cubefarm 0.3.12 → 0.3.14

package/dist-server/index.js

@@ -661,6 +661,80 @@ function sweepDesks(fullName, keep) {
     return result;
   });
 }
+var TRIM_DIRS = ["node_modules", "dist", "dist-server", "test-results", "playwright-report", ".swarm-home", ".preview-tmp", ".playwright-mcp"];
+async function dirSize(dir, concurrency = 8) {
+  let total = 0;
+  const queue = [dir];
+  let active = 0;
+  const visit = async (d) => {
+    const entries = await fs2.readdir(d, { withFileTypes: true }).catch(() => []);
+    const sizes = await Promise.all(
+      entries.map((e) => {
+        const p = path2.join(d, e.name);
+        if (e.isDirectory()) queue.push(p);
+        return e.isFile() ? fs2.lstat(p).then((s2) => s2.size, () => 0) : 0;
+      })
+    );
+    for (const s2 of sizes) total += s2;
+  };
+  await new Promise((resolve) => {
+    const next = () => {
+      while (active < concurrency && queue.length) {
+        active++;
+        void visit(queue.pop()).finally(() => {
+          active--;
+          next();
+        });
+      }
+      if (active === 0 && queue.length === 0) resolve();
+    };
+    next();
+  });
+  return total;
+}
+async function trimTargets(wt) {
+  const ignored = (await git(["ls-files", "-z", "--others", "--ignored", "--exclude-standard", "--directory"], { cwd: wt })).split("\0").filter((p) => p.endsWith("/")).map((p) => p.slice(0, -1)).filter((p) => p.includes("/") ? p.endsWith("/node_modules") : TRIM_DIRS.includes(p));
+  const present = [];
+  for (const name of TRIM_DIRS) if ((await fs2.lstat(path2.join(wt, name)).catch(() => null))?.isDirectory()) present.push(name);
+  const candidates = [.../* @__PURE__ */ new Set([...ignored, ...present])];
+  if (candidates.length === 0) return [];
+  const tracked = (await git(["ls-files", "-z", "--", ...candidates], { cwd: wt })).split("\0").filter(Boolean);
+  return candidates.filter((c) => !tracked.some((f) => f.startsWith(`${c}/`)));
+}
+async function trimDesk(fullName, agentSlug, stillIdle = () => true) {
+  const wt = deskDir(fullName, agentSlug);
+  const trash = path2.join(repoDir(fullName), "trash");
+  for (const name of await fs2.readdir(trash).catch(() => [])) {
+    if (name.startsWith(`${agentSlug}-`)) await removeDir(path2.join(trash, name)).catch(() => void 0);
+  }
+  const bin = path2.join(trash, `${agentSlug}-${Date.now()}`);
+  const moved = await withRepoLock(fullName, async () => {
+    if (!stillIdle() || !await exists(path2.join(wt, ".git"))) return null;
+    const out = { removed: [], skipped: [] };
+    const targets = await trimTargets(wt);
+    for (const [i, rel2] of targets.entries()) {
+      if (!stillIdle()) break;
+      try {
+        await fs2.mkdir(bin, { recursive: true });
+        await fs2.rename(path2.join(wt, rel2), path2.join(bin, `${i}-${path2.basename(rel2)}`));
+        out.removed.push(rel2);
+      } catch {
+        out.skipped.push(rel2);
+      }
+    }
+    return out;
+  });
+  if (!moved) return null;
+  if (moved.removed.length === 0) return { freed: 0, ...moved };
+  const size = await dirSize(bin);
+  let left = 0;
+  try {
+    await removeDir(bin);
+  } catch {
+    left = await dirSize(bin);
+  }
+  return { freed: size - left, ...moved };
+}
 var LAUNCHERS = ["node.exe", "cmd.exe", "bash.exe", "sh.exe", "conhost.exe", "python.exe", "npm.exe", "npx.exe", "bun.exe", "deno.exe"];
 var pathForms = (p) => [.../* @__PURE__ */ new Set([p, p.replaceAll("\\", "/"), p.replaceAll("\\", "\\\\")])];
 function leftoversInDesk(listing, desk, keep) {
@@ -725,8 +799,8 @@ Write-Output $kill.Count`;
 }
 
 // server/agentRunner.ts
-import fs4 from "node:fs";
-import path4 from "node:path";
+import fs5 from "node:fs";
+import path5 from "node:path";
 import { query } from "@anthropic-ai/claude-agent-sdk";
 
 // server/browser.ts
@@ -764,129 +838,403 @@ function browserProblem(mcp, chrome = hasChrome()) {
   return null;
 }
 
-// server/agentRunner.ts
-var InputQueue = class {
-  items = [];
-  waiters = [];
-  closed = false;
-  push(text) {
-    if (this.closed) return;
-    const msg = { type: "user", message: { role: "user", content: text }, parent_tool_use_id: null };
-    const waiter = this.waiters.shift();
-    if (waiter) waiter({ value: msg, done: false });
-    else this.items.push(msg);
-  }
-  close() {
-    this.closed = true;
-    for (const w of this.waiters.splice(0)) w({ value: void 0, done: true });
-  }
-  [Symbol.asyncIterator]() {
-    return {
-      next: () => {
-        const item = this.items.shift();
-        if (item) return Promise.resolve({ value: item, done: false });
-        if (this.closed) return Promise.resolve({ value: void 0, done: true });
-        return new Promise((resolve) => this.waiters.push(resolve));
+// server/clis.ts
+import fs4 from "node:fs";
+import { createRequire as createRequire2 } from "node:module";
+import path4 from "node:path";
+var CLIS = [
+  { id: "claude", label: "Claude Code", command: "claude", integrated: true },
+  { id: "codex", label: "Codex", command: "codex", integrated: false },
+  { id: "opencode", label: "OpenCode", command: "opencode", integrated: false }
+];
+var isCli = (v) => CLIS.some((c) => c.id === v);
+var cliLabel = (id) => CLIS.find((c) => c.id === id)?.label ?? id;
+var WIN = process.platform === "win32";
+function resolveCommand(name, env = process.env) {
+  const key = Object.keys(env).find((k) => k.toUpperCase() === "PATH") ?? "PATH";
+  const dirs = (env[key] ?? "").split(path4.delimiter).filter(Boolean);
+  const exts = WIN ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter((e) => /^\.(exe|cmd|bat|com)$/i.test(e)) : [""];
+  for (const dir of dirs) {
+    for (const ext of exts) {
+      const file = path4.join(dir, name + ext.toLowerCase());
+      try {
+        const st = fs4.statSync(file);
+        if (st.isFile() && (WIN || (st.mode & 73) !== 0)) return file;
+      } catch {
       }
-    };
+    }
   }
-};
-var allowAll = async (_toolName, input) => ({ behavior: "allow", updatedInput: input });
-function screenshotFile(cwd, text) {
-  const file = text.match(/\]\(([^)\s]+\.(png|jpe?g))\)/i);
-  if (!file) return null;
+  return null;
+}
+function unwrapCmdShim(shimPath, text) {
+  const line = text.split(/\r?\n/).find((l) => /%\*\s*$/.test(l));
+  if (!line) return null;
+  const dir = path4.dirname(shimPath);
+  const targets = [...line.matchAll(/"%dp0%\\([^"]+)"/g)].map((m) => path4.join(dir, m[1]));
+  const target = targets[targets.length - 1];
+  if (!target) return null;
+  if (/\.exe$/i.test(target)) return { file: target, args: [] };
+  if (!/\.[cm]?js$/i.test(target)) return null;
+  const between = line.slice(line.indexOf('"%_prog%"') + '"%_prog%"'.length, line.lastIndexOf(`"%dp0%\\`));
+  const nodeFlags = line.includes('"%_prog%"') ? between.trim().split(/\s+/).filter((f) => f.startsWith("--")) : [];
+  const localNode = path4.join(dir, "node.exe");
+  return { file: fs4.existsSync(localNode) ? localNode : process.execPath, args: [...nodeFlags, target] };
+}
+var bundled;
+function bundledClaude() {
+  if (bundled !== void 0) return bundled;
+  bundled = null;
+  let sdk;
   try {
-    return { data: fs4.readFileSync(path4.resolve(cwd, file[1])), mime: /png$/i.test(file[2]) ? "image/png" : "image/jpeg" };
+    sdk = createRequire2(import.meta.url).resolve("@anthropic-ai/claude-agent-sdk");
   } catch {
     return null;
   }
-}
-var IMAGE_MIME = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg" };
-function newScreenshots(dir, seen, now2 = Date.now()) {
-  let names;
-  try {
-    names = fs4.readdirSync(dir);
-  } catch {
-    return [];
+  const { platform, arch } = process;
+  const report = platform === "linux" ? process.report?.getReport() : void 0;
+  const musl = platform === "linux" && !report?.header?.glibcVersionRuntime;
+  const targets = platform === "linux" ? musl ? [`linux-${arch}-musl`, `linux-${arch}`] : [`linux-${arch}`, `linux-${arch}-musl`] : [`${platform}-${arch}`];
+  for (const target of targets) {
+    try {
+      bundled = createRequire2(sdk).resolve(`@anthropic-ai/claude-agent-sdk-${target}/claude${WIN ? ".exe" : ""}`);
+      return bundled;
+    } catch {
+    }
   }
-  const found2 = [];
-  for (const name of names.sort()) {
-    const mime = IMAGE_MIME[path4.extname(name).toLowerCase()];
-    const file = path4.join(dir, name);
-    if (!mime || seen.has(name)) continue;
+  return null;
+}
+function commandFor(id) {
+  const bundled2 = id === "claude" ? bundledClaude() : null;
+  if (bundled2) return { file: bundled2, args: [] };
+  const def = CLIS.find((c) => c.id === id);
+  const found2 = def && resolveCommand(def.command);
+  if (!found2) return null;
+  if (WIN && /\.(cmd|bat)$/i.test(found2)) {
     try {
-      if (now2 - fs4.statSync(file).mtimeMs < 1e3) continue;
+      return unwrapCmdShim(found2, fs4.readFileSync(found2, "utf8")) ?? { file: found2, args: [] };
     } catch {
-      continue;
+      return { file: found2, args: [] };
     }
-    found2.push({ name, file, mime });
   }
-  return found2;
+  return { file: found2, args: [] };
 }
-var clip = (s2, n) => s2.length > n ? `${s2.slice(0, n - 1)}\u2026` : s2;
-function rel(cwd, p) {
-  const s2 = String(p ?? "");
-  if (!s2) return "";
-  const r = path4.relative(cwd, path4.resolve(cwd, s2));
-  return r && !r.startsWith("..") ? r.replaceAll("\\", "/") : s2;
+async function detectClis() {
+  return Promise.all(
+    CLIS.map(async (c) => {
+      const cmd = commandFor(c.id);
+      const version = cmd ? await run(cmd.file, [...cmd.args, "--version"], { timeoutMs: 2e4 }).catch(() => null) : null;
+      return { id: c.id, label: c.label, installed: !!cmd, version: version?.split(/\r?\n/)[0].trim().slice(0, 60) || null, integrated: c.integrated };
+    })
+  );
 }
-var escapeRe = (s2) => s2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-function tidyPaths(cwd, text) {
-  let out = text;
-  for (const v of /* @__PURE__ */ new Set([cwd, cwd.replaceAll("\\", "/")])) {
-    out = out.replace(new RegExp(`^cd\\s+"?${escapeRe(v)}"?\\s*(&&|;)\\s*`, "i"), "");
-    out = out.replace(new RegExp(`${escapeRe(v)}[\\\\/]?`, "gi"), "./");
-  }
-  return out;
+var EFFORT_CODEX = { low: "low", medium: "medium", high: "high", xhigh: "xhigh", max: "xhigh" };
+var CODEX_HOOK_EVENTS = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Interrupt"];
+function codexHookCommand(node, script, win = WIN) {
+  return win ? `node "${script}"` : [node, script].map((s2) => `'${s2.replaceAll("'", `'"'"'`)}'`).join(" ");
 }
-function describeTool(cwd, name, input) {
-  switch (name) {
-    case "Bash":
-    case "PowerShell":
-      return `$ ${clip(tidyPaths(cwd, String(input.command ?? "")).split("\n")[0], 220)}`;
-    case "Read":
-      return `Read ${rel(cwd, input.file_path)}`;
-    case "Write":
-      return `Write ${rel(cwd, input.file_path)}`;
-    case "Edit":
-    case "MultiEdit":
-      return `Edit ${rel(cwd, input.file_path)}`;
-    case "Glob":
-      return `Glob ${input.pattern}`;
-    case "Grep":
-      return `Grep "${clip(String(input.pattern ?? ""), 80)}"`;
-    case "WebFetch":
-      return `Fetch ${input.url}`;
-    case "WebSearch":
-      return `Search "${input.query}"`;
-    case "Task":
-    case "Agent":
-      return `Subagent: ${input.description ?? ""}`;
-    case "TodoWrite":
-      return "Update todo list";
-    case "ToolSearch":
-      return `Load tools ${String(input.query ?? "").replace(/^select:/, "")}`;
-    case "apply_patch": {
-      const files = [...String(input.command ?? "").matchAll(/^\*\*\* (Add|Update|Delete) File: (.+)$/gm)].map((m) => `${m[1] === "Update" ? "" : `${m[1].toLowerCase()} `}${rel(cwd, m[2].trim())}`);
-      return `Edit ${clip(files.join(", ") || "files", 200)}`;
+var CROSS_TURN_TOOLS = ["Monitor", "ScheduleWakeup", "CronCreate", "CronDelete", "CronList", "RemoteTrigger"];
+function launchArgs(id, ctx) {
+  switch (id) {
+    case "claude": {
+      const disallowed = ["AskUserQuestion", "EnterPlanMode", "ExitPlanMode", ...CROSS_TURN_TOOLS, ...ctx.role === "ceo" ? ["Bash", "PowerShell", "NotebookEdit"] : []];
+      const args = [
+        ...ctx.resumeId ? ["--resume", ctx.resumeId] : ["--session-id", ctx.sessionId],
+        ...ctx.model ? ["--model", ctx.model] : [],
+        ...ctx.effort ? ["--effort", ctx.effort] : [],
+        // The office's PreToolUse hook answers every permission question (allow, or deny with an office rule).
+        "--permission-mode",
+        "acceptEdits",
+        // On top of the manager's own setup (settings, skills, plugins, MCP servers): the office's hooks and servers.
+        "--settings",
+        ctx.files.settings,
+        ...ctx.files.mcp ? ["--mcp-config", ctx.files.mcp] : [],
+        "--append-system-prompt-file",
+        ctx.files.system,
+        "--name",
+        ctx.name,
+        ...ctx.additionalDirectories.flatMap((d) => ["--add-dir", d]),
+        "--disallowedTools",
+        ...disallowed,
+        "--",
+        ctx.prompt
+      ];
+      return { args, env: { DISABLE_AUTOUPDATER: "1" } };
+    }
+    case "codex": {
+      const toml = (s2) => JSON.stringify(s2);
+      const args = [
+        "--no-alt-screen",
+        "-c",
+        `notify=[${[process.execPath, ctx.notify.script, ctx.notify.url].map(toml).join(",")}]`,
+        "-c",
+        `developer_instructions=${toml(ctx.systemAppend)}`,
+        ...ctx.model ? ["-m", ctx.model] : [],
+        ...ctx.effort ? ["-c", `model_reasoning_effort=${toml(EFFORT_CODEX[ctx.effort])}`] : [],
+        ...ctx.browser ? ["-c", `mcp_servers.playwright={command=${toml(ctx.browser.command)},args=[${ctx.browser.args.map(toml).join(",")}]}`] : [],
+        ...CODEX_HOOK_EVENTS.flatMap((e) => ["-c", `hooks.${e}=[{hooks=[{type="command",command=${toml(codexHookCommand(process.execPath, ctx.codexHook))},timeout=10}]}]`]),
+        // Like the manager's own Codex, but it can't stop to ask: no approvals and no sandbox (its sandbox can't reach
+        // the credential store, so git and gh fail in it).
+        "--dangerously-bypass-approvals-and-sandbox"
+      ];
+      return { args: ctx.resumeId ? ["resume", ...args, ctx.resumeId, ctx.prompt] : [...args, "--", ctx.prompt], env: { CUBEFARM_HOOK_URL: ctx.notify.url } };
+    }
+    case "opencode": {
+      const config = {
+        plugin: [ctx.plugin],
+        instructions: [ctx.files.system],
+        autoupdate: false,
+        // several agents starting at once must not each reinstall it
+        permission: { edit: "allow", bash: "allow", webfetch: "allow" },
+        // it can't stop to ask either
+        ...ctx.browser ? { mcp: { playwright: { type: "local", command: [ctx.browser.command, ...ctx.browser.args], enabled: true } } } : {}
+      };
+      const args = [
+        "--auto",
+        ...ctx.model ? ["--model", ctx.model] : [],
+        ...ctx.resumeId ? ["--session", ctx.resumeId] : [],
+        "--prompt",
+        ctx.prompt
+      ];
+      return { args, env: { OPENCODE_CONFIG_CONTENT: JSON.stringify(config), CUBEFARM_NOTIFY_URL: ctx.notify.url } };
     }
   }
-  if (name.startsWith("mcp__playwright__")) {
-    const action = name.replace("mcp__playwright__browser_", "").replace("mcp__playwright__", "");
-    const detail = input.url ?? input.element ?? input.text ?? "";
-    return `\u{1F310} ${action}${detail ? ` ${clip(String(detail), 120)}` : ""}`;
-  }
-  if (name.startsWith("mcp__office__")) return describeOfficeTool(name.slice("mcp__office__".length), input);
-  return `${name}(${clip(JSON.stringify(input), 140)})`;
 }
-function describeOfficeTool(action, input) {
-  const floor = input.floor != null ? ` \u2192 floor ${input.floor}` : "";
-  switch (action) {
-    case "company_status":
-      return "\u{1F3E2} company_status";
-    case "agent_detail":
-      return `\u{1F50E} agent_detail ${String(input.agent_id ?? "")}`;
-    case "set_floor_profile":
+function oneAtATime() {
+  const tails = /* @__PURE__ */ new Map();
+  return (key, step) => {
+    const next = (tails.get(key) ?? Promise.resolve()).then(step).then(
+      () => void 0,
+      () => void 0
+    );
+    tails.set(key, next);
+    void next.then(() => tails.get(key) === next && tails.delete(key));
+    return next;
+  };
+}
+var threadSteps = oneAtATime();
+function codexThread(action, id, after) {
+  return threadSteps(id, async () => {
+    await after;
+    const cmd = commandFor("codex");
+    if (cmd) await run(cmd.file, [...cmd.args, action, id], { timeoutMs: 3e4 });
+  });
+}
+var TRUST_PROMPT = /Quick safety check|Do you trust the (files|contents) (in|of) this|trust this folder|allow Codex to work in this folder/i;
+function trustKey(screen) {
+  if (!TRUST_PROMPT.test(screen)) return null;
+  const selected = screen.match(/^\s*[❯›]\s*(?:\d+\.\s*)?(.+)$/m)?.[1] ?? "";
+  if (/^(yes|trust|continue|proceed)\b/i.test(selected.trim())) return "enter";
+  if (/^(no|exit|quit|cancel)\b/i.test(selected.trim())) return "down";
+  return null;
+}
+function hookReviewKey(screen) {
+  if (!/Hooks need review/i.test(screen)) return null;
+  const selected = screen.match(/^\s*[❯›]\s*(?:\d+\.\s*)?(.+)$/m)?.[1] ?? "";
+  return /^continue without trusting/i.test(selected.trim()) ? "enter" : "down";
+}
+function interruptions(screen) {
+  return screen.split("\n").filter((l) => /\binterrupted\b/i.test(l)).length;
+}
+var STATUSLINE_SOURCE = String.raw`// cubefarm: Claude Code's status line. Forwards the session's status to the office and prints the office's line.
+const url = process.argv[2];
+let body = '';
+process.stdin.on('data', (c) => (body += c));
+process.stdin.on('end', async () => {
+  try {
+    const status = JSON.parse(body);
+    const res = await fetch(url, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ hook_event_name: 'StatusLine', session_id: status.session_id, cost: status.cost, rate_limits: status.rate_limits }),
+      signal: AbortSignal.timeout(2000),
+    });
+    const out = await res.json();
+    process.stdout.write(String(out.statusLine ?? ''));
+  } catch {
+    process.stdout.write('cubefarm');
+  }
+});
+`;
+var NOTIFY_SOURCE = String.raw`// cubefarm: Codex's notify program. Tells the office a turn is complete.
+const [url, payload] = process.argv.slice(2);
+let event = {};
+try {
+  event = JSON.parse(payload ?? '{}');
+} catch {}
+if (event.type === 'agent-turn-complete') {
+  const input = String((event['input-messages'] ?? [])[0] ?? '').slice(0, 300);
+  fetch(url, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ hook_event_name: 'TurnComplete', session_id: event['thread-id'] ?? null, last_assistant_message: event['last-assistant-message'] ?? '', input }),
+    signal: AbortSignal.timeout(3000),
+  }).catch(() => {});
+}
+`;
+var CODEX_HOOK_SOURCE = String.raw`// cubefarm: Codex's hooks. Tells the office what Codex is doing; never changes what it does.
+const url = process.env.CUBEFARM_HOOK_URL;
+const chunks = [];
+process.stdin.on('data', (c) => chunks.push(c));
+process.stdin.on('end', async () => {
+  try {
+    if (url) await fetch(url, { method: 'POST', headers: { 'content-type': 'application/json' }, body: Buffer.concat(chunks), signal: AbortSignal.timeout(5000) });
+  } catch {}
+  process.stdout.write('{}');
+});
+`;
+var OPENCODE_PLUGIN_SOURCE = String.raw`// cubefarm: tells the office when OpenCode's session goes idle.
+export default async function CubefarmPlugin({ client } = {}) {
+  const url = process.env.CUBEFARM_NOTIFY_URL;
+  if (!url) return {};
+  let root;
+  const post = (body) =>
+    fetch(url, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body), signal: AbortSignal.timeout(3000) }).catch(() => {});
+  const lastReply = async (id) => {
+    try {
+      const res = await client.session.messages({ path: { id } });
+      const reply = (res?.data ?? []).filter((m) => m?.info?.role === 'assistant').pop();
+      return (reply?.parts ?? []).filter((p) => p?.type === 'text').map((p) => p.text).join('\n').trim();
+    } catch {
+      return '';
+    }
+  };
+  return {
+    event: async ({ event }) => {
+      const props = event?.properties ?? {};
+      if (event?.type === 'session.created' && !props.info?.parentID && !root) root = props.info?.id;
+      const sessionID = props.sessionID ?? props.info?.id;
+      if (event?.type === 'session.idle' && (!root || sessionID === root)) {
+        post({ hook_event_name: 'TurnComplete', session_id: sessionID ?? null, last_assistant_message: sessionID ? await lastReply(sessionID) : '' });
+      }
+      if (event?.type === 'session.error') post({ hook_event_name: 'TurnError', session_id: sessionID ?? null, error: String(props.error?.data?.message ?? props.error?.name ?? 'error') });
+    },
+  };
+}
+`;
+
+// server/agentRunner.ts
+var InputQueue = class {
+  items = [];
+  waiters = [];
+  closed = false;
+  push(text) {
+    if (this.closed) return;
+    const msg = { type: "user", message: { role: "user", content: text }, parent_tool_use_id: null };
+    const waiter = this.waiters.shift();
+    if (waiter) waiter({ value: msg, done: false });
+    else this.items.push(msg);
+  }
+  close() {
+    this.closed = true;
+    for (const w of this.waiters.splice(0)) w({ value: void 0, done: true });
+  }
+  [Symbol.asyncIterator]() {
+    return {
+      next: () => {
+        const item = this.items.shift();
+        if (item) return Promise.resolve({ value: item, done: false });
+        if (this.closed) return Promise.resolve({ value: void 0, done: true });
+        return new Promise((resolve) => this.waiters.push(resolve));
+      }
+    };
+  }
+};
+var allowAll = async (_toolName, input) => ({ behavior: "allow", updatedInput: input });
+function screenshotFile(cwd, text) {
+  const file = text.match(/\]\(([^)\s]+\.(png|jpe?g))\)/i);
+  if (!file) return null;
+  try {
+    return { data: fs5.readFileSync(path5.resolve(cwd, file[1])), mime: /png$/i.test(file[2]) ? "image/png" : "image/jpeg" };
+  } catch {
+    return null;
+  }
+}
+var IMAGE_MIME = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg" };
+function newScreenshots(dir, seen, now2 = Date.now()) {
+  let names;
+  try {
+    names = fs5.readdirSync(dir);
+  } catch {
+    return [];
+  }
+  const found2 = [];
+  for (const name of names.sort()) {
+    const mime = IMAGE_MIME[path5.extname(name).toLowerCase()];
+    const file = path5.join(dir, name);
+    if (!mime || seen.has(name)) continue;
+    try {
+      if (now2 - fs5.statSync(file).mtimeMs < 1e3) continue;
+    } catch {
+      continue;
+    }
+    found2.push({ name, file, mime });
+  }
+  return found2;
+}
+var clip = (s2, n) => s2.length > n ? `${s2.slice(0, n - 1)}\u2026` : s2;
+function rel(cwd, p) {
+  const s2 = String(p ?? "");
+  if (!s2) return "";
+  const r = path5.relative(cwd, path5.resolve(cwd, s2));
+  return r && !r.startsWith("..") ? r.replaceAll("\\", "/") : s2;
+}
+var escapeRe = (s2) => s2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function tidyPaths(cwd, text) {
+  let out = text;
+  for (const v of /* @__PURE__ */ new Set([cwd, cwd.replaceAll("\\", "/")])) {
+    out = out.replace(new RegExp(`^cd\\s+"?${escapeRe(v)}"?\\s*(&&|;)\\s*`, "i"), "");
+    out = out.replace(new RegExp(`${escapeRe(v)}[\\\\/]?`, "gi"), "./");
+  }
+  return out;
+}
+function describeTool(cwd, name, input) {
+  switch (name) {
+    case "Bash":
+    case "PowerShell":
+      return `$ ${clip(tidyPaths(cwd, String(input.command ?? "")).split("\n")[0], 220)}`;
+    case "Read":
+      return `Read ${rel(cwd, input.file_path)}`;
+    case "Write":
+      return `Write ${rel(cwd, input.file_path)}`;
+    case "Edit":
+    case "MultiEdit":
+      return `Edit ${rel(cwd, input.file_path)}`;
+    case "Glob":
+      return `Glob ${input.pattern}`;
+    case "Grep":
+      return `Grep "${clip(String(input.pattern ?? ""), 80)}"`;
+    case "WebFetch":
+      return `Fetch ${input.url}`;
+    case "WebSearch":
+      return `Search "${input.query}"`;
+    case "Task":
+    case "Agent":
+      return `Subagent: ${input.description ?? ""}`;
+    case "TodoWrite":
+      return "Update todo list";
+    case "ToolSearch":
+      return `Load tools ${String(input.query ?? "").replace(/^select:/, "")}`;
+    case "apply_patch": {
+      const files = [...String(input.command ?? "").matchAll(/^\*\*\* (Add|Update|Delete) File: (.+)$/gm)].map((m) => `${m[1] === "Update" ? "" : `${m[1].toLowerCase()} `}${rel(cwd, m[2].trim())}`);
+      return `Edit ${clip(files.join(", ") || "files", 200)}`;
+    }
+  }
+  if (name.startsWith("mcp__playwright__")) {
+    const action = name.replace("mcp__playwright__browser_", "").replace("mcp__playwright__", "");
+    const detail = input.url ?? input.element ?? input.text ?? "";
+    return `\u{1F310} ${action}${detail ? ` ${clip(String(detail), 120)}` : ""}`;
+  }
+  if (name.startsWith("mcp__office__")) return describeOfficeTool(name.slice("mcp__office__".length), input);
+  return `${name}(${clip(JSON.stringify(input), 140)})`;
+}
+function describeOfficeTool(action, input) {
+  const floor = input.floor != null ? ` \u2192 floor ${input.floor}` : "";
+  switch (action) {
+    case "company_status":
+      return "\u{1F3E2} company_status";
+    case "agent_detail":
+      return `\u{1F50E} agent_detail ${String(input.agent_id ?? "")}`;
+    case "set_floor_profile":
       return `\u{1F5C2}\uFE0F set_floor_profile${floor}${input.summary ? `: ${clip(String(input.summary), 90)}` : ""}`;
     case "update_job":
       return `\u{1FAAA} update_job ${input.title ? `"${clip(String(input.title), 60)}"` : String(input.agent_id ?? "")}`;
@@ -962,7 +1310,7 @@ function startSession(opts, callbacks) {
     if (problem) cb.log([{ kind: "error", text: problem }]);
   }
   if (opts.office) mcpServers.office = opts.office.server;
-  const disallowedTools = ["AskUserQuestion", "EnterPlanMode", "ExitPlanMode"];
+  const disallowedTools = ["AskUserQuestion", "EnterPlanMode", "ExitPlanMode", ...CROSS_TURN_TOOLS];
   if (opts.role === "ceo") disallowedTools.push("Bash", "PowerShell", "NotebookEdit");
   const options = {
     cwd: opts.cwd,
@@ -1082,333 +1430,60 @@ function startSession(opts, callbacks) {
           if (name.startsWith("mcp__playwright__")) {
             const url = text.match(/Page URL:\s*(\S+)/);
             if (url) cb.browserUrl(url[1]);
-          }
-          if (name === "TodoWrite") continue;
-          if (block.is_error) out.push({ kind: "error", text: `  \u23BF ${clip(tidyPaths(opts.cwd, text).split("\n")[0] || "Error", 200)}` });
-          else out.push(...summariseResult(opts.cwd, name, text));
-        }
-        cb.tool(null);
-        if (out.length) cb.log(out);
-        break;
-      }
-      case "result": {
-        lastCost = msg.total_cost_usd;
-        lastTurns = msg.num_turns;
-        if (msg.subtype === "success" && !msg.is_error && msg.num_turns === 0) {
-          emptyTurn = setTimeout(() => answered(msg), 3e4);
-          break;
-        }
-        if (msg.subtype === "success" && !msg.is_error && msg.result.trim()) cb.turn?.(msg.result.trim());
-        answered(msg);
-        break;
-      }
-    }
-  };
-  (async () => {
-    try {
-      for await (const msg of query({ prompt: input, options })) handle(msg);
-      if (pendingTurns > 0) {
-        cb.finished({ ok: false, text: "", costUsd: lastCost, turns: lastTurns, errors: [stopped ? "Stopped by manager" : "Session ended unexpectedly"] });
-      }
-    } catch (err) {
-      input.close();
-      const message = stopped ? "Stopped by manager" : err instanceof Error ? err.message : String(err);
-      cb.finished({ ok: false, text: "", costUsd: lastCost, turns: lastTurns, errors: [message] });
-    }
-  })();
-  return {
-    send(text) {
-      pendingTurns += 1;
-      input.push(text);
-    },
-    stop() {
-      stopped = true;
-      clearTimeout(emptyTurn);
-      input.close();
-      abort.abort();
-    }
-  };
-}
-
-// server/cliRunner.ts
-import crypto3 from "node:crypto";
-import fs7 from "node:fs";
-import path8 from "node:path";
-import { pathToFileURL } from "node:url";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-
-// server/clis.ts
-import fs5 from "node:fs";
-import { createRequire as createRequire2 } from "node:module";
-import path5 from "node:path";
-var CLIS = [
-  { id: "claude", label: "Claude Code", command: "claude", integrated: true },
-  { id: "codex", label: "Codex", command: "codex", integrated: false },
-  { id: "opencode", label: "OpenCode", command: "opencode", integrated: false }
-];
-var isCli = (v) => CLIS.some((c) => c.id === v);
-var cliLabel = (id) => CLIS.find((c) => c.id === id)?.label ?? id;
-var WIN = process.platform === "win32";
-function resolveCommand(name, env = process.env) {
-  const key = Object.keys(env).find((k) => k.toUpperCase() === "PATH") ?? "PATH";
-  const dirs = (env[key] ?? "").split(path5.delimiter).filter(Boolean);
-  const exts = WIN ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter((e) => /^\.(exe|cmd|bat|com)$/i.test(e)) : [""];
-  for (const dir of dirs) {
-    for (const ext of exts) {
-      const file = path5.join(dir, name + ext.toLowerCase());
-      try {
-        const st = fs5.statSync(file);
-        if (st.isFile() && (WIN || (st.mode & 73) !== 0)) return file;
-      } catch {
-      }
-    }
-  }
-  return null;
-}
-function unwrapCmdShim(shimPath, text) {
-  const line = text.split(/\r?\n/).find((l) => /%\*\s*$/.test(l));
-  if (!line) return null;
-  const dir = path5.dirname(shimPath);
-  const targets = [...line.matchAll(/"%dp0%\\([^"]+)"/g)].map((m) => path5.join(dir, m[1]));
-  const target = targets[targets.length - 1];
-  if (!target) return null;
-  if (/\.exe$/i.test(target)) return { file: target, args: [] };
-  if (!/\.[cm]?js$/i.test(target)) return null;
-  const between = line.slice(line.indexOf('"%_prog%"') + '"%_prog%"'.length, line.lastIndexOf(`"%dp0%\\`));
-  const nodeFlags = line.includes('"%_prog%"') ? between.trim().split(/\s+/).filter((f) => f.startsWith("--")) : [];
-  const localNode = path5.join(dir, "node.exe");
-  return { file: fs5.existsSync(localNode) ? localNode : process.execPath, args: [...nodeFlags, target] };
-}
-var bundled;
-function bundledClaude() {
-  if (bundled !== void 0) return bundled;
-  bundled = null;
-  let sdk;
-  try {
-    sdk = createRequire2(import.meta.url).resolve("@anthropic-ai/claude-agent-sdk");
-  } catch {
-    return null;
-  }
-  const { platform, arch } = process;
-  const report = platform === "linux" ? process.report?.getReport() : void 0;
-  const musl = platform === "linux" && !report?.header?.glibcVersionRuntime;
-  const targets = platform === "linux" ? musl ? [`linux-${arch}-musl`, `linux-${arch}`] : [`linux-${arch}`, `linux-${arch}-musl`] : [`${platform}-${arch}`];
-  for (const target of targets) {
-    try {
-      bundled = createRequire2(sdk).resolve(`@anthropic-ai/claude-agent-sdk-${target}/claude${WIN ? ".exe" : ""}`);
-      return bundled;
-    } catch {
-    }
-  }
-  return null;
-}
-function commandFor(id) {
-  const bundled2 = id === "claude" ? bundledClaude() : null;
-  if (bundled2) return { file: bundled2, args: [] };
-  const def = CLIS.find((c) => c.id === id);
-  const found2 = def && resolveCommand(def.command);
-  if (!found2) return null;
-  if (WIN && /\.(cmd|bat)$/i.test(found2)) {
-    try {
-      return unwrapCmdShim(found2, fs5.readFileSync(found2, "utf8")) ?? { file: found2, args: [] };
-    } catch {
-      return { file: found2, args: [] };
-    }
-  }
-  return { file: found2, args: [] };
-}
-async function detectClis() {
-  return Promise.all(
-    CLIS.map(async (c) => {
-      const cmd = commandFor(c.id);
-      const version = cmd ? await run(cmd.file, [...cmd.args, "--version"], { timeoutMs: 2e4 }).catch(() => null) : null;
-      return { id: c.id, label: c.label, installed: !!cmd, version: version?.split(/\r?\n/)[0].trim().slice(0, 60) || null, integrated: c.integrated };
-    })
-  );
-}
-var EFFORT_CODEX = { low: "low", medium: "medium", high: "high", xhigh: "xhigh", max: "xhigh" };
-var CODEX_HOOK_EVENTS = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Interrupt"];
-function codexHookCommand(node, script, win = WIN) {
-  return win ? `node "${script}"` : [node, script].map((s2) => `'${s2.replaceAll("'", `'"'"'`)}'`).join(" ");
-}
-function launchArgs(id, ctx) {
-  switch (id) {
-    case "claude": {
-      const disallowed = ["AskUserQuestion", "EnterPlanMode", "ExitPlanMode", ...ctx.role === "ceo" ? ["Bash", "PowerShell", "NotebookEdit"] : []];
-      const args = [
-        ...ctx.resumeId ? ["--resume", ctx.resumeId] : ["--session-id", ctx.sessionId],
-        ...ctx.model ? ["--model", ctx.model] : [],
-        ...ctx.effort ? ["--effort", ctx.effort] : [],
-        // The office's PreToolUse hook answers every permission question (allow, or deny with an office rule).
-        "--permission-mode",
-        "acceptEdits",
-        // On top of the manager's own setup (settings, skills, plugins, MCP servers): the office's hooks and servers.
-        "--settings",
-        ctx.files.settings,
-        ...ctx.files.mcp ? ["--mcp-config", ctx.files.mcp] : [],
-        "--append-system-prompt-file",
-        ctx.files.system,
-        "--name",
-        ctx.name,
-        ...ctx.additionalDirectories.flatMap((d) => ["--add-dir", d]),
-        "--disallowedTools",
-        ...disallowed,
-        "--",
-        ctx.prompt
-      ];
-      return { args, env: { DISABLE_AUTOUPDATER: "1" } };
-    }
-    case "codex": {
-      const toml = (s2) => JSON.stringify(s2);
-      const args = [
-        "--no-alt-screen",
-        "-c",
-        `notify=[${[process.execPath, ctx.notify.script, ctx.notify.url].map(toml).join(",")}]`,
-        "-c",
-        `developer_instructions=${toml(ctx.systemAppend)}`,
-        ...ctx.model ? ["-m", ctx.model] : [],
-        ...ctx.effort ? ["-c", `model_reasoning_effort=${toml(EFFORT_CODEX[ctx.effort])}`] : [],
-        ...ctx.browser ? ["-c", `mcp_servers.playwright={command=${toml(ctx.browser.command)},args=[${ctx.browser.args.map(toml).join(",")}]}`] : [],
-        ...CODEX_HOOK_EVENTS.flatMap((e) => ["-c", `hooks.${e}=[{hooks=[{type="command",command=${toml(codexHookCommand(process.execPath, ctx.codexHook))},timeout=10}]}]`]),
-        // Like the manager's own Codex, but it can't stop to ask: no approvals and no sandbox (its sandbox can't reach
-        // the credential store, so git and gh fail in it).
-        "--dangerously-bypass-approvals-and-sandbox"
-      ];
-      return { args: ctx.resumeId ? ["resume", ...args, ctx.resumeId, ctx.prompt] : [...args, "--", ctx.prompt], env: { CUBEFARM_HOOK_URL: ctx.notify.url } };
-    }
-    case "opencode": {
-      const config = {
-        plugin: [ctx.plugin],
-        instructions: [ctx.files.system],
-        autoupdate: false,
-        // several agents starting at once must not each reinstall it
-        permission: { edit: "allow", bash: "allow", webfetch: "allow" },
-        // it can't stop to ask either
-        ...ctx.browser ? { mcp: { playwright: { type: "local", command: [ctx.browser.command, ...ctx.browser.args], enabled: true } } } : {}
-      };
-      const args = [
-        "--auto",
-        ...ctx.model ? ["--model", ctx.model] : [],
-        ...ctx.resumeId ? ["--session", ctx.resumeId] : [],
-        "--prompt",
-        ctx.prompt
-      ];
-      return { args, env: { OPENCODE_CONFIG_CONTENT: JSON.stringify(config), CUBEFARM_NOTIFY_URL: ctx.notify.url } };
-    }
-  }
-}
-function oneAtATime() {
-  const tails = /* @__PURE__ */ new Map();
-  return (key, step) => {
-    const next = (tails.get(key) ?? Promise.resolve()).then(step).then(
-      () => void 0,
-      () => void 0
-    );
-    tails.set(key, next);
-    void next.then(() => tails.get(key) === next && tails.delete(key));
-    return next;
-  };
-}
-var threadSteps = oneAtATime();
-function codexThread(action, id, after) {
-  return threadSteps(id, async () => {
-    await after;
-    const cmd = commandFor("codex");
-    if (cmd) await run(cmd.file, [...cmd.args, action, id], { timeoutMs: 3e4 });
-  });
-}
-var TRUST_PROMPT = /Quick safety check|Do you trust the (files|contents) (in|of) this|trust this folder|allow Codex to work in this folder/i;
-function trustKey(screen) {
-  if (!TRUST_PROMPT.test(screen)) return null;
-  const selected = screen.match(/^\s*[❯›]\s*(?:\d+\.\s*)?(.+)$/m)?.[1] ?? "";
-  if (/^(yes|trust|continue|proceed)\b/i.test(selected.trim())) return "enter";
-  if (/^(no|exit|quit|cancel)\b/i.test(selected.trim())) return "down";
-  return null;
-}
-function hookReviewKey(screen) {
-  if (!/Hooks need review/i.test(screen)) return null;
-  const selected = screen.match(/^\s*[❯›]\s*(?:\d+\.\s*)?(.+)$/m)?.[1] ?? "";
-  return /^continue without trusting/i.test(selected.trim()) ? "enter" : "down";
-}
-function interruptions(screen) {
-  return screen.split("\n").filter((l) => /\binterrupted\b/i.test(l)).length;
-}
-var STATUSLINE_SOURCE = String.raw`// cubefarm: Claude Code's status line. Forwards the session's status to the office and prints the office's line.
-const url = process.argv[2];
-let body = '';
-process.stdin.on('data', (c) => (body += c));
-process.stdin.on('end', async () => {
-  try {
-    const status = JSON.parse(body);
-    const res = await fetch(url, {
-      method: 'POST',
-      headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({ hook_event_name: 'StatusLine', session_id: status.session_id, cost: status.cost, rate_limits: status.rate_limits }),
-      signal: AbortSignal.timeout(2000),
-    });
-    const out = await res.json();
-    process.stdout.write(String(out.statusLine ?? ''));
-  } catch {
-    process.stdout.write('cubefarm');
-  }
-});
-`;
-var NOTIFY_SOURCE = String.raw`// cubefarm: Codex's notify program. Tells the office a turn is complete.
-const [url, payload] = process.argv.slice(2);
-let event = {};
-try {
-  event = JSON.parse(payload ?? '{}');
-} catch {}
-if (event.type === 'agent-turn-complete') {
-  const input = String((event['input-messages'] ?? [])[0] ?? '').slice(0, 300);
-  fetch(url, {
-    method: 'POST',
-    headers: { 'content-type': 'application/json' },
-    body: JSON.stringify({ hook_event_name: 'TurnComplete', session_id: event['thread-id'] ?? null, last_assistant_message: event['last-assistant-message'] ?? '', input }),
-    signal: AbortSignal.timeout(3000),
-  }).catch(() => {});
-}
-`;
-var CODEX_HOOK_SOURCE = String.raw`// cubefarm: Codex's hooks. Tells the office what Codex is doing; never changes what it does.
-const url = process.env.CUBEFARM_HOOK_URL;
-const chunks = [];
-process.stdin.on('data', (c) => chunks.push(c));
-process.stdin.on('end', async () => {
-  try {
-    if (url) await fetch(url, { method: 'POST', headers: { 'content-type': 'application/json' }, body: Buffer.concat(chunks), signal: AbortSignal.timeout(5000) });
-  } catch {}
-  process.stdout.write('{}');
-});
-`;
-var OPENCODE_PLUGIN_SOURCE = String.raw`// cubefarm: tells the office when OpenCode's session goes idle.
-export default async function CubefarmPlugin({ client } = {}) {
-  const url = process.env.CUBEFARM_NOTIFY_URL;
-  if (!url) return {};
-  let root;
-  const post = (body) =>
-    fetch(url, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body), signal: AbortSignal.timeout(3000) }).catch(() => {});
-  const lastReply = async (id) => {
-    try {
-      const res = await client.session.messages({ path: { id } });
-      const reply = (res?.data ?? []).filter((m) => m?.info?.role === 'assistant').pop();
-      return (reply?.parts ?? []).filter((p) => p?.type === 'text').map((p) => p.text).join('\n').trim();
-    } catch {
-      return '';
+          }
+          if (name === "TodoWrite") continue;
+          if (block.is_error) out.push({ kind: "error", text: `  \u23BF ${clip(tidyPaths(opts.cwd, text).split("\n")[0] || "Error", 200)}` });
+          else out.push(...summariseResult(opts.cwd, name, text));
+        }
+        cb.tool(null);
+        if (out.length) cb.log(out);
+        break;
+      }
+      case "result": {
+        lastCost = msg.total_cost_usd;
+        lastTurns = msg.num_turns;
+        if (msg.subtype === "success" && !msg.is_error && msg.num_turns === 0) {
+          emptyTurn = setTimeout(() => answered(msg), 3e4);
+          break;
+        }
+        if (msg.subtype === "success" && !msg.is_error && msg.result.trim()) cb.turn?.(msg.result.trim());
+        answered(msg);
+        break;
+      }
     }
   };
-  return {
-    event: async ({ event }) => {
-      const props = event?.properties ?? {};
-      if (event?.type === 'session.created' && !props.info?.parentID && !root) root = props.info?.id;
-      const sessionID = props.sessionID ?? props.info?.id;
-      if (event?.type === 'session.idle' && (!root || sessionID === root)) {
-        post({ hook_event_name: 'TurnComplete', session_id: sessionID ?? null, last_assistant_message: sessionID ? await lastReply(sessionID) : '' });
+  (async () => {
+    try {
+      for await (const msg of query({ prompt: input, options })) handle(msg);
+      if (pendingTurns > 0) {
+        cb.finished({ ok: false, text: "", costUsd: lastCost, turns: lastTurns, errors: [stopped ? "Stopped by manager" : "Session ended unexpectedly"] });
       }
-      if (event?.type === 'session.error') post({ hook_event_name: 'TurnError', session_id: sessionID ?? null, error: String(props.error?.data?.message ?? props.error?.name ?? 'error') });
+    } catch (err) {
+      input.close();
+      const message = stopped ? "Stopped by manager" : err instanceof Error ? err.message : String(err);
+      cb.finished({ ok: false, text: "", costUsd: lastCost, turns: lastTurns, errors: [message] });
+    }
+  })();
+  return {
+    send(text) {
+      pendingTurns += 1;
+      input.push(text);
     },
+    stop() {
+      stopped = true;
+      clearTimeout(emptyTurn);
+      input.close();
+      abort.abort();
+    }
   };
 }
-`;
+
+// server/cliRunner.ts
+import crypto3 from "node:crypto";
+import fs7 from "node:fs";
+import path8 from "node:path";
+import { pathToFileURL } from "node:url";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 
 // server/ptyClient.ts
 import crypto2 from "node:crypto";
@@ -2924,6 +2999,7 @@ var realBackend = {
   installDeps: (dir, cb) => installDesk(dir, cb),
   removeDesk,
   sweepDesks,
+  trimDesk,
   releaseDesk: (fullName, agentSlug, port) => releaseDesk(fullName, agentSlug, port, officeProcesses()),
   startSession: (opts, cb) => opts.terminal ? startCliSession(opts, cb) : startSession(opts, cb),
   terminals: terminalsAvailable,
@@ -3422,6 +3498,12 @@ Closes #${pr.closesIssues[0] ?? "?"}`,
     },
     removeDesk: async () => void 0,
     sweepDesks: async () => ({ desks: 0, folders: 0, branches: 0, patches: [], skipped: [] }),
+    // A made-up install and build of 300-900 MB, so the setting and the phone message can be seen.
+    trimDesk: async (_fullName, _slug, stillIdle) => {
+      await new Promise((r) => setTimeout(r, 300));
+      if (!stillIdle()) return null;
+      return { freed: Math.round((300 + Math.random() * 600) * 2 ** 20), removed: ["node_modules", "dist"], skipped: [] };
+    },
     releaseDesk: async () => void 0,
     startSession: (opts, cb) => {
       if (++sessionsStarted === USAGE_WARNING_AT) fakeUsageWarning(cb);
@@ -4021,6 +4103,101 @@ function holdUps(issues) {
   return out;
 }
 
+// server/prompts.ts
+var PLACEHOLDERS = {
+  worktree: "<your worktree>",
+  issue: "<issue>",
+  pr: "<PR>",
+  prTitle: "<PR title>",
+  prUrl: "<PR URL>",
+  branch: "<branch>"
+};
+var ONE_TURN = "Your session ends when your turn ends: background tasks and notifications won't wake you. Never end a turn to wait. Wait in the foreground with a timeout, then finish.";
+var devBranch = (issue2, slug) => `swarm/issue-${issue2}-${slug}`;
+var qaBranch = (pr, slug) => `qa/pr-${pr}-${slug}`;
+function devSystemPrompt({ agent: a, repo, port, cwd, branch, linked, fixing, depsLine }) {
+  const push = fixing ? `git push origin HEAD:${fixing.headRef}` : `git push -u origin ${branch}`;
+  const links = linked.map((r) => `- ${r.fullName}: read-only reference clone at ${r.dir}`);
+  return [
+    `You are ${a.name}, ${a.title ? `the team's ${a.title},` : "a software engineer"} on an autonomous agent team ("cubefarm"). Several teammates work in parallel on other issues of the same repository, each in their own git worktree. Nobody is watching live to answer questions, so make sensible decisions yourself and record assumptions in the PR description. The manager may occasionally send you messages; follow their instructions.`,
+    `Every pull request is reviewed and tested by a QA teammate. ${repo.autoMerge ? "Once they sign off and GitHub's checks pass, the office merges it by itself" : "Once they sign off, the manager merges it"}. If they find problems, or checks fail, or it conflicts with the default branch, you will get the details; fix them on the same branch.`,
+    a.brief ? `
+Your job description:
+${a.brief}` : "",
+    "",
+    `Repository: ${repo.fullName} (default branch: ${repo.defaultBranch})`,
+    repo.summary ? `Project: ${repo.summary}` : "",
+    repo.mission ? `What the team is building (the manager's brief): ${repo.mission}` : "",
+    `Your worktree: ${cwd}`,
+    depsLine ?? "",
+    fixing ? `You are fixing pull request #${fixing.pr}. Its code is checked out on local branch ${branch}; push fixes with: ${push}. Do not open a new pull request.` : `Your branch: ${branch} (already checked out, created from origin/${repo.defaultBranch})`,
+    links.length ? `Related repositories you may read for context (do not modify them):
+${links.join("\n")}` : "",
+    "",
+    "Workflow:",
+    "1. Read the issue and explore the relevant code before changing anything.",
+    "2. Implement the change with focused commits and clear messages.",
+    "3. Run the project's existing tests, linters and build (if any) and fix what you broke. Install dependencies first if needed (e.g. npm install when node_modules is missing).",
+    repo.browserTesting ? `4. If the project has a web UI, start its dev server in the background on port ${port} (reserved for you, so you don't collide with teammates), then check your change with the Playwright browser tools (mcp__playwright__browser_navigate, browser_snapshot, browser_click, browser_take_screenshot). Stop the dev server when you're done.` : "4. Verify the behaviour you changed as directly as you can.",
+    `5. Push: ${push}`,
+    fixing ? "6. Reply with a short summary of what you fixed." : `6. Open a pull request with the GitHub CLI: gh pr create --base ${repo.defaultBranch} --head ${branch} --title "<concise title>" --body "<what changed, how you verified it, assumptions>". The body must contain "Closes #<issue number>".`,
+    fixing ? "" : "7. End your final message with the pull request URL on its own line.",
+    "",
+    "Rules: never push to the default branch, never force-push, never merge pull requests yourself (the office merges them once QA and the checks pass), and never edit files outside your worktree. If you cannot finish, open a draft PR (gh pr create --draft) explaining what is left and why.",
+    ONE_TURN
+  ].filter((l) => l !== "").join("\n");
+}
+function qaSystemPrompt({ agent: a, repo, port, cwd, branch, pr, depsLine, testStep: testStep2 }) {
+  return [
+    `You are ${a.name}, ${a.title ? `the team's ${a.title},` : "a QA engineer"} on an autonomous agent team ("cubefarm"). Developers open pull requests; you review and independently verify each one before it is merged. Your sign-off is the review: ${repo.autoMerge ? "on this floor a PR you pass merges by itself as soon as GitHub's checks are green, so nobody else reads the code after you. " : ""}Be thorough and skeptical, but fair: fail a PR only for real problems (broken behaviour, failing tests or build, the issue's requirements not met, obvious regressions), not for style preferences.`,
+    ...a.brief ? ["", `Your job description:
+${a.brief}`] : [],
+    ...a.role === "dev" ? ["", "You're a developer covering for the QA lab while its testers are busy. You didn't write this pull request: test it as an independent QA engineer would."] : [],
+    "",
+    `Repository: ${repo.fullName} (default branch: ${repo.defaultBranch})`,
+    ...repo.summary ? [`Project: ${repo.summary}`] : [],
+    ...repo.mission ? [`What the team is building (the manager's brief): ${repo.mission}`] : [],
+    ...repo.qaBrief ? [`What to check on this project (from the CEO):
+${repo.qaBrief}`] : [],
+    `Pull request #${pr.number} "${pr.title}" from branch ${pr.headRefName}: ${pr.url}`,
+    `Your worktree: ${cwd}. It has the pull request's code checked out on local branch ${branch}.`,
+    ...depsLine ? [depsLine] : [],
+    "",
+    "How to test:",
+    "1. Read the PR description and the linked issue, and work out the acceptance criteria.",
+    `2. Review the code as a careful reviewer would: git diff origin/${repo.defaultBranch}...HEAD. Look for bugs, unhandled errors and edge cases, security problems, leftover debug code, and new logic without tests.`,
+    testStep2 ?? "3. Install dependencies if needed (e.g. npm install when node_modules is missing), then run the project's test suite, linters, type checks and build (whichever exist).",
+    repo.browserTesting ? `4. If the project has a UI, start it in the background on port ${port} (reserved for you) and exercise the change in a real browser with the Playwright tools: navigate, click, type, resize to a phone size, try edge cases, and check the console for errors. Take a screenshot with browser_take_screenshot (no filename) of every important state: the screenshots are attached to the PR as evidence. Stop the server afterwards.` : "4. Exercise the changed behaviour directly (run the program, call the API, write a quick script).",
+    "5. You may write throwaway scripts to probe behaviour, but do not commit them.",
+    "A merge conflict with the default branch is not a fail, nor is a red check unrelated to this change (a flake or an outage: say why): judge the change itself (on a throwaway merge if you need newer work) and pass it if it's good. The office sends conflicting PRs back for a merge fix, then you re-test, and re-runs a failed check before anyone fixes it.",
+    "",
+    "Rules: do not modify the code under test, do not commit, push, comment on, review or merge anything on GitHub. The office posts your report on the pull request. Finish with the structured QA report: verdict, summary, the checks you performed, the commands you ran and one caption per screenshot.",
+    ONE_TURN
+  ].join("\n");
+}
+var OFFICE = "Office instructions";
+var MARK = "\0job description\0";
+function promptParts(build, brief) {
+  if (!brief) return [{ label: OFFICE, text: build(""), editable: false }];
+  const [before, after] = build(MARK).split(MARK);
+  return [
+    { label: OFFICE, text: before, editable: false },
+    { label: "Job description", text: brief, editable: true },
+    { label: OFFICE, text: after, editable: false }
+  ].filter((p) => p.text !== "");
+}
+var view = (kind, parts) => ({ kind, text: parts.map((p) => p.text).join(""), parts });
+function devPromptPreview({ slug, ...i }) {
+  const branch = devBranch(PLACEHOLDERS.issue, slug);
+  return view("dev", promptParts((brief) => devSystemPrompt({ ...i, agent: { ...i.agent, brief }, cwd: PLACEHOLDERS.worktree, branch }), i.agent.brief));
+}
+function qaPromptPreview({ slug, ...i }) {
+  const pr = { number: PLACEHOLDERS.pr, title: PLACEHOLDERS.prTitle, headRefName: PLACEHOLDERS.branch, url: PLACEHOLDERS.prUrl };
+  const branch = qaBranch(PLACEHOLDERS.pr, slug);
+  return view("qa", promptParts((brief) => qaSystemPrompt({ ...i, agent: { ...i.agent, brief }, cwd: PLACEHOLDERS.worktree, branch, pr }), i.agent.brief));
+}
+var ceoPromptPreview = (text) => view("ceo", [{ label: OFFICE, text, editable: false }]);
+
 // server/ceo.ts
 var EFFORT = z2.enum(["low", "medium", "high", "xhigh", "max"]);
 function createOfficeTools(h) {
@@ -4161,6 +4338,7 @@ function ceoSystemPrompt(o) {
     "- Read the repositories through their clone paths with Read, Glob and Grep. They are read-only to you. You cannot run shell commands.",
     `- Keep durable notes about the company in ${o.notesFile}: read it at the start, and update it at the end with decisions and anything worth remembering next time.`,
     "- Change things only through the mcp__office__ tools.",
+    `- ${ONE_TURN}`,
     "- Before update_job rewrites someone's job description, read the full one with mcp__office__agent_detail and keep what still applies, especially its safety rules.",
     "",
     "Rules:",
@@ -4394,7 +4572,7 @@ function checksLine(i) {
   return `GitHub checks right now: ${state}`;
 }
 function testStep(hasChecks) {
-  return hasChecks ? "3. GitHub's checks run on this PR, and it merges only once they're green. Read .github/workflows to see what they cover and don't re-run that locally. Run only what you need to exercise the change (for example a build to start the app), anything the checks don't cover, or a failing check to reproduce it. A failing check is a finding: name it." : "3. Install dependencies if needed, then run the project's test suite, linters, type checks and build (whichever exist).";
+  return hasChecks ? "3. GitHub's checks run on this PR, and it merges only once they're green. Read .github/workflows to see what they cover and don't re-run that locally. Run only what you need to exercise the change (for example a build to start the app), anything the checks don't cover, or a failing check to reproduce it. A failing check is a finding: name it." : "3. Install dependencies if needed (e.g. npm install when node_modules is missing), then run the project's test suite, linters, type checks and build (whichever exist).";
 }
 function retest(i) {
   const since = i.lastTestedSha && i.lastTestedSha !== i.headSha ? i.lastTestedSha : null;
@@ -4515,6 +4693,10 @@ var Previews = class {
       logTail: (r?.log ?? []).slice(-LOG_VIEW)
     };
   }
+  /** The floor's preview is being set up or running: its worktree is in use. */
+  active(f) {
+    return ACTIVE.includes(this.runs.get(f.id)?.status ?? "stopped");
+  }
   /** Re-check whether a floor without a command has a package.json to fall back on. */
   async refreshDefault(f) {
     const has = await this.backend.previews.hasDefault(f.fullName).catch(() => true);
@@ -4639,97 +4821,13 @@ var Previews = class {
   }
 };
 
-// server/prompts.ts
-var PLACEHOLDERS = {
-  worktree: "<your worktree>",
-  issue: "<issue>",
-  pr: "<PR>",
-  prTitle: "<PR title>",
-  prUrl: "<PR URL>",
-  branch: "<branch>"
-};
-var devBranch = (issue2, slug) => `swarm/issue-${issue2}-${slug}`;
-var qaBranch = (pr, slug) => `qa/pr-${pr}-${slug}`;
-function devSystemPrompt({ agent: a, repo, port, cwd, branch, linked, fixing, depsLine }) {
-  const push = fixing ? `git push origin HEAD:${fixing.headRef}` : `git push -u origin ${branch}`;
-  const links = linked.map((r) => `- ${r.fullName}: read-only reference clone at ${r.dir}`);
-  return [
-    `You are ${a.name}, ${a.title ? `the team's ${a.title},` : "a software engineer"} on an autonomous agent team ("cubefarm"). Several teammates work in parallel on other issues of the same repository, each in their own git worktree. Nobody is watching live to answer questions, so make sensible decisions yourself and record assumptions in the PR description. The manager may occasionally send you messages; follow their instructions.`,
-    `Every pull request is reviewed and tested by a QA teammate. ${repo.autoMerge ? "Once they sign off and GitHub's checks pass, the office merges it by itself" : "Once they sign off, the manager merges it"}. If they find problems, or checks fail, or it conflicts with the default branch, you will get the details; fix them on the same branch.`,
-    a.brief ? `
-Your job description:
-${a.brief}` : "",
-    "",
-    `Repository: ${repo.fullName} (default branch: ${repo.defaultBranch})`,
-    repo.summary ? `Project: ${repo.summary}` : "",
-    repo.mission ? `What the team is building (the manager's brief): ${repo.mission}` : "",
-    `Your worktree: ${cwd}`,
-    depsLine ?? "",
-    fixing ? `You are fixing pull request #${fixing.pr}. Its code is checked out on local branch ${branch}; push fixes with: ${push}. Do not open a new pull request.` : `Your branch: ${branch} (already checked out, created from origin/${repo.defaultBranch})`,
-    links.length ? `Related repositories you may read for context (do not modify them):
-${links.join("\n")}` : "",
-    "",
-    "Workflow:",
-    "1. Read the issue and explore the relevant code before changing anything.",
-    "2. Implement the change with focused commits and clear messages.",
-    "3. Run the project's existing tests, linters and build (if any) and fix what you broke. Install dependencies first if needed.",
-    repo.browserTesting ? `4. If the project has a web UI, start its dev server in the background on port ${port} (reserved for you, so you don't collide with teammates), then check your change with the Playwright browser tools (mcp__playwright__browser_navigate, browser_snapshot, browser_click, browser_take_screenshot). Stop the dev server when you're done.` : "4. Verify the behaviour you changed as directly as you can.",
-    `5. Push: ${push}`,
-    fixing ? "6. Reply with a short summary of what you fixed." : `6. Open a pull request with the GitHub CLI: gh pr create --base ${repo.defaultBranch} --head ${branch} --title "<concise title>" --body "<what changed, how you verified it, assumptions>". The body must contain "Closes #<issue number>".`,
-    fixing ? "" : "7. End your final message with the pull request URL on its own line.",
-    "",
-    "Rules: never push to the default branch, never force-push, never merge pull requests yourself (the office merges them once QA and the checks pass), and never edit files outside your worktree. If you cannot finish, open a draft PR (gh pr create --draft) explaining what is left and why."
-  ].filter((l) => l !== "").join("\n");
-}
-function qaSystemPrompt({ agent: a, repo, port, cwd, branch, pr, depsLine, testStep: testStep2 }) {
-  return [
-    `You are ${a.name}, ${a.title ? `the team's ${a.title},` : "a QA engineer"} on an autonomous agent team ("cubefarm"). Developers open pull requests; you review and independently verify each one before it is merged. Your sign-off is the review: ${repo.autoMerge ? "on this floor a PR you pass merges by itself as soon as GitHub's checks are green, so nobody else reads the code after you. " : ""}Be thorough and skeptical, but fair: fail a PR only for real problems (broken behaviour, failing tests or build, the issue's requirements not met, obvious regressions), not for style preferences.`,
-    ...a.brief ? ["", `Your job description:
-${a.brief}`] : [],
-    ...a.role === "dev" ? ["", "You're a developer covering for the QA lab while its testers are busy. You didn't write this pull request: test it as an independent QA engineer would."] : [],
-    "",
-    `Repository: ${repo.fullName} (default branch: ${repo.defaultBranch})`,
-    ...repo.summary ? [`Project: ${repo.summary}`] : [],
-    ...repo.mission ? [`What the team is building (the manager's brief): ${repo.mission}`] : [],
-    ...repo.qaBrief ? [`What to check on this project (from the CEO):
-${repo.qaBrief}`] : [],
-    `Pull request #${pr.number} "${pr.title}" from branch ${pr.headRefName}: ${pr.url}`,
-    `Your worktree: ${cwd}. It has the pull request's code checked out on local branch ${branch}.`,
-    ...depsLine ? [depsLine] : [],
-    "",
-    "How to test:",
-    "1. Read the PR description and the linked issue, and work out the acceptance criteria.",
-    `2. Review the code as a careful reviewer would: git diff origin/${repo.defaultBranch}...HEAD. Look for bugs, unhandled errors and edge cases, security problems, leftover debug code, and new logic without tests.`,
-    testStep2 ?? "3. Install dependencies if needed, then run the project's test suite, linters, type checks and build (whichever exist).",
-    repo.browserTesting ? `4. If the project has a UI, start it in the background on port ${port} (reserved for you) and exercise the change in a real browser with the Playwright tools: navigate, click, type, resize to a phone size, try edge cases, and check the console for errors. Take a screenshot with browser_take_screenshot (no filename) of every important state: the screenshots are attached to the PR as evidence. Stop the server afterwards.` : "4. Exercise the changed behaviour directly (run the program, call the API, write a quick script).",
-    "5. You may write throwaway scripts to probe behaviour, but do not commit them.",
-    "A merge conflict with the default branch is not a fail, nor is a red check unrelated to this change (a flake or an outage: say why): judge the change itself (on a throwaway merge if you need newer work) and pass it if it's good. The office sends conflicting PRs back for a merge fix, then you re-test, and re-runs a failed check before anyone fixes it.",
-    "",
-    "Rules: do not modify the code under test, do not commit, push, comment on, review or merge anything on GitHub. The office posts your report on the pull request. Finish with the structured QA report: verdict, summary, the checks you performed, the commands you ran and one caption per screenshot."
-  ].join("\n");
-}
-var OFFICE = "Office instructions";
-var MARK = "\0job description\0";
-function promptParts(build, brief) {
-  if (!brief) return [{ label: OFFICE, text: build(""), editable: false }];
-  const [before, after] = build(MARK).split(MARK);
-  return [
-    { label: OFFICE, text: before, editable: false },
-    { label: "Job description", text: brief, editable: true },
-    { label: OFFICE, text: after, editable: false }
-  ].filter((p) => p.text !== "");
-}
-var view = (kind, parts) => ({ kind, text: parts.map((p) => p.text).join(""), parts });
-function devPromptPreview({ slug, ...i }) {
-  const branch = devBranch(PLACEHOLDERS.issue, slug);
-  return view("dev", promptParts((brief) => devSystemPrompt({ ...i, agent: { ...i.agent, brief }, cwd: PLACEHOLDERS.worktree, branch }), i.agent.brief));
-}
-function qaPromptPreview({ slug, ...i }) {
-  const pr = { number: PLACEHOLDERS.pr, title: PLACEHOLDERS.prTitle, headRefName: PLACEHOLDERS.branch, url: PLACEHOLDERS.prUrl };
-  const branch = qaBranch(PLACEHOLDERS.pr, slug);
-  return view("qa", promptParts((brief) => qaSystemPrompt({ ...i, agent: { ...i.agent, brief }, cwd: PLACEHOLDERS.worktree, branch, pr }), i.agent.brief));
+// server/qaRetry.ts
+var QA_RESUME_PROMPT = "Your turn ended without your QA report. Finish what you were checking in the foreground, then end with the JSON report.";
+function qaRetry(e) {
+  if (e.stopped) return "give-up";
+  if (e.report) return "report";
+  return e.ok && !e.limited && e.canResume ? "resume" : "give-up";
 }
-var ceoPromptPreview = (text) => view("ceo", [{ label: OFFICE, text, editable: false }]);
 
 // server/pacing.ts
 var PACING_MS = 60 * 6e4;
@@ -4768,6 +4866,32 @@ function pacingMessage(w, until, sessions, now2) {
   return `\u{1F422} Claude's usage is getting high${what ? ` (${what})` : ""}. Until ${clock(until, now2)} the office finishes open work first and starts at most ${sessions} session${sessions === 1 ? "" : "s"} at a time.`;
 }
 
+// server/deskTrim.ts
+var TRIM_SWEEP_MS = 15 * 6e4;
+var DEFAULT_TRIM_IDLE_MIN = 120;
+var MAX_TRIM_IDLE_MIN = 7 * 24 * 60;
+var idleSince = (endedAt, busyAt, bootAt) => Math.max(endedAt ?? bootAt, busyAt ?? 0);
+function desksToTrim(desks, thresholdMin, now2) {
+  if (!(thresholdMin > 0)) return [];
+  return desks.filter((d) => !d.busy && now2 - d.idleSince > thresholdMin * 6e4 && (d.trimmedAt === null || d.trimmedAt < d.idleSince)).map((d) => d.key);
+}
+function clampTrimIdleMin(v) {
+  const n = Math.round(Number(v));
+  return Number.isFinite(n) ? Math.max(0, Math.min(MAX_TRIM_IDLE_MIN, n)) : DEFAULT_TRIM_IDLE_MIN;
+}
+function formatBytes(n) {
+  const units = ["bytes", "KB", "MB", "GB", "TB"];
+  let v = n;
+  let i = 0;
+  while (v >= 1024 && i < units.length - 1) {
+    v /= 1024;
+    i++;
+  }
+  if (i === 0) return `${Math.round(n)} bytes`;
+  return `${v < 9.95 ? v.toFixed(1) : Math.round(v)} ${units[i]}`;
+}
+var freedMessage = (bytes, desks) => `\u{1F9F9} Freed ${formatBytes(bytes)} from ${desks} idle desk${desks === 1 ? "" : "s"}`;
+
 // server/terminal.ts
 import fs12 from "node:fs/promises";
 import path14 from "node:path";
@@ -5146,6 +5270,7 @@ var Swarm = class {
       tutorialStep: 0,
       autoUpdate: true,
       pacingSessions: DEFAULT_PACING_SESSIONS,
+      trimIdleDesksMin: DEFAULT_TRIM_IDLE_MIN,
       voice: { ...DEFAULT_VOICE }
     },
     repos: [],
@@ -5260,6 +5385,7 @@ var Swarm = class {
       if (!EFFORTS.includes(this.state.settings.defaultEffort)) this.state.settings.defaultEffort = "medium";
       if (this.state.settings.runtime !== "sdk") this.state.settings.runtime = "terminal";
       if (!isCli(this.state.settings.defaultCli)) this.state.settings.defaultCli = "claude";
+      this.state.settings.trimIdleDesksMin = clampTrimIdleMin(this.state.settings.trimIdleDesksMin);
       if (!this.state.settings.defaultModel && this.state.settings.defaultCli === "claude") this.state.settings.defaultModel = DEFAULT_MODEL;
       const old = this.state.settings;
       if (old.maxConcurrent !== void 0) {
@@ -5340,6 +5466,7 @@ var Swarm = class {
     setInterval(() => this.state.repos.forEach((r, i) => setTimeout(() => void this.syncRepo(r.id), i * 1500)), SYNC_INTERVAL_MS);
     setInterval(() => this.schedule(), SCHEDULER_INTERVAL_MS);
     setInterval(() => void this.saveTerminals(), TERMINAL_SAVE_MS);
+    setInterval(() => void this.trimIdleDesks(), this.backend.demo ? 6e4 : TRIM_SWEEP_MS);
     setInterval(() => this.state.repos.forEach((r, i) => setTimeout(() => void this.sweepFloor(r.id), i * 1500)), DESK_SWEEP_INTERVAL_MS);
     void this.backend.detectClis().then((clis) => {
       this.clis = clis;
@@ -6612,13 +6739,24 @@ Note from the manager: ${note}` : ""
 Linked issue: ${issue2.title}
 ${issue2.body.trim() || "(no description)"}` : ""
     ].filter((l) => l !== "").join("\n");
-    this.startAgentSession(a, repo, cwd, prompt, this.buildQaSystemAppend(a, repo, cwd, branch, pr, qa.testStep, desk.deps), void 0, QA_SCHEMA);
+    const systemAppend = this.buildQaSystemAppend(a, repo, cwd, branch, pr, qa.testStep, desk.deps);
+    this.agentRt.get(a.id).qaResume = { cwd, systemAppend };
+    this.startAgentSession(a, repo, cwd, prompt, systemAppend, void 0, QA_SCHEMA);
   }
   async onQaFinished(a, repo, result) {
     const rec = this.state.qa.find((q) => q.repoId === repo.id && q.prNumber === a.prNumber);
     const rt = this.agentRt.get(a.id);
     const report = result.ok ? parseReport(result) : null;
-    if (a.status === "stopped" || !report) {
+    const resume = rt.qaResume;
+    const next = qaRetry({ stopped: a.status === "stopped", limited: this.limited(), ok: result.ok, report: !!report, canResume: !!resume && !!a.sessionId });
+    if (next === "resume" && resume && a.sessionId) {
+      rt.qaResume = null;
+      a.endedAt = null;
+      this.appendLog(a, [{ kind: "system", text: "\u21BB The session ended without a QA report. Resuming it once to finish." }]);
+      this.startAgentSession(a, repo, resume.cwd, QA_RESUME_PROMPT, resume.systemAppend, a.sessionId, QA_SCHEMA);
+      return;
+    }
+    if (next === "give-up" || !report) {
       if (a.status !== "stopped") this.fail(a, { ...result, errors: result.errors.length ? result.errors : ["QA finished without a usable report"] }, `QA of PR #${a.prNumber}`);
       if (rec) {
         const failures = rec.sessionFailures + (this.limited() ? 0 : 1);
@@ -6637,17 +6775,17 @@ ${issue2.body.trim() || "(no description)"}` : ""
     let commentUrl = null;
     if (rec) {
       const pull = !pass ? await this.backend.prDetails(repo.fullName, rec.prNumber).catch(() => null) : null;
-      const next = qaOutcome(pass, rec, pull);
+      const next2 = qaOutcome(pass, rec, pull);
       try {
         this.appendLog(a, [{ kind: "system", text: "\u{1F4CE} Uploading evidence and posting the QA report on the PR\u2026" }]);
-        const body2 = await this.renderQaComment(a, repo, rec, report, rt.shots, next);
+        const body2 = await this.renderQaComment(a, repo, rec, report, rt.shots, next2);
         commentUrl = await this.backend.commentPull(repo.fullName, rec.prNumber, body2) || null;
         this.appendLog(a, [{ kind: "system", text: `  \u23BF ${commentUrl ?? "comment posted"}` }]);
       } catch (err) {
         this.appendLog(a, [{ kind: "error", text: `  \u23BF Could not post the QA report: ${err.message}` }]);
       }
       const qaRounds = rec.round - rec.retests;
-      const nextStatus = next === "conflict" ? "failed" : next;
+      const nextStatus = next2 === "conflict" ? "failed" : next2;
       const fixInstructions = report.fixInstructions ?? report.checks.filter((c) => c.result === "fail").map((c) => `${c.name}: ${c.details}`).join("\n");
       this.setQa(rec, {
         status: nextStatus,
@@ -6664,10 +6802,10 @@ ${issue2.body.trim() || "(no description)"}` : ""
         alerted: false,
         qaChecks: pull?.checks ?? null
       });
-      if (next === "conflict") this.sendBack(repo, rec, "conflict", conflictFixInstructions(fixInstructions, repo.defaultBranch), false);
+      if (next2 === "conflict") this.sendBack(repo, rec, "conflict", conflictFixInstructions(fixInstructions, repo.defaultBranch), false);
       this.toast(
         pass ? "success" : "error",
-        pass ? `\u2705 ${a.name} passed PR #${rec.prNumber}${repo.autoMerge ? "; it merges once GitHub's checks are green" : ": ready to merge"}` : nextStatus === "needs-human" ? `\u274C PR #${rec.prNumber} failed QA ${qaRounds} times and needs a human` : next === "conflict" ? `\u274C ${a.name} failed PR #${rec.prNumber}, and it conflicts with ${repo.defaultBranch}; sending it back to merge and fix` : `\u274C ${a.name} failed PR #${rec.prNumber}; sending it back to the developer`
+        pass ? `\u2705 ${a.name} passed PR #${rec.prNumber}${repo.autoMerge ? "; it merges once GitHub's checks are green" : ": ready to merge"}` : nextStatus === "needs-human" ? `\u274C PR #${rec.prNumber} failed QA ${qaRounds} times and needs a human` : next2 === "conflict" ? `\u274C ${a.name} failed PR #${rec.prNumber}, and it conflicts with ${repo.defaultBranch}; sending it back to merge and fix` : `\u274C ${a.name} failed PR #${rec.prNumber}; sending it back to the developer`
       );
     }
   }
@@ -6864,6 +7002,10 @@ Full report with screenshots: ${rec.commentUrl}` : "",
     if (patch.tutorialStep !== void 0) s2.tutorialStep = Math.max(-1, Math.round(Number(patch.tutorialStep)) || 0);
     if (typeof patch.autoUpdate === "boolean") s2.autoUpdate = patch.autoUpdate;
     if (patch.pacingSessions !== void 0) s2.pacingSessions = clampPacingSessions(patch.pacingSessions);
+    if (patch.trimIdleDesksMin !== void 0) {
+      s2.trimIdleDesksMin = clampTrimIdleMin(patch.trimIdleDesksMin);
+      setTimeout(() => void this.trimIdleDesks(), 1e3);
+    }
     if (patch.voice !== void 0) s2.voice = voiceSettings(s2.voice, patch.voice);
     this.save();
     this.broadcast({ type: "settings", settings: s2 });
@@ -7440,6 +7582,63 @@ ${t}`);
     }
     this.enqueueCeo({ kind: "review", at: Date.now() });
   }
+  // ---------- idle desks ----------
+  bootAt = Date.now();
+  deskWatch = /* @__PURE__ */ new Map();
+  // desk → what the sweeps saw
+  trimming = false;
+  /** An agent's desk is in use: a task (preparing, working, testing or fixing) or a live CLI in their terminal. Hands off a fired agent's. */
+  deskBusy(a) {
+    const rt = this.agentRt.get(a.id);
+    return !rt || !this.state.agents.includes(a) || BUSY.includes(a.status) || !!rt.session || !!rt.terminal?.live;
+  }
+  /**
+   * Free disk space on desks idle longer than settings.trimIdleDesksMin: every agent's desk, and each floor's preview
+   * worktree while no preview runs. One desk at a time, once per idle stretch; one phone message per sweep that freed anything.
+   */
+  async trimIdleDesks() {
+    const min = this.state.settings.trimIdleDesksMin;
+    if (!min || this.trimming) return;
+    this.trimming = true;
+    try {
+      const now2 = Date.now();
+      const desks = [];
+      for (const a of this.state.agents) {
+        const repo = this.state.repos.find((r) => r.id === a.repoId);
+        if (repo) desks.push({ key: a.id, repo, slug: this.agentSlug(a), endedAt: a.endedAt, busy: () => this.deskBusy(a) });
+      }
+      for (const repo of this.state.repos) {
+        desks.push({ key: `preview:${repo.id}`, repo, slug: PREVIEW_SLUG, endedAt: null, busy: () => !this.state.repos.includes(repo) || this.previews.active(repo) });
+      }
+      for (const key of this.deskWatch.keys()) if (!desks.some((d) => d.key === key)) this.deskWatch.delete(key);
+      const seen = desks.map((d) => {
+        const w = this.deskWatch.get(d.key) ?? { busyAt: null, trimmedAt: null };
+        this.deskWatch.set(d.key, w);
+        const busy = d.busy();
+        if (busy) w.busyAt = now2;
+        return { key: d.key, busy, idleSince: idleSince(d.endedAt, w.busyAt, this.bootAt), trimmedAt: w.trimmedAt };
+      });
+      const due = new Set(desksToTrim(seen, min, now2));
+      let freed = 0;
+      let count = 0;
+      for (const d of desks.filter((x) => due.has(x.key))) {
+        const result = await this.backend.trimDesk(d.repo.fullName, d.slug, () => !d.busy()).catch((err) => {
+          console.warn(`could not trim desk ${d.slug} of ${d.repo.fullName}:`, oneLine(err));
+          return void 0;
+        });
+        if (result === void 0) continue;
+        if (!result?.skipped.length) this.deskWatch.get(d.key).trimmedAt = Date.now();
+        if (!result?.freed) continue;
+        freed += result.freed;
+        count++;
+        const locked = result.skipped.length ? `; still locked: ${result.skipped.join(", ")}` : "";
+        console.log(`trimmed idle desk ${d.slug} of ${d.repo.fullName}: freed ${formatBytes(result.freed)} (${result.removed.join(", ")})${locked}`);
+      }
+      if (count) this.postMessage("office", freedMessage(freed, count));
+    } finally {
+      this.trimming = false;
+    }
+  }
   // ---------- the phone ----------
   postMessage(from, text, requestId) {
     const m = { id: this.messageSeq++, from, text: text.trim().slice(0, 6e3), at: Date.now(), ...requestId ? { requestId } : {} };