse(chunksDecode(body2, length)));
         } else if (type === "arrayBuffer") {
-          resolve8(chunksConcat(body2, length).buffer);
+          resolve9(chunksConcat(body2, length).buffer);
         } else if (type === "blob") {
-          resolve8(new Blob(body2, { type: stream[kContentType] }));
+          resolve9(new Blob(body2, { type: stream[kContentType] }));
         } else if (type === "bytes") {
-          resolve8(chunksConcat(body2, length));
+          resolve9(chunksConcat(body2, length));
         }
         consumeFinish(consume2);
       } catch (err2) {
@@ -63537,9 +63705,9 @@ var require_api_request = __commonJS({
     };
     function request(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve8, reject) => {
+        return new Promise((resolve9, reject) => {
           request.call(this, opts, (err2, data) => {
-            return err2 ? reject(err2) : resolve8(data);
+            return err2 ? reject(err2) : resolve9(data);
           });
         });
       }
@@ -63762,9 +63930,9 @@ var require_api_stream = __commonJS({
     };
     function stream(opts, factory, callback) {
       if (callback === void 0) {
-        return new Promise((resolve8, reject) => {
+        return new Promise((resolve9, reject) => {
           stream.call(this, opts, factory, (err2, data) => {
-            return err2 ? reject(err2) : resolve8(data);
+            return err2 ? reject(err2) : resolve9(data);
           });
         });
       }
@@ -64049,9 +64217,9 @@ var require_api_upgrade = __commonJS({
     };
     function upgrade(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve8, reject) => {
+        return new Promise((resolve9, reject) => {
           upgrade.call(this, opts, (err2, data) => {
-            return err2 ? reject(err2) : resolve8(data);
+            return err2 ? reject(err2) : resolve9(data);
           });
         });
       }
@@ -64143,9 +64311,9 @@ var require_api_connect = __commonJS({
     };
     function connect(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve8, reject) => {
+        return new Promise((resolve9, reject) => {
           connect.call(this, opts, (err2, data) => {
-            return err2 ? reject(err2) : resolve8(data);
+            return err2 ? reject(err2) : resolve9(data);
           });
         });
       }
@@ -68007,7 +68175,7 @@ var require_fetch = __commonJS({
       function dispatch({ body: body2 }) {
         const url2 = requestCurrentURL(request);
         const agent = fetchParams.controller.dispatcher;
-        return new Promise((resolve8, reject) => agent.dispatch(
+        return new Promise((resolve9, reject) => agent.dispatch(
           {
             path: url2.pathname + url2.search,
             origin: url2.origin,
@@ -68083,7 +68251,7 @@ var require_fetch = __commonJS({
                 }
               }
               const onError = this.onError.bind(this);
-              resolve8({
+              resolve9({
                 status,
                 statusText,
                 headersList,
@@ -68129,7 +68297,7 @@ var require_fetch = __commonJS({
               for (let i2 = 0; i2 < rawHeaders.length; i2 += 2) {
                 headersList.append(bufferToLowerCasedHeaderName(rawHeaders[i2]), rawHeaders[i2 + 1].toString("latin1"), true);
               }
-              resolve8({
+              resolve9({
                 status,
                 statusText: STATUS_CODES[status],
                 headersList,
@@ -71768,8 +71936,8 @@ var require_util8 = __commonJS({
       return true;
     }
     function delay(ms) {
-      return new Promise((resolve8) => {
-        setTimeout(resolve8, ms).unref();
+      return new Promise((resolve9) => {
+        setTimeout(resolve9, ms).unref();
       });
     }
     module2.exports = {
@@ -72457,7 +72625,7 @@ __export(witness_ledger_exports, {
   summarizeWitnessLedger: () => summarizeWitnessLedger,
   witnessLedgerPath: () => witnessLedgerPath
 });
-import { appendFileSync as appendFileSync3, existsSync as existsSync26, readFileSync as readFileSync29, writeFileSync as writeFileSync20 } from "node:fs";
+import { appendFileSync as appendFileSync3, existsSync as existsSync27, readFileSync as readFileSync30, writeFileSync as writeFileSync21 } from "node:fs";
 import { join as join33 } from "node:path";
 function witnessLedgerPath(configDir) {
   return join33(configDir, "witness-ledger.jsonl");
@@ -72466,18 +72634,18 @@ function appendWitnessLedger(configDir, entry) {
   const path2 = witnessLedgerPath(configDir);
   try {
     appendFileSync3(path2, JSON.stringify(entry) + "\n");
-    const lines = readFileSync29(path2, "utf8").split("\n").filter(Boolean);
+    const lines = readFileSync30(path2, "utf8").split("\n").filter(Boolean);
     if (lines.length > LEDGER_MAX_LINES) {
-      writeFileSync20(path2, lines.slice(-Math.floor(LEDGER_MAX_LINES / 2)).join("\n") + "\n");
+      writeFileSync21(path2, lines.slice(-Math.floor(LEDGER_MAX_LINES / 2)).join("\n") + "\n");
     }
   } catch {
   }
 }
 function readWitnessLedger(configDir) {
   const path2 = witnessLedgerPath(configDir);
-  if (!existsSync26(path2)) return [];
+  if (!existsSync27(path2)) return [];
   try {
-    return readFileSync29(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter((e) => typeof e.ts === "number" && typeof e.channel === "string");
+    return readFileSync30(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter((e) => typeof e.ts === "number" && typeof e.channel === "string");
   } catch {
     return [];
   }
@@ -72916,12 +73084,12 @@ var init_report_render = __esm({
 
 // src/cli.ts
 init_src6();
-import { closeSync as closeSync2, existsSync as existsSync37, openSync as openSync2, readFileSync as readFileSync40, renameSync as renameSync6, statSync as statSync11 } from "node:fs";
+import { closeSync as closeSync2, existsSync as existsSync38, openSync as openSync2, readFileSync as readFileSync41, renameSync as renameSync6, statSync as statSync11 } from "node:fs";
 import { join as join47, resolve as pathResolve2 } from "node:path";
 import { spawn as spawn5 } from "node:child_process";
 
 // src/daemon.ts
-import { existsSync as existsSync28, writeFileSync as writeFileSync23 } from "node:fs";
+import { existsSync as existsSync29, writeFileSync as writeFileSync24 } from "node:fs";
 
 // ../../node_modules/.pnpm/@hono+node-server@1.19.11_hono@4.12.8/node_modules/@hono/node-server/dist/index.mjs
 import { createServer as createServerHTTP } from "http";
@@ -73351,7 +73519,7 @@ var responseViaResponseObject = async (res, outgoing, options = {}) => {
         });
         if (!chunk) {
           if (i2 === 1) {
-            await new Promise((resolve8) => setTimeout(resolve8));
+            await new Promise((resolve9) => setTimeout(resolve9));
             maxReadCount = 3;
             continue;
           }
@@ -73502,7 +73670,7 @@ init_lock();
 
 // src/engine.ts
 import { execFileSync as execFileSync5 } from "node:child_process";
-import { existsSync as existsSync27, statSync as statSync8, appendFileSync as appendFileSync4, readdirSync as readdirSync10, renameSync as renameSync4, readFileSync as readFileSync31, writeFileSync as writeFileSync22 } from "node:fs";
+import { existsSync as existsSync28, statSync as statSync8, appendFileSync as appendFileSync4, readdirSync as readdirSync10, renameSync as renameSync4, readFileSync as readFileSync32, writeFileSync as writeFileSync23 } from "node:fs";
 import { basename as basename7, join as join35, relative as relative6, sep as sep4 } from "node:path";
 
 // src/source-watcher.ts
@@ -74364,7 +74532,7 @@ var NodeFsHandler = class {
         this._addToNodeFs(path2, initialAdd, wh, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve9, reject) => {
       if (!stream)
         return reject();
       stream.once(STR_END, () => {
@@ -74373,7 +74541,7 @@ var NodeFsHandler = class {
           return;
         }
         const wasThrottled = throttler ? throttler.clear() : false;
-        resolve8(void 0);
+        resolve9(void 0);
         previous.getChildren().filter((item2) => {
           return item2 !== directory && !current.has(item2);
         }).forEach((item2) => {
@@ -75541,6 +75709,7 @@ async function chat(req) {
 // src/engine.ts
 init_src11();
 init_src6();
+init_session_registry();
 init_recall_signal();
 
 // src/subagent-state.ts
@@ -75695,7 +75864,7 @@ init_review2();
 
 // src/turn.ts
 init_checkout_root();
-import { closeSync, existsSync as existsSync18, fstatSync, openSync, readdirSync as readdirSync6, readSync, realpathSync, statSync as statSync6 } from "node:fs";
+import { closeSync, existsSync as existsSync19, fstatSync, openSync, readdirSync as readdirSync6, readSync, realpathSync as realpathSync2, statSync as statSync6 } from "node:fs";
 import { basename as basename5, delimiter, dirname as dirname10, join as join21, normalize as normalize3 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 import { createHash as createHash16 } from "node:crypto";
@@ -76088,7 +76257,7 @@ function claudeProjectDir(cwd, home = homedir4()) {
 }
 function recentTranscripts(cwd, opts = {}) {
   const dir = claudeProjectDir(cwd, opts.home ?? homedir4());
-  if (!existsSync18(dir)) return [];
+  if (!existsSync19(dir)) return [];
   let names;
   try {
     names = readdirSync6(dir);
@@ -76115,7 +76284,7 @@ function recentTranscripts(cwd, opts = {}) {
 function subagentTranscripts(mainTranscriptPath, sessionId) {
   if (!mainTranscriptPath || !sessionId) return [];
   const dir = join21(dirname10(mainTranscriptPath), sessionId, "subagents");
-  if (!existsSync18(dir)) return [];
+  if (!existsSync19(dir)) return [];
   let names;
   try {
     names = readdirSync6(dir);
@@ -76199,7 +76368,7 @@ function codexRolloutsForCwd(cwd, opts = {}) {
   const owner = checkoutRootOf(cwd);
   const owners = /* @__PURE__ */ new Map();
   for (const root of codexSessionRoots(opts.env, opts.home)) {
-    if (!existsSync18(root)) {
+    if (!existsSync19(root)) {
       codexRolloutActivity.delete(root);
       continue;
     }
@@ -76269,7 +76438,7 @@ function geminiProjectHash(cwd) {
 function geminiHashesFor(cwd) {
   const variants = /* @__PURE__ */ new Set([cwd, cwd.replace(/\/+$/, "")]);
   try {
-    variants.add(realpathSync(cwd));
+    variants.add(realpathSync2(cwd));
   } catch {
   }
   return new Set([...variants].map(geminiProjectHash));
@@ -76300,7 +76469,7 @@ function geminiTranscriptsForCwd(cwd, opts = {}) {
   const hashes = geminiHashesFor(cwd);
   const out2 = [];
   for (const root of geminiSessionRoots(opts.env, opts.home)) {
-    if (!existsSync18(root)) continue;
+    if (!existsSync19(root)) continue;
     let slugs;
     try {
       slugs = readdirSync6(root);
@@ -76366,12 +76535,12 @@ function opencodeTranscriptsForCwd(cwd, opts = {}) {
   const limit = opts.limit ?? 25;
   const want = /* @__PURE__ */ new Set([cwd, cwd.replace(/\/+$/, "")]);
   try {
-    want.add(realpathSync(cwd));
+    want.add(realpathSync2(cwd));
   } catch {
   }
   const out2 = [];
   for (const root of opencodeSessionRoots(opts.env, opts.home)) {
-    if (!existsSync18(root)) continue;
+    if (!existsSync19(root)) continue;
     let names;
     try {
       names = readdirSync6(root);
@@ -76403,7 +76572,7 @@ init_src2();
 init_agent_signals();
 init_tool_index();
 init_src5();
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync13 } from "node:fs";
+import { readFileSync as readFileSync18, writeFileSync as writeFileSync14 } from "node:fs";
 var NEG = /n['']t|\b(?:not|never|no|none|neither|nor|unrelated|irrelevant|would|might|could|if)\b/i;
 var CITE_GROUP_RE = /\(((?:[^()\n]|\([^()\n]*\)){1,200})\)/g;
 var HANDLE_RE = /\[([a-z0-9][\w-]{0,80})\]|((?:pat|sol|drc|dcause|dfix|dprob|dvuln|prob|claim|err)_[0-9a-f]{6,})/gi;
@@ -77136,13 +77305,13 @@ function writePrimingHandles(path2, nodes, now = Date.now()) {
       entries.sort((a, b) => (b[1].seenAt ?? 0) - (a[1].seenAt ?? 0));
       entries.length = HANDLE_MAP_MAX;
     }
-    writeFileSync13(path2, JSON.stringify(Object.fromEntries(entries)));
+    writeFileSync14(path2, JSON.stringify(Object.fromEntries(entries)));
   } catch {
   }
 }
 function readPrimingHandles(path2) {
   try {
-    return JSON.parse(readFileSync17(path2, "utf8"));
+    return JSON.parse(readFileSync18(path2, "utf8"));
   } catch {
     return {};
   }
@@ -77622,7 +77791,7 @@ ${conversation}` }]
 // src/constraint-backfill.ts
 init_src5();
 init_src2();
-import { existsSync as existsSync19, readFileSync as readFileSync18, readdirSync as readdirSync7, writeFileSync as writeFileSync14 } from "node:fs";
+import { existsSync as existsSync20, readFileSync as readFileSync19, readdirSync as readdirSync7, writeFileSync as writeFileSync15 } from "node:fs";
 import { join as join22 } from "node:path";
 import { homedir as homedir5 } from "node:os";
 var BACKFILL_VERSION = 1;
@@ -77641,9 +77810,9 @@ function markerPath(configDir) {
 }
 function alreadyDone(configDir) {
   const p = markerPath(configDir);
-  if (!existsSync19(p)) return false;
+  if (!existsSync20(p)) return false;
   try {
-    const raw2 = JSON.parse(readFileSync18(p, "utf8"));
+    const raw2 = JSON.parse(readFileSync19(p, "utf8"));
     return raw2?.version === BACKFILL_VERSION;
   } catch {
     return false;
@@ -77653,7 +77822,7 @@ function replay(root) {
   const statements = /* @__PURE__ */ new Set();
   const citedByFix = /* @__PURE__ */ new Set();
   const dir = claudeProjectDir(root, homedir5());
-  if (!existsSync19(dir)) return { statements, citedByFix };
+  if (!existsSync20(dir)) return { statements, citedByFix };
   let names;
   try {
     names = readdirSync7(dir).filter((n) => n.endsWith(".jsonl"));
@@ -77663,7 +77832,7 @@ function replay(root) {
   for (const f of names) {
     let lines;
     try {
-      lines = readFileSync18(join22(dir, f), "utf8").split("\n");
+      lines = readFileSync19(join22(dir, f), "utf8").split("\n");
     } catch {
       continue;
     }
@@ -77777,7 +77946,7 @@ function backfillConstraintKind(store, opts) {
     }
   });
   try {
-    writeFileSync14(
+    writeFileSync15(
       markerPath(opts.configDir),
       JSON.stringify({ version: BACKFILL_VERSION, at: opts.now, ...report, cloudTwins: report.cloudTwins.length }, null, 2),
       "utf8"
@@ -77790,7 +77959,7 @@ function backfillConstraintKind(store, opts) {
 // src/edge-repair.ts
 init_src();
 init_src5();
-import { existsSync as existsSync20, readFileSync as readFileSync19, writeFileSync as writeFileSync15 } from "node:fs";
+import { existsSync as existsSync21, readFileSync as readFileSync20, writeFileSync as writeFileSync16 } from "node:fs";
 import { join as join23 } from "node:path";
 function citeEdgeId(from, type, to) {
   return `edge_${digest({ from, type, to })}`.slice(0, 24);
@@ -77810,9 +77979,9 @@ function markerPath2(configDir) {
 }
 function alreadyDone2(configDir) {
   const p = markerPath2(configDir);
-  if (!existsSync20(p)) return false;
+  if (!existsSync21(p)) return false;
   try {
-    return JSON.parse(readFileSync19(p, "utf8"))?.version === EDGE_REPAIR_VERSION;
+    return JSON.parse(readFileSync20(p, "utf8"))?.version === EDGE_REPAIR_VERSION;
   } catch {
     return false;
   }
@@ -77861,7 +78030,7 @@ function repairInvalidEdges(store, opts) {
   });
   store.pruneEdgeRejections(opts.now - REJECTION_RETENTION_MS);
   try {
-    writeFileSync15(
+    writeFileSync16(
       markerPath2(opts.configDir),
       JSON.stringify({ version: EDGE_REPAIR_VERSION, at: opts.now, ...report }, null, 2),
       "utf8"
@@ -77875,7 +78044,7 @@ function repairInvalidEdges(store, opts) {
 init_reconcile();
 
 // src/pass-ledger.ts
-import { appendFileSync as appendFileSync2, existsSync as existsSync21, readFileSync as readFileSync20, writeFileSync as writeFileSync16 } from "node:fs";
+import { appendFileSync as appendFileSync2, existsSync as existsSync22, readFileSync as readFileSync21, writeFileSync as writeFileSync17 } from "node:fs";
 import { join as join24 } from "node:path";
 
 // src/isolate-census.ts
@@ -77928,7 +78097,7 @@ function appendPassLedger(configDir, kind, durationMs, counts) {
       return;
     }
     appendsSinceTrim.set(path2, 0);
-    const lines = readFileSync20(path2, "utf8").split("\n").filter(Boolean);
+    const lines = readFileSync21(path2, "utf8").split("\n").filter(Boolean);
     const keptByKind = /* @__PURE__ */ new Map();
     const kept = [];
     for (let i2 = lines.length - 1; i2 >= 0; i2--) {
@@ -77944,16 +78113,16 @@ function appendPassLedger(configDir, kind, durationMs, counts) {
       kept.push(lines[i2]);
     }
     if (kept.length < lines.length) {
-      writeFileSync16(path2, kept.reverse().join("\n") + "\n");
+      writeFileSync17(path2, kept.reverse().join("\n") + "\n");
     }
   } catch {
   }
 }
 function readPassLedger(configDir) {
   const path2 = passLedgerPath(configDir);
-  if (!existsSync21(path2)) return [];
+  if (!existsSync22(path2)) return [];
   try {
-    return readFileSync20(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter(
+    return readFileSync21(path2, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter(
       (e) => typeof e?.ts === "number" && typeof e?.kind === "string" && typeof e?.durationMs === "number"
     ).map((e) => ({ ...e, counts: e.counts ?? {} }));
   } catch {
@@ -78249,8 +78418,8 @@ var PassWorker = class {
       const id = this.nextId++;
       try {
         await this.ready;
-        return await new Promise((resolve8, reject) => {
-          this.pending.set(id, { resolve: resolve8, reject });
+        return await new Promise((resolve9, reject) => {
+          this.pending.set(id, { resolve: resolve9, reject });
           this.worker.postMessage({ id, kind, ...payload !== void 0 ? { payload } : {} });
         });
       } finally {
@@ -78284,12 +78453,12 @@ var PassWorker = class {
     });
     noteIsolateSpawned();
     this.worker = worker;
-    this.ready = new Promise((resolve8, reject) => {
+    this.ready = new Promise((resolve9, reject) => {
       const onReady = (m) => {
         if (m?.ready) {
           worker.off("message", onReady);
           worker.off("error", onErr);
-          resolve8();
+          resolve9();
         }
       };
       const onErr = (err2) => reject(err2);
@@ -78334,11 +78503,11 @@ init_outbox();
 init_src10();
 init_src();
 init_src2();
-import { readFileSync as readFileSync21 } from "node:fs";
+import { readFileSync as readFileSync22 } from "node:fs";
 import { join as join25 } from "node:path";
 function loadClaimIgnorePatterns(workspaceRoot) {
   try {
-    return readFileSync21(join25(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
+    return readFileSync22(join25(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
   } catch {
     return [];
   }
@@ -78716,7 +78885,7 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
 // src/retrieval-stack.ts
 init_src();
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync22, readFileSync as readFileSync22, statSync as statSync7 } from "node:fs";
+import { existsSync as existsSync23, readFileSync as readFileSync23, statSync as statSync7 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join26 } from "node:path";
 var RETRIEVAL_STACK_CAP = 24;
@@ -79008,7 +79177,7 @@ function mavenGroupIsSelfDisclosing(name2, selfTokens) {
 function loadRegistryPolicy(root, env2 = process.env, repoLocator) {
   const read2 = (p) => {
     try {
-      return readFileSync22(p, "utf8");
+      return readFileSync23(p, "utf8");
     } catch {
       return null;
     }
@@ -79234,7 +79403,7 @@ function readDirectDependencies(root) {
   for (const c of LOCKFILES) {
     if (familiesSeen.has(c.family)) continue;
     const p = join26(root, c.file);
-    if (!existsSync22(p)) continue;
+    if (!existsSync23(p)) continue;
     try {
       const s = statSync7(p);
       stamps.push(`${c.file}:${s.mtimeMs}:${s.size}`);
@@ -79254,7 +79423,7 @@ function readDirectDependencies(root) {
   const direct = [];
   for (const { c, path: path2 } of found) {
     try {
-      direct.push(...c.parse(readFileSync22(path2, "utf8")).direct ?? []);
+      direct.push(...c.parse(readFileSync23(path2, "utf8")).direct ?? []);
     } catch {
     }
   }
@@ -79297,14 +79466,14 @@ function manifestPaths(root) {
     "project.godot"
   ];
   return {
-    paths: ROOT_MANIFESTS.filter((f) => existsSync22(join26(root, f))),
+    paths: ROOT_MANIFESTS.filter((f) => existsSync23(join26(root, f))),
     tracked: false,
     truncated: false
   };
 }
 var WORKSPACE_MARKERS = ["pnpm-workspace.yaml", "lerna.json", "go.work", "settings.gradle", "settings.gradle.kts"];
 function rootDeclaresWorkspace(root, texts) {
-  if (WORKSPACE_MARKERS.some((f) => existsSync22(join26(root, f)))) return true;
+  if (WORKSPACE_MARKERS.some((f) => existsSync23(join26(root, f)))) return true;
   return /"workspaces"\s*:/.test(texts.get("package.json") ?? "") || /<modules>/.test(texts.get("pom.xml") ?? "") || /^\s*\[workspace\]/m.test(texts.get("Cargo.toml") ?? "");
 }
 var EMPTY_SCAN = { deps: [], self: [], complete: true };
@@ -79322,7 +79491,7 @@ function scanManifests(root) {
     try {
       const s = statSync7(abs);
       stamps.push(`${rel}:${s.mtimeMs}:${s.size}`);
-      texts.set(rel, readFileSync22(abs, "utf8"));
+      texts.set(rel, readFileSync23(abs, "utf8"));
     } catch {
     }
   }
@@ -79358,11 +79527,11 @@ function readRetrievalInputs(root, repoLocator) {
 }
 
 // src/git-sensor.ts
-import { existsSync as existsSync23, readFileSync as readFileSync23, watch as fsWatch } from "node:fs";
+import { existsSync as existsSync24, readFileSync as readFileSync24, watch as fsWatch } from "node:fs";
 import { join as join27 } from "node:path";
 function readFirstLine(path2) {
   try {
-    return readFileSync23(path2, "utf8").split(/\r?\n/, 1)[0].trim();
+    return readFileSync24(path2, "utf8").split(/\r?\n/, 1)[0].trim();
   } catch {
     return null;
   }
@@ -79381,13 +79550,13 @@ function readGitRefState(gitDir) {
   return {
     branch,
     sha: sha2,
-    mergeHeadExists: existsSync23(join27(gitDir, "MERGE_HEAD")),
-    origHeadExists: existsSync23(join27(gitDir, "ORIG_HEAD"))
+    mergeHeadExists: existsSync24(join27(gitDir, "MERGE_HEAD")),
+    origHeadExists: existsSync24(join27(gitDir, "ORIG_HEAD"))
   };
 }
 function shaFromPackedRefs(gitDir, ref) {
   try {
-    for (const line of readFileSync23(join27(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync24(join27(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
       const [sha2, name2] = line.split(/\s+/);
       if (name2 === ref && sha2) return sha2;
     }
@@ -79421,7 +79590,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
   const settle = () => {
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
-      if (existsSync23(join27(gitDir, "index.lock"))) {
+      if (existsSync24(join27(gitDir, "index.lock"))) {
         settle();
         return;
       }
@@ -79452,7 +79621,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
 // src/git-delta.ts
 import { execFile } from "node:child_process";
 function git(repoDir, args2) {
-  return new Promise((resolve8, reject) => {
+  return new Promise((resolve9, reject) => {
     execFile(
       "git",
       ["-C", repoDir, ...args2],
@@ -79463,7 +79632,7 @@ function git(repoDir, args2) {
         // git-sensor runs on every commit/checkout.
         windowsHide: true
       },
-      (err2, stdout) => err2 ? reject(err2) : resolve8(stdout)
+      (err2, stdout) => err2 ? reject(err2) : resolve9(stdout)
     );
   });
 }
@@ -79656,7 +79825,7 @@ var TelemetryRecorder = class {
 };
 
 // src/file-activity.ts
-import { readFileSync as readFileSync25 } from "node:fs";
+import { readFileSync as readFileSync26 } from "node:fs";
 import { join as join29 } from "node:path";
 import { createHash as createHash17 } from "node:crypto";
 
@@ -80409,7 +80578,7 @@ init_git_remote();
 // src/history-bundle.ts
 init_src();
 import { execFile as execFile2 } from "node:child_process";
-import { readFileSync as readFileSync24 } from "node:fs";
+import { readFileSync as readFileSync25 } from "node:fs";
 import { join as join28 } from "node:path";
 var DEFAULT_MAX_TOKENS = 6e3;
 var FILE_LIST_CAP = 60;
@@ -80445,7 +80614,7 @@ function pathAllowedByFloor(path2) {
 function loadRepoIgnore(root, extraPatterns = []) {
   let source = "";
   try {
-    source = readFileSync24(join28(root, ".errataignore"), "utf8");
+    source = readFileSync25(join28(root, ".errataignore"), "utf8");
   } catch {
     source = "";
   }
@@ -80621,12 +80790,12 @@ function headerPaths(diff) {
   return out2.filter((p) => p !== "/dev/null");
 }
 function git2(repoDir, args2) {
-  return new Promise((resolve8, reject) => {
+  return new Promise((resolve9, reject) => {
     execFile2(
       "git",
       ["-C", repoDir, ...args2],
       { encoding: "utf8", maxBuffer: 64 * 1024 * 1024, windowsHide: true },
-      (err2, stdout) => err2 ? reject(err2) : resolve8(stdout)
+      (err2, stdout) => err2 ? reject(err2) : resolve9(stdout)
     );
   });
 }
@@ -80738,7 +80907,7 @@ function readActivityBranch(root) {
   try {
     const gitDir = resolveGitDir(root);
     if (!gitDir) return null;
-    const head2 = readFileSync25(join29(gitDir, "HEAD"), "utf8").trim();
+    const head2 = readFileSync26(join29(gitDir, "HEAD"), "utf8").trim();
     const branch = head2.startsWith("ref: refs/heads/") ? head2.slice(16) : /^[a-f0-9]{40,64}$/i.test(head2) ? "HEAD" : null;
     return branch && branch.length <= 256 && !/[\x00-\x1f\x7f]/.test(branch) ? branch : null;
   } catch {
@@ -80895,21 +81064,21 @@ var FileActivityReporter = class {
 
 // src/skills.ts
 import {
-  existsSync as existsSync24,
+  existsSync as existsSync25,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync26,
+  readFileSync as readFileSync27,
   readdirSync as readdirSync8,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync17
+  writeFileSync as writeFileSync18
 } from "node:fs";
 import { basename as basename6, join as join30 } from "node:path";
 function skillFileName(id) {
   return `${id.replace(/[^A-Za-z0-9_.-]/g, "_")}.md`;
 }
 function readSkillManifest(manifestPath) {
-  if (!existsSync24(manifestPath)) return [];
+  if (!existsSync25(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync26(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync27(manifestPath, "utf8"));
     return (parsed.skills ?? []).map((s) => ({
       title: s.title ?? "",
       layer: s.layer ?? "technique",
@@ -80933,7 +81102,7 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
   for (const s of res.skills) {
     const fileName = skillFileName(s.id);
     keep.add(fileName);
-    writeFileSync17(join30(paths.skillsDir, fileName), s.markdown, "utf8");
+    writeFileSync18(join30(paths.skillsDir, fileName), s.markdown, "utf8");
     rows.push({
       id: s.id,
       title: s.title,
@@ -80946,7 +81115,7 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
     const fileName = skillFileName(p.id);
     if (keep.has(fileName)) continue;
     keep.add(fileName);
-    writeFileSync17(join30(paths.skillsDir, fileName), p.markdown, "utf8");
+    writeFileSync18(join30(paths.skillsDir, fileName), p.markdown, "utf8");
     rows.push({
       id: p.id,
       title: p.title,
@@ -80966,7 +81135,7 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
     }
   }
   rows.sort((a, b) => a.id.localeCompare(b.id));
-  writeFileSync17(
+  writeFileSync18(
     paths.skillsManifest,
     JSON.stringify({ generatedAt: Date.now(), skills: rows }, null, 2),
     "utf8"
@@ -80978,14 +81147,14 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
 init_src2();
 import {
   cpSync,
-  existsSync as existsSync25,
+  existsSync as existsSync26,
   lstatSync,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync27,
+  readFileSync as readFileSync28,
   readdirSync as readdirSync9,
   rmSync as rmSync3,
   symlinkSync,
-  writeFileSync as writeFileSync18
+  writeFileSync as writeFileSync19
 } from "node:fs";
 import { join as join31 } from "node:path";
 var SKILL_NS = "errata-";
@@ -81038,7 +81207,7 @@ function skillCiteHandle(s) {
   return priorHandle({ id: s.id, description: s.title });
 }
 function reconcileNamespaced(dir, keep) {
-  if (!existsSync25(dir)) return 0;
+  if (!existsSync26(dir)) return 0;
   let pruned = 0;
   for (const name2 of readdirSync9(dir)) {
     if (!name2.startsWith(SKILL_NS) || keep.has(name2)) continue;
@@ -81052,7 +81221,7 @@ function reconcileNamespaced(dir, keep) {
 }
 function linkOrCopy(linkPath, target) {
   try {
-    if (existsSync25(linkPath) || safeLstat(linkPath)) rmSync3(linkPath, { recursive: true, force: true });
+    if (existsSync26(linkPath) || safeLstat(linkPath)) rmSync3(linkPath, { recursive: true, force: true });
   } catch {
   }
   try {
@@ -81081,7 +81250,7 @@ function emitAndProjectSkills(root, skills) {
   for (const s of skills) {
     let body2;
     try {
-      body2 = readFileSync27(s.bodyPath, "utf8");
+      body2 = readFileSync28(s.bodyPath, "utf8");
     } catch {
       continue;
     }
@@ -81091,7 +81260,7 @@ function emitAndProjectSkills(root, skills) {
     slugs.push(slug2);
     const description = deriveDescription(s.title, s.layer, body2);
     mkdirSync8(join31(agentsSkillsDir, slug2), { recursive: true });
-    writeFileSync18(
+    writeFileSync19(
       join31(agentsSkillsDir, slug2, "SKILL.md"),
       renderSkillMd(slug2, description, body2, skillCiteHandle(s)),
       "utf8"
@@ -81101,7 +81270,7 @@ function emitAndProjectSkills(root, skills) {
   reconcileNamespaced(agentsSkillsDir, keep);
   let projected = 0;
   for (const h of HARNESS_SKILL_DIRS) {
-    if (!existsSync25(join31(root, h.configDir))) continue;
+    if (!existsSync26(join31(root, h.configDir))) continue;
     const dir = join31(root, h.skillsDir);
     mkdirSync8(dir, { recursive: true });
     for (const slug2 of slugs) {
@@ -81114,9 +81283,9 @@ function emitAndProjectSkills(root, skills) {
   return { slugs, emitted, projected };
 }
 function emitInputsFromManifest(erretaDir, manifestPath) {
-  if (!existsSync25(manifestPath)) return [];
+  if (!existsSync26(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync27(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync28(manifestPath, "utf8"));
     return (parsed.skills ?? []).filter((s) => Boolean(s.id && s.file)).map((s) => ({
       id: s.id,
       title: s.title ?? s.id,
@@ -81139,14 +81308,14 @@ function ensureSkillGitignore(root) {
   const path2 = join31(root, ".gitignore");
   let current = "";
   try {
-    current = existsSync25(path2) ? readFileSync27(path2, "utf8") : "";
+    current = existsSync26(path2) ? readFileSync28(path2, "utf8") : "";
   } catch {
     return;
   }
   if (current.includes(GITIGNORE_MARK)) return;
   const prefix = current.length > 0 && !current.endsWith("\n") ? "\n" : "";
   try {
-    writeFileSync18(path2, `${current}${prefix}
+    writeFileSync19(path2, `${current}${prefix}
 ${GITIGNORE_LINES.join("\n")}
 `, "utf8");
   } catch {
@@ -81242,7 +81411,7 @@ init_paths();
 init_profile2();
 
 // src/witness-queue.ts
-import { readFileSync as readFileSync28, renameSync as renameSync3, writeFileSync as writeFileSync19 } from "node:fs";
+import { readFileSync as readFileSync29, renameSync as renameSync3, writeFileSync as writeFileSync20 } from "node:fs";
 import { dirname as dirname11, join as join32 } from "node:path";
 var WITNESS_QUEUE_CAP = 500;
 var WITNESS_TTL_MS = 14 * 24 * 60 * 60 * 1e3;
@@ -81253,7 +81422,7 @@ function witnessQueuePath(workspaceConfigDir) {
 function loadWitnessQueueWithLosses(path2) {
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync28(path2, "utf8"));
+    raw2 = JSON.parse(readFileSync29(path2, "utf8"));
   } catch (err2) {
     const absent = err2?.code === "ENOENT";
     return { queue: [], fileUnreadable: !absent, malformedEntries: 0 };
@@ -81267,7 +81436,7 @@ function loadWitnessQueueWithLosses(path2) {
 function saveWitnessQueue(path2, queue) {
   try {
     const tmp = join32(dirname11(path2), `.${Date.now()}.witness-queue.tmp`);
-    writeFileSync19(tmp, JSON.stringify(queue), "utf8");
+    writeFileSync20(tmp, JSON.stringify(queue), "utf8");
     renameSync3(tmp, path2);
   } catch {
   }
@@ -81574,7 +81743,7 @@ function maybeFlushDigests() {
 
 // src/liveness-watch.ts
 init_src5();
-import { readFileSync as readFileSync30, writeFileSync as writeFileSync21 } from "node:fs";
+import { readFileSync as readFileSync31, writeFileSync as writeFileSync22 } from "node:fs";
 import { join as join34 } from "node:path";
 
 // src/loop-lag.ts
@@ -81710,7 +81879,7 @@ function alarmStatePath(configDir) {
 }
 function loadAlarmState(configDir) {
   try {
-    const raw2 = JSON.parse(readFileSync30(alarmStatePath(configDir), "utf8"));
+    const raw2 = JSON.parse(readFileSync31(alarmStatePath(configDir), "utf8"));
     return new Map(Object.entries(raw2).filter((e) => typeof e[1] === "number"));
   } catch {
     return /* @__PURE__ */ new Map();
@@ -81718,7 +81887,7 @@ function loadAlarmState(configDir) {
 }
 function saveAlarmState(configDir, state) {
   try {
-    writeFileSync21(alarmStatePath(configDir), JSON.stringify(Object.fromEntries(state)));
+    writeFileSync22(alarmStatePath(configDir), JSON.stringify(Object.fromEntries(state)));
   } catch {
   }
 }
@@ -81918,7 +82087,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.17-dev.3421" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.17-dev.3426" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -81930,7 +82099,7 @@ var CODEX_SWEEP_LOOKBACK_MS = 10 * 6e4;
 function appendIdentityAudit(path2, record2, line) {
   if (!record2.accepted && record2.score <= 0) return;
   try {
-    if (existsSync27(path2) && statSync8(path2).size >= IDENTITY_AUDIT_MAX_BYTES) {
+    if (existsSync28(path2) && statSync8(path2).size >= IDENTITY_AUDIT_MAX_BYTES) {
       renameSync4(path2, `${path2}.1`);
     }
     appendFileSync4(path2, line);
@@ -81940,7 +82109,7 @@ function appendIdentityAudit(path2, record2, line) {
 var yieldToLoop = () => new Promise((r) => setImmediate(r));
 function loadTurnCursors(path2) {
   try {
-    const raw2 = JSON.parse(readFileSync31(path2, "utf8"));
+    const raw2 = JSON.parse(readFileSync32(path2, "utf8"));
     return new Map(
       Object.entries(raw2).map(([k, v]) => [k, typeof v === "string" ? v : String(v?.uuid ?? "")])
     );
@@ -81950,7 +82119,7 @@ function loadTurnCursors(path2) {
 }
 function loadTurnOffsets(path2) {
   try {
-    const raw2 = JSON.parse(readFileSync31(path2, "utf8"));
+    const raw2 = JSON.parse(readFileSync32(path2, "utf8"));
     const out2 = /* @__PURE__ */ new Map();
     for (const [k, v] of Object.entries(raw2)) {
       const off = typeof v === "object" && v !== null ? v.offset : void 0;
@@ -81966,7 +82135,7 @@ function saveTurnCursors(path2, cursors, offsets) {
     const merged = {};
     for (const [k, uuid3] of cursors) merged[k] = { uuid: uuid3, offset: offsets.get(k) ?? 0 };
     for (const [k, offset] of offsets) if (!merged[k]) merged[k] = { uuid: "", offset };
-    writeFileSync22(path2, JSON.stringify(merged), "utf8");
+    writeFileSync23(path2, JSON.stringify(merged), "utf8");
   } catch {
   }
 }
@@ -82255,7 +82424,7 @@ function createWorkspaceEngine(opts) {
       );
     };
     const gitDir = join35(opts.workspaceRoot, ".git");
-    if (existsSync27(gitDir)) {
+    if (existsSync28(gitDir)) {
       stopGit = startGitSensor(gitDir, (ev) => {
         void handleGitEvent(ev).catch((err2) => {
           console.warn("[errata] git event handler failed:", err2);
@@ -82320,6 +82489,9 @@ function createWorkspaceEngine(opts) {
   let subagentBase = null;
   let subagentBaseVersion = 0;
   const subagentRenders = /* @__PURE__ */ new Map();
+  const sessions = createSessionRegistry({ originsPath: join35(paths.configDir, "session-origins.json") });
+  const sessionRenders = /* @__PURE__ */ new Map();
+  const selfCiteSkipsBySession = /* @__PURE__ */ new Map();
   const toolRuns = createToolRunState();
   let ctxRefreshTimer = null;
   let contextDirty = false;
@@ -82375,6 +82547,22 @@ function createWorkspaceEngine(opts) {
       return [];
     }
   };
+  const statedIntentFor = (intent) => {
+    const collective = intentRemote?.forIntent === intent ? intentRemote : null;
+    return {
+      text: intent,
+      hits: searchByIntent(store, intent, { limit: 4 }).map((h) => ({
+        id: h.node.id,
+        label: h.node.label,
+        description: h.node.description,
+        coverage: h.coverage
+      })),
+      ...collective && collective.hits.length > 0 ? {
+        remoteHits: collective.hits.slice(0, 4).map((n) => ({ id: n.id, label: n.label, description: n.description }))
+      } : {},
+      ...collective?.voidSignal ? { knownGap: collective.voidSignal } : {}
+    };
+  };
   const refreshContextOnce = async () => {
     const elicit = isEdgeElicitationEnabled();
     const snapOpts = {
@@ -82397,47 +82585,29 @@ function createWorkspaceEngine(opts) {
       contextDirty = true;
       return;
     }
-    const baseForSubagents = prebuilt ? structuredClone(prebuilt) : null;
     const doneRender = markPass(`${prebuilt ? "context-render" : "context-render-inline"}:${profile.name}`);
+    const base = prebuilt ?? buildSnapshot({ store, ...snapOpts });
+    subagentBase = structuredClone(base);
+    subagentBaseVersion++;
+    const sharedSnapshot = scopeSnapshot(base, (n) => !isQuarantined(n, sessions));
     const pendingUpdate = opts.pendingUpdate?.() ?? null;
     const daemonDistress = opts.daemonDistress?.() ?? null;
     const reviewItems = pickReviewItems();
     const liveIntent = intents.mostRecent(Date.now());
     maybeRefreshIntentPriors(liveIntent ?? null);
-    const intentHits = liveIntent ? searchByIntent(store, liveIntent, { limit: 4 }).map((h) => ({
-      id: h.node.id,
-      label: h.node.label,
-      description: h.node.description,
-      coverage: h.coverage
-    })) : [];
-    const intentCollective = liveIntent && intentRemote?.forIntent === liveIntent ? intentRemote : null;
+    const statedIntent = liveIntent ? statedIntentFor(liveIntent) : null;
     const { body: body2, snapshot, ledger } = assembleAgentContext({
       store,
       ...snapOpts,
       remote: remotePriors,
       ...elicit ? { edgeElicitation: { instruction: PRIOR_TAG_INSTRUCTION } } : {},
-      ...prebuilt ? { snapshot: prebuilt } : {},
+      snapshot: sharedSnapshot,
       ...pendingUpdate ? { pendingUpdate } : {},
       ...daemonDistress ? { daemonDistress } : {},
       ...reviewItems.length ? { reviewItems } : {},
-      ...liveIntent ? {
-        statedIntent: {
-          text: liveIntent,
-          hits: intentHits,
-          ...intentCollective && intentCollective.hits.length > 0 ? {
-            remoteHits: intentCollective.hits.slice(0, 4).map((n) => ({
-              id: n.id,
-              label: n.label,
-              description: n.description
-            }))
-          } : {},
-          ...intentCollective?.voidSignal ? { knownGap: intentCollective.voidSignal } : {}
-        }
-      } : {}
+      ...statedIntent ? { statedIntent } : {}
     });
     doneRender();
-    subagentBase = baseForSubagents ?? structuredClone(snapshot);
-    subagentBaseVersion++;
     try {
       const seq = store.currentIngestSeq();
       const stamped = recordRenderLedger(store, ledger, seq, Date.now());
@@ -82797,6 +82967,83 @@ function createWorkspaceEngine(opts) {
     subagents.stop(agentId);
     subagentRenders.delete(agentId);
   };
+  const noteSession = (e) => {
+    const now = Date.now();
+    if (!e.sessionId) return;
+    const origin = e.origin ? { origin: e.origin } : {};
+    if (e.agentId) {
+      const sub = `agent-${e.agentId}`;
+      if (e.ended) sessions.end(sub);
+      else sessions.touch(sub, now, { parent: e.sessionId, ...origin });
+      sessions.touch(e.sessionId, now, origin);
+      return;
+    }
+    if (e.ended) sessions.end(e.sessionId);
+    else sessions.touch(e.sessionId, now, origin);
+  };
+  const sessionContext = (sessionId) => {
+    if (!sessionId || !subagentBase) return null;
+    const now = Date.now();
+    const intent = intents.get(sessionId, now);
+    const workingFile = workingFiles.get(sessionId);
+    const skips = selfCiteSkipsBySession.get(sessionId) ?? 0;
+    const key = JSON.stringify([
+      subagentBaseVersion,
+      lastRemoteAt,
+      sessions.version(now),
+      intent,
+      workingFile,
+      intentRemote?.forIntent === intent ? intentRemote?.hits.length : -1,
+      skips
+    ]);
+    const cached2 = sessionRenders.get(sessionId);
+    if (cached2?.key === key) return cached2.block;
+    const elicit = isEdgeElicitationEnabled();
+    const atCommit = readGitRefState(join35(opts.workspaceRoot, ".git")).sha ?? void 0;
+    const scoped = scopeSnapshot(structuredClone(subagentBase), (n) => !hiddenFrom(n, sessionId, sessions, now));
+    delete scoped.workingFile;
+    if (workingFile) {
+      const slice = sliceForFile(store, workingFile, atCommit);
+      if (slice) scoped.workingFile = slice;
+    }
+    delete scoped.selfCiteSkips;
+    if (skips > 0) scoped.selfCiteSkips = skips;
+    const pendingUpdate = opts.pendingUpdate?.() ?? null;
+    const daemonDistress = opts.daemonDistress?.() ?? null;
+    const reviewItems = pickReviewItems();
+    const { body: body2, snapshot } = assembleAgentContext({
+      store,
+      profile,
+      ...atCommit ? { atCommit } : {},
+      reviewCount: pendingCount(paths),
+      reviewUiUrl: opts.reviewUrl(),
+      remote: remotePriors,
+      snapshot: scoped,
+      ...elicit ? { edgeElicitation: { instruction: PRIOR_TAG_INSTRUCTION } } : {},
+      ...pendingUpdate ? { pendingUpdate } : {},
+      ...daemonDistress ? { daemonDistress } : {},
+      ...reviewItems.length ? { reviewItems } : {},
+      ...intent ? { statedIntent: statedIntentFor(intent) } : {}
+    });
+    const block = {
+      body: body2,
+      hash: contextHash(body2),
+      card: contextCard(store, snapshot),
+      handleNodes: [
+        ...snapshot.recentProblems.map((r) => r.node),
+        ...snapshot.recentResolved.flatMap((r) => r.solution ? [r.node, r.solution] : [r.node]),
+        ...snapshot.motifs,
+        ...snapshot.remote ?? []
+      ]
+    };
+    if (elicit && block.handleNodes.length) {
+      writePrimingHandles(join35(paths.configDir, "priming-handles.json"), block.handleNodes);
+    }
+    sessionRenders.delete(sessionId);
+    sessionRenders.set(sessionId, { key, block });
+    if (sessionRenders.size > 200) sessionRenders.delete(sessionRenders.keys().next().value);
+    return block;
+  };
   const onHookEvent = (e) => {
     const intentHints = deriveIntentHints(e.tool, e.oldString, e.newString);
     const operation = /(?:edit|write|patch)/i.test(e.tool) ? "write" : /read/i.test(e.tool) ? "read" : null;
@@ -83116,7 +83363,7 @@ function createWorkspaceEngine(opts) {
             let anchorReadFailed = false;
             if (p.location) {
               try {
-                fileText = readFileSync31(join35(opts.workspaceRoot, p.location.path), "utf8");
+                fileText = readFileSync32(join35(opts.workspaceRoot, p.location.path), "utf8");
               } catch {
                 anchorReadFailed = true;
               }
@@ -83276,7 +83523,7 @@ function createWorkspaceEngine(opts) {
                     const headSha = readGitRefState(join35(opts.workspaceRoot, ".git")).sha ?? void 0;
                     enclosing = {
                       line: p.location.line,
-                      fileText: readFileSync31(join35(opts.workspaceRoot, anchorPath), "utf8"),
+                      fileText: readFileSync32(join35(opts.workspaceRoot, anchorPath), "utf8"),
                       ...headSha ? { headSha } : {}
                     };
                   } catch {
@@ -83537,6 +83784,12 @@ function createWorkspaceEngine(opts) {
         }
         const citingSession = sessionOriginKey(sessionId);
         const mintedHere = (nodeId) => store.getNode(nodeId)?.attrs["sources"]?.[0] === sessionId;
+        const synthetic = sessions.originOf(sessionId) !== void 0;
+        if (synthetic && plan.corroborations.length + plan.refutes.length > 0) {
+          console.log(
+            `[errata] witnesses: ${plan.corroborations.length + plan.refutes.length} withheld (session ${sessionId.slice(0, 8)} is ${sessions.originOf(sessionId)})`
+          );
+        }
         const sendWitnesses = async (channel, fresh, send) => {
           const isShipped = (nodeId) => {
             const n = store.getNode(nodeId);
@@ -83661,7 +83914,7 @@ function createWorkspaceEngine(opts) {
         if (typeof cloud.reportContradictions === "function") {
           await sendWitnesses(
             "contradict",
-            wireWitnessItems(plan.refutes),
+            synthetic ? [] : wireWitnessItems(plan.refutes),
             (items2, session) => cloud.reportContradictions({
               daemonVersion: DAEMON_VERSION,
               projectId: profile.id,
@@ -83671,12 +83924,13 @@ function createWorkspaceEngine(opts) {
           );
         }
         if (typeof cloud.reportCorroborations === "function") {
-          const emit = plan.corroborations.filter((c) => !mintedHere(c.nodeId));
+          const emit = synthetic ? [] : plan.corroborations.filter((c) => !mintedHere(c.nodeId));
           const skipped = plan.corroborations.length - emit.length;
           if (skipped > 0) {
             console.log(`[errata] corroborate: ${skipped} skipped (this session authored the node)`);
             appendWitnessLedger(paths.configDir, { ts: Date.now(), channel: "corroborate", clientSelfSkipped: skipped });
             lastSelfCiteSkips = skipped;
+            selfCiteSkipsBySession.set(sessionId, skipped);
             refreshContextNow();
           }
           await sendWitnesses(
@@ -83858,7 +84112,7 @@ function createWorkspaceEngine(opts) {
       }
       turns = next.turns;
       nextOffset = next.nextOffset;
-      await new Promise((resolve8) => setImmediate(resolve8));
+      await new Promise((resolve9) => setImmediate(resolve9));
     }
   };
   const seenMessageIds = /* @__PURE__ */ new Set();
@@ -84115,6 +84369,8 @@ B: ${b}`,
       onSubagentSpawn,
       subagentContext,
       onSubagentStop,
+      noteSession,
+      sessionContext,
       onHook: () => telemetry.count("hooks_fired"),
       onToolsObserved: (sessionId, toolNodeIds) => toolRuns.record(sessionId, toolNodeIds),
       onHookEvent,
@@ -84132,6 +84388,7 @@ B: ${b}`,
     lastActivityAt() {
       return lastActivityTs;
     },
+    quarantinedSessions: () => sessions.originSessions(),
     markContextDirty() {
       contextDirty = true;
       refreshContextNow();
@@ -84396,15 +84653,19 @@ B: ${b}`,
         console.log(
           "[errata] sync skipped \u2014 cloud sync consent is off (enable with `errata consent sync on`)"
         );
-        const pending = existsSync27(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
+        const pending = existsSync28(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
         return { uploaded: 0, failed: 0, remaining: pending };
       }
+      if (!shipsFromWorkspace(opts.workspaceRoot)) {
+        console.log("[errata] sync skipped \u2014 scratch workspace (under the OS temp dir); its captures stay local");
+        return { uploaded: 0, failed: 0, remaining: 0 };
+      }
       const onDisk = loadProfile(opts.workspaceRoot);
       if (!onDisk?.projectId && onDisk?.projectLinkHold) {
         console.log(
           "[errata] sync held \u2014 this repo is already on errata in another workspace; run `errata link` to join it or create your own project"
         );
-        const pending = existsSync27(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
+        const pending = existsSync28(paths.outbox) ? readdirSync10(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
         return { uploaded: 0, failed: 0, remaining: pending };
       }
       try {
@@ -84498,7 +84759,7 @@ async function startDaemon(opts) {
     reviewUrl: () => webUiUrl + "/review"
   });
   const writeLockFile = (url2) => {
-    writeFileSync23(
+    writeFileSync24(
       engine.paths.daemonLock,
       daemonLockPayload({ pid: process.pid, webUiUrl: url2, processStartedAt, version: DAEMON_VERSION }),
       "utf8"
@@ -84515,6 +84776,8 @@ async function startDaemon(opts) {
     onSubagentSpawn: engine.webHooks.onSubagentSpawn,
     subagentContext: engine.webHooks.subagentContext,
     onSubagentStop: engine.webHooks.onSubagentStop,
+    noteSession: engine.webHooks.noteSession,
+    sessionContext: engine.webHooks.sessionContext,
     onHook: engine.webHooks.onHook,
     onHookEvent: engine.webHooks.onHookEvent,
     onShellEvent: engine.webHooks.onShellEvent,
@@ -84544,7 +84807,7 @@ async function startDaemon(opts) {
       );
       await engine.stop();
       try {
-        if (existsSync28(engine.paths.daemonLock)) {
+        if (existsSync29(engine.paths.daemonLock)) {
         }
       } catch {
       }
@@ -84552,9 +84815,9 @@ async function startDaemon(opts) {
   };
 }
 async function listenServer(fetchFn, port) {
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const server = serve({ fetch: fetchFn, hostname: "127.0.0.1", port }, (info2) => {
-      resolve8({ server, port: info2.port });
+      resolve9({ server, port: info2.port });
     });
   });
 }
@@ -84745,7 +85008,7 @@ function instanceReceiptSequence(n) {
 // src/multi.ts
 init_dist();
 init_src5();
-import { existsSync as existsSync33, readFileSync as readFileSync35, unlinkSync as unlinkSync5, writeFileSync as writeFileSync25 } from "node:fs";
+import { existsSync as existsSync34, readFileSync as readFileSync36, unlinkSync as unlinkSync5, writeFileSync as writeFileSync26 } from "node:fs";
 import { resolve as pathResolve } from "node:path";
 
 // src/principle-sync.ts
@@ -84774,7 +85037,7 @@ init_reconcile();
 
 // src/lockfile-auto.ts
 init_src();
-import { existsSync as existsSync29, readFileSync as readFileSync32 } from "node:fs";
+import { existsSync as existsSync30, readFileSync as readFileSync33 } from "node:fs";
 import { join as join36 } from "node:path";
 
 // src/package-index.ts
@@ -84925,10 +85188,10 @@ function runLockfilePass(opts) {
   ];
   for (const c of candidates) {
     const p = join36(opts.root, c.file);
-    if (!existsSync29(p)) continue;
+    if (!existsSync30(p)) continue;
     let sbom;
     try {
-      sbom = c.parse(readFileSync32(p, "utf8"));
+      sbom = c.parse(readFileSync33(p, "utf8"));
     } catch {
       continue;
     }
@@ -84986,9 +85249,10 @@ function noveltyAgainst(node2, neighbors, opts = {}) {
 
 // src/instance-ingest.ts
 init_profile2();
+init_session_registry();
 
 // src/public-symbols.ts
-import { readFileSync as readFileSync33, readdirSync as readdirSync11, existsSync as existsSync30 } from "node:fs";
+import { readFileSync as readFileSync34, readdirSync as readdirSync11, existsSync as existsSync31 } from "node:fs";
 import { join as join37 } from "node:path";
 var HEAD_BYTES = 8 * 1024;
 var INDEX_TTL_MS = 10 * 60 * 1e3;
@@ -85023,9 +85287,9 @@ function internalPackageNames(workspaceRoot) {
   const names = /* @__PURE__ */ new Set();
   const tryRead = (dir) => {
     const pj = join37(dir, "package.json");
-    if (!existsSync30(pj)) return;
+    if (!existsSync31(pj)) return;
     try {
-      const name2 = JSON.parse(readFileSync33(pj, "utf8")).name;
+      const name2 = JSON.parse(readFileSync34(pj, "utf8")).name;
       if (typeof name2 === "string" && name2.length > 0) names.add(name2);
     } catch {
     }
@@ -85033,7 +85297,7 @@ function internalPackageNames(workspaceRoot) {
   tryRead(workspaceRoot);
   for (const group of ["packages", "apps"]) {
     const groupDir = join37(workspaceRoot, group);
-    if (!existsSync30(groupDir)) continue;
+    if (!existsSync31(groupDir)) continue;
     try {
       for (const entry of readdirSync11(groupDir)) tryRead(join37(groupDir, entry));
     } catch {
@@ -85054,7 +85318,7 @@ function publicSymbolIndex(store, workspaceRoot, deps = {}) {
   }
   const readHead = deps.readHead ?? ((absPath) => {
     try {
-      return readFileSync33(absPath, "utf8").slice(0, HEAD_BYTES);
+      return readFileSync34(absPath, "utf8").slice(0, HEAD_BYTES);
     } catch {
       return "";
     }
@@ -85211,6 +85475,7 @@ function shareableContext(n, wireId) {
 function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [], opts = {}) {
   const level = opts.level ?? 1;
   const noveltyOpts = opts.dedupCosine != null ? { dedupCosine: opts.dedupCosine } : {};
+  const quarantine = opts.quarantinedSessions?.length ? new Set(opts.quarantinedSessions) : null;
   const ignored = (text) => ignorePatterns.length > 0 && ignorePatterns.some((p) => text.toLowerCase().includes(p));
   const originSessionOf = (n) => {
     const key = sessionOriginKey(n.attrs["sources"]?.[0]);
@@ -85279,6 +85544,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     candidates: 0,
     shipped: 0,
     cloudSourced: 0,
+    quarantined: 0,
     falsePositive: 0,
     ignored: 0,
     watermarked: 0,
@@ -85329,6 +85595,10 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
         composition.cloudSourced++;
         continue;
       }
+      if (quarantine && capturedOnlyBy(n, quarantine)) {
+        composition.quarantined++;
+        continue;
+      }
       if (n.attrs["resolvedAs"] === PROBLEM_RESOLUTION.FALSE_POSITIVE) {
         composition.falsePositive++;
         continue;
@@ -85736,7 +86006,8 @@ function buildDrainInstances(store, sharedStore, input) {
     },
     ...lexicon ? { lexicon } : {},
     ...fileLexicon ? { fileLexicon } : {},
-    ...input.project ? { project: input.project } : {}
+    ...input.project ? { project: input.project } : {},
+    ...input.quarantinedSessions?.length ? { quarantinedSessions: input.quarantinedSessions } : {}
   });
   return {
     batch,
@@ -85748,6 +86019,7 @@ function buildDrainInstances(store, sharedStore, input) {
 // src/multi.ts
 init_webui();
 init_recall_card();
+init_session_registry();
 
 // src/consolidate-worker-client.ts
 import { Worker as Worker2 } from "node:worker_threads";
@@ -85767,8 +86039,8 @@ var ConsolidateWorker = class {
       const id = this.nextId++;
       try {
         await this.ready;
-        return await new Promise((resolve8, reject) => {
-          this.pending.set(id, { resolve: resolve8, reject });
+        return await new Promise((resolve9, reject) => {
+          this.pending.set(id, { resolve: resolve9, reject });
           this.worker.postMessage({ ...req, id });
         });
       } finally {
@@ -85797,12 +86069,12 @@ var ConsolidateWorker = class {
     });
     noteIsolateSpawned();
     this.worker = worker;
-    this.ready = new Promise((resolve8, reject) => {
+    this.ready = new Promise((resolve9, reject) => {
       const onReady = (m) => {
         if (m?.ready) {
           worker.off("message", onReady);
           worker.off("error", onErr);
-          resolve8();
+          resolve9();
         }
       };
       const onErr = (err2) => {
@@ -86007,17 +86279,17 @@ function startUpdatePoller(opts) {
   };
 }
 function runNpmInstall(channel) {
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const child = spawn2("npm", ["install", "-g", `${PACKAGE_NAME}@${channel}`], {
       stdio: "inherit",
       shell: true
     });
-    child.on("close", (code) => resolve8(code ?? 1));
-    child.on("error", () => resolve8(1));
+    child.on("close", (code) => resolve9(code ?? 1));
+    child.on("error", () => resolve9(1));
   });
 }
 async function runInstalledHookRefresh() {
-  const root = await new Promise((resolve8) => {
+  const root = await new Promise((resolve9) => {
     const child = spawn2("npm", ["root", "-g"], {
       shell: true,
       windowsHide: true,
@@ -86029,18 +86301,18 @@ async function runInstalledHookRefresh() {
       output += chunk;
       if (output.length > 32768) child.kill();
     });
-    child.on("error", () => resolve8(""));
-    child.on("close", (code) => resolve8(code === 0 ? output.trim() : ""));
+    child.on("error", () => resolve9(""));
+    child.on("close", (code) => resolve9(code === 0 ? output.trim() : ""));
   });
   if (!isAbsolute5(root)) return 1;
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const child = spawn2(process.execPath, [join38(root, PACKAGE_NAME, "errata.mjs"), "install-hooks", "codex", "--refresh-existing"], {
       windowsHide: true,
       stdio: "inherit",
       timeout: 3e4
     });
-    child.on("error", () => resolve8(1));
-    child.on("close", (code) => resolve8(code ?? 1));
+    child.on("error", () => resolve9(1));
+    child.on("close", (code) => resolve9(code ?? 1));
   });
 }
 
@@ -86055,7 +86327,7 @@ function liveCloudClient(src) {
   let current = null;
   let currentKey = "";
   let checkedAt = -Infinity;
-  const resolve8 = () => {
+  const resolve9 = () => {
     const t = now();
     if (current && t - checkedAt < recheckMs) return current;
     checkedAt = t;
@@ -86075,7 +86347,7 @@ function liveCloudClient(src) {
   };
   return new Proxy({}, {
     get(_target, prop) {
-      const client = resolve8();
+      const client = resolve9();
       const value = Reflect.get(client, prop, client);
       return typeof value === "function" ? value.bind(client) : value;
     }
@@ -86513,7 +86785,7 @@ async function syncHistoryRevision(opts) {
       changed += result.changed;
       remaining = result.remaining;
       if (!remaining || Date.now() - started2 >= (opts.budgetMs ?? 45e3)) break;
-      await new Promise((resolve8) => setImmediate(resolve8));
+      await new Promise((resolve9) => setImmediate(resolve9));
     }
     return { changed, remaining };
   })();
@@ -86616,7 +86888,7 @@ async function syncHistoryRevisionPage(opts) {
 init_src7();
 init_src();
 import { execFile as execFile5 } from "node:child_process";
-import { readFileSync as readFileSync34 } from "node:fs";
+import { readFileSync as readFileSync35 } from "node:fs";
 import { join as join39 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 
@@ -87017,8 +87289,8 @@ var GitBlobReader = class {
     if (this.failed) return Promise.reject(this.failed);
     if (/[\r\n]/.test(spec)) return Promise.resolve(null);
     const proc = this.start();
-    return new Promise((resolve8, reject) => {
-      this.queue.push({ resolve: resolve8, reject });
+    return new Promise((resolve9, reject) => {
+      this.queue.push({ resolve: resolve9, reject });
       proc.stdin.write(`${spec}
 `);
     });
@@ -87032,14 +87304,14 @@ var GitBlobReader = class {
     const proc = this.proc;
     this.proc = null;
     if (!proc || proc.exitCode !== null) return Promise.resolve();
-    return new Promise((resolve8) => {
+    return new Promise((resolve9) => {
       const timer = setTimeout(() => {
         proc.kill();
-        resolve8();
+        resolve9();
       }, timeoutMs);
       proc.once("exit", () => {
         clearTimeout(timer);
-        resolve8();
+        resolve9();
       });
       proc.stdin.end();
     });
@@ -87164,7 +87436,7 @@ async function defaultGit(root, args2) {
 function readIgnoreLines(root, profile) {
   let lines = [];
   try {
-    lines = readFileSync34(join39(root, ".errataignore"), "utf8").split("\n");
+    lines = readFileSync35(join39(root, ".errataignore"), "utf8").split("\n");
   } catch {
   }
   return [...lines, ...profile.ignoreExtra ?? []].map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
@@ -87629,7 +87901,7 @@ async function startHistoryStage(root, input, client, walk11 = {}) {
 init_cloud_auth();
 import { createHash as createHash19 } from "node:crypto";
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { existsSync as existsSync31, writeFileSync as writeFileSync24 } from "node:fs";
+import { existsSync as existsSync32, writeFileSync as writeFileSync25 } from "node:fs";
 import { join as join40 } from "node:path";
 
 // src/device-poll.ts
@@ -87719,7 +87991,7 @@ async function loginOAuthDevice(opts) {
   let deviceSession = null;
   let approvedInstallation = null;
   while (Date.now() < deadline) {
-    await (opts.sleep ?? ((ms) => new Promise((resolve8) => setTimeout(resolve8, ms))))(waitMs);
+    await (opts.sleep ?? ((ms) => new Promise((resolve9) => setTimeout(resolve9, ms))))(waitMs);
     waitMs = intervalMs;
     const poll = await fetchDevicePoll(fetchFn, device.token, {
       method: "POST",
@@ -87844,7 +88116,7 @@ async function loginOAuthLoopback(opts) {
   const state = randomState();
   const scope = opts.scope ?? DEFAULT_OAUTH_SCOPE;
   const { code, redirectUri, clientId } = await new Promise(
-    (resolve8, reject) => {
+    (resolve9, reject) => {
       const server = createServer((req, res) => {
         const u = new URL(req.url ?? "/", "http://127.0.0.1");
         if (u.pathname !== "/callback") {
@@ -87867,7 +88139,7 @@ async function loginOAuthLoopback(opts) {
         res.writeHead(200, { "content-type": "text/html" });
         res.end("<html><body>inErrata: you're logged in. You can close this tab.</body></html>");
         server.close();
-        resolve8({ code: code2, redirectUri: `http://127.0.0.1:${port}/callback`, clientId: activeClientId });
+        resolve9({ code: code2, redirectUri: `http://127.0.0.1:${port}/callback`, clientId: activeClientId });
       });
       let activeClientId = oauthClientId();
       server.on("error", reject);
@@ -87966,7 +88238,7 @@ async function linkThroughConsole(opts) {
   const deadline = Date.now() + Math.min(code.expires_in * 1e3, opts.timeoutMs ?? Number.POSITIVE_INFINITY);
   let intervalMs = Math.max(2, code.interval ?? 5) * 1e3;
   let waitMs = intervalMs;
-  const sleep = opts.sleep ?? ((ms) => new Promise((resolve8) => setTimeout(resolve8, ms)));
+  const sleep = opts.sleep ?? ((ms) => new Promise((resolve9) => setTimeout(resolve9, ms)));
   while (Date.now() < deadline) {
     await sleep(waitMs);
     waitMs = intervalMs;
@@ -88089,8 +88361,8 @@ function applyLinkDecision(root, profile, config2, decision, now = Date.now) {
   let wroteIgnore = false;
   if (decision.writeIgnoreStarter !== false) {
     const target = join40(root, ".errataignore");
-    if (!existsSync31(target)) {
-      writeFileSync24(target, IGNORE_STARTER, "utf8");
+    if (!existsSync32(target)) {
+      writeFileSync25(target, IGNORE_STARTER, "utf8");
       wroteIgnore = true;
     }
   }
@@ -88103,12 +88375,12 @@ init_registry();
 
 // src/adopt.ts
 init_git_remote();
-import { existsSync as existsSync32 } from "node:fs";
+import { existsSync as existsSync33 } from "node:fs";
 import { dirname as dirname12, join as join41 } from "node:path";
 function findGitRoot(absPath) {
   let dir = absPath;
   for (let depth = 0; depth < 64; depth++) {
-    if (existsSync32(join41(dir, ".git"))) return dir;
+    if (existsSync33(join41(dir, ".git"))) return dir;
     const parent = dirname12(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -88738,6 +89010,9 @@ async function startMultiDaemon(opts = {}) {
       onSubagentSpawn: engine.webHooks.onSubagentSpawn,
       subagentContext: engine.webHooks.subagentContext,
       onSubagentStop: engine.webHooks.onSubagentStop,
+      // CAP-session-scope: per-session blocks + harness/fixture quarantine.
+      noteSession: engine.webHooks.noteSession,
+      sessionContext: engine.webHooks.sessionContext,
       onHook: engine.webHooks.onHook,
       onHookEvent: engine.webHooks.onHookEvent,
       onShellEvent: engine.webHooks.onShellEvent,
@@ -88805,7 +89080,7 @@ async function startMultiDaemon(opts = {}) {
     records.push(rec);
     void ambientLinkAll();
     try {
-      writeFileSync25(
+      writeFileSync26(
         rec.engine.paths.daemonLock,
         daemonLockPayload({
           pid: process.pid,
@@ -89012,7 +89287,12 @@ async function startMultiDaemon(opts = {}) {
       return await owner.webApp.fetch(
         new Request(`http://local${sub}`, {
           method: "POST",
-          headers: { "content-type": "application/json" },
+          // The origin header (harness/fixture quarantine, session-registry.ts)
+          // is the one caller header the sub-app needs; nothing else crosses.
+          headers: {
+            "content-type": "application/json",
+            ...c.req.header(ORIGIN_HEADER) ? { [ORIGIN_HEADER]: c.req.header(ORIGIN_HEADER) } : {}
+          },
           body: raw2
         })
       );
@@ -89104,7 +89384,7 @@ async function startMultiDaemon(opts = {}) {
         lastActiveAt = Math.max(lastActiveAt, rec.engine.lastActivityAt());
       } catch {
       }
-      const reason = retireDecision({ exists: existsSync33(rec.root), lastActiveAt, now });
+      const reason = retireDecision({ exists: existsSync34(rec.root), lastActiveAt, now });
       if (reason) void retireWorkspace(rec, reason);
     }
   };
@@ -89175,7 +89455,7 @@ async function startMultiDaemon(opts = {}) {
   baseUrl = `http://127.0.0.1:${port}`;
   try {
     ensureDir(globalDir());
-    writeFileSync25(
+    writeFileSync26(
       lockPath,
       daemonLockPayload({ pid: process.pid, webUiUrl: baseUrl, processStartedAt: PROCESS_STARTED_AT, entry: SELF_ENTRY, version: DAEMON_VERSION }),
       "utf8"
@@ -89184,7 +89464,7 @@ async function startMultiDaemon(opts = {}) {
   }
   for (const r of records) {
     try {
-      writeFileSync25(
+      writeFileSync26(
         r.engine.paths.daemonLock,
         daemonLockPayload({
           pid: process.pid,
@@ -89418,7 +89698,7 @@ async function startMultiDaemon(opts = {}) {
   const packageAutoAll = async () => {
     const out2 = /* @__PURE__ */ new Map();
     for (const r of records) {
-      await new Promise((resolve8) => setImmediate(resolve8));
+      await new Promise((resolve9) => setImmediate(resolve9));
       const done = markPass(`package-index:${r.entry.name}`);
       try {
         out2.set(
@@ -89727,7 +90007,9 @@ async function startMultiDaemon(opts = {}) {
           done();
         }
       };
-      const buildInstanceBatch = async (r, input) => {
+      const buildInstanceBatch = async (r, laneInput) => {
+        const quarantinedSessions = r.engine.quarantinedSessions();
+        const input = quarantinedSessions.length ? { ...laneInput, quarantinedSessions } : laneInput;
         const w = workerFor(r);
         if (w) {
           try {
@@ -89762,6 +90044,7 @@ async function startMultiDaemon(opts = {}) {
       for (const r of records) {
         const recordConsent = effectiveConsent(cfg2, r.engine.profile);
         if (!recordConsent.sync) continue;
+        if (!shipsFromWorkspace(r.root)) continue;
         const recordIdentity = identityFor(liveWorkspaceEntry(r.entry));
         if (recordIdentity.invalid) {
           noteIdentityBlock(r.id, r.entry.name, recordIdentity);
@@ -90156,7 +90439,7 @@ async function startMultiDaemon(opts = {}) {
       clearInterval(anchorPull);
       clearTimeout(codexWakeBoot);
       try {
-        const cur = readFileSync35(lockPath, "utf8");
+        const cur = readFileSync36(lockPath, "utf8");
         if (JSON.parse(cur).pid === process.pid) unlinkSync5(lockPath);
       } catch {
       }
@@ -90717,23 +91000,25 @@ async function diagnoseInstallation(cfg, dependencies) {
 
 // src/codex-doctor.ts
 import { spawn as spawn4 } from "node:child_process";
-import { readFileSync as readFileSync37, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync38, statSync as statSync10 } from "node:fs";
 import { join as join44 } from "node:path";
 import { createInterface } from "node:readline";
 
 // src/codex-hooks.ts
-import { existsSync as existsSync34, mkdirSync as mkdirSync9, readFileSync as readFileSync36, renameSync as renameSync5, unlinkSync as unlinkSync6, writeFileSync as writeFileSync26 } from "node:fs";
+import { existsSync as existsSync35, mkdirSync as mkdirSync9, readFileSync as readFileSync37, renameSync as renameSync5, unlinkSync as unlinkSync6, writeFileSync as writeFileSync27 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
 import { join as join43 } from "node:path";
 
 // src/hook-commands.ts
 function hookCurlCommand(port, path2 = "/api/hook") {
   const url2 = `http://127.0.0.1:${port}${path2}`;
-  return process.platform === "win32" ? `cmd //c "curl -s --connect-timeout 1 --max-time 3 -X POST -H \\"Content-Type: application/json\\" --data-binary @- ${url2} >NUL 2>NUL || exit /b 0"` : `curl -s --connect-timeout 1 --max-time 3 -X POST -H 'Content-Type: application/json' --data-binary @- ${url2} >/dev/null 2>&1 || true`;
+  return process.platform === "win32" ? `cmd //c "curl -s --connect-timeout 1 --max-time 3 -X POST ${HEADERS_WIN} --data-binary @- ${url2} >NUL 2>NUL || exit /b 0"` : `curl -s --connect-timeout 1 --max-time 3 -X POST -H 'Content-Type: application/json' ${ORIGIN_HEADER_POSIX} --data-binary @- ${url2} >/dev/null 2>&1 || true`;
 }
+var HEADERS_WIN = `-H Content-Type:application/json -H x-errata-origin:%ERRATA_ORIGIN%`;
+var ORIGIN_HEADER_POSIX = `-H "x-errata-origin: \${ERRATA_ORIGIN:-}"`;
 function hookRelayCommand(port, path2) {
   const url2 = `http://127.0.0.1:${port}${path2}`;
-  return process.platform === "win32" ? `cmd //c "curl -s --connect-timeout 1 --max-time 2 -X POST -H \\"Content-Type: application/json\\" --data-binary @- ${url2} 2>NUL || echo {}"` : `curl -s --connect-timeout 1 --max-time 2 -X POST -H 'Content-Type: application/json' --data-binary @- ${url2} 2>/dev/null || echo '{}'`;
+  return process.platform === "win32" ? `cmd //c "curl -s --connect-timeout 1 --max-time 2 -X POST ${HEADERS_WIN} --data-binary @- ${url2} 2>NUL || echo {}"` : `curl -s --connect-timeout 1 --max-time 2 -X POST -H 'Content-Type: application/json' ${ORIGIN_HEADER_POSIX} --data-binary @- ${url2} 2>/dev/null || echo '{}'`;
 }
 var CODEX_HOOKS_BEGIN = `# >>> errata hooks (errata-managed)`;
 var CODEX_HOOKS_END = `# <<< errata hooks`;
@@ -90870,23 +91155,23 @@ function buildCodexRelaySource(workspaceRoot) {
 init_checkout_root();
 var CODEX_HOOK_REVIEW_HELP = "Codex desktop: Settings > Hooks, select this project, expand each event and Trust the Errata hook. CLI users can use /hooks.";
 function writeRelay(file2, source) {
-  if (existsSync34(file2) && readFileSync36(file2, "utf8") === source) return;
+  if (existsSync35(file2) && readFileSync37(file2, "utf8") === source) return;
   const temp = `${file2}.${process.pid}.tmp`;
   try {
-    writeFileSync26(temp, source, { encoding: "utf8", mode: 384 });
+    writeFileSync27(temp, source, { encoding: "utf8", mode: 384 });
     renameSync5(temp, file2);
   } finally {
-    if (existsSync34(temp)) unlinkSync6(temp);
+    if (existsSync35(temp)) unlinkSync6(temp);
   }
 }
 function refreshCodexRelay(root) {
   const config2 = join43(root, ".codex", "config.toml");
-  if (!existsSync34(config2)) return "absent";
-  const existing = readFileSync36(config2, "utf8");
+  if (!existsSync35(config2)) return "absent";
+  const existing = readFileSync37(config2, "utf8");
   if (!existing.includes(CODEX_HOOKS_BEGIN) && !existing.includes(CODEX_HOOKS_END)) return "absent";
   replaceCodexHooks(existing, "");
   const relay = join43(root, ".codex", "hooks", "errata-relay.mjs");
-  const prior = existsSync34(relay) ? readFileSync36(relay, "utf8") : "";
+  const prior = existsSync35(relay) ? readFileSync37(relay, "utf8") : "";
   if (prior && !prior.startsWith("// errata-managed: regenerated by errata install-hooks codex")) {
     throw new Error("Codex relay is not Errata-managed; preserved it. Run errata install-hooks codex to explicitly replace it.");
   }
@@ -90897,7 +91182,7 @@ function refreshCodexRelay(root) {
   return "updated";
 }
 function hasCodexConfig(root, codexHome = process.env["CODEX_HOME"] || join43(homedir7(), ".codex")) {
-  return existsSync34(join43(root, ".codex")) || existsSync34(codexHome);
+  return existsSync35(join43(root, ".codex")) || existsSync35(codexHome);
 }
 function replaceCodexHooks(existing, block) {
   const begin = existing.indexOf(CODEX_HOOKS_BEGIN);
@@ -90917,10 +91202,10 @@ function writeCodexHooks(root, port, nodePath = process.execPath) {
   const file2 = join43(dir, "config.toml");
   const relay = join43(dir, "hooks", "errata-relay.mjs");
   const block = buildCodexHooksToml(port, { nodePath, relayPath: relay });
-  const final = replaceCodexHooks(existsSync34(file2) ? readFileSync36(file2, "utf8") : "", block);
+  const final = replaceCodexHooks(existsSync35(file2) ? readFileSync37(file2, "utf8") : "", block);
   mkdirSync9(join43(dir, "hooks"), { recursive: true });
   writeRelay(relay, buildCodexRelaySource(checkoutRootOf(root)));
-  if (!existsSync34(file2) || readFileSync36(file2, "utf8") !== final) writeFileSync26(file2, final, "utf8");
+  if (!existsSync35(file2) || readFileSync37(file2, "utf8") !== final) writeFileSync27(file2, final, "utf8");
   return file2;
 }
 
@@ -90929,7 +91214,7 @@ init_checkout_root();
 function inspectCodexRelay(cwd) {
   const root = nearestGitRoot(cwd) ?? cwd;
   try {
-    const source = readFileSync37(join44(root, ".codex", "hooks", "errata-relay.mjs"), "utf8");
+    const source = readFileSync38(join44(root, ".codex", "hooks", "errata-relay.mjs"), "utf8");
     if (source === buildCodexRelaySource(checkoutRootOf(root))) {
       return { id: "codex_relay", status: "pass", detail: "Installed Codex relay matches this Errata version" };
     }
@@ -90941,7 +91226,7 @@ function inspectCodexContext(cwd) {
   const root = checkoutRootOf(nearestGitRoot(cwd) ?? cwd);
   try {
     const file2 = join44(root, ".errata", "context.md");
-    if (statSync10(file2).size <= 128 * 1024 && readFileSync37(file2, "utf8").trim()) {
+    if (statSync10(file2).size <= 128 * 1024 && readFileSync38(file2, "utf8").trim()) {
       return { id: "codex_context", status: "pass", detail: "Saved workspace context is readable by the relay; this does not prove live daemon freshness" };
     }
   } catch {
@@ -90949,7 +91234,7 @@ function inspectCodexContext(cwd) {
   return { id: "codex_context", status: "fail", detail: "No usable saved workspace context; run errata start here and check the daemon log if context.md remains unavailable" };
 }
 function readCodexHookState(cwd, options = {}) {
-  return new Promise((resolve8, reject) => {
+  return new Promise((resolve9, reject) => {
     const child = spawn4(options.bin ?? resolveCodexExecutable(), options.args ?? ["app-server", "--stdio"], {
       cwd,
       windowsHide: true,
@@ -90970,7 +91255,7 @@ function readCodexHookState(cwd, options = {}) {
       child.once("close", () => {
         clearTimeout(reap);
         if (error48) reject(error48);
-        else resolve8({ ...hooks, features });
+        else resolve9({ ...hooks, features });
       });
       child.kill();
     };
@@ -91117,16 +91402,16 @@ function consolidationGapMs(lastPassMs, policy) {
 
 // src/codex-hook-refresh.ts
 init_checkout_root();
-import { existsSync as existsSync35, readdirSync as readdirSync13, readFileSync as readFileSync38 } from "node:fs";
-import { dirname as dirname13, join as join45, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync36, readdirSync as readdirSync13, readFileSync as readFileSync39 } from "node:fs";
+import { dirname as dirname13, join as join45, resolve as resolve8 } from "node:path";
 init_registry();
 function codexHookRoots(roots) {
-  const found = new Set(roots.map((root) => resolve7(root)));
+  const found = new Set(roots.map((root) => resolve8(root)));
   for (const root of [...found]) {
     const main2 = mainCheckoutOfWorktree(root) ?? root;
     found.add(main2);
     const dir = join45(main2, ".git", "worktrees");
-    if (!existsSync35(dir)) continue;
+    if (!existsSync36(dir)) continue;
     let names;
     try {
       names = readdirSync13(dir);
@@ -91135,7 +91420,7 @@ function codexHookRoots(roots) {
     }
     for (const name2 of names) {
       try {
-        const checkout = dirname13(readFileSync38(join45(dir, name2, "gitdir"), "utf8").trim());
+        const checkout = dirname13(readFileSync39(join45(dir, name2, "gitdir"), "utf8").trim());
         if (mainCheckoutOfWorktree(checkout) === main2) found.add(checkout);
       } catch {
       }
@@ -91157,7 +91442,7 @@ function refreshInstalledCodexRelays(roots = listWorkspaceEntries().map((entry)
 }
 
 // src/claude-statusline.ts
-import { existsSync as existsSync36, mkdirSync as mkdirSync10, readFileSync as readFileSync39, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync10, readFileSync as readFileSync40, writeFileSync as writeFileSync28 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname14, join as join46 } from "node:path";
 var STATUSLINE_RELAY_SOURCE = String.raw`// errata-managed: regenerated by errata init / install-hooks claude
@@ -91212,9 +91497,9 @@ function ensureUserStatusLine(opts) {
   if (off === "0" || off === "off" || off === "false" || off === "no") return "disabled";
   const settingsPath = opts.userSettingsPath ?? userClaudeSettingsPath();
   let settings = {};
-  if (existsSync36(settingsPath)) {
+  if (existsSync37(settingsPath)) {
     try {
-      const parsed = JSON.parse(readFileSync39(settingsPath, "utf8"));
+      const parsed = JSON.parse(readFileSync40(settingsPath, "utf8"));
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return "unreadable";
       settings = parsed;
     } catch {
@@ -91226,8 +91511,8 @@ function ensureUserStatusLine(opts) {
   if (ownMain && ownRows) return "kept-own";
   const relay = join46(opts.relayDir, STATUSLINE_RELAY_FILE);
   mkdirSync10(opts.relayDir, { recursive: true });
-  if (!existsSync36(relay) || readFileSync39(relay, "utf8") !== STATUSLINE_RELAY_SOURCE) {
-    writeFileSync27(relay, STATUSLINE_RELAY_SOURCE, "utf8");
+  if (!existsSync37(relay) || readFileSync40(relay, "utf8") !== STATUSLINE_RELAY_SOURCE) {
+    writeFileSync28(relay, STATUSLINE_RELAY_SOURCE, "utf8");
   }
   const nodePath = opts.nodePath ?? process.execPath;
   const next = {
@@ -91239,7 +91524,7 @@ function ensureUserStatusLine(opts) {
   }
   Object.assign(settings, next);
   mkdirSync10(dirname14(settingsPath), { recursive: true });
-  writeFileSync27(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  writeFileSync28(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
   return "installed";
 }
 function describeStatusLineOutcome(outcome) {
@@ -91662,14 +91947,14 @@ async function cmdInit() {
   if (!skipHooks) {
     console.log("");
     console.log("installing harness hooks...");
-    const { existsSync: existsSync38 } = await import("node:fs");
+    const { existsSync: existsSync39 } = await import("node:fs");
     const { join: join48 } = await import("node:path");
     try {
       await installClaudeHooks(port);
     } catch (err2) {
       console.warn(`  \u26A0\uFE0F  Claude hook install failed: ${err2 instanceof Error ? err2.message : err2}`);
     }
-    if (existsSync38(join48(ROOT, ".cursor"))) {
+    if (existsSync39(join48(ROOT, ".cursor"))) {
       try {
         await installCursorMcpConfig();
       } catch (err2) {
@@ -91863,9 +92148,9 @@ async function cmdStatus() {
     console.log(`    stack:     ${profile.stack.join(", ") || "(none)"}`);
     console.log(`    languages: ${profile.languages.join(", ") || "(none)"}`);
   }
-  console.log(`  graph db:  ${existsSync37(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
-  console.log(`  event log: ${existsSync37(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
-  if (existsSync37(paths.castalia)) {
+  console.log(`  graph db:  ${existsSync38(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
+  console.log(`  event log: ${existsSync38(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
+  if (existsSync38(paths.castalia)) {
     try {
       const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src5(), src_exports2));
       const store = openGraphStore2({ path: paths.castalia });
@@ -92836,11 +93121,11 @@ async function cmdInstallationProfile(args2) {
 }
 async function cmdReview() {
   const paths = workspacePaths(ROOT);
-  if (!existsSync37(paths.reviewQueue)) {
+  if (!existsSync38(paths.reviewQueue)) {
     console.log("(review queue empty)");
     return;
   }
-  const queue = JSON.parse(readFileSync40(paths.reviewQueue, "utf8"));
+  const queue = JSON.parse(readFileSync41(paths.reviewQueue, "utf8"));
   if (queue.length === 0) {
     console.log("(review queue empty)");
     return;
@@ -93511,7 +93796,7 @@ async function gatherRepo(store, ws) {
   };
 }
 async function gatherReportData(generatedAt) {
-  const { existsSync: existsSync38 } = await import("node:fs");
+  const { existsSync: existsSync39 } = await import("node:fs");
   const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src5(), src_exports2));
   const cfg = loadConfig();
   const outbound = cfg.consent.sync ? "auto" : "off";
@@ -93519,7 +93804,7 @@ async function gatherReportData(generatedAt) {
   for (const ws of listWorkspaces()) {
     if (ws.missing) continue;
     const dbPath = workspacePaths(ws.path).castalia;
-    if (!existsSync38(dbPath)) continue;
+    if (!existsSync39(dbPath)) continue;
     let store = null;
     try {
       store = openGraphStore2({ path: dbPath });
@@ -93550,7 +93835,7 @@ async function gatherReportData(generatedAt) {
   };
 }
 async function cmdReport(args2) {
-  const { mkdirSync: mkdirSync11, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, writeFileSync: writeFileSync29 } = await import("node:fs");
   const { renderReport: renderReport2 } = await Promise.resolve().then(() => (init_report_render(), report_render_exports));
   const includeFutureVerbs = args2.includes("--future-verbs");
   const now = /* @__PURE__ */ new Date();
@@ -93563,7 +93848,7 @@ async function cmdReport(args2) {
   const outDir = workspacePaths(ROOT).configDir;
   mkdirSync11(outDir, { recursive: true });
   const files = renderReport2(data, { includeFutureVerbs });
-  for (const f of files) writeFileSync28(join47(outDir, f.name), f.html, "utf8");
+  for (const f of files) writeFileSync29(join47(outDir, f.name), f.html, "utf8");
   const indexPath = join47(outDir, "report.html");
   console.log(`report \u2192 ${indexPath}`);
   console.log(
@@ -93677,24 +93962,24 @@ async function cmdInstallHooks(args2) {
   }
 }
 async function installOpencodePlugin(port) {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync39, readFileSync: readFileSync42, writeFileSync: writeFileSync29 } = await import("node:fs");
   const { join: join48 } = await import("node:path");
   const dir = join48(ROOT, ".opencode", "plugin");
-  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
+  if (!existsSync39(dir)) mkdirSync11(dir, { recursive: true });
   const file2 = join48(dir, "inerrata.js");
-  if (existsSync38(file2)) {
-    const head2 = readFileSync41(file2, "utf8").split("\n")[0] ?? "";
+  if (existsSync39(file2)) {
+    const head2 = readFileSync42(file2, "utf8").split("\n")[0] ?? "";
     if (head2.trim() !== OPENCODE_PLUGIN_MARKER) {
       console.error(`refusing to overwrite ${file2}: not an errata-managed plugin (line 1 lacks the marker)`);
       process.exit(2);
     }
   }
-  writeFileSync28(file2, buildOpencodePluginSource(port, { version: DAEMON_VERSION }), "utf8");
+  writeFileSync29(file2, buildOpencodePluginSource(port, { version: DAEMON_VERSION }), "utf8");
   const cfgFile = join48(ROOT, "opencode.json");
   let cfg = { $schema: "https://opencode.ai/config.json" };
-  if (existsSync38(cfgFile)) {
+  if (existsSync39(cfgFile)) {
     try {
-      cfg = JSON.parse(readFileSync41(cfgFile, "utf8"));
+      cfg = JSON.parse(readFileSync42(cfgFile, "utf8"));
     } catch {
       console.error(`refusing to touch invalid JSON at ${cfgFile} \u2014 fix it and re-run`);
       process.exit(2);
@@ -93705,7 +93990,7 @@ async function installOpencodePlugin(port) {
   if (!hadErrata) {
     const inv = errataMcpInvocation();
     cfg.mcp["errata"] = { type: "local", command: [inv.command, ...inv.args] };
-    writeFileSync28(cfgFile, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+    writeFileSync29(cfgFile, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   }
   console.log(`installed OpenCode plugin \u2192 ${file2}`);
   if (hadErrata) console.log(`  mcp.errata already present in ${cfgFile} \u2014 left untouched`);
@@ -93732,15 +94017,15 @@ function ensureStatusLine(port) {
   }
 }
 async function installClaudeHooks(port) {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync39, readFileSync: readFileSync42, writeFileSync: writeFileSync29 } = await import("node:fs");
   const { join: join48 } = await import("node:path");
   const dir = join48(ROOT, ".claude");
-  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
+  if (!existsSync39(dir)) mkdirSync11(dir, { recursive: true });
   const file2 = join48(dir, "settings.json");
   let settings = {};
-  if (existsSync38(file2)) {
+  if (existsSync39(file2)) {
     try {
-      settings = JSON.parse(readFileSync41(file2, "utf8"));
+      settings = JSON.parse(readFileSync42(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -93789,7 +94074,7 @@ async function installClaudeHooks(port) {
     list.push({ hooks: [{ type: "command", command: injectCmd }] });
   }
   removeProjectStatusLine(settings);
-  writeFileSync28(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  writeFileSync29(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code hooks \u2192 ${file2}`);
   console.log(`  ${ensureStatusLine(port)}`);
   await installClaudeMcpConfig();
@@ -93805,15 +94090,15 @@ async function installClaudeHooks(port) {
   console.log(`  endpoint: http://127.0.0.1:${port}/api/hook`);
 }
 async function installClaudeMcpConfig() {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync39, readFileSync: readFileSync42, writeFileSync: writeFileSync29 } = await import("node:fs");
   const { join: join48, dirname: dirname15 } = await import("node:path");
   const file2 = join48(ROOT, ".mcp.json");
   const dir = dirname15(file2);
-  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
+  if (!existsSync39(dir)) mkdirSync11(dir, { recursive: true });
   let cfg = {};
-  if (existsSync38(file2)) {
+  if (existsSync39(file2)) {
     try {
-      cfg = JSON.parse(readFileSync41(file2, "utf8"));
+      cfg = JSON.parse(readFileSync42(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -93821,21 +94106,21 @@ async function installClaudeMcpConfig() {
   }
   cfg.mcpServers ??= {};
   cfg.mcpServers["errata"] = errataMcpInvocation();
-  writeFileSync28(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+  writeFileSync29(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code MCP server config \u2192 ${file2}`);
   console.log(`  Claude Code will spawn \`errata mcp\` on workspace open.`);
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses / show / similar`);
 }
 async function installCursorMcpConfig() {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync38, readFileSync: readFileSync41, writeFileSync: writeFileSync28 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync39, readFileSync: readFileSync42, writeFileSync: writeFileSync29 } = await import("node:fs");
   const { join: join48 } = await import("node:path");
   const dir = join48(ROOT, ".cursor");
-  if (!existsSync38(dir)) mkdirSync11(dir, { recursive: true });
+  if (!existsSync39(dir)) mkdirSync11(dir, { recursive: true });
   const file2 = join48(dir, "mcp.json");
   let cfg = {};
-  if (existsSync38(file2)) {
+  if (existsSync39(file2)) {
     try {
-      cfg = JSON.parse(readFileSync41(file2, "utf8"));
+      cfg = JSON.parse(readFileSync42(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -93843,7 +94128,7 @@ async function installCursorMcpConfig() {
   }
   cfg.mcpServers ??= {};
   cfg.mcpServers["errata"] = errataMcpInvocation();
-  writeFileSync28(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+  writeFileSync29(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   console.log(`installed Cursor MCP server config \u2192 ${file2}`);
   console.log(`  Cursor will spawn \`errata mcp\` on workspace open.`);
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses`);
@@ -94196,7 +94481,7 @@ async function cmdDash(args2) {
   const hotspotScanMark = /* @__PURE__ */ new Map();
   const HOTSPOT_FANIN = 20;
   const runNightlyPass = async (dueIds) => {
-    const yieldToLoop2 = () => new Promise((resolve8) => setImmediate(resolve8));
+    const yieldToLoop2 = () => new Promise((resolve9) => setImmediate(resolve9));
     const fullReclusterPass = nightlyCount++ % FULL_RECLUSTER_EVERY === 0;
     const m = dueIds ? await handle2.nightlyFor(dueIds) : await handle2.nightlyAll();
     let skillsLearned = 0;