negotium 0.1.48 → 0.2.0

package/dist/mcp-factories.js

@@ -155,7 +155,7 @@ function resolveBrowserRsBin(envValue) {
   if (!override && !versionAtLeast(BROWSER_RS_VERSION.replace(/^v/, ""), BROWSER_RS_MIN_SECURE_VERSION)) {
     return;
   }
-  const candidate = override ? resolve(override) : resolve(STATE_DIR, "bin", "browser-rs", BROWSER_RS_VERSION, "browser-rs");
+  const candidate = override ? resolve(override) : resolve(BINARIES_DIR, "browser-rs", BROWSER_RS_VERSION, "browser-rs");
   try {
     accessSync(candidate, constants.X_OK);
     return browserRsMeetsMinimumVersion(candidate) ? candidate : undefined;
@@ -167,7 +167,7 @@ function resolveBrowserMcpBin(envValue) {
   const override = envValue?.trim();
   if (override)
     return resolve(override);
-  return BROWSER_RS_BIN ?? resolve(STATE_DIR, "bin", "browser-rs", BROWSER_RS_VERSION, "browser-rs");
+  return BROWSER_RS_BIN ?? resolve(BINARIES_DIR, "browser-rs", BROWSER_RS_VERSION, "browser-rs");
 }
 function resolveBrowserProxy() {
   const raw = envText("BROWSER_PROXY_URL");
@@ -199,7 +199,7 @@ function resolveTopicWorkspaceDir(topicId) {
 }
 function loadOrCreateLocalSecret(envKey, filename, options = {}) {
   const envValue = envText(envKey);
-  const secretFile = resolve(STATE_DIR, filename);
+  const secretFile = resolve(SECRETS_DIR, filename);
   mkdirSync(dirname(secretFile), { recursive: true });
   if (envValue) {
     if (options.persistEnvValue) {
@@ -240,7 +240,7 @@ function resolveDefaultModel(agent, registryDefaultModel) {
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(homedir(), ".codex", "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CONTEXTS_DIR, BROWSER_PROFILES_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.16", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, BACKGROUND_BASH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, CONTEXTS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.16", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, BACKGROUND_BASH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -252,10 +252,14 @@ var init_config = __esm(() => {
   WORKSPACE_DIR = resolveLocalStateDir("NEGOTIUM_WORKSPACE_DIR", "workspace");
   TOPIC_WORKSPACE_DIR = resolve(WORKSPACE_DIR, "topics");
   SHARED_WIKI_DIR = resolve(WORKSPACE_DIR, "wiki");
-  CONTEXTS_DIR = resolve(WORKSPACE_DIR, "contexts");
-  BROWSER_PROFILES_DIR = resolve(WORKSPACE_DIR, "browser-profiles");
-  DM_WORKSPACE_DIR = resolve(WORKSPACE_DIR, "dm");
-  SESSION_WORKSPACE_DIR = resolve(WORKSPACE_DIR, "sessions");
+  CRON_WORKSPACE_DIR = resolve(WORKSPACE_DIR, "cron");
+  BROWSER_DIR = resolveLocalStateDir("NEGOTIUM_BROWSER_DIR", "browser");
+  BROWSER_PROFILES_DIR = resolve(BROWSER_DIR, "profiles");
+  BINARIES_DIR = resolve(STATE_DIR, "binaries");
+  SECRETS_DIR = resolve(STATE_DIR, "secrets");
+  CONTEXTS_DIR = resolve(STATE_DIR, "data", "contexts");
+  DM_WORKSPACE_DIR = resolve(STATE_DIR, "data", "dm");
+  SESSION_WORKSPACE_DIR = resolve(STATE_DIR, "data", "sessions");
   CLAUDE_EXECUTABLE_ENV = envText("NEGOTIUM_CLAUDE_EXECUTABLE");
   CLAUDE_EXECUTABLE = CLAUDE_EXECUTABLE_ENV ? resolve(CLAUDE_EXECUTABLE_ENV) : undefined;
   BROWSER_RS_BIN = resolveBrowserRsBin(envText("NEGOTIUM_BROWSER_RS_BIN"));
@@ -284,10 +288,12 @@ var init_config = __esm(() => {
   hostname = process.env.HOSTNAME || "127.0.0.1";
   DATA_DIR = resolveLocalStateDir("NEGOTIUM_DATA_DIR", "data");
   LOG_DIR = resolveLocalStateDir("NEGOTIUM_LOG_DIR", "logs");
+  UPLOADS_DIR = resolve(DATA_DIR, "uploads");
+  VAULT_DIR = resolve(DATA_DIR, "vault");
   SESSIONS_DB = process.env.SESSIONS_DB_PATH ? resolve(process.env.SESSIONS_DB_PATH) : resolve(DATA_DIR, "sessions.db");
   DEBUG_FILE = resolve(DATA_DIR, "debug-users.json");
   USERS_LOG_DIR = resolve(DATA_DIR, "users");
-  RUN_DIR = resolveLocalStateDir("NEGOTIUM_RUN_DIR", "run");
+  RUN_DIR = resolveLocalStateDir("NEGOTIUM_RUN_DIR", "runtime");
   PROGRESS_DIR = resolve(RUN_DIR, "progress");
   DM_CMD_DIR = resolve(RUN_DIR, "dm-commands");
   DM_RESP_DIR = resolve(RUN_DIR, "dm-responses");
@@ -298,6 +304,8 @@ var init_config = __esm(() => {
   PLAYWRIGHT_PORTS_DIR = resolve(RUN_DIR, "playwright-ports");
   mkdirSync(STATE_DIR, { recursive: true });
   mkdirSync(DATA_DIR, { recursive: true });
+  mkdirSync(UPLOADS_DIR, { recursive: true });
+  mkdirSync(VAULT_DIR, { recursive: true, mode: 448 });
   mkdirSync(LOG_DIR, { recursive: true });
   mkdirSync(PROGRESS_DIR, { recursive: true });
   mkdirSync(DM_CMD_DIR, { recursive: true });
@@ -308,10 +316,14 @@ var init_config = __esm(() => {
   mkdirSync(WORKSPACE_DIR, { recursive: true });
   mkdirSync(TOPIC_WORKSPACE_DIR, { recursive: true });
   mkdirSync(SHARED_WIKI_DIR, { recursive: true });
+  mkdirSync(CRON_WORKSPACE_DIR, { recursive: true });
   mkdirSync(CONTEXTS_DIR, { recursive: true });
-  mkdirSync(BROWSER_PROFILES_DIR, { recursive: true });
   mkdirSync(DM_WORKSPACE_DIR, { recursive: true });
   mkdirSync(SESSION_WORKSPACE_DIR, { recursive: true });
+  mkdirSync(BROWSER_DIR, { recursive: true });
+  mkdirSync(BROWSER_PROFILES_DIR, { recursive: true });
+  mkdirSync(BINARIES_DIR, { recursive: true });
+  mkdirSync(SECRETS_DIR, { recursive: true, mode: 448 });
   ACTIVE_QUERY_STALE_MS = 10 * 60 * 1000;
   AGENTS_PROMPTS_DIR = resolve(PROJECT_ROOT, "src/prompts/agents");
   RESOURCES_DIR = resolve(PROJECT_ROOT, "src/resources");
@@ -530,7 +542,12 @@ var init_shared = __esm(() => {
   init_config();
   init_logger();
   __dirname2 = dirname3(fileURLToPath2(import.meta.url));
-  trustedWorkspaceRoots = [WORKSPACE_DIR, DM_WORKSPACE_DIR, TOPIC_WORKSPACE_DIR].map((root) => resolve3(root));
+  trustedWorkspaceRoots = [
+    WORKSPACE_DIR,
+    DM_WORKSPACE_DIR,
+    SESSION_WORKSPACE_DIR,
+    TOPIC_WORKSPACE_DIR
+  ].map((root) => resolve3(root));
   FIXTURES_DIR = join3(__dirname2, "..", "fixtures");
   UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 });
@@ -583,6 +600,13 @@ function parseJsonlText(raw) {
   return raw.trim().split(`
 `).filter(Boolean).map((line) => JSON.parse(line));
 }
+function readJsonFile(filePath) {
+  try {
+    return JSON.parse(readFileSync3(filePath, "utf-8"));
+  } catch {
+    return null;
+  }
+}
 function lockStaleMs() {
   const raw = Number.parseInt(process.env.NEGOTIUM_JSONL_LOCK_STALE_MS ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_LOCK_STALE_MS;
@@ -1486,7 +1510,7 @@ function defaultWorkspaceDir() {
   return envPath("NEGOTIUM_WORKSPACE_DIR", join7(defaultStateDir(), "workspace"));
 }
 function defaultSessionAsksDir() {
-  const runDir = envPath("NEGOTIUM_RUN_DIR", join7(defaultStateDir(), "run"));
+  const runDir = envPath("NEGOTIUM_RUN_DIR", join7(defaultStateDir(), "runtime"));
   return join7(runDir, "session-asks");
 }
 function defaultSessionsDatabasePath() {
@@ -1592,15 +1616,8 @@ import {
   writeFileSync as writeFileSync5
 } from "fs";
 import { dirname as dirname7, join as join8 } from "path";
-function safeUserIdComponent(userId) {
-  const str = String(userId);
-  if (!str || /[/\\]|\.\./.test(str)) {
-    throw new Error(`conversations: refusing unsafe userId path component: ${str}`);
-  }
-  return str;
-}
-function conversationDir(userId) {
-  return join8(resolveStorageDataDir(), "conversations", safeUserIdComponent(userId));
+function conversationDir(_userId) {
+  return join8(resolveStorageDataDir(), "conversations");
 }
 function topicFilename(topicName) {
   const t = sanitizeTopicName(topicName, true);
@@ -1838,7 +1855,7 @@ function writeRollout(options) {
         version: 1,
         cwd: options.cwd,
         createdAt: existingCreatedAt(path) ?? new Date().toISOString(),
-        sdkVersion: "0.1.53"
+        sdkVersion: "0.1.54"
       }
     },
     ...messages
@@ -3498,7 +3515,7 @@ var init_registry = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/fork.ts
-import { existsSync as existsSync9, unlinkSync as unlinkSync8 } from "fs";
+import { existsSync as existsSync10, unlinkSync as unlinkSync8 } from "fs";
 function createAgentForkHelpers(host) {
   return {
     async forkAgentSession(options) {
@@ -3530,7 +3547,7 @@ var init_fork = __esm(async () => {
   await init_registry();
   defaultForkHelpers = createAgentForkHelpers({
     forkSession: (agent, options) => getRegistryOperations(agent).forkSession(options),
-    exists: existsSync9,
+    exists: existsSync10,
     unlink: unlinkSync8,
     warn: (details, message) => logger.warn(details, message)
   });
@@ -3923,7 +3940,7 @@ var init_runtime_process_leases = __esm(async () => {
 
 // ../../packages/core/src/platform/playwright/browser-processes.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { readdirSync as readdirSync3, unlinkSync as unlinkSync9 } from "fs";
+import { readdirSync as readdirSync4, unlinkSync as unlinkSync9 } from "fs";
 import { createServer } from "net";
 import { resolve as resolve7, sep } from "path";
 function isPortInUse(port) {
@@ -4048,7 +4065,7 @@ function reapOrphanBrowsers(liveUserDataDirs) {
 }
 function cleanSingletonFiles(userDataDir) {
   try {
-    const files = readdirSync3(userDataDir);
+    const files = readdirSync4(userDataDir);
     for (const f of files) {
       if (f.startsWith("Singleton")) {
         try {
@@ -4239,7 +4256,7 @@ var init_vault_crypto = __esm(() => {
 
 // ../../packages/core/src/storage/vault.ts
 import { chmodSync as chmodSync2, mkdirSync as mkdirSync9 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 function initializeVaultDatabase(database) {
   database.exec("PRAGMA journal_mode = WAL");
   database.exec("PRAGMA busy_timeout = 5000");
@@ -4274,8 +4291,9 @@ function initializeVaultDatabase(database) {
   }
 }
 function openVaultDatabase(dataDir) {
-  const path = join11(dataDir, "vault.db");
-  mkdirSync9(dataDir, { recursive: true });
+  const vaultDir = join12(dataDir, "vault");
+  const path = join12(vaultDir, "vault.db");
+  mkdirSync9(vaultDir, { recursive: true, mode: 448 });
   const database = new Database(path, { create: true });
   chmodSync2(path, 384);
   initializeVaultDatabase(database);
@@ -4381,7 +4399,7 @@ import { randomBytes as randomBytes4, timingSafeEqual } from "crypto";
 import { chmodSync as chmodSync3 } from "fs";
 import { createServer as createServer2 } from "net";
 import { tmpdir } from "os";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 function deepMapStrings(value2, transform) {
   if (typeof value2 === "string")
     return transform(value2);
@@ -4468,7 +4486,7 @@ function authorized(actual, expected) {
 }
 async function createBrowserVaultBroker(userId) {
   const token = randomBytes4(32).toString("hex");
-  const socketPath = join12(process.platform === "win32" ? tmpdir() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes4(8).toString("hex")}.sock`);
+  const socketPath = join13(process.platform === "win32" ? tmpdir() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes4(8).toString("hex")}.sock`);
   const retainedForms = new Map;
   const leases = new Map;
   const sockets = new Set;
@@ -4628,7 +4646,7 @@ function createBrowserProfile(ownerId, rawName) {
   const name = normalizeBrowserProfileName(rawName);
   if (name === DEFAULT_BROWSER_PROFILE)
     return name;
-  db.query("INSERT OR IGNORE INTO browser_profiles (owner_id, name, created_at) VALUES (?, ?, ?)").run(ownerId, name, new Date().toISOString());
+  db.query("INSERT OR IGNORE INTO browser_profiles (owner_id, name, created_at) VALUES (?, ?, ?)").run("local", name, new Date().toISOString());
   return name;
 }
 function assignTopicBrowserProfile(opts) {
@@ -4661,19 +4679,18 @@ var init_browser_profiles = __esm(async () => {
 });
 
 // ../../packages/core/src/platform/playwright/manager.ts
-import { execFileSync as execFileSync3, spawn as spawn2 } from "child_process";
+import { execFileSync as execFileSync3, spawn as spawn3 } from "child_process";
 import { createHash as createHash2, randomBytes as randomBytes5, timingSafeEqual as timingSafeEqual2 } from "crypto";
 import {
   cpSync,
-  existsSync as existsSync10,
+  existsSync as existsSync11,
   mkdirSync as mkdirSync10,
-  readFileSync as readFileSync8,
-  renameSync as renameSync5,
+  readFileSync as readFileSync9,
   rmSync,
   unlinkSync as unlinkSync10,
   writeFileSync as writeFileSync7
 } from "fs";
-import { dirname as dirname8, join as join13, resolve as resolve9 } from "path";
+import { dirname as dirname8, join as join14, resolve as resolve9 } from "path";
 function makeInstanceKey(userId, topic) {
   return resolvePlaywrightTopicBinding(userId, topic).instanceKey;
 }
@@ -4684,7 +4701,7 @@ function defaultTopicBinding(userId, topic) {
   if (!topic)
     return managerHost.resolveNamedBinding(userId, "default");
   const ownerId = getBrowserProfileOwner(topic, userId);
-  const profile = migrateLegacyTopicProfile(ownerId, topic);
+  const profile = getTopicBrowserProfile(topic);
   return managerHost.resolveNamedBinding(ownerId, profile);
 }
 function resolvePlaywrightProfileBinding(ownerId, rawProfile) {
@@ -4696,34 +4713,15 @@ function validateProfileBinding(binding) {
   }
   return Object.freeze({ ...binding });
 }
-function defaultNamedBinding(ownerId, rawProfile) {
+function defaultNamedBinding(_ownerId, rawProfile) {
   const profile = normalizeBrowserProfileName(rawProfile);
-  const instanceKey = `profile:${encodeURIComponent(ownerId)}:${profile}`;
+  const instanceKey = `profile:${profile}`;
   return {
     instanceKey,
-    ownerId,
+    ownerId: "local",
     profile
   };
 }
-function legacyBrowserProfileName(topic) {
-  return `legacy_${createHash2("sha256").update(topic).digest("hex").slice(0, 12)}`;
-}
-function migrateLegacyTopicProfile(ownerId, topic) {
-  const current2 = getTopicBrowserProfile(topic);
-  if (current2 !== "default" || !hasBrowserProfileTopic(topic))
-    return current2;
-  const legacyDir = resolve9(BROWSER_PROFILES_DIR, sanitizeTopicName(topic));
-  if (!existsSync10(legacyDir))
-    return current2;
-  const profile = legacyBrowserProfileName(topic);
-  const profileDir = defaultProfileDir(ownerId, profile);
-  mkdirSync10(dirname8(profileDir), { recursive: true });
-  if (!existsSync10(profileDir))
-    renameSync5(legacyDir, profileDir);
-  assignTopicBrowserProfile({ topicId: topic, actorUserId: ownerId, profile });
-  logger.info({ ownerId, topic, profile }, "Adopted legacy topic browser profile");
-  return profile;
-}
 function defaultChildEnvironment(context) {
   const childEnvironment = {};
   for (const key of [
@@ -4754,6 +4752,10 @@ function defaultChildEnvironment(context) {
   return childEnvironment;
 }
 function parseInstanceKey(instanceKey) {
+  const shared = /^profile:(.+)$/.exec(instanceKey);
+  if (shared && !shared[1].includes(":")) {
+    return { ownerId: "local", profile: normalizeBrowserProfileName(shared[1]) };
+  }
   const match = /^profile:([^:]+):(.+)$/.exec(instanceKey);
   if (!match)
     return { ownerId: "legacy", profile: sanitizeTopicName(instanceKey) };
@@ -4768,14 +4770,14 @@ function portFileName(instanceKey) {
 function writePortFile(instanceKey, port) {
   try {
     mkdirSync10(managerHost.portsDir, { recursive: true });
-    writeFileSync7(join13(managerHost.portsDir, portFileName(instanceKey)), String(port));
+    writeFileSync7(join14(managerHost.portsDir, portFileName(instanceKey)), String(port));
   } catch (e) {
     logger.warn({ err: e, instanceKey, port }, "Failed to save playwright port file");
   }
 }
 function deletePortFile(instanceKey) {
   try {
-    unlinkSync10(join13(managerHost.portsDir, portFileName(instanceKey)));
+    unlinkSync10(join14(managerHost.portsDir, portFileName(instanceKey)));
   } catch (e) {
     logger.warn({ err: e, instanceKey }, "Failed to delete playwright port file");
   }
@@ -4896,12 +4898,8 @@ async function allocatePort() {
 function releasePort(port) {
   usedPorts.delete(port);
 }
-function ownerDirectory(ownerId) {
-  const digest = createHash2("sha256").update(ownerId).digest("hex").slice(0, 16);
-  return `${sanitizeTopicName(ownerId).slice(0, 24)}_${digest}`;
-}
-function defaultProfileDir(ownerId, profile) {
-  return resolve9(BROWSER_PROFILES_DIR, "profiles", ownerDirectory(ownerId), profile);
+function defaultProfileDir(_ownerId, profile) {
+  return resolve9(BROWSER_PROFILES_DIR, profile);
 }
 function resolveUserDataDir(instanceKey) {
   return managerHost.resolveInstanceDataDir(instanceKey);
@@ -5029,7 +5027,7 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
   }
   let proc;
   try {
-    proc = spawn2(spawnSpec.command, spawnSpec.args, {
+    proc = spawn3(spawnSpec.command, spawnSpec.args, {
       stdio: ["ignore", "ignore", "pipe"],
       detached: false,
       env: childEnv
@@ -5262,11 +5260,11 @@ async function cloneProfileForChild(opts) {
       killInstance(dstKey);
       await delay(500);
     }
-    if (!existsSync10(srcDir)) {
+    if (!existsSync11(srcDir)) {
       return { copied: false, srcDir, dstDir, reason: "src-missing" };
     }
     try {
-      if (existsSync10(dstDir)) {
+      if (existsSync11(dstDir)) {
         rmSync(dstDir, { recursive: true, force: true });
       }
       mkdirSync10(dirname8(dstDir), { recursive: true });
@@ -5945,15 +5943,8 @@ RULES:
 - Keep the entire summary under 1500 words.`, CHARS_PER_TEXT_TOKEN = 3.5, CHARS_PER_CJK_TOKEN = 0.9;
 
 // ../../packages/core/src/storage/tasks.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync11, readFileSync as readFileSync9, renameSync as renameSync6, statSync as statSync4, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname9, join as join14 } from "path";
-function safeUserIdComponent2(userId) {
-  const str = String(userId);
-  if (!str || /[/\\]|\.\./.test(str)) {
-    throw new Error(`tasks: refusing unsafe userId path component: ${str}`);
-  }
-  return str;
-}
+import { existsSync as existsSync12, mkdirSync as mkdirSync11, readFileSync as readFileSync10, renameSync as renameSync5, statSync as statSync4, writeFileSync as writeFileSync8 } from "fs";
+import { dirname as dirname9, join as join15 } from "path";
 function safeTaskScopeKey(scopeKey) {
   const safe = sanitizeFileName(scopeKey);
   if (!safe || safe === "." || safe === "..") {
@@ -5965,14 +5956,14 @@ function taskScopeKey(opts) {
   return opts.topicId?.trim() || opts.session || "default";
 }
 function getTaskFilePath(userId, scopeKey) {
-  return join14(resolveStorageDataDir(), "tasks", safeUserIdComponent2(userId), `${safeTaskScopeKey(scopeKey)}.json`);
+  return join15(resolveStorageDataDir(), "tasks", `${safeTaskScopeKey(scopeKey)}.json`);
 }
 function readTasks(userId, scopeKey) {
   const path = getTaskFilePath(userId, scopeKey);
-  if (!existsSync11(path))
+  if (!existsSync12(path))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync9(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync10(path, "utf-8"));
     return Array.isArray(parsed?.tasks) ? parsed.tasks : [];
   } catch (e) {
     logger.warn({ err: e, path }, "tasks: failed to read task store");
@@ -5985,7 +5976,7 @@ function writeTasks(userId, scopeKey, tasks) {
   const payload = { version: 1, tasks };
   const tmp = `${path}.${process.pid}.tmp`;
   writeFileSync8(tmp, JSON.stringify(payload, null, 2), "utf-8");
-  renameSync6(tmp, path);
+  renameSync5(tmp, path);
 }
 function taskFileMtimeNs(userId, scopeKey) {
   try {
@@ -6141,14 +6132,14 @@ function deepMapStrings2(value2, fn) {
 }
 
 // ../../packages/core/src/security/sensitive-path.ts
-import { realpathSync as realpathSync2 } from "fs";
+import { realpathSync as realpathSync3 } from "fs";
 import { resolve as resolve10 } from "path";
 function isSensitivePath(filePath) {
   const normalized = resolve10(filePath);
   if (SENSITIVE_PATH_PATTERNS.some((p) => p.test(normalized)))
     return true;
   try {
-    const real = realpathSync2(normalized);
+    const real = realpathSync3(normalized);
     if (real !== normalized)
       return SENSITIVE_PATH_PATTERNS.some((p) => p.test(real));
   } catch {}
@@ -6331,7 +6322,7 @@ function deriveBgBashContextCapability(runtimeCapability, userId, topic) {
 var init_context = () => {};
 
 // ../../packages/core/src/platform/background-bash/manager.ts
-import { execFileSync as execFileSync4, spawn as spawn3 } from "child_process";
+import { execFileSync as execFileSync4, spawn as spawn4 } from "child_process";
 import { randomBytes as randomBytes6 } from "crypto";
 function makeBgBashKey(_userId, _topic) {
   return "runtime";
@@ -6358,7 +6349,7 @@ function createBackgroundBashManager(options = {}) {
   const now = options.now ?? Date.now;
   const wait = options.delay ?? delay;
   const portPids = options.portPids ?? defaultPortPids;
-  const spawnImpl = options.spawn ?? ((command, args, spawnOptions) => spawn3(command, [...args], spawnOptions));
+  const spawnImpl = options.spawn ?? ((command, args, spawnOptions) => spawn4(command, [...args], spawnOptions));
   function contextKey(userId, topic) {
     return `${userId}\x00${topic}`;
   }
@@ -6809,7 +6800,7 @@ function getMcpServersForQuery(opts) {
     if (!opts.topicId)
       throw new Error("getMcpServersForQuery: cron sessionType requires topicId");
     return getCronMcpServers({
-      userId: opts.userId || "default",
+      userId: opts.userId || "local",
       session: opts.session || "cron",
       topicId: opts.topicId,
       queryId: opts.queryId,
@@ -6826,7 +6817,7 @@ function getMcpServersForQuery(opts) {
   }
   if (opts.sessionType === "dm" || opts.sessionType === "ephemeral") {
     return getDmMcpServers({
-      userId: opts.userId || "default",
+      userId: opts.userId || "local",
       agent: opts.agent,
       playwrightPort: opts.playwrightPort,
       playwrightCapability: opts.playwrightCapability
@@ -6834,7 +6825,7 @@ function getMcpServersForQuery(opts) {
   }
   if (opts.sessionType === "manager") {
     return getManagerMcpServers({
-      userId: opts.userId || "default",
+      userId: opts.userId || "local",
       session: opts.session,
       topicId: opts.topicId,
       queryId: opts.queryId,
@@ -6851,7 +6842,7 @@ function getMcpServersForQuery(opts) {
     });
   }
   return getForumMcpServers({
-    userId: opts.userId || "default",
+    userId: opts.userId || "local",
     session: opts.session || "default",
     topicId: opts.topicId,
     subagentParentTopicId: opts.subagentParentTopicId,
@@ -7209,8 +7200,8 @@ __export(exports_claude_provider, {
   claudeBuiltInTools: () => claudeBuiltInTools,
   buildClaudeDisallowedTools: () => buildClaudeDisallowedTools
 });
-import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync12, readFileSync as readFileSync10 } from "fs";
+import { spawn as spawn5 } from "child_process";
+import { existsSync as existsSync13, readFileSync as readFileSync11 } from "fs";
 import { query } from "@anthropic-ai/claude-agent-sdk";
 function claudeBuiltInTools(opts) {
   return opts.toolPolicy ? [] : undefined;
@@ -7263,7 +7254,7 @@ function buildClaudePrompt(opts) {
         source: {
           type: "base64",
           media_type: attachment.mimeType,
-          data: readFileSync10(attachment.path).toString("base64")
+          data: readFileSync11(attachment.path).toString("base64")
         }
       });
     } catch (err) {
@@ -7286,7 +7277,7 @@ function buildClaudePrompt(opts) {
     parent_tool_use_id: null
   });
 }
-function signalProcessTree(pid, signal) {
+function signalProcessTree2(pid, signal) {
   try {
     process.kill(-pid, signal);
     return true;
@@ -7301,7 +7292,7 @@ function signalProcessTree(pid, signal) {
   }
 }
 function spawnClaudeCodeProcessWithTreeKill(options) {
-  const child = spawn4(options.command, options.args, {
+  const child = spawn5(options.command, options.args, {
     cwd: options.cwd,
     detached: true,
     env: options.env,
@@ -7321,13 +7312,13 @@ function spawnClaudeCodeProcessWithTreeKill(options) {
   const kill = (signal) => {
     if (!child.pid)
       return child.kill(signal);
-    const ok = signalProcessTree(child.pid, signal);
+    const ok = signalProcessTree2(child.pid, signal);
     if (signal !== "SIGKILL") {
       clearKillTimer();
       killTimer = setTimeout(() => {
         if (!exited && child.pid) {
           logger.warn({ pid: child.pid }, "Claude process tree still alive after SIGTERM; SIGKILL");
-          signalProcessTree(child.pid, "SIGKILL");
+          signalProcessTree2(child.pid, "SIGKILL");
         }
       }, CLAUDE_ABORT_SIGKILL_DELAY_MS);
       killTimer.unref?.();
@@ -7391,7 +7382,7 @@ function isAbortError(err) {
 }
 async function* claudeProvider(opts) {
   const claudeExecutable = hostedClaudeCodeExecutablePath();
-  if (claudeExecutable && !existsSync12(claudeExecutable)) {
+  if (claudeExecutable && !existsSync13(claudeExecutable)) {
     yield {
       type: "error",
       content: `Claude CLI not found at ${claudeExecutable}. Install Claude Code or configure the executable path.`
@@ -7686,34 +7677,34 @@ var init_claude_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.48";
+var NEGOTIUM_VERSION = "0.2.0";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn6 } from "child_process";
 import { randomUUID as randomUUID8 } from "crypto";
 import {
   chmodSync as chmodSync4,
   copyFileSync,
-  existsSync as existsSync13,
+  existsSync as existsSync14,
   mkdtempSync,
-  readFileSync as readFileSync11,
-  renameSync as renameSync7,
+  readFileSync as readFileSync12,
+  renameSync as renameSync6,
   rmSync as rmSync2,
   unlinkSync as unlinkSync11,
   writeFileSync as writeFileSync9
 } from "fs";
 import { createRequire as createRequire2 } from "module";
 import { tmpdir as tmpdir2 } from "os";
-import { dirname as dirname10, join as join15 } from "path";
+import { dirname as dirname10, join as join16 } from "path";
 function readPackageVersion(packageJsonPath) {
-  const parsed = JSON.parse(readFileSync11(packageJsonPath, "utf8"));
+  const parsed = JSON.parse(readFileSync12(packageJsonPath, "utf8"));
   if (typeof parsed.version !== "string" || !parsed.version.trim()) {
     throw new Error(`Codex package has no valid version: ${packageJsonPath}`);
   }
   return parsed.version;
 }
 function codexCliScriptPath() {
-  return join15(dirname10(bundledCodexPackagePath), "bin", "codex.js");
+  return join16(dirname10(bundledCodexPackagePath), "bin", "codex.js");
 }
 function parseCodexModelCache(contents, sourcePath) {
   let parsed;
@@ -7728,7 +7719,7 @@ function parseCodexModelCache(contents, sourcePath) {
   return parsed;
 }
 function readCodexModelCache(cachePath) {
-  const contents = readFileSync11(cachePath, "utf8");
+  const contents = readFileSync12(cachePath, "utf8");
   return { contents, parsed: parseCodexModelCache(contents, cachePath) };
 }
 function readCompatibleCodexModelCache(cachePath) {
@@ -7740,12 +7731,12 @@ function readCompatibleCodexModelCache(cachePath) {
   return cache;
 }
 function writePrivateFileAtomic(path, contents) {
-  if (existsSync13(path) && readFileSync11(path, "utf8") === contents)
+  if (existsSync14(path) && readFileSync12(path, "utf8") === contents)
     return;
   const tempPath = `${path}.${process.pid}.${randomUUID8()}.tmp`;
   try {
     writeFileSync9(tempPath, contents, { encoding: "utf8", mode: 384 });
-    renameSync7(tempPath, path);
+    renameSync6(tempPath, path);
     chmodSync4(path, 384);
   } finally {
     try {
@@ -7754,10 +7745,10 @@ function writePrivateFileAtomic(path, contents) {
   }
 }
 function bundledCodexModelCachePath(authFilePath) {
-  return join15(dirname10(authFilePath), NEGOTIUM_MODEL_CACHE);
+  return join16(dirname10(authFilePath), NEGOTIUM_MODEL_CACHE);
 }
 async function bootstrapCodexModelCache(codexHome, cachePath) {
-  const child = spawn5(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
+  const child = spawn6(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
     env: { ...process.env, CODEX_HOME: codexHome },
     stdio: ["pipe", "pipe", "pipe"]
   });
@@ -7777,7 +7768,7 @@ async function bootstrapCodexModelCache(codexHome, cachePath) {
       } catch {}
       if (error)
         reject(error);
-      else if (!existsSync13(cachePath))
+      else if (!existsSync14(cachePath))
         reject(new Error("Codex did not create its model cache"));
       else
         resolve11();
@@ -7840,15 +7831,15 @@ async function bootstrapCodexModelCache(codexHome, cachePath) {
 }
 async function bootstrapIsolatedCodexModelCache(authFilePath, bootstrap) {
   const sourceHome = dirname10(authFilePath);
-  const isolatedHome = mkdtempSync(join15(tmpdir2(), "negotium-codex-models-"));
-  const isolatedCachePath = join15(isolatedHome, "models_cache.json");
+  const isolatedHome = mkdtempSync(join16(tmpdir2(), "negotium-codex-models-"));
+  const isolatedCachePath = join16(isolatedHome, "models_cache.json");
   try {
-    const isolatedAuthPath = join15(isolatedHome, "auth.json");
+    const isolatedAuthPath = join16(isolatedHome, "auth.json");
     copyFileSync(authFilePath, isolatedAuthPath);
     chmodSync4(isolatedAuthPath, 384);
-    const sourceConfigPath = join15(sourceHome, "config.toml");
-    if (existsSync13(sourceConfigPath)) {
-      const isolatedConfigPath = join15(isolatedHome, "config.toml");
+    const sourceConfigPath = join16(sourceHome, "config.toml");
+    if (existsSync14(sourceConfigPath)) {
+      const isolatedConfigPath = join16(isolatedHome, "config.toml");
       copyFileSync(sourceConfigPath, isolatedConfigPath);
       chmodSync4(isolatedConfigPath, 384);
     }
@@ -7862,22 +7853,22 @@ async function ensureCodexModelCache(authFilePath, bootstrap = bootstrapCodexMod
   const codexHome = dirname10(authFilePath);
   const configuredCachePath = process.env.NEGOTIUM_CODEX_MODELS_CACHE_FILE;
   if (configuredCachePath) {
-    if (!existsSync13(configuredCachePath)) {
+    if (!existsSync14(configuredCachePath)) {
       throw new Error(`Configured Codex model cache does not exist: ${configuredCachePath}`);
     }
     readCompatibleCodexModelCache(configuredCachePath);
     return configuredCachePath;
   }
   const bundledCachePath = bundledCodexModelCachePath(authFilePath);
-  const sharedCachePath = join15(codexHome, "models_cache.json");
-  if (existsSync13(sharedCachePath)) {
+  const sharedCachePath = join16(codexHome, "models_cache.json");
+  if (existsSync14(sharedCachePath)) {
     try {
       const shared = readCompatibleCodexModelCache(sharedCachePath);
       writePrivateFileAtomic(bundledCachePath, shared.contents);
       return bundledCachePath;
     } catch {}
   }
-  if (existsSync13(bundledCachePath)) {
+  if (existsSync14(bundledCachePath)) {
     try {
       readCompatibleCodexModelCache(bundledCachePath);
       return bundledCachePath;
@@ -7889,7 +7880,7 @@ async function ensureCodexModelCache(authFilePath, bootstrap = bootstrapCodexMod
 }
 function writeCodexCatalogWithNativeMultiAgentDisabled(authFilePath, sourcePath) {
   const codexHome = dirname10(authFilePath);
-  const outputPath = join15(codexHome, NEGOTIUM_MODEL_CATALOG);
+  const outputPath = join16(codexHome, NEGOTIUM_MODEL_CATALOG);
   const parsed = readCodexModelCache(sourcePath).parsed;
   const models = parsed.models.map((model, index) => {
     if (!model || typeof model !== "object" || Array.isArray(model)) {
@@ -8136,7 +8127,7 @@ var init_codex_tree_kill = __esm(() => {
 });
 
 // ../../packages/core/src/agents/tool-format.ts
-import { readFileSync as readFileSync12, statSync as statSync5 } from "fs";
+import { readFileSync as readFileSync13, statSync as statSync5 } from "fs";
 import { isAbsolute as isAbsolute2, resolve as resolve11 } from "path";
 import { diffLines as computeLineDiff } from "diff";
 function summarizeDisplayText(value2) {
@@ -8465,7 +8456,7 @@ function sourceStartLine(input, before, after, cwd) {
   try {
     if (statSync5(path).size > TOOL_DIFF_SOURCE_MAX_BYTES)
       return 1;
-    const source = readFileSync12(path, "utf8").replace(/\r\n?/g, `
+    const source = readFileSync13(path, "utf8").replace(/\r\n?/g, `
 `);
     for (const candidate of [before, after].filter(Boolean)) {
       const index = source.indexOf(candidate);
@@ -8658,8 +8649,8 @@ __export(exports_codex_provider, {
   codexProvider: () => codexProvider
 });
 import { execFileSync as execFileSync6 } from "child_process";
-import { existsSync as existsSync14, readFileSync as readFileSync13, realpathSync as realpathSync3, statSync as statSync6 } from "fs";
-import { dirname as dirname11, isAbsolute as isAbsolute3, join as join16, relative, resolve as resolve12 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync14, realpathSync as realpathSync4, statSync as statSync6 } from "fs";
+import { dirname as dirname11, isAbsolute as isAbsolute3, join as join17, relative, resolve as resolve12 } from "path";
 import { Codex } from "@openai/codex-sdk";
 function mapEffort(effort) {
   if (!effort)
@@ -8673,12 +8664,12 @@ function codexMcpServerName(name) {
   return CODEX_MCP_SERVER_NAME_OVERRIDES[name] ?? name;
 }
 function globalCodexMcpServerNames(authFilePath) {
-  const configPath = join16(dirname11(authFilePath), "config.toml");
-  if (!existsSync14(configPath))
+  const configPath = join17(dirname11(authFilePath), "config.toml");
+  if (!existsSync15(configPath))
     return [];
   try {
     const names = new Set;
-    for (const line of readFileSync13(configPath, "utf8").split(`
+    for (const line of readFileSync14(configPath, "utf8").split(`
 `)) {
       const match = line.match(/^\s*\[\s*mcp_servers\.((?:"(?:\\.|[^"])*")|(?:'[^']*')|[^.\]\s]+)(?:[.\]])/);
       const raw = match?.[1];
@@ -8769,19 +8760,19 @@ function summarizeMcpToolCallResult(item) {
 }
 function canonicalPath(path) {
   try {
-    return realpathSync3(resolve12(path));
+    return realpathSync4(resolve12(path));
   } catch {
     return resolve12(path);
   }
 }
 function textFile(path, maxBytes = CODEX_DIFF_FILE_LIMIT) {
-  if (!existsSync14(path))
+  if (!existsSync15(path))
     return null;
   try {
     const byteLimit = Math.min(CODEX_DIFF_FILE_LIMIT, Math.max(0, maxBytes));
     if (statSync6(path).size > byteLimit)
       return;
-    const content = readFileSync13(path);
+    const content = readFileSync14(path);
     if (content.byteLength > byteLimit || content.includes(0))
       return;
     return content.toString("utf8");
@@ -8987,7 +8978,7 @@ async function* codexProvider(opts) {
   const filePreviews = new CodexFilePreviewTracker(opts.cwd);
   const consumedPatchCallIds = new Set(opts.sessionId ? readCodexPatchCallIds(opts.sessionId) : []);
   const codexAuthPath = hostedCodexAuthFilePath();
-  if (!existsSync14(codexAuthPath)) {
+  if (!existsSync15(codexAuthPath)) {
     yield {
       type: "error",
       content: `Codex auth file not found at ${codexAuthPath}. Run \`codex login\` to authenticate.`
@@ -9026,7 +9017,7 @@ async function* codexProvider(opts) {
     model: opts.model ?? "(sdk default)",
     effort: opts.effort ?? "(off)",
     cwd: opts.cwd,
-    cwdExists: existsSync14(opts.cwd),
+    cwdExists: existsSync15(opts.cwd),
     resume: Boolean(opts.sessionId),
     mcpServerCount: Object.keys(codexMcpServers).length
   }, "codexProvider: starting turn");
@@ -9467,9 +9458,9 @@ var init_maestro_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/index.ts
-import { existsSync as existsSync15 } from "fs";
+import { existsSync as existsSync16 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 async function* dispatchAgent(opts) {
   switch (opts.agent) {
     case "claude": {
@@ -9503,11 +9494,11 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
   switch (agent) {
     case "claude": {
       const encodedCwd = encodeClaudeCwd(cwd);
-      const path = join17(homedir8(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
-      return !existsSync15(path);
+      const path = join18(homedir8(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
+      return !existsSync16(path);
     }
     case "codex": {
-      const sessionsDir = join17(process.env.CODEX_HOME || join17(homedir8(), ".codex"), "sessions");
+      const sessionsDir = join18(process.env.CODEX_HOME || join18(homedir8(), ".codex"), "sessions");
       const glob = new Bun.Glob(`**/rollout-*-${sessionId}.jsonl`);
       for await (const _rel of glob.scan({ cwd: sessionsDir, onlyFiles: true })) {
         return false;
@@ -9516,7 +9507,7 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
     }
     case "maestro": {
       const { hasActiveMaestroSession, maestroSessionPath: maestroSessionPath2 } = await import("maestro-agent-sdk");
-      return !existsSync15(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
+      return !existsSync16(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
     }
     default: {
       const _exhaustive = agent;
@@ -9582,10 +9573,10 @@ var init_agents = __esm(async () => {
 });
 
 // ../../packages/core/src/prompts/builders.ts
-import { readFileSync as readFileSync14 } from "fs";
+import { readFileSync as readFileSync15 } from "fs";
 import { resolve as resolve14 } from "path";
 function loadPrompt(filename, dir = SESSIONS_DIR) {
-  const raw = readFileSync14(resolve14(dir, filename), "utf-8");
+  const raw = readFileSync15(resolve14(dir, filename), "utf-8");
   return raw.replace(/\{\{RESOURCES_DIR\}\}/g, RESOURCES_DIR);
 }
 function replaceVars(template, vars) {
@@ -9634,7 +9625,7 @@ function visualDesignGuide() {
   return _visualDesignGuide;
 }
 function loadAgentPrompt(filename) {
-  const raw = readFileSync14(resolve14(AGENTS_PROMPTS_DIR, filename), "utf-8");
+  const raw = readFileSync15(resolve14(AGENTS_PROMPTS_DIR, filename), "utf-8");
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match)
     throw new Error(`Agent prompt ${filename} is missing frontmatter`);
@@ -10023,9 +10014,9 @@ var init_api_topic_brief = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/wiki.ts
-import { basename as basename3, dirname as dirname12, join as join18 } from "path";
+import { basename as basename3, dirname as dirname12, join as join19 } from "path";
 function getSharedWikiDir(workspaceDir = resolveStorageWorkspaceDir()) {
-  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join18(workspaceDir, "wiki");
+  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join19(workspaceDir, "wiki");
 }
 var init_wiki = __esm(async () => {
   await init_storage_host();
@@ -10033,8 +10024,8 @@ var init_wiki = __esm(async () => {
 
 // ../../packages/core/src/agents/archiver.ts
 import { randomUUID as randomUUID9 } from "crypto";
-import { existsSync as existsSync16, readdirSync as readdirSync4, readFileSync as readFileSync15, statSync as statSync7 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync17, readdirSync as readdirSync5, readFileSync as readFileSync16, statSync as statSync7 } from "fs";
+import { join as join20 } from "path";
 function resolveMemoryLanguage() {
   const override = process.env.NEGOTIUM_MEMORY_LANG?.trim();
   return override && override.length > 0 ? override : resolveOutputLanguage();
@@ -10285,10 +10276,10 @@ function distillOneLine(summaryMd) {
   return "";
 }
 function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
-  const dir = join19(storage.getWikiDir(), "summaries");
+  const dir = join20(storage.getWikiDir(), "summaries");
   if (!storage.fileExists(dir))
     return null;
-  const predicted = join19(dir, wikiSummaryFilename(date, topicTitle, topicId));
+  const predicted = join20(dir, wikiSummaryFilename(date, topicTitle, topicId));
   if (storage.fileExists(predicted) && storage.fileModifiedAt(predicted) >= sinceMs)
     return predicted;
   let best = null;
@@ -10296,7 +10287,7 @@ function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
     if (!f.startsWith(`${date}-`) || !isTopicSummaryFile(f, topicId ?? "", topicTitle)) {
       continue;
     }
-    const p = join19(dir, f);
+    const p = join20(dir, f);
     try {
       const m = storage.fileModifiedAt(p);
       if (m >= sinceMs && (!best || m > best.mtime))
@@ -10378,9 +10369,9 @@ var init_archiver = __esm(async () => {
   defaultArchiverRuntime = createArchiverRuntime({
     storage: {
       getWikiDir: getSharedWikiDir,
-      fileExists: existsSync16,
-      listDirectory: readdirSync4,
-      readTextFile: (path) => readFileSync15(path, "utf-8"),
+      fileExists: existsSync17,
+      listDirectory: readdirSync5,
+      readTextFile: (path) => readFileSync16(path, "utf-8"),
       fileSize: (path) => statSync7(path).size,
       fileModifiedAt: (path) => statSync7(path).mtimeMs,
       getGeneralTopicId: (userId) => ensurePersonalGeneral(userId).id,
@@ -10494,13 +10485,13 @@ function formatTopicArchiveTranscriptRecord(row, topicTitle, index) {
 
 // ../../packages/core/src/storage/topic-archive.ts
 import { mkdirSync as mkdirSync12, writeFileSync as writeFileSync10 } from "fs";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 function archiveTopicMessages(topicId, topicTitle, options = {}) {
   const rows = options.afterRowid !== undefined ? getMessagesForTopicAfterRowid(topicId, options.afterRowid) : getAllMessagesForTopic(topicId);
   if (rows.length === 0)
     return null;
   const safeTopic = sanitizeTopicName(topicTitle, true);
-  const archiveDir = join20(getSharedWikiDir(), "archive");
+  const archiveDir = join21(getSharedWikiDir(), "archive");
   mkdirSync12(archiveDir, { recursive: true });
   const date = new Date().toISOString().slice(0, 10);
   const reasonSuffix = options.reason && options.reason !== "delete" ? `_${options.reason}` : "";
@@ -10513,7 +10504,7 @@ function archiveTopicMessages(topicId, topicTitle, options = {}) {
   let path;
   while (true) {
     filename = `${safeTopic}_${date}${reasonSuffix}${counter === 1 ? "" : `_${counter}`}.jsonl`;
-    path = join20(archiveDir, filename);
+    path = join21(archiveDir, filename);
     try {
       writeFileSync10(path, body, { flag: "wx" });
       break;
@@ -10558,7 +10549,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   const entries = readRawConversation(userId, topicTitle);
   if (entries.length === 0)
     return null;
-  const archiveDir = join20(getSharedWikiDir(), "archive");
+  const archiveDir = join21(getSharedWikiDir(), "archive");
   mkdirSync12(archiveDir, { recursive: true });
   const safeTopic = sanitizeTopicName(topicTitle, true);
   const date = new Date().toISOString().slice(0, 10);
@@ -10586,7 +10577,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   let counter = 1;
   while (true) {
     const suffix = counter === 1 ? "" : `_${counter}`;
-    const path = join20(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
+    const path = join21(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
     try {
       writeFileSync10(path, body, { flag: "wx" });
       logger.info({ topicId, topicTitle, archive: path, eventCount: entries.length }, "archiveConversationEvents: archived raw conversation events");
@@ -10909,7 +10900,7 @@ var init_idle_archiver = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/topic-cleanup.ts
-import { mkdirSync as mkdirSync13, renameSync as renameSync8, unlinkSync as unlinkSync12, writeFileSync as writeFileSync11 } from "fs";
+import { mkdirSync as mkdirSync13, renameSync as renameSync7, unlinkSync as unlinkSync12, writeFileSync as writeFileSync11 } from "fs";
 import { dirname as dirname13 } from "path";
 function collectSessionIdsByAgent(entries, extraSessions = []) {
   const out = new Map;
@@ -10980,7 +10971,7 @@ function createTopicLogMaintenance(host) {
         writeFileSync11(tempPath, retained.length > 0 ? `${retained.map((entry) => JSON.stringify(entry)).join(`
 `)}
 ` : "", { flag: "wx" });
-        renameSync8(tempPath, path);
+        renameSync7(tempPath, path);
       } catch (e) {
         try {
           unlinkSync12(tempPath);
@@ -11143,7 +11134,7 @@ var init_usage_alert = __esm(() => {
 import { randomUUID as randomUUID10 } from "crypto";
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, writeFileSync as writeFileSync12 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 function previousCompactedSummary(entries) {
   for (let index = entries.length - 2;index >= 0; index -= 1) {
     const request = entries[index]?.event;
@@ -11273,7 +11264,7 @@ function formatCompactElapsed(startedAt) {
 async function summarizeTopicContext(request) {
   const startedAt = Date.now();
   const sessionIds = [];
-  const compactCwd = mkdtempSync2(join21(tmpdir3(), "negotium-compact-"));
+  const compactCwd = mkdtempSync2(join22(tmpdir3(), "negotium-compact-"));
   const abortController = new AbortController;
   const relayAbort = () => abortController.abort(request.signal?.reason);
   if (request.signal?.aborted)
@@ -11300,7 +11291,7 @@ async function summarizeTopicContext(request) {
   let error = "";
   let toolViolation = false;
   let compactionLogCalls = 0;
-  const compactionLogPath = join21(compactCwd, "conversation.log");
+  const compactionLogPath = join22(compactCwd, "conversation.log");
   try {
     const compactionMcp = useCompactionLog ? {
       compact_log: {
@@ -11896,14 +11887,14 @@ var init_derive = __esm(async () => {
 });
 
 // ../../packages/core/src/query/session-inbox-path.ts
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function sessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join22(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
+  return join23(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
 }
 function scheduledSessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join22(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
+  return join23(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
 }
 var TOPIC_ID_FILE_PREFIX = "topic-id-", JSONL_SUFFIX = ".jsonl", SCHEDULE_SUFFIX = ".schedule";
 var init_session_inbox_path = __esm(() => {
@@ -11912,13 +11903,13 @@ var init_session_inbox_path = __esm(() => {
 
 // ../../packages/core/src/query/session-inbox-cleanup.ts
 import { unlinkSync as unlinkSync14 } from "fs";
-import { basename as basename4, join as join23 } from "path";
+import { basename as basename4, join as join24 } from "path";
 function cleanupSessionInboxFiles(userId, topicId, legacyTopicTitle) {
   const live = sessionInboxPath(userId, topicId);
   const scheduled = scheduledSessionInboxPath(userId, topicId);
   const candidates = new Set([live, `${live}.processing`, scheduled, `${scheduled}.processing`]);
   if (legacyTopicTitle && legacyTopicTitle !== "." && legacyTopicTitle !== ".." && basename4(legacyTopicTitle) === legacyTopicTitle) {
-    const legacyBase = join23(SESSION_INBOX_DIR, userId, legacyTopicTitle);
+    const legacyBase = join24(SESSION_INBOX_DIR, userId, legacyTopicTitle);
     for (const suffix of [".jsonl", ".jsonl.processing", ".schedule", ".schedule.processing"]) {
       candidates.add(`${legacyBase}${suffix}`);
     }
@@ -11943,17 +11934,17 @@ var init_session_inbox_cleanup = __esm(() => {
 });
 
 // ../../packages/core/src/query/state.ts
-import { mkdirSync as mkdirSync15, renameSync as renameSync9, unlinkSync as unlinkSync15, writeFileSync as writeFileSync13 } from "fs";
-import { basename as basename5, join as join24 } from "path";
+import { mkdirSync as mkdirSync15, renameSync as renameSync8, unlinkSync as unlinkSync15, writeFileSync as writeFileSync13 } from "fs";
+import { basename as basename5, join as join25 } from "path";
 function createQueryStateStore(options) {
   const sanitize = options.sanitizeTopicId ?? sanitizeId;
-  const queryStateDirPath = (userId) => join24(options.usersLogDir, String(userId), "active-queries");
-  const queryStateFile = (userId, topicId) => join24(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
+  const queryStateDirPath = (userId) => join25(options.usersLogDir, String(userId), "active-queries");
+  const queryStateFile = (userId, topicId) => join25(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
   const legacyQueryStateFile = (userId, topicName) => {
     if (!topicName || topicName === "." || topicName === ".." || basename5(topicName) !== topicName) {
       return null;
     }
-    return join24(queryStateDirPath(userId), `${topicName}.json`);
+    return join25(queryStateDirPath(userId), `${topicName}.json`);
   };
   return {
     write(userId, topicId, topicName, task) {
@@ -11965,7 +11956,7 @@ function createQueryStateStore(options) {
       const target = queryStateFile(userId, topicId);
       const tmp = `${target}.${process.pid}.${Date.now()}.tmp`;
       writeFileSync13(tmp, JSON.stringify(state));
-      renameSync9(tmp, target);
+      renameSync8(tmp, target);
     },
     clear(userId, topicId, legacyTopicName) {
       const paths = [
@@ -12107,35 +12098,35 @@ import {
   closeSync as closeSync3,
   mkdirSync as mkdirSync16,
   openSync as openSync3,
-  readdirSync as readdirSync5,
-  readFileSync as readFileSync16,
+  readdirSync as readdirSync6,
+  readFileSync as readFileSync17,
   statSync as statSync8,
   unlinkSync as unlinkSync16,
   writeFileSync as writeFileSync14
 } from "fs";
-import { dirname as dirname14, join as join25 } from "path";
+import { dirname as dirname14, join as join26 } from "path";
 function pendingAskDir(userId) {
   const rawUserId = String(userId);
   const safeUserId = /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..") ? rawUserId : `sha256-${createHash4("sha256").update(rawUserId).digest("hex")}`;
-  return join25(resolveStorageSessionAsksDir(), safeUserId);
+  return join26(resolveStorageSessionAsksDir(), safeUserId);
 }
 function encodeAskKey(key) {
   return JSON.stringify([key.from, key.to]);
 }
 function pendingAskPath(key) {
   const digest = createHash4("sha256").update(encodeAskKey(key)).digest("hex");
-  return join25(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
+  return join26(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
 }
 function v2PendingAskPath(key) {
   const encoded = Buffer.from(encodeAskKey(key), "utf8").toString("base64url");
-  return join25(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
+  return join26(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
 }
 function legacyPendingAskPath(key) {
   if (key.from.includes("/") || key.from.includes("\\") || key.to.includes("/") || key.to.includes("\\") || key.from.includes("\x00") || key.to.includes("\x00")) {
     return null;
   }
   const dir = pendingAskDir(key.userId);
-  const candidate = join25(dir, `${key.from}___${key.to}.pending`);
+  const candidate = join26(dir, `${key.from}___${key.to}.pending`);
   return dirname14(candidate) === dir ? candidate : null;
 }
 function parsePendingAskFilename(fileName) {
@@ -12157,7 +12148,7 @@ function parsePendingAskFilename(fileName) {
 }
 function readPendingAskFile(path, fallback) {
   try {
-    const raw = readFileSync16(path, "utf8").trim();
+    const raw = readFileSync17(path, "utf8").trim();
     if (!raw)
       return null;
     if (!raw.startsWith("{")) {
@@ -12366,7 +12357,7 @@ function listPendingAsksForCaller(args) {
   const dir = pendingAskDir(args.userId);
   let files;
   try {
-    files = readdirSync5(dir);
+    files = readdirSync6(dir);
   } catch {
     return [];
   }
@@ -12376,7 +12367,7 @@ function listPendingAsksForCaller(args) {
     const parsed = isV3 ? { from: args.from, to: "" } : parsePendingAskFilename(fileName);
     if (!parsed)
       continue;
-    const path = join25(dir, fileName);
+    const path = join26(dir, fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
       from: parsed.from,
@@ -12412,13 +12403,13 @@ function deletePendingAsksForTopic(args) {
   const dir = pendingAskDir(args.userId);
   let files;
   try {
-    files = readdirSync5(dir);
+    files = readdirSync6(dir);
   } catch {
     return 0;
   }
   let deleted = 0;
   for (const fileName of files) {
-    const path = join25(dir, fileName);
+    const path = join26(dir, fileName);
     const parsed = parsePendingAskFilename(fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
@@ -13087,7 +13078,7 @@ var init_lifecycle = __esm(async () => {
 // ../../packages/core/src/runtime/attachments.ts
 import { randomUUID as randomUUID13 } from "crypto";
 import { copyFileSync as copyFileSync2, mkdirSync as mkdirSync17, writeFileSync as writeFileSync15 } from "fs";
-import { basename as basename6, join as join26 } from "path";
+import { basename as basename6, join as join27 } from "path";
 function workspaceCwdFor(topicId) {
   return resolveTopicWorkspaceDir(topicId);
 }
@@ -13100,7 +13091,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
   if (!attachmentIds?.length)
     return [];
   const out = [];
-  const destDir = join26(workspaceCwdFor(topicId), "attachments", queryId);
+  const destDir = join27(workspaceCwdFor(topicId), "attachments", queryId);
   for (const rawId of attachmentIds) {
     if (typeof rawId !== "string")
       continue;
@@ -13117,7 +13108,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
       mkdirSync17(destDir, { recursive: true });
       const index = String(out.length + 1).padStart(2, "0");
       const safeName = safeAttachmentFilename(attachment.filename, fileId);
-      const destPath = join26(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
+      const destPath = join27(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
       copyFileSync2(sourcePath, destPath);
       out.push({
         id: attachment.id,
@@ -13147,10 +13138,10 @@ function promptWithAttachments(prompt, attachments) {
   return composeAttachmentPrompt(prompt, attachments.map(({ filename, path }) => attachmentPromptLine(filename, path)));
 }
 function ingestAttachment(args) {
-  const destDir = join26(workspaceCwdFor(args.topicId), "uploads");
+  const destDir = join27(UPLOADS_DIR, args.topicId);
   mkdirSync17(destDir, { recursive: true });
   const safeName = safeAttachmentFilename(args.filename, "upload");
-  const destPath = join26(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
+  const destPath = join27(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
   if (args.sourcePath !== undefined) {
     copyFileSync2(args.sourcePath, destPath);
   } else if (args.bytes !== undefined) {
@@ -14136,7 +14127,7 @@ var init_visual_html = __esm(() => {
 });
 
 // ../../packages/core/src/runtime/visuals.ts
-import { realpathSync as realpathSync4 } from "fs";
+import { realpathSync as realpathSync5 } from "fs";
 import { isAbsolute as isAbsolute4, resolve as resolve15 } from "path";
 function activeVisualHtmlForPrompt(html) {
   if (html.length <= ACTIVE_VISUAL_PROMPT_MAX_CHARS) {
@@ -14191,8 +14182,8 @@ function isPathInside(baseDir, filePath) {
   const base = resolve15(baseDir);
   const normalized = resolve15(filePath);
   try {
-    const realBase = realpathSync4(base);
-    const real = realpathSync4(normalized);
+    const realBase = realpathSync5(base);
+    const real = realpathSync5(normalized);
     return real === realBase || real.startsWith(`${realBase}/`);
   } catch {
     return false;
@@ -14257,7 +14248,7 @@ function resolveVisualMediaInput(topicId, input) {
   }
   let realCandidate;
   try {
-    realCandidate = realpathSync4(candidate);
+    realCandidate = realpathSync5(candidate);
   } catch {
     return { error: `file not found: ${rawPath}` };
   }
@@ -14291,7 +14282,7 @@ var init_visuals = __esm(async () => {
 // ../../packages/core/src/storage/token-stats.ts
 import { createHash as createHash6 } from "crypto";
 import { mkdirSync as mkdirSync18 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 function emptyBucket() {
   return {
     inputTokens: 0,
@@ -14309,7 +14300,7 @@ function queriesPath(userId) {
   const fileId = tokenStatsFileId(userId);
   const logDir = resolveStorageLogDir();
   mkdirSync18(logDir, { recursive: true });
-  return join27(logDir, `token-queries-${fileId}.jsonl`);
+  return join28(logDir, `token-queries-${fileId}.jsonl`);
 }
 function loadRecords(userId) {
   try {
@@ -14380,7 +14371,7 @@ var init_token_stats = __esm(async () => {
 
 // ../../packages/core/src/runtime/turn-event-stream.ts
 import { randomUUID as randomUUID15 } from "crypto";
-import { realpathSync as realpathSync5, statSync as statSync9 } from "fs";
+import { realpathSync as realpathSync6, statSync as statSync9 } from "fs";
 import { isAbsolute as isAbsolute5, resolve as resolve16 } from "path";
 function sessionEventMatchesCurrentExecution(topicId, queryId, agent, model) {
   if (getRoomQuery(topicId)?.queryId !== queryId)
@@ -14695,7 +14686,7 @@ async function runTurnEventStream(topicId, topicTitle, queryId, events, control,
             }
             let safePath;
             try {
-              safePath = realpathSync5(path);
+              safePath = realpathSync6(path);
               if (!statSync9(safePath).isFile()) {
                 logger.warn({ topicId, path }, "peer output path is not a regular file");
                 break;
@@ -14962,10 +14953,10 @@ var init_turn_session = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/app-settings.ts
-import { existsSync as existsSync17, mkdirSync as mkdirSync19, readFileSync as readFileSync17, writeFileSync as writeFileSync16 } from "fs";
-import { dirname as dirname15, join as join28 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync19, readFileSync as readFileSync18, writeFileSync as writeFileSync16 } from "fs";
+import { dirname as dirname15, join as join29 } from "path";
 function settingsFile() {
-  return join28(resolveStorageDataDir(), "otium-settings.json");
+  return join29(resolveStorageDataDir(), "otium-settings.json");
 }
 function ensureSettingsLoaded() {
   const path = settingsFile();
@@ -14974,8 +14965,8 @@ function ensureSettingsLoaded() {
   loadedSettingsFile = path;
   aiName = DEFAULT_AI_NAME;
   try {
-    if (existsSync17(path)) {
-      const data = JSON.parse(readFileSync17(path, "utf8"));
+    if (existsSync18(path)) {
+      const data = JSON.parse(readFileSync18(path, "utf8"));
       if (typeof data.aiName === "string" && data.aiName.trim()) {
         aiName = data.aiName.trim();
       }
@@ -15064,8 +15055,8 @@ __export(exports_turn_runner, {
   AGENT_DISPLAY_NAME: () => AGENT_DISPLAY_NAME
 });
 import { randomUUID as randomUUID16 } from "crypto";
-import { existsSync as existsSync18, mkdirSync as mkdirSync20, readdirSync as readdirSync6, statSync as statSync10 } from "fs";
-import { join as join29 } from "path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync20, readdirSync as readdirSync7, statSync as statSync10 } from "fs";
+import { join as join30 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
   if (isManager)
     return configuredMcp;
@@ -15108,18 +15099,18 @@ function appendAskReplyMessage(topicId, text2, agentType) {
   return message;
 }
 function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, matchesTitle, preferExact = true) {
-  const preferred = join29(directory, preferredFilename);
-  if (preferExact && existsSync18(preferred))
+  const preferred = join30(directory, preferredFilename);
+  if (preferExact && existsSync19(preferred))
     return preferred;
   let newestLegacyId = null;
   let newestTitle = null;
   try {
-    for (const filename of readdirSync6(directory)) {
+    for (const filename of readdirSync7(directory)) {
       const titleMatch = matchesTitle(filename);
       const legacyIdMatch = !titleMatch && matchesLegacyId(filename);
       if (!titleMatch && !legacyIdMatch)
         continue;
-      const path = join29(directory, filename);
+      const path = join30(directory, filename);
       const mtimeMs = statSync10(path).mtimeMs;
       if (titleMatch) {
         if (!newestTitle || mtimeMs > newestTitle.mtimeMs) {
@@ -15133,10 +15124,10 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
   return newestTitle?.path ?? newestLegacyId?.path ?? preferred;
 }
 function resolveWikiMemoryMirror(wikiDir, topicId, topicTitle) {
-  const briefFile = resolveWikiMirrorPath(join29(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
-  const hasBriefFile = existsSync18(briefFile) && statSync10(briefFile).isFile();
-  const latestSummaryCandidate = resolveWikiMirrorPath(join29(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
-  const latestSummaryFile = existsSync18(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
+  const briefFile = resolveWikiMirrorPath(join30(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
+  const hasBriefFile = existsSync19(briefFile) && statSync10(briefFile).isFile();
+  const latestSummaryCandidate = resolveWikiMirrorPath(join30(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
+  const latestSummaryFile = existsSync19(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
   return { briefFile, hasBriefFile, latestSummaryFile };
 }
 async function streamAgentEvents(topicId, topicTitle, queryId, events, control, agentType, model, effort, userId, retryableSessionExpired = true, onSessionId, execution) {
@@ -16288,9 +16279,9 @@ __export(exports_auth_check, {
   checkAgentAuth: () => checkAgentAuth
 });
 import { execFileSync as execFileSync7 } from "child_process";
-import { existsSync as existsSync19 } from "fs";
+import { existsSync as existsSync20 } from "fs";
 import { homedir as homedir9, platform } from "os";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 function hasMaestroCredential(host, key, userId) {
   if (userId && host.getVaultValue(userId, key)?.trim())
     return true;
@@ -16319,7 +16310,7 @@ function checkAgentAuth(agent, host = defaultAgentAuthHost, userId) {
           error: "claude is not logged in (no macOS keychain entry 'Claude Code-credentials'). Run `claude` and complete login first"
         };
       }
-      const path = join30(host.homeDirectory(), ".claude", ".credentials.json");
+      const path = join31(host.homeDirectory(), ".claude", ".credentials.json");
       if (host.exists(path))
         return { ok: true };
       return {
@@ -16361,7 +16352,7 @@ var init_auth_check = __esm(async () => {
   await init_vault();
   defaultAgentAuthHost = {
     codexAuthFilePath,
-    exists: existsSync19,
+    exists: existsSync20,
     environment: process.env,
     homeDirectory: homedir9,
     operatingSystem: platform,
@@ -18433,15 +18424,401 @@ await __promiseAll([
   init_codex_registry(),
   init_maestro_registry()
 ]);
+import { spawn as spawn2 } from "child_process";
+import { existsSync as existsSync9, readdirSync as readdirSync3 } from "fs";
+import { join as join11 } from "path";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
+function signalProcessTree(child, signal) {
+  try {
+    if (child.pid && process.platform !== "win32")
+      process.kill(-child.pid, signal);
+    else
+      child.kill(signal);
+  } catch {
+    try {
+      child.kill(signal);
+    } catch {}
+  }
+}
+function spawnCapture(cmd, args, timeoutMs, signal, env) {
+  return new Promise((resolve7, reject) => {
+    const child = spawn2(cmd, args, {
+      env: env ?? process.env,
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: process.platform !== "win32"
+    });
+    let settled = false;
+    let stdout = "";
+    let stderr = "";
+    const forceKill = () => signalProcessTree(child, "SIGKILL");
+    let killTimer;
+    const stop = (reason) => {
+      if (settled)
+        return;
+      settled = true;
+      signalProcessTree(child, "SIGTERM");
+      killTimer = setTimeout(() => {
+        forceKill();
+        killTimer = undefined;
+      }, 1000);
+      killTimer.unref?.();
+      reject(new Error(reason));
+    };
+    const timeout = setTimeout(() => stop("timeout"), timeoutMs);
+    const onAbort = () => stop("aborted");
+    signal.addEventListener("abort", onAbort, { once: true });
+    const cleanup = () => {
+      clearTimeout(timeout);
+      signal.removeEventListener("abort", onAbort);
+    };
+    child.stdout.on("data", (data) => {
+      stdout += data.toString();
+    });
+    child.stderr.on("data", (data) => {
+      stderr += data.toString();
+    });
+    child.on("error", (err) => {
+      if (settled)
+        return;
+      settled = true;
+      cleanup();
+      if (killTimer)
+        clearTimeout(killTimer);
+      reject(err);
+    });
+    child.on("close", (code, exitSignal) => {
+      cleanup();
+      if (settled) {
+        if (killTimer) {
+          clearTimeout(killTimer);
+          killTimer = undefined;
+        }
+        return;
+      }
+      settled = true;
+      if (killTimer)
+        clearTimeout(killTimer);
+      if (code === 0)
+        resolve7({ stdout, stderr });
+      else
+        reject(new Error(stderr.trim() || `${cmd} exited with ${code ?? exitSignal}`));
+    });
+  });
+}
+function resultOk(agent, model, latency, detail) {
+  return { agent, model, ok: true, latency, detail };
+}
+function resultFail(agent, model, latency, error) {
+  let category = "unknown";
+  const normalized = error.toLowerCase();
+  if (normalized.includes("auth") || normalized.includes("key") || normalized.includes("credential") || normalized.includes("unauthorized")) {
+    category = "auth_error";
+  } else if (normalized.includes("rate") || normalized.includes("limit") || normalized.includes("busy") || normalized.includes("overloaded")) {
+    category = "rate_limit";
+  } else if (normalized.includes("network") || normalized.includes("refused") || normalized.includes("dns") || normalized.includes("timeout")) {
+    category = "network_error";
+  }
+  return { agent, model, ok: false, latency, error, category };
+}
+async function checkClaude(model, timeoutMs, signal) {
+  const start = performance.now();
+  try {
+    const args = ["-p", "say OK", "--model", model, "--max-turns", "1", "--output-format", "text"];
+    const { stdout, stderr } = await spawnCapture("claude", args, timeoutMs, signal);
+    const elapsed = Math.round(performance.now() - start);
+    const text = (stdout + stderr).trim().slice(0, 200);
+    if (!text)
+      return resultFail("claude", model, elapsed, "empty response");
+    return resultOk("claude", model, elapsed, text);
+  } catch (err) {
+    return resultFail("claude", model, Math.round(performance.now() - start), errMsg(err));
+  }
+}
+async function checkCodex(model, timeoutMs, signal) {
+  const start = performance.now();
+  try {
+    const args = [
+      "exec",
+      "--model",
+      model,
+      "--skip-git-repo-check",
+      "--sandbox",
+      "danger-full-access",
+      "say OK"
+    ];
+    const { stdout, stderr } = await spawnCapture("codex", args, timeoutMs, signal, {
+      ...process.env,
+      CODEX_NO_COLOR: "1"
+    });
+    const elapsed = Math.round(performance.now() - start);
+    const combined = (stdout + stderr).trim();
+    const match = combined.match(/\ncodex\s*\n(.+?)(?:\n(?:tokens|session|user|$))/);
+    return resultOk("codex", model, elapsed, match ? match[1].trim().slice(0, 200) : "OK");
+  } catch (err) {
+    return resultFail("codex", model, Math.round(performance.now() - start), errMsg(err));
+  }
+}
+async function checkMaestro(model, timeoutMs, signal) {
+  const start = performance.now();
+  let iterator;
+  try {
+    const { maestroProvider } = await import("maestro-agent-sdk");
+    const generator = maestroProvider({
+      model,
+      prompt: "say OK",
+      cwd: process.cwd(),
+      maxTurns: 1
+    });
+    const deadline = Date.now() + timeoutMs;
+    const activeIterator = generator[Symbol.asyncIterator]();
+    iterator = activeIterator;
+    let text = "";
+    while (true) {
+      const remaining = deadline - Date.now();
+      if (remaining <= 0)
+        throw new Error("timeout");
+      const eventResult = await new Promise((resolve7, reject) => {
+        const timeout = setTimeout(() => reject(new Error("timeout")), remaining);
+        const onAbort = () => reject(new Error("aborted"));
+        signal.addEventListener("abort", onAbort, { once: true });
+        activeIterator.next().then(resolve7, reject).finally(() => {
+          clearTimeout(timeout);
+          signal.removeEventListener("abort", onAbort);
+        });
+      });
+      if (eventResult.done)
+        break;
+      const event = eventResult.value;
+      if (event.type === "text" && event.content)
+        text = event.content.slice(0, 200);
+      if (event.type === "error") {
+        return resultFail("maestro", model, Math.round(performance.now() - start), event.error || "unknown error");
+      }
+    }
+    return resultOk("maestro", model, Math.round(performance.now() - start), text || "(empty response)");
+  } catch (err) {
+    return resultFail("maestro", model, Math.round(performance.now() - start), errMsg(err));
+  } finally {
+    if (iterator?.return) {
+      try {
+        await iterator.return();
+      } catch {}
+    }
+  }
+}
+function getDefaultModel(registry) {
+  return resolveDefaultModel(registry.kind, registry.defaultModel);
+}
+var AGENTS = [
+  { kind: "claude", registry: claudeRegistry, checker: checkClaude },
+  { kind: "codex", registry: codexRegistry, checker: checkCodex },
+  { kind: "maestro", registry: maestroRegistry, checker: checkMaestro }
+];
+var MAX_CONCURRENT_CHECKS = 2;
+var activeChecks = 0;
+var checkWaiters = [];
 var activeCheckAllUsers = new Set;
+async function withCheckSlot(operation) {
+  if (activeChecks >= MAX_CONCURRENT_CHECKS) {
+    await new Promise((resolve7) => checkWaiters.push(resolve7));
+  }
+  activeChecks += 1;
+  try {
+    return await operation();
+  } finally {
+    activeChecks -= 1;
+    checkWaiters.shift()?.();
+  }
+}
+function createAgentHealthMcpServer(context) {
+  const server = new McpServer({ name: "agent-health", version: "1.0.0" });
+  const abortController = new AbortController;
+  const originalClose = server.close.bind(server);
+  server.close = async () => {
+    abortController.abort();
+    await originalClose();
+  };
+  server.tool("check_agent", "\uC2E4\uC81C API \uD638\uCD9C\uB85C \uD2B9\uC815 agent+model \uC870\uD569\uC774 \uC815\uC0C1 \uB3D9\uC791\uD558\uB294\uC9C0 \uCCB4\uD06C\uD569\uB2C8\uB2E4.", {
+    agent: z.enum(["claude", "codex", "maestro"]).describe("\uCCB4\uD06C\uD560 agent"),
+    model: z.string().optional().describe("\uCCB4\uD06C\uD560 \uBAA8\uB378 (\uC5C6\uC73C\uBA74 agent\uBCC4 default \uC0AC\uC6A9)"),
+    timeoutMs: z.number().default(30000).describe("\uD0C0\uC784\uC544\uC6C3 (ms), \uAE30\uBCF8 30\uCD08")
+  }, async ({ agent, model, timeoutMs }) => {
+    const entry = AGENTS.find((candidate) => candidate.kind === agent);
+    if (!entry)
+      return mcpOk(`Unknown agent: ${agent}`);
+    const resolvedModel = model || getDefaultModel(entry.registry);
+    const result = await withCheckSlot(() => entry.checker(resolvedModel, timeoutMs, abortController.signal));
+    if (result.ok) {
+      return mcpOk(`OK  ${result.agent} / ${result.model}
+   latency: ${result.latency}ms
+   detail: ${result.detail}`);
+    }
+    return mcpOk(`FAIL  ${result.agent} / ${result.model}  [${result.category}]
+   latency: ${result.latency}ms
+   error: ${result.error}`);
+  });
+  server.tool("check_all", "\uBAA8\uB4E0 agent (claude, codex, maestro)\uB97C \uAE30\uBCF8 \uBAA8\uB378\uB85C \uB3D9\uC2DC\uC5D0 \uCCB4\uD06C\uD569\uB2C8\uB2E4.", { timeoutMs: z.number().default(30000).describe("agent\uBCC4 \uD0C0\uC784\uC544\uC6C3 (ms), \uAE30\uBCF8 30\uCD08") }, async ({ timeoutMs }) => {
+    const userKey = context.userId ?? "unscoped";
+    if (activeCheckAllUsers.has(userKey)) {
+      return mcpOk("FAIL check_all is already running for this user");
+    }
+    activeCheckAllUsers.add(userKey);
+    try {
+      const results = await Promise.all(AGENTS.map(async (entry) => withCheckSlot(() => entry.checker(getDefaultModel(entry.registry), timeoutMs, abortController.signal))));
+      const lines = results.map((result) => result.ok ? `OK   ${result.agent.padEnd(8)} / ${result.model.padEnd(14)} ${result.latency}ms  ${result.detail}` : `FAIL ${result.agent.padEnd(8)} / ${result.model.padEnd(14)} ${result.latency}ms  [${result.category}] ${result.error}`);
+      return mcpOk(`Agent/Model Health Check
+${lines.join(`
+`)}
+
+${results.every((result) => result.ok) ? "All agents healthy" : "Some agents failed"}`);
+    } finally {
+      activeCheckAllUsers.delete(userKey);
+    }
+  });
+  server.tool("list_active_queries", "\uD604\uC7AC \uC0AC\uC6A9\uC790 \uBC94\uC704\uC5D0\uC11C \uC2E4\uD589 \uC911\uC778 \uD1A0\uD53D \uCFFC\uB9AC \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.", {}, async () => {
+    if (!context.userId)
+      return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC870\uD68C \uBD88\uAC00 (user context \uC5C6\uC74C)");
+    const stateDir = join11(USERS_LOG_DIR, context.userId, "active-queries");
+    if (!existsSync9(stateDir))
+      return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC5C6\uC74C");
+    let files;
+    try {
+      files = readdirSync3(stateDir);
+    } catch {
+      return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC5C6\uC74C");
+    }
+    const now = Date.now();
+    const entries = files.flatMap((file) => {
+      if (!file.endsWith(".json"))
+        return [];
+      const state = readJsonFile(join11(stateDir, file));
+      if (!state)
+        return [];
+      const sinceMs = new Date(state.since).getTime();
+      if (now - sinceMs > ACTIVE_QUERY_STALE_MS)
+        return [];
+      return [
+        {
+          topicName: state.topicName ?? file.slice(0, -5),
+          elapsedSec: Math.round((now - sinceMs) / 1000),
+          task: state.task
+        }
+      ];
+    });
+    if (entries.length === 0)
+      return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC5C6\uC74C");
+    const lines = entries.map((entry) => `\u2022 ${entry.topicName} | ${entry.elapsedSec}s \uACBD\uACFC${entry.task ? `  "${entry.task}"` : ""}`);
+    return mcpOk(`\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC (${entries.length}\uAC1C)
+${lines.join(`
+`)}`);
+  });
+  return server;
+}
 // ../../packages/core/src/mcp/factories/compaction-log.ts
 init_mcp_helpers();
+import { readFileSync as readFileSync8, realpathSync as realpathSync2 } from "fs";
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z as z2 } from "zod";
+var DEFAULT_MAX_CALLS = 12;
 var DEFAULT_MAX_TOTAL_BYTES = 512 * 1024;
 var DEFAULT_MAX_CHUNK_BYTES = 64 * 1024;
+var DEFAULT_LINE_LIMIT = 300;
+var MAX_LINE_LIMIT = 500;
+function positiveInt(value2, fallback) {
+  return Number.isFinite(value2) && value2 && value2 > 0 ? Math.floor(value2) : fallback;
+}
+function fitUtf8(text, maxBytes) {
+  if (Buffer.byteLength(text, "utf8") <= maxBytes)
+    return text;
+  const marker = `
+[... oversized line clipped ...]
+`;
+  const markerBytes = Buffer.byteLength(marker, "utf8");
+  const bytes = Buffer.from(text, "utf8");
+  if (maxBytes <= markerBytes) {
+    return bytes.subarray(0, maxBytes).toString("utf8").replace(/\uFFFD+$/u, "");
+  }
+  const available = Math.max(0, maxBytes - markerBytes);
+  const headBudget = Math.ceil(available * 0.6);
+  const tailBudget = available - headBudget;
+  const head = bytes.subarray(0, headBudget).toString("utf8").replace(/\uFFFD+$/u, "");
+  const tail = bytes.subarray(Math.max(0, bytes.length - tailBudget)).toString("utf8").replace(/^\uFFFD+/u, "");
+  return `${head}${marker}${tail}`;
+}
+function createCompactionLogMcpServer(context) {
+  if (!context.filePath)
+    throw new Error("compaction-log MCP requires filePath");
+  const filePath = realpathSync2(context.filePath);
+  const lines = readFileSync8(filePath, "utf8").split(`
+`);
+  const maxCalls = positiveInt(context.maxCalls, DEFAULT_MAX_CALLS);
+  const maxTotalBytes = positiveInt(context.maxTotalBytes, DEFAULT_MAX_TOTAL_BYTES);
+  const maxChunkBytes = positiveInt(context.maxChunkBytes, DEFAULT_MAX_CHUNK_BYTES);
+  let calls = 0;
+  let totalBytes = 0;
+  const server = new McpServer2({ name: "compaction-log", version: "1.0.0" });
+  server.tool("read_compaction_log", [
+    `Read the immutable conversation snapshot in bounded chunks. It contains ${lines.length} lines.`,
+    "Start at offset 1, then inspect the final chunk using total_lines from the response.",
+    "Read intermediate chunks only when needed. Return a summary instead of calling after the budget is exhausted."
+  ].join(" "), {
+    offset: z2.number().optional().describe("One-based line number. Defaults to 1."),
+    limit: z2.number().optional().describe(`Number of lines. Defaults to ${DEFAULT_LINE_LIMIT}, max ${MAX_LINE_LIMIT}.`)
+  }, async ({ offset: rawOffset, limit: rawLimit }) => {
+    calls += 1;
+    if (calls > maxCalls || totalBytes >= maxTotalBytes) {
+      return mcpError(JSON.stringify({
+        error: "compaction log read budget exhausted; produce the summary now",
+        calls,
+        max_calls: maxCalls,
+        total_lines: lines.length
+      }));
+    }
+    const offset = positiveInt(rawOffset, 1);
+    const limit = Math.min(positiveInt(rawLimit, DEFAULT_LINE_LIMIT), MAX_LINE_LIMIT);
+    const start = Math.max(0, offset - 1);
+    if (start >= lines.length) {
+      return mcpOk(JSON.stringify({
+        content: "(end of compaction log)",
+        offset,
+        returned_lines: 0,
+        total_lines: lines.length,
+        calls
+      }));
+    }
+    const selected = [];
+    let returnedBytes = 0;
+    let index = start;
+    const callBudget = Math.min(maxChunkBytes, maxTotalBytes - totalBytes);
+    while (index < lines.length && selected.length < limit) {
+      const line = fitUtf8(lines[index] ?? "", Math.max(1, callBudget));
+      const separatorBytes = selected.length > 0 ? 1 : 0;
+      const lineBytes = Buffer.byteLength(line, "utf8");
+      if (selected.length > 0 && returnedBytes + separatorBytes + lineBytes > callBudget)
+        break;
+      selected.push(line);
+      returnedBytes += separatorBytes + lineBytes;
+      index += 1;
+      if (returnedBytes >= callBudget)
+        break;
+    }
+    totalBytes += returnedBytes;
+    return mcpOk(JSON.stringify({
+      content: selected.join(`
+`),
+      offset,
+      returned_lines: selected.length,
+      returned_bytes: returnedBytes,
+      total_lines: lines.length,
+      total_read_bytes: totalBytes,
+      calls,
+      ...index < lines.length ? { next_offset: index + 1 } : {},
+      ...calls >= maxCalls || totalBytes >= maxTotalBytes ? { note: "Read budget exhausted; produce the summary now." } : {}
+    }));
+  });
+  return server;
+}
 // ../../packages/core/src/mcp/factories/session-comm.ts
 import { McpServer as McpServer3 } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z as z5 } from "zod";
@@ -18940,7 +19317,9 @@ export {
   createTaskMcpServer,
   createSystemHealthMcpServer,
   createSessionTargetCatalog,
-  createSessionCommMcpServer
+  createSessionCommMcpServer,
+  createCompactionLogMcpServer,
+  createAgentHealthMcpServer
 };
 
-//# debugId=0271389E4BFF755564756E2164756E21
+//# debugId=BC238DE297D39F6964756E2164756E21