negotium 0.3.14 → 0.4.1

package/dist/agent-helpers.js

@@ -69,30 +69,21 @@ function shouldSubstituteVaultToolInput(toolName) {
   const leaf = leafToolName(toolName);
   return leaf.startsWith("browser_") || DIRECT_VAULT_EXECUTION_TOOLS.has(leaf);
 }
-function createVaultToolPolicy(host) {
-  function isVaultBrokerTool(toolName) {
-    return toolName.includes("vault_run") || toolName.includes("vault_http_request");
-  }
-  function referencesRuntimeSecretStorage(value) {
-    if (typeof value === "string") {
-      const lower = value.toLowerCase();
-      if (SENSITIVE_RUNTIME_NAMES.some((name) => lower.includes(name)))
-        return true;
-      return value.startsWith("/") && host.isSensitivePath(value);
-    }
-    if (Array.isArray(value))
-      return value.some(referencesRuntimeSecretStorage);
-    if (value && typeof value === "object") {
-      return Object.values(value).some(referencesRuntimeSecretStorage);
-    }
-    return false;
+function referencesRuntimeSecretStorage(value) {
+  if (typeof value === "string") {
+    const lower = value.toLowerCase();
+    if (SENSITIVE_RUNTIME_NAMES.some((name) => lower.includes(name)))
+      return true;
+    return value.startsWith("/") && isSensitivePath(value);
   }
-  function shouldRedirectVaultTool(userId, toolName, input) {
-    return false;
+  if (Array.isArray(value))
+    return value.some(referencesRuntimeSecretStorage);
+  if (value && typeof value === "object") {
+    return Object.values(value).some(referencesRuntimeSecretStorage);
   }
-  return { isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool };
+  return false;
 }
-var SENSITIVE_RUNTIME_NAMES, DIRECT_VAULT_EXECUTION_TOOLS, VAULT_BROKER_REDIRECT_ERROR = "Vault broker redirection is disabled; use {{KEY}} directly in normal tool inputs.", defaultVaultToolPolicy, isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool;
+var SENSITIVE_RUNTIME_NAMES, DIRECT_VAULT_EXECUTION_TOOLS;
 var init_vault_tool_policy = __esm(() => {
   init_sensitive_path();
   SENSITIVE_RUNTIME_NAMES = [
@@ -102,13 +93,6 @@ var init_vault_tool_policy = __esm(() => {
     "sessions.db"
   ];
   DIRECT_VAULT_EXECUTION_TOOLS = new Set(["Bash", "WebFetch"]);
-  defaultVaultToolPolicy = createVaultToolPolicy({
-    isSensitivePath,
-    valueReferencesVaultKey: () => false
-  });
-  isVaultBrokerTool = defaultVaultToolPolicy.isVaultBrokerTool;
-  referencesRuntimeSecretStorage = defaultVaultToolPolicy.referencesRuntimeSecretStorage;
-  shouldRedirectVaultTool = defaultVaultToolPolicy.shouldRedirectVaultTool;
 });
 
 // ../../packages/core/src/platform/config-helpers.ts
@@ -1870,7 +1854,6 @@ var init_execution_host = __esm(async () => {
     redactVaultSecrets,
     substituteVaultSecrets: (userId, value) => vaultSubstituteDetailed(userId, value).text,
     referencesRuntimeSecretStorage,
-    shouldRedirectVaultTool,
     claudeCodeExecutablePath: () => CLAUDE_EXECUTABLE,
     codexAuthFilePath
   };
@@ -2429,7 +2412,7 @@ var init_claude_registry = __esm(() => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.3.14";
+var NEGOTIUM_VERSION = "0.4.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -4594,9 +4577,163 @@ var init_codex_tree_kill = __esm(() => {
   killOwnedCodexTreesForShutdown = manager.killOwnedTreesForShutdown;
 });
 
+// ../../packages/core/src/agents/codex-vault-hook-bridge.ts
+import { randomBytes as randomBytes5 } from "crypto";
+import { existsSync as existsSync11 } from "fs";
+import { chmod, mkdtemp, rm, writeFile } from "fs/promises";
+import { createServer } from "net";
+import { tmpdir as tmpdir2 } from "os";
+import { dirname as dirname9, join as join12, resolve as resolve7 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function evaluateCodexVaultPreToolUse(input, userId, operations) {
+  if (operations.referencesSensitiveStorage(input.tool_input)) {
+    return {
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "deny",
+        permissionDecisionReason: SENSITIVE_STORAGE_DENIAL
+      }
+    };
+  }
+  if (!shouldSubstituteVaultToolInput(input.tool_name))
+    return {};
+  const updatedInput = deepMapStrings(input.tool_input, (value) => operations.substitute(userId, value));
+  if (JSON.stringify(updatedInput) === JSON.stringify(input.tool_input))
+    return {};
+  return {
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "allow",
+      updatedInput
+    }
+  };
+}
+function shellQuote(value) {
+  return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+function hookClientPath() {
+  const moduleDir = dirname9(fileURLToPath2(import.meta.url));
+  const adjacent = resolve7(moduleDir, "codex-vault-hook.mjs");
+  if (existsSync11(adjacent))
+    return adjacent;
+  const packaged = resolve7(moduleDir, "runtime/src/agents/codex-vault-hook.mjs");
+  if (existsSync11(packaged))
+    return packaged;
+  throw new Error("Codex Vault hook client is missing from this installation");
+}
+function privateCodexWrapper(codexScript, socketPath, token) {
+  return [
+    "#!/bin/sh",
+    `export ${HOOK_SOCKET_ENV}=${shellQuote(socketPath)}`,
+    `export ${HOOK_TOKEN_ENV}=${shellQuote(token)}`,
+    'if [ "$1" = "exec" ]; then',
+    "  shift",
+    `  exec ${shellQuote(process.execPath)} ${shellQuote(codexScript)} exec --dangerously-bypass-hook-trust "$@"`,
+    "fi",
+    `exec ${shellQuote(process.execPath)} ${shellQuote(codexScript)} "$@"`,
+    ""
+  ].join(`
+`);
+}
+async function createCodexVaultHookBridge(userId) {
+  const root = await mkdtemp(join12(tmpdir2(), "negotium-codex-vault-"));
+  await chmod(root, 448);
+  const socketPath = join12(root, "hook.sock");
+  const wrapperPath = join12(root, "codex-with-hooks");
+  const token = randomBytes5(32).toString("hex");
+  const connections = new Set;
+  const server = createServer((socket) => {
+    connections.add(socket);
+    socket.once("close", () => connections.delete(socket));
+    socket.setEncoding("utf8");
+    let request = "";
+    let handled = false;
+    const handleRequest = () => {
+      if (handled)
+        return;
+      handled = true;
+      try {
+        const parsed = JSON.parse(request.trimEnd());
+        if (parsed.token !== token)
+          throw new Error("invalid hook capability");
+        if (!parsed.input || typeof parsed.input !== "object" || typeof parsed.input.tool_name !== "string") {
+          throw new Error("invalid PreToolUse payload");
+        }
+        const output = evaluateCodexVaultPreToolUse(parsed.input, userId, {
+          referencesSensitiveStorage: referencesHostedSecretStorage,
+          substitute: substituteHostedSecrets
+        });
+        socket.end(JSON.stringify({ ok: true, output }));
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        socket.end(JSON.stringify({ ok: false, error: message }));
+      }
+    };
+    socket.on("data", (chunk) => {
+      request += chunk;
+      if (Buffer.byteLength(request) > MAX_HOOK_REQUEST_BYTES)
+        socket.destroy();
+      else if (request.endsWith(`
+`))
+        handleRequest();
+    });
+    socket.on("end", handleRequest);
+  });
+  try {
+    await new Promise((resolveListen, reject) => {
+      server.once("error", reject);
+      server.listen(socketPath, () => {
+        server.off("error", reject);
+        resolveListen();
+      });
+    });
+    await chmod(socketPath, 384);
+    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath(), socketPath, token), {
+      mode: 448
+    });
+    const command = [shellQuote(process.execPath), shellQuote(hookClientPath())].join(" ");
+    return {
+      codexPathOverride: wrapperPath,
+      environment: { [HOOK_SOCKET_ENV]: socketPath, [HOOK_TOKEN_ENV]: token },
+      hooks: {
+        PreToolUse: [
+          {
+            matcher: "*",
+            hooks: [
+              {
+                type: "command",
+                command,
+                timeout: 30,
+                statusMessage: "Resolving Vault placeholders"
+              }
+            ]
+          }
+        ]
+      },
+      async close() {
+        for (const socket of connections)
+          socket.destroy();
+        await new Promise((resolveClose) => server.close(() => resolveClose()));
+        await rm(root, { recursive: true, force: true });
+      }
+    };
+  } catch (error) {
+    server.close();
+    await rm(root, { recursive: true, force: true });
+    throw error;
+  }
+}
+var MAX_HOOK_REQUEST_BYTES, SENSITIVE_STORAGE_DENIAL = "Runtime secret storage access is not permitted", HOOK_SOCKET_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_SOCKET", HOOK_TOKEN_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_TOKEN";
+var init_codex_vault_hook_bridge = __esm(async () => {
+  init_codex_native_multi_agent();
+  await init_execution_host();
+  init_vault_tool_policy();
+  MAX_HOOK_REQUEST_BYTES = 1024 * 1024;
+});
+
 // ../../packages/core/src/agents/tool-format.ts
 import { readFileSync as readFileSync10, statSync as statSync4 } from "fs";
-import { isAbsolute, resolve as resolve7 } from "path";
+import { isAbsolute, resolve as resolve8 } from "path";
 import { diffLines as computeLineDiff } from "diff";
 function summarizeDisplayText(value) {
   const normalized = value.replace(/\s+/g, " ").trim();
@@ -4920,7 +5057,7 @@ function sourceStartLine(input, before, after, cwd) {
   const rawPath = input.file_path ?? input.path;
   if (typeof rawPath !== "string" || !rawPath.trim())
     return 1;
-  const path = isAbsolute(rawPath) ? rawPath : resolve7(cwd ?? process.cwd(), rawPath);
+  const path = isAbsolute(rawPath) ? rawPath : resolve8(cwd ?? process.cwd(), rawPath);
   try {
     if (statSync4(path).size > TOOL_DIFF_SOURCE_MAX_BYTES)
       return 1;
@@ -5118,9 +5255,9 @@ __export(exports_codex_provider, {
   codexProvider: () => codexProvider
 });
 import { execFileSync as execFileSync4 } from "child_process";
-import { existsSync as existsSync11, readFileSync as readFileSync11, realpathSync as realpathSync3, statSync as statSync5 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync11, realpathSync as realpathSync3, statSync as statSync5 } from "fs";
 import { homedir as homedir6 } from "os";
-import { dirname as dirname9, isAbsolute as isAbsolute2, join as join12, relative, resolve as resolve8 } from "path";
+import { dirname as dirname10, isAbsolute as isAbsolute2, join as join13, relative, resolve as resolve9 } from "path";
 import { Codex } from "@openai/codex-sdk";
 function sameCodexUsage(usage, total) {
   return usage.input_tokens === total.inputTokens && usage.output_tokens === total.outputTokens && (usage.cached_input_tokens ?? 0) === total.cachedInputTokens && (usage.cache_write_input_tokens ?? 0) === total.cacheWriteInputTokens;
@@ -5148,8 +5285,8 @@ function codexMcpServerName(name) {
   return CODEX_MCP_SERVER_NAME_OVERRIDES[name] ?? name;
 }
 function globalCodexMcpServerNames(authFilePath) {
-  const configPath = join12(dirname9(authFilePath), "config.toml");
-  if (!existsSync11(configPath))
+  const configPath = join13(dirname10(authFilePath), "config.toml");
+  if (!existsSync12(configPath))
     return [];
   try {
     const names = new Set;
@@ -5244,13 +5381,13 @@ function summarizeMcpToolCallResult(item) {
 }
 function canonicalPath(path) {
   try {
-    return realpathSync3(resolve8(path));
+    return realpathSync3(resolve9(path));
   } catch {
-    return resolve8(path);
+    return resolve9(path);
   }
 }
 function textFile(path, maxBytes = CODEX_DIFF_FILE_LIMIT) {
-  if (!existsSync11(path))
+  if (!existsSync12(path))
     return null;
   try {
     const byteLimit = Math.min(CODEX_DIFF_FILE_LIMIT, Math.max(0, maxBytes));
@@ -5290,7 +5427,7 @@ class CodexFilePreviewTracker {
       const code = record.slice(0, 2);
       const path = record.slice(3);
       const remainingBytes = CODEX_DIFF_BASELINE_BYTE_LIMIT - loadedBytes;
-      const content = loadedFiles < CODEX_DIFF_BASELINE_FILE_LIMIT && remainingBytes > 0 ? textFile(resolve8(this.#root, path), remainingBytes) : undefined;
+      const content = loadedFiles < CODEX_DIFF_BASELINE_FILE_LIMIT && remainingBytes > 0 ? textFile(resolve9(this.#root, path), remainingBytes) : undefined;
       this.#baseline.set(path, content);
       if (typeof content === "string") {
         loadedFiles += 1;
@@ -5303,7 +5440,7 @@ class CodexFilePreviewTracker {
   preview(path, succeeded) {
     if (!this.#root || !this.#baselineAvailable || !succeeded)
       return {};
-    const absolute = canonicalPath(isAbsolute2(path) ? path : resolve8(this.#cwd, path));
+    const absolute = canonicalPath(isAbsolute2(path) ? path : resolve9(this.#cwd, path));
     const relativePath = relative(this.#root, absolute);
     if (!relativePath || relativePath.startsWith("..") || isAbsolute2(relativePath))
       return {};
@@ -5338,7 +5475,7 @@ class CodexFilePreviewTracker {
   }
 }
 async function fileChangeEvents(item, previews, cwd, threadId, consumedPatchCallIds) {
-  const expectedPaths = item.changes.map((change) => isAbsolute2(change.path) ? change.path : resolve8(cwd, change.path));
+  const expectedPaths = item.changes.map((change) => isAbsolute2(change.path) ? change.path : resolve9(cwd, change.path));
   let nativePreview;
   if (threadId && item.status === "completed") {
     await new Promise((resolveDelay) => setTimeout(resolveDelay, 20));
@@ -5462,7 +5599,7 @@ async function* codexProvider(opts) {
   const filePreviews = new CodexFilePreviewTracker(opts.cwd);
   const consumedPatchCallIds = new Set(opts.sessionId ? readCodexPatchCallIds(opts.sessionId) : []);
   const codexAuthPath = hostedCodexAuthFilePath();
-  if (!existsSync11(codexAuthPath)) {
+  if (!existsSync12(codexAuthPath)) {
     yield {
       type: "error",
       content: `Codex auth file not found at ${codexAuthPath}. Run \`codex login\` to authenticate.`
@@ -5501,21 +5638,30 @@ async function* codexProvider(opts) {
     model: opts.model ?? "(sdk default)",
     effort: opts.effort ?? "(off)",
     cwd: opts.cwd,
-    cwdExists: existsSync11(opts.cwd),
+    cwdExists: existsSync12(opts.cwd),
     resume: Boolean(opts.sessionId),
     mcpServerCount: Object.keys(codexMcpServers).length
   }, "codexProvider: starting turn");
   const hostedCodexHome = hostedCodexHomePath();
-  const inheritedCodexHome = process.env.CODEX_HOME || join12(homedir6(), ".codex");
-  const codexEnvironment = scopedBrowserCapability || resolve8(hostedCodexHome) !== resolve8(inheritedCodexHome) ? {
+  const inheritedCodexHome = process.env.CODEX_HOME || join13(homedir6(), ".codex");
+  const codexEnvironment = scopedBrowserCapability || resolve9(hostedCodexHome) !== resolve9(inheritedCodexHome) ? {
     ...Object.fromEntries(Object.entries(process.env).filter((entry) => typeof entry[1] === "string")),
     CODEX_HOME: hostedCodexHome,
     ...scopedBrowserCapability ? { [CODEX_BROWSER_CAPABILITY_ENV]: scopedBrowserCapability } : {}
   } : undefined;
+  let vaultHook;
+  try {
+    vaultHook = await createCodexVaultHookBridge(opts.vaultUserId ?? opts.userId ?? "");
+  } catch (err) {
+    yield { type: "error", content: `Failed to initialize Codex Vault hooks: ${errMsg(err)}` };
+    return;
+  }
   const codex = new Codex({
+    codexPathOverride: vaultHook.codexPathOverride,
     ...codexEnvironment ? { env: codexEnvironment } : {},
     config: {
-      features: { multi_agent: false, multi_agent_v2: false, enable_fanout: false },
+      features: { hooks: true, multi_agent: false, multi_agent_v2: false, enable_fanout: false },
+      hooks: vaultHook.hooks,
       model_catalog_json: codexModelCatalogPath,
       mcp_servers: codexMcpServers,
       ...opts.toolPolicy ? { sandbox_permissions: [] } : {}
@@ -5619,7 +5765,7 @@ async function* codexProvider(opts) {
               if (!item)
                 break;
               if (item.type === "command_execution") {
-                const command = String(item.command ?? "");
+                const command = redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", String(item.command ?? ""));
                 yield {
                   type: "tool_use",
                   name: "Bash",
@@ -5627,10 +5773,11 @@ async function* codexProvider(opts) {
                   toolUseId: String(item.id ?? "")
                 };
               } else if (item.type === "mcp_tool_call") {
+                const input = item.arguments && typeof item.arguments === "object" ? item.arguments : {};
                 yield {
                   type: "tool_use",
                   name: String(item.tool ?? "unknown"),
-                  input: item.arguments && typeof item.arguments === "object" ? item.arguments : {},
+                  input: deepMapStrings(input, (value) => redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", value)),
                   toolUseId: String(item.id ?? "")
                 };
               }
@@ -5673,7 +5820,7 @@ async function* codexProvider(opts) {
                 yield {
                   type: "tool_result",
                   toolUseId: String(item.id ?? ""),
-                  content: summarizeMcpToolCallResult(item),
+                  content: redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", summarizeMcpToolCallResult(item)),
                   ...isError ? { isError: true } : {}
                 };
               } else if (item.type === "command_execution") {
@@ -5681,7 +5828,7 @@ async function* codexProvider(opts) {
                 yield {
                   type: "tool_result",
                   toolUseId: String(item.id ?? ""),
-                  content: String(item.aggregated_output ?? "").slice(0, 200),
+                  content: redactHostedSecrets(opts.vaultUserId ?? opts.userId ?? "", String(item.aggregated_output ?? "").slice(0, 200)),
                   ...isError ? { isError: true } : {}
                 };
               } else if (item.type === "file_change") {
@@ -5690,7 +5837,10 @@ async function* codexProvider(opts) {
                   yield fileEvent;
                 }
               } else if (item.type === "error") {
-                yield { type: "error", content: String(item.message ?? "") };
+                const message = String(item.message ?? "");
+                if (message !== CODEX_HOOK_TRUST_BYPASS_NOTICE) {
+                  yield { type: "error", content: message };
+                }
               }
               break;
             }
@@ -5778,12 +5928,14 @@ async function* codexProvider(opts) {
     abortSignal?.removeEventListener("abort", onAbortKill);
     if (trackedPids.pids.length > 0)
       unregisterOwnedCodexPids(trackedPids.pids);
+    await vaultHook.close();
   }
 }
-var CODEX_MCP_SERVER_NAME_OVERRIDES, CODEX_DIFF_FILE_LIMIT, CODEX_DIFF_BASELINE_FILE_LIMIT = 200, CODEX_DIFF_BASELINE_BYTE_LIMIT, CODEX_STARTUP_TIMEOUT_MS = 90000;
+var CODEX_HOOK_TRUST_BYPASS_NOTICE = "`--dangerously-bypass-hook-trust` is enabled. Enabled hooks may run without review for this invocation.", CODEX_MCP_SERVER_NAME_OVERRIDES, CODEX_DIFF_FILE_LIMIT, CODEX_DIFF_BASELINE_FILE_LIMIT = 200, CODEX_DIFF_BASELINE_BYTE_LIMIT, CODEX_STARTUP_TIMEOUT_MS = 90000;
 var init_codex_provider = __esm(async () => {
   init_codex_native_multi_agent();
   init_codex_tree_kill();
+  await init_codex_vault_hook_bridge();
   await init_execution_host();
   await init_codex();
   init_tool_format();
@@ -5811,7 +5963,7 @@ __export(exports_maestro_provider, {
   buildMaestroToolHooks: () => buildMaestroToolHooks,
   buildMaestroDisallowedTools: () => buildMaestroDisallowedTools
 });
-import { resolve as resolve9 } from "path";
+import { resolve as resolve10 } from "path";
 import { maestroProvider as sdkMaestroProvider, setMcpResolver } from "maestro-agent-sdk";
 function buildMaestroDisallowedTools(callerDisallowedTools = [], toolPolicy) {
   return [
@@ -5945,13 +6097,13 @@ var init_maestro_provider = __esm(async () => {
     "ToolSearch",
     ...DEFAULT_MAESTRO_DISALLOWED_TOOLS
   ];
-  MAESTRO_TOOL_OUTPUT_DIR = resolve9(RUN_DIR, "maestro-tool-outputs");
+  MAESTRO_TOOL_OUTPUT_DIR = resolve10(RUN_DIR, "maestro-tool-outputs");
 });
 
 // ../../packages/core/src/agents/index.ts
-import { existsSync as existsSync12 } from "fs";
+import { existsSync as existsSync13 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 async function* dispatchAgent(opts) {
   switch (opts.agent) {
     case "claude": {
@@ -5985,11 +6137,11 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
   switch (agent) {
     case "claude": {
       const encodedCwd = encodeClaudeCwd(cwd);
-      const path = join13(homedir7(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
-      return !existsSync12(path);
+      const path = join14(homedir7(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
+      return !existsSync13(path);
     }
     case "codex": {
-      const sessionsDir = join13(hostedCodexHomePath(), "sessions");
+      const sessionsDir = join14(hostedCodexHomePath(), "sessions");
       const glob = new Bun.Glob(`**/rollout-*-${sessionId}.jsonl`);
       for await (const _rel of glob.scan({ cwd: sessionsDir, onlyFiles: true })) {
         return false;
@@ -5998,7 +6150,7 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
     }
     case "maestro": {
       const { hasActiveMaestroSession, maestroSessionPath: maestroSessionPath2 } = await import("maestro-agent-sdk");
-      return !existsSync12(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
+      return !existsSync13(maestroSessionPath2(sessionId)) && !hasActiveMaestroSession(sessionId);
     }
     default: {
       const _exhaustive = agent;
@@ -6526,9 +6678,9 @@ var init_model_catalog = __esm(() => {
 
 // ../../packages/core/src/prompts/builders.ts
 import { readFileSync as readFileSync12 } from "fs";
-import { resolve as resolve10 } from "path";
+import { resolve as resolve11 } from "path";
 function loadPrompt(filename, dir = SESSIONS_DIR) {
-  const raw = readFileSync12(resolve10(dir, filename), "utf-8");
+  const raw = readFileSync12(resolve11(dir, filename), "utf-8");
   return raw.replace(/\{\{RESOURCES_DIR\}\}/g, RESOURCES_DIR);
 }
 function replaceVars(template, vars) {
@@ -6577,7 +6729,7 @@ function visualDesignGuide() {
   return _visualDesignGuide;
 }
 function loadAgentPrompt(filename) {
-  const raw = readFileSync12(resolve10(AGENTS_PROMPTS_DIR, filename), "utf-8");
+  const raw = readFileSync12(resolve11(AGENTS_PROMPTS_DIR, filename), "utf-8");
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match)
     throw new Error(`Agent prompt ${filename} is missing frontmatter`);
@@ -6892,8 +7044,8 @@ var init_builders = __esm(() => {
   init_model_catalog();
   init_config();
   init_logger();
-  PROMPTS_DIR = resolve10(PROJECT_ROOT, "src/prompts");
-  SESSIONS_DIR = resolve10(PROMPTS_DIR, "sessions");
+  PROMPTS_DIR = resolve11(PROJECT_ROOT, "src/prompts");
+  SESSIONS_DIR = resolve11(PROMPTS_DIR, "sessions");
   defaultPromptBuilders = createPromptBuilders();
   buildTopicSystemPrompt = defaultPromptBuilders.buildTopicSystemPrompt;
   buildChannelSystemPrompt = defaultPromptBuilders.buildChannelSystemPrompt;
@@ -7244,9 +7396,9 @@ var init_api_topic_brief = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/wiki.ts
-import { basename as basename2, dirname as dirname10, join as join14 } from "path";
+import { basename as basename2, dirname as dirname11, join as join15 } from "path";
 function getSharedWikiDir(workspaceDir = resolveStorageWorkspaceDir()) {
-  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join14(workspaceDir, "wiki");
+  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join15(workspaceDir, "wiki");
 }
 var init_wiki = __esm(async () => {
   await init_storage_host();
@@ -8080,8 +8232,8 @@ var init_personal_general = __esm(async () => {
 
 // ../../packages/core/src/agents/archiver.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { existsSync as existsSync13, readdirSync as readdirSync2, readFileSync as readFileSync13, statSync as statSync6 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync14, readdirSync as readdirSync2, readFileSync as readFileSync13, statSync as statSync6 } from "fs";
+import { join as join16 } from "path";
 function resolveMemoryLanguage() {
   const override = process.env.NEGOTIUM_MEMORY_LANG?.trim();
   return override && override.length > 0 ? override : resolveOutputLanguage();
@@ -8332,10 +8484,10 @@ function distillOneLine(summaryMd) {
   return "";
 }
 function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
-  const dir = join15(storage.getWikiDir(), "summaries");
+  const dir = join16(storage.getWikiDir(), "summaries");
   if (!storage.fileExists(dir))
     return null;
-  const predicted = join15(dir, wikiSummaryFilename(date, topicTitle, topicId));
+  const predicted = join16(dir, wikiSummaryFilename(date, topicTitle, topicId));
   if (storage.fileExists(predicted) && storage.fileModifiedAt(predicted) >= sinceMs)
     return predicted;
   let best = null;
@@ -8343,7 +8495,7 @@ function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
     if (!f.startsWith(`${date}-`) || !isTopicSummaryFile(f, topicId ?? "", topicTitle)) {
       continue;
     }
-    const p = join15(dir, f);
+    const p = join16(dir, f);
     try {
       const m = storage.fileModifiedAt(p);
       if (m >= sinceMs && (!best || m > best.mtime))
@@ -8424,7 +8576,7 @@ var init_archiver = __esm(async () => {
   defaultArchiverRuntime = createArchiverRuntime({
     storage: {
       getWikiDir: getSharedWikiDir,
-      fileExists: existsSync13,
+      fileExists: existsSync14,
       listDirectory: readdirSync2,
       readTextFile: (path) => readFileSync13(path, "utf-8"),
       fileSize: (path) => statSync6(path).size,
@@ -8469,9 +8621,9 @@ __export(exports_auth_check, {
   checkAgentAuth: () => checkAgentAuth
 });
 import { execFileSync as execFileSync5 } from "child_process";
-import { existsSync as existsSync14 } from "fs";
+import { existsSync as existsSync15 } from "fs";
 import { homedir as homedir8, platform } from "os";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 function hasMaestroCredential(host, key, userId) {
   if (userId && host.getVaultValue(userId, key)?.trim())
     return true;
@@ -8491,7 +8643,7 @@ function checkAgentAuth(agent, host = defaultAgentAuthHost, userId) {
     case "claude": {
       if (host.environment.ANTHROPIC_API_KEY)
         return { ok: true };
-      const path = join16(host.homeDirectory(), ".claude", ".credentials.json");
+      const path = join17(host.homeDirectory(), ".claude", ".credentials.json");
       if (host.operatingSystem() === "darwin") {
         if (host.hasMacOsCredential("Claude Code-credentials") || host.exists(path)) {
           return { ok: true };
@@ -8542,7 +8694,7 @@ var init_auth_check = __esm(async () => {
   await init_vault();
   defaultAgentAuthHost = {
     codexAuthFilePath,
-    exists: existsSync14,
+    exists: existsSync15,
     environment: process.env,
     homeDirectory: homedir8,
     operatingSystem: platform,
@@ -8559,7 +8711,7 @@ var init_auth_check = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/fork.ts
-import { existsSync as existsSync15, unlinkSync as unlinkSync8 } from "fs";
+import { existsSync as existsSync16, unlinkSync as unlinkSync8 } from "fs";
 function createAgentForkHelpers(host) {
   return {
     async forkAgentSession(options) {
@@ -8596,7 +8748,7 @@ var init_fork = __esm(async () => {
   init_logger();
   defaultForkHelpers = createAgentForkHelpers({
     forkSession: (agent, options) => getRegistryOperations(agent).forkSession(options),
-    exists: existsSync15,
+    exists: existsSync16,
     unlink: unlinkSync8,
     warn: (details, message) => logger.warn(details, message)
   });
@@ -9252,13 +9404,13 @@ function formatTopicArchiveTranscriptRecord(row, topicTitle, index) {
 
 // ../../packages/core/src/storage/topic-archive.ts
 import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync8 } from "fs";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 function archiveTopicMessages(topicId, topicTitle, options = {}) {
   const rows = options.afterRowid !== undefined ? getMessagesForTopicAfterRowid(topicId, options.afterRowid) : getAllMessagesForTopic(topicId);
   if (rows.length === 0)
     return null;
   const safeTopic = sanitizeTopicName(topicTitle, true);
-  const archiveDir = join17(getSharedWikiDir(), "archive");
+  const archiveDir = join18(getSharedWikiDir(), "archive");
   mkdirSync10(archiveDir, { recursive: true });
   const date = new Date().toISOString().slice(0, 10);
   const reasonSuffix = options.reason && options.reason !== "delete" ? `_${options.reason}` : "";
@@ -9271,7 +9423,7 @@ function archiveTopicMessages(topicId, topicTitle, options = {}) {
   let path;
   while (true) {
     filename = `${safeTopic}_${date}${reasonSuffix}${counter === 1 ? "" : `_${counter}`}.jsonl`;
-    path = join17(archiveDir, filename);
+    path = join18(archiveDir, filename);
     try {
       writeFileSync8(path, body, { flag: "wx" });
       break;
@@ -9316,7 +9468,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   const entries = readRawConversation(userId, topicTitle);
   if (entries.length === 0)
     return null;
-  const archiveDir = join17(getSharedWikiDir(), "archive");
+  const archiveDir = join18(getSharedWikiDir(), "archive");
   mkdirSync10(archiveDir, { recursive: true });
   const safeTopic = sanitizeTopicName(topicTitle, true);
   const date = new Date().toISOString().slice(0, 10);
@@ -9344,7 +9496,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   let counter = 1;
   while (true) {
     const suffix = counter === 1 ? "" : `_${counter}`;
-    const path = join17(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
+    const path = join18(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
     try {
       writeFileSync8(path, body, { flag: "wx" });
       logger.info({ topicId, topicTitle, archive: path, eventCount: entries.length }, "archiveConversationEvents: archived raw conversation events");
@@ -10255,8 +10407,8 @@ function createAskUserRuntime(host) {
       return errorResult(`Error: failed to persist ask_user_question: ${error instanceof Error ? error.message : String(error)}`);
     }
     let resolveAnswer;
-    const promise = new Promise((resolve11) => {
-      resolveAnswer = resolve11;
+    const promise = new Promise((resolve12) => {
+      resolveAnswer = resolve12;
     });
     pendingAsks.set(message.id, {
       topicId: ctx.topicId,
@@ -10510,11 +10662,11 @@ var init_manager_utils = () => {};
 // ../../packages/core/src/platform/playwright/browser-processes.ts
 import { execFileSync as execFileSync6 } from "child_process";
 import { readdirSync as readdirSync3, unlinkSync as unlinkSync10 } from "fs";
-import { createServer } from "net";
-import { resolve as resolve12, sep } from "path";
+import { createServer as createServer2 } from "net";
+import { resolve as resolve13, sep } from "path";
 function isPortInUse(port) {
   return new Promise((resolveProbe) => {
-    const server = createServer();
+    const server = createServer2();
     let settled = false;
     const finish = (occupied) => {
       if (settled)
@@ -10544,8 +10696,8 @@ async function reserveAvailableLoopbackPort(minPort, maxPort, reservedPorts, pro
   return null;
 }
 function killBrowserProcsForUserDataDir(userDataDir) {
-  const target = resolve12(userDataDir);
-  const profileRoot = resolve12(BROWSER_PROFILES_DIR);
+  const target = resolve13(userDataDir);
+  const profileRoot = resolve13(BROWSER_PROFILES_DIR);
   if (target !== profileRoot && !target.startsWith(`${profileRoot}${sep}`))
     return;
   let pids;
@@ -10566,7 +10718,7 @@ function killBrowserProcsForUserDataDir(userDataDir) {
         stdio: "pipe"
       }).toString().trim();
       const argDir = extractUserDataDirArg(cmdline);
-      if (!argDir || resolve12(argDir) !== target)
+      if (!argDir || resolve13(argDir) !== target)
         continue;
       killProcessTreeChildren(pidNum);
       process.kill(pidNum, "SIGKILL");
@@ -10577,13 +10729,13 @@ function killBrowserProcsForUserDataDir(userDataDir) {
   }
 }
 function selectOrphanBrowserPids(procs, liveUserDataDirs, profileRoot, selfPid) {
-  const root = resolve12(profileRoot);
-  const live = new Set([...liveUserDataDirs].map((d) => resolve12(d)));
+  const root = resolve13(profileRoot);
+  const live = new Set([...liveUserDataDirs].map((d) => resolve13(d)));
   const out = [];
   for (const { pid, userDataDir } of procs) {
     if (pid === selfPid || !userDataDir)
       continue;
-    const dir = resolve12(userDataDir);
+    const dir = resolve13(userDataDir);
     if (dir !== root && !dir.startsWith(`${root}${sep}`))
       continue;
     if (live.has(dir))
@@ -10599,7 +10751,7 @@ function reapOrphanBrowsers(liveUserDataDirs) {
   const daemonLease = getRuntimeProcessLease("node-daemon", Date.now(), Number.POSITIVE_INFINITY);
   if (!isBrowserJanitorOwner(daemonLease?.pid ?? null, process.pid))
     return;
-  const profileRoot = resolve12(BROWSER_PROFILES_DIR);
+  const profileRoot = resolve13(BROWSER_PROFILES_DIR);
   let pids;
   try {
     pids = execFileSync6("pgrep", ["-f", "--", profileRoot], { stdio: "pipe" }).toString().trim();
@@ -10638,7 +10790,7 @@ function cleanSingletonFiles(userDataDir) {
     for (const f of files) {
       if (f.startsWith("Singleton")) {
         try {
-          unlinkSync10(resolve12(userDataDir, f));
+          unlinkSync10(resolve13(userDataDir, f));
           logger.info({ file: f, userDataDir }, "Removed stale Singleton file");
         } catch (e) {
           logger.warn({ err: e, file: f }, "Failed to remove stale Chrome Singleton file");
@@ -10678,9 +10830,9 @@ var init_browser_processes = __esm(async () => {
 
 // ../../packages/core/src/platform/playwright/headed-launch.ts
 import { accessSync as accessSync2, constants as constants2 } from "fs";
-import { delimiter, isAbsolute as isAbsolute4, resolve as resolve13 } from "path";
+import { delimiter, isAbsolute as isAbsolute4, resolve as resolve14 } from "path";
 function findExecutableOnPath(command, environment = process.env) {
-  const candidates = isAbsolute4(command) ? [command] : (environment.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => resolve13(directory, command));
+  const candidates = isAbsolute4(command) ? [command] : (environment.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => resolve14(directory, command));
   for (const candidate of candidates) {
     try {
       accessSync2(candidate, constants2.X_OK);
@@ -10778,11 +10930,11 @@ var init_vault_public = __esm(async () => {
 });
 
 // ../../packages/core/src/platform/playwright/vault-broker.ts
-import { randomBytes as randomBytes5, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { randomBytes as randomBytes6, timingSafeEqual as timingSafeEqual2 } from "crypto";
 import { chmodSync as chmodSync4 } from "fs";
-import { createServer as createServer2 } from "net";
-import { tmpdir as tmpdir2 } from "os";
-import { join as join18 } from "path";
+import { createServer as createServer3 } from "net";
+import { tmpdir as tmpdir3 } from "os";
+import { join as join19 } from "path";
 function deepMapStrings2(value, transform) {
   if (typeof value === "string")
     return transform(value);
@@ -10868,8 +11020,8 @@ function authorized(actual, expected) {
   return left.length === right.length && timingSafeEqual2(left, right);
 }
 async function createBrowserVaultBroker(userId) {
-  const token = randomBytes5(32).toString("hex");
-  const socketPath = join18(process.platform === "win32" ? tmpdir2() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes5(8).toString("hex")}.sock`);
+  const token = randomBytes6(32).toString("hex");
+  const socketPath = join19(process.platform === "win32" ? tmpdir3() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes6(8).toString("hex")}.sock`);
   const retainedForms = new Map;
   const leases = new Map;
   const sockets = new Set;
@@ -10908,7 +11060,7 @@ async function createBrowserVaultBroker(userId) {
         return result.text;
       });
       const prepared = prepareInput(request.tool, substituted);
-      const lease = randomBytes5(24).toString("hex");
+      const lease = randomBytes6(24).toString("hex");
       leases.set(lease, { boundary: prepared.boundary, createdAt: Date.now() });
       return {
         id,
@@ -10940,7 +11092,7 @@ async function createBrowserVaultBroker(userId) {
     }
     return { id, ok: false, error: "unknown operation" };
   };
-  const server = createServer2((socket) => {
+  const server = createServer3((socket) => {
     sockets.add(socket);
     let pending = "";
     socket.setEncoding("utf8");
@@ -11068,24 +11220,24 @@ var init_browser_profiles = __esm(async () => {
 
 // ../../packages/core/src/platform/playwright/manager.ts
 import { execFileSync as execFileSync7, spawn as spawn5 } from "child_process";
-import { createHash as createHash4, randomBytes as randomBytes6, timingSafeEqual as timingSafeEqual3 } from "crypto";
+import { createHash as createHash4, randomBytes as randomBytes7, timingSafeEqual as timingSafeEqual3 } from "crypto";
 import {
   cpSync,
-  existsSync as existsSync17,
+  existsSync as existsSync18,
   mkdirSync as mkdirSync11,
   readFileSync as readFileSync15,
   rmSync as rmSync3,
   unlinkSync as unlinkSync11,
   writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname11, join as join19, resolve as resolve14 } from "path";
+import { dirname as dirname12, join as join20, resolve as resolve15 } from "path";
 function removeDefaultProfileDataDir(userDataDir) {
-  const root = resolve14(BROWSER_PROFILES_DIR);
-  const target = resolve14(userDataDir);
-  if (dirname11(target) !== root) {
+  const root = resolve15(BROWSER_PROFILES_DIR);
+  const target = resolve15(userDataDir);
+  if (dirname12(target) !== root) {
     throw new Error(`Refusing to delete browser profile outside managed root: ${target}`);
   }
-  const existed = existsSync17(target);
+  const existed = existsSync18(target);
   rmSync3(target, { recursive: true, force: true });
   return existed;
 }
@@ -11168,14 +11320,14 @@ function portFileName(instanceKey) {
 function writePortFile(instanceKey, port) {
   try {
     mkdirSync11(managerHost.portsDir, { recursive: true });
-    writeFileSync9(join19(managerHost.portsDir, portFileName(instanceKey)), String(port));
+    writeFileSync9(join20(managerHost.portsDir, portFileName(instanceKey)), String(port));
   } catch (e) {
     logger.warn({ err: e, instanceKey, port }, "Failed to save playwright port file");
   }
 }
 function deletePortFile(instanceKey) {
   try {
-    unlinkSync11(join19(managerHost.portsDir, portFileName(instanceKey)));
+    unlinkSync11(join20(managerHost.portsDir, portFileName(instanceKey)));
   } catch (e) {
     if (e.code === "ENOENT")
       return;
@@ -11299,7 +11451,7 @@ function releasePort(port) {
   usedPorts.delete(port);
 }
 function defaultProfileDir(_ownerId, profile) {
-  return resolve14(BROWSER_PROFILES_DIR, profile);
+  return resolve15(BROWSER_PROFILES_DIR, profile);
 }
 function resolveUserDataDir(instanceKey) {
   return managerHost.resolveInstanceDataDir(instanceKey);
@@ -11391,8 +11543,8 @@ async function spawnPlaywright(instanceKey, ownerId, reservedPort, browserBin =
     releasePort(port);
     throw new Error("Browser.rs managed mode does not support authenticated egress proxies");
   }
-  const capability = randomBytes6(32).toString("hex");
-  const spawnNonce = randomBytes6(32).toString("hex");
+  const capability = randomBytes7(32).toString("hex");
+  const spawnNonce = randomBytes7(32).toString("hex");
   let vaultBroker;
   try {
     vaultBroker = await createBrowserVaultBroker(ownerId);
@@ -11660,14 +11812,14 @@ async function cloneProfileForChild(opts) {
       killInstance(dstKey);
       await delay(500);
     }
-    if (!existsSync17(srcDir)) {
+    if (!existsSync18(srcDir)) {
       return { copied: false, srcDir, dstDir, reason: "src-missing" };
     }
     try {
-      if (existsSync17(dstDir)) {
+      if (existsSync18(dstDir)) {
         rmSync3(dstDir, { recursive: true, force: true });
       }
-      mkdirSync11(dirname11(dstDir), { recursive: true });
+      mkdirSync11(dirname12(dstDir), { recursive: true });
       if (process.platform === "darwin") {
         try {
           execFileSync7("cp", ["-cR", srcDir, dstDir], { stdio: "pipe" });
@@ -11685,7 +11837,7 @@ async function cloneProfileForChild(opts) {
     cleanSingletonFiles(dstDir);
     for (const f of ["DevToolsActivePort", "LOCK"]) {
       try {
-        unlinkSync11(resolve14(dstDir, f));
+        unlinkSync11(resolve15(dstDir, f));
       } catch {}
     }
     logger.info({ srcKey, dstKey, srcDir, dstDir }, "Cloned Playwright profile for child topic");
@@ -11813,7 +11965,7 @@ RULES:
 
 // ../../packages/core/src/agents/topic-cleanup.ts
 import { mkdirSync as mkdirSync12, renameSync as renameSync6, unlinkSync as unlinkSync12, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname12 } from "path";
+import { dirname as dirname13 } from "path";
 function collectSessionIdsByAgent(entries, extraSessions = []) {
   const out = new Map;
   for (const e of entries) {
@@ -11879,7 +12031,7 @@ function createTopicLogMaintenance(host) {
       const path = runtimeHost.activeConversationPath(opts.userId, opts.topicName);
       const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
       try {
-        mkdirSync12(dirname12(path), { recursive: true });
+        mkdirSync12(dirname13(path), { recursive: true });
         writeFileSync10(tempPath, retained.length > 0 ? `${retained.map((entry) => JSON.stringify(entry)).join(`
 `)}
 ` : "", { flag: "wx" });
@@ -12333,8 +12485,8 @@ var init_runtime_turn_requests = __esm(async () => {
 // ../../packages/core/src/topics/session.ts
 import { randomUUID as randomUUID11 } from "crypto";
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "fs";
-import { tmpdir as tmpdir3 } from "os";
-import { join as join20 } from "path";
+import { tmpdir as tmpdir4 } from "os";
+import { join as join21 } from "path";
 function previousCompactedSummary(entries) {
   for (let index = entries.length - 2;index >= 0; index -= 1) {
     const request = entries[index]?.event;
@@ -12464,7 +12616,7 @@ function formatCompactElapsed(startedAt) {
 async function summarizeTopicContext(request) {
   const startedAt = Date.now();
   const sessionIds = [];
-  const compactCwd = mkdtempSync2(join20(tmpdir3(), "negotium-compact-"));
+  const compactCwd = mkdtempSync2(join21(tmpdir4(), "negotium-compact-"));
   const abortController = new AbortController;
   const relayAbort = () => abortController.abort(request.signal?.reason);
   if (request.signal?.aborted)
@@ -12491,7 +12643,7 @@ async function summarizeTopicContext(request) {
   let error = "";
   let toolViolation = false;
   let compactionLogCalls = 0;
-  const compactionLogPath = join20(compactCwd, "conversation.log");
+  const compactionLogPath = join21(compactCwd, "conversation.log");
   try {
     const compactionMcp = useCompactionLog ? {
       compact_log: {
@@ -13110,14 +13262,14 @@ var init_derive = __esm(async () => {
 });
 
 // ../../packages/core/src/query/session-inbox-path.ts
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 function sessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join21(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
+  return join22(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
 }
 function scheduledSessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join21(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
+  return join22(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
 }
 var TOPIC_ID_FILE_PREFIX = "topic-id-", JSONL_SUFFIX = ".jsonl", SCHEDULE_SUFFIX = ".schedule";
 var init_session_inbox_path = __esm(() => {
@@ -13126,13 +13278,13 @@ var init_session_inbox_path = __esm(() => {
 
 // ../../packages/core/src/query/session-inbox-cleanup.ts
 import { unlinkSync as unlinkSync14 } from "fs";
-import { basename as basename3, join as join22 } from "path";
+import { basename as basename3, join as join23 } from "path";
 function cleanupSessionInboxFiles(userId, topicId, legacyTopicTitle) {
   const live = sessionInboxPath(userId, topicId);
   const scheduled = scheduledSessionInboxPath(userId, topicId);
   const candidates = new Set([live, `${live}.processing`, scheduled, `${scheduled}.processing`]);
   if (legacyTopicTitle && legacyTopicTitle !== "." && legacyTopicTitle !== ".." && basename3(legacyTopicTitle) === legacyTopicTitle) {
-    const legacyBase = join22(SESSION_INBOX_DIR, userId, legacyTopicTitle);
+    const legacyBase = join23(SESSION_INBOX_DIR, userId, legacyTopicTitle);
     for (const suffix of [".jsonl", ".jsonl.processing", ".schedule", ".schedule.processing"]) {
       candidates.add(`${legacyBase}${suffix}`);
     }
@@ -13158,16 +13310,16 @@ var init_session_inbox_cleanup = __esm(() => {
 
 // ../../packages/core/src/query/state.ts
 import { mkdirSync as mkdirSync14, renameSync as renameSync7, unlinkSync as unlinkSync15, writeFileSync as writeFileSync12 } from "fs";
-import { basename as basename4, join as join23 } from "path";
+import { basename as basename4, join as join24 } from "path";
 function createQueryStateStore(options) {
   const sanitize = options.sanitizeTopicId ?? sanitizeId;
-  const queryStateDirPath = (userId) => join23(options.usersLogDir, String(userId), "active-queries");
-  const queryStateFile = (userId, topicId) => join23(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
+  const queryStateDirPath = (userId) => join24(options.usersLogDir, String(userId), "active-queries");
+  const queryStateFile = (userId, topicId) => join24(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
   const legacyQueryStateFile = (userId, topicName) => {
     if (!topicName || topicName === "." || topicName === ".." || basename4(topicName) !== topicName) {
       return null;
     }
-    return join23(queryStateDirPath(userId), `${topicName}.json`);
+    return join24(queryStateDirPath(userId), `${topicName}.json`);
   };
   return {
     write(userId, topicId, topicName, task) {
@@ -13328,30 +13480,30 @@ import {
   unlinkSync as unlinkSync16,
   writeFileSync as writeFileSync13
 } from "fs";
-import { dirname as dirname13, join as join24 } from "path";
+import { dirname as dirname14, join as join25 } from "path";
 function pendingAskDir(userId) {
   const rawUserId = String(userId);
   const safeUserId = /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..") ? rawUserId : `sha256-${createHash6("sha256").update(rawUserId).digest("hex")}`;
-  return join24(resolveStorageSessionAsksDir(), safeUserId);
+  return join25(resolveStorageSessionAsksDir(), safeUserId);
 }
 function encodeAskKey(key) {
   return JSON.stringify([key.from, key.to]);
 }
 function pendingAskPath(key) {
   const digest = createHash6("sha256").update(encodeAskKey(key)).digest("hex");
-  return join24(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
+  return join25(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
 }
 function v2PendingAskPath(key) {
   const encoded = Buffer.from(encodeAskKey(key), "utf8").toString("base64url");
-  return join24(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
+  return join25(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
 }
 function legacyPendingAskPath(key) {
   if (key.from.includes("/") || key.from.includes("\\") || key.to.includes("/") || key.to.includes("\\") || key.from.includes("\x00") || key.to.includes("\x00")) {
     return null;
   }
   const dir = pendingAskDir(key.userId);
-  const candidate = join24(dir, `${key.from}___${key.to}.pending`);
-  return dirname13(candidate) === dir ? candidate : null;
+  const candidate = join25(dir, `${key.from}___${key.to}.pending`);
+  return dirname14(candidate) === dir ? candidate : null;
 }
 function parsePendingAskFilename(fileName) {
   if (!fileName.endsWith(".pending"))
@@ -13591,7 +13743,7 @@ function listPendingAsksForCaller(args) {
     const parsed = isV3 ? { from: args.from, to: "" } : parsePendingAskFilename(fileName);
     if (!parsed)
       continue;
-    const path = join24(dir, fileName);
+    const path = join25(dir, fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
       from: parsed.from,
@@ -13633,7 +13785,7 @@ function deletePendingAsksForTopic(args) {
   }
   let deleted = 0;
   for (const fileName of files) {
-    const path = join24(dir, fileName);
+    const path = join25(dir, fileName);
     const parsed = parsePendingAskFilename(fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
@@ -14033,7 +14185,7 @@ body{font-family:system-ui,-apple-system,"Segoe UI",sans-serif;background:var(--
 // ../../packages/core/src/storage/token-stats.ts
 import { createHash as createHash7 } from "crypto";
 import { mkdirSync as mkdirSync16, writeFileSync as writeFileSync14 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 function tokenStatsFileId(userId) {
   const rawUserId = String(userId);
   return /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..") ? rawUserId : `sha256-${createHash7("sha256").update(rawUserId).digest("hex")}`;
@@ -14042,7 +14194,7 @@ function queriesPath(userId) {
   const fileId = tokenStatsFileId(userId);
   const logDir = resolveStorageLogDir();
   mkdirSync16(logDir, { recursive: true });
-  return join25(logDir, `token-queries-${fileId}.jsonl`);
+  return join26(logDir, `token-queries-${fileId}.jsonl`);
 }
 function estimateUsageCost(agent, model, usage) {
   const prices = TOKEN_PRICES[`${agent}:${model}`];
@@ -14358,7 +14510,7 @@ var init_lifecycle = __esm(async () => {
 // ../../packages/core/src/runtime/attachments.ts
 import { randomUUID as randomUUID14 } from "crypto";
 import { copyFileSync as copyFileSync2, mkdirSync as mkdirSync17, writeFileSync as writeFileSync15 } from "fs";
-import { basename as basename5, join as join26 } from "path";
+import { basename as basename5, join as join27 } from "path";
 function workspaceCwdFor(topicId) {
   return resolveTopicWorkspaceDir(topicId);
 }
@@ -14371,7 +14523,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
   if (!attachmentIds?.length)
     return [];
   const out = [];
-  const destDir = join26(workspaceCwdFor(topicId), "attachments", queryId);
+  const destDir = join27(workspaceCwdFor(topicId), "attachments", queryId);
   for (const rawId of attachmentIds) {
     if (typeof rawId !== "string")
       continue;
@@ -14388,7 +14540,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
       mkdirSync17(destDir, { recursive: true });
       const index = String(out.length + 1).padStart(2, "0");
       const safeName = safeAttachmentFilename(attachment.filename, fileId);
-      const destPath = join26(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
+      const destPath = join27(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
       copyFileSync2(sourcePath, destPath);
       out.push({
         id: attachment.id,
@@ -14418,10 +14570,10 @@ function promptWithAttachments(prompt, attachments) {
   return composeAttachmentPrompt(prompt, attachments.map(({ filename, path }) => attachmentPromptLine(filename, path)));
 }
 function ingestAttachment(args) {
-  const destDir = join26(UPLOADS_DIR, args.topicId);
+  const destDir = join27(UPLOADS_DIR, args.topicId);
   mkdirSync17(destDir, { recursive: true });
   const safeName = safeAttachmentFilename(args.filename, "upload");
-  const destPath = join26(destDir, `${Date.now()}-${randomUUID14().slice(0, 8)}-${safeName}`);
+  const destPath = join27(destDir, `${Date.now()}-${randomUUID14().slice(0, 8)}-${safeName}`);
   if (args.sourcePath !== undefined) {
     copyFileSync2(args.sourcePath, destPath);
   } else if (args.bytes !== undefined) {
@@ -14596,12 +14748,12 @@ var init_errors = __esm(() => {
 
 // ../../packages/core/src/runtime/event-heartbeat.ts
 function nextOrHeartbeat(pending, intervalMs) {
-  return new Promise((resolve15, reject) => {
-    const timer = setTimeout(() => resolve15({ kind: "heartbeat" }), intervalMs);
+  return new Promise((resolve16, reject) => {
+    const timer = setTimeout(() => resolve16({ kind: "heartbeat" }), intervalMs);
     timer.unref?.();
     pending.then((result) => {
       clearTimeout(timer);
-      resolve15({ kind: "event", result });
+      resolve16({ kind: "event", result });
     }, (error) => {
       clearTimeout(timer);
       reject(error);
@@ -14922,7 +15074,7 @@ var init_visual_html = __esm(() => {
 
 // ../../packages/core/src/runtime/visuals.ts
 import { realpathSync as realpathSync4 } from "fs";
-import { isAbsolute as isAbsolute5, resolve as resolve15 } from "path";
+import { isAbsolute as isAbsolute5, resolve as resolve16 } from "path";
 function activeVisualHtmlForPrompt(html) {
   if (html.length <= ACTIVE_VISUAL_PROMPT_MAX_CHARS) {
     return { html, omittedChars: 0 };
@@ -14973,8 +15125,8 @@ function topicAllowsVisualFileId(topicId, fileId) {
   return topicHasAttachmentFileId(topicId, fileId) || topicHasVisualFileId(topicId, fileId);
 }
 function isPathInside(baseDir, filePath) {
-  const base = resolve15(baseDir);
-  const normalized = resolve15(filePath);
+  const base = resolve16(baseDir);
+  const normalized = resolve16(filePath);
   try {
     const realBase = realpathSync4(base);
     const real = realpathSync4(normalized);
@@ -15036,7 +15188,7 @@ function resolveVisualMediaInput(topicId, input) {
   }
   const rawPath = input.file_path.trim();
   const cwd = workspaceCwdFor(topicId);
-  const candidate = isAbsolute5(rawPath) ? rawPath : resolve15(cwd, rawPath);
+  const candidate = isAbsolute5(rawPath) ? rawPath : resolve16(cwd, rawPath);
   if (!isPathInside(cwd, candidate)) {
     return { error: "file_path must be inside the topic workspace" };
   }
@@ -15074,7 +15226,7 @@ var init_visuals = __esm(async () => {
 // ../../packages/core/src/runtime/turn-event-stream.ts
 import { randomUUID as randomUUID15 } from "crypto";
 import { realpathSync as realpathSync5, statSync as statSync9 } from "fs";
-import { isAbsolute as isAbsolute6, resolve as resolve16 } from "path";
+import { isAbsolute as isAbsolute6, resolve as resolve17 } from "path";
 function sessionEventMatchesCurrentExecution(topicId, queryId, agent, model) {
   if (getRoomQuery(topicId)?.queryId !== queryId)
     return false;
@@ -15427,7 +15579,7 @@ ${JSON.stringify(event.input ?? {})}`);
         case "file":
           if (!silent && peerBridge) {
             const cwd = workspaceCwdFor(topicId);
-            const path = isAbsolute6(event.path) ? event.path : resolve16(cwd, event.path);
+            const path = isAbsolute6(event.path) ? event.path : resolve17(cwd, event.path);
             if (!isPathInside(cwd, path)) {
               logger.warn({ topicId, path }, "peer output file is outside the topic workspace");
               break;
@@ -15709,15 +15861,15 @@ var init_turn_session = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/app-settings.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync18, readFileSync as readFileSync17, writeFileSync as writeFileSync16 } from "fs";
-import { dirname as dirname14, join as join27 } from "path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync18, readFileSync as readFileSync17, writeFileSync as writeFileSync16 } from "fs";
+import { dirname as dirname15, join as join28 } from "path";
 function settingsFile() {
-  return join27(resolveStorageDataDir(), "otium-settings.json");
+  return join28(resolveStorageDataDir(), "otium-settings.json");
 }
 function getGlobalAiName() {
   const path = settingsFile();
   try {
-    if (existsSync18(path)) {
+    if (existsSync19(path)) {
       const data = JSON.parse(readFileSync17(path, "utf8"));
       if (typeof data.aiName === "string" && data.aiName.trim()) {
         return data.aiName.trim();
@@ -15806,8 +15958,8 @@ __export(exports_turn_runner, {
   AGENT_DISPLAY_NAME: () => AGENT_DISPLAY_NAME
 });
 import { randomUUID as randomUUID16 } from "crypto";
-import { existsSync as existsSync19, mkdirSync as mkdirSync19, readdirSync as readdirSync5, statSync as statSync10 } from "fs";
-import { join as join28 } from "path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync19, readdirSync as readdirSync5, statSync as statSync10 } from "fs";
+import { join as join29 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
   if (isManager)
     return configuredMcp;
@@ -15862,8 +16014,8 @@ function appendAskReplyMessage(topicId, text2, agentType) {
   return message;
 }
 function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, matchesTitle, preferExact = true) {
-  const preferred = join28(directory, preferredFilename);
-  if (preferExact && existsSync19(preferred))
+  const preferred = join29(directory, preferredFilename);
+  if (preferExact && existsSync20(preferred))
     return preferred;
   let newestLegacyId = null;
   let newestTitle = null;
@@ -15873,7 +16025,7 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
       const legacyIdMatch = !titleMatch && matchesLegacyId(filename);
       if (!titleMatch && !legacyIdMatch)
         continue;
-      const path = join28(directory, filename);
+      const path = join29(directory, filename);
       const mtimeMs = statSync10(path).mtimeMs;
       if (titleMatch) {
         if (!newestTitle || mtimeMs > newestTitle.mtimeMs) {
@@ -15887,10 +16039,10 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
   return newestTitle?.path ?? newestLegacyId?.path ?? preferred;
 }
 function resolveWikiMemoryMirror(wikiDir, topicId, topicTitle) {
-  const briefFile = resolveWikiMirrorPath(join28(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
-  const hasBriefFile = existsSync19(briefFile) && statSync10(briefFile).isFile();
-  const latestSummaryCandidate = resolveWikiMirrorPath(join28(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
-  const latestSummaryFile = existsSync19(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
+  const briefFile = resolveWikiMirrorPath(join29(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
+  const hasBriefFile = existsSync20(briefFile) && statSync10(briefFile).isFile();
+  const latestSummaryCandidate = resolveWikiMirrorPath(join29(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
+  const latestSummaryFile = existsSync20(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
   return { briefFile, hasBriefFile, latestSummaryFile };
 }
 async function streamAgentEvents(topicId, topicTitle, queryId, events, control, agentType, model, effort, userId, retryableSessionExpired = true, onSessionId, execution) {
@@ -17924,8 +18076,8 @@ init_common();
 import { z as z2 } from "zod";
 
 // ../../packages/core/src/agents/mcp-tools/inline-assets.ts
-import { existsSync as existsSync16, readFileSync as readFileSync14, statSync as statSync7 } from "fs";
-import { extname, isAbsolute as isAbsolute3, resolve as resolve11 } from "path";
+import { existsSync as existsSync17, readFileSync as readFileSync14, statSync as statSync7 } from "fs";
+import { extname, isAbsolute as isAbsolute3, resolve as resolve12 } from "path";
 var MIME_BY_EXT = {
   ".apng": "image/apng",
   ".avif": "image/avif",
@@ -17970,10 +18122,10 @@ function inlineLocalAssets(html, options) {
     const relPath = stripSuffix(ref);
     if (!relPath)
       return null;
-    const abs = isAbsolute3(relPath) ? relPath : resolve11(baseDir, relPath);
+    const abs = isAbsolute3(relPath) ? relPath : resolve12(baseDir, relPath);
     let bytes;
     try {
-      if (!existsSync16(abs) || !statSync7(abs).isFile()) {
+      if (!existsSync17(abs) || !statSync7(abs).isFile()) {
         unresolved.push(ref);
         cache.set(ref, null);
         return null;
@@ -18930,7 +19082,6 @@ var otiumVisualToolDefinitions = [
 await init_task_events();
 init_tool_format();
 await init_topic_cleanup();
-init_vault_tool_policy();
 export {
   withTaskSnapshots,
   withCodexSpawnSerial,
@@ -18945,23 +19096,19 @@ export {
   showMermaidTool,
   showImageTool,
   showHtmlTool,
-  shouldRedirectVaultTool,
   rotateTopicLogs,
   resolveTaskEventScope,
   registerOwnedCodexPids,
-  referencesRuntimeSecretStorage,
   purgeTopicLogs,
   otiumVisualToolDefinitions,
   normalizeAskUserQuestionInput,
   normalizeAskUserChoices,
   killOwnedCodexTreesForShutdown,
   killCodexTrees,
-  isVaultBrokerTool,
   formatToolUse,
   forkAgentSession,
   findNewCodexChildren,
   defaultAskUserDurabilityHost,
-  createVaultToolPolicy,
   createTopicLogMaintenance,
   createSubagentLifecycle,
   createSelfConfigToolDefinitionsForCore,
@@ -18982,9 +19129,8 @@ export {
   archiveActiveTopicForMemory,
   acquireCodexSpawnLock,
   VISUALS_MCP_KEY,
-  VAULT_BROKER_REDIRECT_ERROR,
   MIN_MEMORY_ARCHIVE_EXCHANGES,
   DEFAULT_SELF_CONFIG_PRODUCT
 };
 
-//# debugId=AA945E7A95E4EEDF64756E2164756E21
+//# debugId=0CE166A02CA7806164756E2164756E21