flavor-code 1.3.15 → 1.3.17

package/dist/desktop/main.js

@@ -2,7 +2,7 @@
 import { appendFileSync } from "fs";
 import { createHash as createHash28, randomUUID as randomUUID29 } from "crypto";
 import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises";
-import { basename as basename11, dirname as dirname24, join as join47, resolve as resolve40 } from "path";
+import { basename as basename11, dirname as dirname25, join as join48, resolve as resolve40 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { app, BrowserWindow as BrowserWindow2, clipboard, dialog, ipcMain, Menu, nativeImage, Notification, shell } from "electron";
 
@@ -305,7 +305,7 @@ var FlavorConfigSchema = z2.object({
   context: z2.object({
     windowTokens: z2.number().int().positive().default(2e5),
     reservedOutputTokens: z2.number().int().nonnegative().default(2e4),
-    autoCompactBufferTokens: z2.number().int().nonnegative().default(13e3),
+    autoCompactBufferTokens: z2.number().int().nonnegative().default(27e3),
     warningBufferTokens: z2.number().int().nonnegative().default(2e4),
     blockingBufferTokens: z2.number().int().nonnegative().default(3e3),
     microcompactKeepRecentToolResults: z2.number().int().nonnegative().default(5),
@@ -4225,9 +4225,10 @@ ${summarizeReport(report2)}`).join("\n\n")
 
 // src/production.ts
 import { readFile as readFile27 } from "fs/promises";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync } from "fs";
 import { createHash as createHash21, randomUUID as randomUUID25 } from "crypto";
 import { homedir as homedir2, release as osRelease, tmpdir as tmpdir4, version as osVersion } from "os";
-import { basename as basename8, join as join33, relative as relative23, resolve as resolve33, sep as sep23 } from "path";
+import { basename as basename8, dirname as dirname24, join as join34, relative as relative23, resolve as resolve33, sep as sep23 } from "path";
 
 // src/agent/subagents.ts
 import { z as z10 } from "zod";
@@ -5161,7 +5162,9 @@ import { createHash as createHash4, randomUUID as randomUUID6 } from "crypto";
 var DEFAULT_COMPACTION_POLICY = {
   windowTokens: 2e5,
   reservedOutputTokens: 2e4,
-  autoCompactBufferTokens: 13e3,
+  // 85% of the effective window (180_000 - 27_000 = 153_000): compaction used
+  // to trigger at ~92.8%, which let sessions ride the threshold into heap OOM.
+  autoCompactBufferTokens: 27e3,
   warningBufferTokens: 2e4,
   blockingBufferTokens: 3e3,
   microcompactKeepRecentToolResults: 5,
@@ -5371,6 +5374,13 @@ var ContextManager = class _ContextManager {
   #epoch;
   #visibilityLog = [];
   #activeTransientSystem = /* @__PURE__ */ new Map();
+  /**
+   * The visibility audit log persists every transient system admission and is
+   * serialized in full on every session save. Bound both dimensions or a long
+   * subagent-driven run grows it into hundreds of megabytes (heap OOM).
+   */
+  static VISIBILITY_LOG_MAX_ENTRIES = 1e3;
+  static VISIBILITY_RECORD_CONTENT_LIMIT = 2048;
   constructor(options) {
     if (options.compactAtChars !== void 0 && options.compactAtChars <= 0) throw new Error("compactAtChars must be positive");
     if (options.toolOutputChars <= 0) throw new Error("toolOutputChars must be positive");
@@ -5466,11 +5476,14 @@ var ContextManager = class _ContextManager {
     const record3 = {
       id,
       role: "system",
-      content,
+      content: limitVisibilityContent(content),
       admittedAt: (/* @__PURE__ */ new Date()).toISOString(),
       scope: "run"
     };
     this.#visibilityLog.push(record3);
+    if (this.#visibilityLog.length > _ContextManager.VISIBILITY_LOG_MAX_ENTRIES) {
+      this.#visibilityLog = this.#visibilityLog.slice(-_ContextManager.VISIBILITY_LOG_MAX_ENTRIES);
+    }
     this.#activeTransientSystem.set(id, { role: "system", content });
     return id;
   }
@@ -5506,7 +5519,7 @@ var ContextManager = class _ContextManager {
     for (const key of DYNAMIC_SOURCE_ORDER) {
       const value = next[key];
       if (value === void 0 || value === this.#epoch.sources[key]) continue;
-      updates.push(contextUpdateMessage(key, displaySourceValue(key, value)));
+      updates.push(contextUpdateMessage(key, deltaSourceValue(this.#epoch.sources[key], displaySourceValue(key, value))));
       this.#epoch.sources[key] = value;
     }
     for (const key of DYNAMIC_SOURCE_ORDER) {
@@ -5516,8 +5529,6 @@ var ContextManager = class _ContextManager {
     }
     if (updates.length === 0) return false;
     this.#messages.push(...updates);
-    this.#lastRecordedInputTokens = void 0;
-    this.#estimatedTokensAtLastRecordedUsage = void 0;
     return true;
   }
   snapshot() {
@@ -5533,7 +5544,7 @@ var ContextManager = class _ContextManager {
     const legacySummary = snapshot4.summary?.role === "system" && snapshot4.summary.content.startsWith("Conversation summary\n") ? snapshot4.summary.content.slice("Conversation summary\n".length) : void 0;
     this.#compact = snapshot4.compact === void 0 ? legacySummary === void 0 ? void 0 : { summary: legacySummary, compactedAt: (/* @__PURE__ */ new Date(0)).toISOString() } : { ...snapshot4.compact };
     if (snapshot4.epoch !== void 0) this.#epoch = cloneEpoch(snapshot4.epoch);
-    this.#visibilityLog = snapshot4.visibilityLog?.map((item) => ({ ...item })) ?? [];
+    this.#visibilityLog = boundVisibilityLog(snapshot4.visibilityLog);
     this.#activeTransientSystem.clear();
     this.#messages = messages.map((message2) => message2.role === "tool" ? { ...message2, content: truncateToolOutput(message2.content, this.#toolOutputChars) } : cloneMessage2(message2));
     this.#lastRecordedInputTokens = void 0;
@@ -5577,6 +5588,7 @@ var ContextManager = class _ContextManager {
   async prepareForModelCall(signal = new AbortController().signal) {
     signal.throwIfAborted();
     this.refreshContextSources();
+    this.#dropStaleContextUpdates();
     if (!this.needsCompaction()) return false;
     const originalMessages = this.#messages;
     const originalRecordedUsage = this.#lastRecordedInputTokens;
@@ -5589,8 +5601,6 @@ var ContextManager = class _ContextManager {
     const microcompact = microcompactMessages(this.#messages, this.#compaction.microcompactKeepRecentToolResults);
     if (microcompact.changed) {
       this.#messages = microcompact.messages;
-      this.#lastRecordedInputTokens = void 0;
-      this.#estimatedTokensAtLastRecordedUsage = void 0;
     }
     if (!this.needsCompaction()) {
       if (microcompact.changed) {
@@ -5676,6 +5686,26 @@ var ContextManager = class _ContextManager {
     this.#reportCompactProgress(100);
     return true;
   }
+  #dropStaleContextUpdates() {
+    const latestBySource = /* @__PURE__ */ new Map();
+    for (let index = this.#messages.length - 1; index >= 0; index -= 1) {
+      const source = contextUpdateSource(this.#messages[index]);
+      if (source === void 0 || latestBySource.has(source)) continue;
+      latestBySource.set(source, index);
+    }
+    const next = [];
+    let changed = false;
+    this.#messages.forEach((message2, index) => {
+      const source = contextUpdateSource(message2);
+      if (source !== void 0 && latestBySource.get(source) !== index) {
+        changed = true;
+        return;
+      }
+      next.push(message2);
+    });
+    if (changed) this.#messages = next;
+    return changed;
+  }
   #reportCompactProgress(percentage) {
     const normalized = Math.max(0, Math.min(100, Math.floor(percentage / 10) * 10));
     if (normalized === this.#lastCompactProgress) return;
@@ -5787,6 +5817,33 @@ function contextUpdateMessage(source, content) {
   return { role: "system", content: `Context update [${source}]
 ${content}` };
 }
+var CONTEXT_UPDATE_PREFIX = "Context update [";
+function contextUpdateSource(message2) {
+  if (message2.role !== "system" || typeof message2.content !== "string") return void 0;
+  if (!message2.content.startsWith(CONTEXT_UPDATE_PREFIX)) return void 0;
+  const end = message2.content.indexOf("]\n", CONTEXT_UPDATE_PREFIX.length);
+  if (end < 0) return void 0;
+  return message2.content.slice(CONTEXT_UPDATE_PREFIX.length, end);
+}
+function deltaSourceValue(previous, display) {
+  if (previous === void 0 || !display.startsWith(previous)) return display;
+  return display.slice(previous.length).replace(/^\s+/, "") || display;
+}
+function limitVisibilityContent(content) {
+  const limit = ContextManager.VISIBILITY_RECORD_CONTENT_LIMIT;
+  if (content.length <= limit) return content;
+  return `${content.slice(0, limit)}
+...[truncated; original length: ${content.length} characters]...`;
+}
+function boundVisibilityLog(records) {
+  if (records === void 0) return [];
+  const limit = ContextManager.VISIBILITY_RECORD_CONTENT_LIMIT;
+  const bounded2 = records.map((item) => ({
+    ...item,
+    ...item.content.length <= limit ? {} : { content: limitVisibilityContent(item.content) }
+  }));
+  return bounded2.length > ContextManager.VISIBILITY_LOG_MAX_ENTRIES ? bounded2.slice(-ContextManager.VISIBILITY_LOG_MAX_ENTRIES) : bounded2;
+}
 function cloneEpoch(epoch) {
   return {
     ...epoch,
@@ -6081,6 +6138,9 @@ function reportProgress(callback, percentage) {
   }
 }
 
+// src/agent/loop.ts
+import { getHeapStatistics } from "v8";
+
 // src/models/structured.ts
 import { z as z12 } from "zod";
 var DEFAULT_RETRY_DELAYS = [1e3, 2e3, 4e3];
@@ -6498,6 +6558,18 @@ function envMaxIterations() {
   if (!Number.isInteger(parsed) || parsed <= 0) return void 0;
   return parsed;
 }
+var MEMORY_PRESSURE_HEAP_RATIO = 0.8;
+function memoryPressureError(heapUsed, heapLimit) {
+  if (heapLimit <= 0 || heapUsed < heapLimit * MEMORY_PRESSURE_HEAP_RATIO) return void 0;
+  const mb = (bytes) => Math.round(bytes / 1048576);
+  return {
+    code: "memory_pressure",
+    message: `Heap usage reached ${Math.round(heapUsed / heapLimit * 100)}% of the V8 limit (${mb(heapUsed)}MB of ${mb(heapLimit)}MB); stopping the current turn to avoid a crash. The saved session will reopen after restart.`
+  };
+}
+function currentMemoryPressure() {
+  return memoryPressureError(process.memoryUsage().heapUsed, getHeapStatistics().heap_size_limit);
+}
 var AgentLoop = class {
   #options;
   #iterationLimitMode = "standard";
@@ -6568,6 +6640,11 @@ var AgentLoop = class {
         yield { type: "error", error: { code: "cancelled", message: abortMessage(request.signal) } };
         return;
       }
+      const pressure = currentMemoryPressure();
+      if (pressure !== void 0) {
+        yield { type: "error", error: pressure };
+        return;
+      }
       const softLimit = Math.floor(maxIterations * this.#options.softLimitFactor);
       if (!warned && iteration >= softLimit) {
         warned = true;
@@ -6607,6 +6684,11 @@ var AgentLoop = class {
         yield { type: "error", error: normalizeProviderError(error) };
         return;
       }
+      const preparedPressure = currentMemoryPressure();
+      if (preparedPressure !== void 0) {
+        yield { type: "error", error: preparedPressure };
+        return;
+      }
       let assistantText = "";
       const collectedToolCalls = [];
       const collectedThinking = [];
@@ -6630,6 +6712,11 @@ var AgentLoop = class {
           tools: [...this.#options.tools],
           ...request.signal === void 0 ? {} : { signal: request.signal }
         };
+        const requestPressure = currentMemoryPressure();
+        if (requestPressure !== void 0) {
+          yield { type: "error", error: requestPressure };
+          return;
+        }
         let before;
         try {
           before = await this.#options.hooks.emit({
@@ -12927,7 +13014,8 @@ var BoundedOutput = class {
   #headLimit;
   #tailLimit;
   #head = Buffer.alloc(0);
-  #tail = Buffer.alloc(0);
+  #tailChunks = [];
+  #tailBytes = 0;
   #complete = Buffer.alloc(0);
   #bytes = 0;
   constructor(limit) {
@@ -12947,15 +13035,24 @@ var BoundedOutput = class {
       const count = Math.min(this.#headLimit - this.#head.length, chunk.length);
       this.#head = Buffer.concat([this.#head, chunk.subarray(0, count)]);
     }
-    if (this.#tailLimit > 0) this.#tail = Buffer.concat([this.#tail, chunk]).subarray(-this.#tailLimit);
+    if (this.#tailLimit > 0) {
+      this.#tailChunks.push(chunk);
+      this.#tailBytes += chunk.length;
+      if (this.#tailBytes >= this.#tailLimit * 2) {
+        const merged = Buffer.concat(this.#tailChunks).subarray(-this.#tailLimit);
+        this.#tailChunks = [merged];
+        this.#tailBytes = merged.length;
+      }
+    }
   }
   metadata() {
     return { truncated: this.truncated, originalBytes: this.#bytes, limitBytes: this.#limit };
   }
   text() {
     if (!this.truncated) return decodeOutput(this.#complete);
+    const tail = Buffer.concat(this.#tailChunks).subarray(-this.#tailLimit);
     const encoding = classifyUtf8(this.#complete) === "invalid" && process.platform === "win32" ? "gb18030" : "utf-8";
-    return `${decodePrefix(this.#head, encoding)}${ELLIPSIS}${decodeSuffix(this.#tail, encoding)}`;
+    return `${decodePrefix(this.#head, encoding)}${ELLIPSIS}${decodeSuffix(tail, encoding)}`;
   }
 };
 var AdaptiveOutputDecoder = class {
@@ -15406,6 +15503,8 @@ function appendThinkingText(previous, delta) {
 }
 
 // src/ui/transcript.ts
+var MAX_TRANSCRIPT_TURNS = 200;
+var MAX_TRANSCRIPT_CHARS = 2e6;
 function createTranscriptState() {
   return { completed: [], nextId: 1 };
 }
@@ -15702,7 +15801,7 @@ function hydrateHistory(messages, compact) {
     }
   }
   if (turn !== void 0) completed.push(turn);
-  return { completed, nextId: completed.length + 1 };
+  return { completed: boundedCompleted(completed), nextId: completed.length + 1 };
 }
 function transcriptFromLegacyConversation(messages, compact) {
   return hydrateHistory(messages, compact);
@@ -15796,10 +15895,10 @@ function finishActive(state) {
   if (state.active === void 0) return state;
   const active = withoutModelActivity(state.active);
   return {
-    completed: [...state.completed, {
+    completed: boundedCompleted([...state.completed, {
       ...active,
       completedAt: active.completedAt ?? (/* @__PURE__ */ new Date()).toISOString()
-    }],
+    }]),
     nextId: state.nextId,
     ...state.taskSnapshot === void 0 ? {} : { taskSnapshot: state.taskSnapshot }
   };
@@ -15828,12 +15927,26 @@ function withoutModelActivity(turn, id) {
 function restoreTranscriptState(state) {
   const completed = state.completed.map(cloneTurn);
   if (state.active !== void 0) completed.push(normalizeInterruptedTurn(cloneTurn(state.active)));
+  const nextId = Math.max(state.nextId, ...completed.map((turn) => turn.id + 1), 1);
   return {
-    completed,
-    nextId: Math.max(state.nextId, ...completed.map((turn) => turn.id + 1), 1),
+    completed: boundedCompleted(completed),
+    nextId,
     ...state.taskSnapshot === void 0 ? {} : { taskSnapshot: state.taskSnapshot }
   };
 }
+function boundedCompleted(input) {
+  const recent = input.slice(-MAX_TRANSCRIPT_TURNS);
+  let chars = 0;
+  let start = recent.length;
+  for (let index = recent.length - 1; index >= 0; index -= 1) {
+    const turn = recent[index];
+    const size = JSON.stringify(turn).length;
+    if (start < recent.length && chars + size > MAX_TRANSCRIPT_CHARS) break;
+    chars += size;
+    start = index;
+  }
+  return recent.slice(start);
+}
 function compactionTurn(compact) {
   const text = `Original execution steps before ${compact.compactedAt} are unavailable.`;
   return {
@@ -16657,6 +16770,8 @@ function isCode9(error, code) {
 }
 
 // src/session/tree.ts
+var MAX_SESSION_HISTORY_NODES = 100;
+var MAX_SESSION_HISTORY_CONTEXT_CHARS = 2e6;
 var SessionHistory = class _SessionHistory {
   #path;
   #checkpoints;
@@ -16668,8 +16783,8 @@ var SessionHistory = class _SessionHistory {
     this.#path = join25(resolve21(options.workspace), ".flavor", "session-trees", options.sessionId, "tree.json");
     this.#checkpoints = new WorkspaceCheckpointStore({ workspace: options.workspace });
     this.#restoreContext = options.restoreContext;
-    this.#nodes = document.nodes;
-    this.#leafId = document.leafId;
+    this.#nodes = boundedNodes(document.nodes);
+    this.#leafId = document.leafId !== null && this.#nodes.some((node) => node.id === document.leafId) ? document.leafId : this.#nodes.at(-1)?.id ?? null;
   }
   static async open(options) {
     const path = join25(resolve21(options.workspace), ".flavor", "session-trees", options.sessionId, "tree.json");
@@ -16681,7 +16796,9 @@ var SessionHistory = class _SessionHistory {
     } catch (error) {
       if (!isCode10(error, "ENOENT")) throw error;
     }
-    return new _SessionHistory(options, document);
+    const history = new _SessionHistory(options, document);
+    if (history.#nodes.length !== document.nodes.length) await history.#persist();
+    return history;
   }
   get leafId() {
     return this.#leafId;
@@ -16701,6 +16818,7 @@ var SessionHistory = class _SessionHistory {
     };
     this.#nodes.push(node);
     this.#leafId = node.id;
+    this.#boundNodes();
     await this.#persist();
     return structuredClone(node);
   }
@@ -16742,6 +16860,13 @@ var SessionHistory = class _SessionHistory {
     if (node === void 0) throw new Error(`Unknown session tree node: ${id}`);
     return node;
   }
+  #boundNodes() {
+    const bounded2 = boundedNodes(this.#nodes);
+    this.#nodes.splice(0, this.#nodes.length, ...bounded2);
+    if (this.#leafId !== null && !this.#nodes.some((node) => node.id === this.#leafId)) {
+      this.#leafId = this.#nodes.at(-1)?.id ?? null;
+    }
+  }
   async #persist() {
     const document = {
       version: 1,
@@ -16756,6 +16881,24 @@ var SessionHistory = class _SessionHistory {
     await rename8(temporary, this.#path);
   }
 };
+function boundedNodes(input) {
+  const recent = input.slice(-MAX_SESSION_HISTORY_NODES);
+  let contextChars = 0;
+  let start = recent.length;
+  for (let index = recent.length - 1; index >= 0; index -= 1) {
+    const node = recent[index];
+    const size = JSON.stringify(node.context).length;
+    if (start < recent.length && contextChars + size > MAX_SESSION_HISTORY_CONTEXT_CHARS) break;
+    contextChars += size;
+    start = index;
+  }
+  const retained = recent.slice(start).map((node) => structuredClone(node));
+  const ids = new Set(retained.map((node) => node.id));
+  for (const node of retained) {
+    if (node.parentId !== null && !ids.has(node.parentId)) node.parentId = null;
+  }
+  return retained;
+}
 function validate(value, sessionId) {
   if (value.version !== 1 || value.sessionId !== sessionId || !Array.isArray(value.nodes)) {
     throw new Error("Invalid session tree");
@@ -16774,11 +16917,35 @@ function isCode10(error, code) {
   return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 
+// src/utils/memory-restart.ts
+import { join as join26 } from "path";
+var MEMORY_RESTART_EXIT_CODE = 75;
+var MEMORY_RESTART_MARKER_FILE = "memory-restart.json";
+var MEMORY_RESTART_WINDOW_MS = 30 * 60 * 1e3;
+function memoryRestartMarkerPath(workspace) {
+  return join26(workspace, ".flavor", "tmp", MEMORY_RESTART_MARKER_FILE);
+}
+function nextMemoryRestartMarker(previous, sessionId, now) {
+  const reusable = previous !== void 0 && previous.sessionId === sessionId && now.getTime() - Date.parse(previous.requestedAt) < MEMORY_RESTART_WINDOW_MS && Number.isInteger(previous.attempts) && previous.attempts > 0;
+  return { sessionId, requestedAt: now.toISOString(), attempts: reusable ? previous.attempts + 1 : 1 };
+}
+function parseMemoryRestartMarker(json) {
+  try {
+    const value = JSON.parse(json);
+    if (typeof value.sessionId !== "string" || typeof value.requestedAt !== "string" || typeof value.attempts !== "number") {
+      return void 0;
+    }
+    return { sessionId: value.sessionId, requestedAt: value.requestedAt, attempts: value.attempts };
+  } catch {
+    return void 0;
+  }
+}
+
 // src/sleep/organizer.ts
 import { constants as constants7 } from "fs";
 import { randomUUID as randomUUID16 } from "crypto";
 import { lstat as lstat10, mkdir as mkdir18, open as open9, readdir as readdir8, realpath as realpath11, rename as rename9, rm as rm10 } from "fs/promises";
-import { isAbsolute as isAbsolute10, join as join26, relative as relative15, resolve as resolve22, sep as sep15 } from "path";
+import { isAbsolute as isAbsolute10, join as join27, relative as relative15, resolve as resolve22, sep as sep15 } from "path";
 import { z as z28 } from "zod";
 var DateKeySchema = z28.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var ReviewSchema = z28.object({
@@ -16833,7 +17000,7 @@ var ProjectSleepOrganizer = class {
   #generate;
   constructor(options) {
     this.#workspace = resolve22(options.workspace);
-    this.#sleepDirectory = join26(this.#workspace, ".flavor", "sleep");
+    this.#sleepDirectory = join27(this.#workspace, ".flavor", "sleep");
     this.#sessions = options.sessions ?? new SessionStore({ workspace: this.#workspace });
     this.#generate = options.generate;
   }
@@ -16842,7 +17009,7 @@ var ProjectSleepOrganizer = class {
     signal.throwIfAborted();
     await this.#prepareDirectory();
     if (await this.#hasReport(date)) return { status: "exists", date };
-    const lockPath = join26(this.#sleepDirectory, `.${date}.lock`);
+    const lockPath = join27(this.#sleepDirectory, `.${date}.lock`);
     let lock;
     try {
       lock = await open9(lockPath, constants7.O_CREAT | constants7.O_EXCL | constants7.O_WRONLY, 384);
@@ -16877,7 +17044,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
       }
       if (review === void 0) throw lastError;
       const filename2 = `${date}-${filenameSummary(review.title)}.md`;
-      const path = join26(this.#sleepDirectory, filename2);
+      const path = join27(this.#sleepDirectory, filename2);
       const markdown = renderSleepReport(date, review, documents);
       await this.#atomicWrite(path, markdown);
       return { status: "written", date, path, sessionCount: documents.length };
@@ -16919,7 +17086,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
     });
   }
   async #prepareDirectory() {
-    const flavorDirectory = join26(this.#workspace, ".flavor");
+    const flavorDirectory = join27(this.#workspace, ".flavor");
     await assertNotSymlink(flavorDirectory);
     await mkdir18(flavorDirectory, { recursive: true, mode: 448 });
     await assertNotSymlink(this.#sleepDirectory);
@@ -16933,7 +17100,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
     return (await readdir8(this.#sleepDirectory, { withFileTypes: true })).some((entry2) => entry2.isFile() && entry2.name.startsWith(prefix) && entry2.name.endsWith(".md"));
   }
   async #atomicWrite(path, content) {
-    const temporary = join26(this.#sleepDirectory, `.${randomUUID16()}.tmp`);
+    const temporary = join27(this.#sleepDirectory, `.${randomUUID16()}.tmp`);
     let handle;
     try {
       handle = await open9(temporary, constants7.O_CREAT | constants7.O_EXCL | constants7.O_WRONLY, 384);
@@ -19837,12 +20004,12 @@ ${explanation}` : "";
 // src/desktop/astgraph-service.ts
 import { stat as stat10 } from "fs/promises";
 import { createRequire as nodeCreateRequire } from "module";
-import { join as join27, resolve as resolve26 } from "path";
+import { join as join28, resolve as resolve26 } from "path";
 var FIELDS = "id, kind, name, qualified_name, file_path, language, start_line, end_line, signature";
 var DesktopAstGraphService = class {
   #path;
   constructor(workspace) {
-    this.#path = join27(resolve26(workspace), ".flavor", "astgraph", "index.db");
+    this.#path = join28(resolve26(workspace), ".flavor", "astgraph", "index.db");
   }
   async status() {
     if ((await stat10(this.#path).catch(() => void 0))?.isFile() !== true) {
@@ -20111,7 +20278,7 @@ function createTodoWriteTool() {
 // src/tools/managed.ts
 import { randomUUID as randomUUID18 } from "crypto";
 import { link, lstat as lstat11, mkdir as mkdir20, readFile as readFile22, readdir as readdir9, unlink as unlink3, writeFile as writeFile12 } from "fs/promises";
-import { dirname as dirname21, join as join28, resolve as resolve27 } from "path";
+import { dirname as dirname21, join as join29, resolve as resolve27 } from "path";
 import { z as z37 } from "zod";
 var MANAGED_TOOL_VERSION = 1;
 var MAX_RECORD_BYTES = 256 * 1024;
@@ -20154,8 +20321,8 @@ var ManagedToolStore = class {
   #diagnostics = [];
   constructor(options) {
     this.#workspace = resolve27(options.workspace);
-    this.#projectRoot = join28(this.#workspace, ".flavor", "tools");
-    this.#globalRoot = join28(resolve27(options.home), ".flavor-code", "tools");
+    this.#projectRoot = join29(this.#workspace, ".flavor", "tools");
+    this.#globalRoot = join29(resolve27(options.home), ".flavor-code", "tools");
     this.#now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   }
   get diagnostics() {
@@ -20202,7 +20369,7 @@ var ManagedToolStore = class {
       version: MANAGED_TOOL_VERSION,
       createdAt: this.#now()
     });
-    const path = join28(this.directory(input.scope), filename(input.name));
+    const path = join29(this.directory(input.scope), filename(input.name));
     const definition = compileDefinition(record3, input.scope, this.#workspace);
     await writeExclusive(path, `${JSON.stringify(record3, void 0, 2)}
 `);
@@ -20227,7 +20394,7 @@ var ManagedToolStore = class {
     if (!parsed.success) return [];
     const matches = this.#matching(parsed.data.name).filter((entry2) => parsed.data.scope === void 0 || entry2.scope === parsed.data.scope);
     if (matches.length > 0) return matches.map((entry2) => entry2.path);
-    return [join28(this.directory(parsed.data.scope ?? "project"), filename(parsed.data.name))];
+    return [join29(this.directory(parsed.data.scope ?? "project"), filename(parsed.data.name))];
   }
   async #loadDirectory(scope2) {
     const root = this.directory(scope2);
@@ -20240,7 +20407,7 @@ var ManagedToolStore = class {
       return;
     }
     for (const name of names) {
-      const path = join28(root, name);
+      const path = join29(root, name);
       try {
         const info = await lstat11(path);
         if (!info.isFile() || info.isSymbolicLink()) throw new Error("Managed tool record must be a regular file");
@@ -22558,7 +22725,7 @@ ${total}`;
 // src/memory/store.ts
 import { createHash as createHash17 } from "crypto";
 import { readFile as readFile23, rm as rm12 } from "fs/promises";
-import { resolve as resolve28, join as join29, relative as relative19, sep as sep19 } from "path";
+import { resolve as resolve28, join as join30, relative as relative19, sep as sep19 } from "path";
 
 // src/memory/similarity.ts
 function normalizeForSimilarity(value) {
@@ -22661,9 +22828,9 @@ var MemoryStore = class {
     if (!Number.isSafeInteger(options.maxEntries) || options.maxEntries < 1) throw new Error("maxEntries must be an integer of at least 1");
     if (!Number.isSafeInteger(options.maxEntryChars) || options.maxEntryChars < 1) throw new Error("maxEntryChars must be an integer of at least 1");
     this.workspace = resolve28(options.workspace);
-    this.#memoryRoot = join29(this.workspace, ".flavor", "memory");
-    this.path = join29(this.#memoryRoot, "MEMORY.md");
-    this.#behaviorPath = join29(this.#memoryRoot, "behavior.json");
+    this.#memoryRoot = join30(this.workspace, ".flavor", "memory");
+    this.path = join30(this.#memoryRoot, "MEMORY.md");
+    this.#behaviorPath = join30(this.#memoryRoot, "behavior.json");
     this.#maxEntries = options.maxEntries;
     this.#maxEntryChars = options.maxEntryChars;
   }
@@ -23452,7 +23619,7 @@ function createExecutionEnvironment(workspace, config) {
 
 // src/ide/client.ts
 import { readFile as readFile24, readdir as readdir10, stat as stat11 } from "fs/promises";
-import { basename as basename7, join as join30, relative as relative21, resolve as resolve30, sep as sep21 } from "path";
+import { basename as basename7, join as join31, relative as relative21, resolve as resolve30, sep as sep21 } from "path";
 var FlavorIdeClient = class {
   #workspace;
   #home;
@@ -23548,7 +23715,7 @@ var FlavorIdeClient = class {
       };
       if (await this.#healthy(configured)) return configured;
     }
-    const directory = join30(this.#home, ".flavor-code", "ide");
+    const directory = join31(this.#home, ".flavor-code", "ide");
     let entries;
     try {
       entries = (await readdir10(directory)).filter((name) => name.endsWith(".lock"));
@@ -23556,7 +23723,7 @@ var FlavorIdeClient = class {
       return void 0;
     }
     const candidates = (await Promise.all(entries.map(async (name) => {
-      const path = join30(directory, name);
+      const path = join31(directory, name);
       try {
         const [contents, info] = await Promise.all([readFile24(path, "utf8"), stat11(path)]);
         const lock = parseLockfile(contents);
@@ -24063,7 +24230,7 @@ function palSocketAddress(options) {
 import { createHash as createHash20 } from "crypto";
 import { Socket as Socket2 } from "net";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join32 } from "path";
+import { join as join33 } from "path";
 import { spawn as spawn7 } from "child_process";
 
 // src/pals/broker.ts
@@ -24076,16 +24243,16 @@ import { dirname as dirname23 } from "path";
 import { randomBytes as randomBytes3, randomUUID as randomUUID21 } from "crypto";
 import { chmod as chmod2, link as link2, mkdir as mkdir21, open as open12, readFile as readFile25, unlink as unlink4 } from "fs/promises";
 import { homedir } from "os";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 var PAL_AUTH_TOKEN_BYTES = 32;
 var TOKEN_PATTERN = /^[a-f0-9]{64}$/;
 async function loadOrCreatePalAuthToken(options = {}) {
-  const directory = join31(options.home ?? homedir(), ".flavor-code", "pals");
-  const tokenPath = join31(directory, "auth-token");
+  const directory = join32(options.home ?? homedir(), ".flavor-code", "pals");
+  const tokenPath = join32(directory, "auth-token");
   await mkdir21(directory, { recursive: true, mode: 448 });
   await chmod2(directory, 448);
   const token = (options.random ?? randomBytes3)(PAL_AUTH_TOKEN_BYTES).toString("hex");
-  const temporaryPath = join31(directory, `.auth-token-${process.pid}-${randomUUID21()}.tmp`);
+  const temporaryPath = join32(directory, `.auth-token-${process.pid}-${randomUUID21()}.tmp`);
   let handle;
   try {
     handle = await open12(temporaryPath, "wx", 384);
@@ -24215,7 +24382,7 @@ function canConnect(address) {
 }
 function startupLockPath(address) {
   const digest = createHash20("sha256").update(address, "utf8").digest("hex").slice(0, 24);
-  return join32(tmpdir3(), `flavor-code-pals-${digest}.startup.lock`);
+  return join33(tmpdir3(), `flavor-code-pals-${digest}.startup.lock`);
 }
 async function spawnProductionBroker(address) {
   const entry2 = process.argv[1];
@@ -25151,8 +25318,8 @@ async function createProductionRuntime(options) {
   const registeredProviders = registration.registered;
   let effectiveLlm = registration.effectiveLlm;
   const pluginHost = new PluginHost({
-    globalPluginDirs: [join33(home, ".flavor-code", "plugins")],
-    projectPluginDirs: [join33(workspace, ".flavor", "plugins")],
+    globalPluginDirs: [join34(home, ".flavor-code", "plugins")],
+    projectPluginDirs: [join34(workspace, ".flavor", "plugins")],
     config,
     // Existing project plugins (including astgraph and superharness) use Node.js
     // built-ins. The Worker/vm sandbox deliberately blocks those imports, so it
@@ -25260,7 +25427,7 @@ async function createProductionRuntime(options) {
       const address = palSocketAddress({
         platform: process.platform,
         userScope: home,
-        runtimeDir: join33(tmpdir4(), `flavor-code-pals-${createHash21("sha256").update(home).digest("hex").slice(0, 16)}`)
+        runtimeDir: join34(tmpdir4(), `flavor-code-pals-${createHash21("sha256").update(home).digest("hex").slice(0, 16)}`)
       });
       const baseCollaborationClient = collaboration.client ?? collaboration.createClient?.({
         instanceId: collaboration.instanceId,
@@ -25371,8 +25538,8 @@ async function createProductionRuntime(options) {
       diagnostics.push(`MCP servers could not start: ${message(error)}`);
     });
     const skills = new SkillRegistry({
-      globalRoots: [join33(home, ".flavor-code", "skills")],
-      projectRoots: [join33(workspace, ".flavor", "skills"), ...pluginSkillRoots],
+      globalRoots: [join34(home, ".flavor-code", "skills")],
+      projectRoots: [join34(workspace, ".flavor", "skills"), ...pluginSkillRoots],
       authorizeResource: async () => true,
       disabledNames: config.skills.disabled
     });
@@ -25380,7 +25547,7 @@ async function createProductionRuntime(options) {
     skillsReady.catch(() => void 0);
     tools.push(createSkillTool(skills), createSkillResourceTool(skills));
     if (options.extraTools !== void 0) tools.push(...options.extraTools);
-    const flavor = await optionalText2(join33(workspace, "FLAVOR.md"));
+    const flavor = await optionalText2(join34(workspace, "FLAVOR.md"));
     const instructionBaseline = await workspaceInstructions.baseline();
     let memoryContext;
     if (memoryStore !== void 0) {
@@ -25961,7 +26128,7 @@ async function createProductionRuntime(options) {
         evolveService.toolDefinition(),
         ...mcpTools
       ];
-      const loopFlavor = await optionalText2(join33(input.workspace, "FLAVOR.md"));
+      const loopFlavor = await optionalText2(join34(input.workspace, "FLAVOR.md"));
       const loopInstructionBaseline = await loopInstructions.baseline();
       const loopEnvironment = createPromptEnvironment({
         now: /* @__PURE__ */ new Date(),
@@ -26206,7 +26373,7 @@ async function createProductionRuntime(options) {
           contextEpoch: harness.main.context.snapshot().epoch?.id ?? "legacy"
         });
         const turnId = harnessJournal.startTurn(turnConfig, { prompt, initialUserMessage: runOptions?.initialUserMessage });
-        return durableTurn(persistAndCheckpointAfter(runMain(
+        return monitorMemoryRestart(durableTurn(persistAfter(runMain(
           harness,
           skills,
           prompt,
@@ -26222,11 +26389,7 @@ async function createProductionRuntime(options) {
           runOptions?.initialUserMessage,
           runOptions?.additionalContext,
           ide
-        ), persist, () => sessionHistory.append({
-          prompt,
-          context: harness.main.context.snapshot(),
-          label: `turn: ${prompt.slice(0, 80)}`
-        })), harnessJournal, turnId, turnConfig);
+        ), persist), harnessJournal, turnId, turnConfig), () => requestMemoryRestart(workspace, sessionId, emitOutput));
       },
       runSkill: (skill, prompt, signal) => persistAfter(
         runExplicitSkill(harness, skills, skill, prompt, signal, selectedModels.mainError),
@@ -26526,7 +26689,7 @@ ${renderMemoryDocument(entries)}`;
           return `Provider "${providerName}" is missing authorizationUrl, tokenUrl, or clientId.`;
         }
         try {
-          const tokenStore = createFileTokenStore(join33(home, ".flavor-code", "auth.json"));
+          const tokenStore = createFileTokenStore(join34(home, ".flavor-code", "auth.json"));
           const credentialId = oauthCredentialId(oauthConfig.tokenUrl, oauthConfig.clientId);
           await migrateLegacyOAuthToken(tokenStore, providerName, credentialId);
           const oauth = new OAuthCallbackAuthProvider({
@@ -26573,7 +26736,7 @@ ${renderMemoryDocument(entries)}`;
         }
       },
       async logout() {
-        const tokenStore = createFileTokenStore(join33(home, ".flavor-code", "auth.json"));
+        const tokenStore = createFileTokenStore(join34(home, ".flavor-code", "auth.json"));
         const tokens2 = await tokenStore.load();
         const hadCredentials = Object.keys(tokens2).length > 0 || effectiveLlm !== void 0;
         if (!hadCredentials) {
@@ -26936,14 +27099,6 @@ async function* persistAfter(source, persist) {
     await persist();
   }
 }
-async function* persistAndCheckpointAfter(source, persist, checkpoint) {
-  try {
-    for await (const item of source) yield item;
-    await checkpoint();
-  } finally {
-    await persist();
-  }
-}
 async function* persistEach(source, persist) {
   try {
     for await (const item of source) {
@@ -26975,6 +27130,31 @@ async function* durableTurn(source, journal, turnId, config) {
     }
   }
 }
+async function* monitorMemoryRestart(source, onRestartNeeded) {
+  let pressure = false;
+  for await (const event of source) {
+    if (event.type === "error" && event.error.code === "memory_pressure") pressure = true;
+    yield event;
+  }
+  if (pressure) onRestartNeeded();
+}
+function requestMemoryRestart(workspace, sessionId, emitOutput) {
+  try {
+    const markerPath = memoryRestartMarkerPath(workspace);
+    let previous;
+    try {
+      previous = parseMemoryRestartMarker(readFileSync3(markerPath, "utf8"));
+    } catch {
+    }
+    mkdirSync3(dirname24(markerPath), { recursive: true });
+    writeFileSync(markerPath, `${JSON.stringify(nextMemoryRestartMarker(previous, sessionId, /* @__PURE__ */ new Date()))}
+`, "utf8");
+  } catch {
+  }
+  process.exitCode = MEMORY_RESTART_EXIT_CODE;
+  emitOutput({ type: "notice", message: "Memory watermark reached; the session is saved and Flavor is restarting with a fresh heap." });
+  emitOutput({ type: "exit" });
+}
 async function runGitCommit(deps, hint, signal) {
   if (!await isGitRepository(deps.workspace)) return "Not a git repository \u2014 /commit needs git.";
   let summary2 = await changeSummary(deps.workspace);
@@ -27068,7 +27248,7 @@ async function registerConfiguredAdapters(providers, registry, environment, diag
   const configured = { ...providers };
   if (configured.openai === void 0 && environment.OPENAI_API_KEY) configured.openai = { type: "openai", apiKey: environment.OPENAI_API_KEY };
   if (configured.anthropic === void 0 && environment.ANTHROPIC_API_KEY) configured.anthropic = { type: "anthropic", apiKey: environment.ANTHROPIC_API_KEY };
-  const oauthTokenStore = createFileTokenStore(join33(home, ".flavor-code", "auth.json"));
+  const oauthTokenStore = createFileTokenStore(join34(home, ".flavor-code", "auth.json"));
   const registered = [];
   let effectiveLlm;
   for (const [name, provider] of Object.entries(configured)) {
@@ -27501,11 +27681,11 @@ function createMemoryTaskId() {
 import { createHash as createHash27 } from "crypto";
 import { mkdir as mkdir27, readFile as readFile35, readdir as readdir12, rm as rm15, stat as stat15, writeFile as writeFile17 } from "fs/promises";
 import { homedir as homedir4 } from "os";
-import { basename as basename9, join as join43, resolve as resolve36 } from "path";
+import { basename as basename9, join as join44, resolve as resolve36 } from "path";
 
 // src/d2c/workflow.ts
 import { createHash as createHash22 } from "crypto";
-import { join as join34 } from "path";
+import { join as join35 } from "path";
 import { z as z42 } from "zod";
 
 // src/d2c/workflow-shared.ts
@@ -27651,7 +27831,7 @@ function reviewsFor(report, previous) {
 function implementationDirectory(report) {
   const source = report.implementation.source;
   if (!/^https?:\/\//i.test(source)) return source;
-  return join34("src", "d2c-output", report.task);
+  return join35("src", "d2c-output", report.task);
 }
 function createWorkflow(report, framework) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -27775,7 +27955,7 @@ function applyQualityIssueDecision(workflow, issueId2, decision) {
   };
 }
 function workflowPath(workspace, task) {
-  return join34(taskDir(workspace, task), "workflow.json");
+  return join35(taskDir(workspace, task), "workflow.json");
 }
 async function readWorkflow(workspace, task) {
   return (await readRecoverableFile(workflowPath(workspace, task), decodeWorkflow))?.value;
@@ -28029,7 +28209,7 @@ function confirmApiMapping(mapping, operationKey, operations) {
 
 // src/d2c/modules.ts
 import { readFile as readFile28 } from "fs/promises";
-import { isAbsolute as isAbsolute15, join as join35, normalize as normalize2, posix, sep as sep24, win32 as win322 } from "path";
+import { isAbsolute as isAbsolute15, join as join36, normalize as normalize2, posix, sep as sep24, win32 as win322 } from "path";
 import { z as z43 } from "zod";
 var ModuleSchema = z43.object({
   id: z43.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/),
@@ -28048,13 +28228,13 @@ function safeSource(path) {
 }
 function d2cOutputDirectory(workspace, task) {
   if (!D2C_TASK_PATTERN.test(task)) throw new Error(`Invalid D2C task: ${task}`);
-  return join35(workspace, "src", "d2c-output", task);
+  return join36(workspace, "src", "d2c-output", task);
 }
 async function readD2cModules(workspace, task) {
   const project = d2cOutputDirectory(workspace, task);
   let raw;
   try {
-    raw = await readFile28(join35(project, "d2c.modules.json"), "utf8");
+    raw = await readFile28(join36(project, "d2c.modules.json"), "utf8");
   } catch {
     return [{ id: "page", label: task, sourceFiles: ["src/App.vue", "src/App.jsx"], keywords: [task] }];
   }
@@ -28075,7 +28255,7 @@ async function readD2cModules(workspace, task) {
 
 // src/d2c/integration.ts
 import { mkdir as mkdir24, readFile as readFile29, writeFile as writeFile13 } from "fs/promises";
-import { join as join36 } from "path";
+import { join as join37 } from "path";
 function record2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
@@ -28211,7 +28391,7 @@ async def reset_acceptance(request: Request):
 }
 async function generateIntegrationArtifacts(projectDir, document, mappings, options = {}) {
   if (mappings.some((mapping) => mapping.status === "needs-confirmation")) throw new Error("Confirm every uncertain OpenAPI mapping before generating integration code");
-  const packagePath = join36(projectDir, "package.json");
+  const packagePath = join37(projectDir, "package.json");
   let pkg;
   try {
     pkg = JSON.parse(await readFile29(packagePath, "utf8"));
@@ -28221,9 +28401,9 @@ async function generateIntegrationArtifacts(projectDir, document, mappings, opti
   const scripts = options.pythonServer ? { ...record2(pkg.scripts) ?? {} } : { ...record2(pkg.scripts) ?? {}, mock: "node mock/server.mjs" };
   const dependencies2 = options.pythonServer ? { ...record2(pkg.dependencies) ?? {}, axios: "^1.7.9" } : { ...record2(pkg.dependencies) ?? {}, axios: "^1.7.9", express: "^5.2.1" };
   const selected = [...new Set(mappings.map((mapping) => mapping.operationKey))].map((key) => document.operations.find((operation) => operation.id === key)).filter((operation) => operation !== void 0);
-  const apiDir = join36(projectDir, "src", "api");
-  const mockDir = join36(projectDir, "mock");
-  const serverDir = join36(projectDir, "server");
+  const apiDir = join37(projectDir, "src", "api");
+  const mockDir = join37(projectDir, "mock");
+  const serverDir = join37(projectDir, "server");
   await Promise.all([
     mkdir24(apiDir, { recursive: true }),
     ...options.pythonServer ? [] : [mkdir24(mockDir, { recursive: true })],
@@ -28233,23 +28413,23 @@ async function generateIntegrationArtifacts(projectDir, document, mappings, opti
   if (options.pythonServer) files.push("server/main.py", "server/requirements.txt", "server/README.md", "server/flavor-runtime.json");
   else files.push("mock/server.mjs");
   await Promise.all([
-    writeFile13(join36(apiDir, "http.js"), `import axios from "axios";
+    writeFile13(join37(apiDir, "http.js"), `import axios from "axios";
 
 export const http = axios.create({ baseURL: import.meta.env.VITE_API_BASE_URL || ${JSON.stringify(document.baseUrl ?? "")}, timeout: 15000 });
 
 http.interceptors.response.use((response) => response, (error) => Promise.reject({ name: "ApiError", status: error.response?.status, message: error.response?.data?.message || error.message, cause: error }));
 `),
-    writeFile13(join36(apiDir, "d2c-api.js"), apiModule(selected)),
-    writeFile13(join36(apiDir, "d2c-bindings.json"), `${JSON.stringify({ schema: 1, generatedAt: (/* @__PURE__ */ new Date()).toISOString(), mappings }, null, 2)}
+    writeFile13(join37(apiDir, "d2c-api.js"), apiModule(selected)),
+    writeFile13(join37(apiDir, "d2c-bindings.json"), `${JSON.stringify({ schema: 1, generatedAt: (/* @__PURE__ */ new Date()).toISOString(), mappings }, null, 2)}
 `),
-    ...options.pythonServer ? [] : [writeFile13(join36(mockDir, "server.mjs"), mockModule({ ...document, operations: selected }))],
+    ...options.pythonServer ? [] : [writeFile13(join37(mockDir, "server.mjs"), mockModule({ ...document, operations: selected }))],
     writeFile13(packagePath, `${JSON.stringify({ ...pkg, scripts, dependencies: dependencies2 }, null, 2)}
 `),
     ...options.pythonServer ? [
-      writeFile13(join36(serverDir, "main.py"), pythonServerModule({ ...document, operations: selected })),
-      writeFile13(join36(serverDir, "requirements.txt"), "fastapi>=0.116,<1\nuvicorn[standard]>=0.35,<1\nsqlalchemy>=2.0,<3\n"),
-      writeFile13(join36(serverDir, "README.md"), "# Python API service\n\nThis is the real integration service, not a mock. Development defaults to SQLite through `DATABASE_URL=sqlite:///./data/app.db`. Set the same environment variable to a SQLAlchemy MySQL or PostgreSQL URL for deployment; keep schema changes in migrations instead of database-specific SQL. Flavor Code starts the service automatically for acceptance.\n"),
-      writeFile13(join36(serverDir, "flavor-runtime.json"), `${JSON.stringify({
+      writeFile13(join37(serverDir, "main.py"), pythonServerModule({ ...document, operations: selected })),
+      writeFile13(join37(serverDir, "requirements.txt"), "fastapi>=0.116,<1\nuvicorn[standard]>=0.35,<1\nsqlalchemy>=2.0,<3\n"),
+      writeFile13(join37(serverDir, "README.md"), "# Python API service\n\nThis is the real integration service, not a mock. Development defaults to SQLite through `DATABASE_URL=sqlite:///./data/app.db`. Set the same environment variable to a SQLAlchemy MySQL or PostgreSQL URL for deployment; keep schema changes in migrations instead of database-specific SQL. Flavor Code starts the service automatically for acceptance.\n"),
+      writeFile13(join37(serverDir, "flavor-runtime.json"), `${JSON.stringify({
         schema: 1,
         kind: "python-fastapi",
         cwd: "server",
@@ -28270,7 +28450,7 @@ http.interceptors.response.use((response) => response, (error) => Promise.reject
 import { spawn as spawn8 } from "child_process";
 import { access as access3, readFile as readFile30 } from "fs/promises";
 import { createServer as createServer5 } from "net";
-import { join as join37 } from "path";
+import { join as join38 } from "path";
 async function exists3(path) {
   try {
     await access3(path);
@@ -28378,7 +28558,7 @@ ${output.trim()}` : ""}`);
   }
 }
 async function runPythonBackend(projectDir, options) {
-  const serverDir = join37(projectDir, "server");
+  const serverDir = join38(projectDir, "server");
   if (options.installDependencies !== false) await installPython(serverDir, options.signal);
   const selectedPort = await port();
   const url = `http://127.0.0.1:${selectedPort}`;
@@ -28424,7 +28604,7 @@ ${managed.output().slice(-4e3)}`);
   };
 }
 async function runD2cMockServer(projectDir, options = {}) {
-  const runtimePath = join37(projectDir, "server", "flavor-runtime.json");
+  const runtimePath = join38(projectDir, "server", "flavor-runtime.json");
   if (await exists3(runtimePath)) {
     let runtime;
     try {
@@ -28435,9 +28615,9 @@ async function runD2cMockServer(projectDir, options = {}) {
     if (runtime.schema !== 1 || runtime.kind !== "python-fastapi") throw new Error("Unsupported E2E backend runtime manifest");
     return runPythonBackend(projectDir, options);
   }
-  const serverPath = join37(projectDir, "mock", "server.mjs");
+  const serverPath = join38(projectDir, "mock", "server.mjs");
   if (!await exists3(serverPath)) throw new Error(`D2C mock server is not generated at ${serverPath}`);
-  if (options.installDependencies === false && !await exists3(join37(projectDir, "node_modules", "express", "package.json"))) {
+  if (options.installDependencies === false && !await exists3(join38(projectDir, "node_modules", "express", "package.json"))) {
     throw new Error("D2C mock server dependencies are not installed");
   }
   if (options.installDependencies !== false) await install(projectDir, options.signal);
@@ -28480,7 +28660,7 @@ ${managed.output().slice(-4e3)}`);
 // src/d2c/product.ts
 import { createHash as createHash24, randomUUID as randomUUID27 } from "crypto";
 import { copyFile as copyFile2, mkdir as mkdir25, readFile as readFile32, rename as rename13, stat as stat13, unlink as unlink7, writeFile as writeFile15 } from "fs/promises";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 import { z as z44 } from "zod";
 
 // src/e2e/prd-governance.ts
@@ -28635,13 +28815,13 @@ var PlanSchema2 = z44.object({
 }).strict();
 function d2cProductDirectory(workspace, task) {
   if (!D2C_TASK_PATTERN.test(task)) throw new Error("Invalid D2C task name");
-  return join38(taskDir(workspace, task), "product");
+  return join39(taskDir(workspace, task), "product");
 }
 function d2cProductPrototypeDirectory(workspace, task) {
-  return join38(d2cProductDirectory(workspace, task), "prototype");
+  return join39(d2cProductDirectory(workspace, task), "prototype");
 }
 function planPath(workspace, task) {
-  return join38(taskDir(workspace, task), "product-plan.json");
+  return join39(taskDir(workspace, task), "product-plan.json");
 }
 function resolveD2cProductTechnology(requirement, fallbackFramework = "vue") {
   const frontendCandidates = [
@@ -28824,16 +29004,16 @@ async function readD2cProductPlan(workspace, task) {
 }
 async function discoverD2cProductArtifacts(workspace, plan) {
   const product = d2cProductDirectory(workspace, plan.task);
-  const prdUpdatedAt = await fileTimestamp(join38(product, "prd.md"));
-  const prdHash = await fileHash(join38(product, "prd.md"));
-  const prototypeUpdatedAt = await fileTimestamp(join38(product, "prototype", "index.html"));
-  const prototypeHash = await fileHash(join38(product, "prototype", "index.html"));
-  const expectedManifest = join38(product, "prototype", "interaction-manifest.json");
+  const prdUpdatedAt = await fileTimestamp(join39(product, "prd.md"));
+  const prdHash = await fileHash(join39(product, "prd.md"));
+  const prototypeUpdatedAt = await fileTimestamp(join39(product, "prototype", "index.html"));
+  const prototypeHash = await fileHash(join39(product, "prototype", "index.html"));
+  const expectedManifest = join39(product, "prototype", "interaction-manifest.json");
   let manifestUpdatedAt = await fileTimestamp(expectedManifest);
   if (manifestUpdatedAt === void 0) {
-    const misplacedManifest = join38(product, "interaction-manifest.json");
+    const misplacedManifest = join39(product, "interaction-manifest.json");
     if (await fileTimestamp(misplacedManifest) !== void 0) {
-      await mkdir25(join38(product, "prototype"), { recursive: true });
+      await mkdir25(join39(product, "prototype"), { recursive: true });
       await copyFile2(misplacedManifest, expectedManifest);
       manifestUpdatedAt = await fileTimestamp(expectedManifest);
     }
@@ -28866,8 +29046,8 @@ async function readD2cProductPlanView(workspace, task) {
   if (stored === void 0) return void 0;
   const plan = await discoverD2cProductArtifacts(workspace, stored);
   if (plan.revision !== stored.revision) await writeD2cProductPlan(workspace, plan);
-  const prdMarkdown = plan.prd === void 0 ? void 0 : await readFile32(join38(taskDir(workspace, task), plan.prd.path), "utf8");
-  const manifestPath = join38(d2cProductDirectory(workspace, task), "prototype", "interaction-manifest.json");
+  const prdMarkdown = plan.prd === void 0 ? void 0 : await readFile32(join39(taskDir(workspace, task), plan.prd.path), "utf8");
+  const manifestPath = join39(d2cProductDirectory(workspace, task), "prototype", "interaction-manifest.json");
   const validationError = plan.phase === "design-generating" && await fileTimestamp(manifestPath) !== void 0 ? await validateAndNormalizePrototypeManifest(manifestPath) : void 0;
   return {
     plan,
@@ -29026,7 +29206,7 @@ function createAcceptanceEvidence(coverage, run, now = /* @__PURE__ */ new Date(
 
 // src/e2e/delivery-run.ts
 import { createHash as createHash26 } from "crypto";
-import { join as join39 } from "path";
+import { join as join40 } from "path";
 import { z as z45 } from "zod";
 var DELIVERY_NODE_IDS = ["requirement", "prd", "design", "d2c", "api", "acceptance", "delivery"];
 var ArtifactSchema = z45.object({
@@ -29143,7 +29323,7 @@ function completeDeliveryNode(run, node, outputs, now = /* @__PURE__ */ new Date
   return { ...run, nodes, updatedAt: timestamp2 };
 }
 function deliveryRunPath(workspace, task) {
-  return join39(taskDir(workspace, task), "delivery-run.json");
+  return join40(taskDir(workspace, task), "delivery-run.json");
 }
 function decodeDeliveryRun(raw) {
   return DeliveryRunSchema.parse(JSON.parse(raw));
@@ -29186,7 +29366,7 @@ async function updateDeliveryRun(workspace, task, expectedRevision, mutation) {
 // src/skills/manager.ts
 import { lstat as lstat13, mkdir as mkdir26, readFile as readFile34, readdir as readdir11, realpath as realpath13, rm as rm14, writeFile as writeFile16 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { isAbsolute as isAbsolute16, join as join40, relative as relative24, resolve as resolve34, sep as sep25 } from "path";
+import { isAbsolute as isAbsolute16, join as join41, relative as relative24, resolve as resolve34, sep as sep25 } from "path";
 import { stringify } from "yaml";
 var SkillManager = class {
   #workspace;
@@ -29209,7 +29389,7 @@ var SkillManager = class {
   async create(draft) {
     const value = parseDraft(draft);
     const projectRoot = this.#projectRoot();
-    const directory = join40(projectRoot, value.name);
+    const directory = join41(projectRoot, value.name);
     await mkdir26(projectRoot, { recursive: true, mode: 448 });
     try {
       await mkdir26(directory, { mode: 448 });
@@ -29218,7 +29398,7 @@ var SkillManager = class {
       throw error;
     }
     try {
-      await writeFile16(join40(directory, "SKILL.md"), renderSkill(value), { encoding: "utf8", flag: "wx", mode: 384 });
+      await writeFile16(join41(directory, "SKILL.md"), renderSkill(value), { encoding: "utf8", flag: "wx", mode: 384 });
       await this.#persistEnabled(value.name, true);
       return this.get(value.name);
     } catch (error) {
@@ -29236,7 +29416,7 @@ var SkillManager = class {
       throw error;
     });
     if (!info.isDirectory() || info.isSymbolicLink()) throw new Error(`Project skill path is not a real directory: ${validName}`);
-    const skillFile = join40(directory, "SKILL.md");
+    const skillFile = join41(directory, "SKILL.md");
     const fileInfo = await lstat13(skillFile);
     if (!fileInfo.isFile() || fileInfo.isSymbolicLink()) throw new Error(`Project skill file is not a real file: ${validName}`);
     await writeFile16(skillFile, renderSkill(value), { encoding: "utf8", mode: 384 });
@@ -29268,12 +29448,12 @@ var SkillManager = class {
   async #registry() {
     const loaded = await loadConfig({ cwd: this.#workspace, home: this.#home });
     const [globalPluginRoots, projectPluginRoots] = await Promise.all([
-      discoverPluginSkillRoots(join40(this.#home, ".flavor-code", "plugins")),
-      discoverPluginSkillRoots(join40(this.#workspace, ".flavor", "plugins"))
+      discoverPluginSkillRoots(join41(this.#home, ".flavor-code", "plugins")),
+      discoverPluginSkillRoots(join41(this.#workspace, ".flavor", "plugins"))
     ]);
     return {
       registry: new SkillRegistry({
-        globalRoots: [join40(this.#home, ".flavor-code", "skills"), ...globalPluginRoots],
+        globalRoots: [join41(this.#home, ".flavor-code", "skills"), ...globalPluginRoots],
         projectRoots: [this.#projectRoot(), ...projectPluginRoots]
       }),
       disabled: new Set(loaded.config.skills.disabled)
@@ -29289,10 +29469,10 @@ var SkillManager = class {
     };
   }
   #projectRoot() {
-    return join40(this.#workspace, ".flavor", "skills");
+    return join41(this.#workspace, ".flavor", "skills");
   }
   #projectSkillDirectory(name) {
-    return join40(this.#projectRoot(), name);
+    return join41(this.#projectRoot(), name);
   }
 };
 function parseName(value) {
@@ -29333,9 +29513,9 @@ async function discoverPluginSkillRoots(directory) {
   const roots = [];
   for (const entry2 of entries) {
     if (!entry2.isDirectory() || entry2.isSymbolicLink()) continue;
-    const pluginRoot = await realpath13(join40(directory, entry2.name));
+    const pluginRoot = await realpath13(join41(directory, entry2.name));
     try {
-      const manifest = PluginManifestSchema.parse(JSON.parse(await readFile34(join40(pluginRoot, "flavor-plugin.json"), "utf8")));
+      const manifest = PluginManifestSchema.parse(JSON.parse(await readFile34(join41(pluginRoot, "flavor-plugin.json"), "utf8")));
       for (const contribution of manifest.contributes.skillRoots) {
         const candidate = resolve34(pluginRoot, contribution.path);
         const info = await lstat13(candidate);
@@ -29410,11 +29590,11 @@ async function createProjectMemoryManager(options) {
 }
 
 // src/mcp/config-manager.ts
-import { join as join41 } from "path";
+import { join as join42 } from "path";
 var ProjectMcpConfigManager = class {
   path;
   constructor(workspace) {
-    this.path = join41(workspace, ".flavor", "flavor.json");
+    this.path = join42(workspace, ".flavor", "flavor.json");
   }
   async list() {
     const document = await readRecoverableFile(this.path, (raw) => parseDocument2(this.path, raw));
@@ -29511,7 +29691,7 @@ function isRecord7(value) {
 }
 
 // src/desktop/model-config.ts
-import { join as join42 } from "path";
+import { join as join43 } from "path";
 var DEFAULT_DESKTOP_MODELS = [
   {
     id: "anthropic:deepseek-v4-pro",
@@ -29532,7 +29712,7 @@ var DEFAULT_DESKTOP_MODELS = [
 ];
 async function loadDesktopModels(workspace, home) {
   try {
-    const tokens2 = await createFileTokenStore(join42(home, ".flavor-code", "auth.json")).load();
+    const tokens2 = await createFileTokenStore(join43(home, ".flavor-code", "auth.json")).load();
     const pkceModels = [];
     const knownPkce = /* @__PURE__ */ new Set();
     for (const token of Object.values(tokens2)) {
@@ -29677,33 +29857,33 @@ function pngDataUrl(png) {
 }
 async function detectD2cFramework(workspace, task) {
   try {
-    const pkg = JSON.parse(await readFile35(join43(d2cOutputDirectory(workspace, task), "package.json"), "utf8"));
+    const pkg = JSON.parse(await readFile35(join44(d2cOutputDirectory(workspace, task), "package.json"), "utf8"));
     return pkg.dependencies?.react === void 0 ? "vue" : "react";
   } catch {
     return "vue";
   }
 }
 function integrationDirectory(workspace, task) {
-  return join43(workspace, ".flavor", "d2c", task, "integration");
+  return join44(workspace, ".flavor", "d2c", task, "integration");
 }
 var D2C_BACKEND_SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([".cfg", ".env", ".ini", ".js", ".json", ".lock", ".mjs", ".py", ".toml", ".txt", ".yaml", ".yml"]);
 var D2C_BACKEND_IGNORED_DIRECTORIES = /* @__PURE__ */ new Set([".git", ".venv", "__pycache__", "data", "node_modules", "venv"]);
 async function d2cBackendSourceFingerprint(project) {
-  const runtimeManifest = join43(project, "server", "flavor-runtime.json");
+  const runtimeManifest = join44(project, "server", "flavor-runtime.json");
   const realBackend = (await stat15(runtimeManifest).catch(() => void 0))?.isFile() === true;
-  const root = realBackend ? join43(project, "server") : join43(project, "mock");
+  const root = realBackend ? join44(project, "server") : join44(project, "mock");
   if ((await stat15(root).catch(() => void 0))?.isDirectory() !== true) return void 0;
   const files = [];
   const visit = async (directory) => {
     const entries = await readdir12(directory, { withFileTypes: true });
     for (const entry2 of entries) {
       if (entry2.isDirectory()) {
-        if (!D2C_BACKEND_IGNORED_DIRECTORIES.has(entry2.name)) await visit(join43(directory, entry2.name));
+        if (!D2C_BACKEND_IGNORED_DIRECTORIES.has(entry2.name)) await visit(join44(directory, entry2.name));
         continue;
       }
       if (!entry2.isFile()) continue;
       const extension2 = entry2.name.includes(".") ? `.${entry2.name.split(".").pop().toLowerCase()}` : "";
-      if (D2C_BACKEND_SOURCE_EXTENSIONS.has(extension2)) files.push(join43(directory, entry2.name));
+      if (D2C_BACKEND_SOURCE_EXTENSIONS.has(extension2)) files.push(join44(directory, entry2.name));
     }
   };
   await visit(root);
@@ -30257,7 +30437,7 @@ var DesktopRuntimeController = class {
     if (workflow === void 0 || !reviewProgress(workflow).complete || workflow.stage === "visual-review") {
       throw new Error("Complete visual review before importing OpenAPI");
     }
-    const moduleManifest = join43(d2cOutputDirectory(workspace, task), "d2c.modules.json");
+    const moduleManifest = join44(d2cOutputDirectory(workspace, task), "d2c.modules.json");
     const moduleManifestInfo = await stat15(moduleManifest).catch(() => void 0);
     if (moduleManifestInfo === void 0 || !moduleManifestInfo.isFile()) {
       throw new Error("D2C implementation must write d2c.modules.json before API mapping; ask the agent to split the project into modules first");
@@ -30270,8 +30450,8 @@ var DesktopRuntimeController = class {
     await mkdir27(dir, { recursive: true });
     const hash = createHash27("sha256").update(raw).digest("hex");
     await Promise.all([
-      writeFile17(join43(dir, "swagger.json"), raw),
-      writeFile17(join43(dir, "openapi.normalized.json"), `${JSON.stringify(document, null, 2)}
+      writeFile17(join44(dir, "swagger.json"), raw),
+      writeFile17(join44(dir, "openapi.normalized.json"), `${JSON.stringify(document, null, 2)}
 `)
     ]);
     const next = {
@@ -30306,7 +30486,7 @@ var DesktopRuntimeController = class {
     let workflow = await readWorkflow(workspace, task);
     if (workflow?.openapi === void 0 && workflow !== void 0 && reviewProgress(workflow).complete && await readD2cProductPlanView(workspace, task) !== void 0) {
       const modules = await readD2cModules(workspace, task);
-      const productOpenApiPath = join43(taskDir(workspace, task), "product", "openapi.json");
+      const productOpenApiPath = join44(taskDir(workspace, task), "product", "openapi.json");
       const authored = await readFile35(productOpenApiPath, "utf8").catch(() => void 0);
       const generated = authored === void 0;
       const prepared = await this.#storeD2cOpenApi(
@@ -30319,7 +30499,7 @@ var DesktopRuntimeController = class {
       return prepared;
     }
     if (workflow?.openapi === void 0 || workflow.mappings === void 0) return void 0;
-    const document = JSON.parse(await readFile35(join43(integrationDirectory(workspace, task), "openapi.normalized.json"), "utf8"));
+    const document = JSON.parse(await readFile35(join44(integrationDirectory(workspace, task), "openapi.normalized.json"), "utf8"));
     return { workflow, document, mappings: workflow.mappings };
   }
   async confirmD2cMapping(task, moduleId, operationKey) {
@@ -30386,7 +30566,7 @@ var DesktopRuntimeController = class {
     ].join("\n");
     const delivery = await readDeliveryRun(workspace, task);
     if (delivery?.nodes.api.status === "running") {
-      const apiArtifacts = await Promise.all(generated.files.map(async (file) => artifactRef(file, await readFile35(join43(project, file)))));
+      const apiArtifacts = await Promise.all(generated.files.map(async (file) => artifactRef(file, await readFile35(join44(project, file)))));
       const completed = await updateDeliveryRun(
         workspace,
         task,
@@ -30413,7 +30593,7 @@ var DesktopRuntimeController = class {
     try {
       const fingerprint2 = await d2cBackendSourceFingerprint(project);
       if (fingerprint2 !== void 0) this.#d2cMockSourceFingerprints.set(task, fingerprint2);
-      const environmentPath = join43(project, ".env.local");
+      const environmentPath = join44(project, ".env.local");
       const existingEnvironment = await readFile35(environmentPath, "utf8").catch(() => "");
       const environment = `${existingEnvironment.split(/\r?\n/).filter((line) => !/^\s*VITE_API_BASE_URL\s*=/.test(line)).join("\n").trim()}
 VITE_API_BASE_URL=${running.url}
@@ -30494,7 +30674,7 @@ VITE_API_BASE_URL=${running.url}
     const readyPreview = this.#d2cPreviews.get(task);
     const readyMock = this.#d2cMocks.get(task);
     if (readyPreview === void 0 || readyMock === void 0) throw new Error("D2C preview or backend service is unavailable after synchronization");
-    const manifestPath = join43(taskDir(workspace, task), "design", "interaction-manifest.json");
+    const manifestPath = join44(taskDir(workspace, task), "design", "interaction-manifest.json");
     const manifest = parseInteractionManifest(await readFile35(manifestPath, "utf8"));
     const baseline = await this.#verifyAcceptanceBaseline(workspace, task);
     const coverage = baseline === void 0 ? void 0 : verifyRequirementCoverage(baseline.approvedPrd.criteria, manifest);
@@ -30506,7 +30686,7 @@ VITE_API_BASE_URL=${running.url}
       await mkdir27(planDir, { recursive: true });
       try {
         const observations = await this.#observeD2cPages(manifest, readyPreview.url);
-        const prd = await readFile35(join43(taskDir(workspace, task), "product", "prd.md"), "utf8").catch(() => void 0);
+        const prd = await readFile35(join44(taskDir(workspace, task), "product", "prd.md"), "utf8").catch(() => void 0);
         const apiContext = JSON.stringify({ openapi: workflow.openapi, mappings: workflow.mappings }, null, 2);
         const plan = await this.#d2cJudge.planInteractions({ task, seed: manifest, observations, ...prd === void 0 ? {} : { prd }, apiContext });
         executableManifest = mergeInteractionManifests(manifest, plan.manifest);
@@ -30517,9 +30697,9 @@ VITE_API_BASE_URL=${running.url}
           plannedScenarios: executableManifest.pages.reduce((total, page) => total + page.scenarios.length, 0),
           pageAnalyses: plan.pageAnalyses
         };
-        await writeFile17(join43(planDir, "autonomous-interaction-plan.json"), `${JSON.stringify({ ...plan, manifest: executableManifest }, null, 2)}
+        await writeFile17(join44(planDir, "autonomous-interaction-plan.json"), `${JSON.stringify({ ...plan, manifest: executableManifest }, null, 2)}
 `, { encoding: "utf8", mode: 384 });
-        await rm15(join43(planDir, "autonomous-interaction-diagnostic.json"), { force: true });
+        await rm15(join44(planDir, "autonomous-interaction-diagnostic.json"), { force: true });
       } catch (cause) {
         const detail = message(cause);
         review = {
@@ -30527,8 +30707,8 @@ VITE_API_BASE_URL=${running.url}
           plannedScenarios: manifest.pages.reduce((total, page) => total + page.scenarios.length, 0),
           warning: `\u591A\u6A21\u6001\u81EA\u4E3B\u89C4\u5212\u5931\u8D25\uFF0C\u5DF2\u7EE7\u7EED\u6267\u884C\u5DF2\u786E\u8BA4\u7684\u8BBE\u8BA1\u5951\u7EA6\uFF1A${detail}`
         };
-        await rm15(join43(planDir, "autonomous-interaction-plan.json"), { force: true });
-        await writeFile17(join43(planDir, "autonomous-interaction-diagnostic.json"), `${JSON.stringify({
+        await rm15(join44(planDir, "autonomous-interaction-plan.json"), { force: true });
+        await writeFile17(join44(planDir, "autonomous-interaction-diagnostic.json"), `${JSON.stringify({
           schema: 1,
           stage: "planning",
           occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -30542,13 +30722,13 @@ VITE_API_BASE_URL=${running.url}
     let result = { ...rawResult, evidenceMode: review.mode };
     if (coverage !== void 0) {
       const evidence = createAcceptanceEvidence(coverage, result);
-      await writeFile17(join43(taskDir(workspace, task), "acceptance-evidence.json"), `${JSON.stringify({ ...evidence, baseline }, null, 2)}
+      await writeFile17(join44(taskDir(workspace, task), "acceptance-evidence.json"), `${JSON.stringify({ ...evidence, baseline }, null, 2)}
 `, { encoding: "utf8", mode: 384 });
       if (!evidence.passed) result = { ...result, passed: false, failures: Math.max(1, result.failures) };
     }
     const dir = integrationDirectory(workspace, task);
     await mkdir27(dir, { recursive: true });
-    await writeFile17(join43(dir, "interaction-results.json"), `${JSON.stringify(result, null, 2)}
+    await writeFile17(join44(dir, "interaction-results.json"), `${JSON.stringify(result, null, 2)}
 `);
     const next = await updateWorkflow(workspace, task, workflow.revision, (current) => applyInteractionRun(current, result));
     return { workflow: next, result, review };
@@ -30561,7 +30741,7 @@ VITE_API_BASE_URL=${running.url}
     if (mock === void 0 || !mock.exited() || result.failures === 0) return result;
     const output = mock.output().trim();
     try {
-      const dir = join43(d2cOutputDirectory(workspace, task), "mock-server.log");
+      const dir = join44(d2cOutputDirectory(workspace, task), "mock-server.log");
       await writeFile17(dir, `${output}
 `);
     } catch {
@@ -30656,7 +30836,7 @@ VITE_API_BASE_URL=${running.url}
     if (current === void 0) throw new Error("D2C product plan is unavailable");
     if (current.plan.approvedPrd !== void 0) throw new Error("The approved PRD is immutable and cannot be edited");
     if (current.plan.phase !== "prd-review") throw new Error("PRD sections can only be edited during PRD review");
-    const path = join43(taskDir(workspace, task), "product", "prd.md");
+    const path = join44(taskDir(workspace, task), "product", "prd.md");
     const updated = await updatePrdSectionFile(path, { sectionId, body, expectedHash });
     const now = (/* @__PURE__ */ new Date()).toISOString();
     await writeD2cProductPlan(workspace, {
@@ -30676,15 +30856,15 @@ VITE_API_BASE_URL=${running.url}
   async #assertProductPrdLocked(workspace, task) {
     const current = await readD2cProductPlanView(workspace, task);
     if (current?.plan.approvedPrd === void 0) return;
-    await assertApprovedPrd(join43(taskDir(workspace, task), "product", "prd.md"), current.plan.approvedPrd);
+    await assertApprovedPrd(join44(taskDir(workspace, task), "product", "prd.md"), current.plan.approvedPrd);
   }
   async #acceptancePaths(workspace, task) {
-    const product = join43(taskDir(workspace, task), "product");
-    const openapi = join43(product, "openapi.json");
+    const product = join44(taskDir(workspace, task), "product");
+    const openapi = join44(product, "openapi.json");
     return {
-      prd: join43(product, "prd.md"),
-      prototype: join43(product, "prototype", "index.html"),
-      interaction: join43(product, "prototype", "interaction-manifest.json"),
+      prd: join44(product, "prd.md"),
+      prototype: join44(product, "prototype", "index.html"),
+      interaction: join44(product, "prototype", "interaction-manifest.json"),
       ...await stat15(openapi).catch(() => void 0) === void 0 ? {} : { openapi }
     };
   }
@@ -30692,17 +30872,17 @@ VITE_API_BASE_URL=${running.url}
     const product = await readD2cProductPlanView(workspace, task);
     if (product?.plan.approvedPrd === void 0) return void 0;
     await this.#assertProductPrdLocked(workspace, task);
-    const baseline = JSON.parse(await readFile35(join43(taskDir(workspace, task), "acceptance-baseline.json"), "utf8"));
+    const baseline = JSON.parse(await readFile35(join44(taskDir(workspace, task), "acceptance-baseline.json"), "utf8"));
     await verifyAcceptanceBaseline(await this.#acceptancePaths(workspace, task), baseline);
-    const design = join43(taskDir(workspace, task), "design");
+    const design = join44(taskDir(workspace, task), "design");
     await Promise.all([
-      verifyAcceptanceArtifact(join43(design, "index.html"), baseline.artifacts.prototype, "runtime prototype"),
-      verifyAcceptanceArtifact(join43(design, "interaction-manifest.json"), baseline.artifacts.interaction, "runtime interaction contract")
+      verifyAcceptanceArtifact(join44(design, "index.html"), baseline.artifacts.prototype, "runtime prototype"),
+      verifyAcceptanceArtifact(join44(design, "interaction-manifest.json"), baseline.artifacts.interaction, "runtime interaction contract")
     ]);
     const workflow = await readWorkflow(workspace, task);
     if (workflow?.openapi !== void 0) {
       await verifyAcceptanceArtifact(
-        join43(taskDir(workspace, task), "integration", "swagger.json"),
+        join44(taskDir(workspace, task), "integration", "swagger.json"),
         { hash: workflow.openapi.hash },
         "runtime OpenAPI contract"
       );
@@ -30723,14 +30903,14 @@ VITE_API_BASE_URL=${running.url}
       throw new Error("D2C PRD is empty and cannot be accepted");
     }
     if (stage === "design" && accepted) {
-      const manifest = join43(d2cProductPrototypeDirectory(workspace, task), "interaction-manifest.json");
+      const manifest = join44(d2cProductPrototypeDirectory(workspace, task), "interaction-manifest.json");
       const normalizedManifest = parseInteractionManifest(await readFile35(manifest, "utf8"));
       if (current.plan.approvedPrd === void 0) throw new Error("Approve the PRD before confirming the design");
       verifyRequirementCoverage(current.plan.approvedPrd.criteria, normalizedManifest);
       await writeFile17(manifest, `${JSON.stringify(normalizedManifest, null, 2)}
 `, { encoding: "utf8", mode: 384 });
       const baseline = await captureAcceptanceBaseline(await this.#acceptancePaths(workspace, task), current.plan.approvedPrd);
-      await writeFile17(join43(taskDir(workspace, task), "acceptance-baseline.json"), `${JSON.stringify(baseline, null, 2)}
+      await writeFile17(join44(taskDir(workspace, task), "acceptance-baseline.json"), `${JSON.stringify(baseline, null, 2)}
 `, { encoding: "utf8", mode: 384 });
     }
     const plan = await writeD2cProductPlan(
@@ -30764,8 +30944,8 @@ VITE_API_BASE_URL=${running.url}
     const imported = await this.importD2cDesign(task, d2cProductPrototypeDirectory(workspace, task));
     const delivery = await readDeliveryRun(workspace, task);
     if (delivery !== void 0) {
-      const prototype = await readFile35(join43(d2cProductPrototypeDirectory(workspace, task), "index.html"), "utf8");
-      const interaction = await readFile35(join43(d2cProductPrototypeDirectory(workspace, task), "interaction-manifest.json"), "utf8");
+      const prototype = await readFile35(join44(d2cProductPrototypeDirectory(workspace, task), "index.html"), "utf8");
+      const interaction = await readFile35(join44(d2cProductPrototypeDirectory(workspace, task), "interaction-manifest.json"), "utf8");
       const completed = await updateDeliveryRun(workspace, task, delivery.revision, (run) => completeDeliveryNode(run, "design", [
         artifactRef("product/prototype/index.html", prototype),
         artifactRef("product/prototype/interaction-manifest.json", interaction)
@@ -30849,10 +31029,10 @@ VITE_API_BASE_URL=${running.url}
     const next = await updateWorkflow(workspace, task, workflow.revision, (current) => applyQualityJudgment(current, judgment));
     const qualityContent = `${JSON.stringify(judgment, null, 2)}
 `;
-    await writeFile17(join43(taskDir(workspace, task), "quality-judge.json"), qualityContent, { encoding: "utf8", mode: 384 });
+    await writeFile17(join44(taskDir(workspace, task), "quality-judge.json"), qualityContent, { encoding: "utf8", mode: 384 });
     const delivery = await readDeliveryRun(workspace, task);
     if (next.stage === "completed" && delivery?.nodes.acceptance.status === "running") {
-      const interactionContent = await readFile35(join43(integrationDirectory(workspace, task), "interaction-results.json"), "utf8");
+      const interactionContent = await readFile35(join44(integrationDirectory(workspace, task), "interaction-results.json"), "utf8");
       const accepted = await updateDeliveryRun(workspace, task, delivery.revision, (run) => completeDeliveryNode(run, "acceptance", [
         artifactRef("integration/interaction-results.json", interactionContent),
         artifactRef("quality-judge.json", qualityContent)
@@ -31033,15 +31213,15 @@ function desktopWindowChrome(platform = process.platform) {
 }
 
 // src/utils/crash-guard.ts
-import { mkdirSync as mkdirSync3, writeFileSync } from "fs";
-import { join as join44 } from "path";
+import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync2 } from "fs";
+import { join as join45 } from "path";
 var installed = false;
 function installCrashGuard(options = {}) {
   if (installed) return;
   installed = true;
   const crashLogDir = () => {
     try {
-      return join44((options.workspace ?? process.cwd)(), ".flavor");
+      return join45((options.workspace ?? process.cwd)(), ".flavor");
     } catch {
       return process.cwd();
     }
@@ -31049,9 +31229,9 @@ function installCrashGuard(options = {}) {
   const writeCrashLog = (kind, detail) => {
     try {
       const dir = crashLogDir();
-      mkdirSync3(dir, { recursive: true });
-      const path = join44(dir, `crash-${(/* @__PURE__ */ new Date()).toISOString().replace(/[^0-9]/g, "")}-${process.pid}.log`);
-      writeFileSync(path, [
+      mkdirSync4(dir, { recursive: true });
+      const path = join45(dir, `crash-${(/* @__PURE__ */ new Date()).toISOString().replace(/[^0-9]/g, "")}-${process.pid}.log`);
+      writeFileSync2(path, [
         `kind: ${kind}`,
         `version: ${process.version}`,
         `platform: ${process.platform}`,
@@ -31243,7 +31423,7 @@ function safeGitTarget(value) {
 // src/desktop/worktree-manager.ts
 import { randomUUID as randomUUID28 } from "crypto";
 import { mkdir as mkdir28, readFile as readFile37, readdir as readdir13, rm as rm17, stat as stat16, writeFile as writeFile18 } from "fs/promises";
-import { basename as basename10, isAbsolute as isAbsolute19, join as join45, relative as relative27, resolve as resolve38, sep as sep27 } from "path";
+import { basename as basename10, isAbsolute as isAbsolute19, join as join46, relative as relative27, resolve as resolve38, sep as sep27 } from "path";
 var DesktopWorktreeManager = class {
   #repository;
   #storage;
@@ -31289,7 +31469,7 @@ var DesktopWorktreeManager = class {
     }
     const values = await Promise.all(names.filter((name) => name.endsWith(".json")).map(async (name) => {
       try {
-        const stored = validateStored(JSON.parse(await readFile37(join45(this.#storage, name), "utf8")), this.#repository, this.#storage);
+        const stored = validateStored(JSON.parse(await readFile37(join46(this.#storage, name), "utf8")), this.#repository, this.#storage);
         if ((await stat16(stored.path).catch(() => void 0))?.isDirectory() !== true) return void 0;
         const status = await git2(stored.path, ["status", "--porcelain"]);
         const merged = await git2(this.#repository, ["merge-base", "--is-ancestor", stored.branch, "HEAD"]);
@@ -31353,7 +31533,7 @@ function validateStored(value, repository, storage) {
 // src/desktop/workbench-service.ts
 import { readFile as readFile38, readdir as readdir14, stat as stat17 } from "fs/promises";
 import { homedir as homedir5 } from "os";
-import { join as join46, resolve as resolve39 } from "path";
+import { join as join47, resolve as resolve39 } from "path";
 var MAX_TEXT = 128e3;
 var MAX_ITEMS = 200;
 var DesktopWorkbenchService = class {
@@ -31386,11 +31566,11 @@ var DesktopWorkbenchService = class {
     return url.toString().replace(/\/$/, input.trim().endsWith("/") ? "/" : "");
   }
   async #goals() {
-    const root = join46(this.#workspace, ".flavor", "goals");
+    const root = join47(this.#workspace, ".flavor", "goals");
     const names = await readdir14(root).catch((error) => error.code === "ENOENT" ? [] : Promise.reject(error));
     const values = await Promise.all(names.filter((name) => /^goal-[A-Za-z0-9._-]+\.json$/.test(name)).slice(0, MAX_ITEMS).map(async (name) => {
       try {
-        return GoalStateSchema.parse(JSON.parse(await boundedRead2(join46(root, name))));
+        return GoalStateSchema.parse(JSON.parse(await boundedRead2(join47(root, name))));
       } catch {
         return void 0;
       }
@@ -31400,7 +31580,7 @@ var DesktopWorkbenchService = class {
   async #instructions() {
     const names = ["FLAVOR.md", "AGENTS.md", "CLAUDE.md", "AGENTS.local.md", "CLAUDE.local.md"];
     const items = await Promise.all(names.map(async (name) => {
-      const path = join46(this.#workspace, name);
+      const path = join47(this.#workspace, name);
       try {
         return { name, path, content: redactErrorText(await boundedRead2(path)) };
       } catch (error) {
@@ -31413,9 +31593,9 @@ var DesktopWorkbenchService = class {
   async #permissionFiles() {
     const candidates = [
       ...process.env.FLAVOR_MANAGED_PERMISSIONS ? [{ tier: "managed", path: resolve39(process.env.FLAVOR_MANAGED_PERMISSIONS), content: "" }] : [],
-      { tier: "user", path: join46(this.#home, ".flavor-code", "permissions.json"), content: "" },
-      { tier: "project", path: join46(this.#workspace, ".flavor", "permissions.json"), content: "" },
-      { tier: "local", path: join46(this.#workspace, ".flavor", "permissions.local.json"), content: "" }
+      { tier: "user", path: join47(this.#home, ".flavor-code", "permissions.json"), content: "" },
+      { tier: "project", path: join47(this.#workspace, ".flavor", "permissions.json"), content: "" },
+      { tier: "local", path: join47(this.#workspace, ".flavor", "permissions.local.json"), content: "" }
     ];
     const values = await Promise.all(candidates.map(async (item) => {
       try {
@@ -31430,7 +31610,7 @@ var DesktopWorkbenchService = class {
   async #audit() {
     let raw;
     try {
-      raw = await boundedRead2(join46(this.#workspace, ".flavor", "audit.jsonl"));
+      raw = await boundedRead2(join47(this.#workspace, ".flavor", "audit.jsonl"));
     } catch (error) {
       if (error.code === "ENOENT") return [];
       throw error;
@@ -31445,7 +31625,7 @@ var DesktopWorkbenchService = class {
     }).reverse();
   }
   async #context(sessionId) {
-    const usage = await readJsonLines2(join46(this.#workspace, ".flavor", "usage.jsonl"));
+    const usage = await readJsonLines2(join47(this.#workspace, ".flavor", "usage.jsonl"));
     if (sessionId === void 0) return { visibility: [], usage };
     try {
       const document = await new SessionStore({ workspace: this.#workspace }).load(sessionId);
@@ -31485,14 +31665,14 @@ function redact2(value, key = "") {
 
 // src/desktop/main.ts
 installCrashGuard();
-var moduleDirectory = dirname24(fileURLToPath4(import.meta.url));
+var moduleDirectory = dirname25(fileURLToPath4(import.meta.url));
 var developmentUrl = process.env.FLAVOR_DESKTOP_DEV_URL;
 var mainWindow;
 var appMenu;
 var quitting = false;
 function logStartup(step, detail) {
   try {
-    const logPath = join47(dirname24(process.execPath), "flavor-code-startup.log");
+    const logPath = join48(dirname25(process.execPath), "flavor-code-startup.log");
     const ts = (/* @__PURE__ */ new Date()).toISOString();
     appendFileSync(logPath, `[${ts}] ${step}${detail ? ` | ${detail}` : ""}
 `);
@@ -31517,7 +31697,7 @@ var d2cEmbedded = createEmbeddedD2cAutomation(() => {
   };
 });
 var d2cJudgeClient = createD2cJudgeClient();
-var judgeStore = () => createD2cJudgeConfigStore(join47(app.getPath("userData"), "d2c-judge.json"));
+var judgeStore = () => createD2cJudgeConfigStore(join48(app.getPath("userData"), "d2c-judge.json"));
 function judgeImage(png) {
   const image = nativeImage.createFromBuffer(png);
   const size = image.getSize();
@@ -31543,7 +31723,7 @@ function sessionMetaKey(workspace, sessionId) {
 }
 function worktreeManager(workspace) {
   const key = createHash28("sha256").update(resolve40(workspace)).digest("hex").slice(0, 20);
-  return new DesktopWorktreeManager({ repository: workspace, storage: join47(app.getPath("userData"), "task-worktrees", key) });
+  return new DesktopWorktreeManager({ repository: workspace, storage: join48(app.getPath("userData"), "task-worktrees", key) });
 }
 function activeWorkingDirectory() {
   if (activeWorkspace === void 0) throw new Error("\u8BF7\u5148\u6253\u5F00\u9879\u76EE");
@@ -31688,7 +31868,7 @@ function createDesktopController(workspace, owner2) {
         alias: `desktop-${basename11(workspace ?? runtimeOptions.workspace ?? "flavor")}`.slice(0, 64),
         optional: true,
         startBroker: (address) => {
-          const entry2 = app.isPackaged ? join47(process.resourcesPath, "app.asar.unpacked", "dist", "desktop", "pals-broker-entry.js") : join47(moduleDirectory, "pals-broker-entry.js");
+          const entry2 = app.isPackaged ? join48(process.resourcesPath, "app.asar.unpacked", "dist", "desktop", "pals-broker-entry.js") : join48(moduleDirectory, "pals-broker-entry.js");
           return spawnPalBrokerProcess({
             address,
             executable: process.execPath,
@@ -31710,7 +31890,7 @@ function createDesktopController(workspace, owner2) {
 var detachedController = createDesktopController();
 var controller = detachedController;
 function statePath() {
-  return join47(app.getPath("userData"), "desktop-state.json");
+  return join48(app.getPath("userData"), "desktop-state.json");
 }
 async function loadPersistedProjects() {
   try {
@@ -31883,7 +32063,7 @@ async function chooseAndOpenWorkspace() {
 var cachedAppIconDataUrl;
 function appIconDataUrl() {
   if (cachedAppIconDataUrl !== void 0) return cachedAppIconDataUrl;
-  const icon = nativeImage.createFromPath(join47(app.getAppPath(), "assets", "icon.png"));
+  const icon = nativeImage.createFromPath(join48(app.getAppPath(), "assets", "icon.png"));
   if (icon.isEmpty()) return void 0;
   cachedAppIconDataUrl = icon.toDataURL();
   return cachedAppIconDataUrl;
@@ -32301,7 +32481,7 @@ function applicationMenu() {
   ]);
 }
 async function createWindow() {
-  const rendererPath = join47(app.getAppPath(), "dist", "desktop-renderer", "index.html");
+  const rendererPath = join48(app.getAppPath(), "dist", "desktop-renderer", "index.html");
   mainWindow = new BrowserWindow2({
     title: "Flavor Code",
     width: 1280,
@@ -32312,14 +32492,14 @@ async function createWindow() {
     show: false,
     ...desktopWindowChrome(),
     webPreferences: {
-      preload: join47(moduleDirectory, "preload.cjs"),
+      preload: join48(moduleDirectory, "preload.cjs"),
       contextIsolation: true,
       nodeIntegration: false,
       sandbox: false,
       webSecurity: true
     }
   });
-  const iconPath = join47(app.getAppPath(), "assets", "icon.png");
+  const iconPath = join48(app.getAppPath(), "assets", "icon.png");
   const icon = nativeImage.createFromPath(iconPath);
   if (!icon.isEmpty()) {
     mainWindow.setIcon(icon);