indusagi-coding-agent 0.2.3 → 0.2.4

package/dist/index.js

@@ -31,6 +31,70 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// src/boot/server-token.ts
+import { mkdir, readFile as readFile2, unlink, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+async function getServerToken() {
+  try {
+    const data = await readFile2(TOKEN_FILE, "utf8");
+    return JSON.parse(data);
+  } catch {
+    return null;
+  }
+}
+async function storeServerToken(token) {
+  try {
+    await mkdir(CONFIG_DIR, { recursive: true });
+    const tokenData = {
+      access_token: token.access_token,
+      refresh_token: token.refresh_token,
+      token_type: token.token_type ?? "Bearer",
+      scope: token.scope,
+      expires_at: token.expires_in !== void 0 ? new Date(Date.now() + token.expires_in * 1e3).toISOString() : null,
+      created_at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    await writeFile(TOKEN_FILE, `${JSON.stringify(tokenData, null, 2)}
+`, {
+      encoding: "utf8",
+      mode: 384
+    });
+    return true;
+  } catch (error) {
+    console.error("Failed to store server token:", error.message);
+    return false;
+  }
+}
+async function clearServerToken() {
+  try {
+    await unlink(TOKEN_FILE);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isServerTokenExpired(token) {
+  if (!token || !token.expires_at) {
+    return true;
+  }
+  const expiresAt = new Date(token.expires_at);
+  const now = /* @__PURE__ */ new Date();
+  return expiresAt.getTime() - now.getTime() < 5 * 60 * 1e3;
+}
+async function hasValidServerToken() {
+  const token = await getServerToken();
+  return token !== null && !isServerTokenExpired(token);
+}
+var INDUS_SERVER_URL, CONFIG_DIR, TOKEN_FILE;
+var init_server_token = __esm({
+  "src/boot/server-token.ts"() {
+    "use strict";
+    INDUS_SERVER_URL = process.env.INDUS_SERVER_URL?.replace(/\/+$/, "") ?? "https://indus-server.vercel.app";
+    CONFIG_DIR = path.join(os.homedir(), ".indusagi", "agent");
+    TOKEN_FILE = path.join(CONFIG_DIR, "server-token.json");
+  }
+});
+
 // src/briefing/contract.ts
 function briefingFault(kind, message, cause) {
   return cause === void 0 ? { kind, message } : { kind, message, cause };
@@ -96,29 +160,29 @@ function bullets(lines) {
   return lines.map((l) => `- ${l}`).join("\n");
 }
 function escapeXml(value) {
-  let out = "";
+  let out2 = "";
   for (const ch of value) {
     switch (ch) {
       case "&":
-        out += "&amp;";
+        out2 += "&amp;";
         break;
       case "<":
-        out += "&lt;";
+        out2 += "&lt;";
         break;
       case ">":
-        out += "&gt;";
+        out2 += "&gt;";
         break;
       case '"':
-        out += "&quot;";
+        out2 += "&quot;";
         break;
       case "'":
-        out += "&#39;";
+        out2 += "&#39;";
         break;
       default:
-        out += ch;
+        out2 += ch;
     }
   }
-  return out;
+  return out2;
 }
 function hasTool(ctx, id) {
   return (ctx.tools ?? []).some((t) => t.name === id);
@@ -553,7 +617,7 @@ function buildMacroScope(raw) {
   return { args, all: args.join(" "), raw };
 }
 function splitArguments(raw) {
-  const out = [];
+  const out2 = [];
   let current = "";
   let inWord = false;
   let quote = null;
@@ -575,7 +639,7 @@ function splitArguments(raw) {
     }
     if (ch === " " || ch === "	" || ch === "\n" || ch === "\r" || ch === "\f" || ch === "\v") {
       if (inWord) {
-        out.push(current);
+        out2.push(current);
         current = "";
         inWord = false;
       }
@@ -584,33 +648,33 @@ function splitArguments(raw) {
     current += ch;
     inWord = true;
   }
-  if (inWord) out.push(current);
-  return out;
+  if (inWord) out2.push(current);
+  return out2;
 }
 function resolveTokens(tokens, scope) {
-  let out = "";
+  let out2 = "";
   for (const token of tokens) {
     switch (token.kind) {
       case "literal":
-        out += token.text;
+        out2 += token.text;
         break;
       case "positional": {
         const value = scope.args[token.index - 1];
-        if (value !== void 0) out += value;
+        if (value !== void 0) out2 += value;
         break;
       }
       case "all":
-        out += scope.all;
+        out2 += scope.all;
         break;
       case "slice": {
         const from = Math.max(0, token.start - 1);
         const slice = token.length === void 0 ? scope.args.slice(from) : scope.args.slice(from, from + Math.max(0, token.length));
-        out += slice.join(" ");
+        out2 += slice.join(" ");
         break;
       }
     }
   }
-  return out;
+  return out2;
 }
 function applyMacros(body, raw) {
   return resolveTokens(scanMacroBody(body), buildMacroScope(raw));
@@ -660,18 +724,18 @@ function loadMacros(dir, opts = {}) {
   }
   return macros;
 }
-function readMacroFile(path3, origin, label2) {
+function readMacroFile(path4, origin, label2) {
   let text;
   try {
-    text = readFileSync(path3, "utf8");
+    text = readFileSync(path4, "utf8");
   } catch (cause) {
-    throw briefingFault("macro_invalid", `could not read macro file at ${path3}`, cause);
+    throw briefingFault("macro_invalid", `could not read macro file at ${path4}`, cause);
   }
   const { frontmatter, body } = splitFrontmatter(text);
-  const name = basename2(path3).replace(/\.md$/i, "");
+  const name = basename2(path4).replace(/\.md$/i, "");
   const declared = typeof frontmatter.description === "string" ? frontmatter.description.trim() : "";
   const description = declared.length > 0 ? `${declared} (${label2})` : deriveDescription(body, label2);
-  return { name, description, body, origin, source: path3 };
+  return { name, description, body, origin, source: path4 };
 }
 function deriveDescription(body, label2) {
   const firstLine = body.split("\n").find((l) => l.trim().length > 0)?.trim() ?? "";
@@ -810,41 +874,41 @@ function checkFrontmatterKeys(frontmatter) {
   return null;
 }
 function projectFrontmatter(raw) {
-  const out = {};
-  if (typeof raw.name === "string") out.name = raw.name.trim();
-  if (typeof raw.description === "string") out.description = raw.description.trim();
-  if (typeof raw.license === "string") out.license = raw.license.trim();
-  if (typeof raw.compatibility === "string") out.compatibility = raw.compatibility.trim();
+  const out2 = {};
+  if (typeof raw.name === "string") out2.name = raw.name.trim();
+  if (typeof raw.description === "string") out2.description = raw.description.trim();
+  if (typeof raw.license === "string") out2.license = raw.license.trim();
+  if (typeof raw.compatibility === "string") out2.compatibility = raw.compatibility.trim();
   if (typeof raw.metadata === "object" && raw.metadata !== null) {
-    out.metadata = raw.metadata;
+    out2.metadata = raw.metadata;
   }
   const tools = raw["allowed-tools"];
   if (typeof tools === "string") {
     const list = tools.split(/[\s,]+/).map((t) => t.trim()).filter((t) => t.length > 0);
-    if (list.length > 0) out.allowedTools = list;
+    if (list.length > 0) out2.allowedTools = list;
   } else if (Array.isArray(tools)) {
-    out.allowedTools = tools.map((t) => String(t));
+    out2.allowedTools = tools.map((t) => String(t));
   }
   const flag = raw["disable-model-invocation"];
-  if (flag === true || flag === "true") out.disableModelInvocation = true;
-  return out;
+  if (flag === true || flag === "true") out2.disableModelInvocation = true;
+  return out2;
 }
 function diag(kind, location, detail) {
   return { kind, location, detail };
 }
 function parseCandidate(candidate, origin) {
-  const { path: path3, dirName } = candidate;
+  const { path: path4, dirName } = candidate;
   let text;
   try {
-    text = readFileSync2(path3, "utf8");
+    text = readFileSync2(path4, "utf8");
   } catch (cause) {
     const detail = `could not read the skill file (${describeCause(cause)})`;
-    return { card: null, diagnostic: diag("invalid", path3, detail) };
+    return { card: null, diagnostic: diag("invalid", path4, detail) };
   }
   const { frontmatter, body } = splitFrontmatter(text);
   const keyProblem = checkFrontmatterKeys(frontmatter);
   if (keyProblem !== null) {
-    return { card: null, diagnostic: diag("invalid", path3, keyProblem) };
+    return { card: null, diagnostic: diag("invalid", path4, keyProblem) };
   }
   const fm = projectFrontmatter(frontmatter);
   const declaredName = fm.name ?? "";
@@ -852,22 +916,22 @@ function parseCandidate(candidate, origin) {
   const name = fromDir ? dirName : declaredName;
   const nameProblem = checkName(name, dirName, fromDir);
   if (nameProblem !== null) {
-    return { card: null, diagnostic: diag("invalid", path3, nameProblem) };
+    return { card: null, diagnostic: diag("invalid", path4, nameProblem) };
   }
   const description = fm.description ?? "";
   const descProblem = checkDescription(description);
   if (descProblem !== null) {
-    return { card: null, diagnostic: diag("invalid", path3, descProblem) };
+    return { card: null, diagnostic: diag("invalid", path4, descProblem) };
   }
   const card = {
     name,
     description,
     body,
-    location: path3,
+    location: path4,
     origin,
     frontmatter: fm
   };
-  return { card, diagnostic: diag("loaded", path3, `loaded skill "${name}"`) };
+  return { card, diagnostic: diag("loaded", path4, `loaded skill "${name}"`) };
 }
 function describeCause(cause) {
   if (cause instanceof Error) return cause.message;
@@ -940,15 +1004,15 @@ var init_skills = __esm({
 // src/briefing/context-docs.ts
 import { existsSync, readFileSync as readFileSync3, realpathSync as realpathSync2 } from "node:fs";
 import { dirname as dirname4, extname as extname2, isAbsolute as isAbsolute2, join as join6, parse, resolve as resolve2 } from "node:path";
-function shortenPath(path3, cwd, home) {
-  if (cwd.length > 0 && path3.startsWith(cwd)) {
-    const rest = path3.slice(cwd.length).replace(/^[/\\]+/, "");
+function shortenPath(path4, cwd, home) {
+  if (cwd.length > 0 && path4.startsWith(cwd)) {
+    const rest = path4.slice(cwd.length).replace(/^[/\\]+/, "");
     return rest.length > 0 ? `./${rest}` : ".";
   }
-  if (home.length > 0 && path3.startsWith(home)) {
-    return `~${path3.slice(home.length)}`;
+  if (home.length > 0 && path4.startsWith(home)) {
+    return `~${path4.slice(home.length)}`;
   }
-  return path3;
+  return path4;
 }
 function dirChain(cwd) {
   const chain = [];
@@ -961,15 +1025,15 @@ function dirChain(cwd) {
   }
   return chain.reverse();
 }
-function safeRealpath(path3) {
+function safeRealpath(path4) {
   try {
-    return realpathSync2(path3);
+    return realpathSync2(path4);
   } catch {
-    return path3;
+    return path4;
   }
 }
-function isTextFile(path3) {
-  const ext = extname2(path3).toLowerCase();
+function isTextFile(path4) {
+  const ext = extname2(path4).toLowerCase();
   return ext.length === 0 || TEXT_FILE_EXTENSIONS.has(ext);
 }
 function readFileBody(absPath) {
@@ -984,7 +1048,7 @@ function readFileBody(absPath) {
   return trimmed.length > 0 ? trimmed : null;
 }
 function extractImports(body, baseDir, home) {
-  const out = [];
+  const out2 = [];
   IMPORT_REGEX.lastIndex = 0;
   let match;
   while ((match = IMPORT_REGEX.exec(body)) !== null) {
@@ -1003,26 +1067,26 @@ function extractImports(body, baseDir, home) {
       abs = resolve2(baseDir, spec);
     }
     if (!isTextFile(abs)) continue;
-    out.push(abs);
+    out2.push(abs);
   }
-  return out;
+  return out2;
 }
-function loadDocTree(absPath, cwd, home, seen, depth, maxDepth, maxBytes, out) {
+function loadDocTree(absPath, cwd, home, seen, depth, maxDepth, maxBytes, out2) {
   const real = safeRealpath(absPath);
   if (seen.has(real)) return;
   seen.add(real);
   const body = readFileBody(absPath);
   if (body === null) return;
   const clipped = body.length > maxBytes ? body.slice(0, maxBytes) : body;
-  out.push({ path: shortenPath(absPath, cwd, home), body: clipped });
+  out2.push({ path: shortenPath(absPath, cwd, home), body: clipped });
   if (depth >= maxDepth) return;
   const baseDir = dirname4(absPath);
   for (const child of extractImports(body, baseDir, home)) {
-    loadDocTree(child, cwd, home, seen, depth + 1, maxDepth, maxBytes, out);
+    loadDocTree(child, cwd, home, seen, depth + 1, maxDepth, maxBytes, out2);
   }
 }
 function gatherContextDocs(cwd, home, opts) {
-  const out = [];
+  const out2 = [];
   try {
     const maxDepth = opts?.maxImportDepth ?? DEFAULT_MAX_IMPORT_DEPTH;
     const maxBytes = opts?.maxBytesPerDoc ?? DEFAULT_MAX_BYTES_PER_DOC;
@@ -1033,13 +1097,13 @@ function gatherContextDocs(cwd, home, opts) {
       if (dir.length === 0) continue;
       for (const name of CANDIDATE_FILES) {
         const candidate = join6(dir, name);
-        loadDocTree(candidate, cwd, home, seen, 0, maxDepth, maxBytes, out);
+        loadDocTree(candidate, cwd, home, seen, 0, maxDepth, maxBytes, out2);
       }
     }
   } catch {
-    return out;
+    return out2;
   }
-  return out;
+  return out2;
 }
 var DEFAULT_MAX_IMPORT_DEPTH, DEFAULT_MAX_BYTES_PER_DOC, CANDIDATE_FILES, TEXT_FILE_EXTENSIONS, IMPORT_REGEX;
 var init_context_docs = __esm({
@@ -1229,13 +1293,15 @@ var init_transcript = __esm({
       }
     };
     compactCommand = {
-      name: "summarize-context",
+      // `compact` is the canonical name — it is what users type (and what the
+      // suggestion list shows); the longer forms stay reachable as aliases.
+      name: "compact",
       summary: "Condense the conversation context",
-      aliases: ["condense", "compact"],
+      aliases: ["condense", "summarize-context"],
       takesArgs: true,
       run(ctx) {
         const instructions = ctx.args.trim();
-        const busyText = instructions.length > 0 ? `Condensing with guidance: ${instructions}` : "Condensing conversation context...";
+        const busyText = instructions.length > 0 ? `Compacting with guidance: ${instructions} \u2014 Esc to cancel` : "Compacting conversation context... Press Esc to cancel.";
         ctx.setStatus({ kind: "busy", text: busyText });
         void (async () => {
           try {
@@ -1244,14 +1310,29 @@ var init_transcript = __esm({
                 `printf '%s' ${JSON.stringify(`Compaction guidance: ${instructions}`)}`
               );
             }
-            await ctx.conductor.condense();
-            ctx.setStatus(
-              info(
-                instructions.length > 0 ? "Context condensed (guidance recorded for the agent)." : "Context condensed."
-              )
-            );
+            switch (await ctx.conductor.condense()) {
+              case "condensed":
+                ctx.setStatus(
+                  info(
+                    instructions.length > 0 ? "Context condensed (guidance recorded for the agent)." : "Context condensed."
+                  )
+                );
+                break;
+              case "nothing":
+                ctx.setStatus(warn("Nothing to compact yet."));
+                break;
+              case "cancelled":
+                ctx.setStatus(warn("Compaction cancelled."));
+                break;
+              case "busy":
+                ctx.setStatus(warn("A turn is running \u2014 press Esc to stop it first, then /compact."));
+                break;
+              case "failed":
+                ctx.setStatus(warn("Compaction failed; the transcript is unchanged."));
+                break;
+            }
           } catch {
-            ctx.setStatus(warn("Condense could not complete; the transcript is unchanged."));
+            ctx.setStatus(warn("Compaction failed; the transcript is unchanged."));
           }
         })();
         return HANDLED;
@@ -1291,7 +1372,8 @@ var init_transcript = __esm({
     costCommand = {
       name: "cost",
       summary: "Show session cost and token usage",
-      aliases: ["usage"],
+      // `usage` is intentionally NOT an alias here: `/usage` is the server-tier
+      // quota command (see integrations.ts). `/cost` shows this session's local stats.
       run(ctx) {
         const stats = ctx.conductor.stats();
         const t = stats.tokens;
@@ -1482,9 +1564,9 @@ function runDebug(ctx) {
   const jsonl = records.map((r) => JSON.stringify(r)).join("\n") + "\n";
   try {
     const dir = mkdtempSync(join7(tmpdir(), "indus-debug-"));
-    const path3 = join7(dir, `session-${stats.sessionId || "unknown"}.jsonl`);
-    writeFileSync(path3, jsonl, "utf8");
-    ctx.setStatus(info(`Diagnostics written to ${path3}`));
+    const path4 = join7(dir, `session-${stats.sessionId || "unknown"}.jsonl`);
+    writeFileSync(path4, jsonl, "utf8");
+    ctx.setStatus(info(`Diagnostics written to ${path4}`));
   } catch (cause) {
     const detail = cause instanceof Error ? cause.message : String(cause);
     ctx.setStatus(warn(`Could not write the diagnostics log (${detail}).`));
@@ -1553,6 +1635,7 @@ var init_workbench = __esm({
       ["Ctrl+J", "Insert a newline"],
       ["Ctrl+Z", "Suspend the process"],
       ["Alt+Up", "Pull the newest queued input back into the composer"],
+      ["Ctrl+X", "Run the newest queued message NOW (stops the current run)"],
       ["! <cmd>", "Run a shell command (kept in context)"],
       ["!! <cmd>", "Run a shell command (excluded from context)"]
     ];
@@ -1637,6 +1720,60 @@ var init_workbench = __esm({
   }
 });
 
+// src/boot/runners/server-mode.ts
+function isGatewayEligibleProvider(provider) {
+  return GATEWAY_ELIGIBLE_PROVIDERS.has(provider);
+}
+function serverTierProviders() {
+  return [...GATEWAY_ELIGIBLE_PROVIDERS];
+}
+async function hasUsableLocalKey(provider, vault) {
+  try {
+    const accounts = [];
+    const def = await vault.defaultAccount(provider);
+    if (def !== void 0 && def.length > 0) accounts.push(def);
+    for (const account of await vault.listAccounts(provider)) {
+      if (!accounts.includes(account)) accounts.push(account);
+    }
+    for (const account of accounts) {
+      const key = await vault.readUsableKey(provider, account);
+      if (typeof key === "string" && key.length > 0) return true;
+    }
+  } catch {
+  }
+  return false;
+}
+async function resolveServerMode(_ctx, provider, vault) {
+  if (!isGatewayEligibleProvider(provider)) return { serverMode: false };
+  if (await hasUsableLocalKey(provider, vault)) return { serverMode: false };
+  if (!await hasValidServerToken()) return { serverMode: false };
+  const token = await getServerToken();
+  const access = token?.access_token;
+  if (typeof access !== "string" || access.length === 0) return { serverMode: false };
+  return { serverMode: true, token: access };
+}
+async function resolveServerGatewayUrls(ctx, vault) {
+  const map = {};
+  for (const provider of GATEWAY_ELIGIBLE_PROVIDERS) {
+    const result = await resolveServerMode(ctx, provider, vault);
+    if (result.serverMode) {
+      map[provider] = `${INDUS_SERVER_URL}/gateway/${provider}`;
+    }
+  }
+  return map;
+}
+var GATEWAY_ELIGIBLE_PROVIDERS;
+var init_server_mode = __esm({
+  "src/boot/runners/server-mode.ts"() {
+    "use strict";
+    init_server_token();
+    GATEWAY_ELIGIBLE_PROVIDERS = /* @__PURE__ */ new Set([
+      "minimax",
+      "sarvam"
+    ]);
+  }
+});
+
 // src/capability-deck/contract.ts
 function capabilityId(raw) {
   return raw;
@@ -9272,14 +9409,14 @@ Poll it with action:"poll", id:"${h.id}".`
         case "poll": {
           const h = params.id ? table.get(params.id) : void 0;
           if (!h) return errResult("poll", `No background process with id "${params.id ?? ""}".`);
-          const out = drainBuffer(h.stdout, params.sinceLast ?? false);
-          const err = drainBuffer(h.stderr, params.sinceLast ?? false);
+          const out2 = drainBuffer(h.stdout, params.sinceLast ?? false);
+          const err2 = drainBuffer(h.stderr, params.sinceLast ?? false);
           const parts = [`Process ${h.id} \u2014 ${statusLine(h)}`];
-          if (out.length) parts.push(`--- stdout ---
-${out.join("\n")}`);
-          if (err.length) parts.push(`--- stderr ---
-${err.join("\n")}`);
-          if (out.length === 0 && err.length === 0) parts.push("(no new output)");
+          if (out2.length) parts.push(`--- stdout ---
+${out2.join("\n")}`);
+          if (err2.length) parts.push(`--- stderr ---
+${err2.join("\n")}`);
+          if (out2.length === 0 && err2.length === 0) parts.push("(no new output)");
           return {
             content: [{ type: "text", text: parts.join("\n") }],
             details: { action: "poll", ok: true, id: h.id, state: h.state, exitCode: h.exitCode }
@@ -9359,8 +9496,8 @@ var init_bg_process_card = __esm({
           handle.signal = sig;
           handle.state = sig ? "signalled" : "exited";
         });
-        child.on("error", (err) => {
-          pushLines(handle.stderr, `spawn error: ${String(err)}`);
+        child.on("error", (err2) => {
+          pushLines(handle.stderr, `spawn error: ${String(err2)}`);
           handle.state = "exited";
         });
         this.handles.set(id, handle);
@@ -9700,6 +9837,10 @@ function createStructuredOutputTool({
     name,
     label: "Structured Output",
     description: "Return the final machine-readable result for this subagent task.",
+    // Pure in-memory capture — no filesystem/shell/network mutation — so the
+    // subagent permission gate auto-allows it in every mode (a schema-bound
+    // workflow must be able to land its result even under `default`/`plan`).
+    readOnly: true,
     parameters: schema,
     async execute(_toolCallId, params) {
       capture.value = params;
@@ -9807,13 +9948,13 @@ function assembleTree(header, blocks, logLines, maxLines) {
     if (1 + keptLen + summaryCost + logLines.length <= maxLines) break;
     folded.add(i);
   }
-  const out = [header];
-  if (folded.size) out.push(`  \u2026 ${folded.size} earlier phases done`);
+  const out2 = [header];
+  if (folded.size) out2.push(`  \u2026 ${folded.size} earlier phases done`);
   blocks.forEach((b, i) => {
-    if (!folded.has(i)) out.push(...baseRow(b));
+    if (!folded.has(i)) out2.push(...baseRow(b));
   });
-  out.push(...logLines);
-  return out;
+  out2.push(...logLines);
+  return out2;
 }
 function compactPhaseLine(marker, phase, done, agents, now) {
   const prefix = `  ${marker} ${phase} ${done}/${agents.length}`;
@@ -9897,7 +10038,7 @@ var init_display = __esm({
 
 // src/workflow-engine/engine.ts
 import vm2 from "node:vm";
-import os from "node:os";
+import os2 from "node:os";
 async function runWorkflow(script, options) {
   const started = Date.now();
   const { meta, body } = parseWorkflowScript(script);
@@ -10067,7 +10208,7 @@ ${body}
   };
 }
 function defaultConcurrency() {
-  const count = os.cpus()?.length;
+  const count = os2.cpus()?.length;
   return typeof count === "number" && count > 0 ? count : 8;
 }
 function createLimiter(limit) {
@@ -10745,8 +10886,8 @@ function memoryBackend() {
 }
 function fsBackend(dir) {
   const fileOf = async (sessionId) => {
-    const path3 = await import("node:path");
-    return path3.join(dir, `${sessionId}.ndjson`);
+    const path4 = await import("node:path");
+    return path4.join(dir, `${sessionId}.ndjson`);
   };
   return {
     locate: (sessionId) => `${dir}/${sessionId}.ndjson`,
@@ -11159,6 +11300,73 @@ var init_skill_parse = __esm({
   }
 });
 
+// src/conductor/quota-error.ts
+function collectErrorSignals(error) {
+  const statuses = [];
+  const parts = [];
+  const seen = /* @__PURE__ */ new Set();
+  const visit = (value, depth) => {
+    if (value === null || value === void 0 || depth > 6) return;
+    if (typeof value === "string") {
+      parts.push(value);
+      return;
+    }
+    if (typeof value === "number") {
+      statuses.push(value);
+      return;
+    }
+    if (typeof value !== "object") return;
+    if (seen.has(value)) return;
+    seen.add(value);
+    const obj = value;
+    for (const key of ["status", "statusCode", "code"]) {
+      const raw = obj[key];
+      if (typeof raw === "number") statuses.push(raw);
+      else if (typeof raw === "string" && /^\d+$/.test(raw)) statuses.push(Number(raw));
+    }
+    if (typeof obj.message === "string") parts.push(obj.message);
+    visit(obj.cause, depth + 1);
+    visit(obj.error, depth + 1);
+    visit(obj.response, depth + 1);
+    visit(obj.body, depth + 1);
+    visit(obj.data, depth + 1);
+  };
+  visit(error, 0);
+  try {
+    parts.push(JSON.stringify(error));
+  } catch {
+  }
+  if (error instanceof Error && typeof error.stack === "string") parts.push(error.stack);
+  return { statuses, text: parts.join(" 
 ").toLowerCase() };
+}
+function isQuotaFault(error) {
+  const { statuses, text } = collectErrorSignals(error);
+  if (!text.includes(QUOTA_MARKER)) return false;
+  return statuses.includes(429) || text.includes(QUOTA_MARKER);
+}
+function parseUsedLimit(text) {
+  const used = text.match(/"used"\s*:\s*(\d+)/);
+  const limit = text.match(/"limit"\s*:\s*(\d+)/);
+  if (used && limit) {
+    return { used: Number(used[1]), limit: Number(limit[1]) };
+  }
+  return void 0;
+}
+function quotaErrorMessage(error) {
+  if (!isQuotaFault(error)) return void 0;
+  const { text } = collectErrorSignals(error);
+  const numbers = parseUsedLimit(text);
+  const usage = numbers ? ` (${numbers.used}/${numbers.limit} tokens this month)` : "";
+  return `You've hit your indus usage limit${usage}. Add your own API key with \`indus signin <provider>\`, or upgrade your plan.`;
+}
+var QUOTA_MARKER;
+var init_quota_error = __esm({
+  "src/conductor/quota-error.ts"() {
+    "use strict";
+    QUOTA_MARKER = "quota_exceeded";
+  }
+});
+
 // src/capability-deck/cards/plan-file.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, readFileSync as readFileSync5 } from "node:fs";
 import { join as join8 } from "node:path";
@@ -11174,14 +11382,14 @@ function writePlan(sessionDir, plan) {
   const dir = join8(sessionDir, PLANS_DIRNAME);
   mkdirSync2(dir, { recursive: true });
   const stamp = Date.now().toString(36);
-  const path3 = join8(dir, `${stamp}-${planSlug(plan)}.md`);
-  writeFileSync2(path3, plan.endsWith("\n") ? plan : `${plan}
+  const path4 = join8(dir, `${stamp}-${planSlug(plan)}.md`);
+  writeFileSync2(path4, plan.endsWith("\n") ? plan : `${plan}
 `, { encoding: "utf8", mode: 384 });
-  return path3;
+  return path4;
 }
-function readPlan(path3) {
+function readPlan(path4) {
   try {
-    return readFileSync5(path3, "utf8");
+    return readFileSync5(path4, "utf8");
   } catch {
     return void 0;
   }
@@ -11432,10 +11640,10 @@ function flattenMessage(message) {
       return `${TURN_MARK} ${tag} (${message.toolName}): ${text}`;
     }
     case "bashExecution": {
-      const out = tidy(message.output);
+      const out2 = tidy(message.output);
       const code = message.exitCode ?? "n/a";
       return `${TURN_MARK} shell$ ${tidy(message.command)} [exit ${code}]
-${out}`;
+${out2}`;
     }
     case "custom": {
       const text = tidy(readContent(message.content));
@@ -11559,7 +11767,8 @@ async function summarize(messages, deps = {}) {
   const options = {
     reasoning: "high",
     ...deps.maxTokens !== void 0 ? { maxTokens: deps.maxTokens } : {},
-    ...deps.signal ? { signal: deps.signal } : {}
+    ...deps.signal ? { signal: deps.signal } : {},
+    ...deps.apiKey !== void 0 ? { apiKey: deps.apiKey } : {}
   };
   const complete = deps.complete ?? completeSimple;
   const reply = await complete(deps.model, context, options);
@@ -11721,8 +11930,8 @@ function collectVisibleReadPaths(kept, readToolName) {
       if (!isRecord4(block2) || block2.type !== "toolCall") continue;
       if (block2.name !== readToolName) continue;
       const args = isRecord4(block2.arguments) ? block2.arguments : void 0;
-      const path3 = args && typeof args.path === "string" ? args.path : "";
-      if (path3.length > 0) paths.add(path3);
+      const path4 = args && typeof args.path === "string" ? args.path : "";
+      if (path4.length > 0) paths.add(path4);
     }
   }
   return paths;
@@ -11738,8 +11947,8 @@ function collectDroppedReads(dropped, readToolName) {
       if (block2.name !== readToolName) continue;
       const id = typeof block2.id === "string" ? block2.id : "";
       const args = isRecord4(block2.arguments) ? block2.arguments : void 0;
-      const path3 = args && typeof args.path === "string" ? args.path : "";
-      if (id.length > 0 && path3.length > 0) calls.set(id, { path: path3, order: i });
+      const path4 = args && typeof args.path === "string" ? args.path : "";
+      if (id.length > 0 && path4.length > 0) calls.set(id, { path: path4, order: i });
     }
   }
   if (calls.size === 0) return [];
@@ -11834,7 +12043,7 @@ var init_window_budget = __esm({
 });
 
 // src/conductor/diagnostics.ts
-import * as path from "node:path";
+import * as path2 from "node:path";
 import { existsSync as existsSync2 } from "node:fs";
 function createDiagnosticKey(d) {
   const { start, end } = d.range;
@@ -11951,7 +12160,7 @@ async function runTscDiagnostics(cwd, signal) {
   const spawn3 = await loadSpawn();
   if (spawn3 === void 0) return [];
   if (signal?.aborted) return [];
-  const bin = path.join(cwd, "node_modules", ".bin", "tsc");
+  const bin = path2.join(cwd, "node_modules", ".bin", "tsc");
   const output = await captureOutput(
     spawn3,
     bin,
@@ -11969,7 +12178,7 @@ function parseTscOutput(output, cwd) {
     const m = re.exec(raw);
     if (m === null) continue;
     const [, file, lineStr, colStr, sevWord, code, message] = m;
-    const uri = path.isAbsolute(file) ? file : path.resolve(cwd, file);
+    const uri = path2.isAbsolute(file) ? file : path2.resolve(cwd, file);
     const line = Math.max(0, Number(lineStr) - 1);
     const character = Math.max(0, Number(colStr) - 1);
     const diagnostic = {
@@ -11990,7 +12199,7 @@ async function runEslintDiagnostics(files, cwd, signal) {
   const spawn3 = await loadSpawn();
   if (spawn3 === void 0) return [];
   if (signal?.aborted) return [];
-  const bin = path.join(cwd, "node_modules", ".bin", "eslint");
+  const bin = path2.join(cwd, "node_modules", ".bin", "eslint");
   const output = await captureOutput(
     spawn3,
     bin,
@@ -12011,10 +12220,10 @@ function parseEslintOutput(output, cwd) {
   } catch {
     return [];
   }
-  const out = [];
+  const out2 = [];
   for (const file of parsed) {
     if (!Array.isArray(file.messages) || file.messages.length === 0) continue;
-    const uri = path.isAbsolute(file.filePath) ? file.filePath : path.resolve(cwd, file.filePath);
+    const uri = path2.isAbsolute(file.filePath) ? file.filePath : path2.resolve(cwd, file.filePath);
     const diagnostics = [];
     for (const msg of file.messages) {
       const line = Math.max(0, (msg.line ?? 1) - 1);
@@ -12032,9 +12241,9 @@ function parseEslintOutput(output, cwd) {
         ...msg.ruleId ? { code: msg.ruleId } : {}
       });
     }
-    if (diagnostics.length > 0) out.push({ uri, diagnostics });
+    if (diagnostics.length > 0) out2.push({ uri, diagnostics });
   }
-  return out;
+  return out2;
 }
 function captureOutput(spawn3, bin, args, cwd, signal) {
   return new Promise((resolve8) => {
@@ -12081,11 +12290,11 @@ function captureOutput(spawn3, bin, args, cwd, signal) {
   });
 }
 function isTypeScriptOrJs(filePath) {
-  return TS_JS_EXTENSIONS.has(path.extname(filePath).toLowerCase());
+  return TS_JS_EXTENSIONS.has(path2.extname(filePath).toLowerCase());
 }
 function hasTsConfig(cwd) {
   try {
-    return existsSync2(path.join(cwd, "tsconfig.json"));
+    return existsSync2(path2.join(cwd, "tsconfig.json"));
   } catch {
     return false;
   }
@@ -12103,7 +12312,7 @@ function hasEslintConfig(cwd) {
       ".eslintrc.yml",
       ".eslintrc.yaml"
     ];
-    return candidates.some((name) => existsSync2(path.join(cwd, name)));
+    return candidates.some((name) => existsSync2(path2.join(cwd, name)));
   } catch {
     return false;
   }
@@ -12193,7 +12402,7 @@ var init_diagnostics = __esm({
         if (!this.#enabled) return [];
         if (editedPaths.length === 0) return [];
         const all = await this.#runAll(signal);
-        const editedSet = new Set(editedPaths.map((p) => path.resolve(this.#cwd, p)));
+        const editedSet = new Set(editedPaths.map((p) => path2.resolve(this.#cwd, p)));
         if (this.#baseline === void 0) {
           this.#baseline = /* @__PURE__ */ new Map();
           for (const file of all) {
@@ -12218,7 +12427,7 @@ var init_diagnostics = __esm({
        * re-surface (e.g. the agent edited it again). The baseline is left intact.
        */
       clearDeliveredForFile(uri) {
-        this.#delivered.delete(path.resolve(this.#cwd, uri));
+        this.#delivered.delete(path2.resolve(this.#cwd, uri));
       }
       /** Drop all cross-turn state and the baseline (re-seeds on the next run). */
       reset() {
@@ -12261,7 +12470,7 @@ var init_diagnostics = __esm({
 // src/conductor/conductor.ts
 import { Agent } from "indusagi/agent";
 import { createZeroUsage as createZeroUsage2 } from "indusagi/ai";
-import * as path2 from "node:path";
+import * as path3 from "node:path";
 function reduceState(prev, action) {
   switch (action.type) {
     case "phase":
@@ -12320,7 +12529,7 @@ function createSessionConductor(options, deps = {}) {
   const approvalHolder = { resolver: void 0 };
   const approvalDelegate = async (toolName, input, opts) => {
     const installed = approvalHolder.resolver;
-    if (installed === void 0) return "deny";
+    if (installed === void 0) return "unavailable";
     return installed(toolName, input, opts);
   };
   const gate = options.canUseTool?.(
@@ -12341,7 +12550,11 @@ function buildLiveAgent(options, deps, gate) {
   if (card === void 0) {
     throw new Error(`createSessionConductor: no model matches "${options.modelId}"`);
   }
-  return new LazyAgent(card.model, options, gate);
+  return new LazyAgent(withGatewayBaseUrl(card.model, options.gatewayBaseUrls), options, gate);
+}
+function withGatewayBaseUrl(model, gatewayBaseUrls) {
+  const url = gatewayBaseUrls?.[model.provider];
+  return url ? { ...model, baseUrl: url } : model;
 }
 function makeAgent(model, options, gate) {
   const agent = new Agent({
@@ -12431,7 +12644,7 @@ ${outcome.output}`.trimEnd();
     timestamp: Date.now()
   };
 }
-var noopCondense, DEFAULT_RETRY, MAX_CONSECUTIVE_CONDENSE_FAILURES, THINKING_LADDER, DEFAULT_THINKING, PERMISSION_CYCLE, SessionConductorImpl, LazyAgent;
+var noopCondense, DEFAULT_RETRY, MAX_CONSECUTIVE_CONDENSE_FAILURES, MAX_DIAGNOSTIC_FOLLOWUPS_PER_PROMPT, THINKING_LADDER, DEFAULT_THINKING, PERMISSION_CYCLE, SessionConductorImpl, LazyAgent;
 var init_conductor = __esm({
   "src/conductor/conductor.ts"() {
     "use strict";
@@ -12440,12 +12653,14 @@ var init_conductor = __esm({
     init_signal_hub();
     init_transcript_store();
     init_skill_parse();
+    init_quota_error();
     init_plan_file();
     init_window_budget();
     init_diagnostics();
     noopCondense = (messages) => messages;
     DEFAULT_RETRY = { maxAttempts: 2, baseDelayMs: 250 };
     MAX_CONSECUTIVE_CONDENSE_FAILURES = 3;
+    MAX_DIAGNOSTIC_FOLLOWUPS_PER_PROMPT = 3;
     THINKING_LADDER = ["off", "low", "medium", "high"];
     DEFAULT_THINKING = "off";
     PERMISSION_CYCLE = ["default", "acceptEdits", "plan", "bypass"];
@@ -12477,6 +12692,29 @@ var init_conductor = __esm({
        * to 0 on the next successful condense.
        */
       #condenseFailures = 0;
+      /**
+       * The cancel handle for an in-flight MANUAL condense (`/compact`), or
+       * `undefined` when none is running. {@link cancelCondense} (and {@link abort},
+       * so a user's Esc stops a compaction the same way it stops a turn) abort it;
+       * {@link #runCondense} then discards the digest and reports `"cancelled"`.
+       */
+      #condenseAbort;
+      /**
+       * The session's per-call credential resolver (the same one the framework
+       * Agent uses). The condense seam resolves the bound model's key through it so
+       * the summarizer's model call authenticates exactly like a turn — including
+       * server-tier sessions, whose ONLY credential is the vended session token
+       * (no env var exists for the summarizer to fall back to).
+       */
+      #getApiKey;
+      /**
+       * Whether the next in-flight-turn abort is an EXPECTED steer (Ctrl+X ran
+       * {@link steerNow}): the unwinding turn consumes the rejection quietly —
+       * no terminal fault, no error toast, no busy-spinner drop — because the
+       * steered turn takes over immediately. Reset at every turn start so a stale
+       * flag can never swallow a genuine later fault.
+       */
+      #steerPending = false;
       /**
        * Canonical id of the model to fall back to when the bound model is overloaded
        * (HTTP 529), or `undefined` when no `--fallback-model` was configured. When
@@ -12484,6 +12722,20 @@ var init_conductor = __esm({
        * and retries instead of surfacing a terminal fault.
        */
       #fallbackModelId;
+      /**
+       * Base URL of the indus model gateway to route this session through ("server
+       * mode"), or `undefined` for the normal direct-to-provider path. When set,
+       * every model bind clones the framework model with its `baseUrl` swapped to
+       * this URL (see {@link withGatewayBaseUrl}) so requests flow through the
+       * quota-enforcing server while the session token (vended by `getApiKey`)
+       * authenticates them. Absent leaves the local-key path byte-for-byte unchanged.
+       *
+       * Not `readonly`: {@link updateGatewayBaseUrls} replaces this map when a
+       * mid-session sign-in changes which providers are gateway-eligible, so a
+       * later rebind (see `#bindModel`/`#applyModelCard`) picks up the fresh
+       * routing without waiting for a full conductor rebuild.
+       */
+      #gatewayBaseUrls;
       /**
        * Whether the one-shot fallback swap has already fired for the CURRENT turn.
        * Reset to `false` at the top of every {@link #runTurn} (not per attempt) so a
@@ -12535,6 +12787,13 @@ var init_conductor = __esm({
        * {@link #runPostEditDiagnostics} at the turn-end seam.
        */
       #editedThisTurn = /* @__PURE__ */ new Set();
+      /**
+       * How many diagnostics follow-ups have been auto-injected since the last REAL
+       * user prompt. Reset by {@link submit}; capped by
+       * {@link MAX_DIAGNOSTIC_FOLLOWUPS_PER_PROMPT} so a model that cannot satisfy a
+       * checker can never be re-prompted forever without the user asking again.
+       */
+      #diagnosticFollowUps = 0;
       /**
        * The mode captured the moment plan mode was entered, restored when plan mode is
        * left. `undefined` whenever the session is not in (or paused from) plan mode.
@@ -12574,6 +12833,7 @@ var init_conductor = __esm({
         this.#hub = deps.hub ?? new SignalHub();
         this.#matcher = deps.matcher;
         this.#condense = deps.condense ?? noopCondense;
+        this.#getApiKey = options.getApiKey;
         this.#retry = deps.retry ?? DEFAULT_RETRY;
         this.#autoCompact = options.autoCompact ?? true;
         this.#sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
@@ -12581,6 +12841,7 @@ var init_conductor = __esm({
         this.#modeHolder = modeHolder ?? { mode: options.permissionMode ?? "default" };
         this.#approvalHolder = approvalHolder ?? { resolver: void 0 };
         this.#fallbackModelId = options.fallbackModelId;
+        this.#gatewayBaseUrls = options.gatewayBaseUrls;
         this.#workspace = options.workspace ?? process.cwd();
         this.#plansDir = options.plansDir;
         this.#checkpoint = options.checkpoint;
@@ -12597,7 +12858,10 @@ var init_conductor = __esm({
           // no fault initially
         };
         const initial = this.#matcher?.resolveCard(options.modelId);
-        this.#boundModel = initial?.model ?? agent.state.model;
+        this.#boundModel = withGatewayBaseUrl(
+          initial?.model ?? agent.state.model,
+          this.#gatewayBaseUrls
+        );
       }
       /* ---- public surface ---- */
       subscribe(handler) {
@@ -12620,12 +12884,18 @@ var init_conductor = __esm({
         return [...this.#matcher.resolveAll("")];
       }
       abort() {
+        if (this.#queue.length > 0) {
+          this.#queue.length = 0;
+          this.#hub.emit({ kind: "queue", count: 0 });
+        }
+        this.#condenseAbort?.abort();
         this.#agent.abort();
         this.#dispatch({ type: "fault", fault: conductorFault("aborted", "turn aborted by caller") });
         this.#hub.emit({ kind: "fault", fault: conductorFault("aborted", "turn aborted by caller") });
         this.#hub.emit({ kind: "idle" });
       }
       async submit(input) {
+        this.#diagnosticFollowUps = 0;
         if (this.#busy) {
           this.enqueue(input);
           return this.#state;
@@ -12660,6 +12930,22 @@ var init_conductor = __esm({
         this.#hub.emit({ kind: "queue", count: this.#queue.length });
         return popped.text;
       }
+      steerNow() {
+        const promoted = this.#queue.pop();
+        if (promoted === void 0) return false;
+        this.#queue.unshift({ mode: "steer", text: promoted.text });
+        this.#hub.emit({ kind: "queue", count: this.#queue.length });
+        if (this.#busy) {
+          this.#steerPending = true;
+          this.#condenseAbort?.abort();
+          this.#agent.abort();
+          return true;
+        }
+        const next = this.#takeNext();
+        this.#hub.emit({ kind: "queue", count: this.#queue.length });
+        void this.submit(next.text);
+        return true;
+      }
       /**
        * Drain the pending-input queue in order, running each entry as its own turn.
        * `steer`-mode entries are taken ahead of plain follow-ups so an interrupt is
@@ -12697,6 +12983,7 @@ var init_conductor = __esm({
         const prompt = skill ? skill.body : input;
         this.#inFlightTools.length = 0;
         this.#fallbackTried = false;
+        this.#steerPending = false;
         this.#checkpoint?.setActiveNodeId(this.#store.head.leaf);
         this.#dispatch({ type: "phase", phase: "streaming" });
         if (this.#diagnostics !== void 0 && !this.#diagnostics.hasBaseline) {
@@ -12708,7 +12995,7 @@ var init_conductor = __esm({
         const baseline = this.#agent.state.messages.length;
         const clean = await this.#runWithRetry(prompt);
         if (!clean) {
-          this.#hub.emit({ kind: "idle" });
+          if (this.#queue.length === 0) this.#hub.emit({ kind: "idle" });
           return this.#state;
         }
         await this.#persistTail(baseline);
@@ -12722,7 +13009,7 @@ var init_conductor = __esm({
           this.#dispatch({ type: "head", head: this.#store.head });
         }
         await this.#runPlanHandshakes();
-        this.#hub.emit({ kind: "idle" });
+        if (this.#queue.length === 0) this.#hub.emit({ kind: "idle" });
         return this.#state;
       }
       async newSession() {
@@ -12732,6 +13019,7 @@ var init_conductor = __esm({
         this.#queue.length = 0;
         this.#inFlightTools.length = 0;
         this.#condenseFailures = 0;
+        this.#diagnosticFollowUps = 0;
         this.#agent.replaceMessages([]);
         this.#store.startNewSession(newSessionId());
         this.#sessionName = void 0;
@@ -12772,6 +13060,19 @@ var init_conductor = __esm({
       selectModel(id) {
         this.#bindModel(id);
       }
+      /**
+       * Replace the server-tier gateway routing map and immediately re-bind the
+       * currently selected model against it, so a mid-session sign-in (`/login` ->
+       * "Indus Server") takes effect on the very next turn instead of requiring a
+       * session restart. Re-resolves the current model's catalog card via
+       * {@link #bindModel} rather than mutating `#boundModel` directly, so the
+       * rebind goes through the exact same path as `selectModel`/`cycleModel`
+       * (tool deck, thinking level, and state dispatch all stay consistent).
+       */
+      updateGatewayBaseUrls(map) {
+        this.#gatewayBaseUrls = map;
+        this.#bindModel(this.#state.modelId);
+      }
       /**
        * Resolve a model by canonical id, bind it on the agent for subsequent turns,
        * track the full model object, and record the new id in state. A miss surfaces
@@ -12795,8 +13096,9 @@ var init_conductor = __esm({
        * so it must resolve its own card and call straight into here.
        */
       #applyModelCard(card) {
-        this.#agent.setModel(card.model);
-        this.#boundModel = card.model;
+        const model = withGatewayBaseUrl(card.model, this.#gatewayBaseUrls);
+        this.#agent.setModel(model);
+        this.#boundModel = model;
         this.#agent.setThinkingLevel?.(this.#thinking);
         this.#dispatch({ type: "model", modelId: card.id });
       }
@@ -12825,7 +13127,10 @@ var init_conductor = __esm({
           fault: conductorFault(
             "model",
             `Switched to ${card.id} due to high demand for ${previous}`
-          )
+          ),
+          // The turn keeps running on the fallback model — this is an in-turn
+          // notice, not the turn's end, so a busy/in-flight indicator must survive it.
+          transient: true
         });
         return true;
       }
@@ -12852,11 +13157,32 @@ var init_conductor = __esm({
             return true;
           } catch (error) {
             unsubscribe();
+            if (this.#steerPending) {
+              this.#steerPending = false;
+              return false;
+            }
+            if (isQuotaFault(error)) {
+              const fault2 = conductorFault(
+                "model",
+                quotaErrorMessage(error) ?? "You've hit your indus usage limit.",
+                error
+              );
+              this.#dispatch({ type: "fault", fault: fault2 });
+              this.#hub.emit({ kind: "fault", fault: fault2 });
+              return false;
+            }
             if (attempt < this.#retry.maxAttempts && isTransient(error)) {
               attempt++;
               this.#hub.emit({
                 kind: "fault",
-                fault: conductorFault("model", `transient model fault; retry ${attempt}`, error)
+                fault: conductorFault("model", `transient model fault; retry ${attempt}`, error),
+                // The retry loop is about to try again on the SAME turn — this is an
+                // in-turn notice, not the turn's end. Without this flag the console
+                // clears its busy/in-flight indicator here and never sets it back
+                // (busy only flips true again at the START of the next turn), so the
+                // agent looks "stuck" for the rest of a turn that is actually still
+                // retrying/streaming underneath.
+                transient: true
               });
               await this.#sleep(this.#retry.baseDelayMs * 2 ** (attempt - 1));
               continue;
@@ -12892,6 +13218,7 @@ var init_conductor = __esm({
           this.#capturePlanSignals(event.result);
         }
         for (const signal of translateAgentEvent(event)) {
+          if (signal.kind === "fault" && this.#steerPending) continue;
           if (signal.kind === "turn_end") {
             this.#dispatch({
               type: "usage",
@@ -12918,7 +13245,7 @@ var init_conductor = __esm({
         const raw = args?.path;
         if (typeof raw !== "string" || raw.length === 0) return;
         if (!isTypeScriptOrJs(raw)) return;
-        this.#editedThisTurn.add(path2.resolve(this.#workspace, raw));
+        this.#editedThisTurn.add(path3.resolve(this.#workspace, raw));
       }
       /* ---- plan mode ---- */
       /**
@@ -13064,8 +13391,13 @@ var init_conductor = __esm({
        * Invariants:
        *   - **never faults the turn** — every failure (a slow/absent checker, a
        *     parse error) is swallowed and the set is always cleared in `finally`;
-       *   - **re-entrancy safe** — the injected follow-up turn edits nothing, so the
-       *     set is empty and this short-circuits, avoiding an infinite loop;
+       *   - **can never loop forever** — a diagnostic key is delivered AT MOST ONCE
+       *     per session (the engine's delivered ledger is never cleared here; a
+       *     "fix" turn that fails to eliminate the same error is NOT re-prompted
+       *     with it), and even genuinely new errors stop re-prompting after
+       *     {@link MAX_DIAGNOSTIC_FOLLOWUPS_PER_PROMPT} consecutive follow-ups —
+       *     the agent must not keep running itself after its final report just
+       *     because a checker stays red;
        *   - inert when diagnostics are disabled (`#diagnostics === undefined`).
        */
       async #runPostEditDiagnostics() {
@@ -13074,11 +13406,15 @@ var init_conductor = __esm({
           this.#editedThisTurn.clear();
           return;
         }
+        if (this.#diagnosticFollowUps >= MAX_DIAGNOSTIC_FOLLOWUPS_PER_PROMPT) {
+          this.#editedThisTurn.clear();
+          return;
+        }
         const edited = [...this.#editedThisTurn];
         try {
-          for (const uri of edited) engine.clearDeliveredForFile(uri);
           const files = await engine.newDiagnostics(edited);
           if (files.length > 0) {
+            this.#diagnosticFollowUps++;
             this.enqueue(
               "Diagnostics for files you just changed (fix these before continuing):\n\n" + formatDiagnosticsSummary(files),
               "followUp"
@@ -13115,12 +13451,29 @@ var init_conductor = __esm({
       }
       /**
        * Manually drive the same condense path the auto-compactor uses, regardless of
-       * the auto-compaction flag or the soft threshold. Emits `{ kind: "compacted" }`
-       * and rebinds the agent's context when the hook shrinks the branch. Safe to
-       * invoke while idle.
+       * the auto-compaction flag or the soft threshold, and report the outcome.
+       *
+       * Runs under the busy flag so a prompt submitted mid-compaction QUEUES (and
+       * drains once the condense settles) instead of racing the rebind; is
+       * cancellable via {@link cancelCondense} (the result is discarded); and
+       * refuses (`"busy"`) while a real turn is in flight rather than condensing a
+       * branch that is still growing.
        */
       async condense() {
-        await this.#runCondense(true);
+        if (this.#busy) return "busy";
+        this.#busy = true;
+        this.#condenseAbort = new AbortController();
+        try {
+          const outcome = await this.#runCondense(true, this.#condenseAbort.signal);
+          await this.#drainQueue();
+          return outcome;
+        } finally {
+          this.#condenseAbort = void 0;
+          this.#busy = false;
+        }
+      }
+      cancelCondense() {
+        this.#condenseAbort?.abort();
       }
       /* ---- branch navigation ---- */
       async fork(entryId) {
@@ -13321,27 +13674,51 @@ var init_conductor = __esm({
        * to a local stub). A throw surfaces an `overflow` fault and bumps the
        * consecutive-failure counter (the circuit breaker); a clean run resets it.
        */
-      async #runCondense(force) {
+      async #runCondense(force, signal) {
         const branch = this.#store.pathTo();
+        const prior = this.#state.phase;
         this.#dispatch({ type: "phase", phase: "condensing" });
-        this.#hub.emit({ kind: "compacted" });
         try {
           const before = branch.map((entry) => entry.content);
+          let apiKey;
+          if (this.#boundModel !== void 0 && this.#getApiKey !== void 0) {
+            try {
+              apiKey = await this.#getApiKey(String(this.#boundModel.provider));
+            } catch {
+            }
+          }
           const after = await this.#condense(before, {
             force,
             ...this.#boundModel !== void 0 ? { model: this.#boundModel } : {},
-            contextTokens: this.#state.contextTokens
+            contextTokens: this.#state.contextTokens,
+            ...signal !== void 0 ? { signal } : {},
+            ...apiKey !== void 0 ? { apiKey } : {}
           });
-          if (after.length < before.length) {
-            this.#agent.replaceMessages(after);
-            await this.#persistCondenseBoundary(branch, after);
+          if (signal?.aborted) {
+            this.#dispatch({ type: "phase", phase: prior });
+            return "cancelled";
           }
+          if (after.length >= before.length) {
+            this.#condenseFailures = 0;
+            this.#dispatch({ type: "phase", phase: prior });
+            return "nothing";
+          }
+          this.#agent.replaceMessages([...after]);
+          await this.#persistCondenseBoundary(branch, after);
           this.#condenseFailures = 0;
+          if (force) {
+            this.#dispatch({ type: "usage", usage: createZeroUsage2(), contextTokens: 0 });
+            await this.#persistUsage();
+          }
+          this.#hub.emit({ kind: "compacted", manual: force });
+          this.#dispatch({ type: "phase", phase: prior });
+          return "condensed";
         } catch (error) {
           this.#condenseFailures++;
           const fault = conductorFault("overflow", "auto-condense failed", error);
           this.#dispatch({ type: "fault", fault });
           this.#hub.emit({ kind: "fault", fault });
+          return "failed";
         }
       }
       /**
@@ -13690,11 +14067,11 @@ function consumeWrapperOptions(rest, wrapper) {
 }
 function parseBashCommand(command) {
   if (typeof command !== "string" || command.trim().length === 0) return [];
-  const out = [];
-  parseInto(command, out);
-  return out;
+  const out2 = [];
+  parseInto(command, out2);
+  return out2;
 }
-function parseInto(command, out) {
+function parseInto(command, out2) {
   for (const slice of splitTopLevel(command)) {
     const { outer, inner } = extractSubshells(slice);
     if (outer.length > 0) {
@@ -13703,7 +14080,7 @@ function parseInto(command, out) {
         const { rest, elevated } = stripWrappers(argv);
         const name = rest[0];
         if (name !== void 0 && name.length > 0) {
-          out.push({
+          out2.push({
             name: name.toLowerCase(),
             args: rest.slice(1),
             elevated,
@@ -13713,7 +14090,7 @@ function parseInto(command, out) {
       }
     }
     for (const body of inner) {
-      if (body.trim().length > 0) parseInto(body, out);
+      if (body.trim().length > 0) parseInto(body, out2);
     }
   }
 }
@@ -14017,8 +14394,18 @@ function resolveRuleDecision(toolName, input, rules, mode, readOnlyExtra) {
   }
   return "ask";
 }
+function allowAlwaysRuleStrings(toolName, input) {
+  if (isBashTool(toolName)) {
+    const bag = input;
+    const command = typeof input === "string" ? input : bag !== null && typeof bag === "object" && typeof bag.command === "string" ? bag.command : "";
+    if (command.length > 0) {
+      return bashSubcommandSubjects(command).map((subject) => `${toolName}(${subject})`);
+    }
+  }
+  return [toolName];
+}
 function noResolverMessage(toolName) {
-  return `Tool "${toolName}" requires approval, but this session is non-interactive (no approval prompt is available). Denying. Add an allow rule under permissions.allow in settings, or run with --permission-mode acceptEdits/bypass, to permit it.`;
+  return `Tool "${toolName}" requires approval, but no interactive approval prompt is available here (a non-interactive run, or a sub-agent). Denying. Add an allow rule under permissions.allow in settings, or run with --permission-mode acceptEdits/bypass, to permit it.`;
 }
 function declinedMessage(toolName) {
   return `Tool "${toolName}" was denied by the user.`;
@@ -14060,15 +14447,34 @@ function createPermissionGate(config) {
     } catch {
       choice = "deny";
     }
-    if (choice === "deny") {
-      return { behavior: "deny", message: declinedMessage(toolName) };
+    if (choice === "allow-once" || choice === "allow-always") {
+      if (choice === "allow-always" && config.appendAllowRule) {
+        for (const raw of allowAlwaysRuleStrings(toolName, input)) {
+          config.appendAllowRule(makeRule("allow", raw));
+        }
+      }
+      return { behavior: "allow" };
     }
-    if (choice === "allow-always" && config.appendAllowRule) {
-      config.appendAllowRule(makeRule("allow", toolName));
+    if (choice === "unavailable") {
+      return { behavior: "deny", message: noResolverMessage(toolName) };
     }
-    return { behavior: "allow" };
+    return { behavior: "deny", message: declinedMessage(toolName) };
   };
 }
+function collectReadOnlyToolNames(tools) {
+  const names = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    if (tool.readOnly === true) names.add(tool.name);
+  }
+  return names;
+}
+function createSubagentPermissionGate(policy, tools) {
+  return createPermissionGate({
+    rules: policy.rules,
+    mode: policy.mode,
+    readOnlyToolNames: collectReadOnlyToolNames(tools)
+  });
+}
 var READ_ONLY_TOOL_NAMES, EDIT_TOOL_NAMES;
 var init_permissions = __esm({
   "src/conductor/permissions.ts"() {
@@ -14102,14 +14508,17 @@ __export(conductor_exports, {
   SignalHub: () => SignalHub,
   TRANSCRIPT_SCHEMA: () => TRANSCRIPT_SCHEMA,
   TranscriptStore: () => TranscriptStore,
+  allowAlwaysRuleStrings: () => allowAlwaysRuleStrings,
   areDiagnosticsEqual: () => areDiagnosticsEqual,
   bashSubcommandSubjects: () => bashSubcommandSubjects,
   canonicalId: () => canonicalId,
   catastrophicReason: () => catastrophicReason,
+  collectReadOnlyToolNames: () => collectReadOnlyToolNames,
   conductorFault: () => conductorFault,
   createDiagnosticKey: () => createDiagnosticKey,
   createPermissionGate: () => createPermissionGate,
   createSessionConductor: () => createSessionConductor,
+  createSubagentPermissionGate: () => createSubagentPermissionGate,
   deduplicateAndCap: () => deduplicateAndCap,
   evaluateCatastrophic: () => evaluateCatastrophic,
   formatDiagnosticsSummary: () => formatDiagnosticsSummary,
@@ -14136,7 +14545,8 @@ __export(conductor_exports, {
   runTscDiagnostics: () => runTscDiagnostics,
   toCardRef: () => toCardRef,
   toolMatchesRule: () => toolMatchesRule,
-  translateAgentEvent: () => translateAgentEvent
+  translateAgentEvent: () => translateAgentEvent,
+  withGatewayBaseUrl: () => withGatewayBaseUrl
 });
 var init_conductor2 = __esm({
   "src/conductor/index.ts"() {
@@ -14214,13 +14624,22 @@ function createWorkflowAgentRunner(opts) {
         if (model === void 0) {
           throw new Error(`no model resolved for workflow subagent: ${options.model ?? opts.modelId}`);
         }
+        const gatewayBaseUrls = await opts.getGatewayBaseUrls?.();
+        const tools = buildTools();
         agent = new Agent2({
           initialState: {
-            model,
+            model: withGatewayBaseUrl(model, gatewayBaseUrls),
             systemPrompt: system,
-            tools: buildTools()
+            tools
           },
-          ...opts.getApiKey ? { getApiKey: opts.getApiKey } : {}
+          ...opts.getApiKey ? { getApiKey: opts.getApiKey } : {},
+          // Gate the subagent's inner tool loop with the parent session's live
+          // policy (rules + current mode). Resolver-less: `ask` denies — a
+          // subagent cannot prompt — while deny rules, plan mode, and the
+          // catastrophic-bash blocklist are enforced per inner tool call. The
+          // `structured_output` capture tool is flagged readOnly, so a
+          // schema-bound workflow still lands its result in every mode.
+          ...opts.permissionPolicy !== void 0 ? { canUseTool: createSubagentPermissionGate(opts.permissionPolicy, tools) } : {}
         });
       }
       const activity = { tokensIn: 0, tokensOut: 0, toolCount: 0 };
@@ -14874,12 +15293,12 @@ function withdrawServer(ledger, server, at = (/* @__PURE__ */ new Date()).toISOS
   return { log, snapshot: reduceLedger(log), nextSeq: seq };
 }
 function liveCapabilitiesForServer(ledger, server) {
-  const out = [];
+  const out2 = [];
   for (const key of liveKeysForServer(ledger, server)) {
     const cap = ledger.snapshot.live.get(key);
-    if (cap !== void 0) out.push(cap);
+    if (cap !== void 0) out2.push(cap);
   }
-  return out;
+  return out2;
 }
 function liveCapabilities(ledger) {
   return [...ledger.snapshot.live.values()];
@@ -14898,11 +15317,11 @@ function liveKeysForServer(ledger, server) {
       lastServer.set(entry.key, entry.server);
     }
   }
-  const out = [];
+  const out2 = [];
   for (const key of ledger.snapshot.live.keys()) {
-    if (lastServer.get(key) === server) out.push(key);
+    if (lastServer.get(key) === server) out2.push(key);
   }
-  return out;
+  return out2;
 }
 var init_ledger = __esm({
   "src/capability-deck/bridge-ledger/ledger.ts"() {
@@ -15321,11 +15740,11 @@ function escapeChar(ch) {
   }
 }
 function escapeHtml(text) {
-  let out = "";
+  let out2 = "";
   for (const ch of text) {
-    out += escapeChar(ch) ?? ch;
+    out2 += escapeChar(ch) ?? ch;
   }
-  return out;
+  return out2;
 }
 function classesFor(state) {
   const classes = [];
@@ -15371,15 +15790,15 @@ function paintSgr(input) {
   if (input.length === 0) return "";
   const tokens = tokenizeSgr(input);
   let state = { ...SGR_INITIAL_STATE };
-  let out = "";
+  let out2 = "";
   for (const token of tokens) {
     if (token.kind === "sgr") {
       state = foldSgr(state, token.params);
     } else {
-      out += renderRun(token.text, state);
+      out2 += renderRun(token.text, state);
     }
   }
-  return out;
+  return out2;
 }
 var BASE_PALETTE, BRIGHT_PALETTE, PALETTE_16, CODE_TABLE, SGR_CODE_TABLE, ESC, CLASS_PREFIX, FLAG_CLASSES;
 var init_sgr = __esm({
@@ -15593,13 +16012,13 @@ function escapeRegExp(text) {
   return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function fill(template, values) {
-  let out = template;
+  let out2 = template;
   for (const token of Object.values(SHELL_SLOTS)) {
     const value = values[token] ?? "";
     const marker = new RegExp(`\\{\\{${escapeRegExp(token)}\\}\\}`, "g");
-    out = out.replace(marker, () => value);
+    out2 = out2.replace(marker, () => value);
   }
-  return out;
+  return out2;
 }
 var PAGE_STYLES, CLIENT_SCRIPT, PAGE_SHELL;
 var init_template = __esm({
@@ -15877,8 +16296,8 @@ function configuredMarked() {
   return marked;
 }
 function renderMarkdown(md, source) {
-  const out = md.parse(source, { async: false });
-  return typeof out === "string" ? out : "";
+  const out2 = md.parse(source, { async: false });
+  return typeof out2 === "string" ? out2 : "";
 }
 function renderImage(part) {
   const src = `data:${escapeHtml2(part.mimeType)};base64,${part.data}`;
@@ -16056,8 +16475,9 @@ var init_transcript_export = __esm({
 
 // src/console/slash/commands/integrations.ts
 import { spawnSync } from "node:child_process";
-import { writeFileSync as writeFileSync3 } from "node:fs";
-import { resolve as resolve5 } from "node:path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join10, resolve as resolve5 } from "node:path";
 import {
   createMCPAgentToolFactory,
   loadMCPConfig,
@@ -16116,13 +16536,13 @@ function exportTranscriptHtml(ctx, target) {
   if (messages.length === 0) {
     return { ok: false, reason: "Nothing to export yet \u2014 the transcript is empty." };
   }
-  const path3 = target.length > 0 ? resolve5(process.cwd(), target) : defaultExportPath();
+  const path4 = target.length > 0 ? resolve5(process.cwd(), target) : defaultExportPath();
   try {
     const html = publishTranscript(toPublishEntries(messages), {
       title: "Session Transcript"
     });
-    writeFileSync3(path3, html, "utf-8");
-    return { ok: true, path: path3 };
+    writeFileSync3(path4, html, "utf-8");
+    return { ok: true, path: path4 };
   } catch (cause) {
     const message = cause instanceof Error ? cause.message : String(cause);
     return { ok: false, reason: `Could not write the HTML export: ${message}` };
@@ -16345,7 +16765,7 @@ function runShare(ctx) {
   });
   return HANDLED;
 }
-function runLogin(ctx) {
+function runLogin2(ctx) {
   const provider = ctx.args.trim().toLowerCase();
   if (provider.length > 0) {
     ctx.openModal("signIn", { providerId: provider });
@@ -16354,10 +16774,82 @@ function runLogin(ctx) {
   }
   return HANDLED;
 }
+function hasLocalProviderKey(provider) {
+  if (provider.length === 0) return false;
+  try {
+    const file = join10(homedir2(), ".indusagi", "agent", "auth.json");
+    const vault = JSON.parse(readFileSync6(file, "utf8"));
+    const entry = vault[provider];
+    return entry !== null && typeof entry === "object" && Object.keys(entry).length > 0;
+  } catch {
+    return false;
+  }
+}
+function runStatus(ctx) {
+  const modelId = ctx.conductor.snapshot().modelId;
+  const provider = modelId.includes("/") ? modelId.split("/")[0] : modelId;
+  void (async () => {
+    let signedIn = false;
+    try {
+      signedIn = await hasValidServerToken();
+    } catch {
+      signedIn = false;
+    }
+    const eligible = isGatewayEligibleProvider(provider);
+    const localKey = hasLocalProviderKey(provider);
+    const viaServer = signedIn && eligible && !localKey;
+    if (viaServer) {
+      ctx.setStatus(
+        info(`\u25CF server tier \u2014 ${modelId} routing via ${INDUS_SERVER_URL} (signed in)`)
+      );
+    } else if (localKey) {
+      ctx.setStatus(
+        info(`\u25CB local key \u2014 ${modelId}${signedIn ? " (signed in to server)" : ""}`)
+      );
+    } else if (!signedIn) {
+      ctx.setStatus(
+        warn(`signed out \u2014 ${modelId} has no key. Run /login to use the server tier.`)
+      );
+    } else {
+      ctx.setStatus(
+        info(`signed in \u2014 ${modelId} (${provider} is not gateway-eligible; needs a local key)`)
+      );
+    }
+  })();
+  return HANDLED;
+}
+function runUsage(ctx) {
+  void (async () => {
+    const token = await getServerToken();
+    if (!token?.access_token) {
+      ctx.setStatus(warn("Not signed in to the server \u2014 run /login to use the server tier."));
+      return;
+    }
+    try {
+      const res = await fetch(`${INDUS_SERVER_URL}/api/usage`, {
+        headers: { Authorization: `Bearer ${token.access_token}` }
+      });
+      if (!res.ok) {
+        ctx.setStatus(warn(`Couldn't read usage (HTTP ${res.status}).`));
+        return;
+      }
+      const u = await res.json();
+      const pct = u.limit > 0 ? Math.round(u.used / u.limit * 100) : 0;
+      const line = `Usage this month: ${u.used.toLocaleString()} / ${u.limit.toLocaleString()} tokens (${pct}%) \xB7 ${u.remaining.toLocaleString()} left \xB7 ${u.requests} reqs \xB7 $${(u.costUsd ?? 0).toFixed(4)}` + (u.allowed ? "" : " \xB7 LIMIT REACHED \u2014 requests are blocked");
+      ctx.setStatus(u.allowed ? info(line) : warn(line));
+    } catch (cause) {
+      const message = cause instanceof Error ? cause.message : String(cause);
+      ctx.setStatus(warn(`Usage check failed: ${message}`));
+    }
+  })();
+  return HANDLED;
+}
 var CLIPBOARD_WRITERS, PUBLISH_ROLES, mcpPool, mcpServers, memoryEnabled, MEMORY_SUBS, COMPOSIO_ENV_KEY, composioGateway, composioResolved, COMPOSIO_NO_KEY, COMPOSIO_SUBS, runMemory, runComposio, integrationCommands;
 var init_integrations = __esm({
   "src/console/slash/commands/integrations.ts"() {
     "use strict";
+    init_server_token();
+    init_server_mode();
     init_capability_deck();
     init_transcript_export();
     init_shared();
@@ -16549,17 +17041,31 @@ var init_integrations = __esm({
         summary: "Sign in to a model provider.",
         takesArgs: true,
         run(ctx) {
-          return runLogin(ctx);
+          return runLogin2(ctx);
         }
       },
       {
         name: "logout",
-        summary: "Sign out of a model provider.",
+        summary: "Sign out: pick a provider account or the Indus Server session to clear.",
         run(ctx) {
           ctx.openModal("signOut");
           return HANDLED;
         }
       },
+      {
+        name: "status",
+        summary: "Show the server session and whether this model uses the server.",
+        run(ctx) {
+          return runStatus(ctx);
+        }
+      },
+      {
+        name: "usage",
+        summary: "Show your server usage this month (tokens used / limit / cost).",
+        run(ctx) {
+          return runUsage(ctx);
+        }
+      },
       {
         name: "mcp",
         summary: "Manage MCP servers and their tools.",
@@ -16684,19 +17190,19 @@ __export(builtins_exports, {
   FAMILY: () => FAMILY,
   SLASH_COMMANDS: () => SLASH_COMMANDS
 });
-import { homedir as homedir2 } from "node:os";
-import { join as join10 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { join as join11 } from "node:path";
 function dynamicRoots() {
-  const home = homedir2();
+  const home = homedir3();
   const cwd = process.cwd();
   return {
     skills: [
-      { dir: join10(cwd, PROJECT_DIR, "skills"), origin: "project" },
-      { dir: join10(home, PROJECT_DIR, "skills"), origin: "user" }
+      { dir: join11(cwd, PROJECT_DIR, "skills"), origin: "project" },
+      { dir: join11(home, PROJECT_DIR, "skills"), origin: "user" }
     ],
     macros: [
-      { dir: join10(cwd, PROJECT_DIR, "commands"), origin: "project", label: "project" },
-      { dir: join10(home, PROJECT_DIR, "commands"), origin: "user", label: "user" }
+      { dir: join11(cwd, PROJECT_DIR, "commands"), origin: "project", label: "project" },
+      { dir: join11(home, PROJECT_DIR, "commands"), origin: "user", label: "user" }
     ]
   };
 }
@@ -16813,7 +17319,7 @@ var BRAND = Object.freeze({
   envShareViewer: "INDUSAGI_SHARE_VIEWER_URL",
   shareViewerUrl: "https://buildwithindusagi.ai/session/"
 });
-var VERSION = "0.2.3";
+var VERSION = "0.2.4";
 
 // src/workspace/locator.ts
 import { homedir } from "node:os";
@@ -17328,6 +17834,12 @@ var FLAG_SPECS = [
     group: "tools",
     describe: "Attach an external MCP server endpoint (comma-separated or repeated)."
   },
+  {
+    name: "--permission-mode",
+    kind: "string",
+    group: "tools",
+    describe: "Open in the given permission mode: default, acceptEdits, plan, or bypass. On headless runs (--print/--json) `default` denies tools that would prompt."
+  },
   /* ---- Meta ------------------------------------------------------------ */
   {
     name: "--help",
@@ -17676,8 +18188,8 @@ var AttachmentError = class extends Error {
     if (detail.cause !== void 0) this.cause = detail.cause;
   }
 };
-function extensionOf(path3) {
-  return extname(path3).toLowerCase();
+function extensionOf(path4) {
+  return extname(path4).toLowerCase();
 }
 function isMissing(error) {
   return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
@@ -17888,7 +18400,7 @@ function doConfig(store, io) {
 }
 
 // src/launch/credentials.ts
-import { createInterface } from "node:readline/promises";
+import { createInterface as createInterface2 } from "node:readline/promises";
 import { getEnvApiKey, getOAuthProvider as getOAuthProvider2 } from "indusagi/ai";
 
 // src/launch/oauth.ts
@@ -17901,6 +18413,256 @@ import {
   openaiCodexOAuthProvider,
   registerOAuthProvider
 } from "indusagi/ai";
+
+// src/launch/login.ts
+init_server_token();
+import { createInterface } from "node:readline/promises";
+import chalk from "chalk";
+var INDUS_CLIENT_ID = process.env.INDUS_CLIENT_ID ?? "indus-cli";
+var USER_AGENT = "indus CLI";
+var DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+var DEVICE_SCOPE = "openid profile email";
+var EXIT_OK = 0;
+var EXIT_FAILURE = 1;
+var SERVER_TIER_PROVIDER_ID = "indus-server";
+var LoginError = class extends Error {
+};
+function out(line = "") {
+  process.stdout.write(`${line}
+`);
+}
+function err(line) {
+  process.stderr.write(`${line}
+`);
+}
+function sleep(ms) {
+  return new Promise((resolve8) => setTimeout(resolve8, ms));
+}
+async function postJson(url, body) {
+  const res = await fetch(url, {
+    method: "POST",
+    headers: {
+      "content-type": "application/json",
+      accept: "application/json",
+      "user-agent": USER_AGENT
+    },
+    body: JSON.stringify(body)
+  });
+  const data = await res.json().catch(() => ({}));
+  return { status: res.status, data };
+}
+function parseLoginArgs(tail) {
+  let serverUrl = INDUS_SERVER_URL;
+  let clientId = INDUS_CLIENT_ID;
+  for (let i = 0; i < tail.length; i++) {
+    const token = tail[i];
+    const eq = token.indexOf("=");
+    const name = eq >= 0 ? token.slice(0, eq) : token;
+    const inline = eq >= 0 ? token.slice(eq + 1) : void 0;
+    const take = () => inline !== void 0 ? inline : tail[++i];
+    if (name === "--server-url") {
+      const value = take();
+      if (value) serverUrl = value;
+    } else if (name === "--client-id") {
+      const value = take();
+      if (value) clientId = value;
+    }
+  }
+  return { serverUrl: serverUrl.replace(/\/+$/, ""), clientId };
+}
+async function confirm(prompt, defaultValue) {
+  if (!process.stdin.isTTY) return defaultValue;
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const hint = defaultValue ? "Y/n" : "y/N";
+    const answer = (await rl.question(`${prompt} [${hint}] `)).trim().toLowerCase();
+    if (answer === "") return defaultValue;
+    return answer === "y" || answer === "yes";
+  } finally {
+    rl.close();
+  }
+}
+async function requestDeviceCode(serverUrl, clientId) {
+  const { status, data } = await postJson(`${serverUrl}/api/auth/device/code`, {
+    client_id: clientId,
+    scope: DEVICE_SCOPE
+  });
+  if (status >= 400 || typeof data.device_code !== "string") {
+    const e = data;
+    throw new LoginError(
+      `Authorization request failed: ${e.error_description ?? e.error ?? e.message ?? `HTTP ${status}`}`
+    );
+  }
+  return data;
+}
+async function pollForToken(serverUrl, clientId, device) {
+  let intervalMs = Math.max(1, device.interval ?? 5) * 1e3;
+  const deadline = Date.now() + device.expires_in * 1e3;
+  while (Date.now() < deadline) {
+    await sleep(intervalMs);
+    const { data } = await postJson(`${serverUrl}/api/auth/device/token`, {
+      grant_type: DEVICE_GRANT_TYPE,
+      device_code: device.device_code,
+      client_id: clientId
+    });
+    if (typeof data.access_token === "string") {
+      return data;
+    }
+    const code = data.error;
+    switch (code) {
+      case "authorization_pending":
+      case void 0:
+        break;
+      case "slow_down":
+        intervalMs += 5e3;
+        break;
+      case "access_denied":
+        throw new LoginError("Authorization was denied.");
+      case "expired_token":
+        throw new LoginError("Device code expired. Run `indus login` again.");
+      default:
+        throw new LoginError(
+          `Authorization error: ${data.error_description ?? code}`
+        );
+    }
+  }
+  throw new LoginError("Timed out waiting for authorization. Run `indus login` again.");
+}
+async function runServerTierLogin(callbacks, serverUrl = INDUS_SERVER_URL, clientId = INDUS_CLIENT_ID) {
+  const device = await requestDeviceCode(serverUrl, clientId);
+  callbacks.onAuth({
+    url: device.verification_uri_complete ?? device.verification_uri,
+    instructions: `Enter code ${device.user_code} to authorize this device.`
+  });
+  callbacks.onProgress?.("Waiting for authorization...");
+  const token = await pollForToken(serverUrl, clientId, device);
+  await storeServerToken(token);
+  callbacks.onProgress?.("Server sign-in complete.");
+}
+async function doLogin(args) {
+  const { serverUrl, clientId } = args;
+  out();
+  out(chalk.bold.cyan("  indus login"));
+  out(chalk.dim(`  ${serverUrl}`));
+  out();
+  const existing = await getServerToken();
+  if (existing && !isServerTokenExpired(existing)) {
+    const again = await confirm(
+      chalk.yellow("Already authenticated. Log in again?"),
+      false
+    );
+    if (!again) {
+      out(chalk.dim("  Login cancelled \u2014 existing session preserved."));
+      return EXIT_OK;
+    }
+  }
+  try {
+    out(chalk.dim("  Requesting device authorization..."));
+    const device = await requestDeviceCode(serverUrl, clientId);
+    const url = device.verification_uri_complete ?? device.verification_uri;
+    out();
+    out(`  ${chalk.bold("Open this URL to authorize:")}`);
+    out(`    ${chalk.green.underline(url)}`);
+    out();
+    out(`  ${chalk.bold("Verification code:")} ${chalk.bold.cyan(device.user_code)}`);
+    out(
+      chalk.dim(
+        `  Expires in ${Math.max(1, Math.floor(device.expires_in / 60))} min \xB7 polling every ${Math.max(
+          1,
+          device.interval ?? 5
+        )}s`
+      )
+    );
+    out();
+    out(chalk.dim("  Waiting for authorization..."));
+    const token = await pollForToken(serverUrl, clientId, device);
+    const saved = await storeServerToken(token);
+    out();
+    out(chalk.green.bold("  Authentication successful."));
+    if (saved) {
+      out(chalk.dim(`  Token stored at ${TOKEN_FILE}`));
+    } else {
+      out(
+        chalk.yellow(
+          "  Warning: could not write the token to disk \u2014 you may need to log in again."
+        )
+      );
+    }
+    out();
+    return EXIT_OK;
+  } catch (error) {
+    const message = error instanceof LoginError ? error.message : error instanceof Error ? error.message : String(error);
+    err("");
+    err(chalk.red(`  Login failed: ${message}`));
+    err("");
+    return EXIT_FAILURE;
+  }
+}
+async function doLogout() {
+  const cleared = await clearServerToken();
+  if (cleared) {
+    out(chalk.green("  Logged out \u2014 server session token removed."));
+  } else {
+    out(chalk.dim("  No stored session token to remove."));
+  }
+  return EXIT_OK;
+}
+async function doWhoami(args) {
+  const token = await getServerToken();
+  if (!token || isServerTokenExpired(token)) {
+    err(chalk.yellow("  Not logged in. Run `indus login` first."));
+    return EXIT_FAILURE;
+  }
+  try {
+    const res = await fetch(`${args.serverUrl}/api/user/me`, {
+      method: "GET",
+      headers: {
+        authorization: `Bearer ${token.access_token}`,
+        accept: "application/json",
+        "user-agent": USER_AGENT
+      }
+    });
+    if (res.status === 401) {
+      err(chalk.yellow("  Session expired or invalid. Run `indus login` again."));
+      return EXIT_FAILURE;
+    }
+    if (!res.ok) {
+      err(chalk.red(`  Could not fetch account: HTTP ${res.status}`));
+      return EXIT_FAILURE;
+    }
+    const user = await res.json();
+    out();
+    out(chalk.bold("  Signed in as:"));
+    out(`    ${chalk.bold(user.name || user.email)} ${chalk.dim(`<${user.email}>`)}`);
+    out(`    ${chalk.dim("plan:")} ${user.plan}`);
+    out(
+      `    ${chalk.dim("monthly token limit:")} ${user.monthlyTokenLimit.toLocaleString()}`
+    );
+    out();
+    return EXIT_OK;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    err(chalk.red(`  Could not reach the server: ${message}`));
+    return EXIT_FAILURE;
+  }
+}
+async function runLogin(ctx) {
+  const verb = ctx.argv[0];
+  if (verb !== "login" && verb !== "logout" && verb !== "whoami") {
+    return void 0;
+  }
+  const args = parseLoginArgs(ctx.argv.slice(1));
+  switch (verb) {
+    case "login":
+      return doLogin(args);
+    case "logout":
+      return doLogout();
+    case "whoami":
+      return doWhoami(args);
+  }
+}
+
+// src/launch/oauth.ts
 var BUILT_IN_OAUTH = [
   { provider: anthropicOAuthProvider, label: "Anthropic (Claude sign-in)" },
   { provider: openaiCodexOAuthProvider, label: "OpenAI (ChatGPT sign-in)" },
@@ -17942,6 +18704,11 @@ function oauthClientIdEnvVar(providerId) {
   return OAUTH_CLIENT_ID_WIRING[providerId]?.envVar;
 }
 function listLoginProviders() {
+  const serverTier = {
+    id: SERVER_TIER_PROVIDER_ID,
+    label: "Indus Server (sign in for server-tier model access)",
+    authKind: "oauth"
+  };
   const oauth = getOAuthProviders().map((provider) => ({
     id: provider.id,
     label: OAUTH_LABELS[provider.id] ?? provider.name,
@@ -17952,7 +18719,7 @@ function listLoginProviders() {
     label: entry.label,
     authKind: "apiKey"
   }));
-  return [...oauth, ...apiKey];
+  return [serverTier, ...oauth, ...apiKey];
 }
 function isWebUrl(url) {
   try {
@@ -18008,6 +18775,10 @@ function openLoginUrl(url) {
   return tryAt(0);
 }
 async function startOAuthLogin(providerId, callbacks, vault, account = "default") {
+  if (providerId === SERVER_TIER_PROVIDER_ID) {
+    await runServerTierLogin(callbacks);
+    return { provider: providerId, account, madeDefault: true };
+  }
   const provider = getOAuthProvider(providerId);
   if (provider === void 0) {
     throw new Error(`No browser sign-in is available for "${providerId}".`);
@@ -18031,7 +18802,7 @@ function defaultCredentialIo() {
       process.stdout.write(line.endsWith("\n") ? line : line + "\n");
     },
     async ask(prompt) {
-      const rl = createInterface({
+      const rl = createInterface2({
         input: process.stdin,
         output: process.stdout
       });
@@ -18042,14 +18813,14 @@ function defaultCredentialIo() {
       }
     },
     async askSecret(prompt) {
-      const rl = createInterface({
+      const rl = createInterface2({
         input: process.stdin,
         output: process.stdout
       });
-      const out = process.stdout;
+      const out2 = process.stdout;
       let muted = false;
-      const original = out.write.bind(out);
-      out.write = ((chunk, ...args) => {
+      const original = out2.write.bind(out2);
+      out2.write = ((chunk, ...args) => {
         if (muted && typeof chunk === "string") return true;
         return original(chunk, ...args);
       });
@@ -18060,8 +18831,8 @@ function defaultCredentialIo() {
         return value.trim();
       } finally {
         muted = false;
-        out.write = original;
-        out.write("\n");
+        out2.write = original;
+        out2.write("\n");
         rl.close();
       }
     }
@@ -18225,8 +18996,8 @@ function validateAccountName(name) {
 }
 var DEFAULT_ACCOUNT = "default";
 function asVerb(token) {
-  if (token === "signin" || token === "login") return "signin";
-  if (token === "signout" || token === "logout") return "signout";
+  if (token === "signin") return "signin";
+  if (token === "signout") return "signout";
   return void 0;
 }
 async function runCredentialCommand(argv, opts) {
@@ -18637,7 +19408,7 @@ function printModelCatalog(io = defaultCatalogIo(), filter = {}, source = regist
 }
 
 // src/launch/pickers.ts
-import { createInterface as createInterface2 } from "node:readline/promises";
+import { createInterface as createInterface3 } from "node:readline/promises";
 import { createElement } from "indusagi/react-host";
 import { render } from "indusagi/react-host/ink";
 import { StartupSessionPicker } from "indusagi/react-ink";
@@ -18725,7 +19496,7 @@ function defaultSettingsBrowseIo() {
       process.stdout.write(line.endsWith("\n") ? line : line + "\n");
     },
     async pause(prompt) {
-      const rl = createInterface2({
+      const rl = createInterface3({
         input: process.stdin,
         output: process.stdout
       });
@@ -18739,7 +19510,7 @@ function defaultSettingsBrowseIo() {
 }
 function renderSection(title, paths) {
   if (paths.length === 0) return [`${title}: (none)`];
-  return [`${title}:`, ...paths.map((path3) => `  - ${path3}`)];
+  return [`${title}:`, ...paths.map((path4) => `  - ${path4}`)];
 }
 function renderSettingsListing(opts) {
   const lines = [];
@@ -19058,6 +19829,14 @@ function consoleReducer(state, event) {
       return setBuffer(state, event.text);
     case "buffer:insert":
       return insertBuffer(state, event.text);
+    case "buffer:replaceSpan": {
+      const at = state.buffer.indexOf(event.find);
+      if (at < 0) return state;
+      const buffer = state.buffer.slice(0, at) + event.replaceWith + state.buffer.slice(at + event.find.length);
+      const spanEnd = at + event.find.length;
+      const caret = state.caret >= spanEnd ? state.caret + (event.replaceWith.length - event.find.length) : state.caret > at ? at + event.replaceWith.length : state.caret;
+      return { ...state, buffer, caret: clamp(caret, buffer.length) };
+    }
     case "buffer:erasePrev":
       return erasePrev(state);
     case "buffer:eraseNext":
@@ -19384,7 +20163,8 @@ var DEFAULT_SLASH_REGISTRY = buildRegistry(SLASH_COMMANDS);
 // src/console/input/keymap.ts
 var NO_INTENT = { verb: "none" };
 function typed(text) {
-  return text.length === 0 ? NO_INTENT : { verb: "text:type", text };
+  const normalized = text.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+  return normalized.length === 0 ? NO_INTENT : { verb: "text:type", text: normalized };
 }
 function isPrintable(input) {
   if (input.length === 0) return false;
@@ -19419,6 +20199,8 @@ function readKey(input, key) {
         return { verb: "input:externalEditor" };
       case "r":
         return { verb: "overlay:open", overlay: "sessions" };
+      case "x":
+        return { verb: "queue:steer" };
       case "l":
         return { verb: "overlay:open", overlay: "models" };
       case "o":
@@ -19461,8 +20243,10 @@ function advanceChord(latch, intent) {
 }
 
 // src/console/input/paste.ts
-var PASTE_THRESHOLDS = { lines: 8, chars: 800 };
+var PASTE_THRESHOLDS = { lines: 10, chars: 1001 };
 var PASTE_BURST_GAP_MS = 24;
+var PASTE_CONTINUATION_MS = 250;
+var PASTE_MARKER_LINE_CAP = 1e3;
 function pasteMarker(ordinal, lineCount) {
   return `[Pasted text #${ordinal}${lineCount > 0 ? ` +${lineCount} lines` : ""}]`;
 }
@@ -19490,6 +20274,19 @@ function coalescePaste(body, vault = EMPTY_PASTE_VAULT) {
   bodies.set(ordinal, body);
   return { marker, vault: { bodies, minted: ordinal } };
 }
+function appendToPaste(ordinal, extra, vault) {
+  const body = (vault.bodies.get(ordinal) ?? "") + extra;
+  const lineCount = body.length === 0 ? 0 : lineBreaks(body) + 1;
+  const marker = pasteMarker(ordinal, lineCount);
+  const bodies = new Map(vault.bodies);
+  bodies.set(ordinal, body);
+  return { marker, vault: { bodies, minted: vault.minted } };
+}
+function pasteLines(vault, ordinal) {
+  const body = vault.bodies.get(ordinal);
+  if (body === void 0 || body.length === 0) return 0;
+  return lineBreaks(body) + 1;
+}
 function expandMarkers(buffer, vault) {
   if (vault.bodies.size === 0) return buffer;
   return buffer.replace(markerScanner(), (_match, ordinalStr) => {
@@ -19611,10 +20408,11 @@ function createDirReader(cwd = process.cwd()) {
 
 // src/console/components/TerminalConsole.tsx
 init_workflow_engine();
+init_window_budget();
 import { execFileSync } from "node:child_process";
-import { homedir as homedir4 } from "node:os";
-import React3, { useEffect as useEffect6, useMemo as useMemo2, useState as useState7 } from "indusagi/react-host";
-import { Box as Box10, useInput as useInput3 } from "indusagi/react-host/ink";
+import { homedir as homedir6 } from "node:os";
+import React3, { useEffect as useEffect7, useMemo as useMemo2, useState as useState8 } from "indusagi/react-host";
+import { Box as Box10, Text as Text10, useInput as useInput3 } from "indusagi/react-host/ink";
 import {
   MessageList,
   StreamingMarkdown,
@@ -19622,7 +20420,7 @@ import {
 } from "indusagi/react-ink";
 
 // src/console/components/Banner.tsx
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 import { basename as basename4 } from "node:path";
 import { Box, Text } from "indusagi/react-host/ink";
 import { ChangelogBlock } from "indusagi/react-ink";
@@ -19665,9 +20463,9 @@ var TIPS = [
   "Use /skills to discover specialized helpers for the task at hand"
 ];
 var WHATS_NEW = [
-  "Added /rewind support for resuming a conversation from before /clear was run",
-  "Fixed scroll jumping to the bottom while you read earlier output mid-stream",
-  "Stopped background agents stay stopped \u2014 no more resurrecting from the tasks panel"
+  "Ctrl+X runs your newest queued message NOW \u2014 the current run stops cleanly",
+  "/compact shows live progress, resets to a fresh screen, and lists carried files",
+  '"Allow always" is remembered for the session; sub-agents respect your permission mode'
 ];
 function wrapIndex(seed, len) {
   if (len <= 0) return 0;
@@ -19799,7 +20597,7 @@ function Mascot({
   return /* @__PURE__ */ jsx(Box, { flexDirection: "column", alignItems: "center", marginY: 1, children: mascotRows(face).map((row, rowIndex) => /* @__PURE__ */ jsx(Box, { children: row.map((seg, segIndex) => /* @__PURE__ */ jsx(Text, { children: paintMascot(theme, seg.tone, seg.text) }, segIndex)) }, rowIndex)) });
 }
 function shortenWorkspace(workspace) {
-  const home = homedir3();
+  const home = homedir4();
   if (home.length > 0 && workspace.startsWith(home)) {
     return `~${workspace.slice(home.length)}`;
   }
@@ -19939,6 +20737,43 @@ function Banner({
   ] });
 }
 
+// src/console/auth-status.ts
+init_server_token();
+init_server_mode();
+import { useEffect, useState } from "indusagi/react-host";
+function useAuthenticatedProviders(services, refreshKey) {
+  const [authed, setAuthed] = useState(null);
+  useEffect(() => {
+    if (!services) return;
+    let live = true;
+    void (async () => {
+      const found = /* @__PURE__ */ new Set();
+      try {
+        for (const provider of services.listLoginProviders()) {
+          try {
+            if ((await services.vault.listAccounts(provider.id)).length > 0) {
+              found.add(provider.id);
+            }
+          } catch {
+          }
+        }
+      } catch {
+      }
+      try {
+        if (await hasValidServerToken()) {
+          for (const provider of serverTierProviders()) found.add(provider);
+        }
+      } catch {
+      }
+      if (live) setAuthed(found);
+    })();
+    return () => {
+      live = false;
+    };
+  }, [refreshKey]);
+  return authed;
+}
+
 // src/console/components/BackgroundAgents.tsx
 import { Box as Box2, Text as Text2 } from "indusagi/react-host/ink";
 import { splitAssistantMessage } from "indusagi/react-ink";
@@ -20033,7 +20868,7 @@ function BackgroundAgents({ theme, runs, tokens, now }) {
 }
 
 // src/console/components/AgentsView.tsx
-import { useState } from "indusagi/react-host";
+import { useState as useState2 } from "indusagi/react-host";
 import { Box as Box3, Text as Text3, useInput } from "indusagi/react-host/ink";
 import { wrapSelectionIndex } from "indusagi/react-ink";
 import { jsx as jsx3, jsxs as jsxs3 } from "indusagi/react-host/jsx-runtime";
@@ -20077,7 +20912,7 @@ function ActivityRow({
 }
 function AgentsView({ theme, runs, activity, tokens, now, onExit }) {
   const clock = now ?? Date.now();
-  const [selectedIndex, setSelectedIndex] = useState(runs.length > 0 ? 1 : 0);
+  const [selectedIndex, setSelectedIndex] = useState2(runs.length > 0 ? 1 : 0);
   const rowCount = runs.length + 1;
   const index = Math.min(selectedIndex, rowCount - 1);
   const viewed = index > 0 ? runs[index - 1] : void 0;
@@ -20248,7 +21083,7 @@ function StatusBar({
 }
 
 // src/console/components/WorkingIndicator.tsx
-import React, { useEffect, useState as useState2 } from "indusagi/react-host";
+import React, { useEffect as useEffect2, useState as useState3 } from "indusagi/react-host";
 import { Box as Box6, Text as Text6 } from "indusagi/react-host/ink";
 import { jsx as jsx6, jsxs as jsxs6 } from "indusagi/react-host/jsx-runtime";
 var { useRef } = React;
@@ -20306,10 +21141,10 @@ function WorkingIndicator({
   busy,
   phase
 }) {
-  const [frame, setFrame] = useState2(0);
+  const [frame, setFrame] = useState3(0);
   const startRef = useRef(null);
   const wordOffsetRef = useRef(0);
-  useEffect(() => {
+  useEffect2(() => {
     if (!busy) {
       startRef.current = null;
       return;
@@ -20344,7 +21179,7 @@ var APPROVAL_CHOICES = [
   {
     id: "allow-always",
     label: "Allow always",
-    description: "run it and remember the tool for this session"
+    description: "run it and remember this action for the session"
   },
   { id: "deny", label: "Deny", description: "block this call" }
 ];
@@ -20446,7 +21281,8 @@ function ApprovalOverlays(props) {
 }
 
 // src/console/overlays/auth.tsx
-import React2, { useEffect as useEffect2, useState as useState3 } from "indusagi/react-host";
+init_server_token();
+import React2, { useEffect as useEffect3, useState as useState4 } from "indusagi/react-host";
 import { Box as Box8, Text as Text8 } from "indusagi/react-host/ink";
 import {
   DialogFrame,
@@ -20469,7 +21305,7 @@ function SignInDialog(props) {
     }
   })();
   const direct = requestedProvider !== void 0 ? providers.find((p) => p.id === requestedProvider) : void 0;
-  useEffect2(() => {
+  useEffect3(() => {
     if (direct === void 0) return;
     dispatch2({
       type: "modal:open",
@@ -20500,13 +21336,25 @@ function SignInDialog(props) {
     }
   );
 }
+var SERVER_TIER_ACCOUNT_ID = "server-session";
 function SignOutDialog(props) {
   const { services, closeModal } = props;
-  const [accounts, setAccounts] = useState3([]);
-  useEffect2(() => {
+  const [accounts, setAccounts] = useState4([]);
+  useEffect3(() => {
     let live = true;
     void (async () => {
       const rows = [];
+      try {
+        const token = await getServerToken();
+        if (token) {
+          rows.push({
+            provider: SERVER_TIER_PROVIDER_ID,
+            accountId: SERVER_TIER_ACCOUNT_ID,
+            label: "Indus Server \xB7 signed in"
+          });
+        }
+      } catch {
+      }
       try {
         for (const provider of services.listLoginProviders()) {
           let names = [];
@@ -20539,7 +21387,11 @@ function SignOutDialog(props) {
       onClose: closeModal,
       onSelect: async (account) => {
         try {
-          await services.vault.remove(account.provider, account.accountId);
+          if (account.provider === SERVER_TIER_PROVIDER_ID) {
+            await clearServerToken();
+          } else {
+            await services.vault.remove(account.provider, account.accountId);
+          }
         } catch {
         }
         closeModal();
@@ -20577,12 +21429,12 @@ function OAuthFlowDialog(props) {
       return providerId;
     }
   })();
-  const [state, setState] = useState3(
+  const [state, setState] = useState4(
     () => seedOAuthState(providerId, providerName, mode)
   );
   const pending = useRef2(null);
   const merge = (next) => setState((prev) => ({ ...prev, ...next }));
-  useEffect2(() => {
+  useEffect3(() => {
     if (mode !== "oauth") return;
     let live = true;
     const safeMerge = (next) => {
@@ -20620,6 +21472,7 @@ function OAuthFlowDialog(props) {
     void (async () => {
       try {
         await services.startOAuthLogin(providerId, callbacks, services.vault);
+        await services.refreshGatewayRouting();
         selectProviderModel(services, providerId);
         if (live) {
           dispatch2({
@@ -20763,21 +21616,47 @@ function readEntryMode(payload) {
 }
 
 // src/console/overlays/pickers.tsx
-import { useEffect as useEffect4, useState as useState5 } from "indusagi/react-host";
+import { useEffect as useEffect5, useState as useState6 } from "indusagi/react-host";
 import {
   ScopedModelsDialog,
   ThemeDialog as ThemeDialog2
 } from "indusagi/react-ink";
 
 // src/console/overlays/boards.tsx
-import chalk from "chalk";
-import { useEffect as useEffect3, useMemo, useState as useState4 } from "indusagi/react-host";
+init_server_mode();
+import chalk2 from "chalk";
+import { readFileSync as readFileSync7 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { join as join12 } from "node:path";
+import { useEffect as useEffect4, useMemo, useState as useState5 } from "indusagi/react-host";
 import { Box as Box9, Text as Text9, useInput as useInput2 } from "indusagi/react-host/ink";
 import {
   matchesSearchQuery,
   wrapSelectionIndex as wrapSelectionIndex2
 } from "indusagi/react-ink";
 import { Fragment as Fragment2, jsx as jsx9, jsxs as jsxs8 } from "indusagi/react-host/jsx-runtime";
+function readServerTierInfo() {
+  let signedIn = false;
+  try {
+    const file = join12(homedir5(), ".indusagi", "agent", "server-token.json");
+    const token = JSON.parse(readFileSync7(file, "utf8"));
+    signedIn = typeof token.expires_at === "string" && new Date(token.expires_at).getTime() - Date.now() > 5 * 60 * 1e3;
+  } catch {
+    signedIn = false;
+  }
+  const localKeys = /* @__PURE__ */ new Set();
+  try {
+    const file = join12(homedir5(), ".indusagi", "agent", "auth.json");
+    const vault = JSON.parse(readFileSync7(file, "utf8"));
+    for (const [provider, entry] of Object.entries(vault)) {
+      if (entry !== null && typeof entry === "object" && Object.keys(entry).length > 0) {
+        localKeys.add(provider);
+      }
+    }
+  } catch {
+  }
+  return { signedIn, localKeys };
+}
 function truncate(text, width) {
   if (text.length <= width) return text;
   if (width <= 1) return text.slice(0, width);
@@ -20786,7 +21665,7 @@ function truncate(text, width) {
 function tabPill(theme, text) {
   const accent = theme.colors["accent"] ?? "#f7a23f";
   try {
-    return chalk.bgHex(accent).hex("#1a120a").bold(` ${text} `);
+    return chalk2.bgHex(accent).hex("#1a120a").bold(` ${text} `);
   } catch {
     return theme.color("accent", text);
   }
@@ -20895,16 +21774,16 @@ function nextValue(values, current, direction) {
   return values[(at + direction + values.length) % values.length];
 }
 function SettingsBoard({ theme, items, onClose }) {
-  const [query, setQuery] = useState4("");
-  const [selectedIndex, setSelectedIndex] = useState4(0);
+  const [query, setQuery] = useState5("");
+  const [selectedIndex, setSelectedIndex] = useState5(0);
   const filtered = useMemo(
     () => items.filter(
       (item) => matchesSearchQuery(`${item.label} ${item.description} ${item.value} ${item.values.join(" ")}`, query)
     ),
     [items, query]
   );
-  useEffect3(() => setSelectedIndex(0), [query]);
-  useEffect3(() => {
+  useEffect4(() => setSelectedIndex(0), [query]);
+  useEffect4(() => {
     if (selectedIndex >= filtered.length) setSelectedIndex(0);
   }, [filtered.length, selectedIndex]);
   const cycle = (direction) => {
@@ -20954,12 +21833,20 @@ function modelMatches(model, query) {
   return matchesSearchQuery(`${model.provider} ${model.id} ${model.name ?? ""}`, query);
 }
 function ModelBoard({ theme, models, onClose, onSelect, search }) {
-  const [query, setQuery] = useState4(search ?? "");
-  const [selectedIndex, setSelectedIndex] = useState4(0);
-  useEffect3(() => setQuery(search ?? ""), [search]);
-  const filtered = useMemo(() => models.filter((model) => modelMatches(model, query)), [models, query]);
-  useEffect3(() => setSelectedIndex(0), [query]);
-  useEffect3(() => {
+  const [query, setQuery] = useState5(search ?? "");
+  const [selectedIndex, setSelectedIndex] = useState5(0);
+  useEffect4(() => setQuery(search ?? ""), [search]);
+  const serverTier = useMemo(readServerTierInfo, []);
+  const isServerTier = (provider) => serverTier.signedIn && isGatewayEligibleProvider(provider) && !serverTier.localKeys.has(provider);
+  const available = useMemo(
+    () => models.filter(
+      (model) => serverTier.localKeys.has(model.provider) || isServerTier(model.provider)
+    ),
+    [models, serverTier]
+  );
+  const filtered = useMemo(() => available.filter((model) => modelMatches(model, query)), [available, query]);
+  useEffect4(() => setSelectedIndex(0), [query]);
+  useEffect4(() => {
     if (selectedIndex >= filtered.length) setSelectedIndex(0);
   }, [filtered.length, selectedIndex]);
   useInput2((input, key) => {
@@ -20977,13 +21864,16 @@ function ModelBoard({ theme, models, onClose, onSelect, search }) {
   });
   const { start, budget, below } = windowAround(filtered.length, selectedIndex);
   const visible = filtered.slice(start, start + budget);
-  const list = filtered.length === 0 ? /* @__PURE__ */ jsx9(Text9, { children: theme.muted("No models matched the search.") }) : /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", children: visible.map((model, index) => {
+  const list = filtered.length === 0 ? /* @__PURE__ */ jsx9(Text9, { children: theme.muted(
+    available.length === 0 ? "No models available \u2014 sign in with a provider key or run /login to use the server tier." : "No models matched the search."
+  ) }) : /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", children: visible.map((model, index) => {
     const isSelected = start + index === selectedIndex;
     return /* @__PURE__ */ jsxs8(Box9, { children: [
       /* @__PURE__ */ jsx9(Box9, { width: 2, children: /* @__PURE__ */ jsx9(Text9, { children: isSelected ? theme.color("accent", "\u203A") : " " }) }),
-      /* @__PURE__ */ jsx9(Text9, { bold: isSelected, children: theme.color("text", `${model.provider}/${model.id}`) }),
-      model.name ? /* @__PURE__ */ jsx9(Text9, { children: theme.dim(`  ${model.name}`) }) : null
-    ] }, `${model.provider}/${model.id}`);
+      /* @__PURE__ */ jsx9(Text9, { bold: isSelected, children: theme.color("text", model.id) }),
+      model.name ? /* @__PURE__ */ jsx9(Text9, { children: theme.dim(`  ${model.name}`) }) : null,
+      isServerTier(model.provider) ? /* @__PURE__ */ jsx9(Text9, { children: theme.color("accent", "  \u2B21 server") }) : null
+    ] }, model.id);
   }) });
   return /* @__PURE__ */ jsx9(
     BoardShell,
@@ -21070,13 +21960,13 @@ var SETTING_KEYS = Object.freeze(
 );
 
 // src/settings/manager.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname5, join as join11 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "node:fs";
+import { dirname as dirname5, join as join13 } from "node:path";
 function loadTier(filePath) {
   if (!existsSync3(filePath)) return {};
   let raw;
   try {
-    raw = readFileSync6(filePath, "utf-8");
+    raw = readFileSync8(filePath, "utf-8");
   } catch {
     return {};
   }
@@ -21127,7 +22017,7 @@ var PreferenceStore = class _PreferenceStore {
   static fromWorkspace(workspace, cwd = process.cwd()) {
     return new _PreferenceStore({
       global: workspace.settingsPath,
-      project: join11(cwd, BRAND.profileDirName, "settings.json")
+      project: join13(cwd, BRAND.profileDirName, "settings.json")
     });
   }
   /** The two resolved file locations this store reads and writes. */
@@ -21196,11 +22086,11 @@ var PreferenceStore = class _PreferenceStore {
   }
 };
 function stripUndefined(tier) {
-  const out = {};
+  const out2 = {};
   for (const [key, value] of Object.entries(tier)) {
-    if (value !== void 0) out[key] = value;
+    if (value !== void 0) out2[key] = value;
   }
-  return out;
+  return out2;
 }
 
 // src/console/overlays/pickers.tsx
@@ -21243,38 +22133,12 @@ function listModels(services) {
     return [];
   }
 }
-function useAuthenticatedProviders(services) {
-  const [authed, setAuthed] = useState5(null);
-  useEffect4(() => {
-    if (!services) return;
-    let live = true;
-    void (async () => {
-      const found = /* @__PURE__ */ new Set();
-      try {
-        for (const provider of services.listLoginProviders()) {
-          try {
-            if ((await services.vault.listAccounts(provider.id)).length > 0) {
-              found.add(provider.id);
-            }
-          } catch {
-          }
-        }
-      } catch {
-      }
-      if (live) setAuthed(found);
-    })();
-    return () => {
-      live = false;
-    };
-  }, []);
-  return authed;
-}
 function ModelPicker(props) {
   const { services, theme, closeModal } = props;
   const authed = useAuthenticatedProviders(services);
   if (!services) return null;
   const all = listModels(services);
-  const models = authed && authed.size > 0 ? all.filter((model) => authed.has(model.provider)) : all;
+  const models = authed === null ? all : all.filter((model) => authed.has(model.provider));
   return /* @__PURE__ */ jsx10(
     ModelBoard,
     {
@@ -21294,15 +22158,15 @@ function ModelPicker(props) {
 function readScopedPayload(payload) {
   if (payload === null || typeof payload !== "object") return {};
   const record = payload;
-  const out = {};
-  if (record.focus === "summary") out.focus = "summary";
-  if (record.intent === "reset") out.intent = "reset";
-  return out;
+  const out2 = {};
+  if (record.focus === "summary") out2.focus = "summary";
+  if (record.intent === "reset") out2.intent = "reset";
+  return out2;
 }
 function ScopedModelPicker(props) {
   const { services, dispatch: dispatch2, closeModal, modal } = props;
   const payload = readScopedPayload(modal.payload);
-  useEffect4(() => {
+  useEffect5(() => {
     if (!services || payload.intent !== "reset") return;
     try {
       services.settings.set("enabledModels", []);
@@ -21358,7 +22222,7 @@ function currentScheme(services) {
 }
 function ThemePicker(props) {
   const { services, dispatch: dispatch2, closeModal } = props;
-  const [originalScheme] = useState5(
+  const [originalScheme] = useState6(
     () => services ? currentScheme(services) : null
   );
   if (!services) return null;
@@ -21389,7 +22253,7 @@ function SettingsPicker(props) {
   const { services, theme, dispatch: dispatch2, closeModal } = props;
   if (!services) return null;
   const settings = services.settings;
-  const [, setVersion] = useState5(0);
+  const [, setVersion] = useState6(0);
   const bump = () => setVersion((n) => n + 1);
   const onOff = (flag) => flag ? "on" : "off";
   const toggleRow = (id, key, label2, description, live) => ({
@@ -21571,7 +22435,7 @@ function PickerOverlays(props) {
 }
 
 // src/console/overlays/sessions.tsx
-import { useEffect as useEffect5, useState as useState6 } from "indusagi/react-host";
+import { useEffect as useEffect6, useState as useState7 } from "indusagi/react-host";
 import {
   SessionDialog,
   TreeDialog,
@@ -21593,8 +22457,8 @@ function toSessionInfo(row) {
 }
 function SessionPicker(props) {
   const { services, closeModal } = props;
-  const [sessions, setSessions] = useState6([]);
-  useEffect5(() => {
+  const [sessions, setSessions] = useState7([]);
+  useEffect6(() => {
     let live = true;
     void (async () => {
       try {
@@ -21654,8 +22518,8 @@ function SessionPicker(props) {
 }
 function BranchTree(props) {
   const { services, closeModal } = props;
-  const [items, setItems] = useState6([]);
-  useEffect5(() => {
+  const [items, setItems] = useState7([]);
+  useEffect6(() => {
     let live = true;
     void (async () => {
       try {
@@ -21706,8 +22570,8 @@ function BranchTree(props) {
 }
 function PriorTurns(props) {
   const { services, closeModal } = props;
-  const [items, setItems] = useState6([]);
-  useEffect5(() => {
+  const [items, setItems] = useState7([]);
+  useEffect6(() => {
     let live = true;
     void (async () => {
       try {
@@ -21805,34 +22669,40 @@ function approvalQueueReducer(state, event) {
 function activeApproval(state) {
   return state.entries[0];
 }
+function modeReleasesApprovals(mode) {
+  return mode === "bypass" || mode === "bypassPermissions";
+}
+
+// src/console/components/TerminalConsole.tsx
+init_conductor2();
 
 // src/console/startup.ts
 init_briefing();
-import { existsSync as existsSync4, readFileSync as readFileSync7 } from "node:fs";
-import { join as join12 } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync9 } from "node:fs";
+import { join as join14 } from "node:path";
 var PROFILE_DIR = ".indusagi";
 var CONTEXT_FILES = ["AGENTS.md", "CLAUDE.md"];
 function skillRoots(cwd, home) {
   return [
-    { dir: join12(cwd, PROFILE_DIR, "skills"), origin: "project" },
-    { dir: join12(home, PROFILE_DIR, "skills"), origin: "user" }
+    { dir: join14(cwd, PROFILE_DIR, "skills"), origin: "project" },
+    { dir: join14(home, PROFILE_DIR, "skills"), origin: "user" }
   ];
 }
 function macroRoots(cwd, home) {
   return [
-    { dir: join12(cwd, PROFILE_DIR, "commands"), origin: "project", label: "project" },
-    { dir: join12(home, PROFILE_DIR, "commands"), origin: "user", label: "user" }
+    { dir: join14(cwd, PROFILE_DIR, "commands"), origin: "project", label: "project" },
+    { dir: join14(home, PROFILE_DIR, "commands"), origin: "user", label: "user" }
   ];
 }
-function shortenPath2(path3, cwd, home) {
-  if (cwd.length > 0 && path3.startsWith(cwd)) {
-    const rest = path3.slice(cwd.length).replace(/^[/\\]+/, "");
+function shortenPath2(path4, cwd, home) {
+  if (cwd.length > 0 && path4.startsWith(cwd)) {
+    const rest = path4.slice(cwd.length).replace(/^[/\\]+/, "");
     return rest.length > 0 ? `./${rest}` : ".";
   }
-  if (home.length > 0 && path3.startsWith(home)) {
-    return `~${path3.slice(home.length)}`;
+  if (home.length > 0 && path4.startsWith(home)) {
+    return `~${path4.slice(home.length)}`;
   }
-  return path3;
+  return path4;
 }
 var MAX_SECTION_LINES = 6;
 function capLines(lines) {
@@ -21847,17 +22717,17 @@ function section(title, lines) {
 }
 function gatherContext(cwd, home) {
   const seen = /* @__PURE__ */ new Set();
-  const out = [];
+  const out2 = [];
   for (const root of [cwd, home]) {
     if (root.length === 0) continue;
     for (const name of CONTEXT_FILES) {
-      const path3 = join12(root, name);
-      if (seen.has(path3)) continue;
-      seen.add(path3);
-      if (existsSync4(path3)) out.push(shortenPath2(path3, cwd, home));
+      const path4 = join14(root, name);
+      if (seen.has(path4)) continue;
+      seen.add(path4);
+      if (existsSync4(path4)) out2.push(shortenPath2(path4, cwd, home));
     }
   }
-  return out;
+  return out2;
 }
 function gatherSkills(cwd, home) {
   let cards = [];
@@ -21933,7 +22803,7 @@ function gatherChangelog(inputs) {
   if (lastSeenVersion !== void 0 && lastSeenVersion === version) return none2;
   let raw;
   try {
-    raw = readFileSync7(changelogPath, "utf-8");
+    raw = readFileSync9(changelogPath, "utf-8");
   } catch {
     return none2;
   }
@@ -21969,11 +22839,11 @@ __export(kit_exports, {
 });
 
 // src/kit/tool-fetch.ts
-import { join as join13 } from "node:path";
+import { join as join15 } from "node:path";
 var KIT_USER_AGENT = "indusagi-kit-provisioner/1.0";
 function resolveManagedBinaryPath(binDir, bin, platform = process.platform) {
   const fileName = platform === "win32" ? `${bin}.exe` : bin;
-  return join13(binDir, fileName);
+  return join15(binDir, fileName);
 }
 function pickReleaseAsset(descriptor, release) {
   for (const asset of release.assets) {
@@ -22055,9 +22925,9 @@ function buildShellCommand(args) {
 
 // src/kit/clipboard-image.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join14 } from "node:path";
+import { join as join16 } from "node:path";
 var READ_TIMEOUT_MS = 3e3;
 var MAX_BUFFER_BYTES = 50 * 1024 * 1024;
 function captureStdout(command, args) {
@@ -22066,9 +22936,9 @@ function captureStdout(command, args) {
     maxBuffer: MAX_BUFFER_BYTES
   });
   if (result.error || result.status !== 0) return null;
-  const out = result.stdout;
-  if (!Buffer.isBuffer(out) || out.length === 0) return null;
-  return out;
+  const out2 = result.stdout;
+  if (!Buffer.isBuffer(out2) || out2.length === 0) return null;
+  return out2;
 }
 function captureViaOsascript() {
   const result = spawnSync2(
@@ -22100,10 +22970,10 @@ function captureViaOsascript() {
     { timeout: READ_TIMEOUT_MS, encoding: "utf8" }
   );
   if (result.error || result.status !== 0) return null;
-  const path3 = String(result.stdout ?? "").trim();
-  if (path3.length === 0) return null;
+  const path4 = String(result.stdout ?? "").trim();
+  if (path4.length === 0) return null;
   try {
-    const bytes = readFileSync8(path3);
+    const bytes = readFileSync10(path4);
     return bytes.length > 0 ? bytes : null;
   } catch {
     return null;
@@ -22130,10 +23000,10 @@ function readClipboardImage(options = {}) {
   if (bytes === null) return null;
   const dir = options.dir ?? tmpdir2();
   const name = `indus-clipboard-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.png`;
-  const path3 = join14(dir, name);
+  const path4 = join16(dir, name);
   try {
-    writeFileSync5(path3, bytes);
-    return path3;
+    writeFileSync5(path4, bytes);
+    return path4;
   } catch {
     return null;
   }
@@ -22141,9 +23011,9 @@ function readClipboardImage(options = {}) {
 
 // src/kit/external-editor.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { readFileSync as readFileSync9, unlinkSync, writeFileSync as writeFileSync6 } from "node:fs";
+import { readFileSync as readFileSync11, unlinkSync, writeFileSync as writeFileSync6 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join15 } from "node:path";
+import { join as join17 } from "node:path";
 var FALLBACK_EDITOR = "vi";
 function resolveEditor(env) {
   const configured = env.VISUAL || env.EDITOR || FALLBACK_EDITOR;
@@ -22154,18 +23024,18 @@ function openInExternalEditor(buffer, options = {}) {
   const env = options.env ?? process.env;
   const dir = options.dir ?? tmpdir3();
   const name = `indus-editor-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.md`;
-  const path3 = join15(dir, name);
+  const path4 = join17(dir, name);
   const [editor, ...editorArgs] = resolveEditor(env);
   try {
-    writeFileSync6(path3, buffer, "utf8");
-    const result = spawnSync3(editor, [...editorArgs, path3], { stdio: "inherit" });
+    writeFileSync6(path4, buffer, "utf8");
+    const result = spawnSync3(editor, [...editorArgs, path4], { stdio: "inherit" });
     if (result.error || result.status !== 0) return null;
-    return readFileSync9(path3, "utf8").replace(/\n$/, "");
+    return readFileSync11(path4, "utf8").replace(/\n$/, "");
   } catch {
     return null;
   } finally {
     try {
-      unlinkSync(path3);
+      unlinkSync(path4);
     } catch {
     }
   }
@@ -22181,16 +23051,16 @@ var CHROME_ROWS = 14;
 var MODAL_CHROME_ROWS = 24;
 var MIN_VISIBLE_ROWS = 8;
 var FALLBACK_CONTEXT_WINDOW = 2e5;
-var PASTE_BURST_MS = 12;
+var PASTE_BURST_MS = PASTE_BURST_GAP_MS;
 var BRACKETED_PASTE = /\x1b?\[20[01]~/g;
 function readBranch() {
   try {
-    const out = execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+    const out2 = execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
       cwd: process.cwd(),
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
-    return out.length > 0 ? out : null;
+    return out2.length > 0 ? out2 : null;
   } catch {
     return null;
   }
@@ -22298,6 +23168,19 @@ function renderToolUpdateText(details) {
   const text = details.text;
   return typeof text === "string" ? text : void 0;
 }
+function permissionModeStatusText(mode) {
+  switch (mode) {
+    case "plan":
+      return "Permission mode: PLAN \u2014 read-only research; mutating tools are blocked. Shift+Tab to cycle.";
+    case "bypass":
+    case "bypassPermissions":
+      return "Permission mode: BYPASS \u2014 every tool auto-allowed (unsafe). Shift+Tab to cycle.";
+    case "acceptEdits":
+      return "Permission mode: ACCEPT-EDITS \u2014 edits auto-approved. Shift+Tab to cycle.";
+    default:
+      return "Permission mode: DEFAULT \u2014 tools prompt as usual. Shift+Tab to cycle.";
+  }
+}
 function TerminalConsole(props) {
   const { conductor, theme, slash, verbose, onExit, initialInput, services } = props;
   const adapter = theme.adapter;
@@ -22308,22 +23191,23 @@ function TerminalConsole(props) {
   const chord = useRef3(NO_CHORD);
   const chordTimer = useRef3(null);
   const paste = useRef3(EMPTY_PASTE_VAULT);
+  const activePaste = useRef3(null);
   const burst = useRef3("");
   const burstTimer = useRef3(null);
   const liveAnswer = useRef3(null);
   const liveReason = useRef3(null);
   const rowSeed = useRef3(0);
   const ctrlCAt = useRef3(0);
-  const [highlight, setHighlight] = useState7(0);
-  const [toolExecutions, setToolExecutions] = useState7({});
-  const [taskTokens, setTaskTokens] = useState7({});
-  const [subagentActivity, setSubagentActivity] = useState7({});
-  const [expandTools, setExpandTools] = useState7(false);
-  const [agentsOpen, setAgentsOpen] = useState7(false);
-  const [terminalRows, setTerminalRows] = useState7(
+  const [highlight, setHighlight] = useState8(0);
+  const [toolExecutions, setToolExecutions] = useState8({});
+  const [taskTokens, setTaskTokens] = useState8({});
+  const [subagentActivity, setSubagentActivity] = useState8({});
+  const [expandTools, setExpandTools] = useState8(false);
+  const [agentsOpen, setAgentsOpen] = useState8(false);
+  const [terminalRows, setTerminalRows] = useState8(
     () => process.stdout.rows ?? FALLBACK_TERMINAL_ROWS
   );
-  const [, forceTick] = useState7(0);
+  const [, forceTick] = useState8(0);
   const pulse = useCallback(() => forceTick((n) => n + 1), []);
   const dirReader = useMemo2(() => createDirReader(process.cwd()), []);
   const [approvalQueue, dispatchApproval] = useReducer(
@@ -22349,7 +23233,11 @@ function TerminalConsole(props) {
     (toolName, input, opts) => new Promise((resolve8) => {
       approvalSeed.current += 1;
       const id = `ap_${approvalSeed.current}`;
-      const request = { toolName, input };
+      const request = {
+        toolName,
+        input,
+        suggestions: allowAlwaysRuleStrings(toolName, input)
+      };
       approvalResolvers.current.set(id, resolve8);
       const signal = opts.signal;
       if (signal !== void 0) {
@@ -22368,7 +23256,7 @@ function TerminalConsole(props) {
     }),
     [settleApproval]
   );
-  useEffect6(() => {
+  useEffect7(() => {
     conductor.setApprovalResolver(requestApproval);
     return () => {
       conductor.setApprovalResolver(void 0);
@@ -22378,7 +23266,7 @@ function TerminalConsole(props) {
   const head = activeApproval(approvalQueue);
   const headId = head?.id;
   const approvalModalOpen = useRef3(false);
-  useEffect6(() => {
+  useEffect7(() => {
     if (head === void 0) {
       if (approvalModalOpen.current) {
         approvalModalOpen.current = false;
@@ -22396,7 +23284,17 @@ function TerminalConsole(props) {
       }
     });
   }, [headId, settleApproval]);
-  useEffect6(() => {
+  const cyclePermission = useCallback(() => {
+    const now = conductor.cyclePermissionMode();
+    let text = permissionModeStatusText(now);
+    if (modeReleasesApprovals(now) && approvalResolvers.current.size > 0) {
+      const parked = [...approvalResolvers.current.keys()];
+      for (const id of parked) settleApproval(id, "allow-once");
+      text += ` Released ${parked.length} pending approval${parked.length === 1 ? "" : "s"}.`;
+    }
+    dispatch2({ type: "status:set", status: { kind: "info", text } });
+  }, [conductor, settleApproval]);
+  useEffect7(() => {
     const off = conductor.subscribe((signal) => {
       switch (signal.kind) {
         case "prompt": {
@@ -22502,7 +23400,30 @@ function TerminalConsole(props) {
           break;
         }
         case "compacted": {
-          dispatch2({ type: "status:set", status: { kind: "info", text: "Conversation condensed." } });
+          if (signal.manual) {
+            const carried = [];
+            for (const message of conductor.messages()) {
+              const content = message.content;
+              if (typeof content === "string" && content.startsWith(RESTORED_FILE_PREFIX)) {
+                const firstLine = content.slice(RESTORED_FILE_PREFIX.length).split("\n", 1)[0];
+                if (firstLine) carried.push(firstLine.trim());
+              }
+            }
+            setCompactNote(carried);
+            visibleFrom.current = conductor.messages().length;
+            liveAnswer.current = null;
+            liveReason.current = null;
+            answerText.current = "";
+            reasonText.current = "";
+            dispatch2({ type: "rows:set", rows: [] });
+          }
+          dispatch2({
+            type: "status:set",
+            status: {
+              kind: "info",
+              text: signal.manual ? "Conversation condensed." : "Auto-compacted older history to stay within the context window (automatic \u2014 you didn't run /compact)."
+            }
+          });
           break;
         }
         case "persisted": {
@@ -22510,6 +23431,10 @@ function TerminalConsole(props) {
           break;
         }
         case "fault": {
+          if (signal.transient) {
+            dispatch2({ type: "status:set", status: { kind: "warning", text: signal.fault.message } });
+            break;
+          }
           liveAnswer.current = null;
           liveReason.current = null;
           dispatch2({ type: "busy:set", busy: false });
@@ -22529,12 +23454,14 @@ function TerminalConsole(props) {
   }, [conductor]);
   const answerText = useRef3("");
   const reasonText = useRef3("");
+  const visibleFrom = useRef3(0);
+  const [compactNote, setCompactNote] = useState8(null);
   const completion = useMemo2(
     () => completeAt(state.buffer, state.caret, slash, dirReader),
     [state.buffer, state.caret, slash, dirReader]
   );
   const suggestions = completion.suggestions;
-  useEffect6(() => {
+  useEffect7(() => {
     if (highlight >= suggestions.length) setHighlight(0);
   }, [suggestions.length, highlight]);
   const submit = useCallback(
@@ -22558,10 +23485,10 @@ function TerminalConsole(props) {
               text: `Shell exited ${outcome.exitCode}.`
             }
           });
-        }).catch((err) => {
+        }).catch((err2) => {
           dispatch2({
             type: "status:set",
-            status: { kind: "error", text: err instanceof Error ? err.message : String(err) }
+            status: { kind: "error", text: err2 instanceof Error ? err2.message : String(err2) }
           });
         });
         return;
@@ -22599,15 +23526,23 @@ function TerminalConsole(props) {
       const id = freshRowId(rowSeed.current++);
       dispatch2({ type: "rows:append", row: { id, kind: "prompt", text } });
       dispatch2({ type: "busy:set", busy: true });
+      if (conductor.snapshot().phase === "condensing") {
+        dispatch2({
+          type: "status:set",
+          status: { kind: "info", text: "Queued message for after compaction." }
+        });
+      }
+      setCompactNote(null);
+      activePaste.current = null;
       answerText.current = "";
       reasonText.current = "";
       try {
         await conductor.submit(text);
-      } catch (err) {
+      } catch (err2) {
         dispatch2({ type: "busy:set", busy: false });
         dispatch2({
           type: "status:set",
-          status: { kind: "error", text: err instanceof Error ? err.message : String(err) }
+          status: { kind: "error", text: err2 instanceof Error ? err2.message : String(err2) }
         });
       }
       pulse();
@@ -22623,12 +23558,29 @@ function TerminalConsole(props) {
     const text = burst.current;
     if (text.length === 0) return;
     burst.current = "";
-    if (text.length > 1 && classifyPaste(text) === "coalesce") {
+    const now = Date.now();
+    const active = activePaste.current;
+    if (active !== null && now <= active.until && text.length > 1 && pasteLines(paste.current, active.ordinal) < PASTE_MARKER_LINE_CAP) {
+      const captured = appendToPaste(active.ordinal, text, paste.current);
+      paste.current = captured.vault;
+      dispatch2({ type: "buffer:replaceSpan", find: active.marker, replaceWith: captured.marker });
+      activePaste.current = {
+        ordinal: active.ordinal,
+        marker: captured.marker,
+        until: now + PASTE_CONTINUATION_MS
+      };
+    } else if (text.length > 1 && (classifyPaste(text) === "coalesce" || active !== null && now <= active.until)) {
       const captured = coalescePaste(text, paste.current);
       paste.current = captured.vault;
       dispatch2({ type: "buffer:insert", text: captured.marker });
+      activePaste.current = {
+        ordinal: captured.vault.minted,
+        marker: captured.marker,
+        until: now + PASTE_CONTINUATION_MS
+      };
     } else {
       dispatch2({ type: "buffer:insert", text });
+      activePaste.current = null;
     }
     setHighlight(0);
   }, []);
@@ -22644,14 +23596,14 @@ function TerminalConsole(props) {
       chordTimer.current = null;
     }
   }, []);
-  useEffect6(
+  useEffect7(
     () => () => {
       if (chordTimer.current !== null) clearTimeout(chordTimer.current);
       if (burstTimer.current !== null) clearTimeout(burstTimer.current);
     },
     []
   );
-  useEffect6(() => {
+  useEffect7(() => {
     const onResize = () => setTerminalRows(process.stdout.rows ?? FALLBACK_TERMINAL_ROWS);
     process.stdout.on("resize", onResize);
     return () => {
@@ -22659,7 +23611,7 @@ function TerminalConsole(props) {
     };
   }, []);
   const titleName = conductor.sessionName();
-  useEffect6(() => {
+  useEffect7(() => {
     writeTerminalTitle(titleName && titleName.length > 0 ? titleName : "indus console");
   }, [titleName]);
   const requestExit = useCallback(() => {
@@ -22785,7 +23737,7 @@ function TerminalConsole(props) {
           }
         } else if (state.modal.kind !== "none") {
           dispatch2({ type: "modal:close" });
-        } else if (state.busy) {
+        } else if (state.busy || conductor.snapshot().phase === "condensing") {
           denyAllApprovals();
           conductor.abort();
         } else if (suggestions.length > 0) {
@@ -22821,12 +23773,9 @@ function TerminalConsole(props) {
         dispatch2({ type: "status:set", status: { kind: "info", text: `Reasoning effort: ${level}.` } });
         return;
       }
-      case "mode:cyclePermission": {
-        const now = conductor.cyclePermissionMode();
-        const text = now === "plan" ? "Permission mode: PLAN \u2014 read-only research; mutating tools are blocked. Shift+Tab to cycle." : now === "bypass" || now === "bypassPermissions" ? "Permission mode: BYPASS \u2014 every tool auto-allowed (unsafe). Shift+Tab to cycle." : now === "acceptEdits" ? "Permission mode: ACCEPT-EDITS \u2014 edits auto-approved. Shift+Tab to cycle." : "Permission mode: DEFAULT \u2014 tools prompt as usual. Shift+Tab to cycle.";
-        dispatch2({ type: "status:set", status: { kind: "info", text } });
+      case "mode:cyclePermission":
+        cyclePermission();
         return;
-      }
       case "view:toggleReasoning":
         dispatch2({ type: "toggle:reasoning" });
         return;
@@ -22839,11 +23788,25 @@ function TerminalConsole(props) {
         }
         return;
       }
+      case "queue:steer": {
+        if (conductor.steerNow()) {
+          dispatch2({
+            type: "status:set",
+            status: { kind: "info", text: "Running your queued message now \u2014 current run stopped." }
+          });
+        } else {
+          dispatch2({
+            type: "status:set",
+            status: { kind: "warning", text: "No queued message to run \u2014 type one first, then Ctrl+X." }
+          });
+        }
+        return;
+      }
       case "input:pasteImage": {
-        const path3 = readClipboardImage();
-        if (path3 !== null) {
+        const path4 = readClipboardImage();
+        if (path4 !== null) {
           const sep = state.buffer.length > 0 && !/\s$/.test(state.buffer) ? " " : "";
-          dispatch2({ type: "buffer:insert", text: `${sep}${path3}` });
+          dispatch2({ type: "buffer:insert", text: `${sep}${path4}` });
         } else {
           dispatch2({ type: "status:set", status: { kind: "warning", text: "No image on the clipboard." } });
         }
@@ -22872,20 +23835,30 @@ function TerminalConsole(props) {
         return;
     }
   }, { isActive: state.modal.kind === "none" && !agentsOpen });
+  useInput3((_rawInput, key) => {
+    if (key.tab && key.shift) cyclePermission();
+  }, { isActive: state.modal.kind === "approval" });
   const seeded = useRef3(false);
-  useEffect6(() => {
+  useEffect7(() => {
     if (seeded.current) return;
     seeded.current = true;
+    const opening = conductor.permissionMode();
+    if (opening !== "default") {
+      dispatch2({
+        type: "status:set",
+        status: { kind: "warning", text: permissionModeStatusText(opening) }
+      });
+    }
     if (initialInput && initialInput.trim().length > 0) {
       void runTurn(initialInput);
     }
   }, []);
-  const liveMessages = [...conductor.messages()];
+  const allMessages = [...conductor.messages()];
+  if (allMessages.length < visibleFrom.current) visibleFrom.current = 0;
+  const liveMessages = allMessages.slice(visibleFrom.current);
   const agentRuns = deriveAgentRuns(liveMessages);
   const snapshot = projectSnapshot(conductor, liveMessages, services);
   const branch = useMemo2(() => readBranch(), []);
-  const modalOpen = state.modal.kind !== "none";
-  const maxItems = transcriptHeight(terminalRows, modalOpen, agentPanelRows(agentRuns));
   const pendingMessages = conductor.pendingInputs().map((entry, index) => ({
     id: `pending-${index}-${entry.mode}`,
     mode: entry.mode,
@@ -22895,12 +23868,21 @@ function TerminalConsole(props) {
   const SHOW_TOOL_ACTIVITY = false;
   const runningTools = Object.values(toolExecutions).some((t) => t.status === "running");
   const showTaskPanel = SHOW_TOOL_ACTIVITY && runningTools || pendingMessages.length > 0;
+  const modalOpen = state.modal.kind !== "none";
+  const streamingAnswerRows = liveAnswer.current !== null && answerText.current ? Math.min(6, answerText.current.split("\n").length + 1) : 0;
+  const taskPanelRows = showTaskPanel ? 2 + Math.min(pendingMessages.length, 8) : 0;
+  const workingIndicatorRows = state.busy ? 2 : 0;
+  const maxItems = transcriptHeight(
+    terminalRows,
+    modalOpen,
+    agentPanelRows(agentRuns) + streamingAnswerRows + taskPanelRows + workingIndicatorRows
+  );
   const providerCount = countProviders(conductor);
   const lastSeenVersion = services?.settings.get("lastSeenVersion") ?? "";
   const startupMap = useMemo2(
     () => gatherStartup({
       cwd: process.cwd(),
-      home: homedir4(),
+      home: homedir6(),
       version: VERSION,
       lastSeenVersion
     }),
@@ -22909,8 +23891,8 @@ function TerminalConsole(props) {
   const quietStartup = (services?.settings.get("quietStartup") ?? false) && !verbose;
   const sweep = (services?.settings.get("logoSweep") ?? false) && !(services?.settings.get("reducedMotion") ?? false) && Boolean(process.stdout.isTTY);
   const welcomeSeed = PINNED_WELCOME_SEED;
-  const [welcomeName, setWelcomeName] = useState7(void 0);
-  useEffect6(() => {
+  const [welcomeName, setWelcomeName] = useState8(void 0);
+  useEffect7(() => {
     if (!services) return;
     let live = true;
     const provider = services.settings.get("defaultProvider");
@@ -22922,6 +23904,12 @@ function TerminalConsole(props) {
       live = false;
     };
   }, [services]);
+  const authedProviders = useAuthenticatedProviders(services, state.status);
+  const boundModelId = conductor.snapshot().modelId;
+  const boundProvider = boundModelId.includes("/") ? boundModelId.split("/")[0] : boundModelId;
+  const modelAuthed = authedProviders === null || authedProviders.has(boundProvider);
+  const bannerModelId = modelAuthed ? boundModelId : "no authenticated model \u2014 run /login";
+  const statusBarSnapshot = modelAuthed || !snapshot.model ? snapshot : { ...snapshot, model: { ...snapshot.model, provider: "no model", id: "run /login" } };
   return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
     agentsOpen ? (
       // The drill-in agents view replaces the transcript while open; it owns
@@ -22941,7 +23929,7 @@ function TerminalConsole(props) {
         Banner,
         {
           theme: adapter,
-          modelId: conductor.snapshot().modelId,
+          modelId: bannerModelId,
           workspace: process.cwd(),
           version: VERSION,
           verbose,
@@ -22955,6 +23943,23 @@ function TerminalConsole(props) {
           variantSeed: welcomeSeed
         }
       ),
+      compactNote !== null ? /* @__PURE__ */ jsxs10(
+        Box10,
+        {
+          flexDirection: "column",
+          borderStyle: "round",
+          borderColor: adapter.colors["borderMuted"],
+          paddingX: 1,
+          marginBottom: 1,
+          children: [
+            /* @__PURE__ */ jsx13(Text10, { children: adapter.color("accent", "\u25C6 Context condensed \u2014 fresh session, history summarized") }),
+            compactNote.length > 0 ? /* @__PURE__ */ jsxs10(Fragment4, { children: [
+              /* @__PURE__ */ jsx13(Text10, { children: adapter.muted("Files carried into the new context:") }),
+              compactNote.map((file, index) => /* @__PURE__ */ jsx13(Text10, { children: adapter.muted(`  \xB7 ${file}`) }, index))
+            ] }) : /* @__PURE__ */ jsx13(Text10, { children: adapter.muted("No files re-attached; the summary digest carries the history.") })
+          ]
+        }
+      ) : null,
       /* @__PURE__ */ jsx13(
         MessageList,
         {
@@ -22978,7 +23983,14 @@ function TerminalConsole(props) {
           pendingMessages
         }
       ) : null,
-      /* @__PURE__ */ jsx13(WorkingIndicator, { theme: adapter, busy: state.busy, phase: conductor.snapshot().phase }),
+      /* @__PURE__ */ jsx13(
+        WorkingIndicator,
+        {
+          theme: adapter,
+          busy: state.busy || conductor.snapshot().phase === "condensing",
+          phase: conductor.snapshot().phase
+        }
+      ),
       /* @__PURE__ */ jsx13(
         Composer,
         {
@@ -22994,7 +24006,7 @@ function TerminalConsole(props) {
         StatusBar,
         {
           theme: adapter,
-          snapshot,
+          snapshot: statusBarSnapshot,
           branch,
           providerCount,
           status: state.status,
@@ -23049,8 +24061,8 @@ __export(sessions_exports, {
 
 // src/sessions/library.ts
 init_conductor2();
-import { mkdir, readFile as readFile2, readdir, rename, rm, stat as stat2 } from "node:fs/promises";
-import { basename as basename5, join as join16 } from "node:path";
+import { mkdir as mkdir2, readFile as readFile3, readdir, rename, rm, stat as stat2 } from "node:fs/promises";
+import { basename as basename5, join as join18 } from "node:path";
 var SESSION_FILE_EXT = ".ndjson";
 var PREVIEW_LIMIT = 72;
 var SessionLibrary = class {
@@ -23110,7 +24122,7 @@ var SessionLibrary = class {
     if (!await this.#missing(toPath)) {
       throw new Error(`SessionLibrary.rename: session "${toId}" already exists`);
     }
-    await mkdir(this.#dir, { recursive: true });
+    await mkdir2(this.#dir, { recursive: true });
     await rename(fromPath, toPath);
     return toPath;
   }
@@ -23119,14 +24131,14 @@ var SessionLibrary = class {
    * there was nothing to delete — never throws on an already-absent session.
    */
   async remove(id) {
-    const path3 = this.pathOf(id);
-    if (await this.#missing(path3)) return false;
-    await rm(path3, { force: true });
+    const path4 = this.pathOf(id);
+    if (await this.#missing(path4)) return false;
+    await rm(path4, { force: true });
     return true;
   }
   /** Absolute path a session id persists to. */
   pathOf(id) {
-    return join16(this.#dir, `${id}${SESSION_FILE_EXT}`);
+    return join18(this.#dir, `${id}${SESSION_FILE_EXT}`);
   }
   /**
    * Flatten a loaded transcript into an ordered {@link BranchNode} list for a
@@ -23150,9 +24162,9 @@ var SessionLibrary = class {
     for (const node of nodes) {
       if (node.parent !== null) hasChildren.add(node.parent);
     }
-    const out = [];
+    const out2 = [];
     const walk = (entry, depth) => {
-      out.push({
+      out2.push({
         id: entry.id,
         parent: entry.parent,
         label: labelFor(entry, depth),
@@ -23167,7 +24179,7 @@ var SessionLibrary = class {
     for (const root of childrenOf.get(null) ?? []) {
       walk(root, 0);
     }
-    return out;
+    return out2;
   }
   /**
    * Extract the user prompts along a loaded transcript's active branch as fork
@@ -23178,14 +24190,14 @@ var SessionLibrary = class {
    * text, projecting each to a {@link PriorTurn} a forking picker can offer.
    */
   priorTurns(store) {
-    const out = [];
+    const out2 = [];
     for (const entry of store.pathTo()) {
       if (entry.role !== "user") continue;
       const text = messageText(entry.content).trim();
       if (text.length === 0) continue;
-      out.push({ entryId: entry.id, text, preview: previewOf(text) });
+      out2.push({ entryId: entry.id, text, preview: previewOf(text) });
     }
-    return out;
+    return out2;
   }
   /* ---- internals ---- */
   /** Bare session ids present in the directory (no extension), or `[]`. */
@@ -23200,41 +24212,41 @@ var SessionLibrary = class {
   }
   /** Catalog row from file metadata only — no parse. */
   async #shallowRow(id) {
-    const path3 = this.pathOf(id);
-    const meta = await this.#fileMeta(path3);
-    return { id, path: path3, ...meta };
+    const path4 = this.pathOf(id);
+    const meta = await this.#fileMeta(path4);
+    return { id, path: path4, ...meta };
   }
   /** Catalog row enriched by opening the transcript and reducing its text. */
   async #deepRow(id) {
-    const path3 = this.pathOf(id);
-    const meta = await this.#fileMeta(path3);
+    const path4 = this.pathOf(id);
+    const meta = await this.#fileMeta(path4);
     const store = await this.open(id);
-    if (store === null) return { id, path: path3, ...meta };
+    if (store === null) return { id, path: path4, ...meta };
     const branch = store.pathTo();
     const conversational = branch.filter(isConversational);
     const opener = conversational.find((entry) => entry.role === "user");
     const preview2 = opener ? previewOf(messageText(opener.content)) : void 0;
     return {
       id,
-      path: path3,
+      path: path4,
       ...meta,
       messageCount: conversational.length,
       ...preview2 ? { preview: preview2, name: preview2 } : {}
     };
   }
   /** Best-effort `{ size, lastModified }`; empty object when the file is gone. */
-  async #fileMeta(path3) {
+  async #fileMeta(path4) {
     try {
-      const info2 = await stat2(path3);
+      const info2 = await stat2(path4);
       return { size: info2.size, lastModified: info2.mtimeMs };
     } catch {
       return {};
     }
   }
   /** True when a path does not resolve to a readable file. */
-  async #missing(path3) {
+  async #missing(path4) {
     try {
-      await readFile2(path3);
+      await readFile3(path4);
       return false;
     } catch {
       return true;
@@ -23289,7 +24301,7 @@ function previewOf(text, limit = PREVIEW_LIMIT) {
 }
 
 // src/boot/auth-vault.ts
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync10, writeFileSync as writeFileSync7 } from "node:fs";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync12, writeFileSync as writeFileSync7 } from "node:fs";
 import { dirname as dirname6 } from "node:path";
 import {
   ensureFreshOAuthCredentials,
@@ -23313,9 +24325,9 @@ function normaliseRecord(value) {
   }
   return void 0;
 }
-function readAuthFile(path3) {
+function readAuthFile(path4) {
   try {
-    const text = readFileSync10(path3, "utf8");
+    const text = readFileSync12(path4, "utf8");
     const parsed = JSON.parse(text);
     if (parsed === null || typeof parsed !== "object") return {};
     const file = {};
@@ -23333,9 +24345,9 @@ function readAuthFile(path3) {
     return {};
   }
 }
-function writeAuthFile(path3, data) {
-  mkdirSync4(dirname6(path3), { recursive: true });
-  writeFileSync7(path3, `${JSON.stringify(data, null, 2)}
+function writeAuthFile(path4, data) {
+  mkdirSync4(dirname6(path4), { recursive: true });
+  writeFileSync7(path4, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
 }
 function toCredentials(record) {
@@ -23429,11 +24441,14 @@ function createAuthVault(authPath) {
   };
 }
 
+// src/boot/runners/repl-runner.ts
+init_server_mode();
+
 // src/boot/runners/session.ts
 init_conductor2();
-import { existsSync as existsSync6, readFileSync as readFileSync13 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join19 } from "node:path";
+import { existsSync as existsSync6, readFileSync as readFileSync15 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { join as join21 } from "node:path";
 init_capability_deck();
 init_task_card();
 init_workflow_card();
@@ -23464,7 +24479,7 @@ function argPreview(args) {
   return ` (${oneLine2(String(text), 56)})`;
 }
 function buildActivity(messages) {
-  const out = [];
+  const out2 = [];
   for (const message of messages) {
     if (message.role !== "assistant") continue;
     const content = message.content;
@@ -23472,14 +24487,50 @@ function buildActivity(messages) {
     for (const part of content) {
       const p = part;
       if (p.type === "text" && typeof p.text === "string" && p.text.trim() || p.type === "thinking" && typeof p.thinking === "string" && p.thinking.trim()) {
-        out.push({ tone: "reason", text: oneLine2(p.text ?? p.thinking) });
+        out2.push({ tone: "reason", text: oneLine2(p.text ?? p.thinking) });
       } else if (p.type === "toolCall" && typeof p.name === "string") {
         const name = p.name.charAt(0).toUpperCase() + p.name.slice(1);
-        out.push({ tone: "tool", text: `${name}${argPreview(p.arguments)}` });
+        out2.push({ tone: "tool", text: `${name}${argPreview(p.arguments)}` });
       }
     }
   }
-  return out.slice(-14);
+  return out2.slice(-14);
+}
+var MAX_PARALLEL_TASKS = (() => {
+  const n = parseInt(process.env.INDUS_MAX_PARALLEL_TASKS ?? "", 10);
+  return Number.isFinite(n) && n >= 1 ? n : 2;
+})();
+var MAX_REPORT_CHARS = (() => {
+  const n = parseInt(process.env.INDUS_MAX_DELEGATE_REPORT_CHARS ?? "", 10);
+  return Number.isFinite(n) && n >= 1e3 ? n : 48e3;
+})();
+var activeTasks = 0;
+var taskQueue = [];
+async function acquireTaskSlot() {
+  if (activeTasks < MAX_PARALLEL_TASKS) {
+    activeTasks++;
+  } else {
+    await new Promise((resolve8) => taskQueue.push(resolve8));
+  }
+  let released = false;
+  return () => {
+    if (released) return;
+    released = true;
+    const next = taskQueue.shift();
+    if (next) next();
+    else activeTasks--;
+  };
+}
+function clampReport(report) {
+  if (report.length <= MAX_REPORT_CHARS) return report;
+  const head = Math.floor(MAX_REPORT_CHARS * 0.7);
+  const tail = MAX_REPORT_CHARS - head;
+  const omitted = report.length - MAX_REPORT_CHARS;
+  return `${report.slice(0, head)}
+
+\u2026[delegate report truncated \u2014 ${omitted} characters omitted to protect parent context]\u2026
+
+${report.slice(report.length - tail)}`;
 }
 function finalAssistantText2(messages) {
   for (let i = messages.length - 1; i >= 0; i--) {
@@ -23507,48 +24558,65 @@ function createDelegateRunner(opts) {
 
 Context:
 ${request.context}` : request.objective;
-      const agent = opts.spawn?.(request.objective, request.context) ?? new Agent3({
-        initialState: {
-          // `model` is defined here: the early-return above guaranteed it when
-          // no `spawn` seam was given.
-          model,
-          systemPrompt: opts.system,
-          // The sub-agent's deck — the `'authoring'` profile excludes the
-          // `task` card, so the sub-agent cannot recurse into delegation.
-          tools: opts.tools?.() ?? provisionDeck("authoring", { cwd: opts.cwd }).tools()
-        },
-        ...opts.getApiKey ? { getApiKey: opts.getApiKey } : {}
-      });
-      const onAbort = () => agent.abort();
-      signal?.addEventListener("abort", onAbort, { once: true });
-      let lastSignature = "";
-      const reportProgress = () => {
-        if (!onProgress) return;
-        const tokens = sumTokens(agent.state.messages);
-        const activity = buildActivity(agent.state.messages);
-        const signature2 = `${tokens}:${activity.length}`;
-        if (signature2 !== lastSignature) {
-          lastSignature = signature2;
-          onProgress({ tokens, activity });
-        }
-      };
-      const offProgress = onProgress ? agent.subscribe?.(reportProgress) : void 0;
+      const gatewayBaseUrls = await opts.getGatewayBaseUrls?.();
+      const releaseSlot = await acquireTaskSlot();
       try {
-        await agent.prompt(objective);
-        reportProgress();
-      } catch (cause) {
-        const message = cause instanceof Error ? cause.message : String(cause);
-        return { ok: false, report: message || "delegation failed" };
+        if (signal?.aborted) {
+          return { ok: false, report: "delegation aborted" };
+        }
+        let agent = opts.spawn?.(request.objective, request.context);
+        if (agent === void 0) {
+          const tools = opts.tools?.() ?? provisionDeck("authoring", { cwd: opts.cwd }).tools();
+          agent = new Agent3({
+            initialState: {
+              // `model` is defined here: the early-return above guaranteed it when
+              // no `spawn` seam was given. In server mode, route it through the
+              // gateway (freshly resolved above) rather than the raw provider url.
+              model: withGatewayBaseUrl(model, gatewayBaseUrls),
+              systemPrompt: opts.system,
+              tools
+            },
+            ...opts.getApiKey ? { getApiKey: opts.getApiKey } : {},
+            // Gate the sub-agent's inner tool loop with the parent session's live
+            // policy (rules + current mode). Resolver-less: `ask` denies — a
+            // sub-agent cannot prompt the user — while deny rules, plan mode, and
+            // the catastrophic-bash blocklist are enforced per inner tool call.
+            ...opts.permissionPolicy !== void 0 ? { canUseTool: createSubagentPermissionGate(opts.permissionPolicy, tools) } : {}
+          });
+        }
+        const onAbort = () => agent.abort();
+        signal?.addEventListener("abort", onAbort, { once: true });
+        let lastSignature = "";
+        const reportProgress = () => {
+          if (!onProgress) return;
+          const tokens = sumTokens(agent.state.messages);
+          const activity = buildActivity(agent.state.messages);
+          const signature2 = `${tokens}:${activity.length}`;
+          if (signature2 !== lastSignature) {
+            lastSignature = signature2;
+            onProgress({ tokens, activity });
+          }
+        };
+        const offProgress = onProgress ? agent.subscribe?.(reportProgress) : void 0;
+        try {
+          await agent.prompt(objective);
+          reportProgress();
+        } catch (cause) {
+          const message = cause instanceof Error ? cause.message : String(cause);
+          return { ok: false, report: clampReport(message || "delegation failed") };
+        } finally {
+          offProgress?.();
+          signal?.removeEventListener("abort", onAbort);
+        }
+        const error = agent.state.error;
+        const report = finalAssistantText2(agent.state.messages);
+        return {
+          ok: error === void 0 && report.length > 0,
+          report: clampReport(error ?? (report || "(no output)"))
+        };
       } finally {
-        offProgress?.();
-        signal?.removeEventListener("abort", onAbort);
+        releaseSlot();
       }
-      const error = agent.state.error;
-      const report = finalAssistantText2(agent.state.messages);
-      return {
-        ok: error === void 0 && report.length > 0,
-        report: error ?? (report || "(no output)")
-      };
     }
   };
 }
@@ -23659,7 +24727,7 @@ var CheckpointStore = class {
   snapshotFor(nodeId) {
     const paths = this.byNode.get(nodeId);
     if (paths === void 0) return [];
-    return [...paths].map(([path3, previous]) => ({ path: path3, previous }));
+    return [...paths].map(([path4, previous]) => ({ path: path4, previous }));
   }
   /** Whether a node has ANY recorded file snapshot (the picker's restore gate). */
   hasSnapshot(nodeId) {
@@ -23684,15 +24752,15 @@ var CheckpointStore = class {
   restore(nodeId) {
     const snapshots = this.snapshotFor(nodeId);
     const restored = [];
-    for (const { path: path3, previous } of snapshots) {
+    for (const { path: path4, previous } of snapshots) {
       try {
         if (previous === null) {
-          rmSync(path3, { force: true });
+          rmSync(path4, { force: true });
         } else {
-          mkdirSync5(dirname7(path3), { recursive: true });
-          writeFileSync8(path3, previous, "utf8");
+          mkdirSync5(dirname7(path4), { recursive: true });
+          writeFileSync8(path4, previous, "utf8");
         }
-        restored.push(path3);
+        restored.push(path4);
       } catch {
       }
     }
@@ -23755,7 +24823,7 @@ function addonFault(kind, message, detail) {
 
 // src/addons/sandbox.ts
 import { createJiti } from "jiti";
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir7 } from "node:os";
 import { isAbsolute as isAbsolute4, resolve as resolvePathSegments } from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
 var typeboxNamespace = __toESM(require_cjs(), 1);
@@ -23795,17 +24863,17 @@ var INVISIBLE_CODE_POINTS = [
 ];
 var INVISIBLE_SET = new Set(INVISIBLE_CODE_POINTS);
 function scrubInvisible(raw) {
-  let out = "";
+  let out2 = "";
   for (const char of raw) {
     const code = char.codePointAt(0);
     if (code !== void 0 && INVISIBLE_SET.has(code)) {
       continue;
     }
-    out += char;
+    out2 += char;
   }
-  return out.trim();
+  return out2.trim();
 }
-function expandPath(raw, home = homedir5()) {
+function expandPath(raw, home = homedir7()) {
   const cleaned = scrubInvisible(raw);
   if (cleaned === "~") {
     return home;
@@ -23815,7 +24883,7 @@ function expandPath(raw, home = homedir5()) {
   }
   return cleaned;
 }
-function resolvePath(raw, base = process.cwd(), home = homedir5()) {
+function resolvePath(raw, base = process.cwd(), home = homedir7()) {
   const expanded = expandPath(raw, home);
   return isAbsolute4(expanded) ? resolvePathSegments(expanded) : resolvePathSegments(base, expanded);
 }
@@ -23837,9 +24905,9 @@ function resolveSpecifierPath(specifier) {
 function buildAliasMap() {
   const map = {};
   for (const specifier of BUNDLED_NAMESPACES) {
-    const path3 = resolveSpecifierPath(specifier);
-    if (path3 !== void 0) {
-      map[specifier] = path3;
+    const path4 = resolveSpecifierPath(specifier);
+    if (path4 !== void 0) {
+      map[specifier] = path4;
     }
   }
   return map;
@@ -23885,10 +24953,10 @@ function isObject(value) {
 function createJitiLoader(options = {}) {
   const jiti = createJiti(import.meta.url, jitiOptionsForRuntime());
   const base = options.base ?? process.cwd();
-  const home = options.home ?? homedir5();
+  const home = options.home ?? homedir7();
   return {
-    async load(path3) {
-      const absolute = resolvePath(path3, base, home);
+    async load(path4) {
+      const absolute = resolvePath(path4, base, home);
       const specifier = pathToFileURL(absolute).href;
       const imported = await jiti.import(specifier);
       const manifest = toManifest(imported);
@@ -23903,8 +24971,8 @@ function createJitiLoader(options = {}) {
 }
 
 // src/addons/manifest.ts
-import { readFileSync as readFileSync11, readdirSync as readdirSync4, statSync as statSync4 } from "node:fs";
-import { basename as basename6, extname as extname4, isAbsolute as isAbsolute5, join as join17, resolve as resolve7 } from "node:path";
+import { readFileSync as readFileSync13, readdirSync as readdirSync4, statSync as statSync4 } from "node:fs";
+import { basename as basename6, extname as extname4, isAbsolute as isAbsolute5, join as join19, resolve as resolve7 } from "node:path";
 var ENTRY_EXTENSIONS = [
   ".ts",
   ".tsx",
@@ -23921,9 +24989,9 @@ function isHidden(name) {
 function hasEntryExtension(name) {
   return ENTRY_EXTENSIONS.includes(extname4(name).toLowerCase());
 }
-function entryKind(path3) {
+function entryKind(path4) {
   try {
-    const stat3 = statSync4(path3);
+    const stat3 = statSync4(path4);
     if (stat3.isDirectory()) return "directory";
     if (stat3.isFile()) return "file";
     return void 0;
@@ -23939,12 +25007,12 @@ function listNames(dir) {
   }
 }
 function readManifestEntry(packageDir) {
-  const manifestPath = join17(packageDir, "package.json");
+  const manifestPath = join19(packageDir, "package.json");
   if (entryKind(manifestPath) !== "file") {
     return void 0;
   }
   try {
-    const parsed = JSON.parse(readFileSync11(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync13(manifestPath, "utf8"));
     if (typeof parsed !== "object" || parsed === null) {
       return void 0;
     }
@@ -23964,7 +25032,7 @@ function resolvePackageEntry(packageDir) {
   }
   for (const base of INDEX_BASENAMES) {
     for (const ext of ENTRY_EXTENSIONS) {
-      const candidate = join17(packageDir, `${base}${ext}`);
+      const candidate = join19(packageDir, `${base}${ext}`);
       if (entryKind(candidate) === "file") {
         return candidate;
       }
@@ -23976,13 +25044,13 @@ function resolveTopLevelEntry(dir, name) {
   if (isHidden(name)) {
     return void 0;
   }
-  const path3 = join17(dir, name);
-  const kind = entryKind(path3);
+  const path4 = join19(dir, name);
+  const kind = entryKind(path4);
   if (kind === "file") {
-    return hasEntryExtension(name) ? path3 : void 0;
+    return hasEntryExtension(name) ? path4 : void 0;
   }
   if (kind === "directory") {
-    return resolvePackageEntry(path3);
+    return resolvePackageEntry(path4);
   }
   return void 0;
 }
@@ -23999,7 +25067,7 @@ function discoverAddons(dir) {
 function deriveAddonId(entryPath) {
   const file = basename6(entryPath);
   const stem = file.slice(0, file.length - extname4(file).length);
-  const label2 = INDEX_BASENAMES.includes(stem) ? basename6(join17(entryPath, "..")) : stem;
+  const label2 = INDEX_BASENAMES.includes(stem) ? basename6(join19(entryPath, "..")) : stem;
   return addonId(label2.length > 0 ? label2 : entryPath);
 }
 function addonsDirFor(workspace, dir = ADDONS_DIR) {
@@ -24016,12 +25084,12 @@ function discoverSources(discovery) {
   }
   const seen = /* @__PURE__ */ new Set();
   const sources = [];
-  for (const path3 of paths) {
-    if (seen.has(path3)) {
+  for (const path4 of paths) {
+    if (seen.has(path4)) {
       continue;
     }
-    seen.add(path3);
-    sources.push({ id: deriveAddonId(path3), path: path3 });
+    seen.add(path4);
+    sources.push({ id: deriveAddonId(path4), path: path4 });
   }
   return sources;
 }
@@ -24764,8 +25832,8 @@ function concatAddonTools(deck, bundle) {
 
 // src/boot/runners/memdir.ts
 init_capability_deck();
-import { existsSync as existsSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join18 } from "node:path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync14, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join20 } from "node:path";
 var MEMORY_ENTRYPOINT = "MEMORY.md";
 var MAX_ENTRYPOINT_LINES = 200;
 var MAX_ENTRYPOINT_BYTES = 25e3;
@@ -24791,19 +25859,19 @@ function truncateEntrypointContent(raw) {
 }
 function memoryDirFor(workspace, cwd) {
   const slug = cwd.replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-  return join18(workspace.profileDir, "memory", `--${slug}--`);
+  return join20(workspace.profileDir, "memory", `--${slug}--`);
 }
 var DiskMemoryStore = class {
   constructor(memDir) {
     this.memDir = memDir;
-    this.file = join18(memDir, MEMORY_ENTRYPOINT);
+    this.file = join20(memDir, MEMORY_ENTRYPOINT);
   }
   memDir;
   file;
   /** The current note, or `""` when no file has been written yet. */
   read() {
     try {
-      return existsSync5(this.file) ? readFileSync12(this.file, "utf8") : "";
+      return existsSync5(this.file) ? readFileSync14(this.file, "utf8") : "";
     } catch {
       return "";
     }
@@ -24824,9 +25892,9 @@ ${line}`;
 function loadMemoryDoc(memDir) {
   let raw;
   try {
-    const file = join18(memDir, MEMORY_ENTRYPOINT);
+    const file = join20(memDir, MEMORY_ENTRYPOINT);
     if (!existsSync5(file)) return void 0;
-    raw = readFileSync12(file, "utf8");
+    raw = readFileSync14(file, "utf8");
   } catch {
     return void 0;
   }
@@ -24838,11 +25906,13 @@ function loadMemoryDoc(memDir) {
 // src/boot/runners/session.ts
 init_briefing();
 init_window_budget();
+init_server_token();
+init_server_mode();
 function authenticatedProviders(ctx) {
   try {
-    const path3 = ctx.workspace.authPath;
-    if (!existsSync6(path3)) return [];
-    const data = JSON.parse(readFileSync13(path3, "utf8"));
+    const path4 = ctx.workspace.authPath;
+    if (!existsSync6(path4)) return [];
+    const data = JSON.parse(readFileSync15(path4, "utf8"));
     return Object.keys(data).filter((id) => {
       const accounts = data[id];
       return id.length > 0 && accounts !== null && typeof accounts === "object" && Object.keys(accounts).length > 0;
@@ -24859,8 +25929,18 @@ var PREFERRED_DEFAULT = {
     "claude-sonnet-4-0",
     "claude-opus-4-5"
   ],
-  openai: ["gpt-5.1", "gpt-4.1", "gpt-4o"]
+  openai: ["gpt-5.1", "gpt-4.1", "gpt-4o"],
+  minimax: ["MiniMax-M3", "MiniMax-M2.7", "MiniMax-M2.5"],
+  sarvam: ["sarvam-105b", "sarvam-30b"]
 };
+function hasServerSessionSync() {
+  try {
+    const token = JSON.parse(readFileSync15(TOKEN_FILE, "utf8"));
+    return typeof token.expires_at === "string" && new Date(token.expires_at).getTime() - Date.now() > 5 * 60 * 1e3;
+  } catch {
+    return false;
+  }
+}
 function providerDefaultModel(catalog, provider) {
   const cards = catalog.byProvider(provider);
   if (cards.length === 0) return void 0;
@@ -24880,6 +25960,12 @@ function resolveModelId(ctx) {
     const id = providerDefaultModel(catalog, provider);
     if (id !== void 0) return id;
   }
+  if (hasServerSessionSync()) {
+    for (const provider of serverTierProviders()) {
+      const id = providerDefaultModel(catalog, provider);
+      if (id !== void 0) return id;
+    }
+  }
   const card = new ModelMatcher(catalog).resolve({});
   return card?.id ?? "";
 }
@@ -24904,9 +25990,9 @@ var PROVIDER_ENV = {
 };
 function primeProviderEnv(ctx) {
   try {
-    const path3 = ctx.workspace.authPath;
-    if (!existsSync6(path3)) return;
-    const data = JSON.parse(readFileSync13(path3, "utf8"));
+    const path4 = ctx.workspace.authPath;
+    if (!existsSync6(path4)) return;
+    const data = JSON.parse(readFileSync15(path4, "utf8"));
     for (const [provider, accounts] of Object.entries(data)) {
       if (provider.startsWith("_") || accounts === null || typeof accounts !== "object") continue;
       const envVar = PROVIDER_ENV[provider];
@@ -24921,7 +26007,7 @@ function primeProviderEnv(ctx) {
   } catch {
   }
 }
-function buildKeyResolver(vault, requestedAccount) {
+function buildKeyResolver(ctx, vault, requestedAccount) {
   return async (provider) => {
     try {
       const candidates = [
@@ -24934,6 +26020,8 @@ function buildKeyResolver(vault, requestedAccount) {
         const key = await vault.readUsableKey(provider, account);
         if (key) return key;
       }
+      const server = await resolveServerMode(ctx, provider, vault);
+      if (server.serverMode && server.token) return server.token;
       return void 0;
     } catch {
       return void 0;
@@ -24946,7 +26034,7 @@ function resolveThinkingLevel(raw) {
 }
 function resolveText(value) {
   try {
-    if (existsSync6(value)) return readFileSync13(value, "utf8");
+    if (existsSync6(value)) return readFileSync15(value, "utf8");
   } catch {
   }
   return value;
@@ -24954,8 +26042,8 @@ function resolveText(value) {
 var PROFILE_DIR2 = ".indusagi";
 function skillRoots2(cwd) {
   return [
-    { dir: join19(cwd, PROFILE_DIR2, "skills"), origin: "project" },
-    { dir: join19(homedir6(), PROFILE_DIR2, "skills"), origin: "user" }
+    { dir: join21(cwd, PROFILE_DIR2, "skills"), origin: "project" },
+    { dir: join21(homedir8(), PROFILE_DIR2, "skills"), origin: "user" }
   ];
 }
 function gatherModelSkills(cwd) {
@@ -24987,7 +26075,7 @@ function selectTools(cwd, inv, runner, memoryStore, checkpoint, workflowRunner)
 }
 function composeSystem(tools, inv, cwd, skills = [], memoryDoc) {
   const contextDocs = [
-    ...gatherContextDocs(cwd, homedir6()),
+    ...gatherContextDocs(cwd, homedir8()),
     ...memoryDoc ? [memoryDoc] : []
   ];
   const base = inv.system !== void 0 ? resolveText(inv.system) : composeBriefing({ tools, contextDocs, skills });
@@ -25005,9 +26093,9 @@ async function loadMcpTools(inv, cwd) {
   console.error = () => {
   };
   try {
-    for (const path3 of paths) {
+    for (const path4 of paths) {
       try {
-        const servers = loadMCPConfig2(path3);
+        const servers = loadMCPConfig2(path4);
         if (servers.length === 0) continue;
         const pool = new MCPClientPool2({ servers });
         await pool.connectAll();
@@ -25026,7 +26114,7 @@ async function loadMcpTools(inv, cwd) {
 }
 function sessionScopeDir(sessionsRoot, cwd) {
   const slug = cwd.replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-  return join19(sessionsRoot, `--${slug}--`);
+  return join21(sessionsRoot, `--${slug}--`);
 }
 function lastUserTurnStart(messages) {
   for (let i = messages.length - 1; i >= 0; i--) {
@@ -25036,7 +26124,11 @@ function lastUserTurnStart(messages) {
 }
 var condenseTranscript = async (messages, opts) => {
   const model = opts?.model;
-  const deps = model ? { model } : {};
+  const deps = model ? {
+    model,
+    ...opts?.apiKey !== void 0 ? { apiKey: opts.apiKey } : {},
+    ...opts?.signal !== void 0 ? { signal: opts.signal } : {}
+  } : {};
   const cleared = clearStaleToolResults(messages);
   if (opts?.force) {
     const cut = lastUserTurnStart(cleared);
@@ -25084,10 +26176,8 @@ function readOnlyNamesFromDeck(tools) {
   }
   return names;
 }
-function buildPermissionGate(store, tools, planReachable = false) {
-  const rules = gatherPermissionRules(store);
-  const mode = resolveDefaultMode(store);
-  if (rules.length === 0 && (mode === "default" || mode === "bypass") && !planReachable) {
+function buildPermissionGate(rules, mode, tools, planReachable = false) {
+  if (rules.length === 0 && mode === "bypass" && !planReachable) {
     return void 0;
   }
   const readOnlyToolNames = readOnlyNamesFromDeck(tools);
@@ -25097,9 +26187,17 @@ function buildPermissionGate(store, tools, planReachable = false) {
     // The conductor's stable approval delegate: denies until the interactive
     // console installs a resolver via setApprovalResolver, then routes `ask`.
     ...requestApproval !== void 0 ? { requestApproval } : {},
+    // Session-scoped memory for `allow-always`: push into the SAME live array
+    // the gate (and the sub-agent gates) re-scan per call. Never persisted.
+    appendAllowRule: (rule) => rules.push(rule),
     readOnlyToolNames
   });
 }
+function resolveOpeningMode(inv, store) {
+  const raw = inv.flags["permission-mode"];
+  if (typeof raw === "string" && isPermissionMode(raw)) return raw;
+  return resolveDefaultMode(store);
+}
 async function buildSessionConductor(ctx) {
   primeProviderEnv(ctx);
   const inv = ctx.invocation;
@@ -25110,12 +26208,35 @@ async function buildSessionConductor(ctx) {
   const memDir = memoryDirFor(ctx.workspace, cwd);
   const memoryStore = new DiskMemoryStore(memDir);
   const memoryDoc = loadMemoryDoc(memDir);
-  const getApiKey = buildKeyResolver(createAuthVault(ctx.workspace.authPath), inv.account);
+  const vault = createAuthVault(ctx.workspace.authPath);
+  const getApiKey = buildKeyResolver(ctx, vault, inv.account);
+  const gatewayBaseUrls = await resolveServerGatewayUrls(ctx, vault);
+  const settings = PreferenceStore.fromWorkspace(ctx.workspace, cwd);
+  const permissionRules = gatherPermissionRules(settings);
+  const permissionMode = resolveOpeningMode(inv, settings);
+  let liveConductor;
+  const subagentPolicy = {
+    rules: permissionRules,
+    mode: () => liveConductor?.permissionMode() ?? permissionMode
+  };
   const surveyBriefing = composeBriefing({
     tools: provisionDeck("authoring", { cwd }).tools()
   });
-  const runner = createDelegateRunner({ modelId, getApiKey, system: surveyBriefing, cwd });
-  const workflowRunner = createWorkflowAgentRunner({ modelId, getApiKey, cwd });
+  const runner = createDelegateRunner({
+    modelId,
+    getApiKey,
+    system: surveyBriefing,
+    cwd,
+    getGatewayBaseUrls: () => resolveServerGatewayUrls(ctx, vault),
+    permissionPolicy: subagentPolicy
+  });
+  const workflowRunner = createWorkflowAgentRunner({
+    modelId,
+    getApiKey,
+    cwd,
+    getGatewayBaseUrls: () => resolveServerGatewayUrls(ctx, vault),
+    permissionPolicy: subagentPolicy
+  });
   const addons = await buildAddonHost(ctx);
   const checkpoint = createCheckpointStore();
   const deck = [
@@ -25127,11 +26248,9 @@ async function buildSessionConductor(ctx) {
   const system = composeSystem(tools, inv, cwd, skills, memoryDoc);
   const thinking = resolveThinkingLevel(inv.thinking);
   const fallbackModelId = inv.fallbackModelId;
-  const settings = PreferenceStore.fromWorkspace(ctx.workspace, cwd);
-  const permissionMode = resolveDefaultMode(settings);
   const planReachable = inv.mode === "repl";
-  const canUseTool = buildPermissionGate(settings, tools, planReachable);
-  return createSessionConductor(
+  const canUseTool = buildPermissionGate(permissionRules, permissionMode, tools, planReachable);
+  const conductor = createSessionConductor(
     {
       modelId,
       tools,
@@ -25149,12 +26268,19 @@ async function buildSessionConductor(ctx) {
       ...canUseTool !== void 0 ? { canUseTool } : {},
       ...thinking !== void 0 ? { thinking } : {},
       ...workspace ? { workspace } : {},
-      ...fallbackModelId !== void 0 ? { fallbackModelId } : {}
+      ...fallbackModelId !== void 0 ? { fallbackModelId } : {},
+      // When server mode is active for the bound model's provider, hand the
+      // conductor the gateway base url. A4 (`conductor.ts`) clones `card.model`
+      // with this `baseUrl` so the existing model card routes through the indus
+      // gateway; absent (the local-key path) the conductor binds the card as-is.
+      ...Object.keys(gatewayBaseUrls).length > 0 ? { gatewayBaseUrls } : {}
     },
     // The live condense hook: `/compact` and auto-compaction fold older turns
     // into a digest. (Tests that build conductors directly keep the no-op default.)
     { condense: condenseTranscript }
   );
+  liveConductor = conductor;
+  return conductor;
 }
 function oneshotPrompts(ctx) {
   const prompts = [];
@@ -25166,9 +26292,10 @@ function oneshotPrompts(ctx) {
 }
 
 // src/boot/runners/repl-runner.ts
-var EXIT_OK = 0;
+var EXIT_OK2 = 0;
 function buildOverlayServices(ctx, conductor) {
   const cwd = ctx.invocation.cwd ?? process.cwd();
+  const vault = createAuthVault(ctx.workspace.authPath);
   return {
     conductor,
     settings: PreferenceStore.fromWorkspace(ctx.workspace, cwd),
@@ -25178,7 +26305,11 @@ function buildOverlayServices(ctx, conductor) {
     listLoginProviders,
     startOAuthLogin,
     openLoginUrl,
-    vault: createAuthVault(ctx.workspace.authPath)
+    vault,
+    async refreshGatewayRouting() {
+      const map = await resolveServerGatewayUrls(ctx, vault);
+      conductor.updateGatewayBaseUrls(map);
+    }
   };
 }
 function toResumeRef(row) {
@@ -25255,7 +26386,7 @@ var replRunner = {
       conductor,
       initialInput === void 0 ? { services } : { initialInput, services }
     );
-    return EXIT_OK;
+    return EXIT_OK2;
   }
 };
 
@@ -25401,10 +26532,10 @@ var inertDialog = Object.freeze({
   tell(_kind, _payload) {
   }
 });
-var EXIT_OK2 = 0;
+var EXIT_OK3 = 0;
 var EXIT_FAULT = 1;
 function exitCodeFor(state) {
-  return state.phase === "faulted" ? EXIT_FAULT : EXIT_OK2;
+  return state.phase === "faulted" ? EXIT_FAULT : EXIT_OK3;
 }
 function textStrategy() {
   let answer = "";
@@ -25813,7 +26944,7 @@ var oneshotRunner = {
 };
 
 // src/boot/runners/link-runner.ts
-var EXIT_OK3 = 0;
+var EXIT_OK4 = 0;
 var STDOUT2 = {
   write(chunk, cb) {
     return process.stdout.write(chunk, cb);
@@ -25831,7 +26962,7 @@ var linkRunner = {
       out: STDOUT2
     });
     await server.done;
-    return EXIT_OK3;
+    return EXIT_OK4;
   }
 };
 
@@ -25847,8 +26978,8 @@ function selectRunner(inv) {
 }
 
 // src/boot/boot.ts
-var EXIT_OK4 = 0;
-var EXIT_FAILURE = 1;
+var EXIT_OK5 = 0;
+var EXIT_FAILURE2 = 1;
 function seedContext(argv) {
   const workspace = createWorkspace();
   const invocation = tokenizeInvocation(argv);
@@ -25890,7 +27021,7 @@ async function runCredential(ctx) {
 `);
     return EXIT_CREDENTIAL_FAULT;
   }
-  return EXIT_OK4;
+  return EXIT_OK5;
 }
 async function runPackage(ctx) {
   const result = await runPackageCommand(ctx.argv, {
@@ -25899,7 +27030,7 @@ async function runPackage(ctx) {
   if (!result.handled) {
     return void 0;
   }
-  return result.code ?? EXIT_OK4;
+  return result.code ?? EXIT_OK5;
 }
 async function boot(argv) {
   const seeded = seedContext(argv);
@@ -25907,22 +27038,26 @@ async function boot(argv) {
   if (credential !== void 0) {
     return credential;
   }
+  const login = await runLogin(seeded);
+  if (login !== void 0) {
+    return login;
+  }
   const pkg = await runPackage(seeded);
   if (pkg !== void 0) {
     return pkg;
   }
   if (wantsHelp(seeded.invocation)) {
     renderHelp();
-    return EXIT_OK4;
+    return EXIT_OK5;
   }
   if (wantsVersion(seeded.invocation)) {
     renderVersion();
-    return EXIT_OK4;
+    return EXIT_OK5;
   }
   if (seeded.invocation.listModels) {
     const filter = seeded.invocation.listModelsFilter;
     printModelCatalog(void 0, filter !== void 0 ? { search: filter } : {});
-    return EXIT_OK4;
+    return EXIT_OK5;
   }
   const ctx = await runStages(seeded);
   try {
@@ -25932,7 +27067,7 @@ async function boot(argv) {
     const message = error instanceof Error ? error.message : String(error);
     process.stderr.write(`${BRAND.name}: ${message}
 `);
-    return EXIT_FAILURE;
+    return EXIT_FAILURE2;
   } finally {
     await drainClosables(ctx);
   }
@@ -27135,14 +28270,14 @@ function keyMatches(rule, key) {
   return matcher.test(key);
 }
 function applyValueRules(rules, text) {
-  let out = text;
+  let out2 = text;
   for (const rule of rules) {
     const pattern = rule.value;
     if (pattern === void 0) continue;
     if (pattern.global || pattern.sticky) pattern.lastIndex = 0;
-    out = out.replace(pattern, REDACTED_TOKEN);
+    out2 = out2.replace(pattern, REDACTED_TOKEN);
   }
-  return out;
+  return out2;
 }
 function createRedactor(rules = DEFAULT_REDACTION_RULES, options = {}) {
   const frozenRules = Object.freeze([...rules]);
@@ -27174,12 +28309,12 @@ function createRedactor(rules = DEFAULT_REDACTION_RULES, options = {}) {
       return Object.freeze(value.map((item) => scrubNode(item, void 0)));
     }
     if (value !== null && typeof value === "object") {
-      const out = {};
+      const out2 = {};
       for (const [k, v] of Object.entries(value)) {
         if (isOmitted(k)) continue;
-        out[k] = scrubNode(v, k);
+        out2[k] = scrubNode(v, k);
       }
-      return Object.freeze(out);
+      return Object.freeze(out2);
     }
     return value;
   }
@@ -27187,12 +28322,12 @@ function createRedactor(rules = DEFAULT_REDACTION_RULES, options = {}) {
     return scrubNode(value, void 0);
   }
   function scrubAttributes(attributes) {
-    const out = {};
+    const out2 = {};
     for (const [k, v] of Object.entries(attributes)) {
       if (isOmitted(k)) continue;
-      out[k] = scrubNode(v, k);
+      out2[k] = scrubNode(v, k);
     }
-    return Object.freeze(out);
+    return Object.freeze(out2);
   }
   function scrubFault(fault) {
     const scrubbed = {
@@ -27297,7 +28432,7 @@ function createConsoleSink(options = {}) {
 }
 
 // src/insight/sinks/file.ts
-import { open, mkdir as mkdir2 } from "node:fs/promises";
+import { open, mkdir as mkdir3 } from "node:fs/promises";
 import { dirname as dirname8 } from "node:path";
 function createFileSink(options) {
   const id = options.id ?? "file";
@@ -27310,7 +28445,7 @@ function createFileSink(options) {
         for await (const signal of stream) {
           if (handle === null) {
             if (options.mkdirp ?? true) {
-              await mkdir2(dirname8(options.path), { recursive: true });
+              await mkdir3(dirname8(options.path), { recursive: true });
             }
             handle = await open(options.path, mode);
           }