negotium 0.4.0 → 0.4.2

package/dist/mcp-factories.js

@@ -1017,7 +1017,7 @@ var init_claude_registry = __esm(() => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.4.0";
+var NEGOTIUM_VERSION = "0.4.2";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn } from "child_process";
@@ -1699,7 +1699,8 @@ var init_mcp_catalog_policy = __esm(() => {
     "system-health": { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
     "background-bash": { scopes: ["forum"], forumRequired: true },
     "agent-health": { scopes: ["forum", "manager", "cron"], forumRequired: true },
-    vault: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true }
+    vault: { scopes: ["dm", "forum", "manager", "cron"], forumRequired: true },
+    "cua-rs": { scopes: ["dm", "forum", "fork"], forumRequired: false }
   };
 });
 
@@ -1711,6 +1712,9 @@ function browserOwnerCapability(capability, owner) {
 var init_capability = () => {};
 
 // ../../packages/core/src/platform/mcp-config.ts
+import { accessSync as accessSync2, constants as fsConstants } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 function buildStdioMcpServer(agent, serverFile, serverArgs, env) {
   if (agent === "codex") {
     return {
@@ -1823,6 +1827,27 @@ function backgroundBashTransport(agent, port, userId, topic) {
   }
   return { type: "sse", url: `http://127.0.0.1:${port}/sse`, headers };
 }
+function cuaRsArgs() {
+  const raw = envText("NEGOTIUM_CUA_RS_ALLOW_HID")?.trim().toLowerCase();
+  const on = raw === "1" || raw === "true" || raw === "yes";
+  return on ? ["--allow-hid"] : [];
+}
+function resolveCuaRsBinary(platform = process.platform) {
+  if (platform !== "darwin")
+    return null;
+  const candidates = [
+    envText("NEGOTIUM_CUA_RS_BIN"),
+    join6(homedir4(), ".local", "bin", "cua-rs"),
+    "/usr/local/bin/cua-rs"
+  ].filter((p) => Boolean(p));
+  for (const candidate of candidates) {
+    try {
+      accessSync2(candidate, fsConstants.X_OK);
+      return candidate;
+    } catch {}
+  }
+  return null;
+}
 function refreshForumCatalogViews() {
   const { all, required, optional } = classifyForumMcpServers(MCP_CATALOG);
   allForumMcpServerNames.splice(0, allForumMcpServerNames.length, ...all);
@@ -2256,6 +2281,15 @@ var init_mcp_config = __esm(() => {
           args.push("--list-only=true");
         return buildBuiltinMcpServer("vault", { ...ctx, userId: vaultUserId ?? userId }, () => buildStdioMcpServer(agent, VAULT_SERVER, args));
       }
+    },
+    "cua-rs": {
+      ...commonRuntimeMcpPolicy("cua-rs"),
+      build() {
+        const bin = resolveCuaRsBinary();
+        if (!bin)
+          return null;
+        return { command: bin, args: cuaRsArgs() };
+      }
     }
   };
   allForumMcpServerNames = [];
@@ -2268,8 +2302,8 @@ var init_mcp_config = __esm(() => {
 
 // ../../packages/core/src/storage/storage-host.ts
 import { mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir4 } from "os";
-import { dirname as dirname5, join as join6, resolve as resolve5 } from "path";
+import { homedir as homedir5 } from "os";
+import { dirname as dirname5, join as join7, resolve as resolve5 } from "path";
 function storageState() {
   const holder = globalThis;
   const existing = holder[STORAGE_HOST_STATE];
@@ -2297,23 +2331,23 @@ function envPath(name, fallback) {
   return resolve5(value2 || fallback);
 }
 function defaultStateDir() {
-  return envPath("NEGOTIUM_STATE_DIR", join6(homedir4(), ".negotium"));
+  return envPath("NEGOTIUM_STATE_DIR", join7(homedir5(), ".negotium"));
 }
 function defaultDataDir() {
-  return envPath("NEGOTIUM_DATA_DIR", join6(defaultStateDir(), "data"));
+  return envPath("NEGOTIUM_DATA_DIR", join7(defaultStateDir(), "data"));
 }
 function defaultLogDir() {
-  return envPath("NEGOTIUM_LOG_DIR", join6(defaultStateDir(), "logs"));
+  return envPath("NEGOTIUM_LOG_DIR", join7(defaultStateDir(), "logs"));
 }
 function defaultWorkspaceDir() {
-  return envPath("NEGOTIUM_WORKSPACE_DIR", join6(defaultStateDir(), "workspace"));
+  return envPath("NEGOTIUM_WORKSPACE_DIR", join7(defaultStateDir(), "workspace"));
 }
 function defaultSessionAsksDir() {
-  const runDir = envPath("NEGOTIUM_RUN_DIR", join6(defaultStateDir(), "runtime"));
-  return join6(runDir, "session-asks");
+  const runDir = envPath("NEGOTIUM_RUN_DIR", join7(defaultStateDir(), "runtime"));
+  return join7(runDir, "session-asks");
 }
 function defaultSessionsDatabasePath() {
-  return envPath("SESSIONS_DB_PATH", join6(resolveStorageDataDir(), "sessions.db"));
+  return envPath("SESSIONS_DB_PATH", join7(resolveStorageDataDir(), "sessions.db"));
 }
 function isSqliteBusy(error) {
   const message = error instanceof Error ? error.message : String(error);
@@ -2370,7 +2404,7 @@ function resolveStorageWorkspaceDir() {
   return storageState().configuredHost.workspaceDir ?? defaultWorkspaceDir();
 }
 function resolveStorageSharedWikiDir() {
-  return storageState().configuredHost.sharedWikiDir ?? join6(resolveStorageWorkspaceDir(), "wiki");
+  return storageState().configuredHost.sharedWikiDir ?? join7(resolveStorageWorkspaceDir(), "wiki");
 }
 function registerStorageSchemaInitializer(initialize, priority = 100) {
   const initializers = storageState().schemaInitializers;
@@ -2480,7 +2514,7 @@ var init_vault_crypto = __esm(() => {
 
 // ../../packages/core/src/storage/vault.ts
 import { chmodSync as chmodSync4, mkdirSync as mkdirSync7 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 function initializeVaultDatabase(database) {
   database.exec("PRAGMA journal_mode = WAL");
   database.exec("PRAGMA busy_timeout = 5000");
@@ -2515,8 +2549,8 @@ function initializeVaultDatabase(database) {
   }
 }
 function openVaultDatabase(dataDir) {
-  const vaultDir = join7(dataDir, "vault");
-  const path = join7(vaultDir, "vault.db");
+  const vaultDir = join8(dataDir, "vault");
+  const path = join8(vaultDir, "vault.db");
   mkdirSync7(vaultDir, { recursive: true, mode: 448 });
   const database = new Database(path, { create: true });
   chmodSync4(path, 384);
@@ -2682,14 +2716,14 @@ var init_execution_host = __esm(async () => {
 // ../../packages/core/src/agents/rollout/codex.ts
 import { randomBytes as randomBytes4 } from "crypto";
 import { existsSync as existsSync7, readFileSync as readFileSync7, realpathSync as realpathSync2, statSync as statSync3, unlinkSync as unlinkSync7 } from "fs";
-import { basename as basename2, dirname as dirname7, join as join8, resolve as resolve6 } from "path";
+import { basename as basename2, dirname as dirname7, join as join9, resolve as resolve6 } from "path";
 function codexSessionsDir() {
-  return join8(hostedCodexHomePath(), "sessions");
+  return join9(hostedCodexHomePath(), "sessions");
 }
 function loadCodexShell() {
   if (_shellCache)
     return _shellCache;
-  const raw = readFileSync7(join8(FIXTURES_DIR, "codex-shell.jsonl"), "utf8");
+  const raw = readFileSync7(join9(FIXTURES_DIR, "codex-shell.jsonl"), "utf8");
   const lines = parseJsonlText(raw);
   if (lines.length < 5) {
     throw new Error(`loadCodexShell: expected >=5 entries in codex-shell.jsonl, got ${lines.length}`);
@@ -2756,8 +2790,8 @@ function codexRolloutPath(threadId, fallback) {
   const hh = String(createdAt.getHours()).padStart(2, "0");
   const min = String(createdAt.getMinutes()).padStart(2, "0");
   const ss = String(createdAt.getSeconds()).padStart(2, "0");
-  const dir = join8(codexSessionsDir(), yyyy, mm, dd);
-  return join8(dir, `rollout-${yyyy}-${mm}-${dd}T${hh}-${min}-${ss}-${threadId}.jsonl`);
+  const dir = join9(codexSessionsDir(), yyyy, mm, dd);
+  return join9(dir, `rollout-${yyyy}-${mm}-${dd}T${hh}-${min}-${ss}-${threadId}.jsonl`);
 }
 function canonicalFilePath(path) {
   const absolute = resolve6(path);
@@ -2765,7 +2799,7 @@ function canonicalFilePath(path) {
     return realpathSync2(absolute);
   } catch {
     try {
-      return join8(realpathSync2(dirname7(absolute)), basename2(absolute));
+      return join9(realpathSync2(dirname7(absolute)), basename2(absolute));
     } catch {
       return absolute;
     }
@@ -2995,19 +3029,19 @@ function latestCodexRolloutPath(threadId) {
   try {
     if (buckets) {
       for (const bucket of buckets) {
-        const dir = join8(sessionsDir, bucket);
+        const dir = join9(sessionsDir, bucket);
         if (!existsSync7(dir))
           continue;
         const glob = new Bun.Glob(`rollout-*-${threadId}.jsonl`);
         for (const rel of glob.scanSync({ cwd: dir, onlyFiles: true })) {
-          candidates.push(join8(dir, rel));
+          candidates.push(join9(dir, rel));
         }
       }
     }
     if (candidates.length === 0) {
       const glob = new Bun.Glob(`**/rollout-*-${threadId}.jsonl`);
       for (const rel of glob.scanSync({ cwd: sessionsDir, onlyFiles: true })) {
-        candidates.push(join8(sessionsDir, rel));
+        candidates.push(join9(sessionsDir, rel));
       }
     }
     return candidates.sort((a, b) => statSync3(b).mtimeMs - statSync3(a).mtimeMs)[0];
@@ -3128,13 +3162,13 @@ function sweepPriorRolloutsForThread(threadId) {
     return;
   }
   for (const bucket of buckets) {
-    const dir = join8(sessionsDir, bucket);
+    const dir = join9(sessionsDir, bucket);
     if (!existsSync7(dir))
       continue;
     try {
       const glob = new Bun.Glob(`rollout-*-${threadId}.jsonl`);
       for (const rel of glob.scanSync({ cwd: dir, onlyFiles: true })) {
-        const fullPath = join8(dir, rel);
+        const fullPath = join9(dir, rel);
         try {
           unlinkSync7(fullPath);
         } catch (e) {
@@ -3152,7 +3186,7 @@ function sweepPriorRolloutsFullTree(threadId, sessionsDir) {
   try {
     const glob = new Bun.Glob(`**/rollout-*-${threadId}.jsonl`);
     for (const rel of glob.scanSync({ cwd: sessionsDir, onlyFiles: true })) {
-      const fullPath = join8(sessionsDir, rel);
+      const fullPath = join9(sessionsDir, rel);
       try {
         unlinkSync7(fullPath);
       } catch (e) {
@@ -3330,7 +3364,7 @@ var init_codex_app_server = __esm(async () => {
 
 // ../../packages/core/src/agents/codex-registry.ts
 import { existsSync as existsSync8, unlinkSync as unlinkSync8 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 var VALID_EFFORTS2, codexRegistry, codexRegistryOperations;
 var init_codex_registry = __esm(async () => {
   await init_codex_app_server();
@@ -3373,7 +3407,7 @@ var init_codex_registry = __esm(async () => {
     async cleanupRollouts({ sessionIds }) {
       if (sessionIds.length === 0)
         return;
-      const sessionsDir = join9(hostedCodexHomePath(), "sessions");
+      const sessionsDir = join10(hostedCodexHomePath(), "sessions");
       if (!existsSync8(sessionsDir))
         return;
       const failures = [];
@@ -3381,7 +3415,7 @@ var init_codex_registry = __esm(async () => {
         try {
           const glob = new Bun.Glob(`**/rollout-*-${tid}.jsonl`);
           for await (const rel of glob.scan({ cwd: sessionsDir, onlyFiles: true })) {
-            const path = join9(sessionsDir, rel);
+            const path = join10(sessionsDir, rel);
             try {
               unlinkSync8(path);
             } catch (e) {
@@ -3406,16 +3440,16 @@ var init_codex_registry = __esm(async () => {
 // ../../packages/core/src/agents/maestro-registry.ts
 import { randomUUID as randomUUID4 } from "crypto";
 import { existsSync as existsSync9, mkdirSync as mkdirSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join10, resolve as resolve7 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join11, resolve as resolve7 } from "path";
 function maestroSessionsDir() {
-  return join10(process.env.MAESTRO_DATA_DIR ? resolve7(process.env.MAESTRO_DATA_DIR) : join10(homedir5(), ".maestro"), "sessions");
+  return join11(process.env.MAESTRO_DATA_DIR ? resolve7(process.env.MAESTRO_DATA_DIR) : join11(homedir6(), ".maestro"), "sessions");
 }
 function maestroSessionPath(sessionId) {
-  return join10(maestroSessionsDir(), `${sessionId}.jsonl`);
+  return join11(maestroSessionsDir(), `${sessionId}.jsonl`);
 }
 function maestroActiveSessionPath(sessionId) {
-  return join10(maestroSessionsDir(), `${sessionId}.active.jsonl`);
+  return join11(maestroSessionsDir(), `${sessionId}.active.jsonl`);
 }
 function existingCreatedAt(path) {
   if (!existsSync9(path))
@@ -5858,13 +5892,13 @@ var init_browser_processes = __esm(async () => {
 });
 
 // ../../packages/core/src/platform/playwright/headed-launch.ts
-import { accessSync as accessSync2, constants as constants2 } from "fs";
+import { accessSync as accessSync3, constants as constants2 } from "fs";
 import { delimiter, isAbsolute, resolve as resolve9 } from "path";
 function findExecutableOnPath(command, environment = process.env) {
   const candidates = isAbsolute(command) ? [command] : (environment.PATH ?? "").split(delimiter).filter(Boolean).map((directory) => resolve9(directory, command));
   for (const candidate of candidates) {
     try {
-      accessSync2(candidate, constants2.X_OK);
+      accessSync3(candidate, constants2.X_OK);
       return candidate;
     } catch {}
   }
@@ -5963,7 +5997,7 @@ import { randomBytes as randomBytes5, timingSafeEqual as timingSafeEqual2 } from
 import { chmodSync as chmodSync5 } from "fs";
 import { createServer as createServer2 } from "net";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 function deepMapStrings(value2, transform) {
   if (typeof value2 === "string")
     return transform(value2);
@@ -6050,7 +6084,7 @@ function authorized(actual, expected) {
 }
 async function createBrowserVaultBroker(userId) {
   const token = randomBytes5(32).toString("hex");
-  const socketPath = join13(process.platform === "win32" ? tmpdir2() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes5(8).toString("hex")}.sock`);
+  const socketPath = join14(process.platform === "win32" ? tmpdir2() : "/tmp", `negotium-browser-vault-${process.pid}-${randomBytes5(8).toString("hex")}.sock`);
   const retainedForms = new Map;
   const leases = new Map;
   const sockets = new Set;
@@ -6259,7 +6293,7 @@ import {
   unlinkSync as unlinkSync11,
   writeFileSync as writeFileSync8
 } from "fs";
-import { dirname as dirname9, join as join14, resolve as resolve10 } from "path";
+import { dirname as dirname9, join as join15, resolve as resolve10 } from "path";
 function removeDefaultProfileDataDir(userDataDir) {
   const root = resolve10(BROWSER_PROFILES_DIR);
   const target = resolve10(userDataDir);
@@ -6349,14 +6383,14 @@ function portFileName(instanceKey) {
 function writePortFile(instanceKey, port) {
   try {
     mkdirSync10(managerHost.portsDir, { recursive: true });
-    writeFileSync8(join14(managerHost.portsDir, portFileName(instanceKey)), String(port));
+    writeFileSync8(join15(managerHost.portsDir, portFileName(instanceKey)), String(port));
   } catch (e) {
     logger.warn({ err: e, instanceKey, port }, "Failed to save playwright port file");
   }
 }
 function deletePortFile(instanceKey) {
   try {
-    unlinkSync11(join14(managerHost.portsDir, portFileName(instanceKey)));
+    unlinkSync11(join15(managerHost.portsDir, portFileName(instanceKey)));
   } catch (e) {
     if (e.code === "ENOENT")
       return;
@@ -7417,16 +7451,16 @@ import {
   unlinkSync as unlinkSync12,
   writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname10, join as join15 } from "path";
+import { dirname as dirname10, join as join16 } from "path";
 function conversationDir(_userId) {
-  return join15(resolveStorageDataDir(), "conversations");
+  return join16(resolveStorageDataDir(), "conversations");
 }
 function topicFilename(topicName) {
   const t = sanitizeTopicName(topicName, true);
   return `${t}.jsonl`;
 }
 function getConversationPath(userId, topicName) {
-  return join15(conversationDir(userId), topicFilename(topicName));
+  return join16(conversationDir(userId), topicFilename(topicName));
 }
 function getActiveConversationPath(userId, topicName) {
   const rawPath = getConversationPath(userId, topicName);
@@ -7649,7 +7683,7 @@ RULES:
 
 // ../../packages/core/src/storage/tasks.ts
 import { existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync13, renameSync as renameSync7, statSync as statSync4, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname11, join as join16 } from "path";
+import { dirname as dirname11, join as join17 } from "path";
 function safeTaskScopeKey(scopeKey) {
   const safe = sanitizeFileName(scopeKey);
   if (!safe || safe === "." || safe === "..") {
@@ -7661,7 +7695,7 @@ function taskScopeKey(opts) {
   return opts.topicId?.trim() || opts.session || "default";
 }
 function getTaskFilePath(userId, scopeKey) {
-  return join16(resolveStorageDataDir(), "tasks", `${safeTaskScopeKey(scopeKey)}.json`);
+  return join17(resolveStorageDataDir(), "tasks", `${safeTaskScopeKey(scopeKey)}.json`);
 }
 function readTasks(userId, scopeKey) {
   const path = getTaskFilePath(userId, scopeKey);
@@ -8629,7 +8663,7 @@ import { existsSync as existsSync17 } from "fs";
 import { chmod, mkdtemp, rm, writeFile } from "fs/promises";
 import { createServer as createServer3 } from "net";
 import { tmpdir as tmpdir3 } from "os";
-import { dirname as dirname12, join as join17, resolve as resolve11 } from "path";
+import { dirname as dirname12, join as join18, resolve as resolve11 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function evaluateCodexVaultPreToolUse(input, userId, operations) {
   if (operations.referencesSensitiveStorage(input.tool_input)) {
@@ -8667,9 +8701,11 @@ function hookClientPath() {
     return packaged;
   throw new Error("Codex Vault hook client is missing from this installation");
 }
-function privateCodexWrapper(codexScript) {
+function privateCodexWrapper(codexScript, socketPath, token) {
   return [
     "#!/bin/sh",
+    `export ${HOOK_SOCKET_ENV}=${shellQuote(socketPath)}`,
+    `export ${HOOK_TOKEN_ENV}=${shellQuote(token)}`,
     'if [ "$1" = "exec" ]; then',
     "  shift",
     `  exec ${shellQuote(process.execPath)} ${shellQuote(codexScript)} exec --dangerously-bypass-hook-trust "$@"`,
@@ -8680,10 +8716,10 @@ function privateCodexWrapper(codexScript) {
 `);
 }
 async function createCodexVaultHookBridge(userId) {
-  const root = await mkdtemp(join17(tmpdir3(), "negotium-codex-vault-"));
+  const root = await mkdtemp(join18(tmpdir3(), "negotium-codex-vault-"));
   await chmod(root, 448);
-  const socketPath = join17(root, "hook.sock");
-  const wrapperPath = join17(root, "codex-with-hooks");
+  const socketPath = join18(root, "hook.sock");
+  const wrapperPath = join18(root, "codex-with-hooks");
   const token = randomBytes7(32).toString("hex");
   const connections = new Set;
   const server = createServer3((socket) => {
@@ -8732,15 +8768,13 @@ async function createCodexVaultHookBridge(userId) {
       });
     });
     await chmod(socketPath, 384);
-    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath()), { mode: 448 });
-    const command = [
-      shellQuote(process.execPath),
-      shellQuote(hookClientPath()),
-      shellQuote(socketPath),
-      shellQuote(token)
-    ].join(" ");
+    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath(), socketPath, token), {
+      mode: 448
+    });
+    const command = [shellQuote(process.execPath), shellQuote(hookClientPath())].join(" ");
     return {
       codexPathOverride: wrapperPath,
+      environment: { [HOOK_SOCKET_ENV]: socketPath, [HOOK_TOKEN_ENV]: token },
       hooks: {
         PreToolUse: [
           {
@@ -8769,7 +8803,7 @@ async function createCodexVaultHookBridge(userId) {
     throw error;
   }
 }
-var MAX_HOOK_REQUEST_BYTES, SENSITIVE_STORAGE_DENIAL = "Runtime secret storage access is not permitted";
+var MAX_HOOK_REQUEST_BYTES, SENSITIVE_STORAGE_DENIAL = "Runtime secret storage access is not permitted", HOOK_SOCKET_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_SOCKET", HOOK_TOKEN_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_TOKEN";
 var init_codex_vault_hook_bridge = __esm(async () => {
   init_codex_native_multi_agent();
   await init_execution_host();
@@ -9302,8 +9336,8 @@ __export(exports_codex_provider, {
 });
 import { execFileSync as execFileSync6 } from "child_process";
 import { existsSync as existsSync18, readFileSync as readFileSync16, realpathSync as realpathSync4, statSync as statSync6 } from "fs";
-import { homedir as homedir6 } from "os";
-import { dirname as dirname13, isAbsolute as isAbsolute3, join as join18, relative as relative2, resolve as resolve13 } from "path";
+import { homedir as homedir7 } from "os";
+import { dirname as dirname13, isAbsolute as isAbsolute3, join as join19, relative as relative2, resolve as resolve13 } from "path";
 import { Codex } from "@openai/codex-sdk";
 function sameCodexUsage(usage, total) {
   return usage.input_tokens === total.inputTokens && usage.output_tokens === total.outputTokens && (usage.cached_input_tokens ?? 0) === total.cachedInputTokens && (usage.cache_write_input_tokens ?? 0) === total.cacheWriteInputTokens;
@@ -9331,7 +9365,7 @@ function codexMcpServerName(name) {
   return CODEX_MCP_SERVER_NAME_OVERRIDES[name] ?? name;
 }
 function globalCodexMcpServerNames(authFilePath) {
-  const configPath = join18(dirname13(authFilePath), "config.toml");
+  const configPath = join19(dirname13(authFilePath), "config.toml");
   if (!existsSync18(configPath))
     return [];
   try {
@@ -9689,7 +9723,7 @@ async function* codexProvider(opts) {
     mcpServerCount: Object.keys(codexMcpServers).length
   }, "codexProvider: starting turn");
   const hostedCodexHome = hostedCodexHomePath();
-  const inheritedCodexHome = process.env.CODEX_HOME || join18(homedir6(), ".codex");
+  const inheritedCodexHome = process.env.CODEX_HOME || join19(homedir7(), ".codex");
   const codexEnvironment = scopedBrowserCapability || resolve13(hostedCodexHome) !== resolve13(inheritedCodexHome) ? {
     ...Object.fromEntries(Object.entries(process.env).filter((entry) => typeof entry[1] === "string")),
     CODEX_HOME: hostedCodexHome,
@@ -9883,7 +9917,10 @@ async function* codexProvider(opts) {
                   yield fileEvent;
                 }
               } else if (item.type === "error") {
-                yield { type: "error", content: String(item.message ?? "") };
+                const message = String(item.message ?? "");
+                if (message !== CODEX_HOOK_TRUST_BYPASS_NOTICE) {
+                  yield { type: "error", content: message };
+                }
               }
               break;
             }
@@ -9974,7 +10011,7 @@ async function* codexProvider(opts) {
     await vaultHook.close();
   }
 }
-var CODEX_MCP_SERVER_NAME_OVERRIDES, CODEX_DIFF_FILE_LIMIT, CODEX_DIFF_BASELINE_FILE_LIMIT = 200, CODEX_DIFF_BASELINE_BYTE_LIMIT, CODEX_STARTUP_TIMEOUT_MS = 90000;
+var CODEX_HOOK_TRUST_BYPASS_NOTICE = "`--dangerously-bypass-hook-trust` is enabled. Enabled hooks may run without review for this invocation.", CODEX_MCP_SERVER_NAME_OVERRIDES, CODEX_DIFF_FILE_LIMIT, CODEX_DIFF_BASELINE_FILE_LIMIT = 200, CODEX_DIFF_BASELINE_BYTE_LIMIT, CODEX_STARTUP_TIMEOUT_MS = 90000;
 var init_codex_provider = __esm(async () => {
   init_codex_native_multi_agent();
   init_codex_tree_kill();
@@ -10145,8 +10182,8 @@ var init_maestro_provider = __esm(async () => {
 
 // ../../packages/core/src/agents/index.ts
 import { existsSync as existsSync19 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join19 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join20 } from "path";
 async function* dispatchAgent(opts) {
   switch (opts.agent) {
     case "claude": {
@@ -10180,11 +10217,11 @@ async function resolveSessionFileMissing(agent, sessionId, cwd) {
   switch (agent) {
     case "claude": {
       const encodedCwd = encodeClaudeCwd(cwd);
-      const path = join19(homedir7(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
+      const path = join20(homedir8(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
       return !existsSync19(path);
     }
     case "codex": {
-      const sessionsDir = join19(hostedCodexHomePath(), "sessions");
+      const sessionsDir = join20(hostedCodexHomePath(), "sessions");
       const glob = new Bun.Glob(`**/rollout-*-${sessionId}.jsonl`);
       for await (const _rel of glob.scan({ cwd: sessionsDir, onlyFiles: true })) {
         return false;
@@ -10708,9 +10745,9 @@ var init_api_topic_brief = __esm(async () => {
 });
 
 // ../../packages/core/src/storage/wiki.ts
-import { basename as basename3, dirname as dirname14, join as join20 } from "path";
+import { basename as basename3, dirname as dirname14, join as join21 } from "path";
 function getSharedWikiDir(workspaceDir = resolveStorageWorkspaceDir()) {
-  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join20(workspaceDir, "wiki");
+  return workspaceDir === resolveStorageWorkspaceDir() ? resolveStorageSharedWikiDir() : join21(workspaceDir, "wiki");
 }
 var init_wiki = __esm(async () => {
   await init_storage_host();
@@ -10719,7 +10756,7 @@ var init_wiki = __esm(async () => {
 // ../../packages/core/src/agents/archiver.ts
 import { randomUUID as randomUUID9 } from "crypto";
 import { existsSync as existsSync20, readdirSync as readdirSync5, readFileSync as readFileSync18, statSync as statSync7 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 function resolveMemoryLanguage() {
   const override = process.env.NEGOTIUM_MEMORY_LANG?.trim();
   return override && override.length > 0 ? override : resolveOutputLanguage();
@@ -10970,10 +11007,10 @@ function distillOneLine(summaryMd) {
   return "";
 }
 function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
-  const dir = join21(storage.getWikiDir(), "summaries");
+  const dir = join22(storage.getWikiDir(), "summaries");
   if (!storage.fileExists(dir))
     return null;
-  const predicted = join21(dir, wikiSummaryFilename(date, topicTitle, topicId));
+  const predicted = join22(dir, wikiSummaryFilename(date, topicTitle, topicId));
   if (storage.fileExists(predicted) && storage.fileModifiedAt(predicted) >= sinceMs)
     return predicted;
   let best = null;
@@ -10981,7 +11018,7 @@ function findSummaryFile(storage, topicTitle, date, sinceMs, topicId) {
     if (!f.startsWith(`${date}-`) || !isTopicSummaryFile(f, topicId ?? "", topicTitle)) {
       continue;
     }
-    const p = join21(dir, f);
+    const p = join22(dir, f);
     try {
       const m = storage.fileModifiedAt(p);
       if (m >= sinceMs && (!best || m > best.mtime))
@@ -11185,13 +11222,13 @@ function formatTopicArchiveTranscriptRecord(row, topicTitle, index) {
 
 // ../../packages/core/src/storage/topic-archive.ts
 import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function archiveTopicMessages(topicId, topicTitle, options = {}) {
   const rows = options.afterRowid !== undefined ? getMessagesForTopicAfterRowid(topicId, options.afterRowid) : getAllMessagesForTopic(topicId);
   if (rows.length === 0)
     return null;
   const safeTopic = sanitizeTopicName(topicTitle, true);
-  const archiveDir = join22(getSharedWikiDir(), "archive");
+  const archiveDir = join23(getSharedWikiDir(), "archive");
   mkdirSync13(archiveDir, { recursive: true });
   const date = new Date().toISOString().slice(0, 10);
   const reasonSuffix = options.reason && options.reason !== "delete" ? `_${options.reason}` : "";
@@ -11204,7 +11241,7 @@ function archiveTopicMessages(topicId, topicTitle, options = {}) {
   let path;
   while (true) {
     filename = `${safeTopic}_${date}${reasonSuffix}${counter === 1 ? "" : `_${counter}`}.jsonl`;
-    path = join22(archiveDir, filename);
+    path = join23(archiveDir, filename);
     try {
       writeFileSync11(path, body, { flag: "wx" });
       break;
@@ -11249,7 +11286,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   const entries = readRawConversation(userId, topicTitle);
   if (entries.length === 0)
     return null;
-  const archiveDir = join22(getSharedWikiDir(), "archive");
+  const archiveDir = join23(getSharedWikiDir(), "archive");
   mkdirSync13(archiveDir, { recursive: true });
   const safeTopic = sanitizeTopicName(topicTitle, true);
   const date = new Date().toISOString().slice(0, 10);
@@ -11277,7 +11314,7 @@ function archiveConversationEvents(topicId, topicTitle, userId, options = {}) {
   let counter = 1;
   while (true) {
     const suffix = counter === 1 ? "" : `_${counter}`;
-    const path = join22(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
+    const path = join23(archiveDir, `${safeTopic}_${date}${reasonSuffix}_events${suffix}.jsonl`);
     try {
       writeFileSync11(path, body, { flag: "wx" });
       logger.info({ topicId, topicTitle, archive: path, eventCount: entries.length }, "archiveConversationEvents: archived raw conversation events");
@@ -11826,7 +11863,7 @@ var init_usage_alert = __esm(() => {
 import { randomUUID as randomUUID10 } from "crypto";
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, writeFileSync as writeFileSync13 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 function previousCompactedSummary(entries) {
   for (let index = entries.length - 2;index >= 0; index -= 1) {
     const request = entries[index]?.event;
@@ -11956,7 +11993,7 @@ function formatCompactElapsed(startedAt) {
 async function summarizeTopicContext(request) {
   const startedAt = Date.now();
   const sessionIds = [];
-  const compactCwd = mkdtempSync2(join23(tmpdir4(), "negotium-compact-"));
+  const compactCwd = mkdtempSync2(join24(tmpdir4(), "negotium-compact-"));
   const abortController = new AbortController;
   const relayAbort = () => abortController.abort(request.signal?.reason);
   if (request.signal?.aborted)
@@ -11983,7 +12020,7 @@ async function summarizeTopicContext(request) {
   let error = "";
   let toolViolation = false;
   let compactionLogCalls = 0;
-  const compactionLogPath = join23(compactCwd, "conversation.log");
+  const compactionLogPath = join24(compactCwd, "conversation.log");
   try {
     const compactionMcp = useCompactionLog ? {
       compact_log: {
@@ -12602,14 +12639,14 @@ var init_derive = __esm(async () => {
 });
 
 // ../../packages/core/src/query/session-inbox-path.ts
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 function sessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join24(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
+  return join25(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${JSONL_SUFFIX}`);
 }
 function scheduledSessionInboxPath(userId, topicId) {
   const key = Buffer.from(topicId, "utf8").toString("base64url");
-  return join24(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
+  return join25(SESSION_INBOX_DIR, userId, `${TOPIC_ID_FILE_PREFIX}${key}${SCHEDULE_SUFFIX}`);
 }
 var TOPIC_ID_FILE_PREFIX = "topic-id-", JSONL_SUFFIX = ".jsonl", SCHEDULE_SUFFIX = ".schedule";
 var init_session_inbox_path = __esm(() => {
@@ -12618,13 +12655,13 @@ var init_session_inbox_path = __esm(() => {
 
 // ../../packages/core/src/query/session-inbox-cleanup.ts
 import { unlinkSync as unlinkSync15 } from "fs";
-import { basename as basename4, join as join25 } from "path";
+import { basename as basename4, join as join26 } from "path";
 function cleanupSessionInboxFiles(userId, topicId, legacyTopicTitle) {
   const live = sessionInboxPath(userId, topicId);
   const scheduled = scheduledSessionInboxPath(userId, topicId);
   const candidates = new Set([live, `${live}.processing`, scheduled, `${scheduled}.processing`]);
   if (legacyTopicTitle && legacyTopicTitle !== "." && legacyTopicTitle !== ".." && basename4(legacyTopicTitle) === legacyTopicTitle) {
-    const legacyBase = join25(SESSION_INBOX_DIR, userId, legacyTopicTitle);
+    const legacyBase = join26(SESSION_INBOX_DIR, userId, legacyTopicTitle);
     for (const suffix of [".jsonl", ".jsonl.processing", ".schedule", ".schedule.processing"]) {
       candidates.add(`${legacyBase}${suffix}`);
     }
@@ -12650,16 +12687,16 @@ var init_session_inbox_cleanup = __esm(() => {
 
 // ../../packages/core/src/query/state.ts
 import { mkdirSync as mkdirSync16, renameSync as renameSync9, unlinkSync as unlinkSync16, writeFileSync as writeFileSync14 } from "fs";
-import { basename as basename5, join as join26 } from "path";
+import { basename as basename5, join as join27 } from "path";
 function createQueryStateStore(options) {
   const sanitize = options.sanitizeTopicId ?? sanitizeId;
-  const queryStateDirPath = (userId) => join26(options.usersLogDir, String(userId), "active-queries");
-  const queryStateFile = (userId, topicId) => join26(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
+  const queryStateDirPath = (userId) => join27(options.usersLogDir, String(userId), "active-queries");
+  const queryStateFile = (userId, topicId) => join27(queryStateDirPath(userId), `${sanitize(topicId)}.json`);
   const legacyQueryStateFile = (userId, topicName) => {
     if (!topicName || topicName === "." || topicName === ".." || basename5(topicName) !== topicName) {
       return null;
     }
-    return join26(queryStateDirPath(userId), `${topicName}.json`);
+    return join27(queryStateDirPath(userId), `${topicName}.json`);
   };
   return {
     write(userId, topicId, topicName, task) {
@@ -12820,29 +12857,29 @@ import {
   unlinkSync as unlinkSync17,
   writeFileSync as writeFileSync15
 } from "fs";
-import { dirname as dirname16, join as join27 } from "path";
+import { dirname as dirname16, join as join28 } from "path";
 function pendingAskDir(userId) {
   const rawUserId = String(userId);
   const safeUserId = /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..") ? rawUserId : `sha256-${createHash5("sha256").update(rawUserId).digest("hex")}`;
-  return join27(resolveStorageSessionAsksDir(), safeUserId);
+  return join28(resolveStorageSessionAsksDir(), safeUserId);
 }
 function encodeAskKey(key) {
   return JSON.stringify([key.from, key.to]);
 }
 function pendingAskPath(key) {
   const digest = createHash5("sha256").update(encodeAskKey(key)).digest("hex");
-  return join27(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
+  return join28(pendingAskDir(key.userId), `${ASK_FILENAME_PREFIX}${digest}.pending`);
 }
 function v2PendingAskPath(key) {
   const encoded = Buffer.from(encodeAskKey(key), "utf8").toString("base64url");
-  return join27(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
+  return join28(pendingAskDir(key.userId), `${V2_ASK_FILENAME_PREFIX}${encoded}.pending`);
 }
 function legacyPendingAskPath(key) {
   if (key.from.includes("/") || key.from.includes("\\") || key.to.includes("/") || key.to.includes("\\") || key.from.includes("\x00") || key.to.includes("\x00")) {
     return null;
   }
   const dir = pendingAskDir(key.userId);
-  const candidate = join27(dir, `${key.from}___${key.to}.pending`);
+  const candidate = join28(dir, `${key.from}___${key.to}.pending`);
   return dirname16(candidate) === dir ? candidate : null;
 }
 function parsePendingAskFilename(fileName) {
@@ -13083,7 +13120,7 @@ function listPendingAsksForCaller(args) {
     const parsed = isV3 ? { from: args.from, to: "" } : parsePendingAskFilename(fileName);
     if (!parsed)
       continue;
-    const path = join27(dir, fileName);
+    const path = join28(dir, fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
       from: parsed.from,
@@ -13125,7 +13162,7 @@ function deletePendingAsksForTopic(args) {
   }
   let deleted = 0;
   for (const fileName of files) {
-    const path = join27(dir, fileName);
+    const path = join28(dir, fileName);
     const parsed = parsePendingAskFilename(fileName);
     const record = readPendingAskFile(path, {
       userId: args.userId,
@@ -13563,7 +13600,7 @@ var init_self_schedules = __esm(async () => {
 // ../../packages/core/src/storage/token-stats.ts
 import { createHash as createHash6 } from "crypto";
 import { mkdirSync as mkdirSync18, writeFileSync as writeFileSync16 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 function emptyBucket() {
   return {
     inputTokens: 0,
@@ -13582,7 +13619,7 @@ function queriesPath(userId) {
   const fileId = tokenStatsFileId(userId);
   const logDir = resolveStorageLogDir();
   mkdirSync18(logDir, { recursive: true });
-  return join28(logDir, `token-queries-${fileId}.jsonl`);
+  return join29(logDir, `token-queries-${fileId}.jsonl`);
 }
 function loadRecords(userId) {
   try {
@@ -13984,7 +14021,7 @@ var init_lifecycle = __esm(async () => {
 // ../../packages/core/src/runtime/attachments.ts
 import { randomUUID as randomUUID13 } from "crypto";
 import { copyFileSync as copyFileSync2, mkdirSync as mkdirSync19, writeFileSync as writeFileSync17 } from "fs";
-import { basename as basename6, join as join29 } from "path";
+import { basename as basename6, join as join30 } from "path";
 function workspaceCwdFor(topicId) {
   return resolveTopicWorkspaceDir(topicId);
 }
@@ -13997,7 +14034,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
   if (!attachmentIds?.length)
     return [];
   const out = [];
-  const destDir = join29(workspaceCwdFor(topicId), "attachments", queryId);
+  const destDir = join30(workspaceCwdFor(topicId), "attachments", queryId);
   for (const rawId of attachmentIds) {
     if (typeof rawId !== "string")
       continue;
@@ -14014,7 +14051,7 @@ function materializePromptAttachments(topicId, queryId, attachmentIds) {
       mkdirSync19(destDir, { recursive: true });
       const index = String(out.length + 1).padStart(2, "0");
       const safeName = safeAttachmentFilename(attachment.filename, fileId);
-      const destPath = join29(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
+      const destPath = join30(destDir, `${index}-${fileId.slice(0, 8)}-${safeName}`);
       copyFileSync2(sourcePath, destPath);
       out.push({
         id: attachment.id,
@@ -14044,10 +14081,10 @@ function promptWithAttachments(prompt, attachments) {
   return composeAttachmentPrompt(prompt, attachments.map(({ filename, path }) => attachmentPromptLine(filename, path)));
 }
 function ingestAttachment(args) {
-  const destDir = join29(UPLOADS_DIR, args.topicId);
+  const destDir = join30(UPLOADS_DIR, args.topicId);
   mkdirSync19(destDir, { recursive: true });
   const safeName = safeAttachmentFilename(args.filename, "upload");
-  const destPath = join29(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
+  const destPath = join30(destDir, `${Date.now()}-${randomUUID13().slice(0, 8)}-${safeName}`);
   if (args.sourcePath !== undefined) {
     copyFileSync2(args.sourcePath, destPath);
   } else if (args.bytes !== undefined) {
@@ -15882,9 +15919,9 @@ var init_turn_session = __esm(async () => {
 
 // ../../packages/core/src/storage/app-settings.ts
 import { existsSync as existsSync21, mkdirSync as mkdirSync20, readFileSync as readFileSync20, writeFileSync as writeFileSync18 } from "fs";
-import { dirname as dirname17, join as join30 } from "path";
+import { dirname as dirname17, join as join31 } from "path";
 function settingsFile() {
-  return join30(resolveStorageDataDir(), "otium-settings.json");
+  return join31(resolveStorageDataDir(), "otium-settings.json");
 }
 function getGlobalAiName() {
   const path = settingsFile();
@@ -15979,7 +16016,7 @@ __export(exports_turn_runner, {
 });
 import { randomUUID as randomUUID16 } from "crypto";
 import { existsSync as existsSync22, mkdirSync as mkdirSync21, readdirSync as readdirSync7, statSync as statSync10 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
   if (isManager)
     return configuredMcp;
@@ -16034,7 +16071,7 @@ function appendAskReplyMessage(topicId, text2, agentType) {
   return message;
 }
 function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, matchesTitle, preferExact = true) {
-  const preferred = join31(directory, preferredFilename);
+  const preferred = join32(directory, preferredFilename);
   if (preferExact && existsSync22(preferred))
     return preferred;
   let newestLegacyId = null;
@@ -16045,7 +16082,7 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
       const legacyIdMatch = !titleMatch && matchesLegacyId(filename);
       if (!titleMatch && !legacyIdMatch)
         continue;
-      const path = join31(directory, filename);
+      const path = join32(directory, filename);
       const mtimeMs = statSync10(path).mtimeMs;
       if (titleMatch) {
         if (!newestTitle || mtimeMs > newestTitle.mtimeMs) {
@@ -16059,9 +16096,9 @@ function resolveWikiMirrorPath(directory, preferredFilename, matchesLegacyId, ma
   return newestTitle?.path ?? newestLegacyId?.path ?? preferred;
 }
 function resolveWikiMemoryMirror(wikiDir, topicId, topicTitle) {
-  const briefFile = resolveWikiMirrorPath(join31(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
+  const briefFile = resolveWikiMirrorPath(join32(wikiDir, "topic"), `${wikiBriefStorageKey(topicTitle, topicId)}.md`, (filename) => isTopicBriefFile(filename, topicId), (filename) => isTopicBriefFile(filename, topicId, topicTitle));
   const hasBriefFile = existsSync22(briefFile) && statSync10(briefFile).isFile();
-  const latestSummaryCandidate = resolveWikiMirrorPath(join31(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
+  const latestSummaryCandidate = resolveWikiMirrorPath(join32(wikiDir, "summaries"), `__missing__-${wikiSummaryFilename("0000-00-00", topicTitle, topicId)}`, (filename) => isTopicSummaryFile(filename, topicId), (filename) => isTopicSummaryFile(filename, topicId, topicTitle), false);
   const latestSummaryFile = existsSync22(latestSummaryCandidate) && statSync10(latestSummaryCandidate).isFile() ? latestSummaryCandidate : null;
   return { briefFile, hasBriefFile, latestSummaryFile };
 }
@@ -17259,8 +17296,8 @@ __export(exports_auth_check, {
 });
 import { execFileSync as execFileSync7 } from "child_process";
 import { existsSync as existsSync23 } from "fs";
-import { homedir as homedir8, platform } from "os";
-import { join as join32 } from "path";
+import { homedir as homedir9, platform } from "os";
+import { join as join33 } from "path";
 function hasMaestroCredential(host, key, userId) {
   if (userId && host.getVaultValue(userId, key)?.trim())
     return true;
@@ -17280,7 +17317,7 @@ function checkAgentAuth(agent, host = defaultAgentAuthHost, userId) {
     case "claude": {
       if (host.environment.ANTHROPIC_API_KEY)
         return { ok: true };
-      const path = join32(host.homeDirectory(), ".claude", ".credentials.json");
+      const path = join33(host.homeDirectory(), ".claude", ".credentials.json");
       if (host.operatingSystem() === "darwin") {
         if (host.hasMacOsCredential("Claude Code-credentials") || host.exists(path)) {
           return { ok: true };
@@ -17333,7 +17370,7 @@ var init_auth_check = __esm(async () => {
     codexAuthFilePath,
     exists: existsSync23,
     environment: process.env,
-    homeDirectory: homedir8,
+    homeDirectory: homedir9,
     operatingSystem: platform,
     hasMacOsCredential(service) {
       try {
@@ -20211,7 +20248,7 @@ init_jsonl();
 init_mcp_helpers();
 import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync10, readdirSync as readdirSync3 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 function signalProcessTree(child, signal) {
@@ -20464,7 +20501,7 @@ ${results.every((result) => result.ok) ? "All agents healthy" : "Some agents fai
   server.tool("list_active_queries", "\uD604\uC7AC \uC0AC\uC6A9\uC790 \uBC94\uC704\uC5D0\uC11C \uC2E4\uD589 \uC911\uC778 \uD1A0\uD53D \uCFFC\uB9AC \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.", {}, async () => {
     if (!context.userId)
       return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC870\uD68C \uBD88\uAC00 (user context \uC5C6\uC74C)");
-    const stateDir = join11(USERS_LOG_DIR, context.userId, "active-queries");
+    const stateDir = join12(USERS_LOG_DIR, context.userId, "active-queries");
     if (!existsSync10(stateDir))
       return mcpOk("\uC2E4\uD589 \uC911\uC778 \uCFFC\uB9AC \uC5C6\uC74C");
     let files;
@@ -20477,7 +20514,7 @@ ${results.every((result) => result.ok) ? "All agents healthy" : "Some agents fai
     const entries = files.flatMap((file) => {
       if (!file.endsWith(".json"))
         return [];
-      const state = readJsonFile(join11(stateDir, file));
+      const state = readJsonFile(join12(stateDir, file));
       if (!state)
         return [];
       const sinceMs = new Date(state.since).getTime();
@@ -20612,7 +20649,7 @@ import { z as z3 } from "zod";
 init_logger();
 await init_storage_host();
 import { existsSync as existsSync11, mkdirSync as mkdirSync9, readFileSync as readFileSync10, renameSync as renameSync5, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname8, join as join12 } from "path";
+import { dirname as dirname8, join as join13 } from "path";
 var DECISION_STATUS_VALUES = [
   "proposed",
   "accepted",
@@ -20631,7 +20668,7 @@ function decisionScopeKey(opts) {
   return opts.topicId?.trim() || opts.session || "default";
 }
 function getDecisionFilePath(userId, scopeKey) {
-  return join12(resolveStorageDataDir(), "decisions", `${safeDecisionScopeKey(scopeKey)}.json`);
+  return join13(resolveStorageDataDir(), "decisions", `${safeDecisionScopeKey(scopeKey)}.json`);
 }
 function readDecisions(userId, scopeKey) {
   const path = getDecisionFilePath(userId, scopeKey);
@@ -21361,4 +21398,4 @@ export {
   createAgentHealthMcpServer
 };
 
-//# debugId=3C9958DCA4DDE01364756E2164756E21
+//# debugId=1DC9C5A25C04420964756E2164756E21