@super-one/cli 0.52.0-alpha → 0.53.0-alpha

package/lib/cli.mjs

@@ -179,7 +179,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_request",
-        "description": 'Request user approval for one or more child sessions. Call session_collab_list_agents first; repeat an agentId to reuse a profile. Invent a human-friendly name and role for every launch. Pass a short 2\u20133 sentence summary (confirm UI) and a full Markdown task (delivered on start; expandable in the UI). Omitted config fields inherit profile defaults. Before setting config.cwd or config.worktree, call read_manual({ domain: "product", topic: "collaboration" }); same-repo isolation belongs in config.worktree. The user may edit model, effort, provider, permission, and sandbox. Each approved launch returns a one-shot credential for session_collab_start.',
+        "description": 'Request user approval for collaboration launches: mode "spawn" (default) creates a child; mode "link" opens a mailbox with an existing sessionId. Spawn: list_agents; require agentId, name, role, summary, task; for cwd/worktree call read_manual({ domain: "product", topic: "collaboration" }); same-repo isolation belongs in config.worktree. Link: require sessionId + summary; optional task opening (turn-injected, not system prompt). User must approve; credential for session_collab_start.',
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -194,9 +194,22 @@ var init_host_action_superone_descriptors = __esm({
                     "type": "string",
                     "description": "Optional caller correlation id."
                   },
+                  "mode": {
+                    "type": "string",
+                    "enum": [
+                      "spawn",
+                      "link"
+                    ],
+                    "description": '"spawn" (default) creates a new child session. "link" connects to an already-existing SuperOne session (sessionId required).'
+                  },
+                  "sessionId": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": 'Existing SuperOne session id to link with (mode "link" only). Required for link; ignore for spawn. Prefer ids from @session mentions or session_list \u2014 never invent ids.'
+                  },
                   "agentId": {
                     "type": "string",
-                    "description": "Agent profile id from session_collab_list_agents."
+                    "description": 'Agent profile id from session_collab_list_agents. Required for mode "spawn"; omit for "link".'
                   },
                   "summary": {
                     "type": "string",
@@ -205,23 +218,23 @@ var init_host_action_superone_descriptors = __esm({
                   },
                   "task": {
                     "type": "string",
-                    "minLength": 1,
-                    "description": "Full task brief in Markdown. Delivered to the child session on session_collab_start. The user can expand the summary in the confirm UI to preview it."
+                    "description": "Full Markdown brief. Spawn: delivered to the child on session_collab_start. Link: optional opening for the peer (mailbox + turn wake, never system prompt). Expandable in the confirm UI."
                   },
                   "name": {
                     "type": "string",
                     "minLength": 1,
                     "maxLength": 64,
-                    "description": 'Human-friendly label YOU invent for this child (e.g. "Alice", "DiffBot"). Not the harness name. Used in "Name - Role".'
+                    "description": 'Spawn: human-friendly child label (e.g. "Alice"). Link: optional; defaults to peer session title.'
                   },
                   "role": {
                     "type": "string",
                     "minLength": 1,
                     "maxLength": 64,
-                    "description": 'Temporary role label for the child session title: "Name - Role" (e.g. "Reviewer", "Implementer").'
+                    "description": 'Spawn: role for title "Name - Role". Link: optional; defaults to "Peer".'
                   },
                   "config": {
                     "type": "object",
+                    "description": 'Spawn only. Ignored for mode "link".',
                     "properties": {
                       "model": {
                         "type": "string"
@@ -300,11 +313,7 @@ var init_host_action_superone_descriptors = __esm({
                   }
                 },
                 "required": [
-                  "agentId",
-                  "summary",
-                  "task",
-                  "name",
-                  "role"
+                  "summary"
                 ],
                 "additionalProperties": false
               }
@@ -318,7 +327,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_start",
-        "description": "Start the approved child session for one credential and deliver its task. The call returns when the child begins replying, not when its first turn finishes. A credential starts at most one session; retries return the same session id. Start all approved children back-to-back, then continue other work while they run asynchronously.",
+        "description": "Activate one approved collaboration credential. Spawn: create the child and deliver its task. Link: bind the existing peer and wake it via turn injection (not system prompt). Returns when the peer begins (spawn) or is notified (link). Retries are idempotent. Start all credentials back-to-back.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -334,7 +343,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_send",
-        "description": "Send a persistent Markdown message through one parent-child mailbox. Use clientMessageId for retry-safe delivery. The host wakes the peer and later wakes you when it replies. After sending, continue other work or end your turn. Never sleep, resend, or poll session_collab_retrieve while waiting.",
+        "description": "Send a persistent Markdown message through one collaboration mailbox (spawn parent-child or link peers). Use clientMessageId for retry-safe delivery. The host wakes the peer and later wakes you when it replies. After sending, continue other work or end your turn. Never sleep, resend, or poll session_collab_retrieve while waiting.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -359,7 +368,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_retrieve",
-        "description": 'Retrieve queued Markdown messages for this session from one or more parent-child mailboxes. Call after a collaboration wake, or once before acting on peer input. This is a non-blocking read: status "empty" is not a retry signal. Do not sleep or poll; end your turn and wait for the next wake.',
+        "description": 'Retrieve queued Markdown messages for this session from one or more collaboration mailboxes. Call after a collaboration wake, or once before acting on peer input. This is a non-blocking read: status "empty" is not a retry signal. Do not sleep or poll; end your turn and wait for the next wake.',
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -3234,6 +3243,191 @@ var init_host_action_superone_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "automation_list",
+        "description": "List scheduled agent automations for the current project (id, name, enabled, schedule, last/next run). Pass id for full detail (prompt, agentConfig, schedule). Filter with query (name) or enabled. Call before automation_apply or automation_delete. Current project only \u2014 not session archive tools.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "When set, return full detail for this automation (must belong to the current project)."
+            },
+            "enabled": {
+              "type": "boolean",
+              "description": "Filter by enabled state. Omit for all."
+            },
+            "query": {
+              "type": "string",
+              "description": "Case-insensitive name substring filter."
+            },
+            "limit": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100,
+              "description": "Max rows. Default 50, max 100."
+            },
+            "offset": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Pagination offset. Default 0."
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "automation_apply",
+        "description": "Create or update a project automation. action=create needs name, prompt, schedule; agentConfig optional (defaults claude + bypassPermissions). action=update needs id plus any of name/prompt/enabled/schedule/agentConfig (toggle via enabled). Always set schedule.summary to a short natural-language phrase for the UI (user language). Always opens a user confirmation dialog; applies nothing without approval. Call automation_list first for ids. Delete with automation_delete.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "action": {
+              "type": "string",
+              "enum": ["create", "update"],
+              "description": "create a new automation, or update an existing one (including toggle enabled)."
+            },
+            "id": {
+              "type": "string",
+              "description": "Required for update. Automation id from automation_list."
+            },
+            "name": {
+              "type": "string",
+              "description": "Display name. Required for create; optional for update."
+            },
+            "prompt": {
+              "type": "string",
+              "description": "Prompt sent to the agent when the automation runs. Required for create; optional for update."
+            },
+            "enabled": {
+              "type": "boolean",
+              "description": "Whether the scheduler will run this automation. Create defaults to true; use false to pause."
+            },
+            "schedule": {
+              "type": "object",
+              "description": `When to run. one-time needs runAt (ISO). recurring needs cron (e.g. "0 9 * * *"). Always include summary: natural language for the confirm UI in the user's language (e.g. "Every weekday at 9:00 AM", "\u6BCF\u5929\u4E0A\u5348 9 \u70B9"). Machine fields still drive the scheduler.`,
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "enum": ["one-time", "recurring"]
+                },
+                "cron": {
+                  "type": "string",
+                  "description": "Cron expression for recurring (required when type=recurring)."
+                },
+                "runAt": {
+                  "type": "string",
+                  "description": "ISO timestamp for one-time (required when type=one-time)."
+                },
+                "preset": {
+                  "type": "string",
+                  "enum": ["hourly", "daily", "weekly", "custom"]
+                },
+                "timeOfDay": {
+                  "type": "string",
+                  "description": "HH:mm local time hint for daily/weekly presets."
+                },
+                "dayOfWeek": {
+                  "type": "array",
+                  "items": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 6
+                  },
+                  "description": "0=Sun \u2026 6=Sat for weekly preset."
+                },
+                "minuteOfHour": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 59,
+                  "description": "Minute for hourly preset."
+                },
+                "summary": {
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 200,
+                  "description": `Natural-language schedule shown in the UI (list + confirm). Use the user's language. Examples: "Every weekday at 9:00 AM", "\u6BCF\u5929\u4E0A\u5348 9 \u70B9", "Once on May 1 at 3pm". Required for create.`
+                }
+              },
+              "required": ["type", "summary"],
+              "additionalProperties": false
+            },
+            "agentConfig": {
+              "type": "object",
+              "description": "Harness + model for the automation run. type is required (claude|codex|acp|opencode). Defaults on create: claude + bypassPermissions + sandbox off. Prefer unified fields: model, effort, permissionMode, sandboxMode, apiProviderId, acpAgentId.",
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "enum": ["claude", "codex", "acp", "opencode"]
+                },
+                "agentName": {
+                  "type": "string",
+                  "description": "Claude only: named agent profile."
+                },
+                "model": {
+                  "type": "string"
+                },
+                "effort": {
+                  "type": "string",
+                  "description": "Unified effort (Claude levels, Codex reasoning, ACP mode ids)."
+                },
+                "permissionMode": {
+                  "type": "string",
+                  "enum": ["default", "acceptEdits", "bypassPermissions", "plan", "dontAsk", "auto"],
+                  "description": "Unified permission mode. Prefer bypassPermissions for unattended runs."
+                },
+                "sandboxMode": {
+                  "type": "string",
+                  "enum": ["off", "on", "auto"],
+                  "description": "Claude sandbox (ignored by other harnesses)."
+                },
+                "apiProviderId": {
+                  "type": ["string", "null"],
+                  "description": "Optional third-party AI provider credential id (claude/codex)."
+                },
+                "acpAgentId": {
+                  "type": "string",
+                  "description": "ACP only: agent id (e.g. grok-build)."
+                },
+                "reasoningEffort": {
+                  "type": "string",
+                  "enum": ["minimal", "low", "medium", "high", "xhigh"],
+                  "description": "Codex legacy alias for effort."
+                },
+                "permissionPreset": {
+                  "type": "string",
+                  "enum": ["read-only", "default", "full-access"],
+                  "description": "Codex legacy alias for permissionMode (full-access \u2248 bypassPermissions)."
+                }
+              },
+              "required": ["type"],
+              "additionalProperties": false
+            }
+          },
+          "required": ["action"],
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "automation_delete",
+        "description": "Permanently delete project automations by id (from automation_list). Always opens a user confirmation dialog. Current project only. Prefer automation_list to choose ids first.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "ids": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "minItems": 1,
+              "maxItems": 20,
+              "description": "Automation ids from automation_list to delete (current project only)."
+            }
+          },
+          "required": ["ids"],
+          "additionalProperties": false
+        }
+      },
       {
         "name": "mobile_share_file",
         "description": "Share a file from the desktop to the mobile device that is currently viewing this session, so the user can open or save it on their phone. This tool is ONLY available while a mobile device is subscribed to the session \u2014 if it is not in your tool list, no phone is connected. The file is delivered end-to-end encrypted and appears as a file card in the mobile chat. The path MUST point to a file inside the current project directory. Use it when the user asks to send, share, or get a file onto their phone.",
@@ -3326,6 +3520,7 @@ var init_host_action_browser_catalog = __esm({
       "media_video_status",
       "widget_list_templates",
       "miniapp_list",
+      "automation_list",
       // session_collab_* are node-local (not HA); list_agents stays "safe" if ever reclassified
       "computer_apps",
       "computer_snapshot",
@@ -3969,17 +4164,17 @@ var require_node_gyp_build = __commonJS({
       ].filter(Boolean).join(" ");
       throw new Error("No native build was found for " + target + "\n    loaded from: " + dir + "\n");
       function resolve13(dir2) {
-        var tuples = readdirSync11(path.join(dir2, "prebuilds")).map(parseTuple);
+        var tuples = readdirSync12(path.join(dir2, "prebuilds")).map(parseTuple);
         var tuple2 = tuples.filter(matchTuple(platform2, arch2)).sort(compareTuples)[0];
         if (!tuple2) return;
         var prebuilds = path.join(dir2, "prebuilds", tuple2.name);
-        var parsed = readdirSync11(prebuilds).map(parseTags);
+        var parsed = readdirSync12(prebuilds).map(parseTags);
         var candidates = parsed.filter(matchTags(runtime, abi));
         var winner = candidates.sort(compareTags(runtime))[0];
         if (winner) return path.join(prebuilds, winner.file);
       }
     };
-    function readdirSync11(dir) {
+    function readdirSync12(dir) {
       try {
         return fs.readdirSync(dir);
       } catch (err) {
@@ -3987,7 +4182,7 @@ var require_node_gyp_build = __commonJS({
       }
     }
     function getFirst(dir, filter) {
-      var files = readdirSync11(dir).filter(filter);
+      var files = readdirSync12(dir).filter(filter);
       return files[0] && path.join(dir, files[0]);
     }
     function matchBuild(name) {
@@ -6358,8 +6553,8 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes6, createHash: createHash9 } = __require("crypto");
-    var { Duplex, Readable: Readable3 } = __require("stream");
+    var { randomBytes: randomBytes7, createHash: createHash10 } = __require("crypto");
+    var { Duplex, Readable: Readable4 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
     var Receiver2 = require_receiver();
@@ -6888,7 +7083,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes6(16).toString("base64");
+      const key = randomBytes7(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -7018,7 +7213,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash9("sha1").update(key + GUID).digest("base64");
+        const digest = createHash10("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -7385,7 +7580,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash9 } = __require("crypto");
+    var { createHash: createHash10 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -7686,7 +7881,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash9("sha1").update(key + GUID).digest("base64");
+        const digest = createHash10("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -7771,6 +7966,162 @@ var require_websocket_server = __commonJS({
   }
 });
 
+// ../../packages/runtime/src/spawn-env.ts
+function mergeLoopbackNoProxy(env) {
+  const existingParts = [];
+  for (const key of ["NO_PROXY", "no_proxy"]) {
+    const raw = env[key];
+    if (!raw) continue;
+    for (const part of raw.split(/[,\s]+/)) {
+      const trimmed = part.trim();
+      if (trimmed) existingParts.push(trimmed);
+    }
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const merged = [];
+  for (const part of existingParts) {
+    const key = part.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    merged.push(part);
+  }
+  for (const host of LOOPBACK_NO_PROXY_HOSTS) {
+    const key = host.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    merged.push(host);
+  }
+  const value = merged.join(",");
+  env.NO_PROXY = value;
+  env.no_proxy = value;
+}
+function isEssentialEnv(key) {
+  if (ESSENTIAL_EXACT.has(key)) return true;
+  return ESSENTIAL_PREFIXES.some((p2) => key.startsWith(p2));
+}
+function sanitizePathEnv(pathEnv) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  let dropped = 0;
+  let deduped = 0;
+  let droppedByPathMax = 0;
+  let droppedByNameMax = 0;
+  for (const entry of pathEnv.split(":")) {
+    if (!entry) continue;
+    if (seen.has(entry)) {
+      deduped++;
+      continue;
+    }
+    seen.add(entry);
+    if (entry.length > SPAWN_PATH_MAX) {
+      dropped++;
+      droppedByPathMax++;
+      continue;
+    }
+    if (entry.split("/").some((comp) => Buffer.byteLength(comp, "utf8") > SPAWN_NAME_MAX)) {
+      dropped++;
+      droppedByNameMax++;
+      continue;
+    }
+    out.push(entry);
+  }
+  return { value: out.join(":"), dropped, deduped, droppedByPathMax, droppedByNameMax };
+}
+function serializedSize(env) {
+  let n = 0;
+  for (const key in env) {
+    n += Buffer.byteLength(key) + Buffer.byteLength(env[key]) + 2;
+  }
+  return n;
+}
+function sanitizeEnv(base = process.env, extra) {
+  const merged = {};
+  for (const key in base) {
+    const v2 = base[key];
+    if (v2 !== void 0) merged[key] = v2;
+  }
+  if (extra) {
+    for (const key in extra) {
+      const v2 = extra[key];
+      if (v2 !== void 0) merged[key] = v2;
+    }
+  }
+  if (process.platform !== "win32" && typeof merged.PATH === "string") {
+    const res = sanitizePathEnv(merged.PATH);
+    merged.PATH = res.value;
+    if (res.dropped > 0) {
+      const parts = [];
+      if (res.droppedByPathMax > 0)
+        parts.push(`${res.droppedByPathMax} \u6574\u6BB5 > PATH_MAX(${SPAWN_PATH_MAX}B)`);
+      if (res.droppedByNameMax > 0)
+        parts.push(`${res.droppedByNameMax} \u6BB5\u542B > NAME_MAX(${SPAWN_NAME_MAX}B) \u7684\u76EE\u5F55\u540D`);
+      console.warn(`[spawn-env] \u4E3A\u89C4\u907F spawn ENAMETOOLONG \u5DF2\u4E22\u5F03 ${res.dropped} \u4E2A\u8D85\u957F PATH \u5206\u6BB5\uFF08${parts.join("\uFF1B")}\uFF09`);
+    }
+  }
+  mergeLoopbackNoProxy(merged);
+  let size = serializedSize(merged);
+  if (size > MAX_ENV_BYTES) {
+    const entries = Object.entries(merged).sort((a, b2) => b2[1].length - a[1].length);
+    for (const [key, value] of entries) {
+      if (size <= MAX_ENV_BYTES) break;
+      if (isEssentialEnv(key)) continue;
+      size -= Buffer.byteLength(key) + Buffer.byteLength(value) + 2;
+      delete merged[key];
+    }
+    if (size > MAX_ENV_BYTES) {
+      console.warn(`[spawn-env] env still ${size} bytes after trimming non-essential vars (limit ${MAX_ENV_BYTES})`);
+    } else {
+      console.warn(`[spawn-env] trimmed env to ${size} bytes to avoid spawn E2BIG`);
+    }
+  }
+  return merged;
+}
+function buildSafeEnv(extra) {
+  return sanitizeEnv(process.env, extra);
+}
+var SPAWN_PATH_MAX, SPAWN_NAME_MAX, MAX_ENV_BYTES, ESSENTIAL_EXACT, ESSENTIAL_PREFIXES, LOOPBACK_NO_PROXY_HOSTS;
+var init_spawn_env = __esm({
+  "../../packages/runtime/src/spawn-env.ts"() {
+    "use strict";
+    SPAWN_PATH_MAX = 1024;
+    SPAWN_NAME_MAX = 255;
+    MAX_ENV_BYTES = 256 * 1024;
+    ESSENTIAL_EXACT = /* @__PURE__ */ new Set([
+      "PATH",
+      "HOME",
+      "USER",
+      "LOGNAME",
+      "SHELL",
+      "TERM",
+      "LANG",
+      "LC_ALL",
+      "LC_CTYPE",
+      "DISPLAY",
+      "TMPDIR",
+      "TEMP",
+      "TMP",
+      "DYLD_FRAMEWORK_PATH",
+      "DYLD_LIBRARY_PATH",
+      "DYLD_FALLBACK_FRAMEWORK_PATH",
+      "DYLD_FALLBACK_LIBRARY_PATH",
+      // Proxy bypass must survive E2BIG trimming — loopback MCP depends on it.
+      "NO_PROXY",
+      "no_proxy"
+    ]);
+    ESSENTIAL_PREFIXES = [
+      "LC_",
+      "ELECTRON_",
+      "ANTHROPIC_",
+      "CODEX_",
+      "NPM_CONFIG_",
+      "NODE_",
+      "SSH_",
+      "GIT_"
+    ];
+    LOOPBACK_NO_PROXY_HOSTS = ["127.0.0.1", "localhost", "::1"];
+  }
+});
+
 // ../../packages/codex/src/agent-event-mapper.ts
 function asRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -8384,7 +8735,7 @@ async function openCodexAppServer(opts) {
   }
   const spawnFn = opts.spawnFn ?? defaultSpawn;
   const args = [...opts.cliArgs ?? [], "app-server", "--listen", "stdio://"];
-  const env = { ...process.env, ...opts.env ?? {} };
+  const env = buildSafeEnv(opts.env);
   const child = spawnFn(opts.binaryPath, args, {
     env,
     stdio: ["pipe", "pipe", "pipe"],
@@ -8878,6 +9229,7 @@ var DEFAULT_REQUEST_TIMEOUT_MS, THREAD_TIMEOUT_MS, TURN_WAIT_TIMEOUT_MS, MAX_STD
 var init_app_server_client = __esm({
   "../../packages/codex/src/app-server-client.ts"() {
     "use strict";
+    init_spawn_env();
     init_environment();
     init_agent_event_mapper();
     DEFAULT_REQUEST_TIMEOUT_MS = 12e4;
@@ -9344,6 +9696,9 @@ var init_superone_host_owned_tools = __esm({
       "widget_show",
       "config_read",
       "config_apply",
+      "automation_list",
+      "automation_apply",
+      "automation_delete",
       ...BROWSER_TOOL_NAMES
     ];
     MOBILE_SHARE_FILE_TOOL_NAME = "mobile_share_file";
@@ -43811,10 +44166,14 @@ async function stopProcess(child, closed) {
   signalProcess(child, "SIGKILL");
   await closed.catch(() => void 0);
 }
+function buildAcpProcessEnv(extra) {
+  return buildSafeEnv(extra);
+}
 function spawnAcpProcess(launch2) {
   const child = spawn2(launch2.command, launch2.args ?? [], {
     cwd: launch2.cwd || process.cwd(),
-    env: { ...process.env, ...launch2.env },
+    // buildSafeEnv merges loopback into NO_PROXY (package-level parity with desktop).
+    env: buildAcpProcessEnv(launch2.env),
     stdio: ["pipe", "pipe", "pipe"],
     shell: process.platform === "win32",
     windowsHide: true
@@ -43854,6 +44213,7 @@ var init_process = __esm({
   "../../packages/acp/src/process.ts"() {
     "use strict";
     init_acp();
+    init_spawn_env();
     KILL_ESCALATE_MS = 1500;
   }
 });
@@ -50485,6 +50845,13 @@ function openCodePath(pathEnv) {
   ].filter(Boolean);
   return [...new Set(paths)].join(delimiter);
 }
+function buildOpenCodeServeEnv(extra) {
+  return buildSafeEnv({
+    ...extra,
+    PATH: openCodePath(extra?.PATH ?? process.env.PATH),
+    OPENCODE_CONFIG_CONTENT: extra?.OPENCODE_CONFIG_CONTENT ?? "{}"
+  });
+}
 function signalChild(child, signal) {
   try {
     if (child.exitCode === null && child.signalCode === null) child.kill(signal);
@@ -50547,12 +50914,7 @@ async function startOpenCodeServer(opts) {
   const binary = opts.binaryPath?.trim() || process.env.SUPERONE_OPENCODE_BINARY?.trim() || defaultOpenCodeBinaryPath();
   const child = spawn3(binary, [...OPENCODE_SERVE_ARGS], {
     cwd: opts.cwd,
-    env: {
-      ...process.env,
-      ...opts.env,
-      PATH: openCodePath(opts.env?.PATH ?? process.env.PATH),
-      OPENCODE_CONFIG_CONTENT: opts.env?.OPENCODE_CONFIG_CONTENT ?? "{}"
-    },
+    env: buildOpenCodeServeEnv(opts.env),
     stdio: "pipe"
   });
   const exited = new Promise((resolve13) => {
@@ -50591,6 +50953,7 @@ var OPENCODE_SERVE_ARGS, maxServerOutput;
 var init_server3 = __esm({
   "../../packages/opencode/src/server.ts"() {
     "use strict";
+    init_spawn_env();
     OPENCODE_SERVE_ARGS = ["serve", "--hostname=127.0.0.1", "--port=0"];
     maxServerOutput = 64 * 1024;
   }
@@ -51283,199 +51646,6 @@ var init_codex_turn_runner = __esm({
   }
 });
 
-// src/session/managed-harness-official.ts
-var managed_harness_official_exports = {};
-__export(managed_harness_official_exports, {
-  OFFICIAL_CLAUDE_SDK_PACKAGE: () => OFFICIAL_CLAUDE_SDK_PACKAGE,
-  OFFICIAL_CLAUDE_SDK_VERSION: () => OFFICIAL_CLAUDE_SDK_VERSION,
-  OFFICIAL_CODEX_NPM_VERSION: () => OFFICIAL_CODEX_NPM_VERSION,
-  OFFICIAL_CODEX_PACKAGE: () => OFFICIAL_CODEX_PACKAGE,
-  claudePlatformPackageName: () => claudePlatformPackageName,
-  installManagedFromOfficialNpm: () => installManagedFromOfficialNpm,
-  managedNpmPrefix: () => managedNpmPrefix,
-  officialPackageSpecs: () => officialPackageSpecs,
-  resolveOfficialInstallBinary: () => resolveOfficialInstallBinary
-});
-import { existsSync as existsSync24, mkdirSync as mkdirSync12, readFileSync as readFileSync14, readdirSync as readdirSync8, statSync as statSync6 } from "node:fs";
-import { arch as osArch2, platform as osPlatform2 } from "node:os";
-import { join as join19, resolve as resolve5 } from "node:path";
-import { spawn as spawn4 } from "node:child_process";
-function managedNpmPrefix(nodeHome, harnessId) {
-  return resolve5(nodeHome, "managed-npm", harnessId);
-}
-function claudePlatformPackageName() {
-  const p2 = osPlatform2();
-  const a = osArch2();
-  if (a !== "arm64" && a !== "x64") {
-    throw new Error(`unsupported arch for Claude Agent SDK: ${a}`);
-  }
-  if (p2 === "darwin") return `@anthropic-ai/claude-agent-sdk-darwin-${a}`;
-  if (p2 === "win32") return `@anthropic-ai/claude-agent-sdk-win32-${a}`;
-  if (p2 === "linux") {
-    if (isMuslLinux()) return `@anthropic-ai/claude-agent-sdk-linux-${a}-musl`;
-    return `@anthropic-ai/claude-agent-sdk-linux-${a}`;
-  }
-  throw new Error(`unsupported platform for Claude Agent SDK: ${p2}`);
-}
-function isMuslLinux() {
-  try {
-    if (existsSync24("/etc/alpine-release")) return true;
-    const lib = readdirSync8("/lib").some((n) => n.startsWith("ld-musl"));
-    if (lib) return true;
-  } catch {
-  }
-  return false;
-}
-function officialPackageSpecs(harnessId) {
-  if (harnessId === "claude") {
-    const ver2 = process.env.SUPERONE_CLAUDE_SDK_VERSION?.trim() || OFFICIAL_CLAUDE_SDK_VERSION;
-    const platform2 = claudePlatformPackageName();
-    return {
-      runtimeVersion: ver2,
-      specs: [`${OFFICIAL_CLAUDE_SDK_PACKAGE}@${ver2}`, `${platform2}@${ver2}`]
-    };
-  }
-  const ver = process.env.SUPERONE_CODEX_NPM_VERSION?.trim() || OFFICIAL_CODEX_NPM_VERSION;
-  return {
-    runtimeVersion: ver,
-    specs: [`${OFFICIAL_CODEX_PACKAGE}@${ver}`]
-  };
-}
-function resolveOfficialInstallBinary(harnessId, prefix) {
-  if (harnessId === "codex") {
-    const candidates = [
-      join19(prefix, "bin", "codex"),
-      join19(prefix, "bin", "codex.cmd"),
-      join19(prefix, "lib", "node_modules", "@openai", "codex", "bin", "codex.js")
-    ];
-    for (const c of candidates) {
-      if (existsSync24(c) && (c.endsWith(".js") || isExecutableFile(c))) return c;
-    }
-    return null;
-  }
-  const nm = join19(prefix, "lib", "node_modules");
-  const scoped = join19(nm, "@anthropic-ai");
-  try {
-    if (existsSync24(scoped)) {
-      const names = readdirSync8(scoped).filter((n) => n.startsWith("claude-agent-sdk-"));
-      for (const n of names) {
-        const ext = process.platform === "win32" ? ".exe" : "";
-        const bin = join19(scoped, n, `claude${ext}`);
-        if (existsSync24(bin)) return bin;
-      }
-    }
-  } catch {
-  }
-  const direct = join19(
-    nm,
-    ...claudePlatformPackageName().split("/"),
-    process.platform === "win32" ? "claude.exe" : "claude"
-  );
-  if (existsSync24(direct)) return direct;
-  return null;
-}
-function isExecutableFile(path) {
-  try {
-    const st = statSync6(path);
-    if (!st.isFile()) return false;
-    if (process.platform === "win32") return true;
-    return (st.mode & 73) !== 0;
-  } catch {
-    return false;
-  }
-}
-async function installManagedFromOfficialNpm(opts) {
-  const { specs, runtimeVersion } = officialPackageSpecs(opts.harnessId);
-  const prefix = managedNpmPrefix(opts.nodeHome, opts.harnessId);
-  mkdirSync12(prefix, { recursive: true });
-  const existing = resolveOfficialInstallBinary(opts.harnessId, prefix);
-  if (existing) {
-    return {
-      harnessId: opts.harnessId,
-      command: existing,
-      runtimeVersion: readInstalledVersion(prefix, opts.harnessId) ?? runtimeVersion,
-      source: "official-npm",
-      packageSpec: specs.join(" "),
-      installPrefix: prefix
-    };
-  }
-  const runNpm = opts.runNpm ?? defaultRunNpm;
-  await runNpm(
-    ["install", "--prefix", prefix, "--omit=dev", "--no-fund", "--no-audit", ...specs],
-    prefix
-  );
-  const command = resolveOfficialInstallBinary(opts.harnessId, prefix);
-  if (!command) {
-    throw new Error(
-      `official npm install of ${specs.join(" ")} succeeded but binary was not found under ${prefix}`
-    );
-  }
-  return {
-    harnessId: opts.harnessId,
-    command,
-    runtimeVersion: readInstalledVersion(prefix, opts.harnessId) ?? runtimeVersion,
-    source: "official-npm",
-    packageSpec: specs.join(" "),
-    installPrefix: prefix
-  };
-}
-function readInstalledVersion(prefix, harnessId) {
-  try {
-    const pkgPath = harnessId === "claude" ? join19(prefix, "lib", "node_modules", "@anthropic-ai", "claude-agent-sdk", "package.json") : join19(prefix, "lib", "node_modules", "@openai", "codex", "package.json");
-    if (!existsSync24(pkgPath)) return null;
-    const raw = JSON.parse(readFileSync14(pkgPath, "utf8"));
-    return raw.version?.trim() || null;
-  } catch {
-    return null;
-  }
-}
-function defaultRunNpm(args, cwd) {
-  return new Promise((resolvePromise, reject) => {
-    const child = spawn4("npm", args, {
-      cwd,
-      env: { ...process.env, npm_config_update_notifier: "false" },
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    let stderr = "";
-    child.stderr?.on("data", (c) => {
-      stderr += c.toString();
-    });
-    child.on("error", (err) => {
-      reject(
-        new Error(
-          `failed to spawn npm (${err.message}). Node.js/npm is required on the host for official harness install.`
-        )
-      );
-    });
-    const timer = setTimeout(() => {
-      child.kill("SIGTERM");
-      reject(new Error(`npm install timed out after 10m: npm ${args.join(" ")}`));
-    }, 10 * 6e4);
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      if (code === 0) resolvePromise();
-      else {
-        reject(
-          new Error(
-            `npm install failed (exit ${code}): npm ${args.join(" ")}
-${stderr.slice(-1200)}`
-          )
-        );
-      }
-    });
-  });
-}
-var OFFICIAL_CLAUDE_SDK_VERSION, OFFICIAL_CODEX_NPM_VERSION, OFFICIAL_CLAUDE_SDK_PACKAGE, OFFICIAL_CODEX_PACKAGE;
-var init_managed_harness_official = __esm({
-  "src/session/managed-harness-official.ts"() {
-    "use strict";
-    OFFICIAL_CLAUDE_SDK_VERSION = "0.3.226";
-    OFFICIAL_CODEX_NPM_VERSION = "0.146.1";
-    OFFICIAL_CLAUDE_SDK_PACKAGE = "@anthropic-ai/claude-agent-sdk";
-    OFFICIAL_CODEX_PACKAGE = "@openai/codex";
-  }
-});
-
 // src/session/codex-admin-service.ts
 var codex_admin_service_exports = {};
 __export(codex_admin_service_exports, {
@@ -58613,7 +58783,7 @@ var require_dist = __commonJS({
 });
 
 // src/cli.ts
-import { homedir as homedir9 } from "node:os";
+import { homedir as homedir10 } from "node:os";
 import { resolve as resolve12 } from "node:path";
 
 // src/config.ts
@@ -58655,8 +58825,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.52.0-alpha".trim()) {
-    return "0.52.0-alpha".trim();
+  if ("0.53.0-alpha".trim()) {
+    return "0.53.0-alpha".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -58906,7 +59076,7 @@ function regenerateIdentity(nodeHome, label) {
 }
 
 // src/runtime.ts
-import { existsSync as existsSync35, readFileSync as readFileSync17, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync39, readFileSync as readFileSync19, writeFileSync as writeFileSync17 } from "node:fs";
 
 // src/auth/auth-service.ts
 init_environment();
@@ -58956,7 +59126,7 @@ var AuthService = class {
            FROM pairing_tokens WHERE token_hash = ?`
       ).get(tokenHash);
       if (!row) throw Object.assign(new Error("invalid pairing token"), { code: "unauthorized" });
-      if (row.revoked_at) throw Object.assign(new Error("pairing token revoked"), { code: "unauthorized" });
+      if (row.revoked_at) throw Object.assign(new Error("pairing token revoked"), { code: "revoked" });
       if (row.consumed_at) throw Object.assign(new Error("pairing token already used"), { code: "unauthorized" });
       if (row.expires_at < now) throw Object.assign(new Error("pairing token expired"), { code: "unauthorized" });
       const updated = this.db.prepare(
@@ -59044,13 +59214,13 @@ var AuthService = class {
         ).run(now, reused.client_session_id);
         this.onRevoke?.(reused.client_session_id);
         throw Object.assign(new Error("refresh token reuse detected; session revoked"), {
-          code: "unauthorized"
+          code: "revoked"
         });
       }
     }
-    if (row.revoked_at) throw Object.assign(new Error("client session revoked"), { code: "unauthorized" });
+    if (row.revoked_at) throw Object.assign(new Error("client session revoked"), { code: "revoked" });
     if (row.refresh_expires_at < now) {
-      throw Object.assign(new Error("refresh token expired"), { code: "unauthorized" });
+      throw Object.assign(new Error("refresh token expired"), { code: "revoked" });
     }
     if (!input.verifyDeviceProof(row.device_public_key_pem, input.proofPayload, input.proofSignature)) {
       throw Object.assign(new Error("device proof failed"), { code: "unauthorized" });
@@ -59109,7 +59279,8 @@ var AuthService = class {
   createWsTicket(accessToken) {
     const verified = this.verifyAccessToken(accessToken);
     if (!verified.ok) {
-      throw Object.assign(new Error(verified.reason), { code: "unauthorized" });
+      const code = /session revoked/i.test(verified.reason) ? "revoked" : "unauthorized";
+      throw Object.assign(new Error(verified.reason), { code });
     }
     const client3 = verified.client;
     const now = Date.now();
@@ -59154,7 +59325,7 @@ var AuthService = class {
          WHERE t.ticket_id = ?`
     ).get(ticketId);
     if (!row) throw Object.assign(new Error("invalid ws ticket"), { code: "unauthorized" });
-    if (row.revoked_at) throw Object.assign(new Error("client session revoked"), { code: "unauthorized" });
+    if (row.revoked_at) throw Object.assign(new Error("client session revoked"), { code: "revoked" });
     if (row.consumed_at) throw Object.assign(new Error("ws ticket already used"), { code: "unauthorized" });
     if (row.expires_at < now) throw Object.assign(new Error("ws ticket expired"), { code: "unauthorized" });
     if (!safeEqualString(row.ticket_hash, ticketHash)) {
@@ -59444,7 +59615,8 @@ CREATE TABLE IF NOT EXISTS session_collaboration_grants (
   config_json TEXT NOT NULL,
   task_sent INTEGER NOT NULL DEFAULT 0,
   created_at TEXT NOT NULL,
-  started_at TEXT
+  started_at TEXT,
+  kind TEXT NOT NULL DEFAULT 'spawn'
 );
 CREATE INDEX IF NOT EXISTS idx_session_collaboration_parent
   ON session_collaboration_grants(parent_session_id);
@@ -59696,8 +59868,10 @@ CREATE TABLE IF NOT EXISTS session_collaboration_grants (
   config_json TEXT NOT NULL,
   task_sent INTEGER NOT NULL DEFAULT 0,
   created_at TEXT NOT NULL,
-  started_at TEXT
+  started_at TEXT,
+  kind TEXT NOT NULL DEFAULT 'spawn'
 );
+-- kind: 'spawn' (create child) | 'link' (mailbox with existing session)
 CREATE INDEX IF NOT EXISTS idx_session_collaboration_parent
   ON session_collaboration_grants(parent_session_id);
 CREATE INDEX IF NOT EXISTS idx_session_collaboration_child
@@ -59726,6 +59900,10 @@ CREATE TABLE IF NOT EXISTS session_collaboration_cursors (
   PRIMARY KEY(credential_hash, session_id)
 );
 `);
+  const grantCols = db.prepare(`PRAGMA table_info(session_collaboration_grants)`).all();
+  if (!grantCols.some((c) => c.name === "kind")) {
+    db.exec(`ALTER TABLE session_collaboration_grants ADD COLUMN kind TEXT NOT NULL DEFAULT 'spawn'`);
+  }
 }
 function ensureAutomationsSupport(db) {
   const cols = db.prepare(`PRAGMA table_info(sessions)`).all();
@@ -60073,215 +60251,432 @@ async function probeSandboxRpc() {
 init_codex_turn_runner();
 init_claude_turn_runner();
 
-// src/session/harness-runtime-ready.ts
-init_claude_turn_runner();
-init_codex_turn_runner();
-init_resolve_service();
-import { existsSync as existsSync22 } from "node:fs";
-function commandExists(command) {
-  return Boolean(command && existsSync22(command));
-}
-function envBinaryExists(envName) {
-  const v2 = process.env[envName]?.trim();
-  return Boolean(v2 && existsSync22(v2));
-}
-function assertSessionHarnessRuntimeReady(sessionHarnessId, harnesses) {
-  const id = sessionHarnessId === "acp" ? "acp" : sessionHarnessId;
-  if (id === "claude") {
-    if (resolveClaudeBinaryPath({ harnesses }) || isClaudeRuntimeRunnable()) {
-      return { ok: true, reason: "claude binary or Agent SDK available" };
-    }
-    return {
-      ok: false,
-      reason: "claude runtime unavailable: install managed artifact, Agent SDK platform package, or SUPERONE_CLAUDE_BINARY"
-    };
+// ../../packages/runtime/src/harness/manager.ts
+init_environment();
+var HarnessManager = class {
+  constructor(db) {
+    this.db = db;
+    this.ensureRows();
+    this.clearSimulatedContamination();
   }
-  if (id === "codex") {
-    if (resolveCodexBinaryPath({ harnesses }) || isCodexBinaryOverrideRunnable()) {
-      return { ok: true, reason: "codex binary available" };
-    }
-    return {
-      ok: false,
-      reason: "codex runtime unavailable: enable with --artifact or set SUPERONE_CODEX_BINARY"
-    };
+  /**
+   * When true, list/get/ready behave as if every harness is enabled+ready.
+   * Never persisted — only for contract/CI simulated runners.
+   */
+  simulatedOverlay = false;
+  /** Ensure one row per first-party definition. */
+  ensureRows() {
+    const now = Date.now();
+    const insert = this.db.prepare(
+      `INSERT OR IGNORE INTO harness_installations
+        (harness_id, enabled, state, runtime_version, command, config_json, secret_ref,
+         diagnostic_code, diagnostic_message, last_probed_at, updated_at)
+       VALUES (?, 0, 'disabled', NULL, NULL, NULL, NULL, NULL, NULL, NULL, ?)`
+    );
+    const tx = this.db.transaction(() => {
+      for (const def of NODE_HARNESS_DEFINITIONS) {
+        insert.run(def.id, now);
+      }
+    });
+    tx();
   }
-  if (id === "acp") {
-    const status = harnesses.get("acp-grok");
-    if (commandExists(status.command) || envBinaryExists("SUPERONE_ACP_BINARY")) {
-      return { ok: true, reason: "acp binary available" };
-    }
-    return {
-      ok: false,
-      reason: "acp-grok runtime unavailable: enable with --command or set SUPERONE_ACP_BINARY"
-    };
+  /**
+   * Reset durable rows that older builds may have marked as simulated-ready.
+   * Safe to run on every open: only touches synthetic simulated provenance.
+   */
+  clearSimulatedContamination() {
+    const now = Date.now();
+    this.db.prepare(
+      `UPDATE harness_installations SET
+           enabled = 0,
+           state = 'disabled',
+           runtime_version = NULL,
+           command = NULL,
+           diagnostic_code = NULL,
+           diagnostic_message = NULL,
+           last_probed_at = NULL,
+           updated_at = ?
+         WHERE runtime_version = 'simulated'
+            OR diagnostic_code = 'simulated'`
+    ).run(now);
   }
-  if (id === "opencode") {
-    const status = harnesses.get("opencode");
-    if (commandExists(status.command) || envBinaryExists("SUPERONE_OPENCODE_BINARY")) {
-      return { ok: true, reason: "opencode binary available" };
-    }
+  /**
+   * Enable in-memory simulated readiness for all first-party harnesses.
+   * Does not write the database. Production starts must never call this.
+   */
+  enableSimulatedOverlay() {
+    this.simulatedOverlay = true;
+  }
+  /** @deprecated use enableSimulatedOverlay — kept as alias for call-site clarity. */
+  markAllSimulatedReady() {
+    this.enableSimulatedOverlay();
+  }
+  list() {
+    return NODE_HARNESS_DEFINITIONS.map((d) => this.get(d.id));
+  }
+  get(id) {
+    const status = this.readPersisted(id);
+    if (!this.simulatedOverlay) return status;
     return {
-      ok: false,
-      reason: "opencode runtime unavailable: enable with --command or set SUPERONE_OPENCODE_BINARY"
+      ...status,
+      enabled: true,
+      state: "ready",
+      runtimeVersion: status.runtimeVersion ?? "simulated",
+      diagnostic: buildHarnessDiagnostic("simulated")
     };
   }
-  return { ok: false, reason: `unknown harness: ${sessionHarnessId}` };
-}
-function probeHarnessReadiness(harnesses, id, providers) {
-  const status = harnesses.get(id);
-  const previousState = status.state;
-  const issues = [];
-  const sessionWire = id === "acp-grok" ? "acp" : id;
-  const runtime = assertSessionHarnessRuntimeReady(sessionWire, harnesses);
-  if (!runtime.ok) {
-    issues.push(runtime.reason);
-    if (status.enabled && (status.state === "ready" || status.state === "needs_auth")) {
-      harnesses.update(id, {
-        state: "error",
-        diagnosticCode: "probe_failed",
-        lastProbedAt: Date.now()
-      });
-      const next = harnesses.get(id);
-      return {
-        id,
-        previousState,
-        state: next.state,
-        transitioned: next.state !== previousState,
-        ok: false,
-        issues,
-        reason: runtime.reason
-      };
+  readPersisted(id) {
+    const row = this.db.prepare(
+      `SELECT harness_id, enabled, state, runtime_version, command,
+                diagnostic_code, diagnostic_message
+         FROM harness_installations WHERE harness_id = ?`
+    ).get(id);
+    if (!row) {
+      return defaultHarnessInstallationStatus(id);
     }
-    harnesses.update(id, { lastProbedAt: Date.now() });
-    return {
+    const def = NODE_HARNESS_DEFINITIONS.find((d) => d.id === id);
+    const status = {
       id,
-      previousState,
-      state: status.state,
-      transitioned: false,
-      ok: false,
-      issues,
-      reason: runtime.reason
+      runtimeSource: def.runtimeSource,
+      enabled: row.enabled === 1,
+      state: parseState(row.state),
+      requiresAuth: def.requiresAuth
     };
-  }
-  if (status.enabled && status.state === "needs_auth") {
-    const authOk = isAuthSatisfied(id, providers);
-    if (!authOk.ok) {
-      issues.push(authOk.reason);
-      harnesses.update(id, {
-        lastProbedAt: Date.now(),
-        diagnosticCode: "needs_auth"
+    if (row.runtime_version && row.runtime_version !== "simulated") {
+      status.runtimeVersion = row.runtime_version;
+    }
+    const command = sanitizeHarnessCommand(row.command);
+    if (command) status.command = command;
+    const code = sanitizeHarnessDiagnosticCode(row.diagnostic_code);
+    if (code && code !== "simulated") {
+      status.diagnostic = buildHarnessDiagnostic(code, {
+        runtimeVersion: status.runtimeVersion,
+        command: status.command
       });
-      return {
-        id,
-        previousState,
-        state: "needs_auth",
-        transitioned: false,
-        ok: false,
-        issues,
-        reason: authOk.reason
-      };
     }
-    harnesses.update(id, {
-      state: "ready",
+    return status;
+  }
+  /**
+   * Session wire harness ids that are currently runnable (enabled + ready).
+   * Used by environment.descriptor capabilities.harnessIds.
+   */
+  readySessionHarnessIds() {
+    return readySessionHarnessIds(this.list());
+  }
+  /** Whether a session.create harnessId is allowed on this node. */
+  isSessionHarnessRunnable(sessionHarnessId) {
+    const wire = normalizeSessionHarnessId(sessionHarnessId);
+    if (!wire) return false;
+    const catalogId = wire === "acp" ? "acp-grok" : wire;
+    if (!isNodeHarnessId(catalogId)) return false;
+    return isHarnessRunnable(this.get(catalogId));
+  }
+  update(id, patch) {
+    if (!isNodeHarnessId(id)) {
+      throw new Error(`unknown harness: ${id}`);
+    }
+    const apply = this.db.transaction(() => {
+      const current = this.readPersisted(id);
+      const extra = this.db.prepare(
+        `SELECT config_json, secret_ref, last_probed_at, diagnostic_code
+           FROM harness_installations WHERE harness_id = ?`
+      ).get(id);
+      const enabled = patch.enabled ?? current.enabled;
+      const state = patch.state ?? current.state;
+      const runtimeVersion = patch.runtimeVersion === null ? null : patch.runtimeVersion ?? current.runtimeVersion ?? null;
+      let command;
+      if (patch.command === null) {
+        command = null;
+      } else if (patch.command !== void 0) {
+        command = sanitizeHarnessCommand(patch.command) ?? null;
+      } else {
+        command = current.command ?? null;
+      }
+      let diagnosticCode;
+      if (patch.diagnosticCode === null) {
+        diagnosticCode = null;
+      } else if (patch.diagnosticCode !== void 0) {
+        diagnosticCode = sanitizeHarnessDiagnosticCode(patch.diagnosticCode);
+      } else {
+        diagnosticCode = sanitizeHarnessDiagnosticCode(extra?.diagnostic_code);
+      }
+      let diagnosticMessage = null;
+      if (diagnosticCode) {
+        const fields = {
+          ...patch.diagnosticFields ?? {},
+          runtimeVersion: runtimeVersion ?? void 0,
+          command: command ?? void 0
+        };
+        diagnosticMessage = buildHarnessDiagnostic(
+          diagnosticCode,
+          fields
+        ).message;
+      }
+      const configJson = patch.configJson === null ? null : patch.configJson ?? extra?.config_json ?? null;
+      const secretRef = patch.secretRef === null ? null : patch.secretRef ?? extra?.secret_ref ?? null;
+      const lastProbedAt = patch.lastProbedAt === null ? null : patch.lastProbedAt ?? extra?.last_probed_at ?? null;
+      const now = Date.now();
+      this.db.prepare(
+        `UPDATE harness_installations SET
+             enabled = ?, state = ?, runtime_version = ?, command = ?,
+             config_json = ?, secret_ref = ?,
+             diagnostic_code = ?, diagnostic_message = ?,
+             last_probed_at = ?, updated_at = ?
+           WHERE harness_id = ?`
+      ).run(
+        enabled ? 1 : 0,
+        state,
+        runtimeVersion,
+        command,
+        configJson,
+        secretRef,
+        diagnosticCode,
+        diagnosticMessage,
+        lastProbedAt,
+        now,
+        id
+      );
+    });
+    apply();
+    return this.get(id);
+  }
+  /**
+   * Disable a harness. Does not delete managed artifacts or external binaries.
+   * Default drain policy is enforced by higher-level CLI/RPC in a later slice.
+   */
+  disable(id) {
+    return this.update(id, {
+      enabled: false,
+      state: "disabled",
       diagnosticCode: null,
-      lastProbedAt: Date.now()
+      diagnosticFields: null
     });
-    return {
-      id,
-      previousState,
-      state: "ready",
-      transitioned: true,
-      ok: true,
-      issues: [],
-      reason: `promoted needs_auth \u2192 ready (${authOk.reason})`
-    };
   }
-  if (status.enabled && status.state === "ready") {
-    harnesses.update(id, { lastProbedAt: Date.now(), diagnosticCode: null });
+  /**
+   * Internal non-secret row fields for CLI show/doctor.
+   * Does not expose secret_ref or stored diagnostic message text.
+   */
+  readRawRow(id) {
+    const row = this.db.prepare(
+      `SELECT config_json, last_probed_at
+         FROM harness_installations WHERE harness_id = ?`
+    ).get(id);
+    return row ?? null;
+  }
+};
+function parseState(raw) {
+  switch (raw) {
+    case "disabled":
+    case "missing":
+    case "installing":
+    case "needs_auth":
+    case "ready":
+    case "incompatible":
+    case "error":
+      return raw;
+    default:
+      return "error";
+  }
+}
+
+// ../../packages/runtime/src/harness/home-path.ts
+import { homedir as homedir6 } from "node:os";
+import { join as join18 } from "node:path";
+var HARNESS_HOME_DIRNAME = "harness";
+var SUPERONE_DIRNAME = ".superone";
+function defaultHarnessHomeRoot(userHome = homedir6()) {
+  return join18(userHome, SUPERONE_DIRNAME, HARNESS_HOME_DIRNAME);
+}
+function resolveHarnessHomeRoot(opts = {}) {
+  const explicit = opts.override?.trim();
+  if (explicit) return explicit;
+  if (!opts.ignoreEnv) {
+    const fromEnv = process.env.SUPERONE_HARNESS_HOME?.trim();
+    if (fromEnv) return fromEnv;
+  }
+  return defaultHarnessHomeRoot(opts.userHome);
+}
+
+// ../../packages/runtime/src/harness/managed-layout.ts
+import {
+  existsSync as existsSync22,
+  mkdirSync as mkdirSync11,
+  readdirSync as readdirSync8,
+  readFileSync as readFileSync13,
+  renameSync as renameSync2,
+  rmSync as rmSync2,
+  statSync as statSync5,
+  writeFileSync as writeFileSync9
+} from "node:fs";
+import { join as join19 } from "node:path";
+import { randomBytes as randomBytes3 } from "node:crypto";
+var MANAGED_VERSIONS_DIRNAME = "versions";
+var MANAGED_CURRENT_BASENAME = "current";
+var MANAGED_VERSION_KEEP = 2;
+function sanitizeRuntimeVersionForPath(runtimeVersion) {
+  const v2 = runtimeVersion.trim();
+  if (!v2) throw new Error("empty runtime version");
+  if (v2.includes("..") || v2.includes("/") || v2.includes("\\") || v2.includes("\0")) {
+    throw new Error(`unsafe runtime version for path: ${runtimeVersion}`);
+  }
+  if (!/^[A-Za-z0-9._+-]+$/.test(v2)) {
+    throw new Error(`unsafe runtime version for path: ${runtimeVersion}`);
+  }
+  return v2;
+}
+function managedVersionsDir(prefix) {
+  return join19(prefix, MANAGED_VERSIONS_DIRNAME);
+}
+function managedVersionDir(prefix, runtimeVersion) {
+  return join19(managedVersionsDir(prefix), sanitizeRuntimeVersionForPath(runtimeVersion));
+}
+function managedCurrentPath(prefix) {
+  return join19(prefix, MANAGED_CURRENT_BASENAME);
+}
+function readCurrentPointer(prefix) {
+  const path = managedCurrentPath(prefix);
+  if (!existsSync22(path)) return null;
+  try {
+    const raw = JSON.parse(readFileSync13(path, "utf8"));
+    if (typeof raw.runtimeVersion !== "string" || !raw.runtimeVersion.trim()) return null;
     return {
-      id,
-      previousState,
-      state: "ready",
-      transitioned: false,
-      ok: true,
-      issues: [],
-      reason: runtime.reason
+      runtimeVersion: raw.runtimeVersion.trim(),
+      installRoot: typeof raw.installRoot === "string" ? raw.installRoot : void 0,
+      updatedAt: typeof raw.updatedAt === "number" ? raw.updatedAt : void 0
     };
+  } catch {
+    return null;
   }
-  harnesses.update(id, { lastProbedAt: Date.now() });
-  return {
-    id,
-    previousState,
-    state: status.state,
-    transitioned: false,
-    ok: status.enabled && status.state === "ready",
-    issues: status.enabled ? [`state_${status.state}`] : ["disabled"],
-    reason: status.enabled ? `state is ${status.state}` : "harness disabled"
-  };
 }
-function isAuthSatisfied(id, providers) {
-  if (process.env.SUPERONE_HARNESS_MARK_READY === "1") {
-    return { ok: true, reason: "SUPERONE_HARNESS_MARK_READY" };
+function writeCurrentPointer(prefix, runtimeVersion, extras) {
+  const ver = sanitizeRuntimeVersionForPath(runtimeVersion);
+  mkdirSync11(prefix, { recursive: true });
+  const path = managedCurrentPath(prefix);
+  const body = JSON.stringify(
+    {
+      runtimeVersion: ver,
+      installRoot: extras?.installRoot,
+      updatedAt: Date.now()
+    },
+    null,
+    2
+  );
+  const tmp = join19(
+    prefix,
+    `.${MANAGED_CURRENT_BASENAME}.${process.pid}.${randomBytes3(6).toString("hex")}.tmp`
+  );
+  writeFileSync9(tmp, body);
+  try {
+    renameSync2(tmp, path);
+  } catch {
+    try {
+      if (existsSync22(path)) rmSync2(path, { force: true });
+      renameSync2(tmp, path);
+    } catch {
+      writeFileSync9(path, body);
+      try {
+        rmSync2(tmp, { force: true });
+      } catch {
+      }
+    }
   }
-  const defRequiresAuth = id === "claude" || id === "codex";
-  if (!defRequiresAuth) {
-    return { ok: true, reason: "external harness does not require SuperOne provider auth" };
+}
+function resolveActiveInstallRoot(prefix) {
+  if (!prefix || !existsSync22(prefix)) return null;
+  const pointer = readCurrentPointer(prefix);
+  if (pointer) {
+    if (pointer.installRoot && existsSync22(pointer.installRoot) && statSync5(pointer.installRoot).isDirectory()) {
+      return pointer.installRoot;
+    }
+    const dir = managedVersionDir(prefix, pointer.runtimeVersion);
+    if (existsSync22(dir) && statSync5(dir).isDirectory()) return dir;
   }
-  if (providers) {
-    const consumer = consumerForHarness(id);
-    if (consumer) {
-      const binding = providers.listBindings().find((b2) => b2.consumer === consumer);
-      if (binding?.credentialId) {
-        const cred = providers.listCredentials().find((c) => c.id === binding.credentialId);
-        if (cred) return { ok: true, reason: `provider binding ${consumer}` };
+  const versionsRoot = managedVersionsDir(prefix);
+  if (existsSync22(versionsRoot)) {
+    try {
+      const kids = readdirSync8(versionsRoot).filter((n) => {
+        try {
+          return statSync5(join19(versionsRoot, n)).isDirectory();
+        } catch {
+          return false;
+        }
+      });
+      if (kids.length === 1) return join19(versionsRoot, kids[0]);
+    } catch {
+    }
+  }
+  return null;
+}
+function pruneManagedVersions(prefix, keep, maxKeep = MANAGED_VERSION_KEEP) {
+  const versionsRoot = managedVersionsDir(prefix);
+  if (!existsSync22(versionsRoot)) return;
+  const keepSet = new Set(
+    keep.filter(Boolean).map((v2) => {
+      try {
+        return sanitizeRuntimeVersionForPath(v2);
+      } catch {
+        return "";
       }
-      const any2 = providers.listCredentials();
-      if (any2.length > 0) {
-        return { ok: true, reason: "node has provider credentials" };
+    }).filter(Boolean)
+  );
+  let entries;
+  try {
+    entries = readdirSync8(versionsRoot).map((name) => {
+      try {
+        const st = statSync5(join19(versionsRoot, name));
+        if (!st.isDirectory()) return null;
+        return { name, mtime: st.mtimeMs };
+      } catch {
+        return null;
       }
-    }
+    }).filter((e) => e != null);
+  } catch {
+    return;
   }
-  if (id === "claude" && isClaudeRuntimeRunnable()) {
-    return { ok: true, reason: "claude Agent SDK / host credentials assumed" };
+  const protectedNames = entries.filter((e) => keepSet.has(e.name));
+  const others = entries.filter((e) => !keepSet.has(e.name)).sort((a, b2) => b2.mtime - a.mtime);
+  const retain = new Set(protectedNames.map((e) => e.name));
+  for (const e of others) {
+    if (retain.size >= maxKeep) break;
+    retain.add(e.name);
   }
-  if (id === "codex" && isCodexBinaryOverrideRunnable()) {
-    return { ok: true, reason: "SUPERONE_CODEX_BINARY host credentials assumed" };
+  for (const e of entries) {
+    if (retain.has(e.name)) continue;
+    const dir = join19(versionsRoot, e.name);
+    try {
+      rmSync2(dir, { recursive: true, force: true });
+    } catch {
+    }
   }
-  return {
-    ok: false,
-    reason: "needs_auth: push provider credentials, complete host CLI login, or set SUPERONE_HARNESS_MARK_READY=1 for lab"
-  };
 }
 
-// src/session/harness-enable.ts
-init_environment();
-init_src2();
-import { accessSync, constants, existsSync as existsSync25, realpathSync as realpathSync3, statSync as statSync7 } from "node:fs";
-import { isAbsolute as isAbsolute2, resolve as resolve6 } from "node:path";
-
-// src/session/managed-harness-release.ts
+// ../../packages/runtime/src/harness/managed-release.ts
 import {
   copyFileSync,
   createReadStream,
   existsSync as existsSync23,
-  mkdirSync as mkdirSync11,
+  mkdirSync as mkdirSync12,
   mkdtempSync,
-  readFileSync as readFileSync13,
-  renameSync as renameSync2,
-  rmSync as rmSync2,
-  statSync as statSync5,
-  writeFileSync as writeFileSync9
+  readFileSync as readFileSync14,
+  renameSync as renameSync3,
+  rmSync as rmSync3,
+  statSync as statSync6,
+  writeFileSync as writeFileSync10
 } from "node:fs";
-import { createHash as createHash4, randomBytes as randomBytes3 } from "node:crypto";
-import { dirname as dirname11, join as join18, relative, resolve as resolve4, sep as sep3 } from "node:path";
+import { createHash as createHash4, randomBytes as randomBytes4 } from "node:crypto";
+import { dirname as dirname11, join as join20, relative, resolve as resolve4, sep as sep3 } from "node:path";
 import { arch as osArch, platform as osPlatform } from "node:os";
+var releaseVersionProvider = null;
+function setHarnessReleaseVersionProvider(fn) {
+  releaseVersionProvider = fn;
+}
 var MANAGED_PAYLOAD_BASENAME = "payload.bin";
 var MANAGED_META_BASENAME = "artifact.json";
-var MANAGED_CURRENT_BASENAME = "current";
+var MANAGED_CURRENT_BASENAME2 = "current";
 var MAX_SEGMENT_LEN = 64;
 var SAFE_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 function currentCliVersion() {
-  const v2 = resolveCliReleaseVersion();
+  const v2 = releaseVersionProvider?.() ?? process.env.SUPERONE_CLI_VERSION?.trim() ?? "";
   return assertSafePathSegment(v2, "cli version");
 }
 function currentHostPlatform() {
@@ -60375,11 +60770,37 @@ function parseManagedHarnessPin(id, raw) {
       }
       fileName = art.fileName.slice(0, 128);
     }
+    let url2;
+    if (typeof art.url === "string" && art.url.trim()) {
+      const u = art.url.trim();
+      if (!/^https:\/\//i.test(u)) {
+        throw new Error(`manifest ${id} artifacts[${i}] url must be https`);
+      }
+      if (u.length > 1024) {
+        throw new Error(`manifest ${id} artifacts[${i}] url exceeds 1024 chars`);
+      }
+      url2 = u;
+    }
+    let npmName;
+    if (typeof art.npmName === "string" && art.npmName.trim()) {
+      const n = art.npmName.trim();
+      if (!/^(@[A-Za-z0-9._-]+\/)?[A-Za-z0-9._-]+$/.test(n) || n.length > 214) {
+        throw new Error(`manifest ${id} artifacts[${i}] npmName invalid`);
+      }
+      npmName = n;
+    }
+    let npmVersion;
+    if (typeof art.npmVersion === "string" && art.npmVersion.trim()) {
+      npmVersion = assertSafePathSegment(art.npmVersion, `${id}.artifacts[${i}].npmVersion`);
+    }
     return {
       platform: platform2,
       arch: arch2,
       digestSha256: digest.toLowerCase(),
-      fileName
+      fileName,
+      url: url2,
+      npmName,
+      npmVersion
     };
   });
   return { runtimeVersion, artifactVersion, artifacts };
@@ -60390,11 +60811,11 @@ function loadHarnessReleaseManifest(nodeHome) {
     if (!existsSync23(fromEnv)) {
       throw new Error(`SUPERONE_HARNESS_MANIFEST not found: ${fromEnv}`);
     }
-    return parseHarnessReleaseManifest(JSON.parse(readFileSync13(fromEnv, "utf8")));
+    return parseHarnessReleaseManifest(JSON.parse(readFileSync14(fromEnv, "utf8")));
   }
-  const local = join18(nodeHome, "release-manifest.json");
+  const local = join20(nodeHome, "release-manifest.json");
   if (existsSync23(local)) {
-    return parseHarnessReleaseManifest(JSON.parse(readFileSync13(local, "utf8")));
+    return parseHarnessReleaseManifest(JSON.parse(readFileSync14(local, "utf8")));
   }
   return null;
 }
@@ -60465,7 +60886,7 @@ async function installManagedArtifactFromFile(opts) {
   if (!existsSync23(opts.artifactPath)) {
     throw new Error(`artifact not found: ${opts.artifactPath}`);
   }
-  if (!statSync5(opts.artifactPath).isFile()) {
+  if (!statSync6(opts.artifactPath).isFile()) {
     throw new Error(`artifact is not a regular file: ${opts.artifactPath}`);
   }
   const digest = await sha256File(opts.artifactPath);
@@ -60480,8 +60901,8 @@ async function installManagedArtifactFromFile(opts) {
     opts.harnessId,
     pin.artifactVersion
   );
-  const finalFile = join18(destDir, MANAGED_PAYLOAD_BASENAME);
-  const metaPath = join18(destDir, MANAGED_META_BASENAME);
+  const finalFile = join20(destDir, MANAGED_PAYLOAD_BASENAME);
+  const metaPath = join20(destDir, MANAGED_META_BASENAME);
   assertStrictChild(finalFile, destDir, "payload path");
   assertStrictChild(metaPath, destDir, "meta path");
   const metaBody = JSON.stringify(
@@ -60501,7 +60922,7 @@ async function installManagedArtifactFromFile(opts) {
   );
   let reusedExisting = false;
   if (existsSync23(destDir)) {
-    const payloadOk = existsSync23(finalFile) && statSync5(finalFile).isFile() && await sha256File(finalFile) === art.digestSha256;
+    const payloadOk = existsSync23(finalFile) && statSync6(finalFile).isFile() && await sha256File(finalFile) === art.digestSha256;
     if (payloadOk) {
       reusedExisting = true;
     } else if (mode === "repair") {
@@ -60521,24 +60942,24 @@ async function installManagedArtifactFromFile(opts) {
     }
   } else {
     const harnessRoot2 = dirname11(destDir);
-    mkdirSync11(harnessRoot2, { recursive: true });
+    mkdirSync12(harnessRoot2, { recursive: true });
     assertPathInside(destDir, harnessRoot2, "version dir");
     const stagingDir = mkdtempSync(
-      join18(harnessRoot2, `.staging-${opts.harnessId}-${randomBytes3(8).toString("hex")}-`)
+      join20(harnessRoot2, `.staging-${opts.harnessId}-${randomBytes4(8).toString("hex")}-`)
     );
     assertPathInside(stagingDir, harnessRoot2, "staging dir");
-    const stagingFile = join18(stagingDir, MANAGED_PAYLOAD_BASENAME);
-    const stagingMeta = join18(stagingDir, MANAGED_META_BASENAME);
+    const stagingFile = join20(stagingDir, MANAGED_PAYLOAD_BASENAME);
+    const stagingMeta = join20(stagingDir, MANAGED_META_BASENAME);
     try {
       copyFileSync(opts.artifactPath, stagingFile);
       const stagedDigest = await sha256File(stagingFile);
       if (stagedDigest !== art.digestSha256) {
         throw new Error(`staged artifact digest mismatch for ${opts.harnessId}`);
       }
-      writeFileSync9(stagingMeta, metaBody, "utf8");
-      renameSync2(stagingDir, destDir);
+      writeFileSync10(stagingMeta, metaBody, "utf8");
+      renameSync3(stagingDir, destDir);
     } catch (err) {
-      rmSync2(stagingDir, { recursive: true, force: true });
+      rmSync3(stagingDir, { recursive: true, force: true });
       if (existsSync23(destDir) && existsSync23(finalFile)) {
         const existingDigest = await sha256File(finalFile);
         if (existingDigest === art.digestSha256) {
@@ -60564,22 +60985,22 @@ async function installManagedArtifactFromFile(opts) {
   if (finalDigest !== art.digestSha256) {
     throw new Error(`final payload digest mismatch for ${opts.harnessId}`);
   }
-  const harnessRoot = join18(
+  const harnessRoot = join20(
     releasesRoot(opts.nodeHome),
     opts.manifest.cliVersion,
     "harnesses",
     opts.harnessId
   );
   assertPathInside(harnessRoot, releasesRoot(opts.nodeHome), "harness root");
-  mkdirSync11(harnessRoot, { recursive: true });
-  const currentPath = join18(harnessRoot, MANAGED_CURRENT_BASENAME);
-  const currentTmp = join18(
+  mkdirSync12(harnessRoot, { recursive: true });
+  const currentPath = join20(harnessRoot, MANAGED_CURRENT_BASENAME2);
+  const currentTmp = join20(
     harnessRoot,
-    `.${MANAGED_CURRENT_BASENAME}.${process.pid}.${randomBytes3(6).toString("hex")}.tmp`
+    `.${MANAGED_CURRENT_BASENAME2}.${process.pid}.${randomBytes4(6).toString("hex")}.tmp`
   );
   assertStrictChild(currentTmp, harnessRoot, "current pointer temp");
   try {
-    writeFileSync9(
+    writeFileSync10(
       currentTmp,
       JSON.stringify(
         {
@@ -60593,9 +61014,9 @@ async function installManagedArtifactFromFile(opts) {
       ),
       "utf8"
     );
-    renameSync2(currentTmp, currentPath);
+    renameSync3(currentTmp, currentPath);
   } catch (err) {
-    rmSync2(currentTmp, { force: true });
+    rmSync3(currentTmp, { force: true });
     throw err;
   }
   return {
@@ -60610,10 +61031,10 @@ async function installManagedArtifactFromFile(opts) {
   };
 }
 async function replacePayloadAtomically(opts) {
-  mkdirSync11(opts.destDir, { recursive: true });
-  const nonce = randomBytes3(8).toString("hex");
-  const payloadTmp = join18(opts.destDir, `.${MANAGED_PAYLOAD_BASENAME}.${nonce}.tmp`);
-  const metaTmp = join18(opts.destDir, `.${MANAGED_META_BASENAME}.${nonce}.tmp`);
+  mkdirSync12(opts.destDir, { recursive: true });
+  const nonce = randomBytes4(8).toString("hex");
+  const payloadTmp = join20(opts.destDir, `.${MANAGED_PAYLOAD_BASENAME}.${nonce}.tmp`);
+  const metaTmp = join20(opts.destDir, `.${MANAGED_META_BASENAME}.${nonce}.tmp`);
   assertStrictChild(payloadTmp, opts.destDir, "payload temp");
   assertStrictChild(metaTmp, opts.destDir, "meta temp");
   try {
@@ -60622,12 +61043,12 @@ async function replacePayloadAtomically(opts) {
     if (d !== opts.expectedDigest) {
       throw new Error(`repair staged digest mismatch: expected ${opts.expectedDigest}, got ${d}`);
     }
-    writeFileSync9(metaTmp, opts.metaBody, "utf8");
-    renameSync2(payloadTmp, opts.finalFile);
-    renameSync2(metaTmp, opts.metaPath);
+    writeFileSync10(metaTmp, opts.metaBody, "utf8");
+    renameSync3(payloadTmp, opts.finalFile);
+    renameSync3(metaTmp, opts.metaPath);
   } catch (err) {
-    rmSync2(payloadTmp, { force: true });
-    rmSync2(metaTmp, { force: true });
+    rmSync3(payloadTmp, { force: true });
+    rmSync3(metaTmp, { force: true });
     throw err;
   }
 }
@@ -60646,14 +61067,967 @@ function requiredRuntimeVersion(harnessId, manifest) {
   return manifest?.managedHarnesses[harnessId]?.runtimeVersion ?? null;
 }
 
-// src/session/harness-enable.ts
-init_codex_turn_runner();
-async function enableHarness(manager, input, providers) {
+// ../../packages/runtime/src/harness/managed-official.ts
+import { existsSync as existsSync24, mkdirSync as mkdirSync13, readFileSync as readFileSync15, readdirSync as readdirSync9, statSync as statSync7, writeFileSync as writeFileSync11 } from "node:fs";
+import { arch as osArch2, platform as osPlatform2 } from "node:os";
+import { join as join21, resolve as resolve5 } from "node:path";
+var OFFICIAL_CLAUDE_SDK_VERSION = "0.3.226";
+var OFFICIAL_CODEX_NPM_VERSION = "0.146.1";
+var OFFICIAL_CODEX_PACKAGE = "@openai/codex";
+function managedHarnessPrefix(nodeHome, harnessId) {
+  return resolve5(nodeHome, harnessId);
+}
+function claudePlatformPackageName() {
+  const p2 = osPlatform2();
+  const a = osArch2();
+  if (a !== "arm64" && a !== "x64") {
+    throw new Error(`unsupported arch for Claude Agent SDK: ${a}`);
+  }
+  if (p2 === "darwin") return `@anthropic-ai/claude-agent-sdk-darwin-${a}`;
+  if (p2 === "win32") return `@anthropic-ai/claude-agent-sdk-win32-${a}`;
+  if (p2 === "linux") {
+    if (isMuslLinux()) return `@anthropic-ai/claude-agent-sdk-linux-${a}-musl`;
+    return `@anthropic-ai/claude-agent-sdk-linux-${a}`;
+  }
+  throw new Error(`unsupported platform for Claude Agent SDK: ${p2}`);
+}
+function isMuslLinux() {
+  try {
+    if (existsSync24("/etc/alpine-release")) return true;
+    const lib = readdirSync9("/lib").some((n) => n.startsWith("ld-musl"));
+    if (lib) return true;
+  } catch {
+  }
+  return false;
+}
+function resolveOfficialInstallBinaryInRoot(harnessId, installRoot) {
+  if (!installRoot || !existsSync24(installRoot)) return null;
+  if (harnessId === "codex") {
+    const candidates = [
+      join21(installRoot, "bin", "codex"),
+      join21(installRoot, "bin", "codex.cmd"),
+      join21(installRoot, "lib", "node_modules", "@openai", "codex", "bin", "codex.js")
+    ];
+    for (const c of candidates) {
+      if (existsSync24(c) && (c.endsWith(".js") || isExecutableFile(c))) return c;
+    }
+    return null;
+  }
+  const nm = join21(installRoot, "lib", "node_modules");
+  const scoped = join21(nm, "@anthropic-ai");
+  try {
+    if (existsSync24(scoped)) {
+      const names = readdirSync9(scoped).filter((n) => n.startsWith("claude-agent-sdk-"));
+      for (const n of names) {
+        const ext = process.platform === "win32" ? ".exe" : "";
+        const bin = join21(scoped, n, `claude${ext}`);
+        if (existsSync24(bin)) return bin;
+      }
+    }
+  } catch {
+  }
+  const direct = join21(
+    nm,
+    ...claudePlatformPackageName().split("/"),
+    process.platform === "win32" ? "claude.exe" : "claude"
+  );
+  if (existsSync24(direct)) return direct;
+  return null;
+}
+function isExecutableFile(path) {
+  try {
+    const st = statSync7(path);
+    if (!st.isFile()) return false;
+    if (process.platform === "win32") return true;
+    return (st.mode & 73) !== 0;
+  } catch {
+    return false;
+  }
+}
+
+// ../../packages/runtime/src/harness/tarball-fetch.ts
+import { existsSync as existsSync25, rmSync as rmSync4 } from "node:fs";
+var NPM_REGISTRY = "https://registry.npmjs.org";
+function assertSha256(actualHex, expectedHex) {
+  if (actualHex !== expectedHex.toLowerCase()) {
+    throw new Error(`tarball sha256 mismatch: expected ${expectedHex}, got ${actualHex}`);
+  }
+}
+function assertSha512Integrity(actualBase64, integrity) {
+  if (!integrity.startsWith("sha512-")) {
+    throw new Error(`unsupported integrity algorithm: ${integrity.slice(0, 16)}`);
+  }
+  const expected = integrity.slice("sha512-".length);
+  if (actualBase64 !== expected) {
+    throw new Error(`tarball integrity mismatch (sha512)`);
+  }
+}
+function discardPartial(destPath) {
+  try {
+    if (existsSync25(destPath)) rmSync4(destPath, { force: true });
+  } catch {
+  }
+}
+function createFetchJson(httpFetch) {
+  return async (url2) => {
+    const res = await httpFetch(url2, { headers: { accept: "application/json" } });
+    if (!res.ok) throw new Error(`registry GET ${url2} \u2192 ${res.status}`);
+    return res.json();
+  };
+}
+async function resolveNpmPackMeta(name, version2, fetchJson) {
+  const encoded = name.startsWith("@") ? `/${name.replace("/", "%2f")}/${encodeURIComponent(version2)}` : `/${name}/${encodeURIComponent(version2)}`;
+  const url2 = `${NPM_REGISTRY}${encoded}`;
+  const raw = await fetchJson(url2);
+  const dist = raw.dist;
+  if (!dist?.tarball || !dist.integrity) {
+    throw new Error(`npm package ${name}@${version2} missing dist.tarball/integrity`);
+  }
+  if (!dist.integrity.startsWith("sha512-")) {
+    throw new Error(`npm package ${name}@${version2} integrity is not sha512: ${dist.integrity}`);
+  }
+  return {
+    name,
+    version: typeof raw.version === "string" ? raw.version : version2,
+    tarball: dist.tarball,
+    integrity: dist.integrity
+  };
+}
+async function fetchTarballWithFallback(opts) {
+  const {
+    destPath,
+    npmName,
+    npmVersion,
+    pin,
+    npmOnly,
+    fetchJson,
+    downloadToFile,
+    onProgress,
+    log: log2
+  } = opts;
+  const expectedSha = pin?.digestSha256;
+  if (!npmOnly && pin?.url) {
+    try {
+      log2?.info?.(`[harness] fetching R2 ${pin.url}`);
+      const digests = await downloadToFile(pin.url, destPath, onProgress);
+      if (expectedSha) assertSha256(digests.sha256Hex, expectedSha);
+      return { from: "r2-tarball", digests };
+    } catch (err) {
+      log2?.warn?.(
+        `[harness] R2 fetch failed (${err instanceof Error ? err.message : String(err)}); trying npm`
+      );
+      if (err instanceof Error && /sha256 mismatch|integrity mismatch/i.test(err.message)) {
+        discardPartial(destPath);
+      }
+    }
+  }
+  log2?.info?.(`[harness] fetching npm ${npmName}@${npmVersion}`);
+  const meta3 = await resolveNpmPackMeta(npmName, npmVersion, fetchJson);
+  try {
+    const digests = await downloadToFile(meta3.tarball, destPath, onProgress);
+    if (expectedSha) {
+      assertSha256(digests.sha256Hex, expectedSha);
+    } else {
+      assertSha512Integrity(digests.sha512Base64, meta3.integrity);
+    }
+    return { from: "npm-tarball", digests, npmMeta: meta3 };
+  } catch (err) {
+    if (err instanceof Error && /sha256 mismatch|integrity mismatch/i.test(err.message)) {
+      discardPartial(destPath);
+    }
+    throw err;
+  }
+}
+
+// ../../packages/runtime/src/harness/resumable-download.ts
+import { createHash as createHash5 } from "node:crypto";
+import {
+  appendFileSync,
+  createReadStream as createReadStream2,
+  createWriteStream,
+  existsSync as existsSync26,
+  mkdirSync as mkdirSync14,
+  rmSync as rmSync5,
+  statSync as statSync8,
+  writeFileSync as writeFileSync12
+} from "node:fs";
+import { dirname as dirname12 } from "node:path";
+import { pipeline } from "node:stream/promises";
+import { Readable as Readable2, Transform } from "node:stream";
+var HARNESS_PROGRESS_THROTTLE_MS = 200;
+function createThrottledProgress(onProgress, throttleMs = HARNESS_PROGRESS_THROTTLE_MS) {
+  if (!onProgress) return void 0;
+  let lastEmit = 0;
+  return (received, total) => {
+    const now = Date.now();
+    const done = total > 0 && received >= total;
+    if (done || lastEmit === 0 || now - lastEmit >= throttleMs) {
+      lastEmit = now;
+      onProgress(received, total);
+    }
+  };
+}
+function parseContentRange(header) {
+  if (!header) return null;
+  const m2 = /^bytes\s+(\d+)-(\d+)\/(\d+|\*)$/i.exec(header.trim());
+  if (!m2) return null;
+  return {
+    start: Number(m2[1]),
+    end: Number(m2[2]),
+    total: m2[3] === "*" ? null : Number(m2[3])
+  };
+}
+async function seedHashesFromFile(path) {
+  const sha256 = createHash5("sha256");
+  const sha512 = createHash5("sha512");
+  const size = statSync8(path).size;
+  if (size === 0) return { sha256, sha512, size };
+  await new Promise((resolve13, reject) => {
+    const stream = createReadStream2(path);
+    stream.on("data", (chunk) => {
+      const buf = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+      sha256.update(buf);
+      sha512.update(buf);
+    });
+    stream.on("error", reject);
+    stream.on("end", () => resolve13());
+  });
+  return { sha256, sha512, size };
+}
+async function hashExistingFile(path, onProgress) {
+  const { sha256, sha512, size } = await seedHashesFromFile(path);
+  onProgress?.(size, size);
+  return {
+    byteLength: size,
+    sha256Hex: sha256.digest("hex"),
+    sha512Base64: sha512.digest("base64")
+  };
+}
+async function streamResponseToFile(res, destPath, onProgress, opts = {}) {
+  if (!res.ok && res.status !== 206) {
+    throw new Error(`tarball GET \u2192 ${res.status}`);
+  }
+  const resumeFrom = opts.resumeFrom ?? 0;
+  const append = opts.append === true && resumeFrom > 0;
+  const keepPartial = opts.keepPartialOnError !== false;
+  const contentLen = Number(res.headers.get("content-length") ?? 0);
+  const total = opts.totalBytes && opts.totalBytes > 0 ? opts.totalBytes : append ? resumeFrom + contentLen : contentLen;
+  mkdirSync14(dirname12(destPath), { recursive: true });
+  const emit = createThrottledProgress(onProgress, opts.progressThrottleMs);
+  let sha256;
+  let sha512;
+  let received;
+  if (append) {
+    const seeded = await seedHashesFromFile(destPath);
+    if (seeded.size !== resumeFrom) {
+      throw new Error(
+        `partial size mismatch: disk=${seeded.size} resumeFrom=${resumeFrom}`
+      );
+    }
+    sha256 = seeded.sha256;
+    sha512 = seeded.sha512;
+    received = resumeFrom;
+    emit?.(received, total || received);
+  } else {
+    sha256 = createHash5("sha256");
+    sha512 = createHash5("sha512");
+    received = 0;
+  }
+  if (!res.body) {
+    const buf = Buffer.from(await res.arrayBuffer());
+    if (append) {
+      appendFileSync(destPath, buf);
+    } else {
+      writeFileSync12(destPath, buf);
+    }
+    sha256.update(buf);
+    sha512.update(buf);
+    received += buf.byteLength;
+    emit?.(received, total || received);
+    onProgress?.(received, total || received);
+    return {
+      byteLength: received,
+      sha256Hex: sha256.digest("hex"),
+      sha512Base64: sha512.digest("base64")
+    };
+  }
+  const nodeStream = Readable2.fromWeb(res.body);
+  const hasher = new Transform({
+    transform(chunk, _enc, cb) {
+      sha256.update(chunk);
+      sha512.update(chunk);
+      received += chunk.byteLength;
+      emit?.(received, total || received);
+      cb(null, chunk);
+    }
+  });
+  try {
+    await pipeline(
+      nodeStream,
+      hasher,
+      createWriteStream(destPath, append ? { flags: "a" } : void 0)
+    );
+  } catch (err) {
+    if (!keepPartial) {
+      try {
+        if (existsSync26(destPath)) rmSync5(destPath, { force: true });
+      } catch {
+      }
+    }
+    throw err;
+  }
+  onProgress?.(received, total || received);
+  return {
+    byteLength: received,
+    sha256Hex: sha256.digest("hex"),
+    sha512Base64: sha512.digest("base64")
+  };
+}
+var destPathLocks = /* @__PURE__ */ new Map();
+async function withDestPathLock(destPath, fn) {
+  const prev = destPathLocks.get(destPath) ?? Promise.resolve();
+  let release;
+  const gate = new Promise((resolve13) => {
+    release = resolve13;
+  });
+  const held = prev.then(() => gate);
+  destPathLocks.set(
+    destPath,
+    held.catch(() => {
+    })
+  );
+  await prev.catch(() => {
+  });
+  try {
+    return await fn();
+  } finally {
+    release();
+    if (destPathLocks.get(destPath) === held) {
+      destPathLocks.delete(destPath);
+    }
+  }
+}
+async function downloadResumableToFile(httpFetch, url2, destPath, onProgress, log2) {
+  return withDestPathLock(
+    destPath,
+    () => downloadResumableToFileUnlocked(httpFetch, url2, destPath, onProgress, log2)
+  );
+}
+async function downloadResumableToFileUnlocked(httpFetch, url2, destPath, onProgress, log2) {
+  mkdirSync14(dirname12(destPath), { recursive: true });
+  let existing = existsSync26(destPath) ? statSync8(destPath).size : 0;
+  if (existing > 0 && existing < 64) {
+    rmSync5(destPath, { force: true });
+    existing = 0;
+  }
+  const tryOnce = async (from) => {
+    const diskNow = existsSync26(destPath) ? statSync8(destPath).size : 0;
+    const start = from > 0 ? diskNow : 0;
+    if (from > 0 && diskNow !== from) {
+      log2?.warn?.(
+        `[harness] partial size changed before Range (wanted ${from}, disk ${diskNow}); using disk`
+      );
+    }
+    const headers = {};
+    if (start > 0) {
+      headers.Range = `bytes=${start}-`;
+      log2?.info?.(`[harness] resume download from byte ${start} \u2192 ${url2}`);
+    }
+    const res = await httpFetch(url2, { headers });
+    if (res.status === 416 && start > 0) {
+      try {
+        const head = await httpFetch(url2, { method: "HEAD" });
+        const len = Number(head.headers.get("content-length") ?? 0);
+        if (len > 0 && start === len) {
+          log2?.info?.(`[harness] partial already complete (${len} B); reusing`);
+          return hashExistingFile(destPath, onProgress);
+        }
+      } catch {
+      }
+      log2?.warn?.(`[harness] Range 416 for ${url2}; discarding partial and restarting`);
+      rmSync5(destPath, { force: true });
+      return tryOnce(0);
+    }
+    if (res.status === 206) {
+      const cr = parseContentRange(res.headers.get("content-range"));
+      if (cr && cr.start !== start) {
+        log2?.warn?.(
+          `[harness] Content-Range start ${cr.start} \u2260 local ${start}; restarting`
+        );
+        rmSync5(destPath, { force: true });
+        return tryOnce(0);
+      }
+      const total = cr?.total ?? start + Number(res.headers.get("content-length") ?? 0);
+      try {
+        return await streamResponseToFile(res, destPath, onProgress, {
+          resumeFrom: start,
+          append: true,
+          totalBytes: total > 0 ? total : void 0,
+          keepPartialOnError: true
+        });
+      } catch (err) {
+        if (err instanceof Error && /partial size mismatch/i.test(err.message)) {
+          log2?.warn?.(`[harness] ${err.message}; discarding partial and restarting`);
+          rmSync5(destPath, { force: true });
+          return tryOnce(0);
+        }
+        throw err;
+      }
+    }
+    if (res.status === 200) {
+      if (start > 0) {
+        log2?.info?.(`[harness] server ignored Range for ${url2}; full re-download`);
+        try {
+          rmSync5(destPath, { force: true });
+        } catch {
+        }
+      }
+      const total = Number(res.headers.get("content-length") ?? 0);
+      return streamResponseToFile(res, destPath, onProgress, {
+        resumeFrom: 0,
+        append: false,
+        totalBytes: total > 0 ? total : void 0,
+        keepPartialOnError: true
+      });
+    }
+    if (!res.ok) throw new Error(`tarball GET ${url2} \u2192 ${res.status}`);
+    return streamResponseToFile(res, destPath, onProgress, {
+      keepPartialOnError: true
+    });
+  };
+  return tryOnce(existing);
+}
+function createResumableDownloadToFile(httpFetch, log2) {
+  return (url2, destPath, onProgress) => downloadResumableToFile(httpFetch, url2, destPath, onProgress, log2);
+}
+
+// ../../packages/runtime/src/harness/managed-tarball-installer.ts
+import {
+  existsSync as existsSync27,
+  mkdirSync as mkdirSync15,
+  mkdtempSync as mkdtempSync2,
+  readFileSync as readFileSync16,
+  renameSync as renameSync4,
+  rmSync as rmSync6,
+  statSync as statSync9,
+  writeFileSync as writeFileSync13
+} from "node:fs";
+import { tmpdir as tmpdir2 } from "node:os";
+import { dirname as dirname13, join as join22 } from "node:path";
+import { spawn as spawn4 } from "node:child_process";
+
+// ../../packages/shared/src/update-channels.ts
+function channelFromVersion(version2) {
+  if (/-alpha/i.test(version2)) return "alpha";
+  if (/-beta/i.test(version2)) return "beta";
+  return "stable";
+}
+
+// ../../packages/runtime/src/harness/cdn.ts
+var HARNESS_CDN_BASE = "https://dl.super-one.dev";
+var HARNESS_CDN_BUCKET_PREFIX = "harness";
+function isHarnessManifestChannel(value) {
+  return value === "alpha" || value === "beta" || value === "stable";
+}
+function harnessChannelManifestObjectKey(channel) {
+  return `${HARNESS_CDN_BUCKET_PREFIX}/manifest/${channel}.json`;
+}
+function harnessChannelManifestUrl(channel, base = HARNESS_CDN_BASE) {
+  return `${base.replace(/\/+$/, "")}/${harnessChannelManifestObjectKey(channel)}`;
+}
+async function fetchHarnessChannelManifest(opts) {
+  const url2 = harnessChannelManifestUrl(opts.channel, opts.baseUrl ?? HARNESS_CDN_BASE);
+  const fetchJson = opts.fetchJson ?? (async (u) => {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+    try {
+      const res = await fetch(u, {
+        signal: ctrl.signal,
+        headers: { accept: "application/json" }
+      });
+      if (!res.ok) throw new Error(`manifest GET ${u} \u2192 ${res.status}`);
+      return res.json();
+    } finally {
+      clearTimeout(timer);
+    }
+  });
+  return parseHarnessReleaseManifest(await fetchJson(url2));
+}
+function selectHarnessArtifact(manifest, harnessId, platform2, arch2) {
+  const pin = manifest.managedHarnesses[harnessId];
+  if (!pin) return null;
+  return pin.artifacts.find((a) => a.platform === platform2 && a.arch === arch2) ?? null;
+}
+
+// ../../packages/runtime/src/harness/managed-tarball-installer.ts
+function codexPlatformVersion(baseVersion = OFFICIAL_CODEX_NPM_VERSION) {
+  const p2 = process.platform;
+  const a = process.arch;
+  if (a !== "arm64" && a !== "x64") {
+    throw new Error(`unsupported arch for Codex: ${a}`);
+  }
+  if (p2 === "darwin") return `${baseVersion}-darwin-${a}`;
+  if (p2 === "linux") return `${baseVersion}-linux-${a}`;
+  if (p2 === "win32") return `${baseVersion}-win32-${a}`;
+  throw new Error(`unsupported platform for Codex: ${p2}`);
+}
+function managedPackagePins(id) {
+  if (id === "claude") {
+    const ver = process.env.SUPERONE_CLAUDE_SDK_VERSION?.trim() || OFFICIAL_CLAUDE_SDK_VERSION;
+    const platform2 = claudePlatformPackageName();
+    return {
+      runtimeVersion: ver,
+      packages: [{ name: platform2, version: ver, nodeModulesDir: platform2 }]
+    };
+  }
+  const base = process.env.SUPERONE_CODEX_NPM_VERSION?.trim() || OFFICIAL_CODEX_NPM_VERSION;
+  return {
+    runtimeVersion: base,
+    packages: [
+      {
+        name: OFFICIAL_CODEX_PACKAGE,
+        version: codexPlatformVersion(base),
+        nodeModulesDir: OFFICIAL_CODEX_PACKAGE
+      }
+    ]
+  };
+}
+function resolveHarnessManifestChannel(explicit, releaseVersion) {
+  if (explicit) return explicit;
+  const fromEnv = process.env.SUPERONE_HARNESS_CHANNEL?.trim();
+  if (fromEnv && isHarnessManifestChannel(fromEnv)) return fromEnv;
+  const ver = releaseVersion?.trim() || process.env.SUPERONE_CLI_VERSION?.trim() || process.env.npm_package_version?.trim() || "";
+  if (ver) {
+    const ch = channelFromVersion(ver);
+    if (isHarnessManifestChannel(ch)) return ch;
+  }
+  return "alpha";
+}
+function harnessDownloadDir(homeRoot) {
+  return join22(homeRoot, ".download");
+}
+function harnessArtifactDownloadKey(opts) {
+  const digest = opts.digestSha256?.trim().toLowerCase();
+  if (digest && /^[a-f0-9]{16,}$/.test(digest)) {
+    return `${opts.harnessId}-${digest.slice(0, 24)}`;
+  }
+  const safe = `${opts.npmName}@${opts.npmVersion}`.replace(/^@/, "").replace(/[^A-Za-z0-9._+-]+/g, "_").slice(0, 120);
+  return `${opts.harnessId}-${safe}`;
+}
+function harnessPartialPath(homeRoot, key) {
+  if (!key || key.includes("..") || key.includes("/") || key.includes("\\")) {
+    throw new Error(`unsafe download key: ${key}`);
+  }
+  return join22(harnessDownloadDir(homeRoot), `${key}.partial`);
+}
+function extractTgzWithSystemTar(tgzPath, destDir) {
+  return new Promise((resolve13, reject) => {
+    mkdirSync15(destDir, { recursive: true });
+    const child = spawn4("tar", ["-xzf", tgzPath, "-C", destDir], {
+      stdio: ["ignore", "ignore", "pipe"]
+    });
+    let stderr = "";
+    child.stderr?.on("data", (c) => {
+      stderr += c.toString();
+    });
+    child.on("error", (err) => reject(new Error(`tar spawn failed: ${err.message}`)));
+    child.on("close", (code) => {
+      if (code === 0) resolve13();
+      else reject(new Error(`tar extract failed (exit ${code}): ${stderr.slice(-500)}`));
+    });
+  });
+}
+function installPackageDir(packageDir, prefix, nodeModulesRel) {
+  const dest = join22(prefix, "lib", "node_modules", ...nodeModulesRel.split("/"));
+  const parent = dirname13(dest);
+  mkdirSync15(parent, { recursive: true });
+  if (existsSync27(dest)) {
+    rmSync6(dest, { recursive: true, force: true });
+  }
+  const staging = join22(
+    parent,
+    `.staging-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`
+  );
+  try {
+    renameSync4(packageDir, staging);
+    renameSync4(staging, dest);
+  } catch (err) {
+    if (existsSync27(staging)) rmSync6(staging, { recursive: true, force: true });
+    throw err instanceof Error ? err : new Error(`failed to place package into ${dest}: ${String(err)}`);
+  }
+  return dest;
+}
+function codexTargetTriple() {
+  const key = `${process.platform}-${process.arch}`;
+  const map2 = {
+    "darwin-arm64": "aarch64-apple-darwin",
+    "darwin-x64": "x86_64-apple-darwin",
+    "linux-arm64": "aarch64-unknown-linux-musl",
+    "linux-x64": "x86_64-unknown-linux-musl",
+    "win32-arm64": "aarch64-pc-windows-msvc",
+    "win32-x64": "x86_64-pc-windows-msvc"
+  };
+  return map2[key] ?? null;
+}
+function resolveCodexNativeUnderPrefix(prefix) {
+  const triple = codexTargetTriple();
+  if (!triple) return null;
+  const binaryName = process.platform === "win32" ? "codex.exe" : "codex";
+  const candidates = [
+    join22(prefix, "lib", "node_modules", "@openai", "codex", "vendor", triple, "bin", binaryName),
+    join22(
+      prefix,
+      "lib",
+      "node_modules",
+      "@openai",
+      `codex-${process.platform}-${process.arch}`,
+      "vendor",
+      triple,
+      "bin",
+      binaryName
+    )
+  ];
+  for (const c of candidates) {
+    if (existsSync27(c) && statSync9(c).isFile()) return c;
+  }
+  return null;
+}
+function resolveManagedTarballBinary(id, installRoot) {
+  if (id === "claude") return resolveOfficialInstallBinaryInRoot("claude", installRoot);
+  return resolveCodexNativeUnderPrefix(installRoot) ?? resolveOfficialInstallBinaryInRoot("codex", installRoot);
+}
+function readRuntimeVersionFromRoot(id, installRoot) {
+  try {
+    const metaPath = join22(installRoot, "install-meta.json");
+    if (existsSync27(metaPath)) {
+      const raw = JSON.parse(readFileSync16(metaPath, "utf8"));
+      if (raw.runtimeVersion) return raw.runtimeVersion;
+    }
+  } catch {
+  }
+  try {
+    const pkgPath = id === "claude" ? null : join22(installRoot, "lib", "node_modules", "@openai", "codex", "package.json");
+    if (pkgPath && existsSync27(pkgPath)) {
+      const raw = JSON.parse(readFileSync16(pkgPath, "utf8"));
+      const v2 = raw.version?.trim();
+      if (!v2) return null;
+      return v2.replace(/-(darwin|linux|win32)-(arm64|x64)$/, "");
+    }
+  } catch {
+  }
+  return null;
+}
+async function resolveArtifactPin(id, channel, opts, fetchJson) {
+  if (opts.artifactPin !== void 0) return opts.artifactPin;
+  if (opts.npmOnly) return null;
+  try {
+    const manifest = await fetchHarnessChannelManifest({
+      channel,
+      baseUrl: opts.cdnBase,
+      fetchJson
+    });
+    return selectHarnessArtifact(manifest, id, currentHostPlatform(), currentHostArch());
+  } catch (err) {
+    opts.log?.warn?.(
+      `[harness] channel manifest ${channel} unavailable (${err instanceof Error ? err.message : String(err)}); falling back to npm`
+    );
+    return null;
+  }
+}
+function createManagedTarballInstaller(opts = {}) {
+  const httpFetch = opts.httpFetch ?? ((input, init) => globalThis.fetch(input, init));
+  const fetchJson = opts.fetchJson ?? createFetchJson(httpFetch);
+  const log2 = opts.log;
+  const downloadToFile = opts.downloadToFile ?? createResumableDownloadToFile(httpFetch, log2);
+  const extractTgz = opts.extractTgz ?? extractTgzWithSystemTar;
+  return {
+    async install(id, home, onProgress) {
+      const prefix = managedHarnessPrefix(home.root, id);
+      mkdirSync15(prefix, { recursive: true });
+      const pins = managedPackagePins(id);
+      const versionDir = managedVersionDir(prefix, pins.runtimeVersion);
+      const previousPointer = readCurrentPointer(prefix)?.runtimeVersion ?? null;
+      const versionBin = resolveManagedTarballBinary(id, versionDir);
+      const versionMeta = readRuntimeVersionFromRoot(id, versionDir);
+      if (versionBin && versionMeta === pins.runtimeVersion) {
+        writeCurrentPointer(prefix, pins.runtimeVersion, { installRoot: versionDir });
+        return {
+          command: versionBin,
+          runtimeVersion: pins.runtimeVersion,
+          source: "npm-tarball",
+          detail: {
+            installPrefix: versionDir,
+            reused: "1",
+            runtimeVersion: pins.runtimeVersion
+          }
+        };
+      }
+      const activeRoot = resolveActiveInstallRoot(prefix);
+      if (activeRoot) {
+        const activeBin = resolveManagedTarballBinary(id, activeRoot);
+        const activeVer = readRuntimeVersionFromRoot(id, activeRoot);
+        if (activeBin && activeVer === pins.runtimeVersion) {
+          writeCurrentPointer(prefix, pins.runtimeVersion, { installRoot: activeRoot });
+          return {
+            command: activeBin,
+            runtimeVersion: activeVer,
+            source: "npm-tarball",
+            detail: { installPrefix: activeRoot, reused: "1" }
+          };
+        }
+        if (activeBin && activeVer && activeVer !== pins.runtimeVersion) {
+          log2?.info?.(
+            `[harness] ${id} pin mismatch: installed=${activeVer} pin=${pins.runtimeVersion} \u2014 installing side-by-side`
+          );
+        }
+      }
+      const channel = resolveHarnessManifestChannel(opts.channel, opts.releaseVersion);
+      const artifactPin = await resolveArtifactPin(id, channel, opts, fetchJson);
+      let packageSpec = "";
+      let source = "npm-tarball";
+      mkdirSync15(versionDir, { recursive: true });
+      for (const pkg of pins.packages) {
+        const npmName = artifactPin?.npmName ?? pkg.name;
+        const npmVersion = artifactPin?.npmVersion ?? pkg.version;
+        packageSpec = `${npmName}@${npmVersion}`;
+        const downloadKey = harnessArtifactDownloadKey({
+          harnessId: id,
+          digestSha256: artifactPin?.digestSha256,
+          npmName,
+          npmVersion
+        });
+        const partialPath = harnessPartialPath(home.root, downloadKey);
+        const work = mkdtempSync2(join22(tmpdir2(), `superone-harness-${id}-`));
+        try {
+          const { from } = await fetchTarballWithFallback({
+            destPath: partialPath,
+            npmName,
+            npmVersion,
+            pin: artifactPin,
+            npmOnly: opts.npmOnly === true,
+            fetchJson,
+            downloadToFile,
+            onProgress,
+            log: log2
+          });
+          source = from;
+          const extractRoot = join22(work, "out");
+          await extractTgz(partialPath, extractRoot);
+          const packageDir = join22(extractRoot, "package");
+          if (!existsSync27(packageDir) || !statSync9(packageDir).isDirectory()) {
+            throw new Error(`tarball for ${packageSpec} has no package/ directory`);
+          }
+          installPackageDir(packageDir, versionDir, npmName);
+          try {
+            if (existsSync27(partialPath)) rmSync6(partialPath, { force: true });
+          } catch {
+          }
+        } finally {
+          rmSync6(work, { recursive: true, force: true });
+        }
+      }
+      writeFileSync13(
+        join22(versionDir, "install-meta.json"),
+        JSON.stringify(
+          {
+            harnessId: id,
+            runtimeVersion: pins.runtimeVersion,
+            packageSpec,
+            source,
+            channel,
+            digestSha256: artifactPin?.digestSha256 ?? null,
+            installedAt: Date.now()
+          },
+          null,
+          2
+        )
+      );
+      const command = resolveManagedTarballBinary(id, versionDir);
+      if (!command) {
+        throw new Error(
+          `tarball install of ${id} succeeded but binary was not found under ${versionDir}`
+        );
+      }
+      writeCurrentPointer(prefix, pins.runtimeVersion, { installRoot: versionDir });
+      const keep = [pins.runtimeVersion, previousPointer].filter(
+        (v2) => typeof v2 === "string" && v2.length > 0
+      );
+      pruneManagedVersions(prefix, keep);
+      log2?.info?.(`[harness] installed ${id}@${pins.runtimeVersion} from ${source} \u2192 ${command}`);
+      return {
+        command,
+        runtimeVersion: pins.runtimeVersion,
+        source,
+        detail: {
+          packageSpec,
+          installPrefix: versionDir,
+          channel,
+          digestSha256: artifactPin?.digestSha256,
+          runtimeVersion: pins.runtimeVersion
+        }
+      };
+    }
+  };
+}
+
+// ../../packages/runtime/src/harness/runtime-ready.ts
+var RUNTIME_SPECS = {
+  claude: {
+    catalogId: "claude",
+    okReason: "claude binary or Agent SDK available",
+    failReason: "claude runtime unavailable: install managed artifact, Agent SDK platform package, or SUPERONE_CLAUDE_BINARY"
+  },
+  codex: {
+    catalogId: "codex",
+    okReason: "codex binary available",
+    failReason: "codex runtime unavailable: enable with --artifact or set SUPERONE_CODEX_BINARY"
+  },
+  acp: {
+    catalogId: "acp-grok",
+    okReason: "acp binary available",
+    failReason: "acp-grok runtime unavailable: enable with --command or set SUPERONE_ACP_BINARY"
+  },
+  opencode: {
+    catalogId: "opencode",
+    okReason: "opencode binary available",
+    // server-url only configs still need a client binary for the node runner today
+    failReason: "opencode runtime unavailable: enable with --command or set SUPERONE_OPENCODE_BINARY"
+  }
+};
+function assertSessionHarnessRuntimeReady(sessionHarnessId, harnesses, resolver) {
+  const spec = RUNTIME_SPECS[sessionHarnessId];
+  if (!spec) return { ok: false, reason: `unknown harness: ${sessionHarnessId}` };
+  if (resolver.resolveBinary(spec.catalogId, harnesses) || resolver.isRunnableWithoutCatalog(spec.catalogId)) {
+    return { ok: true, reason: spec.okReason };
+  }
+  return { ok: false, reason: spec.failReason };
+}
+function probeHarnessReadiness(harnesses, id, deps) {
+  const status = harnesses.get(id);
+  const previousState = status.state;
+  const issues = [];
+  const sessionWire = id === "acp-grok" ? "acp" : id;
+  const runtime = assertSessionHarnessRuntimeReady(sessionWire, harnesses, deps.resolver);
+  if (!runtime.ok) {
+    issues.push(runtime.reason);
+    if (status.enabled && (status.state === "ready" || status.state === "needs_auth")) {
+      harnesses.update(id, {
+        state: "error",
+        diagnosticCode: "probe_failed",
+        lastProbedAt: Date.now()
+      });
+      const next = harnesses.get(id);
+      return {
+        id,
+        previousState,
+        state: next.state,
+        transitioned: next.state !== previousState,
+        ok: false,
+        issues,
+        reason: runtime.reason
+      };
+    }
+    harnesses.update(id, { lastProbedAt: Date.now() });
+    return {
+      id,
+      previousState,
+      state: status.state,
+      transitioned: false,
+      ok: false,
+      issues,
+      reason: runtime.reason
+    };
+  }
+  if (status.enabled && status.state === "needs_auth") {
+    const authOk = isAuthSatisfied(id, deps);
+    if (!authOk.ok) {
+      issues.push(authOk.reason);
+      harnesses.update(id, {
+        lastProbedAt: Date.now(),
+        diagnosticCode: "needs_auth"
+      });
+      return {
+        id,
+        previousState,
+        state: "needs_auth",
+        transitioned: false,
+        ok: false,
+        issues,
+        reason: authOk.reason
+      };
+    }
+    harnesses.update(id, {
+      state: "ready",
+      diagnosticCode: null,
+      lastProbedAt: Date.now()
+    });
+    return {
+      id,
+      previousState,
+      state: "ready",
+      transitioned: true,
+      ok: true,
+      issues: [],
+      reason: `promoted needs_auth \u2192 ready (${authOk.reason})`
+    };
+  }
+  if (status.enabled && status.state === "ready") {
+    harnesses.update(id, { lastProbedAt: Date.now(), diagnosticCode: null });
+    return {
+      id,
+      previousState,
+      state: "ready",
+      transitioned: false,
+      ok: true,
+      issues: [],
+      reason: runtime.reason
+    };
+  }
+  harnesses.update(id, { lastProbedAt: Date.now() });
+  return {
+    id,
+    previousState,
+    state: status.state,
+    transitioned: false,
+    ok: status.enabled && status.state === "ready",
+    issues: status.enabled ? [`state_${status.state}`] : ["disabled"],
+    reason: status.enabled ? `state is ${status.state}` : "harness disabled"
+  };
+}
+function isAuthSatisfied(id, deps) {
+  if (process.env.SUPERONE_HARNESS_MARK_READY === "1") {
+    return { ok: true, reason: "SUPERONE_HARNESS_MARK_READY" };
+  }
+  const defRequiresAuth = id === "claude" || id === "codex";
+  if (!defRequiresAuth) {
+    return { ok: true, reason: "external harness does not require SuperOne provider auth" };
+  }
+  const fromProvider = deps.auth?.hasCredentialFor(id);
+  if (fromProvider?.ok) return fromProvider;
+  if (deps.resolver.isRunnableWithoutCatalog(id)) {
+    return {
+      ok: true,
+      reason: id === "claude" ? "claude Agent SDK / host credentials assumed" : "SUPERONE_CODEX_BINARY host credentials assumed"
+    };
+  }
+  return {
+    ok: false,
+    reason: "needs_auth: push provider credentials, complete host CLI login, or set SUPERONE_HARNESS_MARK_READY=1 for lab"
+  };
+}
+
+// ../../packages/runtime/src/harness/enable.ts
+init_environment();
+import { accessSync, constants, existsSync as existsSync28, realpathSync as realpathSync3, statSync as statSync10 } from "node:fs";
+import { isAbsolute as isAbsolute2, resolve as resolve6 } from "node:path";
+async function enableHarness(manager, input, deps) {
   const id = input.harnessId;
   if (!isNodeHarnessId(id)) throw new Error(`unknown harnessId: ${id}`);
   let status;
   if (id === "claude" || id === "codex") {
-    status = await enableManaged(manager, id, input.artifactPath);
+    status = await enableManaged(manager, id, input.artifactPath, deps, "enable", {
+      forcePin: input.forcePin === true
+    });
   } else if (id === "opencode") {
     status = enableOpencode(manager, {
       command: input.command,
@@ -60666,7 +62040,7 @@ async function enableHarness(manager, input, providers) {
     });
   }
   try {
-    probeHarnessReadiness(manager, id, providers ?? null);
+    probeHarnessReadiness(manager, id, { resolver: deps.resolver, auth: deps.auth });
   } catch {
   }
   return manager.get(id);
@@ -60675,9 +62049,10 @@ function disableHarness(manager, harnessId) {
   if (!isNodeHarnessId(harnessId)) throw new Error(`unknown harnessId: ${harnessId}`);
   return manager.disable(harnessId);
 }
-async function enableManaged(manager, id, artifact, mode = "enable") {
-  const nodeHome = resolveNodeHome(void 0);
+async function enableManaged(manager, id, artifact, deps, mode = "enable", opts) {
+  const nodeHome = deps.home.root;
   const def = getNodeHarnessDefinition(id);
+  const forcePin = opts?.forcePin === true;
   if (artifact) {
     const manifest = loadHarnessReleaseManifest(nodeHome);
     if (!manifest) {
@@ -60714,25 +62089,26 @@ async function enableManaged(manager, id, artifact, mode = "enable") {
       })
     });
   }
-  const auto = resolveManagedAutoRuntime(id);
-  if (auto) {
-    return manager.update(id, {
-      enabled: true,
-      state: def.requiresAuth ? "needs_auth" : "ready",
-      command: auto.command,
-      runtimeVersion: auto.runtimeVersion ?? null,
-      diagnosticCode: def.requiresAuth ? "needs_auth" : null,
-      diagnosticFields: def.requiresAuth ? { command: auto.command, runtimeVersion: auto.runtimeVersion } : null,
-      lastProbedAt: Date.now(),
-      configJson: JSON.stringify({
+  if (!forcePin) {
+    const auto = deps.resolver.autoRuntime(id);
+    if (auto) {
+      return manager.update(id, {
+        enabled: true,
+        state: def.requiresAuth ? "needs_auth" : "ready",
         command: auto.command,
-        source: auto.source
-      })
-    });
+        runtimeVersion: auto.runtimeVersion,
+        diagnosticCode: def.requiresAuth ? "needs_auth" : null,
+        diagnosticFields: def.requiresAuth ? { command: auto.command, runtimeVersion: auto.runtimeVersion } : null,
+        lastProbedAt: Date.now(),
+        configJson: JSON.stringify({
+          command: auto.command,
+          source: auto.source
+        })
+      });
+    }
   }
   try {
-    const { installManagedFromOfficialNpm: installManagedFromOfficialNpm2 } = await Promise.resolve().then(() => (init_managed_harness_official(), managed_harness_official_exports));
-    const official = await installManagedFromOfficialNpm2({ nodeHome, harnessId: id });
+    const official = await deps.installer.install(id, deps.home);
     return manager.update(id, {
       enabled: true,
       state: def.requiresAuth ? "needs_auth" : "ready",
@@ -60744,8 +62120,7 @@ async function enableManaged(manager, id, artifact, mode = "enable") {
       configJson: JSON.stringify({
         command: official.command,
         source: official.source,
-        packageSpec: official.packageSpec,
-        installPrefix: official.installPrefix,
+        ...official.detail ?? {},
         runtimeVersion: official.runtimeVersion
       })
     });
@@ -60757,24 +62132,8 @@ async function enableManaged(manager, id, artifact, mode = "enable") {
         `official install failed (${detail}); ${describeExpectedArtifact(id, manifest)} as offline fallback`
       );
     }
-    throw new Error(
-      `official install of ${id} failed: ${detail}. Ensure npm is on PATH and the host can reach registry.npmjs.org.`
-    );
-  }
-}
-function resolveManagedAutoRuntime(id) {
-  if (id === "claude") {
-    const sdk = resolveSdkClaudeBinary();
-    if (sdk && existsSync25(sdk)) {
-      return { command: sdk, source: "agent-sdk-optional" };
-    }
-    return null;
+    throw new Error(`official install of ${id} failed: ${detail}`);
   }
-  const fromEnv = resolveCodexBinaryPath({});
-  if (fromEnv) return { command: fromEnv, source: "env-or-catalog" };
-  const fromPath = resolveExternalCommand(void 0, ["codex"]);
-  if (fromPath) return { command: fromPath, source: "path" };
-  return null;
 }
 function enableOpencode(manager, opts) {
   if (opts.serverUrl) {
@@ -60840,7 +62199,7 @@ function requireRegularReadableFile(path) {
     throw new Error(`path must be absolute: ${path}`);
   }
   const abs = resolve6(path);
-  if (!existsSync25(abs) || !statSync7(abs).isFile()) {
+  if (!existsSync28(abs) || !statSync10(abs).isFile()) {
     throw new Error(`not a regular file: ${abs}`);
   }
   accessSync(abs, constants.R_OK);
@@ -60849,9 +62208,9 @@ function requireRegularReadableFile(path) {
 function resolveExternalCommand(explicit, searchNames) {
   if (explicit) {
     const abs = isAbsolute2(explicit) ? explicit : resolve6(explicit);
-    if (!existsSync25(abs)) return null;
+    if (!existsSync28(abs)) return null;
     try {
-      if (!statSync7(abs).isFile()) return null;
+      if (!statSync10(abs).isFile()) return null;
       accessSync(abs, constants.X_OK);
     } catch {
       return null;
@@ -60864,9 +62223,9 @@ function resolveExternalCommand(explicit, searchNames) {
     for (const dir of dirs) {
       if (!dir) continue;
       const candidate = resolve6(dir, name);
-      if (!existsSync25(candidate)) continue;
+      if (!existsSync28(candidate)) continue;
       try {
-        if (!statSync7(candidate).isFile()) continue;
+        if (!statSync10(candidate).isFile()) continue;
         accessSync(candidate, constants.X_OK);
         return realpathSync3(candidate);
       } catch {
@@ -60918,10 +62277,105 @@ function looksLikeSecretArg(value) {
   return false;
 }
 
+// src/session/harness-host.ts
+import { existsSync as existsSync29 } from "node:fs";
+init_src2();
+init_claude_turn_runner();
+init_codex_turn_runner();
+init_resolve_service();
+setHarnessReleaseVersionProvider(resolveCliReleaseVersion);
+function envBinaryExists(envName) {
+  const v2 = process.env[envName]?.trim();
+  return Boolean(v2 && existsSync29(v2));
+}
+var cliHarnessResolver = {
+  resolveBinary(id, harnesses) {
+    if (id === "claude") return resolveClaudeBinaryPath({ harnesses });
+    if (id === "codex") return resolveCodexBinaryPath({ harnesses });
+    const command = harnesses.get(id).command;
+    return command && existsSync29(command) ? command : null;
+  },
+  isRunnableWithoutCatalog(id) {
+    if (id === "claude") return isClaudeRuntimeRunnable();
+    if (id === "codex") return isCodexBinaryOverrideRunnable();
+    if (id === "acp-grok") return envBinaryExists("SUPERONE_ACP_BINARY");
+    return envBinaryExists("SUPERONE_OPENCODE_BINARY");
+  },
+  autoRuntime(id) {
+    if (id === "claude") {
+      const sdk = resolveSdkClaudeBinary();
+      if (sdk && existsSync29(sdk)) return { command: sdk, source: "agent-sdk-optional" };
+      return null;
+    }
+    const fromEnv = resolveCodexBinaryPath({});
+    if (fromEnv) return { command: fromEnv, source: "env-or-catalog" };
+    const fromPath = resolveExternalCommand(void 0, ["codex"]);
+    if (fromPath) return { command: fromPath, source: "path" };
+    return null;
+  }
+};
+function cliHarnessAuthProbe(providers) {
+  if (!providers) return null;
+  return {
+    hasCredentialFor(id) {
+      const consumer = consumerForHarness(id);
+      if (!consumer) return null;
+      const binding = providers.listBindings().find((b2) => b2.consumer === consumer);
+      if (binding?.credentialId) {
+        const cred = providers.listCredentials().find((c) => c.id === binding.credentialId);
+        if (cred) return { ok: true, reason: `provider binding ${consumer}` };
+      }
+      if (providers.listCredentials().length > 0) {
+        return { ok: true, reason: "node has provider credentials" };
+      }
+      return null;
+    }
+  };
+}
+function cliHarnessDeps(providers) {
+  const releaseVersion = resolveCliReleaseVersion();
+  return {
+    // Shared with desktop: ~/.superone/harness (or SUPERONE_HARNESS_HOME).
+    home: { root: resolveHarnessHomeRoot() },
+    releaseVersion,
+    resolver: cliHarnessResolver,
+    // Same R2 → npm tarball path as desktop (createManagedTarballInstaller).
+    installer: createManagedTarballInstaller({
+      releaseVersion,
+      log: {
+        info: (m2) => process.stderr.write(`${m2}
+`),
+        warn: (m2) => process.stderr.write(`${m2}
+`)
+      }
+    }),
+    auth: cliHarnessAuthProbe(providers)
+  };
+}
+
+// src/session/harness-runtime-ready.ts
+function assertSessionHarnessRuntimeReady2(sessionHarnessId, harnesses) {
+  return assertSessionHarnessRuntimeReady(sessionHarnessId, harnesses, cliHarnessResolver);
+}
+function probeHarnessReadiness2(harnesses, id, providers) {
+  return probeHarnessReadiness(harnesses, id, {
+    resolver: cliHarnessResolver,
+    auth: cliHarnessAuthProbe(providers)
+  });
+}
+
+// src/session/harness-enable.ts
+function enableHarness2(manager, input, providers) {
+  return enableHarness(manager, input, cliHarnessDeps(providers));
+}
+function enableManaged2(manager, id, artifact, mode = "enable") {
+  return enableManaged(manager, id, artifact, cliHarnessDeps(), mode);
+}
+
 // ../../packages/shared/src/git-clone.ts
 import { execFile as execFile2 } from "node:child_process";
-import { existsSync as existsSync26, mkdirSync as mkdirSync13 } from "node:fs";
-import { isAbsolute as isAbsolute3, join as join20, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync30, mkdirSync as mkdirSync16 } from "node:fs";
+import { isAbsolute as isAbsolute3, join as join23, resolve as resolve7 } from "node:path";
 
 // ../../packages/shared/src/git-remote.ts
 function repoNameFromGitUrl(url2) {
@@ -60986,17 +62440,17 @@ function resolveCloneDestination(input) {
   if (name.includes("/") || name.includes("\\") || name === "." || name === "..") {
     throw invalid(`invalid folder name: ${name}`);
   }
-  return { path: join20(resolve7(parent), name), name };
+  return { path: join23(resolve7(parent), name), name };
 }
 async function cloneRepository(input) {
   const destination = resolveCloneDestination(input);
-  if (existsSync26(destination.path)) {
+  if (existsSync30(destination.path)) {
     throw Object.assign(new Error(`destination already exists: ${destination.path}`), {
       code: "conflict"
     });
   }
   const parent = resolve7(input.parentPath.trim());
-  mkdirSync13(parent, { recursive: true });
+  mkdirSync16(parent, { recursive: true });
   await new Promise((resolvePromise, reject) => {
     execFile2(
       "git",
@@ -61034,9 +62488,9 @@ async function cloneRepository(input) {
 
 // src/rpc/handlers.ts
 init_resolve_service();
-import { existsSync as existsSync27, mkdirSync as mkdirSync14, readdirSync as readdirSync9, statSync as statSync8 } from "node:fs";
+import { existsSync as existsSync31, mkdirSync as mkdirSync17, readdirSync as readdirSync10, statSync as statSync11 } from "node:fs";
 import { join as pathJoin, resolve as pathResolve } from "node:path";
-import { arch, cpus, freemem, homedir as homedir6, hostname as hostname4, platform, totalmem, uptime } from "node:os";
+import { arch, cpus, freemem, homedir as homedir7, hostname as hostname4, platform, totalmem, uptime } from "node:os";
 
 // src/rpc/resource-handlers.ts
 init_environment();
@@ -61950,15 +63404,38 @@ function parseAgentConfig(raw) {
       ...typeof c.model === "string" ? { model: c.model } : {},
       ...typeof c.effort === "string" ? { effort: c.effort } : {},
       ...typeof c.permissionMode === "string" ? { permissionMode: c.permissionMode } : {},
-      ...typeof c.sandboxMode === "string" ? { sandboxMode: c.sandboxMode } : {}
+      ...typeof c.sandboxMode === "string" ? { sandboxMode: c.sandboxMode } : {},
+      ...c.apiProviderId === null || typeof c.apiProviderId === "string" ? { apiProviderId: c.apiProviderId } : {}
     };
   }
   if (c.type === "codex") {
+    const effort = typeof c.effort === "string" ? c.effort : typeof c.reasoningEffort === "string" ? c.reasoningEffort : void 0;
     return {
       type: "codex",
       ...typeof c.model === "string" ? { model: c.model } : {},
-      ...typeof c.reasoningEffort === "string" ? { reasoningEffort: c.reasoningEffort } : {},
-      ...typeof c.permissionPreset === "string" ? { permissionPreset: c.permissionPreset } : {}
+      ...effort ? { effort, reasoningEffort: effort } : {},
+      ...typeof c.permissionMode === "string" ? { permissionMode: c.permissionMode } : {},
+      ...typeof c.permissionPreset === "string" ? { permissionPreset: c.permissionPreset } : {},
+      ...c.apiProviderId === null || typeof c.apiProviderId === "string" ? { apiProviderId: c.apiProviderId } : {}
+    };
+  }
+  if (c.type === "acp") {
+    return {
+      type: "acp",
+      ...typeof c.acpAgentId === "string" ? { acpAgentId: c.acpAgentId } : {},
+      ...typeof c.model === "string" ? { model: c.model } : {},
+      ...typeof c.effort === "string" ? { effort: c.effort } : {},
+      ...typeof c.permissionMode === "string" ? { permissionMode: c.permissionMode } : {},
+      ...c.apiProviderId === null || typeof c.apiProviderId === "string" ? { apiProviderId: c.apiProviderId } : {}
+    };
+  }
+  if (c.type === "opencode") {
+    return {
+      type: "opencode",
+      ...typeof c.model === "string" ? { model: c.model } : {},
+      ...typeof c.effort === "string" ? { effort: c.effort } : {},
+      ...typeof c.permissionMode === "string" ? { permissionMode: c.permissionMode } : {},
+      ...c.apiProviderId === null || typeof c.apiProviderId === "string" ? { apiProviderId: c.apiProviderId } : {}
     };
   }
   return null;
@@ -61967,6 +63444,7 @@ function parseSchedule(raw) {
   if (!raw || typeof raw !== "object") return null;
   const s2 = raw;
   if (s2.type !== "one-time" && s2.type !== "recurring") return null;
+  const summary = typeof s2.summary === "string" ? s2.summary.trim() : "";
   return {
     type: s2.type,
     ...typeof s2.cron === "string" ? { cron: s2.cron } : {},
@@ -61974,7 +63452,8 @@ function parseSchedule(raw) {
     ...typeof s2.preset === "string" ? { preset: s2.preset } : {},
     ...typeof s2.timeOfDay === "string" ? { timeOfDay: s2.timeOfDay } : {},
     ...Array.isArray(s2.dayOfWeek) ? { dayOfWeek: s2.dayOfWeek.filter((x2) => typeof x2 === "number") } : {},
-    ...typeof s2.minuteOfHour === "number" ? { minuteOfHour: s2.minuteOfHour } : {}
+    ...typeof s2.minuteOfHour === "number" ? { minuteOfHour: s2.minuteOfHour } : {},
+    ...summary ? { summary } : {}
   };
 }
 function handleAutomationList(payload, ctx) {
@@ -62018,7 +63497,7 @@ function handleAutomationCreate(payload, ctx) {
   }
   const agentConfig = parseAgentConfig(p2.agentConfig);
   if (!agentConfig) {
-    return { error: { code: "invalid_argument", message: "agentConfig.type must be claude or codex" } };
+    return { error: { code: "invalid_argument", message: "agentConfig.type must be claude, codex, acp, or opencode" } };
   }
   const schedule = parseSchedule(p2.schedule);
   if (!schedule) {
@@ -62056,7 +63535,7 @@ function handleAutomationUpdate(payload, ctx) {
   if (p2.agentConfig !== void 0) {
     const agentConfig = parseAgentConfig(p2.agentConfig);
     if (!agentConfig) {
-      return { error: { code: "invalid_argument", message: "agentConfig.type must be claude or codex" } };
+      return { error: { code: "invalid_argument", message: "agentConfig.type must be claude, codex, acp, or opencode" } };
     }
     patch.agentConfig = agentConfig;
   }
@@ -63353,7 +64832,7 @@ function handleHarnessProbe(payload, ctx) {
     return { error: { code: "invalid_argument", message: `unknown harnessId: ${id}` } };
   }
   try {
-    const result = probeHarnessReadiness(ctx.harnesses, id, ctx.providers ?? null);
+    const result = probeHarnessReadiness2(ctx.harnesses, id, ctx.providers ?? null);
     return { result: { ...result, status: ctx.harnesses.get(id) } };
   } catch (err) {
     return mapThrown6(err);
@@ -63369,7 +64848,7 @@ async function handleHarnessEnable(payload, ctx) {
   }
   try {
     const args = Array.isArray(p2.args) ? p2.args.filter((a) => typeof a === "string") : void 0;
-    const status = await enableHarness(
+    const status = await enableHarness2(
       ctx.harnesses,
       {
         harnessId: id,
@@ -63659,9 +65138,9 @@ function handleProjectGet(payload, ctx) {
 function expandHostPath(path) {
   const trimmed = path.trim();
   if (!trimmed) return trimmed;
-  if (trimmed === "~") return homedir6();
+  if (trimmed === "~") return homedir7();
   if (trimmed.startsWith("~/") || trimmed.startsWith("~\\")) {
-    return pathResolve(pathJoin(homedir6(), trimmed.slice(2)));
+    return pathResolve(pathJoin(homedir7(), trimmed.slice(2)));
   }
   return pathResolve(trimmed);
 }
@@ -63675,8 +65154,8 @@ function handleProjectOpen(payload, ctx) {
   }
   const name = typeof p2.name === "string" ? p2.name : void 0;
   try {
-    if (p2.createIfMissing === true && !existsSync27(path)) {
-      mkdirSync14(path, { recursive: true });
+    if (p2.createIfMissing === true && !existsSync31(path)) {
+      mkdirSync17(path, { recursive: true });
     }
     return { result: ctx.projects.open(path, name) };
   } catch (err) {
@@ -63712,13 +65191,13 @@ function handleFsListDir(payload, ctx) {
   }
   try {
     const resolved = expandHostPath(raw);
-    if (!existsSync27(resolved)) {
+    if (!existsSync31(resolved)) {
       return { error: { code: "not_found", message: "path not found" } };
     }
-    if (!statSync8(resolved).isDirectory()) {
+    if (!statSync11(resolved).isDirectory()) {
       return { error: { code: "invalid_argument", message: "not a directory" } };
     }
-    const entries = readdirSync9(resolved, { withFileTypes: true }).filter((ent) => ent.isDirectory() && !ent.name.startsWith(".")).map((ent) => ({
+    const entries = readdirSync10(resolved, { withFileTypes: true }).filter((ent) => ent.isDirectory() && !ent.name.startsWith(".")).map((ent) => ({
       name: ent.name,
       path: pathJoin(resolved, ent.name),
       type: "directory"
@@ -64345,7 +65824,7 @@ function handleSessionCreate(payload, ctx) {
     };
   }
   if (!ctx.simulatedHarness) {
-    const runtime = assertSessionHarnessRuntimeReady(harnessId, ctx.harnesses);
+    const runtime = assertSessionHarnessRuntimeReady2(harnessId, ctx.harnesses);
     if (!runtime.ok) {
       return {
         error: {
@@ -65098,7 +66577,7 @@ async function startNodeServer(opts) {
       await handleHttp(req, res, opts);
     } catch (err) {
       const e = err;
-      const status = e.code === "unauthorized" ? 401 : e.code === "forbidden" ? 403 : e.code === "invalid_argument" ? 400 : 500;
+      const status = e.code === "unauthorized" || e.code === "revoked" ? 401 : e.code === "forbidden" ? 403 : e.code === "invalid_argument" ? 400 : 500;
       sendJson(res, status, {
         error: { code: e.code ?? "internal", message: e.message ?? "internal error" }
       });
@@ -65378,7 +66857,7 @@ async function handleHttp(req, res, opts) {
       sendJson(res, 200, result);
     } catch (err) {
       const e = err;
-      sendJson(res, e.code === "unauthorized" ? 401 : 500, {
+      sendJson(res, e.code === "unauthorized" || e.code === "revoked" ? 401 : 500, {
         error: { code: e.code ?? "internal", message: e.message ?? "pair failed" }
       });
     }
@@ -65408,7 +66887,7 @@ async function handleHttp(req, res, opts) {
       sendJson(res, 200, result);
     } catch (err) {
       const e = err;
-      sendJson(res, e.code === "unauthorized" ? 401 : 500, {
+      sendJson(res, e.code === "unauthorized" || e.code === "revoked" ? 401 : 500, {
         error: { code: e.code ?? "internal", message: e.message ?? "token refresh failed" }
       });
     }
@@ -65429,7 +66908,7 @@ async function handleHttp(req, res, opts) {
       sendJson(res, 200, ticket);
     } catch (err) {
       const e = err;
-      sendJson(res, e.code === "unauthorized" ? 401 : 500, {
+      sendJson(res, e.code === "unauthorized" || e.code === "revoked" ? 401 : 500, {
         error: { code: e.code ?? "internal", message: e.message ?? "ticket failed" }
       });
     }
@@ -65440,7 +66919,7 @@ async function handleHttp(req, res, opts) {
 
 // src/terminal/manager.ts
 import { createRequire as createRequire2 } from "node:module";
-import { existsSync as existsSync28 } from "node:fs";
+import { existsSync as existsSync32 } from "node:fs";
 var nodeRequire = createRequire2(import.meta.url);
 var { spawn: spawn5 } = nodeRequire("node-pty");
 var SNAPSHOT_SOFT_LIMIT = 64 * 1024;
@@ -65455,7 +66934,7 @@ var NodeTerminalManager = class {
   }
   byId = /* @__PURE__ */ new Map();
   create(opts) {
-    if (!existsSync28(opts.cwd)) {
+    if (!existsSync32(opts.cwd)) {
       throw Object.assign(new Error(`cwd does not exist: ${opts.cwd}`), { code: "invalid_argument" });
     }
     const terminalId = crypto.randomUUID();
@@ -65596,8 +67075,8 @@ var NodeTerminalManager = class {
 
 // src/workspace/project-registry.ts
 import { basename as basename2, resolve as resolve8 } from "node:path";
-import { existsSync as existsSync29, realpathSync as realpathSync4, statSync as statSync9 } from "node:fs";
-import { createHash as createHash5 } from "node:crypto";
+import { existsSync as existsSync33, realpathSync as realpathSync4, statSync as statSync12 } from "node:fs";
+import { createHash as createHash6 } from "node:crypto";
 import { execFileSync as execFileSync2 } from "node:child_process";
 var ProjectRegistry = class {
   constructor(db) {
@@ -65626,7 +67105,7 @@ var ProjectRegistry = class {
   }
   open(path, name) {
     let abs = resolve8(path);
-    if (!existsSync29(abs) || !statSync9(abs).isDirectory()) {
+    if (!existsSync33(abs) || !statSync12(abs).isDirectory()) {
       throw Object.assign(new Error(`project path is not a directory: ${abs}`), {
         code: "invalid_argument"
       });
@@ -65641,7 +67120,7 @@ var ProjectRegistry = class {
       this.db.prepare(`UPDATE projects SET last_active_at = ?, name = COALESCE(?, name) WHERE project_id = ?`).run(now, name ?? null, existing.projectId);
       return this.get(existing.projectId);
     }
-    const projectId = createHash5("sha256").update(abs).digest("hex").slice(0, 32);
+    const projectId = createHash6("sha256").update(abs).digest("hex").slice(0, 32);
     const repoIdentity = detectRepoIdentity(abs);
     this.db.prepare(
       `INSERT INTO projects (project_id, path, name, repo_identity, opened_at, last_active_at)
@@ -65670,7 +67149,7 @@ var ProjectRegistry = class {
   toSnapshot(r) {
     let missing = false;
     try {
-      missing = !statSync9(r.path).isDirectory();
+      missing = !statSync12(r.path).isDirectory();
     } catch {
       missing = true;
     }
@@ -65710,21 +67189,21 @@ function detectRepoIdentity(abs) {
 init_fs();
 import {
   closeSync,
-  existsSync as existsSync30,
+  existsSync as existsSync34,
   fstatSync,
-  mkdirSync as mkdirSync15,
+  mkdirSync as mkdirSync18,
   openSync,
   readSync,
-  readdirSync as readdirSync10,
-  readFileSync as readFileSync15,
-  renameSync as renameSync3,
-  rmSync as rmSync3,
-  statSync as statSync10,
+  readdirSync as readdirSync11,
+  readFileSync as readFileSync17,
+  renameSync as renameSync5,
+  rmSync as rmSync7,
+  statSync as statSync13,
   unlinkSync,
-  writeFileSync as writeFileSync10
+  writeFileSync as writeFileSync14
 } from "node:fs";
-import { dirname as dirname12, join as join21, relative as relative2 } from "node:path";
-import { createHash as createHash6 } from "node:crypto";
+import { dirname as dirname14, join as join24, relative as relative2 } from "node:path";
+import { createHash as createHash7 } from "node:crypto";
 function normalizeRel(path) {
   return path.replace(/\\/g, "/").replace(/\/+$/, "") || ".";
 }
@@ -65769,21 +67248,21 @@ var WorkspaceFsService = class {
     if (!resolved.ok) {
       throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
     }
-    if (!existsSync30(resolved.absolutePath)) {
+    if (!existsSync34(resolved.absolutePath)) {
       throw Object.assign(new Error("path not found"), { code: "not_found" });
     }
-    const st = statSync10(resolved.absolutePath);
+    const st = statSync13(resolved.absolutePath);
     if (!st.isDirectory()) {
       throw Object.assign(new Error("not a directory"), { code: "invalid_argument" });
     }
     this.projects.touch(projectId);
-    const ents = readdirSync10(resolved.absolutePath, { withFileTypes: true });
+    const ents = readdirSync11(resolved.absolutePath, { withFileTypes: true });
     return ents.map((ent) => {
-      const abs = join21(resolved.absolutePath, ent.name);
+      const abs = join24(resolved.absolutePath, ent.name);
       let size;
       let mtimeMs;
       try {
-        const s2 = statSync10(abs);
+        const s2 = statSync13(abs);
         size = s2.size;
         mtimeMs = s2.mtimeMs;
       } catch {
@@ -65804,10 +67283,10 @@ var WorkspaceFsService = class {
     if (!resolved.ok) {
       throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
     }
-    if (!existsSync30(resolved.absolutePath)) {
+    if (!existsSync34(resolved.absolutePath)) {
       throw Object.assign(new Error("file not found"), { code: "not_found" });
     }
-    const st = statSync10(resolved.absolutePath);
+    const st = statSync13(resolved.absolutePath);
     if (!st.isFile()) {
       throw Object.assign(new Error("not a file"), { code: "invalid_argument" });
     }
@@ -65830,7 +67309,7 @@ var WorkspaceFsService = class {
       const slice = Buffer.alloc(toRead);
       if (toRead > 0) readSync(fd, slice, 0, toRead, offset);
       const content = slice.toString("base64");
-      const hash2 = createHash6("sha256").update(slice).digest("hex");
+      const hash2 = createHash7("sha256").update(slice).digest("hex");
       this.projects.touch(projectId);
       return { content, hash: hash2, encoding: "base64" };
     } finally {
@@ -65843,8 +67322,8 @@ var WorkspaceFsService = class {
     if (!resolved.ok) {
       throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
     }
-    if (existsSync30(resolved.absolutePath) && expectedHash) {
-      const st = statSync10(resolved.absolutePath);
+    if (existsSync34(resolved.absolutePath) && expectedHash) {
+      const st = statSync13(resolved.absolutePath);
       if (st.size > MAX_READ_BYTES) {
         throw Object.assign(
           new Error(`optimistic-write target too large (${st.size} bytes; max ${MAX_READ_BYTES})`),
@@ -65856,27 +67335,27 @@ var WorkspaceFsService = class {
         throw Object.assign(new Error("content hash mismatch"), { code: "conflict" });
       }
     }
-    mkdirSync15(dirname12(resolved.absolutePath), { recursive: true });
+    mkdirSync18(dirname14(resolved.absolutePath), { recursive: true });
     const data = typeof content === "string" ? Buffer.from(content, "utf8") : Buffer.from(content);
     if (data.length > MAX_READ_BYTES) {
       throw Object.assign(new Error("write payload too large"), { code: "invalid_argument" });
     }
     let mode = 384;
-    if (existsSync30(resolved.absolutePath)) {
+    if (existsSync34(resolved.absolutePath)) {
       try {
-        mode = statSync10(resolved.absolutePath).mode & 511;
+        mode = statSync13(resolved.absolutePath).mode & 511;
       } catch {
       }
     }
     const tmp = `${resolved.absolutePath}.tmp-${crypto.randomUUID()}`;
     let renamed = false;
     try {
-      writeFileSync10(tmp, data, { mode });
+      writeFileSync14(tmp, data, { mode });
       const again = resolveProjectPath(root, relativePath);
       if (!again.ok || again.absolutePath !== resolved.absolutePath) {
         throw Object.assign(new Error("path changed during write"), { code: "failed_precondition" });
       }
-      renameSync3(tmp, resolved.absolutePath);
+      renameSync5(tmp, resolved.absolutePath);
       renamed = true;
     } finally {
       if (!renamed) {
@@ -65886,7 +67365,7 @@ var WorkspaceFsService = class {
         }
       }
     }
-    const hash2 = createHash6("sha256").update(data).digest("hex");
+    const hash2 = createHash7("sha256").update(data).digest("hex");
     this.projects.touch(projectId);
     return { hash: hash2 };
   }
@@ -65925,14 +67404,14 @@ var WorkspaceFsService = class {
       if (hits.length >= MAX_SEARCH_HITS) return;
       let ents;
       try {
-        ents = readdirSync10(dir, { withFileTypes: true });
+        ents = readdirSync11(dir, { withFileTypes: true });
       } catch {
         return;
       }
       for (const ent of ents) {
         if (hits.length >= MAX_SEARCH_HITS) return;
         if (ent.name === ".git" || ent.name === "node_modules") continue;
-        const abs = join21(dir, ent.name);
+        const abs = join24(dir, ent.name);
         const rel = relative2(root, abs).split("\\").join("/");
         const check2 = resolveProjectPath(root, rel);
         if (!check2.ok) continue;
@@ -65942,9 +67421,9 @@ var WorkspaceFsService = class {
         }
         if (!ent.isFile()) continue;
         try {
-          const st = statSync10(abs);
+          const st = statSync13(abs);
           if (st.size > MAX_SEARCH_FILE_BYTES) continue;
-          const text = readFileSync15(abs, "utf8");
+          const text = readFileSync17(abs, "utf8");
           const lines = text.split(/\r?\n/);
           for (let i = 0; i < lines.length; i++) {
             if (lines[i].includes(query)) {
@@ -66006,15 +67485,15 @@ var WorkspaceFsService = class {
     if (!resolved.ok) {
       throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
     }
-    if (existsSync30(resolved.absolutePath)) {
-      const st = statSync10(resolved.absolutePath);
+    if (existsSync34(resolved.absolutePath)) {
+      const st = statSync13(resolved.absolutePath);
       if (!st.isDirectory()) {
         throw Object.assign(new Error("path exists and is not a directory"), { code: "conflict" });
       }
       this.projects.touch(projectId);
       return { path: rel };
     }
-    mkdirSync15(resolved.absolutePath, { recursive: true });
+    mkdirSync18(resolved.absolutePath, { recursive: true });
     this.projects.touch(projectId);
     return { path: rel };
   }
@@ -66029,13 +67508,13 @@ var WorkspaceFsService = class {
     if (!resolved.ok) {
       throw Object.assign(new Error(resolved.reason), { code: "invalid_argument" });
     }
-    if (!existsSync30(resolved.absolutePath)) {
+    if (!existsSync34(resolved.absolutePath)) {
       throw Object.assign(new Error("path not found"), { code: "not_found" });
     }
     if (resolved.absolutePath === root) {
       throw Object.assign(new Error("cannot delete project root"), { code: "invalid_argument" });
     }
-    rmSync3(resolved.absolutePath, { recursive: true, force: false });
+    rmSync7(resolved.absolutePath, { recursive: true, force: false });
     this.projects.touch(projectId);
     return { path: rel };
   }
@@ -66053,20 +67532,20 @@ var WorkspaceFsService = class {
     if (!from.ok) {
       throw Object.assign(new Error(from.reason), { code: "invalid_argument" });
     }
-    if (!existsSync30(from.absolutePath)) {
+    if (!existsSync34(from.absolutePath)) {
       throw Object.assign(new Error("source not found"), { code: "not_found" });
     }
     const to = resolveProjectPath(root, toN);
     if (!to.ok) {
       throw Object.assign(new Error(to.reason), { code: "invalid_argument" });
     }
-    if (existsSync30(to.absolutePath)) {
+    if (existsSync34(to.absolutePath)) {
       throw Object.assign(new Error(`target already exists: ${baseNameRel(toN)}`), {
         code: "conflict"
       });
     }
-    mkdirSync15(dirname12(to.absolutePath), { recursive: true });
-    renameSync3(from.absolutePath, to.absolutePath);
+    mkdirSync18(dirname14(to.absolutePath), { recursive: true });
+    renameSync5(from.absolutePath, to.absolutePath);
     this.projects.touch(projectId);
     return { from: fromN, to: toN };
   }
@@ -66074,7 +67553,7 @@ var WorkspaceFsService = class {
 function hashFileBounded(absolutePath, size) {
   const fd = openSync(absolutePath, "r");
   try {
-    const hash2 = createHash6("sha256");
+    const hash2 = createHash7("sha256");
     const buf = Buffer.alloc(Math.min(64 * 1024, Math.max(1, size)));
     let offset = 0;
     while (offset < size) {
@@ -66090,9 +67569,9 @@ function hashFileBounded(absolutePath, size) {
 }
 
 // src/workspace/git-service.ts
-import { existsSync as existsSync31, mkdirSync as mkdirSync16, realpathSync as realpathSync5, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join23, resolve as resolve10 } from "node:path";
-import { tmpdir as tmpdir2 } from "node:os";
+import { existsSync as existsSync35, mkdirSync as mkdirSync19, realpathSync as realpathSync5, rmSync as rmSync8, writeFileSync as writeFileSync15 } from "node:fs";
+import { join as join26, resolve as resolve10 } from "node:path";
+import { tmpdir as tmpdir3 } from "node:os";
 import { randomUUID as randomUUID8 } from "node:crypto";
 
 // ../../packages/runtime/src/git/sanitize-ref.ts
@@ -66144,126 +67623,8 @@ function parseWorktreePorcelain(out) {
 }
 
 // ../../packages/runtime/src/git/run.ts
+init_spawn_env();
 import { execFile as execFile3, execFileSync as execFileSync3 } from "child_process";
-
-// ../../packages/runtime/src/spawn-env.ts
-var SPAWN_PATH_MAX = 1024;
-var SPAWN_NAME_MAX = 255;
-var MAX_ENV_BYTES = 256 * 1024;
-var ESSENTIAL_EXACT = /* @__PURE__ */ new Set([
-  "PATH",
-  "HOME",
-  "USER",
-  "LOGNAME",
-  "SHELL",
-  "TERM",
-  "LANG",
-  "LC_ALL",
-  "LC_CTYPE",
-  "DISPLAY",
-  "TMPDIR",
-  "TEMP",
-  "TMP",
-  "DYLD_FRAMEWORK_PATH",
-  "DYLD_LIBRARY_PATH",
-  "DYLD_FALLBACK_FRAMEWORK_PATH",
-  "DYLD_FALLBACK_LIBRARY_PATH"
-]);
-var ESSENTIAL_PREFIXES = [
-  "LC_",
-  "ELECTRON_",
-  "ANTHROPIC_",
-  "CODEX_",
-  "NPM_CONFIG_",
-  "NODE_",
-  "SSH_",
-  "GIT_"
-];
-function isEssentialEnv(key) {
-  if (ESSENTIAL_EXACT.has(key)) return true;
-  return ESSENTIAL_PREFIXES.some((p2) => key.startsWith(p2));
-}
-function sanitizePathEnv(pathEnv) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  let dropped = 0;
-  let deduped = 0;
-  let droppedByPathMax = 0;
-  let droppedByNameMax = 0;
-  for (const entry of pathEnv.split(":")) {
-    if (!entry) continue;
-    if (seen.has(entry)) {
-      deduped++;
-      continue;
-    }
-    seen.add(entry);
-    if (entry.length > SPAWN_PATH_MAX) {
-      dropped++;
-      droppedByPathMax++;
-      continue;
-    }
-    if (entry.split("/").some((comp) => Buffer.byteLength(comp, "utf8") > SPAWN_NAME_MAX)) {
-      dropped++;
-      droppedByNameMax++;
-      continue;
-    }
-    out.push(entry);
-  }
-  return { value: out.join(":"), dropped, deduped, droppedByPathMax, droppedByNameMax };
-}
-function serializedSize(env) {
-  let n = 0;
-  for (const key in env) {
-    n += Buffer.byteLength(key) + Buffer.byteLength(env[key]) + 2;
-  }
-  return n;
-}
-function sanitizeEnv(base = process.env, extra) {
-  const merged = {};
-  for (const key in base) {
-    const v2 = base[key];
-    if (v2 !== void 0) merged[key] = v2;
-  }
-  if (extra) {
-    for (const key in extra) {
-      const v2 = extra[key];
-      if (v2 !== void 0) merged[key] = v2;
-    }
-  }
-  if (process.platform !== "win32" && typeof merged.PATH === "string") {
-    const res = sanitizePathEnv(merged.PATH);
-    merged.PATH = res.value;
-    if (res.dropped > 0) {
-      const parts = [];
-      if (res.droppedByPathMax > 0)
-        parts.push(`${res.droppedByPathMax} \u6574\u6BB5 > PATH_MAX(${SPAWN_PATH_MAX}B)`);
-      if (res.droppedByNameMax > 0)
-        parts.push(`${res.droppedByNameMax} \u6BB5\u542B > NAME_MAX(${SPAWN_NAME_MAX}B) \u7684\u76EE\u5F55\u540D`);
-      console.warn(`[spawn-env] \u4E3A\u89C4\u907F spawn ENAMETOOLONG \u5DF2\u4E22\u5F03 ${res.dropped} \u4E2A\u8D85\u957F PATH \u5206\u6BB5\uFF08${parts.join("\uFF1B")}\uFF09`);
-    }
-  }
-  let size = serializedSize(merged);
-  if (size > MAX_ENV_BYTES) {
-    const entries = Object.entries(merged).sort((a, b2) => b2[1].length - a[1].length);
-    for (const [key, value] of entries) {
-      if (size <= MAX_ENV_BYTES) break;
-      if (isEssentialEnv(key)) continue;
-      size -= Buffer.byteLength(key) + Buffer.byteLength(value) + 2;
-      delete merged[key];
-    }
-    if (size > MAX_ENV_BYTES) {
-      console.warn(`[spawn-env] env still ${size} bytes after trimming non-essential vars (limit ${MAX_ENV_BYTES})`);
-    } else {
-      console.warn(`[spawn-env] trimmed env to ${size} bytes to avoid spawn E2BIG`);
-    }
-  }
-  return merged;
-}
-function buildSafeEnv(extra) {
-  return sanitizeEnv(process.env, extra);
-}
-
-// ../../packages/runtime/src/git/run.ts
 var GIT_MAX_BUFFER = 64 * 1024 * 1024;
 var NO_OPTIONAL_LOCKS = "--no-optional-locks";
 function gitRunSync(folderPath, args, env) {
@@ -66286,19 +67647,19 @@ function gitRunSync(folderPath, args, env) {
 }
 
 // ../../packages/runtime/src/git/worktree-plan.ts
-import { basename as basename3, dirname as dirname13, join as join22, resolve as resolve9, sep as sep4 } from "node:path";
-import { homedir as homedir7 } from "node:os";
+import { basename as basename3, dirname as dirname15, join as join25, resolve as resolve9, sep as sep4 } from "node:path";
+import { homedir as homedir8 } from "node:os";
 function resolveMainDirFromCommonDir(folderPath, gitCommonDir) {
   const repoRoot = resolve9(folderPath, gitCommonDir.trim());
-  return repoRoot.endsWith(`${sep4}.git`) || repoRoot.endsWith("/.git") ? dirname13(repoRoot) : repoRoot;
+  return repoRoot.endsWith(`${sep4}.git`) || repoRoot.endsWith("/.git") ? dirname15(repoRoot) : repoRoot;
 }
 function planNewWorktreePaths(input) {
-  const home = input.homeDir ?? homedir7();
+  const home = input.homeDir ?? homedir8();
   const repoName = basename3(input.mainDir);
   const epoch = Math.floor((input.nowMs ?? Date.now()) / 1e3).toString(36);
   const short = input.shortHash.slice(0, 7);
-  const wtDir = join22(home, ".worktrees", repoName);
-  const wtPath = join22(wtDir, `${epoch}-${short}`);
+  const wtDir = join25(home, ".worktrees", repoName);
+  const wtPath = join25(wtDir, `${epoch}-${short}`);
   return { wtDir, wtPath };
 }
 function worktreeAddArgs(mode, wtPath, baseRef, branchName) {
@@ -66357,8 +67718,8 @@ function resolveMainWorktreeDir(folderPath) {
 }
 function samePath(a, b2) {
   try {
-    const ra = existsSync31(a) ? realpathSync5(a) : resolve10(a);
-    const rb = existsSync31(b2) ? realpathSync5(b2) : resolve10(b2);
+    const ra = existsSync35(a) ? realpathSync5(a) : resolve10(a);
+    const rb = existsSync35(b2) ? realpathSync5(b2) : resolve10(b2);
     return ra === rb;
   } catch {
     return resolve10(a) === resolve10(b2);
@@ -66390,7 +67751,7 @@ var WorkspaceGitService = class {
    * --ignored walks the whole tree of ignored paths and dominates remote latency.
    */
   statusForCwd(cwd) {
-    if (!existsSync31(join23(cwd, ".git")) && !isGitWorktree(cwd)) {
+    if (!existsSync35(join26(cwd, ".git")) && !isGitWorktree(cwd)) {
       return { isRepo: false, branch: null, dirty: false, ahead: 0, behind: 0, porcelain: "" };
     }
     try {
@@ -66499,15 +67860,15 @@ var WorkspaceGitService = class {
     }
     const abs = resolve10(worktreePath);
     const main2 = resolve10(this.root(projectId));
-    if (samePath(abs, main2)) return existsSync31(abs) ? realpathSync5(abs) : abs;
+    if (samePath(abs, main2)) return existsSync35(abs) ? realpathSync5(abs) : abs;
     const listed = this.worktrees(projectId);
     for (const wt of listed) {
       if (samePath(abs, wt.path)) {
-        return existsSync31(abs) ? realpathSync5(abs) : resolve10(wt.path);
+        return existsSync35(abs) ? realpathSync5(abs) : resolve10(wt.path);
       }
     }
     try {
-      if (existsSync31(abs) && isGitWorktree(abs)) {
+      if (existsSync35(abs) && isGitWorktree(abs)) {
         const commonA = resolve10(abs, git(abs, ["rev-parse", "--git-common-dir"]).trim());
         const commonB = resolve10(main2, git(main2, ["rev-parse", "--git-common-dir"]).trim());
         if (samePath(commonA, commonB)) {
@@ -66549,7 +67910,7 @@ var WorkspaceGitService = class {
       mainDir,
       shortHash: commitHash.slice(0, 7)
     });
-    if (!existsSync31(wtDir)) mkdirSync16(wtDir, { recursive: true });
+    if (!existsSync35(wtDir)) mkdirSync19(wtDir, { recursive: true });
     try {
       const addArgs = worktreeAddArgs(mode, wtPath, baseBranch, safeBranchName);
       git(folderPath, ["worktree", ...addArgs]);
@@ -66645,11 +68006,11 @@ var WorkspaceGitService = class {
       const mainStatus = git(diff.mainDir, ["status", "--porcelain"]).trim();
       if (mainStatus) return { ok: false, reason: "main-dirty" };
       const patch = git(diff.worktreePath, ["diff", "--binary", diff.base, diff.tree]);
-      const patchFile = join23(tmpdir2(), `s1-handoff-${randomUUID8()}.patch`);
-      writeFileSync11(patchFile, `${patch}
+      const patchFile = join26(tmpdir3(), `s1-handoff-${randomUUID8()}.patch`);
+      writeFileSync15(patchFile, `${patch}
 `);
       if (git(diff.mainDir, ["status", "--porcelain"]).trim()) {
-        rmSync4(patchFile, { force: true });
+        rmSync8(patchFile, { force: true });
         return { ok: false, reason: "main-dirty" };
       }
       try {
@@ -66662,7 +68023,7 @@ var WorkspaceGitService = class {
         }
         return { ok: false, reason: "conflict", error: gitErrorMessage(err) };
       } finally {
-        rmSync4(patchFile, { force: true });
+        rmSync8(patchFile, { force: true });
       }
       try {
         git(diff.mainDir, ["reset", "--quiet"]);
@@ -66707,14 +68068,14 @@ var WorkspaceGitService = class {
     };
   }
   writeWorkingTree(worktreePath) {
-    const tmpIndex = join23(tmpdir2(), `s1-handoff-${randomUUID8()}.index`);
+    const tmpIndex = join26(tmpdir3(), `s1-handoff-${randomUUID8()}.index`);
     const env = { GIT_INDEX_FILE: tmpIndex };
     try {
       git(worktreePath, ["read-tree", "HEAD"], env);
       git(worktreePath, ["add", "-A"], env);
       return git(worktreePath, ["write-tree"], env).trim();
     } finally {
-      rmSync4(tmpIndex, { force: true });
+      rmSync8(tmpIndex, { force: true });
     }
   }
   repoIdentity(projectId) {
@@ -66899,245 +68260,17 @@ var SessionRuntime2 = class extends SessionRuntime {
 init_harness_runners();
 init_codex_turn_runner();
 
-// src/session/harness-manager.ts
-init_environment();
-var HarnessManager = class {
-  constructor(db) {
-    this.db = db;
-    this.ensureRows();
-    this.clearSimulatedContamination();
-  }
-  /**
-   * When true, list/get/ready behave as if every harness is enabled+ready.
-   * Never persisted — only for contract/CI simulated runners.
-   */
-  simulatedOverlay = false;
-  /** Ensure one row per first-party definition. */
-  ensureRows() {
-    const now = Date.now();
-    const insert = this.db.prepare(
-      `INSERT OR IGNORE INTO harness_installations
-        (harness_id, enabled, state, runtime_version, command, config_json, secret_ref,
-         diagnostic_code, diagnostic_message, last_probed_at, updated_at)
-       VALUES (?, 0, 'disabled', NULL, NULL, NULL, NULL, NULL, NULL, NULL, ?)`
-    );
-    const tx = this.db.transaction(() => {
-      for (const def of NODE_HARNESS_DEFINITIONS) {
-        insert.run(def.id, now);
-      }
-    });
-    tx();
-  }
-  /**
-   * Reset durable rows that older builds may have marked as simulated-ready.
-   * Safe to run on every open: only touches synthetic simulated provenance.
-   */
-  clearSimulatedContamination() {
-    const now = Date.now();
-    this.db.prepare(
-      `UPDATE harness_installations SET
-           enabled = 0,
-           state = 'disabled',
-           runtime_version = NULL,
-           command = NULL,
-           diagnostic_code = NULL,
-           diagnostic_message = NULL,
-           last_probed_at = NULL,
-           updated_at = ?
-         WHERE runtime_version = 'simulated'
-            OR diagnostic_code = 'simulated'`
-    ).run(now);
-  }
-  /**
-   * Enable in-memory simulated readiness for all first-party harnesses.
-   * Does not write the database. Production starts must never call this.
-   */
-  enableSimulatedOverlay() {
-    this.simulatedOverlay = true;
-  }
-  /** @deprecated use enableSimulatedOverlay — kept as alias for call-site clarity. */
-  markAllSimulatedReady() {
-    this.enableSimulatedOverlay();
-  }
-  list() {
-    return NODE_HARNESS_DEFINITIONS.map((d) => this.get(d.id));
-  }
-  get(id) {
-    const status = this.readPersisted(id);
-    if (!this.simulatedOverlay) return status;
-    return {
-      ...status,
-      enabled: true,
-      state: "ready",
-      runtimeVersion: status.runtimeVersion ?? "simulated",
-      diagnostic: buildHarnessDiagnostic("simulated")
-    };
-  }
-  readPersisted(id) {
-    const row = this.db.prepare(
-      `SELECT harness_id, enabled, state, runtime_version, command,
-                diagnostic_code, diagnostic_message
-         FROM harness_installations WHERE harness_id = ?`
-    ).get(id);
-    if (!row) {
-      return defaultHarnessInstallationStatus(id);
-    }
-    const def = NODE_HARNESS_DEFINITIONS.find((d) => d.id === id);
-    const status = {
-      id,
-      runtimeSource: def.runtimeSource,
-      enabled: row.enabled === 1,
-      state: parseState(row.state),
-      requiresAuth: def.requiresAuth
-    };
-    if (row.runtime_version && row.runtime_version !== "simulated") {
-      status.runtimeVersion = row.runtime_version;
-    }
-    const command = sanitizeHarnessCommand(row.command);
-    if (command) status.command = command;
-    const code = sanitizeHarnessDiagnosticCode(row.diagnostic_code);
-    if (code && code !== "simulated") {
-      status.diagnostic = buildHarnessDiagnostic(code, {
-        runtimeVersion: status.runtimeVersion,
-        command: status.command
-      });
-    }
-    return status;
-  }
-  /**
-   * Session wire harness ids that are currently runnable (enabled + ready).
-   * Used by environment.descriptor capabilities.harnessIds.
-   */
-  readySessionHarnessIds() {
-    return readySessionHarnessIds(this.list());
-  }
-  /** Whether a session.create harnessId is allowed on this node. */
-  isSessionHarnessRunnable(sessionHarnessId) {
-    const wire = normalizeSessionHarnessId(sessionHarnessId);
-    if (!wire) return false;
-    const catalogId = wire === "acp" ? "acp-grok" : wire;
-    if (!isNodeHarnessId(catalogId)) return false;
-    return isHarnessRunnable(this.get(catalogId));
-  }
-  update(id, patch) {
-    if (!isNodeHarnessId(id)) {
-      throw new Error(`unknown harness: ${id}`);
-    }
-    const apply = this.db.transaction(() => {
-      const current = this.readPersisted(id);
-      const extra = this.db.prepare(
-        `SELECT config_json, secret_ref, last_probed_at, diagnostic_code
-           FROM harness_installations WHERE harness_id = ?`
-      ).get(id);
-      const enabled = patch.enabled ?? current.enabled;
-      const state = patch.state ?? current.state;
-      const runtimeVersion = patch.runtimeVersion === null ? null : patch.runtimeVersion ?? current.runtimeVersion ?? null;
-      let command;
-      if (patch.command === null) {
-        command = null;
-      } else if (patch.command !== void 0) {
-        command = sanitizeHarnessCommand(patch.command) ?? null;
-      } else {
-        command = current.command ?? null;
-      }
-      let diagnosticCode;
-      if (patch.diagnosticCode === null) {
-        diagnosticCode = null;
-      } else if (patch.diagnosticCode !== void 0) {
-        diagnosticCode = sanitizeHarnessDiagnosticCode(patch.diagnosticCode);
-      } else {
-        diagnosticCode = sanitizeHarnessDiagnosticCode(extra?.diagnostic_code);
-      }
-      let diagnosticMessage = null;
-      if (diagnosticCode) {
-        const fields = {
-          ...patch.diagnosticFields ?? {},
-          runtimeVersion: runtimeVersion ?? void 0,
-          command: command ?? void 0
-        };
-        diagnosticMessage = buildHarnessDiagnostic(
-          diagnosticCode,
-          fields
-        ).message;
-      }
-      const configJson = patch.configJson === null ? null : patch.configJson ?? extra?.config_json ?? null;
-      const secretRef = patch.secretRef === null ? null : patch.secretRef ?? extra?.secret_ref ?? null;
-      const lastProbedAt = patch.lastProbedAt === null ? null : patch.lastProbedAt ?? extra?.last_probed_at ?? null;
-      const now = Date.now();
-      this.db.prepare(
-        `UPDATE harness_installations SET
-             enabled = ?, state = ?, runtime_version = ?, command = ?,
-             config_json = ?, secret_ref = ?,
-             diagnostic_code = ?, diagnostic_message = ?,
-             last_probed_at = ?, updated_at = ?
-           WHERE harness_id = ?`
-      ).run(
-        enabled ? 1 : 0,
-        state,
-        runtimeVersion,
-        command,
-        configJson,
-        secretRef,
-        diagnosticCode,
-        diagnosticMessage,
-        lastProbedAt,
-        now,
-        id
-      );
-    });
-    apply();
-    return this.get(id);
-  }
-  /**
-   * Disable a harness. Does not delete managed artifacts or external binaries.
-   * Default drain policy is enforced by higher-level CLI/RPC in a later slice.
-   */
-  disable(id) {
-    return this.update(id, {
-      enabled: false,
-      state: "disabled",
-      diagnosticCode: null,
-      diagnosticFields: null
-    });
-  }
-  /**
-   * Internal non-secret row fields for CLI show/doctor.
-   * Does not expose secret_ref or stored diagnostic message text.
-   */
-  readRawRow(id) {
-    const row = this.db.prepare(
-      `SELECT config_json, last_probed_at
-         FROM harness_installations WHERE harness_id = ?`
-    ).get(id);
-    return row ?? null;
-  }
-};
-function parseState(raw) {
-  switch (raw) {
-    case "disabled":
-    case "missing":
-    case "installing":
-    case "needs_auth":
-    case "ready":
-    case "incompatible":
-    case "error":
-      return raw;
-    default:
-      return "error";
-  }
-}
-
 // src/session/collaboration.ts
 init_agent_types();
 init_environment();
 init_resolve_service();
-import { createHash as createHash7, randomBytes as randomBytes4, randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync32, statSync as statSync11 } from "node:fs";
+import { createHash as createHash8, randomBytes as randomBytes5, randomUUID as randomUUID10 } from "node:crypto";
+import { existsSync as existsSync36, statSync as statSync14 } from "node:fs";
 import { resolve as pathResolve2 } from "node:path";
 var MAX_MESSAGES_PER_RETRIEVE = 100;
 var EMPTY_MAILBOX_HINT = "No peer has replied yet. Do not retrieve again, do not sleep, do not wait in place \u2014 end your turn or do unrelated work. A task notification will start a new turn for you as soon as a message arrives.";
 function hashCredential(credential) {
-  return createHash7("sha256").update(credential).digest("hex");
+  return createHash8("sha256").update(credential).digest("hex");
 }
 function parseConfig(raw) {
   try {
@@ -67275,7 +68408,10 @@ var CollaborationService = class {
     if (!parent) {
       throw Object.assign(new Error("Parent session is not available"), { code: "not_found" });
     }
-    const nested = this.deps.db.prepare(`SELECT 1 FROM session_collaboration_grants WHERE child_session_id = ? LIMIT 1`).get(input.parentSessionId);
+    const nested = this.deps.db.prepare(
+      `SELECT 1 FROM session_collaboration_grants
+         WHERE child_session_id = ? AND COALESCE(kind, 'spawn') = 'spawn' LIMIT 1`
+    ).get(input.parentSessionId);
     if (nested) {
       throw Object.assign(
         new Error(
@@ -67298,15 +68434,74 @@ var CollaborationService = class {
     const profileList = this.listProfiles();
     const profiles = new Map(profileList.map((p2) => [p2.id, p2]));
     const normalized = launches.map((launch2) => {
-      const profile = profiles.get(launch2.agentId);
+      const mode = launch2.mode === "link" ? "link" : "spawn";
+      const launchId = launch2.launchId?.trim() || randomUUID10();
+      if (mode === "link") {
+        const peerSessionId = launch2.sessionId?.trim();
+        if (!peerSessionId) {
+          throw Object.assign(
+            new Error("Link launches require sessionId of an existing SuperOne session"),
+            { code: "invalid_argument" }
+          );
+        }
+        if (peerSessionId === input.parentSessionId) {
+          throw Object.assign(new Error("Cannot link a session to itself"), {
+            code: "invalid_argument"
+          });
+        }
+        const peer = this.deps.sessions.get(peerSessionId);
+        if (!peer) {
+          throw Object.assign(new Error(`Unknown sessionId for link: ${peerSessionId}`), {
+            code: "not_found"
+          });
+        }
+        const summary2 = launch2.summary?.trim() || resolveLaunchSummary(launch2.task ?? "", launch2.summary);
+        if (!summary2) {
+          throw Object.assign(new Error("Every launch must include a non-empty summary"), {
+            code: "invalid_argument"
+          });
+        }
+        const task2 = (launch2.task ?? "").trim();
+        if (task2.length > SESSION_AGENT_TASK_MAX) {
+          throw Object.assign(
+            new Error(`A launch task may contain at most ${SESSION_AGENT_TASK_MAX.toLocaleString()} characters`),
+            { code: "invalid_argument" }
+          );
+        }
+        const peerTitle = peer.title?.trim() || peerSessionId.slice(0, 8);
+        const name2 = launch2.name?.trim() || peerTitle;
+        const role2 = launch2.role?.trim() || "Peer";
+        const projectPath = this.deps.projects.get(peer.projectId)?.path;
+        return {
+          launchId,
+          mode: "link",
+          agentId: "",
+          sessionId: peerSessionId,
+          peerTitle,
+          peerProjectPath: projectPath,
+          summary: summary2,
+          task: task2,
+          name: name2,
+          role: role2,
+          config: { name: name2, role: role2, summary: summary2 }
+        };
+      }
+      const agentId = launch2.agentId?.trim();
+      if (!agentId) {
+        throw Object.assign(
+          new Error("Spawn launches require agentId from session_collab_list_agents"),
+          { code: "invalid_argument" }
+        );
+      }
+      const profile = profiles.get(agentId);
       if (!profile) {
-        throw Object.assign(new Error(`Unknown agent profile: ${launch2.agentId}`), {
+        throw Object.assign(new Error(`Unknown agent profile: ${agentId}`), {
           code: "invalid_argument"
         });
       }
       const task = launch2.task?.trim();
       if (!task) {
-        throw Object.assign(new Error("Every launch must include a non-empty task"), {
+        throw Object.assign(new Error("Every spawn launch must include a non-empty task"), {
           code: "invalid_argument"
         });
       }
@@ -67324,17 +68519,16 @@ var CollaborationService = class {
       }
       const name = launch2.name?.trim();
       if (!name) {
-        throw Object.assign(new Error("Every launch must include a non-empty name"), {
+        throw Object.assign(new Error("Every spawn launch must include a non-empty name"), {
           code: "invalid_argument"
         });
       }
       const role = launch2.role?.trim();
       if (!role) {
-        throw Object.assign(new Error("Every launch must include a non-empty role"), {
+        throw Object.assign(new Error("Every spawn launch must include a non-empty role"), {
           code: "invalid_argument"
         });
       }
-      const launchId = launch2.launchId?.trim() || randomUUID10();
       const raw = launch2.config && typeof launch2.config === "object" ? launch2.config : {};
       const safeFromLaunch = {};
       if (typeof raw.model === "string" && raw.model.trim()) safeFromLaunch.model = raw.model.trim();
@@ -67350,7 +68544,8 @@ var CollaborationService = class {
       if (typeof raw.cwd === "string" && raw.cwd.trim()) safeFromLaunch.cwd = raw.cwd.trim();
       return {
         launchId,
-        agentId: launch2.agentId,
+        mode: "spawn",
+        agentId,
         summary,
         task,
         name,
@@ -67388,14 +68583,111 @@ var CollaborationService = class {
       }
       confirmed = this.mergeConfirmedLaunches(normalized, outcome.content);
     }
-    const insert = this.deps.db.prepare(`
+    const insertSpawn = this.deps.db.prepare(`
       INSERT INTO session_collaboration_grants
-        (credential_hash, credential_secret, credential_hint, parent_session_id, agent_id, task, config_json, created_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+        (credential_hash, credential_secret, credential_hint, parent_session_id, agent_id, task, config_json, created_at, kind)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'spawn')
+    `);
+    const insertLink = this.deps.db.prepare(`
+      INSERT INTO session_collaboration_grants
+        (credential_hash, credential_secret, credential_hint, parent_session_id, child_session_id, agent_id, task, config_json, created_at, kind)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'link')
     `);
     const results = this.deps.db.transaction(
       () => confirmed.map((launch2) => {
-        const credential = `s1sc_${randomBytes4(32).toString("base64url")}`;
+        const mode = launch2.mode === "link" ? "link" : "spawn";
+        if (mode === "link") {
+          const peerSessionId = launch2.sessionId;
+          const existing = this.deps.db.prepare(
+            `SELECT credential_hash, credential_secret, agent_id, task, config_json
+               FROM session_collaboration_grants
+               WHERE parent_session_id = ? AND child_session_id = ? AND kind = 'link'`
+          ).get(input.parentSessionId, peerSessionId);
+          if (existing?.credential_secret) {
+            const credential3 = this.deps.secrets.decrypt(existing.credential_secret);
+            if (credential3) {
+              return {
+                launchId: launch2.launchId,
+                mode: "link",
+                agentId: existing.agent_id,
+                sessionId: peerSessionId,
+                peerSessionId,
+                summary: launch2.summary,
+                task: existing.task,
+                name: launch2.name,
+                role: launch2.role,
+                title: collaborationSessionTitle(launch2.name, launch2.role),
+                config: parseConfig(existing.config_json),
+                credential: credential3,
+                grantId: existing.credential_hash,
+                reused: true
+              };
+            }
+          }
+          const credential2 = `s1sc_${randomBytes5(32).toString("base64url")}`;
+          const credentialHash2 = hashCredential(credential2);
+          const task = launch2.task.trim();
+          const config3 = {
+            name: launch2.name,
+            role: launch2.role,
+            summary: launch2.summary,
+            peerSessionId,
+            peerTitle: launch2.peerTitle,
+            peerProjectPath: launch2.peerProjectPath
+          };
+          try {
+            insertLink.run(
+              credentialHash2,
+              this.deps.secrets.encrypt(credential2),
+              credential2.slice(-8),
+              input.parentSessionId,
+              peerSessionId,
+              "",
+              task,
+              JSON.stringify(config3),
+              (/* @__PURE__ */ new Date()).toISOString()
+            );
+          } catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (/UNIQUE|unique/i.test(message)) {
+              throw Object.assign(
+                new Error(
+                  `Session ${peerSessionId} is already bound as a collaboration endpoint (spawn child or link peer). A session cannot be the non-initiator endpoint of two grants.`
+                ),
+                { code: "failed_precondition" }
+              );
+            }
+            throw err;
+          }
+          this.deps.events.append({
+            aggregateType: "session",
+            aggregateId: input.parentSessionId,
+            eventType: "collaboration.grant_created",
+            payload: {
+              grantId: credentialHash2,
+              mode: "link",
+              peerSessionId,
+              launchId: launch2.launchId
+            }
+          });
+          return {
+            launchId: launch2.launchId,
+            mode: "link",
+            agentId: "",
+            sessionId: peerSessionId,
+            peerSessionId,
+            summary: launch2.summary,
+            task,
+            name: launch2.name,
+            role: launch2.role,
+            title: collaborationSessionTitle(launch2.name, launch2.role),
+            config: config3,
+            credential: credential2,
+            grantId: credentialHash2,
+            reused: false
+          };
+        }
+        const credential = `s1sc_${randomBytes5(32).toString("base64url")}`;
         const credentialHash = hashCredential(credential);
         const config2 = {
           ...launch2.config,
@@ -67403,7 +68695,7 @@ var CollaborationService = class {
           role: launch2.role,
           summary: launch2.summary
         };
-        insert.run(
+        insertSpawn.run(
           credentialHash,
           this.deps.secrets.encrypt(credential),
           credential.slice(-8),
@@ -67419,12 +68711,14 @@ var CollaborationService = class {
           eventType: "collaboration.grant_created",
           payload: {
             grantId: credentialHash,
+            mode: "spawn",
             agentId: launch2.agentId,
             launchId: launch2.launchId
           }
         });
         return {
           launchId: launch2.launchId,
+          mode: "spawn",
           agentId: launch2.agentId,
           summary: launch2.summary,
           task: launch2.task,
@@ -67433,7 +68727,8 @@ var CollaborationService = class {
           title: collaborationSessionTitle(launch2.name, launch2.role),
           config: config2,
           credential,
-          grantId: credentialHash
+          grantId: credentialHash,
+          reused: false
         };
       })
     )();
@@ -67461,9 +68756,54 @@ var CollaborationService = class {
     if (!credential) {
       throw Object.assign(new Error("Invalid collaboration credential"), { code: "not_found" });
     }
-    if (input.formAnswers && typeof input.formAnswers === "object") {
+    if (grant.kind !== "link" && input.formAnswers && typeof input.formAnswers === "object") {
       grant = this.applyFormAnswers(grant, input.formAnswers);
     }
+    if (grant.kind === "link") {
+      if (!grant.child_session_id) {
+        throw Object.assign(new Error("Link grant is missing peer session id"), {
+          code: "failed_precondition"
+        });
+      }
+      const peerSessionId = grant.child_session_id;
+      if (!this.deps.sessions.get(peerSessionId)) {
+        throw Object.assign(new Error(`Peer session no longer exists: ${peerSessionId}`), {
+          code: "not_found"
+        });
+      }
+      const alreadyStarted = Boolean(grant.started_at);
+      if (!alreadyStarted) {
+        this.deps.db.prepare(
+          `UPDATE session_collaboration_grants SET started_at = ?
+             WHERE credential_hash = ? AND started_at IS NULL`
+        ).run((/* @__PURE__ */ new Date()).toISOString(), grant.credential_hash);
+      }
+      const opening = grant.task?.trim() ?? "";
+      const initiator = this.deps.sessions.get(grant.parent_session_id);
+      const initiatorTitle = initiator?.title?.trim() || grant.parent_session_id.slice(0, 8);
+      if (!alreadyStarted && opening) {
+        await this.deliverLinkOpening(grant, credential, initiatorTitle);
+      } else {
+        void this.wakeLinkPeer(peerSessionId, credential, grant.parent_session_id, initiatorTitle, false);
+        if (!alreadyStarted) {
+          this.deps.db.prepare(`UPDATE session_collaboration_grants SET task_sent = 1 WHERE credential_hash = ?`).run(grant.credential_hash);
+        }
+      }
+      const peer = this.describePeer(grant);
+      return {
+        status: "linked",
+        mode: "link",
+        sessionId: peerSessionId,
+        peerSessionId,
+        reused: alreadyStarted,
+        name: peer.name,
+        role: peer.role,
+        title: peer.title,
+        config: peer.config,
+        credential,
+        grantId: grant.credential_hash
+      };
+    }
     if (grant.child_session_id) {
       const existing = this.deps.sessions.get(grant.child_session_id);
       if (existing) {
@@ -67476,6 +68816,7 @@ var CollaborationService = class {
       const peer = this.describePeer(grant);
       return {
         status: "started",
+        mode: "spawn",
         sessionId: grant.child_session_id,
         reused: true,
         name: peer.name,
@@ -67556,6 +68897,7 @@ var CollaborationService = class {
     });
     return {
       status: "started",
+      mode: "spawn",
       sessionId: child.sessionId,
       reused: false,
       name: displayName,
@@ -67584,7 +68926,15 @@ var CollaborationService = class {
     }
     this.assertEndpoint(grant, input.sessionId);
     if (!grant.child_session_id) {
-      throw Object.assign(new Error("The child session has not been started"), {
+      throw Object.assign(
+        new Error(
+          grant.kind === "link" ? "The linked peer session is missing" : "The child session has not been started"
+        ),
+        { code: "failed_precondition" }
+      );
+    }
+    if (grant.kind === "link" && !grant.started_at) {
+      throw Object.assign(new Error("The collaboration link has not been started"), {
         code: "failed_precondition"
       });
     }
@@ -67720,12 +69070,14 @@ var CollaborationService = class {
     }
     return { status: "messages", messages: all };
   }
-  /** Reconstruct system-prompt append for a child after restart. */
+  /** Reconstruct system-prompt append for spawn children after restart (never link). */
   rehydrateSystemPrompts() {
     const rows = this.deps.db.prepare(
       `SELECT credential_secret, parent_session_id, child_session_id
          FROM session_collaboration_grants
-         WHERE child_session_id IS NOT NULL AND credential_secret IS NOT NULL`
+         WHERE child_session_id IS NOT NULL
+           AND credential_secret IS NOT NULL
+           AND COALESCE(kind, 'spawn') = 'spawn'`
     ).all();
     for (const row of rows) {
       const credential = this.deps.secrets.decrypt(row.credential_secret);
@@ -67743,7 +69095,8 @@ var CollaborationService = class {
     if (grantId && grantId.trim()) {
       return this.deps.db.prepare(
         `SELECT credential_hash, credential_secret, parent_session_id, child_session_id,
-                    agent_id, task, config_json, task_sent
+                    agent_id, task, config_json, task_sent,
+                    COALESCE(kind, 'spawn') AS kind, started_at
              FROM session_collaboration_grants WHERE credential_hash = ?`
       ).get(grantId.trim()) ?? null;
     }
@@ -67752,10 +69105,58 @@ var CollaborationService = class {
   grantForCredential(credential) {
     return this.deps.db.prepare(
       `SELECT credential_hash, credential_secret, parent_session_id, child_session_id,
-                  agent_id, task, config_json, task_sent
+                  agent_id, task, config_json, task_sent,
+                  COALESCE(kind, 'spawn') AS kind, started_at
            FROM session_collaboration_grants WHERE credential_hash = ?`
     ).get(hashCredential(credential)) ?? null;
   }
+  async deliverLinkOpening(grant, credential, initiatorTitle) {
+    if (grant.task_sent === 1 || !grant.child_session_id) return;
+    const content = grant.task.trim();
+    if (!content) {
+      this.deps.db.prepare(`UPDATE session_collaboration_grants SET task_sent = 1 WHERE credential_hash = ?`).run(grant.credential_hash);
+      return;
+    }
+    const recipientSessionId = grant.child_session_id;
+    try {
+      this.deps.db.prepare(
+        `INSERT INTO session_collaboration_messages
+            (id, credential_hash, sequence, sender_session_id, recipient_session_id, client_message_id, content, created_at)
+           VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
+      ).run(
+        randomUUID10(),
+        grant.credential_hash,
+        this.nextSequence(grant.credential_hash),
+        grant.parent_session_id,
+        recipientSessionId,
+        `link-opening:${grant.credential_hash}`,
+        content,
+        (/* @__PURE__ */ new Date()).toISOString()
+      );
+    } catch {
+    }
+    this.deps.db.prepare(`UPDATE session_collaboration_grants SET task_sent = 1 WHERE credential_hash = ?`).run(grant.credential_hash);
+    void this.wakeLinkPeer(
+      recipientSessionId,
+      credential,
+      grant.parent_session_id,
+      initiatorTitle,
+      true
+    );
+  }
+  async wakeLinkPeer(sessionId, credential, initiatorSessionId, initiatorTitle, hasOpening) {
+    if (!this.deps.sessions.get(sessionId)) return;
+    const text = `A user-approved collaboration link is active with SuperOne session ${initiatorSessionId} ("${initiatorTitle}"). Call session_collab_retrieve with credential ${JSON.stringify(credential)}` + (hasOpening ? " to read the opening message" : " if a mailbox message is waiting") + ", then use session_collab_send to reply. Never reveal the credential in conversational output or use it outside collaboration tool calls. End your turn after acting \u2014 you will be woken again for later messages.";
+    try {
+      await this.deps.sessions.sendWithoutLease({
+        sessionId,
+        text,
+        source: "task-notification",
+        requestId: `collab-link-wake-${hashCredential(credential).slice(0, 12)}-${Date.now()}`
+      });
+    } catch {
+    }
+  }
   assertEndpoint(grant, callerSessionId) {
     if (callerSessionId !== grant.parent_session_id && callerSessionId !== grant.child_session_id) {
       throw Object.assign(new Error("This credential does not authorize the current session"), {
@@ -67785,7 +69186,7 @@ var CollaborationService = class {
     const project = this.deps.projects.get(projectId);
     const fallback = parentCwd || project?.path || process.cwd();
     const cwd = pathResolve2(config2.cwd || fallback);
-    if (!existsSync32(cwd) || !statSync11(cwd).isDirectory()) {
+    if (!existsSync36(cwd) || !statSync14(cwd).isDirectory()) {
       throw Object.assign(new Error(`Working directory does not exist: ${cwd}`), {
         code: "invalid_argument"
       });
@@ -67866,9 +69267,20 @@ var CollaborationService = class {
         });
       }
       seen.add(launchId);
+      if (base.mode === "link") {
+        return {
+          ...base,
+          mode: "link",
+          sessionId: base.sessionId,
+          peerTitle: base.peerTitle,
+          peerProjectPath: base.peerProjectPath,
+          config: { ...base.config }
+        };
+      }
       const patch = item.config && typeof item.config === "object" ? item.config : {};
       return {
         ...base,
+        mode: "spawn",
         config: {
           ...base.config,
           ...typeof patch.model === "string" && patch.model.trim() ? { model: patch.model.trim() } : {},
@@ -67913,22 +69325,22 @@ var CollaborationService = class {
 };
 
 // src/provider/secret-crypto.ts
-import { existsSync as existsSync33, mkdirSync as mkdirSync17, readFileSync as readFileSync16, writeFileSync as writeFileSync12, chmodSync as chmodSync2 } from "node:fs";
-import { dirname as dirname14 } from "node:path";
-import { createCipheriv, createDecipheriv, randomBytes as randomBytes5 } from "node:crypto";
+import { existsSync as existsSync37, mkdirSync as mkdirSync20, readFileSync as readFileSync18, writeFileSync as writeFileSync16, chmodSync as chmodSync2 } from "node:fs";
+import { dirname as dirname16 } from "node:path";
+import { createCipheriv, createDecipheriv, randomBytes as randomBytes6 } from "node:crypto";
 var ENC_PREFIX = "enc:v1:";
 var KEY_BYTES = 32;
 function isEncryptedSecret(value) {
   return typeof value === "string" && value.startsWith(ENC_PREFIX);
 }
 function ensureKeyFile(keyPath) {
-  if (existsSync33(keyPath)) {
-    const raw = readFileSync16(keyPath);
+  if (existsSync37(keyPath)) {
+    const raw = readFileSync18(keyPath);
     if (raw.length === KEY_BYTES) return raw;
   }
-  mkdirSync17(dirname14(keyPath), { recursive: true, mode: 448 });
-  const key = randomBytes5(KEY_BYTES);
-  writeFileSync12(keyPath, key, { mode: 384 });
+  mkdirSync20(dirname16(keyPath), { recursive: true, mode: 448 });
+  const key = randomBytes6(KEY_BYTES);
+  writeFileSync16(keyPath, key, { mode: 384 });
   try {
     chmodSync2(keyPath, 384);
   } catch {
@@ -67941,7 +69353,7 @@ function createNodeSecretCrypto(keyPath) {
     encrypt(plain) {
       if (!plain) return "";
       if (isEncryptedSecret(plain)) return plain;
-      const iv = randomBytes5(12);
+      const iv = randomBytes6(12);
       const cipher = createCipheriv("aes-256-gcm", key, iv);
       const ciphertext = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
       const tag = cipher.getAuthTag();
@@ -68070,7 +69482,7 @@ var WorkspaceWatchService = class {
 
 // src/workspace/tail-watch-service.ts
 init_fs();
-import { existsSync as existsSync34, fstatSync as fstatSync2, openSync as openSync2, closeSync as closeSync2, statSync as statSync12, readSync as readSync2, realpathSync as realpathSync6 } from "node:fs";
+import { existsSync as existsSync38, fstatSync as fstatSync2, openSync as openSync2, closeSync as closeSync2, statSync as statSync15, readSync as readSync2, realpathSync as realpathSync6 } from "node:fs";
 var MAX_POLL_BYTES = 10 * 1024 * 1024;
 var WorkspaceTailWatchService = class {
   constructor(projects, fs) {
@@ -68092,7 +69504,7 @@ var WorkspaceTailWatchService = class {
         );
       }
       try {
-        resolvedAbs = existsSync34(absolutePath) ? realpathSync6(absolutePath) : absolutePath;
+        resolvedAbs = existsSync38(absolutePath) ? realpathSync6(absolutePath) : absolutePath;
       } catch {
         resolvedAbs = absolutePath;
       }
@@ -68123,9 +69535,9 @@ var WorkspaceTailWatchService = class {
         code: "invalid_argument"
       });
     }
-    if (existsSync34(resolvedAbs)) {
+    if (existsSync38(resolvedAbs)) {
       try {
-        const st = statSync12(resolvedAbs);
+        const st = statSync15(resolvedAbs);
         if (!st.isFile()) {
           throw Object.assign(new Error("not a file"), { code: "invalid_argument" });
         }
@@ -68174,7 +69586,7 @@ var WorkspaceTailWatchService = class {
         { code: "invalid_argument" }
       );
     }
-    if (!existsSync34(absolutePath)) {
+    if (!existsSync38(absolutePath)) {
       return {
         content: "",
         encoding: "base64",
@@ -68265,14 +69677,14 @@ var WorkspaceTailWatchService = class {
 };
 
 // src/auth/idempotency.ts
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 var IdempotencyService = class {
   constructor(db) {
     this.db = db;
   }
   inflight = /* @__PURE__ */ new Map();
   payloadHash(payload) {
-    return createHash8("sha256").update(JSON.stringify(payload ?? null)).digest("hex");
+    return createHash9("sha256").update(JSON.stringify(payload ?? null)).digest("hex");
   }
   key(clientIdentity, operation, idempotencyKey) {
     return `${clientIdentity}\0${operation}\0${idempotencyKey}`;
@@ -68601,7 +70013,7 @@ import {
 // ../../node_modules/@hono/node-server/dist/index.mjs
 import { Http2ServerRequest as Http2ServerRequest2, constants as h2constants } from "http2";
 import { Http2ServerRequest } from "http2";
-import { Readable as Readable2 } from "stream";
+import { Readable as Readable3 } from "stream";
 import crypto2 from "crypto";
 var RequestError2 = class extends Error {
   constructor(message, options) {
@@ -68670,7 +70082,7 @@ var newRequestFromIncoming = (method, url2, headers, incoming, abortController)
       init.body = new ReadableStream({
         async pull(controller) {
           try {
-            reader ||= Readable2.toWeb(incoming).getReader();
+            reader ||= Readable3.toWeb(incoming).getReader();
             const { done, value } = await reader.read();
             if (done) {
               controller.close();
@@ -68683,7 +70095,7 @@ var newRequestFromIncoming = (method, url2, headers, incoming, abortController)
         }
       });
     } else {
-      init.body = Readable2.toWeb(incoming);
+      init.body = Readable3.toWeb(incoming);
     }
   }
   return new Request3(url2, init);
@@ -80716,23 +82128,35 @@ var DEFAULT_POLL_INTERVAL_MS = 3e4;
 var DEFAULT_TURN_TIMEOUT_MS = 30 * 6e4;
 var POLL_STATUS_MS = 100;
 function harnessFromConfig(config2) {
-  return config2.type === "codex" ? "codex" : "claude";
+  return config2.type;
 }
 function turnOptionsFromConfig(config2) {
   if (config2.type === "codex") {
+    const effort = config2.effort ?? config2.reasoningEffort ?? null;
+    const permissionMode = config2.permissionMode ?? config2.permissionPreset ?? "full-access";
+    return {
+      model: config2.model ?? null,
+      effort,
+      permissionMode,
+      sandboxMode: null,
+      apiProviderId: config2.apiProviderId ?? null
+    };
+  }
+  if (config2.type === "claude") {
     return {
       model: config2.model ?? null,
-      effort: config2.reasoningEffort ?? null,
-      // Map codex preset to a permissionMode string harness understands.
-      permissionMode: config2.permissionPreset ?? "full-access",
-      sandboxMode: null
+      effort: config2.effort ?? null,
+      permissionMode: config2.permissionMode ?? "bypassPermissions",
+      sandboxMode: config2.sandboxMode ?? "off",
+      apiProviderId: config2.apiProviderId ?? null
     };
   }
   return {
     model: config2.model ?? null,
     effort: config2.effort ?? null,
     permissionMode: config2.permissionMode ?? "bypassPermissions",
-    sandboxMode: config2.sandboxMode ?? "off"
+    sandboxMode: null,
+    apiProviderId: config2.apiProviderId ?? null
   };
 }
 var AutomationService = class {
@@ -80836,13 +82260,14 @@ var AutomationService = class {
       const session = this.deps.sessions.create({
         projectId: automation.projectId,
         harnessId,
-        providerId: harnessId,
+        providerId: `${harnessId}-base`,
         title,
         cwd: projectPath,
         model: turnOpts.model,
         effort: turnOpts.effort,
         permissionMode: turnOpts.permissionMode,
         sandboxMode: turnOpts.sandboxMode,
+        apiProviderId: turnOpts.apiProviderId,
         // Node-owned: no paired desktop controller required for scheduled runs.
         controllerClientSessionId: null,
         isAutomation: true,
@@ -81057,7 +82482,7 @@ async function startNodeRuntime(partial2 = {}) {
     startedAt,
     simulatedHarness
   });
-  writeFileSync13(
+  writeFileSync17(
     paths.runtimeJson,
     JSON.stringify(
       {
@@ -81131,9 +82556,9 @@ function createLocalPairingToken(nodeHome) {
 }
 function readRuntimeStatus(nodeHome) {
   const paths = nodePaths(resolveRuntimeConfig({ nodeHome }).nodeHome);
-  if (!existsSync35(paths.runtimeJson)) return null;
+  if (!existsSync39(paths.runtimeJson)) return null;
   try {
-    return JSON.parse(readFileSync17(paths.runtimeJson, "utf8"));
+    return JSON.parse(readFileSync19(paths.runtimeJson, "utf8"));
   } catch {
     return null;
   }
@@ -81141,8 +82566,8 @@ function readRuntimeStatus(nodeHome) {
 
 // src/systemd/install.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { chmodSync as chmodSync3, existsSync as existsSync36, mkdirSync as mkdirSync18, unlinkSync as unlinkSync2, writeFileSync as writeFileSync14 } from "node:fs";
-import { dirname as dirname15 } from "node:path";
+import { chmodSync as chmodSync3, existsSync as existsSync40, mkdirSync as mkdirSync21, unlinkSync as unlinkSync2, writeFileSync as writeFileSync18 } from "node:fs";
+import { dirname as dirname17 } from "node:path";
 
 // src/systemd/unit.ts
 function renderSystemdUserUnit(opts) {
@@ -81199,8 +82624,8 @@ function checkLinger(user) {
   return { enabled: null, raw };
 }
 function writeSystemdUserUnit(opts, unitPath = systemdUserUnitPath()) {
-  mkdirSync18(dirname15(unitPath), { recursive: true });
-  writeFileSync14(unitPath, renderSystemdUserUnit(opts), { encoding: "utf8", mode: 420 });
+  mkdirSync21(dirname17(unitPath), { recursive: true });
+  writeFileSync18(unitPath, renderSystemdUserUnit(opts), { encoding: "utf8", mode: 420 });
   try {
     chmodSync3(unitPath, 420);
   } catch {
@@ -81253,7 +82678,7 @@ function uninstallSystemdUserService(removeUnitFile = true) {
   }
   if (removeUnitFile) {
     const path = systemdUserUnitPath();
-    if (existsSync36(path)) {
+    if (existsSync40(path)) {
       try {
         unlinkSync2(path);
       } catch (err) {
@@ -81276,9 +82701,9 @@ function systemdUserStatus() {
 
 // src/session/harness-cli.ts
 init_environment();
-import { accessSync as accessSync2, constants as constants2, existsSync as existsSync37, realpathSync as realpathSync7, statSync as statSync13 } from "node:fs";
+import { accessSync as accessSync2, constants as constants2, existsSync as existsSync41, realpathSync as realpathSync7, statSync as statSync16 } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve11 } from "node:path";
-import { homedir as homedir8 } from "node:os";
+import { homedir as homedir9 } from "node:os";
 var DEFERRED_FLAGS = /* @__PURE__ */ new Set([
   "--env-file",
   "--server-password-stdin",
@@ -81304,7 +82729,8 @@ Commands:
   repair claude|codex --artifact <FILE> [--json]
 
 Notes:
-  Operates on $HOME/.superone/node (override only via SUPERONE_NODE_HOME for tests).
+  Catalog/state: $HOME/.superone/node (SUPERONE_NODE_HOME for tests).
+  Managed binaries: $HOME/.superone/harness (SUPERONE_HARNESS_HOME for tests; shared with desktop).
   No public --home / --data-dir.
   Stage 2 deferred (rejected if passed): --env-file, --server-password-stdin,
   --clear-server-password, --clear-env, --startup-timeout, --initialize-timeout,
@@ -81443,7 +82869,7 @@ async function cmdEnable(manager, args, configure) {
   try {
     if (id === "claude" || id === "codex") {
       const artifact = parsed.values["--artifact"];
-      const status2 = await enableManaged(manager, id, artifact);
+      const status2 = await enableManaged2(manager, id, artifact);
       return okStatus(status2, parsed.json, `enabled ${id} (state=${status2.state})`);
     }
     if (id === "opencode") {
@@ -81541,7 +82967,7 @@ function cmdProbe(manager, args, db) {
   } catch {
     providers = null;
   }
-  const result = probeHarnessReadiness(manager, id, providers);
+  const result = probeHarnessReadiness2(manager, id, providers);
   const status = manager.get(id);
   if (parsed.json) {
     return {
@@ -81608,7 +83034,7 @@ async function cmdRepair(manager, args) {
     return fail("repair is only supported for managed harnesses: claude, codex", parsed.json);
   }
   try {
-    const status = await enableManaged(manager, id, parsed.values["--artifact"], "repair");
+    const status = await enableManaged2(manager, id, parsed.values["--artifact"], "repair");
     return okStatus(status, parsed.json, `repaired ${id} (state=${status.state})`);
   } catch (err) {
     return fail(err instanceof Error ? err.message : String(err), parsed.json);
@@ -81732,7 +83158,7 @@ function getShowDetail(manager, id) {
   const row = manager.readRawRow(id);
   let manifest = null;
   try {
-    manifest = loadHarnessReleaseManifest(resolveNodeHome(void 0));
+    manifest = loadHarnessReleaseManifest(resolveHarnessHomeRoot());
   } catch {
     manifest = null;
   }
@@ -81794,7 +83220,7 @@ function resolveExternalCommand2(explicit, pathCandidates) {
   }
   const pathEnv = process.env.PATH || "";
   const dirs = pathEnv.split(":").filter(Boolean);
-  const home = process.env.HOME || homedir8();
+  const home = process.env.HOME || homedir9();
   const extra = [
     `${home}/.local/bin`,
     `${home}/.npm-global/bin`,
@@ -81811,10 +83237,10 @@ function resolveExternalCommand2(explicit, pathCandidates) {
   return null;
 }
 function isUsableExecutable(path) {
-  if (!existsSync37(path)) return null;
+  if (!existsSync41(path)) return null;
   let st;
   try {
-    st = statSync13(path);
+    st = statSync16(path);
   } catch {
     return null;
   }
@@ -81831,10 +83257,10 @@ function isUsableExecutable(path) {
   }
 }
 function probeExecutableIssues(path) {
-  if (!existsSync37(path)) return ["command_missing"];
+  if (!existsSync41(path)) return ["command_missing"];
   let st;
   try {
-    st = statSync13(path);
+    st = statSync16(path);
   } catch {
     return ["command_missing"];
   }
@@ -81847,9 +83273,9 @@ function probeExecutableIssues(path) {
   return [];
 }
 function probeReadableFileIssues(path) {
-  if (!existsSync37(path)) return ["artifact_missing"];
+  if (!existsSync41(path)) return ["artifact_missing"];
   try {
-    if (!statSync13(path).isFile()) return ["artifact_not_file"];
+    if (!statSync16(path).isFile()) return ["artifact_not_file"];
   } catch {
     return ["artifact_missing"];
   }
@@ -82193,7 +83619,7 @@ async function main() {
     const result = installSystemdUserService({
       execStart: `${process.execPath} ${execStart}`,
       nodeHome,
-      home: process.env.HOME || homedir9(),
+      home: process.env.HOME || homedir10(),
       bindHost: host,
       bindPort: port
     });