negotium 0.19.2 → 0.20.1

package/dist/{chunk-exqz8bez.js → chunk-wpp1x0tx.js}

@@ -2,7 +2,7 @@
 import {
   hostedCodexHomePath,
   latestCodexRolloutPath
-} from "./chunk-cv7vdsrn.js";
+} from "./chunk-t7vs5k9t.js";
 
 // ../../packages/core/src/agents/codex-app-server.ts
 import { spawn } from "child_process";
@@ -23,7 +23,7 @@ import { createRequire } from "module";
 import { dirname, join } from "path";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.19.2";
+var NEGOTIUM_VERSION = "0.20.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 var moduleRequire = createRequire(import.meta.url);
@@ -158,4 +158,4 @@ export {
   createCodexAppServerForker
 };
 
-//# debugId=DB06C3E9D24463F764756E2164756E21
+//# debugId=C595D5173F5CFF9664756E2164756E21

package/dist/{chunk-exqz8bez.js.map → chunk-wpp1x0tx.js.map}

@@ -4,9 +4,9 @@
   "sourcesContent": [
     "import { type ChildProcessWithoutNullStreams, spawn } from \"node:child_process\";\nimport { codexCliScriptPath } from \"#agents/codex-native-multi-agent\";\nimport { hostedCodexHomePath } from \"#agents/execution-host\";\nimport { latestCodexRolloutPath } from \"#agents/rollout/codex\";\nimport { NEGOTIUM_VERSION } from \"#version\";\n\ninterface CodexAppServerForkResult {\n  forkId: string;\n  rolloutPath: string;\n}\n\ninterface CodexAppServerForkHost {\n  spawnServer(): ChildProcessWithoutNullStreams;\n  findRolloutPath(threadId: string): string | undefined;\n  timeoutMs: number;\n}\n\ntype JsonRpcResponse = {\n  id?: number;\n  result?: { thread?: { id?: unknown } };\n  error?: { message?: unknown };\n};\n\nexport function createCodexAppServerForker(host: CodexAppServerForkHost) {\n  return async (parentThreadId: string): Promise<CodexAppServerForkResult> => {\n    const child = host.spawnServer();\n\n    return await new Promise<CodexAppServerForkResult>((resolve, reject) => {\n      let settled = false;\n      let stdoutBuffer = \"\";\n      let stderr = \"\";\n      const timer = setTimeout(\n        () => finish(new Error(\"Codex thread fork timed out\")),\n        host.timeoutMs,\n      );\n\n      const finish = (error?: Error, result?: CodexAppServerForkResult) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        try {\n          child.stdin.end();\n          child.kill();\n        } catch {\n          // The app server may already have exited after stdin closed.\n        }\n        if (error) reject(error);\n        else if (result) resolve(result);\n        else reject(new Error(\"Codex thread fork returned no result\"));\n      };\n\n      const send = (message: Record<string, unknown>) => {\n        child.stdin.write(`${JSON.stringify(message)}\\n`);\n      };\n\n      child.stderr.on(\"data\", (chunk) => {\n        if (stderr.length < 8_192) stderr += String(chunk);\n      });\n      child.on(\"error\", (error) => finish(error));\n      child.on(\"exit\", (code, signal) => {\n        if (settled) return;\n        const detail = signal ? `signal ${signal}` : `code ${code ?? 1}`;\n        finish(\n          new Error(\n            `Codex app server exited with ${detail}${stderr.trim() ? `: ${stderr.trim()}` : \"\"}`,\n          ),\n        );\n      });\n      child.stdout.on(\"data\", (chunk) => {\n        stdoutBuffer += String(chunk);\n        for (;;) {\n          const newline = stdoutBuffer.indexOf(\"\\n\");\n          if (newline < 0) break;\n          const line = stdoutBuffer.slice(0, newline);\n          stdoutBuffer = stdoutBuffer.slice(newline + 1);\n          let message: JsonRpcResponse;\n          try {\n            message = JSON.parse(line) as JsonRpcResponse;\n          } catch {\n            continue;\n          }\n\n          if (message.id === 1) {\n            if (message.error) {\n              finish(new Error(String(message.error.message || \"Codex initialization failed\")));\n              return;\n            }\n            send({ method: \"initialized\" });\n            send({ id: 2, method: \"thread/fork\", params: { threadId: parentThreadId } });\n            continue;\n          }\n          if (message.id !== 2) continue;\n          if (message.error) {\n            finish(new Error(String(message.error.message || \"Codex thread fork failed\")));\n            return;\n          }\n          const forkId = message.result?.thread?.id;\n          if (typeof forkId !== \"string\" || !forkId) {\n            finish(new Error(\"Codex thread fork returned no thread id\"));\n            return;\n          }\n          const rolloutPath = host.findRolloutPath(forkId);\n          if (!rolloutPath) {\n            finish(new Error(`Codex thread fork rollout was not found for ${forkId}`));\n            return;\n          }\n          finish(undefined, { forkId, rolloutPath });\n          return;\n        }\n      });\n\n      send({\n        id: 1,\n        method: \"initialize\",\n        params: {\n          clientInfo: { name: \"negotium\", version: NEGOTIUM_VERSION },\n        },\n      });\n    });\n  };\n}\n\nconst forkCodexThread = createCodexAppServerForker({\n  spawnServer() {\n    return spawn(process.execPath, [codexCliScriptPath(), \"app-server\", \"--stdio\"], {\n      env: { ...process.env, CODEX_HOME: hostedCodexHomePath() },\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n      // Background stdio server — no console window on Windows. Ignored on POSIX.\n      windowsHide: true,\n    });\n  },\n  findRolloutPath: latestCodexRolloutPath,\n  timeoutMs: 15_000,\n});\n\nexport async function forkCodexSession(parentThreadId: string): Promise<CodexAppServerForkResult> {\n  return await forkCodexThread(parentThreadId);\n}\n",
     "import { type ChildProcess, spawn } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport {\n  chmodSync,\n  copyFileSync,\n  existsSync,\n  mkdtempSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { NEGOTIUM_VERSION } from \"#version\";\n\ntype CodexModel = Record<string, unknown>;\ntype CodexModelCache = {\n  client_version?: unknown;\n  models?: unknown;\n};\n\nconst moduleRequire = createRequire(import.meta.url);\nconst codexSdkPackagePath = moduleRequire.resolve(\"@openai/codex-sdk/package.json\");\nconst codexSdkRequire = createRequire(codexSdkPackagePath);\nconst bundledCodexPackagePath = codexSdkRequire.resolve(\"@openai/codex/package.json\");\n\nfunction readPackageVersion(packageJsonPath: string): string {\n  const parsed = JSON.parse(readFileSync(packageJsonPath, \"utf8\")) as { version?: unknown };\n  if (typeof parsed.version !== \"string\" || !parsed.version.trim()) {\n    throw new Error(`Codex package has no valid version: ${packageJsonPath}`);\n  }\n  return parsed.version;\n}\n\nexport const BUNDLED_CODEX_VERSION = readPackageVersion(bundledCodexPackagePath);\nconst SAFE_BUNDLED_CODEX_VERSION = BUNDLED_CODEX_VERSION.replace(/[^a-zA-Z0-9._-]/g, \"_\");\nconst NEGOTIUM_MODEL_CACHE = `negotium-models-cache-${SAFE_BUNDLED_CODEX_VERSION}.json`;\nconst NEGOTIUM_MODEL_CATALOG = `negotium-model-catalog-${SAFE_BUNDLED_CODEX_VERSION}.json`;\n\nexport function codexCliScriptPath(): string {\n  return join(dirname(bundledCodexPackagePath), \"bin\", \"codex.js\");\n}\n\nfunction parseCodexModelCache(contents: string, sourcePath: string): CodexModelCache {\n  let parsed: CodexModelCache;\n  try {\n    parsed = JSON.parse(contents) as CodexModelCache;\n  } catch (error) {\n    throw new Error(`Codex model cache is invalid JSON: ${sourcePath}`, { cause: error });\n  }\n  if (!Array.isArray(parsed.models) || parsed.models.length === 0) {\n    throw new Error(`Codex model cache has no models: ${sourcePath}`);\n  }\n  return parsed;\n}\n\nfunction readCodexModelCache(cachePath: string): {\n  contents: string;\n  parsed: CodexModelCache;\n} {\n  const contents = readFileSync(cachePath, \"utf8\");\n  return { contents, parsed: parseCodexModelCache(contents, cachePath) };\n}\n\nfunction readCompatibleCodexModelCache(cachePath: string): {\n  contents: string;\n  parsed: CodexModelCache;\n} {\n  const cache = readCodexModelCache(cachePath);\n  if (cache.parsed.client_version !== BUNDLED_CODEX_VERSION) {\n    const found =\n      typeof cache.parsed.client_version === \"string\"\n        ? cache.parsed.client_version\n        : \"missing or invalid\";\n    throw new Error(\n      `Codex model cache version ${found} does not match Negotium's bundled Codex ${BUNDLED_CODEX_VERSION}: ${cachePath}`,\n    );\n  }\n  return cache;\n}\n\nfunction writePrivateFileAtomic(path: string, contents: string): void {\n  if (existsSync(path) && readFileSync(path, \"utf8\") === contents) return;\n\n  const tempPath = `${path}.${process.pid}.${randomUUID()}.tmp`;\n  try {\n    writeFileSync(tempPath, contents, { encoding: \"utf8\", mode: 0o600 });\n    renameSync(tempPath, path);\n    chmodSync(path, 0o600);\n  } finally {\n    try {\n      unlinkSync(tempPath);\n    } catch {\n      // renameSync normally consumed the temporary file.\n    }\n  }\n}\n\nexport function bundledCodexModelCachePath(authFilePath: string): string {\n  return join(dirname(authFilePath), NEGOTIUM_MODEL_CACHE);\n}\n\nasync function bootstrapCodexModelCache(codexHome: string, cachePath: string): Promise<void> {\n  const child = spawn(process.execPath, [codexCliScriptPath(), \"app-server\", \"--stdio\"], {\n    env: { ...process.env, CODEX_HOME: codexHome },\n    stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    // Background stdio server — no console window on Windows. Ignored on POSIX.\n    windowsHide: true,\n  });\n\n  const refreshed = new Promise<void>((resolve, reject) => {\n    let settled = false;\n    let stdoutBuffer = \"\";\n    let stderr = \"\";\n    const timer = setTimeout(\n      () => finish(new Error(\"timed out while refreshing the Codex model catalog\")),\n      15_000,\n    );\n\n    const finish = (error?: Error) => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      try {\n        child.stdin.end();\n        child.kill();\n      } catch {\n        // The app server may already have exited after stdin closed.\n      }\n      if (error) reject(error);\n      else if (!existsSync(cachePath)) reject(new Error(\"Codex did not create its model cache\"));\n      else resolve();\n    };\n\n    const send = (message: Record<string, unknown>) => {\n      child.stdin.write(`${JSON.stringify(message)}\\n`);\n    };\n\n    child.stderr.on(\"data\", (chunk) => {\n      if (stderr.length < 4_096) stderr += String(chunk);\n    });\n    child.on(\"error\", (error) => finish(error));\n    child.on(\"exit\", (code, signal) => {\n      if (!settled) {\n        finish(\n          new Error(\n            `Codex model catalog refresh exited with ${signal ? `signal ${signal}` : `code ${code ?? 1}`}${stderr.trim() ? `: ${stderr.trim()}` : \"\"}`,\n          ),\n        );\n      }\n    });\n    child.stdout.on(\"data\", (chunk) => {\n      stdoutBuffer += String(chunk);\n      for (;;) {\n        const newline = stdoutBuffer.indexOf(\"\\n\");\n        if (newline < 0) break;\n        const line = stdoutBuffer.slice(0, newline);\n        stdoutBuffer = stdoutBuffer.slice(newline + 1);\n        let message: { id?: number; error?: { message?: string } };\n        try {\n          message = JSON.parse(line) as typeof message;\n        } catch {\n          continue;\n        }\n        if (message.id === 1) {\n          if (message.error) {\n            finish(new Error(message.error.message || \"Codex initialization failed\"));\n            return;\n          }\n          send({ method: \"initialized\" });\n          send({ id: 2, method: \"model/list\", params: { includeHidden: true } });\n        } else if (message.id === 2) {\n          if (message.error) {\n            finish(new Error(message.error.message || \"Codex model listing failed\"));\n          } else {\n            finish();\n          }\n          return;\n        }\n      }\n    });\n\n    send({\n      id: 1,\n      method: \"initialize\",\n      params: {\n        clientInfo: { name: \"negotium\", version: NEGOTIUM_VERSION },\n        capabilities: { experimentalApi: true },\n      },\n    });\n  });\n\n  try {\n    await refreshed;\n  } finally {\n    // `child.kill()` only signals. The caller deletes CODEX_HOME right after we\n    // return, and Windows cannot delete a directory the child still holds open\n    // (EBUSY), so wait for the process to actually exit first.\n    await waitForChildExit(child, CODEX_BOOTSTRAP_EXIT_WAIT_MS);\n  }\n}\n\nconst CODEX_BOOTSTRAP_EXIT_WAIT_MS = 3_000;\n\nfunction waitForChildExit(child: ChildProcess, timeoutMs: number): Promise<void> {\n  if (child.exitCode !== null || child.signalCode !== null) return Promise.resolve();\n  return new Promise((resolve) => {\n    const timer = setTimeout(resolve, timeoutMs);\n    timer.unref?.();\n    child.once(\"exit\", () => {\n      clearTimeout(timer);\n      resolve();\n    });\n  });\n}\n\n/**\n * Remove the temporary CODEX_HOME. On Windows a just-exited child (or an\n * antivirus scan of the files it wrote) can keep the directory busy for a\n * moment, so retry, and never let cleanup of a throwaway directory fail a turn\n * whose result was already read. POSIX keeps the original behaviour: unlinking\n * open files works there, and a genuine failure still surfaces.\n */\nfunction removeIsolatedCodexHome(dir: string): void {\n  if (process.platform !== \"win32\") {\n    rmSync(dir, { recursive: true, force: true });\n    return;\n  }\n  try {\n    rmSync(dir, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 });\n  } catch {\n    // Best effort: the OS temp cleaner will reclaim it.\n  }\n}\n\nasync function bootstrapIsolatedCodexModelCache(\n  authFilePath: string,\n  bootstrap: (codexHome: string, cachePath: string) => Promise<void>,\n): Promise<string> {\n  const sourceHome = dirname(authFilePath);\n  const isolatedHome = mkdtempSync(join(tmpdir(), \"negotium-codex-models-\"));\n  const isolatedCachePath = join(isolatedHome, \"models_cache.json\");\n\n  try {\n    const isolatedAuthPath = join(isolatedHome, \"auth.json\");\n    copyFileSync(authFilePath, isolatedAuthPath);\n    chmodSync(isolatedAuthPath, 0o600);\n\n    // Preserve custom provider configuration while keeping the bundled CLI's\n    // cache write completely outside the user's shared CODEX_HOME.\n    const sourceConfigPath = join(sourceHome, \"config.toml\");\n    if (existsSync(sourceConfigPath)) {\n      const isolatedConfigPath = join(isolatedHome, \"config.toml\");\n      copyFileSync(sourceConfigPath, isolatedConfigPath);\n      chmodSync(isolatedConfigPath, 0o600);\n    }\n\n    await bootstrap(isolatedHome, isolatedCachePath);\n    return readCompatibleCodexModelCache(isolatedCachePath).contents;\n  } finally {\n    removeIsolatedCodexHome(isolatedHome);\n  }\n}\n\nexport async function ensureCodexModelCache(\n  authFilePath: string,\n  bootstrap: (codexHome: string, cachePath: string) => Promise<void> = bootstrapCodexModelCache,\n): Promise<string> {\n  const codexHome = dirname(authFilePath);\n  const configuredCachePath = process.env.NEGOTIUM_CODEX_MODELS_CACHE_FILE;\n  if (configuredCachePath) {\n    if (!existsSync(configuredCachePath)) {\n      throw new Error(`Configured Codex model cache does not exist: ${configuredCachePath}`);\n    }\n    readCompatibleCodexModelCache(configuredCachePath);\n    return configuredCachePath;\n  }\n\n  // The global Codex CLI owns models_cache.json and may update it to a schema\n  // newer than the SDK bundled by Negotium. Snapshot a cache generated for our\n  // exact bundled version so later global CLI updates cannot break turns.\n  const bundledCachePath = bundledCodexModelCachePath(authFilePath);\n  const sharedCachePath = join(codexHome, \"models_cache.json\");\n  if (existsSync(sharedCachePath)) {\n    try {\n      const shared = readCompatibleCodexModelCache(sharedCachePath);\n      // Keep model metadata fresh while the global CLI remains compatible.\n      writePrivateFileAtomic(bundledCachePath, shared.contents);\n      return bundledCachePath;\n    } catch {\n      // A compatible private snapshot is safer than failing because another\n      // process briefly exposed an incomplete shared-cache write.\n    }\n  }\n\n  if (existsSync(bundledCachePath)) {\n    try {\n      readCompatibleCodexModelCache(bundledCachePath);\n      return bundledCachePath;\n    } catch {\n      // Re-bootstrap below instead of passing a corrupt or version-mismatched\n      // private snapshot into this SDK version.\n    }\n  }\n\n  const refreshedContents = await bootstrapIsolatedCodexModelCache(authFilePath, bootstrap);\n  writePrivateFileAtomic(bundledCachePath, refreshedContents);\n  return bundledCachePath;\n}\n\n/**\n * Codex can resolve model metadata before `features.multi_agent=false`, so a\n * model-advertised v1/v2 value may still register native collaboration tools.\n * Feed Codex an authoritative copy of its own catalog with only that field\n * disabled. Runtime MCP delegation remains available independently.\n */\nexport function writeCodexCatalogWithNativeMultiAgentDisabled(\n  authFilePath: string,\n  sourcePath: string,\n): string {\n  const codexHome = dirname(authFilePath);\n  const outputPath = join(codexHome, NEGOTIUM_MODEL_CATALOG);\n\n  const parsed = readCodexModelCache(sourcePath).parsed;\n\n  const models = (parsed.models as unknown[]).map((model, index): CodexModel => {\n    if (!model || typeof model !== \"object\" || Array.isArray(model)) {\n      throw new Error(`Codex model cache entry ${index} is invalid: ${sourcePath}`);\n    }\n    return { ...(model as CodexModel), multi_agent_version: \"disabled\" };\n  });\n  const contents = `${JSON.stringify({ models }, null, 2)}\\n`;\n  writePrivateFileAtomic(outputPath, contents);\n  return outputPath;\n}\n",
-    "export const NEGOTIUM_VERSION = \"0.19.2\";\n"
+    "export const NEGOTIUM_VERSION = \"0.20.1\";\n"
   ],
   "mappings": ";;;;;;;AAAA;;;ACEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA;AAEA;;;ACfO,IAAM,mBAAmB;;;ADwBhC,IAAM,gBAAgB,cAAc,YAAY,GAAG;AACnD,IAAM,sBAAsB,cAAc,QAAQ,gCAAgC;AAClF,IAAM,kBAAkB,cAAc,mBAAmB;AACzD,IAAM,0BAA0B,gBAAgB,QAAQ,4BAA4B;AAEpF,SAAS,kBAAkB,CAAC,iBAAiC;AAAA,EAC3D,MAAM,SAAS,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;AAAA,EAC/D,IAAI,OAAO,OAAO,YAAY,YAAY,CAAC,OAAO,QAAQ,KAAK,GAAG;AAAA,IAChE,MAAM,IAAI,MAAM,uCAAuC,iBAAiB;AAAA,EAC1E;AAAA,EACA,OAAO,OAAO;AAAA;AAGT,IAAM,wBAAwB,mBAAmB,uBAAuB;AAC/E,IAAM,6BAA6B,sBAAsB,QAAQ,oBAAoB,GAAG;AACxF,IAAM,uBAAuB,yBAAyB;AACtD,IAAM,yBAAyB,0BAA0B;AAElD,SAAS,kBAAkB,GAAW;AAAA,EAC3C,OAAO,KAAK,QAAQ,uBAAuB,GAAG,OAAO,UAAU;AAAA;;;ADpB1D,SAAS,0BAA0B,CAAC,MAA8B;AAAA,EACvE,OAAO,OAAO,mBAA8D;AAAA,IAC1E,MAAM,QAAQ,KAAK,YAAY;AAAA,IAE/B,OAAO,MAAM,IAAI,QAAkC,CAAC,SAAS,WAAW;AAAA,MACtE,IAAI,UAAU;AAAA,MACd,IAAI,eAAe;AAAA,MACnB,IAAI,SAAS;AAAA,MACb,MAAM,QAAQ,WACZ,MAAM,OAAO,IAAI,MAAM,6BAA6B,CAAC,GACrD,KAAK,SACP;AAAA,MAEA,MAAM,SAAS,CAAC,OAAe,WAAsC;AAAA,QACnE,IAAI;AAAA,UAAS;AAAA,QACb,UAAU;AAAA,QACV,aAAa,KAAK;AAAA,QAClB,IAAI;AAAA,UACF,MAAM,MAAM,IAAI;AAAA,UAChB,MAAM,KAAK;AAAA,UACX,MAAM;AAAA,QAGR,IAAI;AAAA,UAAO,OAAO,KAAK;AAAA,QAClB,SAAI;AAAA,UAAQ,QAAQ,MAAM;AAAA,QAC1B;AAAA,iBAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA;AAAA,MAG/D,MAAM,OAAO,CAAC,YAAqC;AAAA,QACjD,MAAM,MAAM,MAAM,GAAG,KAAK,UAAU,OAAO;AAAA,CAAK;AAAA;AAAA,MAGlD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU;AAAA,QACjC,IAAI,OAAO,SAAS;AAAA,UAAO,UAAU,OAAO,KAAK;AAAA,OAClD;AAAA,MACD,MAAM,GAAG,SAAS,CAAC,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1C,MAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AAAA,QACjC,IAAI;AAAA,UAAS;AAAA,QACb,MAAM,SAAS,SAAS,UAAU,WAAW,QAAQ,QAAQ;AAAA,QAC7D,OACE,IAAI,MACF,gCAAgC,SAAS,OAAO,KAAK,IAAI,KAAK,OAAO,KAAK,MAAM,IAClF,CACF;AAAA,OACD;AAAA,MACD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU;AAAA,QACjC,gBAAgB,OAAO,KAAK;AAAA,QAC5B,UAAS;AAAA,UACP,MAAM,UAAU,aAAa,QAAQ;AAAA,CAAI;AAAA,UACzC,IAAI,UAAU;AAAA,YAAG;AAAA,UACjB,MAAM,OAAO,aAAa,MAAM,GAAG,OAAO;AAAA,UAC1C,eAAe,aAAa,MAAM,UAAU,CAAC;AAAA,UAC7C,IAAI;AAAA,UACJ,IAAI;AAAA,YACF,UAAU,KAAK,MAAM,IAAI;AAAA,YACzB,MAAM;AAAA,YACN;AAAA;AAAA,UAGF,IAAI,QAAQ,OAAO,GAAG;AAAA,YACpB,IAAI,QAAQ,OAAO;AAAA,cACjB,OAAO,IAAI,MAAM,OAAO,QAAQ,MAAM,WAAW,6BAA6B,CAAC,CAAC;AAAA,cAChF;AAAA,YACF;AAAA,YACA,KAAK,EAAE,QAAQ,cAAc,CAAC;AAAA,YAC9B,KAAK,EAAE,IAAI,GAAG,QAAQ,eAAe,QAAQ,EAAE,UAAU,eAAe,EAAE,CAAC;AAAA,YAC3E;AAAA,UACF;AAAA,UACA,IAAI,QAAQ,OAAO;AAAA,YAAG;AAAA,UACtB,IAAI,QAAQ,OAAO;AAAA,YACjB,OAAO,IAAI,MAAM,OAAO,QAAQ,MAAM,WAAW,0BAA0B,CAAC,CAAC;AAAA,YAC7E;AAAA,UACF;AAAA,UACA,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAAA,UACvC,IAAI,OAAO,WAAW,YAAY,CAAC,QAAQ;AAAA,YACzC,OAAO,IAAI,MAAM,yCAAyC,CAAC;AAAA,YAC3D;AAAA,UACF;AAAA,UACA,MAAM,cAAc,KAAK,gBAAgB,MAAM;AAAA,UAC/C,IAAI,CAAC,aAAa;AAAA,YAChB,OAAO,IAAI,MAAM,+CAA+C,QAAQ,CAAC;AAAA,YACzE;AAAA,UACF;AAAA,UACA,OAAO,WAAW,EAAE,QAAQ,YAAY,CAAC;AAAA,UACzC;AAAA,QACF;AAAA,OACD;AAAA,MAED,KAAK;AAAA,QACH,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,YAAY,EAAE,MAAM,YAAY,SAAS,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAAA,KACF;AAAA;AAAA;AAIL,IAAM,kBAAkB,2BAA2B;AAAA,EACjD,WAAW,GAAG;AAAA,IACZ,OAAO,MAAM,QAAQ,UAAU,CAAC,mBAAmB,GAAG,cAAc,SAAS,GAAG;AAAA,MAC9E,KAAK,KAAK,QAAQ,KAAK,YAAY,oBAAoB,EAAE;AAAA,MACzD,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAE9B,aAAa;AAAA,IACf,CAAC;AAAA;AAAA,EAEH,iBAAiB;AAAA,EACjB,WAAW;AACb,CAAC;AAED,eAAsB,gBAAgB,CAAC,gBAA2D;AAAA,EAChG,OAAO,MAAM,gBAAgB,cAAc;AAAA;",
-  "debugId": "DB06C3E9D24463F764756E2164756E21",
+  "debugId": "C595D5173F5CFF9664756E2164756E21",
   "names": []
 }

package/dist/{chunk-kkftbxh2.js → chunk-zkyp090x.js}

@@ -96,7 +96,7 @@ import {
   resolveBrowserRsBin,
   resolveOutputLanguage,
   resolveTopicWorkspaceDir
-} from "./chunk-55dd0xw7.js";
+} from "./chunk-myhmb8tn.js";
 import"./chunk-2mx7fq49.js";
 export {
   resolveTopicWorkspaceDir,

package/dist/hosted-agent.js

@@ -26,6 +26,7 @@ import {
   RUN_DIR,
   SESSION_COMM_SERVER,
   SESSION_WORKSPACE_DIR,
+  SUPPORTED_AGENTS,
   SYSTEM_HEALTH_SERVER,
   TASK_SERVER,
   TOKEN_STATS_SERVER,
@@ -41,7 +42,7 @@ import {
   logger,
   resolveFallbackAgent,
   resolveTopicWorkspaceDir
-} from "./chunk-55dd0xw7.js";
+} from "./chunk-myhmb8tn.js";
 import {
   __require
 } from "./chunk-2mx7fq49.js";
@@ -260,12 +261,248 @@ function referencesRuntimeSecretStorage(value) {
   return false;
 }
 
+// ../../packages/core/src/agents/explicit-agent-switch.ts
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function agentAliases(agent) {
+  switch (agent) {
+    case "codex":
+      return [
+        "codex",
+        "\uCF54\uB371\uC2A4",
+        "gpt-6-luna",
+        "gpt-6-sol",
+        "gpt-5.6-luna",
+        "gpt-5.6-terra",
+        "gpt-5.6-sol",
+        "gpt-6-astra"
+      ];
+    case "claude":
+      return ["claude", "\uD074\uB85C\uB4DC", "sonnet", "opus", "fable"];
+    case "maestro":
+      return [
+        "maestro",
+        "\uB9C8\uC5D0\uC2A4\uD2B8\uB85C",
+        "\uBA54\uC2A4\uD2B8\uB85C",
+        "deepseek",
+        "deepseek-pro",
+        "kimi",
+        "kimi-pro",
+        "kimi-k3",
+        "kimi-code",
+        "kimi-k2.7-code",
+        "\uB525\uC2DC\uD06C",
+        "\uD0A4\uBBF8"
+      ];
+  }
+}
+function hasExplicitAgentSwitchRequest(prompt, agent) {
+  if (!prompt?.trim())
+    return false;
+  const text = prompt.toLowerCase().replace(/\s+/g, " ").trim();
+  const target = `(?:${agentAliases(agent).map(escapeRegExp).join("|")})`;
+  const switchVerb = "(?:\uBC14\uAFD4|\uBC14\uAFD4\uC918|\uBCC0\uACBD|\uBCC0\uACBD\uD574|\uC804\uD658|\uC804\uD658\uD574|\uC124\uC815|\uC124\uC815\uD574|\uC368\uC918|\uC0AC\uC6A9|\uAC00|switch|change|set|use)";
+  const switchSubject = "(?:agent|runtime|model|\uC5D0\uC774\uC804\uD2B8|\uB7F0\uD0C0\uC784|\uBAA8\uB378)";
+  return [
+    new RegExp(`^/(?:agent|runtime)\\s+${target}(?:\\s|$)`, "iu"),
+    new RegExp(`${target}\\s*(?:\uB85C|\uC73C\uB85C)\\s*.{0,16}${switchVerb}`, "iu"),
+    new RegExp(`${switchSubject}.{0,24}${target}.{0,24}${switchVerb}`, "iu"),
+    new RegExp(`${switchVerb}.{0,24}${switchSubject}.{0,24}${target}`, "iu"),
+    new RegExp(`(?:switch|change|set|use).{0,24}${target}`, "iu")
+  ].some((pattern) => pattern.test(text));
+}
+function explicitAgentSwitchTargets(prompt) {
+  if (!prompt?.trim())
+    return [];
+  return SUPPORTED_AGENTS.filter((agent) => hasExplicitAgentSwitchRequest(prompt, agent));
+}
+
 // ../../packages/core/src/mcp/runtime-spec.ts
 import { createHash, createHmac, timingSafeEqual } from "crypto";
+
+// ../../packages/core/src/runtime/actor-topic-scope.ts
+var ACTOR_TOPIC_SCOPE_LIMITS = Object.freeze({
+  maxIdsPerList: 200,
+  maxIdLength: 128,
+  maxSerializedBytes: 8 * 1024
+});
+var SCOPE_KEYS = ["visibleNodeTopicIds", "ownedNodeTopicIds"];
+function idList(value, name) {
+  if (!Array.isArray(value))
+    return `${name} must be an array of topic ids`;
+  if (value.length > ACTOR_TOPIC_SCOPE_LIMITS.maxIdsPerList) {
+    return `${name} has ${value.length} ids; at most ${ACTOR_TOPIC_SCOPE_LIMITS.maxIdsPerList} are allowed`;
+  }
+  const ids = new Set;
+  for (const item of value) {
+    if (typeof item !== "string")
+      return `${name} must contain only strings`;
+    const id = item.trim();
+    if (!id)
+      return `${name} must not contain empty ids`;
+    if (id.length > ACTOR_TOPIC_SCOPE_LIMITS.maxIdLength) {
+      return `${name} contains an id longer than ${ACTOR_TOPIC_SCOPE_LIMITS.maxIdLength} characters`;
+    }
+    ids.add(id);
+  }
+  return [...ids];
+}
+function validateActorTopicScope(value) {
+  if (value === undefined)
+    return { ok: true, scope: undefined };
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {
+      ok: false,
+      error: "actorTopicScope must be { visibleNodeTopicIds: string[], ownedNodeTopicIds: string[] }"
+    };
+  }
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null) {
+    return { ok: false, error: "actorTopicScope must be a plain object" };
+  }
+  const keys = Object.keys(value);
+  const unknown = keys.filter((key) => !SCOPE_KEYS.includes(key));
+  if (unknown.length || keys.length !== SCOPE_KEYS.length) {
+    return {
+      ok: false,
+      error: unknown.length ? `actorTopicScope has unexpected key(s): ${unknown.join(", ")}` : "actorTopicScope must have both visibleNodeTopicIds and ownedNodeTopicIds"
+    };
+  }
+  const record = value;
+  const visible = idList(record.visibleNodeTopicIds, "actorTopicScope.visibleNodeTopicIds");
+  if (typeof visible === "string")
+    return { ok: false, error: visible };
+  const owned = idList(record.ownedNodeTopicIds, "actorTopicScope.ownedNodeTopicIds");
+  if (typeof owned === "string")
+    return { ok: false, error: owned };
+  const scope = { visibleNodeTopicIds: visible, ownedNodeTopicIds: owned };
+  const bytes = Buffer.byteLength(JSON.stringify(scope), "utf-8");
+  if (bytes > ACTOR_TOPIC_SCOPE_LIMITS.maxSerializedBytes) {
+    return {
+      ok: false,
+      error: `actorTopicScope is ${bytes} bytes serialized; at most ${ACTOR_TOPIC_SCOPE_LIMITS.maxSerializedBytes} are allowed`
+    };
+  }
+  return { ok: true, scope };
+}
+function encodeActorTopicScopeArg(scope) {
+  const validated = validateActorTopicScope(scope);
+  if (!validated.ok)
+    throw new Error(validated.error);
+  if (!validated.scope)
+    throw new Error("actorTopicScope is required");
+  return Buffer.from(JSON.stringify(validated.scope), "utf-8").toString("base64url");
+}
+
+// ../../packages/core/src/runtime/remote-session-grant.ts
+var REMOTE_SESSION_GRANT_LIMITS = Object.freeze({
+  maxHubUrlLength: 512,
+  maxCapabilityLength: 2 * 1024,
+  capabilityPrefix: "rsc1."
+});
+var GRANT_KEYS = ["hubUrl", "capability"];
+var LOOPBACK_HOSTS = new Set(["127.0.0.1", "::1", "[::1]", "localhost"]);
+function normalizeHubUrl(raw, name = "remoteSession.hubUrl") {
+  if (raw.length > REMOTE_SESSION_GRANT_LIMITS.maxHubUrlLength) {
+    return {
+      error: `${name} is longer than ${REMOTE_SESSION_GRANT_LIMITS.maxHubUrlLength} characters`
+    };
+  }
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return { error: `${name} must be an absolute URL` };
+  }
+  if (url.username || url.password) {
+    return { error: `${name} must not carry credentials` };
+  }
+  if (url.search || url.hash || raw.includes("?") || raw.includes("#")) {
+    return { error: `${name} must not carry a query or fragment` };
+  }
+  if (url.protocol === "http:") {
+    if (!LOOPBACK_HOSTS.has(url.hostname)) {
+      return { error: `${name} must be https:// or a loopback http:// origin` };
+    }
+  } else if (url.protocol !== "https:") {
+    return { error: `${name} must be https:// or a loopback http:// origin` };
+  }
+  return { url: url.toString().replace(/\/+$/, "") };
+}
+var MAX_REMOTE_SESSION_REPLY_TOKEN_LENGTH = REMOTE_SESSION_GRANT_LIMITS.maxCapabilityLength;
+function validateRemoteSessionGrant(value) {
+  if (value === undefined)
+    return { ok: true, grant: undefined };
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return { ok: false, error: "remoteSession must be { hubUrl: string, capability: string }" };
+  }
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null) {
+    return { ok: false, error: "remoteSession must be a plain object" };
+  }
+  const keys = Object.keys(value);
+  const unknown = keys.filter((key) => !GRANT_KEYS.includes(key));
+  if (unknown.length || keys.length !== GRANT_KEYS.length) {
+    return {
+      ok: false,
+      error: unknown.length ? `remoteSession has unexpected key(s): ${unknown.join(", ")}` : "remoteSession must have both hubUrl and capability"
+    };
+  }
+  const record = value;
+  if (typeof record.hubUrl !== "string" || !record.hubUrl.trim()) {
+    return { ok: false, error: "remoteSession.hubUrl must be a non-empty string" };
+  }
+  const hubUrl = normalizeHubUrl(record.hubUrl.trim());
+  if ("error" in hubUrl)
+    return { ok: false, error: hubUrl.error };
+  if (typeof record.capability !== "string" || !record.capability.trim()) {
+    return { ok: false, error: "remoteSession.capability must be a non-empty string" };
+  }
+  const capability = record.capability.trim();
+  if (capability.length > REMOTE_SESSION_GRANT_LIMITS.maxCapabilityLength) {
+    return {
+      ok: false,
+      error: `remoteSession.capability is ${capability.length} characters; at most ${REMOTE_SESSION_GRANT_LIMITS.maxCapabilityLength} are allowed`
+    };
+  }
+  if (!capability.startsWith(REMOTE_SESSION_GRANT_LIMITS.capabilityPrefix)) {
+    return {
+      ok: false,
+      error: `remoteSession.capability must start with "${REMOTE_SESSION_GRANT_LIMITS.capabilityPrefix}"`
+    };
+  }
+  if (!/^rsc1\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(capability)) {
+    return { ok: false, error: "remoteSession.capability is malformed" };
+  }
+  return { ok: true, grant: { hubUrl: hubUrl.url, capability } };
+}
+function encodeRemoteSessionGrantArg(grant) {
+  const validated = validateRemoteSessionGrant(grant);
+  if (!validated.ok)
+    throw new Error(validated.error);
+  if (!validated.grant)
+    throw new Error("remoteSession is required");
+  return Buffer.from(JSON.stringify(validated.grant), "utf-8").toString("base64url");
+}
+
+// ../../packages/core/src/mcp/runtime-spec.ts
 var RUNTIME_MCP_KEY = "runtime";
 var RUNTIME_MCP_BASE_PATH = "/mcp/runtime";
 var TOKEN_TTL_MS = 4 * 60 * 60 * 1000;
 var CLAUDE_MCP_TOOL_TIMEOUT_MS = 600000;
+var MCP_URL_BUDGET_CHARS = 14 * 1024;
+
+class McpUrlBudgetExceededError extends Error {
+  surface;
+  urlLength;
+  constructor(surface, urlLength) {
+    super(`built-in MCP URL for "${surface}" is ${urlLength} characters; the transport allows at most ${MCP_URL_BUDGET_CHARS}`);
+    this.surface = surface;
+    this.urlLength = urlLength;
+    this.name = "McpUrlBudgetExceededError";
+  }
+}
 var runtimePort = NEGOTIUM_PORT;
 function encodeTokenPart(value) {
   return Buffer.from(JSON.stringify(value), "utf-8").toString("base64url");
@@ -291,18 +528,26 @@ function issueHostedMcpToken(surface, ctx) {
   return `${payloadPart}.${signTokenPayload(payloadPart)}`;
 }
 function buildRuntimeMcpSpec(agent, ctx) {
-  const token = issueRuntimeMcpToken(ctx);
   const base = `http://127.0.0.1:${runtimePort}${RUNTIME_MCP_BASE_PATH}`;
-  const query = `token=${encodeURIComponent(token)}`;
+  const query = `token=${encodeURIComponent(issueRuntimeMcpToken(ctx))}`;
+  const url = agent === "codex" ? `${base}/mcp?${query}` : `${base}/sse?${query}`;
+  assertMcpUrlWithinBudget(RUNTIME_MCP_KEY, url, ctx.topicId);
   if (agent === "codex")
-    return { url: `${base}/mcp?${query}` };
+    return { url };
   return {
     type: "sse",
-    url: `${base}/sse?${query}`,
+    url,
     timeout: CLAUDE_MCP_TOOL_TIMEOUT_MS,
     ...agent === "maestro" ? { lifecycle: "turn" } : {}
   };
 }
+function assertMcpUrlWithinBudget(surface, url, topicId) {
+  if (url.length <= MCP_URL_BUDGET_CHARS)
+    return;
+  const error = new McpUrlBudgetExceededError(surface, url.length);
+  logger.error({ topicId, surface, urlLength: url.length, budget: MCP_URL_BUDGET_CHARS }, "built-in MCP URL exceeds the transport budget; refusing to mint the token");
+  throw error;
+}
 function hostedMcpCacheIdentity(surface, ctx) {
   let semanticContext;
   switch (surface) {
@@ -333,6 +578,9 @@ function hostedMcpCacheIdentity(surface, ctx) {
     case "session-comm":
       semanticContext = {
         userId: ctx.userId,
+        actorUserId: ctx.actorUserId ?? null,
+        actorTopicScope: ctx.actorTopicScope ?? null,
+        remoteSession: ctx.remoteSession ?? null,
         topicTitle: ctx.topicTitle,
         topicId: ctx.topicId ?? null,
         subagentParentTopicId: ctx.subagentParentTopicId ?? null,
@@ -351,13 +599,15 @@ function buildHostedMcpSpec(agent, surface, ctx) {
   const token = issueHostedMcpToken(surface, ctx);
   const base = `http://127.0.0.1:${runtimePort}${RUNTIME_MCP_BASE_PATH}/${surface}`;
   const query = `token=${encodeURIComponent(token)}`;
+  const url = agent === "codex" ? `${base}/mcp?${query}` : `${base}/sse?${query}`;
+  assertMcpUrlWithinBudget(surface, url, ctx.topicId);
   if (agent === "codex")
-    return { url: `${base}/mcp?${query}` };
-  const queryBound = surface === "session-comm" && (ctx.silent === true || ctx.peerBridge !== undefined);
+    return { url };
+  const queryBound = surface === "session-comm" && (ctx.silent === true || ctx.peerBridge !== undefined || ctx.remoteSession !== undefined);
   const lifecycle = queryBound ? "turn" : surface === "session-comm" ? "session" : "process";
   return {
     type: "sse",
-    url: `${base}/sse?${query}`,
+    url,
     timeout: CLAUDE_MCP_TOOL_TIMEOUT_MS,
     ...agent === "maestro" ? {
       lifecycle,
@@ -1126,6 +1376,9 @@ function initializeApiTopicsSchema() {
   if (!tableColumns("api_topics").has("subagent_report_mode")) {
     db.exec("ALTER TABLE api_topics ADD COLUMN subagent_report_mode TEXT NOT NULL DEFAULT 'auto'");
   }
+  if (!tableColumns("api_topics").has("derived_by_user_id")) {
+    db.exec("ALTER TABLE api_topics ADD COLUMN derived_by_user_id TEXT");
+  }
   if (!tableColumns("api_topics").has("memory_topic_id")) {
     db.exec("ALTER TABLE api_topics ADD COLUMN memory_topic_id TEXT");
   }
@@ -1217,6 +1470,7 @@ function rowToDto(r, participants = getTopicParticipants(r.id), tellTargets) {
     memoryTopicId: r.memory_topic_id ?? undefined,
     memoryKey: r.memory_key ?? undefined,
     isFork: r.is_fork !== 0,
+    ...r.derived_by_user_id ? { derivedByUserId: r.derived_by_user_id } : {},
     ...r.is_subagent !== 0 ? { isSubagent: true } : {},
     ...r.is_subagent !== 0 ? {
       subagentTellTargetIds: tellTargets ? tellTargets.get(r.id) ?? [] : listSubagentTellTargetIds(r.id)
@@ -1300,6 +1554,9 @@ function buildBuiltinMcpServer(surface, ctx, stdio) {
   const agent = ctx.agent ?? FALLBACK_AGENT;
   return buildHostedMcpSpec(agent, surface, {
     userId: ctx.userId,
+    ...ctx.actorUserId ? { actorUserId: ctx.actorUserId } : {},
+    ...ctx.actorTopicScope ? { actorTopicScope: ctx.actorTopicScope } : {},
+    ...surface === "session-comm" && ctx.remoteSession ? { remoteSession: ctx.remoteSession } : {},
     topicTitle: ctx.session,
     ...ctx.topicId ? { topicId: ctx.topicId } : {},
     ...ctx.queryId ? { queryId: ctx.queryId } : {},
@@ -1395,6 +1652,7 @@ var MCP_CATALOG = {
     build({
       userId,
       actorUserId,
+      actorTopicScope,
       session,
       topicId,
       queryId,
@@ -1410,16 +1668,18 @@ var MCP_CATALOG = {
     }) {
       if (!topicId || !agent)
         return null;
+      const switchTargets = explicitAgentSwitchTargets(currentUserPrompt);
       return buildRuntimeMcpSpec(agent, {
         userId,
         ...actorUserId ? { actorUserId } : {},
+        ...actorTopicScope ? { actorTopicScope } : {},
         topicId,
         topicTitle: session,
         queryId,
         cwd: cwd ?? resolveTopicWorkspaceDir(topicId),
         agent,
         model,
-        currentUserPrompt,
+        ...switchTargets.length ? { explicitAgentSwitchTargets: switchTargets } : {},
         autoContinue,
         visualTools,
         fileDeliveryTools,
@@ -1489,6 +1749,9 @@ var MCP_CATALOG = {
     build(ctx) {
       const {
         userId,
+        actorUserId,
+        actorTopicScope,
+        remoteSession,
         session,
         topicId,
         subagentParentTopicId,
@@ -1502,6 +1765,9 @@ var MCP_CATALOG = {
       const cronSessionId = topicId ? getRegisteredCronSession(topicId, effectiveAgent)?.sessionId : undefined;
       const args = [
         `--user-id=${userId}`,
+        ...actorUserId ? [`--actor-user-id=${actorUserId}`] : [],
+        ...actorTopicScope ? [`--actor-topic-scope=${encodeActorTopicScopeArg(actorTopicScope)}`] : [],
+        ...remoteSession ? [`--remote-session-grant=${encodeRemoteSessionGrantArg(remoteSession)}`] : [],
         `--topic=${session}`,
         ...topicId ? [`--topic-id=${topicId}`] : [],
         ...subagentParentTopicId ? [`--subagent-parent-topic-id=${subagentParentTopicId}`] : [],
@@ -1679,6 +1945,9 @@ function getManagerMcpServers(opts) {
   const topicId = opts.topicId;
   return buildScope("manager", {
     userId: opts.userId,
+    actorUserId: opts.actorUserId,
+    actorTopicScope: opts.actorTopicScope,
+    remoteSession: opts.remoteSession,
     session: opts.session ?? "General",
     topicId,
     queryId: opts.queryId,
@@ -1698,6 +1967,8 @@ function getForumMcpServers(opts) {
   const {
     userId,
     actorUserId,
+    actorTopicScope,
+    remoteSession,
     vaultUserId,
     session,
     topicId,
@@ -1731,6 +2002,8 @@ function getForumMcpServers(opts) {
   const base = buildScope("forum", {
     userId,
     actorUserId,
+    actorTopicScope,
+    remoteSession,
     vaultUserId,
     session,
     topicId,
@@ -1811,6 +2084,9 @@ function getMcpServersForQuery(opts) {
   if (opts.sessionType === "manager") {
     return hideProviderIntrospectionForOtium(mergeHostMcpServers(getManagerMcpServers({
       userId: opts.userId || "local",
+      actorUserId: opts.actorUserId,
+      actorTopicScope: opts.actorTopicScope,
+      remoteSession: opts.remoteSession,
       session: opts.session,
       topicId: opts.topicId,
       queryId: opts.queryId,
@@ -1829,6 +2105,8 @@ function getMcpServersForQuery(opts) {
   return hideProviderIntrospectionForOtium(getForumMcpServers({
     userId: opts.userId || "local",
     actorUserId: opts.actorUserId,
+    actorTopicScope: opts.actorTopicScope,
+    remoteSession: opts.remoteSession,
     vaultUserId: opts.vaultUserId,
     session: opts.session || "default",
     topicId: opts.topicId,
@@ -2726,7 +3004,7 @@ import { tmpdir } from "os";
 import { dirname as dirname5, join as join3 } from "path";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.19.2";
+var NEGOTIUM_VERSION = "0.20.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 var moduleRequire = createRequire(import.meta.url);
@@ -3455,7 +3733,7 @@ async function createCodexVaultHookBridge(userId) {
     });
     restrictIpcEndpoint(socketPath);
     if (IS_WINDOWS2) {
-      const { BINARIES_DIR } = await import("./chunk-kkftbxh2.js");
+      const { BINARIES_DIR } = await import("./chunk-zkyp090x.js");
       const cached = await ensureCodexWindowsWrapperExe(join5(BINARIES_DIR, "codex-hook-wrapper"));
       await copyFile(cached, wrapperPath);
       await writeFile2(join5(root, "codex-with-hooks.cfg"), [process.execPath, codexCliScriptPath(), socketPath, token].join(`
@@ -4769,4 +5047,4 @@ export {
   buildClaudeDisallowedTools
 };
 
-//# debugId=AE528B367B6FEEB064756E2164756E21
+//# debugId=1307E2EFD67054A264756E2164756E21