panoma 0.9.0 → 0.10.0

package/app/node_modules/@panoma/core/dist/index.d.ts

@@ -1059,6 +1059,35 @@ declare const REDACTED = "[secret-redacted]";
 /** The text with its keys covered. Idempotent: the mark has no key shape. */
 declare function redactSecrets(text: string): string;
 
+/**
+ * How a copy `packages/handoff` wrote is told apart from a conversation the person had.
+ *
+ * It lives here and not in the handoff package because the twin's history readers
+ * (`history/claude-code.ts`, `history/codex.ts`) must recognise the carried records and skip
+ * them, and `@panoma/core` imports nothing from the other packages. A carried record is not
+ * owner evidence: the person said those words at the source, where they were already mined,
+ * and counting them again would weigh every reaction in that conversation twice.
+ *
+ * The marks are the writers' own stamps on the record, never the text of the first prompt:
+ * `version` on every Claude Code record `writers/claude.ts` writes, and
+ * `session_meta.payload.originator` on every rollout `writers/codex.ts` writes. Until
+ * 12-Sep-2026 the readers keyed on the first two words of the provenance line instead, and
+ * dropped the file whole; that lost two things the feature exists for. A `brief` is a Markdown
+ * document that starts with the same line and is meant to be pasted as a first message, so the
+ * person's own conversation that opened with one vanished from the twin. And `claude --resume`
+ * and `codex resume` append the person's new turns to the copy itself, so every reaction given
+ * after the handoff was never read. A stamp is on the record and not in its text — a person
+ * cannot type it — and it marks the carried prefix and not the file. The prefix constant stays
+ * for the line the writers put in front of the first turn (`notes.ts` in the handoff package)
+ * and for a person reading the file; it is not a skip key anywhere, and both stamps have been
+ * on every copy since the first one was written on 11-Sep-2026, so no older copy needs it.
+ */
+declare const HANDOFF_PROVENANCE_PREFIX = "Continued from ";
+/** The `version` every Claude Code record written by `packages/handoff` carries. Claude Code writes its own version number there. */
+declare const HANDOFF_CLAUDE_RECORD_VERSION = "panoma-handoff";
+/** The `originator` in the `session_meta` of every Codex rollout written by `packages/handoff`. Codex writes its client's name there. */
+declare const HANDOFF_CODEX_ORIGINATOR = "panoma";
+
 /**
  * The brand that distinguishes our hooks from those of any other.
  *
@@ -1757,6 +1786,15 @@ interface MineStats {
      * that there aren't any there.
      */
     sidechain: number;
+    /**
+     * Copies panoma wrote: a conversation handed off from another agent (`packages/handoff`),
+     * one count per file. Its carried records are stamped `version: "panoma-handoff"` and are
+     * skipped, because their turns are the same ones the source file already contributed and
+     * counting them would weigh every reaction in that conversation twice. What the person typed
+     * after resuming the copy is theirs and is read as always; until 12-Sep-2026 the whole file
+     * was skipped and those turns —the continuation the feature exists for— were never read.
+     */
+    handedOff: number;
     commands: number;
     reactions: number;
     briefs: number;
@@ -2518,4 +2556,4 @@ interface McpTomlMergeResult {
  */
 declare function mergeMcpToml(existing: string | undefined, entry: McpEntry): McpTomlMergeResult;
 
-export { AGENT_DOC_FILES, type AccessKey, type AgentAsks, type AgentsMdFile, type AgentsMdFinding, type AgentsMdOptions, type AgentsMdReport, type AnalyzeOptions, type AssetReport, CLAUDE_BRIDGE, type CatalogMdContext, type Composition, type ConsentState, type CriticFinding, type CriticKind, type CriticReport, type DatabaseLease, type Dependency, type DesignColor, type DesignFingerprint, type DesignSignal, type DetectedDistribution, type DetectedTechnology, type DiskReport, type DistributionKind, type DocTouch, ENGINE_VERSION, type Ecosystem, type EcosystemReport, type EnvContract, type Evidence, type FamilyMember, type FileIndex, type FitRefusal, type FittedShot, type GitInfo, HOOKS_BRAND, type HealthScore, type HealthSignal, type HistorySource, type HistorySourceId, type Identity, type IdentityCandidate, type ImageType, LANGUAGE_BY_EXTENSION, type LanguageStat, type Launch, type LintFacts, MAX_FITTABLE_BYTES, MAX_FIT_PIXELS, MAX_SCREENSHOT_BYTES, MCP_FILE_MODE, type Matcher, type McpEntry, McpMergeError, type McpMergeReason, type McpMergeResult, type McpTarget, type McpTargetKind, McpTomlError, type MineOptions, type MineOutcome, type MineResult, type MineStats, type Narrative, ORIGIN_EVIDENCE_CODES, type OriginEvidence, type OriginEvidenceCode, type OriginKind, PANOMA_BLOCK_BEGIN, PANOMA_BLOCK_END, PANOMA_HOME_VAR, POSTGRES_DEL_PAQUETE, type PanomaBlockData, type ProjectAnalysis, type ProjectFamily, type ProjectKind, type ProjectLink, type ProjectOrigin, type Provenance, type QuoteRedaction, REDACTED, RULES, type Reaction, type ReclaimableDir, type RiskCode, type RiskLevel, type Rule, type RunCommand, type Runbook, type RuntimeNeed, SERVER_NAME, SHOTS_DIR, SKIP_DIRS, SMALL_SCREENSHOT_WIDTH, type Screenshot, ScreenshotError, type ScreenshotProblem, type SecretFinding, type SecretReport, type SeededTopic, type Severity, type Shot, type ShotsInbox, type Summary, TASTE_CAP, TASTE_FILE, TASTE_GLOBAL_ONLY, TASTE_TOPICS, TasteFullError, type TasteLine, type TasteProfile, type TasteTopic, type TechKind, type TwinConsent, type UnusedAsset, type VerdictSignal, type WalkOptions, type WorkRisk, type WorkState, agentKindAliases, agentsMdHash, analyzeCargo, analyzeComposer, analyzeEcosystems, analyzeGo, analyzeNpm, analyzeProject, analyzePub, analyzePypi, analyzeRubyGems, applyEnrichment, asShellLine, avisoDeFormato, buildFileIndex, canonicalAgentKind, classifyOrigin, clearLease, commitsPerDay, composeBlockData, composeSummary, composedText, computeHealth, computeLanguages, consentState, critiqueKey, deduceIdentity, depVersions, detectDistributions, detectSignals, discoverProjects, docHash, ensureAccessKey, estimateTokens, evidenceText, expandTilde, fallbackColor, findDuplicateFamilies, findExecutable, findIcon, findSecrets, findUnusedAssets, fingerprint, fitScreenshot, hasPanomaBlock, hasReader, hookIsOurs, identityCandidate, imageTypeOf, inventoryHistory, isAllowed, isLoopbackHost, isNewerVersion, isProjectRoot, leaseDir, leaseIntruder, leasePath, lintAgentDoc, mcpProjectTarget, mcpSnippet, mcpTarget, measureDisk, mergeMcp, mergeMcpToml, mergePreToolUse, mergeStop, mineHistory, normalizeName, normalizePypiName, openShots, panomaHome, panomaPath, parseTaste, pickAgentDoc, pidAlive, postCommitScript, publishesInferred, qualifyWithFolder, qualifyWithParent, readAccessKey, readAgentsMd, readConsent, readDesign, readEnvKeys, readGitInfo, readLeases, readProvenance, readRunbook, readScreenshot, readShots, readSummary, readTaste, readableSources, readmeName, redactQuote, redactSecrets, removeStop, renderPanomaBlock, renderTaste, repairAgentDoc, resolveExecutable, resolveLinks, restrictToOwner, reviewProject, setConsent, setInferredConsent, shotsOpen, shotsPath, slugify, tasteDigest, topicsOf, trackedByGit, upsertPanomaBlock, versionEnDisco, workRisks, worstBlock, writeLease, writeTaste };
+export { AGENT_DOC_FILES, type AccessKey, type AgentAsks, type AgentsMdFile, type AgentsMdFinding, type AgentsMdOptions, type AgentsMdReport, type AnalyzeOptions, type AssetReport, CLAUDE_BRIDGE, type CatalogMdContext, type Composition, type ConsentState, type CriticFinding, type CriticKind, type CriticReport, type DatabaseLease, type Dependency, type DesignColor, type DesignFingerprint, type DesignSignal, type DetectedDistribution, type DetectedTechnology, type DiskReport, type DistributionKind, type DocTouch, ENGINE_VERSION, type Ecosystem, type EcosystemReport, type EnvContract, type Evidence, type FamilyMember, type FileIndex, type FitRefusal, type FittedShot, type GitInfo, HANDOFF_CLAUDE_RECORD_VERSION, HANDOFF_CODEX_ORIGINATOR, HANDOFF_PROVENANCE_PREFIX, HOOKS_BRAND, type HealthScore, type HealthSignal, type HistorySource, type HistorySourceId, type Identity, type IdentityCandidate, type ImageType, LANGUAGE_BY_EXTENSION, type LanguageStat, type Launch, type LintFacts, MAX_FITTABLE_BYTES, MAX_FIT_PIXELS, MAX_SCREENSHOT_BYTES, MCP_FILE_MODE, type Matcher, type McpEntry, McpMergeError, type McpMergeReason, type McpMergeResult, type McpTarget, type McpTargetKind, McpTomlError, type MineOptions, type MineOutcome, type MineResult, type MineStats, type Narrative, ORIGIN_EVIDENCE_CODES, type OriginEvidence, type OriginEvidenceCode, type OriginKind, PANOMA_BLOCK_BEGIN, PANOMA_BLOCK_END, PANOMA_HOME_VAR, POSTGRES_DEL_PAQUETE, type PanomaBlockData, type ProjectAnalysis, type ProjectFamily, type ProjectKind, type ProjectLink, type ProjectOrigin, type Provenance, type QuoteRedaction, REDACTED, RULES, type Reaction, type ReclaimableDir, type RiskCode, type RiskLevel, type Rule, type RunCommand, type Runbook, type RuntimeNeed, SERVER_NAME, SHOTS_DIR, SKIP_DIRS, SMALL_SCREENSHOT_WIDTH, type Screenshot, ScreenshotError, type ScreenshotProblem, type SecretFinding, type SecretReport, type SeededTopic, type Severity, type Shot, type ShotsInbox, type Summary, TASTE_CAP, TASTE_FILE, TASTE_GLOBAL_ONLY, TASTE_TOPICS, TasteFullError, type TasteLine, type TasteProfile, type TasteTopic, type TechKind, type TwinConsent, type UnusedAsset, type VerdictSignal, type WalkOptions, type WorkRisk, type WorkState, agentKindAliases, agentsMdHash, analyzeCargo, analyzeComposer, analyzeEcosystems, analyzeGo, analyzeNpm, analyzeProject, analyzePub, analyzePypi, analyzeRubyGems, applyEnrichment, asShellLine, avisoDeFormato, buildFileIndex, canonicalAgentKind, classifyOrigin, clearLease, commitsPerDay, composeBlockData, composeSummary, composedText, computeHealth, computeLanguages, consentState, critiqueKey, deduceIdentity, depVersions, detectDistributions, detectSignals, discoverProjects, docHash, ensureAccessKey, estimateTokens, evidenceText, expandTilde, fallbackColor, findDuplicateFamilies, findExecutable, findIcon, findSecrets, findUnusedAssets, fingerprint, fitScreenshot, hasPanomaBlock, hasReader, hookIsOurs, identityCandidate, imageTypeOf, inventoryHistory, isAllowed, isLoopbackHost, isNewerVersion, isProjectRoot, leaseDir, leaseIntruder, leasePath, lintAgentDoc, mcpProjectTarget, mcpSnippet, mcpTarget, measureDisk, mergeMcp, mergeMcpToml, mergePreToolUse, mergeStop, mineHistory, normalizeName, normalizePypiName, openShots, panomaHome, panomaPath, parseTaste, pickAgentDoc, pidAlive, postCommitScript, publishesInferred, qualifyWithFolder, qualifyWithParent, readAccessKey, readAgentsMd, readConsent, readDesign, readEnvKeys, readGitInfo, readLeases, readProvenance, readRunbook, readScreenshot, readShots, readSummary, readTaste, readableSources, readmeName, redactQuote, redactSecrets, removeStop, renderPanomaBlock, renderTaste, repairAgentDoc, resolveExecutable, resolveLinks, restrictToOwner, reviewProject, setConsent, setInferredConsent, shotsOpen, shotsPath, slugify, tasteDigest, topicsOf, trackedByGit, upsertPanomaBlock, versionEnDisco, workRisks, worstBlock, writeLease, writeTaste };

package/app/node_modules/@panoma/core/dist/index.js

@@ -4616,6 +4616,11 @@ function redactSecrets(text) {
   return out;
 }
 
+// src/handoff-marker.ts
+var HANDOFF_PROVENANCE_PREFIX = "Continued from ";
+var HANDOFF_CLAUDE_RECORD_VERSION = "panoma-handoff";
+var HANDOFF_CODEX_ORIGINATOR = "panoma";
+
 // src/hooks-install.ts
 var HOOKS_BRAND = "# panoma-hooks";
 function hookIsOurs(text) {
@@ -7263,6 +7268,7 @@ function emptyStats() {
     userTurns: 0,
     toolResults: 0,
     sidechain: 0,
+    handedOff: 0,
     commands: 0,
     reactions: 0,
     briefs: 0,
@@ -7328,6 +7334,7 @@ async function mineTranscript(path, options, limit, stats, sessions, out, narrat
   const orphans = [];
   const fallbackSession = basename4(path, ".jsonl");
   const capture = narratives === void 0 ? void 0 : new NarrativeCapture(Math.max(0, limit - narratives.length), options.cwdPrefix);
+  let carriedSeen = false;
   try {
     for await (const line of lines) {
       if (line.length < 2 || line.length > MAX_LINE_CHARS2) continue;
@@ -7342,7 +7349,12 @@ async function mineTranscript(path, options, limit, stats, sessions, out, narrat
       const type = parsed["type"];
       if (type !== "user" && type !== "assistant") continue;
       const sessionId = typeof parsed["sessionId"] === "string" && parsed["sessionId"].length > 0 ? parsed["sessionId"] : fallbackSession;
-      sessions.add(sessionId);
+      const carried = parsed["version"] === HANDOFF_CLAUDE_RECORD_VERSION;
+      if (!carried) sessions.add(sessionId);
+      else if (!carriedSeen) {
+        carriedSeen = true;
+        stats.handedOff += 1;
+      }
       const message = parsed["message"];
       const content = readContent(isRecord(message) ? message["content"] : void 0);
       if (type === "assistant") {
@@ -7363,6 +7375,7 @@ async function mineTranscript(path, options, limit, stats, sessions, out, narrat
         if (content.hasText && text2.length > 0) delivery = text2;
         continue;
       }
+      if (carried) continue;
       if (content.toolResult) {
         stats.toolResults += 1;
         continue;
@@ -7598,6 +7611,7 @@ function emptyStats2() {
     userTurns: 0,
     toolResults: 0,
     sidechain: 0,
+    handedOff: 0,
     commands: 0,
     reactions: 0,
     briefs: 0,
@@ -7698,9 +7712,14 @@ var SESSION_META = '"session_meta"';
 var TURN_CONTEXT = '"turn_context"';
 var USER_MESSAGE = '"user_message"';
 var AGENT_MESSAGE = '"agent_message"';
+var USER_ITEM = '"UserMessage"';
+var AGENT_ITEM = '"AgentMessage"';
+var INPUT_TEXT = '"input_text"';
+var OUTPUT_TEXT = '"output_text"';
 var TOOL_CALL = '"function_call"';
 var TOOL_OUTPUT = '"function_call_output"';
 var CUSTOM_CALL = '"custom_tool_call"';
+var THREAD_SETTINGS = '"thread_settings_applied"';
 var MAX_TOUCHED2 = 12;
 var MAX_SESSION_PATHS2 = 64;
 var MAX_CALL_CHARS = 4e4;
@@ -7762,8 +7781,15 @@ function objectIn(text) {
 var INJECTED_BLOCKS2 = [
   /<realtime_delegation>[\s\S]*?<\/realtime_delegation>/g,
   /<in-app-browser-context[\s\S]*?<\/in-app-browser-context>/g,
-  /<environment_context>[\s\S]*?<\/environment_context>/g
+  /<environment_context>[\s\S]*?<\/environment_context>/g,
+  // The app's blocks, measured on 12-Sep-2026 over the user-role response items of the newest
+  // 120 rollouts here: the plugin list opens 71, an aborted turn 3, an internal goal 1. The
+  // `<send_user_message_question_reply>` block is not here: it is the person's own answer.
+  /<recommended_plugins>[\s\S]*?<\/recommended_plugins>/g,
+  /<turn_aborted>[\s\S]*?<\/turn_aborted>/g,
+  /<codex_internal_context[\s\S]*?<\/codex_internal_context>/g
 ];
+var INJECTED_WHOLE = /^#[ \t]+AGENTS\.md instructions\b/;
 var REQUEST_MARKER = /^##[ \t]+My request(?:[ \t]+for[ \t]+Codex)?:[ \t]*$/m;
 async function mineCodex(options = {}) {
   const root = join16(options.home ?? homedir5(), ".codex");
@@ -7815,11 +7841,72 @@ async function mineRollout(path, options, limit, stats, sessions, out, narrative
   const orphans = [];
   const capture = narratives === void 0 ? void 0 : new NarrativeCapture(Math.max(0, limit - narratives.length), options.cwdPrefix);
   capture?.begin(sessionId);
+  let carried = false;
+  let lastShown;
+  let held;
+  let lastTurn;
+  const takeHeld = () => {
+    if (held === void 0) return;
+    const { raw, at } = held;
+    held = void 0;
+    userTurn(raw, at);
+  };
+  const userTurn = (raw, at) => {
+    lastTurn = raw;
+    if (carried) return;
+    if (subagent) {
+      stats.sidechain += 1;
+      return;
+    }
+    if (raw.length === 0) return;
+    const text = stripInjected2(raw);
+    if (text.length === 0) {
+      stats.commands += 1;
+      return;
+    }
+    stats.userTurns += 1;
+    sessions.add(sessionId);
+    capture?.owner({
+      source: "codex",
+      sessionId,
+      at,
+      cwd: turnCwd ?? sessionCwd,
+      gitBranch
+    }, text);
+    if (delivery === void 0) {
+      stats.spontaneous += 1;
+      return;
+    }
+    const brief = isBrief(text);
+    const signals = brief ? [] : detectSignals(text);
+    stats.reactions += 1;
+    if (brief) stats.briefs += 1;
+    if (signals.length > 0) stats.withSignal += 1;
+    if (options.onlySignals === true && signals.length === 0) return;
+    const cwd = turnCwd ?? sessionCwd;
+    if (!underPrefix(cwd, options.cwdPrefix)) return;
+    const reaction = {
+      source: "codex",
+      sessionId,
+      at,
+      delivery: excerpt(redactQuote(delivery).text, DELIVERY_CHARS),
+      reaction: cap(redactQuote(text).text, REACTION_CHARS),
+      chars: text.length,
+      brief,
+      signals
+    };
+    if (cwd !== void 0) reaction.cwd = cwd;
+    if (window.size > 0) reaction.paths = [...window];
+    else orphans.push(reaction);
+    window.clear();
+    if (gitBranch !== void 0) reaction.gitBranch = gitBranch;
+    if (out.length < limit) out.push(reaction);
+  };
   try {
     for await (const line of lines) {
       if (line.length < 2) continue;
       const scan = line.length > SCAN_CHARS ? line.slice(0, SCAN_CHARS) : line;
-      if (!scan.includes(SESSION_META) && !scan.includes(TURN_CONTEXT) && !scan.includes(USER_MESSAGE) && !scan.includes(AGENT_MESSAGE)) {
+      if (!scan.includes(SESSION_META) && !scan.includes(TURN_CONTEXT) && !scan.includes(USER_MESSAGE) && !scan.includes(AGENT_MESSAGE) && !scan.includes(USER_ITEM) && !scan.includes(AGENT_ITEM) && !scan.includes(INPUT_TEXT) && !scan.includes(OUTPUT_TEXT) && !(carried && scan.includes(THREAD_SETTINGS))) {
         if (scan.includes(TOOL_CALL) || scan.includes(TOOL_OUTPUT)) stats.toolResults += 1;
         const call = scan.includes(TOOL_CALL) || scan.includes(CUSTOM_CALL);
         if (!call || line.length > MAX_CALL_CHARS) continue;
@@ -7855,6 +7942,7 @@ async function mineRollout(path, options, limit, stats, sessions, out, narrative
       if (!isRecord(payload)) continue;
       const type = parsed["type"];
       if (type === "session_meta") {
+        takeHeld();
         const id = readString(payload["id"]);
         if (id !== void 0) sessionId = id;
         sessionCwd = readString(payload["cwd"]);
@@ -7864,75 +7952,51 @@ async function mineRollout(path, options, limit, stats, sessions, out, narrative
         subagent = isRecord(source) && source["subagent"] !== void 0;
         turnCwd = void 0;
         delivery = void 0;
+        lastShown = void 0;
+        lastTurn = void 0;
         window.clear();
         capture?.begin(sessionId);
-        sessions.add(sessionId);
+        carried = payload["originator"] === HANDOFF_CODEX_ORIGINATOR;
+        if (carried) stats.handedOff += 1;
+        else sessions.add(sessionId);
         continue;
       }
       if (type === "turn_context") {
-        const cwd2 = readString(payload["cwd"]);
-        if (cwd2 !== void 0) turnCwd = cwd2;
+        const cwd = readString(payload["cwd"]);
+        if (cwd !== void 0) turnCwd = cwd;
         continue;
       }
-      if (type !== "event_msg") continue;
       const kind = payload["type"];
-      if (kind !== "user_message" && kind !== "agent_message") continue;
-      const message = readString(payload["message"]) ?? readString(payload["text"]);
-      if (kind === "agent_message") {
-        const shown = message?.trim() ?? "";
-        if (shown.length > 0) delivery = shown;
-        if (!subagent) capture?.assistant(shown);
-        continue;
-      }
-      if (subagent) {
-        stats.sidechain += 1;
+      if (carried && type === "event_msg" && kind === "thread_settings_applied") {
+        carried = false;
         continue;
       }
-      const raw = message?.trim() ?? "";
-      if (raw.length === 0) continue;
-      const text = stripInjected2(raw);
-      if (text.length === 0) {
-        stats.commands += 1;
+      const spoken = spokenOf(type, kind, payload);
+      if (spoken === void 0) continue;
+      const at = readString(parsed["timestamp"]) ?? "";
+      if (spoken.role === "assistant") {
+        takeHeld();
+        const shown = spoken.text.trim();
+        if (shown.length > 0 && shown !== lastShown) {
+          delivery = shown;
+          lastShown = shown;
+          if (!subagent) capture?.assistant(shown);
+        }
         continue;
       }
-      stats.userTurns += 1;
-      sessions.add(sessionId);
-      capture?.owner({
-        source: "codex",
-        sessionId,
-        at: readString(parsed["timestamp"]) ?? "",
-        cwd: turnCwd ?? sessionCwd,
-        gitBranch
-      }, text);
-      if (delivery === void 0) {
-        stats.spontaneous += 1;
+      if (spoken.channel === "response") {
+        takeHeld();
+        const raw = spoken.text.trim();
+        if (raw.length === 0 || stripInjected2(raw).length === 0) continue;
+        if (raw === lastTurn) continue;
+        held = { raw, at };
         continue;
       }
-      const brief = isBrief(text);
-      const signals = brief ? [] : detectSignals(text);
-      stats.reactions += 1;
-      if (brief) stats.briefs += 1;
-      if (signals.length > 0) stats.withSignal += 1;
-      if (options.onlySignals === true && signals.length === 0) continue;
-      const cwd = turnCwd ?? sessionCwd;
-      if (!underPrefix(cwd, options.cwdPrefix)) continue;
-      const reaction = {
-        source: "codex",
-        sessionId,
-        at: readString(parsed["timestamp"]) ?? "",
-        delivery: excerpt(redactQuote(delivery).text, DELIVERY_CHARS),
-        reaction: cap(redactQuote(text).text, REACTION_CHARS),
-        chars: text.length,
-        brief,
-        signals
-      };
-      if (cwd !== void 0) reaction.cwd = cwd;
-      if (window.size > 0) reaction.paths = [...window];
-      else orphans.push(reaction);
-      window.clear();
-      if (gitBranch !== void 0) reaction.gitBranch = gitBranch;
-      if (out.length < limit) out.push(reaction);
+      if (held !== void 0 && held.raw === spoken.text.trim()) held = void 0;
+      else takeHeld();
+      userTurn(spoken.text.trim(), at);
     }
+    takeHeld();
   } catch {
   } finally {
     lines.close();
@@ -7947,9 +8011,34 @@ async function mineRollout(path, options, limit, stats, sessions, out, narrative
     for (const narrative of capture.finish()) narratives.push(narrative);
   }
 }
+function spokenOf(type, kind, payload) {
+  if (type === "event_msg") {
+    if (kind === "user_message" || kind === "agent_message") {
+      const text = readString(payload["message"]) ?? readString(payload["text"]) ?? "";
+      return { role: kind === "user_message" ? "user" : "assistant", channel: "event", text };
+    }
+    if (kind !== "item_completed") return void 0;
+    const item = payload["item"];
+    if (!isRecord(item)) return void 0;
+    if (item["type"] === "UserMessage") return { role: "user", channel: "event", text: partsText(item["content"]) };
+    if (item["type"] === "AgentMessage") return { role: "assistant", channel: "event", text: partsText(item["content"]) };
+    return void 0;
+  }
+  if (type === "response_item" && kind === "message") {
+    const role = payload["role"];
+    if (role !== "user" && role !== "assistant") return void 0;
+    return { role, channel: "response", text: partsText(payload["content"]) };
+  }
+  return void 0;
+}
+function partsText(content) {
+  if (!Array.isArray(content)) return "";
+  return content.map((part) => isRecord(part) ? readString(part["text"]) ?? "" : "").filter((text) => text.length > 0).join("\n");
+}
 function stripInjected2(text) {
   let out = text;
   for (const block of INJECTED_BLOCKS2) out = out.replace(block, " ");
+  if (INJECTED_WHOLE.test(out.trimStart())) return "";
   const marker = REQUEST_MARKER.exec(out);
   if (marker !== null) out = out.slice(marker.index + marker[0].length);
   return out.trim();
@@ -8385,6 +8474,9 @@ export {
   AGENT_DOC_FILES,
   CLAUDE_BRIDGE,
   ENGINE_VERSION,
+  HANDOFF_CLAUDE_RECORD_VERSION,
+  HANDOFF_CODEX_ORIGINATOR,
+  HANDOFF_PROVENANCE_PREFIX,
   HOOKS_BRAND,
   LANGUAGE_BY_EXTENSION,
   MAX_FITTABLE_BYTES,

package/app/node_modules/@panoma/core/dist/untrusted.d.ts

@@ -26,7 +26,20 @@ type UntrustedOrigin = "readme" | "commits" | "journal" | "tasks" | "manifest" |
  * read someone else's text — the approval filters intention, not origin, and origin is what this
  * vocabulary classifies.
  */
- | "notes";
+ | "notes"
+/**
+ * The turns of a conversation an agent kept on disk: the person's own words, and every tool
+ * output the agent read, which includes other people's READMEs and pages. Wrapped before a
+ * model writes the digest of a handoff (`packages/handoff`).
+ */
+ | "conversation"
+/**
+ * What an optional app reported about a job it ran: the sentence each stage ended on, the
+ * reason a kind of video was set aside, what a review measured. Written by a program that
+ * read the project's README and pages, and by a model when the person wired one — so what it
+ * says about the product is that program's reading, and what it quotes is the product's.
+ */
+ | "app";
 interface UntrustedOptions {
     /** Where the text came from. It is told to the model. */
     origin: UntrustedOrigin;

package/app/node_modules/@panoma/db/dist/{chunk-V6TJYC6N.js → chunk-VTHU57AZ.js}

@@ -23,6 +23,7 @@ __export(schema_exports, {
   exclusions: () => exclusions,
   families: () => families,
   familyMembers: () => familyMembers,
+  handoffs: () => handoffs,
   launches: () => launches,
   looks: () => looks,
   memoryJobs: () => memoryJobs,
@@ -95,7 +96,14 @@ var appJobs = pgTable("app_jobs", {
   reservedCalls: integer("reserved_calls").notNull().default(0),
   requestedAt: timestamp("requested_at", { withTimezone: true }).notNull().defaultNow(),
   startedAt: timestamp("started_at", { withTimezone: true }),
-  finishedAt: timestamp("finished_at", { withTimezone: true })
+  finishedAt: timestamp("finished_at", { withTimezone: true }),
+  /**
+   * The agent that asked for it over the MCP channel (`panoma_video`), by the name its key was
+   * issued under; `null` when a person did, from the screen or the terminal. The same word the
+   * `handoffs` table keeps, for the same reason: attribution, not authority — the job's gate is
+   * the operator's, and its budget is the person's settings whoever asked.
+   */
+  requestedBy: text("requested_by")
 }, (table) => [
   index("app_jobs_identity_idx").on(table.identity, table.requestedAt),
   index("app_jobs_status_idx").on(table.status),
@@ -646,6 +654,52 @@ var launches = pgTable(
   // The screen asks 'what has been launched from this project, the latest first'.
   (table) => [index("launches_project_idx").on(table.projectId, table.at)]
 );
+var handoffs = pgTable(
+  "handoffs",
+  {
+    /** `hnd_` + random: a receipt is born of an event, and two handoffs of one conversation are two rows. */
+    id: text("id").primaryKey(),
+    projectId: text("project_id").references(() => projects.id, { onDelete: "set null" }),
+    /** The folder the conversation belongs to, kept even when it is not a catalog project. */
+    cwd: text("cwd").notNull(),
+    /** The source title, redacted before it is stored. */
+    title: text("title"),
+    /** Canonical provider ids: `claude-cli`, `codex-cli`, `opencode`, `gemini-cli`… */
+    sourceAgent: text("source_agent").notNull(),
+    sourceSessionId: text("source_session_id").notNull(),
+    sourcePath: text("source_path").notNull(),
+    /** sha256 over the normalized turns: the key that says 'this one was already handed to that agent'. */
+    sourceHash: text("source_hash").notNull(),
+    targetAgent: text("target_agent").notNull(),
+    /**
+     * `cli` or `app`: the terminal, or the vendor's desktop app, which shares the store. The file
+     * is the same either way; the surface decides which door the receipt opens (a command or a
+     * deep link) and keys the 'already handed to Claude (app)' check together with the agent.
+     */
+    targetSurface: text("target_surface").$type().notNull().default("cli"),
+    targetSessionId: text("target_session_id").notNull(),
+    targetPath: text("target_path").notNull(),
+    tier: text("tier").$type().notNull(),
+    turns: integer("turns").notNull(),
+    bytes: integer("bytes").notNull(),
+    dropped: jsonb("dropped").$type().notNull().default({ thinking: 0, images: 0, subagents: 0, offloaded: 0, secrets: 0, other: 0 }),
+    resumeCommand: text("resume_command"),
+    /**
+     * The agent that asked for it over the MCP channel (`panoma_handoff`), by the name its key
+     * was issued under; `null` when a person did, from the screen or the terminal. Attribution,
+     * not authority: the channel's gate is the operator's, and the name is what the receipt says
+     * afterwards.
+     */
+    requestedBy: text("requested_by"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    // The project card and the screen ask 'what was handed off from here, the latest first'.
+    index("handoffs_project_idx").on(table.projectId, table.createdAt),
+    // The panel asks 'was this conversation already handed to that agent?' before writing again.
+    index("handoffs_source_idx").on(table.sourceHash, table.targetAgent)
+  ]
+);
 var runs = pgTable(
   "runs",
   {
@@ -1165,8 +1219,9 @@ var modelCalls = pgTable(
     id: text("id").primaryKey(),
     /**
      * Which organ spent: look · distill · classify · synthesize · memory · ask · rehearse ·
-     * episodes · describe · review · probe. The list lives in `apps/web/lib/spend-settings.ts`
-     * (`FAMILY_KINDS`), and the budgets are applied per family there, not per kind.
+     * episodes · describe · review · app · handoff · probe. The list lives in
+     * `apps/web/lib/spend-settings.ts` (`FAMILY_KINDS`), and the budgets are applied per family
+     * there, not per kind.
      */
     kind: text("kind").notNull(),
     provider: text("provider").notNull(),
@@ -1278,6 +1333,7 @@ export {
   consultations,
   servings,
   launches,
+  handoffs,
   runs,
   decisions,
   exclusions,