@runfusion/fusion 0.3.0 → 0.4.1

package/dist/extension.js

@@ -193,6 +193,40 @@ var init_settings_schema = __esm({
       missionHealthCheckIntervalMs: 3e5,
       agentPrompts: void 0,
       promptOverrides: void 0,
+      remoteAccess: {
+        activeProvider: null,
+        providers: {
+          tailscale: {
+            enabled: false,
+            hostname: "",
+            targetPort: 0,
+            acceptRoutes: false
+          },
+          cloudflare: {
+            enabled: false,
+            quickTunnel: false,
+            tunnelName: "",
+            tunnelToken: null,
+            ingressUrl: ""
+          }
+        },
+        tokenStrategy: {
+          persistent: {
+            enabled: true,
+            token: null
+          },
+          shortLived: {
+            enabled: false,
+            ttlMs: 9e5,
+            maxTtlMs: 864e5
+          }
+        },
+        lifecycle: {
+          rememberLastRunning: false,
+          wasRunningOnShutdown: false,
+          lastRunningProvider: null
+        }
+      },
       reflectionEnabled: false,
       reflectionIntervalMs: 36e5,
       reflectionAfterTask: true,
@@ -354,18 +388,18 @@ Call \`task_done()\` to signal completion.
       },
       "triage-welcome": {
         key: "triage-welcome",
-        name: "Triage Welcome",
+        name: "Planning Welcome",
         roles: ["triage"],
-        description: "Introductory section for the triage/specification agent",
+        description: "Introductory section for the planning agent",
         defaultContent: `You are a task specification agent for "fn", an AI-orchestrated task board.
 
 Your job: take a rough task description and produce a fully specified PROMPT.md that another AI agent can execute autonomously in a fresh context with zero memory of this conversation.`
       },
       "triage-context": {
         key: "triage-context",
-        name: "Triage Context",
+        name: "Planning Context",
         roles: ["triage"],
-        description: "Context-gathering instructions for triage",
+        description: "Context-gathering instructions for planning",
         defaultContent: `## What you receive
 - A raw task title and optional description (the user's rough idea)
 - Access to the project's files so you can understand context`
@@ -1054,7 +1088,7 @@ Output Requirements:
       }
     };
     COLUMN_LABELS = {
-      triage: "Triage",
+      triage: "Planning",
       todo: "Todo",
       "in-progress": "In Progress",
       "in-review": "In Review",
@@ -1062,7 +1096,7 @@ Output Requirements:
       archived: "Archived"
     };
     COLUMN_DESCRIPTIONS = {
-      triage: "Raw ideas \u2014 AI will specify these",
+      triage: "Raw ideas \u2014 AI will plan these",
       todo: "Specified and ready to start",
       "in-progress": "AI is working on this in a worktree",
       "in-review": "Complete \u2014 ready to merge",
@@ -2188,7 +2222,7 @@ var init_db = __esm({
   "../core/src/db.ts"() {
     "use strict";
     init_types();
-    SCHEMA_VERSION = 46;
+    SCHEMA_VERSION = 47;
     SCHEMA_SQL = `
 -- Tasks table with JSON columns for nested data
 CREATE TABLE IF NOT EXISTS tasks (
@@ -3626,6 +3660,14 @@ CREATE INDEX IF NOT EXISTS idxTodoItemsSortOrder ON todo_items(listId, sortOrder
             this.db.exec("CREATE INDEX IF NOT EXISTS idxTodoItemsSortOrder ON todo_items(listId, sortOrder)");
           });
         }
+        if (version < 47) {
+          this.applyMigration(47, () => {
+            if (this.hasTable("tasks") && this.hasColumn("tasks", "status")) {
+              this.db.exec("UPDATE tasks SET status = 'planning' WHERE status = 'specifying'");
+              this.db.exec("UPDATE tasks SET status = 'needs-replan' WHERE status = 'needs-respecify'");
+            }
+          });
+        }
       }
       /**
        * Run a single migration step inside a transaction and bump the version.
@@ -17106,10 +17148,10 @@ var init_central_core = __esm({
        */
       async generateProjectName(projectPath) {
         try {
-          const { execFile: execFile4 } = await import("node:child_process");
-          const { promisify: promisify11 } = await import("node:util");
-          const execFileAsync2 = promisify11(execFile4);
-          const { stdout } = await execFileAsync2(
+          const { execFile: execFile6 } = await import("node:child_process");
+          const { promisify: promisify13 } = await import("node:util");
+          const execFileAsync4 = promisify13(execFile6);
+          const { stdout } = await execFileAsync4(
             "git",
             ["remote", "get-url", "origin"],
             { cwd: projectPath, timeout: 5e3 }
@@ -17594,8 +17636,8 @@ function hasProjectDbFile(dir, folderName, dbName) {
   if (!existsSync8(projectDir)) return false;
   if (!existsSync8(dbPath)) return false;
   try {
-    const stat7 = statSync2(dbPath);
-    return stat7.isFile() && stat7.size > 0;
+    const stat8 = statSync2(dbPath);
+    return stat8.isFile() && stat8.size > 0;
   } catch {
     return false;
   }
@@ -17722,10 +17764,10 @@ var init_migration = __esm({
           return basename3(projectPath);
         }
         try {
-          const { execFile: execFile4 } = await import("node:child_process");
-          const { promisify: promisify11 } = await import("node:util");
-          const execFileAsync2 = promisify11(execFile4);
-          const { stdout } = await execFileAsync2(
+          const { execFile: execFile6 } = await import("node:child_process");
+          const { promisify: promisify13 } = await import("node:util");
+          const execFileAsync4 = promisify13(execFile6);
+          const { stdout } = await execFileAsync4(
             "git",
             ["remote", "get-url", "origin"],
             { cwd: projectPath, timeout: 1e3 }
@@ -28431,13 +28473,13 @@ async function searchWithQmd(rootDir, options) {
   const command = "qmd";
   const limit = Math.max(1, Math.min(options.limit ?? 5, 20));
   try {
-    const { execFile: execFile4 } = await import("node:child_process");
-    const { promisify: promisify11 } = await import("node:util");
-    const execFileAsync2 = promisify11(execFile4);
-    await ensureQmdProjectMemoryCollection(rootDir, execFileAsync2);
+    const { execFile: execFile6 } = await import("node:child_process");
+    const { promisify: promisify13 } = await import("node:util");
+    const execFileAsync4 = promisify13(execFile6);
+    await ensureQmdProjectMemoryCollection(rootDir, execFileAsync4);
     scheduleQmdProjectMemoryRefresh(rootDir);
     const args = buildQmdSearchArgs(rootDir, options);
-    const { stdout } = await execFileAsync2(command, args, {
+    const { stdout } = await execFileAsync4(command, args, {
       cwd: rootDir,
       timeout: 4e3,
       maxBuffer: 1024 * 1024
@@ -28462,12 +28504,12 @@ async function searchWithQmd(rootDir, options) {
     return [];
   }
 }
-async function ensureQmdProjectMemoryCollection(rootDir, execFileAsync2) {
+async function ensureQmdProjectMemoryCollection(rootDir, execFileAsync4) {
   const collectionName = qmdMemoryCollectionName(rootDir);
   const memoryDir = memoryWorkspacePath(rootDir);
   await mkdir6(memoryDir, { recursive: true });
   try {
-    await execFileAsync2("qmd", buildQmdCollectionAddArgs(rootDir), {
+    await execFileAsync4("qmd", buildQmdCollectionAddArgs(rootDir), {
       cwd: rootDir,
       timeout: 4e3,
       maxBuffer: 512 * 1024
@@ -28483,9 +28525,9 @@ ${stderr}`)) {
   return collectionName;
 }
 async function getDefaultExecFileAsync() {
-  const { execFile: execFile4 } = await import("node:child_process");
-  const { promisify: promisify11 } = await import("node:util");
-  return promisify11(execFile4);
+  const { execFile: execFile6 } = await import("node:child_process");
+  const { promisify: promisify13 } = await import("node:util");
+  return promisify13(execFile6);
 }
 async function refreshQmdProjectMemoryIndex(rootDir, options) {
   const key = resolve5(rootDir);
@@ -28500,14 +28542,14 @@ async function refreshQmdProjectMemoryIndex(rootDir, options) {
     }
   }
   const promise = (async () => {
-    const execFileAsync2 = options?.execFileAsync ?? await getDefaultExecFileAsync();
-    await ensureQmdProjectMemoryCollection(rootDir, execFileAsync2);
-    await execFileAsync2("qmd", ["update"], {
+    const execFileAsync4 = options?.execFileAsync ?? await getDefaultExecFileAsync();
+    await ensureQmdProjectMemoryCollection(rootDir, execFileAsync4);
+    await execFileAsync4("qmd", ["update"], {
       cwd: rootDir,
       timeout: 3e4,
       maxBuffer: 1024 * 1024
     });
-    await execFileAsync2("qmd", ["embed"], {
+    await execFileAsync4("qmd", ["embed"], {
       cwd: rootDir,
       timeout: 12e4,
       maxBuffer: 1024 * 1024
@@ -28532,8 +28574,8 @@ function scheduleQmdProjectMemoryRefresh(rootDir) {
 }
 async function isQmdAvailable() {
   try {
-    const execFileAsync2 = await getDefaultExecFileAsync();
-    await execFileAsync2("qmd", ["--help"], {
+    const execFileAsync4 = await getDefaultExecFileAsync();
+    await execFileAsync4("qmd", ["--help"], {
       timeout: 3e3,
       maxBuffer: 128 * 1024
     });
@@ -28543,12 +28585,12 @@ async function isQmdAvailable() {
   }
 }
 async function installQmd(options) {
-  const execFileAsync2 = options?.execFileAsync ?? await getDefaultExecFileAsync();
+  const execFileAsync4 = options?.execFileAsync ?? await getDefaultExecFileAsync();
   const [command, ...args] = QMD_INSTALL_COMMAND.split(" ");
   if (!command || args.length === 0) {
     throw new MemoryBackendError("BACKEND_UNAVAILABLE", "qmd install command is not configured", "qmd");
   }
-  await execFileAsync2(command, args, {
+  await execFileAsync4(command, args, {
     timeout: 12e4,
     maxBuffer: 1024 * 1024
   });
@@ -29354,6 +29396,29 @@ function canonicalizeSettings(settings) {
   }
   return base;
 }
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function deepMergeWithNullDelete(existingValue, patchValue) {
+  const merged = isPlainObject(existingValue) ? { ...existingValue } : {};
+  for (const [key, value] of Object.entries(patchValue)) {
+    if (value === null) {
+      delete merged[key];
+      continue;
+    }
+    if (isPlainObject(value)) {
+      const nested = deepMergeWithNullDelete(merged[key], value);
+      if (nested === void 0) {
+        delete merged[key];
+      } else {
+        merged[key] = nested;
+      }
+      continue;
+    }
+    merged[key] = value;
+  }
+  return Object.keys(merged).length > 0 ? merged : void 0;
+}
 var TASK_ACTIVITY_LOG_ENTRY_LIMIT, TASK_ACTIVITY_LOG_OUTCOME_LIMIT, ARCHIVE_AGENT_LOG_SNAPSHOT_LIMIT, ARCHIVE_AGENT_LOG_SNIPPET_LIMIT, storeLog, TaskHasDependentsError, TaskStore;
 var init_store = __esm({
   "../core/src/store.ts"() {
@@ -30524,6 +30589,21 @@ ${recentText}` : void 0
               projectPatch["promptOverrides"] = mergedMap;
             }
           }
+          const incomingRemoteAccess = projectPatch["remoteAccess"];
+          if (incomingRemoteAccess === null) {
+            delete config.settings["remoteAccess"];
+            delete projectPatch["remoteAccess"];
+          } else if (isPlainObject(incomingRemoteAccess)) {
+            const existingRemoteAccess = config.settings["remoteAccess"];
+            const mergedRemoteAccess = deepMergeWithNullDelete(existingRemoteAccess, incomingRemoteAccess);
+            if (mergedRemoteAccess === void 0) {
+              delete config.settings["remoteAccess"];
+              delete projectPatch["remoteAccess"];
+            } else {
+              config.settings["remoteAccess"] = mergedRemoteAccess;
+              projectPatch["remoteAccess"] = mergedRemoteAccess;
+            }
+          }
           for (const key of Object.keys(projectPatch)) {
             if (projectPatch[key] === null) {
               delete config.settings[key];
@@ -31914,8 +31994,8 @@ ${task.description}
           if (this.isWatching) this.taskCache.delete(id);
           const dir = this.taskDir(id);
           if (existsSync12(dir)) {
-            const { rm: rm3 } = await import("node:fs/promises");
-            await rm3(dir, { recursive: true });
+            const { rm: rm4 } = await import("node:fs/promises");
+            await rm4(dir, { recursive: true });
           }
           for (const dependentTask of rewrittenDependents) {
             this.emit("task:updated", dependentTask);
@@ -32250,8 +32330,8 @@ ${task.description}
           this.archiveDb.upsert(entry);
           this.db.prepare("DELETE FROM tasks WHERE id = ?").run(id);
           this.db.bumpLastModified();
-          const { rm: rm3 } = await import("node:fs/promises");
-          await rm3(dir, { recursive: true, force: true });
+          const { rm: rm4 } = await import("node:fs/promises");
+          await rm4(dir, { recursive: true, force: true });
           if (this.isWatching) {
             this.taskCache.delete(id);
           }
@@ -32758,7 +32838,7 @@ ${task.description}
           let invalidatedStatus = false;
           try {
             await this.updateTask(id, {
-              status: "needs-respecify"
+              status: "needs-replan"
             });
             invalidatedStatus = true;
           } catch (err) {
@@ -32766,7 +32846,7 @@ ${task.description}
               ...commentContextBase,
               phase: "addComment:awaiting-approval-invalidation",
               stage: "status-update",
-              nextStatus: "needs-respecify",
+              nextStatus: "needs-replan",
               error: err instanceof Error ? err.message : String(err)
             });
           }
@@ -32783,7 +32863,7 @@ ${task.description}
                 ...commentContextBase,
                 phase: "addComment:awaiting-approval-invalidation",
                 stage: "post-invalidation-log-entry",
-                nextStatus: "needs-respecify",
+                nextStatus: "needs-replan",
                 error: err instanceof Error ? err.message : String(err)
               });
             }
@@ -33203,14 +33283,14 @@ ${task.description}
         if (rows.length === 0) {
           return;
         }
-        const { rm: rm3 } = await import("node:fs/promises");
+        const { rm: rm4 } = await import("node:fs/promises");
         for (const row of rows) {
           const task = this.rowToTask(row);
           const archivedAt = task.columnMovedAt ?? task.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString();
           const entry = await this.taskToArchiveEntry(task, archivedAt);
           this.archiveDb.upsert(entry);
           this.db.prepare("DELETE FROM tasks WHERE id = ?").run(task.id);
-          await rm3(this.taskDir(task.id), { recursive: true, force: true });
+          await rm4(this.taskDir(task.id), { recursive: true, force: true });
           if (this.isWatching) {
             this.taskCache.delete(task.id);
           }
@@ -33233,8 +33313,8 @@ ${task.description}
           this.archiveDb.upsert(entry);
           this.db.prepare("DELETE FROM tasks WHERE id = ?").run(task.id);
           this.db.bumpLastModified();
-          const { rm: rm3 } = await import("node:fs/promises");
-          await rm3(dir, { recursive: true, force: true });
+          const { rm: rm4 } = await import("node:fs/promises");
+          await rm4(dir, { recursive: true, force: true });
           if (this.isWatching) {
             this.taskCache.delete(task.id);
           }
@@ -36345,6 +36425,47 @@ async function writeMemoryAudit(rootDir, content) {
   }
   await writeFile8(filePath, content, "utf-8");
 }
+async function readMemoryAuditState(rootDir) {
+  const filePath = join18(rootDir, MEMORY_AUDIT_STATE_PATH);
+  if (!existsSync15(filePath)) {
+    return null;
+  }
+  try {
+    const raw = await readFile10(filePath, "utf-8");
+    const parsed = JSON.parse(raw);
+    const extraction = isValidExtractionMetadata(parsed.extraction) ? parsed.extraction : void 0;
+    const pruning = isValidPruneOutcome(parsed.pruning) ? parsed.pruning : void 0;
+    return {
+      extraction,
+      pruning,
+      updatedAt: typeof parsed.updatedAt === "string" && parsed.updatedAt.trim() ? parsed.updatedAt : (/* @__PURE__ */ new Date()).toISOString()
+    };
+  } catch {
+    return null;
+  }
+}
+async function writeMemoryAuditState(rootDir, state) {
+  const filePath = join18(rootDir, MEMORY_AUDIT_STATE_PATH);
+  const dir = join18(rootDir, ".fusion");
+  if (!existsSync15(dir)) {
+    await mkdir9(dir, { recursive: true });
+  }
+  await writeFile8(filePath, JSON.stringify(state, null, 2), "utf-8");
+}
+function isValidExtractionMetadata(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  const candidate = value;
+  return typeof candidate.runAt === "string" && typeof candidate.success === "boolean" && typeof candidate.insightCount === "number" && typeof candidate.duplicateCount === "number" && typeof candidate.skippedCount === "number" && typeof candidate.summary === "string" && (candidate.error === void 0 || typeof candidate.error === "string");
+}
+function isValidPruneOutcome(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  const candidate = value;
+  return typeof candidate.applied === "boolean" && typeof candidate.reason === "string" && typeof candidate.sizeDelta === "number" && typeof candidate.originalSize === "number" && typeof candidate.newSize === "number";
+}
 function buildInsightExtractionPrompt(workingMemory, existingInsights) {
   const existingSection = existingInsights ? `
 ## Existing Insights (already captured \u2014 do not duplicate)
@@ -36799,6 +36920,9 @@ function countInsightsInMarkdown(markdown) {
 async function generateMemoryAudit(rootDir, lastExtraction, pruningOutcome) {
   const checks = [];
   const now = (/* @__PURE__ */ new Date()).toISOString();
+  const persistedState = lastExtraction === void 0 || pruningOutcome === void 0 ? await readMemoryAuditState(rootDir) : null;
+  const effectiveExtraction = lastExtraction ?? persistedState?.extraction;
+  const effectivePruning = pruningOutcome ?? persistedState?.pruning;
   const workingMemoryPath = join18(rootDir, MEMORY_WORKING_PATH);
   const workingMemoryExists = existsSync15(workingMemoryPath);
   let workingMemorySize = 0;
@@ -36917,20 +37041,20 @@ async function generateMemoryAudit(rootDir, lastExtraction, pruningOutcome) {
       details: totalInsights > 0 ? `Contains ${totalInsights} insights across categories: patterns=${categoryCounts.pattern}, principles=${categoryCounts.principle}, conventions=${categoryCounts.convention}, pitfalls=${categoryCounts.pitfall}, context=${categoryCounts.context}` : "No insights extracted yet"
     });
   }
-  if (lastExtraction) {
-    const extractionAge = Date.now() - new Date(lastExtraction.runAt).getTime();
+  if (effectiveExtraction) {
+    const extractionAge = Date.now() - new Date(effectiveExtraction.runAt).getTime();
     const oneWeekMs = 7 * 24 * 60 * 60 * 1e3;
     checks.push({
       id: "recent-extraction",
       name: "Recent extraction activity",
-      passed: lastExtraction.success && extractionAge < oneWeekMs,
-      details: lastExtraction.success ? `Last successful extraction ${formatTimeAgo(lastExtraction.runAt)} (${lastExtraction.insightCount} insights, ${lastExtraction.duplicateCount} duplicates skipped)` : `Last extraction failed: ${lastExtraction.error || "Unknown error"}`
+      passed: effectiveExtraction.success && extractionAge < oneWeekMs,
+      details: effectiveExtraction.success ? `Last successful extraction ${formatTimeAgo(effectiveExtraction.runAt)} (${effectiveExtraction.insightCount} insights, ${effectiveExtraction.duplicateCount} duplicates skipped)` : `Last extraction failed: ${effectiveExtraction.error || "Unknown error"}`
     });
     checks.push({
       id: "extraction-summary",
       name: "Extraction produces meaningful summaries",
-      passed: lastExtraction.success && lastExtraction.summary.length > 10,
-      details: lastExtraction.success ? `Summary: "${lastExtraction.summary.slice(0, 100)}${lastExtraction.summary.length > 100 ? "..." : ""}"` : "No meaningful summary available"
+      passed: effectiveExtraction.success && effectiveExtraction.summary.length > 10,
+      details: effectiveExtraction.success ? `Summary: "${effectiveExtraction.summary.slice(0, 100)}${effectiveExtraction.summary.length > 100 ? "..." : ""}"` : "No meaningful summary available"
     });
   } else {
     checks.push({
@@ -36940,12 +37064,12 @@ async function generateMemoryAudit(rootDir, lastExtraction, pruningOutcome) {
       details: "No extraction runs recorded"
     });
   }
-  if (pruningOutcome) {
+  if (effectivePruning) {
     checks.push({
       id: "pruning-applied",
       name: "Memory pruning outcome",
-      passed: pruningOutcome.applied,
-      details: pruningOutcome.applied ? `Pruning applied: ${pruningOutcome.originalSize} \u2192 ${pruningOutcome.newSize} chars (${pruningOutcome.sizeDelta >= 0 ? "+" : ""}${pruningOutcome.sizeDelta} chars)` : `Pruning skipped: ${pruningOutcome.reason}`
+      passed: effectivePruning.applied,
+      details: effectivePruning.applied ? `Pruning applied: ${effectivePruning.originalSize} \u2192 ${effectivePruning.newSize} chars (${effectivePruning.sizeDelta >= 0 ? "+" : ""}${effectivePruning.sizeDelta} chars)` : `Pruning skipped: ${effectivePruning.reason}`
     });
   }
   const failedChecks = checks.filter((c) => !c.passed);
@@ -36972,14 +37096,14 @@ async function generateMemoryAudit(rootDir, lastExtraction, pruningOutcome) {
       categories: categoryCounts,
       lastUpdated
     },
-    extraction: lastExtraction ? {
-      runAt: lastExtraction.runAt,
-      success: lastExtraction.success,
-      insightCount: lastExtraction.insightCount,
-      duplicateCount: lastExtraction.duplicateCount,
-      skippedCount: lastExtraction.skippedCount,
-      summary: lastExtraction.summary,
-      error: lastExtraction.error
+    extraction: effectiveExtraction ? {
+      runAt: effectiveExtraction.runAt,
+      success: effectiveExtraction.success,
+      insightCount: effectiveExtraction.insightCount,
+      duplicateCount: effectiveExtraction.duplicateCount,
+      skippedCount: effectiveExtraction.skippedCount,
+      summary: effectiveExtraction.summary,
+      error: effectiveExtraction.error
     } : {
       runAt: "",
       success: false,
@@ -36988,7 +37112,7 @@ async function generateMemoryAudit(rootDir, lastExtraction, pruningOutcome) {
       skippedCount: 0,
       summary: "No extraction runs recorded"
     },
-    pruning: pruningOutcome ?? {
+    pruning: effectivePruning ?? {
       applied: false,
       reason: "No pruning run recorded",
       sizeDelta: 0,
@@ -37129,6 +37253,17 @@ async function processAndAuditInsightExtraction(rootDir, input) {
       newSize: currentMemory.length
     };
   }
+  try {
+    await writeMemoryAuditState(rootDir, {
+      extraction: extractionInfo,
+      pruning: pruneOutcome,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+  } catch (err) {
+    console.error(
+      `[memory-audit] Failed to persist audit state: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
   const auditReport = await generateMemoryAudit(rootDir, extractionInfo, pruneOutcome);
   try {
     const auditMarkdown = renderMemoryAuditMarkdown(auditReport);
@@ -37140,13 +37275,14 @@ async function processAndAuditInsightExtraction(rootDir, input) {
   }
   return auditReport;
 }
-var MEMORY_WORKING_PATH, MEMORY_INSIGHTS_PATH, MEMORY_AUDIT_PATH, DEFAULT_INSIGHT_SCHEDULE, DEFAULT_MIN_INTERVAL_MS, MIN_INSIGHT_GROWTH_CHARS, INSIGHT_EXTRACTION_SCHEDULE_NAME, REQUIRED_MEMORY_SECTIONS;
+var MEMORY_WORKING_PATH, MEMORY_INSIGHTS_PATH, MEMORY_AUDIT_PATH, MEMORY_AUDIT_STATE_PATH, DEFAULT_INSIGHT_SCHEDULE, DEFAULT_MIN_INTERVAL_MS, MIN_INSIGHT_GROWTH_CHARS, INSIGHT_EXTRACTION_SCHEDULE_NAME, REQUIRED_MEMORY_SECTIONS;
 var init_memory_insights = __esm({
   "../core/src/memory-insights.ts"() {
     "use strict";
     MEMORY_WORKING_PATH = ".fusion/memory/MEMORY.md";
     MEMORY_INSIGHTS_PATH = ".fusion/memory-insights.md";
     MEMORY_AUDIT_PATH = ".fusion/memory-audit.md";
+    MEMORY_AUDIT_STATE_PATH = ".fusion/memory-audit-state.json";
     DEFAULT_INSIGHT_SCHEDULE = "0 2 * * *";
     DEFAULT_MIN_INTERVAL_MS = 24 * 60 * 60 * 1e3;
     MIN_INSIGHT_GROWTH_CHARS = 1e3;
@@ -38324,15 +38460,15 @@ var require_fd_slicer = __commonJS({
     var Writable = stream.Writable;
     var PassThrough = stream.PassThrough;
     var Pend = require_pend();
-    var EventEmitter25 = __require("events").EventEmitter;
+    var EventEmitter26 = __require("events").EventEmitter;
     exports.createFromBuffer = createFromBuffer;
     exports.createFromFd = createFromFd;
     exports.BufferSlicer = BufferSlicer;
     exports.FdSlicer = FdSlicer;
-    util.inherits(FdSlicer, EventEmitter25);
+    util.inherits(FdSlicer, EventEmitter26);
     function FdSlicer(fd, options) {
       options = options || {};
-      EventEmitter25.call(this);
+      EventEmitter26.call(this);
       this.fd = fd;
       this.pend = new Pend();
       this.pend.max = 1;
@@ -38476,9 +38612,9 @@ var require_fd_slicer = __commonJS({
       this.destroyed = true;
       this.context.unref();
     };
-    util.inherits(BufferSlicer, EventEmitter25);
+    util.inherits(BufferSlicer, EventEmitter26);
     function BufferSlicer(buffer, options) {
-      EventEmitter25.call(this);
+      EventEmitter26.call(this);
       options = options || {};
       this.refCount = 0;
       this.buffer = buffer;
@@ -38890,7 +39026,7 @@ var require_yauzl = __commonJS({
     var fd_slicer = require_fd_slicer();
     var crc32 = require_buffer_crc32();
     var util = __require("util");
-    var EventEmitter25 = __require("events").EventEmitter;
+    var EventEmitter26 = __require("events").EventEmitter;
     var Transform = __require("stream").Transform;
     var PassThrough = __require("stream").PassThrough;
     var Writable = __require("stream").Writable;
@@ -39022,10 +39158,10 @@ var require_yauzl = __commonJS({
         callback(new Error("end of central directory record signature not found"));
       });
     }
-    util.inherits(ZipFile, EventEmitter25);
+    util.inherits(ZipFile, EventEmitter26);
     function ZipFile(reader, centralDirectoryOffset, fileSize, entryCount, comment, autoClose, lazyEntries, decodeStrings, validateEntrySizes, strictFileNames) {
       var self = this;
-      EventEmitter25.call(self);
+      EventEmitter26.call(self);
       self.reader = reader;
       self.reader.on("error", function(err) {
         emitError(self, err);
@@ -39386,9 +39522,9 @@ var require_yauzl = __commonJS({
       }
       cb();
     };
-    util.inherits(RandomAccessReader, EventEmitter25);
+    util.inherits(RandomAccessReader, EventEmitter26);
     function RandomAccessReader() {
-      EventEmitter25.call(this);
+      EventEmitter26.call(this);
       this.refCount = 0;
     }
     RandomAccessReader.prototype.ref = function() {
@@ -39519,11 +39655,11 @@ var require_extract_zip = __commonJS({
     var { createWriteStream, promises: fs } = __require("fs");
     var getStream = require_get_stream();
     var path = __require("path");
-    var { promisify: promisify11 } = __require("util");
+    var { promisify: promisify13 } = __require("util");
     var stream = __require("stream");
     var yauzl = require_yauzl();
-    var openZip = promisify11(yauzl.open);
-    var pipeline = promisify11(stream.pipeline);
+    var openZip = promisify13(yauzl.open);
+    var pipeline = promisify13(stream.pipeline);
     var Extractor = class {
       constructor(zipPath, opts) {
         this.zipPath = zipPath;
@@ -39605,7 +39741,7 @@ var require_extract_zip = __commonJS({
         await fs.mkdir(destDir, mkdirOptions);
         if (isDir) return;
         debug("opening read stream", dest);
-        const readStream = await promisify11(this.zipfile.openReadStream.bind(this.zipfile))(entry);
+        const readStream = await promisify13(this.zipfile.openReadStream.bind(this.zipfile))(entry);
         if (symlink) {
           const link = await getStream(readStream);
           debug("creating symlink", link, dest);
@@ -47266,12 +47402,12 @@ function resolveExtractionRoot(tempDir) {
   return tempDir;
 }
 async function extractTarArchive(archivePath, outputDir) {
-  const [{ execFile: execFile4 }, { promisify: promisify11 }] = await Promise.all([
+  const [{ execFile: execFile6 }, { promisify: promisify13 }] = await Promise.all([
     import("node:child_process"),
     import("node:util")
   ]);
-  const execFileAsync2 = promisify11(execFile4);
-  await execFileAsync2("tar", ["xzf", archivePath, "-C", outputDir]);
+  const execFileAsync4 = promisify13(execFile6);
+  await execFileAsync4("tar", ["xzf", archivePath, "-C", outputDir]);
 }
 async function parseCompanyArchive(archivePath) {
   const resolvedArchivePath = resolve8(archivePath);
@@ -48451,7 +48587,7 @@ ${stack}` : message2;
   }
   return { message, detail: message };
 }
-var LOG_LEVEL_MARKER_PREFIX2, LOG_LEVEL_MARKER_SUFFIX2, schedulerLog, executorLog, triageLog, piLog, extensionsLog, mergerLog, worktreePoolLog, reviewerLog, prMonitorLog, runtimeLog, ipcLog, projectManagerLog, hybridExecutorLog, autopilotLog, heartbeatLog, remoteNodeLog, nodeHealthMonitorLog, peerExchangeLog;
+var LOG_LEVEL_MARKER_PREFIX2, LOG_LEVEL_MARKER_SUFFIX2, schedulerLog, executorLog, triageLog, piLog, extensionsLog, mergerLog, worktreePoolLog, reviewerLog, prMonitorLog, runtimeLog, ipcLog, projectManagerLog, hybridExecutorLog, autopilotLog, heartbeatLog, remoteNodeLog, remoteTunnelLog, nodeHealthMonitorLog, peerExchangeLog;
 var init_logger2 = __esm({
   "../engine/src/logger.ts"() {
     "use strict";
@@ -48473,6 +48609,7 @@ var init_logger2 = __esm({
     autopilotLog = createLogger2("autopilot");
     heartbeatLog = createLogger2("heartbeat");
     remoteNodeLog = createLogger2("remote-node");
+    remoteTunnelLog = createLogger2("remote-tunnel");
     nodeHealthMonitorLog = createLogger2("node-health-monitor");
     peerExchangeLog = createLogger2("peer-exchange");
   }
@@ -48809,11 +48946,11 @@ async function refreshAgentMemoryQmdIndex(rootDir, agentMemory) {
     return;
   }
   const promise = (async () => {
-    const { execFile: execFile4 } = await import("node:child_process");
-    const { promisify: promisify11 } = await import("node:util");
-    const execFileAsync2 = promisify11(execFile4);
+    const { execFile: execFile6 } = await import("node:child_process");
+    const { promisify: promisify13 } = await import("node:util");
+    const execFileAsync4 = promisify13(execFile6);
     try {
-      await execFileAsync2("qmd", buildQmdAgentMemoryCollectionAddArgs(rootDir, agentMemory.agentId), {
+      await execFileAsync4("qmd", buildQmdAgentMemoryCollectionAddArgs(rootDir, agentMemory.agentId), {
         cwd: rootDir,
         timeout: 4e3,
         maxBuffer: 512 * 1024
@@ -48826,8 +48963,8 @@ ${stderr}`)) {
         throw error;
       }
     }
-    await execFileAsync2("qmd", ["update"], { cwd: rootDir, timeout: 3e4, maxBuffer: 1024 * 1024 });
-    await execFileAsync2("qmd", ["embed"], { cwd: rootDir, timeout: 12e4, maxBuffer: 1024 * 1024 });
+    await execFileAsync4("qmd", ["update"], { cwd: rootDir, timeout: 3e4, maxBuffer: 1024 * 1024 });
+    await execFileAsync4("qmd", ["embed"], { cwd: rootDir, timeout: 12e4, maxBuffer: 1024 * 1024 });
   })();
   agentQmdRefreshState.set(key, { lastStartedAt: now, inFlight: promise });
   try {
@@ -48848,10 +48985,10 @@ async function searchAgentMemoryWithQmd(rootDir, agentMemory, query, limit) {
   }
   try {
     await refreshAgentMemoryQmdIndex(rootDir, agentMemory);
-    const { execFile: execFile4 } = await import("node:child_process");
-    const { promisify: promisify11 } = await import("node:util");
-    const execFileAsync2 = promisify11(execFile4);
-    const { stdout } = await execFileAsync2("qmd", buildQmdAgentMemorySearchArgs(rootDir, agentMemory.agentId, query, limit), {
+    const { execFile: execFile6 } = await import("node:child_process");
+    const { promisify: promisify13 } = await import("node:util");
+    const execFileAsync4 = promisify13(execFile6);
+    const { stdout } = await execFileAsync4("qmd", buildQmdAgentMemorySearchArgs(rootDir, agentMemory.agentId, query, limit), {
       cwd: rootDir,
       timeout: 4e3,
       maxBuffer: 1024 * 1024
@@ -54044,14 +54181,14 @@ function rethrowIfMergeAborted(error) {
     throw error;
   }
 }
-async function runDeterministicVerification(store, rootDir, taskId, testCommand, buildCommand, testSource, buildSource, signal) {
+async function runDeterministicVerification(store, rootDir, taskId, testCommand, buildCommand2, testSource, buildSource, signal) {
   const result = { allPassed: true };
-  if (!testCommand && !buildCommand) {
+  if (!testCommand && !buildCommand2) {
     mergerLog.log(`${taskId}: no verification commands configured \u2014 skipping`);
     return result;
   }
   const normalizedTestCommand = testCommand?.trim();
-  const normalizedBuildCommand = buildCommand?.trim();
+  const normalizedBuildCommand = buildCommand2?.trim();
   const hasTestCommand = !!normalizedTestCommand;
   const hasBuildCommand = !!normalizedBuildCommand;
   const testSourceLabel = testSource === "inferred" ? " [inferred]" : "";
@@ -55545,7 +55682,7 @@ async function executeMergeAttempt(params, aiTracker) {
     result,
     settings,
     testCommand,
-    buildCommand,
+    buildCommand: buildCommand2,
     testSource,
     buildSource
   } = params;
@@ -55614,14 +55751,14 @@ async function executeMergeAttempt(params, aiTracker) {
             );
             mergerLog.log(`${taskId}: committed after auto-resolving all conflicts`);
           }
-          if (testCommand || buildCommand) {
+          if (testCommand || buildCommand2) {
             throwIfAborted(options.signal, taskId);
             await runDeterministicVerification(
               store,
               rootDir,
               taskId,
               testCommand,
-              buildCommand,
+              buildCommand2,
               testSource,
               buildSource,
               options.signal
@@ -55637,14 +55774,14 @@ async function executeMergeAttempt(params, aiTracker) {
         ).trim() === "0";
         if (squashIsEmpty) {
           mergerLog.log(`${taskId}: squash merge staged nothing \u2014 already merged`);
-          if (testCommand || buildCommand) {
+          if (testCommand || buildCommand2) {
             throwIfAborted(options.signal, taskId);
             await runDeterministicVerification(
               store,
               rootDir,
               taskId,
               testCommand,
-              buildCommand,
+              buildCommand2,
               testSource,
               buildSource,
               options.signal
@@ -55664,14 +55801,14 @@ async function executeMergeAttempt(params, aiTracker) {
       ).trim() === "0";
       if (squashIsEmpty) {
         mergerLog.log(`${taskId}: squash merge staged nothing \u2014 already merged`);
-        if (testCommand || buildCommand) {
+        if (testCommand || buildCommand2) {
           throwIfAborted(options.signal, taskId);
           await runDeterministicVerification(
             store,
             rootDir,
             taskId,
             testCommand,
-            buildCommand,
+            buildCommand2,
             testSource,
             buildSource,
             options.signal
@@ -55691,7 +55828,7 @@ async function executeMergeAttempt(params, aiTracker) {
         return false;
       }
     }
-    if (buildCommand) {
+    if (buildCommand2) {
       throwIfAborted(options.signal, taskId);
       const stagedFiles = await getStagedFiles(rootDir);
       if (shouldSyncDependenciesForMerge(stagedFiles, hasInstallState(rootDir))) {
@@ -55712,7 +55849,7 @@ async function executeMergeAttempt(params, aiTracker) {
       simplifiedContext: attemptNum === 2,
       options,
       testCommand,
-      buildCommand
+      buildCommand: buildCommand2
     });
     if (!agentResult.success) {
       const errorMessage = agentResult.error || "Build verification failed";
@@ -55727,14 +55864,14 @@ async function executeMergeAttempt(params, aiTracker) {
       }
       throw new Error(`Build verification failed for ${taskId}: ${errorMessage}`);
     }
-    if (testCommand || buildCommand) {
+    if (testCommand || buildCommand2) {
       throwIfAborted(options.signal, taskId);
       await runDeterministicVerification(
         store,
         rootDir,
         taskId,
         testCommand,
-        buildCommand,
+        buildCommand2,
         testSource,
         buildSource,
         options.signal
@@ -55762,7 +55899,7 @@ async function executeMergeAttempt(params, aiTracker) {
   }
 }
 async function attemptWithTheirsStrategy(params) {
-  const { rootDir, branch, commitLog, includeTaskId, taskId, store, settings, testCommand, buildCommand, testSource, buildSource } = params;
+  const { rootDir, branch, commitLog, includeTaskId, taskId, store, settings, testCommand, buildCommand: buildCommand2, testSource, buildSource } = params;
   mergerLog.log(`${taskId}: attempting merge with -X theirs strategy`);
   try {
     throwIfAborted(params.options.signal, taskId);
@@ -55782,14 +55919,14 @@ async function attemptWithTheirsStrategy(params) {
       encoding: "utf-8"
     }).trim();
     if (staged === "0") {
-      if (testCommand || buildCommand) {
+      if (testCommand || buildCommand2) {
         throwIfAborted(params.options.signal, taskId);
         await runDeterministicVerification(
           store,
           rootDir,
           taskId,
           testCommand,
-          buildCommand,
+          buildCommand2,
           testSource,
           buildSource,
           params.options.signal
@@ -55806,14 +55943,14 @@ async function attemptWithTheirsStrategy(params) {
       { cwd: rootDir }
     );
     mergerLog.log(`${taskId}: committed with -X theirs auto-resolution`);
-    if (testCommand || buildCommand) {
+    if (testCommand || buildCommand2) {
       throwIfAborted(params.options.signal, taskId);
       await runDeterministicVerification(
         store,
         rootDir,
         taskId,
         testCommand,
-        buildCommand,
+        buildCommand2,
         testSource,
         buildSource,
         params.options.signal
@@ -55841,7 +55978,7 @@ async function runAiAgentForCommit(params) {
     simplifiedContext,
     options,
     testCommand,
-    buildCommand
+    buildCommand: buildCommand2
   } = params;
   const settings = await store.getSettings();
   let buildFailed = false;
@@ -55930,7 +56067,7 @@ async function runAiAgentForCommit(params) {
       hasConflicts,
       simplifiedContext,
       testCommand,
-      buildCommand,
+      buildCommand: buildCommand2,
       authorArg
     });
     mergerLog.log(`${taskId}: starting fresh merge agent session`);
@@ -55962,7 +56099,7 @@ async function runAiAgentForCommit(params) {
           simplifiedContext: true,
           // Also skip detailed context
           testCommand,
-          buildCommand,
+          buildCommand: buildCommand2,
           authorArg
         });
         try {
@@ -55998,7 +56135,7 @@ async function runAiAgentForCommit(params) {
       encoding: "utf-8"
     }).trim();
     if (staged !== "0") {
-      if (!buildCommand) {
+      if (!buildCommand2) {
         throwIfAborted(options.signal, taskId);
         mergerLog.log("Agent didn't commit \u2014 committing with fallback message");
         const escapedLog = commitLog.replace(/"/g, '\\"');
@@ -56025,7 +56162,7 @@ async function runAiAgentForCommit(params) {
   }
 }
 function buildMergePrompt(params) {
-  const { taskId, branch, commitLog, diffStat, hasConflicts, simplifiedContext, testCommand, buildCommand, authorArg } = params;
+  const { taskId, branch, commitLog, diffStat, hasConflicts, simplifiedContext, testCommand, buildCommand: buildCommand2, authorArg } = params;
   const truncatedCommitLog = truncateWithEllipsis(commitLog, MERGE_COMMIT_LOG_MAX_CHARS);
   const truncatedDiffStat = truncateWithEllipsis(diffStat, MERGE_DIFF_STAT_MAX_CHARS);
   const parts = [
@@ -56073,11 +56210,11 @@ function buildMergePrompt(params) {
       "If it exits non-zero, call `fn_report_build_failure` with the concrete error output and stop without committing."
     );
   }
-  if (buildCommand) {
+  if (buildCommand2) {
     parts.push(
       "",
       "## Build command",
-      `Build command: \`${buildCommand}\``,
+      `Build command: \`${buildCommand2}\``,
       "",
       "This command is mandatory before commit.",
       "Run it with the bash tool in the current worktree and inspect the actual exit code.",
@@ -58487,6 +58624,8 @@ Lint, tests, and typecheck are also hard quality gates:
       loopRecoveryState = /* @__PURE__ */ new Map();
       /** Spawned child agent IDs per parent task ID. Used for lifecycle tracking. */
       spawnedAgents = /* @__PURE__ */ new Map();
+      /** Per-task baseline of agent cumulative token counters used for delta persistence. */
+      tokenUsageBaselines = /* @__PURE__ */ new Map();
       async finalizeAlreadyReviewedTask(taskId) {
         const latestTask = await this.store.getTask(taskId);
         if (!latestTask || latestTask.column !== "in-review") {
@@ -58602,6 +58741,65 @@ Lint, tests, and typecheck are also hard quality gates:
       async getTaskCompletionBlocker(task) {
         return getTaskCompletionBlockerForStore(this.store, task);
       }
+      async initializeTokenUsageBaseline(taskId, task) {
+        if (!this.options.agentStore) return;
+        const currentTask = task ?? await this.store.getTask(taskId);
+        const assignedAgentId = currentTask.assignedAgentId?.trim();
+        if (!assignedAgentId) return;
+        const existing = this.tokenUsageBaselines.get(taskId);
+        if (existing?.agentId === assignedAgentId) return;
+        const agent = await this.options.agentStore.getAgent(assignedAgentId);
+        if (!agent) return;
+        this.tokenUsageBaselines.set(taskId, {
+          agentId: assignedAgentId,
+          inputTokens: agent.totalInputTokens ?? 0,
+          outputTokens: agent.totalOutputTokens ?? 0
+        });
+      }
+      async persistTokenUsage(taskId) {
+        if (!this.options.agentStore) return;
+        const task = await this.store.getTask(taskId);
+        const assignedAgentId = task.assignedAgentId?.trim();
+        if (!assignedAgentId) return;
+        const agent = await this.options.agentStore.getAgent(assignedAgentId);
+        if (!agent) return;
+        const currentInputTokens = agent.totalInputTokens ?? 0;
+        const currentOutputTokens = agent.totalOutputTokens ?? 0;
+        const baseline = this.tokenUsageBaselines.get(taskId);
+        if (!baseline || baseline.agentId !== assignedAgentId) {
+          this.tokenUsageBaselines.set(taskId, {
+            agentId: assignedAgentId,
+            inputTokens: currentInputTokens,
+            outputTokens: currentOutputTokens
+          });
+          return;
+        }
+        const inputDelta = Math.max(0, currentInputTokens - baseline.inputTokens);
+        const outputDelta = Math.max(0, currentOutputTokens - baseline.outputTokens);
+        this.tokenUsageBaselines.set(taskId, {
+          agentId: assignedAgentId,
+          inputTokens: currentInputTokens,
+          outputTokens: currentOutputTokens
+        });
+        if (inputDelta === 0 && outputDelta === 0 && !task.tokenUsage) {
+          return;
+        }
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        const mergedInputTokens = (task.tokenUsage?.inputTokens ?? 0) + inputDelta;
+        const mergedOutputTokens = (task.tokenUsage?.outputTokens ?? 0) + outputDelta;
+        const cachedTokens = task.tokenUsage?.cachedTokens ?? 0;
+        const totalTokens = mergedInputTokens + mergedOutputTokens + cachedTokens;
+        await this.store.updateTask(taskId, {
+          tokenUsage: {
+            inputTokens: mergedInputTokens,
+            outputTokens: mergedOutputTokens,
+            cachedTokens,
+            totalTokens,
+            firstUsedAt: task.tokenUsage?.firstUsedAt ?? now,
+            lastUsedAt: now
+          }
+        });
+      }
       /**
        * Execute a review handoff: move the task to in-review column with
        * awaiting-user-review status, assign the requesting user, and dispose
@@ -58624,6 +58822,7 @@ Lint, tests, and typecheck are also hard quality gates:
             },
             this.currentRunContext
           );
+          await this.persistTokenUsage(task.id);
           await this.store.moveTask(task.id, "in-review");
           if (this.activeSessions.has(task.id)) {
             const { session: activeSession } = this.activeSessions.get(task.id);
@@ -58662,6 +58861,7 @@ Lint, tests, and typecheck are also hard quality gates:
               executorLog.log(`${task.id}: fast mode \u2014 skipping workflow steps on auto-recovery`);
             }
           }
+          await this.persistTokenUsage(task.id);
           await this.store.moveTask(task.id, "in-review");
           await this.store.logEntry(task.id, "Auto-recovered: task work was complete but stuck in in-progress \u2014 moved to in-review");
           executorLog.log(`\u2713 ${task.id} auto-recovered completed task \u2192 in-review`);
@@ -59041,6 +59241,7 @@ Lint, tests, and typecheck are also hard quality gates:
           this.options.onStart?.(task, worktreePath);
           const detail = await this.store.getTask(task.id);
           executorLog.log(`${task.id}: fetched task detail (${detail.steps.length} steps, prompt length=${detail.prompt?.length ?? 0})`);
+          await this.initializeTokenUsageBaseline(task.id, detail);
           if (detail.steps.length === 0) {
             const steps = await this.store.parseStepsFromPrompt(task.id);
             if (steps.length > 0) {
@@ -59088,6 +59289,9 @@ Lint, tests, and typecheck are also hard quality gates:
                 } catch (err) {
                   executorLog.warn(`${task.id}: failed to update step ${stepIndex} status: ${err}`);
                 }
+                this.persistTokenUsage(task.id).catch((err) => {
+                  executorLog.warn(`${task.id}: failed to persist token usage on step ${stepIndex} complete: ${err}`);
+                });
               }
             });
             this.activeStepExecutors.set(task.id, stepExecutor);
@@ -59137,6 +59341,7 @@ Lint, tests, and typecheck are also hard quality gates:
                   await this.store.logEntry(task.id, "Fast mode \u2014 pre-merge workflow steps skipped", void 0, this.currentRunContext);
                 }
                 await this.store.updateTask(task.id, { workflowStepRetries: void 0, taskDoneRetryCount: null });
+                await this.persistTokenUsage(task.id);
                 await this.store.moveTask(task.id, "in-review");
                 await audit.database({ type: "task:move", target: task.id, metadata: { to: "in-review" } });
                 executorLog.log(`\u2713 ${task.id} completed (step-session) \u2192 in-review`);
@@ -59145,6 +59350,7 @@ Lint, tests, and typecheck are also hard quality gates:
                 const failedSteps = results.filter((r) => !r.success);
                 const errorSummary = failedSteps.map((r) => `Step ${r.stepIndex}: ${r.error || "unknown error"}`).join("; ");
                 await this.store.updateTask(task.id, { status: "failed", error: errorSummary });
+                await this.persistTokenUsage(task.id);
                 await this.store.moveTask(task.id, "in-review");
                 executorLog.log(`\u2717 ${task.id} step-session failed \u2192 in-review: ${errorSummary}`);
                 this.options.onError?.(task, new Error(errorSummary));
@@ -59221,6 +59427,7 @@ Lint, tests, and typecheck are also hard quality gates:
                   recoveryRetryCount: null,
                   nextRecoveryAt: null
                 });
+                await this.persistTokenUsage(task.id);
                 await this.store.moveTask(task.id, "in-review");
                 executorLog.log(`\u2717 ${task.id} transient retries exhausted \u2192 in-review`);
                 this.options.onError?.(task, err instanceof Error ? err : new Error(errorMessage));
@@ -59228,6 +59435,7 @@ Lint, tests, and typecheck are also hard quality gates:
                 executorLog.error(`\u2717 ${task.id} step-session execution failed:`, errorDetail);
                 await this.store.logEntry(task.id, `Step-session execution failed: ${errorMessage}`, errorStack ?? errorDetail, this.currentRunContext);
                 await this.store.updateTask(task.id, { status: "failed", error: errorMessage });
+                await this.persistTokenUsage(task.id);
                 await this.store.moveTask(task.id, "in-review");
                 executorLog.log(`\u2717 ${task.id} step-session execution failed \u2192 in-review`);
                 this.options.onError?.(task, err instanceof Error ? err : new Error(errorMessage));
@@ -59462,6 +59670,7 @@ Lint, tests, and typecheck are also hard quality gates:
                 if (await this.shouldFinalizeCompletedTask(task.id, taskDone)) {
                   executorLog.log(`${task.id} paused after completion (graceful session exit) \u2014 finalizing to in-review`);
                   await this.store.logEntry(task.id, "Execution paused after completion \u2014 finalizing to in-review");
+                  await this.persistTokenUsage(task.id);
                   await this.store.moveTask(task.id, "in-review");
                   this.options.onComplete?.(task);
                 } else {
@@ -59511,6 +59720,7 @@ Lint, tests, and typecheck are also hard quality gates:
                   await this.store.logEntry(task.id, "Fast mode \u2014 pre-merge workflow steps skipped", void 0, this.currentRunContext);
                 }
                 await this.store.updateTask(task.id, { workflowStepRetries: void 0, taskDoneRetryCount: null });
+                await this.persistTokenUsage(task.id);
                 await this.store.moveTask(task.id, "in-review");
                 executorLog.log(`\u2713 ${task.id} completed \u2192 in-review`);
                 this.options.onComplete?.(task);
@@ -59607,6 +59817,7 @@ Lint, tests, and typecheck are also hard quality gates:
                     await this.store.logEntry(task.id, "Fast mode \u2014 pre-merge workflow steps skipped", void 0, this.currentRunContext);
                   }
                   await this.store.updateTask(task.id, { workflowStepRetries: void 0, taskDoneRetryCount: null });
+                  await this.persistTokenUsage(task.id);
                   await this.store.moveTask(task.id, "in-review");
                   executorLog.log(`\u2713 ${task.id} completed on retry \u2192 in-review`);
                   this.options.onComplete?.(task);
@@ -59631,6 +59842,7 @@ Lint, tests, and typecheck are also hard quality gates:
                   } else {
                     await this.store.updateTask(task.id, { status: "failed", error: errorMessage });
                     await this.store.logEntry(task.id, `${errorMessage} \u2014 moved to in-review for inspection`, void 0, this.currentRunContext);
+                    await this.persistTokenUsage(task.id);
                     await this.store.moveTask(task.id, "in-review");
                     executorLog.log(`\u2717 ${task.id} failed after ${MAX_TASK_DONE_SESSION_RETRIES} retries \u2014 no fn_task_done \u2192 in-review`);
                   }
@@ -59694,6 +59906,7 @@ Lint, tests, and typecheck are also hard quality gates:
             if (await this.shouldFinalizeCompletedTask(task.id, taskDone)) {
               executorLog.log(`${task.id} paused after completion \u2014 finalizing to in-review`);
               await this.store.logEntry(task.id, "Execution paused after completion \u2014 finalizing to in-review", void 0, this.currentRunContext);
+              await this.persistTokenUsage(task.id);
               await this.store.moveTask(task.id, "in-review");
               this.options.onComplete?.(task);
             } else {
@@ -59819,6 +60032,7 @@ Lint, tests, and typecheck are also hard quality gates:
                 recoveryRetryCount: null,
                 nextRecoveryAt: null
               });
+              await this.persistTokenUsage(task.id);
               await this.store.moveTask(task.id, "in-review");
               executorLog.log(`\u2717 ${task.id} transient retries exhausted \u2192 in-review`);
               this.options.onError?.(task, err instanceof Error ? err : new Error(errorMessage));
@@ -59827,6 +60041,7 @@ Lint, tests, and typecheck are also hard quality gates:
             executorLog.error(`\u2717 ${task.id} execution failed:`, errorDetail);
             await this.store.logEntry(task.id, `Execution failed: ${errorMessage}`, errorStack ?? errorDetail, this.currentRunContext);
             await this.store.updateTask(task.id, { status: "failed", error: errorMessage });
+            await this.persistTokenUsage(task.id);
             await this.store.moveTask(task.id, "in-review");
             executorLog.log(`\u2717 ${task.id} execution failed \u2192 in-review`);
             this.options.onError?.(task, err instanceof Error ? err : new Error(errorMessage));
@@ -59840,6 +60055,7 @@ Lint, tests, and typecheck are also hard quality gates:
             executorLog.warn(`terminateAllChildren failed for ${task.id}: ${err instanceof Error ? err.message : String(err)}`);
           }
           this.loopRecoveryState.delete(task.id);
+          this.tokenUsageBaselines.delete(task.id);
           if (stuckRequeue === true) {
             try {
               const latestTask = await this.store.getTask(task.id);
@@ -70580,8 +70796,571 @@ var init_project_manager = __esm({
   }
 });
 
+// ../engine/src/remote-access/provider-adapters.ts
+import { accessSync, constants as fsConstants } from "node:fs";
+function isAbsoluteOrPathLike(input) {
+  return input.startsWith("/") || input.startsWith("./") || input.startsWith("../");
+}
+function assertNonEmpty(value, label) {
+  if (typeof value !== "string" || value.trim().length === 0) {
+    throw new Error(`invalid_config:${label} must be a non-empty string`);
+  }
+}
+function ensureNumberInRange(value, label) {
+  if (value === void 0) {
+    return void 0;
+  }
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new Error(`invalid_config:${label} must be a positive number`);
+  }
+  return Math.floor(value);
+}
+function collectSensitiveValues(config) {
+  const values = /* @__PURE__ */ new Set();
+  const env = config.env ?? {};
+  const tokenEnvVar = config.tokenEnvVar;
+  if (typeof tokenEnvVar === "string" && tokenEnvVar.trim().length > 0) {
+    const tokenValue = env[tokenEnvVar] ?? process.env[tokenEnvVar];
+    if (!tokenValue) {
+      throw new Error(`invalid_config:missing credential in env var ${tokenEnvVar}`);
+    }
+    values.add(tokenValue);
+  }
+  for (const envName of config.sensitiveEnvVars ?? []) {
+    const envValue = env[envName] ?? process.env[envName];
+    if (envValue) {
+      values.add(envValue);
+    }
+  }
+  return [...values].sort((a, b) => b.length - a.length);
+}
+function redactValue(input, sensitiveValues) {
+  let redacted = input;
+  for (const value of sensitiveValues) {
+    redacted = redacted.split(value).join("[REDACTED]");
+  }
+  return redacted;
+}
+function redactArgs(args, sensitiveValues) {
+  return args.map((arg) => redactValue(arg, sensitiveValues));
+}
+function buildCommand(config) {
+  const command = config.executablePath.trim();
+  const args = [...config.args];
+  const env = {
+    ...process.env,
+    ...config.env ?? {}
+  };
+  const sensitiveValues = collectSensitiveValues(config);
+  const redactedPreview = [command, ...redactArgs(args, sensitiveValues)].join(" ").trim();
+  return {
+    provider: config.provider,
+    command,
+    args,
+    cwd: config.cwd,
+    env,
+    redactedPreview,
+    sensitiveValues,
+    readinessTimeoutMs: config.readinessTimeoutMs ?? DEFAULT_READINESS_TIMEOUT_MS,
+    stopTimeoutMs: config.stopTimeoutMs ?? DEFAULT_STOP_TIMEOUT_MS
+  };
+}
+function parseCommonReadiness(line) {
+  const normalized = line.trim();
+  if (!normalized) {
+    return null;
+  }
+  const urlMatch = normalized.match(URL_PATTERN);
+  const url = urlMatch?.[1];
+  if (/\b(connected|ready|available|started|serving)\b/i.test(normalized)) {
+    return { ready: true, url };
+  }
+  if (url && /\b(trycloudflare|tailscale|ts\.net|serve|funnel)\b/i.test(normalized)) {
+    return { ready: true, url };
+  }
+  return null;
+}
+function validateBaseConfig(config, provider) {
+  if (config.provider !== provider) {
+    throw new Error(`invalid_config:config provider ${config.provider} does not match ${provider}`);
+  }
+  assertNonEmpty(config.executablePath, "executablePath");
+  if (!Array.isArray(config.args)) {
+    throw new Error("invalid_config:args must be an array");
+  }
+  for (const [index, arg] of config.args.entries()) {
+    assertNonEmpty(arg, `args[${index}]`);
+  }
+  if (config.cwd !== void 0) {
+    assertNonEmpty(config.cwd, "cwd");
+  }
+  if (config.tokenEnvVar !== void 0) {
+    assertNonEmpty(config.tokenEnvVar, "tokenEnvVar");
+  }
+  ensureNumberInRange(config.readinessTimeoutMs, "readinessTimeoutMs");
+  ensureNumberInRange(config.stopTimeoutMs, "stopTimeoutMs");
+}
+function getTunnelProviderAdapter(provider) {
+  return ADAPTERS[provider];
+}
+function redactTunnelText(input, sensitiveValues) {
+  return redactValue(input, sensitiveValues);
+}
+var DEFAULT_READINESS_TIMEOUT_MS, DEFAULT_STOP_TIMEOUT_MS, URL_PATTERN, tailscaleAdapter, cloudflareAdapter, ADAPTERS;
+var init_provider_adapters = __esm({
+  "../engine/src/remote-access/provider-adapters.ts"() {
+    "use strict";
+    DEFAULT_READINESS_TIMEOUT_MS = 2e4;
+    DEFAULT_STOP_TIMEOUT_MS = 5e3;
+    URL_PATTERN = /(https?:\/\/[^\s]+)/i;
+    tailscaleAdapter = {
+      provider: "tailscale",
+      validateConfig(config) {
+        validateBaseConfig(config, "tailscale");
+      },
+      buildCommand(config) {
+        this.validateConfig(config);
+        return buildCommand(config);
+      },
+      parseReadiness(line, _stream) {
+        return parseCommonReadiness(line);
+      }
+    };
+    cloudflareAdapter = {
+      provider: "cloudflare",
+      validateConfig(config) {
+        validateBaseConfig(config, "cloudflare");
+        if (config.provider === "cloudflare" && config.quickTunnel === true) {
+          return;
+        }
+        if ("credentialsPath" in config && config.credentialsPath !== void 0) {
+          assertNonEmpty(config.credentialsPath, "credentialsPath");
+          if (isAbsoluteOrPathLike(config.credentialsPath)) {
+            accessSync(config.credentialsPath, fsConstants.R_OK);
+          }
+        }
+      },
+      buildCommand(config) {
+        this.validateConfig(config);
+        return buildCommand(config);
+      },
+      parseReadiness(line, _stream) {
+        return parseCommonReadiness(line);
+      }
+    };
+    ADAPTERS = {
+      tailscale: tailscaleAdapter,
+      cloudflare: cloudflareAdapter
+    };
+  }
+});
+
+// ../engine/src/remote-access/tunnel-process-manager.ts
+import { EventEmitter as EventEmitter18 } from "node:events";
+import { spawn as spawn2 } from "node:child_process";
+function nowIso() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function normalizeError(input) {
+  if (input instanceof Error) {
+    return input;
+  }
+  return new Error(String(input));
+}
+function maskSensitive(message, processHandle) {
+  if (!processHandle) {
+    return message;
+  }
+  return redactTunnelText(message, processHandle.command.sensitiveValues);
+}
+function killManagedProcess(child, signal) {
+  if (typeof child.pid !== "number") {
+    return;
+  }
+  if (process.platform !== "win32") {
+    try {
+      process.kill(-child.pid, signal);
+      return;
+    } catch {
+    }
+  }
+  try {
+    process.kill(child.pid, signal);
+  } catch {
+  }
+}
+function toStateError(code, err) {
+  const normalized = normalizeError(err);
+  return {
+    code,
+    message: normalized.message,
+    at: nowIso()
+  };
+}
+var DEFAULT_MAX_LOG_ENTRIES, DEFAULT_STOP_TIMEOUT_MS2, LineBuffer, TunnelProcessManager;
+var init_tunnel_process_manager = __esm({
+  "../engine/src/remote-access/tunnel-process-manager.ts"() {
+    "use strict";
+    init_logger2();
+    init_provider_adapters();
+    DEFAULT_MAX_LOG_ENTRIES = 400;
+    DEFAULT_STOP_TIMEOUT_MS2 = 5e3;
+    LineBuffer = class {
+      pending = "";
+      push(chunk) {
+        this.pending += chunk;
+        const lines = this.pending.split(/\r?\n/);
+        this.pending = lines.pop() ?? "";
+        return lines.map((line) => line.trim()).filter(Boolean);
+      }
+      flush() {
+        const tail = this.pending.trim();
+        this.pending = "";
+        return tail ? [tail] : [];
+      }
+    };
+    TunnelProcessManager = class extends EventEmitter18 {
+      maxLogEntries;
+      defaultStopTimeoutMs;
+      spawnImpl;
+      status = {
+        provider: null,
+        state: "stopped",
+        pid: null,
+        startedAt: null,
+        stoppedAt: null,
+        url: null,
+        lastError: null
+      };
+      logs = [];
+      statusListeners = /* @__PURE__ */ new Set();
+      logListeners = /* @__PURE__ */ new Set();
+      processHandle = null;
+      readinessTimer = null;
+      stopTimer = null;
+      operationChain = Promise.resolve();
+      expectedStop = false;
+      activeStopPromise = null;
+      constructor(options = {}) {
+        super();
+        this.maxLogEntries = options.maxLogEntries ?? DEFAULT_MAX_LOG_ENTRIES;
+        this.defaultStopTimeoutMs = options.stopTimeoutMs ?? DEFAULT_STOP_TIMEOUT_MS2;
+        this.spawnImpl = options.spawnImpl ?? spawn2;
+      }
+      getStatus() {
+        return { ...this.status, lastError: this.status.lastError ? { ...this.status.lastError } : null };
+      }
+      subscribeStatus(listener) {
+        this.statusListeners.add(listener);
+        listener(this.getStatus());
+        return () => {
+          this.statusListeners.delete(listener);
+        };
+      }
+      subscribeLogs(listener) {
+        this.logListeners.add(listener);
+        return () => {
+          this.logListeners.delete(listener);
+        };
+      }
+      async start(provider, config) {
+        return this.runExclusive(async () => {
+          if (this.processHandle || this.status.state === "starting" || this.status.state === "running") {
+            throw new Error("already_running:tunnel process is already active");
+          }
+          await this.startInternal(provider, config);
+        });
+      }
+      async stop() {
+        return this.runExclusive(async () => {
+          await this.stopInternal();
+        });
+      }
+      async switchProvider(target, config) {
+        return this.runExclusive(async () => {
+          const previousProvider = this.status.provider;
+          if (this.processHandle) {
+            await this.stopInternal();
+          }
+          try {
+            await this.startInternal(target, config);
+          } catch (error) {
+            const stateError = toStateError("switch_failed", error);
+            const redactedMessage = this.redactForProviderConfig(target, config, stateError.message);
+            this.updateStatus({
+              provider: target,
+              state: "failed",
+              pid: null,
+              startedAt: null,
+              stoppedAt: nowIso(),
+              url: null,
+              lastError: {
+                ...stateError,
+                message: redactedMessage
+              }
+            });
+            this.emitLog("error", "manager", `Provider switch failed (${previousProvider ?? "none"} -> ${target}): ${redactedMessage}`);
+            throw error;
+          }
+        });
+      }
+      redactForProviderConfig(provider, config, message) {
+        try {
+          const adapter = getTunnelProviderAdapter(provider);
+          const command = adapter.buildCommand(config);
+          return redactTunnelText(message, command.sensitiveValues);
+        } catch {
+          return message;
+        }
+      }
+      async runExclusive(operation) {
+        const next = this.operationChain.then(operation);
+        this.operationChain = next.catch(() => void 0);
+        return next;
+      }
+      async startInternal(provider, config) {
+        const adapter = getTunnelProviderAdapter(provider);
+        if (config.provider !== provider) {
+          throw new Error(`invalid_config:provider mismatch (${config.provider} vs ${provider})`);
+        }
+        try {
+          adapter.validateConfig(config);
+        } catch (error) {
+          const stateError = toStateError("invalid_config", error);
+          this.updateStatus({
+            provider,
+            state: "failed",
+            pid: null,
+            startedAt: null,
+            stoppedAt: nowIso(),
+            url: null,
+            lastError: stateError
+          });
+          this.emitLog("error", "manager", `Configuration validation failed for ${provider}: ${stateError.message}`);
+          throw error;
+        }
+        const command = adapter.buildCommand(config);
+        this.updateStatus({
+          provider,
+          state: "starting",
+          pid: null,
+          startedAt: nowIso(),
+          stoppedAt: null,
+          url: null,
+          lastError: null
+        });
+        this.emitLog("info", "manager", `Starting ${provider} tunnel: ${command.redactedPreview}`);
+        const child = this.spawnImpl(command.command, command.args, {
+          cwd: command.cwd,
+          env: command.env,
+          detached: process.platform !== "win32",
+          shell: false,
+          stdio: ["ignore", "pipe", "pipe"]
+        });
+        this.processHandle = {
+          provider,
+          child,
+          command
+        };
+        this.expectedStop = false;
+        this.updateStatus({ pid: child.pid ?? null });
+        const stdoutBuffer = new LineBuffer();
+        const stderrBuffer = new LineBuffer();
+        const attachStream = (stream, source, buffer) => {
+          stream?.on("data", (chunk) => {
+            const text = typeof chunk === "string" ? chunk : chunk.toString("utf8");
+            for (const line of buffer.push(text)) {
+              this.handleOutputLine(source, line);
+            }
+          });
+        };
+        attachStream(child.stdout, "stdout", stdoutBuffer);
+        attachStream(child.stderr, "stderr", stderrBuffer);
+        child.once("error", (error) => {
+          const maskedMessage = maskSensitive(normalizeError(error).message, this.processHandle);
+          this.emitLog("error", "manager", `Spawn failure for ${provider}: ${maskedMessage}`);
+          this.handleUnexpectedExit("start_failed", `Spawn failure: ${maskedMessage}`);
+        });
+        child.once("close", (code, signal) => {
+          for (const line of stdoutBuffer.flush()) {
+            this.handleOutputLine("stdout", line);
+          }
+          for (const line of stderrBuffer.flush()) {
+            this.handleOutputLine("stderr", line);
+          }
+          const reason = signal ? `signal ${signal}` : `exit code ${code ?? 0}`;
+          if (this.expectedStop) {
+            this.emitLog("info", "manager", `Tunnel process stopped (${reason})`);
+            this.finalizeStoppedState();
+            return;
+          }
+          this.emitLog("error", "manager", `Tunnel process exited unexpectedly (${reason})`);
+          this.handleUnexpectedExit("process_exit", `Process exited unexpectedly (${reason})`);
+        });
+        this.readinessTimer = setTimeout(() => {
+          if (this.status.state === "starting" && this.processHandle?.provider === provider) {
+            this.emitLog("error", "manager", `Readiness timed out after ${command.readinessTimeoutMs}ms`);
+            this.handleUnexpectedExit("readiness_timeout", `Tunnel readiness timeout after ${command.readinessTimeoutMs}ms`);
+          }
+        }, command.readinessTimeoutMs);
+        this.readinessTimer.unref?.();
+      }
+      async stopInternal() {
+        if (!this.processHandle) {
+          this.updateStatus({
+            provider: null,
+            state: "stopped",
+            pid: null,
+            stoppedAt: nowIso(),
+            url: null
+          });
+          return;
+        }
+        if (this.activeStopPromise) {
+          await this.activeStopPromise;
+          return;
+        }
+        const currentHandle = this.processHandle;
+        const stopTimeoutMs = currentHandle.command.stopTimeoutMs || this.defaultStopTimeoutMs;
+        this.expectedStop = true;
+        this.updateStatus({
+          state: "stopping",
+          provider: currentHandle.provider,
+          pid: currentHandle.child.pid ?? null,
+          lastError: null
+        });
+        this.emitLog("info", "manager", `Stopping ${currentHandle.provider} tunnel (pid=${currentHandle.child.pid ?? "n/a"})`);
+        this.activeStopPromise = new Promise((resolve16) => {
+          const onClose = () => {
+            currentHandle.child.removeListener("close", onClose);
+            resolve16();
+          };
+          currentHandle.child.once("close", onClose);
+          killManagedProcess(currentHandle.child, "SIGTERM");
+          this.stopTimer = setTimeout(() => {
+            if (this.processHandle === currentHandle) {
+              this.emitLog("warn", "manager", `Graceful stop timed out after ${stopTimeoutMs}ms, sending SIGKILL`);
+              killManagedProcess(currentHandle.child, "SIGKILL");
+            }
+          }, stopTimeoutMs);
+          this.stopTimer.unref?.();
+        }).finally(() => {
+          this.activeStopPromise = null;
+          if (this.stopTimer) {
+            clearTimeout(this.stopTimer);
+            this.stopTimer = null;
+          }
+        });
+        await this.activeStopPromise;
+      }
+      handleOutputLine(source, rawLine) {
+        const processHandle = this.processHandle;
+        const maskedLine = maskSensitive(rawLine, processHandle);
+        this.emitLog("info", source, maskedLine);
+        if (!processHandle || this.status.state !== "starting") {
+          return;
+        }
+        const adapter = getTunnelProviderAdapter(processHandle.provider);
+        const readiness = adapter.parseReadiness(maskedLine, source);
+        if (!readiness?.ready) {
+          return;
+        }
+        this.clearReadinessTimer();
+        this.updateStatus({
+          state: "running",
+          provider: processHandle.provider,
+          pid: processHandle.child.pid ?? null,
+          url: readiness.url ?? this.status.url,
+          startedAt: this.status.startedAt ?? nowIso(),
+          lastError: null
+        });
+        this.emitLog("info", "manager", `${processHandle.provider} tunnel is running`);
+      }
+      handleUnexpectedExit(code, message) {
+        this.clearReadinessTimer();
+        if (this.stopTimer) {
+          clearTimeout(this.stopTimer);
+          this.stopTimer = null;
+        }
+        this.expectedStop = false;
+        const provider = this.processHandle?.provider ?? this.status.provider;
+        this.processHandle = null;
+        this.updateStatus({
+          provider,
+          state: "failed",
+          pid: null,
+          stoppedAt: nowIso(),
+          url: null,
+          lastError: {
+            code,
+            message,
+            at: nowIso()
+          }
+        });
+      }
+      finalizeStoppedState() {
+        this.clearReadinessTimer();
+        if (this.stopTimer) {
+          clearTimeout(this.stopTimer);
+          this.stopTimer = null;
+        }
+        this.expectedStop = false;
+        this.processHandle = null;
+        this.updateStatus({
+          provider: null,
+          state: "stopped",
+          pid: null,
+          stoppedAt: nowIso(),
+          url: null,
+          lastError: null
+        });
+      }
+      clearReadinessTimer() {
+        if (this.readinessTimer) {
+          clearTimeout(this.readinessTimer);
+          this.readinessTimer = null;
+        }
+      }
+      updateStatus(patch) {
+        this.status = {
+          ...this.status,
+          ...patch,
+          lastError: patch.lastError === void 0 ? this.status.lastError : patch.lastError
+        };
+        const snapshot = this.getStatus();
+        for (const listener of this.statusListeners) {
+          listener(snapshot);
+        }
+        this.emit("status", snapshot);
+      }
+      emitLog(level, source, message) {
+        const safeMessage = maskSensitive(message, this.processHandle);
+        const entry = {
+          timestamp: nowIso(),
+          provider: this.status.provider,
+          level,
+          source,
+          message: safeMessage
+        };
+        this.logs.push(entry);
+        if (this.logs.length > this.maxLogEntries) {
+          this.logs.splice(0, this.logs.length - this.maxLogEntries);
+        }
+        const logMethod = level === "error" ? "error" : level === "warn" ? "warn" : "log";
+        remoteTunnelLog[logMethod](safeMessage);
+        for (const listener of this.logListeners) {
+          listener(entry);
+        }
+        this.emit("log", entry);
+      }
+    };
+  }
+});
+
 // ../engine/src/project-engine.ts
-var ProjectEngine;
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify10 } from "node:util";
+var execFileAsync, isRemoteActive, ProjectEngine;
 var init_project_engine = __esm({
   "../engine/src/project-engine.ts"() {
     "use strict";
@@ -70593,6 +71372,9 @@ var init_project_engine = __esm({
     init_merger();
     init_concurrency();
     init_logger2();
+    init_tunnel_process_manager();
+    execFileAsync = promisify10(execFile3);
+    isRemoteActive = (ra) => ra?.activeProvider != null && (ra.providers[ra.activeProvider]?.enabled ?? false);
     ProjectEngine = class _ProjectEngine {
       constructor(config, centralCore, options = {}) {
         this.config = config;
@@ -70606,6 +71388,13 @@ var init_project_engine = __esm({
       notifier;
       cronRunner;
       automationStore;
+      remoteTunnelManager;
+      remoteTunnelRestoreDiagnostics = {
+        outcome: "skipped",
+        reason: "not_attempted",
+        at: (/* @__PURE__ */ new Date()).toISOString(),
+        provider: null
+      };
       // ── Auto-merge state ──
       mergeQueue = [];
       mergeActive = /* @__PURE__ */ new Set();
@@ -70633,6 +71422,14 @@ var init_project_engine = __esm({
         await this.runtime.start();
         const store = this.runtime.getTaskStore();
         const cwd = this.config.workingDirectory;
+        this.remoteTunnelManager = new TunnelProcessManager();
+        try {
+          await this.restoreRemoteTunnelIfNeeded(store);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          this.setRestoreDiagnostics("failed", "restore_start_failed", null, message);
+          runtimeLog.warn(`Remote tunnel restore evaluation failed (continuing startup): ${message}`);
+        }
         this.prMonitor = new PrMonitor();
         this.prCommentHandler = new PrCommentHandler(store);
         this.prMonitor.onNewComments(
@@ -70732,6 +71529,30 @@ var init_project_engine = __esm({
         }
         this.notifier?.stop();
         this.cronRunner?.stop();
+        const tunnelManager = this.remoteTunnelManager;
+        this.remoteTunnelManager = void 0;
+        if (tunnelManager) {
+          let shutdownStore = null;
+          try {
+            shutdownStore = this.runtime.getTaskStore();
+          } catch {
+            shutdownStore = null;
+          }
+          if (shutdownStore) {
+            try {
+              await this.persistShutdownRemoteLifecycle(shutdownStore, tunnelManager.getStatus());
+            } catch (error) {
+              const message = error instanceof Error ? error.message : String(error);
+              runtimeLog.warn(`Failed to persist remote lifecycle shutdown markers: ${message}`);
+            }
+          }
+          try {
+            await tunnelManager.stop();
+          } catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            runtimeLog.warn(`Tunnel process manager stop failed (continuing shutdown): ${message}`);
+          }
+        }
         await this.runtime.stop();
         runtimeLog.log(`ProjectEngine stopped for ${this.config.projectId}`);
       }
@@ -70776,6 +71597,71 @@ var init_project_engine = __esm({
       getRoutineStore() {
         return this.runtime.getRoutineStore();
       }
+      /** Get the remote tunnel manager (available after start()). */
+      getRemoteTunnelManager() {
+        return this.remoteTunnelManager;
+      }
+      getRemoteTunnelRestoreDiagnostics() {
+        return { ...this.remoteTunnelRestoreDiagnostics };
+      }
+      async startRemoteTunnel() {
+        const manager = this.remoteTunnelManager;
+        if (!manager) {
+          throw new Error("remote_tunnel_unavailable:remote tunnel manager is not initialized");
+        }
+        const store = this.runtime.getTaskStore();
+        const settings = await store.getSettings();
+        const remoteAccess = settings.remoteAccess;
+        if (!remoteAccess || !isRemoteActive(remoteAccess)) {
+          throw new Error("invalid_config:no remote access provider enabled");
+        }
+        const provider = remoteAccess.activeProvider;
+        if (!provider) {
+          throw new Error("invalid_config:no active remote provider configured");
+        }
+        const lifecycle = await this.evaluateRemoteLifecycle(settings, provider);
+        if (!lifecycle.config) {
+          throw new Error(`${lifecycle.reason ?? "invalid_config"}:${lifecycle.message ?? "remote provider prerequisites are not met"}`);
+        }
+        const current = manager.getStatus();
+        if (current.state === "running" && current.provider === provider) {
+          await this.writeRemoteLifecycleState(store, remoteAccess, {
+            ...remoteAccess.lifecycle,
+            wasRunningOnShutdown: true,
+            lastRunningProvider: provider
+          });
+          return manager.getStatus();
+        }
+        if (current.state === "running" && current.provider && current.provider !== provider) {
+          await manager.switchProvider(provider, lifecycle.config);
+        } else {
+          await manager.start(provider, lifecycle.config);
+        }
+        await this.writeRemoteLifecycleState(store, remoteAccess, {
+          ...remoteAccess.lifecycle,
+          wasRunningOnShutdown: true,
+          lastRunningProvider: provider
+        });
+        return manager.getStatus();
+      }
+      async stopRemoteTunnel() {
+        const manager = this.remoteTunnelManager;
+        if (!manager) {
+          throw new Error("remote_tunnel_unavailable:remote tunnel manager is not initialized");
+        }
+        await manager.stop();
+        const store = this.runtime.getTaskStore();
+        const settings = await store.getSettings();
+        const remoteAccess = settings.remoteAccess;
+        if (remoteAccess) {
+          await this.writeRemoteLifecycleState(store, remoteAccess, {
+            ...remoteAccess.lifecycle,
+            wasRunningOnShutdown: false,
+            lastRunningProvider: null
+          });
+        }
+        return manager.getStatus();
+      }
       /** Get the RoutineRunner (if initialized). */
       getRoutineRunner() {
         return this.runtime.getRoutineRunner();
@@ -70810,6 +71696,183 @@ var init_project_engine = __esm({
           this.internalEnqueueMerge(taskId);
         });
       }
+      setRestoreDiagnostics(outcome, reason, provider, message) {
+        this.remoteTunnelRestoreDiagnostics = {
+          outcome,
+          reason,
+          provider,
+          message,
+          at: (/* @__PURE__ */ new Date()).toISOString()
+        };
+      }
+      async restoreRemoteTunnelIfNeeded(store) {
+        const manager = this.remoteTunnelManager;
+        if (!manager) {
+          return;
+        }
+        const settings = await store.getSettings();
+        const remoteAccess = settings.remoteAccess;
+        if (!remoteAccess || !isRemoteActive(remoteAccess)) {
+          this.setRestoreDiagnostics("skipped", "remote_access_disabled", null);
+          return;
+        }
+        const lifecycle = remoteAccess.lifecycle;
+        if (!lifecycle.rememberLastRunning) {
+          this.setRestoreDiagnostics("skipped", "remember_last_running_disabled", null);
+          if (lifecycle.wasRunningOnShutdown || lifecycle.lastRunningProvider) {
+            await this.writeRemoteLifecycleState(store, remoteAccess, {
+              ...lifecycle,
+              wasRunningOnShutdown: false,
+              lastRunningProvider: null
+            });
+          }
+          return;
+        }
+        if (!lifecycle.wasRunningOnShutdown) {
+          this.setRestoreDiagnostics("skipped", "no_prior_running_marker", null);
+          return;
+        }
+        const provider = lifecycle.lastRunningProvider ?? remoteAccess.activeProvider;
+        if (!provider) {
+          this.setRestoreDiagnostics("skipped", "provider_missing", null);
+          await this.writeRemoteLifecycleState(store, remoteAccess, {
+            ...lifecycle,
+            wasRunningOnShutdown: false,
+            lastRunningProvider: null
+          });
+          return;
+        }
+        const evaluation = await this.evaluateRemoteLifecycle(settings, provider);
+        if (!evaluation.config) {
+          this.setRestoreDiagnostics("skipped", evaluation.reason ?? "provider_not_configured", provider, evaluation.message);
+          await this.writeRemoteLifecycleState(store, remoteAccess, {
+            ...lifecycle,
+            wasRunningOnShutdown: false,
+            lastRunningProvider: null
+          });
+          return;
+        }
+        try {
+          await manager.start(provider, evaluation.config);
+          this.setRestoreDiagnostics("applied", "restore_started", provider);
+          await this.writeRemoteLifecycleState(store, remoteAccess, {
+            ...lifecycle,
+            wasRunningOnShutdown: true,
+            lastRunningProvider: provider
+          }, provider);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          this.setRestoreDiagnostics("failed", "restore_start_failed", provider, message);
+          runtimeLog.warn(`Remote tunnel restore failed for ${provider}: ${message}`);
+          await this.writeRemoteLifecycleState(store, remoteAccess, {
+            ...lifecycle,
+            wasRunningOnShutdown: false,
+            lastRunningProvider: null
+          });
+        }
+      }
+      async persistShutdownRemoteLifecycle(store, status) {
+        const settings = await store.getSettings();
+        const remoteAccess = settings.remoteAccess;
+        if (!remoteAccess) {
+          return;
+        }
+        const shouldRememberRunning = (status.state === "running" || status.state === "starting" || status.state === "stopping") && status.provider !== null;
+        await this.writeRemoteLifecycleState(store, remoteAccess, {
+          ...remoteAccess.lifecycle,
+          wasRunningOnShutdown: shouldRememberRunning,
+          lastRunningProvider: shouldRememberRunning ? status.provider : null
+        }, shouldRememberRunning ? status.provider : remoteAccess.activeProvider);
+      }
+      async writeRemoteLifecycleState(store, remoteAccess, lifecycle, activeProviderOverride) {
+        await store.updateSettings({
+          remoteAccess: {
+            ...remoteAccess,
+            activeProvider: activeProviderOverride === void 0 ? remoteAccess.activeProvider : activeProviderOverride,
+            lifecycle
+          }
+        });
+      }
+      async evaluateRemoteLifecycle(settings, provider) {
+        const remoteAccess = settings.remoteAccess;
+        if (!remoteAccess || !isRemoteActive(remoteAccess)) {
+          return { provider, reason: "remote_access_disabled", message: "No remote provider is enabled" };
+        }
+        if (provider === "tailscale") {
+          const tailscale = remoteAccess.providers.tailscale;
+          if (!tailscale.enabled) {
+            return { provider, reason: "provider_not_enabled", message: "Tailscale provider is disabled" };
+          }
+          if (!tailscale.hostname?.trim() || !Number.isFinite(tailscale.targetPort) || tailscale.targetPort <= 0) {
+            return { provider, reason: "provider_not_configured", message: "Tailscale hostname and target port must be configured" };
+          }
+          const executable2 = await this.checkExecutableAvailable("tailscale");
+          if (!executable2.available) {
+            return { provider, reason: "runtime_prerequisite_missing", message: executable2.message };
+          }
+          return {
+            provider,
+            config: {
+              provider: "tailscale",
+              executablePath: "tailscale",
+              args: ["funnel", String(Math.floor(tailscale.targetPort))]
+            }
+          };
+        }
+        const cloudflare = remoteAccess.providers.cloudflare;
+        if (!cloudflare.enabled) {
+          return { provider, reason: "provider_not_enabled", message: "Cloudflare provider is disabled" };
+        }
+        if (cloudflare.quickTunnel === true) {
+          const executable2 = await this.checkExecutableAvailable("cloudflared");
+          if (!executable2.available) {
+            return { provider, reason: "runtime_prerequisite_missing", message: executable2.message };
+          }
+          return {
+            provider,
+            config: {
+              provider: "cloudflare",
+              quickTunnel: true,
+              executablePath: "cloudflared",
+              args: ["tunnel", "--url", "http://localhost:4040"]
+            }
+          };
+        }
+        if (!cloudflare.tunnelName?.trim() || !cloudflare.ingressUrl?.trim()) {
+          return { provider, reason: "provider_not_configured", message: "Cloudflare tunnel name and ingress URL must be configured" };
+        }
+        if (!cloudflare.tunnelToken?.trim()) {
+          return { provider, reason: "provider_not_configured", message: "Cloudflare tunnel token is required" };
+        }
+        const executable = await this.checkExecutableAvailable("cloudflared");
+        if (!executable.available) {
+          return { provider, reason: "runtime_prerequisite_missing", message: executable.message };
+        }
+        return {
+          provider,
+          config: {
+            provider: "cloudflare",
+            executablePath: "cloudflared",
+            args: ["tunnel", "--no-autoupdate", "run", cloudflare.tunnelName.trim()],
+            tokenEnvVar: "TUNNEL_TOKEN",
+            env: {
+              TUNNEL_TOKEN: cloudflare.tunnelToken
+            }
+          }
+        };
+      }
+      async checkExecutableAvailable(command) {
+        const checker = process.platform === "win32" ? "where" : "which";
+        try {
+          await execFileAsync(checker, [command]);
+          return { available: true };
+        } catch {
+          return {
+            available: false,
+            message: `${command} is not available on PATH`
+          };
+        }
+      }
       // ── Merge eligibility helpers (richer logic from dashboard.ts) ──
       /**
        * True when a retry-exhausted task in "in-review" has a verification buffer
@@ -71422,6 +72485,15 @@ var init_peer_exchange_service = __esm({
   }
 });
 
+// ../engine/src/remote-access/index.ts
+var init_remote_access = __esm({
+  "../engine/src/remote-access/index.ts"() {
+    "use strict";
+    init_provider_adapters();
+    init_tunnel_process_manager();
+  }
+});
+
 // ../engine/src/index.ts
 var init_src2 = __esm({
   "../engine/src/index.ts"() {
@@ -71462,6 +72534,7 @@ var init_src2 = __esm({
     init_project_engine_manager();
     init_node_health_monitor();
     init_peer_exchange_service();
+    init_remote_access();
     init_remote_node_client();
     init_remote_node_runtime();
     init_step_session_executor();
@@ -71615,7 +72688,7 @@ var init_ai_session_diagnostics = __esm({
 
 // ../dashboard/src/planning.ts
 import { randomUUID as randomUUID10 } from "node:crypto";
-import { EventEmitter as EventEmitter18 } from "node:events";
+import { EventEmitter as EventEmitter19 } from "node:events";
 async function initEngine2() {
   try {
     const engineModule = "@fusion/engine";
@@ -72449,7 +73522,7 @@ For completion:
     process.on("beforeExit", () => {
       clearInterval(cleanupInterval2);
     });
-    PlanningStreamManager = class extends EventEmitter18 {
+    PlanningStreamManager = class extends EventEmitter19 {
       constructor(bufferSize = 100) {
         super();
         this.bufferSize = bufferSize;
@@ -72561,10 +73634,756 @@ For completion:
   }
 });
 
-// ../dashboard/src/claude-cli-probe.ts
-var init_claude_cli_probe = __esm({
-  "../dashboard/src/claude-cli-probe.ts"() {
+// ../dashboard/src/terminal.ts
+import { spawn as spawn3 } from "node:child_process";
+import { randomUUID as randomUUID11 } from "node:crypto";
+import { EventEmitter as EventEmitter20 } from "node:events";
+function extractBaseCommand(command) {
+  let trimmed = command.trim();
+  while (/^[A-Za-z_][A-Za-z0-9_]*=/.test(trimmed)) {
+    const match2 = trimmed.match(/^([A-Za-z_][A-Za-z0-9_]*=(?:[^\s]*|"[^"]*"|'[^']*'))\s*/);
+    if (match2) {
+      trimmed = trimmed.slice(match2[0].length).trim();
+    } else {
+      break;
+    }
+  }
+  if (trimmed.startsWith("sudo ")) {
+    trimmed = trimmed.slice(5).trim();
+  }
+  const match = trimmed.match(/^([A-Za-z0-9._-]+)/);
+  return match ? match[1].toLowerCase() : null;
+}
+function validateCommand(command) {
+  for (const pattern of SUBSTITUTION_PATTERNS) {
+    if (pattern.test(command)) {
+      return { valid: false, error: "Command substitution is not allowed" };
+    }
+  }
+  if (/[\0\r\n]/.test(command)) {
+    return { valid: false, error: "Command contains invalid control characters" };
+  }
+  for (const pattern of BLOCKED_PATTERNS) {
+    if (pattern.test(command)) {
+      return { valid: false, error: "Command contains dangerous patterns and is not allowed" };
+    }
+  }
+  const segments = command.split(CHAIN_OPERATORS);
+  for (const raw of segments) {
+    const segment = raw.trim();
+    if (segment.length === 0) continue;
+    const baseCommand = extractBaseCommand(segment);
+    if (!baseCommand) {
+      return { valid: false, error: "Could not parse command" };
+    }
+    if (!ALLOWED_COMMANDS.has(baseCommand)) {
+      return {
+        valid: false,
+        error: `Command '${baseCommand}' is not in the allowed command list. Allowed commands: ${Array.from(ALLOWED_COMMANDS).sort().join(", ")}`
+      };
+    }
+  }
+  return { valid: true };
+}
+var ALLOWED_COMMANDS, BLOCKED_PATTERNS, SUBSTITUTION_PATTERNS, CHAIN_OPERATORS, TerminalSessionManager, terminalSessionManager;
+var init_terminal = __esm({
+  "../dashboard/src/terminal.ts"() {
+    "use strict";
+    ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
+      // Version control
+      "git",
+      // Package managers
+      "npm",
+      "pnpm",
+      "yarn",
+      "bun",
+      // File operations
+      "ls",
+      "cat",
+      "echo",
+      "pwd",
+      "cd",
+      "mkdir",
+      "touch",
+      "cp",
+      "mv",
+      "rm",
+      "head",
+      "tail",
+      "less",
+      "more",
+      "find",
+      "grep",
+      // System info
+      "clear",
+      "which",
+      "whoami",
+      "uname",
+      "date",
+      // Node/JS
+      "node",
+      "npx",
+      "tsx",
+      // Python
+      "python",
+      "python3",
+      "pip",
+      "pip3",
+      // Network
+      "curl",
+      "wget",
+      // Build tools
+      "make",
+      "cmake",
+      // Process management
+      "ps",
+      "top",
+      "htop",
+      "kill",
+      "pkill",
+      // Shell builtins that are safe
+      "source",
+      ".",
+      "export",
+      "env",
+      "printenv",
+      "alias",
+      // Editors (for viewing)
+      "code",
+      // VS Code CLI
+      "vim",
+      "vi",
+      "nano"
+    ]);
+    BLOCKED_PATTERNS = [
+      // System destruction
+      /rm\s+(-[rf]+\s+)?\/\s*$/i,
+      // rm -rf / or rm /
+      /rm\s+(-[rf]+\s+)?\/\*/i,
+      // rm -rf /*
+      />\s*\/dev\/sda/i,
+      // Direct disk write
+      /:\(\)\s*\{\s*:\s*\|:\s*&\s*\};\s*:/i,
+      // Fork bomb
+      /mkfs\.\w+\s+/i,
+      // Filesystem formatting
+      /dd\s+if=/i,
+      // dd with input file
+      /\.\s*\/dev\/null/i
+      // Sourcing /dev/null tricks
+    ];
+    SUBSTITUTION_PATTERNS = [
+      /\$\(/,
+      // $(...)  — command substitution
+      /`/,
+      // `...`   — backtick command substitution
+      /<\(/,
+      // <(...)  — process substitution (bash)
+      />\(/
+      // >(...)  — process substitution (bash)
+    ];
+    CHAIN_OPERATORS = /&&|\|\||;|(?<!\|)\|(?!\|)/;
+    TerminalSessionManager = class extends EventEmitter20 {
+      sessions = /* @__PURE__ */ new Map();
+      defaultTimeout = 3e4;
+      // 30 seconds
+      /**
+       * Creates a new terminal session and spawns the command.
+       * Returns the session ID for tracking.
+       */
+      createSession(command, cwd) {
+        const validation = validateCommand(command);
+        if (!validation.valid) {
+          return { sessionId: "", error: validation.error };
+        }
+        const sessionId = randomUUID11();
+        const childProcess = spawn3(command, [], {
+          cwd,
+          shell: true,
+          stdio: ["pipe", "pipe", "pipe"],
+          env: { ...process.env, FORCE_COLOR: "1", TERM: "xterm-256color" }
+        });
+        const session = {
+          id: sessionId,
+          command,
+          process: childProcess,
+          startTime: /* @__PURE__ */ new Date(),
+          output: [],
+          exitCode: null,
+          killed: false
+        };
+        this.sessions.set(sessionId, session);
+        childProcess.stdout?.on("data", (data) => {
+          const chunk = data.toString("utf-8");
+          session.output.push(chunk);
+          this.emit("output", { sessionId, type: "stdout", data: chunk });
+        });
+        childProcess.stderr?.on("data", (data) => {
+          const chunk = data.toString("utf-8");
+          session.output.push(chunk);
+          this.emit("output", { sessionId, type: "stderr", data: chunk });
+        });
+        childProcess.on("exit", (code) => {
+          session.exitCode = code ?? 0;
+          this.emit("output", {
+            sessionId,
+            type: "exit",
+            data: `Process exited with code ${code ?? 0}`,
+            exitCode: code ?? 0
+          });
+          setTimeout(() => this.cleanupSession(sessionId), 5e3);
+        });
+        childProcess.on("error", (err) => {
+          const errorMsg = err.message;
+          session.output.push(errorMsg);
+          session.exitCode = 127;
+          this.emit("output", { sessionId, type: "stderr", data: errorMsg });
+          this.emit("output", {
+            sessionId,
+            type: "exit",
+            data: `Process failed: ${errorMsg}`,
+            exitCode: 127
+          });
+          setTimeout(() => this.cleanupSession(sessionId), 5e3);
+        });
+        const timeout = setTimeout(() => {
+          if (!session.exitCode && !session.killed) {
+            this.killSession(sessionId, "SIGTERM");
+            this.emit("output", {
+              sessionId,
+              type: "stderr",
+              data: "\n[Command timed out after 30 seconds]\n"
+            });
+          }
+        }, this.defaultTimeout);
+        childProcess.on("exit", () => clearTimeout(timeout));
+        return { sessionId };
+      }
+      /**
+       * Gets a session by ID.
+       */
+      getSession(sessionId) {
+        return this.sessions.get(sessionId);
+      }
+      /**
+       * Kills a running session's process.
+       * Returns true if killed, false if not found or already exited.
+       */
+      killSession(sessionId, signal = "SIGTERM") {
+        const session = this.sessions.get(sessionId);
+        if (!session || session.exitCode !== null || session.killed) {
+          return false;
+        }
+        session.killed = true;
+        try {
+          if (session.process.pid) {
+            process.kill(-session.process.pid, signal);
+          }
+        } catch {
+          session.process.kill(signal);
+        }
+        return true;
+      }
+      /**
+       * Cleans up a session from memory.
+       */
+      cleanupSession(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session) return false;
+        if (session.exitCode === null && !session.killed) {
+          this.killSession(sessionId, "SIGKILL");
+        }
+        this.sessions.delete(sessionId);
+        return true;
+      }
+      /**
+       * Lists all active sessions.
+       */
+      listSessions() {
+        return Array.from(this.sessions.values()).map((s) => ({
+          id: s.id,
+          command: s.command,
+          running: s.exitCode === null && !s.killed,
+          startTime: s.startTime
+        }));
+      }
+      /**
+       * Cleans up all sessions (useful for shutdown).
+       */
+      cleanupAll() {
+        for (const [sessionId] of this.sessions) {
+          this.cleanupSession(sessionId);
+        }
+      }
+    };
+    terminalSessionManager = new TerminalSessionManager();
+  }
+});
+
+// ../dashboard/src/terminal-service.ts
+import { createRequire as createRequire2 } from "node:module";
+var isBunBinary, require2;
+var init_terminal_service = __esm({
+  "../dashboard/src/terminal-service.ts"() {
     "use strict";
+    isBunBinary = typeof Bun !== "undefined" && !!Bun.embeddedFiles;
+    require2 = createRequire2(import.meta.url);
+  }
+});
+
+// ../dashboard/src/github-webhooks.ts
+var init_github_webhooks = __esm({
+  "../dashboard/src/github-webhooks.ts"() {
+    "use strict";
+  }
+});
+
+// ../dashboard/src/ai-session-store.ts
+var MAX_THINKING_BYTES, SESSION_CLEANUP_DEFAULT_MAX_AGE_MS, SESSION_CLEANUP_INTERVAL_MS, diagnostics2;
+var init_ai_session_store = __esm({
+  "../dashboard/src/ai-session-store.ts"() {
+    "use strict";
+    init_ai_session_diagnostics();
+    MAX_THINKING_BYTES = 50 * 1024;
+    SESSION_CLEANUP_DEFAULT_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
+    SESSION_CLEANUP_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+    diagnostics2 = createSessionDiagnostics("ai-session-store");
+  }
+});
+
+// ../dashboard/src/subtask-breakdown.ts
+import { EventEmitter as EventEmitter21 } from "node:events";
+function cleanupInMemorySubtaskSession(sessionId) {
+  const session = sessions2.get(sessionId);
+  if (!session) {
+    return false;
+  }
+  try {
+    session.agent?.session?.dispose?.();
+  } catch {
+  }
+  subtaskStreamManager.cleanupSession(sessionId);
+  sessions2.delete(sessionId);
+  return true;
+}
+function cleanupExpiredSessions2() {
+  const now = Date.now();
+  for (const [id, session] of sessions2) {
+    if (now - session.updatedAt.getTime() > SESSION_TTL_MS2) {
+      cleanupInMemorySubtaskSession(id);
+    }
+  }
+}
+var diagnostics3, SESSION_TTL_MS2, CLEANUP_INTERVAL_MS3, sessions2, cleanupInterval3, SubtaskStreamManager, subtaskStreamManager;
+var init_subtask_breakdown = __esm({
+  "../dashboard/src/subtask-breakdown.ts"() {
+    "use strict";
+    init_src();
+    init_sse_buffer();
+    init_ai_session_diagnostics();
+    diagnostics3 = createSessionDiagnostics("subtask-breakdown");
+    SESSION_TTL_MS2 = 7 * 24 * 60 * 60 * 1e3;
+    CLEANUP_INTERVAL_MS3 = 5 * 60 * 1e3;
+    sessions2 = /* @__PURE__ */ new Map();
+    cleanupInterval3 = setInterval(cleanupExpiredSessions2, CLEANUP_INTERVAL_MS3);
+    cleanupInterval3.unref?.();
+    process.on("beforeExit", () => {
+      clearInterval(cleanupInterval3);
+    });
+    SubtaskStreamManager = class extends EventEmitter21 {
+      constructor(bufferSize = 100) {
+        super();
+        this.bufferSize = bufferSize;
+      }
+      sessions = /* @__PURE__ */ new Map();
+      buffers = /* @__PURE__ */ new Map();
+      subscribe(sessionId, callback) {
+        if (!this.sessions.has(sessionId)) {
+          this.sessions.set(sessionId, /* @__PURE__ */ new Set());
+        }
+        const callbacks = this.sessions.get(sessionId);
+        callbacks.add(callback);
+        return () => {
+          callbacks.delete(callback);
+          if (callbacks.size === 0) {
+            this.sessions.delete(sessionId);
+          }
+        };
+      }
+      getBuffer(sessionId) {
+        let buffer = this.buffers.get(sessionId);
+        if (!buffer) {
+          buffer = new SessionEventBuffer(this.bufferSize);
+          this.buffers.set(sessionId, buffer);
+        }
+        return buffer;
+      }
+      broadcast(sessionId, event) {
+        const serialized = JSON.stringify(event.data ?? {});
+        const eventData = typeof serialized === "string" ? serialized : "{}";
+        const eventId = this.getBuffer(sessionId).push(event.type, eventData);
+        const callbacks = this.sessions.get(sessionId);
+        if (!callbacks) return eventId;
+        for (const callback of callbacks) {
+          try {
+            callback(event, eventId);
+          } catch {
+          }
+        }
+        return eventId;
+      }
+      getBufferedEvents(sessionId, sinceId) {
+        const buffer = this.buffers.get(sessionId);
+        if (!buffer) return [];
+        return buffer.getEventsSince(sinceId);
+      }
+      cleanupSession(sessionId) {
+        this.sessions.delete(sessionId);
+        this.buffers.delete(sessionId);
+      }
+      reset() {
+        this.sessions.clear();
+        this.buffers.clear();
+        this.removeAllListeners();
+      }
+    };
+    subtaskStreamManager = new SubtaskStreamManager();
+  }
+});
+
+// ../dashboard/src/mission-interview.ts
+import { EventEmitter as EventEmitter22 } from "node:events";
+function cleanupInMemoryMissionSession(sessionId) {
+  const session = sessions3.get(sessionId);
+  if (!session) {
+    return false;
+  }
+  if (session.agent) {
+    try {
+      session.agent.session.dispose?.();
+    } catch {
+    }
+    session.agent = void 0;
+  }
+  missionInterviewStreamManager.cleanupSession(sessionId);
+  sessions3.delete(sessionId);
+  return true;
+}
+function cleanupExpiredSessions3() {
+  const now = Date.now();
+  for (const [id, session] of sessions3) {
+    if (now - session.updatedAt.getTime() > SESSION_TTL_MS3) {
+      cleanupInMemoryMissionSession(id);
+    }
+  }
+  for (const [ip, entry] of rateLimits3) {
+    if (now - entry.firstRequestAt.getTime() > RATE_LIMIT_WINDOW_MS3) {
+      rateLimits3.delete(ip);
+    }
+  }
+}
+var diagnostics4, SESSION_TTL_MS3, CLEANUP_INTERVAL_MS4, RATE_LIMIT_WINDOW_MS3, sessions3, rateLimits3, cleanupInterval4, MissionInterviewStreamManager, missionInterviewStreamManager;
+var init_mission_interview = __esm({
+  "../dashboard/src/mission-interview.ts"() {
+    "use strict";
+    init_src();
+    init_sse_buffer();
+    init_ai_session_diagnostics();
+    diagnostics4 = createSessionDiagnostics("mission-interview");
+    SESSION_TTL_MS3 = 7 * 24 * 60 * 60 * 1e3;
+    CLEANUP_INTERVAL_MS4 = 5 * 60 * 1e3;
+    RATE_LIMIT_WINDOW_MS3 = 60 * 60 * 1e3;
+    sessions3 = /* @__PURE__ */ new Map();
+    rateLimits3 = /* @__PURE__ */ new Map();
+    cleanupInterval4 = setInterval(cleanupExpiredSessions3, CLEANUP_INTERVAL_MS4);
+    cleanupInterval4.unref?.();
+    process.on("beforeExit", () => clearInterval(cleanupInterval4));
+    MissionInterviewStreamManager = class extends EventEmitter22 {
+      constructor(bufferSize = 100) {
+        super();
+        this.bufferSize = bufferSize;
+      }
+      sessions = /* @__PURE__ */ new Map();
+      buffers = /* @__PURE__ */ new Map();
+      subscribe(sessionId, callback) {
+        if (!this.sessions.has(sessionId)) {
+          this.sessions.set(sessionId, /* @__PURE__ */ new Set());
+        }
+        const callbacks = this.sessions.get(sessionId);
+        callbacks.add(callback);
+        return () => {
+          callbacks.delete(callback);
+          if (callbacks.size === 0) {
+            this.sessions.delete(sessionId);
+          }
+        };
+      }
+      getBuffer(sessionId) {
+        let buffer = this.buffers.get(sessionId);
+        if (!buffer) {
+          buffer = new SessionEventBuffer(this.bufferSize);
+          this.buffers.set(sessionId, buffer);
+        }
+        return buffer;
+      }
+      broadcast(sessionId, event) {
+        const serialized = JSON.stringify(event.data ?? {});
+        const eventData = typeof serialized === "string" ? serialized : "{}";
+        const eventId = this.getBuffer(sessionId).push(event.type, eventData);
+        const callbacks = this.sessions.get(sessionId);
+        if (!callbacks) return eventId;
+        for (const callback of callbacks) {
+          nonfatal(
+            () => callback(event, eventId),
+            diagnostics4,
+            "Error broadcasting to client",
+            { sessionId, operation: "broadcast" }
+          );
+        }
+        return eventId;
+      }
+      getBufferedEvents(sessionId, sinceId) {
+        const buffer = this.buffers.get(sessionId);
+        if (!buffer) return [];
+        return buffer.getEventsSince(sinceId);
+      }
+      hasSubscribers(sessionId) {
+        const callbacks = this.sessions.get(sessionId);
+        return callbacks !== void 0 && callbacks.size > 0;
+      }
+      cleanupSession(sessionId) {
+        this.sessions.delete(sessionId);
+        this.buffers.delete(sessionId);
+      }
+      reset() {
+        this.sessions.clear();
+        this.buffers.clear();
+        this.removeAllListeners();
+      }
+    };
+    missionInterviewStreamManager = new MissionInterviewStreamManager();
+  }
+});
+
+// ../dashboard/src/milestone-slice-interview.ts
+import { EventEmitter as EventEmitter23 } from "node:events";
+function cleanupInMemorySession2(sessionId) {
+  const session = sessions4.get(sessionId);
+  if (!session) {
+    return false;
+  }
+  if (session.agent) {
+    try {
+      session.agent.session.dispose?.();
+    } catch {
+    }
+    session.agent = void 0;
+  }
+  milestoneSliceInterviewStreamManager.cleanupSession(sessionId);
+  sessions4.delete(sessionId);
+  return true;
+}
+function cleanupExpiredSessions4() {
+  const now = Date.now();
+  for (const [id, session] of sessions4) {
+    if (now - session.updatedAt.getTime() > SESSION_TTL_MS4) {
+      cleanupInMemorySession2(id);
+    }
+  }
+  for (const [ip, entry] of rateLimits4) {
+    if (now - entry.firstRequestAt.getTime() > RATE_LIMIT_WINDOW_MS4) {
+      rateLimits4.delete(ip);
+    }
+  }
+}
+var diagnostics5, SESSION_TTL_MS4, CLEANUP_INTERVAL_MS5, RATE_LIMIT_WINDOW_MS4, sessions4, rateLimits4, cleanupInterval5, MilestoneSliceInterviewStreamManager, milestoneSliceInterviewStreamManager;
+var init_milestone_slice_interview = __esm({
+  "../dashboard/src/milestone-slice-interview.ts"() {
+    "use strict";
+    init_sse_buffer();
+    init_mission_interview();
+    init_ai_session_diagnostics();
+    init_mission_interview();
+    diagnostics5 = createSessionDiagnostics("milestone-slice-interview");
+    SESSION_TTL_MS4 = 7 * 24 * 60 * 60 * 1e3;
+    CLEANUP_INTERVAL_MS5 = 5 * 60 * 1e3;
+    RATE_LIMIT_WINDOW_MS4 = 60 * 60 * 1e3;
+    sessions4 = /* @__PURE__ */ new Map();
+    rateLimits4 = /* @__PURE__ */ new Map();
+    cleanupInterval5 = setInterval(cleanupExpiredSessions4, CLEANUP_INTERVAL_MS5);
+    cleanupInterval5.unref?.();
+    process.on("beforeExit", () => clearInterval(cleanupInterval5));
+    MilestoneSliceInterviewStreamManager = class extends EventEmitter23 {
+      constructor(bufferSize = 100) {
+        super();
+        this.bufferSize = bufferSize;
+      }
+      sessions = /* @__PURE__ */ new Map();
+      buffers = /* @__PURE__ */ new Map();
+      subscribe(sessionId, callback) {
+        if (!this.sessions.has(sessionId)) {
+          this.sessions.set(sessionId, /* @__PURE__ */ new Set());
+        }
+        const callbacks = this.sessions.get(sessionId);
+        callbacks.add(callback);
+        return () => {
+          callbacks.delete(callback);
+          if (callbacks.size === 0) {
+            this.sessions.delete(sessionId);
+          }
+        };
+      }
+      getBuffer(sessionId) {
+        let buffer = this.buffers.get(sessionId);
+        if (!buffer) {
+          buffer = new SessionEventBuffer(this.bufferSize);
+          this.buffers.set(sessionId, buffer);
+        }
+        return buffer;
+      }
+      broadcast(sessionId, event) {
+        const serialized = JSON.stringify(event.data ?? {});
+        const eventData = typeof serialized === "string" ? serialized : "{}";
+        const eventId = this.getBuffer(sessionId).push(event.type, eventData);
+        const callbacks = this.sessions.get(sessionId);
+        if (!callbacks) return eventId;
+        for (const callback of callbacks) {
+          nonfatal(
+            () => callback(event, eventId),
+            diagnostics5,
+            "Error broadcasting to client",
+            { sessionId, operation: "broadcast" }
+          );
+        }
+        return eventId;
+      }
+      getBufferedEvents(sessionId, sinceId) {
+        const buffer = this.buffers.get(sessionId);
+        if (!buffer) return [];
+        return buffer.getEventsSince(sinceId);
+      }
+      hasSubscribers(sessionId) {
+        const callbacks = this.sessions.get(sessionId);
+        return callbacks !== void 0 && callbacks.size > 0;
+      }
+      cleanupSession(sessionId) {
+        this.sessions.delete(sessionId);
+        this.buffers.delete(sessionId);
+      }
+      reset() {
+        this.sessions.clear();
+        this.buffers.clear();
+        this.removeAllListeners();
+      }
+    };
+    milestoneSliceInterviewStreamManager = new MilestoneSliceInterviewStreamManager();
+  }
+});
+
+// ../dashboard/src/runtime-logger.ts
+var init_runtime_logger = __esm({
+  "../dashboard/src/runtime-logger.ts"() {
+    "use strict";
+  }
+});
+
+// ../dashboard/src/api-error.ts
+var init_api_error = __esm({
+  "../dashboard/src/api-error.ts"() {
+    "use strict";
+    init_runtime_logger();
+  }
+});
+
+// ../dashboard/src/plugin-routes.ts
+import { Router } from "express";
+var init_plugin_routes = __esm({
+  "../dashboard/src/plugin-routes.ts"() {
+    "use strict";
+    init_src();
+    init_api_error();
+  }
+});
+
+// ../dashboard/src/project-store-resolver.ts
+var init_project_store_resolver = __esm({
+  "../dashboard/src/project-store-resolver.ts"() {
+    "use strict";
+  }
+});
+
+// ../dashboard/src/routes/context.ts
+import { Router as Router2 } from "express";
+var init_context = __esm({
+  "../dashboard/src/routes/context.ts"() {
+    "use strict";
+    init_api_error();
+    init_project_store_resolver();
+    init_runtime_logger();
+  }
+});
+
+// ../dashboard/src/routes/register-task-workflow-routes.ts
+var init_register_task_workflow_routes = __esm({
+  "../dashboard/src/routes/register-task-workflow-routes.ts"() {
+    "use strict";
+    init_src();
+    init_api_error();
+  }
+});
+
+// ../dashboard/src/routes/register-planning-subtask-routes.ts
+var init_register_planning_subtask_routes = __esm({
+  "../dashboard/src/routes/register-planning-subtask-routes.ts"() {
+    "use strict";
+    init_api_error();
+    init_sse_buffer();
+  }
+});
+
+// ../dashboard/src/rate-limit.ts
+var init_rate_limit = __esm({
+  "../dashboard/src/rate-limit.ts"() {
+    "use strict";
+    init_api_error();
+  }
+});
+
+// ../dashboard/src/routes/register-chat-routes.ts
+var init_register_chat_routes = __esm({
+  "../dashboard/src/routes/register-chat-routes.ts"() {
+    "use strict";
+    init_api_error();
+    init_rate_limit();
+    init_sse_buffer();
+  }
+});
+
+// ../dashboard/src/remote-auth.ts
+var init_remote_auth = __esm({
+  "../dashboard/src/remote-auth.ts"() {
+    "use strict";
+  }
+});
+
+// ../dashboard/src/routes/register-settings-memory-routes.ts
+var init_register_settings_memory_routes = __esm({
+  "../dashboard/src/routes/register-settings-memory-routes.ts"() {
+    "use strict";
+    init_src();
+    init_api_error();
+    init_remote_auth();
+    init_project_store_resolver();
+  }
+});
+
+// ../dashboard/src/routes/register-messaging-scripts.ts
+var init_register_messaging_scripts = __esm({
+  "../dashboard/src/routes/register-messaging-scripts.ts"() {
+    "use strict";
+    init_src();
+    init_api_error();
+    init_terminal_service();
   }
 });
 
@@ -74048,7 +75867,7 @@ var init_github = __esm({
 });
 
 // ../dashboard/src/github-poll.ts
-import { EventEmitter as EventEmitter19 } from "node:events";
+import { EventEmitter as EventEmitter24 } from "node:events";
 function toAlias(type, number) {
   return `${type}_${number}`;
 }
@@ -74094,7 +75913,7 @@ var init_github_poll = __esm({
       }
     };
     githubRateLimiter = new GitHubRateLimiter();
-    GitHubPollingService = class extends EventEmitter19 {
+    GitHubPollingService = class extends EventEmitter24 {
       watches = /* @__PURE__ */ new Map();
       rateLimiter;
       pollingIntervalMs;
@@ -74338,309 +76157,82 @@ var init_github_poll = __esm({
   }
 });
 
-// ../dashboard/src/terminal.ts
-import { spawn as spawn2 } from "node:child_process";
-import { randomUUID as randomUUID11 } from "node:crypto";
-import { EventEmitter as EventEmitter20 } from "node:events";
-function extractBaseCommand(command) {
-  let trimmed = command.trim();
-  while (/^[A-Za-z_][A-Za-z0-9_]*=/.test(trimmed)) {
-    const match2 = trimmed.match(/^([A-Za-z_][A-Za-z0-9_]*=(?:[^\s]*|"[^"]*"|'[^']*'))\s*/);
-    if (match2) {
-      trimmed = trimmed.slice(match2[0].length).trim();
-    } else {
-      break;
-    }
-  }
-  if (trimmed.startsWith("sudo ")) {
-    trimmed = trimmed.slice(5).trim();
-  }
-  const match = trimmed.match(/^([A-Za-z0-9._-]+)/);
-  return match ? match[1].toLowerCase() : null;
-}
-function validateCommand(command) {
-  for (const pattern of SUBSTITUTION_PATTERNS) {
-    if (pattern.test(command)) {
-      return { valid: false, error: "Command substitution is not allowed" };
-    }
-  }
-  if (/[\0\r\n]/.test(command)) {
-    return { valid: false, error: "Command contains invalid control characters" };
+// ../dashboard/src/routes/resolve-diff-base.ts
+import { execFile as execFile4 } from "node:child_process";
+import { promisify as promisify11 } from "node:util";
+var execFileAsync2;
+var init_resolve_diff_base = __esm({
+  "../dashboard/src/routes/resolve-diff-base.ts"() {
+    "use strict";
+    execFileAsync2 = promisify11(execFile4);
   }
-  for (const pattern of BLOCKED_PATTERNS) {
-    if (pattern.test(command)) {
-      return { valid: false, error: "Command contains dangerous patterns and is not allowed" };
-    }
+});
+
+// ../dashboard/src/routes/register-git-github.ts
+var init_register_git_github = __esm({
+  "../dashboard/src/routes/register-git-github.ts"() {
+    "use strict";
+    init_src();
+    init_api_error();
+    init_github();
+    init_github_poll();
+    init_github_webhooks();
+    init_resolve_diff_base();
   }
-  const segments = command.split(CHAIN_OPERATORS);
-  for (const raw of segments) {
-    const segment = raw.trim();
-    if (segment.length === 0) continue;
-    const baseCommand = extractBaseCommand(segment);
-    if (!baseCommand) {
-      return { valid: false, error: "Could not parse command" };
-    }
-    if (!ALLOWED_COMMANDS.has(baseCommand)) {
-      return {
-        valid: false,
-        error: `Command '${baseCommand}' is not in the allowed command list. Allowed commands: ${Array.from(ALLOWED_COMMANDS).sort().join(", ")}`
-      };
-    }
+});
+
+// ../dashboard/src/file-service.ts
+var MAX_FILE_SIZE;
+var init_file_service = __esm({
+  "../dashboard/src/file-service.ts"() {
+    "use strict";
+    MAX_FILE_SIZE = 1024 * 1024;
   }
-  return { valid: true };
-}
-var ALLOWED_COMMANDS, BLOCKED_PATTERNS, SUBSTITUTION_PATTERNS, CHAIN_OPERATORS, TerminalSessionManager, terminalSessionManager;
-var init_terminal = __esm({
-  "../dashboard/src/terminal.ts"() {
+});
+
+// ../dashboard/src/routes/register-file-workspace-routes.ts
+var init_register_file_workspace_routes = __esm({
+  "../dashboard/src/routes/register-file-workspace-routes.ts"() {
     "use strict";
-    ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
-      // Version control
-      "git",
-      // Package managers
-      "npm",
-      "pnpm",
-      "yarn",
-      "bun",
-      // File operations
-      "ls",
-      "cat",
-      "echo",
-      "pwd",
-      "cd",
-      "mkdir",
-      "touch",
-      "cp",
-      "mv",
-      "rm",
-      "head",
-      "tail",
-      "less",
-      "more",
-      "find",
-      "grep",
-      // System info
-      "clear",
-      "which",
-      "whoami",
-      "uname",
-      "date",
-      // Node/JS
-      "node",
-      "npx",
-      "tsx",
-      // Python
-      "python",
-      "python3",
-      "pip",
-      "pip3",
-      // Network
-      "curl",
-      "wget",
-      // Build tools
-      "make",
-      "cmake",
-      // Process management
-      "ps",
-      "top",
-      "htop",
-      "kill",
-      "pkill",
-      // Shell builtins that are safe
-      "source",
-      ".",
-      "export",
-      "env",
-      "printenv",
-      "alias",
-      // Editors (for viewing)
-      "code",
-      // VS Code CLI
-      "vim",
-      "vi",
-      "nano"
-    ]);
-    BLOCKED_PATTERNS = [
-      // System destruction
-      /rm\s+(-[rf]+\s+)?\/\s*$/i,
-      // rm -rf / or rm /
-      /rm\s+(-[rf]+\s+)?\/\*/i,
-      // rm -rf /*
-      />\s*\/dev\/sda/i,
-      // Direct disk write
-      /:\(\)\s*\{\s*:\s*\|:\s*&\s*\};\s*:/i,
-      // Fork bomb
-      /mkfs\.\w+\s+/i,
-      // Filesystem formatting
-      /dd\s+if=/i,
-      // dd with input file
-      /\.\s*\/dev\/null/i
-      // Sourcing /dev/null tricks
-    ];
-    SUBSTITUTION_PATTERNS = [
-      /\$\(/,
-      // $(...)  — command substitution
-      /`/,
-      // `...`   — backtick command substitution
-      /<\(/,
-      // <(...)  — process substitution (bash)
-      />\(/
-      // >(...)  — process substitution (bash)
-    ];
-    CHAIN_OPERATORS = /&&|\|\||;|(?<!\|)\|(?!\|)/;
-    TerminalSessionManager = class extends EventEmitter20 {
-      sessions = /* @__PURE__ */ new Map();
-      defaultTimeout = 3e4;
-      // 30 seconds
-      /**
-       * Creates a new terminal session and spawns the command.
-       * Returns the session ID for tracking.
-       */
-      createSession(command, cwd) {
-        const validation = validateCommand(command);
-        if (!validation.valid) {
-          return { sessionId: "", error: validation.error };
-        }
-        const sessionId = randomUUID11();
-        const childProcess = spawn2(command, [], {
-          cwd,
-          shell: true,
-          stdio: ["pipe", "pipe", "pipe"],
-          env: { ...process.env, FORCE_COLOR: "1", TERM: "xterm-256color" }
-        });
-        const session = {
-          id: sessionId,
-          command,
-          process: childProcess,
-          startTime: /* @__PURE__ */ new Date(),
-          output: [],
-          exitCode: null,
-          killed: false
-        };
-        this.sessions.set(sessionId, session);
-        childProcess.stdout?.on("data", (data) => {
-          const chunk = data.toString("utf-8");
-          session.output.push(chunk);
-          this.emit("output", { sessionId, type: "stdout", data: chunk });
-        });
-        childProcess.stderr?.on("data", (data) => {
-          const chunk = data.toString("utf-8");
-          session.output.push(chunk);
-          this.emit("output", { sessionId, type: "stderr", data: chunk });
-        });
-        childProcess.on("exit", (code) => {
-          session.exitCode = code ?? 0;
-          this.emit("output", {
-            sessionId,
-            type: "exit",
-            data: `Process exited with code ${code ?? 0}`,
-            exitCode: code ?? 0
-          });
-          setTimeout(() => this.cleanupSession(sessionId), 5e3);
-        });
-        childProcess.on("error", (err) => {
-          const errorMsg = err.message;
-          session.output.push(errorMsg);
-          session.exitCode = 127;
-          this.emit("output", { sessionId, type: "stderr", data: errorMsg });
-          this.emit("output", {
-            sessionId,
-            type: "exit",
-            data: `Process failed: ${errorMsg}`,
-            exitCode: 127
-          });
-          setTimeout(() => this.cleanupSession(sessionId), 5e3);
-        });
-        const timeout = setTimeout(() => {
-          if (!session.exitCode && !session.killed) {
-            this.killSession(sessionId, "SIGTERM");
-            this.emit("output", {
-              sessionId,
-              type: "stderr",
-              data: "\n[Command timed out after 30 seconds]\n"
-            });
-          }
-        }, this.defaultTimeout);
-        childProcess.on("exit", () => clearTimeout(timeout));
-        return { sessionId };
-      }
-      /**
-       * Gets a session by ID.
-       */
-      getSession(sessionId) {
-        return this.sessions.get(sessionId);
-      }
-      /**
-       * Kills a running session's process.
-       * Returns true if killed, false if not found or already exited.
-       */
-      killSession(sessionId, signal = "SIGTERM") {
-        const session = this.sessions.get(sessionId);
-        if (!session || session.exitCode !== null || session.killed) {
-          return false;
-        }
-        session.killed = true;
-        try {
-          if (session.process.pid) {
-            process.kill(-session.process.pid, signal);
-          }
-        } catch {
-          session.process.kill(signal);
-        }
-        return true;
-      }
-      /**
-       * Cleans up a session from memory.
-       */
-      cleanupSession(sessionId) {
-        const session = this.sessions.get(sessionId);
-        if (!session) return false;
-        if (session.exitCode === null && !session.killed) {
-          this.killSession(sessionId, "SIGKILL");
-        }
-        this.sessions.delete(sessionId);
-        return true;
-      }
-      /**
-       * Lists all active sessions.
-       */
-      listSessions() {
-        return Array.from(this.sessions.values()).map((s) => ({
-          id: s.id,
-          command: s.command,
-          running: s.exitCode === null && !s.killed,
-          startTime: s.startTime
-        }));
-      }
-      /**
-       * Cleans up all sessions (useful for shutdown).
-       */
-      cleanupAll() {
-        for (const [sessionId] of this.sessions) {
-          this.cleanupSession(sessionId);
-        }
-      }
-    };
-    terminalSessionManager = new TerminalSessionManager();
+    init_api_error();
+    init_file_service();
   }
 });
 
-// ../dashboard/src/terminal-service.ts
-import { createRequire as createRequire2 } from "node:module";
-var isBunBinary, require2;
-var init_terminal_service = __esm({
-  "../dashboard/src/terminal-service.ts"() {
+// ../dashboard/src/routes/register-agents-projects-nodes.ts
+var init_register_agents_projects_nodes = __esm({
+  "../dashboard/src/routes/register-agents-projects-nodes.ts"() {
     "use strict";
-    isBunBinary = typeof Bun !== "undefined" && !!Bun.embeddedFiles;
-    require2 = createRequire2(import.meta.url);
   }
 });
 
-// ../dashboard/src/file-service.ts
-var MAX_FILE_SIZE;
-var init_file_service = __esm({
-  "../dashboard/src/file-service.ts"() {
+// ../dashboard/src/routes/register-project-routes.ts
+import { execFile as execFile5 } from "node:child_process";
+import * as fsPromises from "node:fs/promises";
+import { promisify as promisify12 } from "node:util";
+var access3, stat6, mkdir12, readdir8, rm2, execFileAsync3;
+var init_register_project_routes = __esm({
+  "../dashboard/src/routes/register-project-routes.ts"() {
     "use strict";
-    MAX_FILE_SIZE = 1024 * 1024;
+    init_src();
+    init_api_error();
+    init_project_store_resolver();
+    ({
+      access: access3,
+      stat: stat6,
+      mkdir: mkdir12,
+      readdir: readdir8,
+      rm: rm2
+    } = fsPromises);
+    execFileAsync3 = promisify12(execFile5);
+  }
+});
+
+// ../dashboard/src/routes/register-node-routes.ts
+var init_register_node_routes = __esm({
+  "../dashboard/src/routes/register-node-routes.ts"() {
+    "use strict";
+    init_api_error();
   }
 });
 
@@ -74651,138 +76243,72 @@ var init_auth_paths = __esm({
   }
 });
 
-// ../dashboard/src/usage.ts
-var init_usage = __esm({
-  "../dashboard/src/usage.ts"() {
+// ../dashboard/src/routes/register-settings-sync-helpers.ts
+var init_register_settings_sync_helpers = __esm({
+  "../dashboard/src/routes/register-settings-sync-helpers.ts"() {
     "use strict";
+    init_api_error();
     init_auth_paths();
   }
 });
 
-// ../dashboard/src/github-webhooks.ts
-var init_github_webhooks = __esm({
-  "../dashboard/src/github-webhooks.ts"() {
+// ../dashboard/src/routes/register-settings-sync-routes.ts
+var init_register_settings_sync_routes = __esm({
+  "../dashboard/src/routes/register-settings-sync-routes.ts"() {
     "use strict";
+    init_api_error();
+    init_auth_paths();
+    init_register_settings_sync_helpers();
   }
 });
 
-// ../dashboard/src/project-store-resolver.ts
-var init_project_store_resolver = __esm({
-  "../dashboard/src/project-store-resolver.ts"() {
+// ../dashboard/src/routes/register-mesh-routes.ts
+var init_register_mesh_routes = __esm({
+  "../dashboard/src/routes/register-mesh-routes.ts"() {
     "use strict";
+    init_api_error();
   }
 });
 
-// ../dashboard/src/ai-session-store.ts
-var MAX_THINKING_BYTES, SESSION_CLEANUP_DEFAULT_MAX_AGE_MS, SESSION_CLEANUP_INTERVAL_MS, diagnostics2;
-var init_ai_session_store = __esm({
-  "../dashboard/src/ai-session-store.ts"() {
+// ../dashboard/src/routes/register-discovery-routes.ts
+var init_register_discovery_routes = __esm({
+  "../dashboard/src/routes/register-discovery-routes.ts"() {
     "use strict";
-    init_ai_session_diagnostics();
-    MAX_THINKING_BYTES = 50 * 1024;
-    SESSION_CLEANUP_DEFAULT_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
-    SESSION_CLEANUP_INTERVAL_MS = 6 * 60 * 60 * 1e3;
-    diagnostics2 = createSessionDiagnostics("ai-session-store");
+    init_api_error();
   }
 });
 
-// ../dashboard/src/subtask-breakdown.ts
-import { EventEmitter as EventEmitter21 } from "node:events";
-function cleanupInMemorySubtaskSession(sessionId) {
-  const session = sessions2.get(sessionId);
-  if (!session) {
-    return false;
+// ../dashboard/src/routes/register-settings-sync-inbound-routes.ts
+var init_register_settings_sync_inbound_routes = __esm({
+  "../dashboard/src/routes/register-settings-sync-inbound-routes.ts"() {
+    "use strict";
+    init_api_error();
+    init_auth_paths();
+    init_register_settings_sync_helpers();
   }
-  try {
-    session.agent?.session?.dispose?.();
-  } catch {
+});
+
+// ../dashboard/src/routes/register-agent-core-routes.ts
+var init_register_agent_core_routes = __esm({
+  "../dashboard/src/routes/register-agent-core-routes.ts"() {
+    "use strict";
+    init_api_error();
   }
-  subtaskStreamManager.cleanupSession(sessionId);
-  sessions2.delete(sessionId);
-  return true;
-}
-function cleanupExpiredSessions2() {
-  const now = Date.now();
-  for (const [id, session] of sessions2) {
-    if (now - session.updatedAt.getTime() > SESSION_TTL_MS2) {
-      cleanupInMemorySubtaskSession(id);
-    }
+});
+
+// ../dashboard/src/routes/register-agent-runtime-routes.ts
+var init_register_agent_runtime_routes = __esm({
+  "../dashboard/src/routes/register-agent-runtime-routes.ts"() {
+    "use strict";
+    init_api_error();
   }
-}
-var diagnostics3, SESSION_TTL_MS2, CLEANUP_INTERVAL_MS3, sessions2, cleanupInterval3, SubtaskStreamManager, subtaskStreamManager;
-var init_subtask_breakdown = __esm({
-  "../dashboard/src/subtask-breakdown.ts"() {
+});
+
+// ../dashboard/src/routes/register-agent-reflection-rating-routes.ts
+var init_register_agent_reflection_rating_routes = __esm({
+  "../dashboard/src/routes/register-agent-reflection-rating-routes.ts"() {
     "use strict";
-    init_src();
-    init_sse_buffer();
-    init_ai_session_diagnostics();
-    diagnostics3 = createSessionDiagnostics("subtask-breakdown");
-    SESSION_TTL_MS2 = 7 * 24 * 60 * 60 * 1e3;
-    CLEANUP_INTERVAL_MS3 = 5 * 60 * 1e3;
-    sessions2 = /* @__PURE__ */ new Map();
-    cleanupInterval3 = setInterval(cleanupExpiredSessions2, CLEANUP_INTERVAL_MS3);
-    cleanupInterval3.unref?.();
-    process.on("beforeExit", () => {
-      clearInterval(cleanupInterval3);
-    });
-    SubtaskStreamManager = class extends EventEmitter21 {
-      constructor(bufferSize = 100) {
-        super();
-        this.bufferSize = bufferSize;
-      }
-      sessions = /* @__PURE__ */ new Map();
-      buffers = /* @__PURE__ */ new Map();
-      subscribe(sessionId, callback) {
-        if (!this.sessions.has(sessionId)) {
-          this.sessions.set(sessionId, /* @__PURE__ */ new Set());
-        }
-        const callbacks = this.sessions.get(sessionId);
-        callbacks.add(callback);
-        return () => {
-          callbacks.delete(callback);
-          if (callbacks.size === 0) {
-            this.sessions.delete(sessionId);
-          }
-        };
-      }
-      getBuffer(sessionId) {
-        let buffer = this.buffers.get(sessionId);
-        if (!buffer) {
-          buffer = new SessionEventBuffer(this.bufferSize);
-          this.buffers.set(sessionId, buffer);
-        }
-        return buffer;
-      }
-      broadcast(sessionId, event) {
-        const serialized = JSON.stringify(event.data ?? {});
-        const eventData = typeof serialized === "string" ? serialized : "{}";
-        const eventId = this.getBuffer(sessionId).push(event.type, eventData);
-        const callbacks = this.sessions.get(sessionId);
-        if (!callbacks) return eventId;
-        for (const callback of callbacks) {
-          try {
-            callback(event, eventId);
-          } catch {
-          }
-        }
-        return eventId;
-      }
-      getBufferedEvents(sessionId, sinceId) {
-        const buffer = this.buffers.get(sessionId);
-        if (!buffer) return [];
-        return buffer.getEventsSince(sinceId);
-      }
-      cleanupSession(sessionId) {
-        this.sessions.delete(sessionId);
-        this.buffers.delete(sessionId);
-      }
-      reset() {
-        this.sessions.clear();
-        this.buffers.clear();
-        this.removeAllListeners();
-      }
-    };
-    subtaskStreamManager = new SubtaskStreamManager();
+    init_api_error();
   }
 });
 
@@ -74798,33 +76324,33 @@ async function initPromptCatalog() {
     promptCatalogReady = true;
   }
 }
-function cleanupExpiredSessions3() {
+function cleanupExpiredSessions5() {
   const now = Date.now();
   let cleanedSessions = 0;
   let cleanedRateLimits = 0;
-  for (const [id, session] of sessions3) {
-    if (now - session.updatedAt.getTime() > SESSION_TTL_MS3) {
-      sessions3.delete(id);
+  for (const [id, session] of sessions5) {
+    if (now - session.updatedAt.getTime() > SESSION_TTL_MS5) {
+      sessions5.delete(id);
       cleanedSessions++;
     }
   }
-  for (const [ip, entry] of rateLimits3) {
-    if (now - entry.firstRequestAt.getTime() > RATE_LIMIT_WINDOW_MS3) {
-      rateLimits3.delete(ip);
+  for (const [ip, entry] of rateLimits5) {
+    if (now - entry.firstRequestAt.getTime() > RATE_LIMIT_WINDOW_MS5) {
+      rateLimits5.delete(ip);
       cleanedRateLimits++;
     }
   }
   if (cleanedSessions > 0 || cleanedRateLimits > 0) {
-    diagnostics4.info("Cleanup completed", {
+    diagnostics6.info("Cleanup completed", {
       cleanedSessions,
       cleanedRateLimits,
-      ttlMs: SESSION_TTL_MS3,
-      rateLimitWindowMs: RATE_LIMIT_WINDOW_MS3,
+      ttlMs: SESSION_TTL_MS5,
+      rateLimitWindowMs: RATE_LIMIT_WINDOW_MS5,
       operation: "cleanup-expired"
     });
   }
 }
-var resolvePrompt2, promptCatalogReady, promptCatalogReadyPromise, SESSION_TTL_MS3, CLEANUP_INTERVAL_MS4, RATE_LIMIT_WINDOW_MS3, sessions3, rateLimits3, diagnostics4, cleanupInterval4;
+var resolvePrompt2, promptCatalogReady, promptCatalogReadyPromise, SESSION_TTL_MS5, CLEANUP_INTERVAL_MS6, RATE_LIMIT_WINDOW_MS5, sessions5, rateLimits5, diagnostics6, cleanupInterval6;
 var init_agent_generation = __esm({
   "../dashboard/src/agent-generation.ts"() {
     "use strict";
@@ -74832,357 +76358,97 @@ var init_agent_generation = __esm({
     resolvePrompt2 = () => "";
     promptCatalogReady = false;
     promptCatalogReadyPromise = initPromptCatalog();
-    SESSION_TTL_MS3 = 30 * 60 * 1e3;
-    CLEANUP_INTERVAL_MS4 = 5 * 60 * 1e3;
-    RATE_LIMIT_WINDOW_MS3 = 60 * 60 * 1e3;
-    sessions3 = /* @__PURE__ */ new Map();
-    rateLimits3 = /* @__PURE__ */ new Map();
-    diagnostics4 = createSessionDiagnostics("agent-generation");
-    cleanupInterval4 = setInterval(cleanupExpiredSessions3, CLEANUP_INTERVAL_MS4);
-    cleanupInterval4.unref?.();
-    process.on("beforeExit", () => {
-      clearInterval(cleanupInterval4);
-    });
-  }
-});
-
-// ../dashboard/src/mission-interview.ts
-import { EventEmitter as EventEmitter22 } from "node:events";
-function cleanupInMemoryMissionSession(sessionId) {
-  const session = sessions4.get(sessionId);
-  if (!session) {
-    return false;
-  }
-  if (session.agent) {
-    try {
-      session.agent.session.dispose?.();
-    } catch {
-    }
-    session.agent = void 0;
-  }
-  missionInterviewStreamManager.cleanupSession(sessionId);
-  sessions4.delete(sessionId);
-  return true;
-}
-function cleanupExpiredSessions4() {
-  const now = Date.now();
-  for (const [id, session] of sessions4) {
-    if (now - session.updatedAt.getTime() > SESSION_TTL_MS4) {
-      cleanupInMemoryMissionSession(id);
-    }
-  }
-  for (const [ip, entry] of rateLimits4) {
-    if (now - entry.firstRequestAt.getTime() > RATE_LIMIT_WINDOW_MS4) {
-      rateLimits4.delete(ip);
-    }
-  }
-}
-var diagnostics5, SESSION_TTL_MS4, CLEANUP_INTERVAL_MS5, RATE_LIMIT_WINDOW_MS4, sessions4, rateLimits4, cleanupInterval5, MissionInterviewStreamManager, missionInterviewStreamManager;
-var init_mission_interview = __esm({
-  "../dashboard/src/mission-interview.ts"() {
-    "use strict";
-    init_src();
-    init_sse_buffer();
-    init_ai_session_diagnostics();
-    diagnostics5 = createSessionDiagnostics("mission-interview");
-    SESSION_TTL_MS4 = 7 * 24 * 60 * 60 * 1e3;
-    CLEANUP_INTERVAL_MS5 = 5 * 60 * 1e3;
-    RATE_LIMIT_WINDOW_MS4 = 60 * 60 * 1e3;
-    sessions4 = /* @__PURE__ */ new Map();
-    rateLimits4 = /* @__PURE__ */ new Map();
-    cleanupInterval5 = setInterval(cleanupExpiredSessions4, CLEANUP_INTERVAL_MS5);
-    cleanupInterval5.unref?.();
-    process.on("beforeExit", () => clearInterval(cleanupInterval5));
-    MissionInterviewStreamManager = class extends EventEmitter22 {
-      constructor(bufferSize = 100) {
-        super();
-        this.bufferSize = bufferSize;
-      }
-      sessions = /* @__PURE__ */ new Map();
-      buffers = /* @__PURE__ */ new Map();
-      subscribe(sessionId, callback) {
-        if (!this.sessions.has(sessionId)) {
-          this.sessions.set(sessionId, /* @__PURE__ */ new Set());
-        }
-        const callbacks = this.sessions.get(sessionId);
-        callbacks.add(callback);
-        return () => {
-          callbacks.delete(callback);
-          if (callbacks.size === 0) {
-            this.sessions.delete(sessionId);
-          }
-        };
-      }
-      getBuffer(sessionId) {
-        let buffer = this.buffers.get(sessionId);
-        if (!buffer) {
-          buffer = new SessionEventBuffer(this.bufferSize);
-          this.buffers.set(sessionId, buffer);
-        }
-        return buffer;
-      }
-      broadcast(sessionId, event) {
-        const serialized = JSON.stringify(event.data ?? {});
-        const eventData = typeof serialized === "string" ? serialized : "{}";
-        const eventId = this.getBuffer(sessionId).push(event.type, eventData);
-        const callbacks = this.sessions.get(sessionId);
-        if (!callbacks) return eventId;
-        for (const callback of callbacks) {
-          nonfatal(
-            () => callback(event, eventId),
-            diagnostics5,
-            "Error broadcasting to client",
-            { sessionId, operation: "broadcast" }
-          );
-        }
-        return eventId;
-      }
-      getBufferedEvents(sessionId, sinceId) {
-        const buffer = this.buffers.get(sessionId);
-        if (!buffer) return [];
-        return buffer.getEventsSince(sinceId);
-      }
-      hasSubscribers(sessionId) {
-        const callbacks = this.sessions.get(sessionId);
-        return callbacks !== void 0 && callbacks.size > 0;
-      }
-      cleanupSession(sessionId) {
-        this.sessions.delete(sessionId);
-        this.buffers.delete(sessionId);
-      }
-      reset() {
-        this.sessions.clear();
-        this.buffers.clear();
-        this.removeAllListeners();
-      }
-    };
-    missionInterviewStreamManager = new MissionInterviewStreamManager();
-  }
-});
-
-// ../dashboard/src/milestone-slice-interview.ts
-import { EventEmitter as EventEmitter23 } from "node:events";
-function cleanupInMemorySession2(sessionId) {
-  const session = sessions5.get(sessionId);
-  if (!session) {
-    return false;
-  }
-  if (session.agent) {
-    try {
-      session.agent.session.dispose?.();
-    } catch {
-    }
-    session.agent = void 0;
-  }
-  milestoneSliceInterviewStreamManager.cleanupSession(sessionId);
-  sessions5.delete(sessionId);
-  return true;
-}
-function cleanupExpiredSessions5() {
-  const now = Date.now();
-  for (const [id, session] of sessions5) {
-    if (now - session.updatedAt.getTime() > SESSION_TTL_MS5) {
-      cleanupInMemorySession2(id);
-    }
-  }
-  for (const [ip, entry] of rateLimits5) {
-    if (now - entry.firstRequestAt.getTime() > RATE_LIMIT_WINDOW_MS5) {
-      rateLimits5.delete(ip);
-    }
-  }
-}
-var diagnostics6, SESSION_TTL_MS5, CLEANUP_INTERVAL_MS6, RATE_LIMIT_WINDOW_MS5, sessions5, rateLimits5, cleanupInterval6, MilestoneSliceInterviewStreamManager, milestoneSliceInterviewStreamManager;
-var init_milestone_slice_interview = __esm({
-  "../dashboard/src/milestone-slice-interview.ts"() {
-    "use strict";
-    init_sse_buffer();
-    init_mission_interview();
-    init_ai_session_diagnostics();
-    init_mission_interview();
-    diagnostics6 = createSessionDiagnostics("milestone-slice-interview");
-    SESSION_TTL_MS5 = 7 * 24 * 60 * 60 * 1e3;
+    SESSION_TTL_MS5 = 30 * 60 * 1e3;
     CLEANUP_INTERVAL_MS6 = 5 * 60 * 1e3;
     RATE_LIMIT_WINDOW_MS5 = 60 * 60 * 1e3;
     sessions5 = /* @__PURE__ */ new Map();
     rateLimits5 = /* @__PURE__ */ new Map();
+    diagnostics6 = createSessionDiagnostics("agent-generation");
     cleanupInterval6 = setInterval(cleanupExpiredSessions5, CLEANUP_INTERVAL_MS6);
     cleanupInterval6.unref?.();
-    process.on("beforeExit", () => clearInterval(cleanupInterval6));
-    MilestoneSliceInterviewStreamManager = class extends EventEmitter23 {
-      constructor(bufferSize = 100) {
-        super();
-        this.bufferSize = bufferSize;
-      }
-      sessions = /* @__PURE__ */ new Map();
-      buffers = /* @__PURE__ */ new Map();
-      subscribe(sessionId, callback) {
-        if (!this.sessions.has(sessionId)) {
-          this.sessions.set(sessionId, /* @__PURE__ */ new Set());
-        }
-        const callbacks = this.sessions.get(sessionId);
-        callbacks.add(callback);
-        return () => {
-          callbacks.delete(callback);
-          if (callbacks.size === 0) {
-            this.sessions.delete(sessionId);
-          }
-        };
-      }
-      getBuffer(sessionId) {
-        let buffer = this.buffers.get(sessionId);
-        if (!buffer) {
-          buffer = new SessionEventBuffer(this.bufferSize);
-          this.buffers.set(sessionId, buffer);
-        }
-        return buffer;
-      }
-      broadcast(sessionId, event) {
-        const serialized = JSON.stringify(event.data ?? {});
-        const eventData = typeof serialized === "string" ? serialized : "{}";
-        const eventId = this.getBuffer(sessionId).push(event.type, eventData);
-        const callbacks = this.sessions.get(sessionId);
-        if (!callbacks) return eventId;
-        for (const callback of callbacks) {
-          nonfatal(
-            () => callback(event, eventId),
-            diagnostics6,
-            "Error broadcasting to client",
-            { sessionId, operation: "broadcast" }
-          );
-        }
-        return eventId;
-      }
-      getBufferedEvents(sessionId, sinceId) {
-        const buffer = this.buffers.get(sessionId);
-        if (!buffer) return [];
-        return buffer.getEventsSince(sinceId);
-      }
-      hasSubscribers(sessionId) {
-        const callbacks = this.sessions.get(sessionId);
-        return callbacks !== void 0 && callbacks.size > 0;
-      }
-      cleanupSession(sessionId) {
-        this.sessions.delete(sessionId);
-        this.buffers.delete(sessionId);
-      }
-      reset() {
-        this.sessions.clear();
-        this.buffers.clear();
-        this.removeAllListeners();
-      }
-    };
-    milestoneSliceInterviewStreamManager = new MilestoneSliceInterviewStreamManager();
-  }
-});
-
-// ../dashboard/src/runtime-logger.ts
-var init_runtime_logger = __esm({
-  "../dashboard/src/runtime-logger.ts"() {
-    "use strict";
-  }
-});
-
-// ../dashboard/src/api-error.ts
-var init_api_error = __esm({
-  "../dashboard/src/api-error.ts"() {
-    "use strict";
-    init_runtime_logger();
-  }
-});
-
-// ../dashboard/src/rate-limit.ts
-var init_rate_limit = __esm({
-  "../dashboard/src/rate-limit.ts"() {
-    "use strict";
-    init_api_error();
+    process.on("beforeExit", () => {
+      clearInterval(cleanupInterval6);
+    });
   }
 });
 
-// ../dashboard/src/plugin-routes.ts
-import { Router } from "express";
-var init_plugin_routes = __esm({
-  "../dashboard/src/plugin-routes.ts"() {
+// ../dashboard/src/routes/register-agent-import-export-generation-routes.ts
+import * as fsPromises2 from "node:fs/promises";
+var mkdtemp, access4, stat7, mkdir13, rm3, fsWriteFile;
+var init_register_agent_import_export_generation_routes = __esm({
+  "../dashboard/src/routes/register-agent-import-export-generation-routes.ts"() {
     "use strict";
-    init_src();
     init_api_error();
+    init_ai_session_diagnostics();
+    init_agent_generation();
+    ({ mkdtemp, access: access4, stat: stat7, mkdir: mkdir13, rm: rm3, writeFile: fsWriteFile } = fsPromises2);
   }
 });
 
-// ../dashboard/src/routes/context.ts
-import { Router as Router2 } from "express";
-var init_context = __esm({
-  "../dashboard/src/routes/context.ts"() {
+// ../dashboard/src/routes/register-agent-skills-routes.ts
+var init_register_agent_skills_routes = __esm({
+  "../dashboard/src/routes/register-agent-skills-routes.ts"() {
     "use strict";
     init_api_error();
-    init_project_store_resolver();
-    init_runtime_logger();
   }
 });
 
-// ../dashboard/src/routes/register-tasks.ts
-var init_register_tasks = __esm({
-  "../dashboard/src/routes/register-tasks.ts"() {
-    "use strict";
-  }
-});
-
-// ../dashboard/src/routes/register-planning-chat.ts
-var init_register_planning_chat = __esm({
-  "../dashboard/src/routes/register-planning-chat.ts"() {
-    "use strict";
-  }
-});
-
-// ../dashboard/src/routes/register-settings-memory.ts
-var init_register_settings_memory = __esm({
-  "../dashboard/src/routes/register-settings-memory.ts"() {
+// ../dashboard/src/routes/register-plugins-automation.ts
+var init_register_plugins_automation = __esm({
+  "../dashboard/src/routes/register-plugins-automation.ts"() {
     "use strict";
   }
 });
 
-// ../dashboard/src/routes/register-messaging-scripts.ts
-var init_register_messaging_scripts = __esm({
-  "../dashboard/src/routes/register-messaging-scripts.ts"() {
+// ../dashboard/src/routes/register-proxy.ts
+var init_register_proxy = __esm({
+  "../dashboard/src/routes/register-proxy.ts"() {
     "use strict";
-    init_src();
     init_api_error();
-    init_terminal_service();
   }
 });
 
-// ../dashboard/src/routes/register-git-github.ts
-var init_register_git_github = __esm({
-  "../dashboard/src/routes/register-git-github.ts"() {
+// ../dashboard/src/routes/register-model-routes.ts
+var init_register_model_routes = __esm({
+  "../dashboard/src/routes/register-model-routes.ts"() {
     "use strict";
+    init_api_error();
   }
 });
 
-// ../dashboard/src/routes/register-files-terminal-workspaces.ts
-var init_register_files_terminal_workspaces = __esm({
-  "../dashboard/src/routes/register-files-terminal-workspaces.ts"() {
+// ../dashboard/src/usage.ts
+var init_usage = __esm({
+  "../dashboard/src/usage.ts"() {
     "use strict";
+    init_auth_paths();
   }
 });
 
-// ../dashboard/src/routes/register-agents-projects-nodes.ts
-var init_register_agents_projects_nodes = __esm({
-  "../dashboard/src/routes/register-agents-projects-nodes.ts"() {
+// ../dashboard/src/routes/register-usage-routes.ts
+var init_register_usage_routes = __esm({
+  "../dashboard/src/routes/register-usage-routes.ts"() {
     "use strict";
+    init_api_error();
+    init_usage();
   }
 });
 
-// ../dashboard/src/routes/register-plugins-automation.ts
-var init_register_plugins_automation = __esm({
-  "../dashboard/src/routes/register-plugins-automation.ts"() {
+// ../dashboard/src/claude-cli-probe.ts
+var init_claude_cli_probe = __esm({
+  "../dashboard/src/claude-cli-probe.ts"() {
     "use strict";
   }
 });
 
-// ../dashboard/src/routes/register-proxy.ts
-var init_register_proxy = __esm({
-  "../dashboard/src/routes/register-proxy.ts"() {
+// ../dashboard/src/routes/register-auth-routes.ts
+var init_register_auth_routes = __esm({
+  "../dashboard/src/routes/register-auth-routes.ts"() {
     "use strict";
+    init_src();
+    init_claude_cli_probe();
     init_api_error();
+    init_usage();
+    init_project_store_resolver();
   }
 });
 
@@ -75280,11 +76546,25 @@ var init_register_integrated_routers = __esm({
   }
 });
 
+// ../dashboard/src/routes/register-terminal-routes.ts
+var init_register_terminal_routes = __esm({
+  "../dashboard/src/routes/register-terminal-routes.ts"() {
+    "use strict";
+    init_api_error();
+  }
+});
+
+// ../dashboard/src/routes/register-session-diff-routes.ts
+var init_register_session_diff_routes = __esm({
+  "../dashboard/src/routes/register-session-diff-routes.ts"() {
+    "use strict";
+    init_api_error();
+    init_resolve_diff_base();
+  }
+});
+
 // ../dashboard/src/routes.ts
 import multer from "multer";
-import * as fsPromises from "node:fs/promises";
-import { execFile as execFile3 } from "node:child_process";
-import { promisify as promisify10 } from "node:util";
 async function initPromptOverrides() {
   if (promptOverridesReady) return;
   try {
@@ -75296,60 +76576,59 @@ async function initPromptOverrides() {
     promptOverridesReady = true;
   }
 }
-var mkdtemp, access3, stat6, mkdir12, readdir8, rm2, fsReadFile, fsWriteFile, upload, execFileAsync, resolveWorkflowStepRefinePrompt, promptOverridesReady, DEFAULT_WORKFLOW_STEP_REFINE_PROMPT;
+var upload, resolveWorkflowStepRefinePrompt, promptOverridesReady, DEFAULT_WORKFLOW_STEP_REFINE_PROMPT;
 var init_routes = __esm({
   "../dashboard/src/routes.ts"() {
     "use strict";
     init_src();
-    init_claude_cli_probe();
-    init_github();
-    init_github_poll();
     init_terminal();
     init_terminal_service();
-    init_file_service();
-    init_usage();
     init_github_webhooks();
-    init_project_store_resolver();
     init_ai_session_store();
     init_planning();
     init_subtask_breakdown();
-    init_agent_generation();
     init_mission_interview();
     init_milestone_slice_interview();
     init_sse_buffer();
     init_api_error();
-    init_rate_limit();
     init_plugin_routes();
-    init_auth_paths();
-    init_runtime_logger();
     init_ai_session_diagnostics();
     init_context();
-    init_register_tasks();
-    init_register_planning_chat();
-    init_register_settings_memory();
+    init_register_task_workflow_routes();
+    init_register_planning_subtask_routes();
+    init_register_chat_routes();
+    init_register_settings_memory_routes();
     init_register_messaging_scripts();
     init_register_git_github();
-    init_register_files_terminal_workspaces();
+    init_register_file_workspace_routes();
     init_register_agents_projects_nodes();
+    init_register_project_routes();
+    init_register_node_routes();
+    init_register_settings_sync_routes();
+    init_register_mesh_routes();
+    init_register_discovery_routes();
+    init_register_settings_sync_inbound_routes();
+    init_register_agent_core_routes();
+    init_register_agent_runtime_routes();
+    init_register_agent_reflection_rating_routes();
+    init_register_agent_import_export_generation_routes();
+    init_register_agent_skills_routes();
     init_register_plugins_automation();
     init_register_proxy();
+    init_register_model_routes();
+    init_register_usage_routes();
+    init_register_auth_routes();
     init_register_integrated_routers();
-    ({
-      mkdtemp,
-      access: access3,
-      stat: stat6,
-      mkdir: mkdir12,
-      readdir: readdir8,
-      rm: rm2,
-      readFile: fsReadFile,
-      writeFile: fsWriteFile
-    } = fsPromises);
+    init_register_terminal_routes();
+    init_register_session_diff_routes();
+    init_resolve_diff_base();
+    init_register_git_github();
+    init_resolve_diff_base();
     upload = multer({
       storage: multer.memoryStorage(),
       limits: { fileSize: 5 * 1024 * 1024 }
       // 5MB
     });
-    execFileAsync = promisify10(execFile3);
     resolveWorkflowStepRefinePrompt = () => DEFAULT_WORKFLOW_STEP_REFINE_PROMPT;
     promptOverridesReady = false;
     initPromptOverrides();
@@ -77577,7 +78856,7 @@ var require_extension = __commonJS({
 var require_websocket = __commonJS({
   "../../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket.js"(exports, module) {
     "use strict";
-    var EventEmitter25 = __require("events");
+    var EventEmitter26 = __require("events");
     var https = __require("https");
     var http = __require("http");
     var net = __require("net");
@@ -77609,7 +78888,7 @@ var require_websocket = __commonJS({
     var protocolVersions = [8, 13];
     var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
     var subprotocolRegex = /^[!#$%&'*+\-.0-9A-Z^_`|a-z~]+$/;
-    var WebSocket2 = class _WebSocket extends EventEmitter25 {
+    var WebSocket2 = class _WebSocket extends EventEmitter26 {
       /**
        * Create a new `WebSocket`.
        *
@@ -78606,7 +79885,7 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "../../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/websocket-server.js"(exports, module) {
     "use strict";
-    var EventEmitter25 = __require("events");
+    var EventEmitter26 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
     var { createHash: createHash5 } = __require("crypto");
@@ -78619,7 +79898,7 @@ var require_websocket_server = __commonJS({
     var RUNNING = 0;
     var CLOSING = 1;
     var CLOSED = 2;
-    var WebSocketServer2 = class extends EventEmitter25 {
+    var WebSocketServer2 = class extends EventEmitter26 {
       /**
        * Create a `WebSocketServer` instance.
        *
@@ -79035,7 +80314,7 @@ var init_terminal_websocket_diagnostics = __esm({
 });
 
 // ../dashboard/src/chat.ts
-import { EventEmitter as EventEmitter24 } from "node:events";
+import { EventEmitter as EventEmitter25 } from "node:events";
 var defaultDiagnostics, _diagnostics, diagnostics7, RATE_LIMIT_WINDOW_MS6, MAX_REFERENCED_FILE_SIZE, ChatStreamManager, chatStreamManager;
 var init_chat = __esm({
   "../dashboard/src/chat.ts"() {
@@ -79067,7 +80346,7 @@ var init_chat = __esm({
     };
     RATE_LIMIT_WINDOW_MS6 = 60 * 1e3;
     MAX_REFERENCED_FILE_SIZE = 50 * 1024;
-    ChatStreamManager = class extends EventEmitter24 {
+    ChatStreamManager = class extends EventEmitter25 {
       constructor(bufferSize = 100) {
         super();
         this.bufferSize = bufferSize;
@@ -79202,6 +80481,7 @@ var init_server = __esm({
     init_chat();
     init_dev_server_routes();
     init_auth_middleware();
+    init_remote_auth();
     __dirname = dirname8(fileURLToPath2(import.meta.url));
     MIN_AI_SESSION_TTL_MS = 10 * 60 * 1e3;
     MAX_AI_SESSION_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -80617,7 +81897,7 @@ __export(skills_exports, {
   runSkillsSearch: () => runSkillsSearch,
   searchSkills: () => searchSkills
 });
-import { spawn as spawn3 } from "node:child_process";
+import { spawn as spawn4 } from "node:child_process";
 async function searchSkills(query, limit = 10) {
   const url = `${SKILLS_API_BASE}/api/search?q=${encodeURIComponent(query)}&limit=${limit}`;
   try {
@@ -80695,7 +81975,7 @@ async function runSkillsInstall(args, options) {
     npxArgs.push("--skill", options.skill);
   }
   npxArgs.push("-y", "-a", "pi");
-  const child = spawn3("npx", npxArgs, {
+  const child = spawn4("npx", npxArgs, {
     cwd: process.cwd(),
     stdio: "inherit"
   });
@@ -80731,7 +82011,7 @@ import { StringEnum } from "@mariozechner/pi-ai";
 import { resolve as resolve15, basename as basename8, extname as extname2, join as join36 } from "node:path";
 import { readFile as readFile18 } from "node:fs/promises";
 import { existsSync as existsSync30 } from "node:fs";
-import { spawn as spawn4 } from "node:child_process";
+import { spawn as spawn5 } from "node:child_process";
 var MIME_TYPES2 = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
@@ -82132,7 +83412,7 @@ Status: ${updated.status}`
         npxArgs.push("--skill", params.skill);
       }
       npxArgs.push("-y", "-a", "pi");
-      const child = spawn4("npx", npxArgs, {
+      const child = spawn5("npx", npxArgs, {
         cwd: resolveProjectRoot(ctx.cwd),
         stdio: "pipe"
       });
@@ -82213,7 +83493,7 @@ Status: ${updated.status}`
         return;
       }
       const port = trimmed ? parseInt(trimmed, 10) || 4040 : 4040;
-      const child = spawn4("fn", ["dashboard", "--port", String(port)], {
+      const child = spawn5("fn", ["dashboard", "--port", String(port)], {
         cwd: resolveProjectRoot(ctx.cwd),
         stdio: ["ignore", "pipe", "pipe"],
         detached: false,