commonswarm 0.1.22 → 0.1.25

package/cswarm.cjs

@@ -4381,8 +4381,8 @@ var require_RealtimeChannel = __commonJS({
       }
       /** @internal */
       _notThisChannelEvent(event, ref) {
-        const { close, error, leave, join: join14 } = constants_1.CHANNEL_EVENTS;
-        const events = [close, error, leave, join14];
+        const { close, error, leave, join: join17 } = constants_1.CHANNEL_EVENTS;
+        const events = [close, error, leave, join17];
         return ref && events.includes(event) && ref !== this.joinPush.ref;
       }
       /** @internal */
@@ -13505,12 +13505,16 @@ __export(cli_exports, {
   EXIT_RESTARTABLE: () => EXIT_RESTARTABLE,
   TURN_BUDGET_CREDENTIAL_MARGIN_MS: () => TURN_BUDGET_CREDENTIAL_MARGIN_MS,
   clampTurnBudgetToCredential: () => clampTurnBudgetToCredential,
+  claudeUserPromptHookSnippet: () => claudeUserPromptHookSnippet,
   describeAudience: () => describeAudience,
   listenerFailureMessage: () => listenerFailureMessage,
   listenerHostLimits: () => listenerHostLimits,
   listenerPermissionMode: () => listenerPermissionMode,
+  listenerRouteConfiguration: () => listenerRouteConfiguration,
   listenerStatusJson: () => listenerStatusJson,
+  renderListenerStatus: () => renderListenerStatus,
   renderRoster: () => renderRoster,
+  replyRefusalHint: () => replyRefusalHint,
   resolveDetachedClaudeExecutable: () => resolveDetachedClaudeExecutable,
   resolveDetachedCodexExecutable: () => resolveDetachedCodexExecutable,
   resolveTurnBudgetOrDefer: () => resolveTurnBudgetOrDefer
@@ -13518,9 +13522,9 @@ __export(cli_exports, {
 module.exports = __toCommonJS(cli_exports);
 var import_node_crypto19 = require("node:crypto");
 var import_node_fs7 = require("node:fs");
-var import_promises10 = require("node:fs/promises");
-var import_node_path17 = require("node:path");
-var import_promises11 = require("node:readline/promises");
+var import_promises11 = require("node:fs/promises");
+var import_node_path19 = require("node:path");
+var import_promises12 = require("node:readline/promises");
 
 // src/cloud/auth.ts
 var import_node_crypto2 = require("node:crypto");
@@ -22162,15 +22166,8 @@ function createWorkspaceError(status, body) {
     return new CreateWorkspaceError(
       status,
       code,
-      /* D-067/D-075. This used to end "Archiving a workspace frees its slot; the CLI cannot archive
-       * one yet, so ask whoever operates this deployment." Both halves were dead ends. Archiving
-       * is unreachable from every surface — `archived_at` exists and nothing writes it — and on a
-       * self-serve deployment the reader IS the operator, so it named a person who does not exist
-       * to perform an action that does not exist.
-       *
-       * It now states the limit, does not offer a remedy that is unimplemented, and names the one
-       * route that does work: someone else's invitation, which is not capped. */
-      `${limit === null ? "You have already created as many workspaces as this account allows." : `You have already created ${limit} workspaces, which is the limit for one account.`} Workspaces cannot be removed yet, so this limit is a ceiling rather than a queue. Workspaces you were invited to do not count against it \u2014 a collaborator can still add you to theirs.`
+      /* Closing one live workspace now frees a slot; name the exact confirmed command. */
+      `${limit === null ? "You have already created as many workspaces as this account allows." : `You have already created ${limit} workspaces, which is the limit for one account.`} Close one with cswarm workspace close <full-id|exact-name> --confirm <same-selector>, then try again. Workspaces you were invited to do not count against it.`
     );
   }
   if (status === 403) {
@@ -22797,6 +22794,12 @@ var CONTENT_TYPES = /* @__PURE__ */ new Map([
   [".md", "text/markdown"],
   [".txt", "text/plain"],
   [".csv", "text/csv"],
+  // .html/.htm: a web/marketing team's deliverables (Fastio feedback 2026-08-19). Every
+  // download is served Content-Disposition: attachment (§5), never rendered inline, so HTML
+  // is no more dangerous than the .svg already permitted — the spec treats all downloads as
+  // untrusted attachments the consumer must not execute.
+  [".html", "text/html"],
+  [".htm", "text/html"],
   [".json", "application/json"],
   [".yaml", "application/yaml"],
   [".yml", "application/yaml"],
@@ -23273,10 +23276,14 @@ function parseProfile(raw) {
   }
   return value;
 }
-async function withFileLock(stateDirectory2, lockName, work) {
+async function withFileLock(stateDirectory2, lockName, work, options = {}) {
   await secureDirectory(stateDirectory2);
   const lockPath = (0, import_node_path.join)(stateDirectory2, `${lockName}.lock`);
-  const deadline = Date.now() + LOCK_TIMEOUT_MS;
+  const timeoutMs = options.timeoutMs ?? LOCK_TIMEOUT_MS;
+  if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 0 || timeoutMs > LOCK_TIMEOUT_MS) {
+    throw new Error("credential refresh lock timeout is invalid");
+  }
+  const deadline = Date.now() + timeoutMs;
   let handle = null;
   while (handle === null) {
     try {
@@ -27730,6 +27737,7 @@ var DEFAULT_MEMBERSHIP_REVOKED = {
   message: "Your previously selected workspace is no longer available to this account. CommonSwarm cleared that saved selection."
 };
 var PROJECT_NOT_AVAILABLE = "That workspace is not available to this account. Run cswarm workspaces to see workspaces you can select.";
+var ARCHIVED_PROJECT_NOT_AVAILABLE = "That workspace is closed and cannot be selected. Run cswarm workspaces to see live workspaces you can select.";
 function compareText(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -27767,8 +27775,8 @@ var WorkspaceResolutionError = class extends WorkspaceCliError {
 };
 var WorkspaceUnavailableError = class extends WorkspaceCliError {
   code = "project_not_available";
-  constructor() {
-    super(PROJECT_NOT_AVAILABLE);
+  constructor(message = PROJECT_NOT_AVAILABLE) {
+    super(message);
     this.name = "WorkspaceUnavailableError";
   }
   structured() {
@@ -27872,41 +27880,41 @@ function cloudWorkspaceDirectory(target2, fetcher = fetch) {
           "workspaces",
           {
             select: "workspace_id,name,archived_at",
+            archived_at: "is.null",
             order: "workspace_id.asc"
           },
           fetcher
         )
       ]);
-      const names = /* @__PURE__ */ new Map();
+      const roles = /* @__PURE__ */ new Map();
+      for (const row of membershipRows) {
+        const workspaceId2 = checkedUuid(row.workspace_id, "workspace_id");
+        roles.set(workspaceId2, checkedRole(row.role));
+      }
+      const result = [];
       for (const row of workspaceRows) {
         const workspaceId2 = checkedUuid(row.workspace_id, "workspace_id");
         const archivedAt = checkedNullableTimestamp(
           row.archived_at,
           "archived_at"
         );
-        names.set(workspaceId2, {
+        if (archivedAt !== null) continue;
+        const role = roles.get(workspaceId2);
+        if (!role) {
+          throw new Error(
+            "workspace read omitted the current user's live membership"
+          );
+        }
+        result.push({
+          workspace_id: workspaceId2,
           name: sanitizeDisplayLabel(
             checkedString(row.name, "workspace name"),
             "Unnamed workspace"
           ),
-          archived: archivedAt !== null
+          role,
+          archived: false
         });
       }
-      const result = membershipRows.map((row) => {
-        const workspaceId2 = checkedUuid(row.workspace_id, "workspace_id");
-        const project = names.get(workspaceId2);
-        if (!project) {
-          throw new Error(
-            "workspace read omitted a workspace for a live membership"
-          );
-        }
-        return {
-          workspace_id: workspaceId2,
-          name: project.name,
-          role: checkedRole(row.role),
-          archived: project.archived
-        };
-      });
       return sortWorkspaces(result);
     },
     async status(session, workspaceId2) {
@@ -27961,6 +27969,9 @@ function cloudWorkspaceDirectory(target2, fetcher = fetch) {
           you: userId === session.userId
         };
       });
+      if (!members.some((member) => member.you)) {
+        throw new WorkspaceUnavailableError();
+      }
       const memberNames = new Map(
         members.map((member) => [member.user_id, member.name])
       );
@@ -28086,6 +28097,32 @@ async function clearWorkspaceDefault(store2, userId, expectedWorkspaceId) {
     return true;
   });
 }
+async function updateWorkspaceDefaultAfterClose(store2, userId, closedWorkspaceId, workspaces) {
+  return await store2.withLock(async () => {
+    const current = await store2.readProfile();
+    if (current.userId !== userId || current.workspaceId !== closedWorkspaceId) {
+      return {
+        closedWasSelected: false,
+        nextWorkspace: null,
+        selectedWorkspaceId: current.userId === userId ? current.workspaceId : null
+      };
+    }
+    const nextWorkspace = sortWorkspaces(workspaces).find(
+      (workspace) => workspace.workspace_id !== closedWorkspaceId && !workspace.archived
+    ) ?? null;
+    await store2.writeProfile({
+      ...current,
+      workspaceId: nextWorkspace?.workspace_id ?? null,
+      principalId: null,
+      principalName: null
+    });
+    return {
+      closedWasSelected: true,
+      nextWorkspace,
+      selectedWorkspaceId: nextWorkspace?.workspace_id ?? null
+    };
+  });
+}
 function workspaceOverride(explicit, environmental) {
   if (explicit !== void 0) {
     if (!UUID_RE6.test(explicit)) {
@@ -28144,6 +28181,14 @@ async function resolveWorkspace(options) {
   throw new WorkspaceResolutionError(workspaces);
 }
 async function selectWorkspace(selector, workspaces, store2, userId) {
+  const selected = resolveWorkspaceSelector(selector, workspaces);
+  if (selected.archived) {
+    throw new WorkspaceUnavailableError(ARCHIVED_PROJECT_NOT_AVAILABLE);
+  }
+  await writeWorkspaceDefault(store2, userId, selected.workspace_id);
+  return selected;
+}
+function resolveWorkspaceSelector(selector, workspaces) {
   const sorted = sortWorkspaces(workspaces);
   let selected;
   if (UUID_RE6.test(selector)) {
@@ -28162,7 +28207,6 @@ async function selectWorkspace(selector, workspaces, store2, userId) {
     selected = matches[0];
   }
   if (!selected) throw new WorkspaceUnavailableError();
-  await writeWorkspaceDefault(store2, userId, selected.workspace_id);
   return selected;
 }
 function holderLabel(holder) {
@@ -28181,13 +28225,8 @@ function relativeExpiry(expiry, now = Date.now()) {
   const amount = relativeMagnitude(remaining);
   return remaining >= 0 ? `expires in ${amount}` : `expired ${amount} ago`;
 }
-var ARCHIVE_NOT_ENFORCED_CODE = "workspace_archive_not_enforced";
-var ARCHIVE_NOT_ENFORCED_MESSAGE = "Archiving a workspace does not restrict what members or their agents can do in it: an archived workspace stays selectable, and commands against it still succeed while your membership is live. Removing a workspace from this list means ending your membership, which this CLI cannot do \u2014 ask whoever runs the workspace.";
 function archiveKnownGaps() {
-  return [{
-    code: ARCHIVE_NOT_ENFORCED_CODE,
-    message: ARCHIVE_NOT_ENFORCED_MESSAGE
-  }];
+  return [];
 }
 function renderWorkspaces(workspaces, currentWorkspaceId) {
   if (workspaces.length === 0) {
@@ -28211,9 +28250,6 @@ function renderWorkspaces(workspaces, currentWorkspaceId) {
       "No workspace is selected. Run cswarm use <full-id|exact-name>."
     );
   }
-  if (workspaces.some((workspace) => workspace.archived)) {
-    lines.push(ARCHIVE_NOT_ENFORCED_MESSAGE);
-  }
   return lines.join("\n");
 }
 function renderStatus(options) {
@@ -32281,7 +32317,8 @@ var STATES = /* @__PURE__ */ new Set([
   "done",
   "expired",
   "failed",
-  "observed"
+  "observed",
+  "routed_main"
 ]);
 var RELATIONS = /* @__PURE__ */ new Set(["same_owner", "cross_owner", "unknown"]);
 var SIGNAL_KINDS2 = /* @__PURE__ */ new Set(["ask", "note"]);
@@ -32344,7 +32381,7 @@ function parseListenerEffectRecord(raw, expectedId) {
   }
   if (row.version === 1) {
     rejectUnknownKeys(row, V1_EFFECT_KEYS);
-    if ("signalKind" in row || row.state === "observed") {
+    if ("signalKind" in row || row.state === "observed" || row.state === "routed_main") {
       throw new Error("stored listener effect is malformed");
     }
     return upcastV1Ask(row);
@@ -32387,6 +32424,10 @@ function parseV2Record(row) {
     if (typeof row.commandId !== "string" || row.commandId !== "" || row.state !== "observed" || row.promptAttempts !== 0 || row.postAttempts !== 0 || row.replyBody !== null || row.replyTruncated !== false || row.replySignalId !== null || row.failureCode !== null) {
       throw new Error("stored listener effect is malformed");
     }
+  } else if (row.state === "routed_main") {
+    if (row.commandId !== "" || row.promptAttempts !== 0 || row.postAttempts !== 0 || row.replyBody !== null || row.replyTruncated !== false || row.replySignalId !== null || row.failureCode !== null) {
+      throw new Error("stored listener effect is malformed");
+    }
   } else {
     if (typeof row.commandId !== "string" || !COMMAND_ID_RE2.test(row.commandId) || row.state === "observed") {
       throw new Error("stored listener effect is malformed");
@@ -32449,6 +32490,14 @@ function newObservedNoteRecord(input) {
     updatedAt: input.updatedAt
   };
 }
+function newRoutedMainAskRecord(input) {
+  const base = newObservedNoteRecord(input);
+  return {
+    ...base,
+    signalKind: "ask",
+    state: "routed_main"
+  };
+}
 function rejectWrite() {
   throw new Error("listener effect write rejected");
 }
@@ -34178,6 +34227,186 @@ var DeliveryCommandClient = class {
   }
 };
 
+// src/listener/main-routing.ts
+var import_node_path14 = require("node:path");
+var UUID_RE11 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var MAX_QUEUE_BYTES = 1024 * 1024;
+var QUEUE_FILE = "pending-for-main.json";
+var QUEUE_LOCK = "pending-for-main";
+var LISTENER_MAIN_QUEUE_MAX = 200;
+var LISTENER_DEFER_OVER_MIN = 1;
+var LISTENER_DEFER_OVER_MAX = 1e4;
+function decideListenerRoute(route, threshold, bodyLength) {
+  if (!Number.isSafeInteger(bodyLength) || bodyLength < 0) {
+    throw new Error("listener route body length must be a non-negative integer");
+  }
+  if (route === "worker") {
+    if (threshold !== null) {
+      throw new Error("worker route cannot have a split threshold");
+    }
+    return "worker";
+  }
+  if (route === "main") {
+    if (threshold !== null) {
+      throw new Error("main route cannot have a split threshold");
+    }
+    return "main";
+  }
+  if (route !== "split") {
+    throw new Error("listener route mode is invalid");
+  }
+  if (threshold === null || !Number.isSafeInteger(threshold) || threshold < LISTENER_DEFER_OVER_MIN || threshold > LISTENER_DEFER_OVER_MAX) {
+    throw new Error("split route threshold is invalid");
+  }
+  return bodyLength > threshold ? "main" : "worker";
+}
+function checkedTimestamp2(value) {
+  return typeof value === "string" && Number.isFinite(Date.parse(value));
+}
+function parseEntry(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("stored pending-for-main entry is malformed");
+  }
+  const row = value;
+  const allowed = /* @__PURE__ */ new Set([
+    "signalId",
+    "workspaceId",
+    "principalId",
+    "fromId",
+    "fromKind",
+    "senderName",
+    "body",
+    "createdAt",
+    "queuedAt"
+  ]);
+  if (Object.keys(row).some((key2) => !allowed.has(key2))) {
+    throw new Error("stored pending-for-main entry is malformed");
+  }
+  if (typeof row.signalId !== "string" || !UUID_RE11.test(row.signalId) || typeof row.workspaceId !== "string" || !UUID_RE11.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE11.test(row.principalId) || typeof row.fromId !== "string" || !UUID_RE11.test(row.fromId) || row.fromKind !== "user" && row.fromKind !== "agent" || !(row.senderName === null || typeof row.senderName === "string" && row.senderName.length <= 200) || typeof row.body !== "string" || row.body.length < 1 || row.body.length > 2e3 || !checkedTimestamp2(row.createdAt) || !checkedTimestamp2(row.queuedAt)) {
+    throw new Error("stored pending-for-main entry is malformed");
+  }
+  return {
+    signalId: row.signalId.toLowerCase(),
+    workspaceId: row.workspaceId.toLowerCase(),
+    principalId: row.principalId.toLowerCase(),
+    fromId: row.fromId.toLowerCase(),
+    fromKind: row.fromKind,
+    senderName: row.senderName,
+    body: row.body,
+    createdAt: row.createdAt,
+    queuedAt: row.queuedAt
+  };
+}
+function parseFile(raw) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new Error("stored pending-for-main queue is malformed");
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("stored pending-for-main queue is malformed");
+  }
+  const row = value;
+  if (Object.keys(row).some(
+    (key2) => key2 !== "version" && key2 !== "entries" && key2 !== "droppedCount"
+  ) || row.version !== 1 || !Array.isArray(row.entries) || row.entries.length > LISTENER_MAIN_QUEUE_MAX || !(row.droppedCount === void 0 || typeof row.droppedCount === "number" && Number.isSafeInteger(row.droppedCount) && row.droppedCount >= 0)) {
+    throw new Error("stored pending-for-main queue is malformed");
+  }
+  const entries = row.entries.map(parseEntry);
+  if (new Set(entries.map((entry) => entry.signalId)).size !== entries.length) {
+    throw new Error("stored pending-for-main queue repeats a signal");
+  }
+  return { version: 1, entries, droppedCount: row.droppedCount ?? 0 };
+}
+var FilePendingMainQueue = class {
+  path;
+  directory;
+  constructor(instanceDirectory) {
+    if (!(0, import_node_path14.isAbsolute)(instanceDirectory)) {
+      throw new Error("pending-for-main directory must be absolute");
+    }
+    this.directory = instanceDirectory;
+    this.path = (0, import_node_path14.join)(instanceDirectory, QUEUE_FILE);
+  }
+  async readUnlocked() {
+    const raw = await readSecureJsonFile(this.path, MAX_QUEUE_BYTES);
+    return raw === null ? { version: 1, entries: [], droppedCount: 0 } : parseFile(raw);
+  }
+  async writeUnlocked(file) {
+    const canonical = parseFile(JSON.stringify(file));
+    await writeSecureJsonFile(this.path, JSON.stringify(canonical));
+  }
+  async read() {
+    return [...(await this.readUnlocked()).entries];
+  }
+  async count() {
+    return (await this.readUnlocked()).entries.length;
+  }
+  async stats() {
+    const file = await this.readUnlocked();
+    return { count: file.entries.length, droppedCount: file.droppedCount };
+  }
+  async enqueue(entry) {
+    const checked = parseEntry(entry);
+    return await withFileLock(this.directory, QUEUE_LOCK, async () => {
+      const file = await this.readUnlocked();
+      if (file.entries.some((item) => item.signalId === checked.signalId)) {
+        return {
+          count: file.entries.length,
+          added: false,
+          droppedOldest: false,
+          droppedCount: file.droppedCount
+        };
+      }
+      file.entries.push(checked);
+      const droppedOldest = file.entries.length > LISTENER_MAIN_QUEUE_MAX;
+      if (droppedOldest) {
+        file.entries.shift();
+        file.droppedCount += 1;
+      }
+      await this.writeUnlocked(file);
+      return {
+        count: file.entries.length,
+        added: true,
+        droppedOldest,
+        droppedCount: file.droppedCount
+      };
+    });
+  }
+  async remove(signalIds, lockTimeoutMs) {
+    if (signalIds.size === 0) return await this.count();
+    return await withFileLock(this.directory, QUEUE_LOCK, async () => {
+      const file = await this.readUnlocked();
+      const entries = file.entries.filter((entry) => !signalIds.has(entry.signalId));
+      if (entries.length !== file.entries.length) {
+        await this.writeUnlocked({
+          version: 1,
+          entries,
+          droppedCount: file.droppedCount
+        });
+      }
+      return entries.length;
+    }, lockTimeoutMs === void 0 ? {} : { timeoutMs: lockTimeoutMs });
+  }
+};
+function pendingMainEntry(signal, principalId, provenance, now) {
+  if (signal.kind !== "ask") {
+    throw new Error("only directed asks can enter the pending-for-main queue");
+  }
+  return parseEntry({
+    signalId: signal.id,
+    workspaceId: signal.workspace_id,
+    principalId,
+    fromId: signal.from,
+    fromKind: signal.from_kind,
+    senderName: provenance.senderName,
+    body: signal.body,
+    createdAt: signal.created_at,
+    queuedAt: new Date(now).toISOString()
+  });
+}
+
 // src/listener/runtime.ts
 var LISTENER_PAGE_LIMIT = 100;
 var LISTENER_IDLE_POLL_MS = 2e3;
@@ -34188,7 +34417,7 @@ var LISTENER_REPLY_ONLY_MINIMUM_MS = SIGNAL_REQUEST_TIMEOUT_MS + LISTENER_ACK_ON
 var LISTENER_PROMPT_START_MINIMUM_MS = SIGNAL_READ_TIMEOUT_MS + ACP_DEFAULT_REQUEST_TIMEOUT_MS + LISTENER_REPLY_ONLY_MINIMUM_MS;
 var LISTENER_DELIVERY_RETRY_INITIAL_MS = 500;
 var LISTENER_DELIVERY_RETRY_MAX_MS = 3e4;
-var UUID_RE11 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE12 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var ListenerCapabilityError = class extends Error {
   code;
   constructor(code, message) {
@@ -34267,6 +34496,9 @@ function ackForTerminalEffect(record, now) {
   if (record.state === "observed" && record.signalKind === "note") {
     return { outcome: "observed", lastErrorCode: null };
   }
+  if (record.state === "routed_main" && record.signalKind === "ask") {
+    return { outcome: "observed", lastErrorCode: null };
+  }
   if (record.state === "expired" && record.signalKind === "ask" && Date.parse(record.askUntil) <= now()) {
     return { outcome: "expired", lastErrorCode: null };
   }
@@ -34286,7 +34518,7 @@ function ackForTerminalEffect(record, now) {
   return { outcome: "failed_terminal", lastErrorCode: "local_effect_failed" };
 }
 function isAckableTerminalEffect(record, now) {
-  return record.state === "done" && record.signalKind === "ask" && !!record.replySignalId || record.state === "observed" && record.signalKind === "note" || record.state === "expired" && record.signalKind === "ask" && Date.parse(record.askUntil) <= now() || record.state === "failed" && record.signalKind === "ask";
+  return record.state === "done" && record.signalKind === "ask" && !!record.replySignalId || record.state === "observed" && record.signalKind === "note" || record.state === "routed_main" && record.signalKind === "ask" || record.state === "expired" && record.signalKind === "ask" && Date.parse(record.askUntil) <= now() || record.state === "failed" && record.signalKind === "ask";
 }
 function effectPhaseBudget(record) {
   if (record === null || record.state === "received" || record.state === "prompting") {
@@ -34449,6 +34681,8 @@ async function runListenerRuntime(options) {
   const random = options.random ?? Math.random;
   const pageLimit = options.pageLimit ?? LISTENER_PAGE_LIMIT;
   const pollMs = options.pollMs ?? LISTENER_IDLE_POLL_MS;
+  const routeMode = options.routeMode ?? "worker";
+  const deferOverChars = options.deferOverChars ?? null;
   const abort = options.signal;
   const hasInstanceId = options.listenerInstanceId !== void 0;
   const hasJournal = options.deliveryJournal !== void 0;
@@ -34458,7 +34692,7 @@ async function runListenerRuntime(options) {
       new Error("listener instance id and delivery journal must be configured together")
     );
   }
-  if (hasInstanceId && !UUID_RE11.test(options.listenerInstanceId)) {
+  if (hasInstanceId && !UUID_RE12.test(options.listenerInstanceId)) {
     return await closeBeforeStart(
       options.model,
       new Error("listener instance id must be a UUID")
@@ -34470,6 +34704,14 @@ async function runListenerRuntime(options) {
       new Error("an injected delivery client requires durable delivery configuration")
     );
   }
+  try {
+    decideListenerRoute(routeMode, deferOverChars, 0);
+    if (routeMode !== "worker" && options.pendingMainQueue === void 0) {
+      throw new Error("main listener routing requires a pending queue");
+    }
+  } catch (error) {
+    return await closeBeforeStart(options.model, asError2(error));
+  }
   let initialJournal = null;
   if (hasJournal) {
     try {
@@ -34522,6 +34764,52 @@ async function runListenerRuntime(options) {
     ...options.resolveSenderProvenance === void 0 ? {} : { resolveSenderProvenance: options.resolveSenderProvenance },
     isCredentialFailure: isCredentialLoss
   });
+  const routeAskToMain = async (signal) => {
+    let provenance = {
+      senderName: null,
+      operatorId: null,
+      operatorName: null
+    };
+    if (options.resolveSenderProvenance) {
+      try {
+        provenance = await options.resolveSenderProvenance(signal, {
+          ...abort ? { signal: abort } : {},
+          deadlineMs: now() + SIGNAL_READ_TIMEOUT_MS
+        });
+      } catch {
+      }
+    }
+    const queued = await options.pendingMainQueue.enqueue(
+      pendingMainEntry(signal, options.principalId, provenance, now())
+    );
+    options.onEvent?.({
+      type: "main_queue",
+      signalId: signal.id,
+      pendingCount: queued.count,
+      droppedOldest: queued.droppedOldest,
+      droppedCount: queued.droppedCount,
+      ts: eventTime(now)
+    });
+    const existing = await options.store.read(signal.id);
+    if (existing !== null) {
+      if (!sameEffectSignal(existing, signal) || existing.state !== "routed_main") {
+        throw new Error("stored listener effect does not match the main-routed ask");
+      }
+      return existing;
+    }
+    await options.store.write(newRoutedMainAskRecord({
+      signalId: signal.id,
+      body: signal.body,
+      until: signal.until,
+      senderOwnerRelation: signal.sender_owner_relation ?? "unknown",
+      updatedAt: eventTime(now)
+    }));
+    const persisted = await options.store.read(signal.id);
+    if (persisted === null || !sameEffectSignal(persisted, signal) || persisted.state !== "routed_main") {
+      throw new Error("main-routed listener effect could not be verified");
+    }
+    return persisted;
+  };
   let malformedWarnings = 0;
   const readPage = options.readPage ?? (async (input) => await readAgentSignalPage(
     options.target,
@@ -34687,11 +34975,13 @@ async function runListenerRuntime(options) {
         break;
       }
       if (!ready) {
-        try {
-          await options.model.start();
-        } catch (error) {
-          stop = { reason: "fatal", error: asError2(error) };
-          break;
+        if (routeMode !== "main") {
+          try {
+            await options.model.start();
+          } catch (error) {
+            stop = { reason: "fatal", error: asError2(error) };
+            break;
+          }
         }
         ready = true;
         options.onEvent?.({
@@ -34993,56 +35283,81 @@ async function runListenerRuntime(options) {
               ts: eventTime(now)
             });
           } else if (signal.kind === "ask") {
-            let processAttempt = 0;
-            while (terminal === null) {
-              const before = await options.store.read(signal.id);
-              if (before !== null && !sameEffectSignal(before, signal)) {
-                throw new Error("stored listener effect does not match the authoritative delivery");
-              }
-              const requiredBudget = effectPhaseBudget(before);
-              if (leasedUntilMs <= now() + requiredBudget) {
-                await sleep2(
-                  Math.max(
-                    0,
-                    leasedUntilMs + LISTENER_DELIVERY_SAFETY_MARGIN_MS - now()
-                  ),
-                  abort
-                );
-                if (abort?.aborted) {
-                  stop = { reason: "cancelled" };
-                  break;
-                }
-                if (now() >= leasedUntilMs + LISTENER_DELIVERY_SAFETY_MARGIN_MS) {
-                  await journal.clearActive(eventTime(now));
-                  after = null;
-                }
-                break;
-              }
-              const processed = await engine.process(signal);
-              const effect = "record" in processed ? processed.record : null;
+            const decision = decideListenerRoute(
+              routeMode,
+              deferOverChars,
+              signal.body.length
+            );
+            options.onEvent?.({
+              type: "routing_decision",
+              signalId: signal.id,
+              routeMode,
+              decision,
+              threshold: deferOverChars,
+              bodyLength: signal.body.length,
+              ts: eventTime(now)
+            });
+            if (decision === "main") {
+              terminal = await routeAskToMain(signal);
               options.onEvent?.({
                 type: "effect",
                 signalId: signal.id,
-                status: processed.status,
-                failureCode: effect?.failureCode ?? null,
+                status: "routed_main",
+                failureCode: null,
                 ts: eventTime(now)
               });
-              if (processed.status === "ignored") {
-                throw new Error("claimed delivery was ignored by the listener engine");
-              }
-              if (processed.status === "retry_pending") {
-                processAttempt += 1;
-                await sleep2(
-                  deliveryRetryDelay(processAttempt, null, random),
-                  abort
-                );
-                if (abort?.aborted) {
-                  stop = { reason: "cancelled" };
+            } else {
+              let processAttempt = 0;
+              while (terminal === null) {
+                const before = await options.store.read(signal.id);
+                if (before !== null && !sameEffectSignal(before, signal)) {
+                  throw new Error("stored listener effect does not match the authoritative delivery");
+                }
+                const requiredBudget = effectPhaseBudget(before);
+                if (leasedUntilMs <= now() + requiredBudget) {
+                  await sleep2(
+                    Math.max(
+                      0,
+                      leasedUntilMs + LISTENER_DELIVERY_SAFETY_MARGIN_MS - now()
+                    ),
+                    abort
+                  );
+                  if (abort?.aborted) {
+                    stop = { reason: "cancelled" };
+                    break;
+                  }
+                  if (now() >= leasedUntilMs + LISTENER_DELIVERY_SAFETY_MARGIN_MS) {
+                    await journal.clearActive(eventTime(now));
+                    after = null;
+                  }
                   break;
                 }
-                continue;
+                const processed = await engine.process(signal);
+                const effect = "record" in processed ? processed.record : null;
+                options.onEvent?.({
+                  type: "effect",
+                  signalId: signal.id,
+                  status: processed.status,
+                  failureCode: effect?.failureCode ?? null,
+                  ts: eventTime(now)
+                });
+                if (processed.status === "ignored") {
+                  throw new Error("claimed delivery was ignored by the listener engine");
+                }
+                if (processed.status === "retry_pending") {
+                  processAttempt += 1;
+                  await sleep2(
+                    deliveryRetryDelay(processAttempt, null, random),
+                    abort
+                  );
+                  if (abort?.aborted) {
+                    stop = { reason: "cancelled" };
+                    break;
+                  }
+                  continue;
+                }
+                terminal = processed.record;
               }
-              terminal = processed.record;
             }
           } else {
             throw new Error("claimed delivery has an unsupported signal kind");
@@ -35115,6 +35430,31 @@ async function runListenerRuntime(options) {
         let result;
         try {
           await readOrReplaceUnreadableEffect(options.store, signal, now);
+          const decision = decideListenerRoute(
+            routeMode,
+            deferOverChars,
+            signal.body.length
+          );
+          options.onEvent?.({
+            type: "routing_decision",
+            signalId: signal.id,
+            routeMode,
+            decision,
+            threshold: deferOverChars,
+            bodyLength: signal.body.length,
+            ts: eventTime(now)
+          });
+          if (decision === "main") {
+            const record2 = await routeAskToMain(signal);
+            options.onEvent?.({
+              type: "effect",
+              signalId: signal.id,
+              status: "routed_main",
+              failureCode: null,
+              ts: eventTime(now)
+            });
+            continue;
+          }
           result = await engine.process(signal);
         } catch (error) {
           if (abort?.aborted) {
@@ -35174,8 +35514,8 @@ async function runListenerRuntime(options) {
 // src/listener/control.ts
 var import_node_net = require("node:net");
 var import_promises9 = require("node:fs/promises");
-var import_node_path14 = require("node:path");
-var UUID_RE12 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var import_node_path15 = require("node:path");
+var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var MAX_STATUS_BYTES = 16 * 1024;
 var MAX_CONTROL_BYTES = 8 * 1024;
 var CONTROL_TIMEOUT_MS = 2e3;
@@ -35189,19 +35529,19 @@ var ListenerAlreadyRunningError = class extends Error {
 };
 function listenerPaths(options) {
   const root = options.stateDirectory ?? defaultListenerStateDirectory();
-  if (!(0, import_node_path14.isAbsolute)(root)) {
+  if (!(0, import_node_path15.isAbsolute)(root)) {
     throw new Error("listener state directory must be absolute");
   }
   const key2 = listenerInstanceKey(options);
-  const instanceDirectory = (0, import_node_path14.join)(root, key2);
+  const instanceDirectory = (0, import_node_path15.join)(root, key2);
   const uid2 = typeof process.getuid === "function" ? process.getuid() : process.pid;
-  const controlDirectory = process.platform === "win32" ? "" : (0, import_node_path14.join)("/tmp", `cswarm-control-${uid2}`);
-  const socketPath = process.platform === "win32" ? `\\\\.\\pipe\\cswarm-${key2}` : (0, import_node_path14.join)(controlDirectory, `${key2.slice(0, 32)}.sock`);
+  const controlDirectory = process.platform === "win32" ? "" : (0, import_node_path15.join)("/tmp", `cswarm-control-${uid2}`);
+  const socketPath = process.platform === "win32" ? `\\\\.\\pipe\\cswarm-${key2}` : (0, import_node_path15.join)(controlDirectory, `${key2.slice(0, 32)}.sock`);
   return {
     key: key2,
     instanceDirectory,
-    statusPath: (0, import_node_path14.join)(instanceDirectory, "status.json"),
-    logPath: (0, import_node_path14.join)(instanceDirectory, "events.ndjson"),
+    statusPath: (0, import_node_path15.join)(instanceDirectory, "status.json"),
+    logPath: (0, import_node_path15.join)(instanceDirectory, "events.ndjson"),
     socketPath
   };
 }
@@ -35229,7 +35569,11 @@ var STATUS_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "lastTerminalDeliveryFailureCount",
   "lastTerminalDeliveryFailureAt",
   "lastClaimAt",
-  "lastAckAt"
+  "lastAckAt",
+  "routeMode",
+  "deferOverChars",
+  "pendingForMainCount",
+  "droppedForMainCount"
 ]);
 var STATUS_SENSITIVE_KEYS = /* @__PURE__ */ new Set([
   "leaseId",
@@ -35274,12 +35618,17 @@ function parseStatus(raw) {
       throw new Error("stored listener status is malformed");
     }
   }
-  const nullableUuid2 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE12.test(candidate);
+  const nullableUuid2 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE13.test(candidate);
   const nullableCount = (candidate) => candidate === null || typeof candidate === "number" && Number.isSafeInteger(candidate) && candidate >= 0;
   const nullableTimestamp = (candidate) => candidate === null || typeof candidate === "string" && Number.isFinite(Date.parse(candidate));
-  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE12.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE12.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE12.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path14.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp(row.lastAckAt))) {
+  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE13.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE13.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE13.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path15.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0)) {
     throw new Error("stored listener status is malformed");
   }
+  const routeMode = row.routeMode ?? "worker";
+  const deferOverChars = row.deferOverChars ?? null;
+  if (routeMode === "split" && deferOverChars === null || routeMode !== "split" && deferOverChars !== null) {
+    throw new Error("stored listener status routing fields are malformed");
+  }
   return {
     ...row,
     deliveryMode: row.deliveryMode ?? null,
@@ -35288,7 +35637,11 @@ function parseStatus(raw) {
     lastTerminalDeliveryFailureAt: row.lastTerminalDeliveryFailureAt ?? null,
     lastClaimAt: row.lastClaimAt ?? null,
     lastAckAt: row.lastAckAt ?? null,
-    lastWorkerStderrTail: row.lastWorkerStderrTail ?? null
+    lastWorkerStderrTail: row.lastWorkerStderrTail ?? null,
+    routeMode,
+    deferOverChars,
+    pendingForMainCount: row.pendingForMainCount ?? 0,
+    droppedForMainCount: row.droppedForMainCount ?? 0
   };
 }
 async function writeListenerStatus(paths, status) {
@@ -35330,7 +35683,13 @@ async function appendListenerEvent(paths, event) {
     // bounded by the supervisor, and the prompt-turn budget behind a timeout.
     // Local log only — this file never feeds a server payload.
     "worker_stderr_tail",
-    "turn_budget_ms"
+    "turn_budget_ms",
+    "route_mode",
+    "route_decision",
+    "defer_over_chars",
+    "body_length",
+    "pending_main_count",
+    "dropped_count"
   ]);
   const deliveryModes = /* @__PURE__ */ new Set(["durable_claim", "cursor_fallback"]);
   const deliveryOutcomes = /* @__PURE__ */ new Set([
@@ -35339,6 +35698,8 @@ async function appendListenerEvent(paths, event) {
     "expired",
     "failed_terminal"
   ]);
+  const routeModes = /* @__PURE__ */ new Set(["worker", "main", "split"]);
+  const routeDecisions = /* @__PURE__ */ new Set(["worker", "main"]);
   for (const [key2, value] of Object.entries(event)) {
     if (!allowed.has(key2)) {
       throw new Error(`listener event field is not allowed: ${key2}`);
@@ -35352,6 +35713,18 @@ async function appendListenerEvent(paths, event) {
     if (key2 === "outcome" && !(value === null || typeof value === "string" && deliveryOutcomes.has(value))) {
       throw new Error("listener event outcome is not allowed");
     }
+    if (key2 === "route_mode" && !(typeof value === "string" && routeModes.has(value))) {
+      throw new Error("listener event route mode is not allowed");
+    }
+    if (key2 === "route_decision" && !(typeof value === "string" && routeDecisions.has(value))) {
+      throw new Error("listener event route decision is not allowed");
+    }
+    if (key2 === "defer_over_chars" && !(value === null || typeof value === "number" && Number.isSafeInteger(value) && value >= 1 && value <= 1e4)) {
+      throw new Error("listener event split threshold is not allowed");
+    }
+    if ((key2 === "body_length" || key2 === "pending_main_count" || key2 === "dropped_count") && !(typeof value === "number" && Number.isSafeInteger(value) && value >= 0)) {
+      throw new Error("listener event main-route count is not allowed");
+    }
     if (key2 === "worker_stderr_tail" && !(typeof value === "string" && value.length > 0 && value.length <= 2048)) {
       throw new Error("listener event stderr tail is not allowed");
     }
@@ -35419,7 +35792,7 @@ function writeResponse(socket, response) {
 }
 async function startupLock(paths) {
   await ensureSecureStateDirectory(paths.instanceDirectory);
-  const lockPath = (0, import_node_path14.join)(paths.instanceDirectory, "starting.lock");
+  const lockPath = (0, import_node_path15.join)(paths.instanceDirectory, "starting.lock");
   const deadline = Date.now() + START_LOCK_WAIT_MS;
   while (Date.now() < deadline) {
     let handle;
@@ -35460,7 +35833,7 @@ async function startupLock(paths) {
 async function prepareSocket(paths) {
   if (process.platform !== "win32") {
     const uid2 = typeof process.getuid === "function" ? process.getuid() : process.pid;
-    const directory = (0, import_node_path14.join)("/tmp", `cswarm-control-${uid2}`);
+    const directory = (0, import_node_path15.join)("/tmp", `cswarm-control-${uid2}`);
     await ensureSecureStateDirectory(directory);
   }
   try {
@@ -35595,7 +35968,7 @@ async function queryListenerControl(paths, command2, timeoutMs = CONTROL_TIMEOUT
 
 // src/listener/supervisor.ts
 var import_node_crypto18 = require("node:crypto");
-var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE14 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var LISTENER_RESTART_MAX_ATTEMPTS = 5;
 var LISTENER_RESTART_INITIAL_MS = 1e3;
 var LISTENER_RESTART_MAX_MS = 6e4;
@@ -35683,6 +36056,10 @@ async function runListenerSupervisor(options) {
     lastTerminalDeliveryFailureAt: null,
     lastClaimAt: null,
     lastAckAt: null,
+    routeMode: options.routeMode ?? "worker",
+    deferOverChars: options.deferOverChars ?? null,
+    pendingForMainCount: 0,
+    droppedForMainCount: 0,
     logPath: options.paths.logPath
   };
   let writes = Promise.resolve();
@@ -35718,7 +36095,7 @@ async function runListenerSupervisor(options) {
     // before the socket can answer, before any status/event persistence.
     initialize: prepare ? async () => {
       const selected = await prepare(proposedInstanceId);
-      if (!selected || typeof selected !== "object" || typeof selected.instanceId !== "string" || !UUID_RE13.test(selected.instanceId)) {
+      if (!selected || typeof selected !== "object" || typeof selected.instanceId !== "string" || !UUID_RE14.test(selected.instanceId)) {
         throw new Error("listener prepare returned an invalid instance id");
       }
       status = { ...status, instanceId: selected.instanceId };
@@ -35868,6 +36245,36 @@ async function runListenerSupervisor(options) {
       });
       return;
     }
+    if (event.type === "routing_decision") {
+      log({
+        ts: event.ts,
+        event: "listener_routing_decision",
+        signal_id: event.signalId,
+        route_mode: event.routeMode,
+        route_decision: event.decision,
+        defer_over_chars: event.threshold,
+        body_length: event.bodyLength
+      });
+      return;
+    }
+    if (event.type === "main_queue") {
+      status = {
+        ...status,
+        pendingForMainCount: event.pendingCount,
+        droppedForMainCount: event.droppedCount,
+        lastSignalId: event.signalId,
+        updatedAt: event.ts
+      };
+      persist();
+      log({
+        ts: event.ts,
+        event: event.droppedOldest ? "listener_main_queue_oldest_dropped" : "listener_main_queue",
+        signal_id: event.signalId,
+        pending_main_count: event.pendingCount,
+        dropped_count: event.droppedOldest ? 1 : 0
+      });
+      return;
+    }
     const unknown = event;
     log({
       ts: typeof unknown.ts === "string" && Number.isFinite(Date.parse(unknown.ts)) ? unknown.ts : iso2(now),
@@ -36039,9 +36446,9 @@ async function waitForListenerReady(paths, options = {}) {
 }
 
 // src/listener/delivery-journal.ts
-var import_node_path15 = require("node:path");
+var import_node_path16 = require("node:path");
 var import_node_util2 = require("node:util");
-var UUID_RE14 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+var UUID_RE15 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var COMMAND_ID_RE3 = /^[A-Za-z0-9_-]{8,72}$/;
 var SIGNAL_FINGERPRINT_RE = /^[0-9a-f]{64}$/;
 var MAX_JOURNAL_BYTES = 8192;
@@ -36135,7 +36542,7 @@ var ALLOWED_ERROR_CODES = /* @__PURE__ */ new Set([
   "credential_unavailable"
 ]);
 function claimCommandId(listenerInstanceId, claimOrdinal) {
-  if (!UUID_RE14.test(listenerInstanceId)) {
+  if (!UUID_RE15.test(listenerInstanceId)) {
     throw new Error("stored delivery journal is malformed");
   }
   if (!Number.isSafeInteger(claimOrdinal) || claimOrdinal < 0) {
@@ -36150,7 +36557,7 @@ function claimCommandId(listenerInstanceId, claimOrdinal) {
   return id;
 }
 function ackCommandId(leaseId) {
-  if (!UUID_RE14.test(leaseId)) {
+  if (!UUID_RE15.test(leaseId)) {
     throw new Error("stored delivery journal is malformed");
   }
   const cleanLease = leaseId.toLowerCase().replace(/-/g, "");
@@ -36233,19 +36640,19 @@ function parseJournalRecord(raw, expectedWorkspaceId, expectedPrincipalId) {
   if (row.version !== 1) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.workspaceId !== "string" || !UUID_RE14.test(row.workspaceId) || row.workspaceId !== row.workspaceId.toLowerCase()) {
+  if (typeof row.workspaceId !== "string" || !UUID_RE15.test(row.workspaceId) || row.workspaceId !== row.workspaceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (expectedWorkspaceId && row.workspaceId !== expectedWorkspaceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.principalId !== "string" || !UUID_RE14.test(row.principalId) || row.principalId !== row.principalId.toLowerCase()) {
+  if (typeof row.principalId !== "string" || !UUID_RE15.test(row.principalId) || row.principalId !== row.principalId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (expectedPrincipalId && row.principalId !== expectedPrincipalId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.listenerInstanceId !== "string" || !UUID_RE14.test(row.listenerInstanceId) || row.listenerInstanceId !== row.listenerInstanceId.toLowerCase()) {
+  if (typeof row.listenerInstanceId !== "string" || !UUID_RE15.test(row.listenerInstanceId) || row.listenerInstanceId !== row.listenerInstanceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (!Number.isSafeInteger(row.nextClaimOrdinal) || row.nextClaimOrdinal < 0) {
@@ -36309,10 +36716,10 @@ function parseJournalRecord(raw, expectedWorkspaceId, expectedPrincipalId) {
     if (active.claimLastAttemptAt === null) {
       throw new Error("stored delivery journal is malformed");
     }
-    if (typeof active.signalId !== "string" || !UUID_RE14.test(active.signalId) || active.signalId !== active.signalId.toLowerCase()) {
+    if (typeof active.signalId !== "string" || !UUID_RE15.test(active.signalId) || active.signalId !== active.signalId.toLowerCase()) {
       throw new Error("stored delivery journal is malformed");
     }
-    if (typeof active.leaseId !== "string" || !UUID_RE14.test(active.leaseId) || active.leaseId !== active.leaseId.toLowerCase()) {
+    if (typeof active.leaseId !== "string" || !UUID_RE15.test(active.leaseId) || active.leaseId !== active.leaseId.toLowerCase()) {
       throw new Error("stored delivery journal is malformed");
     }
     if (!isValidIsoTimestamp(active.leasedUntil) || Date.parse(active.leasedUntil) <= Date.parse(active.claimCreatedAt)) {
@@ -36384,7 +36791,7 @@ var FileListenerDeliveryJournal = class {
       ["profileId", "workspaceId", "principalId"],
       "delivery journal configuration rejected"
     );
-    if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE14.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE14.test(options.principalId)) {
+    if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE15.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE15.test(options.principalId)) {
       throw new Error("delivery journal configuration rejected");
     }
     if (options.stateDirectory !== void 0) {
@@ -36399,11 +36806,11 @@ var FileListenerDeliveryJournal = class {
       stateDirectory: options.stateDirectory
     });
     const root = this.options.stateDirectory ?? defaultListenerStateDirectory();
-    if (!(0, import_node_path15.isAbsolute)(root)) {
+    if (!(0, import_node_path16.isAbsolute)(root)) {
       throw new Error("delivery journal configuration rejected");
     }
-    this.instanceDirectory = (0, import_node_path15.join)(root, listenerInstanceKey(this.options));
-    this.journalPath = (0, import_node_path15.join)(this.instanceDirectory, "delivery-journal.json");
+    this.instanceDirectory = (0, import_node_path16.join)(root, listenerInstanceKey(this.options));
+    this.journalPath = (0, import_node_path16.join)(this.instanceDirectory, "delivery-journal.json");
   }
   async readRecordUnlocked() {
     let raw;
@@ -36505,7 +36912,7 @@ var FileListenerDeliveryJournal = class {
       ["signalId", "leaseId", "leasedUntil"],
       "delivery journal mutation rejected"
     );
-    if (typeof input.signalId !== "string" || !UUID_RE14.test(input.signalId) || typeof input.leaseId !== "string" || !UUID_RE14.test(input.leaseId) || !isValidIsoTimestamp(input.leasedUntil) || input.signalFingerprint !== void 0 && (typeof input.signalFingerprint !== "string" || !SIGNAL_FINGERPRINT_RE.test(input.signalFingerprint))) {
+    if (typeof input.signalId !== "string" || !UUID_RE15.test(input.signalId) || typeof input.leaseId !== "string" || !UUID_RE15.test(input.leaseId) || !isValidIsoTimestamp(input.leasedUntil) || input.signalFingerprint !== void 0 && (typeof input.signalFingerprint !== "string" || !SIGNAL_FINGERPRINT_RE.test(input.signalFingerprint))) {
       throw new Error("delivery journal mutation rejected");
     }
     const canonicalSignalId = input.signalId.toLowerCase();
@@ -36637,7 +37044,7 @@ async function openListenerDeliveryJournal(options) {
     ["profileId", "workspaceId", "principalId", "proposedListenerInstanceId"],
     "delivery journal configuration rejected"
   );
-  if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE14.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE14.test(options.principalId) || typeof options.proposedListenerInstanceId !== "string" || !UUID_RE14.test(options.proposedListenerInstanceId)) {
+  if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE15.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE15.test(options.principalId) || typeof options.proposedListenerInstanceId !== "string" || !UUID_RE15.test(options.proposedListenerInstanceId)) {
     throw new Error("delivery journal configuration rejected");
   }
   if (options.stateDirectory !== void 0) {
@@ -36732,9 +37139,9 @@ async function openListenerDeliveryJournal(options) {
 
 // src/listener/detach.ts
 var import_node_child_process7 = require("node:child_process");
-var import_node_path16 = require("node:path");
+var import_node_path17 = require("node:path");
 function isNativeAbsolutePath(value, platform = process.platform) {
-  return platform === "win32" ? import_node_path16.win32.isAbsolute(value) : import_node_path16.posix.isAbsolute(value);
+  return platform === "win32" ? import_node_path17.win32.isAbsolute(value) : import_node_path17.posix.isAbsolute(value);
 }
 function listenerNodeExecArgv(values2) {
   const safe = [];
@@ -36814,7 +37221,9 @@ function buildListenerChildArgs(spec) {
     ...provider === "codex" && codexExe ? ["--codex-executable", codexExe] : [],
     ...spec.model ? ["--model", spec.model] : [],
     ...provider === "grok" && spec.effort ? ["--effort", spec.effort] : [],
-    ...spec.turnBudget ? ["--turn-budget", spec.turnBudget] : []
+    ...spec.turnBudget ? ["--turn-budget", spec.turnBudget] : [],
+    ...spec.route && spec.route !== "worker" ? ["--route", spec.route] : [],
+    ...spec.deferOver !== void 0 ? ["--defer-over", String(spec.deferOver)] : []
   ];
 }
 async function spawnDetachedListener(options) {
@@ -36847,6 +37256,503 @@ async function spawnDetachedListener(options) {
   return child;
 }
 
+// src/listener/hook.ts
+var import_promises10 = require("node:fs/promises");
+var import_node_path18 = require("node:path");
+var UUID_RE16 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var TOKEN_RE = /^swm_agt_[A-Za-z0-9_-]{43}$/;
+var INSTANCE_KEY_RE = /^[0-9a-f]{64}$/;
+var MAX_HOOK_CREDENTIAL_BYTES = 8 * 1024;
+var MAX_HOOK_SURFACE_BYTES = 128 * 1024;
+var MAX_GLOBAL_STATE_BYTES = 4 * 1024;
+var LISTENER_CREDENTIAL_FILE = "listener-credential.json";
+var RETIRED_HOOK_CREDENTIAL_FILE = "hook-credential.json";
+var HOOK_SURFACE_FILE = "hook-surface.json";
+var GLOBAL_STATE_FILE = "hook-check.json";
+var HOOK_SURFACE_LOCK = "hook-surface";
+var GLOBAL_STATE_LOCK = "hook-check";
+var HOOK_LOCK_TIMEOUT_MS = 250;
+var HOOK_CHECK_TIMEOUT_MS = 3e3;
+var HOOK_DEFAULT_COOLDOWN_SECONDS = 30;
+var HOOK_SURFACED_IDS_MAX = 1024;
+var HOOK_BODY_PREVIEW_CHARS = 240;
+function exactKeys2(row, keys) {
+  const expected = new Set(keys);
+  return Object.keys(row).length === expected.size && Object.keys(row).every((key2) => expected.has(key2));
+}
+function parseListenerCredential(raw) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new Error("stored listener hook credential is malformed");
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("stored listener hook credential is malformed");
+  }
+  const row = value;
+  if (!exactKeys2(row, [
+    "version",
+    "profileId",
+    "targetUrl",
+    "anonKey",
+    "workspaceId",
+    "principalId",
+    "credential",
+    "updatedAt"
+  ]) || row.version !== 1 || typeof row.profileId !== "string" || !/^[0-9a-f]{24}$/.test(row.profileId) || typeof row.targetUrl !== "string" || typeof row.anonKey !== "string" || row.anonKey.length < 1 || row.anonKey.length > 4096 || typeof row.workspaceId !== "string" || !UUID_RE16.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE16.test(row.principalId) || typeof row.credential !== "string" || !TOKEN_RE.test(row.credential) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
+    throw new Error("stored listener hook credential is malformed");
+  }
+  const target2 = cloudTarget(row.targetUrl, row.anonKey);
+  if (target2.profileId !== row.profileId) {
+    throw new Error("stored listener hook credential target does not match its profile");
+  }
+  return {
+    version: 1,
+    profileId: row.profileId,
+    targetUrl: target2.url,
+    anonKey: target2.anonKey,
+    workspaceId: row.workspaceId.toLowerCase(),
+    principalId: row.principalId.toLowerCase(),
+    credential: row.credential,
+    updatedAt: row.updatedAt
+  };
+}
+async function writeListenerCredentialState(instanceDirectory, input) {
+  if (!(0, import_node_path18.isAbsolute)(instanceDirectory)) {
+    throw new Error("listener hook state directory must be absolute");
+  }
+  const record = parseListenerCredential(JSON.stringify({
+    version: 1,
+    profileId: input.target.profileId,
+    targetUrl: input.target.url,
+    anonKey: input.target.anonKey,
+    workspaceId: input.workspaceId,
+    principalId: input.principalId,
+    credential: input.credential,
+    updatedAt: new Date(input.now ?? Date.now()).toISOString()
+  }));
+  await writeSecureJsonFile(
+    (0, import_node_path18.join)(instanceDirectory, LISTENER_CREDENTIAL_FILE),
+    JSON.stringify(record)
+  );
+  await deleteSecureJsonFile(
+    (0, import_node_path18.join)(instanceDirectory, RETIRED_HOOK_CREDENTIAL_FILE)
+  ).catch(() => void 0);
+}
+async function readListenerCredentialState(instanceDirectory) {
+  const raw = await readSecureJsonFile(
+    (0, import_node_path18.join)(instanceDirectory, LISTENER_CREDENTIAL_FILE),
+    MAX_HOOK_CREDENTIAL_BYTES
+  );
+  return raw === null ? null : parseListenerCredential(raw);
+}
+function parseSurface(raw) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new Error("stored listener hook surface state is malformed");
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("stored listener hook surface state is malformed");
+  }
+  const row = value;
+  if (Object.keys(row).some(
+    (key2) => key2 !== "version" && key2 !== "surfacedSignalIds" && key2 !== "reportedDroppedCount" && key2 !== "credentialFailureReported"
+  ) || row.version !== 1 || !Array.isArray(row.surfacedSignalIds) || row.surfacedSignalIds.length > HOOK_SURFACED_IDS_MAX || row.surfacedSignalIds.some((id) => typeof id !== "string" || !UUID_RE16.test(id)) || !(row.reportedDroppedCount === void 0 || typeof row.reportedDroppedCount === "number" && Number.isSafeInteger(row.reportedDroppedCount) && row.reportedDroppedCount >= 0) || !(row.credentialFailureReported === void 0 || typeof row.credentialFailureReported === "boolean")) {
+    throw new Error("stored listener hook surface state is malformed");
+  }
+  const ids = row.surfacedSignalIds.map((id) => String(id).toLowerCase());
+  if (new Set(ids).size !== ids.length) {
+    throw new Error("stored listener hook surface state repeats a signal");
+  }
+  return {
+    version: 1,
+    surfacedSignalIds: ids,
+    reportedDroppedCount: typeof row.reportedDroppedCount === "number" ? row.reportedDroppedCount : 0,
+    credentialFailureReported: row.credentialFailureReported === true
+  };
+}
+var FileHookSurfaceStore = class {
+  constructor(instanceDirectory) {
+    this.instanceDirectory = instanceDirectory;
+    if (!(0, import_node_path18.isAbsolute)(instanceDirectory)) {
+      throw new Error("listener hook surface directory must be absolute");
+    }
+    this.path = (0, import_node_path18.join)(instanceDirectory, HOOK_SURFACE_FILE);
+  }
+  instanceDirectory;
+  path;
+  async stage(items, droppedCount) {
+    return await withFileLock(this.instanceDirectory, HOOK_SURFACE_LOCK, async () => {
+      const raw = await readSecureJsonFile(this.path, MAX_HOOK_SURFACE_BYTES);
+      const state = raw === null ? {
+        version: 1,
+        surfacedSignalIds: [],
+        reportedDroppedCount: 0,
+        credentialFailureReported: false
+      } : parseSurface(raw);
+      const seen = new Set(state.surfacedSignalIds);
+      const unseen = [];
+      for (const item of items) {
+        const signalId = item.signalId.toLowerCase();
+        if (!UUID_RE16.test(signalId) || seen.has(signalId)) continue;
+        seen.add(signalId);
+        unseen.push(item);
+      }
+      return {
+        unseen,
+        droppedSinceLastCheck: droppedCount < state.reportedDroppedCount ? droppedCount : droppedCount - state.reportedDroppedCount,
+        credentialFailureReported: state.credentialFailureReported
+      };
+    }, { timeoutMs: HOOK_LOCK_TIMEOUT_MS });
+  }
+  async commit(options) {
+    await withFileLock(this.instanceDirectory, HOOK_SURFACE_LOCK, async () => {
+      const raw = await readSecureJsonFile(this.path, MAX_HOOK_SURFACE_BYTES);
+      const state = raw === null ? {
+        version: 1,
+        surfacedSignalIds: [],
+        reportedDroppedCount: 0,
+        credentialFailureReported: false
+      } : parseSurface(raw);
+      const seen = new Set(state.surfacedSignalIds);
+      for (const signalId of options.signalIds ?? []) {
+        const checked = signalId.toLowerCase();
+        if (UUID_RE16.test(checked)) seen.add(checked);
+      }
+      await writeSecureJsonFile(
+        this.path,
+        JSON.stringify(parseSurface(JSON.stringify({
+          version: 1,
+          surfacedSignalIds: [...seen].slice(-HOOK_SURFACED_IDS_MAX),
+          reportedDroppedCount: options.droppedCount ?? state.reportedDroppedCount,
+          credentialFailureReported: options.credentialFailureReported ?? state.credentialFailureReported
+        })))
+      );
+    }, { timeoutMs: HOOK_LOCK_TIMEOUT_MS });
+  }
+  async claimUnseen(items) {
+    const staged = await this.stage(items, 0);
+    if (staged.unseen.length > 0) {
+      await this.commit({ signalIds: staged.unseen.map((item) => item.signalId) });
+    }
+    return staged.unseen;
+  }
+};
+function parseGlobalState(raw) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new Error("stored hook cooldown state is malformed");
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("stored hook cooldown state is malformed");
+  }
+  const row = value;
+  if (!exactKeys2(row, ["version", "lastCheckAt"]) || row.version !== 1 || typeof row.lastCheckAt !== "number" || !Number.isSafeInteger(row.lastCheckAt) || row.lastCheckAt < 0) {
+    throw new Error("stored hook cooldown state is malformed");
+  }
+  return { version: 1, lastCheckAt: row.lastCheckAt };
+}
+async function reserveCheck(stateDirectory2, cooldownMs, now) {
+  return await withFileLock(stateDirectory2, GLOBAL_STATE_LOCK, async () => {
+    const path = (0, import_node_path18.join)(stateDirectory2, GLOBAL_STATE_FILE);
+    const raw = await readSecureJsonFile(path, MAX_GLOBAL_STATE_BYTES);
+    const previous = raw === null ? null : parseGlobalState(raw);
+    if (previous !== null && now - previous.lastCheckAt < cooldownMs) return false;
+    await writeSecureJsonFile(path, JSON.stringify({ version: 1, lastCheckAt: now }));
+    return true;
+  }, { timeoutMs: HOOK_LOCK_TIMEOUT_MS });
+}
+function processIsAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
+  }
+}
+async function statusContext(stateDirectory2, key2, instanceDirectory) {
+  const provisional = {
+    key: key2,
+    instanceDirectory,
+    statusPath: (0, import_node_path18.join)(instanceDirectory, "status.json"),
+    logPath: (0, import_node_path18.join)(instanceDirectory, "events.ndjson"),
+    socketPath: ""
+  };
+  const status = await readListenerStatus(provisional).catch(() => null);
+  if (status === null) return null;
+  const paths = listenerPaths({
+    profileId: status.profileId,
+    workspaceId: status.workspaceId,
+    principalId: status.principalId,
+    stateDirectory: stateDirectory2
+  });
+  if (paths.key !== key2 || paths.instanceDirectory !== instanceDirectory) return null;
+  return { paths, status };
+}
+async function listenerIsLive(context) {
+  if (context.status.state === "stopped" || context.status.state === "failed" || !processIsAlive(context.status.pid)) {
+    return false;
+  }
+  try {
+    await queryListenerControl(context.paths, "status", 250);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function discoverContexts(stateDirectory2, isListenerLive = listenerIsLive) {
+  let entries;
+  try {
+    entries = await (0, import_promises10.readdir)(stateDirectory2, { withFileTypes: true });
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+  const contexts = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory() || !INSTANCE_KEY_RE.test(entry.name)) continue;
+    const instanceDirectory = (0, import_node_path18.join)(stateDirectory2, entry.name);
+    const storedStatus = await statusContext(
+      stateDirectory2,
+      entry.name,
+      instanceDirectory
+    );
+    const statusIsLive = storedStatus === null ? null : await isListenerLive(storedStatus);
+    if (statusIsLive === false) continue;
+    await deleteSecureJsonFile(
+      (0, import_node_path18.join)(instanceDirectory, RETIRED_HOOK_CREDENTIAL_FILE)
+    ).catch(() => void 0);
+    try {
+      const credential = await readListenerCredentialState(instanceDirectory);
+      contexts.push({
+        instanceDirectory,
+        paths: storedStatus?.paths ?? null,
+        status: storedStatus?.status ?? null,
+        credential,
+        credentialReadFailed: credential === null && storedStatus !== null
+      });
+    } catch {
+      if (storedStatus === null) continue;
+      contexts.push({
+        instanceDirectory,
+        paths: storedStatus.paths,
+        status: storedStatus.status,
+        credential: null,
+        credentialReadFailed: true
+      });
+    }
+  }
+  return contexts;
+}
+function entryFromSignal(signal, principalId, directory, now) {
+  const senderName = signal.from_kind === "agent" ? directory?.agents.find((agent) => agent.principal_id === signal.from)?.name ?? null : directory?.members.find((member) => member.user_id === signal.from)?.display_name ?? null;
+  return {
+    signalId: signal.id,
+    workspaceId: signal.workspace_id,
+    principalId,
+    fromId: signal.from,
+    fromKind: signal.from_kind,
+    senderName,
+    body: signal.body,
+    createdAt: signal.created_at,
+    queuedAt: new Date(now).toISOString()
+  };
+}
+function preview(value) {
+  let text = value.replaceAll("\r\n", "\n").replaceAll("\r", "\n");
+  if (text.length > HOOK_BODY_PREVIEW_CHARS) {
+    text = `${text.slice(0, HOOK_BODY_PREVIEW_CHARS - 1)}\u2026`;
+  }
+  return JSON.stringify(text);
+}
+function renderHookSignal(item) {
+  const sender = item.senderName === null ? item.fromId : item.senderName;
+  return [
+    `[CSWARM MESSAGE from ${item.fromKind} ${JSON.stringify(sender)}; workspace ${item.workspaceId}]`,
+    preview(item.body),
+    `operator reply command: cswarm reply ${item.signalId} "<answer>" --workspace-id ${item.workspaceId}`
+  ].join("\n");
+}
+async function inboxItems(context, options) {
+  const stored = context.credential;
+  const target2 = cloudTarget(stored.targetUrl, stored.anonKey);
+  const readOptions = {
+    ...options.fetcher ? { fetcher: options.fetcher } : {},
+    signal: options.signal,
+    deadlineMs: options.deadlineMs,
+    now: options.now
+  };
+  const page = await readAgentSignalPage(
+    target2,
+    { kind: "agent", token: stored.credential },
+    {
+      workspaceId: stored.workspaceId,
+      inbox: true,
+      ascending: false,
+      limit: 100,
+      includeStale: false
+    },
+    readOptions,
+    { tolerateMalformedRows: true, maxMalformedRows: 3 }
+  );
+  const directed = page.signals.filter(
+    (signal) => (signal.kind === "ask" || signal.kind === "note") && signal.workspace_id === stored.workspaceId && signal.to_agent === stored.principalId
+  );
+  if (directed.length === 0) return [];
+  let directory = null;
+  try {
+    directory = await readAgentSignalDirectory(
+      target2,
+      stored.credential,
+      stored.workspaceId,
+      readOptions
+    );
+  } catch {
+    directory = null;
+  }
+  const candidates = directed.map((signal) => entryFromSignal(signal, stored.principalId, directory, options.now())).sort((left, right) => Date.parse(left.createdAt) - Date.parse(right.createdAt));
+  return candidates;
+}
+function renderDroppedAsks(count2) {
+  return `${count2} routed asks were dropped from the overflow queue; check cswarm inbox. The signals remain in the inbox.`;
+}
+var CREDENTIAL_READ_WARNING = "CommonSwarm could not read the configured listener credential safely. The hook is not checking routed asks. Restart the listener with a fresh credential; any credential state file must be mode 0600. Then run cswarm listen status.";
+var CREDENTIAL_401_WARNING = "CommonSwarm could not authenticate a listener credential (HTTP 401). The hook is not checking routed asks. Restart the listener with a fresh credential, then run cswarm listen status.";
+async function checkListenerHooks(options) {
+  try {
+    const stateDirectory2 = options.stateDirectory ?? defaultListenerStateDirectory();
+    if (!(0, import_node_path18.isAbsolute)(stateDirectory2)) return "";
+    const now = options.now ?? Date.now;
+    const cooldownSeconds = options.cooldownSeconds ?? HOOK_DEFAULT_COOLDOWN_SECONDS;
+    if (!Number.isSafeInteger(cooldownSeconds) || cooldownSeconds < 0 || cooldownSeconds > 86400) {
+      return "";
+    }
+    const contexts = await discoverContexts(
+      stateDirectory2,
+      options.isListenerLive ?? listenerIsLive
+    );
+    if (contexts.length === 0) return "";
+    const networkAllowed = await reserveCheck(
+      stateDirectory2,
+      cooldownSeconds * 1e3,
+      now()
+    );
+    const checks = await Promise.all(contexts.map(async (context) => {
+      const queue = new FilePendingMainQueue(context.instanceDirectory);
+      const pending = await queue.read();
+      const stats = await queue.stats();
+      let network = [];
+      let credentialFailure = context.credentialReadFailed ? "read" : null;
+      let credentialHealthy = false;
+      if (networkAllowed && !options.signal.aborted && context.credential !== null) {
+        try {
+          network = await inboxItems(context, {
+            ...options.fetcher ? { fetcher: options.fetcher } : {},
+            signal: options.signal,
+            deadlineMs: options.deadlineMs,
+            now
+          });
+          credentialHealthy = true;
+        } catch (error) {
+          if (followHttpDetails(error)?.status === 401) credentialFailure = "401";
+        }
+      }
+      return {
+        context,
+        queue,
+        pending,
+        droppedCount: stats.droppedCount,
+        network,
+        credentialFailure,
+        credentialHealthy
+      };
+    }));
+    const commits = [];
+    const blocks = [];
+    const emittedCredentialWarnings = /* @__PURE__ */ new Set();
+    for (const check of checks) {
+      const store2 = new FileHookSurfaceStore(check.context.instanceDirectory);
+      const staged = await store2.stage(
+        [...check.pending, ...check.network],
+        check.droppedCount
+      );
+      blocks.push(...staged.unseen.map(renderHookSignal));
+      const reportDrops = staged.droppedSinceLastCheck > 0;
+      if (reportDrops) blocks.push(renderDroppedAsks(staged.droppedSinceLastCheck));
+      const reportCredentialFailure = check.credentialFailure !== null && !staged.credentialFailureReported;
+      if (reportCredentialFailure) {
+        const warning = check.credentialFailure === "401" ? CREDENTIAL_401_WARNING : CREDENTIAL_READ_WARNING;
+        if (!emittedCredentialWarnings.has(warning)) {
+          emittedCredentialWarnings.add(warning);
+          blocks.push(warning);
+        }
+      }
+      const pendingSignalIds = new Set(check.pending.map((entry) => entry.signalId));
+      commits.push({
+        check,
+        store: store2,
+        signalIds: staged.unseen.map((item) => item.signalId),
+        printedPendingSignalIds: staged.unseen.map((item) => item.signalId).filter((signalId) => pendingSignalIds.has(signalId)),
+        reportDrops,
+        reportCredentialFailure
+      });
+    }
+    const output = blocks.join("\n\n");
+    if (output.length > 0) await (options.write ?? (() => void 0))(output);
+    for (const commit of commits) {
+      await commit.store.commit({
+        signalIds: commit.signalIds,
+        ...commit.reportDrops ? { droppedCount: commit.check.droppedCount } : {},
+        ...commit.reportCredentialFailure ? { credentialFailureReported: true } : commit.check.credentialHealthy ? { credentialFailureReported: false } : {}
+      });
+      const remainingCount = await commit.check.queue.remove(
+        new Set(commit.printedPendingSignalIds),
+        HOOK_LOCK_TIMEOUT_MS
+      );
+      if (commit.check.context.paths !== null && commit.check.context.status !== null) {
+        const latest = await readListenerStatus(commit.check.context.paths).catch(() => null);
+        if (latest !== null && latest.pendingForMainCount !== remainingCount) {
+          await writeListenerStatus(commit.check.context.paths, {
+            ...latest,
+            pendingForMainCount: remainingCount
+          });
+        }
+      }
+    }
+    return output;
+  } catch {
+    return "";
+  }
+}
+async function runListenerHookCheck(options = {}) {
+  const controller = new AbortController();
+  const deadlineMs = Date.now() + HOOK_CHECK_TIMEOUT_MS;
+  let timer2;
+  try {
+    const checking = checkListenerHooks({
+      ...options,
+      signal: controller.signal,
+      deadlineMs
+    });
+    const timedOut = new Promise((resolve) => {
+      timer2 = setTimeout(() => {
+        controller.abort();
+        resolve("");
+      }, HOOK_CHECK_TIMEOUT_MS);
+    });
+    return await Promise.race([checking, timedOut]);
+  } catch {
+    return "";
+  } finally {
+    if (timer2 !== void 0) clearTimeout(timer2);
+  }
+}
+
 // src/cli.ts
 var import_meta = {};
 var KNOWN_FLAGS = /* @__PURE__ */ new Set([
@@ -36859,7 +37765,9 @@ var KNOWN_FLAGS = /* @__PURE__ */ new Set([
   "claude-executable",
   "codex-executable",
   "confirm",
+  "cooldown",
   "cwd",
+  "defer-over",
   "device-id",
   "effort",
   "email",
@@ -36891,6 +37799,7 @@ var KNOWN_FLAGS = /* @__PURE__ */ new Set([
   "principal-id",
   "provider",
   "reveal-anon-key",
+  "route",
   "run-id",
   "since",
   "site",
@@ -36905,7 +37814,8 @@ var KNOWN_FLAGS = /* @__PURE__ */ new Set([
   "url",
   "version",
   "wait",
-  "workspace-id"
+  "workspace-id",
+  "write"
 ]);
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "agent-token-stdin",
@@ -36923,9 +37833,10 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "local",
   "ndjson",
   "no-browser",
-  "reveal-anon-key"
+  "reveal-anon-key",
+  "write"
 ]);
-var UUID_RE15 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE17 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var AGENT_CREDENTIAL_MESSAGE = "Agent credential minted. It is bound to this task and run so the agent's work stays scoped and attributable.";
 var AGENT_CREDENTIAL_MESSAGE_D088 = "Agent credential minted. It is bound to this run, so the agent's work is attributable to it.";
 var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
@@ -36933,8 +37844,8 @@ var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
   AGENT_CREDENTIAL_MESSAGE_D088
 ];
 function packageVersion() {
-  if ("0.1.22".length > 0) {
-    return "0.1.22";
+  if ("0.1.25".length > 0) {
+    return "0.1.25";
   }
   try {
     const value = JSON.parse(
@@ -37062,9 +37973,12 @@ Usage:
   cswarm file rm <name|file-id> [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
   cswarm file restore <name|file-id> [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
   cswarm feedback "<text>" --kind bug|idea|friction [--about <ref>] [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm listen start --agent-token-stdin [--url <url> --anon-key <key>] --workspace-id <uuid> --provider grok|opencode|claude|codex [--cwd <absolute-path>] [--model <model>] [--effort <level>] [--permissions deny|allow] [--grok-executable <path>] [--opencode-executable <path>] [--claude-executable <path>] [--codex-executable <path>] [--turn-budget <duration>] [--foreground] [--json]
+  cswarm listen start --agent-token-stdin [--url <url> --anon-key <key>] --workspace-id <uuid> --provider grok|opencode|claude|codex [--cwd <absolute-path>] [--model <model>] [--effort <level>] [--permissions deny|allow] [--grok-executable <path>] [--opencode-executable <path>] [--claude-executable <path>] [--codex-executable <path>] [--turn-budget <duration>] [--route worker|main|split] [--defer-over <chars>] [--foreground] [--json]
   cswarm listen status [--url <url> --anon-key <key>] --workspace-id <uuid> --principal-id <uuid> [--json]
   cswarm listen stop [--url <url> --anon-key <key>] --workspace-id <uuid> --principal-id <uuid> [--json]
+  cswarm hook check [--cooldown <seconds>]
+  cswarm hook install claude [--write]
+  cswarm hook uninstall claude --write
   cswarm new "<workspace name>" [--url <url> --anon-key <key>] [--json]
   cswarm new --name "<workspace name>" [--url <url> --anon-key <key>] [--json]
   cswarm workspaces [--url <url> --anon-key <key>] [--json]
@@ -37072,6 +37986,7 @@ Usage:
   cswarm invite [--url <url> --anon-key <key>] [--workspace-id <uuid>] --email <email>
   cswarm invite revoke [--url <url> --anon-key <key>] [--workspace-id <uuid>] --invitation-id <uuid> [--json]
   cswarm member remove <full-user-id|exact-name> --confirm <same-selector> [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--json]
+  cswarm workspace close <full-id|exact-name> --confirm <same-selector> [--url <url> --anon-key <key>] [--json]
   cswarm accept --link-stdin [--name <name>] [--no-browser] [--json]
   cswarm accept <https://...#invite=...|cswarm://accept/...> [--name <name>] [--no-browser] [--json]  # unsafe: shell history/process list
   cswarm accept --invitation-token-stdin [--url <url> --anon-key <key>]
@@ -37099,7 +38014,12 @@ Credential selection for command/dogfood:
                                           read and command, nothing persisted -- either form
                             feedback      command only, nothing persisted     -- either form
                             listen start  persists durable state, rotates -- needs expires_at
+                            hook check    reads the listener's owned 0600 credential state;
+                                          never accepts or prints a credential
+                            hook install/uninstall
+                                          edits only local Claude Code settings; no credential
                             token revoke  names what it revokes           -- needs token_id
+                            workspace close is human-session-only; it never accepts an agent token
 
 Found a bug or missing feature in cswarm itself? cswarm feedback sends it to the
 deployment's operators \u2014 agents are encouraged to report friction they hit.
@@ -37108,6 +38028,8 @@ Signals (intention sharing) accept the same credential selection. Agent mode
 never opens a browser or infers a human's saved workspace. Durations use a whole
 number plus m, h, or d (for example 90m, 24h, or 7d) and are capped at 30d.
 Place -- before signal text that itself begins with -- to stop option parsing.
+Signal text is at most 2000 characters and --about at most 500; a longer body is
+refused locally before any network call, so compose within the limit.
 
 listen start --turn-budget bounds ONE worker prompt turn (default 10m): how long
 the worker may think and use tools on a single message before the turn times out
@@ -37120,7 +38042,16 @@ TTL); a turn that lands just before a rotation can be clamped to the ~5m
 renewal lead, and if it times out there, durable delivery retries it on the
 fresh credential.
 
-Invite, legacy token accept, principal create/revoke, human token mint/revoke, link, and new require a
+listen start --route worker|main|split chooses where directed asks go. worker
+is the unchanged default. main queues every ask for the interactive session.
+split queues asks whose body is longer than --defer-over <chars>; the bound is
+1..10000 and an equal-length ask stays on the worker path. Run cswarm hook check
+to surface queued asks. hook check has its own 3s ceiling, exits 0 on every
+outcome, and skips network checks made within --cooldown seconds (default 30).
+hook install claude prints the UserPromptSubmit JSON by default and changes the
+project's .claude/settings.json only with --write; uninstall also requires --write.
+
+Invite, legacy token accept, principal create/revoke, human token mint/revoke, link, new, and workspace close require a
 stored human login. Agent self-surrender of a token uses --agent-token-stdin and never takes the secret on argv. Invite-link accept signs in when needed, then accepts and
 registers one principal. Invitation links, agent credentials, and capability links
 appear only in fresh success responses.
@@ -37248,7 +38179,7 @@ function parsedAgentCredential(value) {
   const withExpiry = [...requiredKeys, "expires_at"].sort();
   const actualKeys = Object.keys(artifact).sort();
   const shape = actualKeys.length === requiredKeys.length ? requiredKeys : withExpiry;
-  if (actualKeys.length !== shape.length || !actualKeys.every((key2, index) => key2 === shape[index]) || !ACCEPTED_AGENT_CREDENTIAL_MESSAGES.includes(artifact.message) || artifact.status !== "accepted" || typeof artifact.principal_id !== "string" || !UUID_RE15.test(artifact.principal_id) || typeof artifact.token_id !== "string" || !UUID_RE15.test(artifact.token_id) || typeof artifact.run_id !== "string" || !UUID_RE15.test(artifact.run_id) || typeof artifact.agent_token !== "string") {
+  if (actualKeys.length !== shape.length || !actualKeys.every((key2, index) => key2 === shape[index]) || !ACCEPTED_AGENT_CREDENTIAL_MESSAGES.includes(artifact.message) || artifact.status !== "accepted" || typeof artifact.principal_id !== "string" || !UUID_RE17.test(artifact.principal_id) || typeof artifact.token_id !== "string" || !UUID_RE17.test(artifact.token_id) || typeof artifact.run_id !== "string" || !UUID_RE17.test(artifact.run_id) || typeof artifact.agent_token !== "string") {
     throw new Error("agent credential JSON is malformed");
   }
   let expiresAt = null;
@@ -37329,7 +38260,7 @@ async function stdinInviteLink() {
   return link;
 }
 async function confirmationLine(prompt) {
-  const reader = (0, import_promises11.createInterface)({
+  const reader = (0, import_promises12.createInterface)({
     input: process.stdin,
     output: process.stderr,
     terminal: Boolean(process.stdin.isTTY)
@@ -37486,7 +38417,7 @@ async function runNew(args) {
       project: {
         workspace_id: created,
         name,
-        stream_id: typeof response.stream_id === "string" && UUID_RE15.test(response.stream_id) ? response.stream_id : null
+        stream_id: typeof response.stream_id === "string" && UUID_RE17.test(response.stream_id) ? response.stream_id : null
       }
     });
     return;
@@ -37815,6 +38746,53 @@ async function runMember(args) {
 `);
   }
 }
+async function runWorkspace(args) {
+  args.assertShape([...TARGET_FLAGS, "confirm", "json"], 3);
+  if (args.positionals[1] !== "close") {
+    throw new UsageError(
+      `unknown workspace command: ${args.positionals[1] ?? "(missing)"}`
+    );
+  }
+  const selector = args.positionals[2];
+  if (args.required("confirm") !== selector) {
+    throw new Error(
+      "--confirm must exactly repeat the workspace selector; no request was sent"
+    );
+  }
+  const cloud = await target(args);
+  const human = await humanCredential(args, cloud);
+  const directory = cloudWorkspaceDirectory(cloud);
+  const projects = await directory.list(human);
+  const selected = resolveWorkspaceSelector(selector, projects);
+  const response = (await sendConnectWithPending(
+    new ThinCommandClient(cloud),
+    human,
+    selected.workspace_id,
+    { kind: "archive_workspace" }
+  )).response;
+  if (response.status !== "accepted") {
+    throw new Error(
+      `Workspace close was rejected: ${response.reason ?? "domain rejection"}. The workspace is still open.`
+    );
+  }
+  const { closedWasSelected, nextWorkspace, selectedWorkspaceId } = await updateWorkspaceDefaultAfterClose(
+    human.store,
+    human.userId,
+    selected.workspace_id,
+    projects
+  );
+  const message = nextWorkspace ? `Closed workspace ${selected.name} (${selected.workspace_id}). It is hidden for everyone, and ${nextWorkspace.name} (${nextWorkspace.workspace_id}) is now selected.` : closedWasSelected ? `Closed workspace ${selected.name} (${selected.workspace_id}). It is hidden for everyone. No live workspace remains, so the selected workspace was cleared.` : `Closed workspace ${selected.name} (${selected.workspace_id}). It is hidden for everyone. Your selected workspace was not changed.`;
+  const output = {
+    message,
+    status: response.status,
+    workspace_id: selected.workspace_id,
+    selected_workspace_id: selectedWorkspaceId,
+    command_event_ids: response.event_ids
+  };
+  if (args.has("json")) printJson(output);
+  else process.stdout.write(`${message}
+`);
+}
 async function runLegacyAccept(args) {
   const invitationToken = await invitationCredential(args);
   const cloud = await target(args);
@@ -38213,7 +39191,7 @@ async function runLinkNew(args) {
     2
   );
   const taskId = args.required("task-id");
-  if (!UUID_RE15.test(taskId)) {
+  if (!UUID_RE17.test(taskId)) {
     throw new Error("--task-id must be the work item's UUID");
   }
   const site = capabilitySiteOrigin(
@@ -38273,7 +39251,7 @@ async function runLinkRevoke(args) {
     2
   );
   const capabilityId = args.required("capability-id");
-  if (!UUID_RE15.test(capabilityId)) {
+  if (!UUID_RE17.test(capabilityId)) {
     throw new Error(
       "--capability-id must be the id printed when the link was created"
     );
@@ -38488,6 +39466,33 @@ function listenerTurnBudgetMs(value) {
   }
   return milliseconds;
 }
+function listenerRouteConfiguration(routeValue, deferOverValue) {
+  const routeMode = routeValue ?? "worker";
+  if (routeMode !== "worker" && routeMode !== "main" && routeMode !== "split") {
+    throw new Error("--route must be worker, main, or split");
+  }
+  if (routeMode !== "split") {
+    if (deferOverValue !== void 0) {
+      throw new Error("--defer-over is only valid with --route split");
+    }
+    return { routeMode, deferOverChars: null };
+  }
+  if (deferOverValue === void 0) {
+    throw new Error("--route split requires --defer-over <chars>");
+  }
+  if (!/^\d+$/.test(deferOverValue)) {
+    throw new Error(
+      `--defer-over must be an integer from ${LISTENER_DEFER_OVER_MIN} to ${LISTENER_DEFER_OVER_MAX}`
+    );
+  }
+  const deferOverChars = Number(deferOverValue);
+  if (!Number.isSafeInteger(deferOverChars) || deferOverChars < LISTENER_DEFER_OVER_MIN || deferOverChars > LISTENER_DEFER_OVER_MAX) {
+    throw new Error(
+      `--defer-over must be an integer from ${LISTENER_DEFER_OVER_MIN} to ${LISTENER_DEFER_OVER_MAX}`
+    );
+  }
+  return { routeMode, deferOverChars };
+}
 var TURN_BUDGET_CREDENTIAL_MARGIN_MS = 6e4;
 function clampTurnBudgetToCredential(budgetMs, credentialExpiresAt, nowMs) {
   if (credentialExpiresAt === null) return budgetMs;
@@ -38507,8 +39512,10 @@ function resolveTurnBudgetOrDefer(configuredBudgetMs, credentialExpiresAt, nowMs
   }
   return clampTurnBudgetToCredential(configuredBudgetMs, credentialExpiresAt, nowMs);
 }
+var SIGNAL_BODY_MAX = 2e3;
+var SIGNAL_ABOUT_MAX = 500;
 function signalText(value, label) {
-  const maximum = label === "body" ? 2e3 : 500;
+  const maximum = label === "body" ? SIGNAL_BODY_MAX : SIGNAL_ABOUT_MAX;
   if (value.length < (label === "body" ? 1 : 0) || value.length > maximum) {
     throw new Error(
       `${label === "body" ? "signal text" : "--about"} must be ${label === "body" ? "1.." : "at most "}${maximum} characters`
@@ -38767,6 +39774,10 @@ Check whether you are about to do the same work.
 `}`
   );
 }
+function replyRefusalHint(error) {
+  if (!(error instanceof CommandHttpError) || error.status !== 403) return null;
+  return "reply was refused (403). The most common cause is that the signal was not addressed to you \u2014 you cannot reply to your own ask; reply to the other party's signal, reach someone directly with cswarm ask --to <agent>, or post a channel-visible cswarm note. If you did receive that signal, the refusal is an authorization one instead: the credential may be revoked or expired, or it may not be a member of this workspace.";
+}
 async function runReply(args) {
   args.assertShape([
     ...TARGET_FLAGS,
@@ -38776,7 +39787,7 @@ async function runReply(args) {
     "json"
   ], 3);
   const signalId = args.positionals[1];
-  if (signalId === void 0 || !UUID_RE15.test(signalId)) {
+  if (signalId === void 0 || !UUID_RE17.test(signalId)) {
     throw new Error("reply requires the signal UUID being answered");
   }
   const body = args.positionals[2];
@@ -38798,7 +39809,14 @@ async function runReply(args) {
     about: null,
     ...untilMs2 === void 0 ? {} : { until_ms: untilMs2 }
   };
-  const result = await postSignalCommand(cloud, credential, command2);
+  let result;
+  try {
+    result = await postSignalCommand(cloud, credential, command2);
+  } catch (error) {
+    const hint = replyRefusalHint(error);
+    if (hint !== null) throw new Error(hint);
+    throw error;
+  }
   const signal = result.response.signal;
   if (args.has("json")) {
     printJson({
@@ -39097,7 +40115,7 @@ async function runInboxFollowCommand(args) {
   }
 }
 function listenerUuid(value, flag) {
-  if (!value || !UUID_RE15.test(value)) {
+  if (!value || !UUID_RE17.test(value)) {
     throw new Error(`--${flag} must be a UUID`);
   }
   return value.toLowerCase();
@@ -39110,7 +40128,7 @@ function listenerPermissionMode(value) {
 function listenerStateDirectory(args) {
   const value = args.optional("state-dir");
   if (value === void 0) return void 0;
-  if (!(0, import_node_path17.isAbsolute)(value)) {
+  if (!(0, import_node_path19.isAbsolute)(value)) {
     throw new Error("--state-dir must be an absolute path");
   }
   return value;
@@ -39270,18 +40288,25 @@ function listenerStatusJson(status, permissionMode) {
     lastTerminalDeliveryFailureAt: status.lastTerminalDeliveryFailureAt ?? null,
     lastClaimAt: status.lastClaimAt ?? null,
     lastAckAt: status.lastAckAt ?? null,
+    routeMode: status.routeMode ?? "worker",
+    deferOverChars: status.deferOverChars ?? null,
+    pendingForMainCount: status.pendingForMainCount ?? 0,
+    droppedForMainCount: status.droppedForMainCount ?? 0,
     ...mode3 ? {
       permission_mode: mode3,
       /* "allowed once" alone overstates it: allowOnceOrDeny selects allow_once only when the
        * host OFFERS that option, and denies otherwise. Both review arms flagged the
        * unqualified form on 4844b4e7. */
-      same_owner_delivery: mode3 === "allow" ? "worker session; tool requests allowed once each when the host offers allow_once, otherwise denied" : "worker session; tool requests denied",
-      cross_owner_delivery: mode3 === "allow" ? "same worker session with sender provenance; tool requests allowed once each when the host offers allow_once, otherwise denied" : "same worker session with sender provenance; tool requests denied"
+      same_owner_delivery: status.routeMode === "main" ? "interactive session; no ACP worker prompt" : mode3 === "allow" ? "worker session; tool requests allowed once each when the host offers allow_once, otherwise denied" : "worker session; tool requests denied",
+      cross_owner_delivery: status.routeMode === "main" ? "interactive session; no ACP worker prompt" : mode3 === "allow" ? "same worker session with sender provenance; tool requests allowed once each when the host offers allow_once, otherwise denied" : "same worker session with sender provenance; tool requests denied"
     } : {},
     host_limits: listenerHostLimits(status.provider)
   };
 }
 function renderListenerStatus(status) {
+  const routeMode = status.routeMode ?? "worker";
+  const pendingForMainCount = status.pendingForMainCount ?? 0;
+  const droppedForMainCount = status.droppedForMainCount ?? 0;
   const lines = [
     `Listener ${status.state} for agent ${status.principalId}.`,
     `Provider: ${status.provider}; process: ${status.pid}; started: ${status.startedAt}.`,
@@ -39308,6 +40333,23 @@ function renderListenerStatus(status) {
       `Pending deliveries reported by the service: ${status.pendingDeliveryCount}.`
     );
   }
+  lines.push(
+    routeMode === "split" ? `Ask route: split; bodies over ${status.deferOverChars} characters wait for this interactive session.` : routeMode === "main" ? "Ask route: main; directed asks wait for this interactive session." : "Ask route: worker (default)."
+  );
+  if (routeMode !== "worker") {
+    lines.push(`Asks waiting for this session: ${pendingForMainCount}.`);
+    lines.push(`Routed asks dropped from the overflow queue: ${droppedForMainCount}.`);
+    if (droppedForMainCount > 0) {
+      lines.push(
+        "The signals remain in the inbox. Recover them with: cswarm inbox"
+      );
+    }
+    if (pendingForMainCount > 0) {
+      lines.push(
+        `${pendingForMainCount} asks waiting for this session; they surface at your next prompt, or run cswarm hook check.`
+      );
+    }
+  }
   if (status.lastTerminalDeliveryFailureCount !== null && status.lastTerminalDeliveryFailureCount > 0) {
     lines.push(
       `The last claim reported ${status.lastTerminalDeliveryFailureCount} terminal delivery failures; they remain recorded, and the listener will keep receiving.`
@@ -39392,7 +40434,7 @@ function resolveDetachedClaudeExecutable(executable = "claude-agent-acp", pathEn
   } catch (error) {
     const code = error.code;
     if (typeof code === "string") {
-      if ((0, import_node_path17.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
+      if ((0, import_node_path19.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
         const detail = error instanceof Error ? error.message : code;
         throw new Error(
           `could not use --claude-executable: ${detail}; reinstall the measured bridge with npm install -g @agentclientprotocol/claude-agent-acp@0.64.2 if this path should be replaced`
@@ -39409,7 +40451,7 @@ function resolveDetachedCodexExecutable(executable = "codex-acp", pathEnv = proc
   } catch (error) {
     const code = error.code;
     if (typeof code === "string") {
-      if ((0, import_node_path17.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
+      if ((0, import_node_path19.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
         const detail = error instanceof Error ? error.message : code;
         throw new Error(
           `could not use --codex-executable: ${detail}; reinstall the measured bridge with npm install -g @agentclientprotocol/codex-acp@1.1.9 if this path should be replaced`
@@ -39454,11 +40496,32 @@ async function runConfiguredListener(options) {
     principalId: options.principalId,
     ...options.stateDirectory ? { stateDirectory: options.stateDirectory } : {}
   });
-  const credentialSession = await agentSession(
+  const liveCredentialSession = await agentSession(
     options.cloud,
     options.workspaceId,
     options.agent
   );
+  let storedCredential = null;
+  const credentialSession = {
+    bearer: async () => {
+      const credential = await liveCredentialSession.bearer();
+      if (credential !== storedCredential) {
+        await writeListenerCredentialState(paths.instanceDirectory, {
+          target: options.cloud,
+          workspaceId: options.workspaceId,
+          principalId: options.principalId,
+          credential
+        }).then(() => {
+          storedCredential = credential;
+        });
+      }
+      const stored = await readListenerCredentialState(paths.instanceDirectory);
+      if (stored === null || stored.credential !== credential) {
+        throw new Error("listener credential state did not preserve the live credential");
+      }
+      return stored.credential;
+    }
+  };
   const resolveSenderProvenance = async (signal, context) => {
     const credential = await credentialSession.bearer();
     const senderDirectory = await readAgentSignalDirectory(
@@ -39486,7 +40549,7 @@ async function runConfiguredListener(options) {
     }
     const applied = resolveTurnBudgetOrDefer(
       turnBudgetMs,
-      credentialSession.expiry,
+      liveCredentialSession.expiry,
       Date.now(),
       renewalFailed
     );
@@ -39536,6 +40599,9 @@ async function runConfiguredListener(options) {
   };
   let selectedJournal;
   let selectedListenerInstanceId;
+  const routeMode = options.routeMode ?? "worker";
+  const deferOverChars = options.deferOverChars ?? null;
+  const pendingMainQueue = new FilePendingMainQueue(paths.instanceDirectory);
   process.on("SIGINT", onProcessSignal);
   process.on("SIGTERM", onProcessSignal);
   try {
@@ -39546,6 +40612,8 @@ async function runConfiguredListener(options) {
       principalId: options.principalId,
       provider: options.provider,
       permissionMode: options.permissionMode,
+      routeMode,
+      deferOverChars,
       // The bound a timeout event reports: the last turn's clamped budget when
       // one has run, else the configured cap.
       getTurnBudgetMs: () => lastAppliedTurnBudgetMs ?? turnBudgetMs,
@@ -39584,7 +40652,10 @@ async function runConfiguredListener(options) {
           declareModel: listenerModelLabel(options.provider),
           listenerInstanceId,
           deliveryJournal: selectedJournal,
-          resolveSenderProvenance
+          resolveSenderProvenance,
+          routeMode,
+          deferOverChars,
+          pendingMainQueue
         });
       }
     });
@@ -39609,6 +40680,8 @@ async function runListenStart(args) {
     "codex-executable",
     "state-dir",
     "turn-budget",
+    "route",
+    "defer-over",
     "foreground",
     "json"
   ], 2);
@@ -39620,6 +40693,10 @@ async function runListenStart(args) {
   const provider = listenerProvider(args);
   validateListenerProviderFlags(args, provider);
   const turnBudgetMs = listenerTurnBudgetMs(args.optional("turn-budget"));
+  const routing = listenerRouteConfiguration(
+    args.optional("route"),
+    args.optional("defer-over")
+  );
   const cloud = await target(args);
   const workspaceId2 = listenerUuid(
     args.optional("workspace-id") ?? process.env.SWARM_CLOUD_WORKSPACE_ID,
@@ -39629,7 +40706,7 @@ async function runListenStart(args) {
   assertDurableListenerCredential(agent);
   const principalId = agent.principalId;
   const cwd = args.optional("cwd") ?? process.cwd();
-  if (!(0, import_node_path17.isAbsolute)(cwd)) throw new Error("--cwd must be an absolute path");
+  if (!(0, import_node_path19.isAbsolute)(cwd)) throw new Error("--cwd must be an absolute path");
   const permissionMode = listenerPermissionMode(args.optional("permissions"));
   const stateDirectory2 = listenerStateDirectory(args);
   const paths = listenerPaths({
@@ -39655,6 +40732,7 @@ async function runListenStart(args) {
       permissionMode,
       provider,
       turnBudgetMs,
+      ...routing,
       ...args.optional("model") ? { model: args.required("model") } : {},
       ...args.optional("effort") ? { effort: args.required("effort") } : {},
       ...args.optional("grok-executable") ? { executable: args.required("grok-executable") } : {},
@@ -39665,7 +40743,7 @@ async function runListenStart(args) {
     });
   } else {
     const entrypoint = process.argv[1];
-    if (!entrypoint || !(0, import_node_path17.isAbsolute)(entrypoint)) {
+    if (!entrypoint || !(0, import_node_path19.isAbsolute)(entrypoint)) {
       throw new Error("cannot locate the cswarm executable for detached start");
     }
     const artifact = JSON.stringify(agentCredentialArtifact({
@@ -39702,6 +40780,8 @@ async function runListenStart(args) {
         permissionMode,
         provider,
         nodeExecArgv: process.execArgv,
+        route: routing.routeMode,
+        ...routing.deferOverChars === null ? {} : { deferOver: routing.deferOverChars },
         ...stateDirectory2 ? { stateDirectory: stateDirectory2 } : {},
         ...args.optional("model") ? { model: args.required("model") } : {},
         ...args.optional("effort") ? { effort: args.required("effort") } : {},
@@ -39735,17 +40815,36 @@ async function runListenStart(args) {
       listenerFailureMessage(status.lastErrorCode ?? "unknown_error", provider)
     );
   }
+  if ((status.routeMode ?? "worker") !== "worker") {
+    const recordedPending = status.pendingForMainCount ?? 0;
+    const recordedDropped = status.droppedForMainCount ?? 0;
+    const queueStats = await new FilePendingMainQueue(
+      paths.instanceDirectory
+    ).stats().catch(() => ({ count: recordedPending, droppedCount: recordedDropped }));
+    status = {
+      ...status,
+      pendingForMainCount: queueStats.count,
+      droppedForMainCount: queueStats.droppedCount
+    };
+  }
   if (args.has("json")) {
     printJson(listenerStatusJson(status, permissionMode));
     return;
   }
-  const hostNote = provider === "opencode" ? "The OpenCode worker uses one private auth/config home and your selected project cwd. Every sender reaches that worker with sender and operator provenance in the prompt. Tool requests are approved one at a time by default, when the worker asks and the host offers a one-time approval; --permissions deny refuses them. The deny canary does not cover steady-state allow.\n" : provider === "claude" ? "The Claude worker uses your selected cwd and normal Claude Code keychain/OAuth state through claude-agent-acp 0.64.2. Every sender reaches that worker with sender and operator provenance in the prompt.\n" : provider === "codex" ? "The Codex worker uses your selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9. CommonSwarm selects read-only mode before its deny canary. Every sender reaches that worker with sender and operator provenance in the prompt.\n" : "The Grok worker uses your selected cwd and local Grok configuration, including user and cmux hooks. Every sender reaches that worker with sender and operator provenance in the prompt.\n";
+  const routingNote = routing.routeMode === "main" ? "Directed asks are queued for your interactive session and never prompt the ACP worker. Run cswarm hook check to surface them.\n" : routing.routeMode === "split" ? `Directed asks over ${routing.deferOverChars} characters are queued for your interactive session; shorter asks use the worker. Run cswarm hook check to surface queued asks.
+` : "";
+  const workerAudience = routing.routeMode === "main" ? "Directed asks do not reach that worker." : routing.routeMode === "split" ? "Only asks at or below the split threshold reach that worker, with sender and operator provenance in the prompt." : "Every sender reaches that worker with sender and operator provenance in the prompt.";
+  const hostNote = provider === "opencode" ? `The OpenCode worker uses one private auth/config home and your selected project cwd. ${workerAudience} Tool requests are approved one at a time by default, when the worker asks and the host offers a one-time approval; --permissions deny refuses them. The deny canary does not cover steady-state allow.
+` : provider === "claude" ? `The Claude worker uses your selected cwd and normal Claude Code keychain/OAuth state through claude-agent-acp 0.64.2. ${workerAudience}
+` : provider === "codex" ? `The Codex worker uses your selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9. CommonSwarm selects read-only mode before its deny canary. ${workerAudience}
+` : `The Grok worker uses your selected cwd and local Grok configuration, including user and cmux hooks. ${workerAudience}
+`;
   process.stdout.write(
     `${args.has("foreground") ? "Listener stopped." : "Listener is ready and will keep receiving after this command exits."}
 ${renderListenerStatus(status)}
 Same-owner tool requests are ${permissionMode === "allow" ? "approved one at a time, when the worker asks and the host offers a one-time approval" : "denied. This worker can reply to messages but cannot do anything it must ask permission for; restart with --permissions allow if that is not what you want"}. The same permission mode applies to every sender relation.
 The short credential rotates while this process remains alive and secure local state is available; a person reauthorises after the 30-day horizon.
-` + hostNote + `Use listen status/stop with --workspace-id ${workspaceId2} --principal-id ${principalId} and the same Cloud target.
+` + routingNote + hostNote + `Use listen status/stop with --workspace-id ${workspaceId2} --principal-id ${principalId} and the same Cloud target.
 `
   );
 }
@@ -39764,18 +40863,24 @@ async function runListenSupervisor(args) {
     "claude-executable",
     "codex-executable",
     "state-dir",
-    "turn-budget"
+    "turn-budget",
+    "route",
+    "defer-over"
   ], 1);
   const provider = listenerProvider(args);
   validateListenerProviderFlags(args, provider);
   const turnBudgetMs = listenerTurnBudgetMs(args.optional("turn-budget"));
+  const routing = listenerRouteConfiguration(
+    args.optional("route"),
+    args.optional("defer-over")
+  );
   const cloud = await target(args);
   const workspaceId2 = listenerUuid(args.optional("workspace-id"), "workspace-id");
   const principalId = listenerUuid(args.optional("principal-id"), "principal-id");
   const agent = await stdinCredential();
   assertDurableListenerCredential(agent, principalId);
   const cwd = args.required("cwd");
-  if (!(0, import_node_path17.isAbsolute)(cwd)) throw new Error("--cwd must be an absolute path");
+  if (!(0, import_node_path19.isAbsolute)(cwd)) throw new Error("--cwd must be an absolute path");
   const status = await runConfiguredListener({
     cloud,
     workspaceId: workspaceId2,
@@ -39785,6 +40890,7 @@ async function runListenSupervisor(args) {
     permissionMode: listenerPermissionMode(args.optional("permissions")),
     provider,
     turnBudgetMs,
+    ...routing,
     ...args.optional("model") ? { model: args.required("model") } : {},
     ...args.optional("effort") ? { effort: args.required("effort") } : {},
     ...args.optional("grok-executable") ? { executable: args.required("grok-executable") } : {},
@@ -39817,7 +40923,7 @@ async function runListenStatusOrStop(args, command2) {
     principalId,
     ...stateDirectory2 ? { stateDirectory: stateDirectory2 } : {}
   });
-  const status = command2 === "stop" ? await stopListener(paths) : await effectiveListenerStatus(paths);
+  let status = command2 === "stop" ? await stopListener(paths) : await effectiveListenerStatus(paths);
   if (status === null) {
     if (args.has("json")) {
       printJson({ status: "not_found", workspace_id: workspaceId2, principal_id: principalId });
@@ -39826,6 +40932,18 @@ async function runListenStatusOrStop(args, command2) {
     }
     return;
   }
+  if ((status.routeMode ?? "worker") !== "worker") {
+    const recordedPending = status.pendingForMainCount ?? 0;
+    const recordedDropped = status.droppedForMainCount ?? 0;
+    const queueStats = await new FilePendingMainQueue(
+      paths.instanceDirectory
+    ).stats().catch(() => ({ count: recordedPending, droppedCount: recordedDropped }));
+    status = {
+      ...status,
+      pendingForMainCount: queueStats.count,
+      droppedForMainCount: queueStats.droppedCount
+    };
+  }
   if (args.has("json")) {
     printJson(listenerStatusJson(status));
   } else {
@@ -39845,6 +40963,148 @@ async function runListen(args) {
   }
   throw new UsageError("listen requires start, status, or stop");
 }
+var CLAUDE_HOOK_COMMAND = "cswarm hook check";
+function claudeUserPromptHookSnippet() {
+  return {
+    hooks: {
+      UserPromptSubmit: [
+        {
+          hooks: [
+            {
+              type: "command",
+              command: CLAUDE_HOOK_COMMAND
+            }
+          ]
+        }
+      ]
+    }
+  };
+}
+function projectClaudeSettingsPath() {
+  return (0, import_node_path19.join)(process.cwd(), ".claude", "settings.json");
+}
+function readProjectSettings(path) {
+  let raw;
+  try {
+    raw = (0, import_node_fs7.readFileSync)(path, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return {};
+    throw error;
+  }
+  const value = JSON.parse(raw);
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("local .claude/settings.json must contain a JSON object");
+  }
+  return value;
+}
+function installClaudeHook(settings) {
+  const hooks = settings.hooks && typeof settings.hooks === "object" && !Array.isArray(settings.hooks) ? { ...settings.hooks } : {};
+  const current = Array.isArray(hooks.UserPromptSubmit) ? [...hooks.UserPromptSubmit] : [];
+  const alreadyInstalled = current.some((group) => {
+    if (!group || typeof group !== "object" || Array.isArray(group)) return false;
+    const commands = group.hooks;
+    return Array.isArray(commands) && commands.some(
+      (hook) => hook && typeof hook === "object" && !Array.isArray(hook) && hook.type === "command" && hook.command === CLAUDE_HOOK_COMMAND
+    );
+  });
+  if (!alreadyInstalled) {
+    const snippetHooks = claudeUserPromptHookSnippet().hooks.UserPromptSubmit;
+    current.push(snippetHooks[0]);
+  }
+  hooks.UserPromptSubmit = current;
+  return { ...settings, hooks };
+}
+function uninstallClaudeHook(settings) {
+  if (!settings.hooks || typeof settings.hooks !== "object" || Array.isArray(settings.hooks)) {
+    return settings;
+  }
+  const hooks = { ...settings.hooks };
+  if (!Array.isArray(hooks.UserPromptSubmit)) return settings;
+  const groups = [];
+  for (const group of hooks.UserPromptSubmit) {
+    if (!group || typeof group !== "object" || Array.isArray(group)) {
+      groups.push(group);
+      continue;
+    }
+    const row = { ...group };
+    if (!Array.isArray(row.hooks)) {
+      groups.push(group);
+      continue;
+    }
+    row.hooks = row.hooks.filter((hook) => !(hook && typeof hook === "object" && !Array.isArray(hook) && hook.type === "command" && hook.command === CLAUDE_HOOK_COMMAND));
+    if (row.hooks.length > 0) groups.push(row);
+  }
+  if (groups.length > 0) hooks.UserPromptSubmit = groups;
+  else delete hooks.UserPromptSubmit;
+  if (Object.keys(hooks).length === 0) {
+    const result = { ...settings };
+    delete result.hooks;
+    return result;
+  }
+  return { ...settings, hooks };
+}
+async function runHook(args) {
+  const command2 = args.positionals[1];
+  if (command2 === "check") {
+    args.assertShape(["cooldown"], 2);
+    const rawCooldown = args.optional("cooldown");
+    const cooldownSeconds = rawCooldown === void 0 ? void 0 : Number(rawCooldown);
+    if (cooldownSeconds !== void 0 && (!/^\d+$/.test(rawCooldown) || !Number.isSafeInteger(cooldownSeconds) || cooldownSeconds < 0 || cooldownSeconds > 86400)) {
+      return;
+    }
+    const hardExit = setTimeout(() => {
+      process.exit(0);
+    }, 3e3);
+    hardExit.unref();
+    try {
+      await runListenerHookCheck({
+        ...cooldownSeconds === void 0 ? {} : { cooldownSeconds },
+        write: async (output) => {
+          await new Promise((resolve, reject) => {
+            process.stdout.write(`${output}
+`, (error) => {
+              if (error) reject(error);
+              else resolve();
+            });
+          });
+        }
+      });
+      return;
+    } finally {
+      clearTimeout(hardExit);
+    }
+  }
+  if (command2 !== "install" && command2 !== "uninstall") {
+    throw new UsageError("hook requires check, install, or uninstall");
+  }
+  args.assertShape(["write"], 3);
+  if (args.positionals[2] !== "claude") {
+    throw new Error("hook install/uninstall currently supports claude");
+  }
+  if (command2 === "uninstall" && !args.has("write")) {
+    throw new Error("hook uninstall claude requires --write");
+  }
+  const snippet = claudeUserPromptHookSnippet();
+  if (!args.has("write")) {
+    process.stdout.write(`${JSON.stringify(snippet, null, 2)}
+`);
+    return;
+  }
+  const path = projectClaudeSettingsPath();
+  const settings = readProjectSettings(path);
+  const updated = command2 === "install" ? installClaudeHook(settings) : uninstallClaudeHook(settings);
+  (0, import_node_fs7.mkdirSync)((0, import_node_path19.dirname)(path), { recursive: true });
+  (0, import_node_fs7.writeFileSync)(path, `${JSON.stringify(updated, null, 2)}
+`, {
+    encoding: "utf8",
+    mode: 384
+  });
+  process.stdout.write(
+    command2 === "install" ? `Installed the Claude Code UserPromptSubmit hook in ${path}. It runs: ${CLAUDE_HOOK_COMMAND}
+` : `Removed the CommonSwarm UserPromptSubmit hook from ${path}. Other settings were kept.
+`
+  );
+}
 function formatFileSize(value) {
   const bytes = Number(value ?? 0);
   if (!Number.isFinite(bytes) || bytes <= 0) return "0 B";
@@ -39879,7 +41139,7 @@ async function fileRows(context) {
   );
 }
 async function resolveFileSelector(context, selector) {
-  if (UUID_RE15.test(selector)) return selector.toLowerCase();
+  if (UUID_RE17.test(selector)) return selector.toLowerCase();
   const rows3 = await fileRows(context);
   const match = rows3.find(
     (row) => row.name.toLowerCase() === selector.toLowerCase()
@@ -39901,7 +41161,7 @@ async function runFilePut(args) {
   } catch {
     throw new Error(`could not read ${localPath}; check the path and permissions`);
   }
-  const name = args.optional("name") ?? (0, import_node_path17.basename)(localPath);
+  const name = args.optional("name") ?? (0, import_node_path19.basename)(localPath);
   if (bytes.byteLength > FILE_MAX_VERSION_BYTES) {
     throw new Error(
       `this file is ${formatFileSize(bytes.byteLength)}; the per-file limit is ${formatFileSize(FILE_MAX_VERSION_BYTES)}, so the upload was not started`
@@ -40003,7 +41263,7 @@ async function runFileGet(args) {
     credential: context.selected.bearer
   };
   const grant = await fileDownloadUrl(send, { fileId, versionN });
-  const destination = args.optional("out") ?? (0, import_node_path17.basename)(grant.name);
+  const destination = args.optional("out") ?? (0, import_node_path19.basename)(grant.name);
   const bytes = await getObject(context.cloud, grant.download_path);
   writeDestination(destination, bytes, args.has("force"), import_node_fs7.writeFileSync);
   if (args.has("json")) {
@@ -40219,10 +41479,10 @@ async function runSeed(args) {
     throw new Error("DATABASE_URL is required for the fixture bridge");
   }
   const tokenOut = process.env.SEED_TOKEN_OUT;
-  if (!tokenOut || !(0, import_node_path17.isAbsolute)(tokenOut)) {
+  if (!tokenOut || !(0, import_node_path19.isAbsolute)(tokenOut)) {
     throw new Error("SEED_TOKEN_OUT must be an absolute path");
   }
-  const tokenFile = await (0, import_promises10.open)(tokenOut, "wx", 384).catch((error) => {
+  const tokenFile = await (0, import_promises11.open)(tokenOut, "wx", 384).catch((error) => {
     if (error.code === "EEXIST") {
       throw new Error("SEED_TOKEN_OUT already exists; refusing to overwrite it");
     }
@@ -40261,7 +41521,7 @@ async function runSeed(args) {
       tokenWritten = true;
     }
     await tokenFile.close();
-    if (!tokenWritten) await (0, import_promises10.unlink)(tokenOut);
+    if (!tokenWritten) await (0, import_promises11.unlink)(tokenOut);
     process.stdout.write(`${JSON.stringify({
       userId: result.userId,
       membershipRole: result.membershipRole,
@@ -40274,7 +41534,7 @@ async function runSeed(args) {
 `);
   } catch (error) {
     await tokenFile.close().catch(() => void 0);
-    if (!tokenWritten) await (0, import_promises10.unlink)(tokenOut).catch(() => void 0);
+    if (!tokenWritten) await (0, import_promises11.unlink)(tokenOut).catch(() => void 0);
     throw error;
   }
 }
@@ -40299,6 +41559,10 @@ async function main() {
     await runListenSupervisor(args);
     return;
   }
+  if (verb === "hook") {
+    await runHook(args);
+    return;
+  }
   if (verb === "listen") {
     await runListen(args);
     return;
@@ -40355,6 +41619,10 @@ async function main() {
     await runMember(args);
     return;
   }
+  if (verb === "workspace") {
+    await runWorkspace(args);
+    return;
+  }
   if (verb === "target") {
     await runTarget(args);
     return;
@@ -40446,6 +41714,10 @@ function safeParagraph(message) {
   return message.replace(/\u001b\[[0-?]*[ -/]*[@-~]/g, "").replace(/[\u0000-\u0009\u000b-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/g, " ").slice(0, 2e3);
 }
 main().catch((error) => {
+  if (process.argv[2] === "hook" && process.argv[3] === "check") {
+    process.exitCode = 0;
+    return;
+  }
   if (error instanceof RenewalReauthorisationRequired || error instanceof RenewalRevoked) {
     process.stderr.write(`${safeParagraph(error.message)}
 `);
@@ -40494,12 +41766,16 @@ ${usage()}
   EXIT_RESTARTABLE,
   TURN_BUDGET_CREDENTIAL_MARGIN_MS,
   clampTurnBudgetToCredential,
+  claudeUserPromptHookSnippet,
   describeAudience,
   listenerFailureMessage,
   listenerHostLimits,
   listenerPermissionMode,
+  listenerRouteConfiguration,
   listenerStatusJson,
+  renderListenerStatus,
   renderRoster,
+  replyRefusalHint,
   resolveDetachedClaudeExecutable,
   resolveDetachedCodexExecutable,
   resolveTurnBudgetOrDefer