glimmervoid 0.36.0 → 0.37.0

package/dist/chunks/{adapters-BdnLyJjf.js → adapters-BmfVPxlH.js}

@@ -3,10 +3,10 @@ import { r as execFileSync } from "./child-process-safe-CbQnyh7D.js";
 import { n as resolveAgentCommand, t as buildAgentSpawnCommand } from "./spawn-command-Cc40FiZI.js";
 import { s as rawTextOr } from "./coerce-NSst8oRP.js";
 import { r as nextBackoffMs } from "./backoff-DjVpfHk7.js";
-import { l as supervisionLine } from "./session-routes-DB5aDKsx.js";
-import { c as buildAgentEnv, i as isSpinnerChar, n as classifyAgentTitle, r as isBrailleChar, t as grok } from "./grok-Ch4-35_r.js";
+import { l as supervisionLine } from "./session-routes-C4t8O8yg.js";
+import { c as buildAgentEnv, i as isSpinnerChar, n as classifyAgentTitle, r as isBrailleChar, t as grok } from "./grok-CZ6kP_vD.js";
 import { t as buildHookCommand } from "./hook-command-core-qTNK-xMF.js";
-import "./contracts-BLZAOP57.js";
+import "./contracts-C6ipN_zw.js";
 import { n as mergeCodexPreToolUse, t as HOOK_TOOLS } from "./hook-tools-BkxllUHE.js";
 import fs from "node:fs";
 import path from "node:path";
@@ -152,10 +152,10 @@ var APPENDED_SYSTEM_PROMPT_FLAGS = Object.freeze([APPEND_SYSTEM_PROMPT_FLAG, "--
 function isAppendedSystemPromptArgument(launchArgument) {
 	return APPENDED_SYSTEM_PROMPT_FLAGS.some((flag) => launchArgument === flag || launchArgument.startsWith(`${flag}=`));
 }
-function buildArgs$1({ dangerouslySkipPermissions = false, resumeSessionId = null, extraArgs = [], initialPrompt = null, hasOuterSandbox = false, canRunHelpCommand = true } = {}) {
+function buildArgs$1({ dangerouslySkipPermissions = false, resumeSessionId = null, extraArgs = [], initialPrompt = null, hasOuterGuardrails = false, canRunHelpCommand = true } = {}) {
 	const args = dangerouslySkipPermissions ? ["--dangerously-skip-permissions"] : [];
 	if (resumeSessionId) args.push("--resume", resumeSessionId);
-	if (canRunHelpCommand && !extraArgs.some(isAppendedSystemPromptArgument)) args.push(APPEND_SYSTEM_PROMPT_FLAG, supervisionLine({ isSandboxed: hasOuterSandbox }));
+	if (canRunHelpCommand && !extraArgs.some(isAppendedSystemPromptArgument)) args.push(APPEND_SYSTEM_PROMPT_FLAG, supervisionLine({ isGuarded: hasOuterGuardrails }));
 	for (let index = 0; index < extraArgs.length; index += 1) {
 		const argument = extraArgs[index];
 		if (resumeSessionId && argument === "--session-id") {
@@ -455,6 +455,9 @@ function mayContributeHooks(configText) {
 	if (typeof configText !== "string") return false;
 	return HOOKS_DECLARATION_RE.test(configText);
 }
+function userConfigFolders(env) {
+	return codexHomes(env, null);
+}
 function buildHookArgs({ relayPath = RELAY_PATH, events = HOOK_EVENTS, bypassHookTrust = false, hookTools = [], hookToolRelayPath = HOOK_TOOL_RELAY_PATH } = {}) {
 	const args = bypassHookTrust ? [TRUST_BYPASS_FLAG] : [];
 	const preToolUseGroups = [];
@@ -484,6 +487,7 @@ var hooks = {
 		events: HOOK_EVENTS,
 		buildHookArgs,
 		projectConfigCandidates: PROJECT_CONFIG_CANDIDATES,
+		userConfigFolders,
 		mayContributeHooks
 	}
 };
@@ -513,15 +517,15 @@ var SKIP_PERMISSIONS_ARGS = [
 	"-s",
 	"workspace-write"
 ];
-var OUTER_SANDBOX_ARGS = ["-s", "danger-full-access"];
-var OUTER_SANDBOX_SKIP_PERMISSIONS_ARGS = [
+var OUTER_GUARDRAILS_ARGS = ["-s", "danger-full-access"];
+var OUTER_GUARDRAILS_SKIP_PERMISSIONS_ARGS = [
 	"-a",
 	"never",
-	...OUTER_SANDBOX_ARGS
+	...OUTER_GUARDRAILS_ARGS
 ];
-function permissionArgs(dangerouslySkipPermissions, hasOuterSandbox) {
-	if (hasOuterSandbox && dangerouslySkipPermissions) return OUTER_SANDBOX_SKIP_PERMISSIONS_ARGS;
-	if (hasOuterSandbox) return OUTER_SANDBOX_ARGS;
+function permissionArgs(dangerouslySkipPermissions, hasOuterGuardrails) {
+	if (hasOuterGuardrails && dangerouslySkipPermissions) return OUTER_GUARDRAILS_SKIP_PERMISSIONS_ARGS;
+	if (hasOuterGuardrails) return OUTER_GUARDRAILS_ARGS;
 	if (dangerouslySkipPermissions) return SKIP_PERMISSIONS_ARGS;
 	return [];
 }
@@ -539,11 +543,11 @@ function setsOperatorInstructions(operatorConfigText) {
 function isDeveloperInstructionsOverride(launchArgument) {
 	return launchArgument.startsWith(`${DEVELOPER_INSTRUCTIONS_KEY}=`);
 }
-function buildArgs({ dangerouslySkipPermissions = false, resumeSessionId = null, extraArgs = [], initialPrompt = null, hasOuterSandbox = false, hasOperatorInstructions = false, canRunHelpCommand = true } = {}) {
+function buildArgs({ dangerouslySkipPermissions = false, resumeSessionId = null, extraArgs = [], initialPrompt = null, hasOuterGuardrails = false, hasOperatorInstructions = false, canRunHelpCommand = true } = {}) {
 	const args = [...UPDATE_CHECK_ARGS];
-	if (canRunHelpCommand && !hasOperatorInstructions && !extraArgs.some(isDeveloperInstructionsOverride)) args.push("-c", `${DEVELOPER_INSTRUCTIONS_KEY}='''${supervisionLine({ isSandboxed: hasOuterSandbox })}'''`);
+	if (canRunHelpCommand && !hasOperatorInstructions && !extraArgs.some(isDeveloperInstructionsOverride)) args.push("-c", `${DEVELOPER_INSTRUCTIONS_KEY}='''${supervisionLine({ isGuarded: hasOuterGuardrails })}'''`);
 	if (resumeSessionId) args.push("resume", resumeSessionId);
-	args.push(...permissionArgs(dangerouslySkipPermissions, hasOuterSandbox));
+	args.push(...permissionArgs(dangerouslySkipPermissions, hasOuterGuardrails));
 	if (extraArgs.length > 0) args.push(...extraArgs);
 	if (initialPrompt != null) args.push(initialPrompt);
 	return args;
@@ -767,5 +771,8 @@ function cachedAgentResolvability(agentId) {
 		resolvable: !!cached.path
 	};
 }
+function resetCommandCache() {
+	resolvedCommands.clear();
+}
 //#endregion
-export { claudeCode as A, laneSpendStatus as C, shouldEvaluateDespiteIoFailures as D, resolveProjectsDirs as E, shouldPersistWarehouse as O, isUsageFile as S, projectDirCandidates as T, decideFileRead as _, describeAgentResolvability as a, grokHomes as b, isKnownAgentId as c, setCustomAgents as d, codexFallbackRoots as f, continuationDelayMs as g, codexSessionIdFromPath as h, customAgentFingerprint as i, splitLines as k, listAgentIds as l, codexRootCandidates as m, cachedAgentResolvability as n, getAdapter as o, codexHomes as p, commandFor as r, hookProfileOf as s, DEFAULT_AGENT_ID as t, resolveAdapter as u, dedupeCodexFiles as v, passOutcome as w, grokRootCandidates as x, expandTilde as y };
+export { splitLines as A, isUsageFile as C, resolveProjectsDirs as D, projectDirCandidates as E, shouldEvaluateDespiteIoFailures as O, grokRootCandidates as S, passOutcome as T, continuationDelayMs as _, describeAgentResolvability as a, expandTilde as b, isKnownAgentId as c, resolveAdapter as d, setCustomAgents as f, codexSessionIdFromPath as g, codexRootCandidates as h, customAgentFingerprint as i, claudeCode as j, shouldPersistWarehouse as k, listAgentIds as l, codexHomes as m, cachedAgentResolvability as n, getAdapter as o, codexFallbackRoots as p, commandFor as r, hookProfileOf as s, DEFAULT_AGENT_ID as t, resetCommandCache as u, decideFileRead as v, laneSpendStatus as w, grokHomes as x, dedupeCodexFiles as y };

package/dist/chunks/adapters-CqFFmM2R.js

@@ -0,0 +1 @@
+export { a as describeAgentResolvability, l as listAgentIds, f as setCustomAgents } from "./adapters-BmfVPxlH.js";

package/dist/chunks/{agent-api-cli-DIqRLvu3.js → agent-api-cli-BTHEyJKS.js}

@@ -1 +1 @@
-export { n as runAgentApiCli, r as sessionLimitsHelpLines } from "./agent-api-cli-d-Bgsshx.js";
+export { n as runAgentApiCli, r as sessionLimitsHelpLines } from "./agent-api-cli-CBgOKXoO.js";

package/dist/chunks/{agent-api-cli-d-Bgsshx.js → agent-api-cli-CBgOKXoO.js}

@@ -1,10 +1,10 @@
 import { t as errorCode } from "./text-DoirglWV.js";
-import { a as AgentDispatchRequest, l as AgentTicketRequest, n as AGENT_URL_ENV, s as AgentLimitsReply } from "./session-B8RhqQJe.js";
+import { a as AgentDispatchRequest, c as AgentFactoryStatusRequest, d as AgentTicketRequest, l as AgentLimitsReply, n as AGENT_URL_ENV, s as AgentFactoryRetryRequest } from "./session-BZbariv5.js";
 import { i as resolveHookTarget } from "./hook-relay-core-DA_bz2KA.js";
-import { n as decideSandboxProxy } from "./sandbox-proxy-core-hnQgKR0T.js";
+import { n as decideGuardrailsProxy } from "./guardrails-proxy-core-BI3rdY-m.js";
 import { t as parseJsonOrNull } from "./json-core-dfa_7Fak.js";
-import { a as formatSessionLimits } from "./session-routes-DB5aDKsx.js";
-import { d as isOrchestratorAgentVerb, u as isAgentApiVerb } from "./agent-api-core-BUC9WND7.js";
+import { a as formatSessionLimits } from "./session-routes-C4t8O8yg.js";
+import { m as isOrchestratorAgentVerb, p as isAgentApiVerb } from "./agent-api-core-DzKhakCv.js";
 import path from "node:path";
 import http from "node:http";
 //#region server/agent-api-cli.ts
@@ -36,7 +36,18 @@ var BODY_BUILDERS = {
 		return parsed.success ? parsed.data : null;
 	},
 	reopen: (rest) => ticketBody(rest),
-	cancel: (rest) => ticketBody(rest)
+	cancel: (rest) => ticketBody(rest),
+	"factory-status": (rest) => {
+		if (rest.length === 0) return {};
+		if (rest.length !== 2 || rest[0] !== "--project") return null;
+		const parsed = AgentFactoryStatusRequest.safeParse({ projectId: rest[1] });
+		return parsed.success ? parsed.data : null;
+	},
+	"factory-retry": (rest) => {
+		if (rest.length !== 1) return null;
+		const parsed = AgentFactoryRetryRequest.safeParse({ intentId: rest[0] });
+		return parsed.success ? parsed.data : null;
+	}
 };
 function bodySaysOk(text) {
 	try {
@@ -52,6 +63,13 @@ function limitsLines(replyText) {
 	return formatSessionLimits(limits.data);
 }
 function printableReply(verb, replyText) {
+	if (verb === "factory-status" || verb === "factory-retry") {
+		const reply = parseJsonOrNull(replyText);
+		if (typeof reply !== "object" || reply === null) return replyText;
+		if ("text" in reply && typeof reply.text === "string") return reply.text;
+		if ("error" in reply && typeof reply.error === "string") return reply.error;
+		return replyText;
+	}
 	if (verb !== "limits") return replyText;
 	return limitsLines(replyText)?.join("\n") ?? replyText;
 }
@@ -79,12 +97,12 @@ async function postDirectly({ endpoint, headers, bodyText, deadline }) {
 		text: await response.text()
 	};
 }
-function postThroughSandboxProxy(sandboxProxy, { endpoint, headers, bodyText, deadline }) {
-	const proxyHeaders = sandboxProxy.authorization ? { "proxy-authorization": sandboxProxy.authorization } : {};
+function postThroughGuardrailsProxy(guardrailsProxy, { endpoint, headers, bodyText, deadline }) {
+	const proxyHeaders = guardrailsProxy.authorization ? { "proxy-authorization": guardrailsProxy.authorization } : {};
 	return new Promise((resolve, reject) => {
 		const request = http.request({
-			host: sandboxProxy.hostname,
-			port: sandboxProxy.port,
+			host: guardrailsProxy.hostname,
+			port: guardrailsProxy.port,
 			method: "POST",
 			path: endpoint.href,
 			headers: {
@@ -129,9 +147,9 @@ async function postToAgentIngress({ endpoint, token, body, deadline = null }) {
 		return await postDirectly(post);
 	} catch (error) {
 		if (!wasConnectionRefused(error)) throw error;
-		const sandboxProxy = decideSandboxProxy(process.env);
-		if (!sandboxProxy) throw error;
-		return postThroughSandboxProxy(sandboxProxy, post);
+		const guardrailsProxy = decideGuardrailsProxy(process.env);
+		if (!guardrailsProxy) throw error;
+		return postThroughGuardrailsProxy(guardrailsProxy, post);
 	}
 }
 async function sessionLimitsHelpLines({ timeoutMs = HELP_LIMITS_TIMEOUT_MS } = {}) {
@@ -151,6 +169,13 @@ async function sessionLimitsHelpLines({ timeoutMs = HELP_LIMITS_TIMEOUT_MS } = {
 	}
 }
 async function runAgentApiCli(args) {
+	if (args[0] === "factory") {
+		if (args[1] !== "status" && args[1] !== "retry") {
+			console.error("glimmervoid factory: expected status [--project <projectId>] or retry <intentId>");
+			return 1;
+		}
+		return runAgentApiCli([`factory-${args[1]}`, ...args.slice(2)]);
+	}
 	const verb = args[0];
 	if (!verb || !isAgentApiVerb(verb)) {
 		console.error(`glimmervoid: ${verb || "that"} is not an agent command`);
@@ -158,6 +183,10 @@ async function runAgentApiCli(args) {
 	}
 	const body = BODY_BUILDERS[verb](args.slice(1));
 	if (!body) {
+		if (verb === "factory-status" || verb === "factory-retry") {
+			console.error(`glimmervoid factory: expected ${verb === "factory-status" ? "status [--project <projectId>]" : "retry <intentId>"}`);
+			return 1;
+		}
 		if (isOrchestratorAgentVerb(verb)) {
 			console.error(`glimmervoid ${verb}: expected a work id matching wrk-[0-9a-f]{16}`);
 			return 1;

package/dist/chunks/{agent-api-core-BUC9WND7.js → agent-api-core-DzKhakCv.js}

@@ -1,5 +1,5 @@
-import { a as AgentDispatchRequest, c as AgentSpawnRequest, f as ORCHESTRATOR_AGENT_VERBS, i as AgentAttentionRequest, o as AgentEditRequest, t as AGENT_API_VERBS } from "./session-B8RhqQJe.js";
-import { c as spawnRoute, i as editRoute, n as attentionRoute, s as pushRoute, t as NO_OWN_WORKTREE_REASON } from "./session-routes-DB5aDKsx.js";
+import { a as AgentDispatchRequest, c as AgentFactoryStatusRequest, i as AgentAttentionRequest, o as AgentEditRequest, s as AgentFactoryRetryRequest, t as AGENT_API_VERBS, u as AgentSpawnRequest, y as ORCHESTRATOR_AGENT_VERBS } from "./session-BZbariv5.js";
+import { c as spawnRoute, i as editRoute, n as attentionRoute, s as pushRoute, t as NO_OWN_WORKTREE_REASON } from "./session-routes-C4t8O8yg.js";
 import crypto from "node:crypto";
 var MAX_SPAWNS_IN_FLIGHT = 1;
 var SPAWNABLE_DEPTH = 0;
@@ -77,6 +77,16 @@ function decideAttentionAllowance(caller) {
 function decideEditAllowance(caller) {
 	return refuseByRole(editRoute(caller));
 }
+function factoryControlRoute({ factoryRole, isEphemeral, isSpawnedChild }) {
+	if (!(factoryRole !== null || isEphemeral && !isSpawnedChild)) return { answers: true };
+	return {
+		answers: false,
+		reason: "only an operator session or a session it spawned may read factory status or retry parked work, so factory and lane sessions stay on their own task"
+	};
+}
+function decideFactoryControlAllowance(caller) {
+	return refuseByRole(factoryControlRoute(caller));
+}
 function describePushRouteRefusal(caller) {
 	const route = pushRoute(caller);
 	if (route.answers) return null;
@@ -137,6 +147,24 @@ function parseAgentVerb(verb, payload) {
 		status: 404,
 		error: REFUSAL_REASON
 	};
+	if (verb === "factory-status") {
+		const parsed = AgentFactoryStatusRequest.safeParse(payload);
+		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+		return {
+			ok: true,
+			verb,
+			request: parsed.data
+		};
+	}
+	if (verb === "factory-retry") {
+		const parsed = AgentFactoryRetryRequest.safeParse(payload);
+		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+		return {
+			ok: true,
+			verb,
+			request: parsed.data
+		};
+	}
 	if (verb === "dispatch") {
 		const parsed = AgentDispatchRequest.safeParse(payload);
 		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
@@ -223,5 +251,68 @@ function deriveChildSessionName(parentName, existingNames) {
 	}
 	return candidate;
 }
+function factoryTicketNextAction(ticket, intentId) {
+	if (ticket.state === "completed" || ticket.state === "cancelled") return "none";
+	if (ticket.parked) return `glimmervoid factory retry ${intentId}`;
+	if (ticket.state === "blocked") return "orchestrator reopens";
+	return "in progress";
+}
+function describeFactoryProjectUnavailability(project) {
+	if (project.error !== null) return project.error;
+	if (project.heading.action === "refuse") return `orientation refused: ${project.heading.reasons.join("; ") || "no reason given"}`;
+	return null;
+}
+function describeUnavailableFactoryState(projects) {
+	for (const project of projects) {
+		const unavailability = describeFactoryProjectUnavailability(project);
+		if (unavailability !== null) return `Factory state for ${project.projectId} is unavailable: ${unavailability}`;
+	}
+	return null;
+}
+function describeSpentToday(spentTodayUsd) {
+	if (spentTodayUsd === void 0) return "unknown";
+	return `$${spentTodayUsd.toFixed(2)}`;
+}
+function describeDailyBudget(dailyBudgetUsd) {
+	if (dailyBudgetUsd === null) return "unlimited";
+	if (dailyBudgetUsd === void 0) return "unknown";
+	return `$${dailyBudgetUsd.toFixed(2)}`;
+}
+function formatFactoryStatus(projects, buildDigest) {
+	const lines = [];
+	for (const project of projects) {
+		lines.push(`Project ${project.projectId}: ${project.projectName}`);
+		lines.push(`Project spend today: ${describeSpentToday(project.spentTodayUsd)} of ${describeDailyBudget(project.dailyBudgetUsd)} budget`);
+		const unavailability = describeFactoryProjectUnavailability(project);
+		if (unavailability !== null) lines.push(`Factory exception: ${unavailability}`);
+		const ticketsByIntentId = /* @__PURE__ */ new Map();
+		const partialIntentIds = new Set(project.partialIntentIds ?? []);
+		for (const order of project.orders) {
+			if (order.parent === null) continue;
+			const tickets = ticketsByIntentId.get(order.parent) ?? [];
+			tickets.push(order);
+			ticketsByIntentId.set(order.parent, tickets);
+		}
+		let intentCount = 0;
+		for (const intent of project.orders) {
+			if (intent.parent !== null || intent.state === "cancelled") continue;
+			intentCount += 1;
+			const tickets = ticketsByIntentId.get(intent.id) ?? [];
+			const digest = buildDigest({
+				...project,
+				orders: [intent, ...tickets],
+				partialIntentIds: partialIntentIds.has(intent.id) ? [intent.id] : []
+			}, intent.id);
+			const outcome = intent.state === "completed" ? "completed" : digest.isPartial ? "partial" : "in progress";
+			lines.push(`Intent ${intent.id}: ${intent.objective}`, `Outcome: ${outcome}; merged: ${digest.merged.length}; parked: ${digest.parked.length}`);
+			for (const ticket of tickets) lines.push(`  ${ticket.id} | state: ${ticket.parked ? "parked" : ticket.state} | blocks: ${ticket.blockCount ?? 0} | last reason: ${ticket.blockReason ?? "none"} | next action: ${factoryTicketNextAction(ticket, intent.id)}`);
+			lines.push("Confirmed flakes:");
+			for (const flake of digest.confirmedFlakes) lines.push(`  ${flake}`);
+			if (digest.confirmedFlakes.length === 0) lines.push("  none");
+		}
+		if (intentCount === 0 && unavailability === null) lines.push("No intents.");
+	}
+	return lines.join("\n") || "No factory projects.";
+}
 //#endregion
-export { decideSpawnAllowance as a, describePushLanding as c, isOrchestratorAgentVerb as d, parseAgentVerb as f, decideEditAllowance as i, describePushRouteRefusal as l, decideAgentRequest as n, decideTicketAction as o, decideAttentionAllowance as r, deriveChildSessionName as s, REFUSAL_REASON as t, isAgentApiVerb as u };
+export { decideFactoryControlAllowance as a, deriveChildSessionName as c, describeUnavailableFactoryState as d, formatFactoryStatus as f, parseAgentVerb as h, decideEditAllowance as i, describePushLanding as l, isOrchestratorAgentVerb as m, decideAgentRequest as n, decideSpawnAllowance as o, isAgentApiVerb as p, decideAttentionAllowance as r, decideTicketAction as s, REFUSAL_REASON as t, describePushRouteRefusal as u };

package/dist/chunks/{agent-setup-cli-CH7EHsAX.js → agent-setup-cli-C8DGxlA-.js}

@@ -1,5 +1,5 @@
 import { a as isMissingFileError, r as errorMessage } from "./text-DoirglWV.js";
-import { a as classifyGrokHooksFile, o as renderGrokHooksFile, t as grok } from "./grok-Ch4-35_r.js";
+import { a as classifyGrokHooksFile, o as renderGrokHooksFile, t as grok } from "./grok-CZ6kP_vD.js";
 import { p as writeTextAtomicSync } from "./json-file-BaxGcB2R.js";
 import fs from "node:fs";
 import path from "node:path";

package/dist/chunks/{config-CuZ16F9W.js → config-BYc2z1Oc.js}

@@ -1,4 +1,4 @@
-import { Ct as GH_SEGMENT, E as TaskTitle, Et as repoParts, G as CommitSha, L as MyPrSearchNode, U as SessionPrLinks, W as repositoryName } from "./session-B8RhqQJe.js";
+import { $ as repositoryName, Ft as repoParts, K as MyPrSearchNode, Mt as GH_SEGMENT, N as TaskTitle, Q as SessionPrLinks, et as CommitSha } from "./session-BZbariv5.js";
 import { n as isRecord } from "./coerce-NSst8oRP.js";
 import path from "node:path";
 import { z } from "zod";
@@ -99,7 +99,8 @@ var CoherenceWorkInspect = z.looseObject({
 		last: z.looseObject({
 			event: z.string(),
 			at: z.string(),
-			session: z.string()
+			session: z.string(),
+			reason: z.string().optional()
 		}).nullable(),
 		opened: z.looseObject({
 			at: z.iso.datetime(),
@@ -696,17 +697,17 @@ var IngestSettings = z.object({ enabled: optionalBoolean("ingest.enabled") }, {
 var TraceSettings = z.object({ enabled: optionalBoolean("trace.enabled") }, { error: "trace must be an object" }).optional();
 var PlanReviewSettings = z.object({ enabled: optionalBoolean("planReview.enabled") }, { error: "planReview must be an object" }).optional();
 var optionalPathList = (field) => z.array(z.string({ error: `${field} must be an array of paths` }).trim().min(1, { error: `${field} must be an array of paths` }), { error: `${field} must be an array of paths` }).optional();
-var sandboxShape = {
+var guardrailsShape = {
 	unguardedRepos: optionalPathList("guardrails.unguardedRepos"),
 	blockedPaths: optionalPathList("guardrails.blockedPaths"),
 	unreadablePaths: optionalPathList("guardrails.unreadablePaths")
 };
 var isHomeRelativePath = (entry) => entry === "~" || entry.startsWith("~/") || entry.startsWith("~\\");
-var createSandboxSettings = (isAbsolutePath) => z.object({
-	...sandboxShape,
+var createGuardrailsSettings = (isAbsolutePath) => z.object({
+	...guardrailsShape,
 	blockedPaths: z.array(z.string({ error: "guardrails.blockedPaths must be an array of paths" }).trim().min(1, { error: "guardrails.blockedPaths must be an array of paths" }).refine((entry) => isHomeRelativePath(entry) || isAbsolutePath(entry), { message: "guardrails.blockedPaths entries must be absolute paths or start with ~/" }), { error: "guardrails.blockedPaths must be an array of paths" }).optional()
 }, { error: "guardrails must be an object" }).strict().optional();
-var SandboxFileSettings = z.object(sandboxShape, { error: "guardrails must be an object" }).passthrough().optional();
+var GuardrailsFileSettings = z.object(guardrailsShape, { error: "guardrails must be an object" }).passthrough().optional();
 var telemetryShape = { enabled: optionalBoolean("telemetry.enabled") };
 var TelemetrySettings = z.object(telemetryShape, { error: "telemetry must be an object" }).strict().optional();
 var TelemetryFileSettings = z.object(telemetryShape, { error: "telemetry must be an object" }).passthrough().optional();
@@ -749,7 +750,7 @@ var createBrowserConfigShape = (isAbsolutePath) => ({
 	usage: createUsageSettings(isAbsolutePath),
 	telegram: TelegramSettings,
 	ingest: IngestSettings,
-	guardrails: createSandboxSettings(isAbsolutePath),
+	guardrails: createGuardrailsSettings(isAbsolutePath),
 	telemetry: TelemetrySettings,
 	workflows: WorkflowsSettings.nullable().optional()
 });
@@ -866,7 +867,11 @@ var ProjectConfig = z.object({
 	codexBypassHookTrust: z.boolean().optional(),
 	conversationView: z.boolean({ error: "projects[].conversationView must be a boolean" }).optional(),
 	dangerouslySkipPermissions: z.boolean({ error: "projects[].dangerouslySkipPermissions must be a boolean" }).optional(),
-	unguarded: z.boolean({ error: "projects[].unguarded must be a boolean" }).optional()
+	unguarded: z.boolean({ error: "projects[].unguarded must be a boolean" }).optional(),
+	factoryProfile: FactorySettings.unwrap().unwrap().extend({
+		focusedTestCommand: z.string().trim().min(1).optional(),
+		widenableScopes: z.array(z.string().trim().min(1)).optional()
+	}).optional()
 }).passthrough();
 var FILE_CONFIG_SHAPE = {
 	...BROWSER_CONFIG_SHAPE,
@@ -884,7 +889,7 @@ var FILE_CONFIG_SHAPE = {
 	telegram: optionalLooseObject("telegram"),
 	ingest: optionalLooseObject("ingest"),
 	workflows: optionalLooseObject("workflows"),
-	guardrails: SandboxFileSettings,
+	guardrails: GuardrailsFileSettings,
 	telemetry: TelemetryFileSettings,
 	trace: TraceSettings,
 	planReview: PlanReviewSettings,
@@ -968,4 +973,4 @@ function configIssueMessage(error) {
 	return error.issues[0]?.message || "settings are invalid";
 }
 //#endregion
-export { KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE as A, USAGE_BUDGET_RANGE as B, normalizeLegacyConfigNumbers as C, FLYING_ANIMALS_DURATION_RANGE as D, FLYING_ANIMALS_DEFAULTS as E, POSTHOG_TRAFFIC_BASELINE_RANGE as F, WORKFLOWS_MAX_CONCURRENT_SESSIONS_RANGE as G, USAGE_RETAIN_DAYS_RANGE as H, POSTHOG_TRAFFIC_MIN_USERS_RANGE as I, CoherenceRisk as J, CoherenceOrient as K, POSTHOG_TRAFFIC_MULTIPLIER_RANGE as L, PORT_RANGE as M, POSITIVE_NUMBER_RANGE as N, FLYING_ANIMALS_GAP_RANGE as O, POSTHOG_FIX_TIMEOUT_RANGE as P, CoherenceWorkState as Q, REPLAY_BUFFER_KB_RANGE as R, USAGE_VENDOR_KEYS as S, FACTORY_MAX_LIVE_WORKERS_RANGE as T, USAGE_SCAN_INTERVAL_RANGE as U, USAGE_INTEGER_RANGES as V, WORKFLOWS_MAX_ACTIONS_PER_POLL_RANGE as W, CoherenceWorkCreated as X, CoherenceTicketCreated as Y, CoherenceWorkInspect as Z, WorkflowLabelName as _, ConfigUpdate as a, WorkflowsState as b, TASK_TITLE_SOURCE_PRIORITY as c, CHANGE_MAP_NARRATOR_ENGINES as d, DEFAULT_FACTORY_CHECKS as f, WorkflowCommentBody as g, UPDATE_CHANNELS as h, Config as i, NON_NEGATIVE_NUMBER_RANGE as j, FLYING_ANIMALS_SCALE_RANGE as k, configIssueMessage as l, POST_TURN_CHECK_MODES as m, BUILTIN_AGENT_IDS as n, PersistedTaskTitle as o, DEFAULT_FACTORY_PROTECTED_PATHS as p, CoherenceReadiness as q, BrowserConfig as r, RUNTIME_CONFIG_SCALAR_KEYS as s, AGENT_ID_SHAPE_MESSAGE as t, BranchGcFileSettings as u, WorkflowSearchNode as v, CHANGE_MAP_NARRATOR_TIMEOUT_RANGE as w, USAGE_COST_MODES as x, WorkflowsSettings as y, TASK_TITLE_TIMEOUT_RANGE as z };
+export { CoherenceWorkInspect as $, FLYING_ANIMALS_GAP_RANGE as A, REPLAY_BUFFER_KB_RANGE as B, USAGE_COST_MODES as C, FACTORY_MAX_LIVE_WORKERS_RANGE as D, CHANGE_MAP_NARRATOR_TIMEOUT_RANGE as E, POSITIVE_NUMBER_RANGE as F, USAGE_SCAN_INTERVAL_RANGE as G, USAGE_BUDGET_RANGE as H, POSTHOG_FIX_TIMEOUT_RANGE as I, CoherenceOrient as J, WORKFLOWS_MAX_ACTIONS_PER_POLL_RANGE as K, POSTHOG_TRAFFIC_BASELINE_RANGE as L, KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE as M, NON_NEGATIVE_NUMBER_RANGE as N, FLYING_ANIMALS_DEFAULTS as O, PORT_RANGE as P, CoherenceWorkCreated as Q, POSTHOG_TRAFFIC_MIN_USERS_RANGE as R, WorkflowsState as S, normalizeLegacyConfigNumbers as T, USAGE_INTEGER_RANGES as U, TASK_TITLE_TIMEOUT_RANGE as V, USAGE_RETAIN_DAYS_RANGE as W, CoherenceRisk as X, CoherenceReadiness as Y, CoherenceTicketCreated as Z, UPDATE_CHANNELS as _, ConfigUpdate as a, WorkflowSearchNode as b, RUNTIME_CONFIG_SCALAR_KEYS as c, BranchGcFileSettings as d, CoherenceWorkState as et, CHANGE_MAP_NARRATOR_ENGINES as f, POST_TURN_CHECK_MODES as g, FactorySettings as h, Config as i, FLYING_ANIMALS_SCALE_RANGE as j, FLYING_ANIMALS_DURATION_RANGE as k, TASK_TITLE_SOURCE_PRIORITY as l, DEFAULT_FACTORY_PROTECTED_PATHS as m, BUILTIN_AGENT_IDS as n, PersistedTaskTitle as o, DEFAULT_FACTORY_CHECKS as p, WORKFLOWS_MAX_CONCURRENT_SESSIONS_RANGE as q, BrowserConfig as r, ProjectConfig as s, AGENT_ID_SHAPE_MESSAGE as t, configIssueMessage as u, WorkflowCommentBody as v, USAGE_VENDOR_KEYS as w, WorkflowsSettings as x, WorkflowLabelName as y, POSTHOG_TRAFFIC_MULTIPLIER_RANGE as z };

package/dist/chunks/{config-store-LqQ7MuyV.js → config-store-B7MpiYxG.js}

@@ -3,8 +3,8 @@ import { n as equalsIgnoringCaseOnWindows } from "./paths-Bu4eH1Yd.js";
 import { n as glimmervoidHomeDir$1, t as decideConfigPath } from "./config-path-core-DFt-TemS.js";
 import { n as isRecord } from "./coerce-NSst8oRP.js";
 import { d as writeJsonAtomicSync, f as writeTextAtomic, p as writeTextAtomicSync } from "./json-file-BaxGcB2R.js";
-import { A as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, B as USAGE_BUDGET_RANGE, C as normalizeLegacyConfigNumbers, D as FLYING_ANIMALS_DURATION_RANGE, E as FLYING_ANIMALS_DEFAULTS, F as POSTHOG_TRAFFIC_BASELINE_RANGE, G as WORKFLOWS_MAX_CONCURRENT_SESSIONS_RANGE, H as USAGE_RETAIN_DAYS_RANGE, I as POSTHOG_TRAFFIC_MIN_USERS_RANGE, L as POSTHOG_TRAFFIC_MULTIPLIER_RANGE, M as PORT_RANGE, N as POSITIVE_NUMBER_RANGE, O as FLYING_ANIMALS_GAP_RANGE, P as POSTHOG_FIX_TIMEOUT_RANGE, R as REPLAY_BUFFER_KB_RANGE, T as FACTORY_MAX_LIVE_WORKERS_RANGE, U as USAGE_SCAN_INTERVAL_RANGE, V as USAGE_INTEGER_RANGES, W as WORKFLOWS_MAX_ACTIONS_PER_POLL_RANGE, d as CHANGE_MAP_NARRATOR_ENGINES, f as DEFAULT_FACTORY_CHECKS, h as UPDATE_CHANNELS, i as Config, j as NON_NEGATIVE_NUMBER_RANGE, k as FLYING_ANIMALS_SCALE_RANGE, l as configIssueMessage, m as POST_TURN_CHECK_MODES, n as BUILTIN_AGENT_IDS, p as DEFAULT_FACTORY_PROTECTED_PATHS, s as RUNTIME_CONFIG_SCALAR_KEYS, t as AGENT_ID_SHAPE_MESSAGE, u as BranchGcFileSettings, w as CHANGE_MAP_NARRATOR_TIMEOUT_RANGE, x as USAGE_COST_MODES, z as TASK_TITLE_TIMEOUT_RANGE } from "./config-CuZ16F9W.js";
-import { V as FeatureFlagsResponse, W as TELEMETRY_KILL_SWITCH_FLAG } from "./contracts-BLZAOP57.js";
+import { A as FLYING_ANIMALS_GAP_RANGE, B as REPLAY_BUFFER_KB_RANGE, C as USAGE_COST_MODES, D as FACTORY_MAX_LIVE_WORKERS_RANGE, E as CHANGE_MAP_NARRATOR_TIMEOUT_RANGE, F as POSITIVE_NUMBER_RANGE, G as USAGE_SCAN_INTERVAL_RANGE, H as USAGE_BUDGET_RANGE, I as POSTHOG_FIX_TIMEOUT_RANGE, K as WORKFLOWS_MAX_ACTIONS_PER_POLL_RANGE, L as POSTHOG_TRAFFIC_BASELINE_RANGE, M as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, N as NON_NEGATIVE_NUMBER_RANGE, O as FLYING_ANIMALS_DEFAULTS, P as PORT_RANGE, R as POSTHOG_TRAFFIC_MIN_USERS_RANGE, T as normalizeLegacyConfigNumbers, U as USAGE_INTEGER_RANGES, V as TASK_TITLE_TIMEOUT_RANGE, W as USAGE_RETAIN_DAYS_RANGE, _ as UPDATE_CHANNELS, c as RUNTIME_CONFIG_SCALAR_KEYS, d as BranchGcFileSettings, f as CHANGE_MAP_NARRATOR_ENGINES, g as POST_TURN_CHECK_MODES, i as Config, j as FLYING_ANIMALS_SCALE_RANGE, k as FLYING_ANIMALS_DURATION_RANGE, m as DEFAULT_FACTORY_PROTECTED_PATHS, n as BUILTIN_AGENT_IDS, p as DEFAULT_FACTORY_CHECKS, q as WORKFLOWS_MAX_CONCURRENT_SESSIONS_RANGE, t as AGENT_ID_SHAPE_MESSAGE, u as configIssueMessage, z as POSTHOG_TRAFFIC_MULTIPLIER_RANGE } from "./config-BYc2z1Oc.js";
+import { V as FeatureFlagsResponse, W as TELEMETRY_KILL_SWITCH_FLAG } from "./contracts-C6ipN_zw.js";
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
@@ -264,7 +264,7 @@ var POSTHOG_INGEST_HOST = "https://us.i.posthog.com";
 var TELEMETRY_BATCH_URL = `${POSTHOG_INGEST_HOST}/batch/`;
 var TELEMETRY_FLAGS_URL = `${POSTHOG_INGEST_HOST}/flags?v=2`;
 var MAX_STACK_LENGTH = 16384;
-var FIRST_RUN_NOTICE = ["Glimmervoid sends anonymous usage and error data to help improve it: app starts, daily activity, session starts and ends with the agent kind, exit kind and duration, errors as their type, error code and scrubbed stack frames, per session token counts, models and estimated cost, and factory outcomes as the kind of decision, how it came out, its duration and attempt number. No error messages, paths, repository names, prompts, objectives, model output or terminal output.", "Turn it off in Settings > Privacy, or set GLIMMERVOID_TELEMETRY=0 or DO_NOT_TRACK=1."].join("\n");
+var FIRST_RUN_NOTICE = ["Anonymous usage data is on. Never paths, prompts or output. Details: https://github.com/johncwaters/glimmervoid/blob/main/docs/configuration.md#telemetry", "Turn it off in Settings > Privacy, or GLIMMERVOID_TELEMETRY=0."].join("\n");
 var TRUTHY_FLAGS = /* @__PURE__ */ new Set([
 	"1",
 	"true",
@@ -1003,7 +1003,7 @@ var SECTIONS = Object.freeze([
 				id: "auto-resume",
 				path: "autoResume",
 				title: "Auto-resume sessions on startup",
-				description: "Resume conversations that were live when Glimmervoid last shut down or crashed.",
+				description: "Resume conversations that were live when Glimmervoid last shut down or crashed, and tell sessions that were mid-turn to continue.",
 				control: "toggle",
 				keywords: ["startup", "conversation"],
 				defaultValue: true,
@@ -1013,7 +1013,7 @@ var SECTIONS = Object.freeze([
 				id: "conversation-view",
 				path: "conversationView",
 				title: "Conversation view (experimental)",
-				description: "Let each Claude Code and Codex session turn on a Conversation face from its card menu, which renders the transcript as messages, approvals and a composer. Sessions stay on the terminal until you turn it on for them. A Codex session connects on its next start, through a local app-server so approvals can be answered from the dashboard; sandboxed Codex sessions and those that bypass Codex hook trust keep the terminal only.",
+				description: "Let each Claude Code and Codex session turn on a Conversation face from its card menu, which renders the transcript as messages, approvals and a composer. Sessions stay on the terminal until you turn it on for them. A Claude Code session started while this is on can answer its permission prompts and questions there. A Codex session connects on its next start, through a local app-server so approvals can be answered from the dashboard; guarded Codex sessions and those that bypass Codex hook trust keep the terminal only.",
 				control: "toggle",
 				keywords: [
 					"experimental",
@@ -1628,7 +1628,7 @@ var SECTIONS = Object.freeze([
 				id: "team-review-keep-mergeable-enabled",
 				path: "teamReview.keepMergeableEnabled",
 				title: "Keep mergeable",
-				description: "Offer Keep mergeable on your pull requests: a sandboxed agent repairs conflicts and failing checks and pushes the repair. Off hides the control and starts no repair; the pull requests you chose stay chosen for when you turn it back on.",
+				description: "Offer Keep mergeable on your pull requests: a guarded agent repairs conflicts and failing checks and pushes the repair. Off hides the control and starts no repair; the pull requests you chose stay chosen for when you turn it back on.",
 				control: "toggle",
 				keywords: [
 					"repair",
@@ -1704,7 +1704,7 @@ var SECTIONS = Object.freeze([
 				id: "workflows-rules",
 				path: "status:workflow-rules",
 				title: "Workflow rules",
-				description: "Each rule watches repositories for one pull request event (opened, checks-failed, review-requested, approved, commented or merged), narrows it by author, labels, base branch, your own pull requests or a review request to your team, and then notifies you, labels or comments on the pull request, or starts a sandboxed agent session that pushes nothing. Rules start disabled. Turn each rule on or off here; everything else about a rule is set in config.json under workflows.rules.",
+				description: "Each rule watches repositories for one pull request event (opened, checks-failed, review-requested, approved, commented or merged), narrows it by author, labels, base branch, your own pull requests or a review request to your team, and then notifies you, labels or comments on the pull request, or starts a guarded agent session that pushes nothing. Rules start disabled. Turn each rule on or off here; everything else about a rule is set in config.json under workflows.rules.",
 				control: "readonly",
 				keywords: [
 					"pull requests",

package/dist/chunks/config-store-CsUoy88Q.js

@@ -0,0 +1 @@
+export { s as loadConfigFile } from "./config-store-B7MpiYxG.js";

package/dist/chunks/{contracts-BLZAOP57.js → contracts-C6ipN_zw.js}

@@ -1,5 +1,5 @@
-import { A as MyPrKeepMergeableResult, D as LinkedPr, Dt as GithubPollingRefreshRequest, E as TaskTitle, F as MyPrMergeWhenReadyRequest, G as CommitSha, H as MyPrsStatus, I as MyPrMergeWhenReadyResult, M as MyPrMergeRequest, N as MyPrMergeResult, Ot as GithubPollingRefreshResult, S as SessionState, Tt as REPO_SLUG_RE, U as SessionPrLinks, _ as SESSION_DOC_PATH_MAX_CHARS, b as SessionDoc, ct as TeamReviewActionResult, d as ConversationApprovalDecision, ft as TeamReviewStatus, k as MyPrKeepMergeableRequest, kt as githubPollingShape, p as PendingWakeup, st as TeamReviewActionRequest, u as ConversationApproval, vt as hasRequiredActionHead, x as SessionSnapshot } from "./session-B8RhqQJe.js";
-import { J as CoherenceRisk, K as CoherenceOrient, Q as CoherenceWorkState, n as BUILTIN_AGENT_IDS, q as CoherenceReadiness } from "./config-CuZ16F9W.js";
+import { D as SessionDoc, Dt as hasRequiredActionHead, G as MyPrMergeWhenReadyResult, H as MyPrMergeResult, It as GithubPollingRefreshRequest, Lt as GithubPollingRefreshResult, N as TaskTitle, O as SessionSnapshot, P as LinkedPr, Pt as REPO_SLUG_RE, Q as SessionPrLinks, R as MyPrKeepMergeableRequest, Rt as githubPollingShape, V as MyPrMergeRequest, W as MyPrMergeWhenReadyRequest, Z as MyPrsStatus, _ as ConversationApprovalDecision, _t as TeamReviewActionResult, b as PendingWakeup, et as CommitSha, g as ConversationApproval, gt as TeamReviewActionRequest, h as ConversationAnswers, k as SessionState, w as SESSION_DOC_PATH_MAX_CHARS, xt as TeamReviewStatus, z as MyPrKeepMergeableResult } from "./session-BZbariv5.js";
+import { J as CoherenceOrient, X as CoherenceRisk, Y as CoherenceReadiness, et as CoherenceWorkState, h as FactorySettings, n as BUILTIN_AGENT_IDS } from "./config-BYc2z1Oc.js";
 import { z } from "zod";
 //#region shared/contracts/factory.ts
 var FactoryConsequences = z.looseObject({ records: z.array(z.looseObject({
@@ -15,6 +15,7 @@ var FactoryConsequences = z.looseObject({ records: z.array(z.looseObject({
 	session: z.string().optional(),
 	evidence: z.string().optional()
 })) });
+var confirmedFlakes = z.array(z.string().min(1)).max(256);
 var FactoryProjectState = z.object({
 	projectId: z.string(),
 	projectName: z.string(),
@@ -34,6 +35,12 @@ var FactoryProjectState = z.object({
 	spentTodayUsd: z.number().finite().nonnegative().optional(),
 	dailyBudgetUsd: z.number().finite().nonnegative().nullable().optional(),
 	verifierIntentIds: z.array(z.string()).optional(),
+	confirmedFlakesByIntent: z.record(z.string().min(1), confirmedFlakes).optional(),
+	partialIntentIds: z.array(z.string()).optional(),
+	factoryProfile: FactorySettings.unwrap().unwrap().pick({ checks: true }).extend({
+		focusedTestCommand: z.string().trim().min(1).optional(),
+		widenableScopes: z.array(z.string().trim().min(1)).optional()
+	}).optional(),
 	error: z.string().nullable(),
 	heading: z.object({
 		action: CoherenceOrient.shape.action,
@@ -52,6 +59,9 @@ var FactoryProjectState = z.object({
 		dependsOn: z.array(z.string()),
 		writeScopes: z.array(z.string()),
 		owner: z.string().nullable(),
+		blockReason: z.string().nullable().optional(),
+		parked: z.boolean().optional(),
+		blockCount: z.number().int().nonnegative().optional(),
 		lastEvent: z.object({
 			event: z.string(),
 			at: z.string(),
@@ -79,7 +89,11 @@ var FactoryHarnessStateLine = z.object({
 	state: FactoryState
 });
 var FactoryHarnessVerdict = z.looseObject({
-	outcome: z.enum(["pass", "fail"]),
+	outcome: z.enum([
+		"pass",
+		"partial",
+		"fail"
+	]),
 	failureClass: z.string().nullable().optional()
 });
 var FACTORY_ERROR_MAX_CHARS = 16384;
@@ -141,12 +155,22 @@ var FactoryQueueIntentResult = z.object({
 });
 var FactoryControlRequest = z.object({
 	projectId,
-	action: z.enum(["pause", "resume"])
+	action: z.enum([
+		"pause",
+		"resume",
+		"retry-parked",
+		"rerun-setup"
+	]),
+	intentId: z.string().trim().min(1).max(128).optional()
+}).refine((request) => request.action !== "retry-parked" || request.intentId !== void 0, {
+	message: "Retry parked requires an intentId",
+	path: ["intentId"]
 });
 var FactoryControlResult = z.object({
 	projectId: z.string().max(128),
 	action: FactoryControlRequest.shape.action,
 	ok: z.boolean(),
+	reopenedWorkIds: z.array(z.string().min(1)).optional(),
 	error: z.string().max(FACTORY_ERROR_MAX_CHARS).optional()
 });
 var FactoryReviewVerdict = z.object({
@@ -181,6 +205,8 @@ var FactoryLaneState = z.object({
 	trustedIntentIds: z.array(z.string().min(1)).optional(),
 	intentWriteScopes: z.record(z.string().min(1), z.array(z.string().min(1))).optional(),
 	intentFloorAllowances: z.record(z.string().min(1), floorAllowances).optional(),
+	intentConfirmedFlakes: z.record(z.string().min(1), confirmedFlakes).optional(),
+	intentScopeNeeds: z.record(z.string().min(1), z.array(z.string().min(1)).max(256)).optional(),
 	ticketedIntentIds: z.array(z.string().min(1)).optional(),
 	pendingIntentTickets: z.record(z.string().min(1), z.object({
 		risk: CoherenceRisk,
@@ -191,7 +217,7 @@ var FactoryLaneState = z.object({
 	factoryLandedShas: z.array(z.string().regex(/^[a-f0-9]{40,64}$/)).optional(),
 	unlandedFactoryRecords: z.array(FactoryUnlandedRecord).optional(),
 	ticketBlockCounts: z.record(z.string().min(1), z.number().int().nonnegative()).optional(),
-	intentCapCancelCounts: z.record(z.string().min(1), z.number().int().nonnegative()).optional()
+	notifiedIntentOutcomes: z.array(z.string().min(1)).optional()
 });
 var FactoryWorkerEvent = z.object({
 	workId: z.string().min(1),
@@ -269,7 +295,7 @@ var decisionFields = {
 	attempt: z.number().int().positive().nullable(),
 	durationMs: z.number().int().nonnegative().nullable(),
 	failureClass: FactoryDecisionFailureClass.nullable(),
-	reason: z.string().max(1e3).nullable()
+	reason: z.string().max(3999).nullable()
 };
 var FactoryDecisionLogLine = z.discriminatedUnion("kind", [
 	z.strictObject({
@@ -1276,6 +1302,7 @@ var SessionCardFields = z.object({
 	saneYolo: z.boolean(),
 	worktree: z.boolean(),
 	workspace: z.boolean().optional(),
+	guarded: z.boolean().optional(),
 	resumeSessionId: nullableString,
 	ephemeral: z.boolean().optional(),
 	linkedPrs: z.array(LinkedPr).optional()
@@ -1400,8 +1427,14 @@ var clientVariants = [
 		settings: z.record(z.string(), z.unknown()),
 		requestId
 	}),
-	loose("scan-repo-roots", { requestId }),
-	loose("list-agents", { requestId }),
+	loose("scan-repo-roots", {
+		requestId,
+		includeSuggestions: z.boolean().optional()
+	}),
+	loose("list-agents", {
+		requestId,
+		rescan: z.boolean().optional()
+	}),
 	loose("get-radar-report", {
 		issueId: z.union([z.string(), z.number()]),
 		requestId
@@ -1519,7 +1552,8 @@ var clientVariants = [
 	loose("conversation-approval", {
 		id: sessionId,
 		requestId: ConversationApproval.shape.requestId,
-		decision: ConversationApprovalDecision
+		decision: ConversationApprovalDecision,
+		answers: ConversationAnswers.optional()
 	}),
 	loose("session-doc-read", {
 		id: sessionId,
@@ -1918,6 +1952,11 @@ var serverVariants = [
 				path: z.string()
 			}))
 		})),
+		suggestions: z.array(openObject({
+			path: z.string(),
+			label: z.string(),
+			gitRepoCount: z.number().int().nonnegative()
+		})).optional(),
 		error: z.string().optional()
 	}),
 	loose("conversations", {