@moxxy/cli 0.13.1 → 0.14.0

package/dist/bin.js

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { z as z$1, createMutex, defineTunnelProvider, isCliTunnelAvailable, definePlugin, defineProvider, defineTool, MoxxyError, writeFileAtomic, asTurnId, defineMode, asPluginId, defineCommand, defineChannel, spawnCliTunnel, defineWorkflowExecutor, toFriendlyError, estimateTextTokens, classifyHttpStatus, createStuckLoopDetector, runCompactionIfNeeded, runElisionIfNeeded, collectProviderStream, usageEventFields, isContextOverflowError, emitRequestsAndDetectStuck, executeToolUses, buildSystemPromptWithSkills, projectMessages, defineCompactor, defineCacheStrategy, denyByDefaultResolver, createAllowListResolver, moxxyPath, moxxyHome, zodToJsonSchema, fileDiffSummary, runSingleShotTurn, bearerTokenMatches, resolveChannelToken, rotateChannelToken, defineSurface, estimateContextTokens as estimateContextTokens$1, readRequestBody, isFileDiffDisplay, MOXXY_WS_SUBPROTOCOL, renderFrontmatter, defineEmbedder, migrateModeName, bearerGuard, tokenFromWsProtocolHeader, skillFrontmatterSchema, asSkillId, getInstallHint, parseFrontmatterFile, createDeferredPermissionResolver, writeFileAtomicSync, encodeLoginPrompt, defineTranscriber, summarizeTokensByModel, countNodes, moxxyPackageSchema, classifyNetworkError, addModelTotals, createJsonFileStore, ISOLATION_RANK, fileDiffVerb, parseFrontmatter, createCallbackResolver, autoAllowResolver, asSessionId, asToolCallId, defineViewRenderer, DEFAULT_VIEW_TAGS, assertNever, isSafeViewUrl, evaluateToolRule, summarizeSessionTokensFromEvents, toDiffRows, diffGutterNo, computeElisionState, toolResultStubbed, toolResultStub, toolResultBytes, conversationalStubbed, conversationalStub, asEventId } from '@moxxy/sdk';
+import { z as z$1, createMutex, defineTunnelProvider, definePlugin, defineProvider, defineTool, MoxxyError, asTurnId, defineMode, asPluginId, defineCommand, defineChannel, defineWorkflowExecutor, toFriendlyError, estimateTextTokens, classifyHttpStatus, createStuckLoopDetector, runCompactionIfNeeded, runElisionIfNeeded, collectProviderStream, usageEventFields, isContextOverflowError, emitRequestsAndDetectStuck, executeToolUses, buildSystemPromptWithSkills, projectMessages, defineCompactor, defineCacheStrategy, denyByDefaultResolver, createAllowListResolver, zodToJsonSchema, fileDiffSummary, runSingleShotTurn, defineSurface, runManualCompaction, isFileDiffDisplay, renderFrontmatter, defineEmbedder, migrateModeName, skillFrontmatterSchema, asSkillId, getInstallHint, parseFrontmatterFile, createDeferredPermissionResolver, encodeLoginPrompt, defineTranscriber, summarizeTokensByModel, countNodes, moxxyPackageSchema, classifyNetworkError, addModelTotals, createJsonFileStore, ISOLATION_RANK, MOXXY_PCM16_24KHZ_MIME, fileDiffVerb, parseFrontmatter, createCallbackResolver, autoAllowResolver, asSessionId, asToolCallId, defineViewRenderer, DEFAULT_VIEW_TAGS, isSafeViewUrl, evaluateToolRule, summarizeSessionTokensFromEvents, toDiffRows, diffGutterNo, computeElisionState, toolResultStubbed, toolResultStub, toolResultBytes, conversationalStubbed, conversationalStub, asEventId } from '@moxxy/sdk';
 import * as fs32 from 'fs';
-import fs32__default, { existsSync, promises, ReadStream, mkdirSync, statSync, readdirSync, writeFileSync, readFileSync, chmodSync, unlinkSync, watch, createReadStream } from 'fs';
+import fs32__default, { existsSync, promises, ReadStream, mkdirSync, statSync, readdirSync, writeFileSync, readFileSync, unlinkSync, chmodSync, watch, createReadStream } from 'fs';
 import * as path3 from 'path';
 import path3__default, { join, dirname, basename } from 'path';
+import { isCliTunnelAvailable, writeFileAtomic, spawnCliTunnel, moxxyPath, moxxyHome, bearerTokenMatches, resolveChannelToken, rotateChannelToken, readRequestBody, MOXXY_WS_SUBPROTOCOL, bearerGuard, tokenFromWsProtocolHeader, writeFileAtomicSync } from '@moxxy/sdk/server';
 import { z } from 'zod';
 import * as os5 from 'os';
 import os5__default, { homedir, tmpdir, userInfo } from 'os';
@@ -2966,6 +2967,8 @@ var init_workflow_executors = __esm({
     };
   }
 });
+
+// ../core/dist/requirements.js
 function issue(requirement, code, message) {
   return {
     requirement,
@@ -2984,9 +2987,10 @@ function activeModeName(modes) {
     return null;
   }
 }
-var RequirementRegistry;
+var ALWAYS_ACTIVE, RequirementRegistry, TARGET_DESCRIPTORS;
 var init_requirements = __esm({
   "../core/dist/requirements.js"() {
+    ALWAYS_ACTIVE = () => true;
     RequirementRegistry = class {
       opts;
       runtime = /* @__PURE__ */ new Map();
@@ -3049,52 +3053,54 @@ var init_requirements = __esm({
         return null;
       }
       targetInfo(kind3, name) {
-        switch (kind3) {
-          case "plugin": {
-            const plugin5 = this.plugins.get(name);
-            return plugin5 ? { kind: kind3, name, version: plugin5.version, active: true } : null;
-          }
-          case "provider": {
-            const def = this.opts.providers.list().find((p3) => p3.name === name);
-            return def ? { kind: kind3, name, active: this.opts.providers.getActiveName() === name } : null;
-          }
-          case "tool": {
-            const def = this.opts.tools.get(name);
-            return def ? { kind: kind3, name, active: true } : null;
-          }
-          case "transcriber": {
-            const def = this.opts.transcribers.list().find((t2) => t2.name === name);
-            return def ? { kind: kind3, name, active: this.opts.transcribers.getActiveName() === name } : null;
-          }
-          case "synthesizer": {
-            const def = this.opts.synthesizers.list().find((s2) => s2.name === name);
-            return def ? { kind: kind3, name, active: this.opts.synthesizers.getActiveName() === name } : null;
-          }
-          case "mode": {
-            const def = this.opts.modes.list().find((m3) => m3.name === name);
-            return def ? { kind: kind3, name, active: activeModeName(this.opts.modes) === name } : null;
-          }
-          case "compactor": {
-            const def = this.opts.compactors.list().find((c2) => c2.name === name);
-            return def ? { kind: kind3, name, active: this.opts.compactors.getActive()?.name === name } : null;
-          }
-          case "channel": {
-            const def = this.opts.channels.get(name);
-            return def ? { kind: kind3, name, active: true } : null;
-          }
-          case "agent": {
-            const def = this.opts.agents.get(name);
-            return def ? { kind: kind3, name, active: true } : null;
-          }
-          case "command": {
-            const def = this.opts.commands.get(name);
-            return def ? { kind: kind3, name, active: true } : null;
-          }
-          case "runtime":
-            return null;
-          default:
-            return assertNever(kind3);
+        if (kind3 === "plugin") {
+          const plugin5 = this.plugins.get(name);
+          return plugin5 ? { kind: kind3, name, version: plugin5.version, active: true } : null;
         }
+        if (kind3 === "runtime")
+          return null;
+        const descriptor = TARGET_DESCRIPTORS[kind3];
+        if (!descriptor.present(this.opts, name))
+          return null;
+        return { kind: kind3, name, active: descriptor.active(this.opts, name) };
+      }
+    };
+    TARGET_DESCRIPTORS = {
+      provider: {
+        present: (opts, name) => opts.providers.list().some((p3) => p3.name === name),
+        active: (opts, name) => opts.providers.getActiveName() === name
+      },
+      tool: {
+        present: (opts, name) => opts.tools.get(name) !== void 0,
+        active: ALWAYS_ACTIVE
+      },
+      transcriber: {
+        present: (opts, name) => opts.transcribers.list().some((t2) => t2.name === name),
+        active: (opts, name) => opts.transcribers.getActiveName() === name
+      },
+      synthesizer: {
+        present: (opts, name) => opts.synthesizers.list().some((s2) => s2.name === name),
+        active: (opts, name) => opts.synthesizers.getActiveName() === name
+      },
+      mode: {
+        present: (opts, name) => opts.modes.list().some((m3) => m3.name === name),
+        active: (opts, name) => activeModeName(opts.modes) === name
+      },
+      compactor: {
+        present: (opts, name) => opts.compactors.list().some((c2) => c2.name === name),
+        active: (opts, name) => opts.compactors.getActive()?.name === name
+      },
+      channel: {
+        present: (opts, name) => opts.channels.get(name) !== void 0,
+        active: ALWAYS_ACTIVE
+      },
+      agent: {
+        present: (opts, name) => opts.agents.get(name) !== void 0,
+        active: ALWAYS_ACTIVE
+      },
+      command: {
+        present: (opts, name) => opts.commands.get(name) !== void 0,
+        active: ALWAYS_ACTIVE
       }
     };
   }
@@ -85505,12 +85511,9 @@ function handleCollabEvent(e3, ref, root) {
     root.push(block2);
     return;
   }
-  let block = ref.current;
-  if (!block) {
-    block = newCollabBlock(e3.id, atMs);
-    ref.current = block;
-    root.push(block);
-  }
+  const block = ref.current;
+  if (!block)
+    return;
   switch (e3.subtype) {
     case "collab_fallback_sequential":
       block.fallbackReason = String(p3.reason ?? "");
@@ -87762,7 +87765,7 @@ function useVoiceInput(opts) {
           const pcm = await recording.stop();
           const transcriber = resolveCodexTranscriber(session);
           const result = await transcriber.transcribe(pcm, {
-            mimeType: MOXXY_PCM16_24KHZ_MIME2
+            mimeType: MOXXY_PCM16_24KHZ_MIME
           });
           const text = result.text.trim();
           if (!text) {
@@ -87869,13 +87872,12 @@ function formatVoiceError(err) {
     return `voice: ${message}`;
   return `voice: ${message || "failed"}`;
 }
-var import_react51, CODEX_TRANSCRIBER_NAME, MOXXY_PCM16_24KHZ_MIME2;
+var import_react51, CODEX_TRANSCRIBER_NAME;
 var init_use_voice_input = __esm({
   "../plugin-cli/dist/session/use-voice-input.js"() {
     import_react51 = __toESM(require_react());
     init_voice_input();
     CODEX_TRANSCRIBER_NAME = "openai-codex-transcribe";
-    MOXXY_PCM16_24KHZ_MIME2 = "audio/x-moxxy-pcm16-24khz";
   }
 });
 
@@ -88165,13 +88167,17 @@ function startCollab(deps, arg) {
     deps.submitPrompt(objective);
 }
 function openModePicker(deps, arg = "") {
-  const modes = deps.session.modes.list();
+  const modes = deps.session.modes.list().filter((m3) => !COLLAB_HIDDEN_MODES.has(m3.name));
   if (modes.length === 0) {
     deps.setSystemNotice("no modes registered");
     return;
   }
   const target = arg.trim().toLowerCase();
   if (target) {
+    if (COLLAB_HIDDEN_MODES.has(target)) {
+      deps.setSystemNotice("Use /collab <goal> to run a collaborative team (only one runs at a time).");
+      return;
+    }
     const match = modes.find((m3) => m3.name.toLowerCase() === target);
     if (match) {
       try {
@@ -88197,7 +88203,7 @@ function openModePicker(deps, arg = "") {
 function truncate5(s2, n2) {
   return s2.length <= n2 ? s2 : s2.slice(0, n2 - 1) + "\u2026";
 }
-var PLUGIN_KIND_TAB, OTHER_TAB, PLUGIN_TAB_ORDER;
+var PLUGIN_KIND_TAB, OTHER_TAB, PLUGIN_TAB_ORDER, COLLAB_HIDDEN_MODES;
 var init_run_slash = __esm({
   async "../plugin-cli/dist/session/run-slash.js"() {
     init_dist();
@@ -88212,6 +88218,11 @@ var init_run_slash = __esm({
     };
     OTHER_TAB = { id: "others", label: "Others" };
     PLUGIN_TAB_ORDER = ["providers", "modes", "channels", "tools", "others"];
+    COLLAB_HIDDEN_MODES = /* @__PURE__ */ new Set([
+      "collaborative",
+      "collab-architect",
+      "collab-peer"
+    ]);
   }
 });
 
@@ -128479,7 +128490,7 @@ var ChatCompletionStream = class _ChatCompletionStream extends AbstractChatCompl
             arguments_delta: toolCallDelta.function?.arguments ?? ""
           });
         } else {
-          assertNever3(toolCallSnapshot?.type);
+          assertNever2(toolCallSnapshot?.type);
         }
       }
     }
@@ -128504,7 +128515,7 @@ var ChatCompletionStream = class _ChatCompletionStream extends AbstractChatCompl
         parsed_arguments: isAutoParsableTool(inputTool) ? inputTool.$parseRaw(toolCallSnapshot.function.arguments) : inputTool?.function.strict ? JSON.parse(toolCallSnapshot.function.arguments) : null
       });
     } else {
-      assertNever3(toolCallSnapshot.type);
+      assertNever2(toolCallSnapshot.type);
     }
   }, _ChatCompletionStream_emitContentDoneEvents = function _ChatCompletionStream_emitContentDoneEvents2(choiceSnapshot) {
     const state = __classPrivateFieldGet15(this, _ChatCompletionStream_instances, "m", _ChatCompletionStream_getChoiceEventState).call(this, choiceSnapshot);
@@ -128784,7 +128795,7 @@ ${str(snapshot)}`);
 function str(x4) {
   return JSON.stringify(x4);
 }
-function assertNever3(_x) {
+function assertNever2(_x) {
 }
 
 // ../../node_modules/.pnpm/openai@4.104.0_encoding@0.1.13_ws@8.20.0_zod@3.25.76/node_modules/openai/lib/ChatCompletionStreamingRunner.mjs
@@ -133481,9 +133492,6 @@ var localPlugin = definePlugin({
   version: "0.0.0",
   providers: [localProviderDef]
 });
-
-// ../plugin-stt-whisper/dist/audio.js
-var MOXXY_PCM16_24KHZ_MIME = "audio/x-moxxy-pcm16-24khz";
 var WHISPER_FILENAME_BY_MIME = {
   "audio/ogg": "audio.ogg",
   "audio/opus": "audio.opus",
@@ -136258,7 +136266,7 @@ async function reclaimStaleSocket(socketPath) {
 
 // ../runner/dist/server.js
 init_dist();
-var RUNNER_PROTOCOL_VERSION = 8;
+var RUNNER_PROTOCOL_VERSION = 9;
 var MIN_COMPATIBLE_PROTOCOL_VERSION = 1;
 var RunnerMethod = {
   /** client->server: handshake; returns the initial info snapshot. */
@@ -136281,6 +136289,8 @@ var RunnerMethod = {
   SetResolver: "setResolver",
   /** client->server: switch the active mode. */
   ModeSetActive: "mode.setActive",
+  /** client->server: set the session's reasoning/thinking effort (v9). */
+  SessionSetReasoning: "session.setReasoning",
   /** client->server: switch the active provider (server resolves credentials). */
   ProviderSetActive: "provider.setActive",
   /** client->server: enable/disable a provider (v7; persists to preferences). */
@@ -136397,6 +136407,9 @@ var setResolverParamsSchema = z.object({
   approval: z.boolean().optional()
 });
 var modeSetActiveParamsSchema = z.object({ name: z.string() });
+var sessionSetReasoningParamsSchema = z.object({
+  effort: z.enum(["off", "low", "medium", "high"])
+});
 var providerSetActiveParamsSchema = z.object({
   name: z.string(),
   config: z.record(z.unknown()).optional()
@@ -136726,6 +136739,12 @@ function handleModeSetActive(ctx, raw) {
   ctx.session.modes.setActive(name);
   return {};
 }
+function handleSessionSetReasoning(ctx, raw) {
+  const { effort } = sessionSetReasoningParamsSchema.parse(raw);
+  ctx.session.reasoning = effort === "off" ? void 0 : { effort };
+  ctx.broadcastInfo();
+  return {};
+}
 async function handlePermissionAddAllow(ctx, raw) {
   const { name, reason } = permissionAddAllowParamsSchema.parse(raw);
   await ctx.session.permissions.addAllow({ name, ...reason ? { reason } : {} });
@@ -136846,6 +136865,7 @@ var RunnerServer = class {
     peer.handle(RunnerMethod.SessionReset, () => this.handleSessionReset());
     peer.handle(RunnerMethod.SetResolver, (raw) => this.handleSetResolver(client, raw));
     peer.handle(RunnerMethod.ModeSetActive, (raw) => handleModeSetActive(ctx, raw));
+    peer.handle(RunnerMethod.SessionSetReasoning, (raw) => handleSessionSetReasoning(ctx, raw));
     peer.handle(RunnerMethod.ProviderSetActive, (raw) => handleProviderSetActive(ctx, raw));
     peer.handle(RunnerMethod.ProviderSetEnabled, (raw) => handleProviderSetEnabled(ctx, raw));
     peer.handle(RunnerMethod.ProviderRefreshReady, () => handleProviderRefreshReady(ctx));
@@ -137282,6 +137302,10 @@ function makeProviderAdminView(ctx) {
     configure: async (name, patch) => {
       requireServerProtocol(7, "Configuring a provider");
       await peer.request(RunnerMethod.ProviderConfigure, { name, patch });
+    },
+    setReasoning: async (effort) => {
+      requireServerProtocol(9, "Setting reasoning effort");
+      await peer.request(RunnerMethod.SessionSetReasoning, { effort });
     }
   };
 }
@@ -139079,6 +139103,57 @@ async function integrate(input) {
   }
   return { merged, conflicts, resolvedByOwnership, stagingBranch: branchName, promoted };
 }
+var COLLAB_LOCK_PATH = join(homedir(), ".moxxy", "collab", "active.lock");
+function collabLockPath() {
+  return process.env.MOXXY_COLLAB_LOCK || COLLAB_LOCK_PATH;
+}
+function readRaw() {
+  try {
+    return JSON.parse(readFileSync(collabLockPath(), "utf8"));
+  } catch {
+    return null;
+  }
+}
+function isAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function readActiveCollab() {
+  const info = readRaw();
+  if (!info)
+    return null;
+  if (!isAlive(info.pid)) {
+    try {
+      unlinkSync(collabLockPath());
+    } catch {
+    }
+    return null;
+  }
+  return info;
+}
+function tryAcquireCollabLock(args) {
+  mkdirSync(dirname(collabLockPath()), { recursive: true });
+  const existing = readActiveCollab();
+  if (existing && existing.sessionId !== args.sessionId) {
+    return { ok: false, holder: existing };
+  }
+  const info = { pid: process.pid, ...args };
+  writeFileSync(collabLockPath(), JSON.stringify(info));
+  return { ok: true };
+}
+function releaseCollabLock(sessionId) {
+  const info = readRaw();
+  if (info && info.sessionId === sessionId) {
+    try {
+      unlinkSync(collabLockPath());
+    } catch {
+    }
+  }
+}
 
 // ../mode-collaborative/dist/collab-loop.js
 var POLL_MS = 500;
@@ -139097,47 +139172,56 @@ async function* runCollaborative(ctx, deps) {
     yield await ctx.emit(assistant(ctx, "Collaborative mode needs a task to work on."));
     return;
   }
-  const runId = collabRunId(String(ctx.sessionId), String(ctx.turnId));
-  mkdirSync(collabRunDir(runId), { recursive: true });
-  const { installed: gitInstalled2, repo: gitRepo } = await detectGit(cwd2);
-  const parallel = cfg.concurrency === "parallel" && gitRepo;
-  if (!parallel) {
-    yield await ctx.emit(plugin4(ctx, "collab_fallback_sequential", {
-      reason: !gitInstalled2 ? "git is not installed \u2014 running agents sequentially in your workspace" : !gitRepo ? "this folder is not a git repository \u2014 running agents sequentially in your workspace" : "sequential mode selected"
-    }));
-  }
-  let baseSha = "";
-  if (parallel) {
-    const base2 = await resolveBase(cwd2);
-    baseSha = base2.baseSha;
+  const lock = tryAcquireCollabLock({ sessionId: String(ctx.sessionId), task, startedAtMs: Date.now() });
+  if (!lock.ok) {
+    yield await ctx.emit(plugin4(ctx, "collab_blocked", { reason: "already-running", holderTask: lock.holder.task }));
+    yield await ctx.emit(assistant(ctx, `A collaboration is already running ("${lock.holder.task}"). Only one runs at a time to save resources \u2014 stop it first, then start again.`));
+    return;
   }
+  const runId = collabRunId(String(ctx.sessionId), String(ctx.turnId));
   const worktrees = /* @__PURE__ */ new Map();
-  const architectEntry = {
-    id: ARCHITECT_AGENT_ID,
-    name: "Architect",
-    role: "architect",
-    subtask: task
-  };
-  const hub = await createCollaborationHub({
-    socketPath: hubSocketPath(runId),
-    task,
-    roster: [architectEntry],
-    peerReader: peerReaderFor(worktrees, baseSha)
-  });
-  registerActiveHub(String(ctx.sessionId), hub);
-  const unsubscribe = hub.subscribe((e3) => {
-    void ctx.emit(toCollabEvent(ctx, e3));
-  });
-  const supervisorOpts = {
-    runId,
-    hubSocket: hub.socketPath,
-    coordinatorSessionId: String(ctx.sessionId),
-    parentTask: task,
-    ...cfg.defaultModel ? { defaultModel: cfg.defaultModel } : {},
-    signal: ctx.signal
-  };
-  const supervisor = (deps.createSupervisor ?? ((o2) => new PeerSupervisor(o2)))(supervisorOpts, hub);
+  let hub = null;
+  let supervisor = null;
+  let unsubscribe = null;
   try {
+    mkdirSync(collabRunDir(runId), { recursive: true });
+    const { installed: gitInstalled2, repo: gitRepo } = await detectGit(cwd2);
+    const parallel = cfg.concurrency === "parallel" && gitRepo;
+    if (!parallel) {
+      yield await ctx.emit(plugin4(ctx, "collab_fallback_sequential", {
+        reason: !gitInstalled2 ? "git is not installed \u2014 running agents sequentially in your workspace" : !gitRepo ? "this folder is not a git repository \u2014 running agents sequentially in your workspace" : "sequential mode selected"
+      }));
+    }
+    let baseSha = "";
+    if (parallel) {
+      const base2 = await resolveBase(cwd2, { snapshotDirty: true });
+      baseSha = base2.baseSha;
+    }
+    const architectEntry = {
+      id: ARCHITECT_AGENT_ID,
+      name: "Architect",
+      role: "architect",
+      subtask: task
+    };
+    hub = await createCollaborationHub({
+      socketPath: hubSocketPath(runId),
+      task,
+      roster: [architectEntry],
+      peerReader: peerReaderFor(worktrees, baseSha)
+    });
+    registerActiveHub(String(ctx.sessionId), hub);
+    unsubscribe = hub.subscribe((e3) => {
+      void ctx.emit(toCollabEvent(ctx, e3));
+    });
+    const supervisorOpts = {
+      runId,
+      hubSocket: hub.socketPath,
+      coordinatorSessionId: String(ctx.sessionId),
+      parentTask: task,
+      ...cfg.defaultModel ? { defaultModel: cfg.defaultModel } : {},
+      signal: ctx.signal
+    };
+    supervisor = (deps.createSupervisor ?? ((o2) => new PeerSupervisor(o2)))(supervisorOpts, hub);
     yield await ctx.emit(plugin4(ctx, "collab_started", { task, parallel, gitInstalled: gitInstalled2, gitRepo }));
     supervisor.spawn({ entry: architectEntry, cwd: cwd2, mode: COLLAB_ARCHITECT_MODE_NAME });
     yield await ctx.emit(plugin4(ctx, "collab_agent_spawned", { id: ARCHITECT_AGENT_ID, role: "architect" }));
@@ -139235,10 +139319,14 @@ ${summaryBlock}${mergeNote ? `
 ${mergeNote}` : ""}`));
     yield await ctx.emit(plugin4(ctx, "collab_completed", { done: doneIds, total: roster.length }));
   } finally {
-    await supervisor.shutdownAll("collaboration complete");
-    unsubscribe();
+    if (supervisor)
+      await supervisor.shutdownAll("collaboration complete");
+    if (unsubscribe)
+      unsubscribe();
     unregisterActiveHub(String(ctx.sessionId));
-    await hub.close();
+    if (hub)
+      await hub.close();
+    releaseCollabLock(String(ctx.sessionId));
   }
 }
 function lastUserPromptText(ctx) {
@@ -144062,6 +144150,7 @@ var optionalWorkspace = z.string().min(1).max(256).optional();
 var MAX_AUDIO_BASE64 = 4e7;
 var MAX_INLINE_ATTACHMENT_CONTENT = 12e6;
 var commandName = z.string().min(1).max(64).regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/, "invalid command name");
+var appId = z.string().min(1).max(64).regex(/^[a-z][a-z0-9-]*$/, "invalid app id");
 var workflowName = z.string().min(1).max(200).refine((s2) => !s2.includes("..") && !s2.includes("/") && !s2.includes("\\"), "invalid workflow name");
 var ipcInputSchemas = {
   // No-arg, but spawns a child process (npm install) — pin the payload to
@@ -144168,9 +144257,36 @@ var ipcInputSchemas = {
     path: z.string().max(4096).optional()
   }),
   "settings.fetchProviderModels": z.object({ provider: providerName }),
+  // Session config mutation — pin the effort to the known enum so a renderer
+  // can't push an arbitrary string through to the runner / provider request.
+  "settings.setReasoning": z.object({
+    workspaceId: optionalWorkspace,
+    effort: z.enum(["off", "low", "medium", "high"])
+  }),
   "settings.writeSkill": z.object({ name: skillName, body: z.string().max(1e6) }),
   "settings.readSkill": z.object({ name: skillName }),
   "settings.deleteSkill": z.object({ name: skillName }),
+  // Desktop apps: appId keys the per-app install dir + a network download, so
+  // pin it to a non-traversing slug. (pickDocument is no-arg → see below.)
+  "apps.status": z.object({ appId }),
+  "apps.install": z.object({ appId }),
+  "apps.uninstall": z.object({ appId }),
+  // Anonymizer: parseDocument reads a file (bound the path), saveRedacted writes
+  // one (bound name + cap content so a renderer can't OOM main). pickDocument
+  // takes nothing — pin it to "nothing" so no args can be smuggled across.
+  "anonymizer.pickDocument": z.undefined(),
+  "anonymizer.parseDocument": z.object({ path: z.string().min(1).max(4096) }),
+  // A drag-dropped doc: the renderer sends the dropped file's BYTES (base64),
+  // not a path — so there's no arbitrary-file-read to gate, only a size to cap.
+  // ~67 MB of base64 ≈ 50 MB of file, matching the picker's practical ceiling.
+  "anonymizer.parseDocumentBytes": z.object({
+    name: z.string().min(1).max(255),
+    dataBase64: z.string().min(1).max(67e6)
+  }),
+  "anonymizer.saveRedacted": z.object({
+    suggestedName: z.string().min(1).max(255),
+    content: z.string().max(2e7)
+  }),
   "desks.create": z.object({ name: z.string().min(1).max(200), cwd: z.string().min(1).max(4096) }),
   // Mirror desks.create's name bounds — rename writes the name into the desks
   // JSON, so an unbounded string would let a renderer bloat the state file.
@@ -146562,37 +146678,25 @@ async function compactSession(session) {
   if (events.length === 0) {
     return { kind: "text", text: "nothing to compact: event log is empty" };
   }
-  const providerCtxWindow = resolveActiveContextWindow(s2);
   const provider = safe(() => s2.providers?.getActive()) ?? void 0;
   const model = provider?.models[0]?.id;
+  const contextWindow = provider?.models[0]?.contextWindow;
   try {
-    const result = await compactor.compact(events, {
-      log: s2.log.asReader ? s2.log.asReader() : s2.log,
-      budget: {
-        contextWindow: providerCtxWindow,
-        estimatedTokens: estimateContextTokens$1(s2.log.asReader ? s2.log.asReader() : s2.log),
-        reserveForOutput: 0
-      },
-      signal: s2.signal ?? new AbortController().signal,
+    const result = await runManualCompaction({
+      compactor,
+      log: s2.log,
+      signal: s2.signal,
       ...provider ? { provider } : {},
-      ...model ? { model } : {}
+      ...model !== void 0 ? { model } : {},
+      ...contextWindow !== void 0 ? { contextWindow } : {},
+      ...s2.id !== void 0 ? { sessionId: s2.id } : {}
     });
-    if (result.tokensSaved <= 0 || result.summary.trim().length === 0) {
+    if (!result.compacted) {
       return { kind: "text", text: "nothing to compact yet" };
     }
-    const lastEvent = events[events.length - 1];
-    const emittable = {
-      sessionId: s2.id ?? lastEvent?.sessionId,
-      turnId: lastEvent?.turnId,
-      source: "compactor",
-      ...result
-    };
-    await s2.log.append(emittable);
-    const [fromSeq, toSeq] = result.replacedRange;
-    const compactedEvents = events.filter((e3) => e3.seq >= fromSeq && e3.seq <= toSeq).length;
     return {
       kind: "text",
-      text: `context compacted: ${formatCount2(compactedEvents)} ${plural2(compactedEvents, "event")}, ~${formatTokenCount2(result.tokensSaved)} tokens saved`
+      text: `context compacted: ${formatCount2(result.eventsCompacted)} ${plural2(result.eventsCompacted, "event")}, ~${formatTokenCount2(result.tokensSaved)} tokens saved`
     };
   } catch (err) {
     return {
@@ -146601,17 +146705,6 @@ async function compactSession(session) {
     };
   }
 }
-function resolveActiveContextWindow(s2) {
-  try {
-    const provider = s2.providers?.getActive();
-    if (!provider)
-      return Number.MAX_SAFE_INTEGER;
-    const window2 = provider.models[0]?.contextWindow;
-    return window2 && window2 > 0 ? window2 : Number.MAX_SAFE_INTEGER;
-  } catch {
-    return Number.MAX_SAFE_INTEGER;
-  }
-}
 function formatCount2(value) {
   return new Intl.NumberFormat("en-US").format(value);
 }
@@ -147136,7 +147229,7 @@ var computerControlPlugin = definePlugin({
   tools: [...computerControlTools]
 });
 
-// src/setup/voice-admin-plugin.ts
+// ../plugin-voice-admin/dist/index.js
 init_dist();
 function buildVoiceAdminPlugin(session) {
   const voiceNames = () => [
@@ -147170,9 +147263,7 @@ function buildVoiceAdminPlugin(session) {
             return { active: "system" };
           }
           if (!session.synthesizers.has(synthesizer)) {
-            throw new Error(
-              `No synthesizer named "${synthesizer}". Available: ${voiceNames().join(", ")}.`
-            );
+            throw new Error(`No synthesizer named "${synthesizer}". Available: ${voiceNames().join(", ")}.`);
           }
           session.synthesizers.setActive(synthesizer);
           return { active: synthesizer };
@@ -147610,6 +147701,8 @@ var stepSchema = z.object({
   needs: z.array(z.string().min(1)).default([]),
   when: z.string().min(1).optional(),
   onError: z.enum(["fail", "continue", "retry"]).default("fail"),
+  // `retries` only takes effect when `onError: 'retry'`; with 'fail'/'continue'
+  // the step runs exactly one attempt (see runStep in executor/steps.ts).
   retries: z.number().int().min(0).max(3).default(0),
   label: z.string().max(60).optional(),
   format: z.enum(["json", "plain"]).optional(),
@@ -148519,7 +148612,7 @@ function buildRunResult(ctx, status, ok, extra) {
   };
 }
 async function runStep(step, scope, ctx) {
-  const attempts = 1 + Math.max(0, step.retries);
+  const attempts = step.onError === "retry" ? 1 + Math.max(0, step.retries) : 1;
   let lastError = "";
   for (let attempt = 0; attempt < attempts; attempt++) {
     if (ctx.deps.signal.aborted)
@@ -149040,7 +149133,7 @@ ${userMessage.trim()}${FINALIZE_REPLY_SUFFIX}`;
 var DAG_EXECUTOR_NAME = "dag";
 var dagExecutor = defineWorkflowExecutor({
   name: DAG_EXECUTOR_NAME,
-  description: "DAG runner: steps with settled dependencies are scheduled in waves of up to `concurrency` ready steps, then executed sequentially within each wave (no overlap yet \u2014 `concurrency` caps the batch size, not wall-clock latency).",
+  description: "DAG runner: steps with settled dependencies are scheduled in waves of up to `concurrency` ready steps, then executed sequentially within each wave (no overlap \u2014 `concurrency` caps the batch size drained per pass, not wall-clock latency).",
   run: runExecutor
 });
 
@@ -149107,7 +149200,7 @@ A workflow is a DAG of steps. Schema:
     - args: templated args object for tool/workflow steps
     - needs: [ <upstream step ids> ]  (defines the DAG; omit only for true sources)
     - when (optional, legacy): simple guards only \u2014 '{{ steps.x.output }} is not empty'. Do NOT use when for semantic decisions (use condition/switch).
-    - onError (optional): fail | continue | retry ; retries (optional, 0-3)
+    - onError (optional): fail | continue | retry ; retries (optional, 0-3 \u2014 only applies when onError is retry; fail/continue always run exactly one attempt)
 
 Operator data \u2014 two ways: declare a value the operator can supply UP FRONT as an \`inputs\` field (filled in before Run). To PAUSE mid-run and ask a question whose answer depends on earlier steps, set \`awaitInput: true\` on a prompt or skill step: the workflow pauses, surfaces the step's prompt to the operator, and resumes with their reply once they answer. Prefer \`inputs\` for known-up-front values; use \`awaitInput\` only for genuinely mid-run questions.