openmausbot 0.1.81 → 0.1.83

package/dist-server/index.js

@@ -7731,10 +7731,10 @@ var require_dist = __commonJS({
 
 // server/index.ts
 import { createHash as createHash31, randomBytes as randomBytes9, randomUUID as randomUUID28, timingSafeEqual as timingSafeEqual5 } from "node:crypto";
-import { existsSync as existsSync32, readFileSync as readFileSync45, rmSync as rmSync9, unlinkSync as unlinkSync14 } from "node:fs";
+import { existsSync as existsSync32, readFileSync as readFileSync45, rmSync as rmSync9 } from "node:fs";
 import { rm as removeDirectory } from "node:fs/promises";
 import { createServer as createServer3 } from "node:http";
-import { extname as extname5, join as join64 } from "node:path";
+import { extname as extname5, join as join65 } from "node:path";
 
 // node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -22479,7 +22479,7 @@ var nodeSchema = external_exports.object({
   approvalGranted: external_exports.boolean().default(false),
   kind: external_exports.enum(["work", "assignment"]).default("work")
 });
-var ROOM_HANDOFF_LIMITS = { depth: 4, requests: 24, executions: 48, lifetimeMs: 30 * 6e4, minRunwayMs: 10 * 6e4, queueMs: 60 * 6e4 };
+var ROOM_HANDOFF_LIMITS = { depth: 4, requests: 24, executions: 48, lifetimeMs: 30 * 6e4, minRunwayMs: 10 * 6e4, queueMs: 60 * 6e4, hardCapMs: 4 * 60 * 6e4 };
 var duration3 = (ms2) => ms2 >= 6e4 ? `${Math.floor(ms2 / 6e4)}m` : `${Math.floor(ms2 / 1e3)}s`;
 var terminal = (n) => ["completed", "failed", "cancelled"].includes(n.status);
 var RoomHandoffs = class {
@@ -22489,10 +22489,14 @@ var RoomHandoffs = class {
   file;
   hooks;
   now;
-  constructor(file2, hooks, now = Date.now) {
+  limits;
+  /** Per-root pause accounting for the tree lifetime clock. */
+  pauses = /* @__PURE__ */ new Map();
+  constructor(file2, hooks, now = Date.now, limits = {}) {
     this.file = file2;
     this.hooks = hooks;
     this.now = now;
+    this.limits = { ...ROOM_HANDOFF_LIMITS, ...limits };
     try {
       const saved = external_exports.array(nodeSchema).max(1e4).parse(JSON.parse(readFileSync(file2, "utf8")));
       const ids = new Map(saved.map((n) => [n.id, n]));
@@ -22533,13 +22537,49 @@ var RoomHandoffs = class {
     }
     return path;
   }
+  /** The tree lifetime clock pauses while any node in the tree is actively
+   * executing: the budget bounds coordination sprawl, not the runtime of
+   * dispatched work. Accounting is in-memory; a restart fails every
+   * interrupted node anyway, so no pause span survives one. */
+  trackExecutionPauses() {
+    const now = this.now();
+    const executing = /* @__PURE__ */ new Set();
+    for (const n of this.nodes.values()) {
+      if (!terminal(n) && n.status === "running") executing.add(n.rootId);
+    }
+    for (const rootId of executing) {
+      const pause = this.pauses.get(rootId) ?? { accumulatedMs: 0 };
+      pause.since ??= now;
+      this.pauses.set(rootId, pause);
+    }
+    for (const [rootId, pause] of this.pauses) {
+      if (pause.since != null && !executing.has(rootId)) {
+        pause.accumulatedMs += now - pause.since;
+        pause.since = void 0;
+      }
+      const root = this.nodes.get(rootId);
+      if (!root || terminal(root)) this.pauses.delete(rootId);
+    }
+  }
+  pausedMs(root) {
+    const pause = this.pauses.get(root.id);
+    if (!pause) return 0;
+    return pause.accumulatedMs + (pause.since != null ? this.now() - pause.since : 0);
+  }
+  /** The lifetime budget consumed so far: wall clock minus paused time. */
+  effectiveAgeMs(root) {
+    return Math.max(0, this.now() - root.createdAt - this.pausedMs(root));
+  }
   /** The earliest moment this node may be failed for lifetime: the tree
    * ceiling, a running node's own start plus a minimum runway, or, for work
-   * parked in a busy teammate's queue, its own queue window (#1238). */
+   * parked in a busy teammate's queue, its own queue window (#1238). The
+   * wall-clock hard cap clamps every extension: a tree that never stops
+   * executing still dies, so runway extensions cannot compound forever. */
   deadline(n) {
     const anchor = n.status === "running" ? n.startedAt ?? n.createdAt : n.createdAt;
-    const ceiling = n.status === "queued" && n.executions === 0 ? anchor + ROOM_HANDOFF_LIMITS.queueMs : this.root(n).createdAt + ROOM_HANDOFF_LIMITS.lifetimeMs;
-    return Math.max(ceiling, anchor + ROOM_HANDOFF_LIMITS.minRunwayMs);
+    const root = this.root(n);
+    const ceiling = n.status === "queued" && n.executions === 0 ? anchor + this.limits.queueMs : root.createdAt + this.limits.lifetimeMs + this.pausedMs(root);
+    return Math.min(Math.max(ceiling, anchor + this.limits.minRunwayMs), root.createdAt + this.limits.hardCapMs);
   }
   /** An ancestor past its ceiling is not failed while a descendant is still
    * running inside its own runway; cancelling would cascade into that work. */
@@ -22559,9 +22599,16 @@ var RoomHandoffs = class {
    * never started reports the queue window it waited out, not the tree's. */
   lifetimeError(n) {
     if (n.status === "queued" && n.executions === 0) {
-      return `Room handoff queue budget exhausted: never started while waiting for a busy teammate after ${duration3(this.now() - n.createdAt)} of the ${duration3(ROOM_HANDOFF_LIMITS.queueMs)} queue window`;
+      return `Room handoff queue budget exhausted: never started while waiting for a busy teammate after ${duration3(this.now() - n.createdAt)} of the ${duration3(this.limits.queueMs)} queue window`;
     }
-    return `Room handoff lifetime budget exhausted: node was ${n.status} after ${duration3(this.now() - this.root(n).createdAt)} of the ${duration3(ROOM_HANDOFF_LIMITS.lifetimeMs)} tree lifetime`;
+    const root = this.root(n);
+    return `Room handoff lifetime budget exhausted: node was ${n.status} after ${duration3(this.effectiveAgeMs(root))} of the ${duration3(this.limits.lifetimeMs)} tree lifetime`;
+  }
+  /** The wall-clock ceiling ignores pauses: it is what stops a tree whose
+   * execution never pauses long enough to age its lifetime budget. */
+  hardCapError(n) {
+    const root = this.root(n);
+    return `Room handoff hard cap exhausted: node was ${n.status} after ${duration3(this.now() - root.createdAt)} of the ${duration3(this.limits.hardCapMs)} wall-clock cap`;
   }
   enqueue(source, generation, parentId, target, key3, text8, approvalGranted = false, rework = false, sourceText = "") {
     if (this.loadError) throw new Error(this.loadError);
@@ -22586,13 +22633,15 @@ var RoomHandoffs = class {
       throw new Error("This agent already completed your assignment. Do not send acknowledgements or approvals as new work. Finish with your decision; results return automatically. Only use rework=true for concrete additional work.");
     }
     if (kind === "work" && target.groupId && path.some((n) => n.groupId === target.groupId)) throw new Error("A room request cannot return to an ancestor room; results are returned automatically");
-    if (kind === "work" && path.filter((n) => n.kind === "work").length > ROOM_HANDOFF_LIMITS.depth) throw new Error("Room handoff depth limit reached");
+    if (kind === "work" && path.filter((n) => n.kind === "work").length > this.limits.depth) throw new Error("Room handoff depth limit reached");
     const root = fresh ? parent : this.root(parent);
     const count = [...this.nodes.values()].filter((n) => n.rootId === parent.rootId && n.parentId).length;
-    if (count >= ROOM_HANDOFF_LIMITS.requests) throw new Error("Room handoff budget exhausted");
-    const remaining = ROOM_HANDOFF_LIMITS.lifetimeMs - (this.now() - root.createdAt);
-    if (remaining < ROOM_HANDOFF_LIMITS.minRunwayMs) {
-      throw new Error(`Room handoff budget exhausted: only ${duration3(Math.max(remaining, 0))} of the ${duration3(ROOM_HANDOFF_LIMITS.lifetimeMs)} tree lifetime remains`);
+    if (count >= this.limits.requests) throw new Error("Room handoff budget exhausted");
+    const lifetimeRemaining = this.limits.lifetimeMs - this.effectiveAgeMs(root);
+    const hardCapRemaining = root.createdAt + this.limits.hardCapMs - this.now();
+    const remaining = Math.min(lifetimeRemaining, hardCapRemaining);
+    if (remaining < this.limits.minRunwayMs) {
+      throw new Error(`Room handoff budget exhausted: only ${duration3(Math.max(remaining, 0))} of the ${duration3(this.limits.lifetimeMs)} tree lifetime remains`);
     }
     if (this.nodes.size >= 1e3) {
       const oldRoots = [...this.nodes.values()].filter((n) => !n.parentId && terminal(n)).sort((a, b3) => a.createdAt - b3.createdAt);
@@ -22693,11 +22742,13 @@ var RoomHandoffs = class {
   }
   tick() {
     if (this.loadError) return;
+    this.trackExecutionPauses();
     for (const n of [...this.nodes.values()].reverse()) {
       if (terminal(n)) continue;
       const error51 = this.hooks.validate(n, n.parentId ? this.nodes.get(n.parentId) : void 0);
-      if (error51 || this.now() > this.deadline(n) && !this.protectsRunner(n) && !this.owesFollowUp(n)) {
-        this.cancelTree(n, error51 ?? this.lifetimeError(n), "failed");
+      const hardCapped = this.now() >= this.root(n).createdAt + this.limits.hardCapMs;
+      if (error51 || hardCapped || this.now() > this.deadline(n) && !this.protectsRunner(n) && !this.owesFollowUp(n)) {
+        this.cancelTree(n, error51 ?? (hardCapped ? this.hardCapError(n) : this.lifetimeError(n)), "failed");
       }
     }
     for (const n of this.nodes.values()) {
@@ -22723,7 +22774,7 @@ var RoomHandoffs = class {
       if (this.hooks.busy(n)) continue;
       const root = this.root(n);
       const executionCost = 1;
-      if (root.executions + executionCost > ROOM_HANDOFF_LIMITS.executions) {
+      if (root.executions + executionCost > this.limits.executions) {
         this.cancelTree(n, "Room execution budget exhausted", "failed");
         continue;
       }
@@ -22732,6 +22783,9 @@ var RoomHandoffs = class {
       root.executions += executionCost;
       n.status = "running";
       n.startedAt = this.now();
+      const pause = this.pauses.get(root.id) ?? { accumulatedMs: 0 };
+      pause.since ??= this.now();
+      this.pauses.set(root.id, pause);
       this.publish(n, root);
       const controller = new AbortController();
       this.controllers.set(n.id, controller);
@@ -22787,9 +22841,9 @@ var CLOUD_COMPUTER_BUSY_ERROR = "this bot's cloud computer is being used by an a
 var APPROVAL_MODES = ["ask", "edits", "auto", "full", "custom"];
 function supportsApprovalMode(driverKind, mode) {
   if (mode === "custom") return driverKind === "codex";
-  if (mode === "edits") return ["claudeAgent", "grokAgent", "antigravityAgent"].includes(driverKind ?? "");
+  if (mode === "edits") return ["claudeAgent", "grokAgent", "antigravityAgent", "qwenAgent", "geminiAgent"].includes(driverKind ?? "");
   if (mode !== "full") return true;
-  return ["codex", "claudeAgent", "antigravityAgent", "cursorAgent", "grokAgent", "opencodeGo"].includes(driverKind ?? "");
+  return ["codex", "claudeAgent", "antigravityAgent", "cursorAgent", "grokAgent", "opencodeGo", "qwenAgent", "geminiAgent"].includes(driverKind ?? "");
 }
 function modelSwitchNeedsAsk(mode, fromDriver, toDriver) {
   return !supportsApprovalMode(toDriver, mode) || (mode === "full" || mode === "custom") && fromDriver !== toDriver;
@@ -23134,6 +23188,9 @@ function approvalModeForOrigin(mode, origin) {
   if (mode === "custom" && origin.peerInitiated) return "auto";
   return mode;
 }
+function delegationInheritsFullAccess(input) {
+  return input.senderIsChief && input.senderHasFullAccess && !input.sameBot && supportsApprovalMode(input.recipientDriverKind, "full");
+}
 var ASKS_A_PERSON = /* @__PURE__ */ new Set(["askuserquestion", "ask_user"]);
 function autoVerdict(mode, tool, context) {
   if (ASKS_A_PERSON.has(tool.replace(/^mcp__[^_]+__/, "").toLowerCase())) {
@@ -23356,7 +23413,8 @@ function parseCmdShim(shim, env) {
     return null;
   }
   const dir = dirname(shim);
-  const targets = [...text8.matchAll(/"%~?dp0%?\\?([^"]+)"/g)].map((m3) => join(dir, m3[1])).filter((p3) => isFile(p3) && basename(p3).toLowerCase() !== "node.exe");
+  const npmEntry = /^SET "NP[MX]_CLI_JS=%~dp0\\([^"]+)"/im.exec(text8);
+  const targets = [...npmEntry ? [npmEntry] : [], ...text8.matchAll(/"%~?dp0%?\\?([^"]+)"/g)].map((m3) => join(dir, m3[1])).filter((p3) => isFile(p3) && basename(p3).toLowerCase() !== "node.exe");
   const script = targets.find((p3) => /\.[cm]?js$/i.test(p3));
   if (script) {
     const node2 = nodeExe(dir, env);
@@ -23650,11 +23708,13 @@ function normalizeImageGenerationUrl(value) {
   return url2.toString().replace(/\/+$/, "");
 }
 
-// server/contracts.ts
+// shared/wire.ts
 var EFFORT_LEVELS = ["none", "low", "medium", "high", "xhigh", "max"];
 function isEffortLevel(value) {
   return typeof value === "string" && EFFORT_LEVELS.includes(value);
 }
+
+// server/contracts.ts
 function isModelVariant(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 256 && value.trim() === value && !new RegExp("\\p{Cc}", "u").test(value);
 }
@@ -23910,6 +23970,9 @@ var BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
 var DEFAULT_ROOM_TURN_TIMEOUT_MINUTES = 5;
 var MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
 var MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+var DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES = 30;
+var DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES = 10;
+var DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES = 240;
 var DEFAULT_MAX_CONCURRENT_BOT_THREADS = 3;
 var MAX_CONCURRENT_BOT_THREADS = 10;
 var MIN_THREAD_EVENT_LOG_BYTES = 256 * 1024;
@@ -23939,8 +24002,16 @@ var vpsConfigSchema = external_exports.object({
   }).optional()
 });
 var roomConfigSchema = external_exports.object({
-  turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES)
-});
+  turnTimeoutMinutes: external_exports.number().int().min(MIN_ROOM_TURN_TIMEOUT_MINUTES).max(MAX_ROOM_TURN_TIMEOUT_MINUTES),
+  /** Room handoff tree lifetime. Active execution pauses this clock; the
+   * hard cap is wall-clock and bounds trees that never stop executing. */
+  handoffLifetimeMinutes: external_exports.number().int().min(1).max(MAX_ROOM_TURN_TIMEOUT_MINUTES).optional(),
+  handoffMinRunwayMinutes: external_exports.number().int().min(1).max(MAX_ROOM_TURN_TIMEOUT_MINUTES).optional(),
+  handoffHardCapMinutes: external_exports.number().int().min(1).max(7 * MAX_ROOM_TURN_TIMEOUT_MINUTES).optional()
+}).refine(
+  (rooms) => (rooms.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) <= (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) && (rooms.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) <= (rooms.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES),
+  { message: "rooms handoff bounds must satisfy handoffMinRunwayMinutes <= handoffLifetimeMinutes <= handoffHardCapMinutes" }
+);
 var localVmConfigSchema = external_exports.object({
   mode: external_exports.enum(["shared", "per-bot"]).optional(),
   maxInstances: external_exports.number().int().min(MIN_LOCAL_VM_MAX_INSTANCES).max(MAX_LOCAL_VM_MAX_INSTANCES).optional()
@@ -24189,7 +24260,10 @@ var appConfigSchema = external_exports.object({
     maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS),
     /** Cap each per-thread events/ and native/ NDJSON log at this many
      * bytes; absent (the default) keeps today's unbounded growth (#1280). */
-    eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional()
+    eventLogMaxBytes: external_exports.number().int().min(MIN_THREAD_EVENT_LOG_BYTES).max(MAX_THREAD_EVENT_LOG_BYTES).optional(),
+    /** Days a closed or archived thread's event logs survive (#1280).
+     * Absent keeps them forever. */
+    eventLogRetentionDays: external_exports.number().int().min(1).max(3650).optional()
   }).strict().optional(),
   localVm: localVmConfigSchema.optional(),
   features: featureConfigSchema.optional(),
@@ -24272,6 +24346,13 @@ function vpsSshAlias(cfg2) {
 function roomTurnTimeoutMinutes(cfg2) {
   return cfg2.rooms?.turnTimeoutMinutes ?? DEFAULT_ROOM_TURN_TIMEOUT_MINUTES;
 }
+function roomHandoffLimits(cfg2) {
+  return {
+    lifetimeMs: (cfg2.rooms?.handoffLifetimeMinutes ?? DEFAULT_ROOM_HANDOFF_LIFETIME_MINUTES) * 6e4,
+    minRunwayMs: (cfg2.rooms?.handoffMinRunwayMinutes ?? DEFAULT_ROOM_HANDOFF_MIN_RUNWAY_MINUTES) * 6e4,
+    hardCapMs: (cfg2.rooms?.handoffHardCapMinutes ?? DEFAULT_ROOM_HANDOFF_HARD_CAP_MINUTES) * 6e4
+  };
+}
 function maxConcurrentBotThreads(cfg2) {
   return cfg2.threads?.maxConcurrentPerBot ?? DEFAULT_MAX_CONCURRENT_BOT_THREADS;
 }
@@ -24279,6 +24360,9 @@ function threadEventLogMaxBytes(cfg2) {
   const cap = cfg2.threads?.eventLogMaxBytes;
   return typeof cap === "number" && Number.isFinite(cap) && cap > 0 ? cap : null;
 }
+function threadEventLogRetentionDays(cfg2) {
+  return cfg2.threads?.eventLogRetentionDays ?? null;
+}
 function localVmMode(cfg2) {
   return cfg2.localVm?.mode ?? DEFAULT_LOCAL_VM_MODE;
 }
@@ -25170,13 +25254,7 @@ function gateServer(input) {
   };
 }
 
-// server/redact.ts
-var SECRET_KEY_PARTS = ["token", "secret", "password", "passwd", "apikey", "api_key", "authorization", "auth_token"];
-function isSecretName(name2) {
-  const lower = name2.toLowerCase();
-  if (SECRET_KEY_PARTS.some((part) => lower.includes(part))) return true;
-  return /(^|[_.-])keys?$/.test(lower);
-}
+// shared/redact.ts
 var REDACTION_MARKER = /^«redacted \d+ chars»$/;
 var mask = (value) => REDACTION_MARKER.test(value) ? value : `\xABredacted ${value.length} chars\xBB`;
 var KEY_PREFIXES = [
@@ -25225,6 +25303,14 @@ ${close}`);
   out = out.replace(URL_USERINFO, (_m, lead, secret, at2) => `${lead}${mask(secret)}${at2}`);
   return out;
 }
+
+// server/redact.ts
+var SECRET_KEY_PARTS = ["token", "secret", "password", "passwd", "apikey", "api_key", "authorization", "auth_token"];
+function isSecretName(name2) {
+  const lower = name2.toLowerCase();
+  if (SECRET_KEY_PARTS.some((part) => lower.includes(part))) return true;
+  return /(^|[_.-])keys?$/.test(lower);
+}
 function redactSecrets(input, depth = 0) {
   if (typeof input === "string") return redactSecretsInText(input);
   if (depth > 12 || input === null || typeof input !== "object") return input;
@@ -27068,8 +27154,8 @@ var ClaudeDriver = {
     };
     const steer = async (threadId, text8) => {
       const s4 = sessions2.get(threadId);
-      if (!s4 || !s4.turn || s4.turn.settled || s4.closing || s4.child.exitCode !== null) return false;
-      return writeUser(s4, threadId, claudeUserMessage(text8, void 0));
+      if (!s4 || !s4.turn || s4.turn.settled || s4.closing || s4.child.exitCode !== null) return "refused";
+      return await writeUser(s4, threadId, claudeUserMessage(text8, void 0)) ? "steered" : "refused";
     };
     const login = new ClaudeLoginController({ cli: config2.cli, environment, onAuthenticated: async () => {
       await refreshModels();
@@ -38823,6 +38909,20 @@ function canReachPeer(from, target) {
 function reachablePeers(bots, from) {
   return bots.filter((bot) => canReachPeer(from, bot));
 }
+function resolveTeammate(bots, from, raw) {
+  const wanted = raw.trim();
+  if (bots.some((bot) => bot.id === wanted)) return { id: wanted, byName: false };
+  const fold2 = (value) => value.replace(/^@/, "").replace(/\s+/g, " ").trim().toLowerCase();
+  const name2 = fold2(wanted);
+  const shown = peerName(wanted) || wanted;
+  if (!name2) return { error: `No bot with id "${shown}" \u2014 call list_bots and copy the exact id from the result` };
+  const matches = reachablePeers(bots, from).filter((bot) => fold2(bot.name) === name2);
+  if (matches.length === 1) return { id: matches[0].id, byName: true };
+  if (matches.length > 1) {
+    return { error: `${matches.length} reachable teammates are named "${shown}" \u2014 call list_bots and use the id of the one you mean` };
+  }
+  return { error: `No bot with id or name "${shown}" \u2014 call list_bots and copy the exact id from the result` };
+}
 var ROSTER_NAME_MAX = 80;
 var ROSTER_ROLE_MAX = 120;
 var ROSTER_ABOUT_MAX = 200;
@@ -38855,7 +38955,7 @@ function renderRoster(team, opts) {
     const role = clip(bot.title ?? "", ROSTER_ROLE_MAX) || "General assistant";
     const about = opts.about ? clip(bot.description ?? "", ROSTER_ABOUT_MAX) : "";
     const availability = peerStatusWords(peerStatus(bot.activity, bot.busy));
-    return `- ${name2} \u2014 ${role}${about ? `: ${about}` : ""} (${availability})`;
+    return `- ${name2} \u2014 ${role}${about ? `: ${about}` : ""} (${availability}) [id: ${clip(bot.id, ROSTER_NAME_MAX)}]`;
   });
   return lines.join("\n") + (overflow > 0 ? `
 - \u2026and ${overflow} more (use list_bots for the full roster).` : "");
@@ -38905,11 +39005,11 @@ function chiefOfStaffSystemPrompt(chiefId, bots, canDelegate, trustedOpenMausSta
     empty: "- No other visible bots are available yet.",
     about: true
   });
-  const delegation = canDelegate ? boundedCoordination ? "Use list_bots or list_room_targets for the live reachable roster. Use coordinate_bots to ask actual teammates for advice or assign concrete work. Outside a room, everything you send a teammate continues your one standing conversation with them, using their own model and permissions, so they still have the context of your earlier assignments. Busy teammates queue. Give self-contained briefs, then end your turn; you resume automatically after their results return. Leads can coordinate their own specialists. Do not poll, send acknowledgements as new work, or substitute native helpers for named bots. On return, verify the requested outcome, resolve decisions within the user's scope, request concrete corrections with rework=true when necessary, and return one consolidated answer. Consultations are advice, not proof that work or tests ran." : [
+  const delegation = canDelegate ? boundedCoordination ? "Use list_bots or list_room_targets for the live reachable roster. Use coordinate_bots to ask actual teammates for advice or assign concrete work. Outside a room, everything you send a teammate continues your one standing conversation with them, using their own model and permissions, so they still have the context of your earlier assignments. Busy teammates queue. Give self-contained briefs, then end your turn; you resume automatically after their results return. Leads can coordinate their own specialists. Do not poll, send acknowledgements as new work, or substitute native helpers for named bots. On return, verify the requested outcome, resolve decisions within the user's scope, request concrete corrections with rework=true when necessary, and return one consolidated answer. Consultations are advice, not proof that work or tests ran. A refusal from coordinate_bots means nothing was sent: fix what it names (usually the id \u2014 copy it from list_bots or your roster; a unique teammate name also works) and retry, and never describe a handoff the tool did not accept." : [
     "Use list_bots to confirm the live roster and IDs. When assigning work to a teammate, use delegate_bot: it returns immediately, keeps you available to the user, and delivers the teammate's outcome back into this conversation automatically \u2014 success or failure. When the result arrives you are woken with it: report it to the user and act. If the teammate fails or stalls, tell the user plainly and decide the next step yourself.",
     "After delegate_bot accepts the task, acknowledge the handoff and continue with any independent work or end your turn. Do not call wait_delegation or repeatedly poll check_delegation in the same turn.",
     "Use ask_bot only for a brief consultation whose answer you must have before writing your current response. Never use ask_bot for an assigned task, background work, or anything potentially long-running.",
-    "Delegate with a clear, self-contained brief. Say that the task is assigned, not completed; only claim completion after the teammate's result has actually arrived.",
+    "Delegate with a clear, self-contained brief. Say that the task is assigned, not completed; only claim completion after the teammate's result has actually arrived. A refusal from delegate_bot or ask_bot means nothing was sent: fix what it names (usually the id \u2014 copy it from list_bots or your roster) and retry.",
     "You may assign work to more than one teammate when the request genuinely benefits. Stay responsive while they work, then combine their returned results when the user asks for a synthesis."
   ].join(" ") : "Your current engine cannot contact teammates. Be honest about that limitation and ask the user to choose a delegation-compatible engine before promising coordinated work.";
   return [
@@ -39926,6 +40026,38 @@ function setupCommands(runtime, platform = process.platform, target = SHARED_LOC
   };
 }
 
+// server/thread-retention.ts
+import { unlinkSync as unlinkSync7 } from "node:fs";
+import { join as join19 } from "node:path";
+var DAY_MS = 24 * 60 * 60 * 1e3;
+function idleSince(candidate) {
+  const stamps = [candidate.closedAt, candidate.archivedAt].filter((value) => value !== null);
+  return stamps.length ? Math.max(...stamps) : null;
+}
+function sweepThreadEventLogs(candidates, retentionDays, now = Date.now()) {
+  const cutoff = now - retentionDays * DAY_MS;
+  let swept = 0;
+  for (const candidate of candidates) {
+    if (candidate.unread || candidate.busy || candidate.openDirectHandoff) continue;
+    const since = idleSince(candidate);
+    if (since === null || since >= cutoff) continue;
+    let removedAny = false;
+    for (const dir of [EVENTS_DIR, NATIVE_DIR]) {
+      const path = join19(dir, `${candidate.threadId}.ndjson`);
+      try {
+        unlinkSync7(path);
+        removedAny = true;
+      } catch (error51) {
+        if (error51?.code !== "ENOENT") {
+          console.warn(`[retention] could not remove ${path}: ${error51.message}`);
+        }
+      }
+    }
+    if (removedAny) swept++;
+  }
+  return swept;
+}
+
 // server/computer-control.ts
 var NO_CONTROL = { held: false, helpReason: null, heldSinceMs: null };
 var MAX_REASON_CHARS = 280;
@@ -40053,15 +40185,15 @@ var ComputerControl = class {
 
 // server/engine-install.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync7 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { stripVTControlCharacters as stripVTControlCharacters2 } from "node:util";
 var MAX_OUTPUT2 = 64 * 1024;
 var DEFAULT_TIMEOUT_MS = 10 * 6e4;
 function enginesPrefix(baseDir = DATA_DIR) {
-  return join19(baseDir, "tools", "npm");
+  return join20(baseDir, "tools", "npm");
 }
 function enginesBinDir(baseDir = DATA_DIR, platform = process.platform) {
-  return platform === "win32" ? enginesPrefix(baseDir) : join19(enginesPrefix(baseDir), "bin");
+  return platform === "win32" ? enginesPrefix(baseDir) : join20(enginesPrefix(baseDir), "bin");
 }
 function registerEnginesBinDir(baseDir = DATA_DIR) {
   registerPathDir(enginesBinDir(baseDir));
@@ -40161,7 +40293,7 @@ function runNpm(args, env, cwd, timeoutMs) {
 // server/usage-ledger.ts
 import { readFileSync as readFileSync14 } from "node:fs";
 import { appendFile as appendFile2, mkdir as mkdir2 } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 
 // server/prices.ts
 function priceFor(turn, prices) {
@@ -40182,7 +40314,7 @@ function billableFor(turn, prices) {
 var USAGE_GROUPINGS = ["bot", "model", "user", "day", "engine"];
 var DIR = "usage";
 var MAX_RANGE_DAYS = 366;
-var DAY_MS = 24 * 60 * 6e4;
+var DAY_MS2 = 24 * 60 * 6e4;
 var writeQueues2 = /* @__PURE__ */ new Map();
 var clean2 = (value) => typeof value === "number" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : 0;
 var finiteOrNull = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : null;
@@ -40190,7 +40322,7 @@ function monthKey(at2) {
   return `${at2.getUTCFullYear()}-${String(at2.getUTCMonth() + 1).padStart(2, "0")}`;
 }
 function usageFileFor(dataDir, at2) {
-  return join20(dataDir, DIR, `${monthKey(at2)}.jsonl`);
+  return join21(dataDir, DIR, `${monthKey(at2)}.jsonl`);
 }
 function appendUsage(dataDir, row) {
   const record3 = {
@@ -40210,7 +40342,7 @@ function appendUsage(dataDir, row) {
   });
 }
 async function write(dataDir, record3) {
-  await mkdir2(join20(dataDir, DIR), { recursive: true, mode: 448 });
+  await mkdir2(join21(dataDir, DIR), { recursive: true, mode: 448 });
   await appendFile2(usageFileFor(dataDir, new Date(record3.at)), JSON.stringify(record3) + "\n", { mode: 384 });
 }
 async function flushUsageLedger(dataDir) {
@@ -40234,7 +40366,7 @@ function readUsage(dataDir, range) {
   for (const key3 of monthsBetween(range.from, range.to)) {
     let text8;
     try {
-      text8 = readFileSync14(join20(dataDir, DIR, `${key3}.jsonl`), "utf8");
+      text8 = readFileSync14(join21(dataDir, DIR, `${key3}.jsonl`), "utf8");
     } catch {
       continue;
     }
@@ -40262,7 +40394,7 @@ function parseUsageRange(from, to2, now = /* @__PURE__ */ new Date()) {
   const start = from ? parse7(from, false) : new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1));
   const end = to2 ? parse7(to2, true) : now;
   if (!start || !end || start.getTime() > end.getTime()) return null;
-  if (end.getTime() - start.getTime() > MAX_RANGE_DAYS * DAY_MS) return null;
+  if (end.getTime() - start.getTime() > MAX_RANGE_DAYS * DAY_MS2) return null;
   return { from: start, to: end };
 }
 function triggerKey(trigger) {
@@ -40436,14 +40568,14 @@ async function checkProviderKey(input, fetchImpl = fetch, timeoutMs = 1e4) {
 
 // server/enterprise.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 import { pathToFileURL } from "node:url";
 var layerSchema = external_exports.object({
   customer: external_exports.string().min(1),
   features: external_exports.array(external_exports.string().min(1)),
   expiresAt: external_exports.string().nullable()
 });
-var DEFAULT_DIR = join21(SERVER_ROOT, "..", "enterprise");
+var DEFAULT_DIR = join22(SERVER_ROOT, "..", "enterprise");
 var current = { edition: "oss", features: [] };
 var workspaceAccessFactory;
 function hostedWorkspaceConfigured(env = process.env) {
@@ -40476,7 +40608,7 @@ async function loadEnterpriseLayer(options = {}) {
   workspaceAccessFactory = void 0;
   const dir = options.dir ?? process.env.OMB_ENTERPRISE_DIR ?? DEFAULT_DIR;
   const licenseKey = options.licenseKey ?? process.env.OMB_LICENSE_KEY;
-  const entry = [join21(dir, "server", "index.ts"), join21(dir, "server", "index.js")].find((candidate) => existsSync7(candidate));
+  const entry = [join22(dir, "server", "index.ts"), join22(dir, "server", "index.js")].find((candidate) => existsSync7(candidate));
   if (!entry) {
     return oss(
       licenseKey ? `OMB_LICENSE_KEY is set but no enterprise layer exists at ${dir}` : void 0
@@ -40642,7 +40774,7 @@ function buildNotification(kind, bot, threadId, detail, extra) {
   if (bot.notifications === false) return null;
   const body = summarize(detail);
   const who = extra?.group ? `${bot.name} in ${extra.group.name}` : bot.name;
-  const title = kind === "approval" ? `${who} needs approval` : kind === "question" ? `${who} has a question` : kind === "takeover" ? `${who} needs your hands` : kind === "routine-failed" ? `${who}'s routine failed` : kind === "turn-failed" ? `${who} couldn't start` : `${who} finished`;
+  const title = kind === "approval" ? `${who} needs approval` : kind === "question" ? `${who} has a question` : kind === "takeover" ? `${who} needs your hands` : kind === "routine-failed" ? `${who}'s routine failed` : kind === "routine-deferred" ? `${who}'s routine is waiting` : kind === "turn-failed" ? `${who} couldn't start` : `${who} finished`;
   if (kind === "done" && !body) return null;
   const notification = { kind, botId: bot.id, botName: bot.name, threadId, title, body };
   if (extra?.avatarUrl) notification.avatarUrl = extra.avatarUrl;
@@ -41468,7 +41600,7 @@ function createAcpDriver(support11) {
           return { turnId };
         }
         const resolvedModel = support11.resolveTurnModel?.(turn.model, env);
-        support11.applyTurnEnv?.(env, { model: resolvedModel, requestedModel: turn.model });
+        support11.applyTurnEnv?.(env, { model: resolvedModel, requestedModel: turn.model, fullAuto: turnConfig.fullAuto === true });
         const cliTurn = resolvedModel !== void 0 && resolvedModel !== turn.model ? { ...turn, model: resolvedModel } : turn;
         const mcpServers = acpMcpServers(turn);
         let launch;
@@ -42110,7 +42242,7 @@ import { createHash as createHash10, randomUUID as randomUUID13 } from "node:cry
 import { mkdir as mkdir4, mkdtemp as mkdtemp2, readFile as readFile2, rm as rm2, stat as stat4 } from "node:fs/promises";
 import { request as httpRequest } from "node:http";
 import { tmpdir as tmpdir3 } from "node:os";
-import { delimiter as delimiter2, join as join22, resolve as resolve7 } from "node:path";
+import { delimiter as delimiter2, join as join23, resolve as resolve7 } from "node:path";
 var ANTIGRAVITY_AUTH_PREFIX = "Open the following link to authenticate the ACP server: ";
 var AUTH_TIMEOUT_MS = 5 * 6e4;
 var STARTUP_TIMEOUT_MS = 9e4;
@@ -42171,11 +42303,11 @@ function authorizationUrlFromLine(line) {
   }
 }
 function antigravityProfileDirectory(instanceId, baseDir = DATA_DIR) {
-  return join22(baseDir, "providers", "antigravity", createHash10("sha256").update(instanceId).digest("hex"));
+  return join23(baseDir, "providers", "antigravity", createHash10("sha256").update(instanceId).digest("hex"));
 }
 async function prepareAntigravityProfile(input) {
   const directory = resolve7(input.profileDirectory ?? antigravityProfileDirectory(input.instanceId, input.baseDir));
-  const acpDirectory = join22(directory, "antigravity-acp");
+  const acpDirectory = join23(directory, "antigravity-acp");
   await mkdir4(acpDirectory, { recursive: true, mode: 448 });
   if (process.platform !== "win32") {
     const { chmod: chmod3 } = await import("node:fs/promises");
@@ -42183,7 +42315,7 @@ async function prepareAntigravityProfile(input) {
     await chmod3(acpDirectory, 448);
   }
   writeFileAtomic(
-    join22(acpDirectory, "settings.json"),
+    join23(acpDirectory, "settings.json"),
     `${JSON.stringify({ auth: { type: "oauth-personal" } })}
 `,
     { mode: 384 }
@@ -42206,7 +42338,7 @@ async function prepareAntigravityProfile(input) {
     PYTHONUNBUFFERED: "1",
     ELECTRON_RUN_AS_NODE: "1"
   });
-  return { directory, tokenPath: join22(acpDirectory, "acp_token.json"), environment };
+  return { directory, tokenPath: join23(acpDirectory, "acp_token.json"), environment };
 }
 async function antigravityProfileAuthenticated(profile) {
   try {
@@ -42488,7 +42620,7 @@ function isValidAntigravityInitializeResult(initialized, expectedVersion) {
   return true;
 }
 async function validateAntigravityRuntime(runtime, expectedVersion) {
-  const profileDirectory = await mkdtemp2(join22(tmpdir3(), "openmaus-antigravity-verify-"));
+  const profileDirectory = await mkdtemp2(join23(tmpdir3(), "openmaus-antigravity-verify-"));
   let client;
   let failed = false;
   let failure5;
@@ -42621,7 +42753,7 @@ import {
   writeFile as writeFile3
 } from "node:fs/promises";
 import { constants as constants3 } from "node:fs";
-import { delimiter as delimiter3, dirname as dirname8, isAbsolute as isAbsolute7, join as join23, resolve as resolve8 } from "node:path";
+import { delimiter as delimiter3, dirname as dirname8, isAbsolute as isAbsolute7, join as join24, resolve as resolve8 } from "node:path";
 import { Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createInflateRaw } from "node:zlib";
@@ -42720,7 +42852,7 @@ var AntigravitySetupError = class extends Error {
 };
 var installs = /* @__PURE__ */ new Map();
 function runtimeRoot(baseDir = DATA_DIR) {
-  return join23(baseDir, "tools", "antigravity-acp", `${process.platform}-${process.arch}`);
+  return join24(baseDir, "tools", "antigravity-acp", `${process.platform}-${process.arch}`);
 }
 function executableNames(platform = process.platform) {
   return platform === "win32" ? { executable: "agy_acp_server.exe", harness: "localharness_external.exe" } : { executable: "agy_acp_server.par", harness: "localharness_external" };
@@ -42737,10 +42869,10 @@ async function executableFile(path, bytes) {
 }
 async function completedRelease(directory, asset) {
   try {
-    const record3 = JSON.parse(await readFile3(join23(directory, INSTALL_RECORD), "utf8"));
+    const record3 = JSON.parse(await readFile3(join24(directory, INSTALL_RECORD), "utf8"));
     if (record3.sha256 !== asset.sha256 || record3.version !== asset.version || record3.executable.name !== asset.executable.name || record3.executable.bytes !== asset.executable.bytes || record3.harness.name !== asset.harness.name || record3.harness.bytes !== asset.harness.bytes) return null;
-    const executablePath = join23(directory, asset.executable.name);
-    const harnessPath = join23(directory, asset.harness.name);
+    const executablePath = join24(directory, asset.executable.name);
+    const harnessPath = join24(directory, asset.harness.name);
     if (!await executableFile(executablePath, asset.executable.bytes)) return null;
     if (!await executableFile(harnessPath, asset.harness.bytes)) return null;
     return { executablePath, harnessPath, source: "managed", version: asset.version };
@@ -42756,7 +42888,7 @@ function pathCandidates(binary2, env) {
 async function externalRuntime(candidate, source) {
   const names = executableNames();
   const executablePath = resolve8(candidate);
-  const harnessPath = join23(dirname8(executablePath), names.harness);
+  const harnessPath = join24(dirname8(executablePath), names.harness);
   if (!await executableFile(executablePath) || !await executableFile(harnessPath)) return null;
   return { executablePath, harnessPath, source, version: null };
 }
@@ -42776,7 +42908,7 @@ async function resolveAntigravityRuntime(binaryPath, env = process.env, baseDir
   }
   const asset = resolveAntigravityReleaseAsset();
   if (asset) {
-    const managed = await completedRelease(join23(runtimeRoot(baseDir), "versions", asset.sha256), asset);
+    const managed = await completedRelease(join24(runtimeRoot(baseDir), "versions", asset.sha256), asset);
     if (managed) return managed;
   }
   const names = executableNames();
@@ -42902,7 +43034,7 @@ async function extractPinnedArchive(archivePath, outputDirectory, asset) {
       start: dataOffset,
       end: dataOffset + entry.compressedBytes - 1
     });
-    const destination = createWriteStream(join23(outputDirectory, entry.name), { flags: "wx", mode: 448 });
+    const destination = createWriteStream(join24(outputDirectory, entry.name), { flags: "wx", mode: 448 });
     if (entry.compression === 8) await pipeline(source, createInflateRaw(), counter, destination);
     else await pipeline(source, counter, destination);
     if (bytes !== expectedBytes) throw new Error("An extracted file was truncated.");
@@ -42913,8 +43045,8 @@ async function installOnce2(options) {
   const asset = options.asset === void 0 ? resolveAntigravityReleaseAsset() : options.asset;
   if (!asset) throw new Error(`Google does not publish an Antigravity runtime for ${process.platform}-${process.arch}.`);
   const root = runtimeRoot(options.baseDir);
-  const versions = join23(root, "versions");
-  const destination = join23(versions, asset.sha256);
+  const versions = join24(root, "versions");
+  const destination = join24(versions, asset.sha256);
   await mkdir5(versions, { recursive: true, mode: 448 });
   const existing = await completedRelease(destination, asset);
   if (existing) {
@@ -42930,11 +43062,11 @@ async function installOnce2(options) {
   } catch (error51) {
     if (error51 instanceof Error && error51.message.includes("Antigravity needs")) throw error51;
   }
-  const staging = await mkdtemp3(join23(versions, `${STAGING_PREFIX}${randomUUID14()}-`));
+  const staging = await mkdtemp3(join24(versions, `${STAGING_PREFIX}${randomUUID14()}-`));
   let failed = false;
   try {
-    const archivePath = join23(staging, "download.zip");
-    const runtimeDirectory = join23(staging, "runtime");
+    const archivePath = join24(staging, "download.zip");
+    const runtimeDirectory = join24(staging, "runtime");
     await mkdir5(runtimeDirectory, { mode: 448 });
     const controller = new AbortController();
     const timeout2 = setTimeout(() => controller.abort(), DOWNLOAD_TIMEOUT_MS);
@@ -42980,12 +43112,12 @@ async function installOnce2(options) {
     }
     await extractPinnedArchive(archivePath, runtimeDirectory, asset);
     if (process.platform !== "win32") {
-      await chmod2(join23(runtimeDirectory, asset.executable.name), 493);
-      await chmod2(join23(runtimeDirectory, asset.harness.name), 493);
+      await chmod2(join24(runtimeDirectory, asset.executable.name), 493);
+      await chmod2(join24(runtimeDirectory, asset.harness.name), 493);
     }
     const candidate = {
-      executablePath: join23(runtimeDirectory, asset.executable.name),
-      harnessPath: join23(runtimeDirectory, asset.harness.name),
+      executablePath: join24(runtimeDirectory, asset.executable.name),
+      harnessPath: join24(runtimeDirectory, asset.harness.name),
       source: "managed",
       version: asset.version
     };
@@ -42996,7 +43128,7 @@ async function installOnce2(options) {
       executable: asset.executable,
       harness: asset.harness
     };
-    await writeFile3(join23(runtimeDirectory, INSTALL_RECORD), `${JSON.stringify(record3)}
+    await writeFile3(join24(runtimeDirectory, INSTALL_RECORD), `${JSON.stringify(record3)}
 `, { flag: "wx", mode: 384 });
     try {
       await retryOnWindowsFileLock(() => rename2(runtimeDirectory, destination));
@@ -43418,7 +43550,7 @@ import { homedir as homedir13 } from "node:os";
 // server/drivers/codex-catalog.ts
 import { readdirSync as readdirSync3, readFileSync as readFileSync15 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { basename as basename5, join as join24 } from "node:path";
+import { basename as basename5, join as join25 } from "node:path";
 var STATIC_CODEX_MODELS = {
   default: "gpt-5.6-sol",
   options: [
@@ -43550,7 +43682,7 @@ function readCodexAppServerModelCatalog(cli, env, timeoutMs = 8e3) {
 }
 function codexHome(env) {
   if (env.CODEX_HOME) return env.CODEX_HOME;
-  return join24(env.HOME || env.USERPROFILE || homedir10(), ".codex");
+  return join25(env.HOME || env.USERPROFILE || homedir10(), ".codex");
 }
 function unquote(raw) {
   let value = raw.trim();
@@ -43636,11 +43768,11 @@ function niceLabel(model2, provider, known, named) {
 }
 function collectCatalogNames(home) {
   const named = /* @__PURE__ */ new Map();
-  for (const file2 of listDir(join24(home, "model-catalogs"))) {
+  for (const file2 of listDir(join25(home, "model-catalogs"))) {
     if (!file2.endsWith(".json")) continue;
     const provider = basename5(file2, ".json").replace(/-models$/, "");
     if (!PROVIDER_ID.test(provider)) continue;
-    const raw = readText(join24(home, "model-catalogs", file2));
+    const raw = readText(join25(home, "model-catalogs", file2));
     if (!raw) continue;
     let parsed;
     try {
@@ -43692,7 +43824,7 @@ async function probeProviderModels(provider, env, fetchImpl) {
 async function readCodexModelCatalog(env = process.env, fetchImpl = fetch, cli) {
   const official = (cli ? await readCodexAppServerModelCatalog(cli, env) : null) ?? STATIC_CODEX_MODELS;
   const home = codexHome(env);
-  const mainText = readText(join24(home, "config.toml"));
+  const mainText = readText(join25(home, "config.toml"));
   if (!mainText) return mergeLocalInject(official, env, fetchImpl);
   const main = parseCodexToml(mainText);
   const known = new Map(main.providers.map((provider) => [provider.id, provider]));
@@ -43707,7 +43839,7 @@ async function readCodexModelCatalog(env = process.env, fetchImpl = fetch, cli)
   remember(main.modelProvider, main.model);
   for (const file2 of listDir(home)) {
     if (!file2.endsWith(".config.toml")) continue;
-    const profile = parseCodexToml(readText(join24(home, file2)) ?? "");
+    const profile = parseCodexToml(readText(join25(home, file2)) ?? "");
     for (const provider of profile.providers) {
       if (!known.has(provider.id)) known.set(provider.id, provider);
     }
@@ -43750,7 +43882,7 @@ async function readCodexModelCatalog(env = process.env, fetchImpl = fetch, cli)
 // server/drivers/codex-instructions.ts
 import { createHash as createHash12 } from "node:crypto";
 import { mkdirSync as mkdirSync8, readFileSync as readFileSync16 } from "node:fs";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 var digest = (value) => createHash12("sha256").update(value).digest("hex");
 function codexDeveloperInstructions(config2, botInstructions) {
   if (!config2 || typeof config2 !== "object" || Array.isArray(config2)) {
@@ -43765,8 +43897,8 @@ function codexDeveloperInstructions(config2, botInstructions) {
 ${configured2}` : botInstructions;
 }
 async function syncCodexInstructions(key3, nativeThreadId, instructions, resumed, request3) {
-  const directory = join25(DATA_DIR, "codex-instructions");
-  const path = join25(directory, `${digest(JSON.stringify([key3, nativeThreadId]))}.sha256`);
+  const directory = join26(DATA_DIR, "codex-instructions");
+  const path = join26(directory, `${digest(JSON.stringify([key3, nativeThreadId]))}.sha256`);
   const fingerprint = digest(instructions);
   let previous2;
   try {
@@ -43804,7 +43936,7 @@ async function syncCodexInstructions(key3, nativeThreadId, instructions, resumed
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { realpathSync as realpathSync4 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
-import { basename as basename6, dirname as dirname9, isAbsolute as isAbsolute8, join as join26, resolve as resolve9 } from "node:path";
+import { basename as basename6, dirname as dirname9, isAbsolute as isAbsolute8, join as join27, resolve as resolve9 } from "node:path";
 import { stripVTControlCharacters as stripVTControlCharacters3 } from "node:util";
 var DEVICE_URL = "https://auth.openai.com/codex/device";
 var MAX_OUTPUT3 = 16384;
@@ -43814,7 +43946,7 @@ function canonicalPath2(path) {
     return realpathSync4(path);
   } catch {
     const parent = dirname9(path);
-    return parent === path ? path : join26(canonicalPath2(parent), basename6(path));
+    return parent === path ? path : join27(canonicalPath2(parent), basename6(path));
   }
 }
 function codexDevicePrompt(output) {
@@ -43857,7 +43989,7 @@ var CodexDeviceAuthController = class {
     if (!isAbsolute8(home) || env.CODEX_HOME && !isAbsolute8(env.CODEX_HOME)) {
       throw new Error("Use an absolute HOME and CODEX_HOME path for this server's Codex provider before signing in.");
     }
-    const homeKey = canonicalPath2(resolve9(env.CODEX_HOME || join26(home, ".codex")));
+    const homeKey = canonicalPath2(resolve9(env.CODEX_HOME || join27(home, ".codex")));
     if (authenticatingHomes2.has(homeKey)) {
       throw new Error("A ChatGPT sign-in is already running for this server account. Finish or cancel it before starting another.");
     }
@@ -43936,7 +44068,7 @@ var CodexDeviceAuthController = class {
     if (!isAbsolute8(home) || env.CODEX_HOME && !isAbsolute8(env.CODEX_HOME)) {
       throw new Error("Use an absolute HOME and CODEX_HOME path for this server's Codex provider before signing out.");
     }
-    const homeKey = canonicalPath2(resolve9(env.CODEX_HOME || join26(home, ".codex")));
+    const homeKey = canonicalPath2(resolve9(env.CODEX_HOME || join27(home, ".codex")));
     if (authenticatingHomes2.has(homeKey)) {
       throw new Error("A ChatGPT sign-in is running for this server account. Finish or cancel it before signing out.");
     }
@@ -44093,13 +44225,13 @@ var CodexDeviceAuthController = class {
 
 // server/drivers/codex-identity.ts
 import { homedir as homedir12 } from "node:os";
-import { isAbsolute as isAbsolute9, join as join27, resolve as resolve10 } from "node:path";
+import { isAbsolute as isAbsolute9, join as join28, resolve as resolve10 } from "node:path";
 var MAX_OUTPUT4 = 16384;
 var EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 function codexHome2(env) {
   if (env.CODEX_HOME) return isAbsolute9(env.CODEX_HOME) ? resolve10(env.CODEX_HOME) : null;
   const home = env.HOME || env.USERPROFILE || homedir12();
-  return isAbsolute9(home) ? join27(home, ".codex") : null;
+  return isAbsolute9(home) ? join28(home, ".codex") : null;
 }
 async function codexAccountEmail(cli, env, timeoutMs = 3e3) {
   const cwd = env.HOME || env.USERPROFILE || homedir12();
@@ -44739,9 +44871,23 @@ var CodexDriver = {
           return stopped;
         });
         let completeStoppedTurn;
+        let interruptRequested = false;
         const stop = async () => {
           stopRequested = true;
           stopSignal.abort();
+          if (!state.settled && !interruptRequested && codexThreadId && codexTurnId && child.exitCode === null && child.signalCode === null) {
+            interruptRequested = true;
+            const graceMs = Math.max(1, Number(process.env.FAKE_CODEX_INTERRUPT_GRACE_MS ?? 750) || 750);
+            try {
+              await request3("turn/interrupt", { threadId: codexThreadId, turnId: codexTurnId }, graceMs);
+            } catch {
+            }
+            const deadline = Date.now() + graceMs;
+            while (!state.settled && Date.now() < deadline) {
+              await new Promise((wake) => setTimeout(wake, 15));
+            }
+            if (state.settled) return true;
+          }
           const stopped = await terminate();
           if (stopped) completeStoppedTurn?.();
           return stopped;
@@ -44762,6 +44908,23 @@ var CodexDriver = {
             emit({ ...base2(threadId, turnId), type: "runtime.error", message: "codex did not shut down after termination was requested" });
           }
         };
+        const steerActiveTurn = async (text8) => {
+          if (state.settled || abandoned || stopRequested || !codexThreadId || !codexTurnId) return "refused";
+          if (child.exitCode !== null || child.signalCode !== null) return "refused";
+          try {
+            const steerTimeoutMs = Math.max(1, Number(process.env.FAKE_CODEX_STEER_TIMEOUT_MS ?? 1e4) || 1e4);
+            await request3("turn/steer", {
+              threadId: codexThreadId,
+              input: [{ type: "text", text: text8 }],
+              expectedTurnId: codexTurnId
+            }, steerTimeoutMs);
+            return "steered";
+          } catch (error51) {
+            const message4 = error51 instanceof Error ? error51.message : String(error51);
+            if (state.settled || message4.includes("timed out")) return "indeterminate";
+            return "refused";
+          }
+        };
         const controlsHost = turn.integrations?.localComputer?.scope === "local-computer";
         const handleServerRequest = (msg) => {
           const method = msg.method;
@@ -45051,6 +45214,10 @@ var CodexDriver = {
             void stop();
             return;
           }
+          if (stopRequested) {
+            void settle(false, "interrupted");
+            return;
+          }
           const recentStderr = stderrSinceOutput.trim();
           const hadStreamedOutput = codexTurnId !== null || state.sawStreamDelta;
           const verdict = signal !== null ? { transient: false, reason: "interrupted" } : classifyError({ exitCode: code, stderr: recentStderr });
@@ -45089,7 +45256,7 @@ var CodexDriver = {
           });
           void settle(false, "exit_before_result");
         });
-        active.set(threadId, { stop, turnId, asks });
+        active.set(threadId, { stop, turnId, asks, steer: steerActiveTurn });
         if (attempt === 0) emit({ ...base2(threadId, turnId), type: "turn.started" });
         try {
           await request3("initialize", {
@@ -45298,6 +45465,7 @@ ${stderr ?? ""}`))
         provider: DRIVER_KIND3,
         capabilities: {
           sessionModelSwitch: "unsupported",
+          queueing: true,
           computerMcp: true,
           localComputerMcp: true,
           composioMcp: true,
@@ -45313,6 +45481,10 @@ ${stderr ?? ""}`))
         interruptTurn: async (threadId) => {
           await active.get(threadId)?.stop();
         },
+        steer: async (threadId, text8) => {
+          const turn = active.get(threadId);
+          return turn?.steer ? await turn.steer(text8) : "refused";
+        },
         respondToRequest: async (threadId, requestId, decision) => {
           const turn = active.get(threadId);
           const finish = turn?.asks.get(requestId);
@@ -46266,7 +46438,7 @@ var GrokDriver = {
 // server/drivers/acp/grok.ts
 import { existsSync as existsSync10, readFileSync as readFileSync17, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 var STATIC_GROK_MODELS = {
   default: "grok-4.6",
   options: [
@@ -46277,7 +46449,7 @@ var STATIC_GROK_MODELS = {
 var SLUG = /^[a-z0-9][a-z0-9._-]*$/i;
 function grokHome(env) {
   if (env.GROK_HOME) return env.GROK_HOME;
-  return join28(env.HOME || env.USERPROFILE || homedir14(), ".grok");
+  return join29(env.HOME || env.USERPROFILE || homedir14(), ".grok");
 }
 function unquote2(raw) {
   const value = raw.trim();
@@ -46287,7 +46459,7 @@ function unquote2(raw) {
   return value;
 }
 function readGrokModelCatalog(env = process.env) {
-  const path = join28(grokHome(env), "config.toml");
+  const path = join29(grokHome(env), "config.toml");
   let text8 = "";
   try {
     text8 = readFileSync17(path, "utf8");
@@ -46360,7 +46532,7 @@ function ensureGrokInjectSlug(modelId, env = process.env) {
   if (!inject) return modelId;
   const host = localHost(inject.host);
   if (!host) return modelId;
-  const path = join28(grokHome(env), "config.toml");
+  const path = join29(grokHome(env), "config.toml");
   let text8 = "";
   try {
     text8 = readFileSync17(path, "utf8");
@@ -46492,7 +46664,7 @@ var support2 = {
   // an unauthenticated CLI is a user action, not something to paper over.
   pickAuthMethod: (methods) => methods.some((m3) => m3.id === "cached_token") ? "cached_token" : null,
   authFailure: "fail",
-  isAuthenticated: () => existsSync10(join28(homedir14(), ".grok", "auth.json")),
+  isAuthenticated: () => existsSync10(join29(homedir14(), ".grok", "auth.json")),
   // `--append-system-prompt`/`--rules` are accepted by the CLI but do NOT
   // reach the agent-stdio system prompt (verified against 1.0.0), so the
   // persona is prepended codex-style.
@@ -46505,11 +46677,11 @@ var GrokAgentDriver = createAcpDriver(support2);
 // server/drivers/acp/gemini.ts
 import { existsSync as existsSync11, readFileSync as readFileSync18 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 var AUTH_PREFERENCE = ["gemini-api-key", "oauth-personal", "vertex-ai"];
 function liveOauthCredential() {
   try {
-    const creds = JSON.parse(readFileSync18(join29(homedir15(), ".gemini", "oauth_creds.json"), "utf8"));
+    const creds = JSON.parse(readFileSync18(join30(homedir15(), ".gemini", "oauth_creds.json"), "utf8"));
     if (typeof creds.access_token !== "string" || creds.access_token.trim().length === 0) return false;
     const hasRefresh = typeof creds.refresh_token === "string" && creds.refresh_token.trim().length > 0;
     if (creds.expiry_date !== void 0) {
@@ -46523,7 +46695,12 @@ function liveOauthCredential() {
 }
 var nonBlank = (value) => Boolean(value?.trim());
 function geminiIsAuthenticated(env) {
-  return nonBlank(env.GEMINI_API_KEY) || nonBlank(env.GOOGLE_API_KEY) || existsSync11(join29(homedir15(), ".gemini", "oauth_creds.json")) && liveOauthCredential();
+  return nonBlank(env.GEMINI_API_KEY) || nonBlank(env.GOOGLE_API_KEY) || existsSync11(join30(homedir15(), ".gemini", "oauth_creds.json")) && liveOauthCredential();
+}
+function geminiApprovalArgs(fullAuto, approvalMode) {
+  if (fullAuto) return ["--yolo"];
+  if (approvalMode === "edits") return ["--approval-mode", "auto_edit"];
+  return [];
 }
 var support3 = {
   driverKind: "geminiAgent",
@@ -46540,7 +46717,7 @@ var support3 = {
   loginNote: "Gemini CLI needs a GEMINI_API_KEY, a Vertex AI setup, or an enterprise Code Assist login \u2014 consumer Google logins stopped working on 2026-06-18 (use the Antigravity engine for those accounts)",
   // --acp is the stable Gemini CLI surface. --experimental-acp remains an
   // alias for older releases, but using it now emits a deprecation warning.
-  spawnArgs: (_config, turn) => ["--acp", ...turn.model ? ["-m", turn.model] : []],
+  spawnArgs: (config2, turn) => ["--acp", ...geminiApprovalArgs(config2.fullAuto, turn.approvalMode), ...turn.model ? ["-m", turn.model] : []],
   credentialEnv: ["GEMINI_API_KEY", "GOOGLE_API_KEY"],
   pickAuthMethod: (methods) => {
     const ids = methods.map((m3) => m3.id).filter((id) => typeof id === "string");
@@ -46558,7 +46735,7 @@ var GeminiAgentDriver = createAcpDriver(support3);
 // server/drivers/acp/kimi.ts
 import { existsSync as existsSync12, mkdirSync as mkdirSync9, readFileSync as readFileSync19, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir16 } from "node:os";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 var STATIC_KIMI_MODELS = {
   default: "kimi-code/k3",
   options: [
@@ -46574,10 +46751,10 @@ function isLocalInjectAlias(slug) {
   return LOCAL_PROVIDER_PREFIXES.some((prefix) => slug.startsWith(prefix));
 }
 function kimiDataRoot(env) {
-  return env.KIMI_CODE_HOME || join30(env.HOME || env.USERPROFILE || homedir16(), ".kimi-code");
+  return env.KIMI_CODE_HOME || join31(env.HOME || env.USERPROFILE || homedir16(), ".kimi-code");
 }
 function credentialsPath(env) {
-  return join30(kimiDataRoot(env), "credentials", "kimi-code.json");
+  return join31(kimiDataRoot(env), "credentials", "kimi-code.json");
 }
 function quoteToml2(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
@@ -46865,7 +47042,7 @@ function ensureKimiInjectAlias(modelId, env = process.env) {
   const alias = `${inject.host}/${inject.model.replace(/\//g, "-")}`;
   const dataRoot = kimiDataRoot(env);
   mkdirSync9(dataRoot, { recursive: true });
-  const path = join30(dataRoot, "config.toml");
+  const path = join31(dataRoot, "config.toml");
   let text8 = "";
   try {
     text8 = readFileSync19(path, "utf8");
@@ -46937,7 +47114,7 @@ function readKimiModelCatalog(env) {
   const dataRoot = kimiDataRoot(env);
   let text8 = "";
   try {
-    text8 = readFileSync19(join30(dataRoot, "config.toml"), "utf8");
+    text8 = readFileSync19(join31(dataRoot, "config.toml"), "utf8");
   } catch {
     return STATIC_KIMI_MODELS;
   }
@@ -47032,11 +47209,11 @@ var KimiAgentDriver = createAcpDriver(support4);
 // server/drivers/acp/droid.ts
 import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync20, writeFileSync as writeFileSync10 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 var AUTH_FILES = ["auth.v2.file", "auth.v2.loginkeychain", "auth.v2.keyring"];
 function authFilePaths(env) {
   const home = env.FACTORY_HOME_OVERRIDE || env.HOME || homedir17();
-  return AUTH_FILES.map((name2) => join31(home, ".factory", name2));
+  return AUTH_FILES.map((name2) => join32(home, ".factory", name2));
 }
 var INJECT_ID_PREFIX = "custom:openmausbot-";
 function droidInjectId(host, model2) {
@@ -47052,9 +47229,9 @@ function ensureDroidInjectModel(modelId, env = process.env) {
   const host = localHost(inject.host);
   if (!host) return modelId;
   const id = droidInjectId(inject.host, inject.model);
-  const dir = join31(factoryHome(env), ".factory");
+  const dir = join32(factoryHome(env), ".factory");
   mkdirSync10(dir, { recursive: true });
-  const path = join31(dir, "settings.json");
+  const path = join32(dir, "settings.json");
   let settings = {};
   try {
     settings = JSON.parse(readFileSync20(path, "utf8"));
@@ -47094,7 +47271,7 @@ function applyDroidLocalAuthEnv(env, modelId) {
   env.FACTORY_API_KEY = "openmausbot-local";
 }
 function readSettings(env) {
-  return JSON.parse(readFileSync20(join31(factoryHome(env), ".factory", "settings.json"), "utf8"));
+  return JSON.parse(readFileSync20(join32(factoryHome(env), ".factory", "settings.json"), "utf8"));
 }
 async function resolveModels(env) {
   let catalog2 = MODELS3;
@@ -47468,7 +47645,7 @@ var CursorAgentDriver = createCursorAgentDriver();
 // server/drivers/acp/opencode-go.ts
 import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync21, writeFileSync as writeFileSync11 } from "node:fs";
 import { homedir as homedir18 } from "node:os";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 var STATIC_MODELS = {
   default: "opencode/x-preview-f-free",
   options: [
@@ -47595,7 +47772,7 @@ var stripForeignProviderKeys = (env) => {
 };
 function opencodeConfigDir(env) {
   const home = env.HOME || env.USERPROFILE || homedir18();
-  return join32(env.XDG_CONFIG_HOME || join32(home, ".config"), "opencode");
+  return join33(env.XDG_CONFIG_HOME || join33(home, ".config"), "opencode");
 }
 function ensureOpenCodeInjectModel(modelId, env = process.env) {
   const inject = decodeInjectId(modelId);
@@ -47605,7 +47782,7 @@ function ensureOpenCodeInjectModel(modelId, env = process.env) {
   const native = `${inject.host}/${inject.model}`;
   const dir = opencodeConfigDir(env);
   mkdirSync11(dir, { recursive: true });
-  const path = join32(dir, "opencode.json");
+  const path = join33(dir, "opencode.json");
   let config2 = { $schema: "https://opencode.ai/config.json" };
   if (existsSync14(path)) {
     try {
@@ -47643,10 +47820,10 @@ function ensureOpenCodeInjectModel(modelId, env = process.env) {
 function storedAuthPaths(env) {
   const home = env.HOME || env.USERPROFILE || homedir18();
   const roots = [
-    env.XDG_DATA_HOME || join32(home, ".local", "share"),
-    process.platform === "darwin" ? join32(home, "Library", "Application Support") : process.platform === "win32" ? env.LOCALAPPDATA || join32(home, "AppData", "Local") : ""
+    env.XDG_DATA_HOME || join33(home, ".local", "share"),
+    process.platform === "darwin" ? join33(home, "Library", "Application Support") : process.platform === "win32" ? env.LOCALAPPDATA || join33(home, "AppData", "Local") : ""
   ].filter(Boolean);
-  return [...new Set(roots)].map((root) => join32(root, "opencode", "auth.json"));
+  return [...new Set(roots)].map((root) => join33(root, "opencode", "auth.json"));
 }
 function usableAuthEntry(parsed) {
   return Object.values(parsed).some((auth) => {
@@ -47714,6 +47891,28 @@ var support7 = (loadCatalog2) => ({
   modelVariants: true,
   resolveTurnModel: (model2, env) => model2 ? ensureOpenCodeInjectModel(normalizeLegacyOpenCodeModel(model2, env), env) : model2,
   transformEnv: stripForeignProviderKeys,
+  applyTurnEnv: (env, { fullAuto }) => {
+    if (!fullAuto) return;
+    env.OPENCODE_PERMISSION = JSON.stringify(Object.fromEntries([
+      "*",
+      "external_directory",
+      "read",
+      "edit",
+      "bash",
+      "glob",
+      "grep",
+      "list",
+      "task",
+      "lsp",
+      "skill",
+      "webfetch",
+      "websearch",
+      "codesearch",
+      "todoread",
+      "todowrite",
+      "doom_loop"
+    ].map((permission) => [permission, "allow"])));
+  },
   pickAuthMethod: () => null,
   authFailure: "continue",
   isAuthenticated: async (env, config2) => Boolean(env.OPENCODE_API_KEY) || hasStoredOpenCodeAuth(env) || await canListOpenCodeModels(env, config2.cli),
@@ -47747,11 +47946,11 @@ var OpenCodeDriver = createOpenCodeDriver();
 import { chmodSync as chmodSync2, existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync22, writeFileSync as writeFileSync12 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { homedir as homedir19 } from "node:os";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 var EMPTY = { default: "", options: [] };
 function qwenHome(env) {
   const home = process.platform === "win32" ? env.USERPROFILE || env.HOME || homedir19() : env.HOME || env.USERPROFILE || homedir19();
-  return join33(home, ".qwen");
+  return join34(home, ".qwen");
 }
 function isRecord4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
@@ -47764,7 +47963,7 @@ var PROTOCOLS = /* @__PURE__ */ new Set(["openai", "anthropic", "gemini", "verte
 function readQwenRoutes(env) {
   let settings;
   try {
-    settings = JSON.parse(readFileSync22(join33(qwenHome(env), "settings.json"), "utf8"));
+    settings = JSON.parse(readFileSync22(join34(qwenHome(env), "settings.json"), "utf8"));
   } catch {
     return [];
   }
@@ -47848,7 +48047,7 @@ function ensureQwenInjectModel(modelId, env = process.env) {
   if (!host) return modelId;
   const dir = qwenHome(env);
   mkdirSync12(dir, { recursive: true });
-  const path = join33(dir, "settings.json");
+  const path = join34(dir, "settings.json");
   let settings = {};
   if (existsSync15(path)) {
     try {
@@ -47918,6 +48117,12 @@ function resolveQwenTurnModel(model2, env) {
   if (!matches.length) throw new Error("This Qwen model is no longer configured. Refresh models and select it again.");
   return matches[0].id;
 }
+function qwenApprovalArgs(fullAuto, approvalMode) {
+  if (fullAuto) return ["--yolo"];
+  if (approvalMode === "auto") return ["--approval-mode", "auto"];
+  if (approvalMode === "edits") return ["--approval-mode", "auto-edit"];
+  return [];
+}
 var support8 = {
   driverKind: "qwenAgent",
   displayName: "Qwen",
@@ -47938,7 +48143,7 @@ var support8 = {
   },
   // A raw -m only changes the model within the saved provider. ACP switches
   // the complete route and confirms it before any prompt leaves OMB.
-  spawnArgs: () => ["--acp"],
+  spawnArgs: (config2, turn) => ["--acp", ...qwenApprovalArgs(config2.fullAuto, turn.approvalMode)],
   selectModel: { configId: "model" },
   pickAuthMethod: () => null,
   authFailure: "continue",
@@ -47989,7 +48194,7 @@ var CustomAcpDriver = {
 import { spawn as spawn2 } from "node:child_process";
 import { mkdirSync as mkdirSync13, readFileSync as readFileSync23, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir20 } from "node:os";
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 
 // node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/browser/dist/nodes/identity.js
 var ALIAS = /* @__PURE__ */ Symbol.for("yaml.alias");
@@ -54293,7 +54498,7 @@ function bindHermesScreenshotCompat(env, modelId) {
   env[HERMES_OPENMAUS_SCREENSHOT_COMPAT_MODEL] = inject.model;
 }
 function hermesHome(env) {
-  return env.HERMES_HOME || join34(env.HOME || env.USERPROFILE || homedir20(), ".hermes");
+  return env.HERMES_HOME || join35(env.HOME || env.USERPROFILE || homedir20(), ".hermes");
 }
 function quoteYaml(value) {
   if (/^[\w./:+-]+$/.test(value)) return value;
@@ -54335,7 +54540,7 @@ function ensureHermesInjectProvider(modelId, env = process.env) {
   if (!host) return modelId;
   const dir = hermesHome(env);
   mkdirSync13(dir, { recursive: true });
-  const path = join34(dir, "config.yaml");
+  const path = join35(dir, "config.yaml");
   let text8 = "";
   try {
     text8 = readFileSync23(path, "utf8");
@@ -54414,13 +54619,13 @@ function hermesConfiguredModel(env = process.env) {
   const dir = hermesHome(env);
   let secrets = "";
   try {
-    secrets = readFileSync23(join34(dir, ".env"), "utf8");
+    secrets = readFileSync23(join35(dir, ".env"), "utf8");
   } catch {
   }
   const hasHostedProviderKey = HERMES_HOSTED_PROVIDER_KEYS.some((name2) => nonEmptyDotenvValue(secrets, name2));
   let configuredDefault = null;
   try {
-    configuredDefault = hermesConfigDefault(readFileSync23(join34(dir, "config.yaml"), "utf8"));
+    configuredDefault = hermesConfigDefault(readFileSync23(join35(dir, "config.yaml"), "utf8"));
   } catch {
   }
   const configuredProvider = configuredDefault?.provider.toLowerCase() ?? "";
@@ -54734,7 +54939,7 @@ var OpenAICompatDriver = {
 // server/drivers/pi.ts
 import { chmodSync as chmodSync3, existsSync as existsSync16, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync2, readFileSync as readFileSync24, rmSync as rmSync3, writeFileSync as writeFileSync14 } from "node:fs";
 import { homedir as homedir21, tmpdir as tmpdir4 } from "node:os";
-import { join as join35 } from "node:path";
+import { join as join36 } from "node:path";
 var DRIVER_KIND6 = "piAgent";
 var PI_ARGS = ["--mode", "rpc", "--no-session"];
 var PI_MODEL_UPDATE_ARGS = ["update", "--models", "--no-approve"];
@@ -54839,7 +55044,7 @@ async function applyPiLocalCatalog(catalog2, env = process.env, fetchImpl = fetc
   return preferPiInjectRows(await mergeLocalInject(catalog2, env, fetchImpl));
 }
 function piAgentDir(env) {
-  return join35(env.HOME || env.USERPROFILE || homedir21(), ".pi", "agent");
+  return join36(env.HOME || env.USERPROFILE || homedir21(), ".pi", "agent");
 }
 function ensurePiInjectModel(modelId, env = process.env) {
   const split2 = splitPiModel(modelId);
@@ -54850,7 +55055,7 @@ function ensurePiInjectModel(modelId, env = process.env) {
   if (!host) return split2;
   const dir = piAgentDir(env);
   mkdirSync14(dir, { recursive: true });
-  const path = join35(dir, "models.json");
+  const path = join36(dir, "models.json");
   let root = { providers: {} };
   if (existsSync16(path)) {
     try {
@@ -55051,9 +55256,9 @@ var PiDriver = {
       const mcpServers = buildMcpServers(turn);
       let mcpTempDir = null;
       if (mcpServers) {
-        mcpTempDir = mkdtempSync2(join35(tmpdir4(), "omb-pi-mcp-"));
+        mcpTempDir = mkdtempSync2(join36(tmpdir4(), "omb-pi-mcp-"));
         try {
-          writeFileSync14(join35(mcpTempDir, "mcp.json"), JSON.stringify({ mcpServers }), { mode: 384 });
+          writeFileSync14(join36(mcpTempDir, "mcp.json"), JSON.stringify({ mcpServers }), { mode: 384 });
         } catch (err) {
           try {
             rmSync3(mcpTempDir, { recursive: true, force: true });
@@ -55071,7 +55276,7 @@ var PiDriver = {
             env: piEnvironment({
               ...process.env,
               ...input.environment,
-              ...mcpServers && mcpTempDir ? { OMB_MCP_CONFIG: join35(mcpTempDir, "mcp.json") } : {}
+              ...mcpServers && mcpTempDir ? { OMB_MCP_CONFIG: join36(mcpTempDir, "mcp.json") } : {}
             })
           });
         } catch (err) {
@@ -55411,7 +55616,7 @@ ${turn.text}` : turn.text;
 // server/drivers/minimax.ts
 import { readFileSync as readFileSync25 } from "node:fs";
 import { homedir as homedir22 } from "node:os";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 var DRIVER_KIND7 = "minimax";
 var API_KEY_ENV = "MINIMAX_API_KEY";
 var DEFAULT_URL2 = "https://api.minimax.io/v1";
@@ -55439,7 +55644,7 @@ function normalizedApiUrl(value) {
 }
 function loadLocalMiniMaxConfig(home = homedir22()) {
   try {
-    const raw = localConfigSchema.parse(JSON.parse(readFileSync25(join36(home, ".mmx", "config.json"), "utf8")));
+    const raw = localConfigSchema.parse(JSON.parse(readFileSync25(join37(home, ".mmx", "config.json"), "utf8")));
     const configuredUrl = raw.base_url?.trim() ? raw.base_url : raw.region === "cn" ? CN_URL : DEFAULT_URL2;
     return {
       apiKey: raw.api_key?.trim() ?? "",
@@ -55535,14 +55740,14 @@ var BUILT_IN_DRIVERS = [
 
 // server/store.ts
 import { createHash as createHash15 } from "node:crypto";
-import { existsSync as existsSync20, readFileSync as readFileSync29, mkdirSync as mkdirSync19, rmSync as rmSync5, unlinkSync as unlinkSync7 } from "node:fs";
-import { join as join41 } from "node:path";
+import { existsSync as existsSync20, readFileSync as readFileSync29, mkdirSync as mkdirSync19, rmSync as rmSync5, unlinkSync as unlinkSync8 } from "node:fs";
+import { join as join42 } from "node:path";
 
 // server/section-context.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync15, readFileSync as readFileSync26 } from "node:fs";
-import { join as join37 } from "node:path";
+import { join as join38 } from "node:path";
 var SECTION_CONTEXT_MAX_BYTES = 24e3;
-var SECTION_CONTEXTS_FILE = join37(DATA_DIR, "section-contexts.json");
+var SECTION_CONTEXTS_FILE = join38(DATA_DIR, "section-contexts.json");
 var sectionContextRecordSchema = external_exports.object({ text: external_exports.string(), updatedAt: external_exports.number().finite() });
 var sectionContextFileSchema = external_exports.object({
   version: external_exports.literal(1),
@@ -55646,14 +55851,14 @@ Shared context for the ${JSON.stringify(label)} section follows. The user manage
 // server/bot-folder.ts
 import { createHash as createHash14 } from "node:crypto";
 import { closeSync as closeSync6, mkdirSync as mkdirSync16, openSync as openSync6, readSync as readSync3, rmSync as rmSync4 } from "node:fs";
-import { join as join38 } from "node:path";
-var BOTS_DIR = join38(DATA_DIR, "bots");
+import { join as join39 } from "node:path";
+var BOTS_DIR = join39(DATA_DIR, "bots");
 var SOUL_FILE = "SOUL.md";
 function botFolder(botId) {
-  return join38(BOTS_DIR, botId);
+  return join39(BOTS_DIR, botId);
 }
 function soulFile(botId) {
-  return join38(botFolder(botId), SOUL_FILE);
+  return join39(botFolder(botId), SOUL_FILE);
 }
 function soulHash(soul) {
   return createHash14("sha256").update(soul, "utf8").digest("hex");
@@ -55721,7 +55926,7 @@ function peerAllowKey(action, targetId) {
 
 // server/message-db.ts
 import { chmodSync as chmodSync4, closeSync as closeSync7, existsSync as existsSync18, mkdirSync as mkdirSync17, openSync as openSync7, readFileSync as readFileSync27, renameSync as renameSync4 } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 import { DatabaseSync } from "node:sqlite";
 
 // server/peer-provenance.ts
@@ -55744,7 +55949,7 @@ function peerProvenanceAuthor(text8) {
 }
 
 // server/message-db.ts
-var DB_FILE = () => join39(DATA_DIR, "messages.db");
+var DB_FILE = () => join40(DATA_DIR, "messages.db");
 var handle = null;
 var handlePath = null;
 function open4() {
@@ -56174,9 +56379,9 @@ function closeMessageDb() {
 
 // server/workspace.ts
 import { existsSync as existsSync19, mkdirSync as mkdirSync18, readdirSync as readdirSync4, readFileSync as readFileSync28, statSync as statSync6 } from "node:fs";
-import { join as join40 } from "node:path";
-var WORKSPACES_DIR = join40(DATA_DIR, "workspaces");
-var TASK_WORKSPACES_DIR = join40(DATA_DIR, "task-workspaces");
+import { join as join41 } from "node:path";
+var WORKSPACES_DIR = join41(DATA_DIR, "workspaces");
+var TASK_WORKSPACES_DIR = join41(DATA_DIR, "task-workspaces");
 function supportsWorkspaceFiles(driverKind) {
   return !["grok", "openai-compat", "minimax", "boxAgent"].includes(driverKind);
 }
@@ -56184,7 +56389,7 @@ function ensureTaskWorkspace(botId, threadId) {
   if (![botId, threadId].every((id) => /^[A-Za-z0-9_-]{1,128}$/.test(id))) {
     throw new Error("Invalid bot or thread id for a task workspace.");
   }
-  const dir = join40(TASK_WORKSPACES_DIR, botId, threadId);
+  const dir = join41(TASK_WORKSPACES_DIR, botId, threadId);
   mkdirSync18(dir, { recursive: true, mode: 448 });
   return dir;
 }
@@ -56197,20 +56402,20 @@ load at the start of every session \u2014 keep this file short and curated.
 Longer notes belong in memory/<topic>.md files, read on demand.
 `;
 function ensureWorkspace(botId) {
-  const dir = join40(WORKSPACES_DIR, botId);
-  mkdirSync18(join40(dir, "memory"), { recursive: true, mode: 448 });
-  const memoryFile = join40(dir, "MEMORY.md");
+  const dir = join41(WORKSPACES_DIR, botId);
+  mkdirSync18(join41(dir, "memory"), { recursive: true, mode: 448 });
+  const memoryFile = join41(dir, "MEMORY.md");
   if (!existsSync19(memoryFile)) writeFileAtomic(memoryFile, MEMORY_SEED, { mode: 384 });
   return dir;
 }
 function workspaceDir(botId) {
-  return join40(WORKSPACES_DIR, botId);
+  return join41(WORKSPACES_DIR, botId);
 }
 function workspaceLocationsPrompt(botId, cwd, botCwd) {
   return "\n\nFile locations for this bot (absolute paths): " + JSON.stringify({
     currentWorkingFolder: cwd ?? "Provider default; inspect the working directory before using relative paths",
     sharedBotFolder: workspaceDir(botId),
-    otherThreadFiles: join40(TASK_WORKSPACES_DIR, botId),
+    otherThreadFiles: join41(TASK_WORKSPACES_DIR, botId),
     ...botCwd ? { configuredProjectFolder: botCwd } : {}
   }) + ". Different conversations can have different working folders. For an existing file, use the exact path from the conversation; if missing here, check this bot's listed folders before saying it is gone or recreating it. Follow an explicitly requested destination. Otherwise put new task output in the current working folder and report its absolute path so another thread or room can use it. Do not move old files, edit another active thread's work, or read another bot's private folders without authorization. These paths do not grant additional access.";
 }
@@ -56223,7 +56428,7 @@ function memoryOverBudget(text8) {
 function loadMemory(botId) {
   let raw;
   try {
-    raw = readFileSync28(join40(workspaceDir(botId), "MEMORY.md"), "utf8");
+    raw = readFileSync28(join41(workspaceDir(botId), "MEMORY.md"), "utf8");
   } catch {
     return null;
   }
@@ -56246,7 +56451,7 @@ var MEMORY_FILE_MAX_BYTES = 256 * 1024;
 function readMemoryFile(botId) {
   let raw;
   try {
-    raw = readFileSync28(join40(workspaceDir(botId), "MEMORY.md"), "utf8");
+    raw = readFileSync28(join41(workspaceDir(botId), "MEMORY.md"), "utf8");
   } catch {
     return { text: "", truncated: false };
   }
@@ -56255,12 +56460,12 @@ function readMemoryFile(botId) {
 }
 function writeMemoryFile(botId, text8) {
   ensureWorkspace(botId);
-  writeFileAtomic(join40(workspaceDir(botId), "MEMORY.md"), redactSecretsInText(text8), { mode: 384 });
+  writeFileAtomic(join41(workspaceDir(botId), "MEMORY.md"), redactSecretsInText(text8), { mode: 384 });
   indexWrittenMemoryFile(botId, "MEMORY.md");
 }
 function indexWrittenMemoryFile(botId, relativePath) {
   try {
-    const path = join40(workspaceDir(botId), relativePath);
+    const path = join41(workspaceDir(botId), relativePath);
     const stat6 = statSync6(path);
     indexMemoryFile(botId, relativePath, readFileSync28(path, "utf8"), { mtimeMs: stat6.mtimeMs, bytes: stat6.size });
   } catch {
@@ -56275,7 +56480,7 @@ function memoryFilesOnDisk(botId) {
   ];
   return names.flatMap((relativePath) => {
     try {
-      const stat6 = statSync6(join40(dir, relativePath));
+      const stat6 = statSync6(join41(dir, relativePath));
       return stat6.isFile() ? [{ path: relativePath, mtimeMs: stat6.mtimeMs, bytes: stat6.size }] : [];
     } catch {
       return [];
@@ -56290,7 +56495,7 @@ function syncMemoryIndex(botId) {
     indexed.delete(file2.path);
     if (known && known.bytes === file2.bytes && known.mtimeMs === Math.trunc(file2.mtimeMs)) continue;
     try {
-      const text8 = readFileSync28(join40(workspaceDir(botId), file2.path), "utf8");
+      const text8 = readFileSync28(join41(workspaceDir(botId), file2.path), "utf8");
       indexMemoryFile(botId, file2.path, file2.path === "MEMORY.md" && text8 === MEMORY_SEED ? "" : text8, file2);
     } catch {
     }
@@ -56351,7 +56556,7 @@ function updateMemory(botId, update, opts = {}) {
   }
   const text8 = update.text === void 0 ? void 0 : redactSecretsInText(update.text);
   const dir = ensureWorkspace(botId);
-  const raw = readFileSync28(join40(dir, "MEMORY.md"), "utf8");
+  const raw = readFileSync28(join41(dir, "MEMORY.md"), "utf8");
   const current2 = raw === MEMORY_SEED ? "" : raw;
   const today = memoryDate(opts.now);
   const appendEntry = (base2, entry2) => `${base2}${base2 && !base2.endsWith("\n") ? "\n" : ""}${entry2}
@@ -56423,10 +56628,10 @@ function appendMemoryLog(botId, text8, opts = {}) {
   const pad2 = (n) => String(n).padStart(2, "0");
   const source = cleanSource(opts.source);
   const line = `- ${pad2(now.getHours())}:${pad2(now.getMinutes())}${SEP2}${source ? `from ${source}${SEP2}` : ""}${normaliseEntryText(redactSecretsInText(text8))}`;
-  const dir = join40(ensureWorkspace(botId), "memory", MEMORY_LOG_DIR);
+  const dir = join41(ensureWorkspace(botId), "memory", MEMORY_LOG_DIR);
   mkdirSync18(dir, { recursive: true, mode: 448 });
   const file2 = `${memoryDate(now)}.md`;
-  const path = join40(dir, file2);
+  const path = join41(dir, file2);
   let current2 = "";
   try {
     current2 = readFileSync28(path, "utf8");
@@ -56440,14 +56645,14 @@ function appendMemoryLog(botId, text8, opts = {}) {
 }
 function writeMemoryLog(botId, name2, text8) {
   if (!LOG_FILE_NAME.test(name2)) throw new Error("invalid log name");
-  const dir = join40(ensureWorkspace(botId), "memory", MEMORY_LOG_DIR);
+  const dir = join41(ensureWorkspace(botId), "memory", MEMORY_LOG_DIR);
   mkdirSync18(dir, { recursive: true, mode: 448 });
-  writeFileAtomic(join40(dir, name2), redactSecretsInText(text8), { mode: 384 });
+  writeFileAtomic(join41(dir, name2), redactSecretsInText(text8), { mode: 384 });
   indexWrittenMemoryFile(botId, `memory/${MEMORY_LOG_DIR}/${name2}`);
 }
 function listMemoryLogs(botId) {
   try {
-    return readdirSync4(join40(workspaceDir(botId), "memory", MEMORY_LOG_DIR)).filter((name2) => LOG_FILE_NAME.test(name2)).sort();
+    return readdirSync4(join41(workspaceDir(botId), "memory", MEMORY_LOG_DIR)).filter((name2) => LOG_FILE_NAME.test(name2)).sort();
   } catch {
     return [];
   }
@@ -56455,7 +56660,7 @@ function listMemoryLogs(botId) {
 function readMemoryLog(botId, name2) {
   if (!LOG_FILE_NAME.test(name2)) return null;
   try {
-    return readFileSync28(join40(workspaceDir(botId), "memory", MEMORY_LOG_DIR, name2), "utf8");
+    return readFileSync28(join41(workspaceDir(botId), "memory", MEMORY_LOG_DIR, name2), "utf8");
   } catch {
     return null;
   }
@@ -56467,13 +56672,13 @@ function isMemoryTopicName(name2) {
 function listMemoryTopics(botId) {
   let entries;
   try {
-    entries = readdirSync4(join40(workspaceDir(botId), "memory"));
+    entries = readdirSync4(join41(workspaceDir(botId), "memory"));
   } catch {
     return [];
   }
   return entries.filter(isMemoryTopicName).flatMap((name2) => {
     try {
-      const stat6 = statSync6(join40(workspaceDir(botId), "memory", name2));
+      const stat6 = statSync6(join41(workspaceDir(botId), "memory", name2));
       return stat6.isFile() ? [{ name: name2, bytes: stat6.size }] : [];
     } catch {
       return [];
@@ -56483,13 +56688,13 @@ function listMemoryTopics(botId) {
 function writeMemoryTopic(botId, name2, text8) {
   if (!isMemoryTopicName(name2)) throw new Error("invalid topic name");
   ensureWorkspace(botId);
-  writeFileAtomic(join40(workspaceDir(botId), "memory", name2), redactSecretsInText(text8), { mode: 384 });
+  writeFileAtomic(join41(workspaceDir(botId), "memory", name2), redactSecretsInText(text8), { mode: 384 });
   indexWrittenMemoryFile(botId, `memory/${name2}`);
 }
 function readMemoryTopic(botId, name2) {
   if (!isMemoryTopicName(name2)) return null;
   try {
-    return readFileSync28(join40(workspaceDir(botId), "memory", name2), "utf8");
+    return readFileSync28(join41(workspaceDir(botId), "memory", name2), "utf8");
   } catch {
     return null;
   }
@@ -56498,8 +56703,8 @@ var SESSION_SEARCH_SYSTEM_PROMPT = ' Your own earlier conversations with this us
 var MEMORY_ROUTING_GUIDANCE = " MEMORY.md is for facts that hold in every session: the person's preferences, standing decisions, corrections, and pointers to files in <topicDir> for anything longer. Write each one as a plain statement of fact, never as an instruction to yourself \u2014 an imperative is read back as a directive next session. A procedure for one kind of task belongs in a memory/<topic>.md file or a skill, not here. Anything that will be stale within a week belongs in the conversation, not in memory. When a fact applies only from a date, or stops applying on one, say so in the entry.";
 function memorySystemPrompt(botId, opts = {}) {
   const memory2 = loadMemory(botId);
-  const memoryFile = join40(workspaceDir(botId), "MEMORY.md");
-  const topicDir = join40(workspaceDir(botId), "memory");
+  const memoryFile = join41(workspaceDir(botId), "MEMORY.md");
+  const topicDir = join41(workspaceDir(botId), "memory");
   if (opts.fileTools === false && !opts.managedWrites) {
     if (!memory2) return "";
     return ` Your saved memory is supplied as context; this turn has no memory editing tools.
@@ -56599,6 +56804,10 @@ var projectEmojiPattern = new RegExp("^(?!\\p{Emoji_Component}$)(?:\\p{RGI_Emoji
 function isProjectEmoji(value) {
   return typeof value === "string" && value.length <= 64 && projectEmojiPattern.exec(value)?.[0] === value;
 }
+function toWireTask(task2) {
+  const { resumeCursors: _resumeCursors, lastInstanceId: _lastInstanceId, ...wire } = task2;
+  return wire;
+}
 var TASK_PATCH_FIELDS = [
   "title",
   "projectId",
@@ -56743,9 +56952,9 @@ function titleFromMessage(text8) {
   const line = text8.trim().split("\n")[0].trim();
   return line.length > 48 ? `${line.slice(0, 47)}\u2026` : line || UNTITLED_TASK;
 }
-var BOTS_FILE = join41(DATA_DIR, "bots.json");
-var GROUPS_FILE = join41(DATA_DIR, "groups.json");
-var messagesFile = (threadId) => join41(DATA_DIR, `messages-${threadId}.json`);
+var BOTS_FILE = join42(DATA_DIR, "bots.json");
+var GROUPS_FILE = join42(DATA_DIR, "groups.json");
+var messagesFile = (threadId) => join42(DATA_DIR, `messages-${threadId}.json`);
 var COLORS = [
   "green",
   "blue",
@@ -57159,13 +57368,20 @@ var Store = class {
     this.emit({ type: "group", groupId: group.id });
     return group;
   }
-  /** A thread's durable record: DB rows plus any legacy JSON leftovers. */
+  /** A thread's durable record: DB rows, legacy JSON leftovers, and the
+   * per-thread event logs. Every delete path funnels here — task, group,
+   * and bot deletion — so the logs cannot outlive the thread anywhere. */
   deleteThreadRecord(threadId) {
     this.threads.delete(threadId);
     deleteThread(threadId);
-    for (const file2 of [messagesFile(threadId), `${messagesFile(threadId)}.imported`]) {
+    for (const file2 of [
+      messagesFile(threadId),
+      `${messagesFile(threadId)}.imported`,
+      join42(EVENTS_DIR, `${threadId}.ndjson`),
+      join42(NATIVE_DIR, `${threadId}.ndjson`)
+    ]) {
       try {
-        unlinkSync7(file2);
+        unlinkSync8(file2);
       } catch {
       }
     }
@@ -57677,7 +57893,7 @@ var Store = class {
     } catch {
     }
     try {
-      rmSync5(join41(DATA_DIR, "skill-state", id), { recursive: true, force: true });
+      rmSync5(join42(DATA_DIR, "skill-state", id), { recursive: true, force: true });
     } catch {
     }
     removeBotFolder(id);
@@ -58443,7 +58659,7 @@ function parseSince(value, now = Date.now()) {
     return day.getTime();
   }
   if (/^\d{12,}$/.test(text8)) return Number(text8);
-  const parsed = Date.parse(value.trim());
+  const parsed = Date.parse(/^\d{4}-\d{2}-\d{2}$/.test(text8) ? `${text8}T00:00` : value.trim());
   return Number.isFinite(parsed) ? parsed : null;
 }
 
@@ -58482,7 +58698,7 @@ ${message4.text}`;
 
 // server/delegations.ts
 import { readFileSync as readFileSync30 } from "node:fs";
-import { join as join42 } from "node:path";
+import { join as join43 } from "node:path";
 
 // server/peer-approval.ts
 function settleCard(pending, behavior, source) {
@@ -58629,8 +58845,8 @@ function dismissStalePeerCards(bus2) {
 var pendingDelegations = /* @__PURE__ */ new Map();
 var drainingThreads = /* @__PURE__ */ new Set();
 var queuedRedrains = /* @__PURE__ */ new Set();
-var DELEGATIONS_FILE = join42(DATA_DIR, "delegations.json");
-var RECEIPTS_FILE = join42(DATA_DIR, "delegation-receipts.json");
+var DELEGATIONS_FILE = join43(DATA_DIR, "delegations.json");
+var RECEIPTS_FILE = join43(DATA_DIR, "delegation-receipts.json");
 var MAX_RECEIPTS = 100;
 var RECEIPT_MAX_AGE_MS = 48 * 60 * 60 * 1e3;
 var RESULT_MAX_CHARS = 4e3;
@@ -59320,6 +59536,25 @@ function cancelSteeredMessage(botId, messageId, expectedThreadId) {
   }
   return false;
 }
+function holdSteeredQueue(botId, threadId, queueId) {
+  const entry = queues.get(threadId);
+  if (!entry || entry.botId !== botId || !entry.items.some((item) => item.messageId === queueId)) return null;
+  queues.delete(threadId);
+  changed();
+  return { botId, threadId, items: entry.items };
+}
+function restoreHeldSteeredQueue(held) {
+  const existing = queues.get(held.threadId);
+  if (existing && existing.botId !== held.botId) throw new Error("queued task belongs to another bot");
+  queues.set(held.threadId, {
+    botId: held.botId,
+    items: existing ? [...held.items, ...existing.items] : held.items
+  });
+  changed();
+}
+function settleHeldSteeredQueue(held) {
+  settleChatFollowups(held.items.map((item) => item.messageId), null);
+}
 
 // server/channel-queue.ts
 var queues2 = /* @__PURE__ */ new Map();
@@ -59366,6 +59601,41 @@ function cancelChannelMessage(groupId, queueId) {
   }
   return false;
 }
+function holdChannelQueue(groupId, threadId, queueId) {
+  const entry = queues2.get(threadId);
+  if (!entry || entry.groupId !== groupId || entry.items[0]?.id !== queueId) return null;
+  queues2.delete(threadId);
+  return { groupId, threadId, items: entry.items };
+}
+function restoreHeldChannelQueue(held) {
+  const existing = queues2.get(held.threadId);
+  if (existing && existing.groupId !== held.groupId) throw new Error("queued task belongs to another channel");
+  queues2.set(held.threadId, {
+    groupId: held.groupId,
+    items: existing ? [...held.items, ...existing.items] : held.items
+  });
+}
+function resolveHeldReplyTarget(held, resolve16) {
+  const head = held.items[0];
+  if (!head?.replyToId) return void 0;
+  try {
+    return resolve16(held.threadId, head.replyToId);
+  } catch (error51) {
+    restoreHeldChannelQueue(held);
+    throw error51;
+  }
+}
+function settleHeldChannelQueueHead(held) {
+  const [head, ...rest] = held.items;
+  settleChatFollowups([head.id], null);
+  if (rest.length === 0) return;
+  const existing = queues2.get(held.threadId);
+  if (existing && existing.groupId !== held.groupId) throw new Error("queued task belongs to another channel");
+  queues2.set(held.threadId, {
+    groupId: held.groupId,
+    items: existing ? [...rest, ...existing.items] : rest
+  });
+}
 function drainChannelMessages(isWorking, run3) {
   for (const [threadId, entry] of queues2) {
     if (isWorking(entry.groupId)) continue;
@@ -59429,7 +59699,7 @@ function sendFingerprint(text8, replyToId, channelMode) {
 
 // server/harness/bus.ts
 import { appendFileSync as appendFileSync2 } from "node:fs";
-import { join as join43 } from "node:path";
+import { join as join44 } from "node:path";
 var INCOMPLETE_LOG_MESSAGE = "Canonical event history is incomplete: OpenMausBot could not write one or more events to disk. Live updates will continue.";
 var EventBus = class {
   listeners = /* @__PURE__ */ new Set();
@@ -59457,12 +59727,12 @@ var EventBus = class {
     const persistedEvents = pendingWarning ? [pendingWarning, redactSecrets(event)] : [redactSecrets(event)];
     try {
       this.appendLog(
-        join43(EVENTS_DIR, `${event.threadId}.ndjson`),
+        join44(EVENTS_DIR, `${event.threadId}.ndjson`),
         persistedEvents.map((entry) => JSON.stringify(entry)).join("\n") + "\n",
         { mode: 384 }
       );
       if (pendingWarning) this.pendingLogWarnings.delete(event.threadId);
-      capThreadLog(join43(EVENTS_DIR, `${event.threadId}.ndjson`), currentThreadLogCap());
+      capThreadLog(join44(EVENTS_DIR, `${event.threadId}.ndjson`), currentThreadLogCap());
     } catch (error51) {
       if (!pendingWarning) {
         const warning = {
@@ -59740,7 +60010,7 @@ var ProviderRegistry = class {
 // server/managed-desktop.ts
 import { createHash as createHash16 } from "node:crypto";
 import { lstatSync as lstatSync3, mkdirSync as mkdirSync20 } from "node:fs";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 var uuid3 = external_exports.string().uuid();
 var model = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9._/:+-]{0,199}$/).refine((value) => !value.includes("::"));
 var connectionSchema = external_exports.object({
@@ -59779,14 +60049,14 @@ function companyInstanceConfigs(connection, runtimeDirectory) {
     if (provider.id === "anthropic") entries[id] = {
       driver: "claudeAgent",
       displayName: displayName2,
-      config: { configDir: join44(runtimeDirectory, id, "claude"), managed: true },
+      config: { configDir: join45(runtimeDirectory, id, "claude"), managed: true },
       environment: { ANTHROPIC_API_KEY: connection.token, ANTHROPIC_AUTH_TOKEN: connection.token, ANTHROPIC_BASE_URL: base2, ANTHROPIC_MODEL: provider.models[0] }
     };
     if (provider.id === "openai") entries[id] = {
       driver: "codex",
       displayName: displayName2,
       config: { managed: { url: `${base2}/v1`, models: provider.models } },
-      environment: { OPENMAUSBOT_COMPANY_API_KEY: connection.token, CODEX_HOME: join44(runtimeDirectory, id, "codex") }
+      environment: { OPENMAUSBOT_COMPANY_API_KEY: connection.token, CODEX_HOME: join45(runtimeDirectory, id, "codex") }
     };
     if (provider.id === "openrouter") entries[id] = {
       driver: "openai-compat",
@@ -59904,7 +60174,7 @@ var ManagedDesktopProviders = class {
     mkdirSync20(this.options.dataDirectory, { recursive: true, mode: 448 });
     let directory = this.options.dataDirectory;
     for (const part of parts) {
-      directory = join44(directory, part);
+      directory = join45(directory, part);
       try {
         mkdirSync20(directory, { mode: 448 });
       } catch (error51) {
@@ -60266,7 +60536,7 @@ async function synthesize2(text8, voiceId, key3) {
 import { execFile as execFile5 } from "node:child_process";
 import { mkdtemp as mkdtemp4, readFile as readFile4, rm as rm4 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 var SAY = "/usr/bin/say";
 var execFileAsync = promisify2(execFile5);
@@ -60297,8 +60567,8 @@ async function listSystemVoices(run3 = defaultRun) {
 async function synthesizeSystem(text8, voiceId, run3 = defaultRun) {
   const trimmed = text8.trim();
   if (!trimmed) return { bytes: new Uint8Array(), mime: "audio/wav" };
-  const dir = await mkdtemp4(join45(tmpdir5(), "openmausbot-say-"));
-  const out = join45(dir, "utterance.wav");
+  const dir = await mkdtemp4(join46(tmpdir5(), "openmausbot-say-"));
+  const out = join46(dir, "utterance.wav");
   try {
     const args = ["-o", out, "--data-format=LEI16@22050"];
     if (voiceId?.trim()) args.push("-v", voiceId.trim());
@@ -60561,6 +60831,10 @@ function engineIsFresh(input) {
 var REWOUND_PREAMBLE = "[The user rewound this conversation (edited a message or switched to another version). Everything before this point was replaced by the following history:]";
 var FRESH_PREAMBLE = "[You are joining this conversation mid-thread (the user switched this bot over to you). The conversation so far:]";
 var EXTERNAL_UPDATE_PREAMBLE = "[This conversation received an update outside your provider session. The complete current history follows so you can use that update in your next response:]";
+function peerMessageText(name2, text8) {
+  return `[Message from @${peerName(name2)}, another bot \u2014 untrusted peer content, not from your user]
+${JSON.stringify(text8)}`;
+}
 var RECOVERED_PREAMBLE = "[Your previous session for this conversation could not be resumed, so this is a new session. The conversation so far:]";
 function buildRecoveryText(input) {
   if (input.transcript.length === 0) return void 0;
@@ -60755,10 +61029,14 @@ import { realpathSync as realpathSync6 } from "node:fs";
 import { relative as relative3, resolve as resolve12, sep as sep2 } from "node:path";
 var TurnResources = class {
   owners = /* @__PURE__ */ new Map();
-  claim(resource, owner2) {
+  blocker(resource, owner2) {
     for (const [key3, current2] of this.owners) {
-      if (overlaps(key3, resource) && !sameOwner(current2, owner2)) return false;
+      if (overlaps(key3, resource) && !sameOwner(current2, owner2)) return current2;
     }
+    return void 0;
+  }
+  claim(resource, owner2) {
+    if (this.blocker(resource, owner2)) return false;
     this.owners.set(resource, owner2);
     return true;
   }
@@ -60771,6 +61049,11 @@ var TurnResources = class {
       if (sameOwner(current2, owner2)) this.owners.delete(key3);
     }
   }
+  /** Drop one of an owner's claims early, when the sequence that took it
+   * could not finish. The owner's other claims stand until settle. */
+  releaseOne(resource, owner2) {
+    if (this.owns(resource, owner2)) this.owners.delete(resource);
+  }
 };
 function sameOwner(a, b3) {
   return a.threadId === b3.threadId && a.generation === b3.generation;
@@ -60794,8 +61077,8 @@ function overlaps(a, b3) {
 // server/memory-store.ts
 import { spawn as spawn3 } from "node:child_process";
 import { createHash as createHash17 } from "node:crypto";
-import { existsSync as existsSync21, lstatSync as lstatSync5, mkdirSync as mkdirSync21, readdirSync as readdirSync5, readFileSync as readFileSync31, realpathSync as realpathSync7, unlinkSync as unlinkSync8 } from "node:fs";
-import { dirname as dirname11, join as join46, sep as sep3 } from "node:path";
+import { existsSync as existsSync21, lstatSync as lstatSync5, mkdirSync as mkdirSync21, readdirSync as readdirSync5, readFileSync as readFileSync31, realpathSync as realpathSync7, unlinkSync as unlinkSync9 } from "node:fs";
+import { dirname as dirname11, join as join47, sep as sep3 } from "node:path";
 var MEMORY_INDEX = "MEMORY.md";
 var MemoryStoreError = class extends Error {
   status;
@@ -60841,7 +61124,7 @@ function resolveMemoryPath(botId, path) {
   assertBotId(botId);
   const ref = parseMemoryPath(path);
   const root = workspaceDir(botId);
-  const absolute = join46(root, ...relativeSegments(ref));
+  const absolute = join47(root, ...relativeSegments(ref));
   let realRoot;
   try {
     realRoot = realpathSync7(root);
@@ -60900,7 +61183,7 @@ function listMarkdown(dir, prefix) {
   for (const name2 of names) {
     if (!isMemoryTopicName(name2)) continue;
     try {
-      const info = lstatSync5(join46(dir, name2));
+      const info = lstatSync5(join47(dir, name2));
       if (!info.isFile()) continue;
       files.push({ path: `${prefix}/${name2}`, name: name2, bytes: info.size, modifiedAt: Math.round(info.mtimeMs) });
     } catch {
@@ -60922,8 +61205,8 @@ function memoryOverview(botId) {
     botId,
     workspacePath: root,
     index: memoryCapacity(raw),
-    topics: listMarkdown(join46(root, "memory"), "memory"),
-    logs: listMarkdown(join46(root, "memory", "log"), "memory/log")
+    topics: listMarkdown(join47(root, "memory"), "memory"),
+    logs: listMarkdown(join47(root, "memory", "log"), "memory/log")
   };
 }
 function readMemoryDoc(botId, path) {
@@ -60938,7 +61221,7 @@ function readMemoryDoc(botId, path) {
 function writeMemoryDoc(botId, path, text8, opts = {}) {
   const ref = parseMemoryPath(path);
   ensureWorkspace(botId);
-  if (ref.kind === "log") mkdirSync21(join46(workspaceDir(botId), "memory", "log"), { recursive: true, mode: 448 });
+  if (ref.kind === "log") mkdirSync21(join47(workspaceDir(botId), "memory", "log"), { recursive: true, mode: 448 });
   const absolute = resolveMemoryPath(botId, path);
   const after = redactSecretsInText(text8);
   const bytes = Buffer.byteLength(after, "utf8");
@@ -60968,7 +61251,7 @@ function deleteMemoryDoc(botId, path) {
   }
   const absolute = resolveMemoryPath(botId, path);
   const current2 = readMemoryDoc(botId, path);
-  if (current2.exists) unlinkSync8(absolute);
+  if (current2.exists) unlinkSync9(absolute);
   return { path, before: current2.exists ? current2.text : null };
 }
 function obsidianUrlFor(workspacePath) {
@@ -61022,8 +61305,8 @@ async function openMemoryLocation(botId, target, platform = process.platform, ru
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { closeSync as closeSync8, fstatSync as fstatSync3, mkdirSync as mkdirSync22, openSync as openSync8, readSync as readSync4 } from "node:fs";
 import { appendFile as appendFile3 } from "node:fs/promises";
-import { join as join47 } from "node:path";
-var JOURNAL_DIR = join47(DATA_DIR, "memory-journal");
+import { join as join48 } from "node:path";
+var JOURNAL_DIR = join48(DATA_DIR, "memory-journal");
 var DIFF_CAP = 8e3;
 var BEFORE_CAP = 512 * 1024;
 var MAX_JOURNAL_READ_BYTES = 8 * 1024 * 1024;
@@ -61031,7 +61314,7 @@ var MAX_ROWS = 500;
 var LCS_CELL_CAP = 4e6;
 var CONTEXT = 2;
 function journalFile(botId) {
-  return join47(JOURNAL_DIR, `${botId}.ndjson`);
+  return join48(JOURNAL_DIR, `${botId}.ndjson`);
 }
 function editScript(a, b3) {
   if (a.length * b3.length > LCS_CELL_CAP) {
@@ -61349,10 +61632,10 @@ import {
   renameSync as renameSync5,
   rmSync as rmSync6,
   symlinkSync,
-  unlinkSync as unlinkSync9,
+  unlinkSync as unlinkSync10,
   writeFileSync as writeFileSync15
 } from "node:fs";
-import { dirname as dirname12, join as join48, relative as relative4, resolve as resolve13 } from "node:path";
+import { dirname as dirname12, join as join49, relative as relative4, resolve as resolve13 } from "node:path";
 
 // shared/learn-request.ts
 var SAVE_RUN_AS_SKILL_LINE = "Save the steps below as a reusable skill for my review.";
@@ -61483,7 +61766,7 @@ var skillManifestEntrySchema = external_exports.object({
 var skillManifestSchema = external_exports.record(external_exports.string(), skillManifestEntrySchema);
 var managedLinksSchema = external_exports.array(external_exports.string());
 function skillsDir(botId) {
-  return join48(workspaceDir(botId), "skills");
+  return join49(workspaceDir(botId), "skills");
 }
 function directoryEntryState(path) {
   try {
@@ -61513,20 +61796,20 @@ function ensureSkillsRoot(botId) {
 function existingSkillDirectory(botId, name2) {
   const root = existingSkillsRoot(botId);
   if (!root) return null;
-  const directory = join48(root, name2);
+  const directory = join49(root, name2);
   return directoryEntryState(directory) === "directory" ? directory : null;
 }
 function skillDirectory(botId, name2, entry) {
   if (!entry.storageRevision) return existingSkillDirectory(botId, name2);
   const root = existingSkillsRoot(botId);
   if (!root) return null;
-  const revisions = join48(root, ".revisions");
+  const revisions = join49(root, ".revisions");
   if (directoryEntryState(revisions) !== "directory") return null;
-  const directory = join48(revisions, entry.storageRevision);
+  const directory = join49(revisions, entry.storageRevision);
   return directoryEntryState(directory) === "directory" ? directory : null;
 }
 function skillTarget(root, name2, entry) {
-  return entry.storageRevision ? join48(root, "skills", ".revisions", entry.storageRevision) : join48(root, "skills", name2);
+  return entry.storageRevision ? join49(root, "skills", ".revisions", entry.storageRevision) : join49(root, "skills", name2);
 }
 function entryExistsWithoutFollowing(path) {
   try {
@@ -61539,7 +61822,7 @@ function entryExistsWithoutFollowing(path) {
 function nativeLinkDirectory(root, relative6, create) {
   const [family, leaf] = relative6.split("/");
   if (!family || !leaf) return null;
-  const familyDir = join48(root, family);
+  const familyDir = join49(root, family);
   let familyState = directoryEntryState(familyDir);
   if (familyState === "missing" && create) {
     try {
@@ -61550,7 +61833,7 @@ function nativeLinkDirectory(root, relative6, create) {
     familyState = directoryEntryState(familyDir);
   }
   if (familyState !== "directory") return null;
-  const linkDir = join48(familyDir, leaf);
+  const linkDir = join49(familyDir, leaf);
   let linkState = directoryEntryState(linkDir);
   if (linkState === "missing" && create) {
     try {
@@ -61563,13 +61846,13 @@ function nativeLinkDirectory(root, relative6, create) {
   return linkState === "directory" ? linkDir : null;
 }
 function skillStateDir(botId) {
-  return join48(DATA_DIR, "skill-state", botId);
+  return join49(DATA_DIR, "skill-state", botId);
 }
 function manifestPath(botId) {
-  return join48(skillStateDir(botId), "skills.json");
+  return join49(skillStateDir(botId), "skills.json");
 }
 function managedLinksPath(botId) {
-  return join48(skillStateDir(botId), "managed-links.json");
+  return join49(skillStateDir(botId), "managed-links.json");
 }
 function readManagedLinks(botId) {
   try {
@@ -61604,7 +61887,7 @@ function readManifest(botId) {
   if (existsSync22(securePath)) return manifestFromFile(securePath) ?? {};
   const legacyRoot = existingSkillsRoot(botId);
   if (!legacyRoot) return {};
-  const legacyPath = join48(legacyRoot, "skills.json");
+  const legacyPath = join49(legacyRoot, "skills.json");
   if (!existsSync22(legacyPath)) return {};
   const legacy = manifestFromFile(legacyPath) ?? {};
   const migrated = {};
@@ -61646,20 +61929,20 @@ function nativeLinkDirectlyTargetsOwnedSkill(link2, root, name2, revisionWasMana
     if (!lstatSync6(link2).isSymbolicLink()) return false;
     const rawTarget = readlinkSync(link2);
     const resolvedTarget = resolve13(targetBaseDirectory, rawTarget.replace(/^\\\\\?\\/, ""));
-    const insideSkills = relative4(join48(root, "skills"), resolvedTarget).replaceAll("\\", "/");
+    const insideSkills = relative4(join49(root, "skills"), resolvedTarget).replaceAll("\\", "/");
     return insideSkills === name2 || revisionWasManaged && /^\.revisions\/[a-f0-9]{64}$/.test(insideSkills);
   } catch {
     return false;
   }
 }
 function removeOwnedNativeLink(botId, link2, root, name2, revisionWasManaged, beforeRemove) {
-  const quarantineDir = join48(skillStateDir(botId), "link-removal");
+  const quarantineDir = join49(skillStateDir(botId), "link-removal");
   try {
     mkdirSync23(quarantineDir, { recursive: true, mode: 448 });
   } catch {
     return "retry";
   }
-  const quarantined = join48(quarantineDir, randomUUID17());
+  const quarantined = join49(quarantineDir, randomUUID17());
   beforeRemove?.(link2);
   try {
     renameSync5(link2, quarantined);
@@ -61674,7 +61957,7 @@ function removeOwnedNativeLink(botId, link2, root, name2, revisionWasManaged, be
     dirname12(link2)
   )) {
     try {
-      unlinkSync9(quarantined);
+      unlinkSync10(quarantined);
       return "removed";
     } catch {
       try {
@@ -61712,7 +61995,7 @@ function removeNativeLinksForUnsafeSkillsRoot(botId, root, previouslyManaged, be
       continue;
     }
     for (const name2 of /* @__PURE__ */ new Set([...existing, ...previouslyManaged])) {
-      const link2 = join48(linkDir, name2);
+      const link2 = join49(linkDir, name2);
       if (!nativeLinkDirectlyTargetsOwnedSkill(link2, root, name2, previouslyManaged.includes(name2))) continue;
       const result = removeOwnedNativeLink(
         botId,
@@ -61752,7 +62035,7 @@ function syncSkillLinks(botId, options = {}) {
     } catch {
     }
     for (const name2 of /* @__PURE__ */ new Set([...existing, ...previouslyManaged])) {
-      const link2 = join48(linkDir, name2);
+      const link2 = join49(linkDir, name2);
       const target = desired.get(name2);
       if (target && nativeLinkPointsToSkill(link2, target)) {
         managed.add(name2);
@@ -61770,7 +62053,7 @@ function syncSkillLinks(botId, options = {}) {
     }
     if (!enabled.length) continue;
     for (const [name2, entry] of enabled) {
-      const link2 = join48(linkDir, name2);
+      const link2 = join49(linkDir, name2);
       const target = skillTarget(root, name2, entry);
       if (nativeLinkPointsToSkill(link2, target)) {
         managed.add(name2);
@@ -61796,7 +62079,7 @@ function skillContentMatches(botId, name2, entry) {
   try {
     const directory = skillDirectory(botId, name2, entry);
     if (!directory) return false;
-    const file2 = join48(directory, "SKILL.md");
+    const file2 = join49(directory, "SKILL.md");
     if (!lstatSync6(file2).isFile()) return false;
     return createHash18("sha256").update(readFileSync32(file2)).digest("hex") === entry.sha256;
   } catch {
@@ -61826,7 +62109,7 @@ function readSkillFile(botId, name2) {
   if (!directory) return null;
   let descriptor = null;
   try {
-    const path = join48(directory, "SKILL.md");
+    const path = join49(directory, "SKILL.md");
     const before = lstatSync6(path);
     if (!before.isFile() || before.size > SKILL_FILE_MAX_BYTES) return null;
     descriptor = openSync9(path, constants4.O_RDONLY | (process.platform === "win32" ? 0 : constants4.O_NOFOLLOW ?? 0));
@@ -61866,9 +62149,9 @@ function setSkillEnabled(botId, name2, enabled) {
 function removeReviewedRevision(botId, revision, sha2564) {
   const root = existingSkillsRoot(botId);
   if (!root) return;
-  const revisions = join48(root, ".revisions");
+  const revisions = join49(root, ".revisions");
   if (directoryEntryState(revisions) !== "directory") return;
-  const directory = join48(revisions, revision);
+  const directory = join49(revisions, revision);
   if (!learnedSkillDirectoryMatches(directory, sha2564)) return;
   try {
     rmSync6(directory, { recursive: true, force: true });
@@ -61890,7 +62173,7 @@ function retireReviewedSkillStorage(botId, name2, entry) {
 function removeReviewedRevisionsNamed(botId, name2) {
   const root = existingSkillsRoot(botId);
   if (!root) return;
-  const revisions = join48(root, ".revisions");
+  const revisions = join49(root, ".revisions");
   if (directoryEntryState(revisions) !== "directory") return;
   let candidates;
   try {
@@ -61899,10 +62182,10 @@ function removeReviewedRevisionsNamed(botId, name2) {
     return;
   }
   for (const revision of candidates) {
-    const directory = join48(revisions, revision);
+    const directory = join49(revisions, revision);
     if (directoryEntryState(directory) !== "directory") continue;
     try {
-      const file2 = join48(directory, "SKILL.md");
+      const file2 = join49(directory, "SKILL.md");
       const stat6 = lstatSync6(file2);
       if (!stat6.isFile() || stat6.size > SKILL_FILE_MAX_BYTES) continue;
       const parsed = parseSkillMd(readFileSync32(file2, "utf8"));
@@ -61921,7 +62204,7 @@ function removeSkill(botId, name2) {
   if (directoryEntryState(root) === "unsafe") {
     return { error: "the workspace skills path is a symlink or file; refusing to remove through it" };
   }
-  const target = entry.storageRevision ? null : join48(root, name2);
+  const target = entry.storageRevision ? null : join49(root, name2);
   const targetState = target ? directoryEntryState(target) : "missing";
   delete manifest[name2];
   writeManifest(botId, manifest);
@@ -61954,7 +62237,7 @@ var stagedSkillWriteSchema = external_exports.object({
 });
 var stagedStoreSchema = external_exports.object({ writes: external_exports.record(external_exports.string(), stagedSkillWriteSchema) });
 function stagedPath(botId) {
-  return join48(skillStateDir(botId), "staged.json");
+  return join49(skillStateDir(botId), "staged.json");
 }
 function readStaged(botId) {
   const securePath = stagedPath(botId);
@@ -61969,7 +62252,7 @@ function readStaged(botId) {
   }
   const legacyRoot = existingSkillsRoot(botId);
   if (!legacyRoot) return { writes: {} };
-  const legacyPath = join48(legacyRoot, "staged.json");
+  const legacyPath = join49(legacyRoot, "staged.json");
   if (!existsSync22(legacyPath)) return { writes: {} };
   const empty = { writes: {} };
   writeStaged(botId, empty);
@@ -62018,7 +62301,7 @@ function learnedSkillDirectoryMatches(directory, sha2564) {
   try {
     const entries = readdirSync6(directory);
     if (entries.length !== 1 || entries[0] !== "SKILL.md") return false;
-    const file2 = join48(directory, "SKILL.md");
+    const file2 = join49(directory, "SKILL.md");
     if (!lstatSync6(file2).isFile()) return false;
     return createHash18("sha256").update(readFileSync32(file2)).digest("hex") === sha2564;
   } catch {
@@ -62047,14 +62330,14 @@ function publishReviewedRevision(botId, stageId, skillMd, sha2564) {
   if (directoryEntryState(state) !== "directory") {
     throw new Error("the protected skill state path is not a real directory");
   }
-  const preparedRoot = join48(state, "reviewed-revisions");
+  const preparedRoot = join49(state, "reviewed-revisions");
   const preparedRootState = directoryEntryState(preparedRoot);
   if (preparedRootState === "unsafe") {
     throw new Error("the protected revision path is not a real directory");
   }
   if (preparedRootState === "missing") mkdirSync23(preparedRoot, { mode: 448 });
   const revision = createHash18("sha256").update(stageId).digest("hex");
-  const prepared = join48(preparedRoot, revision);
+  const prepared = join49(preparedRoot, revision);
   if (!learnedSkillDirectoryMatches(prepared, sha2564)) {
     if (entryExistsWithoutFollowing(prepared)) {
       if (directoryEntryState(prepared) !== "directory") {
@@ -62062,10 +62345,10 @@ function publishReviewedRevision(botId, stageId, skillMd, sha2564) {
       }
       rmSync6(prepared, { recursive: true, force: true });
     }
-    const temporary = join48(preparedRoot, `.prepare-${revision}-${randomUUID17()}`);
+    const temporary = join49(preparedRoot, `.prepare-${revision}-${randomUUID17()}`);
     try {
       mkdirSync23(temporary, { mode: 448 });
-      writeFileAtomic(join48(temporary, "SKILL.md"), skillMd, { mode: 384 });
+      writeFileAtomic(join49(temporary, "SKILL.md"), skillMd, { mode: 384 });
       if (!learnedSkillDirectoryMatches(temporary, sha2564)) {
         throw new Error("the protected reviewed bytes do not match the approval card");
       }
@@ -62079,13 +62362,13 @@ function publishReviewedRevision(botId, stageId, skillMd, sha2564) {
   if (!root) throw new Error("the workspace skills path must be a real directory, not a symlink or file");
   const rootIdentity = directoryIdentity2(root);
   if (!rootIdentity) throw new Error("the workspace skills path changed during update");
-  const revisions = join48(root, ".revisions");
+  const revisions = join49(root, ".revisions");
   const revisionsState = directoryEntryState(revisions);
   if (revisionsState === "unsafe") throw new Error("the skill revisions path is not a real directory");
   if (revisionsState === "missing") mkdirSync23(revisions, { mode: 448 });
   const revisionsIdentity = directoryIdentity2(revisions);
   if (!revisionsIdentity) throw new Error("the skill revisions path could not be created safely");
-  const target = join48(revisions, revision);
+  const target = join49(revisions, revision);
   if (learnedSkillDirectoryMatches(target, sha2564)) {
     try {
       rmSync6(prepared, { recursive: true, force: true });
@@ -62108,14 +62391,14 @@ function publishReviewedRevision(botId, stageId, skillMd, sha2564) {
 function commitNewSkillFiles(botId, name2, files, commitManifest) {
   const root = ensureSkillsRoot(botId);
   if (!root) throw new Error("the workspace skills path must be a real directory, not a symlink or file");
-  const target = join48(root, name2);
-  const staged = join48(root, `.install-${name2}-${randomUUID17()}`);
+  const target = join49(root, name2);
+  const staged = join49(root, `.install-${name2}-${randomUUID17()}`);
   if (entryExistsWithoutFollowing(target)) throw new Error(`skill path already exists: ${name2}`);
   let published = false;
   try {
     mkdirSync23(staged, { mode: 448 });
     for (const file2 of files) {
-      writeFileSync15(join48(staged, file2.path), file2.content, { mode: 384 });
+      writeFileSync15(join49(staged, file2.path), file2.content, { mode: 384 });
     }
     if (directoryEntryState(root) !== "directory" || entryExistsWithoutFollowing(target)) {
       throw new Error("the workspace skills path changed during installation");
@@ -62159,7 +62442,7 @@ function installPreparedSkill(botId, source, prepared, options) {
   };
   const root = ensureSkillsRoot(botId);
   if (!root) return { error: "the workspace skills path must be a real directory, not a symlink or file" };
-  const target = join48(root, name2);
+  const target = join49(root, name2);
   if (entryExistsWithoutFollowing(target)) {
     if (directoryEntryState(target) !== "directory") {
       return { error: `skill path must be a real directory, not a symlink or file: ${name2}` };
@@ -62323,7 +62606,7 @@ function rejectStagedSkillWrite(botId, id) {
   if (staged?.action === "update" && !alreadyApplied) {
     const revision = createHash18("sha256").update(id).digest("hex");
     removeReviewedRevision(botId, revision, staged.sha256);
-    const prepared = join48(skillStateDir(botId), "reviewed-revisions", revision);
+    const prepared = join49(skillStateDir(botId), "reviewed-revisions", revision);
     if (learnedSkillDirectoryMatches(prepared, staged.sha256)) {
       try {
         rmSync6(prepared, { recursive: true, force: true });
@@ -62400,7 +62683,7 @@ function skillsSystemPrompt(botId) {
   let bytes = 0;
   for (const skill of enabled.slice(0, INDEX_MAX_SKILLS)) {
     const entry = manifest[skill.name];
-    const file2 = join48(skillTarget(root, skill.name, entry), "SKILL.md");
+    const file2 = join49(skillTarget(root, skill.name, entry), "SKILL.md");
     const line = `- ${skill.name}: ${skill.description} Read ${JSON.stringify(file2)}.`;
     bytes += Buffer.byteLength(line, "utf8");
     if (bytes > INDEX_MAX_BYTES) break;
@@ -62460,7 +62743,7 @@ function parseSkillSource(input) {
   const text8 = input.trim();
   if (!text8) return { error: "paste a GitHub repository, folder, or SKILL.md URL" };
   if (/^https?:\/\/raw\.githubusercontent\.com\/.+\/SKILL\.md$/i.test(text8)) return { rawUrl: text8 };
-  const blob = text8.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+)\/blob\/([^/]+)\/(.+SKILL\.md)$/i);
+  const blob = text8.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+)\/blob\/([^/]+)\/((?:.*\/)?SKILL\.md)$/i);
   if (blob) {
     return { rawUrl: `https://raw.githubusercontent.com/${blob[1]}/${blob[2]}/${blob[3]}/${blob[4]}` };
   }
@@ -62657,7 +62940,7 @@ function mentionPrompt(tagged) {
 // server/local-computer.ts
 import { lstatSync as lstatSync7, readFileSync as readFileSync33, realpathSync as realpathSync9, statSync as statSync8 } from "node:fs";
 import { homedir as homedir23 } from "node:os";
-import { dirname as dirname13, isAbsolute as isAbsolute10, join as join49 } from "node:path";
+import { dirname as dirname13, isAbsolute as isAbsolute10, join as join50 } from "node:path";
 var REQUIRED_LINUX_TOOLS = ["click", "get_window_state", "list_apps", "type_text"];
 var DRIVER_FILE_IDENTITY_KEYS = [
   "dev",
@@ -62842,10 +63125,10 @@ function readCuaConnection({
   home = homedir23(),
   validateLinuxRuntime = validateLinuxDescriptorRuntime
 } = {}) {
-  const candidates = userData ? [join49(userData, "cua-connection.json")] : [];
+  const candidates = userData ? [join50(userData, "cua-connection.json")] : [];
   if (platform === "darwin") {
     for (const directory of ["OpenMausBot", "openmausbot", "OpenGrokBot", "opengrokbot"]) {
-      candidates.push(join49(home, "Library", "Application Support", directory, "cua-connection.json"));
+      candidates.push(join50(home, "Library", "Application Support", directory, "cua-connection.json"));
     }
   }
   for (const file2 of new Set(candidates)) {
@@ -63019,12 +63302,12 @@ import { createConnection, createServer } from "node:net";
 // server/vps-ssh.ts
 import { chmodSync as chmodSync5, existsSync as existsSync23, mkdirSync as mkdirSync24, readFileSync as readFileSync34, renameSync as renameSync6, statSync as statSync9, writeFileSync as writeFileSync16 } from "node:fs";
 import { homedir as homedir24 } from "node:os";
-import { delimiter as delimiter4, join as join50 } from "node:path";
+import { delimiter as delimiter4, join as join51 } from "node:path";
 var VPS_SSH_DIR = "ssh";
 function findExecutable(name2, pathValue, exclude) {
   for (const dir of pathValue.split(delimiter4)) {
     if (!dir || dir === exclude) continue;
-    const candidate = join50(dir, name2);
+    const candidate = join51(dir, name2);
     try {
       const stat6 = statSync9(candidate);
       if (stat6.isFile() && (stat6.mode & 73) !== 0) return candidate;
@@ -63045,14 +63328,14 @@ function writeIfChanged(path, content3, mode) {
   writeFileSync16(temp, content3, { mode });
   renameSync6(temp, path);
 }
-function vpsSshConfigText(sshDir, userConfig = join50(homedir24(), ".ssh", "config"), systemConfig = "/etc/ssh/ssh_config") {
+function vpsSshConfigText(sshDir, userConfig = join51(homedir24(), ".ssh", "config"), systemConfig = "/etc/ssh/ssh_config") {
   return [
     "# Written by OpenMausBot for its VPS computer connections. Do not edit;",
     "# it is regenerated. Your own ~/.ssh/config is included first and wins.",
     ...existsSync23(userConfig) ? [`Include ${userConfig}`] : [],
     "Host *",
     "  ControlMaster auto",
-    `  ControlPath ${join50(sshDir, "cm-%C")}`,
+    `  ControlPath ${join51(sshDir, "cm-%C")}`,
     "  ControlPersist 10m",
     "  ServerAliveInterval 15",
     "  ServerAliveCountMax 3",
@@ -63063,11 +63346,11 @@ function vpsSshConfigText(sshDir, userConfig = join50(homedir24(), ".ssh", "conf
 }
 function prepareVpsSsh(dataDir, pathValue, platform = process.platform) {
   if (platform === "win32") return { configPath: null, path: pathValue };
-  const sshDir = join50(dataDir, VPS_SSH_DIR);
-  const binDir = join50(sshDir, "bin");
+  const sshDir = join51(dataDir, VPS_SSH_DIR);
+  const binDir = join51(sshDir, "bin");
   mkdirSync24(binDir, { recursive: true, mode: 448 });
   chmodSync5(sshDir, 448);
-  const configPath = join50(sshDir, "config");
+  const configPath = join51(sshDir, "config");
   writeIfChanged(configPath, vpsSshConfigText(sshDir), 384);
   const realSsh = findExecutable("ssh", pathValue, binDir);
   if (!realSsh) return { configPath, path: pathValue };
@@ -63078,7 +63361,7 @@ function prepareVpsSsh(dataDir, pathValue, platform = process.platform) {
     `exec ${JSON.stringify(realSsh)} -F ${JSON.stringify(configPath)} "$@"`,
     ""
   ].join("\n");
-  writeIfChanged(join50(binDir, "ssh"), shim, 448);
+  writeIfChanged(join51(binDir, "ssh"), shim, 448);
   return { configPath, path: `${binDir}${delimiter4}${pathValue}` };
 }
 
@@ -64007,7 +64290,7 @@ async function vpsComputerScreenshot(cfg2, botId, runner = defaultRunner) {
 // server/routines.ts
 import { randomUUID as randomUUID18 } from "node:crypto";
 import { mkdirSync as mkdirSync25, readFileSync as readFileSync35 } from "node:fs";
-import { dirname as dirname14, join as join51 } from "node:path";
+import { dirname as dirname14, join as join52 } from "node:path";
 
 // node_modules/.pnpm/croner@10.0.1/node_modules/croner/dist/croner.js
 function T(s4) {
@@ -64739,6 +65022,7 @@ function routineRequestOwnerKey(owner2) {
 var ALL_DAYS = [0, 1, 2, 3, 4, 5, 6];
 var CATCH_UP_MS = 12 * 60 * 6e4;
 var WAKE_HORIZON_MS = 60 * 6e4;
+var ROUTINE_DEFERRAL_NOTICE_MS = 30 * 6e4;
 var MAX_DATE_MS = 864e13;
 var LOCAL_DAY_MS = 24 * 60 * 6e4;
 var INTERVAL_RESTRICTION_SEARCH_MS = 9 * LOCAL_DAY_MS;
@@ -65119,7 +65403,7 @@ var RoutineManager = class {
   ticking = false;
   constructor(options) {
     this.options = options;
-    this.file = options.file ?? join51(DATA_DIR, "routines.json");
+    this.file = options.file ?? join52(DATA_DIR, "routines.json");
     this.now = options.now ?? Date.now;
     try {
       const disk = JSON.parse(readFileSync35(this.file, "utf8"));
@@ -65713,7 +65997,20 @@ var RoutineManager = class {
           }
         }
         const state = this.targetState(run3);
-        if (state === "busy") continue;
+        if (state === "busy") {
+          if (run3.deferredAt == null) {
+            run3.deferredAt = now;
+            this.save();
+            this.emitRun(run3);
+          }
+          if (run3.deferredNoticeAt == null && now - run3.deferredAt >= ROUTINE_DEFERRAL_NOTICE_MS) {
+            run3.deferredNoticeAt = now;
+            this.save();
+            this.emitRun(run3);
+            this.options.onRunDeferred?.(cloneRun(run3));
+          }
+          continue;
+        }
         if (state === "missing") {
           this.failRun(run3, this.missingTargetMessage(run3.target));
           continue;
@@ -66018,7 +66315,7 @@ var RoutineManager = class {
 // server/calendar-calls.ts
 import { randomUUID as randomUUID19 } from "node:crypto";
 import { mkdirSync as mkdirSync26, readFileSync as readFileSync36 } from "node:fs";
-import { dirname as dirname15, join as join52 } from "node:path";
+import { dirname as dirname15, join as join53 } from "node:path";
 var MAX_BOTS = 100;
 var MAX_ATTACHMENTS2 = 50;
 var scheduleSchema = external_exports.discriminatedUnion("type", [
@@ -66124,7 +66421,7 @@ var CalendarCallManager = class {
   timer = null;
   ticking = false;
   constructor(options) {
-    this.file = options.file ?? join52(DATA_DIR, "calendar-calls.json");
+    this.file = options.file ?? join53(DATA_DIR, "calendar-calls.json");
     this.now = options.now ?? Date.now;
     this.botExists = options.botExists;
     this.onDue = options.onDue;
@@ -66294,12 +66591,12 @@ var CalendarCallManager = class {
 // server/browser-engine.ts
 import { spawn as spawn5 } from "node:child_process";
 import { createHash as createHash20, randomBytes as randomBytes4, randomUUID as randomUUID20 } from "node:crypto";
-import { chmodSync as chmodSync6, constants as constants5, copyFileSync, existsSync as existsSync24, mkdirSync as mkdirSync27, readFileSync as readFileSync37, readdirSync as readdirSync7, renameSync as renameSync7, rmSync as rmSync7, statSync as statSync10, unlinkSync as unlinkSync10, writeFileSync as writeFileSync17 } from "node:fs";
+import { chmodSync as chmodSync6, constants as constants5, copyFileSync, existsSync as existsSync24, mkdirSync as mkdirSync27, readFileSync as readFileSync37, readdirSync as readdirSync7, renameSync as renameSync7, rmSync as rmSync7, statSync as statSync10, unlinkSync as unlinkSync11, writeFileSync as writeFileSync17 } from "node:fs";
 import { homedir as homedir25, tmpdir as tmpdir6 } from "node:os";
-import { delimiter as delimiter5, dirname as dirname16, join as join54, resolve as resolve14 } from "node:path";
+import { delimiter as delimiter5, dirname as dirname16, join as join55, resolve as resolve14 } from "node:path";
 
 // server/browser-bundle-release.ts
-import { join as join53 } from "node:path";
+import { join as join54 } from "node:path";
 
 // server/browser-engine-release.ts
 var AGENT_BROWSER_VERSION = "0.37.0";
@@ -66354,12 +66651,13 @@ function resolveAgentBrowserReleaseAsset(platform = process.platform, arch = pro
 }
 
 // server/browser-bundle-release.ts
-var CHROME_VERSION = "152.0.7977.82";
+var CHROME_VERSION = "153.0.8010.47";
 var CHROME_ASSETS = {
-  "darwin-arm64": { platform: "mac-arm64", bytes: 97760996, sha256: "1615f063c894aa824fd55c89f8f05e9904f63cce0c95d0cbce7394d77884fba5", executableSha256: "ac18537fb2bc2b72b0440893b6ea5d4ef3bacc6220b1e9a1693c73f8b1045fbe" },
-  "darwin-x64": { platform: "mac-x64", bytes: 102895824, sha256: "c903707292c6aaed7c6e572c0bb5e6645454e45d9e0e6db27e876b18e9165f31", executableSha256: "2faefd55d4e47764956e31e338d362a1e794037fa772a426ffd510f122f33f19" },
-  "linux-x64": { platform: "linux64", bytes: 119454769, sha256: "0ca12ea26b502a83e32db334a17883c315348845efc071d908de7a6d94a97eff", executableSha256: "1301a5024fef1d58c4cfbde5d44794cb18c5b2cbbe4f3c64f81cc4eaa683c45f" },
-  "win32-x64": { platform: "win64", bytes: 119768220, sha256: "86fb1fa7fbbda65f6f1572062c358803e61a6e6d9489e6619b37a61d609fa845", executableSha256: "ec0744f041cb6c35c439c85a5ac42d77b507838cd59cac005e25114025336c98" }
+  "darwin-arm64": { platform: "mac-arm64", bytes: 98668949, sha256: "6d28839675b6f22dbd7ba8775dbdabcae7a5be37b482380b27b12f05b748b955", executableSha256: "111ee425ea5b0a01dcb19fda16452a9be0319749cba374b1c987d2437d8dcedb" },
+  "darwin-x64": { platform: "mac-x64", bytes: 103712919, sha256: "aa178547f9751fbcf413e0f57915ddb72e83064d4d1c4a29dc1719b169f9cc2f", executableSha256: "33452695b1b6f18db2f796a422eca69b69ca8aacce36d1ff8c6f5d69eac1a635" },
+  "linux-arm64": { platform: "linux-arm64", bytes: 120245582, sha256: "af0931a58d6bab688112d5ca1f7abd6d95c0b8a296ef34637f272795787774d7", executableSha256: "b6a9f0483c976fddc72c34ce1c983a1275163cdfb95576874bfed5ff07c53807" },
+  "linux-x64": { platform: "linux64", bytes: 119695587, sha256: "7728775cf4a35464cd81c8eea2d44d6d32ccc0bd1edfa75aea7f32d146963d63", executableSha256: "ea90dee9cbd7b17f197eb6c386bd9f1ff636734ee99753cd2408658c45358bf2" },
+  "win32-x64": { platform: "win64", bytes: 120466147, sha256: "9f405cfaf7bc08bf9e046e653cd3086c0faa1d4e25907de857f7e7f093a20122", executableSha256: "01176f6928faeb37ff018bc8884bbca8a0197f51b659d467f2501ab2c64f9fcf" }
 };
 function browserBundleSpec(target) {
   if (!Object.hasOwn(CHROME_ASSETS, target)) throw new Error(`Unsupported desktop browser target: ${target}`);
@@ -66396,10 +66694,10 @@ function browserBundlePaths(bundleDirectory, target) {
   const spec = browserBundleSpec(target);
   return {
     directory: bundleDirectory,
-    manifest: join53(bundleDirectory, "manifest.json"),
-    engine: join53(bundleDirectory, spec.engine.executable),
-    chrome: join53(bundleDirectory, spec.chrome.executable),
-    licenses: join53(bundleDirectory, "licenses")
+    manifest: join54(bundleDirectory, "manifest.json"),
+    engine: join54(bundleDirectory, spec.engine.executable),
+    chrome: join54(bundleDirectory, spec.chrome.executable),
+    licenses: join54(bundleDirectory, "licenses")
   };
 }
 
@@ -66795,11 +67093,11 @@ function browserSessionsDirectory(env) {
   const namespace = env.AGENT_BROWSER_NAMESPACE;
   if (namespace && !/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/.test(namespace)) throw new Error("Invalid browser namespace.");
   const home = (process.platform === "win32" ? env.USERPROFILE : env.HOME) || homedir25();
-  const stateRoot = namespace ? join54(home, ".agent-browser", "namespaces", namespace, "state") : join54(home, ".agent-browser");
-  return join54(stateRoot, "sessions");
+  const stateRoot = namespace ? join55(home, ".agent-browser", "namespaces", namespace, "state") : join55(home, ".agent-browser");
+  return join55(stateRoot, "sessions");
 }
 function managedBrowserConfigPath(env) {
-  return join54(browserSessionsDirectory(env), "..", "omb-managed-config.json");
+  return join55(browserSessionsDirectory(env), "..", "omb-managed-config.json");
 }
 function ensureManagedBrowserConfig(env) {
   const path = managedBrowserConfigPath(env);
@@ -66887,11 +67185,11 @@ async function prepareBrowserSessionState(binaryPath, session, options = {}) {
   ensureManagedBrowserConfig(env);
   if (options.persistent === false) return;
   const directory = browserSessionsDirectory(env);
-  const key3 = join54(directory, session);
+  const key3 = join55(directory, session);
   let pending = preparedBrowserSessions.get(key3);
   if (!pending) {
     pending = (async () => {
-      const targetBase = join54(directory, `${restoreKey}-${session}`);
+      const targetBase = join55(directory, `${restoreKey}-${session}`);
       const hasTarget = () => existsSync24(`${targetBase}.json.enc`) || existsSync24(`${targetBase}.json`);
       if (hasTarget()) return;
       check2();
@@ -66901,7 +67199,7 @@ async function prepareBrowserSessionState(binaryPath, session, options = {}) {
       check2();
       if (hasTarget()) return;
       const candidates = [".json.enc", ".json"].flatMap((suffix) => {
-        const path = join54(directory, `${session}-${session}${suffix}`);
+        const path = join55(directory, `${session}-${session}${suffix}`);
         try {
           const stat6 = statSync10(path);
           if (!stat6.isFile()) throw new Error("Saved browser state is not a file.");
@@ -66936,7 +67234,7 @@ function isMusl(platform = process.platform, exists = existsSync24) {
 }
 function pinnedBinaryPath(dataDir = DATA_DIR, platform = process.platform, arch = process.arch) {
   const version2 = agentBrowserReleaseVersion(resolveAgentBrowserReleaseAsset(platform, arch));
-  return join54(dataDir, ENGINE_DIR, version2, executableName(platform));
+  return join55(dataDir, ENGINE_DIR, version2, executableName(platform));
 }
 function onPath(env, platform, exists) {
   const pathValue = platform === "win32" ? Object.entries(env).findLast(([key3]) => key3.toUpperCase() === "PATH")?.[1] : env.PATH;
@@ -66952,7 +67250,7 @@ function packagedBrowser(options) {
   const resources = (options.env ?? process.env).OMB_RESOURCES_PATH;
   if (!resources) return null;
   try {
-    return browserBundlePaths(join54(resolve14(resources), "browser-engine"), `${options.platform ?? process.platform}-${options.arch ?? process.arch}`);
+    return browserBundlePaths(join55(resolve14(resources), "browser-engine"), `${options.platform ?? process.platform}-${options.arch ?? process.arch}`);
   } catch {
     return null;
   }
@@ -66977,7 +67275,7 @@ async function installAgentBrowserBinary(options = {}) {
   const asset = options.asset ?? resolveAgentBrowserReleaseAsset(platform, options.arch ?? process.arch, options.musl ?? isMusl(platform));
   if (!asset) throw new Error(`agent-browser publishes no build for ${platform}-${options.arch ?? process.arch}.`);
   const destination = pinnedBinaryPath(options.dataDir, platform, options.arch);
-  const directory = join54(destination, "..");
+  const directory = join55(destination, "..");
   mkdirSync27(directory, { recursive: true, mode: 448 });
   const url2 = agentBrowserReleaseUrl(asset);
   options.log?.(`downloading agent-browser ${agentBrowserReleaseVersion(asset)} (${Math.round(asset.bytes / 1024 / 1024)} MB, digest pinned)`);
@@ -67029,7 +67327,7 @@ function ensureChrome(binaryPath, options = {}) {
   });
 }
 function browserEngineEncryptionKey(dataDir = DATA_DIR) {
-  const file2 = join54(dataDir, KEY_FILE);
+  const file2 = join55(dataDir, KEY_FILE);
   try {
     const existing = readFileSync37(file2, "utf8").trim();
     if (/^[0-9a-f]{64}$/u.test(existing)) return existing;
@@ -67082,7 +67380,7 @@ function agentBrowserIntegration(input) {
   for (const name2 of ["PATH", "AGENT_BROWSER_EXECUTABLE_PATH"]) {
     if (sourceEnv[name2]) env[name2] = sourceEnv[name2];
   }
-  const bundle = packagedBrowser({ env: sourceEnv });
+  const bundle = packagedBrowser({ env: sourceEnv, platform: input.platform, arch: input.arch });
   if (!env.AGENT_BROWSER_EXECUTABLE_PATH && bundle && resolve14(input.binaryPath) === bundle.engine && completePackage(bundle, existsSync24)) {
     env.AGENT_BROWSER_EXECUTABLE_PATH = bundle.chrome;
   }
@@ -67090,7 +67388,7 @@ function agentBrowserIntegration(input) {
 }
 var FRAME_TIMEOUT_MS = 1e4;
 function agentBrowserFrame(input) {
-  const file2 = join54(tmpdir6(), `openmausbot-browser-${randomUUID20()}.png`);
+  const file2 = join55(tmpdir6(), `openmausbot-browser-${randomUUID20()}.png`);
   return new Promise((settle, fail2) => {
     const child = spawn5(input.binaryPath, ["screenshot", file2], {
       env: browserRuntimeEnv(input.env),
@@ -67148,14 +67446,14 @@ async function clearBrowserSessionState(binaryPath, session, options = {}) {
   const bases = [`${session}-${session}`, `${browserRestoreKey(session)}-${session}`];
   const remove = (path) => {
     try {
-      unlinkSync10(path);
+      unlinkSync11(path);
     } catch (error51) {
       if (error51.code !== "ENOENT") throw error51;
     }
   };
   try {
-    for (const base2 of bases) for (const suffix of [".json", ".json.enc", ".json.previous", ".json.enc.previous"]) remove(join54(directory, base2 + suffix));
-    const pendingDirectory = join54(directory, ".tmp");
+    for (const base2 of bases) for (const suffix of [".json", ".json.enc", ".json.previous", ".json.enc.previous"]) remove(join55(directory, base2 + suffix));
+    const pendingDirectory = join55(directory, ".tmp");
     let pendingFiles = [];
     try {
       pendingFiles = readdirSync7(pendingDirectory);
@@ -67163,8 +67461,8 @@ async function clearBrowserSessionState(binaryPath, session, options = {}) {
       if (error51.code !== "ENOENT") throw error51;
     }
     const candidates = bases.map((base2) => new RegExp(`^${base2}-candidate-[0-9]+\\.json(?:\\.enc)?$`));
-    for (const name2 of pendingFiles) if (candidates.some((candidate) => candidate.test(name2))) remove(join54(pendingDirectory, name2));
-    preparedBrowserSessions.delete(join54(directory, session));
+    for (const name2 of pendingFiles) if (candidates.some((candidate) => candidate.test(name2))) remove(join55(pendingDirectory, name2));
+    preparedBrowserSessions.delete(join55(directory, session));
     return true;
   } catch {
     return false;
@@ -69171,13 +69469,13 @@ function profileRevision(bot) {
 import { appendFile as appendFile4 } from "node:fs/promises";
 import { createHash as createHash24, randomUUID as randomUUID22 } from "node:crypto";
 import { closeSync as closeSync10, existsSync as existsSync25, fstatSync as fstatSync5, mkdirSync as mkdirSync28, openSync as openSync10, readSync as readSync5 } from "node:fs";
-import { join as join55 } from "node:path";
+import { join as join56 } from "node:path";
 var FILE_NAME2 = "history.ndjson";
 var ONE_LINER = 200;
 var MAX_HISTORY_READ_BYTES = 8 * 1024 * 1024;
 var writeQueues4 = /* @__PURE__ */ new Map();
 function historyFile(botId) {
-  return join55(botFolder(botId), FILE_NAME2);
+  return join56(botFolder(botId), FILE_NAME2);
 }
 function oneLiner(value) {
   return value.replace(/\s+/g, " ").trim().slice(0, ONE_LINER);
@@ -69976,7 +70274,7 @@ function matchDirectoryBots(profile, bots, limit = 5) {
 
 // server/project-scout.ts
 import { readFileSync as readFileSync38, readdirSync as readdirSync8, statSync as statSync11 } from "node:fs";
-import { basename as basename7, join as join56 } from "node:path";
+import { basename as basename7, join as join57 } from "node:path";
 
 // shared/import-name.ts
 function takeImportName(value, taken, maxLength = 100) {
@@ -70180,7 +70478,7 @@ function isDir(path) {
   }
 }
 function packageJson(cwd) {
-  const raw = readText2(join56(cwd, "package.json"));
+  const raw = readText2(join57(cwd, "package.json"));
   if (!raw) return { deps: /* @__PURE__ */ new Set() };
   try {
     const parsed = JSON.parse(raw);
@@ -70203,7 +70501,7 @@ function packageJson(cwd) {
   }
 }
 function readme(cwd) {
-  const raw = readText2(join56(cwd, "README.md")) ?? readText2(join56(cwd, "readme.md")) ?? readText2(join56(cwd, "README"));
+  const raw = readText2(join57(cwd, "README.md")) ?? readText2(join57(cwd, "readme.md")) ?? readText2(join57(cwd, "README"));
   if (!raw) return {};
   let title;
   let summary;
@@ -70277,12 +70575,12 @@ function scoutProject(cwd) {
   const pkg = packageJson(cwd);
   const md = readme(cwd);
   const entries = new Set(listNames(cwd));
-  const pythonDeps = `${readText2(join56(cwd, "requirements.txt")) ?? ""}
-${readText2(join56(cwd, "pyproject.toml")) ?? ""}`.toLowerCase();
+  const pythonDeps = `${readText2(join57(cwd, "requirements.txt")) ?? ""}
+${readText2(join57(cwd, "pyproject.toml")) ?? ""}`.toLowerCase();
   const hasDep = (dep) => pkg.deps.has(dep) || pythonDeps.length > 1 && pythonDeps.includes(dep);
   const pathEvidence = (path) => {
-    if (path.includes("/")) return isDir(join56(cwd, path)) && listNames(join56(cwd, path)).length > 0 ? `${path}/` : null;
-    if (entries.has(path)) return isDir(join56(cwd, path)) ? `${path}/` : path;
+    if (path.includes("/")) return isDir(join57(cwd, path)) && listNames(join57(cwd, path)).length > 0 ? `${path}/` : null;
+    if (entries.has(path)) return isDir(join57(cwd, path)) ? `${path}/` : path;
     return null;
   };
   const signals = [];
@@ -70295,7 +70593,7 @@ ${readText2(join56(cwd, "pyproject.toml")) ?? ""}`.toLowerCase();
     }
     if (detector.role === "docs" && evidence.length > 0) {
       const hasMkdocs = evidence.includes("mkdocs.yml");
-      const hasMarkdown = listNames(join56(cwd, "docs")).some((name2) => name2.endsWith(".md"));
+      const hasMarkdown = listNames(join57(cwd, "docs")).some((name2) => name2.endsWith(".md"));
       if (!hasMkdocs && !hasMarkdown) continue;
     }
     if (evidence.length > 0) signals.push({ role: detector.role, evidence: evidence.slice(0, 6) });
@@ -70984,7 +71282,7 @@ async function fetchGithubTeam(input, fetcher = fetch) {
 
 // server/thread-events.ts
 import { closeSync as closeSync11, fstatSync as fstatSync6, openSync as openSync11, readSync as readSync6 } from "node:fs";
-import { join as join57 } from "node:path";
+import { join as join58 } from "node:path";
 var DEFAULT_LIMIT = 300;
 var MAX_LIMIT = 2e3;
 var READ_CHUNK = 64 * 1024;
@@ -71121,8 +71419,8 @@ function readThreadEvents(input) {
   assertThreadId(threadId);
   const requested = input.limit ?? DEFAULT_LIMIT;
   const limit = Number.isFinite(requested) ? Math.max(1, Math.min(Math.trunc(requested), MAX_LIMIT)) : DEFAULT_LIMIT;
-  const runtime = readRecentLines(join57(eventsDir, `${threadId}.ndjson`), limit, isRuntimeEvent);
-  const native = readRecentLines(join57(nativeDir, `${threadId}.ndjson`), limit, isNativeRecord);
+  const runtime = readRecentLines(join58(eventsDir, `${threadId}.ndjson`), limit, isRuntimeEvent);
+  const native = readRecentLines(join58(nativeDir, `${threadId}.ndjson`), limit, isNativeRecord);
   const merged = [
     ...runtime.lines.map((data) => ({ kind: "runtime", at: data.createdAt, data })),
     ...native.lines.map((data) => ({ kind: "native", at: data.at, data }))
@@ -71312,7 +71610,7 @@ function memberTurnSelection(selection) {
 // server/webhooks.ts
 import { createHash as createHash26, randomBytes as randomBytes5, randomUUID as randomUUID23, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { mkdirSync as mkdirSync29, readFileSync as readFileSync39 } from "node:fs";
-import { dirname as dirname17, join as join58 } from "node:path";
+import { dirname as dirname17, join as join59 } from "node:path";
 var MAX_DELIVERIES = 2e3;
 var MAX_ATTEMPTS = 2e3;
 var MAX_EVENT_CHARS = 48e3;
@@ -71499,7 +71797,7 @@ var WebhookManager = class {
   rate = /* @__PURE__ */ new Map();
   constructor(options) {
     this.options = options;
-    this.file = options.file ?? join58(DATA_DIR, "webhooks.json");
+    this.file = options.file ?? join59(DATA_DIR, "webhooks.json");
     this.now = options.now ?? Date.now;
     try {
       const parsed = webhookFileSchema.safeParse(parseJson(readFileSync39(this.file, "utf8")));
@@ -71764,7 +72062,7 @@ var WebhookManager = class {
 
 // server/skill-library.ts
 import { existsSync as existsSync26, readFileSync as readFileSync40, readdirSync as readdirSync9 } from "node:fs";
-import { basename as basename8, join as join59 } from "node:path";
+import { basename as basename8, join as join60 } from "node:path";
 var SAFE_ID = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 function strings(value) {
   return Array.isArray(value) && value.every((item) => typeof item === "string" && item.trim()) ? value.map((item) => item.trim()) : null;
@@ -71793,19 +72091,19 @@ function parseSkillManifest(value, directory) {
   };
 }
 function loadSkillDirectory(directory) {
-  const manifestPath2 = join59(directory, "manifest.json");
-  const skillPath = join59(directory, "SKILL.md");
+  const manifestPath2 = join60(directory, "manifest.json");
+  const skillPath = join60(directory, "SKILL.md");
   if (!existsSync26(manifestPath2) || !existsSync26(skillPath)) return null;
   const manifest = parseSkillManifest(JSON.parse(readFileSync40(manifestPath2, "utf8")), directory);
   const instructions = readFileSync40(skillPath, "utf8").trim();
   if (!instructions.startsWith("---")) throw new Error(`${skillPath} has no skill frontmatter`);
   return { manifest, instructions, directory };
 }
-function loadBundledSkills(root = process.env.OMB_SKILLS_DIR || join59(process.cwd(), "skills")) {
+function loadBundledSkills(root = process.env.OMB_SKILLS_DIR || join60(process.cwd(), "skills")) {
   if (!existsSync26(root)) return [];
   const skills = [];
   for (const name2 of readdirSync9(root).sort()) {
-    const directory = join59(root, name2);
+    const directory = join60(root, name2);
     const skill = loadSkillDirectory(directory);
     if (skill) skills.push(skill);
   }
@@ -71822,7 +72120,7 @@ function loadUserSkills(root) {
   const skills = [];
   for (const name2 of names) {
     try {
-      const skill = loadSkillDirectory(join59(root, name2));
+      const skill = loadSkillDirectory(join60(root, name2));
       if (skill) skills.push(skill);
     } catch {
     }
@@ -72436,14 +72734,31 @@ ${message4.text}` } : {},
 }
 
 // server/local-routing.ts
+var HOSTS_WITH_LOCAL_CONTROL = /* @__PURE__ */ new Set(["darwin", "win32", "linux"]);
+var HOSTS_WITH_AUTO_LOCAL = /* @__PURE__ */ new Set(["darwin", "win32"]);
 function shouldMountLocalComputer({
   requested,
   hostPlatform = process.platform,
   providerSupportsLocal
 }) {
   if (!providerSupportsLocal) return false;
-  if (requested === "local") return hostPlatform === "darwin" || hostPlatform === "linux";
-  return requested === void 0 && hostPlatform === "darwin";
+  if (requested === "local") return HOSTS_WITH_LOCAL_CONTROL.has(hostPlatform);
+  return requested === void 0 && HOSTS_WITH_AUTO_LOCAL.has(hostPlatform);
+}
+
+// server/auto-vm-claims.ts
+function startAutoVmClaim(table, threadId, generation) {
+  const slot = table.get(threadId);
+  if (!slot || slot.owner.threadId !== threadId || slot.owner.generation !== generation || slot.begin) return;
+  slot.begin = slot.claim().then(
+    () => {
+      slot.claimed = true;
+    },
+    (error51) => {
+      slot.failed = true;
+      slot.failure = error51 instanceof Error ? error51.message : String(error51);
+    }
+  );
 }
 
 // server/model-context-window.ts
@@ -72697,9 +73012,9 @@ function createGracefulShutdown({
 // electron/data-dir-lease.mjs
 import { execFileSync } from "node:child_process";
 import { createHash as createHash27, randomUUID as randomUUID24 } from "node:crypto";
-import { existsSync as existsSync27, linkSync as linkSync5, mkdirSync as mkdirSync30, readFileSync as readFileSync41, renameSync as renameSync8, unlinkSync as unlinkSync11, writeFileSync as writeFileSync18 } from "node:fs";
+import { existsSync as existsSync27, linkSync as linkSync5, mkdirSync as mkdirSync30, readFileSync as readFileSync41, renameSync as renameSync8, unlinkSync as unlinkSync12, writeFileSync as writeFileSync18 } from "node:fs";
 import { hostname as hostname4, uptime } from "node:os";
-import { join as join60 } from "node:path";
+import { join as join61 } from "node:path";
 var LEASE_NAME = "openmausbot-server.lease";
 var DELEGATED_CHILD_DIR = ".openmausbot-server-child";
 var CHILD_LEASE_ENV = "OPENMAUSBOT_INTERNAL_DATA_DIR_LEASE";
@@ -72755,7 +73070,7 @@ function ownerPredatesThisBoot(owner2) {
   return false;
 }
 function ownerIsAlive(owner2) {
-  return !ownerPredatesThisBoot(owner2) && processIsAlive3(owner2.pid);
+  return !ownerPredatesThisBoot(owner2) && processIsAlive3(owner2.pid) && ownerIdentityMatches(owner2);
 }
 function isLeaseOwner(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
@@ -72805,9 +73120,54 @@ function processIsAlive3(pid) {
     throw leaseError("OpenMausBot could not verify the data-directory lease owner; refusing to start.", error51);
   }
 }
+function parseWmiDateTime(value) {
+  const raw = String(value).trim();
+  const match = /^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})\.(\d{6})([+-]\d{3})$/.exec(raw);
+  if (!match) return null;
+  const [_3, year, month, day, hour, minute, second, micro, offset] = match;
+  const ms2 = Date.UTC(
+    Number(year),
+    Number(month) - 1,
+    Number(day),
+    Number(hour),
+    Number(minute),
+    Number(second),
+    Math.floor(Number(micro) / 1e3)
+  );
+  const offsetMinutes = Number(offset);
+  return ms2 - offsetMinutes * 60 * 1e3;
+}
+function processCreationTimeMs(pid) {
+  if (process.platform !== "win32") return null;
+  try {
+    const output = execFileSync(
+      "wmic",
+      ["process", "where", `ProcessId=${pid}`, "get", "CreationDate", "/format:csv"],
+      { encoding: "utf8", timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }
+    );
+    for (const line of output.split(/\r?\n/)) {
+      const trimmed = line.trim();
+      if (!trimmed) continue;
+      const lower = trimmed.toLowerCase();
+      if (lower === "node,creationdate" || lower.startsWith("node,")) continue;
+      const parts = trimmed.split(",");
+      const raw = parts[parts.length - 1].trim();
+      const parsed = parseWmiDateTime(raw);
+      if (parsed !== null) return parsed;
+    }
+  } catch {
+  }
+  return null;
+}
+function ownerIdentityMatches(owner2) {
+  if (process.platform !== "win32") return true;
+  const created = processCreationTimeMs(owner2.pid);
+  if (created === null) return true;
+  return created < owner2.createdAt;
+}
 function unlinkExact(path, message4) {
   try {
-    unlinkSync11(path);
+    unlinkSync12(path);
   } catch (error51) {
     if (error51?.code !== "ENOENT") throw leaseError(message4, error51);
   }
@@ -72902,10 +73262,10 @@ function prepareDataDir(dataDir, legacyDataDir) {
   } catch (error51) {
     throw leaseError("OpenMausBot cannot create its data directory.", error51);
   }
-  return join60(dataDir, LEASE_NAME);
+  return join61(dataDir, LEASE_NAME);
 }
 function assertNoLiveDelegatedChild(dataDir) {
-  const childLeasePath = join60(dataDir, DELEGATED_CHILD_DIR, LEASE_NAME);
+  const childLeasePath = join61(dataDir, DELEGATED_CHILD_DIR, LEASE_NAME);
   const child = readOwner(childLeasePath);
   if (!child) return;
   if (child.host !== hostname4()) {
@@ -72947,13 +73307,13 @@ function validateChildDelegation(dataDir, encoded) {
   const capability = parseCapability(encoded);
   const invalid = () => leaseError("The OpenMausBot desktop lease delegation is invalid; refusing to start to protect its state.");
   if (!capability) throw invalid();
-  const parentLeasePath = join60(dataDir, LEASE_NAME);
+  const parentLeasePath = join61(dataDir, LEASE_NAME);
   const matchesLiveParent = (owner2) => Boolean(owner2 && owner2.pid === capability.pid && owner2.token === capability.token && owner2.host === hostname4() && ownerIsAlive(owner2));
   if (!matchesLiveParent(readOwner(parentLeasePath))) {
     throw invalid();
   }
   const childLease = acquireDataDirLeaseInternal(
-    join60(dataDir, DELEGATED_CHILD_DIR),
+    join61(dataDir, DELEGATED_CHILD_DIR),
     { guardDelegatedChild: false }
   );
   if (!matchesLiveParent(readOwner(parentLeasePath))) {
@@ -73031,7 +73391,7 @@ function acquireDataDirLeaseInternal(dataDir, options = {}) {
         throw leaseError("OpenMausBot will not release a data-directory lease owned by another process.");
       }
       try {
-        unlinkSync11(leasePath);
+        unlinkSync12(leasePath);
       } catch (error51) {
         throw leaseError("OpenMausBot could not release its data-directory lease.", error51);
       }
@@ -73091,8 +73451,8 @@ var WorkspaceBackupMaintenance = class {
 
 // server/workspace-backup-http.ts
 import { randomUUID as randomUUID26 } from "node:crypto";
-import { createReadStream as createReadStream4, createWriteStream as createWriteStream3, existsSync as existsSync29, lstatSync as lstatSync9, mkdirSync as mkdirSync32, readdirSync as readdirSync11, statSync as statSync12, unlinkSync as unlinkSync12 } from "node:fs";
-import { join as join62 } from "node:path";
+import { createReadStream as createReadStream4, createWriteStream as createWriteStream3, existsSync as existsSync29, lstatSync as lstatSync9, mkdirSync as mkdirSync32, readdirSync as readdirSync11, statSync as statSync12, unlinkSync as unlinkSync13 } from "node:fs";
+import { join as join63 } from "node:path";
 import { Transform as Transform2 } from "node:stream";
 import { pipeline as pipeline3 } from "node:stream/promises";
 
@@ -73135,7 +73495,7 @@ import {
   writeFileSync as writeFileSync19,
   writeSync as writeSync2
 } from "node:fs";
-import { isAbsolute as isAbsolute11, join as join61, parse as parse6, posix as posix2, relative as relative5, resolve as resolve15, win32 as win322 } from "node:path";
+import { isAbsolute as isAbsolute11, join as join62, parse as parse6, posix as posix2, relative as relative5, resolve as resolve15, win32 as win322 } from "node:path";
 import { homedir as homedir26 } from "node:os";
 import { backup, DatabaseSync as DatabaseSync2 } from "node:sqlite";
 import { pipeline as pipeline2 } from "node:stream/promises";
@@ -76194,13 +76554,13 @@ function backupRoot(dataDir) {
   if (root === parse6(root).root) throw new Error("A filesystem root cannot be a workspace backup target.");
   const stat6 = lstatSync8(root);
   if (!stat6.isDirectory() || stat6.isSymbolicLink()) throw new Error("The workspace data directory must not be a symbolic link.");
-  const path = join61(root, ".backups");
+  const path = join62(root, ".backups");
   folder2(path);
   return path;
 }
 function jobPath(dataDir, id) {
   if (!ID.test(id)) throw new Error("Invalid workspace backup identifier.");
-  const path = join61(backupRoot(dataDir), id);
+  const path = join62(backupRoot(dataDir), id);
   if (entryExists(path)) {
     const stat6 = lstatSync8(path);
     if (!stat6.isDirectory() || stat6.isSymbolicLink()) throw new Error("Unsafe workspace backup job directory.");
@@ -76247,14 +76607,14 @@ function privateMetadata(manifest) {
   return { summary: manifest.summary, clientState: manifest.clientState };
 }
 function assertLocalAuthOutsideSnapshot(dataDir) {
-  const configPath = join61(dataDir, "config.json");
+  const configPath = join62(dataDir, "config.json");
   const config2 = existsSync28(configPath) ? privateJson(configPath) : {};
   const instances = record2(config2) && record2(config2.instances) ? config2.instances : {};
   const fields = ["HOME", "USERPROFILE", "CLAUDE_CONFIG_DIR", "CODEX_HOME", "GROK_HOME", "KIMI_CODE_HOME", "HERMES_HOME", "FACTORY_HOME_OVERRIDE", "XDG_CONFIG_HOME", "XDG_DATA_HOME", "LOCALAPPDATA"];
   const check2 = (value, field, home) => {
     if (typeof value !== "string" || !value.trim()) return;
     const text8 = value.trim();
-    const expanded = text8.startsWith("~/") || text8.startsWith("~\\") ? join61(home, text8.slice(2)) : text8;
+    const expanded = text8.startsWith("~/") || text8.startsWith("~\\") ? join62(home, text8.slice(2)) : text8;
     const resolved = resolve15(expanded);
     const exists = entryExists(resolved);
     const path = relative5(exists ? realpathSync10(dataDir) : resolve15(dataDir), exists ? realpathSync10(resolved) : resolved).replaceAll("\\", "/");
@@ -76364,27 +76724,27 @@ async function createWorkspaceBackup(dataDir, options) {
   const salt = randomBytes6(16);
   const key3 = await passwordKey(options.password, salt);
   const job = newJob(dataDir);
-  const snapshot2 = join61(job.directory, "snapshot");
-  folder2(join61(snapshot2, "data"));
+  const snapshot2 = join62(job.directory, "snapshot");
+  folder2(join62(snapshot2, "data"));
   const entries = [];
   const warnings = ["Stop external editors and managed desktops before exporting; files written outside this server cannot be frozen by the backup gate.", "Conversation text and user files are not redacted and may contain secrets you pasted. Keep the encrypted backup private.", RESTORE_WARNING];
   let bytes = 0;
   let skippedLinks = 0;
   try {
     const root = realpathSync10(dataDir);
-    const sourceDb = join61(root, "messages.db");
+    const sourceDb = join62(root, "messages.db");
     if (existsSync28(sourceDb)) {
       if (lstatSync8(sourceDb).isSymbolicLink()) throw new Error("The message database must not be a symbolic link.");
       const db2 = new DatabaseSync2(sourceDb, { readOnly: true });
       const completionPulse = setInterval(() => {
       }, 25);
       try {
-        await backup(db2, join61(snapshot2, "messages-snapshot.db"));
+        await backup(db2, join62(snapshot2, "messages-snapshot.db"));
       } finally {
         clearInterval(completionPulse);
         db2.close();
       }
-      const snapshotDb = new DatabaseSync2(join61(snapshot2, "messages-snapshot.db"));
+      const snapshotDb = new DatabaseSync2(join62(snapshot2, "messages-snapshot.db"));
       try {
         snapshotDb.exec("PRAGMA journal_mode = DELETE");
       } finally {
@@ -76398,7 +76758,7 @@ async function createWorkspaceBackup(dataDir, options) {
         if (excludedWorkspaceAuthPath(path2)) continue;
         if (forbiddenArchivePath(path2)) throw new Error("A workspace filename conflicts with a protected authentication or runtime path.");
         if (!validRelative(path2)) throw new Error("A workspace filename cannot be safely restored on supported platforms.");
-        const source = join61(directory, name2);
+        const source = join62(directory, name2);
         const stat6 = lstatSync8(source);
         if (stat6.isSymbolicLink()) {
           let target;
@@ -76418,7 +76778,7 @@ async function createWorkspaceBackup(dataDir, options) {
           continue;
         }
         if (entries.length >= MAX_WORKSPACE_BACKUP_FILES) throw new Error("The workspace exceeds the 100,000-entry backup limit.");
-        const destination = join61(snapshot2, "data", path2);
+        const destination = join62(snapshot2, "data", path2);
         if (stat6.isDirectory()) {
           folder2(destination);
           entries.push({ path: path2, type: "directory", size: 0, mode: 448 });
@@ -76436,7 +76796,7 @@ async function createWorkspaceBackup(dataDir, options) {
               writeJson(destination, value);
             }
             copied = { size: lstatSync8(destination).size, mode: 384, sha256: hashFile(destination) };
-          } else copied = copyRegular(path2 === "messages.db" ? join61(snapshot2, "messages-snapshot.db") : source, destination);
+          } else copied = copyRegular(path2 === "messages.db" ? join62(snapshot2, "messages-snapshot.db") : source, destination);
           bytes += copied.size;
           if (bytes > MAX_WORKSPACE_BACKUP_BYTES) throw new Error("The workspace exceeds the 10 GB backup limit.");
           entries.push({ path: path2, type: "file", ...copied });
@@ -76454,9 +76814,9 @@ async function createWorkspaceBackup(dataDir, options) {
       files: entries.filter((entry) => entry.type === "file").length,
       directories: entries.filter((entry) => entry.type === "directory").length,
       bytes,
-      bots: countJsonArray(join61(snapshot2, "data", "bots.json")),
-      groups: countJsonArray(join61(snapshot2, "data", "groups.json")),
-      ...databaseCounts(join61(snapshot2, "data", "messages.db")),
+      bots: countJsonArray(join62(snapshot2, "data", "bots.json")),
+      groups: countJsonArray(join62(snapshot2, "data", "groups.json")),
+      ...databaseCounts(join62(snapshot2, "data", "messages.db")),
       exclusions: EXCLUSION_NOTES,
       warnings
     };
@@ -76466,9 +76826,9 @@ async function createWorkspaceBackup(dataDir, options) {
       clientState: options.clientState ?? {},
       entries
     };
-    writeJson(join61(snapshot2, "manifest.json"), manifest);
-    validateManifest(privateJson(join61(snapshot2, "manifest.json")));
-    const path = join61(job.directory, "workspace.ombbackup");
+    writeJson(join62(snapshot2, "manifest.json"), manifest);
+    validateManifest(privateJson(join62(snapshot2, "manifest.json")));
+    const path = join62(job.directory, "workspace.ombbackup");
     const iv = randomBytes6(12);
     const header2 = Buffer.concat([MAGIC, salt, iv]);
     const cipher = createCipheriv("aes-256-gcm", key3, iv);
@@ -76583,21 +76943,21 @@ async function inspectTar(path) {
   return entries;
 }
 function validateStaged(directory, expected) {
-  const manifest = validateManifest(privateJson(join61(directory, "manifest.json")));
+  const manifest = validateManifest(privateJson(join62(directory, "manifest.json")));
   if (expected && expected.size !== manifest.entries.length + 2) throw new Error("Archive entries do not match the backup manifest.");
   const declared = new Set(manifest.entries.map((entry) => entry.path));
   const inspect = (root, prefix = "") => {
     for (const name2 of readdirSync10(root)) {
       const path = prefix ? `${prefix}/${name2}` : name2;
       if (!declared.has(path)) throw new Error("Staged workspace contains files absent from its manifest.");
-      const stat6 = lstatSync8(join61(root, name2));
+      const stat6 = lstatSync8(join62(root, name2));
       if (stat6.isSymbolicLink()) throw new Error("Staged workspace contains a symbolic link.");
-      if (stat6.isDirectory()) inspect(join61(root, name2), path);
+      if (stat6.isDirectory()) inspect(join62(root, name2), path);
     }
   };
-  inspect(join61(directory, "data"));
+  inspect(join62(directory, "data"));
   for (const entry of manifest.entries) {
-    const path = join61(directory, "data", entry.path);
+    const path = join62(directory, "data", entry.path);
     const stat6 = lstatSync8(path);
     if (stat6.isSymbolicLink() || (entry.type === "file" ? !stat6.isFile() || stat6.size !== entry.size : !stat6.isDirectory())) {
       throw new Error("Staged workspace files do not match the backup manifest.");
@@ -76609,27 +76969,27 @@ function validateStaged(directory, expected) {
     if (entry.type === "file" && hashFile(path) !== entry.sha256) throw new Error("A workspace backup file failed its checksum.");
     chmodSync7(path, entry.mode);
   }
-  const data = join61(directory, "data");
-  if (countJsonArray(join61(data, "bots.json")) !== manifest.summary.bots || countJsonArray(join61(data, "groups.json")) !== manifest.summary.groups) throw new Error("The backup roster does not match its summary.");
-  if (existsSync28(join61(data, "config.json"))) {
-    const config2 = privateJson(join61(data, "config.json"));
+  const data = join62(directory, "data");
+  if (countJsonArray(join62(data, "bots.json")) !== manifest.summary.bots || countJsonArray(join62(data, "groups.json")) !== manifest.summary.groups) throw new Error("The backup roster does not match its summary.");
+  if (existsSync28(join62(data, "config.json"))) {
+    const config2 = privateJson(join62(data, "config.json"));
     if (JSON.stringify(config2) !== JSON.stringify(portableWorkspaceConfig(config2))) throw new Error("Workspace backup contains non-portable connection settings.");
   }
-  if (existsSync28(join61(data, "webhooks.json"))) {
-    const value = privateJson(join61(data, "webhooks.json"));
+  if (existsSync28(join62(data, "webhooks.json"))) {
+    const value = privateJson(join62(data, "webhooks.json"));
     if (!record2(value) || Array.isArray(value.webhooks) && value.webhooks.some((webhook) => record2(webhook) && Object.hasOwn(webhook, "secretHash"))) throw new Error("Workspace backup contains webhook credentials.");
   }
-  const counts = databaseCounts(join61(data, "messages.db"));
+  const counts = databaseCounts(join62(data, "messages.db"));
   if (counts.messages !== manifest.summary.messages || counts.threads !== manifest.summary.threads) throw new Error("The message database does not match the backup summary.");
   return manifest;
 }
 async function stageWorkspaceBackup(dataDir, archivePath, options) {
   const job = newJob(dataDir);
-  const plaintext = join61(job.directory, "archive.tar");
+  const plaintext = join62(job.directory, "archive.tar");
   try {
     await decryptArchive(archivePath, plaintext, options.password);
     const expected = await inspectTar(plaintext);
-    const staged = join61(job.directory, "staged");
+    const staged = join62(job.directory, "staged");
     folder2(staged);
     await So({ file: plaintext, cwd: staged, strict: true, preservePaths: false, umask: 63, noChmod: true });
     const manifest = validateStaged(staged, expected);
@@ -76641,7 +77001,7 @@ async function stageWorkspaceBackup(dataDir, archivePath, options) {
       }
     }
     rmSync8(plaintext);
-    writeJson(join61(job.directory, "ready.json"), { id: job.id, summary: manifest.summary });
+    writeJson(join62(job.directory, "ready.json"), { id: job.id, summary: manifest.summary });
     return { id: job.id, summary: manifest.summary };
   } catch (error51) {
     rmSync8(job.directory, { recursive: true, force: true });
@@ -76650,24 +77010,24 @@ async function stageWorkspaceBackup(dataDir, archivePath, options) {
 }
 function readStagedWorkspaceBackup(dataDir, id) {
   const directory = jobPath(dataDir, id);
-  const ready = privateJson(join61(directory, "ready.json"));
+  const ready = privateJson(join62(directory, "ready.json"));
   if (!record2(ready) || ready.id !== id) throw new Error("This workspace backup is not ready to restore.");
-  const manifest = validateManifest(privateJson(join61(directory, "staged", "manifest.json")));
+  const manifest = validateManifest(privateJson(join62(directory, "staged", "manifest.json")));
   return { id, ...privateMetadata(manifest) };
 }
 function commitPendingWorkspaceRestore(dataDir, id) {
   const root = backupRoot(dataDir);
-  if (existsSync28(join61(root, "pending-restore.json"))) throw new Error("A workspace restore is already waiting for restart.");
-  if (existsSync28(join61(root, `safety-${id}`))) throw new Error("This restore was already attempted. Preview the backup again to create a fresh restore attempt.");
+  if (existsSync28(join62(root, "pending-restore.json"))) throw new Error("A workspace restore is already waiting for restart.");
+  if (existsSync28(join62(root, `safety-${id}`))) throw new Error("This restore was already attempted. Preview the backup again to create a fresh restore attempt.");
   const metadata = readStagedWorkspaceBackup(dataDir, id);
-  const manifest = validateStaged(join61(jobPath(dataDir, id), "staged"));
+  const manifest = validateStaged(join62(jobPath(dataDir, id), "staged"));
   prepareRestore(dataDir, id, manifest);
-  writeJson(join61(root, "pending-restore.json"), { id });
+  writeJson(join62(root, "pending-restore.json"), { id });
   return { id, restartRequired: true, summary: metadata.summary };
 }
 function readPendingWorkspaceRestoreMetadata(dataDir) {
   const root = backupRoot(dataDir);
-  const path = join61(root, "pending-restore.json");
+  const path = join62(root, "pending-restore.json");
   if (!existsSync28(path)) return null;
   const pending = privateJson(path);
   if (!record2(pending) || typeof pending.id !== "string") throw new Error("Invalid pending workspace restore.");
@@ -76682,24 +77042,24 @@ function readJournal(path) {
   return raw;
 }
 function rollback(dataDir, journal) {
-  const stage = join61(jobPath(dataDir, journal.id), "apply", "data");
-  const saved = join61(backupRoot(dataDir), `safety-${journal.id}`, "data");
+  const stage = join62(jobPath(dataDir, journal.id), "apply", "data");
+  const saved = join62(backupRoot(dataDir), `safety-${journal.id}`, "data");
   for (const name2 of journal.incoming) {
-    const live = join61(dataDir, name2);
-    const staged = join61(stage, name2);
-    const originalMoved = !journal.existing.includes(name2) || entryExists(join61(saved, name2));
+    const live = join62(dataDir, name2);
+    const staged = join62(stage, name2);
+    const originalMoved = !journal.existing.includes(name2) || entryExists(join62(saved, name2));
     if (originalMoved && !entryExists(staged) && entryExists(live)) renameSync9(live, staged);
   }
   for (const name2 of journal.existing) {
-    const original = join61(saved, name2);
+    const original = join62(saved, name2);
     if (!entryExists(original)) continue;
-    const live = join61(dataDir, name2);
+    const live = join62(dataDir, name2);
     if (entryExists(live)) throw new Error("Restore rollback found conflicting files. Both copies are preserved for recovery.");
     renameSync9(original, live);
   }
   const root = backupRoot(dataDir);
-  const previousReceipt = join61(root, `safety-${journal.id}`, "previous-restore.json");
-  const last = join61(root, "last-restore.json");
+  const previousReceipt = join62(root, `safety-${journal.id}`, "previous-restore.json");
+  const last = join62(root, "last-restore.json");
   if (existsSync28(previousReceipt)) writeJson(last, privateJson(previousReceipt));
   else if (existsSync28(last)) {
     const value = privateJson(last);
@@ -76712,7 +77072,7 @@ function rebasePath(value, source, destination) {
   if (normalized !== original && !normalized.startsWith(`${original}/`)) return value;
   const suffix = normalized.slice(original.length).replace(/^\//, "");
   if (suffix && !validRelative(suffix)) return value;
-  return suffix ? join61(destination, suffix) : destination;
+  return suffix ? join62(destination, suffix) : destination;
 }
 var PATH_KEYS = /* @__PURE__ */ new Set(["cwd", "pinnedCwd", "workspace", "configDir", "profileDirectory", "agentDir", "dataDir", "home", "cli", "path", "filePath", "localPath"]);
 function rebaseFields(value, source, destination) {
@@ -76751,16 +77111,16 @@ function rebaseMessage(message4, source, destination) {
 function prepareRestore(dataDir, id, manifest) {
   assertLocalAuthOutsideSnapshot(dataDir);
   const job = jobPath(dataDir, id);
-  const prepared = join61(job, "apply", "data");
-  if (existsSync28(join61(job, "apply"))) rmSync8(join61(job, "apply"), { recursive: true, force: true });
+  const prepared = join62(job, "apply", "data");
+  if (existsSync28(join62(job, "apply"))) rmSync8(join62(job, "apply"), { recursive: true, force: true });
   folder2(prepared);
-  for (const entry of manifest.entries.filter((entry2) => entry2.type === "directory")) folder2(join61(prepared, entry.path));
+  for (const entry of manifest.entries.filter((entry2) => entry2.type === "directory")) folder2(join62(prepared, entry.path));
   for (const entry of manifest.entries) {
-    const destination = join61(prepared, entry.path);
-    if (entry.type === "file") copyRegular(join61(job, "staged", "data", entry.path), destination);
+    const destination = join62(prepared, entry.path);
+    if (entry.type === "file") copyRegular(join62(job, "staged", "data", entry.path), destination);
   }
   const changeJson = (name2, change) => {
-    const path = join61(prepared, name2);
+    const path = join62(prepared, name2);
     if (!existsSync28(path)) return;
     const value = privateJson(path);
     change(value);
@@ -76773,25 +77133,25 @@ function prepareRestore(dataDir, id, manifest) {
     if (!Array.isArray(value)) throw new Error("Invalid bot definitions in workspace backup.");
     for (const bot of value) if (record2(bot)) delete bot.voice;
   });
-  const oldConfig = join61(dataDir, "config.json");
-  const newConfig = join61(prepared, "config.json");
+  const oldConfig = join62(dataDir, "config.json");
+  const newConfig = join62(prepared, "config.json");
   if (existsSync28(oldConfig) || existsSync28(newConfig)) {
     writeJson(newConfig, restoredWorkspaceConfig(existsSync28(newConfig) ? privateJson(newConfig) : {}, existsSync28(oldConfig) ? privateJson(oldConfig) : {}));
   }
   const browserHomes = ["vm-home"];
-  const vmHomes = join61(dataDir, "vm-homes");
+  const vmHomes = join62(dataDir, "vm-homes");
   if (entryExists(vmHomes)) {
     if (!lstatSync8(vmHomes).isDirectory()) throw new Error("Stop managed desktops and repair the VM home directory before restoring.");
     for (const name2 of readdirSync10(vmHomes)) if (validRelative(name2)) browserHomes.push(`vm-homes/${name2}`);
   }
   for (const home of browserHomes) {
-    const homePath = join61(dataDir, home);
+    const homePath = join62(dataDir, home);
     if (!entryExists(homePath)) continue;
     if (!lstatSync8(homePath).isDirectory()) throw new Error("Stop managed desktops and repair the VM home directory before restoring.");
-    const source = join61(dataDir, home, ".browser-profiles");
+    const source = join62(dataDir, home, ".browser-profiles");
     if (!entryExists(source)) continue;
-    folder2(join61(prepared, home));
-    cpSync(source, join61(prepared, home, ".browser-profiles"), { recursive: true, dereference: false, verbatimSymlinks: true, errorOnExist: true, force: false });
+    folder2(join62(prepared, home));
+    cpSync(source, join62(prepared, home, ".browser-profiles"), { recursive: true, dereference: false, verbatimSymlinks: true, errorOnExist: true, force: false });
   }
   changeJson("routines.json", (value) => {
     if (!record2(value)) throw new Error("Invalid routine definitions in workspace backup.");
@@ -76809,7 +77169,7 @@ function prepareRestore(dataDir, id, manifest) {
   });
   changeJson("webhooks.json", (value) => {
     if (!record2(value)) throw new Error("Invalid webhook definitions in workspace backup.");
-    const destination = existsSync28(join61(dataDir, "webhooks.json")) ? privateJson(join61(dataDir, "webhooks.json")) : {};
+    const destination = existsSync28(join62(dataDir, "webhooks.json")) ? privateJson(join62(dataDir, "webhooks.json")) : {};
     const oldHooks = record2(destination) && Array.isArray(destination.webhooks) ? destination.webhooks : [];
     if (Array.isArray(value.webhooks)) {
       for (const webhook of value.webhooks) if (record2(webhook)) {
@@ -76826,15 +77186,15 @@ function prepareRestore(dataDir, id, manifest) {
       for (const call of value.calls) if (record2(call)) call.nextRunAt = null;
     }
   });
-  if (existsSync28(join61(prepared, "delegations.json"))) writeJson(join61(prepared, "delegations.json"), {});
-  if (existsSync28(join61(prepared, "browser-cleanups.json"))) writeJson(join61(prepared, "browser-cleanups.json"), []);
+  if (existsSync28(join62(prepared, "delegations.json"))) writeJson(join62(prepared, "delegations.json"), {});
+  if (existsSync28(join62(prepared, "browser-cleanups.json"))) writeJson(join62(prepared, "browser-cleanups.json"), []);
   for (const entry of manifest.entries) {
     if (/^messages-[^/]+\.json$/.test(entry.path)) changeJson(entry.path, (value) => {
       if (Array.isArray(value)) for (const message4 of value) rebaseMessage(message4, manifest.sourceDataDir, resolve15(dataDir));
       else if (record2(value) && Array.isArray(value.messages)) for (const message4 of value.messages) rebaseMessage(message4, manifest.sourceDataDir, resolve15(dataDir));
     });
   }
-  const dbPath = join61(prepared, "messages.db");
+  const dbPath = join62(prepared, "messages.db");
   if (existsSync28(dbPath)) {
     const db2 = new DatabaseSync2(dbPath);
     try {
@@ -76866,7 +77226,7 @@ function prepareRestore(dataDir, id, manifest) {
 }
 function readLastWorkspaceRestore(dataDir) {
   const root = backupRoot(dataDir);
-  const path = join61(root, "last-restore.json");
+  const path = join62(root, "last-restore.json");
   if (!existsSync28(path)) return null;
   const raw = privateJson(path);
   if (!record2(raw) || raw.restored !== true || typeof raw.id !== "string" || !ID.test(raw.id)) throw new Error("Invalid workspace restore receipt.");
@@ -76879,28 +77239,28 @@ function finishRestore(dataDir, id, consumePending = true) {
   if (draftAttachments) {
     try {
       const value = JSON.parse(draftAttachments);
-      const manifest = validateManifest(privateJson(join61(jobPath(dataDir, id), "staged", "manifest.json")));
+      const manifest = validateManifest(privateJson(join62(jobPath(dataDir, id), "staged", "manifest.json")));
       rebaseFields(value, manifest.sourceDataDir, resolve15(dataDir));
       clientState["omb-draft-attachments"] = JSON.stringify(value);
     } catch {
     }
   }
-  const result = { restored: true, id, safetyCopyPath: join61(root, `safety-${id}`), summary, clientState };
-  writeJson(join61(root, "last-restore.json"), result);
-  if (consumePending) rmSync8(join61(root, "pending-restore.json"), { force: true });
+  const result = { restored: true, id, safetyCopyPath: join62(root, `safety-${id}`), summary, clientState };
+  writeJson(join62(root, "last-restore.json"), result);
+  if (consumePending) rmSync8(join62(root, "pending-restore.json"), { force: true });
   return result;
 }
 function applyPendingWorkspaceRestore(dataDir) {
   const root = backupRoot(dataDir);
-  const journalFile2 = join61(root, "restore-journal.json");
-  const pendingFile = join61(root, "pending-restore.json");
+  const journalFile2 = join62(root, "restore-journal.json");
+  const pendingFile = join62(root, "pending-restore.json");
   if (existsSync28(journalFile2)) {
     const previous2 = readJournal(journalFile2);
     if (previous2.phase === "applying") {
       rollback(dataDir, previous2);
       writeJson(journalFile2, { ...previous2, phase: "rolled-back" });
       rmSync8(pendingFile, { force: true });
-      return { restored: false, rolledBack: true, id: previous2.id, safetyCopyPath: join61(root, `safety-${previous2.id}`) };
+      return { restored: false, rolledBack: true, id: previous2.id, safetyCopyPath: join62(root, `safety-${previous2.id}`) };
     }
     if (previous2.phase === "committed" && existsSync28(pendingFile)) {
       const pending2 = privateJson(pendingFile);
@@ -76911,12 +77271,12 @@ function applyPendingWorkspaceRestore(dataDir) {
   }
   const pending = readPendingWorkspaceRestoreMetadata(dataDir);
   if (!pending) return { restored: false };
-  const staged = join61(jobPath(dataDir, pending.id), "staged");
+  const staged = join62(jobPath(dataDir, pending.id), "staged");
   const manifest = validateStaged(staged);
   const prepared = prepareRestore(dataDir, pending.id, manifest);
-  const safetyCopyPath = join61(root, `safety-${pending.id}`);
+  const safetyCopyPath = join62(root, `safety-${pending.id}`);
   if (existsSync28(safetyCopyPath)) throw new Error("A safety copy already exists for this restore. Original files have not been changed.");
-  folder2(join61(safetyCopyPath, "data"));
+  folder2(join62(safetyCopyPath, "data"));
   const journal = {
     id: pending.id,
     phase: "applying",
@@ -76926,12 +77286,12 @@ function applyPendingWorkspaceRestore(dataDir) {
   for (const name2 of [...journal.existing, ...journal.incoming]) {
     if (!validRelative(name2) || name2.includes("/") || preserved(name2)) throw new Error("Unsafe workspace restore target.");
   }
-  writeJson(join61(safetyCopyPath, "manifest.json"), { id: pending.id, createdAt: (/* @__PURE__ */ new Date()).toISOString(), originalEntries: journal.existing });
-  if (existsSync28(join61(root, "last-restore.json"))) writeJson(join61(safetyCopyPath, "previous-restore.json"), privateJson(join61(root, "last-restore.json")));
+  writeJson(join62(safetyCopyPath, "manifest.json"), { id: pending.id, createdAt: (/* @__PURE__ */ new Date()).toISOString(), originalEntries: journal.existing });
+  if (existsSync28(join62(root, "last-restore.json"))) writeJson(join62(safetyCopyPath, "previous-restore.json"), privateJson(join62(root, "last-restore.json")));
   writeJson(journalFile2, journal);
   try {
-    for (const name2 of journal.existing) renameSync9(join61(dataDir, name2), join61(safetyCopyPath, "data", name2));
-    for (const name2 of journal.incoming) if (entryExists(join61(prepared, name2))) renameSync9(join61(prepared, name2), join61(dataDir, name2));
+    for (const name2 of journal.existing) renameSync9(join62(dataDir, name2), join62(safetyCopyPath, "data", name2));
+    for (const name2 of journal.incoming) if (entryExists(join62(prepared, name2))) renameSync9(join62(prepared, name2), join62(dataDir, name2));
     finishRestore(dataDir, pending.id, false);
     writeJson(journalFile2, { ...journal, phase: "committed" });
   } catch (error51) {
@@ -76946,11 +77306,11 @@ function removeWorkspaceBackupJob(dataDir, id) {
   const path = jobPath(dataDir, id);
   const root = backupRoot(dataDir);
   for (const name2 of ["pending-restore.json", "restore-journal.json", "last-restore.json"]) {
-    if (!existsSync28(join61(root, name2))) continue;
-    const value = privateJson(join61(root, name2));
+    if (!existsSync28(join62(root, name2))) continue;
+    const value = privateJson(join62(root, name2));
     if (record2(value) && value.id === id) throw new Error("This backup is still needed for restore or recovery and cannot be removed.");
   }
-  if (existsSync28(join61(root, `safety-${id}`))) throw new Error("This backup has a recovery copy and cannot be removed.");
+  if (existsSync28(join62(root, `safety-${id}`))) throw new Error("This backup has a recovery copy and cannot be removed.");
   if (!entryExists(path)) return;
   if (!lstatSync8(path).isDirectory() || lstatSync8(path).isSymbolicLink()) throw new Error("Unsafe workspace backup cleanup target.");
   rmSync8(path, { recursive: true, force: true });
@@ -76980,7 +77340,7 @@ function createWorkspaceBackupRoutes(options) {
   function remove(id, artifact) {
     if (artifact.path) {
       try {
-        unlinkSync12(artifact.path);
+        unlinkSync13(artifact.path);
       } catch {
       }
     }
@@ -76993,24 +77353,24 @@ function createWorkspaceBackupRoutes(options) {
     artifacts.delete(id);
   }
   function reclaimAbandoned() {
-    const root = join62(options.dataDir, ".backups");
+    const root = join63(options.dataDir, ".backups");
     if (!existsSync29(root) || lstatSync9(root).isSymbolicLink()) return;
     for (const entry of readdirSync11(root, { withFileTypes: true })) {
       if (!entry.isDirectory() || !/^[a-f0-9-]{36}$/.test(entry.name)) continue;
-      if (statSync12(join62(root, entry.name)).mtimeMs + EXPIRES_MS > Date.now()) continue;
+      if (statSync12(join63(root, entry.name)).mtimeMs + EXPIRES_MS > Date.now()) continue;
       try {
         removeWorkspaceBackupJob(options.dataDir, entry.name);
       } catch {
       }
     }
-    const uploads = join62(root, "uploads");
+    const uploads = join63(root, "uploads");
     if (!existsSync29(uploads) || lstatSync9(uploads).isSymbolicLink()) return;
     for (const entry of readdirSync11(uploads, { withFileTypes: true })) {
       if (!entry.isFile() || !/^[a-f0-9-]{36}\.ombbackup$/.test(entry.name)) continue;
-      const file2 = join62(uploads, entry.name);
+      const file2 = join63(uploads, entry.name);
       if (statSync12(file2).mtimeMs + EXPIRES_MS <= Date.now()) {
         try {
-          unlinkSync12(file2);
+          unlinkSync13(file2);
         } catch {
         }
       }
@@ -77107,14 +77467,14 @@ function createWorkspaceBackupRoutes(options) {
           if (!Number.isSafeInteger(length) || length <= 0 || length > MAX_UPLOAD_BYTES) throw failure3("Select a backup containing no more than 10 GB of workspace data.", 413);
           replacePrevious(auth, ["upload", "staged"]);
           if (artifacts.size >= 4) throw failure3("There are already four backup files in progress. Restart or wait an hour before uploading another.", 409);
-          const root = join62(options.dataDir, ".backups");
+          const root = join63(options.dataDir, ".backups");
           mkdirSync32(root, { recursive: true, mode: 448 });
           if (lstatSync9(root).isSymbolicLink()) throw failure3("Backup storage must not be a symbolic link.");
-          const directory = join62(root, "uploads");
+          const directory = join63(root, "uploads");
           mkdirSync32(directory, { recursive: true, mode: 448 });
           if (lstatSync9(directory).isSymbolicLink()) throw failure3("Backup storage must not be a symbolic link.");
           const id = randomUUID26();
-          const file2 = join62(directory, `${id}.ombbackup`);
+          const file2 = join63(directory, `${id}.ombbackup`);
           let bytes = 0;
           try {
             const limit = new Transform2({ transform(chunk, _encoding, callback) {
@@ -77128,7 +77488,7 @@ function createWorkspaceBackupRoutes(options) {
             json4(res, 200, { id });
           } catch (error51) {
             try {
-              unlinkSync12(file2);
+              unlinkSync13(file2);
             } catch {
             }
             throw error51;
@@ -77147,7 +77507,7 @@ function createWorkspaceBackupRoutes(options) {
           throw error51;
         }
         try {
-          unlinkSync12(artifact.path);
+          unlinkSync13(artifact.path);
         } catch {
         }
         artifacts.delete(body.id);
@@ -78316,7 +78676,7 @@ function resolveRequestAuth(req, options) {
 
 // server/sessions.ts
 import { createHash as createHash29, randomBytes as randomBytes8, randomUUID as randomUUID27, timingSafeEqual as timingSafeEqual4 } from "node:crypto";
-import { closeSync as closeSync13, existsSync as existsSync30, fsyncSync as fsyncSync4, mkdirSync as mkdirSync33, openSync as openSync13, readFileSync as readFileSync43, unlinkSync as unlinkSync13 } from "node:fs";
+import { closeSync as closeSync13, existsSync as existsSync30, fsyncSync as fsyncSync4, mkdirSync as mkdirSync33, openSync as openSync13, readFileSync as readFileSync43, unlinkSync as unlinkSync14 } from "node:fs";
 import { dirname as dirname18 } from "node:path";
 var SCOPES = ["admin", "client"];
 var PAIRING_CODE_ALPHABET = "23456789ABCDEFGHJKLMNPQRSTUVWXYZ";
@@ -78462,7 +78822,7 @@ var SessionRegistry = class {
     try {
       this.revalidateEmailSessions();
       this.persist();
-      unlinkSync13(this.openMarker);
+      unlinkSync14(this.openMarker);
       this.closed = true;
     } catch {
       throw new Error("Could not safely close session storage.");
@@ -78746,7 +79106,7 @@ var SessionRegistry = class {
 
 // server/brand.ts
 import { existsSync as existsSync31, readFileSync as readFileSync44 } from "node:fs";
-import { join as join63 } from "node:path";
+import { join as join64 } from "node:path";
 var HEX_COLOUR = /^#[0-9a-fA-F]{6}$/;
 var MAX_LOGO_CHARS = 3e5;
 var MAX_FAVICON_CHARS = 12e4;
@@ -78766,7 +79126,7 @@ var brandSchema = external_exports.object({
 }).strict();
 var DEFAULT_BRAND = { name: "OpenMausBot" };
 function brandFile() {
-  return process.env.OMB_BRAND_FILE || join63(DATA_DIR, "brand.json");
+  return process.env.OMB_BRAND_FILE || join64(DATA_DIR, "brand.json");
 }
 function loadBrand(options = {}) {
   const file2 = options.file ?? brandFile();
@@ -81286,7 +81646,7 @@ function releaseDataDirLeaseAtExit() {
 }
 process.once("exit", releaseDataDirLeaseAtExit);
 var workspaceRestore = { restored: false };
-if (existsSync32(join64(DATA_DIR, ".backups"))) {
+if (existsSync32(join65(DATA_DIR, ".backups"))) {
   workspaceRestore = applyPendingWorkspaceRestore(DATA_DIR);
   if (!workspaceRestore.restored && !workspaceRestore.rolledBack) {
     workspaceRestore = readLastWorkspaceRestore(DATA_DIR) ?? workspaceRestore;
@@ -81299,7 +81659,7 @@ function signInAllowList() {
   return { admins: parseAllowList(current2?.admins?.join(",")), members: parseAllowList(current2?.members?.join(",")) };
 }
 var sessions = new SessionRegistry({
-  file: join64(DATA_DIR, "sessions.json"),
+  file: join65(DATA_DIR, "sessions.json"),
   emailScopesSnapshot: () => {
     const membership = signInAllowList();
     return (email3) => allowedScopes(email3, membership);
@@ -81355,7 +81715,7 @@ function noteTurnTrigger(threadId, auth) {
 var providerAuthSessions = new ProviderAuthSessions();
 await registry2.load(instanceConfigs(cfg));
 var bundledSkills = loadBundledSkills();
-var availableSkills = () => mergeSkills(bundledSkills, loadUserSkills(join64(DATA_DIR, "skills")));
+var availableSkills = () => mergeSkills(bundledSkills, loadUserSkills(join65(DATA_DIR, "skills")));
 var utilityParentPort = process.parentPort;
 function postDesktopPrivateMessage(message4) {
   if (!utilityParentPort) return false;
@@ -81381,7 +81741,7 @@ function applyDesktopMutationTokenMessage(raw) {
   return true;
 }
 var browserCleanup = new BrowserCleanupCoordinator({
-  file: join64(DATA_DIR, "browser-cleanups.json"),
+  file: join65(DATA_DIR, "browser-cleanups.json"),
   send: (request3) => {
     const status = browserEngineStatus();
     const sessions2 = request3.type === "openmausbot:browser-bot-deleted" && request3.botId ? [browserSessionId(request3.botId, "")] : request3.partitionId ? [browserSessionId("", request3.partitionId)] : [];
@@ -81617,6 +81977,7 @@ function claimTurnResource(owner2, resource) {
 }
 function releaseTurnResources(owner2) {
   if (!owner2) return;
+  if (autoVmClaims.get(owner2.threadId)?.owner.generation === owner2.generation) autoVmClaims.delete(owner2.threadId);
   if (settlingResourceOwners.get(owner2.threadId) === owner2.generation) settlingResourceOwners.delete(owner2.threadId);
   turnResources.release(owner2);
   if (turnResourceOwners.get(owner2.threadId)?.generation === owner2.generation) turnResourceOwners.delete(owner2.threadId);
@@ -81627,9 +81988,33 @@ function releaseTurnResources(owner2) {
     teamComputerTurns.delete(owner2.threadId);
   }
 }
-function bindTurnComputer(owner2, resource, exclusive = false) {
-  if (exclusive && !claimTurnResource(owner2, resource)) {
-    throw Object.assign(new Error("another thread is using this computer \u2014 wait for it to finish"), { status: 409, code: "computer_busy" });
+async function bindTurnComputer(owner2, resource, exclusive = false) {
+  const active = () => activeInternalGenerationByThread.get(owner2.threadId) === owner2.generation && turnResourceOwners.get(owner2.threadId)?.generation === owner2.generation;
+  let waitingMessage;
+  const deadline = Date.now() + GROUP_GOAL_WAIT_MAX_MS;
+  try {
+    while (true) {
+      if (!active()) throw new DirectTurnSetupCancelled("Computer wait cancelled");
+      if (!exclusive || claimTurnResource(owner2, resource)) break;
+      if (!waitingMessage) {
+        const blocker = turnResources.blocker(resource, owner2);
+        const holderBot = blocker && store.botByThread(blocker.threadId);
+        const holderTask = holderBot && blocker && store.taskByThread(holderBot.id, blocker.threadId);
+        const holder = holderBot ? `${holderBot.name}${holderTask?.title ? ` / ${holderTask.title}` : ""}` : blocker && store.groupByThread(blocker.threadId)?.name;
+        waitingMessage = store.appendMessage(owner2.threadId, {
+          role: "bot",
+          kind: "activity",
+          tool: { name: `Waiting for computer${holder ? ` \u2014 ${holder} is using it` : ""}; will continue automatically` },
+          ...holderBot && holderTask ? { threadRef: { botId: holderBot.id, threadId: holderTask.threadId, title: holderTask.title } } : {}
+        });
+      }
+      if (Date.now() >= deadline) throw new Error("Computer is still busy. Stop the turn using it, then retry.");
+      await new Promise((resolve16) => setTimeout(resolve16, 100));
+    }
+  } finally {
+    if (waitingMessage) store.patchMessage(owner2.threadId, waitingMessage.id, {
+      tool: { name: active() && turnResources.owns(resource, owner2) ? "Computer available \u2014 continuing" : "Computer wait ended", ok: true }
+    });
   }
   turnResourceOwners.set(owner2.threadId, owner2);
   turnComputerResources.set(owner2.threadId, { owner: owner2, resource });
@@ -81650,6 +82035,10 @@ function botAtThreadCapacity(botId) {
 function hasDirectDispatch(botId) {
   return [...directTurnDispatchClaims.values()].some((claim) => claim.botId === botId);
 }
+function unattendedDispatchState(botId) {
+  const bot = store.bot(botId);
+  return !bot ? "missing" : botAtThreadCapacity(botId) || activeGroupTurnForBot(botId) ? "busy" : "ready";
+}
 function requestedTaskBot(botId, rawThreadId) {
   const profile = store.bot(botId);
   if (!profile) throw Object.assign(new Error("no such bot"), { status: 404 });
@@ -82109,7 +82498,7 @@ function checkedMemberIds(value) {
 }
 var bootSelection = { instanceId: "", model: "" };
 var store = new Store(() => bootSelection);
-var teamComputers = new TeamComputers(join64(DATA_DIR, "team-computers.json"), ENVIRONMENT_ID);
+var teamComputers = new TeamComputers(join65(DATA_DIR, "team-computers.json"), ENVIRONMENT_ID);
 var followupsReady = false;
 var sendSequencer = new SendSequencer();
 bootSelection = await defaultSelection();
@@ -82130,7 +82519,7 @@ try {
 }
 if (browserCleanupReferencesReconciled) browserCleanup.startPending();
 var activeCoordinationForThread = (_threadId) => false;
-var wireTask = ({ resumeCursors: _resumeCursors, lastInstanceId: _lastInstanceId, ...task2 }) => activeCoordinationForThread(task2.threadId) && !task2.busy ? { ...task2, busy: true, activity: "working" } : task2;
+var wireTask = (task2) => activeCoordinationForThread(task2.threadId) && !task2.busy ? { ...toWireTask(task2), busy: true, activity: "working" } : toWireTask(task2);
 var wireBot = (bot) => {
   const { resumeCursors: _resumeCursors, tasks, approvalGrant, lastProfileRequestId: _lastProfileRequestId, lastTeamSetupReceipt: _lastTeamSetupReceipt, ...rest } = bot;
   const visible = approvalGrant && !approvalGrant.threadOnly ? { ...rest, approvalMode: "ask", autoApprove: false } : rest;
@@ -82273,6 +82662,30 @@ function fullAccessForSource(botId, threadId) {
 function peerReviewRequired(bot, threadId) {
   return Boolean(bot.approvePeerComms && !fullAccessForSource(bot.id, threadId));
 }
+function delegatedFullAccess(from, fromThreadId, target) {
+  return delegationInheritsFullAccess({
+    senderIsChief: Boolean(from.chiefOfStaff),
+    senderHasFullAccess: fullAccessForSource(from.id, fromThreadId),
+    sameBot: from.id === target.id,
+    recipientDriverKind: registry2.cliTarget(target.modelSelection.instanceId)?.driverKind
+  });
+}
+function grantDelegatedFullAccess(from, target, threadId) {
+  if (store.taskByThread(target.id, threadId)?.approvalMode === "full") return;
+  store.patchTask(target.id, threadId, { approvalMode: "full", autoApprove: false, alwaysAllow: [] });
+  store.appendMessage(threadId, {
+    role: "bot",
+    kind: "activity",
+    tool: { name: `Full access \u2014 delegated by ${from.name}, a Chief of Staff with Full access`, ok: true }
+  });
+}
+function roomTurnApprovalMode(bot, orchestration) {
+  const handoff = orchestration?.roomHandoffId ? roomHandoffs.nodes.get(orchestration.roomHandoffId) : void 0;
+  const source = handoff?.parentId ? roomHandoffs.nodes.get(handoff.parentId) : void 0;
+  const from = source ? store.bot(source.botId) : void 0;
+  if (from && source && delegatedFullAccess(from, source.threadId, bot)) return "full";
+  return approvalModeForTurn(bot, Boolean(orchestration?.roomHandoffId));
+}
 function handleDesktopTrustedApprovalMessage(raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) return false;
   const message4 = raw;
@@ -82770,7 +83183,7 @@ function outstandingAssignmentsPrompt(threadId) {
   }));
   return ` Assignments you already sent are still outstanding, and nothing in this conversation cancelled them: ${JSON.stringify(listed)}. Do not send them again, do not poll or wait for them, and do not tell the user they were lost. Each result returns to this conversation on its own and resumes you then. Answer the message above with that work still in flight.`;
 }
-var roomHandoffs = new RoomHandoffs(join64(DATA_DIR, "room-handoffs.json"), {
+var roomHandoffs = new RoomHandoffs(join65(DATA_DIR, "room-handoffs.json"), {
   validate: (node2, parent) => roomHandoffProblem(node2, parent) ?? (parent && store.bot(parent.botId)?.approvePeerComms && !fullAccessForSource(parent.botId, parent.threadId) && !node2.approvalGranted ? "Sender now requires peer approval; submit a new approved request" : void 0),
   // A direct follow-up is owed to one conversation, so it waits for that
   // conversation, not for the whole bot. Bot-level busy aggregates every
@@ -82920,7 +83333,7 @@ var roomHandoffs = new RoomHandoffs(join64(DATA_DIR, "room-handoffs.json"), {
     await tracked;
     return { ok: result.outcome === "settled", text: result.stopReason || result.replyText || result.outcome || "The addressed agent could not run" };
   }
-});
+}, Date.now, roomHandoffLimits(cfg));
 activeCoordinationForThread = (threadId) => roomHandoffs.activeDirect(threadId);
 function publicGroupState(group) {
   return { ...group, working: groupIsWorking(group) || [...roomHandoffs.nodes.values()].some((n) => n.groupId === group.id && !["completed", "failed", "cancelled"].includes(n.status)) };
@@ -83426,10 +83839,10 @@ var watchdog = new TurnWatchdog({
         groupSpeakers.delete(turn.threadId);
         store.patchGroup(group.id, { busyBotId: null, unread: true });
       }
+      releaseTurnResources(stalledResourceOwner);
       const currentBot = store.bot(turn.botId);
       if (currentBot?.busy) {
         stopScreenPoller(currentBot.id, turn.threadId);
-        releaseTurnResources(stalledResourceOwner);
         if (activeVpsThreads.get(currentBot.id) === turn.threadId) activeVpsThreads.delete(currentBot.id);
         if (store.taskByThread(currentBot.id, turn.threadId)) store.setTaskActivity(currentBot.id, turn.threadId, "idle");
         else store.setActivity(currentBot.id, "idle");
@@ -83530,6 +83943,8 @@ var localVmLeases = new LocalVmLeasePool(30 * 6e4);
 var localVmLifecycleBusy = /* @__PURE__ */ new Set();
 var localVmThreadTargets = /* @__PURE__ */ new Map();
 var localVmActiveThreads = /* @__PURE__ */ new Map();
+var autoVmClaims = /* @__PURE__ */ new Map();
+var LAZY_VM_CLAIM_GRACE_MS = 5e3;
 var localVmSeen = /* @__PURE__ */ new Set();
 function noteLocalVmSeen(target, status) {
   if (status && autoLocalVmAttachable(status)) localVmSeen.add(target.key);
@@ -83611,11 +84026,11 @@ async function attachTeamBox(computer, botId, owner2, canMount, remoteAgent) {
   const ownerId = teamComputerOwner(computer.id);
   if (boxLifecycleBusyBots.has(ownerId)) throw new Error("The team computer is being changed; wait for it to finish");
   if (computerControl.snapshot(ownerId).held) throw new Error("Release human control of the team computer before starting another turn");
-  bindTurnComputer(owner2, `computer:box-bot:${ownerId}`, true);
+  await bindTurnComputer(owner2, `computer:box-bot:${ownerId}`, true);
   teamComputerTurns.set(owner2.threadId, { owner: owner2, computerId: computer.id, botId, remoteAgent });
   let machine = await findBox(cfg, ownerId);
   if (!machine) throw new Error("The team's Box computer is missing; explicitly create or retry it from the Team map");
-  bindTurnComputer(owner2, `computer:box:${machine.id}`, true);
+  await bindTurnComputer(owner2, `computer:box:${machine.id}`, true);
   const action = boxTurnLifecycleAction({ explicitCloud: true, canMount: true, state: typeof machine.state === "string" ? machine.state : null });
   if (action === "wake") machine = await readyBox(cfg, ownerId);
   if (!machine || boxTurnLifecycleAction({ explicitCloud: true, canMount: true, state: typeof machine.state === "string" ? machine.state : null }) !== "attach") {
@@ -83881,6 +84296,7 @@ function localVmIdleFor(target) {
   return idle;
 }
 function releaseLocalVmThread(threadId) {
+  autoVmClaims.delete(threadId);
   const target = localVmThreadTargets.get(threadId);
   if (!target) return;
   localVmLeaseFor(target).release(threadId);
@@ -84890,10 +85306,15 @@ async function startTurn(botId, text8, opts) {
   }
   const skipTranscript = /* @__PURE__ */ new Set([userMessage.id, ...opts?.excludeMessageIds ?? []]);
   const activeMessages = store.activePath(threadId);
+  const coordinationChildren = opts?.coordination?.resumed ? new Set(roomHandoffs.children(opts.coordination.id).map((child) => child.id)) : void 0;
+  for (const m3 of activeMessages) {
+    if (!opts?.coordination || !m3.roomRequest) continue;
+    if (m3.roomRequest.phase === "request" && m3.roomRequest.id === opts.coordination.id || m3.roomRequest.phase === "result" && coordinationChildren?.has(m3.roomRequest.id)) skipTranscript.add(m3.id);
+  }
   const messagesById = new Map(store.messagesFor(threadId).map((message4) => [message4.id, message4]));
   const transcript = activeMessages.filter((m3) => (m3.kind === "text" && m3.text || m3.roomRequest?.phase === "result") && !skipTranscript.has(m3.id)).slice(-40).map((m3) => ({
     role: m3.role === "user" ? "user" : "assistant",
-    text: m3.roomRequest?.phase === "result" ? teammateReportContext(m3.roomRequest.id, bot.id) : transcriptText(m3, messagesById, cfg.profile?.name?.trim() || "User")
+    text: m3.roomRequest?.phase === "result" ? teammateReportContext(m3.roomRequest.id, bot.id) : m3.role !== "user" && m3.from ? peerMessageText(m3.from.name, transcriptText(m3, messagesById, cfg.profile?.name?.trim() || "User")) : transcriptText(m3, messagesById, cfg.profile?.name?.trim() || "User")
   }));
   const rewound = Boolean(task2.rewound);
   const externalContextMarker = isExternalContextMarker(task2.lastInstanceId) ? task2.lastInstanceId : void 0;
@@ -85000,45 +85421,99 @@ async function startTurn(botId, text8, opts) {
       let browserCapture = null;
       let computerKind = null;
       let autoVpsProblem = null;
+      const localVmPreviewFor = (localVmTarget, claimThreadId) => () => {
+        const owner2 = localVmLeaseFor(localVmTarget).current(localVmOwnerBusy);
+        if (owner2 && owner2.threadId !== claimThreadId) {
+          throw new Error("the Local VM moved on to another turn");
+        }
+        return containerComputerFrame(void 0, void 0, localVmTarget);
+      };
+      const claimAutoLocalVm = async (claimThreadId, pinnedTarget) => {
+        const localVmTarget = pinnedTarget ?? localVmTargetForBot(bot.id);
+        await bindTurnComputer(resourceOwner, `computer:vm:${localVmTarget.key}`, true);
+        if (localVmImageBusy || localVmModeChangeBusy || localVmLifecycleBusy.has(localVmTarget.key)) {
+          throw new Error("this Local VM is being started, stopped, or replaced \u2014 wait for setup to finish");
+        }
+        if (!localVmLeaseFor(localVmTarget).claim(claimThreadId, bot.id, localVmOwnerBusy)) {
+          throw new Error("this Local VM is already being used by another turn \u2014 wait for that turn to finish");
+        }
+        localVmThreadTargets.set(claimThreadId, localVmTarget);
+        localVmActiveThreads.set(localVmTarget.key, claimThreadId);
+        localVmIdleFor(localVmTarget).touch();
+        const dropLease = () => {
+          localVmLeaseFor(localVmTarget).release(claimThreadId);
+          if (localVmActiveThreads.get(localVmTarget.key) === claimThreadId) localVmActiveThreads.delete(localVmTarget.key);
+          localVmThreadTargets.delete(claimThreadId);
+          const resource = `computer:vm:${localVmTarget.key}`;
+          turnResources.releaseOne(resource, resourceOwner);
+          if (turnComputerResources.get(resourceOwner.threadId)?.resource === resource) turnComputerResources.delete(resourceOwner.threadId);
+        };
+        let localVm;
+        try {
+          localVm = await readyLocalVmForTurn(bot.id, localVmTarget);
+        } catch (error51) {
+          dropLease();
+          throw error51;
+        }
+        if (!localVm.ready || !localVm.runtime) {
+          dropLease();
+          throw new Error(`${localVm.problem ?? "the Local VM is not ready"} (App Settings \u2192 Computers)`);
+        }
+        previewCapture = localVmPreviewFor(localVmTarget, claimThreadId);
+        return { target: localVmTarget, runtime: localVm.runtime };
+      };
       const attachLocalVm = async (strict) => {
         if (!mountsComputerMcp || instance.driverKind === "boxAgent") {
           if (!strict) return false;
           throw new Error("this model engine cannot use the Local VM \u2014 choose Claude or an ACP engine, or select another computer destination");
         }
         const localVmTarget = localVmTargetForBot(bot.id);
+        let lazyReadyVm = null;
         if (!strict) {
           if (!localVmSeen.has(localVmTarget.key) && !opts?.automationSource) return false;
           const seen = await containerComputerStatus(void 0, void 0, localVmTarget).catch(() => null);
           if (!seen || !autoLocalVmAttachable(seen)) return false;
           if (localVmImageBusy || localVmModeChangeBusy || localVmLifecycleBusy.has(localVmTarget.key)) return false;
+          if (seen.ready && seen.runtime) lazyReadyVm = { runtime: seen.runtime };
         }
         try {
-          bindTurnComputer(resourceOwner, `computer:vm:${localVmTarget.key}`, true);
-          if (localVmImageBusy || localVmModeChangeBusy || localVmLifecycleBusy.has(localVmTarget.key)) {
-            throw new Error("this Local VM is being started, stopped, or replaced \u2014 wait for setup to finish");
-          }
-          if (!localVmLeaseFor(localVmTarget).claim(threadId, bot.id, localVmOwnerBusy)) {
-            throw new Error("this Local VM is already being used by another turn \u2014 wait for that turn to finish");
-          }
-          localVmThreadTargets.set(threadId, localVmTarget);
-          localVmActiveThreads.set(localVmTarget.key, threadId);
-          localVmIdleFor(localVmTarget).touch();
-          const localVm = await readyLocalVmForTurn(bot.id, localVmTarget);
-          if (!localVm.ready || !localVm.runtime) {
-            throw new Error(`${localVm.problem ?? "the Local VM is not ready"} (App Settings \u2192 Computers)`);
+          if (lazyReadyVm) {
+            integrations.localComputer = containerComputerMcp(
+              lazyReadyVm.runtime,
+              controlIntegration(bot.id, threadId, dispatchClaimId),
+              localVmTarget
+            );
+            autoVmClaims.set(threadId, {
+              owner: resourceOwner,
+              lazy: true,
+              claim: async () => {
+                await claimAutoLocalVm(threadId, localVmTarget);
+                if (previewCapture && threadBusy(bot.id, threadId)) {
+                  const touched = screenPollers.get(threadId)?.touched ?? instance.driverKind === "boxAgent";
+                  stopScreenPoller(bot.id, threadId);
+                  startScreenPoller(
+                    bot.id,
+                    threadId,
+                    { computer: previewCapture, ...browserCapture ? { browser: browserCapture } : {} },
+                    { screenIsTheWork: touched }
+                  );
+                }
+              }
+            });
+            return true;
           }
+          const claimed = await claimAutoLocalVm(threadId);
           integrations.localComputer = containerComputerMcp(
-            localVm.runtime,
+            claimed.runtime,
             controlIntegration(bot.id, threadId, dispatchClaimId),
-            localVmTarget
+            claimed.target
           );
-          previewCapture = () => {
-            const owner2 = localVmLeaseFor(localVmTarget).current(localVmOwnerBusy);
-            if (owner2 && owner2.threadId !== threadId) {
-              throw new Error("the Local VM moved on to another turn");
+          autoVmClaims.set(threadId, {
+            owner: resourceOwner,
+            claim: async () => {
+              await claimAutoLocalVm(threadId);
             }
-            return containerComputerFrame(void 0, void 0, localVmTarget);
-          };
+          });
           return true;
         } catch (error51) {
           if (strict) throw error51;
@@ -85054,11 +85529,11 @@ async function startTurn(botId, text8, opts) {
           hostPlatform: process.platform,
           providerSupportsLocal: mountsLocalComputer
         })) {
-          throw new Error("this model engine cannot control this computer \u2014 choose Claude or an ACP engine, or select another destination");
+          throw new Error(mountsLocalComputer ? `local computer control is not available on ${process.platform} \u2014 select another destination` : "this model engine cannot control this computer \u2014 choose Claude or an ACP engine, or select another destination");
         }
         const cua = readCuaConnection();
         if (!cua) throw new Error("CUA Driver is not ready for this computer \u2014 check permissions and restart OpenMausBot");
-        bindTurnComputer(resourceOwner, "computer:host");
+        await bindTurnComputer(resourceOwner, "computer:host");
         integrations.localComputer = gatedLocalComputer(cua, controlIntegration(bot.id, threadId, dispatchClaimId));
         computerKind = "local";
       }
@@ -85067,7 +85542,7 @@ async function startTurn(botId, text8, opts) {
         if (unsupported && wants2 === "cloud") throw new Error(unsupported);
         if (unsupported && wants2 === void 0) autoVpsProblem = unsupported;
         if (!unsupported) {
-          bindTurnComputer(resourceOwner, `computer:vps:${vpsSshAlias(cfg)}:${bot.id}`, true);
+          await bindTurnComputer(resourceOwner, `computer:vps:${vpsSshAlias(cfg)}:${bot.id}`, true);
           activeVpsThreads.set(bot.id, threadId);
           let remote;
           remote = vpsStartsForTurn({ wants: wants2, autoStartVps: bot.autoStartVps, automationSource: opts?.automationSource }) ? await vpsComputerAction("provision", cfg, bot.id) : await inspectVpsForAuto(cfg, bot.id);
@@ -85097,7 +85572,7 @@ async function startTurn(botId, text8, opts) {
         computerKind = "box";
       }
       if (!teamComputer && mountsCloudComputer && (wants2 === "cloud" || wants2 === void 0) && cloudBackend === "box" && boxConfigured(cfg)) {
-        if (wants2 === "cloud") bindTurnComputer(resourceOwner, `computer:box-bot:${bot.id}`, true);
+        if (wants2 === "cloud") await bindTurnComputer(resourceOwner, `computer:box-bot:${bot.id}`, true);
         if (!mountsCloudComputer && wants2 === "cloud") {
           throw new Error("this model engine cannot use computer tools \u2014 choose Claude, an ACP engine, or the Computer engine");
         }
@@ -85133,7 +85608,7 @@ async function startTurn(botId, text8, opts) {
           });
         }
         if (b3 && lifecycle === "attach") {
-          bindTurnComputer(resourceOwner, `computer:box:${b3.id}`, instance.driverKind === "boxAgent");
+          await bindTurnComputer(resourceOwner, `computer:box:${b3.id}`, instance.driverKind === "boxAgent");
           previewCapture = () => screenshotBox(cfg, bot.id, b3.id);
           if (mountsCloudComputer) {
             integrations.computer = {
@@ -85161,7 +85636,7 @@ async function startTurn(botId, text8, opts) {
       })) {
         const cua = readCuaConnection();
         if (cua) {
-          bindTurnComputer(resourceOwner, "computer:host");
+          await bindTurnComputer(resourceOwner, "computer:host");
           integrations.localComputer = gatedLocalComputer(cua, controlIntegration(bot.id, threadId, dispatchClaimId));
           computerKind = "local";
         }
@@ -85415,6 +85890,7 @@ function routineRunCard(run3) {
     status: run3.status
   };
   if (run3.goalStatus) card.goalStatus = run3.goalStatus;
+  if (run3.deferredAt != null && run3.status === "queued") card.deferredAt = run3.deferredAt;
   if (run3.threadId) card.executionThreadId = run3.threadId;
   if (summary) card.summary = summary;
   if (error51) card.error = error51;
@@ -85422,7 +85898,7 @@ function routineRunCard(run3) {
 }
 function routineRunFallbackText(card) {
   const goalState = card.goalStatus === "needs-input" ? "needs your input" : card.goalStatus === "blocked" ? "was blocked" : card.goalStatus === "limit-reached" ? "reached its limit" : card.goalStatus === "stopped" ? "was stopped" : card.goalStatus === "failed" ? "failed" : void 0;
-  const state = goalState ?? (card.status === "waiting" ? "needs your attention" : card.status === "completed" ? "completed" : card.status === "failed" ? "failed" : card.status === "cancelled" ? "was cancelled" : card.status === "missed" ? "was missed" : card.status);
+  const state = goalState ?? (card.status === "waiting" ? "needs your attention" : card.status === "completed" ? "completed" : card.status === "failed" ? "failed" : card.status === "cancelled" ? "was cancelled" : card.status === "missed" ? "was missed" : card.status === "queued" && card.deferredAt != null ? "deferred: target busy" : card.status);
   return `Routine \u201C${card.routineName}\u201D ${state}`;
 }
 function syncRoutineRunToSource(run3) {
@@ -85518,10 +85994,7 @@ _loadPending();
 routines = new RoutineManager({
   emit: broadcast,
   hasPendingDelegations: (threadId) => pendingThreads().includes(threadId) || [...delegationWatch.values()].some((watch) => watch.sourceThreadId === threadId) || pendingDelegationWakes.has(threadId),
-  botState: (botId) => {
-    const bot = store.bot(botId);
-    return !bot ? "missing" : bot.busy ? "busy" : "ready";
-  },
+  botState: unattendedDispatchState,
   goalState: (groupId, coordinatorBotId) => {
     const group = store.group(groupId);
     const coordinator = store.bot(coordinatorBotId);
@@ -85585,6 +86058,14 @@ routines = new RoutineManager({
     const detail = run3.error ? `${run3.routineName}: ${run3.error}` : run3.routineName;
     const notificationBot = routineSourceOwner(run3)?.bot ?? bot;
     notify(buildNotification("routine-failed", notificationBot, routineSourceThread(run3) ?? run3.threadId ?? bot.threadId, detail));
+  },
+  onRunDeferred: (run3) => {
+    const bot = store.bot(run3.botId);
+    if (!bot) return;
+    const minutes = run3.deferredAt != null && run3.deferredNoticeAt != null ? Math.max(1, Math.round((run3.deferredNoticeAt - run3.deferredAt) / 6e4)) : null;
+    const detail = `${redactSecretsInText(run3.routineName)}: target busy${minutes != null ? ` for ${minutes} minutes` : ""}`;
+    const notificationBot = routineSourceOwner(run3)?.bot ?? bot;
+    notify(buildNotification("routine-deferred", notificationBot, routineSourceThread(run3) ?? bot.threadId, detail));
   }
 });
 var recoveredRoutineGoalRuns = new Map(
@@ -85812,12 +86293,6 @@ async function deleteBotWithLifecycle(botId, revalidate = () => {
       const acknowledged = await browserCleanup.ensure(committedCleanup);
       requireBrowserCleanupAcknowledged(acknowledged, `Browser data for ${bot.name}`);
     }
-    for (const dir of [EVENTS_DIR, NATIVE_DIR]) {
-      try {
-        unlinkSync14(join64(dir, `${bot.threadId}.ndjson`));
-      } catch {
-      }
-    }
     return deletionResponse(200, { ok: true });
   } finally {
     if (claimedLocalVmTarget) localVmLifecycleBusy.delete(claimedLocalVmTarget.key);
@@ -86106,10 +86581,7 @@ function resolveAndSendProfile(res, args) {
 }
 var webhooks = new WebhookManager({
   emit: broadcast,
-  botState: (botId) => {
-    const bot = store.bot(botId);
-    return !bot ? "missing" : bot.busy ? "busy" : "ready";
-  },
+  botState: unattendedDispatchState,
   enqueue: (input) => routines.enqueueWebhook(input),
   findRun: (webhookId, deliveryId2) => routines.webhookRunReceipt(webhookId, deliveryId2),
   cancelQueued: (webhookId, message4) => routines.cancelQueuedWebhook(webhookId, message4),
@@ -86194,7 +86666,7 @@ async function runGroupMemberTurn(groupId, threadId, botId, hop, spoken = /* @__
   }
   revokeInternalCapabilitiesForThread(threadId);
   spoken.add(botId);
-  const preparedApprovalMode = approvalModeForTurn(bot, Boolean(orchestration?.roomHandoffId));
+  const preparedApprovalMode = roomTurnApprovalMode(bot, orchestration);
   const preparedSelection = { ...bot.modelSelection };
   const preparedComposio = bot.composio;
   const instance = turnInstance(bot);
@@ -86305,7 +86777,7 @@ async function runGroupMemberTurn(groupId, threadId, botId, hop, spoken = /* @__
     const readyGroup = store.group(group.id);
     const stillOwnsThread = readyGroup?.dm ? readyGroup.threadId === threadId : Boolean(readyGroup && store.groupTaskByThread(readyGroup.id, threadId));
     if (!readyGroup || !stillOwnsThread || !readyGroup.memberIds.includes(readyBot.id)) return false;
-    const setupChanged = turnInstance(readyBot) !== instance || approvalModeForTurn(readyBot, Boolean(orchestration?.roomHandoffId)) !== preparedApprovalMode || readyBot.modelSelection.instanceId !== preparedSelection.instanceId || readyBot.modelSelection.model !== preparedSelection.model || readyBot.modelSelection.effort !== preparedSelection.effort || readyBot.modelSelection.variant !== preparedSelection.variant || readyBot.composio !== preparedComposio;
+    const setupChanged = turnInstance(readyBot) !== instance || roomTurnApprovalMode(readyBot, orchestration) !== preparedApprovalMode || readyBot.modelSelection.instanceId !== preparedSelection.instanceId || readyBot.modelSelection.model !== preparedSelection.model || readyBot.modelSelection.effort !== preparedSelection.effort || readyBot.modelSelection.variant !== preparedSelection.variant || readyBot.composio !== preparedComposio;
     if (setupChanged) {
       if (setupRetry === 0) {
         return runGroupMemberTurn(
@@ -86424,7 +86896,7 @@ async function runGroupMemberTurn(groupId, threadId, botId, hop, spoken = /* @__
         throw new Error("this model engine cannot use the Local VM");
       }
       const target = { ...localVmTargetForBot(readyBot.id) };
-      bindTurnComputer(resourceOwner, `computer:vm:${target.key}`, true);
+      await bindTurnComputer(resourceOwner, `computer:vm:${target.key}`, true);
       if (localVmImageBusy || localVmModeChangeBusy || localVmLifecycleBusy.has(target.key)) {
         throw new Error("this Local VM is being started, stopped, or replaced");
       }
@@ -86609,7 +87081,7 @@ ${e.text}`;
         text: text8,
         refreshSystemPrompt: true,
         images: turnImages,
-        approvalMode: approvalModeForTurn(readyBot, Boolean(orchestration?.roomHandoffId)),
+        approvalMode: roomTurnApprovalMode(readyBot, orchestration),
         system: roomSystem.text,
         systemStable: roomSystem.stable,
         systemVolatile: roomSystem.volatile,
@@ -86775,6 +87247,7 @@ ${e.text}`;
     return true;
   } catch (error51) {
     if (providerDispatched) throw error51;
+    if (error51 instanceof DirectTurnSetupCancelled) return false;
     const isSpendCap = typeof error51 === "object" && error51 !== null && error51.code === "spend_cap";
     const isVariantError = typeof error51 === "object" && error51 !== null && error51.code === "unsupported_model_variant";
     if (!roomSpeaker && !isSpendCap && !isVariantError) throw error51;
@@ -88255,7 +88728,7 @@ var claudeUpdatesInFlight = /* @__PURE__ */ new Set();
 function serveStatic(res, path) {
   if (!STATIC_DIR) return false;
   const safe = path === "/" ? "/index.html" : path.replace(/\.\./g, "");
-  const file2 = join64(STATIC_DIR, safe);
+  const file2 = join65(STATIC_DIR, safe);
   try {
     const data = readFileSync45(file2);
     res.writeHead(200, { "content-type": MIME[extname5(file2)] ?? "application/octet-stream" });
@@ -88263,7 +88736,7 @@ function serveStatic(res, path) {
     return true;
   } catch {
     try {
-      const data = readFileSync45(join64(STATIC_DIR, "index.html"));
+      const data = readFileSync45(join65(STATIC_DIR, "index.html"));
       res.writeHead(200, { "content-type": "text/html" });
       res.end(data);
       return true;
@@ -89280,15 +89753,19 @@ var handleRequest = async (req, res) => {
       if (method === "POST" && path === "/api/internal/ask-bot") {
         const body = await readInternalBody();
         const fromBotId = internalSender.id;
-        const toBotId = String(body.toBotId ?? "");
+        const toBotRef = String(body.toBotId ?? "");
         const message4 = String(body.message ?? "").trim();
         if (body.depth !== void 0 && (!Number.isInteger(body.depth) || body.depth < 0 || body.depth !== internalCapability.depth)) {
           return json3(res, 403, { error: "the recursion depth does not match this turn" });
         }
         const depth = internalCapability.depth;
-        if (!toBotId || !message4) return json3(res, 400, { error: "toBotId and message required" });
-        if (toBotId === fromBotId) return json3(res, 400, { error: "a bot cannot message itself" });
+        if (!toBotRef || !message4) return json3(res, 400, { error: "toBotId and message required" });
+        if (toBotRef === fromBotId) return json3(res, 400, { error: "a bot cannot message itself" });
         if (depth >= MAX_COMMS_DEPTH) return json3(res, 200, { error: "message chains are limited to one hop" });
+        const resolvedTo = resolveTeammate(store.bots, internalSender, toBotRef);
+        if ("error" in resolvedTo) return json3(res, 404, { error: `no such bot: ${resolvedTo.error}` });
+        if (resolvedTo.id === fromBotId) return json3(res, 400, { error: "a bot cannot message itself" });
+        const toBotId = resolvedTo.id;
         const target = store.bot(toBotId);
         if (!target) return json3(res, 404, { error: "no such bot" });
         const from = internalSender;
@@ -89443,15 +89920,18 @@ var handleRequest = async (req, res) => {
       }
       if (method === "POST" && path === "/api/internal/delegate-bot") {
         const body = await readInternalBody();
-        const toBotId = String(body.toBotId ?? "");
+        const toBotRef = String(body.toBotId ?? "");
         const message4 = String(body.message ?? "").trim();
         const reason = typeof body.reason === "string" && body.reason.trim() ? body.reason.trim() : void 0;
         if (body.depth !== void 0 && (!Number.isInteger(body.depth) || body.depth < 0 || body.depth !== internalCapability.depth)) {
           return json3(res, 403, { error: "the recursion depth does not match this turn" });
         }
         const depth = internalCapability.depth;
-        if (!toBotId || !message4) return json3(res, 400, { error: "toBotId and message required" });
+        if (!toBotRef || !message4) return json3(res, 400, { error: "toBotId and message required" });
         const from = internalSender;
+        const resolvedTo = resolveTeammate(store.bots, from, toBotRef);
+        if ("error" in resolvedTo) return json3(res, 404, { error: `no such bot: ${resolvedTo.error}` });
+        const toBotId = resolvedTo.id;
         const target = store.bot(toBotId);
         if (!target) return json3(res, 404, { error: "no such bot" });
         if (!canAccessTeam(from, target.section) || target.hidden) {
@@ -89524,13 +90004,21 @@ var handleRequest = async (req, res) => {
           const groupId = parsed.data.groupId ?? source?.id;
           const destination = groupId ? store.group(groupId) : void 0;
           if (groupId && !destination) return json3(res, 404, { error: "No such room; use list_room_targets." });
-          const targets = parsed.data.botIds.map((botId) => ({
+          const botIds = [];
+          for (const raw of parsed.data.botIds) {
+            const resolved = resolveTeammate(store.bots, internalSender, raw);
+            if ("error" in resolved) return json3(res, 403, { error: resolved.error });
+            botIds.push(resolved.id);
+          }
+          if (new Set(botIds).size !== botIds.length) return json3(res, 400, { error: "bot_ids name the same teammate twice \u2014 send each teammate once" });
+          const targets = botIds.map((botId) => ({
             groupId: destination?.id,
             threadId: destination ? destination.id === source?.id ? address.threadId : destination.threadId : store.bot(botId)?.threadId ?? "",
             botId
           }));
           for (const target of targets) {
-            const eligibility = target.botId === internalSender.id ? "Choose a teammate, not yourself" : roomHandoffProblem(target, address);
+            const addressed = store.bot(target.botId);
+            const eligibility = target.botId === internalSender.id ? "Choose a teammate, not yourself" : !addressed ? `No bot with id "${target.botId}" \u2014 call list_bots and copy the exact id from the result` : addressed.hidden ? `The bot with id "${target.botId}" is no longer available \u2014 call list_bots for the ones you can reach` : roomHandoffProblem(target, address);
             if (eligibility) return json3(res, 403, { error: eligibility });
           }
           let approvalGranted = false;
@@ -89557,6 +90045,9 @@ var handleRequest = async (req, res) => {
                 if (!resolved) throw new Error("The recipient no longer exists");
                 target.threadId = resolved.task.threadId;
                 if (resolved.created) createdThread = resolved.task.threadId;
+                if (delegatedFullAccess(internalSender, internalCapability.threadId, store.bot(target.botId))) {
+                  grantDelegatedFullAccess(internalSender, store.bot(target.botId), target.threadId);
+                }
               }
               const { node: node2, duplicate } = roomHandoffs.enqueue(
                 address,
@@ -89755,6 +90246,7 @@ ${message4}`;
         }
         const task2 = store.createTask(target.id, title, false, projectId, { botId: from.id, name: from.name, at: Date.now() });
         if (!task2) return json3(res, 500, { error: "couldn't create that thread" });
+        if (delegatedFullAccess(from, fromThreadId, target)) grantDelegatedFullAccess(from, target, task2.threadId);
         const queued = queueDelegation(
           commsBus,
           from,
@@ -89994,6 +90486,29 @@ ${message4}`;
         if (!bot) return json3(res, 404, { error: "no such bot" });
         if (method === "GET") {
           const snapshot2 = botComputerControlSnapshot(botId, internalCapability.teamComputerId);
+          const slot = autoVmClaims.get(internalCapability.threadId);
+          const lazyClaim = slot && slot.owner.generation === internalCapability.generation ? slot : void 0;
+          if (!snapshot2.held && lazyClaim?.lazy && !lazyClaim.begin) {
+            startAutoVmClaim(autoVmClaims, internalCapability.threadId, internalCapability.generation);
+            await Promise.race([
+              lazyClaim.begin ?? Promise.resolve(),
+              new Promise((resolve16) => setTimeout(resolve16, LAZY_VM_CLAIM_GRACE_MS))
+            ]);
+          }
+          if (!snapshot2.held && lazyClaim?.failed === true) {
+            return json3(res, 200, {
+              held: true,
+              helpOpen: false,
+              blockedReason: `This turn could not claim the Local VM${lazyClaim.failure ? ` (${lazyClaim.failure})` : ""}. This call was not performed. Do not retry computer work in this turn; tell the person what you could not do.`
+            });
+          }
+          if (!snapshot2.held && lazyClaim?.lazy && lazyClaim.begin && !lazyClaim.claimed) {
+            return json3(res, 200, {
+              held: true,
+              helpOpen: false,
+              blockedReason: "Another thread is using this computer. This call was not performed. Pause computer work until that thread finishes, then take a fresh screenshot before acting."
+            });
+          }
           const computer = turnComputerResources.get(internalCapability.threadId);
           if (!snapshot2.held && computer && computer.owner.generation === internalCapability.generation && !claimTurnResource(computer.owner, computer.resource)) {
             return json3(res, 200, {
@@ -91025,14 +91540,6 @@ data: ${JSON.stringify({ kind: "ping" })}
       routines.disableForGroup(group.id);
       store.deleteGroup(group.id);
       rejectDeletedThreadSkillStages(stagedSkillCleanups);
-      for (const threadId of threadIds) {
-        for (const dir of [EVENTS_DIR, NATIVE_DIR]) {
-          try {
-            unlinkSync14(join64(dir, `${threadId}.ndjson`));
-          } catch {
-          }
-        }
-      }
       return json3(res, 200, { ok: true });
     }
     m3 = path.match(/^\/api\/groups\/([\w-]+)\/messages$/);
@@ -91127,6 +91634,74 @@ data: ${JSON.stringify({ kind: "ping" })}
       }
       return json3(res, 200, { ok: true });
     }
+    m3 = path.match(/^\/api\/groups\/([\w-]+)\/queue\/([\w-]+)\/steer$/);
+    if (m3 && method === "POST") {
+      const body = await readBody(req);
+      if (body !== null && (typeof body !== "object" || Array.isArray(body))) {
+        return json3(res, 400, { error: "body must be a JSON object" });
+      }
+      const threadId = typeof body?.threadId === "string" ? body.threadId : void 0;
+      if (threadId !== void 0 && !/^[\w-]+$/.test(threadId)) {
+        return json3(res, 400, { error: "threadId must be a task id" });
+      }
+      const group = store.group(m3[1]);
+      if (!group) return json3(res, 404, { error: "no such room" });
+      const targetThreadId = threadId ?? group.threadId;
+      const ownsThread = group.dm ? group.threadId === targetThreadId : Boolean(store.groupTaskByThread(group.id, targetThreadId));
+      if (!ownsThread) {
+        return json3(res, 409, { error: "the channel switched tasks before it could receive the message" });
+      }
+      noteTurnTrigger(targetThreadId, auth);
+      const current2 = store.group(group.id);
+      if (!current2) return json3(res, 404, { error: "no such room" });
+      const speakerBotId = groupSpeakers.get(targetThreadId)?.botId ?? (targetThreadId === current2.threadId ? current2.busyBotId : void 0);
+      const speaker = speakerBotId ? store.bot(speakerBotId) : void 0;
+      const instance = speaker ? runningTurnInstance(speaker, targetThreadId) : void 0;
+      const held = holdChannelQueue(current2.id, targetThreadId, m3[2]);
+      if (!held) return json3(res, 404, { error: "no such queued message" });
+      if (!speaker || !instance?.adapter.capabilities.queueing || !instance.adapter.steer) {
+        restoreHeldChannelQueue(held);
+        return json3(res, 200, { ok: true, queued: true, threadId: targetThreadId });
+      }
+      const [head] = held.items;
+      if (!head || head.id !== m3[2]) {
+        restoreHeldChannelQueue(held);
+        return json3(res, 409, { error: "only the first queued message can steer" });
+      }
+      const replyTo = resolveHeldReplyTarget(held, resolveReplyTarget);
+      const steered = await instance.adapter.steer(targetThreadId, promptWithReply(head.text, replyTo, cfg.profile?.name?.trim() || "User")).catch(() => "indeterminate");
+      const after = store.group(current2.id);
+      const afterSpeakerBotId = after ? groupSpeakers.get(targetThreadId)?.botId ?? (targetThreadId === after.threadId ? after.busyBotId : void 0) : void 0;
+      const delivered = steered !== "refused";
+      if (after && delivered && (steered === "indeterminate" || afterSpeakerBotId === speakerBotId)) {
+        const message4 = store.appendMessage(targetThreadId, {
+          role: "user",
+          kind: "text",
+          text: head.text,
+          replyToId: head.replyToId,
+          sendId: head.sendId,
+          channelMode: head.mode,
+          queueId: head.id,
+          via: head.via,
+          steered: true
+        });
+        settleHeldChannelQueueHead(held);
+        return json3(res, 200, {
+          ok: true,
+          steered: true,
+          threadId: targetThreadId,
+          messages: [message4],
+          queueIds: [head.id]
+        });
+      }
+      if (steered === "indeterminate" && !after) {
+        settleHeldChannelQueueHead(held);
+        return json3(res, 404, { error: "no such room" });
+      }
+      restoreHeldChannelQueue(held);
+      if (after && !groupIsWorking(after)) drainQueuedChannelSends();
+      return json3(res, 200, { ok: true, queued: true, threadId: targetThreadId });
+    }
     m3 = path.match(/^\/api\/groups\/([\w-]+)\/interrupt$/);
     if (m3 && method === "POST") {
       const group = store.group(m3[1]);
@@ -92161,18 +92736,19 @@ data: ${JSON.stringify({ kind: "ping" })}
           }
           if (currentAtStart.busy) {
             const instance = runningTurnInstance(currentAtStart, threadId);
-            let steered = false;
+            let steered = "refused";
             const carriesImages = extractTurnImages(text8).images.length > 0;
             if (!carriesImages && !computerSelectionTurns.get(threadId)?.selected && instance?.adapter.capabilities.queueing && instance.adapter.steer) {
-              steered = await instance.adapter.steer(threadId, promptWithReply(text8, replyTo, cfg.profile?.name?.trim() || "User")).catch(() => false);
+              steered = await instance.adapter.steer(threadId, promptWithReply(text8, replyTo, cfg.profile?.name?.trim() || "User")).catch(() => "indeterminate");
             }
             const current2 = store.projectBotForTask(bot.id, threadId);
             if (!current2) throw Object.assign(new Error("no such bot"), { status: 404 });
             if (!store.taskByThread(bot.id, threadId)) {
               throw Object.assign(new Error("the target task no longer exists"), { status: 409 });
             }
-            if (steered) {
-              if (!current2.busy) {
+            const delivered = steered !== "refused";
+            if (delivered) {
+              if (steered === "steered" && !current2.busy) {
                 throw Object.assign(
                   new Error("the running turn ended before the steered message could be recorded"),
                   { status: 409 }
@@ -92215,6 +92791,53 @@ data: ${JSON.stringify({ kind: "ping" })}
       }
       return json3(res, 200, { ok: true });
     }
+    m3 = path.match(/^\/api\/bots\/([\w-]+)\/queue\/([\w-]+)\/steer$/);
+    if (m3 && method === "POST") {
+      const body = await readBody(req);
+      requirePinnedClientThread(m3[1], body?.threadId);
+      const bot = requestedTaskBot(m3[1], body?.threadId);
+      noteTurnTrigger(bot.threadId, auth);
+      const held = holdSteeredQueue(bot.id, bot.threadId, m3[2]);
+      if (!held) return json3(res, 404, { error: "no such queued message" });
+      if (held.items.some((item) => extractTurnImages(item.text).images.length > 0)) {
+        restoreHeldSteeredQueue(held);
+        return json3(res, 200, { ok: true, queued: true, threadId: bot.threadId });
+      }
+      const currentAtStart = store.projectBotForTask(bot.id, bot.threadId);
+      const instance = currentAtStart?.busy ? runningTurnInstance(currentAtStart, bot.threadId) : void 0;
+      const prompt = held.items.map((item) => item.prompt).join("\n\n");
+      let steered = "refused";
+      if (currentAtStart?.busy && instance?.adapter.capabilities.queueing && instance.adapter.steer) {
+        steered = await instance.adapter.steer(bot.threadId, prompt).catch(() => "indeterminate");
+      }
+      const current2 = store.projectBotForTask(bot.id, bot.threadId);
+      if ((steered === "steered" && current2?.busy || steered === "indeterminate" && current2) && store.taskByThread(bot.id, bot.threadId)) {
+        if (auth.kind === "session" || DESKTOP_MANAGED) clearUnattended(bot.threadId);
+        const messages = held.items.map((item) => store.appendMessage(bot.threadId, {
+          role: "user",
+          kind: "text",
+          text: item.text,
+          replyToId: item.replyToId,
+          sendId: item.sendId,
+          queueId: item.messageId,
+          peerAsk: item.peerAsk,
+          steered: true
+        }));
+        const queueIds = held.items.map((item) => item.messageId);
+        settleHeldSteeredQueue(held);
+        return json3(res, 200, { ok: true, steered: true, threadId: bot.threadId, messages, queueIds });
+      }
+      if (steered === "indeterminate") {
+        settleHeldSteeredQueue(held);
+        if (!store.taskByThread(bot.id, bot.threadId)) {
+          throw Object.assign(new Error("the target task no longer exists"), { status: 409 });
+        }
+        throw Object.assign(new Error("no such bot"), { status: 404 });
+      }
+      restoreHeldSteeredQueue(held);
+      if (current2 && !current2.busy) drainQueuedSends();
+      return json3(res, 200, { ok: true, queued: true, threadId: bot.threadId });
+    }
     m3 = path.match(/^\/api\/bots\/([\w-]+)\/messages\/([\w-]+)\/edit$/);
     if (m3 && method === "POST") {
       const messageId = m3[2];
@@ -94083,6 +94706,27 @@ try {
 } catch (error51) {
   console.warn(`attachments: startup partial cleanup failed: ${error51 instanceof Error ? error51.message : String(error51)}`);
 }
+var THREAD_LOG_RETENTION_SWEEP_MS = 24 * 60 * 60 * 1e3;
+function sweepThreadEventLogsNow() {
+  const retentionDays = threadEventLogRetentionDays(cfg);
+  if (retentionDays === null) return;
+  const candidates = store.bots.flatMap((bot) => (bot.tasks ?? []).map((task2) => ({
+    threadId: task2.threadId,
+    closedAt: task2.closedBy?.at ?? null,
+    archivedAt: task2.archivedAt ?? null,
+    unread: task2.unread === true,
+    busy: threadBusy(bot.id, task2.threadId),
+    openDirectHandoff: roomHandoffs.activeDirect(task2.threadId)
+  })));
+  const swept = sweepThreadEventLogs(candidates, retentionDays);
+  if (swept > 0) console.log(`[retention] removed event logs for ${swept} idle thread(s) past ${retentionDays} day(s)`);
+}
+try {
+  sweepThreadEventLogsNow();
+} catch (error51) {
+  console.warn(`thread event log retention sweep failed: ${error51 instanceof Error ? error51.message : String(error51)}`);
+}
+setInterval(sweepThreadEventLogsNow, THREAD_LOG_RETENTION_SWEEP_MS).unref();
 for (const row of chatFollowups()) {
   if (row.status !== "dispatching" && row.status !== "interrupted") continue;
   const owned = row.kind === "bot" ? Boolean(store.taskByThread(row.ownerId, row.threadId)) : Boolean(store.groupByThread(row.threadId)?.id === row.ownerId);