opencode-reviewer 1.0.1 → 1.0.2

package/dist/tui.js

@@ -548,7 +548,7 @@ import { memo as _$memo3 } from "@opentui/solid";
 import { createComponent as _$createComponent4 } from "@opentui/solid";
 import { setProp as _$setProp5 } from "@opentui/solid";
 import { createElement as _$createElement5 } from "@opentui/solid";
-import { createEffect as createEffect3, createMemo as createMemo4, createSignal as createSignal4, onCleanup as onCleanup5, Show as Show3 } from "solid-js";
+import { createEffect as createEffect4, createMemo as createMemo5, createSignal as createSignal4, onCleanup as onCleanup5, Show as Show3, untrack as untrack2 } from "solid-js";
 import { CliRenderEvents as CliRenderEvents3 } from "@opentui/core";
 
 // src/config.ts
@@ -564,6 +564,14 @@ init_define_REVIEW_PROMPTS();
 
 // src/ui-text.ts
 init_define_REVIEW_PROMPTS();
+function compactTokens(count3) {
+  const units = [[1e15, "Q"], [1e12, "T"], [1e9, "B"], [1e6, "M"], [1e3, "k"]];
+  for (const [scale, suffix] of units) if (count3 >= scale) {
+    const precision = count3 < scale * 100 ? 10 : 1;
+    return `${Math.floor(count3 / (scale / precision)) / precision}${suffix}`;
+  }
+  return String(count3);
+}
 var uiText = {
   review: {
     heading: "Permission analysis",
@@ -620,7 +628,7 @@ var uiText = {
   lifetime: {
     title: "Reviewer statistics",
     close: "Close",
-    scopeTab: (scope, active) => `${active ? "[" : ""}${scope === "conversation" ? "Conversation" : "Lifetime"}${active ? "]" : ""}`,
+    scopeTab: (scope) => scope === "conversation" ? "Conversation" : "Lifetime",
     switchScope: "Tab: switch view",
     noConversation: "Select a conversation to see its statistics.",
     conversationUnavailable: "Conversation statistics unavailable. Recorded totals have not been reset.",
@@ -639,7 +647,7 @@ var uiText = {
     ratings: (safe, unsafe) => `ratings: ${safe} \u2713 ${unsafe} \u2717`,
     dialogReviews: (count3) => `Reviews: ${count3}`,
     dialogRetries: (count3) => `Retries: ${count3}`,
-    dialogTokens: (input, output, partial) => `Tokens: ${input} in ${output} out${partial ? " (partial coverage)" : ""}`,
+    dialogTokens: (input, output, partial) => `Tokens: ${compactTokens(input)} in ${compactTokens(output)} out${partial ? " (partial coverage)" : ""}`,
     dialogTokensUnavailable: "Tokens: unavailable",
     dialogCost: (amount2, partial) => amount2 === void 0 ? "Cost: unavailable" : `Cost: $${amount2}${partial ? " (partial pricing)" : ""}`,
     dialogSafe: (count3, percentage) => `Safe: ${count3} (${percentage === void 0 ? "n/a" : `${percentage}%`})`,
@@ -800,6 +808,37 @@ import path3 from "node:path";
 
 // src/deadline.ts
 init_define_REVIEW_PROMPTS();
+
+// src/transport-ownership.ts
+init_define_REVIEW_PROMPTS();
+var TransportOwnership = class {
+  constructor(parent) {
+    this.parent = parent;
+  }
+  parent;
+  pending = /* @__PURE__ */ new Set();
+  track(operation) {
+    this.pending.add(operation);
+    this.parent?.track(operation);
+    const release = () => {
+      this.pending.delete(operation);
+    };
+    void operation.then(release, release);
+    return operation;
+  }
+  async settled() {
+    while (this.pending.size) await Promise.allSettled([...this.pending]);
+  }
+};
+var scopes = /* @__PURE__ */ new WeakMap();
+function bindTransportOwnership(signal, scope) {
+  scopes.set(signal, scope);
+}
+function transportOwnership(signal) {
+  return scopes.get(signal);
+}
+
+// src/deadline.ts
 var states = /* @__PURE__ */ new WeakMap();
 var DeadlineError = class extends Error {
   constructor(stage) {
@@ -824,23 +863,29 @@ async function withDeadline(parent, ms, run, stage = "Review") {
   parent.throwIfAborted();
   const controller = new AbortController();
   const signal = AbortSignal.any([parent, controller.signal]);
-  const duration = Math.max(0, Math.min(ms, remainingTime(parent)));
+  const now = performance.now();
+  const end = Math.min(now + ms, states.get(parent)?.end ?? Infinity);
+  const duration = Math.max(0, end - now);
   if (duration <= 0) throw new DeadlineError(stage);
-  const state = { end: performance.now() + duration, stage };
+  const state = { end, stage };
   states.set(signal, state);
+  const ownership = transportOwnership(parent);
+  if (ownership) bindTransportOwnership(signal, ownership);
   const timer = setTimeout(() => controller.abort(new DeadlineError(state.stage)), Math.ceil(duration));
   let abort = () => {
   };
   try {
+    const worker = Promise.resolve().then(async () => {
+      signal.throwIfAborted();
+      if (state.end <= performance.now()) throw new DeadlineError(state.stage);
+      const value = await run(signal);
+      signal.throwIfAborted();
+      if (state.end <= performance.now()) throw new DeadlineError(state.stage);
+      return value;
+    });
+    ownership?.track(worker);
     return await Promise.race([
-      Promise.resolve().then(async () => {
-        signal.throwIfAborted();
-        if (state.end <= performance.now()) throw new DeadlineError(state.stage);
-        const value = await run(signal);
-        signal.throwIfAborted();
-        if (state.end <= performance.now()) throw new DeadlineError(state.stage);
-        return value;
-      }),
+      worker,
       new Promise((_, reject) => {
         abort = () => reject(signal.reason);
         signal.addEventListener("abort", abort, { once: true });
@@ -1068,6 +1113,7 @@ async function loadContext(request, reader2, signal, scope = fileAccess.scope(si
     const canonical = await scope.canonical(cwd);
     execution.canonicalCwd = canonical.path;
     if (!canonical.path) limitations.push(`Execution directory could not be canonicalized (${canonical.reason}); cwd is the declared launch path, not a verified physical path.`);
+    else if (canonical.path !== cwd) limitations.push("Declared launch directory differs from its canonical path. Inherited shell PWD is unavailable; neither path alone establishes the logical working directory after cd.");
   }
   return {
     ...conversation,
@@ -1156,7 +1202,9 @@ async function loadConversationContext(request, reader2, signal, invocation) {
       contextSignal.throwIfAborted();
       prompt2 = latestUserPrompt(messages, root.id);
     };
-    await Promise.all([rootPrompt(), delegated()]);
+    const branches = [rootPrompt(), delegated()];
+    for (const branch of branches) transportOwnership(contextSignal)?.track(branch);
+    await Promise.all(branches);
   };
   try {
     await withDeadline(signal, contextMs(), ancestry, "Conversation context lookup");
@@ -1378,6 +1426,7 @@ var HISTORY_RECORD_BYTES = {
 var HistoryInvalid = class extends Error {
 };
 var opaque = (...parts) => createHash("sha256").update(JSON.stringify(parts)).digest("hex");
+var rootID = (c) => opaque(c.scope, c.root);
 var count = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
 var amount = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0;
 function requireValue(ok) {
@@ -1971,7 +2020,7 @@ function measured(trace, phase, run) {
 
 // src/transport-retry.ts
 init_define_REVIEW_PROMPTS();
-import { setTimeout as sleep } from "node:timers/promises";
+import timers from "node:timers/promises";
 var statuses = /* @__PURE__ */ new Set([408, 429, 500, 502, 503, 504]);
 var networkCodes = /* @__PURE__ */ new Set([
   "EAI_AGAIN",
@@ -2033,7 +2082,7 @@ var TransportRetries = class {
     } catch {
     }
     try {
-      await sleep(Math.ceil(delay), void 0, { signal });
+      await timers.setTimeout(Math.ceil(delay), void 0, { signal });
     } catch {
       signal.throwIfAborted();
       throw error;
@@ -2044,7 +2093,7 @@ var TransportRetries = class {
 };
 
 // src/reviewer.ts
-function abortable(promise, signal, late) {
+function abortable(promise, signal, ownership, late) {
   return new Promise((resolve, reject) => {
     let settled = false;
     const abort = () => {
@@ -2054,11 +2103,8 @@ function abortable(promise, signal, late) {
       reject(signal.reason);
     };
     signal.addEventListener("abort", abort, { once: true });
-    promise.then((value) => {
-      if (settled) {
-        late?.(value);
-        return;
-      }
+    const physical = promise.then((value) => {
+      if (settled) return late?.(value);
       settled = true;
       signal.removeEventListener("abort", abort);
       resolve(value);
@@ -2068,17 +2114,17 @@ function abortable(promise, signal, late) {
       signal.removeEventListener("abort", abort);
       reject(error);
     });
+    ownership?.track(physical);
     if (signal.aborted) abort();
   });
 }
-function cancelBody(response) {
+async function cancelBody(response) {
   try {
-    void response.body?.cancel().catch(() => {
-    });
+    await response.body?.cancel();
   } catch {
   }
 }
-async function readBody(response, signal, consume) {
+async function readBody(response, signal, ownership, consume) {
   if (!response.body) throw new Error("Reviewer returned an empty HTTP response");
   const reader2 = response.body.getReader();
   try {
@@ -2086,7 +2132,7 @@ async function readBody(response, signal, consume) {
       reviewStage(signal, "Reviewer response body");
       let part;
       try {
-        part = await abortable(reader2.read(), signal);
+        part = await abortable(reader2.read(), signal, ownership);
       } catch (error) {
         signal.throwIfAborted();
         throw networkFailure(error, "Reviewer response read failed");
@@ -2097,18 +2143,18 @@ async function readBody(response, signal, consume) {
     }
   } finally {
     try {
-      void reader2.cancel().catch(() => {
-      });
+      ownership.track(reader2.cancel());
+    } catch {
     } finally {
       reader2.releaseLock();
     }
   }
 }
 var MAX_RESPONSE_BYTES = 65536;
-async function responseText(response, signal) {
+async function responseText(response, signal, ownership) {
   let bytes = 0;
   const chunks = [];
-  await readBody(response, signal, (value) => {
+  await readBody(response, signal, ownership, (value) => {
     bytes += value.length;
     if (bytes > MAX_RESPONSE_BYTES) throw new Error("Reviewer HTTP response exceeds 64 KiB");
     chunks.push(value);
@@ -2122,25 +2168,35 @@ async function responseText(response, signal) {
 var object2 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
 var textMetadata = (message) => (message.role === void 0 || message.role === "assistant") && message.function_call == null && (message.tool_calls == null || Array.isArray(message.tool_calls) && message.tool_calls.length === 0) && (message.refusal == null || message.refusal === "");
 var nonTextFinish = (value) => value === "content_filter" || value === "tool_calls" || value === "function_call";
-async function streamedAssessment(response, signal, accounting, progress, firstContent) {
+var validMetadata = (delta) => (delta.role === void 0 || delta.role === "assistant") && (delta.function_call == null || object2(delta.function_call)) && (delta.tool_calls == null || Array.isArray(delta.tool_calls) && delta.tool_calls.every(object2)) && (delta.refusal == null || typeof delta.refusal === "string");
+var TerminalAssessmentRejection = class extends Error {
+};
+async function streamedAssessment(response, signal, ownership, accounting, progress, firstContent) {
   if (response.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() !== "text/event-stream") {
-    cancelBody(response);
+    ownership.track(cancelBody(response));
     throw new Error("Reviewer expected an SSE response");
   }
   const assessment = new StreamingAssessment();
   let stopped = false, done = false;
+  let finished;
   let id, model;
   let last;
   let failure;
   function invalid(retryable = true) {
     const message = "Reviewer API did not return a text assessment stream";
-    throw retryable ? new AssessmentStreamError(message) : new Error(message);
+    throw retryable && !(failure instanceof TerminalAssessmentRejection) ? new AssessmentStreamError(message) : new Error(message);
+  }
+  function rejected() {
+    if (failure instanceof TerminalAssessmentRejection) return;
+    failure = new TerminalAssessmentRejection("Reviewer API did not return a text assessment stream");
+    progress();
   }
   const sse = new SSEParser(({ data, event }) => {
     try {
+      reviewStage(signal, "Reviewer response body");
       if (data.trim() === "[DONE]") {
-        if (failure) return;
-        if (done || !stopped || event !== "message") invalid();
+        if (failure instanceof AssessmentStreamError) return;
+        if (done || !stopped && !failure || event !== "message") invalid();
         done = true;
         return;
       }
@@ -2153,9 +2209,10 @@ async function streamedAssessment(response, signal, accounting, progress, firstC
       accounting.observe(object2(body) && body.model === void 0 && model !== void 0 ? { ...body, model } : body);
       reviewStage(signal, "Reviewer response body");
       if (event === "error" || object2(body) && body.error != null) invalid(false);
-      if (failure) {
-        if (object2(body) && Array.isArray(body.choices) && body.choices.some((choice2) => object2(choice2) && (choice2.error != null || nonTextFinish(choice2.finish_reason) || object2(choice2.delta) && !textMetadata(choice2.delta) || object2(choice2.message) && !textMetadata(choice2.message)))) invalid(false);
-        return;
+      if (failure instanceof AssessmentStreamError) {
+        const terminal = object2(body) && Array.isArray(body.choices) && body.choices.some((choice2) => object2(choice2) && (choice2.error != null || nonTextFinish(choice2.finish_reason) || object2(choice2.delta) && !textMetadata(choice2.delta) || object2(choice2.message) && !textMetadata(choice2.message)));
+        if (!terminal) return;
+        rejected();
       }
       if (done || event !== "message" || !object2(body)) invalid();
       if (body.object !== void 0 && body.object !== "chat.completion.chunk") invalid();
@@ -2177,14 +2234,23 @@ async function streamedAssessment(response, signal, accounting, progress, firstC
       if (!object2(choice) || choice.index !== 0 || choice.message != null || choice.text != null) invalid();
       if (choice.error != null) invalid(false);
       const finish = choice.finish_reason;
-      if (nonTextFinish(finish)) invalid(false);
-      const delta = choice.delta === void 0 && (finish === "stop" || finish === "length") ? {} : choice.delta;
-      if (!object2(delta)) invalid();
-      if (!textMetadata(delta)) invalid(false);
+      const delta = choice.delta === void 0 && (finish === "stop" || finish === "length" || nonTextFinish(finish)) ? {} : choice.delta;
+      if (!object2(delta)) invalid(!nonTextFinish(finish));
+      if (!validMetadata(delta)) invalid(false);
+      const nonText = nonTextFinish(finish) || !textMetadata(delta);
+      if (delta.content != null && typeof delta.content !== "string") invalid(!nonText);
+      if (finish != null && finish !== "stop" && finish !== "length" && !nonTextFinish(finish)) invalid(!nonText);
+      if (finished !== void 0 && (finish !== finished || !textMetadata(delta) || [delta.content, delta.reasoning, delta.reasoning_content, delta.reasoning_details].some((value) => value != null && value !== "" && !(Array.isArray(value) && value.length === 0)))) invalid(!nonText);
+      if (typeof finish === "string") finished = finish;
+      if (nonText) {
+        rejected();
+        return;
+      }
+      if (failure instanceof TerminalAssessmentRejection) {
+        return;
+      }
       if (finish === "length") throw new AssessmentStreamError("Reviewer output token limit reached; increase maxOutputTokens");
       if (finish != null && finish !== "stop" || stopped && finish !== "stop") invalid();
-      if (delta.content != null && typeof delta.content !== "string") invalid();
-      if (stopped && [delta.content, delta.reasoning, delta.reasoning_content, delta.reasoning_details].some((value) => value != null && value !== "" && !(Array.isArray(value) && value.length === 0))) invalid();
       if (typeof delta.content === "string" && delta.content) {
         firstContent?.();
         assessment.push(delta.content);
@@ -2203,7 +2269,13 @@ async function streamedAssessment(response, signal, accounting, progress, firstC
       }
     }
   });
-  await readBody(response, signal, (bytes) => sse.push(bytes));
+  try {
+    await readBody(response, signal, ownership, (bytes) => sse.push(bytes));
+  } catch (error) {
+    signal.throwIfAborted();
+    if (failure instanceof TerminalAssessmentRejection) throw new Error(error instanceof Error ? error.message : failure.message);
+    throw error;
+  }
   sse.finish();
   if (failure) throw failure;
   if (!done || !stopped) throw new AssessmentStreamError("Reviewer stream ended without stop and DONE");
@@ -2266,6 +2338,7 @@ async function review(evidence, config, signal, {
     const attemptID = randomUUID();
     let dispatched = false;
     const requestAbort = new AbortController();
+    const ownership = new TransportOwnership(transportOwnership(signal));
     let contentStarted = false;
     let failed = false;
     let failure;
@@ -2304,18 +2377,18 @@ async function review(evidence, config, signal, {
             }
           }
         }
-        response = await abortable(pending, signal, cancelBody);
+        response = await abortable(pending, signal, ownership, cancelBody);
         diagnose?.("headers");
       } catch (error) {
         signal.throwIfAborted();
         throw networkFailure(error, "Reviewer network request failed");
       }
       if (!response.ok) {
-        cancelBody(response);
+        ownership.track(cancelBody(response));
         throw httpFailure(response);
       }
       let assessment;
-      if (config.stream) assessment = await streamedAssessment(response, signal, accounting, (preview) => {
+      if (config.stream) assessment = await streamedAssessment(response, signal, ownership, accounting, (preview) => {
         if (typeof preview?.safe === "boolean") diagnose?.("first-rating");
         progress("streaming", preview);
       }, () => {
@@ -2325,7 +2398,7 @@ async function review(evidence, config, signal, {
       else {
         let envelope;
         try {
-          envelope = JSON.parse(await responseText(response, signal));
+          envelope = JSON.parse(await responseText(response, signal, ownership));
         } catch (error) {
           signal.throwIfAborted();
           if (error instanceof SyntaxError) throw new Error("Reviewer returned invalid API JSON");
@@ -2394,6 +2467,7 @@ async function review(evidence, config, signal, {
       startedAttempt = attempt + 1;
       progress("retrying", void 0, startedAttempt);
     })) throw failure;
+    await abortable(ownership.settled(), signal);
     retry = failed ? "transport" : "format";
   }
 }
@@ -2452,8 +2526,8 @@ function classify(request, invocation, ids, servers) {
 init_define_REVIEW_PROMPTS();
 function reviewSyntaxStyles(theme) {
   const styles = { default: { fg: theme.text } };
-  const add = (scopes, style) => {
-    for (const scope of scopes) styles[scope] = style;
+  const add = (scopes2, style) => {
+    for (const scope of scopes2) styles[scope] = style;
   };
   add(["markup.heading", ...Array.from({ length: 6 }, (_, i) => `markup.heading.${i + 1}`)], { fg: theme.markdownHeading, bold: true });
   styles["markup.heading.1"] = { fg: theme.markdownHeading, bold: true, underline: true };
@@ -2518,6 +2592,176 @@ function scannerFrame(frame) {
   });
 }
 
+// src/route-approval.ts
+init_define_REVIEW_PROMPTS();
+var RouteSessions = class {
+  constructor(current) {
+    this.current = current;
+  }
+  current;
+  events = /* @__PURE__ */ new Map();
+  get(id) {
+    const event = this.events.get(id), current = this.current(id);
+    if (event === null || current && current.id !== id) return;
+    if (event && current && event.parentID !== current.parentID) return;
+    return current ?? event;
+  }
+  remember(value) {
+    const old = this.events.get(value.id);
+    if (old === null || old && old.parentID === value.parentID) return false;
+    this.set(value.id, { id: value.id, ...value.parentID === void 0 ? {} : { parentID: value.parentID } });
+    return true;
+  }
+  deleted(id) {
+    this.set(id, null);
+  }
+  set(id, value) {
+    this.events.delete(id);
+    this.events.set(id, value);
+    if (this.events.size > 4096) this.events.delete(this.events.keys().next().value);
+  }
+};
+function conversationRoot(id, session) {
+  const visited = /* @__PURE__ */ new Set();
+  for (let depth = 0; id && depth <= 16; depth++) {
+    if (visited.has(id)) return;
+    visited.add(id);
+    const value = session(id);
+    if (value?.id !== id) return;
+    if (value.parentID === void 0) return id;
+    if (typeof value.parentID !== "string" || !value.parentID) return;
+    id = value.parentID;
+  }
+}
+var RouteHandoff = class {
+  session;
+  root;
+  returning;
+  observe(session, root) {
+    if (this.session === session && this.root === root) return;
+    this.returning = root && session === root && this.root === root && this.session !== root ? root : void 0;
+    this.session = session;
+    this.root = root;
+  }
+  pending(root) {
+    return this.returning === root;
+  }
+  frame() {
+    this.returning = void 0;
+  }
+};
+function routeCovered(root, width, height) {
+  let remaining = 8192;
+  const visit2 = (node, parent) => {
+    if (--remaining < 0) return true;
+    if (!node.visible || node.isDestroyed) return false;
+    if (parent && node.x <= 2 && node.y <= 1 && node.x + node.width >= width - 2 && node.y + node.height >= height - 2 && (node.y < parent.y || node.y + node.height > parent.y + parent.height)) return true;
+    return node.getChildren().some((child) => visit2(child, node));
+  };
+  return width < 5 || height < 4 || visit2(root);
+}
+
+// src/review-admission.ts
+init_define_REVIEW_PROMPTS();
+var MAX_REVIEW_EVALUATORS = 4;
+function ownedReview(parent, ms, run) {
+  let worker, finish;
+  const settled = new Promise((resolve) => {
+    finish = resolve;
+  });
+  const result = withDeadline(parent, ms, (signal) => {
+    const ownership = new TransportOwnership(transportOwnership(parent));
+    bindTransportOwnership(signal, ownership);
+    worker = Promise.resolve().then(() => {
+      signal.throwIfAborted();
+      return run(signal);
+    });
+    const finalized = () => {
+      void ownership.settled().then(finish, finish);
+    };
+    void worker.then(finalized, finalized);
+    return worker;
+  });
+  const undispatched = () => {
+    if (!worker) finish();
+  };
+  void result.then(undispatched, undispatched);
+  return Object.assign(result, { settled });
+}
+var ReviewAdmission = class {
+  constructor(front = () => void 0) {
+    this.front = front;
+  }
+  front;
+  roots = /* @__PURE__ */ new Map();
+  running = 0;
+  scheduled = false;
+  workers = /* @__PURE__ */ new Set();
+  run(request, root, signal, evaluate) {
+    return new Promise((resolve, reject) => {
+      if (signal.aborted) {
+        reject(signal.reason);
+        return;
+      }
+      const cancel = () => {
+        const queue2 = this.roots.get(root);
+        const index = queue2?.indexOf(waiting) ?? -1;
+        if (index < 0) return;
+        queue2.splice(index, 1);
+        if (!queue2.length) this.roots.delete(root);
+        signal.removeEventListener("abort", cancel);
+        reject(signal.reason);
+      };
+      const waiting = { request, start: () => {
+        signal.removeEventListener("abort", cancel);
+        this.running++;
+        const worker = Promise.resolve().then(() => {
+          signal.throwIfAborted();
+          const evaluation = evaluate();
+          void evaluation.then(resolve, reject);
+          return Promise.allSettled([evaluation, evaluation.settled]);
+        });
+        this.workers.add(worker);
+        const release = () => {
+          this.workers.delete(worker);
+          this.running--;
+          this.schedule();
+        };
+        void worker.then(release, (error) => {
+          release();
+          reject(error);
+        });
+      } };
+      const queue = this.roots.get(root);
+      if (queue) queue.push(waiting);
+      else this.roots.set(root, [waiting]);
+      signal.addEventListener("abort", cancel, { once: true });
+      this.schedule();
+    });
+  }
+  /** Caller must first abort waiting work. Physical finalizers still own slots. */
+  async settled() {
+    await Promise.allSettled([...this.workers]);
+  }
+  schedule() {
+    if (this.scheduled || this.running >= MAX_REVIEW_EVALUATORS || !this.roots.size) return;
+    this.scheduled = true;
+    queueMicrotask(() => {
+      this.scheduled = false;
+      while (this.running < MAX_REVIEW_EVALUATORS && this.roots.size) {
+        const [root, queue] = this.roots.entries().next().value;
+        const front = this.front(root);
+        let first = queue.findIndex((waiting2) => waiting2.request.id === front);
+        if (first < 0) first = 0;
+        const [waiting] = queue.splice(first, 1);
+        this.roots.delete(root);
+        if (queue.length) this.roots.set(root, queue);
+        waiting.start();
+      }
+    });
+  }
+};
+
 // src/controller.ts
 var clock = {
   now: () => performance.now(),
@@ -2527,6 +2771,7 @@ var clock = {
   }
 };
 var permissionResolved = Object.freeze({ reason: "permission resolved" });
+var requestChanged = Object.freeze({ reason: "pending request changed" });
 var Controller = class {
   constructor(evaluate, changed, {
     reviewOptions = { reviewBash: true, reviewEdits: true },
@@ -2535,7 +2780,8 @@ var Controller = class {
     modes,
     onApproval,
     onRating,
-    onLifecycle
+    onLifecycle,
+    session
   } = {}) {
     this.evaluate = evaluate;
     this.changed = changed;
@@ -2543,6 +2789,7 @@ var Controller = class {
     this.approval = approval;
     this.time = time;
     this.modes = modes;
+    this.session = session;
     this.approvalObserver = onApproval;
     this.ratingObserver = onRating;
     this.lifecycleObserver = onLifecycle;
@@ -2552,10 +2799,11 @@ var Controller = class {
   entries = /* @__PURE__ */ new Map();
   stopped = false;
   version = 0;
-  visibleID;
+  selectedID;
   modeChanges = /* @__PURE__ */ new Map();
   manual = /* @__PURE__ */ new Map();
   workers = /* @__PURE__ */ new Set();
+  admission = new ReviewAdmission((root) => this.nativeFront(root));
   acknowledgements = /* @__PURE__ */ new Map();
   approvalWorkers = /* @__PURE__ */ new Set();
   approvalRead;
@@ -2565,6 +2813,7 @@ var Controller = class {
   approval;
   time;
   modes;
+  session;
   approvalObserver;
   ratingObserver;
   lifecycleObserver;
@@ -2605,6 +2854,15 @@ var Controller = class {
     } catch {
     }
   }
+  nativeFront(root) {
+    let first;
+    for (const entry of this.entries.values()) {
+      const request = entry.view.request;
+      if (entry.view.resolved || request.sessionID !== root && (this.session ? this.session(request.sessionID)?.parentID !== root : entry.root !== root)) continue;
+      if (!first || request.sessionID < first.sessionID || request.sessionID === first.sessionID && request.id < first.id) first = request;
+    }
+    return first?.id;
+  }
   /** Local state is already switched; invalidate snapshots before any publication. */
   modeChanged(root) {
     if (this.stopped) return;
@@ -2616,10 +2874,10 @@ var Controller = class {
     if (entry.fastApproval) return;
     const id = entry.view.request.id;
     const state = entry.view.autoApproval?.status;
-    if (state === "countdown" || state === "checking" || state === "allowing" && !entry.approvalDispatched)
+    if (entry.approvalArmed && !this.manual.has(id) && !entry.approvalDispatched)
       this.lifecycleFact({ type: "cancelled", request: entry.view.request, reason: "mode" });
     const uncertain = state === "failed" || state === "allowing" && entry.approvalDispatched;
-    if (state) this.manual.set(id, uncertain ? "failed" : "cancelled");
+    if (state || entry.approvalArmed) this.manual.set(id, uncertain ? "failed" : "cancelled");
     entry.cancelTimer?.();
     this.clearProgress(entry);
     entry.approvalAbort?.abort();
@@ -2637,16 +2895,28 @@ var Controller = class {
       } : {}
     };
   }
-  /** Normal mode requires final rendering; fast mode requires physical panel visibility. */
-  presented(id) {
+  /** Physical presentation and intentional same-root suppression are distinct proofs. */
+  presented(value) {
     if (this.stopped) return;
-    if (id !== this.visibleID) {
-      const old = this.visibleID;
-      this.visibleID = id;
+    const proof = typeof value === "string" ? { state: "visible", id: value } : value ?? { state: "lost" };
+    const id = proof.state === "lost" ? void 0 : proof.id;
+    if (id !== this.selectedID) {
+      const old = this.selectedID;
+      this.selectedID = id;
       if (old) this.cancelAutoApproval(old, "visibility");
     }
     const entry = id ? this.entries.get(id) : void 0;
-    if (!entry || entry.view.autoApproval || !this.eligible(entry)) return;
+    if (entry?.approvalArmed && this.presentationState(entry) === "lost") this.cancelAutoApproval(entry.view.request.id, "visibility");
+    if (entry && (proof.state === "visible" || proof.state === "route-hidden")) {
+      this.startApproval(entry);
+      if (entry.view.autoApproval?.status === "countdown" && !entry.cancelTimer && !entry.approvalAbort) this.schedule(entry);
+    }
+  }
+  /** Rating/settlement callbacks are not painted-frame observations. They may
+   * start eligible work, but cannot prove a hide from an unpainted publication. */
+  startApproval(entry) {
+    if (entry.view.autoApproval || entry.approvalAbort || entry.approvalRefresh || !this.eligible(entry)) return;
+    entry.approvalArmed = true;
     if (this.options.fastMode) {
       entry.view = { ...entry.view, autoApproval: { status: "checking" } };
       this.publish();
@@ -2661,7 +2931,7 @@ var Controller = class {
   }
   cancelAutoApproval(id, reason = "explicit") {
     const entry = this.entries.get(id);
-    if (!entry || entry.approvalDispatched || !["countdown", "checking", "allowing"].includes(entry.view.autoApproval?.status ?? "")) return;
+    if (!entry || !entry.approvalArmed || entry.approvalDispatched || this.manual.has(id)) return;
     this.lifecycleFact({ type: "cancelled", request: entry.view.request, reason });
     entry.cancelTimer?.();
     entry.cancelTimer = void 0;
@@ -2690,6 +2960,7 @@ var Controller = class {
       entry.attempt = value.attempt;
       entry.ratingAt = void 0;
       entry.view = { ...entry.view, progress: { attempt: value.attempt, phase: value.phase } };
+      this.pauseRating(entry);
       this.publish();
       return;
     }
@@ -2697,6 +2968,7 @@ var Controller = class {
     if (!value.preview) {
       this.clearProgress(entry);
       entry.view = { ...entry.view, progress: { attempt: value.attempt, phase: value.phase } };
+      this.pauseRating(entry);
       this.publish();
       return;
     }
@@ -2713,8 +2985,9 @@ var Controller = class {
         phase: "streaming",
         preview: { ...preview.safe === void 0 ? {} : { safe: preview.safe }, ...desc === void 0 ? {} : { desc } }
       } };
+      if (preview.safe !== true) this.pauseRating(entry);
       this.publish();
-      if (this.options.fastMode && preview.safe === true) this.presented(this.visibleID);
+      if (this.options.fastMode && preview.safe === true) this.startApproval(entry);
     }
     if (!this.reviewing(entry) || entry.cancelProgress || !entry.pendingProgress) return;
     const generation = entry.progressGeneration;
@@ -2730,33 +3003,106 @@ var Controller = class {
       }
     });
   }
+  safe(entry) {
+    return entry.view.status === "complete" ? entry.view.assessment?.safe === true : this.options.fastMode === true && entry.view.status === "analyzing" && entry.view.progress?.preview?.safe === true;
+  }
+  presentationState(entry, check = "eligibility") {
+    if (!this.active(entry) || entry.view.resolved || entry.fastApproval || this.options.autoApprove !== true || this.modes && (entry.root === void 0 || !this.modes.enabled(entry.root)) || this.selectedID !== entry.view.request.id) return "lost";
+    const proof = this.approval?.presentation?.(check);
+    if (proof?.state === "route-hidden") return entry.root === proof.root && proof.id === entry.view.request.id && this.nativeFront(proof.root) === proof.id ? "route-hidden" : "lost";
+    if (proof) return proof.state !== "lost" && proof.id === entry.view.request.id ? proof.state : "lost";
+    return this.approval?.visibleID() === entry.view.request.id ? "visible" : "lost";
+  }
   eligible(entry) {
-    const safe = entry.view.status === "complete" ? entry.view.assessment?.safe === true : this.options.fastMode === true && entry.view.status === "analyzing" && entry.view.progress?.preview?.safe === true;
-    return this.active(entry) && !entry.view.resolved && !entry.fastApproval && this.options.autoApprove === true && safe && (!this.modes || entry.root !== void 0 && this.modes.enabled(entry.root)) && this.visibleID === entry.view.request.id && this.approval?.visibleID() === entry.view.request.id;
+    if (this.manual.has(entry.view.request.id) || entry.approvalPaused || !this.safe(entry)) return false;
+    const state = this.presentationState(entry);
+    return state === "visible" || state === "route-hidden";
+  }
+  /** Rating rejection revokes the reservation, even if Safe returns before its GET.
+   * Keep the armed lifetime so real presentation loss/Cancel remains durable. */
+  pauseRating(entry) {
+    if (!entry.approvalArmed || entry.approvalDispatched || this.manual.has(entry.view.request.id)) return;
+    if (entry.view.status !== "analyzing") {
+      entry.approvalRefresh = false;
+      entry.approvalPaused = !!entry.approvalAbort;
+      entry.approvalAbort?.abort();
+      entry.view = { ...entry.view, autoApproval: void 0 };
+      return;
+    }
+    if (entry.approvalPaused || !entry.view.autoApproval) return;
+    entry.approvalPaused = !!entry.approvalAbort;
+    entry.approvalAbort?.abort();
+    entry.view = { ...entry.view, autoApproval: entry.approvalRefresh ? { status: "checking" } : void 0 };
+  }
+  approvalEligible(entry, check = "verification") {
+    const state = this.presentationState(entry, check);
+    if (state === "lost") this.cancelAutoApproval(entry.view.request.id, "visibility");
+    else if (state === "pending") entry.approvalPaintPending = true;
+    else if (!this.safe(entry)) this.pauseRating(entry);
+    return this.eligible(entry);
+  }
+  /** Do not await noncooperative I/O in the caller, or release its reservation on
+   * timeout. The callback runs only after the physical slot has actually settled. */
+  afterApprovalRead(entry, abort, run) {
+    const settled = async () => {
+      if (entry.approvalAbort !== abort || !this.active(entry) || this.manual.has(entry.view.request.id)) return;
+      await run();
+    };
+    if (this.approvalRead) {
+      void this.approvalRead.then(settled, settled).catch(() => {
+      });
+      return Promise.resolve();
+    }
+    return settled();
+  }
+  async recoverApproval(entry, abort) {
+    await this.afterApprovalRead(entry, abort, async () => {
+      const revision = ++this.version;
+      try {
+        abort.signal.throwIfAborted();
+        if (this.presentationState(entry) === "lost") {
+          this.cancelAutoApproval(entry.view.request.id, "visibility");
+          return;
+        }
+        const pending = await withDeadline(
+          AbortSignal.any([entry.abort.signal, abort.signal]),
+          5e3,
+          (signal) => this.approvalList(signal)
+        );
+        if (!this.active(entry) || this.manual.has(entry.view.request.id)) return;
+        entry.approvalAbort = void 0;
+        entry.approvalPaused = false;
+        this.reconcile(pending, revision);
+      } catch {
+        await this.afterApprovalRead(entry, abort, () => {
+          ++this.version;
+          entry.approvalAbort = void 0;
+          entry.approvalPaused = false;
+        });
+      }
+    });
   }
   schedule(entry) {
-    if (!this.active(entry) || entry.view.autoApproval?.status !== "countdown") return;
+    if (!this.active(entry) || entry.view.autoApproval?.status !== "countdown" || entry.cancelTimer) return;
     const remaining = Math.max(0, entry.deadline - this.time.now());
     const next = remaining > 0 ? remaining - (Math.ceil(remaining / 1e3) - 1) * 1e3 : 0;
     entry.cancelTimer = this.time.after(next, () => {
       entry.cancelTimer = void 0;
       if (!this.active(entry) || entry.view.autoApproval?.status !== "countdown") return;
-      if (!this.eligible(entry)) {
-        this.cancelAutoApproval(entry.view.request.id, "visibility");
-        return;
-      }
+      const visible = this.approvalEligible(entry, "timer");
+      if (this.manual.has(entry.view.request.id)) return;
       const seconds = Math.min(
         this.options.autoApproveDelaySeconds ?? 15,
         Math.max(0, Math.ceil((entry.deadline - this.time.now()) / 1e3))
       );
-      if (seconds === 0) {
-        void this.approveNow(entry.view.request.id, true);
-        return;
-      }
       if (entry.view.autoApproval.seconds !== seconds) {
         entry.view = { ...entry.view, autoApproval: { status: "countdown", seconds } };
         this.publish();
       }
+      if (seconds === 0) {
+        if (visible) void this.approveNow(entry.view.request.id, true);
+        return;
+      }
       this.schedule(entry);
     });
   }
@@ -2779,13 +3125,11 @@ var Controller = class {
   async approveNow(id, automatic = false) {
     const entry = this.entries.get(id);
     if (!entry || !this.approval || entry.approvalRefresh || !(entry.view.autoApproval?.status === "countdown" || this.options.fastMode && automatic && entry.view.autoApproval?.status === "checking" && !entry.approvalAbort)) return;
-    if (!this.eligible(entry)) {
-      this.cancelAutoApproval(id, "visibility");
-      return;
-    }
+    if (!this.approvalEligible(entry)) return;
     entry.cancelTimer?.();
     entry.cancelTimer = void 0;
-    entry.approvalAbort = new AbortController();
+    const abort = entry.approvalAbort = new AbortController();
+    entry.approvalPaintPending = false;
     entry.view = { ...entry.view, autoApproval: { status: "checking" } };
     this.publish();
     let dispatched = false;
@@ -2800,52 +3144,40 @@ var Controller = class {
       ...type === "settled" && !confirmed ? { result: dispatched ? "uncertain" : "not-sent" } : {}
     });
     try {
-      await withDeadline(AbortSignal.any([entry.abort.signal, entry.approvalAbort.signal]), 5e3, async (signal) => {
+      await withDeadline(AbortSignal.any([entry.abort.signal, abort.signal]), 5e3, async (signal) => {
         for (let reads = 0; reads < 3; reads++) {
           reviewStage(signal, "Approval verification");
-          if (!this.eligible(entry)) {
-            this.cancelAutoApproval(id, "visibility");
-            return;
-          }
+          if (!this.approvalEligible(entry)) return;
           const revision = this.version;
           const pending = await this.approvalList(signal);
           reviewStage(signal, "Approval verification");
-          if (!this.eligible(entry)) {
-            this.cancelAutoApproval(id, "visibility");
-            return;
-          }
+          if (!this.approvalEligible(entry)) return;
           if (revision !== this.version) continue;
           const current = pending.find((request) => request.id === id);
           if (!current) {
             this.replied(id, true, "reconciled");
             return;
           }
-          if (!isDeepStrictEqual(current, entry.view.request)) throw new Error("Pending request changed");
+          if (!isDeepStrictEqual(current, entry.view.request)) throw requestChanged;
           const verified = structuredClone(current);
           this.reconcile(pending, revision);
           const verifiedRevision = this.version;
-          if (!this.eligible(entry)) {
-            this.cancelAutoApproval(id, "visibility");
-            return;
-          }
+          if (!this.approvalEligible(entry)) return;
           entry.view = { ...entry.view, autoApproval: { status: "allowing" } };
           this.publish();
           const remaining = remainingTime(signal);
           const acknowledgement = new AbortController();
-          const abort = () => {
+          const abort2 = () => {
             if (!dispatched || signal.reason !== permissionResolved) acknowledgement.abort(signal.reason);
           };
-          signal.addEventListener("abort", abort, { once: true });
-          if (signal.aborted) abort();
+          signal.addEventListener("abort", abort2, { once: true });
+          if (signal.aborted) abort2();
           const write = withDeadline(acknowledgement.signal, remaining, async (bounded) => {
             reviewStage(signal, "Approval verification");
             reviewStage(bounded, "Approval acknowledgement");
-            if (!this.eligible(entry)) {
-              this.cancelAutoApproval(id, "visibility");
-              return;
-            }
+            if (!this.approvalEligible(entry)) return;
             if (verifiedRevision !== this.version) return;
-            if (!isDeepStrictEqual(verified, entry.view.request)) throw new Error("Pending request changed");
+            if (!isDeepStrictEqual(verified, entry.view.request)) throw requestChanged;
             reviewStage(signal, "Approval verification");
             reviewStage(bounded, "Approval acknowledgement");
             this.manual.set(id, "failed");
@@ -2881,7 +3213,7 @@ var Controller = class {
             }
           }).finally(() => {
             this.acknowledgements.delete(acknowledgement);
-            signal.removeEventListener("abort", abort);
+            signal.removeEventListener("abort", abort2);
           });
           this.approvalWorkers.add(write);
           void write.then(() => this.approvalWorkers.delete(write), () => this.approvalWorkers.delete(write));
@@ -2891,10 +3223,7 @@ var Controller = class {
             this.replied(id);
             return;
           }
-          if (!this.eligible(entry)) {
-            this.cancelAutoApproval(id, "visibility");
-            return;
-          }
+          if (!this.approvalEligible(entry)) return;
           entry.view = { ...entry.view, autoApproval: { status: "checking" } };
           this.publish();
         }
@@ -2904,8 +3233,16 @@ var Controller = class {
           this.publish();
         }
       });
-    } catch {
+    } catch (error) {
       if (!this.active(entry) || entry.view.autoApproval?.status === "cancelled") return;
+      if (!dispatched && error !== requestChanged && !this.manual.has(id)) {
+        if (entry.approvalPaused) return;
+        entry.approvalRefresh = true;
+        entry.view = { ...entry.view, autoApproval: { status: "checking" } };
+        this.publish();
+        await this.recoverApproval(entry, abort);
+        return;
+      }
       if (entry.fastApproval) {
         entry.fastApproval = void 0;
         if (entry.view.resolved) {
@@ -2926,7 +3263,28 @@ var Controller = class {
       } catch {
       }
     } finally {
-      if (!dispatched) fact("settled");
+      if (!dispatched) {
+        fact("settled");
+        if (entry.approvalPaused) await this.afterApprovalRead(entry, abort, () => {
+          entry.approvalAbort = void 0;
+          entry.approvalPaused = false;
+          if (this.options.fastMode && !entry.approvalRefresh) this.startApproval(entry);
+        });
+        else if (!entry.approvalRefresh && entry.approvalAbort === abort) entry.approvalAbort = void 0;
+        else if (entry.approvalRefresh && entry.approvalAbort === abort && !this.approvalRead) entry.approvalAbort = void 0;
+        if (entry.approvalPaintPending && !entry.approvalAbort && !entry.approvalRefresh && this.active(entry) && !this.manual.has(id) && this.safe(entry)) {
+          entry.approvalPaintPending = false;
+          entry.view = { ...entry.view, autoApproval: this.options.fastMode ? void 0 : {
+            status: "countdown",
+            seconds: Math.min(this.options.autoApproveDelaySeconds ?? 15, Math.max(0, Math.ceil((entry.deadline - this.time.now()) / 1e3)))
+          } };
+          this.publish();
+          if (this.eligible(entry)) {
+            if (this.options.fastMode) this.startApproval(entry);
+            else this.schedule(entry);
+          }
+        }
+      }
     }
   }
   asked(request) {
@@ -2971,17 +3329,26 @@ var Controller = class {
           return null;
         }
       }
-      entry.startedAt = this.time.now();
-      return this.evaluate(request, entry.abort.signal, () => {
-        if (active() && (entry.view.status === "identifying" || entry.view.status === "analyzing")) {
-          entry.view = { ...entry.view, status: "analyzing" };
+      return this.admission.run(request, entry.root ?? request.sessionID, entry.abort.signal, () => {
+        if (!active()) return Promise.resolve(null);
+        if (this.modes && (!this.modes.enabled(entry.root) || (this.modeChanges.get(entry.root) ?? 0) > entry.gateRevision)) {
+          this.suspend(entry);
           this.publish();
+          return Promise.resolve(null);
         }
-      }, (progress) => this.progress(entry, progress), { review: entry.review, root: entry.root });
+        entry.startedAt = this.time.now();
+        return this.evaluate(request, entry.abort.signal, () => {
+          if (active() && (entry.view.status === "identifying" || entry.view.status === "analyzing")) {
+            entry.view = { ...entry.view, status: "analyzing" };
+            this.publish();
+          }
+        }, (progress) => this.progress(entry, progress), { review: entry.review, root: entry.root });
+      });
     }).then((assessment) => {
       this.clearProgress(entry);
       if (active()) {
         entry.view = assessment ? { ...entry.view, status: "complete", assessment, progress: void 0 } : { ...entry.view, status: "unrelated", progress: void 0 };
+        if (!this.safe(entry)) this.pauseRating(entry);
         if (assessment) {
           try {
             const fullReportMs = Math.max(0, this.time.now() - entry.startedAt);
@@ -3007,6 +3374,7 @@ var Controller = class {
       this.clearProgress(entry);
       if (active()) {
         entry.view = { ...entry.view, status: entry.view.status === "identifying" ? "unidentified" : "unavailable", progress: void 0, error: error instanceof Error ? error.message : uiText.review.failed };
+        this.pauseRating(entry);
         this.publish();
         this.finishFast(entry);
       }
@@ -3052,7 +3420,14 @@ var Controller = class {
       for (const [id, entry] of this.entries) if (!ids.has(id) && !entry.view.resolved) this.replied(id, true, "reconciled");
       for (const request of requests) {
         const entry = this.entries.get(request.id);
-        if (entry?.approvalRefresh && entry.view.autoApproval?.status === "checking") {
+        if (entry && this.options.autoApprove && !entry.approvalDispatched && !this.manual.has(request.id) && !isDeepStrictEqual(request, entry.view.request)) {
+          this.manual.set(request.id, "failed");
+          entry.cancelTimer?.();
+          entry.approvalAbort?.abort(requestChanged);
+          entry.view = { ...entry.view, autoApproval: { status: "failed" } };
+          this.publish();
+        }
+        if (entry?.approvalRefresh && !entry.approvalAbort && !this.approvalRead && !this.manual.has(request.id) && entry.view.autoApproval?.status === "checking") {
           entry.approvalRefresh = false;
           entry.approvalAbort = void 0;
           entry.view = { ...entry.view, autoApproval: void 0 };
@@ -3087,19 +3462,14 @@ var Controller = class {
     }
     this.entries.clear();
     await Promise.allSettled([...this.workers]);
+    await this.admission.settled();
     await Promise.allSettled([...this.approvalWorkers]);
     this.manual.clear();
   }
 };
 function visibleReview(views, sessionID, getSession) {
+  sessionID = conversationRoot(sessionID, getSession);
   if (!sessionID) return;
-  const session = getSession(sessionID);
-  if (!session) return;
-  if (session.parentID) {
-    const root = getSession(session.parentID);
-    if (!root || root.parentID) return;
-    sessionID = root.id;
-  }
   let first;
   let retained;
   for (const view of views) {
@@ -3384,6 +3754,8 @@ function unsupportedShellSyntax(command, budget) {
       inWord = true;
     } else if (quote) {
       if (char === quote) quote = "";
+    } else if (char === "$" && command[i + 1] === "'") {
+      return "ANSI-C shell quoting is outside byte-faithful literal discovery; script targets were not resolved.";
     } else if (char === "'" || char === '"') {
       quote = char;
       inWord = true;
@@ -3404,14 +3776,16 @@ function programIdentity(executable) {
   if (name === "cat" || name === "head" || name === "env") return name;
 }
 var DiscoveryState = class {
-  constructor(cwd, depth, budget) {
+  constructor(cwd, depth, budget, logicalCwdKnown) {
     this.cwd = cwd;
     this.depth = depth;
     this.budget = budget;
+    this.logicalCwdKnown = logicalCwdKnown;
   }
   cwd;
   depth;
   budget;
+  logicalCwdKnown;
   references = [];
   limitations = [];
   uncertainWord = false;
@@ -3446,7 +3820,7 @@ var DiscoveryState = class {
   }
   nested(command, physical) {
     if (physical) this.note("Physical shell directory mode is outside literal cwd inference; nested relative script targets are unresolved.");
-    const nested = scan(command, this.explicitCdpath || physical ? null : this.cwd, this.depth + 1, this.budget);
+    const nested = scan(command, this.explicitCdpath || physical ? null : this.cwd, this.depth + 1, this.budget, this.logicalCwdKnown);
     if (nested.references.length) this.qualifySnapshot();
     this.references.push(...nested.references);
     nested.limitations.forEach((text2) => this.note(text2));
@@ -3550,6 +3924,8 @@ function builtin(executable, args, state, next) {
     const searchesCdpath = target && !path8.isAbsolute(target) && !/^\.\.?(?:\/|$)/.test(target);
     if (state.previousOperator === "|" || next === "|") {
       state.invalidateCwd("Pipeline directory changes do not establish a reliable cwd for later script targets.");
+    } else if (!state.logicalCwdKnown) {
+      state.invalidateCwd("Declared and canonical launch directories do not establish the shell's logical PWD; working directory after cd is unresolved and relative script targets will not be guessed.");
     } else if (args.length === 1 && target && !target.startsWith("-") && literal(target) && !state.uncertainWord && !(state.explicitCdpath && searchesCdpath) && next === "&&" && state.cwd) {
       state.cwd = path8.resolve(state.cwd, target);
       state.conditionalCwd = true;
@@ -3656,6 +4032,10 @@ function interpreter(isPython, args, state) {
   }
 }
 function visit(args, state, next) {
+  if (args[0] === "!") {
+    state.invalidateCwd("Shell negation is outside literal state inference; negated source targets and the subsequent working directory are unresolved.");
+    return;
+  }
   if (args[0] === "time") {
     state.invalidateCwd("Shell timed commands are outside literal discovery; the working directory is unresolved.");
     return;
@@ -3686,10 +4066,17 @@ function visit(args, state, next) {
   }
 }
 function discover(command, cwd, depth = 0, signal) {
-  return scan(command, cwd, depth, new DiscoveryBudget(signal));
+  const launch = typeof cwd === "string" || cwd === null ? { declared: cwd, canonical: cwd } : cwd;
+  return scan(
+    command,
+    launch.declared,
+    depth,
+    new DiscoveryBudget(signal),
+    launch.canonical !== null && launch.declared === launch.canonical
+  );
 }
-function scan(command, cwd, depth, budget) {
-  const state = new DiscoveryState(cwd, depth, budget);
+function scan(command, cwd, depth, budget, logicalCwdKnown) {
+  const state = new DiscoveryState(cwd, depth, budget, logicalCwdKnown);
   const result = { references: state.references, limitations: state.limitations };
   try {
     budget.admit(command);
@@ -3818,7 +4205,8 @@ async function collectEvidence(input, limits, signal, scope = fileAccess.scope(s
   if (input.command.length > limits.maxEvidenceBytes) throw new Error("Command exceeds configured evidence budget");
   const commandBytes = Buffer.byteLength(input.command);
   if (commandBytes > limits.maxEvidenceBytes) throw new Error("Command exceeds configured evidence budget");
-  const discovery = discover(input.command, input.cwd, 0, signal);
+  const canonical = input.execution ? input.execution.canonicalCwd : input.cwd ? (await scope.canonical(input.cwd)).path : null;
+  const discovery = discover(input.command, { declared: input.cwd, canonical }, 0, signal);
   const evidence = { ...input, kind: "shell", files: [], limitations: [
     ...input.limitations ?? [],
     "Only literal Python/shell source and supported cat/head file operands are collected. Files are full review-time snapshots, not command output. Imports, dependencies, other runtimes and calls inside source files are not recursively inspected.",
@@ -4170,6 +4558,50 @@ function collectDirectoryEvidence(context, limits, signal) {
 // src/skill-evidence.ts
 init_define_REVIEW_PROMPTS();
 import path10 from "node:path";
+function commandTokens(text2, check, maxTokens) {
+  const parts = [];
+  let value = "", quote = "", active = false;
+  const unsupported = { limitation: "Unsupported shell syntax in a skill command was not resolved; the whole command was omitted." };
+  for (let cursor = 0; cursor < text2.length; cursor++) {
+    if (!check()) return void 0;
+    const char = text2[cursor];
+    if (/[\u0000-\u0008\u000a-\u001f\u007f]/.test(char)) return unsupported;
+    if (quote === "'") {
+      if (char === "'") quote = "";
+      else value += char;
+    } else if (char === "\\") {
+      const next = text2[++cursor];
+      if (next === void 0 || /[\u0000-\u001f\u007f]/.test(next)) return unsupported;
+      value += quote === '"' && !/["\\$`]/.test(next) ? `\\${next}` : next;
+      active = true;
+    } else if (quote === '"') {
+      if (char === '"') quote = "";
+      else if (char === "$" || char === "`") return unsupported;
+      else value += char;
+    } else if (char === " " || char === "	") {
+      if (active) {
+        if (parts.length >= maxTokens) return void 0;
+        parts.push(value);
+        value = "";
+        active = false;
+      }
+    } else if (char === "'" || char === '"') {
+      quote = char;
+      active = true;
+    } else {
+      if (/[|&;<>()[\]{}$`*?~#]/.test(char) || char === "!" && !active) return unsupported;
+      value += char;
+      active = true;
+    }
+    if (value.length > 4096) return { limitation: "Skill command exceeded the literal argument length limit; the whole command was omitted." };
+  }
+  if (quote) return unsupported;
+  if (active) {
+    if (parts.length >= maxTokens) return void 0;
+    parts.push(value);
+  }
+  return { parts };
+}
 function skillReferences(text2, signal) {
   const references = /* @__PURE__ */ new Set(), limitations = /* @__PURE__ */ new Set();
   const end = performance.now() + 250;
@@ -4252,24 +4684,51 @@ function skillReferences(text2, signal) {
         cursor++;
         continue;
       }
-      const start = ++cursor;
-      while (cursor < text2.length && text2[cursor] !== char) {
+      const opening = cursor++;
+      while (char === "`" && text2[cursor] === char) {
         if (!check()) {
           exhausted = true;
           break;
         }
         cursor++;
       }
+      const width = cursor - opening, start = cursor;
+      let close = -1;
+      while (cursor < text2.length && !exhausted) {
+        if (!check()) {
+          exhausted = true;
+          break;
+        }
+        if (text2[cursor] !== char) {
+          cursor++;
+          continue;
+        }
+        const run = cursor++;
+        while (char === "`" && text2[cursor] === char) {
+          if (!check()) {
+            exhausted = true;
+            break;
+          }
+          cursor++;
+        }
+        if (cursor - run === width) {
+          close = run;
+          break;
+        }
+      }
       if (exhausted) break;
-      if (cursor === text2.length) {
+      if (close === -1) {
         limitations.add("Unclosed quoted skill reference was not resolved.");
         break;
       }
-      const quoted = text2.slice(start, cursor++);
+      const quoted = text2.slice(start, close);
       const command = char === "`" && /^(?:(?:python(?:\d+(?:\.\d+)*)?|node|bun|deno|bash|sh|zsh|cat|head|source|uv|npx|git)\s|[^\s]+\.(?:py|sh|bash|js|mjs|ts)\s|\.{1,2}\/[^\s]+\s+--)/.test(quoted);
       if (command) {
-        for (const part of quoted.matchAll(/"([^"]+)"|'([^']+)'|[^\s]+/g)) {
-          if (!add(part[1] ?? part[2] ?? part[0], "literal")) {
+        const parsed = commandTokens(quoted, check, 16384 - tokens);
+        if (!parsed) exhausted = true;
+        else if ("limitation" in parsed) limitations.add(parsed.limitation);
+        else for (const part of parsed.parts) {
+          if (!add(part, "literal")) {
             exhausted = true;
             break;
           }
@@ -4515,7 +4974,8 @@ import { insert as _$insert } from "@opentui/solid";
 import { setProp as _$setProp } from "@opentui/solid";
 import { createElement as _$createElement } from "@opentui/solid";
 import { createComponent as _$createComponent } from "@opentui/solid";
-import { createSignal, onCleanup } from "solid-js";
+import { createSignal, For, onCleanup } from "solid-js";
+import { RGBA } from "@opentui/core";
 
 // src/lifetime.ts
 init_define_REVIEW_PROMPTS();
@@ -4553,18 +5013,15 @@ var HistoryRefresh = class {
     this.query = query;
     this.publish = publish;
     this.query = snapshotQuery(query);
-    this.offCommit = store.onCommit(() => this.refresh());
+    this.offCommit = store.onCommit(() => this.request());
     this.offFailure = store.onWriteFailure(() => {
       if (this.query.type !== "totals" && this.query.type !== "conversationTotals" || this.stopped) return;
       this.revision++;
       this.again = false;
       this.publish(void 0);
     });
-    this.timer = setInterval(() => {
-      if (this.active) this.again = true;
-      else this.refresh();
-    }, 2e3);
-    this.refresh();
+    this.timer = setInterval(() => this.request(), 2e3);
+    this.request();
   }
   store;
   query;
@@ -4585,9 +5042,14 @@ var HistoryRefresh = class {
   retain(query) {
     this.query = snapshotQuery(query);
   }
+  /** Navigation, deletion and maintenance invalidate even a successful old read. */
   refresh() {
     if (this.stopped) return;
     this.revision++;
+    this.request();
+  }
+  request() {
+    if (this.stopped) return;
     if (this.active) {
       this.again = true;
       return;
@@ -4604,7 +5066,8 @@ var HistoryRefresh = class {
     }, () => {
       if (!this.stopped && revision === this.revision) this.publish(void 0);
     }).finally(async () => {
-      await read.settled;
+      await read.settled?.catch(() => {
+      });
       this.active = false;
       if (this.again && !this.stopped) this.start();
     }).catch(() => {
@@ -4769,6 +5232,17 @@ function lifetimeTracker(api, store, root) {
   };
 }
 function StatisticsDialog(props) {
+  const [hover, setHover] = createSignal();
+  const selectedForeground = () => {
+    const theme = props.api.theme.current;
+    if (theme.selectedListItemText.a !== 0) return theme.selectedListItemText;
+    const {
+      r,
+      g,
+      b
+    } = theme.accent;
+    return 0.299 * r + 0.587 * g + 0.114 * b > 0.5 ? RGBA.fromInts(0, 0, 0) : RGBA.fromInts(255, 255, 255);
+  };
   const depth = props.api.ui.dialog.depth;
   const toggle = () => props.controller.select(props.state.view === "lifetime" ? "conversation" : "lifetime");
   const unregister = props.api.keymap.registerLayer({
@@ -4796,11 +5270,11 @@ function StatisticsDialog(props) {
     return lifetimeReport(state.conversation.totals);
   };
   return (() => {
-    var _el$ = _$createElement("box"), _el$2 = _$createElement("box"), _el$3 = _$createElement("text"), _el$4 = _$createElement("b"), _el$5 = _$createElement("text"), _el$6 = _$createElement("box"), _el$7 = _$createElement("text"), _el$8 = _$createElement("text"), _el$9 = _$createElement("text"), _el$0 = _$createElement("text");
+    var _el$ = _$createElement("box"), _el$2 = _$createElement("box"), _el$3 = _$createElement("text"), _el$4 = _$createElement("b"), _el$5 = _$createElement("text"), _el$6 = _$createElement("box"), _el$7 = _$createElement("text"), _el$8 = _$createElement("text");
     _$insertNode(_el$, _el$2);
     _$insertNode(_el$, _el$6);
-    _$insertNode(_el$, _el$9);
-    _$insertNode(_el$, _el$0);
+    _$insertNode(_el$, _el$7);
+    _$insertNode(_el$, _el$8);
     _$setProp(_el$, "paddingLeft", 2);
     _$setProp(_el$, "paddingRight", 2);
     _$setProp(_el$, "paddingBottom", 1);
@@ -4813,32 +5287,51 @@ function StatisticsDialog(props) {
     _$insert(_el$4, () => uiText.lifetime.title);
     _$setProp(_el$5, "onMouseUp", () => props.api.ui.dialog.clear());
     _$insert(_el$5, () => uiText.lifetime.close);
-    _$insertNode(_el$6, _el$7);
-    _$insertNode(_el$6, _el$8);
     _$setProp(_el$6, "flexDirection", "row");
-    _$setProp(_el$6, "gap", 3);
-    _$setProp(_el$7, "onMouseUp", () => props.controller.select("conversation"));
-    _$insert(_el$7, () => uiText.lifetime.scopeTab("conversation", props.state.view === "conversation"));
-    _$setProp(_el$8, "onMouseUp", () => props.controller.select("lifetime"));
-    _$insert(_el$8, () => uiText.lifetime.scopeTab("lifetime", props.state.view === "lifetime"));
-    _$insert(_el$9, message);
-    _$insert(_el$0, () => uiText.lifetime.switchScope);
+    _$setProp(_el$6, "gap", 1);
+    _$insert(_el$6, _$createComponent(For, {
+      each: ["conversation", "lifetime"],
+      children: (scope) => {
+        const active = () => props.state.view === scope;
+        return (() => {
+          var _el$9 = _$createElement("box"), _el$0 = _$createElement("text");
+          _$insertNode(_el$9, _el$0);
+          _$setProp(_el$9, "paddingLeft", 1);
+          _$setProp(_el$9, "paddingRight", 1);
+          _$setProp(_el$9, "onMouseOver", () => setHover(scope));
+          _$setProp(_el$9, "onMouseOut", () => setHover(void 0));
+          _$setProp(_el$9, "onMouseUp", (event) => {
+            if (event.button !== 0 || props.api.renderer.getSelection()?.getSelectedText()) return;
+            props.controller.select(scope);
+          });
+          _$insert(_el$0, () => uiText.lifetime.scopeTab(scope));
+          _$effect((_p$) => {
+            var _v$5 = active() ? props.api.theme.current.accent : hover() === scope ? props.api.theme.current.backgroundElement : props.api.theme.current.backgroundPanel, _v$6 = active() ? selectedForeground() : props.api.theme.current.textMuted;
+            _v$5 !== _p$.e && (_p$.e = _$setProp(_el$9, "backgroundColor", _v$5, _p$.e));
+            _v$6 !== _p$.t && (_p$.t = _$setProp(_el$0, "fg", _v$6, _p$.t));
+            return _p$;
+          }, {
+            e: void 0,
+            t: void 0
+          });
+          return _el$9;
+        })();
+      }
+    }));
+    _$insert(_el$7, message);
+    _$insert(_el$8, () => uiText.lifetime.switchScope);
     _$effect((_p$) => {
-      var _v$ = props.api.theme.current.text, _v$2 = props.api.theme.current.textMuted, _v$3 = props.state.view === "conversation" ? props.api.theme.current.accent : props.api.theme.current.textMuted, _v$4 = props.state.view === "lifetime" ? props.api.theme.current.accent : props.api.theme.current.textMuted, _v$5 = props.api.theme.current.text, _v$6 = props.api.theme.current.textMuted;
+      var _v$ = props.api.theme.current.text, _v$2 = props.api.theme.current.textMuted, _v$3 = props.api.theme.current.text, _v$4 = props.api.theme.current.textMuted;
       _v$ !== _p$.e && (_p$.e = _$setProp(_el$3, "fg", _v$, _p$.e));
       _v$2 !== _p$.t && (_p$.t = _$setProp(_el$5, "fg", _v$2, _p$.t));
       _v$3 !== _p$.a && (_p$.a = _$setProp(_el$7, "fg", _v$3, _p$.a));
       _v$4 !== _p$.o && (_p$.o = _$setProp(_el$8, "fg", _v$4, _p$.o));
-      _v$5 !== _p$.i && (_p$.i = _$setProp(_el$9, "fg", _v$5, _p$.i));
-      _v$6 !== _p$.n && (_p$.n = _$setProp(_el$0, "fg", _v$6, _p$.n));
       return _p$;
     }, {
       e: void 0,
       t: void 0,
       a: void 0,
-      o: void 0,
-      i: void 0,
-      n: void 0
+      o: void 0
     });
     return _el$;
   })();
@@ -5063,7 +5556,7 @@ var SessionModes = class {
     this.values.set(root, enabled);
     return this.store.write(root, enabled);
   }
-  deleted(id) {
+  deleted(_id) {
     this.ancestryRevision++;
     this.roots.clear();
   }
@@ -5101,9 +5594,10 @@ function sessionModeCommands(api, modes, changed) {
         if (enabled) await modes.load(root, api.lifecycle.signal);
         api.lifecycle.signal.throwIfAborted();
         if (latest.get(root) !== order) return;
+        const invalidate = !enabled || !modes.enabled(root);
         const persisted = modes.set(root, enabled);
         applied = true;
-        changed(root);
+        if (invalidate) changed(root);
         await persisted;
         if (!api.lifecycle.signal.aborted && latest.get(root) === order) api.ui.toast({
           variant: "success",
@@ -5372,8 +5866,15 @@ var NotificationPolicy = class {
     entry.phase = "attention";
     entry.message = this.message(kind, uiText.notifications[kind], entry.target);
     const message = entry.message;
+    if (entry.identity.kind === "permission" && kind !== "question" && entry.announced?.has(kind)) {
+      entry.banner = void 0;
+      this.remind(entry);
+      return;
+    }
     entry.banner = message ? this.dispatch(message, entry.target, () => {
-      if (entry.message === message) this.remind(entry);
+      if (entry.message !== message) return;
+      if (entry.identity.kind === "permission" && kind !== "question") (entry.announced ??= /* @__PURE__ */ new Set()).add(kind);
+      this.remind(entry);
     }) : void 0;
   }
   wait(entry) {
@@ -5383,13 +5884,14 @@ var NotificationPolicy = class {
     entry.message = void 0;
     entry.phase = "waiting";
   }
-  snapshot(views, blockers = this.blockers) {
+  snapshot(views, blockers = this.blockers, healthy = true) {
     if (this.stopped) return;
     this.views = new Map(views.map((view) => [view.request.id, view]));
     this.blockers = new Map(blockers);
     for (const [id, entry] of this.permissions) {
       if (this.views.has(id)) this.select(entry);
-      else this.resolved("permission", id);
+      else if (healthy) this.resolved("permission", id);
+      else this.wait(entry);
     }
     for (const entry of this.questions.values()) this.select(entry);
   }
@@ -5572,6 +6074,7 @@ var NotificationHost = class {
       for (const id of this.questions.keys()) if (!ids.has(id)) this.resolved("question", id);
       this.admissions();
       this.selectBlockers();
+      this.recheckIdle();
     } catch {
       if (!this.stopped) {
         this.questionsReady = false;
@@ -5585,19 +6088,25 @@ var NotificationHost = class {
     if (this.stopped) return;
     this.policy.pending(this.blockers());
   }
-  blockers() {
+  interactions() {
     const pending = /* @__PURE__ */ new Map();
     const add = (kind, id, sessionID) => {
       if (!this.closed.has(`${kind}:${id}`) && !this.deletedSessions.has(sessionID)) pending.set(`${kind}:${id}`, { kind, id, sessionID });
     };
     for (const view of this.views) add("permission", view.request.id, view.request.sessionID);
     for (const [id, request] of this.permissions) add("permission", id, request.sessionID);
-    const unknownPermission = [...pending.values()].some((value) => !this.api.state.session.get(value.sessionID));
-    if (this.questionsReady && this.permissionsReady && !unknownPermission) {
-      for (const request of this.questionSnapshot) add("question", request.id, request.sessionID);
-      for (const [id, request] of this.questions) add("question", id, request.sessionID);
-    }
-    return notificationBlockers(new Set(this.roots.keys()), pending.values(), (id) => this.api.state.session.get(id));
+    for (const request of this.questionSnapshot) add("question", request.id, request.sessionID);
+    for (const [id, request] of this.questions) add("question", id, request.sessionID);
+    return [...pending.values()];
+  }
+  blockers() {
+    const pending = this.interactions();
+    if (!this.permissionsReady || pending.some((value) => value.kind === "permission" && !this.rootOf(value.sessionID))) return /* @__PURE__ */ new Map();
+    return notificationBlockers(
+      new Set(this.roots.keys()),
+      pending.filter((value) => value.kind === "permission" || this.questionsReady),
+      (id) => this.api.state.session.get(id)
+    );
   }
   rootOf(id) {
     const seen = /* @__PURE__ */ new Set();
@@ -5672,8 +6181,8 @@ var NotificationHost = class {
   }
   admit(kind, id, request) {
     if (request.target || this.stopped || this.deletedSessions.has(request.sessionID)) return;
-    const rootID = request.root ?? this.rootOf(request.sessionID);
-    if (!rootID) {
+    const rootID2 = request.root ?? this.rootOf(request.sessionID);
+    if (!rootID2) {
       if (request.resolving || (request.retryAt ?? 0) > this.clock.now()) return;
       const lookup = this.lookup(request.sessionID);
       if (!lookup) return;
@@ -5691,9 +6200,9 @@ var NotificationHost = class {
       });
       return;
     }
-    const root = this.roots.get(rootID);
+    const root = this.roots.get(rootID2);
     if (!root || request.received < root.since) return;
-    const target = { root: rootID, sessionID: rootID, title: this.api.state.session.get(rootID)?.title ?? uiText.notifications.fallbackSession };
+    const target = { root: rootID2, sessionID: rootID2, title: this.api.state.session.get(rootID2)?.title ?? uiText.notifications.fallbackSession };
     request.target = target;
     if (kind === "question") this.policy.question(id, target, true);
     else {
@@ -5721,11 +6230,14 @@ var NotificationHost = class {
     for (const request of this.permissions.values()) if (request.target) {
       request.target.title = this.api.state.session.get(request.target.root)?.title ?? uiText.notifications.fallbackSession;
     }
-    this.policy.snapshot(views, this.blockers());
+    this.policy.snapshot(views, this.blockers(), this.permissionsReady);
     for (const [id, request] of this.permissions) this.admit("permission", id, request);
     const pending = new Set(views.map((v) => v.request.id));
-    for (const [id] of this.permissions) if (!pending.has(id)) this.resolved("permission", id);
+    if (this.permissionsReady) {
+      for (const [id] of this.permissions) if (!pending.has(id)) this.resolved("permission", id);
+    }
     this.selectBlockers();
+    if (permissionHealthy === true) this.recheckIdle();
   }
   fact(fact) {
     if (this.stopped) return;
@@ -5753,6 +6265,7 @@ var NotificationHost = class {
     this.closed.add(key);
     this.policy.resolved(kind, id);
     this.selectBlockers();
+    this.recheckIdle();
   }
   message(message) {
     if (this.stopped) return;
@@ -5777,19 +6290,26 @@ var NotificationHost = class {
       if (message.error?.name === "MessageAbortedError") root.cancelled = true;
     }
   }
+  recheckIdle() {
+    for (const id of this.roots.keys()) this.idle(id);
+  }
   idle(id) {
     const root = this.roots.get(id);
     if (!root || this.stopped) return;
     root.idle?.();
     root.idle = this.clock.after(100, () => {
       root.idle = void 0;
-      if (this.stopped || this.roots.get(id) !== root || this.api.state.session.status(id)?.type !== "idle") return;
+      if (this.stopped || this.api.lifecycle.signal.aborted || this.roots.get(id) !== root || this.api.state.session.status(id)?.type !== "idle") return;
       if (root.cancelled) return;
+      if (!this.permissionsReady || !this.questionsReady) return;
       const messages = this.api.state.session.messages(id);
       const assistant = messages.findLast((m) => m.role === "assistant" && !m.summary && m.parentID === root.user);
       if (assistant?.role === "assistant") root.assistant = assistant;
       if (root.assistant?.error?.name === "MessageAbortedError" || root.error?.name === "MessageAbortedError") return;
-      if (this.views.some((v) => this.rootOf(v.request.sessionID) === id) || [...this.questions.values()].some((q) => this.rootOf(q.sessionID) === id) || this.api.state.session.question(id).length || this.api.state.session.permission(id).length) return;
+      if (this.interactions().some((value) => {
+        const root2 = this.rootOf(value.sessionID);
+        return !root2 || root2 === id;
+      }) || this.api.state.session.question(id).length || this.api.state.session.permission(id).length) return;
       const target = { root: id, sessionID: id, title: this.api.state.session.get(id)?.title ?? uiText.notifications.fallbackSession };
       const message = root.assistant;
       if (message?.error || root.error && (!message?.time.completed || !message.finish || message.finish === "error")) {
@@ -6185,20 +6705,20 @@ function EmscriptenWASM(WASMAudioDecoderCommon2) {
   var __abort_js = () => abort("");
   var __emscripten_runtime_keepalive_clear = () => {
   };
-  var timers = {};
+  var timers2 = {};
   var callUserCallback = (func) => func();
   var _emscripten_get_now = () => performance.now();
   var __setitimer_js = (which, timeout_ms) => {
-    if (timers[which]) {
-      clearTimeout(timers[which].id);
-      delete timers[which];
+    if (timers2[which]) {
+      clearTimeout(timers2[which].id);
+      delete timers2[which];
     }
     if (!timeout_ms) return 0;
     var id = setTimeout(() => {
-      delete timers[which];
+      delete timers2[which];
       callUserCallback(() => __emscripten_timeout(which, _emscripten_get_now()));
     }, timeout_ms);
-    timers[which] = {
+    timers2[which] = {
       id,
       timeout_ms
     };
@@ -7489,7 +8009,7 @@ init_define_REVIEW_PROMPTS();
 import { randomUUID as randomUUID4 } from "node:crypto";
 import path14 from "node:path";
 import { Worker } from "node:worker_threads";
-var historyWorkerSource = true ? '"use strict";\nvar __create = Object.create;\nvar __defProp = Object.defineProperty;\nvar __getOwnPropDesc = Object.getOwnPropertyDescriptor;\nvar __getOwnPropNames = Object.getOwnPropertyNames;\nvar __getProtoOf = Object.getPrototypeOf;\nvar __hasOwnProp = Object.prototype.hasOwnProperty;\nvar __export = (target, all) => {\n  for (var name in all)\n    __defProp(target, name, { get: all[name], enumerable: true });\n};\nvar __copyProps = (to, from, except, desc) => {\n  if (from && typeof from === "object" || typeof from === "function") {\n    for (let key of __getOwnPropNames(from))\n      if (!__hasOwnProp.call(to, key) && key !== except)\n        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });\n  }\n  return to;\n};\nvar __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(\n  // If the importer is in node compatibility mode or this is not an ESM\n  // file that has been converted to a CommonJS file using a Babel-\n  // compatible transform (i.e. "__esModule" has not been set), then set\n  // "default" to the CommonJS "module.exports" for node compatibility.\n  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,\n  mod\n));\nvar __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);\n\n// src/history-storage-worker.ts\nvar history_storage_worker_exports = {};\n__export(history_storage_worker_exports, {\n  openHistoryDatabase: () => openHistoryDatabase,\n  privateDatabase: () => privateDatabase\n});\nmodule.exports = __toCommonJS(history_storage_worker_exports);\nvar import_node_fs = require("node:fs");\nvar import_node_path2 = __toESM(require("node:path"), 1);\nvar import_node_worker_threads = require("node:worker_threads");\n\n// src/lifetime.ts\nvar emptyActivity = () => ({\n  reviews: 0,\n  usageRequests: 0,\n  retries: 0,\n  autoApproved: 0,\n  timedReviews: 0,\n  meanFullReportMs: 0,\n  meanRatingMs: 0,\n  since: null\n});\nvar empty = () => ({\n  requests: 0,\n  tokenRequests: 0,\n  input: 0,\n  output: 0,\n  priced: 0,\n  cost: 0,\n  since: null,\n  safe: 0,\n  unsafe: 0,\n  ratingsSince: null,\n  activity: emptyActivity()\n});\nvar count = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;\nvar amount = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0;\nfunction validate(value) {\n  if (!value || ![value.requests, value.tokenRequests, value.input, value.output, value.priced, value.safe, value.unsafe, value.safe + value.unsafe].every(count) || !amount(value.cost) || value.priced > value.requests || value.tokenRequests > value.requests || value.requests > value.tokenRequests + value.priced || !value.tokenRequests && (value.input !== 0 || value.output !== 0) || (value.requests > 0 ? !count(value.since) || value.since > 864e13 : value.since !== null || value.input !== 0 || value.output !== 0) || !value.priced && value.cost !== 0 || (value.safe + value.unsafe > 0 ? !count(value.ratingsSince) || value.ratingsSince > 864e13 : value.ratingsSince !== null)) {\n    throw new Error("Invalid lifetime usage totals");\n  }\n  const activity = value.activity;\n  if (!activity || ![activity.reviews, activity.usageRequests, activity.retries, activity.autoApproved, activity.timedReviews].every(count) || activity.reviews > value.safe + value.unsafe || activity.usageRequests > value.requests || activity.timedReviews > activity.reviews || ![activity.meanFullReportMs, activity.meanRatingMs].every(amount) || activity.meanRatingMs > activity.meanFullReportMs || !activity.timedReviews && (activity.meanFullReportMs !== 0 || activity.meanRatingMs !== 0) || (activity.reviews || activity.usageRequests || activity.retries || activity.autoApproved ? !count(activity.since) || activity.since > 864e13 : activity.since !== null)) throw new Error("Invalid lifetime activity totals");\n  return value;\n}\nfunction mean(left, leftCount, right, rightCount) {\n  if (!leftCount) return right;\n  if (!rightCount) return left;\n  return left + (right - left) * (rightCount / (leftCount + rightCount));\n}\nfunction add(left, right) {\n  return validate({\n    requests: left.requests + right.requests,\n    input: left.input + right.input,\n    output: left.output + right.output,\n    tokenRequests: left.tokenRequests + right.tokenRequests,\n    priced: left.priced + right.priced,\n    cost: left.cost + right.cost,\n    since: left.since === null ? right.since : right.since === null ? left.since : Math.min(left.since, right.since),\n    safe: left.safe + right.safe,\n    unsafe: left.unsafe + right.unsafe,\n    ratingsSince: left.ratingsSince === null ? right.ratingsSince : right.ratingsSince === null ? left.ratingsSince : Math.min(left.ratingsSince, right.ratingsSince),\n    activity: {\n      reviews: left.activity.reviews + right.activity.reviews,\n      usageRequests: left.activity.usageRequests + right.activity.usageRequests,\n      retries: left.activity.retries + right.activity.retries,\n      autoApproved: left.activity.autoApproved + right.activity.autoApproved,\n      timedReviews: left.activity.timedReviews + right.activity.timedReviews,\n      meanFullReportMs: mean(left.activity.meanFullReportMs, left.activity.timedReviews, right.activity.meanFullReportMs, right.activity.timedReviews),\n      meanRatingMs: mean(left.activity.meanRatingMs, left.activity.timedReviews, right.activity.meanRatingMs, right.activity.timedReviews),\n      since: left.activity.since === null ? right.activity.since : right.activity.since === null ? left.activity.since : Math.min(left.activity.since, right.activity.since)\n    }\n  });\n}\n\n// src/history-records.ts\nvar import_node_crypto = require("node:crypto");\nvar import_node_path = __toESM(require("node:path"), 1);\nvar HISTORY_EVENT_BYTES = 512 * 1024;\nvar HISTORY_QUEUE_BYTES = 64 * 1024 * 1024;\nvar HISTORY_TEXT_BYTES = 4096;\nvar HISTORY_DESCRIPTION_BYTES = 65536;\nvar stringBytes = (bytes) => 2 + 6 * bytes;\nvar objectBytes = (fields) => 2 + Object.entries(fields).reduce((sum, [key, bytes]) => sum + JSON.stringify(key).length + 1 + bytes + 1, 0);\nvar numberBytes = 24;\nvar textBytes = stringBytes(HISTORY_TEXT_BYTES);\nvar usageBytes = objectBytes({ input: numberBytes, output: numberBytes, cost: numberBytes });\nvar acceptedFields = {\n  safe: 5,\n  completedAt: numberBytes,\n  reportedModel: textBytes,\n  timing: objectBytes({ fullReportMs: numberBytes, ratingMs: numberBytes })\n};\nvar HISTORY_RECORD_BYTES = {\n  context: objectBytes({\n    scope: textBytes,\n    root: textBytes,\n    session: textBytes,\n    permission: textBytes,\n    review: textBytes,\n    category: JSON.stringify("external_directory").length,\n    configuredModel: textBytes,\n    provider: textBytes\n  }),\n  accepted: objectBytes(acceptedFields),\n  dispatched: objectBytes({ at: numberBytes, retry: JSON.stringify("transport").length }),\n  finalized: objectBytes({ at: numberBytes, usage: usageBytes, reportedModel: textBytes }),\n  payload: objectBytes({ ...acceptedFields, desc: stringBytes(HISTORY_DESCRIPTION_BYTES), usage: usageBytes }),\n  totals: objectBytes({\n    requests: numberBytes,\n    tokenRequests: numberBytes,\n    input: numberBytes,\n    output: numberBytes,\n    priced: numberBytes,\n    cost: numberBytes,\n    since: numberBytes,\n    safe: numberBytes,\n    unsafe: numberBytes,\n    ratingsSince: numberBytes,\n    activity: objectBytes({\n      reviews: numberBytes,\n      usageRequests: numberBytes,\n      retries: numberBytes,\n      autoApproved: numberBytes,\n      timedReviews: numberBytes,\n      meanFullReportMs: numberBytes,\n      meanRatingMs: numberBytes,\n      since: numberBytes\n    })\n  })\n};\nvar HistoryInvalid = class extends Error {\n};\nvar opaque = (...parts) => (0, import_node_crypto.createHash)("sha256").update(JSON.stringify(parts)).digest("hex");\nvar entryID = (c) => opaque(c.scope, c.permission);\nvar rootID = (c) => opaque(c.scope, c.root);\nvar sessionID = (c) => opaque(c.scope, c.session);\nvar reviewID = (c) => opaque(c.scope, c.review);\nvar count2 = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0;\nvar amount2 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0;\nfunction requireValue(ok) {\n  if (!ok) throw new HistoryInvalid("Invalid history record");\n}\nfunction object(v, keys) {\n  requireValue(v && typeof v === "object" && !Array.isArray(v));\n  requireValue(Object.getPrototypeOf(v) === Object.prototype || Object.getPrototypeOf(v) === null);\n  requireValue(Reflect.ownKeys(v).every((k) => {\n    const descriptor = Object.getOwnPropertyDescriptor(v, k);\n    return typeof k === "string" && keys.includes(k) && descriptor.enumerable && "value" in descriptor;\n  }));\n}\nfunction text(v, max = HISTORY_TEXT_BYTES) {\n  requireValue(typeof v === "string" && v.trim().length > 0 && Buffer.byteLength(v) <= max && !v.includes("\\0"));\n}\nfunction timestamp(v) {\n  requireValue(count2(v) && v <= 864e13);\n}\nfunction validateScope(c) {\n  text(c.scope);\n  requireValue(import_node_path.default.isAbsolute(c.scope));\n  text(c.root);\n  text(c.session);\n}\nfunction validateReview(c) {\n  object(c, ["scope", "root", "session", "permission", "review", "category", "configuredModel", "provider"]);\n  validateScope(c);\n  text(c.permission);\n  text(c.review);\n  text(c.configuredModel);\n  text(c.provider);\n  requireValue(["bash", "edit", "mcp", "custom", "external_directory", "skill"].includes(c.category));\n  const url = new URL(c.provider);\n  requireValue(["http:", "https:"].includes(url.protocol) && !url.username && !url.password && !url.search && !url.hash && url.href.replace(/\\/+$/, "") === c.provider);\n}\nfunction usage(v) {\n  object(v, ["input", "output", "cost"]);\n  requireValue(v.input === void 0 && v.output === void 0 || count2(v.input) && count2(v.output));\n  requireValue(v.cost === void 0 || amount2(v.cost));\n  requireValue(v.input !== void 0 || v.cost !== void 0);\n}\nfunction accepted(v, payload = false) {\n  object(v, ["safe", "completedAt", "reportedModel", "timing", ...payload ? ["desc", "usage"] : []]);\n  requireValue(typeof v.safe === "boolean");\n  timestamp(v.completedAt);\n  if (v.reportedModel !== void 0) text(v.reportedModel);\n  if (v.timing !== void 0) {\n    object(v.timing, ["fullReportMs", "ratingMs"]);\n    requireValue(amount2(v.timing.fullReportMs) && amount2(v.timing.ratingMs) && v.timing.ratingMs <= v.timing.fullReportMs);\n  }\n}\nfunction validatePayload(v) {\n  accepted(v, true);\n  requireValue(typeof v.desc === "string" && v.desc.trim().length > 0 && Buffer.byteLength(v.desc) <= HISTORY_DESCRIPTION_BYTES);\n  if (v.usage !== void 0) usage(v.usage);\n  return v;\n}\nfunction validateEvent(e) {\n  const extra = {\n    attemptDispatched: ["attempt", "retry"],\n    attemptFinalized: ["attempt", "usage", "reportedModel"],\n    reviewAccepted: ["accepted"],\n    approvalDispatched: ["approval", "automatic"],\n    approvalSettled: ["approval", "result"],\n    approvalConfirmed: ["approval", "automatic"],\n    permissionResolved: ["outcome", "payload"],\n    permissionOutcome: ["outcome"],\n    sessionDeleted: []\n  };\n  requireValue(e && Object.hasOwn(extra, e.type));\n  object(e, ["type", "context", "at", ...extra[e.type]]);\n  timestamp(e.at);\n  if (e.type === "sessionDeleted") {\n    object(e.context, ["scope", "root", "session"]);\n    validateScope(e.context);\n    return e;\n  }\n  validateReview(e.context);\n  switch (e.type) {\n    case "attemptDispatched":\n      text(e.attempt);\n      requireValue(["initial", "transport", "format"].includes(e.retry));\n      break;\n    case "attemptFinalized":\n      text(e.attempt);\n      if (e.usage !== void 0) usage(e.usage);\n      if (e.reportedModel !== void 0) text(e.reportedModel);\n      break;\n    case "reviewAccepted":\n      accepted(e.accepted);\n      break;\n    case "approvalDispatched":\n    case "approvalConfirmed":\n      text(e.approval);\n      requireValue(typeof e.automatic === "boolean");\n      break;\n    case "approvalSettled":\n      text(e.approval);\n      requireValue(["not-sent", "uncertain"].includes(e.result));\n      break;\n    case "permissionResolved":\n      requireValue(["auto", "manual", "rejected", "cancelled"].includes(e.outcome));\n      validatePayload(e.payload);\n      break;\n    case "permissionOutcome":\n      requireValue(["manual", "rejected"].includes(e.outcome));\n      break;\n  }\n  return e;\n}\nfunction decodeEvent(text2) {\n  requireValue(typeof text2 === "string" && Buffer.byteLength(text2) <= HISTORY_EVENT_BYTES);\n  try {\n    return validateEvent(JSON.parse(text2));\n  } catch {\n    throw new HistoryInvalid("Invalid history event");\n  }\n}\nfunction validateQuery(q) {\n  requireValue(q && ["totals", "conversationTotals", "history", "sessions", "resolution", "session"].includes(q.type));\n  if (q.type === "totals") {\n    object(q, ["type", "conversation"]);\n    if (q.conversation !== void 0) {\n      object(q.conversation, ["scope", "root"]);\n      text(q.conversation.scope);\n      text(q.conversation.root);\n      requireValue(import_node_path.default.isAbsolute(q.conversation.scope));\n    }\n    return;\n  }\n  text(q.scope);\n  requireValue(import_node_path.default.isAbsolute(q.scope));\n  if (q.type === "conversationTotals") {\n    object(q, ["type", "scope", "root"]);\n    text(q.root);\n    return;\n  }\n  if (q.type === "session") {\n    object(q, ["type", "scope", "session"]);\n    text(q.session);\n    return;\n  }\n  if (q.type === "resolution") {\n    object(q, ["type", "scope", "root", "session", "permission"]);\n    validateScope(q);\n    text(q.permission);\n    return;\n  }\n  if (q.type === "sessions") {\n    object(q, ["type", "scope", "after", "limit"]);\n    if (q.after !== void 0) text(q.after);\n    requireValue(q.limit === void 0 || count2(q.limit) && q.limit > 0 && q.limit <= 100);\n  } else {\n    object(q, ["type", "scope", "root", "entry", "direction", "order"]);\n    text(q.root);\n    if (q.order !== void 0) {\n      object(q.order, ["completed", "tie", "id"]);\n      timestamp(q.order.completed);\n      text(q.order.tie);\n      requireValue(q.entry && q.order.id === q.entry && /^[a-f0-9]{64}$/.test(q.order.id));\n    }\n    if (q.entry !== void 0) requireValue(/^[a-f0-9]{64}$/.test(q.entry));\n    requireValue(q.direction === void 0 || q.entry && ["older", "newer"].includes(q.direction));\n  }\n}\n\n// src/history-statistics.ts\nfunction historyDelta(e) {\n  const delta = empty(), activity = delta.activity;\n  if (e.type === "attemptDispatched" && e.retry !== "initial") {\n    activity.retries = 1;\n    activity.since = e.at;\n  } else if (e.type === "attemptFinalized" && e.usage) {\n    delta.requests = activity.usageRequests = 1;\n    delta.since = activity.since = e.at;\n    if (e.usage.input !== void 0) {\n      delta.tokenRequests = 1;\n      delta.input = e.usage.input;\n      delta.output = e.usage.output;\n    }\n    if (e.usage.cost !== void 0) {\n      delta.priced = 1;\n      delta.cost = e.usage.cost;\n    }\n  } else if (e.type === "reviewAccepted") {\n    delta.safe = e.accepted.safe ? 1 : 0;\n    delta.unsafe = e.accepted.safe ? 0 : 1;\n    delta.ratingsSince = e.accepted.completedAt;\n    activity.reviews = 1;\n    activity.since = e.accepted.completedAt;\n    if (e.accepted.timing) {\n      activity.timedReviews = 1;\n      activity.meanFullReportMs = e.accepted.timing.fullReportMs;\n      activity.meanRatingMs = e.accepted.timing.ratingMs;\n    }\n  } else if (e.type === "approvalConfirmed" && e.automatic) {\n    activity.autoApproved = 1;\n    activity.since = e.at;\n  }\n  return delta;\n}\n\n// src/history-schema.ts\nvar schema = `\nCREATE TABLE meta (id INTEGER PRIMARY KEY CHECK(id=1), version INTEGER NOT NULL, revision INTEGER NOT NULL, totals TEXT NOT NULL);\nCREATE TABLE writers (id TEXT PRIMARY KEY, sequence INTEGER NOT NULL);\nCREATE TABLE contributions (id TEXT PRIMARY KEY);\nCREATE TABLE tombstones (id TEXT PRIMARY KEY);\nCREATE TABLE roots (id TEXT PRIMARY KEY, revision INTEGER NOT NULL);\nCREATE TABLE sessions (id TEXT PRIMARY KEY, scope TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL);\nCREATE INDEX sessions_scope ON sessions(scope,id);\nCREATE TABLE reviews (id TEXT PRIMARY KEY, entry TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL, context TEXT NOT NULL, accepted TEXT);\nCREATE INDEX reviews_root ON reviews(root);\nCREATE INDEX reviews_session ON reviews(session);\nCREATE INDEX reviews_entry ON reviews(entry);\nCREATE TABLE attempts (id TEXT PRIMARY KEY, review TEXT NOT NULL REFERENCES reviews(id) ON DELETE CASCADE, dispatched TEXT, finalized TEXT);\nCREATE TABLE approvals (id TEXT PRIMARY KEY, entry TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL, review TEXT NOT NULL, state TEXT NOT NULL, automatic INTEGER NOT NULL, at INTEGER NOT NULL);\nCREATE INDEX approvals_entry ON approvals(entry);\nCREATE TABLE history (id TEXT PRIMARY KEY, scope TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL, permission TEXT NOT NULL,\n  completed INTEGER NOT NULL, tie TEXT NOT NULL, review TEXT NOT NULL, outcome TEXT, resolution TEXT NOT NULL, approving TEXT, resolvedAt INTEGER NOT NULL,\n  UNIQUE(scope,permission));\nCREATE INDEX history_order ON history(scope,root,completed,tie,id);\nCREATE INDEX history_session ON history(session);\nCREATE TABLE payloads (id TEXT PRIMARY KEY REFERENCES history(id) ON DELETE CASCADE, body TEXT NOT NULL);\n`;\nvar HistorySQL = class {\n  constructor(db) {\n    this.db = db;\n    db.exec("PRAGMA busy_timeout=250; PRAGMA foreign_keys=ON; PRAGMA journal_mode=WAL; PRAGMA synchronous=FULL; PRAGMA wal_autocheckpoint=256");\n    this.transaction(() => {\n      const tables = db.prepare("SELECT name FROM sqlite_master WHERE type=\'table\' AND name NOT LIKE \'sqlite_%\'").all();\n      if (!tables.length) {\n        db.exec(schema);\n        db.prepare("INSERT INTO meta VALUES (1,1,0,?)").run(JSON.stringify(empty()));\n      }\n      const meta = db.prepare(`SELECT version,revision,CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals FROM meta WHERE id=1`).get();\n      if (meta?.version !== 1 || !count2(meta.revision)) throw new HistoryInvalid("Unsupported history schema");\n      this.parseTotals(meta.totals);\n      db.exec(`CREATE INDEX IF NOT EXISTS sessions_root ON sessions(scope,root);\n        CREATE INDEX IF NOT EXISTS attempts_review ON attempts(review);\n        CREATE INDEX IF NOT EXISTS approvals_root ON approvals(root);\n        CREATE INDEX IF NOT EXISTS approvals_session ON approvals(session);\n        CREATE INDEX IF NOT EXISTS history_root ON history(root);`);\n      db.exec(`CREATE TABLE IF NOT EXISTS conversation_totals (id TEXT PRIMARY KEY, totals TEXT NOT NULL, partial INTEGER NOT NULL CHECK(partial IN (0,1)));\n        CREATE INDEX IF NOT EXISTS reviews_root_id ON reviews(root,id);\n        CREATE INDEX IF NOT EXISTS attempts_review_id ON attempts(review,id);\n        CREATE INDEX IF NOT EXISTS approvals_review_id ON approvals(review,id);`);\n    });\n  }\n  db;\n  statements = /* @__PURE__ */ new Map();\n  statement(sql) {\n    let statement = this.statements.get(sql);\n    if (!statement) {\n      statement = this.db.prepare(sql);\n      this.statements.set(sql, statement);\n    }\n    return statement;\n  }\n  get(sql, ...args) {\n    return this.statement(sql).get(...args);\n  }\n  all(sql, ...args) {\n    return this.statement(sql).all(...args);\n  }\n  run(sql, ...args) {\n    this.statement(sql).run(...args);\n  }\n  transaction(run, write = true) {\n    this.db.exec(write ? "BEGIN IMMEDIATE" : "BEGIN");\n    try {\n      const result = run();\n      this.db.exec("COMMIT");\n      return result;\n    } catch (error) {\n      this.db.exec("ROLLBACK");\n      throw error;\n    }\n  }\n  parseTotals(text2) {\n    if (typeof text2 !== "string" || Buffer.byteLength(text2) > HISTORY_RECORD_BYTES.totals) throw new HistoryInvalid("Invalid history totals");\n    return validate(JSON.parse(text2));\n  }\n  revision(root) {\n    const previous = this.get("SELECT revision FROM roots WHERE id=?", root)?.revision ?? 0;\n    if (!count2(previous) || !count2(previous + 1)) throw new HistoryInvalid("History revision overflow");\n    this.run("INSERT INTO roots VALUES (?,1) ON CONFLICT(id) DO UPDATE SET revision=revision+1", root);\n  }\n  apply(writer, sequence, serialized, beforeCommit) {\n    if (!/^[a-zA-Z0-9-]{1,128}$/.test(writer) || !count2(sequence) || !sequence) throw new HistoryInvalid("Invalid writer sequence");\n    const event = decodeEvent(serialized);\n    return this.transaction(() => {\n      const previous = this.get("SELECT sequence FROM writers WHERE id=?", writer)?.sequence ?? 0;\n      if (sequence <= previous) return { replay: true };\n      if (sequence !== previous + 1) throw new HistoryInvalid("History sequence gap");\n      this.event(event);\n      this.run("INSERT INTO writers VALUES (?,?) ON CONFLICT(id) DO UPDATE SET sequence=excluded.sequence", writer, sequence);\n      beforeCommit?.();\n      return { replay: false };\n    });\n  }\n  /** Indexed, bounded-memory baseline of attributable v1 facts. Never reads\n   * report payloads or legacy aggregate snapshots, and never rebuilds lifetime.\n   * Deletions before this feature may have removed facts, hence partial coverage.\n   * Reads are pure; the next actual event materializes the baseline transactionally.\n   */\n  conversation(root) {\n    const saved = this.get(`SELECT CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals,partial FROM conversation_totals WHERE id=?`, root);\n    if (saved) {\n      if (saved.partial !== 0 && saved.partial !== 1) throw new HistoryInvalid("Invalid conversation coverage");\n      return { totals: this.parseTotals(saved.totals), partialHistory: saved.partial === 1 };\n    }\n    let totals = empty(), after = "", partialHistory = !!this.get("SELECT id FROM roots WHERE id=?", root);\n    const include = (event) => {\n      validateEvent(event);\n      totals = add(totals, historyDelta(event));\n    };\n    for (; ; ) {\n      const reviews = this.all(`SELECT id,CASE WHEN length(CAST(context AS BLOB))<=${HISTORY_RECORD_BYTES.context} THEN context END AS context,\n        CASE WHEN length(CAST(accepted AS BLOB))<=${HISTORY_RECORD_BYTES.accepted} THEN accepted END AS accepted,accepted IS NOT NULL AS hasAccepted\n        FROM reviews WHERE root=? AND id>? ORDER BY id LIMIT 100`, root, after);\n      if (!reviews.length) break;\n      partialHistory = true;\n      for (const row of reviews) {\n        const context = JSON.parse(row.context);\n        validateReview(context);\n        if (rootID(context) !== root || reviewID(context) !== row.id) throw new HistoryInvalid("Invalid conversation ownership");\n        if (row.hasAccepted) {\n          const accepted2 = JSON.parse(row.accepted);\n          include({ type: "reviewAccepted", context, at: accepted2?.completedAt, accepted: accepted2 });\n        }\n        for (const table of ["attempts", "approvals"]) {\n          let cursor = "";\n          for (; ; ) {\n            const rows = table === "attempts" ? this.all(`SELECT id,\n              CASE WHEN length(CAST(dispatched AS BLOB))<=${HISTORY_RECORD_BYTES.dispatched} THEN dispatched END AS dispatched,\n              CASE WHEN length(CAST(finalized AS BLOB))<=${HISTORY_RECORD_BYTES.finalized} THEN finalized END AS finalized,\n              dispatched IS NOT NULL AS hasDispatched,finalized IS NOT NULL AS hasFinalized\n              FROM attempts WHERE review=? AND id>? ORDER BY id LIMIT 100`, row.id, cursor) : this.all("SELECT id,root,session,at,state,automatic FROM approvals WHERE review=? AND id>? ORDER BY id LIMIT 100", row.id, cursor);\n            if (!rows.length) break;\n            for (const fact of rows) {\n              if (table === "attempts") {\n                if (fact.hasDispatched) include({ ...JSON.parse(fact.dispatched), type: "attemptDispatched", context, attempt: fact.id });\n                if (fact.hasFinalized) include({ ...JSON.parse(fact.finalized), type: "attemptFinalized", context, attempt: fact.id });\n              } else {\n                if (fact.root !== root || fact.session !== sessionID(context) || ![-1, 0, 1].includes(fact.automatic) || !["pending", "uncertain", "not-sent", "confirmed"].includes(fact.state)) throw new HistoryInvalid("Invalid conversation approval");\n                if (fact.state === "confirmed") {\n                  if (fact.automatic === -1) throw new HistoryInvalid("Invalid conversation approval");\n                  include({ type: "approvalConfirmed", context, at: fact.at, approval: fact.id, automatic: fact.automatic === 1 });\n                }\n              }\n            }\n            cursor = rows.at(-1).id;\n          }\n        }\n      }\n      after = reviews.at(-1).id;\n    }\n    return { totals, partialHistory };\n  }\n  ensureConversation(root) {\n    if (this.get("SELECT id FROM conversation_totals WHERE id=?", root)) return;\n    const baseline = this.conversation(root);\n    this.run("INSERT INTO conversation_totals VALUES (?,?,?)", root, JSON.stringify(baseline.totals), Number(baseline.partialHistory));\n  }\n  contribute(key, delta, root) {\n    if (this.get("SELECT id FROM contributions WHERE id=?", key)) return;\n    const meta = this.get(`SELECT CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals,revision FROM meta WHERE id=1`);\n    const totals = add(this.parseTotals(meta.totals), delta);\n    const conversation = add(this.conversation(root).totals, delta);\n    if (!count2(meta.revision + 1)) throw new HistoryInvalid("History revision overflow");\n    this.run("INSERT INTO contributions VALUES (?)", key);\n    if (JSON.stringify(totals) !== meta.totals) this.run("UPDATE meta SET totals=?,revision=revision+1 WHERE id=1", JSON.stringify(totals));\n    this.run("UPDATE conversation_totals SET totals=? WHERE id=?", JSON.stringify(conversation), root);\n  }\n  event(e) {\n    const c = e.context, root = rootID(c), session = sessionID(c);\n    this.ensureConversation(root);\n    if (e.type === "sessionDeleted") {\n      const owner = this.get("SELECT root FROM sessions WHERE id=?", session);\n      if (owner && owner.root !== c.root) throw new HistoryInvalid("Conflicting session ownership");\n      const isRoot = c.root === c.session;\n      this.run("INSERT OR IGNORE INTO tombstones VALUES (?)", isRoot ? root : session);\n      for (const table of ["history", "approvals", "reviews"])\n        this.run(`DELETE FROM ${table} WHERE ${isRoot ? "root" : "session"}=?`, isRoot ? root : session);\n      if (isRoot) this.run("DELETE FROM sessions WHERE scope=? AND root=?", c.scope, c.root);\n      else this.run("DELETE FROM sessions WHERE id=?", session);\n      this.revision(root);\n      return;\n    }\n    const context = e.context, review = reviewID(context), entry = entryID(context);\n    const deleted = this.get("SELECT id FROM tombstones WHERE id IN (?,?) LIMIT 1", root, session);\n    if (!deleted) {\n      const existingSession = this.get("SELECT root FROM sessions WHERE id=?", session);\n      if (existingSession && existingSession.root !== c.root) throw new HistoryInvalid("Conflicting session ownership");\n      this.run("INSERT OR IGNORE INTO sessions VALUES (?,?,?,?)", session, c.scope, c.root, c.session);\n      const existing = this.get("SELECT context FROM reviews WHERE id=?", review);\n      if (existing) {\n        const prior = JSON.parse(existing.context);\n        if (Object.keys(context).some((key) => prior[key] !== context[key])) throw new HistoryInvalid("Conflicting review identity");\n      }\n      const owner = this.get("SELECT root,session FROM history WHERE id=?", entry);\n      if (owner && (owner.root !== root || owner.session !== session)) throw new HistoryInvalid("Conflicting permission ownership");\n      const pendingOwner = this.get("SELECT root,session FROM reviews WHERE entry=? LIMIT 1", entry);\n      if (pendingOwner && (pendingOwner.root !== root || pendingOwner.session !== session)) throw new HistoryInvalid("Conflicting permission ownership");\n      this.run("INSERT OR IGNORE INTO reviews VALUES (?,?,?,?,?,NULL)", review, entry, root, session, JSON.stringify(context));\n    }\n    const delta = historyDelta(e);\n    if (e.type === "attemptDispatched" || e.type === "attemptFinalized") {\n      const attempt = opaque(review, e.attempt);\n      if (!deleted) {\n        this.run("INSERT OR IGNORE INTO attempts VALUES (?,?,NULL,NULL)", attempt, review);\n        if (e.type === "attemptDispatched") this.run("UPDATE attempts SET dispatched=COALESCE(dispatched,?) WHERE id=?", JSON.stringify({ at: e.at, retry: e.retry }), attempt);\n        else this.run("UPDATE attempts SET finalized=COALESCE(finalized,?) WHERE id=?", JSON.stringify({ at: e.at, usage: e.usage, reportedModel: e.reportedModel }), attempt);\n      }\n      this.contribute(opaque(e.type, attempt), delta, root);\n    } else if (e.type === "reviewAccepted") {\n      if (!deleted) this.run("UPDATE reviews SET accepted=COALESCE(accepted,?) WHERE id=?", JSON.stringify(e.accepted), review);\n      this.contribute(opaque(e.type, review), delta, root);\n    } else if (e.type === "approvalConfirmed" || e.type === "approvalDispatched" || e.type === "approvalSettled") {\n      const id = opaque(entry, e.approval);\n      if (!deleted) {\n        const old = this.get("SELECT * FROM approvals WHERE id=?", id);\n        if (old && (old.review !== review || "automatic" in e && old.automatic !== -1 && old.automatic !== Number(e.automatic)))\n          throw new HistoryInvalid("Conflicting approval identity");\n        const state = e.type === "approvalConfirmed" ? "confirmed" : e.type === "approvalSettled" ? e.result : "pending";\n        if (!old || old.state !== "confirmed" && e.type !== "approvalDispatched") {\n          this.run(\n            "INSERT INTO approvals VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET state=excluded.state,automatic=excluded.automatic,at=excluded.at",\n            id,\n            entry,\n            root,\n            session,\n            review,\n            state,\n            "automatic" in e ? Number(e.automatic) : old?.automatic ?? -1,\n            e.at\n          );\n        } else if (old.automatic === -1 && "automatic" in e)\n          this.run("UPDATE approvals SET automatic=? WHERE id=?", Number(e.automatic), id);\n        this.outcome(entry);\n        this.revision(root);\n      }\n      if (e.type === "approvalConfirmed") {\n        this.contribute(opaque("approvalConfirmed", id), delta, root);\n      }\n    } else if ((e.type === "permissionResolved" || e.type === "permissionOutcome") && !deleted) {\n      const old = this.get("SELECT * FROM history WHERE id=?", entry);\n      if (e.type === "permissionOutcome" && !old) return;\n      const replace = e.type === "permissionResolved" && (!old || e.payload.completedAt > old.completed || e.payload.completedAt === old.completed && Buffer.compare(Buffer.from(context.review), Buffer.from(old.tie)) >= 0);\n      const prior = old?.resolution;\n      const resolution = !prior || prior === "cancelled" ? e.outcome : e.outcome === "cancelled" ? prior : prior === "conflict" || prior === "rejected" !== (e.outcome === "rejected") ? "conflict" : prior === "auto" || e.outcome === "auto" ? "auto" : e.outcome;\n      if (replace) {\n        this.run(\n          `INSERT INTO history VALUES (?,?,?,?,?,?,?,?,NULL,?,NULL,?) ON CONFLICT(id) DO UPDATE SET\n          completed=excluded.completed,tie=excluded.tie,review=excluded.review,resolution=excluded.resolution,resolvedAt=excluded.resolvedAt`,\n          entry,\n          c.scope,\n          root,\n          session,\n          context.permission,\n          e.payload.completedAt,\n          context.review,\n          review,\n          resolution,\n          e.at\n        );\n        this.run("INSERT INTO payloads VALUES (?,?) ON CONFLICT(id) DO UPDATE SET body=excluded.body", entry, JSON.stringify(e.payload));\n      } else this.run("UPDATE history SET resolution=? WHERE id=?", resolution, entry);\n      this.outcome(entry);\n      this.revision(root);\n    }\n  }\n  outcome(entry) {\n    const row = this.get("SELECT resolution FROM history WHERE id=?", entry);\n    if (!row) return;\n    const auto = this.get("SELECT review FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=1 ORDER BY id LIMIT 1", entry);\n    const manual = this.get("SELECT review FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=0 ORDER BY id LIMIT 1", entry);\n    const uncertain = this.get("SELECT id FROM approvals WHERE entry=? AND state IN (\'pending\',\'uncertain\') LIMIT 1", entry);\n    const outcome = row.resolution === "conflict" || row.resolution === "rejected" && (auto || manual) ? null : row.resolution === "rejected" ? "rejected" : auto ? "auto" : manual ? "manual" : uncertain ? null : row.resolution;\n    this.run("UPDATE history SET outcome=?,approving=? WHERE id=?", outcome, auto?.review ?? manual?.review ?? null, entry);\n  }\n  query(q) {\n    validateQuery(q);\n    return this.transaction(() => {\n      if (q.type === "totals") {\n        const row = this.get(`SELECT revision,CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals FROM meta WHERE id=1`);\n        if (!count2(row.revision)) throw new HistoryInvalid("Invalid aggregate revision");\n        return {\n          revision: row.revision,\n          totals: this.parseTotals(row.totals),\n          ...q.conversation ? { conversation: this.conversation(rootID(q.conversation)) } : {}\n        };\n      }\n      if (q.type === "conversationTotals") {\n        const revision2 = this.get("SELECT revision FROM meta WHERE id=1").revision;\n        if (!count2(revision2)) throw new HistoryInvalid("Invalid aggregate revision");\n        return { revision: revision2, ...this.conversation(rootID(q)) };\n      }\n      if (q.type === "sessions") {\n        const rows = this.all(`SELECT CASE WHEN length(id)=64 THEN id END AS id,scope,\n          CASE WHEN length(CAST(root AS BLOB))<=${HISTORY_TEXT_BYTES} THEN root END AS root,\n          CASE WHEN length(CAST(session AS BLOB))<=${HISTORY_TEXT_BYTES} THEN session END AS session\n          FROM sessions WHERE scope=? AND id>? ORDER BY id LIMIT ?`, q.scope, q.after ?? "", q.limit ?? 100);\n        return { sessions: rows.map((row) => {\n          validateScope(row);\n          if (row.id !== sessionID(row) || row.scope !== q.scope) throw new HistoryInvalid("Invalid session index");\n          return { scope: row.scope, root: row.root, session: row.session };\n        }), after: rows.at(-1)?.id };\n      }\n      if (q.type === "session") {\n        const row = this.get(`SELECT CASE WHEN length(CAST(scope AS BLOB))<=${HISTORY_TEXT_BYTES} THEN scope END AS scope,\n          CASE WHEN length(CAST(session AS BLOB))<=${HISTORY_TEXT_BYTES} THEN session END AS session,\n          CASE WHEN length(CAST(root AS BLOB))<=${HISTORY_TEXT_BYTES} THEN root END AS root\n          FROM sessions WHERE id=?`, opaque(q.scope, q.session));\n        if (!row) return {};\n        validateScope(row);\n        if (row.scope !== q.scope || row.session !== q.session) throw new HistoryInvalid("Invalid session ownership");\n        return { context: { scope: row.scope, root: row.root, session: row.session } };\n      }\n      if (q.type === "resolution") {\n        const entry = opaque(q.scope, q.permission), root2 = rootID(q), session = sessionID(q);\n        const deleted = !!this.get("SELECT id FROM tombstones WHERE id IN (?,?) LIMIT 1", root2, session);\n        const invalid2 = this.get(`SELECT 1 AS invalid FROM approvals WHERE entry=? AND\n          (root!=? OR session!=? OR state NOT IN (\'pending\',\'confirmed\',\'uncertain\',\'not-sent\') OR automatic NOT IN (-1,0,1)\n          OR (state=\'confirmed\' AND automatic=-1)) LIMIT 1`, entry, root2, session);\n        const invalidReview = this.get("SELECT 1 AS invalid FROM reviews WHERE entry=? AND (root!=? OR session!=?) LIMIT 1", entry, root2, session);\n        const history = this.get(`SELECT CASE WHEN length(root)=64 THEN root END AS root,\n          CASE WHEN length(session)=64 THEN session END AS session,\n          CASE WHEN length(CAST(resolution AS BLOB))<=16 THEN resolution END AS resolution FROM history WHERE id=?`, entry);\n        if (invalid2 || invalidReview || history && (history.root !== root2 || history.session !== session || !["auto", "manual", "rejected", "cancelled", "conflict"].includes(history.resolution))) throw new HistoryInvalid("Invalid resolution ownership");\n        const auto = !!this.get("SELECT id FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=1 LIMIT 1", entry);\n        const manual = !!this.get("SELECT id FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=0 LIMIT 1", entry);\n        const uncertain = !!this.get("SELECT id FROM approvals WHERE entry=? AND state IN (\'pending\',\'uncertain\') LIMIT 1", entry);\n        const conflict = history?.resolution === "conflict" || history?.resolution === "rejected" && (auto || manual);\n        const outcome = deleted || conflict ? void 0 : auto ? "auto" : manual ? "manual" : history?.resolution === "rejected" ? "rejected" : history?.resolution === "manual" && !uncertain ? "manual" : void 0;\n        return { outcome, uncertain, conflict, deleted };\n      }\n      const root = rootID(q), revision = this.get("SELECT revision FROM roots WHERE id=?", root)?.revision ?? 0;\n      if (this.get("SELECT id FROM tombstones WHERE id=?", root)) return { revision, total: 0, rank: 0, deleted: true };\n      const base = "scope=? AND root=? AND outcome IS NOT NULL";\n      const invalid = this.get(`SELECT id FROM history WHERE scope=? AND root=? AND\n        (typeof(completed)!=\'integer\' OR completed<0 OR completed>8640000000000000 OR length(id)!=64 OR length(session)!=64\n        OR length(review)!=64 OR typeof(permission)!=\'text\' OR length(CAST(permission AS BLOB))>${HISTORY_TEXT_BYTES}\n        OR typeof(tie)!=\'text\' OR length(tie)=0 OR length(CAST(tie AS BLOB))>${HISTORY_TEXT_BYTES}\n        OR length(CAST(resolution AS BLOB))>16 OR length(approving)>64\n        OR outcome NOT IN (\'auto\',\'manual\',\'rejected\',\'cancelled\')) LIMIT 1`, q.scope, root);\n      const invalidOwner = this.get(`SELECT h.id FROM history h LEFT JOIN reviews r ON r.id=h.review\n        LEFT JOIN sessions s ON s.id=h.session WHERE h.scope=? AND h.root=? AND\n        (r.id IS NULL OR r.entry!=h.id OR r.root!=h.root OR r.session!=h.session OR s.id IS NULL OR s.scope!=h.scope OR s.root!=?) LIMIT 1`, q.scope, root, q.root);\n      if (invalid || invalidOwner || !count2(revision)) throw new HistoryInvalid("Invalid history index");\n      const total = this.get(`SELECT count(*) AS n FROM history WHERE ${base}`, q.scope, root).n;\n      if (!count2(total)) throw new HistoryInvalid("History count overflow");\n      let selected = q.entry ? this.get(`SELECT * FROM history WHERE ${base} AND id=?`, q.scope, root, q.entry) : this.get(`SELECT * FROM history WHERE ${base} ORDER BY completed DESC,tie DESC,id DESC LIMIT 1`, q.scope, root);\n      const adjacent = (row, newer) => this.get(`SELECT * FROM history WHERE ${base} AND (completed,tie,id) ${newer ? ">" : "<"} (?,?,?)\n        ORDER BY completed ${newer ? "ASC" : "DESC"},tie ${newer ? "ASC" : "DESC"},id ${newer ? "ASC" : "DESC"} LIMIT 1`, q.scope, root, row.completed, row.tie, row.id);\n      if (selected && q.direction) selected = adjacent(selected, q.direction === "newer") ?? selected;\n      if (!selected && q.order) selected = adjacent(q.order, true) ?? adjacent(q.order, false);\n      if (!selected) return { revision, total, rank: 0 };\n      const s = selected;\n      if (s.id !== opaque(q.scope, s.permission) || s.review !== opaque(q.scope, s.tie)) throw new HistoryInvalid("Invalid history ownership");\n      const rank = this.get(`SELECT count(*) AS n FROM history WHERE ${base} AND (completed,tie,id)<=(?,?,?)`, q.scope, root, s.completed, s.tie, s.id).n;\n      if (!count2(rank) || rank < 1 || rank > total) throw new HistoryInvalid("Invalid history rank");\n      const result = { revision, total, rank, entry: s.id, order: { completed: s.completed, tie: s.tie, id: s.id }, older: adjacent(s, false)?.id, newer: adjacent(s, true)?.id };\n      const contextRow = this.get(`SELECT CASE WHEN length(CAST(context AS BLOB))<=${HISTORY_RECORD_BYTES.context} THEN context END AS context FROM reviews WHERE id=? AND root=? AND session=?`, s.review, root, s.session);\n      if (typeof contextRow?.context !== "string") throw new HistoryInvalid("Invalid history ownership");\n      const context = JSON.parse(contextRow.context);\n      validateReview(context);\n      if (rootID(context) !== root || sessionID(context) !== s.session || entryID(context) !== s.id || reviewID(context) !== s.review) throw new HistoryInvalid("Invalid history ownership");\n      result.session = context.session;\n      try {\n        const body = this.get(`SELECT CASE WHEN length(CAST(body AS BLOB))<=${HISTORY_RECORD_BYTES.payload} THEN body END AS body FROM payloads WHERE id=?`, s.id)?.body;\n        if (typeof body !== "string" || Buffer.byteLength(body) > HISTORY_RECORD_BYTES.payload) throw new Error();\n        const payload = validatePayload(JSON.parse(body));\n        if (payload.completedAt !== s.completed) throw new Error();\n        result.record = { context, payload, outcome: s.outcome, approvingReview: s.approving ?? void 0 };\n      } catch {\n        result.unreadable = true;\n      }\n      return result;\n    }, false);\n  }\n  close() {\n    this.db.close();\n  }\n};\n\n// src/history-storage-worker.ts\nfunction privateDatabase(file) {\n  if (!import_node_path2.default.isAbsolute(file) || import_node_path2.default.basename(file) !== "history-v1.sqlite") throw new HistoryInvalid("Invalid history path");\n  const directory = import_node_path2.default.dirname(file);\n  let prefix = directory;\n  for (; ; ) {\n    try {\n      if ((0, import_node_fs.realpathSync)(prefix) !== prefix || !(0, import_node_fs.lstatSync)(prefix).isDirectory()) throw new HistoryInvalid("Invalid history directory path");\n      break;\n    } catch (error) {\n      if (error.code !== "ENOENT") throw error;\n      prefix = import_node_path2.default.dirname(prefix);\n    }\n  }\n  (0, import_node_fs.mkdirSync)(directory, { mode: 448, recursive: true });\n  const stat = (0, import_node_fs.lstatSync)(directory);\n  if (!stat.isDirectory() || stat.isSymbolicLink() || (0, import_node_fs.realpathSync)(directory) !== directory || stat.mode & 63 || stat.uid !== process.getuid?.()) throw new HistoryInvalid("History directory must be private");\n  for (const suffix of ["", "-wal", "-shm", "-journal"]) {\n    const name = file + suffix;\n    let fd;\n    try {\n      fd = (0, import_node_fs.openSync)(name, import_node_fs.constants.O_RDWR | import_node_fs.constants.O_NOFOLLOW | import_node_fs.constants.O_NONBLOCK);\n    } catch (error) {\n      if (error.code !== "ENOENT") throw error;\n      if (suffix) continue;\n      try {\n        fd = (0, import_node_fs.openSync)(name, import_node_fs.constants.O_RDWR | import_node_fs.constants.O_CREAT | import_node_fs.constants.O_EXCL | import_node_fs.constants.O_NOFOLLOW, 384);\n      } catch (error2) {\n        if (error2.code !== "EEXIST") throw error2;\n        fd = (0, import_node_fs.openSync)(name, import_node_fs.constants.O_RDWR | import_node_fs.constants.O_NOFOLLOW | import_node_fs.constants.O_NONBLOCK);\n      }\n    }\n    try {\n      const stat2 = (0, import_node_fs.fstatSync)(fd);\n      if (!stat2.isFile() || stat2.nlink !== 1 || stat2.uid !== process.getuid?.() || stat2.mode & 63) throw new HistoryInvalid("History file must be private");\n      (0, import_node_fs.fchmodSync)(fd, 384);\n    } finally {\n      (0, import_node_fs.closeSync)(fd);\n    }\n  }\n}\nfunction openHistoryDatabase(file, adapter) {\n  privateDatabase(file);\n  const db = adapter === "bun" ? new (require("bun:sqlite")).Database(file) : new (require("node:sqlite")).DatabaseSync(file);\n  try {\n    return new HistorySQL(db);\n  } catch (error) {\n    db.close();\n    throw error;\n  }\n}\nif (import_node_worker_threads.parentPort) {\n  let sql;\n  import_node_worker_threads.parentPort.on("message", (message) => {\n    try {\n      let value;\n      if (message.type === "open") {\n        if (sql) throw new HistoryInvalid("History worker already open");\n        sql = openHistoryDatabase(message.file, message.adapter);\n        value = { environmentKeys: Object.keys(process.env).length };\n      } else if (message.type === "close") {\n        sql?.close();\n        sql = void 0;\n      } else {\n        if (!sql) throw new Error("History worker not open");\n        if (message.type === "apply") value = sql.apply(message.writer, message.sequence, message.event);\n        else if (message.type === "query") value = sql.query(message.query);\n        else throw new HistoryInvalid("Invalid history worker operation");\n      }\n      import_node_worker_threads.parentPort.postMessage({ id: message.id, value });\n    } catch (error) {\n      import_node_worker_threads.parentPort.postMessage({ id: message.id, error: error instanceof HistoryInvalid ? "invalid" : "storage" });\n    }\n  });\n}\n// Annotate the CommonJS export names for ESM import in node:\n0 && (module.exports = {\n  openHistoryDatabase,\n  privateDatabase\n});\n' : "";
+var historyWorkerSource = true ? '"use strict";\nvar __create = Object.create;\nvar __defProp = Object.defineProperty;\nvar __getOwnPropDesc = Object.getOwnPropertyDescriptor;\nvar __getOwnPropNames = Object.getOwnPropertyNames;\nvar __getProtoOf = Object.getPrototypeOf;\nvar __hasOwnProp = Object.prototype.hasOwnProperty;\nvar __export = (target, all) => {\n  for (var name in all)\n    __defProp(target, name, { get: all[name], enumerable: true });\n};\nvar __copyProps = (to, from, except, desc) => {\n  if (from && typeof from === "object" || typeof from === "function") {\n    for (let key of __getOwnPropNames(from))\n      if (!__hasOwnProp.call(to, key) && key !== except)\n        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });\n  }\n  return to;\n};\nvar __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(\n  // If the importer is in node compatibility mode or this is not an ESM\n  // file that has been converted to a CommonJS file using a Babel-\n  // compatible transform (i.e. "__esModule" has not been set), then set\n  // "default" to the CommonJS "module.exports" for node compatibility.\n  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,\n  mod\n));\nvar __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);\n\n// src/history-storage-worker.ts\nvar history_storage_worker_exports = {};\n__export(history_storage_worker_exports, {\n  openHistoryDatabase: () => openHistoryDatabase,\n  privateDatabase: () => privateDatabase\n});\nmodule.exports = __toCommonJS(history_storage_worker_exports);\nvar import_node_worker_threads = require("node:worker_threads");\n\n// src/lifetime.ts\nvar emptyActivity = () => ({\n  reviews: 0,\n  usageRequests: 0,\n  retries: 0,\n  autoApproved: 0,\n  timedReviews: 0,\n  meanFullReportMs: 0,\n  meanRatingMs: 0,\n  since: null\n});\nvar empty = () => ({\n  requests: 0,\n  tokenRequests: 0,\n  input: 0,\n  output: 0,\n  priced: 0,\n  cost: 0,\n  since: null,\n  safe: 0,\n  unsafe: 0,\n  ratingsSince: null,\n  activity: emptyActivity()\n});\nvar count = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;\nvar amount = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0;\nfunction validate(value) {\n  if (!value || ![value.requests, value.tokenRequests, value.input, value.output, value.priced, value.safe, value.unsafe, value.safe + value.unsafe].every(count) || !amount(value.cost) || value.priced > value.requests || value.tokenRequests > value.requests || value.requests > value.tokenRequests + value.priced || !value.tokenRequests && (value.input !== 0 || value.output !== 0) || (value.requests > 0 ? !count(value.since) || value.since > 864e13 : value.since !== null || value.input !== 0 || value.output !== 0) || !value.priced && value.cost !== 0 || (value.safe + value.unsafe > 0 ? !count(value.ratingsSince) || value.ratingsSince > 864e13 : value.ratingsSince !== null)) {\n    throw new Error("Invalid lifetime usage totals");\n  }\n  const activity = value.activity;\n  if (!activity || ![activity.reviews, activity.usageRequests, activity.retries, activity.autoApproved, activity.timedReviews].every(count) || activity.reviews > value.safe + value.unsafe || activity.usageRequests > value.requests || activity.timedReviews > activity.reviews || ![activity.meanFullReportMs, activity.meanRatingMs].every(amount) || activity.meanRatingMs > activity.meanFullReportMs || !activity.timedReviews && (activity.meanFullReportMs !== 0 || activity.meanRatingMs !== 0) || (activity.reviews || activity.usageRequests || activity.retries || activity.autoApproved ? !count(activity.since) || activity.since > 864e13 : activity.since !== null)) throw new Error("Invalid lifetime activity totals");\n  return value;\n}\nfunction mean(left, leftCount, right, rightCount) {\n  if (!leftCount) return right;\n  if (!rightCount) return left;\n  return left + (right - left) * (rightCount / (leftCount + rightCount));\n}\nfunction add(left, right) {\n  return validate({\n    requests: left.requests + right.requests,\n    input: left.input + right.input,\n    output: left.output + right.output,\n    tokenRequests: left.tokenRequests + right.tokenRequests,\n    priced: left.priced + right.priced,\n    cost: left.cost + right.cost,\n    since: left.since === null ? right.since : right.since === null ? left.since : Math.min(left.since, right.since),\n    safe: left.safe + right.safe,\n    unsafe: left.unsafe + right.unsafe,\n    ratingsSince: left.ratingsSince === null ? right.ratingsSince : right.ratingsSince === null ? left.ratingsSince : Math.min(left.ratingsSince, right.ratingsSince),\n    activity: {\n      reviews: left.activity.reviews + right.activity.reviews,\n      usageRequests: left.activity.usageRequests + right.activity.usageRequests,\n      retries: left.activity.retries + right.activity.retries,\n      autoApproved: left.activity.autoApproved + right.activity.autoApproved,\n      timedReviews: left.activity.timedReviews + right.activity.timedReviews,\n      meanFullReportMs: mean(left.activity.meanFullReportMs, left.activity.timedReviews, right.activity.meanFullReportMs, right.activity.timedReviews),\n      meanRatingMs: mean(left.activity.meanRatingMs, left.activity.timedReviews, right.activity.meanRatingMs, right.activity.timedReviews),\n      since: left.activity.since === null ? right.activity.since : right.activity.since === null ? left.activity.since : Math.min(left.activity.since, right.activity.since)\n    }\n  });\n}\n\n// src/history-records.ts\nvar import_node_crypto = require("node:crypto");\nvar import_node_path = __toESM(require("node:path"), 1);\nvar HISTORY_EVENT_BYTES = 512 * 1024;\nvar HISTORY_QUEUE_BYTES = 64 * 1024 * 1024;\nvar HISTORY_TEXT_BYTES = 4096;\nvar HISTORY_DESCRIPTION_BYTES = 65536;\nvar stringBytes = (bytes) => 2 + 6 * bytes;\nvar objectBytes = (fields) => 2 + Object.entries(fields).reduce((sum, [key, bytes]) => sum + JSON.stringify(key).length + 1 + bytes + 1, 0);\nvar numberBytes = 24;\nvar textBytes = stringBytes(HISTORY_TEXT_BYTES);\nvar usageBytes = objectBytes({ input: numberBytes, output: numberBytes, cost: numberBytes });\nvar acceptedFields = {\n  safe: 5,\n  completedAt: numberBytes,\n  reportedModel: textBytes,\n  timing: objectBytes({ fullReportMs: numberBytes, ratingMs: numberBytes })\n};\nvar HISTORY_RECORD_BYTES = {\n  context: objectBytes({\n    scope: textBytes,\n    root: textBytes,\n    session: textBytes,\n    permission: textBytes,\n    review: textBytes,\n    category: JSON.stringify("external_directory").length,\n    configuredModel: textBytes,\n    provider: textBytes\n  }),\n  accepted: objectBytes(acceptedFields),\n  dispatched: objectBytes({ at: numberBytes, retry: JSON.stringify("transport").length }),\n  finalized: objectBytes({ at: numberBytes, usage: usageBytes, reportedModel: textBytes }),\n  payload: objectBytes({ ...acceptedFields, desc: stringBytes(HISTORY_DESCRIPTION_BYTES), usage: usageBytes }),\n  totals: objectBytes({\n    requests: numberBytes,\n    tokenRequests: numberBytes,\n    input: numberBytes,\n    output: numberBytes,\n    priced: numberBytes,\n    cost: numberBytes,\n    since: numberBytes,\n    safe: numberBytes,\n    unsafe: numberBytes,\n    ratingsSince: numberBytes,\n    activity: objectBytes({\n      reviews: numberBytes,\n      usageRequests: numberBytes,\n      retries: numberBytes,\n      autoApproved: numberBytes,\n      timedReviews: numberBytes,\n      meanFullReportMs: numberBytes,\n      meanRatingMs: numberBytes,\n      since: numberBytes\n    })\n  })\n};\nvar HistoryInvalid = class extends Error {\n};\nvar opaque = (...parts) => (0, import_node_crypto.createHash)("sha256").update(JSON.stringify(parts)).digest("hex");\nvar entryID = (c) => opaque(c.scope, c.permission);\nvar rootID = (c) => opaque(c.scope, c.root);\nvar sessionID = (c) => opaque(c.scope, c.session);\nvar reviewID = (c) => opaque(c.scope, c.review);\nvar count2 = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0;\nvar amount2 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0;\nfunction requireValue(ok) {\n  if (!ok) throw new HistoryInvalid("Invalid history record");\n}\nfunction object(v, keys) {\n  requireValue(v && typeof v === "object" && !Array.isArray(v));\n  requireValue(Object.getPrototypeOf(v) === Object.prototype || Object.getPrototypeOf(v) === null);\n  requireValue(Reflect.ownKeys(v).every((k) => {\n    const descriptor = Object.getOwnPropertyDescriptor(v, k);\n    return typeof k === "string" && keys.includes(k) && descriptor.enumerable && "value" in descriptor;\n  }));\n}\nfunction text(v, max = HISTORY_TEXT_BYTES) {\n  requireValue(typeof v === "string" && v.trim().length > 0 && Buffer.byteLength(v) <= max && !v.includes("\\0"));\n}\nfunction timestamp(v) {\n  requireValue(count2(v) && v <= 864e13);\n}\nfunction validateScope(c) {\n  text(c.scope);\n  requireValue(import_node_path.default.isAbsolute(c.scope));\n  text(c.root);\n  text(c.session);\n}\nfunction validateReview(c) {\n  object(c, ["scope", "root", "session", "permission", "review", "category", "configuredModel", "provider"]);\n  validateScope(c);\n  text(c.permission);\n  text(c.review);\n  text(c.configuredModel);\n  text(c.provider);\n  requireValue(["bash", "edit", "mcp", "custom", "external_directory", "skill"].includes(c.category));\n  const url = new URL(c.provider);\n  requireValue(["http:", "https:"].includes(url.protocol) && !url.username && !url.password && !url.search && !url.hash && url.href.replace(/\\/+$/, "") === c.provider);\n}\nfunction usage(v) {\n  object(v, ["input", "output", "cost"]);\n  requireValue(v.input === void 0 && v.output === void 0 || count2(v.input) && count2(v.output));\n  requireValue(v.cost === void 0 || amount2(v.cost));\n  requireValue(v.input !== void 0 || v.cost !== void 0);\n}\nfunction accepted(v, payload = false) {\n  object(v, ["safe", "completedAt", "reportedModel", "timing", ...payload ? ["desc", "usage"] : []]);\n  requireValue(typeof v.safe === "boolean");\n  timestamp(v.completedAt);\n  if (v.reportedModel !== void 0) text(v.reportedModel);\n  if (v.timing !== void 0) {\n    object(v.timing, ["fullReportMs", "ratingMs"]);\n    requireValue(amount2(v.timing.fullReportMs) && amount2(v.timing.ratingMs) && v.timing.ratingMs <= v.timing.fullReportMs);\n  }\n}\nfunction validatePayload(v) {\n  accepted(v, true);\n  requireValue(typeof v.desc === "string" && v.desc.trim().length > 0 && Buffer.byteLength(v.desc) <= HISTORY_DESCRIPTION_BYTES);\n  if (v.usage !== void 0) usage(v.usage);\n  return v;\n}\nfunction validateEvent(e) {\n  const extra = {\n    attemptDispatched: ["attempt", "retry"],\n    attemptFinalized: ["attempt", "usage", "reportedModel"],\n    reviewAccepted: ["accepted"],\n    approvalDispatched: ["approval", "automatic"],\n    approvalSettled: ["approval", "result"],\n    approvalConfirmed: ["approval", "automatic"],\n    permissionResolved: ["outcome", "payload"],\n    permissionOutcome: ["outcome"],\n    sessionDeleted: []\n  };\n  requireValue(e && Object.hasOwn(extra, e.type));\n  object(e, ["type", "context", "at", ...extra[e.type]]);\n  timestamp(e.at);\n  if (e.type === "sessionDeleted") {\n    object(e.context, ["scope", "root", "session"]);\n    validateScope(e.context);\n    return e;\n  }\n  validateReview(e.context);\n  switch (e.type) {\n    case "attemptDispatched":\n      text(e.attempt);\n      requireValue(["initial", "transport", "format"].includes(e.retry));\n      break;\n    case "attemptFinalized":\n      text(e.attempt);\n      if (e.usage !== void 0) usage(e.usage);\n      if (e.reportedModel !== void 0) text(e.reportedModel);\n      break;\n    case "reviewAccepted":\n      accepted(e.accepted);\n      break;\n    case "approvalDispatched":\n    case "approvalConfirmed":\n      text(e.approval);\n      requireValue(typeof e.automatic === "boolean");\n      break;\n    case "approvalSettled":\n      text(e.approval);\n      requireValue(["not-sent", "uncertain"].includes(e.result));\n      break;\n    case "permissionResolved":\n      requireValue(["auto", "manual", "rejected", "cancelled"].includes(e.outcome));\n      validatePayload(e.payload);\n      break;\n    case "permissionOutcome":\n      requireValue(["manual", "rejected"].includes(e.outcome));\n      break;\n  }\n  return e;\n}\nfunction decodeEvent(text2) {\n  requireValue(typeof text2 === "string" && Buffer.byteLength(text2) <= HISTORY_EVENT_BYTES);\n  try {\n    return validateEvent(JSON.parse(text2));\n  } catch {\n    throw new HistoryInvalid("Invalid history event");\n  }\n}\nfunction validateQuery(q) {\n  requireValue(q && ["totals", "conversationTotals", "history", "sessions", "resolution", "session"].includes(q.type));\n  if (q.type === "totals") {\n    object(q, ["type", "conversation"]);\n    if (q.conversation !== void 0) {\n      object(q.conversation, ["scope", "root"]);\n      text(q.conversation.scope);\n      text(q.conversation.root);\n      requireValue(import_node_path.default.isAbsolute(q.conversation.scope));\n    }\n    return;\n  }\n  text(q.scope);\n  requireValue(import_node_path.default.isAbsolute(q.scope));\n  if (q.type === "conversationTotals") {\n    object(q, ["type", "scope", "root"]);\n    text(q.root);\n    return;\n  }\n  if (q.type === "session") {\n    object(q, ["type", "scope", "session"]);\n    text(q.session);\n    return;\n  }\n  if (q.type === "resolution") {\n    object(q, ["type", "scope", "root", "session", "permission"]);\n    validateScope(q);\n    text(q.permission);\n    return;\n  }\n  if (q.type === "sessions") {\n    object(q, ["type", "scope", "after", "limit"]);\n    if (q.after !== void 0) text(q.after);\n    requireValue(q.limit === void 0 || count2(q.limit) && q.limit > 0 && q.limit <= 100);\n  } else {\n    object(q, ["type", "scope", "root", "entry", "direction", "order"]);\n    text(q.root);\n    if (q.order !== void 0) {\n      object(q.order, ["completed", "tie", "id"]);\n      timestamp(q.order.completed);\n      text(q.order.tie);\n      requireValue(q.entry && q.order.id === q.entry && /^[a-f0-9]{64}$/.test(q.order.id));\n    }\n    if (q.entry !== void 0) requireValue(/^[a-f0-9]{64}$/.test(q.entry));\n    requireValue(q.direction === void 0 || q.entry && ["older", "newer"].includes(q.direction));\n  }\n}\n\n// src/history-statistics.ts\nfunction historyDelta(e) {\n  const delta = empty(), activity = delta.activity;\n  if (e.type === "attemptDispatched" && e.retry !== "initial") {\n    activity.retries = 1;\n    activity.since = e.at;\n  } else if (e.type === "attemptFinalized" && e.usage) {\n    delta.requests = activity.usageRequests = 1;\n    delta.since = activity.since = e.at;\n    if (e.usage.input !== void 0) {\n      delta.tokenRequests = 1;\n      delta.input = e.usage.input;\n      delta.output = e.usage.output;\n    }\n    if (e.usage.cost !== void 0) {\n      delta.priced = 1;\n      delta.cost = e.usage.cost;\n    }\n  } else if (e.type === "reviewAccepted") {\n    delta.safe = e.accepted.safe ? 1 : 0;\n    delta.unsafe = e.accepted.safe ? 0 : 1;\n    delta.ratingsSince = e.accepted.completedAt;\n    activity.reviews = 1;\n    activity.since = e.accepted.completedAt;\n    if (e.accepted.timing) {\n      activity.timedReviews = 1;\n      activity.meanFullReportMs = e.accepted.timing.fullReportMs;\n      activity.meanRatingMs = e.accepted.timing.ratingMs;\n    }\n  } else if (e.type === "approvalConfirmed" && e.automatic) {\n    activity.autoApproved = 1;\n    activity.since = e.at;\n  }\n  return delta;\n}\n\n// src/history-migration.ts\nvar HISTORY_BOOTSTRAP_STEPS = 128;\nvar HISTORY_BOOTSTRAP_MS = 40;\nvar migrationSchema = `CREATE TABLE IF NOT EXISTS conversation_bootstrap (\n  id TEXT PRIMARY KEY, review TEXT NOT NULL, phase INTEGER NOT NULL, after TEXT NOT NULL,\n  totals TEXT NOT NULL, partial INTEGER NOT NULL CHECK(partial IN (0,1)));`;\nfunction bootstrap(db, root) {\n  if (!/^[a-f0-9]{64}$/.test(root)) throw new HistoryInvalid("Invalid bootstrap root");\n  const get = (sql, ...args) => db.prepare(sql).get(...args);\n  const run = (sql, ...args) => db.prepare(sql).run(...args);\n  if (get("SELECT id FROM conversation_totals WHERE id=?", root)) return { done: true, steps: 0 };\n  const saved = get(`SELECT review,phase,after,partial,CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals\n    FROM conversation_bootstrap WHERE id=?`, root);\n  let review = saved?.review ?? "", phase = saved?.phase ?? 0, after = saved?.after ?? "";\n  let totals = saved ? validate(JSON.parse(saved.totals)) : empty();\n  let partial = saved?.partial ?? Number(!!get("SELECT id FROM roots WHERE id=?", root));\n  if (![0, 1, 2].includes(phase) || ![0, 1].includes(partial) || !/^(?:[a-f0-9]{64})?$/.test(review) || !/^(?:[a-f0-9]{64})?$/.test(after)) throw new HistoryInvalid("Invalid bootstrap cursor");\n  const include = (event) => {\n    validateEvent(event);\n    totals = add(totals, historyDelta(event));\n  };\n  const end = performance.now() + HISTORY_BOOTSTRAP_MS;\n  let steps = 0, done = false;\n  do {\n    steps++;\n    if (phase === 0) {\n      const row2 = get(`SELECT id,CASE WHEN length(CAST(context AS BLOB))<=${HISTORY_RECORD_BYTES.context} THEN context END AS context,\n        CASE WHEN length(CAST(accepted AS BLOB))<=${HISTORY_RECORD_BYTES.accepted} THEN accepted END AS accepted,accepted IS NOT NULL AS hasAccepted\n        FROM reviews WHERE root=? AND id>? ORDER BY id LIMIT 1`, root, review);\n      if (!row2) {\n        done = true;\n        break;\n      }\n      const context2 = JSON.parse(row2.context);\n      validateReview(context2);\n      if (rootID(context2) !== root || reviewID(context2) !== row2.id) throw new HistoryInvalid("Invalid conversation ownership");\n      if (row2.hasAccepted) {\n        const accepted2 = JSON.parse(row2.accepted);\n        include({ type: "reviewAccepted", context: context2, at: accepted2?.completedAt, accepted: accepted2 });\n      }\n      partial = 1;\n      review = row2.id;\n      phase = 1;\n      after = "";\n      continue;\n    }\n    const row = get(`SELECT CASE WHEN length(CAST(context AS BLOB))<=${HISTORY_RECORD_BYTES.context} THEN context END AS context\n      FROM reviews WHERE id=? AND root=?`, review, root);\n    const context = JSON.parse(row?.context);\n    validateReview(context);\n    if (rootID(context) !== root || reviewID(context) !== review) throw new HistoryInvalid("Invalid conversation ownership");\n    if (phase === 1) {\n      const fact = get(`SELECT id,CASE WHEN length(CAST(dispatched AS BLOB))<=${HISTORY_RECORD_BYTES.dispatched} THEN dispatched END AS dispatched,\n        CASE WHEN length(CAST(finalized AS BLOB))<=${HISTORY_RECORD_BYTES.finalized} THEN finalized END AS finalized,\n        dispatched IS NOT NULL AS hasDispatched,finalized IS NOT NULL AS hasFinalized\n        FROM attempts WHERE review=? AND id>? ORDER BY id LIMIT 1`, review, after);\n      if (!fact) {\n        phase = 2;\n        after = "";\n        continue;\n      }\n      if (!/^[a-f0-9]{64}$/.test(fact.id)) throw new HistoryInvalid("Invalid conversation attempt");\n      if (fact.hasDispatched) include({ ...JSON.parse(fact.dispatched), type: "attemptDispatched", context, attempt: fact.id });\n      if (fact.hasFinalized) include({ ...JSON.parse(fact.finalized), type: "attemptFinalized", context, attempt: fact.id });\n      after = fact.id;\n    } else {\n      const fact = get("SELECT id,root,session,at,state,automatic FROM approvals WHERE review=? AND id>? ORDER BY id LIMIT 1", review, after);\n      if (!fact) {\n        phase = 0;\n        after = "";\n        continue;\n      }\n      if (!/^[a-f0-9]{64}$/.test(fact.id) || fact.root !== root || fact.session !== sessionID(context) || ![-1, 0, 1].includes(fact.automatic) || !["pending", "uncertain", "not-sent", "confirmed"].includes(fact.state)) throw new HistoryInvalid("Invalid conversation approval");\n      if (fact.state === "confirmed") {\n        if (fact.automatic === -1) throw new HistoryInvalid("Invalid conversation approval");\n        include({ type: "approvalConfirmed", context, at: fact.at, approval: fact.id, automatic: fact.automatic === 1 });\n      }\n      after = fact.id;\n    }\n  } while (steps < HISTORY_BOOTSTRAP_STEPS && performance.now() < end);\n  if (done) {\n    run("INSERT INTO conversation_totals VALUES (?,?,?)", root, JSON.stringify(totals), partial);\n    run("DELETE FROM conversation_bootstrap WHERE id=?", root);\n  } else run(\n    `INSERT INTO conversation_bootstrap VALUES (?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET\n    review=excluded.review,phase=excluded.phase,after=excluded.after,totals=excluded.totals,partial=excluded.partial`,\n    root,\n    review,\n    phase,\n    after,\n    JSON.stringify(totals),\n    partial\n  );\n  return { done, steps };\n}\n\n// src/history-browsing.ts\nvar browsingSchema = `\nCREATE TABLE IF NOT EXISTS history_generations (id TEXT PRIMARY KEY, generation INTEGER NOT NULL);\nCREATE INDEX IF NOT EXISTS history_session_visible_order ON history(scope,root,session,completed,tie,id) WHERE outcome IS NOT NULL;\n${["history", "reviews"].flatMap((table) => ["INSERT", "UPDATE", "DELETE"].map((operation) => {\n  const columns = table === "reviews" && operation === "UPDATE" ? " OF id,entry,root,session" : "";\n  const roots = operation === "INSERT" ? ["new"] : operation === "DELETE" ? ["old"] : ["old", "new"];\n  return `DROP TRIGGER IF EXISTS browse_${table}_${operation};\n    CREATE TRIGGER browse_${table}_${operation} AFTER ${operation}${columns} ON ${table} BEGIN\n    ${roots.map((row) => `INSERT INTO history_generations SELECT ${row}.root,1\n      WHERE NOT EXISTS (SELECT 1 FROM tombstones WHERE id IN (${row}.root,${row}.session))\n      ON CONFLICT(id) DO UPDATE SET generation=generation+1;`).join("\\n")}\n    END;`;\n})).join("\\n")}\n${["INSERT", "UPDATE", "DELETE"].map((operation) => {\n  const rows = operation === "INSERT" ? ["new"] : operation === "DELETE" ? ["old"] : ["old", "new"];\n  return `DROP TRIGGER IF EXISTS browse_sessions_${operation};\n    CREATE TRIGGER browse_sessions_${operation} AFTER ${operation} ON sessions BEGIN\n    ${rows.map((row) => `INSERT INTO history_generations SELECT DISTINCT root,1 FROM history WHERE session=${row}.id\n      AND NOT EXISTS (SELECT 1 FROM tombstones WHERE id IN (history.root,history.session))\n      ON CONFLICT(id) DO UPDATE SET generation=generation+1;`).join("\\n")}\n    END;`;\n}).join("\\n")}\n${["INSERT", "UPDATE", "DELETE"].map((operation) => {\n  const rows = operation === "INSERT" ? ["new"] : operation === "DELETE" ? ["old"] : ["old", "new"];\n  return `CREATE TRIGGER IF NOT EXISTS browse_tombstones_${operation} AFTER ${operation} ON tombstones BEGIN\n    ${rows.map((row) => `INSERT INTO history_generations VALUES (${row}.id,1)\n      ON CONFLICT(id) DO UPDATE SET generation=generation+1;\n      INSERT INTO history_generations SELECT root,1 FROM (SELECT root FROM history WHERE session=${row}.id LIMIT 1) WHERE 1\n      ON CONFLICT(id) DO UPDATE SET generation=generation+1;`).join("\\n")}\n    END;`;\n}).join("\\n")}`;\nvar HistoryBrowsing = class {\n  roots = /* @__PURE__ */ new Map();\n  get(root, generation) {\n    const saved = this.roots.get(root);\n    if (saved?.generation !== generation) {\n      this.roots.delete(root);\n      return void 0;\n    }\n    this.roots.delete(root);\n    this.roots.set(root, saved);\n    return saved;\n  }\n  save(root, generation, total) {\n    const saved = { generation, total, ranks: /* @__PURE__ */ new Map(), neighbors: /* @__PURE__ */ new Map() };\n    if (this.roots.size >= 32) this.roots.delete(this.roots.keys().next().value);\n    this.roots.set(root, saved);\n    return saved;\n  }\n  rank(index, entry, rank) {\n    if (index.ranks.size >= 128) index.ranks.delete(index.ranks.keys().next().value);\n    index.ranks.set(entry, rank);\n  }\n  neighbor(index, key, entry) {\n    if (index.neighbors.size >= 128) index.neighbors.delete(index.neighbors.keys().next().value);\n    index.neighbors.set(key, entry);\n  }\n};\n\n// src/history-legacy-scrub.ts\nvar HISTORY_SCRUB_STEPS = 8;\nvar HISTORY_SCRUB_BYTES = 64 * 1024;\nvar HISTORY_SCRUB_MS = 40;\nvar legacyScrubSchema = `\n  CREATE TABLE IF NOT EXISTS history_legacy_scrub (id INTEGER PRIMARY KEY CHECK(id=1), phase INTEGER NOT NULL CHECK(phase IN (0,1,2)));\n  CREATE TABLE IF NOT EXISTS history_legacy_padding (id INTEGER PRIMARY KEY, value BLOB NOT NULL);\n  INSERT OR IGNORE INTO history_legacy_scrub SELECT 1,0 FROM history_privacy WHERE id=1 AND legacy=1;`;\nfunction scrubLegacyFreelist(db) {\n  const state = db.prepare("SELECT phase FROM history_legacy_scrub WHERE id=1").get();\n  if (!state || state.phase === 2) return false;\n  if (state.phase !== 0 && state.phase !== 1) throw new HistoryInvalid("Invalid history scrub phase");\n  const free = db.prepare("PRAGMA freelist_count");\n  const reserve = db.prepare("INSERT INTO history_legacy_padding(value) VALUES (zeroblob(?))");\n  const first = db.prepare("SELECT id FROM history_legacy_padding ORDER BY id LIMIT 1");\n  const release = db.prepare("DELETE FROM history_legacy_padding WHERE id=?");\n  const phase = db.prepare("UPDATE history_legacy_scrub SET phase=? WHERE id=1");\n  const end = performance.now() + HISTORY_SCRUB_MS;\n  for (let step = 0; step < HISTORY_SCRUB_STEPS; step++) {\n    if (state.phase === 0) {\n      const before = free.get().freelist_count;\n      if (!Number.isSafeInteger(before) || before < 0) throw new HistoryInvalid("Invalid history freelist");\n      if (before === 0) {\n        phase.run(1);\n        break;\n      }\n      reserve.run(HISTORY_SCRUB_BYTES);\n      if (free.get().freelist_count >= before) throw new HistoryInvalid("History scrub made no progress");\n    } else {\n      const row = first.get();\n      if (!row) {\n        phase.run(2);\n        break;\n      }\n      release.run(row.id);\n    }\n    if (performance.now() >= end) break;\n  }\n  db.exec("UPDATE history_privacy SET generation=generation+1 WHERE id=1");\n  return true;\n}\n\n// src/history-legacy-rebuild.ts\nvar tables = [\n  "meta",\n  "writers",\n  "contributions",\n  "tombstones",\n  "roots",\n  "sessions",\n  "reviews",\n  "attempts",\n  "approvals",\n  "history",\n  "payloads",\n  "conversation_totals",\n  "conversation_bootstrap",\n  "history_generations",\n  "history_privacy",\n  "history_deletions"\n];\nvar shadow = "history_legacy_copy";\nvar retired = "history_legacy_retired";\nvar prefix = "history_rebuilt_";\nvar mirrors = ["history_legacy_insert", "history_legacy_update", "history_legacy_delete"];\nvar quote = (name) => `"${name.replaceAll(\'"\', \'""\')}"`;\nvar legacyRebuildSchema = `CREATE TABLE IF NOT EXISTS history_legacy_rebuild (\n  id INTEGER PRIMARY KEY CHECK(id=1), position INTEGER NOT NULL, phase INTEGER NOT NULL,\n  cursor INTEGER, ceiling INTEGER);\n  INSERT OR IGNORE INTO history_legacy_rebuild SELECT 1,0,0,NULL,NULL FROM history_privacy WHERE id=1 AND legacy=1;`;\nfunction historySchema(db, sql) {\n  db.exec(sql.replace(/CREATE INDEX IF NOT EXISTS (\\w+) ON (\\w+)\\([^;]+;/g, (statement, name, table) => db.prepare("SELECT 1 FROM sqlite_schema WHERE type=\'index\' AND name=? AND tbl_name=?").get(prefix + name, table) ? "" : statement));\n}\nfunction rebuildLegacyPages(db) {\n  const get = (sql, ...args) => db.prepare(sql).get(...args);\n  const state = get("SELECT position,phase,cursor,ceiling FROM history_legacy_rebuild WHERE id=1");\n  if (!state || state.position === tables.length) return false;\n  if (!Number.isInteger(state.position) || state.position < 0 || state.position >= tables.length || ![0, 1, 2].includes(state.phase))\n    throw new HistoryInvalid("Invalid history rebuild phase");\n  const table = tables[state.position], name = quote(table);\n  if (state.phase === 0) {\n    const definition = get("SELECT sql FROM sqlite_schema WHERE type=\'table\' AND name=?", table)?.sql;\n    if (typeof definition !== "string" || !/^CREATE TABLE (?:"\\w+"|\\w+)\\s*\\(/i.test(definition)) throw new HistoryInvalid("Invalid history rebuild table");\n    db.exec(definition.replace(/^CREATE TABLE (?:"\\w+"|\\w+)/i, `CREATE TABLE ${shadow}`));\n    for (const index of db.prepare("SELECT name,sql FROM sqlite_schema WHERE type=\'index\' AND tbl_name=? AND sql IS NOT NULL").all(table)) {\n      if (!/^CREATE (?:UNIQUE )?INDEX \\w+ ON (?:"\\w+"|\\w+)/i.test(index.sql)) throw new HistoryInvalid("Invalid history rebuild index");\n      db.exec(index.sql.replace(/^(CREATE (?:UNIQUE )?INDEX) \\w+ ON (?:"\\w+"|\\w+)/i, `$1 ${quote(prefix + index.name)} ON ${shadow}`));\n    }\n    const columns = db.prepare(`PRAGMA table_info(${name})`).all().map((row) => quote(row.name));\n    const insert = `INSERT INTO ${shadow}(rowid,${columns.join(",")}) VALUES (new.rowid,${columns.map((column) => `new.${column}`).join(",")});`;\n    db.exec(`CREATE TRIGGER ${mirrors[0]} AFTER INSERT ON ${name} BEGIN ${insert} END;\n      CREATE TRIGGER ${mirrors[1]} AFTER UPDATE ON ${name} BEGIN DELETE FROM ${shadow} WHERE rowid=old.rowid; ${insert} END;\n      CREATE TRIGGER ${mirrors[2]} AFTER DELETE ON ${name} BEGIN DELETE FROM ${shadow} WHERE rowid=old.rowid; END;`);\n    const ceiling = get(`SELECT rowid AS n FROM ${name} ORDER BY rowid DESC LIMIT 1`)?.n ?? null;\n    db.prepare("UPDATE history_legacy_rebuild SET phase=1,ceiling=? WHERE id=1").run(ceiling);\n  } else if (state.phase === 1) {\n    const end = performance.now() + HISTORY_SCRUB_MS;\n    const next = db.prepare(`SELECT rowid AS n FROM ${name} WHERE rowid<=? ${state.cursor === null ? "" : "AND rowid>?"} ORDER BY rowid LIMIT 1`);\n    const columns = db.prepare(`PRAGMA table_info(${name})`).all().map((row) => quote(row.name));\n    const copy = db.prepare(`INSERT INTO ${shadow}(rowid,${columns.join(",")}) SELECT rowid,* FROM ${name} WHERE rowid=? ON CONFLICT(rowid) DO NOTHING`);\n    let cursor = state.cursor;\n    for (let step = 0; step < HISTORY_SCRUB_STEPS; step++) {\n      const row = cursor === state.cursor ? next.get(state.ceiling, ...cursor === null ? [] : [cursor]) : get(`SELECT rowid AS n FROM ${name} WHERE rowid<=? AND rowid>? ORDER BY rowid LIMIT 1`, state.ceiling, cursor);\n      if (!row) {\n        for (const trigger of mirrors) db.exec(`DROP TRIGGER ${trigger}`);\n        const triggers = db.prepare("SELECT name,sql FROM sqlite_schema WHERE type=\'trigger\' AND tbl_name=?").all(table);\n        for (const trigger of triggers) db.exec(`DROP TRIGGER ${quote(trigger.name)}`);\n        db.exec(`ALTER TABLE ${name} RENAME TO ${retired}; ALTER TABLE ${shadow} RENAME TO ${name};`);\n        for (const trigger of triggers) db.exec(trigger.sql);\n        db.exec("UPDATE history_legacy_rebuild SET phase=2 WHERE id=1");\n        break;\n      }\n      copy.run(row.n);\n      cursor = row.n;\n      db.prepare("UPDATE history_legacy_rebuild SET cursor=? WHERE id=1").run(cursor);\n      if (performance.now() >= end) break;\n    }\n  } else {\n    const end = performance.now() + HISTORY_SCRUB_MS;\n    for (let step = 0; step < HISTORY_SCRUB_STEPS; step++) {\n      const row = get(`SELECT rowid AS n FROM ${retired} ORDER BY rowid LIMIT 1`);\n      if (!row) {\n        db.exec(`DROP TABLE ${retired}`);\n        db.exec("UPDATE history_legacy_rebuild SET position=position+1,phase=0,cursor=NULL,ceiling=NULL WHERE id=1");\n        if (state.position + 1 === tables.length) db.exec("UPDATE history_privacy SET legacy=0 WHERE id=1");\n        break;\n      }\n      db.prepare(`DELETE FROM ${retired} WHERE rowid=?`).run(row.n);\n      if (performance.now() >= end) break;\n    }\n  }\n  db.exec("UPDATE history_privacy SET generation=generation+1 WHERE id=1");\n  return true;\n}\n\n// src/history-privacy.ts\nfunction privacySchema(db, existing) {\n  db.exec(`CREATE TABLE IF NOT EXISTS history_privacy (\n    id INTEGER PRIMARY KEY CHECK(id=1), generation INTEGER NOT NULL, cleaned INTEGER NOT NULL,\n    legacy INTEGER NOT NULL CHECK(legacy IN (0,1)));\n    CREATE TABLE IF NOT EXISTS history_deletions (id TEXT PRIMARY KEY, scope TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL);\n    INSERT OR IGNORE INTO history_privacy VALUES (1,1,0,${Number(existing)});\n    CREATE TRIGGER IF NOT EXISTS history_privacy_delete AFTER DELETE ON payloads BEGIN\n      UPDATE history_privacy SET generation=generation+1 WHERE id=1; END;\n    CREATE TRIGGER IF NOT EXISTS history_privacy_replace AFTER UPDATE OF body ON payloads BEGIN\n      UPDATE history_privacy SET generation=generation+1 WHERE id=1; END;`);\n  db.exec(legacyScrubSchema);\n  db.exec(legacyRebuildSchema);\n}\nfunction cleanupHistory(db) {\n  const before = db.prepare("SELECT generation,cleaned,legacy FROM history_privacy WHERE id=1").get();\n  if (before.generation === before.cleaned) return { pending: false, legacy: !!before.legacy };\n  db.exec("PRAGMA busy_timeout=0");\n  try {\n    const checkpoint = db.prepare("PRAGMA wal_checkpoint(TRUNCATE)").get();\n    if (checkpoint.busy !== 0) return { pending: true, legacy: !!before.legacy };\n    db.prepare("UPDATE history_privacy SET cleaned=? WHERE id=1 AND generation=?").run(before.generation, before.generation);\n    const after = db.prepare("SELECT generation,cleaned,legacy FROM history_privacy WHERE id=1").get();\n    return { pending: after.generation !== after.cleaned, legacy: !!after.legacy };\n  } finally {\n    db.exec("PRAGMA busy_timeout=250");\n  }\n}\n\n// src/history-deletion.ts\nvar HISTORY_DELETE_STEPS = 128;\nvar HISTORY_DELETE_MS = 40;\nfunction deleteHistory(db, context) {\n  const root = rootID(context), session = sessionID(context), isRoot = context.root === context.session;\n  const owner = db.prepare("SELECT root FROM sessions WHERE id=?").get(session);\n  if (owner && owner.root !== context.root) throw new HistoryInvalid("Conflicting session ownership");\n  db.prepare("INSERT OR IGNORE INTO tombstones VALUES (?)").run(isRoot ? root : session);\n  db.prepare("INSERT OR IGNORE INTO history_deletions VALUES (?,?,?,?)").run(session, context.scope, context.root, context.session);\n  db.exec("UPDATE history_privacy SET generation=generation+1 WHERE id=1");\n  const key = isRoot ? root : session, column = isRoot ? "root" : "session";\n  const history = db.prepare(`SELECT id FROM history WHERE ${column}=? LIMIT 1`);\n  const approval = db.prepare(`SELECT id FROM approvals WHERE ${column}=? LIMIT 1`);\n  const review = db.prepare(`SELECT id FROM reviews WHERE ${column}=? LIMIT 1`);\n  const attempt = db.prepare("SELECT id FROM attempts WHERE review=? LIMIT 1");\n  const removeHistory = db.prepare("DELETE FROM history WHERE id=?");\n  const removeApproval = db.prepare("DELETE FROM approvals WHERE id=?");\n  const removeReview = db.prepare("DELETE FROM reviews WHERE id=?");\n  const removeAttempt = db.prepare("DELETE FROM attempts WHERE id=?");\n  const nextSession = db.prepare(isRoot ? "SELECT id FROM sessions WHERE scope=? AND root=? LIMIT 1" : "SELECT id FROM sessions WHERE id=?");\n  const removeSession = db.prepare("DELETE FROM sessions WHERE id=?");\n  const end = performance.now() + HISTORY_DELETE_MS;\n  for (let step = 0; step < HISTORY_DELETE_STEPS; step++) {\n    const h = history.get(key);\n    if (h) removeHistory.run(h.id);\n    else {\n      const a = approval.get(key);\n      if (a) removeApproval.run(a.id);\n      else {\n        const r = review.get(key);\n        if (r) {\n          const a2 = attempt.get(r.id);\n          if (a2) removeAttempt.run(a2.id);\n          else removeReview.run(r.id);\n        } else {\n          const s = isRoot ? nextSession.get(context.scope, context.root) : nextSession.get(session);\n          if (s) removeSession.run(s.id);\n          else {\n            db.prepare("DELETE FROM history_deletions WHERE id=?").run(session);\n            return true;\n          }\n        }\n      }\n    }\n    if (performance.now() >= end) break;\n  }\n  return false;\n}\n\n// src/history-schema.ts\nvar schema = `\nCREATE TABLE meta (id INTEGER PRIMARY KEY CHECK(id=1), version INTEGER NOT NULL, revision INTEGER NOT NULL, totals TEXT NOT NULL);\nCREATE TABLE writers (id TEXT PRIMARY KEY, sequence INTEGER NOT NULL);\nCREATE TABLE contributions (id TEXT PRIMARY KEY);\nCREATE TABLE tombstones (id TEXT PRIMARY KEY);\nCREATE TABLE roots (id TEXT PRIMARY KEY, revision INTEGER NOT NULL);\nCREATE TABLE sessions (id TEXT PRIMARY KEY, scope TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL);\nCREATE INDEX sessions_scope ON sessions(scope,id);\nCREATE TABLE reviews (id TEXT PRIMARY KEY, entry TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL, context TEXT NOT NULL, accepted TEXT);\nCREATE INDEX reviews_root ON reviews(root);\nCREATE INDEX reviews_session ON reviews(session);\nCREATE INDEX reviews_entry ON reviews(entry);\nCREATE TABLE attempts (id TEXT PRIMARY KEY, review TEXT NOT NULL REFERENCES reviews(id) ON DELETE CASCADE, dispatched TEXT, finalized TEXT);\nCREATE TABLE approvals (id TEXT PRIMARY KEY, entry TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL, review TEXT NOT NULL, state TEXT NOT NULL, automatic INTEGER NOT NULL, at INTEGER NOT NULL);\nCREATE INDEX approvals_entry ON approvals(entry);\nCREATE TABLE history (id TEXT PRIMARY KEY, scope TEXT NOT NULL, root TEXT NOT NULL, session TEXT NOT NULL, permission TEXT NOT NULL,\n  completed INTEGER NOT NULL, tie TEXT NOT NULL, review TEXT NOT NULL, outcome TEXT, resolution TEXT NOT NULL, approving TEXT, resolvedAt INTEGER NOT NULL,\n  UNIQUE(scope,permission));\nCREATE INDEX history_order ON history(scope,root,completed,tie,id);\nCREATE INDEX history_session ON history(session);\nCREATE TABLE payloads (id TEXT PRIMARY KEY REFERENCES history(id) ON DELETE CASCADE, body TEXT NOT NULL);\n`;\nvar HistorySQL = class {\n  constructor(db) {\n    this.db = db;\n    db.exec("PRAGMA busy_timeout=250; PRAGMA secure_delete=ON; PRAGMA foreign_keys=ON; PRAGMA journal_mode=WAL; PRAGMA synchronous=FULL; PRAGMA wal_autocheckpoint=256");\n    if (db.prepare("PRAGMA secure_delete").get()?.secure_delete !== 1) throw new HistoryInvalid("Secure history deletion unavailable");\n    this.transaction(() => {\n      const tables2 = db.prepare("SELECT name FROM sqlite_master WHERE type=\'table\' AND name NOT LIKE \'sqlite_%\'").all();\n      if (!tables2.length) {\n        db.exec(schema);\n        db.prepare("INSERT INTO meta VALUES (1,1,0,?)").run(JSON.stringify(empty()));\n      }\n      const meta = db.prepare(`SELECT version,revision,CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals FROM meta WHERE id=1`).get();\n      if (meta?.version !== 1 || !count2(meta.revision)) throw new HistoryInvalid("Unsupported history schema");\n      this.parseTotals(meta.totals);\n      historySchema(db, `CREATE INDEX IF NOT EXISTS sessions_root ON sessions(scope,root);\n        CREATE INDEX IF NOT EXISTS attempts_review ON attempts(review);\n        CREATE INDEX IF NOT EXISTS approvals_root ON approvals(root);\n        CREATE INDEX IF NOT EXISTS approvals_session ON approvals(session);\n        CREATE INDEX IF NOT EXISTS history_root ON history(root);`);\n      historySchema(db, `CREATE TABLE IF NOT EXISTS conversation_totals (id TEXT PRIMARY KEY, totals TEXT NOT NULL, partial INTEGER NOT NULL CHECK(partial IN (0,1)));\n        CREATE INDEX IF NOT EXISTS reviews_root_id ON reviews(root,id);\n        CREATE INDEX IF NOT EXISTS attempts_review_id ON attempts(review,id);\n        CREATE INDEX IF NOT EXISTS approvals_review_id ON approvals(review,id);\n        CREATE INDEX IF NOT EXISTS history_visible_order ON history(scope,root,completed,tie,id) WHERE outcome IS NOT NULL;`);\n      db.exec(migrationSchema);\n      historySchema(db, browsingSchema);\n      privacySchema(db, tables2.length > 0);\n    });\n  }\n  db;\n  statements = /* @__PURE__ */ new Map();\n  browsing = new HistoryBrowsing();\n  statement(sql) {\n    let statement = this.statements.get(sql);\n    if (!statement) {\n      statement = this.db.prepare(sql);\n      this.statements.set(sql, statement);\n    }\n    return statement;\n  }\n  get(sql, ...args) {\n    return this.statement(sql).get(...args);\n  }\n  all(sql, ...args) {\n    return this.statement(sql).all(...args);\n  }\n  run(sql, ...args) {\n    this.statement(sql).run(...args);\n  }\n  transaction(run, write = true) {\n    this.db.exec(write ? "BEGIN IMMEDIATE" : "BEGIN");\n    try {\n      const result = run();\n      this.db.exec("COMMIT");\n      return result;\n    } catch (error) {\n      this.db.exec("ROLLBACK");\n      throw error;\n    }\n  }\n  parseTotals(text2) {\n    if (typeof text2 !== "string" || Buffer.byteLength(text2) > HISTORY_RECORD_BYTES.totals) throw new HistoryInvalid("Invalid history totals");\n    return validate(JSON.parse(text2));\n  }\n  revision(root) {\n    const previous = this.get("SELECT revision FROM roots WHERE id=?", root)?.revision ?? 0;\n    if (!count2(previous) || !count2(previous + 1)) throw new HistoryInvalid("History revision overflow");\n    this.run("INSERT INTO roots VALUES (?,1) ON CONFLICT(id) DO UPDATE SET revision=revision+1", root);\n  }\n  apply(writer, sequence, serialized, beforeCommit) {\n    for (; ; ) {\n      const result = this.applyReady(writer, sequence, serialized, beforeCommit);\n      if ("deleting" in result) continue;\n      if (!("pending" in result)) return result;\n      this.bootstrap(result.pending);\n    }\n  }\n  /** Worker entrypoint: bootstrap is separate; deletion advances at most one bounded slice. */\n  applyReady(writer, sequence, serialized, beforeCommit) {\n    if (!/^[a-zA-Z0-9-]{1,128}$/.test(writer) || !count2(sequence) || !sequence) throw new HistoryInvalid("Invalid writer sequence");\n    const event = decodeEvent(serialized);\n    return this.transaction(() => {\n      const previous = this.get("SELECT sequence FROM writers WHERE id=?", writer)?.sequence ?? 0;\n      if (sequence <= previous) return { replay: true };\n      if (sequence !== previous + 1) throw new HistoryInvalid("History sequence gap");\n      const root = rootID(event.context);\n      if (!this.ready(root)) return { pending: root };\n      if (event.type === "sessionDeleted") {\n        if (!deleteHistory(this.db, event.context)) {\n          beforeCommit?.();\n          return { deleting: true };\n        }\n        this.revision(root);\n      } else this.event(event);\n      this.run("INSERT INTO writers VALUES (?,?) ON CONFLICT(id) DO UPDATE SET sequence=excluded.sequence", writer, sequence);\n      beforeCommit?.();\n      return { replay: false };\n    });\n  }\n  bootstrap(root, beforeCommit) {\n    return this.transaction(() => {\n      const result = bootstrap(this.db, root);\n      beforeCommit?.();\n      return result;\n    });\n  }\n  ready(root) {\n    if (this.get("SELECT id FROM conversation_totals WHERE id=?", root)) return true;\n    if (this.get("SELECT id FROM conversation_bootstrap WHERE id=?", root)) return false;\n    if (!this.get("SELECT id FROM reviews WHERE root=? LIMIT 1", root)) {\n      this.run("INSERT INTO conversation_totals VALUES (?,?,?)", root, JSON.stringify(empty()), Number(!!this.get("SELECT id FROM roots WHERE id=?", root)));\n      return true;\n    }\n    return false;\n  }\n  conversation(root) {\n    const saved = this.get(`SELECT CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals,partial FROM conversation_totals WHERE id=?`, root);\n    if (saved) {\n      if (saved.partial !== 0 && saved.partial !== 1) throw new HistoryInvalid("Invalid conversation coverage");\n      return { totals: this.parseTotals(saved.totals), partialHistory: saved.partial === 1 };\n    }\n    if (!this.get("SELECT id FROM reviews WHERE root=? LIMIT 1", root))\n      return { totals: empty(), partialHistory: !!this.get("SELECT id FROM roots WHERE id=?", root) };\n    throw new HistoryInvalid("Conversation bootstrap required");\n  }\n  contribute(key, delta, root) {\n    if (this.get("SELECT id FROM contributions WHERE id=?", key)) return;\n    const meta = this.get(`SELECT CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals,revision FROM meta WHERE id=1`);\n    const totals = add(this.parseTotals(meta.totals), delta);\n    const conversation = add(this.conversation(root).totals, delta);\n    if (!count2(meta.revision + 1)) throw new HistoryInvalid("History revision overflow");\n    this.run("INSERT INTO contributions VALUES (?)", key);\n    if (JSON.stringify(totals) !== meta.totals) this.run("UPDATE meta SET totals=?,revision=revision+1 WHERE id=1", JSON.stringify(totals));\n    this.run("UPDATE conversation_totals SET totals=? WHERE id=?", JSON.stringify(conversation), root);\n  }\n  event(e) {\n    const c = e.context, root = rootID(c), session = sessionID(c);\n    const context = e.context, review = reviewID(context), entry = entryID(context);\n    const deleted = this.get("SELECT id FROM tombstones WHERE id IN (?,?) LIMIT 1", root, session);\n    if (!deleted) {\n      const existingSession = this.get("SELECT root FROM sessions WHERE id=?", session);\n      if (existingSession && existingSession.root !== c.root) throw new HistoryInvalid("Conflicting session ownership");\n      this.run("INSERT OR IGNORE INTO sessions VALUES (?,?,?,?)", session, c.scope, c.root, c.session);\n      const existing = this.get("SELECT context FROM reviews WHERE id=?", review);\n      if (existing) {\n        const prior = JSON.parse(existing.context);\n        if (Object.keys(context).some((key) => prior[key] !== context[key])) throw new HistoryInvalid("Conflicting review identity");\n      }\n      const owner = this.get("SELECT root,session FROM history WHERE id=?", entry);\n      if (owner && (owner.root !== root || owner.session !== session)) throw new HistoryInvalid("Conflicting permission ownership");\n      const pendingOwner = this.get("SELECT root,session FROM reviews WHERE entry=? LIMIT 1", entry);\n      if (pendingOwner && (pendingOwner.root !== root || pendingOwner.session !== session)) throw new HistoryInvalid("Conflicting permission ownership");\n      this.run("INSERT OR IGNORE INTO reviews VALUES (?,?,?,?,?,NULL)", review, entry, root, session, JSON.stringify(context));\n    }\n    const delta = historyDelta(e);\n    if (e.type === "attemptDispatched" || e.type === "attemptFinalized") {\n      const attempt = opaque(review, e.attempt);\n      if (!deleted) {\n        this.run("INSERT OR IGNORE INTO attempts VALUES (?,?,NULL,NULL)", attempt, review);\n        if (e.type === "attemptDispatched") this.run("UPDATE attempts SET dispatched=COALESCE(dispatched,?) WHERE id=?", JSON.stringify({ at: e.at, retry: e.retry }), attempt);\n        else this.run("UPDATE attempts SET finalized=COALESCE(finalized,?) WHERE id=?", JSON.stringify({ at: e.at, usage: e.usage, reportedModel: e.reportedModel }), attempt);\n      }\n      this.contribute(opaque(e.type, attempt), delta, root);\n    } else if (e.type === "reviewAccepted") {\n      if (!deleted) this.run("UPDATE reviews SET accepted=COALESCE(accepted,?) WHERE id=?", JSON.stringify(e.accepted), review);\n      this.contribute(opaque(e.type, review), delta, root);\n    } else if (e.type === "approvalConfirmed" || e.type === "approvalDispatched" || e.type === "approvalSettled") {\n      const id = opaque(entry, e.approval);\n      if (!deleted) {\n        const old = this.get("SELECT * FROM approvals WHERE id=?", id);\n        if (old && (old.review !== review || "automatic" in e && old.automatic !== -1 && old.automatic !== Number(e.automatic)))\n          throw new HistoryInvalid("Conflicting approval identity");\n        const state = e.type === "approvalConfirmed" ? "confirmed" : e.type === "approvalSettled" ? e.result : "pending";\n        if (!old || old.state !== "confirmed" && e.type !== "approvalDispatched") {\n          this.run(\n            "INSERT INTO approvals VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET state=excluded.state,automatic=excluded.automatic,at=excluded.at",\n            id,\n            entry,\n            root,\n            session,\n            review,\n            state,\n            "automatic" in e ? Number(e.automatic) : old?.automatic ?? -1,\n            e.at\n          );\n        } else if (old.automatic === -1 && "automatic" in e)\n          this.run("UPDATE approvals SET automatic=? WHERE id=?", Number(e.automatic), id);\n        this.outcome(entry);\n        this.revision(root);\n      }\n      if (e.type === "approvalConfirmed") {\n        this.contribute(opaque("approvalConfirmed", id), delta, root);\n      }\n    } else if ((e.type === "permissionResolved" || e.type === "permissionOutcome") && !deleted) {\n      const old = this.get("SELECT * FROM history WHERE id=?", entry);\n      if (e.type === "permissionOutcome" && !old) return;\n      const replace = e.type === "permissionResolved" && (!old || e.payload.completedAt > old.completed || e.payload.completedAt === old.completed && Buffer.compare(Buffer.from(context.review), Buffer.from(old.tie)) >= 0);\n      const prior = old?.resolution;\n      const resolution = !prior || prior === "cancelled" ? e.outcome : e.outcome === "cancelled" ? prior : prior === "conflict" || prior === "rejected" !== (e.outcome === "rejected") ? "conflict" : prior === "auto" || e.outcome === "auto" ? "auto" : e.outcome;\n      if (replace) {\n        this.run(\n          `INSERT INTO history VALUES (?,?,?,?,?,?,?,?,NULL,?,NULL,?) ON CONFLICT(id) DO UPDATE SET\n          completed=excluded.completed,tie=excluded.tie,review=excluded.review,resolution=excluded.resolution,resolvedAt=excluded.resolvedAt`,\n          entry,\n          c.scope,\n          root,\n          session,\n          context.permission,\n          e.payload.completedAt,\n          context.review,\n          review,\n          resolution,\n          e.at\n        );\n        this.run("INSERT INTO payloads VALUES (?,?) ON CONFLICT(id) DO UPDATE SET body=excluded.body", entry, JSON.stringify(e.payload));\n      } else this.run("UPDATE history SET resolution=? WHERE id=?", resolution, entry);\n      this.outcome(entry);\n      this.revision(root);\n    }\n  }\n  outcome(entry) {\n    const row = this.get("SELECT resolution FROM history WHERE id=?", entry);\n    if (!row) return;\n    const auto = this.get("SELECT review FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=1 ORDER BY id LIMIT 1", entry);\n    const manual = this.get("SELECT review FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=0 ORDER BY id LIMIT 1", entry);\n    const uncertain = this.get("SELECT id FROM approvals WHERE entry=? AND state IN (\'pending\',\'uncertain\') LIMIT 1", entry);\n    const outcome = row.resolution === "conflict" || row.resolution === "rejected" && (auto || manual) ? null : row.resolution === "rejected" ? "rejected" : auto ? "auto" : manual ? "manual" : uncertain ? null : row.resolution;\n    this.run("UPDATE history SET outcome=?,approving=? WHERE id=?", outcome, auto?.review ?? manual?.review ?? null, entry);\n  }\n  query(q) {\n    for (; ; ) {\n      const result = this.queryReady(q);\n      if (!("pending" in result)) return result;\n      this.bootstrap(result.pending);\n    }\n  }\n  queryReady(q) {\n    validateQuery(q);\n    return this.transaction(() => {\n      const conversation = q.type === "conversationTotals" ? q : q.type === "totals" ? q.conversation : void 0;\n      if (conversation) {\n        const root2 = rootID(conversation);\n        if (!this.get("SELECT id FROM conversation_totals WHERE id=?", root2) && (this.get("SELECT id FROM conversation_bootstrap WHERE id=?", root2) || this.get("SELECT id FROM reviews WHERE root=? LIMIT 1", root2))) return { pending: root2 };\n      }\n      if (q.type === "totals") {\n        const row = this.get(`SELECT revision,CASE WHEN length(CAST(totals AS BLOB))<=${HISTORY_RECORD_BYTES.totals} THEN totals END AS totals FROM meta WHERE id=1`);\n        if (!count2(row.revision)) throw new HistoryInvalid("Invalid aggregate revision");\n        return {\n          revision: row.revision,\n          totals: this.parseTotals(row.totals),\n          ...q.conversation ? { conversation: this.conversation(rootID(q.conversation)) } : {}\n        };\n      }\n      if (q.type === "conversationTotals") {\n        const revision2 = this.get("SELECT revision FROM meta WHERE id=1").revision;\n        if (!count2(revision2)) throw new HistoryInvalid("Invalid aggregate revision");\n        return { revision: revision2, ...this.conversation(rootID(q)) };\n      }\n      if (q.type === "sessions") {\n        const rows = this.all(`SELECT CASE WHEN length(id)=64 THEN id END AS id,scope,\n          CASE WHEN length(CAST(root AS BLOB))<=${HISTORY_TEXT_BYTES} THEN root END AS root,\n          CASE WHEN length(CAST(session AS BLOB))<=${HISTORY_TEXT_BYTES} THEN session END AS session\n          FROM sessions WHERE scope=? AND id>? ORDER BY id LIMIT ?`, q.scope, q.after ?? "", q.limit ?? 100);\n        return { sessions: rows.map((row) => {\n          validateScope(row);\n          if (row.id !== sessionID(row) || row.scope !== q.scope) throw new HistoryInvalid("Invalid session index");\n          return { scope: row.scope, root: row.root, session: row.session };\n        }), after: rows.at(-1)?.id };\n      }\n      if (q.type === "session") {\n        if (this.get("SELECT id FROM tombstones WHERE id=?", opaque(q.scope, q.session))) return {};\n        const row = this.get(`SELECT CASE WHEN length(CAST(scope AS BLOB))<=${HISTORY_TEXT_BYTES} THEN scope END AS scope,\n          CASE WHEN length(CAST(session AS BLOB))<=${HISTORY_TEXT_BYTES} THEN session END AS session,\n          CASE WHEN length(CAST(root AS BLOB))<=${HISTORY_TEXT_BYTES} THEN root END AS root\n          FROM sessions WHERE id=?`, opaque(q.scope, q.session));\n        if (!row) return {};\n        validateScope(row);\n        if (row.scope !== q.scope || row.session !== q.session) throw new HistoryInvalid("Invalid session ownership");\n        if (this.get("SELECT id FROM tombstones WHERE id=?", rootID(row))) return {};\n        return { context: { scope: row.scope, root: row.root, session: row.session } };\n      }\n      if (q.type === "resolution") {\n        const entry = opaque(q.scope, q.permission), root2 = rootID(q), session = sessionID(q);\n        const deleted = !!this.get("SELECT id FROM tombstones WHERE id IN (?,?) LIMIT 1", root2, session);\n        if (deleted) return { outcome: void 0, uncertain: false, conflict: false, deleted: true };\n        const invalid = this.get(`SELECT 1 AS invalid FROM approvals WHERE entry=? AND\n          (root!=? OR session!=? OR state NOT IN (\'pending\',\'confirmed\',\'uncertain\',\'not-sent\') OR automatic NOT IN (-1,0,1)\n          OR (state=\'confirmed\' AND automatic=-1)) LIMIT 1`, entry, root2, session);\n        const invalidReview = this.get("SELECT 1 AS invalid FROM reviews WHERE entry=? AND (root!=? OR session!=?) LIMIT 1", entry, root2, session);\n        const history = this.get(`SELECT CASE WHEN length(root)=64 THEN root END AS root,\n          CASE WHEN length(session)=64 THEN session END AS session,\n          CASE WHEN length(CAST(resolution AS BLOB))<=16 THEN resolution END AS resolution FROM history WHERE id=?`, entry);\n        if (invalid || invalidReview || history && (history.root !== root2 || history.session !== session || !["auto", "manual", "rejected", "cancelled", "conflict"].includes(history.resolution))) throw new HistoryInvalid("Invalid resolution ownership");\n        const auto = !!this.get("SELECT id FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=1 LIMIT 1", entry);\n        const manual = !!this.get("SELECT id FROM approvals WHERE entry=? AND state=\'confirmed\' AND automatic=0 LIMIT 1", entry);\n        const uncertain = !!this.get("SELECT id FROM approvals WHERE entry=? AND state IN (\'pending\',\'uncertain\') LIMIT 1", entry);\n        const conflict = history?.resolution === "conflict" || history?.resolution === "rejected" && (auto || manual);\n        const outcome = deleted || conflict ? void 0 : auto ? "auto" : manual ? "manual" : history?.resolution === "rejected" ? "rejected" : history?.resolution === "manual" && !uncertain ? "manual" : void 0;\n        return { outcome, uncertain, conflict, deleted };\n      }\n      const root = rootID(q), revision = this.get("SELECT revision FROM roots WHERE id=?", root)?.revision ?? 0;\n      if (this.get("SELECT id FROM tombstones WHERE id=?", root)) return { revision, total: 0, rank: 0, deleted: true };\n      const visible = "NOT EXISTS (SELECT 1 FROM tombstones WHERE id=history.session)";\n      const base = `scope=? AND root=? AND outcome IS NOT NULL AND ${visible}`;\n      const generation = this.get("SELECT generation FROM history_generations WHERE id=?", root)?.generation ?? 0;\n      if (!count2(generation) || !count2(revision)) throw new HistoryInvalid("Invalid history index");\n      let index = this.browsing.get(root, generation);\n      if (!index) {\n        const invalid = this.get(`SELECT id FROM history WHERE scope=? AND root=? AND ${visible} AND\n          (typeof(completed)!=\'integer\' OR completed<0 OR completed>8640000000000000 OR length(id)!=64 OR length(session)!=64\n          OR length(review)!=64 OR typeof(permission)!=\'text\' OR length(CAST(permission AS BLOB))>${HISTORY_TEXT_BYTES}\n          OR typeof(tie)!=\'text\' OR length(tie)=0 OR length(CAST(tie AS BLOB))>${HISTORY_TEXT_BYTES}\n          OR length(CAST(resolution AS BLOB))>16 OR length(approving)>64\n          OR outcome NOT IN (\'auto\',\'manual\',\'rejected\',\'cancelled\')) LIMIT 1`, q.scope, root);\n        const invalidOwner = this.get(`SELECT h.id FROM history h LEFT JOIN reviews r ON r.id=h.review\n          LEFT JOIN sessions s ON s.id=h.session WHERE h.scope=? AND h.root=?\n          AND NOT EXISTS (SELECT 1 FROM tombstones WHERE id=h.session) AND\n          (r.id IS NULL OR r.entry!=h.id OR r.root!=h.root OR r.session!=h.session OR s.id IS NULL OR s.scope!=h.scope OR s.root!=?) LIMIT 1`, q.scope, root, q.root);\n        if (invalid || invalidOwner) throw new HistoryInvalid("Invalid history index");\n        const total2 = this.get(`SELECT count(*) AS n FROM history WHERE ${base}`, q.scope, root).n;\n        if (!count2(total2)) throw new HistoryInvalid("History count overflow");\n        index = this.browsing.save(root, generation, total2);\n      }\n      const total = index.total;\n      const byID = (id) => id === null ? void 0 : this.get(`SELECT * FROM history WHERE ${base} AND id=?`, q.scope, root, id);\n      const seek = (row, newer = false) => {\n        const order = newer ? "ASC" : "DESC";\n        return this.get(\n          `SELECT h.* FROM sessions s JOIN history h ON h.id=(\n          SELECT id FROM history WHERE scope=? AND root=? AND session=s.id AND outcome IS NOT NULL\n          ${row ? `AND (completed,tie,id) ${newer ? ">" : "<"} (?,?,?)` : ""}\n          ORDER BY completed ${order},tie ${order},id ${order} LIMIT 1)\n          WHERE s.scope=? AND s.root=? AND NOT EXISTS (SELECT 1 FROM tombstones WHERE id=s.id)\n          ORDER BY h.completed ${order},h.tie ${order},h.id ${order} LIMIT 1`,\n          q.scope,\n          root,\n          ...row ? [row.completed, row.tie, row.id] : [],\n          q.scope,\n          q.root\n        );\n      };\n      let selected;\n      if (q.entry) selected = byID(q.entry);\n      else if (index.latest !== void 0) selected = byID(index.latest);\n      else {\n        selected = seek();\n        index.latest = selected?.id ?? null;\n      }\n      const adjacent = (row, newer) => {\n        const key = opaque(String(row.completed), row.tie, row.id, String(newer));\n        if (index.neighbors.has(key)) return byID(index.neighbors.get(key));\n        const candidate = seek(row, newer);\n        this.browsing.neighbor(index, key, candidate?.id ?? null);\n        return candidate;\n      };\n      if (selected && q.direction) selected = adjacent(selected, q.direction === "newer") ?? selected;\n      if (!selected && q.order) selected = adjacent(q.order, true) ?? adjacent(q.order, false);\n      if (!selected) return { revision, total, rank: 0 };\n      const s = selected;\n      if (s.id !== opaque(q.scope, s.permission) || s.review !== opaque(q.scope, s.tie)) throw new HistoryInvalid("Invalid history ownership");\n      const rank = index.ranks.get(s.id) ?? this.get(`SELECT count(*) AS n FROM history WHERE ${base} AND (completed,tie,id)<=(?,?,?)`, q.scope, root, s.completed, s.tie, s.id).n;\n      if (!count2(rank) || rank < 1 || rank > total) throw new HistoryInvalid("Invalid history rank");\n      this.browsing.rank(index, s.id, rank);\n      const result = { revision, total, rank, entry: s.id, order: { completed: s.completed, tie: s.tie, id: s.id }, older: adjacent(s, false)?.id, newer: adjacent(s, true)?.id };\n      const contextRow = this.get(`SELECT CASE WHEN length(CAST(context AS BLOB))<=${HISTORY_RECORD_BYTES.context} THEN context END AS context FROM reviews WHERE id=? AND root=? AND session=?`, s.review, root, s.session);\n      if (typeof contextRow?.context !== "string") throw new HistoryInvalid("Invalid history ownership");\n      const context = JSON.parse(contextRow.context);\n      validateReview(context);\n      if (rootID(context) !== root || sessionID(context) !== s.session || entryID(context) !== s.id || reviewID(context) !== s.review) throw new HistoryInvalid("Invalid history ownership");\n      result.session = context.session;\n      try {\n        const body = this.get(`SELECT CASE WHEN length(CAST(body AS BLOB))<=${HISTORY_RECORD_BYTES.payload} THEN body END AS body FROM payloads WHERE id=?`, s.id)?.body;\n        if (typeof body !== "string" || Buffer.byteLength(body) > HISTORY_RECORD_BYTES.payload) throw new Error();\n        const payload = validatePayload(JSON.parse(body));\n        if (payload.completedAt !== s.completed) throw new Error();\n        result.record = { context, payload, outcome: s.outcome, approvingReview: s.approving ?? void 0 };\n      } catch {\n        result.unreadable = true;\n      }\n      return result;\n    }, false);\n  }\n  cleanup(beforeCommit) {\n    let work = this.transaction(() => {\n      const row = this.get(`SELECT id,\n        CASE WHEN length(CAST(scope AS BLOB))<=${HISTORY_TEXT_BYTES} THEN scope END AS scope,\n        CASE WHEN length(CAST(root AS BLOB))<=${HISTORY_TEXT_BYTES} THEN root END AS root,\n        CASE WHEN length(CAST(session AS BLOB))<=${HISTORY_TEXT_BYTES} THEN session END AS session\n        FROM history_deletions ORDER BY id LIMIT 1`);\n      if (!row) return void 0;\n      validateScope(row);\n      if (row.id !== sessionID(row) || !this.get("SELECT id FROM tombstones WHERE id=?", row.id) || !this.get("SELECT id FROM conversation_totals WHERE id=?", rootID(row))) throw new HistoryInvalid("Invalid history deletion");\n      if (deleteHistory(this.db, row)) this.revision(rootID(row));\n      beforeCommit?.();\n      return "deleting";\n    });\n    if (!work) {\n      this.db.exec("PRAGMA foreign_keys=OFF; PRAGMA legacy_alter_table=ON");\n      try {\n        work = this.transaction(() => {\n          if (!scrubLegacyFreelist(this.db) && !rebuildLegacyPages(this.db)) return void 0;\n          beforeCommit?.();\n          return "scrubbing";\n        });\n      } finally {\n        this.db.exec("PRAGMA legacy_alter_table=OFF; PRAGMA foreign_keys=ON");\n      }\n    }\n    if (work) return { pending: true, legacy: !!this.get("SELECT legacy FROM history_privacy WHERE id=1").legacy, [work]: true };\n    return cleanupHistory(this.db);\n  }\n  close() {\n    this.db.close();\n  }\n};\n\n// src/history-private-path.ts\nvar import_node_fs = require("node:fs");\nvar import_node_path2 = __toESM(require("node:path"), 1);\nfunction privateDatabase(file) {\n  const uid = process.geteuid?.();\n  if (process.platform !== "linux" || uid === void 0 || !import_node_path2.default.isAbsolute(file) || import_node_path2.default.normalize(file) !== file || import_node_path2.default.basename(file) !== "history-v1.sqlite") throw new HistoryInvalid("Invalid history path");\n  const directory = import_node_path2.default.dirname(file);\n  let current = "/";\n  for (const part of ["", ...directory.split("/").filter(Boolean)]) {\n    if (part) current = import_node_path2.default.join(current, part);\n    let stat;\n    try {\n      stat = (0, import_node_fs.lstatSync)(current);\n    } catch (error) {\n      if (error.code !== "ENOENT") throw error;\n      try {\n        (0, import_node_fs.mkdirSync)(current, { mode: 448 });\n      } catch (error2) {\n        if (error2.code !== "EEXIST") throw error2;\n      }\n      stat = (0, import_node_fs.lstatSync)(current);\n    }\n    if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== 0 && stat.uid !== uid || stat.mode & 18 && !(stat.mode & 512)) throw new HistoryInvalid("Untrusted history ancestor");\n    if (current === directory && (stat.uid !== uid || stat.mode & 63)) throw new HistoryInvalid("History directory must be private");\n  }\n  for (const suffix of ["", "-wal", "-shm", "-journal"]) {\n    const name = file + suffix;\n    let fd;\n    try {\n      fd = (0, import_node_fs.openSync)(name, import_node_fs.constants.O_RDWR | import_node_fs.constants.O_NOFOLLOW | import_node_fs.constants.O_NONBLOCK);\n    } catch (error) {\n      if (error.code !== "ENOENT") throw error;\n      if (suffix) continue;\n      try {\n        fd = (0, import_node_fs.openSync)(name, import_node_fs.constants.O_RDWR | import_node_fs.constants.O_CREAT | import_node_fs.constants.O_EXCL | import_node_fs.constants.O_NOFOLLOW, 384);\n      } catch (error2) {\n        if (error2.code !== "EEXIST") throw error2;\n        fd = (0, import_node_fs.openSync)(name, import_node_fs.constants.O_RDWR | import_node_fs.constants.O_NOFOLLOW | import_node_fs.constants.O_NONBLOCK);\n      }\n    }\n    try {\n      const stat = (0, import_node_fs.fstatSync)(fd);\n      if (!stat.isFile() || stat.nlink !== 1 || stat.uid !== uid || stat.mode & 63) throw new HistoryInvalid("History file must be private");\n    } finally {\n      (0, import_node_fs.closeSync)(fd);\n    }\n  }\n}\n\n// src/history-storage-worker.ts\nfunction openHistoryDatabase(file, adapter, construct) {\n  privateDatabase(file);\n  const db = construct ? construct(file) : adapter === "bun" ? new (require("bun:sqlite")).Database(file) : new (require("node:sqlite")).DatabaseSync(file);\n  try {\n    return new HistorySQL(db);\n  } catch (error) {\n    db.close();\n    throw error;\n  }\n}\nif (import_node_worker_threads.parentPort) {\n  let sql;\n  import_node_worker_threads.parentPort.on("message", (message) => {\n    try {\n      let value;\n      if (message.type === "open") {\n        if (sql) throw new HistoryInvalid("History worker already open");\n        sql = openHistoryDatabase(message.file, message.adapter);\n        value = { environmentKeys: Object.keys(process.env).length, cleanup: true };\n      } else if (message.type === "close") {\n        sql?.close();\n        sql = void 0;\n      } else {\n        if (!sql) throw new Error("History worker not open");\n        if (message.type === "apply") value = sql.applyReady(message.writer, message.sequence, message.event);\n        else if (message.type === "query") value = sql.queryReady(message.query);\n        else if (message.type === "bootstrap") value = sql.bootstrap(message.root);\n        else if (message.type === "cleanup") value = sql.cleanup();\n        else throw new HistoryInvalid("Invalid history worker operation");\n      }\n      import_node_worker_threads.parentPort.postMessage({ id: message.id, value });\n    } catch (error) {\n      import_node_worker_threads.parentPort.postMessage({ id: message.id, error: error instanceof HistoryInvalid ? "invalid" : "storage" });\n    }\n  });\n}\n// Annotate the CommonJS export names for ESM import in node:\n0 && (module.exports = {\n  openHistoryDatabase,\n  privateDatabase\n});\n' : "";
 var HistoryWorker = class {
   worker;
   id = 0;
@@ -7561,6 +8081,12 @@ var HistoryStore = class {
   blocked = false;
   writeFailed = false;
   preferRead = false;
+  bootstraps = /* @__PURE__ */ new Set();
+  preferBootstrap = true;
+  cleanupEnabled = false;
+  cleanupDue = 0;
+  cleanupNeeded = false;
+  legacyCleanup;
   failures = /* @__PURE__ */ new Set();
   commits = /* @__PURE__ */ new Set();
   disposal;
@@ -7577,6 +8103,13 @@ var HistoryStore = class {
   get pendingOperations() {
     return this.queue.length;
   }
+  /** Local observation only; another client may have committed newer cleanup work. */
+  get cleanupPending() {
+    return this.cleanupNeeded;
+  }
+  get legacyCleanupRequired() {
+    return this.legacyCleanup;
+  }
   /** Saturated deletion admission leaves one bounded reconciliation signal, never an ID side queue. */
   get maintenanceDirty() {
     return this.dirty;
@@ -7643,7 +8176,7 @@ var HistoryStore = class {
       if (event.type === "sessionDeleted") this.markMaintenanceDirty();
       return false;
     }
-    this.queue.push({ sequence: ++this.sequence, event: serialized, bytes });
+    this.queue.push({ sequence: ++this.sequence, event: serialized, bytes, root: rootID(event.context) });
     this.bytes += bytes;
     this.pump();
     return true;
@@ -7660,6 +8193,7 @@ var HistoryStore = class {
       const finish = (result, error) => {
         if (done) return;
         done = true;
+        read.finished = true;
         clearTimeout(timer);
         signal?.removeEventListener("abort", abort);
         const index = this.reads.indexOf(read);
@@ -7667,7 +8201,7 @@ var HistoryStore = class {
         if (!read.started) settle();
         error ? reject(error) : resolve(result);
       };
-      const read = { query, resolve: (result) => finish(result), reject: (error) => finish(void 0, error), settled: settle, started: false };
+      const read = { query, resolve: (result) => finish(result), reject: (error) => finish(void 0, error), settled: settle, started: false, finished: false };
       const abort = () => finish(void 0, new Error("History read aborted"));
       const timer = setTimeout(() => finish(void 0, new Error("History read timeout")), 3e3);
       if (signal?.aborted) {
@@ -7687,22 +8221,44 @@ var HistoryStore = class {
       this.cancel(this.timer);
       this.timer = void 0;
     }
+    const cleanup = this.cleanupEnabled && this.now() >= this.cleanupDue && (!this.closing || this.cleanupNeeded);
+    if (cleanup) {
+      this.active = true;
+      void this.run(void 0, void 0, true);
+      return;
+    }
     const write = !this.blocked && this.queue.length > 0 && this.now() >= this.retryAt;
-    const read = this.reads.length && (!write || this.preferRead) ? this.reads.shift() : void 0;
-    if (!read && !write) {
-      if (this.queue.length && !this.blocked) this.timer = this.schedule(() => {
-        this.timer = void 0;
-        this.pump();
-      }, Math.max(0, this.retryAt - this.now()));
+    const bootstrap = !this.blocked && this.now() >= this.retryAt && (this.preferBootstrap || !write && !this.reads.length) ? this.bootstraps.values().next().value : void 0;
+    const read = !bootstrap && this.reads.length && (!write || this.preferRead) ? this.reads.shift() : void 0;
+    if (!read && !write && !bootstrap) {
+      const next = Math.min(
+        (this.queue.length || this.bootstraps.size) && !this.blocked ? this.retryAt : Infinity,
+        this.cleanupEnabled && (!this.closing || this.cleanupNeeded) ? this.cleanupDue : Infinity
+      );
+      if (Number.isFinite(next)) {
+        this.timer = this.schedule(() => {
+          this.timer = void 0;
+          this.pump();
+        }, Math.max(0, next - this.now()));
+        this.timer.unref?.();
+      }
       return;
     }
     this.active = true;
     if (read) read.started = true;
-    void this.run(read);
+    void this.run(read, bootstrap);
   }
-  async run(read) {
+  rememberBootstrap(root) {
+    if (!this.bootstraps.has(root) && this.bootstraps.size >= 9) this.bootstraps.delete(this.bootstraps.values().next().value);
+    this.bootstraps.add(root);
+    this.preferBootstrap = true;
+  }
+  async run(read, bootstrap, cleanup = false) {
+    const bootstrapReaders = bootstrap ? this.reads.filter((reader2) => reader2.bootstrap === bootstrap) : [];
+    for (const reader2 of bootstrapReaders) reader2.started = true;
     let watchdog;
     let terminating;
+    let cleanupDelay = HISTORY_RETRY_MS;
     try {
       this.worker ??= this.options.transport?.() ?? new HistoryWorker(this.options.source);
       const worker = this.worker;
@@ -7712,23 +8268,55 @@ var HistoryStore = class {
         });
       }, 3e3);
       if (!this.opened) {
-        await worker.call({ type: "open", file: path14.join(this.stateDirectory, "opencode-reviewer/history-v1.sqlite"), adapter: this.options.adapter ?? "bun" });
+        const opened = await worker.call({ type: "open", file: path14.join(this.stateDirectory, "opencode-reviewer/history-v1.sqlite"), adapter: this.options.adapter ?? "bun" });
         if (terminating) throw new Error("History worker terminating");
         this.opened = true;
+        this.cleanupEnabled = opened?.cleanup === true;
+        this.cleanupNeeded = this.cleanupEnabled;
+        this.cleanupDue = 0;
       }
       if (this.stopped) return;
-      if (read) {
+      if (cleanup) {
+        const result = await worker.call({ type: "cleanup" });
+        this.cleanupNeeded = result.pending;
+        this.legacyCleanup = result.legacy;
+        if (result.deleting || result.scrubbing) cleanupDelay = 10;
+      } else if (bootstrap) {
+        const result = await worker.call({ type: "bootstrap", root: bootstrap });
+        this.bootstraps.delete(bootstrap);
+        if (!result.done) this.bootstraps.add(bootstrap);
+        this.preferBootstrap = false;
+        this.retryAt = 0;
+      } else if (read) {
         if ((read.query.type === "totals" || read.query.type === "conversationTotals") && this.writeFailed) throw new Error("History accounting unavailable");
         const revision = this.dirtyRevision;
         if (read.query.type === "history" && this.dirty) throw new Error("History reconciliation pending");
         const result = await worker.call({ type: "query", query: read.query });
+        if (result?.pending) {
+          read.bootstrap = result.pending;
+          this.rememberBootstrap(result.pending);
+          if (!read.finished) this.reads.push(read);
+          return;
+        }
         if (read.query.type === "history" && (this.dirty || revision !== this.dirtyRevision)) throw new Error("History reconciliation pending");
         read.resolve(result);
         this.preferRead = false;
       } else {
         const item = this.queue[0];
-        await worker.call({ type: "apply", writer: this.writer, sequence: item.sequence, event: item.event });
+        const result = await worker.call({ type: "apply", writer: this.writer, sequence: item.sequence, event: item.event });
+        if (result?.pending) {
+          this.rememberBootstrap(result.pending);
+          this.preferRead = true;
+          return;
+        }
+        if (result?.deleting) {
+          this.cleanupNeeded = this.cleanupEnabled;
+          this.preferRead = true;
+          this.retryAt = 0;
+          return;
+        }
         if (this.stopped) return;
+        if (this.cleanupEnabled) this.cleanupNeeded = true;
         this.queue.shift();
         this.bytes -= item.bytes;
         this.retryAt = 0;
@@ -7737,8 +8325,12 @@ var HistoryStore = class {
         this.notify(this.commits);
       }
     } catch (error) {
-      if (read) read.reject(error);
-      else {
+      if (cleanup) this.cleanupNeeded = true;
+      else if (read) read.reject(error);
+      else if (bootstrap && this.queue[0]?.root !== bootstrap) {
+        this.bootstraps.delete(bootstrap);
+        for (const reader2 of [...this.reads]) if (reader2.bootstrap === bootstrap) reader2.reject(error);
+      } else {
         this.writeFailed = true;
         if (error instanceof HistoryInvalid) this.blocked = true;
         this.retryAt = this.now() + HISTORY_RETRY_MS;
@@ -7755,7 +8347,15 @@ var HistoryStore = class {
         this.worker = void 0;
         this.opened = false;
       }
-      read?.settled();
+      if (cleanup) this.cleanupDue = this.now() + cleanupDelay;
+      if (read) {
+        read.started = false;
+        if (read.finished) read.settled();
+      }
+      for (const reader2 of bootstrapReaders) {
+        reader2.started = false;
+        if (reader2.finished) reader2.settled();
+      }
       this.active = false;
       this.pump();
     }
@@ -7771,7 +8371,7 @@ var HistoryStore = class {
     this.maintenanceListeners.clear();
     for (const read of this.reads.splice(0)) read.reject(new Error("History disposed"));
     const end = abortAt + 3500;
-    while ((this.queue.length || this.active) && performance.now() < end - 300 && !this.blocked) {
+    while ((this.queue.length || this.active || this.cleanupNeeded) && performance.now() < end - 300 && !this.blocked) {
       this.pump();
       await new Promise((resolve) => setTimeout(resolve, 10));
     }
@@ -8104,16 +8704,18 @@ function sessionPresence(result, session) {
 }
 var HistoryMaintenance = class {
   constructor(scope, store, get, invalidate = () => {
-  }) {
+  }, now = () => performance.now()) {
     this.scope = scope;
     this.store = store;
     this.get = get;
     this.invalidate = invalidate;
+    this.now = now;
   }
   scope;
   store;
   get;
   invalidate;
+  now;
   stopped = false;
   active = false;
   abort = new AbortController();
@@ -8133,7 +8735,7 @@ var HistoryMaintenance = class {
     if (!this.stopped) this.timer = setTimeout(() => {
       this.timer = void 0;
       void this.step().finally(() => this.schedule());
-    }, 2e3);
+    }, this.store.maintenanceDirty ? 10 : 2e3);
   }
   /** Also exposed for deterministic fixtures. Concurrent calls cannot duplicate work. */
   async step() {
@@ -8141,6 +8743,7 @@ var HistoryMaintenance = class {
     this.active = true;
     const turn = this.turn = new AbortController();
     const deadline = setTimeout(() => turn.abort(), 5e3);
+    const until = this.now() + 50, rows = this.store.maintenanceDirty ? 100 : 1;
     try {
       if (this.scanRevision !== this.store.maintenanceScanRevision) {
         this.scanRevision = this.store.maintenanceScanRevision;
@@ -8155,41 +8758,51 @@ var HistoryMaintenance = class {
         this.finishPass();
         return;
       }
-      if (!this.page.length) {
-        const read = this.store.query({ type: "sessions", scope: this.scope, after: this.after, limit: 100 }, turn.signal);
-        let result;
-        try {
-          result = await read;
-        } finally {
-          await read.settled?.catch(() => {
-          });
-        }
+      for (let n = 0; n < rows; n++) {
         if (this.stopped || turn.signal.aborted) {
           this.healthy = false;
           return;
         }
-        if (!result.sessions.length) {
-          this.ending = true;
-          this.finishPass();
+        if (this.scanRevision !== this.store.maintenanceScanRevision) return;
+        if (!this.page.length) {
+          const read = this.store.query({ type: "sessions", scope: this.scope, after: this.after, limit: 100 }, turn.signal);
+          let result;
+          try {
+            result = await read;
+          } finally {
+            await read.settled?.catch(() => {
+            });
+          }
+          if (this.stopped || turn.signal.aborted) {
+            this.healthy = false;
+            return;
+          }
+          if (this.scanRevision !== this.store.maintenanceScanRevision) return;
+          if (!result.sessions.length) {
+            this.ending = true;
+            this.finishPass();
+            return;
+          }
+          this.page = result.sessions;
+          this.after = result.after;
+        }
+        if (this.now() >= until) return;
+        const context = this.page.shift();
+        if (context.scope !== this.scope) {
+          this.healthy = false;
           return;
         }
-        this.page = result.sessions;
-        this.after = result.after;
-      }
-      const context = this.page.shift();
-      if (context.scope !== this.scope) {
-        this.healthy = false;
-        return;
-      }
-      const root = await this.presence(context.root);
-      if (this.stopped) return;
-      if (root === "missing") this.remove({ ...context, session: context.root });
-      else if (root === "unknown") this.healthy = false;
-      else if (context.session !== context.root) {
-        const child = await this.presence(context.session);
-        if (this.stopped) return;
-        if (child === "missing") this.remove(context);
-        else if (child === "unknown") this.healthy = false;
+        const root = await this.presence(context.root);
+        if (this.stopped || this.scanRevision !== this.store.maintenanceScanRevision) return;
+        if (root === "missing") this.remove({ ...context, session: context.root });
+        else if (root === "unknown") this.healthy = false;
+        else if (context.session !== context.root) {
+          const child = await this.presence(context.session);
+          if (this.stopped || this.scanRevision !== this.store.maintenanceScanRevision) return;
+          if (child === "missing") this.remove(context);
+          else if (child === "unknown") this.healthy = false;
+        }
+        if (this.now() >= until) return;
       }
     } catch {
       this.healthy = false;
@@ -8395,7 +9008,14 @@ var HistoryController = class {
     const selected = this.state.selection;
     if (selected?.entry && (selected.session ?? selected.record?.context.session) === id) {
       this.deletedEntries.add(selected.entry);
-      this.update({ status: "loading" });
+      this.update({ status: "loading", selection: {
+        revision: selected.revision,
+        total: selected.total,
+        rank: selected.rank,
+        entry: selected.entry,
+        order: selected.order,
+        session: id
+      } });
     }
     this.refresh?.refresh();
   }
@@ -8411,7 +9031,8 @@ var HistoryController = class {
     clearTimeout(this.targetTimeout);
     this.target = void 0;
     this.deletedEntries.clear();
-    this.update({ open: false });
+    this.scroll = 0;
+    this.update({ open: false, status: "loading", selection: void 0 });
   }
   dispose() {
     this.stopped = true;
@@ -8431,7 +9052,7 @@ import { insert as _$insert2 } from "@opentui/solid";
 import { setProp as _$setProp3 } from "@opentui/solid";
 import { createElement as _$createElement3 } from "@opentui/solid";
 import { createEffect, createMemo as createMemo2, createSignal as createSignal2, onCleanup as onCleanup3, Show } from "solid-js";
-import { CliRenderEvents, CodeRenderable, RGBA, ScrollBoxRenderable } from "@opentui/core";
+import { CliRenderEvents, CodeRenderable as CodeRenderable2, RGBA as RGBA2, ScrollBoxRenderable } from "@opentui/core";
 
 // src/history-layout.ts
 init_define_REVIEW_PROMPTS();
@@ -8466,20 +9087,45 @@ import { setProp as _$setProp2 } from "@opentui/solid";
 import { use as _$use } from "@opentui/solid";
 import { createElement as _$createElement2 } from "@opentui/solid";
 import { createMemo, onCleanup as onCleanup2 } from "solid-js";
-import { SyntaxStyle } from "@opentui/core";
+import { CodeRenderable, SyntaxStyle } from "@opentui/core";
+
+// src/syntax-retirement.ts
+init_define_REVIEW_PROMPTS();
+async function retireDefaultMarkdownStyle(style, latestHighlights2) {
+  await Promise.allSettled(latestHighlights2);
+  style.destroy();
+}
+
+// src/review-description.tsx
+function latestHighlights(node) {
+  if (!node) return [];
+  return [...node instanceof CodeRenderable ? [node.highlightingDone] : [], ...node.getChildren().flatMap(latestHighlights)];
+}
 function ReviewDescription(props) {
-  const style = createMemo(() => {
+  let description;
+  const style = createMemo((previous) => {
     const syntax = SyntaxStyle.fromStyles(reviewSyntaxStyles(props.api.theme.current));
-    onCleanup2(() => {
-      void props.api.renderer.idle().catch(() => {
-      }).finally(() => syntax.destroy());
-    });
+    if (previous) {
+      const pending = latestHighlights(description);
+      if (description && !description.isDestroyed) {
+        description.syntaxStyle = syntax;
+        description.refreshStyles();
+      }
+      void retireDefaultMarkdownStyle(previous, pending);
+    }
     return syntax;
   });
+  onCleanup2(() => {
+    const pending = latestHighlights(description);
+    description?.destroyRecursively();
+    void retireDefaultMarkdownStyle(style(), pending);
+  });
   return (() => {
     var _el$ = _$createElement2("markdown");
-    var _ref$ = props.ref;
-    typeof _ref$ === "function" ? _$use(_ref$, _el$) : props.ref = _el$;
+    _$use((value) => {
+      description = value;
+      props.ref?.(value);
+    }, _el$);
     _$setProp2(_el$, "conceal", true);
     _$setProp2(_el$, "tableOptions", {
       style: "grid"
@@ -8508,7 +9154,7 @@ function owns(node, hit) {
   return node.num === hit || node instanceof ScrollBoxRenderable && owns(node.wrapper, hit) || node.getChildren().some((child) => owns(child, hit));
 }
 function ready(node) {
-  return !(node instanceof CodeRenderable && node.isHighlighting) && node.getChildren().every(ready);
+  return !(node instanceof CodeRenderable2 && node.isHighlighting) && node.getChildren().every(ready);
 }
 function Button(props) {
   const [hover, setHover] = createSignal2(false);
@@ -8522,7 +9168,7 @@ function Button(props) {
       g,
       b
     } = theme.warning;
-    return 0.299 * r + 0.587 * g + 0.114 * b > 0.5 ? RGBA.fromInts(0, 0, 0) : RGBA.fromInts(255, 255, 255);
+    return 0.299 * r + 0.587 * g + 0.114 * b > 0.5 ? RGBA2.fromInts(0, 0, 0) : RGBA2.fromInts(255, 255, 255);
   };
   return (() => {
     var _el$ = _$createElement3("box"), _el$2 = _$createElement3("text");
@@ -8905,7 +9551,7 @@ import { createComponent as _$createComponent3 } from "@opentui/solid";
 import { setProp as _$setProp4 } from "@opentui/solid";
 import { createElement as _$createElement4 } from "@opentui/solid";
 import { createEffect as createEffect2, createMemo as createMemo3, createSignal as createSignal3, Index, Match, onCleanup as onCleanup4, Show as Show2, Switch } from "solid-js";
-import { CliRenderEvents as CliRenderEvents2, CodeRenderable as CodeRenderable2, RGBA as RGBA2, ScrollBoxRenderable as ScrollBoxRenderable2 } from "@opentui/core";
+import { CliRenderEvents as CliRenderEvents2, CodeRenderable as CodeRenderable3, RGBA as RGBA3, ScrollBoxRenderable as ScrollBoxRenderable2 } from "@opentui/core";
 
 // src/review-geometry.ts
 init_define_REVIEW_PROMPTS();
@@ -8921,11 +9567,43 @@ function reviewGeometry(input, footerContents = true) {
 }
 var ReviewGeometryProof = class {
   painted;
-  visible(input, frame = false) {
+  renewed = false;
+  invalidate() {
+    this.renewed = true;
+  }
+  state(input, frame = false) {
     const regions = [input.panel, input.heading, input.rating, ...input.fast ? [] : [input.report, input.footer]];
     const bounds = [input.width, input.height, ...regions.flatMap((region) => region ? [region.x, region.y, region.width, region.height] : [])];
-    if (frame) this.painted = reviewGeometry(input) ? { regions, bounds } : void 0;
-    return reviewGeometry(input, false) && !!this.painted && regions.length === this.painted.regions.length && regions.every((region, i) => region === this.painted.regions[i]) && bounds.length === this.painted.bounds.length && bounds.every((value, i) => value === this.painted.bounds[i]);
+    if (frame) {
+      this.painted = reviewGeometry(input) ? { regions, bounds, owner: input.owner } : void 0;
+      this.renewed = false;
+      return this.painted ? "visible" : "lost";
+    }
+    const same = !this.renewed && !!this.painted && input.owner === this.painted.owner && regions.length === this.painted.regions.length && regions.every((region, i) => region === this.painted.regions[i]) && bounds.length === this.painted.bounds.length && bounds.every((value, i) => value === this.painted.bounds[i]);
+    if (reviewGeometry(input, false)) return same ? "visible" : "pending";
+    if (this.painted && input.height === this.painted.bounds[1] && regions.every((region, i) => region === this.painted.regions[i]) && bounds.slice(2).every((value, i) => value === this.painted.bounds[i + 2])) {
+      const dx = input.width - this.painted.bounds[0];
+      const shift = (region) => region && {
+        x: region.x + dx,
+        y: region.y,
+        width: region.width,
+        height: region.height,
+        visible: region.visible,
+        isDestroyed: region.isDestroyed
+      };
+      if (reviewGeometry({
+        ...input,
+        panel: shift(input.panel),
+        heading: shift(input.heading),
+        rating: shift(input.rating),
+        report: shift(input.report),
+        footer: shift(input.footer)
+      }, false)) return "pending";
+    }
+    return "lost";
+  }
+  visible(input, frame = false) {
+    return this.state(input, frame) === "visible";
   }
 };
 
@@ -8962,7 +9640,7 @@ function ReviewLoading(props) {
                 brightness,
                 alpha
               } = cell();
-              return RGBA2.fromValues(Math.min(1, base.r * brightness), Math.min(1, base.g * brightness), Math.min(1, base.b * brightness), alpha);
+              return RGBA3.fromValues(Math.min(1, base.r * brightness), Math.min(1, base.g * brightness), Math.min(1, base.b * brightness), alpha);
             });
             return (() => {
               var _el$3 = _$createElement4("span");
@@ -8985,7 +9663,7 @@ function ReviewLoading(props) {
   })();
 }
 function highlightingComplete(node) {
-  return !(node instanceof CodeRenderable2 && node.isHighlighting) && node.getChildren().every(highlightingComplete);
+  return !(node instanceof CodeRenderable3 && node.isHighlighting) && node.getChildren().every(highlightingComplete);
 }
 function ownsHit(node, hit) {
   return node.num === hit || node instanceof ScrollBoxRenderable2 && ownsHit(node.wrapper, hit) || node.getChildren().some((child) => ownsHit(child, hit));
@@ -9001,7 +9679,7 @@ function ReviewButton(props) {
       g,
       b
     } = theme.warning;
-    return 0.299 * r + 0.587 * g + 0.114 * b > 0.5 ? RGBA2.fromInts(0, 0, 0) : RGBA2.fromInts(255, 255, 255);
+    return 0.299 * r + 0.587 * g + 0.114 * b > 0.5 ? RGBA3.fromInts(0, 0, 0) : RGBA3.fromInts(255, 255, 255);
   };
   return (() => {
     var _el$4 = _$createElement4("box"), _el$5 = _$createElement4("text");
@@ -9187,14 +9865,15 @@ function LiveReviewPanel(props) {
       return false;
     }
   };
-  const observeRender = (stage, eligible) => {
+  const observeRender = (stage, eligible, proof, check) => {
     if (!historyProbe || !panel) return;
-    const countCode = (node) => Number(node instanceof CodeRenderable2) + node.getChildren().reduce((total, child) => total + countCode(child), 0);
+    const countCode = (node) => Number(node instanceof CodeRenderable3) + node.getChildren().reduce((total, child) => total + countCode(child), 0);
     const assessment = view().assessment;
     const auto = view().autoApproval;
     try {
       const pending = historyProbe.observe(Object.freeze({
         stage,
+        check,
         at: performance.now(),
         panel: panel.num,
         markdown: description?.num,
@@ -9208,6 +9887,7 @@ function LiveReviewPanel(props) {
         covered: coveredByProbe(),
         physical: ownsPanelProbes(panel),
         eligible,
+        presentation: proof ?? presentation().state,
         auto: auto?.status,
         seconds: auto?.status === "countdown" ? auto.seconds : void 0,
         history: historyState().open ? historyState().status : void 0
@@ -9217,39 +9897,64 @@ function LiveReviewPanel(props) {
     } catch {
     }
   };
-  const visible = (frame = false) => {
-    if (!props.sidebarSession()) return;
-    if (!geometry.visible({
+  const presentation = (frame = false) => {
+    const lost = {
+      state: "lost"
+    };
+    const pending = {
+      state: "pending",
+      id
+    };
+    if (!props.sidebarSession() || select()?.request.id !== id) return lost;
+    const sidebar = props.sidebarState();
+    if (sidebar === "lost") return lost;
+    const layout = geometry.state({
       width: api.renderer.width,
       height: api.renderer.height,
       fast: config?.fastMode === true,
+      owner: props.sidebarOwner(),
       panel,
       heading,
       rating: ratingRegion,
       report: scroll,
       footer
-    }, frame) || select()?.request.id !== id) return;
-    if (config?.fastMode) return ownsPanelProbes(panel) ? id : void 0;
-    if (!paintedAssessment || paintedAssessment !== view().assessment) return;
+    }, frame);
+    if (layout === "lost") return lost;
+    if (sidebar === "pending" || layout === "pending") return pending;
+    if (config?.fastMode) return ownsPanelProbes(panel) ? {
+      state: "visible",
+      id
+    } : lost;
+    if (!paintedAssessment || paintedAssessment !== view().assessment) return pending;
     if (readyAssessment !== paintedAssessment) {
-      if (!description || description.isDestroyed || !description.getChildrenCount() || !highlightingComplete(description)) return;
+      if (!description || description.isDestroyed || !description.getChildrenCount() || !highlightingComplete(description)) return pending;
       readyAssessment = paintedAssessment;
     }
-    if (!ownsPanelProbes(panel) && !coveredByProbe()) return;
-    return id;
+    if (!ownsPanelProbes(panel) && !coveredByProbe()) return lost;
+    return {
+      state: "visible",
+      id
+    };
   };
-  const releasePresentation = config?.autoApprove ? props.registerPresentation(visible) : void 0;
+  const releasePresentation = config?.autoApprove ? props.registerPresentation((check = "eligibility") => {
+    const proof = presentation();
+    observeRender("presentation", proof.state === "visible", proof.state, check);
+    return proof;
+  }) : void 0;
   if (config?.autoApprove || props.traceFor) {
+    const resize = () => geometry.invalidate();
+    api.renderer.on(CliRenderEvents2.RESIZE, resize);
     const frame = () => {
       historyCover.frame();
-      const presented = visible(true);
+      const proof = presentation(true);
+      const presented = proof.state === "visible";
       const trace = props.traceFor?.(view());
       if (trace) {
         if (select()?.request.id === id && panel && ownsHit(panel, api.renderer.hitTest(panel.x + 2, panel.y + 1)) && ownsHit(panel, api.renderer.hitTest(panel.x + 2, panel.y + 3)) && (rating() !== void 0 || report() && description && !description.isDestroyed && description.getChildrenCount() && highlightingComplete(description))) trace.once("first-display");
         if (presented && paintedAssessment && paintedAssessment === view().assessment && ownsPanelProbes(panel)) trace.once("final-render");
       }
       if (config?.autoApprove) {
-        props.onPresented(presented);
+        props.onPresented(proof);
         if (presented && view().autoApproval?.status === "countdown") trace?.once("approval-countdown");
       }
       observeRender("frame", !!presented);
@@ -9257,6 +9962,7 @@ function LiveReviewPanel(props) {
     api.renderer.on(CliRenderEvents2.FRAME, frame);
     onCleanup4(() => {
       api.renderer.off(CliRenderEvents2.FRAME, frame);
+      api.renderer.off(CliRenderEvents2.RESIZE, resize);
       if (config?.autoApprove) {
         releasePresentation();
         props.onPresented();
@@ -9266,8 +9972,8 @@ function LiveReviewPanel(props) {
   return (
     // The verified host's sidebar is 42 columns, including its padding.
     // The app slot lets this cover its title, sections, and footer while
-    // the original sidebar remains mounted beneath it on root routes. Child
-    // routes have no native sidebar, but use this same physical presentation.
+    // the original sidebar remains mounted beneath it on root routes. Descendant
+    // routes hide the enclosing slot; automation has its own route-only proof.
     (() => {
       var _el$1 = _$createElement4("box"), _el$10 = _$createElement4("text"), _el$11 = _$createElement4("b"), _el$12 = _$createElement4("box"), _el$17 = _$createElement4("scrollbox");
       _$insertNode3(_el$1, _el$10);
@@ -9441,6 +10147,39 @@ function LiveReviewPanel(props) {
   );
 }
 
+// src/review-presentation.ts
+init_define_REVIEW_PROMPTS();
+import { createEffect as createEffect3, createMemo as createMemo4, untrack } from "solid-js";
+function observePresentationOwnership(ownership, presentation, presented) {
+  const current = createMemo4(ownership, void 0, { equals: (a, b) => a.session === b.session && a.root === b.root && a.owner === b.owner && a.state === b.state && a.suppressed === b.suppressed });
+  createEffect3(() => {
+    current();
+    untrack(() => presented(presentation()));
+  });
+}
+var SidebarPresentation = class {
+  owner;
+  handoff;
+  mount(session, width) {
+    const token = /* @__PURE__ */ Symbol();
+    this.owner = { session, token, wide: width > 120 };
+    this.handoff = void 0;
+    return token;
+  }
+  unmount(token, session, width, hidden) {
+    const owner = this.owner;
+    if (!owner || owner.token !== token) return;
+    this.owner = void 0;
+    this.handoff = !hidden && owner.session === session && owner.wide !== width > 120 ? { session } : void 0;
+  }
+  state(session) {
+    return this.owner?.session === session ? "visible" : this.handoff?.session === session ? "pending" : "lost";
+  }
+  frame() {
+    this.handoff = void 0;
+  }
+};
+
 // src/tui.tsx
 function contextReader(api, trace) {
   const location = () => ({
@@ -9540,11 +10279,21 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
   const historyStore = new HistoryStore(api.state.path.state);
   const [views, setViews] = createSignal4([]);
   const [sidebar, setSidebar] = createSignal4();
+  const sidebarProof = new SidebarPresentation();
+  const routeSessions = new RouteSessions((id) => api.state.session.get(id));
+  const [sessionRevision, setSessionRevision] = createSignal4(0);
+  const session = (id) => {
+    sessionRevision();
+    return routeSessions.get(id);
+  };
+  for (const type of ["session.created", "session.updated"]) api.event.on(type, (event) => {
+    if (routeSessions.remember(event.properties.info)) setSessionRevision((value) => value + 1);
+  });
   const hostTrace = observer ? new DiagnosticTrace(observer, 0) : void 0;
   const traces = observer ? /* @__PURE__ */ new WeakMap() : void 0;
   let reviewSequence = 0;
   const reader2 = contextReader(api, hostTrace);
-  const modes = new SessionModes(new SessionModeStore(path15.join(api.state.path.state, "opencode-reviewer", "session-mode-v1"), api.state.path.directory), async (id, signal) => api.state.session.get(id) ?? reader2.session(id, signal));
+  const modes = new SessionModes(new SessionModeStore(path15.join(api.state.path.state, "opencode-reviewer", "session-mode-v1"), api.state.path.directory), async (id, signal) => session(id) ?? reader2.session(id, signal));
   const history = new HistoryCoordinator(api.state.path.directory, historyStore, (id, signal) => modes.root(id, signal));
   const lifetime = lifetimeTracker(api, historyStore, (id, signal) => history.root(id, signal));
   const [historyState, setHistoryState] = createSignal4({
@@ -9617,36 +10366,33 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
   }
   const files = new FileAccess(fileIO);
   const approval = approvalTransport(api.client, api.state.path.directory);
-  let visibleApproval = () => void 0;
-  const controller = new Controller(async (request, parent, onIdentified, onProgress, execution = {
+  let visibleApproval = () => ({
+    state: "lost"
+  });
+  let approvalPresentation = () => ({
+    state: "lost"
+  });
+  const controller = new Controller((request, parent, onIdentified, onProgress, execution = {
     review: randomUUID5()
   }) => {
     const trace = observer ? new DiagnosticTrace(observer, ++reviewSequence) : void 0;
     if (trace) traces.set(request, trace);
     const reviewReader = trace ? contextReader(api, trace) : reader2;
-    let worker;
-    try {
-      return await withDeadline(parent, config?.timeoutMs ?? 3e4, async (signal) => {
-        const evidence = await evaluateEvidence(request, reviewReader, reviewOptions ?? {
-          reviewBash: true,
-          reviewEdits: true
-        }, config, configError, signal, onIdentified, files);
-        if (!evidence) return null;
-        signal.throwIfAborted();
-        const result = review(evidence, config, signal, {
-          prompts,
-          pricing: (model) => modelPricing(api.state.provider, config.baseURL, model),
-          onProgress,
-          onDiagnostics: trace?.forward,
-          observation: history.observation(request, evidence.kind, config, execution)
-        });
-        worker = result;
-        return result;
-      });
-    } finally {
-      await worker?.catch(() => {
+    return ownedReview(parent, config?.timeoutMs ?? 3e4, async (signal) => {
+      const evidence = await evaluateEvidence(request, reviewReader, reviewOptions ?? {
+        reviewBash: true,
+        reviewEdits: true
+      }, config, configError, signal, onIdentified, files);
+      if (!evidence) return null;
+      signal.throwIfAborted();
+      return review(evidence, config, signal, {
+        prompts,
+        pricing: (model) => modelPricing(api.state.provider, config.baseURL, model),
+        onProgress,
+        onDiagnostics: trace?.forward,
+        observation: history.observation(request, evidence.kind, config, execution)
       });
-    }
+    });
   }, (views2) => {
     setViews(views2);
     if (!controller.reconciling) notifications?.snapshot(controller.pendingViews);
@@ -9661,9 +10407,14 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
         },
         once: (request, signal) => measured(traces?.get(request), "approval-reply", () => approval.once(request, signal))
       } : approval,
-      visibleID: () => visibleApproval()
+      visibleID: () => {
+        const proof = visibleApproval();
+        return proof.state === "visible" ? proof.id : void 0;
+      },
+      presentation: (check) => approvalPresentation(check)
     },
     modes,
+    session,
     onApproval: (fact) => {
       history.approval(fact);
       notifications?.fact(fact);
@@ -9678,6 +10429,8 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
   api.event.on("message.updated", (event) => history.message(event.properties.info));
   api.event.on("session.deleted", (event) => {
     const info = event.properties.info;
+    routeSessions.deleted(info.id);
+    setSessionRevision((value) => value + 1);
     browser.deleted(info.id);
     const deletion = history.sessionDeleted(info);
     controller.deleted(info.id);
@@ -9724,27 +10477,28 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
   api.slots.register({
     slots: {
       sidebar_content: (_ctx, props) => {
-        const token = /* @__PURE__ */ Symbol();
-        createEffect3(() => {
+        createEffect4(() => {
+          const token = sidebarProof.mount(props.session_id, api.renderer.width);
           setSidebar({
             sessionID: props.session_id,
             token
           });
-          onCleanup5(() => setSidebar((current) => current?.token === token ? void 0 : current));
+          onCleanup5(() => {
+            const route = api.route.current;
+            sidebarProof.unmount(token, route.name === "session" ? route.params?.sessionID : void 0, api.renderer.width, api.ui.dialog.open || api.kv.get("sidebar") === "hide");
+            setSidebar((current) => current?.token === token ? void 0 : current);
+          });
         });
         return null;
       },
       app: () => {
-        const [width, setWidth] = createSignal4(api.renderer.width);
-        const resized = () => setWidth(api.renderer.width);
-        api.renderer.on(CliRenderEvents3.RESIZE, resized);
-        onCleanup5(() => api.renderer.off(CliRenderEvents3.RESIZE, resized));
-        createEffect3(() => {
+        const handoff = new RouteHandoff();
+        createEffect4(() => {
           const route = api.route.current;
           notifications?.routeChanged();
           browser.route(route.name === "session" ? route.params?.sessionID : void 0);
         });
-        createEffect3(() => {
+        createEffect4(() => {
           const requested = revealHistory();
           if (!requested) return;
           const route = api.route.current;
@@ -9769,27 +10523,92 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
           setRevealHistory(void 0);
           if (sidebar()?.sessionID !== requested.session) api.keymap.dispatchCommand("session.sidebar.toggle");
         });
-        if (notifications) createEffect3(() => {
+        if (notifications) createEffect4(() => {
           const route = api.route.current;
           notifications?.visit(route.name === "session" ? route.params?.sessionID : void 0);
         });
-        const presentationSession = () => {
+        const routeSession = () => {
           const route = api.route.current;
           if (api.ui.dialog.open || route.name !== "session") return;
           const id = route.params?.sessionID;
-          if (typeof id !== "string") return;
-          if (sidebar()?.sessionID === id) return id;
-          if (id && api.state.session.get(id)?.parentID && width() >= 120 && api.renderer.width >= 120) return id;
+          return typeof id === "string" ? id : void 0;
+        };
+        const rootSession = () => {
+          const id = routeSession();
+          return id && conversationRoot(id, session) === id ? id : void 0;
         };
+        const sidebarState = () => {
+          const id = rootSession();
+          if (!id) return "lost";
+          sidebar();
+          return sidebarProof.state(id);
+        };
+        const presentationSession = () => sidebarState() === "visible" ? routeSession() : void 0;
         const select = () => {
           const route = api.route.current;
           if (api.ui.dialog.open || route.name !== "session") return;
           const id = route.params?.sessionID;
-          return visibleReview(controller.views, typeof id === "string" ? id : void 0, (id2) => api.state.session.get(id2));
+          return visibleReview(controller.views, typeof id === "string" ? id : void 0, session);
+        };
+        const presentation = (check, painted) => {
+          const route = routeSession();
+          const root = conversationRoot(route, session);
+          handoff.observe(route, root);
+          if (!route || !root || api.kv.get("sidebar") === "hide") return {
+            state: "lost"
+          };
+          const selected = select();
+          if (!selected) return {
+            state: "lost"
+          };
+          if (route !== root) return routeCovered(api.renderer.root, api.renderer.width, api.renderer.height) ? {
+            state: "lost"
+          } : {
+            state: "route-hidden",
+            id: selected.request.id,
+            root
+          };
+          const proof = painted ?? visibleApproval(check);
+          if (proof.state === "lost" && handoff.pending(root)) return {
+            state: "pending",
+            id: selected.request.id
+          };
+          return proof;
+        };
+        approvalPresentation = presentation;
+        const sidebarFrame = () => {
+          sidebarProof.frame();
+          handoff.frame();
+          const route = routeSession();
+          if (!route || conversationRoot(route, session) !== route || !select()) controller.presented(presentation());
         };
-        const current = createMemo4(() => {
+        api.renderer.on(CliRenderEvents3.FRAME, sidebarFrame);
+        onCleanup5(() => {
+          api.renderer.off(CliRenderEvents3.FRAME, sidebarFrame);
+          if (approvalPresentation === presentation) approvalPresentation = () => ({
+            state: "lost"
+          });
+          controller.presented();
+        });
+        const current = createMemo5(() => {
+          views();
+          return select();
+        });
+        observePresentationOwnership(() => {
+          const route = routeSession(), root = conversationRoot(route, session);
+          return {
+            session: route,
+            root,
+            owner: sidebar()?.token,
+            state: sidebarState(),
+            suppressed: !!root && root !== route && api.kv.get("sidebar") !== "hide"
+          };
+        }, () => presentation(), (proof) => controller.presented(proof));
+        createEffect4(() => {
+          const route = routeSession(), root = conversationRoot(route, session);
+          if (!root || root === route) return;
           views();
-          return presentationSession() ? select() : void 0;
+          untrack2(() => controller.presented(presentation()));
         });
         return (() => {
           var _el$ = _$createElement5("box");
@@ -9813,7 +10632,9 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
                 view,
                 select,
                 config,
-                sidebarSession: presentationSession,
+                sidebarSession: routeSession,
+                sidebarState,
+                sidebarOwner: () => sidebar()?.token,
                 historyState,
                 historyCover,
                 historyProbe,
@@ -9823,11 +10644,13 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
                 },
                 onApprove: (id2) => controller.approveNow(id2),
                 onCancel: (id2) => controller.cancelAutoApproval(id2),
-                onPresented: (id2) => controller.presented(id2),
+                onPresented: (proof) => controller.presented(presentation(void 0, proof)),
                 registerPresentation: (visible) => {
                   visibleApproval = visible;
                   return () => {
-                    if (visibleApproval === visible) visibleApproval = () => void 0;
+                    if (visibleApproval === visible) visibleApproval = () => ({
+                      state: "lost"
+                    });
                   };
                 }
               });
@@ -9835,22 +10658,19 @@ async function reviewTui(api, options, fileIO, observer, notificationBackend, hi
           }), null);
           _$insert4(_el$, _$createComponent4(Show3, {
             get when() {
-              return _$memo3(() => !!(historyState().open && sidebar() && !api.ui.dialog.open && api.route.current.name === "session"))() && api.route.current.params?.sessionID === sidebar()?.sessionID;
+              return _$memo3(() => !!historyState().open)() && rootSession();
             },
-            get children() {
-              return _$createComponent4(HistoryView, {
-                api,
-                controller: browser,
-                get state() {
-                  return historyState();
-                },
-                input: historyInput,
-                cover: historyCover,
-                get session() {
-                  return sidebar().sessionID;
-                }
-              });
-            }
+            keyed: true,
+            children: (session2) => _$createComponent4(HistoryView, {
+              api,
+              controller: browser,
+              get state() {
+                return historyState();
+              },
+              input: historyInput,
+              cover: historyCover,
+              session: session2
+            })
           }), null);
           _$effect5((_$p) => _$setProp5(_el$, "visible", !!presentationSession() && (!!current() || !!sidebar() && historyState().open), _$p));
           return _el$;