@zixt/host 0.0.22 → 0.0.24

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.22",
+  version: "0.0.24",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -17579,7 +17579,7 @@ var SetAgentStatusRequest = external_exports.object({
   status: AgentStatus.exclude(["draft"]),
   /**
    * Backwards-compatible override for older clients. When omitted, activation
-   * keeps any configured guardrails and defaults Integration access to `all`.
+   * keeps configured Integration access; legacy rows without it inherit `all`.
    */
   activation: external_exports.object({
     autonomyPreset: AutonomyPreset,
@@ -18994,7 +18994,7 @@ async function generateTaskTitle(instructions, runner) {
     instructions.slice(0, INSTRUCTIONS_BUDGET),
     "</task_request>"
   ].join("\n");
-  return new Promise((resolve13) => {
+  return new Promise((resolve14) => {
     const child = spawnCli(
       command,
       [
@@ -19017,7 +19017,7 @@ async function generateTaskTitle(instructions, runner) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve13(value);
+      resolve14(value);
     };
     const timer = setTimeout(() => {
       child.kill();
@@ -19543,7 +19543,7 @@ async function waitForOperationGrantRetry(retryAt, signal) {
   const deadline = Date.parse(retryAt);
   if (!Number.isFinite(deadline) || signal.aborted) return false;
   if (deadline <= Date.now()) return true;
-  return await new Promise((resolve13) => {
+  return await new Promise((resolve14) => {
     let settled = false;
     let timer;
     const finish = (ready) => {
@@ -19551,7 +19551,7 @@ async function waitForOperationGrantRetry(retryAt, signal) {
       settled = true;
       if (timer) clearTimeout(timer);
       signal.removeEventListener("abort", onAbort);
-      resolve13(ready);
+      resolve14(ready);
     };
     const onAbort = () => finish(false);
     const schedule = () => {
@@ -19815,22 +19815,22 @@ var HostClient = class _HostClient {
     const unwindingAssignments = [...this.activeAssignments.values()];
     for (const cancel of this.cancels.values()) cancel(stopReason);
     for (const entry of this.secretGrants.values()) {
-      for (const resolve13 of entry.resolvers) resolve13({});
+      for (const resolve14 of entry.resolvers) resolve14({});
       entry.resolvers = [];
       delete entry.value;
     }
     for (const entry of this.connectionGrants.values()) {
-      for (const resolve13 of entry.resolvers) resolve13([]);
+      for (const resolve14 of entry.resolvers) resolve14([]);
       entry.resolvers = [];
       delete entry.value;
     }
     for (const entry of this.providerGrants.values()) {
-      for (const resolve13 of entry.resolvers) resolve13([]);
+      for (const resolve14 of entry.resolvers) resolve14([]);
       entry.resolvers = [];
       delete entry.value;
     }
     for (const waiters of this.approvalWaiters.values()) {
-      for (const resolve13 of waiters.values()) resolve13({ approved: false, guidance: reason });
+      for (const resolve14 of waiters.values()) resolve14({ approved: false, guidance: reason });
     }
     for (const waiters of this.agentOpWaiters.values()) {
       for (const waiter of waiters.values()) {
@@ -19856,9 +19856,9 @@ var HostClient = class _HostClient {
     let drainTimer;
     const drained = await Promise.race([
       Promise.allSettled(runs).then(() => true),
-      new Promise((resolve13) => {
+      new Promise((resolve14) => {
         drainTimer = setTimeout(
-          () => resolve13(false),
+          () => resolve14(false),
           this.opts.unwindTimeoutMs ?? _HostClient.DEFAULT_UNWIND_TIMEOUT_MS
         );
         drainTimer.unref?.();
@@ -19938,9 +19938,9 @@ var HostClient = class _HostClient {
     let frameDrainTimer;
     const framesDrained = await Promise.race([
       frameTail.then(() => true),
-      new Promise((resolve13) => {
+      new Promise((resolve14) => {
         frameDrainTimer = setTimeout(
-          () => resolve13(false),
+          () => resolve14(false),
           this.opts.unwindTimeoutMs ?? _HostClient.DEFAULT_UNWIND_TIMEOUT_MS
         );
         frameDrainTimer.unref?.();
@@ -20442,7 +20442,7 @@ var HostClient = class _HostClient {
         const entry = this.secretGrants.get(key) ?? { resolvers: [] };
         entry.value = message.secrets;
         entry.expiresAt = expiresAt;
-        for (const resolve13 of entry.resolvers) resolve13(message.secrets);
+        for (const resolve14 of entry.resolvers) resolve14(message.secrets);
         entry.resolvers = [];
         this.secretGrants.set(key, entry);
         return;
@@ -20473,13 +20473,13 @@ var HostClient = class _HostClient {
         const entry = this.connectionGrants.get(key) ?? { resolvers: [] };
         entry.value = message.connections;
         entry.expiresAt = expiresAt;
-        for (const resolve13 of entry.resolvers) resolve13(message.connections);
+        for (const resolve14 of entry.resolvers) resolve14(message.connections);
         entry.resolvers = [];
         this.connectionGrants.set(key, entry);
         const providerEntry = this.providerGrants.get(key) ?? { resolvers: [] };
         providerEntry.value = providers;
         providerEntry.expiresAt = authorityExpiresAt;
-        for (const resolve13 of providerEntry.resolvers) resolve13(providers);
+        for (const resolve14 of providerEntry.resolvers) resolve14(providers);
         providerEntry.resolvers = [];
         this.providerGrants.set(key, providerEntry);
         return;
@@ -20568,8 +20568,8 @@ var HostClient = class _HostClient {
       return redactCredentialText(text, sensitiveSnapshot()).slice(0, maxLength);
     };
     let resolveCancelled;
-    const cancelledPromise = new Promise((resolve13) => {
-      resolveCancelled = resolve13;
+    const cancelledPromise = new Promise((resolve14) => {
+      resolveCancelled = resolve14;
     });
     const endAuthority = (reason = "cloud_cancel") => {
       if (stopReason) return;
@@ -20578,21 +20578,21 @@ var HostClient = class _HostClient {
       authorityController.abort(reason);
       const secretEntry = this.secretGrants.get(cancelKey);
       if (secretEntry) {
-        for (const resolve13 of secretEntry.resolvers) resolve13({});
+        for (const resolve14 of secretEntry.resolvers) resolve14({});
         secretEntry.resolvers = [];
         delete secretEntry.value;
       }
       this.secretGrants.delete(cancelKey);
       const connectionEntry = this.connectionGrants.get(cancelKey);
       if (connectionEntry) {
-        for (const resolve13 of connectionEntry.resolvers) resolve13([]);
+        for (const resolve14 of connectionEntry.resolvers) resolve14([]);
         connectionEntry.resolvers = [];
         delete connectionEntry.value;
       }
       this.connectionGrants.delete(cancelKey);
       const providerEntry = this.providerGrants.get(cancelKey);
       if (providerEntry) {
-        for (const resolve13 of providerEntry.resolvers) resolve13([]);
+        for (const resolve14 of providerEntry.resolvers) resolve14([]);
         providerEntry.resolvers = [];
         delete providerEntry.value;
       }
@@ -20600,8 +20600,8 @@ var HostClient = class _HostClient {
       this.clearAuthorityExpiry(cancelKey);
       const approvalWaiters = this.approvalWaiters.get(cancelKey);
       if (approvalWaiters) {
-        for (const resolve13 of approvalWaiters.values()) {
-          resolve13({ approved: false, guidance: "task was cancelled" });
+        for (const resolve14 of approvalWaiters.values()) {
+          resolve14({ approved: false, guidance: "task was cancelled" });
         }
         approvalWaiters.clear();
       }
@@ -20727,9 +20727,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve13) => {
-        entry.resolvers.push((value) => resolve13(capture(value)));
-        setTimeout(() => resolve13(capture(entry.value ?? {})), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve14) => {
+        entry.resolvers.push((value) => resolve14(capture(value)));
+        setTimeout(() => resolve14(capture(entry.value ?? {})), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const connections = () => {
@@ -20746,9 +20746,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve13) => {
-        entry.resolvers.push((value) => resolve13(capture(value)));
-        setTimeout(() => resolve13(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve14) => {
+        entry.resolvers.push((value) => resolve14(capture(value)));
+        setTimeout(() => resolve14(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const providers = () => {
@@ -20765,9 +20765,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value !== void 0) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve13) => {
-        entry.resolvers.push((value) => resolve13(capture(value)));
-        setTimeout(() => resolve13(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve14) => {
+        entry.resolvers.push((value) => resolve14(capture(value)));
+        setTimeout(() => resolve14(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const linear = async () => {
@@ -20793,13 +20793,13 @@ var HostClient = class _HostClient {
         payload: safe(payload, 5e4),
         ...questionChoices ? { questionChoices: [...questionChoices] } : {}
       });
-      return new Promise((resolve13) => {
+      return new Promise((resolve14) => {
         const waiters = this.approvalWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
         this.approvalWaiters.set(cancelKey, waiters);
-        waiters.set(requestId, resolve13);
+        waiters.set(requestId, resolve14);
         void cancelledPromise.then(() => {
           if (waiters.delete(requestId)) {
-            resolve13({ approved: false, guidance: "task was cancelled" });
+            resolve14({ approved: false, guidance: "task was cancelled" });
           }
         });
       });
@@ -20837,11 +20837,11 @@ var HostClient = class _HostClient {
         if (existing) message = existing;
         else terminalMessages.set(requestId, message);
       }
-      return new Promise((resolve13) => {
+      return new Promise((resolve14) => {
         const waiters = this.agentOpWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
         this.agentOpWaiters.set(cancelKey, waiters);
         if (waiters.has(requestId)) {
-          resolve13({ ok: false, error: "provider settlement request is already in flight" });
+          resolve14({ ok: false, error: "provider settlement request is already in flight" });
           return;
         }
         const timer = setTimeout(() => {
@@ -20852,7 +20852,7 @@ var HostClient = class _HostClient {
                 (pending) => !(pending.type === "agent.op" && pending.requestId === requestId)
               );
             }
-            resolve13({
+            resolve14({
               ok: false,
               error: terminal ? "The provider call completed, but Zixt could not record its outcome. Do not retry; wait for reconciliation." : "the platform did not answer in time; verify with a list_* tool before retrying a mutating call"
             });
@@ -20860,7 +20860,7 @@ var HostClient = class _HostClient {
         }, _HostClient.AGENT_OP_TIMEOUT_MS);
         timer.unref?.();
         waiters.set(requestId, {
-          resolve: resolve13,
+          resolve: resolve14,
           timer,
           ...terminal ? { terminalMessage: message } : {}
         });
@@ -20906,12 +20906,12 @@ var HostClient = class _HostClient {
             "No GitHub change was attempted; the authority grant request was invalid."
           );
         }
-        const outcome = await new Promise((resolve13) => {
+        const outcome = await new Promise((resolve14) => {
           const timer = setTimeout(() => {
             const waiter = this.operationGrantWaiters.get(requestId);
             if (!waiter) return;
             this.operationGrantWaiters.delete(requestId);
-            resolve13({ grant: null, retryable: true, reason: "no_reply_from_zixt" });
+            resolve14({ grant: null, retryable: true, reason: "no_reply_from_zixt" });
           }, this.operationGrantTimeoutMs);
           timer.unref?.();
           this.operationGrantWaiters.set(requestId, {
@@ -20924,9 +20924,9 @@ var HostClient = class _HostClient {
             timer,
             accept: (grant) => {
               addSensitiveValues(providerGrantSensitiveValues(grant));
-              resolve13({ grant });
+              resolve14({ grant });
             },
-            deny: (retryable, reason, detail, retryAt, retryCode) => resolve13({
+            deny: (retryable, reason, detail, retryAt, retryCode) => resolve14({
               grant: null,
               retryable,
               reason,
@@ -20940,7 +20940,7 @@ var HostClient = class _HostClient {
           } catch {
             clearTimeout(timer);
             this.operationGrantWaiters.delete(requestId);
-            resolve13({ grant: null, retryable: false, reason: "connection_unavailable" });
+            resolve14({ grant: null, retryable: false, reason: "connection_unavailable" });
           }
         });
         if (outcome.grant) {
@@ -20996,7 +20996,7 @@ var HostClient = class _HostClient {
           )
         );
       }
-      return new Promise((resolve13, reject3) => {
+      return new Promise((resolve14, reject3) => {
         const timer = setTimeout(() => {
           if (this.browserCredentialWaiters.delete(requestId)) {
             reject3(
@@ -21015,7 +21015,7 @@ var HostClient = class _HostClient {
           timer,
           accept: (credential) => {
             addSensitiveValues(webLoginSensitiveValues(credential));
-            resolve13(credential);
+            resolve14(credential);
           },
           deny: (reason) => reject3(new Error(reason))
         });
@@ -21313,14 +21313,14 @@ async function observeWindowsGuardianNonce(pid, nonce) {
       "Windows runner identity could not be observed"
     );
   }
-  return new Promise((resolve13, reject3) => {
+  return new Promise((resolve14, reject3) => {
     let done = false;
     const finish = (result) => {
       if (done) return;
       done = true;
       clearTimeout(timeout);
       if (result instanceof Error) reject3(result);
-      else resolve13(result);
+      else resolve14(result);
     };
     const timeout = setTimeout(
       () => finish(
@@ -21365,7 +21365,7 @@ async function observePosixGuardianNonce(pid, nonce) {
       );
     }
   }
-  return new Promise((resolve13, reject3) => {
+  return new Promise((resolve14, reject3) => {
     const observer = spawn2("/bin/ps", ["-ww", "-o", "command=", "-p", String(pid)], {
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -21376,7 +21376,7 @@ async function observePosixGuardianNonce(pid, nonce) {
       done = true;
       clearTimeout(timeout);
       if (result instanceof Error) reject3(result);
-      else resolve13(result);
+      else resolve14(result);
     };
     const timeout = setTimeout(() => {
       observer.kill("SIGKILL");
@@ -21423,7 +21423,7 @@ async function observeGuardianIdentity(pid, identity) {
   return process.platform === "win32" ? observeWindowsGuardianNonce(pid, identity.nonce) : observePosixGuardianNonce(pid, identity.nonce);
 }
 function delay(ms) {
-  return new Promise((resolve13) => setTimeout(resolve13, ms));
+  return new Promise((resolve14) => setTimeout(resolve14, ms));
 }
 function posixProcessRecordsFromPs(output) {
   const records = [];
@@ -21456,7 +21456,7 @@ function posixProcessRecordsFromPs(output) {
   return records;
 }
 async function snapshotPosixProcesses() {
-  return new Promise((resolve13, reject3) => {
+  return new Promise((resolve14, reject3) => {
     const observer = spawn2("/bin/ps", ["-axo", "uid=,pid=,ppid=,pgid=,stat="], {
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -21469,7 +21469,7 @@ async function snapshotPosixProcesses() {
       if (error52) reject3(error52);
       else {
         try {
-          resolve13(posixProcessRecordsFromPs(output));
+          resolve14(posixProcessRecordsFromPs(output));
         } catch (caught) {
           reject3(caught);
         }
@@ -21804,7 +21804,7 @@ async function snapshotWindowsDescendants(rootPid) {
       "Windows process-tree observation could not start"
     );
   }
-  return new Promise((resolve13, reject3) => {
+  return new Promise((resolve14, reject3) => {
     let done = false;
     const timeout = setTimeout(() => {
       if (done) return;
@@ -21831,7 +21831,7 @@ async function snapshotWindowsDescendants(rootPid) {
         return;
       }
       try {
-        resolve13(completeWindowsDescendantPids(rootPid, processes));
+        resolve14(completeWindowsDescendantPids(rootPid, processes));
       } catch (caught) {
         reject3(caught);
       }
@@ -21878,7 +21878,7 @@ async function waitForProcessesExit(pids, timeoutMs) {
 }
 async function runTaskkill(pid, command, timeoutMs = TASKKILL_TIMEOUT_MS, independentlyTrackedPids = []) {
   const trustedCommand = command ?? defaultTaskkillCommand();
-  const result = await new Promise((resolve13, reject3) => {
+  const result = await new Promise((resolve14, reject3) => {
     const killer = spawn2(trustedCommand, ["/PID", String(pid), "/T", "/F"], {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: true
@@ -21913,7 +21913,7 @@ async function runTaskkill(pid, command, timeoutMs = TASKKILL_TIMEOUT_MS, indepe
       done = true;
       clearTimeout(timeout);
       if (error52) reject3(error52);
-      else resolve13({ code: killer.exitCode, output, outputTruncated });
+      else resolve14({ code: killer.exitCode, output, outputTruncated });
     };
     killer.once(
       "error",
@@ -22590,12 +22590,12 @@ async function createWindowsJobContainment(pid, options) {
     stderr = `${stderr}${String(chunk)}`.slice(-HELPER_OUTPUT_LIMIT);
   });
   const helperEvents = helper;
-  const exited = new Promise((resolve13) => {
+  const exited = new Promise((resolve14) => {
     let completed = false;
     const complete = (code, signal) => {
       if (completed) return;
       completed = true;
-      resolve13({ code, signal });
+      resolve14({ code, signal });
     };
     helperEvents.once("error", () => {
       failProtocol(new Error("Windows Job Object helper could not start"));
@@ -22608,7 +22608,7 @@ async function createWindowsJobContainment(pid, options) {
   });
   const nextLine = async (expected) => {
     if (protocolFailure) throw protocolFailure;
-    const line = lines.shift() ?? await new Promise((resolve13, reject3) => {
+    const line = lines.shift() ?? await new Promise((resolve14, reject3) => {
       const timer = setTimeout(
         () => reject3(timeoutError("Windows Job Object helper did not answer in time")),
         timeoutMs
@@ -22616,7 +22616,7 @@ async function createWindowsJobContainment(pid, options) {
       timer.unref?.();
       lineWaiters.push((value) => {
         clearTimeout(timer);
-        resolve13(value);
+        resolve14(value);
       });
     });
     if (protocolFailure) throw protocolFailure;
@@ -22629,8 +22629,8 @@ async function createWindowsJobContainment(pid, options) {
     }
     const stopped = await Promise.race([
       exited.then(() => true),
-      new Promise((resolve13) => {
-        const timer = setTimeout(() => resolve13(false), timeoutMs);
+      new Promise((resolve14) => {
+        const timer = setTimeout(() => resolve14(false), timeoutMs);
         timer.unref?.();
       })
     ]);
@@ -22689,7 +22689,7 @@ async function awaitWindowsContainmentGate(env = process.env, input = process.st
   if (nonce === void 0) return true;
   if (!SAFE_NONCE2.test(nonce)) return false;
   const expected = windowsContainmentGate(nonce).trimEnd();
-  return new Promise((resolve13) => {
+  return new Promise((resolve14) => {
     let pending = Buffer.alloc(0);
     let settled = false;
     const finish = (result) => {
@@ -22700,7 +22700,7 @@ async function awaitWindowsContainmentGate(env = process.env, input = process.st
       input.off("end", onEnd);
       input.off("error", onEnd);
       if (result) input.pause();
-      resolve13(result);
+      resolve14(result);
     };
     const onData = (chunk) => {
       pending = Buffer.concat([pending, chunk]);
@@ -23125,7 +23125,7 @@ async function installRelease(version2, options = {}) {
     installerContainmentSetupError = error52;
     return null;
   }) : Promise.resolve(null);
-  const installed = await new Promise((resolve13, reject3) => {
+  const installed = await new Promise((resolve14, reject3) => {
     let finished = false;
     let cleanupStarted = false;
     let exitObserved = false;
@@ -23141,7 +23141,7 @@ async function installRelease(version2, options = {}) {
       finished = true;
       clearTimeout(timer);
       options.signal?.removeEventListener("abort", requestCleanup);
-      resolve13(result);
+      resolve14(result);
     };
     const requestCleanup = () => {
       if (cleanupStarted || finished) return;
@@ -23454,11 +23454,11 @@ async function runWorkerCompatibilityProxy(env = process.env, argv = process.arg
   child.stdin?.on("error", () => {
   });
   process.stdin.pipe(child.stdin);
-  return new Promise((resolve13) => {
-    child.once("error", () => resolve13(1));
+  return new Promise((resolve14) => {
+    child.once("error", () => resolve14(1));
     child.once("exit", (code) => {
       process.stdin.unpipe(child.stdin);
-      resolve13(code ?? 1);
+      resolve14(code ?? 1);
     });
   });
 }
@@ -23536,11 +23536,11 @@ async function launchHostSupervisor(options = {}) {
   const waitOrStop = async (ms) => {
     if (stopping) return false;
     if (!customDelay) {
-      await new Promise((resolve13) => {
+      await new Promise((resolve14) => {
         const finish = () => {
           clearTimeout(timer);
           stopController.signal.removeEventListener("abort", finish);
-          resolve13();
+          resolve14();
         };
         const timer = setTimeout(finish, ms);
         stopController.signal.addEventListener("abort", finish, { once: true });
@@ -23548,8 +23548,8 @@ async function launchHostSupervisor(options = {}) {
       return !stopping;
     }
     let finishStop;
-    const stopped = new Promise((resolve13) => {
-      finishStop = () => resolve13();
+    const stopped = new Promise((resolve14) => {
+      finishStop = () => resolve14();
       stopController.signal.addEventListener("abort", finishStop, { once: true });
     });
     await Promise.race([customDelay(ms), stopped]);
@@ -23672,19 +23672,19 @@ async function launchHostSupervisor(options = {}) {
       child = spawnSupervisor(entry, version2, ownershipDirectory, containmentGateNonce);
       const launchedSupervisor = child;
       let resolveChildExited;
-      const childExited = new Promise((resolve13) => {
-        resolveChildExited = resolve13;
+      const childExited = new Promise((resolve14) => {
+        resolveChildExited = resolve14;
       });
       const supervisorContainmentAbort = new AbortController();
       void childExited.then(() => supervisorContainmentAbort.abort());
       const outcomePromise = new Promise(
-        (resolve13) => {
+        (resolve14) => {
           let observed = false;
           const finish = (code, signal) => {
             if (observed) return;
             observed = true;
             resolveChildExited();
-            resolve13({ code, signal });
+            resolve14({ code, signal });
           };
           child.once("error", () => finish(1, null));
           child.once("exit", finish);
@@ -23705,12 +23705,12 @@ async function launchHostSupervisor(options = {}) {
           if (!supervisorContainment || !launchedSupervisor.stdin) {
             throw new Error("supervisor Job Object gate is unavailable");
           }
-          await new Promise((resolve13, reject3) => {
+          await new Promise((resolve14, reject3) => {
             launchedSupervisor.stdin.write(
               windowsContainmentGate(containmentGateNonce),
               (error52) => {
                 if (error52) reject3(error52);
-                else resolve13();
+                else resolve14();
               }
             );
           });
@@ -23852,18 +23852,18 @@ async function superviseHost(options = {}) {
     }
   }
   let announceShutdown;
-  const shutdownAnnounced = new Promise((resolve13) => {
-    announceShutdown = resolve13;
+  const shutdownAnnounced = new Promise((resolve14) => {
+    announceShutdown = resolve14;
   });
   const attempted = /* @__PURE__ */ new Set();
   const waitOrShutdown = async (ms) => {
     if (shuttingDown2) return false;
     if (!customDelay) {
-      await new Promise((resolve13) => {
+      await new Promise((resolve14) => {
         const finish = () => {
           clearTimeout(timer);
           shutdownController.signal.removeEventListener("abort", finish);
-          resolve13();
+          resolve14();
         };
         const timer = setTimeout(finish, ms);
         shutdownController.signal.addEventListener("abort", finish, { once: true });
@@ -24006,19 +24006,19 @@ async function superviseHost(options = {}) {
       child = spawnWorker(command, watchdogLaunch, compatibilityOwnership, containmentGateNonce);
       const watchedChild = child;
       let resolveChildExited;
-      const childExited = new Promise((resolve13) => {
-        resolveChildExited = resolve13;
+      const childExited = new Promise((resolve14) => {
+        resolveChildExited = resolve14;
       });
       const workerContainmentAbort = new AbortController();
       void childExited.then(() => workerContainmentAbort.abort());
       const outcomePromise = new Promise(
-        (resolve13) => {
+        (resolve14) => {
           let observed = false;
           const finish = (result) => {
             if (observed) return;
             observed = true;
             resolveChildExited();
-            resolve13(result);
+            resolve14(result);
           };
           watchedChild.once("error", () => finish({ code: 1, signal: null }));
           watchedChild.once(
@@ -24040,10 +24040,10 @@ async function superviseHost(options = {}) {
           if (!workerContainment || !watchedChild.stdin) {
             throw new Error("worker Job Object gate is unavailable");
           }
-          await new Promise((resolve13, reject3) => {
+          await new Promise((resolve14, reject3) => {
             watchedChild.stdin.write(windowsContainmentGate(containmentGateNonce), (error52) => {
               if (error52) reject3(error52);
-              else resolve13();
+              else resolve14();
             });
           });
         }
@@ -25231,7 +25231,7 @@ import { spawn as spawn8 } from "node:child_process";
 import { randomUUID as randomUUID10 } from "node:crypto";
 import { lstat as lstat9, mkdir as mkdir10, realpath as realpath7 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname6, join as join14 } from "node:path";
+import { dirname as dirname6, isAbsolute as isAbsolute13, join as join14, resolve as resolve7 } from "node:path";
 
 // src/tool-packs/browser/tool-definitions.ts
 function definition(name, description, properties, required2 = []) {
@@ -28282,8 +28282,8 @@ async function runGit(input, args, env) {
     let settled = false;
     let stopping = false;
     let resolveExited;
-    const exited = new Promise((resolve13) => {
-      resolveExited = resolve13;
+    const exited = new Promise((resolve14) => {
+      resolveExited = resolve14;
     });
     child.once("exit", resolveExited);
     const cleanup = () => {
@@ -30771,8 +30771,8 @@ var linearToolPackFactory = {
   async create(grant, context) {
     let resolveCancelled;
     let closed = false;
-    const cancelled = new Promise((resolve13) => {
-      resolveCancelled = resolve13;
+    const cancelled = new Promise((resolve14) => {
+      resolveCancelled = resolve14;
     });
     const cancel = () => {
       if (closed) return;
@@ -31386,7 +31386,7 @@ function createAskUserServer() {
   let server;
   let listening;
   function ensureListening() {
-    listening ??= new Promise((resolve13, reject3) => {
+    listening ??= new Promise((resolve14, reject3) => {
       server = createServer2((req, res) => {
         res.on("error", () => {
         });
@@ -31402,7 +31402,7 @@ function createAskUserServer() {
       server.on("error", reject3);
       server.listen(0, "127.0.0.1", () => {
         const address = server.address();
-        if (address && typeof address === "object") resolve13(address.port);
+        if (address && typeof address === "object") resolve14(address.port);
         else reject3(new Error("ask_user server failed to bind"));
       });
       server.unref();
@@ -32715,18 +32715,26 @@ async function repositoryState(directory, git, env, signal) {
   };
 }
 async function collectWorkingContext(input) {
-  const directories = [
+  const fixedDirectories = [
     { path: input.workingDirectory, kind: "working" }
   ];
   if (input.preparedWorkspace && input.preparedWorkspace.path !== input.workingDirectory) {
-    directories.push({ path: input.preparedWorkspace.path, kind: "repository" });
+    fixedDirectories.push({ path: input.preparedWorkspace.path, kind: "repository" });
   }
+  const candidateDirectories = [
+    .../* @__PURE__ */ new Set([...input.observedDirectories ?? [], ...fixedDirectories.map(({ path }) => path)])
+  ].slice(0, 20);
   const repositories = (await Promise.all(
-    directories.map(({ path }) => repositoryState(path, input.git, input.env, input.signal))
+    candidateDirectories.map((path) => repositoryState(path, input.git, input.env, input.signal))
   )).filter((repository) => repository !== null);
   const uniqueRepositories = [
     ...new Map(repositories.map((repository) => [repository.root, repository])).values()
-  ];
+  ].slice(0, 20);
+  const fixedPaths = new Set(fixedDirectories.map(({ path }) => path));
+  const directories = [
+    ...fixedDirectories,
+    ...uniqueRepositories.filter(({ root }) => !fixedPaths.has(root)).map(({ root }) => ({ path: root, kind: "repository" }))
+  ].slice(0, 20);
   return TaskWorkingContextObservation.parse({
     workingDirectory: input.workingDirectory,
     directories,
@@ -33770,6 +33778,8 @@ function createCliRunner(adapter, opts = {}) {
 ${attachmentSection}` : prompt;
       let activeWorkingContextReport = null;
       let previousWorkingContext = "";
+      const observedWorkingDirectories = /* @__PURE__ */ new Set();
+      let observedPathRefreshPending = false;
       const workingContextAbort = new AbortController();
       const abortWorkingContext = () => workingContextAbort.abort();
       task.authoritySignal.addEventListener("abort", abortWorkingContext, { once: true });
@@ -33781,6 +33791,7 @@ ${attachmentSection}` : prompt;
         activeWorkingContextReport = collectWorkingContext({
           workingDirectory: cwd,
           preparedWorkspace,
+          observedDirectories: [...observedWorkingDirectories].reverse(),
           git,
           env: workingContextEnvironments.git,
           signal: workingContextAbort.signal
@@ -33801,9 +33812,36 @@ ${attachmentSection}` : prompt;
           if (options.required) throw error52;
         }).finally(() => {
           activeWorkingContextReport = null;
+          if (observedPathRefreshPending && !task.cancelledNow() && !workingContextAbort.signal.aborted) {
+            observedPathRefreshPending = false;
+            void reportWorkingContext({ forceReport: true });
+          }
         });
         return activeWorkingContextReport;
       };
+      const observeLocalPaths = (paths) => {
+        if (!git.available) return;
+        let changed = false;
+        for (const path of paths) {
+          if (!path || path.length > 4096) continue;
+          const absolutePath = isAbsolute13(path) ? path : resolve7(cwd, path);
+          const directory = dirname6(absolutePath);
+          observedWorkingDirectories.delete(directory);
+          observedWorkingDirectories.add(directory);
+          while (observedWorkingDirectories.size > 19) {
+            const oldest = observedWorkingDirectories.values().next().value;
+            if (oldest === void 0) break;
+            observedWorkingDirectories.delete(oldest);
+          }
+          changed = true;
+        }
+        if (!changed) return;
+        if (activeWorkingContextReport) {
+          observedPathRefreshPending = true;
+          return;
+        }
+        void reportWorkingContext({ forceReport: true });
+      };
       await reportWorkingContext({
         forcePullRequest: true,
         forceReport: true,
@@ -33888,7 +33926,18 @@ ${attachmentSection}` : prompt;
           clockPaused: () => pendingAsks > 0,
           cancelled: task.cancelled,
           cancelledNow: task.cancelledNow,
-          onStream: (kind, summary, detail) => task.event(kind, summary, detail),
+          onStream: (kind, summary, detail) => {
+            if (detail?.localPaths?.length) observeLocalPaths(detail.localPaths);
+            if (!detail) {
+              task.event(kind, summary);
+              return;
+            }
+            task.event(kind, summary, {
+              ...detail.tool ? { tool: detail.tool } : {},
+              ...detail.parameter ? { parameter: detail.parameter } : {},
+              ...detail.ephemeral === void 0 ? {} : { ephemeral: detail.ephemeral }
+            });
+          },
           createParser: prepared.createParser,
           notFoundMessage: adapter.notFoundMessage,
           cliLabel: adapter.type,
@@ -34197,7 +34246,7 @@ function runCliProcess(options) {
       usage: { inputTokens: 0, outputTokens: 0 }
     });
   }
-  return new Promise((resolve13) => {
+  return new Promise((resolve14) => {
     const platform = options.platform ?? process.platform;
     const containmentGateNonce = options.guardian && platform === "win32" ? randomUUID10() : void 0;
     const child = options.guardian ? spawn8(
@@ -34254,7 +34303,7 @@ function runCliProcess(options) {
       if (settled) return;
       settled = true;
       clearInterval(timer);
-      resolve13(result);
+      resolve14(result);
     };
     const terminate = (result) => {
       if (settled || forcedResult) return;
@@ -34563,7 +34612,7 @@ async function readCodexSessionRuntime(input) {
 }
 var codexCatalogCache = /* @__PURE__ */ new Map();
 async function loadCodexModelCatalog(command, prefixArgs, env) {
-  const output = await new Promise((resolve13) => {
+  const output = await new Promise((resolve14) => {
     const child = spawnCli(command, [...prefixArgs, "debug", "models"], {
       stdio: ["ignore", "pipe", "ignore"],
       windowsHide: true,
@@ -34578,7 +34627,7 @@ async function loadCodexModelCatalog(command, prefixArgs, env) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve13(value);
+      resolve14(value);
     };
     const timer = setTimeout(() => {
       child.kill();
@@ -34681,8 +34730,8 @@ function createRuntimeReporter(input, sessionId) {
 var EFFORT_READ_ATTEMPTS = 5;
 var EFFORT_READ_INTERVAL_MS = 3e3;
 function delay2(ms) {
-  return new Promise((resolve13) => {
-    const timer = setTimeout(resolve13, ms);
+  return new Promise((resolve14) => {
+    const timer = setTimeout(resolve14, ms);
     timer.unref?.();
   });
 }
@@ -34775,10 +34824,12 @@ function createStreamParser(onStream, hooks = {}) {
           const tool = String(block["name"]).slice(0, 200);
           const parameter = String(target).slice(0, 2e3);
           const shortParameter = parameter.slice(0, 100);
+          const localPath = typeof input?.["file_path"] === "string" ? input["file_path"] : null;
           onStream("action", `${tool}${shortParameter ? `: ${shortParameter}` : ""}`, {
             tool,
             ...parameter ? { parameter } : {},
-            ephemeral: true
+            ephemeral: true,
+            ...localPath ? { localPaths: [localPath] } : {}
           });
         }
       }
@@ -35007,8 +35058,8 @@ ${prompt2}` : prompt2;
 var RUNTIME_READ_ATTEMPTS = 5;
 var RUNTIME_READ_INTERVAL_MS = 2e3;
 function delay3(ms) {
-  return new Promise((resolve13) => {
-    const timer = setTimeout(resolve13, ms);
+  return new Promise((resolve14) => {
+    const timer = setTimeout(resolve14, ms);
     timer.unref?.();
   });
 }
@@ -35083,7 +35134,8 @@ function createCodexStreamParser(onStream, hooks = {}) {
       onStream("action", `file_change${parameter ? `: ${parameter.slice(0, 100)}` : ""}`, {
         tool: "file_change",
         ...parameter ? { parameter } : {},
-        ephemeral: true
+        ephemeral: true,
+        ...changes.length > 0 ? { localPaths: changes } : {}
       });
     } else if (itemType === "error") {
       if (typeof item["message"] === "string") lastError = item["message"];
@@ -35178,7 +35230,7 @@ function improveCodexErrorMessage(error52) {
 // src/runners/git-preflight.ts
 import { spawn as spawn9 } from "node:child_process";
 import { realpath as realpath9 } from "node:fs/promises";
-import { isAbsolute as isAbsolute13, resolve as resolve7 } from "node:path";
+import { isAbsolute as isAbsolute14, resolve as resolve8 } from "node:path";
 var OUTPUT_LIMIT = 8192;
 var DEFAULT_TIMEOUT_MS4 = 1e4;
 var VERSION_PATTERN = /^git version [^\r\n]{1,108}$/;
@@ -35194,10 +35246,10 @@ function unavailable(error52, checkedAt, executablePath = null) {
 async function preflightGit(options = {}) {
   const checkedAt = (options.now?.() ?? /* @__PURE__ */ new Date()).toISOString();
   const configured = options.command;
-  if (configured !== void 0 && !isAbsolute13(configured)) {
+  if (configured !== void 0 && !isAbsolute14(configured)) {
     return unavailable("configured git command must be an absolute file", checkedAt);
   }
-  const trustedCwd = await realpath9(resolve7(options.trustedCwd ?? process.cwd())).catch(() => null);
+  const trustedCwd = await realpath9(resolve8(options.trustedCwd ?? process.cwd())).catch(() => null);
   if (!trustedCwd)
     return unavailable("Host-owned git preflight directory is unavailable", checkedAt);
   const executablePath = await resolveTrustedCliCommand(configured ?? "git", {
@@ -35419,7 +35471,7 @@ function parseAuth(result) {
   return "unknown";
 }
 function run2(command, args) {
-  return new Promise((resolve13) => {
+  return new Promise((resolve14) => {
     const child = spawnCli(command, args, {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: true
@@ -35435,7 +35487,7 @@ function run2(command, args) {
       if (settled) return;
       settled = true;
       clearTimeout(timeout);
-      resolve13(result);
+      resolve14(result);
     };
     const timeout = setTimeout(() => {
       child.kill();
@@ -35451,7 +35503,7 @@ import { spawn as spawn10 } from "node:child_process";
 import { constants as constants2 } from "node:fs";
 import { access as access4, chmod as chmod7, mkdir as mkdir12, open as open6, rename as rename5, rm as rm7 } from "node:fs/promises";
 import { homedir as homedir7, userInfo } from "node:os";
-import { basename as basename3, dirname as dirname7, join as join17, relative as relative8, resolve as resolve8, sep as sep4 } from "node:path";
+import { basename as basename3, dirname as dirname7, join as join17, relative as relative8, resolve as resolve9, sep as sep4 } from "node:path";
 var SERVICE_NAME = "zixt-host.service";
 var SYSTEM_SERVICE_COMMAND_TIMEOUT_MS = 7e4;
 var SERVICE_STABILITY_DELAY_MS = 2e3;
@@ -35479,7 +35531,7 @@ function boundedAppend(current, chunk) {
 }
 async function defaultRunCommand(command, args) {
   const commandEnvironment3 = systemServiceCommandEnvironment();
-  return new Promise((resolve13) => {
+  return new Promise((resolve14) => {
     const child = spawn10(command, [...args], {
       stdio: ["ignore", "pipe", "pipe"],
       env: commandEnvironment3,
@@ -35493,7 +35545,7 @@ async function defaultRunCommand(command, args) {
       if (settled) return;
       settled = true;
       if (timer) clearTimeout(timer);
-      resolve13(result);
+      resolve14(result);
     };
     child.stdout?.on("data", (chunk) => {
       stdout = boundedAppend(stdout, chunk);
@@ -35549,8 +35601,8 @@ async function defaultSyncDirectory(path) {
 async function ensureDirectory(path, mode, syncDirectory7) {
   const firstCreated = await mkdir12(path, { recursive: true, mode });
   if (!firstCreated) return;
-  const first = resolve8(firstCreated);
-  const target = resolve8(path);
+  const first = resolve9(firstCreated);
+  const target = resolve9(path);
   await syncDirectory7(dirname7(first));
   let current = first;
   const descendants = relative8(first, target);
@@ -35624,7 +35676,7 @@ async function installLinuxService(options) {
   const resolveCommand = options.resolveCommand ?? defaultResolveCommand;
   const run3 = options.runCommand ?? defaultRunCommand;
   const syncDirectory7 = options.syncDirectory ?? defaultSyncDirectory;
-  const stabilityDelay = options.delay ?? ((ms) => new Promise((resolve13) => setTimeout(resolve13, ms)));
+  const stabilityDelay = options.delay ?? ((ms) => new Promise((resolve14) => setTimeout(resolve14, ms)));
   const [systemctl, loginctl] = await Promise.all([
     resolveCommand("systemctl"),
     resolveCommand("loginctl")
@@ -35739,7 +35791,7 @@ import { spawn as spawn11 } from "node:child_process";
 import { constants as constants3 } from "node:fs";
 import { access as access5, chmod as chmod8, mkdir as mkdir13, open as open7, rename as rename6, rm as rm8 } from "node:fs/promises";
 import { homedir as homedir8, userInfo as userInfo2 } from "node:os";
-import { basename as basename4, dirname as dirname8, join as join18, relative as relative9, resolve as resolve9, sep as sep5 } from "node:path";
+import { basename as basename4, dirname as dirname8, join as join18, relative as relative9, resolve as resolve10, sep as sep5 } from "node:path";
 var LAUNCH_AGENT_LABEL = "ai.zixt.host";
 var SERVICE_STABILITY_DELAY_MS2 = 2e3;
 var COMMAND_TIMEOUT_MS2 = 7e4;
@@ -35765,8 +35817,8 @@ async function syncDirectory4(path) {
 async function ensureDirectory2(path, sync) {
   const firstCreated = await mkdir13(path, { recursive: true, mode: 448 });
   if (!firstCreated) return;
-  const first = resolve9(firstCreated);
-  const target = resolve9(path);
+  const first = resolve10(firstCreated);
+  const target = resolve10(path);
   await sync(dirname8(first));
   let current = first;
   for (const part of relative9(first, target).split(sep5).filter(Boolean)) {
@@ -35970,7 +36022,7 @@ import { spawn as spawn12 } from "node:child_process";
 import { constants as constants4 } from "node:fs";
 import { access as access6, mkdir as mkdir14, open as open8, readFile as readFile8, rename as rename7, rm as rm9 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
-import { basename as basename5, dirname as dirname9, isAbsolute as isAbsolute14, join as join19, relative as relative10, resolve as resolve10, sep as sep6 } from "node:path";
+import { basename as basename5, dirname as dirname9, isAbsolute as isAbsolute15, join as join19, relative as relative10, resolve as resolve11, sep as sep6 } from "node:path";
 var TASK_NAME = "Zixt Host";
 var COMMAND_TIMEOUT_MS3 = 7e4;
 var SERVICE_STABILITY_DELAY_MS3 = 2e3;
@@ -35998,8 +36050,8 @@ async function syncDirectory5(path) {
 async function ensureDirectory3(path, sync) {
   const firstCreated = await mkdir14(path, { recursive: true, mode: 448 });
   if (!firstCreated) return;
-  const first = resolve10(firstCreated);
-  const target = resolve10(path);
+  const first = resolve11(firstCreated);
+  const target = resolve11(path);
   await sync(dirname9(first));
   let current = first;
   for (const part of relative10(first, target).split(sep6).filter(Boolean)) {
@@ -36064,7 +36116,7 @@ async function runChild(command, args, env, input) {
 }
 async function defaultResolveCommand3(name, env) {
   const root = env.SYSTEMROOT ?? env.WINDIR;
-  if (!root || !isAbsolute14(root)) return null;
+  if (!root || !isAbsolute15(root)) return null;
   const candidate = name === "powershell" ? join19(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : join19(root, "System32", `${name}.exe`);
   return access6(candidate, constants4.X_OK).then(
     () => candidate,
@@ -36196,7 +36248,7 @@ async function installWindowsService(options) {
   const env = options.env ?? process.env;
   const home = options.home ?? homedir9();
   const localAppData = options.localAppData ?? env.LOCALAPPDATA;
-  if (!localAppData || !isAbsolute14(localAppData)) {
+  if (!localAppData || !isAbsolute15(localAppData)) {
     throw new Error("Windows local application data path is unavailable.");
   }
   const token2 = oneLine3(options.token, "pairing code");
@@ -36309,7 +36361,7 @@ async function installSystemService(options) {
 // src/terminal-outcomes.ts
 import { chmod as chmod9, lstat as lstat10, mkdir as mkdir15, open as open9, readdir as readdir5, readFile as readFile9, rename as rename8, rm as rm10 } from "node:fs/promises";
 import { homedir as homedir10 } from "node:os";
-import { dirname as dirname10, join as join20, relative as relative11, resolve as resolve11, sep as sep7 } from "node:path";
+import { dirname as dirname10, join as join20, relative as relative11, resolve as resolve12, sep as sep7 } from "node:path";
 var DIRECTORY_MODE5 = 448;
 var FILE_MODE4 = 384;
 var MAX_OUTCOME_BYTES = 4 * 1024 * 1024;
@@ -36337,8 +36389,8 @@ async function syncDirectory6(root) {
 async function requirePrivateRoot(root, sync = syncDirectory6) {
   const firstCreated = await mkdir15(root, { recursive: true, mode: DIRECTORY_MODE5 });
   if (firstCreated) {
-    const first = resolve11(firstCreated);
-    const target = resolve11(root);
+    const first = resolve12(firstCreated);
+    const target = resolve12(root);
     await sync(dirname10(first));
     let current = first;
     for (const part of relative11(first, target).split(sep7).filter(Boolean)) {
@@ -36589,13 +36641,13 @@ function createHostLogger(options = {}) {
 }
 
 // src/demo-state.ts
-import { isAbsolute as isAbsolute15, join as join21, parse as parse3, resolve as resolve12 } from "node:path";
+import { isAbsolute as isAbsolute16, join as join21, parse as parse3, resolve as resolve13 } from "node:path";
 var DEMO_STATE_ROOT_ENV = "ZIXT_DEMO_STATE_ROOT";
 function resolveDemoHostStatePaths(env = process.env) {
   const configured = env.ZIXT_RUNNER === "demo" ? env[DEMO_STATE_ROOT_ENV] : void 0;
   if (!configured) return null;
-  const root = resolve12(configured);
-  if (!isAbsolute15(configured) || root === parse3(root).root) {
+  const root = resolve13(configured);
+  if (!isAbsolute16(configured) || root === parse3(root).root) {
     throw new Error(`${DEMO_STATE_ROOT_ENV} must be a dedicated absolute directory`);
   }
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.22",
+  "version": "0.0.24",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",