negotium 0.1.24 → 0.1.26

package/dist/cron.js

@@ -1716,14 +1716,19 @@ import {
   setConversationReader,
   maestroRegistry as upstreamMaestroRegistry
 } from "maestro-agent-sdk";
-var maestroRegistry;
+var DISABLED_MODEL_ALIASES, upstream, maestroRegistry;
 var init_maestro_registry = __esm(async () => {
   init_maestro_bootstrap_env();
   await init_conversations();
+  DISABLED_MODEL_ALIASES = new Set(["deepseek", "deepseek-flash", "deepseek-v4-flash"]);
+  upstream = upstreamMaestroRegistry;
   setConversationReader(readConversation);
   maestroRegistry = {
-    ...upstreamMaestroRegistry,
-    defaultModel: "deepseek-pro"
+    ...upstream,
+    defaultModel: "deepseek-pro",
+    validateModel(model) {
+      return !DISABLED_MODEL_ALIASES.has(model) && upstream.validateModel(model);
+    }
   };
 });
 
@@ -3463,7 +3468,7 @@ var init_claude_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.24";
+var NEGOTIUM_VERSION = "0.1.26";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn3 } from "child_process";
@@ -5445,19 +5450,25 @@ var init_ask_user = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/model-catalog.ts
+function canonicalModelId(value) {
+  const trimmed = value.trim();
+  return SELECTABLE_MODEL_ALIASES[trimmed.toLowerCase()] ?? trimmed;
+}
 function formatSelectableModel(candidate) {
   const tier = `${candidate.intelligenceTier[0].toUpperCase()}${candidate.intelligenceTier.slice(1)}`;
   return `${candidate.agent} / \`${candidate.model}\` [${tier}-level]: ${candidate.routingSummary}`;
 }
 function selectableModel(value) {
-  const normalized = value.trim().toLowerCase();
-  return SELECTABLE_MODELS.find((candidate) => candidate.model === normalized);
+  const canonical = canonicalModelId(value).toLowerCase();
+  return SELECTABLE_MODELS.find((candidate) => candidate.model === canonical);
 }
 function modelOwner(model) {
   if (model.startsWith("claude-"))
     return "claude";
   if (model.startsWith("deepseek-"))
     return "maestro";
+  if (model.startsWith("kimi-"))
+    return "maestro";
   if (model.startsWith("gpt-"))
     return "codex";
   return MODEL_OWNER[model];
@@ -5466,12 +5477,13 @@ function resolveModelForAgent(agent, requested, registry) {
   const defaultModel = resolveDefaultModel(agent, registry.defaultModel);
   if (!requested)
     return defaultModel;
-  const owner = modelOwner(requested);
+  const candidate = canonicalModelId(requested);
+  const owner = modelOwner(candidate);
   if (owner && owner !== agent)
     return defaultModel;
-  return registry.validateModel(requested) ? requested : defaultModel;
+  return registry.validateModel(candidate) ? candidate : defaultModel;
 }
-var MODEL_OWNER, MODEL_COST_RESEARCHED_AT = "2026-07-19", MODEL_COST_ROUTING_SUMMARY = "Cost basis (2026-07-19): Codex Pro 20x and Claude Max 20x are each $200/month; DeepSeek Pro is pay-per-token. Relative marginal token cost: DeepSeek Pro << Codex < Claude.", CODEX_PRO_20X_COST = "ChatGPT Pro 20x subscription: $200/month", CODEX_COMMUNITY_WEEKLY = "Community plan-level observation: roughly 2\u20134B raw/cached tokens per week; fresh-input equivalent is much lower and unstable (low confidence)", CLAUDE_MAX_20X_COST = "Claude Max 20x subscription: $200/month", CLAUDE_COMMUNITY_SESSION = "Community observations vary from roughly 220\u2013250K locally displayed tokens per 5-hour session to billions of cache-heavy raw tokens per week; calibrated reports value a full weekly allowance around $680\u2013$1,900 at API rates. Recent heavy-model reports reach the weekly cap after about 4\u20135 full sessions (low confidence; not a token cap)", SELECTABLE_MODELS, FALLBACK_ORDER, AGENT_DISPLAY_NAME;
+var MODEL_OWNER, MODEL_COST_RESEARCHED_AT = "2026-07-19", MODEL_COST_ROUTING_SUMMARY = "Cost basis (2026-07-19): Codex Pro 20x and Claude Max 20x are each $200/month; Maestro models are pay-per-token. DeepSeek Pro is cheapest, Kimi K2.7 Code is the coding route, and Kimi K3 is the frontier route.", CODEX_PRO_20X_COST = "ChatGPT Pro 20x subscription: $200/month", CODEX_COMMUNITY_WEEKLY = "Community plan-level observation: roughly 2\u20134B raw/cached tokens per week; fresh-input equivalent is much lower and unstable (low confidence)", CLAUDE_MAX_20X_COST = "Claude Max 20x subscription: $200/month", CLAUDE_COMMUNITY_SESSION = "Community observations vary from roughly 220\u2013250K locally displayed tokens per 5-hour session to billions of cache-heavy raw tokens per week; calibrated reports value a full weekly allowance around $680\u2013$1,900 at API rates. Recent heavy-model reports reach the weekly cap after about 4\u20135 full sessions (low confidence; not a token cap)", SELECTABLE_MODELS, SELECTABLE_MODEL_ALIASES, FALLBACK_ORDER, AGENT_DISPLAY_NAME;
 var init_model_catalog = __esm(() => {
   init_config();
   MODEL_OWNER = {
@@ -5485,7 +5497,12 @@ var init_model_catalog = __esm(() => {
     "gpt-5.5": "codex",
     deepseek: "maestro",
     "deepseek-pro": "maestro",
-    "deepseek-flash": "maestro"
+    "deepseek-flash": "maestro",
+    kimi: "maestro",
+    "kimi-pro": "maestro",
+    "kimi-k3": "maestro",
+    "kimi-code": "maestro",
+    "kimi-k2.7-code": "maestro"
   };
   SELECTABLE_MODELS = [
     {
@@ -5548,6 +5565,26 @@ var init_model_catalog = __esm(() => {
       marginalTokenCost: "Claude API/extra usage introductory rate: $2/M input, $2.50/M cache write, $0.20/M cache read, $10/M output through 2026-08-31; then $3/M input and $15/M output",
       estimatedUsage: `${CLAUDE_COMMUNITY_SESSION}; Sonnet also has a separate weekly allowance and normally provides the highest Claude throughput. No stable weekly token cap is published.`
     },
+    {
+      model: "kimi-k3",
+      agent: "maestro",
+      description: "Frontier Kimi route for long-horizon coding and knowledge work.",
+      intelligenceTier: "fable",
+      routingSummary: "frontier general/coding route; 1M context; highest Maestro API cost",
+      accessCost: "Moonshot AI pay-as-you-go API; no monthly subscription required",
+      marginalTokenCost: "Kimi API: $3/M cache-miss input, $0.30/M cached input, $15/M output",
+      estimatedUsage: "No subscription token cap; pay per token. Supports a 1M-token context window."
+    },
+    {
+      model: "kimi-k2.7-code",
+      agent: "maestro",
+      description: "Coding-specialized Kimi route for repository-scale, long-horizon work.",
+      intelligenceTier: "opus",
+      routingSummary: "coding-specialized route; 256K context; cheaper than Kimi K3",
+      accessCost: "Moonshot AI pay-as-you-go API; no monthly subscription required",
+      marginalTokenCost: "Kimi API: $0.95/M cache-miss input, $0.19/M cached input, $4/M output",
+      estimatedUsage: "No subscription token cap; pay per token. Always uses thinking and supports a 256K context window."
+    },
     {
       model: "deepseek-pro",
       agent: "maestro",
@@ -5559,6 +5596,11 @@ var init_model_catalog = __esm(() => {
       estimatedUsage: "No subscription token cap; pay per token. Official account concurrency limit is 500 requests."
     }
   ];
+  SELECTABLE_MODEL_ALIASES = {
+    kimi: "kimi-k3",
+    "kimi-pro": "kimi-k3",
+    "kimi-code": "kimi-k2.7-code"
+  };
   FALLBACK_ORDER = {
     claude: [
       { agent: "maestro", model: "deepseek-pro" },
@@ -5748,6 +5790,38 @@ var init_self_schedules = __esm(async () => {
 `);
 });
 
+// ../../packages/core/src/platform/playwright/headed-launch.ts
+import { accessSync, constants } from "fs";
+import { delimiter, isAbsolute, resolve as resolve5 } from "path";
+function findExecutableOnPath(command, environment = process.env) {
+  const candidates = isAbsolute(command) ? [command] : (environment.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => resolve5(directory, command));
+  for (const candidate of candidates) {
+    try {
+      accessSync(candidate, constants.X_OK);
+      return candidate;
+    } catch {}
+  }
+  return null;
+}
+function resolveHeadedPlaywrightSpawn(command, args, options = {}) {
+  const platform2 = options.platform ?? process.platform;
+  const environment = options.environment ?? process.env;
+  const hasDisplay = Boolean(environment.DISPLAY?.trim() || environment.WAYLAND_DISPLAY?.trim());
+  if (platform2 !== "linux" || hasDisplay) {
+    return { command, args: [...args], virtualDisplay: false };
+  }
+  const xvfbRun = (options.findExecutable ?? findExecutableOnPath)("xvfb-run", environment);
+  if (!xvfbRun) {
+    throw new Error("Headed Playwright on Linux requires DISPLAY/WAYLAND_DISPLAY or xvfb-run; install Xvfb and ensure xvfb-run is on PATH");
+  }
+  return {
+    command: xvfbRun,
+    args: ["-a", "-s", "-screen 0 1440x1000x24", command, ...args],
+    virtualDisplay: true
+  };
+}
+var init_headed_launch = () => {};
+
 // ../../packages/core/src/storage/browser-profiles.ts
 function normalizeBrowserProfileName(name) {
   const value = name.trim().toLowerCase();
@@ -5852,7 +5926,7 @@ import {
   unlinkSync as unlinkSync9,
   writeFileSync as writeFileSync7
 } from "fs";
-import { dirname as dirname8, join as join13, resolve as resolve5 } from "path";
+import { dirname as dirname8, join as join13, resolve as resolve6 } from "path";
 function makeInstanceKey(userId, topic) {
   if (!topic)
     return makeBrowserProfileInstanceKey(userId, "default");
@@ -5870,7 +5944,7 @@ function migrateLegacyTopicProfile(ownerId, topic) {
   const current2 = getTopicBrowserProfile(topic);
   if (current2 !== "default" || !hasBrowserProfileTopic(topic))
     return current2;
-  const legacyDir = resolve5(BROWSER_PROFILES_DIR, sanitizeTopicName(topic));
+  const legacyDir = resolve6(BROWSER_PROFILES_DIR, sanitizeTopicName(topic));
   if (!existsSync13(legacyDir))
     return current2;
   const profile = legacyBrowserProfileName(topic);
@@ -6049,11 +6123,11 @@ async function killPlaywrightOnPort(port, expectedUserDataDir) {
 }
 function browserProcessMatchesExpectedProfile(cmdline, expectedUserDataDir) {
   const actualUserDataDir = extractUserDataDirArg(cmdline);
-  return actualUserDataDir !== null && resolve5(actualUserDataDir) === resolve5(expectedUserDataDir);
+  return actualUserDataDir !== null && resolve6(actualUserDataDir) === resolve6(expectedUserDataDir);
 }
 function killBrowserProcsForUserDataDir(userDataDir) {
-  const target = resolve5(userDataDir);
-  if (!target.startsWith(resolve5(BROWSER_PROFILES_DIR)))
+  const target = resolve6(userDataDir);
+  if (!target.startsWith(resolve6(BROWSER_PROFILES_DIR)))
     return;
   let pids;
   try {
@@ -6073,7 +6147,7 @@ function killBrowserProcsForUserDataDir(userDataDir) {
         stdio: "pipe"
       }).toString().trim();
       const argDir = extractUserDataDirArg(cmdline);
-      if (!argDir || resolve5(argDir) !== target)
+      if (!argDir || resolve6(argDir) !== target)
         continue;
       killProcessTreeChildren(pidNum);
       process.kill(pidNum, "SIGKILL");
@@ -6084,13 +6158,13 @@ function killBrowserProcsForUserDataDir(userDataDir) {
   }
 }
 function selectOrphanBrowserPids(procs, liveUserDataDirs, profileRoot, selfPid) {
-  const root = resolve5(profileRoot);
-  const live = new Set([...liveUserDataDirs].map((d) => resolve5(d)));
+  const root = resolve6(profileRoot);
+  const live = new Set([...liveUserDataDirs].map((d) => resolve6(d)));
   const out = [];
   for (const { pid, userDataDir } of procs) {
     if (pid === selfPid || !userDataDir)
       continue;
-    const dir = resolve5(userDataDir);
+    const dir = resolve6(userDataDir);
     if (!dir.startsWith(root))
       continue;
     if (live.has(dir))
@@ -6106,7 +6180,7 @@ function reapOrphanBrowsers() {
   const daemonLease = getRuntimeProcessLease("node-daemon", Date.now(), Number.POSITIVE_INFINITY);
   if (!isBrowserJanitorOwner(daemonLease?.pid ?? null, process.pid))
     return;
-  const profileRoot = resolve5(BROWSER_PROFILES_DIR);
+  const profileRoot = resolve6(BROWSER_PROFILES_DIR);
   let pids;
   try {
     pids = execFileSync4("pgrep", ["-f", "--", profileRoot], { stdio: "pipe" }).toString().trim();
@@ -6159,7 +6233,7 @@ function cleanSingletonFiles(userDataDir) {
     for (const f of files) {
       if (f.startsWith("Singleton")) {
         try {
-          unlinkSync9(resolve5(userDataDir, f));
+          unlinkSync9(resolve6(userDataDir, f));
           logger.info({ file: f, userDataDir }, "Removed stale Singleton file");
         } catch (e) {
           logger.warn({ err: e, file: f }, "Failed to remove stale Chrome Singleton file");
@@ -6195,7 +6269,7 @@ function ownerDirectory(ownerId) {
   return `${sanitizeTopicName(ownerId).slice(0, 24)}_${digest}`;
 }
 function resolveProfileDir(ownerId, profile) {
-  return resolve5(BROWSER_PROFILES_DIR, "profiles", ownerDirectory(ownerId), profile);
+  return resolve6(BROWSER_PROFILES_DIR, "profiles", ownerDirectory(ownerId), profile);
 }
 function resolveUserDataDir(instanceKey) {
   const { ownerId, profile } = parseInstanceKey(instanceKey);
@@ -6253,11 +6327,25 @@ async function spawnPlaywright(instanceKey, userId, reservedPort, browserBin = P
   }
   const command = browserBin.endsWith(".mjs") ? process.execPath : browserBin;
   const args = browserBin.endsWith(".mjs") ? [browserBin, ...mcpArgs] : mcpArgs;
-  const proc = spawn4(command, args, {
-    stdio: "ignore",
-    detached: false,
-    env: childEnv
-  });
+  let spawnSpec;
+  try {
+    spawnSpec = resolveHeadedPlaywrightSpawn(command, args, { environment: childEnv });
+  } catch (err) {
+    releasePort(port);
+    throw err;
+  }
+  let proc;
+  try {
+    proc = spawn4(spawnSpec.command, spawnSpec.args, {
+      stdio: "ignore",
+      detached: false,
+      env: childEnv
+    });
+  } catch (err) {
+    releasePort(port);
+    throw err;
+  }
+  const spawnError = waitForChildProcessSpawnError(proc);
   const reapCrashedBrowser = () => {
     const userDataDir2 = resolveUserDataDir(instanceKey);
     killBrowserProcsForUserDataDir(userDataDir2);
@@ -6290,7 +6378,10 @@ async function spawnPlaywright(instanceKey, userId, reservedPort, browserBin = P
     lastUsedAt: now,
     capability
   });
-  const ready = await waitForServer(port, 1e4) && await supportsOwnerCleanup(port, capability);
+  const ready = await Promise.race([
+    (async () => await waitForServer(port, 1e4) && await supportsOwnerCleanup(port, capability))(),
+    spawnError
+  ]);
   if (!ready) {
     const exitCode = proc.exitCode;
     killInstance(instanceKey);
@@ -6301,7 +6392,7 @@ async function spawnPlaywright(instanceKey, userId, reservedPort, browserBin = P
     throw new Error(`Playwright MCP failed health check after spawn on port ${port}` + (exitCode === null ? "" : ` (exitCode=${exitCode})`));
   }
   writePortFile(instanceKey, port);
-  logger.info({ instanceKey, port, pid: proc.pid, ready }, "Playwright MCP started");
+  logger.info({ instanceKey, port, pid: proc.pid, ready, virtualDisplay: spawnSpec.virtualDisplay }, "Playwright MCP started");
   return port;
 }
 async function supportsOwnerCleanup(port, capability) {
@@ -6369,10 +6460,16 @@ async function waitForServer(port, timeoutMs) {
   logger.warn({ port, timeoutMs }, "Playwright MCP not ready before timeout");
   return false;
 }
+function waitForChildProcessSpawnError(proc) {
+  return new Promise((_resolve, reject) => {
+    proc.once("error", reject);
+  });
+}
 var BASE_PORT, MAX_PORT, MAX_IDLE_MS, instances, usedPorts, spawning, pinnedInstances, _onPlaywrightExit = null;
 var init_manager2 = __esm(async () => {
   init_config();
   init_logger();
+  init_headed_launch();
   await init_browser_profiles();
   await init_runtime_process_leases();
   BASE_PORT = PLAYWRIGHT_BASE_PORT;
@@ -6997,9 +7094,9 @@ var init_runtime_turn_requests = __esm(async () => {
 
 // ../../packages/core/src/prompts/builders.ts
 import { readFileSync as readFileSync10 } from "fs";
-import { resolve as resolve6 } from "path";
+import { resolve as resolve7 } from "path";
 function loadPrompt(filename, dir = SESSIONS_DIR) {
-  const raw = readFileSync10(resolve6(dir, filename), "utf-8");
+  const raw = readFileSync10(resolve7(dir, filename), "utf-8");
   return raw.replace(/\{\{RESOURCES_DIR\}\}/g, RESOURCES_DIR);
 }
 function replaceVars(template, vars) {
@@ -7042,7 +7139,7 @@ function visualDesignGuide() {
   return _visualDesignGuide;
 }
 function loadAgentPrompt(filename) {
-  const raw = readFileSync10(resolve6(AGENTS_PROMPTS_DIR, filename), "utf-8");
+  const raw = readFileSync10(resolve7(AGENTS_PROMPTS_DIR, filename), "utf-8");
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match)
     throw new Error(`Agent prompt ${filename} is missing frontmatter`);
@@ -7242,8 +7339,8 @@ var init_builders = __esm(() => {
   init_model_catalog();
   init_config();
   init_logger();
-  PROMPTS_DIR = resolve6(PROJECT_ROOT, "src/prompts");
-  SESSIONS_DIR = resolve6(PROMPTS_DIR, "sessions");
+  PROMPTS_DIR = resolve7(PROJECT_ROOT, "src/prompts");
+  SESSIONS_DIR = resolve7(PROMPTS_DIR, "sessions");
 });
 
 // ../../packages/core/src/storage/api-topic-brief.ts
@@ -7934,7 +8031,17 @@ function archiveActiveTopicForMemory(topicId, userId, options) {
     archivePath: job.archivePath,
     messageCount: job.messageCount,
     mode: "active-topic",
-    onSettled: (success) => settleTopicArchiveJob(topicId, job.archivePath, success)
+    onSettled: (success) => {
+      let settled = false;
+      try {
+        (options.settleArchiveJob ?? settleTopicArchiveJob)(topicId, job.archivePath, success);
+        settled = true;
+      } catch (err) {
+        logger.warn({ err, topicId, archive: job.archivePath }, "topic-memory-archiver: failed to settle archive job");
+      } finally {
+        options.onSettled?.(settled && success);
+      }
+    }
   });
   if (!launched) {
     settleTopicArchiveJob(topicId, job.archivePath, false);
@@ -8556,7 +8663,7 @@ function authRecoveryHint(agent) {
     case "codex":
       return "Please log in again with `codex login` (~/.codex/auth.json)";
     case "maestro":
-      return "Please check the DEEPSEEK_API_KEY environment variable";
+      return "Please check the DEEPSEEK_API_KEY or MOONSHOT_API_KEY environment variable";
   }
 }
 function classifyAgentError(err, agent) {
@@ -8572,7 +8679,7 @@ function classifyAgentError(err, agent) {
     return status === 529 ? `${name} server is overloaded. Please try again in a moment. (529)` : `${name} server error occurred. Please try again in a moment. (500)`;
   }
   const s = stringifyError(err);
-  if (/401|authentication.error|invalid.*api.key|not logged|ANTHROPIC_API_KEY|DEEPSEEK_API_KEY/i.test(s)) {
+  if (/401|authentication.error|invalid.*api.key|not logged|ANTHROPIC_API_KEY|DEEPSEEK_API_KEY|MOONSHOT_API_KEY/i.test(s)) {
     return `${name} authentication expired. ${hint}. (401)`;
   }
   if (/429|rate.limit/i.test(s))
@@ -8594,12 +8701,12 @@ var init_errors = __esm(() => {
 
 // ../../packages/core/src/runtime/event-heartbeat.ts
 function nextOrHeartbeat(pending, intervalMs) {
-  return new Promise((resolve7, reject) => {
-    const timer = setTimeout(() => resolve7({ kind: "heartbeat" }), intervalMs);
+  return new Promise((resolve8, reject) => {
+    const timer = setTimeout(() => resolve8({ kind: "heartbeat" }), intervalMs);
     timer.unref?.();
     pending.then((result) => {
       clearTimeout(timer);
-      resolve7({ kind: "event", result });
+      resolve8({ kind: "event", result });
     }, (error) => {
       clearTimeout(timer);
       reject(error);
@@ -9026,7 +9133,7 @@ var init_visual_html = __esm(() => {
 
 // ../../packages/core/src/runtime/visuals.ts
 import { realpathSync as realpathSync2 } from "fs";
-import { isAbsolute, resolve as resolve7 } from "path";
+import { isAbsolute as isAbsolute2, resolve as resolve8 } from "path";
 function activeVisualHtmlForPrompt(html) {
   if (html.length <= ACTIVE_VISUAL_PROMPT_MAX_CHARS) {
     return { html, omittedChars: 0 };
@@ -9077,8 +9184,8 @@ function topicAllowsVisualFileId(topicId, fileId) {
   return topicHasAttachmentFileId(topicId, fileId) || topicHasVisualFileId(topicId, fileId);
 }
 function isPathInside(baseDir, filePath) {
-  const base = resolve7(baseDir);
-  const normalized = resolve7(filePath);
+  const base = resolve8(baseDir);
+  const normalized = resolve8(filePath);
   try {
     const realBase = realpathSync2(base);
     const real = realpathSync2(normalized);
@@ -9140,7 +9247,7 @@ function resolveVisualMediaInput(topicId, input) {
   }
   const rawPath = input.file_path.trim();
   const cwd = workspaceCwdFor(topicId);
-  const candidate = isAbsolute(rawPath) ? rawPath : resolve7(cwd, rawPath);
+  const candidate = isAbsolute2(rawPath) ? rawPath : resolve8(cwd, rawPath);
   if (!isPathInside(cwd, candidate)) {
     return { error: "file_path must be inside the topic workspace" };
   }
@@ -9836,6 +9943,7 @@ __export(exports_turn_runner, {
   composeAttachmentPrompt: () => composeAttachmentPrompt,
   classifyAgentError: () => classifyAgentError,
   channelTranscriptSpeaker: () => channelTranscriptSpeaker,
+  canonicalModelId: () => canonicalModelId,
   buildVideoHtml: () => buildVideoHtml,
   buildMermaidHtml: () => buildMermaidHtml,
   buildMentionOnlyChannelPrompt: () => buildMentionOnlyChannelPrompt,
@@ -9853,7 +9961,7 @@ __export(exports_turn_runner, {
 });
 import { randomUUID as randomUUID9 } from "crypto";
 import { mkdirSync as mkdirSync16, realpathSync as realpathSync3, statSync as statSync6 } from "fs";
-import { isAbsolute as isAbsolute2, resolve as resolve8 } from "path";
+import { isAbsolute as isAbsolute3, resolve as resolve9 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
   if (isManager)
     return configuredMcp;
@@ -10197,7 +10305,7 @@ async function streamAgentEvents(topicId, topicTitle, queryId, events, control,
         case "file":
           if (!silent && peerBridge) {
             const cwd = workspaceCwdFor(topicId);
-            const path = isAbsolute2(event.path) ? event.path : resolve8(cwd, event.path);
+            const path = isAbsolute3(event.path) ? event.path : resolve9(cwd, event.path);
             if (!isPathInside(cwd, path)) {
               logger.warn({ topicId, path }, "peer output file is outside the topic workspace");
               break;
@@ -11796,6 +11904,7 @@ await init_api_topics();
 await init_conversations();
 
 // ../../packages/core/src/agents/self-config-core.ts
+init_auth_check();
 init_model_catalog();
 await init_registry();
 await init_bus();
@@ -11918,6 +12027,7 @@ await init_bus();
 await init_api_topic_config();
 await init_api_topics();
 // ../../packages/core/src/application/switch-topic-model.ts
+init_auth_check();
 init_model_catalog();
 await init_registry();
 await init_bus();
@@ -11967,6 +12077,7 @@ await init_runtime_leases();
 await init_runtime_topic_state();
 await init_runtime_turn_requests();
 await init_personal_general();
+var RESET_MEMORY_ARCHIVE_WAIT_MS = 5 * 60 * 1000;
 // ../../packages/core/src/application/vault-command.ts
 await init_vault();
 var VAULT_COMMAND_HELP = [
@@ -12474,8 +12585,8 @@ function computeNextCronRun(expression, after = new Date, timezone) {
 // ../../packages/module-cron/src/scripts.ts
 import { spawn as spawn5 } from "child_process";
 import { existsSync as existsSync16, mkdirSync as mkdirSync19, readdirSync as readdirSync6 } from "fs";
-import { resolve as resolve9, sep } from "path";
-var CRON_JOBS_DIR = resolve9(process.env.NEGOTIUM_CRON_JOBS_DIR?.trim() || resolve9(WORKSPACE_DIR, "cron", "jobs"));
+import { resolve as resolve10, sep } from "path";
+var CRON_JOBS_DIR = resolve10(process.env.NEGOTIUM_CRON_JOBS_DIR?.trim() || resolve10(WORKSPACE_DIR, "cron", "jobs"));
 var DEFAULT_SCRIPT_TIMEOUT_MS = 10 * 60000;
 var DEFAULT_OUTPUT_LIMIT_BYTES = 1024 * 1024;
 var KILL_GRACE_MS = 2500;
@@ -12498,7 +12609,7 @@ function resolveCronScriptPath(script) {
   const valid = validateCronScriptName(script);
   if (!valid.ok)
     throw new Error(valid.error);
-  const path = resolve9(CRON_JOBS_DIR, script);
+  const path = resolve10(CRON_JOBS_DIR, script);
   if (!path.startsWith(`${CRON_JOBS_DIR}${sep}`))
     throw new Error("script path escaped jobs directory");
   return path;
@@ -13956,4 +14067,4 @@ export {
   CRON_CONTEXT_RETAIN_TURNS
 };
 
-//# debugId=DC099CBD3DDF771164756E2164756E21
+//# debugId=8A97E8B383252AFE64756E2164756E21