negotium 0.3.13 → 0.4.0

package/dist/mcp-factories.js

@@ -1017,10 +1017,10 @@ var init_claude_registry = __esm(() => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.3.13";
+var NEGOTIUM_VERSION = "0.4.0";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
-import { spawn as spawn2 } from "child_process";
+import { spawn } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
 import {
   chmodSync as chmodSync3,
@@ -1088,7 +1088,7 @@ function bundledCodexModelCachePath(authFilePath) {
   return join5(dirname4(authFilePath), NEGOTIUM_MODEL_CACHE);
 }
 async function bootstrapCodexModelCache(codexHome, cachePath) {
-  const child = spawn2(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
+  const child = spawn(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
     env: { ...process.env, CODEX_HOME: codexHome },
     stdio: ["pipe", "pipe", "pipe"]
   });
@@ -1287,30 +1287,21 @@ function shouldSubstituteVaultToolInput(toolName) {
   const leaf = leafToolName(toolName);
   return leaf.startsWith("browser_") || DIRECT_VAULT_EXECUTION_TOOLS.has(leaf);
 }
-function createVaultToolPolicy(host) {
-  function isVaultBrokerTool(toolName) {
-    return toolName.includes("vault_run") || toolName.includes("vault_http_request");
-  }
-  function referencesRuntimeSecretStorage(value2) {
-    if (typeof value2 === "string") {
-      const lower = value2.toLowerCase();
-      if (SENSITIVE_RUNTIME_NAMES.some((name) => lower.includes(name)))
-        return true;
-      return value2.startsWith("/") && host.isSensitivePath(value2);
-    }
-    if (Array.isArray(value2))
-      return value2.some(referencesRuntimeSecretStorage);
-    if (value2 && typeof value2 === "object") {
-      return Object.values(value2).some(referencesRuntimeSecretStorage);
-    }
-    return false;
+function referencesRuntimeSecretStorage(value2) {
+  if (typeof value2 === "string") {
+    const lower = value2.toLowerCase();
+    if (SENSITIVE_RUNTIME_NAMES.some((name) => lower.includes(name)))
+      return true;
+    return value2.startsWith("/") && isSensitivePath(value2);
   }
-  function shouldRedirectVaultTool(userId, toolName, input) {
-    return false;
+  if (Array.isArray(value2))
+    return value2.some(referencesRuntimeSecretStorage);
+  if (value2 && typeof value2 === "object") {
+    return Object.values(value2).some(referencesRuntimeSecretStorage);
   }
-  return { isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool };
+  return false;
 }
-var SENSITIVE_RUNTIME_NAMES, DIRECT_VAULT_EXECUTION_TOOLS, defaultVaultToolPolicy, isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool;
+var SENSITIVE_RUNTIME_NAMES, DIRECT_VAULT_EXECUTION_TOOLS;
 var init_vault_tool_policy = __esm(() => {
   init_sensitive_path();
   SENSITIVE_RUNTIME_NAMES = [
@@ -1320,13 +1311,6 @@ var init_vault_tool_policy = __esm(() => {
     "sessions.db"
   ];
   DIRECT_VAULT_EXECUTION_TOOLS = new Set(["Bash", "WebFetch"]);
-  defaultVaultToolPolicy = createVaultToolPolicy({
-    isSensitivePath,
-    valueReferencesVaultKey: () => false
-  });
-  isVaultBrokerTool = defaultVaultToolPolicy.isVaultBrokerTool;
-  referencesRuntimeSecretStorage = defaultVaultToolPolicy.referencesRuntimeSecretStorage;
-  shouldRedirectVaultTool = defaultVaultToolPolicy.shouldRedirectVaultTool;
 });
 
 // ../../packages/core/src/mcp/canonical-bridge-config.ts
@@ -1489,7 +1473,7 @@ function deriveBgBashContextCapability(runtimeCapability, userId, topic) {
 var init_context = () => {};
 
 // ../../packages/core/src/platform/background-bash/manager.ts
-import { execFileSync as execFileSync2, spawn as spawn3 } from "child_process";
+import { execFileSync as execFileSync2, spawn as spawn2 } from "child_process";
 import { randomBytes as randomBytes2 } from "crypto";
 function makeBgBashKey(_userId, _topic) {
   return "runtime";
@@ -1516,7 +1500,7 @@ function createBackgroundBashManager(options = {}) {
   const now = options.now ?? Date.now;
   const wait = options.delay ?? delay;
   const portPids = options.portPids ?? defaultPortPids;
-  const spawnImpl = options.spawn ?? ((command, args, spawnOptions) => spawn3(command, [...args], spawnOptions));
+  const spawnImpl = options.spawn ?? ((command, args, spawnOptions) => spawn2(command, [...args], spawnOptions));
   function contextKey(userId, topic) {
     return `${userId}\x00${topic}`;
   }
@@ -2688,7 +2672,6 @@ var init_execution_host = __esm(async () => {
     redactVaultSecrets,
     substituteVaultSecrets: (userId, value2) => vaultSubstituteDetailed(userId, value2).text,
     referencesRuntimeSecretStorage,
-    shouldRedirectVaultTool,
     claudeCodeExecutablePath: () => CLAUDE_EXECUTABLE,
     codexAuthFilePath
   };
@@ -3231,7 +3214,7 @@ var init_codex = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/codex-app-server.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 function createCodexAppServerForker(host) {
   return async (parentThreadId) => {
     const child = host.spawnServer();
@@ -3335,7 +3318,7 @@ var init_codex_app_server = __esm(async () => {
   await init_codex();
   forkCodexThread = createCodexAppServerForker({
     spawnServer() {
-      return spawn4(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
+      return spawn3(process.execPath, [codexCliScriptPath(), "app-server", "--stdio"], {
         env: { ...process.env, CODEX_HOME: hostedCodexHomePath() },
         stdio: ["pipe", "pipe", "pipe"]
       });
@@ -6265,7 +6248,7 @@ var init_browser_profiles = __esm(async () => {
 });
 
 // ../../packages/core/src/platform/playwright/manager.ts
-import { execFileSync as execFileSync4, spawn as spawn6 } from "child_process";
+import { execFileSync as execFileSync4, spawn as spawn5 } from "child_process";
 import { createHash as createHash3, randomBytes as randomBytes6, timingSafeEqual as timingSafeEqual3 } from "crypto";
 import {
   cpSync,
@@ -6625,7 +6608,7 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
   }
   let proc;
   try {
-    proc = spawn6(spawnSpec.command, spawnSpec.args, {
+    proc = spawn5(spawnSpec.command, spawnSpec.args, {
       stdio: ["ignore", "ignore", "pipe"],
       detached: false,
       env: childEnv
@@ -7939,7 +7922,7 @@ __export(exports_claude_provider, {
   claudeBuiltInTools: () => claudeBuiltInTools,
   buildClaudeDisallowedTools: () => buildClaudeDisallowedTools
 });
-import { spawn as spawn7 } from "child_process";
+import { spawn as spawn6 } from "child_process";
 import { existsSync as existsSync16, readFileSync as readFileSync14 } from "fs";
 import { query } from "@anthropic-ai/claude-agent-sdk";
 function claudeBuiltInTools(opts) {
@@ -8031,7 +8014,7 @@ function signalProcessTree2(pid, signal) {
   }
 }
 function spawnClaudeCodeProcessWithTreeKill(options) {
-  const child = spawn7(options.command, options.args, {
+  const child = spawn6(options.command, options.args, {
     cwd: options.cwd,
     detached: true,
     env: options.env,
@@ -8640,9 +8623,163 @@ var init_codex_tree_kill = __esm(() => {
   killOwnedCodexTreesForShutdown = manager.killOwnedTreesForShutdown;
 });
 
+// ../../packages/core/src/agents/codex-vault-hook-bridge.ts
+import { randomBytes as randomBytes7 } from "crypto";
+import { existsSync as existsSync17 } from "fs";
+import { chmod, mkdtemp, rm, writeFile } from "fs/promises";
+import { createServer as createServer3 } from "net";
+import { tmpdir as tmpdir3 } from "os";
+import { dirname as dirname12, join as join17, resolve as resolve11 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function evaluateCodexVaultPreToolUse(input, userId, operations) {
+  if (operations.referencesSensitiveStorage(input.tool_input)) {
+    return {
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "deny",
+        permissionDecisionReason: SENSITIVE_STORAGE_DENIAL
+      }
+    };
+  }
+  if (!shouldSubstituteVaultToolInput(input.tool_name))
+    return {};
+  const updatedInput = deepMapStrings2(input.tool_input, (value2) => operations.substitute(userId, value2));
+  if (JSON.stringify(updatedInput) === JSON.stringify(input.tool_input))
+    return {};
+  return {
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "allow",
+      updatedInput
+    }
+  };
+}
+function shellQuote(value2) {
+  return `'${value2.replaceAll("'", `'"'"'`)}'`;
+}
+function hookClientPath() {
+  const moduleDir = dirname12(fileURLToPath2(import.meta.url));
+  const adjacent = resolve11(moduleDir, "codex-vault-hook.mjs");
+  if (existsSync17(adjacent))
+    return adjacent;
+  const packaged = resolve11(moduleDir, "runtime/src/agents/codex-vault-hook.mjs");
+  if (existsSync17(packaged))
+    return packaged;
+  throw new Error("Codex Vault hook client is missing from this installation");
+}
+function privateCodexWrapper(codexScript) {
+  return [
+    "#!/bin/sh",
+    'if [ "$1" = "exec" ]; then',
+    "  shift",
+    `  exec ${shellQuote(process.execPath)} ${shellQuote(codexScript)} exec --dangerously-bypass-hook-trust "$@"`,
+    "fi",
+    `exec ${shellQuote(process.execPath)} ${shellQuote(codexScript)} "$@"`,
+    ""
+  ].join(`
+`);
+}
+async function createCodexVaultHookBridge(userId) {
+  const root = await mkdtemp(join17(tmpdir3(), "negotium-codex-vault-"));
+  await chmod(root, 448);
+  const socketPath = join17(root, "hook.sock");
+  const wrapperPath = join17(root, "codex-with-hooks");
+  const token = randomBytes7(32).toString("hex");
+  const connections = new Set;
+  const server = createServer3((socket) => {
+    connections.add(socket);
+    socket.once("close", () => connections.delete(socket));
+    socket.setEncoding("utf8");
+    let request = "";
+    let handled = false;
+    const handleRequest = () => {
+      if (handled)
+        return;
+      handled = true;
+      try {
+        const parsed = JSON.parse(request.trimEnd());
+        if (parsed.token !== token)
+          throw new Error("invalid hook capability");
+        if (!parsed.input || typeof parsed.input !== "object" || typeof parsed.input.tool_name !== "string") {
+          throw new Error("invalid PreToolUse payload");
+        }
+        const output = evaluateCodexVaultPreToolUse(parsed.input, userId, {
+          referencesSensitiveStorage: referencesHostedSecretStorage,
+          substitute: substituteHostedSecrets
+        });
+        socket.end(JSON.stringify({ ok: true, output }));
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        socket.end(JSON.stringify({ ok: false, error: message }));
+      }
+    };
+    socket.on("data", (chunk) => {
+      request += chunk;
+      if (Buffer.byteLength(request) > MAX_HOOK_REQUEST_BYTES)
+        socket.destroy();
+      else if (request.endsWith(`
+`))
+        handleRequest();
+    });
+    socket.on("end", handleRequest);
+  });
+  try {
+    await new Promise((resolveListen, reject) => {
+      server.once("error", reject);
+      server.listen(socketPath, () => {
+        server.off("error", reject);
+        resolveListen();
+      });
+    });
+    await chmod(socketPath, 384);
+    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath()), { mode: 448 });
+    const command = [
+      shellQuote(process.execPath),
+      shellQuote(hookClientPath()),
+      shellQuote(socketPath),
+      shellQuote(token)
+    ].join(" ");
+    return {
+      codexPathOverride: wrapperPath,
+      hooks: {
+        PreToolUse: [
+          {
+            matcher: "*",
+            hooks: [
+              {
+                type: "command",
+                command,
+                timeout: 30,
+                statusMessage: "Resolving Vault placeholders"
+              }
+            ]
+          }
+        ]
+      },
+      async close() {
+        for (const socket of connections)
+          socket.destroy();
+        await new Promise((resolveClose) => server.close(() => resolveClose()));
+        await rm(root, { recursive: true, force: true });
+      }
+    };
+  } catch (error) {
+    server.close();
+    await rm(root, { recursive: true, force: true });
+    throw error;
+  }
+}
+var MAX_HOOK_REQUEST_BYTES, SENSITIVE_STORAGE_DENIAL = "Runtime secret storage access is not permitted";
+var init_codex_vault_hook_bridge = __esm(async () => {
+  init_codex_native_multi_agent();
+  await init_execution_host();
+  init_vault_tool_policy();
+  MAX_HOOK_REQUEST_BYTES = 1024 * 1024;
+});
+
 // ../../packages/core/src/agents/tool-format.ts
 import { readFileSync as readFileSync15, statSync as statSync5 } from "fs";
-import { isAbsolute as isAbsolute2, resolve as resolve11 } from "path";
+import { isAbsolute as isAbsolute2, resolve as resolve12 } from "path";
 import { diffLines as computeLineDiff } from "diff";
 function summarizeDisplayText(value2) {
   const normalized = value2.replace(/\s+/g, " ").trim();
@@ -8966,7 +9103,7 @@ function sourceStartLine(input, before, after, cwd) {
   const rawPath = input.file_path ?? input.path;
   if (typeof rawPath !== "string" || !rawPath.trim())
     return 1;
-  const path = isAbsolute2(rawPath) ? rawPath : resolve11(cwd ?? process.cwd(), rawPath);
+  const path = isAbsolute2(rawPath) ? rawPath : resolve12(cwd ?? process.cwd(), rawPath);
   try {
     if (statSync5(path).size > TOOL_DIFF_SOURCE_MAX_BYTES)
       return 1;
@@ -9164,9 +9301,9 @@ __export(exports_codex_provider, {
   codexProvider: () => codexProvider
 });
 import { execFileSync as execFileSync6 } from "child_process";
-import { existsSync as existsSync17, readFileSync as readFileSync16, realpathSync as realpathSync4, statSync as statSync6 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync16, realpathSync as realpathSync4, statSync as statSync6 } from "fs";
 import { homedir as homedir6 } from "os";
-import { dirname as dirname12, isAbsolute as isAbsolute3, join as join17, relative as relative2, resolve as resolve12 } from "path";
+import { dirname as dirname13, isAbsolute as isAbsolute3, join as join18, relative as relative2, resolve as resolve13 } from "path";
 import { Codex } from "@openai/codex-sdk";
 function sameCodexUsage(usage, total) {
   return usage.input_tokens === total.inputTokens && usage.output_tokens === total.outputTokens && (usage.cached_input_tokens ?? 0) === total.cachedInputTokens && (usage.cache_write_input_tokens ?? 0) === total.cacheWriteInputTokens;
@@ -9194,8 +9331,8 @@ function codexMcpServerName(name) {
   return CODEX_MCP_SERVER_NAME_OVERRIDES[name] ?? name;
 }
 function globalCodexMcpServerNames(authFilePath) {
-  const configPath = join17(dirname12(authFilePath), "config.toml");
-  if (!existsSync17(configPath))
+  const configPath = join18(dirname13(authFilePath), "config.toml");
+  if (!existsSync18(configPath))
     return [];
   try {
     const names = new Set;
@@ -9290,13 +9427,13 @@ function summarizeMcpToolCallResult(item) {
 }
 function canonicalPath(path) {
   try {
-    return realpathSync4(resolve12(path));
+    return realpathSync4(resolve13(path));
   } catch {
-    return resolve12(path);
+    return resolve13(path);
   }
 }
 function textFile(path, maxBytes = CODEX_DIFF_FILE_LIMIT) {
-  if (!existsSync17(path))
+  if (!existsSync18(path))
     return null;
   try {
     const byteLimit = Math.min(CODEX_DIFF_FILE_LIMIT, Math.max(0, maxBytes));
@@ -9336,7 +9473,7 @@ class CodexFilePreviewTracker {
       const code = record.slice(0, 2);
       const path = record.slice(3);
       const remainingBytes = CODEX_DIFF_BASELINE_BYTE_LIMIT - loadedBytes;
-      const content = loadedFiles < CODEX_DIFF_BASELINE_FILE_LIMIT && remainingBytes > 0 ? textFile(resolve12(this.#root, path), remainingBytes) : undefined;
+      const content = loadedFiles < CODEX_DIFF_BASELINE_FILE_LIMIT && remainingBytes > 0 ? textFile(resolve13(this.#root, path), remainingBytes) : undefined;
       this.#baseline.set(path, content);
       if (typeof content === "string") {
         loadedFiles += 1;
@@ -9349,7 +9486,7 @@ class CodexFilePreviewTracker {
   preview(path, succeeded) {
     if (!this.#root || !this.#baselineAvailable || !succeeded)
       return {};
-    const absolute = canonicalPath(isAbsolute3(path) ? path : resolve12(this.#cwd, path));
+    const absolute = canonicalPath(isAbsolute3(path) ? path : resolve13(this.#cwd, path));
     const relativePath = relative2(this.#root, absolute);
     if (!relativePath || relativePath.startsWith("..") || isAbsolute3(relativePath))
       return {};
@@ -9384,7 +9521,7 @@ class CodexFilePreviewTracker {
   }
 }
 async function fileChangeEvents(item, previews, cwd, threadId, consumedPatchCallIds) {
-  const expectedPaths = item.changes.map((change) => isAbsolute3(change.path) ? change.path : resolve12(cwd, change.path));
+  const expectedPaths = item.changes.map((change) => isAbsolute3(change.path) ? change.path : resolve13(cwd, change.path));
   let nativePreview;
   if (threadId && item.status === "completed") {
     await new Promise((resolveDelay) => setTimeout(resolveDelay, 20));
@@ -9508,7 +9645,7 @@ async function* codexProvider(opts) {
   const filePreviews = new CodexFilePreviewTracker(opts.cwd);
   const consumedPatchCallIds = new Set(opts.sessionId ? readCodexPatchCallIds(opts.sessionId) : []);
   const codexAuthPath = hostedCodexAuthFilePath();
-  if (!existsSync17(codexAuthPath)) {
+  if (!existsSync18(codexAuthPath)) {
     yield {
       type: "error",
       content: `Codex auth file not found at ${codexAuthPath}. Run \`codex login\` to authenticate.`
@@ -9547,21 +9684,30 @@ async function* codexProvider(opts) {
     model: opts.model ?? "(sdk default)",
     effort: opts.effort ?? "(off)",
     cwd: opts.cwd,
-    cwdExists: existsSync17(opts.cwd),
+    cwdExists: existsSync18(opts.cwd),
     resume: Boolean(opts.sessionId),
     mcpServerCount: Object.keys(codexMcpServers).length
   }, "codexProvider: starting turn");
   const hostedCodexHome = hostedCodexHomePath();
-  const inheritedCodexHome = process.env.CODEX_HOME || join17(homedir6(), ".codex");
-  const codexEnvironment = scopedBrowserCapability || resolve12(hostedCodexHome) !== resolve12(inheritedCodexHome) ? {
+  const inheritedCodexHome = process.env.CODEX_HOME || join18(homedir6(), ".codex");
+  const codexEnvironment = scopedBrowserCapability || resolve13(hostedCodexHome) !== resolve13(inheritedCodexHome) ? {
     ...Object.fromEntries(Object.entries(process.env).filter((entry) => typeof entry[1] === "string")),
     CODEX_HOME: hostedCodexHome,
     ...scopedBrowserCapability ? { [CODEX_BROWSER_CAPABILITY_ENV]: scopedBrowserCapability } : {}
   } : undefined;
+  let vaultHook;
+  try {
+    vaultHook = await createCodexVaultHookBridge(opts.vaultUserId ?? opts.userId ?? "");
+  } catch (err) {
+    yield { type: "error", content: `Failed to initialize Codex Vault hooks: ${errMsg(err)}` };
+    return;
+  }
   const codex = new Codex({
+    codexPathOverride: vaultHook.codexPathOverride,
     ...codexEnvironment ? { env: codexEnvironment } : {},
     config: {
-      features: { multi_agent: false, multi_agent_v2: false, enable_fanout: false },
+      features: { hooks: true, multi_agent: false, multi_agent_v2: false, enable_fanout: false },
+      hooks: vaultHook.hooks,
       model_catalog_json: codexModelCatalogPath,
       mcp_servers: codexMcpServers,
       ...opts.toolPolicy ? { sandbox_permissions: [] } : {}
@@ -9665,7 +9811,7 @@ async function* codexProvider(opts) {
               if (!item)
                 break;
               if (item.type === "command_execution") {
-                const command = String(item.command ?? "");
+                const command = redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", String(item.command ?? ""));
                 yield {
                   type: "tool_use",
                   name: "Bash",
@@ -9673,10 +9819,11 @@ async function* codexProvider(opts) {
                   toolUseId: String(item.id ?? "")
                 };
               } else if (item.type === "mcp_tool_call") {
+                const input = item.arguments && typeof item.arguments === "object" ? item.arguments : {};
                 yield {
                   type: "tool_use",
                   name: String(item.tool ?? "unknown"),
-                  input: item.arguments && typeof item.arguments === "object" ? item.arguments : {},
+                  input: deepMapStrings2(input, (value2) => redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", value2)),
                   toolUseId: String(item.id ?? "")
                 };
               }
@@ -9719,7 +9866,7 @@ async function* codexProvider(opts) {
                 yield {
                   type: "tool_result",
                   toolUseId: String(item.id ?? ""),
-                  content: summarizeMcpToolCallResult(item),
+                  content: redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", summarizeMcpToolCallResult(item)),
                   ...isError ? { isError: true } : {}
                 };
               } else if (item.type === "command_execution") {
@@ -9727,7 +9874,7 @@ async function* codexProvider(opts) {
                 yield {
                   type: "tool_result",
                   toolUseId: String(item.id ?? ""),
-                  content: String(item.aggregated_output ?? "").slice(0, 200),
+                  content: redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", String(item.aggregated_output ?? "").slice(0, 200)),
                   ...isError ? { isError: true } : {}
                 };
               } else if (item.type === "file_change") {
@@ -9824,12 +9971,14 @@ async function* codexProvider(opts) {
     abortSignal?.removeEventListener("abort", onAbortKill);
     if (trackedPids.pids.length > 0)
       unregisterOwnedCodexPids(trackedPids.pids);
+    await vaultHook.close();
   }
 }
 var CODEX_MCP_SERVER_NAME_OVERRIDES, CODEX_DIFF_FILE_LIMIT, CODEX_DIFF_BASELINE_FILE_LIMIT = 200, CODEX_DIFF_BASELINE_BYTE_LIMIT, CODEX_STARTUP_TIMEOUT_MS = 90000;
 var init_codex_provider = __esm(async () => {
   init_codex_native_multi_agent();
   init_codex_tree_kill();
+  await init_codex_vault_hook_bridge();
   await init_execution_host();
   await init_codex();
   init_tool_format();
@@ -9857,7 +10006,7 @@ __export(exports_maestro_provider, {
   buildMaestroToolHooks: () => buildMaestroToolHooks,
   buildMaestroDisallowedTools: () => buildMaestroDisallowedTools
 });
-import { resolve as resolve13 } from "path";
+import { resolve as resolve14 } from "path";
 import { maestroProvider as sdkMaestroProvider, setMcpResolver } from "maestro-agent-sdk";
 function buildMaestroDisallowedTools(callerDisallowedTools = [], toolPolicy) {
   return [
@@ -9991,13 +10140,13 @@ var init_maestro_provider = __esm(async () => {
     "ToolSearch",
     ...DEFAULT_MAESTRO_DISALLOWED_TOOLS
   ];
-  MAESTRO_TOOL_OUTPUT_DIR = resolve13(RUN_DIR, "maestro-tool-outputs");
+  MAESTRO_TOOL_OUTPUT_DIR = resolve14(RUN_DIR, "maestro-tool-outputs");
 });
 
 // ../../packages/core/src/agents/index.ts
-import { existsSync as existsSync18 } from "fs";
+import { existsSync as existsSync19 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 async function* dispatchAgent(opts) {
   switch (opts.agent) {
     case "claude": {
@@ -10031,11 +10180,11 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
   switch (agent) {
     case "claude": {
       const encodedCwd = encodeClaudeCwd(cwd);
-      const path = join18(homedir7(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
-      return !existsSync18(path);
+      const path = join19(homedir7(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
+      return !existsSync19(path);
     }
     case "codex": {
-      const sessionsDir = join18(hostedCodexHomePath(), "sessions");
+      const sessionsDir = join19(hostedCodexHomePath(), "sessions");
       const glob = new Bun.Glob(`**/rollout-*-${sessionId}.jsonl`);
       for await (const _rel of glob.scan({ cwd: sessionsDir, onlyFiles: true })) {
         return false;
@@ -10044,7 +10193,7 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
     }
     case "maestro": {
       const { hasActiveMaestroSession, maestroSessionPath: maestroSessionPath2 } = await import("maestro-agent-sdk");
-      return !existsSync18(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
+      return !existsSync19(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
     }
     default: {
       const _exhaustive = agent;
@@ -10116,9 +10265,9 @@ var init_agents = __esm(async () => {
 
 // ../../packages/core/src/prompts/builders.ts
 import { readFileSync as readFileSync17 } from "fs";
-import { resolve as resolve14 } from "path";
+import { resolve as resolve15 } from "path";
 function loadPrompt(filename, dir = SESSIONS_DIR) {
-  const raw = readFileSync17(resolve14(dir, filename), "utf-8");
+  const raw = readFileSync17(resolve15(dir, filename), "utf-8");
   return raw.replace(/\{\{RESOURCES_DIR\}\}/g, RESOURCES_DIR);
 }
 function replaceVars(template, vars) {
@@ -10167,7 +10316,7 @@ function visualDesignGuide() {
   return _visualDesignGuide;
 }
 function loadAgentPrompt(filename) {
-  const raw = readFileSync17(resolve14(AGENTS_PROMPTS_DIR, filename), "utf-8");
+  const raw = readFileSync17(resolve15(AGENTS_PROMPTS_DIR, filename), "utf-8");
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match)
     throw new Error(`Agent prompt ${filename} is missing frontmatter`);
@@ -10482,8 +10631,8 @@ var init_builders = __esm(() => {
   init_model_catalog();
   init_config();
   init_logger();
-  PROMPTS_DIR = resolve14(PROJECT_ROOT, "src/prompts");
-  SESSIONS_DIR = resolve14(PROMPTS_DIR, "sessions");
+  PROMPTS_DIR = resolve15(PROJECT_ROOT, "src/prompts");
+  SESSIONS_DIR = resolve15(PROMPTS_DIR, "sessions");
   defaultPromptBuilders = createPromptBuilders();
   buildTopicSystemPrompt = defaultPromptBuilders.buildTopicSystemPrompt;
   buildChannelSystemPrompt = defaultPromptBuilders.buildChannelSystemPrompt;
@@ -10559,9 +10708,9 @@ var init_api_topic_brief = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/wiki.ts
-import { basename as basename3, dirname as dirname13, join as join19 } from "path";
+import { basename as basename3, dirname as dirname14, join as join20 } from "path";
 function getSharedWikiDir(workspaceDir = resolveStorageWorkspaceDir()) {
-  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join19(workspaceDir, "wiki");
+  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join20(workspaceDir, "wiki");
 }
 var init_wiki = __esm(async () => {
   await init_storage_host();
@@ -10569,8 +10718,8 @@ var init_wiki = __esm(async () => {
 
 // ../../packages/core/src/agents/archiver.ts
 import { randomUUID as randomUUID9 } from "crypto";
-import { existsSync as existsSync19, readdirSync as readdirSync5, readFileSync as readFileSync18, statSync as statSync7 } from "fs";
-import { join as join20 } from "path";
+import { existsSync as existsSync20, readdirSync as readdirSync5, readFileSync as readFileSync18, statSync as statSync7 } from "fs";
+import { join as join21 } from "path";
 function resolveMemoryLanguage() {
   const override = process.env.NEGOTIUM_MEMORY_LANG?.trim();
   return override && override.length > 0 ? override : resolveOutputLanguage();
@@ -10821,10 +10970,10 @@ function distillOneLine(summaryMd) {
   return "";
 }
 function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
-  const dir = join20(storage.getWikiDir(), "summaries");
+  const dir = join21(storage.getWikiDir(), "summaries");
   if (!storage.fileExists(dir))
     return null;
-  const predicted = join20(dir, wikiSummaryFilename(date, topicTitle, topicId));
+  const predicted = join21(dir, wikiSummaryFilename(date, topicTitle, topicId));
   if (storage.fileExists(predicted) && storage.fileModifiedAt(predicted) >= sinceMs)
     return predicted;
   let best = null;
@@ -10832,7 +10981,7 @@ function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
     if (!f.startsWith(`${date}-`) || !isTopicSummaryFile(f, topicId ?? "", topicTitle)) {
       continue;
     }
-    const p = join20(dir, f);
+    const p = join21(dir, f);
     try {
       const m = storage.fileModifiedAt(p);
       if (m >= sinceMs && (!best || m > best.mtime))
@@ -10913,7 +11062,7 @@ var init_archiver = __esm(async () => {
   defaultArchiverRuntime = createArchiverRuntime({
     storage: {
       getWikiDir: getSharedWikiDir,
-      fileExists: existsSync19,
+      fileExists: existsSync20,
       listDirectory: readdirSync5,
       readTextFile: (path) => readFileSync18(path, "utf-8"),
       fileSize: (path) => statSync7(path).size,
@@ -11036,13 +11185,13 @@ function formatTopicArchiveTranscriptRecord(row, topicTitle, index) {
 
 // ../../packages/core/src/storage/topic-archive.ts
 import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 function archiveTopicMessages(topicId, topicTitle, options = {}) {
   const rows = options.afterRowid !== undefined ? getMessagesForTopicAfterRowid(topicId, options.afterRowid) : getAllMessagesForTopic(topicId);
   if (rows.length === 0)
     return null;
   const safeTopic = sanitizeTopicName(topicTitle, true);
-  const archiveDir = join21(getSharedWikiDir(), "archive");
+  const archiveDir = join22(getSharedWikiDir(), "archive");
   mkdirSync13(archiveDir, { recursive: true });
   const date = new Date().toISOString().slice(0, 10);
   const reasonSuffix = options.reason && options.reason !== "delete" ? `_${options.reason}` : "";
@@ -11055,7 +11204,7 @@ function archiveTopicMessages(topicId, topicTitle, options = {}) {
   let path;
   while (true) {
     filename = `${safeTopic}_${date}${reasonSuffix}${counter === 1 ? "" : `_${counter}`}.jsonl`;
-    path = join21(archiveDir, filename);
+    path = join22(archiveDir, filename);
     try {
       writeFileSync11(path, body, { flag: "wx" });
       break;
@@ -11100,7 +11249,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   const entries = readRawConversation(userId, topicTitle);
   if (entries.length === 0)
     return null;
-  const archiveDir = join21(getSharedWikiDir(), "archive");
+  const archiveDir = join22(getSharedWikiDir(), "archive");
   mkdirSync13(archiveDir, { recursive: true });
   const safeTopic = sanitizeTopicName(topicTitle, true);
   const date = new Date().toISOString().slice(0, 10);
@@ -11128,7 +11277,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   let counter = 1;
   while (true) {
     const suffix = counter === 1 ? "" : `_${counter}`;
-    const path = join21(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
+    const path = join22(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
     try {
       writeFileSync11(path, body, { flag: "wx" });
       logger.info({ topicId, topicTitle, archive: path, eventCount: entries.length }, "archiveConversationEvents: archived raw conversation events");
@@ -11447,7 +11596,7 @@ var init_idle_archiver = __esm(async () => {
 
 // ../../packages/core/src/agents/topic-cleanup.ts
 import { mkdirSync as mkdirSync14, renameSync as renameSync8, unlinkSync as unlinkSync13, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname14 } from "path";
+import { dirname as dirname15 } from "path";
 function collectSessionIdsByAgent(entries, extraSessions = []) {
   const out = new Map;
   for (const e of entries) {
@@ -11513,7 +11662,7 @@ function createTopicLogMaintenance(host) {
       const path = runtimeHost.activeConversationPath(opts.userId, opts.topicName);
       const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
       try {
-        mkdirSync14(dirname14(path), { recursive: true });
+        mkdirSync14(dirname15(path), { recursive: true });
         writeFileSync12(tempPath, retained.length > 0 ? `${retained.map((entry) => JSON.stringify(entry)).join(`
 `)}
 ` : "", { flag: "wx" });
@@ -11676,8 +11825,8 @@ var init_usage_alert = __esm(() => {
 // ../../packages/core/src/topics/session.ts
 import { randomUUID as randomUUID10 } from "crypto";
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, writeFileSync as writeFileSync13 } from "fs";
-import { tmpdir as tmpdir3 } from "os";
-import { join as join22 } from "path";
+import { tmpdir as tmpdir4 } from "os";
+import { join as join23 } from "path";
 function previousCompactedSummary(entries) {
   for (let index = entries.length - 2;index >= 0; index -= 1) {
     const request = entries[index]?.event;
@@ -11807,7 +11956,7 @@ function formatCompactElapsed(startedAt) {
 async function summarizeTopicContext(request) {
   const startedAt = Date.now();
   const sessionIds = [];
-  const compactCwd = mkdtempSync2(join22(tmpdir3(), "negotium-compact-"));
+  const compactCwd = mkdtempSync2(join23(tmpdir4(), "negotium-compact-"));
   const abortController = new AbortController;
   const relayAbort = () => abortController.abort(request.signal?.reason);
   if (request.signal?.aborted)
@@ -11834,7 +11983,7 @@ async function summarizeTopicContext(request) {
   let error = "";
   let toolViolation = false;
   let compactionLogCalls = 0;
-  const compactionLogPath = join22(compactCwd, "conversation.log");
+  const compactionLogPath = join23(compactCwd, "conversation.log");
   try {
     const compactionMcp = useCompactionLog ? {
       compact_log: {
@@ -12453,14 +12602,14 @@ var init_derive = __esm(async () => {
 });
 
 // ../../packages/core/src/query/session-inbox-path.ts
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 function sessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join23(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
+  return join24(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
 }
 function scheduledSessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join23(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
+  return join24(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
 }
 var TOPIC_ID_FILE_PREFIX = "topic-id-", JSONL_SUFFIX = ".jsonl", SCHEDULE_SUFFIX = ".schedule";
 var init_session_inbox_path = __esm(() => {
@@ -12469,13 +12618,13 @@ var init_session_inbox_path = __esm(() => {
 
 // ../../packages/core/src/query/session-inbox-cleanup.ts
 import { unlinkSync as unlinkSync15 } from "fs";
-import { basename as basename4, join as join24 } from "path";
+import { basename as basename4, join as join25 } from "path";
 function cleanupSessionInboxFiles(userId, topicId, legacyTopicTitle) {
   const live = sessionInboxPath(userId, topicId);
   const scheduled = scheduledSessionInboxPath(userId, topicId);
   const candidates = new Set([live, `${live}.processing`, scheduled, `${scheduled}.processing`]);
   if (legacyTopicTitle && legacyTopicTitle !== "." && legacyTopicTitle !== ".." && basename4(legacyTopicTitle) === legacyTopicTitle) {
-    const legacyBase = join24(SESSION_INBOX_DIR, userId, legacyTopicTitle);
+    const legacyBase = join25(SESSION_INBOX_DIR, userId, legacyTopicTitle);
     for (const suffix of [".jsonl", ".jsonl.processing", ".schedule", ".schedule.processing"]) {
       candidates.add(`${legacyBase}${suffix}`);
     }
@@ -12501,16 +12650,16 @@ var init_session_inbox_cleanup = __esm(() => {
 
 // ../../packages/core/src/query/state.ts
 import { mkdirSync as mkdirSync16, renameSync as renameSync9, unlinkSync as unlinkSync16, writeFileSync as writeFileSync14 } from "fs";
-import { basename as basename5, join as join25 } from "path";
+import { basename as basename5, join as join26 } from "path";
 function createQueryStateStore(options) {
   const sanitize = options.sanitizeTopicId ?? sanitizeId;
-  const queryStateDirPath = (userId) => join25(options.usersLogDir, String(userId), "active-queries");
-  const queryStateFile = (userId, topicId) => join25(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
+  const queryStateDirPath = (userId) => join26(options.usersLogDir, String(userId), "active-queries");
+  const queryStateFile = (userId, topicId) => join26(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
   const legacyQueryStateFile = (userId, topicName) => {
     if (!topicName || topicName === "." || topicName === ".." || basename5(topicName) !== topicName) {
       return null;
     }
-    return join25(queryStateDirPath(userId), `${topicName}.json`);
+    return join26(queryStateDirPath(userId), `${topicName}.json`);
   };
   return {
     write(userId, topicId, topicName, task) {
@@ -12671,30 +12820,30 @@ import {
   unlinkSync as unlinkSync17,
   writeFileSync as writeFileSync15
 } from "fs";
-import { dirname as dirname15, join as join26 } from "path";
+import { dirname as dirname16, join as join27 } from "path";
 function pendingAskDir(userId) {
   const rawUserId = String(userId);
   const safeUserId = /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..") ? rawUserId : `sha256-${createHash5("sha256").update(rawUserId).digest("hex")}`;
-  return join26(resolveStorageSessionAsksDir(), safeUserId);
+  return join27(resolveStorageSessionAsksDir(), safeUserId);
 }
 function encodeAskKey(key) {
   return JSON.stringify([key.from, key.to]);
 }
 function pendingAskPath(key) {
   const digest = createHash5("sha256").update(encodeAskKey(key)).digest("hex");
-  return join26(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
+  return join27(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
 }
 function v2PendingAskPath(key) {
   const encoded = Buffer.from(encodeAskKey(key), "utf8").toString("base64url");
-  return join26(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
+  return join27(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
 }
 function legacyPendingAskPath(key) {
   if (key.from.includes("/") || key.from.includes("\\") || key.to.includes("/") || key.to.includes("\\") || key.from.includes("\x00") || key.to.includes("\x00")) {
     return null;
   }
   const dir = pendingAskDir(key.userId);
-  const candidate = join26(dir, `${key.from}___${key.to}.pending`);
-  return dirname15(candidate) === dir ? candidate : null;
+  const candidate = join27(dir, `${key.from}___${key.to}.pending`);
+  return dirname16(candidate) === dir ? candidate : null;
 }
 function parsePendingAskFilename(fileName) {
   if (!fileName.endsWith(".pending"))
@@ -12934,7 +13083,7 @@ function listPendingAsksForCaller(args) {
     const parsed = isV3 ? { from: args.from, to: "" } : parsePendingAskFilename(fileName);
     if (!parsed)
       continue;
-    const path = join26(dir, fileName);
+    const path = join27(dir, fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
       from: parsed.from,
@@ -12976,7 +13125,7 @@ function deletePendingAsksForTopic(args) {
   }
   let deleted = 0;
   for (const fileName of files) {
-    const path = join26(dir, fileName);
+    const path = join27(dir, fileName);
     const parsed = parsePendingAskFilename(fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
@@ -13414,7 +13563,7 @@ var init_self_schedules = __esm(async () => {
 // ../../packages/core/src/storage/token-stats.ts
 import { createHash as createHash6 } from "crypto";
 import { mkdirSync as mkdirSync18, writeFileSync as writeFileSync16 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 function emptyBucket() {
   return {
     inputTokens: 0,
@@ -13433,7 +13582,7 @@ function queriesPath(userId) {
   const fileId = tokenStatsFileId(userId);
   const logDir = resolveStorageLogDir();
   mkdirSync18(logDir, { recursive: true });
-  return join27(logDir, `token-queries-${fileId}.jsonl`);
+  return join28(logDir, `token-queries-${fileId}.jsonl`);
 }
 function loadRecords(userId) {
   try {
@@ -13835,7 +13984,7 @@ var init_lifecycle = __esm(async () => {
 // ../../packages/core/src/runtime/attachments.ts
 import { randomUUID as randomUUID13 } from "crypto";
 import { copyFileSync as copyFileSync2, mkdirSync as mkdirSync19, writeFileSync as writeFileSync17 } from "fs";
-import { basename as basename6, join as join28 } from "path";
+import { basename as basename6, join as join29 } from "path";
 function workspaceCwdFor(topicId) {
   return resolveTopicWorkspaceDir(topicId);
 }
@@ -13848,7 +13997,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
   if (!attachmentIds?.length)
     return [];
   const out = [];
-  const destDir = join28(workspaceCwdFor(topicId), "attachments", queryId);
+  const destDir = join29(workspaceCwdFor(topicId), "attachments", queryId);
   for (const rawId of attachmentIds) {
     if (typeof rawId !== "string")
       continue;
@@ -13865,7 +14014,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
       mkdirSync19(destDir, { recursive: true });
       const index = String(out.length + 1).padStart(2, "0");
       const safeName = safeAttachmentFilename(attachment.filename, fileId);
-      const destPath = join28(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
+      const destPath = join29(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
       copyFileSync2(sourcePath, destPath);
       out.push({
         id: attachment.id,
@@ -13895,10 +14044,10 @@ function promptWithAttachments(prompt, attachments) {
   return composeAttachmentPrompt(prompt, attachments.map(({ filename, path }) => attachmentPromptLine(filename, path)));
 }
 function ingestAttachment(args) {
-  const destDir = join28(UPLOADS_DIR, args.topicId);
+  const destDir = join29(UPLOADS_DIR, args.topicId);
   mkdirSync19(destDir, { recursive: true });
   const safeName = safeAttachmentFilename(args.filename, "upload");
-  const destPath = join28(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
+  const destPath = join29(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
   if (args.sourcePath !== undefined) {
     copyFileSync2(args.sourcePath, destPath);
   } else if (args.bytes !== undefined) {
@@ -14073,12 +14222,12 @@ var init_errors = __esm(() => {
 
 // ../../packages/core/src/runtime/event-heartbeat.ts
 function nextOrHeartbeat(pending, intervalMs) {
-  return new Promise((resolve15, reject) => {
-    const timer = setTimeout(() => resolve15({ kind: "heartbeat" }), intervalMs);
+  return new Promise((resolve16, reject) => {
+    const timer = setTimeout(() => resolve16({ kind: "heartbeat" }), intervalMs);
     timer.unref?.();
     pending.then((result) => {
       clearTimeout(timer);
-      resolve15({ kind: "event", result });
+      resolve16({ kind: "event", result });
     }, (error) => {
       clearTimeout(timer);
       reject(error);
@@ -14616,8 +14765,8 @@ function createAskUserRuntime(host) {
       return errorResult(`Error: failed to persist ask_user_question: ${error instanceof Error ? error.message : String(error)}`);
     }
     let resolveAnswer;
-    const promise = new Promise((resolve15) => {
-      resolveAnswer = resolve15;
+    const promise = new Promise((resolve16) => {
+      resolveAnswer = resolve16;
     });
     pendingAsks2.set(message.id, {
       topicId: ctx.topicId,
@@ -14945,7 +15094,7 @@ var init_visual_html = __esm(() => {
 
 // ../../packages/core/src/runtime/visuals.ts
 import { realpathSync as realpathSync5 } from "fs";
-import { isAbsolute as isAbsolute4, resolve as resolve15 } from "path";
+import { isAbsolute as isAbsolute4, resolve as resolve16 } from "path";
 function activeVisualHtmlForPrompt(html) {
   if (html.length <= ACTIVE_VISUAL_PROMPT_MAX_CHARS) {
     return { html, omittedChars: 0 };
@@ -14996,8 +15145,8 @@ function topicAllowsVisualFileId(topicId, fileId) {
   return topicHasAttachmentFileId(topicId, fileId) || topicHasVisualFileId(topicId, fileId);
 }
 function isPathInside(baseDir, filePath) {
-  const base = resolve15(baseDir);
-  const normalized = resolve15(filePath);
+  const base = resolve16(baseDir);
+  const normalized = resolve16(filePath);
   try {
     const realBase = realpathSync5(base);
     const real = realpathSync5(normalized);
@@ -15059,7 +15208,7 @@ function resolveVisualMediaInput(topicId, input) {
   }
   const rawPath = input.file_path.trim();
   const cwd = workspaceCwdFor(topicId);
-  const candidate = isAbsolute4(rawPath) ? rawPath : resolve15(cwd, rawPath);
+  const candidate = isAbsolute4(rawPath) ? rawPath : resolve16(cwd, rawPath);
   if (!isPathInside(cwd, candidate)) {
     return { error: "file_path must be inside the topic workspace" };
   }
@@ -15097,7 +15246,7 @@ var init_visuals = __esm(async () => {
 // ../../packages/core/src/runtime/turn-event-stream.ts
 import { randomUUID as randomUUID15 } from "crypto";
 import { realpathSync as realpathSync6, statSync as statSync9 } from "fs";
-import { isAbsolute as isAbsolute5, resolve as resolve16 } from "path";
+import { isAbsolute as isAbsolute5, resolve as resolve17 } from "path";
 function sessionEventMatchesCurrentExecution(topicId, queryId, agent, model) {
   if (getRoomQuery(topicId)?.queryId !== queryId)
     return false;
@@ -15450,7 +15599,7 @@ ${JSON.stringify(event.input ?? {})}`);
         case "file":
           if (!silent && peerBridge) {
             const cwd = workspaceCwdFor(topicId);
-            const path = isAbsolute5(event.path) ? event.path : resolve16(cwd, event.path);
+            const path = isAbsolute5(event.path) ? event.path : resolve17(cwd, event.path);
             if (!isPathInside(cwd, path)) {
               logger.warn({ topicId, path }, "peer output file is outside the topic workspace");
               break;
@@ -15732,15 +15881,15 @@ var init_turn_session = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/app-settings.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync20, readFileSync as readFileSync20, writeFileSync as writeFileSync18 } from "fs";
-import { dirname as dirname16, join as join29 } from "path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync20, readFileSync as readFileSync20, writeFileSync as writeFileSync18 } from "fs";
+import { dirname as dirname17, join as join30 } from "path";
 function settingsFile() {
-  return join29(resolveStorageDataDir(), "otium-settings.json");
+  return join30(resolveStorageDataDir(), "otium-settings.json");
 }
 function getGlobalAiName() {
   const path = settingsFile();
   try {
-    if (existsSync20(path)) {
+    if (existsSync21(path)) {
       const data = JSON.parse(readFileSync20(path, "utf8"));
       if (typeof data.aiName === "string" && data.aiName.trim()) {
         return data.aiName.trim();
@@ -15829,8 +15978,8 @@ __export(exports_turn_runner, {
   AGENT_DISPLAY_NAME: () => AGENT_DISPLAY_NAME
 });
 import { randomUUID as randomUUID16 } from "crypto";
-import { existsSync as existsSync21, mkdirSync as mkdirSync21, readdirSync as readdirSync7, statSync as statSync10 } from "fs";
-import { join as join30 } from "path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync21, readdirSync as readdirSync7, statSync as statSync10 } from "fs";
+import { join as join31 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
   if (isManager)
     return configuredMcp;
@@ -15885,8 +16034,8 @@ function appendAskReplyMessage(topicId, text2, agentType) {
   return message;
 }
 function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, matchesTitle, preferExact = true) {
-  const preferred = join30(directory, preferredFilename);
-  if (preferExact && existsSync21(preferred))
+  const preferred = join31(directory, preferredFilename);
+  if (preferExact && existsSync22(preferred))
     return preferred;
   let newestLegacyId = null;
   let newestTitle = null;
@@ -15896,7 +16045,7 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
       const legacyIdMatch = !titleMatch && matchesLegacyId(filename);
       if (!titleMatch && !legacyIdMatch)
         continue;
-      const path = join30(directory, filename);
+      const path = join31(directory, filename);
       const mtimeMs = statSync10(path).mtimeMs;
       if (titleMatch) {
         if (!newestTitle || mtimeMs > newestTitle.mtimeMs) {
@@ -15910,10 +16059,10 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
   return newestTitle?.path ?? newestLegacyId?.path ?? preferred;
 }
 function resolveWikiMemoryMirror(wikiDir, topicId, topicTitle) {
-  const briefFile = resolveWikiMirrorPath(join30(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
-  const hasBriefFile = existsSync21(briefFile) && statSync10(briefFile).isFile();
-  const latestSummaryCandidate = resolveWikiMirrorPath(join30(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
-  const latestSummaryFile = existsSync21(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
+  const briefFile = resolveWikiMirrorPath(join31(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
+  const hasBriefFile = existsSync22(briefFile) && statSync10(briefFile).isFile();
+  const latestSummaryCandidate = resolveWikiMirrorPath(join31(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
+  const latestSummaryFile = existsSync22(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
   return { briefFile, hasBriefFile, latestSummaryFile };
 }
 async function streamAgentEvents(topicId, topicTitle, queryId, events, control, agentType, model, effort, userId, retryableSessionExpired = true, onSessionId, execution) {
@@ -17109,9 +17258,9 @@ __export(exports_auth_check, {
   checkAgentAuth: () => checkAgentAuth
 });
 import { execFileSync as execFileSync7 } from "child_process";
-import { existsSync as existsSync22 } from "fs";
+import { existsSync as existsSync23 } from "fs";
 import { homedir as homedir8, platform } from "os";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 function hasMaestroCredential(host, key, userId) {
   if (userId && host.getVaultValue(userId, key)?.trim())
     return true;
@@ -17131,7 +17280,7 @@ function checkAgentAuth(agent, host = defaultAgentAuthHost, userId) {
     case "claude": {
       if (host.environment.ANTHROPIC_API_KEY)
         return { ok: true };
-      const path = join31(host.homeDirectory(), ".claude", ".credentials.json");
+      const path = join32(host.homeDirectory(), ".claude", ".credentials.json");
       if (host.operatingSystem() === "darwin") {
         if (host.hasMacOsCredential("Claude Code-credentials") || host.exists(path)) {
           return { ok: true };
@@ -17182,7 +17331,7 @@ var init_auth_check = __esm(async () => {
   await init_vault();
   defaultAgentAuthHost = {
     codexAuthFilePath,
-    exists: existsSync22,
+    exists: existsSync23,
     environment: process.env,
     homeDirectory: homedir8,
     operatingSystem: platform,
@@ -18133,280 +18282,6 @@ Available: ${available.join(", ") || "none"}`
   }
   return Object.freeze({ listTargets, getTopics, validateTarget });
 }
-// ../../packages/core/src/mcp/vault-http.ts
-var SAFE_RESPONSE_HEADERS = new Set([
-  "content-type",
-  "content-length",
-  "location",
-  "retry-after",
-  "x-ratelimit-limit",
-  "x-ratelimit-remaining",
-  "x-ratelimit-reset"
-]);
-var FORBIDDEN_REQUEST_HEADERS = new Set([
-  "connection",
-  "content-length",
-  "host",
-  "proxy-authorization",
-  "transfer-encoding"
-]);
-function substituteObject(userId, values, host) {
-  const used = new Set;
-  const substituted = {};
-  for (const [key, value2] of Object.entries(values)) {
-    if (FORBIDDEN_REQUEST_HEADERS.has(key.toLowerCase())) {
-      throw new Error(`Header "${key}" is not allowed`);
-    }
-    const result = host.substitute(userId, value2);
-    for (const usedKey of result.usedKeys)
-      used.add(usedKey);
-    substituted[key] = result.text;
-  }
-  return { values: substituted, usedKeys: [...used] };
-}
-function safeResponseHeaders(userId, headers, host) {
-  const output = {};
-  for (const [key, value2] of headers.entries()) {
-    if (!SAFE_RESPONSE_HEADERS.has(key.toLowerCase()))
-      continue;
-    output[key] = host.redact(userId, value2);
-  }
-  return output;
-}
-async function readBoundedBody(response, maxBytes) {
-  if (!response.body)
-    return { bytes: new Uint8Array, truncated: false };
-  const reader = response.body.getReader();
-  const chunks = [];
-  let keptBytes = 0;
-  let truncated = false;
-  try {
-    while (true) {
-      const next = await reader.read();
-      if (next.done)
-        break;
-      const remaining = maxBytes - keptBytes;
-      if (remaining <= 0) {
-        truncated = true;
-        await reader.cancel();
-        break;
-      }
-      const visible = next.value.subarray(0, remaining);
-      chunks.push(visible);
-      keptBytes += visible.byteLength;
-      if (visible.byteLength < next.value.byteLength) {
-        truncated = true;
-        await reader.cancel();
-        break;
-      }
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  const bytes = new Uint8Array(keptBytes);
-  let offset = 0;
-  for (const chunk of chunks) {
-    bytes.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return { bytes, truncated };
-}
-async function executeVaultHttpRequest(userId, request, host, fetchImpl = fetch) {
-  let parsedUrl;
-  try {
-    parsedUrl = new URL(request.url);
-  } catch {
-    return { ok: false, error: "url must be an absolute HTTPS URL" };
-  }
-  if (parsedUrl.protocol !== "https:") {
-    return {
-      ok: false,
-      error: "Vault credentials may only be sent over HTTPS"
-    };
-  }
-  if (parsedUrl.username || parsedUrl.password || /\{\{[^}]+\}\}/.test(request.url)) {
-    return {
-      ok: false,
-      error: "Keep Vault placeholders out of URLs; put credentials in headers or body"
-    };
-  }
-  let headers;
-  let headerKeys;
-  try {
-    const substituted = substituteObject(userId, request.headers ?? {}, host);
-    headers = substituted.values;
-    headerKeys = substituted.usedKeys;
-  } catch (error) {
-    return {
-      ok: false,
-      error: error instanceof Error ? error.message : String(error)
-    };
-  }
-  const bodyResult = request.body === undefined ? { text: undefined, usedKeys: [] } : host.substitute(userId, request.body);
-  const usedKeys = [...new Set([...headerKeys, ...bodyResult.usedKeys])].sort();
-  if (usedKeys.length === 0) {
-    return {
-      ok: false,
-      error: "No valid Vault placeholder was found in headers or body"
-    };
-  }
-  if (request.method === "GET" && request.body !== undefined) {
-    return {
-      ok: false,
-      error: "GET requests cannot include a credential-bearing body"
-    };
-  }
-  const controller = new AbortController;
-  const timeoutMs = Math.min(Math.max(request.timeoutMs ?? 30000, 1000), 120000);
-  const timeout = setTimeout(() => controller.abort(), timeoutMs);
-  const startedAt = Date.now();
-  try {
-    const response = await fetchImpl(parsedUrl, {
-      method: request.method,
-      headers,
-      body: request.method === "GET" ? undefined : bodyResult.text,
-      redirect: "manual",
-      signal: controller.signal
-    });
-    const maxBytes = Math.min(Math.max(request.maxResponseBytes ?? 256 * 1024, 1024), 1024 * 1024);
-    const { bytes, truncated } = await readBoundedBody(response, maxBytes);
-    const contentType = response.headers.get("content-type")?.toLowerCase() ?? "";
-    const textual = contentType.startsWith("text/") || contentType.includes("json") || contentType.includes("xml") || contentType.includes("javascript") || contentType === "";
-    const body = textual ? host.redact(userId, new TextDecoder().decode(bytes)) : `[binary response omitted: ${bytes.byteLength} bytes, ${contentType || "unknown content type"}]`;
-    host.log?.("info", {
-      userId,
-      vaultKeys: usedKeys,
-      host: parsedUrl.hostname,
-      method: request.method,
-      status: response.status,
-      durationMs: Date.now() - startedAt
-    }, "vault credential used");
-    return {
-      ok: response.ok,
-      status: response.status,
-      statusText: response.statusText,
-      headers: safeResponseHeaders(userId, response.headers, host),
-      body,
-      truncated
-    };
-  } catch (error) {
-    const raw = error instanceof Error ? error.message : String(error);
-    host.log?.("warn", {
-      userId,
-      vaultKeys: usedKeys,
-      host: parsedUrl.hostname,
-      method: request.method,
-      durationMs: Date.now() - startedAt
-    }, "vault credential request failed");
-    return { ok: false, error: host.redact(userId, raw) };
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-// ../../packages/core/src/mcp/vault-run.ts
-import { spawn } from "child_process";
-function appendBounded(chunks, chunk, state, maxBytes) {
-  if (state.bytes >= maxBytes) {
-    state.truncated = true;
-    return;
-  }
-  const remaining = maxBytes - state.bytes;
-  const visible = chunk.subarray(0, remaining);
-  chunks.push(visible);
-  state.bytes += visible.byteLength;
-  if (visible.byteLength < chunk.byteLength)
-    state.truncated = true;
-}
-async function executeVaultRun(userId, request, host) {
-  const substitution = host.substitute(userId, request.command);
-  if (substitution.usedKeys.length === 0) {
-    return {
-      ok: false,
-      exitCode: null,
-      signal: null,
-      stdout: "",
-      stderr: "",
-      truncated: false,
-      usedKeys: [],
-      error: "No valid Vault placeholder was found in command"
-    };
-  }
-  const timeoutMs = Math.min(Math.max(request.timeoutMs ?? 120000, 1000), 600000);
-  const maxOutputBytes = Math.min(Math.max(request.maxOutputBytes ?? 512 * 1024, 1024), 2 * 1024 * 1024);
-  const stdoutChunks = [];
-  const stderrChunks = [];
-  const stdoutState = { bytes: 0, truncated: false };
-  const stderrState = { bytes: 0, truncated: false };
-  const startedAt = Date.now();
-  return await new Promise((resolve) => {
-    const child = spawn(process.env.SHELL || "/bin/sh", ["-s"], {
-      cwd: request.cwd,
-      detached: true,
-      env: process.env,
-      stdio: ["pipe", "pipe", "pipe"]
-    });
-    let settled = false;
-    let timedOut = false;
-    const signalTree = (signal) => {
-      if (!child.pid)
-        return;
-      try {
-        process.kill(-child.pid, signal);
-      } catch {
-        try {
-          child.kill(signal);
-        } catch {}
-      }
-    };
-    const finish = (result) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timeout);
-      host.log?.("info", {
-        userId,
-        vaultKeys: substitution.usedKeys,
-        exitCode: result.exitCode,
-        signal: result.signal,
-        durationMs: Date.now() - startedAt,
-        timedOut
-      }, "vault credential command used");
-      resolve({ ...result, usedKeys: substitution.usedKeys });
-    };
-    child.stdout.on("data", (chunk) => appendBounded(stdoutChunks, chunk, stdoutState, maxOutputBytes));
-    child.stderr.on("data", (chunk) => appendBounded(stderrChunks, chunk, stderrState, maxOutputBytes));
-    child.once("error", (error) => {
-      finish({
-        ok: false,
-        exitCode: null,
-        signal: null,
-        stdout: "",
-        stderr: "",
-        truncated: false,
-        error: host.redact(userId, error.message)
-      });
-    });
-    child.once("close", (exitCode, signal) => {
-      signalTree("SIGTERM");
-      const stdout = host.redact(userId, Buffer.concat(stdoutChunks).toString("utf8"));
-      const stderr = host.redact(userId, Buffer.concat(stderrChunks).toString("utf8"));
-      finish({
-        ok: !timedOut && exitCode === 0,
-        exitCode,
-        signal,
-        stdout,
-        stderr,
-        truncated: stdoutState.truncated || stderrState.truncated,
-        ...timedOut ? { error: `Command timed out after ${timeoutMs}ms` } : {}
-      });
-    });
-    const timeout = setTimeout(() => {
-      timedOut = true;
-      signalTree("SIGKILL");
-    }, timeoutMs);
-    child.stdin.end(substitution.text);
-  });
-}
 // ../../packages/core/src/mcp/wiki-server.ts
 import { AsyncLocalStorage } from "async_hooks";
 import { randomUUID } from "crypto";
@@ -20334,7 +20209,7 @@ init_maestro_registry();
 init_config();
 init_jsonl();
 init_mcp_helpers();
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync10, readdirSync as readdirSync3 } from "fs";
 import { join as join11 } from "path";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -20353,7 +20228,7 @@ function signalProcessTree(child, signal) {
 }
 function spawnCapture(cmd, args, timeoutMs, signal, env) {
   return new Promise((resolve8, reject) => {
-    const child = spawn5(cmd, args, {
+    const child = spawn4(cmd, args, {
       env: env ?? process.env,
       stdio: ["ignore", "pipe", "pipe"],
       detached: process.platform !== "win32"
@@ -21450,14 +21325,11 @@ function createTokenStatsMcpServer(context, host = defaultTokenStatsMcpHost) {
   return server;
 }
 // ../../packages/core/src/mcp/factories/vault.ts
-import { McpServer as McpServer8 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z9 } from "zod";
 init_mcp_helpers();
-function createVaultMcpServer(context, host, executors = {}) {
+import { McpServer as McpServer8 } from "@modelcontextprotocol/sdk/server/mcp.js";
+function createVaultMcpServer(context, host) {
   const server = new McpServer8({ name: "vault", version: "1.0.0" });
-  const run = executors.run ?? executeVaultRun;
-  const http = executors.http ?? executeVaultHttpRequest;
-  server.tool("vault_list", context.httpOnly ? "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for HTTPS APIs that need a credential." : "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for APIs and vault_run for shell/CLI work that needs a credential.", {}, () => {
+  server.tool("vault_list", "List the user's Vault keys and descriptions without exposing values. Use {{KEY}} placeholders directly in supported transient tool inputs.", {}, () => {
     if (!context.userId)
       return mcpOk("(vault unavailable: no user context)");
     const entries = host.list(context.userId);
@@ -21468,51 +21340,11 @@ function createVaultMcpServer(context, host, executors = {}) {
 ${lines.join(`
 `)}`);
   });
-  if (!context.listOnly && !context.httpOnly) {
-    server.tool("vault_run", "Run a shell command containing {{KEY}} references inside Otium's credential broker. Expanded command input never reaches the model/provider, and stdout/stderr are redacted before return. Prefer vault_http_request for HTTP APIs.", {
-      command: z9.string().min(1).max(64 * 1024),
-      timeout_ms: z9.number().int().min(1000).max(600000).optional(),
-      max_output_bytes: z9.number().int().min(1024).max(2 * 1024 * 1024).optional()
-    }, async ({ command, timeout_ms, max_output_bytes }) => {
-      if (!context.userId)
-        return mcpError("Vault unavailable: no user context");
-      const result = await run(context.userId, {
-        command,
-        timeoutMs: timeout_ms,
-        maxOutputBytes: max_output_bytes,
-        cwd: context.cwd
-      }, host);
-      return result.error && result.exitCode === null ? mcpError(result.error) : mcpOk(JSON.stringify(result, null, 2));
-    });
-  }
-  if (!context.listOnly)
-    server.tool("vault_http_request", "Make an HTTPS request with {{KEY}} references resolved inside Otium. Put secrets in headers or body, never in the URL. The expanded request is not returned; the response is redacted before the model sees it.", {
-      method: z9.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).default("GET"),
-      url: z9.string().url().describe("Absolute HTTPS URL without Vault placeholders"),
-      headers: z9.record(z9.string(), z9.string()).optional(),
-      body: z9.string().optional(),
-      timeout_ms: z9.number().int().min(1000).max(120000).optional(),
-      max_response_bytes: z9.number().int().min(1024).max(1024 * 1024).optional()
-    }, async ({ method, url, headers, body, timeout_ms, max_response_bytes }) => {
-      if (!context.userId)
-        return mcpError("Vault unavailable: no user context");
-      const result = await http(context.userId, {
-        method,
-        url,
-        headers,
-        body,
-        timeoutMs: timeout_ms,
-        maxResponseBytes: max_response_bytes
-      }, host);
-      return result.error ? mcpError(result.error) : mcpOk(JSON.stringify(result, null, 2));
-    });
   return server;
 }
 export {
   protectMcpStdio,
   parseSessionCommContext,
-  executeVaultRun,
-  executeVaultHttpRequest,
   defaultTokenStatsMcpHost,
   defaultTaskMcpHost,
   defaultSystemHealthMcpHost,
@@ -21529,4 +21361,4 @@ export {
   createAgentHealthMcpServer
 };
 
-//# debugId=2A5A21A70EF2539564756E2164756E21
+//# debugId=3C9958DCA4DDE01364756E2164756E21