@wrongstack/tools 0.287.0 → 0.289.0

package/dist/plan.js

@@ -18,17 +18,21 @@ import { randomUUID } from "node:crypto";
 // src/session-kanban.ts
 import {
   deserializeTaskGraph,
+  GlobalMailbox,
   loadPlan,
   loadTasks,
   mutatePlan,
   mutateTasks
 } from "@wrongstack/core";
+import { resolveWstackPaths } from "@wrongstack/core/utils";
 import {
   createBoard,
   getBoard,
+  getKanbanDir,
   listBoards,
   removeBoard,
   syncBoardFromTaskGraph,
+  touchKanbanPresence,
   updateBoard
 } from "@wrongstack/kanban";
 var SESSION_BOARD_TAG = "session-work";

package/dist/plan.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/plan.ts", "../src/session-kanban.ts"],
-  "sourcesContent": ["import {\n  type PlanFile,\n  addPlanItem,\n  clearPlan,\n  deriveTodosFromPlanItem,\n  formatPlan,\n  getPlanTemplate,\n  mutatePlan,\n  removePlanItem,\n  setPlanItemStatus,\n} from '@wrongstack/core';\nimport {\n  type TaskFile,\n  mutateTasks,\n  formatTaskList,\n} from '@wrongstack/core';\nimport { randomUUID } from 'node:crypto';\nimport type { Tool } from '@wrongstack/core';\nimport { projectSessionPlanToKanban } from './session-kanban.js';\n\n/**\n * `planTool` \u2014 the LLM-callable counterpart to the `/plan` slash command.\n *\n * Plans capture strategic, multi-step approaches that survive across\n * session resumes (unlike todos, which are tactical and per-turn).\n * Storage path comes from `ctx.meta['plan.path']` \u2014 the CLI seeds this\n * during startup so the tool always knows where to read/write.\n *\n * One tool, multiple actions, JSON in/out. The action discriminates the\n * operation so the LLM can do show / add / start / done / remove / promote /\n * derive / template_use / clear via a single tool registration instead of\n * bloating the surface with nine near-identical tools.\n */\ninterface PlanInput {\n  action:\n    | 'show'\n    | 'add'\n    | 'start'\n    | 'done'\n    | 'remove'\n    | 'promote'\n    | 'template_use'\n    | 'clear'\n    | 'taskify';\n  /** Required for add. */\n  title?: string | undefined;\n  /** Optional detail line for add. */\n  details?: string | undefined;\n  /** Required for start/done/remove/promote \u2014 accepts plan item id OR 1-based index OR title substring. */\n  target?: string | undefined;\n  /** Optional subtasks for promote. If omitted, a single todo is created from the plan item title. */\n  subtasks?: string[] | undefined;\n  /** Required for template_use \u2014 the template name (e.g. \"new-feature\", \"bug-fix\"). */\n  template?: string | undefined;\n  /**\n   * Storage scope. Default (unset): uses the session-scoped path \u2014 isolated to this\n   * session, survives resume within the same session.\n   * `scope: 'project'`: uses a shared project-level path, visible to all sessions\n   * for this project. Useful for a shared roadmap that outlasts any single session.\n   */\n  scope?: 'session' | 'project';\n}\n\ninterface PlanOutput {\n  ok: boolean;\n  message: string;\n  /** Formatted plan after the operation. Same string the user sees from `/plan show`. */\n  plan: string;\n  /** Total item count after the operation. */\n  count: number;\n  /** Number of items not in 'done' status. */\n  open: number;\n  /** When promote/derive succeed, the generated todo items so the caller can inspect them. */\n  todos?: Array<{ id: string; content: string; status: string; activeForm?: string | undefined; promotedFromPlan?: string | undefined }>;\n}\n\nexport const planTool: Tool<PlanInput, PlanOutput> = {\n  name: 'plan',\n  category: 'Session',\n  description:\n    'Manage a session-persistent strategic plan. The plan is written to disk and survives conversation resumptions within the same session, but is isolated to this session \u2014 other sessions have their own separate plans. ' +\n    'Unlike todos (which are per-turn and lost on restart), a plan tracks high-level progress across multiple turns. ' +\n    'Use this to outline big-picture work, then promote concrete items into the todo list when ready to execute. ' +\n    'By default plans are isolated to this session; use `scope: \"project\"` to store the plan in a shared project-level file visible to all sessions.',\n  usageHint:\n    'RECOMMENDED FOR COMPLEX, MULTI-PHASE WORK:\\n\\n' +\n    '- Start by creating a high-level plan with `action: \"add\"` or using templates (`template_use`).\\n' +\n    '- Use `promote` to turn a plan item into actionable todos.\\n' +\n    '- Use `taskify` to convert a plan item into a structured task (with type/priority/deps).\\n' +\n    '- Keep plans at the \"why and what\" level, and todos at the \"how and next step\" level.\\n' +\n    '- Common templates: \"new-feature\", \"bug-fix\", \"refactor\", \"release\", \"security-audit\".\\n\\n' +\n    'This tool is excellent for maintaining long-term direction across many turns within a session. Plans survive resume but are not shared across separate sessions.\\n' +\n    'Use `scope: \"project\"` to use a shared project-level plan file.',\n  permission: 'confirm',\n  mutating: true,\n  capabilities: ['fs.write'],\n  icon: 'plan',\n  timeoutMs: 2_000,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      action: {\n        type: 'string',\n        enum: [\n          'show',\n          'add',\n          'start',\n          'done',\n          'remove',\n          'promote',\n          'template_use',\n          'clear',\n          'taskify',\n        ],\n        description: 'The operation to perform on the plan board.',\n      },\n      title: {\n        type: 'string',\n        description: 'Title of the plan item. Required for action=add.',\n      },\n      details: {\n        type: 'string',\n        description: 'Additional details or description for a new plan item (action=add).',\n      },\n      target: {\n        type: 'string',\n        description:\n          'Identifier for the target plan item (id, 1-based index, or partial title). Required for most actions except add/show/clear.',\n      },\n      subtasks: {\n        type: 'array',\n        items: { type: 'string' },\n        description:\n          'List of subtask titles. Used with promote to break a plan item into multiple todos.',\n      },\n      template: {\n        type: 'string',\n        description:\n          'Template identifier when using action=template_use. Common values: new-feature, bug-fix, refactor, release, security-audit.',\n      },\n      scope: {\n        type: 'string',\n        enum: ['session', 'project'],\n        description: 'Storage scope: \"session\" (default, isolated to this session) or \"project\" (shared across all sessions for this project).',\n      },\n    },\n    required: ['action'],\n  },\n  async execute(input, ctx) {\n    const sessionPlanPath = (ctx.meta as Record<string, unknown>)['plan.path'] as string | undefined;\n    let planPath: string | undefined;\n\n    if (input.scope === 'project') {\n      // Project-level: derive from the session path by replacing the filename with\n      // 'backlog.plan.json' so all sessions share the same file.\n      if (typeof sessionPlanPath === 'string') {\n        // Handle BOTH separators \u2014 a Windows-native path uses '\\\\', and a\n        // '/'-only search would miss it and fall back to a bare relative path\n        // written into the process CWD instead of the sessions dir.\n        const lastSep = Math.max(sessionPlanPath.lastIndexOf('/'), sessionPlanPath.lastIndexOf('\\\\'));\n        planPath = lastSep >= 0\n          ? sessionPlanPath.slice(0, lastSep + 1) + 'backlog.plan.json'\n          : 'backlog.plan.json';\n      }\n    } else {\n      planPath = sessionPlanPath;\n    }\n    if (typeof planPath !== 'string' || !planPath) {\n      return {\n        ok: false,\n        message: 'Plan storage path is not configured for this session.',\n        plan: '',\n        count: 0,\n        open: 0,\n      };\n    }\n    const sessionId = ctx.session?.id ?? 'unknown';\n\n    let early: PlanOutput | null = null;\n    // Track taskify data \u2014 task write happens after the plan lock releases\n    const taskifyMeta = { title: '', details: '' };\n    let didTaskify = false;\n\n    let plan: PlanFile;\n    try {\n    plan = await mutatePlan(planPath, sessionId, async (p) => {\n      switch (input.action) {\n        case 'show':\n          break;\n\n        case 'add': {\n          const title = input.title?.trim();\n          if (!title) {\n            early = mkResult(p, false, 'add requires `title`.');\n            return p;\n          }\n          const { plan: updated } = addPlanItem(p, title, input.details?.trim() || undefined);\n          return updated;\n        }\n\n        case 'start':\n        case 'done': {\n          if (!input.target) {\n            early = mkResult(p, false, `${input.action} requires \\`target\\` (id|index|substring).`);\n            return p;\n          }\n          const next = setPlanItemStatus(\n            p,\n            input.target,\n            input.action === 'start' ? 'in_progress' : 'done',\n          );\n          if (next === p) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          return next;\n        }\n\n        case 'remove': {\n          if (!input.target) {\n            early = mkResult(p, false, 'remove requires `target` (id|index|substring).');\n            return p;\n          }\n          const next = removePlanItem(p, input.target);\n          if (next === p) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          return next;\n        }\n\n        case 'promote': {\n          if (!input.target) {\n            early = mkResult(p, false, `${input.action} requires \\`target\\` (id|index|substring).`);\n            return p;\n          }\n          const derived = deriveTodosFromPlanItem(p, input.target, input.subtasks);\n          if (!derived) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          ctx.state.replaceTodos(derived.todos);\n          early = mkResult(\n            derived.plan,\n            true,\n            `${input.action} ok \u2014 ${derived.todos.length} todo(s) created.`,\n            derived.todos,\n          );\n          return derived.plan;\n        }\n\n        case 'template_use': {\n          const templateName = input.template?.trim();\n          if (!templateName) {\n            early = mkResult(p, false, 'template_use requires `template` name.');\n            return p;\n          }\n          const template = getPlanTemplate(templateName);\n          if (!template) {\n            early = mkResult(p, false, `Unknown template \"${templateName}\".`);\n            return p;\n          }\n          let updated = p;\n          for (const item of template.items) {\n            ({ plan: updated } = addPlanItem(updated, item.title, item.details));\n          }\n          early = mkResult(\n            updated,\n            true,\n            `Applied template \"${template.name}\" \u2014 ${template.items.length} items added.`,\n          );\n          return updated;\n        }\n\n        case 'clear':\n          return clearPlan(p);\n\n        case 'taskify': {\n          if (!input.target) {\n            early = mkResult(p, false, 'taskify requires `target` (plan item id|index|substring).');\n            return p;\n          }\n          // Find plan item by 1-based index, exact id, or title substring\n          let itemIdx = -1;\n          const asNum = Number.parseInt(input.target, 10);\n          if (!Number.isNaN(asNum) && asNum >= 1 && asNum <= p.items.length) {\n            itemIdx = asNum - 1;\n          } else {\n            itemIdx = p.items.findIndex((it) => it.id === input.target);\n            if (itemIdx === -1) {\n              const lower = input.target.toLowerCase();\n              itemIdx = p.items.findIndex((it) => it.title.toLowerCase().includes(lower));\n            }\n          }\n          if (itemIdx === -1 || !p.items[itemIdx]) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          const item = p.items[itemIdx]!;\n          // Extract data \u2014 task write happens after the plan lock releases\n          taskifyMeta.title = item.title;\n          taskifyMeta.details = item.details ?? '';\n          didTaskify = true;\n          break;\n        }\n\n        default:\n          early = mkResult(p, false, `Unknown action \"${(input as { action: string }).action}\".`);\n          return p;\n      }\n\n      return p;\n    });\n    } catch (err) {\n      // Persist failed (mutatePlan throws on a failed save) \u2014 report ok:false\n      // with the real reason instead of falsely claiming the plan was saved.\n      return {\n        ok: false,\n        message: `Plan change not saved \u2014 ${err instanceof Error ? err.message : String(err)}`,\n        plan: '',\n        count: 0,\n        open: 0,\n      };\n    }\n\n    // A successful plan mutation includes its projection onto the unified\n    // session board; callers never observe plan state ahead of Kanban state.\n    await projectSessionPlanToKanban(ctx.projectRoot, plan.items, sessionId);\n\n    // If the callback set an early-return result, use it\n    if (early) return early;\n\n    // If taskify copied plan item data, write it to the task file now\n    if (didTaskify) {\n      const taskPathRaw = (ctx.meta as Record<string, unknown>)['task.path'];\n      if (typeof taskPathRaw !== 'string' || !taskPathRaw) {\n        return mkResult(plan, false, 'Task storage path not configured \u2014 cannot taskify.');\n      }\n      let taskPath: string = taskPathRaw;\n      // Honor project scope for the TASK file too: a project-scoped taskify must\n      // append to the shared backlog.tasks.json, not the per-session task file\n      // (mirrors the plan-path derivation above; handles both separators).\n      if (input.scope === 'project') {\n        const lastSep = Math.max(taskPath.lastIndexOf('/'), taskPath.lastIndexOf('\\\\'));\n        taskPath = lastSep >= 0 ? taskPath.slice(0, lastSep + 1) + 'backlog.tasks.json' : 'backlog.tasks.json';\n      }\n      const now = new Date().toISOString();\n      // Mutate the cross-file under ITS OWN lock \u2014 a raw loadTasks/push/saveTasks\n      // can interleave with a concurrent task tool call in the same batch and\n      // clobber writes. mutateTasks is the documented race-safe write path.\n      try {\n        const taskFile: TaskFile = await mutateTasks(taskPath, sessionId, (f) => {\n          f.tasks.push({\n            id: `task_${randomUUID()}`,\n            title: taskifyMeta.title,\n            description: taskifyMeta.details || undefined,\n            type: 'feature',\n            priority: 'medium',\n            status: 'pending',\n            createdAt: now,\n            updatedAt: now,\n          });\n          return f;\n        });\n        return mkResult(\n          plan,\n          true,\n          `taskify ok \u2014 added \"${taskifyMeta.title}\" to tasks.\\n${formatTaskList(taskFile.tasks)}`,\n        );\n      } catch (err) {\n        // The plan item was saved, but copying it into the task file failed.\n        return mkResult(plan, false, `taskify: task not saved \u2014 ${err instanceof Error ? err.message : String(err)}`);\n      }\n    }\n\n    return mkResult(plan, true, `Plan ${input.action} ok.`);\n  },\n};\n\nfunction mkResult(\n  plan: PlanFile,\n  ok: boolean,\n  message: string,\n  todos?: PlanOutput['todos'],\n): PlanOutput {\n  const open = plan.items.filter((i) => i.status !== 'done').length;\n  const result: PlanOutput = {\n    ok,\n    message,\n    plan: formatPlan(plan),\n    count: plan.items.length,\n    open,\n  };\n  if (todos !== undefined) result.todos = todos;\n  return result;\n}\n", "import { type FSWatcher, watch } from 'node:fs';\nimport { basename, dirname } from 'node:path';\nimport {\n  type Context,\n  deserializeTaskGraph,\n  loadPlan,\n  loadTasks,\n  mutatePlan,\n  mutateTasks,\n  type PlanFile,\n  type PlanItem,\n  type SerializedTaskGraph,\n  type TaskFile,\n  type TaskItem,\n  type TaskStatus,\n  type TodoItem,\n} from '@wrongstack/core';\nimport {\n  createBoard,\n  getBoard,\n  type KanbanBoard,\n  type KanbanColumn,\n  type KanbanTask,\n  listBoards,\n  removeBoard,\n  syncBoardFromTaskGraph,\n  updateBoard,\n} from '@wrongstack/kanban';\n\nconst SESSION_BOARD_TAG = 'session-work';\nconst MIRROR_DISABLED_ENV = 'WRONGSTACK_KANBAN_TASK_MIRROR';\n\n/** The canonical workflow shared by WebUI and TUI session boards. */\nexport const SESSION_KANBAN_COLUMNS: KanbanColumn[] = [\n  { id: 'todo', title: 'Todo', order: 0, wipLimit: 0, color: '#2563eb' },\n  { id: 'in-progress', title: 'Running', order: 1, wipLimit: 1, color: '#d97706' },\n  { id: 'review', title: 'Preview', order: 2, wipLimit: 0, color: '#7c3aed' },\n  { id: 'done', title: 'Done', order: 3, wipLimit: 0, color: '#16a34a' },\n];\n\nconst boardQueue = new Map<string, Promise<void>>();\nconst boardEnsures = new Map<string, Promise<KanbanBoard>>();\nconst bindings = new WeakMap<Context, () => void>();\nconst suppressedTodoMirrors = new WeakSet<Context>();\nconst activeSessionBoards = new Map<string, number>();\n\nfunction boardKey(projectRoot: string, sessionId: string): string {\n  return `${projectRoot}\\0${sessionId}`;\n}\n\nfunction sessionTag(sessionId: string): string {\n  return `session:${sessionId}`;\n}\n\nfunction sessionBoardTitle(sessionId: string): string {\n  const leaf = sessionId.split(/[\\\\/]/).filter(Boolean).pop() ?? sessionId;\n  return `Session ${leaf.slice(0, 12)}`;\n}\n\nfunction sessionBoardTags(sessionId: string): string[] {\n  return ['session', SESSION_BOARD_TAG, sessionTag(sessionId)];\n}\n\nfunction sessionIdFromTags(tags: readonly string[] | undefined): string | null {\n  const tag = tags?.find((candidate) => candidate.startsWith('session:'));\n  return tag?.slice('session:'.length) || null;\n}\n\nfunction isOwnedSessionBoard(tags: readonly string[] | undefined): boolean {\n  return Boolean(tags?.includes(SESSION_BOARD_TAG) && sessionIdFromTags(tags));\n}\n\nfunction retainActiveSessionBoard(projectRoot: string, sessionId: string): void {\n  const key = boardKey(projectRoot, sessionId);\n  activeSessionBoards.set(key, (activeSessionBoards.get(key) ?? 0) + 1);\n}\n\nfunction releaseActiveSessionBoard(projectRoot: string, sessionId: string): void {\n  const key = boardKey(projectRoot, sessionId);\n  const remaining = (activeSessionBoards.get(key) ?? 0) - 1;\n  if (remaining > 0) activeSessionBoards.set(key, remaining);\n  else activeSessionBoards.delete(key);\n}\n\nfunction isSessionBoardActive(projectRoot: string, sessionId: string): boolean {\n  return (activeSessionBoards.get(boardKey(projectRoot, sessionId)) ?? 0) > 0;\n}\n\nfunction sameColumns(columns: readonly KanbanColumn[]): boolean {\n  return (\n    columns.length === SESSION_KANBAN_COLUMNS.length &&\n    columns.every((column, index) => column.id === SESSION_KANBAN_COLUMNS[index]?.id)\n  );\n}\n\n/** Create (or migrate) the single Kanban board owned by a session. */\nexport async function ensureSessionKanbanBoard(\n  projectRoot: string | undefined,\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  if (!projectRoot || !sessionId || process.env[MIRROR_DISABLED_ENV] === '0') return null;\n  const key = boardKey(projectRoot, sessionId);\n  const inFlight = boardEnsures.get(key);\n  if (inFlight) return inFlight;\n\n  const promise = (async () => {\n    const summary = (await listBoards(projectRoot)).find((board) =>\n      board.tags?.includes(sessionTag(sessionId)),\n    );\n    let board = summary ? await getBoard(projectRoot, summary.id) : null;\n    if (!board) {\n      return createBoard(projectRoot, {\n        title: sessionBoardTitle(sessionId),\n        description: 'Live session work: todos, tasks, and plan items.',\n        tags: sessionBoardTags(sessionId),\n        columns: SESSION_KANBAN_COLUMNS,\n        generatedBy: `session-kanban:${sessionId}`,\n      });\n    }\n\n    // Boards produced by the older task/plan mirrors used the generic five\n    // columns. Migrate only session-owned boards; updateBoard reconciles cards\n    // from Backlog into Todo while preserving Running/Preview/Done cards.\n    if (!sameColumns(board.columns) || !board.tags?.includes(SESSION_BOARD_TAG)) {\n      board =\n        (await updateBoard(projectRoot, board.id, {\n          title: sessionBoardTitle(sessionId),\n          description: 'Live session work: todos, tasks, and plan items.',\n          tags: [...new Set([...(board.tags ?? []), ...sessionBoardTags(sessionId)])],\n          columns: SESSION_KANBAN_COLUMNS,\n        })) ?? board;\n    }\n    return board;\n  })();\n\n  boardEnsures.set(key, promise);\n  try {\n    return await promise;\n  } finally {\n    boardEnsures.delete(key);\n  }\n}\n\nfunction enqueueBoardWork<T>(\n  projectRoot: string,\n  sessionId: string,\n  work: () => Promise<T>,\n): Promise<T> {\n  const key = boardKey(projectRoot, sessionId);\n  const previous = boardQueue.get(key) ?? Promise.resolve();\n  const result = previous.catch(() => undefined).then(work);\n  const tail = result.then(\n    () => undefined,\n    () => undefined,\n  );\n  boardQueue.set(key, tail);\n  void tail.then(() => {\n    if (boardQueue.get(key) === tail) boardQueue.delete(key);\n  });\n  return result;\n}\n\nasync function removeEmptySessionBoard(\n  projectRoot: string,\n  boardId: string,\n  sessionId: string,\n): Promise<string | null> {\n  return enqueueBoardWork(projectRoot, sessionId, async () => {\n    if (isSessionBoardActive(projectRoot, sessionId)) return null;\n    const board = await getBoard(projectRoot, boardId);\n    if (!board || board.tasks.length > 0 || !isOwnedSessionBoard(board.tags)) return null;\n    if (sessionIdFromTags(board.tags) !== sessionId) return null;\n    return (await removeBoard(projectRoot, board.id)) ? board.id : null;\n  });\n}\n\n/** Remove a particular inactive session's system-owned board when it has no cards. */\nexport async function cleanupSessionKanbanBoardIfEmpty(\n  projectRoot: string | undefined,\n  sessionId: string,\n): Promise<string[]> {\n  if (!projectRoot || !sessionId || process.env[MIRROR_DISABLED_ENV] === '0') return [];\n  if (isSessionBoardActive(projectRoot, sessionId)) return [];\n  const candidates = (await listBoards(projectRoot)).filter(\n    (board) =>\n      board.taskCount === 0 &&\n      isOwnedSessionBoard(board.tags) &&\n      sessionIdFromTags(board.tags) === sessionId,\n  );\n  const removed = await Promise.all(\n    candidates.map((board) => removeEmptySessionBoard(projectRoot, board.id, sessionId)),\n  );\n  return removed.filter((boardId): boardId is string => Boolean(boardId));\n}\n\n/** Prune stale empty session boards while preserving manual and live boards. */\nexport async function cleanupEmptySessionKanbanBoards(\n  projectRoot: string | undefined,\n  activeSessionId = '',\n): Promise<string[]> {\n  if (!projectRoot || process.env[MIRROR_DISABLED_ENV] === '0') return [];\n  const candidates = (await listBoards(projectRoot)).flatMap((board) => {\n    const ownerSessionId = sessionIdFromTags(board.tags);\n    return board.taskCount === 0 &&\n      isOwnedSessionBoard(board.tags) &&\n      ownerSessionId &&\n      ownerSessionId !== activeSessionId &&\n      !isSessionBoardActive(projectRoot, ownerSessionId)\n      ? [{ boardId: board.id, sessionId: ownerSessionId }]\n      : [];\n  });\n  const removed = await Promise.all(\n    candidates.map(({ boardId, sessionId }) =>\n      removeEmptySessionBoard(projectRoot, boardId, sessionId),\n    ),\n  );\n  return removed.filter((boardId): boardId is string => Boolean(boardId));\n}\n\nasync function projectGraph(\n  projectRoot: string | undefined,\n  sessionId: string,\n  graph: SerializedTaskGraph,\n  sourceSystem: 'session-todo' | 'session-task' | 'session-plan',\n): Promise<KanbanBoard | null> {\n  if (!projectRoot || !sessionId || process.env[MIRROR_DISABLED_ENV] === '0') return null;\n  return enqueueBoardWork(projectRoot, sessionId, async () => {\n    const board = await ensureSessionKanbanBoard(projectRoot, sessionId);\n    if (!board) return null;\n    const result = await syncBoardFromTaskGraph(\n      projectRoot,\n      board.id,\n      deserializeTaskGraph(graph),\n      {\n        sourceSystem,\n        tags: [...new Set([...(board.tags ?? []), ...sessionBoardTags(sessionId)])],\n        archiveMissingTasks: true,\n        includeCompletedTasks: true,\n      },\n    );\n    return result?.board ?? null;\n  });\n}\n\nexport function todoListToSerializedGraph(\n  todos: readonly TodoItem[],\n  sessionId: string,\n): SerializedTaskGraph {\n  const nodes = todos.map((todo, index) => ({\n    id: todo.id,\n    title: todo.content,\n    description: todo.activeForm ?? '',\n    type: 'chore' as const,\n    priority: 'medium' as const,\n    status: todo.status,\n    createdAt: index,\n    updatedAt: index,\n  }));\n  return {\n    id: `todo:${sessionId}`,\n    specId: `todo:${sessionId}`,\n    title: 'Session todos',\n    nodes,\n    edges: [],\n    rootNodes: nodes.map((node) => node.id),\n    createdAt: 0,\n    updatedAt: 0,\n  };\n}\n\nexport function taskFileToSerializedGraph(\n  tasks: readonly TaskItem[],\n  sessionId: string,\n): SerializedTaskGraph {\n  const ids = new Set(tasks.map((task) => task.id));\n  const nodes = tasks.map((task, index) => ({\n    id: task.id,\n    title: task.title,\n    description: task.description ?? '',\n    type: task.type,\n    priority: task.priority,\n    status: task.status,\n    ...(task.assignee ? { assignee: task.assignee } : {}),\n    ...(task.estimateHours !== undefined ? { estimateHours: task.estimateHours } : {}),\n    createdAt: index,\n    updatedAt: index,\n  }));\n  const edges = tasks.flatMap((task) =>\n    (task.dependsOn ?? [])\n      .filter((dependency) => ids.has(dependency))\n      .map((dependency) => ({\n        id: `${dependency}->${task.id}`,\n        from: dependency,\n        to: task.id,\n        type: 'depends_on' as const,\n      })),\n  );\n  const hasIncoming = new Set(edges.map((edge) => edge.to));\n  const rootNodes = nodes.filter((node) => !hasIncoming.has(node.id)).map((node) => node.id);\n  return {\n    // Keep the historical graph id so existing mirrored task cards are reused.\n    id: `session:${sessionId}`,\n    specId: `session:${sessionId}`,\n    title: 'Session tasks',\n    nodes,\n    edges,\n    rootNodes: rootNodes.length ? rootNodes : nodes[0] ? [nodes[0].id] : [],\n    createdAt: 0,\n    updatedAt: 0,\n  };\n}\n\nconst PLAN_STATUS_TO_TASK: Record<PlanItem['status'], TaskStatus> = {\n  open: 'pending',\n  in_progress: 'in_progress',\n  done: 'completed',\n};\n\nexport function planFileToSerializedGraph(\n  items: readonly PlanItem[],\n  sessionId: string,\n): SerializedTaskGraph {\n  const nodes = items.map((item, index) => ({\n    id: item.id,\n    title: item.title,\n    description: item.details ?? '',\n    type: 'chore' as const,\n    priority: 'medium' as const,\n    status: PLAN_STATUS_TO_TASK[item.status],\n    createdAt: index,\n    updatedAt: index,\n  }));\n  return {\n    id: `plan:${sessionId}`,\n    specId: `plan:${sessionId}`,\n    title: 'Session plan',\n    nodes,\n    edges: [],\n    rootNodes: nodes.map((node) => node.id),\n    createdAt: 0,\n    updatedAt: 0,\n  };\n}\n\nexport function projectSessionTodosToKanban(\n  projectRoot: string | undefined,\n  todos: readonly TodoItem[],\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  return projectGraph(\n    projectRoot,\n    sessionId,\n    todoListToSerializedGraph(todos, sessionId),\n    'session-todo',\n  );\n}\n\nexport function projectSessionTasksToKanban(\n  projectRoot: string | undefined,\n  tasks: readonly TaskItem[],\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  return projectGraph(\n    projectRoot,\n    sessionId,\n    taskFileToSerializedGraph(tasks, sessionId),\n    'session-task',\n  );\n}\n\nexport function projectSessionPlanToKanban(\n  projectRoot: string | undefined,\n  items: readonly PlanItem[],\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  return projectGraph(\n    projectRoot,\n    sessionId,\n    planFileToSerializedGraph(items, sessionId),\n    'session-plan',\n  );\n}\n\nfunction fireAndForget(work: Promise<unknown>): void {\n  void work.catch(() => {\n    // The session files/state remain recoverable if the observational board\n    // cannot be written; the next mutation or file watcher retries the mirror.\n  });\n}\n\nexport function mirrorSessionTodosToKanban(\n  projectRoot: string | undefined,\n  todos: readonly TodoItem[],\n  sessionId: string,\n): void {\n  fireAndForget(projectSessionTodosToKanban(projectRoot, todos, sessionId));\n}\n\nexport function mirrorSessionTasksToKanban(\n  projectRoot: string | undefined,\n  tasks: readonly TaskItem[],\n  sessionId: string,\n): void {\n  fireAndForget(projectSessionTasksToKanban(projectRoot, tasks, sessionId));\n}\n\nexport function mirrorSessionPlanToKanban(\n  projectRoot: string | undefined,\n  items: readonly PlanItem[],\n  sessionId: string,\n): void {\n  fireAndForget(projectSessionPlanToKanban(projectRoot, items, sessionId));\n}\n\n/**\n * Bind all live session work paths to Kanban. Todo changes are observed from\n * ConversationState; plan/task sidecars are watched so slash commands, WebUI,\n * plugins, and tools all pass through the same board.\n */\nexport function attachSessionKanbanMirror(context: Context): () => void {\n  const existing = bindings.get(context);\n  if (existing) return existing;\n\n  const attachedProjectRoot = context.projectRoot ?? '';\n  let registeredSessionId = '';\n  const syncActiveSessionRegistration = () => {\n    if (!attachedProjectRoot) return;\n    const currentSessionId = context.session?.id ?? '';\n    if (currentSessionId === registeredSessionId) return;\n    if (registeredSessionId) {\n      releaseActiveSessionBoard(attachedProjectRoot, registeredSessionId);\n      fireAndForget(cleanupSessionKanbanBoardIfEmpty(attachedProjectRoot, registeredSessionId));\n    }\n    registeredSessionId = currentSessionId;\n    if (registeredSessionId) {\n      retainActiveSessionBoard(attachedProjectRoot, registeredSessionId);\n    }\n  };\n  syncActiveSessionRegistration();\n\n  let watcher: FSWatcher | null = null;\n  let watchedDir = '';\n  let timer: NodeJS.Timeout | null = null;\n\n  const sessionId = () => context.session?.id ?? '';\n  const refreshFiles = async () => {\n    const id = sessionId();\n    if (!id) return;\n    const planPath = context.meta['plan.path'];\n    if (typeof planPath === 'string' && planPath) {\n      const plan = await loadPlan(planPath);\n      if (plan) await projectSessionPlanToKanban(context.projectRoot, plan.items, id);\n    }\n    const taskPath = context.meta['task.path'];\n    if (typeof taskPath === 'string' && taskPath) {\n      const tasks = await loadTasks(taskPath);\n      if (tasks) await projectSessionTasksToKanban(context.projectRoot, tasks.tasks, id);\n    }\n  };\n\n  const configureWatcher = () => {\n    const planPath = context.meta['plan.path'];\n    const taskPath = context.meta['task.path'];\n    const candidate =\n      typeof planPath === 'string' && planPath\n        ? dirname(planPath)\n        : typeof taskPath === 'string' && taskPath\n          ? dirname(taskPath)\n          : '';\n    if (!candidate || candidate === watchedDir) return;\n    watcher?.close();\n    watcher = null;\n    watchedDir = candidate;\n    try {\n      watcher = watch(candidate, { persistent: false }, (_event, filename) => {\n        const name = filename?.toString();\n        const currentPlanPath = context.meta['plan.path'];\n        const currentTaskPath = context.meta['task.path'];\n        const planName = typeof currentPlanPath === 'string' ? basename(currentPlanPath) : '';\n        const taskName = typeof currentTaskPath === 'string' ? basename(currentTaskPath) : '';\n        if (name && name !== planName && name !== taskName) return;\n        if (timer) clearTimeout(timer);\n        timer = setTimeout(() => fireAndForget(refreshFiles()), 60);\n      });\n      watcher.on('error', () => watcher?.close());\n    } catch {\n      // The session directory can briefly disappear during project/session\n      // switches; the next meta update re-attempts the binding.\n      watcher = null;\n      watchedDir = '';\n    }\n  };\n\n  const unsubscribe = context.state.onChange((change) => {\n    if (change.kind === 'todos_replaced' && !suppressedTodoMirrors.has(context)) {\n      // ConversationState auto-clears an all-done tactical list. Project the\n      // pre-clear completion snapshot so every card reaches Done atomically.\n      mirrorSessionTodosToKanban(\n        context.projectRoot,\n        change.completedSnapshot ?? change.todos,\n        sessionId(),\n      );\n      return;\n    }\n    if (change.kind === 'meta_set' && (change.key === 'plan.path' || change.key === 'task.path')) {\n      syncActiveSessionRegistration();\n      configureWatcher();\n      fireAndForget(ensureSessionKanbanBoard(context.projectRoot, sessionId()));\n      fireAndForget(refreshFiles());\n    }\n  });\n\n  configureWatcher();\n\n  const detach = () => {\n    unsubscribe();\n    if (timer) clearTimeout(timer);\n    watcher?.close();\n    bindings.delete(context);\n    if (attachedProjectRoot && registeredSessionId) {\n      releaseActiveSessionBoard(attachedProjectRoot, registeredSessionId);\n      fireAndForget(cleanupSessionKanbanBoardIfEmpty(attachedProjectRoot, registeredSessionId));\n      registeredSessionId = '';\n    }\n  };\n  bindings.set(context, detach);\n  return detach;\n}\n\n/** Fully hydrate a session board before a host announces the session as ready. */\nexport async function hydrateSessionKanban(context: Context): Promise<KanbanBoard | null> {\n  const id = context.session?.id ?? '';\n  if (!id) return null;\n  await cleanupEmptySessionKanbanBoards(context.projectRoot, id);\n  let board = await ensureSessionKanbanBoard(context.projectRoot, id);\n  if (context.todos.length) {\n    board = await projectSessionTodosToKanban(context.projectRoot, context.todos, id);\n  }\n  const planPath = context.meta['plan.path'];\n  if (typeof planPath === 'string' && planPath) {\n    const plan = await loadPlan(planPath);\n    if (plan) board = await projectSessionPlanToKanban(context.projectRoot, plan.items, id);\n  }\n  const taskPath = context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    const tasks = await loadTasks(taskPath);\n    if (tasks) board = await projectSessionTasksToKanban(context.projectRoot, tasks.tasks, id);\n  }\n  return board;\n}\n\nexport interface SessionKanbanSourceUpdate {\n  source: 'todo' | 'task' | 'plan' | null;\n  todos?: TodoItem[] | undefined;\n  tasks?: TaskFile | undefined;\n  plan?: PlanFile | undefined;\n}\n\nfunction sourceStatus(task: KanbanTask): TaskStatus {\n  if (task.status === 'completed') return 'completed';\n  if (task.status === 'in_progress') return 'in_progress';\n  if (task.status === 'review') return 'review';\n  if (task.status === 'blocked') return 'blocked';\n  if (task.status === 'failed') return 'failed';\n  return 'pending';\n}\n\n/** Reflect a TUI/WebUI Kanban card edit back to its originating work list. */\nexport async function applySessionKanbanTaskToSource(\n  context: Context,\n  task: KanbanTask,\n  options: { remove?: boolean | undefined } = {},\n): Promise<SessionKanbanSourceUpdate> {\n  const originId = task.origin?.taskId;\n  const graphId = task.origin?.graphId ?? '';\n  if (!originId) return { source: null };\n\n  if (task.origin?.system === 'session-todo' || graphId.startsWith('todo:')) {\n    const next = options.remove\n      ? context.todos.filter((todo) => todo.id !== originId)\n      : context.todos.map((todo) =>\n          todo.id === originId\n            ? {\n                ...todo,\n                content: task.title,\n                status:\n                  sourceStatus(task) === 'completed'\n                    ? ('completed' as const)\n                    : sourceStatus(task) === 'in_progress' || sourceStatus(task) === 'review'\n                      ? ('in_progress' as const)\n                      : ('pending' as const),\n              }\n            : todo,\n        );\n    suppressedTodoMirrors.add(context);\n    try {\n      context.state.replaceTodos(next);\n    } finally {\n      suppressedTodoMirrors.delete(context);\n    }\n    return { source: 'todo', todos: [...context.todos] };\n  }\n\n  const id = context.session?.id ?? '';\n  if (task.origin?.system === 'session-plan' || graphId.startsWith('plan:')) {\n    const planPath = context.meta['plan.path'];\n    if (typeof planPath !== 'string' || !planPath) return { source: 'plan' };\n    const plan = await mutatePlan(planPath, id, (file) => ({\n      ...file,\n      updatedAt: new Date().toISOString(),\n      items: options.remove\n        ? file.items.filter((item) => item.id !== originId)\n        : file.items.map((item) =>\n            item.id === originId\n              ? {\n                  ...item,\n                  title: task.title,\n                  details: task.description,\n                  status:\n                    task.status === 'completed'\n                      ? ('done' as const)\n                      : task.status === 'in_progress' || task.status === 'review'\n                        ? ('in_progress' as const)\n                        : ('open' as const),\n                  updatedAt: new Date().toISOString(),\n                }\n              : item,\n          ),\n    }));\n    return { source: 'plan', plan };\n  }\n\n  if (\n    task.origin?.system === 'session-task' ||\n    task.origin?.system === 'session' ||\n    graphId.startsWith('session:')\n  ) {\n    const taskPath = context.meta['task.path'];\n    if (typeof taskPath !== 'string' || !taskPath) return { source: 'task' };\n    const tasks = await mutateTasks(taskPath, id, (file) => ({\n      ...file,\n      tasks: options.remove\n        ? file.tasks.filter((item) => item.id !== originId)\n        : file.tasks.map((item) =>\n            item.id === originId\n              ? {\n                  ...item,\n                  title: task.title,\n                  description: task.description,\n                  status: sourceStatus(task),\n                  updatedAt: new Date().toISOString(),\n                }\n              : item,\n          ),\n    }));\n    return { source: 'task', tasks };\n  }\n\n  return { source: null };\n}\n"],
-  "mappings": ";AAAA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAAA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE,eAAAC;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;;;ACd3B;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAQK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,IAAM,oBAAoB;AAC1B,IAAM,sBAAsB;AAGrB,IAAM,yBAAyC;AAAA,EACpD,EAAE,IAAI,QAAQ,OAAO,QAAQ,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AAAA,EACrE,EAAE,IAAI,eAAe,OAAO,WAAW,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AAAA,EAC/E,EAAE,IAAI,UAAU,OAAO,WAAW,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AAAA,EAC1E,EAAE,IAAI,QAAQ,OAAO,QAAQ,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AACvE;AAEA,IAAM,aAAa,oBAAI,IAA2B;AAClD,IAAM,eAAe,oBAAI,IAAkC;AAK3D,SAAS,SAAS,aAAqB,WAA2B;AAChE,SAAO,GAAG,WAAW,KAAK,SAAS;AACrC;AAEA,SAAS,WAAW,WAA2B;AAC7C,SAAO,WAAW,SAAS;AAC7B;AAEA,SAAS,kBAAkB,WAA2B;AACpD,QAAM,OAAO,UAAU,MAAM,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,KAAK;AAC/D,SAAO,WAAW,KAAK,MAAM,GAAG,EAAE,CAAC;AACrC;AAEA,SAAS,iBAAiB,WAA6B;AACrD,SAAO,CAAC,WAAW,mBAAmB,WAAW,SAAS,CAAC;AAC7D;AA2BA,SAAS,YAAY,SAA2C;AAC9D,SACE,QAAQ,WAAW,uBAAuB,UAC1C,QAAQ,MAAM,CAAC,QAAQ,UAAU,OAAO,OAAO,uBAAuB,KAAK,GAAG,EAAE;AAEpF;AAGA,eAAsB,yBACpB,aACA,WAC6B;AAC7B,MAAI,CAAC,eAAe,CAAC,aAAa,QAAQ,IAAI,mBAAmB,MAAM,IAAK,QAAO;AACnF,QAAM,MAAM,SAAS,aAAa,SAAS;AAC3C,QAAM,WAAW,aAAa,IAAI,GAAG;AACrC,MAAI,SAAU,QAAO;AAErB,QAAM,WAAW,YAAY;AAC3B,UAAM,WAAW,MAAM,WAAW,WAAW,GAAG;AAAA,MAAK,CAACC,WACpDA,OAAM,MAAM,SAAS,WAAW,SAAS,CAAC;AAAA,IAC5C;AACA,QAAI,QAAQ,UAAU,MAAM,SAAS,aAAa,QAAQ,EAAE,IAAI;AAChE,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,aAAa;AAAA,QAC9B,OAAO,kBAAkB,SAAS;AAAA,QAClC,aAAa;AAAA,QACb,MAAM,iBAAiB,SAAS;AAAA,QAChC,SAAS;AAAA,QACT,aAAa,kBAAkB,SAAS;AAAA,MAC1C,CAAC;AAAA,IACH;AAKA,QAAI,CAAC,YAAY,MAAM,OAAO,KAAK,CAAC,MAAM,MAAM,SAAS,iBAAiB,GAAG;AAC3E,cACG,MAAM,YAAY,aAAa,MAAM,IAAI;AAAA,QACxC,OAAO,kBAAkB,SAAS;AAAA,QAClC,aAAa;AAAA,QACb,MAAM,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAI,MAAM,QAAQ,CAAC,GAAI,GAAG,iBAAiB,SAAS,CAAC,CAAC,CAAC;AAAA,QAC1E,SAAS;AAAA,MACX,CAAC,KAAM;AAAA,IACX;AACA,WAAO;AAAA,EACT,GAAG;AAEH,eAAa,IAAI,KAAK,OAAO;AAC7B,MAAI;AACF,WAAO,MAAM;AAAA,EACf,UAAE;AACA,iBAAa,OAAO,GAAG;AAAA,EACzB;AACF;AAEA,SAAS,iBACP,aACA,WACA,MACY;AACZ,QAAM,MAAM,SAAS,aAAa,SAAS;AAC3C,QAAM,WAAW,WAAW,IAAI,GAAG,KAAK,QAAQ,QAAQ;AACxD,QAAM,SAAS,SAAS,MAAM,MAAM,MAAS,EAAE,KAAK,IAAI;AACxD,QAAM,OAAO,OAAO;AAAA,IAClB,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,aAAW,IAAI,KAAK,IAAI;AACxB,OAAK,KAAK,KAAK,MAAM;AACnB,QAAI,WAAW,IAAI,GAAG,MAAM,KAAM,YAAW,OAAO,GAAG;AAAA,EACzD,CAAC;AACD,SAAO;AACT;AA2DA,eAAe,aACb,aACA,WACA,OACA,cAC6B;AAC7B,MAAI,CAAC,eAAe,CAAC,aAAa,QAAQ,IAAI,mBAAmB,MAAM,IAAK,QAAO;AACnF,SAAO,iBAAiB,aAAa,WAAW,YAAY;AAC1D,UAAM,QAAQ,MAAM,yBAAyB,aAAa,SAAS;AACnE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,MAAM;AAAA,MACN,qBAAqB,KAAK;AAAA,MAC1B;AAAA,QACE;AAAA,QACA,MAAM,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAI,MAAM,QAAQ,CAAC,GAAI,GAAG,iBAAiB,SAAS,CAAC,CAAC,CAAC;AAAA,QAC1E,qBAAqB;AAAA,QACrB,uBAAuB;AAAA,MACzB;AAAA,IACF;AACA,WAAO,QAAQ,SAAS;AAAA,EAC1B,CAAC;AACH;AAsEA,IAAM,sBAA8D;AAAA,EAClE,MAAM;AAAA,EACN,aAAa;AAAA,EACb,MAAM;AACR;AAEO,SAAS,0BACd,OACA,WACqB;AACrB,QAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,WAAW;AAAA,IACxC,IAAI,KAAK;AAAA,IACT,OAAO,KAAK;AAAA,IACZ,aAAa,KAAK,WAAW;AAAA,IAC7B,MAAM;AAAA,IACN,UAAU;AAAA,IACV,QAAQ,oBAAoB,KAAK,MAAM;AAAA,IACvC,WAAW;AAAA,IACX,WAAW;AAAA,EACb,EAAE;AACF,SAAO;AAAA,IACL,IAAI,QAAQ,SAAS;AAAA,IACrB,QAAQ,QAAQ,SAAS;AAAA,IACzB,OAAO;AAAA,IACP;AAAA,IACA,OAAO,CAAC;AAAA,IACR,WAAW,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE;AAAA,IACtC,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACF;AA4BO,SAAS,2BACd,aACA,OACA,WAC6B;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,0BAA0B,OAAO,SAAS;AAAA,IAC1C;AAAA,EACF;AACF;;;ADjTO,IAAM,WAAwC;AAAA,EACnD,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aACE;AAAA,EAIF,WACE;AAAA,EAQF,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,cAAc,CAAC,UAAU;AAAA,EACzB,MAAM;AAAA,EACN,WAAW;AAAA,EACX,aAAa;AAAA,IACX,MAAM;AAAA,IACN,YAAY;AAAA,MACV,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,MACf;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,SAAS;AAAA,QACP,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,OAAO,EAAE,MAAM,SAAS;AAAA,QACxB,aACE;AAAA,MACJ;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,CAAC,WAAW,SAAS;AAAA,QAC3B,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,UAAU,CAAC,QAAQ;AAAA,EACrB;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,kBAAmB,IAAI,KAAiC,WAAW;AACzE,QAAI;AAEJ,QAAI,MAAM,UAAU,WAAW;AAG7B,UAAI,OAAO,oBAAoB,UAAU;AAIvC,cAAM,UAAU,KAAK,IAAI,gBAAgB,YAAY,GAAG,GAAG,gBAAgB,YAAY,IAAI,CAAC;AAC5F,mBAAW,WAAW,IAClB,gBAAgB,MAAM,GAAG,UAAU,CAAC,IAAI,sBACxC;AAAA,MACN;AAAA,IACF,OAAO;AACL,iBAAW;AAAA,IACb;AACA,QAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,SAAS;AAAA,QACT,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM,YAAY,IAAI,SAAS,MAAM;AAErC,QAAI,QAA2B;AAE/B,UAAM,cAAc,EAAE,OAAO,IAAI,SAAS,GAAG;AAC7C,QAAI,aAAa;AAEjB,QAAI;AACJ,QAAI;AACJ,aAAO,MAAMC,YAAW,UAAU,WAAW,OAAO,MAAM;AACxD,gBAAQ,MAAM,QAAQ;AAAA,UACpB,KAAK;AACH;AAAA,UAEF,KAAK,OAAO;AACV,kBAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,gBAAI,CAAC,OAAO;AACV,sBAAQ,SAAS,GAAG,OAAO,uBAAuB;AAClD,qBAAO;AAAA,YACT;AACA,kBAAM,EAAE,MAAM,QAAQ,IAAI,YAAY,GAAG,OAAO,MAAM,SAAS,KAAK,KAAK,MAAS;AAClF,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK;AAAA,UACL,KAAK,QAAQ;AACX,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,GAAG,MAAM,MAAM,4CAA4C;AACtF,qBAAO;AAAA,YACT;AACA,kBAAM,OAAO;AAAA,cACX;AAAA,cACA,MAAM;AAAA,cACN,MAAM,WAAW,UAAU,gBAAgB;AAAA,YAC7C;AACA,gBAAI,SAAS,GAAG;AACd,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK,UAAU;AACb,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,gDAAgD;AAC3E,qBAAO;AAAA,YACT;AACA,kBAAM,OAAO,eAAe,GAAG,MAAM,MAAM;AAC3C,gBAAI,SAAS,GAAG;AACd,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK,WAAW;AACd,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,GAAG,MAAM,MAAM,4CAA4C;AACtF,qBAAO;AAAA,YACT;AACA,kBAAM,UAAU,wBAAwB,GAAG,MAAM,QAAQ,MAAM,QAAQ;AACvE,gBAAI,CAAC,SAAS;AACZ,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,gBAAI,MAAM,aAAa,QAAQ,KAAK;AACpC,oBAAQ;AAAA,cACN,QAAQ;AAAA,cACR;AAAA,cACA,GAAG,MAAM,MAAM,cAAS,QAAQ,MAAM,MAAM;AAAA,cAC5C,QAAQ;AAAA,YACV;AACA,mBAAO,QAAQ;AAAA,UACjB;AAAA,UAEA,KAAK,gBAAgB;AACnB,kBAAM,eAAe,MAAM,UAAU,KAAK;AAC1C,gBAAI,CAAC,cAAc;AACjB,sBAAQ,SAAS,GAAG,OAAO,wCAAwC;AACnE,qBAAO;AAAA,YACT;AACA,kBAAM,WAAW,gBAAgB,YAAY;AAC7C,gBAAI,CAAC,UAAU;AACb,sBAAQ,SAAS,GAAG,OAAO,qBAAqB,YAAY,IAAI;AAChE,qBAAO;AAAA,YACT;AACA,gBAAI,UAAU;AACd,uBAAW,QAAQ,SAAS,OAAO;AACjC,eAAC,EAAE,MAAM,QAAQ,IAAI,YAAY,SAAS,KAAK,OAAO,KAAK,OAAO;AAAA,YACpE;AACA,oBAAQ;AAAA,cACN;AAAA,cACA;AAAA,cACA,qBAAqB,SAAS,IAAI,YAAO,SAAS,MAAM,MAAM;AAAA,YAChE;AACA,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK;AACH,mBAAO,UAAU,CAAC;AAAA,UAEpB,KAAK,WAAW;AACd,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,2DAA2D;AACtF,qBAAO;AAAA,YACT;AAEA,gBAAI,UAAU;AACd,kBAAM,QAAQ,OAAO,SAAS,MAAM,QAAQ,EAAE;AAC9C,gBAAI,CAAC,OAAO,MAAM,KAAK,KAAK,SAAS,KAAK,SAAS,EAAE,MAAM,QAAQ;AACjE,wBAAU,QAAQ;AAAA,YACpB,OAAO;AACL,wBAAU,EAAE,MAAM,UAAU,CAAC,OAAO,GAAG,OAAO,MAAM,MAAM;AAC1D,kBAAI,YAAY,IAAI;AAClB,sBAAM,QAAQ,MAAM,OAAO,YAAY;AACvC,0BAAU,EAAE,MAAM,UAAU,CAAC,OAAO,GAAG,MAAM,YAAY,EAAE,SAAS,KAAK,CAAC;AAAA,cAC5E;AAAA,YACF;AACA,gBAAI,YAAY,MAAM,CAAC,EAAE,MAAM,OAAO,GAAG;AACvC,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,kBAAM,OAAO,EAAE,MAAM,OAAO;AAE5B,wBAAY,QAAQ,KAAK;AACzB,wBAAY,UAAU,KAAK,WAAW;AACtC,yBAAa;AACb;AAAA,UACF;AAAA,UAEA;AACE,oBAAQ,SAAS,GAAG,OAAO,mBAAoB,MAA6B,MAAM,IAAI;AACtF,mBAAO;AAAA,QACX;AAEA,eAAO;AAAA,MACT,CAAC;AAAA,IACD,SAAS,KAAK;AAGZ,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,SAAS,gCAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACpF,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,IACF;AAIA,UAAM,2BAA2B,IAAI,aAAa,KAAK,OAAO,SAAS;AAGvE,QAAI,MAAO,QAAO;AAGlB,QAAI,YAAY;AACd,YAAM,cAAe,IAAI,KAAiC,WAAW;AACrE,UAAI,OAAO,gBAAgB,YAAY,CAAC,aAAa;AACnD,eAAO,SAAS,MAAM,OAAO,yDAAoD;AAAA,MACnF;AACA,UAAI,WAAmB;AAIvB,UAAI,MAAM,UAAU,WAAW;AAC7B,cAAM,UAAU,KAAK,IAAI,SAAS,YAAY,GAAG,GAAG,SAAS,YAAY,IAAI,CAAC;AAC9E,mBAAW,WAAW,IAAI,SAAS,MAAM,GAAG,UAAU,CAAC,IAAI,uBAAuB;AAAA,MACpF;AACA,YAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AAInC,UAAI;AACF,cAAM,WAAqB,MAAMC,aAAY,UAAU,WAAW,CAAC,MAAM;AACvE,YAAE,MAAM,KAAK;AAAA,YACX,IAAI,QAAQ,WAAW,CAAC;AAAA,YACxB,OAAO,YAAY;AAAA,YACnB,aAAa,YAAY,WAAW;AAAA,YACpC,MAAM;AAAA,YACN,UAAU;AAAA,YACV,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD,iBAAO;AAAA,QACT,CAAC;AACD,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,4BAAuB,YAAY,KAAK;AAAA,EAAgB,eAAe,SAAS,KAAK,CAAC;AAAA,QACxF;AAAA,MACF,SAAS,KAAK;AAEZ,eAAO,SAAS,MAAM,OAAO,kCAA6B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,MAC9G;AAAA,IACF;AAEA,WAAO,SAAS,MAAM,MAAM,QAAQ,MAAM,MAAM,MAAM;AAAA,EACxD;AACF;AAEA,SAAS,SACP,MACA,IACA,SACA,OACY;AACZ,QAAM,OAAO,KAAK,MAAM,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC3D,QAAM,SAAqB;AAAA,IACzB;AAAA,IACA;AAAA,IACA,MAAM,WAAW,IAAI;AAAA,IACrB,OAAO,KAAK,MAAM;AAAA,IAClB;AAAA,EACF;AACA,MAAI,UAAU,OAAW,QAAO,QAAQ;AACxC,SAAO;AACT;",
+  "sourcesContent": ["import {\n  type PlanFile,\n  addPlanItem,\n  clearPlan,\n  deriveTodosFromPlanItem,\n  formatPlan,\n  getPlanTemplate,\n  mutatePlan,\n  removePlanItem,\n  setPlanItemStatus,\n} from '@wrongstack/core';\nimport {\n  type TaskFile,\n  mutateTasks,\n  formatTaskList,\n} from '@wrongstack/core';\nimport { randomUUID } from 'node:crypto';\nimport type { Tool } from '@wrongstack/core';\nimport { projectSessionPlanToKanban } from './session-kanban.js';\n\n/**\n * `planTool` \u2014 the LLM-callable counterpart to the `/plan` slash command.\n *\n * Plans capture strategic, multi-step approaches that survive across\n * session resumes (unlike todos, which are tactical and per-turn).\n * Storage path comes from `ctx.meta['plan.path']` \u2014 the CLI seeds this\n * during startup so the tool always knows where to read/write.\n *\n * One tool, multiple actions, JSON in/out. The action discriminates the\n * operation so the LLM can do show / add / start / done / remove / promote /\n * derive / template_use / clear via a single tool registration instead of\n * bloating the surface with nine near-identical tools.\n */\ninterface PlanInput {\n  action:\n    | 'show'\n    | 'add'\n    | 'start'\n    | 'done'\n    | 'remove'\n    | 'promote'\n    | 'template_use'\n    | 'clear'\n    | 'taskify';\n  /** Required for add. */\n  title?: string | undefined;\n  /** Optional detail line for add. */\n  details?: string | undefined;\n  /** Required for start/done/remove/promote \u2014 accepts plan item id OR 1-based index OR title substring. */\n  target?: string | undefined;\n  /** Optional subtasks for promote. If omitted, a single todo is created from the plan item title. */\n  subtasks?: string[] | undefined;\n  /** Required for template_use \u2014 the template name (e.g. \"new-feature\", \"bug-fix\"). */\n  template?: string | undefined;\n  /**\n   * Storage scope. Default (unset): uses the session-scoped path \u2014 isolated to this\n   * session, survives resume within the same session.\n   * `scope: 'project'`: uses a shared project-level path, visible to all sessions\n   * for this project. Useful for a shared roadmap that outlasts any single session.\n   */\n  scope?: 'session' | 'project';\n}\n\ninterface PlanOutput {\n  ok: boolean;\n  message: string;\n  /** Formatted plan after the operation. Same string the user sees from `/plan show`. */\n  plan: string;\n  /** Total item count after the operation. */\n  count: number;\n  /** Number of items not in 'done' status. */\n  open: number;\n  /** When promote/derive succeed, the generated todo items so the caller can inspect them. */\n  todos?: Array<{ id: string; content: string; status: string; activeForm?: string | undefined; promotedFromPlan?: string | undefined }>;\n}\n\nexport const planTool: Tool<PlanInput, PlanOutput> = {\n  name: 'plan',\n  category: 'Session',\n  description:\n    'Manage a session-persistent strategic plan. The plan is written to disk and survives conversation resumptions within the same session, but is isolated to this session \u2014 other sessions have their own separate plans. ' +\n    'Unlike todos (which are per-turn and lost on restart), a plan tracks high-level progress across multiple turns. ' +\n    'Use this to outline big-picture work, then promote concrete items into the todo list when ready to execute. ' +\n    'By default plans are isolated to this session; use `scope: \"project\"` to store the plan in a shared project-level file visible to all sessions.',\n  usageHint:\n    'RECOMMENDED FOR COMPLEX, MULTI-PHASE WORK:\\n\\n' +\n    '- Start by creating a high-level plan with `action: \"add\"` or using templates (`template_use`).\\n' +\n    '- Use `promote` to turn a plan item into actionable todos.\\n' +\n    '- Use `taskify` to convert a plan item into a structured task (with type/priority/deps).\\n' +\n    '- Keep plans at the \"why and what\" level, and todos at the \"how and next step\" level.\\n' +\n    '- Common templates: \"new-feature\", \"bug-fix\", \"refactor\", \"release\", \"security-audit\".\\n\\n' +\n    'This tool is excellent for maintaining long-term direction across many turns within a session. Plans survive resume but are not shared across separate sessions.\\n' +\n    'Use `scope: \"project\"` to use a shared project-level plan file.',\n  permission: 'confirm',\n  mutating: true,\n  capabilities: ['fs.write'],\n  icon: 'plan',\n  timeoutMs: 2_000,\n  inputSchema: {\n    type: 'object',\n    properties: {\n      action: {\n        type: 'string',\n        enum: [\n          'show',\n          'add',\n          'start',\n          'done',\n          'remove',\n          'promote',\n          'template_use',\n          'clear',\n          'taskify',\n        ],\n        description: 'The operation to perform on the plan board.',\n      },\n      title: {\n        type: 'string',\n        description: 'Title of the plan item. Required for action=add.',\n      },\n      details: {\n        type: 'string',\n        description: 'Additional details or description for a new plan item (action=add).',\n      },\n      target: {\n        type: 'string',\n        description:\n          'Identifier for the target plan item (id, 1-based index, or partial title). Required for most actions except add/show/clear.',\n      },\n      subtasks: {\n        type: 'array',\n        items: { type: 'string' },\n        description:\n          'List of subtask titles. Used with promote to break a plan item into multiple todos.',\n      },\n      template: {\n        type: 'string',\n        description:\n          'Template identifier when using action=template_use. Common values: new-feature, bug-fix, refactor, release, security-audit.',\n      },\n      scope: {\n        type: 'string',\n        enum: ['session', 'project'],\n        description: 'Storage scope: \"session\" (default, isolated to this session) or \"project\" (shared across all sessions for this project).',\n      },\n    },\n    required: ['action'],\n  },\n  async execute(input, ctx) {\n    const sessionPlanPath = (ctx.meta as Record<string, unknown>)['plan.path'] as string | undefined;\n    let planPath: string | undefined;\n\n    if (input.scope === 'project') {\n      // Project-level: derive from the session path by replacing the filename with\n      // 'backlog.plan.json' so all sessions share the same file.\n      if (typeof sessionPlanPath === 'string') {\n        // Handle BOTH separators \u2014 a Windows-native path uses '\\\\', and a\n        // '/'-only search would miss it and fall back to a bare relative path\n        // written into the process CWD instead of the sessions dir.\n        const lastSep = Math.max(sessionPlanPath.lastIndexOf('/'), sessionPlanPath.lastIndexOf('\\\\'));\n        planPath = lastSep >= 0\n          ? sessionPlanPath.slice(0, lastSep + 1) + 'backlog.plan.json'\n          : 'backlog.plan.json';\n      }\n    } else {\n      planPath = sessionPlanPath;\n    }\n    if (typeof planPath !== 'string' || !planPath) {\n      return {\n        ok: false,\n        message: 'Plan storage path is not configured for this session.',\n        plan: '',\n        count: 0,\n        open: 0,\n      };\n    }\n    const sessionId = ctx.session?.id ?? 'unknown';\n\n    let early: PlanOutput | null = null;\n    // Track taskify data \u2014 task write happens after the plan lock releases\n    const taskifyMeta = { title: '', details: '' };\n    let didTaskify = false;\n\n    let plan: PlanFile;\n    try {\n    plan = await mutatePlan(planPath, sessionId, async (p) => {\n      switch (input.action) {\n        case 'show':\n          break;\n\n        case 'add': {\n          const title = input.title?.trim();\n          if (!title) {\n            early = mkResult(p, false, 'add requires `title`.');\n            return p;\n          }\n          const { plan: updated } = addPlanItem(p, title, input.details?.trim() || undefined);\n          return updated;\n        }\n\n        case 'start':\n        case 'done': {\n          if (!input.target) {\n            early = mkResult(p, false, `${input.action} requires \\`target\\` (id|index|substring).`);\n            return p;\n          }\n          const next = setPlanItemStatus(\n            p,\n            input.target,\n            input.action === 'start' ? 'in_progress' : 'done',\n          );\n          if (next === p) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          return next;\n        }\n\n        case 'remove': {\n          if (!input.target) {\n            early = mkResult(p, false, 'remove requires `target` (id|index|substring).');\n            return p;\n          }\n          const next = removePlanItem(p, input.target);\n          if (next === p) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          return next;\n        }\n\n        case 'promote': {\n          if (!input.target) {\n            early = mkResult(p, false, `${input.action} requires \\`target\\` (id|index|substring).`);\n            return p;\n          }\n          const derived = deriveTodosFromPlanItem(p, input.target, input.subtasks);\n          if (!derived) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          ctx.state.replaceTodos(derived.todos);\n          early = mkResult(\n            derived.plan,\n            true,\n            `${input.action} ok \u2014 ${derived.todos.length} todo(s) created.`,\n            derived.todos,\n          );\n          return derived.plan;\n        }\n\n        case 'template_use': {\n          const templateName = input.template?.trim();\n          if (!templateName) {\n            early = mkResult(p, false, 'template_use requires `template` name.');\n            return p;\n          }\n          const template = getPlanTemplate(templateName);\n          if (!template) {\n            early = mkResult(p, false, `Unknown template \"${templateName}\".`);\n            return p;\n          }\n          let updated = p;\n          for (const item of template.items) {\n            ({ plan: updated } = addPlanItem(updated, item.title, item.details));\n          }\n          early = mkResult(\n            updated,\n            true,\n            `Applied template \"${template.name}\" \u2014 ${template.items.length} items added.`,\n          );\n          return updated;\n        }\n\n        case 'clear':\n          return clearPlan(p);\n\n        case 'taskify': {\n          if (!input.target) {\n            early = mkResult(p, false, 'taskify requires `target` (plan item id|index|substring).');\n            return p;\n          }\n          // Find plan item by 1-based index, exact id, or title substring\n          let itemIdx = -1;\n          const asNum = Number.parseInt(input.target, 10);\n          if (!Number.isNaN(asNum) && asNum >= 1 && asNum <= p.items.length) {\n            itemIdx = asNum - 1;\n          } else {\n            itemIdx = p.items.findIndex((it) => it.id === input.target);\n            if (itemIdx === -1) {\n              const lower = input.target.toLowerCase();\n              itemIdx = p.items.findIndex((it) => it.title.toLowerCase().includes(lower));\n            }\n          }\n          if (itemIdx === -1 || !p.items[itemIdx]) {\n            early = mkResult(p, false, `No plan item matched \"${input.target}\".`);\n            return p;\n          }\n          const item = p.items[itemIdx]!;\n          // Extract data \u2014 task write happens after the plan lock releases\n          taskifyMeta.title = item.title;\n          taskifyMeta.details = item.details ?? '';\n          didTaskify = true;\n          break;\n        }\n\n        default:\n          early = mkResult(p, false, `Unknown action \"${(input as { action: string }).action}\".`);\n          return p;\n      }\n\n      return p;\n    });\n    } catch (err) {\n      // Persist failed (mutatePlan throws on a failed save) \u2014 report ok:false\n      // with the real reason instead of falsely claiming the plan was saved.\n      return {\n        ok: false,\n        message: `Plan change not saved \u2014 ${err instanceof Error ? err.message : String(err)}`,\n        plan: '',\n        count: 0,\n        open: 0,\n      };\n    }\n\n    // A successful plan mutation includes its projection onto the unified\n    // session board; callers never observe plan state ahead of Kanban state.\n    await projectSessionPlanToKanban(ctx.projectRoot, plan.items, sessionId);\n\n    // If the callback set an early-return result, use it\n    if (early) return early;\n\n    // If taskify copied plan item data, write it to the task file now\n    if (didTaskify) {\n      const taskPathRaw = (ctx.meta as Record<string, unknown>)['task.path'];\n      if (typeof taskPathRaw !== 'string' || !taskPathRaw) {\n        return mkResult(plan, false, 'Task storage path not configured \u2014 cannot taskify.');\n      }\n      let taskPath: string = taskPathRaw;\n      // Honor project scope for the TASK file too: a project-scoped taskify must\n      // append to the shared backlog.tasks.json, not the per-session task file\n      // (mirrors the plan-path derivation above; handles both separators).\n      if (input.scope === 'project') {\n        const lastSep = Math.max(taskPath.lastIndexOf('/'), taskPath.lastIndexOf('\\\\'));\n        taskPath = lastSep >= 0 ? taskPath.slice(0, lastSep + 1) + 'backlog.tasks.json' : 'backlog.tasks.json';\n      }\n      const now = new Date().toISOString();\n      // Mutate the cross-file under ITS OWN lock \u2014 a raw loadTasks/push/saveTasks\n      // can interleave with a concurrent task tool call in the same batch and\n      // clobber writes. mutateTasks is the documented race-safe write path.\n      try {\n        const taskFile: TaskFile = await mutateTasks(taskPath, sessionId, (f) => {\n          f.tasks.push({\n            id: `task_${randomUUID()}`,\n            title: taskifyMeta.title,\n            description: taskifyMeta.details || undefined,\n            type: 'feature',\n            priority: 'medium',\n            status: 'pending',\n            createdAt: now,\n            updatedAt: now,\n          });\n          return f;\n        });\n        return mkResult(\n          plan,\n          true,\n          `taskify ok \u2014 added \"${taskifyMeta.title}\" to tasks.\\n${formatTaskList(taskFile.tasks)}`,\n        );\n      } catch (err) {\n        // The plan item was saved, but copying it into the task file failed.\n        return mkResult(plan, false, `taskify: task not saved \u2014 ${err instanceof Error ? err.message : String(err)}`);\n      }\n    }\n\n    return mkResult(plan, true, `Plan ${input.action} ok.`);\n  },\n};\n\nfunction mkResult(\n  plan: PlanFile,\n  ok: boolean,\n  message: string,\n  todos?: PlanOutput['todos'],\n): PlanOutput {\n  const open = plan.items.filter((i) => i.status !== 'done').length;\n  const result: PlanOutput = {\n    ok,\n    message,\n    plan: formatPlan(plan),\n    count: plan.items.length,\n    open,\n  };\n  if (todos !== undefined) result.todos = todos;\n  return result;\n}\n", "import { type FSWatcher, watch } from 'node:fs';\nimport { basename, dirname } from 'node:path';\nimport {\n  type Context,\n  deserializeTaskGraph,\n  GlobalMailbox,\n  loadPlan,\n  loadTasks,\n  mutatePlan,\n  mutateTasks,\n  type PlanFile,\n  type PlanItem,\n  type SerializedTaskGraph,\n  type TaskFile,\n  type TaskItem,\n  type TaskStatus,\n  type TodoItem,\n} from '@wrongstack/core';\nimport { resolveWstackPaths } from '@wrongstack/core/utils';\nimport {\n  createBoard,\n  getBoard,\n  getKanbanDir,\n  type KanbanBoard,\n  type KanbanColumn,\n  type KanbanTask,\n  listBoards,\n  removeBoard,\n  syncBoardFromTaskGraph,\n  touchKanbanPresence,\n  updateBoard,\n} from '@wrongstack/kanban';\n\nconst SESSION_BOARD_TAG = 'session-work';\nconst MIRROR_DISABLED_ENV = 'WRONGSTACK_KANBAN_TASK_MIRROR';\n\n/** The canonical workflow shared by WebUI and TUI session boards. */\nexport const SESSION_KANBAN_COLUMNS: KanbanColumn[] = [\n  { id: 'todo', title: 'Todo', order: 0, wipLimit: 0, color: '#2563eb' },\n  { id: 'in-progress', title: 'Running', order: 1, wipLimit: 1, color: '#d97706' },\n  { id: 'review', title: 'Preview', order: 2, wipLimit: 0, color: '#7c3aed' },\n  { id: 'done', title: 'Done', order: 3, wipLimit: 0, color: '#16a34a' },\n];\n\nconst boardQueue = new Map<string, Promise<void>>();\nconst boardEnsures = new Map<string, Promise<KanbanBoard>>();\nconst bindings = new WeakMap<Context, () => void>();\nconst suppressedTodoMirrors = new WeakSet<Context>();\nconst activeSessionBoards = new Map<string, number>();\n\nfunction boardKey(projectRoot: string, sessionId: string): string {\n  return `${projectRoot}\\0${sessionId}`;\n}\n\nfunction sessionTag(sessionId: string): string {\n  return `session:${sessionId}`;\n}\n\nfunction sessionBoardTitle(sessionId: string): string {\n  const leaf = sessionId.split(/[\\\\/]/).filter(Boolean).pop() ?? sessionId;\n  return `Session ${leaf.slice(0, 12)}`;\n}\n\nfunction sessionBoardTags(sessionId: string): string[] {\n  return ['session', SESSION_BOARD_TAG, sessionTag(sessionId)];\n}\n\nfunction sessionIdFromTags(tags: readonly string[] | undefined): string | null {\n  const tag = tags?.find((candidate) => candidate.startsWith('session:'));\n  return tag?.slice('session:'.length) || null;\n}\n\nfunction isOwnedSessionBoard(tags: readonly string[] | undefined): boolean {\n  return Boolean(tags?.includes(SESSION_BOARD_TAG) && sessionIdFromTags(tags));\n}\n\nfunction retainActiveSessionBoard(projectRoot: string, sessionId: string): void {\n  const key = boardKey(projectRoot, sessionId);\n  activeSessionBoards.set(key, (activeSessionBoards.get(key) ?? 0) + 1);\n}\n\nfunction releaseActiveSessionBoard(projectRoot: string, sessionId: string): void {\n  const key = boardKey(projectRoot, sessionId);\n  const remaining = (activeSessionBoards.get(key) ?? 0) - 1;\n  if (remaining > 0) activeSessionBoards.set(key, remaining);\n  else activeSessionBoards.delete(key);\n}\n\nfunction isSessionBoardActive(projectRoot: string, sessionId: string): boolean {\n  return (activeSessionBoards.get(boardKey(projectRoot, sessionId)) ?? 0) > 0;\n}\n\nfunction sameColumns(columns: readonly KanbanColumn[]): boolean {\n  return (\n    columns.length === SESSION_KANBAN_COLUMNS.length &&\n    columns.every((column, index) => column.id === SESSION_KANBAN_COLUMNS[index]?.id)\n  );\n}\n\n/** Create (or migrate) the single Kanban board owned by a session. */\nexport async function ensureSessionKanbanBoard(\n  projectRoot: string | undefined,\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  if (!projectRoot || !sessionId || process.env[MIRROR_DISABLED_ENV] === '0') return null;\n  const key = boardKey(projectRoot, sessionId);\n  const inFlight = boardEnsures.get(key);\n  if (inFlight) return inFlight;\n\n  const promise = (async () => {\n    const summary = (await listBoards(projectRoot)).find((board) =>\n      board.tags?.includes(sessionTag(sessionId)),\n    );\n    let board = summary ? await getBoard(projectRoot, summary.id) : null;\n    if (!board) {\n      return createBoard(projectRoot, {\n        title: sessionBoardTitle(sessionId),\n        description: 'Live session work: todos, tasks, and plan items.',\n        tags: sessionBoardTags(sessionId),\n        columns: SESSION_KANBAN_COLUMNS,\n        generatedBy: `session-kanban:${sessionId}`,\n      });\n    }\n\n    // Boards produced by the older task/plan mirrors used the generic five\n    // columns. Migrate only session-owned boards; updateBoard reconciles cards\n    // from Backlog into Todo while preserving Running/Preview/Done cards.\n    if (!sameColumns(board.columns) || !board.tags?.includes(SESSION_BOARD_TAG)) {\n      board =\n        (await updateBoard(projectRoot, board.id, {\n          title: sessionBoardTitle(sessionId),\n          description: 'Live session work: todos, tasks, and plan items.',\n          tags: [...new Set([...(board.tags ?? []), ...sessionBoardTags(sessionId)])],\n          columns: SESSION_KANBAN_COLUMNS,\n        })) ?? board;\n    }\n    return board;\n  })();\n\n  boardEnsures.set(key, promise);\n  try {\n    return await promise;\n  } finally {\n    boardEnsures.delete(key);\n  }\n}\n\nfunction enqueueBoardWork<T>(\n  projectRoot: string,\n  sessionId: string,\n  work: () => Promise<T>,\n): Promise<T> {\n  const key = boardKey(projectRoot, sessionId);\n  const previous = boardQueue.get(key) ?? Promise.resolve();\n  const result = previous.catch(() => undefined).then(work);\n  const tail = result.then(\n    () => undefined,\n    () => undefined,\n  );\n  boardQueue.set(key, tail);\n  void tail.then(() => {\n    if (boardQueue.get(key) === tail) boardQueue.delete(key);\n  });\n  return result;\n}\n\nasync function removeEmptySessionBoard(\n  projectRoot: string,\n  boardId: string,\n  sessionId: string,\n): Promise<string | null> {\n  return enqueueBoardWork(projectRoot, sessionId, async () => {\n    if (isSessionBoardActive(projectRoot, sessionId)) return null;\n    const board = await getBoard(projectRoot, boardId);\n    if (!board || board.tasks.length > 0 || !isOwnedSessionBoard(board.tags)) return null;\n    if (sessionIdFromTags(board.tags) !== sessionId) return null;\n    return (await removeBoard(projectRoot, board.id)) ? board.id : null;\n  });\n}\n\n/** Remove a particular inactive session's system-owned board when it has no cards. */\nexport async function cleanupSessionKanbanBoardIfEmpty(\n  projectRoot: string | undefined,\n  sessionId: string,\n): Promise<string[]> {\n  if (!projectRoot || !sessionId || process.env[MIRROR_DISABLED_ENV] === '0') return [];\n  if (isSessionBoardActive(projectRoot, sessionId)) return [];\n  const candidates = (await listBoards(projectRoot)).filter(\n    (board) =>\n      board.taskCount === 0 &&\n      isOwnedSessionBoard(board.tags) &&\n      sessionIdFromTags(board.tags) === sessionId,\n  );\n  const removed = await Promise.all(\n    candidates.map((board) => removeEmptySessionBoard(projectRoot, board.id, sessionId)),\n  );\n  return removed.filter((boardId): boardId is string => Boolean(boardId));\n}\n\n/** Prune stale empty session boards while preserving manual and live boards. */\nexport async function cleanupEmptySessionKanbanBoards(\n  projectRoot: string | undefined,\n  activeSessionId = '',\n): Promise<string[]> {\n  if (!projectRoot || process.env[MIRROR_DISABLED_ENV] === '0') return [];\n  const candidates = (await listBoards(projectRoot)).flatMap((board) => {\n    const ownerSessionId = sessionIdFromTags(board.tags);\n    return board.taskCount === 0 &&\n      isOwnedSessionBoard(board.tags) &&\n      ownerSessionId &&\n      ownerSessionId !== activeSessionId &&\n      !isSessionBoardActive(projectRoot, ownerSessionId)\n      ? [{ boardId: board.id, sessionId: ownerSessionId }]\n      : [];\n  });\n  const removed = await Promise.all(\n    candidates.map(({ boardId, sessionId }) =>\n      removeEmptySessionBoard(projectRoot, boardId, sessionId),\n    ),\n  );\n  return removed.filter((boardId): boardId is string => Boolean(boardId));\n}\n\nasync function projectGraph(\n  projectRoot: string | undefined,\n  sessionId: string,\n  graph: SerializedTaskGraph,\n  sourceSystem: 'session-todo' | 'session-task' | 'session-plan',\n): Promise<KanbanBoard | null> {\n  if (!projectRoot || !sessionId || process.env[MIRROR_DISABLED_ENV] === '0') return null;\n  return enqueueBoardWork(projectRoot, sessionId, async () => {\n    const board = await ensureSessionKanbanBoard(projectRoot, sessionId);\n    if (!board) return null;\n    const result = await syncBoardFromTaskGraph(\n      projectRoot,\n      board.id,\n      deserializeTaskGraph(graph),\n      {\n        sourceSystem,\n        tags: [...new Set([...(board.tags ?? []), ...sessionBoardTags(sessionId)])],\n        archiveMissingTasks: true,\n        includeCompletedTasks: true,\n      },\n    );\n    return result?.board ?? null;\n  });\n}\n\nexport function todoListToSerializedGraph(\n  todos: readonly TodoItem[],\n  sessionId: string,\n): SerializedTaskGraph {\n  const nodes = todos.map((todo, index) => ({\n    id: todo.id,\n    title: todo.content,\n    description: todo.activeForm ?? '',\n    type: 'chore' as const,\n    priority: 'medium' as const,\n    status: todo.status,\n    createdAt: index,\n    updatedAt: index,\n  }));\n  return {\n    id: `todo:${sessionId}`,\n    specId: `todo:${sessionId}`,\n    title: 'Session todos',\n    nodes,\n    edges: [],\n    rootNodes: nodes.map((node) => node.id),\n    createdAt: 0,\n    updatedAt: 0,\n  };\n}\n\nexport function taskFileToSerializedGraph(\n  tasks: readonly TaskItem[],\n  sessionId: string,\n): SerializedTaskGraph {\n  const ids = new Set(tasks.map((task) => task.id));\n  const nodes = tasks.map((task, index) => ({\n    id: task.id,\n    title: task.title,\n    description: task.description ?? '',\n    type: task.type,\n    priority: task.priority,\n    status: task.status,\n    ...(task.assignee ? { assignee: task.assignee } : {}),\n    ...(task.estimateHours !== undefined ? { estimateHours: task.estimateHours } : {}),\n    createdAt: index,\n    updatedAt: index,\n  }));\n  const edges = tasks.flatMap((task) =>\n    (task.dependsOn ?? [])\n      .filter((dependency) => ids.has(dependency))\n      .map((dependency) => ({\n        id: `${dependency}->${task.id}`,\n        from: dependency,\n        to: task.id,\n        type: 'depends_on' as const,\n      })),\n  );\n  const hasIncoming = new Set(edges.map((edge) => edge.to));\n  const rootNodes = nodes.filter((node) => !hasIncoming.has(node.id)).map((node) => node.id);\n  return {\n    // Keep the historical graph id so existing mirrored task cards are reused.\n    id: `session:${sessionId}`,\n    specId: `session:${sessionId}`,\n    title: 'Session tasks',\n    nodes,\n    edges,\n    rootNodes: rootNodes.length ? rootNodes : nodes[0] ? [nodes[0].id] : [],\n    createdAt: 0,\n    updatedAt: 0,\n  };\n}\n\nconst PLAN_STATUS_TO_TASK: Record<PlanItem['status'], TaskStatus> = {\n  open: 'pending',\n  in_progress: 'in_progress',\n  done: 'completed',\n};\n\nexport function planFileToSerializedGraph(\n  items: readonly PlanItem[],\n  sessionId: string,\n): SerializedTaskGraph {\n  const nodes = items.map((item, index) => ({\n    id: item.id,\n    title: item.title,\n    description: item.details ?? '',\n    type: 'chore' as const,\n    priority: 'medium' as const,\n    status: PLAN_STATUS_TO_TASK[item.status],\n    createdAt: index,\n    updatedAt: index,\n  }));\n  return {\n    id: `plan:${sessionId}`,\n    specId: `plan:${sessionId}`,\n    title: 'Session plan',\n    nodes,\n    edges: [],\n    rootNodes: nodes.map((node) => node.id),\n    createdAt: 0,\n    updatedAt: 0,\n  };\n}\n\nexport function projectSessionTodosToKanban(\n  projectRoot: string | undefined,\n  todos: readonly TodoItem[],\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  return projectGraph(\n    projectRoot,\n    sessionId,\n    todoListToSerializedGraph(todos, sessionId),\n    'session-todo',\n  );\n}\n\nexport function projectSessionTasksToKanban(\n  projectRoot: string | undefined,\n  tasks: readonly TaskItem[],\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  return projectGraph(\n    projectRoot,\n    sessionId,\n    taskFileToSerializedGraph(tasks, sessionId),\n    'session-task',\n  );\n}\n\nexport function projectSessionPlanToKanban(\n  projectRoot: string | undefined,\n  items: readonly PlanItem[],\n  sessionId: string,\n): Promise<KanbanBoard | null> {\n  return projectGraph(\n    projectRoot,\n    sessionId,\n    planFileToSerializedGraph(items, sessionId),\n    'session-plan',\n  );\n}\n\nfunction fireAndForget(work: Promise<unknown>): void {\n  void work.catch(() => {\n    // The session files/state remain recoverable if the observational board\n    // cannot be written; the next mutation or file watcher retries the mirror.\n  });\n}\n\nfunction broadcastTodoUpdate(context: Context, todos: readonly TodoItem[]): void {\n  const sessionId = context.session?.id ?? '';\n  if (!context.agentId || !sessionId) return;\n  const projectDir = resolveWstackPaths({ projectRoot: context.projectRoot }).projectDir;\n  const mailbox = new GlobalMailbox(projectDir);\n  void mailbox\n    .send({\n      from: context.agentId,\n      to: '*',\n      type: 'status',\n      subject: `Kanban todo list updated (${todos.length} item${todos.length === 1 ? '' : 's'})`,\n      body: JSON.stringify({\n        kind: 'kanban.todos.updated',\n        sessionId,\n        revision: context.state.revision,\n        todos,\n      }),\n      priority: 'normal',\n      senderSessionId: sessionId,\n      ttlMs: 6 * 60 * 60 * 1000,\n    })\n    .catch(() => {\n      // Mailbox awareness is best-effort; canonical state is already updated.\n    });\n}\n\nfunction notifyTodoUpdate(context: Context, todos: readonly TodoItem[]): void {\n  const summary = todos.length\n    ? todos\n        .map((todo) => `- [${todo.status}] ${todo.content} (${todo.id})`)\n        .join('\\n')\n    : '- No active todos remain.';\n  const text = `[KANBAN TODO UPDATE]\\nAnother Kanban agent reassessed the shared board. The canonical todo list is now:\\n${summary}\\nReassess your current plan before continuing; do not rely on the initial todo snapshot.`;\n  const state = context.state as Partial<Context['state']>;\n  if (typeof state.appendBlockToLastUserMessage === 'function') {\n    if (state.appendBlockToLastUserMessage({ type: 'text', text })) return;\n  }\n  if (typeof state.appendMessage === 'function') {\n    state.appendMessage({ role: 'user', content: [{ type: 'text', text }] });\n  }\n}\n\nexport function mirrorSessionTodosToKanban(\n  projectRoot: string | undefined,\n  todos: readonly TodoItem[],\n  sessionId: string,\n): void {\n  fireAndForget(projectSessionTodosToKanban(projectRoot, todos, sessionId));\n}\n\nexport function mirrorSessionTasksToKanban(\n  projectRoot: string | undefined,\n  tasks: readonly TaskItem[],\n  sessionId: string,\n): void {\n  fireAndForget(projectSessionTasksToKanban(projectRoot, tasks, sessionId));\n}\n\nexport function mirrorSessionPlanToKanban(\n  projectRoot: string | undefined,\n  items: readonly PlanItem[],\n  sessionId: string,\n): void {\n  fireAndForget(projectSessionPlanToKanban(projectRoot, items, sessionId));\n}\n\n/**\n * Bind all live session work paths to Kanban. Todo changes are observed from\n * ConversationState; plan/task sidecars are watched so slash commands, WebUI,\n * plugins, and tools all pass through the same board.\n */\nexport function attachSessionKanbanMirror(context: Context): () => void {\n  const existing = bindings.get(context);\n  if (existing) return existing;\n\n  const attachedProjectRoot = context.projectRoot ?? '';\n  let registeredSessionId = '';\n  const syncActiveSessionRegistration = () => {\n    if (!attachedProjectRoot) return;\n    const currentSessionId = context.session?.id ?? '';\n    if (currentSessionId === registeredSessionId) return;\n    if (registeredSessionId) {\n      releaseActiveSessionBoard(attachedProjectRoot, registeredSessionId);\n      fireAndForget(cleanupSessionKanbanBoardIfEmpty(attachedProjectRoot, registeredSessionId));\n    }\n    registeredSessionId = currentSessionId;\n    if (registeredSessionId) {\n      retainActiveSessionBoard(attachedProjectRoot, registeredSessionId);\n    }\n  };\n  syncActiveSessionRegistration();\n\n  let watcher: FSWatcher | null = null;\n  let watchedDir = '';\n  let timer: NodeJS.Timeout | null = null;\n  let boardWatcher: FSWatcher | null = null;\n  let watchedBoardId = '';\n  let boardTimer: NodeJS.Timeout | null = null;\n  let presenceTimer: NodeJS.Timeout | null = null;\n\n  const sessionId = () => context.session?.id ?? '';\n  const refreshFiles = async () => {\n    const id = sessionId();\n    if (!id) return;\n    const planPath = context.meta['plan.path'];\n    if (typeof planPath === 'string' && planPath) {\n      const plan = await loadPlan(planPath);\n      if (plan) await projectSessionPlanToKanban(context.projectRoot, plan.items, id);\n    }\n    const taskPath = context.meta['task.path'];\n    if (typeof taskPath === 'string' && taskPath) {\n      const tasks = await loadTasks(taskPath);\n      if (tasks) await projectSessionTasksToKanban(context.projectRoot, tasks.tasks, id);\n    }\n  };\n\n  const refreshBoard = async () => {\n    if (!watchedBoardId) return;\n    const board = await getBoard(context.projectRoot, watchedBoardId);\n    if (board) applySessionKanbanBoardToTodos(context, board);\n  };\n\n  const configureBoardWatcher = async () => {\n    const id = sessionId();\n    const board = id ? await ensureSessionKanbanBoard(context.projectRoot, id) : null;\n    if (!board || board.id === watchedBoardId) return;\n    boardWatcher?.close();\n    boardWatcher = null;\n    watchedBoardId = board.id;\n    try {\n      const boardFileName = `${board.id}.json`;\n      boardWatcher = watch(\n        getKanbanDir(context.projectRoot),\n        { persistent: false },\n        (_event, filename) => {\n          if (filename?.toString() !== boardFileName) return;\n          if (boardTimer) clearTimeout(boardTimer);\n          boardTimer = setTimeout(() => fireAndForget(refreshBoard()), 60);\n        },\n      );\n      const touchPresence = () =>\n        touchKanbanPresence(context.projectRoot, board.id, {\n          sessionId: id,\n          agentId: context.agentId,\n          agentName: context.agentName,\n        });\n      fireAndForget(touchPresence());\n      if (presenceTimer) clearInterval(presenceTimer);\n      presenceTimer = setInterval(() => fireAndForget(touchPresence()), 60_000);\n      presenceTimer.unref?.();\n      boardWatcher.on('error', () => {\n        boardWatcher?.close();\n        boardWatcher = null;\n        watchedBoardId = '';\n      });\n    } catch {\n      boardWatcher = null;\n      watchedBoardId = '';\n    }\n  };\n\n  const configureWatcher = () => {\n    const planPath = context.meta['plan.path'];\n    const taskPath = context.meta['task.path'];\n    const candidate =\n      typeof planPath === 'string' && planPath\n        ? dirname(planPath)\n        : typeof taskPath === 'string' && taskPath\n          ? dirname(taskPath)\n          : '';\n    if (!candidate || candidate === watchedDir) return;\n    watcher?.close();\n    watcher = null;\n    watchedDir = candidate;\n    try {\n      watcher = watch(candidate, { persistent: false }, (_event, filename) => {\n        const name = filename?.toString();\n        const currentPlanPath = context.meta['plan.path'];\n        const currentTaskPath = context.meta['task.path'];\n        const planName = typeof currentPlanPath === 'string' ? basename(currentPlanPath) : '';\n        const taskName = typeof currentTaskPath === 'string' ? basename(currentTaskPath) : '';\n        if (name && name !== planName && name !== taskName) return;\n        if (timer) clearTimeout(timer);\n        timer = setTimeout(() => fireAndForget(refreshFiles()), 60);\n      });\n      watcher.on('error', () => watcher?.close());\n    } catch {\n      // The session directory can briefly disappear during project/session\n      // switches; the next meta update re-attempts the binding.\n      watcher = null;\n      watchedDir = '';\n    }\n  };\n\n  const unsubscribe = context.state.onChange((change) => {\n    if (change.kind === 'todos_replaced' && !suppressedTodoMirrors.has(context)) {\n      // ConversationState auto-clears an all-done tactical list. Project the\n      // pre-clear completion snapshot so every card reaches Done atomically.\n      mirrorSessionTodosToKanban(\n        context.projectRoot,\n        change.completedSnapshot ?? change.todos,\n        sessionId(),\n      );\n      return;\n    }\n    if (change.kind === 'meta_set' && (change.key === 'plan.path' || change.key === 'task.path')) {\n      syncActiveSessionRegistration();\n      configureWatcher();\n      fireAndForget(ensureSessionKanbanBoard(context.projectRoot, sessionId()));\n      fireAndForget(configureBoardWatcher());\n      fireAndForget(refreshFiles());\n    }\n  });\n\n  configureWatcher();\n  fireAndForget(configureBoardWatcher());\n\n  const detach = () => {\n    unsubscribe();\n    if (timer) clearTimeout(timer);\n    if (boardTimer) clearTimeout(boardTimer);\n    if (presenceTimer) clearInterval(presenceTimer);\n    watcher?.close();\n    boardWatcher?.close();\n    bindings.delete(context);\n    if (attachedProjectRoot && registeredSessionId) {\n      releaseActiveSessionBoard(attachedProjectRoot, registeredSessionId);\n      fireAndForget(cleanupSessionKanbanBoardIfEmpty(attachedProjectRoot, registeredSessionId));\n      registeredSessionId = '';\n    }\n  };\n  bindings.set(context, detach);\n  return detach;\n}\n\n/** Fully hydrate a session board before a host announces the session as ready. */\nexport async function hydrateSessionKanban(context: Context): Promise<KanbanBoard | null> {\n  const id = context.session?.id ?? '';\n  if (!id) return null;\n  await cleanupEmptySessionKanbanBoards(context.projectRoot, id);\n  let board = await ensureSessionKanbanBoard(context.projectRoot, id);\n  if (context.todos.length) {\n    board = await projectSessionTodosToKanban(context.projectRoot, context.todos, id);\n  }\n  const planPath = context.meta['plan.path'];\n  if (typeof planPath === 'string' && planPath) {\n    const plan = await loadPlan(planPath);\n    if (plan) board = await projectSessionPlanToKanban(context.projectRoot, plan.items, id);\n  }\n  const taskPath = context.meta['task.path'];\n  if (typeof taskPath === 'string' && taskPath) {\n    const tasks = await loadTasks(taskPath);\n    if (tasks) board = await projectSessionTasksToKanban(context.projectRoot, tasks.tasks, id);\n  }\n  return board;\n}\n\nexport interface SessionKanbanSourceUpdate {\n  source: 'todo' | 'task' | 'plan' | null;\n  todos?: TodoItem[] | undefined;\n  tasks?: TaskFile | undefined;\n  plan?: PlanFile | undefined;\n}\n\nfunction sourceStatus(task: KanbanTask): TaskStatus {\n  if (task.status === 'completed') return 'completed';\n  if (task.status === 'in_progress') return 'in_progress';\n  if (task.status === 'review') return 'review';\n  if (task.status === 'blocked') return 'blocked';\n  if (task.status === 'failed') return 'failed';\n  return 'pending';\n}\n\nfunction todoStatus(task: KanbanTask): TodoItem['status'] {\n  const status = sourceStatus(task);\n  if (status === 'completed') return 'completed';\n  if (status === 'in_progress' || status === 'review') return 'in_progress';\n  return 'pending';\n}\n\nfunction sessionTodoFromTask(task: KanbanTask): TodoItem {\n  return {\n    id: task.origin?.taskId ?? task.id,\n    content: task.title,\n    status: todoStatus(task),\n    ...(task.description ? { activeForm: task.description } : {}),\n  };\n}\n\nfunction sameTodos(left: readonly TodoItem[], right: readonly TodoItem[]): boolean {\n  return (\n    left.length === right.length &&\n    left.every((todo, index) => {\n      const candidate = right[index];\n      return (\n        candidate?.id === todo.id &&\n        candidate.content === todo.content &&\n        candidate.status === todo.status &&\n        candidate.activeForm === todo.activeForm &&\n        candidate.promotedFromPlan === todo.promotedFromPlan &&\n        candidate.promotedFromTask === todo.promotedFromTask\n      );\n    })\n  );\n}\n\n/**\n * Replace the tactical todo list from the current cards on a session-owned board.\n *\n * Existing mirrored todo cards retain their stable source ids. New cards created\n * by a Kanban worker become todos under their card ids, so reassessment can add,\n * split, merge, reprioritize, or remove work without being overwritten by the\n * todo list that happened to exist when the run started.\n */\nexport function applySessionKanbanBoardToTodos(context: Context, board: KanbanBoard): TodoItem[] {\n  const sessionId = context.session?.id ?? '';\n  if (!sessionId || sessionIdFromTags(board.tags) !== sessionId || !isOwnedSessionBoard(board.tags)) {\n    return [...context.todos];\n  }\n\n  const projectedTodos = board.tasks\n    .filter(\n      (task) =>\n        task.status !== 'archived' &&\n        (!task.origin ||\n          task.origin.system === 'session-todo' ||\n          (task.origin.graphId ?? '').startsWith('todo:')),\n    )\n    .sort((left, right) => {\n      const leftColumn = board.columns.find((column) => column.id === left.columnId)?.order ?? 0;\n      const rightColumn = board.columns.find((column) => column.id === right.columnId)?.order ?? 0;\n      return leftColumn - rightColumn || left.order - right.order || left.createdAt.localeCompare(right.createdAt);\n    })\n    .map(sessionTodoFromTask);\n\n  const allCompleted =\n    projectedTodos.length > 0 && projectedTodos.every((todo) => todo.status === 'completed');\n  const effectiveTodos = allCompleted ? [] : projectedTodos;\n  if (sameTodos(context.todos, effectiveTodos)) return [...context.todos];\n  suppressedTodoMirrors.add(context);\n  try {\n    context.state.replaceTodos(projectedTodos);\n  } finally {\n    suppressedTodoMirrors.delete(context);\n  }\n  notifyTodoUpdate(context, context.todos);\n  broadcastTodoUpdate(context, context.todos);\n  return [...context.todos];\n}\n\n/** Reflect a TUI/WebUI Kanban card edit back to its originating work list. */\nexport async function applySessionKanbanTaskToSource(\n  context: Context,\n  task: KanbanTask,\n  options: { remove?: boolean | undefined } = {},\n): Promise<SessionKanbanSourceUpdate> {\n  const originId = task.origin?.taskId;\n  const graphId = task.origin?.graphId ?? '';\n  if (!originId) return { source: null };\n\n  if (task.origin?.system === 'session-todo' || graphId.startsWith('todo:')) {\n    const next = options.remove\n      ? context.todos.filter((todo) => todo.id !== originId)\n      : context.todos.map((todo) =>\n          todo.id === originId\n            ? {\n                ...todo,\n                content: task.title,\n                status:\n                  sourceStatus(task) === 'completed'\n                    ? ('completed' as const)\n                    : sourceStatus(task) === 'in_progress' || sourceStatus(task) === 'review'\n                      ? ('in_progress' as const)\n                      : ('pending' as const),\n              }\n            : todo,\n        );\n    suppressedTodoMirrors.add(context);\n    try {\n      context.state.replaceTodos(next);\n    } finally {\n      suppressedTodoMirrors.delete(context);\n    }\n    return { source: 'todo', todos: [...context.todos] };\n  }\n\n  const id = context.session?.id ?? '';\n  if (task.origin?.system === 'session-plan' || graphId.startsWith('plan:')) {\n    const planPath = context.meta['plan.path'];\n    if (typeof planPath !== 'string' || !planPath) return { source: 'plan' };\n    const plan = await mutatePlan(planPath, id, (file) => ({\n      ...file,\n      updatedAt: new Date().toISOString(),\n      items: options.remove\n        ? file.items.filter((item) => item.id !== originId)\n        : file.items.map((item) =>\n            item.id === originId\n              ? {\n                  ...item,\n                  title: task.title,\n                  details: task.description,\n                  status:\n                    task.status === 'completed'\n                      ? ('done' as const)\n                      : task.status === 'in_progress' || task.status === 'review'\n                        ? ('in_progress' as const)\n                        : ('open' as const),\n                  updatedAt: new Date().toISOString(),\n                }\n              : item,\n          ),\n    }));\n    return { source: 'plan', plan };\n  }\n\n  if (\n    task.origin?.system === 'session-task' ||\n    task.origin?.system === 'session' ||\n    graphId.startsWith('session:')\n  ) {\n    const taskPath = context.meta['task.path'];\n    if (typeof taskPath !== 'string' || !taskPath) return { source: 'task' };\n    const tasks = await mutateTasks(taskPath, id, (file) => ({\n      ...file,\n      tasks: options.remove\n        ? file.tasks.filter((item) => item.id !== originId)\n        : file.tasks.map((item) =>\n            item.id === originId\n              ? {\n                  ...item,\n                  title: task.title,\n                  description: task.description,\n                  status: sourceStatus(task),\n                  updatedAt: new Date().toISOString(),\n                }\n              : item,\n          ),\n    }));\n    return { source: 'task', tasks };\n  }\n\n  return { source: null };\n}\n"],
+  "mappings": ";AAAA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAAA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE,eAAAC;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;;;ACd3B;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAQK;AACP,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,IAAM,oBAAoB;AAC1B,IAAM,sBAAsB;AAGrB,IAAM,yBAAyC;AAAA,EACpD,EAAE,IAAI,QAAQ,OAAO,QAAQ,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AAAA,EACrE,EAAE,IAAI,eAAe,OAAO,WAAW,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AAAA,EAC/E,EAAE,IAAI,UAAU,OAAO,WAAW,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AAAA,EAC1E,EAAE,IAAI,QAAQ,OAAO,QAAQ,OAAO,GAAG,UAAU,GAAG,OAAO,UAAU;AACvE;AAEA,IAAM,aAAa,oBAAI,IAA2B;AAClD,IAAM,eAAe,oBAAI,IAAkC;AAK3D,SAAS,SAAS,aAAqB,WAA2B;AAChE,SAAO,GAAG,WAAW,KAAK,SAAS;AACrC;AAEA,SAAS,WAAW,WAA2B;AAC7C,SAAO,WAAW,SAAS;AAC7B;AAEA,SAAS,kBAAkB,WAA2B;AACpD,QAAM,OAAO,UAAU,MAAM,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,KAAK;AAC/D,SAAO,WAAW,KAAK,MAAM,GAAG,EAAE,CAAC;AACrC;AAEA,SAAS,iBAAiB,WAA6B;AACrD,SAAO,CAAC,WAAW,mBAAmB,WAAW,SAAS,CAAC;AAC7D;AA2BA,SAAS,YAAY,SAA2C;AAC9D,SACE,QAAQ,WAAW,uBAAuB,UAC1C,QAAQ,MAAM,CAAC,QAAQ,UAAU,OAAO,OAAO,uBAAuB,KAAK,GAAG,EAAE;AAEpF;AAGA,eAAsB,yBACpB,aACA,WAC6B;AAC7B,MAAI,CAAC,eAAe,CAAC,aAAa,QAAQ,IAAI,mBAAmB,MAAM,IAAK,QAAO;AACnF,QAAM,MAAM,SAAS,aAAa,SAAS;AAC3C,QAAM,WAAW,aAAa,IAAI,GAAG;AACrC,MAAI,SAAU,QAAO;AAErB,QAAM,WAAW,YAAY;AAC3B,UAAM,WAAW,MAAM,WAAW,WAAW,GAAG;AAAA,MAAK,CAACC,WACpDA,OAAM,MAAM,SAAS,WAAW,SAAS,CAAC;AAAA,IAC5C;AACA,QAAI,QAAQ,UAAU,MAAM,SAAS,aAAa,QAAQ,EAAE,IAAI;AAChE,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,aAAa;AAAA,QAC9B,OAAO,kBAAkB,SAAS;AAAA,QAClC,aAAa;AAAA,QACb,MAAM,iBAAiB,SAAS;AAAA,QAChC,SAAS;AAAA,QACT,aAAa,kBAAkB,SAAS;AAAA,MAC1C,CAAC;AAAA,IACH;AAKA,QAAI,CAAC,YAAY,MAAM,OAAO,KAAK,CAAC,MAAM,MAAM,SAAS,iBAAiB,GAAG;AAC3E,cACG,MAAM,YAAY,aAAa,MAAM,IAAI;AAAA,QACxC,OAAO,kBAAkB,SAAS;AAAA,QAClC,aAAa;AAAA,QACb,MAAM,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAI,MAAM,QAAQ,CAAC,GAAI,GAAG,iBAAiB,SAAS,CAAC,CAAC,CAAC;AAAA,QAC1E,SAAS;AAAA,MACX,CAAC,KAAM;AAAA,IACX;AACA,WAAO;AAAA,EACT,GAAG;AAEH,eAAa,IAAI,KAAK,OAAO;AAC7B,MAAI;AACF,WAAO,MAAM;AAAA,EACf,UAAE;AACA,iBAAa,OAAO,GAAG;AAAA,EACzB;AACF;AAEA,SAAS,iBACP,aACA,WACA,MACY;AACZ,QAAM,MAAM,SAAS,aAAa,SAAS;AAC3C,QAAM,WAAW,WAAW,IAAI,GAAG,KAAK,QAAQ,QAAQ;AACxD,QAAM,SAAS,SAAS,MAAM,MAAM,MAAS,EAAE,KAAK,IAAI;AACxD,QAAM,OAAO,OAAO;AAAA,IAClB,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,aAAW,IAAI,KAAK,IAAI;AACxB,OAAK,KAAK,KAAK,MAAM;AACnB,QAAI,WAAW,IAAI,GAAG,MAAM,KAAM,YAAW,OAAO,GAAG;AAAA,EACzD,CAAC;AACD,SAAO;AACT;AA2DA,eAAe,aACb,aACA,WACA,OACA,cAC6B;AAC7B,MAAI,CAAC,eAAe,CAAC,aAAa,QAAQ,IAAI,mBAAmB,MAAM,IAAK,QAAO;AACnF,SAAO,iBAAiB,aAAa,WAAW,YAAY;AAC1D,UAAM,QAAQ,MAAM,yBAAyB,aAAa,SAAS;AACnE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA,MAAM;AAAA,MACN,qBAAqB,KAAK;AAAA,MAC1B;AAAA,QACE;AAAA,QACA,MAAM,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAI,MAAM,QAAQ,CAAC,GAAI,GAAG,iBAAiB,SAAS,CAAC,CAAC,CAAC;AAAA,QAC1E,qBAAqB;AAAA,QACrB,uBAAuB;AAAA,MACzB;AAAA,IACF;AACA,WAAO,QAAQ,SAAS;AAAA,EAC1B,CAAC;AACH;AAsEA,IAAM,sBAA8D;AAAA,EAClE,MAAM;AAAA,EACN,aAAa;AAAA,EACb,MAAM;AACR;AAEO,SAAS,0BACd,OACA,WACqB;AACrB,QAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,WAAW;AAAA,IACxC,IAAI,KAAK;AAAA,IACT,OAAO,KAAK;AAAA,IACZ,aAAa,KAAK,WAAW;AAAA,IAC7B,MAAM;AAAA,IACN,UAAU;AAAA,IACV,QAAQ,oBAAoB,KAAK,MAAM;AAAA,IACvC,WAAW;AAAA,IACX,WAAW;AAAA,EACb,EAAE;AACF,SAAO;AAAA,IACL,IAAI,QAAQ,SAAS;AAAA,IACrB,QAAQ,QAAQ,SAAS;AAAA,IACzB,OAAO;AAAA,IACP;AAAA,IACA,OAAO,CAAC;AAAA,IACR,WAAW,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE;AAAA,IACtC,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACF;AA4BO,SAAS,2BACd,aACA,OACA,WAC6B;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,0BAA0B,OAAO,SAAS;AAAA,IAC1C;AAAA,EACF;AACF;;;ADrTO,IAAM,WAAwC;AAAA,EACnD,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aACE;AAAA,EAIF,WACE;AAAA,EAQF,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,cAAc,CAAC,UAAU;AAAA,EACzB,MAAM;AAAA,EACN,WAAW;AAAA,EACX,aAAa;AAAA,IACX,MAAM;AAAA,IACN,YAAY;AAAA,MACV,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa;AAAA,MACf;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,SAAS;AAAA,QACP,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,OAAO,EAAE,MAAM,SAAS;AAAA,QACxB,aACE;AAAA,MACJ;AAAA,MACA,UAAU;AAAA,QACR,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,OAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,CAAC,WAAW,SAAS;AAAA,QAC3B,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,UAAU,CAAC,QAAQ;AAAA,EACrB;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK;AACxB,UAAM,kBAAmB,IAAI,KAAiC,WAAW;AACzE,QAAI;AAEJ,QAAI,MAAM,UAAU,WAAW;AAG7B,UAAI,OAAO,oBAAoB,UAAU;AAIvC,cAAM,UAAU,KAAK,IAAI,gBAAgB,YAAY,GAAG,GAAG,gBAAgB,YAAY,IAAI,CAAC;AAC5F,mBAAW,WAAW,IAClB,gBAAgB,MAAM,GAAG,UAAU,CAAC,IAAI,sBACxC;AAAA,MACN;AAAA,IACF,OAAO;AACL,iBAAW;AAAA,IACb;AACA,QAAI,OAAO,aAAa,YAAY,CAAC,UAAU;AAC7C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,SAAS;AAAA,QACT,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM,YAAY,IAAI,SAAS,MAAM;AAErC,QAAI,QAA2B;AAE/B,UAAM,cAAc,EAAE,OAAO,IAAI,SAAS,GAAG;AAC7C,QAAI,aAAa;AAEjB,QAAI;AACJ,QAAI;AACJ,aAAO,MAAMC,YAAW,UAAU,WAAW,OAAO,MAAM;AACxD,gBAAQ,MAAM,QAAQ;AAAA,UACpB,KAAK;AACH;AAAA,UAEF,KAAK,OAAO;AACV,kBAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,gBAAI,CAAC,OAAO;AACV,sBAAQ,SAAS,GAAG,OAAO,uBAAuB;AAClD,qBAAO;AAAA,YACT;AACA,kBAAM,EAAE,MAAM,QAAQ,IAAI,YAAY,GAAG,OAAO,MAAM,SAAS,KAAK,KAAK,MAAS;AAClF,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK;AAAA,UACL,KAAK,QAAQ;AACX,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,GAAG,MAAM,MAAM,4CAA4C;AACtF,qBAAO;AAAA,YACT;AACA,kBAAM,OAAO;AAAA,cACX;AAAA,cACA,MAAM;AAAA,cACN,MAAM,WAAW,UAAU,gBAAgB;AAAA,YAC7C;AACA,gBAAI,SAAS,GAAG;AACd,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK,UAAU;AACb,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,gDAAgD;AAC3E,qBAAO;AAAA,YACT;AACA,kBAAM,OAAO,eAAe,GAAG,MAAM,MAAM;AAC3C,gBAAI,SAAS,GAAG;AACd,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK,WAAW;AACd,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,GAAG,MAAM,MAAM,4CAA4C;AACtF,qBAAO;AAAA,YACT;AACA,kBAAM,UAAU,wBAAwB,GAAG,MAAM,QAAQ,MAAM,QAAQ;AACvE,gBAAI,CAAC,SAAS;AACZ,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,gBAAI,MAAM,aAAa,QAAQ,KAAK;AACpC,oBAAQ;AAAA,cACN,QAAQ;AAAA,cACR;AAAA,cACA,GAAG,MAAM,MAAM,cAAS,QAAQ,MAAM,MAAM;AAAA,cAC5C,QAAQ;AAAA,YACV;AACA,mBAAO,QAAQ;AAAA,UACjB;AAAA,UAEA,KAAK,gBAAgB;AACnB,kBAAM,eAAe,MAAM,UAAU,KAAK;AAC1C,gBAAI,CAAC,cAAc;AACjB,sBAAQ,SAAS,GAAG,OAAO,wCAAwC;AACnE,qBAAO;AAAA,YACT;AACA,kBAAM,WAAW,gBAAgB,YAAY;AAC7C,gBAAI,CAAC,UAAU;AACb,sBAAQ,SAAS,GAAG,OAAO,qBAAqB,YAAY,IAAI;AAChE,qBAAO;AAAA,YACT;AACA,gBAAI,UAAU;AACd,uBAAW,QAAQ,SAAS,OAAO;AACjC,eAAC,EAAE,MAAM,QAAQ,IAAI,YAAY,SAAS,KAAK,OAAO,KAAK,OAAO;AAAA,YACpE;AACA,oBAAQ;AAAA,cACN;AAAA,cACA;AAAA,cACA,qBAAqB,SAAS,IAAI,YAAO,SAAS,MAAM,MAAM;AAAA,YAChE;AACA,mBAAO;AAAA,UACT;AAAA,UAEA,KAAK;AACH,mBAAO,UAAU,CAAC;AAAA,UAEpB,KAAK,WAAW;AACd,gBAAI,CAAC,MAAM,QAAQ;AACjB,sBAAQ,SAAS,GAAG,OAAO,2DAA2D;AACtF,qBAAO;AAAA,YACT;AAEA,gBAAI,UAAU;AACd,kBAAM,QAAQ,OAAO,SAAS,MAAM,QAAQ,EAAE;AAC9C,gBAAI,CAAC,OAAO,MAAM,KAAK,KAAK,SAAS,KAAK,SAAS,EAAE,MAAM,QAAQ;AACjE,wBAAU,QAAQ;AAAA,YACpB,OAAO;AACL,wBAAU,EAAE,MAAM,UAAU,CAAC,OAAO,GAAG,OAAO,MAAM,MAAM;AAC1D,kBAAI,YAAY,IAAI;AAClB,sBAAM,QAAQ,MAAM,OAAO,YAAY;AACvC,0BAAU,EAAE,MAAM,UAAU,CAAC,OAAO,GAAG,MAAM,YAAY,EAAE,SAAS,KAAK,CAAC;AAAA,cAC5E;AAAA,YACF;AACA,gBAAI,YAAY,MAAM,CAAC,EAAE,MAAM,OAAO,GAAG;AACvC,sBAAQ,SAAS,GAAG,OAAO,yBAAyB,MAAM,MAAM,IAAI;AACpE,qBAAO;AAAA,YACT;AACA,kBAAM,OAAO,EAAE,MAAM,OAAO;AAE5B,wBAAY,QAAQ,KAAK;AACzB,wBAAY,UAAU,KAAK,WAAW;AACtC,yBAAa;AACb;AAAA,UACF;AAAA,UAEA;AACE,oBAAQ,SAAS,GAAG,OAAO,mBAAoB,MAA6B,MAAM,IAAI;AACtF,mBAAO;AAAA,QACX;AAEA,eAAO;AAAA,MACT,CAAC;AAAA,IACD,SAAS,KAAK;AAGZ,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,SAAS,gCAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACpF,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,IACF;AAIA,UAAM,2BAA2B,IAAI,aAAa,KAAK,OAAO,SAAS;AAGvE,QAAI,MAAO,QAAO;AAGlB,QAAI,YAAY;AACd,YAAM,cAAe,IAAI,KAAiC,WAAW;AACrE,UAAI,OAAO,gBAAgB,YAAY,CAAC,aAAa;AACnD,eAAO,SAAS,MAAM,OAAO,yDAAoD;AAAA,MACnF;AACA,UAAI,WAAmB;AAIvB,UAAI,MAAM,UAAU,WAAW;AAC7B,cAAM,UAAU,KAAK,IAAI,SAAS,YAAY,GAAG,GAAG,SAAS,YAAY,IAAI,CAAC;AAC9E,mBAAW,WAAW,IAAI,SAAS,MAAM,GAAG,UAAU,CAAC,IAAI,uBAAuB;AAAA,MACpF;AACA,YAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AAInC,UAAI;AACF,cAAM,WAAqB,MAAMC,aAAY,UAAU,WAAW,CAAC,MAAM;AACvE,YAAE,MAAM,KAAK;AAAA,YACX,IAAI,QAAQ,WAAW,CAAC;AAAA,YACxB,OAAO,YAAY;AAAA,YACnB,aAAa,YAAY,WAAW;AAAA,YACpC,MAAM;AAAA,YACN,UAAU;AAAA,YACV,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,WAAW;AAAA,UACb,CAAC;AACD,iBAAO;AAAA,QACT,CAAC;AACD,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,4BAAuB,YAAY,KAAK;AAAA,EAAgB,eAAe,SAAS,KAAK,CAAC;AAAA,QACxF;AAAA,MACF,SAAS,KAAK;AAEZ,eAAO,SAAS,MAAM,OAAO,kCAA6B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,MAC9G;AAAA,IACF;AAEA,WAAO,SAAS,MAAM,MAAM,QAAQ,MAAM,MAAM,MAAM;AAAA,EACxD;AACF;AAEA,SAAS,SACP,MACA,IACA,SACA,OACY;AACZ,QAAM,OAAO,KAAK,MAAM,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC3D,QAAM,SAAqB;AAAA,IACzB;AAAA,IACA;AAAA,IACA,MAAM,WAAW,IAAI;AAAA,IACrB,OAAO,KAAK,MAAM;AAAA,IAClB;AAAA,EACF;AACA,MAAI,UAAU,OAAW,QAAO,QAAQ;AACxC,SAAO;AACT;",
   "names": ["mutatePlan", "mutateTasks", "board", "mutatePlan", "mutateTasks"]
 }

package/dist/process-registry.js

@@ -199,9 +199,14 @@ import { expectDefined } from "@wrongstack/core";
 var SENSITIVE_FLAG_PATTERNS = [
   // --flag=value  or  --flag "value"  (value captured up to next space or comma)
   /--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)(?:[=\s,][^\s]*)?/gi,
-  // -f "value" style short flags
-  /(?<!\w)-t(?:\s+|\s*=\s*)[^\s,]+/,
-  /(?<!\w)-(?:p|password)(?:\s+|\s*=\s*)[^\s,]+/gi,
+  // -t short flag (token): attached (-tVALUE), separated (-t VALUE), or -t=VALUE.
+  // (?<![-\w]) anchors to a token start so we don't match the `-t` inside `--token`.
+  // NOTE: synced with @wrongstack/core observability/redact-command.ts.
+  /(?<![-\w])-t(?:[=\s]+)?[^\s,-]+/,
+  // -p|-password|-a (redis auth) short flags: attached + separated + =value.
+  // Same token-start anchor; over-redaction is an accepted tradeoff for a
+  // redaction function. Synced with core copy.
+  /(?<![-\w])-(?:password|p|a)(?:[=\s]+)?[^\s,-]+/gi,
   // env var–style secrets: TOKEN=x, API_KEY=y, etc.
   /(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD)\s*[=:]\s*[^\s,]+/gi,
   // Generic high-entropy look: base64 strings >32 chars or hex strings >32 digits — but only
@@ -219,8 +224,10 @@ function redactCommand(cmd) {
         const flag = match.slice(0, match.indexOf(expectDefined(delim)) + 1);
         return `${flag}[REDACTED]`;
       }
-      const flagEnd = match.match(/^--?[a-zA-Z][a-zA-Z0-9_-]*/)?.[0] ?? match;
-      return `${flagEnd}=**redacted**`;
+      if (match.startsWith("--")) {
+        return match;
+      }
+      return `${match.slice(0, 2)}[REDACTED]`;
     });
   }
   return result;

package/dist/process-registry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/process-registry.ts", "../src/circuit-breaker.ts", "../src/_redact-command.ts"],
-  "sourcesContent": ["/**\n * ProcessRegistry \u2014 global singleton that tracks all spawned child processes\n * from `bash` and `exec` tools. Enables:\n *\n *   - Listing active processes (for TUI status bar)\n *   - Killing individual processes or all processes (for Ctrl+C and /kill)\n *   - Detecting runaway processes (hung, looping)\n *   - Circuit breaker integration to prevent recursive/repeated failures\n *\n * Thread-safety: Node.js is single-threaded, but async callbacks can fire\n * in any order. All mutations go through synchronized Map methods.\n */\nimport { spawn } from 'node:child_process';\nimport type { ChildProcess } from 'node:child_process';\nimport * as os from 'node:os';\nimport { CircuitBreaker, type CircuitBreakerSnapshot, type CircuitBreakerConfig } from './circuit-breaker.js';\nexport type { CircuitBreakerSnapshot, CircuitBreakerConfig } from './circuit-breaker.js';\n\nexport interface TrackedProcess {\n  pid: number;\n  name: string;\n  /** Display-safe redacted command string \u2014 safe for logs, /ps, crash dumps.\n   *  Contains [REDACTED] in place of sensitive flag values. */\n  command: string;\n  startedAt: number;\n  sessionId?: string | undefined;\n  /** The raw ChildProcess handle. Never call .kill() directly on this \u2014\n   *  use `kill()` below which handles process groups correctly on POSIX\n   *  and degrades gracefully on Windows. */\n  child: ChildProcess;\n  /** True only when this child was spawned as a POSIX process-group/session\n   *  leader (for example `spawn(..., { detached: true })`) and `pid` is the\n   *  actual `child.pid`. Negative-PID signaling is host-wide dangerous for\n   *  values like -1, so tests and manually registered entries must not opt in. */\n  processGroupLeader?: boolean | undefined;\n  /** True once the process has been kill()ed but not yet exited.\n   *  We keep it in the registry until 'close' fires so callers can\n   *  distinguish \"still running\" from \"just exited\". */\n  killed: boolean;\n  /** If true, kill() and killAll() will refuse to kill this process.\n   *  Used for infrastructure processes (browser, dev servers, \u2026) that\n   *  must outlive the agent session. */\n  protected: boolean;\n}\n\n// redactCommand (and its sensitive-flag patterns) lives in _redact-command.ts\n// so registry-only consumers (e.g. ps-slash) don't carry its dependencies.\n// Re-exported here to keep this module's historical public API intact.\nexport { redactCommand } from './_redact-command.js';\n\ninterface KillOpts {\n  /** SIGKILL instead of SIGTERM. Default: false (SIGTERM first). */\n  force?: boolean | undefined;\n  /** MS to wait between SIGTERM and SIGKILL on POSIX. Default: 2000. */\n  graceMs?: number | undefined;\n}\n\n/**\n * Snapshot of the armed auto kill/reset countdown, or null when nothing is\n * armed. `remainingMs` ticks down in real time; the TUI statusline renders it.\n */\nexport interface BreakerCountdown {\n  remainingMs: number;\n  totalMs: number;\n}\n\ntype BreakerCountdownListener = (snapshot: BreakerCountdown | null) => void;\n\nexport interface RegistryStats {\n  activeCount: number;\n  totalCount: number;\n  breaker: CircuitBreakerSnapshot;\n}\n\nconst DEFAULT_GRACE_MS = 2000;\nconst WIN32_TASKKILL_TIMEOUT_MS = 5000;\n\ninterface Win32TreeKillOptions {\n  /**\n   * Upper bound for taskkill itself before the caller's fallback may run.\n   * This is deliberately separate from POSIX SIGTERM grace: on Windows the\n   * direct-child fallback must not fire while taskkill is still walking the\n   * child tree, or it can orphan grandchildren that keep stdio open.\n   */\n  timeoutMs?: number | undefined;\n  onSettled?: (() => void) | undefined;\n}\n\n/**\n * Kill an entire process tree on Windows via `taskkill /T /F`.\n *\n * TerminateProcess (what `child.kill()` maps to) has no process-group\n * semantics, so killing a shell wrapper (`cmd.exe /c \u2026`) orphans its\n * grandchildren (node, vitest forks, dev servers). The orphans inherit the\n * parent's stdio pipe handles and can keep streaming into this process for\n * the rest of the session \u2014 which both prevents the child's 'close' event\n * from ever firing and grows in-memory output buffers without bound.\n *\n * Returns true if taskkill was spawned, false if spawning it failed (caller\n * should fall back to a direct `child.kill()`). Callers that need a direct\n * fallback should pass `onSettled`; it runs after taskkill exits, errors, or\n * exceeds `timeoutMs`, avoiding the race where killing cmd.exe first prevents\n * taskkill from enumerating and killing grandchildren.\n */\nexport function killWin32Tree(pid: number, opts: Win32TreeKillOptions = {}): boolean {\n  try {\n    const child = spawn('taskkill', ['/pid', String(pid), '/T', '/F'], {\n      stdio: 'ignore',\n      windowsHide: true,\n    });\n    let settled = false;\n    let timeout: ReturnType<typeof setTimeout> | undefined;\n    const settle = () => {\n      if (settled) return;\n      settled = true;\n      if (timeout) clearTimeout(timeout);\n      try {\n        opts.onSettled?.();\n      } catch {\n        /* fallback callbacks are best-effort */\n      }\n    };\n    // spawn() reports a failure to launch (e.g. taskkill not on PATH, blocked by\n    // security software) via an ASYNC 'error' event \u2014 the surrounding try/catch\n    // only traps synchronous throws. Without a listener that event is unhandled\n    // and crashes the whole process. Swallow it: this is best-effort tree-kill\n    // and the registry still has the direct child.kill() fallback.\n    child.on('error', settle);\n    child.on('close', settle);\n    timeout = setTimeout(() => {\n      try {\n        child.kill();\n      } catch {\n        /* already exited */\n      }\n      settle();\n    }, Math.max(1, opts.timeoutMs ?? WIN32_TASKKILL_TIMEOUT_MS));\n    timeout.unref?.();\n    child.unref();\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport class ProcessRegistryImpl {\n  private readonly processes = new Map<number, TrackedProcess>();\n  private readonly breaker: CircuitBreaker;\n\n  /**\n   * Auto kill/reset config. When the breaker trips and `autoKillResetMs > 0`,\n   * a countdown is armed; on expiry all tracked processes are killed and the\n   * breaker is reset to closed (forced recovery). Zero means manual recovery\n   * only (`/kill reset`).\n   */\n  private autoKillResetMs = 0;\n  private autoKillTimer: ReturnType<typeof setTimeout> | null = null;\n  private autoKillArmedAt: number | null = null;\n  private breakerCountdownListeners: BreakerCountdownListener[] = [];\n\n  constructor(breakerConfig?: CircuitBreakerConfig) {\n    this.breaker = new CircuitBreaker(breakerConfig);\n    // Arm on trip, cancel on recovery. Listeners are best-effort.\n    this.breaker.onTrip = () => this._armAutoKillReset();\n    this.breaker.onReset = () => this._cancelAutoKillReset();\n    // Protection is OFF by default \u2014 the user opts in via `/settings breaker on`.\n    this.breaker.setEnabled(false);\n  }\n\n  register(info: Omit<TrackedProcess, 'killed' | 'protected'> & { protected?: boolean | undefined }): void {\n    this.processes.set(info.pid, { ...info, killed: false, protected: info.protected ?? false });\n  }\n\n  private _isSafeSignalPid(pid: number): boolean {\n    return Number.isInteger(pid) && pid > 1 && pid !== process.pid && pid !== process.ppid;\n  }\n\n  private _canSignalProcessGroup(p: TrackedProcess): boolean {\n    return (\n      os.platform() !== 'win32' &&\n      p.processGroupLeader === true &&\n      this._isSafeSignalPid(p.pid) &&\n      typeof p.child.pid === 'number' &&\n      p.child.pid === p.pid\n    );\n  }\n\n  private _killChildDirect(p: TrackedProcess, signal: NodeJS.Signals): void {\n    try {\n      p.child.kill(signal);\n    } catch {\n      // Process may have already exited, or this may be a persistent entry\n      // without a live ChildProcess handle in the current process.\n    }\n  }\n\n  private _killPosix(p: TrackedProcess, signal: NodeJS.Signals): void {\n    if (this._canSignalProcessGroup(p)) {\n      try {\n        process.kill(-p.pid, signal);\n        return;\n      } catch {\n        // Process group may already be gone; fall back to the direct child.\n      }\n    }\n    this._killChildDirect(p, signal);\n  }\n\n  /** Unregister a process by PID. Called on 'close' / 'exit' events. */\n  unregister(pid: number): void {\n    this.processes.delete(pid);\n  }\n\n  /** Get a single process by PID. */\n  get(pid: number): TrackedProcess | undefined {\n    this._pruneStale(pid);\n    return this.processes.get(pid);\n  }\n\n  /** Get all tracked processes. */\n  list(): TrackedProcess[] {\n    return Array.from(this.processes.values());\n  }\n\n  /** Get processes filtered by name (e.g. 'bash', 'exec'). */\n  byName(name: string): TrackedProcess[] {\n    return this.list().filter((p) => p.name === name);\n  }\n\n  /** Get processes filtered by session. */\n  bySession(sessionId: string): TrackedProcess[] {\n    return this.list().filter((p) => p.sessionId === sessionId);\n  }\n\n  /** Count of active (non-killed) processes. */\n  get activeCount(): number {\n    let n = 0;\n    for (const p of this.processes.values()) {\n      if (!p.killed) n++;\n    }\n    return n;\n  }\n\n  /**\n   * Combined stats for observability \u2014 used by /ps and the TUI status bar.\n   */\n  stats(): RegistryStats {\n    return {\n      activeCount: this.activeCount,\n      totalCount: this.processes.size,\n      breaker: this.breaker.snapshot(),\n    };\n  }\n\n  /**\n   * Returns true if the circuit allows a new bash/exec call to proceed.\n   * When false, callers MUST NOT spawn a process.\n   */\n  get canProceed(): boolean {\n    return this.breaker.canProceed;\n  }\n\n  /**\n   * Called before spawning a process. Returns true if allowed; false if\n   * the circuit breaker is open.\n   *\n   * @param bypass - If true, skip circuit breaker check (for background processes).\n   */\n  beforeCall(bypass = false): boolean {\n    return this.breaker.beforeCall(bypass);\n  }\n\n  /**\n   * Called after a process finishes. `durationMs` is wall-clock time;\n   * `failed` is true for non-zero exit codes.\n   *\n   * @param bypass - If true, do not update circuit breaker state (for background processes).\n   */\n  afterCall(durationMs: number, failed: boolean, bypass = false): void {\n    this.breaker.afterCall(durationMs, failed, bypass);\n  }\n\n  /** Force-open the circuit breaker (Ctrl+C, /kill force). */\n  forceBreakerOpen(): void {\n    this.breaker.forceOpen();\n  }\n\n  /** Force-reset the circuit breaker to closed (/kill reset). */\n  forceBreakerReset(): void {\n    this.breaker.forceReset();\n  }\n\n  /**\n   * Configure circuit-breaker protection at runtime. Called from `/settings`\n   * (instant, all modes) and on TUI mount (applies persisted config).\n   *\n   * - `enabled` toggles whether the breaker gates `bash`/`exec`.\n   * - `autoKillResetMs` arms the auto kill/reset countdown when the breaker\n   *   trips (0 = manual recovery only).\n   *\n   * Re-applies cleanly on every call: cancels a pending countdown when the\n   * timeout is cleared or protection disabled, and re-arms if the breaker is\n   * currently open under the new settings.\n   */\n  setBreakerConfig(cfg: { enabled?: boolean | undefined; autoKillResetMs?: number | undefined }): void {\n    if (cfg.enabled !== undefined) this.breaker.setEnabled(cfg.enabled);\n    if (cfg.autoKillResetMs !== undefined) this.autoKillResetMs = Math.max(0, cfg.autoKillResetMs);\n\n    if (this.autoKillResetMs <= 0) {\n      this._cancelAutoKillReset();\n      return;\n    }\n    // If protection is active and the breaker is currently tripped, ensure a\n    // countdown is armed for the new window (covers a live config change while\n    // the breaker is already open).\n    if (this.breaker.isEnabled && this.breaker.snapshot().state === 'open') {\n      this._armAutoKillReset();\n    }\n  }\n\n  /**\n   * Live countdown to the next auto kill/reset, or null when nothing is armed.\n   * The TUI polls this on a 1s tick while armed so the statusline decrements.\n   */\n  getBreakerCountdown(): BreakerCountdown | null {\n    if (this.autoKillArmedAt === null || this.autoKillResetMs <= 0) return null;\n    const elapsed = Date.now() - this.autoKillArmedAt;\n    return { remainingMs: Math.max(0, this.autoKillResetMs - elapsed), totalMs: this.autoKillResetMs };\n  }\n\n  /**\n   * Subscribe to countdown arm/cancel events. Returns an unsubscribe function.\n   * Use {@link getBreakerCountdown} for the live ticking value between events.\n   */\n  onBreakerCountdownChange(listener: BreakerCountdownListener): () => void {\n    this.breakerCountdownListeners.push(listener);\n    return () => {\n      this.breakerCountdownListeners = this.breakerCountdownListeners.filter((l) => l !== listener);\n    };\n  }\n\n  private _emitBreakerCountdown(): void {\n    const snap = this.getBreakerCountdown();\n    for (const l of this.breakerCountdownListeners) {\n      try {\n        l(snap);\n      } catch {\n        /* listener failure must never affect breaker behavior */\n      }\n    }\n  }\n\n  /**\n   * Arm the auto kill/reset countdown. Idempotent: re-arming resets the window\n   * (a fresh trip after a failed half-open probe restarts the clock). No-op\n   * when protection is off or no timeout is configured.\n   */\n  private _armAutoKillReset(): void {\n    if (this.autoKillResetMs <= 0 || !this.breaker.isEnabled) return;\n    this._clearAutoKillTimer();\n    this.autoKillArmedAt = Date.now();\n    this.autoKillTimer = setTimeout(() => {\n      this.autoKillTimer = null;\n      this.autoKillArmedAt = null;\n      // Forced recovery: nuke runaway processes and reopen the circuit.\n      this.killAll({ force: false });\n      this.breaker.forceReset();\n      this._emitBreakerCountdown();\n    }, this.autoKillResetMs);\n    // Don't keep the event loop alive purely for auto-recovery.\n    this.autoKillTimer.unref?.();\n    this._emitBreakerCountdown();\n  }\n\n  private _cancelAutoKillReset(): void {\n    const wasArmed = this.autoKillArmedAt !== null;\n    this._clearAutoKillTimer();\n    if (wasArmed) {\n      this.autoKillArmedAt = null;\n      this._emitBreakerCountdown();\n    }\n  }\n\n  private _clearAutoKillTimer(): void {\n    if (this.autoKillTimer !== null) {\n      clearTimeout(this.autoKillTimer);\n      this.autoKillTimer = null;\n    }\n  }\n\n  /** Kill a single process by PID.\n   *\n   *  On POSIX: sends SIGTERM to the *process group* (-pid) so that\n   *  runaway grandchild processes (`sleep 9999 & disown`) are also killed.\n   *  After `graceMs` a SIGKILL is sent if the process hasn't exited.\n   *\n   *  On Windows: `child.kill()` maps to TerminateProcess \u2014 process groups\n   *  are not meaningfully supported. A second `force=true` call sends\n   *  SIGKILL (which maps to TerminateProcess again \u2014 the distinction is\n   *  in the exit code, not the signal).\n   *\n   *  Returns true if the process was found and kill was attempted.\n   */\n  kill(pid: number, opts: KillOpts = {}): boolean {\n    this._pruneStale(pid);\n    const p = this.processes.get(pid);\n    if (!p) return false;\n    if (p.killed) return true; // already kill()ed, don't double-send\n    if (p.protected) return false; // protected processes are never kill()ed\n\n    const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;\n    const isWin = os.platform() === 'win32';\n\n    if (isWin) {\n      // Windows: no process group semantics. A direct kill terminates only\n      // the immediate child \u2014 shell-wrapped commands (cmd.exe /c \u2026) leave\n      // grandchildren running that hold the inherited stdio pipes open and\n      // keep feeding output into this process indefinitely. Kill the whole\n      // tree via taskkill instead, but only for a real, still-running child\n      // (exitCode === null); test fakes and already-exited processes take\n      // the plain-kill path. The direct kill is deliberately NOT sent\n      // immediately alongside taskkill: killing the root first would break\n      // taskkill's parent-pid tree enumeration and orphan the grandchildren\n      // again \u2014 it runs as a delayed fallback instead.\n      const liveRealChild = p.child.exitCode === null && typeof p.child.pid === 'number';\n      const directFallback = () => {\n        if (p.child.exitCode === null) {\n          try {\n            p.child.kill('SIGKILL');\n          } catch {\n            // Process may have already exited.\n          }\n        }\n      };\n      if (\n        liveRealChild &&\n        killWin32Tree(pid, {\n          timeoutMs: Math.max(graceMs, WIN32_TASKKILL_TIMEOUT_MS),\n          onSettled: directFallback,\n        })\n      ) {\n        // The direct fallback is intentionally chained from taskkill's\n        // completion. Killing cmd.exe before taskkill has walked the tree can\n        // orphan the real command and leave stdio pipes open forever.\n      } else {\n        try {\n          p.child.kill(force ? 'SIGKILL' : 'SIGTERM');\n        } catch {\n          // Process may have already exited.\n        }\n      }\n      p.killed = true;\n      return true;\n    }\n\n    // POSIX: kill the process group only when the tracked child is proven to\n    // be the group leader. Otherwise use child.kill(); negative PID signaling\n    // with untrusted/fake PIDs can target unrelated host processes.\n    try {\n      if (force) {\n        this._killPosix(p, 'SIGKILL');\n      } else {\n        this._killPosix(p, 'SIGTERM');\n        // Schedule SIGKILL as backup.\n        const timer = setTimeout(() => {\n          // Re-check: process may have exited on its own.\n          if (this.processes.has(pid) && !p.child.killed) {\n            this._killPosix(p, 'SIGKILL');\n          }\n        }, graceMs);\n        timer.unref?.(); // Don't keep event loop alive.\n      }\n    } catch {\n      // Process may have already exited.\n    }\n    p.killed = true;\n    return true;\n  }\n\n  /**\n   * Kill all tracked processes.\n   * Returns the PIDs that were kill()ed.\n   */\n  killAll(opts: KillOpts = {}): number[] {\n    const pids = Array.from(this.processes.keys());\n    const killed: number[] = [];\n    for (const pid of pids) {\n      const p = this.processes.get(pid);\n      if (p && !p.protected && this.kill(pid, opts)) killed.push(pid);\n    }\n    return killed;\n  }\n\n  /**\n   * Kill all processes for a specific session.\n   * Returns the PIDs that were kill()ed.\n   */\n  killSession(sessionId: string, opts: KillOpts = {}): number[] {\n    const pids = this.bySession(sessionId).map((p) => p.pid);\n    const killed: number[] = [];\n    for (const pid of pids) {\n      if (this.kill(pid, opts)) killed.push(pid);\n    }\n    return killed;\n  }\n\n  /**\n   * Check whether a tracked process entry is stale \u2014 the child has exited\n   * (exitCode !== null) AND it's been in the registry long enough that the\n   * OS may have reused the PID for a new, unrelated process.\n   *\n   * P3 #24 (before-release.md): on POSIX, PIDs are reused after process\n   * exit. If a tracked process exits but its 'close' event hasn't fired yet\n   * (or was missed), the registry still holds the entry. A new process\n   * gets the same PID, and PID-based lookups (get, kill, shouldBlockKill)\n   * may incorrectly protect or target the wrong process.\n   *\n   * The 60s threshold is conservative \u2014 the OS typically waits much longer\n   * before reusing a PID, but we want to clean up before that becomes a risk.\n   */\n  private _isStaleEntry(entry: TrackedProcess): boolean {\n    return entry.child.exitCode !== null && Date.now() - entry.startedAt > 60_000;\n  }\n\n  /**\n   * Remove a stale entry for a specific PID before any PID-based lookup.\n   * This prevents PID reuse from causing the registry to act on a dead\n   * process that has been replaced by a new one with the same PID.\n   */\n  private _pruneStale(pid: number): void {\n    const entry = this.processes.get(pid);\n    if (entry && this._isStaleEntry(entry)) {\n      this.processes.delete(pid);\n    }\n  }\n}\n\n/** Module-level singleton. Initialized on first access. */\nlet _registry: ProcessRegistryImpl | undefined;\n\nexport function getProcessRegistry(): ProcessRegistryImpl {\n  if (!_registry) {\n    _registry = new ProcessRegistryImpl();\n  }\n  return _registry;\n}\n\n/** Reset for tests. */\nexport function _resetProcessRegistry(): void {\n  _registry = undefined;\n}\n\n// \u2500\u2500 Convenience re-exports \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport type { KillOpts };\n", "/**\n * CircuitBreaker \u2014 prevents runaway bash/exec tool chains by:\n *\n *   - Tripping on consecutive failures (models that keep repeating the\n *     same failing command, e.g. `npm install` with wrong args in a loop)\n *   - Tripping on slow call ratio (too many long-running commands suggest\n *     a hung subprocess that the model doesn't know how to kill)\n *   - Rate-limiting bursts (rapid succession of commands without reading\n *     output suggests the model isn't processing results)\n *   - Auto-recovering after a cooldown period so a fixed model can resume\n *\n * The breaker is owned by the ProcessRegistry so any tool that registers\n * a process participates in the same circuit. \"Per-tool\" isolation is\n * intentionally NOT implemented \u2014 the model treats bash/exec as one\n * resource pool; isolating them would let the model route around the\n * breaker by alternating which tool it uses.\n */\n\nexport interface CircuitBreakerConfig {\n  /**\n   * Consecutive failures before trip. Default: 5.\n   * A single success resets this counter to 0.\n   */\n  maxConsecutiveFailures?: number | undefined;\n  /**\n   * Slow-call threshold in ms. A call that runs longer than this is\n   * counted as \"slow\". Default: 60_000 (1 minute).\n   */\n  slowCallThresholdMs?: number | undefined;\n  /**\n   * Max slow calls before trip (within the sliding window). Default: 3.\n   */\n  maxSlowCalls?: number | undefined;\n  /**\n   * Sliding window for rate-limit and slow-call counting, in ms.\n   * Default: 60_000 (1 minute).\n   */\n  windowMs?: number | undefined;\n  /**\n   * Max calls within the sliding window. Default: 30.\n   * Burst exceeding this trips the breaker immediately.\n   */\n  maxCallsPerWindow?: number | undefined;\n  /**\n   * Cooldown before auto-recovery attempt, in ms. Default: 30_000 (30s).\n   * After this the breaker enters \"half-open\" state and allows one call\n   * through to test whether the problem is resolved.\n   */\n  cooldownMs?: number | undefined;\n}\n\ninterface CallRecord {\n  at: number;\n  /** True if the call threw or returned an is_error result. */\n  failed: boolean;\n  /** True if elapsed time exceeded slowCallThresholdMs. */\n  slow: boolean;\n}\n\ntype BreakerState = 'closed' | 'open' | 'half-open';\n\nconst DEFAULT_MAX_CONSECUTIVE_FAILURES = 5;\nconst DEFAULT_SLOW_CALL_THRESHOLD_MS = 180_000;\n// 3 minutes \u2014 balanced against the 5-minute bash timeout. Commands\n// running <3min are normal; 3-5min are \"slow\" and count toward the\n// breaker. 3 consecutive slow calls trip the circuit.\nconst DEFAULT_MAX_SLOW_CALLS = 3;\nconst DEFAULT_WINDOW_MS = 60_000;\nconst DEFAULT_MAX_CALLS_PER_WINDOW = 30;\nconst DEFAULT_COOLDOWN_MS = 30_000;\n\nexport interface CircuitBreakerSnapshot {\n  state: 'closed' | 'open' | 'half-open';\n  consecutiveFailures: number;\n  slowCallsInWindow: number;\n  callsInWindow: number;\n  windowMs: number;\n  cooldownRemainingMs: number | null;\n  lastFailureAt: number | null;\n  lastSlowAt: number | null;\n}\n\nexport class CircuitBreaker {\n  private readonly maxConsecutiveFailures: number;\n  private readonly slowCallThresholdMs: number;\n  private readonly maxSlowCalls: number;\n  private readonly windowMs: number;\n  private readonly maxCallsPerWindow: number;\n  private readonly cooldownMs: number;\n\n  private state: BreakerState = 'closed';\n  private consecutiveFailures = 0;\n  private window: CallRecord[] = [];\n  private lastFailureAt: number | null = null;\n  private lastSlowAt: number | null = null;\n  /** Timestamp when the breaker was opened (for cooldown calculation). */\n  private openedAt: number | null = null;\n\n  /**\n   * Master enable flag. When false the breaker is bypassed: `beforeCall`\n   * always returns true and `afterCall` records nothing. The class itself\n   * defaults to enabled (so the standalone unit tests exercise tripping); the\n   * ProcessRegistry flips this off until the user opts in via `/settings`.\n   */\n  private enabled = true;\n\n  /**\n   * Fired (best-effort) when the breaker transitions into the `open` state.\n   * The registry uses this to arm its auto kill/reset countdown.\n   */\n  onTrip?: (() => void) | undefined;\n  /**\n   * Fired (best-effort) when the breaker returns to `closed` after having been\n   * open/half-open. The registry uses this to cancel a pending kill/reset.\n   */\n  onReset?: (() => void) | undefined;\n\n  constructor(config: CircuitBreakerConfig = {}) {\n    this.maxConsecutiveFailures = config.maxConsecutiveFailures ?? DEFAULT_MAX_CONSECUTIVE_FAILURES;\n    this.slowCallThresholdMs = config.slowCallThresholdMs ?? DEFAULT_SLOW_CALL_THRESHOLD_MS;\n    this.maxSlowCalls = config.maxSlowCalls ?? DEFAULT_MAX_SLOW_CALLS;\n    this.windowMs = config.windowMs ?? DEFAULT_WINDOW_MS;\n    this.maxCallsPerWindow = config.maxCallsPerWindow ?? DEFAULT_MAX_CALLS_PER_WINDOW;\n    this.cooldownMs = config.cooldownMs ?? DEFAULT_COOLDOWN_MS;\n  }\n\n  /** Toggle the master enable. Disabling resets to a clean `closed` state. */\n  setEnabled(enabled: boolean): void {\n    if (this.enabled === enabled) return;\n    this.enabled = enabled;\n    if (!enabled) this._reset();\n  }\n\n  get isEnabled(): boolean {\n    return this.enabled;\n  }\n\n  /**\n   * Returns true if the circuit allows a new call to proceed.\n   * When false, callers should abort the tool call and return a\n   * circuit-breaker error instead of spawning a process.\n   */\n  get canProceed(): boolean {\n    if (!this.enabled) return true;\n    this._checkStateTransition();\n    return this.state !== 'open';\n  }\n\n  /**\n   * Snapshot of the current breaker state for observability (`/kill`).\n   */\n  snapshot(): CircuitBreakerSnapshot {\n    this._checkStateTransition();\n    const now = Date.now();\n    let cooldownRemaining: number | null = null;\n    if (this.openedAt !== null && this.state === 'open') {\n      const elapsed = now - this.openedAt;\n      cooldownRemaining = Math.max(0, this.cooldownMs - elapsed);\n    }\n    return {\n      state: this.state,\n      consecutiveFailures: this.consecutiveFailures,\n      slowCallsInWindow: this.window.filter((c) => c.slow).length,\n      callsInWindow: this.window.length,\n      windowMs: this.windowMs,\n      cooldownRemainingMs: cooldownRemaining,\n      lastFailureAt: this.lastFailureAt,\n      lastSlowAt: this.lastSlowAt,\n    };\n  }\n\n  /**\n   * Call this BEFORE spawning a bash/exec process.\n   * Returns true if the call is allowed; false if the breaker is open.\n   * When false, callers MUST NOT spawn a process.\n   *\n   * @param bypass - If true, skip the circuit breaker check entirely.\n   *                  Use for background/fire-and-forget processes that should\n   *                  not affect breaker state.\n   */\n  beforeCall(bypass = false): boolean {\n    if (bypass || !this.enabled) return true;\n    this._checkStateTransition();\n    if (this.state === 'open') return false;\n    return true;\n  }\n\n  /**\n   * Call this AFTER a bash/exec process finishes (success or failure).\n   * `durationMs` is the wall-clock time the process ran.\n   * `failed` is true when the process returned a non-zero exit code or\n   * threw an exception before spawning.\n   *\n   * @param bypass - If true, do not update breaker state.\n   *                  Use for background/fire-and-forget processes.\n   */\n  afterCall(durationMs: number, failed: boolean, bypass = false): void {\n    if (bypass || !this.enabled) return;\n\n    const now = Date.now();\n\n    if (this.state === 'half-open') {\n      // First call through after cooldown \u2014 if it failed, go back to open.\n      if (failed) {\n        this._trip();\n        return;\n      }\n      // Success in half-open \u2192 reset to closed.\n      this._reset();\n      return;\n    }\n\n    // Prune old records outside the sliding window.\n    this._pruneWindow(now);\n\n    const slow = durationMs >= this.slowCallThresholdMs;\n    this.window.push({ at: now, failed, slow });\n\n    if (failed) {\n      this.consecutiveFailures++;\n      this.lastFailureAt = now;\n      if (this.consecutiveFailures >= this.maxConsecutiveFailures) {\n        this._trip();\n      }\n      return;\n    }\n\n    // Success: reset consecutive failure counter.\n    this.consecutiveFailures = 0;\n\n    if (slow) {\n      this.lastSlowAt = now;\n      const slowCount = this.window.filter((c) => c.slow).length;\n      if (slowCount >= this.maxSlowCalls) {\n        this._trip();\n      }\n    }\n\n    const callCount = this.window.length;\n    if (callCount >= this.maxCallsPerWindow) {\n      // Rate limit exceeded. This is a soft trip \u2014 we reset the window\n      // and let the next call try immediately (the caller will still see\n      // canProceed=false until the window drains naturally).\n      this._trip();\n    }\n  }\n\n  /** Force the breaker open. Used by /kill force and Ctrl+C. */\n  forceOpen(): void {\n    this._trip();\n  }\n\n  /** Force a reset to closed. Used by tests and /kill reset. */\n  forceReset(): void {\n    this._reset();\n  }\n\n  private _trip(): void {\n    if (this.state === 'open') return; // already open\n    this.state = 'open';\n    this.openedAt = Date.now();\n    // P3 #23 (before-release.md): clear the window on trip. Old records are\n    // irrelevant once tripped \u2014 the breaker starts fresh after cooldown\n    // (half-open \u2192 closed resets the counters). Without this the window array\n    // holds onto CallRecord entries for its lifetime if no new afterCall()\n    // arrives (which is the case when the breaker stays open and no new calls\n    // are attempted).\n    this.window = [];\n    // Best-effort: never let a listener failure corrupt breaker state.\n    try {\n      this.onTrip?.();\n    } catch {\n      /* ignored \u2014 observability hook only */\n    }\n  }\n\n  private _reset(): void {\n    const wasRecovering = this.state !== 'closed';\n    this.state = 'closed';\n    this.consecutiveFailures = 0;\n    this.window = [];\n    this.openedAt = null;\n    // Only notify on a real recovery (open/half-open \u2192 closed), not on the\n    // initial closed state or an idempotent re-reset.\n    if (wasRecovering) {\n      try {\n        this.onReset?.();\n      } catch {\n        /* ignored \u2014 observability hook only */\n      }\n    }\n  }\n\n  /** Transition from open \u2192 half-open when cooldown elapses. */\n  private _checkStateTransition(): void {\n    if (this.state !== 'open' || this.openedAt === null) return;\n    const elapsed = Date.now() - this.openedAt;\n    if (elapsed >= this.cooldownMs) {\n      this.state = 'half-open';\n      this.openedAt = null;\n    }\n  }\n\n  private _pruneWindow(now: number): void {\n    const cutoff = now - this.windowMs;\n    this.window = this.window.filter((c) => c.at >= cutoff);\n  }\n}", "import { expectDefined } from '@wrongstack/core';\n\n// Sensitive CLI flag patterns that may appear in process command lines.\n// Redacted to [REDACTED] so crash dumps /ps output cannot leak secrets.\n// Split out of process-registry.ts so entries that only need the registry\n// (e.g. ps-slash) don't carry this module's dependencies.\nconst SENSITIVE_FLAG_PATTERNS: RegExp[] = [\n  // --flag=value  or  --flag \"value\"  (value captured up to next space or comma)\n  /--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)(?:[=\\s,][^\\s]*)?/gi,\n  // -f \"value\" style short flags\n  /(?<!\\w)-t(?:\\s+|\\s*=\\s*)[^\\s,]+/,\n  /(?<!\\w)-(?:p|password)(?:\\s+|\\s*=\\s*)[^\\s,]+/gi,\n  // env var\u2013style secrets: TOKEN=x, API_KEY=y, etc.\n  /(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD)\\s*[=:]\\s*[^\\s,]+/gi,\n  // Generic high-entropy look: base64 strings >32 chars or hex strings >32 digits \u2014 but only\n  // when preceded by a flag name (e.g. --github-token=EyJ...).\n  /--\\w*(?:token|key|secret|password|passwd|auth|credential)\\w*[=\\s,][A-Za-z0-9+/=]{32,}/,\n];\n\n/**\n * Returns a display-safe copy of `cmd` with sensitive flag values replaced by [REDACTED].\n * The original string is unchanged; this is pure and has no side effects.\n */\nexport function redactCommand(cmd: string): string {\n  let result = cmd;\n  for (const pattern of SENSITIVE_FLAG_PATTERNS) {\n    result = result.replace(pattern, (match) => {\n      // Preserve the flag name portion; redact only the value part.\n      // e.g. \"--token=sekrit_abc\"  \u2192  \"--token=[REDACTED]\"\n      const eq = match.indexOf('=');\n      const sp = match.search(/\\s/);\n      const delim = eq !== -1 ? '=' : sp !== -1 ? match[sp] : null;\n      if (delim !== null) {\n        const flag = match.slice(0, match.indexOf(expectDefined(delim)) + 1);\n        return `${flag}[REDACTED]`;\n      }\n      // Nothing delimitable found; replace the whole token silently.\n      // Short flags like -tVALUE are replaced entirely to avoid edge cases.\n      const flagEnd = match.match(/^--?[a-zA-Z][a-zA-Z0-9_-]*/)?.[0] ?? match;\n      return `${flagEnd}=**redacted**`;\n    });\n  }\n  return result;\n}\n"],
-  "mappings": ";AAYA,SAAS,aAAa;AAEtB,YAAY,QAAQ;;;AC+CpB,IAAM,mCAAmC;AACzC,IAAM,iCAAiC;AAIvC,IAAM,yBAAyB;AAC/B,IAAM,oBAAoB;AAC1B,IAAM,+BAA+B;AACrC,IAAM,sBAAsB;AAarB,IAAM,iBAAN,MAAqB;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,QAAsB;AAAA,EACtB,sBAAsB;AAAA,EACtB,SAAuB,CAAC;AAAA,EACxB,gBAA+B;AAAA,EAC/B,aAA4B;AAAA;AAAA,EAE5B,WAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ1B,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA,EAMlB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,EAEA,YAAY,SAA+B,CAAC,GAAG;AAC7C,SAAK,yBAAyB,OAAO,0BAA0B;AAC/D,SAAK,sBAAsB,OAAO,uBAAuB;AACzD,SAAK,eAAe,OAAO,gBAAgB;AAC3C,SAAK,WAAW,OAAO,YAAY;AACnC,SAAK,oBAAoB,OAAO,qBAAqB;AACrD,SAAK,aAAa,OAAO,cAAc;AAAA,EACzC;AAAA;AAAA,EAGA,WAAW,SAAwB;AACjC,QAAI,KAAK,YAAY,QAAS;AAC9B,SAAK,UAAU;AACf,QAAI,CAAC,QAAS,MAAK,OAAO;AAAA,EAC5B;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,aAAsB;AACxB,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,SAAK,sBAAsB;AAC3B,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA,EAKA,WAAmC;AACjC,SAAK,sBAAsB;AAC3B,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,oBAAmC;AACvC,QAAI,KAAK,aAAa,QAAQ,KAAK,UAAU,QAAQ;AACnD,YAAM,UAAU,MAAM,KAAK;AAC3B,0BAAoB,KAAK,IAAI,GAAG,KAAK,aAAa,OAAO;AAAA,IAC3D;AACA,WAAO;AAAA,MACL,OAAO,KAAK;AAAA,MACZ,qBAAqB,KAAK;AAAA,MAC1B,mBAAmB,KAAK,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;AAAA,MACrD,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK;AAAA,MACf,qBAAqB;AAAA,MACrB,eAAe,KAAK;AAAA,MACpB,YAAY,KAAK;AAAA,IACnB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,WAAW,SAAS,OAAgB;AAClC,QAAI,UAAU,CAAC,KAAK,QAAS,QAAO;AACpC,SAAK,sBAAsB;AAC3B,QAAI,KAAK,UAAU,OAAQ,QAAO;AAClC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,UAAU,YAAoB,QAAiB,SAAS,OAAa;AACnE,QAAI,UAAU,CAAC,KAAK,QAAS;AAE7B,UAAM,MAAM,KAAK,IAAI;AAErB,QAAI,KAAK,UAAU,aAAa;AAE9B,UAAI,QAAQ;AACV,aAAK,MAAM;AACX;AAAA,MACF;AAEA,WAAK,OAAO;AACZ;AAAA,IACF;AAGA,SAAK,aAAa,GAAG;AAErB,UAAM,OAAO,cAAc,KAAK;AAChC,SAAK,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,KAAK,CAAC;AAE1C,QAAI,QAAQ;AACV,WAAK;AACL,WAAK,gBAAgB;AACrB,UAAI,KAAK,uBAAuB,KAAK,wBAAwB;AAC3D,aAAK,MAAM;AAAA,MACb;AACA;AAAA,IACF;AAGA,SAAK,sBAAsB;AAE3B,QAAI,MAAM;AACR,WAAK,aAAa;AAClB,YAAM,YAAY,KAAK,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;AACpD,UAAI,aAAa,KAAK,cAAc;AAClC,aAAK,MAAM;AAAA,MACb;AAAA,IACF;AAEA,UAAM,YAAY,KAAK,OAAO;AAC9B,QAAI,aAAa,KAAK,mBAAmB;AAIvC,WAAK,MAAM;AAAA,IACb;AAAA,EACF;AAAA;AAAA,EAGA,YAAkB;AAChB,SAAK,MAAM;AAAA,EACb;AAAA;AAAA,EAGA,aAAmB;AACjB,SAAK,OAAO;AAAA,EACd;AAAA,EAEQ,QAAc;AACpB,QAAI,KAAK,UAAU,OAAQ;AAC3B,SAAK,QAAQ;AACb,SAAK,WAAW,KAAK,IAAI;AAOzB,SAAK,SAAS,CAAC;AAEf,QAAI;AACF,WAAK,SAAS;AAAA,IAChB,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,SAAe;AACrB,UAAM,gBAAgB,KAAK,UAAU;AACrC,SAAK,QAAQ;AACb,SAAK,sBAAsB;AAC3B,SAAK,SAAS,CAAC;AACf,SAAK,WAAW;AAGhB,QAAI,eAAe;AACjB,UAAI;AACF,aAAK,UAAU;AAAA,MACjB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGQ,wBAA8B;AACpC,QAAI,KAAK,UAAU,UAAU,KAAK,aAAa,KAAM;AACrD,UAAM,UAAU,KAAK,IAAI,IAAI,KAAK;AAClC,QAAI,WAAW,KAAK,YAAY;AAC9B,WAAK,QAAQ;AACb,WAAK,WAAW;AAAA,IAClB;AAAA,EACF;AAAA,EAEQ,aAAa,KAAmB;AACtC,UAAM,SAAS,MAAM,KAAK;AAC1B,SAAK,SAAS,KAAK,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,MAAM;AAAA,EACxD;AACF;;;ACnTA,SAAS,qBAAqB;AAM9B,IAAM,0BAAoC;AAAA;AAAA,EAExC;AAAA;AAAA,EAEA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA;AAAA;AAAA,EAGA;AACF;AAMO,SAAS,cAAc,KAAqB;AACjD,MAAI,SAAS;AACb,aAAW,WAAW,yBAAyB;AAC7C,aAAS,OAAO,QAAQ,SAAS,CAAC,UAAU;AAG1C,YAAM,KAAK,MAAM,QAAQ,GAAG;AAC5B,YAAM,KAAK,MAAM,OAAO,IAAI;AAC5B,YAAM,QAAQ,OAAO,KAAK,MAAM,OAAO,KAAK,MAAM,EAAE,IAAI;AACxD,UAAI,UAAU,MAAM;AAClB,cAAM,OAAO,MAAM,MAAM,GAAG,MAAM,QAAQ,cAAc,KAAK,CAAC,IAAI,CAAC;AACnE,eAAO,GAAG,IAAI;AAAA,MAChB;AAGA,YAAM,UAAU,MAAM,MAAM,4BAA4B,IAAI,CAAC,KAAK;AAClE,aAAO,GAAG,OAAO;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO;AACT;;;AF+BA,IAAM,mBAAmB;AACzB,IAAM,4BAA4B;AA6B3B,SAAS,cAAc,KAAa,OAA6B,CAAC,GAAY;AACnF,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,CAAC,QAAQ,OAAO,GAAG,GAAG,MAAM,IAAI,GAAG;AAAA,MACjE,OAAO;AAAA,MACP,aAAa;AAAA,IACf,CAAC;AACD,QAAI,UAAU;AACd,QAAI;AACJ,UAAM,SAAS,MAAM;AACnB,UAAI,QAAS;AACb,gBAAU;AACV,UAAI,QAAS,cAAa,OAAO;AACjC,UAAI;AACF,aAAK,YAAY;AAAA,MACnB,QAAQ;AAAA,MAER;AAAA,IACF;AAMA,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,SAAS,MAAM;AACxB,cAAU,WAAW,MAAM;AACzB,UAAI;AACF,cAAM,KAAK;AAAA,MACb,QAAQ;AAAA,MAER;AACA,aAAO;AAAA,IACT,GAAG,KAAK,IAAI,GAAG,KAAK,aAAa,yBAAyB,CAAC;AAC3D,YAAQ,QAAQ;AAChB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,IAAM,sBAAN,MAA0B;AAAA,EACd,YAAY,oBAAI,IAA4B;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,kBAAkB;AAAA,EAClB,gBAAsD;AAAA,EACtD,kBAAiC;AAAA,EACjC,4BAAwD,CAAC;AAAA,EAEjE,YAAY,eAAsC;AAChD,SAAK,UAAU,IAAI,eAAe,aAAa;AAE/C,SAAK,QAAQ,SAAS,MAAM,KAAK,kBAAkB;AACnD,SAAK,QAAQ,UAAU,MAAM,KAAK,qBAAqB;AAEvD,SAAK,QAAQ,WAAW,KAAK;AAAA,EAC/B;AAAA,EAEA,SAAS,MAAgG;AACvG,SAAK,UAAU,IAAI,KAAK,KAAK,EAAE,GAAG,MAAM,QAAQ,OAAO,WAAW,KAAK,aAAa,MAAM,CAAC;AAAA,EAC7F;AAAA,EAEQ,iBAAiB,KAAsB;AAC7C,WAAO,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,QAAQ,QAAQ,OAAO,QAAQ,QAAQ;AAAA,EACpF;AAAA,EAEQ,uBAAuB,GAA4B;AACzD,WACK,YAAS,MAAM,WAClB,EAAE,uBAAuB,QACzB,KAAK,iBAAiB,EAAE,GAAG,KAC3B,OAAO,EAAE,MAAM,QAAQ,YACvB,EAAE,MAAM,QAAQ,EAAE;AAAA,EAEtB;AAAA,EAEQ,iBAAiB,GAAmB,QAA8B;AACxE,QAAI;AACF,QAAE,MAAM,KAAK,MAAM;AAAA,IACrB,QAAQ;AAAA,IAGR;AAAA,EACF;AAAA,EAEQ,WAAW,GAAmB,QAA8B;AAClE,QAAI,KAAK,uBAAuB,CAAC,GAAG;AAClC,UAAI;AACF,gBAAQ,KAAK,CAAC,EAAE,KAAK,MAAM;AAC3B;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,SAAK,iBAAiB,GAAG,MAAM;AAAA,EACjC;AAAA;AAAA,EAGA,WAAW,KAAmB;AAC5B,SAAK,UAAU,OAAO,GAAG;AAAA,EAC3B;AAAA;AAAA,EAGA,IAAI,KAAyC;AAC3C,SAAK,YAAY,GAAG;AACpB,WAAO,KAAK,UAAU,IAAI,GAAG;AAAA,EAC/B;AAAA;AAAA,EAGA,OAAyB;AACvB,WAAO,MAAM,KAAK,KAAK,UAAU,OAAO,CAAC;AAAA,EAC3C;AAAA;AAAA,EAGA,OAAO,MAAgC;AACrC,WAAO,KAAK,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI;AAAA,EAClD;AAAA;AAAA,EAGA,UAAU,WAAqC;AAC7C,WAAO,KAAK,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,SAAS;AAAA,EAC5D;AAAA;AAAA,EAGA,IAAI,cAAsB;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,KAAK,UAAU,OAAO,GAAG;AACvC,UAAI,CAAC,EAAE,OAAQ;AAAA,IACjB;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,QAAuB;AACrB,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,MAClB,YAAY,KAAK,UAAU;AAAA,MAC3B,SAAS,KAAK,QAAQ,SAAS;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,aAAsB;AACxB,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,WAAW,SAAS,OAAgB;AAClC,WAAO,KAAK,QAAQ,WAAW,MAAM;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,UAAU,YAAoB,QAAiB,SAAS,OAAa;AACnE,SAAK,QAAQ,UAAU,YAAY,QAAQ,MAAM;AAAA,EACnD;AAAA;AAAA,EAGA,mBAAyB;AACvB,SAAK,QAAQ,UAAU;AAAA,EACzB;AAAA;AAAA,EAGA,oBAA0B;AACxB,SAAK,QAAQ,WAAW;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,iBAAiB,KAAoF;AACnG,QAAI,IAAI,YAAY,OAAW,MAAK,QAAQ,WAAW,IAAI,OAAO;AAClE,QAAI,IAAI,oBAAoB,OAAW,MAAK,kBAAkB,KAAK,IAAI,GAAG,IAAI,eAAe;AAE7F,QAAI,KAAK,mBAAmB,GAAG;AAC7B,WAAK,qBAAqB;AAC1B;AAAA,IACF;AAIA,QAAI,KAAK,QAAQ,aAAa,KAAK,QAAQ,SAAS,EAAE,UAAU,QAAQ;AACtE,WAAK,kBAAkB;AAAA,IACzB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,sBAA+C;AAC7C,QAAI,KAAK,oBAAoB,QAAQ,KAAK,mBAAmB,EAAG,QAAO;AACvE,UAAM,UAAU,KAAK,IAAI,IAAI,KAAK;AAClC,WAAO,EAAE,aAAa,KAAK,IAAI,GAAG,KAAK,kBAAkB,OAAO,GAAG,SAAS,KAAK,gBAAgB;AAAA,EACnG;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,yBAAyB,UAAgD;AACvE,SAAK,0BAA0B,KAAK,QAAQ;AAC5C,WAAO,MAAM;AACX,WAAK,4BAA4B,KAAK,0BAA0B,OAAO,CAAC,MAAM,MAAM,QAAQ;AAAA,IAC9F;AAAA,EACF;AAAA,EAEQ,wBAA8B;AACpC,UAAM,OAAO,KAAK,oBAAoB;AACtC,eAAW,KAAK,KAAK,2BAA2B;AAC9C,UAAI;AACF,UAAE,IAAI;AAAA,MACR,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,oBAA0B;AAChC,QAAI,KAAK,mBAAmB,KAAK,CAAC,KAAK,QAAQ,UAAW;AAC1D,SAAK,oBAAoB;AACzB,SAAK,kBAAkB,KAAK,IAAI;AAChC,SAAK,gBAAgB,WAAW,MAAM;AACpC,WAAK,gBAAgB;AACrB,WAAK,kBAAkB;AAEvB,WAAK,QAAQ,EAAE,OAAO,MAAM,CAAC;AAC7B,WAAK,QAAQ,WAAW;AACxB,WAAK,sBAAsB;AAAA,IAC7B,GAAG,KAAK,eAAe;AAEvB,SAAK,cAAc,QAAQ;AAC3B,SAAK,sBAAsB;AAAA,EAC7B;AAAA,EAEQ,uBAA6B;AACnC,UAAM,WAAW,KAAK,oBAAoB;AAC1C,SAAK,oBAAoB;AACzB,QAAI,UAAU;AACZ,WAAK,kBAAkB;AACvB,WAAK,sBAAsB;AAAA,IAC7B;AAAA,EACF;AAAA,EAEQ,sBAA4B;AAClC,QAAI,KAAK,kBAAkB,MAAM;AAC/B,mBAAa,KAAK,aAAa;AAC/B,WAAK,gBAAgB;AAAA,IACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,KAAK,KAAa,OAAiB,CAAC,GAAY;AAC9C,SAAK,YAAY,GAAG;AACpB,UAAM,IAAI,KAAK,UAAU,IAAI,GAAG;AAChC,QAAI,CAAC,EAAG,QAAO;AACf,QAAI,EAAE,OAAQ,QAAO;AACrB,QAAI,EAAE,UAAW,QAAO;AAExB,UAAM,EAAE,QAAQ,OAAO,UAAU,iBAAiB,IAAI;AACtD,UAAM,QAAW,YAAS,MAAM;AAEhC,QAAI,OAAO;AAWT,YAAM,gBAAgB,EAAE,MAAM,aAAa,QAAQ,OAAO,EAAE,MAAM,QAAQ;AAC1E,YAAM,iBAAiB,MAAM;AAC3B,YAAI,EAAE,MAAM,aAAa,MAAM;AAC7B,cAAI;AACF,cAAE,MAAM,KAAK,SAAS;AAAA,UACxB,QAAQ;AAAA,UAER;AAAA,QACF;AAAA,MACF;AACA,UACE,iBACA,cAAc,KAAK;AAAA,QACjB,WAAW,KAAK,IAAI,SAAS,yBAAyB;AAAA,QACtD,WAAW;AAAA,MACb,CAAC,GACD;AAAA,MAIF,OAAO;AACL,YAAI;AACF,YAAE,MAAM,KAAK,QAAQ,YAAY,SAAS;AAAA,QAC5C,QAAQ;AAAA,QAER;AAAA,MACF;AACA,QAAE,SAAS;AACX,aAAO;AAAA,IACT;AAKA,QAAI;AACF,UAAI,OAAO;AACT,aAAK,WAAW,GAAG,SAAS;AAAA,MAC9B,OAAO;AACL,aAAK,WAAW,GAAG,SAAS;AAE5B,cAAM,QAAQ,WAAW,MAAM;AAE7B,cAAI,KAAK,UAAU,IAAI,GAAG,KAAK,CAAC,EAAE,MAAM,QAAQ;AAC9C,iBAAK,WAAW,GAAG,SAAS;AAAA,UAC9B;AAAA,QACF,GAAG,OAAO;AACV,cAAM,QAAQ;AAAA,MAChB;AAAA,IACF,QAAQ;AAAA,IAER;AACA,MAAE,SAAS;AACX,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,OAAiB,CAAC,GAAa;AACrC,UAAM,OAAO,MAAM,KAAK,KAAK,UAAU,KAAK,CAAC;AAC7C,UAAM,SAAmB,CAAC;AAC1B,eAAW,OAAO,MAAM;AACtB,YAAM,IAAI,KAAK,UAAU,IAAI,GAAG;AAChC,UAAI,KAAK,CAAC,EAAE,aAAa,KAAK,KAAK,KAAK,IAAI,EAAG,QAAO,KAAK,GAAG;AAAA,IAChE;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAY,WAAmB,OAAiB,CAAC,GAAa;AAC5D,UAAM,OAAO,KAAK,UAAU,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG;AACvD,UAAM,SAAmB,CAAC;AAC1B,eAAW,OAAO,MAAM;AACtB,UAAI,KAAK,KAAK,KAAK,IAAI,EAAG,QAAO,KAAK,GAAG;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,cAAc,OAAgC;AACpD,WAAO,MAAM,MAAM,aAAa,QAAQ,KAAK,IAAI,IAAI,MAAM,YAAY;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,KAAmB;AACrC,UAAM,QAAQ,KAAK,UAAU,IAAI,GAAG;AACpC,QAAI,SAAS,KAAK,cAAc,KAAK,GAAG;AACtC,WAAK,UAAU,OAAO,GAAG;AAAA,IAC3B;AAAA,EACF;AACF;AAGA,IAAI;AAEG,SAAS,qBAA0C;AACxD,MAAI,CAAC,WAAW;AACd,gBAAY,IAAI,oBAAoB;AAAA,EACtC;AACA,SAAO;AACT;AAGO,SAAS,wBAA8B;AAC5C,cAAY;AACd;",
+  "sourcesContent": ["/**\n * ProcessRegistry \u2014 global singleton that tracks all spawned child processes\n * from `bash` and `exec` tools. Enables:\n *\n *   - Listing active processes (for TUI status bar)\n *   - Killing individual processes or all processes (for Ctrl+C and /kill)\n *   - Detecting runaway processes (hung, looping)\n *   - Circuit breaker integration to prevent recursive/repeated failures\n *\n * Thread-safety: Node.js is single-threaded, but async callbacks can fire\n * in any order. All mutations go through synchronized Map methods.\n */\nimport { spawn } from 'node:child_process';\nimport type { ChildProcess } from 'node:child_process';\nimport * as os from 'node:os';\nimport { CircuitBreaker, type CircuitBreakerSnapshot, type CircuitBreakerConfig } from './circuit-breaker.js';\nexport type { CircuitBreakerSnapshot, CircuitBreakerConfig } from './circuit-breaker.js';\n\nexport interface TrackedProcess {\n  pid: number;\n  name: string;\n  /** Display-safe redacted command string \u2014 safe for logs, /ps, crash dumps.\n   *  Contains [REDACTED] in place of sensitive flag values. */\n  command: string;\n  startedAt: number;\n  sessionId?: string | undefined;\n  /** The raw ChildProcess handle. Never call .kill() directly on this \u2014\n   *  use `kill()` below which handles process groups correctly on POSIX\n   *  and degrades gracefully on Windows. */\n  child: ChildProcess;\n  /** True only when this child was spawned as a POSIX process-group/session\n   *  leader (for example `spawn(..., { detached: true })`) and `pid` is the\n   *  actual `child.pid`. Negative-PID signaling is host-wide dangerous for\n   *  values like -1, so tests and manually registered entries must not opt in. */\n  processGroupLeader?: boolean | undefined;\n  /** True once the process has been kill()ed but not yet exited.\n   *  We keep it in the registry until 'close' fires so callers can\n   *  distinguish \"still running\" from \"just exited\". */\n  killed: boolean;\n  /** If true, kill() and killAll() will refuse to kill this process.\n   *  Used for infrastructure processes (browser, dev servers, \u2026) that\n   *  must outlive the agent session. */\n  protected: boolean;\n}\n\n// redactCommand (and its sensitive-flag patterns) lives in _redact-command.ts\n// so registry-only consumers (e.g. ps-slash) don't carry its dependencies.\n// Re-exported here to keep this module's historical public API intact.\nexport { redactCommand } from './_redact-command.js';\n\ninterface KillOpts {\n  /** SIGKILL instead of SIGTERM. Default: false (SIGTERM first). */\n  force?: boolean | undefined;\n  /** MS to wait between SIGTERM and SIGKILL on POSIX. Default: 2000. */\n  graceMs?: number | undefined;\n}\n\n/**\n * Snapshot of the armed auto kill/reset countdown, or null when nothing is\n * armed. `remainingMs` ticks down in real time; the TUI statusline renders it.\n */\nexport interface BreakerCountdown {\n  remainingMs: number;\n  totalMs: number;\n}\n\ntype BreakerCountdownListener = (snapshot: BreakerCountdown | null) => void;\n\nexport interface RegistryStats {\n  activeCount: number;\n  totalCount: number;\n  breaker: CircuitBreakerSnapshot;\n}\n\nconst DEFAULT_GRACE_MS = 2000;\nconst WIN32_TASKKILL_TIMEOUT_MS = 5000;\n\ninterface Win32TreeKillOptions {\n  /**\n   * Upper bound for taskkill itself before the caller's fallback may run.\n   * This is deliberately separate from POSIX SIGTERM grace: on Windows the\n   * direct-child fallback must not fire while taskkill is still walking the\n   * child tree, or it can orphan grandchildren that keep stdio open.\n   */\n  timeoutMs?: number | undefined;\n  onSettled?: (() => void) | undefined;\n}\n\n/**\n * Kill an entire process tree on Windows via `taskkill /T /F`.\n *\n * TerminateProcess (what `child.kill()` maps to) has no process-group\n * semantics, so killing a shell wrapper (`cmd.exe /c \u2026`) orphans its\n * grandchildren (node, vitest forks, dev servers). The orphans inherit the\n * parent's stdio pipe handles and can keep streaming into this process for\n * the rest of the session \u2014 which both prevents the child's 'close' event\n * from ever firing and grows in-memory output buffers without bound.\n *\n * Returns true if taskkill was spawned, false if spawning it failed (caller\n * should fall back to a direct `child.kill()`). Callers that need a direct\n * fallback should pass `onSettled`; it runs after taskkill exits, errors, or\n * exceeds `timeoutMs`, avoiding the race where killing cmd.exe first prevents\n * taskkill from enumerating and killing grandchildren.\n */\nexport function killWin32Tree(pid: number, opts: Win32TreeKillOptions = {}): boolean {\n  try {\n    const child = spawn('taskkill', ['/pid', String(pid), '/T', '/F'], {\n      stdio: 'ignore',\n      windowsHide: true,\n    });\n    let settled = false;\n    let timeout: ReturnType<typeof setTimeout> | undefined;\n    const settle = () => {\n      if (settled) return;\n      settled = true;\n      if (timeout) clearTimeout(timeout);\n      try {\n        opts.onSettled?.();\n      } catch {\n        /* fallback callbacks are best-effort */\n      }\n    };\n    // spawn() reports a failure to launch (e.g. taskkill not on PATH, blocked by\n    // security software) via an ASYNC 'error' event \u2014 the surrounding try/catch\n    // only traps synchronous throws. Without a listener that event is unhandled\n    // and crashes the whole process. Swallow it: this is best-effort tree-kill\n    // and the registry still has the direct child.kill() fallback.\n    child.on('error', settle);\n    child.on('close', settle);\n    timeout = setTimeout(() => {\n      try {\n        child.kill();\n      } catch {\n        /* already exited */\n      }\n      settle();\n    }, Math.max(1, opts.timeoutMs ?? WIN32_TASKKILL_TIMEOUT_MS));\n    timeout.unref?.();\n    child.unref();\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport class ProcessRegistryImpl {\n  private readonly processes = new Map<number, TrackedProcess>();\n  private readonly breaker: CircuitBreaker;\n\n  /**\n   * Auto kill/reset config. When the breaker trips and `autoKillResetMs > 0`,\n   * a countdown is armed; on expiry all tracked processes are killed and the\n   * breaker is reset to closed (forced recovery). Zero means manual recovery\n   * only (`/kill reset`).\n   */\n  private autoKillResetMs = 0;\n  private autoKillTimer: ReturnType<typeof setTimeout> | null = null;\n  private autoKillArmedAt: number | null = null;\n  private breakerCountdownListeners: BreakerCountdownListener[] = [];\n\n  constructor(breakerConfig?: CircuitBreakerConfig) {\n    this.breaker = new CircuitBreaker(breakerConfig);\n    // Arm on trip, cancel on recovery. Listeners are best-effort.\n    this.breaker.onTrip = () => this._armAutoKillReset();\n    this.breaker.onReset = () => this._cancelAutoKillReset();\n    // Protection is OFF by default \u2014 the user opts in via `/settings breaker on`.\n    this.breaker.setEnabled(false);\n  }\n\n  register(info: Omit<TrackedProcess, 'killed' | 'protected'> & { protected?: boolean | undefined }): void {\n    this.processes.set(info.pid, { ...info, killed: false, protected: info.protected ?? false });\n  }\n\n  private _isSafeSignalPid(pid: number): boolean {\n    return Number.isInteger(pid) && pid > 1 && pid !== process.pid && pid !== process.ppid;\n  }\n\n  private _canSignalProcessGroup(p: TrackedProcess): boolean {\n    return (\n      os.platform() !== 'win32' &&\n      p.processGroupLeader === true &&\n      this._isSafeSignalPid(p.pid) &&\n      typeof p.child.pid === 'number' &&\n      p.child.pid === p.pid\n    );\n  }\n\n  private _killChildDirect(p: TrackedProcess, signal: NodeJS.Signals): void {\n    try {\n      p.child.kill(signal);\n    } catch {\n      // Process may have already exited, or this may be a persistent entry\n      // without a live ChildProcess handle in the current process.\n    }\n  }\n\n  private _killPosix(p: TrackedProcess, signal: NodeJS.Signals): void {\n    if (this._canSignalProcessGroup(p)) {\n      try {\n        process.kill(-p.pid, signal);\n        return;\n      } catch {\n        // Process group may already be gone; fall back to the direct child.\n      }\n    }\n    this._killChildDirect(p, signal);\n  }\n\n  /** Unregister a process by PID. Called on 'close' / 'exit' events. */\n  unregister(pid: number): void {\n    this.processes.delete(pid);\n  }\n\n  /** Get a single process by PID. */\n  get(pid: number): TrackedProcess | undefined {\n    this._pruneStale(pid);\n    return this.processes.get(pid);\n  }\n\n  /** Get all tracked processes. */\n  list(): TrackedProcess[] {\n    return Array.from(this.processes.values());\n  }\n\n  /** Get processes filtered by name (e.g. 'bash', 'exec'). */\n  byName(name: string): TrackedProcess[] {\n    return this.list().filter((p) => p.name === name);\n  }\n\n  /** Get processes filtered by session. */\n  bySession(sessionId: string): TrackedProcess[] {\n    return this.list().filter((p) => p.sessionId === sessionId);\n  }\n\n  /** Count of active (non-killed) processes. */\n  get activeCount(): number {\n    let n = 0;\n    for (const p of this.processes.values()) {\n      if (!p.killed) n++;\n    }\n    return n;\n  }\n\n  /**\n   * Combined stats for observability \u2014 used by /ps and the TUI status bar.\n   */\n  stats(): RegistryStats {\n    return {\n      activeCount: this.activeCount,\n      totalCount: this.processes.size,\n      breaker: this.breaker.snapshot(),\n    };\n  }\n\n  /**\n   * Returns true if the circuit allows a new bash/exec call to proceed.\n   * When false, callers MUST NOT spawn a process.\n   */\n  get canProceed(): boolean {\n    return this.breaker.canProceed;\n  }\n\n  /**\n   * Called before spawning a process. Returns true if allowed; false if\n   * the circuit breaker is open.\n   *\n   * @param bypass - If true, skip circuit breaker check (for background processes).\n   */\n  beforeCall(bypass = false): boolean {\n    return this.breaker.beforeCall(bypass);\n  }\n\n  /**\n   * Called after a process finishes. `durationMs` is wall-clock time;\n   * `failed` is true for non-zero exit codes.\n   *\n   * @param bypass - If true, do not update circuit breaker state (for background processes).\n   */\n  afterCall(durationMs: number, failed: boolean, bypass = false): void {\n    this.breaker.afterCall(durationMs, failed, bypass);\n  }\n\n  /** Force-open the circuit breaker (Ctrl+C, /kill force). */\n  forceBreakerOpen(): void {\n    this.breaker.forceOpen();\n  }\n\n  /** Force-reset the circuit breaker to closed (/kill reset). */\n  forceBreakerReset(): void {\n    this.breaker.forceReset();\n  }\n\n  /**\n   * Configure circuit-breaker protection at runtime. Called from `/settings`\n   * (instant, all modes) and on TUI mount (applies persisted config).\n   *\n   * - `enabled` toggles whether the breaker gates `bash`/`exec`.\n   * - `autoKillResetMs` arms the auto kill/reset countdown when the breaker\n   *   trips (0 = manual recovery only).\n   *\n   * Re-applies cleanly on every call: cancels a pending countdown when the\n   * timeout is cleared or protection disabled, and re-arms if the breaker is\n   * currently open under the new settings.\n   */\n  setBreakerConfig(cfg: { enabled?: boolean | undefined; autoKillResetMs?: number | undefined }): void {\n    if (cfg.enabled !== undefined) this.breaker.setEnabled(cfg.enabled);\n    if (cfg.autoKillResetMs !== undefined) this.autoKillResetMs = Math.max(0, cfg.autoKillResetMs);\n\n    if (this.autoKillResetMs <= 0) {\n      this._cancelAutoKillReset();\n      return;\n    }\n    // If protection is active and the breaker is currently tripped, ensure a\n    // countdown is armed for the new window (covers a live config change while\n    // the breaker is already open).\n    if (this.breaker.isEnabled && this.breaker.snapshot().state === 'open') {\n      this._armAutoKillReset();\n    }\n  }\n\n  /**\n   * Live countdown to the next auto kill/reset, or null when nothing is armed.\n   * The TUI polls this on a 1s tick while armed so the statusline decrements.\n   */\n  getBreakerCountdown(): BreakerCountdown | null {\n    if (this.autoKillArmedAt === null || this.autoKillResetMs <= 0) return null;\n    const elapsed = Date.now() - this.autoKillArmedAt;\n    return { remainingMs: Math.max(0, this.autoKillResetMs - elapsed), totalMs: this.autoKillResetMs };\n  }\n\n  /**\n   * Subscribe to countdown arm/cancel events. Returns an unsubscribe function.\n   * Use {@link getBreakerCountdown} for the live ticking value between events.\n   */\n  onBreakerCountdownChange(listener: BreakerCountdownListener): () => void {\n    this.breakerCountdownListeners.push(listener);\n    return () => {\n      this.breakerCountdownListeners = this.breakerCountdownListeners.filter((l) => l !== listener);\n    };\n  }\n\n  private _emitBreakerCountdown(): void {\n    const snap = this.getBreakerCountdown();\n    for (const l of this.breakerCountdownListeners) {\n      try {\n        l(snap);\n      } catch {\n        /* listener failure must never affect breaker behavior */\n      }\n    }\n  }\n\n  /**\n   * Arm the auto kill/reset countdown. Idempotent: re-arming resets the window\n   * (a fresh trip after a failed half-open probe restarts the clock). No-op\n   * when protection is off or no timeout is configured.\n   */\n  private _armAutoKillReset(): void {\n    if (this.autoKillResetMs <= 0 || !this.breaker.isEnabled) return;\n    this._clearAutoKillTimer();\n    this.autoKillArmedAt = Date.now();\n    this.autoKillTimer = setTimeout(() => {\n      this.autoKillTimer = null;\n      this.autoKillArmedAt = null;\n      // Forced recovery: nuke runaway processes and reopen the circuit.\n      this.killAll({ force: false });\n      this.breaker.forceReset();\n      this._emitBreakerCountdown();\n    }, this.autoKillResetMs);\n    // Don't keep the event loop alive purely for auto-recovery.\n    this.autoKillTimer.unref?.();\n    this._emitBreakerCountdown();\n  }\n\n  private _cancelAutoKillReset(): void {\n    const wasArmed = this.autoKillArmedAt !== null;\n    this._clearAutoKillTimer();\n    if (wasArmed) {\n      this.autoKillArmedAt = null;\n      this._emitBreakerCountdown();\n    }\n  }\n\n  private _clearAutoKillTimer(): void {\n    if (this.autoKillTimer !== null) {\n      clearTimeout(this.autoKillTimer);\n      this.autoKillTimer = null;\n    }\n  }\n\n  /** Kill a single process by PID.\n   *\n   *  On POSIX: sends SIGTERM to the *process group* (-pid) so that\n   *  runaway grandchild processes (`sleep 9999 & disown`) are also killed.\n   *  After `graceMs` a SIGKILL is sent if the process hasn't exited.\n   *\n   *  On Windows: `child.kill()` maps to TerminateProcess \u2014 process groups\n   *  are not meaningfully supported. A second `force=true` call sends\n   *  SIGKILL (which maps to TerminateProcess again \u2014 the distinction is\n   *  in the exit code, not the signal).\n   *\n   *  Returns true if the process was found and kill was attempted.\n   */\n  kill(pid: number, opts: KillOpts = {}): boolean {\n    this._pruneStale(pid);\n    const p = this.processes.get(pid);\n    if (!p) return false;\n    if (p.killed) return true; // already kill()ed, don't double-send\n    if (p.protected) return false; // protected processes are never kill()ed\n\n    const { force = false, graceMs = DEFAULT_GRACE_MS } = opts;\n    const isWin = os.platform() === 'win32';\n\n    if (isWin) {\n      // Windows: no process group semantics. A direct kill terminates only\n      // the immediate child \u2014 shell-wrapped commands (cmd.exe /c \u2026) leave\n      // grandchildren running that hold the inherited stdio pipes open and\n      // keep feeding output into this process indefinitely. Kill the whole\n      // tree via taskkill instead, but only for a real, still-running child\n      // (exitCode === null); test fakes and already-exited processes take\n      // the plain-kill path. The direct kill is deliberately NOT sent\n      // immediately alongside taskkill: killing the root first would break\n      // taskkill's parent-pid tree enumeration and orphan the grandchildren\n      // again \u2014 it runs as a delayed fallback instead.\n      const liveRealChild = p.child.exitCode === null && typeof p.child.pid === 'number';\n      const directFallback = () => {\n        if (p.child.exitCode === null) {\n          try {\n            p.child.kill('SIGKILL');\n          } catch {\n            // Process may have already exited.\n          }\n        }\n      };\n      if (\n        liveRealChild &&\n        killWin32Tree(pid, {\n          timeoutMs: Math.max(graceMs, WIN32_TASKKILL_TIMEOUT_MS),\n          onSettled: directFallback,\n        })\n      ) {\n        // The direct fallback is intentionally chained from taskkill's\n        // completion. Killing cmd.exe before taskkill has walked the tree can\n        // orphan the real command and leave stdio pipes open forever.\n      } else {\n        try {\n          p.child.kill(force ? 'SIGKILL' : 'SIGTERM');\n        } catch {\n          // Process may have already exited.\n        }\n      }\n      p.killed = true;\n      return true;\n    }\n\n    // POSIX: kill the process group only when the tracked child is proven to\n    // be the group leader. Otherwise use child.kill(); negative PID signaling\n    // with untrusted/fake PIDs can target unrelated host processes.\n    try {\n      if (force) {\n        this._killPosix(p, 'SIGKILL');\n      } else {\n        this._killPosix(p, 'SIGTERM');\n        // Schedule SIGKILL as backup.\n        const timer = setTimeout(() => {\n          // Re-check: process may have exited on its own.\n          if (this.processes.has(pid) && !p.child.killed) {\n            this._killPosix(p, 'SIGKILL');\n          }\n        }, graceMs);\n        timer.unref?.(); // Don't keep event loop alive.\n      }\n    } catch {\n      // Process may have already exited.\n    }\n    p.killed = true;\n    return true;\n  }\n\n  /**\n   * Kill all tracked processes.\n   * Returns the PIDs that were kill()ed.\n   */\n  killAll(opts: KillOpts = {}): number[] {\n    const pids = Array.from(this.processes.keys());\n    const killed: number[] = [];\n    for (const pid of pids) {\n      const p = this.processes.get(pid);\n      if (p && !p.protected && this.kill(pid, opts)) killed.push(pid);\n    }\n    return killed;\n  }\n\n  /**\n   * Kill all processes for a specific session.\n   * Returns the PIDs that were kill()ed.\n   */\n  killSession(sessionId: string, opts: KillOpts = {}): number[] {\n    const pids = this.bySession(sessionId).map((p) => p.pid);\n    const killed: number[] = [];\n    for (const pid of pids) {\n      if (this.kill(pid, opts)) killed.push(pid);\n    }\n    return killed;\n  }\n\n  /**\n   * Check whether a tracked process entry is stale \u2014 the child has exited\n   * (exitCode !== null) AND it's been in the registry long enough that the\n   * OS may have reused the PID for a new, unrelated process.\n   *\n   * P3 #24 (before-release.md): on POSIX, PIDs are reused after process\n   * exit. If a tracked process exits but its 'close' event hasn't fired yet\n   * (or was missed), the registry still holds the entry. A new process\n   * gets the same PID, and PID-based lookups (get, kill, shouldBlockKill)\n   * may incorrectly protect or target the wrong process.\n   *\n   * The 60s threshold is conservative \u2014 the OS typically waits much longer\n   * before reusing a PID, but we want to clean up before that becomes a risk.\n   */\n  private _isStaleEntry(entry: TrackedProcess): boolean {\n    return entry.child.exitCode !== null && Date.now() - entry.startedAt > 60_000;\n  }\n\n  /**\n   * Remove a stale entry for a specific PID before any PID-based lookup.\n   * This prevents PID reuse from causing the registry to act on a dead\n   * process that has been replaced by a new one with the same PID.\n   */\n  private _pruneStale(pid: number): void {\n    const entry = this.processes.get(pid);\n    if (entry && this._isStaleEntry(entry)) {\n      this.processes.delete(pid);\n    }\n  }\n}\n\n/** Module-level singleton. Initialized on first access. */\nlet _registry: ProcessRegistryImpl | undefined;\n\nexport function getProcessRegistry(): ProcessRegistryImpl {\n  if (!_registry) {\n    _registry = new ProcessRegistryImpl();\n  }\n  return _registry;\n}\n\n/** Reset for tests. */\nexport function _resetProcessRegistry(): void {\n  _registry = undefined;\n}\n\n// \u2500\u2500 Convenience re-exports \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport type { KillOpts };\n", "/**\n * CircuitBreaker \u2014 prevents runaway bash/exec tool chains by:\n *\n *   - Tripping on consecutive failures (models that keep repeating the\n *     same failing command, e.g. `npm install` with wrong args in a loop)\n *   - Tripping on slow call ratio (too many long-running commands suggest\n *     a hung subprocess that the model doesn't know how to kill)\n *   - Rate-limiting bursts (rapid succession of commands without reading\n *     output suggests the model isn't processing results)\n *   - Auto-recovering after a cooldown period so a fixed model can resume\n *\n * The breaker is owned by the ProcessRegistry so any tool that registers\n * a process participates in the same circuit. \"Per-tool\" isolation is\n * intentionally NOT implemented \u2014 the model treats bash/exec as one\n * resource pool; isolating them would let the model route around the\n * breaker by alternating which tool it uses.\n */\n\nexport interface CircuitBreakerConfig {\n  /**\n   * Consecutive failures before trip. Default: 5.\n   * A single success resets this counter to 0.\n   */\n  maxConsecutiveFailures?: number | undefined;\n  /**\n   * Slow-call threshold in ms. A call that runs longer than this is\n   * counted as \"slow\". Default: 60_000 (1 minute).\n   */\n  slowCallThresholdMs?: number | undefined;\n  /**\n   * Max slow calls before trip (within the sliding window). Default: 3.\n   */\n  maxSlowCalls?: number | undefined;\n  /**\n   * Sliding window for rate-limit and slow-call counting, in ms.\n   * Default: 60_000 (1 minute).\n   */\n  windowMs?: number | undefined;\n  /**\n   * Max calls within the sliding window. Default: 30.\n   * Burst exceeding this trips the breaker immediately.\n   */\n  maxCallsPerWindow?: number | undefined;\n  /**\n   * Cooldown before auto-recovery attempt, in ms. Default: 30_000 (30s).\n   * After this the breaker enters \"half-open\" state and allows one call\n   * through to test whether the problem is resolved.\n   */\n  cooldownMs?: number | undefined;\n}\n\ninterface CallRecord {\n  at: number;\n  /** True if the call threw or returned an is_error result. */\n  failed: boolean;\n  /** True if elapsed time exceeded slowCallThresholdMs. */\n  slow: boolean;\n}\n\ntype BreakerState = 'closed' | 'open' | 'half-open';\n\nconst DEFAULT_MAX_CONSECUTIVE_FAILURES = 5;\nconst DEFAULT_SLOW_CALL_THRESHOLD_MS = 180_000;\n// 3 minutes \u2014 balanced against the 5-minute bash timeout. Commands\n// running <3min are normal; 3-5min are \"slow\" and count toward the\n// breaker. 3 consecutive slow calls trip the circuit.\nconst DEFAULT_MAX_SLOW_CALLS = 3;\nconst DEFAULT_WINDOW_MS = 60_000;\nconst DEFAULT_MAX_CALLS_PER_WINDOW = 30;\nconst DEFAULT_COOLDOWN_MS = 30_000;\n\nexport interface CircuitBreakerSnapshot {\n  state: 'closed' | 'open' | 'half-open';\n  consecutiveFailures: number;\n  slowCallsInWindow: number;\n  callsInWindow: number;\n  windowMs: number;\n  cooldownRemainingMs: number | null;\n  lastFailureAt: number | null;\n  lastSlowAt: number | null;\n}\n\nexport class CircuitBreaker {\n  private readonly maxConsecutiveFailures: number;\n  private readonly slowCallThresholdMs: number;\n  private readonly maxSlowCalls: number;\n  private readonly windowMs: number;\n  private readonly maxCallsPerWindow: number;\n  private readonly cooldownMs: number;\n\n  private state: BreakerState = 'closed';\n  private consecutiveFailures = 0;\n  private window: CallRecord[] = [];\n  private lastFailureAt: number | null = null;\n  private lastSlowAt: number | null = null;\n  /** Timestamp when the breaker was opened (for cooldown calculation). */\n  private openedAt: number | null = null;\n\n  /**\n   * Master enable flag. When false the breaker is bypassed: `beforeCall`\n   * always returns true and `afterCall` records nothing. The class itself\n   * defaults to enabled (so the standalone unit tests exercise tripping); the\n   * ProcessRegistry flips this off until the user opts in via `/settings`.\n   */\n  private enabled = true;\n\n  /**\n   * Fired (best-effort) when the breaker transitions into the `open` state.\n   * The registry uses this to arm its auto kill/reset countdown.\n   */\n  onTrip?: (() => void) | undefined;\n  /**\n   * Fired (best-effort) when the breaker returns to `closed` after having been\n   * open/half-open. The registry uses this to cancel a pending kill/reset.\n   */\n  onReset?: (() => void) | undefined;\n\n  constructor(config: CircuitBreakerConfig = {}) {\n    this.maxConsecutiveFailures = config.maxConsecutiveFailures ?? DEFAULT_MAX_CONSECUTIVE_FAILURES;\n    this.slowCallThresholdMs = config.slowCallThresholdMs ?? DEFAULT_SLOW_CALL_THRESHOLD_MS;\n    this.maxSlowCalls = config.maxSlowCalls ?? DEFAULT_MAX_SLOW_CALLS;\n    this.windowMs = config.windowMs ?? DEFAULT_WINDOW_MS;\n    this.maxCallsPerWindow = config.maxCallsPerWindow ?? DEFAULT_MAX_CALLS_PER_WINDOW;\n    this.cooldownMs = config.cooldownMs ?? DEFAULT_COOLDOWN_MS;\n  }\n\n  /** Toggle the master enable. Disabling resets to a clean `closed` state. */\n  setEnabled(enabled: boolean): void {\n    if (this.enabled === enabled) return;\n    this.enabled = enabled;\n    if (!enabled) this._reset();\n  }\n\n  get isEnabled(): boolean {\n    return this.enabled;\n  }\n\n  /**\n   * Returns true if the circuit allows a new call to proceed.\n   * When false, callers should abort the tool call and return a\n   * circuit-breaker error instead of spawning a process.\n   */\n  get canProceed(): boolean {\n    if (!this.enabled) return true;\n    this._checkStateTransition();\n    return this.state !== 'open';\n  }\n\n  /**\n   * Snapshot of the current breaker state for observability (`/kill`).\n   */\n  snapshot(): CircuitBreakerSnapshot {\n    this._checkStateTransition();\n    const now = Date.now();\n    let cooldownRemaining: number | null = null;\n    if (this.openedAt !== null && this.state === 'open') {\n      const elapsed = now - this.openedAt;\n      cooldownRemaining = Math.max(0, this.cooldownMs - elapsed);\n    }\n    return {\n      state: this.state,\n      consecutiveFailures: this.consecutiveFailures,\n      slowCallsInWindow: this.window.filter((c) => c.slow).length,\n      callsInWindow: this.window.length,\n      windowMs: this.windowMs,\n      cooldownRemainingMs: cooldownRemaining,\n      lastFailureAt: this.lastFailureAt,\n      lastSlowAt: this.lastSlowAt,\n    };\n  }\n\n  /**\n   * Call this BEFORE spawning a bash/exec process.\n   * Returns true if the call is allowed; false if the breaker is open.\n   * When false, callers MUST NOT spawn a process.\n   *\n   * @param bypass - If true, skip the circuit breaker check entirely.\n   *                  Use for background/fire-and-forget processes that should\n   *                  not affect breaker state.\n   */\n  beforeCall(bypass = false): boolean {\n    if (bypass || !this.enabled) return true;\n    this._checkStateTransition();\n    if (this.state === 'open') return false;\n    return true;\n  }\n\n  /**\n   * Call this AFTER a bash/exec process finishes (success or failure).\n   * `durationMs` is the wall-clock time the process ran.\n   * `failed` is true when the process returned a non-zero exit code or\n   * threw an exception before spawning.\n   *\n   * @param bypass - If true, do not update breaker state.\n   *                  Use for background/fire-and-forget processes.\n   */\n  afterCall(durationMs: number, failed: boolean, bypass = false): void {\n    if (bypass || !this.enabled) return;\n\n    const now = Date.now();\n\n    if (this.state === 'half-open') {\n      // First call through after cooldown \u2014 if it failed, go back to open.\n      if (failed) {\n        this._trip();\n        return;\n      }\n      // Success in half-open \u2192 reset to closed.\n      this._reset();\n      return;\n    }\n\n    // Prune old records outside the sliding window.\n    this._pruneWindow(now);\n\n    const slow = durationMs >= this.slowCallThresholdMs;\n    this.window.push({ at: now, failed, slow });\n\n    if (failed) {\n      this.consecutiveFailures++;\n      this.lastFailureAt = now;\n      if (this.consecutiveFailures >= this.maxConsecutiveFailures) {\n        this._trip();\n      }\n      return;\n    }\n\n    // Success: reset consecutive failure counter.\n    this.consecutiveFailures = 0;\n\n    if (slow) {\n      this.lastSlowAt = now;\n      const slowCount = this.window.filter((c) => c.slow).length;\n      if (slowCount >= this.maxSlowCalls) {\n        this._trip();\n      }\n    }\n\n    const callCount = this.window.length;\n    if (callCount >= this.maxCallsPerWindow) {\n      // Rate limit exceeded. This is a soft trip \u2014 we reset the window\n      // and let the next call try immediately (the caller will still see\n      // canProceed=false until the window drains naturally).\n      this._trip();\n    }\n  }\n\n  /** Force the breaker open. Used by /kill force and Ctrl+C. */\n  forceOpen(): void {\n    this._trip();\n  }\n\n  /** Force a reset to closed. Used by tests and /kill reset. */\n  forceReset(): void {\n    this._reset();\n  }\n\n  private _trip(): void {\n    if (this.state === 'open') return; // already open\n    this.state = 'open';\n    this.openedAt = Date.now();\n    // P3 #23 (before-release.md): clear the window on trip. Old records are\n    // irrelevant once tripped \u2014 the breaker starts fresh after cooldown\n    // (half-open \u2192 closed resets the counters). Without this the window array\n    // holds onto CallRecord entries for its lifetime if no new afterCall()\n    // arrives (which is the case when the breaker stays open and no new calls\n    // are attempted).\n    this.window = [];\n    // Best-effort: never let a listener failure corrupt breaker state.\n    try {\n      this.onTrip?.();\n    } catch {\n      /* ignored \u2014 observability hook only */\n    }\n  }\n\n  private _reset(): void {\n    const wasRecovering = this.state !== 'closed';\n    this.state = 'closed';\n    this.consecutiveFailures = 0;\n    this.window = [];\n    this.openedAt = null;\n    // Only notify on a real recovery (open/half-open \u2192 closed), not on the\n    // initial closed state or an idempotent re-reset.\n    if (wasRecovering) {\n      try {\n        this.onReset?.();\n      } catch {\n        /* ignored \u2014 observability hook only */\n      }\n    }\n  }\n\n  /** Transition from open \u2192 half-open when cooldown elapses. */\n  private _checkStateTransition(): void {\n    if (this.state !== 'open' || this.openedAt === null) return;\n    const elapsed = Date.now() - this.openedAt;\n    if (elapsed >= this.cooldownMs) {\n      this.state = 'half-open';\n      this.openedAt = null;\n    }\n  }\n\n  private _pruneWindow(now: number): void {\n    const cutoff = now - this.windowMs;\n    this.window = this.window.filter((c) => c.at >= cutoff);\n  }\n}", "import { expectDefined } from '@wrongstack/core';\n\n// Sensitive CLI flag patterns that may appear in process command lines.\n// Redacted to [REDACTED] so crash dumps /ps output cannot leak secrets.\n// Split out of process-registry.ts so entries that only need the registry\n// (e.g. ps-slash) don't carry this module's dependencies.\n//\n// NOTE: @wrongstack/core carries its own copy (observability/redact-command.ts)\n// so the emitProcessStarted telemetry producer can redact command+args\n// centrally. Keep these two copies in sync when updating the patterns.\nconst SENSITIVE_FLAG_PATTERNS: RegExp[] = [\n  // --flag=value  or  --flag \"value\"  (value captured up to next space or comma)\n  /--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)(?:[=\\s,][^\\s]*)?/gi,\n  // -t short flag (token): attached (-tVALUE), separated (-t VALUE), or -t=VALUE.\n  // (?<![-\\w]) anchors to a token start so we don't match the `-t` inside `--token`.\n  // NOTE: synced with @wrongstack/core observability/redact-command.ts.\n  /(?<![-\\w])-t(?:[=\\s]+)?[^\\s,-]+/,\n  // -p|-password|-a (redis auth) short flags: attached + separated + =value.\n  // Same token-start anchor; over-redaction is an accepted tradeoff for a\n  // redaction function. Synced with core copy.\n  /(?<![-\\w])-(?:password|p|a)(?:[=\\s]+)?[^\\s,-]+/gi,\n  // env var\u2013style secrets: TOKEN=x, API_KEY=y, etc.\n  /(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD)\\s*[=:]\\s*[^\\s,]+/gi,\n  // Generic high-entropy look: base64 strings >32 chars or hex strings >32 digits \u2014 but only\n  // when preceded by a flag name (e.g. --github-token=EyJ...).\n  /--\\w*(?:token|key|secret|password|passwd|auth|credential)\\w*[=\\s,][A-Za-z0-9+/=]{32,}/,\n];\n\n/**\n * Returns a display-safe copy of `cmd` with sensitive flag values replaced by [REDACTED].\n * The original string is unchanged; this is pure and has no side effects.\n */\nexport function redactCommand(cmd: string): string {\n  let result = cmd;\n  for (const pattern of SENSITIVE_FLAG_PATTERNS) {\n    result = result.replace(pattern, (match) => {\n      // Preserve the flag name portion; redact only the value part.\n      // e.g. \"--token=sekrit_abc\"  \u2192  \"--token=[REDACTED]\"\n      const eq = match.indexOf('=');\n      const sp = match.search(/\\s/);\n      const delim = eq !== -1 ? '=' : sp !== -1 ? match[sp] : null;\n      if (delim !== null) {\n        const flag = match.slice(0, match.indexOf(expectDefined(delim)) + 1);\n        return `${flag}[REDACTED]`;\n      }\n      // No delimitable separator found in the match.\n      if (match.startsWith('--')) {\n        // Long flag with no value attached (e.g. a bare \"--token\" argv token).\n        // No secret here \u2014 leave it untouched so downstream pair-scan can still\n        // recognize the bare flag. NOTE: keep this synced with\n        // @wrongstack/core observability/redact-command.ts.\n        return match;\n      }\n      // Short flag attached form (-pVALUE, -tVALUE, -aVALUE): flag name is the\n      // leading -X (2 chars); redact everything after. Don't use a greedy\n      // [a-zA-Z0-9_-]* flag-name match \u2014 value chars would be consumed into the\n      // flag name and the secret would survive. Synced with core copy.\n      return `${match.slice(0, 2)}[REDACTED]`;\n    });\n  }\n  return result;\n}\n"],
+  "mappings": ";AAYA,SAAS,aAAa;AAEtB,YAAY,QAAQ;;;AC+CpB,IAAM,mCAAmC;AACzC,IAAM,iCAAiC;AAIvC,IAAM,yBAAyB;AAC/B,IAAM,oBAAoB;AAC1B,IAAM,+BAA+B;AACrC,IAAM,sBAAsB;AAarB,IAAM,iBAAN,MAAqB;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,QAAsB;AAAA,EACtB,sBAAsB;AAAA,EACtB,SAAuB,CAAC;AAAA,EACxB,gBAA+B;AAAA,EAC/B,aAA4B;AAAA;AAAA,EAE5B,WAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ1B,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA,EAMlB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,EAEA,YAAY,SAA+B,CAAC,GAAG;AAC7C,SAAK,yBAAyB,OAAO,0BAA0B;AAC/D,SAAK,sBAAsB,OAAO,uBAAuB;AACzD,SAAK,eAAe,OAAO,gBAAgB;AAC3C,SAAK,WAAW,OAAO,YAAY;AACnC,SAAK,oBAAoB,OAAO,qBAAqB;AACrD,SAAK,aAAa,OAAO,cAAc;AAAA,EACzC;AAAA;AAAA,EAGA,WAAW,SAAwB;AACjC,QAAI,KAAK,YAAY,QAAS;AAC9B,SAAK,UAAU;AACf,QAAI,CAAC,QAAS,MAAK,OAAO;AAAA,EAC5B;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,aAAsB;AACxB,QAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,SAAK,sBAAsB;AAC3B,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA,EAKA,WAAmC;AACjC,SAAK,sBAAsB;AAC3B,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,oBAAmC;AACvC,QAAI,KAAK,aAAa,QAAQ,KAAK,UAAU,QAAQ;AACnD,YAAM,UAAU,MAAM,KAAK;AAC3B,0BAAoB,KAAK,IAAI,GAAG,KAAK,aAAa,OAAO;AAAA,IAC3D;AACA,WAAO;AAAA,MACL,OAAO,KAAK;AAAA,MACZ,qBAAqB,KAAK;AAAA,MAC1B,mBAAmB,KAAK,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;AAAA,MACrD,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK;AAAA,MACf,qBAAqB;AAAA,MACrB,eAAe,KAAK;AAAA,MACpB,YAAY,KAAK;AAAA,IACnB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,WAAW,SAAS,OAAgB;AAClC,QAAI,UAAU,CAAC,KAAK,QAAS,QAAO;AACpC,SAAK,sBAAsB;AAC3B,QAAI,KAAK,UAAU,OAAQ,QAAO;AAClC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,UAAU,YAAoB,QAAiB,SAAS,OAAa;AACnE,QAAI,UAAU,CAAC,KAAK,QAAS;AAE7B,UAAM,MAAM,KAAK,IAAI;AAErB,QAAI,KAAK,UAAU,aAAa;AAE9B,UAAI,QAAQ;AACV,aAAK,MAAM;AACX;AAAA,MACF;AAEA,WAAK,OAAO;AACZ;AAAA,IACF;AAGA,SAAK,aAAa,GAAG;AAErB,UAAM,OAAO,cAAc,KAAK;AAChC,SAAK,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,KAAK,CAAC;AAE1C,QAAI,QAAQ;AACV,WAAK;AACL,WAAK,gBAAgB;AACrB,UAAI,KAAK,uBAAuB,KAAK,wBAAwB;AAC3D,aAAK,MAAM;AAAA,MACb;AACA;AAAA,IACF;AAGA,SAAK,sBAAsB;AAE3B,QAAI,MAAM;AACR,WAAK,aAAa;AAClB,YAAM,YAAY,KAAK,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;AACpD,UAAI,aAAa,KAAK,cAAc;AAClC,aAAK,MAAM;AAAA,MACb;AAAA,IACF;AAEA,UAAM,YAAY,KAAK,OAAO;AAC9B,QAAI,aAAa,KAAK,mBAAmB;AAIvC,WAAK,MAAM;AAAA,IACb;AAAA,EACF;AAAA;AAAA,EAGA,YAAkB;AAChB,SAAK,MAAM;AAAA,EACb;AAAA;AAAA,EAGA,aAAmB;AACjB,SAAK,OAAO;AAAA,EACd;AAAA,EAEQ,QAAc;AACpB,QAAI,KAAK,UAAU,OAAQ;AAC3B,SAAK,QAAQ;AACb,SAAK,WAAW,KAAK,IAAI;AAOzB,SAAK,SAAS,CAAC;AAEf,QAAI;AACF,WAAK,SAAS;AAAA,IAChB,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,SAAe;AACrB,UAAM,gBAAgB,KAAK,UAAU;AACrC,SAAK,QAAQ;AACb,SAAK,sBAAsB;AAC3B,SAAK,SAAS,CAAC;AACf,SAAK,WAAW;AAGhB,QAAI,eAAe;AACjB,UAAI;AACF,aAAK,UAAU;AAAA,MACjB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGQ,wBAA8B;AACpC,QAAI,KAAK,UAAU,UAAU,KAAK,aAAa,KAAM;AACrD,UAAM,UAAU,KAAK,IAAI,IAAI,KAAK;AAClC,QAAI,WAAW,KAAK,YAAY;AAC9B,WAAK,QAAQ;AACb,WAAK,WAAW;AAAA,IAClB;AAAA,EACF;AAAA,EAEQ,aAAa,KAAmB;AACtC,UAAM,SAAS,MAAM,KAAK;AAC1B,SAAK,SAAS,KAAK,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,MAAM;AAAA,EACxD;AACF;;;ACnTA,SAAS,qBAAqB;AAU9B,IAAM,0BAAoC;AAAA;AAAA,EAExC;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA,EAEA;AAAA;AAAA;AAAA,EAGA;AACF;AAMO,SAAS,cAAc,KAAqB;AACjD,MAAI,SAAS;AACb,aAAW,WAAW,yBAAyB;AAC7C,aAAS,OAAO,QAAQ,SAAS,CAAC,UAAU;AAG1C,YAAM,KAAK,MAAM,QAAQ,GAAG;AAC5B,YAAM,KAAK,MAAM,OAAO,IAAI;AAC5B,YAAM,QAAQ,OAAO,KAAK,MAAM,OAAO,KAAK,MAAM,EAAE,IAAI;AACxD,UAAI,UAAU,MAAM;AAClB,cAAM,OAAO,MAAM,MAAM,GAAG,MAAM,QAAQ,cAAc,KAAK,CAAC,IAAI,CAAC;AACnE,eAAO,GAAG,IAAI;AAAA,MAChB;AAEA,UAAI,MAAM,WAAW,IAAI,GAAG;AAK1B,eAAO;AAAA,MACT;AAKA,aAAO,GAAG,MAAM,MAAM,GAAG,CAAC,CAAC;AAAA,IAC7B,CAAC;AAAA,EACH;AACA,SAAO;AACT;;;AFaA,IAAM,mBAAmB;AACzB,IAAM,4BAA4B;AA6B3B,SAAS,cAAc,KAAa,OAA6B,CAAC,GAAY;AACnF,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,CAAC,QAAQ,OAAO,GAAG,GAAG,MAAM,IAAI,GAAG;AAAA,MACjE,OAAO;AAAA,MACP,aAAa;AAAA,IACf,CAAC;AACD,QAAI,UAAU;AACd,QAAI;AACJ,UAAM,SAAS,MAAM;AACnB,UAAI,QAAS;AACb,gBAAU;AACV,UAAI,QAAS,cAAa,OAAO;AACjC,UAAI;AACF,aAAK,YAAY;AAAA,MACnB,QAAQ;AAAA,MAER;AAAA,IACF;AAMA,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,SAAS,MAAM;AACxB,cAAU,WAAW,MAAM;AACzB,UAAI;AACF,cAAM,KAAK;AAAA,MACb,QAAQ;AAAA,MAER;AACA,aAAO;AAAA,IACT,GAAG,KAAK,IAAI,GAAG,KAAK,aAAa,yBAAyB,CAAC;AAC3D,YAAQ,QAAQ;AAChB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,IAAM,sBAAN,MAA0B;AAAA,EACd,YAAY,oBAAI,IAA4B;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,kBAAkB;AAAA,EAClB,gBAAsD;AAAA,EACtD,kBAAiC;AAAA,EACjC,4BAAwD,CAAC;AAAA,EAEjE,YAAY,eAAsC;AAChD,SAAK,UAAU,IAAI,eAAe,aAAa;AAE/C,SAAK,QAAQ,SAAS,MAAM,KAAK,kBAAkB;AACnD,SAAK,QAAQ,UAAU,MAAM,KAAK,qBAAqB;AAEvD,SAAK,QAAQ,WAAW,KAAK;AAAA,EAC/B;AAAA,EAEA,SAAS,MAAgG;AACvG,SAAK,UAAU,IAAI,KAAK,KAAK,EAAE,GAAG,MAAM,QAAQ,OAAO,WAAW,KAAK,aAAa,MAAM,CAAC;AAAA,EAC7F;AAAA,EAEQ,iBAAiB,KAAsB;AAC7C,WAAO,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,QAAQ,QAAQ,OAAO,QAAQ,QAAQ;AAAA,EACpF;AAAA,EAEQ,uBAAuB,GAA4B;AACzD,WACK,YAAS,MAAM,WAClB,EAAE,uBAAuB,QACzB,KAAK,iBAAiB,EAAE,GAAG,KAC3B,OAAO,EAAE,MAAM,QAAQ,YACvB,EAAE,MAAM,QAAQ,EAAE;AAAA,EAEtB;AAAA,EAEQ,iBAAiB,GAAmB,QAA8B;AACxE,QAAI;AACF,QAAE,MAAM,KAAK,MAAM;AAAA,IACrB,QAAQ;AAAA,IAGR;AAAA,EACF;AAAA,EAEQ,WAAW,GAAmB,QAA8B;AAClE,QAAI,KAAK,uBAAuB,CAAC,GAAG;AAClC,UAAI;AACF,gBAAQ,KAAK,CAAC,EAAE,KAAK,MAAM;AAC3B;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,SAAK,iBAAiB,GAAG,MAAM;AAAA,EACjC;AAAA;AAAA,EAGA,WAAW,KAAmB;AAC5B,SAAK,UAAU,OAAO,GAAG;AAAA,EAC3B;AAAA;AAAA,EAGA,IAAI,KAAyC;AAC3C,SAAK,YAAY,GAAG;AACpB,WAAO,KAAK,UAAU,IAAI,GAAG;AAAA,EAC/B;AAAA;AAAA,EAGA,OAAyB;AACvB,WAAO,MAAM,KAAK,KAAK,UAAU,OAAO,CAAC;AAAA,EAC3C;AAAA;AAAA,EAGA,OAAO,MAAgC;AACrC,WAAO,KAAK,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI;AAAA,EAClD;AAAA;AAAA,EAGA,UAAU,WAAqC;AAC7C,WAAO,KAAK,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,SAAS;AAAA,EAC5D;AAAA;AAAA,EAGA,IAAI,cAAsB;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,KAAK,UAAU,OAAO,GAAG;AACvC,UAAI,CAAC,EAAE,OAAQ;AAAA,IACjB;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,QAAuB;AACrB,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,MAClB,YAAY,KAAK,UAAU;AAAA,MAC3B,SAAS,KAAK,QAAQ,SAAS;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,aAAsB;AACxB,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,WAAW,SAAS,OAAgB;AAClC,WAAO,KAAK,QAAQ,WAAW,MAAM;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,UAAU,YAAoB,QAAiB,SAAS,OAAa;AACnE,SAAK,QAAQ,UAAU,YAAY,QAAQ,MAAM;AAAA,EACnD;AAAA;AAAA,EAGA,mBAAyB;AACvB,SAAK,QAAQ,UAAU;AAAA,EACzB;AAAA;AAAA,EAGA,oBAA0B;AACxB,SAAK,QAAQ,WAAW;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,iBAAiB,KAAoF;AACnG,QAAI,IAAI,YAAY,OAAW,MAAK,QAAQ,WAAW,IAAI,OAAO;AAClE,QAAI,IAAI,oBAAoB,OAAW,MAAK,kBAAkB,KAAK,IAAI,GAAG,IAAI,eAAe;AAE7F,QAAI,KAAK,mBAAmB,GAAG;AAC7B,WAAK,qBAAqB;AAC1B;AAAA,IACF;AAIA,QAAI,KAAK,QAAQ,aAAa,KAAK,QAAQ,SAAS,EAAE,UAAU,QAAQ;AACtE,WAAK,kBAAkB;AAAA,IACzB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,sBAA+C;AAC7C,QAAI,KAAK,oBAAoB,QAAQ,KAAK,mBAAmB,EAAG,QAAO;AACvE,UAAM,UAAU,KAAK,IAAI,IAAI,KAAK;AAClC,WAAO,EAAE,aAAa,KAAK,IAAI,GAAG,KAAK,kBAAkB,OAAO,GAAG,SAAS,KAAK,gBAAgB;AAAA,EACnG;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,yBAAyB,UAAgD;AACvE,SAAK,0BAA0B,KAAK,QAAQ;AAC5C,WAAO,MAAM;AACX,WAAK,4BAA4B,KAAK,0BAA0B,OAAO,CAAC,MAAM,MAAM,QAAQ;AAAA,IAC9F;AAAA,EACF;AAAA,EAEQ,wBAA8B;AACpC,UAAM,OAAO,KAAK,oBAAoB;AACtC,eAAW,KAAK,KAAK,2BAA2B;AAC9C,UAAI;AACF,UAAE,IAAI;AAAA,MACR,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,oBAA0B;AAChC,QAAI,KAAK,mBAAmB,KAAK,CAAC,KAAK,QAAQ,UAAW;AAC1D,SAAK,oBAAoB;AACzB,SAAK,kBAAkB,KAAK,IAAI;AAChC,SAAK,gBAAgB,WAAW,MAAM;AACpC,WAAK,gBAAgB;AACrB,WAAK,kBAAkB;AAEvB,WAAK,QAAQ,EAAE,OAAO,MAAM,CAAC;AAC7B,WAAK,QAAQ,WAAW;AACxB,WAAK,sBAAsB;AAAA,IAC7B,GAAG,KAAK,eAAe;AAEvB,SAAK,cAAc,QAAQ;AAC3B,SAAK,sBAAsB;AAAA,EAC7B;AAAA,EAEQ,uBAA6B;AACnC,UAAM,WAAW,KAAK,oBAAoB;AAC1C,SAAK,oBAAoB;AACzB,QAAI,UAAU;AACZ,WAAK,kBAAkB;AACvB,WAAK,sBAAsB;AAAA,IAC7B;AAAA,EACF;AAAA,EAEQ,sBAA4B;AAClC,QAAI,KAAK,kBAAkB,MAAM;AAC/B,mBAAa,KAAK,aAAa;AAC/B,WAAK,gBAAgB;AAAA,IACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,KAAK,KAAa,OAAiB,CAAC,GAAY;AAC9C,SAAK,YAAY,GAAG;AACpB,UAAM,IAAI,KAAK,UAAU,IAAI,GAAG;AAChC,QAAI,CAAC,EAAG,QAAO;AACf,QAAI,EAAE,OAAQ,QAAO;AACrB,QAAI,EAAE,UAAW,QAAO;AAExB,UAAM,EAAE,QAAQ,OAAO,UAAU,iBAAiB,IAAI;AACtD,UAAM,QAAW,YAAS,MAAM;AAEhC,QAAI,OAAO;AAWT,YAAM,gBAAgB,EAAE,MAAM,aAAa,QAAQ,OAAO,EAAE,MAAM,QAAQ;AAC1E,YAAM,iBAAiB,MAAM;AAC3B,YAAI,EAAE,MAAM,aAAa,MAAM;AAC7B,cAAI;AACF,cAAE,MAAM,KAAK,SAAS;AAAA,UACxB,QAAQ;AAAA,UAER;AAAA,QACF;AAAA,MACF;AACA,UACE,iBACA,cAAc,KAAK;AAAA,QACjB,WAAW,KAAK,IAAI,SAAS,yBAAyB;AAAA,QACtD,WAAW;AAAA,MACb,CAAC,GACD;AAAA,MAIF,OAAO;AACL,YAAI;AACF,YAAE,MAAM,KAAK,QAAQ,YAAY,SAAS;AAAA,QAC5C,QAAQ;AAAA,QAER;AAAA,MACF;AACA,QAAE,SAAS;AACX,aAAO;AAAA,IACT;AAKA,QAAI;AACF,UAAI,OAAO;AACT,aAAK,WAAW,GAAG,SAAS;AAAA,MAC9B,OAAO;AACL,aAAK,WAAW,GAAG,SAAS;AAE5B,cAAM,QAAQ,WAAW,MAAM;AAE7B,cAAI,KAAK,UAAU,IAAI,GAAG,KAAK,CAAC,EAAE,MAAM,QAAQ;AAC9C,iBAAK,WAAW,GAAG,SAAS;AAAA,UAC9B;AAAA,QACF,GAAG,OAAO;AACV,cAAM,QAAQ;AAAA,MAChB;AAAA,IACF,QAAQ;AAAA,IAER;AACA,MAAE,SAAS;AACX,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,OAAiB,CAAC,GAAa;AACrC,UAAM,OAAO,MAAM,KAAK,KAAK,UAAU,KAAK,CAAC;AAC7C,UAAM,SAAmB,CAAC;AAC1B,eAAW,OAAO,MAAM;AACtB,YAAM,IAAI,KAAK,UAAU,IAAI,GAAG;AAChC,UAAI,KAAK,CAAC,EAAE,aAAa,KAAK,KAAK,KAAK,IAAI,EAAG,QAAO,KAAK,GAAG;AAAA,IAChE;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAY,WAAmB,OAAiB,CAAC,GAAa;AAC5D,UAAM,OAAO,KAAK,UAAU,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG;AACvD,UAAM,SAAmB,CAAC;AAC1B,eAAW,OAAO,MAAM;AACtB,UAAI,KAAK,KAAK,KAAK,IAAI,EAAG,QAAO,KAAK,GAAG;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,cAAc,OAAgC;AACpD,WAAO,MAAM,MAAM,aAAa,QAAQ,KAAK,IAAI,IAAI,MAAM,YAAY;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,KAAmB;AACrC,UAAM,QAAQ,KAAK,UAAU,IAAI,GAAG;AACpC,QAAI,SAAS,KAAK,cAAc,KAAK,GAAG;AACtC,WAAK,UAAU,OAAO,GAAG;AAAA,IAC3B;AAAA,EACF;AACF;AAGA,IAAI;AAEG,SAAS,qBAA0C;AACxD,MAAI,CAAC,WAAW;AACd,gBAAY,IAAI,oBAAoB;AAAA,EACtC;AACA,SAAO;AACT;AAGO,SAAS,wBAA8B;AAC5C,cAAY;AACd;",
   "names": []
 }

package/dist/search.js

@@ -56,7 +56,7 @@ function guardedLookup(hostname, options, callback) {
 var pinnedAgent;
 function getPinnedDispatcher() {
   if (!pinnedAgent) {
-    pinnedAgent = new Agent({ connect: { lookup: guardedLookup } });
+    pinnedAgent = new Agent({ allowH2: false, connect: { lookup: guardedLookup } });
   }
   return pinnedAgent;
 }
@@ -158,7 +158,7 @@ async function assertNotPrivate(hostname) {
         }
       }
     } catch (err) {
-      if (err instanceof Error && err.message.startsWith("fetch:")) throw err;
+      if (err instanceof ToolValidationError) throw err;
     }
   }
 }