local-commander-agent 0.3.6 → 0.3.9-issue11.1

package/runtime/agent.mjs

@@ -2278,7 +2278,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes4, createHash: createHash10 } = __require("crypto");
+    var { randomBytes: randomBytes5, createHash: createHash13 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -2829,7 +2829,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes4(16).toString("base64");
+      const key = randomBytes5(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -2959,8 +2959,8 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest4 = createHash10("sha1").update(key + GUID).digest("base64");
-        if (res.headers["sec-websocket-accept"] !== digest4) {
+        const digest5 = createHash13("sha1").update(key + GUID).digest("base64");
+        if (res.headers["sec-websocket-accept"] !== digest5) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
         }
@@ -3240,7 +3240,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open7() {
+          ws.once("open", function open10() {
             duplex._final(callback);
           });
           return;
@@ -3261,7 +3261,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open7() {
+          ws.once("open", function open10() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -3328,7 +3328,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash10 } = __require("crypto");
+    var { createHash: createHash13 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -3635,12 +3635,12 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest4 = createHash10("sha1").update(key + GUID).digest("base64");
+        const digest5 = createHash13("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
           "Connection: Upgrade",
-          `Sec-WebSocket-Accept: ${digest4}`
+          `Sec-WebSocket-Accept: ${digest5}`
         ];
         const ws = new this.options.WebSocket(null, void 0, this.options);
         if (protocols.size) {
@@ -3723,9 +3723,9 @@ var require_websocket_server = __commonJS({
 });
 
 // agent/src/main.ts
-import path12 from "node:path";
-import os3 from "node:os";
-import { mkdir as mkdir5, open as open6, readFile as readFile5, rm as rm4 } from "node:fs/promises";
+import path17 from "node:path";
+import os4 from "node:os";
+import { mkdir as mkdir9, open as open9, readFile as readFile6, rm as rm5 } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 
 // packages/operations/src/crypto.ts
@@ -3733,9 +3733,9 @@ import { createCipheriv, createDecipheriv, createHmac, randomBytes, timingSafeEq
 var SecretBox = class {
   constructor(keys, activeId = 1) {
     this.activeId = activeId;
-    for (const [id, value] of Object.entries(keys)) {
-      const n = Number(id);
-      if (!Number.isInteger(n) || n < 1 || n > 255 || String(n) !== id || !Buffer.isBuffer(value) || value.length !== 32) throw Error("INVALID_DATA_KEY");
+    for (const [id2, value] of Object.entries(keys)) {
+      const n = Number(id2);
+      if (!Number.isInteger(n) || n < 1 || n > 255 || String(n) !== id2 || !Buffer.isBuffer(value) || value.length !== 32) throw Error("INVALID_DATA_KEY");
       this.keys.set(n, Buffer.from(value));
     }
     if (!this.keys.has(activeId)) throw Error("ACTIVE_DATA_KEY_MISSING");
@@ -4674,18 +4674,18 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path13) {
-  if (!path13)
+function getElementAtPath(obj, path18) {
+  if (!path18)
     return obj;
-  return path13.reduce((acc, key) => acc?.[key], obj);
+  return path18.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
   const promises = keys.map((key) => promisesObj[key]);
-  return Promise.all(promises).then((results) => {
+  return Promise.all(promises).then((results2) => {
     const resolvedObj = {};
     for (let i = 0; i < keys.length; i++) {
-      resolvedObj[keys[i]] = results[i];
+      resolvedObj[keys[i]] = results2[i];
     }
     return resolvedObj;
   });
@@ -5017,11 +5017,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path13, issues) {
+function prefixIssues(path18, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path13);
+    iss.path.unshift(path18);
     return iss;
   });
 }
@@ -5471,16 +5471,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path13 = []) => {
+  const processError = (error63, path18 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path18, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path18, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path18, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path18, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -5519,17 +5519,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result2 = { errors: [] };
-  const processError = (error63, path13 = []) => {
+  const processError = (error63, path18 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path18, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path18, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path18, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path18, ...issue2.path];
         if (fullpath.length === 0) {
           result2.errors.push(mapper(issue2));
           continue;
@@ -5568,8 +5568,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path13 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path13) {
+  const path18 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path18) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -7437,15 +7437,15 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     const syms = normalized.symbolKeys;
     const doc = new Doc(["payload", "ctx"], { shape, inst, memo: memo2, syms });
     const parseStr = (k) => `shape[${k}]._zod.run({ value: input[${k}], issues: [] }, ctx)`;
-    const prefixStr = (id, k) => `
-          let ${id}_ab = false;
-          for (let i = 0; i < ${id}.issues.length; i++) {
-            const iss = ${id}.issues[i];
+    const prefixStr = (id2, k) => `
+          let ${id2}_ab = false;
+          for (let i = 0; i < ${id2}.issues.length; i++) {
+            const iss = ${id2}.issues[i];
             iss.path = iss.path ? [${k}, ...iss.path] : [${k}];
             payload.issues.push(iss);
-            if (iss.continue !== true) ${id}_ab = true;
+            if (iss.continue !== true) ${id2}_ab = true;
           }
-          if (${id}_ab && ctx && ctx.abortEarly) {
+          if (${id2}_ab && ctx && ctx.abortEarly) {
             payload.value = newResult;
             return payload;
           }`;
@@ -7459,34 +7459,34 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     for (const key of normalized.allKeys) {
       if (key === "__proto__")
         continue;
-      const id = ids[key];
+      const id2 = ids[key];
       const k = typeof key === "symbol" ? `syms[${syms.indexOf(key)}]` : esc(key);
       const isPresent = `${k} in input`;
       const schema = shape[key];
       const optin = schema?._zod?.optin;
       const isOptionalIn = optin !== void 0;
       const isOptionalOut = schema?._zod?.optout === "optional";
-      doc.write(`const ${id} = ${parseStr(k)};`);
+      doc.write(`const ${id2} = ${parseStr(k)};`);
       if (isOptionalIn && isOptionalOut) {
-        const assign = optin === "optional" ? `${id}_present` : `${id}.value !== undefined || ${id}_present`;
+        const assign = optin === "optional" ? `${id2}_present` : `${id2}.value !== undefined || ${id2}_present`;
         doc.write(`
-        const ${id}_present = ${isPresent};
-        if (!${id}.issues.length || ${id}_present) {
-          if (${id}.issues.length) {${prefixStr(id, k)}
+        const ${id2}_present = ${isPresent};
+        if (!${id2}.issues.length || ${id2}_present) {
+          if (${id2}.issues.length) {${prefixStr(id2, k)}
           }
 
           if (${assign}) {
-            newResult[${k}] = ${id}.value;
+            newResult[${k}] = ${id2}.value;
           }
         }
 
       `);
       } else if (!isOptionalIn) {
         doc.write(`
-        const ${id}_present = ${isPresent};
-        if (${id}.issues.length) {${prefixStr(id, k)}
+        const ${id2}_present = ${isPresent};
+        if (${id2}.issues.length) {${prefixStr(id2, k)}
         }
-        if (!${id}_present && !${id}.issues.length) {
+        if (!${id2}_present && !${id2}.issues.length) {
           payload.issues.push({
             code: "invalid_type",
             expected: "nonoptional",
@@ -7499,22 +7499,22 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
           }
         }
 
-        if (${id}_present) {
-          newResult[${k}] = ${id}.value;
+        if (${id2}_present) {
+          newResult[${k}] = ${id2}.value;
         }
 
       `);
       } else {
         doc.write(`
-        if (${id}.issues.length) {${prefixStr(id, k)}
+        if (${id2}.issues.length) {${prefixStr(id2, k)}
         }
       `);
         if (optin === "defaulted") {
-          doc.write(`newResult[${k}] = ${id}.value;`);
+          doc.write(`newResult[${k}] = ${id2}.value;`);
         } else {
           doc.write(`
-        if (${id}.value !== undefined || ${isPresent}) {
-          newResult[${k}] = ${id}.value;
+        if (${id2}.value !== undefined || ${isPresent}) {
+          newResult[${k}] = ${id2}.value;
         }
       `);
         }
@@ -7554,14 +7554,14 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     return superParse(payload, ctx);
   };
 });
-function handleUnionResults(results, final, inst, ctx) {
-  for (const result2 of results) {
+function handleUnionResults(results2, final, inst, ctx) {
+  for (const result2 of results2) {
     if (result2.issues.length === 0) {
       final.value = result2.value;
       return final;
     }
   }
-  const nonaborted = results.filter((r) => !aborted(r));
+  const nonaborted = results2.filter((r) => !aborted(r));
   if (nonaborted.length === 1) {
     final.value = nonaborted[0].value;
     return nonaborted[0];
@@ -7570,7 +7570,7 @@ function handleUnionResults(results, final, inst, ctx) {
     code: "invalid_union",
     input: final.value,
     inst,
-    errors: results.map((result2) => result2.issues.map((iss) => finalizeIssue(iss, ctx, config())))
+    errors: results2.map((result2) => result2.issues.map((iss) => finalizeIssue(iss, ctx, config())))
   });
   return final;
 }
@@ -7597,36 +7597,36 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
       return first(payload, ctx);
     }
     let async = false;
-    const results = [];
+    const results2 = [];
     for (const option of def.options) {
       const result2 = option._zod.run({
         value: payload.value,
         issues: []
       }, ctx);
       if (result2 instanceof Promise) {
-        results.push(result2);
+        results2.push(result2);
         async = true;
       } else {
         if (result2.issues.length === 0)
           return result2;
-        results.push(result2);
+        results2.push(result2);
       }
     }
     if (!async)
-      return handleUnionResults(results, payload, inst, ctx);
-    return Promise.all(results).then((results2) => {
       return handleUnionResults(results2, payload, inst, ctx);
+    return Promise.all(results2).then((results3) => {
+      return handleUnionResults(results3, payload, inst, ctx);
     });
   };
 });
-function handleExclusiveUnionResults(results, final, inst, ctx) {
+function handleExclusiveUnionResults(results2, final, inst, ctx) {
   const matches2 = [];
-  for (let i = 0; i < results.length; i++) {
-    if (results[i].issues.length === 0)
+  for (let i = 0; i < results2.length; i++) {
+    if (results2[i].issues.length === 0)
       matches2.push(i);
   }
   if (matches2.length === 1) {
-    final.value = results[matches2[0]].value;
+    final.value = results2[matches2[0]].value;
     return final;
   }
   if (matches2.length === 0) {
@@ -7634,7 +7634,7 @@ function handleExclusiveUnionResults(results, final, inst, ctx) {
       code: "invalid_union",
       input: final.value,
       inst,
-      errors: results.map((result2) => result2.issues.map((iss) => finalizeIssue(iss, ctx, config())))
+      errors: results2.map((result2) => result2.issues.map((iss) => finalizeIssue(iss, ctx, config())))
     });
   } else {
     final.issues.push({
@@ -7657,23 +7657,23 @@ var $ZodXor = /* @__PURE__ */ $constructor("$ZodXor", (inst, def) => {
       return first(payload, ctx);
     }
     let async = false;
-    const results = [];
+    const results2 = [];
     for (const option of def.options) {
       const result2 = option._zod.run({
         value: payload.value,
         issues: []
       }, ctx);
       if (result2 instanceof Promise) {
-        results.push(result2);
+        results2.push(result2);
         async = true;
       } else {
-        results.push(result2);
+        results2.push(result2);
       }
     }
     if (!async)
-      return handleExclusiveUnionResults(results, payload, inst, ctx);
-    return Promise.all(results).then((results2) => {
       return handleExclusiveUnionResults(results2, payload, inst, ctx);
+    return Promise.all(results2).then((results3) => {
+      return handleExclusiveUnionResults(results3, payload, inst, ctx);
     });
   };
 });
@@ -19532,26 +19532,26 @@ function extractDefs(ctx, schema) {
     return;
   const idToSchema = /* @__PURE__ */ new Map();
   for (const entry of ctx.seen.entries()) {
-    const id = ctx.metadataRegistry.get(entry[0])?.id;
-    if (id) {
-      const existing = idToSchema.get(id);
+    const id2 = ctx.metadataRegistry.get(entry[0])?.id;
+    if (id2) {
+      const existing = idToSchema.get(id2);
       if (existing && existing !== entry[0]) {
-        throw new Error(`Duplicate schema id "${id}" detected during JSON Schema conversion. Two different schemas cannot share the same id when converted together.`);
+        throw new Error(`Duplicate schema id "${id2}" detected during JSON Schema conversion. Two different schemas cannot share the same id when converted together.`);
       }
-      idToSchema.set(id, entry[0]);
+      idToSchema.set(id2, entry[0]);
     }
   }
   const makeURI = (entry) => {
     const defsSegment = ctx.target === "draft-2020-12" ? "$defs" : "definitions";
     if (ctx.external) {
       const externalId = ctx.external.registry.get(entry[0])?.id;
-      const uriGenerator = ctx.external.uri ?? ((id2) => id2);
+      const uriGenerator = ctx.external.uri ?? ((id3) => id3);
       if (externalId) {
         return { ref: uriGenerator(externalId) };
       }
-      const id = entry[1].defId ?? entry[1].schema.id ?? `schema${ctx.counter++}`;
-      entry[1].defId = id;
-      return { defId: id, ref: `${uriGenerator("__shared")}#/${defsSegment}/${encodeJSONPointerSegment(id)}` };
+      const id2 = entry[1].defId ?? entry[1].schema.id ?? `schema${ctx.counter++}`;
+      entry[1].defId = id2;
+      return { defId: id2, ref: `${uriGenerator("__shared")}#/${defsSegment}/${encodeJSONPointerSegment(id2)}` };
     }
     const uriPrefix = `#`;
     const defUriPrefix = `${uriPrefix}/${defsSegment}/`;
@@ -19599,8 +19599,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         continue;
       }
     }
-    const id = ctx.metadataRegistry.get(entry[0])?.id;
-    if (id) {
+    const id2 = ctx.metadataRegistry.get(entry[0])?.id;
+    if (id2) {
       extractToDef(entry);
       continue;
     }
@@ -19833,10 +19833,10 @@ function finalize(ctx, schema) {
   } else {
   }
   if (ctx.external?.uri) {
-    const id = ctx.external.registry.get(schema)?.id;
-    if (!id)
+    const id2 = ctx.external.registry.get(schema)?.id;
+    if (!id2)
       throw new Error("Schema is missing an `id` property");
-    result2.$id = ctx.external.uri(id);
+    result2.$id = ctx.external.uri(id2);
   }
   assignProps(result2, root.defId ? root.schema : root.def ?? root.schema);
   const rootMetaId = ctx.metadataRegistry.get(schema)?.id;
@@ -20442,7 +20442,7 @@ function stringifyKeyNames(bySchema, json2, visited) {
   const values = json2.enum ?? (json2.const !== void 0 ? [json2.const] : void 0);
   if (!numericType && !values?.some((v) => typeof v === "number"))
     return json2;
-  const { minimum, maximum, exclusiveMinimum, exclusiveMaximum, multipleOf, format, id, ...rest } = json2;
+  const { minimum, maximum, exclusiveMinimum, exclusiveMaximum, multipleOf, format, id: id2, ...rest } = json2;
   if (rest.enum)
     rest.enum = rest.enum.map((v) => typeof v === "number" ? String(v) : v);
   else if (typeof rest.const === "number")
@@ -22671,13 +22671,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path13 = ref.slice(1).split("/").filter(Boolean);
-  if (path13.length === 0) {
+  const path18 = ref.slice(1).split("/").filter(Boolean);
+  if (path18.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path13[0] === defsKey) {
-    const key = path13[1] === void 0 ? void 0 : decodeJSONPointerSegment(path13[1]);
+  if (path18[0] === defsKey) {
+    const key = path18[1] === void 0 ? void 0 : decodeJSONPointerSegment(path18[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -24438,6 +24438,9 @@ var hash2 = external_exports.string().regex(/^[a-f0-9]{64}$/);
 var epoch = external_exports.string().regex(/^[1-9]\d{0,18}$/).refine((v) => BigInt(v) <= 9223372036854775807n);
 var text = external_exports.string().max(32767).refine((v) => !v.includes("\0"));
 var timestamp = external_exports.iso.datetime({ offset: false });
+var EfficiencyProfileSchema = external_exports.object({
+  model: external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:/+-]{0,79}$/)
+}).strict();
 var path = text.min(1);
 var ToolCallSchema = external_exports.discriminatedUnion("name", [
   external_exports.object({ name: external_exports.literal("fs_list"), args: external_exports.object({ path: path.optional(), recursive: external_exports.boolean().default(false), maxDepth: external_exports.number().int().min(0).max(8).default(3), maxEntries: external_exports.number().int().min(1).max(1e3).default(200) }).strict() }).strict(),
@@ -24448,7 +24451,7 @@ var ToolCallSchema = external_exports.discriminatedUnion("name", [
   external_exports.object({ name: external_exports.literal("git_status"), args: external_exports.object({ path: path.optional() }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("git_diff"), args: external_exports.object({ path: path.optional(), file: path.optional(), staged: external_exports.boolean().default(false) }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("git_log"), args: external_exports.object({ path: path.optional(), limit: external_exports.number().int().min(1).max(50).default(15) }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("project_snapshot"), args: external_exports.object({ path: path.optional() }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("project_snapshot"), args: external_exports.object({ path: path.optional(), startup: external_exports.boolean().optional(), taskId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,100}$/).optional() }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("command_run"), args: external_exports.object({ command: external_exports.string().min(1).max(260).refine((v) => !/[\r\n\0]/.test(v)), args: external_exports.array(external_exports.string().max(8192).refine((v) => !v.includes("\0"))).max(128).default([]), cwd: path.optional(), timeoutMs: external_exports.number().int().min(100).max(864e5).default(6e4) }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("localhost_request"), args: external_exports.object({ url: external_exports.string().url().max(2048), method: external_exports.enum(["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE"]).default("GET"), headers: external_exports.record(external_exports.string().max(128), external_exports.string().max(2048)).optional(), body: external_exports.string().max(6e4).optional() }).strict() }).strict()
 ]);
@@ -24483,6 +24486,8 @@ var ClientFrameSchema = external_exports.discriminatedUnion("type", [
 ]);
 var TerminalMetricsSchema = external_exports.object({ stdoutBytes: external_exports.number().int().min(0).max(4194304), stderrBytes: external_exports.number().int().min(0).max(4194304), outputTruncated: external_exports.boolean() }).strict();
 var TERMINAL_METRICS_CAPABILITY = "terminalMetrics";
+var NATIVE_CAPACITY_CAPABILITY = "nativeCapacity";
+var NativeCapacitySchema = external_exports.object({ type: external_exports.literal("nativeCapacity"), protocolVersion: external_exports.literal(1), connectionEpoch: epoch, safeSlots: external_exports.number().int().min(1).max(32), agentVersion: external_exports.string().regex(/^[A-Za-z0-9._+-]{1,64}$/) }).strict();
 var TerminalEventSchema = external_exports.object({ type: external_exports.literal("executionResult"), protocolVersion: external_exports.literal(1), requestId: uuid8, tenantId: uuid8, deviceId: uuid8, connectionEpoch: epoch, binding: ExecutionBindingSchema, state: external_exports.enum(["finished", "failed", "cancelled", "unknown"]), resultCode: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/), metrics: TerminalMetricsSchema.optional() }).strict();
 var TerminalEventAckSchema = external_exports.object({ type: external_exports.literal("executionResultAck"), protocolVersion: external_exports.literal(1), requestId: uuid8, ok: external_exports.boolean() }).strict();
 function canonicalJson(value) {
@@ -24621,9 +24626,9 @@ var GuardEvidenceRecordSchema = external_exports.object({
 function verifyGuardEvidence(input2) {
   const events = external_exports.array(GuardEventSchema).min(1).max(12).parse(input2);
   let previous = "0".repeat(64);
-  for (const { hash: digest4, ...record2 } of events) {
-    if (record2.previousHash !== previous || guardHash(record2) !== digest4 || record2.event.content.mode !== "none") throw Error("GUARD_EVIDENCE_INVALID");
-    previous = digest4;
+  for (const { hash: digest5, ...record2 } of events) {
+    if (record2.previousHash !== previous || guardHash(record2) !== digest5 || record2.event.content.mode !== "none") throw Error("GUARD_EVIDENCE_INVALID");
+    previous = digest5;
   }
   return events;
 }
@@ -24795,17 +24800,17 @@ var NativeJournal = class _NativeJournal {
     });
     return next;
   }
-  file(id) {
-    return path2.join(this.dir, id + ".entry");
+  file(id2) {
+    return path2.join(this.dir, id2 + ".entry");
   }
-  need(id) {
-    if (!uuid11.test(id)) throw failure2("JOURNAL_INPUT_INVALID");
-    const e = this.entries.get(id);
+  need(id2) {
+    if (!uuid11.test(id2)) throw failure2("JOURNAL_INPUT_INVALID");
+    const e = this.entries.get(id2);
     if (!e) throw failure2("EXECUTION_UNKNOWN");
     return clone2(e);
   }
-  async readOwned(id) {
-    const filename = this.file(id), stat = await lstat(filename);
+  async readOwned(id2) {
+    const filename = this.file(id2), stat = await lstat(filename);
     if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_ENVELOPE) throw failure2("JOURNAL_CORRUPT");
     const handle = await open2(filename, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
@@ -24821,30 +24826,30 @@ var NativeJournal = class _NativeJournal {
     if (names.length > this.options.maxEntries + 256) throw failure2("JOURNAL_CAPACITY_EXCEEDED");
     for (const name2 of names) {
       if (!name2.endsWith(".entry")) continue;
-      const id = name2.slice(0, -6);
-      if (!uuid11.test(id)) throw failure2("JOURNAL_CORRUPT");
-      const envelope = await this.readOwned(id);
+      const id2 = name2.slice(0, -6);
+      if (!uuid11.test(id2)) throw failure2("JOURNAL_CORRUPT");
+      const envelope = await this.readOwned(id2);
       this.totalBytes += envelope.length;
       if (this.totalBytes > this.options.maxBytes || this.entries.size >= this.options.maxEntries) throw failure2("JOURNAL_CAPACITY_EXCEEDED");
       let entry;
       try {
-        entry = JSON.parse(this.box.open(envelope, "execution:" + id).toString("utf8"));
+        entry = JSON.parse(this.box.open(envelope, "execution:" + id2).toString("utf8"));
         const binding2 = Object.fromEntries(bindingKeys.map((k) => [k, entry[k]]));
         validateInput(binding2);
-        if (entry.executionId !== id || !states.has(entry.state) || !canonicalTime(entry.createdAt) || !canonicalTime(entry.updatedAt) || Date.parse(entry.updatedAt) < Date.parse(entry.createdAt)) throw Error();
+        if (entry.executionId !== id2 || !states.has(entry.state) || !canonicalTime(entry.createdAt) || !canonicalTime(entry.updatedAt) || Date.parse(entry.updatedAt) < Date.parse(entry.createdAt)) throw Error();
         if (entry.result) boundedResult(entry.result);
         if (entry.resultCode !== void 0 && (typeof entry.resultCode !== "string" || !/^[A-Z0-9_]{1,40}$/.test(entry.resultCode))) throw Error();
         if (entry.reportedAt !== void 0 && (!entry.resultCode || !canonicalTime(entry.reportedAt))) throw Error();
         if (entry.guardEvents) {
           verifyGuardEvidence(entry.guardEvents);
-          if (entry.guardEvents.some((record2) => record2.event.requestId !== id)) throw Error();
+          if (entry.guardEvents.some((record2) => record2.event.requestId !== id2)) throw Error();
         }
       } catch {
         throw failure2("JOURNAL_CORRUPT");
       }
-      this.entries.set(id, entry);
-      this.sizes.set(id, envelope.length);
-      this.digests.set(id, digest2(envelope));
+      this.entries.set(id2, entry);
+      this.sizes.set(id2, envelope.length);
+      this.digests.set(id2, digest2(envelope));
     }
   }
   async persist(entry) {
@@ -24909,9 +24914,9 @@ var NativeJournal = class _NativeJournal {
       return { entry: clone2(entry), created: true };
     });
   }
-  accept(id, payloadHash) {
+  accept(id2, payloadHash) {
     return this.enqueue(async () => {
-      const e = this.need(id);
+      const e = this.need(id2);
       if (e.payloadHash !== payloadHash) throw failure2("IDEMPOTENCY_CONFLICT");
       if (e.state !== "prepared") throw failure2("EXECUTION_ALREADY_ACCEPTED");
       if (Date.parse(e.deadlineAt) <= this.now().getTime()) throw failure2("JOURNAL_DEADLINE_EXPIRED");
@@ -24921,9 +24926,9 @@ var NativeJournal = class _NativeJournal {
       return clone2(e);
     });
   }
-  running(id) {
+  running(id2) {
     return this.enqueue(async () => {
-      const e = this.need(id);
+      const e = this.need(id2);
       if (e.state !== "accepted") throw failure2("JOURNAL_STATE_INVALID");
       e.state = "running";
       e.updatedAt = this.now().toISOString();
@@ -24931,11 +24936,11 @@ var NativeJournal = class _NativeJournal {
       return clone2(e);
     });
   }
-  finish(id, value, resultCode) {
+  finish(id2, value, resultCode) {
     const result2 = boundedResult(value);
     if (resultCode !== void 0 && !/^[A-Z0-9_]{1,40}$/.test(resultCode)) throw failure2("JOURNAL_RESULT_INVALID");
     return this.enqueue(async () => {
-      const e = this.need(id);
+      const e = this.need(id2);
       if (terminal.has(e.state)) {
         if (JSON.stringify(e.result) !== JSON.stringify(result2) || resultCode !== void 0 && e.resultCode !== resultCode) throw failure2("IDEMPOTENCY_CONFLICT");
         return e;
@@ -24950,15 +24955,15 @@ var NativeJournal = class _NativeJournal {
       return clone2(e);
     });
   }
-  reject(id) {
-    return this.finishPrepared(id, "rejected");
+  reject(id2) {
+    return this.finishPrepared(id2, "rejected");
   }
-  cancelPrepared(id) {
-    return this.finishPrepared(id, "cancelled");
+  cancelPrepared(id2) {
+    return this.finishPrepared(id2, "cancelled");
   }
-  finishPrepared(id, state) {
+  finishPrepared(id2, state) {
     return this.enqueue(async () => {
-      const e = this.need(id);
+      const e = this.need(id2);
       if (e.state === state) return e;
       if (e.state !== "prepared") throw failure2("JOURNAL_STATE_INVALID");
       e.state = state;
@@ -24967,18 +24972,18 @@ var NativeJournal = class _NativeJournal {
       return clone2(e);
     });
   }
-  get(id) {
+  get(id2) {
     return this.enqueue(async () => {
-      if (!uuid11.test(id)) throw failure2("JOURNAL_INPUT_INVALID");
-      const e = this.entries.get(id);
+      if (!uuid11.test(id2)) throw failure2("JOURNAL_INPUT_INVALID");
+      const e = this.entries.get(id2);
       return e ? clone2(e) : null;
     });
   }
-  appendGuardEvidence(id, input2) {
+  appendGuardEvidence(id2, input2) {
     const snapshot2 = clone2(input2);
     return this.enqueue(async () => {
-      const entry = this.need(id);
-      if (snapshot2.event.requestId !== id) throw failure2("GUARD_EVIDENCE_INVALID");
+      const entry = this.need(id2);
+      if (snapshot2.event.requestId !== id2) throw failure2("GUARD_EVIDENCE_INVALID");
       entry.guardEvents = appendGuardEvent(entry.guardEvents ?? [], snapshot2);
       entry.updatedAt = this.now().toISOString();
       await this.persist(entry);
@@ -25009,9 +25014,9 @@ var NativeJournal = class _NativeJournal {
   listUnreportedResults() {
     return this.enqueue(async () => [...this.entries.values()].filter((e) => !e.reportedAt && e.resultCode && e.workspaceGrantId && e.policyVersion && ["finished", "failed", "cancelled", "unknown"].includes(e.state)).map(clone2));
   }
-  markReported(id, resultCode) {
+  markReported(id2, resultCode) {
     return this.enqueue(async () => {
-      const e = this.need(id);
+      const e = this.need(id2);
       if (!e.resultCode || e.resultCode !== resultCode || !e.workspaceGrantId || !e.policyVersion || !["finished", "failed", "cancelled", "unknown"].includes(e.state)) throw failure2("JOURNAL_STATE_INVALID");
       if (e.reportedAt) return;
       e.reportedAt = this.now().toISOString();
@@ -25288,12 +25293,21 @@ async function planPermissionChange(current2, programs, input2) {
     workspace.permissions.writeFiles = change.enabled;
     detail = "File writes: " + (change.enabled ? "ALLOW" : "DENY");
   } else if (change.kind === "localhost") {
+    if (workspace.fullAccess) {
+      workspace.deniedLocalhostPorts = change.enabled ? (workspace.deniedLocalhostPorts ?? []).filter((port) => port !== change.port) : [.../* @__PURE__ */ new Set([...workspace.deniedLocalhostPorts ?? [], change.port])];
+      if (workspace.deniedLocalhostPorts.length > 32) invalid2("PERMISSION_LIMIT");
+    }
     workspace.localhostPorts = change.enabled ? [.../* @__PURE__ */ new Set([...workspace.localhostPorts, change.port])].sort((a, b) => a - b) : workspace.localhostPorts.filter((port) => port !== change.port);
     if (workspace.localhostPorts.length > 32) invalid2("PERMISSION_LIMIT");
-    workspace.permissions.localhost = workspace.localhostPorts.length > 0;
+    workspace.permissions.localhost = workspace.fullAccess === true || workspace.localhostPorts.length > 0;
     resource = { rootHash: workspace.rootHash, kind: change.kind, port: change.port };
     detail = "Localhost port " + change.port + ": " + (change.enabled ? "ALLOW" : "DENY");
   } else {
+    if (workspace.fullAccess) {
+      const key = change.name.replace(/\.(exe|com|cmd|bat)$/i, "");
+      workspace.deniedCommands = change.enabled ? (workspace.deniedCommands ?? []).filter((name2) => name2.replace(/\.(exe|com|cmd|bat)$/i, "") !== key) : [.../* @__PURE__ */ new Set([...workspace.deniedCommands ?? [], change.name])];
+      if (workspace.deniedCommands.length > 32) invalid2("PERMISSION_LIMIT");
+    }
     let executableIdentity = null;
     if (change.enabled) {
       const executable = change.executable;
@@ -25307,7 +25321,7 @@ async function planPermissionChange(current2, programs, input2) {
       if (workspace.allowedCommands.length > 32 || Object.keys(nextPrograms).length > 32) invalid2("PERMISSION_LIMIT");
       executableIdentity = { executable: canonical2, dev: stat.dev, ino: stat.ino, size: stat.size, mtimeMs: stat.mtimeMs, ctimeMs: stat.ctimeMs };
     } else workspace.allowedCommands = workspace.allowedCommands.filter((value) => value !== change.name);
-    workspace.permissions.executeCommands = workspace.allowedCommands.length > 0;
+    workspace.permissions.executeCommands = workspace.fullAccess === true || workspace.allowedCommands.length > 0;
     resource = { rootHash: workspace.rootHash, kind: change.kind, name: change.name, executable: nextPrograms[change.name] ?? null, executableIdentity };
     detail = "Command " + permissionLabel(change.name) + ": " + (change.enabled ? "ALLOW" : "DENY") + "\nExact executable: " + permissionLabel(nextPrograms[change.name] ?? "not registered") + nonAsciiNotice(nextPrograms[change.name]) + "\nA permitted program can access resources available to your Windows account, including outside this folder. This is not an OS sandbox.";
   }
@@ -25570,19 +25584,19 @@ function issueApproval(ledgerInput, context, authorityInput, now, expiresAt) {
 }
 function consumeApproval(ledgerInput, context, approvalId, now) {
   try {
-    const ledger = current(ledgerInput, now), bound = binding(ledger, context, now), id = uuid14.parse(approvalId);
-    const grant = ledger.grants.find((candidate) => candidate.approvalId === id);
+    const ledger = current(ledgerInput, now), bound = binding(ledger, context, now), id2 = uuid14.parse(approvalId);
+    const grant = ledger.grants.find((candidate) => candidate.approvalId === id2);
     if (!grant || grant.state !== "active" || grant.bindingHash !== bound.bindingHash || grant.uses === Number.MAX_SAFE_INTEGER || Date.parse(now) < Date.parse(grant.issuedAt) || grant.scope === "once" && (grant.requestId !== bound.request.requestId || grant.decisionId !== bound.decision.decisionId)) throw Error();
     const consumed = { ...grant, uses: grant.uses + 1, state: grant.scope === "once" ? "consumed" : "active" };
-    return { ledger: { ...ledger, grants: ledger.grants.map((candidate) => candidate.approvalId === id ? consumed : candidate) }, grant: consumed };
+    return { ledger: { ...ledger, grants: ledger.grants.map((candidate) => candidate.approvalId === id2 ? consumed : candidate) }, grant: consumed };
   } catch {
     throw Error("APPROVAL_INVALID");
   }
 }
 function revokeApproval(ledgerInput, approvalId, now) {
   try {
-    const ledger = current(ledgerInput, now), id = uuid14.parse(approvalId);
-    return { ...ledger, grants: ledger.grants.map((grant) => grant.approvalId === id && grant.state === "active" ? { ...grant, state: "revoked" } : grant) };
+    const ledger = current(ledgerInput, now), id2 = uuid14.parse(approvalId);
+    return { ...ledger, grants: ledger.grants.map((grant) => grant.approvalId === id2 && grant.state === "active" ? { ...grant, state: "revoked" } : grant) };
   } catch {
     throw Error("APPROVAL_INVALID");
   }
@@ -25677,11 +25691,14 @@ function validateState(value) {
   const workspaces = value.workspaces ?? [];
   const programs = value.programs ?? {};
   const pendingWorkspaceRevokes = value.pendingWorkspaceRevokes ?? [];
-  if (!Array.isArray(pendingWorkspaceRevokes) || pendingWorkspaceRevokes.length > 32 || pendingWorkspaceRevokes.some((id) => typeof id !== "string" || !UUID.test(id) || id !== id.toLowerCase()) || new Set(pendingWorkspaceRevokes).size !== pendingWorkspaceRevokes.length) throw fail("STATE_CORRUPT");
+  if (!Array.isArray(pendingWorkspaceRevokes) || pendingWorkspaceRevokes.length > 32 || pendingWorkspaceRevokes.some((id2) => typeof id2 !== "string" || !UUID.test(id2) || id2 !== id2.toLowerCase()) || new Set(pendingWorkspaceRevokes).size !== pendingWorkspaceRevokes.length) throw fail("STATE_CORRUPT");
   if (!programs || typeof programs !== "object" || Array.isArray(programs) || Object.keys(programs).length > 32 || Object.entries(programs).some(([name2, executable]) => !/^[a-z0-9_.-]{1,64}$/.test(name2) || typeof executable !== "string" || !path5.isAbsolute(executable) || executable.length > 4096 || /[\u0000-\u001f]/.test(executable))) throw fail("STATE_CORRUPT");
-  if (!Array.isArray(workspaces) || workspaces.length > 32 || workspaces.some((w) => !w || !UUID.test(w.workspaceGrantId) || typeof w.root !== "string" || !path5.isAbsolute(w.root) || w.root.length > 4096 || /[\u0000-\u001f]/.test(w.root) || !/^[a-f0-9]{64}$/.test(w.rootHash) || typeof w.displayName !== "string" || !w.displayName || w.displayName.length > 120 || w.policyVersion !== 1 || !w.permissions || w.permissions.readFiles !== true || typeof w.permissions.writeFiles !== "boolean" || typeof w.permissions.executeCommands !== "boolean" || typeof w.permissions.localhost !== "boolean" || !Array.isArray(w.allowedCommands) || w.allowedCommands.length > 32 || w.allowedCommands.some((name2) => typeof name2 !== "string" || !Object.hasOwn(programs, name2)) || new Set(w.allowedCommands).size !== w.allowedCommands.length || w.permissions.executeCommands !== w.allowedCommands.length > 0 || !Array.isArray(w.localhostPorts) || w.localhostPorts.length > 32 || w.localhostPorts.some((port) => !Number.isInteger(port) || port < 1 || port > 65535) || new Set(w.localhostPorts).size !== w.localhostPorts.length || w.permissions.localhost !== w.localhostPorts.length > 0)) throw fail("STATE_CORRUPT");
+  if (!Array.isArray(workspaces) || workspaces.length > 32 || workspaces.some((w) => !w || !UUID.test(w.workspaceGrantId) || typeof w.root !== "string" || !path5.isAbsolute(w.root) || w.root.length > 4096 || /[\u0000-\u001f]/.test(w.root) || !/^[a-f0-9]{64}$/.test(w.rootHash) || typeof w.displayName !== "string" || !w.displayName || w.displayName.length > 120 || w.policyVersion !== 1 || !w.permissions || w.permissions.readFiles !== true || typeof w.permissions.writeFiles !== "boolean" || typeof w.permissions.executeCommands !== "boolean" || typeof w.permissions.localhost !== "boolean" || !Array.isArray(w.allowedCommands) || w.allowedCommands.length > 32 || w.allowedCommands.some((name2) => typeof name2 !== "string" || !Object.hasOwn(programs, name2)) || new Set(w.allowedCommands).size !== w.allowedCommands.length || w.permissions.executeCommands !== (w.fullAccess === true || w.allowedCommands.length > 0) || !Array.isArray(w.localhostPorts) || w.localhostPorts.length > 32 || w.localhostPorts.some((port) => !Number.isInteger(port) || port < 1 || port > 65535) || new Set(w.localhostPorts).size !== w.localhostPorts.length || w.permissions.localhost !== (w.fullAccess === true || w.localhostPorts.length > 0))) throw fail("STATE_CORRUPT");
   if (new Set(workspaces.map((w) => w.workspaceGrantId)).size !== workspaces.length || new Set(workspaces.map((w) => w.rootHash)).size !== workspaces.length) throw fail("STATE_CORRUPT");
   if (workspaces.some((w) => pendingWorkspaceRevokes.includes(w.workspaceGrantId))) throw fail("STATE_CORRUPT");
+  for (const w of workspaces) {
+    if (w.fullAccess !== void 0 && w.fullAccess !== true || w.deniedCommands !== void 0 && (!w.fullAccess || !Array.isArray(w.deniedCommands) || w.deniedCommands.length > 32 || w.deniedCommands.some((name2) => typeof name2 !== "string" || !/^[a-z0-9_.-]{1,64}$/.test(name2))) || w.deniedLocalhostPorts !== void 0 && (!w.fullAccess || !Array.isArray(w.deniedLocalhostPorts) || w.deniedLocalhostPorts.length > 32 || w.deniedLocalhostPorts.some((port) => !Number.isInteger(port) || port < 1 || port > 65535))) throw fail("STATE_CORRUPT");
+  }
   return { version: 1, publicKeyPem: value.publicKeyPem, privateKeyPem: value.privateKeyPem, fingerprint: value.fingerprint, dataKey: value.dataKey, ...enrollment ? { enrollment } : {}, workspaces, programs, pendingWorkspaceRevokes, ...value.permissionHistory ? { permissionHistory: permissionHistory.data } : {}, ...policyBundle ? { policyBundle } : {}, ...approvals?.success ? { approvals: approvals.data } : {}, ...value.guardRequired ? { guardRequired: true } : {}, ...guard ? { guard } : {} };
 }
 async function noSymlinkChain(target) {
@@ -25752,13 +25769,13 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     } catch (error62) {
       if (error62.code !== "ENOENT") throw error62;
     }
-    const approved = /* @__PURE__ */ new Set([MARKER, "owner-state.dat", "owner-state.lock", "journal", "agent-process.json", "optimization"]);
+    const approved = /* @__PURE__ */ new Set([MARKER, "owner-state.dat", "owner-state.lock", "journal", "agent-process.json", "optimization", ".local-commander"]);
     if (names.length && !names.includes(MARKER)) throw fail("STORE_DIRECTORY_UNKNOWN");
     if (names.some((name2) => !approved.has(name2))) throw fail("STORE_DIRECTORY_UNKNOWN");
-    for (const name2 of ["agent-process.json", "optimization"]) {
+    for (const name2 of ["agent-process.json", "optimization", ".local-commander"]) {
       if (!names.includes(name2)) continue;
       const filename = path5.join(absolute2, name2), stat = await lstat3(filename);
-      if (stat.isSymbolicLink() || (name2 === "optimization" ? !stat.isDirectory() : !stat.isFile() || stat.size < 1 || stat.size > 8192)) throw fail("STORE_DIRECTORY_INVALID");
+      if (stat.isSymbolicLink() || (name2 !== "agent-process.json" ? !stat.isDirectory() : !stat.isFile() || stat.size < 1 || stat.size > 8192)) throw fail("STORE_DIRECTORY_INVALID");
       if (name2 === "agent-process.json") {
         let value;
         try {
@@ -26154,7 +26171,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     return this.run(async () => {
       const state = await this.readState();
       if (guardActive === false && state?.guardRequired) throw fail("GUARD_RESTART_REQUIRED");
-      return [...state?.workspaces ?? []].map((w) => ({ ...w, permissions: { ...w.permissions }, allowedCommands: [...w.allowedCommands], localhostPorts: [...w.localhostPorts] }));
+      return structuredClone(state?.workspaces ?? []);
     });
   }
   loadPrograms() {
@@ -26168,17 +26185,17 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
       if (typeof workspaceGrantId !== "string" || !UUID.test(workspaceGrantId)) throw fail("WORKSPACE_INVALID");
       const state = await this.readState();
       if (!state?.enrollment) throw fail("ENROLLMENT_REQUIRED");
-      const id = workspaceGrantId.toLowerCase();
-      const workspace = state.workspaces?.find((w) => w.workspaceGrantId === id);
+      const id2 = workspaceGrantId.toLowerCase();
+      const workspace = state.workspaces?.find((w) => w.workspaceGrantId === id2);
       if (!workspace) {
-        if (state.pendingWorkspaceRevokes?.includes(id)) return;
+        if (state.pendingWorkspaceRevokes?.includes(id2)) return;
         throw fail("WORKSPACE_UNKNOWN");
       }
       if ((state.pendingWorkspaceRevokes?.length ?? 0) >= 32) throw fail("WORKSPACE_REVOKE_LIMIT");
       const before = await this.rawHash();
-      state.workspaces = state.workspaces.filter((w) => w.workspaceGrantId !== id);
-      state.pendingWorkspaceRevokes = [...state.pendingWorkspaceRevokes ?? [], id];
-      for (const name2 of Object.keys(state.programs ?? {})) if (!state.workspaces.some((w) => w.allowedCommands.includes(name2))) delete state.programs[name2];
+      state.workspaces = state.workspaces.filter((w) => w.workspaceGrantId !== id2);
+      state.pendingWorkspaceRevokes = [...state.pendingWorkspaceRevokes ?? [], id2];
+      for (const name2 of Object.keys(state.programs ?? {})) if (!state.workspaces.some((w) => w.allowedCommands.includes(name2) || w.deniedCommands?.includes(name2))) delete state.programs[name2];
       await this.writeState(state, before);
     }));
   }
@@ -26187,7 +26204,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
       const state = await this.readState();
       if (!state?.pendingWorkspaceRevokes?.includes(workspaceGrantId)) return;
       const before = await this.rawHash();
-      state.pendingWorkspaceRevokes = state.pendingWorkspaceRevokes.filter((id) => id !== workspaceGrantId);
+      state.pendingWorkspaceRevokes = state.pendingWorkspaceRevokes.filter((id2) => id2 !== workspaceGrantId);
       await this.writeState(state, before);
     }));
   }
@@ -26220,7 +26237,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
       const before = await this.rawHash();
       state.workspaces = state.workspaces.map((w) => w.workspaceGrantId === verified.workspace.workspaceGrantId ? verified.workspace : w);
       state.programs = verified.programs;
-      for (const name2 of Object.keys(state.programs)) if (!state.workspaces.some((w) => w.allowedCommands.includes(name2))) delete state.programs[name2];
+      for (const name2 of Object.keys(state.programs)) if (!state.workspaces.some((w) => w.allowedCommands.includes(name2) || w.deniedCommands?.includes(name2))) delete state.programs[name2];
       const record2 = {
         id: randomUUID3(),
         changedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -26267,7 +26284,8 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
           rootHash,
           displayName: (path5.basename(root) || root).slice(0, 120),
           policyVersion: 1,
-          permissions: { readFiles: true, writeFiles: true, executeCommands: false, localhost: false },
+          ...selected.mode === "all-drives" ? { fullAccess: true } : {},
+          permissions: { readFiles: true, writeFiles: true, executeCommands: selected.mode === "all-drives", localhost: selected.mode === "all-drives" },
           allowedCommands: [],
           localhostPorts: []
         };
@@ -26323,7 +26341,7 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
 // agent/src/tools.ts
 import { constants as constants3 } from "node:fs";
 import { lstat as lstat5, open as open4, readdir as readdir3, realpath as realpath5, rename as rename3, rm as rm3 } from "node:fs/promises";
-import path9 from "node:path";
+import path10 from "node:path";
 import { createHash as createHash9, randomUUID as randomUUID4 } from "node:crypto";
 
 // src/guard.ts
@@ -26567,11 +26585,31 @@ function invokeRead(bridge, file2, maxBytes, prefix, signal) {
   });
 }
 
+// src/process.ts
+import { statSync } from "node:fs";
+import path8 from "node:path";
+var WINDOWS_LAUNCH_EXTENSIONS = [".com", ".exe", ".bat", ".cmd"];
+function resolveWindowsLauncher(commandName, env = process.env) {
+  const extensions = (env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";").map((ext) => ext.trim().toLowerCase()).filter((ext) => WINDOWS_LAUNCH_EXTENSIONS.includes(ext));
+  for (const entry of (env.PATH ?? "").split(";")) {
+    const dir = entry.trim().replace(/^"(.*)"$/, "$1");
+    if (!path8.win32.isAbsolute(dir)) continue;
+    for (const ext of extensions) {
+      const file2 = path8.win32.join(dir, commandName + ext);
+      try {
+        if (statSync(file2).isFile()) return { file: file2, shell: ext === ".bat" || ext === ".cmd" };
+      } catch {
+      }
+    }
+  }
+  return void 0;
+}
+
 // agent/src/job-supervisor.ts
 import { spawn as spawn2 } from "node:child_process";
-import path8 from "node:path";
+import path9 from "node:path";
 function absolute(value) {
-  return typeof value === "string" && value.length > 0 && value.length < 32767 && !value.includes("\0") && path8.isAbsolute(value) && path8.resolve(value) === value;
+  return typeof value === "string" && value.length > 0 && value.length < 32767 && !value.includes("\0") && path9.isAbsolute(value) && path9.resolve(value) === value;
 }
 async function runSupervised(helper, request, options = {}) {
   if (process.platform !== "win32") throw Error("WINDOWS_SUPERVISOR_REQUIRED");
@@ -26587,7 +26625,7 @@ async function runSupervised(helper, request, options = {}) {
     let pid = null, outcome = null;
     let buffer = "", failure5 = null, closed = false, cancelSent = false;
     let killTimer, hardTimer;
-    const child = spawn2(helper, [], { cwd: path8.dirname(helper), stdio: ["pipe", "pipe", "pipe"], windowsHide: true, shell: false, env: buildChildEnvironment(process.env) });
+    const child = spawn2(helper, [], { cwd: path9.dirname(helper), stdio: ["pipe", "pipe", "pipe"], windowsHide: true, shell: false, env: buildChildEnvironment(process.env) });
     const cancel = () => {
       if (closed || cancelSent) return;
       cancelSent = true;
@@ -26741,7 +26779,7 @@ var NativeTools = class {
   options;
   async readFile(file2, maxBytes, signal) {
     try {
-      return await readBoundedFile(file2, maxBytes, this.options.ownerBridgePath ?? path9.join(path9.dirname(this.options.helperPath), "OwnerBridge.exe"), signal);
+      return await readBoundedFile(file2, maxBytes, this.options.ownerBridgePath ?? path10.join(path10.dirname(this.options.helperPath), "OwnerBridge.exe"), signal);
     } catch (error62) {
       if (error62.code === "ENOENT") throw error62;
       if (error62 instanceof Error && /^[A-Z_]{1,40}$/.test(error62.message)) fail2(error62.message);
@@ -26766,15 +26804,15 @@ var NativeTools = class {
     try {
       const canonical2 = await realpath5(workspace.root);
       if (!equalPath3(canonical2, workspace.root) || hash5(process.platform === "win32" ? canonical2.toLowerCase() : canonical2) !== workspace.rootHash) fail2("WORKSPACE_CHANGED");
-      const runtimeDirectory = path9.dirname(this.options.helperPath);
+      const runtimeDirectory = path10.dirname(this.options.helperPath);
       const protectedPaths = [
         this.options.stateDirectory,
         this.options.helperPath,
-        ...["agent.mjs", "node.exe", "OwnerBridge.exe", "LocalCommanderAgent.exe"].map((name2) => path9.join(runtimeDirectory, name2))
+        ...["agent.mjs", "node.exe", "OwnerBridge.exe", "LocalCommanderAgent.exe"].map((name2) => path10.join(runtimeDirectory, name2))
       ];
       if (this.options.ownerBridgePath) protectedPaths.push(this.options.ownerBridgePath);
-      if (process.platform === "win32" && process.env.LOCALAPPDATA && path9.isAbsolute(process.env.LOCALAPPDATA)) {
-        protectedPaths.push(path9.join(process.env.LOCALAPPDATA, "LocalCommander"));
+      if (process.platform === "win32" && process.env.LOCALAPPDATA && path10.isAbsolute(process.env.LOCALAPPDATA)) {
+        protectedPaths.push(path10.join(process.env.LOCALAPPDATA, "LocalCommander"));
       }
       guard = await PathGuard.create([canonical2], false, { protectedPaths });
     } catch (e) {
@@ -26806,7 +26844,7 @@ var NativeTools = class {
         const bytes3 = await this.readFile(filename, 1048576, signal), contents = utf8(bytes3), lines = contents.split(/\r?\n/);
         const selected = lines.slice(first - 1, Math.min(last, lines.length)).join("\n");
         if (Buffer.byteLength(selected) > 12e4) fail2("OUTPUT_LIMIT_EXCEEDED");
-        return result({ path: path9.relative(workspace.root, filename), sha256: hash5(bytes3), startLine: first, endLine: Math.min(last, lines.length), totalLines: lines.length, content: selected, truncated: last < lines.length });
+        return result({ path: path10.relative(workspace.root, filename), sha256: hash5(bytes3), startLine: first, endLine: Math.min(last, lines.length), totalLines: lines.length, content: selected, truncated: last < lines.length });
       } };
     }
     if (call.name === "fs_write" || call.name === "fs_replace") {
@@ -26842,7 +26880,7 @@ var NativeTools = class {
         }
         const bytes3 = Buffer.from(contents, "utf8");
         if (bytes3.length > MAX_FILE_WRITE_BYTES) fail2("FILE_WRITE_LIMIT");
-        const temp = path9.join(path9.dirname(target), ".lc-write-" + randomUUID4() + ".tmp");
+        const temp = path10.join(path10.dirname(target), ".lc-write-" + randomUUID4() + ".tmp");
         const handle = await open4(temp, constants3.O_CREAT | constants3.O_EXCL | constants3.O_WRONLY, 384);
         try {
           await handle.writeFile(bytes3);
@@ -26859,7 +26897,7 @@ var NativeTools = class {
             await link(temp, target);
             await rm3(temp);
           }
-          return result({ path: path9.relative(workspace.root, target), bytes: bytes3.length, sha256: hash5(bytes3), ...call.name === "fs_replace" ? { replacements } : {} });
+          return result({ path: path10.relative(workspace.root, target), bytes: bytes3.length, sha256: hash5(bytes3), ...call.name === "fs_replace" ? { replacements } : {} });
         } catch (e) {
           await handle.close().catch(() => {
           });
@@ -26880,12 +26918,12 @@ var NativeTools = class {
           stopped(signal);
           if (matches2.length >= call.args.maxResults || scanned >= 300) break;
           try {
-            const filename = await guard.resolveExisting(path9.join(base, entry.path));
+            const filename = await guard.resolveExisting(path10.join(base, entry.path));
             guard.assertSafeFile(filename);
             const data = utf8(await this.readFile(filename, 256e3, signal));
             scanned++;
             const lines = data.split(/\r?\n/);
-            for (let i = 0; i < lines.length && matches2.length < call.args.maxResults; i++) if ((call.args.caseSensitive ? lines[i] : lines[i].toLowerCase()).includes(query)) matches2.push({ path: path9.relative(workspace.root, filename), line: i + 1, text: lines[i].slice(0, 500) });
+            for (let i = 0; i < lines.length && matches2.length < call.args.maxResults; i++) if ((call.args.caseSensitive ? lines[i] : lines[i].toLowerCase()).includes(query)) matches2.push({ path: path10.relative(workspace.root, filename), line: i + 1, text: lines[i].slice(0, 500) });
           } catch (error62) {
             if (error62 instanceof NativeToolError && ["FILE_READ_FAILED", "CANCELLED"].includes(error62.code)) throw error62;
           }
@@ -26895,7 +26933,7 @@ var NativeTools = class {
     }
     if (call.name === "localhost_request") {
       const url2 = new URL(call.args.url), port = Number(url2.port || (url2.protocol === "https:" ? 443 : 80));
-      if (!["http:", "https:"].includes(url2.protocol) || !["localhost", "127.0.0.1", "[::1]"].includes(url2.hostname) || url2.username || url2.password || url2.hash || !workspace.localhostPorts.includes(port) || this.options.protectedPorts?.includes(port)) fail2("LOCALHOST_NOT_ALLOWED");
+      if (!["http:", "https:"].includes(url2.protocol) || !["localhost", "127.0.0.1", "[::1]"].includes(url2.hostname) || url2.username || url2.password || url2.hash || (workspace.fullAccess ? workspace.deniedLocalhostPorts?.includes(port) : !workspace.localhostPorts.includes(port)) || this.options.protectedPorts?.includes(port)) fail2("LOCALHOST_NOT_ALLOWED");
       const headers = {};
       for (const [name2, value] of Object.entries(call.args.headers ?? {})) {
         if (!/^[A-Za-z0-9-]+$/.test(name2) || /[\r\n]/.test(value) || ["host", "connection", "content-length", "transfer-encoding", "upgrade", "proxy-authorization", "proxy-connection"].includes(name2.toLowerCase()) || Object.keys(headers).some((k) => k.toLowerCase() === name2.toLowerCase())) fail2("INVALID_HTTP_HEADER");
@@ -26935,10 +26973,10 @@ var NativeTools = class {
       } };
     }
     if (call.name === "command_run") {
-      const cwd2 = await resolve(call.args.cwd, true), program = this.resolveProgram(call.args.command, workspace);
+      const cwd2 = await resolve(call.args.cwd, true), program = await this.resolveProgram(call.args.command, workspace, call.args.args);
       const claims2 = writeClaim(cwd2);
-      return { call, claims: claims2, execution: { executable: program.executable, args: [...program.prefixArgs ?? [], ...call.args.args], cwd: cwd2 }, run: async (signal, onStarted, onOutput) => {
-        const r = await runSupervised(this.options.helperPath, { executable: program.executable, args: [...program.prefixArgs ?? [], ...call.args.args], cwd: cwd2, timeoutMs: call.args.timeoutMs, maxProcesses: 32 }, { signal, maxOutputBytes: 9e4, onStarted, onOutput });
+      return { call, claims: claims2, execution: { ...program, cwd: cwd2 }, run: async (signal, onStarted, onOutput) => {
+        const r = await runSupervised(this.options.helperPath, { ...program, cwd: cwd2, timeoutMs: call.args.timeoutMs, maxProcesses: 32 }, { signal, maxOutputBytes: 9e4, onStarted, onOutput });
         const { pid: _pid, ...output2 } = r;
         return { ...output2, resultCode: r.cancelled ? "CANCELLED" : r.timedOut ? "TIMEOUT" : r.exitCode === 0 ? "SUCCESS" : "USER_PROGRAM_FAILED" };
       } };
@@ -26946,15 +26984,16 @@ var NativeTools = class {
     const cwd = await resolve(call.args.path, true), common = await this.gitCommonDir(cwd, workspace, guard);
     const claims = readClaim(cwd);
     if (common) claims.push({ path: common, namespace: "git", mode: "read" });
+    if (call.name === "project_snapshot" && call.args.startup) claims.push({ path: workspace.root, mode: "read" });
     let argv;
     if (call.name === "project_snapshot" || call.name === "git_status") argv = ["status", "--short", "--branch"];
     else if (call.name === "git_log") argv = ["log", "-" + call.args.limit, "--format=%H%x09%aI%x09%s"];
     else if (call.name === "git_diff") {
       argv = ["diff", "--no-ext-diff", "--no-textconv", ...call.args.staged ? ["--cached"] : []];
       if (call.args.file) {
-        const file2 = await resolve(path9.resolve(cwd, call.args.file));
-        const relative = path9.relative(cwd, file2);
-        if (relative.startsWith(".." + path9.sep) || relative === ".." || path9.isAbsolute(relative)) fail2("PATH_NOT_ALLOWED");
+        const file2 = await resolve(path10.resolve(cwd, call.args.file));
+        const relative = path10.relative(cwd, file2);
+        if (relative.startsWith(".." + path10.sep) || relative === ".." || path10.isAbsolute(relative)) fail2("PATH_NOT_ALLOWED");
         argv.push("--", relative);
       } else argv.push("--stat");
     } else fail2("TOOL_MISSING");
@@ -26962,10 +27001,10 @@ var NativeTools = class {
     const runGit = (signal, onStarted, onOutput) => runSupervised(this.options.helperPath, { ...execution, timeoutMs: 1e4, maxProcesses: 8 }, { signal, maxOutputBytes: 9e4, onStarted, onOutput });
     return { call, claims, ...execution ? { execution } : {}, run: async (signal, onStarted, onOutput) => {
       if (call.name === "project_snapshot") {
-        const listing = await this.list(guard, cwd, 1, 150, signal);
+        const listing = await this.list(guard, cwd, 1, call.args.startup ? 20 : 150, signal);
         let packageInfo = null;
         try {
-          const name2 = await guard.resolveExisting(path9.join(cwd, "package.json"));
+          const name2 = await guard.resolveExisting(path10.join(cwd, "package.json"));
           guard.assertSafeFile(name2);
           const value = JSON.parse(utf8(await this.readFile(name2, 64e3, signal)));
           packageInfo = { name: typeof value.name === "string" ? value.name : null, version: typeof value.version === "string" ? value.version : null, scripts: value.scripts && typeof value.scripts === "object" ? Object.keys(value.scripts).slice(0, 100) : [] };
@@ -26973,6 +27012,41 @@ var NativeTools = class {
           if (error62 instanceof NativeToolError && ["FILE_READ_FAILED", "CANCELLED"].includes(error62.code)) throw error62;
         }
         const status = common ? await runGit(signal) : null;
+        if (call.args.startup) {
+          let primary = cwd;
+          if (common) {
+            const git = await this.gitExecution(cwd, ["worktree", "list", "--porcelain"]);
+            const worktrees = await runSupervised(this.options.helperPath, { ...git, timeoutMs: 1e4, maxProcesses: 8 }, { signal, maxOutputBytes: 16384 });
+            if (worktrees.exitCode !== 0) fail2("GIT_FAILED");
+            const first = /^worktree (.+)$/m.exec(worktrees.stdout)?.[1]?.trim();
+            if (!first) fail2("GIT_FAILED");
+            primary = await guard.resolveExisting(first);
+          }
+          const contextFile = async (relative, limit, optional2 = false) => {
+            try {
+              const file2 = await guard.resolveExisting(path10.join(primary, relative));
+              guard.assertSafeFile(file2);
+              return utf8(await this.readFile(file2, limit, signal));
+            } catch (error62) {
+              if (optional2 && error62.code === "ENOENT") return null;
+              throw error62;
+            }
+          };
+          const policy = await contextFile("AGENTS.md", 16384);
+          if (!policy?.trim()) fail2("AGENT_INSTRUCTIONS_INVALID");
+          const board = call.args.taskId ? await contextFile("planning/ACTIVE_WORK.md", 1048576, true) : null;
+          const entry = board?.split(/(?=^#{2,3} )/m).find((section) => new RegExp(`^#{2,3}\\s+${call.args.taskId}(?:\\s|/|$)`).test(section));
+          const log = call.args.taskId ? await contextFile(`planning/tasks/${call.args.taskId}.md`, 262144, true) : null;
+          return result({
+            root: cwd,
+            primary,
+            package: packageInfo,
+            git: status?.stdout ?? null,
+            files: listing,
+            instructions: { source: "AGENTS.md", sha256: hash5(policy), text: policy },
+            task: call.args.taskId ? { taskId: call.args.taskId, entry: entry?.slice(0, 4096) ?? null, continuation: log?.slice(-4096) ?? null, truncated: !!entry && entry.length > 4096 || !!log && log.length > 4096 } : null
+          });
+        }
         return result({ root: workspace.displayName, files: listing, package: packageInfo, git: status?.stdout ?? null });
       }
       if (!common) fail2("NOT_A_GIT_REPOSITORY");
@@ -26981,16 +27055,44 @@ var NativeTools = class {
       return { ...output2, resultCode: r.exitCode === 0 ? "SUCCESS" : "GIT_FAILED" };
     } };
   }
-  resolveProgram(name2, workspace) {
-    const entry = Object.entries(this.options.programs).find(([key, value]) => key.toLowerCase() === name2.toLowerCase() || path9.isAbsolute(name2) && equalPath3(value.executable, path9.resolve(name2)));
-    if (!entry || !workspace.allowedCommands.some((v) => v.toLowerCase() === entry[0].toLowerCase()) || !path9.isAbsolute(entry[1].executable)) fail2("COMMAND_NOT_ALLOWED");
-    return { executable: entry[1].executable, prefixArgs: [...entry[1].prefixArgs ?? []] };
+  async resolveProgram(name2, workspace, args) {
+    const entry = Object.entries(this.options.programs).find(([key, value]) => key.toLowerCase() === name2.toLowerCase() || path10.isAbsolute(name2) && equalPath3(value.executable, path10.resolve(name2)));
+    if (workspace.fullAccess) {
+      const commandKey = (value) => path10.basename(value).toLowerCase().replace(/\.(exe|com|cmd|bat)$/i, "");
+      const denied = new Set((workspace.deniedCommands ?? []).map(commandKey));
+      if (denied.has(commandKey(name2)) || entry && denied.has(commandKey(entry[0]))) fail2("COMMAND_NOT_ALLOWED");
+      const extension2 = path10.extname(name2).toLowerCase();
+      const candidate = entry?.[1].executable ?? (path10.isAbsolute(name2) ? name2 : /^[\w.-]+$/.test(name2) ? resolveWindowsLauncher(
+        commandKey(name2),
+        [".exe", ".com", ".cmd", ".bat"].includes(extension2) ? { ...process.env, PATHEXT: extension2 } : process.env
+      )?.file : void 0);
+      if (!candidate || !path10.isAbsolute(candidate)) fail2("COMMAND_NOT_FOUND");
+      const executable = await realpath5(candidate).catch(() => fail2("COMMAND_NOT_FOUND"));
+      if (!(await lstat5(executable)).isFile()) fail2("COMMAND_NOT_FOUND");
+      if (denied.has(commandKey(executable))) fail2("COMMAND_NOT_ALLOWED");
+      for (const key of workspace.deniedCommands ?? []) {
+        const configured = this.options.programs[key]?.executable;
+        if (configured && equalPath3(executable, await realpath5(configured).catch(() => configured))) fail2("COMMAND_NOT_ALLOWED");
+      }
+      if (/\.(cmd|bat)$/i.test(executable)) {
+        if ([executable, ...args].some((value) => /[&|<>^%!"\r\n]/.test(value))) fail2("INVALID_SCRIPT_ARGUMENTS");
+        const literal2 = (value) => "'" + value.replaceAll("'", "''") + "'";
+        const shell = path10.join(process.env.SystemRoot ?? "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+        if (denied.has("powershell") || denied.has("cmd")) fail2("COMMAND_NOT_ALLOWED");
+        const script = "& " + literal2(executable) + " @(" + args.map(literal2).join(",") + "); exit $LASTEXITCODE";
+        return { executable: shell, args: ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")] };
+      }
+      if (!/\.(exe|com)$/i.test(executable)) fail2("COMMAND_NOT_ALLOWED");
+      return { executable, args: [...entry?.[1].prefixArgs ?? [], ...args] };
+    }
+    if (!entry || !workspace.allowedCommands.some((v) => v.toLowerCase() === entry[0].toLowerCase()) || !path10.isAbsolute(entry[1].executable)) fail2("COMMAND_NOT_ALLOWED");
+    return { executable: entry[1].executable, args: [...entry[1].prefixArgs ?? [], ...args] };
   }
   async gitExecution(cwd, args) {
     const configured = this.options.programs.git;
-    const candidates = configured ? [configured.executable] : process.platform === "win32" ? [[process.env.ProgramFiles, "Git"], [process.env["ProgramFiles(x86)"], "Git"], [process.env.LOCALAPPDATA, "Programs/Git"]].filter(([root]) => root && path9.isAbsolute(root)).map(([root, suffix]) => path9.join(root, suffix, "cmd", "git.exe")) : [];
+    const candidates = configured ? [configured.executable] : process.platform === "win32" ? [[process.env.ProgramFiles, "Git"], [process.env["ProgramFiles(x86)"], "Git"], [process.env.LOCALAPPDATA, "Programs/Git"]].filter(([root]) => root && path10.isAbsolute(root)).map(([root, suffix]) => path10.join(root, suffix, "cmd", "git.exe")) : [];
     for (const candidate of candidates) {
-      if (!path9.isAbsolute(candidate)) continue;
+      if (!path10.isAbsolute(candidate)) continue;
       try {
         const stat = await lstat5(candidate);
         if (!stat.isFile() || stat.isSymbolicLink() || !equalPath3(candidate, await realpath5(candidate))) continue;
@@ -27016,7 +27118,7 @@ var NativeTools = class {
           break;
         }
         if (item.isSymbolicLink() || excluded.has(item.name.toLowerCase())) continue;
-        const candidate = path9.join(current2.path, item.name);
+        const candidate = path10.join(current2.path, item.name);
         let resolved;
         try {
           resolved = await guard.resolveExisting(candidate);
@@ -27026,11 +27128,11 @@ var NativeTools = class {
         }
         if (!equalPath3(candidate, resolved)) continue;
         if (item.isDirectory()) {
-          entries.push({ path: path9.relative(root, resolved), type: "directory" });
+          entries.push({ path: path10.relative(root, resolved), type: "directory" });
           if (current2.level < depth) queue.push({ path: resolved, level: current2.level + 1 });
         } else if (item.isFile()) {
           const stat = await lstat5(resolved);
-          entries.push({ path: path9.relative(root, resolved), type: "file", size: stat.size });
+          entries.push({ path: path10.relative(root, resolved), type: "file", size: stat.size });
         }
       }
       if (truncated) break;
@@ -27040,7 +27142,7 @@ var NativeTools = class {
   async gitCommonDir(cwd, workspace, guard) {
     let directory = cwd;
     while (guard.isWithin(directory, workspace.root)) {
-      const dotGit = path9.join(directory, ".git");
+      const dotGit = path10.join(directory, ".git");
       try {
         const stat = await lstat5(dotGit);
         if (stat.isSymbolicLink()) fail2("GIT_METADATA_CHANGED");
@@ -27049,14 +27151,14 @@ var NativeTools = class {
         else {
           const content = utf8(await this.readFile(dotGit, 4096)).trim();
           if (!content.startsWith("gitdir: ")) fail2("GIT_METADATA_CHANGED");
-          gitDir = await realpath5(path9.resolve(directory, content.slice(8)));
+          gitDir = await realpath5(path10.resolve(directory, content.slice(8)));
         }
         if (guard.isWithin(gitDir, this.options.stateDirectory) || !guard.isWithin(gitDir, workspace.root) && (!workspace.gitCommonDir || !guard.isWithin(gitDir, workspace.gitCommonDir))) fail2("GIT_COMMON_DIRECTORY_NOT_APPROVED");
         let common = gitDir;
         try {
-          const content = utf8(await this.readFile(path9.join(gitDir, "commondir"), 4096)).trim();
+          const content = utf8(await this.readFile(path10.join(gitDir, "commondir"), 4096)).trim();
           if (!content) fail2("GIT_METADATA_CHANGED");
-          common = await realpath5(path9.resolve(gitDir, content));
+          common = await realpath5(path10.resolve(gitDir, content));
         } catch (e) {
           if (e.code !== "ENOENT") throw e;
         }
@@ -27067,53 +27169,63 @@ var NativeTools = class {
         if (e.code !== "ENOENT") throw e;
       }
       if (equalPath3(directory, workspace.root)) break;
-      directory = path9.dirname(directory);
+      directory = path10.dirname(directory);
     }
     return null;
   }
 };
 
 // agent/src/scheduler.ts
-import path10 from "node:path";
+import path11 from "node:path";
 import os2 from "node:os";
 function canonical(value) {
-  const p = path10.resolve(value);
+  const p = path11.resolve(value);
   return process.platform === "win32" ? p.toLowerCase() : p;
 }
 function ancestor(a, b) {
-  const relative = path10.relative(a, b);
-  return relative === "" || !path10.isAbsolute(relative) && relative !== ".." && !relative.startsWith(".." + path10.sep);
+  const relative = path11.relative(a, b);
+  return relative === "" || !path11.isAbsolute(relative) && relative !== ".." && !relative.startsWith(".." + path11.sep);
 }
 function claimsConflict(a, b) {
   return a.some((x) => b.some((y) => (x.namespace ?? "filesystem") === (y.namespace ?? "filesystem") && (x.mode === "write" || y.mode === "write") && (ancestor(x.path, y.path) || ancestor(y.path, x.path))));
 }
 var NativeScheduler = class {
-  safeSlots;
-  active = /* @__PURE__ */ new Map();
-  waiting = [];
-  accepting = true;
   constructor(options = {}) {
+    this.options = options;
     const capacity = Math.max(1, Math.min(16, Math.floor(Math.max(2, os2.availableParallelism?.() ?? os2.cpus().length) / 2)));
     this.safeSlots = options.safeSlots ?? capacity;
     this.maxQueued = options.maxQueued ?? 128;
     if (!Number.isInteger(this.safeSlots) || this.safeSlots < 1 || this.safeSlots > 32 || !Number.isInteger(this.maxQueued) || this.maxQueued < 1 || this.maxQueued > 256) throw Error("INVALID_SCHEDULER_LIMIT");
   }
+  options;
+  safeSlots;
+  active = /* @__PURE__ */ new Map();
+  waiting = [];
+  accepting = true;
   maxQueued;
-  schedule(id, claims, deadlineAt, run, signal) {
+  observe(event) {
+    try {
+      void Promise.resolve(this.options.onEvent?.(event)).catch(() => {
+      });
+    } catch {
+    }
+  }
+  schedule(id2, claims, deadlineAt, run, signal) {
     if (!this.accepting) return Promise.reject(Error("AGENT_PAUSED"));
-    if (!id || id.length > 100 || this.active.has(id) || this.waiting.some((j) => j.id === id)) return Promise.reject(Error("DUPLICATE_SCHEDULED_EXECUTION"));
-    if (!Array.isArray(claims) || !claims.length || claims.length > 32 || claims.some((c) => !c || !path10.isAbsolute(c.path) || !["read", "write"].includes(c.mode))) return Promise.reject(Error("INVALID_RESOURCE_CLAIM"));
+    if (!id2 || id2.length > 100 || this.active.has(id2) || this.waiting.some((j) => j.id === id2)) return Promise.reject(Error("DUPLICATE_SCHEDULED_EXECUTION"));
+    if (!Array.isArray(claims) || !claims.length || claims.length > 32 || claims.some((c) => !c || !path11.isAbsolute(c.path) || !["read", "write"].includes(c.mode))) return Promise.reject(Error("INVALID_RESOURCE_CLAIM"));
     const deadline = deadlineAt.getTime();
     if (!Number.isFinite(deadline) || deadline <= Date.now()) return Promise.reject(Error("ADMISSION_DEADLINE_EXPIRED"));
     if (signal?.aborted) return Promise.reject(Error("CANCELLED_BEFORE_ACCEPTANCE"));
     if (this.waiting.length >= this.maxQueued) return Promise.reject(Error("RESOURCE_BUSY"));
     return new Promise((resolve, reject) => {
-      const job = { id, claims: claims.map((c) => ({ ...c, path: canonical(c.path) })), deadline, run, signal, resolve, reject };
+      const job = { id: id2, claims: claims.map((c) => ({ ...c, path: canonical(c.path) })), deadline, run, signal, resolve, reject };
       const remove = (reason) => {
         const index = this.waiting.indexOf(job);
         if (index < 0) return;
         this.waiting.splice(index, 1);
         this.cleanup(job);
+        this.observe({ kind: "queue_rejected", executionId: id2, code: reason, terminalProof: true });
         reject(Error(reason));
         this.pump();
       };
@@ -27121,6 +27233,7 @@ var NativeScheduler = class {
       job.timer = setTimeout(() => remove("ADMISSION_DEADLINE_EXPIRED"), Math.min(2147483647, Math.max(1, deadline - Date.now())));
       signal?.addEventListener("abort", job.aborted, { once: true });
       this.waiting.push(job);
+      this.observe({ kind: "queued", executionId: id2, deadlineAt: deadline });
       this.pump();
     });
   }
@@ -27132,9 +27245,11 @@ var NativeScheduler = class {
     for (let i = 0; i < this.waiting.length && this.active.size < this.safeSlots; ) {
       const job = this.waiting[i];
       if (!this.accepting || job.signal?.aborted || job.deadline <= Date.now()) {
+        const code = !this.accepting ? "AGENT_PAUSED" : job.signal?.aborted ? "CANCELLED_BEFORE_ACCEPTANCE" : "ADMISSION_DEADLINE_EXPIRED";
         this.waiting.splice(i, 1);
         this.cleanup(job);
-        job.reject(Error(!this.accepting ? "AGENT_PAUSED" : job.signal?.aborted ? "CANCELLED_BEFORE_ACCEPTANCE" : "ADMISSION_DEADLINE_EXPIRED"));
+        this.observe({ kind: "queue_rejected", executionId: job.id, code, terminalProof: true });
+        job.reject(Error(code));
         continue;
       }
       if ([...this.active.values()].some((claims) => claimsConflict(claims, job.claims))) {
@@ -27148,8 +27263,10 @@ var NativeScheduler = class {
       this.waiting.splice(i, 1);
       this.cleanup(job);
       this.active.set(job.id, job.claims);
+      this.observe({ kind: "admitted", executionId: job.id, deadlineAt: job.deadline });
       void Promise.resolve().then(job.run).then(job.resolve, job.reject).finally(() => {
         this.active.delete(job.id);
+        this.observe({ kind: "released", executionId: job.id });
         this.pump();
       });
     }
@@ -27731,6 +27848,7 @@ var NativeRuntime = class {
   connection = null;
   transport = null;
   contexts = /* @__PURE__ */ new Map();
+  completedResults = /* @__PURE__ */ new Map();
   paused = false;
   closing = false;
   connected(connection, send) {
@@ -27747,6 +27865,15 @@ var NativeRuntime = class {
     this.options.onActivity?.();
   }
   send(frame) {
+    if (frame.type === "result") {
+      this.completedResults.set(frame.binding.executionId, frame.result);
+      if (this.completedResults.size > 64) this.completedResults.delete(this.completedResults.keys().next().value);
+    }
+    try {
+      void Promise.resolve(this.options.onFrame?.(frame)).catch(() => {
+      });
+    } catch {
+    }
     try {
       return this.transport?.(frame) ?? false;
     } catch {
@@ -27941,7 +28068,7 @@ var NativeRuntime = class {
     const fresh = await this.options.journal.get(binding2.executionId);
     let result2;
     if (fresh?.result) {
-      result2 = context ? await outboundResult(context.tool.call, journalResult(fresh.result), binding2, this.options.efficiencyLedger) : journalResult(fresh.result);
+      result2 = this.completedResults.get(binding2.executionId) ?? (context ? await outboundResult(context.tool.call, journalResult(fresh.result), binding2, this.options.efficiencyLedger) : journalResult(fresh.result));
       if (frame.action === "output" && this.options.efficiencyLedger) {
         const notice = await this.options.efficiencyLedger.consumeNoticeForExecution?.(binding2.executionId).catch(() => null);
         if (notice) result2 = { ...result2, efficiencyNotice: notice };
@@ -28010,18 +28137,18 @@ var NativeRelayBridge = class {
   async flushTerminal() {
     if (!this.connection) return;
     for (const event of await this.journal.listUnreportedResults()) {
-      const id = event.executionId, connection = this.connection;
+      const id2 = event.executionId, connection = this.connection;
       if (!connection || event.tenantId !== connection.tenantId || event.deviceId !== connection.deviceId || !event.workspaceGrantId || !event.policyVersion || !event.resultCode) continue;
-      if (this.terminalSending.has(id)) continue;
-      this.terminalSending.add(id);
+      if (this.terminalSending.has(id2)) continue;
+      this.terminalSending.add(id2);
       try {
-        const binding2 = { tenantId: event.tenantId, deviceId: event.deviceId, grantId: event.grantId, sessionId: event.sessionId, operationId: event.operationId, executionId: id, connectionEpoch: event.connectionEpoch, workspaceGrantId: event.workspaceGrantId, policyVersion: event.policyVersion, payloadHash: event.payloadHash, deadlineAt: event.deadlineAt, ...event.accountId ? { accountId: event.accountId } : {} };
+        const binding2 = { tenantId: event.tenantId, deviceId: event.deviceId, grantId: event.grantId, sessionId: event.sessionId, operationId: event.operationId, executionId: id2, connectionEpoch: event.connectionEpoch, workspaceGrantId: event.workspaceGrantId, policyVersion: event.policyVersion, payloadHash: event.payloadHash, deadlineAt: event.deadlineAt, ...event.accountId ? { accountId: event.accountId } : {} };
         if (!["finished", "failed", "cancelled", "unknown"].includes(event.state)) continue;
         await this.sendTerminal(binding2, event.state, event.resultCode, terminalMetrics(event.result));
-        await this.journal.markReported(id, event.resultCode);
+        await this.journal.markReported(id2, event.resultCode);
       } catch {
       } finally {
-        this.terminalSending.delete(id);
+        this.terminalSending.delete(id2);
       }
     }
   }
@@ -28083,7 +28210,7 @@ var NativeRelayBridge = class {
 };
 
 // agent/src/relay-client.ts
-import { createPrivateKey as createPrivateKey2, randomUUID as randomUUID5, sign } from "node:crypto";
+import { createPrivateKey as createPrivateKey2, randomUUID as randomUUID6, sign } from "node:crypto";
 
 // ../../node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
@@ -28096,6 +28223,160 @@ var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
+// agent/src/native-incident-producer.ts
+import { randomUUID as randomUUID5 } from "node:crypto";
+var uuid16 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var results = /* @__PURE__ */ new Set(["accepted", "duplicate", "invalid", "stale", "unconfirmed", "capacity", "retry", "disabled", "busy"]);
+function nativeIncidentAck(candidate) {
+  if (candidate.type !== "incidentBatchAck" || candidate.protocolVersion !== 1 || Object.keys(candidate).some((key) => !["type", "protocolVersion", "batchId", "result"].includes(key)) || typeof candidate.result !== "string" || !results.has(candidate.result) || candidate.batchId !== void 0 && (typeof candidate.batchId !== "string" || !uuid16.test(candidate.batchId))) return;
+  return { result: candidate.result, ...candidate.batchId ? { batchId: String(candidate.batchId).toLowerCase() } : {} };
+}
+var NativeIncidentProducer = class {
+  constructor(supervisor, references) {
+    this.supervisor = supervisor;
+    this.references = references;
+    try {
+      this.unsubscribe = supervisor.subscribe(() => this.activity());
+    } catch {
+      this.unsubscribe = () => {
+      };
+      this.rejected++;
+    }
+  }
+  supervisor;
+  references;
+  sender;
+  batch;
+  inFlight = false;
+  queued = false;
+  nextSend = 0;
+  closed = false;
+  rejected = 0;
+  overflow = 0;
+  carry;
+  unsubscribe;
+  connected(sender) {
+    this.disconnected();
+    this.sender = sender;
+    this.nextSend = 0;
+    this.activity();
+  }
+  disconnected() {
+    this.sender = void 0;
+    this.inFlight = false;
+    this.supervisor.cancelDeadline("incident-ack");
+    this.supervisor.cancelDeadline("incident-send");
+  }
+  activity() {
+    if (this.closed || !this.sender || this.queued || this.inFlight) return;
+    this.queued = true;
+    queueMicrotask(() => {
+      this.queued = false;
+      try {
+        this.flush();
+      } catch {
+        this.rejected++;
+      }
+    });
+  }
+  ack(ack) {
+    if (!this.inFlight || !this.batch || ack.batchId !== this.batch.batchId) return;
+    this.supervisor.cancelDeadline("incident-ack");
+    this.inFlight = false;
+    if (ack.result === "accepted" || ack.result === "duplicate") {
+      this.batch = void 0;
+      this.activity();
+    } else if (ack.result === "invalid") {
+      this.batch = void 0;
+      this.rejected++;
+    } else if (ack.result === "stale" || ack.result === "disabled") this.disconnected();
+  }
+  classify(event, occurrences) {
+    const incident = event.incident;
+    if (!incident) return;
+    const executionId = incident.executionId && uuid16.test(incident.executionId) ? incident.executionId.toLowerCase() : void 0;
+    let refs = {};
+    try {
+      const confirmed = executionId && this.references?.(executionId);
+      if (confirmed && confirmed.executionId === executionId && uuid16.test(confirmed.workerId)) {
+        refs = { workerId: confirmed.workerId.toLowerCase(), ...confirmed.taskId && uuid16.test(confirmed.taskId) ? { taskId: confirmed.taskId.toLowerCase() } : {} };
+      }
+    } catch {
+    }
+    return {
+      eventId: randomUUID5(),
+      code: incident.code === "RELAY_DISCONNECTED" ? "relay_error" : incident.code === "LOCAL_QUEUE_EXPIRED" && executionId ? "queue_expired" : incident.code === "EXECUTION_UNKNOWN" && executionId ? "execution_unknown" : "supervisor_error",
+      phase: event.kind === "incident_resolved" ? "resolved" : event.kind === "incident_open" ? "open" : "update",
+      occurredAt: new Date(event.lastSeen).toISOString(),
+      occurrences,
+      ...executionId ? { executionId } : {},
+      ...refs
+    };
+  }
+  prepare() {
+    const events = [];
+    for (let inspected = 0; inspected < 256 && events.length < 31; inspected++) {
+      if (!this.carry) {
+        const taken = this.supervisor.buffer.take(1);
+        this.overflow = Math.min(Number.MAX_SAFE_INTEGER, this.overflow + taken.dropped);
+        const event2 = taken.events[0];
+        if (!event2) break;
+        if (!event2.incident) continue;
+        this.carry = { event: event2, remaining: event2.kind === "incident_resolved" ? 1 : event2.count };
+      }
+      const occurrences = Math.min(1e4, this.carry.remaining);
+      const event = this.classify(this.carry.event, occurrences);
+      if (event) events.push(event);
+      this.carry.remaining -= occurrences;
+      if (this.carry.remaining <= 0) this.carry = void 0;
+    }
+    if (this.overflow) {
+      const occurrences = Math.min(1e4, this.overflow);
+      this.overflow -= occurrences;
+      events.push({ eventId: randomUUID5(), code: "buffer_overflow", phase: "open", occurredAt: (/* @__PURE__ */ new Date()).toISOString(), occurrences });
+    }
+    if (!events.length) return;
+    return { batchId: randomUUID5(), events };
+  }
+  flush() {
+    if (this.closed || !this.sender || this.inFlight) return;
+    this.batch ??= this.prepare();
+    if (!this.batch) return;
+    if (Date.now() < this.nextSend) {
+      this.supervisor.watchDeadline("incident-send", this.nextSend, () => this.flush());
+      return;
+    }
+    this.supervisor.cancelDeadline("incident-send");
+    if (Buffer.byteLength(JSON.stringify(this.batch)) + 128 > 16384) {
+      this.batch = void 0;
+      this.rejected++;
+      return;
+    }
+    this.inFlight = true;
+    this.nextSend = Date.now() + 1e3;
+    try {
+      this.supervisor.watchDeadline("incident-ack", Date.now() + 1e4, () => {
+        this.inFlight = false;
+      });
+      if (!this.sender(this.batch)) {
+        this.inFlight = false;
+        this.supervisor.cancelDeadline("incident-ack");
+      }
+    } catch {
+      this.inFlight = false;
+      this.supervisor.cancelDeadline("incident-ack");
+    }
+  }
+  snapshot() {
+    return { pendingBatch: !!this.batch, pendingEvents: this.batch?.events.length ?? 0, inFlight: this.inFlight, rejected: this.rejected };
+  }
+  close() {
+    this.closed = true;
+    this.disconnected();
+    this.unsubscribe();
+  }
+};
+
 // agent/src/relay-client.ts
 var RelayClientError = class extends Error {
   constructor(code) {
@@ -28131,7 +28412,7 @@ function relayUrlFromEnrollment(enrollment) {
   url2.pathname = "/api/agent/relay";
   return url2.toString();
 }
-function uuid16(value, code) {
+function uuid17(value, code) {
   if (typeof value !== "string" || !UUID2.test(value)) fail3(code);
   return value.toLowerCase();
 }
@@ -28261,41 +28542,43 @@ function sendJson(socket, value, maxBytes) {
 function validateChallenge(frame, expectedProtocol) {
   if (frame.type !== "challenge") fail3("RELAY_HANDSHAKE_INVALID");
   protocol(frame.protocolVersion, expectedProtocol);
-  uuid16(frame.gatewayId, "RELAY_HANDSHAKE_INVALID");
+  uuid17(frame.gatewayId, "RELAY_HANDSHAKE_INVALID");
   if (typeof frame.nonce !== "string" || frame.nonce.length < 32 || frame.nonce.length > 512 || /[\u0000-\u001f\u007f]/u.test(frame.nonce)) fail3("RELAY_HANDSHAKE_INVALID");
   if (typeof frame.expiresAt !== "string" || !Number.isFinite(Date.parse(frame.expiresAt)) || Date.parse(frame.expiresAt) <= Date.now()) fail3("RELAY_HANDSHAKE_INVALID");
   return {
-    challengeId: uuid16(frame.challengeId, "RELAY_HANDSHAKE_INVALID"),
+    challengeId: uuid17(frame.challengeId, "RELAY_HANDSHAKE_INVALID"),
     nonce: frame.nonce
   };
 }
 function validateReady(frame, enrollment, expectedProtocol) {
   if (frame.type !== "connected") fail3("RELAY_HANDSHAKE_INVALID");
   protocol(frame.protocolVersion, expectedProtocol);
-  if (uuid16(frame.tenantId, "RELAY_HANDSHAKE_INVALID") !== enrollment.tenantId.toLowerCase()) fail3("RELAY_ID_MISMATCH");
-  if (uuid16(frame.deviceId, "RELAY_HANDSHAKE_INVALID") !== enrollment.deviceId.toLowerCase()) fail3("RELAY_ID_MISMATCH");
+  if (uuid17(frame.tenantId, "RELAY_HANDSHAKE_INVALID") !== enrollment.tenantId.toLowerCase()) fail3("RELAY_ID_MISMATCH");
+  if (uuid17(frame.deviceId, "RELAY_HANDSHAKE_INVALID") !== enrollment.deviceId.toLowerCase()) fail3("RELAY_ID_MISMATCH");
   const terminalMetrics2 = Array.isArray(frame.capabilities) && frame.capabilities.includes(TERMINAL_METRICS_CAPABILITY);
   return { connectionEpoch: epoch2(frame.connectionEpoch), terminalMetrics: terminalMetrics2 };
 }
 function validateRequest(frame, enrollment, expectedProtocol, connectionEpoch) {
   if (frame.type !== "relayFrame") fail3("RELAY_REQUEST_INVALID");
   protocol(frame.protocolVersion, expectedProtocol);
-  const tenantId = uuid16(frame.tenantId, "RELAY_REQUEST_INVALID");
-  const deviceId = uuid16(frame.deviceId, "RELAY_REQUEST_INVALID");
+  const tenantId = uuid17(frame.tenantId, "RELAY_REQUEST_INVALID");
+  const deviceId = uuid17(frame.deviceId, "RELAY_REQUEST_INVALID");
   if (tenantId !== enrollment.tenantId.toLowerCase() || deviceId !== enrollment.deviceId.toLowerCase()) fail3("RELAY_ID_MISMATCH");
   if (epoch2(frame.connectionEpoch) !== connectionEpoch) fail3("RELAY_EPOCH_MISMATCH");
   const kind = frame.kind;
   if (typeof kind !== "string" || !REQUEST_KINDS.has(kind)) fail3("RELAY_REQUEST_INVALID");
   return {
-    requestId: uuid16(frame.requestId, "RELAY_REQUEST_INVALID"),
+    requestId: uuid17(frame.requestId, "RELAY_REQUEST_INVALID"),
     tenantId,
     deviceId,
     connectionEpoch,
-    operationId: uuid16(frame.operationId, "RELAY_REQUEST_INVALID"),
-    executionId: uuid16(frame.executionId, "RELAY_REQUEST_INVALID"),
+    operationId: uuid17(frame.operationId, "RELAY_REQUEST_INVALID"),
+    executionId: uuid17(frame.executionId, "RELAY_REQUEST_INVALID"),
     kind,
     payload: frame.payload,
-    deadlineAt: isoDate(frame.deadlineAt)
+    deadlineAt: isoDate(frame.deadlineAt),
+    // Invalid optional diagnostics never reject otherwise valid execution work.
+    ...EfficiencyProfileSchema.safeParse(frame.efficiencyProfile).success ? { efficiencyProfile: EfficiencyProfileSchema.parse(frame.efficiencyProfile) } : {}
   };
 }
 function closedPromise(socket) {
@@ -28332,8 +28615,8 @@ async function connectOnce(options) {
   const identity = await options.store.load();
   if (!identity || !identity.enrollment) fail3("ENROLLMENT_MISSING");
   const enrollment = identity.enrollment;
-  const tenantId = uuid16(enrollment.tenantId, "ENROLLMENT_INVALID");
-  const deviceId = uuid16(enrollment.deviceId, "ENROLLMENT_INVALID");
+  const tenantId = uuid17(enrollment.tenantId, "ENROLLMENT_INVALID");
+  const deviceId = uuid17(enrollment.deviceId, "ENROLLMENT_INVALID");
   const url2 = relayUrlFromEnrollment(enrollment);
   const socket = new wrapper_default(url2, [], {
     followRedirects: false,
@@ -28368,7 +28651,21 @@ async function connectOnce(options) {
       nonce: challenge.nonce,
       signature
     }, maxFrameBytes);
-    const { connectionEpoch, terminalMetrics: terminalMetrics2 } = validateReady(await waitForMessage(socket, maxFrameBytes, connectTimeoutMs, "RELAY_HANDSHAKE_TIMEOUT"), enrollment, protocolVersion2);
+    const readyFrame = await waitForMessage(socket, maxFrameBytes, connectTimeoutMs, "RELAY_HANDSHAKE_TIMEOUT");
+    const { connectionEpoch, terminalMetrics: terminalMetrics2 } = validateReady(readyFrame, enrollment, protocolVersion2);
+    const incidents = Array.isArray(readyFrame.capabilities) && readyFrame.capabilities.includes("incidentBatchV1");
+    const monitorHeartbeat = Array.isArray(readyFrame.capabilities) && readyFrame.capabilities.includes("monitorHeartbeatV1") && typeof readyFrame.heartbeatMs === "number" && Number.isInteger(readyFrame.heartbeatMs) && readyFrame.heartbeatMs >= 1e3 && readyFrame.heartbeatMs <= 6e4 ? readyFrame.heartbeatMs : void 0;
+    if (monitorHeartbeat) socket.on("ping", (data) => {
+      if (data.toString() !== "lcmcp-monitor:" + connectionEpoch) return;
+      try {
+        void Promise.resolve(options.onMonitorHeartbeat?.()).catch(() => {
+        });
+      } catch {
+      }
+    });
+    if (Array.isArray(readyFrame.capabilities) && readyFrame.capabilities.includes(NATIVE_CAPACITY_CAPABILITY)) {
+      sendJson(socket, NativeCapacitySchema.parse({ type: "nativeCapacity", protocolVersion: protocolVersion2, connectionEpoch, safeSlots: options.safeSlots ?? 1, agentVersion: options.agentVersion }), maxFrameBytes);
+    }
     socket.off("message", bufferDuringReady);
     if (handshakeOverflow) fail3("RELAY_FRAME_TOO_LARGE");
     handshakeBuffer.shift();
@@ -28392,6 +28689,17 @@ async function connectOnce(options) {
       void (async () => {
         try {
           const frame = parseFrame(data, maxFrameBytes);
+          if (frame.type === "incidentBatchAck") {
+            const ack = nativeIncidentAck(frame);
+            if (incidents && ack) {
+              try {
+                void Promise.resolve(options.onIncidentAck?.(ack)).catch(() => {
+                });
+              } catch {
+              }
+            }
+            return;
+          }
           if (frame.type === "executionResultAck") {
             const ack = TerminalEventAckSchema.safeParse(frame);
             if (!ack.success || !pendingTerminal.has(ack.data.requestId)) fail3("RELAY_FRAME_INVALID");
@@ -28453,9 +28761,19 @@ async function connectOnce(options) {
       heartbeat: () => {
         if (socket.readyState !== wrapper_default.OPEN) fail3("RELAY_SOCKET_CLOSED");
       },
+      ...monitorHeartbeat ? { monitorFreshnessMs: monitorHeartbeat * 3 } : {},
+      ...incidents ? { sendIncidentBatch: (batch) => {
+        try {
+          if (socket.readyState !== wrapper_default.OPEN) return false;
+          sendJson(socket, { type: "incidentBatch", protocolVersion: 1, batchId: batch.batchId, connectionEpoch, events: batch.events }, Math.min(maxFrameBytes, 16384));
+          return true;
+        } catch {
+          return false;
+        }
+      } } : {},
       sendTerminal: (binding2, state, resultCode, metrics) => {
         if (pendingTerminal.size >= 64) return Promise.reject(new RelayClientError("RELAY_PENDING_LIMIT"));
-        const requestId = randomUUID5();
+        const requestId = randomUUID6();
         const event = { type: "executionResult", protocolVersion: 1, requestId, tenantId, deviceId, connectionEpoch, binding: binding2, state, resultCode, ...terminalMetrics2 && metrics ? { metrics } : {} };
         return new Promise((resolve, reject) => {
           const timer = setTimeout(() => {
@@ -28474,7 +28792,7 @@ async function connectOnce(options) {
       },
       registerWorkspace: (workspace) => {
         if (pendingWorkspace.size >= 32) return Promise.reject(new RelayClientError("RELAY_PENDING_LIMIT"));
-        const requestId = randomUUID5();
+        const requestId = randomUUID6();
         const event = { type: "workspace_grant", version: 1, requestId, workspaceGrantId: workspace.workspaceGrantId, rootHash: workspace.rootHash, displayName: workspace.displayName, policyVersion: workspace.policyVersion };
         return new Promise((resolve, reject) => {
           const timer = setTimeout(() => {
@@ -28493,7 +28811,7 @@ async function connectOnce(options) {
       },
       revokeWorkspace: (workspaceGrantId) => {
         if (pendingWorkspace.size >= 32) return Promise.reject(new RelayClientError("RELAY_PENDING_LIMIT"));
-        const requestId = randomUUID5();
+        const requestId = randomUUID6();
         const event = { type: "workspace_revoke", version: 1, requestId, workspaceGrantId };
         return new Promise((resolve, reject) => {
           const timer = setTimeout(() => {
@@ -28553,10 +28871,10 @@ function canonicalOrigin2(value) {
     fail4("ORIGIN_INVALID");
   }
 }
-function endpoint(origin, path13) {
-  return origin + path13;
+function endpoint(origin, path18) {
+  return origin + path18;
 }
-function uuid17(value, code) {
+function uuid18(value, code) {
   if (typeof value !== "string" || !UUID3.test(value)) fail4(code);
   return value.toLowerCase();
 }
@@ -28676,7 +28994,7 @@ var PairingClient = class {
       publicKey: identity.publicKeyPem,
       agentVersion: this.version
     }));
-    const pairingId = uuid17(response.pairingId, "PAIRING_RESPONSE_INVALID");
+    const pairingId = uuid18(response.pairingId, "PAIRING_RESPONSE_INVALID");
     const expiresAt = parseDate(response.expiresAt, "PAIRING_RESPONSE_INVALID");
     const now = this.nowMs();
     if (expiresAt.getTime() <= now || expiresAt.getTime() - now > 30 * 6e4) fail4("PAIRING_RESPONSE_INVALID");
@@ -28710,7 +29028,7 @@ var PairingClient = class {
   }
   async completeOnce(beginResult, approved, displayNameValue) {
     const pairing = this.validateBeginResult(beginResult);
-    const tenantId = uuid17(approved.tenantId, "PAIRING_RESPONSE_INVALID");
+    const tenantId = uuid18(approved.tenantId, "PAIRING_RESPONSE_INVALID");
     const email3 = accountEmail(approved.accountEmail);
     const name2 = displayName(displayNameValue);
     const identity = await this.currentIdentity();
@@ -28724,15 +29042,15 @@ var PairingClient = class {
       displayName: name2,
       agentVersion: this.version
     }));
-    const completedTenant = uuid17(response.tenantId, "PAIRING_RESPONSE_INVALID");
+    const completedTenant = uuid18(response.tenantId, "PAIRING_RESPONSE_INVALID");
     if (completedTenant !== tenantId) fail4("PAIRING_RESPONSE_INVALID");
-    const deviceId = uuid17(response.deviceId, "PAIRING_RESPONSE_INVALID");
+    const deviceId = uuid18(response.deviceId, "PAIRING_RESPONSE_INVALID");
     const enrollment = {
       tenantId,
       deviceId,
       serverOrigin: this.origin,
       accountEmail: email3,
-      ...response.accountId !== void 0 ? { accountId: uuid17(response.accountId, "PAIRING_RESPONSE_INVALID") } : {}
+      ...response.accountId !== void 0 ? { accountId: uuid18(response.accountId, "PAIRING_RESPONSE_INVALID") } : {}
     };
     await this.store.saveEnrollment(enrollment);
     return { ...enrollment };
@@ -28746,7 +29064,7 @@ var PairingClient = class {
       state: response.state,
       expiresAt: parseDate(response.expiresAt, "PAIRING_RESPONSE_INVALID")
     };
-    if (response.tenantId !== void 0) result2.tenantId = uuid17(response.tenantId, "PAIRING_RESPONSE_INVALID");
+    if (response.tenantId !== void 0) result2.tenantId = uuid18(response.tenantId, "PAIRING_RESPONSE_INVALID");
     if (response.accountEmail !== void 0) result2.accountEmail = accountEmail(response.accountEmail);
     return result2;
   }
@@ -28758,10 +29076,10 @@ var PairingClient = class {
   }
   validateBeginResult(value) {
     return {
-      pairingId: uuid17(value.pairingId, "PAIRING_INVALID"),
+      pairingId: uuid18(value.pairingId, "PAIRING_INVALID"),
       pairingSecret: pairingSecret(value.pairingSecret),
       confirmationCode: confirmationCode(value.confirmationCode),
-      approvalUrl: approvalUrl(value.approvalUrl, this.origin, uuid17(value.pairingId, "PAIRING_INVALID")),
+      approvalUrl: approvalUrl(value.approvalUrl, this.origin, uuid18(value.pairingId, "PAIRING_INVALID")),
       expiresAt: value.expiresAt instanceof Date ? new Date(value.expiresAt.getTime()) : parseDate(value.expiresAt, "PAIRING_INVALID"),
       keyFingerprint: fingerprint2(value.keyFingerprint)
     };
@@ -28793,7 +29111,7 @@ var PairingClient = class {
 };
 
 // agent/src/guard.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { randomUUID as randomUUID7 } from "node:crypto";
 var NativeGuard = class _NativeGuard {
   constructor(config2, store, journal) {
     this.config = config2;
@@ -28817,7 +29135,7 @@ var NativeGuard = class _NativeGuard {
     return this.journal.appendGuardEvidence(action.request.requestId, {
       event: {
         protocolVersion: 1,
-        evidenceId: randomUUID6(),
+        evidenceId: randomUUID7(),
         requestId: action.request.requestId,
         decisionId: decision.decisionId,
         occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -28843,12 +29161,12 @@ var NativeGuard = class _NativeGuard {
     try {
       action = guardAction(binding2, tool, this.config, now);
     } catch {
-      const decisionId2 = randomUUID6();
+      const decisionId2 = randomUUID7();
       for (const phase of ["request", "decision", "result"]) await this.journal.appendGuardEvidence(binding2.executionId, {
         payloadHash: guardHash(tool.effective ?? tool.call),
         event: {
           protocolVersion: 1,
-          evidenceId: randomUUID6(),
+          evidenceId: randomUUID7(),
           requestId: binding2.executionId,
           decisionId: decisionId2,
           occurredAt: now,
@@ -28869,7 +29187,7 @@ var NativeGuard = class _NativeGuard {
     }
     const permit = { action, expiresAt: binding2.deadlineAt, decision: {
       protocolVersion: 1,
-      decisionId: randomUUID6(),
+      decisionId: randomUUID7(),
       requestId: binding2.executionId,
       policyId: this.config.policyId,
       policyVersion: "unavailable",
@@ -29057,14 +29375,14 @@ async function deliverGuardEvidence(target, packet, options = {}) {
 // agent/src/optimization-ledger.ts
 import { constants as constants4 } from "node:fs";
 import { lstat as lstat6, mkdir as mkdir4, open as open5, readFile as readFile4, realpath as realpath6 } from "node:fs/promises";
-import path11 from "node:path";
+import path12 from "node:path";
 var MAX_LEDGER_BYTES = 64 * 1024 * 1024;
 var MAX_NOTICE_LEDGER_BYTES = 8 * 1024 * 1024;
 function failure4(code) {
   return Object.assign(new Error(code), { code });
 }
 async function safeDirectory2(directory) {
-  const absolute2 = path11.resolve(directory);
+  const absolute2 = path12.resolve(directory);
   let current2 = absolute2;
   for (; ; ) {
     try {
@@ -29072,7 +29390,7 @@ async function safeDirectory2(directory) {
     } catch (error62) {
       if (error62.code !== "ENOENT") throw error62;
     }
-    const parent = path11.dirname(current2);
+    const parent = path12.dirname(current2);
     if (parent === current2) break;
     current2 = parent;
   }
@@ -29097,8 +29415,8 @@ var OptimizationLedger = class _OptimizationLedger {
   closed = false;
   static async open(directory) {
     const dir = await safeDirectory2(directory);
-    const filename = path11.join(dir, "live-efficiency.v1.jsonl");
-    const noticesFilename = path11.join(dir, "live-efficiency-notices.v1.jsonl");
+    const filename = path12.join(dir, "live-efficiency.v1.jsonl");
+    const noticesFilename = path12.join(dir, "live-efficiency-notices.v1.jsonl");
     let existing = "";
     try {
       const stat = await lstat6(filename);
@@ -29230,8 +29548,1625 @@ var OptimizationLedger = class _OptimizationLedger {
   }
 };
 
+// agent/src/monitor.ts
+import { createHash as createHash10, randomUUID as randomUUID8 } from "node:crypto";
+import { lstat as lstat7, mkdir as mkdir5, open as open6, rename as rename4, rm as rm4 } from "node:fs/promises";
+import path13 from "node:path";
+import os3 from "node:os";
+function commandSummary(tool) {
+  if (tool.name !== "command_run") return { name: tool.name, command: tool.name };
+  const candidate = path13.win32.basename(tool.args.command).replace(/\.(exe|cmd|bat|com)$/i, "").toLowerCase();
+  const name2 = ["node", "npm", "npx", "git", "rg", "powershell", "pwsh", "cmd", "tsc", "python", "dotnet"].includes(candidate) ? candidate : "command";
+  let command = name2;
+  if (name2 === "node" && tool.args.args.includes("--test") && !tool.args.args.some((arg) => ["-e", "--eval", "-p", "--print"].includes(arg))) command += " --test";
+  else if (name2 === "git" && ["status", "diff", "log", "show", "fetch", "pull", "push", "commit"].includes(tool.args.args[0] ?? "")) command += " " + tool.args.args[0];
+  else if (name2 === "npm" && ["test", "install", "ci", "pack", "publish"].includes(tool.args.args[0] ?? "")) command += " " + tool.args.args[0];
+  else if (name2 === "npm" && tool.args.args[0] === "run" && ["test", "build", "typecheck", "lint", "dev", "start"].includes(tool.args.args[1] ?? "")) command += " run " + tool.args.args[1];
+  else if (tool.args.args.length) command += " [args]";
+  return { name: name2, command };
+}
+var ProductionMonitor = class {
+  constructor(directory, stateDirectory, agentVersion3) {
+    this.agentVersion = agentVersion3;
+    const key = createHash10("sha256").update(path13.resolve(stateDirectory).toLowerCase()).digest("hex");
+    this.file = path13.join(directory, key + ".json");
+  }
+  agentVersion;
+  instanceId = randomUUID8();
+  events = [];
+  sessions = /* @__PURE__ */ new Map();
+  executions = /* @__PURE__ */ new Map();
+  models = /* @__PURE__ */ new Map();
+  measured = /* @__PURE__ */ new Set();
+  polls = { status: 0, output: 0 };
+  efficiencyCalls = 0;
+  computer = os3.hostname().replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 64) || "PC";
+  sequence = 0;
+  connection = {
+    state: "starting",
+    origin: null,
+    epoch: null
+  };
+  writing = null;
+  dirty = false;
+  freshnessMs = 1e4;
+  transportAt = null;
+  file;
+  record(event, details = {}) {
+    this.events.push({ seq: ++this.sequence, at: (/* @__PURE__ */ new Date()).toISOString(), event, ...details });
+    if (this.events.length > 100) this.events.shift();
+  }
+  configureOrigin(origin) {
+    try {
+      const url2 = new URL(origin);
+      if (url2.origin === origin && !url2.username && !url2.password && (url2.protocol === "https:" || url2.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url2.hostname))) {
+        this.connection.origin = url2.origin;
+      }
+    } catch {
+    }
+  }
+  setConnection(state, connection) {
+    if (connection) {
+      try {
+        this.configureOrigin(new URL(connection.url).origin.replace(/^ws/, "http"));
+      } catch {
+      }
+      this.connection.epoch = connection.connectionEpoch;
+    }
+    this.connection.state = state;
+    this.freshnessMs = state === "connected" ? connection?.monitorFreshnessMs ?? 1e4 : 1e4;
+    this.transportAt = state === "connected" && connection?.monitorFreshnessMs ? (/* @__PURE__ */ new Date()).toISOString() : null;
+    this.record(state);
+  }
+  transportActivity() {
+    if (this.transportAt !== null) this.transportAt = (/* @__PURE__ */ new Date()).toISOString();
+  }
+  request(request) {
+    const payload = request.payload;
+    const parsed = ExecutionBindingSchema.safeParse(payload?.binding);
+    if (!parsed.success || parsed.data.tenantId !== request.tenantId || parsed.data.deviceId !== request.deviceId || parsed.data.executionId !== request.executionId || parsed.data.operationId !== request.operationId) return;
+    const binding2 = parsed.data;
+    this.sessions.delete(binding2.sessionId);
+    this.sessions.set(binding2.sessionId, {
+      sessionId: binding2.sessionId,
+      workspaceGrantId: binding2.workspaceGrantId,
+      lastSeenAt: (/* @__PURE__ */ new Date()).toISOString(),
+      model: null
+    });
+    if (this.sessions.size > 32) this.sessions.delete(this.sessions.keys().next().value);
+    const tool = ToolCallSchema.safeParse(payload?.tool);
+    if (request.kind === "status" || request.kind === "output") this.polls[request.kind]++;
+    if (request.kind === "execute" && tool.success && !this.executions.has(binding2.executionId)) {
+      const profile = EfficiencyProfileSchema.safeParse(request.efficiencyProfile);
+      this.executions.set(binding2.executionId, {
+        executionId: binding2.executionId,
+        sessionId: binding2.sessionId,
+        ...commandSummary(tool.data),
+        state: "requested",
+        pid: null,
+        profile: profile.success ? profile.data : null,
+        originalBytes: null,
+        sentBytes: null,
+        savedBytes: null,
+        reason: null
+      });
+      if (this.executions.size > 64) this.executions.delete(this.executions.keys().next().value);
+    }
+    this.record(request.kind, {
+      sessionId: binding2.sessionId,
+      executionId: binding2.executionId,
+      ...tool.success ? { tool: tool.data.name } : {}
+    });
+  }
+  result(binding2, state, code) {
+    const execution = this.executions.get(binding2.executionId);
+    if (execution) execution.state = ["finished", "failed", "cancelled", "unknown"].includes(state) ? state : "unknown";
+    this.record(["finished", "failed", "cancelled", "unknown"].includes(state) ? state : "result", {
+      sessionId: binding2.sessionId,
+      executionId: binding2.executionId,
+      code: code === "SUCCESS" || ErrorCodeSchema.safeParse(code).success ? code : "RESULT"
+    });
+  }
+  frame(frame) {
+    if (!("binding" in frame)) return;
+    const execution = this.executions.get(frame.binding.executionId);
+    if (!execution) return;
+    if (["prepared", "accepted", "running"].includes(frame.type)) execution.state = frame.type;
+    if (frame.type === "running" && frame.pid) execution.pid = frame.pid;
+    if (frame.type === "not_accepted") execution.state = frame.provedNotStarted ? "rejected" : "unknown";
+    if (frame.type === "result") {
+      const result2 = frame.result;
+      execution.state = !result2.treeTerminated ? "unknown" : result2.cancelled ? "cancelled" : result2.timedOut || result2.exitCode !== 0 ? "failed" : "finished";
+    }
+    if (frame.type === "control_result") execution.state = frame.state;
+  }
+  efficiency(input2) {
+    const parsed = LiveEfficiencyEventSchema.safeParse(input2);
+    if (!parsed.success || this.measured.has(parsed.data.executionId)) return;
+    const event = parsed.data, execution = this.executions.get(event.executionId);
+    if (!execution || execution.sessionId !== event.sessionId) return;
+    this.measured.add(event.executionId);
+    if (this.measured.size > 64) this.measured.delete(this.measured.values().next().value);
+    execution.originalBytes = event.originalStdoutBytes;
+    execution.sentBytes = event.sentStdoutBytes;
+    execution.savedBytes = event.savedStdoutBytes;
+    execution.reason = event.reason;
+    const profile = execution.profile;
+    let key = profile?.model ?? "";
+    if (!this.models.has(key) && this.models.size >= 31) key = "";
+    const group = this.models.get(key) ?? { model: key || null, calls: 0, savedBytes: 0, sentBytes: 0 };
+    group.calls++;
+    group.savedBytes += event.savedStdoutBytes;
+    group.sentBytes += event.sentStdoutBytes;
+    this.models.set(key, group);
+    this.efficiencyCalls++;
+    this.record(event.applied ? "compacted" : "passthrough", {
+      sessionId: event.sessionId,
+      executionId: event.executionId,
+      tool: event.toolName
+    });
+  }
+  requestFailed() {
+    this.record("request_failed");
+  }
+  connectionFailed(error62) {
+    const code = error62 instanceof Error ? error62.message : "";
+    this.record("connection_error", { code: [
+      "RELAY_CONNECT_FAILED",
+      "RELAY_CONNECT_CLOSED",
+      "RELAY_CONNECT_TIMEOUT",
+      "RELAY_HANDSHAKE_TIMEOUT",
+      "RELAY_RESULT_TIMEOUT",
+      "WORKSPACE_ACK_TIMEOUT"
+    ].includes(code) ? code : "CONNECTION_FAILED" });
+  }
+  response(value) {
+    const result2 = value;
+    if (result2?.accepted === false) this.record("rejected", {
+      code: ErrorCodeSchema.safeParse(result2.code).success ? String(result2.code) : "REJECTED"
+    });
+  }
+  snapshot() {
+    return {
+      schemaVersion: 1,
+      instanceId: this.instanceId,
+      pid: process.pid,
+      computer: this.computer,
+      processName: "lc-agent",
+      agentVersion: this.agentVersion,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      freshnessMs: this.freshnessMs,
+      ...this.transportAt ? { transportAt: this.transportAt } : {},
+      connection: { ...this.connection },
+      sessions: [...this.sessions.values()].map((session) => ({ ...session })),
+      events: this.events.map((event) => ({ ...event })),
+      executions: [...this.executions.values()].map((execution) => ({ ...execution, profile: execution.profile && { ...execution.profile } })),
+      efficiency: {
+        scope: "this_run",
+        calls: this.efficiencyCalls,
+        polls: { ...this.polls },
+        models: [...this.models.values()].map((group) => ({ ...group }))
+      }
+    };
+  }
+  flush() {
+    this.dirty = true;
+    if (this.writing) return this.writing;
+    this.writing = (async () => {
+      do {
+        this.dirty = false;
+        const directory = path13.dirname(this.file);
+        await mkdir5(directory, { recursive: true, mode: 448 });
+        const stat = await lstat7(directory);
+        if (!stat.isDirectory() || stat.isSymbolicLink()) throw Error("MONITOR_DIRECTORY_INVALID");
+        const temporary = this.file + "." + this.instanceId + ".tmp";
+        const handle = await open6(temporary, "wx", 384);
+        try {
+          try {
+            await handle.writeFile(JSON.stringify(this.snapshot()) + "\n");
+          } finally {
+            await handle.close();
+          }
+          await rename4(temporary, this.file);
+        } finally {
+          await rm4(temporary, { force: true });
+        }
+      } while (this.dirty);
+    })().finally(() => {
+      this.writing = null;
+    });
+    return this.writing;
+  }
+  async close() {
+    await this.writing?.catch(() => {
+    });
+    await this.flush();
+  }
+};
+
+// agent/src/native-event-buffer.ts
+import { createHash as createHash11 } from "node:crypto";
+function nativeFingerprint(code, executionId = "") {
+  return createHash11("sha256").update(code + "\0" + executionId).digest("hex");
+}
+var NativeEventBuffer = class {
+  pending = /* @__PURE__ */ new Map();
+  dropped = 0;
+  record(input2, at) {
+    const key = input2.kind + ":" + input2.fingerprint + (input2.incident ? ":" + input2.incident.generation : "");
+    const previous = this.pending.get(key);
+    const event = {
+      ...input2,
+      ...input2.incident ? { incident: { ...input2.incident } } : {},
+      firstSeen: previous?.firstSeen ?? at,
+      lastSeen: at,
+      count: Math.min(Number.MAX_SAFE_INTEGER, (previous?.count ?? 0) + 1)
+    };
+    this.pending.set(key, event);
+    if (this.pending.size > 256) {
+      this.pending.delete(this.pending.keys().next().value);
+      this.dropped++;
+    }
+  }
+  take(limit = 64) {
+    if (!Number.isInteger(limit) || limit < 1 || limit > 128) throw Error("NATIVE_EVENT_BATCH_LIMIT");
+    const events = [];
+    for (const [key, event] of this.pending) {
+      events.push({ ...event, ...event.incident ? { incident: { ...event.incident } } : {} });
+      this.pending.delete(key);
+      if (events.length === limit) break;
+    }
+    const dropped = this.dropped;
+    this.dropped = 0;
+    return { events, dropped };
+  }
+  get size() {
+    return this.pending.size;
+  }
+};
+
+// agent/src/native-event-supervisor.ts
+var eventKinds = /* @__PURE__ */ new Set(["queued", "admitted", "released", "queue_rejected", "prepared", "accepted", "running", "result", "not_accepted", "connected", "disconnected", "mailbox_expired"]);
+var codes = /* @__PURE__ */ new Set(["SUCCESS", "EXECUTION_UNKNOWN", "ADMISSION_DEADLINE_EXPIRED", "CANCELLED_BEFORE_ACCEPTANCE", "RESOURCE_BUSY", "AGENT_PAUSED", "PREPARATION_EXPIRED", "CANCELLED", "TIMEOUT", "USER_PROGRAM_FAILED", "TOOL_FAILED", "MAILBOX_EXPIRED"]);
+var NativeEventSupervisor = class {
+  constructor(onChange) {
+    this.onChange = onChange;
+  }
+  onChange;
+  buffer = new NativeEventBuffer();
+  incidents = /* @__PURE__ */ new Map();
+  active = /* @__PURE__ */ new Map();
+  heap = [];
+  positions = /* @__PURE__ */ new Map();
+  timer;
+  closed = false;
+  wasConnected = false;
+  omitted = 0;
+  generation = 0;
+  consumer;
+  observe(input2) {
+    try {
+      if (this.closed || !input2 || !eventKinds.has(input2.kind)) return;
+      const id2 = input2.executionId;
+      if (id2 !== void 0 && (typeof id2 !== "string" || !/^[A-Za-z0-9_-]{1,100}$/.test(id2))) return;
+      const at = Date.now();
+      const code = input2.code === void 0 ? void 0 : codes.has(input2.code) ? input2.code : "TOOL_FAILED";
+      const pid = Number.isSafeInteger(input2.pid) && input2.pid > 0 ? input2.pid : void 0;
+      this.buffer.record({
+        kind: input2.kind,
+        fingerprint: nativeFingerprint(input2.kind, id2),
+        ...id2 ? { executionId: id2 } : {},
+        ...code ? { code } : {},
+        ...pid ? { pid } : {}
+      }, at);
+      if (input2.kind === "connected") {
+        this.wasConnected = true;
+        this.resolve(void 0, at, "RELAY_DISCONNECTED");
+      }
+      if (input2.kind === "mailbox_expired") this.incident("MAILBOX_EXPIRED", void 0, "warning", at);
+      if (input2.kind === "disconnected" && this.wasConnected) this.incident("RELAY_DISCONNECTED", void 0, "warning", at);
+      if (id2) {
+        if (["queued", "prepared", "accepted", "running"].includes(input2.kind)) {
+          if (!this.active.has(id2) && this.active.size >= 320) this.omitted++;
+          else {
+            this.active.set(id2, input2.kind);
+            if (Number.isFinite(input2.deadlineAt) && input2.deadlineAt > 0 && !this.positions.has(id2)) this.insert({ id: id2, at: input2.deadlineAt });
+          }
+        }
+        if (input2.kind === "result" || input2.kind === "not_accepted" || input2.kind === "queue_rejected") {
+          this.active.delete(id2);
+          this.remove(id2);
+          if (input2.kind === "queue_rejected" && code === "ADMISSION_DEADLINE_EXPIRED" && input2.terminalProof === true) this.incident("LOCAL_QUEUE_EXPIRED", id2, "warning", at);
+          if (input2.terminalProof === true) this.resolve(id2, at);
+          else if (input2.kind !== "queue_rejected") this.incident("EXECUTION_UNKNOWN", id2, "error", at);
+        }
+      }
+      this.arm();
+      this.changed();
+    } catch {
+    }
+  }
+  frame(frame) {
+    try {
+      if (!("binding" in frame)) return;
+      const base = { executionId: frame.binding.executionId, deadlineAt: Date.parse(frame.binding.deadlineAt) };
+      if (frame.type === "prepared" || frame.type === "accepted" || frame.type === "running") {
+        this.observe({ ...base, kind: frame.type, ...frame.type === "running" && frame.pid ? { pid: frame.pid } : {} });
+      } else if (frame.type === "not_accepted") {
+        this.observe({ ...base, kind: "not_accepted", code: frame.code, terminalProof: frame.provedNotStarted });
+      } else if (frame.type === "result") {
+        this.observe({
+          ...base,
+          kind: "result",
+          code: frame.result.resultCode,
+          terminalProof: frame.result.treeTerminated && frame.result.resultCode !== "EXECUTION_UNKNOWN"
+        });
+      } else if (frame.type === "control_result" && frame.result && frame.result.resultCode !== "IN_PROGRESS") {
+        this.observe({
+          ...base,
+          kind: "result",
+          code: frame.result.resultCode,
+          terminalProof: frame.result.treeTerminated && frame.result.resultCode !== "EXECUTION_UNKNOWN"
+        });
+      }
+    } catch {
+    }
+  }
+  subscribe(consumer) {
+    if (this.consumer || this.closed) throw Error("NATIVE_EVENT_CONSUMER_UNAVAILABLE");
+    this.consumer = consumer;
+    return () => {
+      if (this.consumer === consumer) this.consumer = void 0;
+    };
+  }
+  watchDeadline(key, at, expired) {
+    if (this.closed || !/^[a-z-]{1,64}$/.test(key) || !Number.isFinite(at)) return;
+    const id2 = "watch:" + key;
+    if (!this.positions.has(id2) && this.heap.filter((value) => value.expired).length >= 8) throw Error("NATIVE_OBSERVER_DEADLINE_LIMIT");
+    this.remove(id2);
+    this.insert({ id: id2, at, expired });
+    this.arm();
+  }
+  cancelDeadline(key) {
+    this.remove("watch:" + key);
+    this.arm();
+  }
+  changed() {
+    try {
+      void Promise.resolve(this.onChange?.()).catch(() => {
+      });
+    } catch {
+    }
+    try {
+      this.consumer?.();
+    } catch {
+    }
+  }
+  incident(code, id2, severity, at) {
+    const fingerprint3 = nativeFingerprint(code, id2), old = this.incidents.get(fingerprint3);
+    const incident = {
+      fingerprint: fingerprint3,
+      ...id2 ? { executionId: id2 } : {},
+      code,
+      severity,
+      state: "open",
+      generation: old?.state === "open" ? old.generation : ++this.generation,
+      firstSeen: old?.state === "open" ? old.firstSeen : at,
+      lastSeen: at,
+      count: old?.state === "open" ? Math.min(Number.MAX_SAFE_INTEGER, old.count + 1) : 1
+    };
+    this.incidents.delete(fingerprint3);
+    this.incidents.set(fingerprint3, incident);
+    if (this.incidents.size > 128) {
+      this.incidents.delete(this.incidents.keys().next().value);
+      this.omitted++;
+    }
+    this.buffer.record({ kind: old?.state === "open" ? "incident_update" : "incident_open", fingerprint: fingerprint3, incident }, at);
+  }
+  resolve(id2, at, code) {
+    for (const incident of this.incidents.values()) {
+      if (incident.executionId !== id2 || incident.state !== "open" || code && incident.code !== code) continue;
+      incident.state = "resolved";
+      incident.lastSeen = at;
+      this.buffer.record({ kind: "incident_resolved", fingerprint: incident.fingerprint, incident }, at);
+    }
+  }
+  swap(a, b) {
+    [this.heap[a], this.heap[b]] = [this.heap[b], this.heap[a]];
+    this.positions.set(this.heap[a].id, a);
+    this.positions.set(this.heap[b].id, b);
+  }
+  up(index) {
+    while (index > 0) {
+      const parent = index - 1 >> 1;
+      if (this.heap[parent].at <= this.heap[index].at) break;
+      this.swap(parent, index);
+      index = parent;
+    }
+    return index;
+  }
+  down(index) {
+    for (; ; ) {
+      let next = index, left = index * 2 + 1, right = left + 1;
+      if (left < this.heap.length && this.heap[left].at < this.heap[next].at) next = left;
+      if (right < this.heap.length && this.heap[right].at < this.heap[next].at) next = right;
+      if (next === index) return;
+      this.swap(index, next);
+      index = next;
+    }
+  }
+  insert(deadline) {
+    this.positions.set(deadline.id, this.heap.length);
+    this.heap.push(deadline);
+    this.up(this.heap.length - 1);
+  }
+  remove(id2) {
+    const index = this.positions.get(id2);
+    if (index === void 0) return;
+    const last = this.heap.pop();
+    this.positions.delete(id2);
+    if (index < this.heap.length) {
+      this.heap[index] = last;
+      this.positions.set(last.id, index);
+      this.down(this.up(index));
+    }
+  }
+  arm() {
+    clearTimeout(this.timer);
+    this.timer = void 0;
+    if (this.closed || !this.heap.length) return;
+    this.timer = setTimeout(() => {
+      this.timer = void 0;
+      try {
+        const at = Date.now();
+        let observed = false;
+        while (this.heap.length && this.heap[0].at <= at) {
+          const deadline = this.heap[0], id2 = deadline.id;
+          this.remove(id2);
+          if (deadline.expired) {
+            try {
+              deadline.expired();
+            } catch {
+            }
+            continue;
+          }
+          const state = this.active.get(id2);
+          if (state) {
+            observed = true;
+            this.incident(state === "queued" || state === "prepared" ? "LOCAL_ADMISSION_OVERDUE" : "LOCAL_EXECUTION_OVERDUE", id2, state === "queued" || state === "prepared" ? "warning" : "error", at);
+          }
+        }
+        if (observed) this.changed();
+      } catch {
+      } finally {
+        this.arm();
+      }
+    }, Math.min(2147483647, Math.max(1, this.heap[0].at - Date.now())));
+    this.timer.unref();
+  }
+  snapshot() {
+    return {
+      active: this.active.size,
+      deadlines: this.heap.length,
+      timerArmed: !!this.timer,
+      pendingEvents: this.buffer.size,
+      omitted: this.omitted,
+      incidents: [...this.incidents.values()].map((value) => ({ ...value }))
+    };
+  }
+  close() {
+    this.closed = true;
+    clearTimeout(this.timer);
+    this.timer = void 0;
+    this.heap.length = 0;
+    this.positions.clear();
+    this.active.clear();
+    this.consumer = void 0;
+  }
+};
+
+// agent/src/native-fabric-observer.ts
+var uuid19 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var NativeFabricObserver = class {
+  constructor(supervisor, source) {
+    this.supervisor = supervisor;
+    this.source = source;
+    try {
+      this.unsubscribe = source.subscribe?.(() => this.activity());
+    } catch {
+    }
+  }
+  supervisor;
+  source;
+  referencesByExecution = /* @__PURE__ */ new Map();
+  reportedExpired = /* @__PURE__ */ new Set();
+  deviceId;
+  generation = 0;
+  reading = false;
+  dirty = false;
+  closed = false;
+  unsubscribe;
+  connected(authenticatedDeviceId) {
+    this.disconnected();
+    if (uuid19.test(authenticatedDeviceId)) this.deviceId = authenticatedDeviceId.toLowerCase();
+    this.activity();
+  }
+  disconnected() {
+    this.deviceId = void 0;
+    this.generation++;
+    this.referencesByExecution.clear();
+    this.supervisor.cancelDeadline("fabric-expiry");
+    this.supervisor.cancelDeadline("fabric-read");
+  }
+  references(executionId) {
+    const refs = this.referencesByExecution.get(executionId.toLowerCase());
+    return refs && { ...refs };
+  }
+  activity() {
+    if (this.closed || !this.deviceId) return;
+    this.dirty = true;
+    if (this.reading) return;
+    this.reading = true;
+    this.dirty = false;
+    const generation = this.generation, deviceId = this.deviceId;
+    let expired = false;
+    try {
+      this.supervisor.watchDeadline("fabric-read", Date.now() + 5e3, () => {
+        expired = true;
+        this.referencesByExecution.clear();
+        this.supervisor.cancelDeadline("fabric-expiry");
+      });
+    } catch {
+      this.reading = false;
+      return;
+    }
+    void Promise.resolve().then(() => this.source.mailbox.snapshot()).then((state) => {
+      if (this.closed || expired || generation !== this.generation) return;
+      if (state.workers.length > 64 || state.assignments.length > 256 || state.messages.length > 1024) throw Error("FABRIC_BOUND_INVALID");
+      const workers = new Set(state.workers.filter((w) => w.device?.deviceId.toLowerCase() === deviceId && uuid19.test(w.workerId)).map((w) => w.workerId));
+      const assignments = new Map(state.assignments.filter((a) => workers.has(a.workerId)).map((a) => [a.assignmentId, a]));
+      const refs = /* @__PURE__ */ new Map();
+      for (const a of assignments.values()) {
+        const id2 = a.execution?.executionId;
+        if (!id2 || !uuid19.test(id2)) continue;
+        if (refs.has(id2.toLowerCase())) throw Error("FABRIC_EXECUTION_CONFLICT");
+        refs.set(id2.toLowerCase(), {
+          executionId: id2.toLowerCase(),
+          workerId: a.workerId.toLowerCase(),
+          ...uuid19.test(a.taskId) ? { taskId: a.taskId.toLowerCase() } : {}
+        });
+      }
+      this.referencesByExecution.clear();
+      for (const [id2, value] of refs) this.referencesByExecution.set(id2, value);
+      const retained = new Set(state.messages.map((m) => m.messageId));
+      for (const id2 of this.reportedExpired) if (!retained.has(id2)) this.reportedExpired.delete(id2);
+      const now = Date.now();
+      let next;
+      for (const m of state.messages) {
+        const a = assignments.get(m.assignmentId), expiry = Date.parse(m.expiresAt);
+        if (!a || m.acknowledgedAt || !Number.isFinite(expiry)) continue;
+        if (expiry > now) {
+          next = next === void 0 ? expiry : Math.min(next, expiry);
+          continue;
+        }
+        if (this.reportedExpired.has(m.messageId)) continue;
+        this.reportedExpired.add(m.messageId);
+        this.supervisor.observe({ kind: "mailbox_expired", code: "MAILBOX_EXPIRED" });
+        try {
+          void Promise.resolve(this.source.onExpired?.({ workerId: a.workerId, assignmentId: a.assignmentId, messageId: m.messageId })).catch(() => {
+          });
+        } catch {
+        }
+      }
+      if (next === void 0) this.supervisor.cancelDeadline("fabric-expiry");
+      else this.supervisor.watchDeadline("fabric-expiry", next, () => this.activity());
+    }).catch(() => {
+      if (generation === this.generation) {
+        this.referencesByExecution.clear();
+        this.supervisor.cancelDeadline("fabric-expiry");
+      }
+    }).finally(() => {
+      this.reading = false;
+      if (generation === this.generation) this.supervisor.cancelDeadline("fabric-read");
+      if (this.dirty) this.activity();
+    });
+  }
+  snapshot() {
+    return { references: this.referencesByExecution.size, reading: this.reading, reportedExpired: this.reportedExpired.size };
+  }
+  close() {
+    this.closed = true;
+    this.disconnected();
+    try {
+      this.unsubscribe?.();
+    } catch {
+    }
+  }
+};
+
+// agent/src/native-fabric-startup.ts
+import { lstat as lstat9, mkdir as mkdir8, open as open8, readFile as readFile5 } from "node:fs/promises";
+import path16 from "node:path";
+
+// src/agent-fabric-service.ts
+import { lstat as lstat8, mkdir as mkdir7, realpath as realpath7 } from "node:fs/promises";
+import { watch } from "node:fs";
+import path15 from "node:path";
+
+// src/agent-runtime-identity.ts
+import { createHash as createHash12, randomBytes as randomBytes4, randomUUID as randomUUID10, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+
+// src/agent-fabric-state.ts
+import { randomUUID as randomUUID9 } from "node:crypto";
+import { mkdir as mkdir6, open as open7, rename as rename5, unlink } from "node:fs/promises";
+import path14 from "node:path";
+var queues = /* @__PURE__ */ new Map();
+var FabricStateFile = class {
+  constructor(file2, maxBytes, parse3) {
+    this.maxBytes = maxBytes;
+    this.parse = parse3;
+    this.file = path14.resolve(file2);
+  }
+  maxBytes;
+  parse;
+  file;
+  serial(fn) {
+    const key = process.platform === "win32" ? this.file.toLowerCase() : this.file;
+    const result2 = (queues.get(key) ?? Promise.resolve()).then(fn);
+    const tail = result2.then(() => {
+    }, () => {
+    });
+    queues.set(key, tail);
+    void tail.then(() => {
+      if (queues.get(key) === tail) queues.delete(key);
+    });
+    return result2;
+  }
+  async load() {
+    const handle = await open7(this.file, "r");
+    try {
+      const info = await handle.stat();
+      if (!info.isFile() || info.size > this.maxBytes) throw Error("FABRIC_STATE_LIMIT");
+      const bytes3 = Buffer.alloc(this.maxBytes + 1);
+      let length = 0;
+      while (length < bytes3.length) {
+        const read = await handle.read(bytes3, length, bytes3.length - length, null);
+        if (!read.bytesRead) break;
+        length += read.bytesRead;
+      }
+      if (length > this.maxBytes) throw Error("FABRIC_STATE_LIMIT");
+      try {
+        return this.parse(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes3.subarray(0, length))));
+      } catch {
+        throw Error("FABRIC_STATE_CORRUPT");
+      }
+    } finally {
+      await handle.close();
+    }
+  }
+  read() {
+    return this.serial(() => this.load());
+  }
+  update(fn, create) {
+    return this.serial(async () => {
+      if (create) await mkdir6(path14.dirname(this.file), { recursive: true });
+      const lockPath = this.file + ".lock";
+      const token = randomUUID9();
+      const lock = await open7(lockPath, "wx", 384).catch((error62) => {
+        if (error62.code === "EEXIST") throw Error("FABRIC_STATE_BUSY");
+        throw error62;
+      });
+      try {
+        await lock.writeFile(JSON.stringify({ token, pid: process.pid, createdAt: (/* @__PURE__ */ new Date()).toISOString() }));
+        await lock.datasync();
+        let state;
+        try {
+          state = await this.load();
+        } catch (error62) {
+          if (error62.code !== "ENOENT" || !create) throw error62;
+          state = create();
+        }
+        const result2 = await fn(state);
+        const encoded = JSON.stringify(this.parse(state));
+        if (Buffer.byteLength(encoded) > this.maxBytes) throw Error("FABRIC_STATE_LIMIT");
+        const temporary = this.file + "." + token + ".tmp";
+        const handle = await open7(temporary, "wx", 384);
+        try {
+          try {
+            await handle.writeFile(encoded, "utf8");
+            await handle.datasync();
+          } finally {
+            await handle.close();
+          }
+          await rename5(temporary, this.file);
+        } finally {
+          await unlink(temporary).catch((error62) => {
+            if (error62.code !== "ENOENT") throw error62;
+          });
+        }
+        return result2;
+      } finally {
+        await lock.close();
+        const current2 = await open7(lockPath, "r");
+        try {
+          if ((await current2.stat()).size > 1024 || JSON.parse(await current2.readFile("utf8")).token !== token)
+            throw Error("FABRIC_STATE_LOCK_CHANGED");
+        } finally {
+          await current2.close();
+        }
+        await unlink(lockPath);
+      }
+    });
+  }
+};
+
+// src/agent-runtime-identity.ts
+var id = external_exports.string().regex(/^rt-[0-9a-f-]{36}$/);
+var hash6 = external_exports.string().regex(/^[a-f0-9]{64}$/);
+var MAX_BINDINGS = 128;
+var MAX_BYTES = 128 * 1024;
+var BindingSchema = external_exports.strictObject({
+  runtimeId: id,
+  keyHash: hash6,
+  createdAt: external_exports.number().int().positive(),
+  lastUsedAt: external_exports.number().int().positive(),
+  revoked: external_exports.boolean()
+});
+var StateSchema = external_exports.strictObject({
+  version: external_exports.literal(1),
+  bindings: external_exports.array(BindingSchema).max(MAX_BINDINGS)
+});
+function digest4(value) {
+  return createHash12("sha256").update(value, "utf8").digest();
+}
+function encodedDigest(value) {
+  return digest4(value).toString("hex");
+}
+function validKey(value) {
+  return typeof value === "string" && /^[A-Za-z0-9_-]{43}$/.test(value);
+}
+var AgentRuntimeIdentityStore = class {
+  constructor(file2, now = Date.now) {
+    this.now = now;
+    this.state = new FabricStateFile(file2, MAX_BYTES, (value) => {
+      const state = StateSchema.parse(value);
+      if (new Set(state.bindings.map((item) => item.runtimeId)).size !== state.bindings.length)
+        throw Error("RUNTIME_IDENTITY_STATE_CORRUPT");
+      return state;
+    });
+  }
+  now;
+  state;
+  serial(fn) {
+    return this.state.update(fn, () => ({ version: 1, bindings: [] })).catch((error62) => {
+      if (error62 instanceof Error && error62.message.startsWith("FABRIC_STATE_"))
+        throw Error(error62.message.replace("FABRIC_STATE_", "RUNTIME_IDENTITY_STATE_"));
+      throw error62;
+    });
+  }
+  issue() {
+    return this.serial((state) => {
+      if (state.bindings.length >= MAX_BINDINGS) throw Error("RUNTIME_IDENTITY_LIMIT");
+      const runtimeId = "rt-" + randomUUID10();
+      const runtimeKey = randomBytes4(32).toString("base64url");
+      const now = this.now();
+      state.bindings.push({ runtimeId, keyHash: encodedDigest(runtimeKey), createdAt: now, lastUsedAt: now, revoked: false });
+      return { runtimeId, runtimeKey };
+    });
+  }
+  authenticate(runtimeId, runtimeKey) {
+    return this.serial((state) => {
+      if (!id.safeParse(runtimeId).success || !validKey(runtimeKey)) throw Error("RUNTIME_IDENTITY_INVALID");
+      const binding2 = state.bindings.find((item) => item.runtimeId === runtimeId);
+      if (!binding2 || binding2.revoked) throw Error("RUNTIME_IDENTITY_DENIED");
+      const expected = Buffer.from(binding2.keyHash, "hex");
+      const actual = digest4(runtimeKey);
+      if (expected.length !== actual.length || !timingSafeEqual2(expected, actual)) throw Error("RUNTIME_IDENTITY_DENIED");
+      binding2.lastUsedAt = this.now();
+    });
+  }
+  revoke(runtimeId, runtimeKey) {
+    return this.serial((state) => {
+      if (!id.safeParse(runtimeId).success || !validKey(runtimeKey)) throw Error("RUNTIME_IDENTITY_INVALID");
+      const binding2 = state.bindings.find((item) => item.runtimeId === runtimeId);
+      if (!binding2 || binding2.revoked) throw Error("RUNTIME_IDENTITY_DENIED");
+      const expected = Buffer.from(binding2.keyHash, "hex");
+      const actual = digest4(runtimeKey);
+      if (expected.length !== actual.length || !timingSafeEqual2(expected, actual)) throw Error("RUNTIME_IDENTITY_DENIED");
+      binding2.revoked = true;
+      binding2.lastUsedAt = this.now();
+    });
+  }
+};
+
+// src/agent-fabric-mailbox.ts
+import { randomUUID as randomUUID12 } from "node:crypto";
+
+// src/agent-fabric-timeline.ts
+import { randomUUID as randomUUID11 } from "node:crypto";
+import { performance } from "node:perf_hooks";
+var FabricId = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,95}$/);
+var FabricUtc = external_exports.string().datetime({ precision: 3 }).refine((value) => new Date(value).toISOString() === value);
+var FabricStampSchema = external_exports.strictObject({
+  atUtc: FabricUtc,
+  clockId: FabricId,
+  monotonicMs: external_exports.number().finite().nonnegative().max(Number.MAX_SAFE_INTEGER)
+});
+var processClockId = "clock-" + randomUUID11();
+function createFabricClock() {
+  return () => ({ atUtc: (/* @__PURE__ */ new Date()).toISOString(), clockId: processClockId, monotonicMs: performance.now() });
+}
+var FABRIC_STAGES = ["admitted", "queued", "worker_started", "execution_started", "execution_finished", "result_received", "result_delivered"];
+var MarkSchema = external_exports.strictObject({
+  stamp: FabricStampSchema,
+  source: external_exports.enum(["cloud", "controller", "native", "adapter"]),
+  evidenceRef: FabricId
+});
+var FabricTimelineSchema = external_exports.strictObject({
+  admitted: MarkSchema.nullable().default(null),
+  queued: MarkSchema.nullable().default(null),
+  worker_started: MarkSchema.nullable().default(null),
+  execution_started: MarkSchema.nullable().default(null),
+  execution_finished: MarkSchema.nullable().default(null),
+  result_received: MarkSchema.nullable().default(null),
+  result_delivered: MarkSchema.nullable().default(null)
+});
+function markFabricTimeline(timeline, stage, input2) {
+  if (!FABRIC_STAGES.includes(stage)) throw Error("FABRIC_TIMING_STAGE_INVALID");
+  const mark = MarkSchema.parse(input2), previous = timeline[stage];
+  if (previous) {
+    if (JSON.stringify(previous) !== JSON.stringify(mark)) throw Error("FABRIC_TIMING_CONFLICT");
+    return;
+  }
+  const next = { ...timeline, [stage]: mark };
+  const clocks = /* @__PURE__ */ new Map();
+  for (const name2 of FABRIC_STAGES) {
+    const stamp = next[name2]?.stamp;
+    if (!stamp) continue;
+    const before = clocks.get(stamp.clockId);
+    if (before !== void 0 && stamp.monotonicMs < before) throw Error("FABRIC_TIMING_ORDER_INVALID");
+    clocks.set(stamp.clockId, stamp.monotonicMs);
+  }
+  timeline[stage] = mark;
+}
+
+// src/controller-runtime-router.ts
+var LOCAL_RUNTIME_PROVIDERS = ["chatgpt", "claude", "cursor"];
+
+// src/agent-fabric-worker.ts
+var fact = (value) => external_exports.strictObject({
+  value,
+  confirmedAt: FabricUtc,
+  evidenceRef: FabricId,
+  source: external_exports.enum(["registered_integration", "adapter_receipt"])
+});
+var WorkerAttributionSchema = external_exports.strictObject({
+  provider: fact(external_exports.enum(["openai", "anthropic", "cursor"])).nullable().default(null),
+  runtime: fact(external_exports.enum(["codex", "claude-code", "cursor-agent"])).nullable().default(null),
+  model: fact(external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,127}$/)).nullable().default(null)
+});
+var FabricWorkerSchema = external_exports.strictObject({
+  workerId: external_exports.string().uuid(),
+  key: FabricId,
+  controllerId: FabricId,
+  parentWorkerId: external_exports.string().uuid().nullable(),
+  device: external_exports.strictObject({ deviceId: FabricId, enrollmentEvidenceRef: FabricId }).nullable(),
+  runtimeId: external_exports.string().regex(/^rt-[0-9a-f-]{36}$/).nullable(),
+  attribution: WorkerAttributionSchema,
+  createdAt: FabricUtc,
+  updatedAt: FabricUtc
+});
+var FabricPayloadRefSchema = external_exports.strictObject({
+  id: FabricId,
+  sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
+  bytes: external_exports.number().int().min(0).max(4 * 1024 * 1024)
+});
+var FabricExecutionLinkSchema = external_exports.strictObject({
+  sessionId: FabricId.nullable(),
+  pid: external_exports.number().int().positive().max(4294967295).nullable(),
+  executionId: external_exports.string().uuid().toLowerCase().nullable().default(null),
+  confirmedAt: FabricUtc,
+  evidenceRef: FabricId
+}).refine((link) => link.sessionId !== null || link.pid !== null || link.executionId !== null);
+var FabricAssignmentSchema = external_exports.strictObject({
+  assignmentId: external_exports.string().uuid(),
+  workerId: external_exports.string().uuid(),
+  taskId: FabricId,
+  runId: external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/),
+  role: external_exports.enum(["implementer", "verifier"]),
+  selectedRuntime: external_exports.enum(LOCAL_RUNTIME_PROVIDERS),
+  payloadRef: FabricPayloadRefSchema,
+  phase: external_exports.enum(["assigned", "launching", "running", "unknown", "exited", "not_started"]),
+  createdAt: FabricUtc,
+  updatedAt: FabricUtc,
+  timeline: FabricTimelineSchema,
+  attribution: WorkerAttributionSchema,
+  execution: FabricExecutionLinkSchema.nullable()
+});
+function assignmentActive(assignment) {
+  return assignment.phase !== "exited" && assignment.phase !== "not_started";
+}
+
+// src/agent-fabric-mailbox.ts
+var MAX_WORKERS = 64;
+var MAX_ASSIGNMENTS = 256;
+var MAX_MESSAGES = 1024;
+var MAX_TTL_MS = 864e5;
+var Control = external_exports.enum(["CANCEL", "WAKE"]);
+var Report = external_exports.enum(["PROGRESS", "BLOCKED", "RESULT"]);
+var MessageSchema = external_exports.strictObject({
+  messageId: external_exports.string().uuid(),
+  key: FabricId,
+  assignmentId: external_exports.string().uuid(),
+  origin: external_exports.enum(["controller", "worker", "adapter"]),
+  direction: external_exports.enum(["to_worker", "to_controller"]),
+  kind: external_exports.enum(["ASSIGN", ...Control.options, ...Report.options]),
+  payloadRef: FabricPayloadRefSchema,
+  createdAt: FabricUtc,
+  expiresAt: FabricUtc,
+  acknowledgedAt: FabricUtc.nullable()
+});
+var StateSchema2 = external_exports.strictObject({
+  version: external_exports.literal(2),
+  controllerId: FabricId,
+  workers: external_exports.array(FabricWorkerSchema).max(MAX_WORKERS),
+  assignments: external_exports.array(FabricAssignmentSchema).max(MAX_ASSIGNMENTS),
+  messages: external_exports.array(MessageSchema).max(MAX_MESSAGES)
+});
+var Registration = external_exports.strictObject({
+  key: FabricId,
+  parentWorkerId: external_exports.string().uuid().nullable().default(null),
+  device: FabricWorkerSchema.shape.device.default(null)
+});
+var AssignmentInput = FabricAssignmentSchema.pick({
+  workerId: true,
+  taskId: true,
+  runId: true,
+  role: true,
+  selectedRuntime: true,
+  payloadRef: true
+});
+var MessageInput = external_exports.strictObject({
+  key: FabricId,
+  payloadRef: FabricPayloadRefSchema,
+  ttlMs: external_exports.number().int().min(1e3).max(MAX_TTL_MS).default(6e4)
+});
+var ConfirmInput = external_exports.strictObject({
+  provider: WorkerAttributionSchema.shape.provider.removeDefault().optional(),
+  runtime: WorkerAttributionSchema.shape.runtime.removeDefault().optional(),
+  model: WorkerAttributionSchema.shape.model.removeDefault().optional()
+});
+function parseState(value) {
+  const state = StateSchema2.parse(value);
+  for (const values of [
+    state.workers.map((w) => w.workerId),
+    state.workers.map((w) => w.key),
+    state.assignments.map((a) => a.assignmentId),
+    state.assignments.map((a) => JSON.stringify([a.runId, a.selectedRuntime])),
+    state.assignments.flatMap((a) => a.execution?.executionId ? [a.execution.executionId] : []),
+    state.messages.map((m) => m.messageId),
+    state.messages.map((m) => JSON.stringify([m.assignmentId, m.origin, m.key]))
+  ])
+    if (new Set(values).size !== values.length) throw Error("FABRIC_STATE_CORRUPT");
+  for (const worker of state.workers) {
+    if (worker.controllerId !== state.controllerId) throw Error("FABRIC_STATE_CORRUPT");
+    const seen = /* @__PURE__ */ new Set([worker.workerId]);
+    let parent = worker.parentWorkerId;
+    while (parent) {
+      if (seen.has(parent)) throw Error("FABRIC_STATE_CORRUPT");
+      seen.add(parent);
+      const ancestor2 = state.workers.find((w) => w.workerId === parent);
+      if (!ancestor2) throw Error("FABRIC_STATE_CORRUPT");
+      parent = ancestor2.parentWorkerId;
+    }
+  }
+  const activeWorkers = /* @__PURE__ */ new Set(), activeRuns = /* @__PURE__ */ new Set();
+  for (const assignment of state.assignments) {
+    if (!state.workers.some((w) => w.workerId === assignment.workerId)) throw Error("FABRIC_STATE_CORRUPT");
+    if (assignmentActive(assignment)) {
+      if (activeWorkers.has(assignment.workerId) || activeRuns.has(assignment.runId)) throw Error("FABRIC_STATE_CORRUPT");
+      activeWorkers.add(assignment.workerId);
+      activeRuns.add(assignment.runId);
+    }
+    const validated = FabricTimelineSchema.parse({});
+    for (const [stage, mark] of Object.entries(assignment.timeline))
+      if (mark) markFabricTimeline(validated, stage, mark);
+  }
+  for (const message2 of state.messages) {
+    if (!state.assignments.some((a) => a.assignmentId === message2.assignmentId) || message2.expiresAt <= message2.createdAt || Date.parse(message2.expiresAt) - Date.parse(message2.createdAt) > MAX_TTL_MS || message2.direction === "to_worker" !== ["ASSIGN", "CANCEL", "WAKE"].includes(message2.kind) || message2.direction === "to_worker" !== (message2.origin === "controller") || message2.origin === "adapter" && message2.kind !== "RESULT") throw Error("FABRIC_STATE_CORRUPT");
+  }
+  return state;
+}
+var AgentWorkerMailbox = class {
+  constructor(file2, controllerId, identities, clock = createFabricClock(), notify) {
+    this.identities = identities;
+    this.clock = clock;
+    this.notify = notify;
+    this.controllerId = FabricId.parse(controllerId);
+    this.state = new FabricStateFile(file2, 2 * 1024 * 1024, (value) => {
+      const state = parseState(value);
+      if (state.controllerId !== this.controllerId) throw Error("FABRIC_CONTROLLER_MISMATCH");
+      return state;
+    });
+  }
+  identities;
+  clock;
+  notify;
+  state;
+  controllerId;
+  initialize() {
+    let created = false;
+    return this.state.update(() => {
+      if (!created) throw Error("FABRIC_STATE_EXISTS");
+    }, () => {
+      created = true;
+      return { version: 2, controllerId: this.controllerId, workers: [], assignments: [], messages: [] };
+    });
+  }
+  worker(state, id2) {
+    const worker = state.workers.find((w) => w.workerId === id2);
+    if (!worker) throw Error("FABRIC_WORKER_UNKNOWN");
+    return worker;
+  }
+  assignment(state, id2) {
+    const assignment = state.assignments.find((a) => a.assignmentId === id2);
+    if (!assignment) throw Error("FABRIC_ASSIGNMENT_UNKNOWN");
+    return assignment;
+  }
+  bound(state, workerId, credential) {
+    const worker = this.worker(state, workerId);
+    if (worker.runtimeId !== credential.runtimeId) throw Error("FABRIC_WORKER_DENIED");
+    return worker;
+  }
+  emit(state, message2) {
+    const assignment = this.assignment(state, message2.assignmentId);
+    try {
+      void Promise.resolve(this.notify?.({
+        controllerId: this.controllerId,
+        workerId: assignment.workerId,
+        assignmentId: assignment.assignmentId,
+        messageId: message2.messageId,
+        direction: message2.direction,
+        kind: message2.kind,
+        origin: message2.origin,
+        expiresAt: message2.expiresAt
+      })).catch(() => {
+      });
+    } catch {
+    }
+  }
+  register(input2) {
+    const registration = Registration.parse(input2);
+    return this.state.update((state) => {
+      const existing = state.workers.find((w) => w.key === registration.key);
+      if (existing) {
+        if (existing.parentWorkerId !== registration.parentWorkerId || JSON.stringify(existing.device) !== JSON.stringify(registration.device))
+          throw Error("FABRIC_WORKER_ID_CONFLICT");
+        return existing;
+      }
+      if (state.workers.length >= MAX_WORKERS) throw Error("FABRIC_WORKER_LIMIT");
+      if (registration.parentWorkerId) this.worker(state, registration.parentWorkerId);
+      const now = this.clock().atUtc;
+      const worker = {
+        ...registration,
+        workerId: randomUUID12(),
+        controllerId: this.controllerId,
+        runtimeId: null,
+        attribution: WorkerAttributionSchema.parse({}),
+        createdAt: now,
+        updatedAt: now
+      };
+      state.workers.push(worker);
+      return worker;
+    });
+  }
+  async bindRuntime(workerId, credential) {
+    await this.identities.authenticate(credential.runtimeId, credential.runtimeKey);
+    await this.state.update((state) => {
+      const worker = this.worker(state, workerId);
+      if (worker.runtimeId !== credential.runtimeId) {
+        worker.runtimeId = credential.runtimeId;
+        worker.attribution = WorkerAttributionSchema.parse({});
+        worker.updatedAt = this.clock().atUtc;
+      }
+    });
+  }
+  append(state, assignment, kind, origin, input2) {
+    const request = MessageInput.parse(input2);
+    const direction = origin === "controller" ? "to_worker" : "to_controller";
+    if (kind === "RESULT" && request.key !== "result") throw Error("FABRIC_RESULT_KEY_INVALID");
+    const existing = state.messages.find((m) => m.assignmentId === assignment.assignmentId && m.origin === origin && m.key === request.key);
+    if (existing) {
+      if (existing.kind !== kind || JSON.stringify(existing.payloadRef) !== JSON.stringify(request.payloadRef) || Date.parse(existing.expiresAt) - Date.parse(existing.createdAt) !== request.ttlMs) throw Error("FABRIC_MESSAGE_ID_CONFLICT");
+      return { message: existing, added: false };
+    }
+    if (state.messages.length >= MAX_MESSAGES) throw Error("FABRIC_MESSAGE_LIMIT");
+    const now = this.clock();
+    const message2 = {
+      messageId: randomUUID12(),
+      key: request.key,
+      assignmentId: assignment.assignmentId,
+      direction,
+      origin,
+      kind,
+      payloadRef: request.payloadRef,
+      createdAt: now.atUtc,
+      expiresAt: new Date(Date.parse(now.atUtc) + request.ttlMs).toISOString(),
+      acknowledgedAt: null
+    };
+    state.messages.push(message2);
+    if (origin === "adapter") markFabricTimeline(assignment.timeline, "result_received", { stamp: now, source: "controller", evidenceRef: message2.messageId });
+    return { message: message2, added: true };
+  }
+  async assign(input2) {
+    const request = AssignmentInput.parse(input2);
+    const saved = await this.state.update((state) => {
+      this.worker(state, request.workerId);
+      const existing = state.assignments.find((a) => a.runId === request.runId && a.selectedRuntime === request.selectedRuntime);
+      if (existing) {
+        if (JSON.stringify(AssignmentInput.strip().parse(existing)) !== JSON.stringify(request)) throw Error("FABRIC_ASSIGNMENT_ID_CONFLICT");
+        return { state, assignment: existing, notice: null };
+      }
+      if (state.assignments.length >= MAX_ASSIGNMENTS) throw Error("FABRIC_ASSIGNMENT_LIMIT");
+      if (state.assignments.some((a) => assignmentActive(a) && (a.workerId === request.workerId || a.runId === request.runId)))
+        throw Error("FABRIC_WORKER_BUSY");
+      const now = this.clock().atUtc;
+      const assignment = {
+        ...request,
+        assignmentId: randomUUID12(),
+        phase: "assigned",
+        createdAt: now,
+        updatedAt: now,
+        timeline: FabricTimelineSchema.parse({}),
+        attribution: WorkerAttributionSchema.parse({}),
+        execution: null
+      };
+      const worker = this.worker(state, request.workerId);
+      worker.attribution = WorkerAttributionSchema.parse({});
+      worker.updatedAt = now;
+      state.assignments.push(assignment);
+      const { message: message2 } = this.append(state, assignment, "ASSIGN", "controller", { key: "assign", payloadRef: request.payloadRef });
+      return { state, assignment, notice: message2 };
+    });
+    if (saved.notice) this.emit(saved.state, saved.notice);
+    return saved.assignment;
+  }
+  async control(assignmentId, kind, input2) {
+    Control.parse(kind);
+    const saved = await this.state.update((state) => {
+      const assignment = this.assignment(state, assignmentId);
+      if (!assignmentActive(assignment)) throw Error("FABRIC_ASSIGNMENT_INACTIVE");
+      return { state, ...this.append(state, assignment, kind, "controller", input2) };
+    });
+    if (saved.added) this.emit(saved.state, saved.message);
+    return saved.message;
+  }
+  async report(workerId, credential, assignmentId, kind, input2) {
+    Report.parse(kind);
+    await this.identities.authenticate(credential.runtimeId, credential.runtimeKey);
+    const saved = await this.state.update((state) => {
+      this.bound(state, workerId, credential);
+      const assignment = this.assignment(state, assignmentId);
+      if (assignment.workerId !== workerId || assignment.phase === "not_started") throw Error("FABRIC_ASSIGNMENT_DENIED");
+      return { state, ...this.append(state, assignment, kind, "worker", input2) };
+    });
+    if (saved.added) this.emit(saved.state, saved.message);
+    return saved.message;
+  }
+  pending(state, direction, workerId) {
+    const now = this.clock().atUtc;
+    return state.messages.filter((m) => m.direction === direction && !m.acknowledgedAt && m.expiresAt > now && (direction !== "to_worker" || state.assignments.some((a) => a.assignmentId === m.assignmentId && a.workerId === workerId && assignmentActive(a))));
+  }
+  async inbox(workerId, credential, limit = 32) {
+    external_exports.number().int().min(1).max(64).parse(limit);
+    await this.identities.authenticate(credential.runtimeId, credential.runtimeKey);
+    const state = await this.state.read();
+    this.bound(state, workerId, credential);
+    return this.pending(state, "to_worker", workerId).slice(0, limit);
+  }
+  async controllerInbox(limit = 32) {
+    external_exports.number().int().min(1).max(64).parse(limit);
+    return this.pending(await this.state.read(), "to_controller").slice(0, limit);
+  }
+  acknowledge(state, messageId, direction, workerId) {
+    const message2 = state.messages.find((m) => m.messageId === messageId && m.direction === direction);
+    if (!message2) return false;
+    const assignment = this.assignment(state, message2.assignmentId);
+    if (direction === "to_worker" && assignment.workerId !== workerId) return false;
+    if (message2.acknowledgedAt) return true;
+    const now = this.clock();
+    if (message2.expiresAt <= now.atUtc) return false;
+    message2.acknowledgedAt = now.atUtc;
+    if (message2.origin === "adapter") markFabricTimeline(assignment.timeline, "result_delivered", { stamp: now, source: "controller", evidenceRef: message2.messageId });
+    return true;
+  }
+  async ack(workerId, credential, messageId) {
+    await this.identities.authenticate(credential.runtimeId, credential.runtimeKey);
+    return this.state.update((state) => {
+      this.bound(state, workerId, credential);
+      return this.acknowledge(state, messageId, "to_worker", workerId);
+    });
+  }
+  controllerAck(messageId) {
+    return this.state.update((state) => this.acknowledge(state, messageId, "to_controller"));
+  }
+  async adapterResult(assignmentId, payloadRef) {
+    const saved = await this.state.update((state) => {
+      const assignment = this.assignment(state, assignmentId);
+      if (assignment.phase !== "exited") throw Error("FABRIC_RESULT_UNCONFIRMED");
+      return { state, ...this.append(state, assignment, "RESULT", "adapter", { key: "result", payloadRef }) };
+    });
+    if (saved.added) this.emit(saved.state, saved.message);
+  }
+  claimLaunch(assignmentId) {
+    return this.state.update((state) => {
+      const assignment = this.assignment(state, assignmentId);
+      if (assignment.phase !== "assigned" && assignment.phase !== "not_started") return false;
+      assignment.phase = "launching";
+      assignment.updatedAt = this.clock().atUtc;
+      return true;
+    });
+  }
+  timing(assignmentId, stage, mark) {
+    return this.state.update((state) => {
+      markFabricTimeline(this.assignment(state, assignmentId).timeline, stage, mark);
+    });
+  }
+  confirmExecution(assignmentId, input2) {
+    const execution = FabricExecutionLinkSchema.parse(input2);
+    return this.state.update((state) => {
+      const assignment = this.assignment(state, assignmentId);
+      if (assignment.execution && JSON.stringify(assignment.execution) !== JSON.stringify(execution)) throw Error("FABRIC_EXECUTION_CONFLICT");
+      if (execution.executionId && state.assignments.some((a) => a.assignmentId !== assignmentId && a.execution?.executionId === execution.executionId))
+        throw Error("FABRIC_EXECUTION_CONFLICT");
+      assignment.execution = execution;
+    });
+  }
+  /** Trusted transport adapter passes its authenticated device, never a worker-reported label.
+   * References remain device-reported diagnostics in the cloud, not ownership/authentication. */
+  async incidentReferences(deviceId, executionId) {
+    FabricId.parse(deviceId);
+    const execution = external_exports.string().uuid().toLowerCase().parse(executionId);
+    const state = await this.state.read();
+    const assignment = state.assignments.find((a) => a.execution?.executionId === execution);
+    if (!assignment || this.worker(state, assignment.workerId).device?.deviceId !== deviceId) return null;
+    const task = external_exports.string().uuid().toLowerCase().safeParse(assignment.taskId);
+    return { executionId: execution, workerId: assignment.workerId, ...task.success ? { taskId: task.data } : {} };
+  }
+  confirmAttribution(assignmentId, input2) {
+    const confirmed = ConfirmInput.parse(input2);
+    for (const key of ["provider", "runtime", "model"])
+      if (confirmed[key] === void 0) delete confirmed[key];
+    return this.state.update((state) => {
+      const assignment = this.assignment(state, assignmentId);
+      for (const key of ["provider", "runtime", "model"])
+        if (assignment.attribution[key] && confirmed[key] !== void 0 && JSON.stringify(assignment.attribution[key]) !== JSON.stringify(confirmed[key])) throw Error("FABRIC_ATTRIBUTION_CONFLICT");
+      Object.assign(assignment.attribution, confirmed);
+      const latest = state.assignments.filter((a) => a.workerId === assignment.workerId).at(-1);
+      if (latest?.assignmentId === assignmentId) Object.assign(this.worker(state, assignment.workerId).attribution, confirmed);
+    });
+  }
+  phase(assignmentId, next) {
+    return this.state.update((state) => {
+      const assignment = this.assignment(state, assignmentId);
+      const allowed = {
+        assigned: ["launching", "not_started", "unknown"],
+        launching: ["running", "not_started", "unknown", "exited"],
+        running: ["unknown", "exited"],
+        unknown: ["exited"],
+        exited: [],
+        not_started: ["launching"]
+      };
+      if (assignment.phase === next) return;
+      if (!allowed[assignment.phase].includes(next)) throw Error("FABRIC_ASSIGNMENT_PHASE_INVALID");
+      assignment.phase = next;
+      assignment.updatedAt = this.clock().atUtc;
+    });
+  }
+  async snapshot() {
+    const state = await this.state.read(), now = this.clock().atUtc;
+    const nextExpiry = state.messages.filter((m) => !m.acknowledgedAt && m.expiresAt > now).reduce((next, m) => next === null || m.expiresAt < next ? m.expiresAt : next, null);
+    return { ...state, nextExpiry };
+  }
+};
+
+// src/agent-fabric-service.ts
+var Binding = external_exports.strictObject({
+  version: external_exports.literal(1),
+  controllerId: FabricId,
+  device: FabricWorkerSchema.shape.device,
+  initialized: external_exports.boolean()
+});
+var WorkerRequest = external_exports.discriminatedUnion("operation", [
+  external_exports.strictObject({ operation: external_exports.literal("inbox"), workerId: external_exports.string().uuid(), limit: external_exports.number().int().min(1).max(64).default(32) }),
+  external_exports.strictObject({ operation: external_exports.literal("ack"), workerId: external_exports.string().uuid(), messageId: external_exports.string().uuid() }),
+  external_exports.strictObject({
+    operation: external_exports.literal("report"),
+    workerId: external_exports.string().uuid(),
+    assignmentId: external_exports.string().uuid(),
+    kind: external_exports.enum(["PROGRESS", "BLOCKED", "RESULT"]),
+    key: FabricId,
+    payloadRef: FabricPayloadRefSchema,
+    ttlMs: external_exports.number().int().min(1e3).max(864e5).default(6e4)
+  })
+]);
+var AgentFabricService = class _AgentFabricService {
+  constructor(directory, controllerId) {
+    this.directory = directory;
+    this.identities = new AgentRuntimeIdentityStore(path15.join(directory, "identities.json"));
+    this.mailbox = new AgentWorkerMailbox(
+      path15.join(directory, "mailbox.json"),
+      controllerId,
+      this.identities,
+      void 0,
+      () => this.changed()
+    );
+  }
+  directory;
+  identities;
+  mailbox;
+  listeners = /* @__PURE__ */ new Set();
+  watcher;
+  closed = false;
+  static async open(directory, controllerId, device = null, initialize = true) {
+    const expected = Binding.parse({ version: 1, controllerId, device, initialized: false });
+    const absolute2 = path15.resolve(directory);
+    for (let current2 = absolute2; ; current2 = path15.dirname(current2)) {
+      try {
+        if ((await lstat8(current2)).isSymbolicLink()) throw Error("FABRIC_DIRECTORY_INVALID");
+      } catch (error62) {
+        if (error62.code !== "ENOENT") throw error62;
+      }
+      if (path15.dirname(current2) === current2) break;
+    }
+    if (initialize) await mkdir7(absolute2, { recursive: true, mode: 448 });
+    if (!(await lstat8(absolute2)).isDirectory() || (await realpath7(absolute2)).toLowerCase() !== absolute2.toLowerCase())
+      throw Error("FABRIC_DIRECTORY_INVALID");
+    const present = /* @__PURE__ */ new Set();
+    for (const name2 of ["binding.json", "mailbox.json", "identities.json"]) {
+      const file2 = await lstat8(path15.join(absolute2, name2)).catch((error62) => {
+        if (error62.code === "ENOENT") return null;
+        throw error62;
+      });
+      if (file2 && (!file2.isFile() || file2.isSymbolicLink())) throw Error("FABRIC_FILE_INVALID");
+      if (file2) present.add(name2);
+    }
+    if (!present.has("binding.json") && present.size) throw Error("FABRIC_BINDING_MISSING");
+    const binding2 = new FabricStateFile(path15.join(absolute2, "binding.json"), 2048, (value) => Binding.parse(value));
+    const service = new _AgentFabricService(absolute2, controllerId);
+    await binding2.update(async (state) => {
+      if (state.controllerId !== expected.controllerId || JSON.stringify(state.device) !== JSON.stringify(expected.device))
+        throw Error("FABRIC_BINDING_CHANGED");
+      if (!state.initialized) {
+        if (!initialize) throw Error("FABRIC_INITIALIZATION_INCOMPLETE");
+        try {
+          await service.mailbox.initialize();
+        } catch (error62) {
+          if (!(error62 instanceof Error) || error62.message !== "FABRIC_STATE_EXISTS") throw error62;
+        }
+        state.initialized = true;
+      }
+      const snapshot2 = await service.mailbox.snapshot();
+      if (snapshot2.workers.some((worker) => worker.runtimeId !== null)) await lstat8(path15.join(absolute2, "identities.json"));
+    }, initialize ? () => expected : void 0);
+    return service;
+  }
+  changed() {
+    for (const callback of this.listeners) {
+      try {
+        callback();
+      } catch {
+      }
+    }
+  }
+  subscribe = (callback) => {
+    if (this.closed || this.listeners.size >= 32) throw Error("FABRIC_OBSERVER_LIMIT");
+    this.listeners.add(callback);
+    try {
+      if (!this.watcher) {
+        this.watcher = watch(this.directory, { persistent: false }, (_event, file2) => {
+          if (file2?.toString().toLowerCase() === "mailbox.json") this.changed();
+        });
+        this.watcher.on("error", () => {
+          this.watcher?.close();
+          this.watcher = void 0;
+        });
+      }
+    } catch {
+    }
+    return () => {
+      this.listeners.delete(callback);
+      if (!this.listeners.size) {
+        this.watcher?.close();
+        this.watcher = void 0;
+      }
+    };
+  };
+  async worker(input2, credential) {
+    const request = WorkerRequest.parse(input2);
+    if (request.operation === "inbox") return this.mailbox.inbox(request.workerId, credential, request.limit);
+    if (request.operation === "ack") return this.mailbox.ack(request.workerId, credential, request.messageId);
+    return this.mailbox.report(
+      request.workerId,
+      credential,
+      request.assignmentId,
+      request.kind,
+      { key: request.key, payloadRef: request.payloadRef, ttlMs: request.ttlMs }
+    );
+  }
+  close() {
+    this.closed = true;
+    this.watcher?.close();
+    this.watcher = void 0;
+    this.listeners.clear();
+  }
+};
+
+// agent/src/native-fabric-startup.ts
+var Credential = external_exports.strictObject({
+  workerId: external_exports.string().uuid(),
+  controllerId: FabricId,
+  runtimeId: external_exports.string().regex(/^rt-[0-9a-f-]{36}$/),
+  runtimeKey: external_exports.string().regex(/^[A-Za-z0-9_-]{43}$/)
+});
+var OwnerRequest = external_exports.discriminatedUnion("operation", [
+  external_exports.strictObject({ operation: external_exports.literal("status") }),
+  external_exports.strictObject({ operation: external_exports.literal("register"), key: FabricId, parentWorkerId: external_exports.string().uuid().nullable().default(null) }),
+  external_exports.strictObject({ operation: external_exports.literal("revoke"), workerId: external_exports.string().uuid() }),
+  external_exports.strictObject({ operation: external_exports.literal("assign"), ...FabricAssignmentSchema.pick({
+    workerId: true,
+    taskId: true,
+    runId: true,
+    role: true,
+    selectedRuntime: true,
+    payloadRef: true
+  }).shape }),
+  external_exports.strictObject({
+    operation: external_exports.literal("control"),
+    assignmentId: external_exports.string().uuid(),
+    kind: external_exports.enum(["WAKE", "CANCEL"]),
+    key: FabricId,
+    payloadRef: FabricPayloadRefSchema,
+    ttlMs: external_exports.number().int().min(1e3).max(864e5).default(6e4)
+  })
+]);
+var Delivery = external_exports.strictObject({ capability: external_exports.string().regex(/^[A-Za-z0-9+/]+={0,2}$/).max(4096), request: external_exports.unknown() });
+async function openNativeFabric(stateDirectory, enrollment, box, initialize = true) {
+  const controllerId = "device-" + external_exports.string().uuid().parse(enrollment.deviceId).toLowerCase();
+  const tenantId = external_exports.string().uuid().parse(enrollment.tenantId).toLowerCase();
+  const parent = path16.join(stateDirectory, ".local-commander"), marker = path16.join(parent, "fabric-established.json");
+  try {
+    await mkdir8(parent, { mode: 448 });
+  } catch (error62) {
+    if (error62.code !== "EEXIST") throw error62;
+  }
+  const parentInfo = await lstat9(parent);
+  if (!parentInfo.isDirectory() || parentInfo.isSymbolicLink()) throw Error("FABRIC_DIRECTORY_INVALID");
+  const expected = JSON.stringify({ version: 1, controllerId, tenantId });
+  let fresh = false;
+  try {
+    const info = await lstat9(marker);
+    if (!info.isFile() || info.isSymbolicLink() || info.size > 2048 || await readFile5(marker, "utf8") !== expected)
+      throw Error("FABRIC_BINDING_CHANGED");
+  } catch (error62) {
+    if (error62.code !== "ENOENT" || !initialize) throw error62;
+    const file2 = await open8(marker, "wx", 384);
+    try {
+      await file2.writeFile(expected);
+      await file2.datasync();
+    } finally {
+      await file2.close();
+    }
+    fresh = true;
+  }
+  const service = await AgentFabricService.open(
+    path16.join(stateDirectory, ".local-commander", "fabric"),
+    controllerId,
+    { deviceId: enrollment.deviceId.toLowerCase(), enrollmentEvidenceRef: "enrollment-" + tenantId },
+    fresh
+  );
+  const purpose = "native-fabric:" + tenantId + ":" + controllerId;
+  const credentialFile = (workerId) => path16.join(service.directory, external_exports.string().uuid().parse(workerId) + ".capability");
+  const decode4 = (value) => {
+    const credential = Credential.parse(JSON.parse(box.open(Buffer.from(value, "base64"), purpose).toString("utf8")));
+    if (credential.controllerId !== controllerId) throw Error("FABRIC_WORKER_DENIED");
+    return credential;
+  };
+  async function capability(workerId) {
+    const file2 = credentialFile(workerId), info = await lstat9(file2);
+    if (!info.isFile() || info.isSymbolicLink() || info.size > 4096) throw Error("FABRIC_CREDENTIAL_UNKNOWN");
+    const encoded = await readFile5(file2, "utf8");
+    if (decode4(encoded).workerId !== workerId) throw Error("FABRIC_WORKER_DENIED");
+    return encoded;
+  }
+  return {
+    service,
+    source: { mailbox: service.mailbox, subscribe: service.subscribe },
+    async owner(input2) {
+      const request = OwnerRequest.parse(input2);
+      if (request.operation === "status") return service.mailbox.snapshot();
+      if (request.operation === "revoke") {
+        const credential = decode4(await capability(request.workerId));
+        await service.identities.revoke(credential.runtimeId, credential.runtimeKey);
+        return { revoked: true };
+      }
+      if (request.operation === "register") {
+        const worker = await service.mailbox.register({
+          key: request.key,
+          parentWorkerId: request.parentWorkerId,
+          device: { deviceId: enrollment.deviceId.toLowerCase(), enrollmentEvidenceRef: "enrollment-" + tenantId }
+        });
+        const previous = await capability(worker.workerId).catch((error62) => {
+          if (error62.code === "ENOENT" && !worker.runtimeId) return void 0;
+          throw Error("FABRIC_CREDENTIAL_UNKNOWN");
+        });
+        if (previous) {
+          const credential = decode4(previous);
+          await service.identities.authenticate(credential.runtimeId, credential.runtimeKey);
+          if (worker.runtimeId && worker.runtimeId !== credential.runtimeId) throw Error("FABRIC_CREDENTIAL_UNKNOWN");
+          if (!worker.runtimeId) await service.mailbox.bindRuntime(worker.workerId, credential);
+        } else {
+          const credential = await service.identities.issue();
+          const encoded = box.seal(Buffer.from(JSON.stringify({ ...credential, workerId: worker.workerId, controllerId })), purpose).toString("base64");
+          const file2 = await open8(credentialFile(worker.workerId), "wx", 384);
+          try {
+            await file2.writeFile(encoded);
+            await file2.datasync();
+          } finally {
+            await file2.close();
+          }
+          await service.mailbox.bindRuntime(worker.workerId, credential);
+        }
+        return { workerId: worker.workerId, credentialFile: credentialFile(worker.workerId) };
+      }
+      if (request.operation === "assign") {
+        const { operation: _, ...assignment } = request;
+        return service.mailbox.assign(assignment);
+      }
+      return service.mailbox.control(
+        request.assignmentId,
+        request.kind,
+        { key: request.key, payloadRef: request.payloadRef, ttlMs: request.ttlMs }
+      );
+    },
+    async confirmExecution(assignmentId, executionId, journal) {
+      const receipt = await journal.get(external_exports.string().uuid().parse(executionId));
+      if (!receipt || receipt.tenantId !== tenantId || receipt.deviceId !== enrollment.deviceId.toLowerCase())
+        throw Error("FABRIC_EXECUTION_UNCONFIRMED");
+      await service.mailbox.confirmExecution(external_exports.string().uuid().parse(assignmentId), {
+        executionId: receipt.executionId,
+        sessionId: receipt.sessionId,
+        pid: null,
+        confirmedAt: receipt.createdAt,
+        evidenceRef: receipt.operationId
+      });
+    },
+    async worker(input2) {
+      const delivery = Delivery.parse(input2), credential = decode4(delivery.capability);
+      if (!delivery.request || typeof delivery.request !== "object" || Array.isArray(delivery.request) || delivery.request.workerId !== credential.workerId) throw Error("FABRIC_WORKER_DENIED");
+      return service.worker(delivery.request, credential);
+    },
+    close: () => service.close()
+  };
+}
+async function readFabricRequest(input2 = process.stdin) {
+  const chunks = [];
+  let bytes3 = 0;
+  for await (const chunk of input2) {
+    const value = Buffer.from(chunk);
+    bytes3 += value.length;
+    if (bytes3 > 16384) throw Error("FABRIC_REQUEST_LIMIT");
+    chunks.push(value);
+  }
+  try {
+    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)));
+  } catch {
+    throw Error("FABRIC_REQUEST_INVALID");
+  }
+}
+
 // agent/src/main.ts
-var AGENT_VERSION2 = true ? "0.3.6" : "0.3.2";
+var AGENT_VERSION2 = true ? "0.3.9-issue11.1" : "0.3.2";
 function processAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   try {
@@ -29242,11 +31177,11 @@ function processAlive(pid) {
   }
 }
 async function claimAgentProcess(stateDir, runtimeDir, version2) {
-  await mkdir5(stateDir, { recursive: true });
-  const file2 = path12.join(stateDir, "agent-process.json");
+  await mkdir9(stateDir, { recursive: true });
+  const file2 = path17.join(stateDir, "agent-process.json");
   for (let attempt = 0; attempt < 2; attempt += 1) {
     try {
-      const handle = await open6(file2, "wx", 384);
+      const handle = await open9(file2, "wx", 384);
       try {
         await handle.writeFile(JSON.stringify({ pid: process.pid, runtimeDir, version: version2, startedAt: (/* @__PURE__ */ new Date()).toISOString() }) + "\n", "utf8");
       } finally {
@@ -29254,8 +31189,8 @@ async function claimAgentProcess(stateDir, runtimeDir, version2) {
       }
       return async () => {
         try {
-          const current2 = JSON.parse(await readFile5(file2, "utf8"));
-          if (current2.pid === process.pid) await rm4(file2, { force: true });
+          const current2 = JSON.parse(await readFile6(file2, "utf8"));
+          if (current2.pid === process.pid) await rm5(file2, { force: true });
         } catch {
         }
       };
@@ -29263,12 +31198,12 @@ async function claimAgentProcess(stateDir, runtimeDir, version2) {
       if (!error62 || typeof error62 !== "object" || !("code" in error62) || error62.code !== "EEXIST") throw error62;
       let stale = true;
       try {
-        const current2 = JSON.parse(await readFile5(file2, "utf8"));
+        const current2 = JSON.parse(await readFile6(file2, "utf8"));
         stale = typeof current2.pid !== "number" || !processAlive(current2.pid);
       } catch {
       }
       if (!stale) throw Error("AGENT_ALREADY_RUNNING");
-      await rm4(file2, { force: true });
+      await rm5(file2, { force: true });
     }
   }
   throw Error("AGENT_ALREADY_RUNNING");
@@ -29287,21 +31222,65 @@ function aborted2(signal, ms) {
 }
 async function runAgent(options) {
   const delay = options.reconnectDelayMs ?? 2e3;
+  const monitor = (update) => {
+    try {
+      update();
+      void options.monitor?.flush().catch(() => {
+      });
+    } catch {
+    }
+  };
   try {
     if (!Number.isInteger(delay) || delay < 0 || delay > 3e4) throw Error("RECONNECT_DELAY_INVALID");
     const identity = await options.store.load();
     if (!identity?.enrollment) throw Error("ENROLLMENT_MISSING");
+    const origin = identity.enrollment.serverOrigin;
+    monitor(() => options.monitor?.configureOrigin(origin));
     await options.journal.recoverAfterRestart();
     await options.store.loadWorkspaces();
   } catch (error62) {
     await options.journal.close();
     throw error62;
   }
-  const runtime = new NativeRuntime({ journal: options.journal, tools: options.tools, scheduler: new NativeScheduler(), workspaces: () => options.store.loadWorkspaces(Boolean(options.guard)), guard: options.guard, efficiencyLedger: options.efficiencyLedger });
+  const ledger = options.efficiencyLedger;
+  const efficiencyLedger = ledger && {
+    record: async (input2) => {
+      const recorded = await ledger.record(input2);
+      if (recorded) monitor(() => options.monitor?.efficiency(input2));
+      return recorded;
+    },
+    ...ledger.consumeNoticeForExecution ? { consumeNoticeForExecution: ledger.consumeNoticeForExecution.bind(ledger) } : {}
+  };
+  const supervisor = options.supervisor ?? new NativeEventSupervisor();
+  const fabric = options.fabric && new NativeFabricObserver(supervisor, options.fabric);
+  const incidentProducer = new NativeIncidentProducer(supervisor, (executionId) => fabric?.references(executionId));
+  const runtime = new NativeRuntime({
+    journal: options.journal,
+    tools: options.tools,
+    scheduler: new NativeScheduler({ onEvent: (event) => supervisor.observe(event) }),
+    onFrame: (frame) => {
+      supervisor.frame(frame);
+      fabric?.activity();
+      monitor(() => options.monitor?.frame(frame));
+    },
+    workspaces: () => options.store.loadWorkspaces(Boolean(options.guard)),
+    guard: options.guard,
+    efficiencyLedger
+  });
   let connection = null;
+  let legacyMonitorTimer;
   const bridge = new NativeRelayBridge(runtime, (binding2, state, code, metrics) => {
+    supervisor.observe({
+      kind: "result",
+      executionId: binding2.executionId,
+      code,
+      terminalProof: state !== "unknown" && code !== "EXECUTION_UNKNOWN"
+    });
+    monitor(() => options.monitor?.result(binding2, state, code));
     if (!connection) throw Error("RELAY_SOCKET_CLOSED");
-    return connection.sendTerminal(binding2, state, code, metrics);
+    return connection.sendTerminal(binding2, state, code, metrics).then(() => {
+      incidentProducer.activity();
+    });
   }, options.journal);
   const connect = options.connect ?? ((connectionOptions) => connectOnce(connectionOptions));
   try {
@@ -29311,17 +31290,45 @@ async function runAgent(options) {
         ready = resolve;
       });
       try {
-        connection = await connect({ store: options.store, agentVersion: options.agentVersion, handleRequest: async (request) => {
-          await readyPromise;
-          return bridge.handle(request);
-        } });
+        monitor(() => options.monitor?.setConnection("connecting"));
+        connection = await connect({
+          store: options.store,
+          agentVersion: options.agentVersion,
+          safeSlots: runtime.status().safeSlots,
+          onIncidentAck: (ack) => incidentProducer.ack(ack),
+          handleRequest: async (request) => {
+            await readyPromise;
+            monitor(() => {
+              options.monitor?.transportActivity();
+              options.monitor?.request(request);
+            });
+            try {
+              const result2 = await bridge.handle(request);
+              monitor(() => options.monitor?.response(result2));
+              return result2;
+            } catch (error62) {
+              monitor(() => options.monitor?.requestFailed());
+              throw error62;
+            }
+          },
+          onMonitorHeartbeat: () => monitor(() => options.monitor?.transportActivity())
+        });
+        fabric?.connected(connection.deviceId);
         await bridge.connected(connection);
+        incidentProducer.connected(connection.sendIncidentBatch);
+        supervisor.observe({ kind: "connected" });
+        monitor(() => options.monitor?.setConnection("connected", connection));
+        if (options.monitor && !connection.monitorFreshnessMs) {
+          legacyMonitorTimer = setInterval(() => monitor(() => {
+          }), 2e3);
+          legacyMonitorTimer.unref();
+        }
         ready();
         if (options.signal.aborted) connection.close("agent_shutdown");
         else {
-          for (const id of await options.store.loadPendingWorkspaceRevokes()) {
-            await connection.revokeWorkspace(id);
-            await options.store.acknowledgeWorkspaceRevoke(id);
+          for (const id2 of await options.store.loadPendingWorkspaceRevokes()) {
+            await connection.revokeWorkspace(id2);
+            await options.store.acknowledgeWorkspaceRevoke(id2);
           }
           for (const workspace of await options.store.loadWorkspaces()) {
             if ((await options.store.loadWorkspaces()).some((current2) => current2.workspaceGrantId === workspace.workspaceGrantId)) await connection.registerWorkspace(workspace);
@@ -29337,9 +31344,16 @@ async function runAgent(options) {
         }
       } catch (error62) {
         ready();
+        monitor(() => options.monitor?.connectionFailed(error62));
         if (error62 instanceof RelayClientError && ["RELAY_CONNECT_FAILED", "RELAY_CONNECT_CLOSED", "RELAY_CONNECT_TIMEOUT", "RELAY_HANDSHAKE_TIMEOUT"].includes(error62.code)) {
         } else throw error62;
       } finally {
+        fabric?.disconnected();
+        clearInterval(legacyMonitorTimer);
+        legacyMonitorTimer = void 0;
+        incidentProducer.disconnected();
+        if (!options.signal.aborted) supervisor.observe({ kind: "disconnected" });
+        monitor(() => options.monitor?.setConnection("disconnected"));
         connection?.close("agent_disconnect");
         await bridge.disconnected();
         connection = null;
@@ -29347,17 +31361,23 @@ async function runAgent(options) {
       if (!options.signal.aborted) await aborted2(options.signal, delay);
     }
   } finally {
-    await runtime.close();
-    await options.journal.close();
+    try {
+      await runtime.close();
+    } finally {
+      fabric?.close();
+      incidentProducer.close();
+      supervisor.close();
+      await options.journal.close();
+    }
   }
 }
 async function main() {
   if (process.platform !== "win32") throw Error("WINDOWS_REQUIRED");
   const appData = process.env.LOCALAPPDATA;
-  if (!appData || !path12.isAbsolute(appData)) throw Error("APP_DATA_MISSING");
-  const stateDir = process.env.LC_AGENT_STATE_DIR ?? path12.join(appData, "LocalCommander", "Agent");
-  const binaryDir = path12.dirname(process.execPath);
-  const ownerBridgePath = process.env.LC_OWNER_BRIDGE ?? path12.join(binaryDir, "OwnerBridge.exe");
+  if (!appData || !path17.isAbsolute(appData)) throw Error("APP_DATA_MISSING");
+  const stateDir = process.env.LC_AGENT_STATE_DIR ?? path17.join(appData, "LocalCommander", "Agent");
+  const binaryDir = path17.dirname(process.execPath);
+  const ownerBridgePath = process.env.LC_OWNER_BRIDGE ?? path17.join(binaryDir, "OwnerBridge.exe");
   const store = await WindowsPrivateStore.open(stateDir, ownerBridgePath);
   const command = process.argv[2] ?? "run";
   if (command === "pair") {
@@ -29366,7 +31386,7 @@ async function main() {
     const pairing = new PairingClient(store, { controlPlaneOrigin: origin, agentVersion: AGENT_VERSION2 });
     const begun = await pairing.begin();
     process.stdout.write(JSON.stringify({ approvalUrl: begun.approvalUrl, confirmationCode: begun.confirmationCode, expiresAt: begun.expiresAt.toISOString() }) + "\n");
-    await pairing.waitAndComplete(begun, os3.hostname().slice(0, 120));
+    await pairing.waitAndComplete(begun, os4.hostname().slice(0, 120));
     process.stdout.write("DEVICE_PAIRED\n");
     return;
   }
@@ -29395,6 +31415,9 @@ async function main() {
       displayName: w.displayName,
       path: w.root,
       permissions: w.permissions,
+      accessMode: w.fullAccess ? "full" : "scoped",
+      deniedCommands: w.deniedCommands ?? [],
+      deniedLocalhostPorts: w.deniedLocalhostPorts ?? [],
       allowedCommands: w.allowedCommands,
       executables: Object.fromEntries(w.allowedCommands.map((name2) => [name2, programs[name2]?.executable ?? null])),
       localhostPorts: w.localhostPorts,
@@ -29403,9 +31426,28 @@ async function main() {
     return;
   }
   const args = process.argv.slice(3);
+  if (command === "fabric-owner" || command === "fabric-worker") {
+    if (args.length) throw Error("AGENT_COMMAND_INVALID");
+    const enrollment = (await store.load())?.enrollment;
+    if (!enrollment) throw Error("ENROLLMENT_MISSING");
+    const input2 = await readFabricRequest();
+    const fabric = await openNativeFabric(
+      stateDir,
+      enrollment,
+      new SecretBox({ "1": await store.loadDataKey() }),
+      command === "fabric-owner"
+    );
+    try {
+      const result2 = command === "fabric-owner" ? await fabric.owner(input2) : await fabric.worker(input2);
+      process.stdout.write(JSON.stringify(result2) + "\n");
+    } finally {
+      fabric.close();
+    }
+    return;
+  }
   if (command === "efficiency-report") {
     if (args.length) throw Error("AGENT_COMMAND_INVALID");
-    const ledger = await OptimizationLedger.open(path12.join(stateDir, "optimization"));
+    const ledger = await OptimizationLedger.open(path17.join(stateDir, "optimization"));
     try {
       process.stdout.write(JSON.stringify(await ledger.report(), null, 2) + "\n");
     } finally {
@@ -29415,7 +31457,7 @@ async function main() {
   }
   if (command === "guard-configure") {
     if (args.length !== 1) throw Error("AGENT_COMMAND_INVALID");
-    const filename = await (await import("node:fs/promises")).realpath(path12.resolve(args[0]));
+    const filename = await (await import("node:fs/promises")).realpath(path17.resolve(args[0]));
     const input2 = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(await readWindowsFile(ownerBridgePath, filename, 2e5)));
     if (!input2 || typeof input2 !== "object" || Object.keys(input2).sort().join(",") !== "compact,settings") throw Error("GUARD_CONFIGURATION_INVALID");
     await store.configureGuard(input2.settings, input2.compact);
@@ -29434,7 +31476,7 @@ async function main() {
   }
   if (command === "guard-evidence") {
     if (args.length) throw Error("AGENT_COMMAND_INVALID");
-    const journal = await NativeJournal.open(path12.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
+    const journal = await NativeJournal.open(path17.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
     try {
       process.stdout.write(JSON.stringify(await journal.guardEvidence()) + "\n");
     } finally {
@@ -29446,7 +31488,7 @@ async function main() {
     if (args.length !== (command === "guard-export" ? 0 : 1)) throw Error("AGENT_COMMAND_INVALID");
     const identity = await store.load();
     if (!identity?.enrollment) throw Error("ENROLLMENT_MISSING");
-    const journal = await NativeJournal.open(path12.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
+    const journal = await NativeJournal.open(path17.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
     try {
       const { tenantId, deviceId } = identity.enrollment;
       const records = (await journal.guardEvidence()).filter((record2) => record2.tenantId === tenantId && record2.deviceId === deviceId);
@@ -29484,25 +31526,62 @@ async function main() {
   if (args.length) throw Error("AGENT_COMMAND_INVALID");
   if (!(await store.load())?.enrollment) throw Error("ENROLLMENT_MISSING");
   const releaseProcess = await claimAgentProcess(stateDir, binaryDir, AGENT_VERSION2);
+  const monitor = new ProductionMonitor(path17.join(appData, "LocalCommander", "Monitor"), stateDir, AGENT_VERSION2);
+  const publishMonitor = () => monitor.flush().catch(() => {
+    process.stderr.write("MONITOR_WRITE_FAILED\n");
+  });
+  await publishMonitor();
   try {
-    const journal = await NativeJournal.open(path12.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
-    const efficiencyLedger = await OptimizationLedger.open(path12.join(stateDir, "optimization"));
+    const journal = await NativeJournal.open(path17.join(stateDir, "journal"), new SecretBox({ "1": await store.loadDataKey() }));
+    const efficiencyLedger = await OptimizationLedger.open(path17.join(stateDir, "optimization"));
     try {
-      const tools = new NativeTools({ stateDirectory: stateDir, helperPath: process.env.LC_JOB_HOST ?? path12.join(binaryDir, "JobHost.exe"), ownerBridgePath, programs: await store.loadPrograms() });
+      const tools = new NativeTools({ stateDirectory: stateDir, helperPath: process.env.LC_JOB_HOST ?? path17.join(binaryDir, "JobHost.exe"), ownerBridgePath, programs: await store.loadPrograms() });
       const stop = new AbortController();
       process.once("SIGINT", () => stop.abort());
       process.once("SIGTERM", () => stop.abort());
       const guard = await NativeGuard.open(store, journal);
-      await runAgent({ store, journal, tools, signal: stop.signal, agentVersion: AGENT_VERSION2, guard, efficiencyLedger });
+      const enrollment = (await store.load()).enrollment;
+      const fabric = await openNativeFabric(stateDir, enrollment, new SecretBox({ "1": await store.loadDataKey() })).catch(() => {
+        process.stderr.write("FABRIC_STARTUP_FAILED\n");
+        return void 0;
+      });
+      try {
+        await runAgent({
+          store,
+          journal,
+          tools,
+          signal: stop.signal,
+          agentVersion: AGENT_VERSION2,
+          guard,
+          efficiencyLedger,
+          monitor,
+          ...fabric ? { fabric: fabric.source } : {}
+        });
+      } finally {
+        fabric?.close();
+      }
+      try {
+        monitor.setConnection("stopped");
+      } catch {
+      }
     } finally {
       await efficiencyLedger.close();
       await journal.close();
     }
+  } catch (error62) {
+    try {
+      monitor.setConnection("failed");
+    } catch {
+    }
+    throw error62;
   } finally {
+    await monitor.close().catch(() => {
+      process.stderr.write("MONITOR_WRITE_FAILED\n");
+    });
     await releaseProcess();
   }
 }
-if (process.argv[1] && path12.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (process.argv[1] && path17.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
   void main().catch((error62) => {
     const code = error62 instanceof Error && /^[A-Z0-9_]{1,64}$/.test(error62.message) ? error62.message : "AGENT_START_FAILED";
     process.stderr.write(code + "\n");