negotium 0.1.8 → 0.1.9

package/dist/{chunk-fgrme9tr.js → chunk-6hknphtc.js}

@@ -8,2412 +8,65 @@ import {
   getMessagesForTopicAfterRowid,
   listApiMessagesByKind,
   updateApiMessageSubagentCard
-} from "./chunk-0ay6cjdy.js";
+} from "./chunk-kbm35t7w.js";
 import {
   getTopic,
   getTopicMemoryOrigin,
   listTopics
-} from "./chunk-xfq68rch.js";
+} from "./chunk-f97qybwk.js";
 import {
-  TOPIC_MAINTENANCE_STALE_MS,
-  TURN_LEASE_STALE_MS,
-  getRoomQuery,
-  getRuntimeTopicEpoch
-} from "./chunk-t9zcg8f1.js";
-import {
-  Database,
-  db
-} from "./chunk-7xqj7aex.js";
-import {
-  claudeRegistry,
-  encodeClaudeCwd,
-  getRegistry,
-  migrateCodexRolloutNativeMultiAgentMetadata,
-  readLatestCodexContextUsage
-} from "./chunk-5ahkew9c.js";
-import {
-  appendConversationEvent,
-  readConversation,
-  sanitizeFileName,
-  sanitizeTopicName
-} from "./chunk-6cpn7ht2.js";
-import {
-  AGENTS_PROMPTS_DIR,
-  AGENT_HEALTH_SERVER,
-  BACKGROUND_BASH_SERVER,
-  BG_BASH_BASE_PORT,
-  BG_BASH_MAX_PORT,
-  CANONICAL_MCP_PROXY_SERVER,
-  CLAUDE_EXECUTABLE,
-  DATA_DIR,
-  FALLBACK_AGENT,
-  FILE_TAG_REGEX,
-  NEGOTIUM_PORT,
-  PADDLEOCR_SERVER,
-  PROJECT_ROOT,
-  RESOURCES_DIR,
-  RUNTIME_MCP_SECRET,
-  SESSION_COMM_SERVER,
-  SHARED_WIKI_DIR,
-  SYSTEM_HEALTH_SERVER,
-  TASK_SERVER,
-  TOKEN_STATS_SERVER,
-  TSCONFIG_PATH,
-  TSX_BIN,
-  USERS_LOG_DIR,
-  VAULT_MASTER_KEY,
-  VAULT_SERVER,
-  WIKI_SERVER,
-  WORKSPACE_DIR,
-  codexAuthFilePath,
-  isAgentKind,
-  logger,
-  resolveTopicWorkspaceDir
-} from "./chunk-k9z47mab.js";
-import {
-  __require,
-  __toESM
-} from "./chunk-hwy3n31w.js";
-
-// ../../packages/core/src/agents/codex-tree-kill.ts
-import { execFileSync } from "child_process";
-var SIGKILL_DELAY_MS = 5000;
-var CODEX_PROC_NAME_MATCH = /codex/i;
-var TREE_DEPTH_CAP = 16;
-function getDirectChildren(parentPid) {
-  try {
-    const out = execFileSync("pgrep", ["-P", String(parentPid)], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-    if (!out)
-      return [];
-    return out.split(`
-`).map((s) => Number(s)).filter((n) => Number.isFinite(n) && n > 0);
-  } catch {
-    return [];
-  }
-}
-function getProcName(pid) {
-  try {
-    return execFileSync("ps", ["-p", String(pid), "-o", "comm="], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-  } catch {
-    return "";
-  }
-}
-function getProcLstart(pid) {
-  try {
-    return execFileSync("ps", ["-p", String(pid), "-o", "lstart="], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-  } catch {
-    return "";
-  }
-}
-function collectTree(rootPid, out = new Set, depth = 0) {
-  if (out.has(rootPid))
-    return out;
-  out.add(rootPid);
-  if (depth >= TREE_DEPTH_CAP) {
-    logger.warn({ rootPid, depth, cap: TREE_DEPTH_CAP }, "codex-tree-kill: tree depth cap reached, descendants beyond this point not collected");
-    return out;
-  }
-  for (const child of getDirectChildren(rootPid)) {
-    collectTree(child, out, depth + 1);
-  }
-  return out;
-}
-function snapshotCodexChildren() {
-  const out = new Map;
-  for (const pid of getDirectChildren(process.pid)) {
-    const name = getProcName(pid);
-    if (!name || !CODEX_PROC_NAME_MATCH.test(name))
-      continue;
-    const lstart = getProcLstart(pid);
-    out.set(pid, lstart);
-  }
-  return out;
-}
-var globalOwnedCodexPids = new Set;
-function registerOwnedCodexPids(pids) {
-  for (const p of pids)
-    globalOwnedCodexPids.add(p);
-}
-function unregisterOwnedCodexPids(pids) {
-  for (const p of pids)
-    globalOwnedCodexPids.delete(p);
-}
-function findNewCodexChildren(baseline) {
-  const current = snapshotCodexChildren();
-  const novel = [];
-  for (const [pid, lstart] of current) {
-    const baselineLstart = baseline.get(pid);
-    if (baselineLstart !== undefined && baselineLstart === lstart)
-      continue;
-    if (globalOwnedCodexPids.has(pid))
-      continue;
-    novel.push(pid);
-  }
-  return novel;
-}
-var codexSpawnChain = Promise.resolve();
-async function acquireCodexSpawnLock() {
-  const prev = codexSpawnChain;
-  let release;
-  let released = false;
-  codexSpawnChain = new Promise((r) => {
-    release = () => {
-      if (released)
-        return;
-      released = true;
-      r();
-    };
-  });
-  await prev;
-  return release;
-}
-function isAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function isSameProcess(pid, lstart) {
-  return lstart !== "" && isAlive(pid) && getProcLstart(pid) === lstart;
-}
-function signalCodexTrees(rootPids) {
-  if (rootPids.length === 0)
-    return null;
-  const targets = new Map;
-  for (const root of rootPids) {
-    for (const pid of collectTree(root)) {
-      if (!targets.has(pid))
-        targets.set(pid, getProcLstart(pid));
-    }
-  }
-  logger.warn({ rootPids, totalPids: targets.size }, "codex-tree-kill: SIGTERM process tree");
-  for (const pid of targets.keys()) {
-    try {
-      process.kill(pid, "SIGTERM");
-    } catch {}
-  }
-  return { rootPids, targets };
-}
-function hasSameProcessSurvivors(targets) {
-  for (const [pid, lstart] of targets) {
-    if (isSameProcess(pid, lstart))
-      return true;
-  }
-  return false;
-}
-function killCodexStragglers({ rootPids, targets }) {
-  const aliveTargets = [];
-  let droppedAsPossibleReuse = 0;
-  for (const [pid, lstart] of targets) {
-    if (isSameProcess(pid, lstart)) {
-      aliveTargets.push(pid);
-    } else if (isAlive(pid)) {
-      droppedAsPossibleReuse++;
-    }
-  }
-  if (aliveTargets.length === 0)
-    return;
-  const reachable = new Set(aliveTargets);
-  for (const root of rootPids) {
-    const rootLstart = targets.get(root);
-    if (rootLstart && isSameProcess(root, rootLstart)) {
-      for (const pid of collectTree(root))
-        reachable.add(pid);
-    }
-  }
-  const stragglers = [];
-  for (const pid of reachable) {
-    const lstart = targets.get(pid);
-    if (lstart && isSameProcess(pid, lstart))
-      stragglers.push(pid);
-    else if (isAlive(pid))
-      droppedAsPossibleReuse++;
-  }
-  logger.warn({
-    aliveRoots: rootPids.filter((pid) => {
-      const lstart = targets.get(pid);
-      return lstart ? isSameProcess(pid, lstart) : false;
-    }),
-    totalStragglers: stragglers.length,
-    droppedAsPossibleReuse
-  }, "codex-tree-kill: SIGKILL fallback after SIGTERM timeout");
-  for (const pid of stragglers) {
-    try {
-      process.kill(pid, "SIGKILL");
-    } catch {}
-  }
-}
-function killCodexTrees(rootPids) {
-  const plan = signalCodexTrees(rootPids);
-  if (!plan)
-    return;
-  const killTimer = setTimeout(() => {
-    killCodexStragglers(plan);
-  }, SIGKILL_DELAY_MS);
-  killTimer.unref?.();
-}
-async function killOwnedCodexTreesForShutdown(graceMs = 3000) {
-  const roots = new Set(globalOwnedCodexPids);
-  for (const pid of snapshotCodexChildren().keys())
-    roots.add(pid);
-  const plan = signalCodexTrees([...roots]);
-  if (!plan)
-    return;
-  const deadline = Date.now() + Math.max(0, graceMs);
-  while (Date.now() < deadline && hasSameProcessSurvivors(plan.targets)) {
-    await new Promise((resolve) => setTimeout(resolve, Math.min(100, Math.max(1, deadline - Date.now()))));
-  }
-  killCodexStragglers(plan);
-}
-
-// ../../packages/core/src/security/sensitive-path.ts
-import { realpathSync } from "fs";
-import { resolve } from "path";
-var SENSITIVE_PATH_PATTERNS = [
-  /\/\.env(\.|$)/i,
-  /\/\.ssh\//i,
-  /\/\.aws\//i,
-  /\/\.gnupg\//i,
-  /\/\.netrc$/i,
-  /\/\.npmrc$/i,
-  /\/(id_rsa|id_ed25519|id_ecdsa|id_dsa)(\.pub)?$/i,
-  /\.(pem|key|p12|pfx|cer|crt)$/i,
-  /\/Library\/Keychains\//i,
-  /\/vault\.db(-wal|-shm|-journal)?$/i,
-  /\/vault-master-key$/i,
-  /\/runtime-mcp-secret$/i,
-  /\/sessions\.db(-wal|-shm|-journal)?$/i
-];
-function isSensitivePath(filePath) {
-  const normalized = resolve(filePath);
-  if (SENSITIVE_PATH_PATTERNS.some((p) => p.test(normalized)))
-    return true;
-  try {
-    const real = realpathSync(normalized);
-    if (real !== normalized)
-      return SENSITIVE_PATH_PATTERNS.some((p) => p.test(real));
-  } catch {}
-  return false;
-}
-
-// ../../packages/core/src/storage/vault.ts
-import { chmodSync, mkdirSync } from "fs";
-import { join } from "path";
-
-// ../../packages/core/src/storage/vault-crypto.ts
-import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto";
-var ENVELOPE_PREFIX = "otium-vault:v1:";
-var IV_BYTES = 12;
-var KEY_BYTES = 32;
-function encryptionKey() {
-  return createHash("sha256").update("otium-vault-value-v1\x00", "utf8").update(VAULT_MASTER_KEY, "utf8").digest().subarray(0, KEY_BYTES);
-}
-function aad(userId, key) {
-  return Buffer.from(`${userId}\x00${key.toUpperCase()}`, "utf8");
-}
-function isEncryptedVaultValue(value) {
-  return value.startsWith(ENVELOPE_PREFIX);
-}
-function encryptVaultValue(userId, key, value) {
-  const iv = randomBytes(IV_BYTES);
-  const cipher = createCipheriv("aes-256-gcm", encryptionKey(), iv);
-  cipher.setAAD(aad(userId, key));
-  const ciphertext = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
-  const tag = cipher.getAuthTag();
-  return `${ENVELOPE_PREFIX}${iv.toString("base64url")}.${ciphertext.toString("base64url")}.${tag.toString("base64url")}`;
-}
-function decryptVaultValue(userId, key, storedValue) {
-  if (!isEncryptedVaultValue(storedValue)) {
-    return { value: storedValue, legacyPlaintext: true };
-  }
-  const encoded = storedValue.slice(ENVELOPE_PREFIX.length);
-  const [ivPart, ciphertextPart, tagPart, ...extra] = encoded.split(".");
-  if (!ivPart || ciphertextPart === undefined || !tagPart || extra.length > 0) {
-    throw new Error("Invalid encrypted vault value");
-  }
-  const iv = Buffer.from(ivPart, "base64url");
-  const ciphertext = Buffer.from(ciphertextPart, "base64url");
-  const tag = Buffer.from(tagPart, "base64url");
-  if (iv.length !== IV_BYTES || tag.length !== 16) {
-    throw new Error("Invalid encrypted vault value");
-  }
-  const decipher = createDecipheriv("aes-256-gcm", encryptionKey(), iv);
-  decipher.setAAD(aad(userId, key));
-  decipher.setAuthTag(tag);
-  const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-  return { value: plaintext.toString("utf8"), legacyPlaintext: false };
-}
-
-// ../../packages/core/src/storage/vault.ts
-var VAULT_DB_PATH = join(DATA_DIR, "vault.db");
-mkdirSync(DATA_DIR, { recursive: true });
-var vaultDb = new Database(VAULT_DB_PATH, { create: true });
-chmodSync(VAULT_DB_PATH, 384);
-vaultDb.exec("PRAGMA journal_mode = WAL");
-vaultDb.exec("PRAGMA busy_timeout = 5000");
-vaultDb.exec(`
-  CREATE TABLE IF NOT EXISTS vault (
-    user_id     TEXT    NOT NULL,
-    key         TEXT    NOT NULL,
-    value       TEXT    NOT NULL,
-    description TEXT    NOT NULL DEFAULT '',
-    PRIMARY KEY (user_id, key)
-  )
-`);
-{
-  const cols = vaultDb.prepare("PRAGMA table_info(vault)").all();
-  const uid = cols.find((c) => c.name === "user_id");
-  if (uid && uid.type.toUpperCase() === "INTEGER") {
-    vaultDb.exec("BEGIN");
-    vaultDb.exec(`
-      CREATE TABLE vault_migrated (
-        user_id     TEXT    NOT NULL,
-        key         TEXT    NOT NULL,
-        value       TEXT    NOT NULL,
-        description TEXT    NOT NULL DEFAULT '',
-        PRIMARY KEY (user_id, key)
-      )
-    `);
-    vaultDb.exec("INSERT INTO vault_migrated SELECT CAST(user_id AS TEXT), key, value, description FROM vault");
-    vaultDb.exec("DROP TABLE vault");
-    vaultDb.exec("ALTER TABLE vault_migrated RENAME TO vault");
-    vaultDb.exec("COMMIT");
-  }
-}
-var VAULT_KEY_PATTERN = /^[A-Z][A-Z0-9_]{0,127}$/;
-var VAULT_VALUE_MIN_BYTES = 4;
-var VAULT_VALUE_MAX_BYTES = 64 * 1024;
-var VAULT_DESCRIPTION_MAX_LENGTH = 500;
-function normalizeVaultKey(key) {
-  return key.trim().toUpperCase();
-}
-function validateVaultKey(key) {
-  return VAULT_KEY_PATTERN.test(normalizeVaultKey(key));
-}
-function decryptRow(userId, key, storedValue) {
-  const decoded = decryptVaultValue(userId, key, storedValue);
-  if (decoded.legacyPlaintext) {
-    vaultDb.prepare("UPDATE vault SET value = ? WHERE user_id = ? AND key = ? AND value = ?").run(encryptVaultValue(userId, key, decoded.value), userId, key, storedValue);
-  }
-  return decoded.value;
-}
-function vaultListWithValues(userId) {
-  const rows = vaultDb.prepare("SELECT key, description, value FROM vault WHERE user_id = ? ORDER BY key").all(userId);
-  return rows.map((row) => ({
-    key: row.key,
-    description: row.description,
-    value: decryptRow(userId, row.key, row.value)
-  }));
-}
-function vaultSet(userId, key, value, description = "") {
-  const normalizedKey = normalizeVaultKey(key);
-  vaultDb.prepare(`INSERT INTO vault (user_id, key, value, description) VALUES (?, ?, ?, ?)
-       ON CONFLICT (user_id, key) DO UPDATE
-         SET value = excluded.value, description = excluded.description`).run(userId, normalizedKey, encryptVaultValue(userId, normalizedKey, value), description);
-}
-function vaultHasKey(userId, key) {
-  const row = vaultDb.prepare("SELECT 1 FROM vault WHERE user_id = ? AND key = ?").get(userId, normalizeVaultKey(key));
-  return row != null;
-}
-function vaultDel(userId, key) {
-  const result = vaultDb.prepare("DELETE FROM vault WHERE user_id = ? AND key = ?").run(userId, normalizeVaultKey(key));
-  return result.changes > 0;
-}
-function vaultList(userId) {
-  return vaultDb.prepare("SELECT key, description FROM vault WHERE user_id = ? ORDER BY key").all(userId);
-}
-function valueReferencesVaultKey(userId, value) {
-  const keys = new Set(vaultList(userId).map((entry) => entry.key));
-  const visit = (candidate) => {
-    if (typeof candidate === "string") {
-      for (const match of candidate.matchAll(/\{\{([^}]+)\}\}/g)) {
-        if (keys.has(normalizeVaultKey(match[1] ?? "")))
-          return true;
-      }
-      return false;
-    }
-    if (Array.isArray(candidate))
-      return candidate.some(visit);
-    if (candidate && typeof candidate === "object") {
-      return Object.values(candidate).some(visit);
-    }
-    return false;
-  };
-  return visit(value);
-}
-function encodedSecretForms(value) {
-  const forms = new Set([
-    value,
-    encodeURIComponent(value),
-    Buffer.from(value, "utf8").toString("base64"),
-    Buffer.from(value, "utf8").toString("base64url"),
-    Buffer.from(value, "utf8").toString("hex")
-  ]);
-  forms.delete("");
-  return [...forms].sort((a, b) => b.length - a.length);
-}
-function redactVaultSecrets(userId, text) {
-  const candidates = vaultListWithValues(userId).flatMap((entry) => encodedSecretForms(entry.value).map((form) => ({ form, key: entry.key }))).sort((a, b) => b.form.length - a.form.length || a.key.localeCompare(b.key));
-  if (candidates.length === 0)
-    return text;
-  const candidatesByFirstCharacter = new Map;
-  for (const candidate of candidates) {
-    const first = candidate.form[0];
-    if (!first)
-      continue;
-    const bucket = candidatesByFirstCharacter.get(first) ?? [];
-    bucket.push(candidate);
-    candidatesByFirstCharacter.set(first, bucket);
-  }
-  let redacted = "";
-  let offset = 0;
-  while (offset < text.length) {
-    const match = candidatesByFirstCharacter.get(text[offset] ?? "")?.find((candidate) => text.startsWith(candidate.form, offset));
-    if (!match) {
-      redacted += text[offset];
-      offset += 1;
-      continue;
-    }
-    redacted += `[REDACTED:${match.key}]`;
-    offset += match.form.length;
-  }
-  return redacted;
-}
-
-// ../../packages/core/src/mcp/runtime-spec.ts
-import { createHmac, timingSafeEqual } from "crypto";
-var RUNTIME_MCP_KEY = "runtime";
-var RUNTIME_MCP_BASE_PATH = "/mcp/runtime";
-var TOKEN_TTL_MS = 4 * 60 * 60 * 1000;
-var CLAUDE_MCP_TOOL_TIMEOUT_MS = 600000;
-var runtimePort = NEGOTIUM_PORT;
-function setRuntimeMcpPort(port) {
-  runtimePort = port;
-}
-function getRuntimeMcpPort() {
-  return runtimePort;
-}
-function encodeTokenPart(value) {
-  return Buffer.from(JSON.stringify(value), "utf-8").toString("base64url");
-}
-function decodeTokenPart(part) {
-  return JSON.parse(Buffer.from(part, "base64url").toString("utf-8"));
-}
-function signTokenPayload(payloadPart) {
-  return createHmac("sha256", RUNTIME_MCP_SECRET).update(payloadPart).digest("base64url");
-}
-function safeEqual(a, b) {
-  const aa = Buffer.from(a);
-  const bb = Buffer.from(b);
-  return aa.length === bb.length && timingSafeEqual(aa, bb);
-}
-function isRuntimeMcpContext(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value))
-    return false;
-  const ctx = value;
-  return typeof ctx.userId === "string" && typeof ctx.topicId === "string" && typeof ctx.topicTitle === "string" && typeof ctx.cwd === "string" && typeof ctx.agent === "string" && isAgentKind(ctx.agent) && (ctx.queryId === undefined || typeof ctx.queryId === "string") && (ctx.model === undefined || typeof ctx.model === "string") && (ctx.currentUserPrompt === undefined || typeof ctx.currentUserPrompt === "string") && (ctx.autoContinue === undefined || typeof ctx.autoContinue === "boolean") && (ctx.peerBridge === undefined || typeof ctx.peerBridge.hubCellId === "string" && typeof ctx.peerBridge.hostTopicId === "string" && typeof ctx.peerBridge.hostQueryId === "string" && typeof ctx.peerBridge.canSpawnSubagents === "boolean");
-}
-function issueRuntimeMcpToken(ctx) {
-  const payloadPart = encodeTokenPart({
-    v: 1,
-    exp: Date.now() + TOKEN_TTL_MS,
-    ctx
-  });
-  return `${payloadPart}.${signTokenPayload(payloadPart)}`;
-}
-function resolveRuntimeMcpToken(token) {
-  if (!token)
-    return null;
-  const [payloadPart, signature, extra] = token.split(".");
-  if (!payloadPart || !signature || extra !== undefined)
-    return null;
-  if (!safeEqual(signature, signTokenPayload(payloadPart)))
-    return null;
-  try {
-    const payload = decodeTokenPart(payloadPart);
-    if (payload.v !== 1 || typeof payload.exp !== "number" || payload.exp <= Date.now())
-      return null;
-    if (!isRuntimeMcpContext(payload.ctx))
-      return null;
-    return payload.ctx;
-  } catch {
-    return null;
-  }
-}
-function buildRuntimeMcpSpec(agent, ctx) {
-  const token = issueRuntimeMcpToken(ctx);
-  const base = `http://127.0.0.1:${runtimePort}${RUNTIME_MCP_BASE_PATH}`;
-  const query = `token=${encodeURIComponent(token)}`;
-  if (agent === "codex")
-    return { url: `${base}/mcp?${query}` };
-  return {
-    type: "sse",
-    url: `${base}/sse?${query}`,
-    timeout: CLAUDE_MCP_TOOL_TIMEOUT_MS
-  };
-}
-
-// ../../packages/core/src/platform/mcp-config.ts
-import { createHmac as createHmac2 } from "crypto";
-
-// ../../packages/core/src/mcp/canonical-bridge-config.ts
-var registrations = [];
-var turnLeases = new Map;
-function turnKey(scope) {
-  return JSON.stringify([
-    scope.userId,
-    scope.topicId,
-    scope.queryId,
-    scope.peerBridge.hubCellId,
-    scope.peerBridge.hostTopicId,
-    scope.peerBridge.hostQueryId
-  ]);
-}
-function registerCanonicalMcpBridgeEnvProvider(provider) {
-  const registration = { id: Symbol("canonical-mcp-bridge"), provider };
-  registrations.push(registration);
-  let disposed = false;
-  return () => {
-    if (disposed)
-      return;
-    disposed = true;
-    const index = registrations.findIndex((entry) => entry.id === registration.id);
-    if (index >= 0)
-      registrations.splice(index, 1);
-  };
-}
-function canonicalMcpBridgeEnv(scope) {
-  const lease = registrations.at(-1)?.provider(scope);
-  if (!lease)
-    return;
-  const key = turnKey(scope);
-  const leases = turnLeases.get(key) ?? new Set;
-  leases.add(lease.revoke);
-  turnLeases.set(key, leases);
-  return lease.env;
-}
-
-// ../../packages/core/src/mcp/session-comm/bridge-ipc-config.ts
-var registrations2 = [];
-function registerPeerSessionBridgeIpcConfig(config) {
-  const registration = { id: Symbol("peer-session-bridge-ipc"), config: { ...config } };
-  registrations2.push(registration);
-  let disposed = false;
-  return () => {
-    if (disposed)
-      return;
-    disposed = true;
-    const index = registrations2.findIndex((entry) => entry.id === registration.id);
-    if (index >= 0)
-      registrations2.splice(index, 1);
-  };
-}
-function peerSessionBridgeIpcEnv() {
-  const active = registrations2.at(-1)?.config;
-  if (!active)
-    return;
-  return {
-    NEGOTIUM_PEER_SESSION_BRIDGE_URL: active.url,
-    NEGOTIUM_PEER_SESSION_BRIDGE_TOKEN: active.token
-  };
-}
-
-// ../../packages/core/src/platform/mcp-config.ts
-function buildStdioMcpServer(agent, serverFile, serverArgs, env) {
-  if (agent === "codex") {
-    return {
-      command: "node",
-      args: [TSX_BIN, serverFile, ...serverArgs],
-      env: { TSX_TSCONFIG_PATH: TSCONFIG_PATH, ...env }
-    };
-  }
-  return {
-    command: "bun",
-    args: ["run", serverFile, ...serverArgs],
-    ...env ? { env } : {}
-  };
-}
-var _playwrightUnavailableNotifier;
-var _playwrightUnavailableLastNotifiedAt = new Map;
-var _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS = 5 * 60000;
-var _playwrightUnavailableThisTurn = new Set;
-function _playwrightUnavailableKey(userId, topic) {
-  return `${userId}:${topic ?? ""}`;
-}
-function setPlaywrightUnavailableNotifier(cb) {
-  _playwrightUnavailableNotifier = cb;
-}
-function markPlaywrightUnavailable(ctx) {
-  _markPlaywrightUnavailable(ctx);
-}
-function _markPlaywrightUnavailable(ctx) {
-  _playwrightUnavailableThisTurn.add(_playwrightUnavailableKey(ctx.userId, ctx.topic));
-  if (!_playwrightUnavailableNotifier)
-    return;
-  const key = _playwrightUnavailableKey(ctx.userId, ctx.topic);
-  const now = Date.now();
-  const last = _playwrightUnavailableLastNotifiedAt.get(key) ?? 0;
-  if (now - last < _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS)
-    return;
-  _playwrightUnavailableLastNotifiedAt.set(key, now);
-  try {
-    _playwrightUnavailableNotifier(ctx);
-  } catch (err) {
-    logger.warn({ err }, "playwright unavailable notifier threw");
-  }
-}
-function consumePlaywrightUnavailable(userId, topic) {
-  const key = _playwrightUnavailableKey(userId, topic);
-  if (!_playwrightUnavailableThisTurn.has(key))
-    return false;
-  _playwrightUnavailableThisTurn.delete(key);
-  return true;
-}
-var CODEX_BROWSER_CAPABILITY_ENV = "NEGOTIUM_BROWSER_CAPABILITY";
-function browserOwnerCapability(capability, owner) {
-  return createHmac2("sha256", capability).update(owner).digest("hex");
-}
-function browserOwnerForContext(ctx) {
-  if (ctx.topicId)
-    return `topic:${ctx.topicId}`;
-  if (ctx.userId && ctx.session)
-    return `user:${ctx.userId}:${ctx.session}`;
-  return;
-}
-function playwrightTransport(port, owner, capability, agent) {
-  const ownerCapability = browserOwnerCapability(capability, owner);
-  if (agent === "codex") {
-    return {
-      url: `http://127.0.0.1:${port}/mcp`,
-      http_headers: { "X-Browser-Owner": owner },
-      env_http_headers: { "X-Browser-Capability": CODEX_BROWSER_CAPABILITY_ENV }
-    };
-  }
-  if (agent === "maestro") {
-    const query = new URLSearchParams({ owner, capability: ownerCapability });
-    return {
-      type: "sse",
-      url: `http://127.0.0.1:${port}/sse?${query}`
-    };
-  }
-  return {
-    type: "sse",
-    url: `http://127.0.0.1:${port}/sse`,
-    headers: { "X-Browser-Owner": owner, "X-Browser-Capability": ownerCapability }
-  };
-}
-function longLivedHttpMcp(agent, port) {
-  return agent === "codex" ? { url: `http://127.0.0.1:${port}/mcp` } : { type: "sse", url: `http://127.0.0.1:${port}/sse` };
-}
-var MCP_CATALOG = {
-  playwright: {
-    scopes: ["dm", "forum", "fork", "cron"],
-    build({ userId, session, topicId, playwrightPort, playwrightCapability, agent }) {
-      if (playwrightPort && playwrightCapability) {
-        const owner = browserOwnerForContext({ userId, session, topicId });
-        if (!owner)
-          return null;
-        return playwrightTransport(playwrightPort, owner, playwrightCapability, agent);
-      }
-      _markPlaywrightUnavailable({
-        userId,
-        topic: session,
-        agent
-      });
-      return null;
-    }
-  },
-  [RUNTIME_MCP_KEY]: {
-    scopes: ["forum", "manager", "fork", "cron"],
-    forumRequired: true,
-    build({
-      userId,
-      session,
-      topicId,
-      queryId,
-      agent,
-      cwd,
-      model,
-      currentUserPrompt,
-      autoContinue,
-      peerBridge
-    }) {
-      if (!topicId || !agent)
-        return null;
-      return buildRuntimeMcpSpec(agent, {
-        userId,
-        topicId,
-        topicTitle: session,
-        queryId,
-        cwd: cwd ?? resolveTopicWorkspaceDir(topicId),
-        agent,
-        model,
-        currentUserPrompt,
-        autoContinue,
-        peerBridge
-      });
-    }
-  },
-  paddleocr: {
-    scopes: ["dm", "forum", "fork", "cron"],
-    build({ agent }) {
-      return buildStdioMcpServer(agent, PADDLEOCR_SERVER, []);
-    }
-  },
-  "token-stats": {
-    scopes: ["dm", "forum", "manager", "cron"],
-    forumRequired: true,
-    build({ userId, agent }) {
-      return buildStdioMcpServer(agent, TOKEN_STATS_SERVER, [`--user-id=${userId}`]);
-    }
-  },
-  task: {
-    scopes: ["dm", "forum", "manager", "cron"],
-    forumRequired: true,
-    build({ userId, session, topicId, queryId, agent, peerBridge }) {
-      if (peerBridge) {
-        if (!topicId || !queryId)
-          return null;
-        const env = canonicalMcpBridgeEnv({
-          surface: "task",
-          userId,
-          topicId,
-          queryId,
-          peerBridge
-        });
-        return env ? buildStdioMcpServer(agent, CANONICAL_MCP_PROXY_SERVER, ["--surface=task"], env) : null;
-      }
-      const args = [`--user-id=${userId}`, `--topic=${session}`];
-      if (topicId)
-        args.push(`--topic-id=${topicId}`);
-      return buildStdioMcpServer(agent, TASK_SERVER, args);
-    }
-  },
-  "session-comm": {
-    scopes: ["forum", "fork", "manager"],
-    forumRequired: true,
-    build({ userId, session, topicId, agent, depth = 0, silent, peerBridge }) {
-      const effectiveAgent = agent ?? FALLBACK_AGENT;
-      const args = [
-        `--user-id=${userId}`,
-        `--topic=${session}`,
-        ...topicId ? [`--topic-id=${topicId}`] : [],
-        `--depth=${depth}`,
-        `--agent=${effectiveAgent}`,
-        ...silent ? ["--reply-only=true"] : [],
-        ...peerBridge ? [`--peer-host-query-id=${peerBridge.hostQueryId}`] : []
-      ];
-      return buildStdioMcpServer(effectiveAgent, SESSION_COMM_SERVER, args, peerBridge ? peerSessionBridgeIpcEnv() : undefined);
-    }
-  },
-  wiki: {
-    scopes: ["dm", "forum", "manager", "cron"],
-    forumRequired: true,
-    build({ userId, session, topicId, queryId, wikiTopicId, agent, peerBridge }) {
-      if (peerBridge) {
-        if (!topicId || !queryId)
-          return null;
-        const env = canonicalMcpBridgeEnv({
-          surface: "wiki",
-          userId,
-          topicId,
-          queryId,
-          peerBridge
-        });
-        return env ? buildStdioMcpServer(agent, CANONICAL_MCP_PROXY_SERVER, ["--surface=wiki"], env) : null;
-      }
-      const args = [`--user-id=${userId}`];
-      const resolvedWikiTopicId = wikiTopicId ?? topicId ?? (session !== "dm" ? session : undefined);
-      if (resolvedWikiTopicId)
-        args.push(`--topic-id=${resolvedWikiTopicId}`);
-      args.push("--surface=wiki");
-      return buildStdioMcpServer(agent, WIKI_SERVER, args);
-    }
-  },
-  skills: {
-    scopes: ["dm", "forum", "manager", "cron"],
-    forumRequired: true,
-    build({ userId, topicId, agent }) {
-      const args = [`--user-id=${userId}`, "--surface=skills"];
-      if (topicId)
-        args.push(`--topic-id=${topicId}`);
-      return buildStdioMcpServer(agent, WIKI_SERVER, args);
-    }
-  },
-  "system-health": {
-    scopes: ["dm", "forum", "manager", "cron"],
-    forumRequired: true,
-    build({ agent }) {
-      return buildStdioMcpServer(agent, SYSTEM_HEALTH_SERVER, []);
-    }
-  },
-  "background-bash": {
-    scopes: ["forum"],
-    build({ agent, bgBashPort }) {
-      if (bgBashPort === undefined)
-        return null;
-      return longLivedHttpMcp(agent, bgBashPort);
-    }
-  },
-  "agent-health": {
-    scopes: ["forum", "manager", "cron"],
-    forumRequired: true,
-    build({ userId, agent }) {
-      const args = [`--user-id=${userId}`];
-      return buildStdioMcpServer(agent, AGENT_HEALTH_SERVER, args);
-    }
-  },
-  vault: {
-    scopes: ["dm", "forum", "manager", "cron"],
-    forumRequired: true,
-    build({ userId, agent }) {
-      const args = [`--user-id=${userId}`];
-      if (agent === "codex")
-        args.push("--http-only=true");
-      return buildStdioMcpServer(agent, VAULT_SERVER, args);
-    }
-  }
-};
-function namesInScope(scope) {
-  return Object.entries(MCP_CATALOG).filter(([, e]) => e.scopes.includes(scope)).map(([name]) => name);
-}
-var allForumMcpServerNames = [];
-var requiredForumMcpServers = [];
-var REQUIRED_FORUM_MCP_SERVERS = requiredForumMcpServers;
-var optionalForumMcpServers = [];
-var OPTIONAL_FORUM_MCP_SERVERS = optionalForumMcpServers;
-function refreshForumCatalogViews() {
-  const all = namesInScope("forum");
-  const required = Object.entries(MCP_CATALOG).filter(([, entry]) => entry.scopes.includes("forum") && entry.forumRequired).map(([name]) => name);
-  allForumMcpServerNames.splice(0, allForumMcpServerNames.length, ...all);
-  requiredForumMcpServers.splice(0, requiredForumMcpServers.length, ...required);
-  optionalForumMcpServers.splice(0, optionalForumMcpServers.length, ...all.filter((name) => !required.includes(name)));
-}
-refreshForumCatalogViews();
-function registerRuntimeMcpServer(name, entry) {
-  const key = name.trim();
-  if (!key || !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(key)) {
-    throw new Error(`invalid runtime MCP server name: ${name}`);
-  }
-  if (MCP_CATALOG[key])
-    throw new Error(`runtime MCP server already registered: ${key}`);
-  MCP_CATALOG[key] = entry;
-  refreshForumCatalogViews();
-  return () => {
-    if (MCP_CATALOG[key] !== entry)
-      return;
-    delete MCP_CATALOG[key];
-    refreshForumCatalogViews();
-  };
-}
-var nodeMcpEntries = [];
-function setNodeMcpServers(entries) {
-  nodeMcpEntries = entries.filter((entry) => !(entry.key in MCP_CATALOG));
-  const dropped = entries.length - nodeMcpEntries.length;
-  if (dropped > 0) {
-    logger.warn({ dropped }, "setNodeMcpServers: entries shadowing built-in catalog keys ignored");
-  }
-}
-function getNodeMcpServers() {
-  return nodeMcpEntries;
-}
-function buildNodeMcpSpecs(agent, filter) {
-  const out = {};
-  for (const entry of nodeMcpEntries) {
-    if (!filter(entry.key))
-      continue;
-    out[entry.key] = entry.kind === "http" ? longLivedHttpMcp(agent, entry.port) : {
-      command: entry.command,
-      args: entry.args ?? [],
-      ...entry.env ? { env: entry.env } : {}
-    };
-  }
-  return out;
-}
-function buildScope(scope, ctx, filter = () => true) {
-  const out = {};
-  for (const [name, entry] of Object.entries(MCP_CATALOG)) {
-    if (!entry.scopes.includes(scope))
-      continue;
-    if (!filter(name))
-      continue;
-    const spec = entry.build(ctx);
-    if (spec === null)
-      continue;
-    out[name] = spec;
-  }
-  if (scope !== "cron") {
-    Object.assign(out, buildNodeMcpSpecs(ctx.agent, filter));
-  }
-  return out;
-}
-function getDmMcpServers(opts) {
-  return buildScope("dm", {
-    userId: opts.userId,
-    session: "dm",
-    agent: opts.agent,
-    playwrightPort: opts.playwrightPort,
-    playwrightCapability: opts.playwrightCapability
-  });
-}
-function getManagerMcpServers(opts) {
-  if (!opts.topicId) {
-    throw new Error("getManagerMcpServers: private General topicId is required");
-  }
-  const topicId = opts.topicId;
-  return buildScope("manager", {
-    userId: opts.userId,
-    session: opts.session ?? "General",
-    topicId,
-    queryId: opts.queryId,
-    wikiTopicId: opts.wikiTopicId ?? topicId,
-    agent: opts.agent,
-    cwd: opts.cwd,
-    model: opts.model,
-    currentUserPrompt: opts.currentUserPrompt,
-    playwrightPort: opts.playwrightPort,
-    playwrightCapability: opts.playwrightCapability,
-    autoContinue: opts.autoContinue
-  });
-}
-function getForumMcpServers(opts) {
-  const {
-    userId,
-    session,
-    topicId,
-    queryId,
-    wikiTopicId,
-    agent,
-    cwd,
-    model,
-    currentUserPrompt,
-    playwrightPort,
-    playwrightCapability,
-    depth = 0,
-    enabled = null,
-    extra = {},
-    silent = false,
-    bgBashPort,
-    autoContinue,
-    peerBridge
-  } = opts;
-  const filter = (name) => {
-    if (silent && name === "task")
-      return false;
-    if (enabled === null)
-      return true;
-    return enabled.includes(name) || REQUIRED_FORUM_MCP_SERVERS.includes(name);
-  };
-  const base = buildScope("forum", {
-    userId,
-    session,
-    topicId,
-    queryId,
-    wikiTopicId,
-    agent,
-    cwd,
-    model,
-    currentUserPrompt,
-    depth,
-    playwrightPort,
-    playwrightCapability,
-    bgBashPort,
-    autoContinue,
-    silent,
-    peerBridge
-  }, filter);
-  return { ...base, ...extra };
-}
-function getCronMcpServers(opts) {
-  return buildScope("cron", {
-    userId: opts.userId,
-    session: opts.session,
-    topicId: opts.topicId,
-    queryId: opts.queryId,
-    wikiTopicId: opts.wikiTopicId ?? opts.topicId,
-    agent: opts.agent,
-    cwd: opts.cwd,
-    model: opts.model,
-    currentUserPrompt: opts.currentUserPrompt,
-    playwrightPort: opts.playwrightPort,
-    playwrightCapability: opts.playwrightCapability,
-    autoContinue: false
-  });
-}
-function getMcpServersForQuery(opts) {
-  if (opts.sessionType === "cron") {
-    if (!opts.topicId)
-      throw new Error("getMcpServersForQuery: cron sessionType requires topicId");
-    return getCronMcpServers({
-      userId: opts.userId || "default",
-      session: opts.session || "cron",
-      topicId: opts.topicId,
-      queryId: opts.queryId,
-      wikiTopicId: opts.wikiTopicId,
-      agent: opts.agent,
-      cwd: opts.cwd,
-      model: opts.model,
-      currentUserPrompt: opts.prompt,
-      playwrightPort: opts.playwrightPort,
-      playwrightCapability: opts.playwrightCapability
-    });
-  }
-  if (opts.sessionType === "dm" || opts.sessionType === "ephemeral") {
-    return getDmMcpServers({
-      userId: opts.userId || "default",
-      agent: opts.agent,
-      playwrightPort: opts.playwrightPort,
-      playwrightCapability: opts.playwrightCapability
-    });
-  }
-  if (opts.sessionType === "manager") {
-    return getManagerMcpServers({
-      userId: opts.userId || "default",
-      session: opts.session,
-      topicId: opts.topicId,
-      queryId: opts.queryId,
-      wikiTopicId: opts.wikiTopicId,
-      agent: opts.agent,
-      cwd: opts.cwd,
-      model: opts.model,
-      currentUserPrompt: opts.prompt,
-      playwrightPort: opts.playwrightPort,
-      playwrightCapability: opts.playwrightCapability,
-      autoContinue: opts.autoContinue
-    });
-  }
-  return getForumMcpServers({
-    userId: opts.userId || "default",
-    session: opts.session || "default",
-    topicId: opts.topicId,
-    queryId: opts.queryId,
-    wikiTopicId: opts.wikiTopicId,
-    agent: opts.agent,
-    cwd: opts.cwd,
-    model: opts.model,
-    currentUserPrompt: opts.prompt,
-    playwrightPort: opts.playwrightPort,
-    playwrightCapability: opts.playwrightCapability,
-    bgBashPort: opts.bgBashPort,
-    autoContinue: opts.autoContinue,
-    depth: opts.depth,
-    enabled: opts.mcpEnabled,
-    extra: opts.mcpExtra,
-    silent: opts.silent,
-    peerBridge: opts.peerBridge
-  });
-}
-
-// ../../packages/core/src/media/file-events.ts
-function* extractFileEvents(text, source) {
-  const tagRegex = new RegExp(FILE_TAG_REGEX.source, "gi");
-  let match = tagRegex.exec(text);
-  while (match !== null) {
-    yield { type: "file", path: match[1], source, origin: "tag" };
-    match = tagRegex.exec(text);
-  }
-}
-function extractFileTagPaths(text) {
-  const seen = new Set;
-  for (const event of extractFileEvents(text, "tag")) {
-    if (event.type === "file")
-      seen.add(event.path);
-  }
-  return [...seen];
-}
-function stripFileTags(text) {
-  return text.replace(new RegExp(FILE_TAG_REGEX.source, "gi"), "").trim();
-}
-
-// ../../packages/core/src/platform/error.ts
-function errMsg(e, fallback) {
-  if (e instanceof Error)
-    return e.message;
-  return fallback ?? String(e);
-}
-
-// ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.8";
-
-// ../../packages/core/src/agents/index.ts
-import { existsSync as existsSync5 } from "fs";
-import { homedir } from "os";
-import { join as join4 } from "path";
-
-// ../../packages/core/src/agents/claude-provider.ts
-import { spawn } from "child_process";
-import { existsSync, readFileSync } from "fs";
-import { query } from "@anthropic-ai/claude-agent-sdk";
-
-// ../../packages/core/src/agents/deep-map.ts
-function deepMapStrings(value, fn) {
-  if (typeof value === "string")
-    return fn(value);
-  if (Array.isArray(value))
-    return value.map((v) => deepMapStrings(v, fn));
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [k, v] of Object.entries(value)) {
-      out[k] = deepMapStrings(v, fn);
-    }
-    return out;
-  }
-  return value;
-}
-
-// ../../packages/core/src/agents/vault-tool-policy.ts
-var SENSITIVE_RUNTIME_NAMES = [
-  "vault.db",
-  "vault-master-key",
-  "runtime-mcp-secret",
-  "sessions.db"
-];
-var VAULT_BROKER_REDIRECT_ERROR = "Vault placeholders must be executed through mcp__vault__vault_run (shell/CLI) or mcp__vault__vault_http_request (HTTP) so secret values cannot enter the model transcript.";
-function isVaultBrokerTool(toolName) {
-  return toolName.includes("vault_run") || toolName.includes("vault_http_request");
-}
-function referencesRuntimeSecretStorage(value) {
-  if (typeof value === "string") {
-    const lower = value.toLowerCase();
-    if (SENSITIVE_RUNTIME_NAMES.some((name) => lower.includes(name)))
-      return true;
-    return value.startsWith("/") && isSensitivePath(value);
-  }
-  if (Array.isArray(value))
-    return value.some(referencesRuntimeSecretStorage);
-  if (value && typeof value === "object") {
-    return Object.values(value).some(referencesRuntimeSecretStorage);
-  }
-  return false;
-}
-function shouldRedirectVaultTool(userId, toolName, input) {
-  return !isVaultBrokerTool(toolName) && valueReferencesVaultKey(userId, input);
-}
-
-// ../../packages/core/src/agents/execution-host.ts
-var defaultHost = {
-  getMcpServersForQuery,
-  redactVaultSecrets,
-  referencesRuntimeSecretStorage,
-  shouldRedirectVaultTool,
-  claudeCodeExecutablePath: () => CLAUDE_EXECUTABLE,
-  codexAuthFilePath
-};
-var hostRegistrations = [];
-function activeHost() {
-  const host = { ...defaultHost };
-  for (const registration of hostRegistrations)
-    Object.assign(host, registration.overrides);
-  return host;
-}
-function hostedMcpServers(opts) {
-  return activeHost().getMcpServersForQuery(opts);
-}
-function redactHostedSecrets(userId, value) {
-  return activeHost().redactVaultSecrets(userId, value);
-}
-function referencesHostedSecretStorage(value) {
-  return activeHost().referencesRuntimeSecretStorage(value);
-}
-function shouldRedirectHostedVaultTool(userId, toolName, input) {
-  return activeHost().shouldRedirectVaultTool(userId, toolName, input);
-}
-function hostedClaudeCodeExecutablePath() {
-  return activeHost().claudeCodeExecutablePath();
-}
-function hostedCodexAuthFilePath() {
-  return activeHost().codexAuthFilePath();
-}
-
-// ../../packages/core/src/agents/claude-provider.ts
-var CLAUDE_DEFAULT_DISALLOWED_TOOLS = [
-  "AskUserQuestion",
-  "Workflow",
-  "TodoWrite",
-  "TaskCreate",
-  "TaskUpdate",
-  "TaskList",
-  "TaskGet",
-  "Task",
-  "Agent",
-  "TaskOutput",
-  "TaskStop"
-];
-function buildClaudeDisallowedTools(extra = undefined) {
-  return [...new Set([...CLAUDE_DEFAULT_DISALLOWED_TOOLS, ...extra ?? []])];
-}
-function toClaudeEffort(e) {
-  if (!e || !claudeRegistry.validateEffort(e))
-    return;
-  return e;
-}
-var CLAUDE_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
-var CLAUDE_IMAGE_MIME_TYPES = new Set([
-  "image/jpeg",
-  "image/png",
-  "image/gif",
-  "image/webp"
-]);
-function isClaudeImageAttachment(attachment) {
-  return attachment.type === "image" && CLAUDE_IMAGE_MIME_TYPES.has(attachment.mimeType);
-}
-async function* singleUserMessage(message) {
-  yield message;
-}
-function buildClaudePrompt(opts) {
-  const attachments = opts.attachments ?? [];
-  if (attachments.length === 0)
-    return opts.prompt;
-  const imageBlocks = [];
-  for (const attachment of attachments) {
-    if (!isClaudeImageAttachment(attachment))
-      continue;
-    if (attachment.sizeBytes > CLAUDE_IMAGE_MAX_BYTES) {
-      logger.info({
-        path: attachment.path,
-        mimeType: attachment.mimeType,
-        sizeBytes: attachment.sizeBytes,
-        maxBytes: CLAUDE_IMAGE_MAX_BYTES
-      }, "claudeProvider: skipping oversized image attachment content block");
-      continue;
-    }
-    try {
-      imageBlocks.push({
-        type: "image",
-        source: {
-          type: "base64",
-          media_type: attachment.mimeType,
-          data: readFileSync(attachment.path).toString("base64")
-        }
-      });
-    } catch (err) {
-      logger.warn({
-        path: attachment.path,
-        mimeType: attachment.mimeType,
-        err
-      }, "claudeProvider: failed to read image attachment for content block");
-    }
-  }
-  if (imageBlocks.length === 0)
-    return opts.prompt;
-  const content = [{ type: "text", text: opts.prompt }, ...imageBlocks];
-  return singleUserMessage({
-    type: "user",
-    message: {
-      role: "user",
-      content
-    },
-    parent_tool_use_id: null
-  });
-}
-var CLAUDE_ABORT_SIGKILL_DELAY_MS = 2500;
-function signalProcessTree(pid, signal) {
-  try {
-    process.kill(-pid, signal);
-    return true;
-  } catch (groupErr) {
-    try {
-      process.kill(pid, signal);
-      return true;
-    } catch (pidErr) {
-      logger.debug({ groupErr, pidErr, pid, signal }, "Failed to signal Claude process tree");
-      return false;
-    }
-  }
-}
-function spawnClaudeCodeProcessWithTreeKill(options) {
-  const child = spawn(options.command, options.args, {
-    cwd: options.cwd,
-    detached: true,
-    env: options.env,
-    stdio: ["pipe", "pipe", "inherit"]
-  });
-  if (!child.stdin || !child.stdout) {
-    child.kill("SIGKILL");
-    throw new Error("Failed to spawn Claude Code process with piped stdin/stdout");
-  }
-  let exited = false;
-  let killTimer;
-  const clearKillTimer = () => {
-    if (killTimer)
-      clearTimeout(killTimer);
-    killTimer = undefined;
-  };
-  const kill = (signal) => {
-    if (!child.pid)
-      return child.kill(signal);
-    const ok = signalProcessTree(child.pid, signal);
-    if (signal !== "SIGKILL") {
-      clearKillTimer();
-      killTimer = setTimeout(() => {
-        if (!exited && child.pid) {
-          logger.warn({ pid: child.pid }, "Claude process tree still alive after SIGTERM; SIGKILL");
-          signalProcessTree(child.pid, "SIGKILL");
-        }
-      }, CLAUDE_ABORT_SIGKILL_DELAY_MS);
-      killTimer.unref?.();
-    }
-    return ok;
-  };
-  const onAbort = () => {
-    logger.warn({ pid: child.pid, command: options.command }, "Aborting Claude Code process tree");
-    kill("SIGTERM");
-  };
-  if (options.signal.aborted)
-    onAbort();
-  else
-    options.signal.addEventListener("abort", onAbort, { once: true });
-  child.once("exit", (code, signal) => {
-    exited = true;
-    clearKillTimer();
-    options.signal.removeEventListener("abort", onAbort);
-    logger.debug({ pid: child.pid, code, signal }, "Claude Code process exited");
-  });
-  child.once("error", (err) => {
-    exited = true;
-    clearKillTimer();
-    options.signal.removeEventListener("abort", onAbort);
-    logger.error({
-      pid: child.pid,
-      command: options.command,
-      err: err instanceof Error ? err.message : String(err)
-    }, "Claude Code process error event");
-  });
-  return {
-    stdin: child.stdin,
-    stdout: child.stdout,
-    get killed() {
-      return child.killed || exited;
-    },
-    get exitCode() {
-      return child.exitCode;
-    },
-    kill,
-    on(event, listener) {
-      child.on(event, listener);
-    },
-    once(event, listener) {
-      child.once(event, listener);
-    },
-    off(event, listener) {
-      child.off(event, listener);
-    }
-  };
-}
-function isAbortError(err) {
-  if (!err || typeof err !== "object")
-    return false;
-  const e = err;
-  if (e.name === "AbortError")
-    return true;
-  if (e.code === 20 || e.code === "ABORT_ERR")
-    return true;
-  return false;
-}
-async function* claudeProvider(opts) {
-  const claudeExecutable = hostedClaudeCodeExecutablePath();
-  if (claudeExecutable && !existsSync(claudeExecutable)) {
-    yield {
-      type: "error",
-      content: `Claude CLI not found at ${claudeExecutable}. Install Claude Code or configure the executable path.`
-    };
-    return;
-  }
-  const cleanEnv = { ...process.env };
-  delete cleanEnv.NEGOTIUM_PEER_SESSION_BRIDGE_URL;
-  delete cleanEnv.NEGOTIUM_PEER_SESSION_BRIDGE_TOKEN;
-  delete cleanEnv.CLAUDECODE;
-  cleanEnv.CLAUDE_CODE_STREAM_CLOSE_TIMEOUT ??= process.env.PADDLEOCR_TIMEOUT_MS ?? "300000";
-  cleanEnv.CLAUDE_CODE_DISABLE_WORKFLOWS = "1";
-  const queryOptions = {
-    ...claudeExecutable ? { pathToClaudeCodeExecutable: claudeExecutable } : {},
-    spawnClaudeCodeProcess: spawnClaudeCodeProcessWithTreeKill,
-    cwd: opts.cwd,
-    permissionMode: "bypassPermissions",
-    allowDangerouslySkipPermissions: true,
-    includePartialMessages: true,
-    env: cleanEnv,
-    mcpServers: hostedMcpServers(opts),
-    abortController: opts.abortController,
-    disallowedTools: buildClaudeDisallowedTools(opts.disallowedTools),
-    ...opts.model ? { model: opts.model } : {},
-    ...opts.maxBudgetUsd ? { maxBudgetUsd: opts.maxBudgetUsd } : {},
-    ...opts.agents ? {
-      agents: Object.fromEntries(Object.entries(opts.agents).map(([name, def]) => {
-        const { effort, ...rest } = def;
-        const narrowed = typeof effort === "string" ? toClaudeEffort(effort) : effort;
-        return [name, narrowed !== undefined ? { ...rest, effort: narrowed } : rest];
-      }))
-    } : {},
-    ...toClaudeEffort(opts.effort) ? { effort: toClaudeEffort(opts.effort) } : {},
-    hooks: {
-      PreToolUse: [
-        {
-          hooks: [
-            async (input) => {
-              const { tool_name, tool_input } = input;
-              if (referencesHostedSecretStorage(tool_input)) {
-                return {
-                  hookSpecificOutput: {
-                    hookEventName: "PreToolUse",
-                    permissionDecision: "deny",
-                    permissionDecisionReason: "Runtime secret storage access is not permitted"
-                  }
-                };
-              }
-              if (tool_name === "Bash" && tool_input?.run_in_background === true) {
-                return {
-                  hookSpecificOutput: {
-                    hookEventName: "PreToolUse",
-                    permissionDecision: "deny",
-                    permissionDecisionReason: "run_in_background is not supported in headless mode \u2014 the bash process dies when the agent turn ends. Use mcp__background-bash__background_bash_run instead: it survives across turns and automatically injects the result into the session when done."
-                  }
-                };
-              }
-              const userId = opts.userId ?? "";
-              if (!shouldRedirectHostedVaultTool(userId, tool_name, tool_input)) {
-                return { continue: true };
-              }
-              return {
-                hookSpecificOutput: {
-                  hookEventName: "PreToolUse",
-                  permissionDecision: "deny",
-                  permissionDecisionReason: VAULT_BROKER_REDIRECT_ERROR
-                }
-              };
-            }
-          ]
-        }
-      ],
-      PostToolUse: [
-        {
-          hooks: [
-            async (input) => {
-              const { tool_response } = input;
-              const userId = opts.userId ?? "";
-              const redacted = deepMapStrings(tool_response, (value) => redactHostedSecrets(userId, value));
-              if (JSON.stringify(redacted) === JSON.stringify(tool_response)) {
-                return { continue: true };
-              }
-              return {
-                hookSpecificOutput: {
-                  hookEventName: "PostToolUse",
-                  updatedToolOutput: redacted
-                }
-              };
-            }
-          ]
-        }
-      ]
-    },
-    settingSources: ["project"],
-    settings: {
-      disableWorkflows: true,
-      workflowKeywordTriggerEnabled: false
-    },
-    systemPrompt: opts.systemPrompt
-  };
-  if (opts.sessionId) {
-    queryOptions.resume = opts.sessionId;
-  }
-  const THINKING_BEAT_MS = 5000;
-  let thinkingStart = null;
-  let lastThinkingBeat = 0;
-  let lastContextTokens;
-  let lastContextModel;
-  const thinkingBeat = () => {
-    const now = Date.now();
-    if (thinkingStart === null) {
-      thinkingStart = now;
-      lastThinkingBeat = now;
-      return { type: "tool_progress", toolName: "thinking", elapsed: 0 };
-    }
-    if (now - lastThinkingBeat < THINKING_BEAT_MS)
-      return null;
-    lastThinkingBeat = now;
-    return { type: "tool_progress", toolName: "thinking", elapsed: (now - thinkingStart) / 1000 };
-  };
-  try {
-    const prompt = buildClaudePrompt(opts);
-    for await (const message of query({
-      prompt,
-      options: queryOptions
-    })) {
-      if (message.type === "system" && message.subtype === "thinking_tokens") {
-        const beat = thinkingBeat();
-        if (beat)
-          yield beat;
-        continue;
-      }
-      if (message.type === "stream_event") {
-        const streamMsg = message;
-        const evt = streamMsg.event;
-        if (!evt)
-          continue;
-        if (evt.type === "content_block_delta") {
-          const delta = evt;
-          if (delta.delta.type === "thinking_delta") {
-            const beat = thinkingBeat();
-            if (beat)
-              yield beat;
-          } else if (delta.delta.type === "text_delta" && delta.delta.text) {
-            thinkingStart = null;
-          } else {
-            thinkingStart = null;
-          }
-        }
-        continue;
-      }
-      thinkingStart = null;
-      if (message.type === "tool_progress") {
-        const m = message;
-        yield {
-          type: "tool_progress",
-          toolName: m.tool_name,
-          elapsed: m.elapsed_time_seconds
-        };
-        continue;
-      }
-      if (message.type === "tool_use_summary") {
-        const m = message;
-        yield { type: "tool_use_summary", summary: m.summary };
-        continue;
-      }
-      if (message.type === "system") {
-        const m = message;
-        if (m.subtype === "init") {
-          yield { type: "session", sessionId: m.session_id };
-        } else if (m.subtype === "task_started") {
-          const t = m;
-          if (t.subagent_type && !t.skip_transcript) {
-            const desc = t.description ? ` ${t.description.slice(0, 60)}` : "";
-            yield { type: "status", content: `\u25B6 [${t.subagent_type}]${desc}` };
-          }
-        } else {
-          logger.debug({ subtype: m.subtype, msg: m }, "claudeProvider: system message (unhandled subtype)");
-        }
-        continue;
-      }
-      if (message.type === "result") {
-        const m = message;
-        if (m.subtype === "success") {
-          const contextWindow = (lastContextModel ? m.modelUsage?.[lastContextModel]?.contextWindow : undefined) ?? Object.values(m.modelUsage ?? {})[0]?.contextWindow;
-          yield {
-            type: "result",
-            content: m.result,
-            stopReason: m.stop_reason ?? "end_turn",
-            usage: m.usage ? {
-              inputTokens: m.usage.input_tokens,
-              outputTokens: m.usage.output_tokens,
-              cacheCreationInputTokens: m.usage.cache_creation_input_tokens ?? undefined,
-              cacheReadInputTokens: m.usage.cache_read_input_tokens ?? undefined,
-              costUsd: m.total_cost_usd,
-              ...lastContextTokens !== undefined && contextWindow ? { contextTokens: lastContextTokens, contextWindow } : {}
-            } : undefined
-          };
-          yield* extractFileEvents(m.result, "result");
-          return;
-        }
-        const budgetExceeded = m.subtype === "error_max_budget_usd";
-        const errorMsg = budgetExceeded ? "The job reached its cost limit" : m.errors?.join("; ") || "Unknown error";
-        yield {
-          type: "error",
-          content: errorMsg,
-          ...budgetExceeded ? { code: "budget_exceeded" } : {},
-          ...m.usage ? {
-            usage: {
-              inputTokens: m.usage.input_tokens,
-              outputTokens: m.usage.output_tokens,
-              cacheCreationInputTokens: m.usage.cache_creation_input_tokens ?? undefined,
-              cacheReadInputTokens: m.usage.cache_read_input_tokens ?? undefined,
-              costUsd: m.total_cost_usd
-            }
-          } : {}
-        };
-        return;
-      }
-      if (message.type === "assistant") {
-        const m = message;
-        const content = m.message?.content ?? [];
-        const usage = m.message?.usage;
-        if (usage) {
-          lastContextTokens = (usage.input_tokens ?? 0) + (usage.cache_creation_input_tokens ?? 0) + (usage.cache_read_input_tokens ?? 0) + (usage.output_tokens ?? 0);
-          lastContextModel = m.message.model;
-        }
-        for (const block of content) {
-          if (block.type === "text") {
-            const textBlock = block;
-            yield { type: "text", content: textBlock.text };
-            yield* extractFileEvents(textBlock.text, "text");
-          } else if (block.type === "tool_use") {
-            const tb = block;
-            yield {
-              type: "tool_use",
-              name: tb.name,
-              input: tb.input || {},
-              toolUseId: tb.id
-            };
-          }
-        }
-        continue;
-      }
-      if (message.type === "user") {
-        const um = message;
-        if ("isReplay" in um && um.isReplay)
-          continue;
-        const content = um.message?.content;
-        if (!Array.isArray(content))
-          continue;
-        for (const block of content) {
-          if (block.type !== "tool_result")
-            continue;
-          const trBlock = block;
-          const trContent = typeof trBlock.content === "string" ? trBlock.content.slice(0, 200) : "";
-          yield {
-            type: "tool_result",
-            toolUseId: trBlock.tool_use_id || "",
-            content: trContent
-          };
-        }
-      }
-    }
-  } catch (e) {
-    if (isAbortError(e) || opts.abortController?.signal.aborted)
-      return;
-    logger.error({ err: e }, "claudeProvider: SDK iteration failed");
-    yield { type: "error", content: errMsg(e) };
-  }
-}
-
-// ../../packages/core/src/agents/codex-provider.ts
-import { existsSync as existsSync3 } from "fs";
-import { Codex } from "@openai/codex-sdk";
-
-// ../../packages/core/src/agents/codex-native-multi-agent.ts
-import { spawn as spawn2 } from "child_process";
+  getRegistry
+} from "./chunk-nqdp52aj.js";
 import {
-  chmodSync as chmodSync2,
-  existsSync as existsSync2,
-  readFileSync as readFileSync2,
-  renameSync,
-  unlinkSync,
-  writeFileSync
-} from "fs";
-import { createRequire } from "module";
-import { dirname, join as join2 } from "path";
-var NEGOTIUM_MODEL_CATALOG = "negotium-model-catalog.json";
-var moduleRequire = createRequire(import.meta.url);
-function codexCliScriptPath() {
-  const sdkPackagePath = moduleRequire.resolve("@openai/codex-sdk/package.json");
-  const sdkRequire = createRequire(sdkPackagePath);
-  return join2(dirname(sdkRequire.resolve("@openai/codex/package.json")), "bin", "codex.js");
-}
-async function bootstrapCodexModelCache(codexHome, cachePath) {
-  const child = spawn2(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
-    env: { ...process.env, CODEX_HOME: codexHome },
-    stdio: ["pipe", "pipe", "pipe"]
-  });
-  await new Promise((resolve2, reject) => {
-    let settled = false;
-    let stdoutBuffer = "";
-    let stderr = "";
-    const timer = setTimeout(() => finish(new Error("timed out while refreshing the Codex model catalog")), 15000);
-    const finish = (error) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      try {
-        child.stdin.end();
-        child.kill();
-      } catch {}
-      if (error)
-        reject(error);
-      else if (!existsSync2(cachePath))
-        reject(new Error("Codex did not create its model cache"));
-      else
-        resolve2();
-    };
-    const send = (message) => {
-      child.stdin.write(`${JSON.stringify(message)}
-`);
-    };
-    child.stderr.on("data", (chunk) => {
-      if (stderr.length < 4096)
-        stderr += String(chunk);
-    });
-    child.on("error", (error) => finish(error));
-    child.on("exit", (code, signal) => {
-      if (!settled) {
-        finish(new Error(`Codex model catalog refresh exited with ${signal ? `signal ${signal}` : `code ${code ?? 1}`}${stderr.trim() ? `: ${stderr.trim()}` : ""}`));
-      }
-    });
-    child.stdout.on("data", (chunk) => {
-      stdoutBuffer += String(chunk);
-      for (;; ) {
-        const newline = stdoutBuffer.indexOf(`
-`);
-        if (newline < 0)
-          break;
-        const line = stdoutBuffer.slice(0, newline);
-        stdoutBuffer = stdoutBuffer.slice(newline + 1);
-        let message;
-        try {
-          message = JSON.parse(line);
-        } catch {
-          continue;
-        }
-        if (message.id === 1) {
-          if (message.error) {
-            finish(new Error(message.error.message || "Codex initialization failed"));
-            return;
-          }
-          send({ method: "initialized" });
-          send({ id: 2, method: "model/list", params: { includeHidden: true } });
-        } else if (message.id === 2) {
-          if (message.error) {
-            finish(new Error(message.error.message || "Codex model listing failed"));
-          } else {
-            finish();
-          }
-          return;
-        }
-      }
-    });
-    send({
-      id: 1,
-      method: "initialize",
-      params: {
-        clientInfo: { name: "negotium", version: NEGOTIUM_VERSION },
-        capabilities: { experimentalApi: true }
-      }
-    });
-  });
-}
-async function ensureCodexModelCache(authFilePath, bootstrap = bootstrapCodexModelCache) {
-  const codexHome = dirname(authFilePath);
-  const cachePath = process.env.NEGOTIUM_CODEX_MODELS_CACHE_FILE ?? join2(codexHome, "models_cache.json");
-  const hardenedCatalogPath = join2(codexHome, NEGOTIUM_MODEL_CATALOG);
-  if (existsSync2(cachePath) || existsSync2(hardenedCatalogPath))
-    return;
-  if (process.env.NEGOTIUM_CODEX_MODELS_CACHE_FILE) {
-    throw new Error(`Configured Codex model cache does not exist: ${cachePath}`);
-  }
-  await bootstrap(codexHome, cachePath);
-}
-function writeCodexCatalogWithNativeMultiAgentDisabled(authFilePath) {
-  const codexHome = dirname(authFilePath);
-  const sourcePath = process.env.NEGOTIUM_CODEX_MODELS_CACHE_FILE ?? (existsSync2(join2(codexHome, "models_cache.json")) ? join2(codexHome, "models_cache.json") : join2(codexHome, NEGOTIUM_MODEL_CATALOG));
-  const outputPath = join2(codexHome, NEGOTIUM_MODEL_CATALOG);
-  const parsed = JSON.parse(readFileSync2(sourcePath, "utf8"));
-  if (!Array.isArray(parsed.models) || parsed.models.length === 0) {
-    throw new Error(`Codex model cache has no models: ${sourcePath}`);
-  }
-  const models = parsed.models.map((model, index) => {
-    if (!model || typeof model !== "object" || Array.isArray(model)) {
-      throw new Error(`Codex model cache entry ${index} is invalid: ${sourcePath}`);
-    }
-    return { ...model, multi_agent_version: "disabled" };
-  });
-  const contents = `${JSON.stringify({ models }, null, 2)}
-`;
-  if (existsSync2(outputPath) && readFileSync2(outputPath, "utf8") === contents) {
-    return outputPath;
-  }
-  const tempPath = `${outputPath}.${process.pid}.${Date.now()}.tmp`;
-  try {
-    writeFileSync(tempPath, contents, { encoding: "utf8", mode: 384 });
-    renameSync(tempPath, outputPath);
-    chmodSync2(outputPath, 384);
-  } finally {
-    try {
-      unlinkSync(tempPath);
-    } catch {}
-  }
-  return outputPath;
-}
-
-// ../../packages/core/src/agents/codex-provider.ts
-function mapEffort(effort) {
-  if (!effort)
-    return;
-  if (effort === "max" || effort === "minimal") {
-    throw new Error(`codexProvider received effort='${effort}', which codex does not support \u2014 storage validation was bypassed`);
-  }
-  return effort;
-}
-var CODEX_MCP_SERVER_NAME_OVERRIDES = {
-  playwright: "otium_playwright"
-};
-function codexMcpServerName(name) {
-  return CODEX_MCP_SERVER_NAME_OVERRIDES[name] ?? name;
-}
-function parsePositiveInt(value, fallback) {
-  if (!value)
-    return fallback;
-  const parsed = Number.parseInt(value, 10);
-  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
-}
-function withCodexMcpServerOverrides(name, server) {
-  if (name === "paddleocr") {
-    return {
-      ...server,
-      startup_timeout_sec: parsePositiveInt(process.env.PADDLEOCR_MCP_STARTUP_TIMEOUT_SEC, 30),
-      tool_timeout_sec: parsePositiveInt(process.env.PADDLEOCR_MCP_TOOL_TIMEOUT_SEC, 300)
-    };
-  }
-  return {
-    startup_timeout_sec: parsePositiveInt(process.env.CODEX_MCP_STARTUP_TIMEOUT_SEC, 30),
-    ...server
-  };
-}
-function toCodexMcpServers(claudeShape) {
-  const disabledBrowserStdio = () => ({
-    command: process.execPath,
-    args: ["-e", "process.exit(0)"],
-    enabled: false
-  });
-  const out = {
-    playwright: disabledBrowserStdio(),
-    "browser-rs": disabledBrowserStdio(),
-    patchright: disabledBrowserStdio()
-  };
-  for (const [name, srv] of Object.entries(claudeShape)) {
-    if (!srv || typeof srv !== "object")
-      continue;
-    const s = srv;
-    const codexName = codexMcpServerName(name);
-    if (typeof s.command === "string") {
-      out[codexName] = withCodexMcpServerOverrides(name, {
-        command: s.command,
-        ...Array.isArray(s.args) ? { args: s.args } : {},
-        ...s.env && typeof s.env === "object" ? { env: s.env } : {}
-      });
-      continue;
-    }
-    if (typeof s.url === "string" && s.type !== "sse") {
-      out[codexName] = withCodexMcpServerOverrides(name, {
-        url: s.url,
-        ...s.http_headers && typeof s.http_headers === "object" ? { http_headers: s.http_headers } : {},
-        ...s.env_http_headers && typeof s.env_http_headers === "object" ? { env_http_headers: s.env_http_headers } : {}
-      });
-    }
-  }
-  return out;
-}
-function isMissingCodexRolloutError(err) {
-  const msg = errMsg(err);
-  return /no rollout found|thread\/resume failed/i.test(msg);
-}
-function summarizeMcpToolCallResult(item) {
-  if (item.error)
-    return item.error.message.slice(0, 200);
-  if (!item.result)
-    return "";
-  const blocks = Array.isArray(item.result.content) ? item.result.content : [];
-  const text = blocks.map((b) => {
-    if (b && typeof b === "object" && "type" in b && b.type === "text" && "text" in b) {
-      return String(b.text ?? "");
-    }
-    return "";
-  }).filter(Boolean).join(`
-`);
-  if (text)
-    return text.slice(0, 200);
-  return JSON.stringify(item.result.structured_content ?? "").slice(0, 200);
-}
-function fileChangeEvents(item) {
-  return item.changes.flatMap((change, index) => {
-    const name = change.kind === "add" ? "Write" : change.kind === "delete" ? "Delete" : "Edit";
-    const toolUseId = `${item.id}:${index}`;
-    const success = item.status === "completed";
-    return [
-      {
-        type: "tool_use",
-        name,
-        input: { file_path: change.path, change_kind: change.kind },
-        toolUseId
-      },
-      {
-        type: "tool_result",
-        toolUseId,
-        content: success ? `${change.kind} applied: ${change.path}` : `${change.kind} failed: ${change.path}`
-      }
-    ];
-  });
-}
-function promptForThread(opts, includeSystemPrompt) {
-  return includeSystemPrompt && opts.systemPrompt ? `[System Instructions]
-${opts.systemPrompt}
-
-${opts.prompt}` : opts.prompt;
-}
-async function closeIterator(iter) {
-  try {
-    await iter.return?.();
-  } catch (err) {
-    logger.warn({ err }, "codexProvider: failed to close codex event iterator");
-  }
-}
-var CODEX_STARTUP_TIMEOUT_MS = 90000;
-async function startStreamedWithTracking(thread, prompt, abortSignal, trackedPids) {
-  const release = await acquireCodexSpawnLock();
-  try {
-    const baseline = snapshotCodexChildren();
-    const runResult = await thread.runStreamed(prompt, {
-      ...abortSignal ? { signal: abortSignal } : {}
-    });
-    const iter = runResult.events[Symbol.asyncIterator]();
-    let first;
-    let startupTimer;
-    try {
-      const startupTimeout = new Promise((_, reject) => {
-        startupTimer = setTimeout(() => reject(new Error(`Codex\uAC00 ${CODEX_STARTUP_TIMEOUT_MS / 1000}\uCD08 \uB0B4 \uC751\uB2F5\uC744 \uC2DC\uC791\uD558\uC9C0 \uC54A\uC544 \uC911\uB2E8\uD588\uC2B5\uB2C8\uB2E4. \uB2E4\uC2DC \uC2DC\uB3C4\uD574\uC8FC\uC138\uC694.`)), CODEX_STARTUP_TIMEOUT_MS);
-      });
-      const nextP = iter.next();
-      nextP.catch(() => {});
-      first = await Promise.race([nextP, startupTimeout]);
-    } catch (err) {
-      const novel2 = findNewCodexChildren(baseline);
-      if (novel2.length > 0) {
-        killCodexTrees(novel2);
-      }
-      await closeIterator(iter);
-      throw err;
-    } finally {
-      if (startupTimer)
-        clearTimeout(startupTimer);
-    }
-    const novel = findNewCodexChildren(baseline);
-    trackedPids.pids = novel;
-    registerOwnedCodexPids(novel);
-    return { iter, firstEvent: first.value, done: !!first.done };
-  } finally {
-    release();
-  }
-}
-function prependFirstEvent(iter, firstEvent, alreadyDone) {
-  return {
-    [Symbol.asyncIterator]() {
-      let emittedFirst = false;
-      let exhausted = alreadyDone;
-      return {
-        async next() {
-          if (!emittedFirst) {
-            emittedFirst = true;
-            if (alreadyDone)
-              return { value: undefined, done: true };
-            return { value: firstEvent, done: false };
-          }
-          if (exhausted)
-            return { value: undefined, done: true };
-          const r = await iter.next();
-          if (r.done)
-            exhausted = true;
-          return r;
-        },
-        async return(value) {
-          exhausted = true;
-          if (iter.return)
-            return iter.return(value);
-          return { value, done: true };
-        }
-      };
-    }
-  };
-}
-async function* codexProvider(opts) {
-  const codexAuthPath = hostedCodexAuthFilePath();
-  if (!existsSync3(codexAuthPath)) {
-    yield {
-      type: "error",
-      content: `Codex auth file not found at ${codexAuthPath}. Run \`codex login\` to authenticate.`
-    };
-    return;
-  }
-  let codexModelCatalogPath;
-  try {
-    await ensureCodexModelCache(codexAuthPath);
-    codexModelCatalogPath = writeCodexCatalogWithNativeMultiAgentDisabled(codexAuthPath);
-    if (opts.sessionId)
-      migrateCodexRolloutNativeMultiAgentMetadata(opts.sessionId);
-  } catch (err) {
-    yield {
-      type: "error",
-      content: `Failed to enforce the Codex native multi-agent policy: ${errMsg(err)}`
-    };
-    return;
-  }
-  const codexMcpServers = toCodexMcpServers(hostedMcpServers(opts));
-  const browserOwner = browserOwnerForContext(opts);
-  const scopedBrowserCapability = opts.playwrightCapability && browserOwner ? browserOwnerCapability(opts.playwrightCapability, browserOwner) : undefined;
-  logger.info({
-    model: opts.model ?? "(sdk default)",
-    effort: opts.effort ?? "(off)",
-    cwd: opts.cwd,
-    cwdExists: existsSync3(opts.cwd),
-    resume: Boolean(opts.sessionId),
-    mcpServerCount: Object.keys(codexMcpServers).length
-  }, "codexProvider: starting turn");
-  const codex = new Codex({
-    ...scopedBrowserCapability ? {
-      env: {
-        ...Object.fromEntries(Object.entries(process.env).filter((entry) => typeof entry[1] === "string")),
-        [CODEX_BROWSER_CAPABILITY_ENV]: scopedBrowserCapability
-      }
-    } : {},
-    config: {
-      features: { multi_agent: false, multi_agent_v2: false, enable_fanout: false },
-      model_catalog_json: codexModelCatalogPath,
-      mcp_servers: codexMcpServers
-    }
-  });
-  const threadOptions = {
-    workingDirectory: opts.cwd,
-    skipGitRepoCheck: true,
-    sandboxMode: "danger-full-access",
-    approvalPolicy: "never",
-    ...opts.model ? { model: opts.model } : {},
-    ...opts.effort ? { modelReasoningEffort: mapEffort(opts.effort) } : {}
-  };
-  let currentSessionId = opts.sessionId;
-  let thread = currentSessionId ? codex.resumeThread(currentSessionId, threadOptions) : codex.startThread(threadOptions);
-  let prompt = promptForThread(opts, true);
-  let agentTextSoFar = "";
-  let currentAgentMessageId;
-  let finalText = "";
-  let stopReason = "end_turn";
-  const trackedPids = { pids: [] };
-  const abortSignal = opts.abortController?.signal;
-  const onAbortKill = () => {
-    if (trackedPids.pids.length > 0) {
-      killCodexTrees(trackedPids.pids);
-    }
-  };
-  abortSignal?.addEventListener("abort", onAbortKill, { once: true });
-  let heartbeatMs = 8 * 60 * 1000;
-  let heartbeatAttempts = 0;
-  const HEARTBEAT_MAX_MS = 16 * 60 * 1000;
-  const HEARTBEAT_MAX_ATTEMPTS = 2;
-  const HEARTBEAT_CONTINUATION = "\uACC4\uC18D \uC9C4\uD589\uD574\uC918.";
-  try {
-    while (true) {
-      if (abortSignal?.aborted)
-        return;
-      const attemptAbort = new AbortController;
-      const propagateOuter = () => attemptAbort.abort();
-      abortSignal?.addEventListener("abort", propagateOuter, { once: true });
-      trackedPids.pids = [];
-      let heartbeatTriggered = false;
-      let attemptCompleted = false;
-      let heartbeatTimer = null;
-      const scheduleHeartbeat = () => {
-        if (heartbeatTimer !== null)
-          clearTimeout(heartbeatTimer);
-        if (abortSignal?.aborted || attemptAbort.signal.aborted)
-          return;
-        heartbeatTimer = setTimeout(() => {
-          heartbeatTriggered = true;
-          if (trackedPids.pids.length > 0)
-            killCodexTrees(trackedPids.pids);
-          attemptAbort.abort();
-        }, heartbeatMs);
-      };
-      try {
-        scheduleHeartbeat();
-        let startResult;
-        try {
-          startResult = await startStreamedWithTracking(thread, prompt, attemptAbort.signal, trackedPids);
-        } catch (err) {
-          if (err instanceof Error && err.name === "AbortError")
-            throw err;
-          if (!currentSessionId || !isMissingCodexRolloutError(err))
-            throw err;
-          logger.warn({ staleSessionId: currentSessionId, err: errMsg(err) }, "codexProvider: stale/missing rollout, restarting fresh thread");
-          thread = codex.startThread(threadOptions);
-          prompt = promptForThread(opts, true);
-          currentSessionId = undefined;
-          startResult = await startStreamedWithTracking(thread, prompt, attemptAbort.signal, trackedPids);
-        }
-        if (attemptAbort.signal.aborted) {
-          killCodexTrees(trackedPids.pids);
-          await closeIterator(startResult.iter);
-          throw Object.assign(new Error("heartbeat abort"), { name: "AbortError" });
-        }
-        const eventStream = prependFirstEvent(startResult.iter, startResult.firstEvent, startResult.done);
-        for await (const rawEvent of eventStream) {
-          scheduleHeartbeat();
-          const event = rawEvent;
-          switch (event.type) {
-            case "thread.started": {
-              if (event.thread_id) {
-                currentSessionId = event.thread_id;
-                yield { type: "session", sessionId: event.thread_id };
-              }
-              break;
-            }
-            case "item.started": {
-              const item = event.item;
-              if (!item)
-                break;
-              if (item.type === "command_execution") {
-                yield {
-                  type: "tool_use",
-                  name: "Bash",
-                  input: { command: String(item.command ?? "") },
-                  toolUseId: String(item.id ?? "")
-                };
-              } else if (item.type === "mcp_tool_call") {
-                yield {
-                  type: "tool_use",
-                  name: String(item.tool ?? "unknown"),
-                  input: item.arguments && typeof item.arguments === "object" ? item.arguments : {},
-                  toolUseId: String(item.id ?? "")
-                };
-              }
-              break;
-            }
-            case "item.updated": {
-              const item = event.item;
-              if (!item)
-                break;
-              if (item.type === "agent_message") {
-                const messageId = item.id != null ? String(item.id) : undefined;
-                if (messageId !== currentAgentMessageId) {
-                  currentAgentMessageId = messageId;
-                  agentTextSoFar = "";
-                }
-                const text = String(item.text ?? "");
-                const newChars = text.slice(agentTextSoFar.length);
-                if (newChars) {
-                  yield { type: "text_delta", content: newChars };
-                  agentTextSoFar = text;
-                }
-              }
-              break;
-            }
-            case "item.completed": {
-              const item = event.item;
-              if (!item)
-                break;
-              if (item.type === "agent_message") {
-                finalText = String(item.text ?? "");
-                agentTextSoFar = finalText;
-                yield { type: "text", content: finalText };
-                yield* extractFileEvents(finalText, "text");
-              } else if (item.type === "reasoning") {
-                const reasoning = String(item.text ?? "").trim();
-                if (reasoning)
-                  yield { type: "reasoning", content: reasoning };
-              } else if (item.type === "mcp_tool_call") {
-                yield {
-                  type: "tool_result",
-                  toolUseId: String(item.id ?? ""),
-                  content: summarizeMcpToolCallResult(item)
-                };
-              } else if (item.type === "command_execution") {
-                yield {
-                  type: "tool_result",
-                  toolUseId: String(item.id ?? ""),
-                  content: String(item.aggregated_output ?? "").slice(0, 200)
-                };
-              } else if (item.type === "file_change") {
-                for (const fileEvent of fileChangeEvents(item)) {
-                  yield fileEvent;
-                }
-              } else if (item.type === "error") {
-                yield { type: "error", content: String(item.message ?? "") };
-              }
-              break;
-            }
-            case "turn.completed": {
-              const usage = event.usage;
-              if (!usage)
-                break;
-              attemptCompleted = true;
-              const contextUsage = currentSessionId ? readLatestCodexContextUsage(currentSessionId) : undefined;
-              yield {
-                type: "result",
-                content: finalText,
-                stopReason,
-                usage: {
-                  inputTokens: usage.input_tokens,
-                  outputTokens: usage.output_tokens,
-                  cacheReadInputTokens: usage.cached_input_tokens,
-                  ...contextUsage
-                }
-              };
-              if (finalText)
-                yield* extractFileEvents(finalText, "result");
-              break;
-            }
-            case "turn.failed": {
-              stopReason = "error";
-              yield {
-                type: "error",
-                content: event.error?.message || "Codex turn failed"
-              };
-              break;
-            }
-            default:
-              break;
-          }
-        }
-      } catch (err) {
-        if (abortSignal?.aborted)
-          return;
-        if (err instanceof Error && err.name === "AbortError") {
-          if (!heartbeatTriggered)
-            return;
-        } else {
-          logger.error({ err }, "codexProvider: attempt failed");
-          yield { type: "error", content: errMsg(err) };
-          break;
-        }
-      } finally {
-        if (heartbeatTimer !== null)
-          clearTimeout(heartbeatTimer);
-        abortSignal?.removeEventListener("abort", propagateOuter);
-        if (trackedPids.pids.length > 0)
-          unregisterOwnedCodexPids(trackedPids.pids);
-      }
-      if (attemptCompleted || abortSignal?.aborted)
-        break;
-      if (!heartbeatTriggered)
-        break;
-      heartbeatAttempts++;
-      if (heartbeatAttempts > HEARTBEAT_MAX_ATTEMPTS) {
-        logger.warn({ attempts: heartbeatAttempts }, "codexProvider: max heartbeat attempts reached");
-        yield {
-          type: "error",
-          content: `Codex\uAC00 ${HEARTBEAT_MAX_ATTEMPTS}\uD68C \uC7AC\uC2DC\uB3C4 \uD6C4\uC5D0\uB3C4 \uC751\uB2F5\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.`
-        };
-        break;
-      }
-      heartbeatMs = Math.min(heartbeatMs * 2, HEARTBEAT_MAX_MS);
-      logger.info({ attempt: heartbeatAttempts, nextIntervalMs: heartbeatMs }, "codexProvider: heartbeat fired, resuming thread with continuation prompt");
-      agentTextSoFar = "";
-      finalText = "";
-      thread = currentSessionId ? codex.resumeThread(currentSessionId, threadOptions) : codex.startThread(threadOptions);
-      prompt = currentSessionId ? HEARTBEAT_CONTINUATION : promptForThread(opts, true);
-    }
-  } catch (err) {
-    if (err instanceof Error && err.name === "AbortError")
-      return;
-    if (abortSignal?.aborted)
-      return;
-    logger.error({ err }, "codexProvider: setup failed");
-    yield { type: "error", content: errMsg(err) };
-  } finally {
-    abortSignal?.removeEventListener("abort", onAbortKill);
-    if (trackedPids.pids.length > 0)
-      unregisterOwnedCodexPids(trackedPids.pids);
-  }
-}
+  appendConversationEvent,
+  readConversation,
+  sanitizeFileName,
+  sanitizeTopicName
+} from "./chunk-mhty3nna.js";
+import {
+  claudeProvider,
+  codexProvider,
+  maestroProvider
+} from "./chunk-n0kk5xbq.js";
+import {
+  encodeClaudeCwd
+} from "./chunk-2dgkah1z.js";
+import {
+  TOPIC_MAINTENANCE_STALE_MS,
+  TURN_LEASE_STALE_MS,
+  getRoomQuery,
+  getRuntimeTopicEpoch
+} from "./chunk-efyxk97v.js";
+import {
+  db
+} from "./chunk-1msje2zf.js";
+import {
+  AGENTS_PROMPTS_DIR,
+  BACKGROUND_BASH_SERVER,
+  BG_BASH_BASE_PORT,
+  BG_BASH_MAX_PORT,
+  DATA_DIR,
+  PROJECT_ROOT,
+  RESOURCES_DIR,
+  SHARED_WIKI_DIR,
+  USERS_LOG_DIR,
+  WORKSPACE_DIR,
+  isAgentKind,
+  logger
+} from "./chunk-k9z47mab.js";
+import {
+  __require,
+  __toESM
+} from "./chunk-hwy3n31w.js";
 
-// ../../packages/core/src/agents/maestro-provider.ts
-import { maestroProvider as sdkMaestroProvider, setMcpResolver } from "maestro-agent-sdk";
-var MAESTRO_DEFAULT_MAX_TOKENS = 32768;
-var PROVIDER_ASK_USER_TOOL = "AskUserQuestion";
-var PROVIDER_SUBAGENT_TOOL = "Agent";
-var MAESTRO_NATIVE_TASK_TOOLS = [
-  "TaskCreate",
-  "TaskUpdate",
-  "TaskList",
-  "TaskGet",
-  "TaskOutput",
-  "TaskStop"
-];
-var MAESTRO_PROVIDER_OWNED_TOOL_SET = new Set([
-  PROVIDER_ASK_USER_TOOL,
-  PROVIDER_SUBAGENT_TOOL,
-  ...MAESTRO_NATIVE_TASK_TOOLS
-]);
-var DEFAULT_MAESTRO_DISALLOWED_TOOLS = [
-  PROVIDER_ASK_USER_TOOL,
-  PROVIDER_SUBAGENT_TOOL,
-  ...MAESTRO_NATIVE_TASK_TOOLS
-];
-function buildMaestroDisallowedTools(callerDisallowedTools = []) {
-  return [...new Set([...DEFAULT_MAESTRO_DISALLOWED_TOOLS, ...callerDisallowedTools])];
-}
-function buildVaultHook(userId) {
-  return {
-    name: "vault-guard",
-    pre({ toolName, input }) {
-      if (referencesHostedSecretStorage(input)) {
-        return { decision: "block", error: "Runtime secret storage access is not permitted" };
-      }
-      if (shouldRedirectHostedVaultTool(userId, toolName, input)) {
-        return { decision: "block", error: VAULT_BROKER_REDIRECT_ERROR };
-      }
-      return { decision: "allow" };
-    },
-    post({ output }) {
-      const redacted = redactHostedSecrets(userId, output);
-      return redacted === output ? {} : { output: redacted };
-    }
-  };
-}
-function buildMaestroToolHooks(userId) {
-  return [buildVaultHook(userId), buildProviderOwnedToolBlockHook()];
-}
-function providerOwnedToolRedirect(toolName) {
-  if (toolName === PROVIDER_ASK_USER_TOOL) {
-    return "Use the runtime ask_user_question MCP tool instead.";
-  }
-  if (toolName === PROVIDER_SUBAGENT_TOOL) {
-    return "Use the runtime spawn_subagent MCP tool instead.";
-  }
-  return "Use the shared task MCP tools instead " + "(mcp__task__task_create / task_update / task_list / task_get / task_delete).";
-}
-function buildProviderOwnedToolBlockHook() {
-  return {
-    name: "provider-owned-tool-redirect",
-    pre({ toolName }) {
-      if (!MAESTRO_PROVIDER_OWNED_TOOL_SET.has(toolName))
-        return { decision: "allow" };
-      return {
-        decision: "block",
-        error: `${toolName} is disabled in this environment. ${providerOwnedToolRedirect(toolName)}`
-      };
-    }
-  };
-}
-function maestroProvider(opts) {
-  if (opts.agent !== undefined && opts.agent !== "maestro") {
-    throw new Error(`maestroProvider: unexpected agent "${opts.agent}", expected "maestro"`);
-  }
-  const userId = opts.userId ?? "";
-  setMcpResolver(hostedMcpServers);
-  const callerDisallowedTools = opts.disallowedTools ?? [];
-  const callerToolHooks = opts.toolHooks ?? [];
-  const sdkOpts = {
-    enableBackgroundBash: false,
-    maxTokens: MAESTRO_DEFAULT_MAX_TOKENS,
-    enableToolSearch: true,
-    ...opts,
-    agent: "maestro",
-    disallowedTools: buildMaestroDisallowedTools(callerDisallowedTools),
-    toolHooks: [...buildMaestroToolHooks(userId), ...callerToolHooks]
-  };
-  return sdkMaestroProvider(sdkOpts);
-}
+// ../../packages/core/src/agents/index.ts
+import { existsSync as existsSync2 } from "fs";
+import { homedir } from "os";
+import { join as join2 } from "path";
 
 // ../../packages/core/src/storage/tasks.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync as renameSync2, statSync, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname2, join as join3 } from "path";
+import { existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
 function safeUserIdComponent(userId) {
   const str = String(userId);
   if (!str || /[/\\]|\.\./.test(str)) {
@@ -2432,14 +85,14 @@ function taskScopeKey(opts) {
   return opts.topicId?.trim() || opts.session || "default";
 }
 function getTaskFilePath(userId, scopeKey) {
-  return join3(DATA_DIR, "tasks", safeUserIdComponent(userId), `${safeTaskScopeKey(scopeKey)}.json`);
+  return join(DATA_DIR, "tasks", safeUserIdComponent(userId), `${safeTaskScopeKey(scopeKey)}.json`);
 }
 function readTasks(userId, scopeKey) {
   const path = getTaskFilePath(userId, scopeKey);
-  if (!existsSync4(path))
+  if (!existsSync(path))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync3(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync(path, "utf-8"));
     return Array.isArray(parsed?.tasks) ? parsed.tasks : [];
   } catch (e) {
     logger.warn({ err: e, path }, "tasks: failed to read task store");
@@ -2515,11 +168,11 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
   switch (agent) {
     case "claude": {
       const encodedCwd = encodeClaudeCwd(cwd);
-      const path = join4(homedir(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
-      return !existsSync5(path);
+      const path = join2(homedir(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
+      return !existsSync2(path);
     }
     case "codex": {
-      const sessionsDir = join4(process.env.CODEX_HOME || join4(homedir(), ".codex"), "sessions");
+      const sessionsDir = join2(process.env.CODEX_HOME || join2(homedir(), ".codex"), "sessions");
       const glob = new Bun.Glob(`**/rollout-*-${sessionId}.jsonl`);
       for await (const _rel of glob.scan({ cwd: sessionsDir, onlyFiles: true })) {
         return false;
@@ -2527,8 +180,8 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
       return true;
     }
     case "maestro": {
-      const path = join4(homedir(), ".maestro", "sessions", `${sessionId}.jsonl`);
-      return !existsSync5(path);
+      const path = join2(homedir(), ".maestro", "sessions", `${sessionId}.jsonl`);
+      return !existsSync2(path);
     }
     default: {
       const _exhaustive = agent;
@@ -2592,12 +245,12 @@ function errorResult(text) {
 }
 
 // ../../packages/core/src/prompts/builders.ts
-import { readFileSync as readFileSync4 } from "fs";
-import { resolve as resolve2 } from "path";
-var PROMPTS_DIR = resolve2(PROJECT_ROOT, "src/prompts");
-var SESSIONS_DIR = resolve2(PROMPTS_DIR, "sessions");
+import { readFileSync as readFileSync2 } from "fs";
+import { resolve } from "path";
+var PROMPTS_DIR = resolve(PROJECT_ROOT, "src/prompts");
+var SESSIONS_DIR = resolve(PROMPTS_DIR, "sessions");
 function loadPrompt(filename, dir = SESSIONS_DIR) {
-  const raw = readFileSync4(resolve2(dir, filename), "utf-8");
+  const raw = readFileSync2(resolve(dir, filename), "utf-8");
   return raw.replace(/\{\{RESOURCES_DIR\}\}/g, RESOURCES_DIR);
 }
 function replaceVars(template, vars) {
@@ -2669,7 +322,7 @@ function visualDesignGuide() {
   return _visualDesignGuide;
 }
 function loadAgentPrompt(filename) {
-  const raw = readFileSync4(resolve2(AGENTS_PROMPTS_DIR, filename), "utf-8");
+  const raw = readFileSync2(resolve(AGENTS_PROMPTS_DIR, filename), "utf-8");
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match)
     throw new Error(`Agent prompt ${filename} is missing frontmatter`);
@@ -2700,7 +353,7 @@ function loadAgentPrompt(filename) {
     prompt: match[2].trim()
   };
 }
-function buildRuntimeToolSection(agentKind, canSpawnSubagents = false) {
+function buildRuntimeToolSection(agentKind, canSpawnSubagents = false, visualTools = false) {
   const runtimeNamespace = "mcp__runtime";
   const taskNamespace = "mcp__task";
   const visualToolLine = agentKind === "codex" ? `To display charts, tables, or interactive HTML results to the user, call the \`show_html\` function in the \`${runtimeNamespace}\` namespace with { html: "<complete HTML string>", title?: "optional title" }.` : `To display charts, tables, or interactive HTML results to the user, call the MCP tool "${runtimeNamespace}__show_html" with { html: "<complete HTML string>", title?: "optional title" }.`;
@@ -2720,19 +373,22 @@ function buildRuntimeToolSection(agentKind, canSpawnSubagents = false) {
     "Use it for parallelizable or long-running side work; keep quick inline work in this room."
   ] : [];
   const nativeTaskPolicyLine = agentKind === "claude" ? `Do not use provider-native todo/task/subagent tools such as "TodoWrite", "Task", "Agent", "TaskCreate", "TaskUpdate", "TaskList", "TaskOutput", or "TaskStop"; they are disabled or not shared across agents.${canSpawnSubagents ? " For delegation, use the runtime spawn_subagent tool instead." : ""}` : agentKind === "maestro" ? `Do not use provider-native task-store tools such as "TaskCreate", "TaskUpdate", "TaskList", "TaskGet", "TaskOutput", or "TaskStop"; they are disabled or not shared across agents. Do not use the Maestro "Agent" sub-agent tool either; it is disabled.${canSpawnSubagents ? " Use the runtime spawn_subagent tool for delegation so work is visible in its own room and the result returns here automatically." : " Delegation is unavailable in this room."}` : 'Do not use provider-native todo/plan surfaces such as "todo_list" or "update_plan"; they are ignored or not shared across agents.';
-  const shared = [
-    "",
-    "",
-    "## Runtime Tools",
+  const visualSection = visualTools ? [
     visualToolLine,
     mermaidToolLine,
     mediaToolLine,
     'Do not call a bare "show_html"; use the exposed visuals MCP tool. A successful call means the card was shown in the user chat.',
-    "Visual HTML runs in a sandbox. Use inline CSS/JS only; local buttons, tabs, filters, forms with preventDefault, canvas, and SVG interactions are supported. External navigation, scripts, network fetches, form posts, popups, and parent-window access are blocked.",
+    "Visual HTML runs in a sandbox. Use inline CSS/JS only; local buttons, tabs, filters, forms with preventDefault, canvas, and SVG interactions are supported. External navigation, scripts, network fetches, form posts, popups, and parent-window access are blocked."
+  ] : [];
+  const shared = [
+    "",
+    "",
+    "## Runtime Tools",
+    ...visualSection,
     askUserToolLine,
     'Do not use provider built-in "AskUserQuestion"; it is disabled or unsupported in this headless chat runtime. Use the runtime ask_user_question tool instead.',
     scheduleSelfToolLine,
-    ...visualDesignGuide() ? ["", visualDesignGuide()] : [],
+    ...visualTools ? ["", visualDesignGuide()] : [],
     "",
     "## Shared Tasks",
     taskToolLine,
@@ -2788,7 +444,7 @@ function buildTopicSystemPrompt(opts) {
     TOPIC_TITLE: opts.topicTitle,
     WORKSPACE_CWD: opts.workspaceCwd,
     UPLOADS_DIR: uploadsDir
-  }) + buildRuntimeToolSection(opts.agentKind, opts.canSpawnSubagents);
+  }) + buildRuntimeToolSection(opts.agentKind, opts.canSpawnSubagents, opts.visualTools);
   if (opts.description?.trim()) {
     prompt += `
 
@@ -2804,7 +460,7 @@ function buildChannelSystemPrompt(opts) {
     TOPIC_TITLE: opts.topicTitle,
     WORKSPACE_CWD: opts.workspaceCwd,
     UPLOADS_DIR: uploadsDir
-  }) + buildRuntimeToolSection(opts.agentKind);
+  }) + buildRuntimeToolSection(opts.agentKind, false, opts.visualTools);
 }
 function buildManagerSystemPrompt(opts) {
   return `${buildTopicSystemPrompt(opts)}
@@ -2883,9 +539,9 @@ function deleteTopicBrief(topicId) {
 }
 
 // ../../packages/core/src/storage/wiki.ts
-import { basename, dirname as dirname3, join as join5 } from "path";
+import { basename, dirname as dirname2, join as join3 } from "path";
 function getSharedWikiDir(workspaceDir = WORKSPACE_DIR) {
-  return workspaceDir === WORKSPACE_DIR ? SHARED_WIKI_DIR : join5(workspaceDir, "wiki");
+  return workspaceDir === WORKSPACE_DIR ? SHARED_WIKI_DIR : join3(workspaceDir, "wiki");
 }
 
 // ../../packages/core/src/storage/wiki-summary-names.ts
@@ -2904,8 +560,8 @@ function wikiSummaryFilename(date, rawTopic, topicId) {
 
 // ../../packages/core/src/agents/archiver.ts
 import { randomUUID } from "crypto";
-import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync5, statSync as statSync2 } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
+import { join as join4 } from "path";
 var MAX_BRIEF_ENTRIES = 8;
 var MIN_ARCHIVE_MESSAGES = 4;
 var MAX_SESSION_STEPS = 20;
@@ -3072,17 +728,17 @@ function distillOneLine(summaryMd) {
   return "";
 }
 function findSummaryFile(topicTitle, date, sinceMs, topicId) {
-  const dir = join6(getSharedWikiDir(), "summaries");
-  if (!existsSync6(dir))
+  const dir = join4(getSharedWikiDir(), "summaries");
+  if (!existsSync3(dir))
     return null;
-  const predicted = join6(dir, wikiSummaryFilename(date, topicTitle, topicId));
-  if (existsSync6(predicted))
+  const predicted = join4(dir, wikiSummaryFilename(date, topicTitle, topicId));
+  if (existsSync3(predicted))
     return predicted;
   let best = null;
   for (const f of readdirSync(dir)) {
     if (!f.endsWith(".md"))
       continue;
-    const p = join6(dir, f);
+    const p = join4(dir, f);
     try {
       const m = statSync2(p).mtimeMs;
       if (m >= sinceMs && (!best || m > best.mtime))
@@ -3096,7 +752,7 @@ function finalizeGeneralMemory(userId, topicTitle, messageCount, startMs, ok, to
   const date = new Date().toISOString().slice(0, 10);
   try {
     const summaryPath = ok ? findSummaryFile(topicTitle, date, startMs, topicId) : null;
-    const summaryMd = summaryPath ? readFileSync5(summaryPath, "utf-8") : "";
+    const summaryMd = summaryPath ? readFileSync3(summaryPath, "utf-8") : "";
     const oneLine = summaryMd && distillOneLine(summaryMd) || `${messageCount}\uAC1C \uBA54\uC2DC\uC9C0 \uC544\uCE74\uC774\uBE0C`;
     const prev = getTopicBrief(generalTopicId);
     const prevEntries = (prev?.briefMd ?? "").split(`
@@ -3145,8 +801,8 @@ ${rolled.join(`
 }
 
 // ../../packages/core/src/storage/topic-archive.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join5 } from "path";
 
 // ../../packages/core/src/storage/topic-transcript.ts
 function parseJsonField(value) {
@@ -3210,22 +866,22 @@ function archiveTopicMessages(topicId, topicTitle, options = {}) {
   if (rows.length === 0)
     return null;
   const safeTopic = sanitizeTopicName(topicTitle, true);
-  const archiveDir = join7(getSharedWikiDir(), "archive");
-  mkdirSync3(archiveDir, { recursive: true });
+  const archiveDir = join5(getSharedWikiDir(), "archive");
+  mkdirSync2(archiveDir, { recursive: true });
   const date = new Date().toISOString().slice(0, 10);
   const reasonSuffix = options.reason === "idle" ? "_idle" : "";
   let filename = `${safeTopic}_${date}${reasonSuffix}.jsonl`;
   let counter = 1;
-  while (existsSync7(join7(archiveDir, filename))) {
+  while (existsSync4(join5(archiveDir, filename))) {
     counter++;
     filename = `${safeTopic}_${date}${reasonSuffix}_${counter}.jsonl`;
   }
-  const path = join7(archiveDir, filename);
+  const path = join5(archiveDir, filename);
   const lastRowid = rows.reduce((max, row) => Math.max(max, row.rowid ?? 0), 0);
   const body = `${rows.map((r, index) => JSON.stringify(formatTopicArchiveTranscriptRecord(r, topicTitle, index + 1))).join(`
 `)}
 `;
-  writeFileSync3(path, body);
+  writeFileSync2(path, body);
   logger.info({ topicId, topicTitle, archive: path, messageCount: rows.length, lastRowid }, "archiveTopicMessages: archived topic messages");
   return { path, messageCount: rows.length, lastRowid };
 }
@@ -3362,7 +1018,7 @@ function runIdleArchiveForTopic(topicId, userId) {
 }
 
 // ../../packages/core/src/platform/background-bash/manager.ts
-import { execFileSync as execFileSync2, spawn as spawn3 } from "child_process";
+import { execFileSync, spawn } from "child_process";
 function makeBgBashKey(_userId, topic) {
   return `topic:${topic}`;
 }
@@ -3371,7 +1027,7 @@ var usedPorts = new Set;
 var spawning = new Map;
 function pidsOnPort(port) {
   try {
-    return execFileSync2("lsof", ["-i", `:${port}`, "-t"], { stdio: "pipe" }).toString().trim().split(`
+    return execFileSync("lsof", ["-i", `:${port}`, "-t"], { stdio: "pipe" }).toString().trim().split(`
 `).map((pid) => parseInt(pid, 10)).filter((pid) => !Number.isNaN(pid));
   } catch {
     return [];
@@ -3382,7 +1038,7 @@ function isPortInUse(port) {
 }
 function processCommand(pid) {
   try {
-    return execFileSync2("ps", ["-p", String(pid), "-o", "command="], { stdio: "pipe" }).toString().trim();
+    return execFileSync("ps", ["-p", String(pid), "-o", "command="], { stdio: "pipe" }).toString().trim();
   } catch {
     return "";
   }
@@ -3447,7 +1103,7 @@ async function spawnBgBash(key, userId, topic, reservedPort) {
     `--topic=${topic}`,
     `--port=${port}`
   ];
-  const proc = spawn3("bun", serverArgs, {
+  const proc = spawn("bun", serverArgs, {
     stdio: "ignore",
     detached: false,
     env: { ...process.env }
@@ -3523,14 +1179,14 @@ async function killAllBgBash() {
   instances.clear();
   usedPorts.clear();
   const deadline = Date.now() + 3000;
-  await Promise.all(entries.map(([, inst]) => new Promise((resolve3) => {
+  await Promise.all(entries.map(([, inst]) => new Promise((resolve2) => {
     if (inst.process.exitCode !== null || inst.process.killed) {
-      resolve3();
+      resolve2();
       return;
     }
-    inst.process.once("exit", () => resolve3());
-    inst.process.once("error", () => resolve3());
-    const t = setTimeout(resolve3, Math.max(0, deadline - Date.now()));
+    inst.process.once("exit", () => resolve2());
+    inst.process.once("error", () => resolve2());
+    const t = setTimeout(resolve2, Math.max(0, deadline - Date.now()));
     t.unref?.();
   })));
 }
@@ -3550,29 +1206,29 @@ setInterval(() => {
 }, 30 * 60 * 1000).unref();
 
 // ../../packages/core/src/query/state.ts
-import { mkdirSync as mkdirSync4, readdirSync as readdirSync2, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "fs";
-import { join as join8 } from "path";
+import { mkdirSync as mkdirSync3, readdirSync as readdirSync2, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { join as join6 } from "path";
 function queryStateDirPath(userId) {
-  return join8(USERS_LOG_DIR, String(userId), "active-queries");
+  return join6(USERS_LOG_DIR, String(userId), "active-queries");
 }
 function queryStateFile(userId, topicName) {
   const name = `${topicName}.json`;
-  return join8(queryStateDirPath(userId), name);
+  return join6(queryStateDirPath(userId), name);
 }
 function writeQueryState(userId, topicName, task) {
   const dir = queryStateDirPath(userId);
-  mkdirSync4(dir, { recursive: true });
+  mkdirSync3(dir, { recursive: true });
   const state = { since: new Date().toISOString() };
   if (task)
     state.task = [...task.replace(/\n+/g, " ").trim()].slice(0, 100).join("");
   const target = queryStateFile(userId, topicName);
   const tmp = `${target}.${process.pid}.${Date.now()}.tmp`;
-  writeFileSync4(tmp, JSON.stringify(state));
-  renameSync3(tmp, target);
+  writeFileSync3(tmp, JSON.stringify(state));
+  renameSync2(tmp, target);
 }
 function clearQueryState(userId, topicName) {
   try {
-    unlinkSync2(queryStateFile(userId, topicName));
+    unlinkSync(queryStateFile(userId, topicName));
   } catch (e) {
     if (e?.code !== "ENOENT") {
       logger.warn({ err: e, userId, topicName }, "Failed to clear query state file");
@@ -4119,7 +1775,7 @@ async function notifyParent(watch, prompt, noteKind) {
     if (!parent)
       return;
     const requestId = `subagent-${noteKind}-${watch.childTopicId}`;
-    const { triggerTopicAiTurn } = await import("./chunk-rbrxjvbj.js");
+    const { triggerTopicAiTurn } = await import("./chunk-nmv41qx9.js");
     const queryId = parent.agent ? triggerTopicAiTurn(watch.parentTopicId, watch.userId, prompt, undefined, {
       origin: `subagent:${watch.name}`,
       requestId,
@@ -4127,7 +1783,7 @@ async function notifyParent(watch, prompt, noteKind) {
     }) : null;
     if (queryId)
       return;
-    const { interSessionQueue } = await import("./chunk-t9zcg8f1.js");
+    const { interSessionQueue } = await import("./chunk-efyxk97v.js");
     if (parent.agent && interSessionQueue.hasRequest(watch.parentTopicId, requestId)) {
       return;
     }
@@ -4216,13 +1872,13 @@ async function spawnSubagent(ctx, input) {
     }
   }
   if (modelOverride) {
-    const { getRegistry: getRegistry2 } = await import("./chunk-5ahkew9c.js");
+    const { getRegistry: getRegistry2 } = await import("./chunk-nqdp52aj.js");
     const targetAgent = agentOverride ?? ctx.agent;
     if (!getRegistry2(targetAgent).validateModel(modelOverride)) {
       return errorResult(`Error: model '${modelOverride}' is not valid for agent '${targetAgent}'.`);
     }
   }
-  const { createDerivedTopic, TopicTitleConflictError } = await import("./chunk-ghs2j1fr.js");
+  const { createDerivedTopic, TopicTitleConflictError } = await import("./chunk-h8vmb9gf.js");
   let child;
   try {
     child = await createDerivedTopic(ctx.topicId, ctx.userId, false, {
@@ -4276,8 +1932,8 @@ async function spawnSubagent(ctx, input) {
 
 ${task}`;
   {
-    const { triggerTopicAiTurn } = await import("./chunk-rbrxjvbj.js");
-    const { getRoomQuery: getRoomQuery2 } = await import("./chunk-t9zcg8f1.js");
+    const { triggerTopicAiTurn } = await import("./chunk-nmv41qx9.js");
+    const { getRoomQuery: getRoomQuery2 } = await import("./chunk-efyxk97v.js");
     childQueryId = triggerTopicAiTurn(child.id, ctx.userId, childPrompt, agentOverride, {
       origin: `subagent-task:${parent.title}`,
       requestId: `subagent-task-${child.id}`,
@@ -4366,7 +2022,7 @@ function createSubagentManagementToolDefinitions(ctx) {
           return errorResult("Error: no owned direct subagent with that topic_id exists under this room.");
         }
         try {
-          const { deleteTopicCascade } = await import("./chunk-sm6fh5c5.js");
+          const { deleteTopicCascade } = await import("./chunk-g7pvfj5e.js");
           await deleteTopicCascade(child, ctx.userId);
           return textResult(`Subagent deleted: ${child.title} (${child.id})`);
         } catch (err) {
@@ -4393,6 +2049,6 @@ function createSpawnSubagentToolDefinition(ctx) {
   };
 }
 
-export { killOwnedCodexTreesForShutdown, isSensitivePath, VAULT_VALUE_MIN_BYTES, VAULT_VALUE_MAX_BYTES, VAULT_DESCRIPTION_MAX_LENGTH, normalizeVaultKey, validateVaultKey, vaultListWithValues, vaultSet, vaultHasKey, vaultDel, vaultList, registerCanonicalMcpBridgeEnvProvider, RUNTIME_MCP_KEY, RUNTIME_MCP_BASE_PATH, setRuntimeMcpPort, getRuntimeMcpPort, issueRuntimeMcpToken, resolveRuntimeMcpToken, buildRuntimeMcpSpec, registerPeerSessionBridgeIpcConfig, buildStdioMcpServer, setPlaywrightUnavailableNotifier, markPlaywrightUnavailable, consumePlaywrightUnavailable, OPTIONAL_FORUM_MCP_SERVERS, registerRuntimeMcpServer, setNodeMcpServers, getNodeMcpServers, getMcpServersForQuery, extractFileEvents, extractFileTagPaths, stripFileTags, errMsg, NEGOTIUM_VERSION, runAgent, textResult, errorResult, buildTopicSystemPrompt, buildChannelSystemPrompt, buildManagerSystemPrompt, buildMemoryPromptSection, getTopicBrief, resolveTopicBrief, deleteTopicBrief, getSharedWikiDir, wikiSummaryFilename, listActiveMemoryArchiverSessions, runArchiverTurn, archiveTopicMessages, deleteTopicArchiveState, cancelIdleArchiveForTopic, scheduleIdleArchiveForTopic, ensureBgBash, killBgBash, killAllBgBash, writeQueryState, clearQueryState, fileHooks, setFileHooks, isUploadFileId, resolveAttachmentByFileId, resolveUploadedFilePathByFileId, storeLocalFileAsUpload, deleteFilesForTopic, nextUsageAlert, clearQueryUsageAlert, VISUAL_MEDIA_URL_PLACEHOLDER, normalizeVisualTitle, topicHasVisualFileId, storeTopicVisual, storeTopicMermaidVisual, storeTopicMediaVisual, getActiveVisualForPrompt, deleteTopicVisuals, topicVisualUrl, enqueueRuntimeUserTurnRequest, claimNextRuntimeUserTurnRequest, markRuntimeUserTurnRunning, releaseRuntimeUserTurnClaim, completeRuntimeUserTurnRequest, cancelRuntimeUserTurnRequestsBeforeEpoch, cancelRuntimeUserTurnRequests, getRuntimeUserTurnRequest, takeSubagentWatch, cancelSubagentWatchForDeletedTopic, settleSubagentSuccess, settleSubagentFailure, sweepStaleSubagentCards, createSubagentManagementToolDefinitions, createSpawnSubagentToolDefinition };
+export { runAgent, textResult, errorResult, buildTopicSystemPrompt, buildChannelSystemPrompt, buildManagerSystemPrompt, buildMemoryPromptSection, getTopicBrief, resolveTopicBrief, deleteTopicBrief, getSharedWikiDir, wikiSummaryFilename, listActiveMemoryArchiverSessions, runArchiverTurn, archiveTopicMessages, deleteTopicArchiveState, cancelIdleArchiveForTopic, scheduleIdleArchiveForTopic, ensureBgBash, killBgBash, killAllBgBash, writeQueryState, clearQueryState, fileHooks, setFileHooks, isUploadFileId, resolveAttachmentByFileId, resolveUploadedFilePathByFileId, storeLocalFileAsUpload, deleteFilesForTopic, nextUsageAlert, clearQueryUsageAlert, VISUAL_MEDIA_URL_PLACEHOLDER, normalizeVisualTitle, topicHasVisualFileId, storeTopicVisual, storeTopicMermaidVisual, storeTopicMediaVisual, getActiveVisualForPrompt, deleteTopicVisuals, topicVisualUrl, enqueueRuntimeUserTurnRequest, claimNextRuntimeUserTurnRequest, markRuntimeUserTurnRunning, releaseRuntimeUserTurnClaim, completeRuntimeUserTurnRequest, cancelRuntimeUserTurnRequestsBeforeEpoch, cancelRuntimeUserTurnRequests, getRuntimeUserTurnRequest, takeSubagentWatch, cancelSubagentWatchForDeletedTopic, settleSubagentSuccess, settleSubagentFailure, sweepStaleSubagentCards, createSubagentManagementToolDefinitions, createSpawnSubagentToolDefinition };
 
-//# debugId=C2F7B4AA8BBA82E564756E2164756E21
+//# debugId=7320042BFA69CF4F64756E2164756E21