glimmervoid 0.38.0 → 0.38.2

package/dist/chunks/{main-w01-P1oZ.js → main-BNSbP-Yk.js}

@@ -2,34 +2,36 @@ import { i as sanitizeOneLine, n as requireExecutableSpawnHelper, r as firstLine
 import { a as isMissingFileError, i as errorText$1, r as errorMessage, t as errorCode } from "./text-DoirglWV.js";
 import { a as sanitizeWorktreeName, i as safePathSegment, n as equalsIgnoringCaseOnWindows, r as isPathInside, t as caseFoldedPathKey } from "./paths-Bu4eH1Yd.js";
 import { a as packageRoot, n as cliPath, o as relayPath, r as clientDir, s as resolvePackageBin, t as bundled } from "./runtime-paths-BkeftE60.js";
-import { At as HEX_SHA_RE, B as MyPrMergeMethod, Bt as MERGEABLE_LIVE_STATES, C as SESSION_DOC_BODY_CAP_BYTES, Ct as TeamReviewThreadResult, E as SSH_SIGN_BODY_CAP_BYTES, Et as decisionAsIfApprovalRequired, F as MyPrAutoRebase, Ft as repoParts, Ht as STATES, I as MyPrCheckContext, J as MyPrThreadNode, K as MyPrSearchNode, L as MyPrCheckContextsResponse, M as TASK_TITLE_CONTROL_CHARACTERS, Mt as GH_SEGMENT, N as TaskTitle, Nt as NODE_ID_RE, Ot as hasStandingViewerApproval, P as LinkedPr, Pt as REPO_SLUG_RE, R as MyPrKeepMergeableRequest, St as TeamReviewThreadCommentsResponse, T as SIGN_URL_ENV, Tt as canApproveAfterComment, U as MyPrMergeStateResponse, V as MyPrMergeRequest, Vt as RESTARTABLE_STATES, W as MyPrMergeWhenReadyRequest, X as MyPrsState, Y as MyPrThreadsResponse, Z as MyPrsStatus, a as AgentDispatchRequest, at as PostingPlan, bt as TeamReviewStateEntry, ct as ReviewChecksState, d as AgentTicketRequest, dt as ReviewFinding, et as CommitSha, f as CONVERSATION_APPROVAL_SUMMARY_MAX_CHARS, ft as ReviewResult, gt as TeamReviewActionRequest, ht as SearchedPr, it as GithubReviewState, j as SshSignRequest, jt as shortSha$1, kt as FULL_SHA_RE, lt as ReviewComment, m as CONVERSATION_TOOL_RESULT_HOOK_EVENT, mt as ReviewVerdict, n as AGENT_URL_ENV, nt as FindingSeverity, ot as PrDetail, p as CONVERSATION_PERMISSION_HOOK_EVENT, pt as ReviewThreadId, q as MyPrSearchResponse, r as ASK_USER_QUESTION_TOOL_NAME, rt as GithubReviewDecision, st as QueuedReview, tt as DECIDING_REVIEW_STATES, ut as ReviewDraft, v as ConversationQuestion, vt as TeamReviewCompareFiles, wt as TeamReviewThreadsRepository, x as RefinedTaskTitle, xt as TeamReviewStatus, y as ORCHESTRATOR_AGENT_VERBS, yt as TeamReviewResolveResponse, zt as KILLABLE_STATES } from "./session-8Pv0y1vz.js";
+import { At as FULL_SHA_RE, Bt as KILLABLE_STATES, Ct as TeamReviewThreadCommentsResponse, D as SSH_SIGN_BODY_CAP_BYTES, Dt as decisionAsIfApprovalRequired, E as SIGN_URL_ENV, Et as canApproveAfterComment, F as LinkedPr, Ft as REPO_SLUG_RE, G as MyPrMergeWhenReadyRequest, H as MyPrMergeRequest, Ht as RESTARTABLE_STATES, I as MyPrAutoRebase, It as repoParts, J as MyPrSearchResponse, L as MyPrCheckContext, M as SshSignRequest, Mt as shortSha$1, N as TASK_TITLE_CONTROL_CHARACTERS, Nt as GH_SEGMENT, P as TaskTitle, Pt as NODE_ID_RE, Q as MyPrsStatus, R as MyPrCheckContextsResponse, S as RefinedTaskTitle, St as TeamReviewStatus, Tt as TeamReviewThreadsRepository, Ut as STATES, V as MyPrMergeMethod, Vt as MERGEABLE_LIVE_STATES, W as MyPrMergeStateResponse, X as MyPrThreadsResponse, Y as MyPrThreadNode, Z as MyPrsState, _t as TeamReviewActionRequest, a as AgentDispatchRequest, at as GithubReviewState, b as ORCHESTRATOR_AGENT_VERBS, bt as TeamReviewResolveResponse, ct as QueuedReview, dt as ReviewDraft, f as AgentTicketRequest, ft as ReviewFinding, gt as SearchedPr, h as CONVERSATION_TOOL_RESULT_HOOK_EVENT, ht as ReviewVerdict, it as GithubReviewDecision, jt as HEX_SHA_RE, kt as hasStandingViewerApproval, lt as ReviewChecksState, m as CONVERSATION_PERMISSION_HOOK_EVENT, mt as ReviewThreadId, n as AGENT_URL_ENV, nt as DECIDING_REVIEW_STATES, ot as PostingPlan, p as CONVERSATION_APPROVAL_SUMMARY_MAX_CHARS, pt as ReviewResult, q as MyPrSearchNode, r as ASK_USER_QUESTION_TOOL_NAME, rt as FindingSeverity, st as PrDetail, tt as CommitSha, ut as ReviewComment, w as SESSION_DOC_BODY_CAP_BYTES, wt as TeamReviewThreadResult, xt as TeamReviewStateEntry, y as ConversationQuestion, yt as TeamReviewCompareFiles, z as MyPrKeepMergeableRequest } from "./session-BlT68ppa.js";
 import { n as execFileAsync, o as spawn, r as execFileSync, t as execFile } from "./child-process-safe-CbQnyh7D.js";
 import { n as glimmervoidHomeDir, t as decideConfigPath } from "./config-path-core-DFt-TemS.js";
-import { i as parseCommandLine, n as warnWhenGitIsTooOld } from "./git-version-BpnTd8sU.js";
+import { i as parseCommandLine, n as warnWhenGitIsTooOld } from "./git-version-rWZjF2Px.js";
 import { n as checkGuardrailsDependencies, t as allowGuardedSpawn } from "./guardrails-deps-Cb-ki4EU.js";
 import { t as HOOK_URL_ENV } from "./hook-relay-core-DA_bz2KA.js";
 import { t as HOOK_VIA_GUARDRAILS_PROXY_ENV } from "./guardrails-proxy-core-BI3rdY-m.js";
 import { t as refocusReplyFor } from "./refocus-core-BKQKllq7.js";
 import { a as positiveIntOr, c as textOr, i as numberOr, n as isRecord, o as positiveNumberOr, r as nonNegativeIntOr, s as rawTextOr, t as coercedNumberOr } from "./coerce-NSst8oRP.js";
 import { n as parseJsonRecord, t as parseJsonOrNull } from "./json-core-dfa_7Fak.js";
-import { a as SANE_YOLO_FILES } from "./rtk-hook-core-VrUafGAp.js";
+import { s as saneYoloFiles } from "./rtk-hook-core-B-MpzPin.js";
 import { _ as lineStartOffsets, a as projectForUri, b as replacedSpanOfWholeTextChange, c as visionsLaneReloadSignature, d as applyDidOpen, f as createDocStore, g as lineOfOffset, h as getDoc, i as isUriInProjects, l as applyDidChange, m as formatRange, n as applyEditorNotification, o as resolveVisionsScopeProjects, p as detectBlankLineBoundary, r as createEditorState, s as scopePathsOf, t as ACTIVITY_METHOD, u as applyDidClose, v as listDocs, x as uriOfParams, y as offsetOfPosition } from "./ingest-editor-core-B2tycW_m.js";
 import { n as DEFAULT_MAX_MS, r as nextBackoffMs, t as DEFAULT_BASE_MS } from "./backoff-DjVpfHk7.js";
 import { n as unrefTimer, t as DEFAULT_TIMER_FNS } from "./timer-deps-u2DAQLok.js";
-import { o as permitsHelpCommand, r as describeSessionLimits } from "./session-routes-D-GZC-Sy.js";
-import { a as decideFactoryControlAllowance, c as deriveChildSessionName, d as describeUnavailableFactoryState, f as formatFactoryStatus, h as parseAgentVerb, i as decideEditAllowance, l as describePushLanding, m as isOrchestratorAgentVerb, n as decideAgentRequest, o as decideSpawnAllowance, r as decideAttentionAllowance, s as decideTicketAction, t as REFUSAL_REASON, u as describePushRouteRefusal } from "./agent-api-core--8WtU1xU.js";
-import { s as GLIMMERVOID_SECRET_KEYS } from "./grok-xFs6zIu4.js";
+import { o as permitsHelpCommand, r as describeSessionLimits } from "./session-routes-CT1JrjoT.js";
+import { $ as CoherenceTicketCreated, C as WorkflowsState, G as USAGE_INTEGER_RANGES, N as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, T as USAGE_VENDOR_KEYS, X as CoherenceOrient, a as DEFAULT_FACTORY_CHECKS, b as WorkflowSearchNode, et as CoherenceWorkCreated, o as DEFAULT_FACTORY_PROTECTED_PATHS, tt as CoherenceWorkInspect, v as WorkflowCommentBody, w as USAGE_COST_MODES, x as WorkflowsSettings, y as WorkflowLabelName } from "./browser-config-BrBT8269.js";
+import { _ as isSingleFactoryPathSegment, a as FactoryControlRequest, c as FactoryHarnessVerdict, d as FactoryQueueIntentRequest, g as FactoryWorkerEvent, i as FactoryConsequences, l as FactoryLaneState, m as FactoryReviewerOutput, n as FACTORY_ERROR_MAX_CHARS, p as FactoryReviewVerdict, r as FACTORY_PROTECTED_PATH_FLOOR, s as FactoryHarnessStateLine, u as FactoryProjectState } from "./factory-D7ryES9n.js";
+import { _ as parseAgentVerb, a as decideFactoryControlAllowance, c as deriveChildSessionName, d as describePushRouteRefusal, f as describeUnavailableFactoryState, g as isOrchestratorAgentVerb, i as decideEditAllowance, l as describeFactorySetupProfile, m as formatFactoryStatus, n as decideAgentRequest, o as decideSpawnAllowance, p as findSessionProjectId, r as decideAttentionAllowance, s as decideTicketAction, t as REFUSAL_REASON, u as describePushLanding } from "./agent-api-core-B_mUSenR.js";
+import { s as GLIMMERVOID_SECRET_KEYS } from "./grok-B6bsCgdd.js";
 import { n as shellQuote } from "./hook-command-core-qTNK-xMF.js";
 import { C as headroomFromReadings, D as parseMemAvailableBytes, E as parseCgroupV2Path, S as cgroupLimitBytes, T as parseCgroupBytes, _ as createSpawnGate, a as jsonStateLoadError, c as loadedJsonValue, d as writeJsonAtomicSync, f as writeTextAtomic, g as createSerialQueue, h as createMemoryAdmission, i as createJsonStateWriter, m as createKeyedSerialQueue, n as appendJsonLines, o as loadJsonStateFile, p as writeTextAtomicSync, r as createJsonStateStore, s as loadJsonStateFileSync, t as appendJsonLine, u as writeJsonAtomic, v as isQueueAdmissionAbandoned, w as memoryReserveBytes, x as cgroupAncestorPaths, y as isQueueAdmissionTimeout } from "./json-file-CIJf0Cel.js";
-import { $ as CoherenceWorkCreated, C as USAGE_COST_MODES, M as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, Q as CoherenceTicketCreated, S as WorkflowsState, W as USAGE_INTEGER_RANGES, Y as CoherenceOrient, a as ConfigUpdate, b as WorkflowSearchNode, c as RUNTIME_CONFIG_SCALAR_KEYS, et as CoherenceWorkInspect, l as TASK_TITLE_SOURCE_PRIORITY, m as DEFAULT_FACTORY_PROTECTED_PATHS, o as PersistedTaskTitle, p as DEFAULT_FACTORY_CHECKS, r as BrowserConfig, s as ProjectConfig, u as configIssueMessage, v as WorkflowCommentBody, w as USAGE_VENDOR_KEYS, x as WorkflowsSettings, y as WorkflowLabelName } from "./config-BHBZsCBc.js";
-import { B as buildExceptionProperties, F as TELEMETRY_BATCH_URL, G as decideTelemetryConsent, H as classifySessionExit, I as TELEMETRY_FLAGS_URL, J as parsePosthogReleaseId, K as exceptionFingerprint, L as adapterBucket, P as FIRST_RUN_NOTICE, Q as stableConfigKey, R as buildAiGenerationEvents, U as decideIsDevInstall, V as buildFactoryDecisionEvent, W as decideRemoteTelemetryState, Y as resolveProjectToken, a as generateProjectId, at as usablePrefixes, b as validateSettingsBlock, ct as comparableDirectoryPath, d as assetForPlatform, et as DEFAULT_BRANCH_GC_PREFIXES, f as decideRtkInstall, g as verifyDigest, h as isRtkBinaryName, i as ensureProjectIds, it as sessionIdFromBranch, lt as isSameDirectoryPath, m as installTargetPath, n as DEFAULT_CONFIG, nt as planBranchGc, o as glimmervoidHomeDir$1, ot as worktreeIntegrationTips, p as findEscapingArchiveMember, q as nodeMajorVersion, r as createConfigStore, rt as planWorktreeGc, st as canonicalizePath, t as ABORT_CONFIG_SAVE, tt as matchedPrefix, v as mergeSettingsBlock, y as settingsBlockSpecFor, z as buildBrowserExceptionProperties } from "./config-store-DbfMbz4j.js";
-import { $ as FactoryControlRequest, A as ChangeMap, B as MergedPrListing, C as GithubIssuePullRequestsRepository, D as IssuesSearchResponse, E as IssueUpdate, F as BenchmarkJudgement, G as TELEMETRY_EVENT_SCHEMAS, H as PrCheckoutCaseInput, I as BenchmarkRun, J as FACTORY_DECISION_OUTPUT_MAX_BYTES, L as BenchmarkStatus, M as BenchmarkActionRequest, N as BenchmarkCase, O as IssuesState, P as BenchmarkId, Q as FactoryConsequences, R as BenchmarkSuite, S as planTitle, T as IssueKey, V as MinedPrReviewData, W as PendingCrashReport, X as FACTORY_ERROR_MAX_CHARS, Y as FactoryDecisionLogLine, Z as FACTORY_PROTECTED_PATH_FLOOR, _ as PLAN_RESULT_HOOK_EVENT, a as parseDataClientMessage, at as FactoryReviewVerdict, b as PlanRevision, c as DIFF_ANNOTATION_NOTE_MAX_CHARS, ct as isSingleFactoryPathSegment, d as MAX_RAW_LINE_CHARS, et as FactoryHarnessStateLine, f as TraceCheckpoint, g as PLAN_HOOK_OUTPUT_MAX_CHARS, h as PLAN_HOOK_EVENT, i as parseDataAttachHistory, it as FactoryQueueIntentRequest, j as changeMapFactId, k as IssuesStatus, l as InstallFlavor, m as PLAN_BODY_CAP_BYTES, n as HookEnvelope, nt as FactoryLaneState, o as CONTROL_FRAME_MAX_BYTES, ot as FactoryReviewerOutput, p as TraceRecord, q as TelemetryState, r as DEEP_HISTORY_SCROLLBACK_LINES, rt as FactoryProjectState, s as ClientMessage, st as FactoryWorkerEvent, t as HTTP_URL_RE, tt as FactoryHarnessVerdict, u as UpdateJournal, v as PLAN_TOOL_NAME, w as GithubIssueResponse, x as parseExitPlanModeHookPayload, y as PlanDecision, z as CommitComparison } from "./contracts-u40eJhaf.js";
-import { A as shouldPersistWarehouse, C as isUsageFile, D as resolveProjectsDirs, E as projectDirCandidates, M as claudeCode, O as scopedClaudeRoots, S as grokRootCandidates, T as passOutcome, _ as continuationDelayMs, a as describeAgentResolvability, b as expandTilde, c as isKnownAgentId, d as resolveAdapter, f as setCustomAgents, g as codexSessionIdFromPath, h as codexRootCandidates, i as customAgentFingerprint, j as splitLines$1, k as shouldEvaluateDespiteIoFailures, l as listAgentIds, m as codexHomes, n as cachedAgentResolvability, o as getAdapter, p as codexFallbackRoots, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resetCommandCache, v as decideFileRead, w as laneSpendStatus, x as grokHomes, y as dedupeCodexFiles } from "./adapters-B-IkWl-r.js";
-import { t as HOOK_TOOLS } from "./hook-tools-BkxllUHE.js";
+import { B as buildExceptionProperties, F as TELEMETRY_BATCH_URL, G as decideTelemetryConsent, H as classifySessionExit, I as TELEMETRY_FLAGS_URL, J as parsePosthogReleaseId, K as exceptionFingerprint, L as adapterBucket, P as FIRST_RUN_NOTICE, Q as stableConfigKey, R as buildAiGenerationEvents, U as decideIsDevInstall, V as buildFactoryDecisionEvent, W as decideRemoteTelemetryState, Y as resolveProjectToken, a as generateProjectId, at as usablePrefixes, b as validateSettingsBlock, ct as comparableDirectoryPath, d as assetForPlatform, et as DEFAULT_BRANCH_GC_PREFIXES, f as decideRtkInstall, g as verifyDigest, h as isRtkBinaryName, i as ensureProjectIds, it as sessionIdFromBranch, lt as isSameDirectoryPath, m as installTargetPath, n as DEFAULT_CONFIG, nt as planBranchGc, o as glimmervoidHomeDir$1, ot as worktreeIntegrationTips, p as findEscapingArchiveMember, q as nodeMajorVersion, r as createConfigStore, rt as planWorktreeGc, st as canonicalizePath, t as ABORT_CONFIG_SAVE, tt as matchedPrefix, v as mergeSettingsBlock, y as settingsBlockSpecFor, z as buildBrowserExceptionProperties } from "./config-store-BUNZs4j7.js";
+import { a as ConfigUpdate, c as RUNTIME_CONFIG_SCALAR_KEYS, l as TASK_TITLE_SOURCE_PRIORITY, o as PersistedTaskTitle, r as BrowserConfig, s as ProjectConfig, u as configIssueMessage } from "./config-CjawSOBk.js";
+import { A as ChangeMap, B as MergedPrListing, C as GithubIssuePullRequestsRepository, D as IssuesSearchResponse, E as IssueUpdate, F as BenchmarkJudgement, G as TELEMETRY_EVENT_SCHEMAS, H as PrCheckoutCaseInput, I as BenchmarkRun, J as FACTORY_DECISION_OUTPUT_MAX_BYTES, L as BenchmarkStatus, M as BenchmarkActionRequest, N as BenchmarkCase, O as IssuesState, P as BenchmarkId, R as BenchmarkSuite, S as planTitle, T as IssueKey, V as MinedPrReviewData, W as PendingCrashReport, Y as FactoryDecisionLogLine, _ as PLAN_RESULT_HOOK_EVENT, a as parseDataClientMessage, b as PlanRevision, c as DIFF_ANNOTATION_NOTE_MAX_CHARS, d as MAX_RAW_LINE_CHARS, f as TraceCheckpoint, g as PLAN_HOOK_OUTPUT_MAX_CHARS, h as PLAN_HOOK_EVENT, i as parseDataAttachHistory, j as changeMapFactId, k as IssuesStatus, l as InstallFlavor, m as PLAN_BODY_CAP_BYTES, n as HookEnvelope, o as CONTROL_FRAME_MAX_BYTES, p as TraceRecord, q as TelemetryState, r as DEEP_HISTORY_SCROLLBACK_LINES, s as ClientMessage, t as HTTP_URL_RE, u as UpdateJournal, v as PLAN_TOOL_NAME, w as GithubIssueResponse, x as parseExitPlanModeHookPayload, y as PlanDecision, z as CommitComparison } from "./contracts-HVCEJfxs.js";
+import { A as shouldPersistWarehouse, C as isUsageFile, D as resolveProjectsDirs, E as projectDirCandidates, M as claudeCode, O as scopedClaudeRoots, S as grokRootCandidates, T as passOutcome, _ as continuationDelayMs, a as describeAgentResolvability, b as expandTilde, c as isKnownAgentId, d as resolveAdapter, f as setCustomAgents, g as codexSessionIdFromPath, h as codexRootCandidates, i as customAgentFingerprint, j as splitLines$1, k as shouldEvaluateDespiteIoFailures, l as listAgentIds, m as codexHomes, n as cachedAgentResolvability, o as getAdapter, p as codexFallbackRoots, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resetCommandCache, v as decideFileRead, w as laneSpendStatus, x as grokHomes, y as dedupeCodexFiles } from "./adapters-CAHxZYT3.js";
+import { t as HOOK_TOOLS } from "./hook-tools-Dl7-r2Eb.js";
 import { a as formatSshPublicKey, c as orderAgentSockets, i as commitSigningShimText, l as parseSshPublicKey, n as NO_AGENT_HOLDS_KEY, o as isForwardedAgentDirName, r as agentListsKey, s as isSignableGitObject, t as COMMIT_SIGNING_SHIM_NAME } from "./ssh-signing-core-CRhVVWNW.js";
-import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-61zJ0hME.js";
+import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-C_s2pnLC.js";
 import { _ as escapeMarkup, g as createLaneLog, n as createVisionsSetup } from "./visions-setup-B-ZeRdsi.js";
-import { t as getRtkPath } from "./rtk-resolver-C_micGrL.js";
+import { t as getRtkPath } from "./rtk-resolver-BgoPsEhT.js";
 import { createRequire } from "node:module";
 import fs, { constants, readFileSync } from "node:fs";
 import path, { join, resolve } from "node:path";
@@ -198,6 +200,7 @@ function createLifecycle({ shutdown, httpServer, extraServers = [], onRestart =
 			warn: log
 		});
 		closeExtraServers(extraServers);
+		await prepareHandOffOnce();
 		let exited = false;
 		const doExit = () => {
 			if (exited) return;
@@ -5008,6 +5011,70 @@ function createAgentApiWiring({ config, agentSessions, listAllSessions, listBoar
 		if (routeRefusal) return routeRefusal;
 		return describePushLanding(await session.mergeAndContinue({ force: true }));
 	}
+	async function setUpFactoryProject(session, factoryPort, projects) {
+		const projectId = findSessionProjectId(config.projects, session.path);
+		if (!projectId) return {
+			status: 404,
+			body: {
+				ok: false,
+				error: `no configured project has the path ${session.path}, so the operator has to add this repository as a project first`
+			}
+		};
+		const outcome = await factoryPort.rerunSetup(projectId);
+		if (!outcome.ok) return {
+			status: 409,
+			body: {
+				ok: false,
+				error: outcome.reason
+			}
+		};
+		return {
+			status: 200,
+			body: {
+				ok: true,
+				projectId,
+				profile: outcome.profile,
+				text: describeFactorySetupProfile(outcome.profile, projects.some((project) => project.projectId === projectId))
+			}
+		};
+	}
+	async function queueFactoryIntent(session, factoryPort, projects, request) {
+		const projectId = findSessionProjectId(config.projects, session.path);
+		if (!projectId) return {
+			status: 404,
+			body: {
+				ok: false,
+				error: `no configured project has the path ${session.path}, so the operator has to add this repository as a project first`
+			}
+		};
+		if (!projects.some((project) => project.projectId === projectId)) return {
+			status: 409,
+			body: {
+				ok: false,
+				error: `${projectId} is not a factory project yet: commit a coherence.config.json holding {} at the repository root, land it on the integration branch with glimmervoid push, then queue again`
+			}
+		};
+		const outcome = await factoryPort.queueIntent({
+			...request,
+			projectId
+		});
+		if (!outcome.ok) return {
+			status: 409,
+			body: {
+				ok: false,
+				error: outcome.error ?? "the factory refused the intent"
+			}
+		};
+		return {
+			status: 200,
+			body: {
+				ok: true,
+				projectId,
+				workId: outcome.workId,
+				text: `Queued ${outcome.workId ?? "the intent"} on ${projectId}. Follow it with glimmervoid factory status --project ${projectId}`
+			}
+		};
+	}
 	async function handle(session, verb, payload) {
 		const parsed = parseAgentVerb(verb, payload);
 		if (!parsed.ok) return {
@@ -5017,7 +5084,7 @@ function createAgentApiWiring({ config, agentSessions, listAllSessions, listBoar
 				error: parsed.error
 			}
 		};
-		if (parsed.verb === "factory-status" || parsed.verb === "factory-retry") {
+		if (parsed.verb === "factory-status" || parsed.verb === "factory-retry" || parsed.verb === "factory-setup" || parsed.verb === "factory-queue") {
 			const allowance = decideFactoryControlAllowance(roleFactsOf(session));
 			if (!allowance.ok) return {
 				status: allowance.status,
@@ -5034,6 +5101,8 @@ function createAgentApiWiring({ config, agentSessions, listAllSessions, listBoar
 					error: "Factory is not running"
 				}
 			};
+			if (parsed.verb === "factory-setup") return setUpFactoryProject(session, factory, projects);
+			if (parsed.verb === "factory-queue") return queueFactoryIntent(session, factory, projects, parsed.request);
 			if (parsed.verb === "factory-status") {
 				const selectedProjects = parsed.request.projectId === void 0 ? projects : projects.filter((project) => project.projectId === parsed.request.projectId);
 				if (parsed.request.projectId !== void 0 && selectedProjects.length === 0) return {
@@ -7030,6 +7099,7 @@ function createSessionEventWiring(dependencies) {
 		};
 		let lastPersistedWasActive = null;
 		let lastPersistedWasWorking = null;
+		let isTurnWorking = null;
 		let spawnedAtMs = null;
 		const persistProjectField = (field, value) => {
 			Promise.resolve(persistSessionField(dependencies.configStore, dependencies.config, session.id, field, value)).catch((error) => dependencies.logger.warn(`[config] Failed to persist ${field}: ${errorMessage(error)}`));
@@ -7044,6 +7114,14 @@ function createSessionEventWiring(dependencies) {
 				duration_seconds: durationSeconds
 			});
 		};
+		const persistWasWorking = () => {
+			const hasBackgroundWork = session.hasBackgroundWork;
+			if (isTurnWorking === null && !hasBackgroundWork) return;
+			const wasWorking = isTurnWorking === true || hasBackgroundWork;
+			if (wasWorking === lastPersistedWasWorking) return;
+			lastPersistedWasWorking = wasWorking;
+			persistProjectField("wasWorking", wasWorking);
+		};
 		let liveTranscriptPath = null;
 		session.on("claude-session-id", ({ id, vendor, isResumeTarget, transcriptPath }) => {
 			liveTranscriptPath = transcriptPath;
@@ -7131,11 +7209,9 @@ function createSessionEventWiring(dependencies) {
 				lastPersistedWasActive = nextWasActive;
 				persistProjectField("wasActive", nextWasActive);
 			}
-			const nextWasWorking = decideWasWorkingFlip(to, event, detail?.isIdleCompactionActivity === true);
-			if (nextWasWorking !== null && nextWasWorking !== lastPersistedWasWorking) {
-				lastPersistedWasWorking = nextWasWorking;
-				persistProjectField("wasWorking", nextWasWorking);
-			}
+			const nextIsTurnWorking = decideWasWorkingFlip(to, event, detail?.isIdleCompactionActivity === true);
+			if (nextIsTurnWorking !== null) isTurnWorking = nextIsTurnWorking;
+			persistWasWorking();
 			const acknowledgeDecision = decideAcknowledge(isAcknowledgeDeferredForCompaction, from, event, detail?.isIdleCompactionActivity === true);
 			isAcknowledgeDeferredForCompaction = acknowledgeDecision.isAcknowledgeDeferred;
 			clearCompactionConfirm();
@@ -7192,6 +7268,7 @@ function createSessionEventWiring(dependencies) {
 			timestamp: Date.now()
 		}));
 		session.on("agents-change", (payload) => {
+			persistWasWorking();
 			dependencies.telegramChannel.recheck(session.id);
 			dependencies.broadcastControl({
 				type: "session-agents",
@@ -7203,6 +7280,7 @@ function createSessionEventWiring(dependencies) {
 			});
 		});
 		relay("wakeup-change", "session-wakeup");
+		session.on("wakeup-change", persistWasWorking);
 		relay("prompt-kind-change", "session-prompt");
 		relay("conversation-change", "session-conversation");
 		session.on("merge-status", ({ mergeStatus, reason, parked }) => {
@@ -7432,7 +7510,7 @@ async function listRepoConversations({ repoPath, projectsDir, git, fsMod, limit
 //#endregion
 //#region session/core/auto-resume.ts
 var RESUME_ID_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var AUTO_CONTINUE_PROMPT = "Glimmervoid restarted while you were mid-turn and resumed this conversation. This is not a new request from the user: carry on with the task you were working on. Any tool call, background command or subagent that was running was stopped and its outcome is unknown, so check the current state, such as files, git status and running processes, before relying on it or repeating it. Do not recap or ask for confirmation. If the task was already finished, say so in one line.";
+var AUTO_CONTINUE_PROMPT = "Glimmervoid restarted while you were working and resumed this conversation. This is not a new request from the user: carry on with the task you were working on. Any tool call, background command, monitor or subagent that was running was stopped and its outcome is unknown, so check the current state, such as files, git status and running processes, before relying on it or repeating it, and start again any background work the task still needs. Do not recap or ask for confirmation. If the task was already finished, say so in one line.";
 function pickAutoResume(projects, config) {
 	if (!Array.isArray(projects)) return [];
 	if (config && config.autoResume === false) return [];
@@ -14653,6 +14731,12 @@ function createTaskRegistry({ agentTtlMs = DEFAULT_AGENT_TTL_MS, shellTaskTtlMs
 			reap(at);
 			return isOnlyBackgroundTasks(declaredEntries, countedAgents, idleTaskIds, (entry) => entryAgeMs(entry, at), shellTaskTtlMs, idleTeammateNames.size, teammateTaskTtlMs, agentTtlMs);
 		},
+		hasLiveMonitor() {
+			const at = now();
+			reap(at);
+			if (declaredEntries === null) return false;
+			return declaredEntries.some((entry) => entry.type === "monitor" && !(entry.id && idleTaskIds.has(entry.id)) && entryAgeMs(entry, at) < shellTaskTtlMs);
+		},
 		getBreakdown() {
 			return breakdown;
 		},
@@ -15174,6 +15258,431 @@ function createSessionOutput(options) {
 	};
 }
 //#endregion
+//#region server/guardrails/core/guardrails-policy-core.ts
+var VENDOR_PROFILES = Object.freeze({
+	claude: {
+		homeEntries: [".claude", ".claude.json"],
+		launchWritableFolders: ({ cwd, agentSessionId }) => [path.join("projects", encodeProjectDir(cwd)), ...agentSessionId === null ? [] : [path.join("session-env", agentSessionId)]],
+		launchPrivateFolders: ["shell-snapshots"],
+		launchHomeEnvName: null,
+		loginFiles: [".credentials.json"],
+		configEntries: [
+			"settings.json",
+			"settings.local.json",
+			"hooks",
+			"skills",
+			"plugins",
+			"commands",
+			"agents",
+			"CLAUDE.md",
+			"AGENTS.md"
+		],
+		apiDomains: ["api.anthropic.com", "platform.claude.com"],
+		launchEnv: { DISABLE_AUTOUPDATER: "1" }
+	},
+	codex: {
+		homeEntries: [".codex"],
+		launchWritableFolders: () => [],
+		launchPrivateFolders: [],
+		launchHomeEnvName: "CODEX_HOME",
+		loginFiles: ["auth.json"],
+		configEntries: [
+			"config.toml",
+			"AGENTS.md",
+			"skills",
+			"rules",
+			"prompts",
+			"hooks.json"
+		],
+		apiDomains: [
+			"chatgpt.com",
+			"*.chatgpt.com",
+			"auth.openai.com",
+			"api.openai.com",
+			"*.openai.com"
+		],
+		launchEnv: {}
+	}
+});
+var GUARDRAILS_VENDORS = Object.freeze(["claude", "codex"]);
+var UNWRAPPED_VENDOR_HOME_ENTRIES = Object.freeze([".grok"]);
+var CREDENTIAL_HOME_ENTRIES = Object.freeze([
+	".ssh",
+	".config/gh",
+	"Library/Keychains",
+	".git-credentials"
+]);
+var CLOUD_CREDENTIAL_HOME_ENTRIES = Object.freeze([
+	".aws",
+	".azure",
+	".config/gcloud",
+	".kube",
+	".docker",
+	".gnupg",
+	".netrc",
+	".npmrc"
+]);
+var STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES = Object.freeze(["Library/Keychains"]);
+var XDG_CONFIG_DEFAULT_HOME_PREFIX = ".config/";
+var SHARED_TEMP_DIRS = Object.freeze(["/tmp/claude", "/private/tmp/claude"]);
+var SHARED_HOME_WRITE_ENTRIES = Object.freeze([".npm/_logs"]);
+var GUARDRAILS_PLACEHOLDER_NAMES = Object.freeze([
+	".bash_profile",
+	".bashrc",
+	".claude",
+	".gitconfig",
+	".gitmodules",
+	".idea",
+	".mcp.json",
+	".profile",
+	".ripgreprc",
+	".vscode",
+	".zprofile",
+	".zshrc"
+]);
+var WHOLE_FILESYSTEM = "/";
+var GUARDRAILS_TEMP_FOLDER = "guardrails-temp";
+var GLIMMERVOID_CONFIG_SIBLING_ENTRIES = Object.freeze([
+	"bin",
+	"pairings.json",
+	"pairings-seen.json",
+	"plans",
+	"telegram-outbox.json",
+	"traces",
+	"uploads",
+	"usage-budget-state.json",
+	"usage-lanes.json",
+	"usage-warehouse.json",
+	"visions-intent.json"
+]);
+var GLIMMERVOID_HOME_STATE_ENTRIES = Object.freeze([
+	"benchmark-runs",
+	"benchmarks",
+	"config.json",
+	"factory",
+	"issues-cache.json",
+	"knowledge-graph",
+	"litellm-pricing.json",
+	"my-prs-state.json",
+	"my-prs-work",
+	"posthog-reports",
+	"posthog-state.json",
+	"posthog-work",
+	"recordings",
+	"guardrails-homes",
+	"guardrails-policies",
+	"sane-yolo",
+	"scratch",
+	"sounds",
+	"team-review-repos",
+	"team-review-state.json",
+	"team-review-work",
+	"team-review-worktrees",
+	"telemetry-pending-crash.json",
+	"telemetry.json",
+	"tmp",
+	"update-check.json",
+	"update-journal.json",
+	"workflows-state.json",
+	"workflows-work"
+]);
+var RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS = Object.freeze(["commands", "agents"]);
+var GUARDED_PROXY_BYPASS = "localhost,::1,169.254.0.0/16,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16";
+var HOOK_LOOPBACK_HOST = "127.0.0.1";
+var AGENT_SESSION_ID_SHAPE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
+var STANDARD_OPEN_NETWORK = Object.freeze({
+	allowAllUnixSockets: true,
+	allowMachLookup: ["*"]
+});
+var STRICT_OPEN_NETWORK = Object.freeze({ allowAllUnixSockets: false });
+function unique(entries) {
+	return [...new Set(entries)];
+}
+function literalEntries(entryPaths) {
+	return unique(entryPaths).map((entryPath) => ({
+		path: entryPath,
+		literal: true
+	}));
+}
+function homePaths(host, homeEntries) {
+	return homeEntries.map((entry) => path.join(host.homeDir, entry));
+}
+function isInsideAny(parents, child) {
+	return parents.some((parent) => isPathInside(parent, child));
+}
+function vendorStatePaths(host, vendor, stateFolderEntries) {
+	return stateFolderEntries.map((entry) => path.join(host.vendorLocations[vendor].stateFolder, entry));
+}
+function vendorHeldPaths(host, vendor) {
+	const { stateFolder, configFiles, otherHomes } = host.vendorLocations[vendor];
+	return [
+		stateFolder,
+		...configFiles,
+		...otherHomes
+	];
+}
+function launchHomeOf(host, vendor) {
+	return path.join(host.launchHomeDir, vendor);
+}
+function vendorsWithLaunchHome(role) {
+	if (role.vendorHome.scope === "state") return [];
+	return role.vendors.filter((vendor) => VENDOR_PROFILES[vendor].launchHomeEnvName !== null);
+}
+function vendorWritableFolders(role, host) {
+	const { vendorHome } = role;
+	if (vendorHome.scope === "state") return role.vendors.map((vendor) => host.vendorLocations[vendor].stateFolder);
+	return role.vendors.flatMap((vendor) => {
+		const profile = VENDOR_PROFILES[vendor];
+		if (profile.launchHomeEnvName !== null) return [launchHomeOf(host, vendor)];
+		return vendorStatePaths(host, vendor, profile.launchWritableFolders(vendorHome));
+	});
+}
+function launchPrivateFolders(role, host) {
+	if (role.vendorHome.scope === "state") return [];
+	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].launchPrivateFolders));
+}
+function launchHomeLinkCandidates(role, host) {
+	return vendorsWithLaunchHome(role).flatMap((vendor) => {
+		const { configEntries, loginFiles } = VENDOR_PROFILES[vendor];
+		const linkFor = (entry, isLogin) => ({
+			linkPath: path.join(launchHomeOf(host, vendor), entry),
+			targetPath: path.join(host.vendorLocations[vendor].stateFolder, entry),
+			isLogin
+		});
+		return [...configEntries.map((entry) => linkFor(entry, false)), ...loginFiles.map((entry) => linkFor(entry, true))];
+	});
+}
+function launchHomeEnv(role, host) {
+	return Object.fromEntries(vendorsWithLaunchHome(role).flatMap((vendor) => {
+		const envName = VENDOR_PROFILES[vendor].launchHomeEnvName;
+		return envName === null ? [] : [[envName, launchHomeOf(host, vendor)]];
+	}));
+}
+function vendorLoginFiles(role, host) {
+	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].loginFiles));
+}
+function roleWritableRoots(role) {
+	return [
+		...role.writableRoots,
+		...role.lockedCheckouts,
+		...role.commitCheckouts.flatMap(({ checkout, gitDir }) => [checkout, gitDir])
+	];
+}
+function alwaysWritablePaths(role, host) {
+	return [
+		host.tempDir,
+		...roleWritableRoots(role),
+		...vendorWritableFolders(role, host)
+	];
+}
+function commitCheckoutWriteDenies({ checkout, gitDir }) {
+	const gitPointer = path.join(checkout, ".git");
+	const gitDirDenies = [path.join(gitDir, "hooks"), path.join(gitDir, "config")];
+	if (path.resolve(gitPointer) === path.resolve(gitDir)) return gitDirDenies;
+	return [gitPointer, ...gitDirDenies];
+}
+function writeDeniesWhenPresent(role, host) {
+	const writablePaths = alwaysWritablePaths(role, host);
+	const sharedHomeWrites = homePaths(host, SHARED_HOME_WRITE_ENTRIES).filter((sharedPath) => !isInsideAny(roleWritableRoots(role), sharedPath));
+	const vendorConfig = role.vendors.flatMap((vendor) => [...vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].configEntries), ...host.vendorLocations[vendor].configFiles]).filter((configPath) => isInsideAny(writablePaths, configPath));
+	return [
+		...SHARED_TEMP_DIRS,
+		...sharedHomeWrites,
+		...vendorConfig,
+		...role.commitCheckouts.flatMap(commitCheckoutWriteDenies)
+	];
+}
+function lockedCheckoutWriteDenies(role) {
+	return role.lockedCheckouts.flatMap((checkout) => [path.join(checkout, ".git"), path.join(checkout, ".claude")]);
+}
+function lockedClaudeMountPoints(role) {
+	return role.lockedCheckouts.flatMap((checkout) => RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS.map((folder) => path.join(checkout, ".claude", folder)));
+}
+function guardrailsPlaceholderPaths(role) {
+	return unique([...(role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : []).flatMap((workingFolder) => GUARDRAILS_PLACEHOLDER_NAMES.map((placeholderName) => path.join(workingFolder, placeholderName))), ...lockedCheckoutWriteDenies(role)]);
+}
+function homeEntriesNamedLike(host, homeEntries) {
+	return host.homeEntryNames.filter((entryName) => homeEntries.some((homeEntry) => entryName.startsWith(homeEntry)));
+}
+function relocatedXdgConfigPaths(host, homeEntries) {
+	const xdgConfigHome = host.relocatedXdgConfigHome;
+	if (xdgConfigHome === null) return [];
+	return homeEntries.filter((entry) => entry.startsWith(XDG_CONFIG_DEFAULT_HOME_PREFIX)).map((entry) => path.join(xdgConfigHome, entry.slice(8)));
+}
+function isStandardLevel(role) {
+	return role.guardrailLevel === "standard";
+}
+function blockedCredentialHomeEntries(role) {
+	const credentialHomeEntries = [...CREDENTIAL_HOME_ENTRIES, ...CLOUD_CREDENTIAL_HOME_ENTRIES];
+	if (!isStandardLevel(role)) return credentialHomeEntries;
+	return credentialHomeEntries.filter((entry) => !STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES.includes(entry));
+}
+function credentialWriteBlocks(role, host) {
+	const credentialHomeEntries = blockedCredentialHomeEntries(role);
+	return [...homePaths(host, credentialHomeEntries), ...relocatedXdgConfigPaths(host, credentialHomeEntries)];
+}
+function glimmervoidStateWriteBlocks(role, host) {
+	const keptWritable = alwaysWritablePaths(role, host);
+	const configFolder = path.dirname(host.glimmervoidConfigFile);
+	const homeEntries = [
+		...GLIMMERVOID_HOME_STATE_ENTRIES,
+		...GLIMMERVOID_CONFIG_SIBLING_ENTRIES,
+		...host.glimmervoidHomeEntryNames
+	].map((entryName) => path.join(host.glimmervoidHome, entryName));
+	const configSiblings = GLIMMERVOID_CONFIG_SIBLING_ENTRIES.map((entryName) => path.join(configFolder, entryName));
+	return unique([
+		host.glimmervoidConfigFile,
+		...homeEntries,
+		...configSiblings
+	]).filter((entryPath) => !keptWritable.some((writable) => isPathInside(entryPath, writable)));
+}
+function standardWriteBlockCandidates(role, host) {
+	if (!isStandardLevel(role)) return [];
+	return unique([
+		...credentialWriteBlocks(role, host),
+		...glimmervoidStateWriteBlocks(role, host),
+		...role.blockedPaths ?? []
+	]);
+}
+function readDeniedPaths(role, host) {
+	const otherVendors = GUARDRAILS_VENDORS.filter((vendor) => !role.vendors.includes(vendor));
+	const otherVendorHomeEntries = [...otherVendors.flatMap((vendor) => VENDOR_PROFILES[vendor].homeEntries), ...UNWRAPPED_VENDOR_HOME_ENTRIES];
+	const credentialHomeEntries = blockedCredentialHomeEntries(role);
+	return [
+		...homePaths(host, [
+			...credentialHomeEntries,
+			...otherVendorHomeEntries,
+			...homeEntriesNamedLike(host, otherVendorHomeEntries)
+		]),
+		...relocatedXdgConfigPaths(host, credentialHomeEntries),
+		...otherVendors.flatMap((vendor) => vendorHeldPaths(host, vendor)),
+		...host.unwrappedVendorHomes,
+		host.glimmervoidHome,
+		...launchPrivateFolders(role, host),
+		...role.readDenied
+	];
+}
+function guardrailsPolicyProbePaths(role, host) {
+	return unique([
+		...writeDeniesWhenPresent(role, host),
+		...vendorLoginFiles(role, host),
+		...launchHomeLinkCandidates(role, host).map((link) => link.targetPath)
+	]);
+}
+function isValidPort(port) {
+	return Number.isInteger(port) && port >= 1 && port <= 65535;
+}
+function hostNamedPaths(host) {
+	const relocatedXdgConfigHomes = host.relocatedXdgConfigHome === null ? [] : [host.relocatedXdgConfigHome];
+	return [
+		host.homeDir,
+		host.glimmervoidHome,
+		host.glimmervoidConfigFile,
+		host.tempDir,
+		host.launchHomeDir,
+		...relocatedXdgConfigHomes,
+		...host.unwrappedVendorHomes,
+		...GUARDRAILS_VENDORS.flatMap((vendor) => vendorHeldPaths(host, vendor))
+	];
+}
+function guardrailsRoleRefusal(role, host) {
+	const launchCwds = role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : [];
+	const relativePath = [
+		...hostNamedPaths(host),
+		...roleWritableRoots(role),
+		...role.readDenied,
+		...role.readableWithinDenied,
+		...launchCwds
+	].find((namedPath) => !path.isAbsolute(namedPath));
+	if (relativePath !== void 0) return `guardrails policy path is not absolute: ${relativePath}`;
+	const rootOverProtectedHome = [...roleWritableRoots(role), ...vendorWritableFolders(role, host)].find((root) => isPathInside(root, host.homeDir) || isPathInside(root, host.glimmervoidHome));
+	if (rootOverProtectedHome !== void 0) return `writable root ${rootOverProtectedHome} contains the home folder or the Glimmervoid home`;
+	const writablePaths = alwaysWritablePaths(role, host);
+	const reallowedAncestor = role.readableWithinDenied.find((readable) => writablePaths.some((writable) => isPathInside(readable, writable, { allowEqual: false })));
+	if (reallowedAncestor !== void 0) return `readable path ${reallowedAncestor} is an ancestor of a writable root`;
+	if (role.network.access === "allowlist" && role.network.hookPort !== null && !isValidPort(role.network.hookPort)) return "hook listener port is invalid";
+	const agentSessionId = role.vendorHome.scope === "launch" ? role.vendorHome.agentSessionId : null;
+	if (agentSessionId !== null && !AGENT_SESSION_ID_SHAPE.test(agentSessionId)) return "agent session id is invalid";
+	return null;
+}
+function networkPolicy(role) {
+	if (role.network.access === "open") return isStandardLevel(role) ? { ...STANDARD_OPEN_NETWORK } : { ...STRICT_OPEN_NETWORK };
+	if (role.network.access === "none") return {
+		allowedDomains: [],
+		deniedDomains: [],
+		allowLocalBinding: false,
+		allowAllUnixSockets: false
+	};
+	const hookEndpoint = role.network.hookPort === null ? [] : [`${HOOK_LOOPBACK_HOST}:${role.network.hookPort}`];
+	const vendorDomains = role.vendors.flatMap((vendor) => VENDOR_PROFILES[vendor].apiDomains);
+	return {
+		allowedDomains: unique([
+			...hookEndpoint,
+			...vendorDomains,
+			...role.network.domains
+		]),
+		deniedDomains: [],
+		strictAllowlist: true,
+		allowLocalBinding: false,
+		allowAllUnixSockets: false
+	};
+}
+function guardedEnvFor(role, host) {
+	if (role.network.access === "allowlist") return {
+		NO_PROXY: GUARDED_PROXY_BYPASS,
+		no_proxy: GUARDED_PROXY_BYPASS,
+		[HOOK_VIA_GUARDRAILS_PROXY_ENV]: "1"
+	};
+	if (role.network.access === "open") return { TMPDIR: host.tempDir };
+	return {};
+}
+function filesystemWrites(role, host, writablePaths) {
+	if (isStandardLevel(role)) return {
+		allowWrite: literalEntries([WHOLE_FILESYSTEM, ...writablePaths]),
+		denyWrite: literalEntries(host.writeBlockedPaths)
+	};
+	const isPresent = (candidate) => host.existingPaths.has(candidate);
+	return {
+		allowWrite: literalEntries(writablePaths),
+		denyWrite: literalEntries([...writeDeniesWhenPresent(role, host).filter(isPresent), ...lockedCheckoutWriteDenies(role)])
+	};
+}
+function buildGuardrailsLaunchPlan(role, host) {
+	const refusal = guardrailsRoleRefusal(role, host);
+	if (refusal !== null) return {
+		ok: false,
+		reason: refusal
+	};
+	const isPresent = (candidate) => host.existingPaths.has(candidate);
+	const writablePaths = [...alwaysWritablePaths(role, host), ...vendorLoginFiles(role, host).filter(isPresent)];
+	const readDenied = readDeniedPaths(role, host);
+	const writableWithinDenied = writablePaths.filter((writable) => isInsideAny(readDenied, writable));
+	return {
+		ok: true,
+		plan: {
+			launcher: role.network.access === "open" ? "open-network" : "runtime-cli",
+			policy: {
+				network: networkPolicy(role),
+				filesystem: {
+					denyRead: literalEntries(readDenied),
+					allowRead: literalEntries([...writableWithinDenied, ...role.readableWithinDenied]),
+					...filesystemWrites(role, host, writablePaths)
+				},
+				terminalScope: isStandardLevel(role) ? "any" : "own",
+				allowAppleEvents: isStandardLevel(role)
+			},
+			launchEnv: Object.assign({ CLAUDE_CODE_TMPDIR: host.tempDir }, ...role.vendors.map((vendor) => VENDOR_PROFILES[vendor].launchEnv), launchHomeEnv(role, host)),
+			guardedEnv: guardedEnvFor(role, host),
+			requiredDirectories: unique([
+				host.tempDir,
+				...vendorWritableFolders(role, host),
+				...launchPrivateFolders(role, host)
+			]),
+			launchHomeLinks: launchHomeLinkCandidates(role, host).filter((link) => isPresent(link.targetPath))
+		}
+	};
+}
+//#endregion
 //#region server/ingest/core/ingest-shell-core.ts
 var SOURCE$4 = "shellHistory";
 var SHELLS = Object.freeze([
@@ -15526,12 +16035,15 @@ var writtenHomes = /* @__PURE__ */ new Set();
 var warnedTools = /* @__PURE__ */ new Set();
 var ensuredDataDirs = /* @__PURE__ */ new Set();
 var RTK_DATA_FOLDER = "rtk";
+function currentGlimmervoidHome() {
+	return glimmervoidHomeDir(os.homedir(), process.env);
+}
 function saneYoloHomeDir() {
-	return path.join(glimmervoidHomeDir(os.homedir(), process.env), "sane-yolo");
+	return path.join(currentGlimmervoidHome(), "sane-yolo");
 }
-function writeSaneYoloPolicy(homeDir) {
+function writeSaneYoloPolicy(homeDir, glimmervoidHome = currentGlimmervoidHome()) {
 	if (writtenHomes.has(homeDir)) return;
-	for (const [relativePath, contents] of Object.entries(SANE_YOLO_FILES)) {
+	for (const [relativePath, contents] of Object.entries(saneYoloFiles(path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER)))) {
 		const filePath = path.join(homeDir, relativePath);
 		const serialized = `${JSON.stringify(contents, null, 2)}\n`;
 		fs.mkdirSync(path.dirname(filePath), {
@@ -16245,430 +16757,6 @@ function proveMergedAcrossTips(probes) {
 	return mostCautiousProof;
 }
 //#endregion
-//#region server/guardrails/core/guardrails-policy-core.ts
-var VENDOR_PROFILES = Object.freeze({
-	claude: {
-		homeEntries: [".claude", ".claude.json"],
-		launchWritableFolders: ({ cwd, agentSessionId }) => [path.join("projects", encodeProjectDir(cwd)), ...agentSessionId === null ? [] : [path.join("session-env", agentSessionId)]],
-		launchPrivateFolders: ["shell-snapshots"],
-		launchHomeEnvName: null,
-		loginFiles: [".credentials.json"],
-		configEntries: [
-			"settings.json",
-			"settings.local.json",
-			"hooks",
-			"skills",
-			"plugins",
-			"commands",
-			"agents",
-			"CLAUDE.md",
-			"AGENTS.md"
-		],
-		apiDomains: ["api.anthropic.com", "platform.claude.com"],
-		launchEnv: { DISABLE_AUTOUPDATER: "1" }
-	},
-	codex: {
-		homeEntries: [".codex"],
-		launchWritableFolders: () => [],
-		launchPrivateFolders: [],
-		launchHomeEnvName: "CODEX_HOME",
-		loginFiles: ["auth.json"],
-		configEntries: [
-			"config.toml",
-			"AGENTS.md",
-			"skills",
-			"rules",
-			"prompts",
-			"hooks.json"
-		],
-		apiDomains: [
-			"chatgpt.com",
-			"*.chatgpt.com",
-			"auth.openai.com",
-			"api.openai.com",
-			"*.openai.com"
-		],
-		launchEnv: {}
-	}
-});
-var GUARDRAILS_VENDORS = Object.freeze(["claude", "codex"]);
-var UNWRAPPED_VENDOR_HOME_ENTRIES = Object.freeze([".grok"]);
-var CREDENTIAL_HOME_ENTRIES = Object.freeze([
-	".ssh",
-	".config/gh",
-	"Library/Keychains",
-	".git-credentials"
-]);
-var CLOUD_CREDENTIAL_HOME_ENTRIES = Object.freeze([
-	".aws",
-	".azure",
-	".config/gcloud",
-	".kube",
-	".docker",
-	".gnupg",
-	".netrc",
-	".npmrc"
-]);
-var STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES = Object.freeze(["Library/Keychains"]);
-var XDG_CONFIG_DEFAULT_HOME_PREFIX = ".config/";
-var SHARED_TEMP_DIRS = Object.freeze(["/tmp/claude", "/private/tmp/claude"]);
-var SHARED_HOME_WRITE_ENTRIES = Object.freeze([".npm/_logs"]);
-var GUARDRAILS_PLACEHOLDER_NAMES = Object.freeze([
-	".bash_profile",
-	".bashrc",
-	".claude",
-	".gitconfig",
-	".gitmodules",
-	".idea",
-	".mcp.json",
-	".profile",
-	".ripgreprc",
-	".vscode",
-	".zprofile",
-	".zshrc"
-]);
-var WHOLE_FILESYSTEM = "/";
-var GLIMMERVOID_CONFIG_SIBLING_ENTRIES = Object.freeze([
-	"bin",
-	"pairings.json",
-	"pairings-seen.json",
-	"plans",
-	"telegram-outbox.json",
-	"traces",
-	"uploads",
-	"usage-budget-state.json",
-	"usage-lanes.json",
-	"usage-warehouse.json",
-	"visions-intent.json"
-]);
-var GLIMMERVOID_HOME_STATE_ENTRIES = Object.freeze([
-	"benchmark-runs",
-	"benchmarks",
-	"config.json",
-	"factory",
-	"issues-cache.json",
-	"knowledge-graph",
-	"litellm-pricing.json",
-	"my-prs-state.json",
-	"my-prs-work",
-	"posthog-reports",
-	"posthog-state.json",
-	"posthog-work",
-	"recordings",
-	"guardrails-homes",
-	"guardrails-policies",
-	"sane-yolo",
-	"scratch",
-	"sounds",
-	"team-review-repos",
-	"team-review-state.json",
-	"team-review-work",
-	"team-review-worktrees",
-	"telemetry-pending-crash.json",
-	"telemetry.json",
-	"tmp",
-	"update-check.json",
-	"update-journal.json",
-	"workflows-state.json",
-	"workflows-work"
-]);
-var RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS = Object.freeze(["commands", "agents"]);
-var GUARDED_PROXY_BYPASS = "localhost,::1,169.254.0.0/16,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16";
-var HOOK_LOOPBACK_HOST = "127.0.0.1";
-var AGENT_SESSION_ID_SHAPE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var STANDARD_OPEN_NETWORK = Object.freeze({
-	allowAllUnixSockets: true,
-	allowMachLookup: ["*"]
-});
-var STRICT_OPEN_NETWORK = Object.freeze({ allowAllUnixSockets: false });
-function unique(entries) {
-	return [...new Set(entries)];
-}
-function literalEntries(entryPaths) {
-	return unique(entryPaths).map((entryPath) => ({
-		path: entryPath,
-		literal: true
-	}));
-}
-function homePaths(host, homeEntries) {
-	return homeEntries.map((entry) => path.join(host.homeDir, entry));
-}
-function isInsideAny(parents, child) {
-	return parents.some((parent) => isPathInside(parent, child));
-}
-function vendorStatePaths(host, vendor, stateFolderEntries) {
-	return stateFolderEntries.map((entry) => path.join(host.vendorLocations[vendor].stateFolder, entry));
-}
-function vendorHeldPaths(host, vendor) {
-	const { stateFolder, configFiles, otherHomes } = host.vendorLocations[vendor];
-	return [
-		stateFolder,
-		...configFiles,
-		...otherHomes
-	];
-}
-function launchHomeOf(host, vendor) {
-	return path.join(host.launchHomeDir, vendor);
-}
-function vendorsWithLaunchHome(role) {
-	if (role.vendorHome.scope === "state") return [];
-	return role.vendors.filter((vendor) => VENDOR_PROFILES[vendor].launchHomeEnvName !== null);
-}
-function vendorWritableFolders(role, host) {
-	const { vendorHome } = role;
-	if (vendorHome.scope === "state") return role.vendors.map((vendor) => host.vendorLocations[vendor].stateFolder);
-	return role.vendors.flatMap((vendor) => {
-		const profile = VENDOR_PROFILES[vendor];
-		if (profile.launchHomeEnvName !== null) return [launchHomeOf(host, vendor)];
-		return vendorStatePaths(host, vendor, profile.launchWritableFolders(vendorHome));
-	});
-}
-function launchPrivateFolders(role, host) {
-	if (role.vendorHome.scope === "state") return [];
-	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].launchPrivateFolders));
-}
-function launchHomeLinkCandidates(role, host) {
-	return vendorsWithLaunchHome(role).flatMap((vendor) => {
-		const { configEntries, loginFiles } = VENDOR_PROFILES[vendor];
-		const linkFor = (entry, isLogin) => ({
-			linkPath: path.join(launchHomeOf(host, vendor), entry),
-			targetPath: path.join(host.vendorLocations[vendor].stateFolder, entry),
-			isLogin
-		});
-		return [...configEntries.map((entry) => linkFor(entry, false)), ...loginFiles.map((entry) => linkFor(entry, true))];
-	});
-}
-function launchHomeEnv(role, host) {
-	return Object.fromEntries(vendorsWithLaunchHome(role).flatMap((vendor) => {
-		const envName = VENDOR_PROFILES[vendor].launchHomeEnvName;
-		return envName === null ? [] : [[envName, launchHomeOf(host, vendor)]];
-	}));
-}
-function vendorLoginFiles(role, host) {
-	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].loginFiles));
-}
-function roleWritableRoots(role) {
-	return [
-		...role.writableRoots,
-		...role.lockedCheckouts,
-		...role.commitCheckouts.flatMap(({ checkout, gitDir }) => [checkout, gitDir])
-	];
-}
-function alwaysWritablePaths(role, host) {
-	return [
-		host.tempDir,
-		...roleWritableRoots(role),
-		...vendorWritableFolders(role, host)
-	];
-}
-function commitCheckoutWriteDenies({ checkout, gitDir }) {
-	const gitPointer = path.join(checkout, ".git");
-	const gitDirDenies = [path.join(gitDir, "hooks"), path.join(gitDir, "config")];
-	if (path.resolve(gitPointer) === path.resolve(gitDir)) return gitDirDenies;
-	return [gitPointer, ...gitDirDenies];
-}
-function writeDeniesWhenPresent(role, host) {
-	const writablePaths = alwaysWritablePaths(role, host);
-	const sharedHomeWrites = homePaths(host, SHARED_HOME_WRITE_ENTRIES).filter((sharedPath) => !isInsideAny(roleWritableRoots(role), sharedPath));
-	const vendorConfig = role.vendors.flatMap((vendor) => [...vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].configEntries), ...host.vendorLocations[vendor].configFiles]).filter((configPath) => isInsideAny(writablePaths, configPath));
-	return [
-		...SHARED_TEMP_DIRS,
-		...sharedHomeWrites,
-		...vendorConfig,
-		...role.commitCheckouts.flatMap(commitCheckoutWriteDenies)
-	];
-}
-function lockedCheckoutWriteDenies(role) {
-	return role.lockedCheckouts.flatMap((checkout) => [path.join(checkout, ".git"), path.join(checkout, ".claude")]);
-}
-function lockedClaudeMountPoints(role) {
-	return role.lockedCheckouts.flatMap((checkout) => RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS.map((folder) => path.join(checkout, ".claude", folder)));
-}
-function guardrailsPlaceholderPaths(role) {
-	return unique([...(role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : []).flatMap((workingFolder) => GUARDRAILS_PLACEHOLDER_NAMES.map((placeholderName) => path.join(workingFolder, placeholderName))), ...lockedCheckoutWriteDenies(role)]);
-}
-function homeEntriesNamedLike(host, homeEntries) {
-	return host.homeEntryNames.filter((entryName) => homeEntries.some((homeEntry) => entryName.startsWith(homeEntry)));
-}
-function relocatedXdgConfigPaths(host, homeEntries) {
-	const xdgConfigHome = host.relocatedXdgConfigHome;
-	if (xdgConfigHome === null) return [];
-	return homeEntries.filter((entry) => entry.startsWith(XDG_CONFIG_DEFAULT_HOME_PREFIX)).map((entry) => path.join(xdgConfigHome, entry.slice(8)));
-}
-function isStandardLevel(role) {
-	return role.guardrailLevel === "standard";
-}
-function blockedCredentialHomeEntries(role) {
-	const credentialHomeEntries = [...CREDENTIAL_HOME_ENTRIES, ...CLOUD_CREDENTIAL_HOME_ENTRIES];
-	if (!isStandardLevel(role)) return credentialHomeEntries;
-	return credentialHomeEntries.filter((entry) => !STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES.includes(entry));
-}
-function credentialWriteBlocks(role, host) {
-	const credentialHomeEntries = blockedCredentialHomeEntries(role);
-	return [...homePaths(host, credentialHomeEntries), ...relocatedXdgConfigPaths(host, credentialHomeEntries)];
-}
-function glimmervoidStateWriteBlocks(role, host) {
-	const keptWritable = alwaysWritablePaths(role, host);
-	const configFolder = path.dirname(host.glimmervoidConfigFile);
-	const homeEntries = [
-		...GLIMMERVOID_HOME_STATE_ENTRIES,
-		...GLIMMERVOID_CONFIG_SIBLING_ENTRIES,
-		...host.glimmervoidHomeEntryNames
-	].map((entryName) => path.join(host.glimmervoidHome, entryName));
-	const configSiblings = GLIMMERVOID_CONFIG_SIBLING_ENTRIES.map((entryName) => path.join(configFolder, entryName));
-	return unique([
-		host.glimmervoidConfigFile,
-		...homeEntries,
-		...configSiblings
-	]).filter((entryPath) => !keptWritable.some((writable) => isPathInside(entryPath, writable)));
-}
-function standardWriteBlockCandidates(role, host) {
-	if (!isStandardLevel(role)) return [];
-	return unique([
-		...credentialWriteBlocks(role, host),
-		...glimmervoidStateWriteBlocks(role, host),
-		...role.blockedPaths ?? []
-	]);
-}
-function readDeniedPaths(role, host) {
-	const otherVendors = GUARDRAILS_VENDORS.filter((vendor) => !role.vendors.includes(vendor));
-	const otherVendorHomeEntries = [...otherVendors.flatMap((vendor) => VENDOR_PROFILES[vendor].homeEntries), ...UNWRAPPED_VENDOR_HOME_ENTRIES];
-	const credentialHomeEntries = blockedCredentialHomeEntries(role);
-	return [
-		...homePaths(host, [
-			...credentialHomeEntries,
-			...otherVendorHomeEntries,
-			...homeEntriesNamedLike(host, otherVendorHomeEntries)
-		]),
-		...relocatedXdgConfigPaths(host, credentialHomeEntries),
-		...otherVendors.flatMap((vendor) => vendorHeldPaths(host, vendor)),
-		...host.unwrappedVendorHomes,
-		host.glimmervoidHome,
-		...launchPrivateFolders(role, host),
-		...role.readDenied
-	];
-}
-function guardrailsPolicyProbePaths(role, host) {
-	return unique([
-		...writeDeniesWhenPresent(role, host),
-		...vendorLoginFiles(role, host),
-		...launchHomeLinkCandidates(role, host).map((link) => link.targetPath)
-	]);
-}
-function isValidPort(port) {
-	return Number.isInteger(port) && port >= 1 && port <= 65535;
-}
-function hostNamedPaths(host) {
-	const relocatedXdgConfigHomes = host.relocatedXdgConfigHome === null ? [] : [host.relocatedXdgConfigHome];
-	return [
-		host.homeDir,
-		host.glimmervoidHome,
-		host.glimmervoidConfigFile,
-		host.tempDir,
-		host.launchHomeDir,
-		...relocatedXdgConfigHomes,
-		...host.unwrappedVendorHomes,
-		...GUARDRAILS_VENDORS.flatMap((vendor) => vendorHeldPaths(host, vendor))
-	];
-}
-function guardrailsRoleRefusal(role, host) {
-	const launchCwds = role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : [];
-	const relativePath = [
-		...hostNamedPaths(host),
-		...roleWritableRoots(role),
-		...role.readDenied,
-		...role.readableWithinDenied,
-		...launchCwds
-	].find((namedPath) => !path.isAbsolute(namedPath));
-	if (relativePath !== void 0) return `guardrails policy path is not absolute: ${relativePath}`;
-	const rootOverProtectedHome = [...roleWritableRoots(role), ...vendorWritableFolders(role, host)].find((root) => isPathInside(root, host.homeDir) || isPathInside(root, host.glimmervoidHome));
-	if (rootOverProtectedHome !== void 0) return `writable root ${rootOverProtectedHome} contains the home folder or the Glimmervoid home`;
-	const writablePaths = alwaysWritablePaths(role, host);
-	const reallowedAncestor = role.readableWithinDenied.find((readable) => writablePaths.some((writable) => isPathInside(readable, writable, { allowEqual: false })));
-	if (reallowedAncestor !== void 0) return `readable path ${reallowedAncestor} is an ancestor of a writable root`;
-	if (role.network.access === "allowlist" && role.network.hookPort !== null && !isValidPort(role.network.hookPort)) return "hook listener port is invalid";
-	const agentSessionId = role.vendorHome.scope === "launch" ? role.vendorHome.agentSessionId : null;
-	if (agentSessionId !== null && !AGENT_SESSION_ID_SHAPE.test(agentSessionId)) return "agent session id is invalid";
-	return null;
-}
-function networkPolicy(role) {
-	if (role.network.access === "open") return isStandardLevel(role) ? { ...STANDARD_OPEN_NETWORK } : { ...STRICT_OPEN_NETWORK };
-	if (role.network.access === "none") return {
-		allowedDomains: [],
-		deniedDomains: [],
-		allowLocalBinding: false,
-		allowAllUnixSockets: false
-	};
-	const hookEndpoint = role.network.hookPort === null ? [] : [`${HOOK_LOOPBACK_HOST}:${role.network.hookPort}`];
-	const vendorDomains = role.vendors.flatMap((vendor) => VENDOR_PROFILES[vendor].apiDomains);
-	return {
-		allowedDomains: unique([
-			...hookEndpoint,
-			...vendorDomains,
-			...role.network.domains
-		]),
-		deniedDomains: [],
-		strictAllowlist: true,
-		allowLocalBinding: false,
-		allowAllUnixSockets: false
-	};
-}
-function guardedEnvFor(role, host) {
-	if (role.network.access === "allowlist") return {
-		NO_PROXY: GUARDED_PROXY_BYPASS,
-		no_proxy: GUARDED_PROXY_BYPASS,
-		[HOOK_VIA_GUARDRAILS_PROXY_ENV]: "1"
-	};
-	if (role.network.access === "open") return { TMPDIR: host.tempDir };
-	return {};
-}
-function filesystemWrites(role, host, writablePaths) {
-	if (isStandardLevel(role)) return {
-		allowWrite: literalEntries([WHOLE_FILESYSTEM, ...writablePaths]),
-		denyWrite: literalEntries(host.writeBlockedPaths)
-	};
-	const isPresent = (candidate) => host.existingPaths.has(candidate);
-	return {
-		allowWrite: literalEntries(writablePaths),
-		denyWrite: literalEntries([...writeDeniesWhenPresent(role, host).filter(isPresent), ...lockedCheckoutWriteDenies(role)])
-	};
-}
-function buildGuardrailsLaunchPlan(role, host) {
-	const refusal = guardrailsRoleRefusal(role, host);
-	if (refusal !== null) return {
-		ok: false,
-		reason: refusal
-	};
-	const isPresent = (candidate) => host.existingPaths.has(candidate);
-	const writablePaths = [...alwaysWritablePaths(role, host), ...vendorLoginFiles(role, host).filter(isPresent)];
-	const readDenied = readDeniedPaths(role, host);
-	const writableWithinDenied = writablePaths.filter((writable) => isInsideAny(readDenied, writable));
-	return {
-		ok: true,
-		plan: {
-			launcher: role.network.access === "open" ? "open-network" : "runtime-cli",
-			policy: {
-				network: networkPolicy(role),
-				filesystem: {
-					denyRead: literalEntries(readDenied),
-					allowRead: literalEntries([...writableWithinDenied, ...role.readableWithinDenied]),
-					...filesystemWrites(role, host, writablePaths)
-				},
-				terminalScope: isStandardLevel(role) ? "any" : "own",
-				allowAppleEvents: isStandardLevel(role)
-			},
-			launchEnv: Object.assign({ CLAUDE_CODE_TMPDIR: host.tempDir }, ...role.vendors.map((vendor) => VENDOR_PROFILES[vendor].launchEnv), launchHomeEnv(role, host)),
-			guardedEnv: guardedEnvFor(role, host),
-			requiredDirectories: unique([
-				host.tempDir,
-				...vendorWritableFolders(role, host),
-				...launchPrivateFolders(role, host)
-			]),
-			launchHomeLinks: launchHomeLinkCandidates(role, host).filter((link) => isPresent(link.targetPath))
-		}
-	};
-}
-//#endregion
 //#region shared/repo.ts
 var REPO_SLUG = "johncwaters/glimmervoid";
 //#endregion
@@ -21131,6 +21219,7 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 	};
 	let publishedActiveAgents = 0;
 	let publishedAwaitingBackgroundTasks = false;
+	let publishedHasBackgroundWork = false;
 	const wakeups = /* @__PURE__ */ new Map();
 	let wakeupSeq = 0;
 	let wakeupExpiryTimer = null;
@@ -21162,12 +21251,20 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 	function awaitingBackgroundTasks() {
 		return detectBackgroundAgents && gateHeldReady !== null && port.state() === "RUNNING" && tasks.isOnlyBackgroundTasks();
 	}
+	function hasBackgroundWork() {
+		if (activeAgentCount() > 0) return true;
+		if (detectBackgroundAgents && tasks.hasLiveMonitor()) return true;
+		return pendingWakeup() !== null;
+	}
 	function publishAgentsChange() {
+		if (port.isDestroyed()) return;
 		const activeAgents = activeAgentCount();
 		const awaiting = awaitingBackgroundTasks();
-		if (activeAgents === publishedActiveAgents && awaiting === publishedAwaitingBackgroundTasks) return;
+		const backgroundWork = hasBackgroundWork();
+		if (activeAgents === publishedActiveAgents && awaiting === publishedAwaitingBackgroundTasks && backgroundWork === publishedHasBackgroundWork) return;
 		publishedActiveAgents = activeAgents;
 		publishedAwaitingBackgroundTasks = awaiting;
+		publishedHasBackgroundWork = backgroundWork;
 		port.emit("agents-change", {
 			activeAgents,
 			awaitingBackgroundTasks: awaiting
@@ -21394,6 +21491,7 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 		wakeupExpiryTimer.unref();
 	}
 	function emitWakeupChange() {
+		if (port.isDestroyed()) return;
 		port.emit("wakeup-change", { pendingWakeup: pendingWakeup() });
 		armWakeupExpiryTimer();
 	}
@@ -21418,6 +21516,7 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 		trackSubagent,
 		activeAgentCount,
 		awaitingBackgroundTasks,
+		hasBackgroundWork,
 		emitAgentsChange,
 		clearAgents,
 		stashGateHeldReady,
@@ -21776,11 +21875,8 @@ var Session = class extends EventEmitter {
 		this._taskTitleSources.customTitle = this.customTitle;
 		this._updateTaskTitle();
 	}
-	get settledTaskTitle() {
-		return resolveTaskTitle({
-			...this._taskTitleSources,
-			pendingPromptTitle: null
-		}).taskTitle;
+	get refinedTaskTitle() {
+		return this._taskTitleSources.refinedTitle ?? null;
 	}
 	get persistedTaskTitle() {
 		return buildPersistedTaskTitle(this._taskTitleSources);
@@ -22113,6 +22209,9 @@ var Session = class extends EventEmitter {
 	get hookSeen() {
 		return this._hookSeen;
 	}
+	get hasBackgroundWork() {
+		return this.backgroundTracking.hasBackgroundWork();
+	}
 	get agentToken() {
 		return this._agentToken;
 	}
@@ -23276,6 +23375,7 @@ var GuardrailsLaunchOwner = z.object({
 	ownerHost: z.string(),
 	ownerPidNamespace: z.string().nullable(),
 	ownsTempDir: z.boolean(),
+	keptTempFolderName: z.string().min(1).optional(),
 	logins: z.array(GuardrailsLaunchLogin),
 	placeholderPaths: z.array(z.string().min(1))
 }).strict();
@@ -23387,11 +23487,45 @@ function bridgeSocketLauncherEnv(inheritedTempDirectory, platform) {
 	return { TMPDIR: SHORT_BRIDGE_SOCKET_FOLDER };
 }
 //#endregion
+//#region server/prune-files.ts
+var MS_PER_DAY = 864e5;
+function idForEntry(entry, suffixes) {
+	for (const suffix of suffixes) {
+		if (suffix.length === 0) return entry;
+		if (entry.endsWith(suffix)) return entry.slice(0, -suffix.length);
+	}
+	return null;
+}
+async function pruneAgedFiles({ directory, suffixes, retainDays, now = Date.now(), isRetainedId = () => false, entryMode = "file", fsPromises = fs.promises }) {
+	let entries;
+	try {
+		entries = await fsPromises.readdir(directory);
+	} catch {
+		return [];
+	}
+	const cutoff = now - retainDays * MS_PER_DAY;
+	const removedIds = [];
+	for (const entry of entries) {
+		const id = idForEntry(entry, suffixes);
+		if (!id || isRetainedId(id)) continue;
+		const filePath = path.join(directory, entry);
+		try {
+			if ((await fsPromises.stat(filePath)).mtimeMs >= cutoff) continue;
+			if (entryMode === "directory") await fsPromises.rm(filePath, {
+				recursive: true,
+				force: true
+			});
+			if (entryMode === "file") await fsPromises.unlink(filePath);
+			removedIds.push(id);
+		} catch {}
+	}
+	return removedIds;
+}
+//#endregion
 //#region server/guardrails/guardrails-launch.ts
 var LAUNCH_ID_SHAPE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 var GUARDED_ENV_COMMAND = "/usr/bin/env";
 var POLICY_FOLDER = "guardrails-policies";
-var TEMP_FOLDER = "guardrails-temp";
 var LAUNCH_HOME_FOLDER = "guardrails-homes";
 var START_FOLDER = "start";
 var OWNER_FILE_SUFFIX = ".owner.json";
@@ -23399,6 +23533,7 @@ var ENTER_FOLDER_SCRIPT = "cd \"$1\" && shift && exec \"$@\"";
 var LOGIN_FILE_MODE = 384;
 var ABSENT_PATH_DENY_PLATFORM = "darwin";
 var OWN_PID_NAMESPACE_LINK = "/proc/self/ns/pid";
+var SESSION_TEMP_RETAIN_DAYS = 7;
 async function isPresent(candidate) {
 	try {
 		await access(candidate);
@@ -23597,7 +23732,7 @@ async function sweepOrphanedGuardrailsLaunches(log = console) {
 					policyPath: path.join(policyDir, `${launchId}.json`),
 					ownerPath,
 					launchHomeDir: path.join(glimmervoidHome, LAUNCH_HOME_FOLDER, launchId),
-					ownedTempDir: owner.ownsTempDir ? path.join(glimmervoidHome, TEMP_FOLDER, launchId) : null
+					ownedTempDir: owner.ownsTempDir ? path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER, launchId) : null
 				}, owner, launchId, { onlyNewerLogins: true });
 				removedLaunchCount += 1;
 			} catch (error) {
@@ -23609,6 +23744,24 @@ async function sweepOrphanedGuardrailsLaunches(log = console) {
 		log.warn(`[guardrails] could not sweep leftover launch folders: ${errorMessage(error)}`);
 	}
 }
+async function pruneLeftoverSessionTempFolders(glimmervoidHome, liveSessionIds, log = console) {
+	const policyEntryNames = await readdir(path.join(glimmervoidHome, POLICY_FOLDER)).catch((error) => {
+		if (isMissingFileError(error)) return [];
+		log.warn(`[guardrails] kept every session temp folder because the launch list could not be read: ${errorMessage(error)}`);
+		return null;
+	});
+	if (policyEntryNames === null) return;
+	const ownerEntryNames = policyEntryNames.filter((entryName) => entryName.endsWith(OWNER_FILE_SUFFIX));
+	const owners = await Promise.all(ownerEntryNames.map((entryName) => readOwnerFile(path.join(glimmervoidHome, POLICY_FOLDER, entryName))));
+	const tempFolderNamesWithOwners = /* @__PURE__ */ new Set([...ownerEntryNames.map((entryName) => entryName.slice(0, -11)), ...owners.flatMap((owner) => owner?.keptTempFolderName === void 0 ? [] : [owner.keptTempFolderName])]);
+	await pruneAgedFiles({
+		directory: path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER),
+		suffixes: [""],
+		retainDays: SESSION_TEMP_RETAIN_DAYS,
+		entryMode: "directory",
+		isRetainedId: (id) => liveSessionIds.has(id) || tempFolderNamesWithOwners.has(id)
+	});
+}
 function launcherCommand(plan, policyPath) {
 	if (plan.launcher === "open-network") return {
 		file: process.execPath,
@@ -23642,11 +23795,19 @@ function enteringFolder(enterDir, file, args) {
 		...args
 	];
 }
-async function prepareGuardrailsLaunch({ role, launchId, tempDir, enterDir }) {
+function launchTempDirFor(glimmervoidHome, launchId, tempDir, keptTempFolderName) {
+	if (tempDir !== void 0) return path.resolve(tempDir);
+	return path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER, keptTempFolderName ?? launchId);
+}
+async function prepareGuardrailsLaunch({ role, launchId, tempDir, keptTempFolderName, enterDir }) {
 	if (!LAUNCH_ID_SHAPE.test(launchId)) return {
 		ok: false,
 		reason: "guardrails launch id is invalid"
 	};
+	if (keptTempFolderName !== void 0 && !LAUNCH_ID_SHAPE.test(keptTempFolderName)) return {
+		ok: false,
+		reason: "guardrails temp folder name is invalid"
+	};
 	try {
 		const policyDir = path.join(glimmervoidHomeDir$1(), POLICY_FOLDER);
 		await mkdir(policyDir, {
@@ -23659,8 +23820,8 @@ async function prepareGuardrailsLaunch({ role, launchId, tempDir, enterDir }) {
 			withRealRoots(role),
 			readOwnPidNamespace()
 		]);
-		const ownsTempDir = tempDir === void 0;
-		const launchTempDir = tempDir === void 0 ? path.join(glimmervoidHome, TEMP_FOLDER, launchId) : path.resolve(tempDir);
+		const ownsTempDir = tempDir === void 0 && keptTempFolderName === void 0;
+		const launchTempDir = launchTempDirFor(glimmervoidHome, launchId, tempDir, keptTempFolderName);
 		const launchHomeDir = path.join(glimmervoidHome, LAUNCH_HOME_FOLDER, launchId);
 		const vendorLocations = await resolveVendorLocations(process.env, homeDir);
 		if (vendorLocations === null) return {
@@ -23717,6 +23878,7 @@ async function prepareGuardrailsLaunch({ role, launchId, tempDir, enterDir }) {
 			ownerHost: os.hostname(),
 			ownerPidNamespace,
 			ownsTempDir,
+			...keptTempFolderName === void 0 ? {} : { keptTempFolderName },
 			logins: plan.launchHomeLinks.filter((link) => link.isLogin).map(({ linkPath, targetPath }) => ({
 				linkPath,
 				targetPath
@@ -28743,41 +28905,6 @@ async function commitAndLandFactoryLedger({ projectPath, ledger, targetBranch, m
 	}
 }
 //#endregion
-//#region server/prune-files.ts
-var MS_PER_DAY = 864e5;
-function idForEntry(entry, suffixes) {
-	for (const suffix of suffixes) {
-		if (suffix.length === 0) return entry;
-		if (entry.endsWith(suffix)) return entry.slice(0, -suffix.length);
-	}
-	return null;
-}
-async function pruneAgedFiles({ directory, suffixes, retainDays, now = Date.now(), isRetainedId = () => false, entryMode = "file", fsPromises = fs.promises }) {
-	let entries;
-	try {
-		entries = await fsPromises.readdir(directory);
-	} catch {
-		return [];
-	}
-	const cutoff = now - retainDays * MS_PER_DAY;
-	const removedIds = [];
-	for (const entry of entries) {
-		const id = idForEntry(entry, suffixes);
-		if (!id || isRetainedId(id)) continue;
-		const filePath = path.join(directory, entry);
-		try {
-			if ((await fsPromises.stat(filePath)).mtimeMs >= cutoff) continue;
-			if (entryMode === "directory") await fsPromises.rm(filePath, {
-				recursive: true,
-				force: true
-			});
-			if (entryMode === "file") await fsPromises.unlink(filePath);
-			removedIds.push(id);
-		} catch {}
-	}
-	return removedIds;
-}
-//#endregion
 //#region server/factory/factory-decision-log.ts
 function createFactoryDecisionLog({ homeDir = glimmervoidHomeDir$1(), now = Date.now, log = console, redact = (text) => text, onDecision } = {}) {
 	const prunedDayByProject = /* @__PURE__ */ new Map();
@@ -36925,7 +37052,7 @@ function createTaskTitleRefiner({ getConfig, spawnLane, nowFn = () => Date.now()
 		const request = {
 			session,
 			revision: session.taskTitlePromptRevision,
-			currentTitle: session.settledTaskTitle,
+			currentTitle: session.refinedTaskTitle,
 			recentPrompts: session.recentTaskPrompts
 		};
 		queuedBySession.set(session, request);
@@ -47102,6 +47229,7 @@ function createUploadsWiring({ configPath, liveSessionIds, setIntervalFn = DEFAU
 			isRetainedId: (id) => retainedSessionIds.has(id),
 			fsPromises: fs.promises
 		});
+		await pruneLeftoverSessionTempFolders(path.dirname(uploadsRoot), retainedSessionIds);
 	}
 	async function start() {
 		if (timer) return;
@@ -52032,7 +52160,7 @@ function parseSinceParam(url) {
 	return Number.isFinite(n) ? n : null;
 }
 function registerControlHandlers(controlWss, deps) {
-	const { sessions, agentSessions = /* @__PURE__ */ new Map(), config, configStore, broadcastControl, generateProjectId, applyConfigReload, applySettingsReload, requestShutdown, requestRestart, handleClientFocus, buildHealthSnapshot, getUpdateStatus, getUpdateJournal = null, getPostTurnLeftoversNotice = null, recheckPostTurnLeftovers = null, checkNow = null, applyUpdate = null, isStaging = null, noteRestartRequested = null, getRadarStatus, posthogReportsDir = null, posthogSetIssueStatus = null, radarArchiveInvestigation = null, getTeamReviewStatus = null, getMyPrsStatus = null, getIssuesStatus = null, issues = null, teamReview = null, myPrs = null, getBenchmarkStatus = null, getFactoryState = null, benchmarks = null, factory = null, createGithubClient = createPrGh, issueProjectRepos = null, serverBuild = () => null, getUsageSessions = null, getUsageReport = null, requestUsageReport = null, getPlanLimits = null, controlReplayLog = null, getRtkInstallStatus = () => null, resolveRtkPath = () => getRtkPath(), conversationFs = fs, conversationGit = runGitForConversationHistory, conversationProjectsDir = claudeProjectsDir(process.env, os.homedir()), readTracePage = null, readPlanRevision = null, decidePlanReview = null, sessionDocs = null, changeMapNarrator = null } = deps;
+	const { sessions, agentSessions = /* @__PURE__ */ new Map(), config, configStore, broadcastControl, generateProjectId, applyConfigReload, applySettingsReload, requestShutdown, requestRestart, handleClientFocus, buildHealthSnapshot, getUpdateStatus, getUpdateJournal = null, getPostTurnLeftoversNotice = null, recheckPostTurnLeftovers = null, checkNow = null, applyUpdate = null, noteRestartRequested = null, getRadarStatus, posthogReportsDir = null, posthogSetIssueStatus = null, radarArchiveInvestigation = null, getTeamReviewStatus = null, getMyPrsStatus = null, getIssuesStatus = null, issues = null, teamReview = null, myPrs = null, getBenchmarkStatus = null, getFactoryState = null, benchmarks = null, factory = null, createGithubClient = createPrGh, issueProjectRepos = null, serverBuild = () => null, getUsageSessions = null, getUsageReport = null, requestUsageReport = null, getPlanLimits = null, controlReplayLog = null, getRtkInstallStatus = () => null, resolveRtkPath = () => getRtkPath(), conversationFs = fs, conversationGit = runGitForConversationHistory, conversationProjectsDir = claudeProjectsDir(process.env, os.homedir()), readTracePage = null, readPlanRevision = null, decidePlanReview = null, sessionDocs = null, changeMapNarrator = null } = deps;
 	const changeMaps = createChangeMapService({
 		sessions,
 		narrator: changeMapNarrator,
@@ -53256,29 +53384,16 @@ function registerControlHandlers(controlWss, deps) {
 		}
 		await checkNow();
 	}
-	async function handleUpdateApply(msg, ws) {
+	async function handleUpdateApply(_msg, ws) {
 		if (!applyUpdate) {
 			sendError(ws, "[update-apply-unavailable] Update application is unavailable.");
 			return;
 		}
 		const outcome = await applyUpdate();
-		if (!outcome.ok) {
-			sendError(ws, `[${outcome.reason || "update-refused"}] ${outcome.message}`);
-			return;
-		}
-		if (msg.restartWhenStaged !== true) return;
-		const confirmedSessionIds = new Set(msg.confirmedSessionIds ?? []);
-		if ([...sessions.keys(), ...agentSessions.keys()].some((liveSessionId) => !confirmedSessionIds.has(liveSessionId))) {
-			sendError(ws, "[update-restart-skipped] The update is staged, but sessions started since you confirmed. Restart when ready.");
-			return;
-		}
-		handleRestart(msg, ws);
+		if (outcome.ok) return;
+		sendError(ws, `[${outcome.reason || "update-refused"}] ${outcome.message}`);
 	}
-	function handleRestart(_msg, ws) {
-		if (isStaging?.()) {
-			sendError(ws, "[update-staging] Wait for the update staging run to finish before restarting.");
-			return;
-		}
+	function handleRestart(_msg) {
 		noteRestartRequested?.();
 		console.log("[control] Restart requested via UI");
 		broadcastControl({ type: "restarting" });
@@ -53739,7 +53854,6 @@ function createBackendControl(dependencies) {
 		recheckPostTurnLeftovers: dependencies.recheckPostTurnLeftovers,
 		checkNow: dependencies.checkNow,
 		applyUpdate: dependencies.applyUpdate,
-		isStaging: dependencies.isStaging,
 		noteRestartRequested: dependencies.noteRestartRequested,
 		getRadarStatus: () => posthog.getStatus(),
 		posthogSetIssueStatus: (args) => posthog.setIssueStatus(args),
@@ -53791,6 +53905,7 @@ var PREVIOUS_DEPENDENCIES_BACKUP_NAME = "prev-node_modules";
 var QUARANTINED_DIST_NAME = "broken-dist";
 var QUARANTINED_DEPENDENCIES_NAME = "broken-node_modules";
 var SUPPORTED_UPDATE_REMOTE = "origin";
+var LOWEST_SCHEDULING_PRIORITY = "19";
 var TRANSITIONS_ALLOWED_BY_STATE = Object.freeze({
 	idle: Object.freeze(["begin-run"]),
 	running: Object.freeze([
@@ -53952,6 +54067,21 @@ function planSteps({ lockfileChanged }) {
 		"build"
 	];
 }
+function lowPriorityCommand({ file, args, platform }) {
+	if (platform === "win32") return {
+		file,
+		args
+	};
+	return {
+		file: "nice",
+		args: [
+			"-n",
+			LOWEST_SCHEDULING_PRIORITY,
+			file,
+			...args
+		]
+	};
+}
 function planHandOffRenames({ root, stagingPath, lockfileChanged }) {
 	const updatePath = `${root}/.glimmervoid/update`;
 	const renames = [{
@@ -54478,6 +54608,7 @@ function createBackendUpdateCheck(dependencies) {
 	let inFlight = null;
 	let lastChannel = normalizeUpdateChannel(dependencies.config.updateChannel);
 	let lastSurfacedIdentity = null;
+	let lastDownloadedIdentity = null;
 	let pendingChannelRefresh = false;
 	let stopped = false;
 	const now = dependencies.now || (() => Date.now());
@@ -54581,6 +54712,26 @@ function createBackendUpdateCheck(dependencies) {
 		const latestRelease = status.latest || shortSha(status.latestSha) || "unknown";
 		dependencies.logger.log(`[update] A newer glimmervoid is available: ${currentRelease} -> ${latestRelease}. Update: ${status.command}`);
 	}
+	function downloadInBackground(status) {
+		const downloadUpdate = dependencies.downloadUpdate;
+		if (!downloadUpdate || dependencies.config.checkForUpdates === false) return;
+		if (!status.updateAvailable || status.applyRefusal) return;
+		const identity = status.latestSha || status.latest;
+		if (!identity || identity === lastDownloadedIdentity) return;
+		lastDownloadedIdentity = identity;
+		dependencies.logger.log(`[update] downloading ${status.latest || shortSha(status.latestSha)} in the background`);
+		const allowRetryAtNextCheck = () => {
+			if (lastDownloadedIdentity === identity) lastDownloadedIdentity = null;
+		};
+		downloadUpdate().then((outcome) => {
+			if (outcome.ok) return;
+			allowRetryAtNextCheck();
+			dependencies.logger.log(`[update] background download stopped: ${outcome.message}`);
+		}, (error) => {
+			allowRetryAtNextCheck();
+			dependencies.logger.log(`[update] background download failed: ${String(error)}`);
+		});
+	}
 	function runCheck(ttlMs) {
 		if (inFlight) return inFlight;
 		const channel = normalizeUpdateChannel(dependencies.config.updateChannel);
@@ -54599,6 +54750,7 @@ function createBackendUpdateCheck(dependencies) {
 			});
 			const status = recordStatus(updateResult, checkedAt, channel);
 			surfaceAvailableUpdate(status);
+			downloadInBackground(status);
 			return status;
 		}).finally(() => {
 			inFlight = null;
@@ -54621,6 +54773,7 @@ function createBackendUpdateCheck(dependencies) {
 		recordedStatus = null;
 		lastLaneSignature = null;
 		lastSurfacedIdentity = null;
+		lastDownloadedIdentity = null;
 		updateAbort?.abort();
 		return true;
 	}
@@ -55054,6 +55207,7 @@ function createSessionGuardrails({ getSettings, uploadsRoot, guardrailsRefusal =
 				const prepared = await prepareGuardrails({
 					role,
 					launchId: facts.launchId,
+					keptTempFolderName: request.sessionId,
 					enterDir: cwd
 				});
 				if (!prepared.ok) return {
@@ -55374,7 +55528,12 @@ function createUpdateApplyLane(dependencies) {
 			stepId,
 			now: clock()
 		}));
-		const outcome = await command(file, args, cwd, timeout);
+		const throttled = lowPriorityCommand({
+			file,
+			args,
+			platform: dependencies.platform || process.platform
+		});
+		const outcome = await command(throttled.file, throttled.args, cwd, timeout);
 		journal = appendStepOutput(journal, stepId, outcome.output);
 		if (!outcome.ok) throw new Error(outcome.reason || `${stepId} failed`);
 		await publish(finishStep(journal, {
@@ -55669,9 +55828,6 @@ function createUpdateApplyLane(dependencies) {
 		activeRun = run;
 		await run;
 	}
-	function isStaging() {
-		return inFlight;
-	}
 	function isRestartRequested() {
 		return restartRequested;
 	}
@@ -55778,7 +55934,6 @@ function createUpdateApplyLane(dependencies) {
 		getJournal,
 		handOffStagedUpdate,
 		isRestartRequested,
-		isStaging,
 		noteRestartRequested,
 		startAfterListening,
 		stop,
@@ -56780,6 +56935,12 @@ function createBackend(httpServer, options = {}) {
 		visionsSetup.maybeApply();
 		laneAssembly.restartDynamicLanes();
 	}
+	function downloadUpdateOnceListening() {
+		if (httpServer.listening) return updateApply.applyUpdate();
+		return new Promise((resolve) => {
+			httpServer.once("listening", resolve);
+		}).then(() => updateApply.applyUpdate());
+	}
 	const updateCheck = createBackendUpdateCheck({
 		config,
 		currentVersion: packageJson.version,
@@ -56790,7 +56951,8 @@ function createBackend(httpServer, options = {}) {
 		isRestartRequested: () => updateApply.isRestartRequested(),
 		getControlClientCount: () => controlWss.clients.size,
 		broadcastControl,
-		logger: console
+		logger: console,
+		...options.downloadUpdatesInBackground ? { downloadUpdate: downloadUpdateOnceListening } : {}
 	});
 	const updateApply = createUpdateApplyLane({
 		gitWorkspace: assembledGitWorkspace,
@@ -56913,7 +57075,6 @@ function createBackend(httpServer, options = {}) {
 		recheckPostTurnLeftovers,
 		checkNow: updateCheck.checkNow,
 		applyUpdate: updateApply.applyUpdate,
-		isStaging: updateApply.isStaging,
 		noteRestartRequested: () => {
 			updateApply.noteRestartRequested();
 			updateCheck.refreshApplyAvailability();
@@ -56953,6 +57114,7 @@ function createBackend(httpServer, options = {}) {
 	updateCheck.start();
 	return {
 		shutdown,
+		handOffStagedUpdate: updateApply.handOffStagedUpdate,
 		port,
 		app,
 		telemetry,
@@ -57002,7 +57164,10 @@ function isBootRefusal(error) {
 }
 function createBackendOrExit() {
 	try {
-		return createBackend(server, { staticDir: "auto" });
+		return createBackend(server, {
+			staticDir: "auto",
+			downloadUpdatesInBackground: true
+		});
 	} catch (err) {
 		if (!isBootRefusal(err)) throw err;
 		console.error(err.message);
@@ -57010,7 +57175,7 @@ function createBackendOrExit() {
 	}
 }
 var backend = createBackendOrExit();
-var { shutdown, port, app, telemetry, version } = backend;
+var { shutdown, handOffStagedUpdate, port, app, telemetry, version } = backend;
 server.on("request", app);
 function writeTerminalTitle(sequence) {
 	if (!process.stdout.isTTY) return;
@@ -57091,7 +57256,8 @@ var { requestShutdown } = createLifecycle({
 	httpServer: server,
 	extraServers: remoteServers,
 	spawn,
-	exit: exitWithClearedTerminalTitle
+	exit: exitWithClearedTerminalTitle,
+	beforeHandOff: handOffStagedUpdate
 });
 function handleShutdownSignal(signal) {
 	console.log(`\n${signal} received - shutting down...`);