bazilion 0.11.0 → 0.12.0

package/dist/daemon.js

@@ -135,10 +135,10 @@ var require_isexe = __commonJS({
         if (typeof Promise !== "function") {
           throw new TypeError("callback not provided");
         }
-        return new Promise(function(resolve7, reject) {
+        return new Promise(function(resolve7, reject2) {
           isexe(path, options || {}, function(er, is) {
             if (er) {
-              reject(er);
+              reject2(er);
             } else {
               resolve7(is);
             }
@@ -207,16 +207,16 @@ var require_which = __commonJS({
         opt = {};
       const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
       const found = [];
-      const step = (i) => new Promise((resolve7, reject) => {
+      const step = (i) => new Promise((resolve7, reject2) => {
         if (i === pathEnv.length)
-          return opt.all && found.length ? resolve7(found) : reject(getNotFoundError(cmd));
+          return opt.all && found.length ? resolve7(found) : reject2(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
         const pCmd = path.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve7(subStep(p, i, 0));
       });
-      const subStep = (p, i, ii) => new Promise((resolve7, reject) => {
+      const subStep = (p, i, ii) => new Promise((resolve7, reject2) => {
         if (ii === pathExt.length)
           return resolve7(step(i + 1));
         const ext = pathExt[ii];
@@ -7796,7 +7796,7 @@ var init_stdio2 = __esm({
         if (this._process) {
           throw new Error("StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.");
         }
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve7, reject2) => {
           this._process = (0, import_cross_spawn.default)(this._serverParams.command, this._serverParams.args ?? [], {
             // merge default env with server env because mcp server needs some env vars
             env: {
@@ -7809,7 +7809,7 @@ var init_stdio2 = __esm({
             cwd: this._serverParams.cwd
           });
           this._process.on("error", (error2) => {
-            reject(error2);
+            reject2(error2);
             this.onerror?.(error2);
           });
           this._process.on("spawn", () => {
@@ -9803,7 +9803,7 @@ var init_sse = __esm({
       }
       _startOrAuth() {
         const fetchImpl = this?._eventSourceInit?.fetch ?? this._fetch ?? fetch;
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve7, reject2) => {
           this._eventSource = new EventSource(this._url.href, {
             ...this._eventSourceInit,
             fetch: async (url2, init) => {
@@ -9824,11 +9824,11 @@ var init_sse = __esm({
           this._abortController = new AbortController();
           this._eventSource.onerror = (event2) => {
             if (event2.code === 401 && this._authProvider) {
-              this._authThenStart().then(resolve7, reject);
+              this._authThenStart().then(resolve7, reject2);
               return;
             }
             const error2 = new SseError(event2.code, event2.message, event2);
-            reject(error2);
+            reject2(error2);
             this.onerror?.(error2);
           };
           this._eventSource.onopen = () => {
@@ -9841,7 +9841,7 @@ var init_sse = __esm({
                 throw new Error(`Endpoint origin does not match connection origin: ${this._endpoint.origin}`);
               }
             } catch (error2) {
-              reject(error2);
+              reject2(error2);
               this.onerror?.(error2);
               void this.close();
               return;
@@ -11033,9 +11033,9 @@ var init_protocol = __esm({
        */
       request(request2, resultSchema, options) {
         const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve7, reject2) => {
           const earlyReject = (error2) => {
-            reject(error2);
+            reject2(error2);
           };
           if (!this._transport) {
             earlyReject(new Error("Not connected"));
@@ -11084,7 +11084,7 @@ var init_protocol = __esm({
               }
             };
           }
-          const cancel = (reason) => {
+          const cancel2 = (reason) => {
             this._responseHandlers.delete(messageId);
             this._progressHandlers.delete(messageId);
             this._cleanupTimeout(messageId);
@@ -11097,31 +11097,31 @@ var init_protocol = __esm({
               }
             }, { relatedRequestId, resumptionToken, onresumptiontoken }).catch((error3) => this._onerror(new Error(`Failed to send cancellation: ${error3}`)));
             const error2 = reason instanceof McpError ? reason : new McpError(ErrorCode.RequestTimeout, String(reason));
-            reject(error2);
+            reject2(error2);
           };
           this._responseHandlers.set(messageId, (response) => {
             if (options?.signal?.aborted) {
               return;
             }
             if (response instanceof Error) {
-              return reject(response);
+              return reject2(response);
             }
             try {
               const parseResult = safeParse3(resultSchema, response.result);
               if (!parseResult.success) {
-                reject(parseResult.error);
+                reject2(parseResult.error);
               } else {
                 resolve7(parseResult.data);
               }
             } catch (error2) {
-              reject(error2);
+              reject2(error2);
             }
           });
           options?.signal?.addEventListener("abort", () => {
-            cancel(options?.signal?.reason);
+            cancel2(options?.signal?.reason);
           });
           const timeout = options?.timeout ?? DEFAULT_REQUEST_TIMEOUT_MSEC;
-          const timeoutHandler = () => cancel(McpError.fromError(ErrorCode.RequestTimeout, "Request timed out", { timeout }));
+          const timeoutHandler = () => cancel2(McpError.fromError(ErrorCode.RequestTimeout, "Request timed out", { timeout }));
           this._setupTimeout(messageId, timeout, options?.maxTotalTimeout, timeoutHandler, options?.resetTimeoutOnProgress ?? false);
           const relatedTaskId = relatedTask?.taskId;
           if (relatedTaskId) {
@@ -11140,12 +11140,12 @@ var init_protocol = __esm({
               timestamp: Date.now()
             }).catch((error2) => {
               this._cleanupTimeout(messageId);
-              reject(error2);
+              reject2(error2);
             });
           } else {
             this._transport.send(jsonrpcRequest, { relatedRequestId, resumptionToken, onresumptiontoken }).catch((error2) => {
               this._cleanupTimeout(messageId);
-              reject(error2);
+              reject2(error2);
             });
           }
         });
@@ -11372,15 +11372,15 @@ var init_protocol = __esm({
           }
         } catch {
         }
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve7, reject2) => {
           if (signal.aborted) {
-            reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
+            reject2(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
             return;
           }
           const timeoutId = setTimeout(resolve7, interval);
           signal.addEventListener("abort", () => {
             clearTimeout(timeoutId);
-            reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
+            reject2(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
           }, { once: true });
         });
       }
@@ -13655,8 +13655,8 @@ var require_resolve = __commonJS({
       }
       return count2;
     }
-    function getFullPath(resolver, id = "", normalize) {
-      if (normalize !== false)
+    function getFullPath(resolver, id = "", normalize2) {
+      if (normalize2 !== false)
         id = normalizeId(id);
       const p = resolver.parse(id);
       return _getFullPath(resolver, p);
@@ -15052,7 +15052,7 @@ var require_fast_uri = __commonJS({
     "use strict";
     var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
-    function normalize(uri, options) {
+    function normalize2(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
         normalizeString(uri, options);
@@ -15319,7 +15319,7 @@ var require_fast_uri = __commonJS({
     }
     var fastUri = {
       SCHEMES,
-      normalize,
+      normalize: normalize2,
       resolve: resolve7,
       resolveComponent,
       equal,
@@ -19125,7 +19125,7 @@ var init_client2 = __esm({
 import { serve } from "@hono/node-server";
 
 // ../daemon/src/app.ts
-import { Hono as Hono16 } from "hono";
+import { Hono as Hono17 } from "hono";
 
 // ../daemon/src/lib/middleware-auth.ts
 import { getCookie } from "hono/cookie";
@@ -19154,6 +19154,7 @@ __export(agents_exports, {
   setModelOverride: () => setModelOverride,
   setName: () => setName,
   setReasoningLevel: () => setReasoningLevel,
+  setReviewConfig: () => setReviewConfig,
   setStatus: () => setStatus,
   setTelegramIconEmoji: () => setTelegramIconEmoji,
   setTelegramMirrorMode: () => setTelegramMirrorMode,
@@ -19167,6 +19168,11 @@ function toAgent(r) {
     name: r.name,
     modelOverride: r.model_override,
     reasoningLevel: r.reasoning_level,
+    reviewEnabled: r.review_enabled === 1,
+    reviewEveryNTurns: r.review_every_n_turns,
+    reviewModel: r.review_model,
+    reviewReasoningLevel: r.review_reasoning_level,
+    reviewTurnsSinceLast: r.review_turns_since_last,
     status: r.status,
     dir: r.dir,
     teamId: r.team_id,
@@ -19201,6 +19207,11 @@ function insert(db, a) {
     telegramTopicId: null,
     telegramMirrorMode: mirrorMode,
     telegramIconEmoji: null,
+    reviewEnabled: false,
+    reviewEveryNTurns: 8,
+    reviewModel: null,
+    reviewReasoningLevel: "low",
+    reviewTurnsSinceLast: 0,
     createdAt: now,
     archivedAt: null
   };
@@ -19211,6 +19222,13 @@ function setReasoningLevel(db, id, level) {
 function setModelOverride(db, id, model) {
   db.raw.run("UPDATE agents SET model_override = ? WHERE id = ?", [model, id]);
 }
+function setReviewConfig(db, id, config2) {
+  db.raw.run(
+    `UPDATE agents SET review_enabled = ?, review_every_n_turns = ?, review_model = ?,
+     review_reasoning_level = ? WHERE id = ?`,
+    [config2.enabled ? 1 : 0, config2.everyNTurns, config2.model, config2.reasoningLevel, id]
+  );
+}
 function setName(db, id, name) {
   db.raw.run("UPDATE agents SET name = ? WHERE id = ?", [name, id]);
 }
@@ -20025,12 +20043,123 @@ function loadIdentityFromFile(path) {
   return identityHasValues(parsed) ? parsed : null;
 }
 
+// ../daemon/src/core/repos/agentLessonProposals.ts
+var agentLessonProposals_exports = {};
+__export(agentLessonProposals_exports, {
+  approve: () => approve,
+  get: () => get4,
+  insert: () => insert3,
+  listForAgent: () => listForAgent,
+  listForReview: () => listForReview,
+  reject: () => reject,
+  revoke: () => revoke,
+  updatePending: () => updatePending
+});
+import { randomUUID as randomUUID2 } from "crypto";
+function toProposal(row) {
+  return {
+    id: row.id,
+    reviewId: row.review_id,
+    agentId: row.agent_id,
+    scope: row.scope,
+    text: row.text,
+    evidence: JSON.parse(row.evidence_json),
+    status: row.status,
+    version: row.version,
+    decidedAt: row.decided_at,
+    revokedAt: row.revoked_at,
+    appliedKey: row.applied_key,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function insert3(db, input) {
+  const now = input.now ?? Date.now();
+  const id = randomUUID2();
+  db.raw.run(
+    `INSERT INTO agent_lesson_proposals
+       (id, review_id, agent_id, scope, text, evidence_json, status, version, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, 'pending', 1, ?, ?)`,
+    [
+      id,
+      input.reviewId,
+      input.agentId,
+      input.scope,
+      input.text.trim(),
+      JSON.stringify(input.evidence),
+      now,
+      now
+    ]
+  );
+  const proposal = get4(db, id);
+  if (!proposal) throw new Error("lesson proposal insert failed");
+  return proposal;
+}
+function get4(db, id) {
+  const row = db.raw.query("SELECT * FROM agent_lesson_proposals WHERE id = ?").get(id);
+  return row ? toProposal(row) : null;
+}
+function listForReview(db, reviewId) {
+  return db.raw.query(
+    "SELECT * FROM agent_lesson_proposals WHERE review_id = ? ORDER BY created_at ASC"
+  ).all(reviewId).map(toProposal);
+}
+function listForAgent(db, agentId, options = {}) {
+  const limit = options.limit ?? 100;
+  const rows = options.status ? db.raw.query(
+    `SELECT * FROM agent_lesson_proposals WHERE agent_id = ? AND status = ?
+           ORDER BY created_at DESC LIMIT ?`
+  ).all(agentId, options.status, limit) : db.raw.query(
+    `SELECT * FROM agent_lesson_proposals WHERE agent_id = ?
+           ORDER BY created_at DESC LIMIT ?`
+  ).all(agentId, limit);
+  return rows.map(toProposal);
+}
+function changedProposal(db, id, changes) {
+  return changes === 1 ? get4(db, id) : null;
+}
+function updatePending(db, id, version2, input, now = Date.now()) {
+  const result = db.raw.run(
+    `UPDATE agent_lesson_proposals SET text = ?, scope = ?, version = version + 1, updated_at = ?
+     WHERE id = ? AND version = ? AND status = 'pending'`,
+    [input.text.trim(), input.scope, now, id, version2]
+  );
+  return changedProposal(db, id, Number(result.changes));
+}
+function approve(db, id, version2, appliedKey, now = Date.now()) {
+  const result = db.raw.run(
+    `UPDATE agent_lesson_proposals SET status = 'approved', applied_key = ?, decided_at = ?,
+     version = version + 1, updated_at = ?
+     WHERE id = ? AND version = ? AND status = 'pending'`,
+    [appliedKey, now, now, id, version2]
+  );
+  return changedProposal(db, id, Number(result.changes));
+}
+function reject(db, id, version2, now = Date.now()) {
+  const result = db.raw.run(
+    `UPDATE agent_lesson_proposals SET status = 'rejected', decided_at = ?,
+     version = version + 1, updated_at = ?
+     WHERE id = ? AND version = ? AND status = 'pending'`,
+    [now, now, id, version2]
+  );
+  return changedProposal(db, id, Number(result.changes));
+}
+function revoke(db, id, version2, now = Date.now()) {
+  const result = db.raw.run(
+    `UPDATE agent_lesson_proposals SET status = 'revoked', revoked_at = ?,
+     version = version + 1, updated_at = ?
+     WHERE id = ? AND version = ? AND status = 'approved'`,
+    [now, now, id, version2]
+  );
+  return changedProposal(db, id, Number(result.changes));
+}
+
 // ../daemon/src/core/repos/profiles.ts
 var profiles_exports = {};
 __export(profiles_exports, {
-  get: () => get4,
+  get: () => get5,
   getDefaultSkills: () => getDefaultSkills,
-  insert: () => insert3,
+  insert: () => insert4,
   list: () => list3,
   remove: () => remove3,
   setDefaultSkills: () => setDefaultSkills,
@@ -20047,7 +20176,7 @@ function toProfile(r) {
     updatedAt: r.updated_at
   };
 }
-function insert3(db, p) {
+function insert4(db, p) {
   const now = Date.now();
   db.raw.run(
     `INSERT INTO profiles (id, name, dir, default_model, skills_mode, created_at, updated_at)
@@ -20056,7 +20185,7 @@ function insert3(db, p) {
   );
   return { ...p, createdAt: now, updatedAt: now };
 }
-function get4(db, id) {
+function get5(db, id) {
   const row = db.raw.query("SELECT * FROM profiles WHERE id = ?").get(id);
   return row ? toProfile(row) : null;
 }
@@ -20095,7 +20224,7 @@ function resolveAgent(db, paths, agentId) {
   const agent = get(db, agentId);
   if (!agent) throw new Error(`agent not found: ${agentId}`);
   agent.identity = loadIdentityFromFile(join2(agent.dir, "IDENTITY.md"));
-  const profile = get4(db, agent.profileId);
+  const profile = get5(db, agent.profileId);
   if (!profile) {
     throw new Error(`profile not found for agent ${agentId}: ${agent.profileId}`);
   }
@@ -20109,12 +20238,13 @@ function resolveAgent(db, paths, agentId) {
     model: agent.modelOverride ?? profile.defaultModel,
     reasoningLevel: agent.reasoningLevel,
     team,
-    skills: listAttachedSkills(db, agentId)
+    skills: listAttachedSkills(db, agentId),
+    privateLessons: listForAgent(db, agent.id, { status: "approved", limit: 100 }).filter((proposal) => proposal.scope === "private").map((proposal) => proposal.text)
   };
 }
 
 // ../daemon/src/core/agent/spawn.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 import { mkdirSync as mkdirSync3, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
 import { join as join7 } from "path";
 
@@ -20125,10 +20255,10 @@ import { join as join3 } from "path";
 // ../daemon/src/core/repos/profileCommunicationDefaults.ts
 var profileCommunicationDefaults_exports = {};
 __export(profileCommunicationDefaults_exports, {
-  get: () => get5,
+  get: () => get6,
   set: () => set
 });
-function get5(db, profileId) {
+function get6(db, profileId) {
   const row = db.raw.query(
     `SELECT user_input, user_output, outside_team_input, outside_team_output, peer_default
        FROM profile_communication_defaults WHERE profile_id = ?`
@@ -20174,7 +20304,7 @@ function readOptional(path) {
   return existsSync2(path) ? readFileSync3(path, "utf8") : null;
 }
 function loadProfile(db, id) {
-  const profile = get4(db, id);
+  const profile = get5(db, id);
   if (!profile) throw new Error(`profile not found: ${id}`);
   const soul = readFileSync3(join3(profile.dir, "SOUL.md"), "utf8");
   const identityRaw = readFileSync3(join3(profile.dir, "IDENTITY.md"), "utf8");
@@ -20194,7 +20324,7 @@ function loadProfile(db, id) {
       tools
     },
     identity: anyIdentity ? parsedIdentity : null,
-    communicationDefaults: get5(db, id)
+    communicationDefaults: get6(db, id)
   };
 }
 
@@ -20376,7 +20506,7 @@ function createProfile(db, paths, input) {
   };
   writeFileSync2(join4(dir, "profile.json"), `${JSON.stringify(profileJson, null, 2)}
 `);
-  const profile = insert3(db, {
+  const profile = insert4(db, {
     id: input.id,
     name: profileJson.name,
     dir,
@@ -20422,7 +20552,7 @@ function seedDefaults(db, paths, input) {
     team = registerTeam(db, { id: DEFAULT_TEAM_ID, name: "Default" }, paths);
     teamCreated = true;
   }
-  let profile = get4(db, DEFAULT_PROFILE_ID);
+  let profile = get5(db, DEFAULT_PROFILE_ID);
   let profileCreated = false;
   if (!profile) {
     profile = createProfile(db, paths, {
@@ -20444,7 +20574,7 @@ function seedDefaults(db, paths, input) {
 }
 function ensureSetupSeeded(db, paths) {
   if (!isSetupComplete(db)) return null;
-  if (get4(db, DEFAULT_PROFILE_ID)) return null;
+  if (get5(db, DEFAULT_PROFILE_ID)) return null;
   const first = listAvailableModels(db)[0];
   if (!first) return null;
   return seedDefaults(db, paths, { model: first.value });
@@ -20470,7 +20600,7 @@ function discoverSkills(paths) {
 // ../daemon/src/core/agent/spawn.ts
 function spawnAgent(db, paths, input) {
   const loaded = loadProfile(db, input.profileId);
-  const id = randomUUID2();
+  const id = randomUUID3();
   const dir = paths.agentDir(id);
   try {
     return db.raw.transaction(() => {
@@ -20557,6 +20687,197 @@ function unarchiveAgent(db, id) {
   unarchive(db, agent.id);
 }
 
+// ../daemon/src/core/attention.ts
+var ATTENTION_KINDS = [
+  "communication_approval",
+  "lesson_proposal",
+  "review_failure",
+  "trigger_failure",
+  "agent_loop_break"
+];
+var bounded = (value, fallback) => (value?.trim() || fallback).replace(/(authorization:\s*bearer\s+)[^\s,;]+/gi, "$1[redacted]").replace(/\bsk-[a-z0-9_-]{8,}\b/gi, "[redacted]").replace(/(https?:\/\/)[^\s/@:]+:[^\s/@]+@/gi, "$1[redacted]@").slice(0, 500);
+var sources = [
+  {
+    kind: "communication_approval",
+    query: (db) => db.raw.query(`SELECT ca.id sourceId, ca.created_at occurredAt, ca.updated_at updatedAt,
+          COALESCE(ca.target_id, ca.source_id) agentId, a.name agentName,
+          COALESCE(ca.target_team_id, ca.source_team_id) teamId, t.name teamName,
+          NULL acknowledged_at
+          FROM communication_approvals ca
+          LEFT JOIN agents a ON a.id = COALESCE(NULLIF(ca.target_id,''), NULLIF(ca.source_id,''))
+          LEFT JOIN teams t ON t.id = COALESCE(ca.target_team_id, ca.source_team_id)
+          WHERE ca.status = 'pending' AND ca.expires_at > CAST(unixepoch('subsec') * 1000 AS INTEGER)`).all().map(
+      (r) => ({
+        ...r,
+        kind: "communication_approval",
+        severity: "action_required",
+        title: "Communication approval required",
+        diagnostic: "A policy-protected communication is waiting for an operator decision.",
+        href: "/approvals",
+        acknowledgeable: false
+      })
+    )
+  },
+  {
+    kind: "lesson_proposal",
+    query: (db) => db.raw.query(`SELECT p.id sourceId, p.created_at occurredAt, p.updated_at updatedAt,
+        p.agent_id agentId, a.name agentName, a.team_id teamId, t.name teamName, NULL acknowledged_at
+        FROM agent_lesson_proposals p JOIN agents a ON a.id = p.agent_id
+        JOIN teams t ON t.id = a.team_id
+        WHERE p.status = 'pending'`).all().map(
+      (r) => ({
+        ...r,
+        kind: "lesson_proposal",
+        severity: "action_required",
+        title: "Lesson proposal ready",
+        diagnostic: "A reviewed-learning proposal is waiting for approval or rejection.",
+        href: `/agents/${encodeURIComponent(r.agentId ?? "")}/learning`,
+        acknowledgeable: false
+      })
+    )
+  },
+  {
+    kind: "review_failure",
+    query: (db) => db.raw.query(`SELECT r.id sourceId, r.created_at occurredAt, r.updated_at updatedAt,
+        r.agent_id agentId, a.name agentName, a.team_id teamId, t.name teamName,
+        r.status, r.last_error diagnostic, aa.acknowledged_at FROM agent_reviews r
+        JOIN agents a ON a.id = r.agent_id JOIN teams t ON t.id = a.team_id
+        LEFT JOIN attention_acknowledgements aa ON aa.source_kind = 'review_failure' AND aa.source_id = r.id
+        WHERE r.status IN ('failed','cancelled')`).all().map(
+      (r) => ({
+        ...r,
+        kind: "review_failure",
+        severity: "error",
+        title: r.status === "cancelled" ? "Agent review cancelled" : "Agent review failed",
+        diagnostic: bounded(r.diagnostic, "The review stopped without completing."),
+        href: `/agents/${encodeURIComponent(r.agentId ?? "")}/learning`,
+        acknowledgeable: true
+      })
+    )
+  },
+  {
+    kind: "trigger_failure",
+    query: (db) => db.raw.query(`SELECT d.id sourceId, d.scheduled_at occurredAt, d.updated_at updatedAt,
+        d.agent_id agentId, a.name agentName, a.team_id teamId, t.name teamName,
+        d.last_error diagnostic, aa.acknowledged_at FROM trigger_dispatches d
+        JOIN agents a ON a.id = d.agent_id JOIN teams t ON t.id = a.team_id
+        LEFT JOIN attention_acknowledgements aa ON aa.source_kind = 'trigger_failure' AND aa.source_id = d.id
+        WHERE d.status = 'failed'`).all().map(
+      (r) => ({
+        ...r,
+        kind: "trigger_failure",
+        severity: "error",
+        title: "Scheduled trigger failed",
+        diagnostic: bounded(r.diagnostic, "The scheduled Agent turn exhausted its retries."),
+        href: `/agents/${encodeURIComponent(r.agentId ?? "")}`,
+        acknowledgeable: true
+      })
+    )
+  },
+  {
+    kind: "agent_loop_break",
+    query: (db) => db.raw.query(`SELECT e.id sourceId, e.created_at occurredAt, e.created_at updatedAt,
+        e.from_agent_id agentId, a.name agentName, e.source_team_id teamId, t.name teamName,
+        e.attempted_hop, e.max_hops, aa.acknowledged_at FROM agent_loop_break_events e
+        JOIN agents a ON a.id = e.from_agent_id JOIN teams t ON t.id = e.source_team_id
+        LEFT JOIN attention_acknowledgements aa ON aa.source_kind = 'agent_loop_break' AND aa.source_id = e.id`).all().map(
+      (r) => ({
+        ...r,
+        kind: "agent_loop_break",
+        severity: "warning",
+        title: "Agent message loop stopped",
+        diagnostic: `Message chain stopped at hop ${r.attempted_hop} (limit ${r.max_hops}).`,
+        href: `/agents/${encodeURIComponent(r.agentId ?? "")}/inbox`,
+        acknowledgeable: true
+      })
+    )
+  }
+];
+function normalize(row) {
+  const { acknowledged_at, ...item } = row;
+  return { ...item, key: `${item.kind}:${item.sourceId}`, acknowledgedAt: acknowledged_at };
+}
+function parseAttentionKey(key2) {
+  const at = key2.indexOf(":");
+  const kind = key2.slice(0, at);
+  const sourceId = key2.slice(at + 1);
+  return at > 0 && ATTENTION_KINDS.includes(kind) && sourceId ? { kind, sourceId } : null;
+}
+function projectAttention(db, options = {}) {
+  const degraded = [];
+  const items = sources.flatMap((source) => {
+    if (options.kind && source.kind !== options.kind) return [];
+    try {
+      return source.query(db).map(normalize);
+    } catch (error2) {
+      degraded.push({
+        kind: source.kind,
+        error: bounded(error2 instanceof Error ? error2.message : String(error2), "Projection failed")
+      });
+      return [];
+    }
+  });
+  const state3 = options.state ?? "open";
+  return {
+    items: items.filter(
+      (item) => state3 === "all" || (state3 === "acknowledged" ? item.acknowledgedAt !== null : item.acknowledgedAt === null)
+    ).sort((a, b2) => b2.updatedAt - a.updatedAt || a.key.localeCompare(b2.key)).slice(0, Math.max(options.limit ?? 100, 1)),
+    degraded
+  };
+}
+function attentionSummary(db) {
+  const projected = projectAttention(db, { state: "open", limit: 1e5 });
+  const bySeverity = { action_required: 0, error: 0, warning: 0 };
+  const byKind = Object.fromEntries(ATTENTION_KINDS.map((kind) => [kind, 0]));
+  for (const item of projected.items) {
+    bySeverity[item.severity]++;
+    byKind[item.kind]++;
+  }
+  return { openTotal: projected.items.length, bySeverity, byKind, degraded: projected.degraded };
+}
+function acknowledgeAttention(db, key2, acknowledged) {
+  const parsed = parseAttentionKey(key2);
+  if (!parsed) throw new Error("invalid_attention_key");
+  const current = projectAttention(db, {
+    state: "all",
+    kind: parsed.kind,
+    limit: 1e5
+  }).items.find((item) => item.sourceId === parsed.sourceId);
+  if (!current) throw new Error("attention_source_not_found");
+  if (!current.acknowledgeable) throw new Error("attention_action_required");
+  if (acknowledged)
+    db.raw.run(
+      `INSERT INTO attention_acknowledgements (source_kind, source_id, acknowledged_at) VALUES (?, ?, ?) ON CONFLICT(source_kind, source_id) DO NOTHING`,
+      [parsed.kind, parsed.sourceId, Date.now()]
+    );
+  else
+    db.raw.run("DELETE FROM attention_acknowledgements WHERE source_kind = ? AND source_id = ?", [
+      parsed.kind,
+      parsed.sourceId
+    ]);
+  const updated = projectAttention(db, {
+    state: "all",
+    kind: parsed.kind,
+    limit: 1e5
+  }).items.find((item) => item.sourceId === parsed.sourceId);
+  if (!updated) throw new Error("attention_source_not_found");
+  return updated;
+}
+function acknowledgeAllAttention(db) {
+  return db.raw.transaction(() => {
+    const items = projectAttention(db, { state: "open", limit: 1e5 }).items.filter(
+      (item) => item.acknowledgeable
+    );
+    const now = Date.now();
+    for (const item of items)
+      db.raw.run(
+        `INSERT INTO attention_acknowledgements (source_kind, source_id, acknowledged_at) VALUES (?, ?, ?) ON CONFLICT(source_kind, source_id) DO NOTHING`,
+        [item.kind, item.sourceId, now]
+      );
+    return items.length;
+  })();
+}
+
 // ../daemon/src/core/db/client.ts
 import { backup, DatabaseSync } from "node:sqlite";
 function wrap(rawDb) {
@@ -20717,7 +21038,7 @@ __export(teamTemplates_exports, {
   detail: () => detail2,
   edges: () => edges2,
   findReferencingProfile: () => findReferencingProfile,
-  get: () => get6,
+  get: () => get7,
   insertCanonical: () => insertCanonical,
   insertCanonicalDefinition: () => insertCanonicalDefinition,
   list: () => list5,
@@ -20728,7 +21049,7 @@ __export(teamTemplates_exports, {
   slots: () => slots,
   updateCanonicalMetadata: () => updateCanonicalMetadata
 });
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 function toTemplate(row) {
   return {
     id: row.id,
@@ -20764,7 +21085,7 @@ function toEdge(row) {
     posture: row.posture
   };
 }
-function get6(db, id) {
+function get7(db, id) {
   const row = db.raw.query("SELECT * FROM team_templates WHERE id = ?").get(id);
   return row ? toTemplate(row) : null;
 }
@@ -20772,7 +21093,7 @@ function list5(db) {
   return db.raw.query("SELECT * FROM team_templates ORDER BY created_at ASC").all().map(toTemplate);
 }
 function detail2(db, id) {
-  const template = get6(db, id);
+  const template = get7(db, id);
   if (!template) return null;
   const currentSnapshot = revision(db, id, template.currentRevision);
   if (!currentSnapshot)
@@ -20872,7 +21193,7 @@ function replaceCanonicalDefinition(db, templateId, input) {
       if (resolvedRefs.has(reference)) {
         throw new Error(`invalid_template_definition: duplicate slot reference ${reference}`);
       }
-      resolvedRefs.set(reference, value.slotId ?? randomUUID3());
+      resolvedRefs.set(reference, value.slotId ?? randomUUID4());
     }
     const resolvedEdges = input.edges.map((edge) => ({
       ...edge,
@@ -20881,7 +21202,7 @@ function replaceCanonicalDefinition(db, templateId, input) {
     }));
     const resolvedSlots = input.slots.map((slot) => ({
       ...slot,
-      slotId: slot.slotId ?? (slot.clientKey ? resolvedRefs.get(slot.clientKey) : randomUUID3())
+      slotId: slot.slotId ?? (slot.clientKey ? resolvedRefs.get(slot.clientKey) : randomUUID4())
     }));
     validateCanonicalDefinition(resolvedSlots, resolvedEdges);
     const now = Date.now();
@@ -20893,7 +21214,7 @@ function replaceCanonicalDefinition(db, templateId, input) {
     for (let position = 0; position < resolvedSlots.length; position++) {
       const value = resolvedSlots[position];
       if (!value) continue;
-      const slotId = value.slotId ?? randomUUID3();
+      const slotId = value.slotId ?? randomUUID4();
       if (activeIds.has(slotId))
         throw new Error(`invalid_template_definition: duplicate slot ${slotId}`);
       activeIds.add(slotId);
@@ -20958,7 +21279,7 @@ function cloneCanonical(db, sourceId, input) {
     const snapshot = revision(db, sourceId, input.expectedRevision);
     if (!snapshot)
       throw new Error(`template_snapshot_missing: ${sourceId}@${input.expectedRevision}`);
-    const translated = new Map(snapshot.slots.map((slot) => [slot.slotId, randomUUID3()]));
+    const translated = new Map(snapshot.slots.map((slot) => [slot.slotId, randomUUID4()]));
     return insertCanonicalDefinition(db, {
       id: input.id,
       name: input.name ?? `${source.name} copy`,
@@ -21044,7 +21365,7 @@ function revision(db, templateId, revisionNumber) {
   };
 }
 function snapshotCurrent(db, templateId, revisionNumber, now) {
-  const template = get6(db, templateId);
+  const template = get7(db, templateId);
   if (!template) throw new Error(`team template not found: ${templateId}`);
   db.raw.run(
     `INSERT INTO team_template_revisions (template_id, revision, name, user_md, created_at)
@@ -21066,7 +21387,7 @@ function snapshotCurrent(db, templateId, revisionNumber, now) {
   );
 }
 function pruneRevision(db, templateId, revisionNumber) {
-  const template = get6(db, templateId);
+  const template = get7(db, templateId);
   if (!template) throw new Error(`team template not found: ${templateId}`);
   if (template.currentRevision === revisionNumber) {
     throw new Error(`template_revision_in_use: revision ${revisionNumber} is current`);
@@ -21101,7 +21422,7 @@ function requireDetail2(db, id) {
   return found;
 }
 function requireMutable(db, id) {
-  const template = get6(db, id);
+  const template = get7(db, id);
   if (!template) throw new Error(`team template not found: ${id}`);
   if (template.deletedAt !== null) throw new Error(`template_deleted: ${id}`);
   return template;
@@ -21170,7 +21491,7 @@ function insertTemplateEdge(db, templateId, edge) {
 
 // ../daemon/src/core/profile/delete.ts
 function deleteProfile(db, id) {
-  const profile = get4(db, id);
+  const profile = get5(db, id);
   if (!profile) throw new Error(`profile not found: ${id}`);
   const agents = list(db, { includeArchived: true }).filter((a) => a.profileId === id);
   if (agents.length > 0) {
@@ -21196,7 +21517,7 @@ function deleteProfile(db, id) {
 import { writeFileSync as writeFileSync5 } from "fs";
 import { join as join10 } from "path";
 function updateProfile(db, paths, id, input) {
-  const existing = get4(db, id);
+  const existing = get5(db, id);
   if (!existing) throw new Error(`profile not found: ${id}`);
   const nextSkillsMode = input.skillsMode ?? existing.skillsMode;
   const next = {
@@ -21223,14 +21544,197 @@ function updateProfile(db, paths, id, input) {
     `${JSON.stringify(profileJson, null, 2)}
 `
   );
-  const updated = get4(db, id);
+  const updated = get5(db, id);
   if (!updated) throw new Error(`profile vanished after update: ${id}`);
   return {
     ...updated,
-    communicationDefaults: get5(db, id)
+    communicationDefaults: get6(db, id)
   };
 }
 
+// ../daemon/src/core/repos/agentReviews.ts
+var agentReviews_exports = {};
+__export(agentReviews_exports, {
+  cancel: () => cancel,
+  claim: () => claim,
+  complete: () => complete,
+  defer: () => defer,
+  enqueueManual: () => enqueueManual,
+  fail: () => fail,
+  get: () => get8,
+  getLatestCompleted: () => getLatestCompleted,
+  getOpenForAgent: () => getOpenForAgent,
+  listClaimable: () => listClaimable,
+  listForAgent: () => listForAgent2,
+  recordSuccessfulUserTurn: () => recordSuccessfulUserTurn,
+  setSource: () => setSource
+});
+import { randomUUID as randomUUID5 } from "crypto";
+function toReview(row) {
+  return {
+    id: row.id,
+    agentId: row.agent_id,
+    status: row.status,
+    trigger: row.trigger_kind,
+    sourceSessionId: row.source_session_id,
+    sourceStartOrdinal: row.source_start_ordinal,
+    sourceEndOrdinal: row.source_end_ordinal,
+    inputCharacters: row.input_characters,
+    turnsReviewed: row.turns_reviewed,
+    proposalCount: row.proposal_count,
+    attemptCount: row.attempt_count,
+    nextAttemptAt: row.next_attempt_at,
+    leaseExpiresAt: row.lease_expires_at,
+    startedAt: row.started_at,
+    finishedAt: row.finished_at,
+    lastError: row.last_error,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function insert5(db, agentId, trigger, now) {
+  const id = randomUUID5();
+  db.raw.run(
+    `INSERT INTO agent_reviews
+       (id, agent_id, status, trigger_kind, input_characters, turns_reviewed,
+        proposal_count, attempt_count, next_attempt_at, created_at, updated_at)
+     VALUES (?, ?, 'pending', ?, 0, 0, 0, 0, ?, ?, ?)`,
+    [id, agentId, trigger, now, now, now]
+  );
+  const review = get8(db, id);
+  if (!review) throw new Error("agent review enqueue failed");
+  return review;
+}
+function get8(db, id) {
+  const row = db.raw.query("SELECT * FROM agent_reviews WHERE id = ?").get(id);
+  return row ? toReview(row) : null;
+}
+function getOpenForAgent(db, agentId) {
+  const row = db.raw.query(
+    `SELECT * FROM agent_reviews WHERE agent_id = ?
+       AND status IN ('pending','running','retrying') LIMIT 1`
+  ).get(agentId);
+  return row ? toReview(row) : null;
+}
+function enqueueManual(db, agentId, now = Date.now()) {
+  return db.raw.transaction(
+    () => getOpenForAgent(db, agentId) ?? insert5(db, agentId, "manual", now)
+  )();
+}
+function recordSuccessfulUserTurn(db, agentId, now = Date.now()) {
+  return db.raw.transaction(() => {
+    const updated = db.raw.run(
+      `UPDATE agents SET review_turns_since_last = review_turns_since_last + 1
+       WHERE id = ? AND review_enabled = 1`,
+      [agentId]
+    );
+    if (Number(updated.changes) !== 1) return null;
+    const state3 = db.raw.query(
+      `SELECT review_turns_since_last, review_every_n_turns FROM agents WHERE id = ?`
+    ).get(agentId);
+    if (!state3 || state3.review_turns_since_last < state3.review_every_n_turns) return null;
+    const open = getOpenForAgent(db, agentId);
+    if (open) return open;
+    const review = insert5(db, agentId, "cadence", now);
+    db.raw.run("UPDATE agents SET review_turns_since_last = 0 WHERE id = ?", [agentId]);
+    return review;
+  })();
+}
+function listClaimable(db, now = Date.now()) {
+  return db.raw.query(
+    `SELECT * FROM agent_reviews
+       WHERE (status IN ('pending','retrying') AND next_attempt_at <= ?)
+          OR (status = 'running' AND lease_expires_at <= ?)
+       ORDER BY created_at ASC`
+  ).all(now, now).map(toReview);
+}
+function claim(db, id, options = {}) {
+  const now = options.now ?? Date.now();
+  const leaseExpiresAt = now + (options.leaseMs ?? 5 * 6e4);
+  return db.raw.transaction(() => {
+    const result = db.raw.run(
+      `UPDATE agent_reviews SET status = 'running', attempt_count = attempt_count + 1,
+       lease_expires_at = ?, started_at = ?, finished_at = NULL, updated_at = ?
+       WHERE id = ? AND (
+         (status IN ('pending','retrying') AND next_attempt_at <= ?)
+         OR (status = 'running' AND lease_expires_at <= ?)
+       )`,
+      [leaseExpiresAt, now, now, id, now, now]
+    );
+    return Number(result.changes) === 1 ? get8(db, id) : null;
+  })();
+}
+function defer(db, id, nextAttemptAt = Date.now() + 1e3) {
+  db.raw.run(
+    `UPDATE agent_reviews SET status = 'pending',
+     attempt_count = CASE WHEN attempt_count > 0 THEN attempt_count - 1 ELSE 0 END,
+     next_attempt_at = ?, lease_expires_at = NULL, started_at = NULL, updated_at = ?
+     WHERE id = ? AND status = 'running'`,
+    [nextAttemptAt, Date.now(), id]
+  );
+}
+function getLatestCompleted(db, agentId) {
+  const row = db.raw.query(
+    `SELECT * FROM agent_reviews WHERE agent_id = ? AND status = 'completed'
+       ORDER BY finished_at DESC LIMIT 1`
+  ).get(agentId);
+  return row ? toReview(row) : null;
+}
+function setSource(db, id, source) {
+  db.raw.run(
+    `UPDATE agent_reviews SET source_session_id = ?, source_start_ordinal = ?,
+     source_end_ordinal = ?, input_characters = ?, turns_reviewed = ?, updated_at = ?
+     WHERE id = ? AND status = 'running'`,
+    [
+      source.sessionId,
+      source.startOrdinal,
+      source.endOrdinal,
+      source.inputCharacters,
+      source.turnsReviewed,
+      Date.now(),
+      id
+    ]
+  );
+}
+function complete(db, id, proposalCount, now = Date.now()) {
+  db.raw.run(
+    `UPDATE agent_reviews SET status = 'completed', proposal_count = ?, lease_expires_at = NULL,
+     finished_at = ?, last_error = NULL, updated_at = ? WHERE id = ? AND status = 'running'`,
+    [proposalCount, now, now, id]
+  );
+}
+function cancel(db, id, reason, now = Date.now()) {
+  db.raw.run(
+    `UPDATE agent_reviews SET status = 'cancelled', lease_expires_at = NULL, finished_at = ?,
+     last_error = ?, updated_at = ? WHERE id = ? AND status IN ('pending','running','retrying')`,
+    [now, reason.slice(0, 2e3), now, id]
+  );
+}
+function fail(db, id, error2, options = {}) {
+  const now = options.now ?? Date.now();
+  const current = get8(db, id);
+  if (current?.status !== "running") return;
+  const terminal = current.attemptCount >= (options.maxAttempts ?? 3);
+  const retryDelay = (options.retryDelayMs ?? 5e3) * 2 ** Math.max(0, current.attemptCount - 1);
+  db.raw.run(
+    `UPDATE agent_reviews SET status = ?, next_attempt_at = ?, lease_expires_at = NULL,
+     finished_at = ?, last_error = ?, updated_at = ? WHERE id = ? AND status = 'running'`,
+    [
+      terminal ? "failed" : "retrying",
+      terminal ? now : now + retryDelay,
+      terminal ? now : null,
+      error2.slice(0, 2e3),
+      now,
+      id
+    ]
+  );
+}
+function listForAgent2(db, agentId, limit = 50) {
+  return db.raw.query(
+    "SELECT * FROM agent_reviews WHERE agent_id = ? ORDER BY created_at DESC LIMIT ?"
+  ).all(agentId, limit).map(toReview);
+}
+
 // ../daemon/src/core/repos/communicationApprovals.ts
 var communicationApprovals_exports = {};
 __export(communicationApprovals_exports, {
@@ -21238,13 +21742,13 @@ __export(communicationApprovals_exports, {
   decide: () => decide,
   expirePending: () => expirePending,
   finishDelivery: () => finishDelivery,
-  get: () => get7,
+  get: () => get9,
   getByAttempt: () => getByAttempt,
   grantSchedulerTrigger: () => grantSchedulerTrigger,
   list: () => list6,
   request: () => request
 });
-import { createHash, randomUUID as randomUUID4 } from "crypto";
+import { createHash, randomUUID as randomUUID6 } from "crypto";
 var DEFAULT_TTL_MS = 24 * 60 * 60 * 1e3;
 function endpoint(kind, id, teamId) {
   if (kind === "agent") return { kind, id };
@@ -21299,7 +21803,7 @@ function appendEvent(db, approvalId, name, actor, detail3 = null, now = Date.now
     `INSERT INTO communication_approval_events
        (id, approval_id, event, actor, detail, created_at)
      VALUES (?, ?, ?, ?, ?, ?)`,
-    [randomUUID4(), approvalId, name, actor, detail3, now]
+    [randomUUID6(), approvalId, name, actor, detail3, now]
   );
 }
 function teams(db, input) {
@@ -21325,7 +21829,7 @@ function request(db, input, operation, authorization, payloadKind, payload, opti
         expireOne(db, existing, now);
         return toApproval(raw(db, existing.id));
       }
-      const id = randomUUID4();
+      const id = randomUUID6();
       const [sourceGroup, targetGroup] = teams(db, input);
       const expiresAt = now + (options.ttlMs ?? DEFAULT_TTL_MS);
       db.raw.run(
@@ -21393,7 +21897,7 @@ function expirePending(db, now = Date.now()) {
     return rows.length;
   })();
 }
-function get7(db, id, includePayload = false) {
+function get9(db, id, includePayload = false) {
   expirePending(db);
   const row = raw(db, id);
   if (!row) return null;
@@ -22019,6 +22523,13 @@ var SERVICES = [
         label: "Extra environment allowlist",
         placeholder: "MY_SAFE_VARIABLE,ANOTHER_SAFE_VARIABLE",
         description: "Optional comma-separated variable names copied into the container. Provider credentials remain excluded unless explicitly named."
+      },
+      {
+        envVar: "BAZILION_AGENT_LOOP_MAX_HOPS",
+        kind: "config",
+        label: "Agent-message hop limit",
+        placeholder: "8",
+        description: "Maximum causal hops in an agent-to-agent message chain before the daemon stops it. Default 8."
       }
     ]
   },
@@ -22168,16 +22679,16 @@ function openConfig(db) {
 // ../daemon/src/core/repos/mcpServers.ts
 var mcpServers_exports = {};
 __export(mcpServers_exports, {
-  get: () => get8,
+  get: () => get10,
   getByName: () => getByName,
-  insert: () => insert4,
+  insert: () => insert6,
   list: () => list7,
   listEnabled: () => listEnabled2,
   remove: () => remove5,
   setEnabled: () => setEnabled2,
   update: () => update2
 });
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 function toServer(r) {
   let args = [];
   try {
@@ -22198,8 +22709,8 @@ function toServer(r) {
     updatedAt: r.updated_at
   };
 }
-function insert4(db, input) {
-  const id = randomUUID5();
+function insert6(db, input) {
+  const id = randomUUID7();
   const now = Date.now();
   db.raw.run(
     `INSERT INTO mcp_servers (id, name, transport, command, args, url, has_auth, enabled, created_at, updated_at)
@@ -22217,11 +22728,11 @@ function insert4(db, input) {
       now
     ]
   );
-  const row = get8(db, id);
+  const row = get10(db, id);
   if (!row) throw new Error("mcp server insert failed");
   return row;
 }
-function get8(db, id) {
+function get10(db, id) {
   const row = db.raw.query("SELECT * FROM mcp_servers WHERE id = ?").get(id);
   return row ? toServer(row) : null;
 }
@@ -22236,7 +22747,7 @@ function listEnabled2(db) {
   return db.raw.query("SELECT * FROM mcp_servers WHERE enabled = 1 ORDER BY created_at ASC").all().map(toServer);
 }
 function update2(db, id, input) {
-  const existing = get8(db, id);
+  const existing = get10(db, id);
   if (!existing) return null;
   const next = {
     name: input.name ?? existing.name,
@@ -22263,7 +22774,7 @@ function update2(db, id, input) {
       id
     ]
   );
-  return get8(db, id);
+  return get10(db, id);
 }
 function setEnabled2(db, id, enabled) {
   db.raw.run("UPDATE mcp_servers SET enabled = ?, updated_at = ? WHERE id = ?", [
@@ -22281,7 +22792,7 @@ var messages_exports = {};
 __export(messages_exports, {
   drainUnreadForAgent: () => drainUnreadForAgent,
   findReplies: () => findReplies,
-  get: () => get9,
+  get: () => get11,
   listInbox: () => listInbox,
   listInboxForOperator: () => listInboxForOperator,
   listRecipientsWithUnread: () => listRecipientsWithUnread,
@@ -22291,37 +22802,44 @@ __export(messages_exports, {
   markRead: () => markRead,
   send: () => send
 });
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 function toMessage(r) {
   return {
     id: r.id,
     fromAgentId: r.from_agent_id,
     toAgentId: r.to_agent_id,
     replyTo: r.reply_to,
+    causalChainId: r.causal_chain_id,
+    causalHop: r.causal_hop,
     payload: r.payload,
     createdAt: r.created_at,
     readAt: r.read_at
   };
 }
 function send(db, input) {
-  const id = randomUUID6();
+  const id = randomUUID8();
   const now = Date.now();
+  const causalChainId = input.causalChainId ?? id;
+  const causalHop = input.causalHop ?? 0;
   db.raw.run(
-    `INSERT INTO messages (id, from_agent_id, to_agent_id, reply_to, payload, created_at, read_at)
-     VALUES (?, ?, ?, ?, ?, ?, NULL)`,
-    [id, input.from, input.to, input.replyTo ?? null, input.payload, now]
+    `INSERT INTO messages
+       (id, from_agent_id, to_agent_id, reply_to, causal_chain_id, causal_hop, payload, created_at, read_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, NULL)`,
+    [id, input.from, input.to, input.replyTo ?? null, causalChainId, causalHop, input.payload, now]
   );
   return {
     id,
     fromAgentId: input.from,
     toAgentId: input.to,
     replyTo: input.replyTo ?? null,
+    causalChainId,
+    causalHop,
     payload: input.payload,
     createdAt: now,
     readAt: null
   };
 }
-function get9(db, id) {
+function get11(db, id) {
   const row = db.raw.query("SELECT * FROM messages WHERE id = ?").get(id);
   return row ? toMessage(row) : null;
 }
@@ -22481,7 +22999,7 @@ function openSecrets(db, password) {
 // ../daemon/src/core/repos/skillMeta.ts
 var skillMeta_exports = {};
 __export(skillMeta_exports, {
-  get: () => get10,
+  get: () => get12,
   listAll: () => listAll2,
   remove: () => remove6,
   upsert: () => upsert
@@ -22493,7 +23011,7 @@ function toMeta(r) {
     importedAt: r.imported_at
   };
 }
-function get10(db, name) {
+function get12(db, name) {
   const row = db.raw.query("SELECT * FROM skill_meta WHERE name = ?").get(name);
   return row ? toMeta(row) : null;
 }
@@ -22501,7 +23019,7 @@ function listAll2(db) {
   return db.raw.query("SELECT * FROM skill_meta ORDER BY name ASC").all().map(toMeta);
 }
 function upsert(db, input) {
-  const existing = get10(db, input.name);
+  const existing = get12(db, input.name);
   const source = input.source !== void 0 ? input.source : existing?.source ?? null;
   const importedAt = input.importedAt !== void 0 ? input.importedAt : existing?.importedAt ?? null;
   db.raw.run(
@@ -22521,7 +23039,7 @@ var telegram_acl_exports = {};
 __export(telegram_acl_exports, {
   add: () => add,
   count: () => count,
-  get: () => get11,
+  get: () => get13,
   isAllowed: () => isAllowed,
   list: () => list8,
   ownerCount: () => ownerCount,
@@ -22539,12 +23057,12 @@ function toUser(r) {
 function list8(db) {
   return db.raw.query("SELECT * FROM telegram_allowed_users ORDER BY added_at ASC").all().map(toUser);
 }
-function get11(db, userId) {
+function get13(db, userId) {
   const row = db.raw.query("SELECT * FROM telegram_allowed_users WHERE user_id = ?").get(userId);
   return row ? toUser(row) : null;
 }
 function isAllowed(db, userId) {
-  return get11(db, userId) !== null;
+  return get13(db, userId) !== null;
 }
 function count(db) {
   return db.raw.query("SELECT COUNT(*) as c FROM telegram_allowed_users").get()?.c ?? 0;
@@ -22563,10 +23081,10 @@ function add(db, input) {
      ON CONFLICT(user_id) DO UPDATE SET username = excluded.username, label = excluded.label`,
     [input.userId, input.username ?? null, input.label ?? null, role, now]
   );
-  return get11(db, input.userId);
+  return get13(db, input.userId);
 }
 function remove7(db, userId) {
-  const u = get11(db, userId);
+  const u = get13(db, userId);
   if (!u) return false;
   if (u.role === "owner" && ownerCount(db) <= 1) return false;
   db.raw.run("DELETE FROM telegram_allowed_users WHERE user_id = ?", [userId]);
@@ -22578,17 +23096,17 @@ var triggerDispatches_exports = {};
 __export(triggerDispatches_exports, {
   cancelPendingForTrigger: () => cancelPendingForTrigger,
   cancelRunning: () => cancelRunning,
-  claim: () => claim,
-  defer: () => defer,
-  fail: () => fail,
-  get: () => get12,
+  claim: () => claim2,
+  defer: () => defer2,
+  fail: () => fail2,
+  get: () => get14,
   hasOpenForTrigger: () => hasOpenForTrigger,
-  listClaimable: () => listClaimable,
+  listClaimable: () => listClaimable2,
   listForTrigger: () => listForTrigger,
   materialize: () => materialize,
   succeed: () => succeed
 });
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 function toDispatch(row) {
   return {
     id: row.id,
@@ -22614,7 +23132,7 @@ function materialize(db, input) {
         lease_expires_at, started_at, finished_at, last_error, created_at, updated_at)
      VALUES (?, ?, ?, ?, 'pending', 0, ?, NULL, NULL, NULL, NULL, ?, ?)
      ON CONFLICT(trigger_id, scheduled_at) DO NOTHING`,
-    [randomUUID7(), input.triggerId, input.agentId, input.scheduledAt, now, now, now]
+    [randomUUID9(), input.triggerId, input.agentId, input.scheduledAt, now, now, now]
   );
   const row = db.raw.query(
     "SELECT * FROM trigger_dispatches WHERE trigger_id = ? AND scheduled_at = ?"
@@ -22622,11 +23140,11 @@ function materialize(db, input) {
   if (!row) throw new Error("trigger dispatch materialization failed");
   return toDispatch(row);
 }
-function get12(db, id) {
+function get14(db, id) {
   const row = db.raw.query("SELECT * FROM trigger_dispatches WHERE id = ?").get(id);
   return row ? toDispatch(row) : null;
 }
-function listClaimable(db, now = Date.now()) {
+function listClaimable2(db, now = Date.now()) {
   return db.raw.query(
     `SELECT * FROM trigger_dispatches
        WHERE (status IN ('pending','retrying') AND next_attempt_at <= ?)
@@ -22640,7 +23158,7 @@ function hasOpenForTrigger(db, triggerId) {
          WHERE trigger_id = ? AND status IN ('pending','running','retrying') LIMIT 1`
   ).get(triggerId) !== null;
 }
-function claim(db, id, options = {}) {
+function claim2(db, id, options = {}) {
   const now = options.now ?? Date.now();
   const leaseExpiresAt = now + (options.leaseMs ?? 5 * 6e4);
   return db.raw.transaction(() => {
@@ -22666,7 +23184,7 @@ function succeed(db, id, now = Date.now()) {
     [now, now, id]
   );
 }
-function defer(db, id, nextAttemptAt = Date.now() + 1e3) {
+function defer2(db, id, nextAttemptAt = Date.now() + 1e3) {
   db.raw.run(
     `UPDATE trigger_dispatches SET status = 'pending',
      attempt_count = CASE WHEN attempt_count > 0 THEN attempt_count - 1 ELSE 0 END,
@@ -22682,7 +23200,7 @@ function cancelRunning(db, id, reason, now = Date.now()) {
     [now, reason.slice(0, 2e3), now, id]
   );
 }
-function fail(db, id, error2, options = {}) {
+function fail2(db, id, error2, options = {}) {
   const now = options.now ?? Date.now();
   const maxAttempts = options.maxAttempts ?? 3;
   const retryDelayMs = options.retryDelayMs ?? 5e3;
@@ -22720,15 +23238,15 @@ function listForTrigger(db, triggerId, limit = 20) {
 // ../daemon/src/core/repos/triggers.ts
 var triggers_exports = {};
 __export(triggers_exports, {
-  get: () => get13,
-  insert: () => insert5,
+  get: () => get15,
+  insert: () => insert7,
   listEnabled: () => listEnabled3,
-  listForAgent: () => listForAgent,
+  listForAgent: () => listForAgent3,
   markFired: () => markFired,
   remove: () => remove8,
   setEnabled: () => setEnabled3
 });
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 function toTrigger(r) {
   return {
     id: r.id,
@@ -22742,8 +23260,8 @@ function toTrigger(r) {
     createdAt: r.created_at
   };
 }
-function insert5(db, input) {
-  const id = randomUUID8();
+function insert7(db, input) {
+  const id = randomUUID10();
   const now = Date.now();
   const enabled = input.enabled === false ? 0 : 1;
   db.raw.run(
@@ -22764,11 +23282,11 @@ function insert5(db, input) {
     createdAt: now
   };
 }
-function get13(db, id) {
+function get15(db, id) {
   const row = db.raw.query("SELECT * FROM agent_triggers WHERE id = ?").get(id);
   return row ? toTrigger(row) : null;
 }
-function listForAgent(db, agentId) {
+function listForAgent3(db, agentId) {
   return db.raw.query(
     "SELECT * FROM agent_triggers WHERE agent_id = ? ORDER BY created_at ASC"
   ).all(agentId).map(toTrigger);
@@ -22799,13 +23317,13 @@ var webTokens_exports = {};
 __export(webTokens_exports, {
   create: () => create,
   findActiveByToken: () => findActiveByToken,
-  get: () => get14,
+  get: () => get16,
   hashToken: () => hashToken,
   list: () => list9,
   markUsed: () => markUsed,
-  revoke: () => revoke
+  revoke: () => revoke2
 });
-import { createHash as createHash2, randomBytes as randomBytes2, randomUUID as randomUUID9 } from "crypto";
+import { createHash as createHash2, randomBytes as randomBytes2, randomUUID as randomUUID11 } from "crypto";
 function toToken(r) {
   return {
     id: r.id,
@@ -22819,7 +23337,7 @@ function hashToken(token) {
   return createHash2("sha256").update(token).digest("hex");
 }
 function create(db, label) {
-  const id = randomUUID9();
+  const id = randomUUID11();
   const token = randomBytes2(24).toString("hex");
   const tokenHash = hashToken(token);
   const now = Date.now();
@@ -22837,7 +23355,7 @@ function list9(db, opts) {
   const sql = opts?.includeRevoked ? "SELECT * FROM web_tokens ORDER BY created_at ASC" : "SELECT * FROM web_tokens WHERE revoked_at IS NULL ORDER BY created_at ASC";
   return db.raw.query(sql).all().map(toToken);
 }
-function get14(db, id) {
+function get16(db, id) {
   const row = db.raw.query("SELECT * FROM web_tokens WHERE id = ?").get(id);
   return row ? toToken(row) : null;
 }
@@ -22851,7 +23369,7 @@ function findActiveByToken(db, token) {
 function markUsed(db, id, when = Date.now()) {
   db.raw.run("UPDATE web_tokens SET last_used_at = ? WHERE id = ?", [when, id]);
 }
-function revoke(db, id, when = Date.now()) {
+function revoke2(db, id, when = Date.now()) {
   const res = db.raw.run(
     "UPDATE web_tokens SET revoked_at = ? WHERE id = ? AND revoked_at IS NULL",
     [when, id]
@@ -23119,7 +23637,7 @@ function resolveAgentSkills(db, paths, agentId) {
 }
 
 // ../daemon/src/core/team/delete.ts
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID12 } from "crypto";
 import { existsSync as existsSync9, renameSync as renameSync2, rmSync as rmSync6 } from "fs";
 function deleteTeam(db, paths, id, expectedTeamPolicyRevision) {
   const g2 = get3(db, id, paths);
@@ -23138,7 +23656,7 @@ function deleteTeam(db, paths, id, expectedTeamPolicyRevision) {
       `cannot delete team "${id}": ${members.length} agent(s) still belong to it: ${names}. Move or delete them first.`
     );
   }
-  const stagedPath = `${g2.path}.deleting-${randomUUID10()}`;
+  const stagedPath = `${g2.path}.deleting-${randomUUID12()}`;
   const hadSlot = existsSync9(g2.path);
   if (hadSlot) renameSync2(g2.path, stagedPath);
   try {
@@ -23162,7 +23680,7 @@ function deleteTeam(db, paths, id, expectedTeamPolicyRevision) {
 }
 
 // ../daemon/src/core/team-policy/adopt.ts
-import { randomUUID as randomUUID11 } from "crypto";
+import { randomUUID as randomUUID13 } from "crypto";
 function previewTeamPolicyAdoption(db, teamId, input) {
   return resolveAdoptionPlan(db, teamId, { ...input, previewEdges: [] }).resolved;
 }
@@ -23174,7 +23692,7 @@ function resolveAdoptionPlan(db, teamId, input) {
       `team_revision_conflict: expected ${input.teamExpectedRevision}, current ${teamPolicy.revision}`
     );
   }
-  const template = get6(db, input.templateId);
+  const template = get7(db, input.templateId);
   if (!template) throw new Error(`team template not found: ${input.templateId}`);
   if (template.deletedAt !== null) throw new Error(`template_deleted: ${input.templateId}`);
   if (template.currentRevision !== input.templateExpectedRevision) {
@@ -23235,7 +23753,7 @@ function adoptTeamTemplate(db, teamId, input) {
     );
     db.raw.run("DELETE FROM template_instantiations WHERE team_id = ?", [teamId]);
     db.raw.run("DELETE FROM team_policy_edges WHERE team_id = ?", [teamId]);
-    const instantiationId = randomUUID11();
+    const instantiationId = randomUUID13();
     db.raw.run(
       `INSERT INTO template_instantiations
          (id, team_id, template_id, template_revision, created_at)
@@ -23333,7 +23851,7 @@ function edgeKey(edge) {
 }
 
 // ../daemon/src/core/team-policy/authorization.ts
-import { createHash as createHash3, randomUUID as randomUUID12 } from "crypto";
+import { createHash as createHash3, randomUUID as randomUUID14 } from "crypto";
 function denied(channel, code, reason) {
   return {
     decision: "deny",
@@ -23513,7 +24031,7 @@ function recordDenial(db, input, operation, result) {
   const sourceGroup = agentGroup(input.source) ?? agentGroup(input.target) ?? ("teamId" in input.source ? input.source.teamId : null);
   const targetGroup = agentGroup(input.target) ?? agentGroup(input.source) ?? ("teamId" in input.target ? input.target.teamId : null);
   const values = [
-    randomUUID12(),
+    randomUUID14(),
     input.attemptKind,
     input.attemptId,
     operation,
@@ -23563,7 +24081,7 @@ function recordDenial(db, input, operation, result) {
 }
 
 // ../daemon/src/core/team-policy/source.ts
-import { randomUUID as randomUUID13 } from "crypto";
+import { randomUUID as randomUUID15 } from "crypto";
 function diffTeamPolicy(db, teamId) {
   const detail3 = detail(db, teamId);
   if (!detail3) throw new Error(`team_policy_missing: ${teamId}`);
@@ -23625,13 +24143,13 @@ function saveTeamPolicyAsTemplate(db, paths, teamId, input) {
         `team_revision_conflict: expected ${input.expectedRevision}, current ${teamPolicy.revision}`
       );
     }
-    if (get6(db, input.id)) {
+    if (get7(db, input.id)) {
       throw new Error(`team template already exists: ${input.id}`);
     }
     const team = get3(db, teamId, paths);
     if (!team) throw new Error(`team not found: ${teamId}`);
     const members = list(db, { includeArchived: true }).filter((agent) => agent.teamId === teamId);
-    const slotByAgent = new Map(members.map((agent) => [agent.id, randomUUID13()]));
+    const slotByAgent = new Map(members.map((agent) => [agent.id, randomUUID15()]));
     const stateByAgent = new Map(
       agentState(db, teamId).map((state3) => [state3.agentId, state3])
     );
@@ -23673,7 +24191,7 @@ function updateTeamPolicySource(db, teamId, input) {
     if (!teamPolicy.baselineInstantiationId) throw new Error("baseline_missing: Team has no source");
     const baseline = instantiations(db, teamId).find((item) => item.id === teamPolicy.baselineInstantiationId);
     if (!baseline) throw new Error("baseline_missing: retained baseline does not exist");
-    const source = get6(db, baseline.templateId);
+    const source = get7(db, baseline.templateId);
     if (!source) throw new Error(`team template not found: ${baseline.templateId}`);
     if (source.deletedAt !== null) throw new Error(`template_deleted: ${source.id}`);
     if (source.currentRevision !== baseline.templateRevision) {
@@ -23707,7 +24225,7 @@ function updateTeamPolicySource(db, teamId, input) {
       baselineBindings.map((binding) => [binding.agentId, binding.sourceSlotId])
     );
     for (const id of selectedIds) {
-      if (!slotByAgent.has(id)) slotByAgent.set(id, randomUUID13());
+      if (!slotByAgent.has(id)) slotByAgent.set(id, randomUUID15());
     }
     const previousSlotById = new Map(previous.slots.map((slot) => [slot.slotId, slot]));
     const selectedMembers = [...selectedIds].map((id) => {
@@ -23775,7 +24293,7 @@ function pruneEmptyNonbaselineInstantiation(db, instantiationId, baselineId) {
 }
 
 // ../daemon/src/core/team-policy/spawn.ts
-import { randomUUID as randomUUID14 } from "crypto";
+import { randomUUID as randomUUID16 } from "crypto";
 import { readdirSync as readdirSync4, rmSync as rmSync8 } from "fs";
 
 // ../daemon/src/core/team-policy/rm-with-retry.ts
@@ -23800,7 +24318,7 @@ async function rmWithRetry(target, opts = {}) {
 
 // ../daemon/src/core/team-policy/spawn.ts
 function previewTeamTemplateSpawn(db, paths, input) {
-  const source = get6(db, input.templateId);
+  const source = get7(db, input.templateId);
   if (!source) throw new Error(`team template not found: ${input.templateId}`);
   if (source.deletedAt !== null) throw new Error(`template_deleted: ${input.templateId}`);
   if (source.currentRevision !== input.templateExpectedRevision) {
@@ -23866,7 +24384,7 @@ var SpawnTeamTemplateError = class extends Error {
   }
 };
 async function spawnTeamTemplate(db, paths, input) {
-  const source = get6(db, input.templateId);
+  const source = get7(db, input.templateId);
   if (!source) throw new Error(`team template not found: ${input.templateId}`);
   if (source.deletedAt !== null) throw new Error(`template_deleted: ${input.templateId}`);
   if (source.currentRevision !== input.templateExpectedRevision) {
@@ -23878,7 +24396,7 @@ async function spawnTeamTemplate(db, paths, input) {
   if (!snapshot)
     throw new Error(`template_snapshot_missing: ${source.id}@${source.currentRevision}`);
   for (const slot of snapshot.slots) {
-    if (!get4(db, slot.profileId)) {
+    if (!get5(db, slot.profileId)) {
       throw new Error(`profile not found: ${slot.profileId}`);
     }
   }
@@ -23891,7 +24409,7 @@ async function spawnTeamTemplate(db, paths, input) {
   const created = [];
   try {
     inTx(db, () => {
-      const transactionalSource = get6(db, input.templateId);
+      const transactionalSource = get7(db, input.templateId);
       if (!transactionalSource || transactionalSource.deletedAt !== null) {
         throw new Error(`template_deleted: ${input.templateId}`);
       }
@@ -23942,7 +24460,7 @@ async function spawnTeamTemplate(db, paths, input) {
           })
         );
       }
-      const instantiationId = randomUUID14();
+      const instantiationId = randomUUID16();
       db.raw.run(
         `INSERT INTO template_instantiations
            (id, team_id, template_id, template_revision, created_at)
@@ -24113,8 +24631,111 @@ async function runAgentLifecycleMutation(agentId, mutation) {
   }
 }
 
+// ../daemon/src/lib/agent-loop-guard.ts
+import { randomUUID as randomUUID17 } from "crypto";
+var DEFAULT_MAX_HOPS = 8;
+function toEvent(row) {
+  return {
+    id: row.id,
+    causalChainId: row.causal_chain_id,
+    parentMessageId: row.parent_message_id,
+    fromAgentId: row.from_agent_id,
+    toAgentId: row.to_agent_id,
+    sourceTeamId: row.source_team_id,
+    targetTeamId: row.target_team_id,
+    attemptedHop: row.attempted_hop,
+    maxHops: row.max_hops,
+    reason: row.reason,
+    origin: row.origin,
+    createdAt: row.created_at
+  };
+}
+function agentLoopMaxHops(db, env = process.env) {
+  const raw2 = env.BAZILION_AGENT_LOOP_MAX_HOPS ?? (db ? openConfig(db).get("BAZILION_AGENT_LOOP_MAX_HOPS") : void 0);
+  const parsed = Number(raw2);
+  return Number.isSafeInteger(parsed) && parsed >= 0 ? parsed : DEFAULT_MAX_HOPS;
+}
+var AgentLoopLimitError = class extends Error {
+  constructor(event2) {
+    super(
+      `agent message chain ${event2.causalChainId} stopped at hop ${event2.attemptedHop} (limit ${event2.maxHops})`
+    );
+    this.event = event2;
+    this.name = "AgentLoopLimitError";
+  }
+  event;
+};
+function resolveMessageCausality(db, input) {
+  const parentMessageId = input.replyTo ?? input.causalParentMessageId ?? null;
+  if (!parentMessageId) return { parentMessageId: null };
+  const parent = messages_exports.get(db, parentMessageId);
+  if (!parent) return { parentMessageId: null };
+  return {
+    causalChainId: parent.causalChainId,
+    causalHop: parent.causalHop + 1,
+    parentMessageId: parent.id
+  };
+}
+function enforceMessageCausality(db, input) {
+  const attemptedHop = input.causality.causalHop ?? 0;
+  const maxHops = agentLoopMaxHops(db);
+  if (attemptedHop <= maxHops) return null;
+  const source = agents_exports.get(db, input.from);
+  const target = agents_exports.get(db, input.to);
+  if (!source || !target) return null;
+  const event2 = {
+    id: randomUUID17(),
+    causalChainId: input.causality.causalChainId ?? input.causality.parentMessageId ?? randomUUID17(),
+    parentMessageId: input.causality.parentMessageId,
+    fromAgentId: input.from,
+    toAgentId: input.to,
+    sourceTeamId: source.teamId,
+    targetTeamId: target.teamId,
+    attemptedHop,
+    maxHops,
+    reason: "causal_hop_limit_exceeded",
+    origin: input.origin,
+    createdAt: Date.now()
+  };
+  db.raw.run(
+    `INSERT INTO agent_loop_break_events
+       (id, causal_chain_id, parent_message_id, from_agent_id, to_agent_id,
+        source_team_id, target_team_id, attempted_hop, max_hops, reason, origin, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+    [
+      event2.id,
+      event2.causalChainId,
+      event2.parentMessageId,
+      event2.fromAgentId,
+      event2.toAgentId,
+      event2.sourceTeamId,
+      event2.targetTeamId,
+      event2.attemptedHop,
+      event2.maxHops,
+      event2.reason,
+      event2.origin,
+      event2.createdAt
+    ]
+  );
+  return event2;
+}
+function listAgentLoopBreaks(db, agentId, limit = 50) {
+  return db.raw.query(
+    `SELECT * FROM agent_loop_break_events
+       WHERE from_agent_id = ? OR to_agent_id = ?
+       ORDER BY created_at DESC, id DESC LIMIT ?`
+  ).all(agentId, agentId, Math.max(1, Math.min(limit, 100))).map(toEvent);
+}
+function selectCausalParent(messages) {
+  let selected;
+  for (const message of messages) {
+    if (!selected || message.causalHop > selected.causalHop) selected = message;
+  }
+  return selected?.id ?? null;
+}
+
 // ../daemon/src/lib/agent-turn.ts
-import { randomUUID as randomUUID18 } from "crypto";
+import { randomUUID as randomUUID21 } from "crypto";
 
 // ../daemon/src/runtime/auth/openai-codex.ts
 import { loginOpenAICodex, refreshOpenAICodexToken } from "@earendil-works/pi-ai/oauth";
@@ -24896,9 +25517,9 @@ function isRetryableError(err) {
   return false;
 }
 function sleepWithAbort(ms, signal) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve7, reject2) => {
     if (signal?.aborted) {
-      reject(new Error("aborted"));
+      reject2(new Error("aborted"));
       return;
     }
     const t = setTimeout(() => {
@@ -24907,7 +25528,7 @@ function sleepWithAbort(ms, signal) {
     }, ms);
     const onAbort = () => {
       clearTimeout(t);
-      reject(new Error("aborted"));
+      reject2(new Error("aborted"));
     };
     signal?.addEventListener("abort", onAbort, { once: true });
   });
@@ -25418,7 +26039,7 @@ var PROVIDERS = {
 function createProviderRegistry(config2, opts = {}) {
   const cache = /* @__PURE__ */ new Map();
   const enabledSet = opts.enabledSet;
-  function get15(name) {
+  function get17(name) {
     const cached2 = cache.get(name);
     if (cached2) return cached2;
     const entry = PROVIDERS[name];
@@ -25450,7 +26071,7 @@ function createProviderRegistry(config2, opts = {}) {
       }
       const providerName = modelString.slice(0, idx);
       const model = modelString.slice(idx + 1);
-      return { provider: get15(providerName), model };
+      return { provider: get17(providerName), model };
     },
     list() {
       return Object.entries(PROVIDERS).filter(([name, entry]) => {
@@ -25598,11 +26219,34 @@ ${agent.team.userMd.trim()}`
 This team's USER.md is empty. As you learn STABLE facts about the human (preferences, role, working hours, how they like to be addressed), populate it via \`user_md_get\` then \`user_md_write\` (always get first \u2014 you need the etag). Reserve this for things you're confident are durable \u2014 project knowledge belongs in \`memory_write\`, personal notes about yourself in \`home_write\` on IDENTITY.md. **Do NOT send peer messages announcing USER.md changes \u2014 every agent in the team sees the new content in their system prompt on their next turn automatically.**`
     );
   }
+  const reviewedLessons = boundReviewedLessons(agent.privateLessons);
+  if (reviewedLessons.length > 0) {
+    parts.push(
+      `# Reviewed lessons
+
+These private lessons were explicitly approved by the human for your behavior. Follow them when relevant; current user instructions and higher-priority policy still win.
+
+${reviewedLessons.map((lesson) => `- ${lesson}`).join("\n")}`
+    );
+  }
   parts.push(
     "# Memory\n\nYou share a persistent memory backend with every other agent in this team. Use `memory_write` to remember things across sessions, and `memory_search` / `memory_read` / `memory_list` to recall them. This memory is for project knowledge \u2014 codebase notes, decisions, things the user told you about the work. For personal notes about yourself (preferences, persona quirks), use `home_write` on IDENTITY.md instead. Always check memory at the start of a session: another agent in the team may have already learned something useful. **Do NOT send peer messages announcing memory writes \u2014 every agent has access to the same store via `memory_search` and will find your note when they need it.**"
   );
   return parts.join("\n\n---\n\n");
 }
+function boundReviewedLessons(lessons, maxCharacters = 8e3) {
+  const selected = [];
+  let used = 0;
+  for (const raw2 of lessons) {
+    const lesson = raw2.trim();
+    if (!lesson) continue;
+    const remaining = maxCharacters - used;
+    if (remaining <= 0) break;
+    selected.push(lesson.slice(0, remaining));
+    used += Math.min(lesson.length, remaining);
+  }
+  return selected;
+}
 
 // ../daemon/src/runtime/shell/tooling.ts
 import { existsSync as existsSync12, lstatSync as lstatSync2, realpathSync as realpathSync2 } from "fs";
@@ -25993,7 +26637,7 @@ function createApprovalGatedBashTool(base, host2) {
 
 // ../daemon/src/runtime/shell/docker.ts
 import { spawn } from "child_process";
-import { randomUUID as randomUUID15 } from "crypto";
+import { randomUUID as randomUUID18 } from "crypto";
 import { closeSync as closeSync2, constants as constants2, mkdtempSync as mkdtempSync2, openSync as openSync2, rmSync as rmSync11, writeFileSync as writeFileSync8 } from "fs";
 import { access, realpath, stat } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
@@ -26144,7 +26788,7 @@ function createDockerBashOperations(options) {
       const dockerClientEnv = await resolveLocalDockerClientEnv(dockerPath, hostEnv);
       const resolvedImage = await inspectSandboxImage(dockerPath, image, dockerClientEnv);
       if (signal?.aborted) throw new Error("aborted");
-      const containerName = `bazilion-bash-${process.pid}-${randomUUID15().replaceAll("-", "")}`;
+      const containerName = `bazilion-bash-${process.pid}-${randomUUID18().replaceAll("-", "")}`;
       const spec = buildDockerRunSpec({
         image,
         env,
@@ -26175,7 +26819,7 @@ function executeDockerRun(spec, options) {
       )
     );
   }
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve7, reject2) => {
     const child = spawn(spec.executable, spec.args, {
       stdio: ["ignore", "pipe", "pipe", envFileFd ?? "ignore"],
       windowsHide: true,
@@ -26199,23 +26843,23 @@ function executeDockerRun(spec, options) {
       if (!termination && options.signal?.aborted) termination = "aborted";
       if (termination) {
         await removeContainer(spec.executable, spec.containerName, spec.processEnv);
-        reject(
+        reject2(
           termination === "aborted" ? new Error("aborted") : new Error(`timeout:${options.timeout}`)
         );
         return;
       }
       if (spawnError) {
-        reject(formatSpawnError(spec.executable, spawnError));
+        reject2(formatSpawnError(spec.executable, spawnError));
         return;
       }
       if (exitCode === 125) {
         await removeContainer(spec.executable, spec.containerName, spec.processEnv);
-        reject(formatDockerRunError(spec, stderr));
+        reject2(formatDockerRunError(spec, stderr));
         return;
       }
       if (exitCode === null) {
         await removeContainer(spec.executable, spec.containerName, spec.processEnv);
-        reject(new Error(`Docker sandbox CLI for container "${spec.containerName}" was killed`));
+        reject2(new Error(`Docker sandbox CLI for container "${spec.containerName}" was killed`));
         return;
       }
       resolve7({ exitCode });
@@ -26387,7 +27031,7 @@ async function inspectSandboxImage(dockerPath, image, processEnv) {
   return id;
 }
 function runDockerInspection(dockerPath, args, processEnv, subject) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve7, reject2) => {
     const child = spawn(dockerPath, args, {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: true,
@@ -26401,7 +27045,7 @@ function runDockerInspection(dockerPath, args, processEnv, subject) {
       settled = true;
       clearTimeout(timeoutHandle);
       if (error2) {
-        reject(error2);
+        reject2(error2);
         return;
       }
       resolve7(stdout.trim());
@@ -27918,7 +28562,8 @@ async function createBazilionSession(opts) {
     mcpTools,
     fileSink,
     bashApprovalHost,
-    refreshApiKey
+    refreshApiKey,
+    restricted
   } = opts;
   const { providerName, modelId } = splitModelString(agent.model);
   if (enabledProviders.size > 0 && !enabledProviders.has(providerName)) {
@@ -27950,9 +28595,9 @@ async function createBazilionSession(opts) {
   }
   const cwd = agent.team.path;
   if (!existsSync14(cwd)) mkdirSync6(cwd, { recursive: true });
-  const promptSkills = loadPromptSkills(paths.skillsDir, agent.skills);
+  const promptSkills = restricted ? [] : loadPromptSkills(paths.skillsDir, agent.skills);
   const uploadsDir = join19(agent.agent.dir, "uploads");
-  const shellTools = createSessionShellTools(cwd, env, {
+  const shellTools = restricted ? null : createSessionShellTools(cwd, env, {
     ...existsSync14(uploadsDir) ? { inputsDir: uploadsDir } : {},
     skillMounts: promptSkills.map((skill) => ({
       source: skill.hostDir,
@@ -27960,9 +28605,9 @@ async function createBazilionSession(opts) {
     })),
     approvalHost: bashApprovalHost
   });
-  const sessionDir = join19(paths.agentDir(agent.agent.id), "sessions");
+  const sessionDir = restricted?.sessionDir ?? join19(paths.agentDir(agent.agent.id), "sessions");
   mkdirSync6(sessionDir, { recursive: true });
-  const existing = findMostRecent(sessionDir);
+  const existing = restricted ? null : findMostRecent(sessionDir);
   const sessionManager = existing ? SessionManager.open(existing, sessionDir, cwd) : SessionManager.create(cwd, sessionDir);
   const settingsManager = SettingsManager.inMemory({
     compaction: { enabled: false },
@@ -27973,13 +28618,13 @@ async function createBazilionSession(opts) {
       provider: { maxRetryDelayMs: 8e3 }
     }
   });
-  const bazilionPrompt = buildSystemPrompt(agent, {
+  const bazilionPrompt = restricted?.systemPrompt ?? buildSystemPrompt(agent, {
     skills: promptSkills,
-    sandboxMode: shellTools.config.sandboxMode
+    sandboxMode: shellTools?.config.sandboxMode ?? "off"
   });
   const resourceLoader = createBazilionResourceLoader(bazilionPrompt);
   await resourceLoader.reload();
-  const bazilionTools = createBazilionCustomTools({
+  const bazilionTools = restricted ? restricted.tools : createBazilionCustomTools({
     agent,
     memory,
     messagingHost,
@@ -27990,13 +28635,13 @@ async function createBazilionSession(opts) {
     fileSink,
     env
   });
-  const customTools = shellTools.customBash ? [...bazilionTools, shellTools.customBash] : bazilionTools;
-  const allowedTools = [...shellTools.hostToolNames, ...customTools.map((t) => t.name)];
+  const customTools = shellTools?.customBash ? [...bazilionTools, shellTools.customBash] : bazilionTools;
+  const allowedTools = [...shellTools?.hostToolNames ?? [], ...customTools.map((t) => t.name)];
   const { session } = await createAgentSession({
     cwd,
     agentDir: join19(paths.home, "pi"),
     model,
-    thinkingLevel: toPiThinkingLevel(agent.reasoningLevel),
+    thinkingLevel: toPiThinkingLevel(restricted?.reasoningLevel ?? agent.reasoningLevel),
     tools: allowedTools,
     customTools,
     sessionManager,
@@ -28138,6 +28783,17 @@ function loadInitialMessages(agent, paths) {
     return [];
   }
 }
+function loadSessionMessages(agent, paths, sessionId) {
+  if (!/^[A-Za-z0-9._-]+$/.test(sessionId)) return [];
+  const sessionDir = join19(paths.agentDir(agent.agent.id), "sessions");
+  const file = join19(sessionDir, `${sessionId}.jsonl`);
+  if (!existsSync14(file) || !existsSync14(agent.team.path)) return [];
+  try {
+    return SessionManager.open(file, sessionDir).buildSessionContext().messages;
+  } catch {
+    return [];
+  }
+}
 function loadSessionHead(agent, paths) {
   const sessionDir = join19(paths.agentDir(agent.agent.id), "sessions");
   if (!existsSync14(sessionDir)) return { file: null, size: 0 };
@@ -28319,7 +28975,7 @@ function assertOpenAICodexProvider(requested, expected) {
 }
 function waitForRefresh(pending, signal) {
   if (!signal) return pending;
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve7, reject2) => {
     let settled = false;
     const finish = (callback) => {
       if (settled) return;
@@ -28327,7 +28983,7 @@ function waitForRefresh(pending, signal) {
       signal.removeEventListener("abort", onAbort);
       callback();
     };
-    const onAbort = () => finish(() => reject(refreshCancelledError()));
+    const onAbort = () => finish(() => reject2(refreshCancelledError()));
     signal.addEventListener("abort", onAbort, { once: true });
     if (signal.aborted) {
       onAbort();
@@ -28335,7 +28991,7 @@ function waitForRefresh(pending, signal) {
     }
     pending.then(
       (value) => finish(() => resolve7(value)),
-      (error2) => finish(() => reject(error2))
+      (error2) => finish(() => reject2(error2))
     );
   });
 }
@@ -28366,6 +29022,14 @@ function tsxImportSpecifier() {
   cachedTsxImport = pathToFileURL(req.resolve("tsx")).href;
   return cachedTsxImport;
 }
+async function spawnReviewWorker(spec, opts = {}) {
+  for await (const rawFrame of spawnWorkerTurn(spec, opts)) {
+    const frame = rawFrame;
+    if (frame.kind === "review_result") return frame.proposals;
+    if (frame.kind === "fatal") throw new Error(frame.error);
+  }
+  throw new Error("review worker exited without a result");
+}
 async function* spawnWorkerTurn(spec, opts = {}) {
   const child = spawn2(process.execPath, workerSpawnArgs(opts.workerEntryPath), {
     env: opts.env ?? process.env,
@@ -28648,7 +29312,7 @@ async function resolveAgentApiKey(db, authToken, agent, opts = {}) {
 }
 
 // ../daemon/src/lib/attachments.ts
-import { randomUUID as randomUUID16 } from "crypto";
+import { randomUUID as randomUUID19 } from "crypto";
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync10 } from "fs";
 import { join as join20, posix } from "path";
 var MAX_FILE_BYTES = 25 * 1024 * 1024;
@@ -28673,7 +29337,7 @@ function saveInputFiles(agentDir, files, options = {}) {
       lines.push(`[attachment "${label}" skipped: too large (${fmtBytes(buf.byteLength)} > 25 MB)]`);
       continue;
     }
-    const filename = `${randomUUID16().slice(0, 8)}-${safeName(label)}`;
+    const filename = `${randomUUID19().slice(0, 8)}-${safeName(label)}`;
     const path = join20(dir, filename);
     writeFileSync10(path, buf);
     const referencePath = options.referenceDir ? posix.join(options.referenceDir, filename) : path;
@@ -28959,10 +29623,10 @@ async function getSsrfProxy() {
   if (serverUrl) return serverUrl;
   const s = createServer(onRequest);
   s.on("connect", onConnect);
-  await new Promise((resolve7, reject) => {
-    s.once("error", reject);
+  await new Promise((resolve7, reject2) => {
+    s.once("error", reject2);
     s.listen(0, "127.0.0.1", () => {
-      s.off("error", reject);
+      s.off("error", reject2);
       resolve7();
     });
   });
@@ -29358,7 +30022,7 @@ function createBrowserHost(config2) {
 }
 
 // ../daemon/src/lib/communication.ts
-import { randomUUID as randomUUID17 } from "crypto";
+import { randomUUID as randomUUID20 } from "crypto";
 
 // ../daemon/src/lib/team-policy-contract.ts
 var TEAM_POLICY_MANAGEMENT_CONTRACT_VERSION = 1;
@@ -29503,11 +30167,26 @@ function isUserFacingFrame(frame) {
   return frame.event.type === "assistant_message" || frame.event.type === "assistant_delta" || frame.event.type === "file" || frame.event.type === "tool_result" && Boolean(frame.event.images?.length) || frame.event.type === "error";
 }
 function sendAgentMessage(db, input) {
-  if (!teamPolicyEnforcementEnabled()) return messages_exports.send(db, input);
   const attemptKind = input.attemptKind ?? "agent_tool";
-  const attemptId = input.attemptId ?? randomUUID17();
+  const attemptId = input.attemptId ?? randomUUID20();
   const outcome = db.raw.transaction(
     () => {
+      const causality = resolveMessageCausality(db, input);
+      const loopBreak = enforceMessageCausality(db, {
+        from: input.from,
+        to: input.to,
+        origin: input.origin,
+        causality
+      });
+      if (loopBreak) return { loopBreak };
+      const messageInput = {
+        ...input,
+        causalChainId: causality.causalChainId,
+        causalHop: causality.causalHop
+      };
+      if (!teamPolicyEnforcementEnabled()) {
+        return { message: messages_exports.send(db, messageInput) };
+      }
       const authorization = {
         source: { kind: "agent", id: input.from },
         target: { kind: "agent", id: input.to },
@@ -29523,9 +30202,10 @@ function sendAgentMessage(db, input) {
       if (result.decision === "approval_required") {
         return { approval: { authorization: result, input: authorization } };
       }
-      return { message: messages_exports.send(db, input) };
+      return { message: messages_exports.send(db, messageInput) };
     }
   )();
+  if (outcome.loopBreak) throw new AgentLoopLimitError(outcome.loopBreak);
   if (outcome.denial) {
     observeDenial(outcome.denial, { origin: input.origin, attemptKind, attemptId });
     throw new CommunicationDeniedError(outcome.denial, attemptKind, attemptId);
@@ -29541,7 +30221,8 @@ function sendAgentMessage(db, input) {
         from: input.from,
         to: input.to,
         payload: input.payload,
-        replyTo: input.replyTo ?? null
+        replyTo: input.replyTo ?? null,
+        causalParentMessageId: input.causalParentMessageId ?? null
       },
       { requester: input.from }
     );
@@ -29982,17 +30663,21 @@ async function resolveMcpForTurn(db, env, authToken) {
 }
 
 // ../daemon/src/lib/messaging-host.ts
-function createDbMessagingHost(db) {
+function createDbMessagingHost(db, opts = {}) {
   return {
     agentExists(agentId) {
       return agents_exports.get(db, agentId) !== null;
     },
     sendMessage(input) {
-      const m2 = sendAgentMessage(db, { ...input, origin: "agent_tool" });
+      const m2 = sendAgentMessage(db, {
+        ...input,
+        causalParentMessageId: opts.causalParentMessageId,
+        origin: "agent_tool"
+      });
       return { messageId: m2.id };
     },
-    listInbox(agentId, opts) {
-      return deliverableInbox(db, agentId, opts?.unreadOnly === true);
+    listInbox(agentId, opts2) {
+      return deliverableInbox(db, agentId, opts2?.unreadOnly === true);
     },
     markRead(messageId) {
       messages_exports.markRead(db, messageId);
@@ -31965,7 +32650,7 @@ async function* runAgentTurn(agentId, rawMessage, opts = {}) {
   const authorization = opts.authorization ?? {
     origin: "internal_turn",
     attemptKind: "turn",
-    attemptId: randomUUID18()
+    attemptId: randomUUID21()
   };
   const releaseLease = opts.acquiredLeaseRelease ?? await acquireAgentLifecycleLease(agentId);
   let agent;
@@ -32009,7 +32694,9 @@ async function* runAgentTurn(agentId, rawMessage, opts = {}) {
 
 ${fileNote}` : fileNote : rawMessage;
     const enabledProviders = Array.from(providerState_exports.listEnabled(db));
-    const messagingHost = createDbMessagingHost(db);
+    const messagingHost = createDbMessagingHost(db, {
+      causalParentMessageId: opts.causalParentMessageId
+    });
     const userMdHost = createDbUserMdHost(db, paths);
     const { apiKey, refreshApiKey } = await resolveAgentApiKey(db, authToken, agent, {
       withRefresher: true
@@ -32019,6 +32706,7 @@ ${fileNote}` : fileNote : rawMessage;
     const mcp = await resolveMcpForTurn(db, env, authToken);
     mirrorTypingStart(agentId, `${authorization.attemptKind}:${authorization.attemptId}:typing`);
     let mirrorFrameIndex = 0;
+    let completed = false;
     for await (const frame of spawnWorkerTurn(
       {
         agent,
@@ -32052,8 +32740,12 @@ ${fileNote}` : fileNote : rawMessage;
           e instanceof Error ? e.message : String(e)
         );
       });
+      if (frame.kind === "done") completed = true;
       yield frame;
     }
+    if (completed && (authorization.origin === "http_chat" || authorization.origin.startsWith("telegram"))) {
+      agentReviews_exports.recordSuccessfulUserTurn(db, agentId);
+    }
   } finally {
     mirrorTypingStop(agentId);
     unregisterAgent(agentId);
@@ -32131,6 +32823,194 @@ function validateCron(expr) {
   parseCron(expr);
 }
 
+// ../daemon/src/lib/review-digest.ts
+var SECRET_PATTERNS = [
+  /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi,
+  /\b(?:sk|pk)-[A-Za-z0-9_-]{12,}\b/g,
+  /\b(?:api[_-]?key|token|password)\s*[:=]\s*[^\s,;]+/gi
+];
+function redactReviewText(text2) {
+  return SECRET_PATTERNS.reduce((value, pattern) => value.replace(pattern, "[REDACTED]"), text2);
+}
+function buildReviewDigest(input, options = {}) {
+  const maxUserTurns = options.maxUserTurns ?? 8;
+  const maxCharacters = options.maxCharacters ?? 4e4;
+  const normalized = input.filter((entry) => !entry.sensitive && entry.ordinal >= 0 && entry.text.trim()).map((entry) => ({
+    ...entry,
+    text: entry.role === "tool" ? `[tool:${entry.toolName?.trim() || "unknown"}] completed` : redactReviewText(entry.text.trim())
+  }));
+  if (normalized.length === 0) return null;
+  const selected = [];
+  let userTurns = 0;
+  let characters = 0;
+  for (let index = normalized.length - 1; index >= 0; index -= 1) {
+    const entry = normalized[index];
+    if (!entry) continue;
+    if (entry.role === "user" && userTurns >= maxUserTurns) break;
+    const remaining = maxCharacters - characters;
+    if (remaining <= 0) break;
+    const text2 = entry.text.slice(Math.max(0, entry.text.length - remaining));
+    if (!text2) break;
+    selected.push({ ...entry, text: text2 });
+    characters += text2.length;
+    if (entry.role === "user") userTurns += 1;
+  }
+  selected.reverse();
+  const firstUserIndex = selected.findIndex((entry) => entry.role === "user");
+  const bounded2 = firstUserIndex >= 0 ? selected.slice(firstUserIndex) : selected;
+  characters = bounded2.reduce((total, entry) => total + entry.text.length, 0);
+  const first = bounded2[0];
+  const last = bounded2.at(-1);
+  if (!first || !last) return null;
+  return {
+    sessionId: last.sessionId,
+    startOrdinal: first.ordinal,
+    endOrdinal: last.ordinal,
+    inputCharacters: characters,
+    turnsReviewed: userTurns,
+    entries: bounded2
+  };
+}
+
+// ../daemon/src/lib/review-dispatcher.ts
+function messageText(message) {
+  if (message.role === "tool") return message.toolName ?? "unknown";
+  return message.content;
+}
+function transcriptEntries(messages, sessionId) {
+  return messages.flatMap((message, ordinal) => {
+    if (message.role === "system") return [];
+    return [
+      {
+        sessionId,
+        ordinal,
+        role: message.role,
+        text: messageText(message),
+        ...message.role === "tool" ? { toolName: message.toolName } : {}
+      }
+    ];
+  });
+}
+function renderReviewInput(digest, privateLessons, sharedLessonKeys) {
+  const entries = digest.entries.map(
+    (entry) => `[${entry.sessionId}:${entry.ordinal}] ${entry.role.toUpperCase()}: ${entry.text}`
+  ).join("\n\n");
+  return `# Transcript digest
+
+${entries}
+
+# Existing private lessons
+${privateLessons.length ? privateLessons.map((text2) => `- ${text2}`).join("\n") : "(none)"}
+
+# Existing shared lesson keys
+${sharedLessonKeys.length ? sharedLessonKeys.map((key2) => `- ${key2}`).join("\n") : "(none)"}`;
+}
+async function dispatchAgentReview(reviewId) {
+  const { db, paths, authToken } = getCtx();
+  const claimed = agentReviews_exports.claim(db, reviewId);
+  if (!claimed) return;
+  if (isActiveAgent(claimed.agentId)) {
+    agentReviews_exports.defer(db, claimed.id);
+    return;
+  }
+  const releaseLease = await acquireAgentLifecycleLease(claimed.agentId);
+  const controller = new AbortController();
+  let registered = false;
+  try {
+    if (isActiveAgent(claimed.agentId)) {
+      agentReviews_exports.defer(db, claimed.id);
+      return;
+    }
+    registerAgent(claimed.agentId, controller);
+    registered = true;
+  } finally {
+    releaseLease();
+  }
+  try {
+    const resolved = resolveAgent(db, paths, claimed.agentId);
+    const sessionHead = loadSessionHead(resolved, paths);
+    const sessionId = sessionHead.file?.replace(/\.jsonl$/, "") ?? "";
+    const previous = agentReviews_exports.getLatestCompleted(db, claimed.agentId);
+    const messages = piMessagesToProviderView(loadInitialMessages(resolved, paths));
+    const entries = transcriptEntries(messages, sessionId).filter(
+      (entry) => previous?.sourceSessionId !== sessionId || previous.sourceEndOrdinal === null || entry.ordinal > previous.sourceEndOrdinal
+    );
+    const digest = buildReviewDigest(entries);
+    if (!digest) {
+      agentReviews_exports.complete(db, claimed.id, 0);
+      return;
+    }
+    agentReviews_exports.setSource(db, claimed.id, digest);
+    const privateLessons = agentLessonProposals_exports.listForAgent(db, claimed.agentId, { status: "approved" }).filter((proposal) => proposal.scope === "private").map((proposal) => proposal.text);
+    const memory = qmdBackend(`${resolved.team.path}/memory`);
+    await memory.init();
+    const sharedLessonKeys = (await memory.list()).map((entry) => entry.key).filter((key2) => key2.startsWith("lessons/"));
+    const reviewAgent = {
+      ...resolved,
+      agent: {
+        ...resolved.agent,
+        modelOverride: resolved.agent.reviewModel,
+        reasoningLevel: resolved.agent.reviewReasoningLevel
+      },
+      model: resolved.agent.reviewModel ?? resolved.model,
+      reasoningLevel: resolved.agent.reviewReasoningLevel
+    };
+    const { apiKey, refreshApiKey } = await resolveAgentApiKey(db, authToken, reviewAgent, {
+      withRefresher: true
+    });
+    const env = mergeSecretsIntoEnv(db, authToken);
+    const proposals = await spawnReviewWorker(
+      {
+        mode: "review",
+        review: {
+          reviewId: claimed.id,
+          evidence: digest.entries.map((entry) => ({
+            sessionId: entry.sessionId,
+            entryOrdinal: entry.ordinal
+          }))
+        },
+        agent: reviewAgent,
+        message: renderReviewInput(digest, privateLessons, sharedLessonKeys),
+        enabledProviders: [...providerState_exports.listEnabled(db)],
+        apiKey,
+        turnId: claimed.id,
+        bashApprovalMode: "auto_deny"
+      },
+      {
+        signal: controller.signal,
+        env,
+        apiKeyRefreshHost: refreshApiKey ? { refresh: refreshApiKey } : void 0
+      }
+    );
+    db.raw.transaction(() => {
+      for (const proposal of proposals) {
+        agentLessonProposals_exports.insert(db, {
+          reviewId: claimed.id,
+          agentId: claimed.agentId,
+          scope: proposal.scope,
+          text: proposal.text,
+          evidence: proposal.evidenceEntryIds
+        });
+      }
+      agentReviews_exports.complete(db, claimed.id, proposals.length);
+    })();
+  } catch (error2) {
+    if (controller.signal.aborted) {
+      agentReviews_exports.cancel(db, claimed.id, "cancelled");
+    } else {
+      agentReviews_exports.fail(db, claimed.id, error2 instanceof Error ? error2.message : String(error2));
+    }
+  } finally {
+    if (registered) unregisterAgent(claimed.agentId);
+  }
+}
+async function dispatchClaimableReviews(now = Date.now()) {
+  const { db } = getCtx();
+  await Promise.allSettled(
+    agentReviews_exports.listClaimable(db, now).map((review) => dispatchAgentReview(review.id))
+  );
+}
+
 // ../daemon/src/lib/turn-outcome.ts
 function turnFrameFailure(frame) {
   if (frame.kind === "fatal") return frame.error;
@@ -32216,7 +33096,7 @@ async function fireTrigger(dispatch2) {
   const controller = new AbortController();
   let registered = false;
   try {
-    const claim2 = claimSchedulerTrigger(ctx.db, {
+    const claim3 = claimSchedulerTrigger(ctx.db, {
       dispatchId: claimedDispatch.id,
       triggerId: t.id,
       agentId: t.agentId,
@@ -32227,21 +33107,21 @@ async function fireTrigger(dispatch2) {
         registered = true;
       }
     });
-    if (claim2.kind === "already_claimed") {
+    if (claim3.kind === "already_claimed") {
       releaseLease();
       triggerDispatches_exports.succeed(ctx.db, claimedDispatch.id);
       s.firing.delete(key2);
       return;
     }
-    if (claim2.kind === "approval_pending") {
+    if (claim3.kind === "approval_pending") {
       releaseLease();
       triggerDispatches_exports.defer(ctx.db, claimedDispatch.id, Date.now() + TICK_MS);
       s.firing.delete(key2);
       return;
     }
-    if (claim2.kind === "approval_terminal") {
+    if (claim3.kind === "approval_terminal") {
       releaseLease();
-      triggerDispatches_exports.fail(ctx.db, claimedDispatch.id, claim2.reason, { maxAttempts: 1 });
+      triggerDispatches_exports.fail(ctx.db, claimedDispatch.id, claim3.reason, { maxAttempts: 1 });
       s.firing.delete(key2);
       return;
     }
@@ -32370,7 +33250,8 @@ async function fireInboxWake(agentId) {
         acquiredLeaseRelease: releaseLease,
         controller,
         alreadyRegistered: true,
-        bashApprovalMode: "auto_deny"
+        bashApprovalMode: "auto_deny",
+        causalParentMessageId: selectCausalParent(msgs)
       })) {
         if (frame.kind === "fatal") {
           console.error(`[scheduler] inbox wake ${agentId} fatal:`, frame.error);
@@ -32423,6 +33304,7 @@ async function tick() {
   for (const agentId of recipients) {
     work.push(fireInboxWake(agentId));
   }
+  work.push(dispatchClaimableReviews(now));
   await Promise.allSettled(work);
 }
 function startScheduler() {
@@ -32541,7 +33423,7 @@ async function authMiddleware(c, next) {
 }
 
 // ../daemon/src/routes/agents.ts
-import { randomUUID as randomUUID19 } from "crypto";
+import { randomUUID as randomUUID22 } from "crypto";
 import { existsSync as existsSync17, readdirSync as readdirSync10, readFileSync as readFileSync13, rmSync as rmSync13 } from "fs";
 import { join as join21 } from "path";
 
@@ -32574,6 +33456,47 @@ function resolveAgentIdParam(db, raw2) {
   return agents_exports.resolveId(db, raw2) ?? raw2;
 }
 
+// ../daemon/src/lib/lesson-decisions.ts
+var LessonProposalConflictError = class extends Error {
+};
+function conflict() {
+  throw new LessonProposalConflictError("proposal changed or is no longer eligible");
+}
+async function approveLessonProposal(db, memory, id, version2) {
+  const current = agentLessonProposals_exports.get(db, id);
+  if (!current || current.version !== version2 || current.status !== "pending") return conflict();
+  if (current.scope === "private") {
+    return agentLessonProposals_exports.approve(db, id, version2, null) ?? conflict();
+  }
+  const key2 = `lessons/${current.id}.md`;
+  await memory.init();
+  await memory.write(
+    key2,
+    `# Reviewed lesson
+
+${current.text}
+
+Source: agent ${current.agentId}, review ${current.reviewId}.
+`
+  );
+  const approved = agentLessonProposals_exports.approve(db, id, version2, key2);
+  if (approved) return approved;
+  await memory.remove(key2);
+  return conflict();
+}
+function rejectLessonProposal(db, id, version2) {
+  return agentLessonProposals_exports.reject(db, id, version2) ?? conflict();
+}
+async function revokeLessonProposal(db, memory, id, version2) {
+  const current = agentLessonProposals_exports.get(db, id);
+  if (!current || current.version !== version2 || current.status !== "approved") return conflict();
+  if (current.appliedKey) {
+    await memory.init();
+    await memory.remove(current.appliedKey);
+  }
+  return agentLessonProposals_exports.revoke(db, id, version2) ?? conflict();
+}
+
 // ../daemon/src/lib/telegram/bot.ts
 import { Bot, GrammyError } from "grammy";
 
@@ -34548,13 +35471,13 @@ agentsRouter.post("/", async (c) => {
     return c.json({ agent, team: teamPolicies_exports.detail(db, agent.teamId) }, 201);
   } catch (err) {
     const message = err.message;
-    const conflict = message.startsWith("placement_required") || message.startsWith("team_policy_invalid") || message.startsWith("team_revision_conflict");
+    const conflict2 = message.startsWith("placement_required") || message.startsWith("team_policy_invalid") || message.startsWith("team_revision_conflict");
     return c.json(
       {
         error: message,
         ...message.startsWith("placement_required") ? { code: "placement_required" } : message.startsWith("team_revision_conflict") ? { code: "team_revision_conflict" } : message.startsWith("team_policy_invalid") ? { code: "team_policy_invalid" } : {}
       },
-      conflict ? 409 : 400
+      conflict2 ? 409 : 400
     );
   }
 });
@@ -34844,13 +35767,13 @@ agentsRouter.patch("/:id/team", async (c) => {
     });
   } catch (err) {
     const message = err.message;
-    const conflict = message.startsWith("agent_turn_active") || message.startsWith("placement_required") || message.startsWith("team_policy_invalid") || message.includes("team_revision_conflict");
+    const conflict2 = message.startsWith("agent_turn_active") || message.startsWith("placement_required") || message.startsWith("team_policy_invalid") || message.includes("team_revision_conflict");
     return c.json(
       {
         error: message,
         ...message.startsWith("agent_turn_active") ? { code: "agent_turn_active" } : message.startsWith("placement_required") ? { code: "placement_required" } : message.includes("team_revision_conflict") ? { code: message.split(":")[0] } : message.startsWith("team_policy_invalid") ? { code: "team_policy_invalid" } : {}
       },
-      conflict ? 409 : 400
+      conflict2 ? 409 : 400
     );
   }
 });
@@ -34908,6 +35831,149 @@ agentsRouter.delete("/:id/skills/:name", (c) => {
   agents_exports.detachSkill(db, id, c.req.param("name"));
   return c.body(null, 204);
 });
+agentsRouter.get("/:id/review-config", (c) => {
+  const { db } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  if (!agent) return c.json({ error: `agent not found: ${c.req.param("id")}` }, 404);
+  return c.json({
+    enabled: agent.reviewEnabled,
+    everyNTurns: agent.reviewEveryNTurns,
+    model: agent.reviewModel,
+    reasoningLevel: agent.reviewReasoningLevel,
+    turnsSinceLast: agent.reviewTurnsSinceLast
+  });
+});
+agentsRouter.patch("/:id/review-config", async (c) => {
+  const body = await c.req.json().catch(() => null);
+  if (!body) return c.json({ error: "invalid JSON body" }, 400);
+  const { db } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  if (!agent) return c.json({ error: `agent not found: ${c.req.param("id")}` }, 404);
+  const everyNTurns = body.everyNTurns ?? agent.reviewEveryNTurns;
+  const reasoningLevel = body.reasoningLevel ?? agent.reviewReasoningLevel;
+  if (!Number.isInteger(everyNTurns) || everyNTurns < 1 || everyNTurns > 100) {
+    return c.json({ error: "everyNTurns must be an integer from 1 to 100" }, 400);
+  }
+  if (!REASONING_LEVELS.includes(reasoningLevel)) {
+    return c.json({ error: `invalid reasoningLevel: ${reasoningLevel}` }, 400);
+  }
+  if (body.model !== void 0 && body.model !== null && !body.model.includes(":")) {
+    return c.json({ error: "model must use provider:model format" }, 400);
+  }
+  agents_exports.setReviewConfig(db, agent.id, {
+    enabled: body.enabled ?? agent.reviewEnabled,
+    everyNTurns,
+    model: body.model === void 0 ? agent.reviewModel : body.model,
+    reasoningLevel
+  });
+  const updated = agents_exports.get(db, agent.id);
+  if (!updated) return c.json({ error: "agent disappeared" }, 500);
+  return c.json({
+    enabled: updated.reviewEnabled,
+    everyNTurns: updated.reviewEveryNTurns,
+    model: updated.reviewModel,
+    reasoningLevel: updated.reviewReasoningLevel,
+    turnsSinceLast: updated.reviewTurnsSinceLast
+  });
+});
+agentsRouter.post("/:id/reviews", (c) => {
+  const { db } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  if (!agent) return c.json({ error: `agent not found: ${c.req.param("id")}` }, 404);
+  return c.json(
+    { review: agentReviews_exports.enqueueManual(db, agent.id) },
+    202
+  );
+});
+agentsRouter.get("/:id/reviews", (c) => {
+  const { db } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  if (!agent) return c.json({ error: `agent not found: ${c.req.param("id")}` }, 404);
+  return c.json({
+    reviews: agentReviews_exports.listForAgent(db, agent.id)
+  });
+});
+agentsRouter.get("/:id/reviews/:reviewId", (c) => {
+  const { db, paths } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  const review = agentReviews_exports.get(db, c.req.param("reviewId"));
+  if (!agent || !review || review.agentId !== agent.id)
+    return c.json({ error: "review not found" }, 404);
+  return c.json({
+    review,
+    proposals: enrichProposalEvidence(
+      agentLessonProposals_exports.listForReview(db, review.id),
+      resolveAgent(db, paths, agent.id),
+      paths
+    )
+  });
+});
+agentsRouter.get("/:id/lesson-proposals", (c) => {
+  const { db, paths } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  if (!agent) return c.json({ error: `agent not found: ${c.req.param("id")}` }, 404);
+  const rawStatus = c.req.query("status");
+  const statuses = ["pending", "approved", "rejected", "revoked"];
+  if (rawStatus && !statuses.includes(rawStatus)) {
+    return c.json({ error: `invalid status: ${rawStatus}` }, 400);
+  }
+  return c.json({
+    proposals: enrichProposalEvidence(
+      agentLessonProposals_exports.listForAgent(db, agent.id, {
+        status: rawStatus
+      }),
+      resolveAgent(db, paths, agent.id),
+      paths
+    )
+  });
+});
+agentsRouter.patch("/:id/lesson-proposals/:proposalId", async (c) => {
+  const body = await c.req.json().catch(() => null);
+  if (!body || !Number.isInteger(body.version)) return c.json({ error: "version is required" }, 400);
+  const { db } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  const current = agentLessonProposals_exports.get(db, c.req.param("proposalId"));
+  if (!agent || !current || current.agentId !== agent.id)
+    return c.json({ error: "proposal not found" }, 404);
+  const text2 = body.text?.trim() ?? current.text;
+  const scope = body.scope ?? current.scope;
+  if (!text2 || text2.length > 500) return c.json({ error: "text must be 1-500 characters" }, 400);
+  if (!["private", "shared"].includes(scope)) {
+    return c.json({ error: `invalid scope: ${scope}` }, 400);
+  }
+  const proposal = agentLessonProposals_exports.updatePending(db, current.id, body.version, {
+    text: text2,
+    scope
+  });
+  return proposal ? c.json({ proposal }) : c.json({ error: "proposal changed or is no longer pending" }, 409);
+});
+for (const decision of ["approve", "reject", "revoke"]) {
+  agentsRouter.post(`/:id/lesson-proposals/:proposalId/${decision}`, async (c) => {
+    const body = await c.req.json().catch(() => null);
+    if (!body || !Number.isInteger(body.version))
+      return c.json({ error: "version is required" }, 400);
+    const { db, paths } = getCtx();
+    const agent = agents_exports.get(db, c.req.param("id"));
+    const current = agentLessonProposals_exports.get(db, c.req.param("proposalId"));
+    if (!agent || !current || current.agentId !== agent.id)
+      return c.json({ error: "proposal not found" }, 404);
+    const team = teams_exports.get(db, agent.teamId, paths);
+    if (!team) return c.json({ error: `team not found: ${agent.teamId}` }, 404);
+    try {
+      const proposal = await runAgentLifecycleMutation(agent.id, async () => {
+        const memory = qmdBackend(join21(team.path, "memory"));
+        if (decision === "approve")
+          return approveLessonProposal(db, memory, current.id, body.version);
+        if (decision === "reject") return rejectLessonProposal(db, current.id, body.version);
+        return revokeLessonProposal(db, memory, current.id, body.version);
+      });
+      return c.json({ proposal });
+    } catch (error2) {
+      if (error2 instanceof LessonProposalConflictError) return c.json({ error: error2.message }, 409);
+      throw error2;
+    }
+  });
+}
 agentsRouter.get("/:id/triggers", (c) => {
   const { db, paths, authToken } = getCtx();
   const agent = agents_exports.get(db, c.req.param("id"));
@@ -34974,6 +36040,13 @@ agentsRouter.get("/:id/messages", (c) => {
   };
   return c.json(body);
 });
+agentsRouter.get("/:id/loop-breaks", (c) => {
+  const { db } = getCtx();
+  const agent = agents_exports.get(db, c.req.param("id"));
+  if (!agent) return c.json({ error: `agent not found: ${c.req.param("id")}` }, 404);
+  const limit = Math.min(Math.max(Number(c.req.query("limit")) || 25, 1), 100);
+  return c.json({ events: listAgentLoopBreaks(db, agent.id, limit) });
+});
 agentsRouter.post("/:id/messages", async (c) => {
   const body = await c.req.json().catch(() => null);
   if (!body || typeof body.from !== "string" || !body.from || !body.payload || typeof body.payload.text !== "string") {
@@ -34999,6 +36072,9 @@ agentsRouter.post("/:id/messages", async (c) => {
     });
     return c.json(msg, 201);
   } catch (error2) {
+    if (error2 instanceof AgentLoopLimitError) {
+      return c.json({ error: error2.message, code: "agent_loop_limit", event: error2.event }, 429);
+    }
     if (error2 instanceof CommunicationDeniedError) {
       return c.json(
         { ...error2.result, attemptKind: error2.attemptKind, attemptId: error2.attemptId },
@@ -35070,7 +36146,7 @@ agentsRouter.post("/:id/chat", async (c) => {
   if (!message && attachments.length === 0) {
     return c.json({ error: "message or an attachment is required" }, 400);
   }
-  const requestAttemptId = c.req.header("x-request-id") ?? randomUUID19();
+  const requestAttemptId = c.req.header("x-request-id") ?? randomUUID22();
   try {
     authorizeUserIngress(db, id, {
       origin: "http_chat",
@@ -35451,6 +36527,24 @@ function countProperties(schema) {
   if (!props || typeof props !== "object") return null;
   return Object.keys(props).length;
 }
+function enrichProposalEvidence(proposals, agent, paths) {
+  const sessions = /* @__PURE__ */ new Map();
+  return proposals.map((proposal) => ({
+    ...proposal,
+    evidence: proposal.evidence.map((evidence) => {
+      let messages = sessions.get(evidence.sessionId);
+      if (!messages) {
+        messages = piMessagesToProviderView(loadSessionMessages(agent, paths, evidence.sessionId));
+        sessions.set(evidence.sessionId, messages);
+      }
+      const message = messages[evidence.entryOrdinal];
+      const excerpt = message ? redactReviewText(
+        message.role === "tool" ? `[tool:${message.toolName ?? "unknown"}] completed` : message.content
+      ).replace(/\s+/g, " ").slice(0, 240) : void 0;
+      return { ...evidence, ...excerpt ? { excerpt } : {} };
+    })
+  }));
+}
 
 // ../daemon/src/routes/approvals.ts
 import { Bot as Bot2, InputFile as InputFile2 } from "grammy";
@@ -35598,7 +36692,19 @@ function validateSchedulerGrant(db, approval) {
 async function deliver(approval) {
   if (approval.payloadKind === "agent_message") {
     const payload = approval.payload;
-    messages_exports.send(getCtx().db, payload);
+    const causality = resolveMessageCausality(getCtx().db, payload);
+    const loopBreak = enforceMessageCausality(getCtx().db, {
+      from: payload.from,
+      to: payload.to,
+      origin: "communication_approval_delivery",
+      causality
+    });
+    if (loopBreak) throw new AgentLoopLimitError(loopBreak);
+    messages_exports.send(getCtx().db, {
+      ...payload,
+      causalChainId: causality.causalChainId,
+      causalHop: causality.causalHop
+    });
     return;
   }
   if (approval.payloadKind === "scheduler_trigger") {
@@ -35734,11 +36840,54 @@ function approvalError(error2) {
   return Response.json({ error: message }, { status: 400 });
 }
 
+// ../daemon/src/routes/attention.ts
+import { Hono as Hono3 } from "hono";
+var attentionRouter = new Hono3();
+attentionRouter.get("/", (c) => {
+  const state3 = c.req.query("state") ?? "open";
+  if (!["open", "acknowledged", "all"].includes(state3))
+    return c.json({ error: "invalid attention state", code: "invalid_attention_state" }, 400);
+  const kind = c.req.query("kind");
+  if (kind && !ATTENTION_KINDS.includes(kind))
+    return c.json({ error: "invalid attention kind", code: "invalid_attention_kind" }, 400);
+  const rawLimit = c.req.query("limit");
+  const limit = rawLimit === void 0 ? 100 : Number(rawLimit);
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200)
+    return c.json(
+      { error: "attention limit must be between 1 and 200", code: "invalid_attention_limit" },
+      400
+    );
+  return c.json(projectAttention(getCtx().db, { state: state3, kind, limit }));
+});
+attentionRouter.get("/summary", (c) => c.json(attentionSummary(getCtx().db)));
+attentionRouter.post(
+  "/acknowledge-all",
+  (c) => c.json({ acknowledged: acknowledgeAllAttention(getCtx().db) })
+);
+attentionRouter.post("/:key/acknowledge", (c) => mutate(c, true));
+attentionRouter.delete("/:key/acknowledgement", (c) => mutate(c, false));
+function mutate(c, acknowledged) {
+  try {
+    return c.json({
+      item: acknowledgeAttention(getCtx().db, c.req.param("key") ?? "", acknowledged)
+    });
+  } catch (error2) {
+    const code = error2 instanceof Error ? error2.message : "attention_error";
+    if (code === "invalid_attention_key")
+      return c.json({ error: "invalid attention key", code }, 400);
+    if (code === "attention_action_required")
+      return c.json({ error: "action-required items must be resolved at their source", code }, 409);
+    if (code === "attention_source_not_found")
+      return c.json({ error: "attention source not found or no longer eligible", code }, 404);
+    throw error2;
+  }
+}
+
 // ../daemon/src/routes/auth-login.ts
 import { spawn as spawn4 } from "child_process";
-import { Hono as Hono3 } from "hono";
+import { Hono as Hono4 } from "hono";
 import { setCookie } from "hono/cookie";
-var authRouter = new Hono3();
+var authRouter = new Hono4();
 authRouter.get("/auth/me", (c) => {
   const { db } = getCtx();
   return c.json({ authed: true, setupComplete: isSetupComplete(db) });
@@ -35852,8 +37001,8 @@ function openBrowser(url2) {
 }
 
 // ../daemon/src/routes/communication.ts
-import { Hono as Hono4 } from "hono";
-var communicationRouter = new Hono4();
+import { Hono as Hono5 } from "hono";
+var communicationRouter = new Hono5();
 communicationRouter.post("/evaluate", async (c) => {
   const input = await c.req.json().catch(() => null);
   if (!input || !input.source || !input.target || typeof input.origin !== "string" || typeof input.attemptKind !== "string" || typeof input.attemptId !== "string") {
@@ -35863,8 +37012,8 @@ communicationRouter.post("/evaluate", async (c) => {
 });
 
 // ../daemon/src/routes/config.ts
-import { Hono as Hono5 } from "hono";
-var configRouter = new Hono5();
+import { Hono as Hono6 } from "hono";
+var configRouter = new Hono6();
 configRouter.get("/providers", async (c) => {
   const { db, paths, authToken } = getCtx();
   const env = mergeSecretsIntoEnv(db, authToken);
@@ -36043,8 +37192,8 @@ function knownProviderRegistryNames() {
 }
 
 // ../daemon/src/routes/mcp.ts
-import { Hono as Hono6 } from "hono";
-var mcpRouter = new Hono6();
+import { Hono as Hono7 } from "hono";
+var mcpRouter = new Hono7();
 var TRANSPORTS = /* @__PURE__ */ new Set(["stdio", "http", "sse"]);
 function validate(input) {
   if (!input.name || !/^[a-zA-Z0-9_]+$/.test(input.name)) {
@@ -36173,8 +37322,8 @@ mcpRouter.post("/:id/test", async (c) => {
 });
 
 // ../daemon/src/routes/messages.ts
-import { Hono as Hono7 } from "hono";
-var messagesRouter = new Hono7();
+import { Hono as Hono8 } from "hono";
+var messagesRouter = new Hono8();
 messagesRouter.get("/:id", (c) => {
   const { db } = getCtx();
   const msg = messages_exports.get(db, c.req.param("id"));
@@ -36198,7 +37347,7 @@ messagesRouter.patch("/:id", async (c) => {
 import { existsSync as existsSync18 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join24 } from "path";
-import { Hono as Hono8 } from "hono";
+import { Hono as Hono9 } from "hono";
 
 // ../daemon/src/lib/backup.ts
 import { mkdtempSync as mkdtempSync3, rmSync as rmSync14 } from "fs";
@@ -36293,7 +37442,7 @@ function createBackupArchive(paths, snapshot) {
 }
 
 // ../daemon/src/lib/daemon-liveness.ts
-import { createHash as createHash5, randomUUID as randomUUID20 } from "crypto";
+import { createHash as createHash5, randomUUID as randomUUID23 } from "crypto";
 import {
   chmodSync as chmodSync2,
   closeSync as closeSync4,
@@ -36419,9 +37568,9 @@ function pidIsAlive(pid) {
 }
 function reclaimStaleRecord(path, existing) {
   const identity = createHash5("sha256").update(existing.instanceId ?? existing.raw).update(`\0${existing.stat.dev}\0${existing.stat.ino}`).digest("hex").slice(0, 24);
-  const claim2 = `${path}.reclaim-${identity}`;
+  const claim3 = `${path}.reclaim-${identity}`;
   try {
-    mkdirSync9(claim2, { mode: 448 });
+    mkdirSync9(claim3, { mode: 448 });
   } catch (error2) {
     if (errorCode(error2) === "EEXIST") return null;
     throw error2;
@@ -36431,8 +37580,8 @@ function reclaimStaleRecord(path, existing) {
     if (!current || !sameFile(current.stat, existing.stat) || current.raw !== existing.raw) {
       return null;
     }
-    renameSync3(path, join23(claim2, "stale-record.json"));
-    return claim2;
+    renameSync3(path, join23(claim3, "stale-record.json"));
+    return claim3;
   } catch (error2) {
     if (!["ENOENT", "EEXIST"].includes(errorCode(error2) ?? "")) throw error2;
     return null;
@@ -36460,7 +37609,7 @@ function acquireDaemonLiveness(paths) {
   mkdirSync9(dirname5(resolve6(paths.home)), { recursive: true });
   const path = daemonLivenessPath(paths.home);
   mkdirSync9(dirname5(path), { recursive: true });
-  const instanceId = randomUUID20();
+  const instanceId = randomUUID23();
   const startedAt = Date.now();
   let fd = null;
   let reclaimClaim = null;
@@ -36494,8 +37643,8 @@ function acquireDaemonLiveness(paths) {
           `another Bazilion daemon owns this home${owner}; stop it before starting another`
         );
       }
-      const claim2 = reclaimStaleRecord(path, existing);
-      if (claim2) reclaimClaim = claim2;
+      const claim3 = reclaimStaleRecord(path, existing);
+      if (claim3) reclaimClaim = claim3;
     }
   }
   if (fd === null) {
@@ -36580,7 +37729,7 @@ function acquireDaemonLiveness(paths) {
 }
 
 // ../daemon/src/routes/misc.ts
-var miscRouter = new Hono8();
+var miscRouter = new Hono9();
 miscRouter.get("/health", (c) => {
   const instanceId = getDaemonInstanceId();
   if (instanceId) c.header("x-bazilion-daemon-instance", instanceId);
@@ -36802,8 +37951,8 @@ miscRouter.delete("/tokens/:id", (c) => {
 // ../daemon/src/routes/profiles.ts
 import { existsSync as existsSync19, readFileSync as readFileSync15, writeFileSync as writeFileSync12 } from "fs";
 import { join as join25 } from "path";
-import { Hono as Hono9 } from "hono";
-var profilesRouter = new Hono9();
+import { Hono as Hono10 } from "hono";
+var profilesRouter = new Hono10();
 profilesRouter.get("/", (c) => {
   const { db } = getCtx();
   const profiles = profiles_exports.list(db);
@@ -36982,8 +38131,8 @@ function parseCommunicationDefaults(value) {
 }
 
 // ../daemon/src/routes/shell-approvals.ts
-import { Hono as Hono10 } from "hono";
-var shellApprovalsRouter = new Hono10();
+import { Hono as Hono11 } from "hono";
+var shellApprovalsRouter = new Hono11();
 shellApprovalsRouter.get("/", (c) => {
   const agentId = c.req.query("agentId")?.trim();
   if (!agentId) return c.json({ error: "agentId query parameter is required" }, 400);
@@ -37018,9 +38167,9 @@ shellApprovalsRouter.post("/:id", async (c) => {
 import { existsSync as existsSync20, mkdtempSync as mkdtempSync4, rmSync as rmSync16, writeFileSync as writeFileSync13 } from "fs";
 import { homedir as homedir3, tmpdir as tmpdir4 } from "os";
 import { join as join26 } from "path";
-import { Hono as Hono11 } from "hono";
+import { Hono as Hono12 } from "hono";
 var MAX_ZIP_BYTES = 50 * 1024 * 1024;
-var skillsRouter = new Hono11();
+var skillsRouter = new Hono12();
 skillsRouter.get("/", (c) => {
   const { db, paths } = getCtx();
   const out = [];
@@ -37137,9 +38286,9 @@ async function parseImportInput(request2) {
 }
 
 // ../daemon/src/routes/team-templates.ts
-import { randomUUID as randomUUID21 } from "crypto";
-import { Hono as Hono12 } from "hono";
-var teamTemplatesRouter = new Hono12();
+import { randomUUID as randomUUID24 } from "crypto";
+import { Hono as Hono13 } from "hono";
+var teamTemplatesRouter = new Hono13();
 teamTemplatesRouter.get("/", (c) => {
   const { db } = getCtx();
   return c.json(
@@ -37177,7 +38326,7 @@ teamTemplatesRouter.post("/import", async (c) => {
       if (!profiles_exports.get(db, parsed.profileId)) {
         throw new Error(`profile not found: ${parsed.profileId}`);
       }
-      const slotId = randomUUID21();
+      const slotId = randomUUID24();
       keyToSlot.set(clientKey, slotId);
       return { ...parsed, slotId };
     });
@@ -37470,9 +38619,9 @@ function canonicalError(c, error2) {
 
 // ../daemon/src/routes/teams.ts
 import { join as join27 } from "path";
-import { Hono as Hono13 } from "hono";
+import { Hono as Hono14 } from "hono";
 var USER_MD_MAX_BYTES2 = 12e3;
-var teamsRouter = new Hono13();
+var teamsRouter = new Hono14();
 teamsRouter.get("/", (c) => {
   const { db, paths } = getCtx();
   return c.json(teams_exports.list(db, paths));
@@ -37841,7 +38990,7 @@ function teamPolicyError(c, error2) {
 }
 
 // ../daemon/src/routes/telegram.ts
-import { Hono as Hono14 } from "hono";
+import { Hono as Hono15 } from "hono";
 
 // ../daemon/src/lib/telegram/preflight.ts
 var TELEGRAM_API_BASE = "https://api.telegram.org";
@@ -37870,7 +39019,7 @@ async function runPreflight(args) {
       clearTimeout(t);
     }
   };
-  const fail2 = (step, message) => ({
+  const fail3 = (step, message) => ({
     configured: true,
     preflight: null,
     error: { step, message },
@@ -37880,13 +39029,13 @@ async function runPreflight(args) {
   try {
     me2 = await call("getMe", {});
   } catch (e) {
-    return fail2("getMe", errorMessage(e));
+    return fail3("getMe", errorMessage(e));
   }
   let chat;
   try {
     chat = await call("getChat", { chat_id: chatId(args.chatId) });
   } catch (e) {
-    return fail2("getChat", errorMessage(e));
+    return fail3("getChat", errorMessage(e));
   }
   let member;
   try {
@@ -37895,7 +39044,7 @@ async function runPreflight(args) {
       user_id: me2.id
     });
   } catch (e) {
-    return fail2("getChatMember", errorMessage(e));
+    return fail3("getChatMember", errorMessage(e));
   }
   const hasManageTopics = member.status === "creator" || member.can_manage_topics === true;
   const preflight = {
@@ -37935,7 +39084,7 @@ var DERIVED_STATE_KEYS = [
   "TELEGRAM_DIRECTORY_MESSAGE_ID",
   MIGRATED_CHAT_ID_KEY
 ];
-var telegramRouter = new Hono14();
+var telegramRouter = new Hono15();
 telegramRouter.get("/", (c) => {
   const { db, authToken } = getCtx();
   return c.json(readState(db, authToken));
@@ -38074,8 +39223,8 @@ function maskBotToken(t) {
 }
 
 // ../daemon/src/routes/triggers.ts
-import { Hono as Hono15 } from "hono";
-var triggersRouter = new Hono15();
+import { Hono as Hono16 } from "hono";
+var triggersRouter = new Hono16();
 triggersRouter.get("/:id/dispatches", (c) => {
   const { db } = getCtx();
   const id = c.req.param("id");
@@ -38108,9 +39257,10 @@ triggersRouter.patch("/:id", async (c) => {
 
 // ../daemon/src/app.ts
 function createApp() {
-  const app2 = new Hono16();
+  const app2 = new Hono17();
   app2.use("*", authMiddleware);
   app2.route("/api/agents", agentsRouter);
+  app2.route("/api/attention", attentionRouter);
   app2.route("/api/approvals", approvalsRouter);
   app2.route("/api/shell-approvals", shellApprovalsRouter);
   app2.route("/api/teams", teamsRouter);