@jmanuelcorral/openteam 0.24.0 → 0.25.0

package/dist/cli.js

@@ -424,6 +424,9 @@ function migrateConfig(raw) {
 var consoleDetailMessages = {
   follow: "Follow new activity",
   metadataOnly: "Lifecycle and telemetry stay metadata-only.",
+  logsDescription: "Current recorded conversations load automatically. Lifecycle and telemetry remain metadata-only; credentials are masked.",
+  credentialMasked: "[credential masked]",
+  offscreen: "Messages load automatically when this conversation is visible.",
   filter: "Filter sessions",
   incoming: "New activity available — show updates",
   refreshError: "Live updates unavailable; retrying.",
@@ -444,7 +447,7 @@ var consoleDetailMessages = {
   partialMetadata: "Some current session titles are unavailable or outside the bounded batch; fallback labels remain.",
   rootCurrent: "Current whole orchestrator session; may contain multiple batches. Not a historical or batch-only transcript.",
   recovered: "Read-only association verified from current opencode history; not an immutable lifecycle event.",
-  rootUnlinked: "Orchestrator session not recorded. Reveal to try a bounded, read-only relationship search.",
+  rootUnlinked: "Orchestrator session not recorded. A bounded, read-only relationship search is attempted when visible.",
   rootUnavailable: "Orchestrator session unavailable: no unique, verifiable relationship was found in local history.",
   rootAmbiguous: "Orchestrator session unavailable: conflicting or copied relationships are ambiguous.",
   searchIncomplete: "Orchestrator association search incomplete or exceeded its bounded budget. No session was guessed.",
@@ -457,9 +460,9 @@ var consoleDetailMessages = {
   arguments: "Arguments",
   result: "Result",
   loading: "Loading local conversation…",
-  current: "Present-day session, not a timeline reconstruction. May include later messages and tools. Refresh explicitly for updates.",
-  historical: "Historical cursor: conversation content is hidden to avoid showing future mutable text. Return to live before revealing this operation.",
-  disabled: "Content is disabled. Set console.sessionHistory.contentEnabled to true in .opencode/openteam.json and restart the Console. Then reveal content here.",
+  current: "Present-day whole session, not a timeline reconstruction or per-attempt transcript. Visible messages update automatically while live.",
+  historical: "Historical cursor: conversation content is hidden to avoid showing future mutable text. Return to live to read current messages.",
+  disabled: "Content is disabled by console.sessionHistory.contentEnabled: false. Lifecycle and telemetry remain metadata-only.",
   unavailable: "Conversation unavailable. Start an operator-owned local opencode serve against the same workspace and user history, configure console.sessionHistory.endpoint, then retry. No inference was requested.",
   empty: "No readable user messages, assistant output or tool calls remain in this session.",
   invalid: "This attempt has no recorded session in the selected run, or its history is incomplete.",
@@ -469,7 +472,7 @@ var consoleDetailMessages = {
   invalidEndpoint: "Expected a loopback HTTP origin without credentials, path, query or fragment.",
   readFailed: "Local session history could not be read.",
   oversized: "Conversation exceeds the local size limit (4 MiB). No content was loaded.",
-  truncated: "Conversation display is truncated by local safety limits; omitted content is not empty history.",
+  truncated: "Conversation display is truncated by local safety limits. The newest bounded message window is shown; older messages or oversized fields may be omitted, not empty history.",
   truncatedMarker: `
 [truncated]`,
   terminalGap: "Live collection was interrupted; events during the gap are unavailable. This is not complete session history.",
@@ -546,7 +549,7 @@ var ConsoleConfigSchema = z2.object({
   openBrowser: z2.boolean().default(false),
   remoteStorage: z2.boolean().default(false),
   sessionHistory: z2.object({
-    contentEnabled: z2.boolean().default(false),
+    contentEnabled: z2.boolean().default(true),
     endpoint: z2.string().refine(isLocalHistoryEndpoint, consoleDetailMessages.invalidEndpoint).optional()
   }).strict().optional(),
   terminal: z2.object({
@@ -891,6 +894,27 @@ import { isAbsolute, normalize, parse, resolve, sep } from "node:path";
 import { createOpencodeClient } from "@opencode-ai/sdk";
 import { z as z4 } from "zod";
 
+// src/console/credentials.ts
+var URL_WITH_AUTHORITY = /https?:\/\/[^\s/?#]+/giu;
+function maskUrlCredentials(value) {
+  return value.replace(URL_WITH_AUTHORITY, (candidate) => {
+    const schemeEnd = candidate.indexOf("://") + 3;
+    const at = candidate.indexOf("@", schemeEnd);
+    if (at === -1)
+      return candidate;
+    const colon = candidate.indexOf(":", schemeEnd);
+    if (colon === -1 || colon <= schemeEnd || colon + 1 >= at || colon > at)
+      return candidate;
+    return `${candidate.slice(0, schemeEnd)}${consoleDetailMessages.credentialMasked}${candidate.slice(at)}`;
+  });
+}
+function maskConversationCredentials(value) {
+  return maskUrlCredentials(value.replace(/-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----[\s\S]*?(?:-----END (?:[A-Z]+ )?PRIVATE KEY-----|$)/gu, consoleDetailMessages.credentialMasked).replace(/\b(?:Bearer|Basic)\s+[A-Za-z0-9._~+/=-]+/giu, consoleDetailMessages.credentialMasked).replace(/\b(?:sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{16,}|github_pat_[A-Za-z0-9_]{16,}|AKIA[A-Z0-9]{16}|eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)\b/gu, consoleDetailMessages.credentialMasked).replace(/(\b(?:password|passwd|secret|api[_-]?key|access[_-]?token|refresh[_-]?token|token|authorization|cookie|set-cookie)\b["']?\s*[:=]\s*)(?:"[^"]*"|'[^']*'|[^\s,;}\]]+)/giu, (_match, prefix) => prefix + consoleDetailMessages.credentialMasked));
+}
+function isCredentialKey(key) {
+  return /^(?:password|passwd|secret|api[_-]?key|access[_-]?token|refresh[_-]?token|token|authorization|cookie|set-cookie|private[_-]?key)$/iu.test(key);
+}
+
 // src/console/historyBoundary.ts
 function only(keys) {
   return (value) => {
@@ -1148,7 +1172,7 @@ class ConversationTooLargeError extends Error {
   }
 }
 var Info = z4.preprocess(only(["id", "sessionID", "role", "time"]), z4.object({
-  id: z4.string(),
+  id: z4.string().min(1).max(256),
   sessionID: z4.string(),
   role: z4.enum(["user", "assistant"]),
   time: z4.preprocess(only(["created", "completed"]), z4.object({
@@ -1168,7 +1192,7 @@ var Text = PartIdentity.extend({
 });
 var Tool = PartIdentity.extend({
   type: z4.literal("tool"),
-  callID: z4.string(),
+  callID: z4.string().min(1).max(256),
   tool: z4.string(),
   state: z4.preprocess(only(["status", "input", "output", "error", "time"]), z4.object({
     status: z4.enum(["pending", "running", "completed", "error"]),
@@ -1191,6 +1215,7 @@ function projectConversation(raw, sessionID) {
   let remaining = limits.totalChars;
   let toolsRemaining = limits.tools;
   function text(value) {
+    value = maskConversationCredentials(value);
     const length = Math.min(value.length, limits.fieldChars, remaining);
     remaining -= length;
     if (length === value.length)
@@ -1222,7 +1247,7 @@ function projectConversation(raw, sessionID) {
           truncated = true;
           break;
         }
-        const child = bounded(value[key], depth + 1);
+        const child = isCredentialKey(key) ? consoleDetailMessages.credentialMasked : bounded(value[key], depth + 1);
         if (Array.isArray(value))
           array.push(child);
         else
@@ -1233,7 +1258,7 @@ function projectConversation(raw, sessionID) {
     return text(JSON.stringify(bounded(input, 0), null, 2));
   }
   const messages = [];
-  for (const rawRow of raw.slice(0, limits.messages)) {
+  for (const rawRow of raw.slice(-limits.messages).reverse()) {
     if (remaining <= 0) {
       truncated = true;
       break;
@@ -1242,12 +1267,13 @@ function projectConversation(raw, sessionID) {
     if (row.info.sessionID !== sessionID)
       throw new Error(consoleDetailMessages.readFailed);
     const message = {
-      id: text(row.info.id),
+      id: row.info.id,
       role: row.info.role,
       createdAt: row.info.time.created,
       ...row.info.time.completed !== undefined ? { completedAt: row.info.time.completed } : {},
       text: [],
-      tools: []
+      tools: [],
+      order: []
     };
     if (row.parts.length > limits.parts)
       truncated = true;
@@ -1271,16 +1297,19 @@ function projectConversation(raw, sessionID) {
       if (part.sessionID !== sessionID || part.messageID !== row.info.id)
         throw new Error(consoleDetailMessages.readFailed);
       if (part.type === "text") {
-        if (!part.ignored)
+        if (!part.ignored) {
+          message.order?.push({ type: "text", index: message.text.length });
           message.text.push(text(part.text));
+        }
       } else {
         if (toolsRemaining-- <= 0) {
           truncated = true;
           continue;
         }
         const state = part.state;
+        message.order?.push({ type: "tool", index: message.tools.length });
         message.tools.push({
-          id: text(part.callID),
+          id: part.callID,
           name: text(part.tool),
           status: state.status,
           arguments: argumentsText(state.input),
@@ -1385,7 +1414,7 @@ function createConversationReader(deps) {
         if (workspaceKey(session.directory) !== workspaceKey(directory))
           throw new Error(consoleDetailMessages.readFailed);
         const time = z4.preprocess(only(["created"]), z4.object({ created: z4.number().finite().min(0).max(8640000000000000) }).strict()).safeParse(session.time);
-        const title = boundedTitle(session.title);
+        const title = boundedTitle(typeof session.title === "string" ? maskConversationCredentials(session.title) : session.title);
         return {
           id: session.id,
           directory: session.directory,
@@ -1435,10 +1464,13 @@ function createConversationReader(deps) {
             labels.delete(oldest);
           return session;
         },
-        messages: async (id) => {
+        messages: async (id, limit) => {
           if (!verified.has(id))
             throw new Error(consoleDetailMessages.readFailed);
-          const result = await client.session.messages({ path: { id } });
+          const result = await client.session.messages({
+            path: { id },
+            ...limit === undefined ? {} : { query: { limit } }
+          });
           if (!result.response.ok || result.error !== undefined)
             throw new Error(consoleDetailMessages.readFailed);
           return result.data;
@@ -1475,14 +1507,37 @@ function createConversationReader(deps) {
   const read = async (endpoint, sessionID, signal) => withHistory(endpoint, signal, async (port) => {
     const session = await port.get(sessionID);
     return {
-      ...projectConversation(await port.messages(sessionID), sessionID),
+      ...projectConversation(await port.messages(sessionID, CONVERSATION_LIMITS.messages + 1), sessionID),
       session: session.label
     };
   });
+  const roots = new Map;
   read.root = (endpoint, projection, signal) => withHistory(endpoint, signal, async (port) => {
-    const recovered = await recoverRootSession(port, projection);
+    const key = JSON.stringify([
+      endpoint,
+      projection.runID,
+      projection.rootOperationID,
+      projection.operations.flatMap((operation) => operation.attempts.map((attempt) => [
+        operation.operationID,
+        attempt.attemptID,
+        attempt.sessionID
+      ]))
+    ]);
+    const cached = roots.get(key);
+    const recovered = cached ? {
+      session: await port.get(cached),
+      association: "sdk-parent"
+    } : await recoverRootSession(port, projection);
+    roots.delete(key);
+    if (recovered.association === "sdk-parent")
+      roots.set(key, recovered.session.id);
+    if (roots.size > 32) {
+      const oldest = roots.keys().next().value;
+      if (oldest !== undefined)
+        roots.delete(oldest);
+    }
     return {
-      ...projectConversation(await port.messages(recovered.session.id), recovered.session.id),
+      ...projectConversation(await port.messages(recovered.session.id, CONVERSATION_LIMITS.messages + 1), recovered.session.id),
       session: recovered.session.label,
       association: recovered.association
     };
@@ -3356,6 +3411,25 @@ var executionSetupMessages = {
 `),
   localOnlyTitle: "Local execution",
   localRequiredError: "local execution requires an enabled local runtime",
+  lemonadeDetectedHint: (loaded, advertised) => `detected - ${loaded} confirmed loaded of ${advertised} advertised text model(s)`,
+  lemonadeNoLoadedModels: "Lemonade has no text models verified as loaded and ready. Keep the intended model active in Lemonade and rerun setup; inactive or unknown models cannot be selected or entered manually.",
+  lemonadeModelNotLoaded: (model) => `Lemonade model "${model}" is not positively verified as loaded and ready. Keep that exact text model active and rerun setup; no substitute was selected and no implicit loading is allowed.`,
+  lemonadeProbeRequired: "Lemonade setup requires a fresh read-only residency probe before writing configuration. Use the CLI with its runtime probe enabled; manual model IDs cannot bypass this requirement.",
+  lemonadeProbeFailed: "Lemonade residency could not be verified at the configured endpoint. Check connectivity and the read-only /models, /health, and /internal/aliases responses, then rerun setup with the intended text models already active.",
+  lemonadeEndpointMismatch: "Lemonade endpoint/provider mapping differs from the selected runtime. Reconcile the configured base URL and provider before rerunning setup; no model was substituted.",
+  lemonadeModelIdentityUnknown: (model) => `Lemonade model "${model}" has no usable registered wire identity in the effective opencode configuration. Fix its model declaration before rerunning setup; setup will not replace or guess an alias.`,
+  lemonadeEffectiveConfigLabel: "effective setup configuration",
+  lemonadeEffectiveConfigAmbiguous: "Cannot establish one effective openteam configuration from the configured plugin loaders. Reconcile their options before rerunning setup; no provider identity was guessed.",
+  lemonadeRetainedProviderUnprotected: (providerID) => `Cannot safely keep retained Lemonade provider "${providerID}": the effective configuration must retain one matching Lemonade runtime, disabled when deselected. Reconcile the plugin options or machine overlay, or explicitly remove the provider registration before rerunning setup; no configuration was written.`,
+  lemonadeV2InvalidProvider: (providerID) => `Lemonade provider ${JSON.stringify(providerID)} cannot be represented as an exact native V2 policy resource. Choose a non-empty provider ID without wildcards, slashes, backslashes, or whitespace; setup will not broaden a deny rule.`,
+  lemonadeV2InvalidPolicies: "Cannot safely preserve experimental.policies: experimental must be an object and policies must be an array of provider.use statements with a string resource and allow/deny effect. Fix the project configuration before rerunning setup.",
+  lemonadeV2Title: "Lemonade transport compatibility",
+  lemonadeV2Restriction: (providers) => `Project policies disable native V2 Lemonade access for: ${providers.join(", ")}. Ordinary guarded V1 configuration remains supported; V2 is not an openteam-hook execution path. Higher-precedence or global policies can override this project restriction; it is not a server-atomic no-autoload guarantee.`,
+  lemonadeInventory: (instanceID, providerID, models) => {
+    const inventory = models.map((model) => `${model.modelID} (${model.loaded === true ? "loaded" : model.loaded === false ? "inactive" : "residency unknown"})`).join(", ");
+    return `Lemonade inventory ${instanceID} (provider ${providerID}): ${inventory || "no advertised text models"}. Only confirmed loaded text models count as ready.`;
+  },
+  lemonadeAgentResidency: (agent, model, state) => `Lemonade readiness: ${agent} (${model}): ${state === "not-loaded" ? "inactive (not ready)" : "residency unknown"}; advertised inventory is not loaded readiness. Keep this exact model active and verify residency before use; requests without verified readiness are blocked.`,
   mixedPrimaryQuestion: "Primary coordinator model",
   mixedPrimaryLocal: (model) => `Use local thinking model ${model}`,
   mixedPrimaryFrontier: "Choose a frontier model",
@@ -4463,234 +4537,286 @@ async function handleLifecycleHistoryRoute(request, response, url, deps) {
 // src/console/inspector.ts
 var CONVERSATION_CLIENT_JS = `
 function wireConversationInspector(){
+  if(document.__conversationsWired){return}document.__conversationsWired=true;
+  var msg=${JSON.stringify(consoleDetailMessages)},limits=${JSON.stringify(CONVERSATION_LIMITS)};
+  var records=new Map(),recoveries=new Map(),stopped=false,timer=null,scheduled=null,active=0,serial=0,retained=null;
   var mount=document.getElementById('lifecycle-timeline-mount');
-  if(!mount){return}
-  var msg=${JSON.stringify(consoleDetailMessages)};
-  var limits=${JSON.stringify(CONVERSATION_LIMITS)};
-  var panel=document.createElement('section');panel.className='lc-conversation';panel.hidden=true;panel.id='lc-attempt-conversation';
-  panel.setAttribute('data-conversation-inspector','');
-  panel.setAttribute('aria-labelledby','lc-conversation-heading');
-  mount.appendChild(panel);
-  var selection=null,request=null,epoch=0,retained=null;
-  function element(tag,text){var e=document.createElement(tag);if(text!==undefined){e.textContent=text}return e}
-  function selectedButton(){
-    if(!selection||mount.getAttribute('data-conversation-transition')==='1'||
-      mount.getAttribute('data-lifecycle-run')!==selection.run||
-      (mount.getAttribute('data-conversation-cursor')||null)!==selection.cursor){return null}
-    return Array.from(mount.querySelectorAll('[data-inspect-attempt],[data-inspect-root]')).find(function(button){
-      var attempt=button.closest('[data-lifecycle-attempt-id]');
-      var operation=button.closest('[data-lifecycle-operation-id]');
-      var session=button.closest(selection.target==='root'?'[data-root-session-id]':'[data-lifecycle-session-id]');
-      return !button.disabled&&operation&&session&&
-        (selection.target==='root'?button.hasAttribute('data-inspect-root'):attempt&&attempt.getAttribute('data-lifecycle-attempt-id')===selection.attempt&&
-        button.getAttribute('data-inspect-attempt')===selection.attempt)&&
-        operation.getAttribute('data-lifecycle-operation-id')===selection.operation&&
-        button.getAttribute('data-inspect-operation')===selection.operation&&
-        session.getAttribute(selection.target==='root'?'data-root-session-id':'data-lifecycle-session-id')===selection.session;
-    })||null;
-  }
-  function expanded(button,open){
-    if(button.getAttribute('aria-expanded')!==String(open)){button.setAttribute('aria-expanded',String(open))}
-    var label=open?msg.close:msg.inspectConversation;
-    if(button.textContent!==label){button.textContent=label}
-  }
-  function cancel(){
-    epoch++;if(request){request.abort();request=null}
-  }
-  function close(focus){
-    var button=selectedButton();
-    cancel();selection=null;retained=null;
-    mount.querySelectorAll('[data-inspect-attempt],[data-inspect-root]').forEach(function(control){expanded(control,false)});
-    panel.textContent='';panel.hidden=true;
-    ['data-conversation-kind','data-conversation-run','data-conversation-operation','data-conversation-attempt','data-conversation-session','data-conversation-target','aria-busy'].forEach(function(name){panel.removeAttribute(name)});
-    mount.appendChild(panel);
-    if(focus===true&&button){button.focus({preventScroll:true})}
-  }
-  // The renderer replaces metadata, not retained content. Restore only after
-  // the real run/cursor commits and the same attempt/session is still visible.
-  function retain(){
-    if(!selection||panel.hidden||!selectedButton()){return}
-    var scrolls=[],ancestor=panel.parentElement;
-    while(ancestor){scrolls.push([ancestor,ancestor.scrollTop,ancestor.scrollLeft]);ancestor=ancestor.parentElement}
-    panel.querySelectorAll('pre,[data-conversation-tool-list]').forEach(function(node){scrolls.push([node,node.scrollTop,node.scrollLeft])});
-    retained={scrolls:scrolls,top:panel.getBoundingClientRect().top,focus:panel.contains(document.activeElement)?document.activeElement:null};
-  }
-  function reanchor(){
-    if(!selection){return}
-    var button=selectedButton();
-    if(!button){close();return}
-    var attempt=selection.target==='root'?button.closest('.lct-operation-card'):button.closest('[data-lifecycle-attempt-id]');
-    if(panel.parentElement!==attempt){attempt.appendChild(panel)}
-    expanded(button,true);
-    if(retained){
-      retained.scrolls.forEach(function(item){if(item[0].isConnected){item[0].scrollTop=item[1];item[0].scrollLeft=item[2]}});
-      var tree=mount.querySelector('[data-lifecycle-tree-mount]');
-      if(tree){tree.scrollTop+=panel.getBoundingClientRect().top-retained.top}
-      if(retained.focus){retained.focus.focus({preventScroll:true})}
-      retained=null;
+  function el(tag,text){var node=document.createElement(tag);if(text!==undefined){node.textContent=text}return node}
+  function setText(node,text){if(node.textContent!==text){node.textContent=text}}
+  function visible(node){
+    if(document.hidden||!node.isConnected){return false}
+    var parent=node;
+    while(parent){if(parent.hidden){return false}parent=parent.parentElement}
+    var rect=node.getBoundingClientRect();
+    return rect.bottom>=0&&rect.top<(window.innerHeight||1000);
+  }
+  function cancel(record){
+    if(record.request){record.request.abort();record.request=null}
+    if(record.finish){record.finish();record.finish=null}
+    record.version++;
+  }
+  function discard(record){
+    cancel(record);record.panel.remove();record.body.textContent='';record.source.textContent='';record.rows.clear();records.delete(record.key);
+  }
+  function clear(scope){
+    Array.from(records.values()).forEach(function(record){
+      if(scope==='native'&&record.selection.target==='session'){return}
+      discard(record);
+    });
+    if(scope!=='native'){retained=null}
+  }
+  function recovery(record){
+    var saved=recoveries.get(record.key);
+    if(saved&&saved.until<=Date.now()){recoveries.delete(record.key);return null}
+    return saved||null;
+  }
+  function rootRecovery(record,data){
+    return record.selection.target==='root'&&!record.selection.session&&data.kind==='unavailable'&&
+      [msg.rootUnavailable,msg.rootAmbiguous,msg.searchIncomplete].includes(data.message)?
+      {message:data.message,until:Date.now()+30000}:null;
+  }
+  function rememberRecovery(record,saved){
+    if(!saved){recoveries.delete(record.key);return}
+    recoveries.delete(record.key);recoveries.set(record.key,saved);
+    if(recoveries.size>128){recoveries.delete(recoveries.keys().next().value)}
+  }
+  function desired(){
+    var result=[];
+    if(stopped||document.hidden){return result}
+    var explicitHistorical=!!((mount&&mount.getAttribute('data-conversation-cursor'))||new URLSearchParams(window.location.search).has('cursor'));
+    var transitioning=mount&&mount.getAttribute('data-conversation-transition')==='1';
+    if(mount){
+      var notice=mount.querySelector('[data-conversation-historical]');
+      if(explicitHistorical){
+        if(!notice){notice=el('p',msg.historical);notice.setAttribute('data-conversation-historical','');mount.appendChild(notice)}
+      }else if(notice){notice.remove()}
+    }
+    if(mount&&!explicitHistorical&&!transitioning){
+      mount.querySelectorAll('[data-inspect-root],[data-inspect-attempt]').forEach(function(button){
+        if(button.disabled){return}
+        var root=button.hasAttribute('data-inspect-root');
+        var session=button.closest(root?'[data-root-session-id]':'[data-lifecycle-session-id]');
+        var host=root?button.closest('.lct-operation-card'):button.closest('[data-lifecycle-attempt-id]');
+        if(!session||!host){return}
+        var selection={target:root?'root':'attempt',run:mount.getAttribute('data-lifecycle-run'),
+          operation:button.getAttribute('data-inspect-operation'),attempt:root?null:button.getAttribute('data-inspect-attempt'),
+          session:session.getAttribute(root?'data-root-session-id':'data-lifecycle-session-id')};
+        if(!selection.run||!selection.operation){return}
+        result.push({key:JSON.stringify(selection),selection:selection,host:host,button:button});
+      });
     }
+    document.querySelectorAll('[data-session-conversation]').forEach(function(host){
+      var selection={target:'session',session:host.getAttribute('data-session-conversation')};
+      if(explicitHistorical){
+        if(visible(host)){setText(host,msg.historical)}
+        return;
+      }
+      result.push({key:JSON.stringify(selection),selection:selection,host:host});
+    });
+    return result;
   }
-  function reset(){
-    panel.textContent='';
-    var header=element('header');header.className='lc-conversation-head';
-    var heading=element('h3',msg.title);heading.id='lc-conversation-heading';heading.tabIndex=-1;header.appendChild(heading);
-    var closeBtn=element('button',msg.close);closeBtn.type='button';
-    closeBtn.setAttribute('data-conversation-close','');
-    closeBtn.addEventListener('click',function(){close(true)});header.appendChild(closeBtn);panel.appendChild(header);
-  }
-  function showHeading(){
-    var heading=panel.querySelector('h3');
-    heading.focus({preventScroll:true});
-    heading.scrollIntoView({block:'start',inline:'nearest'});
-  }
-  function load(reveal){
-    if(!selectedButton()){return}
-    cancel();var current=epoch,selected=selection;
-    reset();
-    panel.setAttribute('data-conversation-kind','loading');
-    panel.setAttribute('aria-busy','true');
-    var status=element('p',msg.loading);status.setAttribute('role','status');panel.appendChild(status);
-    var opening=null;
-    if(reveal===true){
-      showHeading();
-      opening={focus:document.activeElement,scrolls:[mount.querySelector('[data-lifecycle-tree-mount]'),mount.closest('.scroll')].filter(Boolean).map(function(node){return [node,node.scrollTop,node.scrollLeft]})};
-    }
-    var controller=new AbortController();request=controller;
-    var query=new URLSearchParams({run:selected.run,operation:selected.operation,diagnostic:'1'});
-    if(selected.target==='root'){query.set('target','root')}else{query.set('attempt',selected.attempt)}
-    query.set('token',document.documentElement.getAttribute('data-token')||'');
-    if(selected.cursor!==null){query.set('cursor',selected.cursor)}
-    var timeout=setTimeout(function(){controller.abort()},15000);
-    fetch('/api/graph/conversation?'+query.toString(),{signal:controller.signal,cache:'no-store'})
-      .then(function(r){return r.json()}).then(function(data){
-        if(epoch!==current||selection!==selected||!selectedButton()){return}
-        var bringIntoView=opening&&document.activeElement===opening.focus&&opening.scrolls.every(function(item){return item[0].scrollTop===item[1]&&item[0].scrollLeft===item[2]});
-        if((data.kind==='conversation'||data.kind==='empty')&&(data.runID!==selected.run||data.operationID!==selected.operation||
-          (selected.target==='root'?(data.target!=='root'||data.attemptID!==undefined||!data.sessionID||(!selected.session&&!['sdk-parent','tool-result'].includes(data.association))):(data.target!=='attempt'||data.attemptID!==selected.attempt))||
-          (selected.session&&data.sessionID!==selected.session))){
-          data={kind:'unavailable',message:msg.unavailable};
-        }
-        status.textContent=data.message||msg.unavailable;
-        panel.setAttribute('data-conversation-kind',data.kind||'unavailable');
-        if(data.kind==='conversation'||data.kind==='empty'){
-          panel.setAttribute('data-conversation-session',data.sessionID);
-          var source=element('p');source.appendChild(element('strong',data.session&&data.session.title|| (selected.target==='root'?msg.orchestrator:msg.session)));
-          var created=consoleLabels.utcTime(data.session&&data.session.createdAt);
-          source.appendChild(element('small',' · '+(created===msg.timeUnknown?msg.timeUnknown:msg.sessionCreated+': '+created)));
-          source.appendChild(element('code',' · '+data.sessionID));panel.appendChild(source);
-          if(data.session&&data.session.id===data.sessionID){document.dispatchEvent(new CustomEvent('console-session-metadata',{detail:{session:data.session,runID:data.runID,target:selected.target}}))}
-        }
-        if(data.kind==='conversation'){
-          renderMessages(data.messages||[]);
-        }else if(data.kind==='empty'){
-          renderMessages([]);
+  function create(item){
+    var panel=el('section');panel.className='lc-conversation';panel.id='lc-conversation-'+(++serial);
+    panel.setAttribute('data-conversation-inspector','');
+    panel.setAttribute('data-conversation-target',item.selection.target);
+    panel.setAttribute('data-conversation-session',item.selection.session||'');
+    if(item.selection.run){panel.setAttribute('data-conversation-run',item.selection.run)}
+    if(item.selection.attempt){panel.setAttribute('data-conversation-attempt',item.selection.attempt)}
+    var heading=el('h3',msg.title);panel.appendChild(heading);
+    var status=el('p',msg.loading);status.setAttribute('role','status');panel.appendChild(status);
+    var source=el('p');panel.appendChild(source);
+    var body=el('div');body.setAttribute('data-conversation-messages','');panel.appendChild(body);
+    var refresh=el('button',msg.refresh);refresh.type='button';refresh.setAttribute('data-conversation-refresh','');panel.appendChild(refresh);
+    var record={key:item.key,selection:item.selection,host:item.host,panel:panel,status:status,source:source,body:body,rows:new Map(),
+      request:null,finish:null,version:0,due:0,button:item.button};
+    refresh.addEventListener('click',function(){record.due=0;recoveries.delete(record.key);sync()});
+    item.host.appendChild(panel);records.set(item.key,record);
+    return record;
+  }
+  function matches(record,data){
+    var s=record.selection;
+    return data.sessionID&&(s.session?data.sessionID===s.session:['sdk-parent','tool-result'].includes(data.association))&&
+      (s.target==='session'?data.target==='session'&&!data.runID:
+        data.runID===s.run&&data.operationID===s.operation&&data.target===s.target&&
+          (s.target==='root'?data.attemptID===undefined:data.attemptID===s.attempt));
+  }
+  function render(record,messages){
+    var remaining=limits.totalChars,tools=0,truncated=false,used=new Set();
+    function text(value){
+      value=String(value===undefined?'':value);
+      var length=Math.min(value.length,limits.fieldChars+msg.truncatedMarker.length,remaining);
+      remaining-=length;if(length<value.length){truncated=true}return value.slice(0,length);
+    }
+    if(messages.length>limits.messages){truncated=true}
+    messages.slice(0,limits.messages).forEach(function(message){
+      if(!message||!['user','assistant'].includes(message.role)||typeof message.id!=='string'||used.has(message.id)){return}
+      used.add(message.id);
+      var row=record.rows.get(message.id);
+      if(!row){
+        var article=el('article');article.setAttribute('data-conversation-role',message.role);
+        article.appendChild(el('h4',message.role==='user'?msg.prompt:msg.assistant));
+        var time=el('time');article.appendChild(time);
+        row={node:article,time:time,texts:[],tools:new Map()};record.rows.set(message.id,row);record.body.appendChild(article);
+      }
+      var selection=window.getSelection&&window.getSelection();
+      if(selection&&!selection.isCollapsed&&row.node.contains(selection.anchorNode)){return}
+      setText(row.time,consoleLabels.utcTime(message.createdAt));
+      var parts=(message.text||[]).slice(0,limits.parts);
+      parts.forEach(function(value,index){
+        if(!row.texts[index]){row.texts[index]=el('pre');row.node.insertBefore(row.texts[index],row.node.querySelector('details'))}
+        setText(row.texts[index],text(value));
+      });
+      while(row.texts.length>parts.length){row.texts.pop().remove()}
+      var seenTools=new Set();
+      (message.tools||[]).slice(0,limits.parts).forEach(function(tool){
+        if(tools++>=limits.tools||remaining<=0){truncated=true;return}
+        seenTools.add(tool.id);
+        var call=row.tools.get(tool.id);
+        if(!call){
+          var detail=el('details');detail.setAttribute('data-tool-call',tool.id);detail.open=true;
+          var summary=el('summary');detail.appendChild(summary);
+          detail.appendChild(el('h5',msg.arguments));var args=el('pre');detail.appendChild(args);
+          detail.appendChild(el('h5',msg.result));var result=el('pre');detail.appendChild(result);
+          call={node:detail,summary:summary,args:args,result:result};row.tools.set(tool.id,call);row.node.appendChild(detail);
         }
-        // The short loading card may not have enough scroll range. Complete
-        // the explicit reveal after layout grows, unless the reader moved on.
-        if(bringIntoView){panel.querySelector('h3').scrollIntoView({block:'start',inline:'nearest'})}
-      }).catch(function(){
-        if(epoch===current){status.textContent=msg.unavailable;panel.setAttribute('data-conversation-kind','unavailable')}
-      }).finally(function(){
-        clearTimeout(timeout);
-        if(epoch!==current){return}
-        request=null;
-        panel.setAttribute('aria-busy','false');
-        var refresh=element('button',msg.refresh);refresh.type='button';refresh.setAttribute('data-conversation-refresh','');
-        refresh.addEventListener('click',load);panel.appendChild(refresh);
+        setText(call.summary,text(tool.name)+' · '+text(tool.status));
+        setText(call.args,text(tool.arguments));setText(call.result,text(tool.result===undefined?msg.pending:tool.result));
       });
-  }
-  function renderMessages(messages){
-    var truncated=messages.length>limits.messages,remaining=limits.totalChars,toolCount=0;
-    messages=messages.slice(0,limits.messages);
-    var tools=element('details');tools.setAttribute('data-conversation-tools','');tools.open=true;
-    var count=messages.reduce(function(total,m){return total+(m.tools||[]).length},0);
-    tools.appendChild(element('summary',msg.tools.replace('{count}',String(count))));
-    var calls=element('div');calls.setAttribute('data-conversation-tool-list','');tools.appendChild(calls);
-    panel.appendChild(tools);
-    function text(value){
-      value=String(value);
-      var size=Math.min(value.length,limits.fieldChars+msg.truncatedMarker.length,remaining);
-      remaining-=size;
-      if(size<value.length){truncated=true}
-      return value.slice(0,size);
-    }
-    ['user','assistant'].forEach(function(role){
-      var section=element('section');section.setAttribute('data-conversation-role',role);
-      section.appendChild(element('h4',role==='user'?msg.prompt:msg.assistant));
-      var hasText=false;
-      messages.filter(function(m){return m.role===role}).forEach(function(m){
-        var item=element('article');item.appendChild(element('time',consoleLabels.utcTime(m.createdAt)));
-        if((m.text||[]).length>limits.parts){truncated=true}
-        (m.text||[]).slice(0,limits.parts).forEach(function(value){
-          if(!value){return}
-          hasText=true;
-          if(remaining>0){item.appendChild(element('pre',text(value)))}else{truncated=true}
+      row.tools.forEach(function(call,id){if(!seenTools.has(id)){call.node.remove();row.tools.delete(id)}});
+      if(Array.isArray(message.order)){
+        var previous=row.time;
+        message.order.slice(0,limits.parts).forEach(function(part){
+          var node=part.type==='text'?row.texts[part.index]:row.tools.get((message.tools[part.index]||{}).id);
+          node=node&&node.node||node;
+          if(node){if(previous.nextSibling!==node){row.node.insertBefore(node,previous.nextSibling||null)}previous=node}
         });
-        if(item.querySelector('pre')){section.appendChild(item)}
-      });panel.appendChild(section);
-      if(!hasText){section.appendChild(element('p',role==='user'?msg.noPrompts:msg.noOutput))}
+      }
+    });
+    record.rows.forEach(function(row,id){if(!used.has(id)){row.node.remove();record.rows.delete(id)}});
+    if(truncated){setText(record.status,msg.current+'\\n'+msg.truncated)}
+  }
+  function load(record){
+    var selected=record.selection,controller=new AbortController(),version=++record.version;
+    record.request=controller;active++;record.panel.setAttribute('aria-busy','true');
+    var finished=false;
+    record.finish=function(){if(!finished){finished=true;active--;clearTimeout(timeout)}};
+    var query=new URLSearchParams({token:document.documentElement.getAttribute('data-token')||''});
+    var path='/api/graph/conversation';
+    if(selected.target==='session'){path='/api/console/conversation';query.set('session',selected.session)}
+    else{query.set('run',selected.run);query.set('operation',selected.operation);
+      if(selected.target==='root'){query.set('target','root')}else{query.set('attempt',selected.attempt)}}
+    var timeout=setTimeout(function(){
+      if(record.version!==version){return}
+      cancel(record);record.due=Date.now()+30000;setText(record.status,msg.unavailable);
+      record.panel.setAttribute('aria-busy','false');schedule();
+    },15000);
+    fetch(path+'?'+query,{signal:controller.signal,cache:'no-store'}).then(function(response){return response.json()}).then(function(data){
+      if(record.version!==version||!records.has(record.key)||!visible(record.host)||controller.signal.aborted){return}
+      if((data.kind==='conversation'||data.kind==='empty')&&!matches(record,data)){data={kind:'unavailable',message:msg.unavailable}}
+      var negative=rootRecovery(record,data);
+      record.panel.setAttribute('data-conversation-kind',data.kind||'unavailable');
+      setText(record.status,data.message||((data.kind==='conversation'||data.kind==='empty')?msg.current:msg.unavailable));
+      if(data.kind==='conversation'||data.kind==='empty'){
+        recoveries.delete(record.key);
+        record.panel.setAttribute('data-conversation-session',data.sessionID);
+        setText(record.source,(data.session&&data.session.title||msg.session)+' · '+data.sessionID);
+        var focus=record.panel.contains(document.activeElement)?document.activeElement:null;
+        render(record,data.messages||[]);
+        if(focus&&focus.isConnected&&focus!==document.activeElement&&
+          (!document.activeElement||document.activeElement===document.body)){focus.focus({preventScroll:true})}
+        if(data.session&&data.session.id===data.sessionID){
+          document.dispatchEvent(new CustomEvent('console-session-metadata',{detail:{session:data.session,runID:data.runID,target:selected.target}}));
+        }
+      }else{rememberRecovery(record,negative);record.body.textContent='';record.source.textContent='';record.rows.clear()}
+      record.due=['disabled','unauthorized','historical','invalid','oversized'].includes(data.kind)?Infinity:Date.now()+(data.kind==='unavailable'?30000:2000);
+    }).catch(function(){
+      if(record.version===version&&!controller.signal.aborted){
+        recoveries.delete(record.key);
+        setText(record.status,msg.unavailable);record.panel.setAttribute('data-conversation-kind','unavailable');
+        record.body.textContent='';record.source.textContent='';record.rows.clear();record.due=Date.now()+30000;
+      }
+    }).finally(function(){
+      if(!finished){finished=true;clearTimeout(timeout);active--}
+      if(record.version===version){record.request=null;record.panel.setAttribute('aria-busy','false');if(controller.signal.aborted){record.due=Date.now()+30000;setText(record.status,msg.unavailable)}}
+      schedule();
+    });
+  }
+  function sync(){
+    var items=desired(),byKey=new Map(items.map(function(item){return [item.key,item]}));
+    Array.from(records.values()).forEach(function(record){
+      var item=byKey.get(record.key);
+      if(!item||!visible(item.host)){
+        if(item&&item.host.isConnected){item.host.style.minHeight=item.host.getBoundingClientRect().height+'px'}
+        discard(record);return;
+      }
+      record.host=item.host;
+      if(record.panel.parentElement!==item.host){item.host.appendChild(record.panel)}
     });
-    messages.forEach(function(m){
-      if((m.tools||[]).length>limits.parts){truncated=true}
-      (m.tools||[]).slice(0,limits.parts).forEach(function(tool){
-        if(toolCount++>=limits.tools||remaining<=0){truncated=true;return}
-        var call=element('details');call.setAttribute('data-tool-call',tool.id);
-        call.appendChild(element('summary',text(tool.name)+' · '+text(tool.status)));
-        if(tool.startedAt!==undefined){call.appendChild(element('time',consoleLabels.utcTime(tool.startedAt)))}
-        call.appendChild(element('h5',msg.arguments));call.appendChild(element('pre',text(tool.arguments)));
-        call.appendChild(element('h5',msg.result));call.appendChild(element('pre',text(tool.result===undefined?msg.pending:tool.result)));
-        calls.appendChild(call);
+    items.forEach(function(item){
+      if(!visible(item.host)){return}
+      var record=records.get(item.key);
+      if(!record&&records.size<8){
+        if(item.selection.target==='session'){item.host.textContent=''}
+        record=create(item);
+      }
+      if(!record){return}
+      if(item.button){item.button.hidden=true;item.button.setAttribute('aria-controls',record.panel.id)}
+      var saved=recovery(record);
+      if(saved&&!record.rows.size&&!record.request){record.panel.setAttribute('data-conversation-kind','unavailable');setText(record.status,saved.message)}
+      if(!record.request&&active<2&&record.due<=Date.now()&&!saved){load(record)}
+    });
+  }
+  function schedule(){
+    if(stopped||scheduled!==null){return}
+    scheduled=setTimeout(function(){scheduled=null;sync()},50);
+  }
+  document.addEventListener('conversation-selection',function(event){
+    clear(event&&event.detail&&event.detail.scope==='native'?'native':'all');
+    sync();
+  });
+  document.addEventListener('conversation-tree-replacing',function(){
+    var scroll=document.querySelector('.scroll'),tree=mount&&mount.querySelector('[data-lifecycle-tree-mount]');
+    retained={focus:document.activeElement,scroll:scroll,scrollTop:scroll&&scroll.scrollTop,treeTop:tree&&tree.scrollTop,positions:[]};
+    records.forEach(function(record){
+      [record.body].concat(Array.from(record.panel.querySelectorAll('pre'))).forEach(function(node){
+        retained.positions.push([node,node.scrollTop,node.scrollLeft]);
       });
     });
-    if(count===0){calls.appendChild(element('p',msg.noTools))}
-    if(truncated){panel.appendChild(element('p',msg.truncated))}
-  }
-  mount.addEventListener('click',function(event){
-    var button=event.target.closest('[data-inspect-attempt],[data-inspect-root]');
-    if(!button||button.disabled||mount.getAttribute('data-conversation-transition')==='1'){return}
-    if(button===selectedButton()){close(true);return}
-    close();
-    var root=button.hasAttribute('data-inspect-root');
-    var session=button.closest(root?'[data-root-session-id]':'[data-lifecycle-session-id]');
-    if(!session){return}
-    selection={
-      run:mount.getAttribute('data-lifecycle-run'),
-      operation:button.getAttribute('data-inspect-operation'),
-      attempt:button.getAttribute('data-inspect-attempt'),
-      target:root?'root':'attempt',
-      session:session.getAttribute(root?'data-root-session-id':'data-lifecycle-session-id'),
-      cursor:mount.getAttribute('data-conversation-cursor')||null
-    };
-    if(!selectedButton()){close();return}
-    panel.setAttribute('data-conversation-run',selection.run);
-    panel.setAttribute('data-conversation-operation',selection.operation);
-    if(selection.attempt){panel.setAttribute('data-conversation-attempt',selection.attempt)}
-    panel.setAttribute('data-conversation-target',selection.target);
-    panel.setAttribute('data-conversation-session',selection.session);
-    reanchor();
-    panel.hidden=false;
-    if(selection.cursor!==null){reset();panel.setAttribute('data-conversation-kind','historical');panel.appendChild(element('p',msg.historical));showHeading()}
-    else{load(true)}
+    records.forEach(function(record){if(record.selection.target!=='session'){record.panel.remove()}});
   });
-  document.addEventListener('conversation-selection',close);
-  document.addEventListener('conversation-tree-replacing',retain);
-  document.addEventListener('conversation-tree-committed',reanchor);
-  window.addEventListener('pagehide',close);
+  document.addEventListener('conversation-tree-committed',function(){
+    sync();
+    if(retained){
+      retained.positions.forEach(function(item){if(item[0].isConnected){item[0].scrollTop=item[1];item[0].scrollLeft=item[2]}});
+      var tree=mount&&mount.querySelector('[data-lifecycle-tree-mount]');
+      if(tree&&retained.treeTop!==null){tree.scrollTop=retained.treeTop}
+      if(retained.scroll){retained.scroll.scrollTop=retained.scrollTop}
+      if(retained.focus&&retained.focus.isConnected&&retained.focus!==document.activeElement&&
+        (!document.activeElement||document.activeElement===document.body||document.activeElement===document.documentElement)){
+        retained.focus.focus({preventScroll:true});
+      }
+      retained=null;
+    }
+  });
+  document.addEventListener('console-conversation-selection',sync);
+  document.addEventListener('visibilitychange',function(){if(document.hidden){clear()}else{sync()}});
+  document.addEventListener('scroll',schedule,true);
+  window.addEventListener('resize',schedule);
+  window.addEventListener('pagehide',function(){stopped=true;clear();clearInterval(timer);clearTimeout(scheduled);scheduled=null});
+  window.addEventListener('pageshow',function(event){if(event.persisted){stopped=false;timer=setInterval(sync,2000);sync()}});
+  timer=setInterval(sync,2000);sync();
 }
 `;
 var CONVERSATION_STYLE = `
-.lc-conversation{margin-top:12px;padding:12px;min-width:0;border:1px solid var(--cp-border);border-radius:16px;background:var(--cp-surface);color:var(--cp-text);overflow-anchor:none}
+.lc-conversation{margin-top:12px;padding:12px;min-width:0;border:1px solid var(--cp-border,var(--border));border-radius:12px;background:var(--cp-surface,var(--surface));color:var(--cp-text,var(--fg));overflow-anchor:none}
 .lc-conversation[hidden]{display:none}
-.lc-conversation-head{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:8px}
 .lc-conversation h3,.lc-conversation h4,.lc-conversation p{margin:8px 0}
-.lc-conversation h3{scroll-margin-top:12px}
-.lc-conversation pre{white-space:pre-wrap;overflow-wrap:anywhere;max-height:400px;overflow:auto;background:var(--cp-surface-soft);padding:12px;font-family:Consolas,"Courier New",Courier,monospace}
-.lc-conversation [data-conversation-role="user"] pre{max-height:180px}
-.lc-conversation [data-conversation-tool-list]{max-height:160px;overflow:auto}
-.lc-conversation details{margin-top:12px;padding:8px;border:1px solid var(--cp-border);border-radius:.625rem}
-.lc-conversation summary{cursor:pointer;color:var(--cp-accent)}
-.lc-conversation time{font-size:11px;color:var(--cp-text-muted)}
-.lc-conversation button,[data-inspect-attempt],[data-inspect-root]{padding:6px 10px;margin:6px;border:1px solid var(--cp-border);border-radius:.625rem;background:var(--cp-surface);color:var(--cp-accent)}
+.lc-conversation [data-conversation-messages]{max-height:520px;overflow:auto;overflow-anchor:none}
+.lc-conversation pre{white-space:pre-wrap;overflow-wrap:anywhere;max-height:400px;overflow:auto;background:var(--cp-surface-soft,var(--bg));padding:12px;font-family:var(--font-mono)}
+.lc-conversation details{margin:12px 0;padding:8px;border:1px solid var(--cp-border,var(--border));border-radius:8px}
+.lc-conversation summary{cursor:pointer;color:var(--cp-accent,var(--accent))}
+.lc-conversation time{font-size:11px;color:var(--cp-text-muted,var(--muted))}
+.lc-conversation button,[data-inspect-attempt],[data-inspect-root]{padding:6px 10px;margin:6px;border:1px solid var(--cp-border,var(--border));border-radius:8px;background:var(--cp-surface,var(--surface));color:var(--cp-accent,var(--accent))}
 .lct-operation-name{display:block;font-size:16px}
 .lct-operation-head details,.lct-session details{font-size:11px;color:var(--cp-text-muted)}
 .lct-session small,.session-btn small{display:block;color:var(--cp-text-muted)}
@@ -4724,7 +4850,7 @@ var CONSOLE_REFRESH_JS = `
       if(old.getAttribute('data-label-fallback')!==next.textContent){old.setAttribute('data-label-fallback',next.textContent)}
       return;
     }
-    if(old.matches('input,textarea,select,.term,.pty,.graph-drill,[data-config-mount]')){return}
+    if(old.matches('input,textarea,select,.term,.pty,.graph-drill,[data-config-mount],[data-session-conversation]')){return}
     Array.from(old.attributes).forEach(function(a){
       if(a.name!=='open'&&a.name!=='hidden'&&a.name!=='aria-selected'&&!next.hasAttribute(a.name)){old.removeAttribute(a.name)}
     });
@@ -4938,6 +5064,8 @@ svg.graph{display:block}
 .graph-drill .drilllog .tl.error{color:#f85149}
 `;
 var CONSOLE_CLIENT_JS = `
+${LABELS_CLIENT_JS}
+${CONVERSATION_CLIENT_JS}
 (function(){
   var detailMsg=${JSON.stringify(consoleDetailMessages)};
   var terminalCollectors=[];
@@ -4992,6 +5120,7 @@ var CONSOLE_CLIENT_JS = `
         if(show){matched=true;if(!screen.hidden){connectTerminal(cards[j],id)}}
       }
       updateTerminalLeases();
+      document.dispatchEvent(new CustomEvent('console-conversation-selection'));
       return matched;
     }
     if(!screen.__logsWired){
@@ -5052,6 +5181,7 @@ var CONSOLE_CLIENT_JS = `
     if(name==='config'&&activeScreen){loadConfig(activeScreen)}
     if(name==='logs'&&activeScreen){wireLogsScreen(activeScreen)}
     updateTerminalLeases();
+    document.dispatchEvent(new CustomEvent('console-conversation-selection'));
     try{localStorage.setItem('openteam.screen',name)}catch(e){}
     document.body.classList.remove('nav-open');
     return true;
@@ -5453,8 +5583,6 @@ var LIFECYCLE_THEME_BOOT = `
 })();
 `;
 var LIFECYCLE_CLIENT_JS = `
-${LABELS_CLIENT_JS}
-${CONVERSATION_CLIENT_JS}
 function wireLifecycleTimeline(){
   var mount=document.getElementById('lifecycle-timeline-mount');
   if(!mount){return}
@@ -5501,7 +5629,7 @@ function wireLifecycleTimeline(){
       treeMountEl.setAttribute('inert','');
       treeMountEl.querySelectorAll('[data-inspect-attempt],[data-inspect-root]').forEach(function(button){button.disabled=true});
     }
-    document.dispatchEvent(new CustomEvent('conversation-selection'));
+    document.dispatchEvent(new CustomEvent('conversation-selection',{detail:{scope:'native'}}));
   }
   function commitConversation(run,cursor){
     cursor=cursor===null?null:String(cursor);
@@ -5963,6 +6091,7 @@ function wireLifecycleTimeline(){
     inspect.setAttribute('aria-expanded','false');
     inspect.setAttribute('aria-controls','lc-attempt-conversation');
     inspect.setAttribute('data-inspect-attempt',attempt.attemptID);
+    inspect.hidden=true;
     inspect.setAttribute('data-inspect-operation',attempt.operationID);
     session.appendChild(inspect);
     if(attempt.parentSessionID){
@@ -6115,7 +6244,7 @@ function wireLifecycleTimeline(){
           var time=makeElement('small','',${JSON.stringify(consoleDetailMessages.timeUnknown)});time.setAttribute('data-session-time',rootID);rootSession.appendChild(time);
           var id=makeElement('code','',rootID);rootSession.appendChild(id);
         }else{rootSession.appendChild(makeElement('span','',${JSON.stringify(consoleDetailMessages.rootUnlinked)}))}
-        var inspect=makeElement('button','',message('inspect'));inspect.type='button';inspect.setAttribute('data-inspect-root','');inspect.setAttribute('data-inspect-operation',op.operationID);inspect.setAttribute('aria-expanded','false');inspect.setAttribute('aria-controls','lc-attempt-conversation');rootSession.appendChild(inspect);
+        var inspect=makeElement('button','',message('inspect'));inspect.type='button';inspect.hidden=true;inspect.setAttribute('data-inspect-root','');inspect.setAttribute('data-inspect-operation',op.operationID);rootSession.appendChild(inspect);
         card.insertBefore(rootSession,card.querySelector('.lct-attempts'));
       }
       var children=childrenByParent.get(op.operationID)||[];
@@ -6727,6 +6856,7 @@ function sessionDetailCard(tab, terminalEnabled, ptyEnabled, visible) {
   const idSuffix = domIdPart(tab.sessionID);
   const body = [
     sessionHeaderPanel(tab),
+    `<div data-session-conversation="${escapeHtml(tab.sessionID)}"></div>`,
     terminalEnabled ? terminalPanel(tab) : "",
     terminalEnabled && ptyEnabled ? ptyPanel(tab) : "",
     routesPanel(tab.recentRoutes, idSuffix),
@@ -7112,7 +7242,7 @@ function lcSessionHtml(attempt, role) {
     sessionNameHtml(attempt.sessionID, role),
     `<small data-session-time="${escapeHtml(attempt.sessionID)}">${escapeHtml(consoleDetailMessages.timeUnknown)}</small>`,
     `<details><summary>${escapeHtml(consoleDetailMessages.technicalID)}</summary><code>${escapeHtml(attempt.sessionID)}</code></details>`,
-    `<button type="button" aria-expanded="false" aria-controls="lc-attempt-conversation" data-inspect-operation="${escapeHtml(attempt.operationID)}" data-inspect-attempt="${escapeHtml(attempt.attemptID)}">${escapeHtml(consoleDetailMessages.inspectConversation)}</button>`,
+    `<button type="button" hidden data-inspect-operation="${escapeHtml(attempt.operationID)}" data-inspect-attempt="${escapeHtml(attempt.attemptID)}">${escapeHtml(consoleDetailMessages.inspectConversation)}</button>`,
     attempt.parentSessionID === undefined ? "" : `<span class="lct-parent-session">${escapeHtml(lifecycleMessages.parentSessionLabel)} <code>${escapeHtml(attempt.parentSessionID)}</code></span>`,
     "</div>"
   ].join("");
@@ -7199,7 +7329,7 @@ function lcOperationHtml(operation, operationIDs, childrenHtml, depth, rootSessi
     isRoot && operation.kind === "coordinator" ? [
       `<div class="lct-session" data-root-session-id="${escapeHtml(rootSessionID ?? "")}">`,
       rootSessionID ? `${sessionNameHtml(rootSessionID, consoleDetailMessages.orchestrator)} <small data-session-time="${escapeHtml(rootSessionID)}">${escapeHtml(consoleDetailMessages.timeUnknown)}</small><details><summary>${escapeHtml(consoleDetailMessages.technicalID)}</summary><code>${escapeHtml(rootSessionID)}</code></details>` : `<span>${escapeHtml(consoleDetailMessages.rootUnlinked)}</span>`,
-      `<button type="button" data-inspect-root data-inspect-operation="${escapeHtml(operation.operationID)}" aria-expanded="false" aria-controls="lc-attempt-conversation">${escapeHtml(consoleDetailMessages.inspectConversation)}</button>`,
+      `<button type="button" hidden data-inspect-root data-inspect-operation="${escapeHtml(operation.operationID)}">${escapeHtml(consoleDetailMessages.inspectConversation)}</button>`,
       "</div>"
     ].join("") : "",
     `<section class="lct-attempts" aria-label="${escapeHtml(lifecycleMessages.attemptsLabel)}">${attempts}</section>`,
@@ -7578,11 +7708,11 @@ function renderConsoleHtml(state, options = {}) {
   const body = [
     screenSection("tree", treeCopy.label, treeCopy.heading, treeCopy.description, treeBody, true),
     screenSection("routing", "Routing and telemetry", "Routing + telemetry", "Aggregate routing and cost telemetry from <code>GET /api/state</code> across all sessions.", routingScreenBody(state)),
-    screenSection("logs", "Logs and session activity", "Logs / activity", "Per-session activity. Prompts are referenced by hash only and never rendered in clear text.", `<div data-log-controls><label>${escapeHtml(consoleDetailMessages.filter)} <input type="search" data-log-filter></label> <label><input type="checkbox" data-log-follow> ${escapeHtml(consoleDetailMessages.follow)}</label> <button type="button" data-log-incoming hidden>${escapeHtml(consoleDetailMessages.incoming)}</button></div><div data-log-content>${logsScreenBody(state, terminalEnabled, ptyEnabled)}</div>`),
+    screenSection("logs", "Logs and session activity", "Logs / activity", consoleDetailMessages.logsDescription, `<div data-log-controls><label>${escapeHtml(consoleDetailMessages.filter)} <input type="search" data-log-filter></label> <label><input type="checkbox" data-log-follow> ${escapeHtml(consoleDetailMessages.follow)}</label> <button type="button" data-log-incoming hidden>${escapeHtml(consoleDetailMessages.incoming)}</button></div><div data-log-content>${logsScreenBody(state, terminalEnabled, ptyEnabled)}</div>`),
     screenSection("config", "Editable configuration", 'Configuration <span class="pill warn">editable</span>', "Edit the whole openteam JSON configuration. Roles are editable inside the JSON when present; unsupported surfaces are not shown.", configScreenBody(options.configEditor?.hasToken === true))
   ].join("");
   const session = state.session.id === undefined ? "" : ` · session ${escapeHtml(state.session.id)}`;
-  const tokenAttr = (terminalEnabled || graphDrilldown || configEnabled || lifecycleEnabled) && options.consoleToken !== undefined ? ` data-token="${escapeHtml(options.consoleToken)}"${terminalEnabled ? ' data-terminal="1"' : ""}${ptyEnabled ? ' data-pty="1"' : ""}${graphDrilldown ? ' data-drilldown="1"' : ""}${configEnabled ? ' data-config="1"' : ""}` : "";
+  const tokenAttr = options.consoleToken !== undefined ? ` data-token="${escapeHtml(options.consoleToken)}"${terminalEnabled ? ' data-terminal="1"' : ""}${terminalEnabled && ptyEnabled ? ' data-pty="1"' : ""}${graphDrilldown ? ' data-drilldown="1"' : ""}${configEnabled ? ' data-config="1"' : ""}` : "";
   return [
     "<!doctype html>",
     `<html lang="en" data-generated="${escapeHtml(state.generatedAt)}" data-refresh="${refreshMs}"${tokenAttr}>`,
@@ -7591,7 +7721,7 @@ function renderConsoleHtml(state, options = {}) {
     '<meta name="viewport" content="width=device-width,initial-scale=1">',
     "<title>openteam console</title>",
     lifecycleEnabled ? `<script>${LIFECYCLE_THEME_BOOT}</script>` : "",
-    `<style>${CONSOLE_STYLE}${graphOptionProvided ? GRAPH_STYLE : ""}${lifecycleEnabled ? LIFECYCLE_STYLE + CONVERSATION_STYLE : ""}</style>`,
+    `<style>${CONSOLE_STYLE}${CONVERSATION_STYLE}${graphOptionProvided ? GRAPH_STYLE : ""}${lifecycleEnabled ? LIFECYCLE_STYLE : ""}</style>`,
     "</head>",
     "<body>",
     '<div class="app">',
@@ -8368,7 +8498,8 @@ async function untilAborted(read, signal) {
 }
 async function handleConversationRoute(request, response, url, deps) {
   const labelsOnly = url.pathname === "/api/graph/session-labels";
-  if (url.pathname !== "/api/graph/conversation" && !labelsOnly)
+  const direct = url.pathname === "/api/console/conversation";
+  if (url.pathname !== "/api/graph/conversation" && !labelsOnly && !direct)
     return false;
   const send = (status, kind, message, extra = {}) => {
     response.writeHead(status, {
@@ -8388,11 +8519,60 @@ async function handleConversationRoute(request, response, url, deps) {
     send(405, "unavailable", consoleDetailMessages.unauthorized);
     return true;
   }
-  if (!deps.enabled || !deps.contentEnabled || url.searchParams.get("diagnostic") !== "1") {
+  if (!direct && !deps.enabled || !deps.contentEnabled) {
     send(403, "disabled", consoleDetailMessages.disabled);
     return true;
   }
   const params = url.searchParams;
+  if (direct) {
+    const sessionID = params.get("session");
+    if (!sessionID || sessionID.length > 256 || params.getAll("session").length !== 1 || ["run", "operation", "attempt", "target"].some((key) => params.has(key))) {
+      send(400, "invalid", consoleDetailMessages.invalid);
+      return true;
+    }
+    if (params.has("cursor")) {
+      send(409, "historical", consoleDetailMessages.historical);
+      return true;
+    }
+    const controller2 = new AbortController;
+    const cancel2 = () => controller2.abort();
+    response.on("close", cancel2);
+    request.on("aborted", cancel2);
+    const timeout2 = setTimeout(cancel2, SESSION_HISTORY_LIMITS.timeoutMs);
+    try {
+      const observed = await untilAborted(deps.observedSessionIDs?.() ?? Promise.resolve([]), controller2.signal);
+      if (!observed.includes(sessionID)) {
+        send(404, "invalid", consoleDetailMessages.invalid);
+        return true;
+      }
+      const endpoint = await untilAborted(deps.resolveEndpoint(sessionID), controller2.signal);
+      if (!endpoint) {
+        send(503, "unavailable", consoleDetailMessages.unavailable);
+        return true;
+      }
+      const conversation = await untilAborted(deps.readConversation(endpoint, sessionID, controller2.signal), controller2.signal);
+      send(200, conversation.messages.length || conversation.truncated ? "conversation" : "empty", `${consoleDetailMessages.current}${conversation.truncated ? `
+${consoleDetailMessages.truncated}` : conversation.messages.length ? "" : `
+${consoleDetailMessages.empty}`}`, {
+        scope: "present-day-session",
+        target: "session",
+        sessionID,
+        ...conversation
+      });
+    } catch (error) {
+      if (!response.destroyed)
+        send(error instanceof ConversationTooLargeError ? 413 : 503, error instanceof ConversationTooLargeError ? "oversized" : "unavailable", error instanceof ConversationTooLargeError ? consoleDetailMessages.oversized : consoleDetailMessages.unavailable);
+    } finally {
+      clearTimeout(timeout2);
+      response.off("close", cancel2);
+      request.off("aborted", cancel2);
+    }
+    return true;
+  }
+  if (!deps.reader) {
+    send(503, "unavailable", consoleDetailMessages.unavailable);
+    return true;
+  }
   const rootTarget = params.get("target") === "root";
   if ((labelsOnly ? params.has("run") ? ["run"] : [] : rootTarget ? ["run", "operation"] : ["run", "operation", "attempt"]).some((key) => params.getAll(key).length !== 1 || !params.get(key)) || params.has("session") || params.getAll("target").length > 1 || params.has("target") && !rootTarget && params.get("target") !== "attempt" || rootTarget && params.has("attempt") || labelsOnly && (params.has("operation") || params.has("attempt") || params.has("target"))) {
     send(400, "invalid", consoleDetailMessages.invalid);
@@ -8416,7 +8596,7 @@ async function handleConversationRoute(request, response, url, deps) {
     if (request.aborted || request.socket.destroyed)
       cancel2();
     const deadline = Date.now() + SESSION_HISTORY_LIMITS.timeoutMs;
-    const timeout = setTimeout(cancel2, SESSION_HISTORY_LIMITS.timeoutMs);
+    const timeout2 = setTimeout(cancel2, SESSION_HISTORY_LIMITS.timeoutMs);
     try {
       const history2 = selected?.kind === "view" ? selected : undefined;
       const selectedRoot = history2?.runs.find((run) => run.runID === history2.selection.runID)?.rootSessionID;
@@ -8482,7 +8662,7 @@ ${consoleDetailMessages.partialMetadata}` : consoleDetailMessages.currentMetadat
       if (!response.destroyed && !request.socket.destroyed)
         send(503, "unavailable", consoleDetailMessages.unavailable);
     } finally {
-      clearTimeout(timeout);
+      clearTimeout(timeout2);
       response.off("close", cancel2);
       request.off("aborted", cancel2);
       request.socket.off("close", cancel2);
@@ -8507,21 +8687,23 @@ ${consoleDetailMessages.partialMetadata}` : consoleDetailMessages.currentMetadat
   const controller = new AbortController;
   const cancel = () => controller.abort();
   response.on("close", cancel);
+  request.on("aborted", cancel);
+  const timeout = setTimeout(cancel, SESSION_HISTORY_LIMITS.timeoutMs);
   try {
     const run = history.runs.find((item) => item.runID === history.selection.runID);
     const recordedRoot = run?.rootSessionID;
     const sessionID = rootTarget ? recordedRoot : attempt?.sessionID;
     const endpointID = sessionID ?? history.projection.operations.flatMap((op) => op.attempts).filter((item) => item.sessionID).at(-1)?.sessionID ?? "";
-    const endpoint = await deps.resolveEndpoint(endpointID);
+    const endpoint = await untilAborted(deps.resolveEndpoint(endpointID), controller.signal);
     if (!endpoint) {
       send(503, "unavailable", consoleDetailMessages.unavailable);
       return true;
     }
-    const recovered = !sessionID && rootTarget && deps.readConversation.root ? await deps.readConversation.root(endpoint, history.projection, controller.signal) : undefined;
+    const recovered = !sessionID && rootTarget && deps.readConversation.root ? await untilAborted(deps.readConversation.root(endpoint, history.projection, controller.signal), controller.signal) : undefined;
     const resolvedID = sessionID ?? recovered?.session.id;
     if (!resolvedID)
       throw new AssociationError("unavailable");
-    const conversation = recovered ?? await deps.readConversation(endpoint, resolvedID, controller.signal);
+    const conversation = recovered ?? await untilAborted(deps.readConversation(endpoint, resolvedID, controller.signal), controller.signal);
     const current = rootTarget ? `${consoleDetailMessages.rootCurrent}
 ${consoleDetailMessages.current}${recovered ? `
 ${consoleDetailMessages.recovered}` : ""}` : consoleDetailMessages.current;
@@ -8537,10 +8719,12 @@ ${consoleDetailMessages.empty}`, {
       ...conversation
     });
   } catch (error) {
-    if (!controller.signal.aborted)
+    if (!response.destroyed)
       send(error instanceof ConversationTooLargeError ? 413 : 503, error instanceof ConversationTooLargeError ? "oversized" : "unavailable", error instanceof AssociationError ? error.message : error instanceof ConversationTooLargeError ? consoleDetailMessages.oversized : consoleDetailMessages.unavailable);
   } finally {
+    clearTimeout(timeout);
     response.off("close", cancel);
+    request.off("aborted", cancel);
   }
   return true;
 }
@@ -8820,15 +9004,19 @@ async function createConsoleServer(deps) {
   };
   const handle = async (request, response) => {
     const url2 = new URL(request.url ?? "/", "http://localhost");
-    if (["/api/graph/conversation", "/api/graph/session-labels"].includes(url2.pathname) && deps.storageApi && !readAuthorized2(request, url2, deps.storageApi.token)) {
+    if ([
+      "/api/graph/conversation",
+      "/api/graph/session-labels",
+      "/api/console/conversation"
+    ].includes(url2.pathname) && deps.storageApi && !readAuthorized2(request, url2, deps.storageApi.token)) {
       response.writeHead(401, { ...JSON_HEADERS5, "cache-control": "no-store" }).end(JSON.stringify({ version: 1, kind: "unauthorized" }));
       return;
     }
-    if (deps.console?.readConversation && deps.lifecycleHistoryApi && await handleConversationRoute(request, response, url2, {
+    if (deps.console?.readConversation && await handleConversationRoute(request, response, url2, {
       token: deps.console.token,
       enabled: deps.config.graphView?.enabled === true,
-      contentEnabled: deps.console.conversationContentEnabled === true,
-      reader: deps.lifecycleHistoryApi.reader,
+      contentEnabled: deps.console.conversationContentEnabled ?? deps.config.sessionHistory?.contentEnabled ?? true,
+      ...deps.lifecycleHistoryApi ? { reader: deps.lifecycleHistoryApi.reader } : {},
       resolveEndpoint: async (id) => deps.console?.historyEndpoint ?? await resolveEndpoint(id),
       observedSessionIDs: async () => buildConsoleState(await deps.readSnapshot()).sessions.map((session) => session.sessionID),
       readConversation: deps.console.readConversation
@@ -9248,7 +9436,7 @@ function parseOpencodeProviders(opencodeConfig) {
 function localRuntimeStates(config) {
   const map = new Map;
   for (const runtime of config.local.runtimes) {
-    map.set(runtime.id, { enabled: runtime.enabled });
+    map.set(runtime.defaultModel.providerID, { enabled: runtime.enabled });
   }
   return map;
 }
@@ -9256,7 +9444,7 @@ function disabledLocalProviderIDs(config) {
   const ids = new Set;
   for (const runtime of config.local.runtimes) {
     if (!runtime.enabled) {
-      ids.add(runtime.id);
+      ids.add(runtime.defaultModel.providerID);
     }
   }
   return ids;
@@ -9272,7 +9460,11 @@ function computeLive(model, isLocalProvider, liveModels) {
   if (!snapshot.reachable) {
     return "unreachable";
   }
-  return snapshot.modelIDs.has(model.modelID) ? "confirmed" : "not-advertised";
+  if (snapshot.modelIDs.has(model.modelID))
+    return "confirmed";
+  if (snapshot.residency?.has(model.modelID))
+    return snapshot.residency.get(model.modelID) === false ? "not-loaded" : "residency-unknown";
+  return "not-advertised";
 }
 function resolveAgentModel(model, context) {
   const isLocalProvider = KNOWN_LOCAL_PROVIDER_IDS.has(model.providerID) || context.localRuntimes.has(model.providerID);
@@ -11127,7 +11319,7 @@ async function runConsoleServe(deps, options) {
         ptyEnabled,
         createClient: makeClient,
         drilldownEnabled: graphViewEnabled,
-        conversationContentEnabled: config.console.sessionHistory?.contentEnabled === true,
+        conversationContentEnabled: config.console.sessionHistory?.contentEnabled !== false,
         ...config.console.sessionHistory?.endpoint !== undefined ? { historyEndpoint: config.console.sessionHistory.endpoint } : {},
         readConversation: createConversationReader({
           directory: deps.directory ?? process.cwd(),
@@ -16012,6 +16204,243 @@ function ensureFoundryV1BaseURL(endpoint) {
   }
 }
 
+// src/local/lemonadeResidency.ts
+import { z as z22 } from "zod";
+
+// src/messages/modelResidency.ts
+var reasons = {
+  unknown: "fresh residency metadata is unavailable, malformed, or ambiguous",
+  inactive: "the requested model is not verified as resident and serving",
+  identity: "the requested model identity can be rewritten or is ambiguous",
+  destination: "the request destination does not match its configured runtime",
+  transport: "this provider execution path cannot enforce the residency guard",
+  request: "this is not a supported, explicit model inference request",
+  cancelled: "the request was cancelled before residency could be verified",
+  timeout: "the residency metadata deadline expired",
+  configuration: "the residency guard configuration is invalid"
+};
+var modelResidencyMessages = {
+  blocked: (reason) => `[openteam] Lemonade model request blocked: ${reasons[reason]}.`,
+  providerDisabled: (providerID) => `[openteam] Lemonade provider "${providerID}" is disabled because its configured transport or runtime mapping cannot enforce loaded-only requests.`,
+  extractionRuntimeUnavailable: "[openteam] Memory extraction requires one enabled local runtime matching the configured extraction provider."
+};
+
+// src/local/lemonadeResidency.ts
+class ModelResidencyError extends Error {
+  code;
+  statusCode = 400;
+  isRetryable = false;
+  constructor(code) {
+    super(modelResidencyMessages.blocked(code));
+    this.code = code;
+    this.name = "ModelResidencyError";
+  }
+}
+var modelName = z22.string().min(1).refine((name) => name === name.trim());
+var LoadedModelSchema = z22.object({
+  model_name: modelName,
+  loaded: z22.boolean().optional(),
+  status: z22.string().optional(),
+  backend_alive: z22.boolean().optional(),
+  backend_health: z22.string().optional(),
+  watchdog_reset: z22.boolean().optional(),
+  watchdog_reset_reason: z22.string().optional(),
+  residency_class: z22.string().optional(),
+  slot_pool: z22.string().optional(),
+  checkpoint: z22.string().optional(),
+  type: z22.string().optional(),
+  device: z22.string().optional(),
+  backend_url: z22.string().optional(),
+  pid: z22.number().int().optional(),
+  launch_command: z22.unknown().optional(),
+  pinned: z22.boolean().optional(),
+  recipe: z22.string().optional(),
+  recipe_options: z22.unknown().optional(),
+  is_busy: z22.boolean().optional(),
+  is_streaming: z22.boolean().optional(),
+  max_context_window: z22.number().optional(),
+  cost_input_per_million: z22.number().optional(),
+  cost_output_per_million: z22.number().optional(),
+  last_use: z22.number().optional()
+}).strict();
+var TelemetrySchema = z22.object({
+  enabled: z22.boolean(),
+  captures: z22.array(z22.string()).optional()
+}).strict();
+var HealthSchema = z22.object({
+  status: z22.literal("ok"),
+  all_models_loaded: z22.array(LoadedModelSchema),
+  version: z22.string().optional(),
+  model_loaded: z22.string().nullable().optional(),
+  telemetry: TelemetrySchema.optional(),
+  max_models: z22.record(z22.string(), z22.number().int()).optional(),
+  pinned_models: z22.record(z22.string(), z22.number().int()).optional(),
+  pinned_helper_models: z22.record(z22.string(), z22.number().int()).optional(),
+  websocket_port: z22.number().int().optional(),
+  update_check_done: z22.boolean().optional()
+}).strict();
+var AliasSchema = z22.object({
+  alias: modelName,
+  target: modelName,
+  downloaded: z22.boolean().optional(),
+  recipe: z22.string().optional()
+}).strict();
+var AliasesSchema = z22.object({
+  aliases: z22.array(AliasSchema)
+}).strict();
+var MetadataRecordSchema = z22.record(z22.string(), z22.unknown());
+var inactiveStates = new Set([
+  "loading",
+  "downsizing",
+  "downsized",
+  "evicting",
+  "unloaded"
+]);
+var inactiveHealth = new Set(["stopped", "exited", "watchdog_reset"]);
+var standardPools = new Set([
+  "standard/llm",
+  "standard/embedding",
+  "standard/reranking",
+  "standard/transcription",
+  "standard/image",
+  "standard/tts",
+  "standard/audio-generation",
+  "standard/classification",
+  "standard/mesh"
+]);
+function usableState(entry) {
+  if (entry.loaded === false || entry.backend_alive === false || entry.watchdog_reset === true || typeof entry.status === "string" && inactiveStates.has(entry.status) || typeof entry.backend_health === "string" && inactiveHealth.has(entry.backend_health) || entry.residency_class === "routing_helper" || typeof entry.slot_pool === "string" && entry.slot_pool.startsWith("routing_helper/")) {
+    return false;
+  }
+  if (entry.loaded !== true || entry.backend_alive !== true || entry.watchdog_reset !== false || entry.status !== "ready" && entry.status !== "in_use" || entry.backend_health !== "ready" && entry.backend_health !== "busy" || entry.watchdog_reset_reason !== undefined && entry.watchdog_reset_reason !== "" || entry.residency_class !== undefined && entry.residency_class !== "standard" || entry.slot_pool !== undefined && (typeof entry.slot_pool !== "string" || !standardPools.has(entry.slot_pool))) {
+    return;
+  }
+  return true;
+}
+function projectMetadataObject(payload, keys) {
+  const record2 = MetadataRecordSchema.safeParse(payload);
+  if (!record2.success)
+    throw new ModelResidencyError("unknown");
+  return Object.fromEntries(keys.filter((key) => Object.hasOwn(record2.data, key)).map((key) => [key, record2.data[key]]));
+}
+function parseResidency(healthPayload, aliasPayload) {
+  const healthFields = projectMetadataObject(healthPayload, Object.keys(HealthSchema.shape));
+  if (Array.isArray(healthFields.all_models_loaded)) {
+    healthFields.all_models_loaded = healthFields.all_models_loaded.map((entry) => projectMetadataObject(entry, Object.keys(LoadedModelSchema.shape)));
+  }
+  if (healthFields.telemetry !== undefined) {
+    healthFields.telemetry = projectMetadataObject(healthFields.telemetry, Object.keys(TelemetrySchema.shape));
+  }
+  const aliasFields = projectMetadataObject(aliasPayload, Object.keys(AliasesSchema.shape));
+  if (Array.isArray(aliasFields.aliases)) {
+    aliasFields.aliases = aliasFields.aliases.map((entry) => projectMetadataObject(entry, Object.keys(AliasSchema.shape)));
+  }
+  const health = HealthSchema.safeParse(healthFields);
+  const aliases = AliasesSchema.safeParse(aliasFields);
+  if (!health.success || !aliases.success)
+    throw new ModelResidencyError("unknown");
+  const result = new Map;
+  for (const entry of health.data.all_models_loaded) {
+    if (result.has(entry.model_name))
+      throw new ModelResidencyError("unknown");
+    result.set(entry.model_name, {
+      loaded: entry.model_name.endsWith(":latest") ? undefined : usableState(entry),
+      metadata: entry
+    });
+  }
+  const seenAliases = new Set;
+  for (const entry of aliases.data.aliases) {
+    if (seenAliases.has(entry.alias))
+      throw new ModelResidencyError("unknown");
+    seenAliases.add(entry.alias);
+    result.set(entry.alias, {
+      loaded: undefined,
+      metadata: result.get(entry.alias)?.metadata ?? {}
+    });
+  }
+  return result;
+}
+function lemonadeBaseURL(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new ModelResidencyError("destination");
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.search !== "" || url.hash !== "" || !/^\/(?:api\/)?v[01]\/?$/.test(url.pathname)) {
+    throw new ModelResidencyError("destination");
+  }
+  return `${url.origin}${url.pathname.replace(/\/$/, "")}`;
+}
+async function withResidencyDeadline(operation, options) {
+  const timeoutMs = options.timeoutMs ?? 5000;
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new ModelResidencyError("configuration");
+  }
+  const controller = new AbortController;
+  const cancel = () => controller.abort(new ModelResidencyError("cancelled"));
+  if (options.signal?.aborted)
+    throw new ModelResidencyError("cancelled");
+  options.signal?.addEventListener("abort", cancel, { once: true });
+  const schedule = options.scheduleTimeout ?? ((callback, ms2) => {
+    const timer = setTimeout(callback, ms2);
+    return () => clearTimeout(timer);
+  });
+  let onAbort = () => {};
+  const aborted = new Promise((_, reject) => {
+    onAbort = () => reject(controller.signal.reason);
+    controller.signal.addEventListener("abort", onAbort, { once: true });
+  });
+  const clearTimer = schedule(() => controller.abort(new ModelResidencyError("timeout")), timeoutMs);
+  try {
+    controller.signal.throwIfAborted();
+    return await Promise.race([operation(controller.signal), aborted]);
+  } finally {
+    clearTimer();
+    options.signal?.removeEventListener("abort", cancel);
+    controller.signal.removeEventListener("abort", onAbort);
+    controller.abort();
+  }
+}
+async function metadata(url, fetch2, signal, headers) {
+  signal.throwIfAborted();
+  let payload;
+  try {
+    const response = await fetch2(url, {
+      method: "GET",
+      headers,
+      signal,
+      redirect: "error",
+      cache: "no-store"
+    });
+    signal.throwIfAborted();
+    if (!response.ok || response.redirected || response.url !== "" && response.url !== url) {
+      throw new ModelResidencyError("unknown");
+    }
+    payload = await response.json();
+  } catch {
+    signal.throwIfAborted();
+    throw new ModelResidencyError("unknown");
+  }
+  signal.throwIfAborted();
+  return payload;
+}
+async function readLemonadeResidency(baseURL, fetch2, options = {}) {
+  const base = lemonadeBaseURL(baseURL);
+  const headers = new Headers(options.headers);
+  headers.delete("content-type");
+  headers.delete("content-length");
+  headers.set("accept", "application/json");
+  headers.set("cache-control", "no-cache, no-store");
+  headers.delete("if-none-match");
+  headers.delete("if-modified-since");
+  return withResidencyDeadline(async (signal) => {
+    const aliases = await metadata(`${new URL(base).origin}/internal/aliases`, fetch2, signal, headers);
+    const health = await metadata(`${base}/health`, fetch2, signal, headers);
+    return parseResidency(health, aliases);
+  }, options);
+}
+
 // src/local/lemonade.ts
 var LEMONADE_DEFAULT_BASE_URL = "http://localhost:13305/api/v1";
 var NON_TEXT_LABELS = new Set([
@@ -16098,36 +16527,19 @@ function isNonTextModel(entry) {
   return entry.labels.some((label) => typeof label === "string" && NON_TEXT_LABELS.has(label));
 }
 async function readLoadedModels(baseURL, fetch2) {
-  let payload;
   try {
-    const response = await fetch2(`${baseURL}/health`, {
-      method: "GET",
-      headers: { accept: "application/json" }
-    });
-    if (!response.ok) {
-      return;
-    }
-    payload = await response.json();
+    const residency = await readLemonadeResidency(baseURL, fetch2);
+    return new Map([...residency].map(([name, entry]) => [
+      name,
+      {
+        loaded: entry.loaded,
+        slots: entry.loaded === true ? readSlotCount(entry.metadata) : undefined,
+        totalContextWindow: entry.loaded === true ? readLoadedContextWindow(entry.metadata) : undefined
+      }
+    ]));
   } catch {
     return;
   }
-  if (!isObject2(payload) || !Array.isArray(payload.all_models_loaded)) {
-    return;
-  }
-  const loaded = new Map;
-  for (const entry of payload.all_models_loaded) {
-    if (!isObject2(entry) || typeof entry.model_name !== "string") {
-      continue;
-    }
-    if (entry.loaded === false) {
-      continue;
-    }
-    loaded.set(entry.model_name, {
-      slots: readSlotCount(entry),
-      totalContextWindow: readLoadedContextWindow(entry)
-    });
-  }
-  return loaded;
 }
 function readSlotCount(entry) {
   return slotsFromLlamacppArgs(entry) ?? slotsFromLaunchCommand(entry);
@@ -16274,6 +16686,9 @@ function enrichWithLoadState(models, loaded) {
     if (hit === undefined) {
       return { ...base, loaded: false };
     }
+    if (hit.loaded !== true) {
+      return hit.loaded === false ? { ...base, loaded: false } : base;
+    }
     const contextWindow = derivedConservativeContextWindow(model.contextWindow, hit);
     return {
       ...base,
@@ -16290,6 +16705,11 @@ function isObject2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/local/modelResidency.ts
+function hasRequiredModelResidency(kind, model) {
+  return kind !== "lemonade" || model?.loaded === true;
+}
+
 // src/local/lmstudio.ts
 var LMSTUDIO_DEFAULT_BASE_URL = "http://localhost:1234/v1";
 function createLMStudioAdapter() {
@@ -16507,50 +16927,36 @@ function createDetect(exec) {
       foundryDiscovery: foundryDiscoveryFromExec(exec)
     });
     const snapshots = await registry.probe(DETECTION_RUNTIMES);
-    return snapshots.map((snapshot) => {
-      const detected = {
-        id: snapshot.id,
-        baseURL: snapshot.baseURL,
-        reachable: snapshot.reachable,
-        models: snapshot.models.map((model) => model.modelID)
-      };
-      if (snapshot.models.some((model) => model.loaded !== undefined)) {
-        detected.modelInfo = snapshot.models;
-      }
-      if (snapshot.error !== undefined) {
-        detected.error = snapshot.error;
-      }
-      return detected;
-    });
+    return DETECTION_RUNTIMES.map((runtime) => detectedRuntime(runtime, snapshots.find((snapshot) => snapshot.id === runtime.id)));
+  };
+}
+function detectedRuntime(runtime, snapshot) {
+  const modelInfo = snapshot?.models ?? [];
+  return {
+    id: runtime.id,
+    baseURL: snapshot?.baseURL ?? runtime.baseURL ?? "",
+    reachable: snapshot?.reachable ?? false,
+    models: modelInfo.filter((model) => hasRequiredModelResidency(localRuntimeKind(runtime), model)).map((model) => model.modelID),
+    modelInfo,
+    ...snapshot?.error === undefined ? {} : { error: snapshot.error }
   };
 }
 function createProbeRuntime(exec) {
-  return async (id, baseURL) => {
+  return async (kind, baseURL) => {
     const registry = new RuntimeRegistry({
       fetch: globalThis.fetch,
       clock: () => new Date().toISOString(),
       foundryDiscovery: foundryDiscoveryFromExec(exec)
     });
     const runtime = {
-      id,
+      id: kind,
+      kind,
       enabled: true,
       baseURL,
-      defaultModel: { providerID: id, modelID: "probe" }
+      defaultModel: { providerID: kind, modelID: "probe" }
     };
     const [snapshot] = await registry.probe([runtime]);
-    const detected = {
-      id,
-      baseURL: snapshot?.baseURL ?? baseURL,
-      reachable: snapshot?.reachable ?? false,
-      models: snapshot?.models.map((model) => model.modelID) ?? []
-    };
-    if (snapshot?.models.some((model) => model.loaded !== undefined) === true) {
-      detected.modelInfo = snapshot.models;
-    }
-    if (snapshot?.error !== undefined) {
-      detected.error = snapshot.error;
-    }
-    return detected;
+    return detectedRuntime(runtime, snapshot);
   };
 }
 
@@ -16663,11 +17069,11 @@ function planWorktreeReconciliation(input) {
 }
 
 // src/telemetry/otelConfig.ts
-import { z as z22 } from "zod";
-var OtelBackendConfigSchema = z22.object({
-  backend: z22.literal("opentelemetry"),
-  connectionEnv: z22.string().min(1),
-  serviceName: z22.string().min(1).optional()
+import { z as z23 } from "zod";
+var OtelBackendConfigSchema = z23.object({
+  backend: z23.literal("opentelemetry"),
+  connectionEnv: z23.string().min(1),
+  serviceName: z23.string().min(1).optional()
 }).strict();
 function parseConnectionString(raw) {
   const pairs = new Map;
@@ -17809,7 +18215,7 @@ import { posix as pathPosix, win32 as pathWin32 } from "node:path";
 // package.json
 var package_default = {
   name: "@jmanuelcorral/openteam",
-  version: "0.24.0",
+  version: "0.25.0",
   packageManager: "bun@1.3.14",
   description: "Cost-aware, local-first routing plugin for opencode with cheapest-capable frontier fallback and multi-agent orchestration.",
   license: "MIT",
@@ -17953,31 +18359,31 @@ function compareSemver(a, b) {
 }
 
 // src/graph/soakLedger.ts
-import { z as z23 } from "zod";
-var Sha256Schema2 = z23.string().regex(/^[0-9a-f]{64}$/);
-var SoakPlatformSchema = z23.enum(["linux", "win32", "darwin"]);
-var PrivacyPairSchema = z23.object({
-  surfacesScanned: z23.number().int().nonnegative(),
-  rawFindings: z23.number().int().nonnegative()
+import { z as z24 } from "zod";
+var Sha256Schema2 = z24.string().regex(/^[0-9a-f]{64}$/);
+var SoakPlatformSchema = z24.enum(["linux", "win32", "darwin"]);
+var PrivacyPairSchema = z24.object({
+  surfacesScanned: z24.number().int().nonnegative(),
+  rawFindings: z24.number().int().nonnegative()
 }).strict();
-var DuplicateEffectPairSchema = z23.object({
-  effectsExamined: z23.number().int().nonnegative(),
-  duplicatesFound: z23.number().int().nonnegative()
+var DuplicateEffectPairSchema = z24.object({
+  effectsExamined: z24.number().int().nonnegative(),
+  duplicatesFound: z24.number().int().nonnegative()
 }).strict();
-var ModelVerificationPairSchema = z23.object({
-  nodesChecked: z23.number().int().nonnegative(),
-  unverified: z23.number().int().nonnegative(),
-  mismatched: z23.number().int().nonnegative()
+var ModelVerificationPairSchema = z24.object({
+  nodesChecked: z24.number().int().nonnegative(),
+  unverified: z24.number().int().nonnegative(),
+  mismatched: z24.number().int().nonnegative()
 }).strict();
-var SoakObservationSchema = z23.object({
-  version: z23.literal(1),
-  seq: z23.number().int().nonnegative(),
-  timestamp: z23.string().datetime(),
+var SoakObservationSchema = z24.object({
+  version: z24.literal(1),
+  seq: z24.number().int().nonnegative(),
+  timestamp: z24.string().datetime(),
   platform: SoakPlatformSchema,
-  opencodeVersion: z23.string().min(1),
-  provenance: z23.enum(["genuine-usage", "ci-synthetic"]),
+  opencodeVersion: z24.string().min(1),
+  provenance: z24.enum(["genuine-usage", "ci-synthetic"]),
   traceDigest: Sha256Schema2,
-  criticalDivergences: z23.number().int().nonnegative().nullable(),
+  criticalDivergences: z24.number().int().nonnegative().nullable(),
   privacy: PrivacyPairSchema.nullable(),
   duplicateEffects: DuplicateEffectPairSchema.nullable(),
   modelVerification: ModelVerificationPairSchema.nullable(),
@@ -18259,6 +18665,12 @@ var KNOWN_RUNTIMES = [
     dynamicPort: true
   }
 ];
+var LEMONADE_PROJECT_CONFIG_CANDIDATES = [
+  ".opencode/opencode.jsonc",
+  ".opencode/opencode.json",
+  "opencode.jsonc",
+  "opencode.json"
+];
 function knownRuntime(id) {
   const found = KNOWN_RUNTIMES.find((runtime) => runtime.id === id);
   if (found === undefined) {
@@ -18275,7 +18687,44 @@ function choiceKind(choice) {
 function choiceProviderID(choice) {
   return choice.providerID ?? choice.id;
 }
+function selectableModelIDs(models, modelInfo, kind) {
+  const byID = new Map(modelInfo?.map((model) => [model.modelID, model]));
+  return models.filter((id) => hasRequiredModelResidency(kind, byID.get(id)));
+}
+function assertRuntimeResidency(choice, primary) {
+  const kind = localRuntimeKind(choice);
+  const references2 = [
+    choice.defaultModelID,
+    choice.thinkingModelID,
+    choice.coderModelID,
+    ...primary.providerID === choiceProviderID(choice) ? [primary.modelID] : []
+  ];
+  for (const id of references2) {
+    if (id === undefined)
+      continue;
+    const info = choice.models.includes(id) ? choice.modelInfo?.find((model) => model.modelID === id) : undefined;
+    if (!hasRequiredModelResidency(kind, info))
+      throw new Error(executionSetupMessages.lemonadeModelNotLoaded(`${choiceProviderID(choice)}/${id}`));
+  }
+}
+function assertSetupResidency(answers) {
+  for (const choice of answers.runtimes) {
+    if (choice.enabled) {
+      assertRuntimeResidency(choice, answers.primaryModel);
+    } else if (choiceProviderID(choice) === answers.primaryModel.providerID && !hasRequiredModelResidency(localRuntimeKind(choice), undefined)) {
+      throw new Error(executionSetupMessages.lemonadeModelNotLoaded(`${answers.primaryModel.providerID}/${answers.primaryModel.modelID}`));
+    }
+  }
+}
+function lemonadeV2Policies(providers) {
+  return [...new Set(providers)].sort().map((providerID) => {
+    if (providerID.length === 0 || /[*?\\/\s]/.test(providerID))
+      throw new Error(executionSetupMessages.lemonadeV2InvalidProvider(providerID));
+    return { action: "provider.use", resource: providerID, effect: "deny" };
+  });
+}
 function buildOpenTeamConfig(answers) {
+  assertSetupResidency(answers);
   const runtimes = answers.runtimes.filter((choice) => choice.enabled).map((choice) => {
     const runtime = {
       id: choice.id,
@@ -18344,6 +18793,8 @@ function orchestratorAgentModel(answers) {
   return { ...answers.primaryModel };
 }
 function buildOpencodeConfig(answers) {
+  assertSetupResidency(answers);
+  const policies = lemonadeV2Policies(answers.runtimes.filter((choice) => choice.enabled && choiceKind(choice) === "lemonade").map(choiceProviderID));
   const provider = {};
   const providerOwner = new Map;
   for (const choice of answers.runtimes) {
@@ -18356,7 +18807,7 @@ function buildOpencodeConfig(answers) {
       continue;
     }
     const providerID = choiceProviderID(choice);
-    const modelIDs = new Set(choice.models);
+    const modelIDs = new Set(selectableModelIDs(choice.models, choice.modelInfo, meta.id));
     modelIDs.add(choice.defaultModelID);
     if (choice.thinkingModelID !== undefined) {
       modelIDs.add(choice.thinkingModelID);
@@ -18412,6 +18863,8 @@ function buildOpencodeConfig(answers) {
   if (answers.yolo) {
     config.permission = { "*": "allow" };
   }
+  if (policies.length > 0)
+    config.experimental = { policies };
   return config;
 }
 function serializeOpencodeConfig(config) {
@@ -18511,10 +18964,11 @@ async function chooseFrontier(prompt, profiles) {
   }
   return parseFrontierRef(selected);
 }
-function orderModelChoices(models, modelInfo) {
+function orderModelChoices(models, modelInfo, kind) {
   const byID = new Map((modelInfo ?? []).map((model) => [model.modelID, model]));
   const anyLoadState = (modelInfo ?? []).some((model) => model.loaded !== undefined);
-  const decorated = models.map((modelID, index) => {
+  const offered = kind === undefined ? models : selectableModelIDs(models, modelInfo, kind);
+  const decorated = offered.map((modelID, index) => {
     const info = byID.get(modelID);
     return {
       modelID,
@@ -18540,27 +18994,34 @@ function modelStateSuffix(loaded, slots) {
   }
   return slots === undefined ? "(loaded)" : `(loaded · ${slots} slot${slots === 1 ? "" : "s"})`;
 }
-function preferredModelID(models, modelInfo) {
-  const loaded = (modelInfo ?? []).find((model) => model.loaded === true && models.includes(model.modelID));
-  return loaded?.modelID ?? models[0];
+function preferredModelID(models, modelInfo, kind) {
+  const offered = kind === undefined ? models : selectableModelIDs(models, modelInfo, kind);
+  const loaded = (modelInfo ?? []).find((model) => model.loaded === true && offered.includes(model.modelID));
+  return loaded?.modelID ?? offered[0];
 }
 async function chooseRuntimeModel(prompt, models, meta, modelInfo) {
-  if (models.length === 0) {
+  const offered = selectableModelIDs(models, modelInfo, meta.id);
+  if (offered.length === 0) {
+    if (meta.id === "lemonade")
+      throw new Error(executionSetupMessages.lemonadeNoLoadedModels);
     return prompt.text({
       message: `Default model for ${meta.label} (no models detected)`,
       placeholder: meta.fallbackModelID,
       initial: meta.fallbackModelID
     });
   }
-  const first = preferredModelID(models, modelInfo);
+  const first = preferredModelID(offered, modelInfo, meta.id);
   const opts = {
     message: `Default local model for ${meta.label}`,
-    choices: orderModelChoices(models, modelInfo)
+    choices: orderModelChoices(offered, modelInfo, meta.id)
   };
   if (first !== undefined) {
     opts.initial = first;
   }
-  return prompt.select(opts);
+  const selected = await prompt.select(opts);
+  if (meta.id === "lemonade" && !offered.includes(selected))
+    throw new Error(executionSetupMessages.lemonadeModelNotLoaded(selected));
+  return selected;
 }
 function remoteBaseURLExample(meta) {
   const base = meta.defaultBaseURL ?? "http://localhost:11434/v1";
@@ -18615,6 +19076,8 @@ async function resolveRuntimeConnection(deps, meta, info) {
     initial: RUNTIME_LOCATION_LOCAL
   });
   if (location === RUNTIME_LOCATION_LOCAL) {
+    if (meta.id === "lemonade" && info?.reachable !== true)
+      throw new Error(executionSetupMessages.lemonadeProbeFailed);
     const baseURL2 = info?.baseURL !== undefined && info.baseURL.length > 0 ? info.baseURL : meta.defaultBaseURL;
     return { baseURL: baseURL2, ...connectionOf(info) };
   }
@@ -18624,16 +19087,26 @@ async function resolveRuntimeConnection(deps, meta, info) {
   });
   const baseURL = normalizeRemoteBaseURL(entered, meta.defaultBaseURL);
   let probedRuntime;
+  if (meta.id === "lemonade" && deps.probeRuntime === undefined)
+    throw new Error(executionSetupMessages.lemonadeProbeRequired);
   if (deps.probeRuntime !== undefined) {
     try {
       probedRuntime = await deps.probeRuntime(meta.id, baseURL);
-    } catch {}
+    } catch (cause) {
+      if (meta.id === "lemonade")
+        throw new Error(executionSetupMessages.lemonadeProbeFailed, { cause });
+    }
+    if (meta.id === "lemonade" && probedRuntime?.reachable !== true)
+      throw new Error(executionSetupMessages.lemonadeProbeFailed);
   }
   return { baseURL, ...connectionOf(probedRuntime) };
 }
 async function chooseClassModel(prompt, models, meta, defaultModelID, modelClass, modelInfo) {
   const label = modelClass === "thinking" ? `Thinking model for ${meta.label} (design, analysis, review reasoning)` : `Coder model for ${meta.label} (writing and editing code)`;
-  if (models.length === 0) {
+  const offered = selectableModelIDs(models, modelInfo, meta.id);
+  if (offered.length === 0) {
+    if (meta.id === "lemonade")
+      throw new Error(executionSetupMessages.lemonadeNoLoadedModels);
     const raw = await prompt.text({
       message: `${label} — enter to reuse the default`,
       placeholder: defaultModelID,
@@ -18641,14 +19114,17 @@ async function chooseClassModel(prompt, models, meta, defaultModelID, modelClass
     });
     return raw.trim().length > 0 ? raw.trim() : defaultModelID;
   }
-  return prompt.select({
+  const selected = await prompt.select({
     message: label,
-    choices: orderModelChoices(models, modelInfo).map((choice) => ({
+    choices: orderModelChoices(offered, modelInfo, meta.id).map((choice) => ({
       value: choice.value,
       label: choice.value === defaultModelID ? `${choice.label} — default` : choice.label
     })),
     initial: defaultModelID
   });
+  if (meta.id === "lemonade" && !offered.includes(selected))
+    throw new Error(executionSetupMessages.lemonadeModelNotLoaded(selected));
+  return selected;
 }
 async function resolveEnabledRuntime(deps, meta, info) {
   const connection = await resolveRuntimeConnection(deps, meta, info);
@@ -18661,7 +19137,8 @@ async function resolveEnabledRuntime(deps, meta, info) {
     defaultModelID,
     thinkingModelID,
     coderModelID,
-    models: connection.models
+    models: selectableModelIDs(connection.models, connection.modelInfo, meta.id),
+    ...connection.modelInfo === undefined ? {} : { modelInfo: connection.modelInfo }
   };
   if (connection.baseURL !== undefined) {
     choice.baseURL = connection.baseURL;
@@ -19161,17 +19638,52 @@ async function readExistingOpencodeConfigFiles(paths, deps) {
 function opencodeFileAt(files, path2) {
   return files.find((file) => file.path === path2);
 }
-function mergeExistingOpencodeConfigFiles(files) {
+function mergeExistingOpencodeConfigFiles(files, paths, planned = new Map) {
   let merged;
-  for (const path2 of [...OPENCODE_CONFIG_CANDIDATES].reverse()) {
-    const file = opencodeFileAt(files, path2);
-    if (file === undefined) {
+  for (const path2 of [...paths].reverse()) {
+    const raw = planned.get(path2) ?? opencodeFileAt(files, path2)?.raw;
+    if (raw === undefined) {
       continue;
     }
-    merged = merged === undefined ? file.raw : mergeOpencodeConfigs(merged, file.raw);
+    merged = merged === undefined ? raw : mergeOpencodeConfigs(merged, raw);
   }
   return merged;
 }
+async function effectiveSetupConfig(portable, files, deps) {
+  const optionsByLoader = new Map;
+  for (const file of files) {
+    if (!Array.isArray(file.raw.plugin))
+      continue;
+    for (const entry of [...file.raw.plugin].reverse()) {
+      const spec = extractPluginSpec(entry);
+      if (spec === undefined)
+        continue;
+      let identity;
+      if (isOpenteamNpmSpec(spec)) {
+        identity = OPENTEAM_PACKAGE_NAME;
+      } else if (isLocalFileSpec(spec) && await classifyLocalPluginSpecForSetup(spec, file.path, deps.classifyLocalPluginSpec) === "ours") {
+        const resolved = resolvePluginSpecPath(spec, file.path);
+        if (resolved === undefined)
+          throw new Error(executionSetupMessages.lemonadeEffectiveConfigAmbiguous);
+        identity = resolved;
+      } else {
+        continue;
+      }
+      if (!optionsByLoader.has(identity)) {
+        optionsByLoader.set(identity, Array.isArray(entry) ? entry[1] : undefined);
+      }
+    }
+  }
+  const overlayText = await deps.readFile(DEFAULT_LOCAL_OVERLAY_PATH);
+  const overlay = overlayText === undefined ? undefined : parseConfigFileJson(DEFAULT_LOCAL_OVERLAY_PATH, overlayText);
+  const resolutions = [
+    ...optionsByLoader.size > 0 ? optionsByLoader.values() : [undefined]
+  ].map((options) => validateConfigInput(executionSetupMessages.lemonadeEffectiveConfigLabel, mergeConfigInputs(mergeConfigInputs(portable, configOptionsFromPluginOptions(options)), overlay)));
+  const effective = resolutions[0];
+  if (effective === undefined || resolutions.some((config) => JSON.stringify(config) !== JSON.stringify(effective)))
+    throw new Error(executionSetupMessages.lemonadeEffectiveConfigAmbiguous);
+  return effective;
+}
 function relevantLocalProviderIDs(generated, existingOpenTeamConfig) {
   const ids = new Set(Object.keys(generated.provider ?? {}));
   for (const runtime of existingOpenTeamConfig?.local.runtimes ?? []) {
@@ -19348,15 +19860,42 @@ function highestExistingPinVersion(files) {
   }
   return highest;
 }
+function reconcileLemonadeV2Policies(raw, denials) {
+  if (denials.length === 0)
+    return raw;
+  const experimental = raw.experimental;
+  if (experimental !== undefined && !isRecord6(experimental))
+    throw new Error(executionSetupMessages.lemonadeV2InvalidPolicies);
+  const policies = experimental?.policies;
+  if (policies !== undefined && !Array.isArray(policies))
+    throw new Error(executionSetupMessages.lemonadeV2InvalidPolicies);
+  const existing = policies ?? [];
+  for (const policy of existing) {
+    if (!isRecord6(policy) || policy.action !== "provider.use" || typeof policy.resource !== "string" || policy.effect !== "allow" && policy.effect !== "deny")
+      throw new Error(executionSetupMessages.lemonadeV2InvalidPolicies);
+  }
+  const terminal = denials.every((denial, index) => {
+    const policy = existing[existing.length - denials.length + index];
+    return isRecord6(policy) && Object.keys(policy).length === 3 && policy.action === denial.action && policy.resource === denial.resource && policy.effect === denial.effect;
+  });
+  if (terminal)
+    return raw;
+  return {
+    ...raw,
+    experimental: { ...experimental, policies: [...existing, ...denials] }
+  };
+}
 function mergeOpencodeConfigForRerun(generated, targetRaw, options) {
   const effectiveRaw = options.effectiveRaw ?? targetRaw;
   const includePlugin = options.includePlugin ?? true;
+  const managesV2Policies = (generated.experimental?.policies.length ?? 0) > 0;
   const managedKeys = new Set([
     "$schema",
     "provider",
     "model",
     "small_model",
     "permission",
+    ...managesV2Policies ? ["experimental"] : [],
     ...includePlugin ? ["plugin"] : []
   ]);
   const unknownFields = {};
@@ -19419,7 +19958,10 @@ function mergeOpencodeConfigForRerun(generated, targetRaw, options) {
   if (permission !== undefined) {
     result.permission = permission;
   }
-  return result;
+  if (managesV2Policies && hasOwn2(targetRaw, "experimental")) {
+    result.experimental = targetRaw.experimental;
+  }
+  return reconcileLemonadeV2Policies(result, generated.experimental?.policies ?? []);
 }
 function mergeOpenTeamConfigForRerun(generated, existing) {
   const existingOrch = existing.orchestrator;
@@ -19469,6 +20011,21 @@ function mergeOpenTeamConfigForRerun(generated, existing) {
   assertEffectiveConfigModelDomains(merged);
   return merged;
 }
+function preserveRetainedLemonadeRuntimes(generated, previous, opencode) {
+  const providers = recordAt2(opencode, "provider") ?? {};
+  const retained = (previous?.local.runtimes ?? []).filter((runtime) => localRuntimeKind(runtime) === "lemonade" && hasOwn2(providers, runtime.defaultModel.providerID));
+  const deselected = retained.filter((runtime) => !generated.local.runtimes.some((selected) => selected.defaultModel.providerID === runtime.defaultModel.providerID)).map((runtime) => ({ ...runtime, enabled: false }));
+  return {
+    config: deselected.length === 0 ? generated : OpenTeamConfigSchema.parse({
+      ...generated,
+      local: {
+        ...generated.local,
+        runtimes: [...generated.local.runtimes, ...deselected]
+      }
+    }),
+    providerIDs: retained.map((runtime) => runtime.defaultModel.providerID)
+  };
+}
 async function existingPluginOwnerPath(files, classifyLocalPluginSpec) {
   let unknownLocalPlugin;
   for (const file of files) {
@@ -19496,6 +20053,86 @@ async function confirmJsonNormalization(prompt, path2, format) {
     initial: false
   });
 }
+function assertPreviousLemonadePrimary(answers, previousConfig) {
+  const priorLemonadePrimary = previousConfig?.local.runtimes.some((runtime) => runtime.defaultModel.providerID === answers.primaryModel.providerID && localRuntimeKind(runtime) === "lemonade");
+  if (priorLemonadePrimary && !answers.runtimes.some((choice) => choice.enabled && choiceProviderID(choice) === answers.primaryModel.providerID)) {
+    throw new Error(executionSetupMessages.lemonadeModelNotLoaded(`${answers.primaryModel.providerID}/${answers.primaryModel.modelID}`));
+  }
+}
+async function verifyLemonadeBeforeWrite(deps, answers, config, opencode) {
+  for (const choice of answers.runtimes) {
+    if (choice.enabled && localRuntimeKind(choice) === "lemonade" && !config.local.runtimes.some((runtime) => runtime.enabled && runtime.defaultModel.providerID === choiceProviderID(choice) && localRuntimeKind(runtime) === "lemonade"))
+      throw new Error(executionSetupMessages.lemonadeEndpointMismatch);
+  }
+  for (const runtime of config.local.runtimes) {
+    if (localRuntimeKind(runtime) !== "lemonade")
+      continue;
+    const providerID = runtime.defaultModel.providerID;
+    const provider = isRecord6(opencode.provider) ? opencode.provider[providerID] : undefined;
+    if (!runtime.enabled && provider === undefined)
+      continue;
+    const endpoint = isRecord6(provider) ? (isRecord6(provider.options) ? provider.options.baseURL : undefined) ?? provider.api : undefined;
+    if (typeof endpoint !== "string" || lemonadeBaseURL(endpoint) !== lemonadeBaseURL(runtime.baseURL ?? LEMONADE_DEFAULT_BASE_URL) || config.local.runtimes.filter((candidate) => candidate.defaultModel.providerID === providerID).length !== 1)
+      throw new Error(executionSetupMessages.lemonadeEndpointMismatch);
+    if (!runtime.enabled)
+      continue;
+    if (deps.probeRuntime === undefined)
+      throw new Error(executionSetupMessages.lemonadeProbeRequired);
+    const references2 = new Set([
+      runtime.defaultModel.modelID,
+      runtime.thinkingModel,
+      runtime.coderModel
+    ]);
+    for (const choice of answers.runtimes) {
+      if (choice.enabled && choiceProviderID(choice) === providerID) {
+        for (const id of [
+          ...choice.models,
+          choice.defaultModelID,
+          choice.thinkingModelID,
+          choice.coderModelID
+        ])
+          references2.add(id);
+      }
+    }
+    for (const ref of [
+      answers.primaryModel,
+      config.orchestrator?.primary?.model,
+      config.router.localDefault
+    ]) {
+      if (ref !== null && typeof ref === "object" && ref.providerID === providerID)
+        references2.add(ref.modelID);
+    }
+    for (const key of ["model", "small_model"]) {
+      const ref = opencode[key];
+      if (typeof ref === "string" && ref.startsWith(`${providerID}/`))
+        references2.add(ref.slice(providerID.length + 1));
+    }
+    const models = isRecord6(provider) ? recordAt2(provider, "models") : undefined;
+    const wireIDs = new Set;
+    for (const alias of references2) {
+      if (alias === undefined)
+        continue;
+      const declaration = recordAt2(models, alias);
+      const wireID = declaration !== undefined && hasOwn2(declaration, "id") ? declaration.id : alias;
+      if (declaration === undefined || typeof wireID !== "string" || wireID.length === 0 || wireID !== wireID.trim())
+        throw new Error(executionSetupMessages.lemonadeModelIdentityUnknown(`${providerID}/${alias}`));
+      wireIDs.add(wireID);
+    }
+    let fresh;
+    try {
+      fresh = await deps.probeRuntime(localRuntimeKind(runtime), endpoint);
+    } catch (cause) {
+      throw new Error(executionSetupMessages.lemonadeProbeFailed, { cause });
+    }
+    if (!fresh.reachable || fresh.id !== localRuntimeKind(runtime) || fresh.baseURL.replace(/\/+$/, "") !== endpoint.replace(/\/+$/, ""))
+      throw new Error(executionSetupMessages.lemonadeProbeFailed);
+    for (const wireID of wireIDs) {
+      const info = fresh.models.includes(wireID) ? fresh.modelInfo?.find((model) => model.modelID === wireID) : undefined;
+      if (!hasRequiredModelResidency("lemonade", info))
+        throw new Error(executionSetupMessages.lemonadeModelNotLoaded(`${providerID}/${wireID}`));
+    }
+  }
+}
 async function runSetup(deps) {
   const { prompt } = deps;
   try {
@@ -19507,7 +20144,7 @@ async function runSetup(deps) {
       return {
         value: meta.id,
         label: meta.label,
-        hint: info?.reachable ? `detected · ${info.models.length} model(s)` : "not detected (you can point it to another machine)",
+        hint: info?.reachable ? meta.id === "lemonade" ? executionSetupMessages.lemonadeDetectedHint(selectableModelIDs(info.models, info.modelInfo, meta.id).length, info.modelInfo?.length ?? info.models.length) : `detected · ${info.models.length} model(s)` : "not detected (you can point it to another machine)",
         selected: info?.reachable ?? false
       };
     });
@@ -19624,17 +20261,18 @@ async function runSetup(deps) {
     };
     const openTeamConfig = buildOpenTeamConfig(answers);
     const opencodeConfig = buildOpencodeConfig(answers);
+    const opencodeConfigPaths = LEMONADE_PROJECT_CONFIG_CANDIDATES;
     const orchestratorAgent = buildOrchestratorAgent(orchestratorAgentModel(answers), { yolo });
     const slashCommands = buildOpenteamCommands();
     const openTeamPath = DEFAULT_CONFIG_PATH;
-    const existingOpencodePath = await deps.resolveOpencodeWriteTarget(OPENCODE_CONFIG_CANDIDATES);
+    const existingOpencodePath = await deps.resolveOpencodeWriteTarget(opencodeConfigPaths);
     const opencodeDataPath = existingOpencodePath ?? OPENCODE_CONFIG_CANDIDATES[0];
     const agentPath = ORCHESTRATOR_AGENT_PATH;
     let existingOpenTeamConfig;
     let existingOpencodeFiles;
     try {
       existingOpenTeamConfig = await readExistingOpenTeamConfig(openTeamPath, deps);
-      existingOpencodeFiles = await readExistingOpencodeConfigFiles(OPENCODE_CONFIG_CANDIDATES, deps);
+      existingOpencodeFiles = await readExistingOpencodeConfigFiles(opencodeConfigPaths, deps);
     } catch (error) {
       if (error instanceof ConfigParseError) {
         return {
@@ -19644,7 +20282,29 @@ async function runSetup(deps) {
       }
       throw error;
     }
-    const effectiveExistingOpencode = mergeExistingOpencodeConfigFiles(existingOpencodeFiles);
+    assertPreviousLemonadePrimary(answers, existingOpenTeamConfig);
+    const effectiveExistingOpencode = mergeExistingOpencodeConfigFiles(existingOpencodeFiles, opencodeConfigPaths);
+    const {
+      config: finalOpenTeamConfig,
+      providerIDs: retainedLemonadeProviderIDs
+    } = preserveRetainedLemonadeRuntimes(existingOpenTeamConfig !== undefined ? mergeOpenTeamConfigForRerun(openTeamConfig, existingOpenTeamConfig) : openTeamConfig, existingOpenTeamConfig, effectiveExistingOpencode);
+    assertEffectiveConfigModelDomains(finalOpenTeamConfig);
+    const effectiveOpenTeamConfig = await effectiveSetupConfig(finalOpenTeamConfig, existingOpencodeFiles, deps);
+    assertEffectiveConfigModelDomains(effectiveOpenTeamConfig);
+    for (const providerID of retainedLemonadeProviderIDs) {
+      const matches = effectiveOpenTeamConfig.local.runtimes.filter((runtime) => runtime.defaultModel.providerID === providerID);
+      if (matches.length !== 1 || matches[0] === undefined || localRuntimeKind(matches[0]) !== "lemonade")
+        throw new Error(executionSetupMessages.lemonadeRetainedProviderUnprotected(providerID));
+    }
+    const v2Denials = lemonadeV2Policies([
+      ...opencodeConfig.experimental?.policies.map((policy) => policy.resource) ?? [],
+      ...effectiveOpenTeamConfig.local.runtimes.filter((runtime) => localRuntimeKind(runtime) === "lemonade").map((runtime) => runtime.defaultModel.providerID)
+    ]);
+    if (v2Denials.length > 0)
+      opencodeConfig.experimental = { policies: v2Denials };
+    const v2Notice = v2Denials.length > 0 ? executionSetupMessages.lemonadeV2Restriction(v2Denials.map((policy) => policy.resource)) : undefined;
+    if (v2Notice !== undefined)
+      prompt.note(v2Notice, executionSetupMessages.lemonadeV2Title);
     const relevantProviderIDs = relevantLocalProviderIDs(opencodeConfig, existingOpenTeamConfig);
     for (const file of existingOpencodeFiles) {
       assertRelevantLimitNumbers(file, relevantProviderIDs);
@@ -19673,8 +20333,6 @@ async function runSetup(deps) {
     const pluginOwnerFile = opencodeFileAt(existingOpencodeFiles, pluginOwnerPath);
     const pluginPlan = await mergePluginEntriesForRerun(Array.isArray(pluginOwnerFile?.raw.plugin) ? pluginOwnerFile.raw.plugin : [], pluginOwnerPath, preservePlugin, deps.classifyLocalPluginSpec);
     const includePluginInDataFile = pluginOwnerPath === opencodeDataPath;
-    const finalOpenTeamConfig = existingOpenTeamConfig !== undefined ? mergeOpenTeamConfigForRerun(openTeamConfig, existingOpenTeamConfig) : openTeamConfig;
-    assertEffectiveConfigModelDomains(finalOpenTeamConfig);
     const dataTargetRaw = opencodeFileAt(existingOpencodeFiles, opencodeDataPath)?.raw ?? {};
     const mergedOpencodeRaw = mergeOpencodeConfigForRerun(opencodeConfig, dataTargetRaw, {
       ...effectiveExistingOpencode !== undefined ? { effectiveRaw: effectiveExistingOpencode } : {},
@@ -19689,7 +20347,7 @@ async function runSetup(deps) {
       providerIDs: relevantProviderIDs
     });
     const opencodeWritePlan = new Map([
-      [opencodeDataPath, serializeOpencodeConfig(repairedDataTarget.raw)]
+      [opencodeDataPath, repairedDataTarget.raw]
     ]);
     for (const file of existingOpencodeFiles) {
       if (file.path === opencodeDataPath) {
@@ -19701,14 +20359,14 @@ async function runSetup(deps) {
         generated: opencodeConfig,
         providerIDs: relevantProviderIDs
       });
-      let plannedRaw = repaired.raw;
-      let changed = repaired.changed;
+      let plannedRaw = reconcileLemonadeV2Policies(repaired.raw, v2Denials);
+      let changed = repaired.changed || plannedRaw !== repaired.raw;
       if (file.path === pluginOwnerPath && !includePluginInDataFile && pluginPlan.changed) {
         plannedRaw = { ...plannedRaw, plugin: [...pluginPlan.plugins] };
         changed = true;
       }
       if (changed) {
-        opencodeWritePlan.set(file.path, serializeOpencodeConfig(plannedRaw));
+        opencodeWritePlan.set(file.path, plannedRaw);
       }
     }
     const opencodeGitignorePath = OPENCODE_GITIGNORE_PATH;
@@ -19772,9 +20430,13 @@ async function runSetup(deps) {
         stdout: shouldWriteOpencodeGitignore ? `setup cancelled by user; ${OPENCODE_GITIGNORE_PATH} ensured` : "setup cancelled by user"
       };
     }
+    const effectivePlannedOpencode = mergeExistingOpencodeConfigFiles(existingOpencodeFiles, opencodeConfigPaths, opencodeWritePlan);
+    if (effectivePlannedOpencode === undefined)
+      throw new Error(executionSetupMessages.lemonadeEndpointMismatch);
+    await verifyLemonadeBeforeWrite(deps, answers, effectiveOpenTeamConfig, effectivePlannedOpencode);
     await deps.writeFile(openTeamPath, serializeOpenTeamConfig(finalOpenTeamConfig));
     for (const [path2, contents] of opencodeWritePlan) {
-      await deps.writeFile(path2, contents);
+      await deps.writeFile(path2, serializeOpencodeConfig(contents));
     }
     await deps.writeFile(agentPath, orchestratorAgent);
     for (const command of slashCommands) {
@@ -19805,7 +20467,11 @@ async function runSetup(deps) {
     prompt.outro(executionSetupMessages.done);
     return {
       exitCode: 0,
-      stdout: executionSetupMessages.complete(`${writtenOpencodePaths}, ${DEFAULT_CONFIG_PATH}, ${ORCHESTRATOR_AGENT_PATH}, ${OPENTEAM_COMMAND_DIR}/*.md, ${OPENCODE_GITIGNORE_PATH}`)
+      stdout: [
+        executionSetupMessages.complete(`${writtenOpencodePaths}, ${DEFAULT_CONFIG_PATH}, ${ORCHESTRATOR_AGENT_PATH}, ${OPENTEAM_COMMAND_DIR}/*.md, ${OPENCODE_GITIGNORE_PATH}`),
+        ...v2Notice === undefined ? [] : [v2Notice]
+      ].join(`
+`)
     };
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
@@ -20460,7 +21126,7 @@ import {
 import { basename as basename3, dirname as dirname8, join as join19, relative as relative2, resolve as resolve11, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify as promisify2 } from "node:util";
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 var NPM_ORIGIN = "https://registry.npmjs.org";
 var NPM_PACKAGE_PATH = "/@jmanuelcorral%2Fopenteam";
 var NPM_LATEST_URL = `${NPM_ORIGIN}${NPM_PACKAGE_PATH}/latest`;
@@ -20479,9 +21145,9 @@ var UPGRADE_BACKUP_DIRECTORY = ".opencode/openteam-local/upgrade-backups";
 function npmVersionUrl(version) {
   return `${NPM_ORIGIN}${NPM_PACKAGE_PATH}/${version}`;
 }
-var RegistryPackageIdentitySchema = z24.object({
-  name: z24.string(),
-  version: z24.string()
+var RegistryPackageIdentitySchema = z25.object({
+  name: z25.string(),
+  version: z25.string()
 }).strict();
 
 class TransientFetchError extends Error {
@@ -22140,12 +22806,19 @@ function defaultModelFromOpencode(opencodeConfig) {
   }
   return;
 }
-function liveModelsFromSnapshots(snapshots) {
+function liveModelsFromSnapshots(snapshots, config) {
   const map = new Map;
   for (const snapshot of snapshots) {
-    map.set(snapshot.id, {
+    const runtime = config.local.runtimes.find((runtime2) => runtime2.id === snapshot.id);
+    if (runtime === undefined || !runtime.enabled)
+      continue;
+    const kind = localRuntimeKind(runtime);
+    map.set(runtime.defaultModel.providerID, {
       reachable: snapshot.reachable,
-      modelIDs: new Set(snapshot.models.map((model) => model.modelID))
+      modelIDs: new Set(snapshot.models.filter((model) => hasRequiredModelResidency(kind, model)).map((model) => model.modelID)),
+      ...kind === "lemonade" ? {
+        residency: new Map(snapshot.models.map((model) => [model.modelID, model.loaded]))
+      } : {}
     });
   }
   return map;
@@ -22431,7 +23104,7 @@ async function runCli(argv, deps) {
       const agentModels = diagnoseAgentModels(agentFiles, {
         opencodeProviders: parseOpencodeProviders(opencodeConfig),
         localRuntimes: localRuntimeStates(config),
-        liveModels: liveModelsFromSnapshots(snapshots),
+        liveModels: liveModelsFromSnapshots(snapshots, config),
         sourceDir: deps.agentDir,
         ...defaultModel !== undefined ? { defaultModel } : {}
       });
@@ -22470,29 +23143,53 @@ async function runCli(argv, deps) {
       const rosterMissing = deps.loadRosterForDoctor !== undefined && roster === undefined && rosterLoadError === undefined;
       const orchestratorAgentName = ORCHESTRATOR_AGENT_PATH.slice(ORCHESTRATOR_AGENT_PATH.lastIndexOf("/") + 1).replace(/\.md$/, "");
       const orchestratorAgentMissing = !agentFiles.some((file) => file.name === orchestratorAgentName);
+      const inventoryNotes = [];
+      const readySnapshots = snapshots.map((snapshot) => {
+        const runtime = config.local.runtimes.find((runtime2) => runtime2.id === snapshot.id);
+        if (runtime === undefined || localRuntimeKind(runtime) !== "lemonade")
+          return snapshot;
+        inventoryNotes.push(executionSetupMessages.lemonadeInventory(runtime.id, runtime.defaultModel.providerID, snapshot.models));
+        return {
+          ...snapshot,
+          models: snapshot.models.filter((model) => hasRequiredModelResidency(localRuntimeKind(runtime), model))
+        };
+      });
+      const residencyNotes = agentModels.flatMap((agent) => {
+        const live = agent.resolution?.live;
+        if (agent.model === undefined || live !== "not-loaded" && live !== "residency-unknown")
+          return [];
+        return [
+          executionSetupMessages.lemonadeAgentResidency(agent.name, `${agent.model.providerID}/${agent.model.modelID}`, live)
+        ];
+      });
       return {
         exitCode: 0,
-        stdout: renderDoctor({
-          config,
-          snapshots,
-          telemetryPath,
-          telemetryRecords: records.length,
-          agentModels,
-          opencodeConfigPaths,
-          ...opencodeConfig !== undefined ? { opencodeConfig } : {},
-          ...queueWait !== undefined ? { queueWait } : {},
-          ...rosterAudit !== undefined ? { rosterAudit } : {},
-          ...rosterRoleCount !== undefined ? { rosterRoleCount } : {},
-          ...rosterLoadError !== undefined ? { rosterLoadError } : {},
-          ...rosterMissing ? { rosterMissing } : {},
-          ...orchestratorAgentMissing ? { orchestratorAgentMissing } : {},
-          ...diagnostics !== undefined && diagnostics.length > 0 ? { diagnostics } : {},
-          ...opencodeConfigError !== undefined ? { opencodeConfigError } : {},
-          ...cacheEntries !== undefined ? { cacheEntries, cliVersion: deps.version } : {},
-          ...legacyLayout !== undefined && legacyLayout.length > 0 ? { legacyLayout } : {},
-          ...otelBackend !== undefined ? { otelBackend } : {},
-          ...gitignoreCoverage !== undefined ? { gitignore: gitignoreCoverage } : {}
-        })
+        stdout: [
+          renderDoctor({
+            config,
+            snapshots: readySnapshots,
+            telemetryPath,
+            telemetryRecords: records.length,
+            agentModels,
+            opencodeConfigPaths,
+            ...opencodeConfig !== undefined ? { opencodeConfig } : {},
+            ...queueWait !== undefined ? { queueWait } : {},
+            ...rosterAudit !== undefined ? { rosterAudit } : {},
+            ...rosterRoleCount !== undefined ? { rosterRoleCount } : {},
+            ...rosterLoadError !== undefined ? { rosterLoadError } : {},
+            ...rosterMissing ? { rosterMissing } : {},
+            ...orchestratorAgentMissing ? { orchestratorAgentMissing } : {},
+            ...diagnostics !== undefined && diagnostics.length > 0 ? { diagnostics } : {},
+            ...opencodeConfigError !== undefined ? { opencodeConfigError } : {},
+            ...cacheEntries !== undefined ? { cacheEntries, cliVersion: deps.version } : {},
+            ...legacyLayout !== undefined && legacyLayout.length > 0 ? { legacyLayout } : {},
+            ...otelBackend !== undefined ? { otelBackend } : {},
+            ...gitignoreCoverage !== undefined ? { gitignore: gitignoreCoverage } : {}
+          }),
+          ...inventoryNotes,
+          ...residencyNotes
+        ].join(`
+`)
       };
     }
     if (command === "migrate") {
@@ -22609,14 +23306,14 @@ ${HELP}`
 }
 
 // src/orchestrator/roster.ts
-import { z as z25 } from "zod";
-var RosterEntrySchema = z25.object({
-  roleID: z25.string().min(1),
-  agentName: z25.string().min(1)
+import { z as z26 } from "zod";
+var RosterEntrySchema = z26.object({
+  roleID: z26.string().min(1),
+  agentName: z26.string().min(1)
 }).strict();
-var RosterSchema = z25.object({
-  universe: z25.string().min(1),
-  entries: z25.array(RosterEntrySchema)
+var RosterSchema = z26.object({
+  universe: z26.string().min(1),
+  entries: z26.array(RosterEntrySchema)
 }).strict();
 var ROSTER_JSON_FENCE = /```json\s*([\s\S]*?)```/;
 
@@ -23170,7 +23867,7 @@ import { readFile as readFile4 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname9 } from "node:path";
 
 // src/graph/certificate.ts
-import { z as z26 } from "zod";
+import { z as z27 } from "zod";
 
 // src/contract/opencode.ts
 var SUPPORTED_OPENCODE_VERSIONS = [
@@ -23211,7 +23908,7 @@ function isCertificateVersionCompatible(certifiedVersion, liveVersion) {
 
 // src/graph/certificate.ts
 var SHADOW_CERTIFICATE_MIN_RUNS = 1000;
-var DivergenceCodeSchema = z26.enum([
+var DivergenceCodeSchema = z27.enum([
   "status",
   "order",
   "roles",
@@ -23219,50 +23916,50 @@ var DivergenceCodeSchema = z26.enum([
   "fixes",
   "outcome"
 ]);
-var ProvenanceSchema = z26.enum([
+var ProvenanceSchema = z27.enum([
   "recomputed",
   "compiled",
   "validated",
   "carried"
 ]);
-var EvidenceSchema = z26.object({
-  opencodeVersion: z26.string().min(1),
-  parity: z26.object({
-    runs: z26.number().int().nonnegative(),
-    match: z26.number().int().nonnegative(),
-    divergent: z26.number().int().nonnegative(),
-    inconclusive: z26.number().int().nonnegative(),
-    divergences: z26.array(DivergenceCodeSchema)
+var EvidenceSchema = z27.object({
+  opencodeVersion: z27.string().min(1),
+  parity: z27.object({
+    runs: z27.number().int().nonnegative(),
+    match: z27.number().int().nonnegative(),
+    divergent: z27.number().int().nonnegative(),
+    inconclusive: z27.number().int().nonnegative(),
+    divergences: z27.array(DivergenceCodeSchema)
   }).strict(),
-  legacy: z26.object({
-    observed: z26.number().int().nonnegative(),
-    duplicated: z26.number().int().nonnegative()
+  legacy: z27.object({
+    observed: z27.number().int().nonnegative(),
+    duplicated: z27.number().int().nonnegative()
   }).strict(),
-  privacy: z26.object({
-    surfacesScanned: z26.number().int().nonnegative(),
-    rawFindings: z26.number().int().nonnegative()
+  privacy: z27.object({
+    surfacesScanned: z27.number().int().nonnegative(),
+    rawFindings: z27.number().int().nonnegative()
   }).strict(),
-  overhead: z26.object({
-    p95Millis: z26.number().nonnegative(),
-    budgetMillis: z26.number().positive(),
-    samples: z26.number().int().nonnegative()
+  overhead: z27.object({
+    p95Millis: z27.number().nonnegative(),
+    budgetMillis: z27.number().positive(),
+    samples: z27.number().int().nonnegative()
   }).strict(),
-  provenance: z26.record(DivergenceCodeSchema, ProvenanceSchema)
+  provenance: z27.record(DivergenceCodeSchema, ProvenanceSchema)
 }).strict();
-var CertificateSchema = z26.object({
-  version: z26.literal(1),
-  certificate: z26.literal("graph-shadow"),
-  opencodeVersion: z26.string().min(1),
+var CertificateSchema = z27.object({
+  version: z27.literal(1),
+  certificate: z27.literal("graph-shadow"),
+  opencodeVersion: z27.string().min(1),
   evidence: EvidenceSchema,
-  verdict: z26.enum(["pass", "fail"]),
-  failedGates: z26.array(z26.enum([
+  verdict: z27.enum(["pass", "fail"]),
+  failedGates: z27.array(z27.enum([
     "sample",
     "parity",
     "one-legacy-execution",
     "privacy",
     "overhead"
   ])),
-  digest: z26.string().regex(/^[0-9a-f]{64}$/)
+  digest: z27.string().regex(/^[0-9a-f]{64}$/)
 }).strict();
 
 class ShadowCertificateError extends Error {
@@ -23377,37 +24074,37 @@ function parseShadowCertificate(value, opencodeVersion) {
   }
   return certificate;
 }
-var ReleaseDeterminismSchema = z26.object({ runs: z26.number().int().nonnegative(), allMatch: z26.boolean() }).strict();
-var ReleaseCrashRecoverySchema = z26.object({
-  scenarios: z26.number().int().nonnegative(),
-  allConverge: z26.boolean()
+var ReleaseDeterminismSchema = z27.object({ runs: z27.number().int().nonnegative(), allMatch: z27.boolean() }).strict();
+var ReleaseCrashRecoverySchema = z27.object({
+  scenarios: z27.number().int().nonnegative(),
+  allConverge: z27.boolean()
 }).strict();
-var ReleaseReplayEquivalenceSchema = z26.object({
-  checks: z26.number().int().nonnegative(),
-  allEquivalent: z26.boolean()
+var ReleaseReplayEquivalenceSchema = z27.object({
+  checks: z27.number().int().nonnegative(),
+  allEquivalent: z27.boolean()
 }).strict();
-var ReleasePrivacySchema = z26.object({
-  surfacesScanned: z26.number().int().nonnegative(),
-  rawFindings: z26.number().int().nonnegative()
+var ReleasePrivacySchema = z27.object({
+  surfacesScanned: z27.number().int().nonnegative(),
+  rawFindings: z27.number().int().nonnegative()
 }).strict();
-var ReleaseContractSchema = z26.object({
-  roundTrips: z26.number().int().nonnegative(),
-  allSettled: z26.boolean()
+var ReleaseContractSchema = z27.object({
+  roundTrips: z27.number().int().nonnegative(),
+  allSettled: z27.boolean()
 }).strict();
-var ReleaseHealthSchema = z26.object({
-  samples: z26.number().int().nonnegative(),
-  bounded: z26.boolean(),
-  idempotent: z26.boolean()
+var ReleaseHealthSchema = z27.object({
+  samples: z27.number().int().nonnegative(),
+  bounded: z27.boolean(),
+  idempotent: z27.boolean()
 }).strict();
-var ReleasePerformanceSchema = z26.object({
-  p95Millis: z26.number().nonnegative(),
-  budgetMillis: z26.number().positive(),
-  samples: z26.number().int().nonnegative()
+var ReleasePerformanceSchema = z27.object({
+  p95Millis: z27.number().nonnegative(),
+  budgetMillis: z27.number().positive(),
+  samples: z27.number().int().nonnegative()
 }).strict();
-var ReleaseEvidenceSchema = z26.object({
-  opencodeVersion: z26.string().min(1),
-  platform: z26.enum(["linux", "win32"]),
-  shadowCertificateDigest: z26.string().regex(/^[0-9a-f]{64}$/),
+var ReleaseEvidenceSchema = z27.object({
+  opencodeVersion: z27.string().min(1),
+  platform: z27.enum(["linux", "win32"]),
+  shadowCertificateDigest: z27.string().regex(/^[0-9a-f]{64}$/),
   determinism: ReleaseDeterminismSchema,
   crashRecovery: ReleaseCrashRecoverySchema,
   replayEquivalence: ReleaseReplayEquivalenceSchema,
@@ -23416,15 +24113,15 @@ var ReleaseEvidenceSchema = z26.object({
   health: ReleaseHealthSchema,
   performance: ReleasePerformanceSchema
 }).strict();
-var ReleaseCertificateSchema = z26.object({
-  version: z26.literal(2),
-  certificate: z26.literal("graph-release"),
-  platform: z26.enum(["linux", "win32"]),
-  opencodeVersion: z26.string().min(1),
-  shadowCertificateDigest: z26.string().regex(/^[0-9a-f]{64}$/),
+var ReleaseCertificateSchema = z27.object({
+  version: z27.literal(2),
+  certificate: z27.literal("graph-release"),
+  platform: z27.enum(["linux", "win32"]),
+  opencodeVersion: z27.string().min(1),
+  shadowCertificateDigest: z27.string().regex(/^[0-9a-f]{64}$/),
   evidence: ReleaseEvidenceSchema,
-  verdict: z26.enum(["pass", "fail"]),
-  failedGates: z26.array(z26.enum([
+  verdict: z27.enum(["pass", "fail"]),
+  failedGates: z27.array(z27.enum([
     "shadow-valid",
     "determinism",
     "crash-recovery",
@@ -23434,7 +24131,7 @@ var ReleaseCertificateSchema = z26.object({
     "health",
     "performance"
   ])),
-  digest: z26.string().regex(/^[0-9a-f]{64}$/)
+  digest: z27.string().regex(/^[0-9a-f]{64}$/)
 }).strict();
 
 class ReleaseCertificateError extends Error {
@@ -23562,7 +24259,7 @@ function parseReleaseCertificate(value, opencodeVersion, expectedShadowDigest) {
   }
   return certificate;
 }
-var ShadowDivergenceCodeSchema = z26.enum([
+var ShadowDivergenceCodeSchema = z27.enum([
   "status",
   "order",
   "roles",
@@ -23571,13 +24268,13 @@ var ShadowDivergenceCodeSchema = z26.enum([
   "outcome"
 ]);
 var RECOMPUTED_DIVERGENCE_CODES = ["fixes"];
-var RecomputedDivergenceCodeSchema = z26.enum(RECOMPUTED_DIVERGENCE_CODES);
-var SoakPolicySchema = z26.object({
-  minimumGenuineObservations: z26.number().int().positive(),
-  minimumDistinctDays: z26.number().int().positive(),
-  requireGenuineUsageOnAllPlatforms: z26.boolean(),
-  supportedOpencodeVersions: z26.array(z26.string().min(1)).min(1),
-  criticalDivergenceCodes: z26.array(RecomputedDivergenceCodeSchema).min(1)
+var RecomputedDivergenceCodeSchema = z27.enum(RECOMPUTED_DIVERGENCE_CODES);
+var SoakPolicySchema = z27.object({
+  minimumGenuineObservations: z27.number().int().positive(),
+  minimumDistinctDays: z27.number().int().positive(),
+  requireGenuineUsageOnAllPlatforms: z27.boolean(),
+  supportedOpencodeVersions: z27.array(z27.string().min(1)).min(1),
+  criticalDivergenceCodes: z27.array(RecomputedDivergenceCodeSchema).min(1)
 }).strict();
 var DEFAULT_SOAK_POLICY = {
   minimumGenuineObservations: 100,
@@ -23586,46 +24283,46 @@ var DEFAULT_SOAK_POLICY = {
   supportedOpencodeVersions: [...SUPPORTED_OPENCODE_VERSIONS],
   criticalDivergenceCodes: ["fixes"]
 };
-var SoakPlatformEnumSchema = z26.enum(["linux", "win32", "darwin"]);
-var SoakPrivacyPairEvidenceSchema = z26.object({
-  surfacesScanned: z26.number().int().nonnegative(),
-  rawFindings: z26.number().int().nonnegative()
+var SoakPlatformEnumSchema = z27.enum(["linux", "win32", "darwin"]);
+var SoakPrivacyPairEvidenceSchema = z27.object({
+  surfacesScanned: z27.number().int().nonnegative(),
+  rawFindings: z27.number().int().nonnegative()
 }).strict();
-var SoakDuplicateEffectPairEvidenceSchema = z26.object({
-  effectsExamined: z26.number().int().nonnegative(),
-  duplicatesFound: z26.number().int().nonnegative()
+var SoakDuplicateEffectPairEvidenceSchema = z27.object({
+  effectsExamined: z27.number().int().nonnegative(),
+  duplicatesFound: z27.number().int().nonnegative()
 }).strict();
-var SoakModelVerificationPairEvidenceSchema = z26.object({
-  nodesChecked: z26.number().int().nonnegative(),
-  unverified: z26.number().int().nonnegative(),
-  mismatched: z26.number().int().nonnegative()
+var SoakModelVerificationPairEvidenceSchema = z27.object({
+  nodesChecked: z27.number().int().nonnegative(),
+  unverified: z27.number().int().nonnegative(),
+  mismatched: z27.number().int().nonnegative()
 }).strict();
-var SoakEvidenceSchema = z26.object({
-  totalObservations: z26.number().int().nonnegative(),
-  genuineUsageObservations: z26.number().int().nonnegative(),
-  ciSyntheticObservations: z26.number().int().nonnegative(),
-  recorderCount: z26.number().int().nonnegative(),
-  ineligibleObservations: z26.number().int().nonnegative(),
-  firstTimestamp: z26.string().datetime().nullable(),
-  lastTimestamp: z26.string().datetime().nullable(),
-  distinctDays: z26.number().int().nonnegative(),
-  criticalDivergences: z26.number().int().nonnegative().nullable(),
+var SoakEvidenceSchema = z27.object({
+  totalObservations: z27.number().int().nonnegative(),
+  genuineUsageObservations: z27.number().int().nonnegative(),
+  ciSyntheticObservations: z27.number().int().nonnegative(),
+  recorderCount: z27.number().int().nonnegative(),
+  ineligibleObservations: z27.number().int().nonnegative(),
+  firstTimestamp: z27.string().datetime().nullable(),
+  lastTimestamp: z27.string().datetime().nullable(),
+  distinctDays: z27.number().int().nonnegative(),
+  criticalDivergences: z27.number().int().nonnegative().nullable(),
   privacy: SoakPrivacyPairEvidenceSchema.nullable(),
   duplicateEffects: SoakDuplicateEffectPairEvidenceSchema.nullable(),
   modelVerification: SoakModelVerificationPairEvidenceSchema.nullable(),
-  platformsGenuine: z26.array(SoakPlatformEnumSchema),
-  platformsSynthetic: z26.array(SoakPlatformEnumSchema),
-  opencodeVersionsObserved: z26.array(z26.string().min(1)),
-  invalidChains: z26.number().int().nonnegative()
+  platformsGenuine: z27.array(SoakPlatformEnumSchema),
+  platformsSynthetic: z27.array(SoakPlatformEnumSchema),
+  opencodeVersionsObserved: z27.array(z27.string().min(1)),
+  invalidChains: z27.number().int().nonnegative()
 }).strict();
-var SoakCertificateSchema = z26.object({
-  version: z26.literal(1),
-  certificate: z26.literal("graph-soak"),
-  trustBoundary: z26.literal("contributors"),
+var SoakCertificateSchema = z27.object({
+  version: z27.literal(1),
+  certificate: z27.literal("graph-soak"),
+  trustBoundary: z27.literal("contributors"),
   policy: SoakPolicySchema,
   evidence: SoakEvidenceSchema,
-  verdict: z26.enum(["pass", "fail"]),
-  failedGates: z26.array(z26.enum([
+  verdict: z27.enum(["pass", "fail"]),
+  failedGates: z27.array(z27.enum([
     "minimum-observations",
     "minimum-duration",
     "chain-integrity",
@@ -23636,8 +24333,8 @@ var SoakCertificateSchema = z26.object({
     "os-diversity",
     "opencode-pin"
   ])),
-  ledgerDigest: z26.string().regex(/^[0-9a-f]{64}$/),
-  digest: z26.string().regex(/^[0-9a-f]{64}$/)
+  ledgerDigest: z27.string().regex(/^[0-9a-f]{64}$/),
+  digest: z27.string().regex(/^[0-9a-f]{64}$/)
 }).strict();
 
 class SoakCertificateError extends Error {
@@ -24285,62 +24982,62 @@ var realCacheAdapter = {
 };
 
 // src/memory/types.ts
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 var SHARED_OWNER_KEY = "*";
-var OwnerKeySchema = z27.string().min(1);
-var MemoryKindSchema = z27.enum(["fact", "preference", "entity"]);
-var MemoryBaseSchema = z27.object({
-  id: z27.string().min(1),
+var OwnerKeySchema = z28.string().min(1);
+var MemoryKindSchema = z28.enum(["fact", "preference", "entity"]);
+var MemoryBaseSchema = z28.object({
+  id: z28.string().min(1),
   ownerKey: OwnerKeySchema,
-  confidence: z27.number().min(0).max(1),
-  validFrom: z27.number().finite(),
-  validUntil: z27.number().finite().nullable().default(null),
-  createdAt: z27.number().finite(),
-  invalidatedAt: z27.number().finite().nullable().default(null),
-  sourceHash: z27.string().min(1),
-  supersededBy: z27.string().min(1).nullable().default(null)
+  confidence: z28.number().min(0).max(1),
+  validFrom: z28.number().finite(),
+  validUntil: z28.number().finite().nullable().default(null),
+  createdAt: z28.number().finite(),
+  invalidatedAt: z28.number().finite().nullable().default(null),
+  sourceHash: z28.string().min(1),
+  supersededBy: z28.string().min(1).nullable().default(null)
 }).strict();
 var FactSchema = MemoryBaseSchema.extend({
-  kind: z27.literal("fact"),
-  subject: z27.string().min(1),
-  predicate: z27.string().min(1),
-  object: z27.string().min(1),
-  category: z27.string().min(1).nullable().default(null)
+  kind: z28.literal("fact"),
+  subject: z28.string().min(1),
+  predicate: z28.string().min(1),
+  object: z28.string().min(1),
+  category: z28.string().min(1).nullable().default(null)
 });
 var PreferenceSchema = MemoryBaseSchema.extend({
-  kind: z27.literal("preference"),
-  category: z27.string().min(1),
-  preference: z27.string().min(1),
-  context: z27.string().min(1).nullable().default(null),
-  lastAccessedAt: z27.number().finite().nullable().default(null),
-  accessCount: z27.number().int().min(0).default(0)
+  kind: z28.literal("preference"),
+  category: z28.string().min(1),
+  preference: z28.string().min(1),
+  context: z28.string().min(1).nullable().default(null),
+  lastAccessedAt: z28.number().finite().nullable().default(null),
+  accessCount: z28.number().int().min(0).default(0)
 });
 var EntitySchema = MemoryBaseSchema.extend({
-  kind: z27.literal("entity"),
-  canonicalName: z27.string().min(1),
-  type: z27.string().min(1),
-  aliases: z27.array(z27.string().min(1)).default([])
+  kind: z28.literal("entity"),
+  canonicalName: z28.string().min(1),
+  type: z28.string().min(1),
+  aliases: z28.array(z28.string().min(1)).default([])
 });
 var RelationSchema = MemoryBaseSchema.extend({
-  kind: z27.literal("relation"),
-  from: z27.string().min(1),
-  to: z27.string().min(1),
-  predicate: z27.string().min(1),
-  annotation: z27.string().min(1).nullable().default(null)
+  kind: z28.literal("relation"),
+  from: z28.string().min(1),
+  to: z28.string().min(1),
+  predicate: z28.string().min(1),
+  annotation: z28.string().min(1).nullable().default(null)
 });
-var MemoryRecordSchema = z27.discriminatedUnion("kind", [
+var MemoryRecordSchema = z28.discriminatedUnion("kind", [
   FactSchema,
   PreferenceSchema,
   EntitySchema,
   RelationSchema
 ]);
-var RecallQuerySchema = z27.object({
+var RecallQuerySchema = z28.object({
   ownerKey: OwnerKeySchema,
-  kinds: z27.array(MemoryKindSchema).default(["fact", "preference", "entity"]),
-  asOf: z27.number().finite().nullable().default(null),
-  limit: z27.number().int().positive().default(8),
-  minSimilarity: z27.number().min(0).max(1).default(0.2),
-  includeShared: z27.boolean().default(true)
+  kinds: z28.array(MemoryKindSchema).default(["fact", "preference", "entity"]),
+  asOf: z28.number().finite().nullable().default(null),
+  limit: z28.number().int().positive().default(8),
+  minSimilarity: z28.number().min(0).max(1).default(0.2),
+  includeShared: z28.boolean().default(true)
 }).strict();
 
 // src/memory/rank.ts