@namzu/cli 39.1.0 → 39.2.1

package/dist/chunks/{chunk-FTZT4UAB.js → chunk-OPIC6ZIL.js}

@@ -641,8 +641,8 @@ function windowsEnv(env, name2) {
 }
 __name(windowsEnv, "windowsEnv");
 function insideDirectory(path2, directory) {
-  const relative10 = win32.relative(directory, path2);
-  return relative10 === "" || !relative10.startsWith("..") && !win32.isAbsolute(relative10);
+  const relative11 = win32.relative(directory, path2);
+  return relative11 === "" || !relative11.startsWith("..") && !win32.isAbsolute(relative11);
 }
 __name(insideDirectory, "insideDirectory");
 function findGitBash(probe2) {
@@ -1366,13 +1366,13 @@ var GuardedFetchProvider = class {
       operation.throwIfStopped();
       return url;
     }
-    const resolve27 = this.config.resolve ?? (async (name2) => (await lookup(name2, { all: true })).map((r) => r.address));
+    const resolve28 = this.config.resolve ?? (async (name2) => (await lookup(name2, { all: true })).map((r) => r.address));
     let addresses;
     if (isIP(hostname)) {
       addresses = [hostname];
     } else {
       try {
-        addresses = await operation.run(() => resolve27(hostname, operation.signal));
+        addresses = await operation.run(() => resolve28(hostname, operation.signal));
       } catch (err) {
         operation.throwIfStopped();
         throw new WebFetchRefusedError(`Refused "${hostname}" \u2014 it could not be resolved (${err instanceof Error ? err.message : String(err)}), so nothing here can say where it points.`, { url: rawUrl, reason: "private-address" });
@@ -6392,9 +6392,9 @@ async function vetWebSocketTarget(raw, options = {}) {
   if (literal !== 0) {
     addresses = [hostname];
   } else {
-    const resolve27 = options.resolve ?? (async (name2) => (await dnsLookup(name2, { all: true })).map((r) => r.address));
+    const resolve28 = options.resolve ?? (async (name2) => (await dnsLookup(name2, { all: true })).map((r) => r.address));
     try {
-      addresses = await resolve27(hostname);
+      addresses = await resolve28(hostname);
     } catch (err) {
       throw new WebSocketRefusedError(`Refused "${hostname}": it could not be resolved (${err instanceof Error ? err.message : String(err)}), so nothing here can say where it points.`);
     }
@@ -6820,8 +6820,8 @@ var BackgroundJobRegistry = class {
     };
     let startError;
     let settleStarted;
-    const startedPromise = new Promise((resolve27) => {
-      settleStarted = /* @__PURE__ */ __name(() => resolve27(startError === void 0 ? {} : { error: startError }), "settleStarted");
+    const startedPromise = new Promise((resolve28) => {
+      settleStarted = /* @__PURE__ */ __name(() => resolve28(startError === void 0 ? {} : { error: startError }), "settleStarted");
     });
     if (params.spawn || child.pid !== void 0)
       settleStarted();
@@ -6867,7 +6867,7 @@ var BackgroundJobRegistry = class {
       outputChunks: [],
       outputObservers: /* @__PURE__ */ new Set(),
       started: startedPromise,
-      exit: new Promise((resolve27) => {
+      exit: new Promise((resolve28) => {
         let spawned = child.pid !== void 0;
         let failedToSpawn = false;
         let finalized = false;
@@ -6885,7 +6885,7 @@ var BackgroundJobRegistry = class {
             ...code === null ? {} : { exitCode: code },
             ...signal ? { signal } : {}
           };
-          resolve27();
+          resolve28();
           for (const observer of entry.outputObservers)
             observer();
           if (entry.monitor) {
@@ -7058,7 +7058,7 @@ var BackgroundJobRegistry = class {
     const signal = opts.signal;
     if (signal.aborted)
       return Promise.reject(signal.reason);
-    return new Promise((resolve27, reject2) => {
+    return new Promise((resolve28, reject2) => {
       let disposeAbort = /* @__PURE__ */ __name(() => {
       }, "disposeAbort");
       const unsubscribe = this.onExit((job) => {
@@ -7066,7 +7066,7 @@ var BackgroundJobRegistry = class {
           return;
         unsubscribe();
         disposeAbort();
-        resolve27(job);
+        resolve28(job);
       });
       disposeAbort = subscribeToAbort(signal, () => {
         unsubscribe();
@@ -7163,7 +7163,7 @@ var BackgroundJobRegistry = class {
       throw new BackgroundJobOutputWaitLimitError({ owner, limit: globalLimit, scope: "registry" });
     this.outputWaiters++;
     this.outputWaitersByOwner.set(owner, ownerCount + 1);
-    return new Promise((resolve27) => {
+    return new Promise((resolve28) => {
       const startedAt = Date.now();
       let settled = false;
       let disposeAbort = /* @__PURE__ */ __name(() => {
@@ -7183,7 +7183,7 @@ var BackgroundJobRegistry = class {
           this.outputWaitersByOwner.delete(owner);
         else
           this.outputWaitersByOwner.set(owner, remaining);
-        resolve27(result);
+        resolve28(result);
       }, "finish");
       const timeout = /* @__PURE__ */ __name((cause) => {
         read();
@@ -9604,7 +9604,7 @@ async function renameWithRetry(from, to) {
       const code = err.code ?? "";
       if (!CONTENDED.has(code) || attempt >= RENAME_ATTEMPTS)
         throw err;
-      await new Promise((resolve27) => setTimeout(resolve27, attempt));
+      await new Promise((resolve28) => setTimeout(resolve28, attempt));
     }
   }
 }
@@ -12572,8 +12572,8 @@ async function releaseHeldSessionLeases(options = {}) {
   }, () => {
   })));
   let timer;
-  const deadline = new Promise((resolve27) => {
-    timer = setTimeout(resolve27, options.timeoutMs ?? 2e3);
+  const deadline = new Promise((resolve28) => {
+    timer = setTimeout(resolve28, options.timeoutMs ?? 2e3);
   });
   await Promise.race([all, deadline]);
   clearTimeout(timer);
@@ -13591,7 +13591,18 @@ var ChildSessionMetaSchema = external_exports.object({
   description: text2,
   status: turnExecutionStatus,
   createdAt: isoUtc,
-  endedAt: isoUtc.optional()
+  endedAt: isoUtc.optional(),
+  /**
+   * What a later process needs to continue this child from its saved log:
+   * the filesystem policy it ran under and a small host-defined profile
+   * (which agent to rebuild, which model). Absent on children saved before
+   * this field existed and on children whose host recorded no profile; those
+   * cannot be continued from disk.
+   */
+  continuation: external_exports.object({
+    workspace: external_exports.enum(["shared", "isolated"]),
+    profile: external_exports.record(external_exports.string().min(1).max(64), external_exports.string().max(256)).refine((value) => Object.keys(value).length <= 16, "At most 16 profile entries")
+  }).strict().optional()
 }).strict();
 var SessionLeaseDocumentSchema = external_exports.object({
   v: external_exports.literal(1),
@@ -14273,7 +14284,7 @@ async function renameWithRetry2(from, to) {
       const code = err.code ?? "";
       if (!CONTENDED2.has(code) || attempt >= RENAME_ATTEMPTS2)
         throw err;
-      await new Promise((resolve27) => setTimeout(resolve27, attempt));
+      await new Promise((resolve28) => setTimeout(resolve28, attempt));
     }
   }
 }
@@ -16610,25 +16621,28 @@ function buildTaskTools(taskStore, scope) {
 }
 __name(buildTaskTools, "buildTaskTools");
 
-// ../sdk/dist/types/permission/index.js
-var PLAN_MODE_REFUSAL = "Refused: plan mode is read-only. Explore with the reading tools, then present the plan as your reply \u2014 what you would change, in which files, and in what order. The user will switch out of plan mode to have it carried out.";
-
 // ../sdk/dist/compaction/summary.js
 var COMPACTION_HEADER = "[COMPACTED CONTEXT] The following is a structured summary of the conversation so far.";
 function isCompactionMessage(content) {
   return typeof content === "string" && content.startsWith(COMPACTION_HEADER);
 }
 __name(isCompactionMessage, "isCompactionMessage");
-function buildCompactionMessage(body) {
+var COMPACTION_RECOVERY_NOTE = "Earlier output was cut from this summary. To get exact earlier text, call search_conversation, then read_conversation.";
+function buildCompactionMessage(body, recoveryNote) {
   return {
     ...createSystemMessage(`${COMPACTION_HEADER}
 
-${body}`),
+${body}${recoveryNote ? `
+
+${recoveryNote}` : ""}`),
     source: { type: "compaction-summary" }
   };
 }
 __name(buildCompactionMessage, "buildCompactionMessage");
 
+// ../sdk/dist/types/permission/index.js
+var PLAN_MODE_REFUSAL = "Refused: plan mode is read-only. Explore with the reading tools, then present the plan as your reply \u2014 what you would change, in which files, and in what order. The user will switch out of plan mode to have it carried out.";
+
 // ../sdk/dist/provider/strict-schema.js
 var NO_CONDITIONALS = "strict mode has no conditional schemas; flatten the object";
 var NO_NUMERIC_BOUNDS = "numeric bounds are not in the subset; enforce at execution";
@@ -18300,7 +18314,7 @@ function buildAskUserQuestionTool(config) {
   const { questionParks, pendingAnswers } = config;
   return defineTool({
     name: ASK_USER_QUESTION_TOOL_NAME,
-    description: `Ask the user when you are blocked on a decision that is genuinely theirs to make \u2014 one you cannot resolve from their request, your tools, the files you can read, or sensible defaults. The question must be the genuinely undecidable thing in THIS task. Never ask for information a tool can discover (do not ask what you can read, list, or search), never re-ask what the conversation already answers, and never ask meta-questions like "Shall I proceed?" \u2014 plan ratification goes through approve_plan. Provide 2-4 genuinely distinct options derived from the actual context \u2014 concrete paths, never generic placeholders (for example, asked to prepare a presentation, ask "Who is the audience?" with options like Board / Engineering team / Customer); keep labels short (1-5 words) and give each option a one-line description of what practically changes if it is chosen. If you recommend an option, put it FIRST and set recommended: true on it; the host marks it for the user, so never write "(Recommended)" or any translation of it into a label, and never end a label with a parenthesised note (put qualifiers in the description). Set multiSelect: true only when several options can apply at once. An option may carry a preview (plain text or markdown) that the host shows beside the list while it is focused; use it only when seeing the thing helps the choice. A free-text "Something else" escape hatch is always shown automatically \u2014 do not add your own "Other" option. Put the questions in the questions array. Use ONE entry for a single decision. Put several entries in the same call only when they are related decisions that ALL block your next step and the user can answer them together (for example which account, for what purpose, which environment before a credentialed step), at most 4, each with a short unique header; the user answers them all in one card and you get one answer per question. Never batch questions that depend on one another's answers \u2014 ask the first, then decide. Most work needs at most 2-3 questions in all, so prefer proceeding on stated defaults over interrogating the user. Never invent answers or synthetic content on the user's behalf unless they explicitly asked for a random/test scenario. The answers arrive as this tool's result; a question the result says was not answered must not be assumed, and if the result says the user did not answer at all, do not ask again \u2014 proceed on your best judgment without assuming consent.`,
+    description: `Ask the user when you are blocked on a decision that is genuinely theirs to make \u2014 one you cannot resolve from their request, your tools, the files you can read, or sensible defaults. The question must be the genuinely undecidable thing in THIS task. Never ask for information a tool can discover (do not ask what you can read, list, or search), never re-ask what the conversation already answers, and never ask meta-questions like "Shall I proceed?" \u2014 plan ratification goes through approve_plan. Provide 2-4 genuinely distinct options derived from the actual context \u2014 concrete paths, never generic placeholders (for example, asked to prepare a presentation, ask who the audience is, with an option for each plausible audience); keep labels short (1-5 words) and give each option a one-line description of what practically changes if it is chosen. If you recommend an option, put it FIRST and set recommended: true on it; the host marks it for the user, so never write "(Recommended)" or any translation of it into a label, and never end a label with a parenthesised note (put qualifiers in the description). Set multiSelect: true only when several options can apply at once. An option may carry a preview (plain text or markdown) that the host shows beside the list while it is focused; use it only when seeing the thing helps the choice. A free-text "Something else" escape hatch is always shown automatically \u2014 do not add your own "Other" option. Put the questions in the questions array. Use ONE entry for a single decision. Put several entries in the same call only when they are related decisions that ALL block your next step and the user can answer them together (for example which account, for what purpose, which environment before a credentialed step), at most 4, each with a short unique header; the user answers them all in one card and you get one answer per question. Never batch questions that depend on one another's answers \u2014 ask the first, then decide. Most work needs at most 2-3 questions in all, so prefer proceeding on stated defaults over interrogating the user. Never invent answers or synthetic content on the user's behalf unless they explicitly asked for a random/test scenario. The answers arrive as this tool's result; a question the result says was not answered must not be assumed, and if the result says the user did not answer at all, do not ask again \u2014 proceed on your best judgment without assuming consent.`,
     inputSchema: inputSchema2,
     modelInputSchema: structuredClone(askUserQuestionModelInputSchema),
     enforceModelInput: true,
@@ -22630,14 +22644,14 @@ __name(backoffProportional, "backoffProportional");
 function sleep(ms, signal) {
   if (ms <= 0)
     return Promise.resolve();
-  return new Promise((resolve27, reject2) => {
+  return new Promise((resolve28, reject2) => {
     if (signal?.aborted) {
       reject2(signal.reason);
       return;
     }
     const timer = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve27();
+      resolve28();
     }, ms);
     const onAbort = /* @__PURE__ */ __name(() => {
       clearTimeout(timer);
@@ -23371,11 +23385,11 @@ __name(checkRemoval, "checkRemoval");
 var GLOB_TAIL = /[\\/]\.?\*$/;
 function checkTarget(program, args, spelled, word2, scope) {
   const expanded = expandTilde(spelled, scope.home);
-  const relative10 = !isAbsolute3(expanded);
+  const relative11 = !isAbsolute3(expanded);
   if (expandsAtRuntime(word2) && /[$`]/.test(expanded)) {
     return void 0;
   }
-  const absolute = relative10 ? resolve2(scope.cwd, expanded) : resolve2(expanded);
+  const absolute = relative11 ? resolve2(scope.cwd, expanded) : resolve2(expanded);
   let settled = absolute;
   for (let previous = ""; previous !== settled; ) {
     previous = settled;
@@ -23385,18 +23399,18 @@ function checkTarget(program, args, spelled, word2, scope) {
   }
   const globbed = settled !== absolute;
   const original = expanded;
-  if (scope.changesDirectory && globbed && relative10 && GLOB_TAIL.test(absolute)) {
+  if (scope.changesDirectory && globbed && relative11 && GLOB_TAIL.test(absolute)) {
     return `${program} ${spelled}: a relative glob after a cd cannot be resolved before the line runs`;
   }
   let below = settled;
-  if (relative10) {
+  if (relative11) {
     const prefix = scope.cwd.endsWith(sep3) ? scope.cwd : scope.cwd + sep3;
     if (settled.startsWith(prefix))
       below = settled.slice(prefix.length);
     else if (settled === scope.cwd)
       below = "";
   }
-  if (globbed && (hasParentAfterName(original) || original.startsWith("~") || /^[\\/]{2}/.test(original) || relative10 && /(^|[\\/])\.\.([\\/]|$)/.test(original) && GLOB_TAIL.test(absolute) || program === "rmdir" && GLOB_TAIL.test(absolute) && args.some((a) => /^--p/.test(a.value) || /^-[a-z]*p/.test(a.value)) || relative10 && /\*[\\/]+$/.test(original) && GLOB_TAIL.test(absolute))) {
+  if (globbed && (hasParentAfterName(original) || original.startsWith("~") || /^[\\/]{2}/.test(original) || relative11 && /(^|[\\/])\.\.([\\/]|$)/.test(original) && GLOB_TAIL.test(absolute) || program === "rmdir" && GLOB_TAIL.test(absolute) && args.some((a) => /^--p/.test(a.value) || /^-[a-z]*p/.test(a.value)) || relative11 && /\*[\\/]+$/.test(original) && GLOB_TAIL.test(absolute))) {
     return `${program} ${spelled}: the target cannot be resolved to a directory before the line runs`;
   }
   if (!globbed || !/[*?[]/.test(below)) {
@@ -23417,8 +23431,8 @@ function checkTarget(program, args, spelled, word2, scope) {
   if (globbed && GLOB_TAIL.test(absolute)) {
     const segments = /* @__PURE__ */ __name((value) => value.split(/[\\/]+/).filter((s) => s !== "" && s !== ".").length, "segments");
     const crossed = segments(absolute) - segments(settled);
-    const inside = below.split(/[\\/]+/).filter((s) => /[*?[]/.test(s)).length;
-    if (crossed + inside > 1) {
+    const inside2 = below.split(/[\\/]+/).filter((s) => /[*?[]/.test(s)).length;
+    if (crossed + inside2 > 1) {
       return `${program} ${spelled}: the glob crosses directories that cannot be listed before the line runs`;
     }
   }
@@ -24792,7 +24806,7 @@ function createFileReadTracker() {
 __name(createFileReadTracker, "createFileReadTracker");
 
 // ../sdk/dist/runtime/query/file-evidence-replay.js
-import { resolve as resolve6 } from "node:path";
+import { resolve as resolve7 } from "node:path";
 
 // ../sdk/dist/constants/limits.js
 var ZERO_COST2 = {
@@ -24971,6 +24985,30 @@ var DEFAULT_MAX_TOOL_OUTPUT_CHARS = 4e4;
 var DEFAULT_MAX_TOOL_OUTPUT_CHARS_PER_MESSAGE = 2e5;
 var MESSAGE_BUDGET_PREVIEW_CHARS = 2e3;
 var SPILL_MARKER = "The full output was written to:";
+var RETAINED_OUTPUT_NOTE = "This path identifies retained output, not the original input.";
+var REPLAY_WARNING = "A fresh observation of the original input cannot recover its earlier contents. If recovery is unavailable, report the missing detail; do not replay the original action.";
+function describeRetainedOutputRecovery(routes) {
+  const read = routes?.read === true;
+  const conversation = routes?.conversation === true;
+  const how = [
+    read ? "To read more of it, open this file with the read tool (offset and limit)." : "",
+    conversation ? read ? "For anything else from earlier in this conversation, call search_conversation with a phrase from it, then read_conversation with the seq and part it returns." : "To read more of it, call search_conversation with a phrase from it, then read_conversation with the seq and part it returns. The path is not a workspace file, so read and grep cannot open it." : ""
+  ].filter(Boolean);
+  if (how.length === 0)
+    return `${RETAINED_OUTPUT_NOTE} Use the host-authorized retained-output recovery tools when available; the path does not grant filesystem access. ${REPLAY_WARNING}`;
+  return [RETAINED_OUTPUT_NOTE, ...how, REPLAY_WARNING].join(" ");
+}
+__name(describeRetainedOutputRecovery, "describeRetainedOutputRecovery");
+function retainedOutputPointer(text9) {
+  const lines = text9.split(/\r\n|\r|\n/);
+  const at = lines.findIndex((line) => line.startsWith(SPILL_MARKER));
+  if (at < 0)
+    return void 0;
+  const next = lines[at + 1];
+  return next?.startsWith(RETAINED_OUTPUT_NOTE) ? `${lines[at]}
+${next}` : lines[at];
+}
+__name(retainedOutputPointer, "retainedOutputPointer");
 var HEAD_SHARE = 0.75;
 function safeHead(text9, maxChars2) {
   let end = Math.min(text9.length, Math.max(0, maxChars2));
@@ -25000,7 +25038,7 @@ function boundedPreview(output, maxChars2, toolName, recovery) {
     ""
   ].join("\n");
   const compactMiddle = "\n[... omitted ...]\n";
-  const spillLine = recovery.split("\n").find((line) => line.startsWith(SPILL_MARKER));
+  const spillLine = recovery.split(/\r\n|\r|\n/).find((line) => line.startsWith(SPILL_MARKER));
   const compactRecovery = spillLine ? `${compactMiddle}${spillLine}
 ` : compactMiddle;
   const middle = detailedMiddle.length < maxChars2 ? detailedMiddle : compactRecovery.length < maxChars2 ? compactRecovery : compactMiddle;
@@ -25052,10 +25090,7 @@ function applyToolOutputBudget(opts) {
   }
   const retained = opts.spillDir ? spill2(opts.spillDir, opts.toolUseId, output, opts.onError) : void 0;
   const spillPath = retained?.path;
-  const recovery = spillPath ? [
-    `${SPILL_MARKER} ${spillPath}`,
-    "This path identifies retained output, not the original input. Use the host-authorized retained-output recovery tools when available; the path does not grant filesystem access. A fresh observation of the original input cannot recover its earlier contents. If recovery is unavailable, report the missing detail; do not replay the original action."
-  ].join("\n") : "The full output was not retained. Use a saved artifact or a read-only observation; do not repeat a state-changing action to recover its output.";
+  const recovery = spillPath ? [`${SPILL_MARKER} ${spillPath}`, describeRetainedOutputRecovery(opts.recoveryRoutes)].join("\n") : "The full output was not retained. Use a saved artifact or a read-only observation; do not repeat a state-changing action to recover its output.";
   const requestedPreview = opts.retainedPreviewChars;
   const previewLimit = retained?.integrity && requestedPreview !== void 0 && Number.isFinite(requestedPreview) && requestedPreview > 0 ? Math.min(limit, Math.floor(requestedPreview)) : limit;
   const previewTextBudget = Math.max(0, previewLimit - notice.length - (notice && output ? 2 : 0));
@@ -25114,7 +25149,6 @@ function spill2(dir, toolUseId3, content, onError) {
   }
 }
 __name(spill2, "spill");
-var SPILL_LINE = new RegExp(`^${SPILL_MARKER} .+$`, "m");
 function fitResultsToMessageBudget(items, opts) {
   const replaced = /* @__PURE__ */ new Map();
   if (!Number.isFinite(opts.maxChars) || opts.maxChars <= 0)
@@ -25137,7 +25171,7 @@ function fitResultsToMessageBudget(items, opts) {
 }
 __name(fitResultsToMessageBudget, "fitResultsToMessageBudget");
 function previewForMessageBudget(item, opts) {
-  const spilledAt = SPILL_LINE.exec(item.output)?.[0];
+  const spilledAt = retainedOutputPointer(item.output);
   if (spilledAt !== void 0) {
     const output = [
       safeHead(item.output, MESSAGE_BUDGET_PREVIEW_CHARS / 2),
@@ -25148,7 +25182,7 @@ function previewForMessageBudget(item, opts) {
     return {
       output,
       originalLength: item.output.length,
-      spillPath: spilledAt.slice(SPILL_MARKER.length + 1)
+      spillPath: spilledAt.split("\n")[0].slice(SPILL_MARKER.length + 1)
     };
   }
   const budgeted = applyToolOutputBudget({
@@ -25158,6 +25192,7 @@ function previewForMessageBudget(item, opts) {
     output: item.output,
     maxChars: MESSAGE_BUDGET_PREVIEW_CHARS,
     spillDir: opts.spillDir,
+    ...opts.recoveryRoutes ? { recoveryRoutes: opts.recoveryRoutes } : {},
     ...opts.onError ? { onError: opts.onError } : {}
   });
   return {
@@ -25301,9 +25336,10 @@ function clearedPlaceholder(content, toolName, size) {
   const parts = [
     `${CLEARED_PREFIX} ${toolName} returned ${size.toLocaleString("en-US")} characters, cleared to reclaim context.`
   ];
-  const spillLine = text9.split("\n").find((line) => line.startsWith(SPILL_MARKER));
-  if (spillLine) {
-    parts.push(spillLine, "Read a window of it with `read` (offset/limit) or search it with `grep`.");
+  const pointer2 = retainedOutputPointer(text9);
+  if (pointer2) {
+    parts.push(pointer2.includes("\n") ? pointer2 : `${pointer2}
+${describeRetainedOutputRecovery()}`);
   } else {
     parts.push("Full result unavailable here. Recover from a saved artifact or a read-only observation; do not repeat a state-changing action to recover its output.");
   }
@@ -25866,8 +25902,8 @@ async function withFileMutationLock(key5, operation) {
   const previous = mutationTails.get(key5) ?? Promise.resolve();
   let release = /* @__PURE__ */ __name(() => {
   }, "release");
-  const current = new Promise((resolve27) => {
-    release = resolve27;
+  const current = new Promise((resolve28) => {
+    release = resolve28;
   });
   const tail = previous.then(() => current);
   mutationTails.set(key5, tail);
@@ -27004,7 +27040,38 @@ var EditTool = defineTool({
 
 // ../sdk/dist/tools/builtins/read-file.js
 import { readFile as readFile7, stat as stat4 } from "node:fs/promises";
-import { extname } from "node:path";
+import { extname as extname2 } from "node:path";
+
+// ../sdk/dist/tools/retained-output.js
+import { lstat as lstat2, realpath as realpath4 } from "node:fs/promises";
+import { dirname as dirname9, extname, isAbsolute as isAbsolute6, relative as relative3, resolve as resolve6 } from "node:path";
+function inside(root, path2) {
+  const rel = relative3(root, path2);
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute6(rel);
+}
+__name(inside, "inside");
+async function resolveRetainedOutput(directory, candidate) {
+  if (!directory || !candidate || !isAbsolute6(candidate) || candidate.includes("\0"))
+    return void 0;
+  try {
+    const base3 = await realpath4(directory);
+    const lexical = resolve6(candidate);
+    if (extname(lexical).toLowerCase() !== ".txt")
+      return void 0;
+    if (!inside(resolve6(directory), lexical) && !inside(base3, lexical))
+      return void 0;
+    const stat15 = await lstat2(lexical);
+    if (stat15.isSymbolicLink() || !stat15.isFile() || stat15.nlink !== 1)
+      return void 0;
+    const real = await realpath4(lexical);
+    if (!inside(base3, real) || dirname9(real) === real)
+      return void 0;
+    return real;
+  } catch {
+    return void 0;
+  }
+}
+__name(resolveRetainedOutput, "resolveRetainedOutput");
 
 // ../sdk/dist/tools/text-window.js
 var WINDOW_HEAD_LINES = 80;
@@ -27264,7 +27331,8 @@ var ReadFileTool = defineTool({
     };
   },
   async execute(input, context2) {
-    if (context2.sandbox) {
+    const retained = await resolveRetainedOutput(context2.retainedOutputDirectory, input.path);
+    if (context2.sandbox && retained === void 0) {
       const buffer2 = await context2.sandbox.readFile(input.path);
       const binaryGuidance2 = describeStructuredBinaryRead(input.path, buffer2);
       if (binaryGuidance2) {
@@ -27303,7 +27371,7 @@ var ReadFileTool = defineTool({
         facts: readFacts(input.path, buffer2, content2, rendered2)
       };
     }
-    const filePath = await resolveWithinAnyReal(toolRoots(context2), input.path);
+    const filePath = retained ?? await resolveWithinAnyReal(toolRoots(context2), input.path);
     if (input.readRange === void 0 && input.limit === void 0) {
       const { size } = await stat4(filePath);
       const early = renderCappedRead("", size, input, capOptions(input, context2));
@@ -27351,7 +27419,7 @@ function capOptions(input, context2) {
   const tokens = Number(context2.env?.NAMZU_FILE_READ_MAX_OUTPUT_TOKENS);
   return {
     path: input.path,
-    ext: extname(input.path).toLowerCase(),
+    ext: extname2(input.path).toLowerCase(),
     ...input.allow_large === true ? { allowLarge: true } : {},
     ...Number.isFinite(tokens) && tokens > 0 ? { caps: { maxTokens: tokens } } : {}
   };
@@ -27392,7 +27460,7 @@ function recordObservedRead(context2, key5, content, rendered) {
 }
 __name(recordObservedRead, "recordObservedRead");
 function describeStructuredBinaryRead(path2, buffer) {
-  const ext2 = extname(path2).toLowerCase();
+  const ext2 = extname2(path2).toLowerCase();
   const image = buffer.subarray(0, 8).equals(Buffer.from("89504e470d0a1a0a", "hex")) ? "PNG" : buffer[0] === 255 && buffer[1] === 216 ? "JPEG" : buffer.toString("ascii", 0, 4) === "RIFF" && buffer.toString("ascii", 8, 12) === "WEBP" ? "WebP" : null;
   if (image) {
     return [
@@ -27429,7 +27497,7 @@ __name(buildStructuredBinaryGuidance, "buildStructuredBinaryGuidance");
 
 // ../sdk/dist/tools/builtins/write-file.js
 import { mkdir as mkdir8, readFile as readFile8 } from "node:fs/promises";
-import { dirname as dirname9 } from "node:path";
+import { dirname as dirname10 } from "node:path";
 
 // ../sdk/dist/tools/builtins/file-write-result.js
 import { createHash as createHash8 } from "node:crypto";
@@ -27590,7 +27658,7 @@ var WriteFileTool = defineTool({
         if (guard)
           return guard;
       }
-      await mkdir8(dirname9(hostPath), { recursive: true });
+      await mkdir8(dirname10(hostPath), { recursive: true });
       await atomicWriteFile2(hostPath, content);
       context2.fileReadTracker?.recordRead(hostPath, content, context2.toolUseId);
       return fileWriteResult(hostPath, current, content);
@@ -27725,7 +27793,7 @@ function parseArguments2(call2) {
 }
 __name(parseArguments2, "parseArguments");
 function lexicalFileKeys(workingDirectory, sandboxed) {
-  return (path2) => sandboxed ? path2 : resolve6(workingDirectory, path2);
+  return (path2) => sandboxed ? path2 : resolve7(workingDirectory, path2);
 }
 __name(lexicalFileKeys, "lexicalFileKeys");
 function indexVisibleHistory(messages, keyOf) {
@@ -30670,7 +30738,7 @@ var RUNTIME_DEFAULTS = RuntimeConfigSchema.parse({});
 
 // ../sdk/dist/manager/agent/child-session.js
 import { mkdir as mkdir9, readFile as readFile9 } from "node:fs/promises";
-import { dirname as dirname10 } from "node:path";
+import { dirname as dirname11 } from "node:path";
 async function childSessionEnded(childLog) {
   let ended = null;
   for await (const { record: record3 } of childLog.read({ mode: "tolerant" })) {
@@ -30702,7 +30770,7 @@ async function writeChildSessionMeta(path2, meta) {
   if (current !== null && (current.sessionId !== next.sessionId || current.parentSessionId !== next.parentSessionId || current.parentTurnId !== next.parentTurnId)) {
     throw new ChildSessionMetaOwnerError(`${path2} describes child session ${current.sessionId} of ${current.parentSessionId}; refusing to overwrite it with ${next.sessionId} of ${next.parentSessionId}.`);
   }
-  await mkdir9(dirname10(path2), { recursive: true, mode: 448 });
+  await mkdir9(dirname11(path2), { recursive: true, mode: 448 });
   await atomicWriteFile(path2, `${JSON.stringify(next)}
 `, { mode: 384 });
 }
@@ -32601,12 +32669,12 @@ var AwaitedJobs = class {
       return Promise.resolve();
     if (this.outstanding.size === 0 && this.monitors.size === 0)
       return Promise.resolve();
-    return new Promise((resolve27) => {
+    return new Promise((resolve28) => {
       const finish2 = /* @__PURE__ */ __name(() => {
         clearTimeout(timer);
         this.arrivals.delete(finish2);
         signal?.removeEventListener("abort", finish2);
-        resolve27();
+        resolve28();
       }, "finish");
       const timer = setTimeout(finish2, timeoutMs);
       timer.unref?.();
@@ -34616,12 +34684,12 @@ var CompletionInbox = class {
       return Promise.resolve();
     if (!this.hasPendingWork)
       return Promise.resolve();
-    return new Promise((resolve27) => {
+    return new Promise((resolve28) => {
       const finish2 = /* @__PURE__ */ __name(() => {
         clearTimeout(timer);
         this.arrivals.delete(finish2);
         signal?.removeEventListener("abort", finish2);
-        resolve27();
+        resolve28();
       }, "finish");
       const timer = setTimeout(finish2, timeoutMs);
       timer.unref?.();
@@ -34746,11 +34814,11 @@ ${JSON.stringify({ tasks: tasks2, omitted: this.ours.size - ids.length })}`;
     });
     if (settlements.length === 0)
       return this.drain();
-    await new Promise((resolve27) => {
+    await new Promise((resolve28) => {
       const finish2 = /* @__PURE__ */ __name(() => {
         signal?.removeEventListener("abort", finish2);
         this.drains.delete(finish2);
-        resolve27();
+        resolve28();
       }, "finish");
       this.drains.add(finish2);
       signal?.addEventListener("abort", finish2, { once: true });
@@ -35740,15 +35808,26 @@ var STOP_WORDS = /* @__PURE__ */ new Set([
   "you"
 ]);
 var WORD = /[\p{L}\p{N}_$][\p{L}\p{N}_$.\-/\\:]*/gu;
+var SEPARATORS = /* @__PURE__ */ new Set([".", "-", "/", "\\", ":"]);
+function trimSeparators(token) {
+  let start = 0;
+  let end = token.length;
+  while (start < end && SEPARATORS.has(token[start]))
+    start++;
+  while (end > start && SEPARATORS.has(token[end - 1]))
+    end--;
+  return start === 0 && end === token.length ? token : token.slice(start, end);
+}
+__name(trimSeparators, "trimSeparators");
 function splitIdentifier(raw) {
-  const parts = raw.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[_\s]+/).filter((p) => p.length > 0);
+  const parts = raw.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/(?<=[A-Z])(?=[A-Z][a-z])/g, " ").split(/[_\s]+/).filter((p) => p.length > 0);
   return parts.length > 1 ? parts : [];
 }
 __name(splitIdentifier, "splitIdentifier");
 function tokenize2(text9) {
   const out = [];
   for (const match2 of text9.matchAll(WORD)) {
-    const raw = match2[0].replace(/^[.\-/\\:]+|[.\-/\\:]+$/g, "");
+    const raw = trimSeparators(match2[0]);
     if (raw.length === 0)
       continue;
     const whole = raw.toLowerCase();
@@ -35785,8 +35864,7 @@ __name(termFrequencies, "termFrequencies");
 // ../sdk/dist/compaction/salience/bm25.js
 var K1 = 1.2;
 var B = 0.75;
-function indexDocument(text9) {
-  const tokens = tokenize2(text9);
+function indexDocument(text9, tokens = tokenize2(text9)) {
   return { tf: termFrequencies(tokens), length: tokens.length };
 }
 __name(indexDocument, "indexDocument");
@@ -35925,7 +36003,7 @@ function scoreMessages(messages, options) {
   const texts = messages.map(messageText);
   const richContent = messages.map(hasRichContent);
   const tokenLists = texts.map(tokenize2);
-  const documents = texts.map(indexDocument);
+  const documents = texts.map((text9, i) => indexDocument(text9, tokenLists[i]));
   const index = buildIndex(documents);
   const goalTokens = tokenize2(options.goal);
   const rawRelevance = documents.map((doc) => bm25Score(index, doc, goalTokens));
@@ -37444,7 +37522,8 @@ async function runCompactionCheckInner(ctx, pass, options) {
   } else {
     compactedContent = serializeState(manager.getState());
   }
-  const compactionMessage = buildCompactionMessage(compactedContent);
+  const mounted = new Set(ctx.tools?.listNames?.() ?? []);
+  const compactionMessage = buildCompactionMessage(compactedContent, mounted.has("search_conversation") && mounted.has("read_conversation") ? COMPACTION_RECOVERY_NOTE : void 0);
   const preservedSystem = systemMessages.filter((m) => !isCompactionMessage(typeof m.content === "string" ? m.content : null) || m.retain === true);
   const retained = findRetainedIndices(messages);
   const retainedOlder = retained.size === 0 ? [] : messages.slice(systemMessages.length, keepStart).filter((_, offset) => retained.has(systemMessages.length + offset));
@@ -37695,14 +37774,14 @@ async function awaitDecisionDurably(ctx, checkpoint, request) {
   }, "record");
   let parkTimer;
   let recording = false;
-  const recordIfSlow = new Promise((resolve27) => {
+  const recordIfSlow = new Promise((resolve28) => {
     parkTimer = setTimeout(() => {
       if (settled) {
-        resolve27();
+        resolve28();
         return;
       }
       recording = true;
-      record3().then(resolve27, resolve27);
+      record3().then(resolve28, resolve28);
     }, delay2);
   });
   try {
@@ -37752,13 +37831,13 @@ async function awaitDecisionOrAbort(ctx, request) {
   };
   if (signal.aborted)
     return abortDecision;
-  return new Promise((resolve27) => {
+  return new Promise((resolve28) => {
     let settled = false;
     const onAbort = /* @__PURE__ */ __name(() => {
       if (settled)
         return;
       settled = true;
-      resolve27(abortDecision);
+      resolve28(abortDecision);
     }, "onAbort");
     signal.addEventListener("abort", onAbort, { once: true });
     Promise.resolve(ctx.resumeHandler(request, resumeContext)).then((decision2) => {
@@ -37766,13 +37845,13 @@ async function awaitDecisionOrAbort(ctx, request) {
         return;
       settled = true;
       signal.removeEventListener("abort", onAbort);
-      resolve27(decision2);
+      resolve28(decision2);
     }, (err) => {
       if (settled)
         return;
       settled = true;
       signal.removeEventListener("abort", onAbort);
-      resolve27({
+      resolve28({
         action: "abort",
         reason: err instanceof Error ? err.message : "resume handler failed"
       });
@@ -37975,7 +38054,7 @@ __name(runPlanGate, "runPlanGate");
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "node:util";
 async function awaitProjectInstructionCallback(signal, start) {
   signal.throwIfAborted();
-  return new Promise((resolve27, reject2) => {
+  return new Promise((resolve28, reject2) => {
     let settled = false;
     const cleanup = /* @__PURE__ */ __name(() => signal.removeEventListener("abort", onAbort), "cleanup");
     const rejectOnce = /* @__PURE__ */ __name((reason2) => {
@@ -37990,7 +38069,7 @@ async function awaitProjectInstructionCallback(signal, start) {
         return;
       settled = true;
       cleanup();
-      resolve27(value);
+      resolve28(value);
     }, "resolveOnce");
     const onAbort = /* @__PURE__ */ __name(() => rejectOnce(signal.reason), "onAbort");
     signal.addEventListener("abort", onAbort, { once: true });
@@ -38424,8 +38503,8 @@ async function* runToolReview(ctx, response, iterationNum) {
     }
     const wakeup = /* @__PURE__ */ __name(() => {
       let notify;
-      const promise = new Promise((resolve27) => {
-        notify = resolve27;
+      const promise = new Promise((resolve28) => {
+        notify = resolve28;
       });
       return { promise, notify };
     }, "wakeup");
@@ -42992,7 +43071,7 @@ async function awaitStoreRead(signal, start) {
   if (!signal)
     return await start();
   signal.throwIfAborted();
-  return new Promise((resolve27, reject2) => {
+  return new Promise((resolve28, reject2) => {
     let settled = false;
     const cleanup = /* @__PURE__ */ __name(() => signal.removeEventListener("abort", onAbort), "cleanup");
     const rejectOnce = /* @__PURE__ */ __name((reason2) => {
@@ -43007,7 +43086,7 @@ async function awaitStoreRead(signal, start) {
         return;
       settled = true;
       cleanup();
-      resolve27(value);
+      resolve28(value);
     }, "resolveOnce");
     const onAbort = /* @__PURE__ */ __name(() => rejectOnce(signal.reason), "onAbort");
     signal.addEventListener("abort", onAbort, { once: true });
@@ -43848,8 +43927,8 @@ var ProbeRegistry = class {
 var probe = new ProbeRegistry();
 
 // ../sdk/dist/store/evidence/disk.js
-import { lstat as lstat3 } from "node:fs/promises";
-import { resolve as resolve7 } from "node:path";
+import { lstat as lstat4 } from "node:fs/promises";
+import { resolve as resolve8 } from "node:path";
 
 // ../sdk/dist/store/evidence/index-page.js
 import { createHash as createHash15, createHmac, timingSafeEqual } from "node:crypto";
@@ -44210,7 +44289,7 @@ function excludesSuccessfulTool(entry, names) {
 __name(excludesSuccessfulTool, "excludesSuccessfulTool");
 
 // ../sdk/dist/store/evidence/source-text.js
-import { lstat as lstat2 } from "node:fs/promises";
+import { lstat as lstat3 } from "node:fs/promises";
 import { join as join14 } from "node:path";
 
 // ../sdk/dist/utils/evidence-time.js
@@ -44334,7 +44413,7 @@ async function sourceText(pointer2, sessionDir, budget, { event, parts }) {
             throw new Error("Retained output bytes changed.");
           pieces.push(bytes);
         }
-        if (stamp2(before) !== stamp2(await file.stat()) || stamp2(before) !== stamp2(await lstat2(path2)))
+        if (stamp2(before) !== stamp2(await file.stat()) || stamp2(before) !== stamp2(await lstat3(path2)))
           throw new Error("Retained output changed during read.");
         const all = Buffer.concat(pieces);
         const ownedStart = (chunk - first) * EVIDENCE_CHUNK_BYTES;
@@ -44362,15 +44441,33 @@ async function sourceText(pointer2, sessionDir, budget, { event, parts }) {
   };
 }
 __name(sourceText, "sourceText");
+var SessionEvidenceOffsetError = class extends Error {
+  static {
+    __name(this, "SessionEvidenceOffsetError");
+  }
+  code;
+  totalBytes;
+  scannedBytes;
+  constructor(code, message, totalBytes, scannedBytes) {
+    super(message);
+    this.code = code;
+    this.totalBytes = totalBytes;
+    this.scannedBytes = scannedBytes;
+    this.name = "SessionEvidenceOffsetError";
+  }
+};
 async function readTextPage(source, scope, offset, budget) {
   const entry = source.entry;
   if (offset > source.bytes)
-    throw new Error("Offset exceeds retained text.");
+    throw new SessionEvidenceOffsetError("past_end", "Offset exceeds retained text.", source.bytes, budget.bytes);
   const chunk = entry.spill ? Math.min(Math.floor(offset / EVIDENCE_CHUNK_BYTES), source.chunks - 1) : 0;
   const window2 = await source.window(chunk);
+  const splits = /* @__PURE__ */ __name(() => new SessionEvidenceOffsetError("inside_character", "Offset splits a UTF-8 character.", source.bytes, budget.bytes), "splits");
   if (offset < window2.offset)
-    throw new Error("Offset splits a UTF-8 character.");
+    throw splits();
   const bytes = window2.bytes.subarray(offset - window2.offset);
+  if (bytes.length && ((bytes[0] ?? 0) & 192) === 128)
+    throw splits();
   let text9 = decode(utf8Page(bytes, 24e3));
   if (text9.length > 6e3) {
     let end = 6e3;
@@ -44526,7 +44623,7 @@ function createSource(options, mode, anchor) {
   const consistency = external_exports.enum(["closed", "snapshot"]).parse(options.consistency ?? "closed");
   const maxReadBytes = external_exports.number().int().min(1024 * 1024).max(PAGE_BYTES).parse(options.maxReadBytes ?? PAGE_BYTES);
   const scope = Object.freeze(scopeSchema.parse(options.scope));
-  const logPath = resolve7(options.logPath);
+  const logPath = resolve8(options.logPath);
   if (!logPath.endsWith(".jsonl"))
     throw new Error("A session log path ends in .jsonl.");
   const sessionDir = logPath.slice(0, -".jsonl".length);
@@ -44556,14 +44653,14 @@ function createSource(options, mode, anchor) {
         throw new Error("Evidence scope has an active turn; it is not closed.");
       }
       const anchorKey = anchor ? await verifyAnchor(handle, anchor) : void 0;
-      const sourceKey = digest2(`session-v1:${consistency}:${mode}:${scopeKey}:${anchorKey ?? stamp2(before)}`);
+      const sourceKey = digest2(`session-v1:${consistency}:${mode}:${scopeKey}:${fileIdentity(before)}`);
       const seal = evidenceSeal(state.first, sourceKey);
       const value = await action(handle, size, seal, sourceKey, budget, !state.closed);
       signal?.throwIfAborted();
       if (anchor) {
         if (await verifyAnchor(handle, anchor) !== anchorKey)
           throw new Error("Evidence source changed during retrieval.");
-      } else if (stamp2(before) !== stamp2(await handle.stat()) || stamp2(before) !== stamp2(await lstat3(logPath))) {
+      } else if (stamp2(before) !== stamp2(await handle.stat()) || stamp2(before) !== stamp2(await lstat4(logPath))) {
         throw new Error("Evidence source changed during retrieval.");
       }
       return value;
@@ -44761,6 +44858,10 @@ function createSource(options, mode, anchor) {
   });
 }
 __name(createSource, "createSource");
+function fileIdentity(stats) {
+  return Number(stats.ino) === 0 ? `${stats.dev}:0:${stats.birthtimeMs}` : `${stats.dev}:${stats.ino}`;
+}
+__name(fileIdentity, "fileIdentity");
 async function verifyAnchor(handle, anchor) {
   const bytes = await readBytes(handle, anchor.offset, anchor.length, {
     bytes: 0,
@@ -44811,8 +44912,8 @@ var EventTranslator = class {
   async withLogLock(operation) {
     const previous = this.appendChain;
     let release;
-    this.appendChain = new Promise((resolve27) => {
-      release = resolve27;
+    this.appendChain = new Promise((resolve28) => {
+      release = resolve28;
     });
     try {
       await previous;
@@ -45207,11 +45308,11 @@ async function teardownSandbox(sandbox, timeoutMs) {
     return await operation;
   let timer;
   let timedOut;
-  const deadline = new Promise((resolve27) => {
+  const deadline = new Promise((resolve28) => {
     timer = setTimeout(() => {
       timedOut = teardownTimeoutError(timeoutMs);
       controller.abort(timedOut);
-      resolve27({ kind: "timed_out", error: timedOut });
+      resolve28({ kind: "timed_out", error: timedOut });
     }, timeoutMs);
   });
   try {
@@ -45239,20 +45340,20 @@ async function acquireSandbox(options) {
   let timeoutError2;
   let timer;
   let onAbort;
-  const aborted = new Promise((resolve27) => {
+  const aborted = new Promise((resolve28) => {
     onAbort = /* @__PURE__ */ __name(() => {
       operationController.abort(runSignal.reason);
-      resolve27({ kind: "cancelled" });
+      resolve28({ kind: "cancelled" });
     }, "onAbort");
     runSignal.addEventListener("abort", onAbort, { once: true });
   });
-  const timedOut = new Promise((resolve27) => {
+  const timedOut = new Promise((resolve28) => {
     if (options.timeoutMs === Number.POSITIVE_INFINITY)
       return;
     timer = setTimeout(() => {
       timeoutError2 = acquisitionTimeoutError(options.timeoutMs);
       operationController.abort(timeoutError2);
-      resolve27({ kind: "timed_out", error: timeoutError2 });
+      resolve28({ kind: "timed_out", error: timeoutError2 });
     }, options.timeoutMs);
   });
   if (runSignal.aborted) {
@@ -45301,8 +45402,8 @@ async function acquireSandbox(options) {
 __name(acquireSandbox, "acquireSandbox");
 
 // ../sdk/dist/runtime/query/session-storage.js
-import { readdir as readdir4, realpath as realpath4 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname12, join as join15, resolve as resolve8 } from "node:path";
+import { readdir as readdir4, realpath as realpath5 } from "node:fs/promises";
+import { basename as basename6, dirname as dirname13, join as join15, resolve as resolve9 } from "node:path";
 
 // ../sdk/dist/store/budget/ledger.js
 var SESSION_TOKEN_BUDGET_VERSION = 2;
@@ -45992,7 +46093,7 @@ var SessionTokenBudget = class _SessionTokenBudget {
 
 // ../sdk/dist/store/budget/disk.js
 import { mkdir as mkdir10, readFile as readFile10, rename as rename4, unlink as unlink8, writeFile as writeFile4 } from "node:fs/promises";
-import { dirname as dirname11 } from "node:path";
+import { dirname as dirname12 } from "node:path";
 var DiskSessionTokenBudgetStore = class {
   static {
     __name(this, "DiskSessionTokenBudgetStore");
@@ -46020,7 +46121,7 @@ var DiskSessionTokenBudgetStore = class {
       const existing = await this.#read(path2, checkedScope);
       if (existing)
         assertSameRoot(existing, checked2);
-      await mkdir10(dirname11(path2), { recursive: true, mode: 448 });
+      await mkdir10(dirname12(path2), { recursive: true, mode: 448 });
       const temporary = temporaryPathFor(path2);
       try {
         await writeFile4(temporary, `${JSON.stringify(checked2)}
@@ -46196,15 +46297,15 @@ async function placeInLayout(paths2, log) {
 }
 __name(placeInLayout, "placeInLayout");
 async function canonicalPath(path2) {
-  let existing = resolve8(path2);
+  let existing = resolve9(path2);
   let remainder = "";
   for (; ; ) {
-    const found = await realpath4(existing).catch(() => void 0);
+    const found = await realpath5(existing).catch(() => void 0);
     if (found !== void 0)
       return remainder ? join15(found, remainder) : found;
-    const parent = dirname12(existing);
+    const parent = dirname13(existing);
     if (parent === existing)
-      return resolve8(path2);
+      return resolve9(path2);
     remainder = remainder ? join15(basename6(existing), remainder) : basename6(existing);
     existing = parent;
   }
@@ -46433,8 +46534,8 @@ var ToolCallBudget = class {
     signal.throwIfAborted();
     const previous = this.chain;
     let release;
-    this.chain = new Promise((resolve27) => {
-      release = resolve27;
+    this.chain = new Promise((resolve28) => {
+      release = resolve28;
     });
     try {
       await previous;
@@ -46509,8 +46610,8 @@ async function resolveProviderContextWindow(provider, model, signal, timeoutMs,
   const resolverSignal = signal ? AbortSignal.any([signal, deadline.signal]) : deadline.signal;
   const interrupted = /* @__PURE__ */ Symbol("provider-context-window-interrupted");
   let onAbort;
-  const interruption = new Promise((resolve27) => {
-    onAbort = /* @__PURE__ */ __name(() => resolve27(interrupted), "onAbort");
+  const interruption = new Promise((resolve28) => {
+    onAbort = /* @__PURE__ */ __name(() => resolve28(interrupted), "onAbort");
     resolverSignal.addEventListener("abort", onAbort, { once: true });
   });
   const deadlineMs = timeoutMs === 0 ? 5e3 : Math.min(Math.max(0, timeoutMs), 2147483647);
@@ -49006,6 +49107,14 @@ var ToolExecutor = class {
   static {
     __name(this, "ToolExecutor");
   }
+  /** The recovery routes this turn actually has, so a pointer never names a missing tool. */
+  recoveryRoutes() {
+    const tools = this.config.tools;
+    return {
+      read: tools.get("read") !== void 0,
+      conversation: tools.get("search_conversation") !== void 0 && tools.get("read_conversation") !== void 0
+    };
+  }
   outputDirectory() {
     return typeof this.config.toolOutputDir === "function" ? this.config.toolOutputDir() : this.config.toolOutputDir;
   }
@@ -49349,7 +49458,8 @@ var ToolExecutor = class {
     if (this.config.outsideRootAccess === "review" && !sandboxed && tool.pathArgument !== void 0) {
       const value = input[tool.pathArgument];
       if (typeof value === "string") {
-        const outside = await pathOutsideRoots(toolRoots(this.config), value);
+        const retained = tool.name === "read" && await resolveRetainedOutput(this.outputDirectory(), value);
+        const outside = retained ? void 0 : await pathOutsideRoots(toolRoots(this.config), value);
         if (outside !== void 0)
           outsidePaths = [outside];
       }
@@ -49662,6 +49772,7 @@ var ToolExecutor = class {
     })), {
       maxChars: maxChars2,
       spillDir: this.outputDirectory(),
+      recoveryRoutes: this.recoveryRoutes(),
       onError: /* @__PURE__ */ __name((message) => this.log.warn("Failed to retain a tool output replaced for the message budget", {
         [NAMZU.TURN_ID]: this.config.turnId,
         "exception.message": message
@@ -49866,6 +49977,7 @@ var ToolExecutor = class {
       maxChars: this.config.maxToolOutputChars ?? DEFAULT_MAX_TOOL_OUTPUT_CHARS,
       retainedPreviewChars: this.config.retainedToolPreviewChars,
       spillDir: this.outputDirectory(),
+      recoveryRoutes: this.recoveryRoutes(),
       onError: /* @__PURE__ */ __name((message) => this.log.warn("Failed to spill oversized nested tool output", {
         [NAMZU.TURN_ID]: this.config.turnId,
         [GENAI.TOOL_NAME]: name2,
@@ -49942,6 +50054,7 @@ var ToolExecutor = class {
       turnId: this.config.turnId,
       workingDirectory: this.config.workingDirectory,
       ...this.config.additionalDirectories?.length ? { additionalDirectories: this.config.additionalDirectories } : {},
+      ...this.outputDirectory() ? { retainedOutputDirectory: this.outputDirectory() } : {},
       abortSignal: this.config.abortSignal,
       env: this.config.env,
       log: /* @__PURE__ */ __name((level, message) => this.log[level](message), "log"),
@@ -50207,6 +50320,7 @@ var ToolExecutor = class {
       maxChars: maxToolOutputChars,
       retainedPreviewChars: this.config.retainedToolPreviewChars,
       spillDir: this.outputDirectory(),
+      recoveryRoutes: this.recoveryRoutes(),
       onError: /* @__PURE__ */ __name((message) => this.log.warn("Failed to retain original tool output", {
         [NAMZU.TURN_ID]: this.config.turnId,
         [GENAI.TOOL_NAME]: toolName,
@@ -50371,21 +50485,21 @@ ${note}`;
     let invocationOpen = true;
     const nestedDispatches = /* @__PURE__ */ new Set();
     try {
-      const expired = Number.isFinite(timeoutMs) && timeoutMs > 0 ? new Promise((resolve27) => {
+      const expired = Number.isFinite(timeoutMs) && timeoutMs > 0 ? new Promise((resolve28) => {
         timer = setTimeout(() => {
           timedOut = true;
           controller.abort(new Error(`Tool "${toolName}" exceeded ${timeoutMs}ms`));
-          resolve27("timeout");
+          resolve28("timeout");
         }, timeoutMs);
       }) : void 0;
-      const aborted = new Promise((resolve27) => {
+      const aborted = new Promise((resolve28) => {
         if (controller.signal.aborted && !timedOut) {
-          resolve27("aborted");
+          resolve28("aborted");
           return;
         }
         controller.signal.addEventListener("abort", () => {
           if (!timedOut)
-            resolve27("aborted");
+            resolve28("aborted");
         }, { once: true });
       });
       const inheritedDispatch = toolContext.dispatchTool;
@@ -50872,6 +50986,7 @@ ${note}`;
       // A tool may return different host and model text. They must
       // never compete for the same exclusive spill filename.
       spillDir: this.outputDirectory() ? join16(this.outputDirectory(), "content") : void 0,
+      recoveryRoutes: this.recoveryRoutes(),
       onError: /* @__PURE__ */ __name((message) => this.log.warn("Failed to spill oversized model tool content", {
         [NAMZU.TURN_ID]: this.config.turnId,
         [GENAI.TOOL_NAME]: toolName,
@@ -50926,8 +51041,8 @@ var Semaphore = class {
       this.available--;
       return Promise.resolve();
     }
-    return new Promise((resolve27) => {
-      this.waiters.push(resolve27);
+    return new Promise((resolve28) => {
+      this.waiters.push(resolve28);
     });
   }
   release() {
@@ -53316,7 +53431,7 @@ var ScanSessionIndex = class _ScanSessionIndex extends SessionIndexBase {
 // ../sdk/dist/store/session-index/sqlite.js
 import { mkdir as mkdir11, readdir as readdir6, rename as rename5, rm, stat as stat6 } from "node:fs/promises";
 import { createRequire } from "node:module";
-import { basename as basename7, dirname as dirname13, join as join18 } from "node:path";
+import { basename as basename7, dirname as dirname14, join as join18 } from "node:path";
 var SESSION_INDEX_VERSION = 1;
 var sqliteModule;
 function loadSqlite() {
@@ -53507,7 +53622,7 @@ async function modifiedAt(path2) {
 }
 __name(modifiedAt, "modifiedAt");
 async function sweepAbandonedRebuilds(path2) {
-  const directory = dirname13(path2);
+  const directory = dirname14(path2);
   const prefix = `${basename7(path2)}.tmp-`;
   let names;
   try {
@@ -53638,7 +53753,7 @@ var SqliteSessionIndex = class _SqliteSessionIndex extends SessionIndexBase {
   /** See {@link rebuildSqliteSessionIndex}. */
   static async rebuild(options) {
     const { DatabaseSync } = requireSqlite();
-    await mkdir11(dirname13(options.path), { recursive: true });
+    await mkdir11(dirname14(options.path), { recursive: true });
     await sweepAbandonedRebuilds(options.path);
     const temporary = `${options.path}.tmp-${process.pid}-${uuidv7()}`;
     try {
@@ -53889,8 +54004,8 @@ function preservedSystemFloor(systemMessages) {
   return systemMessages.filter((m) => !isCompactionMessage(typeof m.content === "string" ? m.content : null) || m.retain === true);
 }
 __name(preservedSystemFloor, "preservedSystemFloor");
-function splice(preservedSystem, summaryBody, retainedOlder, recentMessages) {
-  const summary2 = { ...buildCompactionMessage(summaryBody), retain: true };
+function splice(preservedSystem, summaryBody, retainedOlder, recentMessages, recoveryNote) {
+  const summary2 = { ...buildCompactionMessage(summaryBody, recoveryNote), retain: true };
   return { messages: [...preservedSystem, summary2, ...retainedOlder, ...recentMessages], summary: summary2 };
 }
 __name(splice, "splice");
@@ -53950,7 +54065,7 @@ async function compactNow(input) {
     streamIdleTimeoutMs: input.streamIdleTimeoutMs,
     instructions: input.instructions
   });
-  const { messages, summary: summary2 } = splice(preservedSystem, body, retainedOlder, plan.recentMessages);
+  const { messages, summary: summary2 } = splice(preservedSystem, body, retainedOlder, plan.recentMessages, input.recoveryNote);
   return publishManualCompaction(input, {
     messages,
     shed: input.messages.length - messages.length,
@@ -54607,7 +54722,7 @@ __name(createMemoryRecallStep, "createMemoryRecallStep");
 // ../sdk/dist/execution/local.js
 import { spawn } from "node:child_process";
 import { existsSync as existsSync3 } from "node:fs";
-import { resolve as resolve9 } from "node:path";
+import { resolve as resolve10 } from "node:path";
 
 // ../sdk/dist/execution/base.js
 var InitializationSupersededError = class extends Error {
@@ -54898,7 +55013,7 @@ var LocalExecutionContext = class extends BaseExecutionContext {
   constructor(options) {
     super(options.log);
     this.id = options.id;
-    this.cwd = resolve9(options.cwd);
+    this.cwd = resolve10(options.cwd);
     this.fsAccess = options.fsAccess ?? true;
     this.envVars = options.envVars ?? {};
     this.capabilities = options.capabilities ?? ["filesystem", "process", "shell"];
@@ -54934,7 +55049,7 @@ var LocalExecutionContext = class extends BaseExecutionContext {
     return this.cwd;
   }
   setCwd(newCwd) {
-    const resolved2 = resolve9(newCwd);
+    const resolved2 = resolve10(newCwd);
     if (!existsSync3(resolved2)) {
       throw new Error(`Working directory does not exist: ${resolved2}`);
     }
@@ -54944,7 +55059,7 @@ var LocalExecutionContext = class extends BaseExecutionContext {
     return this.fsAccess;
   }
   resolvePath(relativePath) {
-    return resolve9(this.cwd, relativePath);
+    return resolve10(this.cwd, relativePath);
   }
   getEnvVar(key5) {
     return this.envVars[key5] ?? process.env[key5];
@@ -54972,7 +55087,7 @@ var LocalExecutionContext = class extends BaseExecutionContext {
         durationMs: 0
       };
     }
-    const cwd = options?.cwd ? resolve9(this.cwd, options.cwd) : this.cwd;
+    const cwd = options?.cwd ? resolve10(this.cwd, options.cwd) : this.cwd;
     const env = { ...process.env, ...this.envVars, ...options?.env };
     const timeoutMs = options?.timeoutMs ?? LOCAL_COMMAND_DEFAULT_TIMEOUT_MS;
     if (!Number.isInteger(timeoutMs) || timeoutMs < 0) {
@@ -55103,9 +55218,9 @@ var LocalExecutionContext = class extends BaseExecutionContext {
 
 // ../sdk/dist/turn/workspace-fingerprint.js
 import { createHash as createHash17 } from "node:crypto";
-import { lstat as lstat4, readFile as readFile11, readlink } from "node:fs/promises";
+import { lstat as lstat5, readFile as readFile11, readlink } from "node:fs/promises";
 import { join as join20 } from "node:path";
-var NODE_FS = { lstat: lstat4, readlink, readFile: readFile11 };
+var NODE_FS = { lstat: lstat5, readlink, readFile: readFile11 };
 var FINGERPRINT_MAX_BYTES = 4 * 1024 * 1024;
 var FINGERPRINT_TIMEOUT_MS = 2e4;
 async function untrackedEntry(cwd, rel, fs) {
@@ -56032,15 +56147,15 @@ var DiskTaskStore = class {
         break;
       await existing.catch(() => void 0);
     }
-    let resolve27;
+    let resolve28;
     const lock = new Promise((r) => {
-      resolve27 = r;
+      resolve28 = r;
     });
     this.locks.set(taskId, lock);
     try {
       return await fn();
     } finally {
-      resolve27?.();
+      resolve28?.();
       if (this.locks.get(taskId) === lock) {
         this.locks.delete(taskId);
       }
@@ -56360,8 +56475,8 @@ var DiskTaskStore = class {
 
 // ../sdk/dist/store/memory/markdown.js
 import { createHash as createHash20 } from "node:crypto";
-import { lstat as lstat6, mkdir as mkdir13, readFile as readFile14, readdir as readdir8, realpath as realpath5, rename as rename6, unlink as unlink11 } from "node:fs/promises";
-import { dirname as dirname14, join as join24, resolve as resolve10 } from "node:path";
+import { lstat as lstat7, mkdir as mkdir13, readFile as readFile14, readdir as readdir8, realpath as realpath6, rename as rename6, unlink as unlink11 } from "node:fs/promises";
+import { dirname as dirname15, join as join24, resolve as resolve11 } from "node:path";
 
 // ../sdk/dist/store/memory/index-file.js
 var MEMORY_INDEX_MAX_LINES = 200;
@@ -56578,7 +56693,7 @@ __name(formatMemoryFile, "formatMemoryFile");
 
 // ../sdk/dist/store/memory/operation-lock.js
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { lstat as lstat5, open as open9, readFile as readFile13, unlink as unlink10 } from "node:fs/promises";
+import { lstat as lstat6, open as open9, readFile as readFile13, unlink as unlink10 } from "node:fs/promises";
 import { setTimeout as delay } from "node:timers/promises";
 var DEFAULT_MEMORY_LOCK_TIMEOUT_MS = 1e4;
 function validateMemoryLockTimeout(timeoutMs) {
@@ -56614,7 +56729,7 @@ async function acquireMemoryOperationLock(path2, timeoutMs) {
     } catch (error) {
       if (error.code !== "EEXIST")
         throw error;
-      const existing = await lstat5(path2).catch((statError) => {
+      const existing = await lstat6(path2).catch((statError) => {
         if (statError.code === "ENOENT")
           return void 0;
         throw statError;
@@ -56641,7 +56756,7 @@ async function acquireMemoryOperationLock(path2, timeoutMs) {
       await handle.sync();
     } catch (error) {
       await handle.close();
-      const current = await lstat5(path2).catch(() => void 0);
+      const current = await lstat6(path2).catch(() => void 0);
       if (current?.dev === identity.dev && current.ino === identity.ino) {
         await unlink10(path2).catch(() => void 0);
       }
@@ -56649,7 +56764,7 @@ async function acquireMemoryOperationLock(path2, timeoutMs) {
     }
     await handle.close();
     return async () => {
-      const current = await lstat5(path2);
+      const current = await lstat6(path2);
       if (!current.isFile() || current.isSymbolicLink() || current.dev !== identity.dev || current.ino !== identity.ino || await readFile13(path2, "utf8") !== owner) {
         throw lockError(path2, "the lock owner changed before release", timeoutMs);
       }
@@ -56935,7 +57050,7 @@ var MarkdownMemoryStore = class {
   lockTimeoutMs;
   canonical;
   constructor(config) {
-    this.directory = resolve10(config.directory);
+    this.directory = resolve11(config.directory);
     this.log = resolveLogger(config.logger).child({
       [SCOPE_ATTRIBUTE]: "store/memory/markdown"
     });
@@ -56950,14 +57065,14 @@ var MarkdownMemoryStore = class {
     if (this.canonical)
       return this.canonical;
     await mkdir13(this.directory, { recursive: true, mode: DIRECTORY_MODE });
-    this.canonical = await realpath5(this.directory);
+    this.canonical = await realpath6(this.directory);
     return this.canonical;
   }
   memoryPath(dir, name2) {
     if (!isMemoryName(name2))
       invalidFile(join24(dir, `${name2}.md`), "name is not a memory name");
-    const path2 = resolve10(entryPath(dir, name2, ".md"));
-    if (dirname14(path2) !== dir)
+    const path2 = resolve11(entryPath(dir, name2, ".md"));
+    if (dirname15(path2) !== dir)
       invalidFile(path2, "resolved path escapes the memory directory");
     return path2;
   }
@@ -56973,7 +57088,7 @@ var MarkdownMemoryStore = class {
       if (!fileName2.endsWith(".md") || fileName2 === MEMORY_INDEX_FILE)
         continue;
       const path2 = join24(dir, fileName2);
-      const stat15 = await lstat6(path2).catch((error) => {
+      const stat15 = await lstat7(path2).catch((error) => {
         if (error.code === "ENOENT")
           return void 0;
         throw error;
@@ -57036,7 +57151,7 @@ var MarkdownMemoryStore = class {
   }
   async setAside(path2) {
     let target = `${path2}${SUPERSEDED_SUFFIX}`;
-    const taken = /* @__PURE__ */ __name((candidate) => lstat6(candidate).then(() => true, () => false), "taken");
+    const taken = /* @__PURE__ */ __name((candidate) => lstat7(candidate).then(() => true, () => false), "taken");
     for (let n = 2; await taken(target); n++)
       target = `${path2}${SUPERSEDED_SUFFIX}-${n}`;
     await rename6(path2, target);
@@ -57329,8 +57444,8 @@ ${text9 ? `${text9}
 };
 
 // ../sdk/dist/store/memory/disk.js
-import { mkdir as mkdir14, realpath as realpath6, unlink as unlink12 } from "node:fs/promises";
-import { dirname as dirname15, join as join25, resolve as resolve11 } from "node:path";
+import { mkdir as mkdir14, realpath as realpath7, unlink as unlink12 } from "node:fs/promises";
+import { dirname as dirname16, join as join25, resolve as resolve12 } from "node:path";
 var SCHEMA5 = defineSchema({ kind: "memory-store", current: 1, migrations: {} });
 function invalidIndex(reason2, details = {}) {
   throw new NamzuError({
@@ -57446,7 +57561,7 @@ var DiskMemoryStore = class {
   records = new DiskRecordStore(SCHEMA5);
   indexRecords = new DiskRecordStore(SCHEMA5);
   constructor(config) {
-    this.baseDir = config.directory === void 0 ? join25(config.baseDir, "memory") : resolve11(config.directory);
+    this.baseDir = config.directory === void 0 ? join25(config.baseDir, "memory") : resolve12(config.directory);
     this.log = resolveLogger(config.logger).child({ [SCOPE_ATTRIBUTE]: "store/memory/disk" });
     this.lockTimeoutMs = config.lockTimeoutMs ?? DEFAULT_MEMORY_LOCK_TIMEOUT_MS;
     validateMemoryLockTimeout(this.lockTimeoutMs);
@@ -57459,10 +57574,10 @@ var DiskMemoryStore = class {
       return this.location;
     await mkdir14(this.contentDir, { recursive: true });
     const [canonicalBaseDir, canonicalContentDir] = await Promise.all([
-      realpath6(this.baseDir),
-      realpath6(this.contentDir)
+      realpath7(this.baseDir),
+      realpath7(this.contentDir)
     ]);
-    if (dirname15(canonicalContentDir) !== canonicalBaseDir) {
+    if (dirname16(canonicalContentDir) !== canonicalBaseDir) {
       invalidIndex("the content directory resolves outside the memory store");
     }
     this.location = {
@@ -57473,8 +57588,8 @@ var DiskMemoryStore = class {
   }
   contentPath(location, id3) {
     assertStorageMemoryId(id3, (reason2) => invalidContent(id3, reason2, { field: "id" }));
-    const path2 = resolve11(entryPath(location.contentDir, id3, ".json"));
-    if (dirname15(path2) !== location.contentDir) {
+    const path2 = resolve12(entryPath(location.contentDir, id3, ".json"));
+    if (dirname16(path2) !== location.contentDir) {
       invalidContent(id3, "resolved path escapes the content directory", { field: "id" });
     }
     return path2;
@@ -57498,7 +57613,7 @@ var DiskMemoryStore = class {
   }
   async withAuthoritativeIndex(operation) {
     const location = await this.storageLocation();
-    const release = await acquireMemoryOperationLock(join25(dirname15(location.indexPath), "operation.lock"), this.lockTimeoutMs);
+    const release = await acquireMemoryOperationLock(join25(dirname16(location.indexPath), "operation.lock"), this.lockTimeoutMs);
     try {
       await this.reloadIndex(location);
       return await operation(location);
@@ -60479,7 +60594,7 @@ var MockLLMProvider = class {
   async delay() {
     if (this.responseDelayMs <= 0)
       return;
-    await new Promise((resolve27) => setTimeout(resolve27, this.responseDelayMs));
+    await new Promise((resolve28) => setTimeout(resolve28, this.responseDelayMs));
   }
   /**
    * The turn to play. A script shorter than the turn repeats its last
@@ -60857,7 +60972,7 @@ var StdioTransport = class {
       this.exitPending = false;
       return;
     }
-    await new Promise((resolve27) => {
+    await new Promise((resolve28) => {
       let settled = false;
       const finish2 = /* @__PURE__ */ __name(() => {
         if (settled)
@@ -60865,7 +60980,7 @@ var StdioTransport = class {
         settled = true;
         clearTimeout(escalate);
         clearTimeout(giveUp);
-        resolve27();
+        resolve28();
       }, "finish");
       child.once("close", finish2);
       child.once("error", finish2);
@@ -62140,7 +62255,7 @@ async function resolveMcpEra(input) {
 __name(resolveMcpEra, "resolveMcpEra");
 
 // ../sdk/dist/version.js
-var VERSION2 = "53.1.0";
+var VERSION2 = "53.2.2";
 
 // ../sdk/dist/connector/mcp/client.js
 var MAX_LIST_PAGES = 100;
@@ -62464,7 +62579,7 @@ var MCPClient = class {
       capabilities: this.config.capabilities ?? {}
     });
     const controller = new AbortController();
-    return new Promise((resolve27) => {
+    return new Promise((resolve28) => {
       let settled = false;
       const finish2 = /* @__PURE__ */ __name((answer) => {
         if (settled)
@@ -62473,7 +62588,7 @@ var MCPClient = class {
         clearTimeout(timer);
         if (this.pendingRequests.get(id3) === entry)
           this.pendingRequests.delete(id3);
-        resolve27(answer);
+        resolve28(answer);
       }, "finish");
       const entry = {
         resolve: /* @__PURE__ */ __name((value) => finish2({ kind: "result", result: value }), "resolve"),
@@ -63047,8 +63162,8 @@ var MCPClient = class {
     let settled = false;
     let resolvePublic;
     let rejectPublic;
-    const result = new Promise((resolve27, reject2) => {
-      resolvePublic = resolve27;
+    const result = new Promise((resolve28, reject2) => {
+      resolvePublic = resolve28;
       rejectPublic = reject2;
     });
     const entry = {
@@ -63892,14 +64007,14 @@ var MCPReconnectSupervisor = class {
     });
   }
   wait(ms) {
-    return new Promise((resolve27) => {
+    return new Promise((resolve28) => {
       const finish2 = /* @__PURE__ */ __name(() => {
         if (this.timer)
           clearTimeout(this.timer);
         this.timer = void 0;
         if (this.finishWait === finish2)
           this.finishWait = void 0;
-        resolve27();
+        resolve28();
       }, "finish");
       this.finishWait = finish2;
       this.timer = setTimeout(finish2, ms);
@@ -64199,7 +64314,7 @@ async function mcpToolset(client, options = {}) {
 __name(mcpToolset, "mcpToolset");
 
 // ../sdk/dist/bridge/acp/server.js
-import { isAbsolute as isAbsolute6 } from "node:path";
+import { isAbsolute as isAbsolute7 } from "node:path";
 
 // ../sdk/dist/constants/acp/index.js
 var ACP_PROTOCOL_VERSION = 1;
@@ -64530,7 +64645,7 @@ var ACPServer = class {
   request(method, params, signal) {
     this.requestSeq += 1;
     const id3 = `agent_${this.requestSeq}`;
-    return new Promise((resolve27, reject2) => {
+    return new Promise((resolve28, reject2) => {
       const finish2 = /* @__PURE__ */ __name(() => {
         if (this.pending.get(id3) !== entry)
           return false;
@@ -64545,7 +64660,7 @@ var ACPServer = class {
       const entry = {
         resolve: /* @__PURE__ */ __name((value) => {
           if (finish2())
-            resolve27(value);
+            resolve28(value);
         }, "resolve"),
         reject: /* @__PURE__ */ __name((error) => {
           if (finish2())
@@ -64692,7 +64807,7 @@ var ACPServer = class {
   }
   requireAbsoluteCwd(cwd) {
     const resolved2 = cwd ?? process.cwd();
-    if (!isAbsolute6(resolved2)) {
+    if (!isAbsolute7(resolved2)) {
       throw new AcpError(ACP_ERROR_CODES.INVALID_PARAMS, `ACP session cwd must be an absolute path; received ${JSON.stringify(resolved2)}.`);
     }
     return resolved2;
@@ -66891,7 +67006,7 @@ __name(createResidentEvidenceRecallStep, "createResidentEvidenceRecallStep");
 // ../sdk/dist/pals/store.js
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { chmodSync, closeSync, fsyncSync, linkSync, lstatSync as lstatSync3, mkdirSync as mkdirSync3, openSync, readFileSync, readdirSync, realpathSync as realpathSync3, unlinkSync, writeSync } from "node:fs";
-import { dirname as dirname16, isAbsolute as isAbsolute7, join as join27, relative as relative3, resolve as resolve12, sep as sep6 } from "node:path";
+import { dirname as dirname17, isAbsolute as isAbsolute8, join as join27, relative as relative4, resolve as resolve13, sep as sep6 } from "node:path";
 var ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u;
 var REVISION_FILE = /^[1-9][0-9]*\.json$/u;
 var PalConflictError = class extends Error {
@@ -66912,7 +67027,7 @@ function palId(id3) {
 }
 __name(palId, "palId");
 function homePath(home) {
-  const path2 = resolve12(home);
+  const path2 = resolve13(home);
   mkdirSync3(path2, { recursive: true, mode: 448 });
   const entry = lstatSync3(path2);
   if (!entry.isDirectory() || entry.isSymbolicLink())
@@ -66924,8 +67039,8 @@ function homePath(home) {
 }
 __name(homePath, "homePath");
 function contained(path2, root) {
-  const rel = relative3(root, path2);
-  return rel === "" || !isAbsolute7(rel) && rel !== ".." && !rel.startsWith(`..${sep6}`);
+  const rel = relative4(root, path2);
+  return rel === "" || !isAbsolute8(rel) && rel !== ".." && !rel.startsWith(`..${sep6}`);
 }
 __name(contained, "contained");
 function paths(home, workspaceRoot, id3) {
@@ -67159,7 +67274,7 @@ var DiskPalStore = class {
   }
   /** Exact validated host control directory; never an execution-computer claim. */
   atWorkspace(cwd) {
-    const lexical = resolve12(cwd);
+    const lexical = resolve13(cwd);
     const canonical2 = realpathSync3(lexical);
     const lexicalReserved = contained(lexical, this.workspaceRoot);
     const canonicalReserved = contained(canonical2, this.workspaceRoot);
@@ -67167,7 +67282,7 @@ var DiskPalStore = class {
       return null;
     if (lexical !== canonical2)
       throw new Error("Pal workspace is a symlink alias.");
-    const rel = relative3(this.workspaceRoot, canonical2);
+    const rel = relative4(this.workspaceRoot, canonical2);
     if (!ID.test(rel))
       throw new Error("Reserved Pal control directories cannot run ordinary host sessions. Open the exact Pal workspace.");
     const pal = this.get(rel);
@@ -67183,7 +67298,7 @@ function assertDirectory(path2) {
 }
 __name(assertDirectory, "assertDirectory");
 function publishExclusive(path2, value) {
-  const temporary = join27(dirname16(path2), `.pal-${randomUUID7()}.tmp`);
+  const temporary = join27(dirname17(path2), `.pal-${randomUUID7()}.tmp`);
   const fd = openSync(temporary, "wx", 384);
   try {
     writeSync(fd, `${JSON.stringify(value)}
@@ -68676,10 +68791,10 @@ var ExternalHarnessSession = class {
     }
   }
   makeActive(turnId6, operationId, startedAt) {
-    let resolve27;
+    let resolve28;
     let reject2;
     const done = new Promise((yes, no) => {
-      resolve27 = yes;
+      resolve28 = yes;
       reject2 = no;
     });
     void done.catch(() => void 0);
@@ -68689,7 +68804,7 @@ var ExternalHarnessSession = class {
       startedAt,
       items: /* @__PURE__ */ new Map(),
       reviews: /* @__PURE__ */ new Map(),
-      resolve: resolve27,
+      resolve: resolve28,
       reject: reject2,
       done
     };
@@ -69900,7 +70015,7 @@ ${line}`;
       stdout: true,
       stderr: true
     });
-    return await new Promise((resolve27) => {
+    return await new Promise((resolve28) => {
       let settled = false;
       let terminal;
       const inFlight = /* @__PURE__ */ new Set();
@@ -69915,7 +70030,7 @@ ${line}`;
         clearTimeout(deadline);
         options.signal?.removeEventListener("abort", onAbort);
         void worker.terminate();
-        resolve27({ ...result, calls: [...calls] });
+        resolve28({ ...result, calls: [...calls] });
       }, "finish");
       const finishTerminalWhenHostCallsSettle = /* @__PURE__ */ __name(() => {
         if (terminal && inFlight.size === 0)
@@ -71344,8 +71459,8 @@ ${body}`,
       let timer;
       await Promise.race([
         Promise.allSettled([...inFlight]),
-        new Promise((resolve27) => {
-          timer = setTimeout(resolve27, grace);
+        new Promise((resolve28) => {
+          timer = setTimeout(resolve28, grace);
         })
       ]);
       clearTimeout(timer);
@@ -72197,6 +72312,7 @@ var LocalTaskScheduler = class {
       {
         agentId: options.agentId,
         ...options.resumeSessionId ? { resumeSessionId: options.resumeSessionId } : {},
+        ...options.continuationProfile ? { continuationProfile: options.continuationProfile } : {},
         beforeStart: options.beforeStart,
         ...options.workspace ? { workspace: options.workspace } : {},
         ...options.planId ? { planId: options.planId } : {},
@@ -72398,6 +72514,11 @@ var LocalTaskScheduler = class {
   async continueTask(taskId, message) {
     await this.agentManager.continueTask(taskId, message);
   }
+  async restoreChild(options) {
+    if (!this.agentManager.restoreChildConversation)
+      return { status: "refused", reason: "no-layout" };
+    return this.agentManager.restoreChildConversation(options, this.taskContext);
+  }
   cancelTask(taskId, cause) {
     this.agentManager.cancel(taskId, cause);
   }
@@ -72695,9 +72816,9 @@ var PluginRegistry = class extends ManagedRegistry {
 };
 
 // ../sdk/dist/plugin/loader.js
-import { lstat as lstat7, readFile as readFile16, readdir as readdir10, realpath as realpath7 } from "node:fs/promises";
+import { lstat as lstat8, readFile as readFile16, readdir as readdir10, realpath as realpath8 } from "node:fs/promises";
 import { homedir as homedir4, platform } from "node:os";
-import { join as join30, resolve as resolve13 } from "node:path";
+import { join as join30, resolve as resolve14 } from "node:path";
 
 // ../sdk/dist/types/plugin/index.js
 var RENAMED_PLUGIN_HOOK_EVENTS = {
@@ -72763,7 +72884,7 @@ async function discoverPlugins(parentDir, log) {
   const logger = resolveLogger(log).child({ [SCOPE_ATTRIBUTE]: "plugin/loader" });
   const dirs = [];
   try {
-    const parent = await lstat7(parentDir);
+    const parent = await lstat8(parentDir);
     if (parent.isSymbolicLink() || !parent.isDirectory()) {
       logger.warn("Refusing a non-regular plugins directory", {
         "namzu.plugin.parent_dir": parentDir
@@ -72775,7 +72896,7 @@ async function discoverPlugins(parentDir, log) {
       if (entry.startsWith(".") || entry.startsWith("_"))
         continue;
       const fullPath = join30(parentDir, entry);
-      const s = await lstat7(fullPath);
+      const s = await lstat8(fullPath);
       if (s.isSymbolicLink()) {
         logger.warn("Refusing a symlinked plugin directory", { "namzu.plugin.path": fullPath });
         continue;
@@ -72784,7 +72905,7 @@ async function discoverPlugins(parentDir, log) {
         continue;
       const manifestPath = join30(fullPath, PLUGIN_MANIFEST_FILENAME);
       try {
-        const manifest = await lstat7(manifestPath);
+        const manifest = await lstat8(manifestPath);
         if (manifest.isSymbolicLink() || !manifest.isFile()) {
           logger.warn("Refusing a non-regular plugin manifest", {
             "namzu.plugin.path": fullPath,
@@ -72803,12 +72924,12 @@ async function discoverPlugins(parentDir, log) {
 }
 __name(discoverPlugins, "discoverPlugins");
 async function loadPluginManifest(pluginDir, capabilities2 = {}) {
-  const root = await lstat7(pluginDir);
+  const root = await lstat8(pluginDir);
   if (root.isSymbolicLink() || !root.isDirectory()) {
     throw new Error(`Plugin root must be a regular directory: ${pluginDir}`);
   }
   const manifestPath = join30(pluginDir, PLUGIN_MANIFEST_FILENAME);
-  const manifestEntry = await lstat7(manifestPath);
+  const manifestEntry = await lstat8(manifestPath);
   if (manifestEntry.isSymbolicLink() || !manifestEntry.isFile()) {
     throw new Error(`Plugin manifest must be a regular file, not a symlink: ${manifestPath}`);
   }
@@ -72878,9 +72999,9 @@ async function samePhysicalDirectory(left, right) {
   const canonical2 = /* @__PURE__ */ __name(async (path2) => {
     let value;
     try {
-      value = await realpath7(path2);
+      value = await realpath8(path2);
     } catch {
-      value = resolve13(path2);
+      value = resolve14(path2);
     }
     return platform() === "win32" ? value.toLocaleLowerCase("en-US") : value;
   }, "canonical");
@@ -73837,7 +73958,7 @@ function runShellHook(entry, input, signal) {
   });
   const toolPath = pathOf(input.toolInput);
   const { NAMZU_TURN_ID: _inheritedTurnId, ...inherited } = process.env;
-  return new Promise((resolve27) => {
+  return new Promise((resolve28) => {
     let child;
     try {
       child = spawnHostShell(entry.command, {
@@ -73864,7 +73985,7 @@ function runShellHook(entry, input, signal) {
         ...process.platform === "win32" ? {} : { shell: { path: "sh", dialect: "sh", source: "sh" } }
       });
     } catch (error) {
-      resolve27({
+      resolve28({
         exitCode: null,
         timedOut: false,
         stdout: "",
@@ -73890,7 +74011,7 @@ function runShellHook(entry, input, signal) {
       settled = true;
       clearTimeout(timer);
       signal?.removeEventListener("abort", onAbort);
-      resolve27(outcome);
+      resolve28(outcome);
     }, "finish");
     const killTree2 = /* @__PURE__ */ __name(() => {
       if (child.pid !== void 0 && process.platform !== "win32") {
@@ -74441,8 +74562,8 @@ function summarizeBlocking(sessions) {
 __name(summarizeBlocking, "summarizeBlocking");
 
 // ../sdk/dist/manager/agent/lifecycle.js
-import { realpath as realpath8, rm as rm2, stat as stat10 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, relative as relative4, resolve as resolve14, sep as sep7 } from "node:path";
+import { realpath as realpath9, rm as rm2, stat as stat10 } from "node:fs/promises";
+import { isAbsolute as isAbsolute9, relative as relative5, resolve as resolve15, sep as sep7 } from "node:path";
 
 // ../sdk/dist/session/handoff/capacity.js
 var DelegationCapacityExceeded = class extends Error {
@@ -74533,14 +74654,14 @@ function mergeEnv(base3, override) {
 __name(mergeEnv, "mergeEnv");
 async function requireIsolatedWorktreePath(ref, callerCwd, subdirectory) {
   const meta = ref?.meta;
-  if (typeof ref?.id !== "string" || ref.id.length === 0 || meta?.backend !== "git-worktree" || typeof meta.repoRoot !== "string" || !isAbsolute8(meta.repoRoot) || typeof meta.branch !== "string" || meta.branch.length === 0 || typeof meta.worktreePath !== "string" || !isAbsolute8(meta.worktreePath) || resolve14(meta.worktreePath) === resolve14(callerCwd ?? process.cwd())) {
+  if (typeof ref?.id !== "string" || ref.id.length === 0 || meta?.backend !== "git-worktree" || typeof meta.repoRoot !== "string" || !isAbsolute9(meta.repoRoot) || typeof meta.branch !== "string" || meta.branch.length === 0 || typeof meta.worktreePath !== "string" || !isAbsolute9(meta.worktreePath) || resolve15(meta.worktreePath) === resolve15(callerCwd ?? process.cwd())) {
     throw new Error("Isolated git-worktree driver returned an invalid workspace ref or path");
   }
   let physicalPaths;
   try {
     physicalPaths = await Promise.all([
-      realpath8(meta.worktreePath),
-      realpath8(resolve14(callerCwd ?? process.cwd()))
+      realpath9(meta.worktreePath),
+      realpath9(resolve15(callerCwd ?? process.cwd()))
     ]);
     if (!(await stat10(physicalPaths[0])).isDirectory()) {
       throw new Error("The worktree path is not a directory");
@@ -74555,25 +74676,25 @@ async function requireIsolatedWorktreePath(ref, callerCwd, subdirectory) {
   }
   if (subdirectory === void 0)
     return meta.worktreePath;
-  if (typeof subdirectory !== "string" || subdirectory.length === 0 || isAbsolute8(subdirectory)) {
+  if (typeof subdirectory !== "string" || subdirectory.length === 0 || isAbsolute9(subdirectory)) {
     throw new Error("Isolated workspace subdirectory must be a nonempty relative path");
   }
-  const lexicalChild = resolve14(meta.worktreePath, subdirectory);
-  const lexicalRelative = relative4(resolve14(meta.worktreePath), lexicalChild);
-  if (isAbsolute8(lexicalRelative) || lexicalRelative === ".." || lexicalRelative.startsWith(`..${sep7}`)) {
+  const lexicalChild = resolve15(meta.worktreePath, subdirectory);
+  const lexicalRelative = relative5(resolve15(meta.worktreePath), lexicalChild);
+  if (isAbsolute9(lexicalRelative) || lexicalRelative === ".." || lexicalRelative.startsWith(`..${sep7}`)) {
     throw new Error("Isolated workspace subdirectory escapes the worktree");
   }
   let physicalChild;
   try {
-    physicalChild = await realpath8(lexicalChild);
+    physicalChild = await realpath9(lexicalChild);
     if (!(await stat10(physicalChild)).isDirectory()) {
       throw new Error("The selected worktree path is not a directory");
     }
   } catch (cause) {
     throw new Error("Isolated workspace subdirectory is missing or not a directory", { cause });
   }
-  const physicalRelative = relative4(physicalPaths[0], physicalChild);
-  if (physicalRelative === "" || isAbsolute8(physicalRelative) || physicalRelative === ".." || physicalRelative.startsWith(`..${sep7}`)) {
+  const physicalRelative = relative5(physicalPaths[0], physicalChild);
+  if (physicalRelative === "" || isAbsolute9(physicalRelative) || physicalRelative === ".." || physicalRelative.startsWith(`..${sep7}`)) {
     throw new Error("Isolated workspace subdirectory resolves outside its worktree");
   }
   return physicalChild;
@@ -75208,7 +75329,8 @@ var AgentManager = class {
       agentType: placement.agentType,
       description: placement.description,
       status: "running",
-      createdAt: placement.createdAt
+      createdAt: placement.createdAt,
+      ...placement.continuation ? { continuation: placement.continuation } : {}
     };
   }
   /**
@@ -75259,7 +75381,13 @@ var AgentManager = class {
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
       toolCallId: spawnToolCallId(taskId),
       agentType: options.agentId,
-      description: describeSpawn(options)
+      description: describeSpawn(options),
+      ...options.continuationProfile ? {
+        continuation: {
+          workspace: options.workspace?.mode === "isolated" ? "isolated" : "shared",
+          profile: { ...options.continuationProfile }
+        }
+      } : {}
     };
     await writeChildSessionMeta(spawnRecord.placement.metaPath, this.childMeta(spawnRecord));
     return DiskSessionLog.at(paths2, {
@@ -75361,9 +75489,9 @@ var AgentManager = class {
     if (isTerminalAgentTaskState(agentTask.state)) {
       return Promise.resolve();
     }
-    return new Promise((resolve27) => {
+    return new Promise((resolve28) => {
       const existing = this.completionCallbacks.get(taskId) ?? [];
-      existing.push(resolve27);
+      existing.push(resolve28);
       this.completionCallbacks.set(taskId, existing);
     });
   }
@@ -75570,11 +75698,156 @@ var AgentManager = class {
       origin,
       topicId: context2.topicId,
       projectId: context2.projectId,
-      cwd: resolve14(options.input.workingDirectory ?? process.cwd()),
+      cwd: resolve15(options.input.workingDirectory ?? process.cwd()),
       log,
       activeSubSessionId: origin.subSessionId
     });
   }
+  /**
+   * Make a child saved by an earlier process continuable again.
+   *
+   * Reads the child's meta document and log from the project layout under the
+   * invoking parent, checks they describe a settled, shared-workspace child of
+   * this very parent session, then re-creates the in-memory session and edge
+   * and the retained conversation that {@link provisionContinuation} requires.
+   * It runs nothing; the caller continues the child with `sendMessage` and
+   * `resumeSessionId`, so the invoking turn's authority, limits and review
+   * channel apply exactly as for a child that finished in this process.
+   */
+  async restoreChildConversation(options, context2) {
+    const refuse3 = /* @__PURE__ */ __name((reason2) => ({
+      status: "refused",
+      reason: reason2
+    }), "refuse");
+    const id3 = options.childSessionId;
+    const retained = this.childConversations.get(id3);
+    if (retained?.activeSubSessionId)
+      return refuse3("running");
+    const paths2 = context2.childStorage?.kind === "disk" ? context2.childStorage.paths : this.deps.paths;
+    if (!paths2)
+      return refuse3("no-layout");
+    const store = this.deps.sessionStore;
+    if (store.supportsInvocationSummaries !== true || store.supportsOwnerVersionCas !== true)
+      return refuse3("not-resumable");
+    const ancestry = await store.getAncestry(context2.sessionId, context2.tenantId);
+    const parentLocator = {
+      sessionId: context2.sessionId,
+      ancestors: ancestry.slice(0, -1)
+    };
+    let meta;
+    try {
+      meta = await readChildSessionMeta(paths2.subagentMeta(parentLocator, id3));
+    } catch {
+      return refuse3("not-saved");
+    }
+    if (!meta)
+      return refuse3("not-saved");
+    if (meta.sessionId !== id3 || meta.parentSessionId !== context2.sessionId)
+      return refuse3("foreign");
+    const continuation = meta.continuation;
+    if (!continuation || continuation.workspace !== "shared")
+      return refuse3("not-resumable");
+    const agentId = options.agentFor(continuation.profile);
+    if (agentId === void 0 || !this.registry.has(agentId))
+      return refuse3("not-resumable");
+    const log = retained?.log ?? DiskSessionLog.at(paths2, { sessionId: id3, ancestors: ancestry });
+    const ended = await childSessionEnded(log);
+    if (!ended)
+      return refuse3("unsettled");
+    if (ended.status === "cancelled" || meta.status === "cancelled")
+      return refuse3("stopped");
+    const started = await log.head();
+    if (started === null)
+      return refuse3("unsettled");
+    for await (const { record: record3 } of log.read({ mode: "tolerant" })) {
+      if (record3.type !== "session_started")
+        continue;
+      if (record3.projectId !== context2.projectId || record3.topicId !== context2.topicId)
+        return refuse3("foreign");
+      break;
+    }
+    const placement = {
+      paths: paths2,
+      metaPath: paths2.subagentMeta(parentLocator, id3),
+      createdAt: meta.createdAt,
+      toolCallId: meta.toolCallId,
+      agentType: meta.agentType,
+      description: meta.description,
+      continuation
+    };
+    const restored = {
+      status: "restored",
+      childSessionId: id3,
+      agentId,
+      profile: continuation.profile,
+      description: meta.description
+    };
+    if (retained)
+      return restored;
+    if (this.childConversations.size >= RETAINED_CHILD_CONVERSATION_CAP) {
+      const oldest = [...this.childConversations].find(([, value]) => !value.activeSubSessionId);
+      if (!oldest)
+        return refuse3("full");
+      this.childConversations.delete(oldest[0]);
+    }
+    const childActor = {
+      kind: "agent",
+      agentId,
+      tenantId: context2.tenantId,
+      parentActor: context2.parentActor
+    };
+    let child = await store.getSession(id3, context2.tenantId);
+    let createdChild = false;
+    let edge;
+    let createdEdge = false;
+    try {
+      if (child) {
+        if (child.status === "active" || child.status === "archived" || child.status === "locked" || child.projectId !== context2.projectId || child.topicId !== context2.topicId || child.currentActor?.kind !== "agent" || child.currentActor.agentId !== agentId)
+          return refuse3("running");
+      } else {
+        child = await store.createSession({ id: id3, topicId: context2.topicId, projectId: context2.projectId, currentActor: childActor }, context2.tenantId);
+        createdChild = true;
+      }
+      edge = (await store.getChildren(context2.sessionId, context2.tenantId)).find((candidate) => candidate.childSessionId === id3);
+      if (!edge) {
+        edge = await store.createSubSession({
+          parentSessionId: context2.sessionId,
+          childSessionId: id3,
+          kind: "agent_spawn",
+          spawnedBy: context2.parentActor,
+          failureMode: "delegate",
+          completionMode: "summary_ref"
+        }, context2.tenantId);
+        createdEdge = true;
+      }
+    } catch (error) {
+      if (edge && createdEdge)
+        await store.deleteSubSession(edge.id, context2.tenantId).catch(() => void 0);
+      if (child && createdChild)
+        await store.deleteSession(id3, context2.tenantId).catch(() => void 0);
+      throw error;
+    }
+    this.childConversations.set(id3, {
+      definition: this.registry.getOrThrow(agentId),
+      origin: {
+        subSessionId: edge.id,
+        childSessionId: id3,
+        tenantId: context2.tenantId,
+        parentSessionId: context2.sessionId,
+        parentTurnId: meta.parentTurnId,
+        rootSessionId: meta.rootSessionId,
+        ancestry,
+        childDepth: meta.depth,
+        childOwnerVersion: child.ownerVersion,
+        placement
+      },
+      topicId: context2.topicId,
+      projectId: context2.projectId,
+      cwd: resolve15(options.workingDirectory),
+      log
+    });
+    return restored;
+  }
   releaseChildConversation(record3) {
     const conversation = this.childConversations.get(record3.childSessionId);
     if (conversation?.activeSubSessionId !== record3.subSessionId)
@@ -75598,7 +75871,7 @@ var AgentManager = class {
       throw new Error("Child conversation is still running or settling");
     if (origin.workspaceRef || options.workspace?.mode === "isolated" || options.workspaceBackend)
       throw new Error("Child continuation requires a shared workspace; isolated leases cannot be resumed");
-    if (resolve14(options.input.workingDirectory ?? process.cwd()) !== conversation.cwd)
+    if (resolve15(options.input.workingDirectory ?? process.cwd()) !== conversation.cwd)
       throw new Error("Child continuation cannot change its working directory");
     const store = this.deps.sessionStore;
     if (store.supportsInvocationSummaries !== true || store.supportsOwnerVersionCas !== true)
@@ -75937,8 +76210,8 @@ var AgentManager = class {
   resolveCompletionCallbacks(taskId) {
     const callbacks = this.completionCallbacks.get(taskId);
     if (callbacks) {
-      for (const resolve27 of callbacks)
-        resolve27();
+      for (const resolve28 of callbacks)
+        resolve28();
       this.completionCallbacks.delete(taskId);
     }
   }
@@ -76132,11 +76405,11 @@ import { spawn as spawn3, spawnSync } from "node:child_process";
 import { constants as constants3, accessSync as accessSync2, existsSync as existsSync4, realpathSync as realpathSync4 } from "node:fs";
 import { readFile as fsReadFile, writeFile as fsWriteFile, mkdir as mkdir16, open as open10, readdir as readdir11, rename as rename7, rm as rm3, stat as stat11 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname17, isAbsolute as isAbsolute10, join as join31, parse as parse3, resolve as resolve15 } from "node:path";
+import { dirname as dirname18, isAbsolute as isAbsolute11, join as join31, parse as parse3, resolve as resolve16 } from "node:path";
 
 // ../sdk/dist/sandbox/file-walk.js
 var import_brace_expansion2 = __toESM(require_brace_expansion(), 1);
-import { isAbsolute as isAbsolute9, posix as posix3 } from "node:path";
+import { isAbsolute as isAbsolute10, posix as posix3 } from "node:path";
 
 // ../../node_modules/.pnpm/minimatch@9.0.9/node_modules/minimatch/dist/esm/index.js
 var import_brace_expansion = __toESM(require_brace_expansion(), 1);
@@ -77693,7 +77966,7 @@ function positiveInteger(value, name2) {
 }
 __name(positiveInteger, "positiveInteger");
 function planWalk(root, options) {
-  if (!isAbsolute9(root) && !posix3.isAbsolute(root)) {
+  if (!isAbsolute10(root) && !posix3.isAbsolute(root)) {
     throw new Error("File walk root must be an absolute path");
   }
   let pattern = options.pattern ?? "**/*";
@@ -77750,7 +78023,7 @@ function planWalk(root, options) {
 __name(planWalk, "planWalk");
 function directoryMatcher(plan) {
   const patterns = plan.patterns.map((set3) => set3.map((part2) => typeof part2 === "object" && part2 !== null ? new RegExp(part2.source, `${part2.flags}s`) : part2));
-  return (relative10) => patterns.some((pattern) => {
+  return (relative11) => patterns.some((pattern) => {
     const closure = /* @__PURE__ */ __name((states2) => {
       for (const index of states2)
         if (pattern[index] === null)
@@ -77758,7 +78031,7 @@ function directoryMatcher(plan) {
       return states2;
     }, "closure");
     let states = closure(/* @__PURE__ */ new Set([0]));
-    for (const name2 of relative10.split("/")) {
+    for (const name2 of relative11.split("/")) {
       const next = /* @__PURE__ */ new Set();
       for (const index of states) {
         const segment2 = pattern[index];
@@ -77878,14 +78151,14 @@ async function* executeWalk(plan, signal) {
     }
     if (plan.prefix.length >= maxDepth)
       return;
-    const openDirectory = /* @__PURE__ */ __name(async (absolute, relative10, depth) => {
+    const openDirectory = /* @__PURE__ */ __name(async (absolute, relative11, depth) => {
       check2();
       try {
         const dir = await wait(fs.opendir(absolute), (late2) => {
           void close(late2).catch(() => {
           });
         });
-        open13.push({ dir, relative: relative10, depth });
+        open13.push({ dir, relative: relative11, depth });
       } catch (error) {
         if (!missing(error))
           throw error;
@@ -77903,15 +78176,15 @@ async function* executeWalk(plan, signal) {
         continue;
       }
       noteVisit();
-      const relative10 = frame.relative ? `${frame.relative}/${entry.name}` : entry.name;
-      const absolute = path2.join(plan.root, relative10);
+      const relative11 = frame.relative ? `${frame.relative}/${entry.name}` : entry.name;
+      const absolute = path2.join(plan.root, relative11);
       const depth = frame.depth + 1;
       if (entry.isDirectory()) {
-        if (depth < maxDepth && canDescend(relative10))
-          await openDirectory(absolute, relative10, depth);
+        if (depth < maxDepth && canDescend(relative11))
+          await openDirectory(absolute, relative11, depth);
         continue;
       }
-      if (!entry.isFile() || !matchers.some((matcher) => matcher.test(relative10)))
+      if (!entry.isFile() || !matchers.some((matcher) => matcher.test(relative11)))
         continue;
       let info;
       try {
@@ -78043,7 +78316,7 @@ var CappedStream = class {
   }
 };
 function requiredWrapper(request) {
-  if (request.wrapperCommand === void 0 || !isAbsolute10(request.wrapperCommand)) {
+  if (request.wrapperCommand === void 0 || !isAbsolute11(request.wrapperCommand)) {
     throw new Error(`Sandbox environment ${request.environment} requires the absolute wrapper path that was probed`);
   }
   return request.wrapperCommand;
@@ -78141,7 +78414,7 @@ function buildBwrapArgs(sandboxRoot, additionalDirectories = []) {
     if (existsSync4(path2))
       args.push("--ro-bind", path2, path2);
   }
-  const interpreterPrefix = dirname17(dirname17(canonicalizePath(process.execPath)));
+  const interpreterPrefix = dirname18(dirname18(canonicalizePath(process.execPath)));
   const alreadyCovered = BWRAP_SYSTEM_PATHS.some((path2) => interpreterPrefix === path2 || interpreterPrefix.startsWith(`${path2}/`));
   if (!alreadyCovered && existsSync4(interpreterPrefix)) {
     args.push("--ro-bind", interpreterPrefix, interpreterPrefix);
@@ -78312,7 +78585,7 @@ var LocalSandbox = class {
     this.rootDir = rootDir;
     this.environment = environment;
     this.config = config;
-    this.additionalDirectories = (config.additionalDirectories ?? []).map((dir) => canonicalizePath(resolve15(dir))).filter((dir) => dir !== rootDir);
+    this.additionalDirectories = (config.additionalDirectories ?? []).map((dir) => canonicalizePath(resolve16(dir))).filter((dir) => dir !== rootDir);
     this._status = "ready";
     this.log = log.child({
       [SCOPE_ATTRIBUTE]: "sandbox/provider/local",
@@ -78356,7 +78629,7 @@ var LocalSandbox = class {
       throw new Error(`Sandbox ${this.id} is destroyed`);
     }
     const resolved2 = await resolveWithinAnyReal(this.roots, path2);
-    await mkdir16(dirname17(resolved2), { recursive: true });
+    await mkdir16(dirname18(resolved2), { recursive: true });
     const tmpPath = `${resolved2}.tmp.${Date.now()}`;
     await fsWriteFile(tmpPath, content);
     await rename7(tmpPath, resolved2);
@@ -78705,7 +78978,7 @@ var LocalSandboxProvider = class {
     let rootDir;
     let removeRootOnDestroy;
     if (config?.workingDirectory !== void 0) {
-      const requested = resolve15(config.workingDirectory);
+      const requested = resolve16(config.workingDirectory);
       let entry;
       try {
         entry = await stat11(requested);
@@ -78728,9 +79001,9 @@ var LocalSandboxProvider = class {
       }
       removeRootOnDestroy = false;
       for (const dir of config.additionalDirectories ?? []) {
-        const entry2 = await stat11(resolve15(dir)).catch(() => null);
+        const entry2 = await stat11(resolve16(dir)).catch(() => null);
         if (!entry2?.isDirectory()) {
-          throw new Error(`Sandbox additional directory is not a directory: ${resolve15(dir)}`);
+          throw new Error(`Sandbox additional directory is not a directory: ${resolve16(dir)}`);
         }
       }
     } else {
@@ -78787,8 +79060,8 @@ var WorkspaceBackendRegistry = class {
 // ../sdk/dist/session/workspace/git-worktree.js
 import { execFile } from "node:child_process";
 import { readFileSync as readFileSync2, realpathSync as realpathSync5 } from "node:fs";
-import { realpath as realpath9 } from "node:fs/promises";
-import { basename as basename9, dirname as dirname18, isAbsolute as isAbsolute11, join as join32, relative as relative5, resolve as resolve16, sep as sep9 } from "node:path";
+import { realpath as realpath10 } from "node:fs/promises";
+import { basename as basename9, dirname as dirname19, isAbsolute as isAbsolute12, join as join32, relative as relative6, resolve as resolve17, sep as sep9 } from "node:path";
 import { promisify } from "node:util";
 var execFileAsync = promisify(execFile);
 var defaultExecFile = /* @__PURE__ */ __name(async (file, args) => execFileAsync(file, [...args]), "defaultExecFile");
@@ -78802,8 +79075,8 @@ var GitWorktreeDriver = class {
   log;
   exec;
   constructor(config) {
-    this.repoRoot = resolve16(config.repoRoot);
-    this.worktreesDir = resolve16(config.worktreesDir ?? defaultWorktreesDir(config.repoRoot));
+    this.repoRoot = resolve17(config.repoRoot);
+    this.worktreesDir = resolve17(config.worktreesDir ?? defaultWorktreesDir(config.repoRoot));
     this.log = config.logger.child({ [SCOPE_ATTRIBUTE]: "session/workspace/git-worktree" });
     this.exec = config.execFile ?? defaultExecFile;
   }
@@ -78816,7 +79089,7 @@ var GitWorktreeDriver = class {
     try {
       repoRoot = await canonicalizeThroughExisting(this.repoRoot);
       worktreesDir = await canonicalizeThroughExisting(this.worktreesDir);
-      const lexicalPath = resolve16(worktreesDir, label5);
+      const lexicalPath = resolve17(worktreesDir, label5);
       if (!isStrictDescendant(worktreesDir, lexicalPath)) {
         throw new Error(`Workspace label escapes the managed worktree directory: ${label5}`);
       }
@@ -78824,13 +79097,13 @@ var GitWorktreeDriver = class {
       if (!isStrictDescendant(worktreesDir, worktreePath)) {
         throw new Error(`Workspace label resolves through a link outside the managed worktree directory: ${label5}`);
       }
-      if (relative5(worktreesDir, lexicalPath) !== relative5(worktreesDir, worktreePath)) {
+      if (relative6(worktreesDir, lexicalPath) !== relative6(worktreesDir, worktreePath)) {
         throw new Error(`Workspace label resolves through a link to a different managed path: ${label5}`);
       }
     } catch (cause) {
       throw new WorkspaceBackendError({ op: "create:ownership", kind: this.kind, cause });
     }
-    const relativePath = relative5(worktreesDir, worktreePath).split(sep9).join("/");
+    const relativePath = relative6(worktreesDir, worktreePath).split(sep9).join("/");
     const branch = `namzu/${relativePath}`;
     const argv = ["-C", repoRoot, "worktree", "add", "-b", branch, "--", worktreePath];
     if (params.baseRef !== void 0) {
@@ -78985,7 +79258,7 @@ var GitWorktreeDriver = class {
       if (!isStrictDescendant(worktreesDir, worktreePath)) {
         throw new Error("Workspace reference escapes the managed worktree directory");
       }
-      const label5 = relative5(worktreesDir, worktreePath).split(sep9).join("/");
+      const label5 = relative6(worktreesDir, worktreePath).split(sep9).join("/");
       const branch = `namzu/${label5}`;
       if (ref.meta.branch !== branch) {
         throw new Error("Workspace reference branch does not match its managed path");
@@ -79019,28 +79292,28 @@ var GitWorktreeDriver = class {
   }
 };
 async function canonicalizeThroughExisting(input) {
-  let existing = resolve16(input);
+  let existing = resolve17(input);
   const remainder = [];
   for (; ; ) {
     try {
-      const canonical2 = await realpath9(existing);
-      return resolve16(canonical2, ...remainder);
+      const canonical2 = await realpath10(existing);
+      return resolve17(canonical2, ...remainder);
     } catch (cause) {
       const code = cause.code;
       if (code !== "ENOENT" && code !== "ENOTDIR")
         throw cause;
     }
-    const parent = dirname18(existing);
+    const parent = dirname19(existing);
     if (parent === existing)
-      return resolve16(existing, ...remainder);
+      return resolve17(existing, ...remainder);
     remainder.unshift(basename9(existing));
     existing = parent;
   }
 }
 __name(canonicalizeThroughExisting, "canonicalizeThroughExisting");
 function isStrictDescendant(root, candidate) {
-  const rel = relative5(root, candidate);
-  return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep9}`) && !isAbsolute11(rel);
+  const rel = relative6(root, candidate);
+  return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep9}`) && !isAbsolute12(rel);
 }
 __name(isStrictDescendant, "isStrictDescendant");
 function parseWorktreeList(stdout, worktreePath) {
@@ -79074,7 +79347,7 @@ function defaultWorktreesDir(repoRoot) {
   try {
     cwd = realpathSync5(repoRoot);
   } catch {
-    cwd = resolve16(repoRoot);
+    cwd = resolve17(repoRoot);
   }
   const home = resolveNamzuHome();
   let slug = slugForCwd(cwd);
@@ -79235,15 +79508,15 @@ var SessionSummaryMaterializer = class {
 
 // ../sdk/dist/store/session/memory.js
 import { realpathSync as realpathSync6 } from "node:fs";
-import { resolve as resolve18 } from "node:path";
+import { resolve as resolve19 } from "node:path";
 
 // ../sdk/dist/store/session/canonical-path.js
-import { realpath as realpath10 } from "node:fs/promises";
-import { resolve as resolve17 } from "node:path";
+import { realpath as realpath11 } from "node:fs/promises";
+import { resolve as resolve18 } from "node:path";
 async function canonicalizePath2(input) {
-  const absolute = resolve17(input);
+  const absolute = resolve18(input);
   try {
-    return await realpath10(absolute);
+    return await realpath11(absolute);
   } catch (err) {
     if (err.code === "ENOENT")
       return absolute;
@@ -79331,7 +79604,7 @@ var InMemorySessionStore = class {
         } catch (error) {
           if (error.code !== "ENOENT")
             throw error;
-          rootPath = resolve18(project.rootPath);
+          rootPath = resolve19(project.rootPath);
         }
         const key5 = `${project.tenantId}\0${rootPath}`;
         const existingProjectId = roots.get(key5);
@@ -79782,13 +80055,13 @@ __name(stepResident, "stepResident");
 
 // ../sdk/dist/manager/resident/agenda.js
 import { randomUUID as randomUUID11 } from "node:crypto";
-import { join as join34, resolve as resolve20 } from "node:path";
+import { join as join34, resolve as resolve21 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "node:util";
 
 // ../sdk/dist/manager/resident/history-disk.js
 import { constants as constants4 } from "node:fs";
-import { lstat as lstat8, open as open11 } from "node:fs/promises";
-import { join as join33, relative as relative6, resolve as resolve19, sep as sep10 } from "node:path";
+import { lstat as lstat9, open as open11 } from "node:fs/promises";
+import { join as join33, relative as relative7, resolve as resolve20, sep as sep10 } from "node:path";
 var RECORD_BYTES2 = 4 * 1024 * 1024;
 var ResidentHistoryPageLimit = class extends Error {
   static {
@@ -79797,14 +80070,14 @@ var ResidentHistoryPageLimit = class extends Error {
 };
 async function readResidentHistoryRecord(root, path2, budget) {
   budget.signal?.throwIfAborted();
-  const base3 = resolve19(root);
-  const suffix = relative6(base3, resolve19(path2));
+  const base3 = resolve20(root);
+  const suffix = relative7(base3, resolve20(path2));
   if (suffix === ".." || suffix.startsWith(`..${sep10}`))
     throw new Error("Invalid history path.");
   let current = base3;
   for (const part2 of ["", ...suffix.split(sep10).filter(Boolean)]) {
     current = join33(current, part2);
-    if ((await lstat8(current)).isSymbolicLink())
+    if ((await lstat9(current)).isSymbolicLink())
       throw new Error("History symlinks are refused.");
   }
   const handle = await open11(path2, constants4.O_RDONLY | constants4.O_NOFOLLOW | constants4.O_NONBLOCK);
@@ -80373,8 +80646,8 @@ var DiskResidentAgenda = class {
       revisionsDir: join34(directory, "revisions"),
       publishLegacyProjection: false
     };
-    this.historyRoot = resolve20(root);
-    this.historyRevisions = resolve20(this.location.revisionsDir);
+    this.historyRoot = resolve21(root);
+    this.historyRevisions = resolve21(this.location.revisionsDir);
   }
   checked(record3) {
     const agenda = agendaSchema.parse(record3);
@@ -81719,7 +81992,7 @@ __name(createResidentToolEvidenceSource, "createResidentToolEvidenceSource");
 import { createHash as createHash30, randomUUID as randomUUID13 } from "node:crypto";
 import { closeSync as closeSync2, existsSync as existsSync5, fsyncSync as fsyncSync2, linkSync as linkSync2, lstatSync as lstatSync4, mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
-import { dirname as dirname19, join as join35, resolve as resolve21 } from "node:path";
+import { dirname as dirname20, join as join35, resolve as resolve22 } from "node:path";
 
 // ../sdk/dist/manager/resident/learning-observation.js
 var label4 = external_exports.string().trim().min(1).max(256);
@@ -81849,8 +82122,8 @@ var SqliteResidentLearningStore = class {
   scope;
   readOnly;
   constructor(options) {
-    this.databasePath = resolve21(options.databasePath);
-    this.artifactsPath = resolve21(options.artifactsPath);
+    this.databasePath = resolve22(options.databasePath);
+    this.artifactsPath = resolve22(options.artifactsPath);
     this.scope = Object.freeze({
       tenantId: asTenantId(options.scope.tenantId.toLowerCase()),
       projectId: asProjectId(options.scope.projectId.toLowerCase()),
@@ -81870,7 +82143,7 @@ var SqliteResidentLearningStore = class {
       });
     }
     if (!this.readOnly)
-      mkdirSync4(dirname19(this.databasePath), { recursive: true, mode: 448 });
+      mkdirSync4(dirname20(this.databasePath), { recursive: true, mode: 448 });
     const db = new Database(this.databasePath, { readOnly: this.readOnly });
     try {
       db.exec("PRAGMA busy_timeout = 5000; PRAGMA foreign_keys = ON;");
@@ -82485,7 +82758,7 @@ __name(derivePeerRef, "derivePeerRef");
 // ../sdk/dist/peers/registry.js
 import { randomBytes as randomBytes6 } from "node:crypto";
 import { closeSync as closeSync3, fsyncSync as fsyncSync3, lstatSync as lstatSync6, openSync as openSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, renameSync, unlinkSync as unlinkSync3, writeSync as writeSync2 } from "node:fs";
-import { basename as basename10, dirname as dirname20, join as join38 } from "node:path";
+import { basename as basename10, dirname as dirname21, join as join38 } from "node:path";
 
 // ../sdk/dist/peers/client.js
 import { createConnection } from "node:net";
@@ -82505,7 +82778,7 @@ function connectPath(address2) {
 }
 __name(connectPath, "connectPath");
 function sendPeerRequest(address2, request, parseResponse, timeoutMs) {
-  return new Promise((resolve27) => {
+  return new Promise((resolve28) => {
     let settled = false;
     const finish2 = /* @__PURE__ */ __name((result) => {
       if (settled)
@@ -82513,7 +82786,7 @@ function sendPeerRequest(address2, request, parseResponse, timeoutMs) {
       settled = true;
       clearTimeout(timer);
       socket.destroy();
-      resolve27(result);
+      resolve28(result);
     }, "finish");
     const unreachable = /* @__PURE__ */ __name((error) => finish2({
       kind: "unreachable",
@@ -82525,7 +82798,7 @@ function sendPeerRequest(address2, request, parseResponse, timeoutMs) {
       path2 = connectPath(address2);
     } catch (error) {
       clearTimeout(timer);
-      resolve27({
+      resolve28({
         kind: "unreachable",
         reason: error instanceof Error ? error.message : String(error)
       });
@@ -82617,7 +82890,7 @@ function recordPath(sessionsDir, sessionId5) {
 }
 __name(recordPath, "recordPath");
 function temporaryPathBeside(path2) {
-  return join38(dirname20(path2), `.${basename10(path2)}.${process.pid}.${randomBytes6(6).toString("hex")}.tmp`);
+  return join38(dirname21(path2), `.${basename10(path2)}.${process.pid}.${randomBytes6(6).toString("hex")}.tmp`);
 }
 __name(temporaryPathBeside, "temporaryPathBeside");
 function writePeerRecord(sessionsDir, record3) {
@@ -83034,23 +83307,23 @@ async function createPeerEndpoint(options) {
       void handleLine(buffered.subarray(0, newline)).catch(() => socket.destroy());
     });
   });
-  await new Promise((resolve27, reject2) => {
+  await new Promise((resolve28, reject2) => {
     const failed = /* @__PURE__ */ __name((error) => reject2(error), "failed");
     server.once("error", failed);
     server.listen({ path: listenPath }, () => {
       server.removeListener("error", failed);
-      resolve27();
+      resolve28();
     });
   });
   server.on("error", () => {
   });
   if (parsed.scheme === "uds")
     chmodSync3(listenPath, 384);
-  const close = /* @__PURE__ */ __name(() => new Promise((resolve27) => {
+  const close = /* @__PURE__ */ __name(() => new Promise((resolve28) => {
     closing = true;
     for (const socket of sockets)
       socket.destroy();
-    server.close(() => resolve27());
+    server.close(() => resolve28());
   }), "close");
   return {
     address: options.address,
@@ -83654,7 +83927,7 @@ var PalRuntime = class {
 // ../sdk/dist/pals/communication/store.js
 import { randomUUID as randomUUID14 } from "node:crypto";
 import { chmodSync as chmodSync4, lstatSync as lstatSync8, mkdirSync as mkdirSync6, readdirSync as readdirSync3, realpathSync as realpathSync7 } from "node:fs";
-import { join as join39, resolve as resolve22 } from "node:path";
+import { join as join39, resolve as resolve23 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual8 } from "node:util";
 
 // ../sdk/dist/pals/communication/ingress-types.js
@@ -83888,7 +84161,7 @@ var DiskPalCommunicationStore = class {
     migrations: { 1: (value) => value }
   }), "Pal communication", (record3) => record3.revision);
   constructor(options) {
-    this.root = resolve22(options.root);
+    this.root = resolve23(options.root);
     this.secure = options.secureDirectory ?? ((path2) => {
       if (process.platform !== "win32")
         chmodSync4(path2, 448);
@@ -84363,7 +84636,7 @@ var PalMessageBroker = class {
 
 // ../sdk/dist/pals/communication/policy.js
 import { chmodSync as chmodSync5, lstatSync as lstatSync9, mkdirSync as mkdirSync7, readdirSync as readdirSync4, realpathSync as realpathSync8 } from "node:fs";
-import { join as join40, resolve as resolve23 } from "node:path";
+import { join as join40, resolve as resolve24 } from "node:path";
 var PalMessagePermissionConflictError = class extends Error {
   static {
     __name(this, "PalMessagePermissionConflictError");
@@ -84399,7 +84672,7 @@ var DiskPalMessagePolicy = class {
   secure;
   records = new DiskRevisionRecordStore(defineSchema({ kind: "pal-message-permission", current: 1, migrations: {} }), "Pal message permission", (value) => value.revision);
   constructor(options) {
-    this.root = resolve23(options.root);
+    this.root = resolve24(options.root);
     this.secure = options.secureDirectory ?? ((path2) => {
       if (process.platform !== "win32")
         chmodSync5(path2, 448);
@@ -85040,7 +85313,7 @@ __name(dispatchPalIngressOnce, "dispatchPalIngressOnce");
 
 // ../sdk/dist/pals/activity/subscription-store.js
 import { chmodSync as chmodSync6, lstatSync as lstatSync10, mkdirSync as mkdirSync8, readdirSync as readdirSync5, realpathSync as realpathSync9 } from "node:fs";
-import { join as join41, resolve as resolve24 } from "node:path";
+import { join as join41, resolve as resolve25 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual9 } from "node:util";
 
 // ../sdk/dist/pals/activity/subscription-schema.js
@@ -85079,7 +85352,7 @@ var DiskPalActivitySubscriptionStore = class {
     migrations: {}
   }), "Pal activity subscription", (value) => value.revision);
   constructor(options) {
-    this.root = resolve24(options.root);
+    this.root = resolve25(options.root);
     this.secure = options.secureDirectory ?? ((path2) => {
       if (process.platform !== "win32")
         chmodSync6(path2, 448);
@@ -85201,7 +85474,7 @@ var DiskPalActivitySubscriptionStore = class {
 
 // ../sdk/dist/pals/activity/subscription-policy.js
 import { chmodSync as chmodSync7, lstatSync as lstatSync11, mkdirSync as mkdirSync9, readdirSync as readdirSync6, realpathSync as realpathSync10 } from "node:fs";
-import { join as join42, resolve as resolve25 } from "node:path";
+import { join as join42, resolve as resolve26 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual10 } from "node:util";
 var PalActivitySubscriptionPermissionConflictError = class extends Error {
   static {
@@ -85236,7 +85509,7 @@ var DiskPalActivitySubscriptionPolicy = class {
     migrations: {}
   }), "Pal activity subscription permission", (value) => value.revision);
   constructor(options) {
-    this.root = resolve25(options.root);
+    this.root = resolve26(options.root);
     this.subscriptions = options.subscriptions;
     this.secure = options.secureDirectory ?? ((path2) => {
       if (process.platform !== "win32")
@@ -86603,7 +86876,7 @@ function shellProgress(report) {
 __name(shellProgress, "shellProgress");
 function execHostShell(command, options) {
   options.signal?.throwIfAborted();
-  return new Promise((resolve27, reject2) => {
+  return new Promise((resolve28, reject2) => {
     const child = spawnHostShell(command, {
       cwd: options.cwd,
       env: options.env,
@@ -86704,7 +86977,7 @@ function execHostShell(command, options) {
       const stdout = decodeCapture("stdout");
       const stderr = decodeCapture("stderr");
       if (!failure2 && cause === void 0 && code === 0 && signal === null) {
-        resolve27({
+        resolve28({
           stdout,
           stderr,
           stdoutBytes: captures.stdout.bytes,
@@ -86751,7 +87024,7 @@ ${stderr}`));
           child.off("close", onClose);
           child.off("error", onError);
           child.off("spawn", onSpawn);
-          resolve27({
+          resolve28({
             backgroundedJobId: jobId,
             stdout: decodeCapture("stdout"),
             stderr: decodeCapture("stderr")
@@ -87081,8 +87354,8 @@ var BashTool = Object.defineProperty({ ...BashToolBase }, "description", {
 });
 
 // ../sdk/dist/tools/builtins/code-analysis.js
-import { realpath as realpath11, stat as stat12 } from "node:fs/promises";
-import { isAbsolute as isAbsolute12, relative as relative7, sep as sep11 } from "node:path";
+import { realpath as realpath12, stat as stat12 } from "node:fs/promises";
+import { isAbsolute as isAbsolute13, relative as relative8, sep as sep11 } from "node:path";
 var DEFAULT_LIMIT = 50;
 var MAX_LIMIT = 200;
 var DEFAULT_MAX_CHARS = 2e4;
@@ -87219,8 +87492,8 @@ var CodeAnalysisTool = defineTool({
           return renderPage(result, (hit) => {
             const shown = JSON.stringify(hit.value) + (hit.valueTruncated ? " (cut)" : "");
             const kind = hit.kind === "string" ? "" : ` (${hit.kind})`;
-            const inside = hit.function ? ` in ${shortFunction(hit.function)}` : " at top level";
-            return `${hit.line}:${hit.column}  ${shown}${kind}${inside}${staleMark(hit.stale)}`;
+            const inside2 = hit.function ? ` in ${shortFunction(hit.function)}` : " at top level";
+            return `${hit.line}:${hit.column}  ${shown}${kind}${inside2}${staleMark(hit.stale)}`;
           }, (hit) => relativeTo(root, hit.path));
         }
         case "enclosing_function": {
@@ -87287,11 +87560,11 @@ var CodeAnalysisTool = defineTool({
             ...signalOf(context2)
           });
           return renderPage(result, (site) => {
-            const inside = site.caller ? ` in ${shortFunction(site.caller)}` : " at top level";
+            const inside2 = site.caller ? ` in ${shortFunction(site.caller)}` : " at top level";
             const how = site.kind === "new" ? "new " : "";
             const tag = site.kind === "call-via" ? " [call/apply/bind]" : site.kind === "tagged" ? " [tagged template]" : "";
             const label5 = site.resolution === "text-only" ? " [text-only]" : "";
-            return `${site.line}:${site.column}  ${how}${site.callee}(${site.argumentCount} arg${site.argumentCount === 1 ? "" : "s"})${tag}${label5}${inside}${staleMark(site.stale)}`;
+            return `${site.line}:${site.column}  ${how}${site.callee}(${site.argumentCount} arg${site.argumentCount === 1 ? "" : "s"})${tag}${label5}${inside2}${staleMark(site.stale)}`;
           }, (site) => relativeTo(root, site.path));
         }
         case "imports": {
@@ -87346,7 +87619,7 @@ async function owningRoot(roots, target) {
   for (const candidate of roots) {
     let real;
     try {
-      real = await realpath11(candidate);
+      real = await realpath12(candidate);
       if (!(await stat12(real)).isDirectory()) {
         if (isWithin(real, target) || real === target)
           sawFile = true;
@@ -87362,8 +87635,8 @@ async function owningRoot(roots, target) {
 }
 __name(owningRoot, "owningRoot");
 function relativeTo(root, path2) {
-  const rel = relative7(root, path2);
-  if (rel === "" || rel === ".." || rel.startsWith(`..${sep11}`) || isAbsolute12(rel))
+  const rel = relative8(root, path2);
+  if (rel === "" || rel === ".." || rel.startsWith(`..${sep11}`) || isAbsolute13(rel))
     return path2;
   return sep11 === "/" ? rel : rel.split(sep11).join("/");
 }
@@ -89016,7 +89289,7 @@ var MAX_LISTED_WINDOWS = 50;
 var MAX_UI_SNAPSHOT_CHARS = 14e3;
 function computerUseUnavailableReason(provider, model) {
   if (!resolveProviderCapabilities(provider).supportsToolResultImages) {
-    return `The ${provider.id} provider cannot return images in tool results, so the model would never see a screenshot. Use a provider that can (for example Anthropic, Codex or Google) for computer use.`;
+    return `The ${provider.id} provider cannot return images in tool results, so the model would never see a screenshot. Use a provider that can return images in tool results for computer use.`;
   }
   if (model !== void 0 && !modelReadsImages(provider, model)) {
     return `The model ${model} cannot read images, so it would never see a screenshot. Use a model that reads images for computer use.`;
@@ -89317,7 +89590,7 @@ function buildDescription(host, caps, settings) {
   if (available.includes("batch"))
     lines.push(`batch: {"type":"batch","actions":[...]} runs up to ${settings.maxBatchActions} actions in order, stops at the first one that fails, and returns one screenshot at the end. Every call costs a model round trip of several seconds, so put the steps you can already predict into one batch (click a field, type, press ENTER) rather than one call each \u2014 but end the batch at any step that should bring up a new window, and look before typing into it. A batch cannot contain screenshot${available.includes("ui_snapshot") ? ", zoom or ui_snapshot" : " or zoom"}.`);
   if (caps.displayServer === "win32" && available.includes("key") && available.includes("type_text"))
-    lines.push("To start a Windows program, a shell command (Start-Process notepad, or cmd.exe /c start calc) is surest when you have a shell tool. The Start menu searches by display names in the system language, and ENTER on a name it does not find opens a web search in the browser.");
+    lines.push("To start a Windows program, a shell command (Start-Process <program>, or cmd.exe /c start <program>) is surest when you have a shell tool. The Start menu searches by display names in the system language, and ENTER on a name it does not find opens a web search in the browser.");
   if (available.includes("list_windows"))
     lines.push("list_windows names the open windows with their ids; focus_window brings one to the front.");
   if (windowCaptureAvailable(host, caps))
@@ -90332,7 +90605,7 @@ ${wrapUntrusted({
 __name(createComputerUseTool, "createComputerUseTool");
 
 // ../sdk/dist/tools/builtins/glob.js
-import { isAbsolute as isAbsolute13, join as join43, relative as relative8, sep as sep12 } from "node:path";
+import { isAbsolute as isAbsolute14, join as join43, relative as relative9, sep as sep12 } from "node:path";
 
 // ../sdk/dist/tools/posix-path.js
 function normalizeSegments(path2) {
@@ -90394,9 +90667,9 @@ function relativePattern(pattern, root, sandboxed) {
   if (result.split("/").includes("..")) {
     throw new Error('Glob pattern escapes the search directory through "..". Choose a contained path and a relative pattern.');
   }
-  if (sandboxed ? result.startsWith("/") : isAbsolute13(pattern)) {
+  if (sandboxed ? result.startsWith("/") : isAbsolute14(pattern)) {
     const contained2 = sandboxed ? resolveWithinPosix(root, result) : resolveWithin(root, pattern);
-    result = sandboxed ? relativePosix(root, contained2) : relative8(root, contained2).split(sep12).join("/");
+    result = sandboxed ? relativePosix(root, contained2) : relative9(root, contained2).split(sep12).join("/");
   }
   while (result.startsWith("./"))
     result = result.slice(2);
@@ -90468,7 +90741,7 @@ var GlobTool = defineTool({
           truncated = true;
           break;
         }
-        const file = sandbox ? relativePosix(sandbox.rootDir, absolute) : relative8(context2.workingDirectory, join43(lexicalRoot, relative8(root, absolute)));
+        const file = sandbox ? relativePosix(sandbox.rootDir, absolute) : relative9(context2.workingDirectory, join43(lexicalRoot, relative9(root, absolute)));
         files.push(`./${sandbox ? file : file.split(sep12).join("/")}`);
       }
     } catch (error) {
@@ -90496,7 +90769,7 @@ var GlobTool = defineTool({
 
 // ../sdk/dist/tools/builtins/grep.js
 import { readFile as readFile17, stat as stat13 } from "node:fs/promises";
-import { isAbsolute as isAbsolute14, join as join44, relative as relative9, sep as sep13 } from "node:path";
+import { isAbsolute as isAbsolute15, join as join44, relative as relative10, sep as sep13 } from "node:path";
 async function readWithSignal(read, signal) {
   signal?.throwIfAborted();
   if (!signal)
@@ -90522,9 +90795,9 @@ function relativeInclude(include, root, sandboxed) {
   let pattern = sandboxed ? include : include.split(sep13).join("/");
   if (pattern.split("/").includes(".."))
     throw new Error("Include pattern escapes the search directory");
-  if (sandboxed ? pattern.startsWith("/") : isAbsolute14(include)) {
+  if (sandboxed ? pattern.startsWith("/") : isAbsolute15(include)) {
     const absolute = sandboxed ? resolveWithinPosix(root, pattern) : resolveWithin(root, include);
-    pattern = sandboxed ? relativePosix(root, absolute) : relative9(root, absolute).split(sep13).join("/");
+    pattern = sandboxed ? relativePosix(root, absolute) : relative10(root, absolute).split(sep13).join("/");
   }
   while (pattern.startsWith("./"))
     pattern = pattern.slice(2);
@@ -90660,7 +90933,7 @@ var GrepTool = defineTool({
         }
         const lines = content.split("\n");
         let fileMatches = 0;
-        const relPath = sandbox ? `./${relativePosix(sandbox.rootDir, filePath)}` : `./${relative9(context2.workingDirectory, join44(lexicalRoot, relative9(root, filePath))).split(sep13).join("/")}`;
+        const relPath = sandbox ? `./${relativePosix(sandbox.rootDir, filePath)}` : `./${relative10(context2.workingDirectory, join44(lexicalRoot, relative10(root, filePath))).split(sep13).join("/")}`;
         for (let i = 0; i < lines.length; i++) {
           context2.abortSignal?.throwIfAborted();
           const line = lines[i] ?? "";
@@ -90943,7 +91216,7 @@ async function waitForJobWithBounds(jobs, id3, options, now = Date.now) {
         omittedOutputBytes
       };
     });
-    const expiry = new Promise((resolve27) => {
+    const expiry = new Promise((resolve28) => {
       const tick = setInterval(() => {
         if (settled)
           return;
@@ -90951,7 +91224,7 @@ async function waitForJobWithBounds(jobs, id3, options, now = Date.now) {
         const elapsed = now() - startedAt;
         if (elapsed >= options.wallMs) {
           clearInterval(tick);
-          resolve27({
+          resolve28({
             kind: "timeout",
             cause: "wall",
             elapsedMs: elapsed,
@@ -90966,7 +91239,7 @@ async function waitForJobWithBounds(jobs, id3, options, now = Date.now) {
           const quietFor = now() - lastProgressAt;
           if (quietFor >= options.idleMs) {
             clearInterval(tick);
-            resolve27({
+            resolve28({
               kind: "timeout",
               cause: "idle",
               elapsedMs: elapsed,
@@ -91197,7 +91470,7 @@ ${observed}
 
 // ../sdk/dist/tools/builtins/verify-outputs.js
 import { stat as stat14 } from "node:fs/promises";
-import { resolve as resolve26 } from "node:path";
+import { resolve as resolve27 } from "node:path";
 var inputSchema15 = external_exports.object({
   paths: external_exports.array(external_exports.string().min(1)).min(1).describe("Expected output file paths to verify. Each path is checked for existence and size."),
   min_bytes: external_exports.number().int().min(0).optional().describe("Minimum acceptable file size in bytes. A file under this size counts as missing. Default: 1 (any non-empty file passes).")
@@ -91253,7 +91526,7 @@ async function verifyOne(input) {
       };
     }
   }
-  const filePath = resolve26(context2.workingDirectory, path2);
+  const filePath = resolve27(context2.workingDirectory, path2);
   try {
     const info = await stat14(filePath);
     if (!info.isFile()) {
@@ -91843,7 +92116,7 @@ function actModelSchema(actions) {
       },
       origin: {
         type: "string",
-        description: 'REQUIRED. The origin from the latest snapshot header ("Page: <origin> \u2014 \u2026"), e.g. https://github.com. The call is refused if the page is no longer there.'
+        description: 'REQUIRED. The origin from the latest snapshot header ("Page: <origin> \u2014 \u2026"), e.g. https://example.com. The call is refused if the page is no longer there.'
       },
       ref: { type: "string", description: "Element ref from the latest snapshot, like e12." },
       text: { type: "string" },
@@ -92431,7 +92704,7 @@ __name(buildReadMemoryTool, "buildReadMemoryTool");
 
 // ../sdk/dist/tools/memory/fields.js
 var memoryFieldsSchema = {
-  name: external_exports.string().max(MEMORY_NAME_MAX_LENGTH).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional().describe('Unique kebab-case slug, e.g. "deploys-need-a-changeset"; other memories link to it as [[name]]'),
+  name: external_exports.string().max(MEMORY_NAME_MAX_LENGTH).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).optional().describe('Unique kebab-case slug, e.g. "prefers-short-answers"; other memories link to it as [[name]]'),
   description: external_exports.string().max(300).regex(/^[^\r\n]*$/).optional().describe("One line saying what this memory is for, used to decide whether to read it"),
   type: external_exports.enum(["user", "feedback", "project", "reference"]).optional().describe("user, feedback, project or reference; stores that require a type use project when omitted")
 };
@@ -92794,10 +93067,10 @@ var inputSchema16 = external_exports.object({
     preset: external_exports.enum(["read-only", "edit-in-folder"]).optional().describe("read-only: read/glob/grep/ls only; its bash deny blocks every script. edit-in-folder: also edit and write, bash asks. For a pure script, omit the preset and set rules to {} with unmatched: deny"),
     unmatched: external_exports.enum(["park", "deny"]).describe("A call no rule covers: park (wait for the operator) or deny"),
     execution: external_exports.enum(["host", "sandbox"]).optional().describe("Where commands run; leave unset (this machine) unless the user asked for a sandbox"),
-    rules: external_exports.record(external_exports.string(), external_exports.union([EFFECT, external_exports.record(external_exports.string(), EFFECT)])).optional().describe('Extra rules, e.g. {"bash": {"npm test*": "allow"}}'),
+    rules: external_exports.record(external_exports.string(), external_exports.union([EFFECT, external_exports.record(external_exports.string(), EFFECT)])).optional().describe('Extra rules, e.g. {"bash": {"<command> *": "allow"}}'),
     browser: external_exports.object({
       profile: external_exports.string().regex(BROWSER_PROFILE).describe('Browser profile the operator signed in with, e.g. "work"'),
-      sites: external_exports.record(external_exports.string(), external_exports.enum(["read", "ask", "act"])).describe('Site to level, e.g. {"https://github.com": "read"}. read: open and read only; ask: changes wait for the operator; act: changes run unasked. Unlisted sites are denied; there is no "*".'),
+      sites: external_exports.record(external_exports.string(), external_exports.enum(["read", "ask", "act"])).describe('Site to level, e.g. {"https://example.com": "read"}. read: open and read only; ask: changes wait for the operator; act: changes run unasked. Unlisted sites are denied; there is no "*".'),
       headed: external_exports.boolean().optional().describe("Show the browser window; default no window")
     }).optional().describe("Browser access; omit for none")
   }).optional().describe('create: REQUIRED explicit permission set; there is no default. For a pure script, use {rules:{}, unmatched:"deny"} without a preset unless you intend deny rules: read-only denies bash and blocks every script. A pure script cannot use a browser grant. update: the whole new set, only when the permissions change'),
@@ -92845,7 +93118,7 @@ function browserGrant(host, proposed) {
   if (entries2.length === 0) {
     return {
       ok: false,
-      error: 'permissions.browser.sites is empty; list each site the run may open, e.g. {"https://github.com": "read"}.'
+      error: 'permissions.browser.sites is empty; list each site the run may open, e.g. {"https://example.com": "read"}.'
     };
   }
   const sites = {};
@@ -93539,6 +93812,7 @@ export {
   generateTopicId,
   generateTurnId,
   generateSessionId,
+  generateTaskId,
   generateTenantId,
   generateWorkspaceId,
   generateSummaryId,
@@ -93655,6 +93929,7 @@ export {
   selectTaskContext,
   buildTaskTools,
   isCompactionMessage,
+  COMPACTION_RECOVERY_NOTE,
   PLAN_MODE_REFUSAL,
   toToolSourceRef,
   ToolManager,
@@ -93693,6 +93968,7 @@ export {
   withProviderFallback,
   buildProbeContext,
   probe,
+  SessionEvidenceOffsetError,
   createSessionTextEvidenceSource,
   createSessionEvidenceSource,
   NamzuHomeError,
@@ -93865,4 +94141,4 @@ export {
   buildResidentToolEvidenceTools,
   createPalMessagingTools
 };
-//# sourceMappingURL=chunk-FTZT4UAB.js.map
+//# sourceMappingURL=chunk-OPIC6ZIL.js.map