@vibest/cli 0.0.1-beta.12 → 0.0.1-beta.14

package/harnesses/pi/extension.mjs

@@ -4731,7 +4731,7 @@ var TypeId6 = "~effect/Layer", MemoMapTypeId = "~effect/Layer/MemoMap", makeMemo
   return forEach(layers, (layer) => layer.build(memoMap, forkUnsafe2(parentScope, "sequential")), {
     concurrency: layers.length
   }).pipe(map5((context) => mergeAll(...context)));
-}, mergeAll2 = (...layers) => fromBuild((memoMap, scope) => mergeAllEffect(layers, memoMap, scope)), provideWith = (self, that, f) => fromBuild((memoMap, scope) => flatMap2(Array.isArray(that) ? mergeAllEffect(that, memoMap, scope) : that.build(memoMap, scope), (context) => self.build(memoMap, scope).pipe(provideContext(context), map5((merged) => f(merged, context))))), provide2, provideMerge, flatMap3;
+}, mergeAll2 = (...layers) => fromBuild((memoMap, scope) => mergeAllEffect(layers, memoMap, scope)), merge2, provideWith = (self, that, f) => fromBuild((memoMap, scope) => flatMap2(Array.isArray(that) ? mergeAllEffect(that, memoMap, scope) : that.build(memoMap, scope), (context) => self.build(memoMap, scope).pipe(provideContext(context), map5((merged) => f(merged, context))))), provide2, provideMerge, flatMap3;
 var init_Layer = __esm(() => {
   init_Context();
   init_Deferred();
@@ -4798,6 +4798,7 @@ var init_Layer = __esm(() => {
   buildWithScope = /* @__PURE__ */ dual(2, (self, scope) => withFiber((fiber) => buildWithMemoMap(self, CurrentMemoMap.forkOrCreate(fiber.context), scope)));
   empty4 = /* @__PURE__ */ succeedContext(/* @__PURE__ */ empty3());
   unwrapKey = /* @__PURE__ */ Service("effect/Layer/unwrap");
+  merge2 = /* @__PURE__ */ dual(2, (self, that) => mergeAll2(self, ...Array.isArray(that) ? that : [that]));
   provide2 = /* @__PURE__ */ dual(2, (self, that) => provideWith(self, that, identity));
   provideMerge = /* @__PURE__ */ dual(2, (self, that) => provideWith(self, that, (self, that) => merge(that, self)));
   flatMap3 = /* @__PURE__ */ dual(2, (self, f) => fromBuild((memoMap, scope) => flatMap2(self.build(memoMap, scope), (context) => f(context).build(memoMap, scope))));
@@ -6254,7 +6255,7 @@ var TypeId15 = "~effect/Channel", isChannel = (u) => hasProperty(u, TypeId15), C
     return flatMap4(close2, () => makePull);
   });
   return suspend2(() => childPull ?? makePull);
-})), flatMapConcurrent = (self, f, options) => self.pipe(map8(f), mergeAll3(options)), flatten4 = (channels) => flatMap5(channels, identity), mapAccum, mergeAll3, merge2, splitLines = () => fromTransform((upstream, _scope) => sync2(() => {
+})), flatMapConcurrent = (self, f, options) => self.pipe(map8(f), mergeAll3(options)), flatten4 = (channels) => flatMap5(channels, identity), mapAccum, mergeAll3, merge3, splitLines = () => fromTransform((upstream, _scope) => sync2(() => {
   let stringBuilder = "";
   let midCRLF = false;
   let done = none2();
@@ -6492,7 +6493,7 @@ var init_Channel = __esm(() => {
     }), forkIn2(forkedScope));
     return take2(queue);
   })));
-  merge2 = /* @__PURE__ */ dual((args) => isChannel(args[0]) && isChannel(args[1]), (left, right, options) => fromTransformBracket(fnUntraced2(function* (upstream, _scope, forkedScope) {
+  merge3 = /* @__PURE__ */ dual((args) => isChannel(args[0]) && isChannel(args[1]), (left, right, options) => fromTransformBracket(fnUntraced2(function* (upstream, _scope, forkedScope) {
     const strategy = options?.haltStrategy ?? "both";
     const queue = yield* bounded(0);
     yield* addFinalizer(forkedScope, shutdown(queue));
@@ -6646,7 +6647,7 @@ function* concatChannels(self, that) {
       stack.push(parts[1], parts[0]);
   }
 }
-var TypeId19 = "~effect/Stream", isStream = (u) => hasProperty(u, TypeId19), fromChannel3, fromPull2 = (pull) => fromChannel3(fromPull(pull)), transformPull2 = (self, f) => fromChannel3(fromTransform((_, scope) => flatMap4(toPullScoped(self.channel, scope), (pull) => f(pull, scope)))), toChannel2 = (stream) => stream.channel, callback3 = (f, options) => fromChannel3(callbackArray(f, options)), empty6, succeed9 = (value) => fromChannel3(succeed8(of(value))), make13 = (...values) => fromArray2(values), suspend4 = (stream) => fromChannel3(suspend3(() => stream().channel)), fromArray2 = (array) => isReadonlyArrayNonEmpty(array) ? fromChannel3(succeed8(array)) : empty6, fromQueue = (queue) => fromChannel3(fromQueueArray(queue)), never4, unwrap4 = (effect) => fromChannel3(unwrap2(map7(effect, toChannel2))), map9, concat, concatParts, merge3, takeUntil, scan, transduce, decodeText, splitLines2 = (self) => self.channel.pipe(pipeTo(splitLines()), fromChannel3), provideContext4, run, runCollect = (self) => runFold(self.channel, () => [], (acc, chunk) => {
+var TypeId19 = "~effect/Stream", isStream = (u) => hasProperty(u, TypeId19), fromChannel3, fromPull2 = (pull) => fromChannel3(fromPull(pull)), transformPull2 = (self, f) => fromChannel3(fromTransform((_, scope) => flatMap4(toPullScoped(self.channel, scope), (pull) => f(pull, scope)))), toChannel2 = (stream) => stream.channel, callback3 = (f, options) => fromChannel3(callbackArray(f, options)), empty6, succeed9 = (value) => fromChannel3(succeed8(of(value))), make13 = (...values) => fromArray2(values), suspend4 = (stream) => fromChannel3(suspend3(() => stream().channel)), fromArray2 = (array) => isReadonlyArrayNonEmpty(array) ? fromChannel3(succeed8(array)) : empty6, fromQueue = (queue) => fromChannel3(fromQueueArray(queue)), never4, unwrap4 = (effect) => fromChannel3(unwrap2(map7(effect, toChannel2))), map9, concat, concatParts, merge4, takeUntil, scan, transduce, decodeText, splitLines2 = (self) => self.channel.pipe(pipeTo(splitLines()), fromChannel3), provideContext4, run, runCollect = (self) => runFold(self.channel, () => [], (acc, chunk) => {
   for (let i = 0;i < chunk.length; i++) {
     acc.push(chunk[i]);
   }
@@ -6675,7 +6676,7 @@ var init_Stream = __esm(() => {
     return stream;
   });
   concatParts = /* @__PURE__ */ new WeakMap;
-  merge3 = /* @__PURE__ */ dual((args) => isStream(args[0]) && isStream(args[1]), (self, that, options) => fromChannel3(merge2(toChannel2(self), toChannel2(that), options)));
+  merge4 = /* @__PURE__ */ dual((args) => isStream(args[0]) && isStream(args[1]), (self, that, options) => fromChannel3(merge3(toChannel2(self), toChannel2(that), options)));
   takeUntil = /* @__PURE__ */ dual((args) => isStream(args[0]), (self, predicate, options) => transformPull2(self, (pull, _scope) => sync2(() => {
     let i = 0;
     let done = false;
@@ -10064,7 +10065,7 @@ var TypeId28, Proto5, make20 = (input) => Object.assign(Object.create(Proto5), i
     }
   }
   return out;
-}, merge4, redact2, CurrentRedactedNames;
+}, merge5, redact2, CurrentRedactedNames;
 var init_Headers = __esm(() => {
   init_Context();
   init_Equal();
@@ -10109,7 +10110,7 @@ var init_Headers = __esm(() => {
   });
   Equivalence3 = /* @__PURE__ */ makeEquivalence(/* @__PURE__ */ strictEqual());
   empty7 = /* @__PURE__ */ Object.create(Proto5);
-  merge4 = /* @__PURE__ */ dual(2, (self, headers) => {
+  merge5 = /* @__PURE__ */ dual(2, (self, headers) => {
     const out = make20(self);
     Object.assign(out, headers);
     return out;
@@ -15885,50 +15886,6 @@ var init_dist = __esm(() => {
   init_Version();
 });
 
-// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/process/index.js
-var init_process = __esm(() => {
-  init_ChildProcess();
-  init_ChildProcessSpawner();
-});
-
-// ../../schema/src/layout.ts
-var Layout, VibestCommand, shellQuote = (s) => /^[\w@%+=:,./-]+$/.test(s) ? s : `'${s.replace(/'/g, `'\\''`)}'`;
-var init_layout = __esm(() => {
-  init_dist();
-  Layout = class Layout extends Service()("vibest/Layout") {
-    static make = (home) => gen2(function* () {
-      const path = yield* Path;
-      return Layout.of({
-        home,
-        database: path.join(home, "vibest.db"),
-        socket: path.join(home, "vibest.sock"),
-        daemonInfo: path.join(home, "vibestd.pid"),
-        results: path.join(home, "results"),
-        reports: path.join(home, "reports"),
-        worktrees: path.join(home, "worktrees"),
-        projects: path.join(home, "projects"),
-        config: path.join(home, "vibest.json"),
-        plugins: path.join(home, "plugins"),
-        resultFile: (id) => path.join(home, "results", `${id}.json`),
-        reportFile: (id) => path.join(home, "reports", `${id}.jsonl`),
-        rulesFile: (id) => path.join(home, "rules", `${id}.md`),
-        coordinatorRules: (key) => path.join(home, "coordinator", `${key}.md`),
-        legacyWorktree: (id) => path.join(home, "worktrees", id),
-        allocationWorktree: (repository, name) => path.join(home, "worktrees", repository, name),
-        project: (key) => path.join(home, "projects", key),
-        scratch: (key) => path.join(home, "projects", key, "scratch"),
-        inboxClaim: (generation, token) => path.join(home, "inbox-claims", `${generation}-${token}`)
-      });
-    });
-    static layer = effect(Layout, gen2(function* () {
-      const path = yield* Path;
-      const home = yield* String7("VIBEST_HOME").pipe(orElse(() => String7("HOME").pipe(map10((h) => path.join(h, ".vibest")))));
-      return yield* Layout.make(home);
-    }));
-  };
-  VibestCommand = Reference("vibest/VibestCommand", { defaultValue: () => ["vibest"] });
-});
-
 // ../../schema/src/session.ts
 var AgentStatus, TurnState, InboxKind, InboxStatus, RuntimeAddress, RuntimeLocation, RuntimeMachine, InboxRow, HARNESS_IDS, isHarnessId = (s) => HARNESS_IDS.includes(s), HarnessUnavailable, RuntimeUnreachable, NoRuntime, RuntimeIncompatible, NoSuchSession, AllocationFailed, SessionBusy, LimitReached, NotReady, NoHarnessChosen, LaunchFailed, NotInRepository;
 var init_session = __esm(() => {
@@ -15941,7 +15898,10 @@ var init_session = __esm(() => {
     machine: String6,
     id: String6
   });
-  RuntimeLocation = Union2([Struct({ socketPath: String6 }), Struct({ session: String6 })]);
+  RuntimeLocation = Union2([
+    Struct({ socketPath: String6 }),
+    Struct({ session: String6 })
+  ]);
   RuntimeMachine = Struct({
     id: String6,
     target: optional2(String6)
@@ -15973,25 +15933,38 @@ var init_session = __esm(() => {
     message: String6
   }) {
   };
-  NoSuchSession = class NoSuchSession extends TaggedError3()("NoSuchSession", { id: String6, message: String6 }) {
+  NoSuchSession = class NoSuchSession extends TaggedError3()("NoSuchSession", {
+    id: String6,
+    message: String6
+  }) {
   };
-  AllocationFailed = class AllocationFailed extends TaggedError3()("AllocationFailed", { message: String6 }) {
+  AllocationFailed = class AllocationFailed extends TaggedError3()("AllocationFailed", {
+    message: String6
+  }) {
   };
-  SessionBusy = class SessionBusy extends TaggedError3()("SessionBusy", { id: String6, message: String6 }) {
+  SessionBusy = class SessionBusy extends TaggedError3()("SessionBusy", {
+    id: String6,
+    message: String6
+  }) {
   };
   LimitReached = class LimitReached extends TaggedError3()("LimitReached", { limit: Number6 }) {
     get message() {
       return `VIBEST_MAX_SESSIONS=${this.limit} sessions are already open (working or kept); vibest archive one first`;
     }
   };
-  NotReady = class NotReady extends TaggedError3()("NotReady", { id: String6, message: String6 }) {
+  NotReady = class NotReady extends TaggedError3()("NotReady", {
+    id: String6,
+    message: String6
+  }) {
   };
   NoHarnessChosen = class NoHarnessChosen extends TaggedError3()("NoHarnessChosen", {}) {
     get message() {
       return "no harness chosen: pass harness, or install a routing plugin";
     }
   };
-  LaunchFailed = class LaunchFailed extends TaggedError3()("LaunchFailed", { message: String6, tail: String6 }) {
+  LaunchFailed = class LaunchFailed extends TaggedError3()("LaunchFailed", {
+    message: String6
+  }) {
   };
   NotInRepository = class NotInRepository extends TaggedError3()("NotInRepository", { path: String6 }) {
     get message() {
@@ -16000,6 +15973,52 @@ var init_session = __esm(() => {
   };
 });
 
+// ../../schema/src/layout.ts
+var Layout, VibestCommand, shellQuote = (s) => /^[\w@%+=:,./-]+$/.test(s) ? s : `'${s.replace(/'/g, `'\\''`)}'`;
+var init_layout = __esm(() => {
+  init_dist();
+  Layout = class Layout extends Service()("vibest/Layout") {
+    static make = (home) => gen2(function* () {
+      const path = yield* Path;
+      return Layout.of({
+        home,
+        database: path.join(home, "vibest.db"),
+        socket: path.join(home, "vibest.sock"),
+        httpSocket: path.join(home, "vibest-http.sock"),
+        daemonInfo: path.join(home, "vibestd.pid"),
+        results: path.join(home, "results"),
+        reports: path.join(home, "reports"),
+        worktrees: path.join(home, "worktrees"),
+        projects: path.join(home, "projects"),
+        config: path.join(home, "vibest.json"),
+        plugins: path.join(home, "plugins"),
+        resultFile: (id) => path.join(home, "results", `${id}.json`),
+        reportFile: (id) => path.join(home, "reports", `${id}.jsonl`),
+        rulesFile: (id) => path.join(home, "rules", `${id}.md`),
+        coordinatorRules: (key) => path.join(home, "coordinator", `${key}.md`),
+        legacyWorktree: (id) => path.join(home, "worktrees", id),
+        allocationWorktree: (repository, name) => path.join(home, "worktrees", repository, name),
+        project: (key) => path.join(home, "projects", key),
+        scratch: (key) => path.join(home, "projects", key, "scratch")
+      });
+    });
+    static layer = effect(Layout, gen2(function* () {
+      const path = yield* Path;
+      const home = yield* String7("VIBEST_HOME").pipe(orElse(() => String7("HOME").pipe(map10((h) => path.join(h, ".vibest")))));
+      return yield* Layout.make(home);
+    }));
+  };
+  VibestCommand = Reference("vibest/VibestCommand", {
+    defaultValue: () => ["vibest"]
+  });
+});
+
+// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/process/index.js
+var init_process = __esm(() => {
+  init_ChildProcess();
+  init_ChildProcessSpawner();
+});
+
 // ../../core/src/models.ts
 var exports_models = {};
 __export(exports_models, {
@@ -16011,7 +16030,14 @@ __export(exports_models, {
   normalizeModels: () => normalizeModels,
   withConfigured: () => withConfigured
 });
-var Model, normalizeModels = (harness, provider, raw) => raw.map((r) => ({ harness, provider: r.provider ?? provider, model: r.model, name: r.name || r.model, description: r.description ?? "", default: r.default })).filter((m) => !provider || m.provider === provider), jsonLines = (...messages) => messages.map((m) => `${JSON.stringify(m)}
+var Model, normalizeModels = (harness, provider, raw) => raw.map((r) => ({
+  harness,
+  provider: r.provider ?? provider,
+  model: r.model,
+  name: r.name || r.model,
+  description: r.description ?? "",
+  default: r.default
+})).filter((m) => !provider || m.provider === provider), jsonLines = (...messages) => messages.map((m) => `${JSON.stringify(m)}
 `).join(""), findMessage2 = (schema) => {
   const decode = decodeUnknownOption2(fromJsonString2(schema));
   return (lines) => {
@@ -16063,10 +16089,10 @@ var init_models = __esm(() => {
 // ../../core/src/harness.ts
 var encodeCommand, Harnesses, MODELS_TTL, Harness, preflight, harnessOptions;
 var init_harness = __esm(() => {
-  init_dist();
-  init_process();
   init_layout();
   init_session();
+  init_dist();
+  init_process();
   init_session();
   encodeCommand = encodeSync(fromJsonString2(ArraySchema(String6)));
   Harnesses = class Harnesses extends Service()("vibest/Harnesses") {
@@ -16085,7 +16111,11 @@ var init_harness = __esm(() => {
       const harnesses = yield* Harnesses;
       const self = yield* VibestCommand;
       const pkg = self.length === 1 && path.isAbsolute(self[0]) ? path.dirname(path.dirname(self[0])) : undefined;
-      const beside = pkg === undefined ? undefined : yield* findFirst2([path.join(pkg, "harnesses"), path.join(pkg, "..", "cli", "harnesses"), path.join(pkg, "..", "..", "..", "harnesses")], (dir) => fs.exists(dir).pipe(orElseSucceed2(() => false))).pipe(map7((found) => getOrElse(found, () => path.join(pkg, "harnesses"))));
+      const beside = pkg === undefined ? undefined : yield* findFirst2([
+        path.join(pkg, "harnesses"),
+        path.join(pkg, "..", "cli", "harnesses"),
+        path.join(pkg, "..", "..", "..", "harnesses")
+      ], (dir) => fs.exists(dir).pipe(orElseSucceed2(() => false))).pipe(map7((found) => getOrElse(found, () => path.join(pkg, "harnesses"))));
       const plugins = getOrUndefined(yield* option3(String7("VIBEST_HARNESSES"))) || beside;
       const searchPath = (yield* String7("PATH").pipe(withDefault3(""))).split(":").filter(Boolean);
       const { listModels } = yield* promise2(() => Promise.resolve().then(() => (init_models(), exports_models)));
@@ -16135,6 +16165,10 @@ var init_harness = __esm(() => {
   harnessOptions = forEach2(HARNESS_IDS, (id) => preflight(id, null, null).pipe(map7(() => ({ harness: id, available: true })), catchTag2("HarnessUnavailable", (e) => succeed7({ harness: id, available: false, problem: e.message }))), { concurrency: "unbounded" });
 });
 
+// src/extension.ts
+import path from "node:path";
+import url from "node:url";
+
 // ../../../node_modules/.pnpm/@effect+platform-node-shared@4.0.2_effect@4.0.2/node_modules/@effect/platform-node-shared/dist/NodeChildProcessSpawner.js
 init_Deferred();
 init_Duration();
@@ -16556,7 +16590,7 @@ var make18 = /* @__PURE__ */ gen2(function* () {
     if (isSink(stderrConfig.stream)) {
       stderr = transduce(stderr, stderrConfig.stream);
     }
-    const all = merge3(stdout, stderr);
+    const all = merge4(stdout, stderr);
     return {
       stdout,
       stderr,
@@ -17797,57 +17831,285 @@ var fromDuplex = (open, options) => withFiber2((fiber) => {
   }));
 });
 
-// ../../client/src/client.ts
+// ../../protocol/src/protocol.ts
+var PROTOCOL = 4;
+var MISMATCH_ACTION = "vibest update";
+var protocolMismatch = (caller, server, version) => ({
+  protocol: server,
+  version,
+  message: caller !== undefined && caller > server ? `vibestd is older (${version}); run ${MISMATCH_ACTION}` : `vibest was updated to ${version}; run ${MISMATCH_ACTION} to restart this agent on it`,
+  action: MISMATCH_ACTION
+});
+var PROTOCOL_HEADER = "vibest-protocol";
+var CALLER_HEADER = "vibest-caller";
+var SESSION_HEADER = "vibest-session-id";
+var REPOSITORY_HEADER = "vibest-repository";
+var PROJECT_HEADER = "vibest-project-id";
+var HARNESS_SESSION_HEADER = "vibest-harness-session-id";
+var AGENT_HEADER = "vibest-agent";
+var HARNESS_HEADER = "vibest-harness";
+var CWD_HEADER = "vibest-cwd";
+var RUNTIME_HEADER = "vibest-runtime";
+var PLUGIN_VERSION_HEADER = "vibest-plugin-version";
+var sessionHeaders = (who) => {
+  const headers = {
+    [PROTOCOL_HEADER]: String(PROTOCOL),
+    [CALLER_HEADER]: "session",
+    [SESSION_HEADER]: who.sessionId
+  };
+  const put = (name, value) => {
+    if (value)
+      headers[name] = value;
+  };
+  put(PROJECT_HEADER, who.projectId);
+  put(HARNESS_SESSION_HEADER, who.harnessSessionId);
+  put(AGENT_HEADER, who.agent);
+  put(HARNESS_HEADER, who.harness);
+  put(CWD_HEADER, who.cwd === undefined ? undefined : encodeURIComponent(who.cwd));
+  put(RUNTIME_HEADER, who.runtime);
+  put(PLUGIN_VERSION_HEADER, who.pluginVersion);
+  if (who.repositoryRoot !== undefined)
+    headers[REPOSITORY_HEADER] = who.repositoryRoot;
+  return headers;
+};
+
+// ../../schema/src/model.ts
 init_dist();
-init_process();
+var ProjectID = brand("ProjectID")(Int);
+var sessionId = brand("SessionID")(String6.check(isPattern2(/^[0-9a-f]{8}$/)));
+var SessionID = Object.assign(sessionId, {
+  create: () => {
+    let id = "";
+    for (let i = 0;i < 8; i++)
+      id += Math.floor(Math.random() * 16).toString(16);
+    return id;
+  }
+});
+var InboxID = brand("InboxID")(Int);
+var MessageID = brand("MessageID")(Int);
+var Time = Number6;
+var Json3 = Record(String6, Unknown2);
+var Project = Struct({
+  id: ProjectID,
+  directory: String6,
+  mainSessionId: optional2(SessionID)
+});
+var Runtime = Json3;
+var Session = Struct({
+  id: SessionID,
+  projectId: ProjectID,
+  parentSessionId: optional2(SessionID),
+  agentType: String6,
+  harness: String6,
+  directory: String6,
+  runtime: optional2(Runtime),
+  harnessSessionId: optional2(String6),
+  metadata: Json3,
+  createdAt: Time,
+  endedAt: optional2(Time)
+});
+var SenderType = Literals(["user", "session", "system", "plugin"]);
+var DeliveryStatus = Literals(["pending", "delivering", "delivered", "failed", "dropped"]);
+var Inbox = Struct({
+  id: InboxID,
+  recipientSessionId: SessionID,
+  senderType: SenderType,
+  senderId: optional2(String6),
+  content: String6,
+  resultMessageId: optional2(MessageID),
+  deliveryStatus: DeliveryStatus
+});
+var MessageStatus = Literals(["working", "completed", "failed", "interrupted", "lost", "not_started"]);
+var Message = Struct({
+  id: MessageID,
+  sessionId: SessionID,
+  inboxId: optional2(InboxID),
+  input: String6,
+  output: optional2(String6),
+  status: MessageStatus,
+  metadata: Json3,
+  startedAt: Time,
+  endedAt: optional2(Time)
+});
 
-// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/rpc/Rpc.js
-init_Context();
-init_Option();
-init_Pipeable();
-init_PrimaryKey();
-init_Schema();
+// ../../schema/src/plugin.ts
+init_dist();
 
-// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/rpc/RpcSchema.js
-init_Option();
-init_Predicate();
-init_Schema();
-init_Stream();
-var StreamSchemaTypeId = "~effect/rpc/RpcSchema/StreamSchema";
-function isStreamSchema(schema) {
-  return hasProperty(schema, StreamSchemaTypeId);
-}
-function getStreamSchemas(schema) {
-  return isStreamSchema(schema) ? some2({
-    success: schema.success,
-    error: schema.error
-  }) : none2();
+class AgentRefused extends TaggedError3()("AgentRefused", {
+  plugin: String6,
+  reason: String6
+}) {
+  get message() {
+    return `refused by ${this.plugin}: ${this.reason}`;
+  }
 }
-var schema2 = /* @__PURE__ */ declare(isStream);
-function Stream2(success, error) {
-  return make23(schema2.ast, {
-    [StreamSchemaTypeId]: StreamSchemaTypeId,
-    success,
-    error
-  });
+
+class HookFailed extends TaggedError3()("HookFailed", { message: String6 }) {
 }
+var Change = Struct({
+  field: String6,
+  from: optional2(Unknown2),
+  to: optional2(Unknown2),
+  overwrote: optional2(String6)
+});
+var TraceEntry = Struct({
+  plugin: String6,
+  hook: String6,
+  outcome: Literals(["ok", "refused", "crashed", "timeout"]),
+  ms: Number6,
+  changes: ArraySchema(Change),
+  reason: optional2(String6),
+  error: optional2(String6)
+});
+var Routing = Struct({
+  decidedBy: Record(String6, String6),
+  trace: ArraySchema(TraceEntry)
+});
+var PluginInfo = Struct({
+  id: String6,
+  source: String6,
+  revision: String6,
+  loadedAt: Number6,
+  status: Literals(["active", "failed"]),
+  error: optional2(String6),
+  calls: Number6,
+  changed: Number6,
+  crashed: Number6,
+  timedOut: Number6,
+  refused: Number6,
+  lastError: optional2(String6)
+});
 
-// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/rpc/Rpc.js
-var TypeId50 = "~effect/rpc/Rpc";
-var Proto18 = {
-  [TypeId50]: TypeId50,
-  pipe() {
-    return pipeArguments(this, arguments);
-  },
-  setSuccess(successSchema) {
-    return makeProto2({
-      _tag: this._tag,
-      payloadSchema: this.payloadSchema,
-      successSchema,
-      errorSchema: this.errorSchema,
-      defectSchema: this.defectSchema,
-      annotations: this.annotations,
-      middlewares: this.middlewares
+// ../../schema/src/project.ts
+init_dist();
+var ProjectKind = Literals(["docs", "memory", "scratch"]);
+var ProjectEntry = Struct({
+  path: String6,
+  size: Number6,
+  mtime: String6,
+  version: String6,
+  description: String6
+});
+var ProjectInfoResult = Struct({
+  instructions: String6,
+  docs: ArraySchema(ProjectEntry),
+  memory: ArraySchema(ProjectEntry),
+  scratch: ArraySchema(ProjectEntry),
+  scratchPath: String6
+});
+var ProjectListInput = Struct({ kind: ProjectKind });
+var ProjectReadInput = Struct({ kind: ProjectKind, path: String6 });
+var ProjectReadResult = Struct({ content: String6, version: String6 });
+var ProjectSearchInput = Struct({ query: String6, kind: optional2(ProjectKind) });
+var ProjectWriteInput = Struct({
+  kind: ProjectKind,
+  path: String6,
+  content: String6,
+  ifVersion: String6
+});
+var ProjectWriteResult = Struct({ version: String6 });
+var ProjectDeleteInput = Struct({ kind: ProjectKind, path: String6, ifVersion: String6 });
+
+class ProjectConflict extends TaggedError3()("ProjectConflict", {
+  message: String6
+}) {
+}
+
+class ProjectInvalid extends TaggedError3()("ProjectInvalid", {
+  message: String6
+}) {
+}
+
+// ../../schema/src/remove.ts
+init_dist();
+var RemoveOutcome = Struct({
+  id: String6,
+  processes: Literals(["exited", "alive", "unknown"]),
+  pane: Literals(["closed", "kept", "none"]),
+  workspace: Literals(["closed", "kept", "none"]),
+  worktree: Literals(["removed", "kept", "gone"]),
+  path: String6,
+  branch: NullOr(String6),
+  reasons: ArraySchema(String6)
+});
+
+// ../../protocol/src/rpc.ts
+init_session();
+
+// ../../schema/src/subscription.ts
+init_dist();
+init_session();
+var SubscriptionAccount = Struct({
+  kind: Literals(["subscription", "api-key", "none"]),
+  plan: optional2(String6),
+  provider: optional2(String6)
+});
+var SubscriptionLimit = Struct({
+  window: String6,
+  percent: Number6,
+  status: Literals(["available", "limited"]),
+  resetTime: NullOr(Number6)
+});
+var Subscription = Struct({
+  harness: Literals(HARNESS_IDS),
+  provider: String6,
+  machine: Literal2("local"),
+  account: SubscriptionAccount,
+  limits: ArraySchema(SubscriptionLimit),
+  updatedAt: Number6,
+  error: optional2(String6)
+});
+
+// ../../protocol/src/rpc.ts
+init_dist();
+
+// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/rpc/Rpc.js
+init_Context();
+init_Option();
+init_Pipeable();
+init_PrimaryKey();
+init_Schema();
+
+// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/rpc/RpcSchema.js
+init_Option();
+init_Predicate();
+init_Schema();
+init_Stream();
+var StreamSchemaTypeId = "~effect/rpc/RpcSchema/StreamSchema";
+function isStreamSchema(schema) {
+  return hasProperty(schema, StreamSchemaTypeId);
+}
+function getStreamSchemas(schema) {
+  return isStreamSchema(schema) ? some2({
+    success: schema.success,
+    error: schema.error
+  }) : none2();
+}
+var schema2 = /* @__PURE__ */ declare(isStream);
+function Stream2(success, error) {
+  return make23(schema2.ast, {
+    [StreamSchemaTypeId]: StreamSchemaTypeId,
+    success,
+    error
+  });
+}
+
+// ../../../node_modules/.pnpm/effect@4.0.2/node_modules/effect/dist/rpc/Rpc.js
+var TypeId50 = "~effect/rpc/Rpc";
+var Proto18 = {
+  [TypeId50]: TypeId50,
+  pipe() {
+    return pipeArguments(this, arguments);
+  },
+  setSuccess(successSchema) {
+    return makeProto2({
+      _tag: this._tag,
+      payloadSchema: this.payloadSchema,
+      successSchema,
+      errorSchema: this.errorSchema,
+      defectSchema: this.defectSchema,
+      annotations: this.annotations,
+      middlewares: this.middlewares
     });
   },
   setError(errorSchema) {
@@ -18513,7 +18775,7 @@ var makeNoSerialization = /* @__PURE__ */ fnUntraced2(function* (group, options)
         spanId: span.spanId,
         sampled: span.sampled
       } : {},
-      headers: merge4(parentFiber.getRef(CurrentHeaders), headers)
+      headers: merge5(parentFiber.getRef(CurrentHeaders), headers)
     });
     if (discard) {
       return send;
@@ -18587,7 +18849,7 @@ var makeNoSerialization = /* @__PURE__ */ fnUntraced2(function* (group, options)
         spanId: span.spanId,
         sampled: span.sampled
       } : {},
-      headers: merge4(fiber.getRef(CurrentHeaders), headers)
+      headers: merge5(fiber.getRef(CurrentHeaders), headers)
     }).pipe(span ? withParentSpan2(span, {
       captureStackTrace: false
     }) : identity, onError2((cause) => failCause4(queue, cause)), interruptible2, forkIn2(scope, {
@@ -18843,7 +19105,7 @@ var makeRpcSchemas = (codecFor) => {
 var CurrentHeaders = /* @__PURE__ */ Reference("effect/rpc/RpcClient/CurrentHeaders", {
   defaultValue: () => empty7
 });
-var withHeaders = /* @__PURE__ */ dual(2, (effect, headers) => updateService2(effect, CurrentHeaders, merge4(fromInput(headers))));
+var withHeaders = /* @__PURE__ */ dual(2, (effect, headers) => updateService2(effect, CurrentHeaders, merge5(fromInput(headers))));
 
 class Protocol extends (/* @__PURE__ */ Service()("effect/rpc/RpcClient/Protocol")) {
   static make = withRunClient;
@@ -19168,200 +19430,13 @@ var Service2 = () => (id, options) => {
   ServiceClass_.requiredForClient = options?.requiredForClient ?? false;
   return ServiceClass;
 };
-// ../../client/src/client.ts
-init_layout();
-
-// ../../protocol/src/protocol.ts
-var PROTOCOL = 3;
-var PROTOCOL_HEADER = "vibest-protocol";
-var CALLER_HEADER = "vibest-caller";
-var SESSION_HEADER = "vibest-session-id";
-var REPOSITORY_HEADER = "vibest-repository";
-
-// ../../protocol/src/rpc.ts
-init_dist();
-
-// ../../schema/src/plugin.ts
-init_dist();
-
-class AgentRefused extends TaggedError3()("AgentRefused", { plugin: String6, reason: String6 }) {
-  get message() {
-    return `refused by ${this.plugin}: ${this.reason}`;
-  }
-}
-
-class HookFailed extends TaggedError3()("HookFailed", { message: String6 }) {
-}
-var Change = Struct({
-  field: String6,
-  from: optional2(Unknown2),
-  to: optional2(Unknown2),
-  overwrote: optional2(String6)
-});
-var TraceEntry = Struct({
-  plugin: String6,
-  hook: String6,
-  outcome: Literals(["ok", "refused", "crashed", "timeout"]),
-  ms: Number6,
-  changes: ArraySchema(Change),
-  reason: optional2(String6),
-  error: optional2(String6)
-});
-var Routing = Struct({
-  decidedBy: Record(String6, String6),
-  trace: ArraySchema(TraceEntry)
-});
-var PluginInfo = Struct({
-  id: String6,
-  source: String6,
-  revision: String6,
-  loadedAt: Number6,
-  status: Literals(["active", "failed"]),
-  error: optional2(String6),
-  calls: Number6,
-  changed: Number6,
-  crashed: Number6,
-  timedOut: Number6,
-  refused: Number6,
-  lastError: optional2(String6)
-});
-
-// ../../schema/src/subscription.ts
-init_dist();
-init_session();
-var SubscriptionAccount = Struct({
-  kind: Literals(["subscription", "api-key", "none"]),
-  plan: optional2(String6),
-  provider: optional2(String6)
-});
-var SubscriptionLimit = Struct({
-  window: String6,
-  percent: Number6,
-  status: Literals(["available", "limited"]),
-  resetTime: NullOr(Number6)
-});
-var Subscription = Struct({
-  harness: Literals(HARNESS_IDS),
-  provider: String6,
-  machine: Literal2("local"),
-  account: SubscriptionAccount,
-  limits: ArraySchema(SubscriptionLimit),
-  updatedAt: Number6,
-  error: optional2(String6)
-});
-
-// ../../schema/src/project.ts
-init_dist();
-var ProjectKind = Literals(["docs", "memory", "scratch"]);
-var ProjectEntry = Struct({
-  path: String6,
-  size: Number6,
-  mtime: String6,
-  version: String6,
-  description: String6
-});
-var ProjectInfoResult = Struct({
-  instructions: String6,
-  docs: ArraySchema(ProjectEntry),
-  memory: ArraySchema(ProjectEntry),
-  scratch: ArraySchema(ProjectEntry),
-  scratchPath: String6
-});
-var ProjectListInput = Struct({ kind: ProjectKind });
-var ProjectReadInput = Struct({ kind: ProjectKind, path: String6 });
-var ProjectReadResult = Struct({ content: String6, version: String6 });
-var ProjectSearchInput = Struct({ query: String6, kind: optional2(ProjectKind) });
-var ProjectWriteInput = Struct({ kind: ProjectKind, path: String6, content: String6, ifVersion: String6 });
-var ProjectWriteResult = Struct({ version: String6 });
-var ProjectDeleteInput = Struct({ kind: ProjectKind, path: String6, ifVersion: String6 });
-
-class ProjectConflict extends TaggedError3()("ProjectConflict", { message: String6 }) {
-}
-
-class ProjectInvalid extends TaggedError3()("ProjectInvalid", { message: String6 }) {
-}
-
-// ../../schema/src/remove.ts
-init_dist();
-var RemoveOutcome = Struct({
-  id: String6,
-  processes: Literals(["exited", "alive", "unknown"]),
-  pane: Literals(["closed", "kept", "none"]),
-  workspace: Literals(["closed", "kept", "none"]),
-  worktree: Literals(["removed", "kept", "gone"]),
-  path: String6,
-  branch: NullOr(String6),
-  reasons: ArraySchema(String6)
-});
-
-// ../../schema/src/model.ts
-init_dist();
-var ProjectID = brand("ProjectID")(Int);
-var sessionId = brand("SessionID")(String6.check(isPattern2(/^[0-9a-f]{8}$/)));
-var SessionID = Object.assign(sessionId, {
-  create: () => {
-    let id = "";
-    for (let i = 0;i < 8; i++)
-      id += Math.floor(Math.random() * 16).toString(16);
-    return id;
-  }
-});
-var InboxID = brand("InboxID")(Int);
-var MessageID = brand("MessageID")(Int);
-var Time = Number6;
-var Json3 = Record(String6, Unknown2);
-var Project = Struct({
-  id: ProjectID,
-  directory: String6,
-  mainSessionId: optional2(SessionID)
-});
-var Runtime = Json3;
-var Session = Struct({
-  id: SessionID,
-  projectId: ProjectID,
-  parentSessionId: optional2(SessionID),
-  agentType: String6,
-  harness: String6,
-  directory: String6,
-  runtime: optional2(Runtime),
-  harnessSessionId: optional2(String6),
-  metadata: Json3,
-  createdAt: Time,
-  endedAt: optional2(Time)
-});
-var SenderType = Literals(["user", "session", "system", "plugin"]);
-var DeliveryStatus = Literals(["pending", "delivering", "delivered", "failed", "dropped"]);
-var Inbox = Struct({
-  id: InboxID,
-  recipientSessionId: SessionID,
-  senderType: SenderType,
-  senderId: optional2(String6),
-  content: String6,
-  resultMessageId: optional2(MessageID),
-  deliveryStatus: DeliveryStatus
-});
-var MessageStatus = Literals(["working", "completed", "failed", "interrupted", "lost", "not_started"]);
-var Message = Struct({
-  id: MessageID,
-  sessionId: SessionID,
-  inboxId: optional2(InboxID),
-  input: String6,
-  output: optional2(String6),
-  status: MessageStatus,
-  metadata: Json3,
-  startedAt: Time,
-  endedAt: optional2(Time)
-});
-
-// ../../protocol/src/rpc.ts
-init_session();
 // ../../protocol/package.json
 var package_default = {
   name: "@vibest/protocol",
-  version: "0.0.1-beta.12",
+  version: "0.0.1-beta.14",
   private: true,
-  type: "module",
   license: "MIT",
+  type: "module",
   exports: {
     "./*": "./src/*.ts"
   },
@@ -19381,28 +19456,43 @@ var DaemonIdentity = Struct({
   command: optional2(ArraySchema(String6)),
   startedAt: optional2(Number6)
 });
-var RuntimeStatus = Struct({ kind: String6, status: String6, reason: optional2(String6) });
+var RuntimeStatus = Struct({
+  kind: String6,
+  status: String6,
+  reason: optional2(String6)
+});
 var RuntimeDoctor = Struct({
   kind: String6,
   status: String6,
   reason: optional2(String6),
   name: String6,
-  checks: ArraySchema(Struct({ ok: Boolean3, subject: optional2(String6), text: String6, fix: optional2(String6) }))
+  checks: ArraySchema(Struct({
+    ok: Boolean3,
+    subject: optional2(String6),
+    text: String6,
+    fix: optional2(String6)
+  }))
 });
 var PingResult = Struct({
   protocol: optional2(Number6),
   version: String6,
   runtimes: optional2(ArraySchema(RuntimeStatus)),
-  ...DaemonIdentity.fields
+  ...DaemonIdentity.fields,
+  capabilities: optional2(Record(String6, Boolean3))
 });
 var VERSION = package_default.version;
 class ProtocolRejected extends TaggedError3()("ProtocolRejected", {
   method: String6,
-  protocol: NullOr(String6)
+  protocol: NullOr(String6),
+  mismatch: Struct({
+    protocol: Number6,
+    version: String6,
+    message: String6,
+    action: String6
+  })
 }) {
   get message() {
-    const got = this.protocol === null ? "none" : this.protocol;
-    return `${this.method} requires vibest protocol ${PROTOCOL}; the request sent ${got}. Restart vibestd with this vibest (\`vibest daemon\`). An old client that cannot read this error is still refused.`;
+    return `${this.method} refused: ${this.mismatch.message}`;
   }
 }
 
@@ -19412,7 +19502,10 @@ class InvalidCaller extends TaggedError3()("InvalidCaller", {
 }) {
 }
 
-class Forbidden2 extends TaggedError3()("Forbidden", { method: String6, message: String6 }) {
+class Forbidden2 extends TaggedError3()("Forbidden", {
+  method: String6,
+  message: String6
+}) {
 }
 
 class Caller extends Service()("vibest/Caller") {
@@ -19427,15 +19520,15 @@ var Blocker = Struct({ id: String6, reason: String6 });
 
 class DaemonBusy extends TaggedError3()("DaemonBusy", { blockers: ArraySchema(Blocker) }) {
   get message() {
-    return [
-      "vibestd was not stopped; still in use by:",
-      ...this.blockers.map((b) => `  ${b.id}: ${b.reason}`)
-    ].join(`
+    return ["vibestd was not stopped; still in use by:", ...this.blockers.map((b) => `  ${b.id}: ${b.reason}`)].join(`
 `);
   }
 }
 
-class WrongInstance extends TaggedError3()("WrongInstance", { expected: String6, actual: NullOr(String6) }) {
+class WrongInstance extends TaggedError3()("WrongInstance", {
+  expected: String6,
+  actual: NullOr(String6)
+}) {
   get message() {
     return `vibestd instance ${this.actual ?? "unknown"} answers, not ${this.expected}; nothing was stopped`;
   }
@@ -19458,7 +19551,12 @@ class CallerGate extends Service2()("vibest/CallerGate", {
 var protocol = (rpc) => rpc.middleware(ProtocolGate);
 var admitted = (rpc) => rpc.middleware(Admission);
 var scoped4 = (rpc) => rpc.middleware(CallerGate).middleware(ProtocolGate);
-var GitInfo = Struct({ branch: String6, pushed: Boolean3, saved: Boolean3, why: String6 });
+var GitInfo = Struct({
+  branch: String6,
+  pushed: Boolean3,
+  saved: Boolean3,
+  why: String6
+});
 var SessionInfo = Struct({
   id: String6,
   name: String6,
@@ -19488,17 +19586,6 @@ var SessionInfo = Struct({
 });
 var InboxMessage = Struct({ ...InboxRow.fields, details: Record(String6, Unknown2) });
 var SessionStatusInfo = Struct({ ...SessionInfo.fields, result: NullOr(InboxMessage) });
-var InboxResult = Struct({
-  generation: optional2(String6),
-  token: optional2(String6),
-  file: optional2(String6),
-  acked: optional2(Boolean3),
-  released: optional2(Boolean3),
-  already: optional2(Boolean3),
-  empty: optional2(Boolean3),
-  error: optional2(String6),
-  bytes: optional2(Number6)
-});
 
 class VibestRpcs extends make31(make29("Ping", { success: PingResult }), scoped4(admitted(make29("Spawn", {
   payload: {
@@ -19511,8 +19598,7 @@ class VibestRpcs extends make31(make29("Ping", { success: PingResult }), scoped4
     agent: optional2(String6),
     machine: optional2(RuntimeMachine),
     peer: optional2(String6),
-    archive: optional2(Boolean3),
-    access: optional2(Literals(["read", "write"]))
+    archive: optional2(Boolean3)
   },
   success: Struct({
     id: String6,
@@ -19521,17 +19607,41 @@ class VibestRpcs extends make31(make29("Ping", { success: PingResult }), scoped4
     model: optional2(String6),
     ...Routing.fields
   }),
-  error: Union2([InvalidCaller, Forbidden2, LimitReached, AllocationFailed, HarnessUnavailable, NotInRepository, NoHarnessChosen, NoRuntime, AgentRefused, NoSuchSession, RuntimeUnreachable, RuntimeIncompatible])
-}))), protocol(make29("Plugins", { success: ArraySchema(PluginInfo) })), protocol(make29("Runtimes.Doctor", { payload: { harnesses: ArraySchema(String6) }, success: ArraySchema(RuntimeDoctor) })), protocol(make29("Subscriptions", { success: ArraySchema(Subscription) })), protocol(make29("Republish", { success: Number6 })), scoped4(admitted(make29("Launch", {
+  error: Union2([
+    InvalidCaller,
+    Forbidden2,
+    LimitReached,
+    AllocationFailed,
+    HarnessUnavailable,
+    NotInRepository,
+    NoHarnessChosen,
+    NoRuntime,
+    AgentRefused,
+    NoSuchSession,
+    RuntimeUnreachable,
+    RuntimeIncompatible
+  ])
+}))), protocol(make29("Plugins", { success: ArraySchema(PluginInfo) })), protocol(make29("Runtimes.Doctor", {
+  payload: { harnesses: ArraySchema(String6) },
+  success: ArraySchema(RuntimeDoctor)
+})), protocol(make29("Subscriptions", { success: ArraySchema(Subscription) })), protocol(make29("Republish", { success: Number6 })), scoped4(admitted(make29("Launch", {
   payload: {
     argv: ArraySchema(String6),
     focus: Boolean3,
     machine: optional2(RuntimeMachine),
     runtime: optional2(String6)
   },
-  success: Struct({ runtime: String6, terminal: String6, place: String6, attach: NullOr(ArraySchema(String6)) }),
+  success: Struct({
+    runtime: String6,
+    terminal: String6,
+    place: String6,
+    attach: NullOr(ArraySchema(String6))
+  }),
   error: Union2([InvalidCaller, Forbidden2, NotInRepository, LaunchFailed, NoRuntime, AgentRefused])
-}))), scoped4(admitted(make29("Send", { payload: { id: String6, message: String6 }, error: Union2([Forbidden2, NoSuchSession]) }))), scoped4(admitted(make29("Interrupt", {
+}))), scoped4(admitted(make29("Send", {
+  payload: { id: String6, message: String6 },
+  error: Union2([Forbidden2, NoSuchSession])
+}))), scoped4(admitted(make29("Interrupt", {
   payload: { id: String6 },
   success: Struct({ message: String6 }),
   error: Union2([Forbidden2, NoSuchSession, SessionBusy, RuntimeUnreachable, NoRuntime])
@@ -19543,23 +19653,15 @@ class VibestRpcs extends make31(make29("Ping", { success: PingResult }), scoped4
   payload: { stopped: optional2(Boolean3), all: optional2(Boolean3) },
   success: ArraySchema(SessionInfo),
   error: Union2([Forbidden2])
-})), scoped4(make29("Get", { payload: { id: String6 }, success: SessionStatusInfo, error: Union2([Forbidden2, NoSuchSession]) })), scoped4(admitted(make29("Report", { payload: { message: String6 }, error: Union2([Forbidden2, NoSuchSession]) }))), scoped4(make29("Inbox.Subscribe", { success: String6, error: Union2([Forbidden2]), stream: true })), scoped4(admitted(make29("Inbox.Attach", {
-  payload: { claudeSessionId: String6, replace: Boolean3, terminal: String6, machine: optional2(RuntimeMachine) },
-  success: InboxResult,
-  error: Union2([InvalidCaller, Forbidden2, RuntimeUnreachable, RuntimeIncompatible])
-}))), scoped4(admitted(make29("Inbox.Pull", {
-  payload: { generation: String6, claudeSessionId: String6, terminal: String6, machine: optional2(RuntimeMachine) },
-  success: InboxResult,
-  error: Union2([InvalidCaller, Forbidden2, RuntimeUnreachable, RuntimeIncompatible])
-}))), scoped4(admitted(make29("Inbox.Ack", {
-  payload: { generation: String6, claudeSessionId: String6, token: String6, terminal: String6, machine: optional2(RuntimeMachine) },
-  success: InboxResult,
-  error: Union2([InvalidCaller, Forbidden2, RuntimeUnreachable, RuntimeIncompatible])
-}))), scoped4(admitted(make29("Inbox.Release", {
-  payload: { generation: String6, claudeSessionId: String6, token: String6, retry: Boolean3, terminal: String6, machine: optional2(RuntimeMachine) },
-  success: InboxResult,
-  error: Union2([InvalidCaller, Forbidden2, RuntimeUnreachable, RuntimeIncompatible])
-}))), protocol(admitted(make29("ResultReady", { payload: { sessionId: String6 } }))), protocol(admitted(make29("Prompt", { payload: { sessionId: String6, text: String6 } }))), scoped4(admitted(make29("Project.CoordinatorSession", {
+})), scoped4(make29("Get", {
+  payload: { id: String6 },
+  success: SessionStatusInfo,
+  error: Union2([Forbidden2, NoSuchSession])
+})), scoped4(make29("Peek", {
+  payload: { id: String6, lines: optional2(Number6) },
+  success: Struct({ text: String6 }),
+  error: Union2([Forbidden2, NoSuchSession, NoRuntime, RuntimeUnreachable])
+})), scoped4(admitted(make29("Report", { payload: { message: String6 }, error: Union2([Forbidden2, NoSuchSession]) }))), scoped4(make29("Inbox.Subscribe", { success: String6, error: Union2([Forbidden2]), stream: true })), protocol(admitted(make29("ResultReady", { payload: { sessionId: String6 } }))), protocol(admitted(make29("Prompt", { payload: { sessionId: String6, text: String6 } }))), scoped4(admitted(make29("Project.CoordinatorSession", {
   payload: {
     harness: Literals(HARNESS_IDS),
     fresh: Boolean3,
@@ -19568,9 +19670,16 @@ class VibestRpcs extends make31(make29("Ping", { success: PingResult }), scoped4
     runtime: optional2(String6),
     provider: optional2(String6),
     model: optional2(String6),
-    routing: optional2(Routing)
+    routing: optional2(Routing),
+    pid: optional2(Number6),
+    env: optional2(Record(String6, String6))
   },
-  success: Struct({ sessionId: String6, harnessSessionId: NullOr(String6) }),
+  success: Struct({
+    sessionId: String6,
+    harnessSessionId: NullOr(String6),
+    projectId: optional2(Number6),
+    runtime: optional2(String6)
+  }),
   error: Union2([InvalidCaller, Forbidden2, NotInRepository, RuntimeUnreachable, RuntimeIncompatible])
 }))), scoped4(make29("Project.StartMain", {
   payload: {
@@ -19586,14 +19695,30 @@ class VibestRpcs extends make31(make29("Ping", { success: PingResult }), scoped4
     runtime: String6,
     ...Routing.fields
   }),
-  error: Union2([InvalidCaller, Forbidden2, NotInRepository, NoHarnessChosen, AgentRefused, HarnessUnavailable, NoRuntime])
+  error: Union2([
+    InvalidCaller,
+    Forbidden2,
+    NotInRepository,
+    NoHarnessChosen,
+    AgentRefused,
+    HarnessUnavailable,
+    NoRuntime
+  ])
 })), scoped4(make29("Project.RunningCoordinator", {
   payload: { terminal: String6, machine: optional2(RuntimeMachine) },
-  success: NullOr(Struct({ harness: Literals(HARNESS_IDS), place: String6, runtime: String6, address: String6 })),
+  success: NullOr(Struct({
+    harness: Literals(HARNESS_IDS),
+    place: String6,
+    runtime: String6,
+    address: String6
+  })),
   error: Union2([InvalidCaller, Forbidden2, NotInRepository, RuntimeUnreachable, RuntimeIncompatible])
 })), scoped4(admitted(make29("Project.StopCoordinator", {
   payload: { runtime: String6, address: String6 },
-  success: Struct({ result: Literals(["stopped", "running", "moved"]) }),
+  success: Struct({
+    result: Literals(["stopped", "running", "moved", "unsupported"]),
+    reason: optional2(String6)
+  }),
   error: Union2([Forbidden2, NotInRepository, RuntimeUnreachable, NoRuntime, InvalidCaller])
 }))), protocol(admitted(make29("CoordinatorSessionReady", {
   payload: { sessionId: String6, harness: Literals(HARNESS_IDS), harnessSessionId: String6 }
@@ -19620,9 +19745,46 @@ class VibestRpcs extends make31(make29("Ping", { success: PingResult }), scoped4
   payload: { instance: String6 },
   success: Struct({ instance: String6 }),
   error: Union2([Forbidden2, WrongInstance, DaemonBusy, DaemonStopping])
+})), scoped4(make29("Daemon.Handoff", {
+  payload: { instance: String6, command: ArraySchema(String6) },
+  success: Struct({ instance: String6 }),
+  error: Union2([Forbidden2, WrongInstance, DaemonBusy, DaemonStopping, LaunchFailed])
+})), scoped4(make29("Session.Start", {
+  payload: { id: String6 },
+  success: Struct({
+    harness: Literals(HARNESS_IDS),
+    harnessSessionId: NullOr(String6),
+    provider: NullOr(String6),
+    model: NullOr(String6),
+    projectId: Number6,
+    runtime: optional2(String6),
+    env: Record(String6, String6)
+  }),
+  error: Union2([Forbidden2, NoSuchSession])
+})), scoped4(make29("Session.Ready", {
+  payload: { id: String6, pid: optional2(Number6) },
+  error: Union2([Forbidden2, NoSuchSession])
+})), scoped4(make29("Agents.Outdated", {
+  success: ArraySchema(Struct({
+    id: String6,
+    agent: String6,
+    harness: Literals(HARNESS_IDS),
+    integration: NullOr(String6),
+    working: Boolean3,
+    blocked: NullOr(String6)
+  })),
+  error: Forbidden2
+})), scoped4(make29("Agents.Restart", {
+  payload: { ids: ArraySchema(String6), after: optional2(Number6) },
+  error: Forbidden2
 }))) {
 }
 
+// ../../client/src/client.ts
+init_layout();
+init_dist();
+init_process();
+
 // ../../client/src/socket-connector.ts
 init_dist();
 
@@ -19632,7 +19794,10 @@ class SocketConnector extends Service()("vibest/SocketConnector") {
 // ../../client/src/client.ts
 var DAEMON_START_TIMEOUT = seconds(10);
 
-class DaemonUnavailable extends TaggedError3()("DaemonUnavailable", { socket: String6, message: String6 }) {
+class DaemonUnavailable extends TaggedError3()("DaemonUnavailable", {
+  socket: String6,
+  message: String6
+}) {
 }
 var stopByHand = (socket, pid) => {
   const p = pid === undefined ? "<pid>" : String(pid);
@@ -19653,7 +19818,8 @@ class IncompatibleDaemon extends TaggedError3()("IncompatibleDaemon", {
   get message() {
     const got = this.daemonProtocol === null ? "no protocol" : `protocol ${this.daemonProtocol}`;
     const self = `vibest ${this.client.version} (${this.client.command.map(shellQuote).join(" ")})`;
-    return `${described(this.daemonVersion, this.daemon)} on ${this.socket} speaks ${got}; ${self} speaks protocol ${PROTOCOL}. To replace it: vibest daemon restart (or ${stopByHand(this.socket, this.daemon.pid).replace(/^To replace it, /, "")}). A package-version difference alone does not require a restart.`;
+    const mismatch = protocolMismatch(PROTOCOL, this.daemonProtocol ?? 0, this.daemonVersion || "unknown");
+    return `${mismatch.message}. ${described(this.daemonVersion, this.daemon)} on ${this.socket} speaks ${got}; ${self} speaks protocol ${PROTOCOL}. If \`vibest daemon restart\` cannot replace it: ${stopByHand(this.socket, this.daemon.pid).replace(/^To replace it, /, "")}. A package-version difference alone does not require a restart.`;
   }
 }
 var protocolHeaders = () => ({ [PROTOCOL_HEADER]: String(PROTOCOL) });
@@ -19662,13 +19828,23 @@ var cliHeaders = (repositoryRoot) => ({
   [CALLER_HEADER]: "cli",
   [REPOSITORY_HEADER]: repositoryRoot
 });
-var sessionHeaders = (sessionId, repositoryRoot) => ({
-  ...protocolHeaders(),
-  [CALLER_HEADER]: "session",
-  [SESSION_HEADER]: sessionId,
-  ...repositoryRoot === undefined ? {} : { [REPOSITORY_HEADER]: repositoryRoot }
-});
-var claimHeaders = (claim) => claim._tag === "cli" ? cliHeaders(claim.repositoryRoot) : sessionHeaders(claim.sessionId, claim.repositoryRoot);
+var fromEnv2 = gen2(function* () {
+  const read = (name) => option3(String7(name)).pipe(map7((v) => getOrUndefined(v) || undefined));
+  return {
+    projectId: yield* read("VIBEST_PROJECT_ID"),
+    agent: yield* read("VIBEST_AGENT"),
+    harness: yield* read("VIBEST_HARNESS"),
+    runtime: yield* read("VIBEST_RUNTIME"),
+    cwd: (yield* Path).resolve(".")
+  };
+}).pipe(orElseSucceed2(() => ({})));
+var claimHeaders = (claim) => claim._tag === "cli" ? succeed7(cliHeaders(claim.repositoryRoot)) : map7(fromEnv2, (more) => sessionHeaders({
+  ...more,
+  sessionId: claim.sessionId,
+  repositoryRoot: claim.repositoryRoot,
+  harnessSessionId: claim.harnessSessionId,
+  pluginVersion: claim.pluginVersion
+}));
 var connect2 = (socket) => build(layerProtocolSocket({ pingInterval: "1 minute", pingTimeout: "1 day" }).pipe(provide2(effect(Socket, flatMap4(SocketConnector, (dial) => dial(socket)))), provide2(layerNdJsonRpc()))).pipe(flatMap4((protocol) => make30(VibestRpcs).pipe(provide4(protocol))));
 var readPing = (socket) => connect2(socket).pipe(flatMap4((client) => client.Ping(undefined)), timeout2("1 second"), option2, scoped2);
 var probe = (socket) => readPing(socket).pipe(map7(isSome2), orElseSucceed2(() => false));
@@ -19680,16 +19856,22 @@ var incompatibleDaemon = (socket, ping, self) => ping.protocol === PROTOCOL ? un
   daemon: { pid: ping.pid, instance: ping.instance, command: ping.command, startedAt: ping.startedAt },
   client: { version: VERSION, command: self }
 });
-var startDaemon = gen2(function* () {
+var spawnDaemon = (command, args = []) => gen2(function* () {
   const layout = yield* Layout;
   const path = yield* Path;
   const spawner = yield* ChildProcessSpawner;
-  const self = yield* VibestCommand;
-  const fs = yield* FileSystem;
   const log = path.join(layout.home, "vibestd.log");
-  const logAt = yield* fs.stat(log).pipe(map7((info) => Number(info.size)), orElseSucceed2(() => 0));
   yield* gen2(function* () {
-    const handle = yield* spawner.spawn(make17("sh", ["-c", `mkdir -p "$1" && shift && exec "$@" >>"${log}" 2>&1`, "sh", layout.home, ...self, "daemon", "--foreground"], {
+    const handle = yield* spawner.spawn(make17("sh", [
+      "-c",
+      `mkdir -p "$1" && shift && exec "$@" >>"${log}" 2>&1`,
+      "sh",
+      layout.home,
+      ...command,
+      "daemon",
+      "--foreground",
+      ...args
+    ], {
       detached: true,
       stdin: "ignore",
       stdout: "ignore",
@@ -19697,6 +19879,14 @@ var startDaemon = gen2(function* () {
     }));
     yield* handle.unref;
   }).pipe(scoped2, mapError3((e) => new DaemonUnavailable({ socket: layout.socket, message: e.message })));
+});
+var startDaemon = gen2(function* () {
+  const layout = yield* Layout;
+  const path = yield* Path;
+  const fs = yield* FileSystem;
+  const log = path.join(layout.home, "vibestd.log");
+  const logAt = yield* fs.stat(log).pipe(map7((info) => Number(info.size)), orElseSucceed2(() => 0));
+  yield* spawnDaemon(yield* VibestCommand);
   if (yield* awaitDaemon(layout.socket))
     return;
   const bytes = yield* fs.readFile(log).pipe(orElseSucceed2(() => new Uint8Array));
@@ -19713,16 +19903,22 @@ var withVibest = (claim, f, options) => gen2(function* () {
   const up = yield* readPing(layout.socket);
   if (isNone2(up)) {
     if (options?.start === false)
-      return yield* new DaemonUnavailable({ socket: layout.socket, message: `vibestd is unreachable on ${layout.socket} (not running, or this process may not connect to its socket); ask the user to check it, or to run: vibest daemon` });
+      return yield* new DaemonUnavailable({
+        socket: layout.socket,
+        message: `vibestd is unreachable on ${layout.socket} (not running, or this process may not connect to its socket); ask the user to check it, or to run: vibest daemon`
+      });
     yield* startDaemon;
   }
   const ping = isSome2(up) ? up.value : getOrUndefined(yield* readPing(layout.socket));
   if (ping === undefined)
-    return yield* new DaemonUnavailable({ socket: layout.socket, message: `vibestd did not answer Ping on ${layout.socket}` });
+    return yield* new DaemonUnavailable({
+      socket: layout.socket,
+      message: `vibestd did not answer Ping on ${layout.socket}`
+    });
   const incompatible = incompatibleDaemon(layout.socket, ping, yield* VibestCommand);
   if (incompatible)
     return yield* incompatible;
-  return yield* withHeaders(connect2(layout.socket).pipe(flatMap4((client) => f(client))), claimHeaders(claim));
+  return yield* withHeaders(connect2(layout.socket).pipe(flatMap4((client) => f(client))), yield* claimHeaders(claim));
 }).pipe(scoped2);
 
 // ../../core/src/guard.ts
@@ -19774,7 +19970,21 @@ var interactive = gen2(function* () {
 });
 
 // ../../core/src/guard.ts
-var PATH_TOOLS = new Set(["read", "write", "edit", "multiedit", "notebookedit", "ls", "grep", "glob", "find", "delete", "list", "readlints"]);
+var PATH_TOOLS = new Set([
+  "read",
+  "write",
+  "edit",
+  "multiedit",
+  "notebookedit",
+  "notebookread",
+  "ls",
+  "grep",
+  "glob",
+  "find",
+  "delete",
+  "list",
+  "readlints"
+]);
 var SEARCH_TOOLS = new Set(["grep", "glob", "find"]);
 var EDIT_TOOLS = new Set(["write", "edit", "multiedit", "notebookedit"]);
 var fileWritingTool = (tool) => {
@@ -19954,69 +20164,14 @@ var HERDR_CONTROL = new Set(["agent", "pane", "tab", "workspace", "worktree", "s
 var HARNESS_CLIS = new Set(["pi", "claude", "cursor-agent"]);
 var GH_UNSAFE = new Set(["alias", "extension", "ext", "config", "auth"]);
 var firstWord = (words) => words.find((w) => !w.startsWith("-")) ?? "";
-var WRITE_BIN = new Set(["rm", "rmdir", "mv", "cp", "tee", "touch", "mkdir", "truncate", "dd", "ln", "unlink", "install"]);
-var GIT_WRITE = new Set(["add", "commit", "push", "merge", "rebase", "reset", "checkout", "switch", "restore", "clean", "worktree", "pull", "cherry-pick", "revert", "am", "apply", "stash", "init", "mv", "rm"]);
-var gitSubcommand = (argv) => {
-  for (let i = 1;i < argv.length; i++) {
-    const word = argv[i];
-    if (word === "-c" || word === "-C") {
-      i++;
-      continue;
-    }
-    if (!word.startsWith("-"))
-      return word;
-  }
-  return "";
-};
-var writesByRedirect = (command) => {
-  let quote;
-  for (let i = 0;i < command.length; i++) {
-    const c = command[i];
-    if (quote === "'") {
-      if (c === "'")
-        quote = undefined;
-      continue;
-    }
-    if (quote === '"') {
-      if (c === '"')
-        quote = undefined;
-      else if (c === "\\")
-        i++;
-      continue;
-    }
-    if (c === "'" || c === '"') {
-      quote = c;
-      continue;
-    }
-    if (c === "\\") {
-      i++;
-      continue;
-    }
-    if (c === ">" && command[i + 1] !== "&")
-      return true;
-  }
-  return false;
-};
-var writeLike = (command) => {
-  if (writesByRedirect(command))
-    return true;
-  for (const p of programsOf(command)) {
-    const name = base(p.argv[0] ?? "");
-    if (WRITE_BIN.has(name))
-      return true;
-    if (name === "git" && GIT_WRITE.has(gitSubcommand(p.argv)))
-      return true;
-    if ((name === "sed" || name === "perl") && p.argv.slice(1).some((a) => a === "-i" || a.startsWith("-i") || a === "--in-place" || a.startsWith("--in-place=")))
-      return true;
-  }
-  return false;
-};
 var shellBlock = (command, vibest, coordinator) => {
   for (const p of programsOf(command)) {
     const [program = "", ...rest] = p.argv;
     const name = base(program);
     if (name === "herdr" && HERDR_CONTROL.has(firstWord(rest)))
       return "Agents must not control herdr agents, panes, tabs, workspaces or worktrees; vibest manages them.";
+    if (name === "herdr" && !coordinator)
+      return "Sessions do not run herdr; vibest manages it.";
     if (coordinator && HARNESS_CLIS.has(name))
       return `The coordinator does not start ${name} itself: it would inherit the coordinator's identity and report its turns as the coordinator's. Start agents with vibest run.`;
     if (coordinator && name === "gh" && GH_UNSAFE.has(firstWord(rest)))
@@ -20074,8 +20229,7 @@ var coordinator = (call) => gen2(function* () {
     return "The coordinator does not edit files; hand the change to a session.";
   return;
 });
-var OFF_LIMITS = "The Project directory is off limits to sessions, except your scratchpad.";
-var READ_ONLY = "This session is read-only; it does not edit files or run commands that write.";
+var OFF_LIMITS = "The project directory is off limits to sessions, except your scratchpad.";
 var SHELL_WORDS = /[^\s'"`;|&()<>=,]+/g;
 var SHELL_SEARCH = /(?:^|[\s;&|(])(?:rg|ag|ack|grep|egrep|find|fd|tree|du)\s/;
 var session = fn2("Guard.session")(function* (call) {
@@ -20084,18 +20238,16 @@ var session = fn2("Guard.session")(function* (call) {
   const layout = yield* Layout;
   const projects = yield* physical(layout.projects);
   const vibestHome = yield* physical(layout.home);
-  const projectsRoot = path.join(vibestHome, "projects");
-  const inScratch = (target) => {
-    const rel = path.relative(projectsRoot, target);
-    return rel !== "" && !rel.startsWith("..") && !path.isAbsolute(rel) && rel.split(path.sep).includes("scratch");
-  };
+  const own = getOrUndefined(yield* option3(String7("VIBEST_SCRATCH")));
+  const scratch = own ? yield* physical(own) : undefined;
   const inside = (p, dir) => p === dir || p.startsWith(dir + path.sep);
+  const inScratch = (target) => scratch !== undefined && inside(target, scratch);
   const resolve = (raw) => gen2(function* () {
     const p = yield* toolPath(raw, call.cwd, home);
     return p === undefined ? undefined : [yield* physical(p), yield* physical(path.normalize(p))];
   });
   const BAD_URL = "The call names a file URL vibest cannot read; refused.";
-  const blocked = (target, search) => (inScratch(target) ? false : inside(target, projects)) || search && inside(projects, target);
+  const blocked = (target, search) => search && inside(projects, target) || inside(target, projects) && !inScratch(target);
   const tool = call.tool.toLowerCase();
   if (SHELL_TOOLS.has(tool)) {
     const command = shellCommand(call.input);
@@ -20144,18 +20296,7 @@ var decodePreToolUse = decodeUnknownEffect2(fromJsonString2(Struct({
   workspace_roots: optional2(ArraySchema(String6))
 })));
 var COORDINATOR = "coordinator";
-var readSession = (call) => gen2(function* () {
-  const denied = yield* session(call);
-  if (denied)
-    return denied;
-  if (fileWritingTool(call.tool))
-    return READ_ONLY;
-  const command = SHELL_TOOLS.has(call.tool.toLowerCase()) ? shellCommand(call.input) : undefined;
-  if (command !== undefined && writeLike(command))
-    return READ_ONLY;
-  return;
-});
-var rulesOf = (agent, access = "write") => agent === COORDINATOR ? coordinator : access === "read" ? readSession : session;
+var rulesOf = (agent) => agent === COORDINATOR ? coordinator : session;
 
 // ../../core/src/results.ts
 init_dist();
@@ -20170,7 +20311,12 @@ var encodeReportLine = (line) => `${JSON.stringify(line)}
 `;
 var ReportLineJson = fromJsonString2(Union2([
   Struct({ turn: Literals(["start"]), ts: Number6, prompt: String6 }),
-  Struct({ turn: Literals(["end"]), ts: Number6, harness: Literals(HARNESS_IDS), payload: Record(String6, Unknown2) })
+  Struct({
+    turn: Literals(["end"]),
+    ts: Number6,
+    harness: Literals(HARNESS_IDS),
+    payload: Record(String6, Unknown2)
+  })
 ]));
 var appendReportLine = (file, line) => gen2(function* () {
   const fs = yield* FileSystem;
@@ -20199,15 +20345,14 @@ var readResult = fn2("readResult")(function* (file) {
       mtimeMs: match(info.mtime, { onNone: () => 0, onSome: (d) => d.getTime() }),
       text: typeof text === "string" ? text : "",
       error: typeof error === "string" && error ? typeof details === "string" && details ? `${error}: ${details}` : error : undefined,
-      conversationId: typeof conversation === "string" && /^\w[\w.:-]{0,127}$/.test(conversation) ? conversation : undefined
+      conversationId: typeof conversation === "string" && /^\w[\w.:-]{0,127}$/.test(conversation) ? conversation : undefined,
+      interrupted: envelope.payload.aborted === true
     };
   }).pipe(option2);
 });
 
 // src/extension.ts
 init_dist();
-import path from "node:path";
-import url from "node:url";
 
 // src/pi.ts
 init_dist();
@@ -20447,7 +20592,13 @@ function tool_groups_default(pi) {
       for (const call of nested) {
         if (!call?.id || calls.has(call.id))
           continue;
-        remember(call.id, { name: call.name, args: call.arguments, parentId: message.toolCallId, isError: call.status === "error", isPartial: call.status === "unfinished" });
+        remember(call.id, {
+          name: call.name,
+          args: call.arguments,
+          parentId: message.toolCallId,
+          isError: call.status === "error",
+          isPartial: call.status === "unfinished"
+        });
       }
       return;
     }
@@ -20555,7 +20706,18 @@ function tool_groups_default(pi) {
     const search = named("tool_search").length;
     if (search)
       parts.push(times(search, "tool search", "tool searches"));
-    const known = new Set(["codemode", "read", "write", "edit", "bash", "powershell", "grep", "find", "ls", "tool_search"]);
+    const known = new Set([
+      "codemode",
+      "read",
+      "write",
+      "edit",
+      "bash",
+      "powershell",
+      "grep",
+      "find",
+      "ls",
+      "tool_search"
+    ]);
     const other = all.filter((item) => item.name && !known.has(item.name)).length;
     if (other)
       parts.push(times(other, "other tool call", "other tool calls"));
@@ -20729,12 +20891,24 @@ function tool_groups_default(pi) {
     if (!event?.toolCallId)
       return;
     runActive = true;
-    remember(event.toolCallId, { name: event.toolName, args: event.args, parentId: event.parentToolCallId, isPartial: true });
+    remember(event.toolCallId, {
+      name: event.toolName,
+      args: event.args,
+      parentId: event.parentToolCallId,
+      isPartial: true
+    });
   });
   pi.on("tool_execution_end", (event) => {
     if (!event?.toolCallId)
       return;
-    remember(event.toolCallId, { name: event.toolName, args: event.args, parentId: event.parentToolCallId, isError: event.isError === true, isPartial: false, result: event.result });
+    remember(event.toolCallId, {
+      name: event.toolName,
+      args: event.args,
+      parentId: event.parentToolCallId,
+      isError: event.isError === true,
+      isPartial: false,
+      result: event.result
+    });
   });
   pi.registerToolRenderer((toolName, next) => {
     const later = next();
@@ -20767,15 +20941,21 @@ function tool_groups_default(pi) {
         let native;
         if (renderers?.renderCall) {
           try {
-            native = renderers.renderCall(args, theme, { ...ctx, expanded: true, lastComponent: ctx.lastComponent?.native });
+            native = renderers.renderCall(args, theme, {
+              ...ctx,
+              expanded: true,
+              lastComponent: ctx.lastComponent?.native
+            });
           } catch {
             native = undefined;
           }
         }
-        const body = native ? frameComponent(renderers, native, ctx.outputPad) : { render(innerWidth) {
-          const { pad, limit } = gutter(innerWidth, ctx.outputPad);
-          return indent(plainCall(toolName, args, limit), pad);
-        } };
+        const body = native ? frameComponent(renderers, native, ctx.outputPad) : {
+          render(innerWidth) {
+            const { pad, limit } = gutter(innerWidth, ctx.outputPad);
+            return indent(plainCall(toolName, args, limit), pad);
+          }
+        };
         return {
           native,
           invalidate() {
@@ -20832,15 +21012,20 @@ function tool_groups_default(pi) {
         let native;
         if (renderers?.renderResult) {
           try {
-            native = renderers.renderResult(result, { ...options, expanded: true }, theme, { ...ctx, lastComponent: ctx.lastComponent?.native });
+            native = renderers.renderResult(result, { ...options, expanded: true }, theme, {
+              ...ctx,
+              lastComponent: ctx.lastComponent?.native
+            });
           } catch {
             native = undefined;
           }
         }
-        const body = native ? frameComponent(renderers, native, ctx.outputPad) : { render(innerWidth) {
-          const { pad, limit } = gutter(innerWidth, ctx.outputPad);
-          return indent(plainResult(result, ctx.isError, limit), pad);
-        } };
+        const body = native ? frameComponent(renderers, native, ctx.outputPad) : {
+          render(innerWidth) {
+            const { pad, limit } = gutter(innerWidth, ctx.outputPad);
+            return indent(plainResult(result, ctx.isError, limit), pad);
+          }
+        };
         return {
           native,
           invalidate() {
@@ -20867,7 +21052,12 @@ function readLease(proto) {
 }
 function writeLease(proto, lease) {
   if (lease)
-    Object.defineProperty(proto, "vibestCompactUserMessagesLease", { value: lease, configurable: true, enumerable: false, writable: false });
+    Object.defineProperty(proto, "vibestCompactUserMessagesLease", {
+      value: lease,
+      configurable: true,
+      enumerable: false,
+      writable: false
+    });
   else
     delete proto.vibestCompactUserMessagesLease;
 }
@@ -21028,6 +21218,12 @@ var lastReply = (messages) => {
   const text = (message?.content ?? []).flatMap((c) => c.type === "text" ? [c.text] : []).join("");
   return { text, error: message?.stopReason === "error" ? message.errorMessage || "error" : "" };
 };
+var piHeaders = (sessionId, ctx) => claimHeaders({
+  _tag: "session",
+  sessionId,
+  harnessSessionId: ctx.sessionManager.getSessionId(),
+  pluginVersion: VERSION
+});
 var session2 = (sessionId) => effectDiscard(gen2(function* () {
   const pi = yield* Pi;
   const layout = yield* Layout;
@@ -21035,11 +21231,16 @@ var session2 = (sessionId) => effectDiscard(gen2(function* () {
   const reply = yield* make28({ text: "", error: "" });
   yield* pi.handle("session_start", (_e, ctx) => set2(root, ctx.mode === "tui"));
   yield* pi.handle("agent_end", (e) => set2(reply, lastReply(e.messages)));
-  yield* pi.handle("input", (e) => gen2(function* () {
+  yield* pi.handle("input", (e, ctx) => gen2(function* () {
     if (e.source === "extension" || e.text.trim() === "")
       return;
-    yield* connect2(layout.socket).pipe(flatMap4((client) => client.Prompt({ sessionId, text: e.text }, { headers: protocolHeaders() })), scoped2, timeout2("500 millis"), ignore2);
-    yield* appendReportLine(layout.reportFile(sessionId), { turn: "start", ts: yield* currentTimeMillis2, prompt: e.text });
+    const headers = yield* piHeaders(sessionId, ctx);
+    yield* connect2(layout.socket).pipe(flatMap4((client) => client.Prompt({ sessionId, text: e.text }, { headers })), scoped2, timeout2("500 millis"), ignore2);
+    yield* appendReportLine(layout.reportFile(sessionId), {
+      turn: "start",
+      ts: yield* currentTimeMillis2,
+      prompt: e.text
+    });
     yield* writeTerminalStatus("working");
   }));
   yield* pi.handle("agent_settled", (e, ctx) => gen2(function* () {
@@ -21049,9 +21250,15 @@ var session2 = (sessionId) => effectDiscard(gen2(function* () {
     const ts = Math.floor((yield* currentTimeMillis2) / 1000);
     const payload = { text, error: error || (e.aborted ? "aborted" : ""), aborted: e.aborted };
     yield* writeAtomic(layout.resultFile(sessionId), encodeJson({ harness: "pi", ts, payload }));
-    yield* appendReportLine(layout.reportFile(sessionId), { turn: "end", ts: yield* currentTimeMillis2, harness: "pi", payload });
+    yield* appendReportLine(layout.reportFile(sessionId), {
+      turn: "end",
+      ts: yield* currentTimeMillis2,
+      harness: "pi",
+      payload
+    });
     yield* writeTerminalStatus("idle");
-    yield* connect2(layout.socket).pipe(flatMap4((client) => client.ResultReady({ sessionId }, { headers: protocolHeaders() })), scoped2, timeout2("500 millis"), ignore2);
+    const headers = yield* piHeaders(sessionId, ctx);
+    yield* connect2(layout.socket).pipe(flatMap4((client) => client.ResultReady({ sessionId }, { headers })), scoped2, timeout2("500 millis"), ignore2);
   }));
 }));
 var reportSession = fn2("reportSession")(function* (sessionId) {
@@ -21063,7 +21270,8 @@ var reportSession = fn2("reportSession")(function* (sessionId) {
     const harnessSessionId = ctx.sessionManager.getSessionId();
     if (ctx.mode !== "tui" || (yield* get2(reported)) === harnessSessionId)
       return;
-    yield* connect2(layout.socket).pipe(flatMap4((client) => client.CoordinatorSessionReady({ sessionId, harness: "pi", harnessSessionId }, { headers: protocolHeaders() })), scoped2, timeout2("1 second"), andThen2(set2(reported, harnessSessionId)), catchCause2((cause) => hasInterruptsOnly2(cause) ? void_3 : sync2(() => ctx.ui.notify(`vibest: the coordinator's conversation may not have been saved: ${pretty(cause)}`, "warning"))), forkIn2(scope));
+    const headers = yield* piHeaders(sessionId, ctx);
+    yield* connect2(layout.socket).pipe(flatMap4((client) => client.CoordinatorSessionReady({ sessionId, harness: "pi", harnessSessionId }, { headers })), scoped2, timeout2("1 second"), andThen2(set2(reported, harnessSessionId)), catchCause2((cause) => hasInterruptsOnly2(cause) ? void_3 : sync2(() => ctx.ui.notify(`vibest: the coordinator's conversation may not have been saved: ${pretty(cause)}`, "warning"))), forkIn2(scope));
   });
   yield* pi.handle("session_start", (event, ctx) => event.reason === "new" || event.reason === "resume" || event.reason === "fork" ? send(ctx) : void_3);
   yield* pi.handle("agent_end", (_event, ctx) => send(ctx));
@@ -21082,18 +21290,30 @@ var coordinator2 = effectDiscard(gen2(function* () {
   yield* reportSession(sessionId.value);
   const started = yield* make6();
   yield* pi.handle("session_start", (_e, ctx) => ctx.mode === "tui" ? succeed4(started, ctx).pipe(asVoid2) : void_3);
-  const subscribe = withVibest({ _tag: "session", sessionId: sessionId.value }, (client) => client["Inbox.Subscribe"](undefined).pipe(runForEach2((content) => pi.sendMessage({ customType: "vibest", content, display: false }, { triggerTurn: true, deliverAs: "followUp" }))), { start: false }).pipe(retry2({ while: (e) => e._tag === "RpcClientError" || e._tag === "DaemonUnavailable", schedule: spaced("2 seconds") }), repeat2(spaced("2 seconds")));
-  yield* _await(started).pipe(flatMap4((ctx) => subscribe.pipe(catchCause2((cause) => hasInterruptsOnly2(cause) ? void_3 : sync2(() => ctx.ui.notify(`vibest: inbox subscription ended: ${pretty(cause)}`, "error"))))), forkScoped2);
+  const subscribe = (ctx) => withVibest({
+    _tag: "session",
+    sessionId: sessionId.value,
+    harnessSessionId: ctx.sessionManager.getSessionId(),
+    pluginVersion: VERSION
+  }, (client) => client["Inbox.Subscribe"](undefined).pipe(runForEach2((content) => pi.sendMessage({ customType: "vibest", content, display: false }, { triggerTurn: true, deliverAs: "followUp" })), catchCause2((cause) => hasInterruptsOnly2(cause) ? void_3 : failCause3(cause))), { start: false }).pipe(retry2({
+    while: (e) => e._tag === "RpcClientError" || e._tag === "DaemonUnavailable",
+    schedule: spaced("2 seconds")
+  }), repeat2(spaced("2 seconds")));
+  yield* _await(started).pipe(flatMap4((ctx) => subscribe(ctx).pipe(catchCause2((cause) => hasInterruptsOnly2(cause) ? void_3 : sync2(() => ctx.ui.notify(`vibest: inbox subscription ended: ${pretty(cause)}`, "error"))))), forkScoped2);
+}));
+var ready = (sessionId) => effectDiscard(gen2(function* () {
+  const pi = yield* Pi;
+  yield* pi.handle("session_start", (_e, ctx) => ctx.mode !== "tui" ? void_3 : withVibest({ _tag: "session", sessionId, pluginVersion: VERSION }, (client) => client["Session.Ready"]({ id: sessionId, pid: process.pid }), { start: false }).pipe(timeout2("2 seconds"), ignore2));
 }));
 var extension2 = unwrap(gen2(function* () {
   const agent = getOrUndefined(yield* option3(String7("VIBEST_AGENT")));
   if (!agent)
     return empty4;
-  const access = getOrUndefined(yield* option3(String7("VIBEST_ACCESS")));
-  const guard = effectDiscard(guarded(rulesOf(agent, access === "read" ? "read" : "write")));
+  const guarding = effectDiscard(guarded(rulesOf(agent)));
+  const sessionId = getOrUndefined(yield* option3(String7("VIBEST_SESSION_ID")));
+  const guard = sessionId ? merge2(guarding, ready(sessionId)) : guarding;
   if (agent === COORDINATOR)
     return coordinator2.pipe(provideMerge(guard));
-  const sessionId = getOrUndefined(yield* option3(String7("VIBEST_SESSION_ID")));
   return sessionId ? session2(sessionId).pipe(provideMerge(guard)) : guard;
 }));
 var vibestCommand = effect(VibestCommand, schema(fromJsonString2(ArraySchema(String6)), "VIBEST_COMMAND").pipe(withDefault3(["vibest"])));