negotium 0.3.0 → 0.3.1

package/dist/main.js

@@ -273,7 +273,7 @@ function resolveDefaultModel(agent, registryDefaultModel) {
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.19", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.5", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.21", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.5", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -303,6 +303,7 @@ var init_config = __esm(() => {
   TSCONFIG_PATH = resolve(PROJECT_ROOT, "tsconfig.json");
   SESSION_COMM_SERVER = resolve(PROJECT_ROOT, "src/mcp/session-comm/server.ts");
   TASK_SERVER = resolve(PROJECT_ROOT, "src/mcp/task-server.ts");
+  DECISION_SERVER = resolve(PROJECT_ROOT, "src/mcp/decision-server.ts");
   BROWSER_MCP_SSE_PROXY_SERVER = resolve(PROJECT_ROOT, "src/mcp/browser-sse-proxy-server.ts");
   CANONICAL_MCP_PROXY_SERVER = resolve(PROJECT_ROOT, "src/mcp/canonical-proxy-server.ts");
   WIKI_SERVER = resolve(PROJECT_ROOT, "src/mcp/wiki-server.ts");
@@ -1868,7 +1869,7 @@ var exports_version = {};
 __export(exports_version, {
   NEGOTIUM_VERSION: () => NEGOTIUM_VERSION
 });
-var NEGOTIUM_VERSION = "0.3.0";
+var NEGOTIUM_VERSION = "0.3.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn } from "child_process";
@@ -2391,6 +2392,7 @@ var init_runtime_spec = __esm(() => {
   init_types();
   HOSTED_MCP_SURFACES = [
     "task",
+    "decision",
     "token-stats",
     "system-health",
     "vault",
@@ -2661,6 +2663,7 @@ var init_mcp_catalog_policy = __esm(() => {
     runtime: { scopes: ["forum", "manager", "fork", "cron"], forumRequired: true },
     "token-stats": { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
     task: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+    decision: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
     "session-comm": { scopes: ["forum", "fork", "manager"], forumRequired: true },
     wiki: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
     skills: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
@@ -2913,7 +2916,7 @@ function getForumMcpServers(opts) {
     peerBridge
   } = opts;
   const filter = (name) => {
-    if (silent && name === "task")
+    if (silent && (name === "task" || name === "decision"))
       return false;
     if (enabled === null)
       return true;
@@ -3131,6 +3134,34 @@ var init_mcp_config = __esm(() => {
         return buildBuiltinMcpServer("task", ctx, () => buildStdioMcpServer(agent, TASK_SERVER, args));
       }
     },
+    decision: {
+      ...commonRuntimeMcpPolicy("decision"),
+      build(ctx) {
+        const { userId, session, topicId, queryId, agent, model, peerBridge } = ctx;
+        if (peerBridge) {
+          if (!topicId || !queryId)
+            return null;
+          const env = canonicalMcpBridgeEnv({
+            surface: "decision",
+            userId,
+            topicId,
+            queryId,
+            peerBridge
+          });
+          return env ? buildStdioMcpServer(agent, CANONICAL_MCP_PROXY_SERVER, ["--surface=decision"], env) : null;
+        }
+        const args = [
+          `--user-id=${userId}`,
+          `--topic=${session}`,
+          `--agent=${agent ?? FALLBACK_AGENT}`
+        ];
+        if (topicId)
+          args.push(`--topic-id=${topicId}`);
+        if (model)
+          args.push(`--model=${model}`);
+        return buildBuiltinMcpServer("decision", ctx, () => buildStdioMcpServer(agent, DECISION_SERVER, args));
+      }
+    },
     "session-comm": {
       ...commonRuntimeMcpPolicy("session-comm"),
       build(ctx) {
@@ -11655,6 +11686,7 @@ function buildRuntimeToolSection(opts, extensions) {
   } = opts;
   const runtimeNamespace = "mcp__runtime";
   const taskNamespace = "mcp__task";
+  const decisionNamespace = "mcp__decision";
   const visualToolLine = agentKind === "codex" ? `To display charts, tables, or interactive HTML results to the user, call the \`show_html\` function in the \`${runtimeNamespace}\` namespace with { html: "<complete HTML string>", title?: "optional title" }.` : `To display charts, tables, or interactive HTML results to the user, call the MCP tool "${runtimeNamespace}__show_html" with { html: "<complete HTML string>", title?: "optional title" }.`;
   const mermaidToolLine = agentKind === "codex" ? `For diagrams that Mermaid supports, prefer the \`show_mermaid\` function in the \`${runtimeNamespace}\` namespace with { code: "<Mermaid DSL without markdown fences>", title?: "...", theme?: "neutral" }.` : `For diagrams that Mermaid supports, prefer the MCP tool "${runtimeNamespace}__show_mermaid" with { code: "<Mermaid DSL without markdown fences>", title?: "...", theme?: "neutral" }.`;
   const mediaToolLine = agentKind === "codex" ? `To display an existing image or video in the visual panel, use \`show_image\` or \`show_video\` in the \`${runtimeNamespace}\` namespace with either { file_path: "...", title?: "..." } for a topic-workspace file or { file_id: "...", title?: "..." } for an uploaded file already attached in this topic.` : `To display an existing image or video in the visual panel, use MCP tool "${runtimeNamespace}__show_image" or "${runtimeNamespace}__show_video" with either { file_path: "...", title?: "..." } for a topic-workspace file or { file_id: "...", title?: "..." } for an uploaded file already attached in this topic.`;
@@ -11662,6 +11694,7 @@ function buildRuntimeToolSection(opts, extensions) {
   const askUserToolLine = agentKind === "codex" ? `When you need a blocking user choice, call the \`ask_user_question\` function in the \`${runtimeNamespace}\` namespace with { question: "...", choices: [{ label: "...", description?: "..." }] }.` : `When you need a blocking user choice, call the MCP tool "${runtimeNamespace}__ask_user_question" with { question: "...", choices: [{ label: "...", description?: "..." }] }.`;
   const scheduleSelfToolLine = agentKind === "codex" ? `For a one-shot delayed continuation within 24 hours, call the \`schedule_self\` function in the \`${runtimeNamespace}\` namespace with { delay_seconds: number, message: "self-contained future instruction" }. Only one pending self-schedule is allowed per topic; use \`get_self_schedule\`, \`update_self_schedule\`, or \`cancel_self_schedule\` in that namespace to manage it. Use cron-manager for recurring schedules.` : `For a one-shot delayed continuation within 24 hours, call the MCP tool "${runtimeNamespace}__schedule_self" with { delay_seconds: number, message: "self-contained future instruction" }. Only one pending self-schedule is allowed per topic; manage it with "${runtimeNamespace}__get_self_schedule", "${runtimeNamespace}__update_self_schedule", or "${runtimeNamespace}__cancel_self_schedule". Use cron-manager for recurring schedules.`;
   const taskToolLine = agentKind === "codex" ? `For task tracking, use \`task_create\`, \`task_update\`, \`task_list\`, \`task_get\`, and \`task_delete\` functions in the \`${taskNamespace}\` namespace.` : `For task tracking, use MCP tools "${taskNamespace}__task_create", "${taskNamespace}__task_update", "${taskNamespace}__task_list", "${taskNamespace}__task_get", and "${taskNamespace}__task_delete".`;
+  const decisionToolLine = `Use the shared Decision tools in the \`${decisionNamespace}\` namespace when an architectural, product, or operational choice establishes or changes a durable direction or constraint. Do not record routine task progress or temporary implementation details; link causal predecessors when relevant.`;
   const runtimeToolRef = (name) => agentKind === "codex" ? `\`${name}\`` : `"${runtimeNamespace}__${name}"`;
   const spawnSubagentToolLine = `Use ${runtimeToolRef("spawn_subagent")} for self-contained parallel or long-running background work; keep quick work inline.`;
   const lifecycleToolLine = `For staged work, call ${runtimeToolRef("create_subagent")} then ${runtimeToolRef("start_subagent")}. Create fixes \`task\` and \`report_mode\`; start takes only the room ID, so create after inputs are known unless preparing a \`tell_session\` receiver. Manage descendants with ${runtimeToolRef("list_subagents")} and ${runtimeToolRef("delete_subagent")}, and non-parent tell routes with ${runtimeToolRef("grant_subagent_tell")} and ${runtimeToolRef("revoke_subagent_tell")}. Direct-parent reporting needs no grant. Use ${runtimeToolRef("list_memory_topics")} to select \`memory_topic\`.`;
@@ -11708,6 +11741,9 @@ function buildRuntimeToolSection(opts, extensions) {
     taskToolLine,
     "Use this shared task store for plans, progress, and checklist updates; it is visible across claude/codex/maestro turns.",
     nativeTaskPolicyLine,
+    "",
+    "## Shared Decisions",
+    decisionToolLine,
     ...extensions.render("after-shared-tasks"),
     ...fileDeliverySection,
     ...extensions.render("before-session-communication"),
@@ -17162,6 +17198,10 @@ function buildMermaidHtml(code, theme, scriptUrl = MERMAID_BROWSER_ASSET_RELATIV
     .controls button:focus-visible{outline:2px solid var(--celadon);outline-offset:1px}
     .zoom-value{min-width:46px;color:var(--graphite);font:500 11px/1 Geist,system-ui,sans-serif;text-align:center;font-variant-numeric:tabular-nums}
     .error{margin:0;white-space:pre-wrap;color:#7D2E2E;background:#FFF5F2;border:1px solid #E4B9B1;border-radius:6px;padding:14px;font:13px ui-monospace,SFMono-Regular,Menlo,monospace}
+    .failure{max-width:56ch;margin:0 auto}
+    .failure p{margin:0 0 12px;color:var(--graphite);font:14px/1.6 Geist,system-ui,sans-serif}
+    .failure details{color:var(--graphite);font:12px/1.5 Geist,system-ui,sans-serif}
+    .failure summary{cursor:pointer;padding:4px 0}
     @media(max-width:600px){.viewport{padding:54px 14px 18px}.controls{top:10px;right:10px}}
   </style>
 </head>
@@ -17207,7 +17247,20 @@ function buildMermaidHtml(code, theme, scriptUrl = MERMAID_BROWSER_ASSET_RELATIV
       applyScale(scale, false);
       } catch (error) {
         document.querySelector(".controls")?.remove();
-        document.querySelector(".viewport").innerHTML = '<pre class="error">' + String(error && error.message ? error.message : error).replace(/[&<>]/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;'}[c])) + '</pre>';
+        const raw = String(error && error.message ? error.message : error);
+        const escape = (value) => value.replace(/[&<>]/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;'}[c]));
+        // Mermaid aborts the whole render when it cannot place an edge label:
+        // cardinality markers ask for a point a fixed distance along the edge,
+        // and a relation laid out shorter than that walks off the end. Nothing
+        // is wrong with the diagram, so the raw message sends authors looking
+        // for a syntax error that does not exist. Say what actually moves it.
+        const note = raw.indexOf("Could not find a suitable point") !== -1
+          ? "Two nodes ended up too close together for Mermaid to fit a label on the edge between them. Renaming a node, adding another, or setting an explicit direction usually spreads the layout enough to render."
+          : "This diagram could not be rendered.";
+        document.querySelector(".viewport").innerHTML =
+          '<div class="failure"><p>' + escape(note) +
+          '</p><details><summary>Technical detail</summary><pre class="error">' +
+          escape(raw) + '</pre></details></div>';
       }
     })();
   </script>
@@ -22945,9 +22998,208 @@ var init_conversation_migration = __esm(async () => {
   init_types();
 });
 
+// ../../packages/core/src/storage/decisions.ts
+var exports_decisions = {};
+__export(exports_decisions, {
+  writeDecisions: () => writeDecisions,
+  writeDecisionGraphSvg: () => writeDecisionGraphSvg,
+  validateDecisionGraph: () => validateDecisionGraph,
+  updateDecisions: () => updateDecisions,
+  renderDecisionList: () => renderDecisionList,
+  readDecisions: () => readDecisions,
+  getDecisionGraphSvgPath: () => getDecisionGraphSvgPath,
+  getDecisionFilePath: () => getDecisionFilePath,
+  deleteDecisions: () => deleteDecisions,
+  decisionScopeKey: () => decisionScopeKey,
+  createDecisions: () => createDecisions,
+  DECISION_STATUS_VALUES: () => DECISION_STATUS_VALUES
+});
+import { existsSync as existsSync24, mkdirSync as mkdirSync24, readFileSync as readFileSync21, renameSync as renameSync11, writeFileSync as writeFileSync18 } from "fs";
+import { dirname as dirname16, join as join34 } from "path";
+function safeDecisionScopeKey(scopeKey) {
+  const safe = sanitizeFileName(scopeKey);
+  if (!safe || safe === "." || safe === "..") {
+    throw new Error(`decisions: refusing unsafe scope key: ${scopeKey}`);
+  }
+  return safe;
+}
+function decisionScopeKey(opts) {
+  return opts.topicId?.trim() || opts.session || "default";
+}
+function getDecisionFilePath(userId, scopeKey) {
+  return join34(resolveStorageDataDir(), "decisions", `${safeDecisionScopeKey(scopeKey)}.json`);
+}
+function getDecisionGraphSvgPath(userId, scopeKey) {
+  return join34(resolveStorageDataDir(), "decision-renders", safeDecisionScopeKey(scopeKey), "latest.svg");
+}
+function writeDecisionGraphSvg(userId, scopeKey, svg) {
+  const path = getDecisionGraphSvgPath(userId, scopeKey);
+  mkdirSync24(dirname16(path), { recursive: true });
+  const tmp = `${path}.${process.pid}.tmp`;
+  writeFileSync18(tmp, svg, "utf-8");
+  renameSync11(tmp, path);
+  return path;
+}
+function readDecisions(userId, scopeKey) {
+  const path = getDecisionFilePath(userId, scopeKey);
+  if (!existsSync24(path))
+    return [];
+  try {
+    const parsed = JSON.parse(readFileSync21(path, "utf-8"));
+    return Array.isArray(parsed?.decisions) ? parsed.decisions : [];
+  } catch (error) {
+    logger.warn({ err: error, path }, "decisions: failed to read decision store");
+    return [];
+  }
+}
+function writeDecisions(userId, scopeKey, decisions) {
+  const path = getDecisionFilePath(userId, scopeKey);
+  mkdirSync24(dirname16(path), { recursive: true });
+  const payload = { version: 1, decisions };
+  const tmp = `${path}.${process.pid}.tmp`;
+  writeFileSync18(tmp, JSON.stringify(payload, null, 2), "utf-8");
+  renameSync11(tmp, path);
+}
+function nextDecisionId(decisions) {
+  let max = 0;
+  for (const decision of decisions) {
+    const id = Number(decision.id);
+    if (Number.isInteger(id) && id > max)
+      max = id;
+  }
+  return max + 1;
+}
+function normalizedIds(ids) {
+  if (!ids)
+    return;
+  const unique = [...new Set(ids.map((id) => id.trim()).filter(Boolean))];
+  return unique.length > 0 ? unique : undefined;
+}
+function validateDecisionGraph(decisions) {
+  const ids = new Set(decisions.map((decision) => decision.id));
+  for (const decision of decisions) {
+    for (const upstream of decision.causedBy ?? []) {
+      if (!ids.has(upstream)) {
+        throw new Error(`Decision #${decision.id} references missing decision #${upstream}.`);
+      }
+      if (upstream === decision.id) {
+        throw new Error(`Decision #${decision.id} cannot cause itself.`);
+      }
+    }
+  }
+  const visiting = new Set;
+  const visited = new Set;
+  const byId = new Map(decisions.map((decision) => [decision.id, decision]));
+  const visit = (id) => {
+    if (visited.has(id))
+      return;
+    if (visiting.has(id))
+      throw new Error(`Decision graph contains a cycle at #${id}.`);
+    visiting.add(id);
+    for (const upstream of byId.get(id)?.causedBy ?? [])
+      visit(upstream);
+    visiting.delete(id);
+    visited.add(id);
+  };
+  for (const id of ids)
+    visit(id);
+}
+function createDecisions(decisions, inputs) {
+  const out = [...decisions];
+  const created = [];
+  let id = nextDecisionId(out);
+  for (const input of inputs) {
+    const decision = {
+      id: String(id++),
+      action: input.action.trim(),
+      reasoning: input.reasoning.trim(),
+      agent: input.agent,
+      status: input.status ?? "accepted",
+      timestamp: input.timestamp ?? Date.now(),
+      ...input.model ? { model: input.model } : {},
+      ...normalizedIds(input.causedBy) ? { causedBy: normalizedIds(input.causedBy) } : {}
+    };
+    out.push(decision);
+    created.push(decision);
+  }
+  validateDecisionGraph(out);
+  return { decisions: out, created };
+}
+function updateDecisions(decisions, updates) {
+  const out = decisions.map((decision) => ({
+    ...decision,
+    ...decision.causedBy ? { causedBy: [...decision.causedBy] } : {}
+  }));
+  const byId = new Map(out.map((decision) => [decision.id, decision]));
+  const missing = [];
+  for (const update of updates) {
+    const decision = byId.get(update.id);
+    if (!decision) {
+      missing.push(update.id);
+      continue;
+    }
+    if (update.action !== undefined)
+      decision.action = update.action.trim();
+    if (update.reasoning !== undefined)
+      decision.reasoning = update.reasoning.trim();
+    if (update.status !== undefined)
+      decision.status = update.status;
+    if (update.causedBy !== undefined) {
+      const ids = normalizedIds(update.causedBy);
+      if (ids)
+        decision.causedBy = ids;
+      else
+        delete decision.causedBy;
+    }
+  }
+  validateDecisionGraph(out);
+  return { decisions: out, missing };
+}
+function deleteDecisions(decisions, opts) {
+  if (opts.all)
+    return { decisions: [], removed: decisions.length };
+  const ids = new Set(opts.ids ?? []);
+  const kept = decisions.filter((decision) => !ids.has(decision.id)).map((decision) => {
+    const causedBy = decision.causedBy?.filter((id) => !ids.has(id));
+    const next = { ...decision };
+    if (causedBy && causedBy.length > 0)
+      next.causedBy = causedBy;
+    else
+      delete next.causedBy;
+    return next;
+  });
+  return { decisions: kept, removed: decisions.length - kept.length };
+}
+function renderDecisionList(decisions) {
+  if (decisions.length === 0)
+    return "Decisions (0 recorded)";
+  return [
+    `Decisions (${decisions.length} recorded)`,
+    ...decisions.map((decision) => {
+      const causes = decision.causedBy?.length ? ` <- ${decision.causedBy.map((id) => `#${id}`).join(", ")}` : "";
+      return `[${decision.status}] #${decision.id} ${decision.action}${causes}
+  ${decision.reasoning}`;
+    })
+  ].join(`
+`);
+}
+var DECISION_STATUS_VALUES;
+var init_decisions = __esm(async () => {
+  init_logger();
+  await init_storage_host();
+  DECISION_STATUS_VALUES = [
+    "proposed",
+    "accepted",
+    "executed",
+    "rejected",
+    "superseded"
+  ];
+});
+
 // ../../packages/core/src/node-host.ts
 var exports_node_host = {};
 __export(exports_node_host, {
+  writeDecisionGraphSvg: () => writeDecisionGraphSvg,
   upsertTopic: () => upsertTopic,
   topicService: () => topicService,
   switchTopicModel: () => switchTopicModel,
@@ -22972,6 +23224,7 @@ __export(exports_node_host, {
   runNodeRequestHandlers: () => runNodeRequestHandlers,
   reconcilePendingAskUserQuestionGates: () => reconcilePendingAskUserQuestionGates,
   reapOrphanBrowsers: () => reapPlaywrightOrphans,
+  readDecisions: () => readDecisions,
   onShutdown: () => onShutdown,
   nodeRequestHandlerNames: () => nodeRequestHandlerNames,
   logger: () => logger,
@@ -23041,6 +23294,7 @@ var init_node_host = __esm(async () => {
   await init_turn_runner();
   await init_api_messages();
   await init_api_topics();
+  await init_decisions();
   await init_runtime_events();
   await init_runtime_process_leases();
   await init_token_stats();
@@ -23050,7 +23304,7 @@ var init_node_host = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/mcp-tools/inline-assets.ts
-import { existsSync as existsSync24, readFileSync as readFileSync21, statSync as statSync14 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync22, statSync as statSync14 } from "fs";
 import { extname as extname2, isAbsolute as isAbsolute6, resolve as resolve16 } from "path";
 function isNonLocal(ref) {
   return /^(?:[a-z][a-z0-9+.-]*:|\/\/|#)/i.test(ref.trim());
@@ -23078,7 +23332,7 @@ function inlineLocalAssets(html, options) {
     const abs = isAbsolute6(relPath) ? relPath : resolve16(baseDir, relPath);
     let bytes;
     try {
-      if (!existsSync24(abs) || !statSync14(abs).isFile()) {
+      if (!existsSync25(abs) || !statSync14(abs).isFile()) {
         unresolved.push(ref);
         cache.set(ref, null);
         return null;
@@ -23103,7 +23357,7 @@ function inlineLocalAssets(html, options) {
     let uri;
     try {
       const mime = MIME_BY_EXT[extname2(abs).toLowerCase()] ?? "application/octet-stream";
-      uri = `data:${mime};base64,${readFileSync21(abs).toString("base64")}`;
+      uri = `data:${mime};base64,${readFileSync22(abs).toString("base64")}`;
     } catch {
       unresolved.push(ref);
       cache.set(ref, null);
@@ -23661,18 +23915,133 @@ var init_task = __esm(async () => {
   };
 });
 
+// ../../packages/core/src/mcp/factories/decision.ts
+var exports_decision = {};
+__export(exports_decision, {
+  defaultDecisionMcpHost: () => defaultDecisionMcpHost,
+  createDecisionMcpServer: () => createDecisionMcpServer
+});
+import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z8 } from "zod";
+function createDecisionMcpServer(context, host2 = defaultDecisionMcpHost) {
+  const scopeKey = context.topic ? decisionScopeKey({ topicId: context.topicId, session: context.topic }) : "";
+  const server = new McpServer2({ name: "decision", version: "1.0.0" });
+  const requireContext = () => !context.userId || !scopeKey ? mcpError("Error: missing userId/topic context.") : null;
+  const statusEnum = z8.enum(DECISION_STATUS_VALUES);
+  server.tool("decision_create", "Record one or more durable decisions in this topic. Include the rationale and causal predecessors.", {
+    decisions: z8.array(z8.object({
+      action: z8.string().min(1).describe("Concise statement of what was decided"),
+      reasoning: z8.string().min(1).describe("Why this choice was made"),
+      status: statusEnum.optional().describe("Defaults to accepted"),
+      caused_by: z8.array(z8.string()).optional().describe("Upstream decision ids")
+    })).min(1)
+  }, async ({ decisions: inputs }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      const current3 = host2.readDecisions(context.userId, scopeKey);
+      const { decisions, created } = createDecisions(current3, inputs.map((input) => ({
+        action: input.action,
+        reasoning: input.reasoning,
+        status: input.status,
+        causedBy: input.caused_by,
+        agent: context.agent,
+        model: context.model
+      })));
+      host2.writeDecisions(context.userId, scopeKey, decisions);
+      return mcpOk(`${created.length} decision(s) recorded (${created.map((item) => `#${item.id}`).join(", ")})
+
+${renderDecisionList(decisions)}`);
+    } catch (error) {
+      return mcpError(`decision_create failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_update", "Update decisions or their causal links in this topic.", {
+    updates: z8.array(z8.object({
+      id: z8.string(),
+      action: z8.string().min(1).optional(),
+      reasoning: z8.string().min(1).optional(),
+      status: statusEnum.optional(),
+      caused_by: z8.array(z8.string()).optional().describe("Replacement upstream decision ids")
+    })).min(1)
+  }, async ({ updates }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      const current3 = host2.readDecisions(context.userId, scopeKey);
+      const { decisions, missing } = updateDecisions(current3, updates.map((update) => ({
+        ...update,
+        causedBy: update.caused_by
+      })));
+      host2.writeDecisions(context.userId, scopeKey, decisions);
+      const warning = missing.length ? `
+Missing ids ignored: ${missing.join(", ")}` : "";
+      return mcpOk(`${renderDecisionList(decisions)}${warning}`);
+    } catch (error) {
+      return mcpError(`decision_update failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_list", "Read this topic's decision graph as a concise list.", {}, async () => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      return mcpOk(renderDecisionList(host2.readDecisions(context.userId, scopeKey)));
+    } catch (error) {
+      return mcpError(`decision_list failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_get", "Read one topic decision as JSON.", { id: z8.string() }, async ({ id }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      const decision = host2.readDecisions(context.userId, scopeKey).find((item) => item.id === id);
+      return decision ? mcpOk(JSON.stringify(decision, null, 2)) : mcpError(`Decision #${id} not found.`);
+    } catch (error) {
+      return mcpError(`decision_get failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_delete", "Delete decisions. Downstream causal references to deleted decisions are removed.", { ids: z8.array(z8.string()).optional(), all: z8.boolean().optional() }, async ({ ids, all }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    if (!all && (!ids || ids.length === 0))
+      return mcpError("Provide ids or all=true.");
+    try {
+      const current3 = host2.readDecisions(context.userId, scopeKey);
+      const { decisions, removed } = deleteDecisions(current3, { ids, all });
+      host2.writeDecisions(context.userId, scopeKey, decisions);
+      return mcpOk(`${removed} decision(s) deleted
+
+${renderDecisionList(decisions)}`);
+    } catch (error) {
+      return mcpError(`decision_delete failed: ${errMsg(error)}`);
+    }
+  });
+  return server;
+}
+var defaultDecisionMcpHost;
+var init_decision = __esm(async () => {
+  await init_decisions();
+  init_mcp_helpers();
+  defaultDecisionMcpHost = { readDecisions, writeDecisions };
+});
+
 // ../../packages/core/src/mcp/factories/token-stats.ts
 var exports_token_stats2 = {};
 __export(exports_token_stats2, {
   defaultTokenStatsMcpHost: () => defaultTokenStatsMcpHost,
   createTokenStatsMcpServer: () => createTokenStatsMcpServer
 });
-import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z8 } from "zod";
+import { McpServer as McpServer3 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z9 } from "zod";
 function createTokenStatsMcpServer(context, host2 = defaultTokenStatsMcpHost) {
   if (!context.userId)
     throw new Error("token-stats MCP requires userId");
-  const server = new McpServer2({ name: "token-stats", version: "1.0.0" });
+  const server = new McpServer3({ name: "token-stats", version: "1.0.0" });
   server.tool("get_usage_stats", [
     "Claude/Codex/Maestro \uC0AC\uC6A9\uB7C9\uACFC provider session\uC758 \uCD5C\uC2E0 context \uC810\uC720\uC728\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4. \uD604\uC7AC \uC2E4\uD589 \uC911\uC778 turn\uC740 \uC644\uB8CC \uD6C4 \uC9D1\uACC4\uB429\uB2C8\uB2E4.",
     "",
@@ -23684,9 +24053,9 @@ function createTokenStatsMcpServer(context, host2 = defaultTokenStatsMcpHost) {
     "groupBy: 'session'\uC73C\uB85C \uC124\uC815\uD558\uBA74 \uC138\uC158\uBCC4 \uD1A0\uD070 \uC0AC\uC6A9\uB7C9 \uB7AD\uD0B9\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4."
   ].join(`
 `), {
-    from: z8.string().optional().describe("\uC2DC\uC791 \uC2DC\uAC01 ISO 8601. \uC608: '2026-03-28T09:00:00Z'"),
-    to: z8.string().optional().describe("\uC885\uB8CC \uC2DC\uAC01 ISO 8601. \uC0DD\uB7B5 \uC2DC \uD604\uC7AC"),
-    groupBy: z8.enum(["hour", "session"]).optional().describe("\uC9D1\uACC4 \uAE30\uC900. \uAE30\uBCF8\uAC12: hour")
+    from: z9.string().optional().describe("\uC2DC\uC791 \uC2DC\uAC01 ISO 8601. \uC608: '2026-03-28T09:00:00Z'"),
+    to: z9.string().optional().describe("\uC885\uB8CC \uC2DC\uAC01 ISO 8601. \uC0DD\uB7B5 \uC2DC \uD604\uC7AC"),
+    groupBy: z9.enum(["hour", "session"]).optional().describe("\uC9D1\uACC4 \uAE30\uC900. \uAE30\uBCF8\uAC12: hour")
   }, async ({ from, to, groupBy = "hour" }) => {
     const snapshot = host2.getStats(context.userId, from, to);
     const {
@@ -23777,7 +24146,7 @@ __export(exports_system_health, {
 import { execFile as execFile2 } from "child_process";
 import { cpus, freemem, loadavg, totalmem } from "os";
 import { promisify as promisify2 } from "util";
-import { McpServer as McpServer3 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer as McpServer4 } from "@modelcontextprotocol/sdk/server/mcp.js";
 function fmtBytes(bytes) {
   const gb = bytes / 1024 ** 3;
   return gb >= 1 ? `${gb.toFixed(1)}GB` : `${(bytes / 1024 ** 2).toFixed(0)}MB`;
@@ -23846,7 +24215,7 @@ async function getDisk() {
   }
 }
 function createSystemHealthMcpServer(host2 = defaultSystemHealthMcpHost) {
-  const server = new McpServer3({ name: "system-health", version: "1.0.0" });
+  const server = new McpServer4({ name: "system-health", version: "1.0.0" });
   server.tool("get_system_health", [
     "\uC2DC\uC2A4\uD15C \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
     "- CPU \uBD80\uD558 (load average 1/5/15\uBD84)",
@@ -23911,10 +24280,10 @@ __export(exports_agent_health, {
   createAgentHealthMcpServer: () => createAgentHealthMcpServer
 });
 import { spawn as spawn6 } from "child_process";
-import { existsSync as existsSync25, readdirSync as readdirSync9 } from "fs";
-import { join as join34 } from "path";
-import { McpServer as McpServer4 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z9 } from "zod";
+import { existsSync as existsSync26, readdirSync as readdirSync9 } from "fs";
+import { join as join35 } from "path";
+import { McpServer as McpServer5 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z10 } from "zod";
 function signalProcessTree2(child, signal) {
   try {
     if (child.pid && process.platform !== "win32")
@@ -24109,7 +24478,7 @@ async function withCheckSlot(operation) {
   }
 }
 function createAgentHealthMcpServer(context) {
-  const server = new McpServer4({ name: "agent-health", version: "1.0.0" });
+  const server = new McpServer5({ name: "agent-health", version: "1.0.0" });
   const abortController = new AbortController;
   const originalClose = server.close.bind(server);
   server.close = async () => {
@@ -24117,9 +24486,9 @@ function createAgentHealthMcpServer(context) {
     await originalClose();
   };
   server.tool("check_agent", "\uC2E4\uC81C API \uD638\uCD9C\uB85C \uD2B9\uC815 agent+model \uC870\uD569\uC774 \uC815\uC0C1 \uB3D9\uC791\uD558\uB294\uC9C0 \uCCB4\uD06C\uD569\uB2C8\uB2E4.", {
-    agent: z9.enum(["claude", "codex", "maestro"]).describe("\uCCB4\uD06C\uD560 agent"),
-    model: z9.string().optional().describe("\uCCB4\uD06C\uD560 \uBAA8\uB378 (\uC5C6\uC73C\uBA74 agent\uBCC4 default \uC0AC\uC6A9)"),
-    timeoutMs: z9.number().default(30000).describe("\uD0C0\uC784\uC544\uC6C3 (ms), \uAE30\uBCF8 30\uCD08")
+    agent: z10.enum(["claude", "codex", "maestro"]).describe("\uCCB4\uD06C\uD560 agent"),
+    model: z10.string().optional().describe("\uCCB4\uD06C\uD560 \uBAA8\uB378 (\uC5C6\uC73C\uBA74 agent\uBCC4 default \uC0AC\uC6A9)"),
+    timeoutMs: z10.number().default(30000).describe("\uD0C0\uC784\uC544\uC6C3 (ms), \uAE30\uBCF8 30\uCD08")
   }, async ({ agent, model, timeoutMs }) => {
     const entry = AGENTS.find((candidate) => candidate.kind === agent);
     if (!entry)
@@ -24135,7 +24504,7 @@ function createAgentHealthMcpServer(context) {
    latency: ${result.latency}ms
    error: ${result.error}`);
   });
-  server.tool("check_all", "\uBAA8\uB4E0 agent (claude, codex, maestro)\uB97C \uAE30\uBCF8 \uBAA8\uB378\uB85C \uB3D9\uC2DC\uC5D0 \uCCB4\uD06C\uD569\uB2C8\uB2E4.", { timeoutMs: z9.number().default(30000).describe("agent\uBCC4 \uD0C0\uC784\uC544\uC6C3 (ms), \uAE30\uBCF8 30\uCD08") }, async ({ timeoutMs }) => {
+  server.tool("check_all", "\uBAA8\uB4E0 agent (claude, codex, maestro)\uB97C \uAE30\uBCF8 \uBAA8\uB378\uB85C \uB3D9\uC2DC\uC5D0 \uCCB4\uD06C\uD569\uB2C8\uB2E4.", { timeoutMs: z10.number().default(30000).describe("agent\uBCC4 \uD0C0\uC784\uC544\uC6C3 (ms), \uAE30\uBCF8 30\uCD08") }, async ({ timeoutMs }) => {
     const userKey = context.userId ?? "unscoped";
     if (activeCheckAllUsers.has(userKey)) {
       return mcpOk("FAIL check_all is already running for this user");
@@ -24156,8 +24525,8 @@ ${results.every((result) => result.ok) ? "All agents healthy" : "Some agents fai
   server.tool("list_active_queries", "\uD604\uC7AC \uC0AC\uC6A9\uC790 \uBC94\uC704\uC5D0\uC11C \uC2E4\uD589 \uC911\uC778 \uD1A0\uD53D \uCFFC\uB9AC \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.", {}, async () => {
     if (!context.userId)
       return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC870\uD68C \uBD88\uAC00 (user context \uC5C6\uC74C)");
-    const stateDir = join34(USERS_LOG_DIR, context.userId, "active-queries");
-    if (!existsSync25(stateDir))
+    const stateDir = join35(USERS_LOG_DIR, context.userId, "active-queries");
+    if (!existsSync26(stateDir))
       return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC5C6\uC74C");
     let files;
     try {
@@ -24169,7 +24538,7 @@ ${results.every((result) => result.ok) ? "All agents healthy" : "Some agents fai
     const entries = files.flatMap((file) => {
       if (!file.endsWith(".json"))
         return [];
-      const state = readJsonFile(join34(stateDir, file));
+      const state = readJsonFile(join35(stateDir, file));
       if (!state)
         return [];
       const sinceMs = new Date(state.since).getTime();
@@ -24245,37 +24614,37 @@ var exports_session_comm = {};
 __export(exports_session_comm, {
   createSessionCommMcpServer: () => createSessionCommMcpServer
 });
-import { McpServer as McpServer5 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z10 } from "zod";
+import { McpServer as McpServer6 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z11 } from "zod";
 function createSessionCommMcpServer(context, host2, options = {}) {
-  const server = new McpServer5({ name: "session-comm", version: "2.0.0" });
+  const server = new McpServer6({ name: "session-comm", version: "2.0.0" });
   const required = options.requiredMcpServers?.join(", ") || "none";
   const optional = options.optionalMcpServers?.join(", ") || "none";
   const subagentIdentity = resolveSubagentTellIdentity(context.currentTopicId, context.subagentParentTopicId);
   server.tool("list_sessions", "List available sessions and remote peer sessions for inter-session communication.", {}, async () => host2.listSessions(context));
   server.tool("configure_mcp", `Configure optional MCP servers for the current topic. Required: ${required}. Optional: ${optional}.`, {
-    enabled: z10.array(z10.string()).nullable().optional()
+    enabled: z11.array(z11.string()).nullable().optional()
   }, async ({ enabled }) => host2.configureMcp(context, enabled));
   server.tool("get_mcp_config", "Get the current topic MCP configuration.", {}, async () => host2.getMcpConfig(context));
   if (host2.getBrowserProfile) {
     server.tool("get_browser_profile", "Get this topic's browser profile and the profiles owned by the same user.", {}, async () => host2.getBrowserProfile(context));
   }
   if (host2.setBrowserProfile) {
-    server.tool("set_browser_profile", "Assign this topic to a named shared browser profile. Takes effect next turn.", { profile: z10.string() }, async ({ profile }) => host2.setBrowserProfile(context, profile));
+    server.tool("set_browser_profile", "Assign this topic to a named shared browser profile. Takes effect next turn.", { profile: z11.string() }, async ({ profile }) => host2.setBrowserProfile(context, profile));
   }
   if (host2.deleteBrowserProfile) {
-    server.tool("delete_browser_profile", "Delete an unused named browser profile and its on-disk data. The default or an assigned profile cannot be deleted.", { profile: z10.string() }, async ({ profile }) => host2.deleteBrowserProfile(context, profile));
+    server.tool("delete_browser_profile", "Delete an unused named browser profile and its on-disk data. The default or an assigned profile cannot be deleted.", { profile: z11.string() }, async ({ profile }) => host2.deleteBrowserProfile(context, profile));
   }
   server.tool("peek_session", "Inspect running and idle sessions, including pending ask_session calls.", {}, async () => host2.peekSession(context));
-  server.tool("set_description", "Set the current session description used as a routing hint.", { description: z10.string() }, async ({ description }) => host2.setDescription(context, description));
+  server.tool("set_description", "Set the current session description used as a routing hint.", { description: z11.string() }, async ({ description }) => host2.setDescription(context, description));
   if (!context.replyOnly) {
     if (!subagentIdentity.restricted) {
-      server.tool("ask_session", "Ask another local or remote session a question and wait for its answer.", { to: z10.string(), message: z10.string() }, async (input) => host2.askSession(context, input));
+      server.tool("ask_session", "Ask another local or remote session a question and wait for its answer.", { to: z11.string(), message: z11.string() }, async (input) => host2.askSession(context, input));
     }
     if (!subagentIdentity.restricted) {
-      server.tool("abort_session", "Abort the active query in another session.", { to: z10.string() }, async ({ to }) => host2.abortSession(context, to));
+      server.tool("abort_session", "Abort the active query in another session.", { to: z11.string() }, async ({ to }) => host2.abortSession(context, to));
     }
-    server.tool("tell_session", "Send a one-way message to another local or remote session.", { to: z10.string(), message: z10.string() }, async (input) => {
+    server.tool("tell_session", "Send a one-way message to another local or remote session.", { to: z11.string(), message: z11.string() }, async (input) => {
       if (subagentIdentity.restricted && !canSubagentTellTargetByName(subagentIdentity, input.to)) {
         return {
           content: [
@@ -24402,7 +24771,7 @@ var exports_default_host = {};
 __export(exports_default_host, {
   createDefaultSessionCommMcpHost: () => createDefaultSessionCommMcpHost
 });
-import { basename as basename6, join as join35 } from "path";
+import { basename as basename6, join as join36 } from "path";
 function ok2(text2) {
   return { content: [{ type: "text", text: text2 }] };
 }
@@ -24449,10 +24818,10 @@ function remoteTarget(context, to) {
   return { node: to.slice(0, slash), topic: to.slice(slash + 1) };
 }
 function activeQuery(context, topicId, title) {
-  const dir = join35(USERS_LOG_DIR, context.userId, "active-queries");
-  const candidates = [join35(dir, `${sanitizeId(topicId)}.json`)];
+  const dir = join36(USERS_LOG_DIR, context.userId, "active-queries");
+  const candidates = [join36(dir, `${sanitizeId(topicId)}.json`)];
   if (title && basename6(title) === title && title !== "." && title !== "..") {
-    candidates.push(join35(dir, `${title}.json`));
+    candidates.push(join36(dir, `${title}.json`));
   }
   for (const path of candidates) {
     const state = readJsonFile(path);
@@ -25028,10 +25397,10 @@ var exports_vault = {};
 __export(exports_vault, {
   createVaultMcpServer: () => createVaultMcpServer
 });
-import { McpServer as McpServer6 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z11 } from "zod";
+import { McpServer as McpServer7 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z12 } from "zod";
 function createVaultMcpServer(context, host2, executors = {}) {
-  const server = new McpServer6({ name: "vault", version: "1.0.0" });
+  const server = new McpServer7({ name: "vault", version: "1.0.0" });
   const run = executors.run ?? executeVaultRun;
   const http = executors.http ?? executeVaultHttpRequest;
   server.tool("vault_list", context.httpOnly ? "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for HTTPS APIs that need a credential." : "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for APIs and vault_run for shell/CLI work that needs a credential.", {}, () => {
@@ -25047,9 +25416,9 @@ ${lines.join(`
   });
   if (!context.listOnly && !context.httpOnly) {
     server.tool("vault_run", "Run a shell command containing {{KEY}} references inside Otium's credential broker. Expanded command input never reaches the model/provider, and stdout/stderr are redacted before return. Prefer vault_http_request for HTTP APIs.", {
-      command: z11.string().min(1).max(64 * 1024),
-      timeout_ms: z11.number().int().min(1000).max(600000).optional(),
-      max_output_bytes: z11.number().int().min(1024).max(2 * 1024 * 1024).optional()
+      command: z12.string().min(1).max(64 * 1024),
+      timeout_ms: z12.number().int().min(1000).max(600000).optional(),
+      max_output_bytes: z12.number().int().min(1024).max(2 * 1024 * 1024).optional()
     }, async ({ command, timeout_ms, max_output_bytes }) => {
       if (!context.userId)
         return mcpError("Vault unavailable: no user context");
@@ -25064,12 +25433,12 @@ ${lines.join(`
   }
   if (!context.listOnly)
     server.tool("vault_http_request", "Make an HTTPS request with {{KEY}} references resolved inside Otium. Put secrets in headers or body, never in the URL. The expanded request is not returned; the response is redacted before the model sees it.", {
-      method: z11.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).default("GET"),
-      url: z11.string().url().describe("Absolute HTTPS URL without Vault placeholders"),
-      headers: z11.record(z11.string(), z11.string()).optional(),
-      body: z11.string().optional(),
-      timeout_ms: z11.number().int().min(1000).max(120000).optional(),
-      max_response_bytes: z11.number().int().min(1024).max(1024 * 1024).optional()
+      method: z12.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).default("GET"),
+      url: z12.string().url().describe("Absolute HTTPS URL without Vault placeholders"),
+      headers: z12.record(z12.string(), z12.string()).optional(),
+      body: z12.string().optional(),
+      timeout_ms: z12.number().int().min(1000).max(120000).optional(),
+      max_response_bytes: z12.number().int().min(1024).max(1024 * 1024).optional()
     }, async ({ method, url, headers, body, timeout_ms, max_response_bytes }) => {
       if (!context.userId)
         return mcpError("Vault unavailable: no user context");
@@ -25092,7 +25461,7 @@ var init_vault2 = __esm(() => {
 });
 
 // ../../packages/core/src/mcp/wiki-search-index.ts
-import { chmodSync as chmodSync5, existsSync as existsSync26, readFileSync as readFileSync22, unlinkSync as unlinkSync18 } from "fs";
+import { chmodSync as chmodSync5, existsSync as existsSync27, readFileSync as readFileSync23, unlinkSync as unlinkSync18 } from "fs";
 function documentId(source) {
   return `${source.kind}:${source.key}`;
 }
@@ -25176,7 +25545,7 @@ class WikiSearchIndex {
         continue;
       }
       try {
-        const text2 = readFileSync22(source.path, "utf-8");
+        const text2 = readFileSync23(source.path, "utf-8");
         changed.push({ source, document: prepare(source, text2), added: !stored });
       } catch {}
     }
@@ -25294,7 +25663,7 @@ class WikiSearchIndex {
 }
 function resetCorruptWikiSearchIndex(path) {
   for (const candidate of [path, `${path}-journal`, `${path}-wal`, `${path}-shm`]) {
-    if (!existsSync26(candidate))
+    if (!existsSync27(candidate))
       continue;
     unlinkSync18(candidate);
   }
@@ -25314,17 +25683,17 @@ import { AsyncLocalStorage as AsyncLocalStorage3 } from "async_hooks";
 import { randomUUID as randomUUID21 } from "crypto";
 import {
   closeSync as closeSync4,
-  existsSync as existsSync27,
-  mkdirSync as mkdirSync24,
+  existsSync as existsSync28,
+  mkdirSync as mkdirSync25,
   openSync as openSync4,
   readdirSync as readdirSync10,
-  readFileSync as readFileSync23,
-  renameSync as renameSync11,
+  readFileSync as readFileSync24,
+  renameSync as renameSync12,
   statSync as statSync15,
   unlinkSync as unlinkSync19,
-  writeFileSync as writeFileSync18
+  writeFileSync as writeFileSync19
 } from "fs";
-import { basename as basename7, dirname as dirname16, join as join36, relative as relative2, resolve as resolve17 } from "path";
+import { basename as basename7, dirname as dirname17, join as join37, relative as relative2, resolve as resolve17 } from "path";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport as StdioServerTransport2 } from "@modelcontextprotocol/sdk/server/stdio.js";
 import {
@@ -25350,7 +25719,7 @@ function runtime() {
   return current3;
 }
 function ensureDir(dir) {
-  mkdirSync24(dir, { recursive: true });
+  mkdirSync25(dir, { recursive: true });
 }
 function acquireRecoveryGuard(lockPath) {
   const guardPath = `${lockPath}.reclaim`;
@@ -25360,7 +25729,7 @@ function acquireRecoveryGuard(lockPath) {
     try {
       const fd = openSync4(guardPath, "wx");
       try {
-        writeFileSync18(fd, ownerToken, "utf-8");
+        writeFileSync19(fd, ownerToken, "utf-8");
       } catch (error2) {
         closeSync4(fd);
         try {
@@ -25371,7 +25740,7 @@ function acquireRecoveryGuard(lockPath) {
       return () => {
         closeSync4(fd);
         try {
-          if (readFileSync23(guardPath, "utf-8") === ownerToken)
+          if (readFileSync24(guardPath, "utf-8") === ownerToken)
             unlinkSync19(guardPath);
         } catch {}
       };
@@ -25393,7 +25762,7 @@ function acquireFileLock(path) {
     try {
       const fd = openSync4(lockPath, "wx");
       try {
-        writeFileSync18(fd, ownerToken, "utf-8");
+        writeFileSync19(fd, ownerToken, "utf-8");
       } catch (error2) {
         closeSync4(fd);
         try {
@@ -25405,7 +25774,7 @@ function acquireFileLock(path) {
         closeSync4(fd);
         const releaseGuard = acquireRecoveryGuard(lockPath);
         try {
-          if (readFileSync23(lockPath, "utf-8") === ownerToken)
+          if (readFileSync24(lockPath, "utf-8") === ownerToken)
             unlinkSync19(lockPath);
         } catch {} finally {
           releaseGuard();
@@ -25417,8 +25786,8 @@ function acquireFileLock(path) {
       const releaseGuard = acquireRecoveryGuard(lockPath);
       try {
         try {
-          const staleToken = readFileSync23(lockPath, "utf-8");
-          if (Date.now() - statSync15(lockPath).mtimeMs > FILE_LOCK_STALE_MS && readFileSync23(lockPath, "utf-8") === staleToken) {
+          const staleToken = readFileSync24(lockPath, "utf-8");
+          if (Date.now() - statSync15(lockPath).mtimeMs > FILE_LOCK_STALE_MS && readFileSync24(lockPath, "utf-8") === staleToken) {
             unlinkSync19(lockPath);
             continue;
           }
@@ -25437,9 +25806,9 @@ function acquireFileLock(path) {
 }
 function atomicWriteFile(path, content) {
   const temporaryPath = `${path}.tmp.${process.pid}.${Date.now()}`;
-  writeFileSync18(temporaryPath, content, "utf-8");
+  writeFileSync19(temporaryPath, content, "utf-8");
   try {
-    renameSync11(temporaryPath, path);
+    renameSync12(temporaryPath, path);
   } catch (error2) {
     try {
       unlinkSync19(temporaryPath);
@@ -25628,7 +25997,7 @@ function normalizeWikiSlug(raw) {
 function parseWikiIndex(path) {
   let text2;
   try {
-    text2 = readFileSync23(path, "utf-8");
+    text2 = readFileSync24(path, "utf-8");
   } catch {
     return [];
   }
@@ -25774,15 +26143,15 @@ function wikiQuery(args) {
     try {
       for (const entry of readdirSync10(dir, { withFileTypes: true })) {
         if (entry.isDirectory()) {
-          const sub = join36(dir, entry.name);
+          const sub = join37(dir, entry.name);
           if (label === "articles" || label === "skills") {
             try {
               for (const f of readdirSync10(sub, { withFileTypes: true })) {
                 if (!f.isFile() || !f.name.endsWith(".md"))
                   continue;
-                const fp = join36(sub, f.name);
+                const fp = join37(sub, f.name);
                 try {
-                  const text2 = readFileSync23(fp, "utf-8");
+                  const text2 = readFileSync24(fp, "utf-8");
                   const key = `${entry.name}/${f.name.replace(/\.md$/i, "")}`;
                   scored.push({
                     kind: label === "articles" ? "article" : "skill",
@@ -25801,9 +26170,9 @@ function wikiQuery(args) {
           if (label === "topic" && canReadTopicMemory && !canReadTopicMemory(entry.name.replace(/\.md$/i, ""), runtime().userId)) {
             continue;
           }
-          const fp = join36(dir, entry.name);
+          const fp = join37(dir, entry.name);
           try {
-            const text2 = readFileSync23(fp, "utf-8");
+            const text2 = readFileSync24(fp, "utf-8");
             const key = entry.name.replace(/\.md$/i, "");
             const resultKind = label === "articles" ? "article" : label === "topic" ? "topic" : label === "summaries" ? "summary" : "skill";
             scored.push({
@@ -26087,7 +26456,7 @@ function wikiTopicBrief(args) {
   const topicKey = wikiSummarySlug(rawTopic.replace(/^topic\//, "").replace(/\.md$/i, ""));
   const filePath = resolve17(runtime().topicsDir, `${topicKey}.md`);
   try {
-    const content = readFileSync23(filePath, "utf-8");
+    const content = readFileSync24(filePath, "utf-8");
     return {
       content: [{ type: "text", text: `# Topic Brief: ${topicKey}
 
@@ -26139,7 +26508,7 @@ Adopted topic memory: ${memoryKey}` }]
     return { content: [{ type: "text", text: "Invalid wiki document key." }], isError: true };
   }
   try {
-    const content = readFileSync23(filePath, "utf-8");
+    const content = readFileSync24(filePath, "utf-8");
     return {
       content: [{ type: "text", text: `# Wiki ${kind}: ${key}
 
@@ -26159,18 +26528,18 @@ function wikiLastConversation(args) {
   const name = slugify(topicNameFrom(rawTopic));
   const archiveDir = resolve17(runtime().archiveDir, name);
   try {
-    let files = existsSync27(archiveDir) ? readdirSync10(archiveDir).filter((f) => f.endsWith(".jsonl")).sort().reverse() : [];
+    let files = existsSync28(archiveDir) ? readdirSync10(archiveDir).filter((f) => f.endsWith(".jsonl")).sort().reverse() : [];
     if (files.length === 0) {
-      files = existsSync27(runtime().archiveDir) ? readdirSync10(runtime().archiveDir).filter((f) => f.startsWith(name) && f.endsWith(".jsonl")).sort().reverse() : [];
+      files = existsSync28(runtime().archiveDir) ? readdirSync10(runtime().archiveDir).filter((f) => f.startsWith(name) && f.endsWith(".jsonl")).sort().reverse() : [];
     }
     if (files.length === 0) {
       return {
         content: [{ type: "text", text: `No archive found for topic: ${rawTopic}` }]
       };
     }
-    const actualPath = files[0].includes("/") ? files[0] : resolve17(existsSync27(archiveDir) && readdirSync10(archiveDir).includes(files[0]) ? archiveDir : runtime().archiveDir, files[0]);
+    const actualPath = files[0].includes("/") ? files[0] : resolve17(existsSync28(archiveDir) && readdirSync10(archiveDir).includes(files[0]) ? archiveDir : runtime().archiveDir, files[0]);
     try {
-      const raw = readFileSync23(actualPath, "utf-8");
+      const raw = readFileSync24(actualPath, "utf-8");
       const lines = raw.trim().split(`
 `).filter(Boolean);
       const turns2 = [];
@@ -26243,7 +26612,7 @@ function skillQuery(args) {
         continue;
       const skillFile = resolve17(runtime().skillsDir, entry.name, "skill.md");
       try {
-        const text2 = readFileSync23(skillFile, "utf-8");
+        const text2 = readFileSync24(skillFile, "utf-8");
         const lower = text2.toLowerCase();
         let score = 0;
         for (const w of query2.split(/\s+/).filter(Boolean)) {
@@ -26314,10 +26683,10 @@ ${fresh.join(`
   const skillPath = resolve17(skillDir, "skill.md");
   let finalContent = content;
   try {
-    const existing = readFileSync23(skillPath, "utf-8");
+    const existing = readFileSync24(skillPath, "utf-8");
     finalContent = mergeGotchas(content, extractGotchas(existing));
   } catch {}
-  writeFileSync18(skillPath, finalContent, "utf-8");
+  writeFileSync19(skillPath, finalContent, "utf-8");
   return {
     content: [
       {
@@ -26336,7 +26705,7 @@ function writeSummaryDocument(rawTopic, content, dateStr) {
   let counter = 1;
   while (true) {
     try {
-      writeFileSync18(resolve17(runtime().summariesDir, summaryName), content, {
+      writeFileSync19(resolve17(runtime().summariesDir, summaryName), content, {
         encoding: "utf-8",
         flag: "wx"
       });
@@ -26354,7 +26723,7 @@ function writeSummaryDocument(rawTopic, content, dateStr) {
   if (topicId && setTopicBrief2) {
     try {
       const briefPath = resolve17(runtime().topicsDir, `${fileSlug}.md`);
-      let briefMd = existsSync27(briefPath) ? readFileSync23(briefPath, "utf-8") : undefined;
+      let briefMd = existsSync28(briefPath) ? readFileSync24(briefPath, "utf-8") : undefined;
       if (briefMd === undefined && getTopicBrief2 && !getTopicBrief2(fileSlug)?.briefMd) {
         const legacy = getTopicBrief2(topicId)?.briefMd;
         if (legacy)
@@ -26374,9 +26743,9 @@ function writeTopicDocument(rawTopic, content) {
   const topicId = runtime().topicId;
   const fileSlug = wikiBriefStorageKey(rawTopic, topicId);
   const briefPath = resolve17(runtime().topicsDir, `${fileSlug}.md`);
-  ensureDir(dirname16(briefPath));
-  const existed = existsSync27(briefPath);
-  writeFileSync18(briefPath, content, "utf-8");
+  ensureDir(dirname17(briefPath));
+  const existed = existsSync28(briefPath);
+  writeFileSync19(briefPath, content, "utf-8");
   const setTopicBrief2 = runtime().host.setTopicBrief;
   let sqliteUpdated = false;
   if (topicId && setTopicBrief2) {
@@ -26389,8 +26758,8 @@ function writeTopicDocument(rawTopic, content) {
 }
 function writeArticleDocument(slug, content) {
   const articlePath = resolve17(runtime().articlesDir, `${slug}.md`);
-  ensureDir(dirname16(articlePath));
-  const existed = existsSync27(articlePath);
+  ensureDir(dirname17(articlePath));
+  const existed = existsSync28(articlePath);
   atomicWriteFile(articlePath, content);
   return { existed };
 }
@@ -26522,21 +26891,21 @@ function collectIndexableDocuments() {
     }
     for (const entry of entries) {
       if (entry.isFile() && entry.name.endsWith(".md")) {
-        add(kind, entry.name.replace(/\.md$/i, ""), join36(root, entry.name));
+        add(kind, entry.name.replace(/\.md$/i, ""), join37(root, entry.name));
         continue;
       }
       if (!entry.isDirectory() || !allowSubdirectories)
         continue;
       let nested;
       try {
-        nested = readdirSync10(join36(root, entry.name), { withFileTypes: true });
+        nested = readdirSync10(join37(root, entry.name), { withFileTypes: true });
       } catch {
         continue;
       }
       for (const file of nested) {
         if (!file.isFile() || !file.name.endsWith(".md"))
           continue;
-        add(kind, `${entry.name}/${file.name.replace(/\.md$/i, "")}`, join36(root, entry.name, file.name));
+        add(kind, `${entry.name}/${file.name.replace(/\.md$/i, "")}`, join37(root, entry.name, file.name));
       }
     }
   }
@@ -26593,12 +26962,12 @@ function indexRowOrPartialWrite(label, options) {
 function upsertIndexRow(options) {
   const { kind, slug, description, date, section } = options;
   const indexPath = wikiIndexPath(kind);
-  ensureDir(dirname16(indexPath));
+  ensureDir(dirname17(indexPath));
   const releaseLock = acquireFileLock(indexPath);
   try {
     let index;
     try {
-      index = readFileSync23(indexPath, "utf-8");
+      index = readFileSync24(indexPath, "utf-8");
     } catch {
       index = "";
     }
@@ -27037,15 +27406,15 @@ __export(exports_activity_log, {
   readSentFilesForTopic: () => readSentFilesForTopic
 });
 import {
-  existsSync as existsSync28,
-  mkdirSync as mkdirSync25,
+  existsSync as existsSync29,
+  mkdirSync as mkdirSync26,
   readdirSync as readdirSync11,
-  renameSync as renameSync12,
+  renameSync as renameSync13,
   statSync as statSync16,
   unlinkSync as unlinkSync20,
-  writeFileSync as writeFileSync19
+  writeFileSync as writeFileSync20
 } from "fs";
-import { basename as basename8, join as join37 } from "path";
+import { basename as basename8, join as join38 } from "path";
 function startLogRotation() {
   if (rotationTimer)
     return;
@@ -27056,15 +27425,15 @@ function startLogRotation() {
 function writeLog(entry) {
   startLogRotation();
   const logDir = resolveStorageLogDir();
-  mkdirSync25(logDir, { recursive: true });
+  mkdirSync26(logDir, { recursive: true });
   const safeSession = sanitizeTopicName(entry.session);
   const sidShort = entry.sessionId ? entry.sessionId.slice(0, 8) : "new";
-  const file = join37(logDir, `${entry.userId}_${safeSession}_${sidShort}.jsonl`);
+  const file = join38(logDir, `${entry.userId}_${safeSession}_${sidShort}.jsonl`);
   try {
     const stat = statSync16(file);
     if (stat.size >= MAX_FILE_SIZE) {
       const rotated = file.replace(/\.jsonl$/, `.${Date.now()}.jsonl`);
-      renameSync12(file, rotated);
+      renameSync13(file, rotated);
     }
   } catch {}
   try {
@@ -27075,11 +27444,11 @@ function writeLog(entry) {
 }
 function rotateOldLogs() {
   const logDir = resolveStorageLogDir();
-  mkdirSync25(logDir, { recursive: true });
+  mkdirSync26(logDir, { recursive: true });
   try {
     const files = readdirSync11(logDir).filter((f) => f.endsWith(".jsonl")).map((f) => {
       try {
-        const stat = statSync16(join37(logDir, f));
+        const stat = statSync16(join38(logDir, f));
         return { name: f, size: stat.size, mtimeMs: stat.mtimeMs };
       } catch {
         return null;
@@ -27095,7 +27464,7 @@ function rotateOldLogs() {
       if (freed >= toFree)
         break;
       try {
-        unlinkSync20(join37(logDir, file.name));
+        unlinkSync20(join38(logDir, file.name));
         freed += file.size;
         logger.info({ file: file.name, sizeKB: (file.size / 1024).toFixed(0) }, "Rotated out old log");
       } catch (e) {
@@ -27107,9 +27476,9 @@ function rotateOldLogs() {
   }
 }
 function writeSentFileLog(entry) {
-  const dir = join37(resolveStorageUsersLogDir(), String(entry.userId));
-  mkdirSync25(dir, { recursive: true });
-  const file = join37(dir, "sent-files.jsonl");
+  const dir = join38(resolveStorageUsersLogDir(), String(entry.userId));
+  mkdirSync26(dir, { recursive: true });
+  const file = join38(dir, "sent-files.jsonl");
   try {
     appendJsonlEntry(file, { ...entry, fileName: basename8(entry.filePath) });
   } catch (e) {
@@ -27120,8 +27489,8 @@ function entryMatchesTopic(e, topicName) {
   return e.topicName === topicName;
 }
 function readSentFilesForTopic(userId, topicName) {
-  const file = join37(resolveStorageUsersLogDir(), String(userId), "sent-files.jsonl");
-  if (!existsSync28(file))
+  const file = join38(resolveStorageUsersLogDir(), String(userId), "sent-files.jsonl");
+  if (!existsSync29(file))
     return [];
   try {
     return readJsonlLines(file).map((line) => JSON.parse(line)).filter((e) => entryMatchesTopic(e, topicName));
@@ -27131,8 +27500,8 @@ function readSentFilesForTopic(userId, topicName) {
   }
 }
 function removeSentFilesForTopic(userId, topicName) {
-  const file = join37(resolveStorageUsersLogDir(), String(userId), "sent-files.jsonl");
-  if (!existsSync28(file))
+  const file = join38(resolveStorageUsersLogDir(), String(userId), "sent-files.jsonl");
+  if (!existsSync29(file))
     return;
   try {
     const remaining = readJsonlLines(file).filter((line) => {
@@ -27143,7 +27512,7 @@ function removeSentFilesForTopic(userId, topicName) {
       }
     });
     if (remaining.length > 0) {
-      writeFileSync19(file, `${remaining.join(`
+      writeFileSync20(file, `${remaining.join(`
 `)}
 `);
     } else {
@@ -27640,6 +28009,8 @@ __export(exports_storage_public, {
   writeTasks: () => writeTasks,
   writeSentFileLog: () => writeSentFileLog,
   writeLog: () => writeLog,
+  writeDecisions: () => writeDecisions,
+  writeDecisionGraphSvg: () => writeDecisionGraphSvg,
   wikiSummaryStorageSlug: () => wikiSummaryStorageSlug,
   wikiSummarySlug: () => wikiSummarySlug,
   wikiSummaryNames: () => exports_wiki_summary_names,
@@ -27648,9 +28019,11 @@ __export(exports_storage_public, {
   wiki: () => exports_wiki,
   waitForRuntimeProcessLease: () => waitForRuntimeProcessLease,
   waitForRequiredRuntimeProcessLease: () => waitForRequiredRuntimeProcessLease,
+  validateDecisionGraph: () => validateDecisionGraph,
   upsertTopic: () => upsertTopic,
   updateTopicThreadId: () => updateTopicThreadId,
   updateTasks: () => updateTasks,
+  updateDecisions: () => updateDecisions,
   updateApiMessageUsage: () => updateApiMessageUsage,
   updateApiMessageText: () => updateApiMessageText,
   updateApiMessageSubagentCard: () => updateApiMessageSubagentCard,
@@ -27699,6 +28072,7 @@ __export(exports_storage_public, {
   replaceConversationStrict: () => replaceConversationStrict,
   reparentTopicChildren: () => reparentTopicChildren,
   renderTaskList: () => renderTaskList,
+  renderDecisionList: () => renderDecisionList,
   renameTopic: () => renameTopic,
   removeTopic: () => removeTopic,
   removeSentFilesForTopic: () => removeSentFilesForTopic,
@@ -27710,6 +28084,7 @@ __export(exports_storage_public, {
   readTasks: () => readTasks,
   readSentFilesForTopic: () => readSentFilesForTopic,
   readRawConversation: () => readRawConversation,
+  readDecisions: () => readDecisions,
   readConversation: () => readConversation,
   quarantineForeignAskUserGates: () => quarantineForeignAskUserGates,
   quarantineAskUserGate: () => quarantineAskUserGate,
@@ -27771,6 +28146,8 @@ __export(exports_storage_public, {
   getGlobalAiName: () => getGlobalAiName,
   getForumTopicByName: () => getTopicByName2,
   getDmSessionId: () => getDmSessionId,
+  getDecisionGraphSvgPath: () => getDecisionGraphSvgPath,
+  getDecisionFilePath: () => getDecisionFilePath,
   getConversationPath: () => getConversationPath,
   getCommunicateThreadId: () => getCommunicateThreadId,
   getApiTopicConfig: () => getApiTopicConfig,
@@ -27794,12 +28171,16 @@ __export(exports_storage_public, {
   deleteTasks: () => deleteTasks,
   deletePendingAsksForTopic: () => deletePendingAsksForTopic,
   deleteMessagesForTopic: () => deleteMessagesForTopic,
+  deleteDecisions: () => deleteDecisions,
   deleteApiTopicConfig: () => deleteApiTopicConfig,
   defaultTopicSurface: () => defaultTopicSurface,
   defaultSurfaceScope: () => defaultSurfaceScope,
+  decisions: () => exports_decisions,
+  decisionScopeKey: () => decisionScopeKey,
   db: () => db2,
   createTasks: () => createTasks,
   createPendingAsk: () => createPendingAsk,
+  createDecisions: () => createDecisions,
   copyMessagesForTopic: () => copyMessagesForTopic,
   copyMessageSnapshotToTopic: () => copyMessageSnapshotToTopic,
   conversations: () => exports_conversations,
@@ -27838,6 +28219,7 @@ __export(exports_storage_public, {
   PROCESS_LEASE_HEARTBEAT_MS: () => PROCESS_LEASE_HEARTBEAT_MS,
   PENDING_ASK_TTL_MS: () => PENDING_ASK_TTL_MS,
   DEFAULT_AI_NAME: () => DEFAULT_AI_NAME,
+  DECISION_STATUS_VALUES: () => DECISION_STATUS_VALUES,
   ConversationLogDivergedError: () => ConversationLogDivergedError
 });
 var init_storage_public = __esm(async () => {
@@ -27857,6 +28239,8 @@ var init_storage_public = __esm(async () => {
   init_ask_user_gates();
   await init_conversations();
   init_conversations();
+  await init_decisions();
+  init_decisions();
   await init_forum();
   await init_forum();
   await init_runtime_process_leases();
@@ -27895,6 +28279,16 @@ async function buildHostedSurfaceServer(surface, context) {
         topicId: context.topicId
       });
     }
+    case "decision": {
+      const { createDecisionMcpServer: createDecisionMcpServer2 } = await init_decision().then(() => exports_decision);
+      return createDecisionMcpServer2({
+        userId: context.userId,
+        topic: context.topicTitle,
+        topicId: context.topicId,
+        agent: context.agent,
+        model: context.model
+      });
+    }
     case "token-stats": {
       const { createTokenStatsMcpServer: createTokenStatsMcpServer2 } = await init_token_stats2().then(() => exports_token_stats2);
       return createTokenStatsMcpServer2({ userId: context.userId });
@@ -27979,6 +28373,7 @@ var ACTIVE_HOSTED_MCP_SURFACES;
 var init_hosted_surfaces = __esm(() => {
   ACTIVE_HOSTED_MCP_SURFACES = [
     "task",
+    "decision",
     "token-stats",
     "system-health",
     "vault",
@@ -28098,9 +28493,9 @@ var init_sse_transport = () => {};
 import { createHash as createHash10, randomUUID as randomUUID23 } from "crypto";
 import { realpathSync as realpathSync6, statSync as statSync17 } from "fs";
 import { basename as basename9, extname as extname3, resolve as resolve19 } from "path";
-import { McpServer as McpServer7 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer as McpServer8 } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 function requireTopicAccess(ctx) {
   const topic = getTopic(ctx.topicId);
   if (!topic)
@@ -28219,7 +28614,7 @@ function appendAutoContinue(ctx, field) {
   });
 }
 function buildNegotiumMcpServer(ctx) {
-  const server = new McpServer7({ name: RUNTIME_MCP_KEY, version: "1.0.0" });
+  const server = new McpServer8({ name: RUNTIME_MCP_KEY, version: "1.0.0" });
   if (ctx.visualTools === true) {
     for (const def of visualToolDefinitions) {
       const handler = ctx.peerBridge && (def.name === "show_html" || def.name === "show_mermaid") ? async () => textResult("Visual queued for ordered display on the canonical hub.") : def.handler;
@@ -28320,8 +28715,8 @@ function buildNegotiumMcpServer(ctx) {
     }
   }
   if (ctx.fileDeliveryTools === true) {
-    server.tool("send_file", "Send a local file to the user in the chat. Use this when you want to share a file (image, document, PDF, code, etc.) with the user. The file will appear as a downloadable item in the chat.", { file_path: z12.string().describe("Absolute path to the file to send") }, async ({ file_path }) => deliverFile(ctx, file_path));
-    server.tool("send_files", "Send multiple local files to the user in the chat at once.", { file_paths: z12.array(z12.string()).describe("Array of absolute file paths to send") }, async ({ file_paths }) => {
+    server.tool("send_file", "Send a local file to the user in the chat. Use this when you want to share a file (image, document, PDF, code, etc.) with the user. The file will appear as a downloadable item in the chat.", { file_path: z13.string().describe("Absolute path to the file to send") }, async ({ file_path }) => deliverFile(ctx, file_path));
+    server.tool("send_files", "Send multiple local files to the user in the chat at once.", { file_paths: z13.array(z13.string()).describe("Array of absolute file paths to send") }, async ({ file_paths }) => {
       const results = await Promise.all(file_paths.map((filePath) => deliverFile(ctx, filePath)));
       const hasError = results.some((result) => ("isError" in result) && result.isError);
       return {
@@ -28619,23 +29014,23 @@ function defaultManifestFile() {
 var init_paths = () => {};
 
 // ../../packages/mcp-host/src/spec.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 var KEY_PATTERN, portSchema, mcpServerSpecSchema;
 var init_spec = __esm(() => {
   KEY_PATTERN = /^[a-zA-Z0-9._-]+$/;
-  portSchema = z13.number().int().min(1).max(65535);
-  mcpServerSpecSchema = z13.object({
-    key: z13.string().min(1).regex(KEY_PATTERN, "key may only contain [a-zA-Z0-9._-]").refine((k) => k !== "." && k !== "..", "key may not be a dot path"),
-    transport: z13.enum(["stdio", "http"]),
-    command: z13.string().min(1),
-    args: z13.array(z13.string()).optional(),
-    env: z13.record(z13.string(), z13.string()).optional(),
-    cwd: z13.string().optional(),
-    portRange: z13.object({ base: portSchema, max: portSchema }).optional(),
-    scope: z13.enum(["node", "instance"]),
-    readyTimeoutMs: z13.number().int().positive().optional(),
-    idleEvictMs: z13.number().int().positive().optional(),
-    healthIntervalMs: z13.number().int().positive().optional()
+  portSchema = z14.number().int().min(1).max(65535);
+  mcpServerSpecSchema = z14.object({
+    key: z14.string().min(1).regex(KEY_PATTERN, "key may only contain [a-zA-Z0-9._-]").refine((k) => k !== "." && k !== "..", "key may not be a dot path"),
+    transport: z14.enum(["stdio", "http"]),
+    command: z14.string().min(1),
+    args: z14.array(z14.string()).optional(),
+    env: z14.record(z14.string(), z14.string()).optional(),
+    cwd: z14.string().optional(),
+    portRange: z14.object({ base: portSchema, max: portSchema }).optional(),
+    scope: z14.enum(["node", "instance"]),
+    readyTimeoutMs: z14.number().int().positive().optional(),
+    idleEvictMs: z14.number().int().positive().optional(),
+    healthIntervalMs: z14.number().int().positive().optional()
   }).superRefine((spec, ctx) => {
     if (spec.transport === "http") {
       if (!spec.portRange) {
@@ -28656,9 +29051,9 @@ var init_spec = __esm(() => {
 });
 
 // ../../packages/mcp-host/src/manifest.ts
-import { existsSync as existsSync29, mkdirSync as mkdirSync26, readFileSync as readFileSync24, renameSync as renameSync13, writeFileSync as writeFileSync20 } from "fs";
-import { dirname as dirname17 } from "path";
-import { z as z14 } from "zod";
+import { existsSync as existsSync30, mkdirSync as mkdirSync27, readFileSync as readFileSync25, renameSync as renameSync14, writeFileSync as writeFileSync21 } from "fs";
+import { dirname as dirname18 } from "path";
+import { z as z15 } from "zod";
 
 class McpManifest {
   file;
@@ -28701,11 +29096,11 @@ class McpManifest {
     return this.entries.get(key)?.enabled ?? false;
   }
   load() {
-    if (!existsSync29(this.file))
+    if (!existsSync30(this.file))
       return;
     let parsed;
     try {
-      parsed = manifestFileSchema.parse(JSON.parse(readFileSync24(this.file, "utf8")));
+      parsed = manifestFileSchema.parse(JSON.parse(readFileSync25(this.file, "utf8")));
     } catch (e) {
       throw new Error(`Invalid MCP manifest at ${this.file}: ${e instanceof Error ? e.message : String(e)}`);
     }
@@ -28717,28 +29112,28 @@ class McpManifest {
     }
   }
   save() {
-    mkdirSync26(dirname17(this.file), { recursive: true });
+    mkdirSync27(dirname18(this.file), { recursive: true });
     const payload = {
       version: 1,
       servers: [...this.entries.values()]
     };
     const tmp = `${this.file}.tmp-${process.pid}`;
-    writeFileSync20(tmp, `${JSON.stringify(payload, null, 2)}
+    writeFileSync21(tmp, `${JSON.stringify(payload, null, 2)}
 `);
-    renameSync13(tmp, this.file);
+    renameSync14(tmp, this.file);
   }
 }
 var manifestEntrySchema, manifestFileSchema;
 var init_manifest = __esm(() => {
   init_paths();
   init_spec();
-  manifestEntrySchema = z14.object({
+  manifestEntrySchema = z15.object({
     spec: mcpServerSpecSchema,
-    enabled: z14.boolean()
+    enabled: z15.boolean()
   });
-  manifestFileSchema = z14.object({
-    version: z14.literal(1),
-    servers: z14.array(manifestEntrySchema)
+  manifestFileSchema = z15.object({
+    version: z15.literal(1),
+    servers: z15.array(manifestEntrySchema)
   });
 });
 
@@ -28753,15 +29148,15 @@ function sanitizePathComponent(name) {
 // ../../packages/mcp-host/src/manager.ts
 import { execFileSync as execFileSync8, spawn as spawn8 } from "child_process";
 import {
-  mkdirSync as mkdirSync27,
+  mkdirSync as mkdirSync28,
   readdirSync as readdirSync12,
-  readFileSync as readFileSync25,
-  renameSync as renameSync14,
+  readFileSync as readFileSync26,
+  renameSync as renameSync15,
   unlinkSync as unlinkSync21,
-  writeFileSync as writeFileSync21
+  writeFileSync as writeFileSync22
 } from "fs";
 import { connect, createServer as createServer3 } from "net";
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 function regKey(key, instanceKey) {
   return `${key}\x00${instanceKey}`;
 }
@@ -29027,7 +29422,7 @@ class McpHost {
     const range = spec.portRange;
     if (!range)
       throw new Error(`MCP spec "${spec.key}" is http but has no portRange`);
-    mkdirSync27(this.portsDir, { recursive: true });
+    mkdirSync28(this.portsDir, { recursive: true });
     const claims = this.readPortClaims();
     const own = claims.get(fileName);
     if (own !== undefined && own >= range.base && own <= range.max && !this.usedPorts.has(own)) {
@@ -29063,7 +29458,7 @@ class McpHost {
       if (file.includes(".tmp-"))
         continue;
       try {
-        const port = Number.parseInt(readFileSync25(join38(this.portsDir, file), "utf8").trim(), 10);
+        const port = Number.parseInt(readFileSync26(join39(this.portsDir, file), "utf8").trim(), 10);
         if (!Number.isNaN(port))
           claims.set(file, port);
       } catch {}
@@ -29072,18 +29467,18 @@ class McpHost {
   }
   writePortFile(fileName, port) {
     try {
-      mkdirSync27(this.portsDir, { recursive: true });
-      const file = join38(this.portsDir, fileName);
+      mkdirSync28(this.portsDir, { recursive: true });
+      const file = join39(this.portsDir, fileName);
       const tmp = `${file}.tmp-${process.pid}`;
-      writeFileSync21(tmp, String(port));
-      renameSync14(tmp, file);
+      writeFileSync22(tmp, String(port));
+      renameSync15(tmp, file);
     } catch (e) {
       this.log("warn", "Failed to write MCP port file", { fileName, port, err: String(e) });
     }
   }
   deletePortFile(fileName) {
     try {
-      unlinkSync21(join38(this.portsDir, fileName));
+      unlinkSync21(join39(this.portsDir, fileName));
     } catch {}
   }
   cleanupRunning(rkey, inst) {
@@ -29188,14 +29583,14 @@ var init_src3 = __esm(() => {
 import { randomUUID as randomUUID24 } from "crypto";
 import {
   copyFileSync as copyFileSync4,
-  existsSync as existsSync30,
-  mkdirSync as mkdirSync28,
-  readFileSync as readFileSync26,
+  existsSync as existsSync31,
+  mkdirSync as mkdirSync29,
+  readFileSync as readFileSync27,
   rmSync as rmSync9,
   statSync as statSync18,
-  writeFileSync as writeFileSync22
+  writeFileSync as writeFileSync23
 } from "fs";
-import { basename as basename10, extname as extname4, join as join39 } from "path";
+import { basename as basename10, extname as extname4, join as join40 } from "path";
 function safeExtension(filename) {
   const extension = extname4(basename10(filename));
   return /^\.[A-Za-z0-9]{1,16}$/.test(extension) ? extension.toLowerCase() : "";
@@ -29213,20 +29608,20 @@ function contentDisposition(filename) {
 
 class NodeFileStore {
   uploadDir;
-  constructor(uploadDir = join39(DATA_DIR, "uploads")) {
+  constructor(uploadDir = join40(DATA_DIR, "uploads")) {
     this.uploadDir = uploadDir;
   }
   #ensureDir() {
-    mkdirSync28(this.uploadDir, { recursive: true });
+    mkdirSync29(this.uploadDir, { recursive: true });
   }
   #metadataPath(fileId) {
-    return join39(this.uploadDir, `${fileId}.meta.json`);
+    return join40(this.uploadDir, `${fileId}.meta.json`);
   }
   #metadata(fileId) {
     if (!FILE_ID_RE.test(fileId))
       return null;
     try {
-      const parsed = JSON.parse(readFileSync26(this.#metadataPath(fileId), "utf8"));
+      const parsed = JSON.parse(readFileSync27(this.#metadataPath(fileId), "utf8"));
       if (typeof parsed.filename !== "string" || typeof parsed.mimeType !== "string" || typeof parsed.sizeBytes !== "number" || typeof parsed.savedName !== "string") {
         return null;
       }
@@ -29249,7 +29644,7 @@ class NodeFileStore {
   hooks = {
     resolveAttachmentByFileId: (fileId) => {
       const metadata = this.#metadata(fileId);
-      if (!metadata || !existsSync30(join39(this.uploadDir, metadata.savedName)))
+      if (!metadata || !existsSync31(join40(this.uploadDir, metadata.savedName)))
         return null;
       return this.#attachment(fileId, metadata);
     },
@@ -29257,8 +29652,8 @@ class NodeFileStore {
       const metadata = this.#metadata(fileId);
       if (!metadata)
         return null;
-      const path = join39(this.uploadDir, metadata.savedName);
-      return existsSync30(path) ? path : null;
+      const path = join40(this.uploadDir, metadata.savedName);
+      return existsSync31(path) ? path : null;
     },
     storeLocalFileAsUpload: (absPath, access = {}) => this.store(absPath, access),
     deleteFilesForTopic: (topicId) => this.deleteForTopic(topicId)
@@ -29268,7 +29663,7 @@ class NodeFileStore {
     const fileId = randomUUID24();
     const extension = safeExtension(absPath);
     const savedName = `${fileId}${extension}`;
-    const savedPath = join39(this.uploadDir, savedName);
+    const savedPath = join40(this.uploadDir, savedName);
     try {
       const stats = statSync18(absPath);
       if (!stats.isFile() || stats.size > MAX_UPLOAD_BYTES)
@@ -29283,7 +29678,7 @@ class NodeFileStore {
         ...access.visibility ? { visibility: access.visibility } : {}
       };
       copyFileSync4(absPath, savedPath);
-      writeFileSync22(this.#metadataPath(fileId), JSON.stringify(metadata), { mode: 384 });
+      writeFileSync23(this.#metadataPath(fileId), JSON.stringify(metadata), { mode: 384 });
       return this.#attachment(fileId, metadata);
     } catch (error2) {
       rmSync9(savedPath, { force: true });
@@ -29300,8 +29695,8 @@ class NodeFileStore {
     const allowed = metadata.visibility === "workspace" || metadata.ownerUserId === userId || Boolean(topic && isParticipant(topic, userId));
     if (!allowed)
       return null;
-    const path = join39(this.uploadDir, metadata.savedName);
-    if (!existsSync30(path))
+    const path = join40(this.uploadDir, metadata.savedName);
+    if (!existsSync31(path))
       return null;
     return new Response(Bun.file(path), {
       headers: {
@@ -29319,7 +29714,7 @@ class NodeFileStore {
       const metadata = this.#metadata(fileId);
       if (metadata?.topicId !== topicId)
         continue;
-      rmSync9(join39(this.uploadDir, metadata.savedName), { force: true });
+      rmSync9(join40(this.uploadDir, metadata.savedName), { force: true });
       rmSync9(this.#metadataPath(fileId), { force: true });
     }
   }
@@ -29471,14 +29866,14 @@ function createPollingSseStream(req, options) {
 import { randomUUID as randomUUID25, timingSafeEqual as timingSafeEqual4 } from "crypto";
 import {
   chmodSync as chmodSync6,
-  existsSync as existsSync31,
-  mkdirSync as mkdirSync29,
-  readFileSync as readFileSync27,
-  renameSync as renameSync15,
+  existsSync as existsSync32,
+  mkdirSync as mkdirSync30,
+  readFileSync as readFileSync28,
+  renameSync as renameSync16,
   unlinkSync as unlinkSync22,
-  writeFileSync as writeFileSync23
+  writeFileSync as writeFileSync24
 } from "fs";
-import { dirname as dirname18, resolve as resolve21 } from "path";
+import { dirname as dirname19, resolve as resolve21 } from "path";
 function jsonError(status, error2) {
   return Response.json({ ok: false, error: error2 }, { status });
 }
@@ -29968,6 +30363,25 @@ function createNodeControlHandler(options) {
           return jsonError(404, "Topic not found");
         return Response.json({ ok: true, usage: getTopicStats(userId, topicId) });
       }
+      const decisionsMatch = path.match(/^\/topics\/([^/]+)\/decisions$/);
+      if (decisionsMatch && req.method === "GET") {
+        const topicId = decodeURIComponent(decisionsMatch[1]);
+        const userId = requiredText(url.searchParams.get("user"), "user");
+        if (!topicForUser(topicId, userId))
+          return jsonError(404, "Topic not found");
+        return Response.json({ ok: true, decisions: readDecisions(userId, topicId) });
+      }
+      const decisionGraphMatch = path.match(/^\/topics\/([^/]+)\/decision-graph$/);
+      if (decisionGraphMatch && req.method === "POST") {
+        const topicId = decodeURIComponent(decisionGraphMatch[1]);
+        const body = await bodyRecord(req);
+        const userId = requiredText(body.userId, "userId");
+        const svg = requiredText(body.svg, "svg");
+        if (!topicForUser(topicId, userId))
+          return jsonError(404, "Topic not found");
+        writeDecisionGraphSvg(userId, topicId, svg);
+        return Response.json({ ok: true });
+      }
       const modelMatch = path.match(/^\/topics\/([^/]+)\/model$/);
       if (modelMatch && req.method === "POST") {
         const topicId = decodeURIComponent(modelMatch[1]);
@@ -30105,20 +30519,20 @@ function writeNodeDaemonInfo(port, startedAt) {
     stateDir: STATE_DIR,
     startedAt
   };
-  mkdirSync29(dirname18(NODE_DAEMON_INFO_PATH), { recursive: true });
+  mkdirSync30(dirname19(NODE_DAEMON_INFO_PATH), { recursive: true });
   const temporary = `${NODE_DAEMON_INFO_PATH}.${process.pid}.${randomUUID25()}.tmp`;
-  writeFileSync23(temporary, `${JSON.stringify(info, null, 2)}
+  writeFileSync24(temporary, `${JSON.stringify(info, null, 2)}
 `, { mode: 384 });
   chmodSync6(temporary, 384);
-  renameSync15(temporary, NODE_DAEMON_INFO_PATH);
+  renameSync16(temporary, NODE_DAEMON_INFO_PATH);
   chmodSync6(NODE_DAEMON_INFO_PATH, 384);
   return info;
 }
 function readNodeDaemonInfo() {
-  if (!existsSync31(NODE_DAEMON_INFO_PATH))
+  if (!existsSync32(NODE_DAEMON_INFO_PATH))
     return null;
   try {
-    const value = JSON.parse(readFileSync27(NODE_DAEMON_INFO_PATH, "utf8"));
+    const value = JSON.parse(readFileSync28(NODE_DAEMON_INFO_PATH, "utf8"));
     if (value?.schemaVersion !== 1 || value.stateDir !== STATE_DIR || !Number.isInteger(value.protocolVersion) || !Number.isInteger(value.pid) || !Number.isInteger(value.port) || value.port <= 0) {
       return null;
     }
@@ -30402,7 +30816,7 @@ var init_schedule = __esm(() => {
 
 // ../../packages/module-cron/src/scripts.ts
 import { spawn as spawn9 } from "child_process";
-import { existsSync as existsSync32, mkdirSync as mkdirSync30, readdirSync as readdirSync13 } from "fs";
+import { existsSync as existsSync33, mkdirSync as mkdirSync31, readdirSync as readdirSync13 } from "fs";
 import { resolve as resolve22, sep as sep2 } from "path";
 function validateCronScriptName(script) {
   if (!/^[A-Za-z0-9_][A-Za-z0-9_.-]*\.py$/.test(script) || script.includes("..") || script.includes("/") || script.includes("\\")) {
@@ -30420,12 +30834,12 @@ function resolveCronScriptPath(script) {
   return path;
 }
 function listCronScripts() {
-  mkdirSync30(CRON_JOBS_DIR, { recursive: true });
+  mkdirSync31(CRON_JOBS_DIR, { recursive: true });
   return readdirSync13(CRON_JOBS_DIR, { withFileTypes: true }).filter((entry) => entry.isFile() && validateCronScriptName(entry.name).ok).map((entry) => entry.name).sort();
 }
 function cronScriptExists(script) {
   try {
-    return existsSync32(resolveCronScriptPath(script));
+    return existsSync33(resolveCronScriptPath(script));
   } catch {
     return false;
   }
@@ -30457,7 +30871,7 @@ async function runCronPromptScript(options) {
   if (options.signal?.aborted)
     throw new CronScriptError("script run aborted");
   const scriptPath = resolveCronScriptPath(options.script);
-  if (!existsSync32(scriptPath))
+  if (!existsSync33(scriptPath))
     throw new CronScriptError(`cron script not found: ${options.script}`);
   const timeoutMs = Math.max(5000, options.timeoutMs ?? DEFAULT_SCRIPT_TIMEOUT_MS);
   const outputLimitBytes = Math.max(1024, options.outputLimitBytes ?? DEFAULT_OUTPUT_LIMIT_BYTES);
@@ -31650,7 +32064,7 @@ var init_scheduler = __esm(async () => {
 });
 
 // ../../packages/module-cron/src/module.ts
-import { existsSync as existsSync33 } from "fs";
+import { existsSync as existsSync34 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function envMs(name, fallback) {
   const parsed = Number.parseInt(process.env[name] ?? "", 10);
@@ -31681,7 +32095,7 @@ function createCronModule(options = {}) {
         if (event.type === "topic-deleted")
           trackCleanup(resetCronTopicContext(event.topicId));
       });
-      const mcpServerFile = options.mcpServerFile ?? (existsSync33(SOURCE_MCP_SERVER_FILE) ? SOURCE_MCP_SERVER_FILE : PACKAGED_MCP_SERVER_FILE);
+      const mcpServerFile = options.mcpServerFile ?? (existsSync34(SOURCE_MCP_SERVER_FILE) ? SOURCE_MCP_SERVER_FILE : PACKAGED_MCP_SERVER_FILE);
       const unregisterMcp = host2.registerRuntimeMcpServer("cron-manager", {
         scopes: ["forum", "manager"],
         forumRequired: true,
@@ -32348,6 +32762,73 @@ var init_commands = __esm(() => {
   ];
 });
 
+// ../../adapters/terminal/src/decision-graph.ts
+import {
+  layoutGraph,
+  renderSvgGraph,
+  renderTerminalGraph
+} from "orchgraph";
+function adjustDecisionGraphSpacing(current3, delta) {
+  return Math.min(MAX_DECISION_GRAPH_SPACING, Math.max(MIN_DECISION_GRAPH_SPACING, current3 + delta));
+}
+function decisionNodeState(status) {
+  switch (status) {
+    case "proposed":
+      return "queued";
+    case "executed":
+      return "succeeded";
+    case "rejected":
+      return "failed";
+    case "superseded":
+      return "blocked";
+    default:
+      return "idle";
+  }
+}
+function compactDetail(decision) {
+  const rationale = decision.reasoning.replace(/\s+/g, " ").trim();
+  return `${rationale} \xB7 ${decision.agent}${decision.model ? `/${decision.model}` : ""}`;
+}
+function buildDecisionGraph(decisions2, topicTitle) {
+  const ids = new Set(decisions2.map((decision) => decision.id));
+  return {
+    id: "decisions",
+    title: topicTitle,
+    direction: "DOWN",
+    nodes: decisions2.map((decision) => ({
+      id: decision.id,
+      label: `#${decision.id} ${decision.action}`,
+      detail: compactDetail(decision),
+      kind: decision.status,
+      state: decisionNodeState(decision.status),
+      metadata: { timestamp: decision.timestamp, agent: decision.agent, model: decision.model }
+    })),
+    edges: decisions2.flatMap((decision) => (decision.causedBy ?? []).filter((upstream) => ids.has(upstream)).map((upstream) => ({
+      id: `caused:${upstream}:${decision.id}`,
+      source: upstream,
+      target: decision.id,
+      label: "caused",
+      kind: "caused",
+      direction: "forward",
+      style: "solid"
+    })))
+  };
+}
+async function renderDecisionGraph(graph, spacing = DEFAULT_DECISION_GRAPH_SPACING, signal) {
+  const geometry = await layoutGraph(graph, {
+    direction: "DOWN",
+    spacing,
+    signal,
+    timeoutMs: 15000
+  });
+  return {
+    canvas: { ...renderTerminalGraph(graph, geometry), title: graph.title },
+    svg: renderSvgGraph(graph, geometry, { title: graph.title })
+  };
+}
+var DEFAULT_DECISION_GRAPH_SPACING = 4, MIN_DECISION_GRAPH_SPACING = 2, MAX_DECISION_GRAPH_SPACING = 10;
+var init_decision_graph = () => {};
+
 // ../../adapters/terminal/src/subagent-graph.ts
 import {
   layoutTerminalGraph,
@@ -32541,6 +33022,9 @@ function createInitialState(userId) {
     subagentGraphLoading: false,
     subagentGraphOffset: { x: 0, y: 0 },
     subagentGraphSpacing: DEFAULT_SUBAGENT_GRAPH_SPACING,
+    decisionGraphLoading: false,
+    decisionGraphOffset: { x: 0, y: 0 },
+    decisionGraphSpacing: DEFAULT_DECISION_GRAPH_SPACING,
     askChoiceIndex: 0,
     taskSidebarEnabled: true,
     overlay: null,
@@ -33104,6 +33588,7 @@ function applyRuntimeEvent(state, event) {
 var NO_TOPIC_PICKER_SELECTION = -1;
 var init_state2 = __esm(async () => {
   await init_src();
+  init_decision_graph();
   init_subagent_graph();
 });
 
@@ -33168,9 +33653,9 @@ var init_context_usage = __esm(async () => {
 
 // ../../adapters/terminal/src/path-suggest.ts
 import { execFile as execFile3 } from "child_process";
-import { existsSync as existsSync34, readdirSync as readdirSync14, statSync as statSync19 } from "fs";
+import { existsSync as existsSync35, readdirSync as readdirSync14, statSync as statSync19 } from "fs";
 import { homedir as homedir10 } from "os";
-import { basename as basename11, dirname as dirname19, join as join40, sep as sep3 } from "path";
+import { basename as basename11, dirname as dirname20, join as join41, sep as sep3 } from "path";
 import { promisify as promisify3 } from "util";
 function indexRecursivePaths(files) {
   const paths = [];
@@ -33271,15 +33756,15 @@ function resolveFragment(frag) {
   else if (frag === "~/")
     path = home;
   else if (frag.startsWith("~/"))
-    path = join40(home, frag.slice(2));
+    path = join41(home, frag.slice(2));
   else if (frag.startsWith("/"))
     path = frag;
   else
-    path = join40(home, frag);
+    path = join41(home, frag);
   if (frag.endsWith("/") || frag === "" || frag === "~") {
     return { dir: path, prefix: "" };
   }
-  return { dir: dirname19(path), prefix: basename11(path) };
+  return { dir: dirname20(path), prefix: basename11(path) };
 }
 function toToken(fullPath, isDir) {
   const home = homedir10();
@@ -33304,7 +33789,7 @@ function rankAndSlice(dir, candidates) {
   });
   return candidates.slice(0, MAX_SUGGESTIONS).map(({ relPath, isDir }) => ({
     label: `${relPath}${isDir ? "/" : ""}`,
-    value: toToken(join40(dir, relPath), isDir),
+    value: toToken(join41(dir, relPath), isDir),
     isDir
   }));
 }
@@ -33383,7 +33868,7 @@ function pathSuggestions(lineText, col) {
     let isDir = entry.isDirectory();
     if (!isDir && entry.isSymbolicLink()) {
       try {
-        isDir = statSync19(join40(dir, entry.name)).isDirectory();
+        isDir = statSync19(join41(dir, entry.name)).isDirectory();
       } catch {}
     }
     return {
@@ -33410,14 +33895,14 @@ function fragmentToAbsolutePath(frag) {
   if (frag === "~" || frag === "~/")
     return home;
   if (frag.startsWith("~/"))
-    return join40(home, frag.slice(2));
+    return join41(home, frag.slice(2));
   if (frag.startsWith("/"))
     return frag;
-  return join40(home, frag);
+  return join41(home, frag);
 }
 function fragmentResolves(frag) {
   try {
-    return existsSync34(fragmentToAbsolutePath(frag));
+    return existsSync35(fragmentToAbsolutePath(frag));
   } catch {
     return false;
   }
@@ -34283,7 +34768,7 @@ function helpLines() {
     line("  Alt-Backspace delete word \xB7 Ctrl-U clear before cursor"),
     line("  Cmd-Backspace works when forwarded \xB7 Ctrl-W/K aliases"),
     line("  Mouse wheel / PgUp/PgDn scroll \xB7 Ctrl-E load older \xB7 Ctrl-T tasks"),
-    line("  Ctrl-O topics \xB7 Ctrl-G subagents \xB7 Ctrl-X abort"),
+    line("  Ctrl-O topics \xB7 Ctrl-G subagents \xB7 Ctrl-D decisions \xB7 Ctrl-X abort"),
     line("  In topics: type to filter \xB7 Ctrl-N new \xB7 Ctrl-D delete"),
     line("  Esc/Ctrl-C stop active turn \xB7 Ctrl-C twice when idle to quit"),
     line(""),
@@ -34630,6 +35115,43 @@ function subagentGraphLines(state, width, height, animationFrame) {
     })
   ].slice(0, height);
 }
+function decisionGraphLines(state, width, height) {
+  const headerHeight = 5;
+  const canvas = state.decisionGraph;
+  const offset = state.decisionGraphOffset;
+  const viewportWidth = Math.max(1, width - 4);
+  const viewportHeight = Math.max(1, height - headerHeight);
+  const maxX = Math.max(0, (canvas?.width ?? 0) - viewportWidth);
+  const maxY = Math.max(0, (canvas?.height ?? 0) - viewportHeight);
+  const x = Math.min(maxX, offset.x);
+  const y = Math.min(maxY, offset.y);
+  const position = maxX > 0 || maxY > 0 ? ` \xB7 view ${x + 1},${y + 1}/${maxX + 1},${maxY + 1}` : "";
+  const header = [
+    line("  Decision graph", { fg: theme.accent, bold: true }),
+    line(`  ${canvas?.title ?? activeTopic(state)?.title ?? "Current topic"}`, {
+      fg: theme.text,
+      bold: true
+    }),
+    line(`  [/] spacing ${state.decisionGraphSpacing} \xB7 drag/wheel/arrows/hjkl move \xB7 Ctrl-D/Esc close${position}`, { fg: theme.muted }),
+    line("  \u25CB accepted \xB7 \u25F7 proposed \xB7 \u2713 executed \xB7 \u2717 rejected \xB7 ! superseded", {
+      fg: theme.subtle
+    }),
+    line("")
+  ];
+  if (state.decisionGraphLoading) {
+    return [...header, line("  Laying out decisions with Orchgraph\u2026", { fg: theme.cyan })].slice(0, height);
+  }
+  if (!canvas || canvas.lines.length === 0) {
+    return [...header, line("  No decision graph data", { fg: theme.muted })].slice(0, height);
+  }
+  return [
+    ...header,
+    ...Array.from({ length: viewportHeight }, (_, index) => {
+      const text2 = sliceWidthRange(canvas.lines[y + index] ?? "", x, viewportWidth);
+      return line(`  ${text2}`, { fg: /[\u256D\u256E\u2570\u256F]/.test(text2) ? theme.cyan : theme.muted });
+    })
+  ].slice(0, height);
+}
 function modelOverlayLines(state, height) {
   const currentModel = effectiveTopicModel(activeTopic(state));
   const modelColumnWidth = Math.max(...SELECTABLE_MODELS.map(({ model }) => `${model} (current)`.length));
@@ -34747,6 +35269,8 @@ function conversationLines(state, width, height, animationFrame = 0, nowMs = ter
     return topicOverlayLines(state, width, height, animationFrame).slice(0, height);
   if (state.overlay === "subagents")
     return subagentGraphLines(state, width, height, animationFrame);
+  if (state.overlay === "decisions")
+    return decisionGraphLines(state, width, height);
   if (state.overlay === "background-session")
     return backgroundSessionViewportLines(state, width, height, nowMs);
   if (state.overlay === "models")
@@ -34889,7 +35413,7 @@ function inputVisualLines(state, width) {
   return { lines: result, cursorLine, cursorColumn };
 }
 function composerPane(state, width) {
-  const title = state.creatingTopic ? "new topic \xB7 type a name \xB7 Enter create" : state.overlay === "vault" ? state.vaultMode === "list" ? "Vault command \xB7 Enter run \xB7 Esc close" : `${state.vaultMode === "key" ? "key" : state.vaultMode === "value" ? "secret value" : "description"} \xB7 Enter continue \xB7 Esc cancel` : "Ctrl-O topics \xB7 Ctrl-G subagents";
+  const title = state.creatingTopic ? "new topic \xB7 type a name \xB7 Enter create" : state.overlay === "vault" ? state.vaultMode === "list" ? "Vault command \xB7 Enter run \xB7 Esc close" : `${state.vaultMode === "key" ? "key" : state.vaultMode === "value" ? "secret value" : "description"} \xB7 Enter continue \xB7 Esc cancel` : "Ctrl-O topics \xB7 Ctrl-G subagents \xB7 Ctrl-D decisions";
   const visual = inputVisualLines(state, width);
   let inputStart = Math.max(0, visual.lines.length - 5);
   if (visual.cursorLine < inputStart)
@@ -35051,6 +35575,13 @@ function footerHintText(state) {
   if (state.overlay === "subagents") {
     return ["arrows/hjkl/wheel move \xB7 Esc close  ", "arrows move \xB7 Esc close  ", "Esc close  "];
   }
+  if (state.overlay === "decisions") {
+    return [
+      "arrows/hjkl/wheel move \xB7 Ctrl-D/Esc close  ",
+      "arrows move \xB7 Esc close  ",
+      "Esc close  "
+    ];
+  }
   if (state.overlay === "vault") {
     if (state.vaultMode === "list")
       return ["Enter run \xB7 Esc close  ", "Esc close  "];
@@ -35123,7 +35654,7 @@ function renderAppFrame(state, columns, rows, animationFrame = 0, nowMs = termin
   const height = Math.max(14, rows);
   const footer = footerLines(state, width);
   const decision = decisionPane(state, width);
-  const hideComposer = state.overlay === "background-session" || state.overlay === "topics" || state.overlay === "subagents" || state.overlay === "vault" && state.vaultMode === "confirm-delete";
+  const hideComposer = state.overlay === "background-session" || state.overlay === "topics" || state.overlay === "subagents" || state.overlay === "decisions" || state.overlay === "vault" && state.vaultMode === "confirm-delete";
   const composer = hideComposer ? { lines: [], cursor: null } : composerPane(state, width);
   const bodyHeight = Math.max(3, height - footer.length - decision.length - composer.lines.length);
   const layout = terminalBodyLayout(state, width);
@@ -35659,6 +36190,12 @@ class EmbeddedNegotiumClient {
   listTopicUsage(topicId) {
     return getTopicStats(this.#userId, topicId);
   }
+  listDecisions(topicId) {
+    return readDecisions(this.#userId, topicId);
+  }
+  saveDecisionGraph(topicId, svg) {
+    writeDecisionGraphSvg(this.#userId, topicId, svg);
+  }
   listMessagePage(topicId, cursor, limit = MESSAGE_HISTORY_PAGE_SIZE) {
     const result = listApiMessages(topicId, { cursor, limit });
     return { messages: result.page, cursor: result.cursor, hasMore: result.hasMore };
@@ -35848,6 +36385,16 @@ class RemoteNegotiumClient {
     const result = await this.#request(`/topics/${encodeURIComponent(topicId)}/usage?user=${encodeURIComponent(this.#userId)}`);
     return result.usage;
   }
+  async listDecisions(topicId) {
+    const result = await this.#request(`/topics/${encodeURIComponent(topicId)}/decisions?user=${encodeURIComponent(this.#userId)}`);
+    return result.decisions ?? [];
+  }
+  async saveDecisionGraph(topicId, svg) {
+    await this.#request(`/topics/${encodeURIComponent(topicId)}/decision-graph`, {
+      method: "POST",
+      body: JSON.stringify({ userId: this.#userId, svg })
+    });
+  }
   async listMessagePage(topicId, cursor, limit = MESSAGE_HISTORY_PAGE_SIZE) {
     const query2 = new URLSearchParams({ user: this.#userId, limit: String(limit) });
     if (cursor)
@@ -37183,6 +37730,10 @@ class TerminalApp {
   #subagentGraphSpacingTimer = null;
   #subagentGraphCache = null;
   #pendingSubagentGraphSpacing = null;
+  #decisionGraphGeneration = 0;
+  #decisionGraphAbortController = null;
+  #decisionGraphSpacingTimer = null;
+  #pendingDecisionGraphSpacing = null;
   #running = false;
   #stopRequested = false;
   #finishRun = null;
@@ -37540,6 +38091,9 @@ class TerminalApp {
     const topicId = this.#state.activeTopicId;
     if (!topicId)
       return;
+    this.#decisionGraphGeneration += 1;
+    this.#decisionGraphAbortController?.abort();
+    this.#decisionGraphAbortController = null;
     if (this.#state.overlay === "subagents") {
       this.#subagentGraphGeneration += 1;
       this.#subagentGraphAbortController?.abort();
@@ -37592,6 +38146,143 @@ class TerminalApp {
     }
     this.#queueRender();
   }
+  async#toggleDecisionGraph() {
+    const topic = activeTopic(this.#state);
+    if (!topic || !this.#client.listDecisions)
+      return;
+    if (this.#state.overlay === "decisions") {
+      this.#decisionGraphGeneration += 1;
+      this.#decisionGraphAbortController?.abort();
+      this.#decisionGraphAbortController = null;
+      this.#subagentGraphDragPoint = null;
+      this.#state = { ...this.#state, overlay: null, decisionGraphLoading: false };
+      this.#queueRender();
+      return;
+    }
+    this.#subagentGraphGeneration += 1;
+    this.#subagentGraphAbortController?.abort();
+    this.#subagentGraphAbortController = null;
+    const generation = ++this.#decisionGraphGeneration;
+    this.#decisionGraphAbortController?.abort();
+    const controller = new AbortController;
+    this.#decisionGraphAbortController = controller;
+    this.#subagentGraphDragPoint = null;
+    this.#state = {
+      ...this.#state,
+      overlay: "decisions",
+      decisionGraph: undefined,
+      decisionGraphLoading: true,
+      decisionGraphOffset: { x: 0, y: 0 },
+      notice: undefined,
+      noticeLevel: undefined
+    };
+    this.#queueRender();
+    try {
+      const decisions2 = await this.#client.listDecisions(topic.id);
+      if (generation !== this.#decisionGraphGeneration || this.#state.overlay !== "decisions") {
+        return;
+      }
+      if (decisions2.length === 0) {
+        this.#decisionGraphAbortController = null;
+        this.#state = {
+          ...this.#state,
+          overlay: null,
+          decisionGraphLoading: false,
+          notice: "No decisions recorded in this topic",
+          noticeLevel: "info"
+        };
+        this.#queueRender();
+        return;
+      }
+      const rendered = await renderDecisionGraph(buildDecisionGraph(decisions2, topic.title), this.#state.decisionGraphSpacing, controller.signal);
+      if (generation !== this.#decisionGraphGeneration || this.#state.overlay !== "decisions") {
+        return;
+      }
+      let saveWarning;
+      try {
+        await this.#client.saveDecisionGraph?.(topic.id, rendered.svg);
+      } catch (error2) {
+        saveWarning = `Decision graph shown but SVG save failed: ${error2 instanceof Error ? error2.message : String(error2)}`;
+      }
+      this.#decisionGraphAbortController = null;
+      this.#state = {
+        ...this.#state,
+        decisionGraph: rendered.canvas,
+        decisionGraphLoading: false,
+        ...saveWarning ? { notice: saveWarning, noticeLevel: "warn" } : {}
+      };
+    } catch (error2) {
+      if (generation !== this.#decisionGraphGeneration)
+        return;
+      this.#decisionGraphAbortController = null;
+      this.#state = {
+        ...this.#state,
+        overlay: null,
+        decisionGraphLoading: false,
+        notice: `Decision graph failed: ${error2 instanceof Error ? error2.message : String(error2)}`,
+        noticeLevel: "error"
+      };
+    }
+    this.#queueRender();
+  }
+  #changeDecisionGraphSpacing(delta) {
+    const previous = this.#pendingDecisionGraphSpacing ?? this.#state.decisionGraphSpacing;
+    const spacing = adjustDecisionGraphSpacing(previous, delta);
+    if (spacing === previous)
+      return;
+    this.#pendingDecisionGraphSpacing = spacing;
+    if (this.#decisionGraphSpacingTimer)
+      clearTimeout(this.#decisionGraphSpacingTimer);
+    this.#decisionGraphSpacingTimer = setTimeout(() => {
+      this.#decisionGraphSpacingTimer = null;
+      const target = this.#pendingDecisionGraphSpacing;
+      this.#pendingDecisionGraphSpacing = null;
+      if (target !== null)
+        this.#applyDecisionGraphSpacing(target);
+    }, 120);
+  }
+  async#applyDecisionGraphSpacing(spacing) {
+    const topic = activeTopic(this.#state);
+    if (!topic || this.#state.overlay !== "decisions" || !this.#client.listDecisions)
+      return;
+    const generation = ++this.#decisionGraphGeneration;
+    this.#decisionGraphAbortController?.abort();
+    const controller = new AbortController;
+    this.#decisionGraphAbortController = controller;
+    this.#state = { ...this.#state, decisionGraphSpacing: spacing, decisionGraphLoading: true };
+    this.#queueRender();
+    try {
+      const decisions2 = await this.#client.listDecisions(topic.id);
+      const rendered = await renderDecisionGraph(buildDecisionGraph(decisions2, topic.title), spacing, controller.signal);
+      if (generation !== this.#decisionGraphGeneration || this.#state.overlay !== "decisions") {
+        return;
+      }
+      let saveWarning;
+      try {
+        await this.#client.saveDecisionGraph?.(topic.id, rendered.svg);
+      } catch (error2) {
+        saveWarning = `Decision graph shown but SVG save failed: ${error2 instanceof Error ? error2.message : String(error2)}`;
+      }
+      this.#decisionGraphAbortController = null;
+      this.#state = {
+        ...this.#state,
+        decisionGraph: rendered.canvas,
+        decisionGraphLoading: false,
+        ...saveWarning ? { notice: saveWarning, noticeLevel: "warn" } : {}
+      };
+    } catch (error2) {
+      if (generation !== this.#decisionGraphGeneration)
+        return;
+      this.#decisionGraphAbortController = null;
+      this.#state = {
+        ...this.#state,
+        decisionGraphLoading: false,
+        notice: `Decision graph failed: ${error2 instanceof Error ? error2.message : String(error2)}`,
+        noticeLevel: "error"
+      };
+    }
+    this.#queueRender();
+  }
   #changeSubagentGraphSpacing(delta) {
     const previousSpacing = this.#pendingSubagentGraphSpacing ?? this.#state.subagentGraphSpacing;
     const spacing = adjustSubagentGraphSpacing(previousSpacing, delta);
@@ -37772,18 +38463,18 @@ class TerminalApp {
   }
   #handleKeySegment(segment) {
     const mouse = consumeMouseInput(segment);
-    if (mouse.horizontalScrollDelta !== 0 && this.#state.overlay === "subagents") {
+    if (mouse.horizontalScrollDelta !== 0 && (this.#state.overlay === "subagents" || this.#state.overlay === "decisions")) {
       this.#selection = null;
-      this.#panSubagentGraph(-mouse.horizontalScrollDelta, 0);
+      this.#panActiveGraph(-mouse.horizontalScrollDelta, 0);
     }
     if (mouse.scrollDelta !== 0) {
       this.#selection = null;
       this.#scroll(mouse.scrollDelta);
     }
     for (const event of mouse.events) {
-      if (this.#state.overlay === "subagents")
-        this.#handleSubagentGraphMouse(event);
-      else
+      if (this.#state.overlay === "subagents" || this.#state.overlay === "decisions") {
+        this.#handleGraphMouse(event);
+      } else
         this.#handleMouseSelection(event);
     }
     const chunk = normalizeKeySequences(mouse.input);
@@ -37817,6 +38508,12 @@ class TerminalApp {
       this.#toggleSubagentGraph();
       return;
     }
+    if (chunk === "\x04" && this.#state.overlay !== "topics") {
+      if (editingVaultSecret)
+        return;
+      this.#toggleDecisionGraph();
+      return;
+    }
     if (chunk === "\x14") {
       if (editingVaultSecret)
         return;
@@ -37869,6 +38566,38 @@ class TerminalApp {
       this.#queueRender();
       return;
     }
+    if (this.#state.overlay === "decisions") {
+      if (chunk === "\x1B") {
+        this.#decisionGraphGeneration += 1;
+        this.#decisionGraphAbortController?.abort();
+        this.#decisionGraphAbortController = null;
+        this.#subagentGraphDragPoint = null;
+        this.#state = { ...this.#state, overlay: null, decisionGraphLoading: false };
+      } else if (chunk === "\x1B[A" || chunk === "k") {
+        this.#panDecisionGraph(0, -2);
+        return;
+      } else if (chunk === "\x1B[B" || chunk === "j") {
+        this.#panDecisionGraph(0, 2);
+        return;
+      } else if (chunk === "\x1B[D" || chunk === "h") {
+        this.#panDecisionGraph(-4, 0);
+        return;
+      } else if (chunk === "\x1B[C" || chunk === "l") {
+        this.#panDecisionGraph(4, 0);
+        return;
+      } else if (chunk === "\x1B[5~") {
+        this.#panDecisionGraph(0, -8);
+        return;
+      } else if (chunk === "\x1B[6~") {
+        this.#panDecisionGraph(0, 8);
+        return;
+      } else if (chunk === "[" || chunk === "]") {
+        this.#changeDecisionGraphSpacing(chunk === "[" ? -1 : 1);
+        return;
+      }
+      this.#queueRender();
+      return;
+    }
     if (chunk === "\x01" || chunk === "\x1B[H" || chunk === "\x1B[1~") {
       this.#input.moveHome();
       this.#syncInput();
@@ -38809,7 +39538,7 @@ class TerminalApp {
     this.#copySelection(text2);
     this.#queueRender();
   }
-  #handleSubagentGraphMouse(event) {
+  #handleGraphMouse(event) {
     if ((event.button & 3) !== 0 && event.kind !== "release")
       return;
     const point = { x: event.x, y: event.y };
@@ -38826,7 +39555,7 @@ class TerminalApp {
     this.#subagentGraphDragPoint = point;
     if (!previous)
       return;
-    this.#panSubagentGraph(previous.x - point.x, previous.y - point.y);
+    this.#panActiveGraph(previous.x - point.x, previous.y - point.y);
   }
   async#copySelection(text2) {
     try {
@@ -38887,8 +39616,8 @@ class TerminalApp {
     this.#loadOlderMessages(topic.id, currentMax + 8);
   }
   #scroll(delta) {
-    if (this.#state.overlay === "subagents") {
-      this.#panSubagentGraph(0, -delta);
+    if (this.#state.overlay === "subagents" || this.#state.overlay === "decisions") {
+      this.#panActiveGraph(0, -delta);
       return;
     }
     if (this.#state.overlay === "background-session") {
@@ -38922,6 +39651,26 @@ class TerminalApp {
     };
     this.#queueRender();
   }
+  #panDecisionGraph(deltaX, deltaY) {
+    const canvas = this.#state.decisionGraph;
+    const viewportWidth = Math.max(1, (process.stdout.columns ?? 100) - 4);
+    const viewportHeight = Math.max(1, (process.stdout.rows ?? 30) - 8);
+    const current3 = this.#state.decisionGraphOffset;
+    this.#state = {
+      ...this.#state,
+      decisionGraphOffset: {
+        x: Math.min(Math.max(0, (canvas?.width ?? 0) - viewportWidth), Math.max(0, current3.x + deltaX)),
+        y: Math.min(Math.max(0, (canvas?.height ?? 0) - viewportHeight), Math.max(0, current3.y + deltaY))
+      }
+    };
+    this.#queueRender();
+  }
+  #panActiveGraph(deltaX, deltaY) {
+    if (this.#state.overlay === "decisions")
+      this.#panDecisionGraph(deltaX, deltaY);
+    else
+      this.#panSubagentGraph(deltaX, deltaY);
+  }
   async#abort() {
     const topic = activeTopic(this.#state);
     let aborted = false;
@@ -39005,6 +39754,13 @@ class TerminalApp {
     this.#subagentGraphGeneration += 1;
     this.#subagentGraphAbortController?.abort();
     this.#subagentGraphAbortController = null;
+    this.#decisionGraphGeneration += 1;
+    this.#decisionGraphAbortController?.abort();
+    this.#decisionGraphAbortController = null;
+    if (this.#subagentGraphSpacingTimer)
+      clearTimeout(this.#subagentGraphSpacingTimer);
+    if (this.#decisionGraphSpacingTimer)
+      clearTimeout(this.#decisionGraphSpacingTimer);
     if (this.#renderTimer)
       clearTimeout(this.#renderTimer);
     if (this.#inputCarryTimer)
@@ -39044,6 +39800,7 @@ var init_app = __esm(async () => {
   init_color_depth();
   await init_command_router();
   init_commands();
+  init_decision_graph();
   init_path_suggest();
   await init_render();
   init_screen_renderer();
@@ -39646,8 +40403,8 @@ var init_commands2 = __esm(async () => {
 
 // ../../adapters/telegram/src/mapping-store.ts
 import { Database as Database2 } from "bun:sqlite";
-import { mkdirSync as mkdirSync31 } from "fs";
-import { dirname as dirname20, join as join41 } from "path";
+import { mkdirSync as mkdirSync32 } from "fs";
+import { dirname as dirname21, join as join42 } from "path";
 function outboxRowToEntry(row) {
   return {
     id: row.id,
@@ -39713,9 +40470,9 @@ function migrateOutboxSchema(db4) {
   db4.run("CREATE INDEX IF NOT EXISTS idx_telegram_outbox_runtime_message ON outbox(runtime_message_id)");
 }
 function openMappingStore(path) {
-  const dbPath = path ?? join41(DATA_DIR, "adapter-telegram.db");
+  const dbPath = path ?? join42(DATA_DIR, "adapter-telegram.db");
   if (dbPath !== ":memory:")
-    mkdirSync31(dirname20(dbPath), { recursive: true });
+    mkdirSync32(dirname21(dbPath), { recursive: true });
   const db4 = new Database2(dbPath);
   migrateLegacySchema(db4);
   createTables(db4);
@@ -40073,7 +40830,7 @@ function renderOutbound(text2, maxLen = 4096) {
 }
 
 // ../../adapters/telegram/src/adapter.ts
-import { existsSync as existsSync35 } from "fs";
+import { existsSync as existsSync36 } from "fs";
 import { basename as basename12, extname as extname5 } from "path";
 function startTelegramAdapter(opts) {
   const { client, forumChatId } = opts;
@@ -40571,7 +41328,7 @@ function startTelegramAdapter(opts) {
       logger.warn({ path, chatId }, "telegram adapter: blocked sensitive file path");
       return { ref: null, delivered: false, error: "path matches the sensitive-file blacklist" };
     }
-    if (!existsSync35(path)) {
+    if (!existsSync36(path)) {
       const sent = await client.sendMessage(chatId, `File: ${path}`, base).catch(() => null);
       const messageId = sentMessageId(sent);
       return {
@@ -41591,11 +42348,11 @@ var exports_join_status = {};
 __export(exports_join_status, {
   hasConfiguredOtiumJoin: () => hasConfiguredOtiumJoin
 });
-import { existsSync as existsSync36 } from "fs";
+import { existsSync as existsSync37 } from "fs";
 import { resolve as resolve23 } from "path";
 function hasConfiguredOtiumJoin() {
   const envJoin = Boolean(process.env.OTIUM_CENTRAL_URL?.trim() && process.env.OTIUM_CELL_ID?.trim() && process.env.OTIUM_CELL_SECRET?.trim());
-  return envJoin || existsSync36(resolve23(DATA_DIR, "otium-join.json"));
+  return envJoin || existsSync37(resolve23(DATA_DIR, "otium-join.json"));
 }
 var init_join_status = __esm(() => {
   init_config_public();
@@ -41613,9 +42370,9 @@ function firstCell() {
     return cell;
   return null;
 }
-function attachOtiumCentralCell(join42) {
-  cells.set(join42.cellId, {
-    join: join42,
+function attachOtiumCentralCell(join43) {
+  cells.set(join43.cellId, {
+    join: join43,
     nodesCache: null,
     verifyCache: new Map,
     tokenCache: new Map
@@ -41627,10 +42384,10 @@ function detachOtiumCentralCell(cellId) {
 function attachedOtiumCells() {
   return [...cells.values()].map((cell) => cell.join);
 }
-function configureOtiumCentral(join42) {
+function configureOtiumCentral(join43) {
   cells.clear();
-  if (join42)
-    attachOtiumCentralCell(join42);
+  if (join43)
+    attachOtiumCentralCell(join43);
 }
 function isOtiumCentralConfigured() {
   return cells.size > 0;
@@ -41971,6 +42728,13 @@ var init_canonical_mcp_bridge = __esm(async () => {
   CAPABILITY_TTL_MS = 60 * 60 * 1000;
   TOOL_ALLOWLIST = {
     task: new Set(["task_create", "task_update", "task_list", "task_get", "task_delete"]),
+    decision: new Set([
+      "decision_create",
+      "decision_update",
+      "decision_list",
+      "decision_get",
+      "decision_delete"
+    ]),
     wiki: new Set([
       "wiki_query",
       "wiki_read",
@@ -42037,20 +42801,20 @@ import { createHash as createHash11, randomUUID as randomUUID28 } from "crypto";
 import {
   chmodSync as chmodSync7,
   closeSync as closeSync5,
-  existsSync as existsSync37,
+  existsSync as existsSync38,
   fsyncSync as fsyncSync2,
   linkSync,
   lstatSync,
-  mkdirSync as mkdirSync32,
+  mkdirSync as mkdirSync33,
   openSync as openSync5,
-  readFileSync as readFileSync28,
-  renameSync as renameSync16,
+  readFileSync as readFileSync29,
+  renameSync as renameSync17,
   rmSync as rmSync10,
   statSync as statSync20,
   unlinkSync as unlinkSync23,
-  writeFileSync as writeFileSync24
+  writeFileSync as writeFileSync25
 } from "fs";
-import { dirname as dirname21, resolve as resolve24 } from "path";
+import { dirname as dirname22, resolve as resolve24 } from "path";
 function joinFilePath() {
   return resolve24(DATA_DIR, "otium-join.json");
 }
@@ -42123,13 +42887,13 @@ function withJoinCredentialLock(operation) {
   const lockPath = joinLockPath();
   const ownerPath = resolve24(lockPath, "owner.json");
   const owner = { pid: process.pid, token: randomUUID28() };
-  mkdirSync32(dirname21(lockPath), { recursive: true });
+  mkdirSync33(dirname22(lockPath), { recursive: true });
   for (let attempt = 0;; attempt += 1) {
     let created = false;
     try {
-      mkdirSync32(lockPath, { mode: 448 });
+      mkdirSync33(lockPath, { mode: 448 });
       created = true;
-      writeFileSync24(ownerPath, `${JSON.stringify(owner)}
+      writeFileSync25(ownerPath, `${JSON.stringify(owner)}
 `, { mode: 384 });
       const ownerFd = openSync5(ownerPath, "r");
       try {
@@ -42147,7 +42911,7 @@ function withJoinCredentialLock(operation) {
         throw error2;
       let current3 = null;
       try {
-        current3 = JSON.parse(readFileSync28(ownerPath, "utf8"));
+        current3 = JSON.parse(readFileSync29(ownerPath, "utf8"));
       } catch {}
       let ageMs;
       try {
@@ -42165,7 +42929,7 @@ function withJoinCredentialLock(operation) {
       }
       const stalePath = `${lockPath}.stale.${process.pid}.${randomUUID28()}`;
       try {
-        renameSync16(lockPath, stalePath);
+        renameSync17(lockPath, stalePath);
         rmSync10(stalePath, { recursive: true, force: true });
       } catch (staleError) {
         if (staleError.code !== "ENOENT")
@@ -42177,7 +42941,7 @@ function withJoinCredentialLock(operation) {
     return operation();
   } finally {
     try {
-      const current3 = JSON.parse(readFileSync28(ownerPath, "utf8"));
+      const current3 = JSON.parse(readFileSync29(ownerPath, "utf8"));
       if (current3.pid === owner.pid && current3.token === owner.token) {
         rmSync10(lockPath, { recursive: true, force: true });
       }
@@ -42187,22 +42951,22 @@ function withJoinCredentialLock(operation) {
 function joinsEqual(left, right) {
   return left.central === right.central && left.relay === right.relay && left.cellId === right.cellId && left.secret === right.secret;
 }
-function normalizedJoin(join42) {
+function normalizedJoin(join43) {
   return normalizeJoin({
-    v: join42.v,
-    central: join42.central,
-    relay: join42.relay,
-    cellId: join42.cellId,
-    secret: join42.secret
+    v: join43.v,
+    central: join43.central,
+    relay: join43.relay,
+    cellId: join43.cellId,
+    secret: join43.secret
   });
 }
-function joinCredentialDigest(join42) {
-  return createHash11("sha256").update(JSON.stringify(normalizedJoin(join42))).digest("base64url");
+function joinCredentialDigest(join43) {
+  return createHash11("sha256").update(JSON.stringify(normalizedJoin(join43))).digest("base64url");
 }
 function readPersistedJoins(path = joinFilePath()) {
-  if (!existsSync37(path))
+  if (!existsSync38(path))
     return [];
-  const parsed = JSON.parse(readFileSync28(path, "utf-8"));
+  const parsed = JSON.parse(readFileSync29(path, "utf-8"));
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error("persisted join credentials are not a JSON object");
   }
@@ -42216,9 +42980,9 @@ function readPersistedJoins(path = joinFilePath()) {
     return normalizeJoin(entry);
   });
 }
-function isJoinPersisted(join42) {
+function isJoinPersisted(join43) {
   try {
-    const normalized = normalizedJoin(join42);
+    const normalized = normalizedJoin(join43);
     return readPersistedJoins().some((persisted) => joinsEqual(persisted, normalized));
   } catch {
     return false;
@@ -42234,19 +42998,19 @@ function fsyncPath(target) {
 }
 function writeJoins(joins, allowOverwrite) {
   const path = joinFilePath();
-  const directory = dirname21(path);
+  const directory = dirname22(path);
   const temporaryPath = resolve24(directory, `.otium-join.json.${process.pid}.${randomUUID28()}.tmp`);
   const payload = { v: JOIN_FILE_VERSION, joins };
   let fd;
   try {
     fd = openSync5(temporaryPath, "wx", 384);
-    writeFileSync24(fd, `${JSON.stringify(payload, null, 2)}
+    writeFileSync25(fd, `${JSON.stringify(payload, null, 2)}
 `, "utf8");
     fsyncSync2(fd);
     closeSync5(fd);
     fd = undefined;
     if (allowOverwrite) {
-      renameSync16(temporaryPath, path);
+      renameSync17(temporaryPath, path);
     } else {
       linkSync(temporaryPath, path);
       unlinkSync23(temporaryPath);
@@ -42256,18 +43020,18 @@ function writeJoins(joins, allowOverwrite) {
   } catch (error2) {
     if (fd !== undefined)
       closeSync5(fd);
-    if (existsSync37(temporaryPath))
+    if (existsSync38(temporaryPath))
       unlinkSync23(temporaryPath);
     throw error2;
   }
   return path;
 }
-function saveJoinWhileLocked(join42, options = {}) {
+function saveJoinWhileLocked(join43, options = {}) {
   const path = joinFilePath();
-  const directory = dirname21(path);
-  const normalized = normalizedJoin(join42);
-  mkdirSync32(directory, { recursive: true });
-  if (!existsSync37(path))
+  const directory = dirname22(path);
+  const normalized = normalizedJoin(join43);
+  mkdirSync33(directory, { recursive: true });
+  if (!existsSync38(path))
     return writeJoins([normalized], false);
   if (lstatSync(path).isSymbolicLink()) {
     throw new Error(`refusing to replace symlinked Otium join file at ${path}`);
@@ -42295,13 +43059,13 @@ function saveJoinWhileLocked(join42, options = {}) {
   const next = conflict ? existing.map((persisted) => persisted.cellId === normalized.cellId ? normalized : persisted) : [...existing, normalized];
   return writeJoins(next, true);
 }
-function saveJoin(join42, options = {}) {
-  return withJoinCredentialLock(() => saveJoinWhileLocked(join42, options));
+function saveJoin(join43, options = {}) {
+  return withJoinCredentialLock(() => saveJoinWhileLocked(join43, options));
 }
 function removeJoin(cellId) {
   return withJoinCredentialLock(() => {
     const path = joinFilePath();
-    if (!existsSync37(path))
+    if (!existsSync38(path))
       return false;
     if (lstatSync(path).isSymbolicLink()) {
       throw new Error(`refusing to remove symlinked Otium join file at ${path}`);
@@ -42309,7 +43073,7 @@ function removeJoin(cellId) {
     if (cellId) {
       let remaining;
       try {
-        remaining = readPersistedJoins(path).filter((join42) => join42.cellId !== cellId);
+        remaining = readPersistedJoins(path).filter((join43) => join43.cellId !== cellId);
       } catch {
         return false;
       }
@@ -42321,7 +43085,7 @@ function removeJoin(cellId) {
       }
     }
     unlinkSync23(path);
-    fsyncPath(dirname21(path));
+    fsyncPath(dirname22(path));
     return true;
   });
 }
@@ -42342,7 +43106,7 @@ function loadJoins() {
     logger.warn("otium: OTIUM_CENTRAL_URL, OTIUM_CELL_ID, OTIUM_CELL_SECRET must be set together \u2014 ignoring partial env");
   }
   const path = joinFilePath();
-  if (!existsSync37(path))
+  if (!existsSync38(path))
     return [];
   try {
     return readPersistedJoins(path);
@@ -42361,8 +43125,8 @@ var init_join = __esm(async () => {
 
 // ../../adapters/otium/src/peer-files.ts
 import { randomUUID as randomUUID29 } from "crypto";
-import { copyFileSync as copyFileSync5, mkdirSync as mkdirSync33, rmSync as rmSync11, statSync as statSync21 } from "fs";
-import { basename as basename13, extname as extname6, join as join42 } from "path";
+import { copyFileSync as copyFileSync5, mkdirSync as mkdirSync34, rmSync as rmSync11, statSync as statSync21 } from "fs";
+import { basename as basename13, extname as extname6, join as join43 } from "path";
 function fileType(mimeType) {
   if (mimeType.startsWith("image/"))
     return "image";
@@ -42427,8 +43191,8 @@ function recordFile(args) {
 }
 function insertLocalFile(args) {
   const id = randomUUID29();
-  mkdirSync33(PEER_FILES_DIR, { recursive: true });
-  const path = join42(PEER_FILES_DIR, `${id}-${safeFilename(args.filename)}`);
+  mkdirSync34(PEER_FILES_DIR, { recursive: true });
+  const path = join43(PEER_FILES_DIR, `${id}-${safeFilename(args.filename)}`);
   copyFileSync5(args.sourcePath, path);
   return recordFile({ id, path, sizeBytes: statSync21(path).size, ...args });
 }
@@ -42474,7 +43238,7 @@ function installPeerFileHooks() {
 var PEER_FILES_DIR;
 var init_peer_files = __esm(async () => {
   await init_src();
-  PEER_FILES_DIR = join42(DATA_DIR, "otium-peer-files");
+  PEER_FILES_DIR = join43(DATA_DIR, "otium-peer-files");
   db.exec(`
   CREATE TABLE IF NOT EXISTS otium_peer_files (
     id TEXT PRIMARY KEY,
@@ -42866,8 +43630,8 @@ var init_store2 = __esm(async () => {
 
 // ../../adapters/otium/src/workspace-scope.ts
 import { createHash as createHash13 } from "crypto";
-import { mkdirSync as mkdirSync34, readFileSync as readFileSync29, writeFileSync as writeFileSync25 } from "fs";
-import { dirname as dirname22, resolve as resolve25 } from "path";
+import { mkdirSync as mkdirSync35, readFileSync as readFileSync30, writeFileSync as writeFileSync26 } from "fs";
+import { dirname as dirname23, resolve as resolve25 } from "path";
 function surfaceScopeFor(central, workspaceId) {
   const digest = createHash13("sha256").update(`${central.trim().replace(/\/+$/, "")}
 ${workspaceId.trim()}`).digest("hex");
@@ -42878,7 +43642,7 @@ function scopeCachePath() {
 }
 function readCache() {
   try {
-    const parsed = JSON.parse(readFileSync29(scopeCachePath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync30(scopeCachePath(), "utf-8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
       return {};
     return parsed;
@@ -42886,43 +43650,43 @@ function readCache() {
     return {};
   }
 }
-function cachedSurfaceScope(join43) {
-  const record = readCache()[join43.cellId];
-  if (!record || record.central !== join43.central || !record.workspaceId)
+function cachedSurfaceScope(join44) {
+  const record = readCache()[join44.cellId];
+  if (!record || record.central !== join44.central || !record.workspaceId)
     return null;
   return surfaceScopeFor(record.central, record.workspaceId);
 }
-function cacheSurfaceScope(join43, workspaceId) {
-  const scope = surfaceScopeFor(join43.central, workspaceId);
+function cacheSurfaceScope(join44, workspaceId) {
+  const scope = surfaceScopeFor(join44.central, workspaceId);
   const path = scopeCachePath();
   try {
-    mkdirSync34(dirname22(path), { recursive: true });
+    mkdirSync35(dirname23(path), { recursive: true });
     const cache = readCache();
-    cache[join43.cellId] = { central: join43.central, workspaceId, scope };
-    writeFileSync25(path, `${JSON.stringify(cache, null, 2)}
+    cache[join44.cellId] = { central: join44.central, workspaceId, scope };
+    writeFileSync26(path, `${JSON.stringify(cache, null, 2)}
 `, { mode: 384 });
   } catch (err2) {
     logger.warn({ err: err2, path }, "otium: could not cache the workspace scope");
   }
   return scope;
 }
-async function resolveSurfaceScope(join43) {
-  const cached = cachedSurfaceScope(join43);
+async function resolveSurfaceScope(join44) {
+  const cached = cachedSurfaceScope(join44);
   if (cached)
     return cached;
   try {
-    const workspaceId = await peerWorkspaceIdForCell(join43.cellId);
+    const workspaceId = await peerWorkspaceIdForCell(join44.cellId);
     if (!workspaceId)
       return null;
-    return cacheSurfaceScope(join43, workspaceId);
+    return cacheSurfaceScope(join44, workspaceId);
   } catch (err2) {
     logger.warn({ err: err2 }, "otium: workspace scope unresolved (will retry on the next contact)");
     return null;
   }
 }
 function surfaceScopeForCell(cellId) {
-  const join43 = attachedOtiumCells().find((candidate) => candidate.cellId === cellId);
-  return join43 ? cachedSurfaceScope(join43) : null;
+  const join44 = attachedOtiumCells().find((candidate) => candidate.cellId === cellId);
+  return join44 ? cachedSurfaceScope(join44) : null;
 }
 function unscopedRoomsAddressable() {
   return attachedOtiumCells().length < 2;
@@ -43935,17 +44699,17 @@ import {
 import {
   chmodSync as chmodSync8,
   closeSync as closeSync6,
-  existsSync as existsSync38,
+  existsSync as existsSync39,
   fsyncSync as fsyncSync3,
   linkSync as linkSync2,
-  mkdirSync as mkdirSync35,
+  mkdirSync as mkdirSync36,
   openSync as openSync6,
-  readFileSync as readFileSync30,
-  renameSync as renameSync17,
+  readFileSync as readFileSync31,
+  renameSync as renameSync18,
   unlinkSync as unlinkSync24,
-  writeFileSync as writeFileSync26
+  writeFileSync as writeFileSync27
 } from "fs";
-import { dirname as dirname23, resolve as resolve26 } from "path";
+import { dirname as dirname24, resolve as resolve26 } from "path";
 function parseEnrollmentInvite(code) {
   let parsed;
   try {
@@ -43970,10 +44734,10 @@ function pendingEnrollmentPath() {
 }
 function isEnrollmentPending(invite) {
   const path = pendingEnrollmentPath();
-  if (!existsSync38(path))
+  if (!existsSync39(path))
     return false;
   try {
-    const saved = JSON.parse(readFileSync30(path, "utf8"));
+    const saved = JSON.parse(readFileSync31(path, "utf8"));
     return saved.central === invite.central && saved.token === invite.token;
   } catch {
     return false;
@@ -43981,8 +44745,8 @@ function isEnrollmentPending(invite) {
 }
 function loadOrCreatePending(invite, nodeName) {
   const path = pendingEnrollmentPath();
-  if (existsSync38(path)) {
-    const saved = JSON.parse(readFileSync30(path, "utf8"));
+  if (existsSync39(path)) {
+    const saved = JSON.parse(readFileSync31(path, "utf8"));
     if (saved.central === invite.central && saved.token === invite.token)
       return saved;
     throw new Error(`another Otium enrollment is pending at ${path}`);
@@ -43995,12 +44759,12 @@ function loadOrCreatePending(invite, nodeName) {
     publicKey: pair.publicKey.export({ format: "der", type: "spki" }).toString("base64url"),
     ...nodeName ? { nodeName } : {}
   };
-  mkdirSync35(dirname23(path), { recursive: true });
-  const temporaryPath = resolve26(dirname23(path), `.otium-enrollment-pending.json.${process.pid}.${randomUUID31()}.tmp`);
+  mkdirSync36(dirname24(path), { recursive: true });
+  const temporaryPath = resolve26(dirname24(path), `.otium-enrollment-pending.json.${process.pid}.${randomUUID31()}.tmp`);
   let fd;
   try {
     fd = openSync6(temporaryPath, "wx", 384);
-    writeFileSync26(fd, `${JSON.stringify(pending2, null, 2)}
+    writeFileSync27(fd, `${JSON.stringify(pending2, null, 2)}
 `, "utf8");
     fsyncSync3(fd);
     closeSync6(fd);
@@ -44008,7 +44772,7 @@ function loadOrCreatePending(invite, nodeName) {
     linkSync2(temporaryPath, path);
     unlinkSync24(temporaryPath);
     chmodSync8(path, 384);
-    const directoryFd = openSync6(dirname23(path), "r");
+    const directoryFd = openSync6(dirname24(path), "r");
     try {
       fsyncSync3(directoryFd);
     } finally {
@@ -44017,10 +44781,10 @@ function loadOrCreatePending(invite, nodeName) {
   } catch (error2) {
     if (fd !== undefined)
       closeSync6(fd);
-    if (existsSync38(temporaryPath))
+    if (existsSync39(temporaryPath))
       unlinkSync24(temporaryPath);
-    if (error2.code === "EEXIST" && existsSync38(path)) {
-      const saved = JSON.parse(readFileSync30(path, "utf8"));
+    if (error2.code === "EEXIST" && existsSync39(path)) {
+      const saved = JSON.parse(readFileSync31(path, "utf8"));
       if (saved.central === invite.central && saved.token === invite.token)
         return saved;
     }
@@ -44030,17 +44794,17 @@ function loadOrCreatePending(invite, nodeName) {
 }
 function replacePendingEnrollment(pending2) {
   const path = pendingEnrollmentPath();
-  const directory = dirname23(path);
+  const directory = dirname24(path);
   const temporaryPath = resolve26(directory, `.otium-enrollment-pending.json.${process.pid}.${randomUUID31()}.tmp`);
   let fd;
   try {
     fd = openSync6(temporaryPath, "wx", 384);
-    writeFileSync26(fd, `${JSON.stringify(pending2, null, 2)}
+    writeFileSync27(fd, `${JSON.stringify(pending2, null, 2)}
 `, "utf8");
     fsyncSync3(fd);
     closeSync6(fd);
     fd = undefined;
-    renameSync17(temporaryPath, path);
+    renameSync18(temporaryPath, path);
     const directoryFd = openSync6(directory, "r");
     try {
       fsyncSync3(directoryFd);
@@ -44050,18 +44814,18 @@ function replacePendingEnrollment(pending2) {
   } catch (error2) {
     if (fd !== undefined)
       closeSync6(fd);
-    if (existsSync38(temporaryPath))
+    if (existsSync39(temporaryPath))
       unlinkSync24(temporaryPath);
     throw error2;
   }
 }
-function recordClaimedCredential(pending2, join43) {
+function recordClaimedCredential(pending2, join44) {
   withJoinCredentialLock(() => {
-    const current3 = JSON.parse(readFileSync30(pendingEnrollmentPath(), "utf8"));
+    const current3 = JSON.parse(readFileSync31(pendingEnrollmentPath(), "utf8"));
     if (current3.central !== pending2.central || current3.token !== pending2.token || current3.idempotencyKey !== pending2.idempotencyKey || current3.publicKey !== pending2.publicKey) {
       throw new Error("pending Otium enrollment changed while its claim was in flight");
     }
-    const claimed = { digest: joinCredentialDigest(join43), cellId: join43.cellId };
+    const claimed = { digest: joinCredentialDigest(join44), cellId: join44.cellId };
     if (current3.claimed && (current3.claimed.digest !== claimed.digest || current3.claimed.cellId !== claimed.cellId)) {
       throw new Error("central returned different credentials for an idempotent enrollment claim");
     }
@@ -44119,36 +44883,36 @@ async function claimEnrollment(invite, nodeName) {
   const secret = openCredential(credential, pending2.privateKey);
   if (!secret.startsWith("rcs_"))
     throw new Error("central returned an invalid runtime credential");
-  const join43 = {
+  const join44 = {
     v: 2,
     central: invite.central,
     relay: String(response.relayUrl),
     cellId: String(response.cell?.id),
     secret
   };
-  if (!join43.relay || !join43.cellId || join43.cellId === "undefined") {
+  if (!join44.relay || !join44.cellId || join44.cellId === "undefined") {
     throw new Error("central returned an incomplete enrollment response");
   }
-  assertSecureRelayUrl(join43.relay);
-  recordClaimedCredential(pending2, join43);
-  return join43;
+  assertSecureRelayUrl(join44.relay);
+  recordClaimedCredential(pending2, join44);
+  return join44;
 }
-function commitEnrollment(join43, options = {}) {
+function commitEnrollment(join44, options = {}) {
   return withJoinCredentialLock(() => {
     const pendingPath = pendingEnrollmentPath();
-    const pending2 = existsSync38(pendingPath) ? JSON.parse(readFileSync30(pendingPath, "utf8")) : null;
-    const digest = joinCredentialDigest(join43);
-    if (pending2 && (!pending2.claimed || pending2.claimed.digest !== digest || pending2.claimed.cellId !== join43.cellId)) {
+    const pending2 = existsSync39(pendingPath) ? JSON.parse(readFileSync31(pendingPath, "utf8")) : null;
+    const digest = joinCredentialDigest(join44);
+    if (pending2 && (!pending2.claimed || pending2.claimed.digest !== digest || pending2.claimed.cellId !== join44.cellId)) {
       throw new Error(`pending Otium enrollment at ${pendingPath} does not match these credentials`);
     }
-    const path = saveJoinWhileLocked(join43, options);
-    if (!isJoinPersisted(join43)) {
+    const path = saveJoinWhileLocked(join44, options);
+    if (!isJoinPersisted(join44)) {
       throw new Error("Otium join credentials were not durably persisted");
     }
     if (!pending2)
       return path;
     unlinkSync24(pendingPath);
-    const directoryFd = openSync6(dirname23(pendingPath), "r");
+    const directoryFd = openSync6(dirname24(pendingPath), "r");
     try {
       fsyncSync3(directoryFd);
     } finally {
@@ -44729,24 +45493,24 @@ function refreshDefaultSurfaceScope() {
   setSurfaceScopeRequired(scopes.length > 1);
 }
 function startOtiumNodeRuntime(options) {
-  const { join: join43 } = options;
-  attachOtiumCentralCell(join43);
+  const { join: join44 } = options;
+  attachOtiumCentralCell(join44);
   const releaseGlobals = acquireGlobalOtiumServices();
   let stopped = false;
-  logger.info({ central: join43.central, cellId: join43.cellId }, "otium: worker mode enabled");
-  mountedScopes.set(join43.cellId, cachedSurfaceScope(join43));
+  logger.info({ central: join44.central, cellId: join44.cellId }, "otium: worker mode enabled");
+  mountedScopes.set(join44.cellId, cachedSurfaceScope(join44));
   refreshDefaultSurfaceScope();
-  selfPeerNodeForCell(join43.cellId).then((self) => {
+  selfPeerNodeForCell(join44.cellId).then((self) => {
     if (self) {
       logger.info({ nodeName: self.nodeName, baseUrl: self.baseUrl }, "otium: attached to workspace");
     }
   }).catch((err2) => {
     logger.warn({ err: err2 }, "otium: self check against central failed (will retry per request)");
   });
-  resolveSurfaceScope(join43).then((scope) => {
+  resolveSurfaceScope(join44).then((scope) => {
     if (!scope || stopped)
       return;
-    mountedScopes.set(join43.cellId, scope);
+    mountedScopes.set(join44.cellId, scope);
     refreshDefaultSurfaceScope();
     if (mountedScopes.size === 1)
       stampUnscopedOtiumTopics(scope);
@@ -44755,14 +45519,14 @@ function startOtiumNodeRuntime(options) {
   });
   return {
     name: "otium",
-    join: join43,
+    join: join44,
     stop: () => {
       if (stopped)
         return;
       stopped = true;
-      mountedScopes.delete(join43.cellId);
+      mountedScopes.delete(join44.cellId);
       refreshDefaultSurfaceScope();
-      detachOtiumCentralCell(join43.cellId);
+      detachOtiumCentralCell(join44.cellId);
       releaseGlobals();
     }
   };
@@ -44857,14 +45621,14 @@ __export(exports_node_runtime, {
 function sameCredentials(left, right) {
   return left.central === right.central && left.relay === right.relay && left.secret === right.secret;
 }
-function attachOtiumWorkspace(join43) {
-  const current3 = mounted.get(join43.cellId);
+function attachOtiumWorkspace(join44) {
+  const current3 = mounted.get(join44.cellId);
   if (current3) {
-    if (sameCredentials(current3.join, join43))
+    if (sameCredentials(current3.join, join44))
       return false;
-    detachOtiumWorkspace(join43.cellId);
+    detachOtiumWorkspace(join44.cellId);
   }
-  mounted.set(join43.cellId, startOtiumNodeRuntime({ join: join43 }));
+  mounted.set(join44.cellId, startOtiumNodeRuntime({ join: join44 }));
   return true;
 }
 function detachOtiumWorkspace(cellId) {
@@ -44879,7 +45643,7 @@ function mountedOtiumWorkspaces() {
   return [...mounted.values()].map((runtime2) => runtime2.join);
 }
 function reconcileOtiumWorkspaces(joins = loadJoins()) {
-  const wanted = new Map(joins.map((join43) => [join43.cellId, join43]));
+  const wanted = new Map(joins.map((join44) => [join44.cellId, join44]));
   const detached = [];
   for (const cellId of [...mounted.keys()]) {
     if (wanted.has(cellId))
@@ -44888,8 +45652,8 @@ function reconcileOtiumWorkspaces(joins = loadJoins()) {
     detached.push(cellId);
   }
   const attached = [];
-  for (const [cellId, join43] of wanted) {
-    if (attachOtiumWorkspace(join43))
+  for (const [cellId, join44] of wanted) {
+    if (attachOtiumWorkspace(join44))
       attached.push(cellId);
   }
   if (attached.length > 0 || detached.length > 0) {
@@ -44912,9 +45676,9 @@ async function handleOtiumAdapterControlRequest(req) {
     if (req.method === "GET") {
       return Response.json({
         ok: true,
-        workspaces: mountedOtiumWorkspaces().map((join43) => ({
-          cellId: join43.cellId,
-          central: join43.central
+        workspaces: mountedOtiumWorkspaces().map((join44) => ({
+          cellId: join44.cellId,
+          central: join44.central
         }))
       });
     }
@@ -44935,8 +45699,8 @@ function mountConfiguredOtiumNodeRuntime() {
   const joins = loadJoins();
   if (joins.length === 0)
     return null;
-  for (const join43 of joins)
-    attachOtiumWorkspace(join43);
+  for (const join44 of joins)
+    attachOtiumWorkspace(join44);
   registerNodeRequestHandler("otium-adapter-control", handleOtiumAdapterControlRequest);
   let stopped = false;
   return {
@@ -45027,11 +45791,11 @@ async function joinCommand(args) {
     process.exitCode = 1;
     return;
   }
-  let join43;
+  let join44;
   let productionEnrollment = false;
   if (args.includes("--legacy")) {
     try {
-      join43 = parseInviteCode(code);
+      join44 = parseInviteCode(code);
     } catch (err2) {
       console.error(`invalid legacy invite code: ${err2 instanceof Error ? err2.message : err2}`);
       process.exitCode = 1;
@@ -45058,7 +45822,7 @@ async function joinCommand(args) {
           return;
         }
       }
-      join43 = await claimEnrollment(invite, nodeName);
+      join44 = await claimEnrollment(invite, nodeName);
       productionEnrollment = true;
     } catch (err2) {
       console.error(`enrollment failed: ${err2 instanceof Error ? err2.message : err2}`);
@@ -45069,16 +45833,16 @@ async function joinCommand(args) {
   let path;
   try {
     const saveOptions = { replaceExisting: args.includes("--replace") };
-    path = productionEnrollment ? commitEnrollment(join43, saveOptions) : saveJoin(join43, saveOptions);
+    path = productionEnrollment ? commitEnrollment(join44, saveOptions) : saveJoin(join44, saveOptions);
   } catch (err2) {
     console.error(`could not save join credentials: ${err2 instanceof Error ? err2.message : err2}`);
     process.exitCode = 1;
     return;
   }
   console.log(`otium join credentials saved to ${path}`);
-  console.log(`  central: ${join43.central}`);
-  console.log(`  cellId:  ${join43.cellId}`);
-  configureOtiumCentral(join43);
+  console.log(`  central: ${join44.central}`);
+  console.log(`  cellId:  ${join44.cellId}`);
+  configureOtiumCentral(join44);
   try {
     const self = await selfPeerNode();
     if (self) {
@@ -45144,8 +45908,8 @@ async function proxyOtiumPeerRequest(req, dependencies = {}) {
   }
 }
 async function runOtiumSidecar(options) {
-  const join43 = loadJoin();
-  if (!join43) {
+  const join44 = loadJoin();
+  if (!join44) {
     throw new Error("not joined to an Otium workspace \u2014 run `negotium otium join <code>` first");
   }
   const initialNode = await inspectNodeDaemon();
@@ -45177,10 +45941,10 @@ async function runOtiumSidecar(options) {
     lease.stop();
     throw error2;
   }
-  const selectedRelay = options.relayUrl?.trim() || join43.relay || process.env.OTIUM_RELAY_URL?.trim();
+  const selectedRelay = options.relayUrl?.trim() || join44.relay || process.env.OTIUM_RELAY_URL?.trim();
   const tunnel = selectedRelay ? new TunnelClient({
     relayUrl: selectedRelay,
-    token: join43.secret,
+    token: join44.secret,
     targetOrigin: `http://127.0.0.1:${server.port}`,
     nodeVersion: `negotium@${NEGOTIUM_VERSION}`,
     logger
@@ -45326,9 +46090,9 @@ async function runOtiumCli(args = process.argv.slice(2)) {
       if (joins.length === 0)
         throw new Error("not joined to an Otium workspace");
       if (!targetCellId && joins.length > 1) {
-        throw new Error(`this node is joined to ${joins.length} workspaces; name one to leave: ${joins.map((join43) => join43.cellId).join(", ")}`);
+        throw new Error(`this node is joined to ${joins.length} workspaces; name one to leave: ${joins.map((join44) => join44.cellId).join(", ")}`);
       }
-      if (targetCellId && !joins.some((join43) => join43.cellId === targetCellId)) {
+      if (targetCellId && !joins.some((join44) => join44.cellId === targetCellId)) {
         throw new Error(`not joined as ${targetCellId}`);
       }
       removeJoin2(targetCellId);
@@ -46066,4 +46830,4 @@ switch (command) {
   }
 }
 
-//# debugId=AB4C2D285525003C64756E2164756E21
+//# debugId=65E123B94EDD2F5C64756E2164756E21