@mukulaggarwal/pacman 0.1.4 → 0.1.6

package/dist/onboarding-server.js

@@ -1,7 +1,7 @@
 import {
   createNoopEventClient,
   validateIntegrationConfig
-} from "./chunk-DNI6TIXZ.js";
+} from "./chunk-LKKDJ5A7.js";
 import {
   createContextManager
 } from "./chunk-UWT6AFJB.js";
@@ -17,14 +17,14 @@ import {
 import {
   createSlackConnector,
   validateSlackAppToken
-} from "./chunk-YJ32S56Q.js";
+} from "./chunk-X6CHTBN2.js";
 
 // src/onboarding-server.ts
 import express from "express";
 import * as path2 from "path";
 import * as fs2 from "fs/promises";
-import { execFile } from "child_process";
-import { promisify } from "util";
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
 
 // ../template-engine/dist/index.js
 var PROFILE_TEMPLATES = {
@@ -65,6 +65,70 @@ Software Engineer
 
 ## Tech Stack
 <!-- Languages, frameworks, tools -->
+`
+      },
+      {
+        name: "Context Details",
+        fileName: "context-details.md",
+        required: false,
+        defaultContent: `# Context Details
+
+## Executive Summary
+<!-- One-paragraph project overview: status, owner, key objective, current phase -->
+
+## Key Context
+
+| Attribute | Value |
+|-----------|-------|
+| Tech Stack | <!-- Languages, frameworks, key libraries --> |
+| Team Size | <!-- Number of engineers --> |
+| Dependencies | <!-- Upstream/downstream services --> |
+| Blockers | <!-- Current blockers or risks --> |
+| Repo(s) | <!-- Primary repositories --> |
+| Deploy Target | <!-- Where this runs (k8s, lambda, etc.) --> |
+
+## Timeline
+
+| Milestone | Date | Status | Owner |
+|-----------|------|--------|-------|
+| <!-- Milestone 1 --> | <!-- Date --> | <!-- On track / At risk / Done --> | <!-- Owner --> |
+| <!-- Milestone 2 --> | <!-- Date --> | <!-- Status --> | <!-- Owner --> |
+
+## Active Decisions
+
+| Decision | Options | Status | Deadline | Owner |
+|----------|---------|--------|----------|-------|
+| <!-- Decision 1 --> | <!-- A / B / C --> | <!-- Open / Decided --> | <!-- Date --> | <!-- Owner --> |
+
+## Metrics & Health
+
+| Metric | Target | Current | Trend |
+|--------|--------|---------|-------|
+| Build time | <!-- e.g. < 5 min --> | <!-- Current --> | <!-- Up / Down / Stable --> |
+| Test coverage | <!-- e.g. > 80% --> | <!-- Current --> | <!-- Trend --> |
+| P0 bugs | <!-- e.g. 0 --> | <!-- Current --> | <!-- Trend --> |
+| Deploy frequency | <!-- e.g. daily --> | <!-- Current --> | <!-- Trend --> |
+
+## Communication Map
+
+| Stakeholder | Role | Channel | Cadence |
+|-------------|------|---------|---------|
+| <!-- Name --> | <!-- Role --> | <!-- Slack / Email / Meeting --> | <!-- Weekly / Ad-hoc --> |
+
+## Risk Register
+
+| Risk | Likelihood | Impact | Mitigation | Owner |
+|------|-----------|--------|------------|-------|
+| <!-- Risk 1 --> | <!-- Low / Med / High --> | <!-- Low / Med / High --> | <!-- Mitigation plan --> | <!-- Owner --> |
+
+## Quick Reference
+
+- **Primary repo:** <!-- link -->
+- **CI dashboard:** <!-- link -->
+- **Monitoring:** <!-- link -->
+- **Runbook:** <!-- link -->
+- **On-call rotation:** <!-- link -->
+- **Team channel:** <!-- link -->
 `
       },
       {
@@ -154,6 +218,70 @@ Product Manager
 
 ## Current Quarter Goals
 <!-- OKRs or key goals -->
+`
+      },
+      {
+        name: "Context Details",
+        fileName: "context-details.md",
+        required: false,
+        defaultContent: `# Context Details
+
+## Executive Summary
+<!-- One-paragraph product overview: current phase, strategic priority, key objective, owner -->
+
+## Key Context
+
+| Attribute | Value |
+|-----------|-------|
+| Product Area | <!-- Feature area or product line --> |
+| User Segment | <!-- Target users --> |
+| Revenue Impact | <!-- ARR / MRR contribution --> |
+| Dependencies | <!-- Eng teams, design, legal, etc. --> |
+| Blockers | <!-- Current blockers or open questions --> |
+| Launch Vehicle | <!-- How this ships: feature flag, release train, etc. --> |
+
+## Timeline
+
+| Milestone | Date | Status | Owner |
+|-----------|------|--------|-------|
+| <!-- Milestone 1 --> | <!-- Date --> | <!-- On track / At risk / Done --> | <!-- Owner --> |
+| <!-- Milestone 2 --> | <!-- Date --> | <!-- Status --> | <!-- Owner --> |
+
+## Active Decisions
+
+| Decision | Options | Status | Deadline | Owner |
+|----------|---------|--------|----------|-------|
+| <!-- Decision 1 --> | <!-- A / B / C --> | <!-- Open / Decided --> | <!-- Date --> | <!-- Owner --> |
+
+## Metrics & Health
+
+| Metric | Target | Current | Trend |
+|--------|--------|---------|-------|
+| Adoption rate | <!-- e.g. 30% of MAU --> | <!-- Current --> | <!-- Trend --> |
+| NPS / CSAT | <!-- Target --> | <!-- Current --> | <!-- Trend --> |
+| Feature usage | <!-- Target --> | <!-- Current --> | <!-- Trend --> |
+| Conversion | <!-- Target --> | <!-- Current --> | <!-- Trend --> |
+
+## Communication Map
+
+| Stakeholder | Role | Channel | Cadence |
+|-------------|------|---------|---------|
+| <!-- Name --> | <!-- Role --> | <!-- Slack / Email / Meeting --> | <!-- Weekly / Ad-hoc --> |
+
+## Risk Register
+
+| Risk | Likelihood | Impact | Mitigation | Owner |
+|------|-----------|--------|------------|-------|
+| <!-- Risk 1 --> | <!-- Low / Med / High --> | <!-- Low / Med / High --> | <!-- Mitigation plan --> | <!-- Owner --> |
+
+## Quick Reference
+
+- **PRD:** <!-- link -->
+- **Roadmap:** <!-- link -->
+- **Analytics dashboard:** <!-- link -->
+- **Design files:** <!-- link -->
+- **Competitor research:** <!-- link -->
+- **Team channel:** <!-- link -->
 `
       },
       {
@@ -243,6 +371,70 @@ Engineering Manager
 
 ## Key Systems
 <!-- Systems your team owns -->
+`
+      },
+      {
+        name: "Context Details",
+        fileName: "context-details.md",
+        required: false,
+        defaultContent: `# Context Details
+
+## Executive Summary
+<!-- One-paragraph overview: team mission, current priorities, headcount, key challenges -->
+
+## Key Context
+
+| Attribute | Value |
+|-----------|-------|
+| Team Size | <!-- Current headcount --> |
+| Open Roles | <!-- Positions being hired for --> |
+| Tech Domains | <!-- Systems the team owns --> |
+| Dependencies | <!-- Cross-team dependencies --> |
+| Blockers | <!-- Current blockers or risks --> |
+| Budget | <!-- Eng budget or resource constraints --> |
+
+## Timeline
+
+| Milestone | Date | Status | Owner |
+|-----------|------|--------|-------|
+| <!-- Milestone 1 --> | <!-- Date --> | <!-- On track / At risk / Done --> | <!-- Owner --> |
+| <!-- Milestone 2 --> | <!-- Date --> | <!-- Status --> | <!-- Owner --> |
+
+## Active Decisions
+
+| Decision | Options | Status | Deadline | Owner |
+|----------|---------|--------|----------|-------|
+| <!-- Decision 1 --> | <!-- A / B / C --> | <!-- Open / Decided --> | <!-- Date --> | <!-- Owner --> |
+
+## Metrics & Health
+
+| Metric | Target | Current | Trend |
+|--------|--------|---------|-------|
+| Sprint velocity | <!-- Target --> | <!-- Current --> | <!-- Trend --> |
+| Team satisfaction | <!-- Target --> | <!-- Current --> | <!-- Trend --> |
+| Attrition risk | <!-- e.g. Low --> | <!-- Current --> | <!-- Trend --> |
+| Hiring pipeline | <!-- Target fill rate --> | <!-- Current --> | <!-- Trend --> |
+
+## Communication Map
+
+| Stakeholder | Role | Channel | Cadence |
+|-------------|------|---------|---------|
+| <!-- Name --> | <!-- Role --> | <!-- Slack / Email / Meeting --> | <!-- Weekly / Ad-hoc --> |
+
+## Risk Register
+
+| Risk | Likelihood | Impact | Mitigation | Owner |
+|------|-----------|--------|------------|-------|
+| <!-- Risk 1 --> | <!-- Low / Med / High --> | <!-- Low / Med / High --> | <!-- Mitigation plan --> | <!-- Owner --> |
+
+## Quick Reference
+
+- **Team wiki:** <!-- link -->
+- **Sprint board:** <!-- link -->
+- **1:1 doc:** <!-- link -->
+- **Performance review system:** <!-- link -->
+- **Hiring tracker:** <!-- link -->
+- **Team channel:** <!-- link -->
 `
       },
       {
@@ -335,6 +527,70 @@ DevOps Engineer
 
 ## Monitoring Stack
 <!-- Tools and dashboards -->
+`
+      },
+      {
+        name: "Context Details",
+        fileName: "context-details.md",
+        required: false,
+        defaultContent: `# Context Details
+
+## Executive Summary
+<!-- One-paragraph overview: infrastructure scope, current priorities, reliability posture, key challenges -->
+
+## Key Context
+
+| Attribute | Value |
+|-----------|-------|
+| Cloud Provider | <!-- AWS / GCP / Azure / Multi --> |
+| Infra-as-Code | <!-- Terraform / Pulumi / CDK --> |
+| Container Runtime | <!-- k8s / ECS / Nomad --> |
+| CI/CD Platform | <!-- GitHub Actions / Jenkins / ArgoCD --> |
+| Dependencies | <!-- Shared services, vendor SLAs --> |
+| Blockers | <!-- Current blockers or risks --> |
+
+## Timeline
+
+| Milestone | Date | Status | Owner |
+|-----------|------|--------|-------|
+| <!-- Milestone 1 --> | <!-- Date --> | <!-- On track / At risk / Done --> | <!-- Owner --> |
+| <!-- Milestone 2 --> | <!-- Date --> | <!-- Status --> | <!-- Owner --> |
+
+## Active Decisions
+
+| Decision | Options | Status | Deadline | Owner |
+|----------|---------|--------|----------|-------|
+| <!-- Decision 1 --> | <!-- A / B / C --> | <!-- Open / Decided --> | <!-- Date --> | <!-- Owner --> |
+
+## Metrics & Health
+
+| Metric | Target | Current | Trend |
+|--------|--------|---------|-------|
+| Uptime (SLA) | <!-- e.g. 99.95% --> | <!-- Current --> | <!-- Trend --> |
+| MTTR | <!-- e.g. < 30 min --> | <!-- Current --> | <!-- Trend --> |
+| Deploy frequency | <!-- e.g. 10/day --> | <!-- Current --> | <!-- Trend --> |
+| Infra cost | <!-- Monthly target --> | <!-- Current --> | <!-- Trend --> |
+
+## Communication Map
+
+| Stakeholder | Role | Channel | Cadence |
+|-------------|------|---------|---------|
+| <!-- Name --> | <!-- Role --> | <!-- Slack / Email / Meeting --> | <!-- Weekly / Ad-hoc --> |
+
+## Risk Register
+
+| Risk | Likelihood | Impact | Mitigation | Owner |
+|------|-----------|--------|------------|-------|
+| <!-- Risk 1 --> | <!-- Low / Med / High --> | <!-- Low / Med / High --> | <!-- Mitigation plan --> | <!-- Owner --> |
+
+## Quick Reference
+
+- **Infra repo:** <!-- link -->
+- **Monitoring dashboard:** <!-- link -->
+- **PagerDuty:** <!-- link -->
+- **Runbooks:** <!-- link -->
+- **Cost dashboard:** <!-- link -->
+- **Incident channel:** <!-- link -->
 `
       },
       {
@@ -427,22 +683,75 @@ function renderTemplate(template, user) {
   }
   return files;
 }
+function getTemplateSections(profileType) {
+  const template = PROFILE_TEMPLATES[profileType];
+  if (!template) {
+    throw new Error(`Unknown profile type: ${profileType}`);
+  }
+  return template.sections.map((s) => ({ ...s }));
+}
+
+// src/google-auth.ts
+var GOOGLE_SCOPES_BY_FEATURE = {
+  storage: [
+    "https://www.googleapis.com/auth/drive.file",
+    "https://www.googleapis.com/auth/drive.readonly"
+  ],
+  gmail: ["https://www.googleapis.com/auth/gmail.readonly"],
+  gdrive: ["https://www.googleapis.com/auth/drive.readonly"]
+};
+function getGoogleScopesForFeatures(features) {
+  const scopes = /* @__PURE__ */ new Set();
+  for (const feature of features) {
+    for (const scope of GOOGLE_SCOPES_BY_FEATURE[feature]) {
+      scopes.add(scope);
+    }
+  }
+  return [...scopes];
+}
+function normalizeGoogleScopes(scopes) {
+  const values = Array.isArray(scopes) ? scopes : typeof scopes === "string" ? scopes.split(/\s+/) : [];
+  return [...new Set(values.map((scope) => scope.trim()).filter(Boolean))];
+}
 
 // src/project-structure.ts
 import * as fs from "fs/promises";
 import * as path from "path";
+import { execFile } from "child_process";
+import { promisify } from "util";
 var MAX_DIR_ENTRIES = 10;
 var README_CANDIDATES = ["README.md", "readme.md", "README.txt", "readme.txt"];
 var OLLAMA_BASE_URL = "http://127.0.0.1:11434";
+var MAX_KNOWLEDGE_SOURCE_FILES = 8;
+var MAX_KNOWLEDGE_SOURCE_FILE_CATALOG = 20;
+var MAX_KNOWLEDGE_SOURCE_SNIPPET_CHARS = 1800;
+var MAX_KNOWLEDGE_SOURCE_TOTAL_CHARS = 12e3;
+var MAX_KNOWLEDGE_SOURCE_DEPTH = 3;
+var PDFTOTEXT_CANDIDATES = ["pdftotext", "/opt/homebrew/bin/pdftotext"];
+var TEXTUTIL_CANDIDATES = ["/usr/bin/textutil", "textutil"];
+var IGNORED_KNOWLEDGE_SOURCE_DIRS = /* @__PURE__ */ new Set([
+  ".git",
+  ".next",
+  ".turbo",
+  "build",
+  "coverage",
+  "dist",
+  "node_modules",
+  "out",
+  "tmp"
+]);
+var execFileAsync = promisify(execFile);
 async function buildProjectStructurePreview(input) {
   const baseFiles = renderTemplate(getTemplate(input.profileType), {
     name: input.name,
     assistantName: input.assistantName,
     responsibilities: input.responsibilities
   });
-  const folderSignals = await Promise.all(
+  const localFolderSignals = await Promise.all(
     input.localFolders.filter((folder) => folder.path.trim()).map((folder) => collectFolderSignal(folder))
   );
+  const driveFolderSignals = (input.driveFolders ?? []).filter((folder) => folder.path.trim()).map((folder) => collectDriveFolderSignal(folder));
+  const folderSignals = [...localFolderSignals, ...driveFolderSignals];
   const heuristicProjects = buildHeuristicProjects(folderSignals, input.integrations);
   const ollamaResult = await enrichProjectsWithOllama(
     heuristicProjects,
@@ -452,7 +761,7 @@ async function buildProjectStructurePreview(input) {
   const projects = ollamaResult?.projects ?? heuristicProjects;
   const inference = ollamaResult?.inference ?? {
     strategy: "heuristic",
-    note: "Structured locally from folder tags, folder names, and visible directory signals. No external API calls were made."
+    note: "Structured locally from selected source folders, folder names, and visible directory signals. No external API calls were made."
   };
   return {
     files: buildTemplateFiles(baseFiles, projects, folderSignals, input.integrations),
@@ -460,6 +769,318 @@ async function buildProjectStructurePreview(input) {
     inference
   };
 }
+var OPENAI_BASE_URL = "https://api.openai.com/v1";
+var ANTHROPIC_BASE_URL = "https://api.anthropic.com/v1";
+async function buildProjectKnowledgeFiles(input) {
+  const prompt = await buildKnowledgePrompt(input);
+  const provider = input.provider ?? { type: "ollama" };
+  let rawJson;
+  let modelLabel;
+  if (provider.type === "openai") {
+    if (!provider.apiKey) throw new Error("OpenAI API key is required.");
+    const model = provider.model || "gpt-4.1-mini";
+    modelLabel = `OpenAI ${model}`;
+    const response = await fetch(`${OPENAI_BASE_URL}/chat/completions`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${provider.apiKey}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        model,
+        temperature: 0.2,
+        response_format: { type: "json_object" },
+        messages: [
+          { role: "system", content: "Return strict JSON only." },
+          { role: "user", content: prompt }
+        ]
+      }),
+      signal: AbortSignal.timeout(9e4)
+    });
+    if (!response.ok) {
+      throw new Error(`OpenAI returned HTTP ${response.status} while building project knowledge.`);
+    }
+    const data = await response.json();
+    rawJson = data.choices?.[0]?.message?.content ?? "";
+  } else if (provider.type === "anthropic") {
+    if (!provider.apiKey) throw new Error("Anthropic API key is required.");
+    const model = provider.model || "claude-sonnet-4-20250514";
+    modelLabel = `Anthropic ${model}`;
+    const response = await fetch(`${ANTHROPIC_BASE_URL}/messages`, {
+      method: "POST",
+      headers: {
+        "x-api-key": provider.apiKey,
+        "anthropic-version": "2023-06-01",
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        model,
+        max_tokens: 8192,
+        temperature: 0.2,
+        system: "Return strict JSON only.",
+        messages: [{ role: "user", content: prompt }]
+      }),
+      signal: AbortSignal.timeout(9e4)
+    });
+    if (!response.ok) {
+      throw new Error(`Anthropic returned HTTP ${response.status} while building project knowledge.`);
+    }
+    const data = await response.json();
+    rawJson = data.content?.find((c) => c.type === "text")?.text ?? "";
+  } else {
+    const ollamaModel = await resolveOllamaModel();
+    if (!ollamaModel) {
+      throw new Error("No local Ollama model is available. Start Ollama first, or configure an OpenAI / Anthropic API key.");
+    }
+    modelLabel = `Ollama ${ollamaModel}`;
+    const response = await fetch(`${OLLAMA_BASE_URL}/api/generate`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        model: ollamaModel,
+        prompt,
+        stream: false,
+        format: "json",
+        options: { temperature: 0.2 }
+      }),
+      signal: AbortSignal.timeout(12e4)
+    });
+    if (!response.ok) {
+      throw new Error(`Ollama returned HTTP ${response.status} while building project knowledge.`);
+    }
+    const payload = await response.json();
+    rawJson = payload.response ?? "";
+  }
+  if (!rawJson.trim()) {
+    throw new Error(`${modelLabel} returned an empty response while building project knowledge.`);
+  }
+  const parsed = JSON.parse(rawJson);
+  const llmFiles = parsed.files ?? {};
+  const normalizedFiles = {};
+  for (const [filePath, existingContent] of Object.entries(input.files)) {
+    normalizedFiles[filePath] = llmFiles[filePath]?.trim() ? llmFiles[filePath] : existingContent;
+  }
+  const projectPrefix = `projects/${input.project.slug}/`;
+  for (const [filePath, content] of Object.entries(llmFiles)) {
+    if (normalizedFiles[filePath] === void 0 && content?.trim() && filePath.startsWith(projectPrefix)) {
+      normalizedFiles[filePath] = content;
+    }
+  }
+  return { files: normalizedFiles, model: modelLabel };
+}
+async function buildKnowledgePrompt(input) {
+  const slug = input.project.slug;
+  const lines = [];
+  const agreementReviewMode = isAgreementReviewProject(input);
+  const localKnowledgeEvidence = await collectLocalKnowledgeEvidence(
+    input.project,
+    input.localFolders ?? []
+  );
+  lines.push(
+    "You are a project knowledge generator for a personal assistant called Pac-Man.",
+    "Your job: given a project and its context, produce richly-filled markdown files",
+    `that live under the "projects/${slug}/" subfolder.`,
+    ""
+  );
+  if (input.userProfile) {
+    lines.push(
+      "# User Profile",
+      `- Name: ${input.userProfile.name}`,
+      `- Role: ${input.userProfile.profileType}`,
+      ...input.userProfile.assistantName ? [`- Assistant name: ${input.userProfile.assistantName}`] : [],
+      ...input.userProfile.responsibilities.length > 0 ? ["- Responsibilities:", ...input.userProfile.responsibilities.map((r) => `  - ${r}`)] : [],
+      ""
+    );
+  }
+  lines.push(
+    "# Project",
+    `- Name: ${input.project.name}`,
+    `- Slug: ${slug}`,
+    ...input.project.summary ? [`- Summary: ${input.project.summary}`] : [],
+    ...input.project.primaryFocus ? [`- Primary Focus: ${input.project.primaryFocus}`] : []
+  );
+  if (input.project.sourceFolders.length > 0) {
+    lines.push("- Source Folders:", ...input.project.sourceFolders.map((f) => `  - ${f}`));
+  }
+  if (input.project.connectedIntegrations.length > 0) {
+    lines.push("- Connected Integrations:", ...input.project.connectedIntegrations.map((i) => `  - ${i}`));
+  }
+  if (input.project.githubBranches.length > 0) {
+    lines.push("- GitHub Branches:", ...input.project.githubBranches.map((b) => `  - ${b}`));
+  }
+  if (input.project.gitlabBranches.length > 0) {
+    lines.push("- GitLab Branches:", ...input.project.gitlabBranches.map((b) => `  - ${b}`));
+  }
+  if (input.project.slackChannels.length > 0) {
+    lines.push("- Slack Channels:", ...input.project.slackChannels.map((c) => `  - ${c}`));
+  }
+  if (input.project.gdriveFolders.length > 0) {
+    lines.push("- GDrive Folders:", ...input.project.gdriveFolders.map((f) => `  - ${f}`));
+  }
+  if (input.project.gdocDocuments.length > 0) {
+    lines.push("- Google Docs:", ...input.project.gdocDocuments.map((d) => `  - ${d}`));
+  }
+  if (input.project.keySignals.length > 0) {
+    lines.push("- Key Signals:", ...input.project.keySignals.map((s) => `  - ${s}`));
+  }
+  if (input.project.llmInstructions) {
+    lines.push("", "## LLM Instructions (follow these)", input.project.llmInstructions);
+  }
+  lines.push("");
+  if (agreementReviewMode) {
+    lines.push(
+      "# Analysis Mode",
+      "This project is a contract / agreement review, not a software delivery project.",
+      "- Prioritize agreement-by-agreement summaries, counterparties, dates, commercial terms, exclusivity, obligations, governing law, notice, renewal / termination clauses, and diligence risks.",
+      "- Treat the source evidence as the primary truth. User role templates are secondary structure only.",
+      '- If a template section such as tech stack, CI, deploy target, or sprint metrics is not supported by evidence, write "Not applicable for this agreement review" or add a TODO. Do not invent software-project details.',
+      ""
+    );
+  }
+  if (input.integrations && input.integrations.length > 0) {
+    lines.push("# Workspace Integrations", ...input.integrations.map((i) => `- ${i}`), "");
+  }
+  const projectLocalFolders = (input.localFolders ?? []).filter(
+    (f) => f.project === input.project.name || input.project.sourceFolders.includes(f.path)
+  );
+  const otherLocalFolders = (input.localFolders ?? []).filter(
+    (f) => !projectLocalFolders.includes(f)
+  );
+  if (projectLocalFolders.length > 0) {
+    lines.push(
+      "# Local Folders (this project)",
+      ...projectLocalFolders.map((f) => `- ${f.path}`),
+      ""
+    );
+  }
+  if (otherLocalFolders.length > 0) {
+    lines.push(
+      "# Local Folders (other projects)",
+      ...otherLocalFolders.map((f) => `- ${f.path}${f.project ? ` (${f.project})` : ""}`),
+      ""
+    );
+  }
+  const projectDriveFolders = (input.driveFolders ?? []).filter(
+    (f) => input.project.gdriveFolders.includes(f.name) || input.project.gdriveFolders.includes(f.path)
+  );
+  if (projectDriveFolders.length > 0) {
+    lines.push(
+      "# Google Drive Folders (this project)",
+      ...projectDriveFolders.map((f) => `- ${f.name} (${f.path})`),
+      ""
+    );
+  }
+  if (localKnowledgeEvidence.length > 0) {
+    lines.push(
+      "# Local Source Evidence",
+      "Use these excerpts as primary grounding when filling in context, decisions, notes, and project-specific template files.",
+      ""
+    );
+    for (const evidence of localKnowledgeEvidence) {
+      lines.push(`## Folder: ${evidence.folderPath}`);
+      if (evidence.notes.length > 0) {
+        lines.push(...evidence.notes.map((note) => `- ${note}`));
+      }
+      if (evidence.fileCatalog.length > 0) {
+        lines.push(
+          "### File Catalog",
+          ...evidence.fileCatalog.map((file) => `- ${file.relativePath} \u2014 ${file.status}`)
+        );
+      }
+      if (evidence.excerpts.length > 0) {
+        for (const excerpt of evidence.excerpts) {
+          lines.push(
+            `### File: ${excerpt.relativePath}`,
+            "```text",
+            excerpt.snippet,
+            "```"
+          );
+        }
+      } else {
+        lines.push("- No readable text files were sampled from this folder.");
+      }
+      lines.push("");
+    }
+  }
+  if (input.templateSections && input.templateSections.length > 0) {
+    lines.push(
+      "# Base Template Sections",
+      "These are the template sections for this user role. Use them as structure for the project-specific files.",
+      ""
+    );
+    for (const section of input.templateSections) {
+      lines.push(
+        `## ${section.name} (${section.fileName})`,
+        "```",
+        section.defaultContent,
+        "```",
+        ""
+      );
+    }
+  }
+  lines.push(
+    "# Output Instructions",
+    "",
+    "Return strict JSON only in this format:",
+    '{"files":{"projects/<slug>/filename.md":"# Markdown content", ...}}',
+    "",
+    `All file paths MUST start with "projects/${slug}/".`,
+    "",
+    "Required files to generate:"
+  );
+  const requiredFiles = {};
+  const projectMainPath = `projects/${slug}/project.md`;
+  requiredFiles[projectMainPath] = input.files[projectMainPath] ?? "";
+  lines.push(`- "${projectMainPath}" \u2014 the main project overview file`);
+  if (agreementReviewMode) {
+    const matrixPath = `projects/${slug}/agreement-matrix.md`;
+    requiredFiles[matrixPath] = input.files[matrixPath] ?? [
+      "# Agreement Matrix",
+      "",
+      "| File | Counterparty | Agreement Type | Effective Date | Commercial Terms | Key Obligations | Exclusivity / Territory | Term / Termination | Governing Law / Dispute | Risks / Gaps | Evidence Quality |",
+      "|------|--------------|----------------|----------------|------------------|-----------------|-------------------------|--------------------|------------------------|--------------|------------------|",
+      "| TODO | TODO | TODO | TODO | TODO | TODO | TODO | TODO | TODO | TODO | TODO |"
+    ].join("\n");
+    lines.push(`- "${matrixPath}" \u2014 agreement-by-agreement summary table grounded in the source files`);
+  }
+  if (input.templateSections && input.templateSections.length > 0) {
+    for (const section of input.templateSections) {
+      const filePath = `projects/${slug}/${section.fileName}`;
+      requiredFiles[filePath] = input.files[filePath] ?? section.defaultContent;
+      lines.push(`- "${filePath}" \u2014 ${section.name} (project-specific version of the base template)`);
+    }
+  }
+  for (const [filePath, content] of Object.entries(input.files)) {
+    if (!requiredFiles[filePath]) {
+      requiredFiles[filePath] = content;
+      lines.push(`- "${filePath}" \u2014 user-created schema file`);
+    }
+  }
+  lines.push(
+    "",
+    "Rules:",
+    "- Return content for EVERY file path listed above.",
+    `- You MAY also add new files under "projects/${slug}/" if the project context warrants it (e.g., "projects/${slug}/runbook.md", "projects/${slug}/decisions.md").`,
+    "- Fill in template placeholders and HTML comments with real content derived from the project context.",
+    "- Ground all content in the provided project details, source folders, integrations, branches, channels, and signals.",
+    "- Use the user role and responsibilities only as secondary context for structure. Source evidence takes precedence.",
+    "- If specific details are missing, add actionable TODO bullets instead of inventing facts.",
+    "- Prefer concise, structured markdown. Use headings, bullets, and tables.",
+    "- Follow any LLM Instructions provided in the project.",
+    "- DO NOT invent repositories, tech stack, CI, deploy targets, sprint timelines, metrics, or team structure unless directly supported by evidence.",
+    "- If a source file could not be read because it is scan-only or OCR is missing, explicitly say so and keep the related fields as TODO / OCR-needed.",
+    ...agreementReviewMode ? [
+      "- For agreement review projects, summarize each agreement individually and cross-reference the file name.",
+      "- Extract party names, dates, commission / fee mechanics, lead-generation flow, obligations, confidentiality, indemnity, exclusivity, customer support allocation, governing law, dispute resolution, and termination / notice periods whenever present.",
+      "- If a clause is missing from the extracted evidence, mark it as not found instead of inferring it."
+    ] : [],
+    "",
+    "# Seed Files (fill these in or improve them)",
+    "",
+    JSON.stringify(requiredFiles, null, 2)
+  );
+  return lines.join("\n");
+}
 function buildTemplateFiles(baseFiles, projects, folderSignals, integrations) {
   const files = { ...baseFiles };
   const integrationNames = integrations.map(formatIntegrationName);
@@ -472,7 +1093,7 @@ function buildTemplateFiles(baseFiles, projects, folderSignals, integrations) {
   ].join("\n");
   const sourceLines = [];
   if (folderSignals.length > 0) {
-    sourceLines.push("## Local Sources", "");
+    sourceLines.push("## Selected Sources", "");
     sourceLines.push(...folderSignals.map((signal) => `- \`${signal.path}\``));
     sourceLines.push("");
   }
@@ -499,7 +1120,7 @@ function buildTemplateFiles(baseFiles, projects, folderSignals, integrations) {
     ].join("\n");
   }
   for (const project of projects) {
-    files[`projects/${project.slug}.md`] = buildProjectFile(project);
+    files[`projects/${project.slug}/project.md`] = buildProjectFile(project);
   }
   return files;
 }
@@ -515,11 +1136,11 @@ function buildProjectFile(project) {
     "",
     project.primaryFocus || "<!-- Capture the main problem area, domain, or ownership -->",
     "",
-    "## Local Sources",
+    "## Sources",
     "",
     formatBulletList(
-      project.sourceFolders.map((folder) => `\`${folder}\``),
-      "No local folders linked to this project yet."
+      [...project.sourceFolders, ...project.gdriveFolders, ...project.gdocDocuments].map((item) => `\`${item}\``),
+      "No source folders linked to this project yet."
     ),
     "",
     "## Connected Integrations",
@@ -529,10 +1150,49 @@ function buildProjectFile(project) {
       "No integrations connected during onboarding."
     ),
     "",
+    "## Source Monitoring",
+    "",
+    "### GitHub Branches",
+    "",
+    formatBulletList(project.githubBranches, "No GitHub branches scoped yet."),
+    "",
+    "### GitLab Branches",
+    "",
+    formatBulletList(project.gitlabBranches, "No GitLab branches scoped yet."),
+    "",
+    "### Slack Channels",
+    "",
+    formatBulletList(project.slackChannels, "No Slack channels scoped yet."),
+    "",
+    "### Google Drive Folders",
+    "",
+    formatBulletList(
+      project.gdriveFolders.map((folder) => `\`${folder}\``),
+      "No Google Drive folders scoped yet."
+    ),
+    "",
+    "### Google Docs",
+    "",
+    formatBulletList(
+      project.gdocDocuments.map((document) => `\`${document}\``),
+      "No Google Docs scoped yet."
+    ),
+    "",
     "## Grouping Signals",
     "",
     formatBulletList(project.keySignals, "Add more details after the first sync."),
     "",
+    "## Project Context Files",
+    "",
+    formatBulletList(
+      project.templateFiles.map((filePath) => `\`${filePath}\``),
+      "No project context files linked yet."
+    ),
+    "",
+    "## Instructions For LLM",
+    "",
+    project.llmInstructions || "<!-- Add project-specific instructions that the LLM should follow -->",
+    "",
     "## Notes To Confirm",
     "",
     "- Owners:",
@@ -541,11 +1201,259 @@ function buildProjectFile(project) {
     ""
   ].join("\n");
 }
-function formatBulletList(items, fallback) {
-  if (items.length === 0) {
-    return `- ${fallback}`;
+function formatBulletList(items, fallback) {
+  if (items.length === 0) {
+    return `- ${fallback}`;
+  }
+  return items.map((item) => `- ${item}`).join("\n");
+}
+async function collectLocalKnowledgeEvidence(project, localFolders) {
+  const projectLocalFolders = localFolders.filter((folder) => {
+    const trimmedPath = folder.path.trim();
+    if (!trimmedPath) {
+      return false;
+    }
+    return folder.project === project.name || project.sourceFolders.includes(trimmedPath);
+  });
+  const evidence = await Promise.all(
+    projectLocalFolders.map((folder) => collectLocalFolderKnowledgeEvidence(folder))
+  );
+  return evidence.filter((item) => item !== null);
+}
+async function collectLocalFolderKnowledgeEvidence(folder) {
+  const rawPath = folder.path.trim();
+  if (!rawPath) {
+    return null;
+  }
+  const resolvedPath = path.resolve(rawPath);
+  const signal = await collectFolderSignal(folder);
+  const candidates = [];
+  await walkKnowledgeSourceDirectory(resolvedPath, "", 0, candidates);
+  candidates.sort((left, right) => right.score - left.score || left.relativePath.localeCompare(right.relativePath));
+  const excerpts = [];
+  const fileCatalog = [];
+  let totalChars = 0;
+  const rankedCandidates = candidates.slice(0, MAX_KNOWLEDGE_SOURCE_FILE_CATALOG);
+  for (const candidate of rankedCandidates) {
+    const result = await readKnowledgeSourceSnippet(candidate.absolutePath);
+    fileCatalog.push({
+      relativePath: candidate.relativePath,
+      status: result.status === "sampled" ? "text extracted" : result.status === "ocr-needed" ? "OCR or manual review needed" : "no readable text extracted"
+    });
+    if (result.status !== "sampled" || !result.snippet || excerpts.length >= MAX_KNOWLEDGE_SOURCE_FILES || totalChars >= MAX_KNOWLEDGE_SOURCE_TOTAL_CHARS) {
+      continue;
+    }
+    const remaining = MAX_KNOWLEDGE_SOURCE_TOTAL_CHARS - totalChars;
+    const trimmedSnippet = result.snippet.slice(0, remaining);
+    excerpts.push({
+      relativePath: candidate.relativePath,
+      snippet: trimmedSnippet
+    });
+    totalChars += trimmedSnippet.length;
+  }
+  return {
+    folderPath: rawPath,
+    notes: signal.notes,
+    excerpts,
+    fileCatalog
+  };
+}
+async function walkKnowledgeSourceDirectory(directoryPath, relativeDir, depth, candidates) {
+  if (depth > MAX_KNOWLEDGE_SOURCE_DEPTH) {
+    return;
+  }
+  let entries;
+  try {
+    entries = await fs.readdir(directoryPath, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (entry.name.startsWith(".")) {
+      continue;
+    }
+    const absolutePath = path.join(directoryPath, entry.name);
+    const relativePath = relativeDir ? `${relativeDir}/${entry.name}` : entry.name;
+    if (entry.isDirectory()) {
+      if (IGNORED_KNOWLEDGE_SOURCE_DIRS.has(entry.name)) {
+        continue;
+      }
+      await walkKnowledgeSourceDirectory(absolutePath, relativePath, depth + 1, candidates);
+      continue;
+    }
+    if (!entry.isFile()) {
+      continue;
+    }
+    const score = scoreKnowledgeSourceFile(relativePath);
+    if (score <= 0) {
+      continue;
+    }
+    candidates.push({ absolutePath, relativePath, score });
+  }
+}
+function scoreKnowledgeSourceFile(relativePath) {
+  const normalized = relativePath.toLowerCase();
+  const baseName = path.basename(normalized);
+  const extension = path.extname(normalized);
+  if (!isKnowledgeSourceTextFile(baseName, extension)) {
+    return 0;
+  }
+  let score = 10;
+  if (baseName === "readme.md" || baseName === "readme.txt") {
+    score += 120;
+  }
+  if (baseName === "package.json") {
+    score += 70;
+  }
+  if (/(context|overview|summary|decision|decisions|adr|spec|design|roadmap|plan|note|notes|docs|doc|requirement|brief|meeting|architecture|product|vision|status)/.test(normalized)) {
+    score += 90;
+  }
+  if (normalized.includes("/docs/") || normalized.includes("/notes/") || normalized.includes("/decisions/")) {
+    score += 40;
+  }
+  if (extension === ".md" || extension === ".mdx" || extension === ".txt") {
+    score += 30;
+  }
+  if (extension === ".json" || extension === ".yaml" || extension === ".yml") {
+    score += 20;
+  }
+  if (extension === ".docx" || extension === ".doc") {
+    score += 60;
+  }
+  if (extension === ".pdf") {
+    score += 80;
+  }
+  if (extension === ".xlsx" || extension === ".xls" || extension === ".csv") {
+    score += 15;
+  }
+  if (/(agreement|contract|mou|partner|annexure|term|marketing)/.test(normalized)) {
+    score += 110;
+  }
+  return score;
+}
+function isKnowledgeSourceTextFile(baseName, extension) {
+  if (baseName === "package.json") {
+    return true;
+  }
+  return (/* @__PURE__ */ new Set([".md", ".mdx", ".txt", ".json", ".yaml", ".yml", ".pdf", ".xlsx", ".xls", ".csv", ".docx", ".doc"])).has(extension);
+}
+async function readKnowledgeSourceSnippet(filePath) {
+  try {
+    const extension = path.extname(filePath).toLowerCase();
+    let normalized;
+    if (extension === ".pdf") {
+      const pdfSnippet = await extractPdfSnippet(filePath);
+      if (pdfSnippet === null) {
+        return {
+          snippet: null,
+          status: "ocr-needed"
+        };
+      }
+      normalized = pdfSnippet.trim();
+    } else if (extension === ".docx" || extension === ".doc") {
+      normalized = (await extractDocxSnippet(filePath))?.trim() ?? "";
+    } else if (extension === ".xlsx" || extension === ".xls") {
+      normalized = (await extractSpreadsheetSnippet(filePath))?.trim() ?? "";
+    } else {
+      const raw = await fs.readFile(filePath, "utf-8");
+      normalized = raw.trim();
+      if (extension === ".json") {
+        try {
+          normalized = JSON.stringify(JSON.parse(normalized), null, 2);
+        } catch {
+        }
+      }
+    }
+    if (!normalized) {
+      return {
+        snippet: null,
+        status: "unreadable"
+      };
+    }
+    return {
+      snippet: normalized.slice(0, MAX_KNOWLEDGE_SOURCE_SNIPPET_CHARS),
+      status: "sampled"
+    };
+  } catch {
+    return {
+      snippet: null,
+      status: "unreadable"
+    };
+  }
+}
+async function extractPdfSnippet(filePath) {
+  for (const candidate of PDFTOTEXT_CANDIDATES) {
+    try {
+      const { stdout } = await execFileAsync(candidate, [filePath, "-"], {
+        timeout: 15e3,
+        maxBuffer: 4 * 1024 * 1024
+      });
+      const normalized = normalizeKnowledgeSourceText(stdout);
+      if (normalized && !isLowSignalPdfText(normalized)) {
+        return normalized;
+      }
+    } catch {
+    }
   }
-  return items.map((item) => `- ${item}`).join("\n");
+  return null;
+}
+async function extractDocxSnippet(filePath) {
+  for (const candidate of TEXTUTIL_CANDIDATES) {
+    try {
+      const { stdout } = await execFileAsync(candidate, ["-convert", "txt", "-stdout", filePath], {
+        timeout: 15e3,
+        maxBuffer: 4 * 1024 * 1024
+      });
+      const normalized = normalizeKnowledgeSourceText(stdout);
+      if (normalized) {
+        return normalized;
+      }
+    } catch {
+    }
+  }
+  return null;
+}
+async function extractSpreadsheetSnippet(filePath) {
+  try {
+    const sharedStrings = await execFileAsync("unzip", ["-p", filePath, "xl/sharedStrings.xml"], {
+      timeout: 15e3,
+      maxBuffer: 2 * 1024 * 1024
+    });
+    const normalized = normalizeKnowledgeSourceText(stripXmlTags(sharedStrings.stdout));
+    if (normalized) {
+      return normalized;
+    }
+  } catch {
+  }
+  return `Workbook file: ${path.basename(filePath)}`;
+}
+function stripXmlTags(value) {
+  return value.replace(/<[^>]+>/g, " ").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
+}
+function normalizeKnowledgeSourceText(value) {
+  return value.replace(/\u0000/g, " ").replace(/\f/g, "\n").replace(/[ \t]+\n/g, "\n").replace(/\n{3,}/g, "\n\n").replace(/[^\S\n]{2,}/g, " ").trim();
+}
+function isLowSignalPdfText(value) {
+  const normalized = value.toLowerCase().replace(/\s+/g, " ").trim();
+  if (!normalized) {
+    return true;
+  }
+  const withoutScannerWatermarks = normalized.replace(/scanned (with|by) camscanner/g, "").replace(/\s+/g, " ").trim();
+  return withoutScannerWatermarks.length === 0;
+}
+function isAgreementReviewProject(input) {
+  const haystack = [
+    input.project.name,
+    input.project.summary,
+    input.project.primaryFocus,
+    input.project.llmInstructions,
+    ...input.project.sourceFolders,
+    ...(input.localFolders ?? []).map((folder) => folder.path),
+    ...input.project.keySignals
+  ].join(" ").toLowerCase();
+  return /(agreement|agreements|contract|contracts|mou|due diligence|diligence|legal|partner|annexure|insurance documents|channel partner)/.test(
+    haystack
+  );
 }
 async function collectFolderSignal(folder) {
   const rawPath = folder.path.trim();
@@ -590,6 +1498,7 @@ async function collectFolderSignal(folder) {
     }
   }
   return {
+    sourceType: "local",
     path: rawPath,
     explicitProject: folder.project?.trim() || void 0,
     basename: basename2,
@@ -599,6 +1508,20 @@ async function collectFolderSignal(folder) {
     notes
   };
 }
+function collectDriveFolderSignal(folder) {
+  const rawPath = folder.path.trim();
+  const basename2 = folder.name.trim() || rawPath.split("/").filter(Boolean).pop() || "Drive Folder";
+  return {
+    sourceType: "gdrive",
+    path: rawPath,
+    basename: basename2,
+    entries: [],
+    notes: [
+      "Google Drive folder selected during onboarding",
+      `Drive path: ${rawPath}`
+    ]
+  };
+}
 function extractReadmeHeading(contents) {
   for (const rawLine of contents.split("\n").slice(0, 30)) {
     const line = rawLine.trim();
@@ -624,7 +1547,14 @@ function buildHeuristicProjects(folderSignals, integrations) {
         primaryFocus: "Cross-project workspace context",
         sourceFolders: [],
         connectedIntegrations: integrationNames,
-        keySignals: integrationNames.map((name) => `Connected integration: ${name}`)
+        githubBranches: [],
+        gitlabBranches: [],
+        slackChannels: [],
+        gdriveFolders: [],
+        gdocDocuments: [],
+        keySignals: integrationNames.map((name) => `Connected integration: ${name}`),
+        llmInstructions: "",
+        templateFiles: []
       }
     ];
   }
@@ -633,7 +1563,11 @@ function buildHeuristicProjects(folderSignals, integrations) {
     const slug = slugify(groupName) || "untitled-project";
     const existing = groups.get(slug);
     if (existing) {
-      existing.sourceFolders.push(signal.path);
+      if (signal.sourceType === "gdrive") {
+        existing.gdriveFolders.push(signal.path);
+      } else {
+        existing.sourceFolders.push(signal.path);
+      }
       existing.keySignals = unique([...existing.keySignals, ...signal.notes]);
       continue;
     }
@@ -642,9 +1576,16 @@ function buildHeuristicProjects(folderSignals, integrations) {
       name: groupName,
       summary: buildHeuristicSummary(groupName, signal, integrationNames),
       primaryFocus: buildHeuristicFocus(signal),
-      sourceFolders: [signal.path],
+      sourceFolders: signal.sourceType === "gdrive" ? [] : [signal.path],
       connectedIntegrations: integrationNames,
-      keySignals: unique(signal.notes)
+      githubBranches: [],
+      gitlabBranches: [],
+      slackChannels: [],
+      gdriveFolders: signal.sourceType === "gdrive" ? [signal.path] : [],
+      gdocDocuments: [],
+      keySignals: unique(signal.notes),
+      llmInstructions: "",
+      templateFiles: []
     });
   }
   return [...groups.values()].sort((left, right) => left.name.localeCompare(right.name));
@@ -657,9 +1598,12 @@ function buildHeuristicSummary(projectName, signal, integrationNames) {
   if (signal.packageName) {
     return `${projectName} was inferred from the local package "${signal.packageName}". Review and tighten this summary before finishing setup.${integrationSuffix}`;
   }
-  return `${projectName} was inferred from the selected local workspace folder. Review and tighten this summary before finishing setup.${integrationSuffix}`;
+  return `${signal.sourceType === "gdrive" ? `${projectName} was inferred from the selected Google Drive folder.` : `${projectName} was inferred from the selected local workspace folder.`} Review and tighten this summary before finishing setup.${integrationSuffix}`;
 }
 function buildHeuristicFocus(signal) {
+  if (signal.sourceType === "gdrive") {
+    return `Google Drive context collected from the ${humanizeLabel(signal.basename)} folder.`;
+  }
   if (signal.packageName) {
     return `Owns or contributes to the ${humanizeLabel(signal.packageName)} codebase.`;
   }
@@ -782,7 +1726,8 @@ function formatIntegrationName(id) {
     github: "GitHub",
     gitlab: "GitLab",
     gmail: "Gmail",
-    gdrive: "Google Drive",
+    "google-drive-storage": "GDrive",
+    gdrive: "GDocs",
     gchat: "Google Chat"
   };
   return names[id] ?? humanizeLabel(id);
@@ -797,8 +1742,83 @@ function unique(values) {
   return [...new Set(values.filter(Boolean))];
 }
 
+// src/slack-manifest.ts
+var SLACK_BOT_SCOPES = [
+  "channels:history",
+  "channels:read",
+  "groups:history",
+  "groups:read",
+  "im:history",
+  "app_mentions:read",
+  "chat:write"
+];
+var SLACK_BOT_EVENTS = [
+  "message.channels",
+  "message.groups",
+  "app_mention"
+];
+var SLACK_LONG_DESCRIPTION = "Pac-Man connects Slack threads to your local project context so every reply can reference saved notes, project summaries, folder-derived evidence, and prior decisions. It helps teams answer questions faster without losing the audit trail back to the workspace that produced the draft.";
+function buildSlackManifest(input = {}) {
+  const assistantName = normalizeAssistantName(input.assistantName);
+  const appName = truncateSlackAppName(`Pac-Man ${assistantName}`);
+  const botDisplayName = sanitizeSlackBotDisplayName(assistantName);
+  const manifest = {
+    _metadata: {
+      major_version: 2,
+      minor_version: 1
+    },
+    display_information: {
+      name: appName,
+      description: "Project-aware Slack replies grounded in your Pac-Man workspace.",
+      long_description: SLACK_LONG_DESCRIPTION,
+      background_color: "#0B1220"
+    },
+    features: {
+      bot_user: {
+        display_name: botDisplayName,
+        always_online: false
+      }
+    },
+    oauth_config: {
+      scopes: {
+        bot: [...SLACK_BOT_SCOPES]
+      }
+    },
+    settings: {
+      event_subscriptions: {
+        bot_events: [...SLACK_BOT_EVENTS]
+      },
+      org_deploy_enabled: false,
+      socket_mode_enabled: true,
+      is_hosted: false,
+      token_rotation_enabled: false
+    }
+  };
+  const manifestJson = JSON.stringify(manifest, null, 2);
+  const createUrl = `https://api.slack.com/apps?new_app=1&manifest_json=${encodeURIComponent(manifestJson)}`;
+  return {
+    appName,
+    botDisplayName,
+    manifest,
+    manifestJson,
+    createUrl
+  };
+}
+function normalizeAssistantName(value) {
+  const trimmed = value?.trim().replace(/\s+/g, " ") ?? "";
+  return trimmed || "Atlas";
+}
+function truncateSlackAppName(value) {
+  const collapsed = value.replace(/\s+/g, " ").trim();
+  return collapsed.slice(0, 35).trimEnd() || "Pac-Man Atlas";
+}
+function sanitizeSlackBotDisplayName(value) {
+  const sanitized = value.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9._-]/g, "").replace(/[-_.]{2,}/g, "-").replace(/^[-_.]+|[-_.]+$/g, "").slice(0, 80);
+  return sanitized || "atlas";
+}
+
 // src/onboarding-server.ts
-var execFileAsync = promisify(execFile);
+var execFileAsync2 = promisify2(execFile2);
 var PICKER_COPY = {
   "local-source": {
     prompt: "Select a local project folder to tag in Pac-Man",
@@ -809,20 +1829,29 @@ var PICKER_COPY = {
     title: "Select workspace folder"
   }
 };
+var pickerPathCache = /* @__PURE__ */ new Map();
+var PICKER_PATH_CACHE_TTL = 3e4;
 async function resolvePickerStartPath(defaultPath) {
   const trimmed = defaultPath?.trim();
   if (!trimmed) {
     return void 0;
   }
   const resolvedPath = path2.resolve(trimmed);
+  const cached = pickerPathCache.get(resolvedPath);
+  if (cached && Date.now() - cached.validatedAt < PICKER_PATH_CACHE_TTL) {
+    return cached.resolvedPath;
+  }
   const candidates = [resolvedPath, path2.dirname(resolvedPath)];
-  for (const candidate of candidates) {
-    try {
+  const results = await Promise.allSettled(
+    candidates.map(async (candidate) => {
       const stats = await fs2.stat(candidate);
-      if (stats.isDirectory()) {
-        return candidate;
-      }
-    } catch {
+      return stats.isDirectory() ? candidate : null;
+    })
+  );
+  for (const result of results) {
+    if (result.status === "fulfilled" && result.value) {
+      pickerPathCache.set(resolvedPath, { resolvedPath: result.value, validatedAt: Date.now() });
+      return result.value;
     }
   }
   return void 0;
@@ -844,7 +1873,7 @@ async function openNativeFolderPicker(platform, purpose, startPath) {
   const copy = PICKER_COPY[purpose];
   if (platform === "darwin") {
     const script = startPath ? `POSIX path of (choose folder with prompt "${escapeAppleScriptString(copy.prompt)}" default location POSIX file "${escapeAppleScriptString(startPath)}")` : `POSIX path of (choose folder with prompt "${escapeAppleScriptString(copy.prompt)}")`;
-    const { stdout } = await execFileAsync("osascript", ["-e", script]);
+    const { stdout } = await execFileAsync2("osascript", ["-e", script]);
     return stdout.trim();
   }
   if (platform === "linux") {
@@ -852,7 +1881,7 @@ async function openNativeFolderPicker(platform, purpose, startPath) {
     if (startPath) {
       args.push(`--filename=${ensureTrailingSeparator(startPath)}`);
     }
-    const { stdout } = await execFileAsync("zenity", args);
+    const { stdout } = await execFileAsync2("zenity", args);
     return stdout.trim();
   }
   if (platform === "win32") {
@@ -863,15 +1892,31 @@ async function openNativeFolderPicker(platform, purpose, startPath) {
       ...startPath ? [`$dialog.SelectedPath = '${escapePowerShellString(startPath)}'`] : [],
       "if ($dialog.ShowDialog() -eq [System.Windows.Forms.DialogResult]::OK) { $dialog.SelectedPath }"
     ].join("; ");
-    const { stdout } = await execFileAsync("powershell", ["-NoProfile", "-Command", script]);
+    const { stdout } = await execFileAsync2("powershell", ["-NoProfile", "-Command", script]);
     return stdout.trim();
   }
   throw new Error("Folder picker not supported on this platform");
 }
 async function startOnboardingServer(port, workspacePath) {
   const app = express();
+  app.use((req, res, next) => {
+    const origin = req.headers.origin;
+    if (origin) {
+      res.header("Access-Control-Allow-Origin", origin);
+      res.header("Vary", "Origin");
+    } else {
+      res.header("Access-Control-Allow-Origin", "*");
+    }
+    res.header("Access-Control-Allow-Methods", "GET,POST,OPTIONS");
+    res.header("Access-Control-Allow-Headers", "Content-Type, Accept");
+    if (req.method === "OPTIONS") {
+      res.sendStatus(204);
+      return;
+    }
+    next();
+  });
   app.use(express.json());
-  let gdriveAuthSession = null;
+  let googleAuthSession = null;
   const onboardingStaticPath = await resolveOnboardingStaticPath();
   if (onboardingStaticPath) {
     app.use(express.static(onboardingStaticPath));
@@ -917,6 +1962,7 @@ async function startOnboardingServer(port, workspacePath) {
       assistantName,
       responsibilities,
       localFolders,
+      driveFolders,
       integrations
     } = req.body;
     try {
@@ -926,6 +1972,7 @@ async function startOnboardingServer(port, workspacePath) {
         assistantName,
         responsibilities: responsibilities ?? [],
         localFolders: localFolders ?? [],
+        driveFolders: driveFolders ?? [],
         integrations: integrations ?? []
       });
       res.json(preview);
@@ -933,6 +1980,68 @@ async function startOnboardingServer(port, workspacePath) {
       res.status(400).json({ error: String(err) });
     }
   });
+  app.post("/api/build-project-knowledge", async (req, res) => {
+    const { project, files, provider, userProfile, integrations, localFolders, driveFolders } = req.body;
+    if (!project?.slug || !project.name) {
+      res.status(400).json({ error: "Project slug and name are required." });
+      return;
+    }
+    try {
+      const selectedProvider = provider?.type === "openai" || provider?.type === "anthropic" ? {
+        type: provider.type,
+        apiKey: provider.apiKey ?? "",
+        model: provider.model
+      } : provider?.type === "ollama" ? { type: "ollama" } : void 0;
+      let templateSections;
+      if (userProfile?.profileType) {
+        try {
+          const sections = getTemplateSections(userProfile.profileType);
+          templateSections = sections.map((s) => ({
+            name: s.name,
+            fileName: s.fileName,
+            defaultContent: s.defaultContent
+          }));
+        } catch {
+        }
+      }
+      const result = await buildProjectKnowledgeFiles({
+        project: {
+          slug: project.slug,
+          name: project.name,
+          summary: project.summary ?? "",
+          primaryFocus: project.primaryFocus ?? "",
+          sourceFolders: project.sourceFolders ?? [],
+          connectedIntegrations: project.connectedIntegrations ?? [],
+          githubBranches: project.githubBranches ?? [],
+          gitlabBranches: project.gitlabBranches ?? [],
+          slackChannels: project.slackChannels ?? [],
+          gdriveFolders: project.gdriveFolders ?? [],
+          gdocDocuments: project.gdocDocuments ?? [],
+          keySignals: project.keySignals ?? [],
+          llmInstructions: project.llmInstructions ?? "",
+          templateFiles: project.templateFiles ?? []
+        },
+        files: files ?? {},
+        provider: selectedProvider,
+        userProfile: userProfile ? {
+          name: userProfile.name ?? "",
+          profileType: userProfile.profileType ?? "",
+          assistantName: userProfile.assistantName ?? "",
+          responsibilities: userProfile.responsibilities ?? []
+        } : void 0,
+        integrations: integrations ?? [],
+        localFolders: localFolders ?? [],
+        driveFolders: driveFolders ?? [],
+        templateSections
+      });
+      res.json({
+        files: result.files,
+        message: `Project knowledge generated with ${result.model}. Review the files before finishing onboarding.`
+      });
+    } catch (err) {
+      res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
+    }
+  });
   app.post("/api/save", async (req, res) => {
     try {
       const payload = req.body;
@@ -971,7 +2080,19 @@ async function startOnboardingServer(port, workspacePath) {
           JSON.stringify(
             payload.inferredProjects.map((project, index) => ({
               name: project.slug ?? project.name ?? `project-${index + 1}`,
-              score: Number((1 - index * 0.1).toFixed(2))
+              score: Number((1 - index * 0.1).toFixed(2)),
+              slug: project.slug ?? `project-${index + 1}`,
+              summary: project.summary ?? "",
+              primaryFocus: project.primaryFocus ?? "",
+              sourceFolders: project.sourceFolders ?? [],
+              connectedIntegrations: project.connectedIntegrations ?? [],
+              githubBranches: project.githubBranches ?? [],
+              gitlabBranches: project.gitlabBranches ?? [],
+              slackChannels: project.slackChannels ?? [],
+              gdriveFolders: project.gdriveFolders ?? [],
+              keySignals: project.keySignals ?? [],
+              llmInstructions: project.llmInstructions ?? "",
+              templateFiles: project.templateFiles ?? []
             })),
             null,
             2
@@ -988,6 +2109,114 @@ async function startOnboardingServer(port, workspacePath) {
       res.status(500).json({ error: String(err) });
     }
   });
+  app.post("/api/save-project", async (req, res) => {
+    try {
+      const { project, templateFiles, allProjects } = req.body;
+      if (!project?.slug || !project.name) {
+        res.status(400).json({ error: "Project slug and name are required." });
+        return;
+      }
+      const effectivePath = workspacePath;
+      await fs2.mkdir(effectivePath, { recursive: true });
+      const projectsToSave = allProjects ?? [project];
+      const suggestionsDir = path2.dirname(
+        path2.join(effectivePath, WORKSPACE_PATHS.context.derived.suggestions.inferredProjects)
+      );
+      await fs2.mkdir(suggestionsDir, { recursive: true });
+      await fs2.writeFile(
+        path2.join(effectivePath, WORKSPACE_PATHS.context.derived.suggestions.inferredProjects),
+        JSON.stringify(
+          projectsToSave.map((p, index) => ({
+            name: p.slug ?? p.name ?? `project-${index + 1}`,
+            score: Number((1 - index * 0.1).toFixed(2)),
+            slug: p.slug ?? `project-${index + 1}`,
+            summary: p.summary ?? "",
+            primaryFocus: p.primaryFocus ?? "",
+            sourceFolders: p.sourceFolders ?? [],
+            connectedIntegrations: p.connectedIntegrations ?? [],
+            githubBranches: p.githubBranches ?? [],
+            gitlabBranches: p.gitlabBranches ?? [],
+            slackChannels: p.slackChannels ?? [],
+            gdriveFolders: p.gdriveFolders ?? [],
+            keySignals: p.keySignals ?? [],
+            llmInstructions: p.llmInstructions ?? "",
+            templateFiles: p.templateFiles ?? []
+          })),
+          null,
+          2
+        ),
+        "utf-8"
+      );
+      if (templateFiles) {
+        const canonicalDir = path2.join(effectivePath, "context", "canonical");
+        for (const [filePath, content] of Object.entries(templateFiles)) {
+          if (filePath.startsWith(`projects/${project.slug}`) || filePath.startsWith(`${project.slug}/`)) {
+            const fullPath = path2.join(canonicalDir, filePath);
+            await fs2.mkdir(path2.dirname(fullPath), { recursive: true });
+            await fs2.writeFile(fullPath, content, "utf-8");
+          }
+        }
+      }
+      res.json({ success: true, slug: project.slug });
+    } catch (err) {
+      res.status(500).json({ error: String(err) });
+    }
+  });
+  app.post("/api/delete-project", async (req, res) => {
+    try {
+      const { slug, allProjects } = req.body;
+      if (!slug) {
+        res.status(400).json({ error: "Project slug is required." });
+        return;
+      }
+      const effectivePath = workspacePath;
+      const suggestionsFile = path2.join(
+        effectivePath,
+        WORKSPACE_PATHS.context.derived.suggestions.inferredProjects
+      );
+      const projectsToSave = (allProjects ?? []).filter((p) => p.slug !== slug);
+      const suggestionsDir = path2.dirname(suggestionsFile);
+      await fs2.mkdir(suggestionsDir, { recursive: true });
+      await fs2.writeFile(
+        suggestionsFile,
+        JSON.stringify(
+          projectsToSave.map((p, index) => ({
+            name: p.slug ?? p.name ?? `project-${index + 1}`,
+            score: Number((1 - index * 0.1).toFixed(2)),
+            slug: p.slug ?? `project-${index + 1}`,
+            summary: p.summary ?? "",
+            primaryFocus: p.primaryFocus ?? "",
+            sourceFolders: p.sourceFolders ?? [],
+            connectedIntegrations: p.connectedIntegrations ?? [],
+            githubBranches: p.githubBranches ?? [],
+            gitlabBranches: p.gitlabBranches ?? [],
+            slackChannels: p.slackChannels ?? [],
+            gdriveFolders: p.gdriveFolders ?? [],
+            keySignals: p.keySignals ?? [],
+            llmInstructions: p.llmInstructions ?? "",
+            templateFiles: p.templateFiles ?? []
+          })),
+          null,
+          2
+        ),
+        "utf-8"
+      );
+      const canonicalDir = path2.join(effectivePath, "context", "canonical");
+      const projectDir = path2.join(canonicalDir, slug);
+      const projectFile = path2.join(canonicalDir, "projects", `${slug}.md`);
+      try {
+        await fs2.rm(projectDir, { recursive: true, force: true });
+      } catch {
+      }
+      try {
+        await fs2.rm(projectFile, { force: true });
+      } catch {
+      }
+      res.json({ success: true, slug });
+    } catch (err) {
+      res.status(500).json({ error: String(err) });
+    }
+  });
   app.post("/api/validate-integration", async (req, res) => {
     const { type, credentials } = req.body;
     try {
@@ -1017,6 +2246,14 @@ async function startOnboardingServer(port, workspacePath) {
       res.json({ valid: false, error: String(err) });
     }
   });
+  app.post("/api/slack-manifest", (req, res) => {
+    const { assistantName } = req.body;
+    try {
+      res.json(buildSlackManifest({ assistantName }));
+    } catch (err) {
+      res.status(400).json({ error: String(err) });
+    }
+  });
   app.post("/api/validate-slack-runtime", async (req, res) => {
     const {
       botToken,
@@ -1088,6 +2325,133 @@ async function startOnboardingServer(port, workspacePath) {
       });
     }
   });
+  app.post("/api/slack/channels", async (req, res) => {
+    const { botToken } = req.body;
+    if (!botToken) {
+      res.status(400).json({ error: "Slack bot token is required." });
+      return;
+    }
+    try {
+      const connector = createSlackConnector();
+      await connector.authenticate({
+        type: "slack",
+        enabled: true,
+        credentials: { botToken }
+      });
+      const channels = (await connector.listChannels()).slice(0, 100);
+      res.json({
+        options: channels.map((channel) => ({
+          value: channel.id,
+          label: `#${channel.name}${channel.isPrivate ? " (private)" : ""}`
+        }))
+      });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : String(err) });
+    }
+  });
+  app.post("/api/github/branches", async (req, res) => {
+    const { token } = req.body;
+    if (!token) {
+      res.status(400).json({ error: "GitHub personal access token is required." });
+      return;
+    }
+    try {
+      const headers = {
+        Authorization: `token ${token}`,
+        Accept: "application/vnd.github+json",
+        "User-Agent": "personal-assistant"
+      };
+      const userResponse = await fetch("https://api.github.com/user", {
+        headers,
+        signal: AbortSignal.timeout(4e3)
+      });
+      if (!userResponse.ok) {
+        throw new Error("Failed to load the authenticated GitHub user.");
+      }
+      const user = await userResponse.json();
+      if (!user.login) {
+        throw new Error("GitHub did not return the authenticated login.");
+      }
+      const eventsResponse = await fetch(
+        `https://api.github.com/users/${encodeURIComponent(user.login)}/events?per_page=50`,
+        {
+          headers,
+          signal: AbortSignal.timeout(5e3)
+        }
+      );
+      if (!eventsResponse.ok) {
+        throw new Error("Failed to load recent GitHub activity for branch selection.");
+      }
+      const events = await eventsResponse.json();
+      const seen = /* @__PURE__ */ new Set();
+      const options = events.filter((event) => event.type === "PushEvent").map((event) => {
+        const repo = event.repo?.name?.trim();
+        const ref = event.payload?.ref?.trim() ?? "";
+        const branch = ref.startsWith("refs/heads/") ? ref.replace("refs/heads/", "") : "";
+        if (!repo || !branch) {
+          return null;
+        }
+        const value = `${repo}:${branch}`;
+        if (seen.has(value)) {
+          return null;
+        }
+        seen.add(value);
+        return {
+          value,
+          label: `${repo} \xB7 ${branch}`
+        };
+      }).filter((option) => Boolean(option)).slice(0, 40);
+      res.json({
+        options
+      });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : String(err) });
+    }
+  });
+  app.post("/api/gitlab/branches", async (req, res) => {
+    const { token, baseUrl } = req.body;
+    if (!token) {
+      res.status(400).json({ error: "GitLab personal access token is required." });
+      return;
+    }
+    const resolvedBaseUrl = (baseUrl?.trim() || "https://gitlab.com/api/v4").replace(/\/$/, "");
+    try {
+      const headers = { "PRIVATE-TOKEN": token };
+      const eventsResponse = await fetch(
+        `${resolvedBaseUrl}/events?action=pushed&per_page=50`,
+        {
+          headers,
+          signal: AbortSignal.timeout(5e3)
+        }
+      );
+      if (!eventsResponse.ok) {
+        throw new Error("Failed to load recent GitLab push activity for branch selection.");
+      }
+      const events = await eventsResponse.json();
+      const seen = /* @__PURE__ */ new Set();
+      const options = events.map((event) => {
+        const repo = event.project?.path_with_namespace?.trim();
+        const branch = event.push_data?.ref?.trim() ?? "";
+        if (!repo || !branch) {
+          return null;
+        }
+        const value = `${repo}:${branch}`;
+        if (seen.has(value)) {
+          return null;
+        }
+        seen.add(value);
+        return {
+          value,
+          label: `${repo} \xB7 ${branch}`
+        };
+      }).filter((option) => Boolean(option)).slice(0, 40);
+      res.json({
+        options
+      });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : String(err) });
+    }
+  });
   app.post("/api/pick-folder", async (req, res) => {
     const { defaultPath, purpose = "storage" } = req.body;
     const pickerPurpose = purpose === "local-source" ? "local-source" : "storage";
@@ -1124,48 +2488,124 @@ async function startOnboardingServer(port, workspacePath) {
       });
     }
   });
-  app.post("/api/gdrive/auth-start", async (req, res) => {
-    const { clientId, clientSecret } = req.body;
-    if (!clientId || !clientSecret) {
-      res.status(400).json({ error: "clientId and clientSecret are required" });
-      return;
+  const createGoogleDriveClient = async (requiredScopes = [], credentials) => {
+    const activeSession = googleAuthSession && (googleAuthSession.status === "authenticated" || googleAuthSession.status === "complete") ? googleAuthSession : null;
+    const fallbackClientId = credentials?.clientId?.trim() ?? "";
+    const fallbackClientSecret = credentials?.clientSecret?.trim() ?? "";
+    const fallbackRefreshToken = credentials?.refreshToken?.trim() ?? "";
+    const fallbackGrantedScopes = Array.isArray(credentials?.grantedScopes) ? credentials.grantedScopes.filter((scope) => typeof scope === "string").map((scope) => scope.trim()).filter(Boolean) : [];
+    if (!activeSession && (!fallbackClientId || !fallbackClientSecret || !fallbackRefreshToken)) {
+      throw new Error("Not authenticated. Please connect Google first.");
     }
+    const grantedScopes = activeSession?.grantedScopes ?? fallbackGrantedScopes;
+    const missingScopes = grantedScopes.length > 0 ? requiredScopes.filter((scope) => !grantedScopes.includes(scope)) : [];
+    if (missingScopes.length > 0) {
+      throw new Error(
+        missingScopes.includes(GOOGLE_SCOPES_BY_FEATURE.gdrive[0]) ? "Google Drive read access has not been granted yet. Reconnect Google and allow Drive read access." : "Google Drive storage access has not been granted yet. Reconnect Google and allow Drive storage access."
+      );
+    }
+    const { google } = await import("googleapis");
+    const redirectUri = activeSession ? `http://localhost:${port}${activeSession.callbackPath}` : `http://localhost:${port}/api/google/callback`;
+    const oauth2Client = new google.auth.OAuth2(
+      activeSession?.clientId ?? fallbackClientId,
+      activeSession?.clientSecret ?? fallbackClientSecret,
+      redirectUri
+    );
+    oauth2Client.setCredentials({
+      access_token: activeSession?.accessToken,
+      refresh_token: activeSession?.refreshToken ?? fallbackRefreshToken
+    });
+    return {
+      oauth2Client,
+      drive: google.drive({ version: "v3", auth: oauth2Client })
+    };
+  };
+  const buildGoogleStatusPayload = (session) => {
+    if (!session) {
+      return { status: "idle" };
+    }
+    return {
+      status: session.status,
+      requestedFeatures: session.requestedFeatures,
+      requestedScopes: session.requestedScopes,
+      grantedScopes: session.grantedScopes,
+      accountEmail: session.accountEmail,
+      refreshToken: session.refreshToken,
+      folderId: session.folderId,
+      folderName: session.folderName,
+      folderPath: session.folderPath,
+      error: session.error
+    };
+  };
+  const beginGoogleAuth = async (clientId, clientSecret, features, callbackPath) => {
+    const { google } = await import("googleapis");
+    const redirectUri = `http://localhost:${port}${callbackPath}`;
+    const requestedScopes = getGoogleScopesForFeatures(features);
+    const oauth2Client = new google.auth.OAuth2(clientId, clientSecret, redirectUri);
+    const authUrl = oauth2Client.generateAuthUrl({
+      access_type: "offline",
+      include_granted_scopes: true,
+      prompt: "consent",
+      scope: requestedScopes
+    });
+    const previousSession = googleAuthSession && googleAuthSession.clientId === clientId && googleAuthSession.clientSecret === clientSecret ? googleAuthSession : null;
+    googleAuthSession = {
+      clientId,
+      clientSecret,
+      callbackPath,
+      requestedFeatures: features,
+      requestedScopes,
+      grantedScopes: previousSession?.grantedScopes ?? [],
+      status: "pending",
+      refreshToken: previousSession?.refreshToken,
+      accountEmail: previousSession?.accountEmail
+    };
+    return { authUrl, requestedScopes };
+  };
+  const completeGoogleAuth = async (code, callbackPath) => {
+    if (!googleAuthSession || googleAuthSession.callbackPath !== callbackPath) {
+      throw new Error("Invalid OAuth callback \u2014 no pending auth session.");
+    }
+    const { google } = await import("googleapis");
+    const redirectUri = `http://localhost:${port}${callbackPath}`;
+    const oauth2Client = new google.auth.OAuth2(
+      googleAuthSession.clientId,
+      googleAuthSession.clientSecret,
+      redirectUri
+    );
+    const { tokens } = await oauth2Client.getToken(code);
+    oauth2Client.setCredentials(tokens);
+    const grantedScopes = normalizeGoogleScopes(tokens.scope) ?? googleAuthSession.requestedScopes;
+    let accountEmail = googleAuthSession.accountEmail;
     try {
-      const { google } = await import("googleapis");
-      const redirectUri = `http://localhost:${port}/api/gdrive/callback`;
-      const oauth2Client = new google.auth.OAuth2(clientId, clientSecret, redirectUri);
-      const authUrl = oauth2Client.generateAuthUrl({
-        access_type: "offline",
-        prompt: "consent",
-        scope: ["https://www.googleapis.com/auth/drive.file"]
-      });
-      gdriveAuthSession = { clientId, clientSecret, status: "pending" };
-      res.json({ authUrl });
-    } catch (err) {
-      res.status(500).json({ error: String(err) });
+      if (grantedScopes.includes(GOOGLE_SCOPES_BY_FEATURE.gmail[0])) {
+        const gmail = google.gmail({ version: "v1", auth: oauth2Client });
+        const profile = await gmail.users.getProfile({ userId: "me" });
+        accountEmail = profile.data.emailAddress ?? googleAuthSession.accountEmail;
+      } else if (grantedScopes.includes(GOOGLE_SCOPES_BY_FEATURE.storage[0]) || grantedScopes.includes(GOOGLE_SCOPES_BY_FEATURE.gdrive[0])) {
+        const drive = google.drive({ version: "v3", auth: oauth2Client });
+        const about = await drive.about.get({ fields: "user(emailAddress)" });
+        accountEmail = about.data.user?.emailAddress ?? googleAuthSession.accountEmail;
+      }
+    } catch {
     }
-  });
-  app.get("/api/gdrive/callback", async (req, res) => {
-    const { code } = req.query;
-    if (!code || !gdriveAuthSession) {
+    googleAuthSession = {
+      ...googleAuthSession,
+      status: "authenticated",
+      refreshToken: tokens.refresh_token ?? googleAuthSession.refreshToken,
+      accessToken: tokens.access_token ?? void 0,
+      grantedScopes: grantedScopes.length > 0 ? grantedScopes : googleAuthSession.requestedScopes,
+      accountEmail,
+      error: void 0
+    };
+  };
+  const handleGoogleCallback = async (code, callbackPath, res) => {
+    if (!code) {
       res.status(400).send("Invalid OAuth callback \u2014 no pending auth session.");
       return;
     }
     try {
-      const { google } = await import("googleapis");
-      const redirectUri = `http://localhost:${port}/api/gdrive/callback`;
-      const oauth2Client = new google.auth.OAuth2(
-        gdriveAuthSession.clientId,
-        gdriveAuthSession.clientSecret,
-        redirectUri
-      );
-      const { tokens } = await oauth2Client.getToken(code);
-      gdriveAuthSession = {
-        ...gdriveAuthSession,
-        status: "authenticated",
-        refreshToken: tokens.refresh_token ?? void 0,
-        accessToken: tokens.access_token ?? void 0
-      };
+      await completeGoogleAuth(code, callbackPath);
       res.send(`<!DOCTYPE html><html><body>
         <script>window.close();</script>
         <p style="font-family:sans-serif;padding:2rem;color:#4ade80;">
@@ -1173,40 +2613,187 @@ async function startOnboardingServer(port, workspacePath) {
         </p>
       </body></html>`);
     } catch (err) {
-      if (gdriveAuthSession) {
-        gdriveAuthSession.status = "error";
-        gdriveAuthSession.error = String(err);
+      if (googleAuthSession) {
+        googleAuthSession.status = "error";
+        googleAuthSession.error = String(err);
       }
       res.status(500).send("Authentication failed: " + String(err));
     }
+  };
+  app.post("/api/google/auth-start", async (req, res) => {
+    const { clientId, clientSecret, features } = req.body;
+    if (!clientId || !clientSecret) {
+      res.status(400).json({ error: "clientId and clientSecret are required" });
+      return;
+    }
+    const requestedFeatures = Array.isArray(features) ? [...new Set(features.filter((feature) => feature === "storage" || feature === "gmail" || feature === "gdrive"))] : [];
+    if (requestedFeatures.length === 0) {
+      res.status(400).json({ error: "At least one Google feature is required." });
+      return;
+    }
+    try {
+      const result = await beginGoogleAuth(clientId, clientSecret, requestedFeatures, "/api/google/callback");
+      res.json({
+        authUrl: result.authUrl,
+        requestedFeatures,
+        requestedScopes: result.requestedScopes
+      });
+    } catch (err) {
+      res.status(500).json({ error: String(err) });
+    }
   });
-  app.get("/api/gdrive/auth-status", (_req, res) => {
-    if (!gdriveAuthSession) {
-      res.json({ status: "idle" });
+  app.get("/api/google/callback", async (req, res) => {
+    const { code } = req.query;
+    await handleGoogleCallback(code, "/api/google/callback", res);
+  });
+  app.get("/api/google/auth-status", (_req, res) => {
+    res.json(buildGoogleStatusPayload(googleAuthSession));
+  });
+  app.post("/api/gdrive/auth-start", async (req, res) => {
+    const { clientId, clientSecret } = req.body;
+    if (!clientId || !clientSecret) {
+      res.status(400).json({ error: "clientId and clientSecret are required" });
       return;
     }
-    const { clientId: _cid, clientSecret: _csec, accessToken: _at, refreshToken: _rt, ...publicSession } = gdriveAuthSession;
-    res.json(publicSession);
+    try {
+      const result = await beginGoogleAuth(clientId, clientSecret, ["storage"], "/api/gdrive/callback");
+      res.json({ authUrl: result.authUrl });
+    } catch (err) {
+      res.status(500).json({ error: String(err) });
+    }
   });
-  app.post("/api/gdrive/create-folder", async (req, res) => {
-    if (!gdriveAuthSession || gdriveAuthSession.status !== "authenticated") {
-      res.status(400).json({ error: "Not authenticated. Please connect Google Drive first." });
+  app.get("/api/gdrive/callback", async (req, res) => {
+    const { code } = req.query;
+    await handleGoogleCallback(code, "/api/gdrive/callback", res);
+  });
+  app.get("/api/gdrive/auth-status", (_req, res) => {
+    res.json(buildGoogleStatusPayload(googleAuthSession));
+  });
+  const listGoogleDocsInFolderScope = async (drive, folders) => {
+    const pending = folders.filter((folder) => folder.id.trim()).map((folder) => ({
+      id: folder.id.trim(),
+      path: folder.path?.trim() || folder.id.trim()
+    }));
+    const visited = /* @__PURE__ */ new Set();
+    const documents = /* @__PURE__ */ new Map();
+    while (pending.length > 0) {
+      const current = pending.shift();
+      if (!current || visited.has(current.id)) {
+        continue;
+      }
+      visited.add(current.id);
+      let pageToken;
+      do {
+        const response = await drive.files.list({
+          q: `'${current.id}' in parents and trashed=false and (mimeType='application/vnd.google-apps.folder' or mimeType='application/vnd.google-apps.document')`,
+          fields: "nextPageToken, files(id,name,mimeType)",
+          orderBy: "name_natural",
+          pageSize: 100,
+          pageToken
+        });
+        for (const file of response.data.files ?? []) {
+          if (!file.id || !file.name) {
+            continue;
+          }
+          const nextPath = `${current.path} / ${file.name}`;
+          if (file.mimeType === "application/vnd.google-apps.folder") {
+            pending.push({ id: file.id, path: nextPath });
+            continue;
+          }
+          if (file.mimeType === "application/vnd.google-apps.document") {
+            documents.set(file.id, {
+              value: nextPath,
+              label: nextPath
+            });
+          }
+        }
+        pageToken = response.data.nextPageToken ?? void 0;
+      } while (pageToken);
+    }
+    return [...documents.values()].sort((left, right) => left.label.localeCompare(right.label));
+  };
+  const listRecentGoogleDocs = async (drive) => {
+    const response = await drive.files.list({
+      q: `mimeType='application/vnd.google-apps.document' and trashed=false`,
+      fields: "files(id,name)",
+      orderBy: "modifiedTime desc",
+      pageSize: 100
+    });
+    return (response.data.files ?? []).filter(
+      (file) => Boolean(file?.id && file?.name)
+    ).map((file) => ({
+      value: file.name,
+      label: file.name
+    }));
+  };
+  const handleGoogleDriveFolders = async (parentId, credentials, res) => {
+    try {
+      const { drive } = await createGoogleDriveClient([], credentials);
+      const response = await drive.files.list({
+        q: `'${parentId}' in parents and mimeType='application/vnd.google-apps.folder' and trashed=false`,
+        fields: "files(id,name)",
+        orderBy: "name_natural",
+        pageSize: 200
+      });
+      res.json({
+        folders: (response.data.files ?? []).filter((file) => file.id && file.name).map((file) => ({
+          id: file.id,
+          name: file.name
+        }))
+      });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : String(err) });
+    }
+  };
+  app.get("/api/google/drive-folders", async (req, res) => {
+    const parentId = typeof req.query.parentId === "string" && req.query.parentId.trim() ? req.query.parentId.trim() : "root";
+    await handleGoogleDriveFolders(parentId, void 0, res);
+  });
+  app.post("/api/google/drive-folders", async (req, res) => {
+    const parentId = typeof req.body?.parentId === "string" && req.body.parentId.trim() ? req.body.parentId.trim() : "root";
+    await handleGoogleDriveFolders(parentId, req.body, res);
+  });
+  app.post("/api/google/access-token", async (req, res) => {
+    const clientId = req.body.clientId?.trim();
+    const clientSecret = req.body.clientSecret?.trim();
+    const refreshToken = req.body.refreshToken?.trim();
+    if (!clientId || !clientSecret || !refreshToken) {
+      res.status(400).json({ error: "clientId, clientSecret, and refreshToken are required." });
       return;
     }
-    const { folderName = "Personal Assistant", parentFolderName = "" } = req.body;
     try {
       const { google } = await import("googleapis");
-      const redirectUri = `http://localhost:${port}/api/gdrive/callback`;
-      const oauth2Client = new google.auth.OAuth2(
-        gdriveAuthSession.clientId,
-        gdriveAuthSession.clientSecret,
-        redirectUri
+      const oauth2Client = new google.auth.OAuth2(clientId, clientSecret);
+      oauth2Client.setCredentials({ refresh_token: refreshToken });
+      const { token } = await oauth2Client.getAccessToken();
+      if (!token) {
+        res.status(500).json({ error: "Failed to obtain access token." });
+        return;
+      }
+      res.json({ accessToken: token });
+    } catch (err) {
+      res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
+    }
+  });
+  app.post("/api/google/documents", async (req, res) => {
+    const folders = Array.isArray(req.body?.folders) ? req.body.folders.filter(
+      (folder) => Boolean(folder) && typeof folder === "object" && typeof folder.id === "string"
+    ) : [];
+    try {
+      const { drive } = await createGoogleDriveClient(
+        [GOOGLE_SCOPES_BY_FEATURE.gdrive[0]],
+        req.body
       );
-      oauth2Client.setCredentials({
-        access_token: gdriveAuthSession.accessToken,
-        refresh_token: gdriveAuthSession.refreshToken
-      });
-      const drive = google.drive({ version: "v3", auth: oauth2Client });
+      const options = folders.length > 0 ? await listGoogleDocsInFolderScope(drive, folders) : await listRecentGoogleDocs(drive);
+      res.json({ options });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : String(err) });
+    }
+  });
+  app.post("/api/gdrive/create-folder", async (req, res) => {
+    const { folderName = "Personal Assistant", parentFolderName = "" } = req.body;
+    try {
+      const { oauth2Client, drive } = await createGoogleDriveClient([GOOGLE_SCOPES_BY_FEATURE.storage[0]]);
       let parentId = "root";
       let locationPath = "My Drive";
       if (parentFolderName.trim()) {
@@ -1253,9 +2840,13 @@ async function startOnboardingServer(port, workspacePath) {
       }
       const folderPath = `${locationPath} / ${resolvedFolderName}`;
       const freshCredentials = await oauth2Client.getAccessToken();
-      const latestRefreshToken = oauth2Client.credentials.refresh_token ?? gdriveAuthSession.refreshToken;
-      gdriveAuthSession = {
-        ...gdriveAuthSession,
+      const currentSession = googleAuthSession;
+      if (!currentSession) {
+        throw new Error("Google auth session was lost before the folder could be saved.");
+      }
+      const latestRefreshToken = oauth2Client.credentials.refresh_token ?? currentSession.refreshToken;
+      googleAuthSession = {
+        ...currentSession,
         status: "complete",
         folderId,
         folderName: resolvedFolderName,