negotium 0.16.4 → 0.17.0

package/dist/agent-helpers.js

@@ -19,11 +19,22 @@ var __require = import.meta.require;
 
 // ../../packages/core/src/platform/paths.ts
 import { existsSync, realpathSync } from "fs";
-import { isAbsolute, relative, resolve, sep } from "path";
+import { dirname, isAbsolute, relative, resolve, sep } from "path";
 function normalizeExistingOrResolved(filePath) {
   const resolved = resolve(filePath);
   try {
-    return existsSync(resolved) ? realpathSync(resolved) : resolved;
+    if (existsSync(resolved))
+      return realpathSync(resolved);
+    let ancestor = resolved;
+    for (;; ) {
+      const parent = dirname(ancestor);
+      if (parent === ancestor)
+        return resolved;
+      ancestor = parent;
+      if (existsSync(ancestor)) {
+        return resolve(realpathSync(ancestor), relative(ancestor, resolved));
+      }
+    }
   } catch {
     return resolved;
   }
@@ -186,7 +197,7 @@ import {
 } from "fs";
 import { createRequire } from "module";
 import { homedir } from "os";
-import { dirname, join, resolve as resolve3 } from "path";
+import { dirname as dirname2, join, resolve as resolve3 } from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 function envText(envKey) {
   return readEnvText(process.env, envKey);
@@ -197,7 +208,7 @@ function resolveStateDir() {
   return configured ? resolve3(configured) : resolve3(HOME, ".negotium");
 }
 function resolveProjectRoot() {
-  const moduleDir = dirname(fileURLToPath(import.meta.url));
+  const moduleDir = dirname2(fileURLToPath(import.meta.url));
   const packagedRuntime = resolve3(moduleDir, "runtime");
   if (existsSync2(resolve3(packagedRuntime, "src")))
     return packagedRuntime;
@@ -217,7 +228,7 @@ function resolveDependencyBin(name) {
       if (existsSync2(path))
         return path;
     }
-    const parent = dirname(dir);
+    const parent = dirname2(dir);
     if (parent === dir)
       return resolve3(binDir, name);
     dir = parent;
@@ -325,7 +336,7 @@ function resolveTopicWorkspaceDir(topicId) {
 function loadOrCreateLocalSecret(envKey, filename, options = {}) {
   const envValue = envText(envKey);
   const secretFile = resolve3(SECRETS_DIR, filename);
-  mkdirSync(dirname(secretFile), { recursive: true });
+  mkdirSync(dirname2(secretFile), { recursive: true });
   if (envValue) {
     if (options.persistEnvValue) {
       writeFileSync(secretFile, `${envValue}
@@ -1024,9 +1035,12 @@ function backgroundBashTransport(agent, port, userId, topic) {
 }
 function refreshForumCatalogViews() {
   const { all, required, optional } = classifyForumMcpServers(MCP_CATALOG);
-  allForumMcpServerNames.splice(0, allForumMcpServerNames.length, ...all);
+  const nodeNames = nodeMcpEntries.map((entry) => entry.key);
+  const allWithNodeEntries = [...new Set([...all, ...nodeNames])];
+  const optionalWithNodeEntries = [...new Set([...optional, ...nodeNames])];
+  allForumMcpServerNames.splice(0, allForumMcpServerNames.length, ...allWithNodeEntries);
   requiredForumMcpServers.splice(0, requiredForumMcpServers.length, ...required);
-  optionalForumMcpServers.splice(0, optionalForumMcpServers.length, ...optional);
+  optionalForumMcpServers.splice(0, optionalForumMcpServers.length, ...optionalWithNodeEntries);
 }
 function isReservedRuntimeMcpServerName(name) {
   return Object.hasOwn(MCP_CATALOG, name) || nodeMcpEntries.some((entry) => entry.key === name);
@@ -1041,12 +1055,22 @@ function mergeHostMcpServers(base, hostMcpServers) {
   }
   return { ...base, ...hostMcpServers };
 }
-function buildNodeMcpSpecs(agent, filter) {
+function buildNodeMcpSpecs(agent, filter, ctx) {
   const out = {};
   for (const entry of nodeMcpEntries) {
     if (!filter(entry.key))
       continue;
-    out[entry.key] = entry.kind === "http" ? longLivedHttpMcp(agent, entry.port) : {
+    if (entry.kind === "http") {
+      out[entry.key] = longLivedHttpMcp(agent, entry.port);
+      continue;
+    }
+    if (entry.kind === "http-instance") {
+      const port = resolvedNodeMcpPorts.get(entry)?.get(nodeMcpInstanceKey(ctx));
+      if (port !== undefined)
+        out[entry.key] = longLivedHttpMcp(agent, port);
+      continue;
+    }
+    out[entry.key] = {
       command: entry.command,
       args: entry.args ?? [],
       ...entry.env ? { env: entry.env } : {}
@@ -1054,6 +1078,42 @@ function buildNodeMcpSpecs(agent, filter) {
   }
   return out;
 }
+function nodeMcpInstanceKey(ctx) {
+  return ctx.topicId ?? `user:${ctx.userId}:session:${ctx.session}`;
+}
+async function prepareNodeMcpServersForQuery(opts) {
+  if (opts.toolPolicy || opts.sessionType === "cron" || nodeMcpEntries.every((entry) => entry.kind !== "http-instance")) {
+    return;
+  }
+  const forum = !["dm", "ephemeral", "manager"].includes(opts.sessionType ?? "forum");
+  const enabled = opts.mcpEnabled ?? null;
+  const instanceKey = nodeMcpInstanceKey({
+    topicId: opts.topicId,
+    userId: opts.userId || "local",
+    session: opts.session || "default"
+  });
+  await Promise.all(nodeMcpEntries.map(async (entry) => {
+    if (entry.kind !== "http-instance")
+      return;
+    if (forum && enabled !== null && !enabled.includes(entry.key))
+      return;
+    let ports = resolvedNodeMcpPorts.get(entry);
+    if (!ports) {
+      ports = new Map;
+      resolvedNodeMcpPorts.set(entry, ports);
+    }
+    try {
+      const port = await entry.ensurePort(instanceKey);
+      if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error(`invalid port ${port}`);
+      }
+      ports.set(instanceKey, port);
+    } catch (err) {
+      ports.delete(instanceKey);
+      logger.warn({ err, key: entry.key, instanceKey }, "node mcp: failed to prepare instance-scoped server");
+    }
+  }));
+}
 function buildScope(scope, ctx, filter = () => true) {
   const out = {};
   for (const [name, entry] of Object.entries(MCP_CATALOG)) {
@@ -1067,14 +1127,15 @@ function buildScope(scope, ctx, filter = () => true) {
     out[name] = spec;
   }
   if (scope !== "cron") {
-    Object.assign(out, buildNodeMcpSpecs(ctx.agent, filter));
+    Object.assign(out, buildNodeMcpSpecs(ctx.agent, filter, ctx));
   }
   return out;
 }
 function getDmMcpServers(opts) {
   return buildScope("dm", {
     userId: opts.userId,
-    session: "dm",
+    session: opts.session ?? "dm",
+    topicId: opts.topicId,
     agent: opts.agent,
     playwrightPort: opts.playwrightPort,
     playwrightCapability: opts.playwrightCapability
@@ -1211,6 +1272,8 @@ function getMcpServersForQuery(opts) {
   if (opts.sessionType === "dm" || opts.sessionType === "ephemeral") {
     return getDmMcpServers({
       userId: opts.userId || "local",
+      session: opts.session,
+      topicId: opts.topicId,
       agent: opts.agent,
       playwrightPort: opts.playwrightPort,
       playwrightCapability: opts.playwrightCapability
@@ -1262,7 +1325,7 @@ function getMcpServersForQuery(opts) {
     peerBridge: opts.peerBridge
   });
 }
-var _playwrightUnavailableNotifier, _playwrightUnavailableLastNotifiedAt, _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS, _playwrightUnavailableThisTurn, cuaRsMcpPort, cuaRsMcpToken, MCP_CATALOG, allForumMcpServerNames, requiredForumMcpServers, REQUIRED_FORUM_MCP_SERVERS, optionalForumMcpServers, nodeMcpEntries;
+var _playwrightUnavailableNotifier, _playwrightUnavailableLastNotifiedAt, _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS, _playwrightUnavailableThisTurn, cuaRsMcpPort, cuaRsMcpToken, MCP_CATALOG, nodeMcpEntries, resolvedNodeMcpPorts, allForumMcpServerNames, requiredForumMcpServers, REQUIRED_FORUM_MCP_SERVERS, optionalForumMcpServers;
 var init_mcp_config = __esm(() => {
   init_canonical_bridge_config();
   init_runtime_spec();
@@ -1316,7 +1379,8 @@ var init_mcp_config = __esm(() => {
         if (!topicId || !agent)
           return null;
         return buildRuntimeMcpSpec(agent, {
-          userId: actorUserId ?? userId,
+          userId,
+          ...actorUserId ? { actorUserId } : {},
           topicId,
           topicTitle: session,
           queryId,
@@ -1496,12 +1560,13 @@ var init_mcp_config = __esm(() => {
       }
     }
   };
+  nodeMcpEntries = [];
+  resolvedNodeMcpPorts = new WeakMap;
   allForumMcpServerNames = [];
   requiredForumMcpServers = [];
   REQUIRED_FORUM_MCP_SERVERS = requiredForumMcpServers;
   optionalForumMcpServers = [];
   refreshForumCatalogViews();
-  nodeMcpEntries = [];
 });
 
 // ../../packages/core/src/storage/sqlite.ts
@@ -1569,7 +1634,7 @@ var init_sqlite = __esm(async () => {
 // ../../packages/core/src/storage/storage-host.ts
 import { mkdirSync as mkdirSync2 } from "fs";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname2, join as join2, resolve as resolve4 } from "path";
+import { dirname as dirname3, join as join2, resolve as resolve4 } from "path";
 function storageState() {
   const holder = globalThis;
   const existing = holder[STORAGE_HOST_STATE];
@@ -1648,7 +1713,7 @@ function defaultDatabase() {
     return state.fallbackDatabase;
   if (state.fallbackDatabase)
     closeDatabase(state.fallbackDatabase);
-  mkdirSync2(dirname2(path), { recursive: true });
+  mkdirSync2(dirname3(path), { recursive: true });
   state.fallbackDatabase = new Database(path, { create: true });
   state.fallbackDatabasePath = path;
   initializeDatabase(state.fallbackDatabase);
@@ -1926,7 +1991,7 @@ var init_vault = __esm(async () => {
 
 // ../../packages/core/src/agents/execution-host.ts
 import { AsyncLocalStorage } from "async_hooks";
-import { dirname as dirname3 } from "path";
+import { dirname as dirname4 } from "path";
 function activeHost() {
   const scoped = scopedHost.getStore();
   if (scoped)
@@ -1961,7 +2026,7 @@ function hostedCodexAuthFilePath() {
   return activeHost().codexAuthFilePath();
 }
 function hostedCodexHomePath() {
-  return dirname3(hostedCodexAuthFilePath());
+  return dirname4(hostedCodexAuthFilePath());
 }
 var defaultHost, hostRegistrations, scopedHost;
 var init_execution_host = __esm(async () => {
@@ -2246,7 +2311,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync2
 } from "fs";
-import { dirname as dirname4 } from "path";
+import { dirname as dirname5 } from "path";
 function readJsonlLines(filePath) {
   return readFileSync2(filePath, "utf-8").trim().split(`
 `).filter(Boolean);
@@ -2287,7 +2352,7 @@ function appendJsonlEntry(filePath, entry) {
 `);
 }
 function appendJsonlLine(filePath, line) {
-  mkdirSync5(dirname4(filePath), { recursive: true });
+  mkdirSync5(dirname5(filePath), { recursive: true });
   const lockPath = `${filePath}${LOCK_SUFFIX}`;
   const payload = line.endsWith(`
 `) ? line : `${line}
@@ -2318,7 +2383,7 @@ function appendJsonlLine(filePath, line) {
   }
 }
 function writeJsonlFile(filePath, entries) {
-  const dir = dirname4(filePath);
+  const dir = dirname5(filePath);
   mkdirSync5(dir, { recursive: true });
   const tmpPath = `${filePath}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;
   const payload = `${entries.map((e) => JSON.stringify(e)).join(`
@@ -2586,7 +2651,7 @@ var init_claude_registry = __esm(() => {
 // ../../packages/core/src/agents/rollout/codex.ts
 import { randomBytes as randomBytes4 } from "crypto";
 import { existsSync as existsSync5, readFileSync as readFileSync4, realpathSync as realpathSync3, statSync as statSync2, unlinkSync as unlinkSync4 } from "fs";
-import { basename, dirname as dirname5, join as join6, resolve as resolve6 } from "path";
+import { basename, dirname as dirname6, join as join6, resolve as resolve6 } from "path";
 function codexSessionsDir() {
   return join6(hostedCodexHomePath(), "sessions");
 }
@@ -2669,7 +2734,7 @@ function canonicalFilePath(path) {
     return realpathSync3(absolute);
   } catch {
     try {
-      return join6(realpathSync3(dirname5(absolute)), basename(absolute));
+      return join6(realpathSync3(dirname6(absolute)), basename(absolute));
     } catch {
       return absolute;
     }
@@ -3118,7 +3183,7 @@ var init_codex = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.16.4";
+var NEGOTIUM_VERSION = "0.17.0";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -3136,7 +3201,7 @@ import {
 } from "fs";
 import { createRequire as createRequire2 } from "module";
 import { tmpdir } from "os";
-import { dirname as dirname6, join as join7 } from "path";
+import { dirname as dirname7, join as join7 } from "path";
 function readPackageVersion(packageJsonPath) {
   const parsed = JSON.parse(readFileSync5(packageJsonPath, "utf8"));
   if (typeof parsed.version !== "string" || !parsed.version.trim()) {
@@ -3145,7 +3210,7 @@ function readPackageVersion(packageJsonPath) {
   return parsed.version;
 }
 function codexCliScriptPath() {
-  return join7(dirname6(bundledCodexPackagePath), "bin", "codex.js");
+  return join7(dirname7(bundledCodexPackagePath), "bin", "codex.js");
 }
 function parseCodexModelCache(contents, sourcePath) {
   let parsed;
@@ -3186,7 +3251,7 @@ function writePrivateFileAtomic(path, contents) {
   }
 }
 function bundledCodexModelCachePath(authFilePath) {
-  return join7(dirname6(authFilePath), NEGOTIUM_MODEL_CACHE);
+  return join7(dirname7(authFilePath), NEGOTIUM_MODEL_CACHE);
 }
 async function bootstrapCodexModelCache(codexHome, cachePath) {
   const child = spawn2(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
@@ -3272,7 +3337,7 @@ async function bootstrapCodexModelCache(codexHome, cachePath) {
   });
 }
 async function bootstrapIsolatedCodexModelCache(authFilePath, bootstrap) {
-  const sourceHome = dirname6(authFilePath);
+  const sourceHome = dirname7(authFilePath);
   const isolatedHome = mkdtempSync(join7(tmpdir(), "negotium-codex-models-"));
   const isolatedCachePath = join7(isolatedHome, "models_cache.json");
   try {
@@ -3292,7 +3357,7 @@ async function bootstrapIsolatedCodexModelCache(authFilePath, bootstrap) {
   }
 }
 async function ensureCodexModelCache(authFilePath, bootstrap = bootstrapCodexModelCache) {
-  const codexHome = dirname6(authFilePath);
+  const codexHome = dirname7(authFilePath);
   const configuredCachePath = process.env.NEGOTIUM_CODEX_MODELS_CACHE_FILE;
   if (configuredCachePath) {
     if (!existsSync6(configuredCachePath)) {
@@ -3321,7 +3386,7 @@ async function ensureCodexModelCache(authFilePath, bootstrap = bootstrapCodexMod
   return bundledCachePath;
 }
 function writeCodexCatalogWithNativeMultiAgentDisabled(authFilePath, sourcePath) {
-  const codexHome = dirname6(authFilePath);
+  const codexHome = dirname7(authFilePath);
   const outputPath = join7(codexHome, NEGOTIUM_MODEL_CATALOG);
   const parsed = readCodexModelCache(sourcePath).parsed;
   const models = parsed.models.map((model, index) => {
@@ -3738,7 +3803,7 @@ function sanitizeId(id) {
 
 // ../../packages/core/src/storage/tasks.ts
 import { existsSync as existsSync9, mkdirSync as mkdirSync8, readFileSync as readFileSync7, renameSync as renameSync4, statSync as statSync3, writeFileSync as writeFileSync6 } from "fs";
-import { dirname as dirname7, join as join10 } from "path";
+import { dirname as dirname8, join as join10 } from "path";
 function safeTaskScopeKey(scopeKey) {
   const safe = sanitizeFileName(scopeKey);
   if (!safe || safe === "." || safe === "..") {
@@ -3850,7 +3915,7 @@ import {
   unlinkSync as unlinkSync7,
   writeFileSync as writeFileSync7
 } from "fs";
-import { dirname as dirname8, join as join11 } from "path";
+import { dirname as dirname9, join as join11 } from "path";
 function conversationDir(_userId) {
   return join11(resolveStorageDataDir(), "conversations");
 }
@@ -3888,7 +3953,7 @@ function appendConversationEventStrict(userId, topicName, agent, event) {
     event
   };
   const line = JSON.stringify(entry);
-  mkdirSync9(dirname8(path), { recursive: true });
+  mkdirSync9(dirname9(path), { recursive: true });
   appendJsonlLine(path, line);
   const activePath = getActiveConversationPath(userId, topicName);
   if (existsSync10(activePath)) {
@@ -3906,7 +3971,7 @@ function appendRawConversationEventStrict(userId, topicName, agent, event) {
     agent,
     event
   };
-  mkdirSync9(dirname8(path), { recursive: true });
+  mkdirSync9(dirname9(path), { recursive: true });
   appendJsonlLine(path, JSON.stringify(entry));
 }
 function readConversationPath(path) {
@@ -3947,7 +4012,7 @@ function replaceRawConversationStrict(userId, topicName, entries) {
 }
 function replaceConversationPathStrict(path, entries) {
   const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
-  mkdirSync9(dirname8(path), { recursive: true });
+  mkdirSync9(dirname9(path), { recursive: true });
   try {
     writeFileSync7(tempPath, entries.length > 0 ? `${entries.map((entry) => JSON.stringify(entry)).join(`
 `)}
@@ -4629,9 +4694,19 @@ var init_claude_provider = __esm(async () => {
     "ScheduleWakeup",
     "CronCreate",
     "CronList",
-    "CronDelete"
+    "CronDelete",
+    "RemoteTrigger"
+  ];
+  CLAUDE_NATIVE_AGENT_TOOLS = [
+    "Task",
+    "Agent",
+    "TaskOutput",
+    "TaskStop",
+    "ListAgents",
+    "SendMessage",
+    "TeamCreate",
+    "TeamDelete"
   ];
-  CLAUDE_NATIVE_AGENT_TOOLS = ["Task", "Agent", "TaskOutput", "TaskStop"];
   CLAUDE_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
   CLAUDE_IMAGE_MIME_TYPES = new Set([
     "image/jpeg",
@@ -4891,7 +4966,7 @@ import { existsSync as existsSync12 } from "fs";
 import { chmod, mkdtemp, rm, writeFile } from "fs/promises";
 import { createServer } from "net";
 import { tmpdir as tmpdir2 } from "os";
-import { dirname as dirname9, join as join12, resolve as resolve8 } from "path";
+import { dirname as dirname10, join as join12, resolve as resolve8 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function evaluateCodexVaultPreToolUse(input, userId, operations) {
   if (operations.referencesSensitiveStorage(input.tool_input)) {
@@ -4920,7 +4995,7 @@ function shellQuote(value) {
   return `'${value.replaceAll("'", `'"'"'`)}'`;
 }
 function hookClientPath() {
-  const moduleDir = dirname9(fileURLToPath2(import.meta.url));
+  const moduleDir = dirname10(fileURLToPath2(import.meta.url));
   const adjacent = resolve8(moduleDir, "codex-vault-hook.mjs");
   if (existsSync12(adjacent))
     return adjacent;
@@ -5569,7 +5644,7 @@ __export(exports_codex_provider, {
 import { execFileSync as execFileSync4 } from "child_process";
 import { existsSync as existsSync13, readFileSync as readFileSync11, realpathSync as realpathSync4, statSync as statSync5 } from "fs";
 import { homedir as homedir6 } from "os";
-import { dirname as dirname10, isAbsolute as isAbsolute3, join as join13, relative as relative2, resolve as resolve10 } from "path";
+import { dirname as dirname11, isAbsolute as isAbsolute3, join as join13, relative as relative2, resolve as resolve10 } from "path";
 import { Codex } from "@openai/codex-sdk";
 function sameCodexUsage(usage, total) {
   return usage.input_tokens === total.inputTokens && usage.output_tokens === total.outputTokens && (usage.cached_input_tokens ?? 0) === total.cachedInputTokens && (usage.cache_write_input_tokens ?? 0) === total.cacheWriteInputTokens;
@@ -5597,7 +5672,7 @@ function codexMcpServerName(name) {
   return CODEX_MCP_SERVER_NAME_OVERRIDES[name] ?? name;
 }
 function globalCodexMcpServerNames(authFilePath) {
-  const configPath = join13(dirname10(authFilePath), "config.toml");
+  const configPath = join13(dirname11(authFilePath), "config.toml");
   if (!existsSync13(configPath))
     return [];
   try {
@@ -5977,7 +6052,14 @@ async function* codexProvider(opts) {
     codexPathOverride: vaultHook.codexPathOverride,
     ...codexEnvironment ? { env: codexEnvironment } : {},
     config: {
-      features: { hooks: true, multi_agent: false, multi_agent_v2: false, enable_fanout: false },
+      agents: { enabled: false },
+      features: {
+        hooks: true,
+        goals: false,
+        multi_agent: false,
+        multi_agent_v2: false,
+        enable_fanout: false
+      },
       hooks: vaultHook.hooks,
       model_catalog_json: codexModelCatalogPath,
       mcp_servers: codexMcpServers,
@@ -6503,6 +6585,7 @@ async function* runAgent(opts) {
       return;
     }
   }
+  await prepareNodeMcpServersForQuery(dispatchOpts);
   const taskScope = resolveTaskEventScope(dispatchOpts);
   const stream = taskScope ? withTaskSnapshots(dispatchAgent(dispatchOpts), taskScope) : dispatchAgent(dispatchOpts);
   for await (const event of stream) {
@@ -6516,6 +6599,7 @@ var loadClaudeProvider, loadCodexProvider, loadMaestroProvider;
 var init_agents = __esm(async () => {
   init_claude();
   init_logger();
+  init_mcp_config();
   init_types();
   await __promiseAll([
     init_execution_host(),
@@ -7204,7 +7288,7 @@ function buildRuntimeToolSection(opts, extensions) {
     "A subagent starts fresh but inherits this room's agent, model, and effective topic memory; include all required context, paths, and acceptance criteria in `task`.",
     "Subagents run asynchronously. Choose one result path: `auto` returns the final body to the direct parent; `tell` requires child `tell_session` to its recipient and does not auto-return the body; `status-only` returns lifecycle without content. Runtime length alone does not justify `status-only`. Do not wait or poll; continue or finish the turn."
   ] : [];
-  const nativeTaskPolicyLine = agentKind === "claude" ? `Do not use provider-native todo/task/subagent tools such as "TodoWrite", "Task", "Agent", "TaskCreate", "TaskUpdate", "TaskList", "TaskOutput", or "TaskStop"; they are disabled or not shared across agents.${canSpawnSubagents ? " For delegation, use the runtime spawn_subagent tool instead." : ""}` : agentKind === "maestro" ? `Do not use provider-native task-store tools such as "TaskCreate", "TaskUpdate", "TaskList", "TaskGet", "TaskOutput", or "TaskStop"; they are disabled or not shared across agents. Do not use the Maestro "Agent" sub-agent tool either; it is disabled.${canSpawnSubagents ? " Use the runtime spawn_subagent tool for delegation so work is visible in its own room and reporting follows report_mode." : " Delegation is unavailable in this room."}` : 'Do not use provider-native todo/plan surfaces such as "todo_list" or "update_plan"; they are ignored or not shared across agents.';
+  const nativeTaskPolicyLine = agentKind === "claude" ? `Do not use provider-native todo/task/subagent tools such as "TodoWrite", "Task", "Agent", "TaskCreate", "TaskUpdate", "TaskList", "TaskOutput", or "TaskStop"; they are disabled or not shared across agents.${canSpawnSubagents ? " For delegation, use the runtime spawn_subagent tool instead." : ""}` : agentKind === "maestro" ? `Do not use provider-native task-store tools such as "TaskCreate", "TaskUpdate", "TaskList", "TaskGet", "TaskOutput", or "TaskStop"; they are disabled or not shared across agents. Do not use the Maestro "Agent" sub-agent tool either; it is disabled.${canSpawnSubagents ? " Use the runtime spawn_subagent tool for delegation so work is visible in its own room and reporting follows report_mode." : " Delegation is unavailable in this room."}` : 'Do not use provider-native goal/todo/plan surfaces such as "create_goal", "get_goal", "update_goal", "todo_list", or "update_plan"; they are disabled, ignored, or not shared across agents.';
   const visualSection = visualTools ? [
     visualToolLine,
     mermaidToolLine,
@@ -8482,7 +8566,7 @@ var init_api_topics = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/wiki.ts
-import { basename as basename3, dirname as dirname11, join as join15 } from "path";
+import { basename as basename3, dirname as dirname12, join as join15 } from "path";
 function getSharedWikiDir(workspaceDir = resolveStorageWorkspaceDir()) {
   return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join15(workspaceDir, "wiki");
 }
@@ -11725,11 +11809,11 @@ import {
   unlinkSync as unlinkSync11,
   writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname12, join as join20, resolve as resolve16 } from "path";
+import { dirname as dirname13, join as join20, resolve as resolve16 } from "path";
 function removeDefaultProfileDataDir(userDataDir) {
   const root = resolve16(BROWSER_PROFILES_DIR);
   const target = resolve16(userDataDir);
-  if (dirname12(target) !== root) {
+  if (dirname13(target) !== root) {
     throw new Error(`Refusing to delete browser profile outside managed root: ${target}`);
   }
   const existed = existsSync19(target);
@@ -12309,7 +12393,7 @@ async function cloneProfileForChild(opts) {
       if (existsSync19(dstDir)) {
         rmSync3(dstDir, { recursive: true, force: true });
       }
-      mkdirSync11(dirname12(dstDir), { recursive: true });
+      mkdirSync11(dirname13(dstDir), { recursive: true });
       if (process.platform === "darwin") {
         try {
           execFileSync7("cp", ["-cR", srcDir, dstDir], { stdio: "pipe" });
@@ -12910,7 +12994,7 @@ var init_idle_compact = __esm(async () => {
 
 // ../../packages/core/src/agents/topic-cleanup.ts
 import { mkdirSync as mkdirSync13, renameSync as renameSync6, unlinkSync as unlinkSync12, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname13 } from "path";
+import { dirname as dirname14 } from "path";
 function collectSessionIdsByAgent(entries, extraSessions = []) {
   const out = new Map;
   for (const e of entries) {
@@ -12976,7 +13060,7 @@ function createTopicLogMaintenance(host) {
       const path = runtimeHost.activeConversationPath(opts.userId, opts.topicName);
       const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
       try {
-        mkdirSync13(dirname13(path), { recursive: true });
+        mkdirSync13(dirname14(path), { recursive: true });
         writeFileSync11(tempPath, retained.length > 0 ? `${retained.map((entry) => JSON.stringify(entry)).join(`
 `)}
 ` : "", { flag: "wx" });
@@ -14843,7 +14927,7 @@ import {
   unlinkSync as unlinkSync16,
   writeFileSync as writeFileSync14
 } from "fs";
-import { dirname as dirname14, join as join27 } from "path";
+import { dirname as dirname15, join as join27 } from "path";
 function pendingAskDir(userId) {
   const rawUserId = String(userId);
   const safeUserId = /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..") ? rawUserId : `sha256-${createHash9("sha256").update(rawUserId).digest("hex")}`;
@@ -14866,7 +14950,7 @@ function legacyPendingAskPath(key) {
   }
   const dir = pendingAskDir(key.userId);
   const candidate = join27(dir, `${key.from}___${key.to}.pending`);
-  return dirname14(candidate) === dir ? candidate : null;
+  return dirname15(candidate) === dir ? candidate : null;
 }
 function parsePendingAskFilename(fileName) {
   if (!fileName.endsWith(".pending"))
@@ -17329,7 +17413,7 @@ var init_turn_session = __esm(async () => {
 
 // ../../packages/core/src/storage/app-settings.ts
 import { existsSync as existsSync20, mkdirSync as mkdirSync18, readFileSync as readFileSync17, writeFileSync as writeFileSync16 } from "fs";
-import { dirname as dirname15, join as join29 } from "path";
+import { dirname as dirname16, join as join29 } from "path";
 function settingsFile() {
   return join29(resolveStorageDataDir(), "otium-settings.json");
 }
@@ -20885,4 +20969,4 @@ export {
   DEFAULT_SELF_CONFIG_PRODUCT
 };
 
-//# debugId=0C381456723AA9D364756E2164756E21
+//# debugId=B662EA253049A7FE64756E2164756E21