negotium 0.3.0 → 0.3.2

package/dist/mcp-factories.js

@@ -313,7 +313,7 @@ function resolveDefaultModel(agent, registryDefaultModel) {
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.19", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.5", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.21", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.5", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -343,6 +343,7 @@ var init_config = __esm(() => {
   TSCONFIG_PATH = resolve(PROJECT_ROOT, "tsconfig.json");
   SESSION_COMM_SERVER = resolve(PROJECT_ROOT, "src/mcp/session-comm/server.ts");
   TASK_SERVER = resolve(PROJECT_ROOT, "src/mcp/task-server.ts");
+  DECISION_SERVER = resolve(PROJECT_ROOT, "src/mcp/decision-server.ts");
   BROWSER_MCP_SSE_PROXY_SERVER = resolve(PROJECT_ROOT, "src/mcp/browser-sse-proxy-server.ts");
   CANONICAL_MCP_PROXY_SERVER = resolve(PROJECT_ROOT, "src/mcp/canonical-proxy-server.ts");
   WIKI_SERVER = resolve(PROJECT_ROOT, "src/mcp/wiki-server.ts");
@@ -1016,7 +1017,7 @@ var init_claude_registry = __esm(() => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.3.0";
+var NEGOTIUM_VERSION = "0.3.2";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -1707,6 +1708,7 @@ var init_mcp_catalog_policy = __esm(() => {
     runtime: { scopes: ["forum", "manager", "fork", "cron"], forumRequired: true },
     "token-stats": { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
     task: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+    decision: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
     "session-comm": { scopes: ["forum", "fork", "manager"], forumRequired: true },
     wiki: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
     skills: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
@@ -1930,7 +1932,7 @@ function getForumMcpServers(opts) {
     peerBridge
   } = opts;
   const filter = (name) => {
-    if (silent && name === "task")
+    if (silent && (name === "task" || name === "decision"))
       return false;
     if (enabled === null)
       return true;
@@ -2148,6 +2150,34 @@ var init_mcp_config = __esm(() => {
         return buildBuiltinMcpServer("task", ctx, () => buildStdioMcpServer(agent, TASK_SERVER, args));
       }
     },
+    decision: {
+      ...commonRuntimeMcpPolicy("decision"),
+      build(ctx) {
+        const { userId, session, topicId, queryId, agent, model, peerBridge } = ctx;
+        if (peerBridge) {
+          if (!topicId || !queryId)
+            return null;
+          const env = canonicalMcpBridgeEnv({
+            surface: "decision",
+            userId,
+            topicId,
+            queryId,
+            peerBridge
+          });
+          return env ? buildStdioMcpServer(agent, CANONICAL_MCP_PROXY_SERVER, ["--surface=decision"], env) : null;
+        }
+        const args = [
+          `--user-id=${userId}`,
+          `--topic=${session}`,
+          `--agent=${agent ?? FALLBACK_AGENT}`
+        ];
+        if (topicId)
+          args.push(`--topic-id=${topicId}`);
+        if (model)
+          args.push(`--model=${model}`);
+        return buildBuiltinMcpServer("decision", ctx, () => buildStdioMcpServer(agent, DECISION_SERVER, args));
+      }
+    },
     "session-comm": {
       ...commonRuntimeMcpPolicy("session-comm"),
       build(ctx) {
@@ -3549,6 +3579,21 @@ function mcpError(text) {
 }
 var init_mcp_helpers = () => {};
 
+// ../../packages/core/src/security/sanitize.ts
+function sanitizeTopicName(name, lowercase = false) {
+  const safe = name.replace(/[^a-zA-Z0-9\uAC00-\uD7A3_-]/g, "_") || "_";
+  return lowercase ? safe.toLowerCase() : safe;
+}
+function sanitizeFileName(name) {
+  const safe = name.replace(/[^a-zA-Z0-9._-]/g, "_") || "_";
+  if (safe === "." || safe === "..")
+    return "_";
+  return safe;
+}
+function sanitizeId(id) {
+  return id.replace(/[^a-zA-Z0-9_-]/g, "_") || "_";
+}
+
 // ../../packages/core/src/agents/mcp-tools/common.ts
 function textResult(text) {
   return mcpOk(text);
@@ -5227,7 +5272,7 @@ var init_registry = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/fork.ts
-import { existsSync as existsSync11, unlinkSync as unlinkSync9 } from "fs";
+import { existsSync as existsSync12, unlinkSync as unlinkSync9 } from "fs";
 function createAgentForkHelpers(host) {
   return {
     async forkAgentSession(options) {
@@ -5264,7 +5309,7 @@ var init_fork = __esm(async () => {
   init_logger();
   defaultForkHelpers = createAgentForkHelpers({
     forkSession: (agent, options) => getRegistryOperations(agent).forkSession(options),
-    exists: existsSync11,
+    exists: existsSync12,
     unlink: unlinkSync9,
     warn: (details, message) => logger.warn(details, message)
   });
@@ -5935,7 +5980,7 @@ import { randomBytes as randomBytes5, timingSafeEqual as timingSafeEqual2 } from
 import { chmodSync as chmodSync5 } from "fs";
 import { createServer as createServer2 } from "net";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 function deepMapStrings(value2, transform) {
   if (typeof value2 === "string")
     return transform(value2);
@@ -6022,7 +6067,7 @@ function authorized(actual, expected) {
 }
 async function createBrowserVaultBroker(userId) {
   const token = randomBytes5(32).toString("hex");
-  const socketPath = join12(process.platform === "win32" ? tmpdir2() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes5(8).toString("hex")}.sock`);
+  const socketPath = join13(process.platform === "win32" ? tmpdir2() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes5(8).toString("hex")}.sock`);
   const retainedForms = new Map;
   const leases = new Map;
   const sockets = new Set;
@@ -6159,21 +6204,6 @@ var init_vault_broker = __esm(async () => {
   };
 });
 
-// ../../packages/core/src/security/sanitize.ts
-function sanitizeTopicName(name, lowercase = false) {
-  const safe = name.replace(/[^a-zA-Z0-9\uAC00-\uD7A3_-]/g, "_") || "_";
-  return lowercase ? safe.toLowerCase() : safe;
-}
-function sanitizeFileName(name) {
-  const safe = name.replace(/[^a-zA-Z0-9._-]/g, "_") || "_";
-  if (safe === "." || safe === "..")
-    return "_";
-  return safe;
-}
-function sanitizeId(id) {
-  return id.replace(/[^a-zA-Z0-9_-]/g, "_") || "_";
-}
-
 // ../../packages/core/src/storage/browser-profiles.ts
 function normalizeBrowserProfileName(name) {
   const value2 = name.trim().toLowerCase();
@@ -6239,21 +6269,21 @@ import { execFileSync as execFileSync4, spawn as spawn6 } from "child_process";
 import { createHash as createHash3, randomBytes as randomBytes6, timingSafeEqual as timingSafeEqual3 } from "crypto";
 import {
   cpSync,
-  existsSync as existsSync12,
-  mkdirSync as mkdirSync9,
-  readFileSync as readFileSync10,
+  existsSync as existsSync13,
+  mkdirSync as mkdirSync10,
+  readFileSync as readFileSync11,
   rmSync as rmSync2,
   unlinkSync as unlinkSync11,
-  writeFileSync as writeFileSync7
+  writeFileSync as writeFileSync8
 } from "fs";
-import { dirname as dirname8, join as join13, resolve as resolve10 } from "path";
+import { dirname as dirname9, join as join14, resolve as resolve10 } from "path";
 function removeDefaultProfileDataDir(userDataDir) {
   const root = resolve10(BROWSER_PROFILES_DIR);
   const target = resolve10(userDataDir);
-  if (dirname8(target) !== root) {
+  if (dirname9(target) !== root) {
     throw new Error(`Refusing to delete browser profile outside managed root: ${target}`);
   }
-  const existed = existsSync12(target);
+  const existed = existsSync13(target);
   rmSync2(target, { recursive: true, force: true });
   return existed;
 }
@@ -6335,15 +6365,15 @@ function portFileName(instanceKey) {
 }
 function writePortFile(instanceKey, port) {
   try {
-    mkdirSync9(managerHost.portsDir, { recursive: true });
-    writeFileSync7(join13(managerHost.portsDir, portFileName(instanceKey)), String(port));
+    mkdirSync10(managerHost.portsDir, { recursive: true });
+    writeFileSync8(join14(managerHost.portsDir, portFileName(instanceKey)), String(port));
   } catch (e) {
     logger.warn({ err: e, instanceKey, port }, "Failed to save playwright port file");
   }
 }
 function deletePortFile(instanceKey) {
   try {
-    unlinkSync11(join13(managerHost.portsDir, portFileName(instanceKey)));
+    unlinkSync11(join14(managerHost.portsDir, portFileName(instanceKey)));
   } catch (e) {
     if (e.code === "ENOENT")
       return;
@@ -6544,7 +6574,7 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
   }
   const userDataDir = resolveUserDataDir(instanceKey);
   const port = reservedPort ?? await allocatePort();
-  mkdirSync9(userDataDir, { recursive: true });
+  mkdirSync10(userDataDir, { recursive: true });
   const mcpArgs = [
     "--port",
     String(port),
@@ -6828,14 +6858,14 @@ async function cloneProfileForChild(opts) {
       killInstance(dstKey);
       await delay(500);
     }
-    if (!existsSync12(srcDir)) {
+    if (!existsSync13(srcDir)) {
       return { copied: false, srcDir, dstDir, reason: "src-missing" };
     }
     try {
-      if (existsSync12(dstDir)) {
+      if (existsSync13(dstDir)) {
         rmSync2(dstDir, { recursive: true, force: true });
       }
-      mkdirSync9(dirname8(dstDir), { recursive: true });
+      mkdirSync10(dirname9(dstDir), { recursive: true });
       if (process.platform === "darwin") {
         try {
           execFileSync4("cp", ["-cR", srcDir, dstDir], { stdio: "pipe" });
@@ -7397,30 +7427,30 @@ var init_api_topic_config = __esm(async () => {
 
 // ../../packages/core/src/storage/conversations.ts
 import {
-  existsSync as existsSync13,
-  mkdirSync as mkdirSync10,
-  readFileSync as readFileSync11,
-  renameSync as renameSync5,
+  existsSync as existsSync14,
+  mkdirSync as mkdirSync11,
+  readFileSync as readFileSync12,
+  renameSync as renameSync6,
   unlinkSync as unlinkSync12,
-  writeFileSync as writeFileSync8
+  writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname9, join as join14 } from "path";
+import { dirname as dirname10, join as join15 } from "path";
 function conversationDir(_userId) {
-  return join14(resolveStorageDataDir(), "conversations");
+  return join15(resolveStorageDataDir(), "conversations");
 }
 function topicFilename(topicName) {
   const t = sanitizeTopicName(topicName, true);
   return `${t}.jsonl`;
 }
 function getConversationPath(userId, topicName) {
-  return join14(conversationDir(userId), topicFilename(topicName));
+  return join15(conversationDir(userId), topicFilename(topicName));
 }
 function getActiveConversationPath(userId, topicName) {
   const rawPath = getConversationPath(userId, topicName);
   return rawPath.endsWith(".jsonl") ? `${rawPath.slice(0, -".jsonl".length)}.active.jsonl` : `${rawPath}.active`;
 }
 function hasActiveConversation(userId, topicName) {
-  return existsSync13(getActiveConversationPath(userId, topicName));
+  return existsSync14(getActiveConversationPath(userId, topicName));
 }
 function appendConversationEvent(userId, topicName, agent, event) {
   try {
@@ -7439,10 +7469,10 @@ function appendConversationEventStrict(userId, topicName, agent, event) {
     event
   };
   const line = JSON.stringify(entry);
-  mkdirSync10(dirname9(path), { recursive: true });
+  mkdirSync11(dirname10(path), { recursive: true });
   appendJsonlLine(path, line);
   const activePath = getActiveConversationPath(userId, topicName);
-  if (existsSync13(activePath)) {
+  if (existsSync14(activePath)) {
     try {
       appendJsonlLine(activePath, line);
     } catch (cause) {
@@ -7452,11 +7482,11 @@ function appendConversationEventStrict(userId, topicName, agent, event) {
 }
 function readConversationPath(path) {
   const out = [];
-  if (!existsSync13(path))
+  if (!existsSync14(path))
     return out;
   let raw;
   try {
-    raw = readFileSync11(path, "utf8");
+    raw = readFileSync12(path, "utf8");
   } catch (err) {
     logger.warn({ err, path }, "readConversation: read failed");
     return out;
@@ -7475,7 +7505,7 @@ function readConversationPath(path) {
 }
 function readConversation(userId, topicName) {
   const activePath = getActiveConversationPath(userId, topicName);
-  return readConversationPath(existsSync13(activePath) ? activePath : getConversationPath(userId, topicName));
+  return readConversationPath(existsSync14(activePath) ? activePath : getConversationPath(userId, topicName));
 }
 function readRawConversation(userId, topicName) {
   return readConversationPath(getConversationPath(userId, topicName));
@@ -7488,12 +7518,12 @@ function replaceRawConversationStrict(userId, topicName, entries) {
 }
 function replaceConversationPathStrict(path, entries) {
   const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
-  mkdirSync10(dirname9(path), { recursive: true });
+  mkdirSync11(dirname10(path), { recursive: true });
   try {
-    writeFileSync8(tempPath, entries.length > 0 ? `${entries.map((entry) => JSON.stringify(entry)).join(`
+    writeFileSync9(tempPath, entries.length > 0 ? `${entries.map((entry) => JSON.stringify(entry)).join(`
 `)}
 ` : "", { flag: "wx" });
-    renameSync5(tempPath, path);
+    renameSync6(tempPath, path);
   } catch (error) {
     try {
       unlinkSync12(tempPath);
@@ -7635,8 +7665,8 @@ RULES:
 - Keep the entire summary under 1500 words.`, CHARS_PER_TEXT_TOKEN = 3.5, CHARS_PER_CJK_TOKEN = 0.9;
 
 // ../../packages/core/src/storage/tasks.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync12, renameSync as renameSync6, statSync as statSync4, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname10, join as join15 } from "path";
+import { existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync13, renameSync as renameSync7, statSync as statSync4, writeFileSync as writeFileSync10 } from "fs";
+import { dirname as dirname11, join as join16 } from "path";
 function safeTaskScopeKey(scopeKey) {
   const safe = sanitizeFileName(scopeKey);
   if (!safe || safe === "." || safe === "..") {
@@ -7648,14 +7678,14 @@ function taskScopeKey(opts) {
   return opts.topicId?.trim() || opts.session || "default";
 }
 function getTaskFilePath(userId, scopeKey) {
-  return join15(resolveStorageDataDir(), "tasks", `${safeTaskScopeKey(scopeKey)}.json`);
+  return join16(resolveStorageDataDir(), "tasks", `${safeTaskScopeKey(scopeKey)}.json`);
 }
 function readTasks(userId, scopeKey) {
   const path = getTaskFilePath(userId, scopeKey);
-  if (!existsSync14(path))
+  if (!existsSync15(path))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync12(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync13(path, "utf-8"));
     return Array.isArray(parsed?.tasks) ? parsed.tasks : [];
   } catch (e) {
     logger.warn({ err: e, path }, "tasks: failed to read task store");
@@ -7664,11 +7694,11 @@ function readTasks(userId, scopeKey) {
 }
 function writeTasks(userId, scopeKey, tasks) {
   const path = getTaskFilePath(userId, scopeKey);
-  mkdirSync11(dirname10(path), { recursive: true });
+  mkdirSync12(dirname11(path), { recursive: true });
   const payload = { version: 1, tasks };
   const tmp = `${path}.${process.pid}.tmp`;
-  writeFileSync9(tmp, JSON.stringify(payload, null, 2), "utf-8");
-  renameSync6(tmp, path);
+  writeFileSync10(tmp, JSON.stringify(payload, null, 2), "utf-8");
+  renameSync7(tmp, path);
 }
 function taskFileMtimeNs(userId, scopeKey) {
   try {
@@ -7910,7 +7940,7 @@ __export(exports_claude_provider, {
   buildClaudeDisallowedTools: () => buildClaudeDisallowedTools
 });
 import { spawn as spawn7 } from "child_process";
-import { existsSync as existsSync15, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync14 } from "fs";
 import { query } from "@anthropic-ai/claude-agent-sdk";
 function claudeBuiltInTools(opts) {
   return opts.toolPolicy ? [] : undefined;
@@ -7963,7 +7993,7 @@ function buildClaudePrompt(opts) {
         source: {
           type: "base64",
           media_type: attachment.mimeType,
-          data: readFileSync13(attachment.path).toString("base64")
+          data: readFileSync14(attachment.path).toString("base64")
         }
       });
     } catch (err) {
@@ -8091,7 +8121,7 @@ function isAbortError(err) {
 }
 async function* claudeProvider(opts) {
   const claudeExecutable = hostedClaudeCodeExecutablePath();
-  if (claudeExecutable && !existsSync15(claudeExecutable)) {
+  if (claudeExecutable && !existsSync16(claudeExecutable)) {
     yield {
       type: "error",
       content: `Claude CLI not found at ${claudeExecutable}. Install Claude Code or configure the executable path.`
@@ -8611,7 +8641,7 @@ var init_codex_tree_kill = __esm(() => {
 });
 
 // ../../packages/core/src/agents/tool-format.ts
-import { readFileSync as readFileSync14, statSync as statSync5 } from "fs";
+import { readFileSync as readFileSync15, statSync as statSync5 } from "fs";
 import { isAbsolute as isAbsolute2, resolve as resolve11 } from "path";
 import { diffLines as computeLineDiff } from "diff";
 function summarizeDisplayText(value2) {
@@ -8940,7 +8970,7 @@ function sourceStartLine(input, before, after, cwd) {
   try {
     if (statSync5(path).size > TOOL_DIFF_SOURCE_MAX_BYTES)
       return 1;
-    const source = readFileSync14(path, "utf8").replace(/\r\n?/g, `
+    const source = readFileSync15(path, "utf8").replace(/\r\n?/g, `
 `);
     for (const candidate of [before, after].filter(Boolean)) {
       const index = source.indexOf(candidate);
@@ -9134,9 +9164,9 @@ __export(exports_codex_provider, {
   codexProvider: () => codexProvider
 });
 import { execFileSync as execFileSync6 } from "child_process";
-import { existsSync as existsSync16, readFileSync as readFileSync15, realpathSync as realpathSync4, statSync as statSync6 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync16, realpathSync as realpathSync4, statSync as statSync6 } from "fs";
 import { homedir as homedir6 } from "os";
-import { dirname as dirname11, isAbsolute as isAbsolute3, join as join16, relative as relative2, resolve as resolve12 } from "path";
+import { dirname as dirname12, isAbsolute as isAbsolute3, join as join17, relative as relative2, resolve as resolve12 } from "path";
 import { Codex } from "@openai/codex-sdk";
 function sameCodexUsage(usage, total) {
   return usage.input_tokens === total.inputTokens && usage.output_tokens === total.outputTokens && (usage.cached_input_tokens ?? 0) === total.cachedInputTokens && (usage.cache_write_input_tokens ?? 0) === total.cacheWriteInputTokens;
@@ -9164,12 +9194,12 @@ function codexMcpServerName(name) {
   return CODEX_MCP_SERVER_NAME_OVERRIDES[name] ?? name;
 }
 function globalCodexMcpServerNames(authFilePath) {
-  const configPath = join16(dirname11(authFilePath), "config.toml");
-  if (!existsSync16(configPath))
+  const configPath = join17(dirname12(authFilePath), "config.toml");
+  if (!existsSync17(configPath))
     return [];
   try {
     const names = new Set;
-    for (const line of readFileSync15(configPath, "utf8").split(`
+    for (const line of readFileSync16(configPath, "utf8").split(`
 `)) {
       const match = line.match(/^\s*\[\s*mcp_servers\.((?:"(?:\\.|[^"])*")|(?:'[^']*')|[^.\]\s]+)(?:[.\]])/);
       const raw = match?.[1];
@@ -9266,13 +9296,13 @@ function canonicalPath(path) {
   }
 }
 function textFile(path, maxBytes = CODEX_DIFF_FILE_LIMIT) {
-  if (!existsSync16(path))
+  if (!existsSync17(path))
     return null;
   try {
     const byteLimit = Math.min(CODEX_DIFF_FILE_LIMIT, Math.max(0, maxBytes));
     if (statSync6(path).size > byteLimit)
       return;
-    const content = readFileSync15(path);
+    const content = readFileSync16(path);
     if (content.byteLength > byteLimit || content.includes(0))
       return;
     return content.toString("utf8");
@@ -9478,7 +9508,7 @@ async function* codexProvider(opts) {
   const filePreviews = new CodexFilePreviewTracker(opts.cwd);
   const consumedPatchCallIds = new Set(opts.sessionId ? readCodexPatchCallIds(opts.sessionId) : []);
   const codexAuthPath = hostedCodexAuthFilePath();
-  if (!existsSync16(codexAuthPath)) {
+  if (!existsSync17(codexAuthPath)) {
     yield {
       type: "error",
       content: `Codex auth file not found at ${codexAuthPath}. Run \`codex login\` to authenticate.`
@@ -9517,12 +9547,12 @@ async function* codexProvider(opts) {
     model: opts.model ?? "(sdk default)",
     effort: opts.effort ?? "(off)",
     cwd: opts.cwd,
-    cwdExists: existsSync16(opts.cwd),
+    cwdExists: existsSync17(opts.cwd),
     resume: Boolean(opts.sessionId),
     mcpServerCount: Object.keys(codexMcpServers).length
   }, "codexProvider: starting turn");
   const hostedCodexHome = hostedCodexHomePath();
-  const inheritedCodexHome = process.env.CODEX_HOME || join16(homedir6(), ".codex");
+  const inheritedCodexHome = process.env.CODEX_HOME || join17(homedir6(), ".codex");
   const codexEnvironment = scopedBrowserCapability || resolve12(hostedCodexHome) !== resolve12(inheritedCodexHome) ? {
     ...Object.fromEntries(Object.entries(process.env).filter((entry) => typeof entry[1] === "string")),
     CODEX_HOME: hostedCodexHome,
@@ -9965,9 +9995,9 @@ var init_maestro_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/index.ts
-import { existsSync as existsSync17 } from "fs";
+import { existsSync as existsSync18 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 async function* dispatchAgent(opts) {
   switch (opts.agent) {
     case "claude": {
@@ -10001,11 +10031,11 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
   switch (agent) {
     case "claude": {
       const encodedCwd = encodeClaudeCwd(cwd);
-      const path = join17(homedir7(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
-      return !existsSync17(path);
+      const path = join18(homedir7(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
+      return !existsSync18(path);
     }
     case "codex": {
-      const sessionsDir = join17(hostedCodexHomePath(), "sessions");
+      const sessionsDir = join18(hostedCodexHomePath(), "sessions");
       const glob = new Bun.Glob(`**/rollout-*-${sessionId}.jsonl`);
       for await (const _rel of glob.scan({ cwd: sessionsDir, onlyFiles: true })) {
         return false;
@@ -10014,7 +10044,7 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
     }
     case "maestro": {
       const { hasActiveMaestroSession, maestroSessionPath: maestroSessionPath2 } = await import("maestro-agent-sdk");
-      return !existsSync17(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
+      return !existsSync18(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
     }
     default: {
       const _exhaustive = agent;
@@ -10085,10 +10115,10 @@ var init_agents = __esm(async () => {
 });
 
 // ../../packages/core/src/prompts/builders.ts
-import { readFileSync as readFileSync16 } from "fs";
+import { readFileSync as readFileSync17 } from "fs";
 import { resolve as resolve14 } from "path";
 function loadPrompt(filename, dir = SESSIONS_DIR) {
-  const raw = readFileSync16(resolve14(dir, filename), "utf-8");
+  const raw = readFileSync17(resolve14(dir, filename), "utf-8");
   return raw.replace(/\{\{RESOURCES_DIR\}\}/g, RESOURCES_DIR);
 }
 function replaceVars(template, vars) {
@@ -10137,7 +10167,7 @@ function visualDesignGuide() {
   return _visualDesignGuide;
 }
 function loadAgentPrompt(filename) {
-  const raw = readFileSync16(resolve14(AGENTS_PROMPTS_DIR, filename), "utf-8");
+  const raw = readFileSync17(resolve14(AGENTS_PROMPTS_DIR, filename), "utf-8");
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match)
     throw new Error(`Agent prompt ${filename} is missing frontmatter`);
@@ -10183,6 +10213,7 @@ function buildRuntimeToolSection(opts, extensions) {
   } = opts;
   const runtimeNamespace = "mcp__runtime";
   const taskNamespace = "mcp__task";
+  const decisionNamespace = "mcp__decision";
   const visualToolLine = agentKind === "codex" ? `To display charts, tables, or interactive HTML results to the user, call the \`show_html\` function in the \`${runtimeNamespace}\` namespace with { html: "<complete HTML string>", title?: "optional title" }.` : `To display charts, tables, or interactive HTML results to the user, call the MCP tool "${runtimeNamespace}__show_html" with { html: "<complete HTML string>", title?: "optional title" }.`;
   const mermaidToolLine = agentKind === "codex" ? `For diagrams that Mermaid supports, prefer the \`show_mermaid\` function in the \`${runtimeNamespace}\` namespace with { code: "<Mermaid DSL without markdown fences>", title?: "...", theme?: "neutral" }.` : `For diagrams that Mermaid supports, prefer the MCP tool "${runtimeNamespace}__show_mermaid" with { code: "<Mermaid DSL without markdown fences>", title?: "...", theme?: "neutral" }.`;
   const mediaToolLine = agentKind === "codex" ? `To display an existing image or video in the visual panel, use \`show_image\` or \`show_video\` in the \`${runtimeNamespace}\` namespace with either { file_path: "...", title?: "..." } for a topic-workspace file or { file_id: "...", title?: "..." } for an uploaded file already attached in this topic.` : `To display an existing image or video in the visual panel, use MCP tool "${runtimeNamespace}__show_image" or "${runtimeNamespace}__show_video" with either { file_path: "...", title?: "..." } for a topic-workspace file or { file_id: "...", title?: "..." } for an uploaded file already attached in this topic.`;
@@ -10190,6 +10221,7 @@ function buildRuntimeToolSection(opts, extensions) {
   const askUserToolLine = agentKind === "codex" ? `When you need a blocking user choice, call the \`ask_user_question\` function in the \`${runtimeNamespace}\` namespace with { question: "...", choices: [{ label: "...", description?: "..." }] }.` : `When you need a blocking user choice, call the MCP tool "${runtimeNamespace}__ask_user_question" with { question: "...", choices: [{ label: "...", description?: "..." }] }.`;
   const scheduleSelfToolLine = agentKind === "codex" ? `For a one-shot delayed continuation within 24 hours, call the \`schedule_self\` function in the \`${runtimeNamespace}\` namespace with { delay_seconds: number, message: "self-contained future instruction" }. Only one pending self-schedule is allowed per topic; use \`get_self_schedule\`, \`update_self_schedule\`, or \`cancel_self_schedule\` in that namespace to manage it. Use cron-manager for recurring schedules.` : `For a one-shot delayed continuation within 24 hours, call the MCP tool "${runtimeNamespace}__schedule_self" with { delay_seconds: number, message: "self-contained future instruction" }. Only one pending self-schedule is allowed per topic; manage it with "${runtimeNamespace}__get_self_schedule", "${runtimeNamespace}__update_self_schedule", or "${runtimeNamespace}__cancel_self_schedule". Use cron-manager for recurring schedules.`;
   const taskToolLine = agentKind === "codex" ? `For task tracking, use \`task_create\`, \`task_update\`, \`task_list\`, \`task_get\`, and \`task_delete\` functions in the \`${taskNamespace}\` namespace.` : `For task tracking, use MCP tools "${taskNamespace}__task_create", "${taskNamespace}__task_update", "${taskNamespace}__task_list", "${taskNamespace}__task_get", and "${taskNamespace}__task_delete".`;
+  const decisionToolLine = `Use the shared Decision tools in the \`${decisionNamespace}\` namespace when an architectural, product, or operational choice establishes or changes a durable direction or constraint. Do not record routine task progress or temporary implementation details; link causal predecessors when relevant.`;
   const runtimeToolRef = (name) => agentKind === "codex" ? `\`${name}\`` : `"${runtimeNamespace}__${name}"`;
   const spawnSubagentToolLine = `Use ${runtimeToolRef("spawn_subagent")} for self-contained parallel or long-running background work; keep quick work inline.`;
   const lifecycleToolLine = `For staged work, call ${runtimeToolRef("create_subagent")} then ${runtimeToolRef("start_subagent")}. Create fixes \`task\` and \`report_mode\`; start takes only the room ID, so create after inputs are known unless preparing a \`tell_session\` receiver. Manage descendants with ${runtimeToolRef("list_subagents")} and ${runtimeToolRef("delete_subagent")}, and non-parent tell routes with ${runtimeToolRef("grant_subagent_tell")} and ${runtimeToolRef("revoke_subagent_tell")}. Direct-parent reporting needs no grant. Use ${runtimeToolRef("list_memory_topics")} to select \`memory_topic\`.`;
@@ -10236,6 +10268,9 @@ function buildRuntimeToolSection(opts, extensions) {
     taskToolLine,
     "Use this shared task store for plans, progress, and checklist updates; it is visible across claude/codex/maestro turns.",
     nativeTaskPolicyLine,
+    "",
+    "## Shared Decisions",
+    decisionToolLine,
     ...extensions.render("after-shared-tasks"),
     ...fileDeliverySection,
     ...extensions.render("before-session-communication"),
@@ -10524,9 +10559,9 @@ var init_api_topic_brief = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/wiki.ts
-import { basename as basename3, dirname as dirname12, join as join18 } from "path";
+import { basename as basename3, dirname as dirname13, join as join19 } from "path";
 function getSharedWikiDir(workspaceDir = resolveStorageWorkspaceDir()) {
-  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join18(workspaceDir, "wiki");
+  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join19(workspaceDir, "wiki");
 }
 var init_wiki = __esm(async () => {
   await init_storage_host();
@@ -10534,8 +10569,8 @@ var init_wiki = __esm(async () => {
 
 // ../../packages/core/src/agents/archiver.ts
 import { randomUUID as randomUUID9 } from "crypto";
-import { existsSync as existsSync18, readdirSync as readdirSync5, readFileSync as readFileSync17, statSync as statSync7 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync5, readFileSync as readFileSync18, statSync as statSync7 } from "fs";
+import { join as join20 } from "path";
 function resolveMemoryLanguage() {
   const override = process.env.NEGOTIUM_MEMORY_LANG?.trim();
   return override && override.length > 0 ? override : resolveOutputLanguage();
@@ -10786,10 +10821,10 @@ function distillOneLine(summaryMd) {
   return "";
 }
 function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
-  const dir = join19(storage.getWikiDir(), "summaries");
+  const dir = join20(storage.getWikiDir(), "summaries");
   if (!storage.fileExists(dir))
     return null;
-  const predicted = join19(dir, wikiSummaryFilename(date, topicTitle, topicId));
+  const predicted = join20(dir, wikiSummaryFilename(date, topicTitle, topicId));
   if (storage.fileExists(predicted) && storage.fileModifiedAt(predicted) >= sinceMs)
     return predicted;
   let best = null;
@@ -10797,7 +10832,7 @@ function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
     if (!f.startsWith(`${date}-`) || !isTopicSummaryFile(f, topicId ?? "", topicTitle)) {
       continue;
     }
-    const p = join19(dir, f);
+    const p = join20(dir, f);
     try {
       const m = storage.fileModifiedAt(p);
       if (m >= sinceMs && (!best || m > best.mtime))
@@ -10878,9 +10913,9 @@ var init_archiver = __esm(async () => {
   defaultArchiverRuntime = createArchiverRuntime({
     storage: {
       getWikiDir: getSharedWikiDir,
-      fileExists: existsSync18,
+      fileExists: existsSync19,
       listDirectory: readdirSync5,
-      readTextFile: (path) => readFileSync17(path, "utf-8"),
+      readTextFile: (path) => readFileSync18(path, "utf-8"),
       fileSize: (path) => statSync7(path).size,
       fileModifiedAt: (path) => statSync7(path).mtimeMs,
       getGeneralTopicId: (userId) => ensurePersonalGeneral(userId).id,
@@ -11000,15 +11035,15 @@ function formatTopicArchiveTranscriptRecord(row, topicTitle, index) {
 }
 
 // ../../packages/core/src/storage/topic-archive.ts
-import { mkdirSync as mkdirSync12, writeFileSync as writeFileSync10 } from "fs";
-import { join as join20 } from "path";
+import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "fs";
+import { join as join21 } from "path";
 function archiveTopicMessages(topicId, topicTitle, options = {}) {
   const rows = options.afterRowid !== undefined ? getMessagesForTopicAfterRowid(topicId, options.afterRowid) : getAllMessagesForTopic(topicId);
   if (rows.length === 0)
     return null;
   const safeTopic = sanitizeTopicName(topicTitle, true);
-  const archiveDir = join20(getSharedWikiDir(), "archive");
-  mkdirSync12(archiveDir, { recursive: true });
+  const archiveDir = join21(getSharedWikiDir(), "archive");
+  mkdirSync13(archiveDir, { recursive: true });
   const date = new Date().toISOString().slice(0, 10);
   const reasonSuffix = options.reason && options.reason !== "delete" ? `_${options.reason}` : "";
   let filename;
@@ -11020,9 +11055,9 @@ function archiveTopicMessages(topicId, topicTitle, options = {}) {
   let path;
   while (true) {
     filename = `${safeTopic}_${date}${reasonSuffix}${counter === 1 ? "" : `_${counter}`}.jsonl`;
-    path = join20(archiveDir, filename);
+    path = join21(archiveDir, filename);
     try {
-      writeFileSync10(path, body, { flag: "wx" });
+      writeFileSync11(path, body, { flag: "wx" });
       break;
     } catch (err) {
       if (err.code !== "EEXIST")
@@ -11065,8 +11100,8 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   const entries = readRawConversation(userId, topicTitle);
   if (entries.length === 0)
     return null;
-  const archiveDir = join20(getSharedWikiDir(), "archive");
-  mkdirSync12(archiveDir, { recursive: true });
+  const archiveDir = join21(getSharedWikiDir(), "archive");
+  mkdirSync13(archiveDir, { recursive: true });
   const safeTopic = sanitizeTopicName(topicTitle, true);
   const date = new Date().toISOString().slice(0, 10);
   const reasonSuffix = options.reason && options.reason !== "delete" ? `_${options.reason}` : "";
@@ -11093,9 +11128,9 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   let counter = 1;
   while (true) {
     const suffix = counter === 1 ? "" : `_${counter}`;
-    const path = join20(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
+    const path = join21(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
     try {
-      writeFileSync10(path, body, { flag: "wx" });
+      writeFileSync11(path, body, { flag: "wx" });
       logger.info({ topicId, topicTitle, archive: path, eventCount: entries.length }, "archiveConversationEvents: archived raw conversation events");
       return { path, eventCount: entries.length };
     } catch (error) {
@@ -11411,8 +11446,8 @@ var init_idle_archiver = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/topic-cleanup.ts
-import { mkdirSync as mkdirSync13, renameSync as renameSync7, unlinkSync as unlinkSync13, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname13 } from "path";
+import { mkdirSync as mkdirSync14, renameSync as renameSync8, unlinkSync as unlinkSync13, writeFileSync as writeFileSync12 } from "fs";
+import { dirname as dirname14 } from "path";
 function collectSessionIdsByAgent(entries, extraSessions = []) {
   const out = new Map;
   for (const e of entries) {
@@ -11478,11 +11513,11 @@ function createTopicLogMaintenance(host) {
       const path = runtimeHost.activeConversationPath(opts.userId, opts.topicName);
       const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
       try {
-        mkdirSync13(dirname13(path), { recursive: true });
-        writeFileSync11(tempPath, retained.length > 0 ? `${retained.map((entry) => JSON.stringify(entry)).join(`
+        mkdirSync14(dirname14(path), { recursive: true });
+        writeFileSync12(tempPath, retained.length > 0 ? `${retained.map((entry) => JSON.stringify(entry)).join(`
 `)}
 ` : "", { flag: "wx" });
-        renameSync7(tempPath, path);
+        renameSync8(tempPath, path);
       } catch (e) {
         try {
           unlinkSync13(tempPath);
@@ -11640,9 +11675,9 @@ var init_usage_alert = __esm(() => {
 
 // ../../packages/core/src/topics/session.ts
 import { randomUUID as randomUUID10 } from "crypto";
-import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, writeFileSync as writeFileSync12 } from "fs";
+import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, writeFileSync as writeFileSync13 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 function previousCompactedSummary(entries) {
   for (let index = entries.length - 2;index >= 0; index -= 1) {
     const request = entries[index]?.event;
@@ -11772,7 +11807,7 @@ function formatCompactElapsed(startedAt) {
 async function summarizeTopicContext(request) {
   const startedAt = Date.now();
   const sessionIds = [];
-  const compactCwd = mkdtempSync2(join21(tmpdir3(), "negotium-compact-"));
+  const compactCwd = mkdtempSync2(join22(tmpdir3(), "negotium-compact-"));
   const abortController = new AbortController;
   const relayAbort = () => abortController.abort(request.signal?.reason);
   if (request.signal?.aborted)
@@ -11799,7 +11834,7 @@ async function summarizeTopicContext(request) {
   let error = "";
   let toolViolation = false;
   let compactionLogCalls = 0;
-  const compactionLogPath = join21(compactCwd, "conversation.log");
+  const compactionLogPath = join22(compactCwd, "conversation.log");
   try {
     const compactionMcp = useCompactionLog ? {
       compact_log: {
@@ -11813,7 +11848,7 @@ async function summarizeTopicContext(request) {
       }
     } : undefined;
     if (useCompactionLog)
-      writeFileSync12(compactionLogPath, request.source, { mode: 384 });
+      writeFileSync13(compactionLogPath, request.source, { mode: 384 });
     for await (const event of runAgent({
       agent: request.agent,
       prompt: useCompactionLog ? [
@@ -12062,7 +12097,7 @@ __export(exports_derive, {
   TopicDeriveBusyError: () => TopicDeriveBusyError
 });
 import { createHash as createHash4, randomUUID as randomUUID11 } from "crypto";
-import { mkdirSync as mkdirSync14, rmSync as rmSync5, unlinkSync as unlinkSync14 } from "fs";
+import { mkdirSync as mkdirSync15, rmSync as rmSync5, unlinkSync as unlinkSync14 } from "fs";
 function getTopics(opts = {}) {
   return listTopics(opts).filter((topic) => !isLegacySharedGeneral(topic.id));
 }
@@ -12195,7 +12230,7 @@ async function createDerivedTopicImpl(topic, sourceTopicId, userId, copyHistory,
   try {
     if (agent) {
       const cwd = derivedWorkspace;
-      mkdirSync14(cwd, { recursive: true });
+      mkdirSync15(cwd, { recursive: true });
       const registry = getRegistry(agent);
       const requestedRolloutModel = subagentModel ?? (subagent?.agent ? undefined : sourceConfig?.model) ?? derived.defaultModel;
       const rolloutModel = resolveModelForAgent(agent, requestedRolloutModel, registry);
@@ -12418,14 +12453,14 @@ var init_derive = __esm(async () => {
 });
 
 // ../../packages/core/src/query/session-inbox-path.ts
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function sessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join22(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
+  return join23(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
 }
 function scheduledSessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join22(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
+  return join23(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
 }
 var TOPIC_ID_FILE_PREFIX = "topic-id-", JSONL_SUFFIX = ".jsonl", SCHEDULE_SUFFIX = ".schedule";
 var init_session_inbox_path = __esm(() => {
@@ -12434,13 +12469,13 @@ var init_session_inbox_path = __esm(() => {
 
 // ../../packages/core/src/query/session-inbox-cleanup.ts
 import { unlinkSync as unlinkSync15 } from "fs";
-import { basename as basename4, join as join23 } from "path";
+import { basename as basename4, join as join24 } from "path";
 function cleanupSessionInboxFiles(userId, topicId, legacyTopicTitle) {
   const live = sessionInboxPath(userId, topicId);
   const scheduled = scheduledSessionInboxPath(userId, topicId);
   const candidates = new Set([live, `${live}.processing`, scheduled, `${scheduled}.processing`]);
   if (legacyTopicTitle && legacyTopicTitle !== "." && legacyTopicTitle !== ".." && basename4(legacyTopicTitle) === legacyTopicTitle) {
-    const legacyBase = join23(SESSION_INBOX_DIR, userId, legacyTopicTitle);
+    const legacyBase = join24(SESSION_INBOX_DIR, userId, legacyTopicTitle);
     for (const suffix of [".jsonl", ".jsonl.processing", ".schedule", ".schedule.processing"]) {
       candidates.add(`${legacyBase}${suffix}`);
     }
@@ -12465,29 +12500,29 @@ var init_session_inbox_cleanup = __esm(() => {
 });
 
 // ../../packages/core/src/query/state.ts
-import { mkdirSync as mkdirSync15, renameSync as renameSync8, unlinkSync as unlinkSync16, writeFileSync as writeFileSync13 } from "fs";
-import { basename as basename5, join as join24 } from "path";
+import { mkdirSync as mkdirSync16, renameSync as renameSync9, unlinkSync as unlinkSync16, writeFileSync as writeFileSync14 } from "fs";
+import { basename as basename5, join as join25 } from "path";
 function createQueryStateStore(options) {
   const sanitize = options.sanitizeTopicId ?? sanitizeId;
-  const queryStateDirPath = (userId) => join24(options.usersLogDir, String(userId), "active-queries");
-  const queryStateFile = (userId, topicId) => join24(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
+  const queryStateDirPath = (userId) => join25(options.usersLogDir, String(userId), "active-queries");
+  const queryStateFile = (userId, topicId) => join25(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
   const legacyQueryStateFile = (userId, topicName) => {
     if (!topicName || topicName === "." || topicName === ".." || basename5(topicName) !== topicName) {
       return null;
     }
-    return join24(queryStateDirPath(userId), `${topicName}.json`);
+    return join25(queryStateDirPath(userId), `${topicName}.json`);
   };
   return {
     write(userId, topicId, topicName, task) {
       const dir = queryStateDirPath(userId);
-      mkdirSync15(dir, { recursive: true });
+      mkdirSync16(dir, { recursive: true });
       const state = { topicId, topicName, since: new Date().toISOString() };
       if (task)
         state.task = [...task.replace(/\n+/g, " ").trim()].slice(0, 100).join("");
       const target = queryStateFile(userId, topicId);
       const tmp = `${target}.${process.pid}.${Date.now()}.tmp`;
-      writeFileSync13(tmp, JSON.stringify(state));
-      renameSync8(tmp, target);
+      writeFileSync14(tmp, JSON.stringify(state));
+      renameSync9(tmp, target);
     },
     clear(userId, topicId, legacyTopicName) {
       const paths = [
@@ -12628,38 +12663,38 @@ __export(exports_session_asks, {
 import { createHash as createHash5 } from "crypto";
 import {
   closeSync as closeSync3,
-  mkdirSync as mkdirSync16,
+  mkdirSync as mkdirSync17,
   openSync as openSync3,
   readdirSync as readdirSync6,
-  readFileSync as readFileSync18,
+  readFileSync as readFileSync19,
   statSync as statSync8,
   unlinkSync as unlinkSync17,
-  writeFileSync as writeFileSync14
+  writeFileSync as writeFileSync15
 } from "fs";
-import { dirname as dirname14, join as join25 } from "path";
+import { dirname as dirname15, join as join26 } from "path";
 function pendingAskDir(userId) {
   const rawUserId = String(userId);
   const safeUserId = /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..") ? rawUserId : `sha256-${createHash5("sha256").update(rawUserId).digest("hex")}`;
-  return join25(resolveStorageSessionAsksDir(), safeUserId);
+  return join26(resolveStorageSessionAsksDir(), safeUserId);
 }
 function encodeAskKey(key) {
   return JSON.stringify([key.from, key.to]);
 }
 function pendingAskPath(key) {
   const digest = createHash5("sha256").update(encodeAskKey(key)).digest("hex");
-  return join25(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
+  return join26(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
 }
 function v2PendingAskPath(key) {
   const encoded = Buffer.from(encodeAskKey(key), "utf8").toString("base64url");
-  return join25(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
+  return join26(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
 }
 function legacyPendingAskPath(key) {
   if (key.from.includes("/") || key.from.includes("\\") || key.to.includes("/") || key.to.includes("\\") || key.from.includes("\x00") || key.to.includes("\x00")) {
     return null;
   }
   const dir = pendingAskDir(key.userId);
-  const candidate = join25(dir, `${key.from}___${key.to}.pending`);
-  return dirname14(candidate) === dir ? candidate : null;
+  const candidate = join26(dir, `${key.from}___${key.to}.pending`);
+  return dirname15(candidate) === dir ? candidate : null;
 }
 function parsePendingAskFilename(fileName) {
   if (!fileName.endsWith(".pending"))
@@ -12680,7 +12715,7 @@ function parsePendingAskFilename(fileName) {
 }
 function readPendingAskFile(path, fallback) {
   try {
-    const raw = readFileSync18(path, "utf8").trim();
+    const raw = readFileSync19(path, "utf8").trim();
     if (!raw)
       return null;
     if (!raw.startsWith("{")) {
@@ -12731,17 +12766,17 @@ function isStale(record, path) {
 }
 function writePendingAsk(record) {
   const path = pendingAskPath(record);
-  mkdirSync16(pendingAskDir(record.userId), { recursive: true });
-  writeFileSync14(path, `${JSON.stringify(record)}
+  mkdirSync17(pendingAskDir(record.userId), { recursive: true });
+  writeFileSync15(path, `${JSON.stringify(record)}
 `);
 }
 function writePendingAskIfAbsent(record) {
   const path = pendingAskPath(record);
-  mkdirSync16(pendingAskDir(record.userId), { recursive: true });
+  mkdirSync17(pendingAskDir(record.userId), { recursive: true });
   let fd = null;
   try {
     fd = openSync3(path, "wx");
-    writeFileSync14(fd, `${JSON.stringify(record)}
+    writeFileSync15(fd, `${JSON.stringify(record)}
 `);
     return true;
   } catch (error) {
@@ -12801,12 +12836,12 @@ function createPendingAsk(args) {
     createdAt: now,
     updatedAt: now
   };
-  mkdirSync16(pendingAskDir(args.userId), { recursive: true });
+  mkdirSync17(pendingAskDir(args.userId), { recursive: true });
   for (let attempt = 0;attempt < 2; attempt++) {
     let fd = null;
     try {
       fd = openSync3(path, "wx");
-      writeFileSync14(fd, `${JSON.stringify(record)}
+      writeFileSync15(fd, `${JSON.stringify(record)}
 `);
       return { ok: true, record };
     } catch (err) {
@@ -12899,7 +12934,7 @@ function listPendingAsksForCaller(args) {
     const parsed = isV3 ? { from: args.from, to: "" } : parsePendingAskFilename(fileName);
     if (!parsed)
       continue;
-    const path = join25(dir, fileName);
+    const path = join26(dir, fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
       from: parsed.from,
@@ -12941,7 +12976,7 @@ function deletePendingAsksForTopic(args) {
   }
   let deleted = 0;
   for (const fileName of files) {
-    const path = join25(dir, fileName);
+    const path = join26(dir, fileName);
     const parsed = parsePendingAskFilename(fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
@@ -13378,8 +13413,8 @@ var init_self_schedules = __esm(async () => {
 
 // ../../packages/core/src/storage/token-stats.ts
 import { createHash as createHash6 } from "crypto";
-import { mkdirSync as mkdirSync17, writeFileSync as writeFileSync15 } from "fs";
-import { join as join26 } from "path";
+import { mkdirSync as mkdirSync18, writeFileSync as writeFileSync16 } from "fs";
+import { join as join27 } from "path";
 function emptyBucket() {
   return {
     inputTokens: 0,
@@ -13397,8 +13432,8 @@ function tokenStatsFileId(userId) {
 function queriesPath(userId) {
   const fileId = tokenStatsFileId(userId);
   const logDir = resolveStorageLogDir();
-  mkdirSync17(logDir, { recursive: true });
-  return join26(logDir, `token-queries-${fileId}.jsonl`);
+  mkdirSync18(logDir, { recursive: true });
+  return join27(logDir, `token-queries-${fileId}.jsonl`);
 }
 function loadRecords(userId) {
   try {
@@ -13467,7 +13502,7 @@ function deleteTopicStats(userId, topicId) {
         return true;
       }
     });
-    writeFileSync15(path, kept.length > 0 ? `${kept.join(`
+    writeFileSync16(path, kept.length > 0 ? `${kept.join(`
 `)}
 ` : "", "utf-8");
   } catch (e) {
@@ -13799,8 +13834,8 @@ var init_lifecycle = __esm(async () => {
 
 // ../../packages/core/src/runtime/attachments.ts
 import { randomUUID as randomUUID13 } from "crypto";
-import { copyFileSync as copyFileSync2, mkdirSync as mkdirSync18, writeFileSync as writeFileSync16 } from "fs";
-import { basename as basename6, join as join27 } from "path";
+import { copyFileSync as copyFileSync2, mkdirSync as mkdirSync19, writeFileSync as writeFileSync17 } from "fs";
+import { basename as basename6, join as join28 } from "path";
 function workspaceCwdFor(topicId) {
   return resolveTopicWorkspaceDir(topicId);
 }
@@ -13813,7 +13848,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
   if (!attachmentIds?.length)
     return [];
   const out = [];
-  const destDir = join27(workspaceCwdFor(topicId), "attachments", queryId);
+  const destDir = join28(workspaceCwdFor(topicId), "attachments", queryId);
   for (const rawId of attachmentIds) {
     if (typeof rawId !== "string")
       continue;
@@ -13827,10 +13862,10 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
       continue;
     }
     try {
-      mkdirSync18(destDir, { recursive: true });
+      mkdirSync19(destDir, { recursive: true });
       const index = String(out.length + 1).padStart(2, "0");
       const safeName = safeAttachmentFilename(attachment.filename, fileId);
-      const destPath = join27(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
+      const destPath = join28(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
       copyFileSync2(sourcePath, destPath);
       out.push({
         id: attachment.id,
@@ -13860,14 +13895,14 @@ function promptWithAttachments(prompt, attachments) {
   return composeAttachmentPrompt(prompt, attachments.map(({ filename, path }) => attachmentPromptLine(filename, path)));
 }
 function ingestAttachment(args) {
-  const destDir = join27(UPLOADS_DIR, args.topicId);
-  mkdirSync18(destDir, { recursive: true });
+  const destDir = join28(UPLOADS_DIR, args.topicId);
+  mkdirSync19(destDir, { recursive: true });
   const safeName = safeAttachmentFilename(args.filename, "upload");
-  const destPath = join27(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
+  const destPath = join28(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
   if (args.sourcePath !== undefined) {
     copyFileSync2(args.sourcePath, destPath);
   } else if (args.bytes !== undefined) {
-    writeFileSync16(destPath, args.bytes);
+    writeFileSync17(destPath, args.bytes);
   } else {
     throw new Error("ingestAttachment: provide sourcePath or bytes");
   }
@@ -14336,7 +14371,7 @@ var init_ask_user_gates = __esm(async () => {
 
 // ../../packages/core/src/agents/mcp-tools/ask-user.ts
 import { createHash as createHash7, randomUUID as randomUUID14 } from "crypto";
-import { z as z3 } from "zod";
+import { z as z4 } from "zod";
 function normalizeAskText(value2, maxChars) {
   if (typeof value2 !== "string")
     return;
@@ -14609,12 +14644,12 @@ function createAskUserRuntime(host) {
       name: "ask_user_question",
       description: "Ask the user a blocking multiple-choice question in the chat and wait for their selection. Use this instead of provider built-in AskUserQuestion. Use only when you cannot proceed safely without the user's choice.",
       schema: {
-        question: z3.string().describe("The concise question to show to the user."),
-        choices: z3.array(z3.object({
-          label: z3.string().describe("Choice label shown on the button."),
-          description: z3.string().optional().describe("Optional one-sentence consequence.")
+        question: z4.string().describe("The concise question to show to the user."),
+        choices: z4.array(z4.object({
+          label: z4.string().describe("Choice label shown on the button."),
+          description: z4.string().optional().describe("Optional one-sentence consequence.")
         })).min(1).max(MAX_CHOICES).describe("Choices the user can select."),
-        idempotency_key: z3.string().max(MAX_IDEMPOTENCY_KEY_CHARS).optional().describe("Optional retry key. Reusing it with the same question replays the existing result; reusing it with different content fails.")
+        idempotency_key: z4.string().max(MAX_IDEMPOTENCY_KEY_CHARS).optional().describe("Optional retry key. Reusing it with the same question replays the existing result; reusing it with different content fails.")
       },
       async handler(input) {
         return askUserQuestion(ctx, input);
@@ -14784,6 +14819,10 @@ function buildMermaidHtml(code, theme, scriptUrl = MERMAID_BROWSER_ASSET_RELATIV
     .controls button:focus-visible{outline:2px solid var(--celadon);outline-offset:1px}
     .zoom-value{min-width:46px;color:var(--graphite);font:500 11px/1 Geist,system-ui,sans-serif;text-align:center;font-variant-numeric:tabular-nums}
     .error{margin:0;white-space:pre-wrap;color:#7D2E2E;background:#FFF5F2;border:1px solid #E4B9B1;border-radius:6px;padding:14px;font:13px ui-monospace,SFMono-Regular,Menlo,monospace}
+    .failure{max-width:56ch;margin:0 auto}
+    .failure p{margin:0 0 12px;color:var(--graphite);font:14px/1.6 Geist,system-ui,sans-serif}
+    .failure details{color:var(--graphite);font:12px/1.5 Geist,system-ui,sans-serif}
+    .failure summary{cursor:pointer;padding:4px 0}
     @media(max-width:600px){.viewport{padding:54px 14px 18px}.controls{top:10px;right:10px}}
   </style>
 </head>
@@ -14798,11 +14837,58 @@ function buildMermaidHtml(code, theme, scriptUrl = MERMAID_BROWSER_ASSET_RELATIV
   <script data-otium-mermaid-runtime src="${safeScriptUrl}"></script>
   <script>
     (async () => {
+      // An unrendered document reports itself in more than one voice: Mermaid's
+      // own 0x0 guard, and the browser refusing geometry on a path that was
+      // never laid out. Both mean the same thing, so both are worth one retry
+      // and, if it still fails, the same explanation.
+      const unrendered = (error) => {
+        const message = String(error && error.message ? error.message : error);
+        return message.indexOf("not in render tree") !== -1 || message.indexOf("path is empty") !== -1;
+      };
       try {
       const runtime = globalThis.mermaid;
       if (!runtime) throw new Error("Mermaid renderer failed to load.");
       runtime.initialize({ startOnLoad: false, securityLevel: "strict", theme: ${safeTheme} });
-      await runtime.run({ querySelector: ".mermaid" });
+      const host = document.querySelector(".mermaid");
+      // Mermaid sizes every label by appending a probe <svg> to the body and
+      // reading getBBox(), and it throws "svg element not in render tree" the
+      // moment that comes back 0x0. That is what a hidden panel looks like from
+      // in here: the document exists but nothing is in the render tree, so the
+      // measurement has no geometry to report. Ask the same question Mermaid
+      // will ask, and only start once it has an answer.
+      const measurable = () => {
+        const probe = document.createElementNS("http://www.w3.org/2000/svg", "svg");
+        const text = document.createElementNS("http://www.w3.org/2000/svg", "text");
+        text.textContent = "M";
+        probe.appendChild(text);
+        document.body.appendChild(probe);
+        let box = { width: 0, height: 0 };
+        try { box = text.getBBox(); } catch (ignored) {}
+        probe.remove();
+        return box.width > 0 || box.height > 0;
+      };
+      // requestAnimationFrame is the right clock here: a hidden document stops
+      // being animated, so this waits without spinning and resumes on the frame
+      // the panel is shown. The cap counts rendered frames, not wall time.
+      const waitUntilMeasurable = async (maxFrames) => {
+        for (let frame = 0; frame < maxFrames; frame += 1) {
+          if (measurable()) return true;
+          await new Promise((next) => requestAnimationFrame(next));
+        }
+        return measurable();
+      };
+      await waitUntilMeasurable(600);
+      try {
+        await runtime.run({ querySelector: ".mermaid" });
+      } catch (firstAttempt) {
+        if (!unrendered(firstAttempt)) throw firstAttempt;
+        // The panel can be hidden again between the probe and the real measure.
+        // Clear the marker Mermaid leaves behind so the retry is not skipped as
+        // already done, then wait for the render tree once more.
+        host.removeAttribute("data-processed");
+        await waitUntilMeasurable(600);
+        await runtime.run({ querySelector: ".mermaid" });
+      }
       const viewport = document.querySelector(".viewport");
       const svg = document.querySelector(".mermaid svg");
       const value = document.querySelector(".zoom-value");
@@ -14829,7 +14915,22 @@ function buildMermaidHtml(code, theme, scriptUrl = MERMAID_BROWSER_ASSET_RELATIV
       applyScale(scale, false);
       } catch (error) {
         document.querySelector(".controls")?.remove();
-        document.querySelector(".viewport").innerHTML = '<pre class="error">' + String(error && error.message ? error.message : error).replace(/[&<>]/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;'}[c])) + '</pre>';
+        const raw = String(error && error.message ? error.message : error);
+        const escape = (value) => value.replace(/[&<>]/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;'}[c]));
+        // Mermaid aborts the whole render when it cannot place an edge label:
+        // cardinality markers ask for a point a fixed distance along the edge,
+        // and a relation laid out shorter than that walks off the end. Nothing
+        // is wrong with the diagram, so the raw message sends authors looking
+        // for a syntax error that does not exist. Say what actually moves it.
+        const note = raw.indexOf("Could not find a suitable point") !== -1
+          ? "Two nodes ended up too close together for Mermaid to fit a label on the edge between them. Renaming a node, adding another, or setting an explicit direction usually spreads the layout enough to render."
+          : unrendered(error)
+          ? "The panel stayed hidden long enough that there was never a laid-out page to measure the diagram against. Reopening the panel renders it."
+          : "This diagram could not be rendered.";
+        document.querySelector(".viewport").innerHTML =
+          '<div class="failure"><p>' + escape(note) +
+          '</p><details><summary>Technical detail</summary><pre class="error">' +
+          escape(raw) + '</pre></details></div>';
       }
     })();
   </script>
@@ -15631,10 +15732,10 @@ var init_turn_session = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/app-settings.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync19, readFileSync as readFileSync19, writeFileSync as writeFileSync17 } from "fs";
-import { dirname as dirname15, join as join28 } from "path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync20, readFileSync as readFileSync20, writeFileSync as writeFileSync18 } from "fs";
+import { dirname as dirname16, join as join29 } from "path";
 function settingsFile() {
-  return join28(resolveStorageDataDir(), "otium-settings.json");
+  return join29(resolveStorageDataDir(), "otium-settings.json");
 }
 function ensureSettingsLoaded() {
   const path = settingsFile();
@@ -15643,8 +15744,8 @@ function ensureSettingsLoaded() {
   loadedSettingsFile = path;
   aiName = DEFAULT_AI_NAME;
   try {
-    if (existsSync19(path)) {
-      const data = JSON.parse(readFileSync19(path, "utf8"));
+    if (existsSync20(path)) {
+      const data = JSON.parse(readFileSync20(path, "utf8"));
       if (typeof data.aiName === "string" && data.aiName.trim()) {
         aiName = data.aiName.trim();
       }
@@ -15737,8 +15838,8 @@ __export(exports_turn_runner, {
   AGENT_DISPLAY_NAME: () => AGENT_DISPLAY_NAME
 });
 import { randomUUID as randomUUID16 } from "crypto";
-import { existsSync as existsSync20, mkdirSync as mkdirSync20, readdirSync as readdirSync7, statSync as statSync10 } from "fs";
-import { join as join29 } from "path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync21, readdirSync as readdirSync7, statSync as statSync10 } from "fs";
+import { join as join30 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
   if (isManager)
     return configuredMcp;
@@ -15793,8 +15894,8 @@ function appendAskReplyMessage(topicId, text2, agentType) {
   return message;
 }
 function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, matchesTitle, preferExact = true) {
-  const preferred = join29(directory, preferredFilename);
-  if (preferExact && existsSync20(preferred))
+  const preferred = join30(directory, preferredFilename);
+  if (preferExact && existsSync21(preferred))
     return preferred;
   let newestLegacyId = null;
   let newestTitle = null;
@@ -15804,7 +15905,7 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
       const legacyIdMatch = !titleMatch && matchesLegacyId(filename);
       if (!titleMatch && !legacyIdMatch)
         continue;
-      const path = join29(directory, filename);
+      const path = join30(directory, filename);
       const mtimeMs = statSync10(path).mtimeMs;
       if (titleMatch) {
         if (!newestTitle || mtimeMs > newestTitle.mtimeMs) {
@@ -15818,10 +15919,10 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
   return newestTitle?.path ?? newestLegacyId?.path ?? preferred;
 }
 function resolveWikiMemoryMirror(wikiDir, topicId, topicTitle) {
-  const briefFile = resolveWikiMirrorPath(join29(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
-  const hasBriefFile = existsSync20(briefFile) && statSync10(briefFile).isFile();
-  const latestSummaryCandidate = resolveWikiMirrorPath(join29(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
-  const latestSummaryFile = existsSync20(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
+  const briefFile = resolveWikiMirrorPath(join30(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
+  const hasBriefFile = existsSync21(briefFile) && statSync10(briefFile).isFile();
+  const latestSummaryCandidate = resolveWikiMirrorPath(join30(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
+  const latestSummaryFile = existsSync21(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
   return { briefFile, hasBriefFile, latestSummaryFile };
 }
 async function streamAgentEvents(topicId, topicTitle, queryId, events, control, agentType, model, effort, userId, retryableSessionExpired = true, onSessionId, execution) {
@@ -16496,7 +16597,7 @@ function startAiTurn(params) {
   const resolvedModel = execution.model;
   const resolvedEffort = execution.effort;
   const workspaceCwd = cwd ?? workspaceCwdFor(topicId);
-  mkdirSync20(workspaceCwd, { recursive: true });
+  mkdirSync21(workspaceCwd, { recursive: true });
   let historyBridgeError;
   if (bridgeSessionFromHistory && !sessionId) {
     const bridge = tryReconstructTopicRollout({
@@ -17017,9 +17118,9 @@ __export(exports_auth_check, {
   checkAgentAuth: () => checkAgentAuth
 });
 import { execFileSync as execFileSync7 } from "child_process";
-import { existsSync as existsSync21 } from "fs";
+import { existsSync as existsSync22 } from "fs";
 import { homedir as homedir8, platform } from "os";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 function hasMaestroCredential(host, key, userId) {
   if (userId && host.getVaultValue(userId, key)?.trim())
     return true;
@@ -17039,7 +17140,7 @@ function checkAgentAuth(agent, host = defaultAgentAuthHost, userId) {
     case "claude": {
       if (host.environment.ANTHROPIC_API_KEY)
         return { ok: true };
-      const path = join30(host.homeDirectory(), ".claude", ".credentials.json");
+      const path = join31(host.homeDirectory(), ".claude", ".credentials.json");
       if (host.operatingSystem() === "darwin") {
         if (host.hasMacOsCredential("Claude Code-credentials") || host.exists(path)) {
           return { ok: true };
@@ -17090,7 +17191,7 @@ var init_auth_check = __esm(async () => {
   await init_vault();
   defaultAgentAuthHost = {
     codexAuthFilePath,
-    exists: existsSync21,
+    exists: existsSync22,
     environment: process.env,
     homeDirectory: homedir8,
     operatingSystem: platform,
@@ -17107,7 +17208,7 @@ var init_auth_check = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/mcp-tools/spawn-subagent.ts
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 function createSubagentLifecycle(host) {
   const runtimeOwnerId = host.runtime.ownerId;
   const limits = Object.freeze({
@@ -17642,7 +17743,7 @@ ${card.task}${reportInstruction}`;
         name: "start_subagent",
         description: "Start a prepared descendant subagent task.",
         schema: {
-          topic_id: z4.string().describe("Prepared subagent room id.")
+          topic_id: z5.string().describe("Prepared subagent room id.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -17662,7 +17763,7 @@ ${card.task}${reportInstruction}`;
         name: "delete_subagent",
         description: "Permanently delete one descendant subagent room managed by the current room. " + "This removes its conversation, workspace, runtime state, and topic. Keep it when follow-up work is likely.",
         schema: {
-          topic_id: z4.string().describe("Exact subagent room id returned by list_subagents; names are not accepted.")
+          topic_id: z5.string().describe("Exact subagent room id returned by list_subagents; names are not accepted.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -17686,8 +17787,8 @@ ${card.task}${reportInstruction}`;
         name: "grant_subagent_tell",
         description: "Allow one descendant subagent to tell_session another topic in this managed subagent tree. " + "Direct-parent reporting is always allowed and does not need a grant.",
         schema: {
-          subagent_topic_id: z4.string().describe("Source descendant subagent topic id."),
-          target_topic_id: z4.string().describe("Target topic id: this manager room or another descendant in its tree.")
+          subagent_topic_id: z5.string().describe("Source descendant subagent topic id."),
+          target_topic_id: z5.string().describe("Target topic id: this manager room or another descendant in its tree.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -17713,8 +17814,8 @@ ${card.task}${reportInstruction}`;
         name: "revoke_subagent_tell",
         description: "Remove an extra tell_session connection previously granted to a descendant subagent.",
         schema: {
-          subagent_topic_id: z4.string().describe("Source descendant subagent topic id."),
-          target_topic_id: z4.string().describe("Granted target topic id.")
+          subagent_topic_id: z5.string().describe("Source descendant subagent topic id."),
+          target_topic_id: z5.string().describe("Granted target topic id.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -17740,12 +17841,12 @@ ${card.task}${reportInstruction}`;
       name: "spawn_subagent",
       description: "Delegate a self-contained task to a subagent that works in its own new agent room. " + "Returns immediately; the subagent runs in the background and reports according to report_mode. " + "The fresh room has no parent conversation history; it receives the task plus the selected or inherited topic memory. " + "Use for parallelizable or long-running side work. Do not use provider built-in Task/Agent subagents.",
       schema: {
-        task: z4.string().describe("Self-contained task brief. The worker has topic memory but no parent conversation history, so include all task-specific context."),
-        name: z4.string().optional().describe("Short name for the subagent room. Auto-generated when omitted."),
-        agent: z4.enum(["claude", "codex", "maestro"]).optional().describe("Agent backend override. Defaults to this room's agent."),
-        model: z4.string().optional().describe(`Best-fit model override from the system prompt catalog. Omit agent+model to inherit ${ctx.agent}/${ctx.model ?? "default"}; overriding agent without model uses that agent's default.`),
-        memory_topic: z4.string().optional().describe("Optional knowledge source: an accessible topic id/title or topic/*.md brief. Defaults to the parent room's effective topic brief."),
-        report_mode: z4.enum(["auto", "tell", "status-only"]).optional().describe("Completion reporting: auto injects the final result, tell requires tell_session, status-only updates only the lifecycle card.")
+        task: z5.string().describe("Self-contained task brief. The worker has topic memory but no parent conversation history, so include all task-specific context."),
+        name: z5.string().optional().describe("Short name for the subagent room. Auto-generated when omitted."),
+        agent: z5.enum(["claude", "codex", "maestro"]).optional().describe("Agent backend override. Defaults to this room's agent."),
+        model: z5.string().optional().describe(`Best-fit model override from the system prompt catalog. Omit agent+model to inherit ${ctx.agent}/${ctx.model ?? "default"}; overriding agent without model uses that agent's default.`),
+        memory_topic: z5.string().optional().describe("Optional knowledge source: an accessible topic id/title or topic/*.md brief. Defaults to the parent room's effective topic brief."),
+        report_mode: z5.enum(["auto", "tell", "status-only"]).optional().describe("Completion reporting: auto injects the final result, tell requires tell_session, status-only updates only the lifecycle card.")
       },
       async handler(input) {
         return createSubagent(ctx, input, true);
@@ -17757,12 +17858,12 @@ ${card.task}${reportInstruction}`;
       name: "create_subagent",
       description: "Create a prepared subagent room and task definition without starting its AI turn. " + "Use start_subagent when the team is ready to run it.",
       schema: {
-        task: z4.string().describe("Self-contained task brief for the subagent."),
-        name: z4.string().optional().describe("Short room name. Auto-generated when omitted."),
-        agent: z4.enum(["claude", "codex", "maestro"]).optional(),
-        model: z4.string().optional(),
-        memory_topic: z4.string().optional().describe("Optional accessible topic id/title or topic/*.md brief to use as this worker's knowledge source. Defaults to the parent."),
-        report_mode: z4.enum(["auto", "tell", "status-only"]).optional()
+        task: z5.string().describe("Self-contained task brief for the subagent."),
+        name: z5.string().optional().describe("Short room name. Auto-generated when omitted."),
+        agent: z5.enum(["claude", "codex", "maestro"]).optional(),
+        model: z5.string().optional(),
+        memory_topic: z5.string().optional().describe("Optional accessible topic id/title or topic/*.md brief to use as this worker's knowledge source. Defaults to the parent."),
+        report_mode: z5.enum(["auto", "tell", "status-only"]).optional()
       },
       async handler(input) {
         return createSubagent(ctx, input, false);
@@ -20637,9 +20738,285 @@ function createCompactionLogMcpServer(context) {
   });
   return server;
 }
-// ../../packages/core/src/mcp/factories/session-comm.ts
+// ../../packages/core/src/mcp/factories/decision.ts
 import { McpServer as McpServer3 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z5 } from "zod";
+import { z as z3 } from "zod";
+
+// ../../packages/core/src/storage/decisions.ts
+init_logger();
+await init_storage_host();
+import { existsSync as existsSync11, mkdirSync as mkdirSync9, readFileSync as readFileSync10, renameSync as renameSync5, writeFileSync as writeFileSync7 } from "fs";
+import { dirname as dirname8, join as join12 } from "path";
+var DECISION_STATUS_VALUES = [
+  "proposed",
+  "accepted",
+  "executed",
+  "rejected",
+  "superseded"
+];
+function safeDecisionScopeKey(scopeKey) {
+  const safe = sanitizeFileName(scopeKey);
+  if (!safe || safe === "." || safe === "..") {
+    throw new Error(`decisions: refusing unsafe scope key: ${scopeKey}`);
+  }
+  return safe;
+}
+function decisionScopeKey(opts) {
+  return opts.topicId?.trim() || opts.session || "default";
+}
+function getDecisionFilePath(userId, scopeKey) {
+  return join12(resolveStorageDataDir(), "decisions", `${safeDecisionScopeKey(scopeKey)}.json`);
+}
+function readDecisions(userId, scopeKey) {
+  const path = getDecisionFilePath(userId, scopeKey);
+  if (!existsSync11(path))
+    return [];
+  try {
+    const parsed = JSON.parse(readFileSync10(path, "utf-8"));
+    return Array.isArray(parsed?.decisions) ? parsed.decisions : [];
+  } catch (error) {
+    logger.warn({ err: error, path }, "decisions: failed to read decision store");
+    return [];
+  }
+}
+function writeDecisions(userId, scopeKey, decisions) {
+  const path = getDecisionFilePath(userId, scopeKey);
+  mkdirSync9(dirname8(path), { recursive: true });
+  const payload = { version: 1, decisions };
+  const tmp = `${path}.${process.pid}.tmp`;
+  writeFileSync7(tmp, JSON.stringify(payload, null, 2), "utf-8");
+  renameSync5(tmp, path);
+}
+function nextDecisionId(decisions) {
+  let max = 0;
+  for (const decision of decisions) {
+    const id = Number(decision.id);
+    if (Number.isInteger(id) && id > max)
+      max = id;
+  }
+  return max + 1;
+}
+function normalizedIds(ids) {
+  if (!ids)
+    return;
+  const unique = [...new Set(ids.map((id) => id.trim()).filter(Boolean))];
+  return unique.length > 0 ? unique : undefined;
+}
+function validateDecisionGraph(decisions) {
+  const ids = new Set(decisions.map((decision) => decision.id));
+  for (const decision of decisions) {
+    for (const upstream of decision.causedBy ?? []) {
+      if (!ids.has(upstream)) {
+        throw new Error(`Decision #${decision.id} references missing decision #${upstream}.`);
+      }
+      if (upstream === decision.id) {
+        throw new Error(`Decision #${decision.id} cannot cause itself.`);
+      }
+    }
+  }
+  const visiting = new Set;
+  const visited = new Set;
+  const byId = new Map(decisions.map((decision) => [decision.id, decision]));
+  const visit = (id) => {
+    if (visited.has(id))
+      return;
+    if (visiting.has(id))
+      throw new Error(`Decision graph contains a cycle at #${id}.`);
+    visiting.add(id);
+    for (const upstream of byId.get(id)?.causedBy ?? [])
+      visit(upstream);
+    visiting.delete(id);
+    visited.add(id);
+  };
+  for (const id of ids)
+    visit(id);
+}
+function createDecisions(decisions, inputs) {
+  const out = [...decisions];
+  const created = [];
+  let id = nextDecisionId(out);
+  for (const input of inputs) {
+    const decision = {
+      id: String(id++),
+      action: input.action.trim(),
+      reasoning: input.reasoning.trim(),
+      agent: input.agent,
+      status: input.status ?? "accepted",
+      timestamp: input.timestamp ?? Date.now(),
+      ...input.model ? { model: input.model } : {},
+      ...normalizedIds(input.causedBy) ? { causedBy: normalizedIds(input.causedBy) } : {}
+    };
+    out.push(decision);
+    created.push(decision);
+  }
+  validateDecisionGraph(out);
+  return { decisions: out, created };
+}
+function updateDecisions(decisions, updates) {
+  const out = decisions.map((decision) => ({
+    ...decision,
+    ...decision.causedBy ? { causedBy: [...decision.causedBy] } : {}
+  }));
+  const byId = new Map(out.map((decision) => [decision.id, decision]));
+  const missing = [];
+  for (const update of updates) {
+    const decision = byId.get(update.id);
+    if (!decision) {
+      missing.push(update.id);
+      continue;
+    }
+    if (update.action !== undefined)
+      decision.action = update.action.trim();
+    if (update.reasoning !== undefined)
+      decision.reasoning = update.reasoning.trim();
+    if (update.status !== undefined)
+      decision.status = update.status;
+    if (update.causedBy !== undefined) {
+      const ids = normalizedIds(update.causedBy);
+      if (ids)
+        decision.causedBy = ids;
+      else
+        delete decision.causedBy;
+    }
+  }
+  validateDecisionGraph(out);
+  return { decisions: out, missing };
+}
+function deleteDecisions(decisions, opts) {
+  if (opts.all)
+    return { decisions: [], removed: decisions.length };
+  const ids = new Set(opts.ids ?? []);
+  const kept = decisions.filter((decision) => !ids.has(decision.id)).map((decision) => {
+    const causedBy = decision.causedBy?.filter((id) => !ids.has(id));
+    const next = { ...decision };
+    if (causedBy && causedBy.length > 0)
+      next.causedBy = causedBy;
+    else
+      delete next.causedBy;
+    return next;
+  });
+  return { decisions: kept, removed: decisions.length - kept.length };
+}
+function renderDecisionList(decisions) {
+  if (decisions.length === 0)
+    return "Decisions (0 recorded)";
+  return [
+    `Decisions (${decisions.length} recorded)`,
+    ...decisions.map((decision) => {
+      const causes = decision.causedBy?.length ? ` <- ${decision.causedBy.map((id) => `#${id}`).join(", ")}` : "";
+      return `[${decision.status}] #${decision.id} ${decision.action}${causes}
+  ${decision.reasoning}`;
+    })
+  ].join(`
+`);
+}
+
+// ../../packages/core/src/mcp/factories/decision.ts
+init_mcp_helpers();
+var defaultDecisionMcpHost = { readDecisions, writeDecisions };
+function createDecisionMcpServer(context, host = defaultDecisionMcpHost) {
+  const scopeKey = context.topic ? decisionScopeKey({ topicId: context.topicId, session: context.topic }) : "";
+  const server = new McpServer3({ name: "decision", version: "1.0.0" });
+  const requireContext = () => !context.userId || !scopeKey ? mcpError("Error: missing userId/topic context.") : null;
+  const statusEnum = z3.enum(DECISION_STATUS_VALUES);
+  server.tool("decision_create", "Record one or more durable decisions in this topic. Include the rationale and causal predecessors.", {
+    decisions: z3.array(z3.object({
+      action: z3.string().min(1).describe("Concise statement of what was decided"),
+      reasoning: z3.string().min(1).describe("Why this choice was made"),
+      status: statusEnum.optional().describe("Defaults to accepted"),
+      caused_by: z3.array(z3.string()).optional().describe("Upstream decision ids")
+    })).min(1)
+  }, async ({ decisions: inputs }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      const current = host.readDecisions(context.userId, scopeKey);
+      const { decisions, created } = createDecisions(current, inputs.map((input) => ({
+        action: input.action,
+        reasoning: input.reasoning,
+        status: input.status,
+        causedBy: input.caused_by,
+        agent: context.agent,
+        model: context.model
+      })));
+      host.writeDecisions(context.userId, scopeKey, decisions);
+      return mcpOk(`${created.length} decision(s) recorded (${created.map((item) => `#${item.id}`).join(", ")})
+
+${renderDecisionList(decisions)}`);
+    } catch (error) {
+      return mcpError(`decision_create failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_update", "Update decisions or their causal links in this topic.", {
+    updates: z3.array(z3.object({
+      id: z3.string(),
+      action: z3.string().min(1).optional(),
+      reasoning: z3.string().min(1).optional(),
+      status: statusEnum.optional(),
+      caused_by: z3.array(z3.string()).optional().describe("Replacement upstream decision ids")
+    })).min(1)
+  }, async ({ updates }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      const current = host.readDecisions(context.userId, scopeKey);
+      const { decisions, missing } = updateDecisions(current, updates.map((update) => ({
+        ...update,
+        causedBy: update.caused_by
+      })));
+      host.writeDecisions(context.userId, scopeKey, decisions);
+      const warning = missing.length ? `
+Missing ids ignored: ${missing.join(", ")}` : "";
+      return mcpOk(`${renderDecisionList(decisions)}${warning}`);
+    } catch (error) {
+      return mcpError(`decision_update failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_list", "Read this topic's decision graph as a concise list.", {}, async () => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      return mcpOk(renderDecisionList(host.readDecisions(context.userId, scopeKey)));
+    } catch (error) {
+      return mcpError(`decision_list failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_get", "Read one topic decision as JSON.", { id: z3.string() }, async ({ id }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    try {
+      const decision = host.readDecisions(context.userId, scopeKey).find((item) => item.id === id);
+      return decision ? mcpOk(JSON.stringify(decision, null, 2)) : mcpError(`Decision #${id} not found.`);
+    } catch (error) {
+      return mcpError(`decision_get failed: ${errMsg(error)}`);
+    }
+  });
+  server.tool("decision_delete", "Delete decisions. Downstream causal references to deleted decisions are removed.", { ids: z3.array(z3.string()).optional(), all: z3.boolean().optional() }, async ({ ids, all }) => {
+    const guard = requireContext();
+    if (guard)
+      return guard;
+    if (!all && (!ids || ids.length === 0))
+      return mcpError("Provide ids or all=true.");
+    try {
+      const current = host.readDecisions(context.userId, scopeKey);
+      const { decisions, removed } = deleteDecisions(current, { ids, all });
+      host.writeDecisions(context.userId, scopeKey, decisions);
+      return mcpOk(`${removed} decision(s) deleted
+
+${renderDecisionList(decisions)}`);
+    } catch (error) {
+      return mcpError(`decision_delete failed: ${errMsg(error)}`);
+    }
+  });
+  return server;
+}
+// ../../packages/core/src/mcp/factories/session-comm.ts
+import { McpServer as McpServer4 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z6 } from "zod";
 
 // ../../packages/core/src/mcp/session-comm/tell-permissions.ts
 await init_spawn_subagent();
@@ -20672,34 +21049,34 @@ function canSubagentTellTargetByName(identity, target) {
 
 // ../../packages/core/src/mcp/factories/session-comm.ts
 function createSessionCommMcpServer(context, host, options = {}) {
-  const server = new McpServer3({ name: "session-comm", version: "2.0.0" });
+  const server = new McpServer4({ name: "session-comm", version: "2.0.0" });
   const required = options.requiredMcpServers?.join(", ") || "none";
   const optional = options.optionalMcpServers?.join(", ") || "none";
   const subagentIdentity = resolveSubagentTellIdentity(context.currentTopicId, context.subagentParentTopicId);
   server.tool("list_sessions", "List available sessions and remote peer sessions for inter-session communication.", {}, async () => host.listSessions(context));
   server.tool("configure_mcp", `Configure optional MCP servers for the current topic. Required: ${required}. Optional: ${optional}.`, {
-    enabled: z5.array(z5.string()).nullable().optional()
+    enabled: z6.array(z6.string()).nullable().optional()
   }, async ({ enabled }) => host.configureMcp(context, enabled));
   server.tool("get_mcp_config", "Get the current topic MCP configuration.", {}, async () => host.getMcpConfig(context));
   if (host.getBrowserProfile) {
     server.tool("get_browser_profile", "Get this topic's browser profile and the profiles owned by the same user.", {}, async () => host.getBrowserProfile(context));
   }
   if (host.setBrowserProfile) {
-    server.tool("set_browser_profile", "Assign this topic to a named shared browser profile. Takes effect next turn.", { profile: z5.string() }, async ({ profile }) => host.setBrowserProfile(context, profile));
+    server.tool("set_browser_profile", "Assign this topic to a named shared browser profile. Takes effect next turn.", { profile: z6.string() }, async ({ profile }) => host.setBrowserProfile(context, profile));
   }
   if (host.deleteBrowserProfile) {
-    server.tool("delete_browser_profile", "Delete an unused named browser profile and its on-disk data. The default or an assigned profile cannot be deleted.", { profile: z5.string() }, async ({ profile }) => host.deleteBrowserProfile(context, profile));
+    server.tool("delete_browser_profile", "Delete an unused named browser profile and its on-disk data. The default or an assigned profile cannot be deleted.", { profile: z6.string() }, async ({ profile }) => host.deleteBrowserProfile(context, profile));
   }
   server.tool("peek_session", "Inspect running and idle sessions, including pending ask_session calls.", {}, async () => host.peekSession(context));
-  server.tool("set_description", "Set the current session description used as a routing hint.", { description: z5.string() }, async ({ description }) => host.setDescription(context, description));
+  server.tool("set_description", "Set the current session description used as a routing hint.", { description: z6.string() }, async ({ description }) => host.setDescription(context, description));
   if (!context.replyOnly) {
     if (!subagentIdentity.restricted) {
-      server.tool("ask_session", "Ask another local or remote session a question and wait for its answer.", { to: z5.string(), message: z5.string() }, async (input) => host.askSession(context, input));
+      server.tool("ask_session", "Ask another local or remote session a question and wait for its answer.", { to: z6.string(), message: z6.string() }, async (input) => host.askSession(context, input));
     }
     if (!subagentIdentity.restricted) {
-      server.tool("abort_session", "Abort the active query in another session.", { to: z5.string() }, async ({ to }) => host.abortSession(context, to));
+      server.tool("abort_session", "Abort the active query in another session.", { to: z6.string() }, async ({ to }) => host.abortSession(context, to));
     }
-    server.tool("tell_session", "Send a one-way message to another local or remote session.", { to: z5.string(), message: z5.string() }, async (input) => {
+    server.tool("tell_session", "Send a one-way message to another local or remote session.", { to: z6.string(), message: z6.string() }, async (input) => {
       if (subagentIdentity.restricted && !canSubagentTellTargetByName(subagentIdentity, input.to)) {
         return {
           content: [
@@ -20737,7 +21114,7 @@ init_mcp_helpers();
 import { execFile } from "child_process";
 import { cpus, freemem, loadavg, totalmem } from "os";
 import { promisify } from "util";
-import { McpServer as McpServer4 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer as McpServer5 } from "@modelcontextprotocol/sdk/server/mcp.js";
 var execFileAsync = promisify(execFile);
 function fmtBytes(bytes) {
   const gb = bytes / 1024 ** 3;
@@ -20830,7 +21207,7 @@ var defaultSystemHealthMcpHost = {
   }
 };
 function createSystemHealthMcpServer(host = defaultSystemHealthMcpHost) {
-  const server = new McpServer4({ name: "system-health", version: "1.0.0" });
+  const server = new McpServer5({ name: "system-health", version: "1.0.0" });
   server.tool("get_system_health", [
     "\uC2DC\uC2A4\uD15C \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
     "- CPU \uBD80\uD558 (load average 1/5/15\uBD84)",
@@ -20863,28 +21240,28 @@ function createSystemHealthMcpServer(host = defaultSystemHealthMcpHost) {
 // ../../packages/core/src/mcp/factories/task.ts
 await init_tasks();
 init_mcp_helpers();
-import { McpServer as McpServer5 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z6 } from "zod";
+import { McpServer as McpServer6 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z7 } from "zod";
 var defaultTaskMcpHost = {
   readTasks,
   writeTasks
 };
 function createTaskMcpServer(context, host = defaultTaskMcpHost) {
   const scopeKey = context.topic ? taskScopeKey({ topicId: context.topicId, session: context.topic }) : "";
-  const server = new McpServer5({ name: "task", version: "1.0.0" });
+  const server = new McpServer6({ name: "task", version: "1.0.0" });
   const requireContext = () => {
     if (!context.userId || !scopeKey) {
       return mcpError("Error: missing userId/topic context.");
     }
     return null;
   };
-  const statusEnum = z6.enum(TASK_STATUS_VALUES);
+  const statusEnum = z7.enum(TASK_STATUS_VALUES);
   server.tool("task_create", "Add one or more tasks to this topic's shared Otium task list. Use this instead of provider-native todo/task tools.", {
-    tasks: z6.array(z6.object({
-      subject: z6.string().min(1).describe("Short imperative task description"),
-      active_form: z6.string().optional().describe("Label to show while the task is in progress"),
-      blocked_by: z6.array(z6.string()).optional().describe("Task ids blocking this task"),
-      owner: z6.string().optional().describe("Owner/agent label for multi-agent work")
+    tasks: z7.array(z7.object({
+      subject: z7.string().min(1).describe("Short imperative task description"),
+      active_form: z7.string().optional().describe("Label to show while the task is in progress"),
+      blocked_by: z7.array(z7.string()).optional().describe("Task ids blocking this task"),
+      owner: z7.string().optional().describe("Owner/agent label for multi-agent work")
     })).min(1)
   }, async ({ tasks: inputs }) => {
     const guard = requireContext();
@@ -20908,13 +21285,13 @@ ${renderTaskList(tasks2)}`);
     }
   });
   server.tool("task_update", "Update task status/content in this topic's shared Otium task list. Batch related status changes in one call.", {
-    updates: z6.array(z6.object({
-      id: z6.string().describe("Target task id"),
+    updates: z7.array(z7.object({
+      id: z7.string().describe("Target task id"),
       status: statusEnum.optional().describe("New status"),
-      subject: z6.string().min(1).optional().describe("Replacement task description"),
-      active_form: z6.string().optional().describe("Replacement in-progress label; empty string clears it"),
-      blocked_by: z6.array(z6.string()).optional().describe("Replacement blocker id list"),
-      owner: z6.string().optional().describe("Replacement owner; empty string clears it")
+      subject: z7.string().min(1).optional().describe("Replacement task description"),
+      active_form: z7.string().optional().describe("Replacement in-progress label; empty string clears it"),
+      blocked_by: z7.array(z7.string()).optional().describe("Replacement blocker id list"),
+      owner: z7.string().optional().describe("Replacement owner; empty string clears it")
     })).min(1)
   }, async ({ updates }) => {
     const guard = requireContext();
@@ -20948,7 +21325,7 @@ Missing ids ignored: ${missing.join(", ")}` : "";
       return mcpError(`task_list failed: ${errMsg(error)}`);
     }
   });
-  server.tool("task_get", "Read one task from this topic's shared Otium task list as JSON.", { id: z6.string().describe("Task id") }, async ({ id }) => {
+  server.tool("task_get", "Read one task from this topic's shared Otium task list as JSON.", { id: z7.string().describe("Task id") }, async ({ id }) => {
     const guard = requireContext();
     if (guard)
       return guard;
@@ -20962,8 +21339,8 @@ Missing ids ignored: ${missing.join(", ")}` : "";
     }
   });
   server.tool("task_delete", "Delete tasks from this topic's shared Otium task list. Use all=true only when starting a new plan.", {
-    ids: z6.array(z6.string()).optional().describe("Task ids to delete"),
-    all: z6.boolean().optional().describe("Delete the whole list")
+    ids: z7.array(z7.string()).optional().describe("Task ids to delete"),
+    all: z7.boolean().optional().describe("Delete the whole list")
   }, async ({ ids, all }) => {
     const guard = requireContext();
     if (guard)
@@ -20985,8 +21362,8 @@ ${renderTaskList(tasks2)}`);
 }
 // ../../packages/core/src/mcp/factories/token-stats.ts
 await init_token_stats();
-import { McpServer as McpServer6 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z7 } from "zod";
+import { McpServer as McpServer7 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z8 } from "zod";
 var defaultTokenStatsMcpHost = {
   getStats,
   calcCost
@@ -20994,7 +21371,7 @@ var defaultTokenStatsMcpHost = {
 function createTokenStatsMcpServer(context, host = defaultTokenStatsMcpHost) {
   if (!context.userId)
     throw new Error("token-stats MCP requires userId");
-  const server = new McpServer6({ name: "token-stats", version: "1.0.0" });
+  const server = new McpServer7({ name: "token-stats", version: "1.0.0" });
   server.tool("get_usage_stats", [
     "Claude/Codex/Maestro \uC0AC\uC6A9\uB7C9\uACFC provider session\uC758 \uCD5C\uC2E0 context \uC810\uC720\uC728\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4. \uD604\uC7AC \uC2E4\uD589 \uC911\uC778 turn\uC740 \uC644\uB8CC \uD6C4 \uC9D1\uACC4\uB429\uB2C8\uB2E4.",
     "",
@@ -21006,9 +21383,9 @@ function createTokenStatsMcpServer(context, host = defaultTokenStatsMcpHost) {
     "groupBy: 'session'\uC73C\uB85C \uC124\uC815\uD558\uBA74 \uC138\uC158\uBCC4 \uD1A0\uD070 \uC0AC\uC6A9\uB7C9 \uB7AD\uD0B9\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4."
   ].join(`
 `), {
-    from: z7.string().optional().describe("\uC2DC\uC791 \uC2DC\uAC01 ISO 8601. \uC608: '2026-03-28T09:00:00Z'"),
-    to: z7.string().optional().describe("\uC885\uB8CC \uC2DC\uAC01 ISO 8601. \uC0DD\uB7B5 \uC2DC \uD604\uC7AC"),
-    groupBy: z7.enum(["hour", "session"]).optional().describe("\uC9D1\uACC4 \uAE30\uC900. \uAE30\uBCF8\uAC12: hour")
+    from: z8.string().optional().describe("\uC2DC\uC791 \uC2DC\uAC01 ISO 8601. \uC608: '2026-03-28T09:00:00Z'"),
+    to: z8.string().optional().describe("\uC885\uB8CC \uC2DC\uAC01 ISO 8601. \uC0DD\uB7B5 \uC2DC \uD604\uC7AC"),
+    groupBy: z8.enum(["hour", "session"]).optional().describe("\uC9D1\uACC4 \uAE30\uC900. \uAE30\uBCF8\uAC12: hour")
   }, async ({ from, to, groupBy = "hour" }) => {
     const snapshot = host.getStats(context.userId, from, to);
     const {
@@ -21082,11 +21459,11 @@ function createTokenStatsMcpServer(context, host = defaultTokenStatsMcpHost) {
   return server;
 }
 // ../../packages/core/src/mcp/factories/vault.ts
-import { McpServer as McpServer7 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z8 } from "zod";
+import { McpServer as McpServer8 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z as z9 } from "zod";
 init_mcp_helpers();
 function createVaultMcpServer(context, host, executors = {}) {
-  const server = new McpServer7({ name: "vault", version: "1.0.0" });
+  const server = new McpServer8({ name: "vault", version: "1.0.0" });
   const run = executors.run ?? executeVaultRun;
   const http = executors.http ?? executeVaultHttpRequest;
   server.tool("vault_list", context.httpOnly ? "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for HTTPS APIs that need a credential." : "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for APIs and vault_run for shell/CLI work that needs a credential.", {}, () => {
@@ -21102,9 +21479,9 @@ ${lines.join(`
   });
   if (!context.listOnly && !context.httpOnly) {
     server.tool("vault_run", "Run a shell command containing {{KEY}} references inside Otium's credential broker. Expanded command input never reaches the model/provider, and stdout/stderr are redacted before return. Prefer vault_http_request for HTTP APIs.", {
-      command: z8.string().min(1).max(64 * 1024),
-      timeout_ms: z8.number().int().min(1000).max(600000).optional(),
-      max_output_bytes: z8.number().int().min(1024).max(2 * 1024 * 1024).optional()
+      command: z9.string().min(1).max(64 * 1024),
+      timeout_ms: z9.number().int().min(1000).max(600000).optional(),
+      max_output_bytes: z9.number().int().min(1024).max(2 * 1024 * 1024).optional()
     }, async ({ command, timeout_ms, max_output_bytes }) => {
       if (!context.userId)
         return mcpError("Vault unavailable: no user context");
@@ -21119,12 +21496,12 @@ ${lines.join(`
   }
   if (!context.listOnly)
     server.tool("vault_http_request", "Make an HTTPS request with {{KEY}} references resolved inside Otium. Put secrets in headers or body, never in the URL. The expanded request is not returned; the response is redacted before the model sees it.", {
-      method: z8.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).default("GET"),
-      url: z8.string().url().describe("Absolute HTTPS URL without Vault placeholders"),
-      headers: z8.record(z8.string(), z8.string()).optional(),
-      body: z8.string().optional(),
-      timeout_ms: z8.number().int().min(1000).max(120000).optional(),
-      max_response_bytes: z8.number().int().min(1024).max(1024 * 1024).optional()
+      method: z9.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).default("GET"),
+      url: z9.string().url().describe("Absolute HTTPS URL without Vault placeholders"),
+      headers: z9.record(z9.string(), z9.string()).optional(),
+      body: z9.string().optional(),
+      timeout_ms: z9.number().int().min(1000).max(120000).optional(),
+      max_response_bytes: z9.number().int().min(1024).max(1024 * 1024).optional()
     }, async ({ method, url, headers, body, timeout_ms, max_response_bytes }) => {
       if (!context.userId)
         return mcpError("Vault unavailable: no user context");
@@ -21148,6 +21525,7 @@ export {
   defaultTokenStatsMcpHost,
   defaultTaskMcpHost,
   defaultSystemHealthMcpHost,
+  defaultDecisionMcpHost,
   createWikiMcpServer,
   createVaultMcpServer,
   createTokenStatsMcpServer,
@@ -21155,8 +21533,9 @@ export {
   createSystemHealthMcpServer,
   createSessionTargetCatalog,
   createSessionCommMcpServer,
+  createDecisionMcpServer,
   createCompactionLogMcpServer,
   createAgentHealthMcpServer
 };
 
-//# debugId=71C4DD8A3EF6D5BE64756E2164756E21
+//# debugId=A4B482066B2CF06D64756E2164756E21