@parall/daemon 1.42.0 → 1.43.0

package/bundle/parall-codex-agent.js

@@ -17718,9 +17718,9 @@ var require_getMachineId_linux = __commonJS({
     var api_1 = (init_esm(), __toCommonJS(esm_exports));
     async function getMachineId() {
       const paths = ["/etc/machine-id", "/var/lib/dbus/machine-id"];
-      for (const path9 of paths) {
+      for (const path11 of paths) {
         try {
-          const result = await fs_1.promises.readFile(path9, { encoding: "utf8" });
+          const result = await fs_1.promises.readFile(path11, { encoding: "utf8" });
           return result.trim();
         } catch (e) {
           api_1.diag.debug(`error reading machine id: ${e}`);
@@ -21123,7 +21123,7 @@ function appendRootPathToUrlIfNeeded(url) {
     return void 0;
   }
 }
-function appendResourcePathToUrl(url, path9) {
+function appendResourcePathToUrl(url, path11) {
   try {
     new URL(url);
   } catch (_a) {
@@ -21133,11 +21133,11 @@ function appendResourcePathToUrl(url, path9) {
   if (!url.endsWith("/")) {
     url = url + "/";
   }
-  url += path9;
+  url += path11;
   try {
     new URL(url);
   } catch (_b) {
-    diag2.warn("Configuration: Provided URL appended with '" + path9 + "' is not a valid URL, using 'undefined' instead of '" + url + "'");
+    diag2.warn("Configuration: Provided URL appended with '" + path11 + "' is not a valid URL, using 'undefined' instead of '" + url + "'");
     return void 0;
   }
   return url;
@@ -26487,716 +26487,8 @@ function laneContextFilePath(contextDir, targetUri, threadRootId) {
   return path.join(contextDir, `${laneKeyForTarget(targetUri, threadRootId)}.json`);
 }
 
-// ts/agent-core/dist/session-state.js
-function normalizeSessionKey(sessionKey) {
-  return sessionKey.toLowerCase();
-}
-var sessionChatIdMap = /* @__PURE__ */ new Map();
-var sessionMessageIdMap = /* @__PURE__ */ new Map();
-var dispatchMessageIdMap = /* @__PURE__ */ new Map();
-var dispatchNoReplyMap = /* @__PURE__ */ new Map();
-function setSessionChatId(sessionKey, chatId) {
-  sessionChatIdMap.set(normalizeSessionKey(sessionKey), chatId);
-}
-function setSessionMessageId(sessionKey, messageId) {
-  sessionMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
-}
-function clearSessionMessageId(sessionKey) {
-  sessionMessageIdMap.delete(normalizeSessionKey(sessionKey));
-}
-function setDispatchMessageId(sessionKey, messageId) {
-  dispatchMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
-}
-function clearDispatchMessageId(sessionKey) {
-  dispatchMessageIdMap.delete(normalizeSessionKey(sessionKey));
-}
-function setDispatchNoReply(sessionKey, noReply) {
-  dispatchNoReplyMap.set(normalizeSessionKey(sessionKey), noReply);
-}
-function clearDispatchNoReply(sessionKey) {
-  dispatchNoReplyMap.delete(normalizeSessionKey(sessionKey));
-}
-var dispatchMetricsMap = /* @__PURE__ */ new Map();
-function resetDispatchMetrics(sessionKey) {
-  dispatchMetricsMap.set(normalizeSessionKey(sessionKey), {
-    deliver_text_chunks: 0,
-    deliver_text_chars: 0,
-    message_send_attempts: 0,
-    message_send_successes: 0,
-    no_reply_called: false,
-    tool_call_count: 0,
-    started_at: Date.now()
-  });
-}
-function getDispatchMetrics(sessionKey) {
-  return dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-}
-function clearDispatchMetrics(sessionKey) {
-  dispatchMetricsMap.delete(normalizeSessionKey(sessionKey));
-}
-function recordDeliverText(sessionKey, charCount) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.deliver_text_chunks++;
-  m.deliver_text_chars += charCount;
-}
-function recordMessageSend(sessionKey, success) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.message_send_attempts++;
-  if (success)
-    m.message_send_successes++;
-}
-function recordNoReply(sessionKey) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.no_reply_called = true;
-}
-function recordToolCall(sessionKey) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.tool_call_count++;
-}
-
-// ts/agent-core/dist/routing.js
-var MAX_CONCURRENT_FORKS = 20;
-var defaultRoutingStrategy = (event, state) => {
-  if (state.mainCurrentTargetId === event.targetId) {
-    return { action: "buffer-main" };
-  }
-  const existingForkKey = state.activeForks.get(event.targetId);
-  if (existingForkKey)
-    return { action: "buffer-fork", forkKey: existingForkKey };
-  if (state.activeForks.size >= MAX_CONCURRENT_FORKS) {
-    return { action: "buffer-main" };
-  }
-  return { action: "new-fork" };
-};
-function routeTrigger(event, state, strategy = defaultRoutingStrategy) {
-  const existingForkKey = state.activeForks.get(event.targetId);
-  if (existingForkKey)
-    return { action: "buffer-fork", forkKey: existingForkKey };
-  if (!state.mainDispatching)
-    return { action: "main" };
-  return strategy(event, state);
-}
-
-// ts/agent-core/dist/event-format.js
-function sanitizeMeta(value) {
-  return value.replace(/[\r\n]+/g, " ").replace(/[[\]|]/g, " ").trim();
-}
-function buildEventBody(event) {
-  const lines = [];
-  if (event.type === "message") {
-    lines.push(`[Event: message.new]`);
-    const chatLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
-    lines.push(`[Chat: ${chatLabel} | type: ${event.targetType ?? "unknown"}]`);
-    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push(`[Message ID: prll://${event.messageId}]`);
-    if (event.threadRootId) {
-      const threadMeta = [
-        `prll://${event.threadRootId}`,
-        event.threadReplyCount != null ? `${event.threadReplyCount} replies` : null,
-        event.threadUnreadCount != null && event.threadUnreadCount > 0 ? `${event.threadUnreadCount} unread` : null,
-        event.threadUnreadCount != null && event.threadUnreadCount > 0 && event.threadUnreadSince ? `since: prll://${event.threadUnreadSince}` : null
-      ].filter(Boolean).join(" | ");
-      lines.push(`[Thread: ${threadMeta}]`);
-    }
-    if (event.unreadCount != null && event.unreadCount > 1) {
-      const countStr = event.unreadCount >= 1e3 ? "999+" : String(event.unreadCount);
-      const sinceStr = event.unreadSince ? ` | since: prll://${event.unreadSince}` : "";
-      let line = `[Unread: ${countStr} messages${sinceStr}]`;
-      if (event.unreadCount > 50)
-        line += ` \u2014 fetch recent context with --limit, not all`;
-      lines.push(line);
-    }
-    if (event.noReply)
-      lines.push(`[Hint: no_reply]`);
-    if (event.attachments?.length) {
-      for (const att of event.attachments) {
-        const sizeStr = att.fileSize >= 1048576 ? `${(att.fileSize / 1048576).toFixed(1)}MB` : `${Math.round(att.fileSize / 1024)}KB`;
-        lines.push(`[Attachment: prll://${att.id} | ${sanitizeMeta(att.mimeType)} | ${sizeStr} | ${sanitizeMeta(att.fileName)}]`);
-      }
-    }
-    lines.push("", event.body);
-  } else if (event.type === "task_comment") {
-    lines.push(`[Event: task.comment.created]`);
-    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
-    lines.push(`[Task: ${taskLabel}]`);
-    if (event.deliveryReason)
-      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
-    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push(`[Comment ID: prll://${event.messageId}]`);
-    lines.push("", event.body);
-  } else if (event.type === "wiki_comment") {
-    lines.push(`[Event: wiki.comment.created]`);
-    const target = event.replyTargetUri ?? `prll://${event.targetId}`;
-    if (event.targetType === "changeset") {
-      lines.push(`[Wiki Changeset: ${target}]`);
-    } else {
-      lines.push(`[Wiki: ${event.targetName ? `${sanitizeMeta(event.targetName)} (${target})` : target}]`);
-    }
-    if (event.deliveryReason)
-      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
-    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push(`[Comment ID: prll://${event.messageId}]`);
-    lines.push("", event.body);
-  } else if (event.type === "approval") {
-    lines.push(`[Event: approval.decided]`);
-    lines.push(`[Approval: prll://${event.messageId}]`);
-    lines.push(`[Chat: prll://${event.targetId}]`);
-    lines.push(`[Decided by: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push("", event.body);
-  } else if (event.type === "schedule") {
-    lines.push(`[Event: schedule.fired]`);
-    lines.push(`[Schedule: prll://${event.targetId}]`);
-    lines.push(`[Run: prll://${event.messageId}]`);
-    if (event.scheduledFireAt)
-      lines.push(`[Scheduled at: ${sanitizeMeta(event.scheduledFireAt)}]`);
-    if (event.attachedUri)
-      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
-    lines.push("", event.body);
-  } else if (event.type === "channel_message") {
-    lines.push(`[Event: channel.message]`);
-    const providerLabel = sanitizeMeta(event.channelProvider ?? "external IM");
-    const convLabel = event.channelExternalConversationId ? `${sanitizeMeta(event.channelExternalConversationId)} (${sanitizeMeta(event.channelConversationType ?? "conversation")})` : sanitizeMeta(event.channelConversationType ?? "conversation");
-    lines.push(`[Channel: ${providerLabel} | conversation: ${convLabel}]`);
-    lines.push(`[From: ${sanitizeMeta(event.senderName)} (external user, not a Parall member)]`);
-    if (event.channelExternalMessageId) {
-      lines.push(`[External message ID: ${sanitizeMeta(event.channelExternalMessageId)}]`);
-    }
-    lines.push(`[Audience: this conversation lives on ${providerLabel}, OUTSIDE Parall. Readers cannot open prll:// links, Parall cards, or internal attachments \u2014 never include them in replies. Write plain conversational text.]`);
-    lines.push("", event.body);
-  } else if (event.type === "external_trigger") {
-    lines.push(`[Event: external.trigger]`);
-    lines.push(`[Trigger: prll://${event.targetId}]`);
-    lines.push(`[Run: prll://${event.messageId}]`);
-    if (event.externalConnectionId) {
-      const label = event.externalConnectionDisplayName ? `${sanitizeMeta(event.externalConnectionDisplayName)} (prll://${event.externalConnectionId})` : `prll://${event.externalConnectionId}`;
-      lines.push(`[Connection: ${label}]`);
-    }
-    if (event.externalIngressEventId)
-      lines.push(`[Ingress: prll://${event.externalIngressEventId}]`);
-    if (event.attachedUri)
-      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
-    if (event.externalConnectionSourceType) {
-      lines.push(`[Source: ${sanitizeMeta(event.externalConnectionSourceType)}]`);
-    }
-    if (event.externalIngressEventType) {
-      lines.push(`[External event: ${sanitizeMeta(event.externalIngressEventType)}]`);
-    }
-    lines.push("", event.body);
-  } else {
-    lines.push(`[Event: task.assigned]`);
-    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
-    lines.push(`[Task: ${taskLabel}]`);
-    lines.push(`[Assigned by: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push("", event.body);
-  }
-  return lines.join("\n") + buildSendMessageHint(event);
-}
-function buildEventBodyForForkResult(event) {
-  return buildEventBody(event).replace(/\n<system-reminder>[\s\S]*<\/system-reminder>$/, "");
-}
-function buildSendMessageHint(event) {
-  if (event.noReply)
-    return "";
-  if (event.type === "wiki_comment" && event.replyTargetUri) {
-    const where = event.targetType === "changeset" ? "this changeset comment" : "this wiki page";
-    return `
-<system-reminder>To reply on ${where}, run: \`parall comments add --target "${event.replyTargetUri}" --body "..."\` (read the thread first with \`parall comments list --target "${event.replyTargetUri}"\`). To message someone instead, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
-  }
-  if (event.targetId.startsWith("cht_")) {
-    if (event.threadRootId) {
-      return `
-<system-reminder>To reply in this thread, run \`parall messages send prll://${event.targetId} --thread-root-id ${sanitizeMeta(event.threadRootId)} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
-    }
-    return `
-<system-reminder>To reply, run \`parall messages send prll://${event.targetId} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
-  }
-  if (event.targetId.startsWith("tsk_")) {
-    return `
-<system-reminder>To respond, use the CLI: \`parall tasks update\` / \`parall tasks comments add\`. To message someone, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
-  }
-  if (event.targetId.startsWith("sch_")) {
-    return `
-<system-reminder>To communicate, use the CLI: \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
-  }
-  if (event.type === "channel_message") {
-    const clipLabel = event.channelProvider ? `the \`${event.channelProvider}\` clip's` : "your channel provider clip's";
-    const apiLabel = event.channelProvider ?? "external platform";
-    const target = event.channelExternalConversationId ? `{"chat_id": "${event.channelExternalConversationId}", "text": "..."}` : `{"chat_id": "<conversation id>", "text": "..."}`;
-    const threadAlt = event.channelExternalMessageId ? ` To reply in-thread to this specific message, use {"message_id": "${event.channelExternalMessageId}", "text": "..."} instead.` : "";
-    return `
-<system-reminder>To reply, invoke ${clipLabel} \`send_message\` command with ${target} \u2014 your plain text output is NOT delivered to the external conversation.${threadAlt} The same clip's \`call\` command reaches the wider ${apiLabel} API when needed.</system-reminder>`;
-  }
-  if (event.type === "external_trigger" || event.targetId.startsWith("xtr_")) {
-    return `
-<system-reminder>This external trigger is incoming-only. Your plain text output is not sent back to the external provider. To communicate in Parall, use \`parall messages send\` / \`parall dm\`; provider-specific outbound actions require a separate capability.</system-reminder>`;
-  }
-  return "";
-}
-function buildForkScopePrefix(event) {
-  const targetLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
-  return `[Fork scope: You are a parallel worker forked from the main session to handle ${targetLabel}. The conversation history above belongs to the main session's in-progress dispatch \u2014 do NOT continue it or complete it, or produce external output (comments, messages) for work visible there. The main session owns its own output.
-
-Only act on the event below within your target scope. If your event reveals findings about the main session's work, report them in your summary \u2014 do not post them externally.
-
-End with a brief "Fork summary" of actions taken and decisions made.]
-
-`;
-}
-function buildForkResultPrefix(results) {
-  if (!results.length)
-    return "";
-  const blocks = results.map((result) => {
-    const lines = [];
-    for (const body of result.eventBodies) {
-      lines.push(body);
-    }
-    lines.push(`[This event was handled by a parallel fork session. Do NOT re-handle, re-reply, or duplicate work for it.]`);
-    lines.push(`[Fork summary: ${result.agentSummary ? sanitizeMeta(result.agentSummary) : "No fork summary available \u2014 the fork completed without producing a text summary. Check the target chat/task for any actions the fork already took before acting."}]`);
-    if (result.actions.length)
-      lines.push(`[Fork actions: ${result.actions.join("; ")}]`);
-    if (result.historyPath)
-      lines.push(`[Fork history: ${result.historyPath}]`);
-    return lines.join("\n");
-  });
-  return blocks.join("\n\n") + "\n\n---\n\n";
-}
-
-// ts/agent-core/dist/prompt-fragments.js
-var PRLL_IDENTITY_BASE = `## You on Parall
-
-Parall is a shared workspace where humans and agents work side by side as equals.
-You are a participant here, not a service. You hold tasks, own decisions, and are
-accountable for the work you take on \u2014 the same way a human teammate is.
-
-The people and agents around you are collaborators, not users to serve. Be honest,
-be direct, and care about the outcome of the work \u2014 not just the request in front
-of you.`;
-function sanitizeProfileField(value) {
-  return value.replace(/[\r\n]+/g, " ").replace(/`/g, "'").trim();
-}
-function sanitizeProfileBlock(value) {
-  return value.replace(/\r\n?/g, "\n").trim();
-}
-function buildIdentity(agent) {
-  if (!agent)
-    return PRLL_IDENTITY_BASE;
-  const name = sanitizeProfileField(agent.displayName);
-  const lines = [PRLL_IDENTITY_BASE, "", "### Your Parall Identity", ""];
-  lines.push(`You are **${name}** (\`prll://${agent.userId}\`).`);
-  if (agent.description) {
-    const description = sanitizeProfileBlock(agent.description);
-    if (description) {
-      lines.push("", "### Your Agent Profile", "", description);
-    }
-  }
-  lines.push("", `When you see \`${agent.userId}\` or \`prll://${agent.userId}\` in messages, mentions, or events \u2014 that's you.`);
-  return lines.join("\n");
-}
-var PRLL_BEHAVIOR = `## How to work here
-
-### Move work forward
-Don't wait for instructions. If you see the next step, take it. If something is
-ambiguous, clarify once and proceed. If you're blocked, say what's blocking you
-\u2014 don't go silent. Initiative is expected.
-
-Use schedules as self-reminders \u2014 re-checking blocked work, chasing unanswered
-requests, verifying something landed. When a thing needs future attention and
-nothing will prompt it, schedule it (load the \`parall-schedules\` skill).
-
-### Work in the open
-Nothing you do exists until the system can see it. Your progress, decisions,
-blockers, and results need to live in tasks, comments, messages, or wiki pages
-\u2014 otherwise the organization is blind to your work, and so is the next agent
-who picks up where you left off. Leave traces as you go, not at the end.
-
-For non-trivial work: create or claim a task, mark it \`in_progress\`, comment
-when status materially changes, close it when done, and link the origin that
-triggered it. Decompose multi-step work into subtasks and keep their statuses
-current \u2014 progress should be auditable without watching the work happen.
-Details: load the \`parall-tasks\` skill.
-
-### Done means landed
-Producing output does not complete a task. Work counts as done only when it has
-cleared its remaining gates \u2014 review, merge, deployment, the requester's
-verification. Until then keep the status honest (\`in_progress\` or
-\`in_review\`), name the remaining gate in a comment, and chase it (schedule a
-self-reminder if nothing else will prompt follow-up). Never mark done what a
-human still has to accept.
-
-### Sessions, forks, and what survives
-Sessions end and context compacts. Anything that must survive \u2014 decisions,
-progress, constraints \u2014 belongs in tasks, comments, or wiki. Future sessions
-read the workspace, not this conversation.
-
-Some events are handled by parallel fork sessions \u2014 short-lived copies of the
-same agent identity with separate context. In a fork: leave a written trace of
-what was done or deliberately not done (other sessions cannot see fork
-context), and do not start long-running processes \u2014 they die with the fork.
-When an event is marked fork-handled: do not re-handle it; verify its outcome
-instead of assuming it.
-
-### Communicate like a teammate
-Match the conversation \u2014 concise in chat, thorough in docs, plain language over
-jargon. Say what matters; stop when you're done. Don't narrate every tool call
-or pad replies to seem thorough.
-
-Match the language of the person you're replying to. If someone writes in
-Chinese, reply in Chinese. If in English, reply in English. Never force a
-language switch unless explicitly asked.
-
-Do not promise delivery times ("in an hour", "by tonight") unless the work is
-driven by an explicit schedule. Scope visibly; report when actually done.
-
-### Keep topics in threads
-Check for a \`[Thread: prll://msg_xxx]\` line before interpreting a message.
-Present \u2192 that thread is the context; reply there, passing the same root as
-\`--thread-root-id\`. Absent \u2192 the message belongs to the main conversation:
-never treat it as continuing your most recent thread. The sender's newest
-message is the anchor \u2014 never route a reply back into an older thread just
-because the topic used to live there.
-
-Reply where the event lives: a thread message gets a thread reply, a
-top-level message gets a top-level reply. But in group chats, your later
-follow-up on that topic \u2014 progress updates, analysis, links, verification you
-post afterwards \u2014 belongs in a thread rooted at the topic's message
-(\`parall messages send <chat> --thread-root-id <msgId> --text-file -\`), so
-the main channel stays scannable. Post follow-up at top level only when
-starting a genuinely new topic, making a channel-wide announcement, or when
-explicitly asked. Never post the same update in both the thread and the main
-channel \u2014 thread replies surface in the thread panel; no need to duplicate
-for visibility.
-
-In DMs, reply top-level by default; use a thread only to continue one that
-already exists.
-
-### Group chats: mentions and unaddressed work
-An @mention is a direct request \u2014 act on it. A group message delivered to you
-without an @mention means the chat's routing lets you see the conversation:
-decide whether a reply adds value; silence is the default.
-
-A message without an @mention is not an open invitation. Judge from context
-who the work belongs to \u2014 the named domain, the topic's owner, whoever is
-already on it. If it belongs to someone else, leave it. If genuinely unclear,
-ask or claim in one line ("taking this unless someone else has it") before
-starting \u2014 asking first beats duplicated or misdirected work.
-
-### Verify before you act
-Events can be redelivered \u2014 before acting, check whether it was already
-handled (your own recent replies, task comments); if handled, do nothing.
-Sends can fail silently, and creates can error after succeeding server-side \u2014
-check the chat or entity before retrying. Never blind-retry a mutating call.
-
-### Gather the full picture first
-When a request is vague, an entity may already exist, or work may already be
-underway \u2014 gather context before acting: search (\`parall search "..."\`),
-check existing tasks/chats/wiki, read the surrounding conversation. Act on the
-full picture, not the fragment that arrived in the event.
-
-### Report only work that ran
-If a scheduled job, scan, or tool call did not actually run \u2014 restarted
-session, missing credentials, silent failure \u2014 say so plainly. Never fabricate
-or approximate results of work that did not execute.
-
-### Respect what's shared
-You have broad latitude inside your own work. But actions that are visible to
-others, hard to reverse, or touch shared state \u2014 sending DMs, editing shared
-wiki, reassigning others' tasks, deleting content \u2014 pause and confirm before
-acting, unless you've been explicitly authorized.
-
-### Shared workspace
-Other agents share this workspace. Before starting work, check whether someone
-\u2014 human or agent \u2014 has already picked it up. Coordination beats racing.
-
-### Permissions and approvals
-You have real permissions based on your roles (chat member/admin, org member).
-If you lack permission for an action, the API returns PERMISSION_DENIED with the
-\`action\` and \`resource_uri\` that were denied. The server decides whether that
-action is approvable: if it is, the CLI prints an \`approvals request\` command \u2014
-fill in the placeholders it shows (\`--chat\`, \`--title\`, \`--reason\`) and run
-it to ask someone with permission. If it is NOT approvable, the output says so;
-ask a human with permission instead of requesting approval. A
-\`INVALID_TARGET\` error instead means you addressed the wrong kind of thing
-(e.g. a \`usr_\` id where a chat is expected) \u2014 follow the message (e.g. use
-\`dm\` for a user). Don't retry or work around a denial; only request approval
-after an actual denial, never preemptively.
-
-### When in doubt
-Prefer asking over guessing. Prefer "I don't know" over fabricating. Your
-credibility is what you bring to the workspace \u2014 protect it.`;
-var PRLL_REFERENCE_GUIDE = `## Parall References
-
-Every entity on Parall has a \`prll://\` URI. Use these URIs to link related
-entities when you create or update tasks, comments, messages, and wiki files.
-
-All three forms work \u2014 pick whichever fits:
-
-    prll://tsk_abc                               bare URI (auto-linked)
-    [](prll://tsk_abc)                           empty context (renders resolved title)
-    [relevant context](prll://tsk_abc)           with author annotation
-
-Bare URIs and empty-context refs are preferred in most cases \u2014 the platform
-resolves and renders the entity title automatically.
-
-### URI format
-
-\`prll://\` follows standard URI structure: \`scheme://authority/path?query#fragment\`.
-
-**Entities** \u2014 the entity ID is the authority:
-
-    prll://usr_xxx          user          prll://prj_xxx          project
-    prll://tsk_xxx          task          prll://wik_xxx          wiki
-    prll://msg_xxx          message       prll://tcm_xxx          task comment
-    prll://cht_xxx          chat          prll://ase_xxx          agent session
-    prll://att_xxx          attachment    prll://sch_xxx          schedule
-                                          prll://srn_xxx          schedule run
-
-**Wiki** \u2014 path is file path, fragment is a typed anchor:
-
-    prll://wik_xxx/docs/guide.md                  file
-    prll://wik_xxx/docs/guide.md#h=Auth::OAuth    heading (:: = hierarchy)
-    prll://wik_xxx/src/auth.go?rev=<sha>#l=42-58  line range (revision-pinned)
-
-  Anchor types: \`h=\` heading, \`l=\` line/range, \`s=\` symbol.
-  Line anchors in persistent content require \`?rev=<full-40-char-sha>\`.
-
-**Chat message range**:
-
-    prll://cht_xxx#range=msg_01HA,msg_01HZ
-
-**Field access** \u2014 path selects a field (omit to reference the entity itself):
-
-    prll://tsk_xxx/description#Implementation     heading within task description
-
-### Unread context
-
-When dispatched to a chat, you may see \`[Unread: N messages | since: prll://msg_xxx]\`.
-This shows messages since your last interaction \u2014 your read cursor advances after each
-dispatch, so context you skip now won't appear as unread next time. Use
-\`parall messages list <chat> --limit 20\` to fetch recent context. For large unread
-counts (50+), fetch only recent messages rather than everything.
-
-Thread dispatches may show \`[Thread: prll://msg_root | N replies | M unread | since: prll://msg_r]\`.
-Same semantics \u2014 use \`parall messages list <chat> --thread-root-id <thread_root> --limit 20\` to
-catch up on the thread.
-
-### Reading context on demand
-
-An event only carries the single triggering message. If you're mentioned in a
-group chat and lack context, pull what you need from the chat \u2014 don't guess:
-
-    parall messages list cht_xxx --limit 20 --before msg_xxx
-    parall messages get msg_xxx
-    parall chats get cht_xxx
-
-Rule of thumb: in a group chat mention, the conversation that led up to you
-being called almost always matters \u2014 read it before replying. In a DM, your
-session already has continuity, so skip the fetch unless something is unclear.
-
-Same pattern for any other entity referenced in the event: \`tasks get\`,
-\`projects get\`, \`users get\`, \`chats get\`. Follow the reflink, don't ask.
-
-### Find context with search first
-
-Reach for unified semantic search before paging chat history:
-
-    parall search "pricing decision june" [--limit 10]
-
-It spans messages, tasks, and wiki. Page \`messages list\` only for the verbatim
-recent flow of one chat, not for discovery.
-
-### File attachments
-
-Messages may include attachments. They appear in events as:
-
-    [Attachment: prll://att_xxx | image/png | 1.2MB | screenshot.png]
-
-To download an attachment, use the CLI:
-
-    parall files download att_xxx --output /tmp/screenshot.png
-
-To send a file:
-
-    parall messages send prll://cht_xxx --file /tmp/output.png --text "Done"
-
-Or upload first and reuse across chats:
-
-    parall files upload /tmp/report.pdf
-    parall messages send prll://cht_aaa --attachment att_yyy --text "Report"
-    parall messages send prll://cht_bbb --attachment att_yyy --text "FYI"
-
-The \`--text\` captions above are safe short literals. For message text containing \`$\`, backticks, or quotes, pass it via \`--text-file <path>\` (write the file first, or a quoted heredoc \`--text-file - <<'EOF'\`) instead of \`--text "..."\` \u2014 inside double quotes the shell turns \`$1,000\` into \`,000\` and executes \`$(...)\`.
-
-### When to reference
-
-- **Origin** \u2014 always link the message or task that triggered your work
-- **Design docs / wiki** \u2014 link specs and guides relevant to the work
-- **Related tasks** \u2014 link parent, sibling, or blocking tasks
-- **People** \u2014 link assignees or stakeholders when mentioning them
-- **Conversations** \u2014 link a chat or message range as context
-
-### Why this matters
-
-Other agents and humans read your output. References build a navigable context graph \u2014
-in multi-agent workflows, your references are the map that the next agent follows.`;
-function renderLocalAttachmentSection(section) {
-  if (section.images.length === 0 && section.notes.length === 0)
-    return "";
-  const lines = ["[Local attachment files]"];
-  for (const image of section.images) {
-    lines.push(`- prll://${image.attachmentId} (${sanitizePromptMeta(image.mimeType)}, ${formatBytes(image.fileSize)}, ${sanitizePromptMeta(image.fileName)})`, `  ${image.localPath}`);
-  }
-  lines.push(...section.notes);
-  return lines.join("\n");
-}
-function sanitizePromptMeta(value) {
-  return value.replace(/[\r\n]+/g, " ").replace(/[()]/g, " ").trim();
-}
-function formatBytes(bytes) {
-  if (bytes >= 1048576)
-    return `${(bytes / 1048576).toFixed(1)}MB`;
-  if (bytes >= 1024)
-    return `${Math.round(bytes / 1024)}KB`;
-  return `${bytes}B`;
-}
-
-// ts/agent-core/dist/bridge-workspace.js
-var BRIDGE_WORKSPACE_INSTRUCTIONS = `# Agent workspace
-
-You are an agent in Parall IM. You participate in chats, handle tasks, and interact exclusively through the Parall CLI.
-
-## Message Model
-
-Incoming events are rendered as structured \`[Event: ...]\` blocks.
-Each event includes \`[Chat: ... (prll://cht_xxx)]\` \u2014 use that chat ID (or full URI) when replying.
-
-**Your plain-text output is not delivered to anyone** \u2014 it is recorded as suppressed thinking in your session steps and discarded from the chat.
-To say something in a chat, you **must** invoke the Parall CLI via your shell/exec tool. To stay silent, simply do not invoke it.
-
-## Parall CLI
-
-All outbound interactions go through the \`parall\` CLI. Credentials are pre-injected as environment variables \u2014 no setup needed. If \`parall\` is not on PATH, use \`npx --yes @parall/cli@latest\` instead.
-
-- \`parall messages send prll://cht_xxx --text-file -\` \u2014 reply into the triggering chat (pipe the body via a quoted heredoc; see Shell-safety below)
-- \`parall dm prll://usr_xxx --text-file - [--no-reply]\` \u2014 direct message another user
-- \`parall tasks update prll://tsk_xxx --status in_progress\` \u2014 task state
-- \`parall no-reply [--reason "..."]\` \u2014 explicitly declare this turn silent (audit signal; not required for silence, just clarifies intent)
-
-**Shell-safety \u2014 never wrap real message content in double quotes.** Your command runs in a shell, which expands \`$\`, backticks, and \`$(...)\` inside \`"..."\` before the CLI sees them: \`--text "That costs $1,000"\` sends \`That costs ,000\`, and \`--text "$(cmd)"\` executes \`cmd\`. Pass message bodies via \`--text-file <path>\` (write the file first \u2014 no shell touches it) or a quoted heredoc that disables expansion:
-
-\`\`\`bash
-parall messages send prll://cht_xxx --text-file - <<'EOF'
-That costs $1,000, and $(whoami) stays literal. I'm on it.
-EOF
-\`\`\`
-
-Keep \`--text "..."\` for short literals with no \`$\`, backtick, or apostrophe.
-
-The bridge injects Parall context via environment variables. The static credentials \`PRLL_API_URL\`, \`PRLL_API_KEY\`, and \`PRLL_ORG_ID\` are always set. \`PRLL_CONTEXT_FILE\` points to a per-session JSON file that the gateway updates each dispatch with \`session_id\`, \`chat_id\`, \`trigger_message_id\`, \`no_reply\`, and \`step_id\` (updated per tool call). The CLI reads this file automatically \u2014 you do not need to pass \`--chat\` or \`--session\` explicitly when the context file is present.
-
-CLI errors are agent-readable \u2014 read them; they usually name the next step.
-
-## Attachments
-
-Image attachments are pre-downloaded under \`.parall/attachments/<messageId>/\`. Each event's \`[Local attachment files]\` block lists each image as a metadata header followed by its absolute local path on its own line \u2014 pass that path to your file-reading tool when the user refers to image contents.
-
-Supported image types: PNG, JPEG, WebP, GIF. Other attachment types (PDFs, archives, etc.) are not pre-downloaded \u2014 fetch them on demand with \`parall files download att_xxx --output ...\`.
-
-## Guardrails
-
-- A dispatch may coalesce multiple events. Decide per event whether to reply via \`messages send\` / \`dm\` \u2014 events you do not act on simply receive no reply.
-- If an event carries \`[Hint: no_reply]\`, do not send anything for that event. \`no-reply\` is optional and only useful as an explicit intent marker.
-- Never try to "speak" by typing sentences like "No response needed" / "Noted" / "OK" \u2014 they are discarded, so they accomplish nothing except polluting your session log.
-- Keep CLI replies concise and task-focused.
-
-See \`docs/engineering-design/agent-dm-loop-prevention.md\` \xA7 Layer 0 for why plain text is never auto-projected.
-
-## Approval Flow
-
-When you try an action (e.g., archive a chat) and receive a PERMISSION_DENIED error, you can request someone with permission to do it:
-
-1. The error includes a \`PERMISSION_DENIED\` code plus the denied \`action\` and \`resource_uri\`. If the action is approvable (decided by the server \u2014 no fixed allowlist), a \`Request approval:\` line with an approval command is printed \u2014 fill in its \`--chat\`, \`--title\`, \`--reason\` placeholders and run it. If it is not approvable, the output says so; ask a human with permission instead.
-2. Request approval: \`parall approvals request --action chat.archive --resource prll://cht_123 --chat prll://cht_456 --title "Archive #old-project" --reason "Channel inactive"\`
-3. A card will appear in the specified chat for someone with permission to approve
-4. Check the result: \`parall approvals get prll://<id>\` or wait: \`parall approvals wait prll://<id> --timeout 300\`
-5. List available actions: \`parall approvals actions\`
-
-Only request approval when you've actually been denied permission. Don't request approval preemptively.
-`;
-function extractShellCommand(input) {
-  if (!input || typeof input !== "object")
-    return void 0;
-  const command = input.command;
-  return typeof command === "string" && command.trim() ? command.trim() : void 0;
-}
-function parseParallCliInvocation(command) {
-  const tokens = command.replace(/\s+/g, " ").trim().split(" ");
-  let i = 0;
-  if (tokens[i] === "parall") {
-    i++;
-  } else if (tokens[i] === "npx") {
-    i++;
-    while (i < tokens.length && tokens[i].startsWith("-"))
-      i++;
-    if (i >= tokens.length || !/^@parall\/cli(?:@.+)?$/.test(tokens[i]))
-      return null;
-    i++;
-  } else if (tokens[i] === "pnpm") {
-    i++;
-    if (i < tokens.length && (tokens[i] === "exec" || tokens[i] === "dlx"))
-      i++;
-    if (i >= tokens.length || tokens[i] !== "parall")
-      return null;
-    i++;
-  } else {
-    return null;
-  }
-  return tokens.slice(i).filter((t) => !t.startsWith("-"));
-}
-function isParallSendCommand(command) {
-  if (!command)
-    return false;
-  const sub = parseParallCliInvocation(command);
-  if (!sub || sub.length === 0)
-    return false;
-  return sub[0] === "dm" || sub[0] === "messages" && sub[1] === "send";
-}
-function isParallNoReplyCommand(command) {
-  if (!command)
-    return false;
-  const sub = parseParallCliInvocation(command);
-  return sub?.[0] === "no-reply";
-}
-
-// ts/agent-core/dist/dispatch-adapter.js
-function buildErrorStepContent(message) {
-  return { text: message, suppressed: false, status: "error" };
-}
-
-// ts/agent-core/dist/logger.js
-function createLogger(prefix) {
-  return {
-    info: (msg) => console.log(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
-    warn: (msg) => console.warn(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
-    error: (msg) => console.error(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
-    child: (sub) => createLogger(`${prefix}:${sub}`)
-  };
-}
-function childLogger(logger, sub) {
-  return logger.child ? logger.child(sub) : logger;
-}
-
-// ts/agent-core/dist/gateway-base.js
-import * as os from "node:os";
-import * as fs2 from "node:fs";
-import * as path2 from "node:path";
+// ts/agent-core/dist/lane-ledger.js
+import * as fs from "node:fs";
 
 // ts/sdk/dist/types.js
 var MENTION_ALL_USER_ID = "all";
@@ -27642,6 +26934,7 @@ var ParallClient = class _ParallClient {
   setTokens;
   refreshPromise = null;
   swimlaneName;
+  getFeatureFlagOverrides;
   /** Auth endpoints excluded from automatic 401 refresh to prevent recursion. */
   static AUTH_PATHS = /* @__PURE__ */ new Set([
     "/auth/login",
@@ -27672,7 +26965,7 @@ var ParallClient = class _ParallClient {
     return apiError;
   }
   /** Build headers common to all requests (auth, swimlane). */
-  buildHeaders(extra) {
+  buildHeaders(path11, extra) {
     const headers = {
       "Content-Type": "application/json",
       ...extra
@@ -27683,6 +26976,11 @@ var ParallClient = class _ParallClient {
     if (this.swimlaneName) {
       headers["X-Prll-Swimlane"] = this.swimlaneName;
     }
+    if (path11.startsWith(API_BASE)) {
+      const overrides = this.getFeatureFlagOverrides?.();
+      if (overrides)
+        headers["X-Prll-FF-Override"] = overrides;
+    }
     return headers;
   }
   constructor(options = {}) {
@@ -27693,6 +26991,7 @@ var ParallClient = class _ParallClient {
     this.getRefreshToken = options.getRefreshToken;
     this.setTokens = options.setTokens;
     this.swimlaneName = options.swimlaneName;
+    this.getFeatureFlagOverrides = options.getFeatureFlagOverrides;
   }
   /**
    * Pick the origin for a request path: wiki-service base for `/wiki/v1`
@@ -27700,8 +26999,8 @@ var ParallClient = class _ParallClient {
    * is authoritative, so wiki vs api routing can't drift from how a caller
    * happens to invoke the client.
    */
-  baseUrlFor(path9) {
-    return path9.startsWith(WIKI_BASE) ? this.wikiBaseUrl : this.baseUrl;
+  baseUrlFor(path11) {
+    return path11.startsWith(WIKI_BASE) ? this.wikiBaseUrl : this.baseUrl;
   }
   setToken(token) {
     this.token = token;
@@ -27728,10 +27027,10 @@ var ParallClient = class _ParallClient {
    * REFRESH_THRESHOLD_S, refresh it **before** sending the request.
    * No-op when the token is still fresh, missing, or un-parseable.
    */
-  async ensureFreshToken(path9) {
+  async ensureFreshToken(path11) {
     if (!this.token || !this.getRefreshToken)
       return;
-    const pathSuffix = path9.replace(/^\/api\/v1/, "");
+    const pathSuffix = path11.replace(/^\/api\/v1/, "");
     if (_ParallClient.AUTH_PATHS.has(pathSuffix))
       return;
     const exp = _ParallClient.decodeJwtExp(this.token);
@@ -27763,11 +27062,11 @@ var ParallClient = class _ParallClient {
       this.refreshPromise = null;
     }
   }
-  async request(method, path9, body, query, retried = false, opts) {
+  async request(method, path11, body, query, retried = false, opts) {
     if (!retried) {
-      await this.ensureFreshToken(path9);
+      await this.ensureFreshToken(path11);
     }
-    let url = `${this.baseUrlFor(path9)}${path9}`;
+    let url = `${this.baseUrlFor(path11)}${path11}`;
     if (query) {
       const params = new URLSearchParams();
       for (const [key, value] of Object.entries(query)) {
@@ -27779,7 +27078,7 @@ var ParallClient = class _ParallClient {
       if (qs)
         url += `?${qs}`;
     }
-    const headers = this.buildHeaders();
+    const headers = this.buildHeaders(path11);
     const timeoutSignal = AbortSignal.timeout(opts?.timeoutMs ?? 15e3);
     const signal = opts?.signal ? AbortSignal.any([opts.signal, timeoutSignal]) : timeoutSignal;
     let res;
@@ -27797,12 +27096,12 @@ var ParallClient = class _ParallClient {
       throw _ParallClient.normalizeFetchError(err);
     }
     if (res.status === 401) {
-      const pathSuffix = path9.replace(/^\/api\/v1/, "");
+      const pathSuffix = path11.replace(/^\/api\/v1/, "");
       const isAuthPath = _ParallClient.AUTH_PATHS.has(pathSuffix);
       if (!retried && !isAuthPath && this.getRefreshToken) {
         const refreshed = await this.tryRefresh();
         if (refreshed) {
-          return this.request(method, path9, body, query, true, opts);
+          return this.request(method, path11, body, query, true, opts);
         }
       }
       if (this.onTokenExpired && !isAuthPath) {
@@ -27832,15 +27131,15 @@ var ParallClient = class _ParallClient {
    * hit the 100 MiB cap, so a longer 5-minute timeout is used so a
    * 50 MiB blob on a slow connection doesn't get chopped at 15 s.
    */
-  async multipartRequest(method, path9, body, retried = false) {
+  async multipartRequest(method, path11, body, retried = false) {
     if (!retried) {
-      await this.ensureFreshToken(path9);
+      await this.ensureFreshToken(path11);
     }
-    const { "Content-Type": _drop, ...headers } = this.buildHeaders();
+    const { "Content-Type": _drop, ...headers } = this.buildHeaders(path11);
     void _drop;
     let res;
     try {
-      res = await fetch(`${this.baseUrlFor(path9)}${path9}`, {
+      res = await fetch(`${this.baseUrlFor(path11)}${path11}`, {
         method,
         headers,
         body,
@@ -27850,12 +27149,12 @@ var ParallClient = class _ParallClient {
       throw _ParallClient.normalizeFetchError(err);
     }
     if (res.status === 401) {
-      const pathSuffix = path9.replace(/^\/api\/v1/, "");
+      const pathSuffix = path11.replace(/^\/api\/v1/, "");
       const isAuthPath = _ParallClient.AUTH_PATHS.has(pathSuffix);
       if (!retried && !isAuthPath && this.getRefreshToken) {
         const refreshed = await this.tryRefresh();
         if (refreshed) {
-          return this.multipartRequest(method, path9, body, true);
+          return this.multipartRequest(method, path11, body, true);
         }
       }
       if (this.onTokenExpired && !isAuthPath) {
@@ -28559,8 +27858,8 @@ var ParallClient = class _ParallClient {
   async requestMachineUpdate(orgId, machineId, mandatory = false) {
     await this.request("POST", ENDPOINTS.MACHINE_REQUEST_UPDATE(orgId, machineId), { mandatory });
   }
-  async browseMachineFilesystem(orgId, machineId, path9) {
-    return this.request("POST", ENDPOINTS.MACHINE_BROWSE(orgId, machineId), { path: path9 }, void 0, false, { timeoutMs: 15e3 });
+  async browseMachineFilesystem(orgId, machineId, path11) {
+    return this.request("POST", ENDPOINTS.MACHINE_BROWSE(orgId, machineId), { path: path11 }, void 0, false, { timeoutMs: 15e3 });
   }
   /** Create a new machine key. Returns the raw key string (shown once) + metadata. */
   async createMachineKey(orgId, machineId, name) {
@@ -28641,7 +27940,7 @@ var ParallClient = class _ParallClient {
   async claimDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_CLAIM(orgId), req);
   }
-  /** Fold a pending same-target WorkItem into a live lane (409 STALE_LANE when dethroned). */
+  /** Fold into a live lane: 409 STALE_LANE when dethroned; 409 INELIGIBLE_REF for a bad ref. */
   async steerDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_STEER(orgId), req);
   }
@@ -28681,7 +27980,7 @@ var ParallClient = class _ParallClient {
     if (currentVersion !== void 0) {
       extra["If-None-Match"] = currentVersion;
     }
-    const headers = this.buildHeaders(extra);
+    const headers = this.buildHeaders(ENDPOINTS.PLATFORM_CONFIG, extra);
     let res;
     try {
       res = await fetch(url, {
@@ -29129,8 +28428,8 @@ var ParallClient = class _ParallClient {
   async deleteWikiRestriction(orgId, wikiId, restrictionId) {
     await this.request("DELETE", ENDPOINTS.WIKI_RESTRICTION(orgId, wikiId, restrictionId));
   }
-  async getWikiAccessStatus(orgId, wikiId, path9) {
-    return this.request("GET", ENDPOINTS.WIKI_ACCESS_STATUS(orgId, wikiId), void 0, path9 ? { path: path9 } : void 0);
+  async getWikiAccessStatus(orgId, wikiId, path11) {
+    return this.request("GET", ENDPOINTS.WIKI_ACCESS_STATUS(orgId, wikiId), void 0, path11 ? { path: path11 } : void 0);
   }
   async createWikiAccessRequest(orgId, wikiId, data) {
     await this.request("POST", ENDPOINTS.WIKI_ACCESS_REQUESTS(orgId, wikiId), data);
@@ -29139,14 +28438,14 @@ var ParallClient = class _ParallClient {
   async getWikiCommits(orgId, wikiId, params) {
     return this.request("GET", ENDPOINTS.WIKI_COMMITS(orgId, wikiId), void 0, params);
   }
-  async getWikiFileCommits(orgId, wikiId, path9, params) {
+  async getWikiFileCommits(orgId, wikiId, path11, params) {
     return this.request("GET", ENDPOINTS.WIKI_FILE_COMMITS(orgId, wikiId), void 0, {
-      path: path9,
+      path: path11,
       ...params
     });
   }
-  async getWikiBlame(orgId, wikiId, path9, ref) {
-    return this.request("GET", ENDPOINTS.WIKI_BLAME(orgId, wikiId), void 0, { path: path9, ref });
+  async getWikiBlame(orgId, wikiId, path11, ref) {
+    return this.request("GET", ENDPOINTS.WIKI_BLAME(orgId, wikiId), void 0, { path: path11, ref });
   }
   // ---- Wiki Operations (audit log) ----
   async getWikiOperations(orgId, wikiId, params) {
@@ -29590,612 +28889,1390 @@ var ParallWs = class {
       this.ws.close();
       this.ws = null;
     }
-    this.setState("disconnected");
-  }
-  // ---- Client -> Server messages ----
-  /** Tell the server which chats the user is currently viewing (no auth implications). */
-  watch(chatIds) {
-    this.send({ type: WS_EVENTS.WATCH, data: { chat_ids: chatIds } });
+    this.setState("disconnected");
+  }
+  // ---- Client -> Server messages ----
+  /** Tell the server which chats the user is currently viewing (no auth implications). */
+  watch(chatIds) {
+    this.send({ type: WS_EVENTS.WATCH, data: { chat_ids: chatIds } });
+  }
+  sendTyping(chatId, action, threadRootId) {
+    this.send({
+      type: WS_EVENTS.TYPING,
+      data: { chat_id: chatId, thread_root_id: threadRootId ?? null, action }
+    });
+  }
+  /** Send an agent heartbeat with telemetry data. */
+  sendAgentHeartbeat(sessionId, telemetry) {
+    this.send({
+      type: WS_EVENTS.AGENT_HEARTBEAT,
+      data: { session_id: sessionId, telemetry }
+    });
+  }
+  sendEvent(type, data) {
+    this.send({ type, data });
+  }
+  // ---- Event listeners ----
+  on(event, handler) {
+    let set = this.listeners.get(event);
+    if (!set) {
+      set = /* @__PURE__ */ new Set();
+      this.listeners.set(event, set);
+    }
+    set.add(handler);
+    return () => {
+      set.delete(handler);
+    };
+  }
+  off(event, handler) {
+    this.listeners.get(event)?.delete(handler);
+  }
+  onStateChange(handler) {
+    this.stateListeners.add(handler);
+    return () => {
+      this.stateListeners.delete(handler);
+    };
+  }
+  // ---- Internal ----
+  send(frame) {
+    if (this.ws?.readyState === WebSocket.OPEN) {
+      this.ws.send(JSON.stringify(frame));
+    }
+  }
+  handleFrame(frame) {
+    this.lastReceivedAt = Date.now();
+    this.clearProbe();
+    if (frame.seq !== void 0) {
+      this.lastSeq = frame.seq;
+    }
+    if (frame.type === WS_EVENTS.HELLO) {
+      const interval = frame.data.heartbeat_interval;
+      this.startHeartbeat(interval);
+    }
+    const handlers = this.listeners.get(frame.type);
+    if (handlers) {
+      for (const handler of handlers) {
+        handler(frame.data, frame.seq);
+      }
+    }
+  }
+  startHeartbeat(intervalSec) {
+    this.stopHeartbeat();
+    if (!Number.isFinite(intervalSec) || intervalSec <= 0) {
+      console.error("Invalid heartbeat interval from server:", intervalSec);
+      return;
+    }
+    this.heartbeatIntervalMs = intervalSec * 1e3;
+    this.heartbeatTimer = setInterval(() => {
+      if (this.lastReceivedAt > 0 && Date.now() - this.lastReceivedAt > this.heartbeatIntervalMs * 1.5) {
+        this.probeConnection();
+        return;
+      }
+      this.send({ type: WS_EVENTS.PING, data: { ts: Date.now() } });
+    }, intervalSec * 1e3);
+  }
+  stopHeartbeat() {
+    if (this.heartbeatTimer) {
+      clearInterval(this.heartbeatTimer);
+      this.heartbeatTimer = null;
+    }
+  }
+  scheduleReconnect() {
+    this.setState("reconnecting");
+    this.clearReconnect();
+    const base = Math.min(this.options.reconnectInterval * Math.pow(2, this.reconnectAttempts), this.options.maxReconnectInterval);
+    const delay = base * (0.5 + Math.random() * 0.5);
+    this.reconnectAttempts++;
+    this.reconnectTimer = setTimeout(() => {
+      this.connect();
+    }, delay);
+  }
+  clearReconnect() {
+    if (this.reconnectTimer) {
+      clearTimeout(this.reconnectTimer);
+      this.reconnectTimer = null;
+    }
+  }
+  /** Force-close a dead/stale connection and trigger reconnect. */
+  forceReconnect() {
+    this.stopHeartbeat();
+    this.clearReconnect();
+    this.clearProbe();
+    if (this.ws) {
+      this.ws.onclose = null;
+      this.ws.onopen = null;
+      this.ws.onerror = null;
+      this.ws.onmessage = null;
+      try {
+        this.ws.close();
+      } catch {
+      }
+      this.ws = null;
+    }
+    if (this.options.reconnect && !this.intentionalClose) {
+      this.scheduleReconnect();
+    } else {
+      this.setState("disconnected");
+    }
+  }
+  // ---- Browser event listeners for proactive reconnection ----
+  setupBrowserListeners() {
+    if (this.browserListenersActive)
+      return;
+    this.browserListenersActive = true;
+    if (typeof document !== "undefined") {
+      document.addEventListener("visibilitychange", this.handleVisibilityChange);
+    }
+    if (typeof window !== "undefined") {
+      window.addEventListener("online", this.handleOnline);
+    }
+  }
+  teardownBrowserListeners() {
+    if (!this.browserListenersActive)
+      return;
+    this.browserListenersActive = false;
+    if (typeof document !== "undefined") {
+      document.removeEventListener("visibilitychange", this.handleVisibilityChange);
+    }
+    if (typeof window !== "undefined") {
+      window.removeEventListener("online", this.handleOnline);
+    }
+  }
+  /**
+   * Send a ping and arm a short timeout. If no frame arrives within 5s the
+   * connection is assumed dead and force-reconnected. Any received frame
+   * (including the pong) cancels the timer via clearProbe() in handleFrame.
+   */
+  probeConnection() {
+    if (this.probeTimer)
+      return;
+    this.send({ type: WS_EVENTS.PING, data: { ts: Date.now() } });
+    this.probeTimer = setTimeout(() => {
+      this.forceReconnect();
+    }, 5e3);
+  }
+  clearProbe() {
+    if (this.probeTimer) {
+      clearTimeout(this.probeTimer);
+      this.probeTimer = null;
+    }
+  }
+  /** Tab returned to foreground — verify connection or accelerate reconnect. */
+  handleVisibilityChange = () => {
+    if (typeof document !== "undefined" && document.hidden)
+      return;
+    if (this._state === "connected") {
+      if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+        this.forceReconnect();
+      } else {
+        this.probeConnection();
+      }
+    } else if (this._state === "reconnecting") {
+      this.clearReconnect();
+      this.reconnectAttempts = 0;
+      this.connect();
+    }
+  };
+  /** Network restored — accelerate reconnection. */
+  handleOnline = () => {
+    if (this.intentionalClose)
+      return;
+    if (this._state === "connected") {
+      if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+        this.forceReconnect();
+      } else {
+        this.probeConnection();
+      }
+    } else if (this._state === "reconnecting") {
+      this.clearReconnect();
+      this.reconnectAttempts = 0;
+      this.connect();
+    }
+  };
+  setState(state) {
+    this._state = state;
+    for (const listener of this.stateListeners) {
+      listener(state);
+    }
   }
-  sendTyping(chatId, action, threadRootId) {
-    this.send({
-      type: WS_EVENTS.TYPING,
-      data: { chat_id: chatId, thread_root_id: threadRootId ?? null, action }
-    });
+};
+
+// ts/agent-core/dist/lane-ledger.js
+var LedgerUnsupportedError = class extends Error {
+};
+function isStaleLane(err) {
+  return err instanceof ApiError && err.status === 409 && err.code === "STALE_LANE";
+}
+function isEndpointMissing(err) {
+  return err instanceof ApiError && err.status === 404 && !err.code;
+}
+var LaneLedger = class {
+  opts;
+  lanes = /* @__PURE__ */ new Map();
+  constructor(opts) {
+    this.opts = opts;
   }
-  /** Send an agent heartbeat with telemetry data. */
-  sendAgentHeartbeat(sessionId, telemetry) {
-    this.send({
-      type: WS_EVENTS.AGENT_HEARTBEAT,
-      data: { session_id: sessionId, telemetry }
-    });
+  get contextDir() {
+    return this.opts.contextDir;
   }
-  sendEvent(type, data) {
-    this.send({ type, data });
+  /** Only chat message events ride the lane ledger; typed events stay on the legacy ack path. */
+  handles(event) {
+    return event.type === "message" && event.targetId.startsWith("cht_");
   }
-  // ---- Event listeners ----
-  on(event, handler) {
-    let set = this.listeners.get(event);
-    if (!set) {
-      set = /* @__PURE__ */ new Set();
-      this.listeners.set(event, set);
+  laneKeyFor(event) {
+    if (event.type !== "message" && event.dispatchEventId) {
+      return laneKeyForTarget(`dsp:${event.dispatchEventId}`);
     }
-    set.add(handler);
-    return () => {
-      set.delete(handler);
-    };
+    return laneKeyForTarget(`prll://${event.targetId}`, event.threadRootId);
   }
-  off(event, handler) {
-    this.listeners.get(event)?.delete(handler);
+  getForEvent(event) {
+    return this.lanes.get(this.laneKeyFor(event));
   }
-  onStateChange(handler) {
-    this.stateListeners.add(handler);
-    return () => {
-      this.stateListeners.delete(handler);
-    };
+  laneContextPath(lane) {
+    return laneContextFilePath(this.opts.contextDir, lane.targetUri, lane.threadRootId);
   }
-  // ---- Internal ----
-  send(frame) {
-    if (this.ws?.readyState === WebSocket.OPEN) {
-      this.ws.send(JSON.stringify(frame));
+  /**
+   * Claim (or reuse) the lane for a group of same-lane message events and
+   * fold every group member into it. Returns 'foreign' when a healthy
+   * incumbent (another pod) holds the resource — the caller must not
+   * dispatch; the events stay pending server-side and re-drive after the
+   * incumbent completes.
+   */
+  async ensureLane(events) {
+    const trigger = events[events.length - 1];
+    const laneKey = this.laneKeyFor(trigger);
+    let lane = this.lanes.get(laneKey);
+    if (!lane) {
+      const targetUri = `prll://${trigger.targetId}`;
+      let res;
+      try {
+        res = await this.opts.client.claimDispatch(this.opts.orgId, {
+          target_uri: targetUri,
+          thread_root_id: trigger.threadRootId,
+          limit: 100
+        });
+      } catch (err) {
+        if (isEndpointMissing(err))
+          throw new LedgerUnsupportedError("claim endpoint unavailable");
+        throw err;
+      }
+      if (!res.claimed || !res.lane) {
+        this.opts.log?.info(`lane for ${targetUri} held by a healthy incumbent \u2014 leaving events pending for re-drive`);
+        return null;
+      }
+      const leaseUntilMs = Date.parse(res.lease_until ?? "");
+      lane = {
+        laneKey,
+        lane: res.lane,
+        targetUri,
+        threadRootId: trigger.threadRootId,
+        folded: /* @__PURE__ */ new Map(),
+        ...Number.isNaN(leaseUntilMs) ? {} : { leaseUntilMs, leaseTtlMs: Math.max(leaseUntilMs - Date.now(), 6e4) }
+      };
+      for (const ev of res.events ?? []) {
+        lane.folded.set(ev.source_id, ev.id);
+      }
+      this.lanes.set(laneKey, lane);
     }
-  }
-  handleFrame(frame) {
-    this.lastReceivedAt = Date.now();
-    this.clearProbe();
-    if (frame.seq !== void 0) {
-      this.lastSeq = frame.seq;
+    for (const ev of events) {
+      if (lane.folded.has(ev.messageId))
+        continue;
+      try {
+        const res = await this.opts.client.steerDispatch(this.opts.orgId, {
+          lane: lane.lane,
+          target_uri: lane.targetUri,
+          thread_root_id: lane.threadRootId,
+          ...ev.dispatchEventId ? { dispatch_event_id: ev.dispatchEventId } : { source_type: "message", source_id: ev.messageId }
+        });
+        lane.folded.set(ev.messageId, res.dispatch_event_id);
+      } catch (err) {
+        if (isStaleLane(err)) {
+          this.lanes.delete(laneKey);
+          return null;
+        }
+        this.opts.log?.warn(`steer fold failed for ${ev.messageId} \u2014 failing closed, releasing lane: ${String(err)}`);
+        await this.release(laneKey);
+        return null;
+      }
     }
-    if (frame.type === WS_EVENTS.HELLO) {
-      const interval = frame.data.heartbeat_interval;
-      this.startHeartbeat(interval);
+    return lane;
+  }
+  /**
+   * Fold a live mid-turn message into its active lane BEFORE injecting it
+   * into the running turn. Injection without a successful fold is forbidden —
+   * an un-folded injected message would be re-driven after complete and the
+   * model would handle it twice.
+   */
+  async steerLive(event) {
+    const laneKey = this.laneKeyFor(event);
+    const lane = this.lanes.get(laneKey);
+    if (!lane)
+      return false;
+    if (lane.folded.has(event.messageId))
+      return true;
+    try {
+      const res = await this.opts.client.steerDispatch(this.opts.orgId, {
+        lane: lane.lane,
+        target_uri: lane.targetUri,
+        thread_root_id: lane.threadRootId,
+        ...event.dispatchEventId ? { dispatch_event_id: event.dispatchEventId } : { source_type: "message", source_id: event.messageId }
+      });
+      lane.folded.set(event.messageId, res.dispatch_event_id);
+      return true;
+    } catch (err) {
+      if (isStaleLane(err)) {
+        this.lanes.delete(laneKey);
+      } else {
+        this.opts.log?.warn(`live steer failed for ${event.messageId}: ${String(err)}`);
+      }
+      return false;
     }
-    const handlers = this.listeners.get(frame.type);
-    if (handlers) {
-      for (const handler of handlers) {
-        handler(frame.data, frame.seq);
+  }
+  /**
+   * Complete the lane when no local work remains for it: the server sweeps
+   * still-leased members as no_action, releases the occupancy row, and
+   * re-drives any same-target pending work. A STALE_LANE answer means a
+   * takeover already owns the resource — local state is dropped either way.
+   */
+  async completeIfIdle(laneKey, hasMoreLocal) {
+    const lane = this.lanes.get(laneKey);
+    if (!lane || hasMoreLocal)
+      return;
+    this.lanes.delete(laneKey);
+    this.removeLaneContext(lane);
+    try {
+      const res = await this.opts.client.completeDispatch(this.opts.orgId, {
+        lane: lane.lane,
+        target_uri: lane.targetUri,
+        thread_root_id: lane.threadRootId
+      });
+      if (res.swept_no_action > 0 || res.redriven) {
+        this.opts.log?.info(`lane complete for ${lane.targetUri}: swept ${res.swept_no_action} no_action, redriven=${res.redriven}`);
+      }
+    } catch (err) {
+      if (isStaleLane(err)) {
+        this.opts.log?.info(`lane complete skipped for ${lane.targetUri} \u2014 taken over`);
+        return;
       }
+      this.opts.log?.warn(`lane complete failed for ${lane.targetUri}: ${String(err)}`);
     }
   }
-  startHeartbeat(intervalSec) {
-    this.stopHeartbeat();
-    if (!Number.isFinite(intervalSec) || intervalSec <= 0) {
-      console.error("Invalid heartbeat interval from server:", intervalSec);
+  /**
+   * Long-turn keepalive: renew the lane's lease on runtime activity, throttled
+   * so a chatty turn doesn't spam the server. Without this, a legitimately
+   * long turn (> lane TTL) would be dethroned mid-flight and every subsequent
+   * write misfired with STALE_LANE — the design doc's "long turns renew via
+   * step writes". Fire-and-forget: a failed renewal is surfaced by the next
+   * write's incumbency check anyway.
+   */
+  maybeRenew(lane) {
+    const now = Date.now();
+    const ttl = lane.leaseTtlMs ?? 10 * 6e4;
+    const until = lane.leaseUntilMs ?? now;
+    if (until - now > ttl / 2)
+      return;
+    lane.leaseUntilMs = now + ttl;
+    void this.opts.client.heartbeatDispatchLane(this.opts.orgId, {
+      lane: lane.lane,
+      target_uri: lane.targetUri,
+      thread_root_id: lane.threadRootId
+    }).then((res) => {
+      const until2 = Date.parse(res?.lease_until ?? "");
+      if (!Number.isNaN(until2))
+        lane.leaseUntilMs = until2;
+    }).catch((err) => {
+      if (isStaleLane(err)) {
+        this.lanes.delete(lane.laneKey);
+        this.opts.log?.warn(`lane ${lane.targetUri} was taken over during the turn`);
+        return;
+      }
+      this.opts.log?.warn(`lane heartbeat failed for ${lane.targetUri}: ${String(err)}`);
+    });
+  }
+  /**
+   * Release a lane's unresolved members back to pending (dispatch error /
+   * shutdown) so the next pod re-claims immediately instead of waiting out
+   * the lease.
+   */
+  async release(laneKey) {
+    const lane = this.lanes.get(laneKey);
+    if (!lane)
       return;
+    this.lanes.delete(laneKey);
+    this.removeLaneContext(lane);
+    try {
+      await this.opts.client.releaseDispatchLane(this.opts.orgId, lane.lane);
+    } catch (err) {
+      this.opts.log?.warn(`lane release failed for ${lane.targetUri}: ${String(err)}`);
     }
-    this.heartbeatIntervalMs = intervalSec * 1e3;
-    this.heartbeatTimer = setInterval(() => {
-      if (this.lastReceivedAt > 0 && Date.now() - this.lastReceivedAt > this.heartbeatIntervalMs * 1.5) {
-        this.probeConnection();
-        return;
-      }
-      this.send({ type: WS_EVENTS.PING, data: { ts: Date.now() } });
-    }, intervalSec * 1e3);
   }
-  stopHeartbeat() {
-    if (this.heartbeatTimer) {
-      clearInterval(this.heartbeatTimer);
-      this.heartbeatTimer = null;
+  async releaseAll() {
+    const keys = [...this.lanes.keys()];
+    for (const key of keys) {
+      await this.release(key);
     }
   }
-  scheduleReconnect() {
-    this.setState("reconnecting");
-    this.clearReconnect();
-    const base = Math.min(this.options.reconnectInterval * Math.pow(2, this.reconnectAttempts), this.options.maxReconnectInterval);
-    const delay = base * (0.5 + Math.random() * 0.5);
-    this.reconnectAttempts++;
-    this.reconnectTimer = setTimeout(() => {
-      this.connect();
-    }, delay);
+  /** True when any lane is currently active (used by shutdown logging). */
+  get activeCount() {
+    return this.lanes.size;
   }
-  clearReconnect() {
-    if (this.reconnectTimer) {
-      clearTimeout(this.reconnectTimer);
-      this.reconnectTimer = null;
+  /**
+   * Claim the single-member lane of one typed WorkItem (resource = dsp:<id>),
+   * by WorkItem id or by source identity (the live task.assigned event has no
+   * WorkItem id). Returns null when a healthy incumbent (another pod) holds
+   * it or the WorkItem is already resolved — the caller must skip processing.
+   */
+  async claimTyped(ref) {
+    let res;
+    try {
+      res = await this.opts.client.claimDispatch(this.opts.orgId, {
+        dispatch_event_id: ref.dispatchEventId,
+        source_type: ref.dispatchEventId ? void 0 : ref.sourceType,
+        source_id: ref.dispatchEventId ? void 0 : ref.sourceId
+      });
+    } catch (err) {
+      if (isEndpointMissing(err))
+        throw new LedgerUnsupportedError("claim endpoint unavailable");
+      throw err;
     }
+    if (!res.claimed || !res.lane || !res.events?.length)
+      return null;
+    const workItem = res.events[0];
+    const targetUri = `dsp:${workItem.id}`;
+    const leaseUntilMs = Date.parse(res.lease_until ?? "");
+    const lane = {
+      laneKey: laneKeyForTarget(targetUri),
+      lane: res.lane,
+      targetUri,
+      folded: /* @__PURE__ */ new Map([[workItem.source_id, workItem.id]]),
+      typedDispatchEventId: workItem.id,
+      ...Number.isNaN(leaseUntilMs) ? {} : { leaseUntilMs, leaseTtlMs: Math.max(leaseUntilMs - Date.now(), 6e4) }
+    };
+    this.lanes.set(lane.laneKey, lane);
+    return lane;
   }
-  /** Force-close a dead/stale connection and trigger reconnect. */
-  forceReconnect() {
-    this.stopHeartbeat();
-    this.clearReconnect();
-    this.clearProbe();
-    if (this.ws) {
-      this.ws.onclose = null;
-      this.ws.onopen = null;
-      this.ws.onerror = null;
-      this.ws.onmessage = null;
+  /**
+   * Remove the per-lane context file (and its CLI sidecar) when the lane
+   * ends. A leftover file would make a later cross-context send to the same
+   * target bind a dead lane token and misfire with STALE_LANE instead of
+   * taking the plain non-ledger path.
+   */
+  removeLaneContext(lane) {
+    const contextPath = this.laneContextPath(lane);
+    for (const p of [contextPath, contextPath.replace(/\.json$/, ".reply-state.json")]) {
       try {
-        this.ws.close();
+        fs.rmSync(p, { force: true });
       } catch {
       }
-      this.ws = null;
-    }
-    if (this.options.reconnect && !this.intentionalClose) {
-      this.scheduleReconnect();
-    } else {
-      this.setState("disconnected");
     }
   }
-  // ---- Browser event listeners for proactive reconnection ----
-  setupBrowserListeners() {
-    if (this.browserListenersActive)
-      return;
-    this.browserListenersActive = true;
-    if (typeof document !== "undefined") {
-      document.addEventListener("visibilitychange", this.handleVisibilityChange);
-    }
-    if (typeof window !== "undefined") {
-      window.addEventListener("online", this.handleOnline);
+};
+
+// ts/agent-core/dist/gateway-lane-flow.js
+async function dispatchLaneGroup(host, opts) {
+  const ledger = host.laneLedger;
+  const event = opts.events[opts.events.length - 1];
+  let lane;
+  try {
+    lane = await ledger.ensureLane(opts.events);
+  } catch (err) {
+    if (!(err instanceof LedgerUnsupportedError))
+      throw err;
+    host.disableLedger("claim endpoint missing");
+    await host.emitDispatchReceived(event);
+    const dispatched2 = await host.runDispatch(event, opts.sessionKey, opts.body, opts.earlier, opts.captureText);
+    if (!dispatched2)
+      return "shutdown";
+    for (const ev of opts.events) {
+      host.opts.client.ackDispatch(host.opts.config.org_id, {
+        source_type: ev.ackSourceType ?? "message",
+        source_id: ev.ackSourceId ?? ev.messageId
+      }).catch(() => {
+      });
     }
+    return "dispatched";
   }
-  teardownBrowserListeners() {
-    if (!this.browserListenersActive)
-      return;
-    this.browserListenersActive = false;
-    if (typeof document !== "undefined") {
-      document.removeEventListener("visibilitychange", this.handleVisibilityChange);
-    }
-    if (typeof window !== "undefined") {
-      window.removeEventListener("online", this.handleOnline);
+  if (!lane) {
+    for (const ev of opts.events) {
+      host.dispatchedMessages.delete(ev.messageId);
     }
+    return "foreign";
   }
-  /**
-   * Send a ping and arm a short timeout. If no frame arrives within 5s the
-   * connection is assumed dead and force-reconnected. Any received frame
-   * (including the pong) cancels the timer via clearProbe() in handleFrame.
-   */
-  probeConnection() {
-    if (this.probeTimer)
-      return;
-    this.send({ type: WS_EVENTS.PING, data: { ts: Date.now() } });
-    this.probeTimer = setTimeout(() => {
-      this.forceReconnect();
-    }, 5e3);
+  let dispatched = false;
+  try {
+    dispatched = await host.runDispatch(event, opts.sessionKey, opts.body, opts.earlier, opts.captureText);
+  } catch (err) {
+    await ledger.release(lane.laneKey).catch(() => {
+    });
+    throw err;
   }
-  clearProbe() {
-    if (this.probeTimer) {
-      clearTimeout(this.probeTimer);
-      this.probeTimer = null;
+  if (!dispatched) {
+    return "shutdown";
+  }
+  const pendingInjections = host.opts.dispatchAdapter.hasPendingInjections?.(opts.sessionKey) ?? false;
+  await ledger.completeIfIdle(lane.laneKey, pendingInjections || opts.hasMoreLocal());
+  return "dispatched";
+}
+var TYPED_BACKOFF_BASE_MS = 2e3;
+var TYPED_BACKOFF_CAP_MS = 5 * 6e4;
+var TYPED_BACKOFF_MAP_CAP = 512;
+async function consumeTypedDispatch(host, ref, run, ack) {
+  const backoffKey = ref.dispatchEventId ?? `${ref.sourceType}:${ref.sourceId}`;
+  const armed = host.typedRedriveBackoff.get(backoffKey);
+  if (armed) {
+    const waitMs = armed.until - Date.now();
+    if (waitMs > 0) {
+      host.opts.log?.info(`typed dispatch ${backoffKey} backing off ${Math.ceil(waitMs / 1e3)}s after ${armed.failures} failed consume(s)`);
+      await new Promise((resolve4) => {
+        const timer = setTimeout(resolve4, waitMs);
+        timer.unref?.();
+      });
     }
+    if (host.shuttingDown)
+      return;
   }
-  /** Tab returned to foreground — verify connection or accelerate reconnect. */
-  handleVisibilityChange = () => {
-    if (typeof document !== "undefined" && document.hidden)
+  const settleAck = (ackResult) => ackResult !== false;
+  const settle = (acked2) => {
+    if (acked2) {
+      host.typedRedriveBackoff.delete(backoffKey);
       return;
-    if (this._state === "connected") {
-      if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
-        this.forceReconnect();
-      } else {
-        this.probeConnection();
+    }
+    const failures = (host.typedRedriveBackoff.get(backoffKey)?.failures ?? 0) + 1;
+    const backoffMs = Math.min(TYPED_BACKOFF_CAP_MS, TYPED_BACKOFF_BASE_MS * 2 ** (failures - 1));
+    if (host.typedRedriveBackoff.delete(backoffKey) === false && host.typedRedriveBackoff.size >= TYPED_BACKOFF_MAP_CAP) {
+      const oldest = host.typedRedriveBackoff.keys().next().value;
+      if (oldest !== void 0)
+        host.typedRedriveBackoff.delete(oldest);
+    }
+    host.typedRedriveBackoff.set(backoffKey, { failures, until: Date.now() + backoffMs });
+  };
+  const runLegacy = async () => {
+    let acked2 = false;
+    try {
+      if (await run(ref.dispatchEventId)) {
+        acked2 = settleAck(await ack(ref.dispatchEventId));
       }
-    } else if (this._state === "reconnecting") {
-      this.clearReconnect();
-      this.reconnectAttempts = 0;
-      this.connect();
+    } finally {
+      settle(acked2);
     }
   };
-  /** Network restored — accelerate reconnection. */
-  handleOnline = () => {
-    if (this.intentionalClose)
+  if (!host.laneLedger || host.ledgerDisabled) {
+    await runLegacy();
+    return;
+  }
+  let lane;
+  try {
+    lane = await host.laneLedger.claimTyped(ref);
+  } catch (err) {
+    if (err instanceof LedgerUnsupportedError) {
+      host.disableLedger("claim endpoint missing");
+      await runLegacy();
       return;
-    if (this._state === "connected") {
-      if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
-        this.forceReconnect();
-      } else {
-        this.probeConnection();
-      }
-    } else if (this._state === "reconnecting") {
-      this.clearReconnect();
-      this.reconnectAttempts = 0;
-      this.connect();
     }
+    throw err;
+  }
+  if (!lane) {
+    host.opts.log?.info(`typed dispatch ${ref.dispatchEventId ?? `${ref.sourceType}:${ref.sourceId}`} not claimable (held elsewhere or already resolved) \u2014 skipping`);
+    return;
+  }
+  let acked = false;
+  try {
+    if (await run(lane.typedDispatchEventId)) {
+      acked = settleAck(await ack(lane.typedDispatchEventId));
+    }
+  } finally {
+    settle(acked);
+    await host.laneLedger.completeIfIdle(lane.laneKey, false).catch(() => {
+    });
+  }
+}
+async function consumeMessageWorkItem(host, item) {
+  if (host.shuttingDown)
+    return;
+  if (!host.tryClaimMessage(item.source_id))
+    return;
+  const ackItem = () => {
+    host.opts.client.ackDispatchByID(host.opts.config.org_id, item.id).catch(() => {
+    });
   };
-  setState(state) {
-    this._state = state;
-    for (const listener of this.stateListeners) {
-      listener(state);
+  let msg = null;
+  try {
+    msg = await host.opts.client.getMessage(item.source_id);
+  } catch (err) {
+    const status = err?.status;
+    if (status !== 404) {
+      host.opts.log?.warn(`message fetch failed for ${item.source_id}, leaving pending: ${String(err)}`);
+      host.dispatchedMessages.delete(item.source_id);
+      return;
     }
   }
-};
-
-// ts/agent-core/dist/lane-ledger.js
-import * as fs from "node:fs";
-var LedgerUnsupportedError = class extends Error {
-};
-function isStaleLane(err) {
-  return err instanceof ApiError && err.status === 409 && err.code === "STALE_LANE";
-}
-function isEndpointMissing(err) {
-  return err instanceof ApiError && err.status === 404 && !err.code;
-}
-var LaneLedger = class {
-  opts;
-  lanes = /* @__PURE__ */ new Map();
-  constructor(opts) {
-    this.opts = opts;
+  if (!msg || msg.sender_id === host.opts.agentUserId) {
+    host.dispatchedMessages.delete(item.source_id);
+    ackItem();
+    return;
   }
-  get contextDir() {
-    return this.opts.contextDir;
+  const decision = await host.buildMessageDispatchDecision(item.chat_id, msg);
+  if (decision.action === "retry") {
+    host.dispatchedMessages.delete(item.source_id);
+    return;
   }
-  /** Only chat message events ride the lane ledger; typed events stay on the legacy ack path. */
-  handles(event) {
-    return event.type === "message" && event.targetId.startsWith("cht_");
+  if (decision.action === "skip") {
+    host.dispatchedMessages.delete(item.source_id);
+    ackItem();
+    return;
   }
-  laneKeyFor(event) {
-    if (event.type !== "message" && event.dispatchEventId) {
-      return laneKeyForTarget(`dsp:${event.dispatchEventId}`);
+  decision.event.dispatchEventId = item.id;
+  const laneResolved = host.usesLaneLedger(decision.event);
+  try {
+    const dispatched = await host.handleInboundEvent(decision.event);
+    if (dispatched) {
+      if (!laneResolved)
+        ackItem();
+    } else {
+      host.dispatchedMessages.delete(item.source_id);
     }
-    return laneKeyForTarget(`prll://${event.targetId}`, event.threadRootId);
+  } catch (err) {
+    host.dispatchedMessages.delete(item.source_id);
+    throw err;
   }
-  getForEvent(event) {
-    return this.lanes.get(this.laneKeyFor(event));
+}
+
+// ts/agent-core/dist/session-state.js
+function normalizeSessionKey(sessionKey) {
+  return sessionKey.toLowerCase();
+}
+var sessionChatIdMap = /* @__PURE__ */ new Map();
+var sessionMessageIdMap = /* @__PURE__ */ new Map();
+var dispatchMessageIdMap = /* @__PURE__ */ new Map();
+var dispatchNoReplyMap = /* @__PURE__ */ new Map();
+function setSessionChatId(sessionKey, chatId) {
+  sessionChatIdMap.set(normalizeSessionKey(sessionKey), chatId);
+}
+function setSessionMessageId(sessionKey, messageId) {
+  sessionMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
+}
+function clearSessionMessageId(sessionKey) {
+  sessionMessageIdMap.delete(normalizeSessionKey(sessionKey));
+}
+function setDispatchMessageId(sessionKey, messageId) {
+  dispatchMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
+}
+function clearDispatchMessageId(sessionKey) {
+  dispatchMessageIdMap.delete(normalizeSessionKey(sessionKey));
+}
+function setDispatchNoReply(sessionKey, noReply) {
+  dispatchNoReplyMap.set(normalizeSessionKey(sessionKey), noReply);
+}
+function clearDispatchNoReply(sessionKey) {
+  dispatchNoReplyMap.delete(normalizeSessionKey(sessionKey));
+}
+var dispatchMetricsMap = /* @__PURE__ */ new Map();
+function resetDispatchMetrics(sessionKey) {
+  dispatchMetricsMap.set(normalizeSessionKey(sessionKey), {
+    deliver_text_chunks: 0,
+    deliver_text_chars: 0,
+    message_send_attempts: 0,
+    message_send_successes: 0,
+    no_reply_called: false,
+    tool_call_count: 0,
+    started_at: Date.now()
+  });
+}
+function getDispatchMetrics(sessionKey) {
+  return dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+}
+function clearDispatchMetrics(sessionKey) {
+  dispatchMetricsMap.delete(normalizeSessionKey(sessionKey));
+}
+function recordDeliverText(sessionKey, charCount) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.deliver_text_chunks++;
+  m.deliver_text_chars += charCount;
+}
+function recordMessageSend(sessionKey, success) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.message_send_attempts++;
+  if (success)
+    m.message_send_successes++;
+}
+function recordNoReply(sessionKey) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.no_reply_called = true;
+}
+function recordToolCall(sessionKey) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.tool_call_count++;
+}
+
+// ts/agent-core/dist/routing.js
+var MAX_CONCURRENT_FORKS = 20;
+var defaultRoutingStrategy = (event, state) => {
+  if (state.mainCurrentTargetId === event.targetId) {
+    return { action: "buffer-main" };
   }
-  laneContextPath(lane) {
-    return laneContextFilePath(this.opts.contextDir, lane.targetUri, lane.threadRootId);
+  const existingForkKey = state.activeForks.get(event.targetId);
+  if (existingForkKey)
+    return { action: "buffer-fork", forkKey: existingForkKey };
+  if (state.activeForks.size >= MAX_CONCURRENT_FORKS) {
+    return { action: "buffer-main" };
   }
-  /**
-   * Claim (or reuse) the lane for a group of same-lane message events and
-   * fold every group member into it. Returns 'foreign' when a healthy
-   * incumbent (another pod) holds the resource — the caller must not
-   * dispatch; the events stay pending server-side and re-drive after the
-   * incumbent completes.
-   */
-  async ensureLane(events) {
-    const trigger = events[events.length - 1];
-    const laneKey = this.laneKeyFor(trigger);
-    let lane = this.lanes.get(laneKey);
-    if (!lane) {
-      const targetUri = `prll://${trigger.targetId}`;
-      let res;
-      try {
-        res = await this.opts.client.claimDispatch(this.opts.orgId, {
-          target_uri: targetUri,
-          thread_root_id: trigger.threadRootId,
-          limit: 100
-        });
-      } catch (err) {
-        if (isEndpointMissing(err))
-          throw new LedgerUnsupportedError("claim endpoint unavailable");
-        throw err;
-      }
-      if (!res.claimed || !res.lane) {
-        this.opts.log?.info(`lane for ${targetUri} held by a healthy incumbent \u2014 leaving events pending for re-drive`);
-        return null;
-      }
-      const leaseUntilMs = Date.parse(res.lease_until ?? "");
-      lane = {
-        laneKey,
-        lane: res.lane,
-        targetUri,
-        threadRootId: trigger.threadRootId,
-        folded: /* @__PURE__ */ new Map(),
-        ...Number.isNaN(leaseUntilMs) ? {} : { leaseUntilMs, leaseTtlMs: Math.max(leaseUntilMs - Date.now(), 6e4) }
-      };
-      for (const ev of res.events ?? []) {
-        lane.folded.set(ev.source_id, ev.id);
+  return { action: "new-fork" };
+};
+function routeTrigger(event, state, strategy = defaultRoutingStrategy) {
+  const existingForkKey = state.activeForks.get(event.targetId);
+  if (existingForkKey)
+    return { action: "buffer-fork", forkKey: existingForkKey };
+  if (!state.mainDispatching)
+    return { action: "main" };
+  return strategy(event, state);
+}
+
+// ts/agent-core/dist/event-format.js
+function sanitizeMeta(value) {
+  return value.replace(/[\r\n]+/g, " ").replace(/[[\]|]/g, " ").trim();
+}
+function buildEventBody(event) {
+  const lines = [];
+  if (event.type === "message") {
+    lines.push(`[Event: message.new]`);
+    const chatLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
+    lines.push(`[Chat: ${chatLabel} | type: ${event.targetType ?? "unknown"}]`);
+    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push(`[Message ID: prll://${event.messageId}]`);
+    if (event.threadRootId) {
+      const threadMeta = [
+        `prll://${event.threadRootId}`,
+        event.threadReplyCount != null ? `${event.threadReplyCount} replies` : null,
+        event.threadUnreadCount != null && event.threadUnreadCount > 0 ? `${event.threadUnreadCount} unread` : null,
+        event.threadUnreadCount != null && event.threadUnreadCount > 0 && event.threadUnreadSince ? `since: prll://${event.threadUnreadSince}` : null
+      ].filter(Boolean).join(" | ");
+      lines.push(`[Thread: ${threadMeta}]`);
+    }
+    if (event.unreadCount != null && event.unreadCount > 1) {
+      const countStr = event.unreadCount >= 1e3 ? "999+" : String(event.unreadCount);
+      const sinceStr = event.unreadSince ? ` | since: prll://${event.unreadSince}` : "";
+      let line = `[Unread: ${countStr} messages${sinceStr}]`;
+      if (event.unreadCount > 50)
+        line += ` \u2014 fetch recent context with --limit, not all`;
+      lines.push(line);
+    }
+    if (event.noReply)
+      lines.push(`[Hint: no_reply]`);
+    if (event.attachments?.length) {
+      for (const att of event.attachments) {
+        const sizeStr = att.fileSize >= 1048576 ? `${(att.fileSize / 1048576).toFixed(1)}MB` : `${Math.round(att.fileSize / 1024)}KB`;
+        lines.push(`[Attachment: prll://${att.id} | ${sanitizeMeta(att.mimeType)} | ${sizeStr} | ${sanitizeMeta(att.fileName)}]`);
       }
-      this.lanes.set(laneKey, lane);
     }
-    for (const ev of events) {
-      if (lane.folded.has(ev.messageId))
-        continue;
-      try {
-        const res = await this.opts.client.steerDispatch(this.opts.orgId, {
-          lane: lane.lane,
-          target_uri: lane.targetUri,
-          thread_root_id: lane.threadRootId,
-          ...ev.dispatchEventId ? { dispatch_event_id: ev.dispatchEventId } : { source_type: "message", source_id: ev.messageId }
-        });
-        lane.folded.set(ev.messageId, res.dispatch_event_id);
-      } catch (err) {
-        if (isStaleLane(err)) {
-          this.lanes.delete(laneKey);
-          return null;
-        }
-        this.opts.log?.warn(`steer fold failed for ${ev.messageId} \u2014 failing closed, releasing lane: ${String(err)}`);
-        await this.release(laneKey);
-        return null;
-      }
+    lines.push("", event.body);
+  } else if (event.type === "task_comment") {
+    lines.push(`[Event: task.comment.created]`);
+    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
+    lines.push(`[Task: ${taskLabel}]`);
+    if (event.deliveryReason)
+      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
+    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push(`[Comment ID: prll://${event.messageId}]`);
+    lines.push("", event.body);
+  } else if (event.type === "wiki_comment") {
+    lines.push(`[Event: wiki.comment.created]`);
+    const target = event.replyTargetUri ?? `prll://${event.targetId}`;
+    if (event.targetType === "changeset") {
+      lines.push(`[Wiki Changeset: ${target}]`);
+    } else {
+      lines.push(`[Wiki: ${event.targetName ? `${sanitizeMeta(event.targetName)} (${target})` : target}]`);
+    }
+    if (event.deliveryReason)
+      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
+    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push(`[Comment ID: prll://${event.messageId}]`);
+    lines.push("", event.body);
+  } else if (event.type === "approval") {
+    lines.push(`[Event: approval.decided]`);
+    lines.push(`[Approval: prll://${event.messageId}]`);
+    lines.push(`[Chat: prll://${event.targetId}]`);
+    lines.push(`[Decided by: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push("", event.body);
+  } else if (event.type === "schedule") {
+    lines.push(`[Event: schedule.fired]`);
+    lines.push(`[Schedule: prll://${event.targetId}]`);
+    lines.push(`[Run: prll://${event.messageId}]`);
+    if (event.scheduledFireAt)
+      lines.push(`[Scheduled at: ${sanitizeMeta(event.scheduledFireAt)}]`);
+    if (event.attachedUri)
+      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
+    lines.push("", event.body);
+  } else if (event.type === "channel_message") {
+    lines.push(`[Event: channel.message]`);
+    const providerLabel = sanitizeMeta(event.channelProvider ?? "external IM");
+    const convLabel = event.channelExternalConversationId ? `${sanitizeMeta(event.channelExternalConversationId)} (${sanitizeMeta(event.channelConversationType ?? "conversation")})` : sanitizeMeta(event.channelConversationType ?? "conversation");
+    lines.push(`[Channel: ${providerLabel} | conversation: ${convLabel}]`);
+    lines.push(`[From: ${sanitizeMeta(event.senderName)} (external user, not a Parall member)]`);
+    if (event.channelExternalMessageId) {
+      lines.push(`[External message ID: ${sanitizeMeta(event.channelExternalMessageId)}]`);
+    }
+    lines.push(`[Audience: this conversation lives on ${providerLabel}, OUTSIDE Parall. Readers cannot open prll:// links, Parall cards, or internal attachments \u2014 never include them in replies. Write plain conversational text.]`);
+    lines.push("", event.body);
+  } else if (event.type === "external_trigger") {
+    lines.push(`[Event: external.trigger]`);
+    lines.push(`[Trigger: prll://${event.targetId}]`);
+    lines.push(`[Run: prll://${event.messageId}]`);
+    if (event.externalConnectionId) {
+      const label = event.externalConnectionDisplayName ? `${sanitizeMeta(event.externalConnectionDisplayName)} (prll://${event.externalConnectionId})` : `prll://${event.externalConnectionId}`;
+      lines.push(`[Connection: ${label}]`);
     }
-    return lane;
-  }
-  /**
-   * Fold a live mid-turn message into its active lane BEFORE injecting it
-   * into the running turn. Injection without a successful fold is forbidden —
-   * an un-folded injected message would be re-driven after complete and the
-   * model would handle it twice.
-   */
-  async steerLive(event) {
-    const laneKey = this.laneKeyFor(event);
-    const lane = this.lanes.get(laneKey);
-    if (!lane)
-      return false;
-    if (lane.folded.has(event.messageId))
-      return true;
-    try {
-      const res = await this.opts.client.steerDispatch(this.opts.orgId, {
-        lane: lane.lane,
-        target_uri: lane.targetUri,
-        thread_root_id: lane.threadRootId,
-        ...event.dispatchEventId ? { dispatch_event_id: event.dispatchEventId } : { source_type: "message", source_id: event.messageId }
-      });
-      lane.folded.set(event.messageId, res.dispatch_event_id);
-      return true;
-    } catch (err) {
-      if (isStaleLane(err)) {
-        this.lanes.delete(laneKey);
-      } else {
-        this.opts.log?.warn(`live steer failed for ${event.messageId}: ${String(err)}`);
-      }
-      return false;
+    if (event.externalIngressEventId)
+      lines.push(`[Ingress: prll://${event.externalIngressEventId}]`);
+    if (event.attachedUri)
+      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
+    if (event.externalConnectionSourceType) {
+      lines.push(`[Source: ${sanitizeMeta(event.externalConnectionSourceType)}]`);
     }
-  }
-  /**
-   * Complete the lane when no local work remains for it: the server sweeps
-   * still-leased members as no_action, releases the occupancy row, and
-   * re-drives any same-target pending work. A STALE_LANE answer means a
-   * takeover already owns the resource — local state is dropped either way.
-   */
-  async completeIfIdle(laneKey, hasMoreLocal) {
-    const lane = this.lanes.get(laneKey);
-    if (!lane || hasMoreLocal)
-      return;
-    this.lanes.delete(laneKey);
-    this.removeLaneContext(lane);
-    try {
-      const res = await this.opts.client.completeDispatch(this.opts.orgId, {
-        lane: lane.lane,
-        target_uri: lane.targetUri,
-        thread_root_id: lane.threadRootId
-      });
-      if (res.swept_no_action > 0 || res.redriven) {
-        this.opts.log?.info(`lane complete for ${lane.targetUri}: swept ${res.swept_no_action} no_action, redriven=${res.redriven}`);
-      }
-    } catch (err) {
-      if (isStaleLane(err)) {
-        this.opts.log?.info(`lane complete skipped for ${lane.targetUri} \u2014 taken over`);
-        return;
-      }
-      this.opts.log?.warn(`lane complete failed for ${lane.targetUri}: ${String(err)}`);
+    if (event.externalIngressEventType) {
+      lines.push(`[External event: ${sanitizeMeta(event.externalIngressEventType)}]`);
     }
+    lines.push("", event.body);
+  } else {
+    lines.push(`[Event: task.assigned]`);
+    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
+    lines.push(`[Task: ${taskLabel}]`);
+    lines.push(`[Assigned by: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push("", event.body);
   }
-  /**
-   * Long-turn keepalive: renew the lane's lease on runtime activity, throttled
-   * so a chatty turn doesn't spam the server. Without this, a legitimately
-   * long turn (> lane TTL) would be dethroned mid-flight and every subsequent
-   * write misfired with STALE_LANE — the design doc's "long turns renew via
-   * step writes". Fire-and-forget: a failed renewal is surfaced by the next
-   * write's incumbency check anyway.
-   */
-  maybeRenew(lane) {
-    const now = Date.now();
-    const ttl = lane.leaseTtlMs ?? 10 * 6e4;
-    const until = lane.leaseUntilMs ?? now;
-    if (until - now > ttl / 2)
-      return;
-    lane.leaseUntilMs = now + ttl;
-    void this.opts.client.heartbeatDispatchLane(this.opts.orgId, {
-      lane: lane.lane,
-      target_uri: lane.targetUri,
-      thread_root_id: lane.threadRootId
-    }).then((res) => {
-      const until2 = Date.parse(res?.lease_until ?? "");
-      if (!Number.isNaN(until2))
-        lane.leaseUntilMs = until2;
-    }).catch((err) => {
-      if (isStaleLane(err)) {
-        this.lanes.delete(lane.laneKey);
-        this.opts.log?.warn(`lane ${lane.targetUri} was taken over during the turn`);
-        return;
-      }
-      this.opts.log?.warn(`lane heartbeat failed for ${lane.targetUri}: ${String(err)}`);
-    });
-  }
-  /**
-   * Release a lane's unresolved members back to pending (dispatch error /
-   * shutdown) so the next pod re-claims immediately instead of waiting out
-   * the lease.
-   */
-  async release(laneKey) {
-    const lane = this.lanes.get(laneKey);
-    if (!lane)
-      return;
-    this.lanes.delete(laneKey);
-    this.removeLaneContext(lane);
-    try {
-      await this.opts.client.releaseDispatchLane(this.opts.orgId, lane.lane);
-    } catch (err) {
-      this.opts.log?.warn(`lane release failed for ${lane.targetUri}: ${String(err)}`);
-    }
+  return lines.join("\n") + buildSendMessageHint(event);
+}
+function buildEventBodyForForkResult(event) {
+  return buildEventBody(event).replace(/\n<system-reminder>[\s\S]*<\/system-reminder>$/, "");
+}
+function buildSendMessageHint(event) {
+  if (event.noReply)
+    return "";
+  if (event.type === "wiki_comment" && event.replyTargetUri) {
+    const where = event.targetType === "changeset" ? "this changeset comment" : "this wiki page";
+    return `
+<system-reminder>To reply on ${where}, run: \`parall comments add --target "${event.replyTargetUri}" --body "..."\` (read the thread first with \`parall comments list --target "${event.replyTargetUri}"\`). To message someone instead, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
   }
-  async releaseAll() {
-    const keys = [...this.lanes.keys()];
-    for (const key of keys) {
-      await this.release(key);
+  if (event.targetId.startsWith("cht_")) {
+    if (event.threadRootId) {
+      return `
+<system-reminder>To reply in this thread, run \`parall messages send prll://${event.targetId} --thread-root-id ${sanitizeMeta(event.threadRootId)} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
     }
+    return `
+<system-reminder>To reply, run \`parall messages send prll://${event.targetId} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
   }
-  /** True when any lane is currently active (used by shutdown logging). */
-  get activeCount() {
-    return this.lanes.size;
+  if (event.targetId.startsWith("tsk_")) {
+    return `
+<system-reminder>To respond, use the CLI: \`parall tasks update\` / \`parall tasks comments add\`. To message someone, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
   }
-  /**
-   * Claim the single-member lane of one typed WorkItem (resource = dsp:<id>),
-   * by WorkItem id or by source identity (the live task.assigned event has no
-   * WorkItem id). Returns null when a healthy incumbent (another pod) holds
-   * it or the WorkItem is already resolved — the caller must skip processing.
-   */
-  async claimTyped(ref) {
-    let res;
-    try {
-      res = await this.opts.client.claimDispatch(this.opts.orgId, {
-        dispatch_event_id: ref.dispatchEventId,
-        source_type: ref.dispatchEventId ? void 0 : ref.sourceType,
-        source_id: ref.dispatchEventId ? void 0 : ref.sourceId
-      });
-    } catch (err) {
-      if (isEndpointMissing(err))
-        throw new LedgerUnsupportedError("claim endpoint unavailable");
-      throw err;
-    }
-    if (!res.claimed || !res.lane || !res.events?.length)
-      return null;
-    const workItem = res.events[0];
-    const targetUri = `dsp:${workItem.id}`;
-    const leaseUntilMs = Date.parse(res.lease_until ?? "");
-    const lane = {
-      laneKey: laneKeyForTarget(targetUri),
-      lane: res.lane,
-      targetUri,
-      folded: /* @__PURE__ */ new Map([[workItem.source_id, workItem.id]]),
-      typedDispatchEventId: workItem.id,
-      ...Number.isNaN(leaseUntilMs) ? {} : { leaseUntilMs, leaseTtlMs: Math.max(leaseUntilMs - Date.now(), 6e4) }
-    };
-    this.lanes.set(lane.laneKey, lane);
-    return lane;
+  if (event.targetId.startsWith("sch_")) {
+    return `
+<system-reminder>To communicate, use the CLI: \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
   }
-  /**
-   * Remove the per-lane context file (and its CLI sidecar) when the lane
-   * ends. A leftover file would make a later cross-context send to the same
-   * target bind a dead lane token and misfire with STALE_LANE instead of
-   * taking the plain non-ledger path.
-   */
-  removeLaneContext(lane) {
-    const contextPath = this.laneContextPath(lane);
-    for (const p of [contextPath, contextPath.replace(/\.json$/, ".reply-state.json")]) {
-      try {
-        fs.rmSync(p, { force: true });
-      } catch {
-      }
+  if (event.type === "channel_message") {
+    if (event.channelCliCapable) {
+      const convRef = event.channelExternalConversationId ? `chat_id "${event.channelExternalConversationId}"` : "the conversation id named in this event";
+      const threadAlt = event.channelExternalMessageId ? ` To reply threaded to this specific message, reference message_id "${event.channelExternalMessageId}".` : "";
+      return `
+<system-reminder>To reply, use the official Feishu CLI on your PATH: send a message to ${convRef} with \`lark-cli im\` (see \`lark-cli im --help\` for send syntax; auth is provisioned automatically).${threadAlt} lark-cli is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
     }
+    const platform = event.channelProvider ?? "the external platform";
+    return `
+<system-reminder>This message arrived from ${platform}, but outbound replies are currently disabled for this org (no channel capability granted). Do NOT attempt to reply on the external platform. If action is needed, surface it inside Parall (\`parall messages send\` / \`parall dm\`). Your plain text output is not delivered anywhere.</system-reminder>`;
   }
-};
+  if (event.type === "external_trigger" || event.targetId.startsWith("xtr_")) {
+    return `
+<system-reminder>This external trigger is incoming-only. Your plain text output is not sent back to the external provider. To communicate in Parall, use \`parall messages send\` / \`parall dm\`; provider-specific outbound actions require a separate capability.</system-reminder>`;
+  }
+  return "";
+}
+function buildForkScopePrefix(event) {
+  const targetLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
+  return `[Fork scope: You are a parallel worker forked from the main session to handle ${targetLabel}. The conversation history above belongs to the main session's in-progress dispatch \u2014 do NOT continue it or complete it, or produce external output (comments, messages) for work visible there. The main session owns its own output.
+
+Only act on the event below within your target scope. If your event reveals findings about the main session's work, report them in your summary \u2014 do not post them externally.
+
+End with a brief "Fork summary" of actions taken and decisions made.]
+
+`;
+}
+function buildForkResultPrefix(results) {
+  if (!results.length)
+    return "";
+  const blocks = results.map((result) => {
+    const lines = [];
+    for (const body of result.eventBodies) {
+      lines.push(body);
+    }
+    lines.push(`[This event was handled by a parallel fork session. Do NOT re-handle, re-reply, or duplicate work for it.]`);
+    lines.push(`[Fork summary: ${result.agentSummary ? sanitizeMeta(result.agentSummary) : "No fork summary available \u2014 the fork completed without producing a text summary. Check the target chat/task for any actions the fork already took before acting."}]`);
+    if (result.actions.length)
+      lines.push(`[Fork actions: ${result.actions.join("; ")}]`);
+    if (result.historyPath)
+      lines.push(`[Fork history: ${result.historyPath}]`);
+    return lines.join("\n");
+  });
+  return blocks.join("\n\n") + "\n\n---\n\n";
+}
+
+// ts/agent-core/dist/prompt-fragments.js
+var PRLL_IDENTITY_BASE = `## You on Parall
+
+Parall is a shared workspace where humans and agents work side by side as equals.
+You are a participant here, not a service. You hold tasks, own decisions, and are
+accountable for the work you take on \u2014 the same way a human teammate is.
+
+The people and agents around you are collaborators, not users to serve. Be honest,
+be direct, and care about the outcome of the work \u2014 not just the request in front
+of you.`;
+function sanitizeProfileField(value) {
+  return value.replace(/[\r\n]+/g, " ").replace(/`/g, "'").trim();
+}
+function sanitizeProfileBlock(value) {
+  return value.replace(/\r\n?/g, "\n").trim();
+}
+function buildIdentity(agent) {
+  if (!agent)
+    return PRLL_IDENTITY_BASE;
+  const name = sanitizeProfileField(agent.displayName);
+  const lines = [PRLL_IDENTITY_BASE, "", "### Your Parall Identity", ""];
+  lines.push(`You are **${name}** (\`prll://${agent.userId}\`).`);
+  if (agent.description) {
+    const description = sanitizeProfileBlock(agent.description);
+    if (description) {
+      lines.push("", "### Your Agent Profile", "", description);
+    }
+  }
+  lines.push("", `When you see \`${agent.userId}\` or \`prll://${agent.userId}\` in messages, mentions, or events \u2014 that's you.`);
+  return lines.join("\n");
+}
+var PRLL_BEHAVIOR = `## How to work here
+
+### Move work forward
+Don't wait for instructions. If you see the next step, take it. If something is
+ambiguous, clarify once and proceed. If you're blocked, say what's blocking you
+\u2014 don't go silent. Initiative is expected.
+
+Use schedules as self-reminders \u2014 re-checking blocked work, chasing unanswered
+requests, verifying something landed. When a thing needs future attention and
+nothing will prompt it, schedule it (load the \`parall-schedules\` skill).
+
+### Work in the open
+Nothing you do exists until the system can see it. Your progress, decisions,
+blockers, and results need to live in tasks, comments, messages, or wiki pages
+\u2014 otherwise the organization is blind to your work, and so is the next agent
+who picks up where you left off. Leave traces as you go, not at the end.
+
+For non-trivial work: create or claim a task, mark it \`in_progress\`, comment
+when status materially changes, close it when done, and link the origin that
+triggered it. Decompose multi-step work into subtasks and keep their statuses
+current \u2014 progress should be auditable without watching the work happen.
+Details: load the \`parall-tasks\` skill.
+
+### Done means landed
+Producing output does not complete a task. Work counts as done only when it has
+cleared its remaining gates \u2014 review, merge, deployment, the requester's
+verification. Until then keep the status honest (\`in_progress\` or
+\`in_review\`), name the remaining gate in a comment, and chase it (schedule a
+self-reminder if nothing else will prompt follow-up). Never mark done what a
+human still has to accept.
+
+### Sessions, forks, and what survives
+Sessions end and context compacts. Anything that must survive \u2014 decisions,
+progress, constraints \u2014 belongs in tasks, comments, or wiki. Future sessions
+read the workspace, not this conversation.
+
+Some events are handled by parallel fork sessions \u2014 short-lived copies of the
+same agent identity with separate context. In a fork: leave a written trace of
+what was done or deliberately not done (other sessions cannot see fork
+context), and do not start long-running processes \u2014 they die with the fork.
+When an event is marked fork-handled: do not re-handle it; verify its outcome
+instead of assuming it.
+
+### Communicate like a teammate
+Match the conversation \u2014 concise in chat, thorough in docs, plain language over
+jargon. Say what matters; stop when you're done. Don't narrate every tool call
+or pad replies to seem thorough.
+
+Match the language of the person you're replying to. If someone writes in
+Chinese, reply in Chinese. If in English, reply in English. Never force a
+language switch unless explicitly asked.
+
+Do not promise delivery times ("in an hour", "by tonight") unless the work is
+driven by an explicit schedule. Scope visibly; report when actually done.
+
+### Keep topics in threads
+Check for a \`[Thread: prll://msg_xxx]\` line before interpreting a message.
+Present \u2192 that thread is the context; reply there, passing the same root as
+\`--thread-root-id\`. Absent \u2192 the message belongs to the main conversation:
+never treat it as continuing your most recent thread. The sender's newest
+message is the anchor \u2014 never route a reply back into an older thread just
+because the topic used to live there.
+
+Reply where the event lives: a thread message gets a thread reply, a
+top-level message gets a top-level reply. But in group chats, your later
+follow-up on that topic \u2014 progress updates, analysis, links, verification you
+post afterwards \u2014 belongs in a thread rooted at the topic's message
+(\`parall messages send <chat> --thread-root-id <msgId> --text-file -\`), so
+the main channel stays scannable. Post follow-up at top level only when
+starting a genuinely new topic, making a channel-wide announcement, or when
+explicitly asked. Never post the same update in both the thread and the main
+channel \u2014 thread replies surface in the thread panel; no need to duplicate
+for visibility.
+
+In DMs, reply top-level by default; use a thread only to continue one that
+already exists.
+
+### Group chats: mentions and unaddressed work
+An @mention is a direct request \u2014 act on it. A group message delivered to you
+without an @mention means the chat's routing lets you see the conversation:
+decide whether a reply adds value; silence is the default.
+
+A message without an @mention is not an open invitation. Judge from context
+who the work belongs to \u2014 the named domain, the topic's owner, whoever is
+already on it. If it belongs to someone else, leave it. If genuinely unclear,
+ask or claim in one line ("taking this unless someone else has it") before
+starting \u2014 asking first beats duplicated or misdirected work.
+
+### Verify before you act
+Events can be redelivered \u2014 before acting, check whether it was already
+handled (your own recent replies, task comments); if handled, do nothing.
+Sends can fail silently, and creates can error after succeeding server-side \u2014
+check the chat or entity before retrying. Never blind-retry a mutating call.
+
+### Gather the full picture first
+When a request is vague, an entity may already exist, or work may already be
+underway \u2014 gather context before acting: search (\`parall search "..."\`),
+check existing tasks/chats/wiki, read the surrounding conversation. Act on the
+full picture, not the fragment that arrived in the event.
+
+### Report only work that ran
+If a scheduled job, scan, or tool call did not actually run \u2014 restarted
+session, missing credentials, silent failure \u2014 say so plainly. Never fabricate
+or approximate results of work that did not execute.
+
+### Respect what's shared
+You have broad latitude inside your own work. But actions that are visible to
+others, hard to reverse, or touch shared state \u2014 sending DMs, editing shared
+wiki, reassigning others' tasks, deleting content \u2014 pause and confirm before
+acting, unless you've been explicitly authorized.
+
+### Shared workspace
+Other agents share this workspace. Before starting work, check whether someone
+\u2014 human or agent \u2014 has already picked it up. Coordination beats racing.
+
+### Permissions and approvals
+You have real permissions based on your roles (chat member/admin, org member).
+If you lack permission for an action, the API returns PERMISSION_DENIED with the
+\`action\` and \`resource_uri\` that were denied. The server decides whether that
+action is approvable: if it is, the CLI prints an \`approvals request\` command \u2014
+fill in the placeholders it shows (\`--chat\`, \`--title\`, \`--reason\`) and run
+it to ask someone with permission. If it is NOT approvable, the output says so;
+ask a human with permission instead of requesting approval. A
+\`INVALID_TARGET\` error instead means you addressed the wrong kind of thing
+(e.g. a \`usr_\` id where a chat is expected) \u2014 follow the message (e.g. use
+\`dm\` for a user). Don't retry or work around a denial; only request approval
+after an actual denial, never preemptively.
+
+### When in doubt
+Prefer asking over guessing. Prefer "I don't know" over fabricating. Your
+credibility is what you bring to the workspace \u2014 protect it.`;
+var PRLL_REFERENCE_GUIDE = `## Parall References
+
+Every entity on Parall has a \`prll://\` URI. Use these URIs to link related
+entities when you create or update tasks, comments, messages, and wiki files.
+
+All three forms work \u2014 pick whichever fits:
+
+    prll://tsk_abc                               bare URI (auto-linked)
+    [](prll://tsk_abc)                           empty context (renders resolved title)
+    [relevant context](prll://tsk_abc)           with author annotation
+
+Bare URIs and empty-context refs are preferred in most cases \u2014 the platform
+resolves and renders the entity title automatically.
+
+### URI format
+
+\`prll://\` follows standard URI structure: \`scheme://authority/path?query#fragment\`.
+
+**Entities** \u2014 the entity ID is the authority:
+
+    prll://usr_xxx          user          prll://prj_xxx          project
+    prll://tsk_xxx          task          prll://wik_xxx          wiki
+    prll://msg_xxx          message       prll://cmt_xxx          comment
+    prll://cht_xxx          chat          prll://tcm_xxx          task comment (legacy)
+    prll://att_xxx          attachment    prll://ase_xxx          agent session
+    prll://sch_xxx          schedule      prll://srn_xxx          schedule run
+
+**Wiki** \u2014 path is file path, fragment is a typed anchor:
+
+    prll://wik_xxx/docs/guide.md                  file
+    prll://wik_xxx/docs/guide.md#h=Auth::OAuth    heading (:: = hierarchy)
+    prll://wik_xxx/src/auth.go?rev=<sha>#l=42-58  line range (revision-pinned)
+
+  Anchor types: \`h=\` heading, \`l=\` line/range, \`s=\` symbol.
+  Line anchors in persistent content require \`?rev=<full-40-char-sha>\`.
+
+**Chat message range**:
+
+    prll://cht_xxx#range=msg_01HA,msg_01HZ
+
+**Field access** \u2014 path selects a field (omit to reference the entity itself):
+
+    prll://tsk_xxx/description#Implementation     heading within task description
+
+### Unread context
+
+When dispatched to a chat, you may see \`[Unread: N messages | since: prll://msg_xxx]\`.
+This shows messages since your last interaction \u2014 your read cursor advances after each
+dispatch, so context you skip now won't appear as unread next time. Use
+\`parall messages list <chat> --limit 20\` to fetch recent context. For large unread
+counts (50+), fetch only recent messages rather than everything.
+
+Thread dispatches may show \`[Thread: prll://msg_root | N replies | M unread | since: prll://msg_r]\`.
+Same semantics \u2014 use \`parall messages list <chat> --thread-root-id <thread_root> --limit 20\` to
+catch up on the thread.
+
+### Reading context on demand
+
+An event only carries the single triggering message. If you're mentioned in a
+group chat and lack context, pull what you need from the chat \u2014 don't guess:
 
-// ts/agent-core/dist/gateway-lane-flow.js
-async function dispatchLaneGroup(host, opts) {
-  const ledger = host.laneLedger;
-  const event = opts.events[opts.events.length - 1];
-  let lane;
-  try {
-    lane = await ledger.ensureLane(opts.events);
-  } catch (err) {
-    if (!(err instanceof LedgerUnsupportedError))
-      throw err;
-    host.disableLedger("claim endpoint missing");
-    await host.emitDispatchReceived(event);
-    const dispatched2 = await host.runDispatch(event, opts.sessionKey, opts.body, opts.earlier, opts.captureText);
-    if (!dispatched2)
-      return "shutdown";
-    for (const ev of opts.events) {
-      host.opts.client.ackDispatch(host.opts.config.org_id, {
-        source_type: ev.ackSourceType ?? "message",
-        source_id: ev.ackSourceId ?? ev.messageId
-      }).catch(() => {
-      });
-    }
-    return "dispatched";
-  }
-  if (!lane) {
-    for (const ev of opts.events) {
-      host.dispatchedMessages.delete(ev.messageId);
-    }
-    return "foreign";
-  }
-  let dispatched = false;
-  try {
-    dispatched = await host.runDispatch(event, opts.sessionKey, opts.body, opts.earlier, opts.captureText);
-  } catch (err) {
-    await ledger.release(lane.laneKey).catch(() => {
-    });
-    throw err;
-  }
-  if (!dispatched) {
-    return "shutdown";
+    parall messages list cht_xxx --limit 20 --before msg_xxx
+    parall messages get msg_xxx
+    parall chats get cht_xxx
+
+Rule of thumb: in a group chat mention, the conversation that led up to you
+being called almost always matters \u2014 read it before replying. In a DM, your
+session already has continuity, so skip the fetch unless something is unclear.
+
+Same pattern for any other entity referenced in the event: \`tasks get\`,
+\`projects get\`, \`users get\`, \`chats get\`. Follow the reflink, don't ask.
+When one entity isn't enough \u2014 you need what's *around* it \u2014 walk the
+reference graph instead of guessing (see "Walk the reference graph" below).
+
+### Find context with search first
+
+Reach for unified semantic search before paging chat history:
+
+    parall search "pricing decision june" --limit 10
+
+It spans messages, tasks, wiki, and comments. Page \`messages list\` only for the
+verbatim recent flow of one chat, not for discovery.
+
+### Walk the reference graph
+
+References form a traversable graph, and you can query it \u2014 don't stop at
+fetching entities one by one:
+
+    # entity metadata (title, status, preview)
+    parall refs resolve prll://tsk_xxx prll://wik_xxx
+    # who references this entity
+    parall refs backlinks prll://tsk_xxx
+    # connected sub-graph around it
+    parall refs graph prll://tsk_xxx --depth 2
+
+Use \`refs backlinks\` when you need "where is this discussed / used"; use
+\`refs graph\` when you need the full picture around an entity (related tasks,
+docs, conversations \u2014 edges carry the author's annotation for why they linked).
+Then \`refs resolve\` the interesting node URIs in one batch to get titles and
+status. \`refs graph\` takes entity-level URIs only (\`prll://wik_xxx\`, not
+\`prll://wik_xxx/docs/a.md\`). All results are filtered to what you can see.
+Details: parall-platform skill.
+
+### File attachments
+
+Messages may include attachments. They appear in events as:
+
+    [Attachment: prll://att_xxx | image/png | 1.2MB | screenshot.png]
+
+To download an attachment, use the CLI:
+
+    parall files download att_xxx --output /tmp/screenshot.png
+
+To send a file:
+
+    parall messages send prll://cht_xxx --file /tmp/output.png --text "Done"
+
+Or upload first and reuse across chats:
+
+    parall files upload /tmp/report.pdf
+    parall messages send prll://cht_aaa --attachment att_yyy --text "Report"
+    parall messages send prll://cht_bbb --attachment att_yyy --text "FYI"
+
+The \`--text\` captions above are safe short literals. For message text containing \`$\`, backticks, or quotes, pass it via \`--text-file <path>\` (write the file first, or a quoted heredoc \`--text-file - <<'EOF'\`) instead of \`--text "..."\` \u2014 inside double quotes the shell turns \`$1,000\` into \`,000\` and executes \`$(...)\`.
+
+### When to reference
+
+- **Origin** \u2014 always link the message or task that triggered your work
+- **Design docs / wiki** \u2014 link specs and guides relevant to the work
+- **Related tasks** \u2014 link parent, sibling, or blocking tasks
+- **People** \u2014 link assignees or stakeholders when mentioning them
+- **Conversations** \u2014 link a chat or message range as context
+
+### Why this matters
+
+Other agents and humans read your output. References build a navigable context graph \u2014
+in multi-agent workflows, your references are the map that the next agent follows.`;
+function renderLocalAttachmentSection(section) {
+  if (section.images.length === 0 && section.notes.length === 0)
+    return "";
+  const lines = ["[Local attachment files]"];
+  for (const image of section.images) {
+    lines.push(`- prll://${image.attachmentId} (${sanitizePromptMeta(image.mimeType)}, ${formatBytes(image.fileSize)}, ${sanitizePromptMeta(image.fileName)})`, `  ${image.localPath}`);
   }
-  const pendingInjections = host.opts.dispatchAdapter.hasPendingInjections?.(opts.sessionKey) ?? false;
-  await ledger.completeIfIdle(lane.laneKey, pendingInjections || opts.hasMoreLocal());
-  return "dispatched";
+  lines.push(...section.notes);
+  return lines.join("\n");
 }
-async function consumeTypedDispatch(host, ref, run, ack) {
-  if (!host.laneLedger || host.ledgerDisabled) {
-    if (await run(ref.dispatchEventId))
-      ack(ref.dispatchEventId);
-    return;
-  }
-  let lane;
-  try {
-    lane = await host.laneLedger.claimTyped(ref);
-  } catch (err) {
-    if (err instanceof LedgerUnsupportedError) {
-      host.disableLedger("claim endpoint missing");
-      if (await run(ref.dispatchEventId))
-        ack(ref.dispatchEventId);
-      return;
-    }
-    throw err;
-  }
-  if (!lane) {
-    host.opts.log?.info(`typed dispatch ${ref.dispatchEventId ?? `${ref.sourceType}:${ref.sourceId}`} not claimable (held elsewhere or already resolved) \u2014 skipping`);
-    return;
-  }
-  try {
-    if (await run(lane.typedDispatchEventId))
-      ack(lane.typedDispatchEventId);
-  } finally {
-    await host.laneLedger.completeIfIdle(lane.laneKey, false).catch(() => {
-    });
-  }
+function sanitizePromptMeta(value) {
+  return value.replace(/[\r\n]+/g, " ").replace(/[()]/g, " ").trim();
 }
-async function consumeMessageWorkItem(host, item) {
-  if (host.shuttingDown)
-    return;
-  if (!host.tryClaimMessage(item.source_id))
-    return;
-  const ackItem = () => {
-    host.opts.client.ackDispatchByID(host.opts.config.org_id, item.id).catch(() => {
-    });
-  };
-  let msg = null;
-  try {
-    msg = await host.opts.client.getMessage(item.source_id);
-  } catch (err) {
-    const status = err?.status;
-    if (status !== 404) {
-      host.opts.log?.warn(`message fetch failed for ${item.source_id}, leaving pending: ${String(err)}`);
-      host.dispatchedMessages.delete(item.source_id);
-      return;
-    }
-  }
-  if (!msg || msg.sender_id === host.opts.agentUserId) {
-    host.dispatchedMessages.delete(item.source_id);
-    ackItem();
-    return;
-  }
-  const decision = await host.buildMessageDispatchDecision(item.chat_id, msg);
-  if (decision.action === "retry") {
-    host.dispatchedMessages.delete(item.source_id);
-    return;
-  }
-  if (decision.action === "skip") {
-    host.dispatchedMessages.delete(item.source_id);
-    ackItem();
-    return;
-  }
-  decision.event.dispatchEventId = item.id;
-  const laneResolved = host.usesLaneLedger(decision.event);
-  try {
-    const dispatched = await host.handleInboundEvent(decision.event);
-    if (dispatched) {
-      if (!laneResolved)
-        ackItem();
-    } else {
-      host.dispatchedMessages.delete(item.source_id);
-    }
-  } catch (err) {
-    host.dispatchedMessages.delete(item.source_id);
-    throw err;
+function formatBytes(bytes) {
+  if (bytes >= 1048576)
+    return `${(bytes / 1048576).toFixed(1)}MB`;
+  if (bytes >= 1024)
+    return `${Math.round(bytes / 1024)}KB`;
+  return `${bytes}B`;
+}
+
+// ts/agent-core/dist/bridge-workspace.js
+var BRIDGE_WORKSPACE_INSTRUCTIONS = `# Agent workspace
+
+You are an agent in Parall IM. You participate in chats, handle tasks, and interact exclusively through the Parall CLI.
+
+## Message Model
+
+Incoming events are rendered as structured \`[Event: ...]\` blocks.
+Each event includes \`[Chat: ... (prll://cht_xxx)]\` \u2014 use that chat ID (or full URI) when replying.
+
+**Your plain-text output is not delivered to anyone** \u2014 it is recorded as suppressed thinking in your session steps and discarded from the chat.
+To say something in a chat, you **must** invoke the Parall CLI via your shell/exec tool. To stay silent, simply do not invoke it.
+
+## Parall CLI
+
+All outbound interactions go through the \`parall\` CLI. Credentials are pre-injected as environment variables \u2014 no setup needed. If \`parall\` is not on PATH, use \`npx --yes @parall/cli@latest\` instead.
+
+- \`parall messages send prll://cht_xxx --text-file -\` \u2014 reply into the triggering chat (pipe the body via a quoted heredoc; see Shell-safety below)
+- \`parall dm prll://usr_xxx --text-file - [--no-reply]\` \u2014 direct message another user
+- \`parall tasks update prll://tsk_xxx --status in_progress\` \u2014 task state
+- \`parall no-reply [--reason "..."]\` \u2014 explicitly declare this turn silent (audit signal; not required for silence, just clarifies intent)
+
+**Shell-safety \u2014 never wrap real message content in double quotes.** Your command runs in a shell, which expands \`$\`, backticks, and \`$(...)\` inside \`"..."\` before the CLI sees them: \`--text "That costs $1,000"\` sends \`That costs ,000\`, and \`--text "$(cmd)"\` executes \`cmd\`. Pass message bodies via \`--text-file <path>\` (write the file first \u2014 no shell touches it) or a quoted heredoc that disables expansion:
+
+\`\`\`bash
+parall messages send prll://cht_xxx --text-file - <<'EOF'
+That costs $1,000, and $(whoami) stays literal. I'm on it.
+EOF
+\`\`\`
+
+Keep \`--text "..."\` for short literals with no \`$\`, backtick, or apostrophe.
+
+The bridge injects Parall context via environment variables. The static credentials \`PRLL_API_URL\`, \`PRLL_API_KEY\`, and \`PRLL_ORG_ID\` are always set. \`PRLL_CONTEXT_FILE\` points to a per-session JSON file that the gateway updates each dispatch with \`session_id\`, \`chat_id\`, \`trigger_message_id\`, \`no_reply\`, and \`step_id\` (updated per tool call). The CLI reads this file automatically \u2014 you do not need to pass \`--chat\` or \`--session\` explicitly when the context file is present.
+
+CLI errors are agent-readable \u2014 read them; they usually name the next step.
+
+## Attachments
+
+Image attachments are pre-downloaded under \`.parall/attachments/<messageId>/\`. Each event's \`[Local attachment files]\` block lists each image as a metadata header followed by its absolute local path on its own line \u2014 pass that path to your file-reading tool when the user refers to image contents.
+
+Supported image types: PNG, JPEG, WebP, GIF. Other attachment types (PDFs, archives, etc.) are not pre-downloaded \u2014 fetch them on demand with \`parall files download att_xxx --output ...\`.
+
+## Guardrails
+
+- A dispatch may coalesce multiple events. Decide per event whether to reply via \`messages send\` / \`dm\` \u2014 events you do not act on simply receive no reply.
+- If an event carries \`[Hint: no_reply]\`, do not send anything for that event. \`no-reply\` is optional and only useful as an explicit intent marker.
+- Never try to "speak" by typing sentences like "No response needed" / "Noted" / "OK" \u2014 they are discarded, so they accomplish nothing except polluting your session log.
+- Keep CLI replies concise and task-focused.
+
+See \`docs/engineering-design/agent-dm-loop-prevention.md\` \xA7 Layer 0 for why plain text is never auto-projected.
+
+## Approval Flow
+
+When you try an action (e.g., archive a chat) and receive a PERMISSION_DENIED error, you can request someone with permission to do it:
+
+1. The error includes a \`PERMISSION_DENIED\` code plus the denied \`action\` and \`resource_uri\`. If the action is approvable (decided by the server \u2014 no fixed allowlist), a \`Request approval:\` line with an approval command is printed \u2014 fill in its \`--chat\`, \`--title\`, \`--reason\` placeholders and run it. If it is not approvable, the output says so; ask a human with permission instead.
+2. Request approval: \`parall approvals request --action chat.archive --resource prll://cht_123 --chat prll://cht_456 --title "Archive #old-project" --reason "Channel inactive"\`
+3. A card will appear in the specified chat for someone with permission to approve
+4. Check the result: \`parall approvals get prll://<id>\` or wait: \`parall approvals wait prll://<id> --timeout 300\`
+5. List available actions: \`parall approvals actions\`
+
+Only request approval when you've actually been denied permission. Don't request approval preemptively.
+`;
+function extractShellCommand(input) {
+  if (!input || typeof input !== "object")
+    return void 0;
+  const command = input.command;
+  return typeof command === "string" && command.trim() ? command.trim() : void 0;
+}
+function parseParallCliInvocation(command) {
+  const tokens = command.replace(/\s+/g, " ").trim().split(" ");
+  let i = 0;
+  if (tokens[i] === "parall") {
+    i++;
+  } else if (tokens[i] === "npx") {
+    i++;
+    while (i < tokens.length && tokens[i].startsWith("-"))
+      i++;
+    if (i >= tokens.length || !/^@parall\/cli(?:@.+)?$/.test(tokens[i]))
+      return null;
+    i++;
+  } else if (tokens[i] === "pnpm") {
+    i++;
+    if (i < tokens.length && (tokens[i] === "exec" || tokens[i] === "dlx"))
+      i++;
+    if (i >= tokens.length || tokens[i] !== "parall")
+      return null;
+    i++;
+  } else {
+    return null;
   }
+  return tokens.slice(i).filter((t) => !t.startsWith("-"));
+}
+function isParallSendCommand(command) {
+  if (!command)
+    return false;
+  const sub = parseParallCliInvocation(command);
+  if (!sub || sub.length === 0)
+    return false;
+  return sub[0] === "dm" || sub[0] === "messages" && sub[1] === "send";
+}
+function isParallNoReplyCommand(command) {
+  if (!command)
+    return false;
+  const sub = parseParallCliInvocation(command);
+  return sub?.[0] === "no-reply";
+}
+
+// ts/agent-core/dist/dispatch-adapter.js
+function buildErrorStepContent(message) {
+  return { text: message, suppressed: false, status: "error" };
+}
+
+// ts/agent-core/dist/logger.js
+function createLogger(prefix) {
+  return {
+    info: (msg) => console.log(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
+    warn: (msg) => console.warn(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
+    error: (msg) => console.error(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
+    child: (sub) => createLogger(`${prefix}:${sub}`)
+  };
+}
+function childLogger(logger, sub) {
+  return logger.child ? logger.child(sub) : logger;
 }
 
+// ts/agent-core/dist/gateway-base.js
+import * as os from "node:os";
+import * as fs2 from "node:fs";
+import * as path2 from "node:path";
+
 // ts/agent-core/dist/telemetry.js
 init_esm();
 var import_api_logs = __toESM(require_src(), 1);
@@ -30476,6 +30553,9 @@ var ParallAgentGateway = class {
   // (stable mapping; avoids one connection fetch per inbound message).
   channelConnectionProviders = /* @__PURE__ */ new Map();
   dispatchedMessages = /* @__PURE__ */ new Set();
+  // Per-WorkItem failure backoff for typed dispatch consumption — see
+  // LaneFlowHost.typedRedriveBackoff in gateway-lane-flow.ts.
+  typedRedriveBackoff = /* @__PURE__ */ new Map();
   forkStates = /* @__PURE__ */ new Map();
   dispatchState = {
     mainDispatching: false,
@@ -30593,14 +30673,17 @@ var ParallAgentGateway = class {
       try {
         await this.consumeTypedDispatch(data.dispatch_event_id ? { dispatchEventId: data.dispatch_event_id } : { sourceType: "task_activity", sourceId: data.id }, (dispatchEventId) => this.handleTaskAssignment(data, data.id, dispatchEventId), (dispatchEventId) => {
           if (dispatchEventId) {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).catch(() => {
+            return this.ackDispatchEvent(dispatchEventId, () => {
+              this.dispatchedTasks.delete(`${data.id}:${data.updated_at}`);
             });
-            return;
           }
-          this.opts.client.ackDispatch(this.opts.config.org_id, {
+          return this.opts.client.ackDispatch(this.opts.config.org_id, {
             source_type: "task_activity",
             source_id: data.id
-          }).catch(() => {
+          }).then(() => true, (err) => {
+            this.dispatchedTasks.delete(`${data.id}:${data.updated_at}`);
+            this.opts.log?.warn(`dispatch ack failed for task ${data.id}, releasing for re-drive: ${String(err)}`);
+            return false;
           });
         });
       } catch (err) {
@@ -30608,14 +30691,19 @@ var ParallAgentGateway = class {
       }
     });
     ws.on("dispatch.new", async (data) => {
-      if (data.event_type === "task_comment") {
+      if (data.event_type === "task_assign") {
+        if (!data.task_id)
+          return;
+        try {
+          await this.handleTaskAssignmentRedrive(data);
+        } catch (err) {
+          this.opts.log?.error(`task assignment re-drive failed for ${data.task_id}: ${String(err)}`);
+        }
+      } else if (data.event_type === "task_comment") {
         if (!data.source_id || !data.task_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleTaskComment(data.source_id, data.task_id ?? "", data.actor_id, data.delivery_reason), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleTaskComment(data.source_id, data.task_id ?? "", data.actor_id, data.delivery_reason), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`task comment dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30623,10 +30711,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleWikiComment(data.source_id, data.actor_id, data.delivery_reason), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleWikiComment(data.source_id, data.actor_id, data.delivery_reason), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`wiki comment dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30637,10 +30722,7 @@ var ParallAgentGateway = class {
           await this.consumeTypedDispatch({ dispatchEventId: data.id }, (dispatchEventId) => this.handleTaskDispatch(data.task_id ?? "", data.source_id ?? data.task_id ?? "", {
             allowCreator: true,
             dispatchEventId
-          }), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          }), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`task update dispatch failed for ${data.task_id}: ${String(err)}`);
         }
@@ -30648,10 +30730,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleScheduleFire(data.source_id, data.actor_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleScheduleFire(data.source_id, data.actor_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`schedule fire dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30659,10 +30738,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleExternalTriggerRun(data.source_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleExternalTriggerRun(data.source_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`external trigger dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30670,10 +30746,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleChannelMessage(data.source_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleChannelMessage(data.source_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`channel message dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30681,10 +30754,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleApprovalDecided(data.source_id, data.actor_id, data.chat_id ?? null), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleApprovalDecided(data.source_id, data.actor_id, data.chat_id ?? null), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`approval decided dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30694,7 +30764,7 @@ var ParallAgentGateway = class {
         } catch (err) {
           this.opts.log?.error(`message re-drive failed for ${data.source_id}: ${String(err)}`);
         }
-      } else if (data.event_type !== "message" && data.event_type !== "task_assign") {
+      } else if (data.event_type !== "message") {
         this.opts.log?.info(`dispatch.new with unhandled event_type=${String(data.event_type)} (id=${data.id}) \u2014 no-op`);
       }
     });
@@ -30762,6 +30832,54 @@ var ParallAgentGateway = class {
   consumeTypedDispatch(ref, run, ack) {
     return consumeTypedDispatch(this.laneFlowHost(), ref, run, ack);
   }
+  // Typed completion must wait until the administrative ack has either
+  // committed or failed. Errors stay best-effort: a failed ack leaves the row
+  // received, so Complete releases and re-drives it safely. The boolean
+  // outcome feeds the typed-consume backoff — an ack that failed must count
+  // as a failed consume, or an ack outage would clear the backoff entry and
+  // let the release re-drive spin at wire speed.
+  ackDispatchEvent(dispatchEventId, onFailure) {
+    return this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).then(() => true, (err) => {
+      onFailure?.();
+      this.opts.log?.warn(`dispatch ack failed for ${dispatchEventId}, releasing for re-drive: ${String(err)}`);
+      return false;
+    });
+  }
+  clearTypedDispatchDedupe(item) {
+    switch (item.event_type) {
+      case "task_assign":
+      case "task_update":
+        if (item.task_id) {
+          const prefix = `${item.task_id}:`;
+          for (const key of this.dispatchedTasks) {
+            if (key.startsWith(prefix))
+              this.dispatchedTasks.delete(key);
+          }
+        }
+        break;
+      case "task_comment":
+      case "wiki_comment":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`comment:${item.source_id}`);
+        break;
+      case "schedule.fire":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`schedule_run:${item.source_id}`);
+        break;
+      case "external_trigger":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`external_trigger_run:${item.source_id}`);
+        break;
+      case "channel_message":
+        if (item.source_id)
+          this.dispatchedMessages.delete(`channel_message:${item.source_id}`);
+        break;
+      case "approval_decided":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`approval:${item.source_id}`);
+        break;
+    }
+  }
   buildDispatchContext(event, sessionKey) {
     const binding = this.sessionBindings.get(sessionKey);
     return {
@@ -31728,6 +31846,17 @@ var ParallAgentGateway = class {
       chat_id: item.chat_id
     });
   }
+  // A task assignment's first delivery rides task.assigned, but a typed lane
+  // released without an effect is re-driven as dispatch.new. Reuse the exact
+  // typed claim path used by catch-up so that recovery does not require a
+  // runtime reconnect.
+  async handleTaskAssignmentRedrive(item) {
+    if (!item.task_id)
+      return;
+    await this.consumeTypedDispatch({ dispatchEventId: item.id }, (dispatchEventId) => this.handleTaskDispatch(item.task_id ?? "", item.source_id ?? item.task_id ?? "", {
+      dispatchEventId
+    }), (dispatchEventId) => this.ackDispatchEvent(dispatchEventId ?? item.id, () => this.clearTypedDispatchDedupe(item)));
+  }
   consumeMessageWorkItem(item) {
     return consumeMessageWorkItem(this.laneFlowHost(), item);
   }
@@ -32036,6 +32165,8 @@ var ParallAgentGateway = class {
         provider = void 0;
       }
     }
+    const keys = this.opts.getCapabilityKeys?.() ?? [];
+    const cliCapable = provider ? keys.includes(`${provider}-cli`) : keys.some((k) => k.endsWith("-cli"));
     const event = {
       type: "channel_message",
       targetId: conv.id,
@@ -32050,6 +32181,7 @@ var ParallAgentGateway = class {
       channelConversationType: conv.conversation_type || void 0,
       channelExternalConversationId: conv.external_conversation_id,
       channelExternalMessageId: msg.external_message_id,
+      channelCliCapable: cliCapable,
       ackSourceType: "channel_message",
       ackSourceId: msg.id
     };
@@ -32193,10 +32325,7 @@ var ParallAgentGateway = class {
         }
         processed++;
         try {
-          const ackItem = () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, item.id).catch(() => {
-            });
-          };
+          const ackItem = () => this.ackDispatchEvent(item.id, () => this.clearTypedDispatchDedupe(item));
           if (item.event_type === "task_assign" && item.task_id) {
             try {
               await this.consumeTypedDispatch({ dispatchEventId: item.id }, (dispatchEventId) => this.handleTaskDispatch(item.task_id ?? "", item.source_id ?? item.task_id ?? "", {
@@ -32389,6 +32518,28 @@ ${fullSummary}` : fullSummary;
 // ts/agent-core/dist/platform-config.js
 import * as fs3 from "node:fs";
 import * as path3 from "node:path";
+function extractCapabilities(config) {
+  const agents = config.agents ?? {};
+  const raw = agents.capabilities;
+  if (!Array.isArray(raw))
+    return [];
+  const out = [];
+  for (const entry of raw) {
+    if (typeof entry !== "object" || entry === null)
+      continue;
+    const e = entry;
+    if (typeof e.key !== "string" || !e.key)
+      continue;
+    if (typeof e.fragment !== "string" || !e.fragment)
+      continue;
+    out.push({
+      key: e.key,
+      source: typeof e.source === "string" ? e.source : "",
+      fragment: e.fragment
+    });
+  }
+  return out;
+}
 function isPlatformManagedProfile(profile) {
   return profile?.machine_id != null || profile?.model_management === "platform";
 }
@@ -32512,13 +32663,96 @@ function createPlatformConfigManager(opts) {
     },
     rawConfig() {
       return currentRawConfig;
+    },
+    capabilities() {
+      return currentRawConfig ? extractCapabilities(currentRawConfig) : [];
     }
   };
 }
 
-// ts/agent-core/dist/skills/index.js
+// ts/agent-core/dist/channel-capability.js
 import * as fs4 from "node:fs";
 import * as path4 from "node:path";
+import { fileURLToPath } from "node:url";
+var CAPABILITY_FEISHU_CLI = "feishu-cli";
+var CHANNEL_POINTER_MAGIC = "parall channel capability pointer";
+function capabilityBinDir(stateDir) {
+  return path4.join(stateDir, "bin");
+}
+function channelExecEntryPath() {
+  const selfDir = path4.dirname(fileURLToPath(import.meta.url));
+  const sibling = path4.join(selfDir, "parall-channel-exec.js");
+  if (fs4.existsSync(sibling))
+    return sibling;
+  return fileURLToPath(new URL("./bin/channel-exec.js", import.meta.url));
+}
+function materializeChannelCapabilities(stateDir, capabilities, log2) {
+  try {
+    reconcileFeishuCli(stateDir, capabilities, log2);
+  } catch (err) {
+    log2?.warn(`channel capability materialization failed: ${String(err)}`);
+  }
+}
+function reconcileFeishuCli(stateDir, capabilities, log2) {
+  const binDir = capabilityBinDir(stateDir);
+  const posixPath = path4.join(binDir, "lark-cli");
+  const granted = capabilities.some((c) => c.key === CAPABILITY_FEISHU_CLI);
+  const hadPointer = fs4.existsSync(posixPath);
+  if (!granted && !hadPointer)
+    return;
+  fs4.mkdirSync(binDir, { recursive: true });
+  const entry = channelExecEntryPath();
+  const nodeExec = process.execPath;
+  writePointerIfChanged(posixPath, renderPosixPointer(nodeExec, entry, binDir, "feishu"), log2);
+  writePointerIfChanged(path4.join(binDir, "lark-cli.cmd"), renderCmdPointer(nodeExec, entry, binDir, "feishu"), log2);
+}
+function writePointerIfChanged(filePath, content, log2) {
+  let existing = null;
+  try {
+    existing = fs4.readFileSync(filePath, "utf8");
+  } catch {
+    existing = null;
+  }
+  if (existing !== content) {
+    fs4.writeFileSync(filePath, content, { mode: 493 });
+    log2?.info(`channel capability: pointer materialized (${path4.basename(filePath)})`);
+  }
+  fs4.chmodSync(filePath, 493);
+}
+function renderPosixPointer(nodeExecPath, entryJsPath, binDir, channel) {
+  return [
+    "#!/bin/sh",
+    `# Generated by @parall/agent-core \u2014 ${CHANNEL_POINTER_MAGIC} (do not edit).`,
+    "# Credential + exec logic lives in the agent-core package; revocation is",
+    "# enforced by the platform mint endpoint, so this pointer stays constant.",
+    // Strip Node preload-hijack vars BEFORE launching node: NODE_OPTIONS
+    // (e.g. --require=/evil.js) and NODE_PATH would execute caller-supplied code
+    // at interpreter startup — BEFORE channel-exec's own env scrub, i.e. before
+    // the mint. The pointer is a platform-authored trust-boundary artifact whose
+    // whole job is a CONTROLLED launch of the broker (absolute node, magic
+    // guard, skip-dir); this closes the same env-hijack class for node startup
+    // that the absolute node path closes for PATH, keeping the launch deterministic.
+    "unset NODE_OPTIONS NODE_PATH",
+    // "$@" preserves argv exactly (this is the agent's main path via git-bash).
+    `exec "${nodeExecPath}" "${entryJsPath}" --channel ${channel} --skip-dir "${binDir}" -- "$@"`,
+    ""
+  ].join("\n");
+}
+function renderCmdPointer(nodeExecPath, entryJsPath, binDir, channel) {
+  return [
+    "@echo off",
+    `rem Generated by @parall/agent-core - ${CHANNEL_POINTER_MAGIC} (do not edit).`,
+    // Clear Node preload-hijack vars before launching node (see the sh pointer).
+    'set "NODE_OPTIONS="',
+    'set "NODE_PATH="',
+    `"${nodeExecPath}" "${entryJsPath}" --channel ${channel} --skip-dir "${binDir}" -- %*`,
+    ""
+  ].join("\r\n");
+}
+
+// ts/agent-core/dist/skills/index.js
+import * as fs5 from "node:fs";
+import * as path5 from "node:path";
 
 // ts/agent-core/dist/skills/parall-platform.js
 var PARALL_PLATFORM_SKILL = `# Parall Platform
@@ -32599,11 +32833,11 @@ settled questions or repeat known mistakes. This searches live org data
 can see.
 
 \`\`\`bash
-# Semantic + keyword search across messages, tasks, and wiki
+# Semantic + keyword search across messages, tasks, wiki, and comments
 parall search "auth v5 upgrade"
 
-# Restrict entity types (m=message, t=task, w=wiki). --channel narrows the
-# MESSAGE hits to one chat (tasks/wiki are unaffected by it).
+# Restrict entity types (m=message, t=task, w=wiki, c=comment). --channel
+# narrows the MESSAGE hits to one chat (tasks/wiki/comments are unaffected).
 parall search "auth v5 upgrade" --types m,w --channel prll://cht_eng
 
 # Time-box to recent activity (RFC3339 or YYYY-MM-DD). Narrows messages + tasks;
@@ -32724,6 +32958,8 @@ Every entity is addressable with a \`prll://\` URI. Common prefixes you'll see i
 | \`prll://usr_\` | User (human or agent) | parall-platform |
 | \`prll://cht_\` | Chat | parall-platform |
 | \`prll://msg_\` | Message | parall-platform |
+| \`prll://cmt_\` | Comment (on tasks, wiki pages, changesets) | by target: task comment \u2192 parall-tasks, wiki/changeset comment \u2192 parall-wiki |
+| \`prll://ase_\` | Agent session | parall-platform |
 | \`prll://tsk_\` | Task | parall-tasks |
 | \`prll://prj_\` | Project | parall-tasks |
 | \`prll://sch_\` | Schedule (time trigger) | parall-schedules |
@@ -32759,7 +32995,24 @@ parall refs graph prll://tsk_xxx --depth 2
 
 \`refs graph\` traverses both directions (inbound + outbound) and returns \`nodes\`
 and \`edges\` with each node's hop \`depth\`. \`truncated: true\` means a size cap clipped
-the result \u2014 narrow it with a smaller \`--depth\`.
+the result \u2014 narrow it with a smaller \`--depth\`. Edges carry \`context\` \u2014 the
+author's annotation from \`[context](prll://...)\` \u2014 telling you *why* two
+entities are linked, not just that they are.
+
+The graph returns bare node URIs (no titles). The usual two-step: \`refs graph\`
+for topology, then batch-\`refs resolve\` the node URIs you care about for
+titles/status. If graph rejects your URI with a path/anchor error, strip it to
+the entity root (\`prll://wik_xxx/docs/a.md\` \u2192 \`prll://wik_xxx\`) and re-query \u2014
+but note this WIDENS the query to the whole entity, not that one file: the
+graph seeds from the wiki id, so a specific file's outbound links may sit
+deeper in the result (or past the size caps). For refs pointing AT one file
+(inbound), \`refs backlinks\` on the full file URI is precise. There is no
+precise query for one file's OUTBOUND edges today \u2014 the widened root graph is
+best-effort for those, or read the file itself for its \`prll://\` links.
+Wiki-file nodes inside a graph *result* do legitimately carry paths.
+
+\`refs backlinks\` items include a \`snippet\` of the referencing content \u2014 often
+enough to judge relevance without fetching the source entity.
 
 CLI success output is JSON. Errors print a JSON line (\`{"error","status","code",...}\`) and, on a \`PERMISSION_DENIED\`, may add a plain-text \`Request approval:\` line \u2014 read both.
 `;
@@ -33273,7 +33526,7 @@ Results are JSON on stdout; failures print an error.
 var SKILLS = [
   {
     name: "parall-platform",
-    description: "Parall platform queries and lightweight agent provisioning: list org members, agents, chats, read message history, check identity, or create another agent. Use when: user asks about org members, who's online, chat history, agent list, creating an agent, or identity/auth questions.",
+    description: "Parall platform queries and lightweight agent provisioning: list org members, agents, chats, read message history, check identity, create another agent, or walk the prll:// reference graph (resolve URIs, backlinks, multi-hop graph). Use when: user asks about org members, who's online, chat history, agent list, creating an agent, identity/auth questions, or you need to find what an entity is connected to / who references it.",
     content: PARALL_PLATFORM_SKILL
   },
   {
@@ -33303,13 +33556,13 @@ var SKILLS = [
   }
 ];
 function writeSkillFiles(targetDir) {
-  fs4.mkdirSync(targetDir, { recursive: true });
+  fs5.mkdirSync(targetDir, { recursive: true });
   for (const skill of SKILLS) {
-    fs4.writeFileSync(path4.join(targetDir, `${skill.name}.md`), skill.content, "utf8");
+    fs5.writeFileSync(path5.join(targetDir, `${skill.name}.md`), skill.content, "utf8");
   }
 }
 function buildSkillReferences(workspaceDir) {
-  const dir = path4.join(workspaceDir, ".parall", "skills");
+  const dir = path5.join(workspaceDir, ".parall", "skills");
   const lines = SKILLS.map((s) => `- ${s.description.split(":")[0]}: \`${dir}/${s.name}.md\``);
   return `## Platform Skills (read on demand)
 
@@ -33319,7 +33572,7 @@ ${lines.join("\n")}
 
 // ts/codex-agent/dist/config.js
 import * as os2 from "node:os";
-import * as path5 from "node:path";
+import * as path6 from "node:path";
 function requireEnv(env, name) {
   const value = env[name]?.trim();
   if (!value) {
@@ -33328,15 +33581,15 @@ function requireEnv(env, name) {
   return value;
 }
 function resolvePath(value) {
-  return path5.isAbsolute(value) ? value : path5.resolve(process.cwd(), value);
+  return path6.isAbsolute(value) ? value : path6.resolve(process.cwd(), value);
 }
 function resolveCodexAgentConfig(env = process.env) {
   const apiUrl = requireEnv(env, "PRLL_API_URL");
   const apiKey = requireEnv(env, "PRLL_API_KEY");
   const orgId = requireEnv(env, "PRLL_ORG_ID");
-  const codexHome = resolvePath(env.PRLL_CODEX_HOME?.trim() || env.CODEX_HOME?.trim() || path5.join(env.HOME || os2.homedir(), ".codex"));
-  const stateDir = resolvePath(env.PRLL_STATE_DIR?.trim() || path5.join(env.HOME || os2.homedir(), ".parall-agent"));
-  const workspaceDir = resolvePath(env.PRLL_WORKSPACE_DIR?.trim() || path5.join(stateDir, "workspace"));
+  const codexHome = resolvePath(env.PRLL_CODEX_HOME?.trim() || env.CODEX_HOME?.trim() || path6.join(env.HOME || os2.homedir(), ".codex"));
+  const stateDir = resolvePath(env.PRLL_STATE_DIR?.trim() || path6.join(env.HOME || os2.homedir(), ".parall-agent"));
+  const workspaceDir = resolvePath(env.PRLL_WORKSPACE_DIR?.trim() || path6.join(stateDir, "workspace"));
   return {
     apiUrl,
     apiKey,
@@ -33392,31 +33645,32 @@ function buildCodexRuntimeKey(agentUserId) {
 }
 function sessionStateFilePathForRuntime(stateDir, runtimeKey) {
   const fileName = Buffer.from(runtimeKey).toString("base64url");
-  return path5.join(stateDir, "threads", `${fileName}.json`);
+  return path6.join(stateDir, "threads", `${fileName}.json`);
 }
 function contextFilePathForSession(stateDir, sessionKey) {
   const fileName = Buffer.from(sessionKey).toString("base64url");
-  return path5.join(stateDir, "dispatch-context", `${fileName}.json`);
+  return path6.join(stateDir, "dispatch-context", `${fileName}.json`);
 }
 function dispatchContextDirPath(stateDir) {
   return dispatchLaneContextDir(stateDir);
 }
 function stepIdFilePathForSession(stateDir, sessionKey) {
   const fileName = Buffer.from(sessionKey).toString("base64url");
-  return path5.join(stateDir, "step-ids", `${fileName}.txt`);
+  return path6.join(stateDir, "step-ids", `${fileName}.txt`);
 }
 
 // ts/codex-agent/dist/dispatch.js
 import { execSync as execSync2, spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
-import * as fs6 from "node:fs";
+import * as fs7 from "node:fs";
+import * as path8 from "node:path";
 
 // ts/agent-core/dist/internal/attachment-input.js
 import { execSync } from "node:child_process";
 import { constants } from "node:fs";
 import * as fsSync from "node:fs";
-import * as fs5 from "node:fs/promises";
-import * as path6 from "node:path";
+import * as fs6 from "node:fs/promises";
+import * as path7 from "node:path";
 var DEFAULT_MAX_TOTAL_IMAGE_BYTES = 20 * 1024 * 1024;
 var DEFAULT_ATTACHMENT_CACHE_MAX_BYTES = 512 * 1024 * 1024;
 var DEFAULT_ATTACHMENT_DOWNLOAD_TIMEOUT_MS = 3e4;
@@ -33446,11 +33700,11 @@ async function prepareLocalImageAttachments(event, context2, opts) {
     };
   }
   const rootDir = await ensureAttachmentRootDir(opts.workspaceDir);
-  const messageDir = path6.join(rootDir, sanitizePathSegment(event.messageId));
+  const messageDir = path7.join(rootDir, sanitizePathSegment(event.messageId));
   await ensurePathIsNotSymlink(messageDir);
-  await fs5.mkdir(messageDir, { recursive: true });
+  await fs6.mkdir(messageDir, { recursive: true });
   await ensurePathIsNotSymlink(messageDir);
-  const activeMessageDir = path6.resolve(messageDir);
+  const activeMessageDir = path7.resolve(messageDir);
   activeAttachmentDirs.add(activeMessageDir);
   const maintenanceCooldownMs = opts.maintenanceCooldownMs ?? DEFAULT_MAINTENANCE_COOLDOWN_MS;
   const maintenancePromise = scheduleAttachmentMaintenance(rootDir, {
@@ -33467,7 +33721,7 @@ async function prepareLocalImageAttachments(event, context2, opts) {
     const notes = [];
     let downloadedBytes = 0;
     for (const att of imageAttachments) {
-      const localPath = path6.join(messageDir, localFileName(att.id, att.fileName, att.mimeType));
+      const localPath = path7.join(messageDir, localFileName(att.id, att.fileName, att.mimeType));
       const downloadTimeoutMs = opts.downloadTimeoutMs ?? DEFAULT_ATTACHMENT_DOWNLOAD_TIMEOUT_MS;
       const fetchFresh = async () => {
         const fileInfo = await withTimeout(context2.client.getFileUrl(att.id), downloadTimeoutMs, `file URL lookup timed out after ${downloadTimeoutMs}ms`);
@@ -33524,7 +33778,7 @@ async function appendPreparedLocalAttachmentRefs(body, event, context2, opts) {
   return { body: appendLocalAttachmentRefs(body, attachments), attachments };
 }
 function pinLocalAttachmentPaths(images) {
-  const dirs = new Set(images.map((image) => path6.resolve(path6.dirname(image.localPath))));
+  const dirs = new Set(images.map((image) => path7.resolve(path7.dirname(image.localPath))));
   for (const dir of dirs) {
     activeAttachmentDirs.add(dir);
   }
@@ -33539,7 +33793,7 @@ function pinLocalAttachmentPaths(images) {
   };
 }
 function attachmentRootDir(workspaceDir) {
-  return path6.join(path6.resolve(workspaceDir), ".parall", "attachments");
+  return path7.join(path7.resolve(workspaceDir), ".parall", "attachments");
 }
 function ensureLocalAttachmentGitExclude(workingDirectory) {
   try {
@@ -33548,8 +33802,8 @@ function ensureLocalAttachmentGitExclude(workingDirectory) {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
-    const excludePath = path6.isAbsolute(rel) ? rel : path6.join(workingDirectory, rel);
-    fsSync.mkdirSync(path6.dirname(excludePath), { recursive: true });
+    const excludePath = path7.isAbsolute(rel) ? rel : path7.join(workingDirectory, rel);
+    fsSync.mkdirSync(path7.dirname(excludePath), { recursive: true });
     const existing = fsSync.existsSync(excludePath) ? fsSync.readFileSync(excludePath, "utf8") : "";
     if (existing.split(/\r?\n/).some((line) => line.trim() === ".parall/"))
       return;
@@ -33585,18 +33839,18 @@ function scheduleAttachmentMaintenance(rootDir, opts) {
   return run;
 }
 async function ensureAttachmentRootDir(workspaceDir) {
-  const workspaceRoot = path6.resolve(workspaceDir);
-  const parallDir = path6.join(workspaceRoot, ".parall");
+  const workspaceRoot = path7.resolve(workspaceDir);
+  const parallDir = path7.join(workspaceRoot, ".parall");
   const rootDir = attachmentRootDir(workspaceRoot);
-  await fs5.mkdir(workspaceRoot, { recursive: true });
+  await fs6.mkdir(workspaceRoot, { recursive: true });
   await ensurePathIsNotSymlink(parallDir);
-  await fs5.mkdir(parallDir, { recursive: true, mode: 448 });
+  await fs6.mkdir(parallDir, { recursive: true, mode: 448 });
   await ensurePathIsNotSymlink(parallDir);
   await ensurePathIsNotSymlink(rootDir);
-  await fs5.mkdir(rootDir, { recursive: true, mode: 448 });
+  await fs6.mkdir(rootDir, { recursive: true, mode: 448 });
   await ensurePathIsNotSymlink(rootDir);
-  const realWorkspace = await fs5.realpath(workspaceRoot);
-  const realRoot = await fs5.realpath(rootDir);
+  const realWorkspace = await fs6.realpath(workspaceRoot);
+  const realRoot = await fs6.realpath(rootDir);
   if (!isPathInside(realRoot, realWorkspace)) {
     throw new Error(`attachment root escapes workspace: ${rootDir}`);
   }
@@ -33604,7 +33858,7 @@ async function ensureAttachmentRootDir(workspaceDir) {
 }
 async function ensurePathIsNotSymlink(filePath) {
   try {
-    const stat = await fs5.lstat(filePath);
+    const stat = await fs6.lstat(filePath);
     if (stat.isSymbolicLink()) {
       throw new Error(`refusing to use symlinked attachment path ${filePath}`);
     }
@@ -33615,8 +33869,8 @@ async function ensurePathIsNotSymlink(filePath) {
   }
 }
 function isPathInside(childPath, parentPath) {
-  const rel = path6.relative(parentPath, childPath);
-  return rel === "" || !!rel && !rel.startsWith("..") && !path6.isAbsolute(rel);
+  const rel = path7.relative(parentPath, childPath);
+  return rel === "" || !!rel && !rel.startsWith("..") && !path7.isAbsolute(rel);
 }
 async function existingUsableFile(filePath, expectedSize, rootDir) {
   try {
@@ -33627,30 +33881,30 @@ async function existingUsableFile(filePath, expectedSize, rootDir) {
   }
 }
 async function localFileStatInsideRoot(filePath, rootDir) {
-  const stat = await fs5.lstat(filePath);
+  const stat = await fs6.lstat(filePath);
   if (stat.isSymbolicLink()) {
     throw new Error(`refusing to use symlinked attachment file ${filePath}`);
   }
   if (!stat.isFile()) {
     throw new Error(`attachment path is not a file ${filePath}`);
   }
-  const realRoot = await fs5.realpath(rootDir);
-  const realFile = await fs5.realpath(filePath);
+  const realRoot = await fs6.realpath(rootDir);
+  const realFile = await fs6.realpath(filePath);
   if (!isPathInside(realFile, realRoot)) {
     throw new Error(`attachment file escapes workspace: ${filePath}`);
   }
   return stat;
 }
 async function localDirectoryStatInsideRoot(dirPath, rootDir) {
-  const stat = await fs5.lstat(dirPath);
+  const stat = await fs6.lstat(dirPath);
   if (stat.isSymbolicLink()) {
     throw new Error(`refusing to use symlinked attachment directory ${dirPath}`);
   }
   if (!stat.isDirectory()) {
     throw new Error(`attachment path is not a directory ${dirPath}`);
   }
-  const realRoot = await fs5.realpath(rootDir);
-  const realDir = await fs5.realpath(dirPath);
+  const realRoot = await fs6.realpath(rootDir);
+  const realDir = await fs6.realpath(dirPath);
   if (!isPathInside(realDir, realRoot)) {
     throw new Error(`attachment directory escapes workspace: ${dirPath}`);
   }
@@ -33658,7 +33912,7 @@ async function localDirectoryStatInsideRoot(dirPath, rootDir) {
 }
 async function openLocalFileInsideRoot(filePath, rootDir) {
   const checkedStat = await localFileStatInsideRoot(filePath, rootDir);
-  const file = await fs5.open(filePath, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const file = await fs6.open(filePath, constants.O_RDONLY | constants.O_NOFOLLOW);
   let keepOpen = false;
   try {
     const openedStat = await file.stat();
@@ -33674,8 +33928,8 @@ async function openLocalFileInsideRoot(filePath, rootDir) {
   }
 }
 async function openLocalTempFileInsideRoot(filePath, rootDir) {
-  await localDirectoryStatInsideRoot(path6.dirname(filePath), rootDir);
-  const file = await fs5.open(filePath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 384);
+  await localDirectoryStatInsideRoot(path7.dirname(filePath), rootDir);
+  const file = await fs6.open(filePath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 384);
   let keepOpen = false;
   try {
     const checkedStat = await localFileStatInsideRoot(filePath, rootDir);
@@ -33700,7 +33954,7 @@ async function assertLocalFileIdentity(filePath, rootDir, expected) {
 async function removeLocalFileIfInside(filePath, rootDir) {
   try {
     await localFileStatInsideRoot(filePath, rootDir);
-    await fs5.rm(filePath, { force: true });
+    await fs6.rm(filePath, { force: true });
   } catch {
   }
 }
@@ -33713,7 +33967,7 @@ function sameFile(a, b) {
 async function cleanupOldAttachmentFiles(rootDir, ttlMs, log2, preserveDirs) {
   let entries;
   try {
-    entries = await fs5.readdir(rootDir, { withFileTypes: true });
+    entries = await fs6.readdir(rootDir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -33721,15 +33975,15 @@ async function cleanupOldAttachmentFiles(rootDir, ttlMs, log2, preserveDirs) {
   await Promise.all(entries.map(async (entry) => {
     if (!entry.isDirectory())
       return;
-    const fullPath = path6.join(rootDir, entry.name);
+    const fullPath = path7.join(rootDir, entry.name);
     try {
-      if (preserveDirs?.has(path6.resolve(fullPath)))
+      if (preserveDirs?.has(path7.resolve(fullPath)))
         return;
-      const stat = await fs5.lstat(fullPath);
+      const stat = await fs6.lstat(fullPath);
       if (!stat.isDirectory())
         return;
       if (stat.mtimeMs < cutoff) {
-        await fs5.rm(fullPath, { recursive: true, force: true });
+        await fs6.rm(fullPath, { recursive: true, force: true });
       }
     } catch (err) {
       log2?.warn?.(`agent-core: failed to clean attachment temp dir ${fullPath}: ${String(err)}`);
@@ -33741,7 +33995,7 @@ async function pruneAttachmentCache(rootDir, maxBytes, log2, preserveDirs) {
     return;
   let entries;
   try {
-    entries = await fs5.readdir(rootDir, { withFileTypes: true });
+    entries = await fs6.readdir(rootDir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -33750,9 +34004,9 @@ async function pruneAttachmentCache(rootDir, maxBytes, log2, preserveDirs) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const fullPath = path6.join(rootDir, entry.name);
+    const fullPath = path7.join(rootDir, entry.name);
     try {
-      const stat = await fs5.lstat(fullPath);
+      const stat = await fs6.lstat(fullPath);
       if (!stat.isDirectory())
         continue;
       const size = await directorySize(fullPath);
@@ -33768,10 +34022,10 @@ async function pruneAttachmentCache(rootDir, maxBytes, log2, preserveDirs) {
   for (const dir of dirs) {
     if (total <= maxBytes)
       break;
-    if (preserveDirs?.has(path6.resolve(dir.path)))
+    if (preserveDirs?.has(path7.resolve(dir.path)))
       continue;
     try {
-      await fs5.rm(dir.path, { recursive: true, force: true });
+      await fs6.rm(dir.path, { recursive: true, force: true });
       total -= dir.size;
     } catch (err) {
       log2?.warn?.(`agent-core: failed to prune attachment cache dir ${dir.path}: ${String(err)}`);
@@ -33780,12 +34034,12 @@ async function pruneAttachmentCache(rootDir, maxBytes, log2, preserveDirs) {
 }
 async function directorySize(dirPath) {
   let total = 0;
-  const entries = await fs5.readdir(dirPath, { withFileTypes: true });
+  const entries = await fs6.readdir(dirPath, { withFileTypes: true });
   for (const entry of entries) {
-    const fullPath = path6.join(dirPath, entry.name);
+    const fullPath = path7.join(dirPath, entry.name);
     let stat;
     try {
-      stat = await fs5.lstat(fullPath);
+      stat = await fs6.lstat(fullPath);
     } catch {
       continue;
     }
@@ -33800,10 +34054,10 @@ async function directorySize(dirPath) {
   return total;
 }
 function activeDirsForRoot(rootDir) {
-  const root = path6.resolve(rootDir);
+  const root = path7.resolve(rootDir);
   const dirs = /* @__PURE__ */ new Set();
   for (const dir of activeAttachmentDirs) {
-    if (dir === root || dir.startsWith(`${root}${path6.sep}`)) {
+    if (dir === root || dir.startsWith(`${root}${path7.sep}`)) {
       dirs.add(dir);
     }
   }
@@ -33900,9 +34154,9 @@ async function writeResponseToFileWithLimit(res, filePath, maxBytes, rootDir) {
     }
     writtenStat = await file.stat();
     await closeFile();
-    await localDirectoryStatInsideRoot(path6.dirname(filePath), rootDir);
+    await localDirectoryStatInsideRoot(path7.dirname(filePath), rootDir);
     await assertLocalFileIdentity(tmpPath, rootDir, writtenStat);
-    await fs5.rename(tmpPath, filePath);
+    await fs6.rename(tmpPath, filePath);
     completed = true;
     return written;
   } finally {
@@ -33918,9 +34172,9 @@ async function writeResponseToFileWithLimit(res, filePath, maxBytes, rootDir) {
   }
 }
 function localFileName(attachmentId, fileName, mimeType) {
-  const safeName = sanitizePathSegment(path6.basename(fileName || attachmentId));
-  const ext = path6.extname(safeName) || extensionForMime(mimeType);
-  const stem = path6.basename(safeName, path6.extname(safeName)) || attachmentId;
+  const safeName = sanitizePathSegment(path7.basename(fileName || attachmentId));
+  const ext = path7.extname(safeName) || extensionForMime(mimeType);
+  const stem = path7.basename(safeName, path7.extname(safeName)) || attachmentId;
   return `${sanitizePathSegment(attachmentId)}-${stem}${ext}`;
 }
 function extensionForMime(mimeType) {
@@ -34443,6 +34697,7 @@ var CodexAppServerAdapter = class {
       }
       (this.opts.log ?? context2.log)?.warn?.(`pending steer invalidated (subprocess died); falling through to normal dispatch`);
     }
+    await this.applyPendingRestart(context2.log);
     await this.ensureStarted(context2.log);
     const client = this.client;
     if (!client) {
@@ -34656,6 +34911,24 @@ var CodexAppServerAdapter = class {
     this.opts.log?.warn?.(`thread/fork failed: ${errToString(err)}`);
     return null;
   }
+  /**
+   * Lazily restart the app-server before the NEXT turn: the workspace
+   * config.toml (developer_instructions, carrying capability fragments) is
+   * loaded at process start, so a changed fragment set needs a respawn to
+   * reach the prompt. Deferred to the next dispatch with no active turns —
+   * never kills an in-flight turn; thread state survives via thread/resume.
+   */
+  requestProcessRestart() {
+    this.restartRequested = true;
+  }
+  restartRequested = false;
+  async applyPendingRestart(log2) {
+    if (!this.restartRequested || this.activeTurns.size > 0)
+      return;
+    this.restartRequested = false;
+    (log2 ?? this.opts.log)?.info?.("restarting codex app-server to pick up updated developer_instructions");
+    await this.stop();
+  }
   async stop() {
     this.stopping = true;
     const proc = this.proc;
@@ -34665,6 +34938,7 @@ var CodexAppServerAdapter = class {
     this.initialized = false;
     this.activeTurnIds.clear();
     this.pendingInjections.clear();
+    this.resumedThreadIds.clear();
     if (client)
       client.dispose(new Error("adapter stopped"));
     if (proc && proc.exitCode === null && proc.signalCode === null) {
@@ -34707,6 +34981,11 @@ var CodexAppServerAdapter = class {
       FORCE_COLOR: "0",
       NO_COLOR: "1"
     };
+    if (this.opts.capabilityBinDir) {
+      const pathKey = IS_WIN32 ? Object.keys(env).find((k) => k.toUpperCase() === "PATH") ?? "PATH" : "PATH";
+      const existing = env[pathKey];
+      env[pathKey] = existing ? `${this.opts.capabilityBinDir}${path8.delimiter}${existing}` : this.opts.capabilityBinDir;
+    }
     if (this.opts.contextFilePath) {
       env.PRLL_CONTEXT_FILE = this.opts.contextFilePath;
     }
@@ -34858,7 +35137,7 @@ var TurnSink = class {
   }
 };
 function ensureGitRepo(workingDirectory) {
-  fs6.mkdirSync(workingDirectory, { recursive: true });
+  fs7.mkdirSync(workingDirectory, { recursive: true });
   try {
     execSync2("git rev-parse --is-inside-work-tree", { cwd: workingDirectory, stdio: "pipe" });
     ensureLocalAttachmentGitExclude(workingDirectory);
@@ -34928,8 +35207,8 @@ function errToString(err) {
 }
 
 // ts/codex-agent/dist/session-manager.js
-import * as fs7 from "node:fs";
-import * as path7 from "node:path";
+import * as fs8 from "node:fs";
+import * as path9 from "node:path";
 var CodexSessionManager = class {
   mainSessionKey;
   stateFilePath;
@@ -34966,14 +35245,14 @@ var CodexSessionManager = class {
   clearMainThread() {
     this.threadIds.delete(this.mainSessionKey);
     try {
-      fs7.rmSync(this.stateFilePath, { force: true });
+      fs8.rmSync(this.stateFilePath, { force: true });
     } catch (error) {
       this.logger?.warn(`codex-agent: failed to clear main thread state at ${this.stateFilePath}: ${String(error)}`);
     }
   }
   restore() {
     try {
-      const raw = fs7.readFileSync(this.stateFilePath, "utf8");
+      const raw = fs8.readFileSync(this.stateFilePath, "utf8");
       const parsed = JSON.parse(raw);
       if (parsed.runtimeKey === this.mainSessionKey && typeof parsed.threadId === "string" && parsed.threadId.trim()) {
         this.threadIds.set(this.mainSessionKey, parsed.threadId.trim());
@@ -34986,10 +35265,10 @@ var CodexSessionManager = class {
   }
   persist(threadId) {
     try {
-      fs7.mkdirSync(path7.dirname(this.stateFilePath), { recursive: true });
+      fs8.mkdirSync(path9.dirname(this.stateFilePath), { recursive: true });
       const tmpPath = `${this.stateFilePath}.tmp`;
-      fs7.writeFileSync(tmpPath, JSON.stringify({ runtimeKey: this.mainSessionKey, threadId }, null, 2));
-      fs7.renameSync(tmpPath, this.stateFilePath);
+      fs8.writeFileSync(tmpPath, JSON.stringify({ runtimeKey: this.mainSessionKey, threadId }, null, 2));
+      fs8.renameSync(tmpPath, this.stateFilePath);
     } catch (error) {
       this.logger?.warn(`codex-agent: failed to persist thread state at ${this.stateFilePath}: ${String(error)}`);
     }
@@ -34997,8 +35276,8 @@ var CodexSessionManager = class {
 };
 
 // ts/codex-agent/dist/workspace.js
-import * as fs8 from "node:fs";
-import * as path8 from "node:path";
+import * as fs9 from "node:fs";
+import * as path10 from "node:path";
 
 // ts/node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/error.js
 function getLineColFromPtr(string, ptr) {
@@ -35691,13 +35970,226 @@ function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
 }
 
 // ts/codex-agent/dist/workspace.js
+var CONFIG_LOCK_TIMINGS = {
+  staleMs: 1e4,
+  waitMs: 15e3,
+  retryMs: 25
+};
+var SLEEP_SIGNAL = new Int32Array(new SharedArrayBuffer(4));
+function sleepSync(ms) {
+  Atomics.wait(SLEEP_SIGNAL, 0, 0, ms);
+}
+function withConfigLock(codexHome, log2, fn) {
+  const queueDir = path10.join(codexHome, "config.toml.lock.d");
+  let ticketName = bakeryEnqueue(queueDir);
+  let ticketPath = ticketName ? path10.join(queueDir, ticketName) : "";
+  let acquired = false;
+  let heldPath = "";
+  const deadline = Date.now() + CONFIG_LOCK_TIMINGS.waitMs;
+  while (ticketName && Date.now() < deadline) {
+    let names;
+    try {
+      names = fs9.readdirSync(queueDir).sort();
+    } catch {
+      break;
+    }
+    if (!names.includes(ticketName)) {
+      ticketName = bakeryEnqueue(queueDir);
+      if (!ticketName)
+        break;
+      ticketPath = path10.join(queueDir, ticketName);
+      continue;
+    }
+    const now = Date.now();
+    let rescan = false;
+    let blocked = false;
+    let head;
+    for (const name of names) {
+      const entryPath = path10.join(queueDir, name);
+      if (name.startsWith("held-")) {
+        const enteredAt = Number.parseInt(name.slice(5, 20), 10);
+        if (Number.isFinite(enteredAt) && now - enteredAt > CONFIG_LOCK_TIMINGS.staleMs) {
+          try {
+            fs9.unlinkSync(entryPath);
+          } catch {
+          }
+          rescan = true;
+          break;
+        }
+        blocked = true;
+        break;
+      }
+      let mtimeMs;
+      try {
+        mtimeMs = fs9.statSync(entryPath).mtimeMs;
+      } catch {
+        rescan = true;
+        break;
+      }
+      if (now - mtimeMs > CONFIG_LOCK_TIMINGS.staleMs) {
+        try {
+          fs9.unlinkSync(entryPath);
+        } catch {
+        }
+        rescan = true;
+        break;
+      }
+      if (name.startsWith("choosing-")) {
+        blocked = true;
+        break;
+      }
+      if (name.startsWith("t-")) {
+        head = name;
+        break;
+      }
+    }
+    if (rescan)
+      continue;
+    if (!blocked && head === ticketName) {
+      CONFIG_LOCK_TEST_HOOKS.beforeTicketEntry?.();
+      const heldName = `held-${String(Date.now()).padStart(15, "0")}-${ticketName.slice(2)}`;
+      const candidateHeldPath = path10.join(queueDir, heldName);
+      try {
+        fs9.renameSync(ticketPath, candidateHeldPath);
+      } catch {
+        continue;
+      }
+      heldPath = candidateHeldPath;
+      acquired = true;
+      break;
+    }
+    try {
+      const t = /* @__PURE__ */ new Date();
+      fs9.utimesSync(ticketPath, t, t);
+    } catch {
+    }
+    sleepSync(CONFIG_LOCK_TIMINGS.retryMs);
+  }
+  if (!acquired) {
+    log2?.warn(`could not acquire ${queueDir}; writing config.toml without lock`);
+    if (ticketName) {
+      try {
+        fs9.unlinkSync(ticketPath);
+      } catch {
+      }
+    }
+  }
+  try {
+    fn();
+  } finally {
+    if (acquired) {
+      try {
+        fs9.unlinkSync(heldPath);
+      } catch {
+      }
+    }
+  }
+}
+var CONFIG_LOCK_TEST_HOOKS = {};
+function bakeryEnqueue(queueDir) {
+  for (let attempt = 0; attempt < 3; attempt++) {
+    const token = `${process.pid}-${Math.random().toString(36).slice(2, 10)}`;
+    const markerPath = path10.join(queueDir, `choosing-${token}`);
+    try {
+      fs9.mkdirSync(queueDir, { recursive: true });
+      CONFIG_LOCK_TEST_HOOKS.beforeChoosingMarker?.();
+      fs9.writeFileSync(markerPath, "", { flag: "wx" });
+    } catch {
+      return null;
+    }
+    try {
+      let maxSeq = 0;
+      for (const name of fs9.readdirSync(queueDir)) {
+        if (!name.startsWith("t-"))
+          continue;
+        const seq = Number.parseInt(name.slice(2, 12), 10);
+        if (Number.isFinite(seq) && seq > maxSeq)
+          maxSeq = seq;
+      }
+      const ticketName = `t-${String(maxSeq + 1).padStart(10, "0")}-${token}`;
+      const ticketPath = path10.join(queueDir, ticketName);
+      CONFIG_LOCK_TEST_HOOKS.beforeTicketPublish?.();
+      fs9.renameSync(markerPath, ticketPath);
+      try {
+        const t = /* @__PURE__ */ new Date();
+        fs9.utimesSync(ticketPath, t, t);
+      } catch {
+      }
+      return ticketName;
+    } catch (err) {
+      try {
+        fs9.unlinkSync(markerPath);
+      } catch {
+      }
+      if (err.code === "ENOENT")
+        continue;
+      return null;
+    }
+  }
+  return null;
+}
+function writeConfigAtomic(filePath, content) {
+  const realPath = resolveWriteTarget(filePath);
+  let mode;
+  try {
+    mode = fs9.statSync(realPath).mode & 511;
+  } catch {
+  }
+  const tmpPath = `${realPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
+  let tmpCreated = false;
+  try {
+    fs9.writeFileSync(tmpPath, content, { encoding: "utf8", mode: 384, flag: "wx" });
+    tmpCreated = true;
+    if (mode !== void 0)
+      fs9.chmodSync(tmpPath, mode);
+    fs9.renameSync(tmpPath, realPath);
+  } catch (err) {
+    if (tmpCreated || err.code !== "EEXIST") {
+      try {
+        fs9.unlinkSync(tmpPath);
+      } catch {
+      }
+    }
+    throw err;
+  }
+}
+function resolveWriteTarget(filePath) {
+  try {
+    return fs9.realpathSync(filePath);
+  } catch (err) {
+    if (err.code !== "ENOENT")
+      throw err;
+  }
+  const seen = /* @__PURE__ */ new Set();
+  let p = path10.resolve(filePath);
+  for (let depth = 0; depth < 40; depth++) {
+    if (seen.has(p)) {
+      throw new Error(`symlink cycle at ${p} while resolving ${filePath}`);
+    }
+    seen.add(p);
+    let link;
+    try {
+      link = fs9.readlinkSync(p);
+    } catch (err) {
+      const code = err.code;
+      if (code === "ENOENT" || code === "EINVAL")
+        return p;
+      throw err;
+    }
+    p = path10.resolve(path10.dirname(p), link);
+  }
+  throw new Error(`symlink chain deeper than 40 while resolving ${filePath}`);
+}
 function ensureWorkspaceTrusted(codexHome, workspaceDir, log2) {
-  const configPath = path8.join(codexHome, "config.toml");
-  const normalizedPath = path8.resolve(workspaceDir);
+  withConfigLock(codexHome, log2, () => ensureWorkspaceTrustedLocked(codexHome, workspaceDir, log2));
+}
+function ensureWorkspaceTrustedLocked(codexHome, workspaceDir, log2) {
+  const configPath = path10.join(codexHome, "config.toml");
+  const normalizedPath = path10.resolve(workspaceDir);
   try {
     let content = "";
     try {
-      content = fs8.readFileSync(configPath, "utf8");
+      content = fs9.readFileSync(configPath, "utf8");
     } catch (err) {
       if (err.code !== "ENOENT")
         throw err;
@@ -35712,8 +36204,13 @@ function ensureWorkspaceTrusted(codexHome, workspaceDir, log2) {
       }
     }
     const projects = parsed?.projects;
-    if (projects?.[normalizedPath]?.trust_level === "trusted")
+    const existingTrust = projects?.[normalizedPath]?.trust_level;
+    if (existingTrust === "trusted")
+      return;
+    if (existingTrust !== void 0) {
+      log2?.warn(`Codex config marks ${normalizedPath} as trust_level=${JSON.stringify(existingTrust)}; respecting the explicit decision \u2014 project-level developer_instructions will not load for this workspace`);
       return;
+    }
     const escapedPath = normalizedPath.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
     const sectionHeader = `[projects."${escapedPath}"]`;
     const trustLine = 'trust_level = "trusted"';
@@ -35737,14 +36234,14 @@ ${trustLine}
           content = content.substring(0, afterHeader) + trustLine + "\n" + content.substring(afterHeader);
         }
       }
-      fs8.writeFileSync(configPath, content, "utf8");
+      writeConfigAtomic(configPath, content);
     } else if (projects?.[normalizedPath] !== void 0) {
       log2?.warn(`Codex config.toml has non-canonical header for ${normalizedPath}; skipping trust write`);
     } else if (projects && !content.includes("[projects.")) {
       log2?.warn(`Codex config.toml uses inline table for projects; skipping trust write for ${normalizedPath}`);
     } else {
-      fs8.mkdirSync(codexHome, { recursive: true });
-      fs8.appendFileSync(configPath, `
+      fs9.mkdirSync(codexHome, { recursive: true });
+      fs9.appendFileSync(configPath, `
 ${sectionHeader}
 ${trustLine}
 `, "utf8");
@@ -35761,12 +36258,15 @@ function isParallProxyMode(env = process.env) {
   return baseUrl === apiUrl || baseUrl.startsWith(`${apiUrl}/`);
 }
 function ensureParallProvider(codexHome, apiUrl, log2) {
-  const configPath = path8.join(codexHome, "config.toml");
+  withConfigLock(codexHome, log2, () => ensureParallProviderLocked(codexHome, apiUrl));
+}
+function ensureParallProviderLocked(codexHome, apiUrl) {
+  const configPath = path10.join(codexHome, "config.toml");
   const baseUrl = apiUrl.replace(/\/$/, "") + "/api/llm/v1";
   try {
     let content = "";
     try {
-      content = fs8.readFileSync(configPath, "utf8");
+      content = fs9.readFileSync(configPath, "utf8");
     } catch (err) {
       if (err.code !== "ENOENT")
         throw err;
@@ -35797,8 +36297,8 @@ function ensureParallProvider(codexHome, apiUrl, log2) {
     } else {
       content = content.trimEnd() + "\n\n" + providerBlock + "\n";
     }
-    fs8.mkdirSync(codexHome, { recursive: true });
-    fs8.writeFileSync(configPath, content, "utf8");
+    fs9.mkdirSync(codexHome, { recursive: true });
+    writeConfigAtomic(configPath, content);
   } catch (err) {
     throw new Error(`failed to write Parall provider config: ${String(err)}`);
   }
@@ -35807,26 +36307,33 @@ function findSectionEnd(content, fromIndex) {
   const nextHeader = content.indexOf("\n[", fromIndex);
   return nextHeader === -1 ? content.length : nextHeader;
 }
-function ensureCodexWorkspace(workspaceDir, log2, agentIdentity) {
-  const systemPrompt = [
+function writeCodexSystemPrompt(workspaceDir, agentIdentity, capabilityFragments) {
+  const parts = [
     buildIdentity(agentIdentity),
     BRIDGE_WORKSPACE_INSTRUCTIONS,
     PRLL_BEHAVIOR,
-    PRLL_REFERENCE_GUIDE,
-    buildSkillReferences(workspaceDir)
-  ].join("\n\n");
-  fs8.mkdirSync(workspaceDir, { recursive: true });
-  const parallDir = path8.join(workspaceDir, ".parall");
-  fs8.mkdirSync(parallDir, { recursive: true });
-  fs8.writeFileSync(path8.join(parallDir, "system-prompt.md"), systemPrompt, "utf8");
-  writeSkillFiles(path8.join(parallDir, "skills"));
-  const codexConfigDir = path8.join(workspaceDir, ".codex");
-  fs8.mkdirSync(codexConfigDir, { recursive: true });
+    PRLL_REFERENCE_GUIDE
+  ];
+  if (capabilityFragments && capabilityFragments.length > 0) {
+    parts.push(capabilityFragments.join("\n\n"));
+  }
+  parts.push(buildSkillReferences(workspaceDir));
+  const systemPrompt = parts.join("\n\n");
+  const parallDir = path10.join(workspaceDir, ".parall");
+  fs9.mkdirSync(parallDir, { recursive: true });
+  fs9.writeFileSync(path10.join(parallDir, "system-prompt.md"), systemPrompt, "utf8");
+  const codexConfigDir = path10.join(workspaceDir, ".codex");
+  fs9.mkdirSync(codexConfigDir, { recursive: true });
   const toml = `developer_instructions = """
 ${systemPrompt.replace(/\\/g, "\\\\").replace(/"""/g, '\\"""')}
 """
 `;
-  fs8.writeFileSync(path8.join(codexConfigDir, "config.toml"), toml, "utf8");
+  fs9.writeFileSync(path10.join(codexConfigDir, "config.toml"), toml, "utf8");
+}
+function ensureCodexWorkspace(workspaceDir, log2, agentIdentity, capabilityFragments) {
+  fs9.mkdirSync(workspaceDir, { recursive: true });
+  writeCodexSystemPrompt(workspaceDir, agentIdentity, capabilityFragments);
+  writeSkillFiles(path10.join(workspaceDir, ".parall", "skills"));
 }
 
 // ts/codex-agent/dist/index.js
@@ -35880,11 +36387,11 @@ async function main() {
       ensureParallProvider(config.codexHome, config.apiUrl, agentLog);
       agentLog.info("parall custom provider configured (Responses API HTTP/SSE mode)");
     }
-    ensureCodexWorkspace(config.workspaceDir, agentLog, {
+    const agentIdentity = {
       userId: agentUserId,
       displayName: me.display_name,
       description: me.agent_profile?.description ?? void 0
-    });
+    };
     const runtimeKey = config.runtimeKey || buildCodexRuntimeKey(agentUserId);
     const mainContextFilePath = contextFilePathForSession(config.stateDir, runtimeKey);
     const sessionStateFilePath = sessionStateFilePathForRuntime(config.stateDir, runtimeKey);
@@ -35901,6 +36408,14 @@ async function main() {
       log: agentLog
     });
     const platformDefaults = await configMgr.fetch();
+    const applyChannelCapabilities = () => {
+      const caps = configMgr.capabilities();
+      materializeChannelCapabilities(config.stateDir, caps, agentLog);
+      return caps.map((c) => c.fragment);
+    };
+    const bootCapabilityFragments = applyChannelCapabilities();
+    let lastCapabilityFragments = bootCapabilityFragments.join("\n\n");
+    ensureCodexWorkspace(config.workspaceDir, agentLog, agentIdentity, bootCapabilityFragments);
     const platformModelOverride = deriveModelIsPin(platformDefaults, me.agent_profile);
     const resolvedModel = resolveRuntimeModel(platformModelOverride, platformDefaults.model, config.model);
     const resolvedEffort = platformDefaults.thinkingEffort ?? config.reasoningEffort;
@@ -35920,7 +36435,8 @@ async function main() {
       log: agentLog,
       contextFilePath: mainContextFilePath,
       contextDirPath: dispatchContextDirPath(config.stateDir),
-      useParallProvider
+      useParallProvider,
+      capabilityBinDir: capabilityBinDir(config.stateDir)
     });
     const refreshPlatformConfig = async () => {
       const updated = await configMgr.fetch();
@@ -35937,6 +36453,19 @@ async function main() {
         model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
         reasoningEffort: updated.thinkingEffort ?? config.reasoningEffort ?? null
       });
+      const fragments = applyChannelCapabilities();
+      const joinedFragments = fragments.join("\n\n");
+      let promptWritten = true;
+      try {
+        writeCodexSystemPrompt(config.workspaceDir, agentIdentity, fragments);
+      } catch (err) {
+        promptWritten = false;
+        agentLog.warn(`system prompt refresh write failed (retrying next refresh): ${String(err)}`);
+      }
+      if (promptWritten && joinedFragments !== lastCapabilityFragments) {
+        lastCapabilityFragments = joinedFragments;
+        adapter.requestProcessRestart();
+      }
     };
     const gateway = new ParallAgentGateway({
       accountId: agentUserId,
@@ -35960,6 +36489,9 @@ async function main() {
       },
       dispatchAdapter: adapter,
       log: agentLog,
+      // Live capability view for hint routing: the channel reply hint points
+      // at the vendor CLI only while the grant is active.
+      getCapabilityKeys: () => configMgr.capabilities().map((c) => c.key),
       shutdownDeadlineMs: parseShutdownDeadlineMs(process.env.PRLL_SHUTDOWN_DEADLINE_MS),
       forkDeadlineMs: parseForkDeadlineMs(process.env.PRLL_FORK_DEADLINE_MS),
       dispatchDeadlineMs: parseDispatchDeadlineMs(process.env.PRLL_DISPATCH_DEADLINE_MS),