@sma1lboy/kobe 0.7.29 → 0.7.30

package/dist/cli/index.js

@@ -90,7 +90,7 @@ var init_package = __esm(() => {
   package_default = {
     $schema: "https://json.schemastore.org/package.json",
     name: "@sma1lboy/kobe",
-    version: "0.7.29",
+    version: "0.7.30",
     description: "TUI orchestrator for Claude Code (codename)",
     type: "module",
     packageManager: "bun@1.3.13",
@@ -395,6 +395,9 @@ import { mkdir, readFile as readFileAsync, readdir as readdirAsync } from "fs/pr
 function shQuote(s) {
   return `'${s.replace(/'/g, "'\\''")}'`;
 }
+function shToken(s) {
+  return /^[A-Za-z0-9_@%+=:,./-]+$/.test(s) ? s : shQuote(s);
+}
 function shJoin(argv) {
   return argv.map(shQuote).join(" ");
 }
@@ -545,7 +548,8 @@ class RemoteExecHost {
   }
   wrapCommand(command, opts = {}) {
     const remote = opts.cwd ? `cd ${shQuote(opts.cwd)} && ${command}` : command;
-    return `${sshConnectArgs(this.spec, { tty: opts.tty }).join(" ")} ${shQuote(remote)}`;
+    const connect = sshConnectArgs(this.spec, { tty: opts.tty }).map(shToken).join(" ");
+    return `${connect} ${shQuote(remote)}`;
   }
 }
 var defaultSpawner = (argv, env) => {
@@ -1025,7 +1029,20 @@ var init_add_remote = __esm(() => {
 });
 
 // src/types/task.ts
-var toTaskId = (id) => id, DEFAULT_TASK_VENDOR = "claude";
+function isTaskStatus(value) {
+  return typeof value === "string" && TASK_STATUSES.includes(value);
+}
+var toTaskId = (id) => id, DEFAULT_TASK_VENDOR = "claude", TASK_STATUSES;
+var init_task = __esm(() => {
+  TASK_STATUSES = [
+    "backlog",
+    "in_progress",
+    "in_review",
+    "done",
+    "canceled",
+    "error"
+  ];
+});
 
 // src/orchestrator/index/ulid.ts
 function encodeTime(now, len) {
@@ -1363,7 +1380,7 @@ function coerceTask(value) {
   if (typeof v.id !== "string" || typeof v.title !== "string" || typeof v.repo !== "string" || typeof v.branch !== "string" || typeof v.worktreePath !== "string" || typeof v.status !== "string" || typeof v.createdAt !== "string" || typeof v.updatedAt !== "string") {
     return null;
   }
-  if (!isTaskStatus(v.status))
+  if (!isTaskStatus2(v.status))
     return null;
   const archived = typeof v.archived === "boolean" ? v.archived : false;
   const kind = v.kind === "main" ? "main" : "task";
@@ -1420,11 +1437,12 @@ function isPRCheckState(v) {
 function isVendorId(v) {
   return v === "claude" || v === "codex";
 }
-function isTaskStatus(s) {
+function isTaskStatus2(s) {
   return s === "backlog" || s === "in_progress" || s === "in_review" || s === "done" || s === "canceled" || s === "error";
 }
 var CURRENT_VERSION2 = 3;
 var init_store2 = __esm(() => {
+  init_task();
   init_ulid();
 });
 
@@ -3121,9 +3139,10 @@ function deriveTitleFromPrompt(prompt) {
   const collapsed = prompt.replace(/\s+/g, " ").trim();
   if (collapsed.length === 0)
     return "";
-  if (collapsed.length <= TITLE_CHAR_CAP)
+  const points = [...collapsed];
+  if (points.length <= TITLE_CHAR_CAP)
     return collapsed;
-  return `${collapsed.slice(0, TITLE_CHAR_CAP)}\u2026`;
+  return `${points.slice(0, TITLE_CHAR_CAP).join("")}\u2026`;
 }
 function autoBranch(title, taskId) {
   const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 32);
@@ -3689,11 +3708,6 @@ class Orchestrator {
     return this.tasksAcc;
   }
   subscribeTasks(listener) {
-    try {
-      listener(this.store.list());
-    } catch (err) {
-      console.error("[kobe Orchestrator] task listener threw on subscribe:", err);
-    }
     return this.store.subscribe(listener);
   }
   dispose() {
@@ -3982,6 +3996,7 @@ var PLACEHOLDER_TASK_TITLE = "(new task)";
 var init_core = __esm(() => {
   init_dev();
   init_repos();
+  init_task();
   init_errors();
   init_slug_allocator();
 });
@@ -4154,6 +4169,7 @@ var init_client_log = __esm(() => {
 
 // ../kobe-daemon/src/client/index.ts
 import { connect } from "net";
+import { StringDecoder } from "string_decoder";
 
 class KobeDaemonClient {
   socketPath;
@@ -4274,7 +4290,9 @@ class KobeDaemonClient {
       };
       socket.once("connect", onConnect);
       socket.once("error", onError);
-      socket.on("data", (chunk) => this.onData(chunk.toString("utf8")));
+      const decoder = new StringDecoder("utf8");
+      this.buffer = "";
+      socket.on("data", (chunk) => this.onData(decoder.write(chunk)));
       socket.on("close", () => this.onSocketClose(socket));
     });
   }
@@ -5067,6 +5085,24 @@ function normalizeClaudeContent(content) {
   return out;
 }
 
+// src/engine/claude-code-local/synthetic.ts
+function isSyntheticClaudeRecord(record) {
+  return record.isMeta === true || record.isCompactSummary === true;
+}
+function isClaudeCommandBreadcrumb(blocks) {
+  if (blocks.length === 0)
+    return false;
+  for (const b of blocks) {
+    if (b.type !== "text")
+      return false;
+    const t = b.text.trim();
+    if (!t.startsWith("<command-name>") && !t.startsWith("<command-message>") && !t.startsWith("<local-command")) {
+      return false;
+    }
+  }
+  return true;
+}
+
 // src/engine/claude-code-local/history.ts
 import { appendFile as appendFile2, mkdir as mkdir4, readFile as readFile2, readdir, stat, unlink as unlink2, writeFile as writeFile2 } from "fs/promises";
 import { homedir as homedir8 } from "os";
@@ -5148,6 +5184,8 @@ function parseJsonl(raw, sessionId) {
   return out;
 }
 function extractMessage(record, fallbackSessionId) {
+  if (isSyntheticClaudeRecord(record))
+    return null;
   const inner = isObject(record.message) ? record.message : record;
   const role = inner.role;
   if (role !== "user" && role !== "assistant" && role !== "system")
@@ -5155,6 +5193,8 @@ function extractMessage(record, fallbackSessionId) {
   if (!("content" in inner))
     return null;
   const blocks = normalizeClaudeContent(inner.content);
+  if (role === "user" && isClaudeCommandBreadcrumb(blocks))
+    return null;
   const ts = typeof record.timestamp === "string" ? record.timestamp : new Date().toISOString();
   const sid = typeof record.sessionId === "string" ? record.sessionId : fallbackSessionId;
   const usage = extractUsage(inner.usage);
@@ -5557,9 +5597,12 @@ async function listRolloutFiles(deps = defaultDeps7) {
   return out;
 }
 async function findRolloutFile(sessionId, deps = defaultDeps7) {
+  if (!sessionId)
+    return;
+  const want = sessionId.toLowerCase();
   const all = await listRolloutFiles(deps);
   for (const p of all) {
-    if (path8.basename(p).endsWith(`-${sessionId}.jsonl`))
+    if (path8.basename(p).match(UUID_AT_END)?.[1]?.toLowerCase() === want)
       return p;
   }
   return;
@@ -5855,7 +5898,7 @@ function deriveCodexUsageMetrics(raw) {
     if (timestampMs !== null && (latestUsageTimestampMs === null || timestampMs > latestUsageTimestampMs)) {
       latestUsageTimestampMs = timestampMs;
       latestUsage = snapshot;
-    } else if (latestUsage === undefined) {
+    } else if (latestUsageTimestampMs === null) {
       latestUsage = snapshot;
     }
   }
@@ -6426,6 +6469,7 @@ async function deriveTitleFromSessionId(vendor, sessionId) {
 var MAX_SESSIONS_SCANNED = 8;
 var init_auto_title = __esm(() => {
   init_registry();
+  init_task();
 });
 
 // src/tui/panes/terminal/launch.ts
@@ -6859,6 +6903,7 @@ var realRunner, realDeps;
 var init_chat_tab_naming = __esm(() => {
   init_auto_title();
   init_client2();
+  init_task();
   realRunner = { capture: runTmuxCapturing, run: runTmux };
   realDeps = {
     runner: realRunner,
@@ -6953,6 +6998,7 @@ var init_auto_title_poller = __esm(() => {
   init_auto_title();
   init_core();
   init_chat_tab_naming();
+  init_task();
 });
 
 // ../kobe-daemon/src/daemon/event-bus.ts
@@ -7261,24 +7307,16 @@ function createDaemonHandlerRegistry() {
       async handle(payload, ctx) {
         const taskId = requireString(payload, "taskId");
         const status = requireString(payload, "status");
-        if (status !== "backlog" && status !== "in_progress" && status !== "in_review" && status !== "done" && status !== "canceled" && status !== "error") {
+        if (!isTaskStatus(status))
           throw new Error("status must be a TaskStatus");
-        }
         const linked = status === "done" ? ctx.orch.getTask(taskId) : undefined;
         const prevStatus = linked?.status;
         await ctx.orch.setStatus(taskId, status);
         if (status === "done" && prevStatus !== "done" && linked) {
           try {
-            const state = await ctx.issues.list(linked.repo);
-            const found = state.issues.find((i) => i.taskId === taskId);
-            if (found && found.status !== "done") {
-              const next = await ctx.issues.mutate(linked.repo, {
-                type: "setStatus",
-                id: found.id,
-                status: "done"
-              });
+            const next = await ctx.issues.mirrorTaskDone(linked.repo, taskId);
+            if (next)
               ctx.bus.publish("issue.snapshot", next);
-            }
           } catch (err) {
             logDaemonError("issue-done-mirror", err);
           }
@@ -7524,6 +7562,7 @@ function optionalActivityDetail(payload) {
 var init_handlers = __esm(() => {
   init_hook_events();
   init_status_rules();
+  init_task();
   init_version();
   init_cwd_task();
   init_protocol();
@@ -7660,7 +7699,7 @@ class IssuesStore {
   }
   async list(repo) {
     const { repoRoot, repoKey } = await resolveRepo(repo);
-    return withLock(repoKey, async () => {
+    return withLock(this.path, async () => {
       const store = await readStore(this.path);
       const record = store.repos[repoKey] ?? null;
       if (record && record.repoRoot !== repoRoot) {
@@ -7670,12 +7709,30 @@ class IssuesStore {
       return response(repoRoot, record);
     });
   }
+  async mirrorTaskDone(repo, taskId) {
+    const { repoRoot, repoKey } = await resolveRepo(repo);
+    if (!taskId)
+      return null;
+    return withLock(this.path, async () => {
+      const store = await readStore(this.path);
+      const record = store.repos[repoKey];
+      if (!record)
+        return null;
+      const issue = record.issues.find((i) => i.taskId === taskId);
+      if (!issue || issue.status === "done")
+        return null;
+      issue.status = "done";
+      record.repoRoot = repoRoot;
+      await writeStore(this.path, store);
+      return response(repoRoot, record);
+    });
+  }
   async mutate(repo, op) {
     const { repoRoot, repoKey } = await resolveRepo(repo);
     if (!op || typeof op !== "object" || Array.isArray(op) || typeof op.type !== "string") {
       throw new Error("missing op");
     }
-    return withLock(repoKey, async () => {
+    return withLock(this.path, async () => {
       const store = await readStore(this.path);
       let record = store.repos[repoKey];
       if (!record) {
@@ -7764,6 +7821,76 @@ var init_issues_store = __esm(() => {
   locks = new Map;
 });
 
+// ../kobe-daemon/src/daemon/lifetime.ts
+class DaemonLifetime {
+  clients;
+  idleGraceMs;
+  onIdleStop;
+  schedule;
+  log;
+  cancelIdle = null;
+  stopping = false;
+  constructor(options) {
+    this.clients = options.clients;
+    this.idleGraceMs = options.idleGraceMs;
+    this.onIdleStop = options.onIdleStop;
+    this.schedule = options.schedule ?? defaultSchedule;
+    this.log = options.log ?? logDaemonInfo;
+  }
+  guiCount() {
+    let n = 0;
+    for (const c of this.clients())
+      if (c.holdsLifetime)
+        n++;
+    return n;
+  }
+  hasSubscribers() {
+    for (const c of this.clients())
+      if (c.subscribed)
+        return true;
+    return false;
+  }
+  isStopping() {
+    return this.stopping;
+  }
+  markStopping() {
+    this.stopping = true;
+    this.clearIdle();
+  }
+  guiAttached() {
+    this.clearIdle();
+  }
+  clientDisconnected(wasGui) {
+    if (wasGui)
+      this.maybeArm();
+  }
+  clearIdle() {
+    if (this.cancelIdle) {
+      this.cancelIdle();
+      this.cancelIdle = null;
+    }
+  }
+  maybeArm() {
+    if (this.stopping || this.guiCount() > 0)
+      return;
+    this.clearIdle();
+    this.log("idle", `last gui gone \u2014 arming ${this.idleGraceMs}ms idle-stop grace`);
+    this.cancelIdle = this.schedule(() => {
+      this.cancelIdle = null;
+      if (this.stopping || this.guiCount() > 0)
+        return;
+      this.log("idle", "grace elapsed with no gui \u2014 self-stopping");
+      this.onIdleStop();
+    }, this.idleGraceMs);
+  }
+}
+var defaultSchedule = (fn, ms) => {
+  const t = setTimeout(fn, ms);
+  t.unref?.();
+  return () => clearTimeout(t);
+};
+var init_lifetime = () => {};
+
 // ../kobe-daemon/src/daemon/keybindings-watcher.ts
 import { mkdirSync as mkdirSync2, watch } from "fs";
 import { homedir as homedir14 } from "os";
@@ -8125,6 +8252,7 @@ var init_worktree_changes_collector = __esm(() => {
 import { mkdir as mkdir7, readFile as readFile8, unlink as unlink4, writeFile as writeFile5 } from "fs/promises";
 import { createServer } from "net";
 import { dirname as dirname8 } from "path";
+import { StringDecoder as StringDecoder2 } from "string_decoder";
 function resolveIdleGraceMs() {
   const raw = process.env.KOBE_DAEMON_IDLE_GRACE_MS;
   if (raw === undefined)
@@ -8138,42 +8266,11 @@ async function startDaemonServer(orch, options = {}) {
   const startedAt = options.startedAt ?? new Date;
   const clients = new Set;
   let nextClientId = 1;
-  const idleGraceMs = resolveIdleGraceMs();
-  let idleTimer = null;
-  let stopping = false;
-  function guiCount() {
-    let n = 0;
-    for (const c of clients)
-      if (c.holdsLifetime)
-        n++;
-    return n;
-  }
-  function hasSubscribers() {
-    for (const c of clients)
-      if (c.subscribed)
-        return true;
-    return false;
-  }
-  function cancelIdleTimer() {
-    if (idleTimer) {
-      clearTimeout(idleTimer);
-      idleTimer = null;
-    }
-  }
-  function maybeArmIdleShutdown() {
-    if (stopping || guiCount() > 0)
-      return;
-    cancelIdleTimer();
-    logDaemonInfo("idle", `last gui gone \u2014 arming ${idleGraceMs}ms idle-stop grace`);
-    idleTimer = setTimeout(() => {
-      idleTimer = null;
-      if (stopping || guiCount() > 0)
-        return;
-      logDaemonInfo("idle", "grace elapsed with no gui \u2014 self-stopping");
-      stopSoon().catch((err) => logDaemonError("daemon-idle-shutdown", err));
-    }, idleGraceMs);
-    idleTimer.unref?.();
-  }
+  const lifetime = new DaemonLifetime({
+    clients: () => clients,
+    idleGraceMs: resolveIdleGraceMs(),
+    onIdleStop: () => void stopSoon().catch((err) => logDaemonError("daemon-idle-shutdown", err))
+  });
   const bus = new DaemonEventBus;
   bus.onPublish((event) => {
     broadcast(clients, { type: "event", name: event.channel, payload: event.payload });
@@ -8194,18 +8291,18 @@ async function startDaemonServer(orch, options = {}) {
       channels: null
     };
     clients.add(client);
+    const decoder = new StringDecoder2("utf8");
     socket.on("data", (chunk) => {
-      client.buffer += chunk.toString("utf8");
+      client.buffer += decoder.write(chunk);
       drainClientBuffer(client);
     });
     socket.on("error", () => {});
     socket.on("close", () => {
       clients.delete(client);
       if (client.subscribed) {
-        logDaemonInfo("conn", `client #${client.id} (${client.holdsLifetime ? "gui" : "pane"}) disconnected \u2014 ${clients.size} client(s), ${guiCount()} gui left`);
+        logDaemonInfo("conn", `client #${client.id} (${client.holdsLifetime ? "gui" : "pane"}) disconnected \u2014 ${clients.size} client(s), ${lifetime.guiCount()} gui left`);
       }
-      if (client.holdsLifetime)
-        maybeArmIdleShutdown();
+      lifetime.clientDisconnected(client.holdsLifetime);
     });
   });
   const unsubscribeStore = orch.subscribeTasks((snapshot) => {
@@ -8223,7 +8320,7 @@ async function startDaemonServer(orch, options = {}) {
     updateTimer.unref?.();
   }
   const autoTitlePollMs = options.autoTitlePollMs ?? DEFAULT_AUTO_TITLE_POLL_MS;
-  const stopAutoTitlePoller = startAutoTitlePoller(orch, autoTitlePollMs, hasSubscribers);
+  const stopAutoTitlePoller = startAutoTitlePoller(orch, autoTitlePollMs, () => lifetime.hasSubscribers());
   const stopUiPrefsWatcher = startUiPrefsWatcher(bus, {
     statePath: defaultUiPrefsStatePath(options.homeDir),
     debounceMs: options.uiPrefsDebounceMs ?? DEFAULT_UI_PREFS_DEBOUNCE_MS
@@ -8232,15 +8329,14 @@ async function startDaemonServer(orch, options = {}) {
     path: defaultKeybindingsPath(options.homeDir),
     debounceMs: options.keybindingsDebounceMs ?? DEFAULT_KEYBINDINGS_DEBOUNCE_MS
   });
-  const stopWorktreeChangesCollector = startWorktreeChangesCollector(orch, bus, options.worktreeChangesTickMs ?? DEFAULT_WORKTREE_CHANGES_TICK_MS, hasSubscribers);
+  const stopWorktreeChangesCollector = startWorktreeChangesCollector(orch, bus, options.worktreeChangesTickMs ?? DEFAULT_WORKTREE_CHANGES_TICK_MS, () => lifetime.hasSubscribers());
   const serverApi = {
     socketPath,
     pidPath,
     startedAt,
     clients,
     async close() {
-      stopping = true;
-      cancelIdleTimer();
+      lifetime.markStopping();
       unsubscribeStore();
       if (updateTimer)
         clearInterval(updateTimer);
@@ -8269,10 +8365,9 @@ async function startDaemonServer(orch, options = {}) {
   await writeFile5(pidPath, `${process.pid}
 `, "utf8");
   async function stopSoon() {
-    if (stopping)
+    if (lifetime.isStopping())
       return;
-    stopping = true;
-    cancelIdleTimer();
+    lifetime.markStopping();
     await options.onStop?.();
     setTimeout(() => {
       serverApi.close().catch((err) => logDaemonError("daemon-shutdown", err));
@@ -8289,8 +8384,8 @@ async function startDaemonServer(orch, options = {}) {
       client.channels = normalizeChannelFilter(payload.channels);
       const firstSubscriber = !wasSubscribed;
       if (client.holdsLifetime)
-        cancelIdleTimer();
-      logDaemonInfo("conn", `client #${client.id} subscribed as ${role}${client.channels ? ` [${[...client.channels].join(",")}]` : ""} \u2014 ${clients.size} client(s), ${guiCount()} gui${firstSubscriber ? " (collectors resume)" : ""}`);
+        lifetime.guiAttached();
+      logDaemonInfo("conn", `client #${client.id} subscribed as ${role}${client.channels ? ` [${[...client.channels].join(",")}]` : ""} \u2014 ${clients.size} client(s), ${lifetime.guiCount()} gui${firstSubscriber ? " (collectors resume)" : ""}`);
       for (const event of bus.snapshot()) {
         if (client.channels && !client.channels.has(event.channel))
           continue;
@@ -8312,7 +8407,7 @@ async function startDaemonServer(orch, options = {}) {
       bus,
       activity,
       issues,
-      daemon: { startedAt, socketPath, pid: process.pid, guiCount, stopSoon },
+      daemon: { startedAt, socketPath, pid: process.pid, guiCount: () => lifetime.guiCount(), stopSoon },
       clientId: client.id
     });
   }
@@ -8381,6 +8476,7 @@ var init_server = __esm(() => {
   init_auto_title_poller();
   init_handlers();
   init_issues_store();
+  init_lifetime();
   init_keybindings_watcher();
   init_paths2();
   init_protocol();
@@ -11091,6 +11187,68 @@ var init_tmux_border_theme = __esm(() => {
   FOCUS_ACCENT_SLOT_NAMES2 = ["primary", "success", "info"];
 });
 
+// src/tui/panes/terminal/layout-coord.ts
+var exports_layout_coord = {};
+__export(exports_layout_coord, {
+  recordGen: () => recordGen,
+  isLatestGen: () => isLatestGen,
+  genAgeMs: () => genAgeMs,
+  coalesceLayoutWork: () => coalesceLayoutWork,
+  RESIZE_GUARD_MS: () => RESIZE_GUARD_MS,
+  LAYOUT_COALESCE_MS: () => LAYOUT_COALESCE_MS
+});
+import { createHash as createHash5, randomUUID as randomUUID2 } from "crypto";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync8, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join8 } from "path";
+function coordDir() {
+  return join8(kobeStateDir(), "layout-coord");
+}
+function genPath(session, kind) {
+  const hash = createHash5("sha1").update(session).digest("hex").slice(0, 16);
+  return join8(coordDir(), `${hash}.${kind}`);
+}
+function recordGen(session, kind) {
+  const nonce = randomUUID2();
+  try {
+    mkdirSync5(coordDir(), { recursive: true });
+    const path11 = genPath(session, kind);
+    const tmp = `${path11}.${nonce}.tmp`;
+    writeFileSync2(tmp, `${Date.now()}
+${nonce}`);
+    renameSync2(tmp, path11);
+  } catch {}
+  return nonce;
+}
+function isLatestGen(session, kind, nonce) {
+  try {
+    return readFileSync8(genPath(session, kind), "utf8").split(`
+`)[1]?.trim() === nonce;
+  } catch {
+    return true;
+  }
+}
+function genAgeMs(session, kind, now = Date.now()) {
+  try {
+    const ts = Number.parseInt(readFileSync8(genPath(session, kind), "utf8").split(`
+`)[0] ?? "", 10);
+    return Number.isFinite(ts) ? now - ts : Number.POSITIVE_INFINITY;
+  } catch {
+    return Number.POSITIVE_INFINITY;
+  }
+}
+async function coalesceLayoutWork(session, kind, work, debounceMs = LAYOUT_COALESCE_MS) {
+  const nonce = recordGen(session, kind);
+  if (debounceMs > 0)
+    await new Promise((resolve5) => setTimeout(resolve5, debounceMs));
+  if (!isLatestGen(session, kind, nonce))
+    return;
+  await work();
+}
+var LAYOUT_COALESCE_MS = 120, RESIZE_GUARD_MS = 400;
+var init_layout_coord = __esm(() => {
+  init_env();
+});
+
 // src/tui/panes/terminal/pane-heal.ts
 function parseKobePaneRows(stdout) {
   const rows = [];
@@ -11204,6 +11362,7 @@ async function globalRightColumnResizeArgs() {
   return (await globalLayoutPrefs()).rcArgs;
 }
 async function healWorkspaceLayout(session, versions) {
+  recordGen(session, "resize");
   const { tasksWidth, rcArgs } = await globalLayoutPrefs();
   const rows = await listKobePanes(session);
   if (!rows)
@@ -11241,7 +11400,7 @@ async function captureGlobalLayout(session) {
     "-t",
     `=${session}`,
     "-F",
-    "#{@kobe_role}\t#{pane_width}\t#{pane_height}\t#{window_width}\t#{window_height}"
+    "#{@kobe_role}\t#{pane_width}\t#{pane_height}\t#{window_width}\t#{window_height}\t#{window_zoomed_flag}"
   ]);
   if (code !== 0)
     return;
@@ -11249,6 +11408,8 @@ async function captureGlobalLayout(session) {
 `).map((line) => line.split("\t")).filter((cols) => (cols[0]?.trim() ?? "") !== "");
   if (rows.length === 0)
     return;
+  if (rows.some((cols) => cols[5]?.trim() === "1"))
+    return;
   const winW = Number.parseInt(rows[0][3]?.trim() ?? "", 10);
   const winH = Number.parseInt(rows[0][4]?.trim() ?? "", 10);
   const sets = [];
@@ -11272,6 +11433,28 @@ async function captureGlobalLayout(session) {
   if (sets.length > 0)
     await runTmuxSequence(sets);
 }
+function shouldCaptureDrag(stdout) {
+  const rows = stdout.split(`
+`).map((line) => line.split("\t")).filter((cols) => (cols[0]?.trim() ?? "") !== "");
+  if (rows.length === 0)
+    return false;
+  if (rows.some((cols) => cols[1]?.trim() === "1"))
+    return false;
+  const roles = new Set(rows.map((cols) => cols[0]?.trim()));
+  return roles.has("tasks") && roles.has("ops");
+}
+async function captureGlobalLayoutOnDrag(session) {
+  const { code, stdout } = await runTmuxCapturing([
+    "list-panes",
+    "-t",
+    `=${session}`,
+    "-F",
+    "#{@kobe_role}\t#{window_zoomed_flag}"
+  ]);
+  if (code !== 0 || !shouldCaptureDrag(stdout))
+    return;
+  await captureGlobalLayout(session);
+}
 async function refreshKobeWorkspacePanes(session) {
   const sessionOptions = await getSessionOptions(session, ["@kobe_worktree", "@kobe_task", "@kobe_vendor"]);
   const cwd = sessionOptions["@kobe_worktree"] || process.cwd();
@@ -11298,6 +11481,7 @@ var init_pane_heal = __esm(() => {
   init_tmux_border_theme();
   init_version();
   init_launch();
+  init_layout_coord();
   KOBE_PANE_LIST_FORMAT = `#{window_id}	#{pane_id}	#{@kobe_role}	#{${PANE_VERSION_OPTION}}	#{pane_width}`;
 });
 
@@ -11527,6 +11711,7 @@ __export(exports_tmux, {
   selectTasksPane: () => selectTasksPane,
   refreshKobeWorkspacePanes: () => refreshKobeWorkspacePanes,
   quickCreate: () => quickCreate,
+  prepareWindowForSwitch: () => prepareWindowForSwitch,
   prepareWindowForAttach: () => prepareWindowForAttach,
   parseObservedSession: () => parseObservedSession,
   openUpdateTab: () => openUpdateTab,
@@ -11544,6 +11729,7 @@ __export(exports_tmux, {
   chatTabRenameBinding: () => chatTabRenameBinding,
   chatTabCloseBinding: () => chatTabCloseBinding,
   chatTabChooseEngineBindings: () => chatTabChooseEngineBindings,
+  captureGlobalLayoutOnDrag: () => captureGlobalLayoutOnDrag,
   captureGlobalLayout: () => captureGlobalLayout,
   attachArgv: () => attachArgv,
   PANE_VERSION_OPTION: () => PANE_VERSION_OPTION,
@@ -11562,11 +11748,26 @@ function positiveInt(value) {
   return Number.isInteger(n) && n > 0 ? n : undefined;
 }
 async function prepareWindowForAttach(session) {
+  recordGen(session, "resize");
   const sizeArgs = tmuxInitialSizeArgs();
   if (sizeArgs.length > 0)
     await runTmux(["resize-window", "-t", `=${session}`, ...sizeArgs]);
   await healWorkspaceLayout(session);
 }
+async function attachedWindowSizeArgs() {
+  const { code, stdout } = await runTmuxCapturing(["display-message", "-p", "#{window_width}\t#{window_height}"]);
+  if (code !== 0)
+    return [];
+  const [w, h] = stdout.trim().split("\t").map((s) => Number.parseInt(s, 10));
+  return Number.isInteger(w) && w > 0 && Number.isInteger(h) && h > 0 ? ["-x", `${w}`, "-y", `${h}`] : [];
+}
+async function prepareWindowForSwitch(session) {
+  recordGen(session, "resize");
+  const sizeArgs = await attachedWindowSizeArgs();
+  if (sizeArgs.length > 0)
+    await runTmux(["resize-window", "-t", `=${session}`, ...sizeArgs]);
+  await healWorkspaceLayout(session);
+}
 function focusBindCommand(key, dir) {
   return [
     "bind-key",
@@ -11698,6 +11899,8 @@ async function ensureSessionImpl(opts) {
   const focusTasksTmuxCommand = `run-shell ${shellQuote(focusTasksCommand)}`;
   const healLayoutCommand = `${envStr}${invStr} heal-layout --session '#{session_name}'`;
   const healLayoutTmuxCommand = `run-shell -b ${shellQuote(healLayoutCommand)}`;
+  const captureLayoutCommand = `${envStr}${invStr} capture-layout --session '#{session_name}'`;
+  const captureLayoutTmuxCommand = `run-shell -b ${shellQuote(captureLayoutCommand)}`;
   const userKeys = resolveUserTmuxKeys();
   const unbinds = [];
   if (userKeys.overridden.has(TMUX_FOCUS_ID)) {
@@ -11740,6 +11943,7 @@ async function ensureSessionImpl(opts) {
     ],
     ["set-option", "-g", "mouse", "on"],
     ["set-hook", "-g", "window-resized", healLayoutTmuxCommand],
+    ["set-hook", "-g", "window-layout-changed", captureLayoutTmuxCommand],
     ...unbinds,
     ...b["tmux.detach"] ? [
       [
@@ -11790,6 +11994,7 @@ var init_tmux = __esm(() => {
   init_tmux_border_theme();
   init_chattab();
   init_launch();
+  init_layout_coord();
   init_pane_heal();
   init_client2();
   init_chattab();
@@ -11808,17 +12013,17 @@ var exports_repo_init = {};
 __export(exports_repo_init, {
   resolveRepoInit: () => resolveRepoInit
 });
-import { existsSync as existsSync7, readFileSync as readFileSync8 } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync9 } from "fs";
+import { join as join9 } from "path";
 function repoFileScript(worktreePath) {
-  return existsSync7(join8(worktreePath, INIT_SCRIPT_REL)) ? `sh ${INIT_SCRIPT_REL}` : undefined;
+  return existsSync7(join9(worktreePath, INIT_SCRIPT_REL)) ? `sh ${INIT_SCRIPT_REL}` : undefined;
 }
 function repoFilePrompt(worktreePath) {
-  const p = join8(worktreePath, INIT_PROMPT_REL);
+  const p = join9(worktreePath, INIT_PROMPT_REL);
   if (!existsSync7(p))
     return;
   try {
-    const text = readFileSync8(p, "utf8");
+    const text = readFileSync9(p, "utf8");
     return text.trim().length > 0 ? text : undefined;
   } catch {
     return;
@@ -11836,8 +12041,8 @@ function resolveRepoInit(repoRoot, worktreePath) {
 var INIT_SCRIPT_REL, INIT_PROMPT_REL;
 var init_repo_init = __esm(() => {
   init_repos();
-  INIT_SCRIPT_REL = join8(".kobe", "init.sh");
-  INIT_PROMPT_REL = join8(".kobe", "init-prompt.md");
+  INIT_SCRIPT_REL = join9(".kobe", "init.sh");
+  INIT_PROMPT_REL = join9(".kobe", "init-prompt.md");
 });
 
 // src/cli/api-cmd.ts
@@ -12052,6 +12257,9 @@ function parseAgentsSpec(spec) {
     if (!Number.isInteger(count) || count <= 0) {
       throw new ApiError(`--agents count for "${vendor}" must be a positive integer`, "BAD_FLAG");
     }
+    if (out.length + count > FANOUT_CAP) {
+      throw new ApiError(`--agents requests ${out.length + count} agents, exceeds the cap of ${FANOUT_CAP}`, "BAD_FLAG");
+    }
     for (let i = 0;i < count; i++)
       out.push(vendor);
   }
@@ -12501,7 +12709,7 @@ ${apiUsage()}`, "BAD_VERB", 2);
     session?.close();
   }
 }
-var API_SCHEMA_VERSION = 2, FANOUT_CAP = 10, TASK_STATUSES, ISSUE_STATUSES2, ApiError, F, VERB_ALIASES, VERB_GROUPS, VERBS, API_VERBS, GLOBAL_FLAGS, realPromptDeliveryOps, defaultApiRuntime;
+var API_SCHEMA_VERSION = 2, FANOUT_CAP = 10, TASK_STATUSES2, ISSUE_STATUSES2, ApiError, F, VERB_ALIASES, VERB_GROUPS, VERBS, API_VERBS, GLOBAL_FLAGS, realPromptDeliveryOps, defaultApiRuntime;
 var init_api_cmd = __esm(() => {
   init_interactive_command();
   init_feedback();
@@ -12510,7 +12718,7 @@ var init_api_cmd = __esm(() => {
   init_vendor();
   init_version();
   init_daemon_session();
-  TASK_STATUSES = ["backlog", "in_progress", "in_review", "done", "canceled", "error"];
+  TASK_STATUSES2 = ["backlog", "in_progress", "in_review", "done", "canceled", "error"];
   ISSUE_STATUSES2 = ["open", "doing", "hold", "done"];
   ApiError = class ApiError extends Error {
     code;
@@ -12602,7 +12810,7 @@ var init_api_cmd = __esm(() => {
         {
           name: "status",
           type: "enum",
-          values: TASK_STATUSES,
+          values: TASK_STATUSES2,
           default: "backlog",
           description: "Initial lifecycle status."
         },
@@ -12755,7 +12963,7 @@ var init_api_cmd = __esm(() => {
       summary: "Set a task's lifecycle status.",
       flags: [
         F.taskId(),
-        { name: "status", type: "enum", required: true, values: TASK_STATUSES, description: "New status." }
+        { name: "status", type: "enum", required: true, values: TASK_STATUSES2, description: "New status." }
       ],
       handler: (ctx) => simpleRpc(ctx, "task.status", {
         taskId: ctx.args.require("task-id"),
@@ -12948,8 +13156,8 @@ var exports_theme = {};
 __export(exports_theme, {
   runThemeSubcommand: () => runThemeSubcommand
 });
-import { existsSync as existsSync8, mkdirSync as mkdirSync5, readFileSync as readFileSync9, readdirSync as readdirSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
-import { basename as basename5, join as join9, resolve as resolve6 } from "path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync10, readdirSync as readdirSync2, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { basename as basename5, join as join10, resolve as resolve6 } from "path";
 function fail3(message) {
   process.stderr.write(`kobe theme: ${message}
 `);
@@ -12980,7 +13188,7 @@ function listThemes() {
   } else {
     for (const f of userFiles) {
       const name = f.slice(0, -".json".length);
-      const path11 = join9(dir, f);
+      const path11 = join10(dir, f);
       const overridesBundled = BUNDLED_NAMES.includes(name) ? " (overrides built-in)" : "";
       lines.push(`  ${name}${overridesBundled}  ${path11}`);
     }
@@ -13009,7 +13217,7 @@ async function readSource(source) {
   const abs = resolve6(process.cwd(), source);
   let text;
   try {
-    text = readFileSync9(abs, "utf8");
+    text = readFileSync10(abs, "utf8");
   } catch (err) {
     fail3(`failed to read ${abs}: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -13069,12 +13277,12 @@ async function addTheme(args) {
     fail3(`invalid theme name "${name}" (use letters, digits, '.', '_', '-')`);
   }
   const dir = userThemesDir();
-  mkdirSync5(dir, { recursive: true });
-  const dest = join9(dir, `${name}.json`);
+  mkdirSync6(dir, { recursive: true });
+  const dest = join10(dir, `${name}.json`);
   if (existsSync8(dest) && !opts.force) {
     fail3(`${dest} already exists (pass --force to overwrite)`);
   }
-  writeFileSync2(dest, `${JSON.stringify(result.theme, null, 2)}
+  writeFileSync3(dest, `${JSON.stringify(result.theme, null, 2)}
 `, "utf8");
   process.stdout.write(`installed theme "${name}" -> ${dest}
 `);
@@ -13088,7 +13296,7 @@ function removeTheme(args) {
   if (BUNDLED_NAMES.includes(name)) {
     fail3(`"${name}" is a built-in theme and cannot be removed`);
   }
-  const dest = join9(userThemesDir(), `${name}.json`);
+  const dest = join10(userThemesDir(), `${name}.json`);
   if (!existsSync8(dest)) {
     fail3(`no user theme named "${name}" (looked for ${dest})`);
   }
@@ -13158,7 +13366,7 @@ __export(exports_feedback_cmd, {
   runFeedbackSubcommand: () => runFeedbackSubcommand,
   parseFeedbackArgs: () => parseFeedbackArgs
 });
-import { readFileSync as readFileSync10 } from "fs";
+import { readFileSync as readFileSync11 } from "fs";
 function usageError2(message) {
   process.stderr.write(`kobe feedback: ${message}
 
@@ -13168,8 +13376,8 @@ ${FEEDBACK_USAGE}
 }
 function readBodyFile(path11) {
   if (path11 === "-")
-    return readFileSync10(0, "utf8");
-  return readFileSync10(path11, "utf8");
+    return readFileSync11(0, "utf8");
+  return readFileSync11(path11, "utf8");
 }
 function parseFeedbackArgs(args) {
   const parsed = { help: false };
@@ -13320,6 +13528,8 @@ async function runDaemonSubcommand(argv) {
     try {
       await client.request("daemon.stop");
       console.log("kobe daemon: stop requested");
+    } catch {
+      console.log(`kobe daemon: no daemon running at ${socketPath}`);
     } finally {
       client.close();
     }
@@ -13368,9 +13578,9 @@ var init_daemon_cmd = __esm(() => {
 });
 
 // src/lib/skill-install.ts
-import { existsSync as existsSync9, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync12 } from "fs";
 import { homedir as homedir17 } from "os";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 function npxSkillsArgv(opts = {}) {
   return ["skills", "add", SKILL_SOURCE_SLUG, "--skill", "kobe", "--agent", opts.agent ?? DEFAULT_SKILL_AGENT];
 }
@@ -13380,7 +13590,7 @@ function npxSkillsCommand(opts = {}) {
 function kobeSkillPaths(opts = {}) {
   const home = opts.home ?? homedir17();
   const cwd = opts.cwd ?? process.cwd();
-  return [join10(home, SKILL_REL_PATH), join10(cwd, SKILL_REL_PATH)];
+  return [join11(home, SKILL_REL_PATH), join11(cwd, SKILL_REL_PATH)];
 }
 function parseSkillVersion(content) {
   const m = content.match(/kobe-skill-version:\s*(\d+)/);
@@ -13393,7 +13603,7 @@ function kobeSkillState(opts) {
   }
   let installedVersion = null;
   try {
-    installedVersion = parseSkillVersion(readFileSync11(path11, "utf8"));
+    installedVersion = parseSkillVersion(readFileSync12(path11, "utf8"));
   } catch {
     installedVersion = null;
   }
@@ -13439,9 +13649,9 @@ __export(exports_maintenance, {
   runReloadSubcommand: () => runReloadSubcommand,
   runDoctorSubcommand: () => runDoctorSubcommand
 });
-import { existsSync as existsSync10, readFileSync as readFileSync12, statSync as statSync5 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync13, statSync as statSync5 } from "fs";
 import { unlink as unlink6 } from "fs/promises";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { createInterface as createInterface2 } from "readline";
 function isProcessAlive2(pid) {
   try {
@@ -13488,7 +13698,7 @@ function describeFile(path11) {
 }
 function taskCount(tasksPath) {
   try {
-    const parsed = JSON.parse(readFileSync12(tasksPath, "utf8"));
+    const parsed = JSON.parse(readFileSync13(tasksPath, "utf8"));
     return Array.isArray(parsed.tasks) ? parsed.tasks.length : null;
   } catch {
     return null;
@@ -13496,7 +13706,7 @@ function taskCount(tasksPath) {
 }
 function tailFile(path11, n) {
   try {
-    const lines = readFileSync12(path11, "utf8").split(`
+    const lines = readFileSync13(path11, "utf8").split(`
 `).filter((l) => l.trim().length > 0);
     return lines.slice(-n).join(`
 `);
@@ -13538,7 +13748,7 @@ async function runDoctorSubcommand(argv = []) {
   const socketPath = defaultDaemonSocketPath();
   const pidPath = defaultDaemonPidPath();
   const logPath = defaultDaemonLogPath();
-  const tasksPath = join11(kobeStateDir(), "tasks.json");
+  const tasksPath = join12(kobeStateDir(), "tasks.json");
   const statePath2 = kvStatePath();
   const out = ["kobe doctor", `  home:   ${homeDir()}`, `  socket: ${socketPath}`, ""];
   const status = await probeDaemonStatus(socketPath);
@@ -13657,7 +13867,7 @@ async function runResetSubcommand(argv) {
   const yes = argv.includes("--yes") || argv.includes("-y");
   const socketPath = defaultDaemonSocketPath();
   const pidPath = defaultDaemonPidPath();
-  const tasksPath = join11(kobeStateDir(), "tasks.json");
+  const tasksPath = join12(kobeStateDir(), "tasks.json");
   const statePath2 = kvStatePath();
   console.log("kobe reset will:");
   console.log("  \u2022 stop the kobe daemon (graceful \u2192 SIGTERM \u2192 SIGKILL)");
@@ -14019,15 +14229,15 @@ var init_history4 = __esm(() => {
 
 // src/web/notes.ts
 import { mkdir as mkdir8, readFile as readFile9, writeFile as writeFile6 } from "fs/promises";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 function notesDir() {
-  return join12(kobeStateDir(), "notes");
+  return join13(kobeStateDir(), "notes");
 }
 function isSafeTaskId(taskId) {
   return typeof taskId === "string" && taskId.length > 0 && /^[A-Za-z0-9_-]+$/.test(taskId);
 }
 function noteFilePath(taskId) {
-  return join12(notesDir(), `${taskId}.md`);
+  return join13(notesDir(), `${taskId}.md`);
 }
 async function handleGet(url) {
   const taskId = url.searchParams.get("taskId");
@@ -14165,6 +14375,26 @@ var init_themes = __esm(() => {
   WEB_THEMES = Object.fromEntries(Object.entries(THEME_JSONS).map(([name, json]) => [name, toWebPalette(json)]).filter((entry) => entry[1] !== null));
 });
 
+// ../kobe-web/src/lib/repo-key.ts
+function normalizeRepoPath(path11) {
+  return path11.length > 1 ? path11.replace(/\/+$/, "") : path11;
+}
+function repoSnapshotAliases(tasks, repoRoot) {
+  const root = normalizeRepoPath(repoRoot);
+  const aliases = new Set([repoRoot]);
+  for (const task of tasks) {
+    const taskRepo = normalizeRepoPath(task.repo);
+    const taskWorktree = normalizeRepoPath(task.worktreePath);
+    if (taskRepo === root || taskWorktree === root) {
+      if (task.repo)
+        aliases.add(task.repo);
+      if (task.worktreePath)
+        aliases.add(task.worktreePath);
+    }
+  }
+  return [...aliases];
+}
+
 // ../kobe-web/server/spa-channels.ts
 var SPA_CHANNELS, SPA_CHANNEL_SET;
 var init_spa_channels = __esm(() => {
@@ -14186,24 +14416,6 @@ var init_spa_channels = __esm(() => {
 function sleep2(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
 }
-function normalizedPath(path11) {
-  return path11.length > 1 ? path11.replace(/\/+$/, "") : path11;
-}
-function issueSnapshotAliases(tasks, repoRoot) {
-  const root = normalizedPath(repoRoot);
-  const aliases = new Set([repoRoot]);
-  for (const task of tasks) {
-    const taskRepo = normalizedPath(task.repo);
-    const taskWorktree = normalizedPath(task.worktreePath);
-    if (taskRepo === root || taskWorktree === root) {
-      if (task.repo)
-        aliases.add(task.repo);
-      if (task.worktreePath)
-        aliases.add(task.worktreePath);
-    }
-  }
-  return [...aliases];
-}
 
 class DaemonLink {
   client = null;
@@ -14347,7 +14559,7 @@ class DaemonLink {
       case "issue.snapshot": {
         const state = payload;
         const next = { ...this.issueSnapshots };
-        for (const alias of issueSnapshotAliases(this.tasks, state.repoRoot)) {
+        for (const alias of repoSnapshotAliases(this.tasks, state.repoRoot)) {
           next[alias] = { ...state, repoRoot: alias };
         }
         this.issueSnapshots = next;
@@ -14388,11 +14600,11 @@ var init_daemon_link = __esm(() => {
 });
 
 // ../kobe-web/server/issue-assets-route.ts
-import { createHash as createHash5, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID3 } from "crypto";
 import { mkdir as mkdir9 } from "fs/promises";
-import { join as join13, resolve as resolve7 } from "path";
+import { join as join14, resolve as resolve7 } from "path";
 function repoHashOf(repoRoot) {
-  return createHash5("sha1").update(repoRoot).digest("hex").slice(0, 16);
+  return createHash6("sha1").update(repoRoot).digest("hex").slice(0, 16);
 }
 async function handlePost(req) {
   const declared = Number.parseInt(req.headers.get("content-length") ?? "", 10);
@@ -14422,11 +14634,11 @@ async function handlePost(req) {
   }
   try {
     const repoHash = repoHashOf(repoRoot);
-    const dir = join13(issueAssetsDir(), repoHash);
+    const dir = join14(issueAssetsDir(), repoHash);
     await mkdir9(dir, { recursive: true });
-    const assetId = randomUUID2();
+    const assetId = randomUUID3();
     const name = `${assetId}.${ext}`;
-    await Bun.write(join13(dir, name), file);
+    await Bun.write(join14(dir, name), file);
     return Response.json({ url: `${ASSETS_ROUTE}/${repoHash}/${name}` });
   } catch (err) {
     return Response.json({ error: err instanceof Error ? err.message : String(err) }, { status: 500 });
@@ -14444,7 +14656,7 @@ async function handleGet2(pathname) {
   }
   const root = issueAssetsDir();
   const resolved = resolve7(root, repoHash, fileSeg);
-  if (resolved !== join13(root, repoHash, fileSeg) || !resolved.startsWith(`${root}/`)) {
+  if (resolved !== join14(root, repoHash, fileSeg) || !resolved.startsWith(`${root}/`)) {
     return Response.json({ error: "invalid asset path" }, { status: 400 });
   }
   const ext = fileSeg.slice(fileSeg.lastIndexOf(".") + 1).toLowerCase();
@@ -14644,7 +14856,21 @@ var init_session = __esm(() => {
 
 // ../kobe-web/server/bridge.ts
 import { existsSync as existsSync11 } from "fs";
-import { join as join14, normalize as normalize2 } from "path";
+import { join as join15, normalize as normalize2 } from "path";
+function originAllowed(req, allowedHost) {
+  const origin = req.headers.get("origin");
+  if (!origin)
+    return true;
+  if (LOCAL_ORIGIN.test(origin))
+    return true;
+  if (allowedHost) {
+    try {
+      if (new URL(origin).hostname === allowedHost)
+        return true;
+    } catch {}
+  }
+  return false;
+}
 function sseResponse(register) {
   let unregister = null;
   let heartbeat = null;
@@ -14867,6 +15093,9 @@ function createRequestHandler(deps) {
     const url = new URL(req.url);
     if (url.pathname === WEB_HEALTH_PATH)
       return new Response(WEB_HEALTH_MARKER);
+    if (!originAllowed(req, deps.allowedHost)) {
+      return new Response("forbidden: cross-origin request rejected", { status: 403 });
+    }
     if (url.pathname === "/events") {
       return sseResponse((send2) => {
         send2("snapshot", link.snapshot());
@@ -14939,10 +15168,10 @@ async function quickPromptsPut(req) {
 }
 async function staticResponse(pathname, staticDir) {
   const rel = pathname === "/" ? "/index.html" : pathname;
-  const resolved = normalize2(join14(staticDir, rel));
+  const resolved = normalize2(join15(staticDir, rel));
   if (!resolved.startsWith(staticDir))
     return new Response("forbidden", { status: 403 });
-  const file = Bun.file(existsSync11(resolved) ? resolved : join14(staticDir, "index.html"));
+  const file = Bun.file(existsSync11(resolved) ? resolved : join15(staticDir, "index.html"));
   if (!await file.exists()) {
     return new Response("kobe web assets not built \u2014 run `bun --filter kobe-web build`", { status: 503 });
   }
@@ -15003,8 +15232,9 @@ async function createBridgeServer(opts = {}) {
     for (const send2 of sseSends)
       send2("snapshot", link.snapshot());
   });
-  const handle = createRequestHandler({ link, sseSends, staticDir });
   const hostname = process.env.KOBE_WEB_HOST?.trim() || "127.0.0.1";
+  const allowedHost = LOCAL_ORIGIN.test(`http://${hostname}`) ? undefined : hostname;
+  const handle = createRequestHandler({ link, sseSends, staticDir, allowedHost });
   const server = Bun.serve({ port, hostname, idleTimeout: 0, fetch: handle });
   return {
     port: server.port ?? port,
@@ -15014,7 +15244,7 @@ async function createBridgeServer(opts = {}) {
     }
   };
 }
-var WEB_HEALTH_MARKER = "kobe-web", WEB_HEALTH_PATH = "/__kobe_web", FOCUS_ACCENTS, ENGINE_ID_RE, QUICK_PROMPT_KEYS;
+var WEB_HEALTH_MARKER = "kobe-web", WEB_HEALTH_PATH = "/__kobe_web", LOCAL_ORIGIN, FOCUS_ACCENTS, ENGINE_ID_RE, QUICK_PROMPT_KEYS;
 var init_bridge = __esm(() => {
   init_account_detect();
   init_interactive_command();
@@ -15032,6 +15262,7 @@ var init_bridge = __esm(() => {
   init_issue_assets_route();
   init_rpc_allowlist();
   init_session();
+  LOCAL_ORIGIN = /^https?:\/\/(localhost|127\.0\.0\.1|\[::1\])(:\d+)?$/;
   FOCUS_ACCENTS = ["primary", "success", "info"];
   ENGINE_ID_RE = /^[a-z][a-z0-9_-]{0,47}$/;
   QUICK_PROMPT_KEYS = {
@@ -15337,7 +15568,7 @@ __export(exports_hook_cmd, {
   ensureGlobalKobeHooks: () => ensureGlobalKobeHooks
 });
 import { homedir as homedir19 } from "os";
-import { join as join15, resolve as resolve9 } from "path";
+import { join as join16, resolve as resolve9 } from "path";
 async function readTextWithTimeout(read, timeoutMs = STDIN_READ_TIMEOUT_MS) {
   let raceTimer;
   try {
@@ -15468,7 +15699,7 @@ function activityHookAdapters() {
   return ALL_VENDORS.map((v) => createEngineHookAdapter(v)).filter((a) => a.supportsHooks());
 }
 function globalSettingsPath() {
-  return join15(homedir19(), ".claude", "settings.json");
+  return join16(homedir19(), ".claude", "settings.json");
 }
 function persistedSyncPath(stored) {
   if (!stored || stored === "off")
@@ -15476,7 +15707,7 @@ function persistedSyncPath(stored) {
   if (stored === "global")
     return globalSettingsPath();
   if (stored.startsWith("repo:"))
-    return join15(resolve9(stored.slice(5)), ".claude", "settings.json");
+    return join16(resolve9(stored.slice(5)), ".claude", "settings.json");
   return stored;
 }
 async function ensureGlobalKobeHooks() {
@@ -17213,6 +17444,7 @@ var init_remote_orchestrator = __esm(() => {
   init_protocol();
   init_dev();
   init_worktree_changes();
+  init_task();
   init_version();
 });
 
@@ -20406,9 +20638,9 @@ var pulse_default = "../pulse-n3cq1btw.wav";
 var init_pulse = () => {};
 
 // src/tui/lib/sound.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync6 } from "fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync7 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { basename as basename6, isAbsolute as isAbsolute3, join as join17, resolve as resolve10 } from "path";
+import { basename as basename6, isAbsolute as isAbsolute3, join as join18, resolve as resolve10 } from "path";
 function args(player, file, volume) {
   if (player === "ffplay")
     return [player, "-autoexit", "-nodisp", "-af", `volume=${volume}`, file];
@@ -20431,13 +20663,13 @@ function pickPlayer() {
     return cachedPlayer;
   const path12 = process.env.PATH ?? "";
   const segments = path12.split(":").filter(Boolean);
-  cachedPlayer = PLAYERS.find((p) => segments.some((dir) => existsSync14(join17(dir, p)))) ?? null;
+  cachedPlayer = PLAYERS.find((p) => segments.some((dir) => existsSync14(join18(dir, p)))) ?? null;
   return cachedPlayer;
 }
 async function ensureAsset() {
   cachedPath ??= (async () => {
-    mkdirSync6(DIR, { recursive: true });
-    const dest = join17(DIR, basename6(pulseAsset));
+    mkdirSync7(DIR, { recursive: true });
+    const dest = join18(DIR, basename6(pulseAsset));
     const out = Bun.file(dest);
     if (await out.exists())
       return dest;
@@ -20467,7 +20699,7 @@ var pulseAsset, DIR, PLAYERS, cachedPlayer, cachedPath;
 var init_sound = __esm(() => {
   init_pulse();
   pulseAsset = isAbsolute3(pulse_default) ? pulse_default : resolve10(import.meta.dir, pulse_default);
-  DIR = join17(tmpdir2(), "kobe-sfx");
+  DIR = join18(tmpdir2(), "kobe-sfx");
   PLAYERS = [
     "ffplay",
     "mpv",
@@ -20592,10 +20824,10 @@ var init_apply_ui_prefs = __esm(() => {
 });
 
 // src/tui/lib/persisted-ui-prefs.ts
-import { readFileSync as readFileSync13 } from "fs";
+import { readFileSync as readFileSync14 } from "fs";
 function readPersistedUiPrefs(fallbackTheme) {
   try {
-    const parsed = JSON.parse(readFileSync13(kvStatePath(), "utf8"));
+    const parsed = JSON.parse(readFileSync14(kvStatePath(), "utf8"));
     const theme = typeof parsed.activeTheme === "string" && hasTheme(parsed.activeTheme) ? parsed.activeTheme : fallbackTheme;
     const transparent = parsed.transparentBackground === true;
     const focusAccent = typeof parsed.focusAccent === "string" && FOCUS_ACCENT_SLOTS.includes(parsed.focusAccent) ? parsed.focusAccent : null;
@@ -20871,6 +21103,7 @@ var init_host = __esm(() => {
   init_remote_orchestrator();
   init_account_detect();
   init_repos();
+  init_task();
   init_new_task_dialog();
   init_theme2();
   init_host_boot();
@@ -21052,6 +21285,10 @@ async function deliverFirstPromptToTask(orch, task, repo, vendor, prompt) {
 async function jumpToTask(orch, task, repo, vendor) {
   await ensureTaskSession2(orch, task, repo, vendor);
   await orch.setActiveTask(task.id).catch(() => {});
+  const {
+    prepareWindowForSwitch: prepareWindowForSwitch2
+  } = await Promise.resolve().then(() => (init_tmux(), exports_tmux));
+  await prepareWindowForSwitch2(tmuxSessionName(task.id));
   await runTmux(["switch-client", "-t", `=${tmuxSessionName(task.id)}`]);
 }
 function QuickTaskPage(props) {
@@ -21146,6 +21383,7 @@ var init_host2 = __esm(() => {
   init_repos();
   init_client2();
   init_prompt_delivery();
+  init_task();
   init_quick_task_composer();
   init_theme2();
   init_git_snapshot();
@@ -21646,7 +21884,7 @@ var init_dialog_confirm = __esm(() => {
 
 // src/tui/component/settings-dialog/actions.ts
 import { unlinkSync as unlinkSync2 } from "fs";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 function hasRestartableDaemon(orchestrator) {
   return orchestrator instanceof RemoteOrchestrator;
 }
@@ -21663,7 +21901,7 @@ async function confirmResetState(dialog, kv, renderer) {
     return;
   kv.clear();
   try {
-    unlinkSync2(join18(homeDir(), ".kobe", "tasks.json"));
+    unlinkSync2(join19(homeDir(), ".kobe", "tasks.json"));
   } catch (err) {
     if (err.code !== "ENOENT") {
       console.error("kobe: failed to delete tasks.json during reset:", err);
@@ -23549,6 +23787,7 @@ var init_settings_dialog = __esm(() => {
   init_auto_status();
   init_dispatcher();
   init_repos();
+  init_task();
   init_vendor();
   init_theme2();
   init_editor_prefs();
@@ -23965,6 +24204,7 @@ var init_task_actions = __esm(() => {
   init_interactive_command();
   init_errors();
   init_repos();
+  init_task();
   init_vendor();
   init_tmux();
 });
@@ -23972,7 +24212,7 @@ var init_task_actions = __esm(() => {
 // src/tui/lib/worktree-opener.ts
 import { spawn as spawn5 } from "child_process";
 import { existsSync as existsSync15 } from "fs";
-import { basename as basename7, delimiter, isAbsolute as isAbsolute4, join as join19 } from "path";
+import { basename as basename7, delimiter, isAbsolute as isAbsolute4, join as join20 } from "path";
 function executableOnPath(command, env, exists) {
   if (isAbsolute4(command))
     return exists(command);
@@ -23980,7 +24220,7 @@ function executableOnPath(command, env, exists) {
   for (const dir of pathEnv.split(delimiter)) {
     if (!dir)
       continue;
-    if (exists(join19(dir, command)))
+    if (exists(join20(dir, command)))
       return true;
   }
   return false;
@@ -24114,10 +24354,10 @@ var init_background_poll = __esm(() => {
 
 // src/tui/panes/sidebar/git-head.ts
 import { stat as stat5 } from "fs/promises";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 async function headFingerprint(repo) {
   try {
-    const st = await stat5(join20(repo, ".git", "HEAD"));
+    const st = await stat5(join21(repo, ".git", "HEAD"));
     return `${st.mtimeMs}:${st.size}`;
   } catch {
     return null;
@@ -24634,8 +24874,14 @@ function Sidebar(props) {
       return;
     }
     const idx = ids.indexOf(id);
-    if (idx >= 0 && idx !== cur)
-      setCursorIndex(idx);
+    if (idx >= 0) {
+      if (idx !== cur)
+        setCursorIndex(idx);
+    } else if (ids.length === 0) {
+      setCursorIndex(-1);
+    } else if (cur < 0 || cur >= ids.length) {
+      setCursorIndex(ids.length - 1);
+    }
   }));
   createEffect(on(view, () => {
     const ids = flatIds();
@@ -25707,6 +25953,7 @@ function TasksShell(props) {
           initPrompt: init3.initPrompt
         });
       }
+      await prepareWindowForSwitch(name);
       await runTmux(["switch-client", "-t", `=${name}`]);
       props.orch?.setActiveTask(id).catch(() => {});
       return;
@@ -25745,6 +25992,7 @@ function TasksShell(props) {
       notifyError("Couldn't start this task's session");
       return;
     }
+    await prepareWindowForSwitch(name);
     await runTmux(["switch-client", "-t", `=${name}`]);
     props.orch?.setActiveTask(id).catch(() => {});
   }
@@ -28061,7 +28309,7 @@ __export(exports_host7, {
   startOpsHost: () => startOpsHost,
   nextActivityPollDelay: () => nextActivityPollDelay
 });
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import { SyntaxStyle } from "@opentui/core";
 function nextActivityPollDelay(currentMs, idleStreak) {
   if (idleStreak < ACTIVITY_IDLE_RAMP_POLLS)
@@ -28234,7 +28482,7 @@ function basename8(p) {
   return i >= 0 ? p.slice(i + 1) : p;
 }
 function fingerprint(text) {
-  return createHash6("sha1").update(text).digest("hex");
+  return createHash7("sha1").update(text).digest("hex");
 }
 async function startOpsHost(args2) {
   await bootPaneHost({
@@ -29035,7 +29283,24 @@ async function main() {
       process.exit(2);
     }
     const { healSessionLayout: healSessionLayout2 } = await Promise.resolve().then(() => (init_tmux(), exports_tmux));
-    await healSessionLayout2(session);
+    const { coalesceLayoutWork: coalesceLayoutWork2 } = await Promise.resolve().then(() => (init_layout_coord(), exports_layout_coord));
+    await coalesceLayoutWork2(session, "heal", () => healSessionLayout2(session));
+    return;
+  }
+  if (subcommand === "capture-layout") {
+    const flags = parseOpsFlags(rest);
+    const session = flags.session;
+    if (!session) {
+      console.error("kobe capture-layout: --session <name> is required");
+      process.exit(2);
+    }
+    const { captureGlobalLayoutOnDrag: captureGlobalLayoutOnDrag2 } = await Promise.resolve().then(() => (init_tmux(), exports_tmux));
+    const { coalesceLayoutWork: coalesceLayoutWork2, genAgeMs: genAgeMs2, RESIZE_GUARD_MS: RESIZE_GUARD_MS2 } = await Promise.resolve().then(() => (init_layout_coord(), exports_layout_coord));
+    await coalesceLayoutWork2(session, "capture", async () => {
+      if (genAgeMs2(session, "resize") < RESIZE_GUARD_MS2)
+        return;
+      await captureGlobalLayoutOnDrag2(session);
+    });
     return;
   }
   if (subcommand === "quick-task") {