glimmervoid 0.38.1 → 0.39.0

package/dist/bin/glimmervoid.js

@@ -2,12 +2,12 @@
 import { o as nodePtyRebuildHint, r as firstLine, t as probeNodePty } from "../chunks/node-pty-preflight-C8QIlrtU.js";
 import { i as errorText } from "../chunks/text-DoirglWV.js";
 import { a as packageRoot } from "../chunks/runtime-paths-BkeftE60.js";
-import { t as AGENT_API_VERBS } from "../chunks/session-BlT68ppa.js";
+import { t as AGENT_API_VERBS } from "../chunks/session-D2EbiysG.js";
 import { i as execSync } from "../chunks/child-process-safe-CbQnyh7D.js";
 import { t as renderTable } from "../chunks/ascii-figure-core-pDAwtlKO.js";
 import { n as glimmervoidHomeDir, t as decideConfigPath } from "../chunks/config-path-core-DFt-TemS.js";
-import { i as parseCommandLine, r as gitDoctorRows, t as probeGitVersion } from "../chunks/git-version-rWZjF2Px.js";
-import { i as guardrailsDoctorRows, r as probeGuardrailsDependencies } from "../chunks/guardrails-deps-Cb-ki4EU.js";
+import { i as parseCommandLine, r as gitDoctorRows, t as probeGitVersion } from "../chunks/git-version-DXozXVnb.js";
+import { i as guardrailsDoctorRows, r as probeGuardrailsDependencies } from "../chunks/guardrails-deps-CLxK4J-g.js";
 import { i as pnpmGlobalBinDir, n as npmGlobalBinDir, r as onPath, t as formatPathNotice } from "../chunks/path-doctor-C23VAqeu.js";
 import fs from "node:fs";
 import path from "node:path";
@@ -41,15 +41,8 @@ Inside a Glimmervoid session:
   push                Land this session's commits on the integration branch and push it
   edit <path>         Open a text file for the operator to edit in the dashboard
   limits              List which of these commands answer here and what the guardrails block
-  factory status      Print each factory intent's tickets, state, last reason and next action
-  factory retry <id>  Reopen the parked tickets of a factory intent
-  factory setup       Prove and save the factory checks of this session's repository
-  factory queue <file> Queue a factory intent (a spec cut.ts file or Factory tab request) on this session's repository
   ssh-sign            Sign a commit with the operator's forwarded ssh agent (git runs this)
 
-Experimental:
-  kg [command]        Typed knowledge and task graph (Settings > Lanes > Knowledge graph)
-
 Options:
   --port <number>     Server port (default: 3000)
   --config <path>     Config file (default: ~/.glimmervoid/config.json)
@@ -76,19 +69,15 @@ var SUBCOMMAND_RUNNERS = new Map([
 		return 0;
 	}],
 	["pair", async (subcommandArgs) => {
-		const { runPairCli } = await import("../chunks/pair-cli-B9hHUHLl.js");
+		const { runPairCli } = await import("../chunks/pair-cli-D9DZBqk0.js");
 		return runPairCli(subcommandArgs);
 	}],
 	["agent", async (subcommandArgs) => {
-		const { runAgentSetupCli } = await import("../chunks/agent-setup-cli-C9MMiask.js");
+		const { runAgentSetupCli } = await import("../chunks/agent-setup-cli-C1nFdgFg.js");
 		return runAgentSetupCli(subcommandArgs);
 	}],
-	["kg", async (subcommandArgs) => {
-		const { runKnowledgeGraphCommand } = await import("../chunks/knowledge-graph-cli-ByUJoKw_.js");
-		return runKnowledgeGraphCommand(subcommandArgs);
-	}],
 	["settings", async (subcommandArgs) => {
-		const { runSettingsCommand } = await import("../chunks/settings-cli-C5i9v59a.js");
+		const { runSettingsCommand } = await import("../chunks/settings-cli-DP4t-I9U.js");
 		return runSettingsCommand(subcommandArgs);
 	}],
 	["visions", async (subcommandArgs) => {
@@ -96,21 +85,26 @@ var SUBCOMMAND_RUNNERS = new Map([
 		return runVisionsCli(subcommandArgs);
 	}],
 	["ssh-sign", async (subcommandArgs) => {
-		const { runSshSignCli } = await import("../chunks/ssh-sign-cli-C74BGTQS.js");
+		const { runSshSignCli } = await import("../chunks/ssh-sign-cli-D2RIs-iN.js");
 		return runSshSignCli(subcommandArgs);
 	}],
-	["factory", async (subcommandArgs) => {
-		const { runAgentApiCli } = await import("../chunks/agent-api-cli-BDu1CxZf.js");
-		return runAgentApiCli(["factory", ...subcommandArgs]);
-	}],
 	...AGENT_API_VERBS.map((verb) => [verb, async (subcommandArgs, subcommandName) => {
-		const { runAgentApiCli } = await import("../chunks/agent-api-cli-BDu1CxZf.js");
+		const { runAgentApiCli } = await import("../chunks/agent-api-cli-PfCov-qb.js");
 		return runAgentApiCli([subcommandName, ...subcommandArgs]);
 	}])
 ]);
+var AGENT_INSTALL_COMMAND_BY_ID = {
+	"claude-code": "npm install -g @anthropic-ai/claude-code",
+	codex: "npm install -g @openai/codex"
+};
+function missingAgentText(agentId) {
+	const installCommand = AGENT_INSTALL_COMMAND_BY_ID[agentId];
+	if (!installCommand) return "not found on PATH";
+	return `not found on PATH; install with: ${installCommand}`;
+}
 async function printSessionLimits() {
 	if (!process.env["GLIMMERVOID_AGENT_URL"]) return;
-	const { sessionLimitsHelpLines } = await import("../chunks/agent-api-cli-BDu1CxZf.js");
+	const { sessionLimitsHelpLines } = await import("../chunks/agent-api-cli-PfCov-qb.js");
 	const limitsLines = await sessionLimitsHelpLines();
 	console.log(`\n${limitsLines.join("\n")}`);
 }
@@ -167,7 +161,7 @@ async function readDeclaredCustomAgents() {
 		declared: [],
 		error: null
 	};
-	const { loadConfigFile } = await import("../chunks/config-store-B6mX2phK.js");
+	const { loadConfigFile } = await import("../chunks/config-store-8Z9vkWvf.js");
 	try {
 		const loaded = loadConfigFile(decided.path, { exitOnError: false });
 		if (!loaded.config) return {
@@ -243,15 +237,15 @@ async function runDoctor() {
 	}
 	switchSection("Agents");
 	try {
-		const { listAgentIds, describeAgentResolvability, setCustomAgents } = await import("../chunks/adapters-BIbF8RJB.js");
+		const { listAgentIds, describeAgentResolvability, setCustomAgents } = await import("../chunks/adapters-Buu6yI71.js");
 		const declaredCustomAgents = await readDeclaredCustomAgents();
 		if (declaredCustomAgents.error) line("config", declaredCustomAgents.error);
 		setCustomAgents(declaredCustomAgents.declared);
 		for (const id of listAgentIds()) {
 			const { label, path: resolvedPath } = describeAgentResolvability(id);
-			line(`${id} (${label})`, resolvedPath ?? "not found on PATH");
+			line(`${id} (${label})`, resolvedPath ?? missingAgentText(id));
 		}
-		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-C9MMiask.js");
+		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-C1nFdgFg.js");
 		const grokSetup = inspectGrokAgentSetup();
 		line("grok hook setup", `${grokSetup.classification}: ${grokSetup.filePath}`);
 	} catch (err) {
@@ -259,7 +253,7 @@ async function runDoctor() {
 	}
 	switchSection("rtk");
 	try {
-		const { getRtkPath } = await import("../chunks/rtk-resolver-B8BPgN9L.js");
+		const { getRtkPath } = await import("../chunks/rtk-resolver-BGE6Hd_L.js");
 		line("rtk", getRtkPath() || "not installed (Glimmervoid installs it when the rtk setting is on)");
 	} catch (err) {
 		line("rtk", `probe failed: ${firstLine(errorText(err))}`);
@@ -268,7 +262,7 @@ async function runDoctor() {
 	try {
 		const { resolvePackageBin } = await import("../chunks/runtime-paths-DSmormp7.js");
 		const { execFileSync } = await import("../chunks/child-process-safe-ChRmWAJP.js");
-		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-C9MMiask.js");
+		const { inspectGrokAgentSetup } = await import("../chunks/agent-setup-cli-C1nFdgFg.js");
 		const binPath = resolvePackageBin("cc-safety-net", "cc-safety-net");
 		line("Sane YOLO", binPath || "not installed");
 		if (binPath) line("cc-safety-net version", execFileSync(process.execPath, [binPath, "--version"], {

package/dist/chunks/{adapters-B0EJp_oE.js → adapters-B9tP9MXC.js}

@@ -3,11 +3,11 @@ import { r as execFileSync } from "./child-process-safe-CbQnyh7D.js";
 import { n as resolveAgentCommand, t as buildAgentSpawnCommand } from "./spawn-command-Cc40FiZI.js";
 import { s as rawTextOr } from "./coerce-NSst8oRP.js";
 import { r as nextBackoffMs } from "./backoff-DjVpfHk7.js";
-import { l as supervisionLine } from "./session-routes-CT1JrjoT.js";
-import { c as buildAgentEnv, i as isSpinnerChar, n as classifyAgentTitle, r as isBrailleChar, t as grok } from "./grok-y65HOvlU.js";
+import { l as supervisionLine } from "./session-routes-BQAZzMKZ.js";
+import { i as isSpinnerChar, n as classifyAgentTitle, r as isBrailleChar, s as buildAgentEnv, t as grok } from "./grok-DeGAXgZF.js";
 import { t as buildHookCommand } from "./hook-command-core-qTNK-xMF.js";
-import "./contracts-HVCEJfxs.js";
-import { n as mergeCodexPreToolUse, t as HOOK_TOOLS } from "./hook-tools-BkxllUHE.js";
+import "./contracts-DYQW11de.js";
+import { n as mergeCodexPreToolUse, t as HOOK_TOOLS } from "./hook-tools-Dl7-r2Eb.js";
 import fs from "node:fs";
 import path from "node:path";
 //#region session/adapters/claude-code.ts
@@ -204,13 +204,6 @@ var claudeCode = {
 };
 //#endregion
 //#region server/usage/core/usage-scan-core.ts
-function laneSpendStatus({ isTrackingEnabled, scan }) {
-	if (!isTrackingEnabled) return "tracking-off";
-	if (scan === null) return "scanner-missing";
-	if (scan.lastOutcome === "io-failed") return "read-failing";
-	if (!scan.isHistoryCaughtUp || scan.lastOutcome === null) return "catching-up";
-	return "known";
-}
 function scopedClaudeRoots(scopeDirs, claudeDirs) {
 	if (!scopeDirs || scopeDirs.length === 0) return null;
 	const isInside = (candidate, parent) => candidate.startsWith(`${parent}${path.sep}`);
@@ -473,9 +466,11 @@ function mayContributeHooks(configText) {
 function userConfigFolders(env) {
 	return codexHomes(env, null);
 }
-function buildHookArgs({ relayPath = RELAY_PATH, events = HOOK_EVENTS, bypassHookTrust = false, hookTools = [], hookToolRelayPath = HOOK_TOOL_RELAY_PATH } = {}) {
+var TOML_LITERAL_STRING_FORBIDDEN = /[\x00-\x08\x0a-\x1f\x27\x7f]/;
+function buildHookArgs({ relayPath = RELAY_PATH, events = HOOK_EVENTS, bypassHookTrust = false, hookTools = [], hookToolRelayPath = HOOK_TOOL_RELAY_PATH, userHooks = [] } = {}) {
 	const args = bypassHookTrust ? [TRUST_BYPASS_FLAG] : [];
 	const preToolUseGroups = [];
+	const groupsByEvent = /* @__PURE__ */ new Map();
 	for (const event of events) {
 		const command = buildHookCommand(relayPath, event);
 		if (!command) return null;
@@ -483,13 +478,30 @@ function buildHookArgs({ relayPath = RELAY_PATH, events = HOOK_EVENTS, bypassHoo
 			preToolUseGroups.push(`{hooks=[{type='command',command='${command}'}]}`);
 			continue;
 		}
-		args.push("-c", `hooks.${event}=[{hooks=[{type='command',command='${command}'}]}]`);
+		groupsByEvent.set(event, [`{hooks=[{type='command',command='${command}'}]}`]);
 	}
 	const groups = hookTools.flatMap((tool) => {
 		const group = HOOK_TOOLS[tool.id].codexGroup(tool, hookToolRelayPath);
 		return group ? [group] : [];
 	});
-	args.push(...mergeCodexPreToolUse([...preToolUseGroups, ...groups]));
+	preToolUseGroups.push(...groups);
+	for (const hook of userHooks) {
+		if (!hook.enabled || hook.type !== "command" || !hook.command) continue;
+		if (TOML_LITERAL_STRING_FORBIDDEN.test(hook.command) || hook.matcher !== void 0 && TOML_LITERAL_STRING_FORBIDDEN.test(hook.matcher)) {
+			console.warn(`[codex] hook ${hook.id} skipped: command or matcher cannot be expressed as a TOML literal string`);
+			continue;
+		}
+		const group = `{${hook.matcher === void 0 ? "" : `matcher='${hook.matcher}',`}hooks=[{type='command',command='${hook.command}'}]}`;
+		if (hook.event === "PreToolUse") {
+			preToolUseGroups.push(group);
+			continue;
+		}
+		const eventGroups = groupsByEvent.get(hook.event) ?? [];
+		eventGroups.push(group);
+		groupsByEvent.set(hook.event, eventGroups);
+	}
+	for (const [event, eventGroups] of groupsByEvent) args.push("-c", `hooks.${event}=[${eventGroups.join(",")}]`);
+	args.push(...mergeCodexPreToolUse(preToolUseGroups));
 	return args;
 }
 var hooks = {
@@ -790,4 +802,4 @@ function resetCommandCache() {
 	resolvedCommands.clear();
 }
 //#endregion
-export { shouldPersistWarehouse as A, isUsageFile as C, resolveProjectsDirs as D, projectDirCandidates as E, claudeCode as M, scopedClaudeRoots as O, grokRootCandidates as S, passOutcome as T, continuationDelayMs as _, describeAgentResolvability as a, expandTilde as b, isKnownAgentId as c, resolveAdapter as d, setCustomAgents as f, codexSessionIdFromPath as g, codexRootCandidates as h, customAgentFingerprint as i, splitLines as j, shouldEvaluateDespiteIoFailures as k, listAgentIds as l, codexHomes as m, cachedAgentResolvability as n, getAdapter as o, codexFallbackRoots as p, commandFor as r, hookProfileOf as s, DEFAULT_AGENT_ID as t, resetCommandCache as u, decideFileRead as v, laneSpendStatus as w, grokHomes as x, dedupeCodexFiles as y };
+export { splitLines as A, isUsageFile as C, scopedClaudeRoots as D, resolveProjectsDirs as E, shouldEvaluateDespiteIoFailures as O, grokRootCandidates as S, projectDirCandidates as T, continuationDelayMs as _, describeAgentResolvability as a, expandTilde as b, isKnownAgentId as c, resolveAdapter as d, setCustomAgents as f, codexSessionIdFromPath as g, codexRootCandidates as h, customAgentFingerprint as i, claudeCode as j, shouldPersistWarehouse as k, listAgentIds as l, codexHomes as m, cachedAgentResolvability as n, getAdapter as o, codexFallbackRoots as p, commandFor as r, hookProfileOf as s, DEFAULT_AGENT_ID as t, resetCommandCache as u, decideFileRead as v, passOutcome as w, grokHomes as x, dedupeCodexFiles as y };

package/dist/chunks/{adapters-BIbF8RJB.js → adapters-Buu6yI71.js}

@@ -1 +1 @@
-export { a as describeAgentResolvability, l as listAgentIds, f as setCustomAgents } from "./adapters-B0EJp_oE.js";
+export { a as describeAgentResolvability, l as listAgentIds, f as setCustomAgents } from "./adapters-B9tP9MXC.js";

package/dist/chunks/{agent-api-cli-B5Tm0wXO.js → agent-api-cli-2_RwTTTJ.js}

@@ -1,22 +1,16 @@
 import { t as errorCode } from "./text-DoirglWV.js";
-import { a as AgentDispatchRequest, f as AgentTicketRequest, l as AgentFactoryStatusRequest, n as AGENT_URL_ENV, s as AgentFactoryRetryRequest, u as AgentLimitsReply } from "./session-BlT68ppa.js";
+import { n as AGENT_URL_ENV, o as AgentLimitsReply } from "./session-D2EbiysG.js";
 import { i as resolveHookTarget } from "./hook-relay-core-DA_bz2KA.js";
 import { n as decideGuardrailsProxy } from "./guardrails-proxy-core-BI3rdY-m.js";
-import { n as isRecord } from "./coerce-NSst8oRP.js";
 import { t as parseJsonOrNull } from "./json-core-dfa_7Fak.js";
-import { a as formatSessionLimits } from "./session-routes-CT1JrjoT.js";
-import { g as isOrchestratorAgentVerb, h as isAgentApiVerb } from "./agent-api-core-B_mUSenR.js";
-import { readFileSync } from "node:fs";
+import { a as formatSessionLimits } from "./session-routes-BQAZzMKZ.js";
+import { l as isAgentApiVerb } from "./agent-api-core-D2HLgBEe.js";
 import path from "node:path";
 import http from "node:http";
 //#region server/agent-api-cli.ts
 var AGENT_PATH_PREFIX = "/agent/";
 var HELP_LIMITS_TIMEOUT_MS = 2e3;
 var HELP_LIMITS_UNKNOWN_LINE = "This session: Glimmervoid did not report its limits, so run glimmervoid limits to see why";
-function ticketBody(rest) {
-	const parsed = AgentTicketRequest.safeParse({ workId: rest[0] });
-	return parsed.success ? parsed.data : null;
-}
 var BODY_BUILDERS = {
 	spawn: (rest) => {
 		const prompt = rest.join(" ").trim();
@@ -32,42 +26,8 @@ var BODY_BUILDERS = {
 		const docPath = rest.join(" ").trim();
 		return docPath ? { path: path.resolve(docPath) } : null;
 	},
-	limits: () => ({}),
-	dispatch: (rest) => {
-		const parsed = AgentDispatchRequest.safeParse(rest[0] === "--ready" ? { readyIntent: rest[1] } : { workId: rest[0] });
-		return parsed.success ? parsed.data : null;
-	},
-	reopen: (rest) => ticketBody(rest),
-	cancel: (rest) => ticketBody(rest),
-	"factory-status": (rest) => {
-		if (rest.length === 0) return {};
-		if (rest.length !== 2 || rest[0] !== "--project") return null;
-		const parsed = AgentFactoryStatusRequest.safeParse({ projectId: rest[1] });
-		return parsed.success ? parsed.data : null;
-	},
-	"factory-retry": (rest) => {
-		if (rest.length !== 1) return null;
-		const parsed = AgentFactoryRetryRequest.safeParse({ intentId: rest[0] });
-		return parsed.success ? parsed.data : null;
-	},
-	"factory-setup": (rest) => rest.length === 0 ? {} : null,
-	"factory-queue": (rest) => {
-		if (rest.length !== 1) return null;
-		const intent = parseJsonOrNull(readFileSync(rest[0], "utf8"));
-		if (!isRecord(intent)) return null;
-		const { name: _name, type: _type, requestId: _requestId, projectId: _projectId, ...request } = intent;
-		return request;
-	}
+	limits: () => ({})
 };
-var FACTORY_USAGE = Object.freeze({
-	"factory-status": "status [--project <projectId>]",
-	"factory-retry": "retry <intentId>",
-	"factory-setup": "setup",
-	"factory-queue": "queue <intent.json>"
-});
-function isFactoryVerb(verb) {
-	return verb in FACTORY_USAGE;
-}
 function bodySaysOk(text) {
 	try {
 		const parsed = JSON.parse(text);
@@ -82,13 +42,6 @@ function limitsLines(replyText) {
 	return formatSessionLimits(limits.data);
 }
 function printableReply(verb, replyText) {
-	if (isFactoryVerb(verb)) {
-		const reply = parseJsonOrNull(replyText);
-		if (typeof reply !== "object" || reply === null) return replyText;
-		if ("text" in reply && typeof reply.text === "string") return reply.text;
-		if ("error" in reply && typeof reply.error === "string") return reply.error;
-		return replyText;
-	}
 	if (verb !== "limits") return replyText;
 	return limitsLines(replyText)?.join("\n") ?? replyText;
 }
@@ -188,13 +141,6 @@ async function sessionLimitsHelpLines({ timeoutMs = HELP_LIMITS_TIMEOUT_MS } = {
 	}
 }
 async function runAgentApiCli(args) {
-	if (args[0] === "factory") {
-		if (!(`factory-${args[1]}` in FACTORY_USAGE)) {
-			console.error(`glimmervoid factory: expected ${Object.values(FACTORY_USAGE).join(", or ")}`);
-			return 1;
-		}
-		return runAgentApiCli([`factory-${args[1]}`, ...args.slice(2)]);
-	}
 	const verb = args[0];
 	if (!verb || !isAgentApiVerb(verb)) {
 		console.error(`glimmervoid: ${verb || "that"} is not an agent command`);
@@ -202,14 +148,6 @@ async function runAgentApiCli(args) {
 	}
 	const body = BODY_BUILDERS[verb](args.slice(1));
 	if (!body) {
-		if (isFactoryVerb(verb)) {
-			console.error(`glimmervoid factory: expected ${FACTORY_USAGE[verb]}`);
-			return 1;
-		}
-		if (isOrchestratorAgentVerb(verb)) {
-			console.error(`glimmervoid ${verb}: expected a work id matching wrk-[0-9a-f]{16}`);
-			return 1;
-		}
 		if (verb === "edit") {
 			console.error("glimmervoid edit: this command needs a file path, for example \"glimmervoid edit drafts/post.md\"");
 			return 1;

package/dist/chunks/{agent-api-cli-BDu1CxZf.js → agent-api-cli-PfCov-qb.js}

@@ -1 +1 @@
-export { n as runAgentApiCli, r as sessionLimitsHelpLines } from "./agent-api-cli-B5Tm0wXO.js";
+export { n as runAgentApiCli, r as sessionLimitsHelpLines } from "./agent-api-cli-2_RwTTTJ.js";

package/dist/chunks/agent-api-core-D2HLgBEe.js

@@ -0,0 +1,180 @@
+import { a as AgentEditRequest, i as AgentAttentionRequest, s as AgentSpawnRequest, t as AGENT_API_VERBS } from "./session-D2EbiysG.js";
+import { c as spawnRoute, i as editRoute, n as attentionRoute, s as pushRoute, t as NO_OWN_WORKTREE_REASON } from "./session-routes-BQAZzMKZ.js";
+import crypto from "node:crypto";
+var MAX_SPAWNS_IN_FLIGHT = 1;
+var SPAWNABLE_DEPTH = 0;
+var REFUSAL_REASON = "unknown session";
+var INVALID_BODY_STATUS = 400;
+var PUSH_REFUSED_STATUS = 409;
+var PUSH_REFUSAL_COPY = Object.freeze({
+	"no-worktree": () => NO_OWN_WORKTREE_REASON,
+	"merge-in-progress": () => "a merge for this session is already running, so try again when it ends",
+	"not-continuable": () => "this session cannot be merged in its current state",
+	destroyed: () => "this session is ending",
+	"nothing-to-commit": () => "no commit on this branch is missing from the integration branch, so commit your work first",
+	"rebase-conflict": ({ base, conflicts = [] }) => `this branch conflicts with ${base} in ${conflicts.join(", ") || "one or more files"}, so rebase onto ${base}, resolve the conflicts, commit, then push again`,
+	"not-fast-forward": ({ base }) => `${base} could not be fast-forwarded to this branch, and a push is never forced`,
+	"base-diverged": ({ base }) => `the local ${base} and origin/${base} have diverged, which the operator has to reconcile`
+});
+function tokensMatch(presented, expected) {
+	if (presented.length !== expected.length) return false;
+	try {
+		return crypto.timingSafeEqual(Buffer.from(presented, "utf8"), Buffer.from(expected, "utf8"));
+	} catch {
+		return false;
+	}
+}
+function refused() {
+	return {
+		ok: false,
+		status: 404,
+		reason: REFUSAL_REASON
+	};
+}
+function decideAgentRequest({ sessionId, presentedToken, expectedToken, isLoopback }) {
+	if (!isLoopback) return refused();
+	if (!sessionId) return refused();
+	if (!expectedToken) return refused();
+	if (!presentedToken) return refused();
+	if (!tokensMatch(presentedToken, expectedToken)) return refused();
+	return { ok: true };
+}
+function refuseByRole(route) {
+	if (route.answers) return { ok: true };
+	return {
+		ok: false,
+		status: 403,
+		reason: route.reason
+	};
+}
+function decideSpawnAllowance({ liveChildren, lifetimeSpawns, inFlight, depth, isEphemeral }) {
+	const role = refuseByRole(spawnRoute({
+		isEphemeral,
+		isSpawnedChild: depth !== SPAWNABLE_DEPTH
+	}));
+	if (!role.ok) return role;
+	if (inFlight >= MAX_SPAWNS_IN_FLIGHT) return {
+		ok: false,
+		status: 429,
+		reason: "a spawn is already in flight"
+	};
+	if (liveChildren >= 3) return {
+		ok: false,
+		status: 429,
+		reason: `at most 3 spawned sessions may be live at once`
+	};
+	if (lifetimeSpawns >= 10) return {
+		ok: false,
+		status: 429,
+		reason: `this session has used its 10 spawns`
+	};
+	return { ok: true };
+}
+function decideAttentionAllowance(caller) {
+	return refuseByRole(attentionRoute(caller));
+}
+function decideEditAllowance(caller) {
+	return refuseByRole(editRoute(caller));
+}
+function describePushRouteRefusal(caller) {
+	const route = pushRoute(caller);
+	if (route.answers) return null;
+	return {
+		status: PUSH_REFUSED_STATUS,
+		body: {
+			ok: false,
+			reason: route.code,
+			error: route.reason
+		}
+	};
+}
+function isAgentApiVerb(verb) {
+	return AGENT_API_VERBS.includes(verb);
+}
+function refuseInvalidBody(issues) {
+	return {
+		ok: false,
+		status: INVALID_BODY_STATUS,
+		error: issues[0]?.message || "invalid request"
+	};
+}
+function parseAgentVerb(verb, payload) {
+	if (!isAgentApiVerb(verb)) return {
+		ok: false,
+		status: 404,
+		error: REFUSAL_REASON
+	};
+	if (verb === "board" || verb === "push" || verb === "limits") return {
+		ok: true,
+		verb
+	};
+	if (verb === "attention") {
+		const parsed = AgentAttentionRequest.safeParse(payload);
+		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+		return {
+			ok: true,
+			verb,
+			request: parsed.data
+		};
+	}
+	if (verb === "edit") {
+		const parsed = AgentEditRequest.safeParse(payload);
+		if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+		return {
+			ok: true,
+			verb,
+			request: parsed.data
+		};
+	}
+	const parsed = AgentSpawnRequest.safeParse(payload);
+	if (!parsed.success) return refuseInvalidBody(parsed.error.issues);
+	return {
+		ok: true,
+		verb,
+		request: parsed.data
+	};
+}
+function describePushLanding(landing) {
+	if (!landing.merged) {
+		const reason = landing.reason || "unknown";
+		const explain = PUSH_REFUSAL_COPY[reason];
+		return {
+			status: PUSH_REFUSED_STATUS,
+			body: {
+				ok: false,
+				reason,
+				error: explain ? explain(landing) : `the merge stopped: ${reason}`
+			}
+		};
+	}
+	if (landing.pushed) return {
+		status: 200,
+		body: {
+			ok: true,
+			landedOn: landing.base ?? null,
+			pushed: true
+		}
+	};
+	return {
+		status: 200,
+		body: {
+			ok: true,
+			landedOn: landing.base ?? null,
+			pushed: false,
+			note: "landed locally and nothing was pushed, because the repository has no origin remote or origin did not take a fast-forward"
+		}
+	};
+}
+function deriveChildSessionName(parentName, existingNames) {
+	const base = `${String(parentName || "").trim() || "session"} agent`;
+	const taken = new Set(existingNames);
+	let candidate = base;
+	let suffix = 1;
+	while (taken.has(candidate)) {
+		suffix += 1;
+		candidate = `${base} ${suffix}`;
+	}
+	return candidate;
+}
+//#endregion
+export { decideSpawnAllowance as a, describePushRouteRefusal as c, decideEditAllowance as i, isAgentApiVerb as l, decideAgentRequest as n, deriveChildSessionName as o, decideAttentionAllowance as r, describePushLanding as s, REFUSAL_REASON as t, parseAgentVerb as u };

package/dist/chunks/{agent-setup-cli-C9MMiask.js → agent-setup-cli-C1nFdgFg.js}

@@ -1,6 +1,6 @@
 import { a as isMissingFileError, r as errorMessage } from "./text-DoirglWV.js";
-import { a as classifyGrokHooksFile, o as renderGrokHooksFile, t as grok } from "./grok-y65HOvlU.js";
-import { p as writeTextAtomicSync } from "./json-file-CIJf0Cel.js";
+import { a as classifyGrokHooksFile, o as renderGrokHooksFile, t as grok } from "./grok-DeGAXgZF.js";
+import { p as writeTextAtomicSync } from "./json-file-DFCTvPjj.js";
 import fs from "node:fs";
 import path from "node:path";
 //#region server/agent-setup-cli.ts

package/dist/chunks/config-store-8Z9vkWvf.js

@@ -0,0 +1 @@
+export { s as loadConfigFile } from "./config-store-n23JDU4E.js";