@workerdeck/server 3.2.0 → 3.4.0

package/build/index.mjs

@@ -1,7 +1,7 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { createServer } from "node:http";
 import { WebSocketServer } from "ws";
-import { BrowserBridgeExecutor, PEER_MESSAGE_MAX_CHARS, PEER_RECENT_DEFAULT, PEER_RECENT_MAX, SHELL_REFUSAL, SHELL_REFUSAL as SHELL_REFUSAL$1, SessionRunner, TTY_REDRAW_CARRY, agentMayWrite, attachmentKind, checkClaudeAuth, clampShellTail, createEngineSession, encodeShellKeys, getEngineAdapter, installPeerDirectory, installShellDirectory, isSlashCommand, normalizeMediaType, peerDirectoryHandle, peerSummary, recentLines, shellDirectoryHandle, shellOwnershipRefusal, shellSummary, shellTail, shellToolNeedsCard, ttyRedraws, ttyText, withoutGatewaySecrets } from "@workerdeck/core";
+import { BrowserBridgeExecutor, PEER_MESSAGE_MAX_CHARS, PEER_RECENT_DEFAULT, PEER_RECENT_MAX, SHELL_REFUSAL, SHELL_REFUSAL as SHELL_REFUSAL$1, SessionRunner, TTY_REDRAW_CARRY, agentMayWrite, attachmentKind, checkClaudeAuth, clampShellTail, contextResetDirectoryHandle, createEngineSession, encodeShellKeys, getEngineAdapter, installContextResetDirectory, installPeerDirectory, installShellDirectory, isSlashCommand, normalizeMediaType, peerDirectoryHandle, peerSummary, recentLines, shellDirectoryHandle, shellOwnershipRefusal, shellSummary, shellTail, shellToolNeedsCard, ttyRedraws, ttyText, withoutGatewaySecrets } from "@workerdeck/core";
 import { JobQueue } from "@workerdeck/queue";
 import { ENGINE_CAPABILITIES, PEER_MENTION_MAX, PROTOCOL_VERSION, SHELL_ARTIFACT_MAX_BYTES, SHELL_ARTIFACT_TTL_MS, SHELL_ATTACH_REPLAY_BYTES, SHELL_COLS, SHELL_COMMAND_MAX, SHELL_INPUT_MAX, SHELL_LABEL_MAX, SHELL_LINGER_MS, SHELL_MAX_COLS, SHELL_MAX_ROWS, SHELL_MAX_RUNNING_PER_SESSION, SHELL_MAX_RUNNING_TOTAL, SHELL_MIN_COLS, SHELL_MIN_ROWS, SHELL_READ_MAX_LINES, SHELL_ROWS, SHELL_SPILL_BYTES, SHELL_TAIL_FLUSH_MS, SHELL_TAIL_RING_BYTES, SHELL_WAIT_DEFAULT_MS, SHELL_WAIT_MAX_MS, costOfByModel, imagePartRef, isJobRun, mergeByModel, mergePricing, peerMentionKey, peerMentionSlug, pickCreateSessionRequest, scanPeerMentions, sessionState, subscriptionComparison, supportsPermissionMode } from "@workerdeck/protocol";
 import { chmodSync, closeSync, constants, createReadStream, existsSync, fstatSync, ftruncateSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
@@ -10,6 +10,7 @@ import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "nod
 import { chmod, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
 import xtermHeadless from "@xterm/headless";
+import { connectRelay, parseRelayPeerId } from "@workerdeck/relay-client";
 //#region src/lifecycle.ts
 const SOCKET_CLOSE_GRACE_MS = 250;
 const CLOSE_DEADLINE_MS = 1e3;
@@ -78,6 +79,7 @@ function closeServer(deps) {
 		shells?.killAll("server_stopped");
 		const flushed = shells?.flush().catch((error) => deps.diagnose(error, "shell-flush")) ?? Promise.resolve();
 		parking.close();
+		deps.engineSleep.close();
 		registry.closeAll();
 		for (const ws of wss.clients) ws.close(1001, "server shutting down");
 		deps.closeQueueSockets();
@@ -221,6 +223,23 @@ function cwdAllowed(cwd, roots) {
 		return resolved === r || resolved.startsWith(r + sep);
 	});
 }
+function listDirs(path) {
+	try {
+		return readdirSync(path, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort();
+	} catch {
+		return [];
+	}
+}
+function listMd(path) {
+	try {
+		return readdirSync(path).filter((file) => file.endsWith(".md")).map((file) => file.slice(0, -3)).sort();
+	} catch {
+		return [];
+	}
+}
+function count(rules) {
+	return Array.isArray(rules) ? rules.length : 0;
+}
 function readProfileConfig(profile) {
 	const dir = profile.configDir;
 	if (!dir) return {
@@ -229,22 +248,8 @@ function readProfileConfig(profile) {
 		agents: [],
 		commands: []
 	};
-	const listDirs = (path) => {
-		try {
-			return readdirSync(path, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort();
-		} catch {
-			return [];
-		}
-	};
-	const listMd = (path) => {
-		try {
-			return readdirSync(path).filter((file) => file.endsWith(".md")).map((file) => file.slice(0, -3)).sort();
-		} catch {
-			return [];
-		}
-	};
 	const snapshot = {
-		hasUserMemory: existsSync(join(dir, "CLAUDE.md")),
+		hasUserMemory: ["CLAUDE.md", "AGENTS.md"].some((name) => existsSync(join(dir, name))),
 		skills: listDirs(join(dir, "skills")),
 		agents: listMd(join(dir, "agents")),
 		commands: listMd(join(dir, "commands"))
@@ -252,7 +257,6 @@ function readProfileConfig(profile) {
 	try {
 		const raw = JSON.parse(readFileSync(join(dir, "settings.json"), "utf8"));
 		const permissions = raw.permissions ?? {};
-		const count = (rules) => Array.isArray(rules) ? rules.length : 0;
 		snapshot.settings = {
 			model: typeof raw.model === "string" ? raw.model : void 0,
 			defaultPermissionMode: typeof permissions.defaultMode === "string" ? permissions.defaultMode : void 0,
@@ -387,6 +391,15 @@ function itemRoute(rawId, parts) {
 		id: decode(rawId),
 		stopTaskId: decode(third)
 	};
+	if (length === 3 && section === "tasks" && third === "background") return {
+		kind: "background-task",
+		id: decode(rawId)
+	};
+	if (length === 4 && section === "tasks" && fourth === "background") return {
+		kind: "background-task",
+		id: decode(rawId),
+		backgroundTaskId: decode(third)
+	};
 	if (length === 3 && section === "project" && third === "icon") return {
 		kind: "project-icon",
 		id: decode(rawId)
@@ -399,6 +412,14 @@ function itemRoute(rawId, parts) {
 			resultSeq: seq
 		} : null;
 	}
+	if (length === 2 && section === "sleep") return {
+		kind: "sleep",
+		id: decode(rawId)
+	};
+	if (length === 2 && section === "peers") return {
+		kind: "peers",
+		id: decode(rawId)
+	};
 	if (length <= 3 && section === "mcp") return {
 		kind: "mcp",
 		id: decode(rawId),
@@ -463,6 +484,303 @@ function permissionDecision(input) {
 	};
 }
 //#endregion
+//#region src/lib/scope.ts
+const MAX_SCOPE_KEYS = 16;
+const MAX_SCOPE_LEN = 200;
+function readScope(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return;
+	const entries = Object.entries(value);
+	if (entries.some(([, v]) => typeof v !== "string")) return;
+	return Object.fromEntries(entries);
+}
+function checkScope(value) {
+	if (value === void 0) return null;
+	const scope = readScope(value);
+	if (!scope) return "scope must be an object of string values";
+	const entries = Object.entries(scope);
+	if (entries.length > MAX_SCOPE_KEYS) return `scope may carry at most ${MAX_SCOPE_KEYS} keys`;
+	for (const [key, val] of entries) {
+		if (key.length === 0) return "scope keys must not be empty";
+		if (key.length > MAX_SCOPE_LEN || val.length > MAX_SCOPE_LEN) return `scope keys and values must be at most ${MAX_SCOPE_LEN} characters`;
+	}
+	return null;
+}
+function sameScope(a, b) {
+	const left = Object.entries(a ?? {}).sort(([x], [y]) => x < y ? -1 : 1);
+	const right = Object.entries(b ?? {}).sort(([x], [y]) => x < y ? -1 : 1);
+	return left.length === right.length && left.every(([key, value], i) => right[i][0] === key && right[i][1] === value);
+}
+function scopeMatches(principal, session) {
+	if (!principal) return true;
+	return Object.entries(principal).every(([key, value]) => session?.[key] === value);
+}
+//#endregion
+//#region src/services/peers.ts
+const DEFAULT_PER_MINUTE = 10;
+const DEFAULT_MAX_HOPS = 12;
+const WINDOW_MS = 6e4;
+function visible(from, to) {
+	return to.id !== from.id && scopeMatches(from.scope, to.scope);
+}
+function relayEntry(info, live) {
+	const items = info.checklist;
+	return {
+		id: info.id,
+		engine: info.engine,
+		status: info.status,
+		title: info.title,
+		project: info.project ? {
+			name: info.project.name,
+			root: info.project.root
+		} : void 0,
+		cwd: info.cwd,
+		profile: info.profile,
+		model: info.model,
+		permissionMode: info.permissionMode,
+		contextUsage: info.contextUsage,
+		checklist: items?.length ? {
+			done: items.filter((item) => item.status === "completed").length,
+			total: items.length
+		} : void 0,
+		numTurns: info.numTurns,
+		createdAt: info.createdAt,
+		lastActivityAt: info.lastActivityAt,
+		pendingPermissionCount: info.pendingPermissionCount,
+		live
+	};
+}
+function createPeerService(deps) {
+	const perMinute = deps.options?.perMinute ?? DEFAULT_PER_MINUTE;
+	const maxChars = deps.options?.maxMessageChars ?? PEER_MESSAGE_MAX_CHARS;
+	const maxHops = deps.options?.maxHops ?? DEFAULT_MAX_HOPS;
+	const sent = /* @__PURE__ */ new Map();
+	const inbound = /* @__PURE__ */ new Map();
+	const registry = () => {
+		const found = deps.refs.registry;
+		if (!found) throw new Error("peer messaging is not ready");
+		return found;
+	};
+	const allSessions = async () => {
+		const live = registry().list();
+		const dormant = await deps.refs.parking?.listInfo() ?? [];
+		return [...live, ...dormant].map((info) => deps.projects.withProject(info));
+	};
+	const infoOf = async (id) => {
+		const live = registry().get(id)?.info();
+		if (live) return deps.projects.withProject(live);
+		const record = await deps.refs.parking?.get(id);
+		return record ? deps.projects.withProject(record.info) : void 0;
+	};
+	const sender = async (from) => {
+		const info = await infoOf(from);
+		if (!info) throw new Error(`unknown sender session: ${from}`);
+		return info;
+	};
+	const recentOf = (sessionId, recent) => {
+		const limit = Math.min(Math.max(recent ?? PEER_RECENT_DEFAULT, 0), PEER_RECENT_MAX);
+		const runner = registry().get(sessionId);
+		const events = [];
+		if (runner && limit > 0) runner.subscribe((event) => events.push(event), 0, {
+			truncateResults: true,
+			imageRefs: true
+		})();
+		return {
+			runner,
+			lines: recentLines(events, limit)
+		};
+	};
+	const underRateLimit = (from, to) => {
+		const key = `${from}->${to}`;
+		const now = Date.now();
+		const recent = (sent.get(key) ?? []).filter((at) => now - at < WINDOW_MS);
+		if (recent.length >= perMinute) {
+			sent.set(key, recent);
+			return false;
+		}
+		recent.push(now);
+		sent.set(key, recent);
+		return true;
+	};
+	const list = async (from) => {
+		const me = await sender(from);
+		return (await allSessions()).filter((info) => visible(me, info)).sort((a, b) => (b.lastActivityAt ?? b.createdAt) - (a.lastActivityAt ?? a.createdAt)).map(peerSummary);
+	};
+	const peek = async (from, sessionId, options) => {
+		const me = await sender(from);
+		const info = await infoOf(sessionId);
+		if (!info || !visible(me, info)) return;
+		const { runner, lines } = recentOf(sessionId, options?.recent);
+		return {
+			...peerSummary(info),
+			live: runner !== void 0,
+			checklist: info.checklist,
+			pendingApprovals: runner ? runner.pendingApprovals.map((request) => request.title ?? request.toolName) : [],
+			recent: lines
+		};
+	};
+	const send = async (from, sessionId, text, options) => {
+		const me = await sender(from);
+		if (sessionId === from) return {
+			delivered: false,
+			reason: "that is this session"
+		};
+		if (text.length > maxChars) return {
+			delivered: false,
+			reason: `message is ${text.length} characters; the limit is ${maxChars}. Write it to a file and send the path.`
+		};
+		const target = await infoOf(sessionId);
+		if (!target || !visible(me, target)) return {
+			delivered: false,
+			reason: `no such session: ${sessionId}`
+		};
+		const hops = [...options?.hops ?? inbound.get(from) ?? [], from];
+		return deliver(target, text, {
+			kind: "peer",
+			sessionId: from,
+			name: me.title,
+			engine: me.engine,
+			hops
+		}, from);
+	};
+	const deliver = async (target, text, origin, rateKey) => {
+		const sessionId = target.id;
+		if (target.status === "closed" || target.status === "failed") return {
+			delivered: false,
+			reason: `session ${sessionId} is ${target.status}`
+		};
+		const hops = origin.hops ?? [];
+		if (hops.length > maxHops) return {
+			delivered: false,
+			reason: `${hops.length} messages have passed between sessions without a person speaking; stop and ask your user before continuing.`
+		};
+		if (!underRateLimit(rateKey, sessionId)) return {
+			delivered: false,
+			reason: `rate limit: at most ${perMinute} messages a minute to one session. Batch what you have to say.`
+		};
+		const runner = await deps.refs.parking?.ensureLive(sessionId) ?? registry().get(sessionId);
+		if (!runner) return {
+			delivered: false,
+			reason: `session ${sessionId} could not be woken`
+		};
+		const before = runner.info().status;
+		try {
+			runner.sendMessage(text, void 0, { origin });
+		} catch (error) {
+			return {
+				delivered: false,
+				reason: error instanceof Error ? error.message : String(error)
+			};
+		}
+		inbound.set(sessionId, hops);
+		return {
+			delivered: true,
+			sessionId,
+			name: target.title,
+			queued: before === "running" || before === "awaiting_approval"
+		};
+	};
+	const exposedInfo = async (sessionId, exposed) => {
+		const info = await infoOf(sessionId);
+		return info && info.status !== "closed" && scopeMatches(exposed, info.scope) ? info : void 0;
+	};
+	const relayEntries = async (exposed) => {
+		const live = new Set(registry().list().map((info) => info.id));
+		return (await allSessions()).filter((info) => info.status !== "closed" && scopeMatches(exposed, info.scope)).map((info) => relayEntry(info, live.has(info.id)));
+	};
+	const relayPeek = async (sessionId, recent, exposed) => {
+		const info = await exposedInfo(sessionId, exposed);
+		if (!info) return;
+		const { runner, lines } = recentOf(sessionId, recent);
+		return {
+			...relayEntry(info, runner !== void 0),
+			checklistItems: info.checklist,
+			pendingApprovals: runner ? runner.pendingApprovals.map((request) => request.title ?? request.toolName) : [],
+			recent: lines
+		};
+	};
+	const relaySend = async (origin, sessionId, text, exposed) => {
+		if (text.length === 0 || text.length > maxChars) return {
+			delivered: false,
+			reason: `message is ${text.length} characters; the limit is ${maxChars}. Write it to a file and send the path.`
+		};
+		const target = await exposedInfo(sessionId, exposed);
+		if (!target) return {
+			delivered: false,
+			reason: `no such session: ${sessionId}`
+		};
+		const from = `${origin.gateway}:${origin.sessionId}`;
+		return deliver(target, text, {
+			kind: "peer",
+			sessionId: from,
+			hostId: origin.gateway,
+			name: origin.name,
+			engine: origin.engine,
+			hops: origin.hops
+		}, from);
+	};
+	const watch = (runner) => runner.subscribe((event) => {
+		if (event.type === "user_message" && !event.origin && !event.synthetic && event.parentToolUseId == null && !event.replay) inbound.delete(runner.id);
+	}, runner.info().lastSeq);
+	return {
+		list,
+		peek,
+		send,
+		watch,
+		relaySender: sender,
+		relayChain: (from) => [...inbound.get(from) ?? [], from],
+		relayEntries,
+		relayPeek,
+		relaySend
+	};
+}
+function resolvePeerMentions(rows, text) {
+	const tokens = scanPeerMentions(text);
+	if (tokens.length === 0) return [];
+	const byKey = /* @__PURE__ */ new Map();
+	const add = (key, row) => {
+		const held = byKey.get(key);
+		if (held) held.push(row);
+		else byKey.set(key, [row]);
+	};
+	for (const row of rows) {
+		add(peerMentionKey(peerMentionSlug(row.title, row.id)), row);
+		add(peerMentionKey(row.id), row);
+	}
+	const resolved = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const token of tokens) {
+		const key = peerMentionKey(token.body);
+		const exact = byKey.get(key);
+		const matches = exact ?? (key.length >= 4 ? rows.filter((row) => row.id.startsWith(key)) : []);
+		const target = matches[0];
+		if (!target || matches.length > 1 && !exact) continue;
+		if (seen.has(target.id)) continue;
+		seen.add(target.id);
+		const others = matches.slice(1, 4).map((row) => row.id);
+		resolved.push({
+			typed: token.body,
+			id: target.id,
+			name: target.title,
+			engine: target.engine,
+			status: target.status,
+			cwd: target.cwd,
+			...others.length ? { ambiguousWith: others } : {}
+		});
+		if (resolved.length >= PEER_MENTION_MAX) break;
+	}
+	return resolved;
+}
+async function mentionsFor(directory, from, text) {
+	return scanPeerMentions(text).length === 0 ? [] : resolvePeerMentions(await directory.list(from), text);
+}
+//#endregion
+//#region src/routes/sleep.ts
+async function sleepRunner(runner) {
+	if (!runner.sleep) throw new HttpError(501, `the ${engineOf(runner.info())} engine has no process to put to sleep`);
+	const result = await runner.sleep();
+	if (!result.ok) throw new HttpError(409, `cannot sleep: ${result.reason}`);
+}
+//#endregion
 //#region src/services/shell-directory.ts
 function createShellDirectory(registry, deps = {}) {
 	const take = async (from, shellId, options) => {
@@ -1852,13 +2170,14 @@ function attachClient(ctx, ws, runner, req, access) {
 		unsubscribe();
 		detachBridge();
 		parking.onDetach(runner.id);
+		ctx.engineSleep.onDetach(runner.id);
 	});
 }
 async function handleCommand(ctx, frame, runner, access, client) {
 	const { attachmentStore, bridge } = ctx;
 	switch (frame.type) {
 		case "user_message": {
-			const mentions = ctx.peers && !isSlashCommand(frame.text) ? await ctx.peers.mentions(runner.id, frame.text).catch(() => []) : [];
+			const mentions = ctx.peers && !isSlashCommand(frame.text) ? await mentionsFor(ctx.peers, runner.id, frame.text).catch(() => []) : [];
 			const options = mentions.length > 0 ? { mentions } : void 0;
 			if (!frame.attachmentIds?.length) {
 				runner.sendMessage(frame.text, void 0, options);
@@ -1875,6 +2194,13 @@ async function handleCommand(ctx, frame, runner, access, client) {
 		case "interrupt":
 			await runner.interrupt();
 			return;
+		case "sleep":
+			await sleepRunner(runner);
+			return;
+		case "background_task":
+			if (!runner.backgroundTask) throw new Error(`the ${engineOf(runner.info())} engine cannot move a task to the background`);
+			await runner.backgroundTask(frame.toolUseId);
+			return;
 		case "clear_context":
 			if (!runner.clearContext) throw new Error(`the ${engineOf(runner.info())} engine cannot clear a conversation`);
 			await runner.clearContext();
@@ -1891,6 +2217,11 @@ async function handleCommand(ctx, frame, runner, access, client) {
 		case "set_model":
 			await runner.setModel(frame.model);
 			return;
+		case "set_effort":
+			if (!runner.setEffort) throw new Error(`the ${engineOf(runner.info())} engine cannot change its reasoning effort`);
+			if (frame.effort !== void 0 && typeof frame.effort !== "string") throw new Error("effort must be a string");
+			await runner.setEffort(frame.effort);
+			return;
 		case "tool_call_result":
 			bridge.resolve(runner.id, frame.executionId, {
 				output: frame.output,
@@ -2502,10 +2833,13 @@ const HOST_ONLY_KEY_TABLE = {
 	historyFn: "transient",
 	sessionInfoFn: "transient",
 	peers: "transient",
+	contextReset: "transient",
 	shells: "transient",
 	shellAgentWrite: "transient",
 	createdByOperator: "durable",
 	fallbackTitle: "transient",
+	startAsleep: "transient",
+	effortDefaults: "transient",
 	connectFn: "transient",
 	codexHome: "durable",
 	codexPathOverride: "durable",
@@ -2520,6 +2854,7 @@ const HOST_ONLY_KEY_TABLE = {
 	toolTitles: "transient",
 	shouldApprove: "transient",
 	resolveModel: "transient",
+	contextWindow: "transient",
 	reportMcpServers: "transient",
 	onClose: "transient",
 	restore: "transient"
@@ -3259,12 +3594,15 @@ const ITEM_HANDLERS = {
 	produced: ({ ctx, req, res, route }) => handleProducedFiles(ctx, req, res, route.id, route.producedFileId),
 	shells: ({ ctx, req, res, route, runner, auth }) => handleShells(ctx, req, res, route, runner ?? null, ctx.auth.isOperator(auth)),
 	"stop-task": handleStopTask,
+	"background-task": handleBackgroundTask,
 	"project-icon": ({ ctx, req, res, info }) => handleProjectIcon(ctx.projects, req, res, info.cwd),
 	"tool-result": ({ req, res, route, runner, parked }) => {
 		const snapshot = parked && !isDormant(parked) ? parked.snapshot.events : void 0;
 		handleToolResult(req, res, runner?.eventAt?.bind(runner) ?? (snapshot && ((seq) => snapshot.find((event) => event.seq === seq))), route.resultSeq);
 	},
-	permission: handlePermission
+	permission: handlePermission,
+	peers: handlePeers,
+	sleep: handleSleep
 };
 async function handleSessions(ctx, req, res, route, auth) {
 	if (route.kind === "collection") {
@@ -3328,6 +3666,11 @@ async function handleSession({ ctx, req, res, route, runner, parked, info }) {
 		status: "closed"
 	}) });
 }
+async function handlePeers({ ctx, req, res, route }) {
+	requireMethod(req, "GET");
+	if (!ctx.peers) fail(404, "peer messaging is off on this gateway");
+	json(res, 200, { peers: await ctx.peers.list(route.id) });
+}
 function handleFiles({ req, res, route, runner, parked }) {
 	requireMethod(req, "GET");
 	const snapshotFiles = parked && !isDormant(parked) ? parked.snapshot.vfs : void 0;
@@ -3355,6 +3698,18 @@ async function handleStopTask({ req, res, route, runner }) {
 	if (!await live.stopTask(route.stopTaskId)) fail(404, "no running task to stop");
 	json(res, 200, { ok: true });
 }
+async function handleBackgroundTask({ req, res, route, runner }) {
+	requireMethod(req, "POST");
+	const live = requireLive(runner, "it has no running tasks");
+	if (!live.backgroundTask) fail(501, `the ${engineOf(live.info())} engine cannot move a task to the background`);
+	if (!await live.backgroundTask(route.backgroundTaskId)) fail(404, "no foreground task to move to the background");
+	json(res, 200, { ok: true });
+}
+async function handleSleep({ ctx, req, res, runner, info }) {
+	requireMethod(req, "POST");
+	if (runner) await sleepRunner(runner);
+	json(res, 200, { session: ctx.projects.withProject(runner?.info() ?? info) });
+}
 async function handlePermission({ ctx, req, res, route, runner }) {
 	requireMethod(req, "POST");
 	const body = await readJsonBody(req, ctx.maxBodyBytes);
@@ -3567,37 +3922,6 @@ function safeName(name) {
 	return cleaned.length > 120 ? cleaned.slice(0, 120) : cleaned;
 }
 //#endregion
-//#region src/lib/scope.ts
-const MAX_SCOPE_KEYS = 16;
-const MAX_SCOPE_LEN = 200;
-function readScope(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return;
-	const entries = Object.entries(value);
-	if (entries.some(([, v]) => typeof v !== "string")) return;
-	return Object.fromEntries(entries);
-}
-function checkScope(value) {
-	if (value === void 0) return null;
-	const scope = readScope(value);
-	if (!scope) return "scope must be an object of string values";
-	const entries = Object.entries(scope);
-	if (entries.length > MAX_SCOPE_KEYS) return `scope may carry at most ${MAX_SCOPE_KEYS} keys`;
-	for (const [key, val] of entries) {
-		if (key.length === 0) return "scope keys must not be empty";
-		if (key.length > MAX_SCOPE_LEN || val.length > MAX_SCOPE_LEN) return `scope keys and values must be at most ${MAX_SCOPE_LEN} characters`;
-	}
-	return null;
-}
-function sameScope(a, b) {
-	const left = Object.entries(a ?? {}).sort(([x], [y]) => x < y ? -1 : 1);
-	const right = Object.entries(b ?? {}).sort(([x], [y]) => x < y ? -1 : 1);
-	return left.length === right.length && left.every(([key, value], i) => right[i][0] === key && right[i][1] === value);
-}
-function scopeMatches(principal, session) {
-	if (!principal) return true;
-	return Object.entries(principal).every(([key, value]) => session?.[key] === value);
-}
-//#endregion
 //#region src/services/auth.ts
 function createAuthService(deps) {
 	const { options, registry } = deps;
@@ -3707,6 +4031,188 @@ var AvailabilityTracker = class {
 	}
 };
 //#endregion
+//#region src/services/engine-sleep.ts
+var EngineSleepTimers = class {
+	#options;
+	#timers = /* @__PURE__ */ new Map();
+	#runners = /* @__PURE__ */ new Map();
+	#closed = false;
+	constructor(options) {
+		this.#options = options;
+	}
+	get enabled() {
+		return this.#options.afterMs > 0 && !this.#closed;
+	}
+	watch(runner) {
+		if (!this.enabled || !runner.sleep) return;
+		this.#runners.set(runner.id, runner);
+		const unsubscribe = runner.subscribe((event) => {
+			if (event.type === "status_changed") this.#rearm(runner);
+		}, runner.info().lastSeq);
+		this.#rearm(runner);
+		return () => {
+			unsubscribe();
+			this.#disarm(runner.id);
+			if (this.#runners.get(runner.id) === runner) this.#runners.delete(runner.id);
+		};
+	}
+	onDetach(sessionId) {
+		const runner = this.#runners.get(sessionId);
+		if (runner) this.#rearm(runner);
+	}
+	close() {
+		this.#closed = true;
+		for (const timer of this.#timers.values()) clearTimeout(timer);
+		this.#timers.clear();
+		this.#runners.clear();
+	}
+	#rearm(runner) {
+		this.#disarm(runner.id);
+		if (!this.enabled || !this.#sleepable(runner)) return;
+		const timer = setTimeout(() => {
+			this.#timers.delete(runner.id);
+			if (!this.enabled || !this.#sleepable(runner)) return;
+			runner.sleep?.().catch((error) => this.#options.onError?.(error, runner.id));
+		}, this.#options.afterMs);
+		timer.unref?.();
+		this.#timers.set(runner.id, timer);
+	}
+	#sleepable(runner) {
+		const info = runner.info();
+		return info.status === "idle" && info.engineAsleep !== true && this.#options.attachedCount(runner.id) === 0;
+	}
+	#disarm(sessionId) {
+		clearTimeout(this.#timers.get(sessionId));
+		this.#timers.delete(sessionId);
+	}
+};
+const HOUR_MS = 36e5;
+const RESET_TIMEOUT_MS = 6e4;
+const CONTEXT_RESET_SCHEDULED = "Reset scheduled. It runs when this turn ends: your conversation is cleared and your prompt becomes the first message of a fresh one. End your turn now and start no new work. If the turn is interrupted or ends in an error, the reset is cancelled.";
+var ContextResetService = class {
+	#options;
+	#runners = /* @__PURE__ */ new Map();
+	#pending = /* @__PURE__ */ new Map();
+	#running = /* @__PURE__ */ new Set();
+	#history = /* @__PURE__ */ new Map();
+	#turnFailed = /* @__PURE__ */ new Set();
+	#closed = false;
+	constructor(options = {}) {
+		this.#options = options;
+	}
+	get defaultEnabled() {
+		return this.#options.default === true;
+	}
+	watch(runner) {
+		if (this.#closed) return;
+		this.#runners.set(runner.id, runner);
+		const unsubscribe = runner.subscribe((event) => this.#observe(runner, event), runner.info().lastSeq);
+		return () => {
+			unsubscribe();
+			if (this.#runners.get(runner.id) === runner) {
+				this.#runners.delete(runner.id);
+				this.#pending.delete(runner.id);
+			}
+		};
+	}
+	async request(sessionId, request) {
+		const runner = this.#runners.get(sessionId);
+		if (this.#closed || !runner || runner.info().agentContextReset !== true) throw new Error("context reset is not enabled for this session");
+		if (!runner.clearContext) throw new Error("this engine cannot clear its conversation");
+		if (this.#pending.has(sessionId) || this.#running.has(sessionId)) throw new Error("a reset is already scheduled for this session");
+		const refused = this.#rateRefusal(sessionId);
+		if (refused) throw new Error(refused);
+		this.#pending.set(sessionId, {
+			prompt: request.prompt,
+			reason: request.reason
+		});
+		this.#turnFailed.delete(sessionId);
+		return CONTEXT_RESET_SCHEDULED;
+	}
+	close() {
+		this.#closed = true;
+		this.#pending.clear();
+		this.#runners.clear();
+	}
+	#rateRefusal(sessionId) {
+		const now = this.#now();
+		const minInterval = this.#options.minIntervalMs ?? 6e5;
+		const maxPerHour = this.#options.maxPerHour ?? 3;
+		const recent = (this.#history.get(sessionId) ?? []).filter((at) => now - at < HOUR_MS);
+		const last = recent.at(-1);
+		if (last !== void 0 && now - last < minInterval) return `refused: the last reset was ${minutes(now - last)} ago and resets need ${minutes(minInterval)} between them; keep working`;
+		if (maxPerHour <= 0 || recent.length >= maxPerHour) return `refused: this session already reset ${recent.length} time(s) in the last hour (limit ${maxPerHour}); keep working`;
+		return null;
+	}
+	#observe(runner, event) {
+		if (!this.#pending.has(runner.id)) return;
+		if (event.type === "turn_result" && event.isError) {
+			this.#turnFailed.add(runner.id);
+			return;
+		}
+		if (event.type === "session_closed") {
+			this.#pending.delete(runner.id);
+			return;
+		}
+		if (event.type !== "status_changed" || event.status !== "idle") return;
+		const request = this.#pending.get(runner.id);
+		this.#pending.delete(runner.id);
+		if (this.#turnFailed.delete(runner.id)) return;
+		this.#run(runner, request);
+	}
+	async #run(runner, request) {
+		this.#running.add(runner.id);
+		try {
+			const reset = nextReset(runner, this.#options.resetTimeoutMs ?? RESET_TIMEOUT_MS);
+			try {
+				await runner.clearContext({ agentReason: request.reason });
+				await reset.done;
+			} finally {
+				reset.cancel();
+			}
+			const history = (this.#history.get(runner.id) ?? []).filter((at) => this.#now() - at < HOUR_MS);
+			history.push(this.#now());
+			this.#history.set(runner.id, history);
+			runner.sendMessage(request.prompt);
+		} catch (error) {
+			this.#options.onError?.(error, runner.id);
+		} finally {
+			this.#running.delete(runner.id);
+		}
+	}
+	#now() {
+		return this.#options.now?.() ?? Date.now();
+	}
+};
+function nextReset(runner, timeoutMs) {
+	let timer;
+	let unsubscribe;
+	const cancel = () => {
+		clearTimeout(timer);
+		unsubscribe?.();
+	};
+	return {
+		done: new Promise((resolve, reject) => {
+			timer = setTimeout(() => {
+				cancel();
+				reject(/* @__PURE__ */ new Error("the engine did not confirm the reset"));
+			}, timeoutMs);
+			timer.unref?.();
+			unsubscribe = runner.subscribe((event) => {
+				if (event.type === "conversation_reset") {
+					cancel();
+					resolve();
+				}
+			}, runner.info().lastSeq);
+		}),
+		cancel
+	};
+}
+function minutes(ms) {
+	const value = Math.max(1, Math.round(ms / 6e4));
+	return `${value} minute${value === 1 ? "" : "s"}`;
+}
+//#endregion
 //#region src/services/bridge.ts
 var BridgeHub = class {
 	#sessions = /* @__PURE__ */ new Map();
@@ -4022,7 +4528,10 @@ var SessionParkManager = class {
 	}
 	async listInfo() {
 		await Promise.all(this.#storeOps.values());
-		return (await this.#options.store.list()).filter((record) => this.#options.registry.get(record.id) === void 0).map((record) => record.info);
+		return (await this.#options.store.list()).filter((record) => this.#options.registry.get(record.id) === void 0).map((record) => isDormant(record) ? {
+			...record.info,
+			engineAsleep: true
+		} : record.info);
 	}
 	async ensureLive(id) {
 		const live = this.#options.registry.get(id);
@@ -4272,7 +4781,7 @@ var SessionParkManager = class {
 	}
 };
 function idleRecordBase(runner, config) {
-	const info = runner.info();
+	const { engineAsleep: _engineAsleep, ...info } = runner.info();
 	return {
 		id: runner.id,
 		info: {
@@ -4337,6 +4846,8 @@ var ProfileService = class {
 			if (p.codexHome && !existsSync(p.codexHome)) return `profile '${p.name}' codexHome does not exist: ${p.codexHome}`;
 		} else if (!p.configDir || !existsSync(p.configDir)) return `profile '${p.name}' configDir does not exist: ${p.configDir}`;
 		if (disableBypassPermissions && p.defaults?.permissionMode === "bypassPermissions") return `profile '${p.name}' defaults to bypassPermissions but disableBypassPermissions is set`;
+		const efforts = p.defaults?.efforts;
+		if (efforts !== void 0 && !isEffortMap(efforts)) return `profile '${p.name}' defaults.efforts must map model names to effort levels`;
 		const fallbackMode = p.defaults?.permissionMode;
 		if (fallbackMode && !supportsPermissionMode(p.engine, fallbackMode)) return `profile '${p.name}' defaults to permission mode '${fallbackMode}', which engine '${engineOf(p)}' does not support (supported: ${adapterFor(engineOf(p)).capabilities.permissionModes.join(", ")})`;
 		return null;
@@ -4438,6 +4949,9 @@ var ProfileService = class {
 		};
 	}
 };
+function isEffortMap(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) && Object.entries(value).every(([model, effort]) => model !== "" && typeof effort === "string" && effort !== "");
+}
 //#endregion
 //#region src/services/profile-usage.ts
 var ProfileUsageTracker = class {
@@ -4625,179 +5139,160 @@ function createFileSpendStore(path, onError) {
 	};
 }
 //#endregion
-//#region src/services/peers.ts
-const DEFAULT_PER_MINUTE = 10;
-const DEFAULT_MAX_HOPS = 12;
-const WINDOW_MS = 6e4;
-function visible(from, to) {
-	return to.id !== from.id && scopeMatches(from.scope, to.scope);
-}
-function createPeerService(deps) {
-	const perMinute = deps.options?.perMinute ?? DEFAULT_PER_MINUTE;
-	const maxChars = deps.options?.maxMessageChars ?? PEER_MESSAGE_MAX_CHARS;
-	const maxHops = deps.options?.maxHops ?? DEFAULT_MAX_HOPS;
-	const sent = /* @__PURE__ */ new Map();
-	const inbound = /* @__PURE__ */ new Map();
-	const registry = () => {
-		const found = deps.refs.registry;
-		if (!found) throw new Error("peer messaging is not ready");
-		return found;
-	};
-	const allSessions = async () => {
-		const live = registry().list();
-		const dormant = await deps.refs.parking?.listInfo() ?? [];
-		return [...live, ...dormant].map((info) => deps.projects.withProject(info));
-	};
-	const infoOf = async (id) => {
-		const live = registry().get(id)?.info();
-		if (live) return deps.projects.withProject(live);
-		const record = await deps.refs.parking?.get(id);
-		return record ? deps.projects.withProject(record.info) : void 0;
-	};
-	const sender = async (from) => {
-		const info = await infoOf(from);
-		if (!info) throw new Error(`unknown sender session: ${from}`);
-		return info;
-	};
-	const underRateLimit = (from, to) => {
-		const key = `${from}->${to}`;
-		const now = Date.now();
-		const recent = (sent.get(key) ?? []).filter((at) => now - at < WINDOW_MS);
-		if (recent.length >= perMinute) {
-			sent.set(key, recent);
-			return false;
-		}
-		recent.push(now);
-		sent.set(key, recent);
-		return true;
-	};
-	const list = async (from) => {
-		const me = await sender(from);
-		return (await allSessions()).filter((info) => visible(me, info)).sort((a, b) => (b.lastActivityAt ?? b.createdAt) - (a.lastActivityAt ?? a.createdAt)).map(peerSummary);
+//#region src/services/peer-relay.ts
+const CARRIED = Symbol.for("workerdeck.relay.carried");
+const slots = globalThis;
+const UNAVAILABLE = "Remote gateways are unavailable right now; only sessions on this gateway are listed.";
+function expandHome(path) {
+	return path === "~" || path.startsWith("~/") ? `${homedir()}${path.slice(1)}` : path;
+}
+function identityOf(options) {
+	return JSON.stringify([
+		options.url,
+		options.gateway,
+		options.keyFile ?? "",
+		options.key ? "inline" : "",
+		options.caFile ?? "",
+		options.expose?.allow ?? null
+	]);
+}
+function remoteSummary(row) {
+	return {
+		id: `${row.gateway}:${row.id}`,
+		gateway: row.gateway,
+		engine: row.engine,
+		status: row.status,
+		title: row.title,
+		project: row.project?.name,
+		projectRoot: row.project?.root,
+		cwd: row.cwd,
+		profile: row.profile,
+		model: row.model,
+		contextUsage: row.contextUsage,
+		lastActivityAt: row.lastActivityAt,
+		pendingPermissionCount: row.pendingPermissionCount,
+		allow: row.allow
 	};
-	const peek = async (from, sessionId, options) => {
-		const me = await sender(from);
-		const info = await infoOf(sessionId);
-		if (!info || !visible(me, info)) return;
-		const limit = Math.min(Math.max(options?.recent ?? PEER_RECENT_DEFAULT, 0), PEER_RECENT_MAX);
-		const runner = registry().get(sessionId);
-		const events = [];
-		if (runner && limit > 0) runner.subscribe((event) => events.push(event), 0, {
-			truncateResults: true,
-			imageRefs: true
-		})();
-		return {
-			...peerSummary(info),
-			live: runner !== void 0,
-			checklist: info.checklist,
-			pendingApprovals: runner ? runner.pendingApprovals.map((request) => request.title ?? request.toolName) : [],
-			recent: recentLines(events, limit)
-		};
+}
+function remotePeek(gateway, peek) {
+	const { allow: _allow, ...summary } = remoteSummary({
+		...peek,
+		gateway,
+		allow: []
+	});
+	return {
+		...summary,
+		live: peek.live,
+		checklist: peek.checklistItems,
+		pendingApprovals: peek.pendingApprovals,
+		recent: peek.recent
 	};
-	const send = async (from, sessionId, text, options) => {
-		const me = await sender(from);
-		if (sessionId === from) return {
-			delivered: false,
-			reason: "that is this session"
-		};
-		if (text.length > maxChars) return {
-			delivered: false,
-			reason: `message is ${text.length} characters; the limit is ${maxChars}. Write it to a file and send the path.`
-		};
-		const target = await infoOf(sessionId);
-		if (!target || !visible(me, target)) return {
-			delivered: false,
-			reason: `no such session: ${sessionId}`
-		};
-		if (target.status === "closed" || target.status === "failed") return {
-			delivered: false,
-			reason: `session ${sessionId} is ${target.status}`
-		};
-		const hops = [...options?.hops ?? inbound.get(from) ?? [], from];
-		if (hops.length > maxHops) return {
-			delivered: false,
-			reason: `${hops.length} messages have passed between sessions without a person speaking; stop and ask your user before continuing.`
-		};
-		if (!underRateLimit(from, sessionId)) return {
-			delivered: false,
-			reason: `rate limit: at most ${perMinute} messages a minute to one session. Batch what you have to say.`
-		};
-		const runner = await deps.refs.parking?.ensureLive(sessionId) ?? registry().get(sessionId);
-		if (!runner) return {
-			delivered: false,
-			reason: `session ${sessionId} could not be woken`
-		};
-		const before = runner.info().status;
-		const origin = {
-			kind: "peer",
-			sessionId: from,
-			name: me.title,
-			engine: me.engine,
-			hops
-		};
-		try {
-			runner.sendMessage(text, void 0, { origin });
-		} catch (error) {
-			return {
-				delivered: false,
-				reason: error instanceof Error ? error.message : String(error)
-			};
-		}
-		inbound.set(sessionId, hops);
-		return {
-			delivered: true,
-			sessionId,
-			name: target.title,
-			queued: before === "running" || before === "awaiting_approval"
-		};
+}
+async function readRelayKey(options) {
+	if (options.key) return options.key;
+	if (!options.keyFile) throw new Error("relay: set relay.keyFile (or WORKERDECK_RELAY_KEY) to the key `workerdeck relay enroll` printed");
+	const key = (await readFile(expandHome(options.keyFile), "utf8")).trim();
+	if (!key) throw new Error(`relay: ${options.keyFile} is empty`);
+	return key;
+}
+function createRelayLink(options, peers, log) {
+	const identity = identityOf(options);
+	const exposed = options.expose?.scope;
+	let connection;
+	let closed = false;
+	let released = false;
+	const host = {
+		snapshot: () => peers.relayEntries(exposed),
+		peek: (_origin, sessionId, recent) => peers.relayPeek(sessionId, recent, exposed),
+		send: (origin, sessionId, text) => peers.relaySend(origin, sessionId, text, exposed)
 	};
-	const mentions = async (from, text) => {
-		const tokens = scanPeerMentions(text);
-		if (tokens.length === 0) return [];
-		const rows = await list(from);
-		const byKey = /* @__PURE__ */ new Map();
-		const add = (key, row) => {
-			const held = byKey.get(key);
-			if (held) held.push(row);
-			else byKey.set(key, [row]);
-		};
-		for (const row of rows) {
-			add(peerMentionKey(peerMentionSlug(row.title, row.id)), row);
-			add(peerMentionKey(row.id), row);
-		}
-		const resolved = [];
-		const seen = /* @__PURE__ */ new Set();
-		for (const token of tokens) {
-			const key = peerMentionKey(token.body);
-			const exact = byKey.get(key);
-			const matches = exact ?? (key.length >= 4 ? rows.filter((row) => row.id.startsWith(key)) : []);
-			const target = matches[0];
-			if (!target || matches.length > 1 && !exact) continue;
-			if (seen.has(target.id)) continue;
-			seen.add(target.id);
-			const others = matches.slice(1, 4).map((row) => row.id);
-			resolved.push({
-				typed: token.body,
-				id: target.id,
-				name: target.title,
-				engine: target.engine,
-				status: target.status,
-				cwd: target.cwd,
-				...others.length ? { ambiguousWith: others } : {}
-			});
-			if (resolved.length >= PEER_MENTION_MAX) break;
-		}
-		return resolved;
+	const carried = slots[CARRIED];
+	if (carried) {
+		delete slots[CARRIED];
+		if (carried.identity === identity && carried.connection.state() !== "stopped") {
+			carried.connection.setHost(host);
+			connection = carried.connection;
+		} else carried.connection.close();
+	}
+	if (!connection) (async () => {
+		const key = await readRelayKey(options);
+		const ca = options.caFile ? await readFile(expandHome(options.caFile)) : void 0;
+		if (!closed) connection = connectRelay({
+			url: options.url,
+			gateway: options.gateway,
+			key,
+			ca,
+			allow: options.expose?.allow,
+			log
+		}, host);
+	})().catch((error) => log(error instanceof Error ? error.message : String(error)));
+	const remoteTarget = parseRelayPeerId;
+	const reachesRemote = async (from) => {
+		const me = await peers.relaySender(from);
+		return me.scope === void 0 || Object.keys(me.scope).length === 0;
 	};
-	const watch = (runner) => runner.subscribe((event) => {
-		if (event.type === "user_message" && !event.origin && !event.synthetic && event.parentToolUseId == null && !event.replay) inbound.delete(runner.id);
-	}, runner.info().lastSeq);
 	return {
-		list,
-		peek,
-		send,
-		mentions,
-		watch
+		directory: {
+			list: async (from) => {
+				const local = await peers.list(from);
+				if (!connection || connection.state() !== "online" || !await reachesRemote(from)) return local;
+				try {
+					return [...local, ...(await connection.list(from)).map(remoteSummary)];
+				} catch {
+					return local;
+				}
+			},
+			notice: async (from) => {
+				if (!await reachesRemote(from)) return;
+				return connection?.state() === "online" ? void 0 : UNAVAILABLE;
+			},
+			peek: async (from, sessionId, peekOptions) => {
+				const target = remoteTarget(sessionId);
+				if (!target) return peers.peek(from, sessionId, peekOptions);
+				if (!connection || !await reachesRemote(from)) return;
+				const peek = await connection.peek(from, target, peekOptions?.recent);
+				return peek ? remotePeek(target.gateway, peek) : void 0;
+			},
+			send: async (from, sessionId, text, sendOptions) => {
+				const target = remoteTarget(sessionId);
+				if (!target) return peers.send(from, sessionId, text, sendOptions);
+				if (!await reachesRemote(from)) return {
+					delivered: false,
+					reason: `no such session: ${sessionId}`
+				};
+				if (!connection || connection.state() !== "online") return {
+					delivered: false,
+					reason: "remote gateways are unavailable right now; try again later"
+				};
+				try {
+					const result = await connection.send(from, target, text, sendOptions?.hops ?? peers.relayChain(from));
+					return result.delivered ? {
+						...result,
+						sessionId
+					} : result;
+				} catch (error) {
+					return {
+						delivered: false,
+						reason: error instanceof Error ? error.message : String(error)
+					};
+				}
+			}
+		},
+		nudge: () => connection?.nudge(),
+		release: () => {
+			if (connection && !closed) {
+				released = true;
+				slots[CARRIED] = {
+					identity,
+					connection
+				};
+			}
+		},
+		close: () => {
+			closed = true;
+			if (!released) connection?.close();
+			connection = void 0;
+		}
 	};
 }
 //#endregion
@@ -5022,8 +5517,16 @@ function createSessionFactory(deps) {
 			...deps.peers ? { peers: deps.peers } : {},
 			...deps.pricing ? { pricing: deps.pricing } : {}
 		};
+		delete config.contextReset;
 		delete config.shells;
 		delete config.shellAgentWrite;
+		delete config.effortDefaults;
+		const efforts = {
+			...deps.effortDefaults,
+			...profile?.defaults?.efforts
+		};
+		if (Object.keys(efforts).length > 0) config.effortDefaults = efforts;
+		if (deps.contextReset && (built.agentContextReset ?? profile?.defaults?.agentContextReset ?? deps.contextReset.defaultEnabled)) config.contextReset = deps.contextReset.directory;
 		if (deps.shells && capabilities.hostCwd === true) {
 			config.shells = deps.shells;
 			const write = deps.shellAgentWrite ?? "read-only";
@@ -5173,6 +5676,17 @@ function createWorkerServer(options = {}) {
 		onError: options.notifications?.onError ?? ((error, context) => diagnose(error, `notification-${context.op}`))
 	});
 	const producedFiles = new ProducedFileStore();
+	const engineSleep = new EngineSleepTimers({
+		afterMs: options.engineSleepAfterMs ?? 0,
+		attachedCount: (sessionId) => bridge.attachedCount(sessionId),
+		onError: (error) => diagnose(error, "engine-sleep")
+	});
+	const contextResets = options.agentContextReset === false ? void 0 : new ContextResetService({
+		...options.agentContextReset,
+		onError: (error) => diagnose(error, "context-reset")
+	});
+	let ownContextResets = contextResets;
+	installContextResetDirectory(contextResets);
 	const registry = new SessionRegistry({ onRegister: (runner) => {
 		const detachers = [
 			notifier.watch(runner),
@@ -5181,7 +5695,9 @@ function createWorkerServer(options = {}) {
 			spendLedger.watch(runner),
 			shells?.watch(runner),
 			peers?.watch(runner),
-			factory.watchAuthSource(runner)
+			factory.watchAuthSource(runner),
+			engineSleep.watch(runner),
+			contextResets?.watch(runner)
 		];
 		const profile = runner.info().profile;
 		if (profile) detachers.push(runner.subscribe((event) => {
@@ -5222,10 +5738,12 @@ function createWorkerServer(options = {}) {
 		options: options.peers
 	});
 	const shellDirectory = shells ? createShellDirectory(shells, { runnerFor: (id) => registry.get(id) }) : void 0;
-	let ownPeers = peers;
+	const relay = peers && options.relay ? createRelayLink(options.relay, peers, options.relay.log ?? ((message) => diagnose(new Error(message), "relay"))) : void 0;
+	let ownPeers = relay?.directory ?? peers;
 	let ownShells = shellDirectory;
-	if (peers) installPeerDirectory(peers);
+	if (ownPeers) installPeerDirectory(ownPeers);
 	installShellDirectory(shellDirectory);
+	if (options.effortDefaults !== void 0 && !isEffortMap(options.effortDefaults)) throw new Error("createWorkerServer: `effortDefaults` must map model names to effort levels");
 	const factory = createSessionFactory({
 		adapterFor,
 		profiles,
@@ -5234,8 +5752,13 @@ function createWorkerServer(options = {}) {
 		allowedCwdRoots: options.allowedCwdRoots,
 		disableBypassPermissions: options.disableBypassPermissions,
 		approvalTimeoutMs: options.approvalTimeoutMs,
+		effortDefaults: options.effortDefaults,
 		requireApiKey: options.requireApiKey,
 		peers: peers ? peerDirectoryHandle(() => ownPeers) : void 0,
+		contextReset: contextResets ? {
+			directory: contextResetDirectoryHandle(() => ownContextResets),
+			defaultEnabled: contextResets.defaultEnabled
+		} : void 0,
 		shells: shellDirectory ? shellDirectoryHandle(() => ownShells) : void 0,
 		shellAgentWrite: options.shell?.agentWrite,
 		pricing: pricing.pricing,
@@ -5291,7 +5814,8 @@ function createWorkerServer(options = {}) {
 		factory,
 		registry,
 		parking,
-		peers,
+		engineSleep,
+		peers: peers ? peerDirectoryHandle(() => ownPeers) : void 0,
 		bridge,
 		projects,
 		queue,
@@ -5338,11 +5862,15 @@ function createWorkerServer(options = {}) {
 		parking,
 		shells,
 		queue,
+		engineSleep,
 		closeQueueSockets: queueSockets.clear,
 		diagnose,
 		releaseDirectories: () => {
+			relay?.close();
 			ownPeers = void 0;
 			ownShells = void 0;
+			contextResets?.close();
+			ownContextResets = void 0;
 		}
 	});
 	return {
@@ -5383,6 +5911,7 @@ function createWorkerServer(options = {}) {
 			parking.adopt(runner, config);
 			return true;
 		},
+		releaseRelay: () => relay?.release(),
 		drain: lifecycle.drain,
 		close: lifecycle.close
 	};
@@ -5441,7 +5970,8 @@ function rebuildRunner(factory, record) {
 			resume: record.sdkSessionId
 		}),
 		epoch: (record.info.epoch ?? 0) + 1,
-		fallbackTitle: record.info.title
+		fallbackTitle: record.info.title,
+		startAsleep: true
 	}, void 0, record.id);
 }
 //#endregion