@sjawhar/pi-legion 10.11.1 → 10.13.0

package/dist/legion.js

@@ -14919,6 +14919,61 @@ var SLACK_CHANNEL_ID_PATTERN = /^[CG][A-Z0-9]+$/;
 function slackMentionTopic(channel) {
   return `notifications.slack.*.${channel}.mention`;
 }
+// ../contracts/src/tool-schema.ts
+function overCapMessage(length, max) {
+  return `is ${length - max} characters over the ${max}-character limit (${length}/${max})`;
+}
+function zodSchemaApi(zod) {
+  const api2 = zod;
+  return {
+    string: (opts = {}) => {
+      let schema = api2.string();
+      if (opts.min !== undefined)
+        schema = schema.min(opts.min);
+      if (opts.max !== undefined) {
+        const max = opts.max;
+        const hint = opts.maxHint === undefined ? "" : `; ${opts.maxHint}`;
+        schema = schema.max(max, {
+          error: (issue2) => overCapMessage(typeof issue2.input === "string" ? issue2.input.length : max + 1, max) + hint
+        });
+      }
+      return schema;
+    },
+    number: (opts = {}) => {
+      let schema = api2.number();
+      if (opts.int)
+        schema = schema.int();
+      if (opts.min !== undefined)
+        schema = schema.min(opts.min);
+      if (opts.max !== undefined)
+        schema = schema.max(opts.max);
+      return schema;
+    },
+    boolean: () => api2.boolean(),
+    enum: (values) => api2.enum(values),
+    unknown: () => api2.unknown(),
+    array: (item, opts = {}) => {
+      let schema = api2.array(item);
+      if (opts.min !== undefined)
+        schema = schema.min(opts.min);
+      if (opts.max !== undefined)
+        schema = schema.max(opts.max);
+      return schema;
+    },
+    object: (shape, opts = {}) => {
+      let schema = api2.object(shape);
+      if (opts.strict)
+        schema = schema.strict();
+      return schema;
+    },
+    refineObject: (shape, check2, message, opts = {}) => {
+      let schema = api2.object(shape);
+      if (opts.strict)
+        schema = schema.strict();
+      return schema.refine(check2, message);
+    }
+  };
+}
 // ../envoy-client/src/ask-answer.ts
 var HEAD_LENGTH = 120;
 function textHead(text) {
@@ -15513,9 +15568,10 @@ var PRIVATE_DIR = 448;
 var PRIVATE_FILE = 384;
 var IDLE_SESSION_MS = 14 * 86400000;
 function sessionStateRoot(env) {
-  if (env.DISPATCH_STATE_DIR)
-    return env.DISPATCH_STATE_DIR;
-  return join2(env.XDG_STATE_HOME || join2(homedir2(), ".local", "state"), "dispatch");
+  const stateDir = env["DISPATCH_STATE_DIR"];
+  if (stateDir)
+    return stateDir;
+  return join2(env["XDG_STATE_HOME"] || join2(homedir2(), ".local", "state"), "dispatch");
 }
 function sessionDirectory(env, sessionId) {
   if (!SESSION_ID.test(sessionId) || sessionId === "." || sessionId === "..") {
@@ -15555,751 +15611,50 @@ function sessionDispatchSettings(file2, env, options) {
   };
 }
 
-// ../pi-shared/src/interface.ts
-import { logger } from "@oh-my-pi/pi-utils";
-var ENVOY_PLUGIN_INTERFACE_VERSION = 3;
-var ENVOY_PLUGIN_INTERFACE_KEY = Symbol.for("legion.pi-shared.envoy-plugin-interface");
-var LEGION_PLUGIN_LOADED_KEY = Symbol.for("legion.pi-legion.loaded");
-var LEGACY_LEGION_LOADED_KEY = Symbol.for("legion.pi-envoy.legion-loaded");
-var LOCAL_ENVOY_NOTICE = { localNotice: true };
-var store = globalThis;
-function envoyPluginInterface() {
-  const existing = store[ENVOY_PLUGIN_INTERFACE_KEY];
-  if (existing !== undefined)
-    return existing;
-  const created = {
-    version: ENVOY_PLUGIN_INTERFACE_VERSION,
-    publishers: [],
-    roleClaim: {
-      instances: [],
-      managedSessions: new Set,
-      regained: undefined,
-      slackRoleOwned: false
-    },
-    injectedUserTurns: new Map,
-    bootstrappedSession: { file: undefined }
-  };
-  store[ENVOY_PLUGIN_INTERFACE_KEY] = created;
-  return created;
-}
-function readEnvoyPluginInterface() {
-  const iface = store[ENVOY_PLUGIN_INTERFACE_KEY];
-  const from = iface?.publishers[0];
-  if (iface === undefined || from === undefined)
-    return { kind: "absent" };
-  if (iface.version !== ENVOY_PLUGIN_INTERFACE_VERSION) {
-    return {
-      kind: "mismatch",
-      found: iface.version,
-      expected: ENVOY_PLUGIN_INTERFACE_VERSION,
-      from
-    };
-  }
-  return { kind: "present", iface };
-}
-
-// ../pi-shared/src/injected-user-turns.ts
-function userMessageText(content) {
-  if (typeof content === "string")
-    return content;
-  if (!Array.isArray(content))
-    return "";
-  const pieces = [];
-  for (const part of content) {
-    if (typeof part !== "object" || part === null)
-      continue;
-    if ("type" in part && part.type === "text" && "text" in part && typeof part.text === "string") {
-      pieces.push(part.text);
-    }
-  }
-  return pieces.join(`
-`);
-}
-function matchInjectedUserTurn(sessionID, message) {
-  if (typeof message !== "object" || message === null)
-    return;
-  if (!("role" in message) || message.role !== "user" && message.role !== "custom") {
-    return;
-  }
-  if (!("timestamp" in message) || typeof message.timestamp !== "number")
-    return;
-  const session = envoyPluginInterface().injectedUserTurns.get(sessionID);
-  if (session === undefined)
-    return;
-  const tag = messageTag(message);
-  const memo = tag === undefined ? `${message.timestamp}` : `${message.timestamp}:${tag}`;
-  const known = session.found.get(memo);
-  if (known !== undefined)
-    return known;
-  let index = tag === undefined ? -1 : session.sent.findIndex((sent2) => sent2.messageId === tag);
-  if (index === -1 && message.role === "user") {
-    const text = userMessageText("content" in message ? message.content : undefined);
-    index = session.sent.findIndex((sent2) => sent2.via === "text" && sent2.body === text);
-  }
-  const sent = session.sent[index];
-  if (sent === undefined)
-    return;
-  session.sent.splice(index, 1);
-  session.found.set(memo, sent.messageId);
-  return sent.messageId;
-}
-function messageTag(message) {
-  if (typeof message !== "object" || message === null || !("tag" in message))
-    return;
-  return typeof message.tag === "string" ? message.tag : undefined;
-}
-
-// ../pi-shared/src/role-claim-bridge.ts
-function legionRoleClaimBridge() {
-  return envoyPluginInterface().roleClaim;
-}
-async function claimEnvoyRole(sessionID, role, context) {
-  const bridge = legionRoleClaimBridge();
-  bridge.managedSessions.add(sessionID);
-  const instance = bridge.instances.findLast((candidate) => candidate.sessionID() === sessionID) ?? bridge.instances.at(-1);
-  if (instance === undefined)
-    throw new Error("Envoy has no bound instance for a role claim");
-  await instance.claim(sessionID, role, context);
-}
-async function subscribeLegionNotice(sessionID, topic, context, whileHolding) {
-  const bridge = legionRoleClaimBridge();
-  const instance = bridge.instances.findLast((candidate) => candidate.sessionID() === sessionID) ?? bridge.instances.at(-1);
-  if (instance === undefined)
-    throw new Error("Envoy has no bound instance for a notice subscription");
-  await instance.subscribe(sessionID, topic, context, whileHolding);
-}
-function onEnvoyRoleRegained(listener) {
-  legionRoleClaimBridge().regained = listener;
-}
-
-// ../pi-shared/src/subagent-session.ts
-import fs from "fs";
-import path2 from "path";
-import * as host from "@oh-my-pi/pi-coding-agent";
-import { logger as logger2 } from "@oh-my-pi/pi-utils";
-function recordBootstrappedSession(sessionFile) {
-  envoyPluginInterface().bootstrappedSession.file = sessionFile;
-}
-async function isSubagentSession(context) {
-  const registered = registeredSubagent(context);
-  if (registered !== undefined)
-    return { subagent: registered, settled: true };
-  try {
-    await context.sessionManager.ensureOnDisk();
-  } catch (error48) {
-    const subagent = transcriptSaysSubagent(context);
-    logger2.warn("subagent check: publishing the transcript failed; answered from the transcript on disk, and the next call asks again", { sessionFile: context.sessionManager.getSessionFile(), subagent, error: messageFor(error48) });
-    return { subagent, settled: false };
-  }
-  return { subagent: transcriptSaysSubagent(context), settled: true };
-}
-function transcriptSaysSubagent(context) {
-  const sessionFile = context.sessionManager.getSessionFile();
-  if (sessionFile !== undefined) {
-    if (fs.existsSync(`${path2.dirname(sessionFile)}.jsonl`))
-      return true;
-    if (fs.existsSync(sessionFile))
-      return false;
-  }
-  const bootstrapped = envoyPluginInterface().bootstrappedSession.file;
-  return bootstrapped !== undefined && bootstrapped !== sessionFile;
-}
-function registeredSubagent(context) {
-  const registry2 = host.AgentRegistry?.global();
-  if (registry2 === undefined)
-    return;
-  const sessionID = context.sessionManager.getSessionId();
-  const sessionFile = context.sessionManager.getSessionFile();
-  const own = registry2.list().filter((ref) => ref.session === null ? sessionFile !== undefined && ref.sessionFile === sessionFile : ref.session.sessionManager.getSessionId() === sessionID);
-  if (own.length === 0)
-    return;
-  return own.some((ref) => ref.kind !== "main");
-}
-function subagentSessionCheck() {
-  let settled;
-  return async (context) => {
-    if (settled !== undefined)
-      return settled;
-    const answer = await isSubagentSession(context);
-    if (answer.settled)
-      settled = answer.subagent;
-    return answer.subagent;
-  };
-}
-
-// extensions/legion.ts
-import { logger as logger3 } from "@oh-my-pi/pi-utils";
-
-// src/capability-report.ts
-import { readdir, stat } from "fs/promises";
-import path3 from "path";
-var CAPABILITY_CHECK_TIMEOUT_MS = 8000;
-var CAPABILITY_REPORT_TIMEOUT_MS = 1e4;
-var WEB_SEARCH_PROBE_QUERY = "jujutsu version control";
-var ENVOY_TOOL_NAMES = [
-  "envoy_subscribe",
-  "envoy_unsubscribe",
-  "envoy_list",
-  "envoy_inbox",
-  "envoy_send",
-  "envoy_publish",
-  "envoy_role_set",
-  "envoy_role_get",
-  "envoy_whoami",
-  "envoy_sessions",
-  "slack_post"
+// ../contracts/src/legion-api.ts
+var nonEmptyString = exports_external.string().min(1);
+var issueKey = exports_external.string().regex(DISPATCH_KEY_PATTERN);
+var timestamp = exports_external.iso.datetime({ offset: true });
+var LEGION_WORKFLOW_PHASES = [
+  "admitted",
+  "planning",
+  "implementing",
+  "testing",
+  "reviewing",
+  "retro",
+  "merging",
+  "awaiting_merge",
+  "integrating",
+  "production_check",
+  "done",
+  "held"
 ];
-var LIVE_CAPABILITIES = [
-  "subagents",
-  "web-search",
-  "mcp",
-  "repository-extensions",
-  "dispatch-envoy-tools",
-  "github"
+var LEGION_PHASE_BACKWARD_TARGETS = [
+  "admitted",
+  "planning",
+  "implementing",
+  "testing",
+  "reviewing",
+  "retro",
+  "merging",
+  "awaiting_merge",
+  "production_check",
+  "done",
+  "held"
 ];
-var DEFAULT_BUDGETS = {
-  checkMs: CAPABILITY_CHECK_TIMEOUT_MS,
-  reportMs: CAPABILITY_REPORT_TIMEOUT_MS
-};
-var ok = (detail) => ({ ok: true, detail });
-var failed = (detail) => ({ ok: false, detail });
-function firstLine(text) {
-  return text.trim().split(`
-`, 1)[0] ?? "";
-}
-function commandFailure(result) {
-  return firstLine(result.stderr) || `exit code ${result.code ?? "none"}`;
-}
-function whichOnPath(name) {
-  return Bun.which(name, { PATH: process.env.PATH ?? "" }) ?? name;
-}
-var checkSubagents = async (host2, input) => {
-  if (!input.agentsExposed)
-    return failed("pi.agents is not exposed");
-  if (!input.activeTools.includes("task"))
-    return failed("task is not a registered tool");
-  const [discovered, disabled] = await Promise.all([
-    host2.discoverAgents(input.cwd),
-    host2.disabledAgents()
-  ]);
-  const names = new Set(discovered.agents.map((agent) => agent.name));
-  const missing = input.promptAgents.filter((agent) => !names.has(agent));
-  const off = input.promptAgents.filter((agent) => disabled.includes(agent));
-  const problems = [];
-  if (missing.length > 0) {
-    problems.push(`agents the prompts dispatch that the task tool does not resolve: ${missing.join(", ")}`);
-  }
-  if (off.length > 0)
-    problems.push(`disabled by task.disabledAgents: ${off.join(", ")}`);
-  if (problems.length > 0)
-    return failed(problems.join("; "));
-  return ok(`task resolves ${names.size} agents, every one the prompts dispatch`);
-};
-var checkWebSearch = async (host2, input, signal) => {
-  if (!input.activeTools.includes("web_search")) {
-    return failed("web_search is not a registered tool");
-  }
-  const started = Date.now();
-  const result = await host2.runSearchQuery({ query: WEB_SEARCH_PROBE_QUERY, limit: 1 }, { sessionId: input.sessionId, signal });
-  const elapsed = Date.now() - started;
-  const details = result.details ?? {};
-  if (details.error !== undefined && details.error !== null) {
-    return failed(`web_search failed: ${String(details.error)}`);
-  }
-  const provider = details.response?.provider ?? details.provider;
-  if (provider === undefined || provider === null || provider === "none") {
-    return failed("web_search failed: no provider answered");
-  }
-  const text = result.content?.[0]?.text ?? "";
-  if (text.startsWith("Error"))
-    return failed(`web_search failed: ${firstLine(text)}`);
-  return ok(`web_search registered; provider ${String(provider)} answered in ${elapsed} ms`);
-};
-function mcpErrorFor(errors3, name) {
-  for (const entry of errors3) {
-    if (typeof entry !== "object" || entry === null) {
-      if (!String(entry).includes(name))
-        continue;
-      return String(entry);
-    }
-    const record2 = entry;
-    const names = [record2.server, record2.name, record2.path];
-    if (!names.some((value) => value === name || value === `mcp:${name}`))
-      continue;
-    const message = record2.error ?? record2.message;
-    return message === undefined ? String(entry) : String(message);
-  }
-  return;
-}
-var checkMCP = async (host2, input, signal) => {
-  const { configs, sources } = await host2.loadMCPConfigs(input.cwd);
-  const configured = Object.keys(configs);
-  if (configured.length === 0)
-    return ok("no MCP server configured");
-  const { manager, errors: errors3 } = await host2.discoverMCPServers(input.cwd);
-  let torn;
-  const tearDown = () => {
-    torn ??= manager.disconnectAll().catch(() => {
-      return;
-    });
-    return torn;
-  };
-  signal.addEventListener("abort", tearDown, { once: true });
-  if (signal.aborted)
-    tearDown();
-  try {
-    await manager.waitForPendingConnections();
-    const connected = [];
-    const unconnected = [];
-    for (const name of configured) {
-      const status = manager.getConnectionStatus(name);
-      if (status === "connected") {
-        const source = sources[name]?.path;
-        connected.push(source === undefined ? name : `${name} (${path3.relative(input.cwd, source)})`);
-      } else {
-        unconnected.push(`${name} (${mcpErrorFor(errors3, name) ?? `status ${status}`})`);
-      }
-    }
-    if (unconnected.length === 0)
-      return ok(`connected: ${connected.join(", ")}`);
-    const suffix = connected.length === 0 ? "" : `; connected: ${connected.join(", ")}`;
-    return failed(`not connected: ${unconnected.join(", ")}${suffix}`);
-  } finally {
-    signal.removeEventListener("abort", tearDown);
-    await tearDown();
-  }
-};
-var EXTENSION_MODULE = /\.(?:ts|js|mjs|cjs)$/;
-var EXTENSION_INDEXES = ["index.ts", "index.js", "index.mjs", "index.cjs"];
-var SKILL_DIRECTORIES = [path3.join(".omp", "skills"), path3.join(".claude", "skills")];
-async function namesIn(directory) {
-  try {
-    return await readdir(directory);
-  } catch (error48) {
-    if (hasErrnoCode(error48, "ENOENT") || hasErrnoCode(error48, "ENOTDIR"))
-      return [];
-    throw error48;
-  }
-}
-async function kindOf(file2) {
-  try {
-    const stats = await stat(file2);
-    return stats.isFile() ? "file" : stats.isDirectory() ? "directory" : undefined;
-  } catch (error48) {
-    if (hasErrnoCode(error48, "ENOENT") || hasErrnoCode(error48, "ENOTDIR"))
-      return;
-    throw error48;
-  }
-}
-async function repositoryEntries(cwd) {
-  const entries = [];
-  const extensions = path3.join(cwd, ".omp", "extensions");
-  for (const name of await namesIn(extensions)) {
-    const candidate = path3.join(extensions, name);
-    const kind = await kindOf(candidate);
-    if (kind === "file" && EXTENSION_MODULE.test(name)) {
-      entries.push({ path: candidate, directory: false });
-    } else if (kind === "directory") {
-      const indexes = await Promise.all(EXTENSION_INDEXES.map((index) => kindOf(path3.join(candidate, index))));
-      if (indexes.includes("file"))
-        entries.push({ path: candidate, directory: true });
-    }
-  }
-  for (const skills of SKILL_DIRECTORIES) {
-    for (const name of await namesIn(path3.join(cwd, skills))) {
-      const skill = path3.join(cwd, skills, name, "SKILL.md");
-      if (await kindOf(skill) === "file")
-        entries.push({ path: skill, directory: false });
-    }
-  }
-  return entries;
-}
-var checkRepositoryExtensions = async (host2, input) => {
-  const entries = await repositoryEntries(input.cwd);
-  if (entries.length === 0) {
-    return ok("the repository carries no .omp/extensions, .omp/skills or .claude/skills");
-  }
-  const [extensionPaths, loaded] = await Promise.all([
-    host2.discoverExtensionPaths(input.cwd),
-    host2.loadSkills(input.cwd)
-  ]);
-  const discovered = new Set([...extensionPaths, ...loaded.skills.map((skill) => skill.filePath)].map((file2) => path3.resolve(file2)));
-  const isDiscovered = (entry) => {
-    const resolved = path3.resolve(entry.path);
-    if (discovered.has(resolved))
-      return true;
-    if (!entry.directory)
-      return false;
-    const prefix = resolved + path3.sep;
-    return [...discovered].some((file2) => file2.startsWith(prefix));
-  };
-  const relative = (selected) => selected.map((entry) => path3.relative(input.cwd, entry.path)).sort().join(", ");
-  const found = [];
-  const lost = [];
-  for (const entry of entries)
-    (isDiscovered(entry) ? found : lost).push(entry);
-  if (lost.length === 0)
-    return ok(`discovered: ${relative(found)}`);
-  const suffix = found.length === 0 ? "" : `; discovered: ${relative(found)}`;
-  return failed(`not discovered: ${relative(lost)}${suffix}`);
-};
-var checkDispatchEnvoyTools = async (host2, input, signal) => {
-  const missing = ENVOY_TOOL_NAMES.filter((tool) => !input.activeTools.includes(tool));
-  if (missing.length > 0)
-    return failed(`Envoy tools missing: ${missing.join(", ")}`);
-  const result = await host2.run("dispatch", ["read", "--issue", input.issue], {
-    cwd: input.cwd,
-    signal
-  });
-  if (result.code !== 0)
-    return failed(`dispatch read failed: ${commandFailure(result)}`);
-  return ok(`${ENVOY_TOOL_NAMES.length} Envoy tools registered; dispatch read ${input.issue} answered from ${whichOnPath("dispatch")}`);
-};
-var checkGitHub = async (host2, input, signal) => {
-  const result = await host2.run("gh", ["api", "graphql", "-f", "query={viewer{login}}", "--jq", ".data.viewer.login"], { cwd: input.cwd, signal });
-  if (result.code !== 0)
-    return failed(`gh viewer login failed: ${commandFailure(result)}`);
-  return ok(`gh viewer login: ${result.stdout.trim()}`);
-};
-var CHECKS = {
-  subagents: checkSubagents,
-  "web-search": checkWebSearch,
-  mcp: checkMCP,
-  "repository-extensions": checkRepositoryExtensions,
-  "dispatch-envoy-tools": checkDispatchEnvoyTools,
-  github: checkGitHub
-};
-var MAX_DETAIL_BYTES = 1024;
-var HELD = "\uFFFF";
-var C1_INTRODUCER = "\uFFFE";
-var OPENER = "\uFDD0";
-var HELD_READINGS = [
-  [/(?:\uffff\[|\ufffe)[0-?]*[!-)+,/-]*/g, OPENER],
-  [/\ufdd0[@-~]?/g, HELD],
-  [/\uffff/g, " "]
-];
-var HELD_SEQUENCE = String.raw`\ufffe|\ufdd0|\uffff(?:\[[0-?]*[@-~])?`;
-var JWT_FIRST_HELD_SEQUENCE = String.raw`\ufffe|\uffff(?:\[[0-?]*[@-~])?`;
-function isSpace(code) {
-  return code >= 9 && code <= 13 || code === 32 || code === 133 || code === 160 || code === 5760 || code >= 8192 && code <= 8202 || code === 8232 || code === 8233 || code === 8239 || code === 8287 || code === 12288;
-}
-function truncateUtf8(text, max) {
-  let bytes = 0;
-  let end = 0;
-  for (const char of text) {
-    const code = char.codePointAt(0) ?? 0;
-    bytes += code < 128 ? 1 : code < 2048 ? 2 : code < 65536 ? 3 : 4;
-    if (bytes > max)
-      break;
-    end += char.length;
-  }
-  return text.slice(0, end);
-}
-var CREDENTIAL_RULES = [
-  [/(?<![a-z0-9+.-])([0-9+.-]*[a-z][a-z0-9+.-]*:\/\/)[^ /?#]+@/gi, "$1***@"],
-  [
-    /([?&](?:token|key|secret|password|access_token|accesstoken|refresh_token|id_token|auth_token|private_token|api_key|apikey|client_secret|sig|signature|x-amz-security-token|x-amz-signature|x-goog-signature)=)[^ &#"'<>]+/gi,
-    "$1***"
-  ],
-  [
-    /\b(password[ \ufffe\uffff]*=[ \ufffe\uffff]*)(?:(')(?:[^'\\]|\\.)*('?)|[^ &#"'<>]+)/gi,
-    "$1$2***$3"
-  ],
-  [
-    /(authorization\\?["']?[ \ufffe\uffff]*[:=][ \ufffe\uffff]*)(?:(\\["'](?:(?:bearer|basic|token|digest)[ \ufffe\uffff]+)?)[^"'\\]+|(["'](?:(?:bearer|basic|token|digest)[ \ufffe\uffff]+)?)(?:[^"'\\]|\\.)+|(\[?(?:(?:bearer|basic|token|digest)[ \ufffe\uffff]+)?)[^)\]}>]+)/gi,
-    "$1$2$3$4***"
-  ],
-  [
-    new RegExp(String.raw`((?:api-key|application-key|ocp-apim-subscription-key|x-subscription-token)\\?["']?[ \ufffe\uffff]*[:=][ \ufffe\uffff]*\\?["']?)(?:[A-Za-z0-9._~+/=*-]|${HELD_SEQUENCE})+`, "gi"),
-    "$1***"
-  ],
-  [
-    /(\\?["'](?:api_key|access_token)\\?["'][ \ufffe\uffff]*:[ \ufffe\uffff]*\\?["'])[^"'\\]+/gi,
-    "$1***"
-  ],
-  [
-    new RegExp(String.raw`\b(bearer[ \ufffe\uffff]+)(?:[A-Za-z0-9._~+/=*-]|${HELD_SEQUENCE})+`, "gi"),
-    "$1***"
-  ],
-  [
-    new RegExp(String.raw`\b(gh[pousr]_|github_pat_)(?:[A-Za-z0-9._-]|${HELD_SEQUENCE}){20,}`, "g"),
-    "$1***"
-  ],
-  [
-    new RegExp(String.raw`(?:(?=eyJ)(?<!\uffff\[[0-?]*(?:[@-~]?|\\u[0-9A-Fa-f]{4}))(?:(?<![A-Za-z0-9_\ufffe\uffff-])|(?<=%[0-9A-Fa-f]{2}|\\u[0-9A-Fa-f]{4}))eyJ(?:[A-Za-z0-9_-]|${JWT_FIRST_HELD_SEQUENCE}){8,}|(?<=\uffff)eyJ(?:[A-Za-z0-9_-]|\ufffe){8,}|(?=eyJ)(?<=\uffff\[[0-?]*(?:[@-~]|\\u[0-9A-Fa-f]{4})?)eyJ[A-Za-z0-9_-]*\ufffe(?:[A-Za-z0-9_-]|\ufffe)*)\.(?:[A-Za-z0-9_-]|${HELD_SEQUENCE}){8,}\.(?:[A-Za-z0-9_-]|${HELD_SEQUENCE})*`, "g"),
-    "***"
-  ],
-  [
-    new RegExp(String.raw`\b(sk-|dsp_|ddsat_|ddpat_|ddapp_|ya29\.|xox[a-z]-|glpat-|npm_)(?:[A-Za-z0-9_-]|${HELD_SEQUENCE}){20,}`, "g"),
-    "$1***"
-  ],
-  [new RegExp(String.raw`\b(AIza)(?:[A-Za-z0-9_-]|${HELD_SEQUENCE}){35,}`, "g"), "$1***"],
-  [new RegExp(String.raw`\b(AKIA|ASIA)(?:(?:${HELD_SEQUENCE})*[A-Z0-9]){16}\b`, "g"), "$1***"]
-];
-var MAX_REDACTION_PASSES = 8;
-function redactCredentials(text) {
-  let line = text;
-  for (let pass = 0;pass < MAX_REDACTION_PASSES; pass++) {
-    const next = CREDENTIAL_RULES.reduce((redacted, [pattern, replacement]) => redacted.replace(pattern, replacement), line);
-    if (next === line)
-      break;
-    line = next;
-  }
-  return line;
-}
-function withoutLastCodePoint(text) {
-  const last = text.charCodeAt(text.length - 1);
-  return text.slice(0, last >= 56320 && last <= 57343 && text.length > 1 ? -2 : -1);
-}
-function cleanDetail(text) {
-  let marked = "";
-  for (const char of text) {
-    const code = char.codePointAt(0) ?? 0;
-    const control = code < 32 || code >= 127 && code < 160 || code === 65534 || code === 64976 || code === 65533;
-    marked += isSpace(code) ? " " : code === 155 ? C1_INTRODUCER : control ? HELD : char;
-  }
-  let redacted = redactCredentials(marked);
-  if (marked.includes(HELD) || marked.includes(C1_INTRODUCER)) {
-    for (const [pattern, replacement] of HELD_READINGS) {
-      const read = redacted.replace(pattern, replacement);
-      if (read !== redacted)
-        redacted = redactCredentials(read);
-    }
-  }
-  const line = redacted.split(" ").filter((field) => field !== "").join(" ");
-  let cut = truncateUtf8(line, MAX_DETAIL_BYTES).replace(/ +$/, "");
-  if (cut.length < line.length) {
-    while (redactCredentials(cut) !== cut) {
-      const space = cut.lastIndexOf(" ");
-      cut = space > 0 ? cut.slice(0, space) : withoutLastCodePoint(cut);
-    }
-  }
-  return cut;
-}
-function budgetLabel(ms) {
-  return ms % 1000 === 0 ? `${ms / 1000} s` : `${ms} ms`;
-}
-async function withinBudget(work, ms, onDeadline) {
-  const deadline = Promise.withResolvers();
-  const timer = setTimeout(() => deadline.resolve(onDeadline()), ms);
-  try {
-    return await Promise.race([work, deadline.promise]);
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function measureCapabilities(host2, input, budgets = DEFAULT_BUDGETS) {
-  const started = Date.now();
-  const measuredAt = new Date(started).toISOString();
-  const outcomes = new Map;
-  const controllers = [];
-  const checks3 = LIVE_CAPABILITIES.map(async (name) => {
-    const controller = new AbortController;
-    controllers.push(controller);
-    const outcome = await withinBudget(CHECKS[name](host2, input, controller.signal).catch((error48) => failed(firstLine(messageFor(error48)))), budgets.checkMs, () => {
-      controller.abort();
-      return failed(`did not finish within ${budgetLabel(budgets.checkMs)}`);
-    });
-    outcomes.set(name, outcome);
-  });
-  await withinBudget(Promise.all(checks3).then(() => {
-    return;
-  }), budgets.reportMs, () => {
-    return;
-  });
-  for (const controller of controllers)
-    controller.abort();
-  const rows = LIVE_CAPABILITIES.map((name) => {
-    const { ok: ok2, detail } = outcomes.get(name) ?? failed(`did not finish within ${budgetLabel(budgets.reportMs)}`);
-    return { name, ok: ok2, detail: cleanDetail(detail) };
-  });
-  return { measuredAt, elapsedMs: Date.now() - started, rows };
-}
-async function runCommand2(command, args, options) {
-  const child = Bun.spawn([command, ...args], {
-    cwd: options.cwd,
-    env: process.env,
-    stdin: "ignore",
-    stdout: "pipe",
-    stderr: "pipe",
-    signal: options.signal
-  });
-  const [stdout, stderr] = await Promise.all([
-    new Response(child.stdout).text(),
-    new Response(child.stderr).text(),
-    child.exited
-  ]);
-  return { code: child.exitCode, stdout, stderr };
-}
-function ompCapabilityHost() {
-  const hostSettings = async () => (await import("@oh-my-pi/pi-coding-agent/config/settings")).settings;
-  return {
-    discoverAgents: async (cwd) => (await import("@oh-my-pi/pi-coding-agent")).discoverAgents(cwd),
-    disabledAgents: async () => {
-      const [{ cfgTaskDisabledAgents }, settings] = await Promise.all([
-        import("@oh-my-pi/pi-coding-agent/task/settings"),
-        hostSettings()
-      ]);
-      return cfgTaskDisabledAgents.get(settings);
-    },
-    runSearchQuery: async (args, options) => (await import("@oh-my-pi/pi-coding-agent")).runSearchQuery(args, options),
-    loadMCPConfigs: async (cwd) => (await import("@oh-my-pi/pi-coding-agent/mcp/config")).loadAllMCPConfigs(cwd),
-    discoverMCPServers: async (cwd) => (await import("@oh-my-pi/pi-coding-agent")).discoverMCPServers(cwd),
-    discoverExtensionPaths: async (cwd) => {
-      const [{ discoverExtensionPaths }, { cfgDisabledExtensions }, settings] = await Promise.all([
-        import("@oh-my-pi/pi-coding-agent/extensibility/extensions/loader"),
-        import("@oh-my-pi/pi-coding-agent/extensibility/settings"),
-        hostSettings()
-      ]);
-      return discoverExtensionPaths([], cwd, cfgDisabledExtensions.get(settings));
-    },
-    loadSkills: async (cwd) => {
-      const [{ loadSkills }, { cfgDisabledExtensions, cfgSkills }, settings] = await Promise.all([
-        import("@oh-my-pi/pi-coding-agent"),
-        import("@oh-my-pi/pi-coding-agent/extensibility/settings"),
-        hostSettings()
-      ]);
-      return loadSkills({
-        ...cfgSkills.get(settings),
-        cwd,
-        disabledExtensions: cfgDisabledExtensions.get(settings)
-      });
-    },
-    run: runCommand2
-  };
-}
-// package.json
-var package_default = {
-  name: "@sjawhar/pi-legion",
-  version: "10.11.1",
-  license: "Apache-2.0",
-  type: "module",
-  omp: {
-    extensions: [
-      "dist/legion.js"
-    ],
-    skills: [
-      "dist/skills"
-    ]
-  },
-  legion: {
-    daemonApiVersion: 32
-  },
-  repository: {
-    type: "git",
-    url: "https://github.com/sjawhar/legion"
-  },
-  files: [
-    "dist",
-    "agents"
-  ],
-  scripts: {
-    build: "bun build extensions/legion.ts --outdir dist --target bun --format esm --external @oh-my-pi/pi-coding-agent --external @oh-my-pi/pi-tui --external @oh-my-pi/pi-utils",
-    prepack: "../../scripts/pi-plugin-prepack.sh",
-    postpack: "rm -rf dist/skills",
-    typecheck: "bunx tsc --noEmit",
-    test: "bun test",
-    lint: "bunx biome lint extensions/ src/"
-  },
-  devDependencies: {
-    "@biomejs/biome": "^2.3.14",
-    "@legion/contracts": "workspace:*",
-    "@legion/envoy-client": "workspace:*",
-    "@legion/pi-shared": "workspace:*",
-    "@oh-my-pi/pi-utils": "^18.6.0",
-    "@types/bun": "latest",
-    typescript: "^5.3.0",
-    zod: "4.3.6"
-  }
-};
-
-// src/classify.ts
-function classifySession(env) {
-  if (env.LEGION_CONTROLLER !== undefined && env.LEGION_TREE !== undefined) {
-    throw new Error("Legion session has both controller and tree launch markers");
-  }
-  if (env.LEGION_CONTROLLER === "1")
-    return { kind: "controller" };
-  if (env.LEGION_ROLE === undefined)
-    return { kind: "not-legion" };
-  if (!isLegionRole(env.LEGION_ROLE)) {
-    throw new Error(`LEGION_ROLE "${env.LEGION_ROLE}" is not a Legion role`);
-  }
-  const tree = requiredEnvironment(env, "LEGION_TREE");
-  const issue2 = requiredEnvironment(env, "LEGION_ISSUE");
-  if (env.LEGION_ROLE === "architect" && issue2 === tree) {
-    return { kind: "root-architect", tree };
-  }
-  return { kind: "phase-worker", role: env.LEGION_ROLE, tree, issue: issue2 };
-}
-function requiredEnvironment(env, key) {
-  const value = env[key];
-  if (!value)
-    throw new Error(`${key} is required for Legion`);
-  return value;
-}
-function requiredSecret(env, key) {
-  const fileKey = `${key}_FILE`;
-  const file2 = env[fileKey];
-  if (file2 !== undefined)
-    return readSecretFile(fileKey, file2);
-  return requiredEnvironment(env, key);
-}
-function requiredControllerCapability(env) {
-  if (env.LEGION_CONTROLLER_SECRET_FILE !== undefined) {
-    return readSecretFile("LEGION_CONTROLLER_SECRET_FILE", env.LEGION_CONTROLLER_SECRET_FILE);
-  }
-  const secret = env.LEGION_CONTROLLER_SECRET;
-  if (!secret) {
-    throw new Error("LEGION_CONTROLLER_SECRET or LEGION_CONTROLLER_SECRET_FILE is required to claim the controller. " + "Launch OMP with one of them in its environment before running /legion-claim-controller.");
-  }
-  return secret;
-}
-
-// ../contracts/src/legion-api.ts
-var nonEmptyString = exports_external.string().min(1);
-var issueKey = exports_external.string().regex(DISPATCH_KEY_PATTERN);
-var timestamp = exports_external.iso.datetime({ offset: true });
-var LEGION_WORKFLOW_PHASES = [
-  "admitted",
-  "planning",
-  "implementing",
-  "testing",
-  "reviewing",
-  "retro",
-  "merging",
-  "awaiting_merge",
-  "integrating",
-  "production_check",
-  "done",
-  "held"
-];
-var LEGION_PHASE_BACKWARD_TARGETS = [
-  "admitted",
-  "planning",
-  "implementing",
-  "testing",
-  "reviewing",
-  "retro",
-  "merging",
-  "awaiting_merge",
-  "production_check",
-  "done",
-  "held"
-];
-var LEGION_PHASES = [...LEGION_WORKFLOW_PHASES, "unrecorded"];
-var LEGION_CLAIM_STATES = [
-  "queued",
-  "launch_uncertain",
-  "launching",
-  "shim_connected",
-  "registered",
-  "ready",
-  "working",
-  "idle",
-  "suspended",
-  "failed",
-  "retired"
+var LEGION_PHASES = [...LEGION_WORKFLOW_PHASES, "unrecorded"];
+var LEGION_CLAIM_STATES = [
+  "queued",
+  "launch_uncertain",
+  "launching",
+  "shim_connected",
+  "registered",
+  "ready",
+  "working",
+  "idle",
+  "suspended",
+  "failed",
+  "retired"
 ];
 var legionLocator = exports_external.discriminatedUnion("runtime", [
   exports_external.strictObject({
@@ -16606,104 +15961,1015 @@ var LegionChildRequest = exports_external.strictObject({
   issue: nonEmptyString
 });
 
-// src/daemon-client.ts
-class LegionDaemonApiError extends Error {
-  method;
-  path;
-  status;
-  code;
-  detail;
-  constructor(method, path4, status, code, detail) {
-    super(`${method} ${path4} failed with ${status}${code === undefined ? "" : ` ${code}`}: ${detail}`);
-    this.method = method;
-    this.path = path4;
-    this.status = status;
-    this.code = code;
-    this.detail = detail;
-    this.name = "LegionDaemonApiError";
+// ../pi-shared/src/daemon-client.ts
+class LegionDaemonApiError extends Error {
+  method;
+  path;
+  status;
+  code;
+  detail;
+  constructor(method, path2, status, code, detail) {
+    super(`${method} ${path2} failed with ${status}${code === undefined ? "" : ` ${code}`}: ${detail}`);
+    this.method = method;
+    this.path = path2;
+    this.status = status;
+    this.code = code;
+    this.detail = detail;
+    this.name = "LegionDaemonApiError";
+  }
+}
+
+class LegionDaemonContractError extends Error {
+  method;
+  path;
+  status;
+  constructor(method, path2, status, problem) {
+    super(`${method} ${path2} answered ${status} with a body the daemon API contract does not describe: ${problem}`);
+    this.method = method;
+    this.path = path2;
+    this.status = status;
+    this.name = "LegionDaemonContractError";
+  }
+}
+var READY_RETRY_ATTEMPTS = 3;
+var READY_RETRY_DELAY_MS = 1000;
+function isNetworkOrTimeoutError(error48) {
+  if (!(error48 instanceof Error))
+    return false;
+  if (error48.name === "NetworkError" || error48.name === "TimeoutError")
+    return true;
+  const code = "code" in error48 && typeof error48.code === "string" ? error48.code : undefined;
+  return code === "ConnectionRefused" || code === "ConnectionTimeout" || code === "EAI_AGAIN" || code === "ECONNREFUSED" || code === "ECONNRESET" || code === "EHOSTUNREACH" || code === "ENETUNREACH" || code === "ENOTFOUND" || code === "ETIMEDOUT" || error48 instanceof TypeError && (error48.message === "Failed to fetch" || error48.message === "fetch failed");
+}
+async function callReadyWithRetry(label, call) {
+  for (let attempt = 1;; attempt++) {
+    try {
+      await call();
+      return;
+    } catch (error48) {
+      const retryable = error48 instanceof LegionDaemonApiError ? error48.status >= 500 && error48.status < 600 : isNetworkOrTimeoutError(error48);
+      if (!retryable)
+        throw error48;
+      if (attempt === READY_RETRY_ATTEMPTS) {
+        console.error(`[legion] ${label} failed after ${attempt} attempts: ${messageFor(error48)}`);
+        throw error48;
+      }
+      console.error(`[legion] ${label} failed (attempt ${attempt}/${READY_RETRY_ATTEMPTS}), retrying: ${messageFor(error48)}`);
+      const retryDelay = Promise.withResolvers();
+      setTimeout(retryDelay.resolve, READY_RETRY_DELAY_MS);
+      await retryDelay.promise;
+    }
+  }
+}
+function parseStrictly(schema, body) {
+  let json2;
+  try {
+    json2 = JSON.parse(body);
+  } catch (error48) {
+    return { problem: `not JSON (${messageFor(error48)})` };
+  }
+  const parsed = schema.safeParse(json2);
+  if (parsed.success)
+    return { value: parsed.data };
+  return {
+    problem: parsed.error.issues.map((issue2) => `${issue2.path.join(".") || "(root)"}: ${issue2.message}`).join("; ")
+  };
+}
+function createLegionDaemonClient(baseUrl, fetchFn = fetch) {
+  const endpoint = baseUrl.replace(/\/+$/, "");
+  const call = async (method, path2, body) => {
+    const response = await fetchFn(`${endpoint}${path2}`, body === undefined ? undefined : {
+      method,
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    });
+    const text = await response.text();
+    if (response.ok)
+      return { status: response.status, text };
+    const refusal = parseStrictly(LegionErrorResponse, text);
+    if ("value" in refusal) {
+      const code = "code" in refusal.value && typeof refusal.value.code === "string" ? refusal.value.code : undefined;
+      throw new LegionDaemonApiError(method, path2, response.status, code, refusal.value.error);
+    }
+    throw new LegionDaemonApiError(method, path2, response.status, undefined, `${JSON.stringify(text)} is not the daemon's refusal shape (${refusal.problem})`);
+  };
+  const read = async (method, path2, schema, body) => {
+    const { status, text } = await call(method, path2, body);
+    const parsed = parseStrictly(schema, text);
+    if ("problem" in parsed) {
+      throw new LegionDaemonContractError(method, path2, status, parsed.problem);
+    }
+    return parsed.value;
+  };
+  const post = (path2, request, response, body) => read("POST", path2, response, request.parse(body));
+  const acknowledge = async (path2, body) => {
+    const { status, text } = await call("POST", path2, body);
+    if (status !== 204 || text !== "") {
+      throw new LegionDaemonContractError("POST", path2, status, "the route answers 204 with no body");
+    }
+  };
+  return {
+    state: () => read("GET", "/legion/v1/state", LegionStateResponse),
+    register: (input) => read("POST", "/legion/v1/claims/register", LegionRegisterResponse, input),
+    registerController: (input) => read("POST", "/legion/v1/claims/register", LegionControllerRegisterResponse, input),
+    ready: (input) => acknowledge("/legion/v1/claims/ready", input),
+    exit: (input) => acknowledge("/legion/v1/claims/exit", input),
+    grant: (input) => post("/legion/v1/grants", LegionGrantRequest, LegionGrantResponse, input),
+    controllerGrant: (input) => post("/legion/v1/grants", LegionControllerGrantRequest, LegionGrantResponse, input),
+    handoffComplete: (input) => post("/legion/v1/handoff/complete", LegionHandoffCompleteRequest, LegionHandoffCompleteResponse, input),
+    issueStatus: (input) => post("/legion/v1/issues/status", LegionIssueStatusRequest, LegionEmptyResponse, input),
+    gateRegister: (input) => post("/legion/v1/gates/register", LegionGateRegisterRequest, LegionEmptyResponse, input),
+    waveRelease: (input) => post("/legion/v1/waves/release", LegionWaveReleaseRequest, LegionWaveReleaseResponse, input),
+    phaseBackward: (input) => post("/legion/v1/phase/backward", LegionPhaseBackwardRequest, LegionEmptyResponse, input),
+    phaseRetry: (input) => post("/legion/v1/phase/retry", LegionPhaseRetryRequest, LegionEmptyResponse, input),
+    signOff: (input) => post("/legion/v1/signoff", LegionSignOffRequest, LegionEmptyResponse, input),
+    rootClose: (input) => post("/legion/v1/roots/close", LegionRootCloseRequest, LegionEmptyResponse, input),
+    childPark: (input) => post("/legion/v1/children/park", LegionChildRequest, LegionEmptyResponse, input),
+    childRerun: (input) => post("/legion/v1/children/rerun", LegionChildRequest, LegionEmptyResponse, input)
+  };
+}
+
+// ../pi-shared/src/handoff-commit.ts
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
+
+// ../pi-shared/src/git-lock.ts
+import { lstat } from "fs/promises";
+var GIT_LOCK_REPORTS = [
+  /The lockfile at '([^']+)' might need manual deletion/g,
+  /Unable to create '([^']+)': File exists/g
+];
+function age(ms) {
+  const total = Math.round(Math.abs(ms) / 1000);
+  const sign = ms < 0 && total > 0 ? "-" : "";
+  const hours = Math.floor(total / 3600);
+  const minutes = Math.floor(total % 3600 / 60);
+  const seconds = total % 60;
+  if (hours > 0)
+    return `${sign}${hours}h${minutes}m${seconds}s`;
+  if (minutes > 0)
+    return `${sign}${minutes}m${seconds}s`;
+  return `${sign}${seconds}s`;
+}
+async function staleGitLockNote(output, now = Date.now()) {
+  const locks = new Set;
+  for (const report of GIT_LOCK_REPORTS) {
+    for (const match of output.matchAll(report))
+      locks.add(match[1]);
+  }
+  const notes = [];
+  for (const lock of locks) {
+    const written = await lstat(lock).then((info) => info.mtimeMs, () => {
+      return;
+    });
+    if (written === undefined)
+      continue;
+    notes.push(`git lock ${lock} was last written ${age(now - written)} ago and blocks this command. Do not remove it while the issue's pod runs: another role's git, which this container cannot see, may hold it. Replacing the issue's pod removes it. Under the tmux runtime nothing removes it: remove it by hand only once no git or jj process on the host is using the repository.`);
+  }
+  return notes.join(`
+`);
+}
+
+// ../pi-shared/src/handoff-commit.ts
+var FILE_BACKED = {
+  planning: { word: "plan", role: "planner" },
+  implementing: { word: "implement", role: "implementer" },
+  testing: { word: "test", role: "tester" },
+  reviewing: { word: "review", role: "reviewer" }
+};
+var execFileAsync2 = promisify2(execFile2);
+var pathJj = async (args, cwd) => {
+  try {
+    const { stdout } = await execFileAsync2("jj", ["-R", cwd, ...args], {
+      cwd,
+      maxBuffer: 16 * 1024 * 1024
+    });
+    return stdout.trim();
+  } catch (error48) {
+    const detail = error48 !== null && typeof error48 === "object" && "stderr" in error48 ? String(error48.stderr).trim() : error48 instanceof Error ? error48.message : String(error48);
+    const note = await staleGitLockNote(detail);
+    throw new Error(`jj ${args.join(" ")} failed: ${detail}${note === "" ? "" : `
+${note}`}`);
+  }
+};
+function requiredVariable(env, name) {
+  const value = env[name];
+  if (value === undefined || value === "") {
+    throw new Error(`${name} is not set, so handoff_complete cannot find the commit to report`);
+  }
+  return value;
+}
+async function findHandoffCommit(input) {
+  const { phase, role, env } = input;
+  const jj = input.jj ?? pathJj;
+  const workspace = requiredVariable(env, "LEGION_WORKSPACE");
+  const handoff = FILE_BACKED[phase];
+  if (handoff === undefined || handoff.role !== role) {
+    return jj(["log", "-r", "@-", "--no-graph", "-T", "commit_id"], workspace);
+  }
+  const issue2 = requiredVariable(env, "LEGION_ISSUE");
+  if (!DISPATCH_KEY_PATTERN.test(issue2)) {
+    throw new Error(`LEGION_ISSUE ${JSON.stringify(issue2)} is not a Dispatch issue key like LEGION-1`);
+  }
+  const file2 = `.legion/${issue2}/${handoff.word}.json`;
+  const fileset = `root:${JSON.stringify(file2)}`;
+  if (await jj(["diff", "-r", "@", "--name-only", fileset], workspace) !== "") {
+    throw new Error(`${file2} has changes in the working copy that are not committed: commit this phase's handoff before completing`);
+  }
+  if (await jj(["file", "list", "-r", "@", fileset], workspace) === "") {
+    throw new Error(`${file2} is missing from the workspace: write this phase's handoff, then commit and push it before completing`);
+  }
+  const carrying = await jj([
+    "log",
+    "-r",
+    `latest((::@- ~ ::trunk()) & files(${fileset}))`,
+    "--no-graph",
+    "-T",
+    "commit_id"
+  ], workspace);
+  if (carrying === "") {
+    throw new Error(`${file2} is not committed on this issue's branch (only the base branch carries it): write and commit this phase's handoff`);
+  }
+  const user = env["JJ_USER"];
+  if (user !== undefined && user !== "") {
+    const author = await jj(["log", "-r", carrying, "--no-graph", "-T", 'author.name() ++ "\\n" ++ author.email()'], workspace);
+    const [name = "", email3 = ""] = author.split(`
+`, 2);
+    if (name !== user || email3 !== (env["JJ_EMAIL"] ?? "")) {
+      throw new Error(`${file2} is carried by commit ${carrying}, authored by ${name} <${email3}>, not this pane's ${user}: run jj new, then write and commit this phase's handoff again`);
+    }
+  }
+  const bookmark = `legion/${issue2}`;
+  const pushed = await jj([
+    "log",
+    "-r",
+    `${carrying} & ::remote_bookmarks(exact:${JSON.stringify(bookmark)}, exact:"origin")`,
+    "--no-graph",
+    "-T",
+    "commit_id"
+  ], workspace);
+  if (pushed === "") {
+    throw new Error(`${file2} is carried by commit ${carrying}, which is not on ${bookmark}@origin: push the issue branch, then complete again`);
+  }
+  return carrying;
+}
+
+// ../pi-shared/src/interface.ts
+import { logger } from "@oh-my-pi/pi-utils";
+var ENVOY_PLUGIN_INTERFACE_VERSION = 3;
+var ENVOY_PLUGIN_INTERFACE_KEY = Symbol.for("legion.pi-shared.envoy-plugin-interface");
+var LEGION_PLUGIN_LOADED_KEY = Symbol.for("legion.pi-legion.loaded");
+var LEGACY_LEGION_LOADED_KEY = Symbol.for("legion.pi-envoy.legion-loaded");
+var LOCAL_ENVOY_NOTICE = { localNotice: true };
+var store = globalThis;
+function envoyPluginInterface() {
+  const existing = store[ENVOY_PLUGIN_INTERFACE_KEY];
+  if (existing !== undefined)
+    return existing;
+  const created = {
+    version: ENVOY_PLUGIN_INTERFACE_VERSION,
+    publishers: [],
+    roleClaim: {
+      instances: [],
+      managedSessions: new Set,
+      regained: undefined,
+      slackRoleOwned: false
+    },
+    injectedUserTurns: new Map,
+    bootstrappedSession: { file: undefined }
+  };
+  store[ENVOY_PLUGIN_INTERFACE_KEY] = created;
+  return created;
+}
+function readEnvoyPluginInterface() {
+  const iface = store[ENVOY_PLUGIN_INTERFACE_KEY];
+  const from = iface?.publishers[0];
+  if (iface === undefined || from === undefined)
+    return { kind: "absent" };
+  if (iface.version !== ENVOY_PLUGIN_INTERFACE_VERSION) {
+    return {
+      kind: "mismatch",
+      found: iface.version,
+      expected: ENVOY_PLUGIN_INTERFACE_VERSION,
+      from
+    };
+  }
+  return { kind: "present", iface };
+}
+
+// ../pi-shared/src/injected-user-turns.ts
+function userMessageText(content) {
+  if (typeof content === "string")
+    return content;
+  if (!Array.isArray(content))
+    return "";
+  const pieces = [];
+  for (const part of content) {
+    if (typeof part !== "object" || part === null)
+      continue;
+    if ("type" in part && part.type === "text" && "text" in part && typeof part.text === "string") {
+      pieces.push(part.text);
+    }
+  }
+  return pieces.join(`
+`);
+}
+function matchInjectedUserTurn(sessionID, message) {
+  if (typeof message !== "object" || message === null)
+    return;
+  if (!("role" in message) || message.role !== "user" && message.role !== "custom") {
+    return;
+  }
+  if (!("timestamp" in message) || typeof message.timestamp !== "number")
+    return;
+  const session = envoyPluginInterface().injectedUserTurns.get(sessionID);
+  if (session === undefined)
+    return;
+  const tag = messageTag(message);
+  const memo = tag === undefined ? `${message.timestamp}` : `${message.timestamp}:${tag}`;
+  const known = session.found.get(memo);
+  if (known !== undefined)
+    return known;
+  let index = tag === undefined ? -1 : session.sent.findIndex((sent2) => sent2.messageId === tag);
+  if (index === -1 && message.role === "user") {
+    const text = userMessageText("content" in message ? message.content : undefined);
+    index = session.sent.findIndex((sent2) => sent2.via === "text" && sent2.body === text);
+  }
+  const sent = session.sent[index];
+  if (sent === undefined)
+    return;
+  session.sent.splice(index, 1);
+  session.found.set(memo, sent.messageId);
+  return sent.messageId;
+}
+function messageTag(message) {
+  if (typeof message !== "object" || message === null || !("tag" in message))
+    return;
+  return typeof message.tag === "string" ? message.tag : undefined;
+}
+
+// ../pi-shared/src/role-claim-bridge.ts
+function legionRoleClaimBridge() {
+  return envoyPluginInterface().roleClaim;
+}
+async function claimEnvoyRole(sessionID, role, context) {
+  const bridge = legionRoleClaimBridge();
+  bridge.managedSessions.add(sessionID);
+  const instance = bridge.instances.findLast((candidate) => candidate.sessionID() === sessionID) ?? bridge.instances.at(-1);
+  if (instance === undefined)
+    throw new Error("Envoy has no bound instance for a role claim");
+  await instance.claim(sessionID, role, context);
+}
+async function subscribeLegionNotice(sessionID, topic, context, whileHolding) {
+  const bridge = legionRoleClaimBridge();
+  const instance = bridge.instances.findLast((candidate) => candidate.sessionID() === sessionID) ?? bridge.instances.at(-1);
+  if (instance === undefined)
+    throw new Error("Envoy has no bound instance for a notice subscription");
+  await instance.subscribe(sessionID, topic, context, whileHolding);
+}
+function onEnvoyRoleRegained(listener) {
+  legionRoleClaimBridge().regained = listener;
+}
+
+// ../pi-shared/src/subagent-session.ts
+import fs from "fs";
+import path2 from "path";
+import * as host from "@oh-my-pi/pi-coding-agent";
+import { logger as logger2 } from "@oh-my-pi/pi-utils";
+function recordBootstrappedSession(sessionFile) {
+  envoyPluginInterface().bootstrappedSession.file = sessionFile;
+}
+async function isSubagentSession(context) {
+  const registered = registeredSubagent(context);
+  if (registered !== undefined)
+    return { subagent: registered, settled: true };
+  try {
+    await context.sessionManager.ensureOnDisk();
+  } catch (error48) {
+    const subagent = transcriptSaysSubagent(context);
+    logger2.warn("subagent check: publishing the transcript failed; answered from the transcript on disk, and the next call asks again", { sessionFile: context.sessionManager.getSessionFile(), subagent, error: messageFor(error48) });
+    return { subagent, settled: false };
+  }
+  return { subagent: transcriptSaysSubagent(context), settled: true };
+}
+function transcriptSaysSubagent(context) {
+  const sessionFile = context.sessionManager.getSessionFile();
+  if (sessionFile !== undefined) {
+    if (fs.existsSync(`${path2.dirname(sessionFile)}.jsonl`))
+      return true;
+    if (fs.existsSync(sessionFile))
+      return false;
+  }
+  const bootstrapped = envoyPluginInterface().bootstrappedSession.file;
+  return bootstrapped !== undefined && bootstrapped !== sessionFile;
+}
+function registeredSubagent(context) {
+  const registry2 = host.AgentRegistry?.global();
+  if (registry2 === undefined)
+    return;
+  const sessionID = context.sessionManager.getSessionId();
+  const sessionFile = context.sessionManager.getSessionFile();
+  const own = registry2.list().filter((ref) => ref.session === null ? sessionFile !== undefined && ref.sessionFile === sessionFile : ref.session.sessionManager.getSessionId() === sessionID);
+  if (own.length === 0)
+    return;
+  return own.some((ref) => ref.kind !== "main");
+}
+function subagentSessionCheck() {
+  let settled;
+  return async (context) => {
+    if (settled !== undefined)
+      return settled;
+    const answer = await isSubagentSession(context);
+    if (answer.settled)
+      settled = answer.subagent;
+    return answer.subagent;
+  };
+}
+
+// extensions/legion.ts
+import { logger as logger3 } from "@oh-my-pi/pi-utils";
+
+// src/capability-report.ts
+import { readdir, stat } from "fs/promises";
+import path3 from "path";
+var CAPABILITY_CHECK_TIMEOUT_MS = 8000;
+var CAPABILITY_REPORT_TIMEOUT_MS = 1e4;
+var WEB_SEARCH_PROBE_QUERY = "jujutsu version control";
+var ENVOY_TOOL_NAMES = [
+  "envoy_subscribe",
+  "envoy_unsubscribe",
+  "envoy_list",
+  "envoy_inbox",
+  "envoy_send",
+  "envoy_publish",
+  "envoy_role_set",
+  "envoy_role_get",
+  "envoy_whoami",
+  "envoy_sessions",
+  "slack_post"
+];
+var LIVE_CAPABILITIES = [
+  "subagents",
+  "web-search",
+  "mcp",
+  "repository-extensions",
+  "dispatch-envoy-tools",
+  "github"
+];
+var DEFAULT_BUDGETS = {
+  checkMs: CAPABILITY_CHECK_TIMEOUT_MS,
+  reportMs: CAPABILITY_REPORT_TIMEOUT_MS
+};
+var ok = (detail) => ({ ok: true, detail });
+var failed = (detail) => ({ ok: false, detail });
+function firstLine(text) {
+  return text.trim().split(`
+`, 1)[0] ?? "";
+}
+function commandFailure(result) {
+  return firstLine(result.stderr) || `exit code ${result.code ?? "none"}`;
+}
+function whichOnPath(name) {
+  return Bun.which(name, { PATH: process.env.PATH ?? "" }) ?? name;
+}
+var checkSubagents = async (host2, input) => {
+  if (!input.agentsExposed)
+    return failed("pi.agents is not exposed");
+  if (!input.activeTools.includes("task"))
+    return failed("task is not a registered tool");
+  const [discovered, disabled] = await Promise.all([
+    host2.discoverAgents(input.cwd),
+    host2.disabledAgents()
+  ]);
+  const names = new Set(discovered.agents.map((agent) => agent.name));
+  const missing = input.promptAgents.filter((agent) => !names.has(agent));
+  const off = input.promptAgents.filter((agent) => disabled.includes(agent));
+  const problems = [];
+  if (missing.length > 0) {
+    problems.push(`agents the prompts dispatch that the task tool does not resolve: ${missing.join(", ")}`);
+  }
+  if (off.length > 0)
+    problems.push(`disabled by task.disabledAgents: ${off.join(", ")}`);
+  if (problems.length > 0)
+    return failed(problems.join("; "));
+  return ok(`task resolves ${names.size} agents, every one the prompts dispatch`);
+};
+var checkWebSearch = async (host2, input, signal) => {
+  if (!input.activeTools.includes("web_search")) {
+    return failed("web_search is not a registered tool");
+  }
+  const started = Date.now();
+  const result = await host2.runSearchQuery({ query: WEB_SEARCH_PROBE_QUERY, limit: 1 }, { sessionId: input.sessionId, signal });
+  const elapsed = Date.now() - started;
+  const details = result.details ?? {};
+  if (details.error !== undefined && details.error !== null) {
+    return failed(`web_search failed: ${String(details.error)}`);
+  }
+  const provider = details.response?.provider ?? details.provider;
+  if (provider === undefined || provider === null || provider === "none") {
+    return failed("web_search failed: no provider answered");
+  }
+  const text = result.content?.[0]?.text ?? "";
+  if (text.startsWith("Error"))
+    return failed(`web_search failed: ${firstLine(text)}`);
+  return ok(`web_search registered; provider ${String(provider)} answered in ${elapsed} ms`);
+};
+function mcpErrorFor(errors3, name) {
+  for (const entry of errors3) {
+    if (typeof entry !== "object" || entry === null) {
+      if (!String(entry).includes(name))
+        continue;
+      return String(entry);
+    }
+    const record2 = entry;
+    const names = [record2.server, record2.name, record2.path];
+    if (!names.some((value) => value === name || value === `mcp:${name}`))
+      continue;
+    const message = record2.error ?? record2.message;
+    return message === undefined ? String(entry) : String(message);
+  }
+  return;
+}
+var checkMCP = async (host2, input, signal) => {
+  const { configs, sources } = await host2.loadMCPConfigs(input.cwd);
+  const configured = Object.keys(configs);
+  if (configured.length === 0)
+    return ok("no MCP server configured");
+  const { manager, errors: errors3 } = await host2.discoverMCPServers(input.cwd);
+  let torn;
+  const tearDown = () => {
+    torn ??= manager.disconnectAll().catch(() => {
+      return;
+    });
+    return torn;
+  };
+  signal.addEventListener("abort", tearDown, { once: true });
+  if (signal.aborted)
+    tearDown();
+  try {
+    await manager.waitForPendingConnections();
+    const connected = [];
+    const unconnected = [];
+    for (const name of configured) {
+      const status = manager.getConnectionStatus(name);
+      if (status === "connected") {
+        const source = sources[name]?.path;
+        connected.push(source === undefined ? name : `${name} (${path3.relative(input.cwd, source)})`);
+      } else {
+        unconnected.push(`${name} (${mcpErrorFor(errors3, name) ?? `status ${status}`})`);
+      }
+    }
+    if (unconnected.length === 0)
+      return ok(`connected: ${connected.join(", ")}`);
+    const suffix = connected.length === 0 ? "" : `; connected: ${connected.join(", ")}`;
+    return failed(`not connected: ${unconnected.join(", ")}${suffix}`);
+  } finally {
+    signal.removeEventListener("abort", tearDown);
+    await tearDown();
+  }
+};
+var EXTENSION_MODULE = /\.(?:ts|js|mjs|cjs)$/;
+var EXTENSION_INDEXES = ["index.ts", "index.js", "index.mjs", "index.cjs"];
+var SKILL_DIRECTORIES = [path3.join(".omp", "skills"), path3.join(".claude", "skills")];
+async function namesIn(directory) {
+  try {
+    return await readdir(directory);
+  } catch (error48) {
+    if (hasErrnoCode(error48, "ENOENT") || hasErrnoCode(error48, "ENOTDIR"))
+      return [];
+    throw error48;
+  }
+}
+async function kindOf(file2) {
+  try {
+    const stats = await stat(file2);
+    return stats.isFile() ? "file" : stats.isDirectory() ? "directory" : undefined;
+  } catch (error48) {
+    if (hasErrnoCode(error48, "ENOENT") || hasErrnoCode(error48, "ENOTDIR"))
+      return;
+    throw error48;
+  }
+}
+async function repositoryEntries(cwd) {
+  const entries = [];
+  const extensions = path3.join(cwd, ".omp", "extensions");
+  for (const name of await namesIn(extensions)) {
+    const candidate = path3.join(extensions, name);
+    const kind = await kindOf(candidate);
+    if (kind === "file" && EXTENSION_MODULE.test(name)) {
+      entries.push({ path: candidate, directory: false });
+    } else if (kind === "directory") {
+      const indexes = await Promise.all(EXTENSION_INDEXES.map((index) => kindOf(path3.join(candidate, index))));
+      if (indexes.includes("file"))
+        entries.push({ path: candidate, directory: true });
+    }
+  }
+  for (const skills of SKILL_DIRECTORIES) {
+    for (const name of await namesIn(path3.join(cwd, skills))) {
+      const skill = path3.join(cwd, skills, name, "SKILL.md");
+      if (await kindOf(skill) === "file")
+        entries.push({ path: skill, directory: false });
+    }
+  }
+  return entries;
+}
+var checkRepositoryExtensions = async (host2, input) => {
+  const entries = await repositoryEntries(input.cwd);
+  if (entries.length === 0) {
+    return ok("the repository carries no .omp/extensions, .omp/skills or .claude/skills");
+  }
+  const [extensionPaths, loaded] = await Promise.all([
+    host2.discoverExtensionPaths(input.cwd),
+    host2.loadSkills(input.cwd)
+  ]);
+  const discovered = new Set([...extensionPaths, ...loaded.skills.map((skill) => skill.filePath)].map((file2) => path3.resolve(file2)));
+  const isDiscovered = (entry) => {
+    const resolved = path3.resolve(entry.path);
+    if (discovered.has(resolved))
+      return true;
+    if (!entry.directory)
+      return false;
+    const prefix = resolved + path3.sep;
+    return [...discovered].some((file2) => file2.startsWith(prefix));
+  };
+  const relative = (selected) => selected.map((entry) => path3.relative(input.cwd, entry.path)).sort().join(", ");
+  const found = [];
+  const lost = [];
+  for (const entry of entries)
+    (isDiscovered(entry) ? found : lost).push(entry);
+  if (lost.length === 0)
+    return ok(`discovered: ${relative(found)}`);
+  const suffix = found.length === 0 ? "" : `; discovered: ${relative(found)}`;
+  return failed(`not discovered: ${relative(lost)}${suffix}`);
+};
+var checkDispatchEnvoyTools = async (host2, input, signal) => {
+  const missing = ENVOY_TOOL_NAMES.filter((tool) => !input.activeTools.includes(tool));
+  if (missing.length > 0)
+    return failed(`Envoy tools missing: ${missing.join(", ")}`);
+  const result = await host2.run("dispatch", ["read", "--issue", input.issue], {
+    cwd: input.cwd,
+    signal
+  });
+  if (result.code !== 0)
+    return failed(`dispatch read failed: ${commandFailure(result)}`);
+  return ok(`${ENVOY_TOOL_NAMES.length} Envoy tools registered; dispatch read ${input.issue} answered from ${whichOnPath("dispatch")}`);
+};
+var checkGitHub = async (host2, input, signal) => {
+  const result = await host2.run("gh", ["api", "graphql", "-f", "query={viewer{login}}", "--jq", ".data.viewer.login"], { cwd: input.cwd, signal });
+  if (result.code !== 0)
+    return failed(`gh viewer login failed: ${commandFailure(result)}`);
+  return ok(`gh viewer login: ${result.stdout.trim()}`);
+};
+var CHECKS = {
+  subagents: checkSubagents,
+  "web-search": checkWebSearch,
+  mcp: checkMCP,
+  "repository-extensions": checkRepositoryExtensions,
+  "dispatch-envoy-tools": checkDispatchEnvoyTools,
+  github: checkGitHub
+};
+var MAX_DETAIL_BYTES = 1024;
+var HELD = "\uFFFF";
+var C1_INTRODUCER = "\uFFFE";
+var OPENER = "\uFDD0";
+var HELD_READINGS = [
+  [/(?:\uffff\[|\ufffe)[0-?]*[!-)+,/-]*/g, OPENER],
+  [/\ufdd0[@-~]?/g, HELD],
+  [/\uffff/g, " "]
+];
+var HELD_SEQUENCE = String.raw`\ufffe|\ufdd0|\uffff(?:\[[0-?]*[@-~])?`;
+var JWT_FIRST_HELD_SEQUENCE = String.raw`\ufffe|\uffff(?:\[[0-?]*[@-~])?`;
+function isSpace(code) {
+  return code >= 9 && code <= 13 || code === 32 || code === 133 || code === 160 || code === 5760 || code >= 8192 && code <= 8202 || code === 8232 || code === 8233 || code === 8239 || code === 8287 || code === 12288;
+}
+function truncateUtf8(text, max) {
+  let bytes = 0;
+  let end = 0;
+  for (const char of text) {
+    const code = char.codePointAt(0) ?? 0;
+    bytes += code < 128 ? 1 : code < 2048 ? 2 : code < 65536 ? 3 : 4;
+    if (bytes > max)
+      break;
+    end += char.length;
+  }
+  return text.slice(0, end);
+}
+var CREDENTIAL_RULES = [
+  [/(?<![a-z0-9+.-])([0-9+.-]*[a-z][a-z0-9+.-]*:\/\/)[^ /?#]+@/gi, "$1***@"],
+  [
+    /([?&](?:token|key|secret|password|access_token|accesstoken|refresh_token|id_token|auth_token|private_token|api_key|apikey|client_secret|sig|signature|x-amz-security-token|x-amz-signature|x-goog-signature)=)[^ &#"'<>]+/gi,
+    "$1***"
+  ],
+  [
+    /\b(password[ \ufffe\uffff]*=[ \ufffe\uffff]*)(?:(')(?:[^'\\]|\\.)*('?)|[^ &#"'<>]+)/gi,
+    "$1$2***$3"
+  ],
+  [
+    /(authorization\\?["']?[ \ufffe\uffff]*[:=][ \ufffe\uffff]*)(?:(\\["'](?:(?:bearer|basic|token|digest)[ \ufffe\uffff]+)?)[^"'\\]+|(["'](?:(?:bearer|basic|token|digest)[ \ufffe\uffff]+)?)(?:[^"'\\]|\\.)+|(\[?(?:(?:bearer|basic|token|digest)[ \ufffe\uffff]+)?)[^)\]}>]+)/gi,
+    "$1$2$3$4***"
+  ],
+  [
+    new RegExp(String.raw`((?:api-key|application-key|ocp-apim-subscription-key|x-subscription-token)\\?["']?[ \ufffe\uffff]*[:=][ \ufffe\uffff]*\\?["']?)(?:[A-Za-z0-9._~+/=*-]|${HELD_SEQUENCE})+`, "gi"),
+    "$1***"
+  ],
+  [
+    /(\\?["'](?:api_key|access_token)\\?["'][ \ufffe\uffff]*:[ \ufffe\uffff]*\\?["'])[^"'\\]+/gi,
+    "$1***"
+  ],
+  [
+    new RegExp(String.raw`\b(bearer[ \ufffe\uffff]+)(?:[A-Za-z0-9._~+/=*-]|${HELD_SEQUENCE})+`, "gi"),
+    "$1***"
+  ],
+  [
+    new RegExp(String.raw`\b(gh[pousr]_|github_pat_)(?:[A-Za-z0-9._-]|${HELD_SEQUENCE}){20,}`, "g"),
+    "$1***"
+  ],
+  [
+    new RegExp(String.raw`(?:(?=eyJ)(?<!\uffff\[[0-?]*(?:[@-~]?|\\u[0-9A-Fa-f]{4}))(?:(?<![A-Za-z0-9_\ufffe\uffff-])|(?<=%[0-9A-Fa-f]{2}|\\u[0-9A-Fa-f]{4}))eyJ(?:[A-Za-z0-9_-]|${JWT_FIRST_HELD_SEQUENCE}){8,}|(?<=\uffff)eyJ(?:[A-Za-z0-9_-]|\ufffe){8,}|(?=eyJ)(?<=\uffff\[[0-?]*(?:[@-~]|\\u[0-9A-Fa-f]{4})?)eyJ[A-Za-z0-9_-]*\ufffe(?:[A-Za-z0-9_-]|\ufffe)*)\.(?:[A-Za-z0-9_-]|${HELD_SEQUENCE}){8,}\.(?:[A-Za-z0-9_-]|${HELD_SEQUENCE})*`, "g"),
+    "***"
+  ],
+  [
+    new RegExp(String.raw`\b(sk-|dsp_|ddsat_|ddpat_|ddapp_|ya29\.|xox[a-z]-|glpat-|npm_)(?:[A-Za-z0-9_-]|${HELD_SEQUENCE}){20,}`, "g"),
+    "$1***"
+  ],
+  [new RegExp(String.raw`\b(AIza)(?:[A-Za-z0-9_-]|${HELD_SEQUENCE}){35,}`, "g"), "$1***"],
+  [new RegExp(String.raw`\b(AKIA|ASIA)(?:(?:${HELD_SEQUENCE})*[A-Z0-9]){16}\b`, "g"), "$1***"]
+];
+var MAX_REDACTION_PASSES = 8;
+function redactCredentials(text) {
+  let line = text;
+  for (let pass = 0;pass < MAX_REDACTION_PASSES; pass++) {
+    const next = CREDENTIAL_RULES.reduce((redacted, [pattern, replacement]) => redacted.replace(pattern, replacement), line);
+    if (next === line)
+      break;
+    line = next;
   }
+  return line;
 }
-
-class LegionDaemonContractError extends Error {
-  method;
-  path;
-  status;
-  constructor(method, path4, status, problem) {
-    super(`${method} ${path4} answered ${status} with a body the daemon API contract does not describe: ${problem}`);
-    this.method = method;
-    this.path = path4;
-    this.status = status;
-    this.name = "LegionDaemonContractError";
+function withoutLastCodePoint(text) {
+  const last = text.charCodeAt(text.length - 1);
+  return text.slice(0, last >= 56320 && last <= 57343 && text.length > 1 ? -2 : -1);
+}
+function cleanDetail(text) {
+  let marked = "";
+  for (const char of text) {
+    const code = char.codePointAt(0) ?? 0;
+    const control = code < 32 || code >= 127 && code < 160 || code === 65534 || code === 64976 || code === 65533;
+    marked += isSpace(code) ? " " : code === 155 ? C1_INTRODUCER : control ? HELD : char;
   }
+  let redacted = redactCredentials(marked);
+  if (marked.includes(HELD) || marked.includes(C1_INTRODUCER)) {
+    for (const [pattern, replacement] of HELD_READINGS) {
+      const read = redacted.replace(pattern, replacement);
+      if (read !== redacted)
+        redacted = redactCredentials(read);
+    }
+  }
+  const line = redacted.split(" ").filter((field) => field !== "").join(" ");
+  let cut = truncateUtf8(line, MAX_DETAIL_BYTES).replace(/ +$/, "");
+  if (cut.length < line.length) {
+    while (redactCredentials(cut) !== cut) {
+      const space = cut.lastIndexOf(" ");
+      cut = space > 0 ? cut.slice(0, space) : withoutLastCodePoint(cut);
+    }
+  }
+  return cut;
 }
-function parseStrictly(schema, body) {
-  let json2;
+function budgetLabel(ms) {
+  return ms % 1000 === 0 ? `${ms / 1000} s` : `${ms} ms`;
+}
+async function withinBudget(work, ms, onDeadline) {
+  const deadline = Promise.withResolvers();
+  const timer = setTimeout(() => deadline.resolve(onDeadline()), ms);
   try {
-    json2 = JSON.parse(body);
-  } catch (error48) {
-    return { problem: `not JSON (${messageFor(error48)})` };
+    return await Promise.race([work, deadline.promise]);
+  } finally {
+    clearTimeout(timer);
   }
-  const parsed = schema.safeParse(json2);
-  if (parsed.success)
-    return { value: parsed.data };
-  return {
-    problem: parsed.error.issues.map((issue2) => `${issue2.path.join(".") || "(root)"}: ${issue2.message}`).join("; ")
-  };
 }
-function createLegionDaemonClient(baseUrl, fetchFn = fetch) {
-  const endpoint = baseUrl.replace(/\/+$/, "");
-  const call = async (method, path4, body) => {
-    const response = await fetchFn(`${endpoint}${path4}`, body === undefined ? undefined : {
-      method,
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body)
+async function measureCapabilities(host2, input, budgets = DEFAULT_BUDGETS) {
+  const started = Date.now();
+  const measuredAt = new Date(started).toISOString();
+  const outcomes = new Map;
+  const controllers = [];
+  const checks3 = LIVE_CAPABILITIES.map(async (name) => {
+    const controller = new AbortController;
+    controllers.push(controller);
+    const outcome = await withinBudget(CHECKS[name](host2, input, controller.signal).catch((error48) => failed(firstLine(messageFor(error48)))), budgets.checkMs, () => {
+      controller.abort();
+      return failed(`did not finish within ${budgetLabel(budgets.checkMs)}`);
     });
-    const text = await response.text();
-    if (response.ok)
-      return { status: response.status, text };
-    const refusal = parseStrictly(LegionErrorResponse, text);
-    if ("value" in refusal) {
-      const code = "code" in refusal.value && typeof refusal.value.code === "string" ? refusal.value.code : undefined;
-      throw new LegionDaemonApiError(method, path4, response.status, code, refusal.value.error);
-    }
-    throw new LegionDaemonApiError(method, path4, response.status, undefined, `${JSON.stringify(text)} is not the daemon's refusal shape (${refusal.problem})`);
-  };
-  const read = async (method, path4, schema, body) => {
-    const { status, text } = await call(method, path4, body);
-    const parsed = parseStrictly(schema, text);
-    if ("problem" in parsed) {
-      throw new LegionDaemonContractError(method, path4, status, parsed.problem);
-    }
-    return parsed.value;
-  };
-  const post = (path4, request, response, body) => read("POST", path4, response, request.parse(body));
-  const acknowledge = async (path4, body) => {
-    const { status, text } = await call("POST", path4, body);
-    if (status !== 204 || text !== "") {
-      throw new LegionDaemonContractError("POST", path4, status, "the route answers 204 with no body");
-    }
-  };
+    outcomes.set(name, outcome);
+  });
+  await withinBudget(Promise.all(checks3).then(() => {
+    return;
+  }), budgets.reportMs, () => {
+    return;
+  });
+  for (const controller of controllers)
+    controller.abort();
+  const rows = LIVE_CAPABILITIES.map((name) => {
+    const { ok: ok2, detail } = outcomes.get(name) ?? failed(`did not finish within ${budgetLabel(budgets.reportMs)}`);
+    return { name, ok: ok2, detail: cleanDetail(detail) };
+  });
+  return { measuredAt, elapsedMs: Date.now() - started, rows };
+}
+async function runCommand2(command, args, options) {
+  const child = Bun.spawn([command, ...args], {
+    cwd: options.cwd,
+    env: process.env,
+    stdin: "ignore",
+    stdout: "pipe",
+    stderr: "pipe",
+    signal: options.signal
+  });
+  const [stdout, stderr] = await Promise.all([
+    new Response(child.stdout).text(),
+    new Response(child.stderr).text(),
+    child.exited
+  ]);
+  return { code: child.exitCode, stdout, stderr };
+}
+function ompCapabilityHost() {
+  const hostSettings = async () => (await import("@oh-my-pi/pi-coding-agent/config/settings")).settings;
   return {
-    state: () => read("GET", "/legion/v1/state", LegionStateResponse),
-    register: (input) => read("POST", "/legion/v1/claims/register", LegionRegisterResponse, input),
-    registerController: (input) => read("POST", "/legion/v1/claims/register", LegionControllerRegisterResponse, input),
-    ready: (input) => acknowledge("/legion/v1/claims/ready", input),
-    exit: (input) => acknowledge("/legion/v1/claims/exit", input),
-    grant: (input) => post("/legion/v1/grants", LegionGrantRequest, LegionGrantResponse, input),
-    controllerGrant: (input) => post("/legion/v1/grants", LegionControllerGrantRequest, LegionGrantResponse, input),
-    handoffComplete: (input) => post("/legion/v1/handoff/complete", LegionHandoffCompleteRequest, LegionHandoffCompleteResponse, input),
-    issueStatus: (input) => post("/legion/v1/issues/status", LegionIssueStatusRequest, LegionEmptyResponse, input),
-    gateRegister: (input) => post("/legion/v1/gates/register", LegionGateRegisterRequest, LegionEmptyResponse, input),
-    waveRelease: (input) => post("/legion/v1/waves/release", LegionWaveReleaseRequest, LegionWaveReleaseResponse, input),
-    phaseBackward: (input) => post("/legion/v1/phase/backward", LegionPhaseBackwardRequest, LegionEmptyResponse, input),
-    phaseRetry: (input) => post("/legion/v1/phase/retry", LegionPhaseRetryRequest, LegionEmptyResponse, input),
-    signOff: (input) => post("/legion/v1/signoff", LegionSignOffRequest, LegionEmptyResponse, input),
-    rootClose: (input) => post("/legion/v1/roots/close", LegionRootCloseRequest, LegionEmptyResponse, input),
-    childPark: (input) => post("/legion/v1/children/park", LegionChildRequest, LegionEmptyResponse, input),
-    childRerun: (input) => post("/legion/v1/children/rerun", LegionChildRequest, LegionEmptyResponse, input)
+    discoverAgents: async (cwd) => (await import("@oh-my-pi/pi-coding-agent")).discoverAgents(cwd),
+    disabledAgents: async () => {
+      const [{ cfgTaskDisabledAgents }, settings] = await Promise.all([
+        import("@oh-my-pi/pi-coding-agent/task/settings"),
+        hostSettings()
+      ]);
+      return cfgTaskDisabledAgents.get(settings);
+    },
+    runSearchQuery: async (args, options) => (await import("@oh-my-pi/pi-coding-agent")).runSearchQuery(args, options),
+    loadMCPConfigs: async (cwd) => (await import("@oh-my-pi/pi-coding-agent/mcp/config")).loadAllMCPConfigs(cwd),
+    discoverMCPServers: async (cwd) => (await import("@oh-my-pi/pi-coding-agent")).discoverMCPServers(cwd),
+    discoverExtensionPaths: async (cwd) => {
+      const [{ discoverExtensionPaths }, { cfgDisabledExtensions }, settings] = await Promise.all([
+        import("@oh-my-pi/pi-coding-agent/extensibility/extensions/loader"),
+        import("@oh-my-pi/pi-coding-agent/extensibility/settings"),
+        hostSettings()
+      ]);
+      return discoverExtensionPaths([], cwd, cfgDisabledExtensions.get(settings));
+    },
+    loadSkills: async (cwd) => {
+      const [{ loadSkills }, { cfgDisabledExtensions, cfgSkills }, settings] = await Promise.all([
+        import("@oh-my-pi/pi-coding-agent"),
+        import("@oh-my-pi/pi-coding-agent/extensibility/settings"),
+        hostSettings()
+      ]);
+      return loadSkills({
+        ...cfgSkills.get(settings),
+        cwd,
+        disabledExtensions: cfgDisabledExtensions.get(settings)
+      });
+    },
+    run: runCommand2
   };
 }
 
+// ../pi-shared/src/legion-claim-core.ts
+async function bootLegionClaim(host2) {
+  const { daemon } = host2;
+  let claim;
+  try {
+    claim = await daemon.register(host2.registration);
+  } catch (error48) {
+    if (!(error48 instanceof LegionDaemonApiError))
+      throw error48;
+    host2.log(`claims/register registration failed (${error48.status}): ${error48.detail}`);
+    if (error48.status < 400 || error48.status >= 500)
+      throw error48;
+    host2.stop();
+    return;
+  }
+  const { measure } = host2;
+  const measuring = measure === undefined ? undefined : Promise.resolve().then(() => measure(claim)).catch((error48) => {
+    host2.log(`capability measurement failed; ready carries no report: ${messageFor(error48)}`);
+    return;
+  });
+  try {
+    await host2.afterRegister?.(claim);
+    host2.setCapability({
+      sessionID: host2.registration.sessionId,
+      tree: claim.tree,
+      issue: claim.issue,
+      role: claim.role,
+      secret: claim.secret
+    });
+    await host2.claimRole(claim.claimToken);
+    const capabilities = await measuring;
+    const ready = {
+      claimToken: claim.claimToken,
+      sessionId: host2.registration.sessionId,
+      secret: claim.secret,
+      generation: claim.generation,
+      ...capabilities === undefined ? {} : { capabilities }
+    };
+    await callReadyWithRetry("claims/ready", () => daemon.ready(ready));
+    host2.onRoleRegained(async (role, reason) => {
+      if (role !== claim.claimToken)
+        return;
+      try {
+        await callReadyWithRetry("claims/ready after role regain", () => daemon.ready(ready));
+        host2.log(`re-ran claims/ready after role ${role} was ${reason}`);
+      } catch (error48) {
+        host2.log(`claims/ready after role ${role} was ${reason} failed; the daemon's queued task stays undelivered until the next regain or boot: ${messageFor(error48)}`);
+      }
+    });
+  } catch (error48) {
+    host2.log(`claim boot failed after claims/register registered ${claim.claimToken}; ${host2.stopping}: ${messageFor(error48)}`);
+    host2.stop();
+  }
+}
+// package.json
+var package_default = {
+  name: "@sjawhar/pi-legion",
+  version: "10.13.0",
+  license: "Apache-2.0",
+  type: "module",
+  omp: {
+    extensions: [
+      "dist/legion.js"
+    ],
+    skills: [
+      "dist/skills"
+    ]
+  },
+  legion: {
+    daemonApiVersion: 32
+  },
+  repository: {
+    type: "git",
+    url: "https://github.com/sjawhar/legion"
+  },
+  files: [
+    "dist",
+    "agents"
+  ],
+  scripts: {
+    build: "bun build extensions/legion.ts --outdir dist --target bun --format esm --external @oh-my-pi/pi-coding-agent --external @oh-my-pi/pi-tui --external @oh-my-pi/pi-utils",
+    prepack: "../../scripts/pi-plugin-prepack.sh",
+    postpack: "rm -rf dist/skills",
+    typecheck: "bunx tsc --noEmit",
+    test: "bun test",
+    lint: "bunx biome lint extensions/ src/"
+  },
+  devDependencies: {
+    "@biomejs/biome": "^2.3.14",
+    "@legion/contracts": "workspace:*",
+    "@legion/envoy-client": "workspace:*",
+    "@legion/pi-shared": "workspace:*",
+    "@oh-my-pi/pi-utils": "^18.6.0",
+    "@types/bun": "latest",
+    typescript: "^5.3.0",
+    zod: "4.3.6"
+  }
+};
+
+// src/classify.ts
+function classifySession(env) {
+  if (env.LEGION_CONTROLLER !== undefined && env.LEGION_TREE !== undefined) {
+    throw new Error("Legion session has both controller and tree launch markers");
+  }
+  if (env.LEGION_CONTROLLER === "1")
+    return { kind: "controller" };
+  if (env.LEGION_ROLE === undefined)
+    return { kind: "not-legion" };
+  if (!isLegionRole(env.LEGION_ROLE)) {
+    throw new Error(`LEGION_ROLE "${env.LEGION_ROLE}" is not a Legion role`);
+  }
+  const tree = requiredEnvironment(env, "LEGION_TREE");
+  const issue2 = requiredEnvironment(env, "LEGION_ISSUE");
+  if (env.LEGION_ROLE === "architect" && issue2 === tree) {
+    return { kind: "root-architect", tree };
+  }
+  return { kind: "phase-worker", role: env.LEGION_ROLE, tree, issue: issue2 };
+}
+function requiredEnvironment(env, key) {
+  const value = env[key];
+  if (!value)
+    throw new Error(`${key} is required for Legion`);
+  return value;
+}
+function requiredSecret(env, key) {
+  const fileKey = `${key}_FILE`;
+  const file2 = env[fileKey];
+  if (file2 !== undefined)
+    return readSecretFile(fileKey, file2);
+  return requiredEnvironment(env, key);
+}
+function requiredControllerCapability(env) {
+  if (env.LEGION_CONTROLLER_SECRET_FILE !== undefined) {
+    return readSecretFile("LEGION_CONTROLLER_SECRET_FILE", env.LEGION_CONTROLLER_SECRET_FILE);
+  }
+  const secret = env.LEGION_CONTROLLER_SECRET;
+  if (!secret) {
+    throw new Error("LEGION_CONTROLLER_SECRET or LEGION_CONTROLLER_SECRET_FILE is required to claim the controller. " + "Launch OMP with one of them in its environment before running /legion-claim-controller.");
+  }
+  return secret;
+}
+
 // src/jj-attribution.ts
 import { mkdir, rename, writeFile } from "fs/promises";
 import path4 from "path";
@@ -16783,95 +17049,35 @@ commit_trailers = '"Omp-Session: ${id}"'
 }
 
 // src/claim-session.ts
-var READY_RETRY_ATTEMPTS = 3;
-var READY_RETRY_DELAY_MS = 1000;
-function isNetworkOrTimeoutError(error48) {
-  if (!(error48 instanceof Error))
-    return false;
-  if (error48.name === "NetworkError" || error48.name === "TimeoutError")
-    return true;
-  const code = "code" in error48 && typeof error48.code === "string" ? error48.code : undefined;
-  return code === "ConnectionRefused" || code === "ConnectionTimeout" || code === "EAI_AGAIN" || code === "ECONNREFUSED" || code === "ECONNRESET" || code === "EHOSTUNREACH" || code === "ENETUNREACH" || code === "ENOTFOUND" || code === "ETIMEDOUT" || error48 instanceof TypeError && (error48.message === "Failed to fetch" || error48.message === "fetch failed");
-}
-function exitOnRegistrationRefusal(error48, exitProcess) {
-  if (error48 instanceof LegionDaemonApiError) {
-    console.error(`[legion] claims/register registration failed (${error48.status}): ${error48.detail}`);
-    if (error48.status >= 400 && error48.status < 500)
-      exitProcess(1);
-  }
-  throw error48;
-}
-async function callReadyWithRetry(label, call) {
-  for (let attempt = 1;; attempt++) {
-    try {
-      await call();
-      return;
-    } catch (error48) {
-      const retryable = error48 instanceof LegionDaemonApiError ? error48.status >= 500 && error48.status < 600 : isNetworkOrTimeoutError(error48);
-      if (!retryable)
-        throw error48;
-      if (attempt === READY_RETRY_ATTEMPTS) {
-        console.error(`[legion] ${label} failed after ${attempt} attempts: ${messageFor(error48)}`);
-        throw error48;
-      }
-      console.error(`[legion] ${label} failed (attempt ${attempt}/${READY_RETRY_ATTEMPTS}), retrying: ${messageFor(error48)}`);
-      const retryDelay = Promise.withResolvers();
-      setTimeout(retryDelay.resolve, READY_RETRY_DELAY_MS);
-      await retryDelay.promise;
-    }
-  }
-}
 function createClaimSession(deps) {
   let capability;
   let booting;
   const boot = async (context, sessionID, bootToken, daemon) => {
     const { sessionFile, agentId } = await deps.persistedTranscript(context);
     recordBootstrappedSession(sessionFile);
-    const claim = await daemon.register({
-      bootToken,
-      sessionId: sessionID,
-      ompSessionFile: sessionFile,
-      agentId,
-      pluginContract: package_default.legion.daemonApiVersion
-    }).catch((error48) => exitOnRegistrationRefusal(error48, deps.exitProcess));
-    const measuring = Promise.resolve().then(() => deps.measureCapabilities(context, { issue: claim.issue, promptAgents: claim.promptAgents })).catch((error48) => {
-      console.error(`[legion] capability measurement failed; ready carries no report: ${messageFor(error48)}`);
-      return;
-    });
-    try {
-      const stateDir = requiredEnvironment(process.env, "LEGION_STATE_DIR");
-      await exportJjSessionAttribution(sessionFile, stateDir);
-      capability = {
-        sessionID,
-        tree: claim.tree,
-        issue: claim.issue,
-        role: claim.role,
-        secret: claim.secret
-      };
-      await claimEnvoyRole(sessionID, claim.claimToken, context);
-      const capabilities = await measuring;
-      const ready = {
-        claimToken: claim.claimToken,
+    await bootLegionClaim({
+      daemon,
+      registration: {
+        bootToken,
         sessionId: sessionID,
-        secret: claim.secret,
-        generation: claim.generation,
-        ...capabilities === undefined ? {} : { capabilities }
-      };
-      await callReadyWithRetry("claims/ready", () => daemon.ready(ready));
-      onEnvoyRoleRegained(async (role, reason) => {
-        if (role !== claim.claimToken)
-          return;
-        try {
-          await callReadyWithRetry("claims/ready after role regain", () => daemon.ready(ready));
-          console.error(`[legion] re-ran claims/ready after role ${role} was ${reason}`);
-        } catch (error48) {
-          console.error(`[legion] claims/ready after role ${role} was ${reason} failed; the daemon's queued task stays undelivered until the next regain or boot: ${messageFor(error48)}`);
-        }
-      });
-    } catch (error48) {
-      console.error(`[legion] claim boot failed after claims/register registered ${claim.claimToken}; exiting so the daemon launches it again: ${messageFor(error48)}`);
-      deps.exitProcess(1);
-    }
+        ompSessionFile: sessionFile,
+        agentId,
+        pluginContract: package_default.legion.daemonApiVersion
+      },
+      measure: (claim) => deps.measureCapabilities(context, {
+        issue: claim.issue,
+        promptAgents: claim.promptAgents
+      }),
+      afterRegister: () => exportJjSessionAttribution(sessionFile, requiredEnvironment(process.env, "LEGION_STATE_DIR")),
+      setCapability: (registered) => {
+        capability = registered;
+      },
+      claimRole: (role) => claimEnvoyRole(sessionID, role, context),
+      onRoleRegained: onEnvoyRoleRegained,
+      log: (line) => console.error(`[legion] ${line}`),
+      stopping: "exiting so the daemon launches it again",
+      stop: () => deps.exitProcess(1)
+    });
   };
   const bootstrap = async (context) => {
     const sessionID = context.sessionManager.getSessionId();
@@ -17017,131 +17223,6 @@ function createControllerSession(deps) {
   return { claim, handleSessionStart, reclaimAfterSessionChange, isClaimedSession, mintGrant };
 }
 
-// src/handoff-commit.ts
-import { execFile as execFile2 } from "child_process";
-import { promisify as promisify2 } from "util";
-
-// src/git-lock.ts
-import { lstat } from "fs/promises";
-var GIT_LOCK_REPORTS = [
-  /The lockfile at '([^']+)' might need manual deletion/g,
-  /Unable to create '([^']+)': File exists/g
-];
-function age(ms) {
-  const total = Math.round(Math.abs(ms) / 1000);
-  const sign = ms < 0 && total > 0 ? "-" : "";
-  const hours = Math.floor(total / 3600);
-  const minutes = Math.floor(total % 3600 / 60);
-  const seconds = total % 60;
-  if (hours > 0)
-    return `${sign}${hours}h${minutes}m${seconds}s`;
-  if (minutes > 0)
-    return `${sign}${minutes}m${seconds}s`;
-  return `${sign}${seconds}s`;
-}
-async function staleGitLockNote(output, now = Date.now()) {
-  const locks = new Set;
-  for (const report of GIT_LOCK_REPORTS) {
-    for (const match of output.matchAll(report))
-      locks.add(match[1]);
-  }
-  const notes = [];
-  for (const lock of locks) {
-    const written = await lstat(lock).then((info) => info.mtimeMs, () => {
-      return;
-    });
-    if (written === undefined)
-      continue;
-    notes.push(`git lock ${lock} was last written ${age(now - written)} ago and blocks this command. Do not remove it while the issue's pod runs: another role's git, which this container cannot see, may hold it. Replacing the issue's pod removes it. Under the tmux runtime nothing removes it: remove it by hand only once no git or jj process on the host is using the repository.`);
-  }
-  return notes.join(`
-`);
-}
-
-// src/handoff-commit.ts
-var FILE_BACKED = {
-  planning: { word: "plan", role: "planner" },
-  implementing: { word: "implement", role: "implementer" },
-  testing: { word: "test", role: "tester" },
-  reviewing: { word: "review", role: "reviewer" }
-};
-var execFileAsync2 = promisify2(execFile2);
-var pathJj = async (args, cwd) => {
-  try {
-    const { stdout } = await execFileAsync2("jj", ["-R", cwd, ...args], {
-      cwd,
-      maxBuffer: 16 * 1024 * 1024
-    });
-    return stdout.trim();
-  } catch (error48) {
-    const detail = error48 !== null && typeof error48 === "object" && "stderr" in error48 ? String(error48.stderr).trim() : error48 instanceof Error ? error48.message : String(error48);
-    const note = await staleGitLockNote(detail);
-    throw new Error(`jj ${args.join(" ")} failed: ${detail}${note === "" ? "" : `
-${note}`}`);
-  }
-};
-function requiredVariable(env, name) {
-  const value = env[name];
-  if (value === undefined || value === "") {
-    throw new Error(`${name} is not set, so handoff_complete cannot find the commit to report`);
-  }
-  return value;
-}
-async function findHandoffCommit(input) {
-  const { phase, role, env } = input;
-  const jj = input.jj ?? pathJj;
-  const workspace = requiredVariable(env, "LEGION_WORKSPACE");
-  const handoff = FILE_BACKED[phase];
-  if (handoff === undefined || handoff.role !== role) {
-    return jj(["log", "-r", "@-", "--no-graph", "-T", "commit_id"], workspace);
-  }
-  const issue2 = requiredVariable(env, "LEGION_ISSUE");
-  if (!DISPATCH_KEY_PATTERN.test(issue2)) {
-    throw new Error(`LEGION_ISSUE ${JSON.stringify(issue2)} is not a Dispatch issue key like LEGION-1`);
-  }
-  const file2 = `.legion/${issue2}/${handoff.word}.json`;
-  const fileset = `root:${JSON.stringify(file2)}`;
-  if (await jj(["diff", "-r", "@", "--name-only", fileset], workspace) !== "") {
-    throw new Error(`${file2} has changes in the working copy that are not committed: commit this phase's handoff before completing`);
-  }
-  if (await jj(["file", "list", "-r", "@", fileset], workspace) === "") {
-    throw new Error(`${file2} is missing from the workspace: write this phase's handoff, then commit and push it before completing`);
-  }
-  const carrying = await jj([
-    "log",
-    "-r",
-    `latest((::@- ~ ::trunk()) & files(${fileset}))`,
-    "--no-graph",
-    "-T",
-    "commit_id"
-  ], workspace);
-  if (carrying === "") {
-    throw new Error(`${file2} is not committed on this issue's branch (only the base branch carries it): write and commit this phase's handoff`);
-  }
-  const user = env.JJ_USER;
-  if (user !== undefined && user !== "") {
-    const author = await jj(["log", "-r", carrying, "--no-graph", "-T", 'author.name() ++ "\\n" ++ author.email()'], workspace);
-    const [name = "", email3 = ""] = author.split(`
-`, 2);
-    if (name !== user || email3 !== (env.JJ_EMAIL ?? "")) {
-      throw new Error(`${file2} is carried by commit ${carrying}, authored by ${name} <${email3}>, not this pane's ${user}: run jj new, then write and commit this phase's handoff again`);
-    }
-  }
-  const bookmark = `legion/${issue2}`;
-  const pushed = await jj([
-    "log",
-    "-r",
-    `${carrying} & ::remote_bookmarks(exact:${JSON.stringify(bookmark)}, exact:"origin")`,
-    "--no-graph",
-    "-T",
-    "commit_id"
-  ], workspace);
-  if (pushed === "") {
-    throw new Error(`${file2} is carried by commit ${carrying}, which is not on ${bookmark}@origin: push the issue branch, then complete again`);
-  }
-  return carrying;
-}
-
 // src/phase-stall.ts
 var PHASE_STALL_ENTRY = "legion-phase-stall";
 var WAITING_REPLY = /^\W*WAITING\b/m;
@@ -17223,6 +17304,115 @@ async function applySessionTitle(pi, context, title) {
   await pi.setSessionName(title);
 }
 
+// ../pi-shared/src/legion-phase-ops.ts
+var PHASE_OPS = ["read_record", "handoff_complete", "request_backward_move"];
+function isPhaseOp(op) {
+  return PHASE_OPS.includes(op);
+}
+var requiredString = (op, field) => {
+  const message = `${op} requires ${field}`;
+  return exports_external.string({ error: message }).refine((value) => value.trim() !== "", { error: message });
+};
+var operation = (op, shape) => exports_external.strictObject({ op: exports_external.literal(op), ...shape }, {
+  error: (issue2) => issue2.code === "unrecognized_keys" ? issue2.keys.map((key) => `${op} does not accept field "${key}"`).join("; ") : undefined
+});
+var PhaseOpArguments = exports_external.discriminatedUnion("op", [
+  operation("read_record", { issue: requiredString("read_record", "issue") }),
+  operation("handoff_complete", {
+    summary: requiredString("handoff_complete", "summary"),
+    verdict: exports_external.enum(["pass", "fail"], { error: "handoff_complete's verdict is pass or fail" }).optional(),
+    ready: exports_external.boolean({ error: "handoff_complete's ready is true or false" }).optional()
+  }),
+  operation("request_backward_move", {
+    to: exports_external.enum(LEGION_PHASE_BACKWARD_TARGETS, {
+      error: (issue2) => typeof issue2.input === "string" && issue2.input.trim() !== "" ? `request_backward_move's to is one of ${LEGION_PHASE_BACKWARD_TARGETS.join(", ")}` : "request_backward_move requires to"
+    }),
+    reason: requiredString("request_backward_move", "reason")
+  })
+], {
+  error: (issue2) => issue2.code === "invalid_union" ? `op is one of ${PHASE_OPS.join(", ")}` : undefined
+});
+function phaseOpParameters(zod) {
+  const api2 = zodSchemaApi(zod);
+  const fields = {};
+  for (const option of PhaseOpArguments.options) {
+    for (const [name, declared] of Object.entries(option.shape)) {
+      if (name === "op")
+        continue;
+      const field = declared instanceof exports_external.ZodOptional ? declared.unwrap() : declared;
+      if (field instanceof exports_external.ZodString)
+        fields[name] = api2.string().optional();
+      else if (field instanceof exports_external.ZodBoolean)
+        fields[name] = api2.boolean().optional();
+      else if (field instanceof exports_external.ZodEnum) {
+        const [first, ...rest] = field.options.map(String);
+        if (first === undefined)
+          throw new Error(`phase op field ${name} has no values`);
+        fields[name] = api2.enum([first, ...rest]).optional();
+      } else
+        throw new Error(`phase op field ${name} has a kind phaseOpParameters does not map`);
+    }
+  }
+  const byField = fields;
+  return byField;
+}
+function legionToolDescription(host2) {
+  return "Perform the workflow operation the Legion daemon assigned this role. The daemon advances phases; this tool cannot spawn workers. " + (host2.before ?? "") + "handoff_complete (phase workers and sub-architects; the daemon accepts a completion only from the role working the issue's current phase) " + "reports this phase complete: `summary` (two sentences for the architect, or the merger's READY packet), `verdict` pass|fail from the tester alone " + "(the daemon refuses a verdict from any other role), `ready: true` for the merger's READY. A handoff is a committed file, `.legion/<issue>/<phase>.json`: the pushed commit " + "carrying it is found here, with the pane's jj, and reported, so write it, commit it and push the branch (`jj git push`) before calling; this call " + "refuses, posting nothing, a handoff still in the working copy, missing, not committed on this branch, carried by another pane's commit, or not yet " + "on `legion/<issue>@origin`, each naming the remedy. The daemon refuses HANDOFF_NOT_NEW (the commit is the one you reported for your previous " + "phase: write and commit this phase's handoff) and, for READY, each refusal the merger's role names; a refused completion changed " + "nothing, so fix what it names and complete again. An accepted READY whose `note` begins MANUAL_MERGE_REQUIRED: is one a person merges: arm nothing. " + (host2.after ?? "") + `What a later phase needs goes in your handoff; a question for another live role goes to its role topic with ${host2.envoyPublish}.`;
+}
+async function mintClaimGrant(daemon, claim) {
+  const { grantId } = await daemon.grant({
+    sessionId: claim.sessionID,
+    secret: claim.secret,
+    tree: claim.tree,
+    issue: claim.issue
+  });
+  return grantId;
+}
+function recordFrom(state, issue2) {
+  const record2 = state.issues[issue2];
+  if (record2 === undefined)
+    throw new Error(`The daemon has no record for ${issue2}`);
+  return record2;
+}
+var ROOT_COMPLETION_REFUSAL = "handoff_complete is not available to a root architect session, which runs no phase";
+async function executePhaseOp(runtime, input) {
+  const { daemon, claim } = runtime;
+  const parsed = PhaseOpArguments.safeParse(input);
+  const issues = parsed.success ? [] : parsed.error.issues;
+  const unknownFields = issues.filter((issue2) => issue2.code === "unrecognized_keys");
+  const fieldProblems = issues.filter((issue2) => issue2.code !== "unrecognized_keys");
+  const rootCompletion = typeof input === "object" && input !== null && "op" in input && input.op === "handoff_complete" && claim.role === "architect" && claim.issue === claim.tree;
+  if (rootCompletion) {
+    throw new Error([...unknownFields.map((issue2) => issue2.message), ROOT_COMPLETION_REFUSAL].join("; "));
+  }
+  if (!parsed.success) {
+    throw new Error([...unknownFields, ...fieldProblems].map((issue2) => issue2.message).join("; "));
+  }
+  const args = parsed.data;
+  switch (args.op) {
+    case "read_record":
+      return { record: recordFrom(await daemon.state(), args.issue) };
+    case "handoff_complete": {
+      const { phase } = recordFrom(await daemon.state(), claim.issue);
+      const commit = await runtime.handoffCommit(phase, claim.role);
+      return daemon.handoffComplete({
+        grantId: await mintClaimGrant(daemon, claim),
+        summary: args.summary,
+        verdict: args.verdict ?? "",
+        ready: args.ready ?? false,
+        commit
+      });
+    }
+    case "request_backward_move":
+      await daemon.phaseBackward({
+        grantId: await mintClaimGrant(daemon, claim),
+        to: args.to,
+        reason: args.reason
+      });
+      return {};
+  }
+}
+
 // ../pi-shared/src/tool-result.ts
 function toolSuccess(text, details = {}, images = []) {
   return { content: [{ type: "text", text }, ...imageBlocks(images)], details };
@@ -17251,14 +17441,11 @@ var OPERATIONS = {
 var OPERATION_FIELDS = {
   register_gate: ["issue", "artifactId", "version"],
   release_children: ["issues"],
-  request_backward_move: ["to", "reason"],
   retry_or_escalate: ["issue", "decision"],
   sign_off: ["issue"],
   close_root: ["issue", "reason"],
   park_child: ["issue"],
   rerun_child: ["issue"],
-  read_record: ["issue"],
-  handoff_complete: ["summary", "verdict", "ready"],
   read_state: [],
   set_status: ["issue", "status"]
 };
@@ -17266,137 +17453,93 @@ var ISSUE_STATUSES2 = ["todo", "backlog", "icebox"];
 var jsonSuccess = (details) => toolSuccess(JSON.stringify(details), details);
 function toolSchema(pi) {
   const z2 = pi.zod;
+  const phase = phaseOpParameters(z2);
   return z2.object({
-    op: z2.enum([
-      "register_gate",
-      "release_children",
-      "request_backward_move",
-      "retry_or_escalate",
-      "sign_off",
-      "close_root",
-      "park_child",
-      "rerun_child",
-      "read_record",
-      "handoff_complete",
-      "read_state",
-      "set_status"
-    ]),
-    issue: z2.string().optional(),
+    op: z2.enum([...OPERATIONS.architect, ...OPERATIONS.controller]),
+    issue: phase.issue,
     artifactId: z2.string().describe("register_gate's root spec document: its artifact id, slug, or filename, as a dispatch command's --artifact takes it").optional(),
     version: z2.number().optional(),
     issues: z2.array(z2.string()).optional(),
-    to: z2.enum(LEGION_PHASE_BACKWARD_TARGETS).optional(),
-    reason: z2.string().optional(),
+    to: phase.to,
+    reason: phase.reason,
     decision: z2.enum(["retry", "escalate"]).optional(),
-    summary: z2.string().optional(),
-    verdict: z2.enum(["pass", "fail"]).optional(),
-    ready: z2.boolean().optional(),
+    summary: phase.summary,
+    verdict: phase.verdict,
+    ready: phase.ready,
     status: z2.enum(ISSUE_STATUSES2).optional()
   });
 }
-function requiredString(parameters, operation, name) {
+function requiredString2(parameters, operation2, name) {
   const value = parameters[name];
   if (typeof value !== "string" || value.trim() === "")
-    throw new Error(`${operation} requires ${name}`);
+    throw new Error(`${operation2} requires ${name}`);
   return value;
 }
-function assertOperationInput(parameters, operation) {
-  const fields = OPERATION_FIELDS[operation];
+function assertOperationInput(parameters, operation2) {
+  const fields = OPERATION_FIELDS[operation2];
   if (fields === undefined)
-    throw new Error(`Unsupported legion operation: ${operation}`);
+    throw new Error(`Unsupported legion operation: ${operation2}`);
   for (const name of Object.keys(parameters)) {
     if (name !== "op" && !fields.includes(name)) {
-      throw new Error(`${operation} does not accept field "${name}"`);
+      throw new Error(`${operation2} does not accept field "${name}"`);
     }
   }
 }
-function recordFrom(state, issue2) {
-  const record2 = state.issues[issue2];
-  if (record2 === undefined)
-    throw new Error(`The daemon has no record for ${issue2}`);
-  return record2;
-}
 function createLegionTool(deps) {
   const { pi, daemon, session, controllerGrant, onPhaseCompleted, handoffCommit, resolveDocument } = deps;
-  const grantFor = async (client, active) => (await client.grant({
-    sessionId: active.sessionId,
-    secret: active.secret,
-    tree: active.tree,
-    issue: active.issue
-  })).grantId;
   return {
     name: "legion",
     label: "legion",
-    description: "Perform the workflow operation the Legion daemon assigned this role. The daemon advances phases; this tool cannot spawn workers. " + "handoff_complete (phase workers and sub-architects; the daemon accepts a completion only from the role working the issue's current phase) " + "reports this phase complete: `summary` (two sentences for the architect, or the merger's READY packet), `verdict` pass|fail from the tester alone " + "(the daemon refuses a verdict from any other role), `ready: true` for the merger's READY. A handoff is a committed file, `.legion/<issue>/<phase>.json`: the pushed commit " + "carrying it is found here, with the pane's jj, and reported, so write it, commit it and push the branch (`jj git push`) before calling; this call " + "refuses, posting nothing, a handoff still in the working copy, missing, not committed on this branch, carried by another pane's commit, or not yet " + "on `legion/<issue>@origin`, each naming the remedy. The daemon refuses HANDOFF_NOT_NEW (the commit is the one you reported for your previous " + "phase: write and commit this phase's handoff) and, for READY, each refusal the merger's role names; a refused completion changed " + "nothing, so fix what it names and complete again. An accepted READY whose `note` begins MANUAL_MERGE_REQUIRED: is one a person merges: arm nothing. " + "The controller's read_state returns the daemon's whole state and set_status moves an issue to todo, backlog or icebox. " + "What a later phase needs goes in your handoff; a question for another live role goes to its role topic with envoy_publish.",
+    description: legionToolDescription({
+      envoyPublish: "envoy_publish",
+      after: "The controller's read_state returns the daemon's whole state and set_status moves an issue to todo, backlog or icebox. "
+    }),
     defaultInactive: true,
     parameters: toolSchema(pi),
     execute: async (_id, parameters, _signal, _onUpdate, context) => {
       try {
         const active = session(context);
-        const operation = requiredString(parameters, "legion", "op");
-        if (!OPERATIONS[active.kind].includes(operation)) {
-          throw new Error(`${operation} is not available to a ${active.kind} session`);
+        const operation2 = requiredString2(parameters, "legion", "op");
+        if (!OPERATIONS[active.kind].includes(operation2)) {
+          throw new Error(`${operation2} is not available to a ${active.kind} session`);
+        }
+        if (active.kind !== "controller" && isPhaseOp(operation2)) {
+          const answer = await executePhaseOp({ daemon: daemon(), claim: active, handoffCommit }, parameters);
+          if (operation2 === "handoff_complete")
+            onPhaseCompleted(context);
+          return jsonSuccess(answer);
         }
-        assertOperationInput(parameters, operation);
+        assertOperationInput(parameters, operation2);
         const client = daemon();
         if (active.kind === "controller") {
-          if (operation === "read_state")
+          if (operation2 === "read_state")
             return jsonSuccess(await client.state());
-          const issue2 = requiredString(parameters, operation, "issue");
+          const issue2 = requiredString2(parameters, operation2, "issue");
           const status = ISSUE_STATUSES2.find((candidate) => candidate === parameters.status);
           if (status === undefined) {
             throw new Error(`set_status requires status ${ISSUE_STATUSES2.join(", ")}`);
           }
-          const { grantId } = await controllerGrant(active.sessionId);
+          const { grantId } = await controllerGrant(active.sessionID);
           await client.issueStatus({ grantId, issue: issue2, status });
           return jsonSuccess({});
         }
-        switch (operation) {
-          case "read_record": {
-            const issue2 = requiredString(parameters, operation, "issue");
-            return jsonSuccess({ record: recordFrom(await client.state(), issue2) });
-          }
-          case "handoff_complete": {
-            if (active.kind === "architect" && active.issue === active.tree) {
-              throw new Error("handoff_complete is not available to a root architect session, which runs no phase");
-            }
-            const summary = requiredString(parameters, operation, "summary");
-            const { verdict, ready } = parameters;
-            if (verdict !== undefined && verdict !== "pass" && verdict !== "fail") {
-              throw new Error("handoff_complete's verdict is pass or fail");
-            }
-            if (ready !== undefined && typeof ready !== "boolean") {
-              throw new Error("handoff_complete's ready is true or false");
-            }
-            const { phase } = recordFrom(await client.state(), active.issue);
-            const commit = await handoffCommit(phase, active.role);
-            const grantId = await grantFor(client, active);
-            const answer = await client.handoffComplete({
-              grantId,
-              summary,
-              verdict: verdict ?? "",
-              ready: ready ?? false,
-              commit
-            });
-            onPhaseCompleted(context);
-            return jsonSuccess(answer);
-          }
+        switch (operation2) {
           case "register_gate": {
             const version2 = parameters.version;
             if (typeof version2 !== "number" || !Number.isSafeInteger(version2) || version2 < 1) {
               throw new Error("register_gate requires a positive integer version");
             }
-            const issue2 = requiredString(parameters, operation, "issue");
+            const issue2 = requiredString2(parameters, operation2, "issue");
             if (active.issue !== active.tree) {
               throw new Error(`the design gate belongs to the tree root ${active.tree}; its root architect registers it`);
             }
             if (issue2 !== active.issue) {
               throw new Error(`the design gate belongs to the tree root ${active.tree}; register it there`);
             }
-            const reference = requiredString(parameters, operation, "artifactId");
+            const reference = requiredString2(parameters, operation2, "artifactId");
             const isId = LegionGateRegisterRequest.shape.artifactId.safeParse(reference).success;
             const artifactId = isId ? reference : await resolveDocument(issue2, reference);
-            const grantId = await grantFor(client, active);
+            const grantId = await mintClaimGrant(client, active);
             await client.gateRegister({ grantId, issue: issue2, artifactId, version: version2 });
             return jsonSuccess({});
           }
@@ -17405,57 +17548,48 @@ function createLegionTool(deps) {
             if (!Array.isArray(issues) || !issues.every((issue2) => typeof issue2 === "string")) {
               throw new Error("release_children requires issues");
             }
-            const grantId = await grantFor(client, active);
+            const grantId = await mintClaimGrant(client, active);
             return jsonSuccess(await client.waveRelease({ grantId, issues }));
           }
-          case "request_backward_move": {
-            const grantId = await grantFor(client, active);
-            await client.phaseBackward({
-              grantId,
-              to: requiredString(parameters, operation, "to"),
-              reason: requiredString(parameters, operation, "reason")
-            });
-            return jsonSuccess({});
-          }
           case "retry_or_escalate": {
             const decision = parameters.decision;
             if (decision !== "retry" && decision !== "escalate") {
               throw new Error("retry_or_escalate requires decision retry or escalate");
             }
-            const grantId = await grantFor(client, active);
+            const grantId = await mintClaimGrant(client, active);
             await client.phaseRetry({
               grantId,
-              issue: requiredString(parameters, operation, "issue"),
+              issue: requiredString2(parameters, operation2, "issue"),
               decision
             });
             return jsonSuccess({});
           }
           case "sign_off": {
-            const grantId = await grantFor(client, active);
+            const grantId = await mintClaimGrant(client, active);
             await client.signOff({
               grantId,
-              issue: requiredString(parameters, operation, "issue")
+              issue: requiredString2(parameters, operation2, "issue")
             });
             return jsonSuccess({});
           }
           case "close_root": {
-            const grantId = await grantFor(client, active);
+            const grantId = await mintClaimGrant(client, active);
             await client.rootClose({
               grantId,
-              issue: requiredString(parameters, operation, "issue"),
-              reason: requiredString(parameters, operation, "reason")
+              issue: requiredString2(parameters, operation2, "issue"),
+              reason: requiredString2(parameters, operation2, "reason")
             });
             return jsonSuccess({});
           }
           case "park_child":
           case "rerun_child": {
-            const grantId = await grantFor(client, active);
-            const request = { grantId, issue: requiredString(parameters, operation, "issue") };
-            await (operation === "park_child" ? client.childPark(request) : client.childRerun(request));
+            const grantId = await mintClaimGrant(client, active);
+            const request = { grantId, issue: requiredString2(parameters, operation2, "issue") };
+            await (operation2 === "park_child" ? client.childPark(request) : client.childRerun(request));
             return jsonSuccess({});
           }
           default:
-            throw new Error(`Unsupported legion operation: ${operation}`);
+            throw new Error(`Unsupported legion operation: ${operation2}`);
         }
       } catch (error48) {
         return toolFailure(error48);
@@ -17691,17 +17825,10 @@ function legionExtension(pi) {
         const sessionID = context.sessionManager.getSessionId();
         const active = claimSession.capability(sessionID);
         if (active !== undefined) {
-          return {
-            kind: active.role === "architect" ? "architect" : "phase-worker",
-            role: active.role,
-            sessionId: active.sessionID,
-            tree: active.tree,
-            issue: active.issue,
-            secret: active.secret
-          };
+          return { kind: active.role === "architect" ? "architect" : "phase-worker", ...active };
         }
         if (controllerSession.isClaimedSession(sessionID)) {
-          return { kind: "controller", sessionId: sessionID };
+          return { kind: "controller", sessionID };
         }
         throw new Error("legion is available only to this session's registered claim");
       },