@runeya/runeya 2.0.137 → 2.0.139

package/{chunk-P65BO7WZ.js → chunk-WNCXZ6E7.js}

@@ -1,6 +1,6 @@
 import {
   settingsManager
-} from "./chunk-I7JHF5FE.js";
+} from "./chunk-XHGJHYDC.js";
 import {
   COMPANION_SIGNATURE,
   activeSessionRegistry,
@@ -23,14 +23,16 @@ import {
   noteSpawnConversation,
   observePtyChunk,
   onCompanionThinkingChanged,
-  projectPathStore,
   projectStore,
   readClaudeTranscript,
   resetRelaunches,
+  resolveAgentCwd,
+  resolveConversationCwd,
+  resolveWorkspaceCwd,
   runCompanionNow,
   syncConversationFromClaudeTranscript,
   verifyJwt
-} from "./chunk-FJLMXLMK.js";
+} from "./chunk-GLIU3J47.js";
 import {
   StoreDiskCoordinator,
   agentManager,
@@ -49,7 +51,7 @@ import {
   recordLocalRemoval,
   refsOfProjectId,
   serviceStore
-} from "./chunk-J4GLFY7G.js";
+} from "./chunk-MSICJEZD.js";
 import {
   atomicWriteJsonSecure,
   atomicWriteSecure,
@@ -60,7 +62,7 @@ import {
   renameWithRetry,
   resolveConversationRunDir,
   wasRead
-} from "./chunk-BDQOBEZ3.js";
+} from "./chunk-GOMF7NWS.js";
 import {
   AGENT_STOP_FETCH_TIMEOUT,
   ApiKeysFileSchema,
@@ -90,23 +92,22 @@ import {
   serviceUrlValues,
   urlHostFor,
   withDeprecatedAliases
-} from "./chunk-5EMEJNVU.js";
+} from "./chunk-LE6XQ3OV.js";
 import {
   allVaultRoots,
   env,
   keyedFilePath,
   legacyMachineFilePath,
   listOrgVaults,
-  localVaultRoot,
   machineFilePath,
   machineRoot,
   orgVaultRoot,
   vaultIdOfRoot
-} from "./chunk-ZFELQG4B.js";
+} from "./chunk-EV3TBM7E.js";
 import {
   isCliAvailable,
   resolveCliInvocation
-} from "./chunk-NURPXHLB.js";
+} from "./chunk-OZBSOSAS.js";
 
 // ../server/src/trpc/routers/chat.ts
 import { z as z9 } from "zod";
@@ -583,68 +584,9 @@ var ShortString200Schema = z2.string().max(200);
 var DescriptionSchema = z2.string().max(2e3);
 var OptionalProviderIdSchema = Id128Schema.optional();
 
-// ../server/src/services/workspace-cwd.ts
-import { isAbsolute, join as join3, dirname } from "path";
-async function projectRoot(ref) {
-  const project = await projectStore.get(ref);
-  if (!project?.orgId) return null;
-  return projectPathStore.get(project);
-}
-async function resolveWorkspaceCwd(target) {
-  const launchDir = localVaultRootParent();
-  if (target.serviceId) {
-    const service = await serviceStore.get(target.serviceId);
-    if (service) {
-      const raw = (target.override ?? service.cwd ?? "").trim();
-      const projects = await projectStore.list();
-      const owner = projects.find((p) => p.serviceIds.includes(service.id));
-      const root = owner ? await projectRoot(owner) : null;
-      return root ? anchor(root, raw) : raw || ".";
-    }
-  }
-  if (target.projectId) {
-    const root = await projectRoot({ id: target.projectId, orgId: target.orgId });
-    const raw = (target.override ?? "").trim();
-    return root ? anchor(root, raw) : raw || launchDir;
-  }
-  return anchor(launchDir, (target.override ?? "").trim());
-}
-function anchor(base, raw) {
-  if (!raw || raw === ".") return base;
-  if (raw.startsWith("~") || raw.startsWith("$") || isAbsolute(raw)) return raw;
-  return join3(base, raw);
-}
-function localVaultRootParent() {
-  return dirname(localVaultRoot());
-}
-async function resolveAgentCwd(target) {
-  if (target.serviceId) {
-    const service = await serviceStore.get(target.serviceId);
-    if (service) {
-      const projects = await projectStore.list();
-      const owner = projects.find((p) => p.serviceIds.includes(service.id));
-      const root = owner ? await projectRoot(owner) : null;
-      if (!root) return void 0;
-      return anchor(root, (target.override ?? service.cwd ?? "").trim());
-    }
-  }
-  if (target.projectId) {
-    const root = await projectRoot({ id: target.projectId, orgId: target.orgId });
-    if (!root) return void 0;
-    return anchor(root, (target.override ?? "").trim());
-  }
-  return void 0;
-}
-async function resolveConversationCwd(conversationId) {
-  const conv = await conversationStore.get(conversationId);
-  const ref = conv ? await conversationStore.projectRefOf(conv) : null;
-  if (!ref) return resolveAgentCwd({});
-  return resolveAgentCwd({ projectId: ref.id, orgId: ref.orgId });
-}
-
 // ../server/src/services/environment-overrides-store.ts
 import { readFile as readFile2, writeFile, mkdir, chmod } from "fs/promises";
-import { dirname as dirname2, join as join4 } from "path";
+import { dirname, join as join3 } from "path";
 var FILENAME = "environment-overrides.json";
 var EnvironmentOverridesStore = class {
   data = {};
@@ -688,7 +630,7 @@ var EnvironmentOverridesStore = class {
   async rootFor(variableId) {
     const root = await environmentStore.rootOfVariable(variableId);
     if (root) return root;
-    return this.roots.get(variableId) ?? dirname2(await keyedFilePath(FILENAME));
+    return this.roots.get(variableId) ?? dirname(await keyedFilePath(FILENAME));
   }
   /** Where earlier versions kept them: read once, rewritten to their vaults. */
   getLegacyFilePath() {
@@ -700,7 +642,7 @@ var EnvironmentOverridesStore = class {
     return [
       this.getLegacyFilePath(),
       await keyedFilePath(FILENAME),
-      ...roots.map((root) => join4(root, FILENAME))
+      ...roots.map((root) => join3(root, FILENAME))
     ];
   }
   /**
@@ -754,11 +696,11 @@ var EnvironmentOverridesStore = class {
         parsed,
         "environment-overrides",
         (variableId) => unreadableSecrets.add(variableId),
-        vaultIdOfRoot(dirname2(path))
+        vaultIdOfRoot(dirname(path))
       );
       for (const [id, override] of Object.entries(decrypted)) {
         data[id] = { value: override.value };
-        roots.set(id, dirname2(path));
+        roots.set(id, dirname(path));
       }
     }
     return { data, diskEncryptedSlots, roots, unreadableSecrets };
@@ -794,7 +736,7 @@ var EnvironmentOverridesStore = class {
         extractEncryptedVariableSlots(encrypted)
       );
       await mkdir(root, { recursive: true });
-      const path = join4(root, FILENAME);
+      const path = join3(root, FILENAME);
       const tmpPath = path + ".tmp";
       await writeFile(tmpPath, JSON.stringify(encrypted, null, 2), "utf-8");
       await renameWithRetry(tmpPath, path);
@@ -1696,10 +1638,12 @@ var RUNEYA_CAPABILITIES = [
     method: "POST",
     params: [
       { name: "attachmentId", description: "The attachment ID, as listed on the card", required: true },
-      { name: "organizationId", description: "Which organization the attachment belongs to. Optional: needed only when the account belongs to several and the error message asks for it.", required: false }
+      { name: "boardId", description: "The board the attachment comes from. Pass it whenever you know it: on a machine linked to several cloud accounts, it is what says which one holds the file.", required: false },
+      { name: "organizationId", description: "Which organization the attachment belongs to. Optional: needed only when neither the board id is known nor the machine has a single account.", required: false }
     ],
     buildInput: (p) => ({
       attachmentId: p.attachmentId,
+      ...p.boardId ? { boardId: p.boardId } : {},
       ...p.organizationId ? { orgId: p.organizationId } : {}
     })
   },
@@ -1796,6 +1740,40 @@ var RUNEYA_CAPABILITIES = [
       ...p.parentBoardId ? { parentBoardId: p.parentBoardId } : {}
     })
   },
+  {
+    name: "kanban_place_card",
+    description: "Place an existing kanban card on another board of the same organization, without copying it \u2014 a reference. The card stays on its origin board; the target board gives it a column of its own. Editing, commenting, archiving or deleting the card from either board acts on the same card; moving it on the target board only moves the reference. Use it to show an issue from an issue list on a team kanban, for instance.",
+    route: "kanban.placeCard",
+    method: "POST",
+    params: [
+      { name: "boardId", description: "The board to place the card on (not its own board)", required: true },
+      { name: "cardId", description: "The card to place", required: true },
+      { name: "column", description: "The column on that board: its ID or its title", required: true }
+    ],
+    buildInput: (p) => ({ boardId: p.boardId, cardId: p.cardId, column: p.column })
+  },
+  {
+    name: "kanban_remove_card_placement",
+    description: "Remove a card from a board where it was placed as a reference. The card itself is untouched and stays on its origin board.",
+    route: "kanban.unplaceCard",
+    method: "POST",
+    params: [
+      { name: "boardId", description: "The board the reference is on", required: true },
+      { name: "cardId", description: "The card to remove from that board", required: true }
+    ],
+    buildInput: (p) => ({ boardId: p.boardId, cardId: p.cardId })
+  },
+  {
+    name: "kanban_get_card_placements",
+    description: "List where a kanban card is: its origin board (home: true), then every board it is placed on as a reference, with the column on each. kanban_get_board flags a referenced card with an `origin` field naming its origin board.",
+    route: "kanban.getCardPlacements",
+    method: "GET",
+    params: [
+      { name: "boardId", description: "Any board the card is on", required: true },
+      { name: "cardId", description: "The card", required: true }
+    ],
+    buildInput: (p) => ({ boardId: p.boardId, cardId: p.cardId })
+  },
   {
     name: "kanban_add_card",
     description: "Add a new card to a kanban column.",
@@ -2374,16 +2352,16 @@ async function runCapability(cap, baseUrl, params, authToken, fetchImpl = fetch)
 }
 
 // ../../packages/ai-capabilities/src/project-anchor.ts
-function applyProjectAnchor(cap, params, anchor2) {
-  if (!anchor2.projectId) return params;
+function applyProjectAnchor(cap, params, anchor) {
+  if (!anchor.projectId) return params;
   const accepts = (name) => cap.params.some((p) => p.name === name);
   if (!accepts("projectId") || params["projectId"]) return params;
   return {
     ...params,
-    projectId: anchor2.projectId,
+    projectId: anchor.projectId,
     // L'organisation n'accompagne le projet que si la capability la comprend :
     // ailleurs, ce serait un champ de trop, refusé par le schéma de la route.
-    ...anchor2.orgId && accepts("orgId") && !params["orgId"] ? { orgId: anchor2.orgId } : {}
+    ...anchor.orgId && accepts("orgId") && !params["orgId"] ? { orgId: anchor.orgId } : {}
   };
 }
 
@@ -2572,7 +2550,7 @@ function normalizeToolName(raw) {
   const match = KNOWN_TOOL_NAMES.find((t2) => raw.startsWith(t2));
   return match ?? raw;
 }
-async function executeTool(rawName, input, apiKey, authToken, anchor2 = {}) {
+async function executeTool(rawName, input, apiKey, authToken, anchor = {}) {
   const name = normalizeToolName(rawName);
   const cap = RUNEYA_CAPABILITIES.find((c) => c.name === name);
   if (!cap) throw new Error(`Unknown tool: ${name}`);
@@ -2590,7 +2568,7 @@ async function executeTool(rawName, input, apiKey, authToken, anchor2 = {}) {
       throw new Error(`No '${action}' permission for service ${serviceId}`);
     }
   }
-  const params = applyProjectAnchor(cap, toRawParams(input, cap), anchor2);
+  const params = applyProjectAnchor(cap, toRawParams(input, cap), anchor);
   const baseUrl = `http://localhost:${env.PORT}`;
   return runCapability(cap, baseUrl, params, authToken);
 }
@@ -2889,7 +2867,7 @@ function buildServerBuiltins(input) {
 }
 
 // ../server/src/trpc/routers/service.ts
-import { isAbsolute as isAbsolute2 } from "path";
+import { isAbsolute } from "path";
 
 // ../server/src/services/attach-service.ts
 async function attachServiceToProject(target, serviceId) {
@@ -2942,7 +2920,7 @@ async function resolveServiceVariables(service, opts = {}) {
   const project = projects.find((p) => p.serviceIds.includes(service.id));
   let resolvedService = service;
   const anchored = await resolveWorkspaceCwd({ serviceId: service.id });
-  if (anchored !== (service.cwd ?? "").trim() && isAbsolute2(anchored)) {
+  if (anchored !== (service.cwd ?? "").trim() && isAbsolute(anchored)) {
     resolvedService = { ...resolvedService, resolvedCwd: anchored };
   }
   try {
@@ -3475,7 +3453,7 @@ var scenarioStore = new ScenarioStore();
 
 // ../server/src/services/scenario-run-store.ts
 import { mkdir as mkdir3, rm, readFile as readFile4 } from "fs/promises";
-import { join as join5 } from "path";
+import { join as join4 } from "path";
 function sanitizeSlug(value) {
   return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60) || "member";
 }
@@ -3516,8 +3494,8 @@ var ScenarioRunStore = class _ScenarioRunStore {
       "- Use read-only references from linked upstream files as context.",
       ""
     ].join("\n");
-    await atomicWriteSecure(join5(dir, "README.md"), overview);
-    await atomicWriteSecure(join5(dir, "USER_REQUEST.md"), `# User request
+    await atomicWriteSecure(join4(dir, "README.md"), overview);
+    await atomicWriteSecure(join4(dir, "USER_REQUEST.md"), `# User request
 
 ${userInput.trim() || "(empty)"}
 `);
@@ -3543,7 +3521,7 @@ ${userInput.trim() || "(empty)"}
         "- Waiting for assignment.",
         ""
       ].join("\n");
-      await atomicWriteSecure(join5(dir, fileName), content);
+      await atomicWriteSecure(join4(dir, fileName), content);
     }
   }
   async deleteRunDir(conversationId) {
@@ -3611,18 +3589,18 @@ ${userInput.trim() || "(empty)"}
         ...Object.keys(runState.nodeAgentIds).length > 0 ? { nodeAgentIds: { ...runState.nodeAgentIds } } : {},
         ...Object.keys(runState.waitingInputs).length > 0 ? { waitingInputs: { ...runState.waitingInputs } } : {}
       };
-      await atomicWriteJsonSecure(join5(dir, "run-state.json"), data);
+      await atomicWriteJsonSecure(join4(dir, "run-state.json"), data);
     } catch {
     }
   }
   async loadPersistedRunState(conversationId) {
     const dir = this.getRunDir(conversationId);
-    return readJsonFileSafe(join5(dir, "run-state.json"));
+    return readJsonFileSafe(join4(dir, "run-state.json"));
   }
   async readUserRequest(conversationId) {
     try {
       const dir = this.getRunDir(conversationId);
-      const content = await readFile4(join5(dir, "USER_REQUEST.md"), "utf-8");
+      const content = await readFile4(join4(dir, "USER_REQUEST.md"), "utf-8");
       return content.replace(/^#\s*User request\s*\n+/, "").trim() || null;
     } catch {
       return null;
@@ -3631,7 +3609,7 @@ ${userInput.trim() || "(empty)"}
   async readReadme(conversationId) {
     try {
       const dir = this.getRunDir(conversationId);
-      return await readFile4(join5(dir, "README.md"), "utf-8");
+      return await readFile4(join4(dir, "README.md"), "utf-8");
     } catch {
       return null;
     }
@@ -3640,14 +3618,14 @@ ${userInput.trim() || "(empty)"}
     const dir = this.getRunDir(conversationId);
     await mkdir3(dir, { recursive: true });
     await atomicWriteJsonSecure(
-      join5(dir, _ScenarioRunStore.SCENARIO_SNAPSHOT_FILE),
+      join4(dir, _ScenarioRunStore.SCENARIO_SNAPSHOT_FILE),
       scenario,
       true
     );
   }
   async loadScenarioSnapshot(conversationId) {
     const dir = this.getRunDir(conversationId);
-    return readJsonFileSafe(join5(dir, _ScenarioRunStore.SCENARIO_SNAPSHOT_FILE));
+    return readJsonFileSafe(join4(dir, _ScenarioRunStore.SCENARIO_SNAPSHOT_FILE));
   }
 };
 var scenarioRunStore = new ScenarioRunStore();
@@ -3704,7 +3682,7 @@ async function vaultOfProject(projectId) {
 import { randomUUID as randomUUID3 } from "crypto";
 import { mkdir as mkdir4, writeFile as writeFile2, readFile as readFile5, unlink as unlink2, readdir as readdir3 } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
-import { join as join6, extname, resolve, sep } from "path";
+import { join as join5, extname, resolve, sep } from "path";
 var ALLOWED_MIME_TYPES = /* @__PURE__ */ new Set([
   "image/png",
   "image/jpeg",
@@ -3741,7 +3719,7 @@ var ImageStorageService = class {
     const imageId = randomUUID3();
     const safeExt = ext.replace(/[^a-z.]/g, "");
     const fileName = `${imageId}${safeExt}`;
-    const filePath = join6(this.dir, fileName);
+    const filePath = join5(this.dir, fileName);
     const resolvedPath = resolve(filePath);
     const resolvedDir = resolve(this.dir);
     if (resolvedPath !== resolvedDir && !resolvedPath.startsWith(resolvedDir + sep)) {
@@ -3767,7 +3745,7 @@ var ImageStorageService = class {
       const files = await readdir3(this.dir);
       const metaFile = files.find((f) => f.startsWith(imageId) && f.endsWith(".meta.json"));
       if (!metaFile) return null;
-      const raw = JSON.parse(await readFile5(join6(this.dir, metaFile), "utf-8"));
+      const raw = JSON.parse(await readFile5(join5(this.dir, metaFile), "utf-8"));
       if (expectedContextId !== void 0 && raw.contextId !== expectedContextId) return null;
       if (!existsSync2(raw.filePath)) return null;
       return { filePath: raw.filePath, mimeType: raw.mimeType, contextId: raw.contextId };
@@ -3793,7 +3771,7 @@ var ImageStorageService = class {
     await Promise.all(
       files.filter((f) => f.endsWith(".meta.json")).map(async (file) => {
         try {
-          const raw = JSON.parse(await readFile5(join6(this.dir, file), "utf-8"));
+          const raw = JSON.parse(await readFile5(join5(this.dir, file), "utf-8"));
           if (raw.contextId === contextId) {
             await unlink2(raw.filePath).catch(() => {
             });
@@ -3823,7 +3801,7 @@ var ImageStorageService = class {
     for (const file of files) {
       if (!file.endsWith(".meta.json")) continue;
       try {
-        const raw = JSON.parse(await readFile5(join6(this.dir, file), "utf-8"));
+        const raw = JSON.parse(await readFile5(join5(this.dir, file), "utf-8"));
         if (now - raw.createdAt > ttlMs) expired.push(raw);
       } catch {
       }
@@ -3893,7 +3871,7 @@ import { TRPCError as TRPCError3 } from "@trpc/server";
 
 // ../server/src/services/cloud-session-store.ts
 import { readFile as readFile6, writeFile as writeFile3, mkdir as mkdir5, chmod as chmod2, unlink as unlink3 } from "fs/promises";
-import { dirname as dirname3 } from "path";
+import { dirname as dirname2 } from "path";
 import { randomBytes as randomBytes2, createHash, timingSafeEqual as timingSafeEqual2 } from "crypto";
 var FILENAME2 = "cloud-session.json";
 var STATE_TTL_MS = 5 * 60 * 1e3;
@@ -4000,7 +3978,7 @@ var CloudSessionStore = class {
   }
   async save() {
     const filePath = await this.getFilePath();
-    await mkdir5(dirname3(filePath), { recursive: true });
+    await mkdir5(dirname2(filePath), { recursive: true });
     const payload = { version: 2, accounts: this.accounts };
     const tmpPath = filePath + ".tmp";
     await writeFile3(tmpPath, JSON.stringify(payload, null, 2), "utf-8");
@@ -4142,7 +4120,7 @@ var cloudSessionStore = new CloudSessionStore();
 // ../server/src/services/lan-mode.ts
 import { networkInterfaces } from "os";
 import { readFile as readFile7, writeFile as writeFile4, mkdir as mkdir6 } from "fs/promises";
-import { join as join7 } from "path";
+import { join as join6 } from "path";
 import { z as z7 } from "zod";
 var LOOPBACK2 = "127.0.0.1";
 var ANY = "0.0.0.0";
@@ -4155,7 +4133,7 @@ function instanceKey() {
   return env.DATA_DIR;
 }
 function networkFilePath() {
-  return join7(machineRoot(), NETWORK_FILE);
+  return join6(machineRoot(), NETWORK_FILE);
 }
 async function readFileState() {
   try {
@@ -4273,12 +4251,12 @@ function getCloudApiUrl() {
   return (env.CLOUD_URL ?? DEFAULT_CLOUD_API_URL).replace(/\/+$/, "");
 }
 async function orgCloudUrl(orgId) {
-  const { readOrgClouds } = await import("./vault-resolver-57Q2DVOR.js");
+  const { readOrgClouds } = await import("./vault-resolver-B5P2OUI5.js");
   const clouds = await readOrgClouds();
   return (clouds[orgId] ?? getCloudApiUrl()).replace(/\/+$/, "");
 }
 async function accountForOrg(orgId) {
-  const { readOrgAccounts, readOrgClouds } = await import("./vault-resolver-57Q2DVOR.js");
+  const { readOrgAccounts, readOrgClouds } = await import("./vault-resolver-B5P2OUI5.js");
   const [stampedAccounts, stampedClouds, accounts] = await Promise.all([
     readOrgAccounts(),
     readOrgClouds(),
@@ -4293,6 +4271,19 @@ async function accountForOrg(orgId) {
 function getCloudAppUrl() {
   return (env.CLOUD_APP_URL ?? DEFAULT_CLOUD_APP_URL).replace(/\/+$/, "");
 }
+function cloudAppUrlFor(viewerOrigin) {
+  const base = getCloudAppUrl();
+  try {
+    const app = new URL(base);
+    const viewer = new URL(viewerOrigin);
+    const loopback = (h) => h === "localhost" || h === "127.0.0.1" || h === "[::1]";
+    if (!loopback(app.hostname) || loopback(viewer.hostname)) return base;
+    app.hostname = viewer.hostname;
+    return app.toString().replace(/\/+$/, "");
+  } catch {
+    return base;
+  }
+}
 var CloudAmbiguousAccountError = class extends Error {
   code = "CLOUD_AMBIGUOUS_ACCOUNT";
   constructor() {
@@ -4445,7 +4436,7 @@ var cloudAuthRouter = router({
       });
     }
     const state = cloudSessionStore.createState(input.returnTo);
-    const url = `${getCloudAppUrl()}/link-local?callback=${encodeURIComponent(callback)}&state=${encodeURIComponent(state)}`;
+    const url = `${cloudAppUrlFor(input.returnTo)}/link-local?callback=${encodeURIComponent(callback)}&state=${encodeURIComponent(state)}`;
     return { url };
   }),
   /**
@@ -4482,7 +4473,7 @@ var cloudAuthRouter = router({
    * du projet ouvert, sous quel compte il se synchronise.
    */
   accounts: protectedProcedure.query(async () => {
-    const { readOrgAccounts } = await import("./vault-resolver-57Q2DVOR.js");
+    const { readOrgAccounts } = await import("./vault-resolver-B5P2OUI5.js");
     return { accounts: await cloudSessionStore.list(), orgAccounts: await readOrgAccounts() };
   }),
   /** The cloud session (user + org), fetched with the stored token. */
@@ -4500,7 +4491,7 @@ var cloudAuthRouter = router({
       const identity = await readCloudIdentity(account.cloudUrl, await cloudSessionStore.getToken(accountId) ?? "");
       if (identity) {
         const settled = await cloudSessionStore.describe(accountId, identity);
-        const { renameOrgAccount } = await import("./vault-resolver-57Q2DVOR.js");
+        const { renameOrgAccount } = await import("./vault-resolver-B5P2OUI5.js");
         await renameOrgAccount(accountId, settled);
       }
     }
@@ -4841,6 +4832,17 @@ var KanbanStore = class {
     });
     return res.ok;
   }
+  /**
+   * Le compte cloud qui porte un tableau donné.
+   *
+   * Exposé pour les appels qui ne passent pas par ce magasin — le
+   * téléchargement d'une pièce jointe tire les octets par `cloudFetch` — mais
+   * qui relèvent du même tableau, et doivent donc en emprunter le compte au
+   * lieu d'exiger un poste à compte unique.
+   */
+  accountForBoard(boardId) {
+    return accountOfBoard(boardId);
+  }
   /**
    * Les membres de l'organisation — sans quoi assigner reviendrait à deviner
    * un identifiant.
@@ -4927,6 +4929,33 @@ var KanbanStore = class {
     });
     return res.ok;
   }
+  /**
+   * Les références : la même carte posée sur un autre tableau. La carte reste
+   * chez elle ; `boardId` est le tableau où on la pose, ou d'où on la retire.
+   */
+  async cardPlacements(boardId, cardId) {
+    const res = await callCloud(
+      `/kanban/card-placement/list?boardId=${encodeURIComponent(boardId)}&cardId=${encodeURIComponent(cardId)}`,
+      await scopeOfBoard(boardId)
+    );
+    return res.data?.placements ?? [];
+  }
+  async placeCard(boardId, cardId, column) {
+    const res = await callCloud("/kanban/card-placement/add", {
+      method: "POST",
+      body: { boardId, cardId, column },
+      ...await scopeOfBoard(boardId)
+    });
+    return { ok: res.ok, reason: res.reason };
+  }
+  async unplaceCard(boardId, cardId) {
+    const res = await callCloud("/kanban/card-placement/remove", {
+      method: "POST",
+      body: { boardId, cardId },
+      ...await scopeOfBoard(boardId)
+    });
+    return res.ok;
+  }
   async create(input) {
     const organizationId = await resolveOrganizationId();
     if (!organizationId) return null;
@@ -5099,7 +5128,7 @@ function generateKanbanSystemPrompt(board, cardId, history, links) {
         lines.push(`- \`${f.id}\` \u2014 ${f.name} (${f.contentType}, ${formatSize(f.size)})`);
       }
       lines.push("");
-      lines.push("> Ces fichiers ne sont **pas** dans ce prompt. Appelle `kanban_download_attachment(attachmentId)` pour en r\xE9cup\xE9rer un sur le disque, puis ouvre le chemin renvoy\xE9 avec tes outils de lecture de fichiers.");
+      lines.push(`> Ces fichiers ne sont **pas** dans ce prompt. Appelle \`kanban_download_attachment(attachmentId, boardId: "${board.id}")\` pour en r\xE9cup\xE9rer un sur le disque, puis ouvre le chemin renvoy\xE9 avec tes outils de lecture de fichiers. Le \`boardId\` dit sous quel compte cloud le demander : passe-le toujours.`);
       lines.push("");
     }
   }
@@ -5127,9 +5156,10 @@ function generateKanbanSystemPrompt(board, cardId, history, links) {
   lines.push("- `kanban_move_card(boardId, cardId, targetColumn)` \u2014 D\xE9placer la carte vers une autre colonne");
   lines.push("- `kanban_add_comment(boardId, cardId, comment)` \u2014 Ajouter un commentaire sur la carte");
   lines.push("- `kanban_get_card_comments(boardId, cardId)` \u2014 **Relire** le fil de commentaires \xE0 jour");
-  lines.push("- `kanban_download_attachment(attachmentId)` \u2014 T\xE9l\xE9charger une pi\xE8ce jointe et obtenir son chemin local");
+  lines.push("- `kanban_download_attachment(attachmentId, boardId)` \u2014 T\xE9l\xE9charger une pi\xE8ce jointe et obtenir son chemin local");
   lines.push("- `kanban_get_card_links(boardId)` \u2014 Lire la filiation des cartes du tableau (parent \u2194 sous-cartes)");
   lines.push("- `kanban_set_card_parent(boardId, cardId, parentCardId?)` \u2014 Rattacher une carte \xE0 une carte parente, ou l'en d\xE9tacher");
+  lines.push("- `kanban_place_card(boardId, cardId, column)` \u2014 Poser une carte existante sur un autre tableau, sans la copier (r\xE9f\xE9rence)");
   lines.push("- `kanban_get_card_conversations(boardId, cardId)` \u2014 Lire les conversations de support (Intercom\u2026) li\xE9es \xE0 la carte \u2014 elles ne sont pas dans les commentaires");
   lines.push("- `kanban_search_conversations(boardId, query)` puis `kanban_link_conversation(boardId, cardId, connectionId, externalId)` \u2014 Trouver une conversation de support et la lier \xE0 la carte (lecture seule chez le fournisseur)");
   lines.push("");
@@ -5273,6 +5303,10 @@ function tailTranscript(opts) {
   let pendingBuf = "";
   let reading = false;
   let queuedRead = false;
+  let markReady;
+  const ready = new Promise((resolve2) => {
+    markReady = resolve2;
+  });
   const cleanup = async () => {
     stopped = true;
     if (watcher) {
@@ -5342,6 +5376,7 @@ function tailTranscript(opts) {
       if (startAtEnd) {
         offset = (await fh.stat()).size;
       }
+      markReady();
       await readMore();
       if (stopped) return;
       watcher = watch(path, { persistent: false }, () => {
@@ -5364,19 +5399,21 @@ function tailTranscript(opts) {
     } finally {
       signal.removeEventListener("abort", onAbort);
       await cleanup();
+      markReady();
     }
   })();
   return {
     stop: () => {
       void cleanup();
     },
-    whenDone
+    whenDone,
+    ready
   };
 }
 
 // ../server/src/services/ai-runners/claude-pty-runner.ts
 async function getAgentManager() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-FUU72VGH.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-NAGIMH2T.js");
   return agentManager2;
 }
 function buildPtyArgs(params, sessionId, opts) {
@@ -6070,7 +6107,7 @@ async function shutdownCodexAppServer() {
   }
 }
 async function getAgentManager2() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-FUU72VGH.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-NAGIMH2T.js");
   return agentManager2;
 }
 function parseRuneyaCurlCommand(command) {
@@ -6535,7 +6572,7 @@ ${runeya_ai_vars}` : "";
 
 ${context}${envSection}`;
 }
-async function* runAnthropic(client, model, system, initialMessages, apiKey, authToken, signal, anchor2 = {}) {
+async function* runAnthropic(client, model, system, initialMessages, apiKey, authToken, signal, anchor = {}) {
   const messages = [...initialMessages];
   const MAX_TOOL_ROUNDS = 10;
   for (let round = 0; round < MAX_TOOL_ROUNDS; round++) {
@@ -6592,7 +6629,7 @@ async function* runAnthropic(client, model, system, initialMessages, apiKey, aut
       let result;
       let isError = false;
       try {
-        result = await executeTool(block.name, block.input, apiKey, authToken, anchor2);
+        result = await executeTool(block.name, block.input, apiKey, authToken, anchor);
       } catch (err) {
         result = err.message;
         isError = true;
@@ -6609,7 +6646,7 @@ async function* runAnthropic(client, model, system, initialMessages, apiKey, aut
   }
   yield { type: "done", text: "" };
 }
-async function* runOpenAI(client, model, initialMessages, apiKey, authToken, signal, anchor2 = {}) {
+async function* runOpenAI(client, model, initialMessages, apiKey, authToken, signal, anchor = {}) {
   const messages = [...initialMessages];
   const MAX_TOOL_ROUNDS = 10;
   for (let round = 0; round < MAX_TOOL_ROUNDS; round++) {
@@ -6660,7 +6697,7 @@ async function* runOpenAI(client, model, initialMessages, apiKey, authToken, sig
       let result;
       let isError = false;
       try {
-        result = await executeTool(tc.name, input, apiKey, authToken, anchor2);
+        result = await executeTool(tc.name, input, apiKey, authToken, anchor);
       } catch (err) {
         result = err.message;
         isError = true;
@@ -7014,7 +7051,9 @@ var chatRouter = router({
       // The project the conversation is about: only the caller knows which
       // one it is looking at.
       projectId: Id128Schema.optional(),
-      orgId: z9.string().max(128).nullable().optional()
+      orgId: z9.string().max(128).nullable().optional(),
+      // L'agent où la conversation travaille. Absent = agent par défaut.
+      agentId: Id128Schema.optional()
     })).mutation(async ({ input }) => {
       let scenario = null;
       if (input.scenarioId) {
@@ -7026,6 +7065,10 @@ var chatRouter = router({
       }
       const machineSettings = await settingsManager.getSettings();
       const companionByDefault = machineSettings.companion?.enabledByDefault ?? false;
+      const extra = {
+        ...input.agentId ? { agentId: input.agentId } : {},
+        ...companionByDefault ? { companionEnabled: true } : {}
+      };
       const conv = await conversationStore.create(
         input.title,
         input.isCli ?? false,
@@ -7037,7 +7080,7 @@ var chatRouter = router({
         input.providerId,
         input.projectId,
         input.orgId,
-        companionByDefault ? { companionEnabled: true } : void 0
+        Object.keys(extra).length > 0 ? extra : void 0
       );
       if (scenario) {
         await scenarioRunStore.initializeConversationWorkspace(
@@ -7525,7 +7568,7 @@ ${input.prompt}` : input.prompt;
     }
     const conv = await conversationStore.get(input.conversationId);
     const convRef = conv ? await conversationStore.projectRefOf(conv) : null;
-    const anchor2 = { projectId: convRef?.id, orgId: convRef?.orgId ?? void 0 };
+    const anchor = { projectId: convRef?.id, orgId: convRef?.orgId ?? void 0 };
     const active = await getActiveProvider(conv?.providerId, convRef?.orgId ?? void 0);
     if (!active) {
       throw new TRPCError4({
@@ -7574,7 +7617,7 @@ ${input.prompt}` : input.prompt;
             }
             return { role: m.role, content: m.content };
           });
-          gen = runAnthropic(client, model, system, msgs, apiKey, authToken, apiSignal, anchor2);
+          gen = runAnthropic(client, model, system, msgs, apiKey, authToken, apiSignal, anchor);
         } else if (provider.provider in OPENAI_COMPAT_BASE_URLS) {
           const baseURL = OPENAI_COMPAT_BASE_URLS[provider.provider];
           const client = new OpenAI2({ apiKey: plaintextKey || "ollama", baseURL });
@@ -7593,7 +7636,7 @@ ${input.prompt}` : input.prompt;
               return { role: m.role, content: m.content };
             })
           ];
-          gen = runOpenAI(client, model, msgs, apiKey, authToken, apiSignal, anchor2);
+          gen = runOpenAI(client, model, msgs, apiKey, authToken, apiSignal, anchor);
         } else {
           activeSessionRegistry.pushEvent(input.conversationId, { type: "error", message: `Provider "${provider.provider}" is not supported.` });
           activeSessionRegistry.pushEvent(input.conversationId, { type: "done", text: "" });
@@ -8061,9 +8104,6 @@ export {
   isShareable,
   logParserStore,
   buildServerBuiltins,
-  resolveWorkspaceCwd,
-  resolveAgentCwd,
-  resolveConversationCwd,
   resolveEffectiveAgentId,
   resolveServiceVariables,
   serviceRouter,
@@ -8102,4 +8142,4 @@ export {
   startCliSession,
   chatRouter
 };
-//# sourceMappingURL=chunk-P65BO7WZ.js.map
+//# sourceMappingURL=chunk-WNCXZ6E7.js.map