@starlein/paperclip-plugin-company-wizard 0.2.4 → 0.3.15

package/dist/worker.js

@@ -4,7 +4,7 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// node_modules/.pnpm/@paperclipai+plugin-sdk@file+..+paperclip+packages+plugins+sdk_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/define-plugin.js
+// node_modules/.pnpm/@paperclipai+plugin-sdk@2026.529.0_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/define-plugin.js
 function definePlugin(definition) {
   return Object.freeze({ definition });
 }
@@ -4050,7 +4050,7 @@ var coerce = {
 };
 var NEVER = INVALID;
 
-// ../paperclip/packages/shared/src/constants.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/constants.js
 var COMPANY_STATUSES = ["active", "paused", "archived"];
 var DEFAULT_COMPANY_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
 var MAX_COMPANY_ATTACHMENT_MAX_BYTES = 1024 * 1024 * 1024;
@@ -4171,7 +4171,8 @@ var ISSUE_COMMENT_METADATA_ROW_TYPES = [
   "run_link"
 ];
 function clampIssueRequestDepth(value) {
-  if (typeof value !== "number" || !Number.isFinite(value)) return 0;
+  if (typeof value !== "number" || !Number.isFinite(value))
+    return 0;
   return Math.min(MAX_ISSUE_REQUEST_DEPTH, Math.max(0, Math.floor(value)));
 }
 var ISSUE_THREAD_INTERACTION_KINDS = [
@@ -4586,11 +4587,11 @@ var PLUGIN_STATE_SCOPE_KINDS = [
   "run"
 ];
 
-// ../paperclip/packages/shared/src/adapter-type.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/adapter-type.js
 var agentAdapterTypeSchema = external_exports.string().trim().min(1).default("process").describe(`Known built-in adapters: ${AGENT_ADAPTER_TYPES.join(", ")}. External adapters may register additional non-empty string types at runtime.`);
 var optionalAgentAdapterTypeSchema = external_exports.string().trim().min(1).optional();
 
-// ../paperclip/packages/shared/src/network-bind.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/network-bind.js
 function normalizeHost(host) {
   const trimmed = host?.trim();
   return trimmed ? trimmed : void 0;
@@ -4606,9 +4607,12 @@ function isAllInterfacesHost(host) {
 function inferBindModeFromHost(host, opts) {
   const normalized = normalizeHost(host);
   const tailnetBindHost = normalizeHost(opts?.tailnetBindHost);
-  if (!normalized || isLoopbackHost(normalized)) return "loopback";
-  if (isAllInterfacesHost(normalized)) return "lan";
-  if (tailnetBindHost && normalized === tailnetBindHost) return "tailnet";
+  if (!normalized || isLoopbackHost(normalized))
+    return "loopback";
+  if (isAllInterfacesHost(normalized))
+    return "lan";
+  if (tailnetBindHost && normalized === tailnetBindHost)
+    return "tailnet";
   return "custom";
 }
 function validateConfiguredBindMode(input) {
@@ -4630,7 +4634,7 @@ function validateConfiguredBindMode(input) {
   return errors;
 }
 
-// ../paperclip/packages/shared/src/types/instance.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/types/instance.js
 var DAILY_RETENTION_PRESETS = [3, 7, 14];
 var WEEKLY_RETENTION_PRESETS = [1, 2, 4];
 var MONTHLY_RETENTION_PRESETS = [1, 3, 6];
@@ -4643,13 +4647,13 @@ var DEFAULT_BACKUP_RETENTION = {
   monthlyMonths: 1
 };
 
-// ../paperclip/packages/shared/src/types/search.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/types/search.js
 var COMPANY_SEARCH_SCOPES = ["all", "issues", "comments", "documents", "agents", "projects"];
 
-// ../paperclip/packages/shared/src/types/resource-memberships.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/types/resource-memberships.js
 var RESOURCE_MEMBERSHIP_STATES = ["joined", "left"];
 
-// ../paperclip/packages/shared/src/validators/sidebar-preferences.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/sidebar-preferences.js
 var sidebarOrderedIdSchema = external_exports.string().uuid();
 var sidebarOrderPreferenceSchema = external_exports.object({
   orderedIds: external_exports.array(sidebarOrderedIdSchema),
@@ -4659,13 +4663,13 @@ var upsertSidebarOrderPreferenceSchema = external_exports.object({
   orderedIds: external_exports.array(sidebarOrderedIdSchema)
 });
 
-// ../paperclip/packages/shared/src/validators/resource-memberships.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/resource-memberships.js
 var resourceMembershipStateSchema = external_exports.enum(RESOURCE_MEMBERSHIP_STATES);
 var updateResourceMembershipSchema = external_exports.object({
   state: resourceMembershipStateSchema
 });
 
-// ../paperclip/packages/shared/src/validators/execution-workspace.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/execution-workspace.js
 var executionWorkspaceStatusSchema = external_exports.enum([
   "active",
   "idle",
@@ -4785,14 +4789,14 @@ var updateExecutionWorkspaceSchema = external_exports.object({
   metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional().nullable()
 }).strict();
 
-// ../paperclip/packages/shared/src/types/feedback.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/types/feedback.js
 var FEEDBACK_TARGET_TYPES = ["issue_comment", "issue_document_revision"];
 var FEEDBACK_VOTE_VALUES = ["up", "down"];
 var FEEDBACK_DATA_SHARING_PREFERENCES = ["allowed", "not_allowed", "prompt"];
 var DEFAULT_FEEDBACK_DATA_SHARING_PREFERENCE = "prompt";
 var FEEDBACK_TRACE_STATUSES = ["local_only", "pending", "sent", "failed"];
 
-// ../paperclip/packages/shared/src/validators/feedback.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/feedback.js
 var feedbackTargetTypeSchema = external_exports.enum(FEEDBACK_TARGET_TYPES);
 var feedbackTraceStatusSchema = external_exports.enum(FEEDBACK_TRACE_STATUSES);
 var feedbackVoteValueSchema = external_exports.enum(FEEDBACK_VOTE_VALUES);
@@ -4805,12 +4809,9 @@ var upsertIssueFeedbackVoteSchema = external_exports.object({
   allowSharing: external_exports.boolean().optional()
 });
 
-// ../paperclip/packages/shared/src/validators/instance.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/instance.js
 function presetSchema(presets, label) {
-  return external_exports.number().refine(
-    (v) => presets.includes(v),
-    { message: `${label} must be one of: ${presets.join(", ")}` }
-  );
+  return external_exports.number().refine((v) => presets.includes(v), { message: `${label} must be one of: ${presets.join(", ")}` });
 }
 var backupRetentionPolicySchema = external_exports.object({
   dailyDays: presetSchema(DAILY_RETENTION_PRESETS, "dailyDays").default(DEFAULT_BACKUP_RETENTION.dailyDays),
@@ -4820,9 +4821,7 @@ var backupRetentionPolicySchema = external_exports.object({
 var instanceGeneralSettingsSchema = external_exports.object({
   censorUsernameInLogs: external_exports.boolean().default(false),
   keyboardShortcuts: external_exports.boolean().default(false),
-  feedbackDataSharingPreference: feedbackDataSharingPreferenceSchema.default(
-    DEFAULT_FEEDBACK_DATA_SHARING_PREFERENCE
-  ),
+  feedbackDataSharingPreference: feedbackDataSharingPreferenceSchema.default(DEFAULT_FEEDBACK_DATA_SHARING_PREFERENCE),
   backupRetention: backupRetentionPolicySchema.default(DEFAULT_BACKUP_RETENTION)
 }).strict();
 var patchInstanceGeneralSettingsSchema = instanceGeneralSettingsSchema.partial();
@@ -4840,7 +4839,7 @@ var issueGraphLivenessAutoRecoveryRequestSchema = external_exports.object({
   lookbackHours: external_exports.number().int().min(MIN_ISSUE_GRAPH_LIVENESS_AUTO_RECOVERY_LOOKBACK_HOURS).max(MAX_ISSUE_GRAPH_LIVENESS_AUTO_RECOVERY_LOOKBACK_HOURS).optional()
 }).strict();
 
-// ../paperclip/packages/shared/src/validators/budget.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/budget.js
 var upsertBudgetPolicySchema = external_exports.object({
   scopeType: external_exports.enum(BUDGET_SCOPE_TYPES),
   scopeId: external_exports.string().uuid(),
@@ -4866,7 +4865,7 @@ var resolveBudgetIncidentSchema = external_exports.object({
   }
 });
 
-// ../paperclip/packages/shared/src/validators/company.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/company.js
 var logoAssetIdSchema = external_exports.string().uuid().nullable().optional();
 var brandColorSchema = external_exports.string().regex(/^#[0-9a-fA-F]{6}$/).nullable().optional();
 var feedbackDataSharingTermsVersionSchema = external_exports.string().min(1).nullable().optional();
@@ -4894,12 +4893,9 @@ var updateCompanyBrandingSchema = external_exports.object({
   description: external_exports.string().nullable().optional(),
   brandColor: brandColorSchema,
   logoAssetId: logoAssetIdSchema
-}).strict().refine(
-  (value) => value.name !== void 0 || value.description !== void 0 || value.brandColor !== void 0 || value.logoAssetId !== void 0,
-  "At least one branding field must be provided"
-);
+}).strict().refine((value) => value.name !== void 0 || value.description !== void 0 || value.brandColor !== void 0 || value.logoAssetId !== void 0, "At least one branding field must be provided");
 
-// ../paperclip/packages/shared/src/validators/environment.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/environment.js
 var environmentDriverSchema = external_exports.enum(ENVIRONMENT_DRIVERS);
 var environmentStatusSchema = external_exports.enum(ENVIRONMENT_STATUSES);
 var environmentLeaseStatusSchema = external_exports.enum(ENVIRONMENT_LEASE_STATUSES);
@@ -4929,7 +4925,7 @@ var probeEnvironmentConfigSchema = external_exports.object({
   metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional().nullable()
 }).strict();
 
-// ../paperclip/packages/shared/src/validators/company-skill.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/company-skill.js
 var companySkillSourceTypeSchema = external_exports.enum(["local_path", "github", "url", "catalog", "skills_sh"]);
 var companySkillTrustLevelSchema = external_exports.enum(["markdown_only", "assets", "scripts_executables"]);
 var companySkillCompatibilitySchema = external_exports.enum(["compatible", "unknown", "invalid"]);
@@ -4973,9 +4969,7 @@ var companySkillUsageAgentSchema = external_exports.object({
   urlKey: external_exports.string().min(1),
   adapterType: external_exports.string().min(1),
   desired: external_exports.boolean(),
-  actualState: external_exports.string().nullable().describe(
-    "Runtime adapter skill state when explicitly fetched; company skill detail reads return null without probing agent runtimes."
-  )
+  actualState: external_exports.string().nullable().describe("Runtime adapter skill state when explicitly fetched; company skill detail reads return null without probing agent runtimes.")
 });
 var companySkillDetailSchema = companySkillSchema.extend({
   attachedAgentCount: external_exports.number().int().nonnegative(),
@@ -5137,7 +5131,7 @@ var companySkillInstallCatalogResultSchema = external_exports.object({
   warnings: external_exports.array(external_exports.string())
 });
 
-// ../paperclip/packages/shared/src/validators/adapter-skills.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/adapter-skills.js
 var agentSkillStateSchema = external_exports.enum([
   "available",
   "configured",
@@ -5185,13 +5179,13 @@ var agentSkillSyncSchema = external_exports.object({
   desiredSkills: external_exports.array(external_exports.string().min(1))
 });
 
-// ../paperclip/packages/shared/src/validators/text.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/text.js
 function normalizeEscapedLineBreaks(value) {
   return value.replace(/\\r\\n/g, "\n").replace(/\\n/g, "\n").replace(/\\r/g, "\n");
 }
 var multilineTextSchema = external_exports.string().transform(normalizeEscapedLineBreaks);
 
-// ../paperclip/packages/shared/src/validators/issue.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/issue.js
 var issueBlockedInboxStateSchema = external_exports.enum([
   "needs_attention",
   "awaiting_decision",
@@ -5462,9 +5456,11 @@ function resolveCreateIssueStatusDefault(input) {
 }
 function withCreateIssueStatusDefault(schema) {
   return external_exports.preprocess((input) => {
-    if (!input || typeof input !== "object" || Array.isArray(input)) return input;
+    if (!input || typeof input !== "object" || Array.isArray(input))
+      return input;
     const raw = input;
-    if (raw.status !== void 0) return input;
+    if (raw.status !== void 0)
+      return input;
     return {
       ...raw,
       status: resolveCreateIssueStatusDefault(raw).status
@@ -5606,9 +5602,7 @@ var addIssueCommentSchema = external_exports.object({
 });
 var issueThreadInteractionStatusSchema = external_exports.enum(ISSUE_THREAD_INTERACTION_STATUSES);
 var issueThreadInteractionKindSchema = external_exports.enum(ISSUE_THREAD_INTERACTION_KINDS);
-var issueThreadInteractionContinuationPolicySchema = external_exports.enum(
-  ISSUE_THREAD_INTERACTION_CONTINUATION_POLICIES
-);
+var issueThreadInteractionContinuationPolicySchema = external_exports.enum(ISSUE_THREAD_INTERACTION_CONTINUATION_POLICIES);
 var issueDocumentKeySchema = external_exports.string().trim().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]*$/, "Document key must be lowercase letters, numbers, _ or -");
 var suggestedTaskDraftSchema = external_exports.object({
   clientKey: external_exports.string().trim().min(1).max(120),
@@ -5840,7 +5834,7 @@ var upsertIssueDocumentSchema = external_exports.object({
 });
 var restoreIssueDocumentRevisionSchema = external_exports.object({});
 
-// ../paperclip/packages/shared/src/validators/secret.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/secret.js
 var envBindingPlainSchema = external_exports.object({
   type: external_exports.literal("plain"),
   value: external_exports.string()
@@ -5923,9 +5917,11 @@ var safeShortText = external_exports.string().trim().min(1).max(160);
 var optionalSafeShortText = safeShortText.optional().nullable();
 var deniedProviderConfigKeyPattern = /^(access[-_]?key([-_]?id)?|secret[-_]?access[-_]?key|secret[-_]?key|token|password|passwd|credential|credentials|private[-_]?key|pem|jwt|session[-_]?token|service[-_]?account([-_]?json)?|client[-_]?secret|secret[-_]?id|unseal[-_]?key|recovery[-_]?key|key[-_]?file([-_]?path)?|token[-_]?file([-_]?path)?)$/i;
 function rejectSensitiveProviderConfigKeys(value, ctx) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return;
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return;
   for (const key of Object.keys(value)) {
-    if (!deniedProviderConfigKeyPattern.test(key)) continue;
+    if (!deniedProviderConfigKeyPattern.test(key))
+      continue;
     ctx.addIssue({
       code: external_exports.ZodIssueCode.custom,
       path: ["config", key],
@@ -5950,28 +5946,27 @@ var gcpSecretManagerProviderConfigSchema = external_exports.object({
   namespace: optionalSafeShortText,
   secretNamePrefix: optionalSafeShortText
 }).strict();
-var vaultAddressSchema = external_exports.preprocess(
-  (value) => typeof value === "string" ? value.trim() : value,
-  external_exports.string().url().superRefine((value, ctx) => {
-    let url;
-    try {
-      url = new URL(value);
-    } catch {
-      return;
-    }
-    const hasPath = url.pathname !== "" && url.pathname !== "/";
-    if (url.protocol !== "http:" && url.protocol !== "https:" || url.username || url.password || url.search || url.hash || hasPath) {
-      ctx.addIssue({
-        code: external_exports.ZodIssueCode.custom,
-        message: "Vault address must be an origin-only HTTP(S) URL without credentials, path, query, or fragment"
-      });
-    }
-  }).transform((value) => new URL(value).origin)
-);
+var vaultAddressSchema = external_exports.preprocess((value) => typeof value === "string" ? value.trim() : value, external_exports.string().url().superRefine((value, ctx) => {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return;
+  }
+  const hasPath = url.pathname !== "" && url.pathname !== "/";
+  if (url.protocol !== "http:" && url.protocol !== "https:" || url.username || url.password || url.search || url.hash || hasPath) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Vault address must be an origin-only HTTP(S) URL without credentials, path, query, or fragment"
+    });
+  }
+}).transform((value) => new URL(value).origin));
 function rejectUnsafeVaultAddress(value, ctx) {
-  if (value === void 0 || value === null) return;
+  if (value === void 0 || value === null)
+    return;
   const parsed = vaultAddressSchema.safeParse(value);
-  if (parsed.success) return;
+  if (parsed.success)
+    return;
   for (const issue of parsed.error.issues) {
     ctx.addIssue({
       ...issue,
@@ -6085,7 +6080,7 @@ var remoteSecretImportSchema = external_exports.object({
   secrets: external_exports.array(remoteSecretImportSelectionSchema).min(1).max(100)
 });
 
-// ../paperclip/packages/shared/src/validators/routine.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/routine.js
 var routineVariableValueSchema = external_exports.union([external_exports.string(), external_exports.number().finite(), external_exports.boolean()]);
 var routineVariableSchema = external_exports.object({
   name: external_exports.string().trim().regex(/^[A-Za-z][A-Za-z0-9_]*$/),
@@ -6209,7 +6204,7 @@ var runRoutineSchema = external_exports.object({
 });
 var rotateRoutineTriggerSecretSchema = external_exports.object({});
 
-// ../paperclip/packages/shared/src/validators/company-portability.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/company-portability.js
 var portabilityIncludeSchema = external_exports.object({
   company: external_exports.boolean().optional(),
   agents: external_exports.boolean().optional(),
@@ -6433,7 +6428,7 @@ var companyPortabilityImportSchema = companyPortabilityPreviewSchema.extend({
   adapterOverrides: external_exports.record(external_exports.string().min(1), portabilityAdapterOverrideSchema).optional()
 });
 
-// ../paperclip/packages/shared/src/validators/agent.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/agent.js
 var agentPermissionsSchema = external_exports.object({
   canCreateAgents: external_exports.boolean().optional().default(false)
 });
@@ -6451,7 +6446,8 @@ var upsertAgentInstructionsFileSchema = external_exports.object({
 });
 var adapterConfigSchema = external_exports.record(external_exports.string(), external_exports.unknown()).superRefine((value, ctx) => {
   const envValue = value.env;
-  if (envValue === void 0) return;
+  if (envValue === void 0)
+    return;
   const parsed = envConfigSchema.safeParse(envValue);
   if (!parsed.success) {
     ctx.addIssue({
@@ -6521,10 +6517,7 @@ var wakeAgentSchema = external_exports.object({
   reason: external_exports.string().optional().nullable(),
   payload: external_exports.record(external_exports.string(), external_exports.unknown()).optional().nullable(),
   idempotencyKey: external_exports.string().optional().nullable(),
-  forceFreshSession: external_exports.preprocess(
-    (value) => value === null ? void 0 : value,
-    external_exports.boolean().optional().default(false)
-  )
+  forceFreshSession: external_exports.preprocess((value) => value === null ? void 0 : value, external_exports.boolean().optional().default(false))
 });
 var resetAgentSessionSchema = external_exports.object({
   taskKey: external_exports.string().min(1).optional().nullable()
@@ -6544,7 +6537,7 @@ var updateAgentPermissionsSchema = external_exports.object({
   canAssignTasks: external_exports.boolean()
 });
 
-// ../paperclip/packages/shared/src/validators/project.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/project.js
 var executionWorkspaceStrategySchema2 = external_exports.object({
   type: external_exports.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
   baseRef: external_exports.string().optional().nullable(),
@@ -6640,7 +6633,7 @@ var createProjectSchema = external_exports.object({
 });
 var updateProjectSchema = external_exports.object(projectFields).partial();
 
-// ../paperclip/packages/shared/src/validators/document-annotation.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/document-annotation.js
 var documentAnnotationThreadStatusSchema = external_exports.enum(DOCUMENT_ANNOTATION_THREAD_STATUSES);
 var documentAnnotationAnchorStateSchema = external_exports.enum(DOCUMENT_ANNOTATION_ANCHOR_STATES);
 var documentAnnotationAnchorConfidenceSchema = external_exports.enum(DOCUMENT_ANNOTATION_ANCHOR_CONFIDENCES);
@@ -6689,7 +6682,7 @@ var updateDocumentAnnotationThreadSchema = external_exports.object({
   message: "At least one field must be provided"
 });
 
-// ../paperclip/packages/shared/src/validators/search.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/search.js
 var COMPANY_SEARCH_MAX_QUERY_LENGTH = 200;
 var COMPANY_SEARCH_DEFAULT_LIMIT = 20;
 var COMPANY_SEARCH_MAX_LIMIT = 50;
@@ -6700,7 +6693,8 @@ function firstQueryValue(value) {
 function clampInteger(value, fallback, min, max) {
   const raw = firstQueryValue(value);
   const numeric = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim().length > 0 ? Number.parseInt(raw, 10) : Number.NaN;
-  if (!Number.isFinite(numeric)) return fallback;
+  if (!Number.isFinite(numeric))
+    return fallback;
   return Math.min(max, Math.max(min, Math.floor(numeric)));
 }
 var companySearchQuerySchema = external_exports.object({
@@ -6710,7 +6704,7 @@ var companySearchQuerySchema = external_exports.object({
   offset: external_exports.unknown().optional().transform((value) => clampInteger(value, 0, 0, COMPANY_SEARCH_MAX_OFFSET))
 });
 
-// ../paperclip/packages/shared/src/validators/issue-tree-control.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/issue-tree-control.js
 var issueTreeControlModeSchema = external_exports.enum(ISSUE_TREE_CONTROL_MODES);
 var issueTreeHoldReleasePolicySchema = external_exports.object({
   strategy: external_exports.enum(ISSUE_TREE_HOLD_RELEASE_POLICY_STRATEGIES).default("manual"),
@@ -6732,10 +6726,7 @@ var releaseIssueTreeHoldSchema = external_exports.object({
   metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional().nullable()
 }).strict();
 
-// ../paperclip/packages/shared/src/validators/work-product.ts
-function attachmentContentPath(attachmentId) {
-  return `/api/attachments/${attachmentId}/content`;
-}
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/work-product.js
 var issueWorkProductTypeSchema = external_exports.enum([
   "preview_url",
   "runtime_service",
@@ -6762,38 +6753,6 @@ var issueWorkProductReviewStateSchema = external_exports.enum([
   "approved",
   "changes_requested"
 ]);
-var attachmentArtifactWorkProductMetadataSchema = external_exports.object({
-  attachmentId: external_exports.string().uuid(),
-  contentType: external_exports.string().min(1),
-  byteSize: external_exports.number().int().nonnegative(),
-  contentPath: external_exports.string().min(1),
-  openPath: external_exports.string().min(1),
-  downloadPath: external_exports.string().min(1),
-  originalFilename: external_exports.string().optional().nullable()
-}).superRefine((value, ctx) => {
-  const contentPath = attachmentContentPath(value.attachmentId);
-  if (value.contentPath !== contentPath) {
-    ctx.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      path: ["contentPath"],
-      message: "contentPath must point to the same-origin attachment content route"
-    });
-  }
-  if (value.openPath !== contentPath) {
-    ctx.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      path: ["openPath"],
-      message: "openPath must point to the same-origin attachment content route"
-    });
-  }
-  if (value.downloadPath !== `${contentPath}?download=1`) {
-    ctx.addIssue({
-      code: external_exports.ZodIssueCode.custom,
-      path: ["downloadPath"],
-      message: "downloadPath must point to the same-origin attachment download route"
-    });
-  }
-});
 var createIssueWorkProductSchema = external_exports.object({
   projectId: external_exports.string().uuid().optional().nullable(),
   executionWorkspaceId: external_exports.string().uuid().optional().nullable(),
@@ -6813,7 +6772,7 @@ var createIssueWorkProductSchema = external_exports.object({
 });
 var updateIssueWorkProductSchema = createIssueWorkProductSchema.partial();
 
-// ../paperclip/packages/shared/src/validators/goal.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/goal.js
 var createGoalSchema = external_exports.object({
   title: external_exports.string().min(1),
   description: external_exports.string().optional().nullable(),
@@ -6824,7 +6783,7 @@ var createGoalSchema = external_exports.object({
 });
 var updateGoalSchema = createGoalSchema.partial();
 
-// ../paperclip/packages/shared/src/validators/approval.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/approval.js
 var createApprovalSchema = external_exports.object({
   type: external_exports.enum(APPROVAL_TYPES),
   requestedByAgentId: external_exports.string().uuid().optional().nullable(),
@@ -6844,7 +6803,7 @@ var addApprovalCommentSchema = external_exports.object({
   body: multilineTextSchema.pipe(external_exports.string().min(1))
 });
 
-// ../paperclip/packages/shared/src/validators/cost.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/cost.js
 var createCostEventSchema = external_exports.object({
   agentId: external_exports.string().uuid(),
   issueId: external_exports.string().uuid().optional().nullable(),
@@ -6869,7 +6828,7 @@ var updateBudgetSchema = external_exports.object({
   budgetMonthlyCents: external_exports.number().int().nonnegative()
 });
 
-// ../paperclip/packages/shared/src/validators/finance.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/finance.js
 var createFinanceEventSchema = external_exports.object({
   agentId: external_exports.string().uuid().optional().nullable(),
   issueId: external_exports.string().uuid().optional().nullable(),
@@ -6900,12 +6859,12 @@ var createFinanceEventSchema = external_exports.object({
   currency: value.currency.toUpperCase()
 }));
 
-// ../paperclip/packages/shared/src/validators/asset.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/asset.js
 var createAssetImageMetadataSchema = external_exports.object({
   namespace: external_exports.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9/_-]+$/).optional()
 });
 
-// ../paperclip/packages/shared/src/validators/access.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/access.js
 var createCompanyInviteSchema = external_exports.object({
   allowedJoinTypes: external_exports.enum(INVITE_JOIN_TYPES).default("both"),
   humanRole: external_exports.enum(HUMAN_COMPANY_MEMBERSHIP_ROLES).optional().nullable(),
@@ -6954,12 +6913,10 @@ var resolveCliAuthChallengeSchema = external_exports.object({
   token: external_exports.string().min(16).max(256)
 });
 var updateMemberPermissionsSchema = external_exports.object({
-  grants: external_exports.array(
-    external_exports.object({
-      permissionKey: external_exports.enum(PERMISSION_KEYS),
-      scope: external_exports.record(external_exports.string(), external_exports.unknown()).optional().nullable()
-    })
-  )
+  grants: external_exports.array(external_exports.object({
+    permissionKey: external_exports.enum(PERMISSION_KEYS),
+    scope: external_exports.record(external_exports.string(), external_exports.unknown()).optional().nullable()
+  }))
 });
 var editableMembershipStatuses = ["pending", "active", "suspended"];
 var updateCompanyMemberSchema = external_exports.object({
@@ -6997,7 +6954,8 @@ var searchAdminUsersQuerySchema = external_exports.object({
 });
 var profileImageAssetPathPattern = /^\/api\/assets\/[^/?#]+\/content(?:\?[^#]*)?(?:#.*)?$/;
 function isValidProfileImage(value) {
-  if (profileImageAssetPathPattern.test(value)) return true;
+  if (profileImageAssetPathPattern.test(value))
+    return true;
   try {
     const url = new URL(value);
     return url.protocol === "https:" || url.protocol === "http:";
@@ -7024,30 +6982,27 @@ var updateCurrentUserProfileSchema = external_exports.object({
   image: external_exports.union([profileImageSchema, external_exports.literal(""), external_exports.null()]).optional().transform((value) => value === "" ? null : value)
 });
 
-// ../paperclip/packages/shared/src/validators/plugin.ts
-var jsonSchemaSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine(
-  (val) => {
-    if (Object.keys(val).length === 0) return true;
-    return typeof val.type === "string" || val.$ref !== void 0 || val.oneOf !== void 0 || val.anyOf !== void 0 || val.allOf !== void 0;
-  },
-  { message: "Must be a valid JSON Schema object (requires at least a 'type', '$ref', or composition keyword)" }
-);
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/validators/plugin.js
+var jsonSchemaSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((val) => {
+  if (Object.keys(val).length === 0)
+    return true;
+  return typeof val.type === "string" || val.$ref !== void 0 || val.oneOf !== void 0 || val.anyOf !== void 0 || val.allOf !== void 0;
+}, { message: "Must be a valid JSON Schema object (requires at least a 'type', '$ref', or composition keyword)" });
 var CRON_FIELD_PATTERN = /^(\*(?:\/[0-9]+)?|[0-9]+(?:-[0-9]+)?(?:\/[0-9]+)?)(?:,(\*(?:\/[0-9]+)?|[0-9]+(?:-[0-9]+)?(?:\/[0-9]+)?))*$/;
 function isValidCronExpression(expression) {
   const trimmed = expression.trim();
-  if (!trimmed) return false;
+  if (!trimmed)
+    return false;
   const fields = trimmed.split(/\s+/);
-  if (fields.length !== 5) return false;
+  if (fields.length !== 5)
+    return false;
   return fields.every((f) => CRON_FIELD_PATTERN.test(f));
 }
 var pluginJobDeclarationSchema = external_exports.object({
   jobKey: external_exports.string().min(1),
   displayName: external_exports.string().min(1),
   description: external_exports.string().optional(),
-  schedule: external_exports.string().refine(
-    (val) => isValidCronExpression(val),
-    { message: "schedule must be a valid 5-field cron expression (e.g. '*/15 * * * *')" }
-  ).optional()
+  schedule: external_exports.string().refine((val) => isValidCronExpression(val), { message: "schedule must be a valid 5-field cron expression (e.g. '*/15 * * * *')" }).optional()
 });
 var pluginWebhookDeclarationSchema = external_exports.object({
   endpointKey: external_exports.string().min(1),
@@ -7061,10 +7016,7 @@ var pluginToolDeclarationSchema = external_exports.object({
   parametersSchema: jsonSchemaSchema
 });
 var pluginEnvironmentDriverDeclarationSchema = external_exports.object({
-  driverKey: external_exports.string().min(1).regex(
-    /^[a-z0-9][a-z0-9._-]*$/,
-    "Environment driver key must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"
-  ),
+  driverKey: external_exports.string().min(1).regex(/^[a-z0-9][a-z0-9._-]*$/, "Environment driver key must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"),
   kind: external_exports.enum(["environment_driver", "sandbox_provider"]).optional(),
   displayName: external_exports.string().min(1).max(100),
   description: external_exports.string().max(500).optional(),
@@ -7139,10 +7091,7 @@ var pluginManagedRoutineDeclarationSchema = external_exports.object({
     billingCode: external_exports.string().trim().max(200).nullable().optional()
   }).optional()
 });
-var pluginLocalFolderRelativePathSchema = external_exports.string().min(1).max(500).refine(
-  (value) => !value.startsWith("/") && !value.includes("..") && !value.includes("\\") && !value.split("/").some((segment) => segment === "" || segment === "."),
-  { message: "local folder paths must be relative paths without traversal, empty segments, or backslashes" }
-);
+var pluginLocalFolderRelativePathSchema = external_exports.string().min(1).max(500).refine((value) => !value.startsWith("/") && !value.includes("..") && !value.includes("\\") && !value.split("/").some((segment) => segment === "" || segment === "."), { message: "local folder paths must be relative paths without traversal, empty segments, or backslashes" });
 var pluginLocalFolderDeclarationSchema = external_exports.object({
   folderKey: external_exports.string().min(1).max(100).regex(/^[a-z0-9][a-z0-9._:-]*$/, {
     message: "folderKey must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, colons, underscores, or hyphens"
@@ -7154,10 +7103,7 @@ var pluginLocalFolderDeclarationSchema = external_exports.object({
   requiredFiles: external_exports.array(pluginLocalFolderRelativePathSchema).optional()
 });
 var pluginManagedSkillFileDeclarationSchema = external_exports.object({
-  path: pluginLocalFolderRelativePathSchema.refine(
-    (value) => value.toLowerCase() !== "skill.md",
-    { message: "managed skill files cannot replace SKILL.md; use markdown for the main skill file" }
-  ),
+  path: pluginLocalFolderRelativePathSchema.refine((value) => value.toLowerCase() !== "skill.md", { message: "managed skill files cannot replace SKILL.md; use markdown for the main skill file" }),
   content: external_exports.string().max(2e5)
 });
 var pluginManagedSkillDeclarationSchema = external_exports.object({
@@ -7374,10 +7320,7 @@ var pluginDatabaseDeclarationSchema = external_exports.object({
   namespaceSlug: external_exports.string().regex(/^[a-z0-9][a-z0-9_]*$/, {
     message: "namespaceSlug must be lowercase letters, digits, or underscores and start with a letter or digit"
   }).max(40).optional(),
-  migrationsDir: external_exports.string().min(1).refine(
-    (value) => !value.startsWith("/") && !value.includes("..") && !/[\\]/.test(value),
-    { message: "migrationsDir must be a relative package path without '..' or backslashes" }
-  ),
+  migrationsDir: external_exports.string().min(1).refine((value) => !value.startsWith("/") && !value.includes("..") && !/[\\]/.test(value), { message: "migrationsDir must be a relative package path without '..' or backslashes" }),
   coreReadTables: external_exports.array(external_exports.enum(PLUGIN_DATABASE_CORE_READ_TABLES)).optional()
 });
 var pluginApiRouteDeclarationSchema = external_exports.object({
@@ -7387,10 +7330,7 @@ var pluginApiRouteDeclarationSchema = external_exports.object({
   method: external_exports.enum(PLUGIN_API_ROUTE_METHODS),
   path: external_exports.string().min(1).regex(/^\/[a-zA-Z0-9:_./-]*$/, {
     message: "path must start with / and contain only path-safe literal or :param segments"
-  }).refine(
-    (value) => !value.includes("..") && !value.includes("//") && value !== "/api" && !value.startsWith("/api/") && value !== "/plugins" && !value.startsWith("/plugins/"),
-    { message: "path must stay inside the plugin api namespace" }
-  ),
+  }).refine((value) => !value.includes("..") && !value.includes("//") && value !== "/api" && !value.startsWith("/api/") && value !== "/plugins" && !value.startsWith("/plugins/"), { message: "path must stay inside the plugin api namespace" }),
   auth: external_exports.enum(PLUGIN_API_ROUTE_AUTH_MODES),
   capability: external_exports.literal("api.routes.register"),
   checkoutPolicy: external_exports.enum(PLUGIN_API_ROUTE_CHECKOUT_POLICIES).optional(),
@@ -7401,27 +7341,15 @@ var pluginApiRouteDeclarationSchema = external_exports.object({
   ]).optional()
 });
 var pluginManifestV1Schema = external_exports.object({
-  id: external_exports.string().min(1).regex(
-    /^[a-z0-9][a-z0-9._-]*$/,
-    "Plugin id must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"
-  ),
+  id: external_exports.string().min(1).regex(/^[a-z0-9][a-z0-9._-]*$/, "Plugin id must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"),
   apiVersion: external_exports.literal(1),
-  version: external_exports.string().min(1).regex(
-    /^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/,
-    "Version must follow semver (e.g. 1.0.0 or 1.0.0-beta.1)"
-  ),
+  version: external_exports.string().min(1).regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "Version must follow semver (e.g. 1.0.0 or 1.0.0-beta.1)"),
   displayName: external_exports.string().min(1).max(100),
   description: external_exports.string().min(1).max(500),
   author: external_exports.string().min(1).max(200),
   categories: external_exports.array(external_exports.enum(PLUGIN_CATEGORIES)).min(1),
-  minimumHostVersion: external_exports.string().regex(
-    /^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/,
-    "minimumHostVersion must follow semver (e.g. 1.0.0)"
-  ).optional(),
-  minimumPaperclipVersion: external_exports.string().regex(
-    /^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/,
-    "minimumPaperclipVersion must follow semver (e.g. 1.0.0)"
-  ).optional(),
+  minimumHostVersion: external_exports.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumHostVersion must follow semver (e.g. 1.0.0)").optional(),
+  minimumPaperclipVersion: external_exports.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumPaperclipVersion must follow semver (e.g. 1.0.0)").optional(),
   capabilities: external_exports.array(external_exports.enum(PLUGIN_CAPABILITIES)).min(1),
   entrypoints: external_exports.object({
     worker: external_exports.string().min(1),
@@ -7762,7 +7690,7 @@ var listPluginStateSchema = external_exports.object({
   namespace: external_exports.string().min(1).optional()
 });
 
-// ../paperclip/packages/shared/src/api.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/api.js
 var API_PREFIX = "/api";
 var API = {
   health: `${API_PREFIX}/health`,
@@ -7789,7 +7717,7 @@ var API = {
   admin: `${API_PREFIX}/admin`
 };
 
-// ../paperclip/packages/shared/src/routine-variables.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/routine-variables.js
 var HUMAN_TIMESTAMP_FORMATTER = new Intl.DateTimeFormat("en-US", {
   year: "numeric",
   month: "long",
@@ -7801,7 +7729,7 @@ var HUMAN_TIMESTAMP_FORMATTER = new Intl.DateTimeFormat("en-US", {
   timeZoneName: "short"
 });
 
-// ../paperclip/packages/shared/src/config-schema.ts
+// node_modules/.pnpm/@paperclipai+shared@2026.529.0/node_modules/@paperclipai/shared/dist/config-schema.js
 var configMetaSchema = external_exports.object({
   version: external_exports.literal(1),
   updatedAt: external_exports.string(),
@@ -7957,14 +7885,14 @@ var paperclipConfigSchema = external_exports.object({
   }
 });
 
-// node_modules/.pnpm/@paperclipai+plugin-sdk@file+..+paperclip+packages+plugins+sdk_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/worker-rpc-host.js
+// node_modules/.pnpm/@paperclipai+plugin-sdk@2026.529.0_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/worker-rpc-host.js
 import fs from "node:fs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import path from "node:path";
 import { createInterface } from "node:readline";
 import { fileURLToPath } from "node:url";
 
-// node_modules/.pnpm/@paperclipai+plugin-sdk@file+..+paperclip+packages+plugins+sdk_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/protocol.js
+// node_modules/.pnpm/@paperclipai+plugin-sdk@2026.529.0_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/protocol.js
 var JSONRPC_VERSION = "2.0";
 var JSONRPC_ERROR_CODES = {
   /** Invalid JSON was received by the server. */
@@ -8096,7 +8024,7 @@ var JsonRpcCallError = class extends Error {
   }
 };
 
-// node_modules/.pnpm/@paperclipai+plugin-sdk@file+..+paperclip+packages+plugins+sdk_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/worker-rpc-host.js
+// node_modules/.pnpm/@paperclipai+plugin-sdk@2026.529.0_react@19.2.4/node_modules/@paperclipai/plugin-sdk/dist/worker-rpc-host.js
 var DEFAULT_RPC_TIMEOUT_MS = 3e4;
 function realpathOrResolvedPath(filePath) {
   const resolvedPath = path.resolve(filePath);
@@ -9400,6 +9328,15 @@ function buildCeoAgentRuntimeConfig() {
     }
   };
 }
+function buildWorkerAgentRuntimeConfig() {
+  return {
+    heartbeat: {
+      enabled: false,
+      intervalSec: DEFAULT_CEO_HEARTBEAT_INTERVAL_SEC,
+      maxConcurrentRuns: DEFAULT_CEO_MAX_CONCURRENT_RUNS
+    }
+  };
+}
 
 // src/logic/assemble.js
 async function exists(p) {
@@ -9444,6 +9381,11 @@ async function assembleCompany({
   moduleNames,
   extraRoleNames,
   inlineGoals = [],
+  userIssues = [],
+  presetIssues = [],
+  presetRoutines = [],
+  presetLabels = [],
+  enableIsolatedWorktrees = false,
   outputDir,
   templatesDir,
   onProgress = () => {
@@ -9548,9 +9490,20 @@ async function assembleCompany({
     }
     onProgress(`+ agents/${roleName}/ (role)`);
   }
-  const initialIssues = [];
-  const initialRoutines = [];
+  const initialIssues = Array.isArray(presetIssues) ? presetIssues.map((issue) => ({ ...issue, source: issue.source || "preset" })) : [];
+  const initialRoutines = Array.isArray(presetRoutines) ? presetRoutines.map((routine) => ({ ...routine, source: routine.source || "preset" })) : [];
+  const explicitBootstrapLabels = Array.isArray(presetLabels) ? [...presetLabels] : [];
   const roleAdapterOverrides = /* @__PURE__ */ new Map();
+  const docRoleMap = /* @__PURE__ */ new Map();
+  const addDocRoles = (docName, roles) => {
+    const set = docRoleMap.get(docName) ?? /* @__PURE__ */ new Set();
+    for (const r of roles) set.add(r);
+    docRoleMap.set(docName, set);
+  };
+  const normalizeIssueTitle = (title) => String(title || "").trim().toLowerCase();
+  const seenIssueTitles = new Set(
+    initialIssues.map((issue) => normalizeIssueTitle(issue.title)).filter(Boolean)
+  );
   const resolveAssignee = (assignee, moduleJson) => {
     if (assignee?.startsWith("capability:")) {
       const capName = assignee.slice("capability:".length);
@@ -9561,6 +9514,55 @@ async function assembleCompany({
     }
     return assignee;
   };
+  const resolveReviewGate = (reviewGate) => {
+    if (!reviewGate || typeof reviewGate !== "object") return null;
+    const reviewersRaw = Array.isArray(reviewGate.reviewers) ? reviewGate.reviewers : [];
+    const reviewers = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const role of reviewersRaw) {
+      if (typeof role !== "string") continue;
+      if (!allRoles.has(role)) continue;
+      if (seen.has(role)) continue;
+      seen.add(role);
+      reviewers.push(role);
+    }
+    const approver = typeof reviewGate.approver === "string" && allRoles.has(reviewGate.approver) ? reviewGate.approver : void 0;
+    if (approver) {
+      const idx = reviewers.indexOf(approver);
+      if (idx !== -1) reviewers.splice(idx, 1);
+    }
+    if (reviewers.length === 0 && !approver) return null;
+    return { reviewers, approver };
+  };
+  const renderReviewGate = (gate) => {
+    const stages = [];
+    for (const role of gate.reviewers) {
+      stages.push(`  - stage ${stages.length + 1} (review) \u2192 assign ${JSON.stringify(role)}`);
+    }
+    if (gate.approver) {
+      stages.push(
+        `  - stage ${stages.length + 1} (approval) \u2192 assign ${JSON.stringify(gate.approver)}`
+      );
+    }
+    return `- **executionPolicy** (set when creating this issue; resolve each role to its agentId):
+${stages.join("\n")}
+
+`;
+  };
+  const isFoundationIssue = (issue) => issue?.bootstrapPhase === "foundation" || issue?.phase === "foundation" || issue?.bootstrapOrder === "foundation" || issue?.foundation === true;
+  const resolvedUserIssues = [];
+  for (const issue of Array.isArray(userIssues) ? userIssues : []) {
+    if (!issue || !issue.title) continue;
+    const titleKey = normalizeIssueTitle(issue.title);
+    if (titleKey && seenIssueTitles.has(titleKey)) continue;
+    if (titleKey) seenIssueTitles.add(titleKey);
+    resolvedUserIssues.push({
+      ...issue,
+      assignTo: resolveAssignee(issue.assignTo, null),
+      source: "user"
+    });
+  }
+  initialIssues.unshift(...resolvedUserIssues);
   for (const moduleName of moduleNames) {
     const moduleDir = join(templatesDir, "modules", moduleName);
     if (!await exists(moduleDir)) {
@@ -9575,8 +9577,17 @@ async function assembleCompany({
         continue;
       }
     }
+    if (Array.isArray(moduleJson?.labels)) {
+      explicitBootstrapLabels.push(...moduleJson.labels);
+    }
     const moduleIssues = moduleJson?.issues || moduleJson?.tasks || [];
     for (const issue of moduleIssues) {
+      const titleKey = normalizeIssueTitle(issue.title);
+      if (titleKey && seenIssueTitles.has(titleKey)) {
+        onProgress(`\u25CB issue "${issue.title}" (already provided by preset or earlier module)`);
+        continue;
+      }
+      if (titleKey) seenIssueTitles.add(titleKey);
       initialIssues.push({
         ...issue,
         assignTo: resolveAssignee(issue.assignTo, moduleJson),
@@ -9595,8 +9606,21 @@ async function assembleCompany({
     const docsDir = join(moduleDir, "docs");
     if (await exists(docsDir)) {
       await copyDir(docsDir, join(companyDir, "docs"));
+      const moduleRoles = /* @__PURE__ */ new Set();
+      for (const cap of moduleJson?.capabilities ?? []) {
+        for (const owner of cap.owners ?? []) if (allRoles.has(owner)) moduleRoles.add(owner);
+      }
+      for (const issue of moduleIssues) {
+        if (issue.assignTo && allRoles.has(issue.assignTo)) moduleRoles.add(issue.assignTo);
+      }
+      for (const routine of moduleJson?.routines ?? []) {
+        if (routine.assignTo && allRoles.has(routine.assignTo)) moduleRoles.add(routine.assignTo);
+      }
+      for (const r of moduleJson?.activatesWithRoles ?? []) if (allRoles.has(r)) moduleRoles.add(r);
+      const rolesForDocs = moduleRoles.size > 0 ? moduleRoles : /* @__PURE__ */ new Set(["*"]);
       const docs = await readdir(docsDir);
       for (const doc of docs) {
+        addDocRoles(doc, rolesForDocs);
         onProgress(`+ docs/${doc} (${moduleName})`);
       }
     }
@@ -9711,25 +9735,53 @@ Read and follow: \`$AGENT_HOME/skills/${skillFile}\`
   }
   const finalDocsDir = join(companyDir, "docs");
   if (await exists(finalDocsDir)) {
-    const docs = await readdir(finalDocsDir);
+    const docs = (await readdir(finalDocsDir)).sort();
     if (docs.length > 0) {
       const agentsBaseDir = join(companyDir, "agents");
       const agentRoles = await readdir(agentsBaseDir, { withFileTypes: true });
       for (const role of agentRoles) {
         if (!role.isDirectory()) continue;
         const agentsMd = join(agentsBaseDir, role.name, "AGENTS.md");
-        if (await exists(agentsMd)) {
-          let docRefs = "\n## Shared Documentation\n";
-          for (const doc of docs) {
-            docRefs += `
+        if (!await exists(agentsMd)) continue;
+        const relevantDocs = docs.filter((doc) => {
+          if (role.name === "ceo") return true;
+          const roles = docRoleMap.get(doc);
+          return !roles || roles.has("*") || roles.has(role.name);
+        });
+        if (relevantDocs.length === 0) continue;
+        let docRefs = "\n## Shared Documentation\n\nReference docs relevant to your role (paths are relative to your workspace home):\n";
+        for (const doc of relevantDocs) {
+          docRefs += `
 Read: \`docs/${doc}\`
 `;
-          }
-          await appendToFile(agentsMd, docRefs);
         }
+        await appendToFile(agentsMd, docRefs);
       }
     }
   }
+  const agentsBaseDirForSubst = join(companyDir, "agents");
+  if (await exists(agentsBaseDirForSubst)) {
+    const agentRoleDirs = await readdir(agentsBaseDirForSubst, { withFileTypes: true });
+    for (const roleDir of agentRoleDirs) {
+      if (!roleDir.isDirectory()) continue;
+      const absoluteAgentHome = join(agentsBaseDirForSubst, roleDir.name);
+      const subst = async (dir) => {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+          const full = join(dir, entry.name);
+          if (entry.isDirectory()) {
+            await subst(full);
+          } else if (entry.name.endsWith(".md")) {
+            const content = await readFile(full, "utf-8");
+            if (content.includes("$AGENT_HOME")) {
+              await writeFile(full, content.split("$AGENT_HOME").join(absoluteAgentHome));
+            }
+          }
+        }
+      };
+      await subst(join(agentsBaseDirForSubst, roleDir.name));
+    }
+  }
   const rolesList = [...allRoles];
   const DEFAULT_BOOTSTRAP_LABELS = [
     { name: "feature", color: "#0075ca", useFor: "New user-facing capability" },
@@ -9824,16 +9876,23 @@ Read: \`docs/${doc}\`
     }
     return "feature";
   };
-  const buildBootstrapLabels = (issues) => {
-    if (issues.length === 0) return [];
+  const buildBootstrapLabels = (issues, explicitLabels = []) => {
+    if (issues.length === 0 && explicitLabels.length === 0) return [];
     const labelsByName2 = new Map(
       DEFAULT_BOOTSTRAP_LABELS.map((label) => [label.name, { ...label }])
     );
+    for (const label of explicitLabels) {
+      for (const parsedLabel of parseIssueLabels({ labels: [label] })) {
+        labelsByName2.set(parsedLabel.name, parsedLabel);
+      }
+    }
     for (const issue of issues) {
-      const explicitLabels = parseIssueLabels(issue);
-      if (explicitLabels.length > 0) {
-        for (const label of explicitLabels) {
-          labelsByName2.set(label.name, label);
+      const explicitLabels2 = parseIssueLabels(issue);
+      if (explicitLabels2.length > 0) {
+        for (const label of explicitLabels2) {
+          if (!labelsByName2.has(label.name)) {
+            labelsByName2.set(label.name, label);
+          }
         }
         continue;
       }
@@ -9848,7 +9907,17 @@ Read: \`docs/${doc}\`
     }
     return [...labelsByName2.values()];
   };
-  const bootstrapLabels = buildBootstrapLabels(initialIssues);
+  const orderInitialIssuesForBootstrap = () => {
+    const originalOrder = new Map(initialIssues.map((issue, index) => [issue, index]));
+    const rank = (issue) => {
+      if (isFoundationIssue(issue)) return 0;
+      if (issue?.source === "user") return 1;
+      return 2;
+    };
+    initialIssues.sort((a, b) => rank(a) - rank(b) || originalOrder.get(a) - originalOrder.get(b));
+  };
+  orderInitialIssuesForBootstrap();
+  const bootstrapLabels = buildBootstrapLabels(initialIssues, explicitBootstrapLabels);
   const labelsByName = new Map(bootstrapLabels.map((label) => [label.name, label]));
   const getIssueLabelNames = (issue) => {
     const explicit = parseIssueLabels(issue).map((label) => label.name);
@@ -9860,7 +9929,11 @@ Read: \`docs/${doc}\`
     if (lines.length === 0) return "";
     return lines.map(([k, v]) => `- **${k}**: ${v}`).join("\n") + "\n\n";
   };
-  const escapeBody = (text) => text.split("\n").map((l) => l.replace(/^(#+)/, "\\$1")).join("\n");
+  const redactSecrets = (text) => String(text || "").replace(
+    /\b(GH_TOKEN|GITHUB_TOKEN|API_KEY|SECRET|TOKEN|PASSWORD|PASS|PRIVATE_KEY)\s*=\s*[^\s`'"<>]+/gi,
+    "$1=[REDACTED]"
+  ).replace(/\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g, "[REDACTED]").replace(/\b(sk-[A-Za-z0-9_-]{20,}|xox[baprs]-[A-Za-z0-9-]{20,})\b/g, "[REDACTED]");
+  const escapeBody = (text) => redactSecrets(text).split("\n").map((l) => l.replace(/^(#+)/, "\\$1")).join("\n");
   let bootstrap = `# Bootstrap: ${companyName}
 
 `;
@@ -9875,7 +9948,7 @@ Read: \`docs/${doc}\`
     bootstrap += `## Company
 
 `;
-    bootstrap += `${companyDescription}
+    bootstrap += `${escapeBody(companyDescription)}
 
 `;
   }
@@ -9899,6 +9972,75 @@ Read: \`docs/${doc}\`
       }
     }
   }
+  const normalizeProjectWorkspace = (proj) => {
+    const explicitWorkspace = proj && typeof proj.workspace === "object" && proj.workspace !== null ? proj.workspace : {};
+    const sourceType = typeof explicitWorkspace.sourceType === "string" && explicitWorkspace.sourceType.trim() ? explicitWorkspace.sourceType.trim() : typeof proj?.workspaceSourceType === "string" && proj.workspaceSourceType.trim() ? proj.workspaceSourceType.trim() : typeof proj?.repoUrl === "string" && proj.repoUrl.trim() ? "git_repo" : "local_path";
+    const localCwd = join(companyDir, "projects", toPascalCase(proj.name));
+    const workspace = {
+      sourceType,
+      ...explicitWorkspace,
+      isPrimary: explicitWorkspace.isPrimary ?? proj?.isPrimary ?? true
+    };
+    if (sourceType === "git_repo") {
+      const repoUrl = explicitWorkspace.repoUrl || proj?.repoUrl;
+      const repoRef = explicitWorkspace.repoRef || proj?.repoRef || proj?.defaultRef;
+      const defaultRef = explicitWorkspace.defaultRef || proj?.defaultRef || repoRef;
+      if (repoUrl) workspace.repoUrl = repoUrl;
+      if (repoRef) workspace.repoRef = repoRef;
+      if (defaultRef) workspace.defaultRef = defaultRef;
+      delete workspace.cwd;
+    } else {
+      if (!workspace.cwd) workspace.cwd = localCwd;
+      const trimmedSetup = typeof workspace.setupCommand === "string" ? workspace.setupCommand.trim() : "";
+      if (!trimmedSetup || trimmedSetup === "git init -b main" || trimmedSetup === "git init") {
+        workspace.setupCommand = "git init -b main && git -c user.email=bootstrap@paperclip.local -c user.name='Paperclip Bootstrap' commit --allow-empty -m 'chore: initialize repository'";
+      }
+    }
+    return workspace;
+  };
+  const renderWorkspaceMetaFields = (workspace) => {
+    const orderedKeys = ["sourceType", "cwd", "repoUrl", "repoRef", "defaultRef", "isPrimary"];
+    const keys = [
+      ...orderedKeys.filter((key) => workspace[key] !== void 0),
+      ...Object.keys(workspace).filter((key) => !orderedKeys.includes(key))
+    ];
+    return keys.map((key) => [`workspace.${key}`, String(workspace[key])]);
+  };
+  const formatWorkspaceObject = (workspace) => {
+    const orderedKeys = ["sourceType", "cwd", "repoUrl", "repoRef", "defaultRef", "isPrimary"];
+    const entries = [
+      ...orderedKeys.filter((key) => workspace[key] !== void 0).map((key) => [key, workspace[key]]),
+      ...Object.entries(workspace).filter(([key]) => !orderedKeys.includes(key))
+    ];
+    const fields = entries.filter(([, value]) => value !== void 0 && value !== null && value !== "").map(([key, value]) => {
+      if (typeof value === "boolean") return `${key}: ${value}`;
+      return `${key}: "${String(value)}"`;
+    });
+    return `{ ${fields.join(", ")} }`;
+  };
+  const isFreshLocalRepo = (workspace) => workspace?.sourceType !== "git_repo";
+  const effectiveExecutionPolicy = (proj, workspace) => {
+    const policy = proj?.executionWorkspacePolicy;
+    if (!policy || typeof policy !== "object") return null;
+    if (policy.defaultMode === "isolated_workspace") {
+      if (!enableIsolatedWorktrees || isFreshLocalRepo(workspace)) return null;
+    }
+    return policy;
+  };
+  const renderExecutionPolicyMetaFields = (proj, workspace) => {
+    const policy = effectiveExecutionPolicy(proj, workspace);
+    if (!policy) return [];
+    const rows = [];
+    if (policy.defaultMode) rows.push(["executionWorkspacePolicy.defaultMode", policy.defaultMode]);
+    const strategy = policy.workspaceStrategy;
+    if (strategy && typeof strategy === "object") {
+      if (strategy.type)
+        rows.push(["executionWorkspacePolicy.workspaceStrategy.type", strategy.type]);
+      if (strategy.baseRef)
+        rows.push(["executionWorkspacePolicy.workspaceStrategy.baseRef", strategy.baseRef]);
+    }
+    return rows;
+  };
   const mainProject = resolvedProjects[0];
   const mainProjectName = mainProject?.name || companyName;
   if (resolvedProjects.length > 0) {
@@ -9906,14 +10048,13 @@ Read: \`docs/${doc}\`
 
 `;
     for (const proj of resolvedProjects) {
-      const projCwd = join(companyDir, "projects", toPascalCase(proj.name));
+      const workspace = normalizeProjectWorkspace(proj);
       bootstrap += `### ${proj.name}
 
 `;
       bootstrap += renderMeta([
-        ["workspace.sourceType", "local_path"],
-        ["workspace.cwd", projCwd],
-        ["workspace.isPrimary", "true"],
+        ...renderWorkspaceMetaFields(workspace),
+        ...renderExecutionPolicyMetaFields(proj, workspace),
         [
           "goalIds",
           proj.goals?.length > 0 ? proj.goals.map((g) => `"${g}"`).join(", ") : void 0
@@ -9947,6 +10088,9 @@ Read: \`docs/${doc}\`
   }
   bootstrap += `## Agents
 
+`;
+  bootstrap += `> **The Company Wizard has already created all agents listed below**, each with its full instructions bundle. Do NOT create new agents. Match them by \`metadata.templateRole\` when assigning issues; only re-create one if it is genuinely missing.
+
 `;
   for (const role of rolesList) {
     const roleMeta = roleMetaByName.get(role) || {};
@@ -9998,6 +10142,8 @@ Read: \`docs/${doc}\`
       const explicitProjectRef = typeof issue.projectIdRef === "string" ? issue.projectIdRef : typeof issue.projectName === "string" ? issue.projectName : typeof issue.project === "string" ? issue.project : void 0;
       const resolvedProjectRef = explicitProjectRef || mainProjectName;
       const issueLabelNames = getIssueLabelNames(issue);
+      const goalRefRaw = issue.goalId || issue.goalIdRef || issue.goal || issue.goalTitle;
+      const goalRef = typeof goalRefRaw === "string" && goalRefRaw.trim().length > 0 ? goalRefRaw.trim() : void 0;
       for (const labelName of issueLabelNames) {
         if (!labelsByName.has(labelName)) {
           labelsByName.set(labelName, {
@@ -10016,8 +10162,13 @@ Read: \`docs/${doc}\`
         ["priority", issue.priority || "medium"],
         ["parentId", parentRef ? `\u2192 "${parentRef}"` : void 0],
         ["projectId", `\u2192 "${resolvedProjectRef}"`],
+        ["goalId", goalRef ? `\u2192 "${goalRef}"` : void 0],
         ["labelIds", `\u2192 [${issueLabelNames.map((name) => `"${name}"`).join(", ")}]`]
       ]);
+      const issueReviewGate = resolveReviewGate(issue.reviewGate);
+      if (issueReviewGate) {
+        bootstrap += renderReviewGate(issueReviewGate);
+      }
       if (issue.description) {
         bootstrap += `${escapeBody(issue.description)}
 
@@ -10036,12 +10187,20 @@ Read: \`docs/${doc}\`
     bootstrap += `- Do not reopen \`done\` parent/subissues without an explicit reason in a comment.
 `;
     bootstrap += `- Do not reuse parent workspaces for subissues unless explicitly requested.
-
+`;
+    if (moduleNames.includes("pr-review")) {
+      bootstrap += `- Required PR reviews use the issue's \`executionPolicy\`: a \`review\` stage for the Code Reviewer (plus any relevant domain reviewer \u2014 QA/UI/UX/DevOps), then a final \`approval\` stage for the Product Owner. Resolve each reviewer/approver role to its agentId. Do not create separate child review issues and do not use @-mentions.
+`;
+    }
+    bootstrap += `
 `;
   }
   if (initialRoutines.length > 0) {
     bootstrap += `## Routines
 
+`;
+    bootstrap += `> **The Company Wizard has already created the routines listed below** (with board authority, so each could be assigned to its owning agent). Do NOT recreate them. Note: an agent may only create routines assigned to itself, so never try to create another agent's routine.
+
 `;
     for (const routine of initialRoutines) {
       bootstrap += `### ${routine.title}
@@ -10080,23 +10239,25 @@ Read: \`docs/${doc}\`
 `;
   }
   for (const proj of resolvedProjects) {
-    const projCwd = join(companyDir, "projects", toPascalCase(proj.name));
+    const workspace = normalizeProjectWorkspace(proj);
     const goalLinks = proj.goals?.length > 0 ? `, goalIds \u2192 [${proj.goals.map((g) => `"${g}"`).join(", ")}]` : "";
-    bootstrap += `${stepN++}. **Create project** "${proj.name}" (workspace: { sourceType: "local_path", cwd: \`${projCwd}\`, isPrimary: true }${goalLinks})
+    const activePolicy = effectiveExecutionPolicy(proj, workspace);
+    const policy = activePolicy?.defaultMode ? `, executionWorkspacePolicy.defaultMode: "${activePolicy.defaultMode}"` : "";
+    bootstrap += `${stepN++}. **Create project** "${proj.name}" (workspace: ${formatWorkspaceObject(workspace)}${policy}${goalLinks})
 `;
   }
   if (bootstrapLabels.length > 0) {
     bootstrap += `${stepN++}. **Create labels** \u2014 create each label exactly as listed in the Labels section before creating issues
 `;
   }
-  bootstrap += `${stepN++}. **Create agents** \u2014 hire missing agents via governance using the adapter/runtime fields listed above; reuse/update an existing agent with the same metadata.templateRole instead of duplicating it
+  bootstrap += `${stepN++}. **Agents already created** \u2014 the Company Wizard provisioned every agent above with its full instructions bundle. Match them by metadata.templateRole when assigning issues; only hire via governance if one is genuinely missing
 `;
   if (initialIssues.length > 0) {
     bootstrap += `${stepN++}. **Create issues** \u2014 every issue, including subtasks, must carry explicit projectId; subtasks also require parentId
 `;
   }
   if (initialRoutines.length > 0) {
-    bootstrap += `${stepN++}. **Create routines** with cron triggers as listed above
+    bootstrap += `${stepN++}. **Routines already created** \u2014 the Company Wizard provisioned the routines above (with their cron triggers) using board authority. Do not recreate them; an agent can only create routines assigned to itself
 `;
   }
   bootstrap += `${stepN}. **Start CEO heartbeat** (one-time initial wakeup)
@@ -10220,6 +10381,12 @@ var PaperclipClient = class {
       return false;
     }
   }
+  /**
+   * Read instance-wide experimental settings (including enableIsolatedWorkspaces).
+   */
+  async getInstanceExperimentalSettings() {
+    return this._fetch("/api/instance/settings/experimental");
+  }
   async createCompany({ name, description }) {
     return this._fetch("/api/companies", {
       method: "POST",
@@ -10406,6 +10573,12 @@ var PaperclipClient = class {
       })
     });
   }
+  async updateIssue(issueId, updates = {}) {
+    return this._fetch(`/api/issues/${issueId}`, {
+      method: "PATCH",
+      body: JSON.stringify(updates || {})
+    });
+  }
   async createRoutine(companyId, {
     title,
     description,
@@ -10504,14 +10677,16 @@ async function loadModules(templatesDir) {
   for (const dir of dirs) {
     if (!dir.isDirectory()) continue;
     const moduleJson = await readJson2(join2(modulesDir, dir.name, "module.meta.json"));
-    const readmePath = join2(modulesDir, dir.name, "README.md");
-    let description = "";
-    if (await exists2(readmePath)) {
-      const content = await readFile2(readmePath, "utf-8");
-      const descLine = content.split("\n").find((l) => l.length > 0 && !l.startsWith("#"));
-      description = descLine?.trim() || "";
-    }
-    const mod = { name: dir.name, description, ...moduleJson || {} };
+    const mod = { name: dir.name, ...moduleJson || {} };
+    if (!mod.description) {
+      const readmePath = join2(modulesDir, dir.name, "README.md");
+      if (await exists2(readmePath)) {
+        const content = await readFile2(readmePath, "utf-8");
+        const descLine = content.split("\n").find((l) => l.length > 0 && !l.startsWith("#"));
+        mod.description = descLine?.trim() || "";
+      }
+    }
+    if (mod.description === void 0) mod.description = "";
     if (mod.tasks && !mod.issues) {
       mod.issues = mod.tasks;
       delete mod.tasks;
@@ -10586,6 +10761,39 @@ function collectGoals(preset, modules, selectedModules) {
   }
   return goals;
 }
+function resolveEffectiveModules(preset, modules, selectedModules) {
+  const known = new Set(modules.map((m) => m.name));
+  const requiresByName = new Map(
+    modules.map((m) => [m.name, Array.isArray(m.requires) ? m.requires : []])
+  );
+  const effective = /* @__PURE__ */ new Set();
+  const queue = [];
+  const add = (name) => {
+    if (typeof name !== "string" || !known.has(name) || effective.has(name)) return;
+    effective.add(name);
+    queue.push(name);
+  };
+  for (const moduleName of Array.isArray(preset?.modules) ? preset.modules : []) {
+    add(moduleName);
+  }
+  for (const moduleName of selectedModules ?? []) {
+    add(moduleName);
+  }
+  while (queue.length > 0) {
+    const moduleName = queue.shift();
+    for (const dep of requiresByName.get(moduleName) ?? []) {
+      add(dep);
+    }
+  }
+  return [...effective];
+}
+function collectPresetBootstrapData(preset) {
+  return {
+    labels: Array.isArray(preset?.labels) ? preset.labels.map((label) => ({ ...label })) : [],
+    issues: Array.isArray(preset?.issues) ? preset.issues.map((issue) => ({ ...issue })) : [],
+    routines: Array.isArray(preset?.routines) ? preset.routines.map((routine) => ({ ...routine })) : []
+  };
+}
 
 // src/worker.ts
 var __dirname = path2.dirname(fileURLToPath2(import.meta.url));
@@ -10656,6 +10864,61 @@ async function ensureTemplatesDir(cfg) {
     );
   }
 }
+function isLikelyAnthropicApiKey(value) {
+  return value.startsWith("sk-ant-");
+}
+async function resolveAnthropicApiKey(ctx, configuredValue) {
+  if (typeof configuredValue !== "string") return "";
+  const value = configuredValue.trim();
+  if (!value) return "";
+  if (isLikelyAnthropicApiKey(value)) return value;
+  try {
+    const resolved = await ctx.secrets.resolve(value);
+    return resolved.trim();
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    throw new Error(
+      `Anthropic API key could not be resolved. Re-save the plugin setting with a valid Anthropic API key (sk-ant-...). ${detail}`
+    );
+  }
+}
+async function callAnthropic(apiKey, system, messages) {
+  try {
+    const response = await fetch("https://api.anthropic.com/v1/messages", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "x-api-key": apiKey,
+        "anthropic-version": "2023-06-01"
+      },
+      body: JSON.stringify({
+        model: "claude-opus-4-8",
+        // High ceiling so the wizard's final config — which reproduces the user's
+        // full spec in the first goal — is never truncated mid-JSON. This is only
+        // an upper bound; generation time tracks the tokens actually produced.
+        max_tokens: 32768,
+        ...system ? { system } : {},
+        messages
+      })
+    });
+    if (!response.ok) {
+      const body = await response.text();
+      return { text: "", error: `Anthropic API error (${response.status}): ${body}` };
+    }
+    const data = await response.json();
+    return { text: data.content?.[0]?.text || "" };
+  } catch (err) {
+    return { text: "", error: err instanceof Error ? err.message : String(err) };
+  }
+}
+var aiChatJobs = /* @__PURE__ */ new Map();
+var AI_CHAT_JOB_TTL_MS = 10 * 60 * 1e3;
+function sweepAiChatJobs() {
+  const now = Date.now();
+  for (const [id, job] of aiChatJobs) {
+    if (now - job.createdAt > AI_CHAT_JOB_TTL_MS) aiChatJobs.delete(id);
+  }
+}
 function loadJsonFiles(dir, filename) {
   const items = [];
   const errors = [];
@@ -10701,10 +10964,37 @@ function loadTemplates(templatesDir) {
     loadErrors: [...presetLoad.errors, ...moduleLoad.errors, ...roleLoad.errors]
   };
 }
+function cfgBool(cfg, key) {
+  const raw = cfg[key];
+  return raw === true || typeof raw === "string" && raw.toLowerCase() === "true";
+}
+async function resolveEnableIsolatedWorkspacesFromInstance(cfg, log) {
+  const paperclipUrl = cfg.paperclipUrl || process.env.PAPERCLIP_PUBLIC_URL || "http://localhost:3100";
+  const paperclipEmail = cfg.paperclipEmail || "";
+  const paperclipPassword = cfg.paperclipPassword || "";
+  const instanceClient = new PaperclipClient(paperclipUrl, {
+    email: paperclipEmail,
+    password: paperclipPassword
+  });
+  try {
+    await instanceClient.connect();
+    const experimentalSettings = await instanceClient.getInstanceExperimentalSettings();
+    return experimentalSettings?.enableIsolatedWorkspaces === true;
+  } catch (err) {
+    if (log) {
+      const detail = err instanceof Error ? err.message : String(err);
+      log(`\u26A0 Could not read instance experimental settings: ${detail}. Using fallback false.`);
+    }
+    return false;
+  }
+}
 function resolveCompaniesDir(cfg) {
   if (cfg.companiesDir) return cfg.companiesDir;
   return path2.join(os.homedir(), ".paperclip", "instances", "default", "companies");
 }
+function formatRoleName(role) {
+  return role.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
+}
 function collectInstructionFiles(rootDir) {
   const out = {};
   if (!fs2.existsSync(rootDir)) return out;
@@ -10815,20 +11105,28 @@ var plugin = definePlugin({
           loadModules(templatesDir)
         ]);
         const selectedPreset = presets.find((p) => p.name === params.presetName) || null;
-        const goals = collectGoals(
+        const effectiveModules = resolveEffectiveModules(
           selectedPreset,
           allModules,
-          new Set(params.selectedModules ?? [])
+          params.selectedModules ?? []
         );
+        const goals = collectGoals(selectedPreset, allModules, new Set(effectiveModules));
+        const presetBootstrapData = collectPresetBootstrapData(selectedPreset);
         const previewGoals = Array.isArray(params.goals) ? params.goals : params.goal ? [params.goal] : [];
         const previewProjects = Array.isArray(params.projects) ? params.projects : [];
+        const previewIssues = Array.isArray(params.issues) ? params.issues : [];
         const result = await assembleCompany({
           companyName,
           userGoals: previewGoals,
           userProjects: previewProjects,
-          moduleNames: params.selectedModules ?? [],
+          moduleNames: effectiveModules,
           extraRoleNames: params.selectedRoles ?? [],
           inlineGoals: goals,
+          userIssues: previewIssues,
+          presetIssues: presetBootstrapData.issues,
+          presetRoutines: presetBootstrapData.routines,
+          presetLabels: presetBootstrapData.labels,
+          enableIsolatedWorktrees: await resolveEnableIsolatedWorkspacesFromInstance(cfg),
           outputDir: tmpDir,
           templatesDir
         });
@@ -10863,34 +11161,42 @@ var plugin = definePlugin({
     });
     ctx.actions.register("ai-chat", async (params) => {
       try {
+        if (params.mode === "poll") {
+          const jobId = typeof params.jobId === "string" ? params.jobId : "";
+          const job = jobId ? aiChatJobs.get(jobId) : void 0;
+          if (!job) {
+            return {
+              text: "",
+              status: "error",
+              error: "Unknown or expired generation job. Please retry."
+            };
+          }
+          if (job.status === "pending") return { status: "pending" };
+          aiChatJobs.delete(jobId);
+          if (job.status === "error") return { text: "", status: "error", error: job.error };
+          return { text: job.text, status: "done" };
+        }
         const cfg = await ctx.config.get() ?? {};
-        const apiKey = cfg.anthropicApiKey || "";
+        const apiKey = await resolveAnthropicApiKey(ctx, cfg.anthropicApiKey);
         if (!apiKey) {
           return {
             text: "",
             error: "Anthropic API key not configured. Add it in plugin settings (anthropicApiKey)."
           };
         }
-        const response = await fetch("https://api.anthropic.com/v1/messages", {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "x-api-key": apiKey,
-            "anthropic-version": "2023-06-01"
-          },
-          body: JSON.stringify({
-            model: "claude-sonnet-4-20250514",
-            max_tokens: 8192,
-            ...params.system ? { system: params.system } : {},
-            messages: params.messages
-          })
-        });
-        if (!response.ok) {
-          const body = await response.text();
-          return { text: "", error: `Anthropic API error (${response.status}): ${body}` };
+        if (params.mode === "start") {
+          sweepAiChatJobs();
+          const jobId = `aichat-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
+          aiChatJobs.set(jobId, { status: "pending", createdAt: Date.now() });
+          void callAnthropic(apiKey, params.system, params.messages).then((result) => {
+            aiChatJobs.set(
+              jobId,
+              result.error ? { status: "error", error: result.error, createdAt: Date.now() } : { status: "done", text: result.text, createdAt: Date.now() }
+            );
+          });
+          return { jobId, status: "pending" };
         }
-        const data = await response.json();
-        return { text: data.content?.[0]?.text || "" };
+        return await callAnthropic(apiKey, params.system, params.messages);
       } catch (err) {
         return { text: "", error: err instanceof Error ? err.message : String(err) };
       }
@@ -10898,7 +11204,8 @@ var plugin = definePlugin({
     ctx.actions.register("check-ai-config", async () => {
       try {
         const cfg = await ctx.config.get() ?? {};
-        if (!cfg.anthropicApiKey) {
+        const apiKey = await resolveAnthropicApiKey(ctx, cfg.anthropicApiKey);
+        if (!apiKey) {
           return {
             ok: false,
             error: "Anthropic API key not configured. Add it in plugin settings (anthropicApiKey)."
@@ -10920,8 +11227,11 @@ var plugin = definePlugin({
         const paperclipUrl = cfg.paperclipUrl || process.env.PAPERCLIP_PUBLIC_URL || "http://localhost:3100";
         const paperclipEmail = cfg.paperclipEmail || "";
         const paperclipPassword = cfg.paperclipPassword || "";
-        const rawDisableBoardApproval = cfg.disableBoardApprovalOnNewCompanies;
-        const disableBoardApprovalOnNewCompanies = rawDisableBoardApproval === true || typeof rawDisableBoardApproval === "string" && rawDisableBoardApproval.toLowerCase() === "true";
+        const disableBoardApprovalOnNewCompanies = cfgBool(
+          cfg,
+          "disableBoardApprovalOnNewCompanies"
+        );
+        const enableIsolatedWorktrees = await resolveEnableIsolatedWorkspacesFromInstance(cfg, log);
         const companyName = typeof params.companyName === "string" ? params.companyName.trim() : "";
         const existingCompanyId = typeof params.existingCompanyId === "string" && params.existingCompanyId.trim() ? params.existingCompanyId.trim() : "";
         if (!companyName) return { error: "companyName is required", logs };
@@ -10935,25 +11245,33 @@ var plugin = definePlugin({
           (Array.isArray(roleTemplates) ? roleTemplates : []).filter((role) => role && typeof role.name === "string").map((role) => [role.name, role])
         );
         const selectedPreset = presets.find((p) => p.name === params.presetName) || null;
-        const goals = collectGoals(
+        const effectiveModules = resolveEffectiveModules(
           selectedPreset,
           allModules,
-          new Set(params.selectedModules ?? [])
+          params.selectedModules ?? []
         );
+        const goals = collectGoals(selectedPreset, allModules, new Set(effectiveModules));
+        const presetBootstrapData = collectPresetBootstrapData(selectedPreset);
         const outputDir = resolveCompaniesDir(cfg);
         fs2.mkdirSync(outputDir, { recursive: true });
         log("Assembling company workspace...");
         const companyDescription = typeof params.companyDescription === "string" ? params.companyDescription.trim() : "";
         const userGoals = Array.isArray(params.goals) ? params.goals : params.goal ? [params.goal] : [];
         const userProjects = Array.isArray(params.projects) ? params.projects : [];
+        const userIssues = Array.isArray(params.issues) ? params.issues : [];
         const assembleResult = await assembleCompany({
           companyName,
           companyDescription,
           userGoals,
           userProjects,
-          moduleNames: params.selectedModules ?? [],
+          moduleNames: effectiveModules,
           extraRoleNames: params.selectedRoles ?? [],
           inlineGoals: goals,
+          userIssues,
+          presetIssues: presetBootstrapData.issues,
+          presetRoutines: presetBootstrapData.routines,
+          presetLabels: presetBootstrapData.labels,
+          enableIsolatedWorktrees,
           outputDir,
           templatesDir,
           onProgress: log
@@ -11018,6 +11336,7 @@ var plugin = definePlugin({
           }
         }
         let ceoAgentId;
+        const teamAgentIds = {};
         let bootstrapIssue;
         try {
           const userCeoAdapter = params.ceoAdapter || {};
@@ -11125,18 +11444,125 @@ var plugin = definePlugin({
             fallbackEntryContent: ceoPromptTemplate,
             log
           });
+          const teamRoles = [...assembleResult.allRoles ?? []].filter(
+            (r) => r && r !== "ceo"
+          );
+          let existingByTemplateRole = /* @__PURE__ */ new Map();
+          if (existingCompanyId && teamRoles.length > 0) {
+            const agents = await client.listAgents(companyId);
+            if (Array.isArray(agents)) {
+              for (const a of agents) {
+                const tr = a?.metadata?.templateRole;
+                if (tr && a?.status !== "terminated" && a?.role !== "ceo") {
+                  existingByTemplateRole.set(tr, a);
+                }
+              }
+            }
+          }
+          for (const roleName of teamRoles) {
+            const roleTemplate = roleTemplateByName.get(roleName) || {};
+            const paperclipRole = typeof roleTemplate.paperclipRole === "string" && roleTemplate.paperclipRole.trim() ? roleTemplate.paperclipRole.trim() : "general";
+            const roleTitle = typeof roleTemplate.title === "string" && roleTemplate.title.trim() ? roleTemplate.title.trim() : formatRoleName(roleName);
+            const roleDescription = typeof roleTemplate.description === "string" && roleTemplate.description.trim() ? roleTemplate.description.trim() : void 0;
+            const roleMetadata = {
+              templateRole: roleName,
+              ...roleDescription ? { description: roleDescription } : {}
+            };
+            const roleRuntimeConfig = buildWorkerAgentRuntimeConfig();
+            const roleAdapterConfig = buildCeoAdapterConfig({
+              userCeoAdapter,
+              companyDir,
+              roleAdapterOverrides: assembleResult.roleAdapterOverrides?.get(roleName) ?? {}
+            });
+            const roleInstructionsDir = path2.join(companyDir, "agents", roleName);
+            const roleInstructionFiles = collectInstructionFiles(roleInstructionsDir);
+            const roleInstructionsBundle = Object.keys(roleInstructionFiles).length > 0 ? { entryFile: "AGENTS.md", files: roleInstructionFiles } : void 0;
+            const existingAgent = existingByTemplateRole.get(roleName);
+            if (existingAgent?.id) {
+              try {
+                await client.updateAgent(existingAgent.id, {
+                  adapterType,
+                  adapterConfig: roleAdapterConfig,
+                  runtimeConfig: roleRuntimeConfig,
+                  metadata: { ...existingAgent.metadata ?? {}, ...roleMetadata },
+                  ...!existingAgent.title && roleTitle ? { title: roleTitle } : {},
+                  ...!existingAgent.capabilities && roleDescription ? { capabilities: roleDescription } : {}
+                });
+                log(`\u2713 Reusing ${roleTitle} (${existingAgent.id})`);
+              } catch (err) {
+                log(
+                  `\u26A0 Could not update ${roleTitle}: ${err instanceof Error ? err.message : String(err)}`
+                );
+              }
+              teamAgentIds[roleName] = existingAgent.id;
+              continue;
+            }
+            const roleAgent = await client.createAgent(companyId, {
+              name: roleTitle,
+              role: paperclipRole,
+              title: roleTitle,
+              ...roleDescription ? { capabilities: roleDescription } : {},
+              metadata: roleMetadata,
+              reportsTo: ceoAgentId,
+              adapterType,
+              adapterConfig: roleAdapterConfig,
+              instructionsBundle: roleInstructionsBundle,
+              runtimeConfig: roleRuntimeConfig
+            });
+            teamAgentIds[roleName] = roleAgent.id;
+            log(`\u2713 ${roleTitle} created (${roleAgent.id})`);
+            if (roleAgent?._pendingApprovalId) {
+              log(
+                `\u26A0 ${roleTitle} hire pending approval: ${roleAgent._pendingApprovalId}. Approve it in the board.`
+              );
+              if (roleAgent._approvalAutoApproveError) {
+                log(`  Auto-approve failed: ${roleAgent._approvalAutoApproveError}`);
+              }
+            }
+          }
+          if (!existingCompanyId) {
+            const routines = Array.isArray(assembleResult.initialRoutines) ? assembleResult.initialRoutines : [];
+            for (const routine of routines) {
+              const title = typeof routine.title === "string" && routine.title.trim() ? routine.title.trim() : typeof routine.name === "string" ? routine.name.trim() : "";
+              if (!title) continue;
+              const role = routine.assignTo;
+              const assigneeAgentId = !role || role === "ceo" ? ceoAgentId : teamAgentIds[role] ?? ceoAgentId;
+              try {
+                const createdRoutine = await client.createRoutine(companyId, {
+                  title,
+                  description: routine.description,
+                  assigneeAgentId,
+                  priority: routine.priority || "medium",
+                  concurrencyPolicy: routine.concurrencyPolicy || "skip_if_active"
+                });
+                if (routine.schedule && createdRoutine?.id) {
+                  await client.createRoutineTrigger(createdRoutine.id, {
+                    kind: "schedule",
+                    cronExpression: routine.schedule,
+                    timezone: "UTC"
+                  });
+                }
+                log(
+                  `\u2713 Routine "${title}" created${routine.schedule ? ` (${routine.schedule})` : ""}`
+                );
+              } catch (err) {
+                log(
+                  `\u26A0 Could not create routine "${title}": ${err instanceof Error ? err.message : String(err)}`
+                );
+              }
+            }
+          }
           const bootstrapDescription = fs2.readFileSync(
             path2.join(companyDir, "BOOTSTRAP.md"),
             "utf-8"
           );
           log("Creating bootstrap task for CEO...");
-          const issue = await ctx.issues.create({
-            companyId,
+          const issue = await client.createIssue(companyId, {
             title: `Bootstrap ${company.name || companyName}`,
             description: bootstrapDescription,
-            assigneeAgentId: ceoAgentId
+            assigneeAgentId: ceoAgentId,
+            status: "todo"
           });
-          await ctx.issues.update(issue.id, { status: "todo" }, companyId);
           bootstrapIssue = issue;
           log(`\u2713 Bootstrap task created: ${bootstrapIssue.identifier || bootstrapIssue.id}`);
         } catch (err) {
@@ -11166,7 +11592,7 @@ var plugin = definePlugin({
           companyId,
           issuePrefix: company.issuePrefix,
           paperclipUrl,
-          agentIds: { ceo: ceoAgentId },
+          agentIds: { ceo: ceoAgentId, ...teamAgentIds },
           issueIds: [bootstrapIssue.id],
           logs
         };