glimmervoid 0.45.0 → 0.45.1-next.46

package/dist/chunks/{main-CX9CkTDx.js → main-x9ygUnoL.js}

@@ -2,14 +2,14 @@ import { i as sanitizeOneLine, n as requireExecutableSpawnHelper, r as firstLine
 import { a as isMissingFileError, i as errorText$1, r as errorMessage, t as errorCode } from "./text-DoirglWV.js";
 import { a as sanitizeWorktreeName, i as safePathSegment, n as equalsIgnoringCaseOnWindows, r as isPathInside, t as caseFoldedPathKey } from "./paths-Bu4eH1Yd.js";
 import { c as resolvePackageBin, i as clientDir, n as bundled, o as packageRoot, r as cliPath, s as relayPath, t as assetRoot } from "./runtime-paths-ghcH9CeW.js";
-import { $ as MyPrMergeWhenReadyRequest, $t as RESTARTABLE_STATES, A as SESSION_NAME_RULE_TEXT, At as TeamReviewStateEntry, Bt as HEX_SHA_RE, C as ConversationQuestion, Ct as ReviewResult, D as SESSION_DOC_BODY_CAP_BYTES, Et as TeamReviewActionRequest, Ft as canApproveAfterComment, G as MyPrCheckContextsResponse, Gt as repoParts, H as MyPr, Ht as GH_SEGMENT, It as decisionAsIfApprovalRequired, J as MyPrLaneEntry, K as MyPrKeepMergeableRequest, L as SshSignRequest, M as SSH_SIGN_BODY_CAP_BYTES, Mt as TeamReviewThreadCommentsResponse, Nt as TeamReviewThreadResult, Ot as TeamReviewCompareFiles, Pt as TeamReviewThreadsRepository, Q as MyPrMergeStateResponse, Qt as MERGEABLE_LIVE_STATES, Rt as hasStandingViewerApproval, St as ReviewFinding, Tt as ReviewVerdict, U as MyPrAutoRebase, Ut as NODE_ID_RE, V as LinkedPr, Vt as shortSha, W as MyPrCheckContext, Wt as REPO_SLUG_RE, X as MyPrMergeRequest, Xt as BADGE_LABELS, Y as MyPrMergeMethod, Zt as KILLABLE_STATES, _ as CONVERSATION_PERMISSION_HOOK_EVENT, _t as PrDetail, at as MyPrsState, bt as ReviewComment, dt as DECIDING_REVIEW_STATES, en as STATES, ft as EarlierReview, g as CONVERSATION_APPROVAL_SUMMARY_MAX_CHARS, gt as PostingPlan, h as COHERENCE_HOOKS_INACTIVE, ht as GithubReviewState, it as MyPrsSnapshot, j as SIGN_URL_ENV, jt as TeamReviewStatus, k as SESSION_NAME_PATTERN, kt as TeamReviewResolveResponse, n as AGENT_URL_ENV, nt as MyPrThreadNode, pt as FindingSeverity, r as ASK_USER_QUESTION_TOOL_NAME, rt as MyPrThreadsResponse, ut as CommitSha, v as CONVERSATION_TOOL_RESULT_HOOK_EVENT, vt as QueuedReview, wt as ReviewThreadId, xt as ReviewDraft, z as TaskTitle } from "./session-CUc6d7aS.js";
+import { n as glimmervoidHomeDir, r as isOperatorHomeUnderTest, t as decideConfigPath } from "./config-path-core-DUWk0Lui.js";
+import { $ as MyPrMergeStateResponse, $t as MERGEABLE_LIVE_STATES, A as SHOWN_FILE_CAP_BYTES, At as TeamReviewResolveResponse, B as TaskTitle, C as ConversationQuestion, Ct as ReviewFinding, Dt as TeamReviewActionRequest, E as SESSION_DOC_BODY_CAP_BYTES, Et as ReviewVerdict, Ft as TeamReviewThreadsRepository, G as MyPrCheckContext, Gt as REPO_SLUG_RE, H as LinkedPr, Ht as shortSha, I as ShownFile, It as canApproveAfterComment, K as MyPrCheckContextsResponse, Kt as repoParts, Lt as decisionAsIfApprovalRequired, M as SSH_SIGN_BODY_CAP_BYTES, Mt as TeamReviewStatus, Nt as TeamReviewThreadCommentsResponse, O as SESSION_NAME_PATTERN, Pt as TeamReviewThreadResult, Qt as KILLABLE_STATES, R as SshSignRequest, St as ReviewDraft, Tt as ReviewThreadId, U as MyPr, Ut as GH_SEGMENT, Vt as HEX_SHA_RE, W as MyPrAutoRebase, Wt as NODE_ID_RE, X as MyPrMergeMethod, Y as MyPrLaneEntry, Z as MyPrMergeRequest, Zt as BADGE_LABELS, _ as CONVERSATION_PERMISSION_HOOK_EVENT, _t as PostedReviewEvent, at as MyPrsSnapshot, dt as CommitSha, en as RESTARTABLE_STATES, et as MyPrMergeWhenReadyRequest, ft as DECIDING_REVIEW_STATES, g as CONVERSATION_APPROVAL_SUMMARY_MAX_CHARS, gt as GithubReviewState, h as COHERENCE_HOOKS_INACTIVE, it as MyPrThreadsResponse, j as SIGN_URL_ENV, jt as TeamReviewStateEntry, k as SESSION_NAME_RULE_TEXT, kt as TeamReviewCompareFiles, mt as FindingSeverity, n as AGENT_URL_ENV, ot as MyPrsState, pt as EarlierReview, q as MyPrKeepMergeableRequest, r as ASK_USER_QUESTION_TOOL_NAME, rt as MyPrThreadNode, tn as STATES, v as CONVERSATION_TOOL_RESULT_HOOK_EVENT, vt as PostingPlan, wt as ReviewResult, xt as ReviewComment, yt as PrDetail, zt as hasStandingViewerApproval } from "./session-BwlLY_mv.js";
 import { n as execFileAsync, o as spawn, r as execFileSync, t as execFile } from "./child-process-safe-D4hyVIXj.js";
-import { A as BenchmarkId, At as parseExitPlanModeHookPayload, B as GithubPrKey, Ct as PLAN_BODY_CAP_BYTES, D as pullRequestKeyFromReference, Dt as PLAN_TOOL_NAME, Et as PLAN_RESULT_HOOK_EVENT, F as CommitComparison, Ft as IssueUpdate, G as WorkflowLabelName, H as GithubPrsFrame, I as MergedPrListing, It as IssuesSearchResponse, K as WorkflowsSettings, L as MinedPrReviewData, Lt as IssuesState, M as BenchmarkRun, Mt as GithubIssuePullRequestsRepository, N as BenchmarkStatus, Nt as GithubIssueResponse, O as BenchmarkActionRequest, Ot as PlanDecision, P as BenchmarkSuite, Pt as IssueKey, Q as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, R as PrCheckoutCaseInput, Rt as IssuesStatus, St as changeMapFactId, Tt as PLAN_HOOK_OUTPUT_MAX_CHARS, U as comparablePrKey, V as GithubPrLightSearchNode, W as WorkflowCommentBody, _t as MAX_RAW_LINE_CHARS, a as ConfigUpdate, b as ClientMessage, bt as CoherenceJournalOutput, g as CHANGES_POLL_INTERVAL_MS, gt as SessionSetup, ht as UpdateJournal, j as BenchmarkJudgement, jt as planTitle, k as BenchmarkCase, kt as PlanRevision, l as configIssueMessage, m as USAGE_VENDOR_KEYS, p as USAGE_COST_MODES, q as WorkflowsState, r as BrowserConfig, s as RUNTIME_CONFIG_SCALAR_KEYS, ut as USAGE_INTEGER_RANGES, v as CLIENT_LOG_TEXT_MAX_CHARS, vt as TraceCheckpoint, wt as PLAN_HOOK_EVENT, xt as ChangeMap, y as CONTROL_FRAME_MAX_BYTES, yt as TraceRecord, z as GithubPrDetailNode, zt as issuePullRequestStateFromGithub } from "./config-BLeRKmn9.js";
-import { a as permitsHelpCommand, r as describeSessionLimits } from "./session-routes--hrsvv7a.js";
-import { A as seedTaskTitleSources, B as listRepoWorktreePaths, C as extractPromptTaskTitle, D as parseRefinedTaskTitle, E as parseRefinedSessionName, F as resumePromptFor, H as nextSuggestedName, I as shouldAdoptReportedResumeId, L as claudeProjectsDir, M as RESUME_ID_RE, N as pickAutoResume, O as resolveRefocusTaskTitle, P as resolveResumeTarget, R as encodeProjectDir, S as extractOscTaskTitle, T as isSubstantivePrompt, V as isAutoNameOf, _ as buildTaskTitleRefinementPrompt, a as decideSpawnAllowance, b as decideTaskTitleRefinement, c as describeKeptChildAttention, d as describeUnpushedCloseRefusal, g as buildPersistedTaskTitle, h as projectReviews, i as decideAgentRequest, j as AUTO_CONTINUE_PROMPT, k as resolveTaskTitle, l as describePushLanding, m as projectMyPrs, n as REFUSAL_REASON, o as deriveChildSessionName, p as parseAgentVerb, s as describeChildEndNote, u as describeRoleRefusal, v as chooseRefinedSessionName, w as isSelfWakePrompt, x as extractAiTitle, y as cleanTaskPrompt, z as listRepoConversations } from "./agent-api-core-D49OzKho.js";
+import { A as BenchmarkRun, At as parseExitPlanModeHookPayload, B as GithubPrsFrame, Ct as PLAN_BODY_CAP_BYTES, D as BenchmarkCase, Dt as PLAN_TOOL_NAME, E as BenchmarkActionRequest, Et as PLAN_RESULT_HOOK_EVENT, F as MinedPrReviewData, Ft as IssueUpdate, G as WorkflowsState, H as WorkflowCommentBody, I as PrCheckoutCaseInput, It as IssuesSearchResponse, L as GithubPrDetailNode, Lt as IssuesState, M as BenchmarkSuite, Mt as GithubIssuePullRequestsRepository, N as CommitComparison, Nt as GithubIssueResponse, O as BenchmarkId, Ot as PlanDecision, P as MergedPrListing, Pt as IssueKey, R as GithubPrKey, Rt as IssuesStatus, St as changeMapFactId, T as pullRequestKeyFromReference, Tt as PLAN_HOOK_OUTPUT_MAX_CHARS, U as WorkflowLabelName, V as comparablePrKey, W as WorkflowsSettings, X as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, _ as CONTROL_FRAME_MAX_BYTES, _t as MAX_RAW_LINE_CHARS, a as ConfigUpdate, bt as CoherenceJournalOutput, ct as USAGE_INTEGER_RANGES, d as USAGE_COST_MODES, f as USAGE_VENDOR_KEYS, g as CLIENT_LOG_TEXT_MAX_CHARS, gt as SessionSetup, ht as UpdateJournal, j as BenchmarkStatus, jt as planTitle, k as BenchmarkJudgement, kt as PlanRevision, l as configIssueMessage, m as CHANGES_POLL_INTERVAL_MS, r as BrowserConfig, s as RUNTIME_CONFIG_SCALAR_KEYS, v as ClientMessage, vt as TraceCheckpoint, wt as PLAN_HOOK_EVENT, xt as ChangeMap, yt as TraceRecord, z as GithubPrLightSearchNode, zt as issuePullRequestStateFromGithub } from "./config-BqJTnPae.js";
+import { a as permitsHelpCommand, r as describeSessionLimits } from "./session-routes-CviNvxcz.js";
+import { A as seedTaskTitleSources, B as listRepoWorktreePaths, C as extractPromptTaskTitle, D as parseRefinedTaskTitle, E as parseRefinedSessionName, F as resumePromptFor, H as nextSuggestedName, I as shouldAdoptReportedResumeId, L as claudeProjectsDir, M as RESUME_ID_RE, N as pickAutoResume, O as resolveRefocusTaskTitle, P as resolveResumeTarget, R as encodeProjectDir, S as extractOscTaskTitle, T as isSubstantivePrompt, V as isAutoNameOf, _ as buildTaskTitleRefinementPrompt, a as decideSpawnAllowance, b as decideTaskTitleRefinement, c as describeKeptChildAttention, d as describeUnpushedCloseRefusal, g as buildPersistedTaskTitle, h as projectReviews, i as decideAgentRequest, j as AUTO_CONTINUE_PROMPT, k as resolveTaskTitle, l as describePushLanding, m as projectMyPrs, n as REFUSAL_REASON, o as deriveChildSessionName, p as parseAgentVerb, s as describeChildEndNote, u as describeRoleRefusal, v as chooseRefinedSessionName, w as isSelfWakePrompt, x as extractAiTitle, y as cleanTaskPrompt, z as listRepoConversations } from "./agent-api-core-ClU9-5K3.js";
 import { a as positiveIntOr, c as textOr, i as numberOr, n as isRecord, o as positiveNumberOr, r as nonNegativeIntOr, s as rawTextOr, t as coercedNumberOr } from "./coerce-NSst8oRP.js";
-import { n as glimmervoidHomeDir, t as decideConfigPath } from "./config-path-core-DFt-TemS.js";
-import { i as parseCommandLine, n as warnWhenGitIsTooOld } from "./git-version-C3lznLS_.js";
+import { i as parseCommandLine, n as warnWhenGitIsTooOld } from "./git-version-BpdkKH2j.js";
 import { n as checkGuardrailsDependencies, t as allowGuardedSpawn } from "./guardrails-deps-BjPzk1rE.js";
 import { t as HOOK_URL_ENV } from "./hook-relay-core-DA_bz2KA.js";
 import { t as HOOK_VIA_GUARDRAILS_PROXY_ENV } from "./guardrails-proxy-core-BI3rdY-m.js";
@@ -19,17 +19,18 @@ import { s as saneYoloFiles } from "./rtk-hook-core-B-MpzPin.js";
 import { _ as lineStartOffsets, a as projectForUri, b as replacedSpanOfWholeTextChange, c as visionsLaneReloadSignature, d as applyDidOpen, f as createDocStore, g as lineOfOffset, h as getDoc, i as isUriInProjects, l as applyDidChange, m as formatRange, n as applyEditorNotification, o as resolveVisionsScopeProjects, p as detectBlankLineBoundary, r as createEditorState, s as scopePathsOf, t as ACTIVITY_METHOD, u as applyDidClose, v as listDocs, x as uriOfParams, y as offsetOfPosition } from "./ingest-editor-core-B2tycW_m.js";
 import { n as DEFAULT_MAX_MS, r as nextBackoffMs, t as DEFAULT_BASE_MS } from "./backoff-DjVpfHk7.js";
 import { n as unrefTimer, t as DEFAULT_TIMER_FNS } from "./timer-deps-u2DAQLok.js";
+import { a as readPageTitle, i as filesAfterRetention, n as decideShownKind, o as shownMimeForFilename, r as describeOverCap, t as SHOWN_SNIFF_BYTES } from "./shown-files-core-soMzCQ1D.js";
 import { n as shellQuote } from "./hook-command-core-qTNK-xMF.js";
-import { C as parseCgroupBytes, S as memoryReserveBytes, T as parseMemAvailableBytes, _ as createSpawnGate, a as jsonStateLoadError, b as cgroupLimitBytes, c as loadedJsonValue, d as writeJsonAtomicSync, f as writeTextAtomic, g as createSerialQueue, h as createMemoryAdmission, i as createJsonStateWriter, m as createKeyedSerialQueue, n as appendJsonLines, o as loadJsonStateFile, p as writeTextAtomicSync, r as createJsonStateStore, s as loadJsonStateFileSync, t as appendJsonLine, u as writeJsonAtomic, v as isQueueAdmissionTimeout, w as parseCgroupV2Path, x as headroomFromReadings, y as cgroupAncestorPaths } from "./json-file-DFCTvPjj.js";
-import { B as buildExceptionProperties, F as TELEMETRY_BATCH_URL, G as decideIsDevInstall, H as classifySessionExit, I as TELEMETRY_FLAGS_URL, J as exceptionFingerprint, K as decideRemoteTelemetryState, L as adapterBucket, P as FIRST_RUN_NOTICE, R as buildAiGenerationEvents, U as claudeAccountUuidOf, V as buildPersonProperties, W as codexUserIdOf, X as parsePosthogReleaseId, Y as nodeMajorVersion, Z as resolveProjectToken, a as generateProjectId, at as planWorktreeGc, b as validateSettingsBlock, ct as worktreeIntegrationTips, d as assetForPlatform, dt as isSameDirectoryPath, et as stableConfigKey, f as decideRtkInstall, g as verifyDigest, h as isRtkBinaryName, i as ensureProjectIds, it as planBranchGc, lt as canonicalizePath, m as installTargetPath, n as DEFAULT_CONFIG, nt as DEFAULT_BRANCH_GC_PREFIXES, o as glimmervoidHomeDir$1, ot as sessionIdFromBranch, p as findEscapingArchiveMember, q as decideTelemetryConsent, r as createConfigStore, rt as matchedPrefix, st as usablePrefixes, t as ABORT_CONFIG_SAVE, ut as comparableDirectoryPath, v as mergeSettingsBlock, y as settingsBlockSpecFor, z as buildBrowserExceptionProperties } from "./config-store-CXLnauAa.js";
-import { a as parseDataClientMessage, c as PendingCrashReport, d as TelemetryState, i as parseDataAttach, l as TELEMETRY_EVENT_SCHEMAS, n as HookEnvelope, o as DashboardTelemetryReport, r as DEEP_HISTORY_SCROLLBACK_LINES, t as HTTP_URL_RE } from "./contracts-CucdticH.js";
-import { A as dedupeCodexFiles, B as shouldPersistWarehouse, C as shortSha$1, D as codexSessionIdFromPath, E as codexRootCandidates, F as passOutcome, H as claudeCode, I as projectDirCandidates, L as resolveProjectsDirs, M as grokHomes, N as grokRootCandidates, O as continuationDelayMs, P as isUsageFile, R as scopedClaudeRoots, S as parseResolvedSha, T as codexHomes, V as splitLines$1, _ as isCheckFresh, a as describeAgentResolvability, b as parseRegistryDeprecation, c as isKnownAgentId, d as resolveAdapter, f as setCustomAgents, g as decideUpdateStatus, h as decideInstallFlavor, i as customAgentFingerprint, j as expandTilde, k as decideFileRead, l as listAgentIds, m as readHostCodexVersion, n as cachedAgentResolvability, o as getAdapter, p as codex, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resetCommandCache, v as normalizeSha, w as codexFallbackRoots, x as parseRegistryLatest, y as normalizeUpdateChannel, z as shouldEvaluateDespiteIoFailures } from "./adapters-D99c4zCx.js";
+import { C as parseCgroupBytes, S as memoryReserveBytes, T as parseMemAvailableBytes, _ as createSpawnGate, a as jsonStateLoadError, b as cgroupLimitBytes, c as loadedJsonValue, d as writeJsonAtomicSync, f as writeTextAtomic, g as createSerialQueue, h as createMemoryAdmission, i as createJsonStateWriter, m as createKeyedSerialQueue, n as appendJsonLines, o as loadJsonStateFile, p as writeTextAtomicSync, r as createJsonStateStore, s as loadJsonStateFileSync, t as appendJsonLine, u as writeJsonAtomic, v as isQueueAdmissionTimeout, w as parseCgroupV2Path, x as headroomFromReadings, y as cgroupAncestorPaths } from "./json-file-BjFK_eSH.js";
+import { $ as resolveProjectToken, B as buildAiGenerationEvents, G as claudeAccountUuidOf, H as buildExceptionProperties, I as FIRST_RUN_NOTICE, J as decideRemoteTelemetryState, K as codexUserIdOf, L as TELEMETRY_BATCH_URL, Q as parsePosthogReleaseId, R as TELEMETRY_FLAGS_URL, S as validateSettingsBlock, U as buildPersonProperties, V as buildBrowserExceptionProperties, W as classifySessionExit, X as exceptionFingerprint, Y as decideTelemetryConsent, Z as nodeMajorVersion, _ as isRtkBinaryName, a as ensureProjectIds, at as matchedPrefix, b as mergeSettingsBlock, ct as sessionIdFromBranch, dt as canonicalizePath, ft as comparableDirectoryPath, g as installTargetPath, h as findEscapingArchiveMember, i as createConfigStore, it as DEFAULT_BRANCH_GC_PREFIXES, lt as usablePrefixes, m as decideRtkInstall, n as DEFAULT_CONFIG, nt as stableConfigKey, o as generateProjectId, ot as planBranchGc, p as assetForPlatform, pt as isSameDirectoryPath, q as decideIsDevInstall, s as glimmervoidHomeDir$1, st as planWorktreeGc, t as ABORT_CONFIG_SAVE, ut as worktreeIntegrationTips, v as verifyDigest, x as settingsBlockSpecFor, z as adapterBucket } from "./config-store-BGTg8oKO.js";
+import { a as DEEP_HISTORY_SCROLLBACK_LINES, c as DashboardTelemetryReport, d as TELEMETRY_EVENT_SCHEMAS, i as HookEnvelope, o as parseDataAttach, p as TelemetryState, r as HTTP_URL_RE, s as parseDataClientMessage, u as PendingCrashReport } from "./build-channel-qgKwNssc.js";
+import { A as decideFileRead, B as shouldEvaluateDespiteIoFailures, C as pickNewestPublished, D as codexRootCandidates, E as codexHomes, F as isUsageFile, H as splitLines$1, I as passOutcome, L as projectDirCandidates, M as expandTilde, N as grokHomes, O as codexSessionIdFromPath, P as grokRootCandidates, R as resolveProjectsDirs, S as parseResolvedSha, T as codexFallbackRoots, U as claudeCode, V as shouldPersistWarehouse, _ as isCheckFresh, a as describeAgentResolvability, b as parseRegistryDeprecation, c as isKnownAgentId, d as resolveAdapter, f as setCustomAgents, g as decideUpdateStatus, h as decideInstallFlavor, i as customAgentFingerprint, j as dedupeCodexFiles, k as continuationDelayMs, l as listAgentIds, m as readHostCodexVersion, n as cachedAgentResolvability, o as getAdapter, p as codex, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resetCommandCache, v as normalizeSha, w as shortSha$1, x as parseRegistryLatest, y as normalizeUpdateChannel, z as scopedClaudeRoots } from "./adapters-BE9BKVW0.js";
 import { t as HOOK_TOOLS } from "./hook-tools-Dl7-r2Eb.js";
 import { a as formatSshPublicKey, c as orderAgentSockets, i as commitSigningShimText, l as parseSshPublicKey, n as NO_AGENT_HOLDS_KEY, o as isForwardedAgentDirName, r as agentListsKey, s as isSignableGitObject, t as COMMIT_SIGNING_SHIM_NAME } from "./ssh-signing-core-CRhVVWNW.js";
-import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-B0zBDBak.js";
-import { n as configFileViewOf, u as readSettingsForAgent } from "./settings-readout-core-BOv6tqdK.js";
+import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-CmP36r_s.js";
+import { n as configFileViewOf, u as readSettingsForAgent } from "./settings-readout-core-CS8MPaIE.js";
 import { _ as escapeMarkup, g as createLaneLog, n as createVisionsSetup } from "./visions-setup-VMMyqOpl.js";
-import { t as getRtkPath } from "./rtk-resolver-BDHi6RMv.js";
+import { t as getRtkPath } from "./rtk-resolver-C_IReILP.js";
 import { createRequire } from "node:module";
 import fs, { closeSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, unlinkSync } from "node:fs";
 import path, { join, resolve } from "node:path";
@@ -38,9 +39,9 @@ import { z } from "zod";
 import crypto, { createHash, randomBytes, randomInt, randomUUID } from "node:crypto";
 import WebSocket$1, { WebSocket, WebSocketServer } from "ws";
 import http from "node:http";
+import { pipeline } from "node:stream";
 import net, { isIPv6 } from "node:net";
 import fs$1, { access, chmod, copyFile, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
-import { pipeline } from "node:stream";
 import express from "express";
 import { EventEmitter } from "node:events";
 import pty from "node-pty";
@@ -49,6 +50,95 @@ import { AsyncLocalStorage } from "node:async_hooks";
 import https from "node:https";
 import { StringDecoder } from "node:string_decoder";
 import { monitorEventLoopDelay } from "node:perf_hooks";
+//#region server/removal-journal.ts
+function removalsJournalPath(glimmervoidHome) {
+	return path.join(glimmervoidHome, "logs", "removals.jsonl");
+}
+async function appendRemovalRecord(journalPath, record, log = console) {
+	return appendJsonLine(journalPath, record, { mkdir: true }).then(() => true, (error) => {
+		log.warn(`[removals] kept ${record.path ?? record.branch} because its removal record could not be written: ${errorMessage(error)}`);
+		return false;
+	});
+}
+function appendRemovalRecordSync(journalPath, record, log = console) {
+	try {
+		fs.mkdirSync(path.dirname(journalPath), { recursive: true });
+		fs.appendFileSync(journalPath, `${JSON.stringify(record)}\n`, "utf8");
+		return true;
+	} catch (error) {
+		log.warn(`[removals] kept ${record.path ?? record.branch} because its removal record could not be written: ${errorMessage(error)}`);
+		return false;
+	}
+}
+async function recordSweptPath({ cause, kind, path: sweptPath, checksPassed, sessionId = null, journalPath = removalsJournalPath(glimmervoidHomeDir$1()), log = console }) {
+	return appendRemovalRecord(journalPath, {
+		ts: Date.now(),
+		cause,
+		kind,
+		path: sweptPath,
+		branch: null,
+		projectPath: null,
+		sessionId,
+		checksPassed,
+		pid: process.pid
+	}, log);
+}
+//#endregion
+//#region server/core/removal-guard-core.ts
+var SESSION_WORK_RECENCY_FLOOR_MS = 864e5;
+var AUTOMATIC_REMOVAL_CAUSES = /* @__PURE__ */ new Set([
+	"branch-gc",
+	"boot-reconcile",
+	"owned-paths"
+]);
+var SESSION_OWNER_PREFIX$1 = "session:";
+function sessionIdFromOwner(owner) {
+	if (owner === null || !owner.startsWith(SESSION_OWNER_PREFIX$1)) return null;
+	return owner.slice(8);
+}
+function isRecencyProbeNeeded(facts) {
+	return decideKeepByOwnership(facts) === null;
+}
+function decideKeepByOwnership(facts) {
+	if (!AUTOMATIC_REMOVAL_CAUSES.has(facts.cause)) return {
+		keep: false,
+		checksPassed: ["explicit-cause"]
+	};
+	if (facts.sessionId === null && facts.ledgerOwnerSessionId === null) return {
+		keep: false,
+		checksPassed: ["not-session-work"]
+	};
+	if (facts.sessionId !== null && facts.protectedSessionIds.has(facts.sessionId)) return {
+		keep: true,
+		reason: "protected-session"
+	};
+	if (facts.ledgerOwnerSessionId !== null && facts.protectedSessionIds.has(facts.ledgerOwnerSessionId)) return {
+		keep: true,
+		reason: "ledger-owned"
+	};
+	return null;
+}
+function decideRemovalKeep(facts) {
+	const byOwnership = decideKeepByOwnership(facts);
+	if (byOwnership !== null) return byOwnership;
+	if (facts.lastTouchedMs === null) return {
+		keep: true,
+		reason: "touch-probe-failed"
+	};
+	if (facts.nowMs - facts.lastTouchedMs < SESSION_WORK_RECENCY_FLOOR_MS) return {
+		keep: true,
+		reason: "recently-touched"
+	};
+	return {
+		keep: false,
+		checksPassed: [
+			"not-protected",
+			"not-ledger-owned",
+			"untouched-24h"
+		]
+	};
+}
+//#endregion
 //#region shared/contracts/owned-paths.ts
 var OwnedPathOwner = z.string().regex(/^(session|lane):[A-Za-z0-9._:#-]+$/);
 var OwnedPathEntry = z.object({
@@ -82,9 +172,6 @@ function holdsKeptPath(folderPath, keptPaths) {
 }
 //#endregion
 //#region server/owned-paths-ledger.ts
-function ownedPathsLedgerPath(glimmervoidHome = glimmervoidHomeDir$1()) {
-	return path.join(glimmervoidHome, "owned-paths.json");
-}
 function ledgerKey(ownedPath) {
 	return caseFoldedPathKey(path.resolve(ownedPath));
 }
@@ -140,6 +227,10 @@ function createOwnedPathsLedger({ filePath, log = console }) {
 		if (!isLoaded || !entriesByPath.delete(ledgerKey(await canonicalOwnedPath(ownedPath)))) return;
 		await persist();
 	}
+	async function ownerOf(ownedPath) {
+		await store.load();
+		return entriesByPath.get(ledgerKey(await canonicalOwnedPath(ownedPath)))?.owner ?? null;
+	}
 	async function loadEarlierRunEntries() {
 		await store.load();
 		if (!isLoaded) return { ok: false };
@@ -152,6 +243,7 @@ function createOwnedPathsLedger({ filePath, log = console }) {
 		loadEarlierRunEntries,
 		record,
 		forget,
+		ownerOf,
 		idle: () => store.idle()
 	};
 }
@@ -173,14 +265,28 @@ async function removeOrphanedWorktree(entry, git, shareList) {
 	const removed = await git.removeWorkspaceMember({
 		projectPath: entry.projectPath,
 		cwd: entry.path,
-		shareList
+		branch: entry.branch,
+		shareList,
+		cause: "owned-paths"
 	});
+	if (removed.removalKept) return `the removal guard kept it: ${removed.removalKept}`;
 	if (!removed.ok || await pathExists$1(entry.path)) return `git could not remove it: ${removed.err || "the folder is still there"}`;
 	return null;
 }
-async function removeOrphanedFolder(entry, ledger, keptPaths) {
+async function removeOrphanedFolder(entry, ledger, keptPaths, journalPath, log) {
 	if (holdsKeptPath(entry.path, keptPaths)) return "it holds a checkout that was kept";
 	if (await holdsCheckout(entry.path)) return "it still holds a checkout";
+	if (!await appendRemovalRecord(journalPath, {
+		ts: Date.now(),
+		cause: "owned-paths",
+		kind: "folder",
+		path: entry.path,
+		branch: null,
+		projectPath: entry.projectPath,
+		sessionId: sessionIdFromOwner(entry.owner),
+		checksPassed: ["session-not-configured", "holds-no-checkout"],
+		pid: process.pid
+	}, log)) return "its removal record could not be written";
 	const removal = await fs$1.rm(entry.path, {
 		recursive: true,
 		force: true
@@ -189,7 +295,7 @@ async function removeOrphanedFolder(entry, ledger, keptPaths) {
 	await ledger.forget(entry.path);
 	return null;
 }
-async function reconcileOwnedPaths({ ledger, configuredSessionIds, git, shareList, log = console }) {
+async function reconcileOwnedPaths({ ledger, configuredSessionIds, git, shareList, journalPath = removalsJournalPath(glimmervoidHomeDir$1()), log = console }) {
 	const loaded = await ledger.loadEarlierRunEntries();
 	if (!loaded.ok) {
 		log.warn("[owned-paths] deleted nothing at startup because the owned paths ledger could not be read");
@@ -201,7 +307,7 @@ async function reconcileOwnedPaths({ ledger, configuredSessionIds, git, shareLis
 			await ledger.forget(entry.path);
 			continue;
 		}
-		const keepReason = entry.kind === "folder" ? await removeOrphanedFolder(entry, ledger, keptPaths) : await removeOrphanedWorktree(entry, git, shareList);
+		const keepReason = entry.kind === "folder" ? await removeOrphanedFolder(entry, ledger, keptPaths, journalPath, log) : await removeOrphanedWorktree(entry, git, shareList);
 		if (!keepReason) {
 			log.log(`[owned-paths] deleted ${entry.path}, left by ${entry.owner}`);
 			continue;
@@ -462,13 +568,22 @@ async function listScratchFolderNames(scratchRoot) {
 async function sweepOrphanedHostScratch() {
 	const scratchRoot = hostScratchRoot();
 	const orphanedFolderNames = decideOrphanedScratchFolders(await listScratchFolderNames(scratchRoot), HOST_SCRATCH_PREFIXES, folderNamesCreatedByThisProcess);
-	for (const folderName of orphanedFolderNames) try {
-		await rm(path.join(scratchRoot, folderName), {
-			recursive: true,
-			force: true
-		});
-	} catch (error) {
-		console.warn(`Could not remove leftover scratch folder ${folderName}: ${error instanceof Error ? error.message : String(error)}`);
+	for (const folderName of orphanedFolderNames) {
+		const folderPath = path.join(scratchRoot, folderName);
+		if (!await recordSweptPath({
+			cause: "host-scratch",
+			kind: "folder",
+			path: folderPath,
+			checksPassed: ["not-made-by-this-process"]
+		})) continue;
+		try {
+			await rm(folderPath, {
+				recursive: true,
+				force: true
+			});
+		} catch (error) {
+			console.warn(`Could not remove leftover scratch folder ${folderName}: ${error instanceof Error ? error.message : String(error)}`);
+		}
 	}
 }
 //#endregion
@@ -1773,53 +1888,98 @@ async function sweepSessionUploads(dir, justWritten) {
 		await fs$1.unlink(path.join(dir, name));
 	} catch {}
 }
+function streamRequestToFile({ req, savedPath, capBytes }) {
+	return new Promise((resolve) => {
+		const writeStream = fs.createWriteStream(savedPath, { mode: 384 });
+		let bytesReceived = 0;
+		let settled = false;
+		const settle = (outcome) => {
+			if (settled) return;
+			settled = true;
+			resolve(outcome);
+		};
+		let discardWanted = false;
+		let streamClosed = false;
+		const unlinkPartial = () => {
+			fs$1.unlink(savedPath).catch(() => {});
+		};
+		const discardPartial = () => {
+			discardWanted = true;
+			if (streamClosed) unlinkPartial();
+		};
+		writeStream.on("close", () => {
+			streamClosed = true;
+			if (discardWanted) unlinkPartial();
+		});
+		writeStream.on("error", () => {
+			settle({
+				ok: false,
+				reason: "write-failed"
+			});
+			discardPartial();
+		});
+		req.on("data", (chunk) => {
+			bytesReceived += chunk.length;
+			if (!exceedsUploadCap(bytesReceived, capBytes)) return;
+			settle({
+				ok: false,
+				reason: "over-cap"
+			});
+			req.destroy();
+			writeStream.destroy();
+			discardPartial();
+		});
+		pipeline(req, writeStream, (error) => {
+			if (error) {
+				settle({
+					ok: false,
+					reason: "aborted"
+				});
+				discardPartial();
+				return;
+			}
+			if (settled) {
+				discardPartial();
+				return;
+			}
+			settle({
+				ok: true,
+				sizeBytes: bytesReceived
+			});
+		});
+	});
+}
+var UPLOAD_FAILURE_REPLIES = {
+	"over-cap": {
+		status: 413,
+		error: "file is too large"
+	},
+	"write-failed": {
+		status: 500,
+		error: "could not store the upload"
+	},
+	aborted: {
+		status: 400,
+		error: "upload failed"
+	}
+};
 function receiveUpload({ req, res, sess, dir, filename, savedPath }) {
-	const writeStream = fs.createWriteStream(savedPath);
-	let bytesReceived = 0;
-	let settled = false;
 	const answer = (status, body) => {
-		if (settled) return;
-		settled = true;
 		if (!res.headersSent) res.status(status).json(body);
 	};
-	let discardWanted = false;
-	let streamClosed = false;
-	const unlinkPartial = () => {
-		fs$1.unlink(savedPath).catch(() => {});
-	};
-	const discardPartial = () => {
-		discardWanted = true;
-		if (streamClosed) unlinkPartial();
-	};
-	writeStream.on("close", () => {
-		streamClosed = true;
-		if (discardWanted) unlinkPartial();
-	});
-	writeStream.on("error", () => {
-		answer(500, { error: "could not store the upload" });
-		discardPartial();
-	});
-	req.on("data", (chunk) => {
-		bytesReceived += chunk.length;
-		if (!exceedsUploadCap(bytesReceived)) return;
-		answer(413, { error: "file is too large" });
-		req.destroy();
-		writeStream.destroy();
-		discardPartial();
-	});
-	pipeline(req, writeStream, (error) => {
-		if (error) {
-			answer(400, { error: "upload failed" });
-			discardPartial();
-			return;
-		}
-		if (settled) {
-			discardPartial();
+	streamRequestToFile({
+		req,
+		savedPath,
+		capBytes: MAX_UPLOAD_BYTES
+	}).then((outcome) => {
+		if (!outcome.ok) {
+			const failure = UPLOAD_FAILURE_REPLIES[outcome.reason];
+			answer(failure.status, { error: failure.error });
 			return;
 		}
 		if (!sess.hasLivePty) {
 			answer(409, { error: "session has no live terminal" });
-			discardPartial();
+			fs$1.unlink(savedPath).catch(() => {});
 			return;
 		}
 		sess.write(framePathPaste(savedPath));
@@ -1831,6 +1991,112 @@ function receiveUpload({ req, res, sess, dir, filename, savedPath }) {
 		sweepSessionUploads(dir, filename);
 	});
 }
+function decodeHeaderText(header) {
+	if (typeof header !== "string" || header.length === 0) return null;
+	try {
+		return decodeURIComponent(header);
+	} catch {
+		return null;
+	}
+}
+function declaredContentLength(req) {
+	const declared = Number(req.headers["content-length"]);
+	return Number.isFinite(declared) && declared >= 0 ? declared : null;
+}
+function answerShow({ req, res, session, shownFiles }) {
+	const name = path.basename(decodeHeaderText(req.headers["x-glimmervoid-show-name"]) ?? "");
+	if (!name) {
+		res.status(400).json({
+			ok: false,
+			error: "show needs the file name in x-glimmervoid-show-name"
+		});
+		return;
+	}
+	const caption = decodeHeaderText(req.headers["x-glimmervoid-show-caption"])?.slice(0, 500) ?? null;
+	const declaredBytes = declaredContentLength(req);
+	if (declaredBytes !== null && declaredBytes > 209715200) {
+		res.status(413).json({
+			ok: false,
+			error: describeOverCap(name, declaredBytes)
+		});
+		req.resume();
+		return;
+	}
+	const answer = (status, body) => {
+		if (!res.headersSent) res.status(status).json(body);
+	};
+	shownFiles.reserveIncomingPath(session.id).then(async (incomingPath) => {
+		const outcome = await streamRequestToFile({
+			req,
+			savedPath: incomingPath,
+			capBytes: SHOWN_FILE_CAP_BYTES
+		});
+		if (!outcome.ok) {
+			const failure = UPLOAD_FAILURE_REPLIES[outcome.reason];
+			answer(failure.status, {
+				ok: false,
+				error: outcome.reason === "over-cap" ? describeOverCap(name, declaredBytes) : failure.error
+			});
+			return;
+		}
+		const admitted = await shownFiles.admit(session, {
+			incomingPath,
+			name,
+			caption,
+			sizeBytes: outcome.sizeBytes
+		});
+		if (!admitted.ok) {
+			answer(admitted.status, {
+				ok: false,
+				error: admitted.error
+			});
+			return;
+		}
+		answer(200, {
+			ok: true,
+			shown: {
+				name: admitted.file.name,
+				kind: admitted.file.kind
+			}
+		});
+	}).catch(() => {
+		answer(500, {
+			ok: false,
+			error: "could not store the file"
+		});
+	});
+}
+var SHOWN_FILE_SANDBOX_POLICY = "sandbox allow-scripts allow-popups allow-modals allow-forms";
+function serveShownFile(req, res, shownFiles) {
+	const servable = shownFiles?.findServable(req.params.sessionId, req.params.filename) ?? null;
+	if (!servable) {
+		res.status(404).end();
+		return;
+	}
+	res.setHeader("Content-Security-Policy", SHOWN_FILE_SANDBOX_POLICY);
+	res.setHeader("X-Content-Type-Options", "nosniff");
+	res.setHeader("Cache-Control", "private, max-age=604800, immutable");
+	res.setHeader("Accept-Ranges", "bytes");
+	const byteRange = decideByteRange(req.headers.range, servable.sizeBytes);
+	if (byteRange.kind === "unsatisfiable") {
+		res.status(416).setHeader("Content-Range", `bytes */${servable.sizeBytes}`);
+		res.end();
+		return;
+	}
+	res.setHeader("Content-Type", servable.mime);
+	if (byteRange.kind === "partial") {
+		res.status(206);
+		res.setHeader("Content-Range", `bytes ${byteRange.start}-${byteRange.end}/${servable.sizeBytes}`);
+		res.setHeader("Content-Length", String(byteRange.end - byteRange.start + 1));
+		pipeline(fs.createReadStream(servable.path, {
+			start: byteRange.start,
+			end: byteRange.end
+		}), res, () => {});
+		return;
+	}
+	res.setHeader("Content-Length", String(servable.sizeBytes));
+	pipeline(fs.createReadStream(servable.path), res, () => {});
+}
 function refuseAgentRequest(res) {
 	res.status(404).json({
 		ok: false,
@@ -1897,7 +2163,7 @@ function mountAgentIngressRoutes(app, dependencies) {
 	const { hookRouter, getSession, getUsage, getPlanReview = () => null, refocusContextFor = () => ({
 		taskTitle: null,
 		latestPlanTitle: null
-	}), getAgentApi = () => null, recordOutcome = () => {}, logger = console } = dependencies;
+	}), getAgentApi = () => null, getShownFiles = () => null, recordOutcome = () => {}, logger = console } = dependencies;
 	app.post("/hook/:glimmervoidId/:event", (req, res) => {
 		if (!isLoopbackRequest(req)) {
 			recordOutcome("hookRejectedNonLoopback");
@@ -1962,6 +2228,33 @@ function mountAgentIngressRoutes(app, dependencies) {
 			});
 		});
 	});
+	app.post("/agent/:glimmervoidId/show", (req, res) => {
+		const agentApi = getAgentApi();
+		const shownFiles = getShownFiles();
+		const session = getSession(req.params.glimmervoidId);
+		if (!decideAgentRequest({
+			sessionId: req.params.glimmervoidId,
+			presentedToken: presentedToken(req),
+			expectedToken: session?.agentToken ?? null,
+			isLoopback: isLoopbackRequest(req)
+		}).ok || !session || !agentApi || !shownFiles) {
+			req.resume();
+			refuseAgentRequest(res);
+			return;
+		}
+		const roleRefusal = agentApi.refuseRole(session, "show");
+		if (roleRefusal) {
+			req.resume();
+			res.status(roleRefusal.status).json(roleRefusal.body);
+			return;
+		}
+		answerShow({
+			req,
+			res,
+			session,
+			shownFiles
+		});
+	});
 	app.post("/agent/:glimmervoidId/:verb", (req, res) => {
 		const agentApi = getAgentApi();
 		const session = getSession(req.params.glimmervoidId);
@@ -2150,6 +2443,9 @@ function createBackendHttpApp(dependencies) {
 			if (!res.headersSent) res.status(404).end();
 		});
 	});
+	app.get("/shown/:sessionId/:filename", (req, res) => {
+		serveShownFile(req, res, dependencies.getShownFiles?.() ?? null);
+	});
 	mountCustomSoundRoutes(app, { soundsDir: customSoundsDir });
 	if (staticDir === "auto") {
 		if (!fs.existsSync(path.join(clientDir, "index.html"))) throw Object.assign(/* @__PURE__ */ new Error("Dashboard build not found (dist/client). Run `npm run build` first, or use `npm run dev`."), { glimmervoidBoot: true });
@@ -2313,9 +2609,6 @@ function projectSessionSnapshots(source) {
 		resumeSessionId: source.resumeSessionId,
 		activeAgents: source.activeAgents,
 		awaitingBackgroundTasks: source.awaitingBackgroundTasks,
-		isCompacting: source.isCompacting ?? false,
-		isWaitingForMemory: source.isWaitingForMemory === true,
-		pendingWakeup: source.pendingWakeup,
 		pendingPromptKind: source.pendingPromptKind,
 		conversationApproval: source.conversationApproval ?? null,
 		hasConversationBridge: source.hasConversationBridge === true,
@@ -2882,6 +3175,7 @@ var AGENT_LOGINS_SIBLING_ENTRY = "agent-logins";
 var GLIMMERVOID_CONFIG_SIBLING_ENTRIES = Object.freeze([
 	AGENT_LOGINS_SIBLING_ENTRY,
 	"bin",
+	"owned-paths.json",
 	"pairings.json",
 	"pairings-seen.json",
 	"plans",
@@ -3206,7 +3500,8 @@ function buildGuardrailsLaunchPlan(role, host) {
 					...filesystemWrites(role, host, writablePaths)
 				},
 				terminalScope: isStandardLevel(role) ? "any" : "own",
-				allowAppleEvents: isStandardLevel(role)
+				allowAppleEvents: isStandardLevel(role),
+				allowMachRegister: isStandardLevel(role)
 			},
 			launchEnv: Object.assign({ CLAUDE_CODE_TMPDIR: host.tempDir }, ...role.vendors.map((vendor) => VENDOR_PROFILES[vendor].launchEnv), launchHomeEnv(role, host)),
 			guardedEnv: guardedEnvFor(role, host),
@@ -3244,6 +3539,12 @@ async function pruneAgedFiles({ directory, suffixes, retainDays, now = Date.now(
 		const filePath = path.join(directory, entry);
 		try {
 			if ((await fsPromises.stat(filePath)).mtimeMs >= cutoff) continue;
+			if (!await recordSweptPath({
+				cause: "aged-files",
+				kind: entryMode === "directory" ? "folder" : "file",
+				path: filePath,
+				checksPassed: [`untouched-${retainDays}d`]
+			})) continue;
 			if (entryMode === "directory") await fsPromises.rm(filePath, {
 				recursive: true,
 				force: true
@@ -3626,12 +3927,15 @@ async function sweepOrphanedGuardrailsLaunches(log = console) {
 			const ownerPath = path.join(policyDir, entryName);
 			const owner = await readOwnerFile(ownerPath);
 			if (owner === null || !isOwnerProcessGone(owner)) continue;
+			const launchHomeDir = path.join(glimmervoidHome, LAUNCH_HOME_FOLDER, launchId);
+			const ownedTempDir = owner.ownsTempDir ? path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER, launchId) : null;
+			if (!await recordSweptLaunchFolders([launchHomeDir, ownedTempDir], log)) continue;
 			try {
 				await removeLaunch({
 					policyPath: path.join(policyDir, `${launchId}.json`),
 					ownerPath,
-					launchHomeDir: path.join(glimmervoidHome, LAUNCH_HOME_FOLDER, launchId),
-					ownedTempDir: owner.ownsTempDir ? path.join(glimmervoidHome, GUARDRAILS_TEMP_FOLDER, launchId) : null
+					launchHomeDir,
+					ownedTempDir
 				}, owner, launchId, { onlyNewerLogins: true });
 				removedLaunchCount += 1;
 			} catch (error) {
@@ -3643,6 +3947,19 @@ async function sweepOrphanedGuardrailsLaunches(log = console) {
 		log.warn(`[guardrails] could not sweep leftover launch folders: ${errorMessage(error)}`);
 	}
 }
+async function recordSweptLaunchFolders(folderPaths, log) {
+	for (const folderPath of folderPaths) {
+		if (folderPath === null) continue;
+		if (!await recordSweptPath({
+			cause: "guardrails-temp",
+			kind: "folder",
+			path: folderPath,
+			checksPassed: ["owner-process-gone"],
+			log
+		})) return false;
+	}
+	return true;
+}
 function sessionIdsWithLockFilesIn(entryNames) {
 	return new Set(entryNames.map(sessionIdOfLockFile).filter((sessionId) => sessionId !== null));
 }
@@ -3655,6 +3972,19 @@ async function deleteSessionTempFolderOnceUnheld(policyDir, sessionId, sessionTe
 		return;
 	}
 	if (trashFolder === null) return;
+	if (!await recordSweptPath({
+		cause: "guardrails-temp",
+		kind: "folder",
+		path: sessionTempFolder,
+		sessionId,
+		checksPassed: ["no-lock-held"],
+		log
+	})) {
+		await rename(trashFolder, sessionTempFolder).catch((error) => {
+			log.warn(`[guardrails] could not move session temp folder ${trashFolder} back to ${sessionTempFolder}: ${errorMessage(error)}`);
+		});
+		return;
+	}
 	await rm(trashFolder, {
 		recursive: true,
 		force: true
@@ -4704,6 +5034,7 @@ function createAgentApiWiring({ config, agentSessions, listAllSessions, listBoar
 		}),
 		push,
 		edit,
+		show: () => refusal(400, "show sends the file itself; run glimmervoid show <path>"),
 		limits: (session) => ({
 			status: 200,
 			body: limits(session)
@@ -4740,8 +5071,12 @@ function createAgentApiWiring({ config, agentSessions, listAllSessions, listBoar
 	function markChildWorktreeDiscard(childId) {
 		childIdsToDiscard.add(childId);
 	}
+	function refuseRole(session, verb) {
+		return describeRoleRefusal(verb, roleFactsOf(session));
+	}
 	return {
 		handle,
+		refuseRole,
 		markChildWorktreeDiscard
 	};
 }
@@ -4830,11 +5165,7 @@ function createRemoteSetupWiring({ config, agentSessions, makeSession, wireSessi
 }
 //#endregion
 //#region server/core/control-replay-core.ts
-var REPLAYABLE_EXACT = /* @__PURE__ */ new Set([
-	"notify",
-	"session-error",
-	"post-turn-result"
-]);
+var REPLAYABLE_EXACT = /* @__PURE__ */ new Set(["notify", "session-error"]);
 function isReplayable(type) {
 	return typeof type === "string" && REPLAYABLE_EXACT.has(type);
 }
@@ -5059,7 +5390,7 @@ function planDeepSlices({ lineCount, rows, sliceRows, isWrapped }) {
 //#endregion
 //#region server/ws-sender.ts
 var OPEN = 1;
-var DEFAULTS$1 = Object.freeze({
+var DEFAULTS = Object.freeze({
 	maxSendBuffer: 65536,
 	highWaterMark: 1 << 20,
 	lowWaterMark: 1 << 18,
@@ -5067,10 +5398,10 @@ var DEFAULTS$1 = Object.freeze({
 });
 function createWsSender(ws, opts = {}) {
 	const cfg = {
-		maxSendBuffer: opts.maxSendBuffer ?? DEFAULTS$1.maxSendBuffer,
-		highWaterMark: opts.highWaterMark ?? DEFAULTS$1.highWaterMark,
-		lowWaterMark: opts.lowWaterMark ?? DEFAULTS$1.lowWaterMark,
-		stallCloseMs: opts.stallCloseMs ?? DEFAULTS$1.stallCloseMs
+		maxSendBuffer: opts.maxSendBuffer ?? DEFAULTS.maxSendBuffer,
+		highWaterMark: opts.highWaterMark ?? DEFAULTS.highWaterMark,
+		lowWaterMark: opts.lowWaterMark ?? DEFAULTS.lowWaterMark,
+		stallCloseMs: opts.stallCloseMs ?? DEFAULTS.stallCloseMs
 	};
 	const scheduleImmediate = opts.setImmediateFn || setImmediate;
 	const setTimer = opts.setTimeoutFn || ((fn, ms) => setTimeout(fn, ms));
@@ -6367,605 +6698,6 @@ function compareEntries(a, b) {
 	return laneKey(a.vendor, a.sessionId).localeCompare(laneKey(b.vendor, b.sessionId));
 }
 //#endregion
-//#region session/core/slop-code-patterns.ts
-var TS_EXTS = /* @__PURE__ */ new Set([
-	".ts",
-	".tsx",
-	".mts",
-	".cts"
-]);
-var PY_EXTS = /* @__PURE__ */ new Set([".py"]);
-function extOf(relPath) {
-	if (!relPath) return "";
-	const s = String(relPath).replace(/\\/g, "/");
-	const base = s.slice(s.lastIndexOf("/") + 1);
-	const dot = base.lastIndexOf(".");
-	return dot <= 0 ? "" : base.slice(dot).toLowerCase();
-}
-var SUBRULES = [
-	{
-		id: "swallowed-exception",
-		axis: "lies",
-		re: /catch\s*(?:\([^)]*\))?\s*\{\s*(?:\/\/[^\n]*\s*|\/\*[\s\S]*?\*\/\s*)?\}/g
-	},
-	{
-		id: "opener-comment",
-		axis: "noise",
-		re: /^[ \t]*(?:\/\/+|#|\*)[ \t]*(?:(?:now|first|next|then|here)[, ]+(?:we|let)\b|let'?s\b|we\s+(?:now|then|will|can|need|first)\b|this\s+(?:function|method|class|code|section|block|module|file)\b|step\s+\d+\s*:)/gim
-	},
-	{
-		id: "placeholder",
-		axis: "lies",
-		re: /(?:in\s+a\s+real\s+(?:implementation|app|application|world|system|scenario|project)|in\s+production(?:[,\s]|\b)|for\s+now[, ]+(?:we|just|this|i'?ll|return|use)|this\s+is\s+(?:a\s+)?simplified|simplified\s+(?:version|example|implementation)|for\s+(?:demonstration|illustration|example)\s+purposes|placeholder\s+(?:for|implementation|value)|you\s+(?:would|could|might|may)\s+(?:want\s+to\s+)?(?:add|implement|replace|put))/gi
-	},
-	{
-		id: "debug-leftover",
-		axis: "noise",
-		re: /\bconsole\.(?:log|debug|info|trace)\s*\(|\bdebugger\b/g
-	},
-	{
-		id: "debug-print-py",
-		axis: "noise",
-		langs: PY_EXTS,
-		re: /^[ \t]*print\s*\(/gim
-	},
-	{
-		id: "hedge-comment",
-		axis: "soul",
-		re: /(?:\/\/+|#)[^\n]*\b(?:should\s+(?:work|be\s+fine|do\s+it|handle)|not\s+(?:entirely\s+)?sure|probably\s+(?:works?|fine|ok|okay)|hopefully|i\s+think\s+this|might\s+(?:work|break|fail)|not\s+sure\s+(?:why|if|how))\b/gi
-	},
-	{
-		id: "type-escape",
-		axis: "soul",
-		langs: TS_EXTS,
-		re: /\bas\s+any\b|:\s*any(?:\b|\[)|@ts-(?:ignore|nocheck|expect-error)\b|eslint-disable(?:-next-line|-line)?\b/g
-	}
-];
-var DEFAULT_FINDINGS_CAP = 200;
-function detectCodeSlop(content, relPath, cap = DEFAULT_FINDINGS_CAP) {
-	if (typeof content !== "string" || content.length === 0) return [];
-	const ext = extOf(relPath);
-	const findings = [];
-	for (const sub of SUBRULES) {
-		if (sub.langs && !sub.langs.has(ext)) continue;
-		sub.re.lastIndex = 0;
-		for (;;) {
-			const m = sub.re.exec(content);
-			if (m === null) break;
-			findings.push({
-				subrule: sub.id,
-				axis: sub.axis,
-				index: m.index
-			});
-			if (findings.length >= cap) break;
-		}
-		if (findings.length >= cap) break;
-	}
-	findings.sort((a, b) => a.index - b.index);
-	return findings;
-}
-//#endregion
-//#region session/core/post-turn-rules.ts
-var BOM = String.fromCharCode(65279);
-var NL = String.fromCharCode(10);
-var CRLF = String.fromCharCode(13, 10);
-function posAt(content, offset) {
-	let line = 1;
-	let col = 1;
-	const end = Math.min(offset, content.length);
-	for (let i = 0; i < end; i++) {
-		if (content[i] !== NL) {
-			col++;
-			continue;
-		}
-		line++;
-		col = 1;
-	}
-	return {
-		line,
-		col
-	};
-}
-function detectSlop(content, ctx) {
-	const relPath = ctx?.relPath;
-	const matches = detectCodeSlop(content, relPath);
-	const findings = [];
-	let pos = 0;
-	let line = 1;
-	let col = 1;
-	for (const m of matches) {
-		const target = m.index < content.length ? m.index : content.length;
-		while (pos < target) {
-			if (content.charCodeAt(pos) === 10) {
-				line++;
-				col = 1;
-				pos++;
-				continue;
-			}
-			col++;
-			pos++;
-		}
-		findings.push({
-			rule: "slop",
-			subrule: m.subrule,
-			axis: m.axis,
-			line,
-			col
-		});
-	}
-	return {
-		content,
-		findings
-	};
-}
-function fixTrailingWhitespace(content) {
-	const findings = [];
-	return {
-		content: content.replace(/[ \t]+(\r?\n|$)/g, (m, tail, offset) => {
-			const { line, col } = posAt(content, offset);
-			findings.push({
-				rule: "trailingWs",
-				line,
-				col,
-				before: m,
-				after: tail
-			});
-			return tail;
-		}),
-		findings
-	};
-}
-function fixFinalNewline(content) {
-	if (content === "" || content.charCodeAt(content.length - 1) === 10) return {
-		content,
-		findings: []
-	};
-	const nl = content.indexOf(CRLF) !== -1 ? CRLF : NL;
-	const { line, col } = posAt(content, content.length);
-	return {
-		content: content + nl,
-		findings: [{
-			rule: "finalNewline",
-			line,
-			col,
-			before: "",
-			after: nl
-		}]
-	};
-}
-function stripBom(content) {
-	if (content.charCodeAt(0) !== 65279) return {
-		content,
-		findings: []
-	};
-	return {
-		content: content.slice(1),
-		findings: [{
-			rule: "bom",
-			line: 1,
-			col: 1,
-			before: BOM,
-			after: ""
-		}]
-	};
-}
-var RULES = Object.freeze({
-	bom: { fix: stripBom },
-	trailingWs: { fix: fixTrailingWhitespace },
-	finalNewline: { fix: fixFinalNewline },
-	slop: { fix: detectSlop }
-});
-var RULE_ORDER = [
-	"bom",
-	"trailingWs",
-	"finalNewline",
-	"slop"
-];
-var EXEMPT_MARKER = "glimmervoid-no-fix";
-function exemptions(content) {
-	const head = content.slice(0, 4096);
-	if (head.indexOf(EXEMPT_MARKER) === -1) return {
-		all: false,
-		rules: /* @__PURE__ */ new Set()
-	};
-	const rules = /* @__PURE__ */ new Set();
-	const re = new RegExp(`${EXEMPT_MARKER}:([a-zA-Z]+)`, "g");
-	let m = re.exec(head);
-	while (m !== null) {
-		rules.add(m[1]);
-		m = re.exec(head);
-	}
-	return {
-		all: new RegExp(`${EXEMPT_MARKER}(?!:)`).test(head),
-		rules
-	};
-}
-function applyRules(content, rules, ctx) {
-	const ex = exemptions(content);
-	const findings = [];
-	let current = content;
-	for (const name of RULE_ORDER) {
-		const cfg = rules?.[name];
-		if (!cfg || !cfg.enabled) continue;
-		if (ex.all || ex.rules.has(name)) continue;
-		const res = RULES[name].fix(current, ctx);
-		if (res.findings.length === 0) continue;
-		for (const f of res.findings) findings.push(f);
-		if (cfg.mode === "fix") current = res.content;
-	}
-	return {
-		content: current,
-		findings,
-		changed: current !== content
-	};
-}
-var REGEX_METACHARACTERS = [
-	".",
-	"+",
-	"^",
-	"$",
-	"{",
-	"}",
-	"(",
-	")",
-	"|",
-	"[",
-	"]",
-	"\\"
-].join("");
-function starSegment(glob, index) {
-	if (glob[index + 1] !== "*") return {
-		pattern: "[^/]*",
-		consumed: 0
-	};
-	if (glob[index + 2] === "/") return {
-		pattern: "(?:.*/)?",
-		consumed: 2
-	};
-	return {
-		pattern: ".*",
-		consumed: 1
-	};
-}
-function globToRegExp(glob) {
-	let re = "^";
-	for (let i = 0; i < glob.length; i++) {
-		const c = glob[i];
-		if (c === "*") {
-			const segment = starSegment(glob, i);
-			re += segment.pattern;
-			i += segment.consumed;
-			continue;
-		}
-		if (c === "?") {
-			re += "[^/]";
-			continue;
-		}
-		if (REGEX_METACHARACTERS.indexOf(c) !== -1) {
-			re += `\\${c}`;
-			continue;
-		}
-		re += c;
-	}
-	re += "$";
-	return new RegExp(re);
-}
-function shouldCheckPath(relPath, { include, exclude } = {}) {
-	const p = String(relPath).replace(/\\/g, "/");
-	const inc = include?.length ? include : ["**/*"];
-	const matchAny = (globs) => globs.some((g) => globToRegExp(g).test(p));
-	if (!matchAny(inc)) return false;
-	if (exclude?.length && matchAny(exclude)) return false;
-	return true;
-}
-function looksBinary(buf) {
-	const n = Math.min(buf.length, 8192);
-	const at = typeof buf === "string" ? (i) => buf.charCodeAt(i) : (i) => buf[i];
-	for (let i = 0; i < n; i++) if (at(i) === 0) return true;
-	return false;
-}
-//#endregion
-//#region server/git/git-exec.ts
-var DEFAULT_COMMAND_TIMEOUT_MS = 2e4;
-function outputText(value) {
-	if (typeof value === "string") return value;
-	if (Buffer.isBuffer(value)) return value.toString("utf8");
-	return value == null ? "" : String(value);
-}
-function childEnv(env, replaceEnv) {
-	if (replaceEnv) return { env: replaceEnv };
-	if (env) return { env: {
-		...process.env,
-		...env
-	} };
-	return {};
-}
-async function runCommand(file, args, { cwd, timeoutMs = DEFAULT_COMMAND_TIMEOUT_MS, maxBuffer, env, replaceEnv, signal, input, trim = true, keepStdoutOnFailure = false, preferStderr = false, execFileFn = execFileAsync } = {}) {
-	const execOptions = {
-		encoding: "utf8",
-		timeout: timeoutMs,
-		...cwd === void 0 ? {} : { cwd },
-		...maxBuffer === void 0 ? {} : { maxBuffer },
-		...signal ? { signal } : {},
-		...input === void 0 ? {} : { input },
-		...childEnv(env, replaceEnv)
-	};
-	try {
-		const { stdout, stderr } = await execFileFn(file, args, execOptions);
-		const out = outputText(stdout);
-		return {
-			ok: true,
-			out: trim ? out.trim() : out,
-			err: "",
-			stderr: outputText(stderr)
-		};
-	} catch (error) {
-		const failure = error ?? {};
-		const stdout = outputText(failure.stdout);
-		const stderr = outputText(failure.stderr);
-		const message = errorMessage(error);
-		return {
-			ok: false,
-			out: keepStdoutOnFailure ? trim ? stdout.trim() : stdout : "",
-			err: preferStderr ? stderr || message : message,
-			stderr,
-			error,
-			timedOut: failure.killed === true && Boolean(failure.signal)
-		};
-	}
-}
-function runGit(args, { gitPath = "git", env, replaceEnv, ...rest } = {}) {
-	const baseEnv = replaceEnv ?? (env ? {
-		...process.env,
-		...env
-	} : process.env);
-	return runCommand(gitPath, args, {
-		...rest,
-		replaceEnv: {
-			...baseEnv,
-			GIT_TERMINAL_PROMPT: "0"
-		}
-	});
-}
-function gitCommandFailure(args, command, timeoutMs = DEFAULT_COMMAND_TIMEOUT_MS) {
-	if (!command.timedOut) return command.error;
-	return new Error(`git ${args.join(" ")} timed out after ${timeoutMs}ms`, { cause: command.error });
-}
-function runGh(args, options = {}) {
-	return runCommand("gh", args, options);
-}
-//#endregion
-//#region server/post-turn-checker.ts
-var GIT_TIMEOUT_MS$2 = 5e3;
-var DEFAULTS = Object.freeze({
-	enabled: true,
-	mode: "report",
-	rules: {
-		trailingWs: true,
-		finalNewline: true,
-		bom: true,
-		slop: false
-	},
-	include: ["**/*"],
-	exclude: [
-		"**/node_modules/**",
-		"**/dist/**",
-		"**/.git/**",
-		"**/.glimmervoid/**",
-		"**/*.lock",
-		"**/package-lock.json",
-		"**/pnpm-lock.yaml",
-		"**/yarn.lock",
-		"**/*.png",
-		"**/*.jpg",
-		"**/*.jpeg",
-		"**/*.gif",
-		"**/*.webp",
-		"**/*.ico",
-		"**/*.pdf",
-		"**/*.zip",
-		"**/*.gz",
-		"**/*.woff",
-		"**/*.woff2",
-		"**/*.ttf",
-		"**/*.eot"
-	],
-	maxFiles: 200,
-	maxFileBytes: 524288,
-	debounceMs: 1500
-});
-function explicitMode(mode) {
-	return mode === "fix" ? "fix" : "report";
-}
-function normalizeRule(val, topMode) {
-	if (val === false) return {
-		enabled: false,
-		mode: topMode
-	};
-	if (val === true || val == null) return {
-		enabled: true,
-		mode: topMode
-	};
-	if (typeof val === "object") {
-		const source = val;
-		return {
-			enabled: source.enabled !== false,
-			mode: source.mode == null ? topMode : explicitMode(source.mode)
-		};
-	}
-	return {
-		enabled: true,
-		mode: topMode
-	};
-}
-var SCALAR_KEYS = [
-	"enabled",
-	"mode",
-	"maxFiles",
-	"maxFileBytes",
-	"debounceMs"
-];
-function resolveCheckConfig(globalCfg, projectCfg) {
-	const base = JSON.parse(JSON.stringify(DEFAULTS));
-	const layers = [globalCfg, projectCfg].filter((x) => Boolean(x) && typeof x === "object");
-	for (const layer of layers) {
-		for (const k of SCALAR_KEYS) if (layer[k] != null) Object.assign(base, { [k]: layer[k] });
-		if (Array.isArray(layer.include)) base.include = layer.include.slice();
-		if (Array.isArray(layer.exclude)) base.exclude = layer.exclude.slice();
-		if (layer.rules && typeof layer.rules === "object") base.rules = Object.assign({}, base.rules, layer.rules);
-	}
-	const topMode = explicitMode(base.mode);
-	const rules = {};
-	for (const name of Object.keys(base.rules)) rules[name] = normalizeRule(base.rules[name], topMode);
-	return {
-		enabled: base.enabled !== false,
-		mode: topMode,
-		rules,
-		include: base.include,
-		exclude: base.exclude,
-		maxFiles: base.maxFiles,
-		maxFileBytes: base.maxFileBytes,
-		debounceMs: base.debounceMs
-	};
-}
-var GIT_MAX_BUFFER_BYTES$1 = 8388608;
-async function execGit(args, cwd) {
-	const result = await runGit(args, {
-		cwd,
-		timeoutMs: GIT_TIMEOUT_MS$2,
-		maxBuffer: GIT_MAX_BUFFER_BYTES$1,
-		trim: false
-	});
-	if (!result.ok) throw result.error;
-	return result.out;
-}
-async function gitRoot(cwd) {
-	return (await execGit(["rev-parse", "--show-toplevel"], cwd)).toString().trim();
-}
-async function listChangedFiles(root) {
-	const lines = (await execGit([
-		"--no-optional-locks",
-		"-c",
-		"core.quotepath=false",
-		"status",
-		"--porcelain",
-		"-uall",
-		"--no-renames"
-	], root)).toString().split(/\r?\n/);
-	const files = [];
-	for (const ln of lines) {
-		if (!ln) continue;
-		const xy = ln.slice(0, 2);
-		const p = ln.slice(3);
-		if (!p) continue;
-		if (xy.indexOf("D") !== -1) continue;
-		files.push(p);
-	}
-	return files;
-}
-async function runPostTurnChecks({ cwd, config, deps = {} } = {}) {
-	const started = Date.now();
-	const cfg = config || resolveCheckConfig();
-	const report = {
-		ok: true,
-		skipped: null,
-		mode: cfg.mode,
-		root: null,
-		filesScanned: 0,
-		filesFixed: 0,
-		findings: [],
-		errors: [],
-		durationMs: 0
-	};
-	const done = () => {
-		report.durationMs = Date.now() - started;
-		return report;
-	};
-	if (!cfg.enabled) {
-		report.skipped = "disabled";
-		return done();
-	}
-	const _gitRoot = deps.gitRoot || gitRoot;
-	const _list = deps.listChangedFiles || listChangedFiles;
-	const _readFile = deps.readFile || ((p) => fs.readFileSync(p));
-	const _writeFile = deps.writeFile || ((p, c) => fs.writeFileSync(p, c));
-	const _stat = deps.stat || ((p) => fs.statSync(p));
-	let root;
-	try {
-		root = await _gitRoot(cwd);
-	} catch {
-		report.skipped = "no-git";
-		return done();
-	}
-	report.root = root;
-	let files;
-	try {
-		files = await _list(root);
-	} catch (err) {
-		report.skipped = "no-git";
-		report.errors.push({
-			file: null,
-			message: errorMessage(err)
-		});
-		return done();
-	}
-	if (!files.length) {
-		report.skipped = "no-changes";
-		return done();
-	}
-	const eligible = files.filter((rel) => shouldCheckPath(rel, {
-		include: cfg.include,
-		exclude: cfg.exclude
-	})).slice(0, cfg.maxFiles);
-	let fileIndex = 0;
-	for (const rel of eligible) {
-		if (fileIndex++ > 0) await new Promise((resolve) => setImmediate(resolve));
-		const abs = path.join(root, rel);
-		try {
-			const before = _stat(abs);
-			if (!before) {
-				report.errors.push({
-					file: rel,
-					message: "skipped-race"
-				});
-				continue;
-			}
-			if (before && before.size != null && before.size > cfg.maxFileBytes) continue;
-			const buf = _readFile(abs);
-			if (looksBinary(buf)) continue;
-			const res = applyRules(buf.toString("utf8"), cfg.rules, { relPath: rel });
-			report.filesScanned++;
-			if (res.findings.length) {
-				const counts = {};
-				for (const f of res.findings) counts[f.rule] = (counts[f.rule] || 0) + 1;
-				for (const [rule, count] of Object.entries(counts)) report.findings.push({
-					file: rel,
-					rule,
-					count
-				});
-			}
-			if (res.changed) {
-				const after = _stat(abs);
-				if (after && (after.mtimeMs !== before.mtimeMs || after.size !== before.size)) {
-					report.errors.push({
-						file: rel,
-						message: "skipped-race"
-					});
-					continue;
-				}
-				_writeFile(abs, res.content);
-				report.filesFixed++;
-			}
-		} catch (err) {
-			report.errors.push({
-				file: rel,
-				message: errorMessage(err)
-			});
-		}
-	}
-	return done();
-}
-//#endregion
 //#region server/session/session-event-wiring.ts
 var IDLE_COMPACTION_CONFIRM_MS = 1e4;
 function waitingCopy(name, context) {
@@ -7000,7 +6732,6 @@ function createSessionEventWiring(dependencies) {
 		dependencies.taskTitleRefiner?.attachSession(session);
 		dependencies.coherenceFeed?.attachSession(session);
 		dependencies.planReview?.attachSession(session);
-		let postTurnDebounce = null;
 		let pendingPromptKind = null;
 		let pendingAgentNote = null;
 		const notifyGate = createNotifyGate();
@@ -7080,10 +6811,6 @@ function createSessionEventWiring(dependencies) {
 			dependencies.telemetry?.captureException(error, { handled: true });
 		});
 		session.on("exit", ({ exitCode, signal, reason, exitedOnItsOwn }) => {
-			if (postTurnDebounce) {
-				clearTimeout(postTurnDebounce);
-				postTurnDebounce = null;
-			}
 			clearCompactionConfirm();
 			const reasonText = reason ? `, reason=${reason}` : "";
 			dependencies.logger.log(`[${session.name}] exited (code=${exitCode}, signal=${signal}${reasonText})`);
@@ -7120,32 +6847,6 @@ function createSessionEventWiring(dependencies) {
 			dependencies.getIngestLane()?.detachSessionTap(session);
 			captureSessionEnded(cause);
 		});
-		const resolvePostTurn = () => {
-			const project = dependencies.config.projects.find((candidate) => candidate.id === session.id);
-			return project ? resolveCheckConfig(dependencies.config.postTurnChecks, project.postTurnChecks) : null;
-		};
-		session.on("post-turn-check", () => {
-			const config = resolvePostTurn();
-			if (!config?.enabled) return;
-			if (postTurnDebounce) clearTimeout(postTurnDebounce);
-			postTurnDebounce = setTimeout(() => {
-				postTurnDebounce = null;
-				const runConfig = resolvePostTurn();
-				if (!runConfig?.enabled) return;
-				runPostTurnChecks({
-					cwd: session.effectiveCwd(),
-					config: runConfig
-				}).then((report) => {
-					dependencies.broadcastControl({
-						type: "post-turn-result",
-						id: session.id,
-						session: session.name,
-						...report,
-						timestamp: Date.now()
-					});
-				}).catch((error) => dependencies.logger.warn(`[${session.name}] post-turn checks failed: ${errorMessage(error)}`));
-			}, config.debounceMs);
-		});
 		session.on("post-turn-check", () => dependencies.usage.nudgeSession(liveTranscriptPath));
 		session.on("state-change", ({ from, to, event, detail }) => {
 			if (to === STATES.IDLE || to === STATES.COMPLETE) {
@@ -7245,9 +6946,14 @@ function createSessionEventWiring(dependencies) {
 				timestamp: Date.now()
 			});
 		});
-		relay("wakeup-change", "session-wakeup");
 		session.on("wakeup-change", persistWasWorking);
-		relay("prompt-kind-change", "session-prompt");
+		session.on("prompt-kind-change", ({ pendingPromptKind: nextKind }) => dependencies.broadcastControl({
+			type: "session-prompt",
+			id: session.id,
+			session: session.name,
+			pendingPromptKind: nextKind,
+			timestamp: Date.now()
+		}));
 		relay("unseen-outcome-change", "session-unseen");
 		relay("conversation-change", "session-conversation");
 		session.on("merge-status", ({ mergeStatus, reason, parked }) => {
@@ -7410,10 +7116,7 @@ function runAutoResume(sessions, config, spawnGate, logger = console) {
 		runs.push(spawnGate.run(() => {
 			if (session.state !== STATES.DORMANT) return null;
 			return session.start({ resumePrompt });
-		}, {
-			isStillWanted: () => session.state === STATES.DORMANT,
-			onMemoryWait: (isWaiting) => session.setWaitingForMemory(isWaiting)
-		}).catch((error) => {
+		}, { isStillWanted: () => session.state === STATES.DORMANT }).catch((error) => {
 			logger.warn(`[boot] auto-resume failed for ${session.name}: ${errorMessage(error)}`);
 		}));
 	}
@@ -7473,7 +7176,8 @@ function reconcileSessionWorktrees({ projects, sessions, gitWorkspaceSync, integ
 			gitWorkspaceSync.removeWorktreeByPath({
 				projectPath: project.path,
 				cwd: worktree.cwd,
-				branch: worktree.branch
+				branch: worktree.branch,
+				cause: "boot-reconcile"
 			});
 		}
 	}
@@ -7654,6 +7358,8 @@ function createSessionRegistry(dependencies) {
 //#endregion
 //#region shared/team-review-markdown.ts
 var AUTOMATED_REVIEW_NOTE = "> [!NOTE]\n> Automated review. Not written by a human.";
+var CREDITED_REVIEW_NOTE = "> [!NOTE]\n> Automated review by [Glimmervoid](https://glimmervoid.dev). Not written by a human.";
+var HAND_APPROVED_REVIEW_NOTE = "> [!NOTE]\n> Automated review by [Glimmervoid](https://glimmervoid.dev), not written by a human. Approved by hand after checking it.";
 var SEVERITY_ALTERNATION = FindingSeverity.options.join("|");
 var FINDING_HEADER_SOURCE = String.raw`\*\*(?:\[([^\]\n]+)\]\s+)?(${SEVERITY_ALTERNATION})\*\*`;
 function findingHeader$1(reviewer, severity) {
@@ -7672,7 +7378,12 @@ function parseLeadingFindingHeader(body) {
 }
 function withoutAutomatedNote(body) {
 	const trimmed = body.trimStart();
-	return trimmed.startsWith("> [!NOTE]\n> Automated review. Not written by a human.") ? trimmed.slice(53).trim() : body.trim();
+	const leadingNote = [
+		AUTOMATED_REVIEW_NOTE,
+		CREDITED_REVIEW_NOTE,
+		HAND_APPROVED_REVIEW_NOTE
+	].find((note) => trimmed.startsWith(note));
+	return leadingNote ? trimmed.slice(leadingNote.length).trim() : body.trim();
 }
 var FOLDED_FINDING_MARKER = "(line not in the diff)";
 var FINDING_BULLET_SOURCE = String.raw`- ${FINDING_HEADER_SOURCE}`;
@@ -9538,7 +9249,7 @@ function readTeamReviewSettings(config) {
 	const teams = readGithubTeams(config);
 	const configuredOrg = typeof block?.org === "string" ? block.org.trim() : "";
 	return {
-		enabled: block?.enabled === true,
+		enabled: block?.enabled !== false,
 		org: configuredOrg || teams[0]?.org || "",
 		teams,
 		reReviewAfterHours: positiveNumberOr(block?.reReviewAfterHours, 24),
@@ -9699,10 +9410,6 @@ function isDocsOrTests(filePath) {
 	return /(?:^|\/)(?:test|tests|__tests__|spec)\//.test(normalizedPath) || /(?:\.test\.|\.spec\.|_test\.)/.test(fileName);
 }
 function triagePr(detail) {
-	if (detail.isCrossRepository) return {
-		tier: "skip",
-		reasons: ["fork"]
-	};
 	const listedLines = detail.files.reduce((total, file) => total + file.additions + file.deletions, 0);
 	if (detail.files.length >= 100 || listedLines < detail.additions + detail.deletions) return {
 		tier: "full",
@@ -9745,20 +9452,26 @@ function isPostableStatus(draft, event) {
 function canPost(draft, clickedHead, currentHead, event) {
 	return isPostableStatus(draft, event) && draft.reviewedHead === clickedHead && draft.reviewedHead === currentHead;
 }
-var HAND_APPROVAL_LINE = "Approved by hand after checking the automated review.";
+var POSTED_NOTE_BY_EVENT = {
+	APPROVE: HAND_APPROVED_REVIEW_NOTE,
+	COMMENT: CREDITED_REVIEW_NOTE,
+	REQUEST_CHANGES: CREDITED_REVIEW_NOTE
+};
 function postedReviewBody(event, body) {
-	if (event !== "APPROVE" || body.trimEnd().endsWith(HAND_APPROVAL_LINE)) return body;
+	const postedNote = POSTED_NOTE_BY_EVENT[event];
+	if (body.includes(postedNote)) return body;
 	const noteStart = body.indexOf(AUTOMATED_REVIEW_NOTE);
+	if (noteStart === -1 && event !== "APPROVE") return body;
 	return [
 		noteStart === -1 ? body.trim() : body.slice(0, noteStart).trim(),
-		AUTOMATED_REVIEW_NOTE,
-		noteStart === -1 ? "" : body.slice(noteStart + AUTOMATED_REVIEW_NOTE.length).trim(),
-		HAND_APPROVAL_LINE
+		postedNote,
+		noteStart === -1 ? "" : body.slice(noteStart + AUTOMATED_REVIEW_NOTE.length).trim()
 	].filter(Boolean).join("\n\n");
 }
 function eventForAction(action) {
 	if (action === "approve" || action === "approve-only") return "APPROVE";
 	if (action === "comment") return "COMMENT";
+	if (action === "request-changes") return "REQUEST_CHANGES";
 	return null;
 }
 var HUNK_HEADER = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/;
@@ -9768,6 +9481,16 @@ function diffHeaderPath(line, sidePrefix) {
 	if (unquoted === "/dev/null") return null;
 	return unquoted.startsWith(sidePrefix) ? unquoted.slice(sidePrefix.length) : unquoted;
 }
+var MAX_EXCERPT_LINE_CHARS = 400;
+function addDiffRow(file, row) {
+	const rowIndex = file.rows.length;
+	file.rows.push({
+		...row,
+		text: row.text.replace(/\r$/, "").slice(0, MAX_EXCERPT_LINE_CHARS)
+	});
+	if (row.oldLine !== null) file.left.set(row.oldLine, rowIndex);
+	if (row.newLine !== null) file.right.set(row.newLine, rowIndex);
+}
 function commentableLines(diffText) {
 	const linesByPath = /* @__PURE__ */ new Map();
 	let oldPath = null;
@@ -9776,25 +9499,44 @@ function commentableLines(diffText) {
 	let newLine = 0;
 	let oldRemaining = 0;
 	let newRemaining = 0;
+	let hunk = 0;
 	for (const line of diffText.split("\n")) {
 		if (oldRemaining > 0 || newRemaining > 0) {
 			if (!currentFile) continue;
 			const marker = line.charAt(0);
+			const text = line.slice(1);
 			if (marker === "\\") continue;
 			if (marker === "-") {
-				currentFile.left.add(oldLine);
+				addDiffRow(currentFile, {
+					oldLine,
+					newLine: null,
+					kind: "del",
+					text,
+					hunk
+				});
 				oldLine += 1;
 				oldRemaining -= 1;
 				continue;
 			}
 			if (marker === "+") {
-				currentFile.right.add(newLine);
+				addDiffRow(currentFile, {
+					oldLine: null,
+					newLine,
+					kind: "add",
+					text,
+					hunk
+				});
 				newLine += 1;
 				newRemaining -= 1;
 				continue;
 			}
-			currentFile.left.add(oldLine);
-			currentFile.right.add(newLine);
+			addDiffRow(currentFile, {
+				oldLine,
+				newLine,
+				kind: "context",
+				text,
+				hunk
+			});
 			oldLine += 1;
 			newLine += 1;
 			oldRemaining -= 1;
@@ -9813,21 +9555,41 @@ function commentableLines(diffText) {
 		if (line.startsWith("+++ ")) {
 			const filePath = diffHeaderPath(line, "b/") ?? oldPath;
 			currentFile = filePath === null ? null : linesByPath.get(filePath) ?? {
-				left: /* @__PURE__ */ new Set(),
-				right: /* @__PURE__ */ new Set()
+				left: /* @__PURE__ */ new Map(),
+				right: /* @__PURE__ */ new Map(),
+				rows: []
 			};
 			if (filePath !== null && currentFile) linesByPath.set(filePath, currentFile);
 			continue;
 		}
-		const hunk = HUNK_HEADER.exec(line);
-		if (!hunk || !currentFile) continue;
-		oldLine = Number(hunk[1]);
-		oldRemaining = hunk[2] === void 0 ? 1 : Number(hunk[2]);
-		newLine = Number(hunk[3]);
-		newRemaining = hunk[4] === void 0 ? 1 : Number(hunk[4]);
+		const hunkHeader = HUNK_HEADER.exec(line);
+		if (!hunkHeader || !currentFile) continue;
+		hunk += 1;
+		oldLine = Number(hunkHeader[1]);
+		oldRemaining = hunkHeader[2] === void 0 ? 1 : Number(hunkHeader[2]);
+		newLine = Number(hunkHeader[3]);
+		newRemaining = hunkHeader[4] === void 0 ? 1 : Number(hunkHeader[4]);
 	}
 	return linesByPath;
 }
+function diffExcerpt(commentable, filePath, side, line, radius = 3) {
+	const fileLines = commentable.get(filePath);
+	const rowIndex = fileLines ? (side === "LEFT" ? fileLines.left : fileLines.right).get(line) : void 0;
+	if (!fileLines || rowIndex === void 0) return null;
+	const citedHunk = fileLines.rows[rowIndex]?.hunk;
+	return fileLines.rows.slice(Math.max(0, rowIndex - radius), rowIndex + radius + 1).filter((row) => row.hunk === citedHunk).map((row) => ({
+		line: side === "LEFT" ? row.oldLine : row.newLine,
+		kind: row.kind,
+		text: row.text
+	}));
+}
+function withExcerpt(comment, commentable) {
+	const excerpt = commentable ? diffExcerpt(commentable, comment.path, comment.side, comment.line) : null;
+	return excerpt ? {
+		...comment,
+		excerpt
+	} : comment;
+}
 function isLineCommentable(commentable, filePath, side, line) {
 	const fileLines = commentable.get(filePath);
 	if (!fileLines) return false;
@@ -9841,7 +9603,7 @@ function isSettledAtHead(entry, head) {
 	if (entry?.draft?.status === "discarded") return true;
 	if (!entry || entry.reviewedHead !== head) return false;
 	if (entry.draft?.status === "error") return entry.reviewAttempts >= MAX_REVIEW_ATTEMPTS;
-	return entry.draft !== null || entry.skipReason !== null;
+	return entry.draft !== null;
 }
 function shouldAutoReview(storedEntry, currentHead, nowMs, reReviewAfterMs) {
 	if (!storedEntry) return true;
@@ -10001,24 +9763,7 @@ function presentedDraft(entry, draft) {
 function draftsNewestFirst(state) {
 	return Object.values(state).filter((entry) => entry.draft !== null).sort((left, right) => right.updatedAt - left.updatedAt).flatMap((entry) => entry.draft ? [presentedDraft(entry, entry.draft)] : []);
 }
-var QUEUED_REVIEW_FIELDS = Object.keys(QueuedReview.shape);
-function isSameQueuedReview(left, right) {
-	return JSON.stringify(left ?? null, QUEUED_REVIEW_FIELDS) === JSON.stringify(right, QUEUED_REVIEW_FIELDS);
-}
-function handReviewRows(state) {
-	return Object.values(state).flatMap((entry) => {
-		if (!entry.handReview || !entry.liveHead || entry.inFlight || entry.skipReason !== "fork" || entry.reviewedHead !== entry.liveHead) return [];
-		if (hasViewerReviewedAt(entry.githubReviews, entry.liveHead)) return [];
-		if (hasStandingViewerApproval({
-			githubReviews: entry.githubReviews,
-			reviewDecision: entry.reviewDecision,
-			liveHead: entry.liveHead,
-			requeuedHead: entry.requeuedHead
-		})) return [];
-		return [entry.handReview];
-	});
-}
-function teamReviewStatus({ ts, configured, reason = null, drafts = [], inFlight = [], queued = [], handReview = [], team }) {
+function teamReviewStatus({ ts, configured, reason = null, drafts = [], inFlight = [], queued = [], team }) {
 	return {
 		type: "team-review-status",
 		ts,
@@ -10027,7 +9772,6 @@ function teamReviewStatus({ ts, configured, reason = null, drafts = [], inFlight
 		drafts,
 		inFlight,
 		queued,
-		handReview,
 		team
 	};
 }
@@ -10475,7 +10219,7 @@ function readyDraft({ candidate, tier, reasons, result, reviewedBase, commentabl
 		summary: result.summary,
 		...assessment ? { assessment } : {},
 		body: rendered.body,
-		comments: rendered.comments,
+		comments: rendered.comments.map((comment) => withExcerpt(comment, commentable)),
 		status: "ready"
 	};
 }
@@ -12976,8 +12720,9 @@ function createIssuesWiring({ config, gitWorkspace, broadcast, hasSession, store
 	}
 	const runner = createLaneRunner({
 		tag: ISSUES_LANE_ID,
-		gate: () => ({ start: true }),
+		gate: () => ({ start: config.issues?.enabled === true }),
 		cfgKey: () => JSON.stringify({
+			enabled: config.issues?.enabled === true,
 			projects: config.projects.map((project) => ({
 				id: project.id,
 				path: project.path,
@@ -17124,6 +16869,76 @@ function createSessionHookLifecycle(options) {
 	};
 }
 //#endregion
+//#region server/git/git-exec.ts
+var DEFAULT_COMMAND_TIMEOUT_MS = 2e4;
+function outputText(value) {
+	if (typeof value === "string") return value;
+	if (Buffer.isBuffer(value)) return value.toString("utf8");
+	return value == null ? "" : String(value);
+}
+function childEnv(env, replaceEnv) {
+	if (replaceEnv) return { env: replaceEnv };
+	if (env) return { env: {
+		...process.env,
+		...env
+	} };
+	return {};
+}
+async function runCommand(file, args, { cwd, timeoutMs = DEFAULT_COMMAND_TIMEOUT_MS, maxBuffer, env, replaceEnv, signal, input, trim = true, keepStdoutOnFailure = false, preferStderr = false, execFileFn = execFileAsync } = {}) {
+	const execOptions = {
+		encoding: "utf8",
+		timeout: timeoutMs,
+		...cwd === void 0 ? {} : { cwd },
+		...maxBuffer === void 0 ? {} : { maxBuffer },
+		...signal ? { signal } : {},
+		...input === void 0 ? {} : { input },
+		...childEnv(env, replaceEnv)
+	};
+	try {
+		const { stdout, stderr } = await execFileFn(file, args, execOptions);
+		const out = outputText(stdout);
+		return {
+			ok: true,
+			out: trim ? out.trim() : out,
+			err: "",
+			stderr: outputText(stderr)
+		};
+	} catch (error) {
+		const failure = error ?? {};
+		const stdout = outputText(failure.stdout);
+		const stderr = outputText(failure.stderr);
+		const message = errorMessage(error);
+		return {
+			ok: false,
+			out: keepStdoutOnFailure ? trim ? stdout.trim() : stdout : "",
+			err: preferStderr ? stderr || message : message,
+			stderr,
+			error,
+			timedOut: failure.killed === true && Boolean(failure.signal)
+		};
+	}
+}
+function runGit(args, { gitPath = "git", env, replaceEnv, ...rest } = {}) {
+	const baseEnv = replaceEnv ?? (env ? {
+		...process.env,
+		...env
+	} : process.env);
+	return runCommand(gitPath, args, {
+		...rest,
+		replaceEnv: {
+			...baseEnv,
+			GIT_TERMINAL_PROMPT: "0"
+		}
+	});
+}
+function gitCommandFailure(args, command, timeoutMs = DEFAULT_COMMAND_TIMEOUT_MS) {
+	if (!command.timedOut) return command.error;
+	return new Error(`git ${args.join(" ")} timed out after ${timeoutMs}ms`, { cause: command.error });
+}
+function runGh(args, options = {}) {
+	return runCommand("gh", args, options);
+}
+//#endregion
 //#region shared/coalesce-timer.ts
 function createCoalescedTimer({ mode, delayMs, run, setTimeoutFn = DEFAULT_TIMER_FNS.setTimeoutFn, clearTimeoutFn = DEFAULT_TIMER_FNS.clearTimeoutFn, unref = true }) {
 	let timer = null;
@@ -17760,7 +17575,8 @@ function createSessionWorkspaceMembers({ plan, owner, sessionName, shareList, gi
 			projectPath: member.repoPath,
 			cwd: member.dir,
 			shareList,
-			discardWork
+			discardWork,
+			cause: "session"
 		});
 		if (removed.ok) return null;
 		return {
@@ -18284,7 +18100,8 @@ function createSessionWorktreeLifecycle({ id, projectPath, integrationBranch = n
 		if (gitWorkspace && lifecycleState.workspace) try {
 			await gitWorkspace.discard({
 				projectPath: currentProjectPath(),
-				workspace: lifecycleState.workspace
+				workspace: lifecycleState.workspace,
+				cause: "session"
 			});
 		} catch {}
 		clearWorktreeState("none");
@@ -19586,7 +19403,6 @@ var Session = class extends EventEmitter {
 	_lastSignal;
 	_compaction;
 	_pendingPromptKind;
-	_isWaitingForMemory;
 	_pendingPromptToolName;
 	_pendingAttentionNotes;
 	_titleQuiet;
@@ -19720,7 +19536,6 @@ var Session = class extends EventEmitter {
 		this._lastSignal = null;
 		this._compaction = createCompactionTracking();
 		this._pendingPromptKind = null;
-		this._isWaitingForMemory = false;
 		this._pendingPromptToolName = null;
 		this._pendingAttentionNotes = [];
 		this._titleQuiet = false;
@@ -20104,16 +19919,10 @@ var Session = class extends EventEmitter {
 		});
 		if (this._compaction.isCompacting !== wasCompacting) this._emitSessionDetail();
 	}
-	setWaitingForMemory(isWaiting) {
-		if (isWaiting === this._isWaitingForMemory) return;
-		this._isWaitingForMemory = isWaiting;
-		this._emitSessionDetail();
-	}
 	_emitSessionDetail() {
 		this.emit("prompt-kind-change", {
 			pendingPromptKind: this._pendingPromptKind,
-			isCompacting: this._compaction.isCompacting,
-			isWaitingForMemory: this._isWaitingForMemory
+			isCompacting: this._compaction.isCompacting
 		});
 	}
 	_finishCompaction() {
@@ -20499,13 +20308,10 @@ var Session = class extends EventEmitter {
 			resumeSessionId: this._resumeSessionId,
 			activeAgents: active,
 			awaitingBackgroundTasks: this.backgroundTracking.awaitingBackgroundTasks(),
-			pendingWakeup: this.backgroundTracking.pendingWakeup(),
 			pendingPromptKind: this._pendingPromptKind,
 			conversationApproval: this._conversationApproval,
 			hasConversationBridge: this._codexBridge !== null,
 			isConversationViewOn: this._isConversationViewEnabled(),
-			isCompacting: this._compaction.isCompacting,
-			isWaitingForMemory: this._isWaitingForMemory,
 			hasPlan: this._planReviewPort?.hasPlan(this.id) === true,
 			mergeStatus: this.mergeStatus,
 			mergeReason: this.mergeReason,
@@ -20608,7 +20414,6 @@ var Session = class extends EventEmitter {
 	}
 	async _startBody({ fresh = false, resumePrompt = null } = {}) {
 		if (this._destroyed) return;
-		this.setWaitingForMemory(false);
 		if (this.ptyProcess) {
 			console.warn(`[session:${this.name}] start() called while PTY exists - killing previous PTY first`);
 			const oldPid = this.ptyProcess.pid;
@@ -23522,7 +23327,7 @@ function createPrGh(cwd, commandRunner = run) {
 				err: "invalid commit id",
 				reviewId: null
 			};
-			if (event !== "APPROVE" && event !== "COMMENT") return {
+			if (!PostedReviewEvent.safeParse(event).success) return {
 				ok: false,
 				err: "invalid review event",
 				reviewId: null
@@ -24125,7 +23930,6 @@ function createTeamReviewPoller(deps) {
 				team: teamProfile,
 				drafts: draftsNewestFirst(state),
 				inFlight: inFlightReviews(),
-				handReview: handReviewRows(state),
 				queued: waitingForSlot.filter((candidate) => !state[candidate.key]?.inFlight)
 			}),
 			error: pollingError,
@@ -24160,7 +23964,6 @@ function createTeamReviewPoller(deps) {
 			draft: null,
 			reviewedHead: null,
 			inFlight: false,
-			skipReason: null,
 			reviewAttempts: 0,
 			updatedAt: now()
 		};
@@ -24205,7 +24008,6 @@ function createTeamReviewPoller(deps) {
 			...wasRequeuedAtReviewedHead ? { requeuedHead: draft.reviewedHead } : {}
 		};
 		entry.reviewedHead = draft.reviewedHead;
-		entry.skipReason = null;
 		entry.updatedAt = now();
 		entry.reviewedAt = entry.updatedAt;
 		entry.draft.reviewedAt = entry.reviewedAt;
@@ -24222,7 +24024,6 @@ function createTeamReviewPoller(deps) {
 			status: "discarded"
 		} : notMineDraft(args.candidate, args.detail.headRefOid);
 		entry.reviewedHead = entry.draft.reviewedHead;
-		entry.skipReason = null;
 		await settleNotMine(args.candidate.key, entry);
 		if (waitingForSlot.length > 0 && !loop.isStopped()) loop.tick();
 	}
@@ -24255,14 +24056,6 @@ function createTeamReviewPoller(deps) {
 				entry.reviewedHead = isReviewedByViewer ? head : null;
 				isDirty = true;
 			}
-			if (entry.handReview && (entry.skipReason !== "fork" || entry.reviewedHead !== head)) {
-				delete entry.handReview;
-				isDirty = true;
-			}
-			if (entry.skipReason === "fork" && entry.reviewedHead === head && entry.draft?.status !== "discarded" && !isSameQueuedReview(entry.handReview, candidate)) {
-				entry.handReview = { ...candidate };
-				isDirty = true;
-			}
 			if (entry.draft) {
 				const priority = {
 					requestSource: candidate.requestSource,
@@ -24520,18 +24313,7 @@ function createTeamReviewPoller(deps) {
 				continue;
 			}
 			entry.updatedAt = now();
-			delete entry.handReview;
 			isDirty = true;
-			if (triage.tier === "skip") {
-				if (resume) await discardResumable(resume);
-				entry.reviewedHead = detail.headRefOid;
-				entry.liveHead = detail.headRefOid;
-				entry.skipReason = triage.reasons.join(", ") || "skipped";
-				if (triage.reasons.includes("fork")) entry.handReview = { ...candidate };
-				delete entry.requeuedHead;
-				continue;
-			}
-			entry.skipReason = null;
 			const priorReview = priorReviewFor(entry, detail.headRefOid) ?? void 0;
 			const earlierReviewKept = earlierReviewToKeep(entry, detail.headRefOid);
 			delete entry.priorReview;
@@ -24866,7 +24648,7 @@ function createTeamReviewPoller(deps) {
 			};
 			return settleNotMine(key, entry);
 		}
-		const candidate = waitingForSlot.find((queued) => queued.key === key) ?? entry?.handReview ?? entry?.draft ?? void 0;
+		const candidate = waitingForSlot.find((queued) => queued.key === key) ?? entry?.draft ?? void 0;
 		if (!candidate) return {
 			ok: false,
 			error: "That pull request is no longer in the review queue"
@@ -24889,7 +24671,6 @@ function createTeamReviewPoller(deps) {
 		const notMineEntry = entryFor(key);
 		notMineEntry.draft = notMineDraft(candidate, head);
 		notMineEntry.reviewedHead = head;
-		delete notMineEntry.handReview;
 		return settleNotMine(key, notMineEntry);
 	}
 	async function settleNotMine(key, entry) {
@@ -24921,10 +24702,6 @@ function createTeamReviewPoller(deps) {
 			key,
 			status: "running"
 		};
-		if (entry.skipReason && entry.reviewedHead !== null && entry.reviewedHead === entry.liveHead) return {
-			ok: false,
-			error: `team review skips this pull request: ${entry.skipReason}`
-		};
 		if (entry.draft && !isThreadPlaceholderDraft(entry.draft)) {
 			if (!await requeue(key, entry.draft.reviewedHead)) return {
 				ok: false,
@@ -25637,6 +25414,7 @@ function createGitWorkspace(opts = {}) {
 	const rerereEnabled = opts.rerere !== false;
 	const glimmervoidHome = opts.glimmervoidHome ?? glimmervoidHomeDir$1();
 	const glimmervoidHomes = comparableGlimmervoidHomes(glimmervoidHome);
+	const removalGuard = resolveRemovalGuard(opts.removalGuard, glimmervoidHome);
 	const engineQueue = createSerialQueue();
 	const isolatedCall = (body, args) => () => isolationContext.run({
 		...opts.isolation,
@@ -25712,6 +25490,54 @@ function createGitWorkspace(opts = {}) {
 		if (await directoryExists$1(ownedPath)) return;
 		await opts.ownedPaths?.forget(ownedPath);
 	}
+	async function admitRemoval(target) {
+		const facts = removalOwnershipFacts(target, target.path === null ? null : await opts.ownedPaths?.ownerOf(target.path) ?? null, removalGuard.protectedSessionIds());
+		const lastTouchedMs = isRecencyProbeNeeded(facts) ? await probeLastTouchedMs(target) : null;
+		const verdict = decideRemovalKeep({
+			...facts,
+			lastTouchedMs,
+			nowMs: removalGuard.now()
+		});
+		if (verdict.keep) {
+			log.warn(`[removals] kept ${describeRemovalTarget(target)} from a ${target.cause} removal because of ${verdict.reason}`);
+			return {
+				admitted: false,
+				reason: verdict.reason
+			};
+		}
+		const record = buildRemovalRecord(target, facts, verdict.checksPassed, removalGuard.now());
+		if (!await appendRemovalRecord(removalGuard.journalPath, record, log)) return {
+			admitted: false,
+			reason: "removal-record-unwritten"
+		};
+		return { admitted: true };
+	}
+	async function probeLastTouchedMs({ projectPath, path: targetPath, branch, tipSha }) {
+		const touchedTimesMs = [];
+		const targetStat = targetPath === null ? "missing" : await statUnlessMissing(targetPath);
+		if (targetStat === null) return null;
+		if (targetPath !== null && targetStat !== "missing") {
+			touchedTimesMs.push(targetStat.mtimeMs);
+			const adminDir = await run(["rev-parse", "--absolute-git-dir"], targetPath);
+			const adminStat = adminDir.ok ? await fsp.stat(adminDir.out).catch(() => null) : null;
+			if (adminStat === null) return null;
+			touchedTimesMs.push(adminStat.mtimeMs);
+		}
+		const commitRef = tipSha ?? (branch ? `refs/heads/${branch}` : null);
+		if (commitRef !== null) {
+			const commitTime = await run([
+				"log",
+				"-1",
+				"--format=%ct",
+				commitRef
+			], projectPath);
+			const commitTimeMs = commitTime.ok ? parseCommitTimeMs(commitTime.out) : null;
+			if (commitTimeMs === null) return null;
+			touchedTimesMs.push(commitTimeMs);
+		}
+		if (touchedTimesMs.length === 0) return null;
+		return Math.max(...touchedTimesMs);
+	}
 	async function recordOwnedFolder({ folderPath, owner }) {
 		await opts.ownedPaths?.record({
 			path: folderPath,
@@ -26021,11 +25847,7 @@ function createGitWorkspace(opts = {}) {
 			isGit: false,
 			reason: "no-base-branch"
 		};
-		await run([
-			"branch",
-			"-D",
-			branch
-		], projectPath);
+		await deleteStaleSessionBranch(projectPath, branch);
 		if (worktreeBase) try {
 			fs.mkdirSync(worktreeBase, { recursive: true });
 		} catch {}
@@ -26235,7 +26057,29 @@ function createGitWorkspace(opts = {}) {
 			} catch {}
 		}
 	}
+	async function deleteStaleSessionBranch(projectPath, branch) {
+		if (!(await readLocalBranchSha(projectPath, branch)).out) return;
+		if (!(await admitRemoval({
+			cause: "session-create",
+			kind: "local-branch",
+			projectPath,
+			path: null,
+			branch
+		})).admitted) return;
+		await run([
+			"branch",
+			"-D",
+			branch
+		], projectPath);
+	}
 	async function tearDownWorktree(projectPath, wt, branch) {
+		if (!(await admitRemoval({
+			cause: "merge",
+			kind: "worktree",
+			projectPath,
+			path: wt,
+			branch: branch ?? null
+		})).admitted) return;
 		removeWorktreeLinks(wt);
 		await removeWorktreeEntry(runInProject(projectPath), wt, ["--force"]);
 		await pruneWorktreeEntries(runInProject(projectPath));
@@ -26709,8 +26553,15 @@ function createGitWorkspace(opts = {}) {
 			rerereReplayed
 		};
 	}
-	async function discardBody({ projectPath, workspace }) {
+	async function discardBody({ projectPath, workspace, cause }) {
 		if (!workspace || !workspace.isGit) return;
+		if (!(await admitRemoval({
+			cause,
+			kind: "worktree",
+			projectPath,
+			path: workspace.cwd || null,
+			branch: workspace.branch || null
+		})).admitted) return;
 		if (workspace.cwd) {
 			removeWorktreeLinks(workspace.cwd);
 			await removeWorktreeEntry(runInProject(projectPath), workspace.cwd, ["--force"]);
@@ -26884,7 +26735,15 @@ function createGitWorkspace(opts = {}) {
 			disableRepoCommands
 		});
 	}
-	async function removeWorktreeByPathBody({ projectPath, cwd, branch, disableHooks, replaceEnv }) {
+	async function removeWorktreeByPathBody({ projectPath, cwd, branch, cause, disableHooks, replaceEnv }) {
+		const admission = await admitRemoval({
+			cause,
+			kind: cwd ? "worktree" : "local-branch",
+			projectPath,
+			path: cwd || null,
+			branch: branch || null
+		});
+		if (!admission.admitted) return keptRemovalResult(admission.reason);
 		const isolation = {
 			disableHooks,
 			replaceEnv
@@ -26934,6 +26793,7 @@ function createGitWorkspace(opts = {}) {
 		if (worktreePath === null) return removeWorktreeByPathBody({
 			projectPath,
 			branch,
+			cause: "session",
 			disableHooks,
 			replaceEnv
 		});
@@ -26947,6 +26807,7 @@ function createGitWorkspace(opts = {}) {
 			projectPath,
 			cwd: worktreePath,
 			branch,
+			cause: "session",
 			disableHooks,
 			replaceEnv
 		});
@@ -26975,12 +26836,20 @@ function createGitWorkspace(opts = {}) {
 			}).catch(() => fsp.rmdir(linkPath)).catch(() => {});
 		}
 	}
-	async function removeWorkspaceMemberBody({ projectPath, cwd, shareList, discardWork = false }) {
+	async function removeWorkspaceMemberBody({ projectPath, cwd, branch, shareList, cause, discardWork = false }) {
 		if (!cwd) return {
 			ok: false,
 			out: "",
 			err: "a workspace member removal needs a path"
 		};
+		const admission = await admitRemoval({
+			cause,
+			kind: "worktree",
+			projectPath,
+			path: cwd,
+			branch: branch || null
+		});
+		if (!admission.admitted) return keptRemovalResult(admission.reason);
 		await removeSharedLinks(cwd, shareList);
 		const removed = await removeWorktreeEntry(runInProject(projectPath), cwd, discardWork ? ["--force", "--force"] : []);
 		if (discardWork && await directoryExists$1(cwd)) await fsp.rm(cwd, {
@@ -27687,7 +27556,16 @@ function createGitWorkspace(opts = {}) {
 	async function treeOid({ projectPath, sha, timeoutMs = MERGE_PROBE_TIMEOUT_MS }) {
 		return run(["rev-parse", `${sha ?? ""}^{tree}`], projectPath, { timeout: timeoutMs });
 	}
-	async function deleteRemoteBranchBody({ projectPath, name, tipSha }) {
+	async function deleteRemoteBranchBody({ projectPath, name, tipSha, cause }) {
+		const admission = await admitRemoval({
+			cause,
+			kind: "remote-branch",
+			projectPath,
+			path: null,
+			branch: name ?? null,
+			tipSha: tipSha ?? null
+		});
+		if (!admission.admitted) return keptRemovalResult(admission.reason);
 		const branchRef = `refs/heads/${name ?? ""}`;
 		return run([
 			"push",
@@ -27756,6 +27634,8 @@ function createGitWorkspace(opts = {}) {
 function createGitWorkspaceSync(opts = {}) {
 	const glimmervoidHome = opts.glimmervoidHome ?? glimmervoidHomeDir$1();
 	const glimmervoidHomes = comparableGlimmervoidHomes(glimmervoidHome);
+	const removalGuard = resolveRemovalGuard(opts.removalGuard, glimmervoidHome);
+	const log = opts.log || console;
 	const git = opts.git || ((args, cwd) => execFileSync("git", args, {
 		cwd,
 		encoding: "utf8",
@@ -27880,7 +27760,61 @@ function createGitWorkspaceSync(opts = {}) {
 		}
 		return out;
 	}
-	function removeWorktreeByPath({ projectPath, cwd, branch }) {
+	function admitRemovalSync(target) {
+		const facts = removalOwnershipFacts(target, null, removalGuard.protectedSessionIds());
+		const lastTouchedMs = isRecencyProbeNeeded(facts) ? probeLastTouchedMsSync(target) : null;
+		const verdict = decideRemovalKeep({
+			...facts,
+			lastTouchedMs,
+			nowMs: removalGuard.now()
+		});
+		if (verdict.keep) {
+			log.warn(`[removals] kept ${describeRemovalTarget(target)} from a ${target.cause} removal because of ${verdict.reason}`);
+			return {
+				admitted: false,
+				reason: verdict.reason
+			};
+		}
+		const record = buildRemovalRecord(target, facts, verdict.checksPassed, removalGuard.now());
+		if (!appendRemovalRecordSync(removalGuard.journalPath, record, log)) return {
+			admitted: false,
+			reason: "removal-record-unwritten"
+		};
+		return { admitted: true };
+	}
+	function probeLastTouchedMsSync({ projectPath, path: targetPath, branch }) {
+		const touchedTimesMs = [];
+		const targetStat = targetPath === null ? "missing" : statUnlessMissingSync(targetPath);
+		if (targetStat === null) return null;
+		if (targetPath !== null && targetStat !== "missing") {
+			touchedTimesMs.push(targetStat.mtimeMs);
+			const adminDir = run(["rev-parse", "--absolute-git-dir"], targetPath);
+			const adminStat = adminDir.ok ? statUnlessMissingSync(adminDir.out) : null;
+			if (adminStat === null || adminStat === "missing") return null;
+			touchedTimesMs.push(adminStat.mtimeMs);
+		}
+		if (branch) {
+			const commitTime = run([
+				"log",
+				"-1",
+				"--format=%ct",
+				`refs/heads/${branch}`
+			], projectPath);
+			const commitTimeMs = commitTime.ok ? parseCommitTimeMs(commitTime.out) : null;
+			if (commitTimeMs === null) return null;
+			touchedTimesMs.push(commitTimeMs);
+		}
+		if (touchedTimesMs.length === 0) return null;
+		return Math.max(...touchedTimesMs);
+	}
+	function removeWorktreeByPath({ projectPath, cwd, branch, cause }) {
+		if (!admitRemovalSync({
+			cause,
+			kind: cwd ? "worktree" : "local-branch",
+			projectPath,
+			path: cwd || null,
+			branch: branch || null
+		}).admitted) return;
 		if (cwd) {
 			removeWorktreeLinks(cwd);
 			if (isWorktreeHiddenFromGuardedSessions(cwd, glimmervoidHomes)) run([
@@ -27924,6 +27858,60 @@ function createGitWorkspaceSync(opts = {}) {
 		removeWorktreeByPath
 	};
 }
+function resolveRemovalGuard(guard, glimmervoidHome) {
+	return {
+		protectedSessionIds: guard?.protectedSessionIds ?? (() => /* @__PURE__ */ new Set()),
+		journalPath: guard?.journalPath ?? removalsJournalPath(glimmervoidHome),
+		now: guard?.now ?? Date.now
+	};
+}
+function removalOwnershipFacts(target, ledgerOwner, protectedSessionIds) {
+	return {
+		cause: target.cause,
+		sessionId: target.branch === null ? null : sessionIdFromBranch(target.branch),
+		ledgerOwnerSessionId: sessionIdFromOwner(ledgerOwner),
+		protectedSessionIds
+	};
+}
+function buildRemovalRecord(target, facts, checksPassed, nowMs) {
+	return {
+		ts: nowMs,
+		cause: target.cause,
+		kind: target.kind,
+		path: target.path,
+		branch: target.branch,
+		projectPath: target.projectPath,
+		sessionId: facts.sessionId ?? facts.ledgerOwnerSessionId,
+		checksPassed,
+		pid: process.pid
+	};
+}
+function describeRemovalTarget(target) {
+	return target.path ?? `${target.kind} ${target.branch ?? ""}`;
+}
+function keptRemovalResult(reason) {
+	return {
+		ok: false,
+		out: "",
+		err: `the removal guard kept it: ${reason}`,
+		removalKept: reason
+	};
+}
+function parseCommitTimeMs(commitTimeOutput) {
+	const commitSeconds = Number.parseInt(commitTimeOutput, 10);
+	if (!Number.isFinite(commitSeconds)) return null;
+	return commitSeconds * 1e3;
+}
+async function statUnlessMissing(targetPath) {
+	return fsp.stat(targetPath).then((stats) => stats, (error) => isMissingFileError(error) ? "missing" : null);
+}
+function statUnlessMissingSync(targetPath) {
+	try {
+		return fs.statSync(targetPath);
+	} catch (error) {
+		return isMissingFileError(error) ? "missing" : null;
+	}
+}
 function removeWorktreeLinks(wtDir) {
 	if (!wtDir) return;
 	let entries;
@@ -28062,7 +28050,8 @@ var UNMARKED_POST_WARNING = "The review was posted on GitHub, but its draft coul
 var SETTLED_OUTCOME_BY_ACTION = {
 	approve: "approve",
 	"approve-only": "approve-only",
-	comment: "comment"
+	comment: "comment",
+	"request-changes": "request-changes"
 };
 function teamReviewShouldStart(config) {
 	const settings = readTeamReviewSettings(config);
@@ -28344,11 +28333,14 @@ function createTeamReviewDispatcher({ store, repoCache, gitWorkspace, spawnSessi
 	async function removeCheckout({ projectPath, worktreePath }) {
 		const removal = await gitWorkspace.removeWorktreeByPath({
 			projectPath,
-			cwd: worktreePath
+			cwd: worktreePath,
+			cause: "team-review"
 		}).catch((error) => ({
 			ok: false,
-			err: errorMessage(error)
+			err: errorMessage(error),
+			removalKept: void 0
 		}));
+		if (removal.removalKept) return;
 		if (removal.ok && !await pathExists(worktreePath)) return;
 		log.warn(`[${TEAM_REVIEW_LANE_ID}] worktree removal failed for ${worktreePath}, deleting it directly: ${firstLine$1(removal.err ?? "") || "the directory is still present"}`);
 		await deleteCheckout(gitWorkspace, worktreePath, log);
@@ -28920,9 +28912,9 @@ function createTeamReviewActions({ drafts, github, store, log = console, telemet
 			reason: "comments-already-posted",
 			error: "The inline comments were already posted, so the approval cannot carry them again"
 		});
-		if (event === "COMMENT" && !body.trim() && comments.length === 0) return refusePost(timing, {
+		if (event !== "APPROVE" && !body.trim() && comments.length === 0) return refusePost(timing, {
 			reason: "empty-comment",
-			error: "A comment review needs a body or an inline comment"
+			error: "A comment or change request needs a body or an inline comment"
 		});
 		const liveHeadRead = await readStep(timing, "head-before-post", () => store.requestPrHead(draft.repo, draft.number, "priority"));
 		if (liveHeadRead.isRateLimited) return refusePost(timing, {
@@ -30206,11 +30198,14 @@ function createBenchmarkWiring({ benchmarksRoot, runsRoot, isEnabled, broadcast,
 		if (projectPath) {
 			const removal = await gitWorkspace.removeWorktreeByPath({
 				projectPath,
-				cwd: worktreePath
+				cwd: worktreePath,
+				cause: "benchmark"
 			}).catch((error) => ({
 				ok: false,
-				err: errorMessage(error)
+				err: errorMessage(error),
+				removalKept: void 0
 			}));
+			if (removal.removalKept) return;
 			if (!removal.ok) log.warn(`[${BENCHMARK_LANE_ID}] could not remove leftover ${worktreePath}: ${firstLine(removal.err ?? "")}`);
 		}
 		await removeDirectoryOrWarn(worktreePath);
@@ -31679,8 +31674,24 @@ function createBranchGcPoller(deps) {
 		const removed = await callGit(gitWorkspace.removeWorktreeByPath, {
 			projectPath,
 			cwd: decision.cwd,
-			branch: decision.branch
+			branch: decision.branch,
+			cause: "branch-gc"
 		});
+		if (removed.removalKept) {
+			summary.worktreesKept.push({
+				cwd: decision.cwd,
+				branch: decision.branch,
+				reason: removed.removalKept
+			});
+			trace({
+				projectPath,
+				name: decision.branch,
+				cwd: decision.cwd,
+				decision: "kept",
+				reason: removed.removalKept
+			});
+			return;
+		}
 		if (!removed.ok) {
 			noteGitError({
 				projectPath,
@@ -31888,8 +31899,22 @@ function createBranchGcPoller(deps) {
 			const deleted = await callGit(gitWorkspace.deleteRemoteBranch, {
 				projectPath,
 				name,
-				tipSha
+				tipSha,
+				cause: "branch-gc"
 			});
+			if (deleted.removalKept) {
+				summary.kept.push({
+					name,
+					reason: deleted.removalKept
+				});
+				trace({
+					projectPath,
+					name,
+					decision: "kept",
+					reason: deleted.removalKept
+				});
+				continue;
+			}
 			if (!deleted.ok) {
 				noteGitError({
 					projectPath,
@@ -38761,7 +38786,8 @@ function createRadarWiring({ config, investigationSessions, closeSessionDataClie
 			if (resultFile) await resultFile.cleanup();
 			await Promise.resolve(gitWorkspace.discard({
 				projectPath: repoPath,
-				workspace
+				workspace,
+				cause: "radar"
 			})).catch((e) => console.warn(`[posthog-poller] fix worktree discard failed: ${errorMessage(e)}`));
 		}
 	}
@@ -45444,6 +45470,131 @@ function createTraceChangeBroadcast({ source, broadcast, setTimeoutFunction = se
 	return { stop };
 }
 //#endregion
+//#region server/session/shown-files-wiring.ts
+var SHOWN_FOLDER_NAME = "shown";
+var INDEX_FILENAME = "index.json";
+var INCOMING_PREFIX = ".incoming-";
+var ShownIndex = z.array(ShownFile);
+async function readFirstChunk(filePath) {
+	const handle = await fs$1.open(filePath, "r");
+	try {
+		const buffer = Buffer.alloc(SHOWN_SNIFF_BYTES);
+		const { bytesRead } = await handle.read(buffer, 0, buffer.byteLength, 0);
+		return buffer.subarray(0, bytesRead);
+	} finally {
+		await handle.close().catch(() => {});
+	}
+}
+async function readSessionIndex(indexPath) {
+	const text = await fs$1.readFile(indexPath, "utf8").catch(() => null);
+	if (text === null) return [];
+	const parsed = ShownIndex.safeParse(parseJsonOrNull(text));
+	return parsed.success ? parsed.data : [];
+}
+async function writeSessionIndex(indexPath, files) {
+	const pendingPath = `${indexPath}.${crypto.randomBytes(4).toString("hex")}.tmp`;
+	await fs$1.writeFile(pendingPath, JSON.stringify(files), { mode: 384 });
+	await fs$1.rename(pendingPath, indexPath);
+}
+function createShownFilesWiring({ shownRoot, broadcastControl, now = Date.now }) {
+	const filesBySessionId = /* @__PURE__ */ new Map();
+	const indexQueue = createKeyedSerialQueue();
+	function sessionDir(sessionId) {
+		return path.join(shownRoot, sessionId);
+	}
+	async function loadIndexes() {
+		const sessionIds = await fs$1.readdir(shownRoot).catch(() => []);
+		for (const sessionId of sessionIds) {
+			if (!isSafePathSegment(sessionId)) continue;
+			const files = await readSessionIndex(path.join(sessionDir(sessionId), INDEX_FILENAME));
+			if (files.length > 0 && !filesBySessionId.has(sessionId)) filesBySessionId.set(sessionId, files);
+		}
+	}
+	async function reserveIncomingPath(sessionId) {
+		const dir = sessionDir(sessionId);
+		await fs$1.mkdir(dir, {
+			recursive: true,
+			mode: 448
+		});
+		return path.join(dir, `${INCOMING_PREFIX}${crypto.randomBytes(8).toString("hex")}`);
+	}
+	async function recordAdmitted(sessionId, file) {
+		const dir = sessionDir(sessionId);
+		const withNewest = [...filesBySessionId.get(sessionId) ?? await readSessionIndex(path.join(dir, INDEX_FILENAME)), file];
+		const droppedIds = planUploadRetention(withNewest.map((shown) => shown.id), {
+			keep: 50,
+			justWritten: file.id
+		});
+		const kept = filesAfterRetention(withNewest, droppedIds);
+		await writeSessionIndex(path.join(dir, INDEX_FILENAME), kept);
+		filesBySessionId.set(sessionId, kept);
+		await Promise.all(droppedIds.map((droppedId) => fs$1.unlink(path.join(dir, droppedId)).catch(() => {})));
+	}
+	async function admit(session, arrival) {
+		const firstChunk = await readFirstChunk(arrival.incomingPath);
+		const verdict = decideShownKind(firstChunk, arrival.name);
+		if (!verdict.ok) {
+			await fs$1.unlink(arrival.incomingPath).catch(() => {});
+			return {
+				ok: false,
+				status: 415,
+				error: verdict.error
+			};
+		}
+		const shownAt = now();
+		const fileId = buildUploadFilename({
+			now: shownAt,
+			randomSuffix: crypto.randomBytes(4).toString("hex"),
+			extension: verdict.extension
+		});
+		await fs$1.rename(arrival.incomingPath, path.join(sessionDir(session.id), fileId));
+		const file = {
+			id: fileId,
+			name: arrival.name,
+			caption: arrival.caption,
+			kind: verdict.kind,
+			mime: verdict.mime,
+			sizeBytes: arrival.sizeBytes,
+			pageTitle: verdict.kind === "page" ? readPageTitle(firstChunk) : null,
+			shownAt
+		};
+		await indexQueue.run(session.id, () => recordAdmitted(session.id, file));
+		broadcastControl({
+			type: "session-shown",
+			id: session.id,
+			files: [file]
+		});
+		return {
+			ok: true,
+			file
+		};
+	}
+	function findServable(sessionId, fileId) {
+		if (!isSafePathSegment(sessionId) || !isSafePathSegment(fileId)) return null;
+		const file = filesBySessionId.get(sessionId)?.find((shown) => shown.id === fileId);
+		const mime = shownMimeForFilename(fileId);
+		if (!file || !mime) return null;
+		return {
+			path: path.join(sessionDir(sessionId), fileId),
+			mime,
+			sizeBytes: file.sizeBytes
+		};
+	}
+	function snapshotMessage() {
+		return {
+			type: "session-shown-snapshot",
+			sessions: Object.fromEntries(filesBySessionId)
+		};
+	}
+	return {
+		reserveIncomingPath,
+		admit,
+		findServable,
+		snapshotMessage,
+		loaded: loadIndexes()
+	};
+}
+//#endregion
 //#region server/uploads-wiring.ts
 var UPLOAD_RETAIN_DAYS = 7;
 var PRUNE_INTERVAL_MS = 864e5;
@@ -45452,8 +45603,8 @@ function createUploadsWiring({ configPath, liveSessionIds, setIntervalFn = DEFAU
 	let timer = null;
 	async function prune() {
 		const retainedSessionIds = liveSessionIds();
-		await pruneAgedFiles({
-			directory: uploadsRoot,
+		for (const directory of [uploadsRoot, configSiblingPath(configPath, SHOWN_FOLDER_NAME)]) await pruneAgedFiles({
+			directory,
 			suffixes: [""],
 			retainDays: UPLOAD_RETAIN_DAYS,
 			entryMode: "directory",
@@ -46970,14 +47121,21 @@ function createBackendLanes(dependencies) {
 	});
 	const spawnGate = createSpawnGate({ memoryAdmission });
 	const ownedPaths = createOwnedPathsLedger({
-		filePath: ownedPathsLedgerPath(),
+		filePath: configSiblingPath(configStore.configPath, "owned-paths.json"),
 		log: logger
 	});
+	const protectedSessionIds = () => new Set([...config.projects.map((project) => project.id), ...allLiveSessions().map((session) => session.id)].flatMap((sessionId) => [sessionId, sanitizeWorktreeName(sessionId)]));
 	const gitWorkspace = createGitWorkspace({
 		rerere: config.worktreeRerere !== false,
-		ownedPaths
+		ownedPaths,
+		removalGuard: { protectedSessionIds },
+		log: logger
+	});
+	const gitWorkspaceSync = createGitWorkspaceSync({
+		ownedPaths,
+		removalGuard: { protectedSessionIds },
+		log: logger
 	});
-	const gitWorkspaceSync = createGitWorkspaceSync({ ownedPaths });
 	const laneLedger = createLaneLedger({
 		ledgerPath: configSiblingPath(configStore.configPath, "usage-lanes.json"),
 		retainDays: resolveUsageConfig(config.usage).warehouseRetainDays,
@@ -49987,6 +50145,7 @@ function summarizeCustomAgents(declarations) {
 function buildSettingsPayload({ configStore, rtkInstallStatus = null, telegramDelivery = null, coderEnvironments = null, agentLogins = null, resolveRtk = getRtkPath }) {
 	return {
 		...configStore.getSettings(),
+		isExperimentalBuild: configStore.isExperimentalBuild === true,
 		rtkAvailable: !!resolveRtk(),
 		saneYoloAvailable: !!resolvePackageBin("cc-safety-net", "cc-safety-net"),
 		rtkInstall: rtkInstallStatus || { status: "idle" },
@@ -53822,6 +53981,7 @@ function createBackendControl(dependencies) {
 	sendLaneSnapshotOnConnect("visions", laneAssembly.currentVisions, false);
 	sendLaneSnapshotOnConnect("ingest", laneAssembly.currentIngest, true);
 	sendLaneSnapshotOnConnect("session-docs", () => dependencies.sessionDocs, false);
+	sendLaneSnapshotOnConnect("session-shown", () => dependencies.shownFiles, false);
 	sendLaneSnapshotOnConnect("coherence-feed", () => dependencies.coherenceFeed, false);
 	return { removeExitedSession: controlHandlers.removeExitedSession };
 }
@@ -54161,6 +54321,7 @@ function markInterrupted(journal, { reason, now }) {
 //#region server/update-check.ts
 var NPM_REGISTRY_PACKAGE_URL = "https://registry.npmjs.org/glimmervoid";
 var NPM_REGISTRY_LATEST_URL = `${NPM_REGISTRY_PACKAGE_URL}/latest`;
+var NPM_REGISTRY_EXPERIMENTAL_URL = `${NPM_REGISTRY_PACKAGE_URL}/next`;
 var REGISTRY_REQUEST_HEADERS = {
 	Accept: "application/json",
 	"User-Agent": "glimmervoid-update-check"
@@ -54168,10 +54329,6 @@ var REGISTRY_REQUEST_HEADERS = {
 var DEFAULT_TIMEOUT_MS = 8e3;
 var GIT_HEAD_TIMEOUT_MS = 3e3;
 var RELEASE_ANCESTRY_TIMEOUT_MS = 3e3;
-var MAIN_CHANNEL_BUDGET_MS = DEFAULT_TIMEOUT_MS;
-var MAIN_FETCH_TIMEOUT_MS = Math.floor(MAIN_CHANNEL_BUDGET_MS / 2);
-var MAIN_REMOTE_TIP_TIMEOUT_MS = Math.floor(MAIN_CHANNEL_BUDGET_MS / 4);
-var MAIN_BEHIND_COUNT_TIMEOUT_MS = Math.floor(MAIN_CHANNEL_BUDGET_MS / 4);
 var STATE_FILE_NAME = "update-check.json";
 var STATE_TTL_MS = 216e5;
 var RELEASE_SOURCE = "npm-registry";
@@ -54299,143 +54456,29 @@ async function resolveInstalledDeprecation({ currentVersion, fetchFn, signal })
 	const versionUrl = `${NPM_REGISTRY_PACKAGE_URL}/${encodeURIComponent(currentVersion)}`;
 	return parseRegistryDeprecation(await fetchRegistryDocument(versionUrl, fetchFn, signal));
 }
-async function resolveLatestRegistryVersion({ currentVersion, fetchFn, signal }) {
-	const [latestDocument, deprecation] = await Promise.all([fetchRegistryDocument(NPM_REGISTRY_LATEST_URL, fetchFn, signal), resolveInstalledDeprecation({
-		currentVersion,
-		fetchFn,
-		signal
-	})]);
-	const published = parseRegistryLatest(latestDocument);
+async function resolveLatestRegistryVersion({ currentVersion, updateChannel, fetchFn, signal }) {
+	const [latestDocument, experimentalDocument, deprecation] = await Promise.all([
+		fetchRegistryDocument(NPM_REGISTRY_LATEST_URL, fetchFn, signal),
+		updateChannel === "experimental" ? fetchRegistryDocument(NPM_REGISTRY_EXPERIMENTAL_URL, fetchFn, signal) : null,
+		resolveInstalledDeprecation({
+			currentVersion,
+			fetchFn,
+			signal
+		})
+	]);
+	const published = pickNewestPublished(parseRegistryLatest(latestDocument), parseRegistryLatest(experimentalDocument));
 	if (!published) return {
 		version: null,
 		sha: null,
-		behindCount: null,
 		reason: "release-check-failed",
 		deprecation
 	};
 	return {
 		...published,
-		behindCount: null,
 		reason: null,
 		deprecation
 	};
 }
-function upstreamBranch(upstream) {
-	const slashIndex = upstream.indexOf("/");
-	if (slashIndex < 0 || slashIndex === upstream.length - 1) return null;
-	return upstream.slice(slashIndex + 1);
-}
-async function fetchMainRemote(packageRoot, remote, runCommand, fetchOrigin, signal) {
-	if (remote === "origin" && fetchOrigin) return fetchOrigin({
-		projectPath: packageRoot,
-		timeoutMs: MAIN_FETCH_TIMEOUT_MS
-	});
-	return runGitProbe(runCommand, [
-		"fetch",
-		"--prune",
-		remote
-	], {
-		cwd: packageRoot,
-		timeout: MAIN_FETCH_TIMEOUT_MS,
-		signal
-	});
-}
-async function resolveLatestMain(installed, packageRoot, runCommand, fetchOrigin, signal) {
-	if (installed.flavor !== "clone") return {
-		version: null,
-		sha: null,
-		behindCount: null,
-		reason: "main-channel-requires-clone",
-		deprecation: null
-	};
-	if (!installed.installedBranch) return {
-		version: null,
-		sha: null,
-		behindCount: null,
-		reason: "no-branch",
-		deprecation: null
-	};
-	if (!installed.upstream) return {
-		version: null,
-		sha: null,
-		behindCount: null,
-		reason: "no-upstream",
-		deprecation: null
-	};
-	const remote = parseRemoteFromUpstream(installed.upstream);
-	const branch = upstreamBranch(installed.upstream);
-	if (!branch) return {
-		version: null,
-		sha: null,
-		behindCount: null,
-		reason: "no-upstream",
-		deprecation: null
-	};
-	if (!(await fetchMainRemote(packageRoot, remote, runCommand, fetchOrigin, signal)).ok) return {
-		version: null,
-		sha: null,
-		behindCount: null,
-		reason: "fetch-failed",
-		deprecation: null
-	};
-	if (signal.aborted) return {
-		version: null,
-		sha: null,
-		behindCount: null,
-		reason: "remote-tip-unavailable",
-		deprecation: null
-	};
-	const remoteTip = await runGitProbe(runCommand, [
-		"ls-remote",
-		remote,
-		`refs/heads/${branch}`
-	], {
-		cwd: packageRoot,
-		timeout: MAIN_REMOTE_TIP_TIMEOUT_MS,
-		signal
-	});
-	const targetSha = normalizeSha(remoteTip.out.split(/\s+/)[0]);
-	if (!targetSha) return {
-		version: null,
-		sha: null,
-		behindCount: null,
-		reason: "remote-tip-unavailable",
-		deprecation: null
-	};
-	if (signal.aborted) return {
-		version: null,
-		sha: targetSha,
-		behindCount: null,
-		reason: "branch-count-unavailable",
-		deprecation: null
-	};
-	const countsProbe = await runGitProbe(runCommand, [
-		"rev-list",
-		"--left-right",
-		"--count",
-		`HEAD...${targetSha}`
-	], {
-		cwd: packageRoot,
-		timeout: MAIN_BEHIND_COUNT_TIMEOUT_MS,
-		signal
-	});
-	const counts = countsProbe.ok ? parseLeftRightCount(countsProbe.out) : null;
-	if (!counts) return {
-		version: null,
-		sha: targetSha,
-		behindCount: null,
-		reason: "branch-count-unavailable",
-		deprecation: null
-	};
-	const reason = counts.behind > 0 && counts.ahead > 0 ? "branch-diverged" : null;
-	return {
-		version: null,
-		sha: targetSha,
-		behindCount: counts.ahead,
-		reason,
-		deprecation: null
-	};
-}
 function readCheckState(statePath) {
 	return readRecord(readJsonFile(statePath));
 }
@@ -54447,7 +54490,7 @@ function writeCheckState(statePath, state) {
 async function finish(installed, latestTarget, currentVersion, channel, platform, lastCheckAt, packageRoot, runCommand, signal) {
 	let isLatestReleaseAncestorOfHead = false;
 	const latestSha = normalizeSha(latestTarget.sha);
-	if (channel === "release" && installed.flavor === "clone" && installed.installedSha && latestSha) isLatestReleaseAncestorOfHead = (await runGitProbe(runCommand, [
+	if (installed.flavor === "clone" && installed.installedSha && latestSha) isLatestReleaseAncestorOfHead = (await runGitProbe(runCommand, [
 		"merge-base",
 		"--is-ancestor",
 		latestSha,
@@ -54466,7 +54509,6 @@ async function finish(installed, latestTarget, currentVersion, channel, platform
 			flavor: installed.flavor,
 			platform,
 			channel,
-			behindCount: latestTarget.behindCount,
 			reason: latestTarget.reason,
 			isLatestReleaseAncestorOfHead,
 			deprecation: latestTarget.deprecation
@@ -54478,16 +54520,14 @@ async function finish(installed, latestTarget, currentVersion, channel, platform
 	};
 }
 function targetFromCache(cached, currentVersion) {
-	const behindCount = Number.isInteger(cached.behindCount) && Number(cached.behindCount) >= 0 ? Number(cached.behindCount) : null;
 	return {
 		version: typeof cached.latestVersion === "string" ? cached.latestVersion : null,
 		sha: typeof cached.latestSha === "string" ? cached.latestSha : null,
-		behindCount,
 		reason: typeof cached.reason === "string" ? cached.reason : null,
 		deprecation: cached.installedVersion === currentVersion && typeof cached.deprecation === "string" ? cached.deprecation : null
 	};
 }
-async function checkForUpdate({ currentVersion, updateChannel = "release", fetchFn = fetch, timeoutMs = DEFAULT_TIMEOUT_MS, abortController = new AbortController(), packageRoot: packageRoot$1 = packageRoot, runCommand = execFileAsync, fetchOrigin, statePath = defaultStatePath(), ttlMs = STATE_TTL_MS, now = Date.now(), platform = process.platform } = {}) {
+async function checkForUpdate({ currentVersion, updateChannel = "release", fetchFn = fetch, timeoutMs = DEFAULT_TIMEOUT_MS, abortController = new AbortController(), packageRoot: packageRoot$1 = packageRoot, runCommand = execFileAsync, statePath = defaultStatePath(), ttlMs = STATE_TTL_MS, now = Date.now(), platform = process.platform } = {}) {
 	const timer = setTimeout(() => abortController.abort(), timeoutMs);
 	const signal = abortController.signal;
 	let installed = {
@@ -54505,12 +54545,12 @@ async function checkForUpdate({ currentVersion, updateChannel = "release", fetch
 		});
 		const cached = readCheckState(statePath);
 		const cacheOutrunByInstall = normalizeSha(cached?.latestSha) !== null && normalizeSha(cached?.latestSha) === installed.installedSha;
-		const expectedReleaseSource = updateChannel === "release" ? RELEASE_SOURCE : null;
-		const isCacheFromSameSource = expectedReleaseSource === null || cached?.releaseSource === expectedReleaseSource;
+		const isCacheFromSameSource = cached?.releaseSource === RELEASE_SOURCE;
 		if (cached?.channel === updateChannel && isCacheFromSameSource && !cacheOutrunByInstall && isCheckFresh(cached.lastCheckAt, now, ttlMs)) return finish(installed, targetFromCache(cached, currentVersion), currentVersion, updateChannel, platform, now, packageRoot$1, runCommand, signal);
 		signal.throwIfAborted();
-		const latestTarget = updateChannel === "main" ? await resolveLatestMain(installed, packageRoot$1, runCommand, fetchOrigin, signal) : await resolveLatestRegistryVersion({
+		const latestTarget = await resolveLatestRegistryVersion({
 			currentVersion,
+			updateChannel,
 			fetchFn,
 			signal
 		});
@@ -54519,8 +54559,7 @@ async function checkForUpdate({ currentVersion, updateChannel = "release", fetch
 			channel: updateChannel,
 			latestVersion: latestTarget.version,
 			latestSha: normalizeSha(latestTarget.sha),
-			releaseSource: expectedReleaseSource,
-			behindCount: latestTarget.behindCount,
+			releaseSource: RELEASE_SOURCE,
 			reason: latestTarget.reason,
 			installedVersion: currentVersion ?? null,
 			deprecation: latestTarget.deprecation
@@ -54530,7 +54569,6 @@ async function checkForUpdate({ currentVersion, updateChannel = "release", fetch
 		return finish(installed, {
 			version: null,
 			sha: null,
-			behindCount: null,
 			reason: "update-check-failed",
 			deprecation: null
 		}, currentVersion, updateChannel, platform, now, packageRoot$1, runCommand, signal);
@@ -54594,15 +54632,7 @@ function createBackendUpdateCheck(dependencies) {
 			reason: decision.reason,
 			message: decision.message
 		};
-		const fastForward = decideFastForward({
-			canFastForward: recorded.reason !== "branch-diverged",
-			isTargetAncestorOfHead: false
-		});
-		if (fastForward.ok) return null;
-		return {
-			reason: fastForward.reason,
-			message: fastForward.message
-		};
+		return null;
 	}
 	function projectStatus(recorded) {
 		const journal = dependencies.getUpdateJournal?.();
@@ -54699,7 +54729,6 @@ function createBackendUpdateCheck(dependencies) {
 			currentVersion: dependencies.currentVersion,
 			updateChannel: channel,
 			abortController: updateAbort,
-			...dependencies.fetchOrigin ? { fetchOrigin: dependencies.fetchOrigin } : {},
 			...ttlMs === void 0 ? {} : { ttlMs }
 		}).catch(() => null).then((updateResult) => {
 			if (stopped || channel !== normalizeUpdateChannel(dependencies.config.updateChannel)) return projectStatus({
@@ -56145,6 +56174,7 @@ function createUpdateApplyLane(dependencies) {
 		stagedDescriptor = null;
 		await dependencies.gitWorkspace.removeWorktreeByPath({
 			projectPath: dependencies.packageRoot,
+			cause: "update-apply",
 			cwd: stagingPath
 		});
 		await publish(failRun(journal, {
@@ -56327,6 +56357,7 @@ function createUpdateApplyLane(dependencies) {
 		}
 		if ((await dependencies.gitWorkspace.removeWorktreeByPath({
 			projectPath: dependencies.packageRoot,
+			cause: "update-apply",
 			cwd: stagingPath,
 			admissionTimeoutMs: HANDOFF_QUEUE_ADMISSION_TIMEOUT_MS
 		})).admissionRefused) refusedCleanupSteps.push("staging worktree removal");
@@ -56389,6 +56420,7 @@ function createUpdateApplyLane(dependencies) {
 			}
 			await dependencies.gitWorkspace.removeWorktreeByPath({
 				projectPath: dependencies.packageRoot,
+				cause: "update-apply",
 				cwd: descriptor.stagingPath,
 				admissionTimeoutMs: HANDOFF_QUEUE_ADMISSION_TIMEOUT_MS
 			});
@@ -56404,6 +56436,7 @@ function createUpdateApplyLane(dependencies) {
 		if (!descriptor || descriptor.state !== "staged" || inFlight) {
 			await dependencies.gitWorkspace.removeWorktreeByPath({
 				projectPath: dependencies.packageRoot,
+				cause: "update-apply",
 				cwd: stagingPath,
 				admissionTimeoutMs: HANDOFF_QUEUE_ADMISSION_TIMEOUT_MS
 			});
@@ -56477,6 +56510,7 @@ function createUpdateApplyLane(dependencies) {
 		}), false);
 		if (wasRunInFlight || await isStagingCheckoutPresent()) await dependencies.gitWorkspace.removeWorktreeByPath({
 			projectPath: dependencies.packageRoot,
+			cause: "update-apply",
 			cwd: stagingPath
 		});
 		await fsPromises.rm(path.join(updatePath, QUARANTINED_DIST_NAME), {
@@ -57561,6 +57595,7 @@ function createCoherenceSessionFeed({ broadcastControl, debounceMs = 1500, now =
 //#region server/backend/backend.ts
 var AGENT_INGRESS_HOST = "127.0.0.1";
 function createBackend(httpServer, options = {}) {
+	if (isOperatorHomeUnderTest(os.homedir(), process.env)) throw new Error("createBackend refused to boot on the operator's Glimmervoid home under node:test; run tests through npm test or npm run test:files, which isolate GLIMMERVOID_HOME");
 	const { staticDir = "auto", settingsDefaults } = options;
 	const packageJson = JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8"));
 	const configStore = createConfigStore({
@@ -57610,6 +57645,7 @@ function createBackend(httpServer, options = {}) {
 	let broadcastControl = null;
 	let removeExitedSession = null;
 	let agentApi = null;
+	let shownFiles = null;
 	let gitWorkspace = null;
 	const guardrailsRefusal = checkGuardrailsDependencies({ log: console });
 	warnWhenGitIsTooOld({ log: console });
@@ -57638,6 +57674,7 @@ function createBackend(httpServer, options = {}) {
 			latestPlanTitle: laneAssembly.planReview?.latestPlanTitle(glimmervoidId) ?? null
 		}),
 		getAgentApi: () => agentApi,
+		getShownFiles: () => shownFiles,
 		sshSigner,
 		recordOutcome,
 		logger: console
@@ -57677,6 +57714,11 @@ function createBackend(httpServer, options = {}) {
 	const { controlWss, dataWss, controlReplayLog, sessionDataClients, broadcastControl: broadcastControlFromWebSockets, broadcastLocalControl, closeSessionDataClients } = webSockets;
 	broadcastControl = broadcastControlFromWebSockets;
 	const sessionDocs = createSessionDocsWiring({ broadcastControl: broadcastControlFromWebSockets });
+	const shownFilesWiring = createShownFilesWiring({
+		shownRoot: configSiblingPath(configStore.configPath, SHOWN_FOLDER_NAME),
+		broadcastControl: broadcastControlFromWebSockets
+	});
+	shownFiles = shownFilesWiring;
 	const coherenceFeed = createCoherenceSessionFeed({ broadcastControl: broadcastControlFromWebSockets });
 	const sessions = /* @__PURE__ */ new Map();
 	const agentSessions = /* @__PURE__ */ new Map();
@@ -57744,7 +57786,7 @@ function createBackend(httpServer, options = {}) {
 			requestReview: (reference) => teamReview.requestReview(reference),
 			teamReviewStatus: () => teamReview.getStatus(),
 			myPrsStatus: () => myPrs.getStatus(),
-			readSettings: (request) => readSettingsForAgent(request, configFileViewOf(configStore.configPath, config, process.env))
+			readSettings: (request) => readSettingsForAgent(request, configFileViewOf(configStore.configPath, config, process.env, configStore.isExperimentalBuild))
 		},
 		coderWorkspaceStatus: (workspace) => laneAssembly.coderEnv.workspaceStatus(workspace),
 		logger: console
@@ -57862,7 +57904,6 @@ function createBackend(httpServer, options = {}) {
 		currentVersion: packageJson.version,
 		platform: process.platform,
 		checkForUpdate: options.checkForUpdate || void 0,
-		fetchOrigin: (args) => assembledGitWorkspace.fetchOrigin(args),
 		getUpdateJournal: () => updateApply.getJournal(),
 		isRestartRequested: () => updateApply.isRestartRequested(),
 		getControlClientCount: () => controlWss.clients.size,
@@ -58008,6 +58049,7 @@ function createBackend(httpServer, options = {}) {
 		readPlanRevision: laneAssembly.planReview?.readPlanRevision ?? null,
 		decidePlanReview: laneAssembly.planReview?.decide ?? null,
 		sessionDocs,
+		shownFiles: shownFilesWiring,
 		coherenceFeed,
 		serverBuild: () => serverBuild,
 		telemetry,