negotium 0.2.2 → 0.2.4

package/dist/{chunk-kc5kmr95.js → chunk-1s9ryz8g.js}

@@ -3,8 +3,7 @@ var __require = import.meta.require;
 
 // ../../packages/core/src/agents/rollout/shared.ts
 import { mkdirSync as mkdirSync2 } from "fs";
-import { dirname as dirname2, join as join2, resolve as resolve2 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { resolve as resolve2 } from "path";
 
 // ../../packages/core/src/platform/config.ts
 import { execFileSync } from "child_process";
@@ -34,6 +33,10 @@ function parseRuntimePort(value, fallback) {
   const port = Number.parseInt(value, 10);
   return Number.isInteger(port) && port > 0 && port <= 65535 ? port : fallback;
 }
+function safeRuntimePathSegment(value, fallback, maxLength = 160) {
+  const cleaned = value.trim().replace(/[^A-Za-z0-9._-]/g, "_").replace(/^_+|_+$/g, "").slice(0, maxLength);
+  return cleaned || fallback;
+}
 
 // ../../packages/core/src/platform/logger.ts
 import pino from "pino";
@@ -182,6 +185,12 @@ var BACKGROUND_BASH_SERVER = resolve(PROJECT_ROOT, "src/mcp/background-bash-serv
 var VAULT_SERVER = resolve(PROJECT_ROOT, "src/mcp/vault-server.ts");
 var BG_BASH_BASE_PORT = parsePortEnv(process.env.BG_BASH_BASE_PORT, 9700);
 var BG_BASH_MAX_PORT = parsePortEnv(process.env.BG_BASH_MAX_PORT, 9799);
+function safeWorkspaceSegment(value, fallback) {
+  return safeRuntimePathSegment(value, fallback);
+}
+function resolveTopicWorkspaceDir(topicId) {
+  return join(TOPIC_WORKSPACE_DIR, safeWorkspaceSegment(topicId, "topic"));
+}
 function loadOrCreateLocalSecret(envKey, filename, options = {}) {
   const envValue = envText(envKey);
   const secretFile = resolve(SECRETS_DIR, filename);
@@ -284,6 +293,9 @@ var TESSERACT_BIN = envText("TESSERACT_BIN") ?? "tesseract";
 var PDFTOTEXT_BIN = envText("PDFTOTEXT_BIN") ?? "pdftotext";
 var _envMaxTellDepth = Number.parseInt(process.env.MAX_TELL_DEPTH ?? "", 10);
 var MAX_TELL_DEPTH = Number.isInteger(_envMaxTellDepth) && _envMaxTellDepth > 0 ? _envMaxTellDepth : 20;
+function codexAuthFilePath() {
+  return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
+}
 
 // ../../packages/core/src/runtime/user-turn-envelope.ts
 function renderUserPromptBatch(prompts) {
@@ -298,7 +310,6 @@ function renderUserPromptBatch(prompts) {
 }
 
 // ../../packages/core/src/agents/rollout/shared.ts
-var __dirname2 = dirname2(fileURLToPath2(import.meta.url));
 var trustedWorkspaceRoots = [
   WORKSPACE_DIR,
   DM_WORKSPACE_DIR,
@@ -328,7 +339,7 @@ function configureRolloutHost(options) {
     FIXTURES_DIR = previousFixturesDir;
   };
 }
-var FIXTURES_DIR = join2(__dirname2, "..", "fixtures");
+var FIXTURES_DIR = resolve2(PROJECT_ROOT, "src", "agents", "fixtures");
 function clone(obj) {
   return structuredClone(obj);
 }
@@ -465,7 +476,7 @@ ${toolBuffer.join(`
 import { randomUUID } from "crypto";
 import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join3 } from "path";
+import { join as join2 } from "path";
 
 // ../../packages/core/src/platform/jsonl.ts
 import {
@@ -480,7 +491,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync2
 } from "fs";
-import { dirname as dirname3 } from "path";
+import { dirname as dirname2 } from "path";
 
 // ../../packages/core/src/platform/file-utils.ts
 import { unlinkSync } from "fs";
@@ -508,7 +519,7 @@ function parseJsonlText(raw) {
 }
 var LOCK_SLEEP = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));
 function writeJsonlFile(filePath, entries) {
-  const dir = dirname3(filePath);
+  const dir = dirname2(filePath);
   mkdirSync3(dir, { recursive: true });
   const tmpPath = `${filePath}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;
   const payload = `${entries.map((e) => JSON.stringify(e)).join(`
@@ -554,7 +565,7 @@ var _attachmentsCache = null;
 function loadClaudeAttachments() {
   if (_attachmentsCache)
     return _attachmentsCache;
-  const raw = readFileSync3(join3(FIXTURES_DIR, "claude-attachments.jsonl"), "utf8");
+  const raw = readFileSync3(join2(FIXTURES_DIR, "claude-attachments.jsonl"), "utf8");
   const lines = parseJsonlText(raw);
   if (lines.length < 2) {
     throw new Error(`loadClaudeAttachments: expected >=2 entries in claude-attachments.jsonl, got ${lines.length}`);
@@ -658,15 +669,15 @@ function writeClaudeRollout(opts) {
     });
     lastUuid = assistantUuid;
   }
-  const projectsDir = join3(homedir2(), ".claude", "projects", encodeClaudeCwd(opts.cwd));
-  const path = join3(projectsDir, `${sessionId}.jsonl`);
+  const projectsDir = join2(homedir2(), ".claude", "projects", encodeClaudeCwd(opts.cwd));
+  const path = join2(projectsDir, `${sessionId}.jsonl`);
   writeJsonlFile(path, lines);
   logger.info({ sessionId, path, pairs: pairs.length }, "writeClaudeRollout: synthetic rollout placed");
   return { sessionId, rolloutPath: path };
 }
 function repairPoisonedRollout(sessionId, cwd) {
   try {
-    const path = join3(homedir2(), ".claude", "projects", encodeClaudeCwd(cwd), `${sessionId}.jsonl`);
+    const path = join2(homedir2(), ".claude", "projects", encodeClaudeCwd(cwd), `${sessionId}.jsonl`);
     if (!existsSync2(path))
       return false;
     const lines = readFileSync3(path, "utf8").split(`
@@ -737,12 +748,1175 @@ function isPoisonedAssistantEntry(entry) {
 }
 
 // ../../packages/core/src/agents/rollout/codex.ts
+import { randomBytes as randomBytes4 } from "crypto";
+import { existsSync as existsSync3, readFileSync as readFileSync4, realpathSync as realpathSync2, statSync as statSync2, unlinkSync as unlinkSync3 } from "fs";
+import { basename, dirname as dirname4, join as join4, resolve as resolve4 } from "path";
+
+// ../../packages/core/src/agents/execution-host.ts
+import { AsyncLocalStorage } from "async_hooks";
+import { dirname as dirname3 } from "path";
+
+// ../../packages/core/src/security/sensitive-path.ts
+import { realpathSync } from "fs";
+import { resolve as resolve3 } from "path";
+var SENSITIVE_PATH_PATTERNS = [
+  /\/\.env(\.|$)/i,
+  /\/\.ssh\//i,
+  /\/\.aws\//i,
+  /\/\.gnupg\//i,
+  /\/\.netrc$/i,
+  /\/\.npmrc$/i,
+  /\/(id_rsa|id_ed25519|id_ecdsa|id_dsa)(\.pub)?$/i,
+  /\.(pem|key|p12|pfx|cer|crt)$/i,
+  /\/Library\/Keychains\//i,
+  /\/vault\.db(-wal|-shm|-journal)?$/i,
+  /\/vault-master-key$/i,
+  /\/runtime-mcp-secret$/i,
+  /\/sessions\.db(-wal|-shm|-journal)?$/i
+];
+function isSensitivePath(filePath) {
+  const normalized = resolve3(filePath);
+  if (SENSITIVE_PATH_PATTERNS.some((p) => p.test(normalized)))
+    return true;
+  try {
+    const real = realpathSync(normalized);
+    if (real !== normalized)
+      return SENSITIVE_PATH_PATTERNS.some((p) => p.test(real));
+  } catch {}
+  return false;
+}
+
+// ../../packages/core/src/agents/vault-tool-policy.ts
+var SENSITIVE_RUNTIME_NAMES = [
+  "vault.db",
+  "vault-master-key",
+  "runtime-mcp-secret",
+  "sessions.db"
+];
+var DIRECT_VAULT_EXECUTION_TOOLS = new Set(["Bash", "WebFetch"]);
+function createVaultToolPolicy(host) {
+  function isVaultBrokerTool(toolName) {
+    return toolName.includes("vault_run") || toolName.includes("vault_http_request");
+  }
+  function referencesRuntimeSecretStorage(value) {
+    if (typeof value === "string") {
+      const lower = value.toLowerCase();
+      if (SENSITIVE_RUNTIME_NAMES.some((name) => lower.includes(name)))
+        return true;
+      return value.startsWith("/") && host.isSensitivePath(value);
+    }
+    if (Array.isArray(value))
+      return value.some(referencesRuntimeSecretStorage);
+    if (value && typeof value === "object") {
+      return Object.values(value).some(referencesRuntimeSecretStorage);
+    }
+    return false;
+  }
+  function shouldRedirectVaultTool(userId, toolName, input) {
+    return false;
+  }
+  return { isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool };
+}
+var defaultVaultToolPolicy = createVaultToolPolicy({
+  isSensitivePath,
+  valueReferencesVaultKey: () => false
+});
+var isVaultBrokerTool = defaultVaultToolPolicy.isVaultBrokerTool;
+var referencesRuntimeSecretStorage = defaultVaultToolPolicy.referencesRuntimeSecretStorage;
+var shouldRedirectVaultTool = defaultVaultToolPolicy.shouldRedirectVaultTool;
+
+// ../../packages/core/src/mcp/canonical-bridge-config.ts
+var registrations = [];
+var turnLeases = new Map;
+function turnKey(scope) {
+  return JSON.stringify([
+    scope.userId,
+    scope.topicId,
+    scope.queryId,
+    scope.peerBridge.hubCellId,
+    scope.peerBridge.hostTopicId,
+    scope.peerBridge.hostQueryId
+  ]);
+}
+function canonicalMcpBridgeEnv(scope) {
+  const lease = registrations.at(-1)?.provider(scope);
+  if (!lease)
+    return;
+  const key = turnKey(scope);
+  const leases = turnLeases.get(key) ?? new Set;
+  leases.add(lease.revoke);
+  turnLeases.set(key, leases);
+  return lease.env;
+}
+
+// ../../packages/core/src/mcp/runtime-spec.ts
+import { createHmac, timingSafeEqual } from "crypto";
+var RUNTIME_MCP_KEY = "runtime";
+var RUNTIME_MCP_BASE_PATH = "/mcp/runtime";
+var TOKEN_TTL_MS = 4 * 60 * 60 * 1000;
+var CLAUDE_MCP_TOOL_TIMEOUT_MS = 600000;
+var runtimePort = NEGOTIUM_PORT;
+function encodeTokenPart(value) {
+  return Buffer.from(JSON.stringify(value), "utf-8").toString("base64url");
+}
+function signTokenPayload(payloadPart) {
+  return createHmac("sha256", RUNTIME_MCP_SECRET).update(payloadPart).digest("base64url");
+}
+function issueRuntimeMcpToken(ctx) {
+  const payloadPart = encodeTokenPart({
+    v: 1,
+    exp: Date.now() + TOKEN_TTL_MS,
+    ctx
+  });
+  return `${payloadPart}.${signTokenPayload(payloadPart)}`;
+}
+function issueHostedMcpToken(surface, ctx) {
+  const payloadPart = encodeTokenPart({
+    v: 2,
+    exp: Date.now() + TOKEN_TTL_MS,
+    aud: surface,
+    ctx
+  });
+  return `${payloadPart}.${signTokenPayload(payloadPart)}`;
+}
+function buildRuntimeMcpSpec(agent, ctx) {
+  const token = issueRuntimeMcpToken(ctx);
+  const base = `http://127.0.0.1:${runtimePort}${RUNTIME_MCP_BASE_PATH}`;
+  const query = `token=${encodeURIComponent(token)}`;
+  if (agent === "codex")
+    return { url: `${base}/mcp?${query}` };
+  return {
+    type: "sse",
+    url: `${base}/sse?${query}`,
+    timeout: CLAUDE_MCP_TOOL_TIMEOUT_MS
+  };
+}
+function buildHostedMcpSpec(agent, surface, ctx) {
+  const token = issueHostedMcpToken(surface, ctx);
+  const base = `http://127.0.0.1:${runtimePort}${RUNTIME_MCP_BASE_PATH}/${surface}`;
+  const query = `token=${encodeURIComponent(token)}`;
+  if (agent === "codex")
+    return { url: `${base}/mcp?${query}` };
+  return {
+    type: "sse",
+    url: `${base}/sse?${query}`,
+    timeout: CLAUDE_MCP_TOOL_TIMEOUT_MS
+  };
+}
+
+// ../../packages/core/src/mcp/session-comm/bridge-ipc-config.ts
+var registrations2 = [];
+function peerSessionBridgeIpcEnv() {
+  const active = registrations2.at(-1)?.config;
+  if (!active)
+    return;
+  return {
+    NEGOTIUM_PEER_SESSION_BRIDGE_URL: active.url,
+    NEGOTIUM_PEER_SESSION_BRIDGE_TOKEN: active.token
+  };
+}
+
+// ../../packages/core/src/platform/background-bash/manager.ts
+import { execFileSync as execFileSync2, spawn } from "child_process";
 import { randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync3, readFileSync as readFileSync4, realpathSync, statSync as statSync2, unlinkSync as unlinkSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { basename, dirname as dirname4, join as join4, resolve as resolve3 } from "path";
+
+// ../../packages/core/src/platform/delay.ts
+var delay = (ms) => new Promise((r) => setTimeout(r, ms));
+
+// ../../packages/core/src/platform/background-bash/context.ts
+import { createHmac as createHmac2 } from "crypto";
+function deriveBgBashContextCapability(runtimeCapability, userId, topic) {
+  return createHmac2("sha256", runtimeCapability).update(`${userId}\x00${topic}`).digest("hex");
+}
+
+// ../../packages/core/src/platform/background-bash/manager.ts
+function makeBgBashKey(_userId, _topic) {
+  return "runtime";
+}
+function defaultPortPids(port) {
+  try {
+    return execFileSync2("lsof", ["-i", `:${port}`, "-t"], { stdio: "pipe" }).toString().trim().split(`
+`).map((pid) => Number.parseInt(pid, 10)).filter((pid) => !Number.isNaN(pid));
+  } catch {
+    return [];
+  }
+}
+function createBackgroundBashManager(options = {}) {
+  const instances = new Map;
+  const usedPorts = new Set;
+  const spawning = new Map;
+  const knownContexts = new Map;
+  const runtimeCapability = options.capability ?? randomBytes2(32).toString("hex");
+  const runtimeServerId = options.serverId ?? randomBytes2(16).toString("hex");
+  const serverFile = options.serverFile ?? BACKGROUND_BASH_SERVER;
+  const basePort = options.basePort ?? BG_BASH_BASE_PORT;
+  const maxPort = options.maxPort ?? BG_BASH_MAX_PORT;
+  const fetchImpl = options.fetch ?? globalThis.fetch;
+  const now = options.now ?? Date.now;
+  const wait = options.delay ?? delay;
+  const portPids = options.portPids ?? defaultPortPids;
+  const spawnImpl = options.spawn ?? ((command, args, spawnOptions) => spawn(command, [...args], spawnOptions));
+  function contextKey(userId, topic) {
+    return `${userId}\x00${topic}`;
+  }
+  function contextCapability(userId, topic) {
+    return deriveBgBashContextCapability(runtimeCapability, userId, topic);
+  }
+  async function allocatePort(excludedPorts = new Set) {
+    for (let port = basePort;port <= maxPort; port++) {
+      if (usedPorts.has(port) || excludedPorts.has(port))
+        continue;
+      usedPorts.add(port);
+      if (portPids(port).length > 0) {
+        usedPorts.delete(port);
+        continue;
+      }
+      return port;
+    }
+    throw new Error(`No available ports for background-bash (range ${basePort}-${maxPort}, ${instances.size} active)`);
+  }
+  async function isHealthy(port) {
+    try {
+      const response = await fetchImpl(`http://127.0.0.1:${port}/health`, {
+        signal: AbortSignal.timeout(2000)
+      });
+      return response.ok && await response.text() === runtimeServerId;
+    } catch {
+      return false;
+    }
+  }
+  function killRuntime() {
+    const key = "runtime";
+    const instance = instances.get(key);
+    if (!instance)
+      return;
+    try {
+      instance.process.kill("SIGTERM");
+    } catch {}
+    usedPorts.delete(instance.port);
+    instances.delete(key);
+    logger.info({ key, port: instance.port }, "background-bash server killed");
+  }
+  async function spawnServer(key, reservedPort, excludedPorts = new Set) {
+    const port = reservedPort ?? await allocatePort(excludedPorts);
+    const process2 = spawnImpl("bun", ["run", serverFile, `--port=${port}`], {
+      stdio: "ignore",
+      detached: false,
+      env: {
+        ...options.env ?? globalThis.process.env,
+        NEGOTIUM_BG_BASH_CAPABILITY: runtimeCapability,
+        NEGOTIUM_BG_BASH_SERVER_ID: runtimeServerId
+      }
+    });
+    process2.once("error", (error) => {
+      logger.error({ err: error, key }, "background-bash server error");
+      if (instances.get(key)?.process === process2) {
+        usedPorts.delete(port);
+        instances.delete(key);
+      }
+    });
+    process2.once("exit", (code) => {
+      logger.info({ key, code }, "background-bash server exited");
+      if (instances.get(key)?.process === process2) {
+        usedPorts.delete(port);
+        instances.delete(key);
+      }
+    });
+    const timestamp = now();
+    instances.set(key, { process: process2, port, startedAt: timestamp, lastUsedAt: timestamp });
+    const started = now();
+    while (now() - started < 8000) {
+      if (process2.exitCode !== null) {
+        const nextExcluded = new Set(excludedPorts);
+        nextExcluded.add(port);
+        return spawnServer(key, undefined, nextExcluded);
+      }
+      if (await isHealthy(port))
+        return port;
+      await wait(200);
+    }
+    killRuntime();
+    throw new Error(`background-bash server failed health check after spawn on port ${port}`);
+  }
+  async function ensure(userId, topic) {
+    const key = makeBgBashKey(userId, topic);
+    knownContexts.set(contextKey(userId, topic), { userId, topic });
+    const inProgress = spawning.get(key);
+    if (inProgress)
+      return inProgress;
+    const promise = (async () => {
+      const existing = instances.get(key);
+      if (existing && !existing.process.killed && existing.process.exitCode === null) {
+        if (await isHealthy(existing.port)) {
+          existing.lastUsedAt = now();
+          return existing.port;
+        }
+        killRuntime();
+      } else if (existing) {
+        usedPorts.delete(existing.port);
+        instances.delete(key);
+      }
+      return spawnServer(key);
+    })().finally(() => spawning.delete(key));
+    spawning.set(key, promise);
+    return promise;
+  }
+  function clear(userId, topic) {
+    knownContexts.delete(contextKey(userId, topic));
+    const instance = instances.get("runtime");
+    if (!instance)
+      return;
+    const query = new URLSearchParams({
+      user: userId,
+      topic,
+      capability: contextCapability(userId, topic)
+    });
+    fetchImpl(`http://127.0.0.1:${instance.port}/contexts?${query}`, {
+      method: "DELETE"
+    }).catch(() => {});
+  }
+  function clearUser(userId) {
+    for (const context of [...knownContexts.values()]) {
+      if (context.userId === userId)
+        clear(context.userId, context.topic);
+    }
+  }
+  async function killAll() {
+    const entries = [...instances.values()];
+    for (const instance of entries) {
+      try {
+        instance.process.kill("SIGTERM");
+      } catch {}
+    }
+    instances.clear();
+    usedPorts.clear();
+    knownContexts.clear();
+    const deadline = now() + 3000;
+    await Promise.all(entries.map((instance) => new Promise((resolve4) => {
+      if (instance.process.exitCode !== null || instance.process.killed)
+        return resolve4();
+      instance.process.once("exit", resolve4);
+      instance.process.once("error", resolve4);
+      const timer = setTimeout(resolve4, Math.max(0, deadline - now()));
+      timer.unref?.();
+    })));
+  }
+  return { contextCapability, ensure, clear, clearUser, killAll };
+}
+var defaultManager = createBackgroundBashManager();
+var bgBashContextCapability = defaultManager.contextCapability;
+var ensureBgBash = defaultManager.ensure;
+var killBgBash = defaultManager.clear;
+var killBgBashForUser = defaultManager.clearUser;
+var killAllBgBash = defaultManager.killAll;
+
+// ../../packages/core/src/platform/mcp-catalog-policy.ts
+var COMMON_RUNTIME_MCP_POLICY = {
+  playwright: { scopes: ["dm", "forum", "fork", "cron"], forumRequired: true },
+  runtime: { scopes: ["forum", "manager", "fork", "cron"], forumRequired: true },
+  "token-stats": { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+  task: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+  "session-comm": { scopes: ["forum", "fork", "manager"], forumRequired: true },
+  wiki: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+  skills: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+  "system-health": { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+  "background-bash": { scopes: ["forum"], forumRequired: true },
+  "agent-health": { scopes: ["forum", "manager", "cron"], forumRequired: true },
+  vault: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true }
+};
+function classifyForumMcpServers(catalog) {
+  const all = Object.entries(catalog).filter(([, entry]) => entry.scopes.includes("forum")).map(([name]) => name);
+  const required = Object.entries(catalog).filter(([, entry]) => entry.scopes.includes("forum") && entry.forumRequired).map(([name]) => name);
+  const requiredSet = new Set(required);
+  return { all, required, optional: all.filter((name) => !requiredSet.has(name)) };
+}
+function commonRuntimeMcpPolicy(name) {
+  return COMMON_RUNTIME_MCP_POLICY[name];
+}
+
+// ../../packages/core/src/platform/playwright/capability.ts
+import { createHmac as createHmac3 } from "crypto";
+function browserOwnerCapability(capability, owner) {
+  return createHmac3("sha256", capability).update(owner).digest("hex");
+}
+
+// ../../packages/core/src/platform/mcp-config.ts
+function buildStdioMcpServer(agent, serverFile, serverArgs, env) {
+  if (agent === "codex") {
+    return {
+      command: "node",
+      args: ["--import", TSX_LOADER, serverFile, ...serverArgs],
+      env: { TSX_TSCONFIG_PATH: TSCONFIG_PATH, ...env }
+    };
+  }
+  return {
+    command: "bun",
+    args: ["run", serverFile, ...serverArgs],
+    ...env ? { env } : {}
+  };
+}
+function useHostedBuiltinMcp() {
+  return envText("NEGOTIUM_BUILTIN_MCP_TRANSPORT") !== "stdio";
+}
+function buildBuiltinMcpServer(surface, ctx, stdio) {
+  if (!useHostedBuiltinMcp())
+    return stdio();
+  const agent = ctx.agent ?? FALLBACK_AGENT;
+  return buildHostedMcpSpec(agent, surface, {
+    userId: ctx.userId,
+    topicTitle: ctx.session,
+    ...ctx.topicId ? { topicId: ctx.topicId } : {},
+    ...ctx.queryId ? { queryId: ctx.queryId } : {},
+    ...ctx.wikiTopicId ? { wikiTopicId: ctx.wikiTopicId } : {},
+    ...ctx.subagentParentTopicId ? { subagentParentTopicId: ctx.subagentParentTopicId } : {},
+    cwd: ctx.cwd ?? (ctx.topicId ? resolveTopicWorkspaceDir(ctx.topicId) : process.cwd()),
+    agent,
+    ...ctx.model ? { model: ctx.model } : {},
+    ...ctx.depth !== undefined ? { depth: ctx.depth } : {},
+    ...ctx.silent !== undefined ? { silent: ctx.silent } : {},
+    ...ctx.peerBridge ? { peerBridge: ctx.peerBridge } : {}
+  });
+}
+var _playwrightUnavailableNotifier;
+var _playwrightUnavailableLastNotifiedAt = new Map;
+var _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS = 5 * 60000;
+var _playwrightUnavailableThisTurn = new Set;
+function _playwrightUnavailableKey(userId, topic) {
+  return `${userId}:${topic ?? ""}`;
+}
+function _markPlaywrightUnavailable(ctx) {
+  _playwrightUnavailableThisTurn.add(_playwrightUnavailableKey(ctx.userId, ctx.topic));
+  if (!_playwrightUnavailableNotifier)
+    return;
+  const key = _playwrightUnavailableKey(ctx.userId, ctx.topic);
+  const now = Date.now();
+  const last = _playwrightUnavailableLastNotifiedAt.get(key) ?? 0;
+  if (now - last < _PLAYWRIGHT_UNAVAILABLE_COOLDOWN_MS)
+    return;
+  _playwrightUnavailableLastNotifiedAt.set(key, now);
+  try {
+    _playwrightUnavailableNotifier(ctx);
+  } catch (err) {
+    logger.warn({ err }, "playwright unavailable notifier threw");
+  }
+}
+var CODEX_BROWSER_CAPABILITY_ENV = "NEGOTIUM_BROWSER_CAPABILITY";
+function browserOwnerForContext(ctx) {
+  if (ctx.topicId)
+    return `topic:${ctx.topicId}`;
+  if (ctx.userId && ctx.session)
+    return `user:${ctx.userId}:${ctx.session}`;
+  return;
+}
+function playwrightTransport(port, owner, capability, agent) {
+  const ownerCapability = browserOwnerCapability(capability, owner);
+  if (agent === "codex") {
+    const query2 = new URLSearchParams({ owner });
+    return {
+      url: `http://127.0.0.1:${port}/mcp?${query2}`,
+      env_http_headers: { "X-Browser-Capability": CODEX_BROWSER_CAPABILITY_ENV }
+    };
+  }
+  const query = new URLSearchParams({ owner });
+  if (agent === "maestro") {
+    return buildStdioMcpServer("maestro", BROWSER_MCP_SSE_PROXY_SERVER, [], {
+      NEGOTIUM_BROWSER_SSE_URL: `http://127.0.0.1:${port}/sse?${query}`,
+      NEGOTIUM_BROWSER_OWNER_CAPABILITY: ownerCapability
+    });
+  }
+  return {
+    type: "sse",
+    url: `http://127.0.0.1:${port}/sse?${query}`,
+    headers: { "X-Browser-Capability": ownerCapability }
+  };
+}
+function longLivedHttpMcp(agent, port) {
+  return agent === "codex" ? { url: `http://127.0.0.1:${port}/mcp` } : { type: "sse", url: `http://127.0.0.1:${port}/sse` };
+}
+function backgroundBashTransport(agent, port, userId, topic) {
+  const capability = bgBashContextCapability(userId, topic);
+  const headers = {
+    "X-Background-Bash-User": userId,
+    "X-Background-Bash-Topic": topic,
+    "X-Background-Bash-Capability": capability
+  };
+  if (agent === "codex")
+    return { url: `http://127.0.0.1:${port}/mcp`, http_headers: headers };
+  if (agent === "maestro") {
+    const query = new URLSearchParams({ user: userId, topic, capability });
+    return { type: "sse", url: `http://127.0.0.1:${port}/sse?${query}` };
+  }
+  return { type: "sse", url: `http://127.0.0.1:${port}/sse`, headers };
+}
+var MCP_CATALOG = {
+  playwright: {
+    ...commonRuntimeMcpPolicy("playwright"),
+    build({ userId, session, topicId, playwrightPort, playwrightCapability, agent }) {
+      if (playwrightPort && playwrightCapability) {
+        const owner = browserOwnerForContext({ userId, session, topicId });
+        if (!owner)
+          return null;
+        return playwrightTransport(playwrightPort, owner, playwrightCapability, agent);
+      }
+      _markPlaywrightUnavailable({
+        userId,
+        topic: session,
+        agent
+      });
+      return null;
+    }
+  },
+  [RUNTIME_MCP_KEY]: {
+    ...commonRuntimeMcpPolicy("runtime"),
+    build({
+      userId,
+      session,
+      topicId,
+      queryId,
+      agent,
+      cwd,
+      model,
+      currentUserPrompt,
+      autoContinue,
+      visualTools,
+      fileDeliveryTools,
+      peerBridge
+    }) {
+      if (!topicId || !agent)
+        return null;
+      return buildRuntimeMcpSpec(agent, {
+        userId,
+        topicId,
+        topicTitle: session,
+        queryId,
+        cwd: cwd ?? resolveTopicWorkspaceDir(topicId),
+        agent,
+        model,
+        currentUserPrompt,
+        autoContinue,
+        visualTools,
+        fileDeliveryTools,
+        peerBridge
+      });
+    }
+  },
+  "token-stats": {
+    ...commonRuntimeMcpPolicy("token-stats"),
+    build(ctx) {
+      return buildBuiltinMcpServer("token-stats", ctx, () => buildStdioMcpServer(ctx.agent, TOKEN_STATS_SERVER, [`--user-id=${ctx.userId}`]));
+    }
+  },
+  task: {
+    ...commonRuntimeMcpPolicy("task"),
+    build(ctx) {
+      const { userId, session, topicId, queryId, agent, peerBridge } = ctx;
+      if (peerBridge) {
+        if (!topicId || !queryId)
+          return null;
+        const env = canonicalMcpBridgeEnv({
+          surface: "task",
+          userId,
+          topicId,
+          queryId,
+          peerBridge
+        });
+        return env ? buildStdioMcpServer(agent, CANONICAL_MCP_PROXY_SERVER, ["--surface=task"], env) : null;
+      }
+      const args = [`--user-id=${userId}`, `--topic=${session}`];
+      if (topicId)
+        args.push(`--topic-id=${topicId}`);
+      return buildBuiltinMcpServer("task", ctx, () => buildStdioMcpServer(agent, TASK_SERVER, args));
+    }
+  },
+  "session-comm": {
+    ...commonRuntimeMcpPolicy("session-comm"),
+    build(ctx) {
+      const {
+        userId,
+        session,
+        topicId,
+        subagentParentTopicId,
+        agent,
+        depth = 0,
+        silent,
+        peerBridge
+      } = ctx;
+      const effectiveAgent = agent ?? FALLBACK_AGENT;
+      const args = [
+        `--user-id=${userId}`,
+        `--topic=${session}`,
+        ...topicId ? [`--topic-id=${topicId}`] : [],
+        ...subagentParentTopicId ? [`--subagent-parent-topic-id=${subagentParentTopicId}`] : [],
+        `--depth=${depth}`,
+        `--agent=${effectiveAgent}`,
+        ...silent ? ["--reply-only=true"] : [],
+        ...peerBridge ? [`--peer-host-query-id=${peerBridge.hostQueryId}`] : []
+      ];
+      return buildBuiltinMcpServer("session-comm", ctx, () => buildStdioMcpServer(effectiveAgent, SESSION_COMM_SERVER, args, peerBridge ? peerSessionBridgeIpcEnv() : undefined));
+    }
+  },
+  wiki: {
+    ...commonRuntimeMcpPolicy("wiki"),
+    build(ctx) {
+      const { userId, session, topicId, queryId, wikiTopicId, agent, peerBridge } = ctx;
+      if (peerBridge) {
+        if (!topicId || !queryId)
+          return null;
+        const env = canonicalMcpBridgeEnv({
+          surface: "wiki",
+          userId,
+          topicId,
+          queryId,
+          peerBridge
+        });
+        return env ? buildStdioMcpServer(agent, CANONICAL_MCP_PROXY_SERVER, ["--surface=wiki"], env) : null;
+      }
+      const args = [`--user-id=${userId}`];
+      const resolvedWikiTopicId = wikiTopicId ?? topicId ?? (session !== "dm" ? session : undefined);
+      if (resolvedWikiTopicId)
+        args.push(`--topic-id=${resolvedWikiTopicId}`);
+      args.push("--surface=wiki");
+      return buildBuiltinMcpServer("wiki", { ...ctx, wikiTopicId: resolvedWikiTopicId }, () => buildStdioMcpServer(agent, WIKI_SERVER, args));
+    }
+  },
+  skills: {
+    ...commonRuntimeMcpPolicy("skills"),
+    build(ctx) {
+      const { userId, topicId, agent } = ctx;
+      const args = [`--user-id=${userId}`, "--surface=skills"];
+      if (topicId)
+        args.push(`--topic-id=${topicId}`);
+      return buildBuiltinMcpServer("skills", ctx, () => buildStdioMcpServer(agent, WIKI_SERVER, args));
+    }
+  },
+  "system-health": {
+    ...commonRuntimeMcpPolicy("system-health"),
+    build(ctx) {
+      return buildBuiltinMcpServer("system-health", ctx, () => buildStdioMcpServer(ctx.agent, SYSTEM_HEALTH_SERVER, []));
+    }
+  },
+  "background-bash": {
+    ...commonRuntimeMcpPolicy("background-bash"),
+    build({ agent, bgBashPort, userId, topicId }) {
+      if (bgBashPort === undefined || !topicId)
+        return null;
+      return backgroundBashTransport(agent, bgBashPort, userId, topicId);
+    }
+  },
+  "agent-health": {
+    ...commonRuntimeMcpPolicy("agent-health"),
+    build(ctx) {
+      const { userId, agent } = ctx;
+      const args = [`--user-id=${userId}`];
+      return buildBuiltinMcpServer("agent-health", ctx, () => buildStdioMcpServer(agent, AGENT_HEALTH_SERVER, args));
+    }
+  },
+  vault: {
+    ...commonRuntimeMcpPolicy("vault"),
+    build(ctx) {
+      const { userId, agent } = ctx;
+      const args = [`--user-id=${userId}`];
+      if (agent !== "codex")
+        args.push("--list-only=true");
+      return buildBuiltinMcpServer("vault", ctx, () => buildStdioMcpServer(agent, VAULT_SERVER, args));
+    }
+  }
+};
+var allForumMcpServerNames = [];
+var requiredForumMcpServers = [];
+var REQUIRED_FORUM_MCP_SERVERS = requiredForumMcpServers;
+var optionalForumMcpServers = [];
+function refreshForumCatalogViews() {
+  const { all, required, optional } = classifyForumMcpServers(MCP_CATALOG);
+  allForumMcpServerNames.splice(0, allForumMcpServerNames.length, ...all);
+  requiredForumMcpServers.splice(0, requiredForumMcpServers.length, ...required);
+  optionalForumMcpServers.splice(0, optionalForumMcpServers.length, ...optional);
+}
+refreshForumCatalogViews();
+var nodeMcpEntries = [];
+function buildNodeMcpSpecs(agent, filter) {
+  const out = {};
+  for (const entry of nodeMcpEntries) {
+    if (!filter(entry.key))
+      continue;
+    out[entry.key] = entry.kind === "http" ? longLivedHttpMcp(agent, entry.port) : {
+      command: entry.command,
+      args: entry.args ?? [],
+      ...entry.env ? { env: entry.env } : {}
+    };
+  }
+  return out;
+}
+function buildScope(scope, ctx, filter = () => true) {
+  const out = {};
+  for (const [name, entry] of Object.entries(MCP_CATALOG)) {
+    if (!entry.scopes.includes(scope))
+      continue;
+    if (!filter(name))
+      continue;
+    const spec = entry.build(ctx);
+    if (spec === null)
+      continue;
+    out[name] = spec;
+  }
+  if (scope !== "cron") {
+    Object.assign(out, buildNodeMcpSpecs(ctx.agent, filter));
+  }
+  return out;
+}
+function getDmMcpServers(opts) {
+  return buildScope("dm", {
+    userId: opts.userId,
+    session: "dm",
+    agent: opts.agent,
+    playwrightPort: opts.playwrightPort,
+    playwrightCapability: opts.playwrightCapability
+  });
+}
+function getManagerMcpServers(opts) {
+  if (!opts.topicId) {
+    throw new Error("getManagerMcpServers: private General topicId is required");
+  }
+  const topicId = opts.topicId;
+  return buildScope("manager", {
+    userId: opts.userId,
+    session: opts.session ?? "General",
+    topicId,
+    queryId: opts.queryId,
+    wikiTopicId: opts.wikiTopicId ?? topicId,
+    agent: opts.agent,
+    cwd: opts.cwd,
+    model: opts.model,
+    currentUserPrompt: opts.currentUserPrompt,
+    playwrightPort: opts.playwrightPort,
+    playwrightCapability: opts.playwrightCapability,
+    autoContinue: opts.autoContinue,
+    visualTools: opts.visualTools,
+    fileDeliveryTools: opts.fileDeliveryTools
+  });
+}
+function getForumMcpServers(opts) {
+  const {
+    userId,
+    session,
+    topicId,
+    subagentParentTopicId,
+    queryId,
+    wikiTopicId,
+    agent,
+    cwd,
+    model,
+    currentUserPrompt,
+    playwrightPort,
+    playwrightCapability,
+    depth = 0,
+    enabled = null,
+    extra = {},
+    silent = false,
+    bgBashPort,
+    autoContinue,
+    visualTools,
+    fileDeliveryTools,
+    peerBridge
+  } = opts;
+  const filter = (name) => {
+    if (silent && name === "task")
+      return false;
+    if (enabled === null)
+      return true;
+    return enabled.includes(name) || REQUIRED_FORUM_MCP_SERVERS.includes(name);
+  };
+  const base = buildScope("forum", {
+    userId,
+    session,
+    topicId,
+    subagentParentTopicId,
+    queryId,
+    wikiTopicId,
+    agent,
+    cwd,
+    model,
+    currentUserPrompt,
+    depth,
+    playwrightPort,
+    playwrightCapability,
+    bgBashPort,
+    autoContinue,
+    visualTools,
+    fileDeliveryTools,
+    silent,
+    peerBridge
+  }, filter);
+  return { ...base, ...extra };
+}
+function getCronMcpServers(opts) {
+  return buildScope("cron", {
+    userId: opts.userId,
+    session: opts.session,
+    topicId: opts.topicId,
+    queryId: opts.queryId,
+    wikiTopicId: opts.wikiTopicId ?? opts.topicId,
+    agent: opts.agent,
+    cwd: opts.cwd,
+    model: opts.model,
+    currentUserPrompt: opts.currentUserPrompt,
+    playwrightPort: opts.playwrightPort,
+    playwrightCapability: opts.playwrightCapability,
+    autoContinue: false,
+    visualTools: opts.visualTools,
+    fileDeliveryTools: opts.fileDeliveryTools
+  });
+}
+function getMcpServersForQuery(opts) {
+  if (opts.toolPolicy === "none")
+    return {};
+  if (opts.toolPolicy === "compaction-log") {
+    const compactLog = opts.mcpExtra?.compact_log;
+    return compactLog ? { compact_log: compactLog } : {};
+  }
+  if (opts.sessionType === "cron") {
+    if (!opts.topicId)
+      throw new Error("getMcpServersForQuery: cron sessionType requires topicId");
+    return getCronMcpServers({
+      userId: opts.userId || "local",
+      session: opts.session || "cron",
+      topicId: opts.topicId,
+      queryId: opts.queryId,
+      wikiTopicId: opts.wikiTopicId,
+      agent: opts.agent,
+      cwd: opts.cwd,
+      model: opts.model,
+      currentUserPrompt: opts.prompt,
+      playwrightPort: opts.playwrightPort,
+      playwrightCapability: opts.playwrightCapability,
+      visualTools: opts.visualTools,
+      fileDeliveryTools: opts.fileDeliveryTools
+    });
+  }
+  if (opts.sessionType === "dm" || opts.sessionType === "ephemeral") {
+    return getDmMcpServers({
+      userId: opts.userId || "local",
+      agent: opts.agent,
+      playwrightPort: opts.playwrightPort,
+      playwrightCapability: opts.playwrightCapability
+    });
+  }
+  if (opts.sessionType === "manager") {
+    return getManagerMcpServers({
+      userId: opts.userId || "local",
+      session: opts.session,
+      topicId: opts.topicId,
+      queryId: opts.queryId,
+      wikiTopicId: opts.wikiTopicId,
+      agent: opts.agent,
+      cwd: opts.cwd,
+      model: opts.model,
+      currentUserPrompt: opts.prompt,
+      playwrightPort: opts.playwrightPort,
+      playwrightCapability: opts.playwrightCapability,
+      autoContinue: opts.autoContinue,
+      visualTools: opts.visualTools,
+      fileDeliveryTools: opts.fileDeliveryTools
+    });
+  }
+  return getForumMcpServers({
+    userId: opts.userId || "local",
+    session: opts.session || "default",
+    topicId: opts.topicId,
+    subagentParentTopicId: opts.subagentParentTopicId,
+    queryId: opts.queryId,
+    wikiTopicId: opts.wikiTopicId,
+    agent: opts.agent,
+    cwd: opts.cwd,
+    model: opts.model,
+    currentUserPrompt: opts.prompt,
+    playwrightPort: opts.playwrightPort,
+    playwrightCapability: opts.playwrightCapability,
+    bgBashPort: opts.bgBashPort,
+    autoContinue: opts.autoContinue,
+    visualTools: opts.visualTools,
+    fileDeliveryTools: opts.fileDeliveryTools,
+    depth: opts.depth,
+    enabled: opts.mcpEnabled,
+    extra: opts.mcpExtra,
+    silent: opts.silent,
+    peerBridge: opts.peerBridge
+  });
+}
+
+// ../../packages/core/src/storage/vault.ts
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync4 } from "fs";
+import { join as join3 } from "path";
+
+// ../../packages/core/src/storage/sqlite.ts
+var isBun = typeof process.versions.bun === "string";
+var Database;
+if (isBun) {
+  ({ Database } = await import("bun:sqlite"));
+} else {
+  const nodeSqliteSpecifier = ["node", "sqlite"].join(":");
+  const { DatabaseSync } = await import(nodeSqliteSpecifier);
+
+  class NodeDatabase {
+    #db;
+    constructor(path, options = {}) {
+      this.#db = options.readonly ? new DatabaseSync(path, { readOnly: true }) : new DatabaseSync(path);
+    }
+    query(sql) {
+      return this.#db.prepare(sql);
+    }
+    prepare(sql) {
+      return this.#db.prepare(sql);
+    }
+    exec(sql) {
+      this.#db.exec(sql);
+    }
+    run(sql, ...params) {
+      return this.#db.prepare(sql).run(...params);
+    }
+    transaction(fn) {
+      const run = (begin) => (...args) => {
+        this.#db.exec(begin);
+        try {
+          const result = fn(...args);
+          this.#db.exec("COMMIT");
+          return result;
+        } catch (err) {
+          this.#db.exec("ROLLBACK");
+          throw err;
+        }
+      };
+      const tx = run("BEGIN");
+      tx.deferred = run("BEGIN DEFERRED");
+      tx.immediate = run("BEGIN IMMEDIATE");
+      tx.exclusive = run("BEGIN EXCLUSIVE");
+      return tx;
+    }
+    close() {
+      this.#db.close();
+    }
+  }
+  Database = NodeDatabase;
+}
+
+// ../../packages/core/src/storage/vault-crypto-core.ts
+import { createCipheriv, createDecipheriv, createHash, randomBytes as randomBytes3 } from "crypto";
+var ENVELOPE_PREFIX = "otium-vault:v1:";
+var IV_BYTES = 12;
+var KEY_BYTES = 32;
+function encryptionKey(masterKey) {
+  return createHash("sha256").update("otium-vault-value-v1\x00", "utf8").update(masterKey, "utf8").digest().subarray(0, KEY_BYTES);
+}
+function aad(userId, key) {
+  return Buffer.from(`${userId}\x00${key.toUpperCase()}`, "utf8");
+}
+function isEncryptedVaultValue(value) {
+  return value.startsWith(ENVELOPE_PREFIX);
+}
+function encryptVaultValueWithKey(userId, key, value, masterKey) {
+  const iv = randomBytes3(IV_BYTES);
+  const cipher = createCipheriv("aes-256-gcm", encryptionKey(masterKey), iv);
+  cipher.setAAD(aad(userId, key));
+  const ciphertext = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return `${ENVELOPE_PREFIX}${iv.toString("base64url")}.${ciphertext.toString("base64url")}.${tag.toString("base64url")}`;
+}
+function decryptVaultValueWithKey(userId, key, storedValue, masterKey) {
+  if (!isEncryptedVaultValue(storedValue)) {
+    return { value: storedValue, legacyPlaintext: true };
+  }
+  const encoded = storedValue.slice(ENVELOPE_PREFIX.length);
+  const [ivPart, ciphertextPart, tagPart, ...extra] = encoded.split(".");
+  if (!ivPart || ciphertextPart === undefined || !tagPart || extra.length > 0) {
+    throw new Error("Invalid encrypted vault value");
+  }
+  const iv = Buffer.from(ivPart, "base64url");
+  const ciphertext = Buffer.from(ciphertextPart, "base64url");
+  const tag = Buffer.from(tagPart, "base64url");
+  if (iv.length !== IV_BYTES || tag.length !== 16) {
+    throw new Error("Invalid encrypted vault value");
+  }
+  const decipher = createDecipheriv("aes-256-gcm", encryptionKey(masterKey), iv);
+  decipher.setAAD(aad(userId, key));
+  decipher.setAuthTag(tag);
+  const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+  return { value: plaintext.toString("utf8"), legacyPlaintext: false };
+}
+
+// ../../packages/core/src/storage/vault-crypto.ts
+function encryptVaultValue(userId, key, value, masterKey = VAULT_MASTER_KEY) {
+  return encryptVaultValueWithKey(userId, key, value, masterKey);
+}
+function decryptVaultValue(userId, key, storedValue, masterKey = VAULT_MASTER_KEY) {
+  return decryptVaultValueWithKey(userId, key, storedValue, masterKey);
+}
+
+// ../../packages/core/src/storage/vault.ts
+var vaultDb;
+var vaultMasterKey = VAULT_MASTER_KEY;
+function initializeVaultDatabase(database) {
+  database.exec("PRAGMA journal_mode = WAL");
+  database.exec("PRAGMA busy_timeout = 5000");
+  database.exec(`
+  CREATE TABLE IF NOT EXISTS vault (
+    user_id     TEXT    NOT NULL,
+    key         TEXT    NOT NULL,
+    value       TEXT    NOT NULL,
+    description TEXT    NOT NULL DEFAULT '',
+    PRIMARY KEY (user_id, key)
+  )
+  `);
+  {
+    const cols = database.prepare("PRAGMA table_info(vault)").all();
+    const uid = cols.find((c) => c.name === "user_id");
+    if (uid && uid.type.toUpperCase() === "INTEGER") {
+      database.exec("BEGIN");
+      database.exec(`
+      CREATE TABLE vault_migrated (
+        user_id     TEXT    NOT NULL,
+        key         TEXT    NOT NULL,
+        value       TEXT    NOT NULL,
+        description TEXT    NOT NULL DEFAULT '',
+        PRIMARY KEY (user_id, key)
+      )
+    `);
+      database.exec("INSERT INTO vault_migrated SELECT CAST(user_id AS TEXT), key, value, description FROM vault");
+      database.exec("DROP TABLE vault");
+      database.exec("ALTER TABLE vault_migrated RENAME TO vault");
+      database.exec("COMMIT");
+    }
+  }
+}
+function openVaultDatabase(dataDir) {
+  const vaultDir = join3(dataDir, "vault");
+  const path = join3(vaultDir, "vault.db");
+  mkdirSync4(vaultDir, { recursive: true, mode: 448 });
+  const database = new Database(path, { create: true });
+  chmodSync2(path, 384);
+  initializeVaultDatabase(database);
+  return database;
+}
+function activeVaultDatabase() {
+  if (!vaultDb)
+    vaultDb = openVaultDatabase(DATA_DIR);
+  return vaultDb;
+}
+var VAULT_VALUE_MAX_BYTES = 64 * 1024;
+function normalizeVaultKey(key) {
+  return key.trim().toUpperCase();
+}
+function decryptRow(userId, key, storedValue) {
+  const database = activeVaultDatabase();
+  const decoded = decryptVaultValue(userId, key, storedValue, vaultMasterKey);
+  if (decoded.legacyPlaintext) {
+    database.prepare("UPDATE vault SET value = ? WHERE user_id = ? AND key = ? AND value = ?").run(encryptVaultValue(userId, key, decoded.value, vaultMasterKey), userId, key, storedValue);
+  }
+  return decoded.value;
+}
+function vaultListDecryptableValues(userId) {
+  const rows = activeVaultDatabase().prepare("SELECT key, description, value FROM vault WHERE user_id = ? ORDER BY key").all(userId);
+  const entries = [];
+  for (const row of rows) {
+    try {
+      entries.push({
+        key: row.key,
+        description: row.description,
+        value: decryptRow(userId, row.key, row.value)
+      });
+    } catch {}
+  }
+  return entries;
+}
+function vaultGetValue(userId, key) {
+  const normalizedKey = normalizeVaultKey(key);
+  const row = activeVaultDatabase().prepare("SELECT key, value FROM vault WHERE user_id = ? AND key = ?").get(userId, normalizedKey);
+  return row ? decryptRow(userId, row.key, row.value) : undefined;
+}
+function vaultSubstituteDetailed(userId, text) {
+  const entries = new Map;
+  const usedKeys = new Set;
+  const substituted = text.replace(/\{\{([^}]+)\}\}/g, (match, rawKey) => {
+    const key = normalizeVaultKey(rawKey);
+    if (!entries.has(key))
+      entries.set(key, vaultGetValue(userId, key));
+    const value = entries.get(key);
+    if (value === undefined)
+      return match;
+    usedKeys.add(key);
+    return value;
+  });
+  return { text: substituted, usedKeys: [...usedKeys] };
+}
+function encodedSecretForms(value) {
+  const forms = new Set([
+    value,
+    encodeURIComponent(value),
+    Buffer.from(value, "utf8").toString("base64"),
+    Buffer.from(value, "utf8").toString("base64url"),
+    Buffer.from(value, "utf8").toString("hex")
+  ]);
+  forms.delete("");
+  return [...forms].sort((a, b) => b.length - a.length);
+}
+function redactVaultSecrets(userId, text) {
+  const candidates = vaultListDecryptableValues(userId).flatMap((entry) => encodedSecretForms(entry.value).map((form) => ({ form, key: entry.key }))).sort((a, b) => b.form.length - a.form.length || a.key.localeCompare(b.key));
+  if (candidates.length === 0)
+    return text;
+  const candidatesByFirstCharacter = new Map;
+  for (const candidate of candidates) {
+    const first = candidate.form[0];
+    if (!first)
+      continue;
+    const bucket = candidatesByFirstCharacter.get(first) ?? [];
+    bucket.push(candidate);
+    candidatesByFirstCharacter.set(first, bucket);
+  }
+  let redacted = "";
+  let offset = 0;
+  while (offset < text.length) {
+    const match = candidatesByFirstCharacter.get(text[offset] ?? "")?.find((candidate) => text.startsWith(candidate.form, offset));
+    if (!match) {
+      redacted += text[offset];
+      offset += 1;
+      continue;
+    }
+    redacted += `[REDACTED:${match.key}]`;
+    offset += match.form.length;
+  }
+  return redacted;
+}
+
+// ../../packages/core/src/agents/execution-host.ts
+var defaultHost = {
+  getMcpServersForQuery,
+  redactVaultSecrets,
+  substituteVaultSecrets: (userId, value) => vaultSubstituteDetailed(userId, value).text,
+  referencesRuntimeSecretStorage,
+  shouldRedirectVaultTool,
+  claudeCodeExecutablePath: () => CLAUDE_EXECUTABLE,
+  codexAuthFilePath
+};
+var hostRegistrations = [];
+var scopedHost = new AsyncLocalStorage;
+function activeHost() {
+  const scoped = scopedHost.getStore();
+  if (scoped)
+    return scoped;
+  const host = { ...defaultHost };
+  for (const registration of hostRegistrations)
+    Object.assign(host, registration.overrides);
+  return host;
+}
+function hostedCodexAuthFilePath() {
+  return activeHost().codexAuthFilePath();
+}
+function hostedCodexHomePath() {
+  return dirname3(hostedCodexAuthFilePath());
+}
+
+// ../../packages/core/src/agents/rollout/codex.ts
 function codexSessionsDir() {
-  return join4(process.env.CODEX_HOME || join4(homedir3(), ".codex"), "sessions");
+  return join4(hostedCodexHomePath(), "sessions");
 }
 var _shellCache = null;
 function loadCodexShell() {
@@ -765,7 +1939,7 @@ function loadCodexShell() {
 function uuidv7() {
   const ts = Date.now();
   const tsHex = ts.toString(16).padStart(12, "0");
-  const rand = randomBytes2(10);
+  const rand = randomBytes4(10);
   rand[0] = rand[0] & 15 | 112;
   rand[2] = rand[2] & 63 | 128;
   return [
@@ -807,12 +1981,12 @@ function patchEnvContext(envContext, cwd, currentDate, timezone) {
   }
 }
 function canonicalFilePath(path) {
-  const absolute = resolve3(path);
+  const absolute = resolve4(path);
   try {
-    return realpathSync(absolute);
+    return realpathSync2(absolute);
   } catch {
     try {
-      return join4(realpathSync(dirname4(absolute)), basename(absolute));
+      return join4(realpathSync2(dirname4(absolute)), basename(absolute));
     } catch {
       return absolute;
     }
@@ -1220,6 +2394,6 @@ function formatDateBucket(d) {
   return `${yyyy}/${mm}/${dd}`;
 }
 
-export { __require, logger, CLAUDE_EFFORT_VALUES, CODEX_EFFORT_VALUES, MAESTRO_EFFORT_VALUES, MODEL_SONNET, MODEL_OPUS, MODEL_FABLE, configureRolloutHost, assertUuidLike, ensureCwdExists, extractChatPairs, encodeClaudeCwd, writeClaudeRollout, repairPoisonedRollout, extractLatestCodexPatchPreview, extractCodexPatchCallIds, readCodexPatchCallIds, readLatestCodexPatchPreview, extractLatestCodexContextUsage, readLatestCodexContextUsage, migrateCodexRolloutNativeMultiAgentMetadata, writeCodexRollout, decodeUuidV7Timestamp };
+export { __require, logger, CLAUDE_EFFORT_VALUES, CODEX_EFFORT_VALUES, MAESTRO_EFFORT_VALUES, MODEL_SONNET, MODEL_OPUS, MODEL_FABLE, configureRolloutHost, assertUuidLike, ensureCwdExists, extractChatPairs, encodeClaudeCwd, writeClaudeRollout, repairPoisonedRollout, hostedCodexHomePath, extractLatestCodexPatchPreview, extractCodexPatchCallIds, readCodexPatchCallIds, readLatestCodexPatchPreview, extractLatestCodexContextUsage, readLatestCodexContextUsage, migrateCodexRolloutNativeMultiAgentMetadata, latestCodexRolloutPath, writeCodexRollout, decodeUuidV7Timestamp };
 
-//# debugId=9D224F8B58C2166C64756E2164756E21
+//# debugId=889664B432D1D24364756E2164756E21