@wrongstack/core 0.296.4 → 0.298.0

package/dist/hq/index.js

@@ -1,10 +1,83 @@
-// src/hq/protocol/tool.ts
-var DEFAULT_HQ_REDACTION_POLICY = {
-  rawContent: true,
-  toolArgs: "full",
-  paths: "full"
-};
-var HQ_TRANSCRIPT_TEXT_CAP = 16e3;
+// src/hq/protocol/governance.ts
+var SIGNAL_LEVELS = /* @__PURE__ */ new Set([
+  "healthy",
+  "notice",
+  "warning",
+  "unavailable"
+]);
+var SIGNAL_CODES = /* @__PURE__ */ new Set([
+  "attachment_broker_healthy",
+  "attachment_broker_initializing",
+  "attachment_broker_status_unavailable",
+  "attachment_broker_degraded",
+  "attachment_broker_audit_unhealthy",
+  "attachment_broker_revocation_pending",
+  "attachment_broker_stopped",
+  "broker_missing",
+  "broker_invalid",
+  "connection_failed",
+  "request_rejected",
+  "unexpected_response"
+]);
+var OPERATOR_ACTIONS = /* @__PURE__ */ new Set(["none", "observe", "investigate"]);
+var BROKER_STATES = /* @__PURE__ */ new Set(["idle", "active", "retry_wait", "stopped"]);
+var BROKER_HEALTH = /* @__PURE__ */ new Set(["initializing", "healthy", "degraded", "stopped"]);
+function isNonNegativeInteger(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function hasOnlyKeys(value, allowed) {
+  const allowedKeys = new Set(allowed);
+  return Object.keys(value).every((key) => allowedKeys.has(key));
+}
+function isHqGovernanceSnapshotPayload(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const payload = value;
+  if (!hasOnlyKeys(payload, [
+    "schemaVersion",
+    "projectId",
+    "observedAt",
+    "available",
+    "signal",
+    "daemon",
+    "attachmentBroker"
+  ]) || payload.schemaVersion !== 1 || typeof payload.projectId !== "string" || payload.projectId.length === 0 || typeof payload.observedAt !== "string" || typeof payload.available !== "boolean" || typeof payload.signal !== "object" || payload.signal === null || Array.isArray(payload.signal)) {
+    return false;
+  }
+  const signal = payload.signal;
+  if (!hasOnlyKeys(signal, ["level", "code", "operatorAction", "executionDisposition"]) || !SIGNAL_LEVELS.has(signal.level) || !SIGNAL_CODES.has(signal.code) || !OPERATOR_ACTIONS.has(signal.operatorAction) || signal.executionDisposition !== "continue") {
+    return false;
+  }
+  if (payload.available === false && (signal.level !== "unavailable" || payload.daemon !== void 0 || payload.attachmentBroker !== void 0) || payload.available === true && signal.level === "unavailable") {
+    return false;
+  }
+  if (payload.daemon !== void 0) {
+    if (typeof payload.daemon !== "object" || payload.daemon === null || Array.isArray(payload.daemon)) {
+      return false;
+    }
+    const daemon = payload.daemon;
+    if (!hasOnlyKeys(daemon, ["pid", "startedAt"]) || !isNonNegativeInteger(daemon.pid) || typeof daemon.startedAt !== "string") {
+      return false;
+    }
+  }
+  if (payload.attachmentBroker !== void 0 && payload.attachmentBroker !== null) {
+    if (typeof payload.attachmentBroker !== "object" || Array.isArray(payload.attachmentBroker)) {
+      return false;
+    }
+    const broker = payload.attachmentBroker;
+    if (!hasOnlyKeys(broker, [
+      "state",
+      "health",
+      "consecutiveFailures",
+      "pendingRevocations",
+      "auditHealthy",
+      "expiresAt",
+      "nextActionAt"
+    ]) || !BROKER_STATES.has(broker.state) || !BROKER_HEALTH.has(broker.health) || !isNonNegativeInteger(broker.consecutiveFailures) || !isNonNegativeInteger(broker.pendingRevocations) || typeof broker.auditHealthy !== "boolean" || broker.expiresAt !== void 0 && typeof broker.expiresAt !== "string" || broker.nextActionAt !== void 0 && typeof broker.nextActionAt !== "string") {
+      return false;
+    }
+  }
+  return true;
+}
 
 // src/hq/protocol/kanban.ts
 var HQ_KANBAN_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
@@ -47,13 +120,54 @@ function isTombstone(value) {
   return typeof record.boardId === "string" && HQ_KANBAN_ID_PATTERN.test(record.boardId) && typeof record.revision === "number" && Number.isSafeInteger(record.revision) && record.revision >= 0 && typeof record.deletedAt === "string" && Number.isFinite(Date.parse(record.deletedAt));
 }
 
-// src/hq/protocol/core.ts
+// src/hq/protocol/peer.ts
+var HQ_PEER_REHYDRATE_REASONS = /* @__PURE__ */ new Set([
+  "graceful",
+  "crash",
+  "heartbeat-timeout",
+  "auth-revoked"
+]);
+var HQ_PEER_REHYDRATE_HINT_MAX_CHARS = 280;
+var HQ_BROWSER_PEER_RESUME_CLIENT_ID = "__hq_peer__";
+function isStringOrUndefined(x) {
+  return x === void 0 || typeof x === "string";
+}
+function isHqPeerRehydratePayload(x) {
+  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
+  const v = x;
+  if (typeof v.projectId !== "string" || v.projectId.length === 0) return false;
+  if (typeof v.machineId !== "string" || v.machineId.length === 0) return false;
+  if (typeof v.leaderClientId !== "string" || v.leaderClientId.length === 0) return false;
+  if (typeof v.previousLeaderHandle !== "string" || v.previousLeaderHandle.length === 0) return false;
+  if (typeof v.reason !== "string" || !HQ_PEER_REHYDRATE_REASONS.has(v.reason)) return false;
+  if (typeof v.detectedAt !== "string" || !Number.isFinite(Date.parse(v.detectedAt))) return false;
+  if (!isStringOrUndefined(v.rehydrateHint)) return false;
+  if (v.rehydrateHint !== void 0 && v.rehydrateHint.length > HQ_PEER_REHYDRATE_HINT_MAX_CHARS) return false;
+  if (!isStringOrUndefined(v.rehydrateCommandId)) return false;
+  return true;
+}
+function isHqPeerLostPayload(x) {
+  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
+  const v = x;
+  if (typeof v.projectId !== "string" || v.projectId.length === 0) return false;
+  if (typeof v.machineId !== "string" || v.machineId.length === 0) return false;
+  if (typeof v.leaderClientId !== "string" || v.leaderClientId.length === 0) return false;
+  if (typeof v.previousLeaderHandle !== "string" || v.previousLeaderHandle.length === 0) return false;
+  if (typeof v.reason !== "string" || !HQ_PEER_REHYDRATE_REASONS.has(v.reason)) return false;
+  if (typeof v.detectedAt !== "string" || !Number.isFinite(Date.parse(v.detectedAt))) return false;
+  return true;
+}
+
+// src/hq/protocol/envelope.ts
 var HQ_PROTOCOL_VERSION = 1;
+
+// src/hq/protocol/core.ts
 var KNOWN_HQ_CLIENT_FRAME_TYPES = /* @__PURE__ */ new Set([
   "client.hello",
   "client.event",
   "client.command_poll",
-  "client.command_ack"
+  "client.command_ack",
+  "client.resume"
 ]);
 var HQ_CLIENT_KINDS = /* @__PURE__ */ new Set([
   "tui",
@@ -118,6 +232,11 @@ function isHqClientCommandAckMessage(x) {
   const v = x;
   return typeof v.clientId === "string" && typeof v.projectId === "string" && typeof v.commandId === "string" && typeof v.status === "string" && HQ_COMMAND_ACK_STATUSES.has(v.status) && (v.message === void 0 || typeof v.message === "string");
 }
+function isHqClientResumeMessage(x) {
+  if (typeof x !== "object" || x === null) return false;
+  const v = x;
+  return typeof v.type === "string" && v.type === "client.resume" && Number.isSafeInteger(v.lastSeqSeen) && v.lastSeqSeen >= 0 && (v.clientId === void 0 || typeof v.clientId === "string") && (v.projectId === void 0 || typeof v.projectId === "string");
+}
 function parseHqFrame(raw) {
   let parsed;
   try {
@@ -172,6 +291,19 @@ function parseHqFrame(raw) {
           ...typeof obj.message === "string" ? { message: obj.message } : {}
         }
       };
+    case "client.resume":
+      if (!isHqClientResumeMessage(obj)) {
+        return { ok: false, reason: "malformed" };
+      }
+      return {
+        ok: true,
+        frame: {
+          type: "client.resume",
+          lastSeqSeen: obj.lastSeqSeen,
+          ...typeof obj.clientId === "string" ? { clientId: obj.clientId } : {},
+          ...typeof obj.projectId === "string" ? { projectId: obj.projectId } : {}
+        }
+      };
     default: {
       const _exhaustive = obj.type;
       return _exhaustive;
@@ -194,7 +326,10 @@ var KNOWN_HQ_EVENT_PAYLOAD_TYPES = /* @__PURE__ */ new Set([
   "session.usage",
   "client.heartbeat",
   "mcp.health.snapshot",
-  "mcp.operation"
+  "mcp.operation",
+  "governance.snapshot",
+  "peer.rehydrate",
+  "peer.lost"
 ]);
 function isHqMcpLatencySummary(x) {
   if (typeof x !== "object" || x === null) return false;
@@ -458,6 +593,12 @@ function parseHqEventPayload(eventType, payload) {
       return isHqMcpHealthSnapshotPayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
     case "mcp.operation":
       return isHqMcpOperationPayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
+    case "governance.snapshot":
+      return isHqGovernanceSnapshotPayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
+    case "peer.rehydrate":
+      return isHqPeerRehydratePayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
+    case "peer.lost":
+      return isHqPeerLostPayload(payload) ? { ok: true, payload } : { ok: false, reason: "malformed-payload" };
     default: {
       const _exhaustive = eventType;
       return _exhaustive;
@@ -479,8 +620,42 @@ function createHqEventEnvelope(input) {
   };
 }
 
+// src/hq/protocol/resume.ts
+var HQ_RESUME_GAP_MAX_ENVELOPES = 1e3;
+var HQ_RESUME_GAP_MAX_BYTES = 1048576;
+var HQ_RESUME_GAP_MAX_STALE_MS = 24 * 60 * 60 * 1e3;
+function isHqResumeGapMessage(x) {
+  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
+  const v = x;
+  if (v.type !== "hq.resume_gap") return false;
+  if (!Number.isSafeInteger(v.lastSeqSeen) || v.lastSeqSeen < 0) return false;
+  if (!Array.isArray(v.envelopes)) return false;
+  if (v.envelopes.length > HQ_RESUME_GAP_MAX_ENVELOPES) return false;
+  if (typeof v.truncated !== "boolean") return false;
+  return true;
+}
+function isHqResumeRejectMessage(x) {
+  if (typeof x !== "object" || x === null || Array.isArray(x)) return false;
+  const v = x;
+  if (v.type !== "hq.resume_reject") return false;
+  if (v.reason !== "gap_too_large" && v.reason !== "last_seen_too_old" && v.reason !== "log_unavailable") {
+    return false;
+  }
+  if (typeof v.detectedAt !== "string" || !Number.isFinite(Date.parse(v.detectedAt))) return false;
+  return true;
+}
+
+// src/hq/protocol/tool.ts
+var DEFAULT_HQ_REDACTION_POLICY = {
+  rawContent: true,
+  toolArgs: "full",
+  paths: "full"
+};
+var HQ_TRANSCRIPT_TEXT_CAP = 16e3;
+
 // src/hq/publisher.ts
 import { randomUUID } from "node:crypto";
+import * as v8 from "node:v8";
 
 // src/coordination/mailbox-types.ts
 var SESSION_RECIPIENT_PREFIX = "@session:";
@@ -491,61 +666,71 @@ var PATTERNS = [
   // strings don't trigger false positives.
   {
     type: "anthropic_key",
-    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g,
+    anchor: "sk-ant-"
   },
-  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
-  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g },
-  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g },
-  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g },
-  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g },
-  { type: "slack_token", regex: /(?<![A-Za-z0-9-])xox[abpos]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g },
+  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g, anchor: "sk-" },
+  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g, anchor: "ghp_" },
+  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g, anchor: "github_pat_" },
+  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g, anchor: "AKIA" },
+  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g, anchor: "AIza" },
+  { type: "slack_token", regex: /(?<![A-Za-z0-9-])xox[abpos]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g, anchor: "xox" },
   {
     type: "stripe_key",
-    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g,
+    anchor: "sk_"
   },
   {
     type: "twilio_sid",
-    regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g,
+    anchor: "AC"
   },
   {
     type: "telegram_bot_token",
     // Telegram tokens are of the form  bot<digits>:<alphanum>  in URL paths
-    regex: /\/bot\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+    regex: /\/bot\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "/bot"
   },
   {
     type: "jwt",
     // Anchored: look for literal "eyJ" which is unambiguous for JWT header
-    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g
+    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g,
+    anchor: "eyJ"
   },
   {
     type: "private_key",
     // Anchored: start must be BEGIN, end must be END with no extra dashes after END
-    regex: /(?:^|\n)-----BEGIN (?:RSA|EC|OPENSSH|DSA|PGP)? ?PRIVATE KEY-----[\s\S]*?-----END[^-]*-----(?:\n|$)/g
+    regex: /(?:^|\n)-----BEGIN (?:RSA|EC|OPENSSH|DSA|PGP)? ?PRIVATE KEY-----[\s\S]*?-----END[^-]*-----(?:\n|$)/g,
+    anchor: "-----BEGIN"
   },
-  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s"'`]+/g },
-  { type: "postgres_uri", regex: /postgres(?:ql)?:\/\/[^\s"'`]+/g },
-  { type: "mysql_uri", regex: /mysql:\/\/[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s"'`]+/g },
+  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s"'`]+/g, anchor: "mongodb" },
+  { type: "postgres_uri", regex: /postgres(?:ql)?:\/\/[^\s"'`]+/g, anchor: "postgres" },
+  { type: "mysql_uri", regex: /mysql:\/\/[^\s"'`]+/g, anchor: "mysql://" },
+  { type: "redis_uri", regex: /redis:\/\/[^\s"'`]+/g, anchor: "redis://" },
   // AI/ML provider keys — modern LLM services with well-known prefixes
   {
     type: "huggingface_token",
     // HuggingFace tokens: hf_ followed by 34 alphanumeric chars
-    regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g,
+    anchor: "hf_"
   },
   {
     type: "replicate_token",
     // Replicate tokens: r8_ followed by 40+ alphanumeric chars
-    regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "r8_"
   },
   {
     type: "perplexity_key",
     // Perplexity API keys: pplx- followed by 40+ alphanumeric chars
-    regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "pplx-"
   },
   {
     type: "groq_key",
     // Groq API keys: gsk_ followed by 40+ alphanumeric chars
-    regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+    regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "gsk_"
   },
   {
     type: "bearer_token",
@@ -558,7 +743,8 @@ var PATTERNS = [
     // tokens sharing a single delimiter (`Bearer a… Bearer b…`) must both be
     // redacted. A consuming trailing delimiter would eat the separator the
     // next match needs for its leading anchor, leaking the second token.
-    regex: /(?:^|[^A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?=$|[^A-Za-z0-9_.~+/-])/g
+    regex: /(?:^|[^A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?=$|[^A-Za-z0-9_.~+/-])/g,
+    anchor: "Bearer"
   },
   {
     type: "high_entropy_env",
@@ -574,7 +760,89 @@ var PATTERNS = [
     // replacement so the separator between adjacent secrets is preserved
     // rather than collapsed. Capture groups are therefore: 1=leading
     // delimiter, 2=key name, 3=value.
-    regex: /(^|\s)([A-Z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))\s*[:=]\s*['"]?([A-Za-z0-9_/+=-]{20,512})['"]?(?=\s|$)/g
+    regex: /(^|\s)([A-Z_]{4,}(?:KEY|TOKEN|SECRET|PASSWORD|PWD))\s*[:=]\s*['"]?([A-Za-z0-9_/+=-]{20,512})['"]?(?=\s|$)/g,
+    anchor: ["KEY", "TOKEN", "SECRET", "PASSWORD", "PWD"]
+  },
+  // ── Ported from packages/plugins credential-patterns.ts (WS-034) ─────────
+  // The plugin runtime carried 37 patterns while this scrubber — the one that
+  // guards session JSONL, chronicle, HQ broadcast, WebUI events and the auth
+  // audit — carried 22. The plugin side already had a parity test; it just did
+  // not cover core. Most consequential: WrongStack mints `gho_` tokens itself
+  // in the Copilot OAuth flow, and `gh[ousr]_` was absent here.
+  {
+    type: "github_oauth_token",
+    regex: /(?<![A-Za-z0-9])gh[ousr]_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g,
+    anchor: ["gho_", "ghu_", "ghs_", "ghr_"]
+  },
+  {
+    type: "gitlab_pat",
+    regex: /(?<![A-Za-z0-9])glpat-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "glpat-"
+  },
+  {
+    type: "gitlab_runner_token",
+    regex: /(?<![A-Za-z0-9])glrt-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "glrt-"
+  },
+  {
+    type: "npm_token",
+    regex: /(?<![A-Za-z0-9])npm_[A-Za-z0-9]{36}(?![A-Za-z0-9])/g,
+    anchor: "npm_"
+  },
+  {
+    type: "slack_app_token",
+    regex: /(?<![A-Za-z0-9-])xapp-\d-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g,
+    anchor: "xapp-"
+  },
+  {
+    type: "slack_webhook",
+    regex: /https:\/\/hooks\.slack\.com\/services\/T[A-Za-z0-9_-]+\/B[A-Za-z0-9_-]+\/[A-Za-z0-9]{16,}/g,
+    anchor: "hooks.slack.com"
+  },
+  {
+    type: "sendgrid_key",
+    regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "SG."
+  },
+  {
+    type: "digitalocean_token",
+    regex: /(?<![A-Za-z0-9])dop_v1_[a-f0-9]{64}(?![A-Za-z0-9])/g,
+    anchor: "dop_v1_"
+  },
+  {
+    type: "doppler_token",
+    regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "dp."
+  },
+  {
+    type: "shopify_token",
+    regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g,
+    anchor: "shp"
+  },
+  {
+    type: "docker_pat",
+    regex: /(?<![A-Za-z0-9])dckr_pat_[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "dckr_pat_"
+  },
+  {
+    type: "linear_key",
+    regex: /(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g,
+    anchor: "lin_api_"
+  },
+  {
+    type: "atlassian_token",
+    regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g,
+    anchor: "ATATT3"
+  },
+  {
+    type: "square_token",
+    regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: ["sq0atp-", "sq0csp-", "EAAA"]
+  },
+  {
+    type: "google_oauth_client_secret",
+    regex: /(?<![A-Za-z0-9_-])GOCSPX-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
+    anchor: "GOCSPX-"
   }
 ];
 var SIMPLE_PATTERNS = PATTERNS.filter((p) => p.type !== "high_entropy_env");
@@ -583,32 +851,32 @@ var HIGH_ENTROPY_REGEX = PATTERNS.find((p) => p.type === "high_entropy_env").reg
 var COMBINED_REPLACEMENTS = SIMPLE_PATTERNS.map((p) => `[REDACTED:${p.type}]`);
 var SCRUB_CHUNK_BYTES = 64 * 1024;
 var SCRUB_OVERLAP_BYTES = 1024;
+var PATTERN_ANCHORS = [
+  ...new Set(
+    PATTERNS.flatMap(
+      (pattern) => typeof pattern.anchor === "string" ? [pattern.anchor] : [...pattern.anchor]
+    )
+  )
+];
+var JSON_KEY_ANCHORS = [
+  '"apiKey"',
+  '"api_key"',
+  '"token"',
+  '"secret"',
+  '"password"',
+  '"authorization"',
+  '"bearer"',
+  '"private_key"',
+  '"access_token"',
+  '"refresh_token"',
+  '"client_secret"'
+];
+var ALL_ANCHORS = [...PATTERN_ANCHORS, ...JSON_KEY_ANCHORS];
 function hasCredentialAnchors(text) {
-  return text.includes("-----BEGIN") || // Private keys (most unique → cheap reject)
-  text.includes("sk-") || // Anthropic + OpenAI keys
-  text.includes("sk_") || // Stripe live/test keys
-  text.includes("ghp_") || // GitHub PAT v1
-  text.includes("github_pat_") || // GitHub PAT v2
-  text.includes("eyJ") || // JWT
-  text.includes("AKIA") || // AWS access key
-  text.includes("AIza") || // GCP service key
-  text.includes("xox") || // Slack token (xoxa/xoxb/xoxp/xoxo/xoxs)
-  text.includes("Bearer ") || // Bearer token (space suffix reduces false positives)
-  text.includes("/bot") || // Telegram bot token (URL path pattern)
-  text.includes("hf_") || // HuggingFace token
-  text.includes("r8_") || // Replicate token
-  text.includes("pplx-") || // Perplexity API key
-  text.includes("gsk_") || // Groq API key
-  text.includes("_KEY=") || // High-entropy env vars: API_KEY=, SECRET_KEY=, ...
-  text.includes("_TOKEN=") || // ACCESS_TOKEN=, AUTH_TOKEN=, ...
-  text.includes("_SECRET=") || // API_SECRET=, CLIENT_SECRET=, ...
-  text.includes("_PASSWORD=") || // DB_PASSWORD=, ROOT_PASSWORD=, ...
-  text.includes("mongodb://") || text.includes("mongodb+srv://") || text.includes("postgres://") || text.includes("postgresql://") || text.includes("mysql://") || text.includes("redis://") || // JSON-style credential keys: tool outputs often serialise objects as
-  // raw JSON strings rather than parsed objects. The value may not start
-  // with a recognisable prefix (sk-, ghp_, etc.), so we anchor on common
-  // key names. The `"` prefix avoids matching prose that happens to mention
-  // these words — JSON serialisation always quotes string keys.
-  text.includes('"apiKey"') || text.includes('"api_key"') || text.includes('"token"') || text.includes('"secret"') || text.includes('"password"') || text.includes('"authorization"') || text.includes('"bearer"') || text.includes('"private_key"') || text.includes('"access_token"') || text.includes('"refresh_token"') || text.includes('"client_secret"');
+  for (const anchor of ALL_ANCHORS) {
+    if (text.includes(anchor)) return true;
+  }
+  return false;
 }
 var DefaultSecretScrubber = class {
   scrub(text) {
@@ -812,7 +1080,7 @@ function scrubAndTruncateHqPreview(value, maxLength = 280) {
   return summarizeString(value, maxLength, true);
 }
 function visitValue(value, options, key) {
-  if (!options.policy.rawContent && key !== void 0 && isSensitiveKey(key)) {
+  if (key !== void 0 && isSensitiveKey(key)) {
     return { value: SENSITIVE_FIELD_REPLACEMENT, redacted: true };
   }
   if (typeof value === "string") {
@@ -823,7 +1091,7 @@ function visitValue(value, options, key) {
     if (!options.preserveRawContentKeys && !options.policy.rawContent && key !== void 0 && isRawContentKey(key)) {
       return { value: RAW_CONTENT_REPLACEMENT, redacted: true };
     }
-    const scrubbed = summarizeString(value, options.maxSummaryLength, !options.policy.rawContent);
+    const scrubbed = summarizeString(value, options.maxSummaryLength, true);
     return { value: scrubbed, redacted: scrubbed !== value };
   }
   if (value === null || typeof value !== "object") return { value, redacted: false };
@@ -875,7 +1143,7 @@ function redactHqEvent(event, options = {}) {
 }
 function summarizeHqToolArgs(value, options = {}) {
   const policy = resolveHqRedactionPolicy(options.policy);
-  if (policy.toolArgs === "full") return value;
+  if (policy.toolArgs === "full") return redactHqValue(value, options).value;
   if (policy.toolArgs === "none") return "[REDACTED:hq_tool_args]";
   if (policy.toolArgs === "redacted") return redactHqValue(value, options).value;
   if (value === null || typeof value !== "object") return redactHqValue(value, options).value;
@@ -1030,9 +1298,19 @@ var DEFAULT_RECONNECT_BASE_MS = 1e3;
 var DEFAULT_RECONNECT_MAX_MS = 3e4;
 var DEFAULT_DISCOVERY_POLL_MS = 5e3;
 var DEFAULT_MAX_QUEUED_MESSAGES = 2e3;
+var DEFAULT_MAX_QUEUED_BYTES = Math.min(
+  16 * 1024 * 1024,
+  Math.floor(v8.getHeapStatistics().heap_size_limit * 0.1)
+);
 var DEFAULT_COMMAND_POLL_INTERVAL_MS = 500;
 var DEFAULT_COMMAND_POLL_LIMIT = 25;
 var DEFAULT_HEARTBEAT_INTERVAL_MS = 25e3;
+function queuedFrameCoalesceKey(frame) {
+  if (frame.type !== "client.event" || !frame.event.type.endsWith(".snapshot")) {
+    return void 0;
+  }
+  return [frame.event.type, frame.event.sessionId ?? "", frame.event.runId ?? ""].join("|");
+}
 function defaultSocketFactory(url) {
   const WebSocketCtor = globalThis.WebSocket;
   if (WebSocketCtor === void 0) {
@@ -1079,6 +1357,7 @@ var HqPublisher = class {
     this.reconnectBaseMs = options.reconnectBaseMs ?? DEFAULT_RECONNECT_BASE_MS;
     this.reconnectMaxMs = options.reconnectMaxMs ?? DEFAULT_RECONNECT_MAX_MS;
     this.maxQueuedMessages = options.maxQueuedMessages ?? DEFAULT_MAX_QUEUED_MESSAGES;
+    this.maxQueuedBytes = options.maxQueuedBytes ?? DEFAULT_MAX_QUEUED_BYTES;
     this.resolvedRedactionPolicy = resolveHqRedactionPolicy(options.redactionPolicy);
     this.logger = options.logger;
   }
@@ -1091,11 +1370,26 @@ var HqPublisher = class {
   reconnectBaseMs;
   reconnectMaxMs;
   maxQueuedMessages;
+  maxQueuedBytes;
   resolvedRedactionPolicy;
   logger;
   socket = null;
   seq = 0;
   queue = [];
+  queueBytes = 0;
+  /**
+   * Cumulative count of frames dropped by the bounded outbound queue when the
+   * count/byte cap is exceeded while HQ is unreachable. Lifetime statistic —
+   * intentionally NOT reset on close()/reconnect, so it reflects total
+   * telemetry loss to overflow for this publisher instance.
+   */
+  droppedFrames = 0;
+  /** Cumulative UTF-8 bytes of frames dropped on overflow (see droppedFrames). */
+  droppedBytes = 0;
+  /** Obsolete state snapshots replaced in-place while HQ was unreachable. */
+  coalescedFrames = 0;
+  /** UTF-8 bytes released by snapshot coalescing. */
+  coalescedBytes = 0;
   stopped = false;
   reconnectAttempt = 0;
   connectWarningEmitted = false;
@@ -1174,6 +1468,7 @@ var HqPublisher = class {
     this.stopCommandPolling();
     this.stopHeartbeat();
     this.queue = [];
+    this.queueBytes = 0;
     const socket = this.socket;
     this.socket = null;
     socket?.close(1e3, "hq publisher closed");
@@ -1240,6 +1535,18 @@ var HqPublisher = class {
   get redactionPolicy() {
     return this.resolvedRedactionPolicy;
   }
+  /** Current outbound queue pressure — useful for flow control in telemetry bridges. */
+  getQueueStats() {
+    return {
+      entries: this.queue.length,
+      bytes: this.queueBytes,
+      maxBytes: this.maxQueuedBytes,
+      droppedFrames: this.droppedFrames,
+      droppedBytes: this.droppedBytes,
+      coalescedFrames: this.coalescedFrames,
+      coalescedBytes: this.coalescedBytes
+    };
+  }
   /** Publish a live session/terminal snapshot (state + agents). */
   publishSessionSnapshot(payload, opts) {
     return this.publishEvent({
@@ -1323,12 +1630,43 @@ var HqPublisher = class {
       socket.send(serialized);
       return;
     }
-    this.enqueue(serialized);
+    this.enqueue(serialized, queuedFrameCoalesceKey(frame));
     this.connect();
   }
-  enqueue(serialized) {
-    if (this.queue.length >= this.maxQueuedMessages) this.queue.shift();
-    this.queue.push(serialized);
+  enqueue(serialized, coalesceKey) {
+    const bytes = Buffer.byteLength(serialized, "utf8");
+    if (bytes > this.maxQueuedBytes) {
+      this.droppedFrames += 1;
+      this.droppedBytes += bytes;
+      return;
+    }
+    if (coalesceKey !== void 0) {
+      let existingIndex = -1;
+      for (let index = this.queue.length - 1; index >= 0; index -= 1) {
+        if (this.queue[index]?.coalesceKey === coalesceKey) {
+          existingIndex = index;
+          break;
+        }
+      }
+      if (existingIndex !== -1) {
+        const [obsolete] = this.queue.splice(existingIndex, 1);
+        if (obsolete !== void 0) {
+          this.queueBytes -= obsolete.bytes;
+          this.coalescedFrames += 1;
+          this.coalescedBytes += obsolete.bytes;
+        }
+      }
+    }
+    while ((this.queue.length >= this.maxQueuedMessages || this.queueBytes + bytes > this.maxQueuedBytes) && this.queue.length > 0) {
+      const dropped = this.queue.shift();
+      if (dropped !== void 0) {
+        this.queueBytes -= dropped.bytes;
+        this.droppedFrames += 1;
+        this.droppedBytes += dropped.bytes;
+      }
+    }
+    this.queue.push({ serialized, bytes, coalesceKey });
+    this.queueBytes += bytes;
   }
   /** Batch-dequeue up to 50 frames at a time, yielding to the microtask
    *  queue between batches so we don't starve the event loop on reconnect. */
@@ -1336,7 +1674,11 @@ var HqPublisher = class {
     const socket = this.socket;
     if (socket?.readyState !== OPEN_STATE || this.queue.length === 0) return;
     const batch = this.queue.splice(0, 50);
-    for (const frame of batch) socket.send(frame);
+    for (const frame of batch) {
+      socket.send(frame.serialized);
+      this.queueBytes -= frame.bytes;
+    }
+    this.queueBytes = Math.max(0, this.queueBytes);
     if (this.queue.length > 0) setImmediate(() => this.flushQueue());
   }
   startCommandPolling() {
@@ -1673,10 +2015,51 @@ function isMissingFileError(error) {
 
 // src/hq/auth-store.ts
 import { createHash as createHash2, randomBytes, randomUUID as randomUUID2, scrypt, timingSafeEqual } from "node:crypto";
-import * as fs3 from "node:fs/promises";
 import * as syncFs from "node:fs";
+import * as fs3 from "node:fs/promises";
 import * as path4 from "node:path";
 
+// src/security/file-permissions.ts
+import { chmod } from "node:fs/promises";
+var SECRET_FILE_MODE = 384;
+async function restrictFilePermissions(filePath, opts) {
+  const label = opts?.label ?? "file-permissions";
+  const warn = opts?.warn ?? ((msg) => console.warn(msg));
+  if (process.platform === "win32") {
+    try {
+      const { execFile } = await import("node:child_process");
+      const { promisify } = await import("node:util");
+      const execFileAsync = promisify(execFile);
+      const user = windowsAccountName();
+      if (!user) {
+        warn(
+          `[${label}] Could not determine the current Windows user for ${filePath}; skipping icacls hardening.`
+        );
+        return;
+      }
+      await execFileAsync("icacls", [filePath, "/inheritance:r", "/grant:r", `${user}:(F)`], {
+        windowsHide: true
+      });
+    } catch {
+      warn(
+        `[${label}] Could not restrict permissions on ${filePath} \u2014 it may be readable by other users on this system.`
+      );
+    }
+  } else {
+    try {
+      await chmod(filePath, SECRET_FILE_MODE);
+    } catch {
+    }
+  }
+}
+function windowsAccountName() {
+  const username = process.env.USERNAME || process.env.USER;
+  if (!username || username.includes("\0")) return void 0;
+  const domain = process.env.USERDOMAIN;
+  if (domain && !domain.includes("\0")) return `${domain}\\${username}`;
+  return username;
+}
+
 // src/utils/wstack-paths.ts
 import { createHash } from "node:crypto";
 import * as fs2 from "node:fs";
@@ -1806,11 +2189,31 @@ function resolveWstackPaths(opts) {
 }
 
 // src/hq/auth-audit.ts
-import { appendFileSync, mkdirSync } from "node:fs";
+import { appendFileSync, readFileSync as readFileSync3, mkdirSync } from "node:fs";
 import * as path3 from "node:path";
 function hqAuthAuditPath(dataDir) {
   return path3.join(dataDir, "auth-audit.jsonl");
 }
+function readHqAuthAuditTail(dataDir, maxEntries = 50) {
+  const filePath = hqAuthAuditPath(dataDir);
+  let content;
+  try {
+    content = readFileSync3(filePath, "utf8");
+  } catch {
+    return [];
+  }
+  const lines = content.trimEnd().split("\n");
+  const tail = lines.slice(-maxEntries);
+  const entries = [];
+  for (const line of tail) {
+    if (!line) continue;
+    try {
+      entries.push(JSON.parse(line));
+    } catch {
+    }
+  }
+  return entries.reverse();
+}
 function appendHqAuthAudit(dataDir, entry, options) {
   try {
     mkdirSync(dataDir, { recursive: true });
@@ -1838,6 +2241,20 @@ function resolveHqDataDir(override, env = process.env) {
   if (!raw) return defaultHqDataDir();
   return path4.isAbsolute(raw) ? path4.resolve(raw) : path4.resolve(process.cwd(), raw);
 }
+function hqTokenVerifier(secret) {
+  return createHash2("sha256").update(secret, "utf8").digest("hex");
+}
+function hqTokenKey(token) {
+  if (token.verifier !== void 0 && token.verifier.length > 0) return token.verifier;
+  return token.token ? hqTokenVerifier(token.token) : "";
+}
+function hashBrowserToken(token) {
+  if (token.verifier !== void 0 && token.verifier.length > 0) {
+    return token.token ? { ...token, token: "" } : token;
+  }
+  if (!token.token) return token;
+  return { ...token, verifier: hqTokenVerifier(token.token), token: "" };
+}
 function isTokenExpired(token, at = Date.now(), clockSkewMs = 0) {
   if (token === void 0) return false;
   const expiresAt = token.expiresAt;
@@ -1871,6 +2288,9 @@ function hqAuthContentHash(file) {
       ...file.clientTokens !== void 0 ? { clientTokens: file.clientTokens.map(redactToken) } : {},
       ...file.passwordHash !== void 0 ? { passwordHash: REDACTED } : {},
       ...file.cookieSecret !== void 0 ? { cookieSecret: REDACTED } : {},
+      ...file.totpSecret !== void 0 ? { totpSecret: REDACTED } : {},
+      ...file.totpPendingSecret !== void 0 ? { totpPendingSecret: REDACTED } : {},
+      ...file.totpRecoveryCodes !== void 0 ? { totpRecoveryCodes: file.totpRecoveryCodes.map(() => REDACTED) } : {},
       ...file.alertRules !== void 0 ? { alertRules: file.alertRules } : {}
     };
     const payload = JSON.stringify(projection);
@@ -1890,8 +2310,10 @@ async function writeHqRuntimeFile(dataDir, file) {
     ...file,
     updatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  await atomicWrite(hqRuntimeFilePath(dataDir), `${JSON.stringify(payload, null, 2)}
-`, { mode: 384 });
+  const target = hqRuntimeFilePath(dataDir);
+  await atomicWrite(target, `${JSON.stringify(payload, null, 2)}
+`, { mode: SECRET_FILE_MODE });
+  await restrictFilePermissions(target, { label: "hq-runtime" });
 }
 function isProcessAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
@@ -1904,7 +2326,9 @@ function isProcessAlive(pid) {
 }
 function readHqRuntimeFileSync(dataDir) {
   try {
-    const parsed = JSON.parse(syncFs.readFileSync(hqRuntimeFilePath(dataDir), "utf8"));
+    const parsed = JSON.parse(
+      syncFs.readFileSync(hqRuntimeFilePath(dataDir), "utf8")
+    );
     if (typeof parsed.url !== "string" || parsed.url.trim().length === 0) return void 0;
     if (typeof parsed.pid === "number" && !isProcessAlive(parsed.pid)) return void 0;
     return {
@@ -1947,10 +2371,17 @@ async function writeHqAuthFile(dataDir, file) {
   const payload = {
     ...file,
     version: HQ_AUTH_FILE_VERSION,
-    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    // WS-044: browser secrets never touch the disk. Any legacy cleartext in
+    // the incoming file is converted here, so the first write after an
+    // upgrade migrates the whole list — no separate migration step to forget
+    // to run, and no window where an old file stays cleartext because nothing
+    // happened to rewrite it.
+    ...file.browserTokens !== void 0 ? { browserTokens: file.browserTokens.map(hashBrowserToken) } : {}
   };
   await atomicWrite(target, `${JSON.stringify(payload, null, 2)}
-`, { mode: 384 });
+`, { mode: SECRET_FILE_MODE });
+  await restrictFilePermissions(target, { label: "hq-auth" });
 }
 async function ensureHqFirstRunAuthFile(dataDir, opts = {}) {
   const file = hqAuthFilePath(dataDir);
@@ -2156,6 +2587,7 @@ function discoverLocalHqEndpoint(options = {}) {
   const dataDir = resolveHqDataDir(options.dataDir, options.env ?? process.env);
   const runtime = readHqRuntimeFileSync(dataDir);
   if (runtime === void 0) return void 0;
+  if (!isLoopbackHqUrl(runtime.url)) return void 0;
   const token = readFirstClientTokenFromAuthFile(dataDir);
   return { url: runtime.url, ...token ? { token } : {} };
 }
@@ -2685,97 +3117,125 @@ function startSessionTelemetryBridge(opts) {
     publishSnapshot();
   });
   publishSnapshot(true);
-  let offset = 0;
-  let partial = "";
-  let seqEmitted = 0;
-  let tailing = false;
-  let watcher = null;
-  let watchPending = false;
-  function setupWatcher() {
-    if (disposed || watcher) return;
-    try {
-      const nextWatcher = fs5.watch(sessionFile, () => {
-        if (watchPending || disposed) return;
-        watchPending = true;
-        setTimeout(() => {
-          watchPending = false;
-          void tail();
-        }, 25);
-      });
-      nextWatcher.on("error", () => {
-        try {
-          nextWatcher.close();
-        } catch {
-        }
-        if (watcher === nextWatcher) watcher = null;
-      });
-      watcher = nextWatcher;
-    } catch {
-      watcher = null;
-    }
-  }
-  async function tail() {
-    if (disposed || tailing) return;
-    tailing = true;
-    try {
-      const stat3 = await fsp.stat(sessionFile).catch(() => null);
+  let prevOnAppend;
+  if (opts.writer?.setOnAppend) {
+    prevOnAppend = opts.writer.onAppend;
+    opts.writer.setOnAppend((event) => {
       if (disposed) return;
-      if (!stat3) return;
-      setupWatcher();
-      if (stat3.size <= offset) return;
-      const fd = await fsp.open(sessionFile, "r");
       try {
-        if (disposed) return;
-        const len = stat3.size - offset;
-        const buf = Buffer.allocUnsafe(len);
-        await fd.read(buf, 0, len, offset);
-        offset = stat3.size;
-        partial += buf.toString("utf8");
-        const lines = partial.split("\n");
-        partial = lines.pop() ?? "";
-        const entries = [];
-        for (const line of lines) {
-          const trimmed = line.trim();
-          if (!trimmed) continue;
-          let obj;
-          try {
-            obj = JSON.parse(trimmed);
-          } catch {
-            continue;
-          }
-          for (const entry of mapSessionEventToEntries(obj)) entries.push(entry);
-        }
+        prevOnAppend?.(event);
+      } catch {
+      }
+      try {
+        const entries = mapSessionEventToEntries(event);
         if (entries.length > 0) {
           publishTranscriptEntries(entries);
           lastActivityAt = now();
         }
-      } finally {
-        await fd.close();
+      } catch {
       }
-    } catch {
-    } finally {
-      tailing = false;
-    }
+    });
   }
+  let seqEmitted = 0;
+  let watcher = null;
+  let tailTimer = null;
   const snapshotTimer = setInterval(() => publishSnapshot(true), opts.snapshotIntervalMs ?? 2500);
   snapshotTimer.unref?.();
-  const fastTailMs = opts.transcriptIntervalMs ?? 500;
-  const relaxedTailMs = opts.transcriptFallbackIntervalMs ?? (opts.transcriptIntervalMs !== void 0 ? opts.transcriptIntervalMs : 5e3);
-  let tailTimer = null;
-  function scheduleTail() {
-    if (disposed) return;
-    tailTimer = setTimeout(
-      () => {
-        void tail().finally(scheduleTail);
-      },
-      watcher ? relaxedTailMs : fastTailMs
-    );
-    tailTimer.unref?.();
+  if (!opts.writer?.setOnAppend) {
+    let setupWatcher2 = function() {
+      if (disposed || watcher) return;
+      try {
+        const nextWatcher = fs5.watch(sessionFile, () => {
+          if (watchPending || disposed) return;
+          watchPending = true;
+          setTimeout(() => {
+            watchPending = false;
+            void tail();
+          }, 25);
+        });
+        nextWatcher.on("error", () => {
+          try {
+            nextWatcher.close();
+          } catch {
+          }
+          if (watcher === nextWatcher) watcher = null;
+        });
+        watcher = nextWatcher;
+      } catch {
+        watcher = null;
+      }
+    }, scheduleTail2 = function() {
+      if (disposed) return;
+      tailTimer = setTimeout(
+        () => {
+          void tail().finally(scheduleTail2);
+        },
+        watcher ? relaxedTailMs : fastTailMs
+      );
+      tailTimer.unref?.();
+    };
+    var setupWatcher = setupWatcher2, scheduleTail = scheduleTail2;
+    let offset = 0;
+    let partial = "";
+    let tailing = false;
+    let watchPending = false;
+    async function tail() {
+      if (disposed || tailing) return;
+      tailing = true;
+      try {
+        const stat3 = await fsp.stat(sessionFile).catch(() => null);
+        if (disposed) return;
+        if (!stat3) return;
+        setupWatcher2();
+        if (stat3.size <= offset) return;
+        const fd = await fsp.open(sessionFile, "r");
+        try {
+          if (disposed) return;
+          const len = stat3.size - offset;
+          const buf = Buffer.allocUnsafe(len);
+          const { bytesRead } = await fd.read(buf, 0, len, offset);
+          const actualBuf = bytesRead < len ? buf.subarray(0, bytesRead) : buf;
+          offset += bytesRead;
+          partial += actualBuf.toString("utf8");
+          const lines = partial.split("\n");
+          partial = lines.pop() ?? "";
+          const entries = [];
+          for (const line of lines) {
+            const trimmed = line.trim();
+            if (!trimmed) continue;
+            let obj;
+            try {
+              obj = JSON.parse(trimmed);
+            } catch {
+              continue;
+            }
+            for (const entry of mapSessionEventToEntries(obj)) entries.push(entry);
+          }
+          if (entries.length > 0) {
+            publishTranscriptEntries(entries);
+            lastActivityAt = now();
+          }
+        } finally {
+          await fd.close();
+        }
+      } catch {
+      } finally {
+        tailing = false;
+      }
+    }
+    const fastTailMs = opts.transcriptIntervalMs ?? 500;
+    const relaxedTailMs = opts.transcriptFallbackIntervalMs ?? (opts.transcriptIntervalMs !== void 0 ? opts.transcriptIntervalMs : 5e3);
+    void tail().finally(scheduleTail2);
   }
-  void tail().finally(scheduleTail);
   return () => {
     if (disposed) return;
     disposed = true;
+    if (opts.writer?.setOnAppend) {
+      try {
+        opts.writer.setOnAppend(prevOnAppend);
+      } catch {
+      }
+    }
     offAgents?.();
     if (watcher) {
       try {
@@ -3121,11 +3581,8 @@ function startToolTelemetryBridge(opts) {
 }
 function truncateForSummary(output, policy, max = 280) {
   const resolved = resolveHqRedactionPolicy(policy);
-  if (resolved.rawContent) {
-    if (output.length <= max) return output;
-    return `${output.slice(0, max)}\u2026[truncated:${output.length - max}]`;
-  }
-  return scrubAndTruncateHqPreview(output, max) ?? "";
+  const limit = resolved.rawContent ? Math.max(max, HQ_TRANSCRIPT_TEXT_CAP) : max;
+  return scrubAndTruncateHqPreview(output, limit) ?? "";
 }
 
 // src/hq/cost-bridge.ts
@@ -3247,6 +3704,7 @@ var BestEffortLatestQueue = class {
 };
 
 // src/hq/kanban-store.ts
+var MAX_HQ_KANBAN_CACHE_PROJECTS = 32;
 var HqKanbanStore = class {
   dirPath;
   cache = /* @__PURE__ */ new Map();
@@ -3257,14 +3715,18 @@ var HqKanbanStore = class {
   }
   async load(projectId) {
     const cached = this.cache.get(projectId);
-    if (cached !== void 0) return structuredClone(cached);
+    if (cached !== void 0) {
+      this.cache.delete(projectId);
+      this.cache.set(projectId, cached);
+      return structuredClone(cached);
+    }
     try {
       const content = await fs6.readFile(this.filePath(projectId), "utf8");
       const snapshot = JSON.parse(content);
       if (!isHqKanbanSnapshotPayload(snapshot) || snapshot.projectId !== projectId) {
         return emptyKanbanSnapshot(projectId);
       }
-      this.cache.set(projectId, snapshot);
+      this.setCached(projectId, snapshot);
       return structuredClone(snapshot);
     } catch {
       return emptyKanbanSnapshot(projectId);
@@ -3279,11 +3741,13 @@ var HqKanbanStore = class {
       () => {
         if (this.mergeChains.get(incoming.projectId) === next) {
           this.mergeChains.delete(incoming.projectId);
+          this.trimCache();
         }
       },
       () => {
         if (this.mergeChains.get(incoming.projectId) === next) {
           this.mergeChains.delete(incoming.projectId);
+          this.trimCache();
         }
       }
     );
@@ -3292,7 +3756,8 @@ var HqKanbanStore = class {
   async mergeNow(incoming) {
     const current = await this.load(incoming.projectId);
     const records = /* @__PURE__ */ new Map();
-    for (const record of [...current.boards, ...current.tombstones]) records.set(record.boardId, record);
+    for (const record of [...current.boards, ...current.tombstones])
+      records.set(record.boardId, record);
     for (const record of [...incoming.boards, ...incoming.tombstones]) {
       const existing = records.get(record.boardId);
       if (existing === void 0 || compareKanbanRecord(record, existing) > 0) {
@@ -3311,8 +3776,15 @@ var HqKanbanStore = class {
     }
     merged.boards.sort((a, b) => a.boardId.localeCompare(b.boardId));
     merged.tombstones.sort((a, b) => a.boardId.localeCompare(b.boardId));
-    this.cache.set(incoming.projectId, merged);
-    this.writer(incoming.projectId).enqueue(merged);
+    this.setCached(incoming.projectId, merged);
+    const writer = this.writer(incoming.projectId);
+    writer.enqueue(merged);
+    void writer.drain().then(() => {
+      if (this.writers.get(incoming.projectId) === writer) {
+        this.writers.delete(incoming.projectId);
+        this.trimCache();
+      }
+    });
     return structuredClone(merged);
   }
   async drain() {
@@ -3330,6 +3802,21 @@ var HqKanbanStore = class {
     }
     return writer;
   }
+  setCached(projectId, snapshot) {
+    this.cache.delete(projectId);
+    this.cache.set(projectId, snapshot);
+    this.trimCache(projectId);
+  }
+  trimCache(protectedProjectId) {
+    if (this.cache.size <= MAX_HQ_KANBAN_CACHE_PROJECTS) return;
+    for (const projectId of this.cache.keys()) {
+      if (this.cache.size <= MAX_HQ_KANBAN_CACHE_PROJECTS) break;
+      if (projectId === protectedProjectId || this.writers.has(projectId) || this.mergeChains.has(projectId)) {
+        continue;
+      }
+      this.cache.delete(projectId);
+    }
+  }
   filePath(projectId) {
     const safe = createHash4("sha256").update(projectId).digest("hex");
     return path6.join(this.dirPath, `${safe}.json`);
@@ -3540,11 +4027,25 @@ async function countNonEmptyLines(filePath) {
 // src/hq/persistence/event-log.ts
 var DEFAULT_EVENT_LOG_MAX_LINES = 5e4;
 var DEFAULT_EVENT_LOG_ROTATE_KEEP = 2e4;
-var DEFAULT_EVENT_LOG_MAX_BYTES = 64 * 1024 * 1024;
-var DEFAULT_EVENT_LOG_ROTATE_KEEP_BYTES = 24 * 1024 * 1024;
+var DEFAULT_EVENT_LOG_MAX_BYTES = 32 * 1024 * 1024;
+var DEFAULT_EVENT_LOG_ROTATE_KEEP_BYTES = 16 * 1024 * 1024;
 var RECENT_TAIL_SCAN_BYTES = 1024 * 1024;
 var FILTERED_RECENT_TAIL_SCAN_BYTES = 256 * 1024;
 var BULK_PREFIX_READ_CAP = 8 * 1024 * 1024;
+var HQ_EVENT_LOG_PRESETS = Object.freeze({
+  vps8: { maxBytes: 8 * 1024 * 1024, rotateKeepBytes: 2 * 1024 * 1024 },
+  vps32: { maxBytes: 32 * 1024 * 1024, rotateKeepBytes: 16 * 1024 * 1024 },
+  desktop: { maxBytes: 64 * 1024 * 1024, rotateKeepBytes: 24 * 1024 * 1024 }
+});
+function hqEventLogPresetFields(preset) {
+  const fields = HQ_EVENT_LOG_PRESETS[preset];
+  if (fields === void 0) {
+    throw new Error(
+      `Unknown HqEventLogPreset: ${String(preset)}. Allowed: ${Object.keys(HQ_EVENT_LOG_PRESETS).join(", ")}.`
+    );
+  }
+  return fields;
+}
 var HqEventLog = class {
   filePath;
   maxLines;
@@ -3575,7 +4076,7 @@ var HqEventLog = class {
   async appendInternal(events) {
     await this.ensureLineCount();
     const lines = events.map((event) => JSON.stringify(event)).join("\n") + "\n";
-    await fs8.appendFile(this.filePath, lines, { encoding: "utf8" });
+    await fs8.appendFile(this.filePath, lines, { encoding: "utf8", mode: SECRET_FILE_MODE });
     this.lineCount += events.length;
     this.byteCount += Buffer.byteLength(lines, "utf8");
     if (this.lineCount >= this.maxLines || this.byteCount >= this.maxBytes) {
@@ -3994,7 +4495,7 @@ var HqTimeseriesStore = class {
     const lines = snapshot.samples.map((bucket) => JSON.stringify(bucket)).join("\n") + "\n";
     await withFileLock(this.filePath, async () => {
       this.diskLineCount ??= await countNonEmptyLines(this.filePath);
-      await fs11.appendFile(this.filePath, lines, { encoding: "utf8" });
+      await fs11.appendFile(this.filePath, lines, { encoding: "utf8", mode: SECRET_FILE_MODE });
       this.diskLineCount += snapshot.samples.length;
       const compactAt = Math.max(this.maxBuckets + 1, this.maxBuckets * 4);
       if (this.diskLineCount >= compactAt) {
@@ -4514,9 +5015,16 @@ export {
   DEFAULT_HQ_REDACTION_POLICY,
   HQ_AUTH_CONTENT_HASH_REDACTED,
   HQ_AUTH_FILE_VERSION,
+  HQ_BROWSER_PEER_RESUME_CLIENT_ID,
   HQ_CLI_DEFAULT_HOST,
   HQ_COMMAND_TYPES,
+  HQ_EVENT_LOG_PRESETS,
+  HQ_PEER_REHYDRATE_HINT_MAX_CHARS,
+  HQ_PEER_REHYDRATE_REASONS,
   HQ_PROTOCOL_VERSION,
+  HQ_RESUME_GAP_MAX_BYTES,
+  HQ_RESUME_GAP_MAX_ENVELOPES,
+  HQ_RESUME_GAP_MAX_STALE_MS,
   HQ_TRANSCRIPT_TEXT_CAP,
   HqAlertEngine,
   HqBootstrapCodeStore,
@@ -4548,8 +5056,16 @@ export {
   hqAuthAuditPath,
   hqAuthContentHash,
   hqAuthFilePath,
+  hqEventLogPresetFields,
   hqRuntimeFilePath,
+  hqTokenKey,
+  hqTokenVerifier,
+  isHqGovernanceSnapshotPayload,
   isHqKanbanSnapshotPayload,
+  isHqPeerLostPayload,
+  isHqPeerRehydratePayload,
+  isHqResumeGapMessage,
+  isHqResumeRejectMessage,
   isLoopbackHost,
   isOpenMode,
   isTokenExpired,
@@ -4564,6 +5080,7 @@ export {
   mutateHqAuthFile,
   parseHqEventPayload,
   parseHqFrame,
+  readHqAuthAuditTail,
   readHqAuthFile,
   readHqRuntimeFileSync,
   redactHqEvent,