@zixt/host 0.0.80 → 0.0.82

package/dist/index.js

@@ -16,22 +16,22 @@ import { fstatSync } from "node:fs";
 import {
   access as access2,
   lstat as lstat5,
-  mkdir as mkdir4,
+  mkdir as mkdir5,
   open as open4,
-  readFile as readFile6,
+  readFile as readFile7,
   readlink,
-  readdir as readdir3,
+  readdir as readdir4,
   rename as rename3,
-  rm as rm4,
+  rm as rm5,
   symlink
 } from "node:fs/promises";
-import { basename as basename3, dirname as dirname4, isAbsolute as isAbsolute8, join as join7, relative as relative4, resolve as resolve5, sep as sep4 } from "node:path";
-import { homedir as homedir2 } from "node:os";
+import { basename as basename3, dirname as dirname4, isAbsolute as isAbsolute9, join as join8, relative as relative4, resolve as resolve5, sep as sep4 } from "node:path";
+import { homedir as homedir3 } from "node:os";
 
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.80",
+  version: "0.0.82",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -14661,6 +14661,8 @@ var ID_PREFIXES = {
   conversationEvent: "cve",
   /** One human-confirmed integration action prepared by the Manager. */
   managerIntegrationAction: "mia",
+  /** One Manager-prepared secure Credential entry card (MG-17). */
+  managerCredentialRequest: "mcr",
   /** One Manager inference call's token-metering row (MG-8). */
   managerUsage: "mgu",
   /** One ordered Manager reply awaiting Slack delivery. */
@@ -14712,6 +14714,10 @@ var ManagerIntegrationActionId = idSchema(
   ID_PREFIXES.managerIntegrationAction,
   "Manager integration action id"
 );
+var ManagerCredentialRequestId = idSchema(
+  ID_PREFIXES.managerCredentialRequest,
+  "Manager credential request id"
+);
 var ManagerEmailInboxId = idSchema(
   ID_PREFIXES.managerEmailInbox,
   "Manager email inbox id"
@@ -18331,7 +18337,9 @@ var ConversationEventProjection = external_exports.discriminatedUnion("kind", [
     taskId: TaskId.nullable(),
     agentId: AgentId.nullable(),
     /** Present only for a confirmation card; OAuth authority never appears here. */
-    integrationActionId: ManagerIntegrationActionId.nullable().optional()
+    integrationActionId: ManagerIntegrationActionId.nullable().optional(),
+    /** Present only for a secure Credential entry card; never a value (MG-17). */
+    credentialRequestId: ManagerCredentialRequestId.nullable().optional()
   }).strict(),
   /** A mirrored child-Task event: what the teammate wrote or became. */
   external_exports.object({
@@ -18397,6 +18405,48 @@ var ManagerIntegrationActionResponse = external_exports.object({
   action: ManagerIntegrationActionProjection,
   oauth: ManagerIntegrationOAuthStart.nullable()
 }).strict();
+var ManagerCredentialRequestStatus = external_exports.enum([
+  "awaiting_entry",
+  "storing",
+  "stored",
+  "cancelled",
+  "expired",
+  "failed"
+]);
+var ManagerCredentialRequestProjection = external_exports.object({
+  id: ManagerCredentialRequestId,
+  conversationId: ConversationId,
+  /** The Credential name, exactly as it will appear in Credentials. */
+  name: external_exports.string().min(1).max(120),
+  /** `env` reaches a Task as an environment variable; `web_login` fills a sign-in form. */
+  kind: external_exports.enum(["env", "web_login"]),
+  /** Saved as the Credential's description so teammates know what they hold. */
+  purpose: external_exports.string().max(500).nullable(),
+  scope: external_exports.enum(["organization", "teammates"]),
+  /** Named teammates for a teammate-scoped Credential; empty for organization scope. */
+  teammates: external_exports.array(external_exports.object({ agentId: AgentId, name: external_exports.string().min(1).max(200) }).strict()).max(100),
+  /** Suggested sign-in page for a website login; the person can correct it. */
+  loginUrl: external_exports.url().max(2e3).nullable(),
+  status: ManagerCredentialRequestStatus,
+  outcome: external_exports.string().max(1e3).nullable(),
+  createdAt: external_exports.string(),
+  expiresAt: external_exports.string()
+}).strict();
+var SubmitManagerCredentialRequest = external_exports.object({
+  requestId: external_exports.uuid(),
+  /** env kind. */
+  value: external_exports.string().min(1).max(1e4).optional(),
+  /** web_login kind. */
+  webLogin: WebLoginValue.optional()
+}).strict().superRefine((request, ctx) => {
+  if (request.value === void 0 === (request.webLogin === void 0)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["value"],
+      message: "submit exactly one of value or webLogin, matching the requested kind"
+    });
+  }
+});
 var NonEmptyTaskRunnerSelection = TaskRunnerSelection.refine(
   (selection) => selection.type !== void 0 || selection.model !== void 0 || selection.effort !== void 0,
   "choose at least one runtime preference"
@@ -20892,6 +20942,7 @@ var WORKER_WATCHDOG_FILE_ENV = "ZIXT_HOST_WORKER_WATCHDOG_FILE";
 var WORKER_WATCHDOG_BOUNDARY_PID_ENV = "ZIXT_MANAGED_PROCESS_BOUNDARY_PID";
 var WORKER_WATCHDOG_MESSAGE = "zixt.host.worker-heartbeat.v1";
 var WORKER_READINESS_MESSAGE = "zixt.host.worker-readiness.v1";
+var WORKER_SHUTDOWN_MESSAGE = "zixt.host.worker-shutdown.v1";
 var WORKER_HEARTBEAT_MS = 1e3;
 var SAFE_NONCE = /^[A-Za-z0-9_-]{16,200}$/;
 function createWorkerWatchdogLaunch(ownershipDirectory) {
@@ -20917,10 +20968,16 @@ function isWorkerReadinessMilestone(value, launch, pid) {
   const message = value;
   return message.type === WORKER_READINESS_MESSAGE && message.nonce === launch.nonce && typeof message.pid === "number" && Number.isSafeInteger(message.pid) && message.pid === pid && typeof message.sequence === "number" && Number.isSafeInteger(message.sequence) && message.sequence > 0 && typeof message.heartbeatSequence === "number" && Number.isSafeInteger(message.heartbeatSequence) && message.heartbeatSequence > 0;
 }
+function isWorkerShutdownIntent(value, launch, pid) {
+  if (!value || typeof value !== "object") return false;
+  const message = value;
+  return message.type === WORKER_SHUTDOWN_MESSAGE && message.nonce === launch.nonce && typeof message.pid === "number" && Number.isSafeInteger(message.pid) && message.pid === pid && typeof message.sequence === "number" && Number.isSafeInteger(message.sequence) && message.sequence > 0 && typeof message.exitCode === "number" && Number.isSafeInteger(message.exitCode) && message.exitCode >= 0 && message.exitCode <= 255 && typeof message.activeTasks === "number" && Number.isSafeInteger(message.activeTasks) && message.activeTasks >= 0;
+}
 var heartbeatActive = false;
 var heartbeatUsesIpc = false;
 var heartbeatHasDurableOwner = false;
 var readinessReporter = null;
+var shutdownReporter = null;
 function createWorkerWatchdogSendDrain() {
   let pending = 0;
   const drained = [];
@@ -20957,6 +21014,7 @@ function startWorkerWatchdogHeartbeat(env = process.env, argv = process.argv.sli
     heartbeatUsesIpc = false;
     heartbeatHasDurableOwner = false;
     readinessReporter = null;
+    shutdownReporter = null;
     return { active: false, argv: ownership.argv, async stop() {
     } };
   }
@@ -20968,6 +21026,7 @@ function startWorkerWatchdogHeartbeat(env = process.env, argv = process.argv.sli
     heartbeatUsesIpc = false;
     heartbeatHasDurableOwner = false;
     readinessReporter = null;
+    shutdownReporter = null;
     return { active: false, argv: ownership.argv, async stop() {
     } };
   }
@@ -20979,6 +21038,7 @@ function startWorkerWatchdogHeartbeat(env = process.env, argv = process.argv.sli
     heartbeatUsesIpc = false;
     heartbeatHasDurableOwner = false;
     readinessReporter = null;
+    shutdownReporter = null;
     return { active: false, argv: ownership.argv, async stop() {
     } };
   }
@@ -20987,6 +21047,7 @@ function startWorkerWatchdogHeartbeat(env = process.env, argv = process.argv.sli
     heartbeatUsesIpc = false;
     heartbeatHasDurableOwner = false;
     readinessReporter = null;
+    shutdownReporter = null;
     return { active: false, argv: ownership.argv, async stop() {
     } };
   }
@@ -21019,6 +21080,32 @@ function startWorkerWatchdogHeartbeat(env = process.env, argv = process.argv.sli
       return false;
     }
   };
+  let shutdownSequence = 0;
+  const reportShutdown = (exitCode, activeTasks) => {
+    if (stopped || !ipc || sequence === 0 || !process.connected || typeof process.send !== "function") {
+      return false;
+    }
+    const message = {
+      type: WORKER_SHUTDOWN_MESSAGE,
+      nonce,
+      pid: boundaryPid,
+      sequence: ++shutdownSequence,
+      exitCode,
+      activeTasks
+    };
+    const sendComplete = sendDrain.begin();
+    try {
+      process.send(message, (error52) => {
+        sendComplete();
+        if (error52) stop();
+      });
+      return true;
+    } catch {
+      sendComplete();
+      stop();
+      return false;
+    }
+  };
   const stop = async () => {
     if (!stopped) {
       stopped = true;
@@ -21026,6 +21113,7 @@ function startWorkerWatchdogHeartbeat(env = process.env, argv = process.argv.sli
       heartbeatUsesIpc = false;
       heartbeatHasDurableOwner = false;
       if (readinessReporter === reportReadiness) readinessReporter = null;
+      if (shutdownReporter === reportShutdown) shutdownReporter = null;
       clearInterval(timer);
       process.off("disconnect", onDisconnect);
     }
@@ -21079,11 +21167,15 @@ function startWorkerWatchdogHeartbeat(env = process.env, argv = process.argv.sli
   heartbeatHasDurableOwner = ipc;
   heartbeatActive = true;
   readinessReporter = ipc ? reportReadiness : null;
+  shutdownReporter = ipc ? reportShutdown : null;
   return { active: true, argv: ownership.argv, stop };
 }
 function reportWorkerReadiness() {
   return readinessReporter?.() ?? false;
 }
+function reportWorkerShutdown(exitCode, activeTasks) {
+  return shutdownReporter?.(exitCode, activeTasks) ?? false;
+}
 function workerWatchdogIsActive() {
   return heartbeatActive && heartbeatHasDurableOwner && heartbeatUsesIpc && process.connected;
 }
@@ -24042,27 +24134,135 @@ function createReleaseStateStore(root) {
   };
 }
 
+// src/worker-diagnostics.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { mkdir as mkdir3, readdir as readdir2, readFile as readFile5, rm as rm3, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { isAbsolute as isAbsolute6, join as join6 } from "node:path";
+var WORKER_DIAGNOSTICS_DIR_ENV = "ZIXT_HOST_DIAGNOSTICS_DIR";
+var RETAINED_RECORDS = 20;
+var STDERR_TAIL_LINES = 40;
+var STDERR_LINE_LIMIT = 800;
+var RECORD_TTL_MS = 7 * 24 * 60 * 6e4;
+var RECORD_FILE = /^[0-9a-f-]{36}\.json$/;
+function defaultWorkerDiagnosticsRoot() {
+  return join6(homedir(), ".zixt", "host-diagnostics");
+}
+function configuredWorkerDiagnosticsRoot(env = process.env) {
+  const configured = env[WORKER_DIAGNOSTICS_DIR_ENV];
+  return typeof configured === "string" && isAbsolute6(configured) ? configured : null;
+}
+function boundedStderr(lines) {
+  return lines.slice(-STDERR_TAIL_LINES).map(
+    (line) => line.length > STDERR_LINE_LIMIT ? `${line.slice(0, STDERR_LINE_LIMIT)}\u2026` : line
+  );
+}
+async function recordWorkerExit(root, record2) {
+  try {
+    await mkdir3(root, { recursive: true, mode: 448 });
+    const stored = {
+      ...record2,
+      schema: 1,
+      stderr: boundedStderr(record2.stderr)
+    };
+    await writeFile(join6(root, `${randomUUID2()}.json`), JSON.stringify(stored), {
+      encoding: "utf8",
+      mode: 384
+    });
+    await pruneWorkerExits(root, Date.parse(record2.at));
+    return true;
+  } catch {
+    return false;
+  }
+}
+function parseRecord2(raw) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!value || typeof value !== "object") return null;
+  const record2 = value;
+  if (record2.schema !== 1 || typeof record2.at !== "string" || !Number.isFinite(Date.parse(record2.at)))
+    return null;
+  if (!Array.isArray(record2.stderr) || record2.stderr.some((line) => typeof line !== "string")) {
+    return null;
+  }
+  return { ...record2, stderr: boundedStderr(record2.stderr) };
+}
+async function readWorkerExits(root) {
+  let names;
+  try {
+    names = await readdir2(root);
+  } catch {
+    return [];
+  }
+  const stored = [];
+  for (const name of names) {
+    if (!RECORD_FILE.test(name)) continue;
+    const file2 = join6(root, name);
+    try {
+      const record2 = parseRecord2(await readFile5(file2, "utf8"));
+      if (record2) stored.push({ file: file2, record: record2 });
+    } catch {
+    }
+  }
+  return stored.sort((a, b) => Date.parse(a.record.at) - Date.parse(b.record.at));
+}
+async function forgetWorkerExits(files) {
+  await Promise.all(files.map((file2) => rm3(file2, { force: true }).catch(() => {
+  })));
+}
+async function pruneWorkerExits(root, nowMs) {
+  const stored = await readWorkerExits(root);
+  const expired = stored.filter(({ record: record2 }) => nowMs - Date.parse(record2.at) > RECORD_TTL_MS);
+  const surplus = stored.filter((entry) => !expired.includes(entry)).slice(0, Math.max(0, stored.length - expired.length - RETAINED_RECORDS));
+  await forgetWorkerExits([...expired, ...surplus].map(({ file: file2 }) => file2));
+}
+var CONTAINMENT_SUMMARY = {
+  watchdog_liveness: "stopped answering the supervisor and was terminated",
+  watchdog_shutdown_deadline: "did not finish stopping and was terminated",
+  probation_readiness: "did not prove cloud readiness during probation",
+  probation_commit: "could not commit its probation evidence"
+};
+function describeWorkerExit(record2) {
+  return {
+    summary: record2.containment ? CONTAINMENT_SUMMARY[record2.containment] : record2.signal ? `was killed by ${record2.signal}` : `exited unexpectedly with code ${record2.code ?? "unknown"}`,
+    context: {
+      ...record2.version ? { version: record2.version } : {},
+      ...record2.pid === null ? {} : { pid: record2.pid },
+      exit: record2.signal ?? (record2.code === null ? "unknown" : String(record2.code)),
+      uptime: `${Math.round(record2.uptimeMs / 100) / 10}s`,
+      announced: record2.announcedExitCode === null ? "none" : record2.announcedExitCode === UPDATE_EXIT_CODE ? `update (${record2.announcedExitCode})` : String(record2.announcedExitCode),
+      heartbeats: record2.heartbeats,
+      readiness: record2.readinessMilestones,
+      ...record2.msSinceHeartbeat === null ? {} : { sinceHeartbeat: `${record2.msSinceHeartbeat}ms` }
+    }
+  };
+}
+
 // src/runners/run-artifacts.ts
 import { spawn as spawn4 } from "node:child_process";
 import {
   chmod as chmod2,
   lstat as lstat4,
-  mkdir as mkdir3,
+  mkdir as mkdir4,
   open as open3,
-  readdir as readdir2,
-  readFile as readFile5,
+  readdir as readdir3,
+  readFile as readFile6,
   realpath as realpath3,
   rename as rename2,
-  rm as rm3,
-  writeFile
+  rm as rm4,
+  writeFile as writeFile2
 } from "node:fs/promises";
-import { homedir } from "node:os";
-import { dirname as dirname3, isAbsolute as isAbsolute7, join as join6, relative as relative3, resolve as resolve4, sep as sep3, win32 as win322 } from "node:path";
+import { homedir as homedir2 } from "node:os";
+import { dirname as dirname3, isAbsolute as isAbsolute8, join as join7, relative as relative3, resolve as resolve4, sep as sep3, win32 as win322 } from "node:path";
 
 // src/windows-job.ts
 import { spawn as spawn3 } from "node:child_process";
-import { randomUUID as randomUUID2 } from "node:crypto";
-import { isAbsolute as isAbsolute6, win32 } from "node:path";
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { isAbsolute as isAbsolute7, win32 } from "node:path";
 var WINDOWS_CONTAINMENT_GATE_ENV = "ZIXT_WINDOWS_CONTAINMENT_GATE";
 var WINDOWS_CONTAINMENT_GATE_PREFIX = "__ZIXT_WINDOWS_CONTAINMENT_READY__";
 var WINDOWS_POST_CONTAINMENT_CWD_ENV = "ZIXT_WINDOWS_POST_CONTAINMENT_CWD";
@@ -24373,7 +24573,7 @@ async function createWindowsJobContainment(pid, options) {
     throw new Error("Windows Job Object timeout is invalid");
   }
   const env = options.env ?? process.env;
-  const nonce = randomUUID2();
+  const nonce = randomUUID3();
   const encodedSource = encodedPowershellSource(WINDOWS_JOB_HELPER_SOURCE);
   const helper = options.spawnHelper ? options.spawnHelper(nonce, encodedSource) : spawn3(
     options.powershellCommand ?? defaultPowershellCommand(env),
@@ -24558,7 +24758,7 @@ async function awaitWindowsContainmentGate(env = process.env, input = process.st
       const postContainmentCwd = env[WINDOWS_POST_CONTAINMENT_CWD_ENV];
       delete env[WINDOWS_POST_CONTAINMENT_CWD_ENV];
       if (postContainmentCwd !== void 0) {
-        if (!isAbsolute6(postContainmentCwd)) return finish(false);
+        if (!isAbsolute7(postContainmentCwd)) return finish(false);
         try {
           process.chdir(postContainmentCwd);
         } catch {
@@ -24796,7 +24996,7 @@ foreach ($path in $paths) {
 }
 `;
 function defaultRunArtifactRoot() {
-  return join6(homedir(), ".zixt", "run-artifacts");
+  return join7(homedir2(), ".zixt", "run-artifacts");
 }
 function requireSafeSegment(value, field) {
   if (!SAFE_SEGMENT.test(value)) {
@@ -24808,7 +25008,7 @@ function isMissing(error52) {
 }
 function assertBelow(parent, child) {
   const path = relative3(parent, child);
-  const escapes = path === "" || path === ".." || path.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute7(path);
+  const escapes = path === "" || path === ".." || path.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute8(path);
   if (escapes) throw new Error("run artifact path escapes its private root");
 }
 async function requireRealDirectory(path, label) {
@@ -24843,7 +25043,7 @@ async function prepareRoot(root) {
   const absolute = resolve4(root);
   let realProfile;
   if (process.platform === "win32") {
-    const profile = resolve4(homedir());
+    const profile = resolve4(homedir2());
     assertWindowsProfileBoundary(profile, absolute);
     await rejectWindowsSymlinkAncestors(profile, absolute);
     realProfile = await realpath3(profile);
@@ -24852,7 +25052,7 @@ async function prepareRoot(root) {
     await lstat4(absolute);
   } catch (error52) {
     if (!isMissing(error52)) throw error52;
-    await mkdir3(absolute, { recursive: true, mode: DIRECTORY_MODE });
+    await mkdir4(absolute, { recursive: true, mode: DIRECTORY_MODE });
   }
   const real = await requireRealDirectory(absolute, "run artifact root");
   if (realProfile) assertWindowsProfileBoundary(realProfile, real);
@@ -24860,14 +25060,14 @@ async function prepareRoot(root) {
   return real;
 }
 async function prepareAgentRoot(root, agentId) {
-  const path = join6(root, agentId);
+  const path = join7(root, agentId);
   assertBelow(root, path);
   try {
     await lstat4(path);
   } catch (error52) {
     if (!isMissing(error52)) throw error52;
     try {
-      await mkdir3(path, { mode: DIRECTORY_MODE });
+      await mkdir4(path, { mode: DIRECTORY_MODE });
     } catch (mkdirError) {
       if (mkdirError.code !== "EEXIST") throw mkdirError;
     }
@@ -24883,7 +25083,7 @@ async function lockDownWindowsDirectories(paths) {
   if (!windowsRoot || !win322.isAbsolute(windowsRoot)) {
     throw new Error("private Windows run-artifact ACL authority is unavailable");
   }
-  const powershell = join6(windowsRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+  const powershell = join7(windowsRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
   const encoded = Buffer.from(WINDOWS_PRIVATE_DACL_SCRIPT, "utf16le").toString("base64");
   await new Promise((resolvePromise, reject3) => {
     const helper = spawn4(
@@ -24925,16 +25125,16 @@ async function lockDownWindowsDirectories(paths) {
   });
 }
 async function createPrivateDirectory(parent, name) {
-  const path = join6(parent, name);
+  const path = join7(parent, name);
   assertBelow(parent, path);
-  await mkdir3(path, { mode: DIRECTORY_MODE });
+  await mkdir4(path, { mode: DIRECTORY_MODE });
   await chmod2(path, DIRECTORY_MODE);
   const real = await realpath3(path);
   assertBelow(parent, real);
   return real;
 }
 async function writePrivateFile(path, content) {
-  await writeFile(path, content, { flag: "wx", mode: FILE_MODE });
+  await writeFile2(path, content, { flag: "wx", mode: FILE_MODE });
   await chmod2(path, FILE_MODE);
 }
 function quotePosix(value) {
@@ -24954,24 +25154,24 @@ async function createRunArtifacts(input) {
   requireSafeSegment(input.agentId, "agentId");
   requireSafeSegment(input.runToken, "runToken");
   const root = await prepareRoot(input.root);
-  const removeTree = input.removeTree ?? ((path) => rm3(path, { recursive: true, force: true }));
+  const removeTree = input.removeTree ?? ((path) => rm4(path, { recursive: true, force: true }));
   const cleanupRetryDelayMs = input.cleanupRetryDelayMs ?? CLEANUP_RETRY_DELAY_MS;
   const agentRoot = await prepareAgentRoot(root, input.agentId);
   await lockDownWindowsDirectories([root, agentRoot]);
-  const runRoot = join6(agentRoot, input.runToken);
+  const runRoot = join7(agentRoot, input.runToken);
   assertBelow(agentRoot, runRoot);
   try {
-    await mkdir3(runRoot, { mode: DIRECTORY_MODE });
+    await mkdir4(runRoot, { mode: DIRECTORY_MODE });
     await chmod2(runRoot, DIRECTORY_MODE);
     const realRunRoot = await realpath3(runRoot);
     assertBelow(agentRoot, realRunRoot);
     const emptyGithubConfigDirectory = await createPrivateDirectory(realRunRoot, "gh-config");
     const emptyGitHooksDirectory = await createPrivateDirectory(realRunRoot, "git-hooks");
     const gitBridgesDirectory = await createPrivateDirectory(realRunRoot, "git-bridges");
-    const denySshScript = join6(realRunRoot, "deny-ssh.cjs");
-    const runnerWrapperScript = join6(realRunRoot, "runner-wrapper.cjs");
-    const systemPromptPath = join6(realRunRoot, "system-prompt.txt");
-    const mcpConfigPath = join6(realRunRoot, "mcp.json");
+    const denySshScript = join7(realRunRoot, "deny-ssh.cjs");
+    const runnerWrapperScript = join7(realRunRoot, "runner-wrapper.cjs");
+    const systemPromptPath = join7(realRunRoot, "system-prompt.txt");
+    const mcpConfigPath = join7(realRunRoot, "mcp.json");
     await writePrivateFile(denySshScript, "process.exitCode = 127;");
     await writePrivateFile(runnerWrapperScript, RUNNER_GUARDIAN);
     return {
@@ -25016,7 +25216,7 @@ async function sweepOrphanedRunArtifacts(root) {
   const absolute = resolve4(root);
   let realProfile;
   if (process.platform === "win32") {
-    const profile = resolve4(homedir());
+    const profile = resolve4(homedir2());
     assertWindowsProfileBoundary(profile, absolute);
     await rejectWindowsSymlinkAncestors(profile, absolute);
     realProfile = await realpath3(profile);
@@ -25031,24 +25231,24 @@ async function sweepOrphanedRunArtifacts(root) {
   if (realProfile) assertWindowsProfileBoundary(realProfile, realRoot);
   await chmod2(realRoot, DIRECTORY_MODE);
   await lockDownWindowsDirectories([realRoot]);
-  const agents = await readdir2(realRoot, { withFileTypes: true });
+  const agents = await readdir3(realRoot, { withFileTypes: true });
   let removed = 0;
   for (const agent of agents) {
     if (!SAFE_SEGMENT.test(agent.name) || !agent.isDirectory() || agent.isSymbolicLink()) continue;
-    const agentPath = join6(realRoot, agent.name);
-    const runs = await readdir2(agentPath, { withFileTypes: true });
+    const agentPath = join7(realRoot, agent.name);
+    const runs = await readdir3(agentPath, { withFileTypes: true });
     for (const run3 of runs) {
       if (!SAFE_SEGMENT.test(run3.name) || !run3.isDirectory() || run3.isSymbolicLink()) continue;
-      const runPath = join6(agentPath, run3.name);
+      const runPath = join7(agentPath, run3.name);
       assertBelow(agentPath, runPath);
-      await rm3(runPath, { recursive: true, force: true });
+      await rm4(runPath, { recursive: true, force: true });
       removed++;
     }
   }
   return removed;
 }
 function defaultRunRegistryRoot() {
-  return join6(homedir(), ".zixt", "run-registry");
+  return join7(homedir2(), ".zixt", "run-registry");
 }
 async function terminateRecordedRunProcesses(registryRoot = defaultRunRegistryRoot(), terminate = terminateRecordedProcessTree) {
   const entries = await readRecordedRunAssignmentEntriesStrict(registryRoot);
@@ -25074,7 +25274,7 @@ async function syncRunRegistryDirectory(path) {
   }
 }
 async function ensureDurableRunRegistryRoot(registryRoot, syncDirectory8) {
-  const firstCreated = await mkdir3(registryRoot, { recursive: true, mode: DIRECTORY_MODE });
+  const firstCreated = await mkdir4(registryRoot, { recursive: true, mode: DIRECTORY_MODE });
   if (firstCreated && process.platform !== "win32") {
     const first = resolve4(firstCreated);
     const target = resolve4(registryRoot);
@@ -25082,15 +25282,15 @@ async function ensureDurableRunRegistryRoot(registryRoot, syncDirectory8) {
     let current = first;
     for (const part of relative3(first, target).split(sep3).filter(Boolean)) {
       await syncDirectory8(current);
-      current = join6(current, part);
+      current = join7(current, part);
     }
   }
   await chmod2(registryRoot, DIRECTORY_MODE);
 }
 async function recordRunAssignment(runToken, record2, registryRoot = defaultRunRegistryRoot(), options = {}) {
   if (!SAFE_SEGMENT.test(runToken)) return false;
-  const destination = join6(registryRoot, `${runToken}.json`);
-  const temporary = join6(registryRoot, `.${runToken}.${process.pid}.${Date.now()}.tmp`);
+  const destination = join7(registryRoot, `${runToken}.json`);
+  const temporary = join7(registryRoot, `.${runToken}.${process.pid}.${Date.now()}.tmp`);
   let handle;
   try {
     const syncDirectory8 = options.syncDirectory ?? syncRunRegistryDirectory;
@@ -25110,7 +25310,7 @@ async function recordRunAssignment(runToken, record2, registryRoot = defaultRunR
   } finally {
     await handle?.close().catch(() => {
     });
-    await rm3(temporary, { force: true }).catch(() => {
+    await rm4(temporary, { force: true }).catch(() => {
     });
   }
 }
@@ -25122,7 +25322,7 @@ async function forgetRunAssignment(runToken, registryRoot = defaultRunRegistryRo
   if (retainingAssignments) return;
   if (!SAFE_SEGMENT.test(runToken)) return;
   try {
-    await rm3(join6(registryRoot, `${runToken}.json`), { force: true });
+    await rm4(join7(registryRoot, `${runToken}.json`), { force: true });
   } catch {
   }
 }
@@ -25156,7 +25356,7 @@ function parseAssignment(text) {
 async function readRecordedRunAssignmentEntries(registryRoot = defaultRunRegistryRoot()) {
   let entries;
   try {
-    entries = await readdir2(registryRoot, { withFileTypes: true });
+    entries = await readdir3(registryRoot, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -25167,7 +25367,7 @@ async function readRecordedRunAssignmentEntries(registryRoot = defaultRunRegistr
     if (!SAFE_SEGMENT.test(runToken)) continue;
     let text;
     try {
-      text = await readFile5(join6(registryRoot, entry.name), "utf8");
+      text = await readFile6(join7(registryRoot, entry.name), "utf8");
     } catch {
       continue;
     }
@@ -25189,7 +25389,7 @@ async function readRecordedRunAssignmentEntriesStrict(registryRoot = defaultRunR
   }
   let entries;
   try {
-    entries = await readdir2(registryRoot, { withFileTypes: true });
+    entries = await readdir3(registryRoot, { withFileTypes: true });
   } catch {
     throw new Error("run registry state could not be observed");
   }
@@ -25203,7 +25403,7 @@ async function readRecordedRunAssignmentEntriesStrict(registryRoot = defaultRunR
     }
     let text;
     try {
-      text = await readFile5(join6(registryRoot, entry.name), "utf8");
+      text = await readFile6(join7(registryRoot, entry.name), "utf8");
     } catch {
       throw new Error("committed run registry witness could not be read");
     }
@@ -25220,13 +25420,13 @@ async function forgetAcknowledgedRunAssignments(assignments, registryRoot = defa
   );
   const entries = await readRecordedRunAssignmentEntries(registryRoot);
   await Promise.all(
-    entries.filter(({ record: record2 }) => acknowledged.has(`${record2.taskId}:${record2.epoch}`)).map(({ runToken }) => rm3(join6(registryRoot, `${runToken}.json`), { force: true }))
+    entries.filter(({ record: record2 }) => acknowledged.has(`${record2.taskId}:${record2.epoch}`)).map(({ runToken }) => rm4(join7(registryRoot, `${runToken}.json`), { force: true }))
   );
 }
 async function forgetSupersededRunAssignments(taskId, epoch, registryRoot = defaultRunRegistryRoot()) {
   const entries = await readRecordedRunAssignmentEntries(registryRoot);
   await Promise.all(
-    entries.filter(({ record: record2 }) => record2.taskId === taskId && record2.epoch < epoch).map(({ runToken }) => rm3(join6(registryRoot, `${runToken}.json`), { force: true }))
+    entries.filter(({ record: record2 }) => record2.taskId === taskId && record2.epoch < epoch).map(({ runToken }) => rm4(join7(registryRoot, `${runToken}.json`), { force: true }))
   );
 }
 
@@ -25237,6 +25437,7 @@ var WORKER_ROLE = "worker";
 var WORKER_PROXY_ROLE = "worker_proxy";
 var SUPERVISOR_ROLE = "supervisor";
 var WORKER_PROXY_ENTRY_ENV = "ZIXT_HOST_WORKER_PROXY_ENTRY";
+var HOST_CONSOLE_COLOR_ENV = "ZIXT_HOST_CONSOLE_COLOR";
 var SUPERVISOR_PROTOCOL_ENV = "ZIXT_HOST_SUPERVISOR_PROTOCOL";
 var SUPERVISOR_VERSION_ENV = "ZIXT_HOST_SUPERVISOR_VERSION";
 var SUPERVISOR_PROTOCOL = "2";
@@ -25252,6 +25453,8 @@ var INSTALL_TIMEOUT_MS = 5 * 6e4;
 var WORKER_WATCHDOG_CHECK_MS = 1e3;
 var WORKER_WATCHDOG_TIMEOUT_MS = 15e3;
 var WORKER_WATCHDOG_STARTUP_MS = 6e4;
+var WORKER_SHUTDOWN_DEADLINE_MS = 6e4;
+var WORKER_STDERR_TAIL_LINES = 40;
 var WORKER_READINESS_TIMEOUT_MS = 9e4;
 var CLEANUP_ATTEMPTS2 = 3;
 var VERSION_DIR = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;
@@ -25267,8 +25470,28 @@ function signalWorkerGroup(child, signal) {
   } catch {
   }
 }
+function captureWorkerStderr(child) {
+  const stderr = child.stderr;
+  if (!stderr) return () => [];
+  const lines = [];
+  let partial2 = "";
+  stderr.on("data", (chunk) => {
+    const text = typeof chunk === "string" ? chunk : chunk.toString("utf8");
+    process.stderr.write(text);
+    partial2 += text;
+    const complete = partial2.split(/\r?\n/);
+    partial2 = complete.pop() ?? "";
+    for (const line of complete) {
+      lines.push(line);
+      if (lines.length > WORKER_STDERR_TAIL_LINES) lines.shift();
+    }
+  });
+  stderr.on("error", () => {
+  });
+  return () => (partial2 ? [...lines, partial2] : [...lines]).slice(-WORKER_STDERR_TAIL_LINES);
+}
 function versionsRoot() {
-  return process.env.ZIXT_HOST_VERSIONS_DIR ?? join7(homedir2(), ".zixt", "host-versions");
+  return process.env.ZIXT_HOST_VERSIONS_DIR ?? join8(homedir3(), ".zixt", "host-versions");
 }
 function npmCommand(platform = process.platform) {
   return platform === "win32" ? "npm.cmd" : "npm";
@@ -25277,19 +25500,19 @@ function windowsInstallerCommandLine(command, args) {
   return [command, ...args].map(quoteForCmd).join(" ");
 }
 function installedReleaseEntry(version2, root = versionsRoot()) {
-  return join7(root, version2, "node_modules", PACKAGE_NAME, "dist", "index.js");
+  return join8(root, version2, "node_modules", PACKAGE_NAME, "dist", "index.js");
 }
 function releaseEntryAtPrefix(prefix) {
-  return join7(prefix, "node_modules", PACKAGE_NAME, "dist", "index.js");
+  return join8(prefix, "node_modules", PACKAGE_NAME, "dist", "index.js");
 }
 function releaseManifestAtPrefix(prefix) {
-  return join7(prefix, "node_modules", PACKAGE_NAME, "package.json");
+  return join8(prefix, "node_modules", PACKAGE_NAME, "package.json");
 }
 async function validReleaseAtPrefix(prefix, version2) {
   try {
     const [entry, manifestText] = await Promise.all([
       lstat5(releaseEntryAtPrefix(prefix)),
-      readFile6(releaseManifestAtPrefix(prefix), "utf8")
+      readFile7(releaseManifestAtPrefix(prefix), "utf8")
     ]);
     if (!entry.isFile()) return false;
     const manifest = JSON.parse(manifestText);
@@ -25308,9 +25531,9 @@ async function syncDirectory3(path) {
   }
 }
 function installedReleaseVersion(entry, root = versionsRoot()) {
-  if (!isAbsolute8(entry)) return null;
+  if (!isAbsolute9(entry)) return null;
   const relativeEntry = relative4(resolve5(root), resolve5(entry));
-  if (!relativeEntry || relativeEntry.startsWith(`..${sep4}`) || isAbsolute8(relativeEntry)) {
+  if (!relativeEntry || relativeEntry.startsWith(`..${sep4}`) || isAbsolute9(relativeEntry)) {
     return null;
   }
   const version2 = relativeEntry.split(sep4)[0];
@@ -25318,10 +25541,10 @@ function installedReleaseVersion(entry, root = versionsRoot()) {
   return resolve5(entry) === resolve5(installedReleaseEntry(version2, root)) ? version2 : null;
 }
 function currentReleaseEntry(root = versionsRoot(), platform = process.platform) {
-  return join7(root, platform === "win32" ? "current-launcher.cjs" : CURRENT_RELEASE_ENTRY);
+  return join8(root, platform === "win32" ? "current-launcher.cjs" : CURRENT_RELEASE_ENTRY);
 }
 function windowsReleasePointer(root = versionsRoot()) {
-  return join7(root, WINDOWS_RELEASE_POINTER);
+  return join8(root, WINDOWS_RELEASE_POINTER);
 }
 var WINDOWS_STABLE_LAUNCHER = `${WINDOWS_LAUNCHER_MARKER}
 'use strict';
@@ -25357,8 +25580,8 @@ child.once('exit', (code) => process.exit(code == null ? 1 : code));
 `;
 async function replaceDurableFile(path, contents, sync = syncDirectory3) {
   const parent = dirname4(path);
-  await mkdir4(parent, { recursive: true, mode: 448 });
-  const temporary = join7(parent, `.${CURRENT_RELEASE_ENTRY}.${process.pid}.${crypto.randomUUID()}`);
+  await mkdir5(parent, { recursive: true, mode: 448 });
+  const temporary = join8(parent, `.${CURRENT_RELEASE_ENTRY}.${process.pid}.${crypto.randomUUID()}`);
   const handle = await open4(temporary, "wx", 384);
   try {
     await handle.writeFile(contents, "utf8");
@@ -25368,7 +25591,7 @@ async function replaceDurableFile(path, contents, sync = syncDirectory3) {
     await sync(parent);
   } catch (error52) {
     await handle.close().catch(() => void 0);
-    await rm4(temporary, { force: true }).catch(() => void 0);
+    await rm5(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
 }
@@ -25378,7 +25601,7 @@ async function activateInstalledRelease(entry, root = versionsRoot(), platform =
   }
   await access2(entry);
   if (platform === "win32") {
-    await mkdir4(root, { recursive: true, mode: 448 });
+    await mkdir5(root, { recursive: true, mode: 448 });
     const launcher = currentReleaseEntry(root, platform);
     const existingLauncher = await lstat5(launcher).catch((error52) => {
       if (error52.code === "ENOENT") return null;
@@ -25388,7 +25611,7 @@ async function activateInstalledRelease(entry, root = versionsRoot(), platform =
       if (!existingLauncher.isFile()) {
         throw new Error("the Zixt Host Windows launcher is not a regular file");
       }
-      const contents = await readFile6(launcher, "utf8");
+      const contents = await readFile7(launcher, "utf8");
       if (!contents.startsWith(WINDOWS_LAUNCHER_OWNED_MARKER)) {
         throw new Error("the Zixt Host Windows launcher is not owned by Zixt");
       }
@@ -25409,7 +25632,7 @@ async function activateInstalledRelease(entry, root = versionsRoot(), platform =
       }
       let prior;
       try {
-        prior = JSON.parse(await readFile6(pointerPath, "utf8"));
+        prior = JSON.parse(await readFile7(pointerPath, "utf8"));
       } catch {
         throw new Error("the Zixt Host Windows release pointer is invalid");
       }
@@ -25427,7 +25650,7 @@ async function activateInstalledRelease(entry, root = versionsRoot(), platform =
     return launcher;
   }
   if (platform !== "linux" && platform !== "darwin") return entry;
-  await mkdir4(root, { recursive: true, mode: 448 });
+  await mkdir5(root, { recursive: true, mode: 448 });
   const current = currentReleaseEntry(root, platform);
   const existing = await lstat5(current).catch((error52) => {
     if (error52.code === "ENOENT") return null;
@@ -25436,13 +25659,13 @@ async function activateInstalledRelease(entry, root = versionsRoot(), platform =
   if (existing && !existing.isSymbolicLink()) {
     throw new Error("the Zixt Host current-release entry is not a symbolic link");
   }
-  const temporary = join7(root, `.${CURRENT_RELEASE_ENTRY}.${process.pid}.${crypto.randomUUID()}`);
+  const temporary = join8(root, `.${CURRENT_RELEASE_ENTRY}.${process.pid}.${crypto.randomUUID()}`);
   try {
     await symlink(entry, temporary, "file");
     await rename3(temporary, current);
     await sync(root);
   } catch (error52) {
-    await rm4(temporary, { force: true }).catch(() => void 0);
+    await rm5(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
   return current;
@@ -25453,7 +25676,7 @@ async function activatedReleaseVersion(root = versionsRoot(), platform = process
       const pointerPath = windowsReleasePointer(root);
       const metadata = await lstat5(pointerPath);
       if (!metadata.isFile() || metadata.size > 4 * 1024) return null;
-      const value = JSON.parse(await readFile6(pointerPath, "utf8"));
+      const value = JSON.parse(await readFile7(pointerPath, "utf8"));
       return value.schema === 1 && typeof value.entry === "string" ? installedReleaseVersion(value.entry, root) : null;
     } catch {
       return null;
@@ -25567,13 +25790,13 @@ async function installRelease(version2, options = {}) {
   const platform = options.platform ?? process.platform;
   const installerCommand = options.installerCommand ?? npmCommand(platform);
   const root = options.root ?? versionsRoot();
-  const prefix = join7(root, version2);
+  const prefix = join8(root, version2);
   const entry = installedReleaseEntry(version2, root);
   if (await validReleaseAtPrefix(prefix, version2)) return entry;
   if (options.signal?.aborted) return null;
-  await mkdir4(root, { recursive: true, mode: 448 });
-  const staging = join7(root, `.install-${version2}-${process.pid}-${crypto.randomUUID()}`);
-  const quarantine = join7(root, `.invalid-${version2}-${process.pid}-${crypto.randomUUID()}`);
+  await mkdir5(root, { recursive: true, mode: 448 });
+  const staging = join8(root, `.install-${version2}-${process.pid}-${crypto.randomUUID()}`);
+  const quarantine = join8(root, `.invalid-${version2}-${process.pid}-${crypto.randomUUID()}`);
   const usesWindowsInstallerGuardian = platform === "win32" && options.spawnInstaller === void 0;
   const installerGateNonce = usesWindowsInstallerGuardian ? crypto.randomUUID() : null;
   const installerArguments = (installPrefix, installVersion) => [
@@ -25605,7 +25828,7 @@ async function installRelease(version2, options = {}) {
   try {
     child = spawnInstaller(staging, version2);
   } catch {
-    await rm4(staging, { recursive: true, force: true }).catch(() => void 0);
+    await rm5(staging, { recursive: true, force: true }).catch(() => void 0);
     return null;
   }
   let resolveChildExited;
@@ -25755,8 +25978,8 @@ async function installRelease(version2, options = {}) {
     await syncDirectory3(root);
     return await validReleaseAtPrefix(prefix, version2) ? entry : null;
   } finally {
-    await rm4(staging, { recursive: true, force: true }).catch(() => void 0);
-    await rm4(quarantine, { recursive: true, force: true }).catch(() => void 0);
+    await rm5(staging, { recursive: true, force: true }).catch(() => void 0);
+    await rm5(quarantine, { recursive: true, force: true }).catch(() => void 0);
   }
 }
 async function pruneInstalledVersions(keep, root = versionsRoot()) {
@@ -25764,17 +25987,17 @@ async function pruneInstalledVersions(keep, root = versionsRoot()) {
   const running = process.argv[1] ? resolve5(process.argv[1]) : null;
   let entries;
   try {
-    entries = await readdir3(root);
+    entries = await readdir4(root);
   } catch {
     return [];
   }
   const removed = [];
   for (const name of entries) {
     if (protectedDirs.has(name) || !VERSION_DIR.test(name)) continue;
-    const dir = join7(root, name);
+    const dir = join8(root, name);
     if (running && running.startsWith(`${dir}${sep4}`)) continue;
     try {
-      await rm4(dir, { recursive: true, force: true });
+      await rm5(dir, { recursive: true, force: true });
       removed.push(name);
     } catch {
     }
@@ -25785,7 +26008,7 @@ function durableState(phase, candidateVersion, fallbackVersion) {
   return { schema: 1, phase, candidateVersion, fallbackVersion };
 }
 async function validInstalledRelease(version2, root = versionsRoot()) {
-  return validReleaseAtPrefix(join7(root, version2), version2);
+  return validReleaseAtPrefix(join8(root, version2), version2);
 }
 async function recoverDurableReleaseState(store, runningVersion, activeBootVersion, activate, log2) {
   const state = await store.load();
@@ -25874,7 +26097,7 @@ async function recoverDurableReleaseState(store, runningVersion, activeBootVersi
   }
   return rolledBack();
 }
-function defaultSpawn(command, argv, supervisorVersion, watchdog, compatibilityOwnership, containmentGateNonce, platform = process.platform) {
+function defaultSpawn(command, argv, supervisorVersion, watchdog, compatibilityOwnership, containmentGateNonce, platform = process.platform, diagnosticsRoot2 = null) {
   const ownership = watchdog ?? compatibilityOwnership;
   const compatibilityProxy = watchdog === null && compatibilityOwnership !== null;
   const env = {
@@ -25894,14 +26117,21 @@ function defaultSpawn(command, argv, supervisorVersion, watchdog, compatibilityO
   if (!containmentGateNonce) delete env[WINDOWS_POST_CONTAINMENT_CWD_ENV];
   if (supervisorVersion) env[SUPERVISOR_VERSION_ENV] = supervisorVersion;
   else delete env[SUPERVISOR_VERSION_ENV];
+  delete env[WORKER_DIAGNOSTICS_DIR_ENV];
+  if (diagnosticsRoot2) env[WORKER_DIAGNOSTICS_DIR_ENV] = diagnosticsRoot2;
+  delete env[HOST_CONSOLE_COLOR_ENV];
+  if (process.stderr.isTTY === true && process.env.NO_COLOR === void 0) {
+    env[HOST_CONSOLE_COLOR_ENV] = "1";
+  }
   delete env.ZIXT_HOST_REJECT_VERSION;
   if (command.rejectedVersion) env.ZIXT_HOST_REJECT_VERSION = command.rejectedVersion;
   const entry = compatibilityProxy ? process.argv[1] ?? "" : command.entry ?? process.argv[1] ?? "";
   const child = spawn5(process.execPath, [entry, ...argv, ...ownership?.argv ?? []], {
     // stdin is a pipe this process owns: closing it is how the worker is
     // asked to stop, which works identically on Windows, where there is no
-    // real SIGINT to send. stdout/stderr stay the person's terminal.
-    stdio: watchdog ? ["pipe", "inherit", "inherit", "ipc"] : ["pipe", "inherit", "inherit"],
+    // real SIGINT to send. stdout stays the person's terminal; stderr is teed
+    // through this process so a crash stack survives the exit that hid it.
+    stdio: watchdog ? ["pipe", "inherit", "pipe", "ipc"] : ["pipe", "inherit", "pipe"],
     env,
     ...containmentGateNonce ? {
       cwd: ownership?.ownershipFile ? dirname4(ownership.ownershipFile) : dirname4(entry)
@@ -25933,7 +26163,7 @@ async function runWorkerCompatibilityProxy(env = process.env, argv = process.arg
   const ownership = consumeWorkerOwnershipArguments(argv, env);
   const nonce = env[WORKER_WATCHDOG_NONCE_ENV];
   const ownershipFile = env[WORKER_OWNERSHIP_FILE_ENV];
-  if (typeof target !== "string" || !isAbsolute8(target) || typeof nonce !== "string" || typeof ownershipFile !== "string" || !ownership.requested || !ownership.valid) {
+  if (typeof target !== "string" || !isAbsolute9(target) || typeof nonce !== "string" || typeof ownershipFile !== "string" || !ownership.requested || !ownership.valid) {
     return 1;
   }
   if (!recordWorkerOwnership(ownershipFile, nonce)) return 1;
@@ -26004,7 +26234,7 @@ async function launchHostSupervisor(options = {}) {
     const generationNonce = ownershipDirectory ? basename3(ownershipDirectory) : null;
     if (ownershipDirectory && generationNonce) {
       env[LAUNCHER_OWNERSHIP_DIR_ENV] = ownershipDirectory;
-      env[SUPERVISOR_OWNERSHIP_FILE_ENV] = join7(ownershipDirectory, `${generationNonce}.json`);
+      env[SUPERVISOR_OWNERSHIP_FILE_ENV] = join8(ownershipDirectory, `${generationNonce}.json`);
     } else {
       delete env[LAUNCHER_OWNERSHIP_DIR_ENV];
     }
@@ -26027,8 +26257,8 @@ async function launchHostSupervisor(options = {}) {
   });
   const customDelay = options.delay;
   const ownsWorkerBoundary = options.spawnSupervisor === void 0 || options.ownershipRoot !== void 0;
-  const ownershipRoot = options.ownershipRoot ?? join7(versionsRoot(), "launcher-ownership");
-  const runRegistryRoot2 = options.runRegistryRoot ?? (options.ownershipRoot ? join7(dirname4(options.ownershipRoot), "run-registry") : defaultRunRegistryRoot());
+  const ownershipRoot = options.ownershipRoot ?? join8(versionsRoot(), "launcher-ownership");
+  const runRegistryRoot2 = options.runRegistryRoot ?? (options.ownershipRoot ? join8(dirname4(options.ownershipRoot), "run-registry") : defaultRunRegistryRoot());
   const terminateRecordedOwnership = options.terminateRecordedOwnership ?? terminateRecordedProcessTree;
   const createSupervisorContainment = options.createSupervisorContainment ?? (platform === "win32" && options.spawnSupervisor === void 0 ? async (target, identityNonce, signal) => {
     if (!target.pid) throw new Error("supervisor process id is unavailable");
@@ -26295,10 +26525,10 @@ async function superviseHost(options = {}) {
   const log2 = options.log ?? ((message) => console.error(message));
   const signalWorker = options.signalWorker ?? signalWorkerGroup;
   const inheritedOwnershipDirectory = process.env[LAUNCHER_OWNERSHIP_DIR_ENV];
-  const launcherOwnershipDirectory = productionLifecycle && typeof inheritedOwnershipDirectory === "string" && isAbsolute8(inheritedOwnershipDirectory) ? inheritedOwnershipDirectory : null;
+  const launcherOwnershipDirectory = productionLifecycle && typeof inheritedOwnershipDirectory === "string" && isAbsolute9(inheritedOwnershipDirectory) ? inheritedOwnershipDirectory : null;
   if (productionLifecycle && isSupervisorRole() && launcherOwnershipDirectory) {
     const generationNonce = basename3(launcherOwnershipDirectory);
-    const expectedOwnershipFile = join7(launcherOwnershipDirectory, `${generationNonce}.json`);
+    const expectedOwnershipFile = join8(launcherOwnershipDirectory, `${generationNonce}.json`);
     const configuredOwnershipFile = process.env[SUPERVISOR_OWNERSHIP_FILE_ENV];
     if (process.argv0 !== generationNonce || configuredOwnershipFile !== expectedOwnershipFile || !recordWorkerOwnership(expectedOwnershipFile, generationNonce)) {
       log2("Zixt Host: supervisor ownership could not be committed; refusing to start a worker");
@@ -26310,12 +26540,14 @@ async function superviseHost(options = {}) {
   const workerWatchdogTimeoutMs = options.workerWatchdogTimeoutMs ?? WORKER_WATCHDOG_TIMEOUT_MS;
   const workerWatchdogStartupMs = options.workerWatchdogStartupMs ?? WORKER_WATCHDOG_STARTUP_MS;
   const workerReadinessTimeoutMs = options.workerReadinessTimeoutMs ?? WORKER_READINESS_TIMEOUT_MS;
+  const workerShutdownDeadlineMs = options.workerShutdownDeadlineMs ?? WORKER_SHUTDOWN_DEADLINE_MS;
   const releaseProbationMs = options.releaseProbationMs ?? RELEASE_PROBATION_MS;
-  if (!Number.isSafeInteger(workerWatchdogCheckMs) || workerWatchdogCheckMs < 10 || workerWatchdogCheckMs > 6e4 || !Number.isSafeInteger(workerWatchdogTimeoutMs) || workerWatchdogTimeoutMs < workerWatchdogCheckMs * 2 || workerWatchdogTimeoutMs > 10 * 6e4 || !Number.isSafeInteger(workerWatchdogStartupMs) || workerWatchdogStartupMs < workerWatchdogCheckMs * 2 || workerWatchdogStartupMs > 10 * 6e4 || !Number.isSafeInteger(workerReadinessTimeoutMs) || workerReadinessTimeoutMs < workerWatchdogCheckMs * 2 || workerReadinessTimeoutMs > 10 * 6e4 || !Number.isSafeInteger(releaseProbationMs) || releaseProbationMs < 10 || releaseProbationMs > 24 * 60 * 6e4) {
+  if (!Number.isSafeInteger(workerWatchdogCheckMs) || workerWatchdogCheckMs < 10 || workerWatchdogCheckMs > 6e4 || !Number.isSafeInteger(workerWatchdogTimeoutMs) || workerWatchdogTimeoutMs < workerWatchdogCheckMs * 2 || workerWatchdogTimeoutMs > 10 * 6e4 || !Number.isSafeInteger(workerWatchdogStartupMs) || workerWatchdogStartupMs < workerWatchdogCheckMs * 2 || workerWatchdogStartupMs > 10 * 6e4 || !Number.isSafeInteger(workerReadinessTimeoutMs) || workerReadinessTimeoutMs < workerWatchdogCheckMs * 2 || workerReadinessTimeoutMs > 10 * 6e4 || !Number.isSafeInteger(workerShutdownDeadlineMs) || workerShutdownDeadlineMs < workerWatchdogCheckMs * 2 || workerShutdownDeadlineMs > 10 * 6e4 || !Number.isSafeInteger(releaseProbationMs) || releaseProbationMs < 10 || releaseProbationMs > 24 * 60 * 6e4) {
     throw new Error("worker watchdog durations are invalid");
   }
   const activeVersion = await activatedReleaseVersion();
   const supervisorVersion = options.currentVersion !== void 0 ? options.currentVersion : process.env[SUPERVISOR_VERSION_ENV] ?? activeVersion ?? (productionLifecycle ? package_default.version : null);
+  const workerDiagnosticsRoot = options.workerDiagnosticsRoot === void 0 ? productionLifecycle ? defaultWorkerDiagnosticsRoot() : null : options.workerDiagnosticsRoot;
   const spawnWorker = options.spawnWorker ?? ((command2, watchdog, compatibilityOwnership, containmentGateNonce) => defaultSpawn(
     command2,
     argv,
@@ -26323,7 +26555,8 @@ async function superviseHost(options = {}) {
     watchdog,
     compatibilityOwnership,
     containmentGateNonce,
-    platform
+    platform,
+    workerDiagnosticsRoot
   ));
   const install = options.installVersion ?? ((version2, signal) => installRelease(version2, signal ? { signal } : {}));
   const cleanupWorker = options.cleanupWorker ?? (options.spawnWorker ? async () => {
@@ -26424,6 +26657,16 @@ async function superviseHost(options = {}) {
     }
     return false;
   };
+  const reportWorkerExit = async (record2, next) => {
+    const { summary, context } = describeWorkerExit(record2);
+    const detail = Object.entries(context).map(([key, value]) => `${key}=${value}`).join(" ");
+    log2(`Zixt Host: worker ${summary}; ${next} (${detail})`);
+    for (const line of record2.stderr) log2(`Zixt Host: worker stderr | ${line}`);
+    if (!workerDiagnosticsRoot) return;
+    if (!await recordWorkerExit(workerDiagnosticsRoot, record2)) {
+      log2("Zixt Host: this exit could not be journalled, so the cloud will not receive it");
+    }
+  };
   const directCommand = (candidate) => {
     if (candidate.entry !== null || candidate.version === null) {
       return { entry: candidate.entry, version: candidate.version };
@@ -26518,6 +26761,7 @@ async function superviseHost(options = {}) {
       if (shuttingDown2) return 0;
       child = spawnWorker(command, watchdogLaunch, compatibilityOwnership, containmentGateNonce);
       const watchedChild = child;
+      const workerStderr = captureWorkerStderr(watchedChild);
       let resolveChildExited;
       const childExited = new Promise((resolve18) => {
         resolveChildExited = resolve18;
@@ -26575,10 +26819,14 @@ async function superviseHost(options = {}) {
       let watchdogTimer;
       let watchdogTriggered = false;
       let watchdogCleanup = null;
+      let containmentReason = null;
       let lastWatchdogHeartbeatAt = now();
       let lastWatchdogSequence = 0;
       let lastReadinessAt = 0;
       let lastReadinessSequence = 0;
+      let announcedExitCode = null;
+      let announcedShutdownAt = 0;
+      let lastShutdownSequence = 0;
       const onWatchdogMessage = (message) => {
         if (watchdogLaunch && isWorkerWatchdogHeartbeat(message, watchdogLaunch, watchedChild.pid) && message.sequence > lastWatchdogSequence) {
           lastWatchdogSequence = message.sequence;
@@ -26590,10 +26838,19 @@ async function superviseHost(options = {}) {
           lastReadinessSequence = message.sequence;
           lastReadinessAt = now();
         }
+        if (watchdogLaunch && isWorkerShutdownIntent(message, watchdogLaunch, watchedChild.pid) && message.sequence > lastShutdownSequence) {
+          lastShutdownSequence = message.sequence;
+          announcedExitCode = message.exitCode;
+          announcedShutdownAt = now();
+          log2(
+            `Zixt Host: worker is stopping with code ${message.exitCode} (activeTasks=${message.activeTasks})`
+          );
+        }
       };
-      const containWorker = (message) => {
+      const containWorker = (message, reason) => {
         if (shuttingDown2 || watchdogTriggered) return;
         watchdogTriggered = true;
+        containmentReason = reason;
         if (watchdogTimer) clearInterval(watchdogTimer);
         watchdogTimer = void 0;
         log2(message);
@@ -26607,11 +26864,23 @@ async function superviseHost(options = {}) {
       if (watchdogLaunch) {
         watchedChild.on("message", onWatchdogMessage);
         watchdogTimer = setInterval(() => {
-          if (shuttingDown2 || watchdogTriggered || now() - lastWatchdogHeartbeatAt < (lastWatchdogSequence === 0 ? workerWatchdogStartupMs : workerWatchdogTimeoutMs)) {
+          if (shuttingDown2 || watchdogTriggered) return;
+          if (announcedExitCode !== null) {
+            if (now() - announcedShutdownAt < workerShutdownDeadlineMs) return;
+            containWorker(
+              `Zixt Host: worker did not finish stopping within ${Math.round(
+                workerShutdownDeadlineMs / 1e3
+              )}s; terminating it and honouring the announced exit ${announcedExitCode}`,
+              "watchdog_shutdown_deadline"
+            );
+            return;
+          }
+          if (now() - lastWatchdogHeartbeatAt < (lastWatchdogSequence === 0 ? workerWatchdogStartupMs : workerWatchdogTimeoutMs)) {
             return;
           }
           containWorker(
-            "Zixt Host: worker watchdog expired; terminating the unresponsive worker before restart"
+            "Zixt Host: worker watchdog expired; terminating the unresponsive worker before restart",
+            "watchdog_liveness"
           );
         }, workerWatchdogCheckMs);
         watchdogTimer.unref?.();
@@ -26623,7 +26892,8 @@ async function superviseHost(options = {}) {
         probationValidationTimer = setTimeout(() => {
           if (lastWatchdogSequence === 0 || now() - lastWatchdogHeartbeatAt >= workerWatchdogTimeoutMs || lastReadinessSequence === 0 || now() - lastReadinessAt >= workerReadinessTimeoutMs) {
             containWorker(
-              `Zixt Host: ${candidateVersion} did not prove cloud readiness during probation; restoring the previous working release`
+              `Zixt Host: ${candidateVersion} did not prove cloud readiness during probation; restoring the previous working release`,
+              "probation_readiness"
             );
             return;
           }
@@ -26632,7 +26902,8 @@ async function superviseHost(options = {}) {
               `Zixt Host: could not persist ${candidateVersion} probation evidence (${error52 instanceof Error ? error52.message : "unknown error"}); restoring the previous working release`
             );
             containWorker(
-              `Zixt Host: ${candidateVersion} probation could not be committed; containing the candidate`
+              `Zixt Host: ${candidateVersion} probation could not be committed; containing the candidate`,
+              "probation_commit"
             );
           });
         }, releaseProbationMs);
@@ -26647,6 +26918,22 @@ async function superviseHost(options = {}) {
       if (stopEscalation) clearTimeout(stopEscalation);
       stopEscalation = void 0;
       const runtimeMs = Math.max(0, now() - startedAt);
+      const effectiveCode = watchdogTriggered && announcedExitCode === UPDATE_EXIT_CODE ? UPDATE_EXIT_CODE : code;
+      const workerExit = {
+        schema: 1,
+        at: new Date(now()).toISOString(),
+        version: command.version,
+        pid: exitedChild.pid ?? null,
+        code,
+        signal,
+        uptimeMs: runtimeMs,
+        announcedExitCode,
+        containment: containmentReason,
+        msSinceHeartbeat: lastWatchdogSequence === 0 ? null : now() - lastWatchdogHeartbeatAt,
+        heartbeats: lastWatchdogSequence,
+        readinessMilestones: lastReadinessSequence,
+        stderr: workerStderr()
+      };
       if (probationValidationCommit) await probationValidationCommit;
       const orderlyValidatedBoundary = signal === null && !watchdogTriggered && (code === 0 || code === UPDATE_EXIT_CODE) && (releaseState === null && runtimeMs >= releaseProbationMs || releaseState?.phase === "validated" && command.version === releaseState.candidateVersion);
       if (orderlyValidatedBoundary && command.version) {
@@ -26679,12 +26966,13 @@ async function superviseHost(options = {}) {
         return 1;
       }
       if (!watchdogTriggered && (code === 0 || code === DO_NOT_RESTART_EXIT_CODE)) {
+        if (code === DO_NOT_RESTART_EXIT_CODE) {
+          await reportWorkerExit(workerExit, "this Machine needs attention before it can restart");
+        }
         return code;
       }
-      if (code !== UPDATE_EXIT_CODE) {
-        log2(
-          `Zixt Host: worker ${signal ? `was killed by ${signal}` : `exited unexpectedly with code ${code ?? "unknown"}`}; restarting`
-        );
+      if (effectiveCode !== UPDATE_EXIT_CODE) {
+        await reportWorkerExit(workerExit, "restarting");
         if (rollbackCandidate && command.version === rollbackCandidate.failedVersion) {
           const failedVersion = rollbackCandidate.failedVersion;
           await restoreFallback(failedVersion, rollbackCandidate.command);
@@ -26695,6 +26983,9 @@ async function superviseHost(options = {}) {
         if (!await waitAfterCrash(runtimeMs)) return 0;
         continue;
       }
+      if (watchdogTriggered) {
+        await reportWorkerExit(workerExit, "installing the update it asked for anyway");
+      }
       consecutiveCrashes = 0;
       if (orderlyValidatedBoundary) rollbackCandidate = null;
       const target = await published();
@@ -26819,15 +27110,47 @@ async function superviseHost(options = {}) {
   }
 }
 
+// src/worker-shutdown.ts
+var IDLE_SHUTDOWN_DEADLINE_MS = 2e3;
+var RECOVERING_SHUTDOWN_DEADLINE_MS = 3e4;
+var FORCED_EXIT_DRAIN_MS = 1e3;
+var defaultSchedule = (run3, ms) => {
+  setTimeout(run3, ms).unref?.();
+};
+function beginWorkerShutdown(options) {
+  const announce = options.announce ?? reportWorkerShutdown;
+  const finish = options.finish ?? finishWorkerProcess;
+  const exit = options.exit ?? ((code) => process.exit(code));
+  const schedule = options.schedule ?? defaultSchedule;
+  announce(options.exitCode, options.activeTasks);
+  const recoveringLiveRuns = options.activeTasks > 0;
+  const deadlineMs = recoveringLiveRuns ? RECOVERING_SHUTDOWN_DEADLINE_MS : IDLE_SHUTDOWN_DEADLINE_MS;
+  const forcedExitCode = recoveringLiveRuns ? 1 : options.exitCode;
+  let teardownCompleted = false;
+  schedule(() => {
+    const code = teardownCompleted ? options.exitCode : forcedExitCode;
+    options.onForcedExit?.({ deadlineMs, code, teardownCompleted });
+    void options.stopHeartbeat().then(() => {
+      finish(code);
+      schedule(() => exit(code), FORCED_EXIT_DRAIN_MS);
+    });
+  }, deadlineMs);
+  void options.teardown().then(() => {
+    teardownCompleted = true;
+    return options.stopHeartbeat();
+  }).then(() => finish(options.exitCode)).catch(() => {
+  });
+}
+
 // src/index.ts
-import { homedir as homedir13, hostname as hostname3 } from "node:os";
+import { homedir as homedir14, hostname as hostname3 } from "node:os";
 
 // src/hardware.ts
 import { existsSync } from "node:fs";
 import { statfs } from "node:fs/promises";
-import { cpus, freemem, homedir as homedir3, totalmem } from "node:os";
+import { cpus, freemem, homedir as homedir4, totalmem } from "node:os";
 import { dirname as dirname5, resolve as resolve6 } from "node:path";
-async function machineHardware(workRoot = homedir3()) {
+async function machineHardware(workRoot = homedir4()) {
   return {
     // A container or cgroup can hide processors from this count; it is what
     // this process can see, which is what its Tasks will actually get.
@@ -27049,17 +27372,17 @@ function createDemoBrowserAdapterFactory() {
 }
 
 // src/browser/manager.ts
-import { lstat as lstat6, mkdir as mkdir5, open as open5, opendir, readFile as readFile7, rename as rename4, rm as rm5 } from "node:fs/promises";
-import { homedir as homedir4 } from "node:os";
-import { dirname as dirname6, join as join8, resolve as resolve7 } from "node:path";
+import { lstat as lstat6, mkdir as mkdir6, open as open5, opendir, readFile as readFile8, rename as rename4, rm as rm6 } from "node:fs/promises";
+import { homedir as homedir5 } from "node:os";
+import { dirname as dirname6, join as join9, resolve as resolve7 } from "node:path";
 var SAFE_SEGMENT2 = /^[A-Za-z0-9_-]{1,200}$/;
 var FRAME_MIN_INTERVAL_MS = 100;
 var IDLE_TIMEOUT_MS = 15 * 6e4;
 var BrowserManager = class {
   constructor(opts) {
     this.opts = opts;
-    this.profileRoot = opts.profileRoot ?? join8(homedir4(), ".zixt", "browser-profiles");
-    this.profileStateRoot = join8(this.profileRoot, ".profile-state");
+    this.profileRoot = opts.profileRoot ?? join9(homedir5(), ".zixt", "browser-profiles");
+    this.profileStateRoot = join9(this.profileRoot, ".profile-state");
     this.viewport = opts.viewport ?? BROWSER_DEFAULT_VIEWPORT;
     this.idleTimeoutMs = opts.idleTimeoutMs ?? IDLE_TIMEOUT_MS;
     this.frameMinIntervalMs = opts.frameMinIntervalMs ?? FRAME_MIN_INTERVAL_MS;
@@ -27157,7 +27480,7 @@ var BrowserManager = class {
     return target;
   }
   async ensureOwnedDirectory(path) {
-    await mkdir5(path, { recursive: true, mode: 448 });
+    await mkdir6(path, { recursive: true, mode: 448 });
     const stat3 = await lstat6(path);
     if (!stat3.isDirectory() || stat3.isSymbolicLink()) {
       throw new Error("browser profile root must be an owned directory, not a symbolic link");
@@ -27193,7 +27516,7 @@ var BrowserManager = class {
   }
   async readProfileState(agentId) {
     try {
-      const raw = JSON.parse(await readFile7(this.statePath(agentId), "utf8"));
+      const raw = JSON.parse(await readFile8(this.statePath(agentId), "utf8"));
       if (typeof raw !== "object" || raw === null || !Number.isInteger(raw.revision) || Number(raw.revision) < 0 || !["allowed", "purged"].includes(String(raw.state))) {
         throw new Error("browser profile lifecycle marker is invalid");
       }
@@ -27223,7 +27546,7 @@ var BrowserManager = class {
       await this.syncDirectory(this.profileStateRoot);
       await this.syncDirectory(this.profileRoot);
     } catch (error52) {
-      await rm5(temporary, { force: true }).catch(() => {
+      await rm6(temporary, { force: true }).catch(() => {
       });
       throw error52;
     }
@@ -27299,7 +27622,7 @@ var BrowserManager = class {
       } catch (error52) {
         if (error52.code !== "ENOENT") throw error52;
       }
-      await mkdir5(profileDir, { recursive: true, mode: 448 });
+      await mkdir6(profileDir, { recursive: true, mode: 448 });
       const adapter = await this.opts.factory.open({
         agentId,
         profileDir,
@@ -27378,7 +27701,7 @@ var BrowserManager = class {
         purgeId
       });
       await this.closeLocked(agentId, "stopped");
-      await rm5(this.profilePath(agentId), { recursive: true, force: true, maxRetries: 3 });
+      await rm6(this.profilePath(agentId), { recursive: true, force: true, maxRetries: 3 });
       await this.syncDirectory(this.profileRoot);
     });
   }
@@ -28078,10 +28401,10 @@ function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
 
 // src/runners/cli-runner.ts
 import { spawn as spawn8 } from "node:child_process";
-import { randomUUID as randomUUID10 } from "node:crypto";
-import { lstat as lstat11, mkdir as mkdir10, realpath as realpath8 } from "node:fs/promises";
-import { homedir as homedir5 } from "node:os";
-import { dirname as dirname8, isAbsolute as isAbsolute14, join as join14, resolve as resolve10 } from "node:path";
+import { randomUUID as randomUUID11 } from "node:crypto";
+import { lstat as lstat11, mkdir as mkdir11, realpath as realpath8 } from "node:fs/promises";
+import { homedir as homedir6 } from "node:os";
+import { dirname as dirname8, isAbsolute as isAbsolute15, join as join15, resolve as resolve10 } from "node:path";
 
 // src/tool-packs/browser/authentication-wall.ts
 var AUTH_PATH_SEGMENT = /(?:^|\/)(?:log[-_]?in|sign[-_]?in|sso|saml|auth|authorize|authenticate|oauth2?|session\/new|checkpoint)(?:\/|$)/i;
@@ -28462,7 +28785,7 @@ function createBrowserToolPack(deps) {
 }
 
 // src/tool-packs/provider-intents.ts
-import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
+import { createHash as createHash2, randomUUID as randomUUID4 } from "node:crypto";
 
 // src/tool-packs/github/rest-transport.ts
 var MAX_RESPONSE_BYTES = 2 * 1024 * 1024;
@@ -28760,7 +29083,7 @@ function terminalForError(intentId2, error52) {
 }
 async function settle(context, terminal) {
   try {
-    const result = await context.settleProviderIntent(randomUUID3(), terminal);
+    const result = await context.settleProviderIntent(randomUUID4(), terminal);
     if (!result.ok) return { ok: false, error: result.error || RECORDING_FAILED };
     return null;
   } catch {
@@ -30252,7 +30575,7 @@ function createPullRequestTools(runtime) {
 }
 
 // src/tool-packs/github/repository-creation.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 var RECORDING_FAILED2 = "The provider call completed, but Zixt could not record its outcome. Do not retry; wait for reconciliation.";
 var CLONE_WARNING = "The repository was created, but Zixt could not prepare its local workspace. Do not create it again.";
 var REPOSITORY_ACCESS_WARNING = "Repository created, but GitHub access is still needed. Ask a GitHub organization owner to add this repository in the GitHub App settings, then use Check access in Zixt. Do not create it again.";
@@ -30508,7 +30831,7 @@ function failure(error52) {
 }
 function createGithubRepositoryCreator(input) {
   const now = input.now ?? (() => /* @__PURE__ */ new Date());
-  const terminalRequestId = input.terminalRequestId ?? randomUUID4;
+  const terminalRequestId = input.terminalRequestId ?? randomUUID5;
   return async (rawArgs) => {
     let args;
     try {
@@ -30697,7 +31020,7 @@ function createGithubRepositoryCreator(input) {
 }
 
 // src/tool-packs/github/push.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 var COMMIT_SHA = /^[a-f0-9]{40}(?:[a-f0-9]{24})?$/;
 var RECORDING_FAILED3 = "The provider call completed, but Zixt could not record its outcome. Do not retry; wait for reconciliation.";
 function claimResult3(value) {
@@ -30737,7 +31060,7 @@ function error51(message) {
 }
 function createGithubPushOrchestrator(input) {
   const now = input.now ?? (() => /* @__PURE__ */ new Date());
-  const terminalRequestId = input.terminalRequestId ?? randomUUID5;
+  const terminalRequestId = input.terminalRequestId ?? randomUUID6;
   return async (rawArgs) => {
     try {
       const args = rawArgs;
@@ -30899,15 +31222,15 @@ function createGithubPushOrchestrator(input) {
 
 // src/tool-packs/github/git-bridge.ts
 import { spawn as spawn6 } from "node:child_process";
-import { randomUUID as randomUUID7 } from "node:crypto";
-import { chmod as chmod4, lstat as lstat8, mkdir as mkdir6, realpath as realpath5, rm as rm6 } from "node:fs/promises";
-import { dirname as dirname7, isAbsolute as isAbsolute10, join as join10, relative as relative6 } from "node:path";
+import { randomUUID as randomUUID8 } from "node:crypto";
+import { chmod as chmod4, lstat as lstat8, mkdir as mkdir7, realpath as realpath5, rm as rm7 } from "node:fs/promises";
+import { dirname as dirname7, isAbsolute as isAbsolute11, join as join11, relative as relative6 } from "node:path";
 
 // src/tool-packs/github/git-credential-broker.ts
 import { createServer } from "node:http";
-import { randomBytes, randomUUID as randomUUID6, timingSafeEqual } from "node:crypto";
-import { chmod as chmod3, lstat as lstat7, realpath as realpath4, writeFile as writeFile2 } from "node:fs/promises";
-import { isAbsolute as isAbsolute9, join as join9, relative as relative5 } from "node:path";
+import { randomBytes, randomUUID as randomUUID7, timingSafeEqual } from "node:crypto";
+import { chmod as chmod3, lstat as lstat7, realpath as realpath4, writeFile as writeFile3 } from "node:fs/promises";
+import { isAbsolute as isAbsolute10, join as join10, relative as relative5 } from "node:path";
 var MAX_REQUEST_BYTES = 16 * 1024;
 var FILE_MODE2 = 384;
 var HELPER_SOURCE = String.raw`'use strict';
@@ -31021,7 +31344,7 @@ async function readBoundedBody2(request) {
 }
 function assertChildPath(parent, child) {
   const path = relative5(parent, child);
-  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute9(path)) {
+  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute10(path)) {
     throw new Error("Git credential helper path escaped its private run directory");
   }
 }
@@ -31036,9 +31359,9 @@ async function createGithubGitCredentialBroker(input) {
     throw new Error("Git credential broker requires a private real run directory");
   }
   const runRoot = await realpath4(input.runArtifactsRoot);
-  const helperPath = join9(runRoot, `git-credential-${randomUUID6()}.cjs`);
+  const helperPath = join10(runRoot, `git-credential-${randomUUID7()}.cjs`);
   assertChildPath(runRoot, helperPath);
-  await writeFile2(helperPath, HELPER_SOURCE, { flag: "wx", mode: FILE_MODE2 });
+  await writeFile3(helperPath, HELPER_SOURCE, { flag: "wx", mode: FILE_MODE2 });
   await chmod3(helperPath, FILE_MODE2);
   const capability2 = randomBytes(32).toString("base64url");
   const expectedPath = `${input.repositoryFullName}.git`;
@@ -31136,7 +31459,7 @@ ${stderr}`;
 }
 function assertBelow2(parent, child, label) {
   const path = relative6(parent, child);
-  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute10(path)) {
+  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute11(path)) {
     throw new GithubGitProcessError("invalid_input");
   }
   void label;
@@ -31151,7 +31474,7 @@ async function requireRealDirectory2(path, label) {
 }
 async function validateTokenlessPaths(command) {
   if (command.kind === "clone-from-bridge") {
-    if (!isAbsolute10(command.destination)) throw new GithubGitProcessError("invalid_input");
+    if (!isAbsolute11(command.destination)) throw new GithubGitProcessError("invalid_input");
     const parent = await requireRealDirectory2(dirname7(command.destination), "clone parent");
     assertBelow2(parent, command.destination, "clone destination");
     const destination = await lstat8(command.destination).catch((error52) => {
@@ -31162,7 +31485,7 @@ async function validateTokenlessPaths(command) {
     return;
   }
   if ("repositoryPath" in command) {
-    if (!isAbsolute10(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
+    if (!isAbsolute11(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
     const repositoryPath5 = await requireRealDirectory2(command.repositoryPath, "repository path");
     if (repositoryPath5 !== command.repositoryPath) throw new GithubGitProcessError("invalid_input");
   }
@@ -31242,7 +31565,7 @@ async function runGit(input, args, env) {
   if (input.authoritySignal.aborted || input.cancelledNow()) {
     throw new GithubGitProcessError("cancelled");
   }
-  if (!isAbsolute10(input.executablePath)) throw new GithubGitProcessError("invalid_input");
+  if (!isAbsolute11(input.executablePath)) throw new GithubGitProcessError("invalid_input");
   const timeoutMs = input.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
   if (!Number.isInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > DEFAULT_TIMEOUT_MS2) {
     throw new GithubGitProcessError("invalid_input");
@@ -31348,7 +31671,7 @@ function tokenlessArgs(command) {
   switch (command.kind) {
     case "clone-from-bridge":
       assertRef(command.branch);
-      if (!isAbsolute10(command.destination)) throw new GithubGitProcessError("invalid_input");
+      if (!isAbsolute11(command.destination)) throw new GithubGitProcessError("invalid_input");
       return [
         "clone",
         "--no-recurse-submodules",
@@ -31360,7 +31683,7 @@ function tokenlessArgs(command) {
       ];
     case "fetch-from-bridge":
       assertFetchRefspecs(command.refspecs);
-      if (!isAbsolute10(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
+      if (!isAbsolute11(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
       return [
         "-C",
         command.repositoryPath,
@@ -31372,7 +31695,7 @@ function tokenlessArgs(command) {
         ...command.refspecs
       ];
     case "copy-commit-to-bridge":
-      if (!isAbsolute10(command.repositoryPath) || !SHA.test(command.sha)) {
+      if (!isAbsolute11(command.repositoryPath) || !SHA.test(command.sha)) {
         throw new GithubGitProcessError("invalid_input");
       }
       return [
@@ -31384,11 +31707,11 @@ function tokenlessArgs(command) {
         `${command.sha}:refs/zixt/push-source`
       ];
     case "rev-parse":
-      if (!isAbsolute10(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
+      if (!isAbsolute11(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
       assertRef(command.ref);
       return ["-C", command.repositoryPath, "rev-parse", "--verify", `${command.ref}^{commit}`];
     case "remote-configure":
-      if (!isAbsolute10(command.repositoryPath) || !REPOSITORY.test(command.repositoryFullName)) {
+      if (!isAbsolute11(command.repositoryPath) || !REPOSITORY.test(command.repositoryFullName)) {
         throw new GithubGitProcessError("invalid_input");
       }
       return [
@@ -31400,7 +31723,7 @@ function tokenlessArgs(command) {
         `https://github.com/${command.repositoryFullName}.git`
       ];
     case "status":
-      if (!isAbsolute10(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
+      if (!isAbsolute11(command.repositoryPath)) throw new GithubGitProcessError("invalid_input");
       return [
         "-C",
         command.repositoryPath,
@@ -31430,7 +31753,7 @@ function createGithubGitBridge(input) {
   })();
   const requireBridge = async (value) => {
     const current = await roots();
-    if (!isAbsolute10(value) || !active.has(value)) throw new GithubGitProcessError("invalid_input");
+    if (!isAbsolute11(value) || !active.has(value)) throw new GithubGitProcessError("invalid_input");
     const real = await requireRealDirectory2(value, "git bridge");
     assertBelow2(current.bridges, real, "git bridge");
     if (real !== value) throw new GithubGitProcessError("invalid_input");
@@ -31440,9 +31763,9 @@ function createGithubGitBridge(input) {
     async createPrivateBridge() {
       if (closed) throw new GithubGitProcessError("cancelled");
       const current = await roots();
-      const path = join10(current.bridges, `${randomUUID7()}.git`);
+      const path = join11(current.bridges, `${randomUUID8()}.git`);
       assertBelow2(current.bridges, path, "git bridge");
-      await mkdir6(path, { mode: DIRECTORY_MODE2 });
+      await mkdir7(path, { mode: DIRECTORY_MODE2 });
       await chmod4(path, DIRECTORY_MODE2);
       try {
         await runGit(
@@ -31458,16 +31781,16 @@ function createGithubGitBridge(input) {
         );
         const real = await requireRealDirectory2(path, "git bridge");
         assertBelow2(current.bridges, real, "git bridge");
-        const hooks = join10(real, "hooks");
-        await rm6(hooks, { recursive: true, force: true });
-        await mkdir6(hooks, { mode: DIRECTORY_MODE2 });
+        const hooks = join11(real, "hooks");
+        await rm7(hooks, { recursive: true, force: true });
+        await mkdir7(hooks, { mode: DIRECTORY_MODE2 });
         await chmod4(hooks, DIRECTORY_MODE2);
-        const config2 = join10(real, "config");
+        const config2 = join11(real, "config");
         await chmod4(config2, 384);
         active.add(real);
         return real;
       } catch (error52) {
-        await rm6(path, { recursive: true, force: true }).catch(() => {
+        await rm7(path, { recursive: true, force: true }).catch(() => {
         });
         throw error52;
       }
@@ -31561,7 +31884,7 @@ function createGithubGitBridge(input) {
     },
     async destroyPrivateBridge(path) {
       const bridge = await requireBridge(path);
-      await rm6(bridge, { recursive: true, force: true });
+      await rm7(bridge, { recursive: true, force: true });
       active.delete(bridge);
       credentialed2.delete(bridge);
     },
@@ -31569,7 +31892,7 @@ function createGithubGitBridge(input) {
       if (closed) return;
       closed = true;
       const paths = [...active];
-      await Promise.all(paths.map((path) => rm6(path, { recursive: true, force: true })));
+      await Promise.all(paths.map((path) => rm7(path, { recursive: true, force: true })));
       active.clear();
       credentialed2.clear();
     }
@@ -31909,9 +32232,9 @@ function createRepositoryTools(runtime) {
 }
 
 // src/tool-packs/github/workspace.ts
-import { randomUUID as randomUUID8 } from "node:crypto";
-import { chmod as chmod5, lstat as lstat9, mkdir as mkdir7, readFile as readFile8, realpath as realpath6, rename as rename5, rm as rm7, writeFile as writeFile3 } from "node:fs/promises";
-import { isAbsolute as isAbsolute11, join as join11, relative as relative7, resolve as resolve8 } from "node:path";
+import { randomUUID as randomUUID9 } from "node:crypto";
+import { chmod as chmod5, lstat as lstat9, mkdir as mkdir8, readFile as readFile9, realpath as realpath6, rename as rename5, rm as rm8, writeFile as writeFile4 } from "node:fs/promises";
+import { isAbsolute as isAbsolute12, join as join12, relative as relative7, resolve as resolve8 } from "node:path";
 var SAFE_LOCAL_ID = /^[A-Za-z0-9_-]{1,200}$/;
 var FULL_NAME2 = /^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/;
 var DIRECTORY_MODE3 = 448;
@@ -31929,7 +32252,7 @@ function hasControlCharacter2(value) {
 }
 function assertBelow3(parent, child, label) {
   const path = relative7(parent, child);
-  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute11(path)) {
+  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute12(path)) {
     throw new Error(`${label} escaped the task workspace`);
   }
 }
@@ -31948,10 +32271,10 @@ async function requireRealDirectory3(path, label) {
   return real;
 }
 async function createOrRequirePrivateDirectory(parent, name, label) {
-  const path = join11(parent, name);
+  const path = join12(parent, name);
   assertBelow3(parent, path, label);
   try {
-    await mkdir7(path, { mode: DIRECTORY_MODE3 });
+    await mkdir8(path, { mode: DIRECTORY_MODE3 });
   } catch (error52) {
     if (error52.code !== "EEXIST") throw error52;
   }
@@ -32031,8 +32354,8 @@ async function createGithubWorkspaceService(input) {
     if (expectedFullName !== void 0 && repository.fullName !== expectedFullName) {
       throw new Error("GitHub repository name does not match this task grant");
     }
-    const destination = join11(repositoriesRoot, parsed.data);
-    const metadataPath = join11(metadataRoot, `${parsed.data}.json`);
+    const destination = join12(repositoriesRoot, parsed.data);
+    const metadataPath = join12(metadataRoot, `${parsed.data}.json`);
     if (!await pathExists(destination) || !await pathExists(metadataPath)) {
       throw new Error("GitHub repository workspace has not been prepared");
     }
@@ -32040,7 +32363,7 @@ async function createGithubWorkspaceService(input) {
     if (!metadataEntry.isFile() || metadataEntry.isSymbolicLink()) {
       throw new Error("GitHub workspace metadata is invalid");
     }
-    const metadata = parseMetadata(await readFile8(metadataPath, "utf8"));
+    const metadata = parseMetadata(await readFile9(metadataPath, "utf8"));
     if (metadata.repositoryId !== parsed.data || metadata.fullName !== repository.fullName || !samePath(metadata.path, destination)) {
       throw new Error("GitHub workspace metadata does not match this repository");
     }
@@ -32049,14 +32372,14 @@ async function createGithubWorkspaceService(input) {
     return real;
   };
   const cloneRepository = async (clone2) => {
-    const destination = join11(repositoriesRoot, clone2.repositoryId);
-    const metadataPath = join11(metadataRoot, `${clone2.repositoryId}.json`);
+    const destination = join12(repositoriesRoot, clone2.repositoryId);
+    const metadataPath = join12(metadataRoot, `${clone2.repositoryId}.json`);
     assertBelow3(repositoriesRoot, destination, "repository path");
     assertBelow3(metadataRoot, metadataPath, "repository metadata");
     if (await pathExists(destination) || await pathExists(metadataPath)) {
       throw new Error("GitHub repository workspace already exists or is inconsistent");
     }
-    const temporary = join11(repositoriesRoot, `.clone-${randomUUID8()}`);
+    const temporary = join12(repositoriesRoot, `.clone-${randomUUID9()}`);
     assertBelow3(repositoriesRoot, temporary, "temporary clone");
     try {
       await input.git.clone({
@@ -32081,9 +32404,9 @@ async function createGithubWorkspaceService(input) {
         path: destination,
         ...clone2.createIntentId === void 0 ? {} : { createIntentId: clone2.createIntentId }
       };
-      const metadataTemporary = join11(metadataRoot, `.${clone2.repositoryId}-${randomUUID8()}.tmp`);
+      const metadataTemporary = join12(metadataRoot, `.${clone2.repositoryId}-${randomUUID9()}.tmp`);
       assertBelow3(metadataRoot, metadataTemporary, "temporary repository metadata");
-      await writeFile3(metadataTemporary, `${JSON.stringify(metadata)}
+      await writeFile4(metadataTemporary, `${JSON.stringify(metadata)}
 `, {
         flag: "wx",
         mode: FILE_MODE3
@@ -32094,11 +32417,11 @@ async function createGithubWorkspaceService(input) {
         try {
           await rename5(metadataTemporary, metadataPath);
         } catch (error52) {
-          await rm7(destination, { recursive: true, force: true });
+          await rm8(destination, { recursive: true, force: true });
           throw error52;
         }
       } finally {
-        await rm7(metadataTemporary, { force: true }).catch(() => {
+        await rm8(metadataTemporary, { force: true }).catch(() => {
         });
       }
       const path = await requireRealDirectory3(destination, "GitHub repository");
@@ -32110,14 +32433,14 @@ async function createGithubWorkspaceService(input) {
         headSha
       };
     } finally {
-      await rm7(temporary, { recursive: true, force: true }).catch(() => {
+      await rm8(temporary, { recursive: true, force: true }).catch(() => {
       });
     }
   };
   const prepareRepository = async (authority) => {
     const { repository } = authority;
-    const destination = join11(repositoriesRoot, repository.repositoryId);
-    const metadataPath = join11(metadataRoot, `${repository.repositoryId}.json`);
+    const destination = join12(repositoriesRoot, repository.repositoryId);
+    const metadataPath = join12(metadataRoot, `${repository.repositoryId}.json`);
     assertBelow3(repositoriesRoot, destination, "repository path");
     assertBelow3(metadataRoot, metadataPath, "repository metadata");
     return withWorkspaceLock(destination, async () => {
@@ -32142,7 +32465,7 @@ async function createGithubWorkspaceService(input) {
       if (!metadataEntry.isFile() || metadataEntry.isSymbolicLink()) {
         throw new Error("GitHub workspace metadata is invalid");
       }
-      const metadata = parseMetadata(await readFile8(metadataPath, "utf8"));
+      const metadata = parseMetadata(await readFile9(metadataPath, "utf8"));
       if (metadata.repositoryId !== repository.repositoryId || metadata.fullName !== repository.fullName || !samePath(metadata.path, destination)) {
         throw new Error("GitHub workspace metadata does not match this repository");
       }
@@ -32282,7 +32605,7 @@ async function createGithubWorkspaceService(input) {
         throw new Error("GitHub created repository is outside this installation");
       }
       parseGitRef(cloneInput.repository.defaultBranch, "default branch");
-      return withWorkspaceLock(join11(repositoriesRoot, repositoryId2), async () => {
+      return withWorkspaceLock(join12(repositoriesRoot, repositoryId2), async () => {
         const prepared = await cloneRepository({
           repositoryId: repositoryId2,
           fullName: cloneInput.repository.fullName,
@@ -32689,7 +33012,7 @@ function createGithubToolPackFactory(options = {}) {
 var githubToolPackFactory = createGithubToolPackFactory();
 
 // src/runners/linear-api.ts
-import { createHash as createHash3, randomUUID as randomUUID9 } from "node:crypto";
+import { createHash as createHash3, randomUUID as randomUUID10 } from "node:crypto";
 var MAX_RESPONSE_BYTES2 = 2 * 1024 * 1024;
 var MAX_RESULT_STRING = 1e5;
 var MAX_RESULT_ARRAY = 100;
@@ -33212,7 +33535,7 @@ function operationFor(name, args, appUserId, heldBy) {
     case "linear_create_comment": {
       const issueId = requiredString(args, "issue_id");
       const body = requiredString(args, "body", 1e5);
-      const commentId = randomUUID9();
+      const commentId = randomUUID10();
       return {
         query: `mutation ZixtLinearCreateComment($input: CommentCreateInput!) {
           commentCreate(input: $input) { success comment { ${COMMENT_FIELDS} } }
@@ -33823,8 +34146,8 @@ function createDefaultToolPackRegistry() {
 }
 
 // src/runners/attachments.ts
-import { mkdir as mkdir8, writeFile as writeFile4 } from "node:fs/promises";
-import { join as join12 } from "node:path";
+import { mkdir as mkdir9, writeFile as writeFile5 } from "node:fs/promises";
+import { join as join13 } from "node:path";
 var WINDOWS_RESERVED = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\..*)?$/i;
 function sanitizeAttachmentFileName(name) {
   const base = name.split(/[/\\]/).pop() ?? "";
@@ -33853,10 +34176,10 @@ async function materializeAttachments(task, taskRoot) {
         `attached file "${attachment.name}" arrived incomplete (${bytes.byteLength} of ${attachment.size} bytes)`
       );
     }
-    const directory = join12(taskRoot, ".zixt-attachments", task.taskId, attachment.id);
-    await mkdir8(directory, { recursive: true });
-    const path = join12(directory, sanitizeAttachmentFileName(attachment.name));
-    await writeFile4(path, bytes);
+    const directory = join13(taskRoot, ".zixt-attachments", task.taskId, attachment.id);
+    await mkdir9(directory, { recursive: true });
+    const path = join13(directory, sanitizeAttachmentFileName(attachment.name));
+    await writeFile5(path, bytes);
     materialized.push({
       path,
       name: attachment.name,
@@ -34820,7 +35143,7 @@ function createAskUserServer() {
 }
 
 // src/runners/runner-env.ts
-import { delimiter as delimiter2, isAbsolute as isAbsolute12 } from "node:path";
+import { delimiter as delimiter2, isAbsolute as isAbsolute13 } from "node:path";
 var PROVIDER_AUTHORITY_PREFIXES = ["GH_", "GITHUB_", "GIT_", "SSH_"];
 var HOST_AUTHORITY_PREFIXES = [
   "ZIXT_",
@@ -34879,7 +35202,7 @@ function inheritedValue(env, name) {
 }
 function sanitizeInheritedSearchPath(path) {
   if (!path) return "";
-  return path.split(delimiter2).filter((entry) => entry !== "" && isAbsolute12(entry)).join(delimiter2);
+  return path.split(delimiter2).filter((entry) => entry !== "" && isAbsolute13(entry)).join(delimiter2);
 }
 function buildRunnerEnv(input) {
   const env = {};
@@ -34960,9 +35283,9 @@ function buildRunnerEnv(input) {
 // src/runners/github-shell-auth.ts
 import { execFile } from "node:child_process";
 import { randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
-import { chmod as chmod6, lstat as lstat10, mkdir as mkdir9, realpath as realpath7, writeFile as writeFile5 } from "node:fs/promises";
+import { chmod as chmod6, lstat as lstat10, mkdir as mkdir10, realpath as realpath7, writeFile as writeFile6 } from "node:fs/promises";
 import { createServer as createServer3 } from "node:http";
-import { isAbsolute as isAbsolute13, join as join13, relative as relative8 } from "node:path";
+import { isAbsolute as isAbsolute14, join as join14, relative as relative8 } from "node:path";
 var MAX_REQUEST_BYTES2 = 16 * 1024;
 var DIRECTORY_MODE4 = 448;
 var PRIVATE_FILE_MODE = 384;
@@ -35168,7 +35491,7 @@ function parseGhInvocation(body) {
   }
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
   const { args, cwd } = value;
-  if (!Array.isArray(args) || args.length > 256 || args.some((argument) => typeof argument !== "string" || argument.length > 4096) || typeof cwd !== "string" || cwd.length === 0 || cwd.length > 4096 || !isAbsolute13(cwd)) {
+  if (!Array.isArray(args) || args.length > 256 || args.some((argument) => typeof argument !== "string" || argument.length > 4096) || typeof cwd !== "string" || cwd.length === 0 || cwd.length > 4096 || !isAbsolute14(cwd)) {
     return null;
   }
   return { args, cwd };
@@ -35327,7 +35650,7 @@ function activationCredential(grant, now = Date.now()) {
 }
 function assertChildPath2(parent, child) {
   const path = relative8(parent, child);
-  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute13(path)) {
+  if (!path || path === ".." || path.startsWith("../") || path.startsWith("..\\") || isAbsolute14(path)) {
     throw new Error("GitHub shell helper path escaped its private run directory");
   }
 }
@@ -35338,7 +35661,7 @@ function quoteForPosixShell(value) {
   return quoteForGitShell2(value);
 }
 async function writePrivate(path, content, executable = false) {
-  await writeFile5(path, content, {
+  await writeFile6(path, content, {
     flag: "wx",
     mode: executable ? EXECUTABLE_FILE_MODE : PRIVATE_FILE_MODE
   });
@@ -35350,7 +35673,7 @@ async function prepareHelpers(input) {
     throw new Error("GitHub shell authentication requires a private real run directory");
   }
   const runRoot = await realpath7(input.runRoot);
-  const helperPath = join13(runRoot, "github-shell-git-credential.cjs");
+  const helperPath = join14(runRoot, "github-shell-git-credential.cjs");
   assertChildPath2(runRoot, helperPath);
   await writePrivate(helperPath, GIT_HELPER_SOURCE);
   if (!input.ghExecutablePath) {
@@ -35361,14 +35684,14 @@ async function prepareHelpers(input) {
       wrapperSourcePath: null
     };
   }
-  const shellToolsDirectory = join13(runRoot, "shell-tools");
+  const shellToolsDirectory = join14(runRoot, "shell-tools");
   assertChildPath2(runRoot, shellToolsDirectory);
-  await mkdir9(shellToolsDirectory, { mode: DIRECTORY_MODE4 });
+  await mkdir10(shellToolsDirectory, { mode: DIRECTORY_MODE4 });
   await chmod6(shellToolsDirectory, DIRECTORY_MODE4);
-  const wrapperSourcePath = join13(runRoot, "github-shell-gh-wrapper.cjs");
+  const wrapperSourcePath = join14(runRoot, "github-shell-gh-wrapper.cjs");
   assertChildPath2(runRoot, wrapperSourcePath);
   await writePrivate(wrapperSourcePath, GH_WRAPPER_SOURCE);
-  const wrapperPath = join13(shellToolsDirectory, process.platform === "win32" ? "gh.cmd" : "gh");
+  const wrapperPath = join14(shellToolsDirectory, process.platform === "win32" ? "gh.cmd" : "gh");
   assertChildPath2(runRoot, wrapperPath);
   const launcher = process.platform === "win32" ? `@"${process.execPath.replaceAll('"', '""')}" "${wrapperSourcePath.replaceAll('"', '""')}" %*\r
 ` : `#!/bin/sh
@@ -36162,7 +36485,7 @@ async function settlesWithin(promise2, timeoutMs) {
   }
 }
 function defaultRunnerWorkspaceRoot() {
-  return join14(homedir5(), ".zixt", "workspaces");
+  return join15(homedir6(), ".zixt", "workspaces");
 }
 function defaultRunnerArtifactRoot() {
   return defaultRunArtifactRoot();
@@ -36211,7 +36534,7 @@ function createCliRunner(adapter, opts = {}) {
   const prefixArgs = opts.commandPrefixArgs ?? [];
   const maxWallTimeMs = opts.maxWallTimeMs;
   const workspaceRoot = opts.workspaceRoot ?? defaultRunnerWorkspaceRoot();
-  const artifactRoot = opts.artifactRoot ?? (opts.workspaceRoot === void 0 ? defaultRunnerArtifactRoot() : join14(dirname8(workspaceRoot), "run-artifacts"));
+  const artifactRoot = opts.artifactRoot ?? (opts.workspaceRoot === void 0 ? defaultRunnerArtifactRoot() : join15(dirname8(workspaceRoot), "run-artifacts"));
   const runRegistryRoot2 = opts.runRegistryRoot ?? defaultRunRegistryRoot();
   const createArtifacts = opts.createArtifacts ?? createRunArtifacts;
   const toolPackRegistry2 = opts.toolPackRegistry ?? createDefaultToolPackRegistry();
@@ -36229,7 +36552,7 @@ function createCliRunner(adapter, opts = {}) {
   };
   const askUserServer = createAskUserServer();
   const windowsRoot = process.env.SystemRoot ?? process.env.WINDIR;
-  const windowsComspecCandidate = process.platform === "win32" && windowsRoot ? join14(windowsRoot, "System32", "cmd.exe") : void 0;
+  const windowsComspecCandidate = process.platform === "win32" && windowsRoot ? join15(windowsRoot, "System32", "cmd.exe") : void 0;
   let safetyFailure;
   return async (task) => {
     if (safetyFailure) {
@@ -36269,8 +36592,8 @@ function createCliRunner(adapter, opts = {}) {
         usage: { inputTokens: 0, outputTokens: 0 }
       };
     }
-    const taskRoot = join14(workspaceRoot, task.agentId);
-    await mkdir10(taskRoot, { recursive: true });
+    const taskRoot = join15(workspaceRoot, task.agentId);
+    await mkdir11(taskRoot, { recursive: true });
     if (task.cancelledNow()) return cancelledBeforeRun();
     const configuredWorkspace = task.spec.workspace;
     let cwd = taskRoot;
@@ -36316,7 +36639,7 @@ function createCliRunner(adapter, opts = {}) {
         summaryEvidence: "host_observed"
       };
     }
-    const runToken = randomUUID10();
+    const runToken = randomUUID11();
     const artifacts = await createArtifacts({
       root: artifactRoot,
       agentId: task.agentId,
@@ -36577,7 +36900,7 @@ ${attachmentSection}` : prompt;
         let changed = false;
         for (const path of paths) {
           if (!path || path.length > 4096) continue;
-          const absolutePath = isAbsolute14(path) ? path : resolve10(cwd, path);
+          const absolutePath = isAbsolute15(path) ? path : resolve10(cwd, path);
           const directory = dirname8(absolutePath);
           observedWorkingDirectories.delete(directory);
           observedWorkingDirectories.add(directory);
@@ -36658,8 +36981,8 @@ ${attachmentSection}` : prompt;
           }
           comspec = resolvedWindowsComspec;
         }
-        const exitMarker = `__ZIXT_RUNNER_EXIT_${randomUUID10()}__`;
-        const guardianNonce = randomUUID10();
+        const exitMarker = `__ZIXT_RUNNER_EXIT_${randomUUID11()}__`;
+        const guardianNonce = randomUUID11();
         return runCliProcess({
           command: resolvedCommand,
           args,
@@ -37012,7 +37335,7 @@ function runCliProcess(options) {
   }
   return new Promise((resolve18) => {
     const platform = options.platform ?? process.platform;
-    const containmentGateNonce = options.guardian && platform === "win32" ? randomUUID10() : void 0;
+    const containmentGateNonce = options.guardian && platform === "win32" ? randomUUID11() : void 0;
     const child = options.guardian ? spawn8(
       options.guardian.nodeCommand,
       [
@@ -37301,17 +37624,17 @@ function runCliProcess(options) {
 }
 
 // src/runners/claude-code.ts
-import { randomUUID as randomUUID11 } from "node:crypto";
+import { randomUUID as randomUUID12 } from "node:crypto";
 
 // src/runners/runtime-observation.ts
-import { open as open6, readdir as readdir4, realpath as realpath9 } from "node:fs/promises";
-import { homedir as homedir6 } from "node:os";
-import { join as join15 } from "node:path";
+import { open as open6, readdir as readdir5, realpath as realpath9 } from "node:fs/promises";
+import { homedir as homedir7 } from "node:os";
+import { join as join16 } from "node:path";
 var READ_WINDOW_BYTES = 1024 * 1024;
 var CATALOG_TIMEOUT_MS = 15e3;
 var CATALOG_OUTPUT_LIMIT_BYTES = 4 * 1024 * 1024;
 function homeFrom(env) {
-  return env["HOME"] || env["USERPROFILE"] || homedir6();
+  return env["HOME"] || env["USERPROFILE"] || homedir7();
 }
 async function readHead(path) {
   let handle;
@@ -37366,9 +37689,9 @@ function displayValue(value, maxLength) {
   return trimmed;
 }
 function claudeTranscriptPath(input) {
-  const configDir = input.env["CLAUDE_CONFIG_DIR"] || join15(homeFrom(input.env), ".claude");
+  const configDir = input.env["CLAUDE_CONFIG_DIR"] || join16(homeFrom(input.env), ".claude");
   const slug = input.resolvedCwd.replace(/[^a-zA-Z0-9]/g, "-");
-  return join15(configDir, "projects", slug, `${input.sessionId}.jsonl`);
+  return join16(configDir, "projects", slug, `${input.sessionId}.jsonl`);
 }
 async function readClaudeSessionEffort(input) {
   const resolvedCwd = await realpath9(input.cwd).catch(() => input.cwd);
@@ -37383,19 +37706,19 @@ async function readClaudeSessionEffort(input) {
   return null;
 }
 async function newestDirectories(root, limit) {
-  const entries = await readdir4(root, { withFileTypes: true }).catch(() => []);
-  return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort((left, right) => right.localeCompare(left)).slice(0, limit).map((name) => join15(root, name));
+  const entries = await readdir5(root, { withFileTypes: true }).catch(() => []);
+  return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort((left, right) => right.localeCompare(left)).slice(0, limit).map((name) => join16(root, name));
 }
 async function findCodexRolloutPath(input) {
-  const codexHome = input.env["CODEX_HOME"] || join15(homeFrom(input.env), ".codex");
-  const sessions = join15(codexHome, "sessions");
+  const codexHome = input.env["CODEX_HOME"] || join16(homeFrom(input.env), ".codex");
+  const sessions = join16(codexHome, "sessions");
   const suffix = `-${input.threadId}.jsonl`;
   for (const year of await newestDirectories(sessions, 2)) {
     for (const month of await newestDirectories(year, 2)) {
       for (const day of await newestDirectories(month, 3)) {
-        const files = await readdir4(day).catch(() => []);
+        const files = await readdir5(day).catch(() => []);
         const match = files.find((name) => name.endsWith(suffix));
-        if (match) return join15(day, match);
+        if (match) return join16(day, match);
       }
     }
   }
@@ -37493,7 +37816,7 @@ var claudeCodeAdapter = {
       input.gitDetected,
       liveInput
     );
-    const sessionId = input.task.spec.sessionKey ?? randomUUID11();
+    const sessionId = input.task.spec.sessionKey ?? randomUUID12();
     const observeRuntime = createRuntimeReporter(input, sessionId);
     return {
       argsFor: (mode) => [
@@ -37612,7 +37935,7 @@ function createClaudeLiveParser(onStream, onSessionModel) {
     ...parser,
     async start(writer, prompt) {
       write = writer;
-      await writer(input(randomUUID11(), prompt));
+      await writer(input(randomUUID12(), prompt));
     },
     async steer(followUp) {
       if (!write) return false;
@@ -37779,22 +38102,22 @@ function improveErrorMessage(error52) {
 }
 
 // src/runners/codex.ts
-import { mkdir as mkdir11, readFile as readFile9, writeFile as writeFile6 } from "node:fs/promises";
-import { randomUUID as randomUUID12 } from "node:crypto";
-import { homedir as homedir7 } from "node:os";
-import { join as join16 } from "node:path";
+import { mkdir as mkdir12, readFile as readFile10, writeFile as writeFile7 } from "node:fs/promises";
+import { randomUUID as randomUUID13 } from "node:crypto";
+import { homedir as homedir8 } from "node:os";
+import { join as join17 } from "node:path";
 var CODEX_NOT_FOUND_MESSAGE = "The `codex` CLI was not found on this Machine. Install it (npm install -g @openai/codex) and sign in with `codex login`, or switch the agent to API-key auth.";
 function defaultCodexThreadIndexRoot() {
-  return join16(homedir7(), ".zixt", "codex-threads");
+  return join17(homedir8(), ".zixt", "codex-threads");
 }
 var SAFE_SEGMENT3 = /^[A-Za-z0-9_-]{1,200}$/;
 function threadIndexPath(root, agentId, sessionKey) {
   if (!SAFE_SEGMENT3.test(agentId) || !SAFE_SEGMENT3.test(sessionKey)) return null;
-  return join16(root, agentId, `${sessionKey}.json`);
+  return join17(root, agentId, `${sessionKey}.json`);
 }
 async function readThreadId(path) {
   try {
-    const parsed = JSON.parse(await readFile9(path, "utf8"));
+    const parsed = JSON.parse(await readFile10(path, "utf8"));
     return typeof parsed.threadId === "string" && /^[A-Za-z0-9-]{1,120}$/.test(parsed.threadId) ? parsed.threadId : null;
   } catch {
     return null;
@@ -37885,7 +38208,7 @@ ${value}` : value;
       const recordedThreadId = indexPath ? await readThreadId(indexPath) : null;
       const rememberThread = (threadId) => {
         if (!indexPath) return;
-        void mkdir11(join16(threadIndexRoot, task.agentId), { recursive: true }).then(() => writeFile6(indexPath, JSON.stringify({ threadId }), "utf8")).catch(() => {
+        void mkdir12(join17(threadIndexRoot, task.agentId), { recursive: true }).then(() => writeFile7(indexPath, JSON.stringify({ threadId }), "utf8")).catch(() => {
         });
       };
       const observeRuntime = (threadId) => {
@@ -37989,7 +38312,7 @@ function createCodexAppServerParser(onStream, options) {
       params: {
         threadId,
         input: [{ type: "text", text: prompt }],
-        clientUserMessageId: randomUUID12(),
+        clientUserMessageId: randomUUID13(),
         ...options.model ? { model: options.model } : {},
         ...options.effort ? { effort: options.effort } : {}
       }
@@ -38350,7 +38673,7 @@ function improveCodexErrorMessage(error52) {
 // src/runners/git-preflight.ts
 import { spawn as spawn9 } from "node:child_process";
 import { realpath as realpath10 } from "node:fs/promises";
-import { isAbsolute as isAbsolute15, resolve as resolve11 } from "node:path";
+import { isAbsolute as isAbsolute16, resolve as resolve11 } from "node:path";
 var OUTPUT_LIMIT = 8192;
 var DEFAULT_TIMEOUT_MS4 = 1e4;
 var VERSION_PATTERN = /^git version [^\r\n]{1,108}$/;
@@ -38366,7 +38689,7 @@ function unavailable(error52, checkedAt, executablePath = null) {
 async function preflightGit(options = {}) {
   const checkedAt = (options.now?.() ?? /* @__PURE__ */ new Date()).toISOString();
   const configured = options.command;
-  if (configured !== void 0 && !isAbsolute15(configured)) {
+  if (configured !== void 0 && !isAbsolute16(configured)) {
     return unavailable("configured git command must be an absolute file", checkedAt);
   }
   const trustedCwd = await realpath10(resolve11(options.trustedCwd ?? process.cwd())).catch(() => null);
@@ -38621,9 +38944,9 @@ function run2(command, args) {
 // src/linux-service.ts
 import { spawn as spawn10 } from "node:child_process";
 import { constants as constants2 } from "node:fs";
-import { access as access4, chmod as chmod7, mkdir as mkdir12, open as open7, rename as rename6, rm as rm8 } from "node:fs/promises";
-import { homedir as homedir8, userInfo } from "node:os";
-import { basename as basename4, dirname as dirname9, join as join17, relative as relative9, resolve as resolve12, sep as sep5 } from "node:path";
+import { access as access4, chmod as chmod7, mkdir as mkdir13, open as open7, rename as rename6, rm as rm9 } from "node:fs/promises";
+import { homedir as homedir9, userInfo } from "node:os";
+import { basename as basename4, dirname as dirname9, join as join18, relative as relative9, resolve as resolve12, sep as sep5 } from "node:path";
 var SERVICE_NAME = "zixt-host.service";
 var SYSTEM_SERVICE_COMMAND_TIMEOUT_MS = 7e4;
 var SERVICE_STABILITY_DELAY_MS = 2e3;
@@ -38724,7 +39047,7 @@ async function defaultSyncDirectory(path) {
   }
 }
 async function ensureDirectory(path, mode, syncDirectory8) {
-  const firstCreated = await mkdir12(path, { recursive: true, mode });
+  const firstCreated = await mkdir13(path, { recursive: true, mode });
   if (!firstCreated) return;
   const first = resolve12(firstCreated);
   const target = resolve12(path);
@@ -38733,13 +39056,13 @@ async function ensureDirectory(path, mode, syncDirectory8) {
   const descendants = relative9(first, target);
   for (const part of descendants ? descendants.split(sep5) : []) {
     await syncDirectory8(current);
-    current = join17(current, part);
+    current = join18(current, part);
   }
 }
 async function replacePrivateFile(path, contents, mode, syncDirectory8) {
   const parent = dirname9(path);
   await ensureDirectory(parent, 448, syncDirectory8);
-  const temporary = join17(parent, `.${basename4(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join18(parent, `.${basename4(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open7(temporary, "wx", mode);
   try {
     await handle.writeFile(contents, "utf8");
@@ -38750,7 +39073,7 @@ async function replacePrivateFile(path, contents, mode, syncDirectory8) {
     await syncDirectory8(parent);
   } catch (error52) {
     await handle.close().catch(() => void 0);
-    await rm8(temporary, { force: true }).catch(() => void 0);
+    await rm9(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
 }
@@ -38783,7 +39106,7 @@ async function installLinuxService(options) {
     throw new Error("Linux automatic startup is available only on Linux.");
   }
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir8();
+  const home = options.home ?? homedir9();
   const username = oneLine(options.username ?? userInfo().username, "user name");
   const token2 = oneLine(options.token, "pairing code");
   const path = oneLine(
@@ -38791,11 +39114,11 @@ async function installLinuxService(options) {
     "command search path"
   );
   const cloudUrl = options.cloudUrl ? oneLine(options.cloudUrl, "Zixt Cloud address") : void 0;
-  const xdgConfigHome = env.XDG_CONFIG_HOME ? oneLine(env.XDG_CONFIG_HOME, "Linux configuration path") : join17(home, ".config");
-  const configRoot = options.serviceConfigRoot ?? join17(xdgConfigHome, "zixt");
-  const unitRoot = options.userUnitRoot ?? join17(xdgConfigHome, "systemd", "user");
-  const environmentPath = join17(configRoot, "host.env");
-  const unitPath = join17(unitRoot, SERVICE_NAME);
+  const xdgConfigHome = env.XDG_CONFIG_HOME ? oneLine(env.XDG_CONFIG_HOME, "Linux configuration path") : join18(home, ".config");
+  const configRoot = options.serviceConfigRoot ?? join18(xdgConfigHome, "zixt");
+  const unitRoot = options.userUnitRoot ?? join18(xdgConfigHome, "systemd", "user");
+  const environmentPath = join18(configRoot, "host.env");
+  const unitPath = join18(unitRoot, SERVICE_NAME);
   const installVersion = options.installVersion ?? installRelease;
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : activateInstalledRelease);
   const resolveCommand = options.resolveCommand ?? defaultResolveCommand;
@@ -38914,9 +39237,9 @@ async function installLinuxService(options) {
 // src/macos-service.ts
 import { spawn as spawn11 } from "node:child_process";
 import { constants as constants3 } from "node:fs";
-import { access as access5, chmod as chmod8, mkdir as mkdir13, open as open8, rename as rename7, rm as rm9 } from "node:fs/promises";
-import { homedir as homedir9, userInfo as userInfo2 } from "node:os";
-import { basename as basename5, dirname as dirname10, join as join18, relative as relative10, resolve as resolve13, sep as sep6 } from "node:path";
+import { access as access5, chmod as chmod8, mkdir as mkdir14, open as open8, rename as rename7, rm as rm10 } from "node:fs/promises";
+import { homedir as homedir10, userInfo as userInfo2 } from "node:os";
+import { basename as basename5, dirname as dirname10, join as join19, relative as relative10, resolve as resolve13, sep as sep6 } from "node:path";
 var LAUNCH_AGENT_LABEL = "ai.zixt.host";
 var SERVICE_STABILITY_DELAY_MS2 = 2e3;
 var COMMAND_TIMEOUT_MS2 = 7e4;
@@ -38940,7 +39263,7 @@ async function syncDirectory4(path) {
   }
 }
 async function ensureDirectory2(path, sync) {
-  const firstCreated = await mkdir13(path, { recursive: true, mode: 448 });
+  const firstCreated = await mkdir14(path, { recursive: true, mode: 448 });
   if (!firstCreated) return;
   const first = resolve13(firstCreated);
   const target = resolve13(path);
@@ -38948,13 +39271,13 @@ async function ensureDirectory2(path, sync) {
   let current = first;
   for (const part of relative10(first, target).split(sep6).filter(Boolean)) {
     await sync(current);
-    current = join18(current, part);
+    current = join19(current, part);
   }
 }
 async function replacePrivateFile2(path, contents, mode, sync) {
   const parent = dirname10(path);
   await ensureDirectory2(parent, sync);
-  const temporary = join18(parent, `.${basename5(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join19(parent, `.${basename5(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open8(temporary, "wx", mode);
   try {
     await handle.writeFile(contents, "utf8");
@@ -38965,7 +39288,7 @@ async function replacePrivateFile2(path, contents, mode, sync) {
     await sync(parent);
   } catch (error52) {
     await handle.close().catch(() => void 0);
-    await rm9(temporary, { force: true }).catch(() => void 0);
+    await rm10(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
 }
@@ -39042,7 +39365,7 @@ async function installMacosService(options) {
     throw new Error("macOS automatic startup is available only on macOS.");
   }
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir9();
+  const home = options.home ?? homedir10();
   const uid = options.uid ?? userInfo2().uid;
   if (!Number.isSafeInteger(uid) || uid < 0) throw new Error("macOS user id is invalid.");
   const token2 = oneLine2(options.token, "pairing code");
@@ -39051,14 +39374,14 @@ async function installMacosService(options) {
     options.path ?? env.PATH ?? "/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin",
     "command search path"
   );
-  const configRoot = options.configRoot ?? join18(home, "Library", "Application Support", "Zixt");
-  const launchAgentsRoot = options.launchAgentsRoot ?? join18(home, "Library", "LaunchAgents");
-  const logRoot = options.logRoot ?? join18(home, "Library", "Logs", "Zixt");
-  const configPath = join18(configRoot, "host.env");
-  const launcherPath = join18(configRoot, "host-launcher.sh");
-  const plistPath = join18(launchAgentsRoot, `${LAUNCH_AGENT_LABEL}.plist`);
-  const stdoutPath = join18(logRoot, "host.log");
-  const stderrPath = join18(logRoot, "host-error.log");
+  const configRoot = options.configRoot ?? join19(home, "Library", "Application Support", "Zixt");
+  const launchAgentsRoot = options.launchAgentsRoot ?? join19(home, "Library", "LaunchAgents");
+  const logRoot = options.logRoot ?? join19(home, "Library", "Logs", "Zixt");
+  const configPath = join19(configRoot, "host.env");
+  const launcherPath = join19(configRoot, "host-launcher.sh");
+  const plistPath = join19(launchAgentsRoot, `${LAUNCH_AGENT_LABEL}.plist`);
+  const stdoutPath = join19(logRoot, "host.log");
+  const stderrPath = join19(logRoot, "host-error.log");
   const installVersion = options.installVersion ?? installRelease;
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? (async () => defaultResolveCommand2());
@@ -39145,9 +39468,9 @@ async function installMacosService(options) {
 // src/windows-service.ts
 import { spawn as spawn12 } from "node:child_process";
 import { constants as constants4 } from "node:fs";
-import { access as access6, mkdir as mkdir14, open as open9, readFile as readFile10, rename as rename8, rm as rm10 } from "node:fs/promises";
-import { homedir as homedir10 } from "node:os";
-import { basename as basename6, dirname as dirname11, isAbsolute as isAbsolute16, join as join19, relative as relative11, resolve as resolve14, sep as sep7 } from "node:path";
+import { access as access6, mkdir as mkdir15, open as open9, readFile as readFile11, rename as rename8, rm as rm11 } from "node:fs/promises";
+import { homedir as homedir11 } from "node:os";
+import { basename as basename6, dirname as dirname11, isAbsolute as isAbsolute17, join as join20, relative as relative11, resolve as resolve14, sep as sep7 } from "node:path";
 var TASK_NAME = "Zixt Host";
 var COMMAND_TIMEOUT_MS3 = 7e4;
 var SERVICE_STABILITY_DELAY_MS3 = 2e3;
@@ -39173,7 +39496,7 @@ async function syncDirectory5(path) {
   }
 }
 async function ensureDirectory3(path, sync) {
-  const firstCreated = await mkdir14(path, { recursive: true, mode: 448 });
+  const firstCreated = await mkdir15(path, { recursive: true, mode: 448 });
   if (!firstCreated) return;
   const first = resolve14(firstCreated);
   const target = resolve14(path);
@@ -39181,13 +39504,13 @@ async function ensureDirectory3(path, sync) {
   let current = first;
   for (const part of relative11(first, target).split(sep7).filter(Boolean)) {
     await sync(current);
-    current = join19(current, part);
+    current = join20(current, part);
   }
 }
 async function replacePrivateFile3(path, contents, sync) {
   const parent = dirname11(path);
   await ensureDirectory3(parent, sync);
-  const temporary = join19(parent, `.${basename6(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join20(parent, `.${basename6(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open9(temporary, "wx", 384);
   try {
     await handle.writeFile(contents, "utf8");
@@ -39197,7 +39520,7 @@ async function replacePrivateFile3(path, contents, sync) {
     await sync(parent);
   } catch (error52) {
     await handle.close().catch(() => void 0);
-    await rm10(temporary, { force: true }).catch(() => void 0);
+    await rm11(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
 }
@@ -39241,8 +39564,8 @@ async function runChild(command, args, env, input) {
 }
 async function defaultResolveCommand3(name, env) {
   const root = env.SYSTEMROOT ?? env.WINDIR;
-  if (!root || !isAbsolute16(root)) return null;
-  const candidate = name === "powershell" ? join19(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : join19(root, "System32", `${name}.exe`);
+  if (!root || !isAbsolute17(root)) return null;
+  const candidate = name === "powershell" ? join20(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : join20(root, "System32", `${name}.exe`);
   return access6(candidate, constants4.X_OK).then(
     () => candidate,
     () => null
@@ -39330,7 +39653,7 @@ exit $code
 }
 async function defaultObserveStatus(path, generation) {
   try {
-    const text = (await readFile10(path, "utf8")).replace(/^\uFEFF/, "");
+    const text = (await readFile11(path, "utf8")).replace(/^\uFEFF/, "");
     const value = JSON.parse(text);
     if (value.schema !== 1 || value.generation !== generation || typeof value.pid !== "number" || !Number.isSafeInteger(value.pid) || value.pid <= 0) {
       return null;
@@ -39371,19 +39694,19 @@ async function installWindowsService(options) {
     throw new Error("Windows automatic startup is available only on Windows.");
   }
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir10();
+  const home = options.home ?? homedir11();
   const localAppData = options.localAppData ?? env.LOCALAPPDATA;
-  if (!localAppData || !isAbsolute16(localAppData)) {
+  if (!localAppData || !isAbsolute17(localAppData)) {
     throw new Error("Windows local application data path is unavailable.");
   }
   const token2 = oneLine3(options.token, "pairing code");
   const cloudUrl = options.cloudUrl ? oneLine3(options.cloudUrl, "Zixt Cloud address") : void 0;
   const path = oneLine3(options.path ?? env.PATH ?? "", "command search path");
-  const configRoot = options.configRoot ?? join19(localAppData, "Zixt", "Host");
-  const configPath = join19(configRoot, "host.json");
-  const launcherPath = join19(configRoot, "host-launcher.ps1");
-  const taskXmlPath = join19(configRoot, "host-task.xml");
-  const statusPath = join19(configRoot, "host-status.json");
+  const configRoot = options.configRoot ?? join20(localAppData, "Zixt", "Host");
+  const configPath = join20(configRoot, "host.json");
+  const launcherPath = join20(configRoot, "host-launcher.ps1");
+  const taskXmlPath = join20(configRoot, "host-task.xml");
+  const statusPath = join20(configRoot, "host-status.json");
   const installVersion = options.installVersion ?? installRelease;
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? ((name) => defaultResolveCommand3(name, env));
@@ -39432,7 +39755,7 @@ async function installWindowsService(options) {
   );
   await replacePrivateFile3(launcherPath, launcherSource2(configPath, statusPath), sync);
   await replacePrivateFile3(taskXmlPath, taskXml({ sid, powershell, launcherPath, home }), sync);
-  await rm10(statusPath, { force: true });
+  await rm11(statusPath, { force: true });
   const acl = await run3(icacls, [
     configRoot,
     "/inheritance:r",
@@ -39484,23 +39807,23 @@ async function installSystemService(options) {
 }
 
 // src/terminal-outcomes.ts
-import { chmod as chmod9, lstat as lstat12, mkdir as mkdir15, open as open10, readdir as readdir5, readFile as readFile11, rename as rename9, rm as rm11 } from "node:fs/promises";
-import { homedir as homedir11 } from "node:os";
-import { dirname as dirname12, join as join20, relative as relative12, resolve as resolve15, sep as sep8 } from "node:path";
+import { chmod as chmod9, lstat as lstat12, mkdir as mkdir16, open as open10, readdir as readdir6, readFile as readFile12, rename as rename9, rm as rm12 } from "node:fs/promises";
+import { homedir as homedir12 } from "node:os";
+import { dirname as dirname12, join as join21, relative as relative12, resolve as resolve15, sep as sep8 } from "node:path";
 var DIRECTORY_MODE5 = 448;
 var FILE_MODE4 = 384;
 var MAX_OUTCOME_BYTES = 4 * 1024 * 1024;
 var HOST_DIRECTORY = /^hst_[0-9a-f]{32}$/;
 var OUTCOME_FILE = /^(tsk_[0-9a-f]{32})\.([1-9][0-9]*)\.json$/;
 function defaultTerminalOutcomeRoot() {
-  return join20(homedir11(), ".zixt", "terminal-outcomes");
+  return join21(homedir12(), ".zixt", "terminal-outcomes");
 }
 function hostOutcomeRoot(root, hostId) {
   if (!HOST_DIRECTORY.test(hostId)) throw new Error("terminal outcome Host identity is malformed");
-  return join20(root, hostId);
+  return join21(root, hostId);
 }
 function outcomePath(root, hostId, taskId, epoch) {
-  return join20(hostOutcomeRoot(root, hostId), `${taskId}.${epoch}.json`);
+  return join21(hostOutcomeRoot(root, hostId), `${taskId}.${epoch}.json`);
 }
 async function syncDirectory6(root) {
   if (process.platform === "win32") return;
@@ -39512,7 +39835,7 @@ async function syncDirectory6(root) {
   }
 }
 async function requirePrivateRoot(root, sync = syncDirectory6) {
-  const firstCreated = await mkdir15(root, { recursive: true, mode: DIRECTORY_MODE5 });
+  const firstCreated = await mkdir16(root, { recursive: true, mode: DIRECTORY_MODE5 });
   if (firstCreated) {
     const first = resolve15(firstCreated);
     const target = resolve15(root);
@@ -39520,7 +39843,7 @@ async function requirePrivateRoot(root, sync = syncDirectory6) {
     let current = first;
     for (const part of relative12(first, target).split(sep8).filter(Boolean)) {
       await sync(current);
-      current = join20(current, part);
+      current = join21(current, part);
     }
   }
   const stat3 = await lstat12(root);
@@ -39551,7 +39874,7 @@ async function recordTerminalOutcome(hostId, input, root = defaultTerminalOutcom
   const destination = outcomePath(root, hostId, outcome.taskId, outcome.epoch);
   try {
     const existing = parseCommittedOutcome(
-      await readFile11(destination, { encoding: "utf8", flag: "r" }),
+      await readFile12(destination, { encoding: "utf8", flag: "r" }),
       outcome.taskId,
       outcome.epoch
     );
@@ -39560,7 +39883,7 @@ async function recordTerminalOutcome(hostId, input, root = defaultTerminalOutcom
   } catch (error52) {
     if (error52.code !== "ENOENT") throw error52;
   }
-  const temporary = join20(
+  const temporary = join21(
     scopedRoot,
     `.${outcome.taskId}.${outcome.epoch}.${process.pid}.${Date.now()}.${outcome.resultId}.tmp`
   );
@@ -39577,7 +39900,7 @@ async function recordTerminalOutcome(hostId, input, root = defaultTerminalOutcom
   } finally {
     await handle?.close().catch(() => {
     });
-    await rm11(temporary, { force: true }).catch(() => {
+    await rm12(temporary, { force: true }).catch(() => {
     });
   }
 }
@@ -39593,7 +39916,7 @@ async function readTerminalOutcomesStrict(root = defaultTerminalOutcomeRoot()) {
     throw new Error("terminal outcome journal root is not a trusted directory");
   }
   await chmod9(root, DIRECTORY_MODE5);
-  const hostEntries = await readdir5(root, { withFileTypes: true });
+  const hostEntries = await readdir6(root, { withFileTypes: true });
   const outcomes = [];
   const resultIds = /* @__PURE__ */ new Set();
   for (const hostEntry of hostEntries) {
@@ -39606,20 +39929,20 @@ async function readTerminalOutcomesStrict(root = defaultTerminalOutcomeRoot()) {
       throw new Error("terminal outcome Host scope is not a trusted directory");
     }
     await chmod9(scopedRoot, DIRECTORY_MODE5);
-    const entries = await readdir5(scopedRoot, { withFileTypes: true });
+    const entries = await readdir6(scopedRoot, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.name.endsWith(".json")) continue;
       const match = OUTCOME_FILE.exec(entry.name);
       if (!match || !entry.isFile() || entry.isSymbolicLink()) {
         throw new Error("committed terminal outcome is not a trusted regular file");
       }
-      const path = join20(scopedRoot, entry.name);
+      const path = join21(scopedRoot, entry.name);
       const stat3 = await lstat12(path);
       if (!stat3.isFile() || stat3.isSymbolicLink() || stat3.size > MAX_OUTCOME_BYTES) {
         throw new Error("committed terminal outcome is not a trusted regular file");
       }
       const outcome = parseCommittedOutcome(
-        await readFile11(path, "utf8"),
+        await readFile12(path, "utf8"),
         match[1],
         Number(match[2])
       );
@@ -39646,7 +39969,7 @@ async function forgetAcknowledgedTerminalOutcomes(refs, root = defaultTerminalOu
     if (acknowledged.get(`${hostId}:${outcome.taskId}:${outcome.epoch}`) !== outcome.resultId) {
       continue;
     }
-    await rm11(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
+    await rm12(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
     changedHostRoots.add(hostOutcomeRoot(root, hostId));
   }
   for (const scopedRoot of changedHostRoots) await syncDirectory6(scopedRoot);
@@ -39658,22 +39981,22 @@ async function forgetSupersededTerminalOutcomes(hostId, taskId, epoch, root = de
     if (scoped.hostId !== hostId) continue;
     const { outcome } = scoped;
     if (outcome.taskId !== taskId || outcome.epoch >= epoch) continue;
-    await rm11(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
+    await rm12(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
     removed = true;
   }
   if (removed) await syncDirectory6(hostOutcomeRoot(root, hostId));
 }
 
 // src/accepted-assignments.ts
-import { chmod as chmod10, lstat as lstat13, mkdir as mkdir16, open as open11, readdir as readdir6, rename as rename10, rm as rm12 } from "node:fs/promises";
-import { homedir as homedir12 } from "node:os";
-import { dirname as dirname13, join as join21, relative as relative13, resolve as resolve16, sep as sep9 } from "node:path";
+import { chmod as chmod10, lstat as lstat13, mkdir as mkdir17, open as open11, readdir as readdir7, rename as rename10, rm as rm13 } from "node:fs/promises";
+import { homedir as homedir13 } from "node:os";
+import { dirname as dirname13, join as join22, relative as relative13, resolve as resolve16, sep as sep9 } from "node:path";
 var DIRECTORY_MODE6 = 448;
 var FILE_MODE5 = 384;
 var CLAIM_FILE = /^(tsk_[0-9a-f]{32})\.([1-9][0-9]*)\.json$/;
 var TASK_ID = /^tsk_[0-9a-f]{32}$/;
 function defaultAcceptedAssignmentRoot() {
-  return join21(homedir12(), ".zixt", "accepted-assignments");
+  return join22(homedir13(), ".zixt", "accepted-assignments");
 }
 async function syncDirectory7(root) {
   if (process.platform === "win32") return;
@@ -39685,7 +40008,7 @@ async function syncDirectory7(root) {
   }
 }
 async function requirePrivateRoot2(root, sync = syncDirectory7) {
-  const firstCreated = await mkdir16(root, { recursive: true, mode: DIRECTORY_MODE6 });
+  const firstCreated = await mkdir17(root, { recursive: true, mode: DIRECTORY_MODE6 });
   if (firstCreated) {
     const first = resolve16(firstCreated);
     const target = resolve16(root);
@@ -39693,7 +40016,7 @@ async function requirePrivateRoot2(root, sync = syncDirectory7) {
     let current = first;
     for (const part of relative13(first, target).split(sep9).filter(Boolean)) {
       await sync(current);
-      current = join21(current, part);
+      current = join22(current, part);
     }
   }
   const stat3 = await lstat13(root);
@@ -39707,7 +40030,7 @@ function claimPath(root, taskId, epoch) {
   if (!Number.isSafeInteger(epoch) || epoch < 1) {
     throw new Error("accepted assignment epoch is malformed");
   }
-  return join21(root, `${taskId}.${epoch}.json`);
+  return join22(root, `${taskId}.${epoch}.json`);
 }
 async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssignmentRoot(), options = {}) {
   const sync = options.syncDirectory ?? syncDirectory7;
@@ -39717,7 +40040,7 @@ async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssign
   } catch {
     return false;
   }
-  const temporary = join21(
+  const temporary = join22(
     root,
     `.${assignment.taskId}.${assignment.epoch}.${process.pid}.${Date.now()}.tmp`
   );
@@ -39737,7 +40060,7 @@ async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssign
   } finally {
     await handle?.close().catch(() => {
     });
-    await rm12(temporary, { force: true }).catch(() => {
+    await rm13(temporary, { force: true }).catch(() => {
     });
   }
 }
@@ -39754,7 +40077,7 @@ async function recoverAcceptedAssignments(root = defaultAcceptedAssignmentRoot()
   }
   await chmod10(root, DIRECTORY_MODE6);
   const claims = [];
-  for (const entry of await readdir6(root, { withFileTypes: true })) {
+  for (const entry of await readdir7(root, { withFileTypes: true })) {
     if (!entry.isFile()) continue;
     const match = CLAIM_FILE.exec(entry.name);
     if (!match) continue;
@@ -39771,7 +40094,7 @@ async function forgetAcceptedAssignment(assignment, root = defaultAcceptedAssign
   } catch {
     return;
   }
-  await rm12(path, { force: true }).catch(() => {
+  await rm13(path, { force: true }).catch(() => {
   });
 }
 async function forgetAcknowledgedAcceptedAssignments(assignments, root = defaultAcceptedAssignmentRoot()) {
@@ -39880,23 +40203,23 @@ function createHostLogger(options = {}) {
 }
 
 // src/demo-state.ts
-import { isAbsolute as isAbsolute17, join as join22, parse as parse3, resolve as resolve17 } from "node:path";
+import { isAbsolute as isAbsolute18, join as join23, parse as parse3, resolve as resolve17 } from "node:path";
 var DEMO_STATE_ROOT_ENV = "ZIXT_DEMO_STATE_ROOT";
 function resolveDemoHostStatePaths(env = process.env) {
   const configured = env.ZIXT_RUNNER === "demo" ? env[DEMO_STATE_ROOT_ENV] : void 0;
   if (!configured) return null;
   const root = resolve17(configured);
-  if (!isAbsolute17(configured) || root === parse3(root).root) {
+  if (!isAbsolute18(configured) || root === parse3(root).root) {
     throw new Error(`${DEMO_STATE_ROOT_ENV} must be a dedicated absolute directory`);
   }
   return {
-    runRegistryRoot: join22(root, "run-registry"),
-    terminalOutcomeRoot: join22(root, "terminal-outcomes"),
-    acceptedAssignmentRoot: join22(root, "accepted-assignments"),
-    runArtifactRoot: join22(root, "run-artifacts"),
-    browserProfileRoot: join22(root, "browser-profiles"),
-    runnerWorkspaceRoot: join22(root, "workspaces"),
-    codexThreadIndexRoot: join22(root, "codex-threads")
+    runRegistryRoot: join23(root, "run-registry"),
+    terminalOutcomeRoot: join23(root, "terminal-outcomes"),
+    acceptedAssignmentRoot: join23(root, "accepted-assignments"),
+    runArtifactRoot: join23(root, "run-artifacts"),
+    browserProfileRoot: join23(root, "browser-profiles"),
+    runnerWorkspaceRoot: join23(root, "workspaces"),
+    codexThreadIndexRoot: join23(root, "codex-threads")
   };
 }
 
@@ -40058,7 +40381,7 @@ try {
   console.error(hostHelpText());
   process.exit(DO_NOT_RESTART_EXIT_CODE);
 }
-var colorOverride = forcedColor(cliOptions.color);
+var colorOverride = forcedColor(cliOptions.color) ?? (process.env[HOST_CONSOLE_COLOR_ENV] === "1" ? true : void 0);
 var hostConsoleTail = [];
 var hostConsoleSequence = 0;
 var clientForConsole = {};
@@ -40322,7 +40645,7 @@ async function telemetry() {
     // Measured per heartbeat: free memory and free disk are only useful while
     // they are current, and a demo Host reports its own private root so the
     // number describes the filesystem its Tasks would really write to.
-    hardware: await machineHardware(runnerWorkspaceRoot ?? homedir13()),
+    hardware: await machineHardware(runnerWorkspaceRoot ?? homedir14()),
     capabilities: {
       linearToolPack: providerToolPacks.some(
         (pack) => pack.provider === "linear" && pack.health === "ready"
@@ -40493,6 +40816,9 @@ var client = new HostClient({
     switch (status) {
       case "connected":
         log.success("Connected to Zixt Cloud", connectionContext);
+        if (reportedWorkerExits.length > 0) {
+          void forgetWorkerExits(reportedWorkerExits.map(({ file: file2 }) => file2));
+        }
         break;
       case "disconnected":
         log.warn("Connection lost; retrying", {
@@ -40531,6 +40857,18 @@ var client = new HostClient({
   browser: browserManager
 });
 clientForConsole.current = client;
+var diagnosticsRoot = configuredWorkerDiagnosticsRoot();
+var reportedWorkerExits = diagnosticsRoot ? await readWorkerExits(diagnosticsRoot) : [];
+for (const { record: record2 } of reportedWorkerExits) {
+  const { summary, context } = describeWorkerExit(record2);
+  log.error(`The previous Zixt Host worker ${summary}`, {
+    machine,
+    at: record2.at,
+    ...context,
+    next: "This Machine restarted itself; report it if the same exit repeats"
+  });
+  for (const line of record2.stderr) log.error("Previous worker output", { machine, line });
+}
 log.info("Starting Zixt Host", connectionContext);
 client.start();
 var shuttingDown = false;
@@ -40539,14 +40877,24 @@ function shutdown(exitCode = 0) {
   shuttingDown = true;
   retainRunAssignments();
   log.info("Stopping Zixt Host", { machine, activeTasks: activeSessions });
-  const recoveringLiveRuns = activeSessions > 0;
-  setTimeout(
-    () => {
-      finishWorkerProcess(recoveringLiveRuns ? 1 : exitCode);
-    },
-    recoveringLiveRuns ? 3e4 : 2e3
-  ).unref();
-  void workerWatchdog.stop().then(() => client.stop()).then(() => finishWorkerProcess(exitCode));
+  beginWorkerShutdown({
+    activeTasks: activeSessions,
+    exitCode,
+    teardown: () => client.stop(),
+    stopHeartbeat: () => workerWatchdog.stop(),
+    onForcedExit: ({ deadlineMs, code, teardownCompleted }) => {
+      log.warn(
+        teardownCompleted ? "Zixt Host finished stopping but the process stayed alive; exiting now" : "Zixt Host did not finish stopping in time; exiting now",
+        {
+          machine,
+          deadline: formatDuration(deadlineMs),
+          exit: code,
+          activeTasks: activeSessions,
+          next: "The Host restarts automatically; report this if it repeats"
+        }
+      );
+    }
+  });
 }
 stopUpdateWatch = !packagedBuild ? () => {
 } : watchForUpdates({