agent-valley 2.3.0 → 2.3.1

package/dist/index.js

@@ -20825,9 +20825,9 @@ class NodeFsHandler {
   _watchWithNodeFs(path, listener) {
     const opts = this.fsw.options;
     const directory = sp.dirname(path);
-    const basename2 = sp.basename(path);
+    const basename = sp.basename(path);
     const parent = this.fsw._getWatchedDir(directory);
-    parent.add(basename2);
+    parent.add(basename);
     const absolutePath = sp.resolve(path);
     const options = {
       persistent: opts.persistent
@@ -20837,7 +20837,7 @@ class NodeFsHandler {
     let closer;
     if (opts.usePolling) {
       const enableBin = opts.interval !== opts.binaryInterval;
-      options.interval = enableBin && isBinaryPath(basename2) ? opts.binaryInterval : opts.interval;
+      options.interval = enableBin && isBinaryPath(basename) ? opts.binaryInterval : opts.interval;
       closer = setFsWatchFileListener(path, absolutePath, options, {
         listener,
         rawEmitter: this.fsw._emitRaw
@@ -20856,10 +20856,10 @@ class NodeFsHandler {
       return;
     }
     const dirname = sp.dirname(file);
-    const basename2 = sp.basename(file);
+    const basename = sp.basename(file);
     const parent = this.fsw._getWatchedDir(dirname);
     let prevStats = stats;
-    if (parent.has(basename2))
+    if (parent.has(basename))
       return;
     const listener = async (path, newStats) => {
       if (!this.fsw._throttle(THROTTLE_MODE_WATCH, file, 5))
@@ -20884,9 +20884,9 @@ class NodeFsHandler {
             prevStats = newStats;
           }
         } catch (error) {
-          this.fsw._remove(dirname, basename2);
+          this.fsw._remove(dirname, basename);
         }
-      } else if (parent.has(basename2)) {
+      } else if (parent.has(basename)) {
         const at = newStats.atimeMs;
         const mt = newStats.mtimeMs;
         if (!at || at <= mt || mt !== prevStats.mtimeMs) {
@@ -22518,8 +22518,8 @@ function canonicalConfig(config) {
 // src/agent-provisioning.ts
 import { spawn as spawn17 } from "node:child_process";
 import { mkdtempSync, rmSync as rmSync2 } from "node:fs";
-import { homedir as homedir7, tmpdir as tmpdir4 } from "node:os";
-import { delimiter as delimiter3, join as join46 } from "node:path";
+import { homedir as homedir8, tmpdir as tmpdir4 } from "node:os";
+import { delimiter as delimiter3, join as join47 } from "node:path";
 function runTerminalCommand(request, spawnCommand = spawn17) {
   return new Promise((resolve) => {
     let child;
@@ -22562,13 +22562,13 @@ function runTerminalCommand(request, spawnCommand = spawn17) {
 function defaults() {
   return {
     platform: process.platform,
-    home: homedir7(),
+    home: homedir8(),
     env: process.env,
     resolveBinary: resolveBinaryPath,
     discover: discoverAgents,
     runCommand: runTerminalCommand,
     supportsLoginCommand: (agent, path, env) => supportsNativeLoginCommand(agent, path, { env }),
-    makeTempDir: () => mkdtempSync(join46(tmpdir4(), "av-agent-install-")),
+    makeTempDir: () => mkdtempSync(join47(tmpdir4(), "av-agent-install-")),
     removeTempDir: (path) => rmSync2(path, { recursive: true, force: true })
   };
 }
@@ -22595,7 +22595,7 @@ async function runOfficialInstaller(installerUrl, deps, options = {}) {
   let directory;
   try {
     directory = deps.makeTempDir();
-    const scriptPath = join46(directory, "install.sh");
+    const scriptPath = join47(directory, "install.sh");
     const request = { env: options.env ?? deps.env, ...options.cwd ? { cwd: options.cwd } : {} };
     const download = await deps.runCommand({
       command: curl,
@@ -22666,7 +22666,7 @@ async function installChiefAgent(agent, overrides = {}) {
     const install = await runOfficialInstaller(plan.installerUrl, deps);
     if (!install.success)
       return commandFailure(install.stage === "download" ? "Installer download" : "Installation", install, plan.documentation);
-    const localBin = join46(deps.home, ".local", "bin");
+    const localBin = join47(deps.home, ".local", "bin");
     const pathParts = (deps.env.PATH ?? "").split(delimiter3);
     if (!pathParts.includes(localBin))
       deps.env.PATH = [localBin, ...pathParts.filter(Boolean)].join(delimiter3);
@@ -22768,17 +22768,17 @@ var init_agent_provisioning = __esm(() => {
 // src/oma-provisioning.ts
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "node:fs";
 import { chmod as chmod4, lstat as lstat19, readdir as readdir12, readFile as readFile16, realpath as realpath25, unlink as unlink8, writeFile as writeFile14 } from "node:fs/promises";
-import { homedir as homedir8, tmpdir as tmpdir5 } from "node:os";
-import { delimiter as delimiter4, isAbsolute as isAbsolute15, join as join47, relative as relative14, resolve as resolve28 } from "node:path";
+import { homedir as homedir9, tmpdir as tmpdir5 } from "node:os";
+import { delimiter as delimiter4, isAbsolute as isAbsolute16, join as join48, relative as relative15, resolve as resolve29 } from "node:path";
 function defaults2() {
-  const home = homedir8();
+  const home = homedir9();
   return {
     platform: process.platform,
     home,
     env: process.env,
-    resolveBinary: (name) => resolveBinaryPath(name, name === "bun" ? [join47(process.env.BUN_INSTALL ?? join47(home, ".bun"), "bin", "bun")] : []),
+    resolveBinary: (name) => resolveBinaryPath(name, name === "bun" ? [join48(process.env.BUN_INSTALL ?? join48(home, ".bun"), "bin", "bun")] : []),
     runCommand: runTerminalCommand,
-    makeTempDir: () => mkdtempSync2(join47(tmpdir5(), "av-oma-install-")),
+    makeTempDir: () => mkdtempSync2(join48(tmpdir5(), "av-oma-install-")),
     removeTempDir: (path) => rmSync3(path, { recursive: true, force: true })
   };
 }
@@ -22799,7 +22799,7 @@ async function present(path) {
 }
 async function installedVersion2(skills) {
   try {
-    const marker = JSON.parse(await readFile16(join47(skills, "_version.json"), "utf8"));
+    const marker = JSON.parse(await readFile16(join48(skills, "_version.json"), "utf8"));
     return marker.schemaVersion === 2 && marker.mode === "project" && typeof marker.version === "string" && /^\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?$/.test(marker.version) ? marker.version : null;
   } catch {
     return null;
@@ -22808,7 +22808,7 @@ async function installedVersion2(skills) {
 async function snapshotConfig(agents) {
   const snapshots = [];
   for (const name of CUSTOM_CONFIG_NAMES) {
-    const path = join47(agents, name);
+    const path = join48(agents, name);
     if (!await present(path))
       continue;
     const file = await lstat19(path);
@@ -22828,10 +22828,10 @@ async function restoreConfig(agents, snapshots) {
     ["oma-config.yaml", "oma-config.cue"],
     ["oma-config.local.yaml", "oma-config.local.cue"]
   ]) {
-    if (!pair.some((name) => original.has(join47(agents, name))))
+    if (!pair.some((name) => original.has(join48(agents, name))))
       continue;
     for (const name of pair) {
-      const path = join47(agents, name);
+      const path = join48(agents, name);
       if (!original.has(path))
         await unlink8(path).catch((error) => {
           if (error.code !== "ENOENT")
@@ -22841,17 +22841,17 @@ async function restoreConfig(agents, snapshots) {
   }
 }
 async function workspacePath(input) {
-  if (!input.trim() || !isAbsolute15(input))
+  if (!input.trim() || !isAbsolute16(input))
     return null;
-  const root = resolve28(input);
+  const root = resolve29(input);
   if (!await directory2(root))
     return null;
-  for (const path of [join47(root, ".agents"), join47(root, ".agents", "skills")]) {
+  for (const path of [join48(root, ".agents"), join48(root, ".agents", "skills")]) {
     if (!await present(path))
       continue;
     const actual = await realpath25(path);
-    const location = relative14(await realpath25(root), actual);
-    if (location === ".." || location.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute15(location))
+    const location = relative15(await realpath25(root), actual);
+    if (location === ".." || location.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute16(location))
       return null;
   }
   return root;
@@ -22861,7 +22861,7 @@ async function inspectOma(workspaceRoot, _overrides = {}) {
     const root = await workspacePath(workspaceRoot);
     if (!root)
       return { success: false, message: "Choose an existing absolute workspace with project-local OMA files." };
-    const skills = join47(root, ".agents", "skills");
+    const skills = join48(root, ".agents", "skills");
     const version = await installedVersion2(skills);
     if (!version)
       throw new Error("Invalid installed metadata");
@@ -22869,7 +22869,7 @@ async function inspectOma(workspaceRoot, _overrides = {}) {
     if (!entries.length)
       throw new Error("No installed skills");
     for (const entry of entries) {
-      if (!entry.isDirectory() || !(await lstat19(join47(skills, entry.name, "SKILL.md"))).isFile())
+      if (!entry.isDirectory() || !(await lstat19(join48(skills, entry.name, "SKILL.md"))).isFile())
         throw new Error("Incomplete installed skill");
     }
     return {
@@ -22917,16 +22917,16 @@ async function prepareOma(workspaceRoot, overrides = {}) {
     delete environment.OMA_YES;
     environment.CI = "true";
     const paths = [
-      deps.env.BUN_INSTALL_BIN ?? join47(deps.env.BUN_INSTALL ?? join47(deps.home, ".bun"), "bin"),
-      join47(deps.home, ".local", "bin")
+      deps.env.BUN_INSTALL_BIN ?? join48(deps.env.BUN_INSTALL ?? join48(deps.home, ".bun"), "bin"),
+      join48(deps.home, ".local", "bin")
     ];
     environment.PATH = [...new Set([...paths, ...(environment.PATH ?? "").split(delimiter4).filter(Boolean)])].join(delimiter4);
     const request = { command: bun, env: environment, cwd: root, timeoutMs: 300000 };
     const latest = await deps.runCommand({ ...request, args: ["install", "--global", LATEST_PACKAGE] });
     if (!latest.success)
       return failure3("OMA CLI update", latest);
-    const agents = join47(root, ".agents");
-    const existing = await installedVersion2(join47(agents, "skills")) !== null || await directory2(join47(agents, "skills")) && (await present(join47(agents, "oma-config.yaml")) || await present(join47(agents, "mcp.json")) || await directory2(join47(agents, "workflows")));
+    const agents = join48(root, ".agents");
+    const existing = await installedVersion2(join48(agents, "skills")) !== null || await directory2(join48(agents, "skills")) && (await present(join48(agents, "oma-config.yaml")) || await present(join48(agents, "mcp.json")) || await directory2(join48(agents, "workflows")));
     const custom = await snapshotConfig(agents);
     const args = existing ? ["update", "--yes", "--with-new-skills", "--all"] : ["install"];
     let installed;
@@ -24413,9 +24413,9 @@ var init_ui = __esm(() => {
 
 // src/setup/workspace-step.ts
 import { statSync as statSync3 } from "node:fs";
-import { isAbsolute as isAbsolute16 } from "node:path";
+import { isAbsolute as isAbsolute17 } from "node:path";
 async function validateOrderWorkspace(path) {
-  if (!isAbsolute16(path))
+  if (!isAbsolute17(path))
     return "Set workspace.root in av.yaml to an absolute Git repository path.";
   try {
     if (!statSync3(path).isDirectory())
@@ -24442,7 +24442,7 @@ async function stepWorkspace(ctx, step, total) {
       validate: (v) => {
         if (!v?.trim())
           return "Required";
-        if (!isAbsolute16(v.trim()))
+        if (!isAbsolute17(v.trim()))
           return "Must be an absolute path";
       }
     });
@@ -24469,7 +24469,7 @@ var init_workspace_step = __esm(() => {
 
 // src/setup/noninteractive-config.ts
 import { lstat as lstat20, realpath as realpath26 } from "node:fs/promises";
-import { isAbsolute as isAbsolute17, join as join48, parse as parsePath, resolve as resolve29 } from "node:path";
+import { isAbsolute as isAbsolute18, join as join49, parse as parsePath, resolve as resolve30 } from "node:path";
 function validateNoninteractiveOptions(options) {
   if (!options.yes || options.edit || options.mode !== undefined && options.mode !== "order")
     throw new Error("Use av setup --yes only for local order setup; --edit and --mode tracker require interactive setup.");
@@ -24512,7 +24512,7 @@ function selectChief(options, deps, project, global2) {
   const globalActor = actor(global2);
   const selected = options.actor ?? runtime?.actorType ?? projectActor.type ?? globalActor.type;
   if (!selected)
-    throw new Error(`actor.type is missing in ${join48(deps.projectRoot, "av.yaml")} and ${deps.globalConfigPath}, and the current agent runtime is unknown. Rerun av setup --yes --actor <current-vendor> --model <current-model-or-empty>.`);
+    throw new Error(`actor.type is missing in ${join49(deps.projectRoot, "av.yaml")} and ${deps.globalConfigPath}, and the current agent runtime is unknown. Rerun av setup --yes --actor <current-vendor> --model <current-model-or-empty>.`);
   const actorType = selected;
   const actorSource = options.actor !== undefined ? "explicit" : runtime ? "runtime" : projectActor.type ? "project" : "global";
   const previousType = projectActor.type ?? globalActor.type;
@@ -24550,14 +24550,14 @@ async function prepareNoninteractiveConfig(options, deps) {
   validateNoninteractiveOptions(options);
   let projectRoot;
   try {
-    projectRoot = await realpath26(resolve29(deps.projectRoot));
+    projectRoot = await realpath26(resolve30(deps.projectRoot));
     if (!(await lstat20(projectRoot)).isDirectory())
       throw new Error("not a directory");
   } catch {
     throw new Error(`AV configuration directory ${deps.projectRoot} does not exist. Run av setup from an existing directory.`);
   }
-  const globalPath = resolve29(deps.globalConfigPath);
-  const projectPath = join48(projectRoot, "av.yaml");
+  const globalPath = resolve30(deps.globalConfigPath);
+  const projectPath = join49(projectRoot, "av.yaml");
   const project = await configFile(projectPath, projectConfigSchema);
   const global2 = await configFile(globalPath, globalConfigSchema);
   const chief = selectChief(options, { ...deps, projectRoot, globalConfigPath: globalPath }, project.raw, global2.raw);
@@ -24574,7 +24574,7 @@ async function prepareNoninteractiveConfig(options, deps) {
   }
   const savedWorkspace = project.raw.workspace?.root;
   const selectedWorkspace = options.workspace ?? savedWorkspace ?? projectRoot;
-  const workspacePath = isAbsolute17(selectedWorkspace) ? selectedWorkspace : resolve29(projectRoot, selectedWorkspace);
+  const workspacePath = isAbsolute18(selectedWorkspace) ? selectedWorkspace : resolve30(projectRoot, selectedWorkspace);
   const workspaceError = await validateOrderWorkspace(workspacePath);
   if (workspaceError)
     throw new Error(workspaceError);
@@ -24609,7 +24609,7 @@ var init_noninteractive_config = __esm(() => {
 });
 
 // src/setup/noninteractive.ts
-import { join as join49, parse as parsePath2, resolve as resolve30 } from "node:path";
+import { join as join50, parse as parsePath2, resolve as resolve31 } from "node:path";
 function rerunCommand(result, options) {
   const quote = (value) => `'${value.replace(/'/g, "'\\''")}'`;
   return `cd ${quote(result.projectRoot)} && av setup --yes --actor ${result.chief.actorType} --model ${quote(result.chief.model ?? "")} --workspace ${quote(result.workspace ?? result.projectRoot)} --oma ${options.oma ?? "prepare"} --json`;
@@ -24620,11 +24620,11 @@ async function setupNoninteractive(options, overrides = {}) {
     version: 1,
     status: "failed",
     exitCode: 1,
-    projectRoot: resolve30(deps.projectRoot),
+    projectRoot: resolve31(deps.projectRoot),
     workspace: null,
     config: {
-      project: join49(resolve30(deps.projectRoot), "av.yaml"),
-      global: resolve30(deps.globalConfigPath),
+      project: join50(resolve31(deps.projectRoot), "av.yaml"),
+      global: resolve31(deps.globalConfigPath),
       saved: false
     },
     chief: {
@@ -25105,7 +25105,7 @@ var init_container_step = __esm(() => {
 });
 
 // src/setup/metric-step.ts
-import { isAbsolute as isAbsolute18 } from "node:path";
+import { isAbsolute as isAbsolute19 } from "node:path";
 async function text12(message, initialValue, validate) {
   const value = await text10({
     message: `${message} (:back goes back)`,
@@ -25189,7 +25189,7 @@ async function stepMetrics(ctx) {
         draft.token_env = token;
     } else {
       const file = await text12("Repository-relative JSON file", old?.file ?? "metrics/revenue.json", (value) => {
-        if (!value || value.length > 2000 || isAbsolute18(value) || /^[A-Za-z]:/.test(value) || value.startsWith("\\") || value.split(/[\\/]/).includes(".."))
+        if (!value || value.length > 2000 || isAbsolute19(value) || /^[A-Za-z]:/.test(value) || value.startsWith("\\") || value.split(/[\\/]/).includes(".."))
           return "Use a relative file inside the repository, without ..";
       });
       if (navigated2(file))
@@ -27647,8 +27647,8 @@ var init_issue = __esm(() => {
 
 // src/login.ts
 import { existsSync as existsSync9, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync5 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
-import { join as join50 } from "node:path";
+import { homedir as homedir10 } from "node:os";
+import { join as join51 } from "node:path";
 function ensureConfigDir() {
   if (!existsSync9(CONFIG_DIR)) {
     mkdirSync4(CONFIG_DIR, { recursive: true, mode: 448 });
@@ -27823,8 +27823,8 @@ var import_picocolors14, CONFIG_DIR, CREDENTIALS_FILE;
 var init_login = __esm(() => {
   init_dist6();
   import_picocolors14 = __toESM(require_picocolors(), 1);
-  CONFIG_DIR = join50(homedir9(), ".agent-valley");
-  CREDENTIALS_FILE = join50(CONFIG_DIR, "credentials.json");
+  CONFIG_DIR = join51(homedir10(), ".agent-valley");
+  CREDENTIALS_FILE = join51(CONFIG_DIR, "credentials.json");
 });
 
 // src/index.ts
@@ -27832,7 +27832,7 @@ init_project_config_path();
 init_yaml_loader();
 import { spawn as spawn24, spawnSync as spawnSync5 } from "node:child_process";
 import { existsSync as existsSync10, unlinkSync as unlinkSync2 } from "node:fs";
-import { resolve as resolve31 } from "node:path";
+import { resolve as resolve32 } from "node:path";
 
 // ../../packages/core/src/version.ts
 import { readFileSync as readFileSync2 } from "node:fs";
@@ -29894,7 +29894,7 @@ var import_picocolors15 = __toESM(require_picocolors(), 1);
 
 // src/agent-client-commands.ts
 init_client_integrations();
-import { resolve as resolve21 } from "node:path";
+import { resolve as resolve22 } from "node:path";
 
 // src/mcp-oauth.ts
 init_webapi();
@@ -48245,7 +48245,7 @@ async function startAvMcpHttp(api, options) {
 // src/mission-api.ts
 import { randomUUID as randomUUID17 } from "node:crypto";
 import { lstat as lstat15, readdir as readdir8, realpath as realpath21 } from "node:fs/promises";
-import { isAbsolute as isAbsolute12, join as join37 } from "node:path";
+import { isAbsolute as isAbsolute13, join as join38 } from "node:path";
 
 // ../../packages/core/src/chief/reports.ts
 init_zod();
@@ -66567,7 +66567,7 @@ async function launchMission(input) {
 // src/operation-api.ts
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { realpath as realpath20 } from "node:fs/promises";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 
 // ../../packages/core/src/chief/continuous-store.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
@@ -66774,7 +66774,7 @@ class ContinuousOperationStore {
 import { execFile as execFile5 } from "node:child_process";
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { mkdir as mkdir17, realpath as realpath19, rename as rename7, unlink as unlink7, writeFile as writeFile13 } from "node:fs/promises";
-import { join as join35, resolve as resolve19 } from "node:path";
+import { join as join36, resolve as resolve20 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 
 // ../../packages/core/src/chief/container-observation-command.ts
@@ -67771,7 +67771,7 @@ async function createContinuousMissionWorkspace(repositoryRoot, operationId, bas
 init_execution();
 
 // src/chief-continuous-decision.ts
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 
 // ../../packages/core/src/chief/coordinator-run.ts
 init_execution();
@@ -67866,13 +67866,13 @@ init_execution();
 
 // ../../packages/core/src/chief/runtime.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
-import { join as join27, resolve as resolve15 } from "node:path";
+import { join as join28, resolve as resolve16 } from "node:path";
 
 // ../../packages/core/src/oma/receipt-adapter.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync4, lstatSync as lstatSync2, readdirSync, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync4, lstatSync as lstatSync3, readFileSync as readFileSync9 } from "node:fs";
 import { mkdir as mkdir12, writeFile as writeFile9 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, join as join25, relative as relative7, resolve as resolve14, sep as sep9 } from "node:path";
+import { basename as basename2, dirname as dirname7, isAbsolute as isAbsolute8, join as join26, relative as relative8, resolve as resolve15, sep as sep10 } from "node:path";
 
 // ../../packages/core/src/config/workflow-router.ts
 import { readFileSync as readFileSync8 } from "node:fs";
@@ -68188,27 +68188,107 @@ function ensureLatestOmaCli(options = {}) {
   return pending;
 }
 
+// ../../packages/core/src/oma/receipt-storage.ts
+import { createHash as createHash16 } from "node:crypto";
+import { lstatSync as lstatSync2, readdirSync, realpathSync as realpathSync5 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { basename, dirname as dirname6, isAbsolute as isAbsolute7, join as join25, relative as relative7, resolve as resolve14, sep as sep9 } from "node:path";
+var OMA_RUN_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function absolutePath(value, key) {
+  if (!isAbsolute7(value) || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127))
+    throw new Error(`${key} must be an absolute path without control characters`);
+  return resolve14(value);
+}
+function omaReceiptDirectories(workspace, options = {}) {
+  const env = options.env ?? process.env;
+  const profile = env.OMA_PROFILE ?? "0";
+  if (!/^(0|[1-9][0-9]{0,9})$/.test(profile))
+    throw new Error("OMA_PROFILE must be a non-negative profile number");
+  const stateHome = env.OMA_STATE_HOME === undefined ? absolutePath(env.OMA_HOME || join25(options.home ?? homedir6(), ".oma"), "OMA_HOME") : absolutePath(env.OMA_STATE_HOME, "OMA_STATE_HOME");
+  const project = createHash16("sha256").update(realpathSync5(resolve14(workspace))).digest("hex");
+  return [
+    join25(stateHome, "u", profile, "projects", project, "agent-runs"),
+    ...profile === "0" ? [join25(resolve14(workspace), ".agents", "state", "agent-runs")] : []
+  ];
+}
+function regularDirectory(path) {
+  try {
+    const stat = lstatSync2(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+      throw new Error("OMA receipt directory is not a regular directory");
+    return true;
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return false;
+    throw error;
+  }
+}
+function validateDirectory(directory, workspace) {
+  if (!regularDirectory(directory))
+    return false;
+  const legacy = join25(resolve14(workspace), ".agents", "state", "agent-runs");
+  const boundary = directory === legacy ? resolve14(workspace) : dirname6(dirname6(dirname6(dirname6(dirname6(directory)))));
+  const components = relative7(boundary, directory).split(sep9).filter(Boolean);
+  let path = boundary;
+  for (const component of components) {
+    path = join25(path, component);
+    if (!regularDirectory(path))
+      throw new Error("OMA receipt directory changed during inspection");
+  }
+  return true;
+}
+function listOmaRunFiles(workspace, options = {}) {
+  return omaReceiptDirectories(workspace, options).flatMap((directory) => {
+    if (!validateDirectory(directory, workspace))
+      return [];
+    return readdirSync(directory).filter((name) => name.endsWith(".json") && OMA_RUN_ID.test(name.slice(0, -5))).map((name) => join25(directory, name));
+  });
+}
+function resolveOmaReceiptPath(workspace, entry, options = {}) {
+  const name = basename(entry);
+  if (!name.endsWith(".json") || !OMA_RUN_ID.test(name.slice(0, -5)))
+    throw new Error("Invalid receipt filename");
+  if (entry === name)
+    return join25(resolve14(workspace), ".agents", "state", "agent-runs", name);
+  if (!isAbsolute7(entry) || resolve14(entry) !== entry)
+    throw new Error("Invalid receipt path");
+  if (!omaReceiptDirectories(workspace, options).includes(dirname6(entry)))
+    throw new Error("OMA receipt is outside the selected project/profile");
+  if (!validateDirectory(dirname6(entry), workspace))
+    throw new Error("OMA receipt directory is missing");
+  return entry;
+}
+
 // ../../packages/core/src/oma/receipt-adapter.ts
 var OMA_RECEIPT_SCHEMA_VERSION = 1;
-var RUN_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var HASH = /^[a-f0-9]{64}$/;
-var defaultIO2 = {
-  listRunFiles: (workspacePath) => {
-    const dir = join25(workspacePath, ".agents", "state", "agent-runs");
-    return readdirSync(dir).filter((name) => RUN_ID.test(name.slice(0, -5)) && name.endsWith(".json"));
-  },
-  readReceipt: (path) => {
-    if (!lstatSync2(path).isFile())
-      throw new Error("Receipt is not a regular file");
-    return readFileSync9(path, "utf-8");
-  },
-  runCli: (args, cwd) => {
-    const result = spawnSync2("oma", args, { cwd, encoding: "utf-8", timeout: 15000, maxBuffer: 1024 * 1024 });
-    if (result.error)
-      throw result.error;
-    return { exitCode: result.status, stdout: result.stdout };
-  }
-};
+function createOmaEvidenceIO(options = {}) {
+  const env = { ...options.env ?? process.env, OMA_SKIP_VERSION_CHECK: "1" };
+  if (options.home !== undefined && !env.OMA_HOME)
+    env.OMA_HOME = join26(options.home, ".oma");
+  const storage = { ...options, env };
+  return {
+    listRunFiles: (workspacePath) => listOmaRunFiles(workspacePath, storage),
+    resolveRunFile: (workspacePath, entry) => resolveOmaReceiptPath(workspacePath, entry, storage),
+    readReceipt: (path) => {
+      if (!lstatSync3(path).isFile())
+        throw new Error("Receipt is not a regular file");
+      return readFileSync9(path, "utf-8");
+    },
+    runCli: (args, cwd) => {
+      const result = spawnSync2("oma", args, {
+        cwd,
+        env,
+        encoding: "utf-8",
+        timeout: 15000,
+        maxBuffer: 1024 * 1024
+      });
+      if (result.error)
+        throw result.error;
+      return { exitCode: result.status, stdout: result.stdout };
+    }
+  };
+}
 function fail(reason) {
   return { ok: false, reason };
 }
@@ -68232,17 +68312,17 @@ async function prepareOmaAttempt(request, dependencies = {}) {
   const routed = routeIssue(`${request.issue.title}
 ${request.issue.description ?? ""}`, table);
   for (const workflow of routed.workflows) {
-    const file = join25(request.workspace.path, ".agents", "workflows", `${workflow}.md`);
+    const file = join26(request.workspace.path, ".agents", "workflows", `${workflow}.md`);
     if (!existsSync4(file))
       throw new Error(`OMA workflow file missing in target worktree: ${file}`);
   }
   await ensureLatestOmaCli({ io: dependencies.latestCliIO });
-  const path = join25(request.workspace.path, ".agents", "results", `plan-${request.attempt.id}.json`);
+  const path = join26(request.workspace.path, ".agents", "results", `plan-${request.attempt.id}.json`);
   const plan = {
     session_id: request.attempt.id,
     lineage_id: request.attempt.id,
     valley_issue_id: request.issue.id,
-    valley_workspace: resolve14(request.workspace.path),
+    valley_workspace: resolve15(request.workspace.path),
     tasks: [
       {
         id: request.attempt.id,
@@ -68262,7 +68342,7 @@ ${request.issue.description ?? ""}`, table);
       }
     ]
   };
-  await mkdir12(join25(request.workspace.path, ".agents", "results"), { recursive: true });
+  await mkdir12(join26(request.workspace.path, ".agents", "results"), { recursive: true });
   await writeFile9(path, JSON.stringify(plan, null, 2), { encoding: "utf-8", flag: "wx" });
   return path;
 }
@@ -68290,8 +68370,8 @@ function buildOmaGuidance(request) {
   ].join(`
 `);
 }
-function validateOmaEvidence(request, io = defaultIO2) {
-  const root = resolve14(request.workspace.path);
+function validateOmaEvidence(request, io = createOmaEvidenceIO()) {
+  const root = resolve15(request.workspace.path);
   if (!request.verifyCommand.trim())
     return fail("Strict OMA mode has no configured verify command");
   let cliVersion;
@@ -68305,26 +68385,37 @@ function validateOmaEvidence(request, io = defaultIO2) {
     return fail(`OMA CLI unavailable: ${String(err)}`);
   }
   let receipts;
+  const locations = new Map;
   try {
-    receipts = io.listRunFiles(root).map((name) => {
-      if (!RUN_ID.test(name.slice(0, -5)) || !name.endsWith(".json"))
+    receipts = io.listRunFiles(root).map((entry) => {
+      const name = basename2(entry);
+      const path = (io.resolveRunFile ?? resolveOmaReceiptPath)(root, entry);
+      if (!OMA_RUN_ID.test(name.slice(0, -5)) || !name.endsWith(".json"))
         throw new Error("Invalid receipt filename");
-      const parsed = JSON.parse(io.readReceipt(join25(root, ".agents", "state", "agent-runs", name)));
+      const parsed = JSON.parse(io.readReceipt(path));
       if (!isRecord(parsed) || parsed.runId !== name.slice(0, -5))
         throw new Error("Malformed run receipt");
+      locations.set(parsed, dirname7(path));
       return parsed;
     });
   } catch (err) {
     return fail(`Missing or malformed OMA receipt: ${String(err)}`);
   }
-  const forAttempt = receipts.filter((run) => run.sessionId === request.attempt.id && run.agentId === request.agentId).sort((a, b) => Number(a.sequence) - Number(b.sequence));
+  const forAttempt = receipts.filter((run) => run.sessionId === request.attempt.id && run.agentId === request.agentId);
+  if (forAttempt.some((run) => !Number.isSafeInteger(run.sequence) || Number(run.sequence) < 1))
+    return fail("OMA receipt sequence is malformed");
+  if (new Set(forAttempt.map((run) => run.sequence)).size !== forAttempt.length)
+    return fail("OMA receipt sequence is ambiguous across matching runs");
+  if (new Set(forAttempt.map((run) => locations.get(run))).size > 1)
+    return fail("Matching OMA receipts span multiple stores; generate current evidence in the active CLI's selected project/profile");
+  forAttempt.sort((a, b) => Number(a.sequence) - Number(b.sequence));
   const run = forAttempt.at(-1);
   if (!run)
     return fail("No OMA receipt is bound to this Valley attempt");
   if (run.schemaVersion !== OMA_RECEIPT_SCHEMA_VERSION) {
     return fail(`OMA CLI ${cliVersion} returned an unsupported receipt schema. AV requires agent-run schema v${OMA_RECEIPT_SCHEMA_VERSION}; update AV and OMA (npm install -g oh-my-agent@latest), then generate and verify a compatible receipt.`);
   }
-  if (run.taskId !== request.attempt.id || !RUN_ID.test(String(run.runId))) {
+  if (run.taskId !== request.attempt.id || !OMA_RUN_ID.test(String(run.runId))) {
     return fail("OMA receipt task identity is incompatible");
   }
   if (run.workspace !== root || run.artifactRoot !== root || run.status !== "completed" || run.exitCode !== 0) {
@@ -68358,12 +68449,12 @@ function validateOmaEvidence(request, io = defaultIO2) {
     if (!template?.includes("{{attempt.id}}"))
       return fail("Analysis requires a configured current-attempt report path");
     const expanded = template.replaceAll("{{attempt.id}}", request.attempt.id);
-    const target = resolve14(root, expanded);
-    const subpath = relative7(root, target);
-    if (isAbsolute7(expanded) || expanded.split(/[\\/]/).includes("..") || subpath === "" || subpath === ".." || subpath.startsWith(`..${sep9}`) || isAbsolute7(subpath)) {
+    const target = resolve15(root, expanded);
+    const subpath = relative8(root, target);
+    if (isAbsolute8(expanded) || expanded.split(/[\\/]/).includes("..") || subpath === "" || subpath === ".." || subpath.startsWith(`..${sep10}`) || isAbsolute8(subpath)) {
       return fail("Configured analysis report escapes the workspace");
     }
-    if (!isRecord(run.artifacts) || !Object.entries(run.artifacts).some(([path, hash]) => !isAbsolute7(path) && !path.split(/[\\/]/).includes("..") && resolve14(root, path) === target && HASH.test(String(hash)))) {
+    if (!isRecord(run.artifacts) || !Object.entries(run.artifacts).some(([path, hash]) => !isAbsolute8(path) && !path.split(/[\\/]/).includes("..") && resolve15(root, path) === target && HASH.test(String(hash)))) {
       return fail("OMA receipt does not bind the configured current-attempt report");
     }
   }
@@ -68380,7 +68471,7 @@ function validateOmaEvidence(request, io = defaultIO2) {
   for (const check of run.checks) {
     if (!isRecord(check) || !stringArray(check.command) || !check.command.length || typeof check.cwd !== "string")
       return fail("OMA verification receipt is malformed");
-    latestChecks.set(JSON.stringify([check.command, resolve14(check.cwd)]), check);
+    latestChecks.set(JSON.stringify([check.command, resolve15(check.cwd)]), check);
   }
   if ([...latestChecks.values()].some((check) => check.exitCode !== 0 || check.before !== run.after || check.after !== run.after)) {
     return fail("An OMA verification check failed or is stale");
@@ -69103,7 +69194,7 @@ async function withMissionDeadline(mission, parent, run) {
 init_dist();
 import { constants as constants6 } from "node:fs";
 import { lstat as lstat11, mkdir as mkdir13, open as open8, readdir as readdir6, realpath as realpath14, stat, writeFile as writeFile10 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, join as join26, relative as relative8, sep as sep10 } from "node:path";
+import { isAbsolute as isAbsolute9, join as join27, relative as relative9, sep as sep11 } from "node:path";
 var MAX_SKILL_BYTES = 256000;
 var MAX_METADATA_BYTES = 16384;
 var MAX_CATALOG_SIZE = 100;
@@ -69112,8 +69203,8 @@ var MAX_HARNESS_ENTRIES = 5000;
 var SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,127}$/;
 var OMA_SKILL_NAME = /^oma-[a-z0-9][a-z0-9-]{0,123}$/;
 function inside(root, path) {
-  const child = relative8(root, path);
-  return child !== "" && child !== ".." && !child.startsWith(`..${sep10}`) && !isAbsolute8(child);
+  const child = relative9(root, path);
+  return child !== "" && child !== ".." && !child.startsWith(`..${sep11}`) && !isAbsolute9(child);
 }
 function excludedResource(name) {
   return [
@@ -69136,11 +69227,11 @@ async function prepareMissionSkills(sourceRepositoryPath, workspacePath) {
   if (!source)
     return;
   const workspace = await realpath14(workspacePath);
-  const agents = join26(workspace, ".agents");
+  const agents = join27(workspace, ".agents");
   await mkdir13(agents, { recursive: true });
   if (!inside(workspace, await realpath14(agents)))
     throw new Error("The target .agents directory escapes the mission worktree. Fix its symlink before creating this order.");
-  const target = join26(agents, "skills");
+  const target = join27(agents, "skills");
   await mkdir13(target, { recursive: true });
   const targetRoot = await skillRoot(workspace);
   if (!targetRoot)
@@ -69161,13 +69252,13 @@ async function prepareMissionSkills(sourceRepositoryPath, workspacePath) {
         continue;
       if (++entries > MAX_HARNESS_ENTRIES)
         throw new Error("The installed skill resources exceed 5,000 entries. Remove unused resources before creating this order.");
-      const from = await realpath14(join26(sourceDirectory, name)).catch(() => {
+      const from = await realpath14(join27(sourceDirectory, name)).catch(() => {
         return;
       });
       if (!from || !inside(sourceRoot, from))
         continue;
       const info = await stat(from);
-      const to = join26(targetDirectory, name);
+      const to = join27(targetDirectory, name);
       const existing = await lstat11(to).catch(() => {
         return;
       });
@@ -69222,7 +69313,7 @@ async function skillRoot(workspacePath) {
   });
   if (!workspace)
     return;
-  const root = await realpath14(join26(workspace, ".agents", "skills")).catch(() => {
+  const root = await realpath14(join27(workspace, ".agents", "skills")).catch(() => {
     return;
   });
   if (!root)
@@ -69236,7 +69327,7 @@ async function skillRoot(workspacePath) {
 async function skillPath(root, name) {
   if (!SKILL_NAME.test(name))
     throw new Error(`Invalid skill name: ${name}. Select an installed skill directory name.`);
-  const path = await realpath14(join26(root, name, "SKILL.md")).catch(() => {
+  const path = await realpath14(join27(root, name, "SKILL.md")).catch(() => {
     throw new Error(`Skill ${name}/SKILL.md is missing. Restore that installed skill in ${root} before resuming.`);
   });
   if (!inside(root, path))
@@ -69292,7 +69383,7 @@ function metadata(source, name, path) {
 async function descriptor(root, name) {
   if (!OMA_SKILL_NAME.test(name))
     return;
-  const directory = await realpath14(join26(root, name));
+  const directory = await realpath14(join27(root, name));
   if (!inside(root, directory) || !(await stat(directory)).isDirectory())
     return;
   const path = await skillPath(root, name);
@@ -69549,7 +69640,7 @@ class ChiefRuntime {
       workspace,
       availableSkills: mission.availableSkills?.map((skill) => ({
         ...skill,
-        path: join27(workspace.path, ".agents", "skills", skill.name, "SKILL.md")
+        path: join28(workspace.path, ".agents", "skills", skill.name, "SKILL.md")
       }))
     };
     if (signal?.aborted)
@@ -69574,7 +69665,7 @@ class ChiefRuntime {
     const attempt = {
       id: randomUUID11(),
       issueId: mission.id,
-      workspacePath: resolve15(workspace.path),
+      workspacePath: resolve16(workspace.path),
       startedAt: new Date().toISOString(),
       finishedAt: null,
       exitCode: null,
@@ -69780,16 +69871,16 @@ init_execution();
 // src/chief-supervisor.ts
 import { spawn as spawn16 } from "node:child_process";
 import { randomUUID as randomUUID13 } from "node:crypto";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 init_execution();
 
 // src/chief-delivery.ts
-import { createHash as createHash17 } from "node:crypto";
+import { createHash as createHash18 } from "node:crypto";
 import { mkdir as mkdir15, writeFile as writeFile12 } from "node:fs/promises";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 
 // ../../packages/core/src/chief/report-delivery.ts
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 
 // ../../packages/core/src/chief/report-delivery-adapters.ts
 init_report_delivery_contract();
@@ -70170,10 +70261,10 @@ init_report_delivery_contract();
 // ../../packages/core/src/chief/report-delivery-outbox.ts
 init_zod();
 init_report_delivery_contract();
-import { createHash as createHash16, randomUUID as randomUUID12 } from "node:crypto";
+import { createHash as createHash17, randomUUID as randomUUID12 } from "node:crypto";
 import { constants as constants7 } from "node:fs";
 import { mkdir as mkdir14, open as open9, readdir as readdir7, readFile as readFile11, realpath as realpath15, rename as rename6, unlink as unlink5, writeFile as writeFile11 } from "node:fs/promises";
-import { isAbsolute as isAbsolute9, join as join28, relative as relative9, resolve as resolve16 } from "node:path";
+import { isAbsolute as isAbsolute10, join as join29, relative as relative10, resolve as resolve17 } from "node:path";
 var hash3 = string2().regex(/^[a-f0-9]{64}$/);
 var outboxRecordSchema = strictObject({
   version: literal(1),
@@ -70197,7 +70288,7 @@ var outboxRecordSchema = strictObject({
   message: string2().max(1000)
 }).refine((record) => record.nextPart <= record.parts && (record.status !== "delivered" || record.nextPart === record.parts));
 function sha2562(content) {
-  return createHash16("sha256").update(content).digest("hex");
+  return createHash17("sha256").update(content).digest("hex");
 }
 function receipt(record) {
   const {
@@ -70215,12 +70306,12 @@ function receipt(record) {
 class ReportOutbox {
   directory;
   constructor(stateDir) {
-    this.directory = join28(stateDir, "report-outbox");
+    this.directory = join29(stateDir, "report-outbox");
   }
   path(id) {
     if (!hash3.safeParse(id).success)
       throw new Error("Invalid report receipt ID. Use av reports to find a receipt.");
-    return join28(this.directory, `${id}.json`);
+    return join29(this.directory, `${id}.json`);
   }
   lock(id) {
     return new MissionStore(this.directory).lock(id);
@@ -70276,10 +70367,10 @@ async function verifiedAttachment(attachment, artifactRoot, readBytes) {
   try {
     const root = await realpath15(artifactRoot);
     const path = await realpath15(attachment.path);
-    const local = relative9(root, path);
-    if (!local || local.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || local === ".." || isAbsolute9(local))
+    const local = relative10(root, path);
+    if (!local || local.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || local === ".." || isAbsolute10(local))
       throw failure;
-    if (resolve16(attachment.path) !== attachment.path)
+    if (resolve17(attachment.path) !== attachment.path)
       throw failure;
     const file = await open9(attachment.path, constants7.O_RDONLY | constants7.O_NOFOLLOW);
     try {
@@ -70287,7 +70378,7 @@ async function verifiedAttachment(attachment, artifactRoot, readBytes) {
       if (!stat.isFile() || stat.size !== attachment.sizeBytes)
         throw failure;
       if (!readBytes) {
-        const digest = createHash16("sha256");
+        const digest = createHash17("sha256");
         for await (const chunk of file.createReadStream({ autoClose: false }))
           digest.update(chunk);
         if (digest.digest("hex") !== attachment.sha256)
@@ -70334,7 +70425,7 @@ function dependencies(stateDir, overrides) {
     env: overrides.env ?? process.env,
     registry: { ...createReportChannelRegistry(fetch2), ...overrides.registry },
     attachments: overrides.attachments ?? [],
-    artifactRoot: overrides.artifactRoot ?? join29(stateDir, "captures"),
+    artifactRoot: overrides.artifactRoot ?? join30(stateDir, "captures"),
     now: overrides.now ?? (() => new Date)
   };
 }
@@ -70515,8 +70606,8 @@ init_chief_schema();
 init_yaml_loader();
 async function saveAndDeliverMissionReport(mission, root) {
   const repository = mission.repositoryRoot ?? root;
-  const directory = join30(root, ".agent-valley/reports");
-  const reportPath = join30(directory, `${mission.id}.md`);
+  const directory = join31(root, ".agent-valley/reports");
+  const reportPath = join31(directory, `${mission.id}.md`);
   const report = renderReport(mission);
   await mkdir15(directory, { recursive: true, mode: 448 });
   await writeFile12(reportPath, report, { mode: 384 });
@@ -70531,12 +70622,12 @@ ${explanation.eli5}`);
   try {
     const config = mergeChiefConfig(loadGlobalConfig()?.chief, loadProjectConfig(root)?.chief);
     const attachments = [...mission.capture?.attachments ?? []];
-    const artifactRoot = join30(repository, ".agent-valley/captures");
+    const artifactRoot = join31(repository, ".agent-valley/captures");
     if (config.reporting?.destinations.length) {
       const bytes = Buffer.from(report);
-      const sha256 = createHash17("sha256").update(bytes).digest("hex");
-      const reportDirectory = join30(artifactRoot, mission.id);
-      const attachmentPath = join30(reportDirectory, `report-${sha256}.md`);
+      const sha256 = createHash18("sha256").update(bytes).digest("hex");
+      const reportDirectory = join31(artifactRoot, mission.id);
+      const attachmentPath = join31(reportDirectory, `report-${sha256}.md`);
       await mkdir15(reportDirectory, { recursive: true, mode: 448 });
       await writeFile12(attachmentPath, bytes, { mode: 384 });
       attachments.push({
@@ -70547,7 +70638,7 @@ ${explanation.eli5}`);
         sha256
       });
     }
-    const receipts = await dispatchMissionReport(mission, report, reportPath, config.reporting, join30(repository, ".agent-valley"), {
+    const receipts = await dispatchMissionReport(mission, report, reportPath, config.reporting, join31(repository, ".agent-valley"), {
       attachments,
       artifactRoot
     });
@@ -70637,7 +70728,7 @@ function runWorker(args, root, signal) {
 async function superviseOrder(goal, options, root, dependencies = {}) {
   assertNotManagedRun();
   const id = options.resume ?? options.missionId ?? randomUUID13();
-  const store = new MissionStore(join31(root, ".agent-valley/missions"));
+  const store = new MissionStore(join32(root, ".agent-valley/missions"));
   const controller = new AbortController;
   const interrupt = () => controller.abort();
   dependencies.signal?.addEventListener("abort", interrupt, { once: true });
@@ -70818,7 +70909,7 @@ Return one valid JSON object under the original charter and pinned evidence.` :
 init_metric_source_policy();
 import { constants as constants8 } from "node:fs";
 import { lstat as lstat12, open as open10, realpath as realpath16 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, relative as relative10, resolve as resolve17, sep as sep11 } from "node:path";
+import { isAbsolute as isAbsolute11, relative as relative11, resolve as resolve18, sep as sep12 } from "node:path";
 var MAX_METRIC_RESPONSE_BYTES = 2000000;
 function metricSourceEnvironment(request, name) {
   if (!name || !request.env[name]?.trim())
@@ -70903,15 +70994,15 @@ var jsonFileMetricAdapter = {
   async collect(request) {
     const root = await realpath16(request.repositoryRoot);
     const name = request.source.file;
-    if (!name || isAbsolute10(name))
+    if (!name || isAbsolute11(name))
       throw new MetricSourceError("Metric file must be relative to the source repository. Set chief.metric_sources.sources[].file in av.yaml.");
-    const path = resolve17(root, name);
-    const within = relative10(root, path);
-    if (!within || within.startsWith(`..${sep11}`) || within === ".." || isAbsolute10(within))
+    const path = resolve18(root, name);
+    const within = relative11(root, path);
+    if (!within || within.startsWith(`..${sep12}`) || within === ".." || isAbsolute11(within))
       throw new MetricSourceError("Metric file escapes the source repository. Choose a repository-relative JSON file.");
     let current = root;
-    for (const part of within.split(sep11)) {
-      current = resolve17(current, part);
+    for (const part of within.split(sep12)) {
+      current = resolve18(current, part);
       if ((await lstat12(current)).isSymbolicLink())
         throw new MetricSourceError("Metric file and parent directories must not be symlinks. Choose a regular JSON file inside the source repository.");
     }
@@ -71318,7 +71409,7 @@ function createMissionMetricPorts(repository, mission, dependencies = {}) {
 import { randomUUID as randomUUID14 } from "node:crypto";
 import { constants as constants9 } from "node:fs";
 import { link as link2, lstat as lstat13, mkdir as mkdir16, open as open11, realpath as realpath17, unlink as unlink6 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 init_dist2();
 init_client_toml();
 var maximumBytes = 1024 * 1024;
@@ -71337,7 +71428,7 @@ async function assertLocalPath(root, local) {
   const parts = local.split("/");
   let current = root;
   for (const [index, part] of parts.entries()) {
-    current = join32(current, part);
+    current = join33(current, part);
     const stats = await lstat13(current).catch((error) => {
       if (error.code === "ENOENT")
         return;
@@ -71394,9 +71485,9 @@ async function privateExclude(original, target, paths) {
   ]);
   const common = targetCommon.trim();
   const path = exclude.trim();
-  if (common !== join32(target, ".git") && common !== originalCommon.trim() || path !== join32(common, "info", "exclude") || await realpath17(common) !== common)
+  if (common !== join33(target, ".git") && common !== originalCommon.trim() || path !== join33(common, "info", "exclude") || await realpath17(common) !== common)
     throw new ChiefToolConfigError("Chief MCP configuration requires the workspace's own Git metadata or its original repository's shared worktree metadata.");
-  const info = join32(common, "info");
+  const info = join33(common, "info");
   const infoStats = await lstat13(info).catch((error) => {
     if (error.code === "ENOENT")
       return;
@@ -71435,14 +71526,14 @@ async function prepareToolConfig(originalRepository, targetWorkspace) {
       continue;
     if (!await assertLocalPath(original, config.path))
       continue;
-    const content = selectedNamespace(await readPrivateFile(join32(original, config.path)), config.namespace, config.toml);
+    const content = selectedNamespace(await readPrivateFile(join33(original, config.path)), config.namespace, config.toml);
     if (content)
       selected.push({ path: config.path, content });
   }
   if (!selected.length)
     return;
   for (const root of [original, target]) {
-    const stats = await lstat13(join32(root, ".git"));
+    const stats = await lstat13(join33(root, ".git"));
     if (stats.isSymbolicLink() || !stats.isFile() && !stats.isDirectory() || await realpath17((await parallelGit(root, ["rev-parse", "--show-toplevel"])).trim()) !== root)
       throw new ChiefToolConfigError("Chief MCP tools require original local Git repository metadata. Restore the workspace before starting Chief.");
   }
@@ -71450,14 +71541,14 @@ async function prepareToolConfig(originalRepository, targetWorkspace) {
   for (const config of selected) {
     const parts = config.path.split("/");
     if (parts.length > 1) {
-      const parent = join32(target, ...parts.slice(0, -1));
+      const parent = join33(target, ...parts.slice(0, -1));
       await mkdir16(parent, { recursive: true, mode: 448 });
       if (await realpath17(parent) !== parent)
         throw new ChiefToolConfigError("Chief MCP configuration parent redirects through a symlink. Restore its local directory.");
     }
     if (await assertLocalPath(target, config.path))
       continue;
-    const path = join32(target, config.path);
+    const path = join33(target, config.path);
     const temporary = `${path}.av-mcp-${randomUUID14()}.tmp`;
     const file = await open11(temporary, "wx", 384);
     try {
@@ -71490,8 +71581,8 @@ async function prepareChiefToolConfig(originalRepository, targetWorkspace) {
 init_client_toml();
 import { constants as constants10 } from "node:fs";
 import { access, lstat as lstat14, readFile as readFile12, realpath as realpath18 } from "node:fs/promises";
-import { homedir as homedir6 } from "node:os";
-import { delimiter as delimiter2, isAbsolute as isAbsolute11, join as join33, resolve as resolve18 } from "node:path";
+import { homedir as homedir7 } from "node:os";
+import { delimiter as delimiter2, isAbsolute as isAbsolute12, join as join34, resolve as resolve19 } from "node:path";
 var binaries = [
   "docker",
   "orb",
@@ -71507,9 +71598,9 @@ var binaries = [
 var MAX_CONFIG_BYTES = 1048576;
 var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
 async function executable(name, env) {
-  for (const directory of (env.PATH ?? "").split(delimiter2).filter(isAbsolute11)) {
+  for (const directory of (env.PATH ?? "").split(delimiter2).filter(isAbsolute12)) {
     try {
-      const path = join33(directory, name);
+      const path = join34(directory, name);
       await access(path, constants10.X_OK);
       if ((await lstat14(await realpath18(path))).isFile())
         return true;
@@ -71563,7 +71654,7 @@ async function mcpNames(path, scope, project, requestedRoot) {
 }
 async function discoverTools(root, dependencies = {}) {
   const env = dependencies.env ?? process.env;
-  const home = dependencies.home ?? homedir6();
+  const home = dependencies.home ?? homedir7();
   const project = await realpath18(root);
   const projectFiles = [
     ".mcp.json",
@@ -71574,11 +71665,11 @@ async function discoverTools(root, dependencies = {}) {
     ".codex/config.toml"
   ];
   const userFiles = [".claude.json", ".cursor/mcp.json", ".qwen/settings.json", ".gemini/settings.json"];
-  const codexHome = env.CODEX_HOME && isAbsolute11(env.CODEX_HOME) ? env.CODEX_HOME : join33(home, ".codex");
+  const codexHome = env.CODEX_HOME && isAbsolute12(env.CODEX_HOME) ? env.CODEX_HOME : join34(home, ".codex");
   const configs = [
-    ...projectFiles.map((path) => ({ path: join33(project, path), scope: "project" })),
-    ...userFiles.map((path) => ({ path: resolve18(home, path), scope: "user" })),
-    { path: join33(codexHome, "config.toml"), scope: "user" }
+    ...projectFiles.map((path) => ({ path: join34(project, path), scope: "project" })),
+    ...userFiles.map((path) => ({ path: resolve19(home, path), scope: "user" })),
+    { path: join34(codexHome, "config.toml"), scope: "user" }
   ];
   const [cli, mcp] = await Promise.all([
     Promise.all(binaries.map(async (name) => ({
@@ -71590,7 +71681,7 @@ async function discoverTools(root, dependencies = {}) {
       availability: await executable(name, env) ? "available" : "unavailable",
       reason: "Executable presence only; service access, daemon state and login are unverified."
     }))),
-    Promise.all(configs.map(({ path, scope }) => mcpNames(path, scope, project, resolve18(root))))
+    Promise.all(configs.map(({ path, scope }) => mcpNames(path, scope, project, resolve19(root))))
   ]);
   return [...cli, ...mcp.flat()];
 }
@@ -71625,7 +71716,7 @@ function continuousDecisionPrompt(operation, mission, tools, previousReport) {
 async function decideContinuousGoal(operation, decisionId, root, dependencies = {}) {
   if (!operation.baseline)
     throw new Error("An accepted operation baseline is required before selecting a goal.");
-  const store = new MissionStore(join34(root, ".agent-valley", "operation-decisions", operation.id));
+  const store = new MissionStore(join35(root, ".agent-valley", "operation-decisions", operation.id));
   const unlock = await store.lock(decisionId);
   const runtime = (dependencies.runtime ?? ((storage, signal) => new ChiefRuntime(storage, signal)))(store, dependencies.signal);
   let mission;
@@ -71734,7 +71825,7 @@ async function decideContinuousGoal(operation, decisionId, root, dependencies =
     const previousId = operation.history.at(-1)?.missionId;
     let previousReport;
     if (previousId) {
-      const previous = await new MissionStore(join34(root, ".agent-valley", "missions")).load(previousId);
+      const previous = await new MissionStore(join35(root, ".agent-valley", "missions")).load(previousId);
       if (previous.repositoryRoot !== operation.repositoryRoot || previous.status !== "completed")
         throw new Error("The previous accepted child's evidence no longer matches this operation. Restore its saved checkpoint before selecting another goal.");
       previousReport = renderReport(previous).slice(0, 16000);
@@ -71793,7 +71884,7 @@ function integerOption(value, name, maximum) {
   return number;
 }
 function operationStore(root) {
-  return new ContinuousOperationStore(join35(resolve19(root), ".agent-valley", "operations"));
+  return new ContinuousOperationStore(join36(resolve20(root), ".agent-valley", "operations"));
 }
 async function restoreOperationOrigin(repository, workspace) {
   const env = { ...process.env, ...clearedGitEnvironment };
@@ -71849,7 +71940,7 @@ async function newOperation(charter, options, root, id) {
     ...config.executionPolicy.maxEstimatedCostUsd !== undefined ? { cost: String(config.executionPolicy.maxEstimatedCostUsd) } : {}
   });
   if (typeof settings.actors === "string")
-    settings.actors = resolve19(root, settings.actors);
+    settings.actors = resolve20(root, settings.actors);
   const now = new Date().toISOString();
   return operationSchema.parse({
     id,
@@ -71911,9 +72002,9 @@ function renderOperationReport(operation) {
 `);
 }
 async function saveOperationReport(root, operation) {
-  const directory = join35(root, ".agent-valley", "operation-reports");
+  const directory = join36(root, ".agent-valley", "operation-reports");
   await mkdir17(directory, { recursive: true, mode: 448 });
-  const path = join35(directory, `${operation.id}.md`);
+  const path = join36(directory, `${operation.id}.md`);
   const temporary = `${path}.${randomUUID15()}.tmp`;
   try {
     await writeFile13(temporary, renderOperationReport(operation), { mode: 384, flag: "wx" });
@@ -71948,7 +72039,7 @@ async function runOperation(charter, options, root = process.cwd(), dependencies
       if (decisionBudgetKeys.some((key) => options[key] !== undefined)) {
         if (operation.currentMissionId || !operation.decisionId)
           throw new Error("Operation resume budget reconciliation applies only to an active decision checkpoint. Adjust the current child's budget with av order --resume <child-id>.");
-        const decisions = new MissionStore(join35(root, ".agent-valley", "operation-decisions", operation.id));
+        const decisions = new MissionStore(join36(root, ".agent-valley", "operation-decisions", operation.id));
         const unlockDecision = await decisions.lock(operation.decisionId);
         try {
           const decision = await decisions.load(operation.decisionId);
@@ -71994,7 +72085,7 @@ async function runOperation(charter, options, root = process.cwd(), dependencies
     console.log(`Operation ${id}
 Charter: ${operation.charter}
 Resume: av order --resume ${id}`);
-    const missions = new MissionStore(join35(root, ".agent-valley", "missions"));
+    const missions = new MissionStore(join36(root, ".agent-valley", "missions"));
     return await runContinuousOperation(operation, {
       signal: controller.signal,
       ...dependencies.now ? { now: dependencies.now } : {},
@@ -72102,7 +72193,7 @@ class OperationApi {
     this.root = root;
     this.workspace = workspace;
     this.dependencies = dependencies;
-    this.store = new ContinuousOperationStore(join36(root, ".agent-valley/operations"));
+    this.store = new ContinuousOperationStore(join37(root, ".agent-valley/operations"));
     this.jobs = new MissionJobs(root, "operation-jobs");
   }
   order(raw) {
@@ -72340,17 +72431,17 @@ class MissionApi {
     this.projectRoot = projectRoot;
     this.workspace = workspace;
     this.dependencies = dependencies;
-    this.store = new MissionStore(join37(projectRoot, ".agent-valley/missions"));
+    this.store = new MissionStore(join38(projectRoot, ".agent-valley/missions"));
     this.jobs = new MissionJobs(projectRoot);
     this.operationApi = new OperationApi(projectRoot, workspace, dependencies);
     this.operationJobs = new MissionJobs(projectRoot, "operation-jobs");
   }
   static async create(workspace, dependencies = {}) {
-    if (!isAbsolute12(workspace))
+    if (!isAbsolute13(workspace))
       throw new Error("Set an absolute Git repository path in av mcp --workspace <path>.");
     const projectRoot = await realpath21(workspace);
     const target = loadProjectConfig(projectRoot)?.workspace?.root ?? projectRoot;
-    if (!isAbsolute12(target))
+    if (!isAbsolute13(target))
       throw new Error("Set workspace.root in av.yaml to an absolute Git repository path.");
     return new MissionApi(projectRoot, await realpath21(target), dependencies);
   }
@@ -72379,7 +72470,7 @@ class MissionApi {
   async order(raw) {
     assertNotManagedRun(this.dependencies.env);
     const input = mcpOrderSchema.parse(raw);
-    if (input.workspace && (!isAbsolute12(input.workspace) || await realpath21(input.workspace) !== this.workspace))
+    if (input.workspace && (!isAbsolute13(input.workspace) || await realpath21(input.workspace) !== this.workspace))
       throw new Error("This AV server is bound to another workspace. Start av mcp --workspace for the target repository.");
     return this.serializeOrder(async () => {
       if (input.requestId) {
@@ -72402,7 +72493,7 @@ class MissionApi {
   async list() {
     this.assertOpen();
     await ensureAvDirectory(this.projectRoot, ["missions"]);
-    const ids = new Set((await readdir8(join37(this.projectRoot, ".agent-valley/missions"))).filter((name) => name.endsWith(".json")).map((name) => missionIdSchema.parse(name.slice(0, -5))));
+    const ids = new Set((await readdir8(join38(this.projectRoot, ".agent-valley/missions"))).filter((name) => name.endsWith(".json")).map((name) => missionIdSchema.parse(name.slice(0, -5))));
     for (const job of await this.jobs.list())
       ids.add(job.missionId);
     return {
@@ -72556,7 +72647,7 @@ class MissionApi {
   async load(id) {
     await ensureAvDirectory(this.projectRoot, ["missions"]);
     try {
-      const path = join37(this.projectRoot, ".agent-valley/missions", `${missionIdSchema.parse(id)}.json`);
+      const path = join38(this.projectRoot, ".agent-valley/missions", `${missionIdSchema.parse(id)}.json`);
       const stat = await lstat15(path);
       if (!stat.isFile() || stat.isSymbolicLink())
         throw new Error(`Mission record must be a regular file: ${path}. Remove the symlink before retrying.`);
@@ -72582,7 +72673,7 @@ class MissionApi {
 init_client_integrations_assets();
 init_client_integrations_files();
 import { lstat as lstat16, readdir as readdir9, realpath as realpath22 } from "node:fs/promises";
-import { dirname as dirname6, join as join38, relative as relative11, resolve as resolve20 } from "node:path";
+import { dirname as dirname8, join as join39, relative as relative12, resolve as resolve21 } from "node:path";
 
 // src/plugin-assets.ts
 import { copyFile as copyFile2, mkdir as mkdir18, readFile as readFile13 } from "node:fs/promises";
@@ -72749,7 +72840,7 @@ async function projectDirectory(workspace) {
   if (typeof workspace !== "string" || !workspace.trim())
     throw new Error("Pass --workspace /absolute/AV-project to bind every exported MCP server to its AV configuration.");
   try {
-    const project = await realpath22(resolve20(workspace));
+    const project = await realpath22(resolve21(workspace));
     if (!(await lstat16(project)).isDirectory())
       throw new Error("not a directory");
     return project;
@@ -72772,7 +72863,7 @@ function remoteEndpoint(value) {
 async function outputDirectory(output) {
   if (typeof output !== "string" || !output.trim())
     throw new Error("Pass --output /absolute/export-directory to write the generated AV plugin packages.");
-  const target = resolve20(output);
+  const target = resolve21(output);
   let ancestor = target;
   for (;; ) {
     try {
@@ -72781,11 +72872,11 @@ async function outputDirectory(output) {
         throw exportConflict(ancestor, "symbolic link exports are not modified");
       if (!info.isDirectory())
         throw exportConflict(ancestor, "expected an output directory");
-      return join38(await realpath22(ancestor), relative11(ancestor, target));
+      return join39(await realpath22(ancestor), relative12(ancestor, target));
     } catch (error) {
       if (error.code !== "ENOENT")
         throw error;
-      ancestor = dirname6(ancestor);
+      ancestor = dirname8(ancestor);
     }
   }
 }
@@ -72800,13 +72891,13 @@ async function outputFiles(root, directory = root) {
   }
   const files = [];
   for (const entry of entries) {
-    const path = join38(directory, entry.name);
+    const path = join39(directory, entry.name);
     if (entry.isSymbolicLink())
       throw exportConflict(path, "symbolic links are not modified");
     if (entry.isDirectory())
       files.push(...await outputFiles(root, path));
     else if (entry.isFile())
-      files.push(relative11(root, path).split("\\").join("/"));
+      files.push(relative12(root, path).split("\\").join("/"));
     else
       throw exportConflict(path, "expected regular export files");
   }
@@ -72837,21 +72928,21 @@ async function exportPluginPackages(options) {
   if (output === workspace)
     throw exportConflict(output, "the output directory must be separate from the AV project root");
   const { manifest } = await loadPluginManifestAsset(options.sourceManifest ? [options.sourceManifest] : undefined);
-  const { content: skill } = await loadClientSkillAsset(options.sourceSkillRoot ? [join38(options.sourceSkillRoot, "SKILL.md")] : clientSkillAssetCandidates());
+  const { content: skill } = await loadClientSkillAsset(options.sourceSkillRoot ? [join39(options.sourceSkillRoot, "SKILL.md")] : clientSkillAssetCandidates());
   const { content: license } = await loadPluginLicenseAsset(options.sourceLicense ? [options.sourceLicense] : undefined);
   const packageFiles = pluginPackageFiles(manifest, skill, license, { workspace, remoteUrl });
-  const receipt = await integrationFile(output, join38(output, receiptName2), "", 384);
+  const receipt = await integrationFile(output, join39(output, receiptName2), "", 384);
   const hashes = ownedFileHashes(receipt.before, receipt.path);
   const existing = await outputFiles(output);
   for (const path of existing) {
     if (path === receiptName2)
       continue;
     if (!packageFiles.has(path) || hashes[path] === undefined)
-      throw exportConflict(join38(output, path), "unowned files are retained");
+      throw exportConflict(join39(output, path), "unowned files are retained");
   }
   const files = [];
   for (const [path, content] of packageFiles) {
-    const file = await integrationFile(output, join38(output, path), content, 420);
+    const file = await integrationFile(output, join39(output, path), content, 420);
     if (hashes[path] !== undefined && (file.before === null || contentHash(file.before) !== hashes[path]))
       throw exportConflict(file.path, "the exported file was changed or removed locally");
     if (hashes[path] === undefined && file.before !== null)
@@ -72870,11 +72961,11 @@ async function exportPluginPackages(options) {
     transport: remoteUrl ? "streamable-http" : "stdio",
     files: await applyIntegrationFiles(output, [...files, receipt]),
     packages: {
-      portable: join38(output, "portable/av"),
-      claude: join38(output, "claude/plugins/av"),
-      cursor: join38(output, "cursor/plugins/av"),
-      qwen: join38(output, "qwen/av"),
-      antigravity: join38(output, "antigravity/av")
+      portable: join39(output, "portable/av"),
+      claude: join39(output, "claude/plugins/av"),
+      cursor: join39(output, "cursor/plugins/av"),
+      qwen: join39(output, "qwen/av"),
+      antigravity: join39(output, "antigravity/av")
     }
   };
 }
@@ -72907,7 +72998,7 @@ function registerAgentClientCommands(program) {
     ].some((value) => value !== undefined))
       throw new Error("OAuth gateway options require av mcp --http. Omit them to use local stdio.");
     const oauth = options.http ? resolveMcpOAuthOptions(options) : undefined;
-    const project = resolve21(options.workspace);
+    const project = resolve22(options.workspace);
     const api = await MissionApi.create(project);
     const workspace = api.targetWorkspace;
     try {
@@ -72937,7 +73028,7 @@ function registerAgentClientCommands(program) {
 // src/chief.ts
 import { randomUUID as randomUUID19 } from "node:crypto";
 import { realpath as realpath23 } from "node:fs/promises";
-import { join as join40 } from "node:path";
+import { join as join41 } from "node:path";
 
 // ../../packages/core/src/chief/coordinator-container.ts
 init_execution();
@@ -73825,14 +73916,14 @@ init_execution();
 
 // ../../packages/core/src/workspace/delivery-strategy.ts
 init_logger();
-import { lstatSync as lstatSync3 } from "node:fs";
+import { lstatSync as lstatSync4 } from "node:fs";
 
 // ../../packages/core/src/workspace/isolated-branch-import.ts
 init_worktree_lifecycle();
 import { randomUUID as randomUUID18 } from "node:crypto";
 import { mkdtemp, rm as rm5 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 async function importIsolatedBranch(workspace, root) {
   if (!isIsolatedGitWorkspace(workspace))
     return null;
@@ -73879,7 +73970,7 @@ async function importIsolatedBranch(workspace, root) {
 `).filter(Boolean);
     if (commits.length === 0)
       return null;
-    temporaryWorktree = await mkdtemp(join39(tmpdir3(), "av-branch-import-"));
+    temporaryWorktree = await mkdtemp(join40(tmpdir3(), "av-branch-import-"));
     const added = await runCommand("git", ["worktree", "add", "--detach", temporaryWorktree, currentHead], {
       cwd: root
     });
@@ -74152,7 +74243,7 @@ function gitFailure(action, result, fix) {
 }
 function linkedWorktreePath(workspace) {
   try {
-    return lstatSync3(`${workspace.path}/.git`).isFile() ? workspace.path : null;
+    return lstatSync4(`${workspace.path}/.git`).isFile() ? workspace.path : null;
   } catch {
     return null;
   }
@@ -74459,7 +74550,7 @@ async function runOrder(goal, options, root = process.cwd()) {
   assertNotManagedRun();
   if (!options.resume && [options.retry, options.resolveEffect, options.effectResult, options.accountRun, options.accountCost].some((value) => value !== undefined && value !== false))
     throw new Error("Use --resume <id> for retry, external-effect resolution or cost reconciliation.");
-  const store = new MissionStore(join40(root, ".agent-valley/missions"));
+  const store = new MissionStore(join41(root, ".agent-valley/missions"));
   const id = options.resume ?? options.missionId ?? randomUUID19();
   const unlock = await store.lock(id);
   const abortController = new AbortController;
@@ -74637,7 +74728,7 @@ async function dispatchOrder(goal, options, root = process.cwd(), dependencies =
     };
     const [operation, mission] = await Promise.all([
       operationStore(root).load(options.resume).catch(missing),
-      new MissionStore(join40(root, ".agent-valley", "missions")).load(options.resume).catch(missing)
+      new MissionStore(join41(root, ".agent-valley", "missions")).load(options.resume).catch(missing)
     ]);
     if (operation && mission)
       throw new Error(`Saved ID ${options.resume} names both an operation and a mission. Use --once to resume the mission; inspect av operations before resuming the operation.`);
@@ -74695,7 +74786,7 @@ function registerChiefCommands(program) {
       process.once("SIGTERM", stop);
       try {
         while (!controller.signal.aborted) {
-          const store = new MissionStore(join40(process.cwd(), ".agent-valley/missions"));
+          const store = new MissionStore(join41(process.cwd(), ".agent-valley/missions"));
           for (const mission of await store.list()) {
             if (controller.signal.aborted)
               break;
@@ -74718,7 +74809,7 @@ function registerChiefCommands(program) {
       }
       return;
     }
-    const missions = await new MissionStore(join40(process.cwd(), ".agent-valley/missions")).list();
+    const missions = await new MissionStore(join41(process.cwd(), ".agent-valley/missions")).list();
     if (!missions.length)
       console.log("No orders yet. Run bun av order --help.");
     for (const mission of missions) {
@@ -74731,17 +74822,17 @@ function registerChiefCommands(program) {
 
 // src/chief-organization.ts
 import { readFile as readFile15, stat as stat2 } from "node:fs/promises";
-import { isAbsolute as isAbsolute13, join as join41, resolve as resolve22 } from "node:path";
+import { isAbsolute as isAbsolute14, join as join42, resolve as resolve23 } from "node:path";
 init_chief_schema();
 init_yaml_loader();
 function organizationRepository(root, workspace) {
   const repository = workspace ?? loadProjectConfig(root)?.workspace?.root ?? root;
-  if (!isAbsolute13(repository))
+  if (!isAbsolute14(repository))
     throw new Error("Set workspace.root in av.yaml or --workspace to an absolute source repository path.");
   return repository;
 }
 async function inputFile(file) {
-  const path = resolve22(file);
+  const path = resolve23(file);
   const info = await stat2(path);
   if (!info.isFile() || info.size > 2000000)
     throw new Error("Use a regular JSON input file no larger than 2 MB.");
@@ -74785,22 +74876,22 @@ function registerOrganizationCommands(program) {
   });
   const reports = program.command("reports").description("Inspect and retry third-party report attachments");
   reports.command("list").option("--workspace <path>", "Source repository").action(async (opts) => {
-    console.log(JSON.stringify(await listReportDeliveries(join41(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
+    console.log(JSON.stringify(await listReportDeliveries(join42(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
   });
   reports.command("retry").option("--workspace <path>", "Source repository").action(async (opts) => {
     const config = mergeChiefConfig(loadGlobalConfig()?.chief, loadProjectConfig()?.chief);
     if (!config.reporting)
       throw new Error("Set chief.reporting.destinations in av.yaml before retrying reports.");
-    console.log(JSON.stringify(await retryPendingReports(config.reporting, join41(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
+    console.log(JSON.stringify(await retryPendingReports(config.reporting, join42(organizationRepository(process.cwd(), opts.workspace), ".agent-valley")), null, 2));
   });
 }
 
 // src/config-watch.ts
 init_project_config_path();
-import { resolve as resolve25 } from "node:path";
+import { resolve as resolve26 } from "node:path";
 async function watchConfig(root, globalPath, onChange) {
   await Promise.resolve().then(() => init_chokidar());
-  const watcher = watch([resolve25(root, PROJECT_CONFIG_FILENAME), globalPath], { ignoreInitial: true });
+  const watcher = watch([resolve26(root, PROJECT_CONFIG_FILENAME), globalPath], { ignoreInitial: true });
   watcher.on("all", (event, path) => {
     if (["add", "change", "unlink"].includes(event))
       onChange(path);
@@ -74816,10 +74907,10 @@ var import_picocolors = __toESM(require_picocolors(), 1);
 init_project_config_path();
 init_yaml_loader();
 init_doctor_checks();
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 
 // src/doctor-oma-checks.ts
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 function checkOma(project, deps) {
   const strict = project?.oma?.mode === "strict";
   const order = !!project && !project.tracker && !project.linear && !project.github;
@@ -74907,7 +74998,7 @@ function checkOma(project, deps) {
     fix: "Set verify.command to a deterministic non-build check in av.yaml before using oma.mode: strict.",
     critical: true
   });
-  const triggerPath = join44(deps.cwd, ".agents", "hooks", "core", "triggers.json");
+  const triggerPath = join45(deps.cwd, ".agents", "hooks", "core", "triggers.json");
   let table = null;
   try {
     table = parseTriggerTable(deps.readFileSync(triggerPath));
@@ -74924,7 +75015,7 @@ function checkOma(project, deps) {
     return results;
   }
   results.push({ id: "oma.triggers", name: "OMA trigger table", status: "pass", message: triggerPath, critical: false });
-  const missing = Object.entries(table.workflows).filter(([name, workflow]) => !workflow.persistent && !table.excludedWorkflows.includes(name)).map(([name]) => join44(deps.cwd, ".agents", "workflows", `${name}.md`)).filter((path) => !deps.existsSync(path));
+  const missing = Object.entries(table.workflows).filter(([name, workflow]) => !workflow.persistent && !table.excludedWorkflows.includes(name)).map(([name]) => join45(deps.cwd, ".agents", "workflows", `${name}.md`)).filter((path) => !deps.existsSync(path));
   results.push(missing.length === 0 ? {
     id: "oma.workflows",
     name: "OMA workflow files",
@@ -74943,7 +75034,7 @@ function checkOma(project, deps) {
 }
 
 // src/doctor-skill-matrix-checks.ts
-import { resolve as resolve26 } from "node:path";
+import { resolve as resolve27 } from "node:path";
 async function checkSkillMatrix(project, global2, deps) {
   const config = project?.oma?.skill_compatibility;
   if (!config)
@@ -74953,10 +75044,10 @@ async function checkSkillMatrix(project, global2, deps) {
   const actorType = projectActor?.type ?? globalActor?.type ?? "claude";
   const model = projectActor?.model ?? (globalActor?.type === actorType ? globalActor.model : undefined);
   const inspection = await inspectSkillCompatibility({
-    reportPath: resolve26(deps.cwd, config.report_path),
+    reportPath: resolve27(deps.cwd, config.report_path),
     maxAgeHours: config.max_age_hours,
     mode: config.mode
-  }, resolve26(deps.cwd, project?.workspace?.root ?? "."), undefined, [{ actorType, model }], deps.skillMatrix);
+  }, resolve27(deps.cwd, project?.workspace?.root ?? "."), undefined, [{ actorType, model }], deps.skillMatrix);
   const route = inspection.routes[0];
   const status = route?.status ?? "unknown";
   return [
@@ -74999,7 +75090,7 @@ function checkTunnel(project, deps) {
     }
     const mode = project?.tunnel?.cloudflare?.mode ?? "quick";
     if (mode === "named") {
-      const certPath = join45(deps.home, ".cloudflared", "cert.pem");
+      const certPath = join46(deps.home, ".cloudflared", "cert.pem");
       if (!deps.existsSync(certPath)) {
         return {
           id: "tunnel",
@@ -75039,7 +75130,7 @@ function checkTunnel(project, deps) {
       critical: false
     };
   }
-  const ngrokConfigPath = deps.platform === "darwin" ? join45(deps.home, "Library", "Application Support", "ngrok", "ngrok.yml") : join45(deps.home, ".config", "ngrok", "ngrok.yml");
+  const ngrokConfigPath = deps.platform === "darwin" ? join46(deps.home, "Library", "Application Support", "ngrok", "ngrok.yml") : join46(deps.home, ".config", "ngrok", "ngrok.yml");
   if (!deps.existsSync(ngrokConfigPath)) {
     return {
       id: "tunnel",
@@ -75110,7 +75201,7 @@ function checkConfig(deps) {
       critical: true
     });
   }
-  const projectPath = join45(deps.cwd, PROJECT_CONFIG_FILENAME);
+  const projectPath = join46(deps.cwd, PROJECT_CONFIG_FILENAME);
   try {
     project = deps.loadProjectConfig(deps.cwd);
     results.push(project ? {
@@ -75306,7 +75397,7 @@ async function registerLinearWebhook(root, tunnelUrl) {
 init_yaml_loader();
 import { existsSync as existsSync5, readFileSync as readFileSync10, writeFileSync as writeFileSync2 } from "node:fs";
 import { createServer as createServer3 } from "node:net";
-import { resolve as resolve27 } from "node:path";
+import { resolve as resolve28 } from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 
 // src/webhook-proxy.ts
@@ -75421,12 +75512,12 @@ function resolveServerPort(root, runningPort) {
   return String(port);
 }
 function resolveRuntimePaths(root, cliDir) {
-  const dashboardCwd = resolve27(root, "apps/dashboard");
-  if (!existsSync5(resolve27(dashboardCwd, "package.json"))) {
+  const dashboardCwd = resolve28(root, "apps/dashboard");
+  if (!existsSync5(resolve28(dashboardCwd, "package.json"))) {
     throw new Error(`Dashboard source is missing at ${dashboardCwd}. Clone https://github.com/first-fluke/agent-valley, run bun install, then run bun av setup and bun av dev from that checkout. The standalone CLI does not include the dashboard.`);
   }
-  const bundled = resolve27(cliDir, "supervisor.js");
-  const supervisorScript = existsSync5(bundled) ? bundled : resolve27(cliDir, "supervisor.ts");
+  const bundled = resolve28(cliDir, "supervisor.js");
+  const supervisorScript = existsSync5(bundled) ? bundled : resolve28(cliDir, "supervisor.ts");
   if (!existsSync5(supervisorScript)) {
     throw new Error(`Supervisor is missing at ${supervisorScript}. Run bun av up from an intact Agent Valley checkout.`);
   }
@@ -75705,8 +75796,8 @@ function spawnTunnel(config, input) {
 
 // src/index.ts
 var ROOT = process.cwd();
-var PID_FILE = resolve31(ROOT, ".av.pid");
-var LOG_FILE = resolve31(ROOT, ".av.log");
+var PID_FILE = resolve32(ROOT, ".av.pid");
+var LOG_FILE = resolve32(ROOT, ".av.log");
 function ensureConfig() {
   if (!existsSync10(resolveProjectConfigPath(ROOT))) {
     console.log(import_picocolors15.default.red("No av.yaml found. Run `av setup` first."));