larkway 0.3.27 → 0.3.29

package/dist/main.js

@@ -10379,6 +10379,769 @@ var require_proxy_from_env = __commonJS({
   }
 });
 
+// node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js
+var require_ms = __commonJS({
+  "node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js"(exports, module) {
+    var s = 1e3;
+    var m = s * 60;
+    var h = m * 60;
+    var d = h * 24;
+    var w = d * 7;
+    var y = d * 365.25;
+    module.exports = function(val, options) {
+      options = options || {};
+      var type2 = typeof val;
+      if (type2 === "string" && val.length > 0) {
+        return parse(val);
+      } else if (type2 === "number" && isFinite(val)) {
+        return options.long ? fmtLong(val) : fmtShort(val);
+      }
+      throw new Error(
+        "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
+      );
+    };
+    function parse(str2) {
+      str2 = String(str2);
+      if (str2.length > 100) {
+        return;
+      }
+      var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(
+        str2
+      );
+      if (!match) {
+        return;
+      }
+      var n = parseFloat(match[1]);
+      var type2 = (match[2] || "ms").toLowerCase();
+      switch (type2) {
+        case "years":
+        case "year":
+        case "yrs":
+        case "yr":
+        case "y":
+          return n * y;
+        case "weeks":
+        case "week":
+        case "w":
+          return n * w;
+        case "days":
+        case "day":
+        case "d":
+          return n * d;
+        case "hours":
+        case "hour":
+        case "hrs":
+        case "hr":
+        case "h":
+          return n * h;
+        case "minutes":
+        case "minute":
+        case "mins":
+        case "min":
+        case "m":
+          return n * m;
+        case "seconds":
+        case "second":
+        case "secs":
+        case "sec":
+        case "s":
+          return n * s;
+        case "milliseconds":
+        case "millisecond":
+        case "msecs":
+        case "msec":
+        case "ms":
+          return n;
+        default:
+          return void 0;
+      }
+    }
+    function fmtShort(ms) {
+      var msAbs = Math.abs(ms);
+      if (msAbs >= d) {
+        return Math.round(ms / d) + "d";
+      }
+      if (msAbs >= h) {
+        return Math.round(ms / h) + "h";
+      }
+      if (msAbs >= m) {
+        return Math.round(ms / m) + "m";
+      }
+      if (msAbs >= s) {
+        return Math.round(ms / s) + "s";
+      }
+      return ms + "ms";
+    }
+    function fmtLong(ms) {
+      var msAbs = Math.abs(ms);
+      if (msAbs >= d) {
+        return plural(ms, msAbs, d, "day");
+      }
+      if (msAbs >= h) {
+        return plural(ms, msAbs, h, "hour");
+      }
+      if (msAbs >= m) {
+        return plural(ms, msAbs, m, "minute");
+      }
+      if (msAbs >= s) {
+        return plural(ms, msAbs, s, "second");
+      }
+      return ms + " ms";
+    }
+    function plural(ms, msAbs, n, name) {
+      var isPlural = msAbs >= n * 1.5;
+      return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
+    }
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/common.js
+var require_common = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/common.js"(exports, module) {
+    function setup(env) {
+      createDebug.debug = createDebug;
+      createDebug.default = createDebug;
+      createDebug.coerce = coerce2;
+      createDebug.disable = disable;
+      createDebug.enable = enable;
+      createDebug.enabled = enabled;
+      createDebug.humanize = require_ms();
+      createDebug.destroy = destroy;
+      Object.keys(env).forEach((key) => {
+        createDebug[key] = env[key];
+      });
+      createDebug.names = [];
+      createDebug.skips = [];
+      createDebug.formatters = {};
+      function selectColor(namespace) {
+        let hash = 0;
+        for (let i = 0; i < namespace.length; i++) {
+          hash = (hash << 5) - hash + namespace.charCodeAt(i);
+          hash |= 0;
+        }
+        return createDebug.colors[Math.abs(hash) % createDebug.colors.length];
+      }
+      createDebug.selectColor = selectColor;
+      function createDebug(namespace) {
+        let prevTime;
+        let enableOverride = null;
+        let namespacesCache;
+        let enabledCache;
+        function debug(...args) {
+          if (!debug.enabled) {
+            return;
+          }
+          const self2 = debug;
+          const curr = Number(/* @__PURE__ */ new Date());
+          const ms = curr - (prevTime || curr);
+          self2.diff = ms;
+          self2.prev = prevTime;
+          self2.curr = curr;
+          prevTime = curr;
+          args[0] = createDebug.coerce(args[0]);
+          if (typeof args[0] !== "string") {
+            args.unshift("%O");
+          }
+          let index = 0;
+          args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
+            if (match === "%%") {
+              return "%";
+            }
+            index++;
+            const formatter = createDebug.formatters[format];
+            if (typeof formatter === "function") {
+              const val = args[index];
+              match = formatter.call(self2, val);
+              args.splice(index, 1);
+              index--;
+            }
+            return match;
+          });
+          createDebug.formatArgs.call(self2, args);
+          const logFn = self2.log || createDebug.log;
+          logFn.apply(self2, args);
+        }
+        debug.namespace = namespace;
+        debug.useColors = createDebug.useColors();
+        debug.color = createDebug.selectColor(namespace);
+        debug.extend = extend3;
+        debug.destroy = createDebug.destroy;
+        Object.defineProperty(debug, "enabled", {
+          enumerable: true,
+          configurable: false,
+          get: () => {
+            if (enableOverride !== null) {
+              return enableOverride;
+            }
+            if (namespacesCache !== createDebug.namespaces) {
+              namespacesCache = createDebug.namespaces;
+              enabledCache = createDebug.enabled(namespace);
+            }
+            return enabledCache;
+          },
+          set: (v) => {
+            enableOverride = v;
+          }
+        });
+        if (typeof createDebug.init === "function") {
+          createDebug.init(debug);
+        }
+        return debug;
+      }
+      function extend3(namespace, delimiter) {
+        const newDebug = createDebug(this.namespace + (typeof delimiter === "undefined" ? ":" : delimiter) + namespace);
+        newDebug.log = this.log;
+        return newDebug;
+      }
+      function enable(namespaces) {
+        createDebug.save(namespaces);
+        createDebug.namespaces = namespaces;
+        createDebug.names = [];
+        createDebug.skips = [];
+        const split = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
+        for (const ns of split) {
+          if (ns[0] === "-") {
+            createDebug.skips.push(ns.slice(1));
+          } else {
+            createDebug.names.push(ns);
+          }
+        }
+      }
+      function matchesTemplate(search, template) {
+        let searchIndex = 0;
+        let templateIndex = 0;
+        let starIndex = -1;
+        let matchIndex = 0;
+        while (searchIndex < search.length) {
+          if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) {
+            if (template[templateIndex] === "*") {
+              starIndex = templateIndex;
+              matchIndex = searchIndex;
+              templateIndex++;
+            } else {
+              searchIndex++;
+              templateIndex++;
+            }
+          } else if (starIndex !== -1) {
+            templateIndex = starIndex + 1;
+            matchIndex++;
+            searchIndex = matchIndex;
+          } else {
+            return false;
+          }
+        }
+        while (templateIndex < template.length && template[templateIndex] === "*") {
+          templateIndex++;
+        }
+        return templateIndex === template.length;
+      }
+      function disable() {
+        const namespaces = [
+          ...createDebug.names,
+          ...createDebug.skips.map((namespace) => "-" + namespace)
+        ].join(",");
+        createDebug.enable("");
+        return namespaces;
+      }
+      function enabled(name) {
+        for (const skip of createDebug.skips) {
+          if (matchesTemplate(name, skip)) {
+            return false;
+          }
+        }
+        for (const ns of createDebug.names) {
+          if (matchesTemplate(name, ns)) {
+            return true;
+          }
+        }
+        return false;
+      }
+      function coerce2(val) {
+        if (val instanceof Error) {
+          return val.stack || val.message;
+        }
+        return val;
+      }
+      function destroy() {
+        console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+      }
+      createDebug.enable(createDebug.load());
+      return createDebug;
+    }
+    module.exports = setup;
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/browser.js
+var require_browser = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/browser.js"(exports, module) {
+    exports.formatArgs = formatArgs;
+    exports.save = save;
+    exports.load = load2;
+    exports.useColors = useColors;
+    exports.storage = localstorage();
+    exports.destroy = /* @__PURE__ */ (() => {
+      let warned = false;
+      return () => {
+        if (!warned) {
+          warned = true;
+          console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+        }
+      };
+    })();
+    exports.colors = [
+      "#0000CC",
+      "#0000FF",
+      "#0033CC",
+      "#0033FF",
+      "#0066CC",
+      "#0066FF",
+      "#0099CC",
+      "#0099FF",
+      "#00CC00",
+      "#00CC33",
+      "#00CC66",
+      "#00CC99",
+      "#00CCCC",
+      "#00CCFF",
+      "#3300CC",
+      "#3300FF",
+      "#3333CC",
+      "#3333FF",
+      "#3366CC",
+      "#3366FF",
+      "#3399CC",
+      "#3399FF",
+      "#33CC00",
+      "#33CC33",
+      "#33CC66",
+      "#33CC99",
+      "#33CCCC",
+      "#33CCFF",
+      "#6600CC",
+      "#6600FF",
+      "#6633CC",
+      "#6633FF",
+      "#66CC00",
+      "#66CC33",
+      "#9900CC",
+      "#9900FF",
+      "#9933CC",
+      "#9933FF",
+      "#99CC00",
+      "#99CC33",
+      "#CC0000",
+      "#CC0033",
+      "#CC0066",
+      "#CC0099",
+      "#CC00CC",
+      "#CC00FF",
+      "#CC3300",
+      "#CC3333",
+      "#CC3366",
+      "#CC3399",
+      "#CC33CC",
+      "#CC33FF",
+      "#CC6600",
+      "#CC6633",
+      "#CC9900",
+      "#CC9933",
+      "#CCCC00",
+      "#CCCC33",
+      "#FF0000",
+      "#FF0033",
+      "#FF0066",
+      "#FF0099",
+      "#FF00CC",
+      "#FF00FF",
+      "#FF3300",
+      "#FF3333",
+      "#FF3366",
+      "#FF3399",
+      "#FF33CC",
+      "#FF33FF",
+      "#FF6600",
+      "#FF6633",
+      "#FF9900",
+      "#FF9933",
+      "#FFCC00",
+      "#FFCC33"
+    ];
+    function useColors() {
+      if (typeof window !== "undefined" && window.process && (window.process.type === "renderer" || window.process.__nwjs)) {
+        return true;
+      }
+      if (typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/)) {
+        return false;
+      }
+      let m;
+      return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://stackoverflow.com/a/398120/376773
+      typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
+      // https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages
+      typeof navigator !== "undefined" && navigator.userAgent && (m = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m[1], 10) >= 31 || // Double check webkit in userAgent just in case we are in a worker
+      typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/);
+    }
+    function formatArgs(args) {
+      args[0] = (this.useColors ? "%c" : "") + this.namespace + (this.useColors ? " %c" : " ") + args[0] + (this.useColors ? "%c " : " ") + "+" + module.exports.humanize(this.diff);
+      if (!this.useColors) {
+        return;
+      }
+      const c = "color: " + this.color;
+      args.splice(1, 0, c, "color: inherit");
+      let index = 0;
+      let lastC = 0;
+      args[0].replace(/%[a-zA-Z%]/g, (match) => {
+        if (match === "%%") {
+          return;
+        }
+        index++;
+        if (match === "%c") {
+          lastC = index;
+        }
+      });
+      args.splice(lastC, 0, c);
+    }
+    exports.log = console.debug || console.log || (() => {
+    });
+    function save(namespaces) {
+      try {
+        if (namespaces) {
+          exports.storage.setItem("debug", namespaces);
+        } else {
+          exports.storage.removeItem("debug");
+        }
+      } catch (error) {
+      }
+    }
+    function load2() {
+      let r;
+      try {
+        r = exports.storage.getItem("debug") || exports.storage.getItem("DEBUG");
+      } catch (error) {
+      }
+      if (!r && typeof process !== "undefined" && "env" in process) {
+        r = process.env.DEBUG;
+      }
+      return r;
+    }
+    function localstorage() {
+      try {
+        return localStorage;
+      } catch (error) {
+      }
+    }
+    module.exports = require_common()(exports);
+    var { formatters } = module.exports;
+    formatters.j = function(v) {
+      try {
+        return JSON.stringify(v);
+      } catch (error) {
+        return "[UnexpectedJSONParseError]: " + error.message;
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/has-flag@4.0.0/node_modules/has-flag/index.js
+var require_has_flag = __commonJS({
+  "node_modules/.pnpm/has-flag@4.0.0/node_modules/has-flag/index.js"(exports, module) {
+    "use strict";
+    module.exports = (flag, argv = process.argv) => {
+      const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
+      const position = argv.indexOf(prefix + flag);
+      const terminatorPosition = argv.indexOf("--");
+      return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
+    };
+  }
+});
+
+// node_modules/.pnpm/supports-color@7.2.0/node_modules/supports-color/index.js
+var require_supports_color = __commonJS({
+  "node_modules/.pnpm/supports-color@7.2.0/node_modules/supports-color/index.js"(exports, module) {
+    "use strict";
+    var os2 = __require("os");
+    var tty = __require("tty");
+    var hasFlag = require_has_flag();
+    var { env } = process;
+    var forceColor;
+    if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
+      forceColor = 0;
+    } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+      forceColor = 1;
+    }
+    if ("FORCE_COLOR" in env) {
+      if (env.FORCE_COLOR === "true") {
+        forceColor = 1;
+      } else if (env.FORCE_COLOR === "false") {
+        forceColor = 0;
+      } else {
+        forceColor = env.FORCE_COLOR.length === 0 ? 1 : Math.min(parseInt(env.FORCE_COLOR, 10), 3);
+      }
+    }
+    function translateLevel(level) {
+      if (level === 0) {
+        return false;
+      }
+      return {
+        level,
+        hasBasic: true,
+        has256: level >= 2,
+        has16m: level >= 3
+      };
+    }
+    function supportsColor(haveStream, streamIsTTY) {
+      if (forceColor === 0) {
+        return 0;
+      }
+      if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+        return 3;
+      }
+      if (hasFlag("color=256")) {
+        return 2;
+      }
+      if (haveStream && !streamIsTTY && forceColor === void 0) {
+        return 0;
+      }
+      const min = forceColor || 0;
+      if (env.TERM === "dumb") {
+        return min;
+      }
+      if (process.platform === "win32") {
+        const osRelease = os2.release().split(".");
+        if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
+          return Number(osRelease[2]) >= 14931 ? 3 : 2;
+        }
+        return 1;
+      }
+      if ("CI" in env) {
+        if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI", "GITHUB_ACTIONS", "BUILDKITE"].some((sign) => sign in env) || env.CI_NAME === "codeship") {
+          return 1;
+        }
+        return min;
+      }
+      if ("TEAMCITY_VERSION" in env) {
+        return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
+      }
+      if (env.COLORTERM === "truecolor") {
+        return 3;
+      }
+      if ("TERM_PROGRAM" in env) {
+        const version = parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+        switch (env.TERM_PROGRAM) {
+          case "iTerm.app":
+            return version >= 3 ? 3 : 2;
+          case "Apple_Terminal":
+            return 2;
+        }
+      }
+      if (/-256(color)?$/i.test(env.TERM)) {
+        return 2;
+      }
+      if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+        return 1;
+      }
+      if ("COLORTERM" in env) {
+        return 1;
+      }
+      return min;
+    }
+    function getSupportLevel(stream) {
+      const level = supportsColor(stream, stream && stream.isTTY);
+      return translateLevel(level);
+    }
+    module.exports = {
+      supportsColor: getSupportLevel,
+      stdout: translateLevel(supportsColor(true, tty.isatty(1))),
+      stderr: translateLevel(supportsColor(true, tty.isatty(2)))
+    };
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/node.js
+var require_node = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/node.js"(exports, module) {
+    var tty = __require("tty");
+    var util2 = __require("util");
+    exports.init = init;
+    exports.log = log;
+    exports.formatArgs = formatArgs;
+    exports.save = save;
+    exports.load = load2;
+    exports.useColors = useColors;
+    exports.destroy = util2.deprecate(
+      () => {
+      },
+      "Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`."
+    );
+    exports.colors = [6, 2, 3, 4, 5, 1];
+    try {
+      const supportsColor = require_supports_color();
+      if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
+        exports.colors = [
+          20,
+          21,
+          26,
+          27,
+          32,
+          33,
+          38,
+          39,
+          40,
+          41,
+          42,
+          43,
+          44,
+          45,
+          56,
+          57,
+          62,
+          63,
+          68,
+          69,
+          74,
+          75,
+          76,
+          77,
+          78,
+          79,
+          80,
+          81,
+          92,
+          93,
+          98,
+          99,
+          112,
+          113,
+          128,
+          129,
+          134,
+          135,
+          148,
+          149,
+          160,
+          161,
+          162,
+          163,
+          164,
+          165,
+          166,
+          167,
+          168,
+          169,
+          170,
+          171,
+          172,
+          173,
+          178,
+          179,
+          184,
+          185,
+          196,
+          197,
+          198,
+          199,
+          200,
+          201,
+          202,
+          203,
+          204,
+          205,
+          206,
+          207,
+          208,
+          209,
+          214,
+          215,
+          220,
+          221
+        ];
+      }
+    } catch (error) {
+    }
+    exports.inspectOpts = Object.keys(process.env).filter((key) => {
+      return /^debug_/i.test(key);
+    }).reduce((obj, key) => {
+      const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k) => {
+        return k.toUpperCase();
+      });
+      let val = process.env[key];
+      if (/^(yes|on|true|enabled)$/i.test(val)) {
+        val = true;
+      } else if (/^(no|off|false|disabled)$/i.test(val)) {
+        val = false;
+      } else if (val === "null") {
+        val = null;
+      } else {
+        val = Number(val);
+      }
+      obj[prop] = val;
+      return obj;
+    }, {});
+    function useColors() {
+      return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty.isatty(process.stderr.fd);
+    }
+    function formatArgs(args) {
+      const { namespace: name, useColors: useColors2 } = this;
+      if (useColors2) {
+        const c = this.color;
+        const colorCode = "\x1B[3" + (c < 8 ? c : "8;5;" + c);
+        const prefix = `  ${colorCode};1m${name} \x1B[0m`;
+        args[0] = prefix + args[0].split("\n").join("\n" + prefix);
+        args.push(colorCode + "m+" + module.exports.humanize(this.diff) + "\x1B[0m");
+      } else {
+        args[0] = getDate() + name + " " + args[0];
+      }
+    }
+    function getDate() {
+      if (exports.inspectOpts.hideDate) {
+        return "";
+      }
+      return (/* @__PURE__ */ new Date()).toISOString() + " ";
+    }
+    function log(...args) {
+      return process.stderr.write(util2.formatWithOptions(exports.inspectOpts, ...args) + "\n");
+    }
+    function save(namespaces) {
+      if (namespaces) {
+        process.env.DEBUG = namespaces;
+      } else {
+        delete process.env.DEBUG;
+      }
+    }
+    function load2() {
+      return process.env.DEBUG;
+    }
+    function init(debug) {
+      debug.inspectOpts = {};
+      const keys = Object.keys(exports.inspectOpts);
+      for (let i = 0; i < keys.length; i++) {
+        debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
+      }
+    }
+    module.exports = require_common()(exports);
+    var { formatters } = module.exports;
+    formatters.o = function(v) {
+      this.inspectOpts.colors = this.useColors;
+      return util2.inspect(v, this.inspectOpts).split("\n").map((str2) => str2.trim()).join(" ");
+    };
+    formatters.O = function(v) {
+      this.inspectOpts.colors = this.useColors;
+      return util2.inspect(v, this.inspectOpts);
+    };
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/index.js
+var require_src = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/index.js"(exports, module) {
+    if (typeof process === "undefined" || process.type === "renderer" || process.browser === true || process.__nwjs) {
+      module.exports = require_browser();
+    } else {
+      module.exports = require_node();
+    }
+  }
+});
+
 // node_modules/.pnpm/follow-redirects@1.16.0/node_modules/follow-redirects/debug.js
 var require_debug = __commonJS({
   "node_modules/.pnpm/follow-redirects@1.16.0/node_modules/follow-redirects/debug.js"(exports, module) {
@@ -10386,7 +11149,7 @@ var require_debug = __commonJS({
     module.exports = function() {
       if (!debug) {
         try {
-          debug = __require("debug")("follow-redirects");
+          debug = require_src()("follow-redirects");
         } catch (error) {
         }
         if (typeof debug !== "function") {
@@ -115112,6 +115875,10 @@ function resolveAgentWorkspacePath(agentId) {
 function resolveAgentWorkspaceSessionsDir(agentId) {
   return join(resolveAgentWorkspacePath(agentId), "sessions");
 }
+function resolveAgentSessionPath(agentId, threadId) {
+  assertSafePathSegment("threadId", threadId);
+  return join(resolveAgentWorkspaceSessionsDir(agentId), threadId);
+}
 function resolveAgentWorkspaceReposDir(agentId) {
   return join(resolveAgentWorkspacePath(agentId), "repos");
 }
@@ -115245,7 +116012,7 @@ See examples/config.example.json for the correct format.`
 // src/lark/channelClient.ts
 var import_node_sdk = __toESM(require_lib2(), 1);
 import { execFile as execFileCallback } from "node:child_process";
-import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
+import { mkdir, readFile as readFile2, writeFile, rename, unlink } from "node:fs/promises";
 import path3 from "node:path";
 import { promisify } from "node:util";
 
@@ -115766,9 +116533,12 @@ var execFile = promisify(execFileCallback);
 var LEARNED_CHATS_LIMIT = 100;
 var SEEN_MESSAGES_LIMIT = 1e3;
 var MAX_MESSAGE_ATTEMPTS = 5;
-var OPEN_CHAT_DISCOVERY_LOOKBACK_MS = 9e4;
+var OPEN_CHAT_DISCOVERY_LOOKBACK_BUFFER_MS = 3e4;
 var OPEN_CHAT_DISCOVERY_BOOTSTRAP_LOOKBACK_MS = 30 * 60 * 1e3;
 var PROCESSING_REACTION_EMOJI = "Typing";
+var DEFAULT_OPEN_CHAT_DISCOVERY_MS = 3e5;
+var OPEN_CHAT_DISCOVERY_JITTER_CAP_MS = 3e4;
+var OPEN_CHAT_DISCOVERY_MAX_BACKOFF_CYCLES = 8;
 var GAP_FILL_MAX_ATTEMPTS = 3;
 var GAP_FILL_BACKOFF_BASE_MS = 1e3;
 var UNRESOLVED_WINDOW_MAX_CHATS = 50;
@@ -115798,7 +116568,7 @@ function resolveOpenChatDiscoveryMs(ctorValue) {
   } else {
     const env = process.env["LARKWAY_OPEN_CHAT_DISCOVERY_MS"];
     const parsed = env !== void 0 ? Number(env) : Number.NaN;
-    raw = Number.isFinite(parsed) ? parsed : 6e4;
+    raw = Number.isFinite(parsed) ? parsed : DEFAULT_OPEN_CHAT_DISCOVERY_MS;
   }
   return Number.isFinite(raw) && raw > 0 ? raw : 0;
 }
@@ -115997,6 +116767,25 @@ var ChannelClient = class {
   openChatDiscoveryTimer = null;
   openChatDiscoveryRunning = false;
   openChatDiscoveryBootstrapped = false;
+  /**
+   * Consecutive discovery-cycle failures. Used to SKIP cycles with exponential
+   * backoff (storm: a failing +chat-list/gap-fill shouldn't re-fire every
+   * interval). Reset to 0 on the first clean cycle. {@link openChatDiscoverySkips}
+   * counts how many remaining cycles to skip before the next real attempt.
+   */
+  openChatDiscoveryFailures = 0;
+  openChatDiscoverySkips = 0;
+  /**
+   * Per-instance jitter offset (ms) applied to discovery scheduling so multiple
+   * bots on one host don't run discovery (and its history-pull burst) in
+   * lockstep. Computed once at startup. `Math.random` is fine here — this is
+   * runtime scheduling code, not a determinism-sensitive workflow script.
+   */
+  openChatDiscoveryJitterMs = Math.floor(
+    Math.random() * OPEN_CHAT_DISCOVERY_JITTER_CAP_MS
+  );
+  /** Monotonic suffix so overlapping atomic writes get distinct temp files. */
+  atomicWriteSeq = 0;
   processingReactions = /* @__PURE__ */ new Map();
   /**
    * Shared messageId -> threadId map. Populated by ChannelCardClient.createCard
@@ -116028,10 +116817,31 @@ var ChannelClient = class {
   setGapFillSleepForTest(fn) {
     this.gapFillSleep = fn;
   }
+  /**
+   * TEST SEAM (deletable): override the per-instance open-chat discovery startup
+   * jitter so tests can make the FIRST discovery run fire deterministically
+   * (jitter=0) instead of waiting up to {@link OPEN_CHAT_DISCOVERY_JITTER_CAP_MS}.
+   * Must be called before connect()/startOpenChatDiscovery(). No-op in production.
+   */
+  setOpenChatDiscoveryJitterForTest(ms) {
+    this.openChatDiscoveryJitterMs = Math.max(0, ms);
+  }
   /** TEST-ONLY read of the per-chat unresolved-window replay map (chatId → windowStart). */
   unresolvedGapWindowsForTest() {
     return new Map(this.unresolvedGapWindowByChat);
   }
+  /**
+   * TEST-ONLY: run exactly ONE open-chat discovery cycle (same code path the
+   * interval timer invokes), awaited to completion. Lets tests assert the
+   * storm-control behaviour (steady-state no-pull, new-chat pull, failure
+   * backoff skip) deterministically without standing up real timers.
+   */
+  async discoverOpenChatsForTest() {
+    for (let i = 0; i < 200 && this.openChatDiscoveryRunning; i++) {
+      await sleep(5);
+    }
+    await this.discoverOpenChatsAndGapFill((s) => console.log(`[channel.client] ${s}`));
+  }
   /**
    * TEST-ONLY direct gapFill invocation with an explicit chat-set override —
    * mirrors exactly how open-chat discovery calls gapFill on a SUBSET of chats.
@@ -116126,12 +116936,26 @@ var ChannelClient = class {
       //     real network flap. If a future node-sdk / @larksuite/channel exposes
       //     the ws or attaches its own listener, prefer that and drop the guard.
       handshakeTimeoutMs: 15e3,
-      // Liveness watchdog (SECONDS): if no inbound frame arrives within this
-      // window after the last ping, treat the socket as dead and reconnect —
-      // catches silently half-open connections that never emit a close event.
-      // This IS the 1.64 keepalive fix; the app-level `keepalive` watchdog
-      // option only exists in the split-out @larksuite/channel package, not in
-      // node-sdk's bundled createLarkChannel, so we don't pass it here.
+      // HALF-OPEN DETECTION (SECONDS) — keep this on. It terminates a socket that
+      // has gone half-open (server stopped responding but never sent a FIN/close),
+      // so the SDK's 'close' handler runs the normal reconnect → our gap-fill
+      // recovers anything missed during the dead window.
+      //
+      // This does NOT mis-fire on healthy idle connections. Verified against
+      // node-sdk 1.67.0 source (WSClient liveness):
+      //   - clearLiveness() is called on EVERY inbound frame (incl. the server's
+      //     pong) — a live connection cancels the watchdog within ms, so an
+      //     idle-but-healthy socket that still answers the ~120s server ping is
+      //     never killed.
+      //   - armLiveness() only (re)arms for pingTimeout SECONDS after each ping and
+      //     is a NO-OP when pingTimeout is unset → unsetting it removes half-open
+      //     detection ENTIRELY (no 'close' event → no reconnect → no gap-fill).
+      //     A silently-half-open WS on a KNOWN chat would then drop an @ that
+      //     neither reconnect-gap-fill nor the (now targeted) steady-state
+      //     discovery — which pulls 0 for already-known chats — could recover.
+      //
+      // So this stays as the half-open safety net; the discovery-storm fix is
+      // orthogonal and SAFE precisely because this net still triggers reconnect.
       wsConfig: { pingTimeout: 60 }
     });
     channel.on("message", (msg) => {
@@ -116269,8 +117093,12 @@ var ChannelClient = class {
    *     profile. Reactions are intentionally skipped because gap-fill only needs
    *     message IDs and mentions.
    */
-  async gapFill(disconnectAt, log, chatIdsOverride) {
-    const MAX_GAP_FILL_WINDOW_MS = 5 * 60 * 1e3;
+  async gapFill(disconnectAt, log, chatIdsOverride, minWindowMs) {
+    const MAX_GAP_FILL_WINDOW_MS = Math.min(
+      Math.max(5 * 60 * 1e3, minWindowMs ?? 0),
+      // ≥5 minutes, or the caller's floor
+      UNRESOLVED_WINDOW_MAX_AGE_MS
+    );
     const BUFFER_MS = 3e4;
     const now = Date.now();
     const larkCli = this.opts.larkCliPath ?? "lark-cli";
@@ -116482,14 +117310,23 @@ var ChannelClient = class {
     if (this.openChatDiscoveryTimer) return;
     const intervalMs = resolveOpenChatDiscoveryMs(this.opts.openChatDiscoveryMs);
     if (intervalMs <= 0) return;
-    void this.discoverOpenChatsAndGapFill(log);
-    this.openChatDiscoveryTimer = setInterval(() => {
+    const firstDelay = Math.min(this.openChatDiscoveryJitterMs, intervalMs);
+    const startTimer = setTimeout(() => {
       void this.discoverOpenChatsAndGapFill(log);
-    }, intervalMs);
-    this.openChatDiscoveryTimer.unref?.();
+      this.openChatDiscoveryTimer = setInterval(() => {
+        void this.discoverOpenChatsAndGapFill(log);
+      }, intervalMs);
+      this.openChatDiscoveryTimer.unref?.();
+    }, firstDelay);
+    startTimer.unref?.();
+    this.openChatDiscoveryTimer = startTimer;
   }
   async discoverOpenChatsAndGapFill(log) {
     if (this.closed || this.openChatDiscoveryRunning) return;
+    if (this.openChatDiscoverySkips > 0) {
+      this.openChatDiscoverySkips--;
+      return;
+    }
     this.openChatDiscoveryRunning = true;
     try {
       const larkCli = this.opts.larkCliPath ?? "lark-cli";
@@ -116498,6 +117335,7 @@ var ChannelClient = class {
       let fetched = 0;
       let newlyLearned = 0;
       const discoveredChatIds = /* @__PURE__ */ new Set();
+      const newChatIds = /* @__PURE__ */ new Set();
       for (let page = 0; page < 10 && !this.closed; page++) {
         const args = [
           "im",
@@ -116521,7 +117359,10 @@ var ChannelClient = class {
           discoveredChatIds.add(chatId);
           const before = this.recentlySeenChatIds.size;
           this.noteSeenChat(chatId);
-          if (this.recentlySeenChatIds.size > before) newlyLearned++;
+          if (this.recentlySeenChatIds.size > before) {
+            newlyLearned++;
+            newChatIds.add(chatId);
+          }
         }
         const data = parsed && typeof parsed === "object" ? parsed["data"] : void 0;
         const hasMore = Boolean(
@@ -116535,17 +117376,34 @@ var ChannelClient = class {
           `open-chat discovery: learned ${newlyLearned} new chat(s) (known=${this.recentlySeenChatIds.size}, fetched=${fetched})`
         );
       }
-      if (discoveredChatIds.size > 0) {
-        const lookbackMs = this.openChatDiscoveryBootstrapped ? OPEN_CHAT_DISCOVERY_LOOKBACK_MS : OPEN_CHAT_DISCOVERY_BOOTSTRAP_LOOKBACK_MS;
-        this.openChatDiscoveryBootstrapped = true;
+      const isBootstrap = !this.openChatDiscoveryBootstrapped;
+      const targetChatIds = isBootstrap ? new Set(discoveredChatIds) : /* @__PURE__ */ new Set([
+        ...newChatIds,
+        ...[...discoveredChatIds].filter((c) => this.unresolvedGapWindowByChat.has(c))
+      ]);
+      this.openChatDiscoveryBootstrapped = true;
+      if (targetChatIds.size > 0) {
+        const intervalMs = resolveOpenChatDiscoveryMs(this.opts.openChatDiscoveryMs);
+        const targetedLookbackMs = intervalMs + OPEN_CHAT_DISCOVERY_LOOKBACK_BUFFER_MS;
+        const lookbackMs = isBootstrap ? OPEN_CHAT_DISCOVERY_BOOTSTRAP_LOOKBACK_MS : targetedLookbackMs;
         await this.gapFill(
           Date.now() - lookbackMs,
           log,
-          discoveredChatIds
+          targetChatIds,
+          isBootstrap ? void 0 : targetedLookbackMs
         );
       }
+      this.openChatDiscoveryFailures = 0;
+      this.openChatDiscoverySkips = 0;
     } catch (e) {
-      log(`open-chat discovery failed: ${e instanceof Error ? e.message : String(e)}`);
+      this.openChatDiscoveryFailures = Math.min(
+        this.openChatDiscoveryFailures + 1,
+        OPEN_CHAT_DISCOVERY_MAX_BACKOFF_CYCLES
+      );
+      this.openChatDiscoverySkips = 2 ** (this.openChatDiscoveryFailures - 1);
+      log(
+        `open-chat discovery failed (backing off ${this.openChatDiscoverySkips} cycle(s)): ${e instanceof Error ? e.message : String(e)}`
+      );
     } finally {
       this.openChatDiscoveryRunning = false;
     }
@@ -116621,25 +117479,44 @@ var ChannelClient = class {
     if (this.seenMessageIds.size === before) return;
     void this.persistSeenMessageIds();
   }
-  async persistSeenMessageIds() {
-    const file = this.seenMessagesPath();
-    if (!file) return;
-    const messages = [...this.seenMessageIds].slice(-SEEN_MESSAGES_LIMIT);
+  /**
+   * Atomic JSON write: serialize to a UNIQUE temp file, then `rename` over the
+   * destination. Two concerns motivate this:
+   *   1. Atomicity — `rename` is atomic on a POSIX filesystem, so a reader (or a
+   *      crash) never observes a half-written file. The persist methods are
+   *      fire-and-forget (`void persist…`), so under a multi-bot storm several
+   *      writes to the SAME path can overlap; a plain `writeFile` interleaves
+   *      their bytes → the "Bad control character in string literal" JSON
+   *      corruption we saw. With tmp+rename each write lands whole-or-not-at-all.
+   *   2. Per-write unique tmp name — a fixed `${file}.tmp` would itself be raced
+   *      by two concurrent writers. The pid + monotonic counter suffix gives each
+   *      in-flight write its own tmp so they can't clobber each other before the
+   *      rename. Best-effort cleanup on failure; losing the cache is non-fatal.
+   */
+  async atomicWriteJson(file, value) {
+    const tmp = `${file}.${process.pid}.${this.atomicWriteSeq++}.tmp`;
     try {
       await mkdir(path3.dirname(file), { recursive: true });
-      await writeFile(file, JSON.stringify(messages, null, 2), "utf8");
+      await writeFile(tmp, JSON.stringify(value, null, 2), "utf8");
+      await rename(tmp, file);
     } catch {
+      try {
+        await unlink(tmp);
+      } catch {
+      }
     }
   }
+  async persistSeenMessageIds() {
+    const file = this.seenMessagesPath();
+    if (!file) return;
+    const messages = [...this.seenMessageIds].slice(-SEEN_MESSAGES_LIMIT);
+    await this.atomicWriteJson(file, messages);
+  }
   async persistRecentlySeenChatIds() {
     const file = this.learnedChatsPath();
     if (!file) return;
     const chats = [...this.recentlySeenChatIds].sort().slice(-LEARNED_CHATS_LIMIT);
-    try {
-      await mkdir(path3.dirname(file), { recursive: true });
-      await writeFile(file, JSON.stringify(chats, null, 2), "utf8");
-    } catch {
-    }
+    await this.atomicWriteJson(file, chats);
   }
   async addProcessingReaction(messageId) {
     if (this.processingReactions.has(messageId)) return;
@@ -117200,7 +118077,7 @@ var CardRenderer = class {
 };
 
 // src/claude/sessionStore.ts
-import { rename, readFile as readFile3, writeFile as writeFile2, mkdir as mkdir2, copyFile } from "node:fs/promises";
+import { rename as rename2, readFile as readFile3, writeFile as writeFile2, mkdir as mkdir2, copyFile } from "node:fs/promises";
 import { dirname } from "node:path";
 var STORE_VERSION = 2;
 var TOUCH_DEBOUNCE_MS = 1e3;
@@ -117427,7 +118304,7 @@ var SessionStore = class _SessionStore {
     const tmpPath = `${this.#filePath}.tmp`;
     await mkdir2(dirname(this.#filePath), { recursive: true });
     await writeFile2(tmpPath, json2, "utf8");
-    await rename(tmpPath, this.#filePath);
+    await rename2(tmpPath, this.#filePath);
   }
 };
 function isStoredRecord(value) {
@@ -117438,8 +118315,8 @@ function isStoredRecord(value) {
 
 // src/bridge/handler.ts
 import child_process from "node:child_process";
-import fs7 from "node:fs/promises";
-import path10 from "node:path";
+import fs6 from "node:fs/promises";
+import path9 from "node:path";
 
 // src/lark/message.ts
 var AT_PLACEHOLDER_RE = /@_\w+\s*/g;
@@ -117810,7 +118687,7 @@ function renderStateContract(stateFilePath) {
     "- card_title/card_color: \u517C\u5BB9\u5B57\u6BB5; \u9ED8\u8BA4 CardKit \u4E0D\u6E32\u67D3\u9876\u90E8\u6807\u9898\u8272\u6761,legacy/fallback \u5361\u7247\u8DEF\u5F84\u53EF\u80FD\u4F7F\u7528",
     "- image_blocks: \u53EF\u9009\u56FE\u7247\u9884\u89C8\u5757\u6570\u7EC4,\u6700\u591A 4 \u4E2A\u3002\u6BCF\u9879 `{img_key, alt?, title?, mode?, preview?}`; `img_key` \u5FC5\u987B\u662F\u5DF2\u4E0A\u4F20/\u53EF\u7528\u4E8E\u5361\u7247\u7684 Feishu \u56FE\u7247 key,`alt` \u7701\u7565\u65F6 bridge \u9ED8\u8BA4\u201C\u56FE\u7247\u9884\u89C8\u201D,`mode` \u53EA\u5141\u8BB8 `crop_center`/`fit_horizontal` \u5E76\u6620\u5C04\u5230 Card JSON 2.0 `scale_type`,`preview` \u9ED8\u8BA4 true\u3002bridge \u4E0D\u8D1F\u8D23\u4E0B\u8F7D/\u4E0A\u4F20/\u9009\u62E9\u56FE\u7247;\u8FD9\u4E9B\u7531\u4F60\u7528 lark-cli \u7B49\u5DE5\u5177\u5148\u5B8C\u6210\u3002",
     '- content_blocks: \u53EF\u9009\u6709\u5E8F\u6B63\u6587\u5757\u6570\u7EC4,\u6700\u591A 12 \u4E2A block\u3001\u6700\u591A 4 \u4E2A image block\u3002\u53EA\u652F\u6301\u7A84 union:`{type:"markdown", content}` \u548C `{type:"image", img_key, alt?, title?, mode?, preview?}`;\u4E0D\u652F\u6301 raw card JSON\u3002\u7528\u4E8E\u6B63\u6587\u4E0E\u56FE\u7247\u4EA4\u9519\u6392\u7248,\u4F8B\u5982 markdown -> image -> markdown -> image\u3002\u82E5 `content_blocks` \u975E\u7A7A,bridge \u4EE5\u5B83\u4F5C\u4E3A\u4E3B\u6B63\u6587\u5E76\u5FFD\u7565 `last_message` + `image_blocks` \u7684\u6B63\u6587\u6E32\u67D3,\u907F\u514D\u91CD\u590D;\u82E5\u7701\u7565\u5219\u4FDD\u6301\u65E7 `last_message` + `image_blocks` \u884C\u4E3A\u3002',
-    '- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u5F62\u5982 `{mode:"card"|"post"|"hybrid", primary?:"card"|"post", post?:{mentions:[{user_id,label?}]}, card?:{compact?:boolean, capabilities?:[...]}}`\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;\u65E0\u663E\u5F0F card \u610F\u56FE\u65F6 bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u9700\u8981\u771F\u5B9E @ \u65F6\u628A\u76EE\u6807\u5199\u5165 `post.mentions`;\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002',
+    "- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u4E3B\u8981\u7528\u4E8E `{post:{mentions:[{user_id,label?}]}}` late peer @\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u65E7 `mode`/`primary` \u4EC5\u517C\u5BB9\u89E3\u6790,\u4E0D\u518D\u9009\u62E9 post-only/hybrid \u4E3B\u54CD\u5E94\u9762\u3002\u9700\u8981\u771F\u5B9E @ \u65F6\u628A\u76EE\u6807\u5199\u5165 `post.mentions`;\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002",
     "- scheduled reply / daily social ops review card \u7B49\u9700\u8981\u201C\u5E73\u53F0\u6B63\u6587 + \u5339\u914D\u56FE\u7247\u201D\u540C\u6BB5\u76F8\u90BB\u5C55\u793A\u7684\u573A\u666F,\u5E94\u5148\u53D6\u5F97\u5404\u56FE\u7247 `img_key`,\u518D\u5199 `content_blocks` \u4E3A `\u5E73\u53F0 markdown -> \u5BF9\u5E94 image -> \u4E0B\u4E2A\u5E73\u53F0 markdown -> \u5BF9\u5E94 image`;\u4E0D\u8981\u7528\u5355\u72EC\u8BDD\u9898\u56FE\u7247\u6D88\u606F\u6216\u5C3E\u90E8 `image_blocks` \u4EE3\u66FF\u9A8C\u6536\u9762\u3002",
     "- dev_url / mr_url / \u5176\u4F59\u4E1A\u52A1\u5B57\u6BB5:\u81EA\u7531\u5199\u5165,bridge \u4E0D\u611F\u77E5\u5176\u4E1A\u52A1\u542B\u4E49;\u8981\u8BA9\u8FD0\u8425\u770B\u5230,\u8BF7\u5199\u8FDB last_message",
     "- updated_at: ISO 8601 timestamp",
@@ -118622,17 +119499,11 @@ function defaultResponseSurfacePrototypeConfig() {
     enabled: true,
     allowed_chats: [],
     allowed_threads: [],
-    lazy_card_creation: true,
     kill_switch: false,
     post_outbound_enabled: true,
     cardkit_streaming_enabled: true,
     allow_agent_mentions: true,
-    allowed_mention_open_ids: [],
-    max_posts_per_turn: 1,
-    max_posts_per_window: 4,
-    post_window_ms: 6e4,
-    max_post_attempts: 3,
-    text_threshold_chars: 1200
+    allowed_mention_open_ids: []
   };
 }
 var DEFAULT_RESPONSE_SURFACE_PROTOTYPE = defaultResponseSurfacePrototypeConfig();
@@ -118640,17 +119511,11 @@ var responseSurfacePrototypeConfigDefaults = () => ({
   enabled: true,
   allowed_chats: [],
   allowed_threads: [],
-  lazy_card_creation: true,
   kill_switch: false,
   post_outbound_enabled: true,
   cardkit_streaming_enabled: true,
   allow_agent_mentions: true,
-  allowed_mention_open_ids: [],
-  max_posts_per_turn: 1,
-  max_posts_per_window: 4,
-  post_window_ms: 6e4,
-  max_post_attempts: 3,
-  text_threshold_chars: 1200
+  allowed_mention_open_ids: []
 });
 var ResponseSurfaceModeSchema = external_exports.enum(["card", "post", "hybrid"]);
 var ResponseSurfacePrimarySchema = external_exports.enum(["card", "post"]);
@@ -118707,12 +119572,6 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    * all threads are allowed by this gate.
    */
   allowed_threads: external_exports.array(external_exports.string().min(1)).default([]),
-  /**
-   * Historical post-first gate retained for config compatibility. The default
-   * runtime no longer uses post-first lazy card creation; CardKit is the main
-   * surface and legacy cards remain the visible fallback.
-   */
-  lazy_card_creation: external_exports.boolean().default(true),
   /**
    * Runtime kill switch for emergency rollback. When true, every response
    * surface post path is treated as disabled even if enabled/allowlists are
@@ -118741,32 +119600,7 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    * may choose mention targets; non-empty narrows mentions to this exact set.
    * Keep real IDs in private bot config, never in public docs/tests.
    */
-  allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
-  /**
-   * Historical post dispatch cap retained for schema compatibility and
-   * isolated dispatcher tests.
-   */
-  max_posts_per_turn: external_exports.number().int().min(0).max(10).default(1),
-  /**
-   * Sliding-window hard cap for real post sends within one bot/chat/thread
-   * runtime scope. This is enforced in the production handler before a post
-   * transport call is attempted; exhausted windows degrade to visible cards.
-   */
-  max_posts_per_window: external_exports.number().int().min(0).max(100).default(4),
-  /**
-   * Sliding-window duration for max_posts_per_window.
-   */
-  post_window_ms: external_exports.number().int().min(1e3).max(864e5).default(6e4),
-  /**
-   * Max attempts for one logical post. Retry classification is intentionally
-   * narrow in PR3: only 5xx errors are retryable.
-   */
-  max_post_attempts: external_exports.number().int().min(1).max(5).default(3),
-  /**
-   * Historical threshold for removed lazy card creation experiments. Bounded
-   * so older config remains parseable without growing arbitrary business rules.
-   */
-  text_threshold_chars: external_exports.number().int().min(1).max(2e4).default(1200)
+  allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([])
 }).default(responseSurfacePrototypeConfigDefaults);
 function isResponseSurfacePrototypeAllowlisted(config, facts) {
   if (!config?.enabled) return false;
@@ -118785,7 +119619,7 @@ function isResponseSurfaceMentionAllowed(config, userId) {
   return config.allowed_mention_open_ids.includes(userId);
 }
 function shouldProvideResponseSurfacePostClient(config) {
-  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled && config.max_posts_per_turn >= 1 && config.max_posts_per_window >= 1);
+  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled);
 }
 function shouldProvideResponseSurfaceCardKitClient(config) {
   return !!(config?.enabled && !config.kill_switch && config.cardkit_streaming_enabled);
@@ -119828,697 +120662,6 @@ function derivePostIdempotencyKey(input) {
   return key;
 }
 
-// src/bridge/postFile.ts
-import fs6 from "node:fs/promises";
-import path9 from "node:path";
-var PostLedgerStatusSchema = external_exports.enum([
-  "planned",
-  "pending",
-  "sent",
-  "failed",
-  "fallback_visible",
-  "policy_blocked"
-]);
-var POST_LEDGER_TRANSITIONS = {
-  planned: ["pending", "fallback_visible", "policy_blocked"],
-  pending: ["sent", "failed", "fallback_visible", "policy_blocked"],
-  sent: [],
-  failed: ["fallback_visible"],
-  fallback_visible: [],
-  policy_blocked: []
-};
-function canTransitionPostStatus(from, to) {
-  return from === to || POST_LEDGER_TRANSITIONS[from].includes(to);
-}
-function assertPostStatusTransition(from, to) {
-  if (!canTransitionPostStatus(from, to)) {
-    throw new Error(`invalid post ledger transition: ${from} -> ${to}`);
-  }
-}
-var PostAttemptSchema = external_exports.object({
-  attemptedAt: external_exports.string(),
-  status: external_exports.enum(["sent", "failed"]),
-  retryable: external_exports.boolean().default(false),
-  error: external_exports.string().optional(),
-  code: external_exports.string().optional()
-});
-var PostLedgerEntrySchema = external_exports.object({
-  idempotencyKey: external_exports.string().min(1).max(64),
-  status: PostLedgerStatusSchema,
-  botId: external_exports.string().min(1),
-  chatId: external_exports.string().min(1),
-  threadId: external_exports.string().min(1),
-  replyToMessageId: external_exports.string().min(1),
-  role: external_exports.enum(["primary", "secondary", "fallback"]),
-  logicalIndex: external_exports.number().int().nonnegative(),
-  contentDigest: external_exports.string().min(1),
-  mentionCount: external_exports.number().int().nonnegative().default(0),
-  postMessageId: external_exports.string().optional(),
-  fallbackCardMessageId: external_exports.string().optional(),
-  error: external_exports.string().optional(),
-  attempts: external_exports.array(PostAttemptSchema).default([]),
-  createdAt: external_exports.string(),
-  updatedAt: external_exports.string()
-});
-var PostFileSchema = external_exports.object({
-  version: external_exports.literal(1),
-  posts: external_exports.array(PostLedgerEntrySchema).max(50)
-});
-function emptyPostFile() {
-  return { version: 1, posts: [] };
-}
-function summarizePostLedger(data) {
-  const summary = {
-    total: 0,
-    planned: 0,
-    pending: 0,
-    sent: 0,
-    failed: 0,
-    fallback_visible: 0,
-    policy_blocked: 0,
-    withPostMessageId: 0,
-    withFallbackCardMessageId: 0
-  };
-  for (const post of data?.posts ?? []) {
-    summary.total += 1;
-    summary[post.status] += 1;
-    if (post.postMessageId) summary.withPostMessageId += 1;
-    if (post.fallbackCardMessageId) summary.withFallbackCardMessageId += 1;
-  }
-  return summary;
-}
-function postDirOf(worktreePath) {
-  return path9.join(worktreePath, ".larkway");
-}
-function postFilePathOf(worktreePath) {
-  return path9.join(postDirOf(worktreePath), "post.json");
-}
-async function readPostFile(worktreePath) {
-  const file = postFilePathOf(worktreePath);
-  let raw;
-  try {
-    raw = await fs6.readFile(file, "utf8");
-  } catch (err) {
-    if (err.code === "ENOENT") return null;
-    console.warn(`[postFile] read ${file} failed:`, err);
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    console.warn(`[postFile] ${file} not valid JSON:`, err);
-    return null;
-  }
-  const result = PostFileSchema.safeParse(parsed);
-  if (!result.success) {
-    console.warn(`[postFile] ${file} failed schema validation:`, result.error.issues);
-    return null;
-  }
-  return result.data;
-}
-async function writePostFile(worktreePath, data) {
-  const dir = postDirOf(worktreePath);
-  const file = postFilePathOf(worktreePath);
-  await fs6.mkdir(dir, { recursive: true });
-  const parsed = PostFileSchema.parse(data);
-  const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-  await fs6.writeFile(tmp, JSON.stringify(parsed, null, 2), "utf8");
-  try {
-    await fs6.rename(tmp, file);
-  } catch (err) {
-    await fs6.rm(tmp, { force: true }).catch(() => {
-    });
-    throw err;
-  }
-}
-async function upsertPostLedgerEntry(worktreePath, entry) {
-  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
-  const idx = existing.posts.findIndex((p) => p.idempotencyKey === entry.idempotencyKey);
-  const nextPosts = [...existing.posts];
-  if (idx >= 0) {
-    assertPostStatusTransition(nextPosts[idx].status, entry.status);
-    nextPosts[idx] = entry;
-  } else {
-    nextPosts.push(entry);
-  }
-  const next = { version: 1, posts: nextPosts };
-  await writePostFile(worktreePath, next);
-  return next;
-}
-var DEFAULT_POST_RECONCILE_MIN_AGE_MS = 6e4;
-function timestampAgeMs(iso, nowMs) {
-  if (!Number.isFinite(nowMs)) return null;
-  const then = Date.parse(iso);
-  if (!Number.isFinite(then)) return null;
-  return nowMs - then;
-}
-function reconcilePostEntry(entry, opts) {
-  if (entry.botId !== opts.botId) {
-    return { entry, changed: false, sent: false, needsVisibleFallback: false };
-  }
-  if (entry.status === "sent" || entry.status === "fallback_visible" || entry.status === "policy_blocked") {
-    return { entry, changed: false, sent: false, needsVisibleFallback: false };
-  }
-  const now = opts.now();
-  const ageMs = timestampAgeMs(entry.updatedAt, Date.parse(now));
-  if (ageMs == null || ageMs < opts.minAgeMs) {
-    return { entry, changed: false, sent: false, needsVisibleFallback: false };
-  }
-  if (entry.postMessageId) {
-    return {
-      entry: {
-        ...entry,
-        status: "sent",
-        error: void 0,
-        updatedAt: now,
-        attempts: [
-          ...entry.attempts,
-          {
-            attemptedAt: now,
-            status: "sent",
-            retryable: false
-          }
-        ]
-      },
-      changed: true,
-      sent: true,
-      needsVisibleFallback: false
-    };
-  }
-  return {
-    entry,
-    changed: false,
-    sent: false,
-    needsVisibleFallback: true
-  };
-}
-function reconcilePostLedgerEntries(data, opts) {
-  const normalizedOpts = {
-    botId: opts.botId,
-    minAgeMs: opts.minAgeMs ?? DEFAULT_POST_RECONCILE_MIN_AGE_MS,
-    now: opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString())
-  };
-  let sent = 0;
-  const fallbackVisible = 0;
-  let needsVisibleFallback = 0;
-  let skippedLive = 0;
-  const visibleFallbackCandidates = [];
-  const posts = data.posts.map((post) => {
-    const reconciled = reconcilePostEntry(post, normalizedOpts);
-    if (reconciled.changed) {
-      if (reconciled.sent) sent += 1;
-    } else if (reconciled.needsVisibleFallback) {
-      needsVisibleFallback += 1;
-      visibleFallbackCandidates.push(reconciled.entry);
-    } else if (post.botId === normalizedOpts.botId && (post.status === "planned" || post.status === "pending" || post.status === "failed")) {
-      skippedLive += 1;
-    }
-    return reconciled.entry;
-  });
-  const changed = sent > 0 || fallbackVisible > 0;
-  return {
-    file: changed ? { version: 1, posts } : data,
-    result: { changed, sent, fallbackVisible, needsVisibleFallback, skippedLive },
-    visibleFallbackCandidates
-  };
-}
-async function reconcilePostFileOrphans(worktreePath, opts) {
-  const existing = await readPostFile(worktreePath);
-  if (!existing) {
-    return {
-      changed: false,
-      sent: 0,
-      fallbackVisible: 0,
-      needsVisibleFallback: 0,
-      skippedLive: 0,
-      visibleFallbackCandidates: []
-    };
-  }
-  const { file, result, visibleFallbackCandidates } = reconcilePostLedgerEntries(existing, opts);
-  if (result.changed) {
-    await writePostFile(worktreePath, file);
-  }
-  return { ...result, visibleFallbackCandidates };
-}
-async function markPostLedgerFallbackVisible(worktreePath, idempotencyKey2, opts) {
-  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
-  const idx = existing.posts.findIndex((post) => post.idempotencyKey === idempotencyKey2);
-  if (idx < 0) {
-    throw new Error(`post ledger entry not found: ${idempotencyKey2}`);
-  }
-  const current = existing.posts[idx];
-  assertPostStatusTransition(current.status, "fallback_visible");
-  const now = opts.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-  const nextPosts = [...existing.posts];
-  nextPosts[idx] = {
-    ...current,
-    status: "fallback_visible",
-    fallbackCardMessageId: opts.fallbackCardMessageId,
-    error: opts.error,
-    updatedAt: now,
-    attempts: [
-      ...current.attempts,
-      {
-        attemptedAt: now,
-        status: "failed",
-        retryable: false,
-        code: "orphan_reconcile",
-        error: opts.error
-      }
-    ]
-  };
-  const next = { version: 1, posts: nextPosts };
-  await writePostFile(worktreePath, next);
-  return next;
-}
-async function markPostLedgerPolicyBlockedVisible(worktreePath, idempotencyKey2, opts) {
-  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
-  const idx = existing.posts.findIndex((post) => post.idempotencyKey === idempotencyKey2);
-  if (idx < 0) {
-    throw new Error(`post ledger entry not found: ${idempotencyKey2}`);
-  }
-  const current = existing.posts[idx];
-  assertPostStatusTransition(current.status, "policy_blocked");
-  const now = opts.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-  const nextPosts = [...existing.posts];
-  nextPosts[idx] = {
-    ...current,
-    status: "policy_blocked",
-    fallbackCardMessageId: opts.fallbackCardMessageId,
-    error: opts.error,
-    updatedAt: now,
-    attempts: [
-      ...current.attempts,
-      {
-        attemptedAt: now,
-        status: "failed",
-        retryable: false,
-        code: "mention_policy_blocked",
-        error: opts.error
-      }
-    ]
-  };
-  const next = { version: 1, posts: nextPosts };
-  await writePostFile(worktreePath, next);
-  return next;
-}
-
-// src/bridge/surfaceDispatcher.ts
-function fullCard(input, reason) {
-  return {
-    card: input.baseCard,
-    reason,
-    visible: input.cardStarted || input.visibleFallbackAvailable
-  };
-}
-function hasCardOnlyPayload(state) {
-  return !!(state?.choices?.length || state?.image_blocks?.length || state?.content_blocks?.length);
-}
-function hasCardOnlyPayloadIn(input) {
-  return !!(hasCardOnlyPayload(input.state) || input.baseCard.choices?.length || input.baseCard.imageBlocks?.length || input.baseCard.contentBlocks?.length);
-}
-function compactAuditCard(input, post) {
-  const status = input.state?.status ?? (input.baseCard.success ? "ready" : "failed");
-  const title = input.baseCard.titleOverride ?? "Post \u5DF2\u53D1\u9001";
-  return {
-    success: input.baseCard.success,
-    failureReason: input.baseCard.failureReason,
-    titleOverride: title,
-    colorOverride: input.baseCard.colorOverride ?? "neutral",
-    finalText: `\u4E3B\u56DE\u590D\u5DF2\u901A\u8FC7 post \u53D1\u51FA\u3002
-status: ${status}
-post_message_id: ${post.messageId}
-idempotency_key: ${post.idempotencyKey}`
-  };
-}
-function fallbackFailureCard(input, error) {
-  const reason = error instanceof Error ? error.message : String(error);
-  return {
-    ...input.baseCard,
-    success: false,
-    failureReason: `post outbound failed; visible card fallback used: ${reason}`
-  };
-}
-function policyBlockedCard(input) {
-  return {
-    ...input.baseCard,
-    success: false,
-    failureReason: "response_surface post mention target is blocked by policy; visible card fallback used"
-  };
-}
-function postText(input) {
-  const text = input.baseCard.finalText?.trim() || input.state?.last_message?.trim();
-  if (text) return text;
-  if (input.baseCard.success) return "\u5B8C\u6210";
-  return input.baseCard.failureReason ?? "\u6267\u884C\u5931\u8D25";
-}
-function postRole(input) {
-  const surface = input.state?.response_surface;
-  if (surface?.mode === "hybrid") return "primary";
-  return "primary";
-}
-function newLedgerEntry(input) {
-  return {
-    idempotencyKey: input.idempotencyKey,
-    status: input.status,
-    botId: input.facts.botId,
-    chatId: input.facts.chatId,
-    threadId: input.facts.threadId,
-    replyToMessageId: input.facts.replyToMessageId,
-    role: input.role,
-    logicalIndex: input.logicalIndex,
-    contentDigest: input.contentDigest,
-    mentionCount: input.mentionCount,
-    postMessageId: input.postMessageId,
-    error: input.error,
-    attempts: input.attempts ?? [],
-    createdAt: input.now,
-    updatedAt: input.now
-  };
-}
-async function writeLedger(input, entry) {
-  if (!input.worktreePath) return;
-  await upsertPostLedgerEntry(input.worktreePath, entry);
-}
-async function existingLedgerEntry(input, idempotencyKey2) {
-  if (!input.worktreePath) return null;
-  const ledger = await readPostFile(input.worktreePath);
-  return ledger?.posts.find((post) => post.idempotencyKey === idempotencyKey2) ?? null;
-}
-function sentResult(input, surface, post, reason) {
-  if (hasCardOnlyPayloadIn(input)) {
-    return {
-      card: input.baseCard,
-      reason: "post-sent-card-capability-required",
-      visible: true,
-      post
-    };
-  }
-  if (surface.mode === "hybrid" || input.cardStarted) {
-    return {
-      card: compactAuditCard(input, post),
-      reason: reason === "post-ledger-already-sent" ? "post-ledger-already-sent" : surface.mode === "hybrid" ? "hybrid-post-sent-compact-card" : reason,
-      visible: true,
-      post
-    };
-  }
-  return {
-    card: null,
-    reason,
-    visible: true,
-    post
-  };
-}
-async function ledgerSummaryFor(input) {
-  if (!input.worktreePath) return summarizePostLedger(null);
-  return summarizePostLedger(await readPostFile(input.worktreePath));
-}
-function emitSurfaceObservation(input) {
-  console.log(
-    "[response_surface.dispatch]",
-    JSON.stringify({
-      event: "response_surface.dispatch",
-      botId: input.facts.botId,
-      chatId: input.facts.chatId,
-      threadId: input.facts.threadId,
-      reason: input.result.reason,
-      visible: input.result.visible,
-      hasCard: !!input.result.card,
-      hasPost: !!input.result.post,
-      postMessageIdPresent: !!input.result.post?.messageId,
-      budget: input.result.budget ? {
-        allowed: input.result.budget.allowed,
-        used: input.result.budget.used,
-        limit: input.result.budget.limit,
-        windowMs: input.result.budget.windowMs,
-        resetAt: input.result.budget.resetAt,
-        reason: input.result.budget.reason
-      } : void 0,
-      ledger: input.ledger,
-      durationMs: input.durationMs
-    })
-  );
-}
-async function dispatchResponseSurfaceInner(input) {
-  const declaredSurface = input.state?.response_surface;
-  if (declaredSurface?.mode === "card" || declaredSurface?.primary === "card") {
-    return fullCard(input, "legacy-card-mode");
-  }
-  const surface = declaredSurface ?? { mode: "post", primary: "post" };
-  const cfg = input.prototypeConfig;
-  if (!cfg?.enabled) return fullCard(input, "prototype-disabled");
-  if (cfg.kill_switch) return fullCard(input, "kill-switch-active");
-  if (!isResponseSurfacePrototypeAllowlisted(cfg, {
-    chatId: input.facts.chatId,
-    threadId: input.facts.threadId
-  })) {
-    return fullCard(input, "not-allowlisted");
-  }
-  if (!cfg.post_outbound_enabled) return fullCard(input, "post-outbound-disabled");
-  if (cfg.max_posts_per_turn < 1) return fullCard(input, "post-outbound-disabled");
-  if (cfg.max_posts_per_window < 1) return fullCard(input, "post-rate-limit-exhausted");
-  if (!input.postOutboundAvailable || !input.postClient) {
-    return fullCard(input, "post-outbound-unavailable");
-  }
-  if (!input.visibleFallbackAvailable) {
-    return fullCard(input, "visible-fallback-unavailable");
-  }
-  if (!input.postLedgerAvailable || !input.worktreePath) {
-    return fullCard(input, "post-ledger-unavailable");
-  }
-  const mentions = surface.post?.mentions ?? [];
-  const blockedMention = mentions.find(
-    (mention) => !isResponseSurfaceMentionAllowed(cfg, mention.user_id)
-  );
-  const text = postText(input);
-  const policyDigest = digestPostContent(text);
-  const role = postRole(input);
-  const logicalIndex = 0;
-  const policyIdempotencyKey = derivePostIdempotencyKey({
-    botId: input.facts.botId,
-    threadId: input.facts.threadId,
-    triggerMessageId: input.facts.triggerMessageId,
-    role,
-    logicalIndex,
-    contentDigest: policyDigest
-  });
-  const now = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-  if (blockedMention) {
-    const policyError = `mention target is not allowed by response surface policy: ${blockedMention.user_id}`;
-    if (input.livePost) {
-      try {
-        await input.postClient.updatePost(input.livePost.messageId, buildPostContent({ text }));
-      } catch (err) {
-        console.warn(
-          "[surface_dispatch] live post policy-blocked cleanup update failed:",
-          err
-        );
-      }
-    }
-    await writeLedger(
-      input,
-      newLedgerEntry({
-        status: "planned",
-        idempotencyKey: policyIdempotencyKey,
-        now,
-        facts: input.facts,
-        role,
-        logicalIndex,
-        contentDigest: policyDigest,
-        mentionCount: mentions.length,
-        error: policyError
-      })
-    );
-    return {
-      card: policyBlockedCard(input),
-      reason: "mention-policy-blocked",
-      visible: true,
-      post: {
-        idempotencyKey: policyIdempotencyKey,
-        role,
-        requiresPolicyLedgerMark: true,
-        policyError
-      }
-    };
-  }
-  const content = buildPostContent({
-    text,
-    mentions: mentions.map((mention) => ({
-      userId: mention.user_id,
-      label: mention.label
-    }))
-  });
-  const contentDigest = digestPostContent(content);
-  const idempotencyKey2 = input.livePost?.idempotencyKey ?? derivePostIdempotencyKey({
-    botId: input.facts.botId,
-    threadId: input.facts.threadId,
-    triggerMessageId: input.facts.triggerMessageId,
-    role,
-    logicalIndex,
-    contentDigest
-  });
-  const existing = await existingLedgerEntry(input, idempotencyKey2);
-  if (existing?.status === "sent" && existing.postMessageId) {
-    return sentResult(
-      input,
-      surface,
-      { idempotencyKey: idempotencyKey2, messageId: existing.postMessageId, role },
-      "post-ledger-already-sent"
-    );
-  }
-  if (existing?.status === "sent") {
-    return fullCard(input, "post-orphan-reconciled-fallback-card");
-  }
-  if (existing?.status === "fallback_visible") {
-    return {
-      card: fallbackFailureCard(
-        input,
-        existing.error ?? "post ledger already reconciled to visible fallback"
-      ),
-      reason: "post-orphan-reconciled-fallback-card",
-      visible: true,
-      post: { idempotencyKey: idempotencyKey2, role }
-    };
-  }
-  if (existing?.status === "policy_blocked") {
-    return {
-      card: policyBlockedCard(input),
-      reason: "mention-policy-blocked",
-      visible: true,
-      post: { idempotencyKey: idempotencyKey2, role }
-    };
-  }
-  if (existing) {
-    const error = existing.status === "failed" && existing.error ? existing.error : "orphaned post ledger entry reconciled without resend; visible card fallback used";
-    return {
-      card: fallbackFailureCard(input, error),
-      reason: "post-orphan-reconciled-fallback-card",
-      visible: true,
-      post: {
-        idempotencyKey: idempotencyKey2,
-        role,
-        requiresFallbackLedgerMark: true,
-        fallbackError: error
-      }
-    };
-  }
-  const budget = input.livePost ? void 0 : input.postBudget?.reserve();
-  if (budget && !budget.allowed) {
-    return {
-      ...fullCard(input, "post-rate-limit-exhausted"),
-      budget
-    };
-  }
-  await writeLedger(
-    input,
-    newLedgerEntry({
-      status: "planned",
-      idempotencyKey: idempotencyKey2,
-      now,
-      facts: input.facts,
-      role,
-      logicalIndex,
-      contentDigest,
-      mentionCount: mentions.length
-    })
-  );
-  await writeLedger(
-    input,
-    newLedgerEntry({
-      status: "pending",
-      idempotencyKey: idempotencyKey2,
-      now,
-      facts: input.facts,
-      role,
-      logicalIndex,
-      contentDigest,
-      mentionCount: mentions.length
-    })
-  );
-  try {
-    const sent = input.livePost ? await input.postClient.updatePost(input.livePost.messageId, content) : await input.postClient.createPostReply(input.facts.replyToMessageId, content, {
-      replyInThread: input.facts.replyInThread,
-      idempotencyKey: idempotencyKey2
-    });
-    await writeLedger(
-      input,
-      newLedgerEntry({
-        status: "sent",
-        idempotencyKey: idempotencyKey2,
-        now: input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
-        facts: input.facts,
-        role,
-        logicalIndex,
-        contentDigest,
-        mentionCount: mentions.length,
-        postMessageId: sent.messageId,
-        attempts: [
-          {
-            attemptedAt: input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
-            status: "sent",
-            retryable: false
-          }
-        ]
-      })
-    );
-    const post = { idempotencyKey: idempotencyKey2, messageId: sent.messageId, role };
-    return {
-      ...sentResult(input, surface, post, input.livePost ? "post-updated" : "post-sent"),
-      budget
-    };
-  } catch (err) {
-    const failedAt = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-    const error = err instanceof Error ? err.message : String(err);
-    await writeLedger(
-      input,
-      newLedgerEntry({
-        status: "failed",
-        idempotencyKey: idempotencyKey2,
-        now: failedAt,
-        facts: input.facts,
-        role,
-        logicalIndex,
-        contentDigest,
-        mentionCount: mentions.length,
-        error,
-        attempts: [
-          {
-            attemptedAt: failedAt,
-            status: "failed",
-            retryable: false,
-            error
-          }
-        ]
-      })
-    );
-    return {
-      card: fallbackFailureCard(input, err),
-      reason: "post-failed-fallback-card",
-      visible: true,
-      post: {
-        idempotencyKey: idempotencyKey2,
-        role,
-        requiresFallbackLedgerMark: true,
-        fallbackError: error
-      },
-      budget
-    };
-  }
-}
-async function dispatchResponseSurface(input) {
-  const startedAt = Date.now();
-  const result = await dispatchResponseSurfaceInner(input);
-  const ledger = await ledgerSummaryFor(input);
-  emitSurfaceObservation({
-    facts: input.facts,
-    result,
-    ledger,
-    durationMs: Date.now() - startedAt
-  });
-  return result;
-}
-
 // src/bridge/handler.ts
 var DEFAULT_CARDKIT_RESPONSE_SURFACE_TIMEOUT_MS = 20 * 60 * 1e3;
 function execGit(cwd, args) {
@@ -120544,7 +120687,7 @@ stderr: ${stderr}`)
 }
 async function pathExists(p) {
   try {
-    await fs7.stat(p);
+    await fs6.stat(p);
     return true;
   } catch {
     return false;
@@ -120562,7 +120705,7 @@ async function isWorktreeGitHealthy(worktreePath) {
   });
 }
 async function ensureRepoClone(basePath, url, token, label) {
-  const gitDir = path10.join(basePath, ".git");
+  const gitDir = path9.join(basePath, ".git");
   if (await pathExists(gitDir)) {
     return;
   }
@@ -120572,15 +120715,15 @@ async function ensureRepoClone(basePath, url, token, label) {
     );
   }
   const uniq = `${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
-  const tmpScript = path10.join(basePath, "..", `.askpass-${uniq}.sh`);
+  const tmpScript = path9.join(basePath, "..", `.askpass-${uniq}.sh`);
   const tokenEnvVar = `LARKWAY_GIT_TOKEN_${uniq.replace(/[^a-zA-Z0-9]/g, "_")}`;
   try {
-    await fs7.mkdir(path10.dirname(basePath), { recursive: true });
+    await fs6.mkdir(path9.dirname(basePath), { recursive: true });
     const scriptContent = [
       "#!/bin/sh",
       `echo "\${${tokenEnvVar}}"`
     ].join("\n") + "\n";
-    await fs7.writeFile(tmpScript, scriptContent, { mode: 448, encoding: "utf8" });
+    await fs6.writeFile(tmpScript, scriptContent, { mode: 448, encoding: "utf8" });
     console.log(`[bridge.handler] cloning ${label} into ${basePath} \u2026`);
     const env = {
       ...process.env,
@@ -120608,7 +120751,7 @@ stderr: ${stderr}`));
     console.log(`[bridge.handler] clone of ${label} complete.`);
     await execGit(basePath, ["remote", "set-url", "origin", url]);
   } finally {
-    await fs7.unlink(tmpScript).catch(() => {
+    await fs6.unlink(tmpScript).catch(() => {
     });
   }
 }
@@ -120662,8 +120805,8 @@ var CORE_DENY_RULES = [
   "Bash(npm publish *)"
 ];
 async function writeWorktreeSettings(worktreePath, opts = {}) {
-  const dir = path10.join(worktreePath, ".claude");
-  await fs7.mkdir(dir, { recursive: true });
+  const dir = path9.join(worktreePath, ".claude");
+  await fs6.mkdir(dir, { recursive: true });
   const allow = Array.from(/* @__PURE__ */ new Set([...CORE_ALLOW_RULES, ...opts.allowExtra ?? []]));
   const settings = {
     permissions: {
@@ -120671,17 +120814,17 @@ async function writeWorktreeSettings(worktreePath, opts = {}) {
       deny: CORE_DENY_RULES
     }
   };
-  await fs7.writeFile(
-    path10.join(dir, "settings.local.json"),
+  await fs6.writeFile(
+    path9.join(dir, "settings.local.json"),
     JSON.stringify(settings, null, 2),
     "utf8"
   );
 }
 async function ensureNodeModules(worktreePath) {
-  const monorepDir = path10.join(worktreePath, "monorep");
-  const pkgJson = path10.join(monorepDir, "package.json");
+  const monorepDir = path9.join(worktreePath, "monorep");
+  const pkgJson = path9.join(monorepDir, "package.json");
   if (!await pathExists(pkgJson)) return;
-  const modulesMarker = path10.join(monorepDir, "node_modules", ".modules.yaml");
+  const modulesMarker = path9.join(monorepDir, "node_modules", ".modules.yaml");
   if (await pathExists(modulesMarker)) return;
   const start = Date.now();
   try {
@@ -120937,7 +121080,7 @@ var BridgeHandler = class {
             throw new Error("agent_workspace runtime requires workspace path conventions");
           }
         }
-        const worktreePath = isAgentWorkspace ? path10.join(conventions.workspaceSessionsDir, threadId) : path10.join(conventions.worktreesDir, threadId);
+        const worktreePath = isAgentWorkspace ? path9.join(conventions.workspaceSessionsDir, threadId) : path9.join(conventions.worktreesDir, threadId);
         const runCwd = isAgentWorkspace ? conventions.agentWorkspacePath : worktreePath;
         const hasRepo = !isAgentWorkspace && !!conventions.repoCachePath;
         const buildWorktree = hasRepo && !conventions.readOnly;
@@ -121008,7 +121151,7 @@ var BridgeHandler = class {
               `[bridge.handler] worktree ${worktreePath} exists but git health check failed \u2014 removing stale dir and rebuilding (BL-8: migrated worktree with dead .git pointer)`
             );
             try {
-              await fs7.rm(worktreePath, { recursive: true, force: true });
+              await fs6.rm(worktreePath, { recursive: true, force: true });
             } catch (rmErr) {
               console.warn("[bridge.handler] failed to remove stale worktree (will attempt rebuild anyway):", rmErr);
             }
@@ -121032,7 +121175,7 @@ var BridgeHandler = class {
               `[bridge.handler] created worktree ${worktreePath} on branch ${branchName}`
             );
           } else {
-            await fs7.mkdir(worktreePath, { recursive: true });
+            await fs6.mkdir(worktreePath, { recursive: true });
             if (conventions.readOnly && conventions.repoCachePath) {
               console.log(
                 `[bridge.handler] created scratch dir ${worktreePath} (read_only bot: repo read-only at ${conventions.repoCachePath}, no worktree)`
@@ -121259,6 +121402,13 @@ var BridgeHandler = class {
             botGitIdentity: this.deps.botConfig?.git_identity,
             gitlabToken: this.deps.gitlabToken
           });
+          if (isAgentWorkspace && handle.pid != null) {
+            const sessionPidFile = path9.join(worktreePath, ".larkway", "runner.pid");
+            void fs6.mkdir(path9.dirname(sessionPidFile), { recursive: true }).then(
+              () => fs6.writeFile(sessionPidFile, JSON.stringify({ pid: handle.pid }), "utf8")
+            ).catch(() => {
+            });
+          }
           let sessionId;
           let trustedAnswerText = "";
           try {
@@ -121411,109 +121561,49 @@ var BridgeHandler = class {
                 }
               }
             } else {
-              const surfaceDispatch = await dispatchResponseSurface({
-                state: reportedState,
-                prototypeConfig,
-                facts: {
-                  botId: this.deps.botConfig?.id ?? "v1-default",
-                  chatId: parsed.chatId,
-                  threadId,
-                  triggerMessageId: messageId,
-                  replyToMessageId: messageId,
-                  replyInThread
-                },
-                worktreePath,
-                baseCard: baseCardPayload,
-                cardStarted: !!card,
-                postOutboundAvailable: false,
-                postLedgerAvailable: true,
-                visibleFallbackAvailable: true,
-                postClient: this.deps.postClient
-              });
-              if (surfaceDispatch.card) {
-                if (!card) {
+              if (!card) {
+                try {
+                  card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
                   try {
-                    card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
-                    try {
-                      await writeCardFile(worktreePath, {
-                        messageId: card.messageId,
-                        chatId: parsed.chatId,
-                        threadId,
-                        botId: this.deps.botConfig?.id ?? "",
-                        replyInThread,
-                        createdAt: (/* @__PURE__ */ new Date()).toISOString()
-                      });
-                    } catch (err) {
-                      console.warn("[bridge.handler] writeCardFile(late) failed (continuing):", err);
-                    }
-                  } catch (err) {
-                    console.error(
-                      "[bridge.handler] late visible card fallback start failed; creating post fallback:",
-                      err
-                    );
-                    const failureReason2 = [
-                      legacyCardStartFailed ? `initial legacy visible card start failed: ${legacyCardStartFailureReason ?? "unknown"}` : void 0,
-                      `late legacy visible card fallback start failed: ${String(err)}`
-                    ].filter((part) => !!part).join("; ");
-                    const postFallback = await createOnlyPostFallback({
-                      postClient: this.deps.postClient,
-                      replyToMessageId: messageId,
-                      replyInThread,
-                      botId: this.deps.botConfig?.id ?? "v1-default",
+                    await writeCardFile(worktreePath, {
+                      messageId: card.messageId,
+                      chatId: parsed.chatId,
                       threadId,
-                      triggerMessageId: messageId,
-                      finalText: surfaceDispatch.card.finalText ?? "Larkway completed but no visible card was available.",
-                      failureReason: failureReason2,
-                      title: surfaceDispatch.card.titleOverride ?? "Larkway fallback",
-                      logPrefix: "[bridge.handler]"
+                      botId: this.deps.botConfig?.id ?? "",
+                      replyInThread,
+                      createdAt: (/* @__PURE__ */ new Date()).toISOString()
                     });
-                    if (!postFallback) throw err;
-                  }
-                }
-                if (card) {
-                  await card.finalize(surfaceDispatch.card);
-                  let keepCardFileForRetry = false;
-                  if (surfaceDispatch.post?.requiresFallbackLedgerMark) {
-                    try {
-                      await markPostLedgerFallbackVisible(
-                        worktreePath,
-                        surfaceDispatch.post.idempotencyKey,
-                        {
-                          fallbackCardMessageId: card.messageId,
-                          error: surfaceDispatch.post.fallbackError ?? surfaceDispatch.card.failureReason ?? "post outbound failed; visible card fallback used"
-                        }
-                      );
-                    } catch (err) {
-                      keepCardFileForRetry = true;
-                      console.warn(
-                        "[bridge.handler] fallback ledger mark failed after visible card finalize; keeping card.json for retry:",
-                        err
-                      );
-                    }
-                  }
-                  if (surfaceDispatch.post?.requiresPolicyLedgerMark) {
-                    try {
-                      await markPostLedgerPolicyBlockedVisible(
-                        worktreePath,
-                        surfaceDispatch.post.idempotencyKey,
-                        {
-                          fallbackCardMessageId: card.messageId,
-                          error: surfaceDispatch.post.policyError ?? surfaceDispatch.card.failureReason ?? "mention policy blocked; visible card fallback used"
-                        }
-                      );
-                    } catch (err) {
-                      keepCardFileForRetry = true;
-                      console.warn(
-                        "[bridge.handler] policy-blocked ledger mark failed after visible card finalize; keeping card.json for retry:",
-                        err
-                      );
-                    }
-                  }
-                  if (!keepCardFileForRetry) {
-                    await deleteCardFile(worktreePath);
+                  } catch (err) {
+                    console.warn("[bridge.handler] writeCardFile(late) failed (continuing):", err);
                   }
+                } catch (err) {
+                  console.error(
+                    "[bridge.handler] late visible card fallback start failed; creating post fallback:",
+                    err
+                  );
+                  const failureReason2 = [
+                    legacyCardStartFailed ? `initial legacy visible card start failed: ${legacyCardStartFailureReason ?? "unknown"}` : void 0,
+                    `late legacy visible card fallback start failed: ${String(err)}`
+                  ].filter((part) => !!part).join("; ");
+                  const postFallback = await createOnlyPostFallback({
+                    postClient: this.deps.postClient,
+                    replyToMessageId: messageId,
+                    replyInThread,
+                    botId: this.deps.botConfig?.id ?? "v1-default",
+                    threadId,
+                    triggerMessageId: messageId,
+                    finalText: baseCardPayload.finalText,
+                    failureReason: failureReason2,
+                    title: baseCardPayload.titleOverride ?? "Larkway fallback",
+                    logPrefix: "[bridge.handler]"
+                  });
+                  if (!postFallback) throw err;
                 }
               }
+              if (card) {
+                await card.finalize(baseCardPayload);
+                await deleteCardFile(worktreePath);
+              }
             }
             settle(true);
             await recordEvent({
@@ -121548,7 +121638,7 @@ var BridgeHandler = class {
           reason: String(err)
         });
         settle(false);
-        const wtPath = this.deps.conventions.runtime === "agent_workspace" && this.deps.conventions.workspaceSessionsDir ? path10.join(this.deps.conventions.workspaceSessionsDir, threadId) : path10.join(this.deps.conventions.worktreesDir, threadId);
+        const wtPath = this.deps.conventions.runtime === "agent_workspace" && this.deps.conventions.workspaceSessionsDir ? path9.join(this.deps.conventions.workspaceSessionsDir, threadId) : path9.join(this.deps.conventions.worktreesDir, threadId);
         const hardFailureText = `\u6267\u884C\u5931\u8D25: ${String(err)}`;
         const createHardFailurePostFallback = async (failureReason) => {
           const fallback = await createOnlyPostFallback({
@@ -121619,18 +121709,18 @@ var BridgeHandler = class {
 };
 
 // src/bridge/eventLog.ts
-import fs8 from "node:fs/promises";
-import path11 from "node:path";
+import fs7 from "node:fs/promises";
+import path10 from "node:path";
 var DEFAULT_RUNTIME_EVENT_LIMIT = 20;
 var writeQueues = /* @__PURE__ */ new Map();
 function resolveRuntimeEventsPath(larkwayHome2, botId) {
-  const dir = botId ? path11.join(larkwayHome2, botId) : larkwayHome2;
-  return path11.join(dir, "recent-events.json");
+  const dir = botId ? path10.join(larkwayHome2, botId) : larkwayHome2;
+  return path10.join(dir, "recent-events.json");
 }
 async function readRuntimeEvents(larkwayHome2, botId, limit = DEFAULT_RUNTIME_EVENT_LIMIT) {
   const file = resolveRuntimeEventsPath(larkwayHome2, botId);
   try {
-    const raw = await fs8.readFile(file, "utf-8");
+    const raw = await fs7.readFile(file, "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed)) return [];
     return parsed.filter(isRuntimeEventRecord).sort((a, b) => tsOf(b.receivedAt) - tsOf(a.receivedAt)).slice(0, limit);
@@ -121688,11 +121778,11 @@ async function enqueue(key, fn) {
   }
 }
 async function writeEvents(file, events) {
-  await fs8.mkdir(path11.dirname(file), { recursive: true });
+  await fs7.mkdir(path10.dirname(file), { recursive: true });
   const tmp = `${file}.${process.pid}.${Date.now()}.tmp`;
-  await fs8.writeFile(tmp, `${JSON.stringify(events, null, 2)}
+  await fs7.writeFile(tmp, `${JSON.stringify(events, null, 2)}
 `, "utf-8");
-  await fs8.rename(tmp, file);
+  await fs7.rename(tmp, file);
 }
 function mergeStatusPath(prev, next, append) {
   const out = [...next ?? prev ?? []];
@@ -121714,7 +121804,7 @@ function isRuntimeEventRecord(value) {
 
 // src/housekeeping/gc.ts
 import { spawn } from "node:child_process";
-import { readFile as readFile4, readdir, stat } from "node:fs/promises";
+import { readFile as readFile4, readdir, rm, stat } from "node:fs/promises";
 import { join as pathJoin } from "node:path";
 var DEFAULT_SCAN_INTERVAL_MS = 30 * 60 * 1e3;
 var DEFAULT_IDLE_NOTIFY_MS = 4 * 60 * 60 * 1e3;
@@ -121726,12 +121816,20 @@ var Housekeeping = class {
   #idleCleanupMs;
   /** This housekeeping's bot scope — resolves which worktrees dir to sweep. */
   #botId;
+  /**
+   * Bot runtime. "agent_workspace" reclaims per-thread session dirs under
+   * agents/<id>/workspace/sessions/ via rm -rf (they are plain dirs / full
+   * clones, not git worktrees). Anything else (legacy) reclaims git worktrees
+   * under <botId>/worktrees/ via `git worktree remove`.
+   */
+  #runtime;
   /** thread_ids that have already received an idle-notify warn this session */
   #notified = /* @__PURE__ */ new Set();
   #timer;
   constructor(deps, opts) {
     this.#sessionStore = deps.sessionStore;
     this.#botId = deps.botId;
+    this.#runtime = deps.runtime;
     this.#scanIntervalMs = opts?.scanIntervalMs ?? DEFAULT_SCAN_INTERVAL_MS;
     this.#idleNotifyMs = opts?.idleNotifyMs ?? DEFAULT_IDLE_NOTIFY_MS;
     this.#idleCleanupMs = opts?.idleCleanupMs ?? DEFAULT_IDLE_CLEANUP_MS;
@@ -121776,9 +121874,9 @@ var Housekeeping = class {
       if (idleMs >= this.#idleCleanupMs) {
         const idleHours = Math.floor(idleMs / (60 * 60 * 1e3));
         console.warn(
-          `[housekeeping] \u8BDD\u9898 ${tid} idle ${idleHours}h+,worktree \u53EF\u6E05\u7406`
+          `[housekeeping] \u8BDD\u9898 ${tid} idle ${idleHours}h+,\u5DE5\u4F5C\u76EE\u5F55\u53EF\u6E05\u7406`
         );
-        void cleanupWorktree(tid, record.botId, dryRun);
+        void this.#cleanupThread(tid, record.botId, dryRun);
         this.#notified.delete(tid);
         continue;
       }
@@ -121799,32 +121897,46 @@ var Housekeeping = class {
    * cleanupWorktree (kill PIDs → git worktree remove --force).
    */
   async #sweepOrphans(liveThreadIds, now, dryRun) {
-    const worktreesDir = resolveWorktreesDir(this.#botId);
+    const reclaimDir = this.#runtime === "agent_workspace" ? resolveAgentWorkspaceSessionsDir(this.#botId ?? "") : resolveWorktreesDir(this.#botId);
     let dirNames;
     try {
-      const entries = await readdir(worktreesDir, { withFileTypes: true });
+      const entries = await readdir(reclaimDir, { withFileTypes: true });
       dirNames = entries.filter((e) => e.isDirectory()).map((e) => e.name);
     } catch (err) {
       if (err.code !== "ENOENT") {
-        console.error(`[gc] orphan sweep: cannot read ${worktreesDir}:`, err);
+        console.error(`[gc] orphan sweep: cannot read ${reclaimDir}:`, err);
       }
       return;
     }
     for (const name of selectOrphanWorktreeNames(dirNames, liveThreadIds)) {
-      const wtPath = pathJoin(worktreesDir, name);
+      if (name.startsWith("_")) continue;
+      const dirPath = pathJoin(reclaimDir, name);
       let ageMs;
       try {
-        ageMs = now - (await stat(wtPath)).mtimeMs;
+        ageMs = now - (await stat(dirPath)).mtimeMs;
       } catch {
         continue;
       }
       if (ageMs < this.#idleCleanupMs) continue;
       const ageHours = Math.floor(ageMs / (60 * 60 * 1e3));
       console.warn(
-        `[housekeeping] orphan worktree ${name}(\u65E0 session \u8BB0\u5F55, idle ${ageHours}h+)\u2014 \u6E05\u7406`
+        `[housekeeping] orphan ${name}(\u65E0 session \u8BB0\u5F55, idle ${ageHours}h+)\u2014 \u6E05\u7406`
       );
-      await cleanupWorktree(name, this.#botId, dryRun);
+      await this.#cleanupThread(name, this.#botId, dryRun);
+    }
+  }
+  /**
+   * Runtime-aware reclaim of one thread's working dir.
+   * - agent_workspace: rm -rf agents/<id>/workspace/sessions/<tid> (plain dir /
+   *   full clones — `git worktree remove` cannot reclaim these).
+   * - legacy:          git worktree remove --force <botId>/worktrees/<tid>.
+   * Both kill any lingering runner PIDs first (idle >24h → normally dead).
+   */
+  #cleanupThread(threadId, botId, dryRun) {
+    if (this.#runtime === "agent_workspace") {
+      return cleanupAgentSession(threadId, botId ?? this.#botId, dryRun);
     }
+    return cleanupWorktree(threadId, botId, dryRun);
   }
 };
 function selectOrphanWorktreeNames(dirNames, liveThreadIds) {
@@ -121955,10 +122067,65 @@ async function cleanupWorktree(threadId, botId, dryRun) {
     console.error(`[gc] worktree remove failed for path=${worktreePath}:`, err);
   }
 }
+function isReclaimableSessionPath(p) {
+  const m = /[/\\]workspace[/\\]sessions[/\\]([^/\\]+)[/\\]?$/.exec(p);
+  if (m === null) return false;
+  const seg = m[1];
+  return seg !== "." && seg !== "..";
+}
+async function removeSessionDir(sessionPath, dryRun) {
+  if (!isReclaimableSessionPath(sessionPath)) {
+    console.error(`[gc] refusing to rm -rf non-session path: ${sessionPath}`);
+    return;
+  }
+  if (dryRun) {
+    console.log(`[gc] dry-run: would rm -rf ${sessionPath}`);
+    return;
+  }
+  console.log(`[gc] rm -rf ${sessionPath}`);
+  try {
+    await rm(sessionPath, { recursive: true, force: true });
+  } catch (err) {
+    console.error(`[gc] rm -rf failed for ${sessionPath}:`, err);
+  }
+}
+async function cleanupAgentSession(threadId, agentId, dryRun) {
+  if (!agentId) {
+    console.error(
+      `[gc] cleanupAgentSession: missing agentId for thread=${threadId}`
+    );
+    return;
+  }
+  let sessionPath;
+  try {
+    sessionPath = resolveAgentSessionPath(agentId, threadId);
+  } catch (err) {
+    console.error(`[gc] invalid session threadId=${threadId}:`, err);
+    return;
+  }
+  console.log(
+    `[gc] cleanup session thread=${threadId} path=${sessionPath} dryRun=${dryRun}`
+  );
+  let pids;
+  try {
+    pids = await findPidsByWorktree(sessionPath);
+  } catch (err) {
+    console.error(`[gc] pid lookup failed for path=${sessionPath}:`, err);
+    pids = [];
+  }
+  const alivePids = pids.filter(isPidAlive);
+  if (alivePids.length > 0) {
+    console.warn(
+      `[gc] skip live session thread=${threadId} path=${sessionPath}: runner pid(s) [${alivePids.join(", ")}] still alive \u2014 not reclaiming in-flight work`
+    );
+    return;
+  }
+  await removeSessionDir(sessionPath, dryRun);
+}
 
 // src/config/botLoader.ts
 import { readdir as readdir2, readFile as readFile5 } from "node:fs/promises";
-import path12 from "node:path";
+import path11 from "node:path";
 
 // node_modules/.pnpm/js-yaml@4.1.1/node_modules/js-yaml/dist/js-yaml.mjs
 function isNothing(subject) {
@@ -124794,7 +124961,7 @@ async function loadBots(botsDir) {
   }
   const bots = [];
   for (const filename of yamlFiles.sort()) {
-    const filePath = path12.join(botsDir, filename);
+    const filePath = path11.join(botsDir, filename);
     let raw;
     try {
       raw = await readFile5(filePath, "utf-8");
@@ -124815,7 +124982,7 @@ ${issues}`);
     }
     const bot = result.data;
     if (bot.memory_file) {
-      const memoryPath = path12.join(botsDir, bot.memory_file);
+      const memoryPath = path11.join(botsDir, bot.memory_file);
       try {
         bot.agent_memory = await readFile5(memoryPath, "utf-8");
       } catch (err) {
@@ -124848,6 +125015,239 @@ ${issues}`);
 // src/bridge/reconcile.ts
 import { readdir as readdir3, stat as stat2 } from "node:fs/promises";
 import { join as pathJoin2 } from "node:path";
+
+// src/bridge/postFile.ts
+import fs8 from "node:fs/promises";
+import path12 from "node:path";
+var PostLedgerStatusSchema = external_exports.enum([
+  "planned",
+  "pending",
+  "sent",
+  "failed",
+  "fallback_visible",
+  "policy_blocked"
+]);
+var POST_LEDGER_TRANSITIONS = {
+  planned: ["pending", "fallback_visible", "policy_blocked"],
+  pending: ["sent", "failed", "fallback_visible", "policy_blocked"],
+  sent: [],
+  failed: ["fallback_visible"],
+  fallback_visible: [],
+  policy_blocked: []
+};
+function canTransitionPostStatus(from, to) {
+  return from === to || POST_LEDGER_TRANSITIONS[from].includes(to);
+}
+function assertPostStatusTransition(from, to) {
+  if (!canTransitionPostStatus(from, to)) {
+    throw new Error(`invalid post ledger transition: ${from} -> ${to}`);
+  }
+}
+var PostAttemptSchema = external_exports.object({
+  attemptedAt: external_exports.string(),
+  status: external_exports.enum(["sent", "failed"]),
+  retryable: external_exports.boolean().default(false),
+  error: external_exports.string().optional(),
+  code: external_exports.string().optional()
+});
+var PostLedgerEntrySchema = external_exports.object({
+  idempotencyKey: external_exports.string().min(1).max(64),
+  status: PostLedgerStatusSchema,
+  botId: external_exports.string().min(1),
+  chatId: external_exports.string().min(1),
+  threadId: external_exports.string().min(1),
+  replyToMessageId: external_exports.string().min(1),
+  role: external_exports.enum(["primary", "secondary", "fallback"]),
+  logicalIndex: external_exports.number().int().nonnegative(),
+  contentDigest: external_exports.string().min(1),
+  mentionCount: external_exports.number().int().nonnegative().default(0),
+  postMessageId: external_exports.string().optional(),
+  fallbackCardMessageId: external_exports.string().optional(),
+  error: external_exports.string().optional(),
+  attempts: external_exports.array(PostAttemptSchema).default([]),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var PostFileSchema = external_exports.object({
+  version: external_exports.literal(1),
+  posts: external_exports.array(PostLedgerEntrySchema).max(50)
+});
+function emptyPostFile() {
+  return { version: 1, posts: [] };
+}
+function postDirOf(worktreePath) {
+  return path12.join(worktreePath, ".larkway");
+}
+function postFilePathOf(worktreePath) {
+  return path12.join(postDirOf(worktreePath), "post.json");
+}
+async function readPostFile(worktreePath) {
+  const file = postFilePathOf(worktreePath);
+  let raw;
+  try {
+    raw = await fs8.readFile(file, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") return null;
+    console.warn(`[postFile] read ${file} failed:`, err);
+    return null;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    console.warn(`[postFile] ${file} not valid JSON:`, err);
+    return null;
+  }
+  const result = PostFileSchema.safeParse(parsed);
+  if (!result.success) {
+    console.warn(`[postFile] ${file} failed schema validation:`, result.error.issues);
+    return null;
+  }
+  return result.data;
+}
+async function writePostFile(worktreePath, data) {
+  const dir = postDirOf(worktreePath);
+  const file = postFilePathOf(worktreePath);
+  await fs8.mkdir(dir, { recursive: true });
+  const parsed = PostFileSchema.parse(data);
+  const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
+  await fs8.writeFile(tmp, JSON.stringify(parsed, null, 2), "utf8");
+  try {
+    await fs8.rename(tmp, file);
+  } catch (err) {
+    await fs8.rm(tmp, { force: true }).catch(() => {
+    });
+    throw err;
+  }
+}
+var DEFAULT_POST_RECONCILE_MIN_AGE_MS = 6e4;
+function timestampAgeMs(iso, nowMs) {
+  if (!Number.isFinite(nowMs)) return null;
+  const then = Date.parse(iso);
+  if (!Number.isFinite(then)) return null;
+  return nowMs - then;
+}
+function reconcilePostEntry(entry, opts) {
+  if (entry.botId !== opts.botId) {
+    return { entry, changed: false, sent: false, needsVisibleFallback: false };
+  }
+  if (entry.status === "sent" || entry.status === "fallback_visible" || entry.status === "policy_blocked") {
+    return { entry, changed: false, sent: false, needsVisibleFallback: false };
+  }
+  const now = opts.now();
+  const ageMs = timestampAgeMs(entry.updatedAt, Date.parse(now));
+  if (ageMs == null || ageMs < opts.minAgeMs) {
+    return { entry, changed: false, sent: false, needsVisibleFallback: false };
+  }
+  if (entry.postMessageId) {
+    return {
+      entry: {
+        ...entry,
+        status: "sent",
+        error: void 0,
+        updatedAt: now,
+        attempts: [
+          ...entry.attempts,
+          {
+            attemptedAt: now,
+            status: "sent",
+            retryable: false
+          }
+        ]
+      },
+      changed: true,
+      sent: true,
+      needsVisibleFallback: false
+    };
+  }
+  return {
+    entry,
+    changed: false,
+    sent: false,
+    needsVisibleFallback: true
+  };
+}
+function reconcilePostLedgerEntries(data, opts) {
+  const normalizedOpts = {
+    botId: opts.botId,
+    minAgeMs: opts.minAgeMs ?? DEFAULT_POST_RECONCILE_MIN_AGE_MS,
+    now: opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString())
+  };
+  let sent = 0;
+  const fallbackVisible = 0;
+  let needsVisibleFallback = 0;
+  let skippedLive = 0;
+  const visibleFallbackCandidates = [];
+  const posts = data.posts.map((post) => {
+    const reconciled = reconcilePostEntry(post, normalizedOpts);
+    if (reconciled.changed) {
+      if (reconciled.sent) sent += 1;
+    } else if (reconciled.needsVisibleFallback) {
+      needsVisibleFallback += 1;
+      visibleFallbackCandidates.push(reconciled.entry);
+    } else if (post.botId === normalizedOpts.botId && (post.status === "planned" || post.status === "pending" || post.status === "failed")) {
+      skippedLive += 1;
+    }
+    return reconciled.entry;
+  });
+  const changed = sent > 0 || fallbackVisible > 0;
+  return {
+    file: changed ? { version: 1, posts } : data,
+    result: { changed, sent, fallbackVisible, needsVisibleFallback, skippedLive },
+    visibleFallbackCandidates
+  };
+}
+async function reconcilePostFileOrphans(worktreePath, opts) {
+  const existing = await readPostFile(worktreePath);
+  if (!existing) {
+    return {
+      changed: false,
+      sent: 0,
+      fallbackVisible: 0,
+      needsVisibleFallback: 0,
+      skippedLive: 0,
+      visibleFallbackCandidates: []
+    };
+  }
+  const { file, result, visibleFallbackCandidates } = reconcilePostLedgerEntries(existing, opts);
+  if (result.changed) {
+    await writePostFile(worktreePath, file);
+  }
+  return { ...result, visibleFallbackCandidates };
+}
+async function markPostLedgerFallbackVisible(worktreePath, idempotencyKey2, opts) {
+  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
+  const idx = existing.posts.findIndex((post) => post.idempotencyKey === idempotencyKey2);
+  if (idx < 0) {
+    throw new Error(`post ledger entry not found: ${idempotencyKey2}`);
+  }
+  const current = existing.posts[idx];
+  assertPostStatusTransition(current.status, "fallback_visible");
+  const now = opts.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
+  const nextPosts = [...existing.posts];
+  nextPosts[idx] = {
+    ...current,
+    status: "fallback_visible",
+    fallbackCardMessageId: opts.fallbackCardMessageId,
+    error: opts.error,
+    updatedAt: now,
+    attempts: [
+      ...current.attempts,
+      {
+        attemptedAt: now,
+        status: "failed",
+        retryable: false,
+        code: "orphan_reconcile",
+        error: opts.error
+      }
+    ]
+  };
+  const next = { version: 1, posts: nextPosts };
+  await writePostFile(worktreePath, next);
+  return next;
+}
+
+// src/bridge/reconcile.ts
 var DEFAULT_MIN_AGE_MS = 6e4;
 var RETRY_CAP = 3;
 function isStateFreshForCard(state, card) {
@@ -125394,7 +125794,7 @@ async function writeStatusFile(botId, w) {
 
 // src/claude/runner.ts
 import { spawn as spawn2 } from "node:child_process";
-import { writeFile as writeFile3, unlink, mkdir as mkdir3 } from "node:fs/promises";
+import { writeFile as writeFile3, unlink as unlink2, mkdir as mkdir3 } from "node:fs/promises";
 import { join as join2 } from "node:path";
 import { createInterface } from "node:readline";
 var SIGKILL_GRACE_MS = 5e3;
@@ -125601,7 +126001,7 @@ function runClaude(opts) {
         clearTimeout(totalTimeoutFallbackHandle);
         rlAbortController.abort();
         if (pidFilePath !== null) {
-          void unlink(pidFilePath).catch(() => {
+          void unlink2(pidFilePath).catch(() => {
           });
         }
         if (exitCode !== 0 && !killScheduled) {
@@ -125631,7 +126031,7 @@ stderr: ${stderr}` : "")
         clearTimeout(totalTimeoutFallbackHandle);
         rlAbortController.abort();
         if (pidFilePath !== null) {
-          void unlink(pidFilePath).catch(() => {
+          void unlink2(pidFilePath).catch(() => {
           });
         }
         if (err.code === "ENOENT") {
@@ -125696,7 +126096,8 @@ stderr: ${stderr}` : "")
   return {
     events: generateEvents(),
     done,
-    kill: doKill
+    kill: doKill,
+    pid: child.pid ?? void 0
   };
 }
 var ClaudeRunner = class {
@@ -126053,7 +126454,8 @@ stderr: ${stderr}` : "")
   return {
     events: generateEvents(),
     done,
-    kill: doKill
+    kill: doKill,
+    pid: child.pid ?? void 0
   };
 }
 var CodexRunner = class {
@@ -126527,7 +126929,11 @@ async function runV2Mode({
         await upsertRuntimeEvent(larkwayHome(), bot.id, patch);
       }
     });
-    const housekeeping = new Housekeeping({ sessionStore, botId: bot.id });
+    const housekeeping = new Housekeeping({
+      sessionStore,
+      botId: bot.id,
+      runtime: bot.runtime
+    });
     const inst = {
       bot,
       client,