glimmervoid 0.38.1 → 0.38.2

package/dist/chunks/{main-DeiiNNI7.js → main-BNSbP-Yk.js}

@@ -12,7 +12,7 @@ import { t as HOOK_VIA_GUARDRAILS_PROXY_ENV } from "./guardrails-proxy-core-BI3r
 import { t as refocusReplyFor } from "./refocus-core-BKQKllq7.js";
 import { a as positiveIntOr, c as textOr, i as numberOr, n as isRecord, o as positiveNumberOr, r as nonNegativeIntOr, s as rawTextOr, t as coercedNumberOr } from "./coerce-NSst8oRP.js";
 import { n as parseJsonRecord, t as parseJsonOrNull } from "./json-core-dfa_7Fak.js";
-import { a as SANE_YOLO_FILES } from "./rtk-hook-core-VrUafGAp.js";
+import { s as saneYoloFiles } from "./rtk-hook-core-B-MpzPin.js";
 import { _ as lineStartOffsets, a as projectForUri, b as replacedSpanOfWholeTextChange, c as visionsLaneReloadSignature, d as applyDidOpen, f as createDocStore, g as lineOfOffset, h as getDoc, i as isUriInProjects, l as applyDidChange, m as formatRange, n as applyEditorNotification, o as resolveVisionsScopeProjects, p as detectBlankLineBoundary, r as createEditorState, s as scopePathsOf, t as ACTIVITY_METHOD, u as applyDidClose, v as listDocs, x as uriOfParams, y as offsetOfPosition } from "./ingest-editor-core-B2tycW_m.js";
 import { n as DEFAULT_MAX_MS, r as nextBackoffMs, t as DEFAULT_BASE_MS } from "./backoff-DjVpfHk7.js";
 import { n as unrefTimer, t as DEFAULT_TIMER_FNS } from "./timer-deps-u2DAQLok.js";
@@ -20,18 +20,18 @@ import { o as permitsHelpCommand, r as describeSessionLimits } from "./session-r
 import { $ as CoherenceTicketCreated, C as WorkflowsState, G as USAGE_INTEGER_RANGES, N as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, T as USAGE_VENDOR_KEYS, X as CoherenceOrient, a as DEFAULT_FACTORY_CHECKS, b as WorkflowSearchNode, et as CoherenceWorkCreated, o as DEFAULT_FACTORY_PROTECTED_PATHS, tt as CoherenceWorkInspect, v as WorkflowCommentBody, w as USAGE_COST_MODES, x as WorkflowsSettings, y as WorkflowLabelName } from "./browser-config-BrBT8269.js";
 import { _ as isSingleFactoryPathSegment, a as FactoryControlRequest, c as FactoryHarnessVerdict, d as FactoryQueueIntentRequest, g as FactoryWorkerEvent, i as FactoryConsequences, l as FactoryLaneState, m as FactoryReviewerOutput, n as FACTORY_ERROR_MAX_CHARS, p as FactoryReviewVerdict, r as FACTORY_PROTECTED_PATH_FLOOR, s as FactoryHarnessStateLine, u as FactoryProjectState } from "./factory-D7ryES9n.js";
 import { _ as parseAgentVerb, a as decideFactoryControlAllowance, c as deriveChildSessionName, d as describePushRouteRefusal, f as describeUnavailableFactoryState, g as isOrchestratorAgentVerb, i as decideEditAllowance, l as describeFactorySetupProfile, m as formatFactoryStatus, n as decideAgentRequest, o as decideSpawnAllowance, p as findSessionProjectId, r as decideAttentionAllowance, s as decideTicketAction, t as REFUSAL_REASON, u as describePushLanding } from "./agent-api-core-B_mUSenR.js";
-import { s as GLIMMERVOID_SECRET_KEYS } from "./grok-y65HOvlU.js";
+import { s as GLIMMERVOID_SECRET_KEYS } from "./grok-B6bsCgdd.js";
 import { n as shellQuote } from "./hook-command-core-qTNK-xMF.js";
 import { C as headroomFromReadings, D as parseMemAvailableBytes, E as parseCgroupV2Path, S as cgroupLimitBytes, T as parseCgroupBytes, _ as createSpawnGate, a as jsonStateLoadError, c as loadedJsonValue, d as writeJsonAtomicSync, f as writeTextAtomic, g as createSerialQueue, h as createMemoryAdmission, i as createJsonStateWriter, m as createKeyedSerialQueue, n as appendJsonLines, o as loadJsonStateFile, p as writeTextAtomicSync, r as createJsonStateStore, s as loadJsonStateFileSync, t as appendJsonLine, u as writeJsonAtomic, v as isQueueAdmissionAbandoned, w as memoryReserveBytes, x as cgroupAncestorPaths, y as isQueueAdmissionTimeout } from "./json-file-CIJf0Cel.js";
-import { B as buildExceptionProperties, F as TELEMETRY_BATCH_URL, G as decideTelemetryConsent, H as classifySessionExit, I as TELEMETRY_FLAGS_URL, J as parsePosthogReleaseId, K as exceptionFingerprint, L as adapterBucket, P as FIRST_RUN_NOTICE, Q as stableConfigKey, R as buildAiGenerationEvents, U as decideIsDevInstall, V as buildFactoryDecisionEvent, W as decideRemoteTelemetryState, Y as resolveProjectToken, a as generateProjectId, at as usablePrefixes, b as validateSettingsBlock, ct as comparableDirectoryPath, d as assetForPlatform, et as DEFAULT_BRANCH_GC_PREFIXES, f as decideRtkInstall, g as verifyDigest, h as isRtkBinaryName, i as ensureProjectIds, it as sessionIdFromBranch, lt as isSameDirectoryPath, m as installTargetPath, n as DEFAULT_CONFIG, nt as planBranchGc, o as glimmervoidHomeDir$1, ot as worktreeIntegrationTips, p as findEscapingArchiveMember, q as nodeMajorVersion, r as createConfigStore, rt as planWorktreeGc, st as canonicalizePath, t as ABORT_CONFIG_SAVE, tt as matchedPrefix, v as mergeSettingsBlock, y as settingsBlockSpecFor, z as buildBrowserExceptionProperties } from "./config-store-CKcDJebD.js";
+import { B as buildExceptionProperties, F as TELEMETRY_BATCH_URL, G as decideTelemetryConsent, H as classifySessionExit, I as TELEMETRY_FLAGS_URL, J as parsePosthogReleaseId, K as exceptionFingerprint, L as adapterBucket, P as FIRST_RUN_NOTICE, Q as stableConfigKey, R as buildAiGenerationEvents, U as decideIsDevInstall, V as buildFactoryDecisionEvent, W as decideRemoteTelemetryState, Y as resolveProjectToken, a as generateProjectId, at as usablePrefixes, b as validateSettingsBlock, ct as comparableDirectoryPath, d as assetForPlatform, et as DEFAULT_BRANCH_GC_PREFIXES, f as decideRtkInstall, g as verifyDigest, h as isRtkBinaryName, i as ensureProjectIds, it as sessionIdFromBranch, lt as isSameDirectoryPath, m as installTargetPath, n as DEFAULT_CONFIG, nt as planBranchGc, o as glimmervoidHomeDir$1, ot as worktreeIntegrationTips, p as findEscapingArchiveMember, q as nodeMajorVersion, r as createConfigStore, rt as planWorktreeGc, st as canonicalizePath, t as ABORT_CONFIG_SAVE, tt as matchedPrefix, v as mergeSettingsBlock, y as settingsBlockSpecFor, z as buildBrowserExceptionProperties } from "./config-store-BUNZs4j7.js";
 import { a as ConfigUpdate, c as RUNTIME_CONFIG_SCALAR_KEYS, l as TASK_TITLE_SOURCE_PRIORITY, o as PersistedTaskTitle, r as BrowserConfig, s as ProjectConfig, u as configIssueMessage } from "./config-CjawSOBk.js";
 import { A as ChangeMap, B as MergedPrListing, C as GithubIssuePullRequestsRepository, D as IssuesSearchResponse, E as IssueUpdate, F as BenchmarkJudgement, G as TELEMETRY_EVENT_SCHEMAS, H as PrCheckoutCaseInput, I as BenchmarkRun, J as FACTORY_DECISION_OUTPUT_MAX_BYTES, L as BenchmarkStatus, M as BenchmarkActionRequest, N as BenchmarkCase, O as IssuesState, P as BenchmarkId, R as BenchmarkSuite, S as planTitle, T as IssueKey, V as MinedPrReviewData, W as PendingCrashReport, Y as FactoryDecisionLogLine, _ as PLAN_RESULT_HOOK_EVENT, a as parseDataClientMessage, b as PlanRevision, c as DIFF_ANNOTATION_NOTE_MAX_CHARS, d as MAX_RAW_LINE_CHARS, f as TraceCheckpoint, g as PLAN_HOOK_OUTPUT_MAX_CHARS, h as PLAN_HOOK_EVENT, i as parseDataAttachHistory, j as changeMapFactId, k as IssuesStatus, l as InstallFlavor, m as PLAN_BODY_CAP_BYTES, n as HookEnvelope, o as CONTROL_FRAME_MAX_BYTES, p as TraceRecord, q as TelemetryState, r as DEEP_HISTORY_SCROLLBACK_LINES, s as ClientMessage, t as HTTP_URL_RE, u as UpdateJournal, v as PLAN_TOOL_NAME, w as GithubIssueResponse, x as parseExitPlanModeHookPayload, y as PlanDecision, z as CommitComparison } from "./contracts-HVCEJfxs.js";
-import { A as shouldPersistWarehouse, C as isUsageFile, D as resolveProjectsDirs, E as projectDirCandidates, M as claudeCode, O as scopedClaudeRoots, S as grokRootCandidates, T as passOutcome, _ as continuationDelayMs, a as describeAgentResolvability, b as expandTilde, c as isKnownAgentId, d as resolveAdapter, f as setCustomAgents, g as codexSessionIdFromPath, h as codexRootCandidates, i as customAgentFingerprint, j as splitLines$1, k as shouldEvaluateDespiteIoFailures, l as listAgentIds, m as codexHomes, n as cachedAgentResolvability, o as getAdapter, p as codexFallbackRoots, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resetCommandCache, v as decideFileRead, w as laneSpendStatus, x as grokHomes, y as dedupeCodexFiles } from "./adapters-B0EJp_oE.js";
-import { t as HOOK_TOOLS } from "./hook-tools-BkxllUHE.js";
+import { A as shouldPersistWarehouse, C as isUsageFile, D as resolveProjectsDirs, E as projectDirCandidates, M as claudeCode, O as scopedClaudeRoots, S as grokRootCandidates, T as passOutcome, _ as continuationDelayMs, a as describeAgentResolvability, b as expandTilde, c as isKnownAgentId, d as resolveAdapter, f as setCustomAgents, g as codexSessionIdFromPath, h as codexRootCandidates, i as customAgentFingerprint, j as splitLines$1, k as shouldEvaluateDespiteIoFailures, l as listAgentIds, m as codexHomes, n as cachedAgentResolvability, o as getAdapter, p as codexFallbackRoots, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resetCommandCache, v as decideFileRead, w as laneSpendStatus, x as grokHomes, y as dedupeCodexFiles } from "./adapters-CAHxZYT3.js";
+import { t as HOOK_TOOLS } from "./hook-tools-Dl7-r2Eb.js";
 import { a as formatSshPublicKey, c as orderAgentSockets, i as commitSigningShimText, l as parseSshPublicKey, n as NO_AGENT_HOLDS_KEY, o as isForwardedAgentDirName, r as agentListsKey, s as isSignableGitObject, t as COMMIT_SIGNING_SHIM_NAME } from "./ssh-signing-core-CRhVVWNW.js";
-import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-DlquYoVe.js";
+import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-C_s2pnLC.js";
 import { _ as escapeMarkup, g as createLaneLog, n as createVisionsSetup } from "./visions-setup-B-ZeRdsi.js";
-import { t as getRtkPath } from "./rtk-resolver-C_micGrL.js";
+import { t as getRtkPath } from "./rtk-resolver-BgoPsEhT.js";
 import { createRequire } from "node:module";
 import fs, { constants, readFileSync } from "node:fs";
 import path, { join, resolve } from "node:path";
@@ -7099,6 +7099,7 @@ function createSessionEventWiring(dependencies) {
 		};
 		let lastPersistedWasActive = null;
 		let lastPersistedWasWorking = null;
+		let isTurnWorking = null;
 		let spawnedAtMs = null;
 		const persistProjectField = (field, value) => {
 			Promise.resolve(persistSessionField(dependencies.configStore, dependencies.config, session.id, field, value)).catch((error) => dependencies.logger.warn(`[config] Failed to persist ${field}: ${errorMessage(error)}`));
@@ -7113,6 +7114,14 @@ function createSessionEventWiring(dependencies) {
 				duration_seconds: durationSeconds
 			});
 		};
+		const persistWasWorking = () => {
+			const hasBackgroundWork = session.hasBackgroundWork;
+			if (isTurnWorking === null && !hasBackgroundWork) return;
+			const wasWorking = isTurnWorking === true || hasBackgroundWork;
+			if (wasWorking === lastPersistedWasWorking) return;
+			lastPersistedWasWorking = wasWorking;
+			persistProjectField("wasWorking", wasWorking);
+		};
 		let liveTranscriptPath = null;
 		session.on("claude-session-id", ({ id, vendor, isResumeTarget, transcriptPath }) => {
 			liveTranscriptPath = transcriptPath;
@@ -7200,11 +7209,9 @@ function createSessionEventWiring(dependencies) {
 				lastPersistedWasActive = nextWasActive;
 				persistProjectField("wasActive", nextWasActive);
 			}
-			const nextWasWorking = decideWasWorkingFlip(to, event, detail?.isIdleCompactionActivity === true);
-			if (nextWasWorking !== null && nextWasWorking !== lastPersistedWasWorking) {
-				lastPersistedWasWorking = nextWasWorking;
-				persistProjectField("wasWorking", nextWasWorking);
-			}
+			const nextIsTurnWorking = decideWasWorkingFlip(to, event, detail?.isIdleCompactionActivity === true);
+			if (nextIsTurnWorking !== null) isTurnWorking = nextIsTurnWorking;
+			persistWasWorking();
 			const acknowledgeDecision = decideAcknowledge(isAcknowledgeDeferredForCompaction, from, event, detail?.isIdleCompactionActivity === true);
 			isAcknowledgeDeferredForCompaction = acknowledgeDecision.isAcknowledgeDeferred;
 			clearCompactionConfirm();
@@ -7261,6 +7268,7 @@ function createSessionEventWiring(dependencies) {
 			timestamp: Date.now()
 		}));
 		session.on("agents-change", (payload) => {
+			persistWasWorking();
 			dependencies.telegramChannel.recheck(session.id);
 			dependencies.broadcastControl({
 				type: "session-agents",
@@ -7272,6 +7280,7 @@ function createSessionEventWiring(dependencies) {
 			});
 		});
 		relay("wakeup-change", "session-wakeup");
+		session.on("wakeup-change", persistWasWorking);
 		relay("prompt-kind-change", "session-prompt");
 		relay("conversation-change", "session-conversation");
 		session.on("merge-status", ({ mergeStatus, reason, parked }) => {
@@ -7501,7 +7510,7 @@ async function listRepoConversations({ repoPath, projectsDir, git, fsMod, limit
 //#endregion
 //#region session/core/auto-resume.ts
 var RESUME_ID_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var AUTO_CONTINUE_PROMPT = "Glimmervoid restarted while you were mid-turn and resumed this conversation. This is not a new request from the user: carry on with the task you were working on. Any tool call, background command or subagent that was running was stopped and its outcome is unknown, so check the current state, such as files, git status and running processes, before relying on it or repeating it. Do not recap or ask for confirmation. If the task was already finished, say so in one line.";
+var AUTO_CONTINUE_PROMPT = "Glimmervoid restarted while you were working and resumed this conversation. This is not a new request from the user: carry on with the task you were working on. Any tool call, background command, monitor or subagent that was running was stopped and its outcome is unknown, so check the current state, such as files, git status and running processes, before relying on it or repeating it, and start again any background work the task still needs. Do not recap or ask for confirmation. If the task was already finished, say so in one line.";
 function pickAutoResume(projects, config) {
 	if (!Array.isArray(projects)) return [];
 	if (config && config.autoResume === false) return [];
@@ -14722,6 +14731,12 @@ function createTaskRegistry({ agentTtlMs = DEFAULT_AGENT_TTL_MS, shellTaskTtlMs
 			reap(at);
 			return isOnlyBackgroundTasks(declaredEntries, countedAgents, idleTaskIds, (entry) => entryAgeMs(entry, at), shellTaskTtlMs, idleTeammateNames.size, teammateTaskTtlMs, agentTtlMs);
 		},
+		hasLiveMonitor() {
+			const at = now();
+			reap(at);
+			if (declaredEntries === null) return false;
+			return declaredEntries.some((entry) => entry.type === "monitor" && !(entry.id && idleTaskIds.has(entry.id)) && entryAgeMs(entry, at) < shellTaskTtlMs);
+		},
 		getBreakdown() {
 			return breakdown;
 		},
@@ -15243,6 +15258,431 @@ function createSessionOutput(options) {
 	};
 }
 //#endregion
+//#region server/guardrails/core/guardrails-policy-core.ts
+var VENDOR_PROFILES = Object.freeze({
+	claude: {
+		homeEntries: [".claude", ".claude.json"],
+		launchWritableFolders: ({ cwd, agentSessionId }) => [path.join("projects", encodeProjectDir(cwd)), ...agentSessionId === null ? [] : [path.join("session-env", agentSessionId)]],
+		launchPrivateFolders: ["shell-snapshots"],
+		launchHomeEnvName: null,
+		loginFiles: [".credentials.json"],
+		configEntries: [
+			"settings.json",
+			"settings.local.json",
+			"hooks",
+			"skills",
+			"plugins",
+			"commands",
+			"agents",
+			"CLAUDE.md",
+			"AGENTS.md"
+		],
+		apiDomains: ["api.anthropic.com", "platform.claude.com"],
+		launchEnv: { DISABLE_AUTOUPDATER: "1" }
+	},
+	codex: {
+		homeEntries: [".codex"],
+		launchWritableFolders: () => [],
+		launchPrivateFolders: [],
+		launchHomeEnvName: "CODEX_HOME",
+		loginFiles: ["auth.json"],
+		configEntries: [
+			"config.toml",
+			"AGENTS.md",
+			"skills",
+			"rules",
+			"prompts",
+			"hooks.json"
+		],
+		apiDomains: [
+			"chatgpt.com",
+			"*.chatgpt.com",
+			"auth.openai.com",
+			"api.openai.com",
+			"*.openai.com"
+		],
+		launchEnv: {}
+	}
+});
+var GUARDRAILS_VENDORS = Object.freeze(["claude", "codex"]);
+var UNWRAPPED_VENDOR_HOME_ENTRIES = Object.freeze([".grok"]);
+var CREDENTIAL_HOME_ENTRIES = Object.freeze([
+	".ssh",
+	".config/gh",
+	"Library/Keychains",
+	".git-credentials"
+]);
+var CLOUD_CREDENTIAL_HOME_ENTRIES = Object.freeze([
+	".aws",
+	".azure",
+	".config/gcloud",
+	".kube",
+	".docker",
+	".gnupg",
+	".netrc",
+	".npmrc"
+]);
+var STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES = Object.freeze(["Library/Keychains"]);
+var XDG_CONFIG_DEFAULT_HOME_PREFIX = ".config/";
+var SHARED_TEMP_DIRS = Object.freeze(["/tmp/claude", "/private/tmp/claude"]);
+var SHARED_HOME_WRITE_ENTRIES = Object.freeze([".npm/_logs"]);
+var GUARDRAILS_PLACEHOLDER_NAMES = Object.freeze([
+	".bash_profile",
+	".bashrc",
+	".claude",
+	".gitconfig",
+	".gitmodules",
+	".idea",
+	".mcp.json",
+	".profile",
+	".ripgreprc",
+	".vscode",
+	".zprofile",
+	".zshrc"
+]);
+var WHOLE_FILESYSTEM = "/";
+var GUARDRAILS_TEMP_FOLDER = "guardrails-temp";
+var GLIMMERVOID_CONFIG_SIBLING_ENTRIES = Object.freeze([
+	"bin",
+	"pairings.json",
+	"pairings-seen.json",
+	"plans",
+	"telegram-outbox.json",
+	"traces",
+	"uploads",
+	"usage-budget-state.json",
+	"usage-lanes.json",
+	"usage-warehouse.json",
+	"visions-intent.json"
+]);
+var GLIMMERVOID_HOME_STATE_ENTRIES = Object.freeze([
+	"benchmark-runs",
+	"benchmarks",
+	"config.json",
+	"factory",
+	"issues-cache.json",
+	"knowledge-graph",
+	"litellm-pricing.json",
+	"my-prs-state.json",
+	"my-prs-work",
+	"posthog-reports",
+	"posthog-state.json",
+	"posthog-work",
+	"recordings",
+	"guardrails-homes",
+	"guardrails-policies",
+	"sane-yolo",
+	"scratch",
+	"sounds",
+	"team-review-repos",
+	"team-review-state.json",
+	"team-review-work",
+	"team-review-worktrees",
+	"telemetry-pending-crash.json",
+	"telemetry.json",
+	"tmp",
+	"update-check.json",
+	"update-journal.json",
+	"workflows-state.json",
+	"workflows-work"
+]);
+var RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS = Object.freeze(["commands", "agents"]);
+var GUARDED_PROXY_BYPASS = "localhost,::1,169.254.0.0/16,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16";
+var HOOK_LOOPBACK_HOST = "127.0.0.1";
+var AGENT_SESSION_ID_SHAPE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
+var STANDARD_OPEN_NETWORK = Object.freeze({
+	allowAllUnixSockets: true,
+	allowMachLookup: ["*"]
+});
+var STRICT_OPEN_NETWORK = Object.freeze({ allowAllUnixSockets: false });
+function unique(entries) {
+	return [...new Set(entries)];
+}
+function literalEntries(entryPaths) {
+	return unique(entryPaths).map((entryPath) => ({
+		path: entryPath,
+		literal: true
+	}));
+}
+function homePaths(host, homeEntries) {
+	return homeEntries.map((entry) => path.join(host.homeDir, entry));
+}
+function isInsideAny(parents, child) {
+	return parents.some((parent) => isPathInside(parent, child));
+}
+function vendorStatePaths(host, vendor, stateFolderEntries) {
+	return stateFolderEntries.map((entry) => path.join(host.vendorLocations[vendor].stateFolder, entry));
+}
+function vendorHeldPaths(host, vendor) {
+	const { stateFolder, configFiles, otherHomes } = host.vendorLocations[vendor];
+	return [
+		stateFolder,
+		...configFiles,
+		...otherHomes
+	];
+}
+function launchHomeOf(host, vendor) {
+	return path.join(host.launchHomeDir, vendor);
+}
+function vendorsWithLaunchHome(role) {
+	if (role.vendorHome.scope === "state") return [];
+	return role.vendors.filter((vendor) => VENDOR_PROFILES[vendor].launchHomeEnvName !== null);
+}
+function vendorWritableFolders(role, host) {
+	const { vendorHome } = role;
+	if (vendorHome.scope === "state") return role.vendors.map((vendor) => host.vendorLocations[vendor].stateFolder);
+	return role.vendors.flatMap((vendor) => {
+		const profile = VENDOR_PROFILES[vendor];
+		if (profile.launchHomeEnvName !== null) return [launchHomeOf(host, vendor)];
+		return vendorStatePaths(host, vendor, profile.launchWritableFolders(vendorHome));
+	});
+}
+function launchPrivateFolders(role, host) {
+	if (role.vendorHome.scope === "state") return [];
+	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].launchPrivateFolders));
+}
+function launchHomeLinkCandidates(role, host) {
+	return vendorsWithLaunchHome(role).flatMap((vendor) => {
+		const { configEntries, loginFiles } = VENDOR_PROFILES[vendor];
+		const linkFor = (entry, isLogin) => ({
+			linkPath: path.join(launchHomeOf(host, vendor), entry),
+			targetPath: path.join(host.vendorLocations[vendor].stateFolder, entry),
+			isLogin
+		});
+		return [...configEntries.map((entry) => linkFor(entry, false)), ...loginFiles.map((entry) => linkFor(entry, true))];
+	});
+}
+function launchHomeEnv(role, host) {
+	return Object.fromEntries(vendorsWithLaunchHome(role).flatMap((vendor) => {
+		const envName = VENDOR_PROFILES[vendor].launchHomeEnvName;
+		return envName === null ? [] : [[envName, launchHomeOf(host, vendor)]];
+	}));
+}
+function vendorLoginFiles(role, host) {
+	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].loginFiles));
+}
+function roleWritableRoots(role) {
+	return [
+		...role.writableRoots,
+		...role.lockedCheckouts,
+		...role.commitCheckouts.flatMap(({ checkout, gitDir }) => [checkout, gitDir])
+	];
+}
+function alwaysWritablePaths(role, host) {
+	return [
+		host.tempDir,
+		...roleWritableRoots(role),
+		...vendorWritableFolders(role, host)
+	];
+}
+function commitCheckoutWriteDenies({ checkout, gitDir }) {
+	const gitPointer = path.join(checkout, ".git");
+	const gitDirDenies = [path.join(gitDir, "hooks"), path.join(gitDir, "config")];
+	if (path.resolve(gitPointer) === path.resolve(gitDir)) return gitDirDenies;
+	return [gitPointer, ...gitDirDenies];
+}
+function writeDeniesWhenPresent(role, host) {
+	const writablePaths = alwaysWritablePaths(role, host);
+	const sharedHomeWrites = homePaths(host, SHARED_HOME_WRITE_ENTRIES).filter((sharedPath) => !isInsideAny(roleWritableRoots(role), sharedPath));
+	const vendorConfig = role.vendors.flatMap((vendor) => [...vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].configEntries), ...host.vendorLocations[vendor].configFiles]).filter((configPath) => isInsideAny(writablePaths, configPath));
+	return [
+		...SHARED_TEMP_DIRS,
+		...sharedHomeWrites,
+		...vendorConfig,
+		...role.commitCheckouts.flatMap(commitCheckoutWriteDenies)
+	];
+}
+function lockedCheckoutWriteDenies(role) {
+	return role.lockedCheckouts.flatMap((checkout) => [path.join(checkout, ".git"), path.join(checkout, ".claude")]);
+}
+function lockedClaudeMountPoints(role) {
+	return role.lockedCheckouts.flatMap((checkout) => RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS.map((folder) => path.join(checkout, ".claude", folder)));
+}
+function guardrailsPlaceholderPaths(role) {
+	return unique([...(role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : []).flatMap((workingFolder) => GUARDRAILS_PLACEHOLDER_NAMES.map((placeholderName) => path.join(workingFolder, placeholderName))), ...lockedCheckoutWriteDenies(role)]);
+}
+function homeEntriesNamedLike(host, homeEntries) {
+	return host.homeEntryNames.filter((entryName) => homeEntries.some((homeEntry) => entryName.startsWith(homeEntry)));
+}
+function relocatedXdgConfigPaths(host, homeEntries) {
+	const xdgConfigHome = host.relocatedXdgConfigHome;
+	if (xdgConfigHome === null) return [];
+	return homeEntries.filter((entry) => entry.startsWith(XDG_CONFIG_DEFAULT_HOME_PREFIX)).map((entry) => path.join(xdgConfigHome, entry.slice(8)));
+}
+function isStandardLevel(role) {
+	return role.guardrailLevel === "standard";
+}
+function blockedCredentialHomeEntries(role) {
+	const credentialHomeEntries = [...CREDENTIAL_HOME_ENTRIES, ...CLOUD_CREDENTIAL_HOME_ENTRIES];
+	if (!isStandardLevel(role)) return credentialHomeEntries;
+	return credentialHomeEntries.filter((entry) => !STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES.includes(entry));
+}
+function credentialWriteBlocks(role, host) {
+	const credentialHomeEntries = blockedCredentialHomeEntries(role);
+	return [...homePaths(host, credentialHomeEntries), ...relocatedXdgConfigPaths(host, credentialHomeEntries)];
+}
+function glimmervoidStateWriteBlocks(role, host) {
+	const keptWritable = alwaysWritablePaths(role, host);
+	const configFolder = path.dirname(host.glimmervoidConfigFile);
+	const homeEntries = [
+		...GLIMMERVOID_HOME_STATE_ENTRIES,
+		...GLIMMERVOID_CONFIG_SIBLING_ENTRIES,
+		...host.glimmervoidHomeEntryNames
+	].map((entryName) => path.join(host.glimmervoidHome, entryName));
+	const configSiblings = GLIMMERVOID_CONFIG_SIBLING_ENTRIES.map((entryName) => path.join(configFolder, entryName));
+	return unique([
+		host.glimmervoidConfigFile,
+		...homeEntries,
+		...configSiblings
+	]).filter((entryPath) => !keptWritable.some((writable) => isPathInside(entryPath, writable)));
+}
+function standardWriteBlockCandidates(role, host) {
+	if (!isStandardLevel(role)) return [];
+	return unique([
+		...credentialWriteBlocks(role, host),
+		...glimmervoidStateWriteBlocks(role, host),
+		...role.blockedPaths ?? []
+	]);
+}
+function readDeniedPaths(role, host) {
+	const otherVendors = GUARDRAILS_VENDORS.filter((vendor) => !role.vendors.includes(vendor));
+	const otherVendorHomeEntries = [...otherVendors.flatMap((vendor) => VENDOR_PROFILES[vendor].homeEntries), ...UNWRAPPED_VENDOR_HOME_ENTRIES];
+	const credentialHomeEntries = blockedCredentialHomeEntries(role);
+	return [
+		...homePaths(host, [
+			...credentialHomeEntries,
+			...otherVendorHomeEntries,
+			...homeEntriesNamedLike(host, otherVendorHomeEntries)
+		]),
+		...relocatedXdgConfigPaths(host, credentialHomeEntries),
+		...otherVendors.flatMap((vendor) => vendorHeldPaths(host, vendor)),
+		...host.unwrappedVendorHomes,
+		host.glimmervoidHome,
+		...launchPrivateFolders(role, host),
+		...role.readDenied
+	];
+}
+function guardrailsPolicyProbePaths(role, host) {
+	return unique([
+		...writeDeniesWhenPresent(role, host),
+		...vendorLoginFiles(role, host),
+		...launchHomeLinkCandidates(role, host).map((link) => link.targetPath)
+	]);
+}
+function isValidPort(port) {
+	return Number.isInteger(port) && port >= 1 && port <= 65535;
+}
+function hostNamedPaths(host) {
+	const relocatedXdgConfigHomes = host.relocatedXdgConfigHome === null ? [] : [host.relocatedXdgConfigHome];
+	return [
+		host.homeDir,
+		host.glimmervoidHome,
+		host.glimmervoidConfigFile,
+		host.tempDir,
+		host.launchHomeDir,
+		...relocatedXdgConfigHomes,
+		...host.unwrappedVendorHomes,
+		...GUARDRAILS_VENDORS.flatMap((vendor) => vendorHeldPaths(host, vendor))
+	];
+}
+function guardrailsRoleRefusal(role, host) {
+	const launchCwds = role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : [];
+	const relativePath = [
+		...hostNamedPaths(host),
+		...roleWritableRoots(role),
+		...role.readDenied,
+		...role.readableWithinDenied,
+		...launchCwds
+	].find((namedPath) => !path.isAbsolute(namedPath));
+	if (relativePath !== void 0) return `guardrails policy path is not absolute: ${relativePath}`;
+	const rootOverProtectedHome = [...roleWritableRoots(role), ...vendorWritableFolders(role, host)].find((root) => isPathInside(root, host.homeDir) || isPathInside(root, host.glimmervoidHome));
+	if (rootOverProtectedHome !== void 0) return `writable root ${rootOverProtectedHome} contains the home folder or the Glimmervoid home`;
+	const writablePaths = alwaysWritablePaths(role, host);
+	const reallowedAncestor = role.readableWithinDenied.find((readable) => writablePaths.some((writable) => isPathInside(readable, writable, { allowEqual: false })));
+	if (reallowedAncestor !== void 0) return `readable path ${reallowedAncestor} is an ancestor of a writable root`;
+	if (role.network.access === "allowlist" && role.network.hookPort !== null && !isValidPort(role.network.hookPort)) return "hook listener port is invalid";
+	const agentSessionId = role.vendorHome.scope === "launch" ? role.vendorHome.agentSessionId : null;
+	if (agentSessionId !== null && !AGENT_SESSION_ID_SHAPE.test(agentSessionId)) return "agent session id is invalid";
+	return null;
+}
+function networkPolicy(role) {
+	if (role.network.access === "open") return isStandardLevel(role) ? { ...STANDARD_OPEN_NETWORK } : { ...STRICT_OPEN_NETWORK };
+	if (role.network.access === "none") return {
+		allowedDomains: [],
+		deniedDomains: [],
+		allowLocalBinding: false,
+		allowAllUnixSockets: false
+	};
+	const hookEndpoint = role.network.hookPort === null ? [] : [`${HOOK_LOOPBACK_HOST}:${role.network.hookPort}`];
+	const vendorDomains = role.vendors.flatMap((vendor) => VENDOR_PROFILES[vendor].apiDomains);
+	return {
+		allowedDomains: unique([
+			...hookEndpoint,
+			...vendorDomains,
+			...role.network.domains
+		]),
+		deniedDomains: [],
+		strictAllowlist: true,
+		allowLocalBinding: false,
+		allowAllUnixSockets: false
+	};
+}
+function guardedEnvFor(role, host) {
+	if (role.network.access === "allowlist") return {
+		NO_PROXY: GUARDED_PROXY_BYPASS,
+		no_proxy: GUARDED_PROXY_BYPASS,
+		[HOOK_VIA_GUARDRAILS_PROXY_ENV]: "1"
+	};
+	if (role.network.access === "open") return { TMPDIR: host.tempDir };
+	return {};
+}
+function filesystemWrites(role, host, writablePaths) {
+	if (isStandardLevel(role)) return {
+		allowWrite: literalEntries([WHOLE_FILESYSTEM, ...writablePaths]),
+		denyWrite: literalEntries(host.writeBlockedPaths)
+	};
+	const isPresent = (candidate) => host.existingPaths.has(candidate);
+	return {
+		allowWrite: literalEntries(writablePaths),
+		denyWrite: literalEntries([...writeDeniesWhenPresent(role, host).filter(isPresent), ...lockedCheckoutWriteDenies(role)])
+	};
+}
+function buildGuardrailsLaunchPlan(role, host) {
+	const refusal = guardrailsRoleRefusal(role, host);
+	if (refusal !== null) return {
+		ok: false,
+		reason: refusal
+	};
+	const isPresent = (candidate) => host.existingPaths.has(candidate);
+	const writablePaths = [...alwaysWritablePaths(role, host), ...vendorLoginFiles(role, host).filter(isPresent)];
+	const readDenied = readDeniedPaths(role, host);
+	const writableWithinDenied = writablePaths.filter((writable) => isInsideAny(readDenied, writable));
+	return {
+		ok: true,
+		plan: {
+			launcher: role.network.access === "open" ? "open-network" : "runtime-cli",
+			policy: {
+				network: networkPolicy(role),
+				filesystem: {
+					denyRead: literalEntries(readDenied),
+					allowRead: literalEntries([...writableWithinDenied, ...role.readableWithinDenied]),
+					...filesystemWrites(role, host, writablePaths)
+				},
+				terminalScope: isStandardLevel(role) ? "any" : "own",
+				allowAppleEvents: isStandardLevel(role)
+			},
+			launchEnv: Object.assign({ CLAUDE_CODE_TMPDIR: host.tempDir }, ...role.vendors.map((vendor) => VENDOR_PROFILES[vendor].launchEnv), launchHomeEnv(role, host)),
+			guardedEnv: guardedEnvFor(role, host),
+			requiredDirectories: unique([
+				host.tempDir,
+				...vendorWritableFolders(role, host),
+				...launchPrivateFolders(role, host)
+			]),
+			launchHomeLinks: launchHomeLinkCandidates(role, host).filter((link) => isPresent(link.targetPath))
+		}
+	};
+}
+//#endregion
 //#region server/ingest/core/ingest-shell-core.ts
 var SOURCE$4 = "shellHistory";
 var SHELLS = Object.freeze([
@@ -15595,12 +16035,15 @@ var writtenHomes = /* @__PURE__ */ new Set();
 var warnedTools = /* @__PURE__ */ new Set();
 var ensuredDataDirs = /* @__PURE__ */ new Set();
 var RTK_DATA_FOLDER = "rtk";
+function currentGlimmervoidHome() {
+	return glimmervoidHomeDir(os.homedir(), process.env);
+}
 function saneYoloHomeDir() {
-	return path.join(glimmervoidHomeDir(os.homedir(), process.env), "sane-yolo");
+	return path.join(currentGlimmervoidHome(), "sane-yolo");
 }
-function writeSaneYoloPolicy(homeDir) {
+function writeSaneYoloPolicy(homeDir, glimmervoidHome = currentGlimmervoidHome()) {
 	if (writtenHomes.has(homeDir)) return;
-	for (const [relativePath, contents] of Object.entries(SANE_YOLO_FILES)) {
+	for (const [relativePath, contents] of Object.entries(saneYoloFiles(path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER)))) {
 		const filePath = path.join(homeDir, relativePath);
 		const serialized = `${JSON.stringify(contents, null, 2)}\n`;
 		fs.mkdirSync(path.dirname(filePath), {
@@ -16314,430 +16757,6 @@ function proveMergedAcrossTips(probes) {
 	return mostCautiousProof;
 }
 //#endregion
-//#region server/guardrails/core/guardrails-policy-core.ts
-var VENDOR_PROFILES = Object.freeze({
-	claude: {
-		homeEntries: [".claude", ".claude.json"],
-		launchWritableFolders: ({ cwd, agentSessionId }) => [path.join("projects", encodeProjectDir(cwd)), ...agentSessionId === null ? [] : [path.join("session-env", agentSessionId)]],
-		launchPrivateFolders: ["shell-snapshots"],
-		launchHomeEnvName: null,
-		loginFiles: [".credentials.json"],
-		configEntries: [
-			"settings.json",
-			"settings.local.json",
-			"hooks",
-			"skills",
-			"plugins",
-			"commands",
-			"agents",
-			"CLAUDE.md",
-			"AGENTS.md"
-		],
-		apiDomains: ["api.anthropic.com", "platform.claude.com"],
-		launchEnv: { DISABLE_AUTOUPDATER: "1" }
-	},
-	codex: {
-		homeEntries: [".codex"],
-		launchWritableFolders: () => [],
-		launchPrivateFolders: [],
-		launchHomeEnvName: "CODEX_HOME",
-		loginFiles: ["auth.json"],
-		configEntries: [
-			"config.toml",
-			"AGENTS.md",
-			"skills",
-			"rules",
-			"prompts",
-			"hooks.json"
-		],
-		apiDomains: [
-			"chatgpt.com",
-			"*.chatgpt.com",
-			"auth.openai.com",
-			"api.openai.com",
-			"*.openai.com"
-		],
-		launchEnv: {}
-	}
-});
-var GUARDRAILS_VENDORS = Object.freeze(["claude", "codex"]);
-var UNWRAPPED_VENDOR_HOME_ENTRIES = Object.freeze([".grok"]);
-var CREDENTIAL_HOME_ENTRIES = Object.freeze([
-	".ssh",
-	".config/gh",
-	"Library/Keychains",
-	".git-credentials"
-]);
-var CLOUD_CREDENTIAL_HOME_ENTRIES = Object.freeze([
-	".aws",
-	".azure",
-	".config/gcloud",
-	".kube",
-	".docker",
-	".gnupg",
-	".netrc",
-	".npmrc"
-]);
-var STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES = Object.freeze(["Library/Keychains"]);
-var XDG_CONFIG_DEFAULT_HOME_PREFIX = ".config/";
-var SHARED_TEMP_DIRS = Object.freeze(["/tmp/claude", "/private/tmp/claude"]);
-var SHARED_HOME_WRITE_ENTRIES = Object.freeze([".npm/_logs"]);
-var GUARDRAILS_PLACEHOLDER_NAMES = Object.freeze([
-	".bash_profile",
-	".bashrc",
-	".claude",
-	".gitconfig",
-	".gitmodules",
-	".idea",
-	".mcp.json",
-	".profile",
-	".ripgreprc",
-	".vscode",
-	".zprofile",
-	".zshrc"
-]);
-var WHOLE_FILESYSTEM = "/";
-var GLIMMERVOID_CONFIG_SIBLING_ENTRIES = Object.freeze([
-	"bin",
-	"pairings.json",
-	"pairings-seen.json",
-	"plans",
-	"telegram-outbox.json",
-	"traces",
-	"uploads",
-	"usage-budget-state.json",
-	"usage-lanes.json",
-	"usage-warehouse.json",
-	"visions-intent.json"
-]);
-var GLIMMERVOID_HOME_STATE_ENTRIES = Object.freeze([
-	"benchmark-runs",
-	"benchmarks",
-	"config.json",
-	"factory",
-	"issues-cache.json",
-	"knowledge-graph",
-	"litellm-pricing.json",
-	"my-prs-state.json",
-	"my-prs-work",
-	"posthog-reports",
-	"posthog-state.json",
-	"posthog-work",
-	"recordings",
-	"guardrails-homes",
-	"guardrails-policies",
-	"sane-yolo",
-	"scratch",
-	"sounds",
-	"team-review-repos",
-	"team-review-state.json",
-	"team-review-work",
-	"team-review-worktrees",
-	"telemetry-pending-crash.json",
-	"telemetry.json",
-	"tmp",
-	"update-check.json",
-	"update-journal.json",
-	"workflows-state.json",
-	"workflows-work"
-]);
-var RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS = Object.freeze(["commands", "agents"]);
-var GUARDED_PROXY_BYPASS = "localhost,::1,169.254.0.0/16,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16";
-var HOOK_LOOPBACK_HOST = "127.0.0.1";
-var AGENT_SESSION_ID_SHAPE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var STANDARD_OPEN_NETWORK = Object.freeze({
-	allowAllUnixSockets: true,
-	allowMachLookup: ["*"]
-});
-var STRICT_OPEN_NETWORK = Object.freeze({ allowAllUnixSockets: false });
-function unique(entries) {
-	return [...new Set(entries)];
-}
-function literalEntries(entryPaths) {
-	return unique(entryPaths).map((entryPath) => ({
-		path: entryPath,
-		literal: true
-	}));
-}
-function homePaths(host, homeEntries) {
-	return homeEntries.map((entry) => path.join(host.homeDir, entry));
-}
-function isInsideAny(parents, child) {
-	return parents.some((parent) => isPathInside(parent, child));
-}
-function vendorStatePaths(host, vendor, stateFolderEntries) {
-	return stateFolderEntries.map((entry) => path.join(host.vendorLocations[vendor].stateFolder, entry));
-}
-function vendorHeldPaths(host, vendor) {
-	const { stateFolder, configFiles, otherHomes } = host.vendorLocations[vendor];
-	return [
-		stateFolder,
-		...configFiles,
-		...otherHomes
-	];
-}
-function launchHomeOf(host, vendor) {
-	return path.join(host.launchHomeDir, vendor);
-}
-function vendorsWithLaunchHome(role) {
-	if (role.vendorHome.scope === "state") return [];
-	return role.vendors.filter((vendor) => VENDOR_PROFILES[vendor].launchHomeEnvName !== null);
-}
-function vendorWritableFolders(role, host) {
-	const { vendorHome } = role;
-	if (vendorHome.scope === "state") return role.vendors.map((vendor) => host.vendorLocations[vendor].stateFolder);
-	return role.vendors.flatMap((vendor) => {
-		const profile = VENDOR_PROFILES[vendor];
-		if (profile.launchHomeEnvName !== null) return [launchHomeOf(host, vendor)];
-		return vendorStatePaths(host, vendor, profile.launchWritableFolders(vendorHome));
-	});
-}
-function launchPrivateFolders(role, host) {
-	if (role.vendorHome.scope === "state") return [];
-	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].launchPrivateFolders));
-}
-function launchHomeLinkCandidates(role, host) {
-	return vendorsWithLaunchHome(role).flatMap((vendor) => {
-		const { configEntries, loginFiles } = VENDOR_PROFILES[vendor];
-		const linkFor = (entry, isLogin) => ({
-			linkPath: path.join(launchHomeOf(host, vendor), entry),
-			targetPath: path.join(host.vendorLocations[vendor].stateFolder, entry),
-			isLogin
-		});
-		return [...configEntries.map((entry) => linkFor(entry, false)), ...loginFiles.map((entry) => linkFor(entry, true))];
-	});
-}
-function launchHomeEnv(role, host) {
-	return Object.fromEntries(vendorsWithLaunchHome(role).flatMap((vendor) => {
-		const envName = VENDOR_PROFILES[vendor].launchHomeEnvName;
-		return envName === null ? [] : [[envName, launchHomeOf(host, vendor)]];
-	}));
-}
-function vendorLoginFiles(role, host) {
-	return role.vendors.flatMap((vendor) => vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].loginFiles));
-}
-function roleWritableRoots(role) {
-	return [
-		...role.writableRoots,
-		...role.lockedCheckouts,
-		...role.commitCheckouts.flatMap(({ checkout, gitDir }) => [checkout, gitDir])
-	];
-}
-function alwaysWritablePaths(role, host) {
-	return [
-		host.tempDir,
-		...roleWritableRoots(role),
-		...vendorWritableFolders(role, host)
-	];
-}
-function commitCheckoutWriteDenies({ checkout, gitDir }) {
-	const gitPointer = path.join(checkout, ".git");
-	const gitDirDenies = [path.join(gitDir, "hooks"), path.join(gitDir, "config")];
-	if (path.resolve(gitPointer) === path.resolve(gitDir)) return gitDirDenies;
-	return [gitPointer, ...gitDirDenies];
-}
-function writeDeniesWhenPresent(role, host) {
-	const writablePaths = alwaysWritablePaths(role, host);
-	const sharedHomeWrites = homePaths(host, SHARED_HOME_WRITE_ENTRIES).filter((sharedPath) => !isInsideAny(roleWritableRoots(role), sharedPath));
-	const vendorConfig = role.vendors.flatMap((vendor) => [...vendorStatePaths(host, vendor, VENDOR_PROFILES[vendor].configEntries), ...host.vendorLocations[vendor].configFiles]).filter((configPath) => isInsideAny(writablePaths, configPath));
-	return [
-		...SHARED_TEMP_DIRS,
-		...sharedHomeWrites,
-		...vendorConfig,
-		...role.commitCheckouts.flatMap(commitCheckoutWriteDenies)
-	];
-}
-function lockedCheckoutWriteDenies(role) {
-	return role.lockedCheckouts.flatMap((checkout) => [path.join(checkout, ".git"), path.join(checkout, ".claude")]);
-}
-function lockedClaudeMountPoints(role) {
-	return role.lockedCheckouts.flatMap((checkout) => RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS.map((folder) => path.join(checkout, ".claude", folder)));
-}
-function guardrailsPlaceholderPaths(role) {
-	return unique([...(role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : []).flatMap((workingFolder) => GUARDRAILS_PLACEHOLDER_NAMES.map((placeholderName) => path.join(workingFolder, placeholderName))), ...lockedCheckoutWriteDenies(role)]);
-}
-function homeEntriesNamedLike(host, homeEntries) {
-	return host.homeEntryNames.filter((entryName) => homeEntries.some((homeEntry) => entryName.startsWith(homeEntry)));
-}
-function relocatedXdgConfigPaths(host, homeEntries) {
-	const xdgConfigHome = host.relocatedXdgConfigHome;
-	if (xdgConfigHome === null) return [];
-	return homeEntries.filter((entry) => entry.startsWith(XDG_CONFIG_DEFAULT_HOME_PREFIX)).map((entry) => path.join(xdgConfigHome, entry.slice(8)));
-}
-function isStandardLevel(role) {
-	return role.guardrailLevel === "standard";
-}
-function blockedCredentialHomeEntries(role) {
-	const credentialHomeEntries = [...CREDENTIAL_HOME_ENTRIES, ...CLOUD_CREDENTIAL_HOME_ENTRIES];
-	if (!isStandardLevel(role)) return credentialHomeEntries;
-	return credentialHomeEntries.filter((entry) => !STANDARD_LEVEL_USABLE_CREDENTIAL_ENTRIES.includes(entry));
-}
-function credentialWriteBlocks(role, host) {
-	const credentialHomeEntries = blockedCredentialHomeEntries(role);
-	return [...homePaths(host, credentialHomeEntries), ...relocatedXdgConfigPaths(host, credentialHomeEntries)];
-}
-function glimmervoidStateWriteBlocks(role, host) {
-	const keptWritable = alwaysWritablePaths(role, host);
-	const configFolder = path.dirname(host.glimmervoidConfigFile);
-	const homeEntries = [
-		...GLIMMERVOID_HOME_STATE_ENTRIES,
-		...GLIMMERVOID_CONFIG_SIBLING_ENTRIES,
-		...host.glimmervoidHomeEntryNames
-	].map((entryName) => path.join(host.glimmervoidHome, entryName));
-	const configSiblings = GLIMMERVOID_CONFIG_SIBLING_ENTRIES.map((entryName) => path.join(configFolder, entryName));
-	return unique([
-		host.glimmervoidConfigFile,
-		...homeEntries,
-		...configSiblings
-	]).filter((entryPath) => !keptWritable.some((writable) => isPathInside(entryPath, writable)));
-}
-function standardWriteBlockCandidates(role, host) {
-	if (!isStandardLevel(role)) return [];
-	return unique([
-		...credentialWriteBlocks(role, host),
-		...glimmervoidStateWriteBlocks(role, host),
-		...role.blockedPaths ?? []
-	]);
-}
-function readDeniedPaths(role, host) {
-	const otherVendors = GUARDRAILS_VENDORS.filter((vendor) => !role.vendors.includes(vendor));
-	const otherVendorHomeEntries = [...otherVendors.flatMap((vendor) => VENDOR_PROFILES[vendor].homeEntries), ...UNWRAPPED_VENDOR_HOME_ENTRIES];
-	const credentialHomeEntries = blockedCredentialHomeEntries(role);
-	return [
-		...homePaths(host, [
-			...credentialHomeEntries,
-			...otherVendorHomeEntries,
-			...homeEntriesNamedLike(host, otherVendorHomeEntries)
-		]),
-		...relocatedXdgConfigPaths(host, credentialHomeEntries),
-		...otherVendors.flatMap((vendor) => vendorHeldPaths(host, vendor)),
-		...host.unwrappedVendorHomes,
-		host.glimmervoidHome,
-		...launchPrivateFolders(role, host),
-		...role.readDenied
-	];
-}
-function guardrailsPolicyProbePaths(role, host) {
-	return unique([
-		...writeDeniesWhenPresent(role, host),
-		...vendorLoginFiles(role, host),
-		...launchHomeLinkCandidates(role, host).map((link) => link.targetPath)
-	]);
-}
-function isValidPort(port) {
-	return Number.isInteger(port) && port >= 1 && port <= 65535;
-}
-function hostNamedPaths(host) {
-	const relocatedXdgConfigHomes = host.relocatedXdgConfigHome === null ? [] : [host.relocatedXdgConfigHome];
-	return [
-		host.homeDir,
-		host.glimmervoidHome,
-		host.glimmervoidConfigFile,
-		host.tempDir,
-		host.launchHomeDir,
-		...relocatedXdgConfigHomes,
-		...host.unwrappedVendorHomes,
-		...GUARDRAILS_VENDORS.flatMap((vendor) => vendorHeldPaths(host, vendor))
-	];
-}
-function guardrailsRoleRefusal(role, host) {
-	const launchCwds = role.vendorHome.scope === "launch" ? [role.vendorHome.cwd] : [];
-	const relativePath = [
-		...hostNamedPaths(host),
-		...roleWritableRoots(role),
-		...role.readDenied,
-		...role.readableWithinDenied,
-		...launchCwds
-	].find((namedPath) => !path.isAbsolute(namedPath));
-	if (relativePath !== void 0) return `guardrails policy path is not absolute: ${relativePath}`;
-	const rootOverProtectedHome = [...roleWritableRoots(role), ...vendorWritableFolders(role, host)].find((root) => isPathInside(root, host.homeDir) || isPathInside(root, host.glimmervoidHome));
-	if (rootOverProtectedHome !== void 0) return `writable root ${rootOverProtectedHome} contains the home folder or the Glimmervoid home`;
-	const writablePaths = alwaysWritablePaths(role, host);
-	const reallowedAncestor = role.readableWithinDenied.find((readable) => writablePaths.some((writable) => isPathInside(readable, writable, { allowEqual: false })));
-	if (reallowedAncestor !== void 0) return `readable path ${reallowedAncestor} is an ancestor of a writable root`;
-	if (role.network.access === "allowlist" && role.network.hookPort !== null && !isValidPort(role.network.hookPort)) return "hook listener port is invalid";
-	const agentSessionId = role.vendorHome.scope === "launch" ? role.vendorHome.agentSessionId : null;
-	if (agentSessionId !== null && !AGENT_SESSION_ID_SHAPE.test(agentSessionId)) return "agent session id is invalid";
-	return null;
-}
-function networkPolicy(role) {
-	if (role.network.access === "open") return isStandardLevel(role) ? { ...STANDARD_OPEN_NETWORK } : { ...STRICT_OPEN_NETWORK };
-	if (role.network.access === "none") return {
-		allowedDomains: [],
-		deniedDomains: [],
-		allowLocalBinding: false,
-		allowAllUnixSockets: false
-	};
-	const hookEndpoint = role.network.hookPort === null ? [] : [`${HOOK_LOOPBACK_HOST}:${role.network.hookPort}`];
-	const vendorDomains = role.vendors.flatMap((vendor) => VENDOR_PROFILES[vendor].apiDomains);
-	return {
-		allowedDomains: unique([
-			...hookEndpoint,
-			...vendorDomains,
-			...role.network.domains
-		]),
-		deniedDomains: [],
-		strictAllowlist: true,
-		allowLocalBinding: false,
-		allowAllUnixSockets: false
-	};
-}
-function guardedEnvFor(role, host) {
-	if (role.network.access === "allowlist") return {
-		NO_PROXY: GUARDED_PROXY_BYPASS,
-		no_proxy: GUARDED_PROXY_BYPASS,
-		[HOOK_VIA_GUARDRAILS_PROXY_ENV]: "1"
-	};
-	if (role.network.access === "open") return { TMPDIR: host.tempDir };
-	return {};
-}
-function filesystemWrites(role, host, writablePaths) {
-	if (isStandardLevel(role)) return {
-		allowWrite: literalEntries([WHOLE_FILESYSTEM, ...writablePaths]),
-		denyWrite: literalEntries(host.writeBlockedPaths)
-	};
-	const isPresent = (candidate) => host.existingPaths.has(candidate);
-	return {
-		allowWrite: literalEntries(writablePaths),
-		denyWrite: literalEntries([...writeDeniesWhenPresent(role, host).filter(isPresent), ...lockedCheckoutWriteDenies(role)])
-	};
-}
-function buildGuardrailsLaunchPlan(role, host) {
-	const refusal = guardrailsRoleRefusal(role, host);
-	if (refusal !== null) return {
-		ok: false,
-		reason: refusal
-	};
-	const isPresent = (candidate) => host.existingPaths.has(candidate);
-	const writablePaths = [...alwaysWritablePaths(role, host), ...vendorLoginFiles(role, host).filter(isPresent)];
-	const readDenied = readDeniedPaths(role, host);
-	const writableWithinDenied = writablePaths.filter((writable) => isInsideAny(readDenied, writable));
-	return {
-		ok: true,
-		plan: {
-			launcher: role.network.access === "open" ? "open-network" : "runtime-cli",
-			policy: {
-				network: networkPolicy(role),
-				filesystem: {
-					denyRead: literalEntries(readDenied),
-					allowRead: literalEntries([...writableWithinDenied, ...role.readableWithinDenied]),
-					...filesystemWrites(role, host, writablePaths)
-				},
-				terminalScope: isStandardLevel(role) ? "any" : "own",
-				allowAppleEvents: isStandardLevel(role)
-			},
-			launchEnv: Object.assign({ CLAUDE_CODE_TMPDIR: host.tempDir }, ...role.vendors.map((vendor) => VENDOR_PROFILES[vendor].launchEnv), launchHomeEnv(role, host)),
-			guardedEnv: guardedEnvFor(role, host),
-			requiredDirectories: unique([
-				host.tempDir,
-				...vendorWritableFolders(role, host),
-				...launchPrivateFolders(role, host)
-			]),
-			launchHomeLinks: launchHomeLinkCandidates(role, host).filter((link) => isPresent(link.targetPath))
-		}
-	};
-}
-//#endregion
 //#region shared/repo.ts
 var REPO_SLUG = "johncwaters/glimmervoid";
 //#endregion
@@ -21200,6 +21219,7 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 	};
 	let publishedActiveAgents = 0;
 	let publishedAwaitingBackgroundTasks = false;
+	let publishedHasBackgroundWork = false;
 	const wakeups = /* @__PURE__ */ new Map();
 	let wakeupSeq = 0;
 	let wakeupExpiryTimer = null;
@@ -21231,12 +21251,20 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 	function awaitingBackgroundTasks() {
 		return detectBackgroundAgents && gateHeldReady !== null && port.state() === "RUNNING" && tasks.isOnlyBackgroundTasks();
 	}
+	function hasBackgroundWork() {
+		if (activeAgentCount() > 0) return true;
+		if (detectBackgroundAgents && tasks.hasLiveMonitor()) return true;
+		return pendingWakeup() !== null;
+	}
 	function publishAgentsChange() {
+		if (port.isDestroyed()) return;
 		const activeAgents = activeAgentCount();
 		const awaiting = awaitingBackgroundTasks();
-		if (activeAgents === publishedActiveAgents && awaiting === publishedAwaitingBackgroundTasks) return;
+		const backgroundWork = hasBackgroundWork();
+		if (activeAgents === publishedActiveAgents && awaiting === publishedAwaitingBackgroundTasks && backgroundWork === publishedHasBackgroundWork) return;
 		publishedActiveAgents = activeAgents;
 		publishedAwaitingBackgroundTasks = awaiting;
+		publishedHasBackgroundWork = backgroundWork;
 		port.emit("agents-change", {
 			activeAgents,
 			awaitingBackgroundTasks: awaiting
@@ -21463,6 +21491,7 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 		wakeupExpiryTimer.unref();
 	}
 	function emitWakeupChange() {
+		if (port.isDestroyed()) return;
 		port.emit("wakeup-change", { pendingWakeup: pendingWakeup() });
 		armWakeupExpiryTimer();
 	}
@@ -21487,6 +21516,7 @@ function createSessionBackgroundTracking({ detectBackgroundAgents, agentTtlMs, s
 		trackSubagent,
 		activeAgentCount,
 		awaitingBackgroundTasks,
+		hasBackgroundWork,
 		emitAgentsChange,
 		clearAgents,
 		stashGateHeldReady,
@@ -22179,6 +22209,9 @@ var Session = class extends EventEmitter {
 	get hookSeen() {
 		return this._hookSeen;
 	}
+	get hasBackgroundWork() {
+		return this.backgroundTracking.hasBackgroundWork();
+	}
 	get agentToken() {
 		return this._agentToken;
 	}
@@ -23342,6 +23375,7 @@ var GuardrailsLaunchOwner = z.object({
 	ownerHost: z.string(),
 	ownerPidNamespace: z.string().nullable(),
 	ownsTempDir: z.boolean(),
+	keptTempFolderName: z.string().min(1).optional(),
 	logins: z.array(GuardrailsLaunchLogin),
 	placeholderPaths: z.array(z.string().min(1))
 }).strict();
@@ -23453,11 +23487,45 @@ function bridgeSocketLauncherEnv(inheritedTempDirectory, platform) {
 	return { TMPDIR: SHORT_BRIDGE_SOCKET_FOLDER };
 }
 //#endregion
+//#region server/prune-files.ts
+var MS_PER_DAY = 864e5;
+function idForEntry(entry, suffixes) {
+	for (const suffix of suffixes) {
+		if (suffix.length === 0) return entry;
+		if (entry.endsWith(suffix)) return entry.slice(0, -suffix.length);
+	}
+	return null;
+}
+async function pruneAgedFiles({ directory, suffixes, retainDays, now = Date.now(), isRetainedId = () => false, entryMode = "file", fsPromises = fs.promises }) {
+	let entries;
+	try {
+		entries = await fsPromises.readdir(directory);
+	} catch {
+		return [];
+	}
+	const cutoff = now - retainDays * MS_PER_DAY;
+	const removedIds = [];
+	for (const entry of entries) {
+		const id = idForEntry(entry, suffixes);
+		if (!id || isRetainedId(id)) continue;
+		const filePath = path.join(directory, entry);
+		try {
+			if ((await fsPromises.stat(filePath)).mtimeMs >= cutoff) continue;
+			if (entryMode === "directory") await fsPromises.rm(filePath, {
+				recursive: true,
+				force: true
+			});
+			if (entryMode === "file") await fsPromises.unlink(filePath);
+			removedIds.push(id);
+		} catch {}
+	}
+	return removedIds;
+}
+//#endregion
 //#region server/guardrails/guardrails-launch.ts
 var LAUNCH_ID_SHAPE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 var GUARDED_ENV_COMMAND = "/usr/bin/env";
 var POLICY_FOLDER = "guardrails-policies";
-var TEMP_FOLDER = "guardrails-temp";
 var LAUNCH_HOME_FOLDER = "guardrails-homes";
 var START_FOLDER = "start";
 var OWNER_FILE_SUFFIX = ".owner.json";
@@ -23465,6 +23533,7 @@ var ENTER_FOLDER_SCRIPT = "cd \"$1\" && shift && exec \"$@\"";
 var LOGIN_FILE_MODE = 384;
 var ABSENT_PATH_DENY_PLATFORM = "darwin";
 var OWN_PID_NAMESPACE_LINK = "/proc/self/ns/pid";
+var SESSION_TEMP_RETAIN_DAYS = 7;
 async function isPresent(candidate) {
 	try {
 		await access(candidate);
@@ -23663,7 +23732,7 @@ async function sweepOrphanedGuardrailsLaunches(log = console) {
 					policyPath: path.join(policyDir, `${launchId}.json`),
 					ownerPath,
 					launchHomeDir: path.join(glimmervoidHome, LAUNCH_HOME_FOLDER, launchId),
-					ownedTempDir: owner.ownsTempDir ? path.join(glimmervoidHome, TEMP_FOLDER, launchId) : null
+					ownedTempDir: owner.ownsTempDir ? path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER, launchId) : null
 				}, owner, launchId, { onlyNewerLogins: true });
 				removedLaunchCount += 1;
 			} catch (error) {
@@ -23675,6 +23744,24 @@ async function sweepOrphanedGuardrailsLaunches(log = console) {
 		log.warn(`[guardrails] could not sweep leftover launch folders: ${errorMessage(error)}`);
 	}
 }
+async function pruneLeftoverSessionTempFolders(glimmervoidHome, liveSessionIds, log = console) {
+	const policyEntryNames = await readdir(path.join(glimmervoidHome, POLICY_FOLDER)).catch((error) => {
+		if (isMissingFileError(error)) return [];
+		log.warn(`[guardrails] kept every session temp folder because the launch list could not be read: ${errorMessage(error)}`);
+		return null;
+	});
+	if (policyEntryNames === null) return;
+	const ownerEntryNames = policyEntryNames.filter((entryName) => entryName.endsWith(OWNER_FILE_SUFFIX));
+	const owners = await Promise.all(ownerEntryNames.map((entryName) => readOwnerFile(path.join(glimmervoidHome, POLICY_FOLDER, entryName))));
+	const tempFolderNamesWithOwners = /* @__PURE__ */ new Set([...ownerEntryNames.map((entryName) => entryName.slice(0, -11)), ...owners.flatMap((owner) => owner?.keptTempFolderName === void 0 ? [] : [owner.keptTempFolderName])]);
+	await pruneAgedFiles({
+		directory: path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER),
+		suffixes: [""],
+		retainDays: SESSION_TEMP_RETAIN_DAYS,
+		entryMode: "directory",
+		isRetainedId: (id) => liveSessionIds.has(id) || tempFolderNamesWithOwners.has(id)
+	});
+}
 function launcherCommand(plan, policyPath) {
 	if (plan.launcher === "open-network") return {
 		file: process.execPath,
@@ -23708,11 +23795,19 @@ function enteringFolder(enterDir, file, args) {
 		...args
 	];
 }
-async function prepareGuardrailsLaunch({ role, launchId, tempDir, enterDir }) {
+function launchTempDirFor(glimmervoidHome, launchId, tempDir, keptTempFolderName) {
+	if (tempDir !== void 0) return path.resolve(tempDir);
+	return path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER, keptTempFolderName ?? launchId);
+}
+async function prepareGuardrailsLaunch({ role, launchId, tempDir, keptTempFolderName, enterDir }) {
 	if (!LAUNCH_ID_SHAPE.test(launchId)) return {
 		ok: false,
 		reason: "guardrails launch id is invalid"
 	};
+	if (keptTempFolderName !== void 0 && !LAUNCH_ID_SHAPE.test(keptTempFolderName)) return {
+		ok: false,
+		reason: "guardrails temp folder name is invalid"
+	};
 	try {
 		const policyDir = path.join(glimmervoidHomeDir$1(), POLICY_FOLDER);
 		await mkdir(policyDir, {
@@ -23725,8 +23820,8 @@ async function prepareGuardrailsLaunch({ role, launchId, tempDir, enterDir }) {
 			withRealRoots(role),
 			readOwnPidNamespace()
 		]);
-		const ownsTempDir = tempDir === void 0;
-		const launchTempDir = tempDir === void 0 ? path.join(glimmervoidHome, TEMP_FOLDER, launchId) : path.resolve(tempDir);
+		const ownsTempDir = tempDir === void 0 && keptTempFolderName === void 0;
+		const launchTempDir = launchTempDirFor(glimmervoidHome, launchId, tempDir, keptTempFolderName);
 		const launchHomeDir = path.join(glimmervoidHome, LAUNCH_HOME_FOLDER, launchId);
 		const vendorLocations = await resolveVendorLocations(process.env, homeDir);
 		if (vendorLocations === null) return {
@@ -23783,6 +23878,7 @@ async function prepareGuardrailsLaunch({ role, launchId, tempDir, enterDir }) {
 			ownerHost: os.hostname(),
 			ownerPidNamespace,
 			ownsTempDir,
+			...keptTempFolderName === void 0 ? {} : { keptTempFolderName },
 			logins: plan.launchHomeLinks.filter((link) => link.isLogin).map(({ linkPath, targetPath }) => ({
 				linkPath,
 				targetPath
@@ -28809,41 +28905,6 @@ async function commitAndLandFactoryLedger({ projectPath, ledger, targetBranch, m
 	}
 }
 //#endregion
-//#region server/prune-files.ts
-var MS_PER_DAY = 864e5;
-function idForEntry(entry, suffixes) {
-	for (const suffix of suffixes) {
-		if (suffix.length === 0) return entry;
-		if (entry.endsWith(suffix)) return entry.slice(0, -suffix.length);
-	}
-	return null;
-}
-async function pruneAgedFiles({ directory, suffixes, retainDays, now = Date.now(), isRetainedId = () => false, entryMode = "file", fsPromises = fs.promises }) {
-	let entries;
-	try {
-		entries = await fsPromises.readdir(directory);
-	} catch {
-		return [];
-	}
-	const cutoff = now - retainDays * MS_PER_DAY;
-	const removedIds = [];
-	for (const entry of entries) {
-		const id = idForEntry(entry, suffixes);
-		if (!id || isRetainedId(id)) continue;
-		const filePath = path.join(directory, entry);
-		try {
-			if ((await fsPromises.stat(filePath)).mtimeMs >= cutoff) continue;
-			if (entryMode === "directory") await fsPromises.rm(filePath, {
-				recursive: true,
-				force: true
-			});
-			if (entryMode === "file") await fsPromises.unlink(filePath);
-			removedIds.push(id);
-		} catch {}
-	}
-	return removedIds;
-}
-//#endregion
 //#region server/factory/factory-decision-log.ts
 function createFactoryDecisionLog({ homeDir = glimmervoidHomeDir$1(), now = Date.now, log = console, redact = (text) => text, onDecision } = {}) {
 	const prunedDayByProject = /* @__PURE__ */ new Map();
@@ -47168,6 +47229,7 @@ function createUploadsWiring({ configPath, liveSessionIds, setIntervalFn = DEFAU
 			isRetainedId: (id) => retainedSessionIds.has(id),
 			fsPromises: fs.promises
 		});
+		await pruneLeftoverSessionTempFolders(path.dirname(uploadsRoot), retainedSessionIds);
 	}
 	async function start() {
 		if (timer) return;
@@ -55145,6 +55207,7 @@ function createSessionGuardrails({ getSettings, uploadsRoot, guardrailsRefusal =
 				const prepared = await prepareGuardrails({
 					role,
 					launchId: facts.launchId,
+					keptTempFolderName: request.sessionId,
 					enterDir: cwd
 				});
 				if (!prepared.ok) return {