rterm-backend 3.7.7 → 3.8.1

package/bin/gybackend.cjs

@@ -11,10 +11,10 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __glob = (map3) => (path33) => {
-  var fn = map3[path33];
+var __glob = (map3) => (path34) => {
+  var fn = map3[path34];
   if (fn) return fn();
-  throw new Error("Module not found in bundle: " + path33);
+  throw new Error("Module not found in bundle: " + path34);
 };
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
@@ -9040,7 +9040,7 @@ var require_eventemitter3 = __commonJS({
       if (listeners.fn) return 1;
       return listeners.length;
     };
-    EventEmitter4.prototype.emit = function emit11(event, a1, a2, a3, a4, a5) {
+    EventEmitter4.prototype.emit = function emit12(event, a1, a2, a3, a4, a5) {
       var evt = prefix ? prefix + event : event;
       if (!this._events[evt]) return false;
       var listeners = this._events[evt], len = arguments.length, args, i;
@@ -12024,8 +12024,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path33, errorMaps, issueData } = params;
-      const fullPath = [...path33, ...issueData.path || []];
+      const { data, path: path34, errorMaps, issueData } = params;
+      const fullPath = [...path34, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -12333,11 +12333,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path33, key) {
+      constructor(parent, value, path34, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path33;
+        this._path = path34;
         this._key = key;
       }
       get path() {
@@ -27268,11 +27268,11 @@ var require_pdf_worker = __commonJS({
                     var nameTree = new NameTree(nameTreeRef, xref);
                     var names = nameTree.getAll();
                     for (var name in names) {
-                      var fs24 = new FileSpec(names[name], xref);
+                      var fs25 = new FileSpec(names[name], xref);
                       if (!attachments) {
                         attachments = /* @__PURE__ */ Object.create(null);
                       }
-                      attachments[(0, _util.stringToPDFString)(name)] = fs24.serializable;
+                      attachments[(0, _util.stringToPDFString)(name)] = fs25.serializable;
                     }
                   }
                   return (0, _util.shadow)(this, "attachments", attachments);
@@ -32572,8 +32572,8 @@ var require_pdf_worker = __commonJS({
                   if (font.data && (isAddToPathSet || this.options.disableFontFace)) {
                     var buildPath = function buildPath2(fontChar) {
                       if (!font.renderer.hasBuiltPath(fontChar)) {
-                        var path33 = font.renderer.getPathJs(fontChar);
-                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path33]);
+                        var path34 = font.renderer.getPathJs(fontChar);
+                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path34]);
                       }
                     };
                     for (var i = 0, ii = glyphs.length; i < ii; i++) {
@@ -75261,10 +75261,10 @@ var require_pdf = __commonJS({
                   ctx.save();
                   ctx.beginPath();
                   for (var i = 0; i < paths.length; i++) {
-                    var path33 = paths[i];
-                    ctx.setTransform.apply(ctx, path33.transform);
-                    ctx.translate(path33.x, path33.y);
-                    path33.addToPath(ctx, path33.fontSize);
+                    var path34 = paths[i];
+                    ctx.setTransform.apply(ctx, path34.transform);
+                    ctx.translate(path34.x, path34.y);
+                    path34.addToPath(ctx, path34.fontSize);
                   }
                   ctx.restore();
                   ctx.clip();
@@ -77124,7 +77124,7 @@ var require_pdf = __commonJS({
                 throw new TypeError("Cannot call a class as a function");
               }
             }
-            var fs24 = require("fs");
+            var fs25 = require("fs");
             var http2 = require("http");
             var https2 = require("https");
             var url2 = require("url");
@@ -77457,8 +77457,8 @@ var require_pdf = __commonJS({
               function PDFNodeStreamFsFullReader2(stream) {
                 _classCallCheck(this, PDFNodeStreamFsFullReader2);
                 var _this7 = _possibleConstructorReturn(this, (PDFNodeStreamFsFullReader2.__proto__ || Object.getPrototypeOf(PDFNodeStreamFsFullReader2)).call(this, stream));
-                var path33 = decodeURI(_this7._url.path);
-                fs24.lstat(path33, function(error40, stat) {
+                var path34 = decodeURI(_this7._url.path);
+                fs25.lstat(path34, function(error40, stat) {
                   if (error40) {
                     _this7._errored = true;
                     _this7._reason = error40;
@@ -77466,7 +77466,7 @@ var require_pdf = __commonJS({
                     return;
                   }
                   _this7._contentLength = stat.size;
-                  _this7._setReadableStream(fs24.createReadStream(path33));
+                  _this7._setReadableStream(fs25.createReadStream(path34));
                   _this7._headersCapability.resolve();
                 });
                 return _this7;
@@ -77478,7 +77478,7 @@ var require_pdf = __commonJS({
               function PDFNodeStreamFsRangeReader2(stream, start, end) {
                 _classCallCheck(this, PDFNodeStreamFsRangeReader2);
                 var _this8 = _possibleConstructorReturn(this, (PDFNodeStreamFsRangeReader2.__proto__ || Object.getPrototypeOf(PDFNodeStreamFsRangeReader2)).call(this, stream));
-                _this8._setReadableStream(fs24.createReadStream(decodeURI(_this8._url.path), {
+                _this8._setReadableStream(fs25.createReadStream(decodeURI(_this8._url.path), {
                   start,
                   end: end - 1
                 }));
@@ -89472,11 +89472,11 @@ var require_pdf_worker2 = __commonJS({
                     var nameTree = new NameTree(nameTreeRef, xref);
                     var names = nameTree.getAll();
                     for (var name in names) {
-                      var fs24 = new FileSpec(names[name], xref);
+                      var fs25 = new FileSpec(names[name], xref);
                       if (!attachments) {
                         attachments = /* @__PURE__ */ Object.create(null);
                       }
-                      attachments[(0, _util.stringToPDFString)(name)] = fs24.serializable;
+                      attachments[(0, _util.stringToPDFString)(name)] = fs25.serializable;
                     }
                   }
                   return (0, _util.shadow)(this, "attachments", attachments);
@@ -94776,8 +94776,8 @@ var require_pdf_worker2 = __commonJS({
                   if (font.data && (isAddToPathSet || this.options.disableFontFace)) {
                     var buildPath = function buildPath2(fontChar) {
                       if (!font.renderer.hasBuiltPath(fontChar)) {
-                        var path33 = font.renderer.getPathJs(fontChar);
-                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path33]);
+                        var path34 = font.renderer.getPathJs(fontChar);
+                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path34]);
                       }
                     };
                     for (var i = 0, ii = glyphs.length; i < ii; i++) {
@@ -137573,10 +137573,10 @@ var require_pdf2 = __commonJS({
                   ctx.save();
                   ctx.beginPath();
                   for (var i = 0; i < paths.length; i++) {
-                    var path33 = paths[i];
-                    ctx.setTransform.apply(ctx, path33.transform);
-                    ctx.translate(path33.x, path33.y);
-                    path33.addToPath(ctx, path33.fontSize);
+                    var path34 = paths[i];
+                    ctx.setTransform.apply(ctx, path34.transform);
+                    ctx.translate(path34.x, path34.y);
+                    path34.addToPath(ctx, path34.fontSize);
                   }
                   ctx.restore();
                   ctx.clip();
@@ -138960,7 +138960,7 @@ var require_pdf2 = __commonJS({
                 throw new TypeError("Cannot call a class as a function");
               }
             }
-            var fs24 = require("fs");
+            var fs25 = require("fs");
             var http2 = require("http");
             var https2 = require("https");
             var url2 = require("url");
@@ -139293,8 +139293,8 @@ var require_pdf2 = __commonJS({
               function PDFNodeStreamFsFullReader2(stream) {
                 _classCallCheck(this, PDFNodeStreamFsFullReader2);
                 var _this7 = _possibleConstructorReturn(this, (PDFNodeStreamFsFullReader2.__proto__ || Object.getPrototypeOf(PDFNodeStreamFsFullReader2)).call(this, stream));
-                var path33 = decodeURI(_this7._url.path);
-                fs24.lstat(path33, function(error40, stat) {
+                var path34 = decodeURI(_this7._url.path);
+                fs25.lstat(path34, function(error40, stat) {
                   if (error40) {
                     _this7._errored = true;
                     _this7._reason = error40;
@@ -139302,7 +139302,7 @@ var require_pdf2 = __commonJS({
                     return;
                   }
                   _this7._contentLength = stat.size;
-                  _this7._setReadableStream(fs24.createReadStream(path33));
+                  _this7._setReadableStream(fs25.createReadStream(path34));
                   _this7._headersCapability.resolve();
                 });
                 return _this7;
@@ -139314,7 +139314,7 @@ var require_pdf2 = __commonJS({
               function PDFNodeStreamFsRangeReader2(stream, start, end) {
                 _classCallCheck(this, PDFNodeStreamFsRangeReader2);
                 var _this8 = _possibleConstructorReturn(this, (PDFNodeStreamFsRangeReader2.__proto__ || Object.getPrototypeOf(PDFNodeStreamFsRangeReader2)).call(this, stream));
-                _this8._setReadableStream(fs24.createReadStream(decodeURI(_this8._url.path), {
+                _this8._setReadableStream(fs25.createReadStream(decodeURI(_this8._url.path), {
                   start,
                   end: end - 1
                 }));
@@ -156879,8 +156879,8 @@ var require_pdf_worker3 = __commonJS({
                   if (font.data && (isAddToPathSet || this.options.disableFontFace)) {
                     var buildPath = function buildPath2(fontChar) {
                       if (!font.renderer.hasBuiltPath(fontChar)) {
-                        var path33 = font.renderer.getPathJs(fontChar);
-                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path33]);
+                        var path34 = font.renderer.getPathJs(fontChar);
+                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path34]);
                       }
                     };
                     for (var i = 0, ii = glyphs.length; i < ii; i++) {
@@ -161698,11 +161698,11 @@ var require_pdf_worker3 = __commonJS({
                     var nameTree = new NameTree(nameTreeRef, xref);
                     var names = nameTree.getAll();
                     for (var name in names) {
-                      var fs24 = new FileSpec(names[name], xref);
+                      var fs25 = new FileSpec(names[name], xref);
                       if (!attachments) {
                         attachments = /* @__PURE__ */ Object.create(null);
                       }
-                      attachments[(0, _util.stringToPDFString)(name)] = fs24.serializable;
+                      attachments[(0, _util.stringToPDFString)(name)] = fs25.serializable;
                     }
                   }
                   return (0, _util.shadow)(this, "attachments", attachments);
@@ -191335,10 +191335,10 @@ var require_pdf3 = __commonJS({
                   ctx.save();
                   ctx.beginPath();
                   for (var i = 0; i < paths.length; i++) {
-                    var path33 = paths[i];
-                    ctx.setTransform.apply(ctx, path33.transform);
-                    ctx.translate(path33.x, path33.y);
-                    path33.addToPath(ctx, path33.fontSize);
+                    var path34 = paths[i];
+                    ctx.setTransform.apply(ctx, path34.transform);
+                    ctx.translate(path34.x, path34.y);
+                    path34.addToPath(ctx, path34.fontSize);
                   }
                   ctx.restore();
                   ctx.clip();
@@ -203583,11 +203583,11 @@ var require_pdf_worker4 = __commonJS({
                     var nameTree = new NameTree(nameTreeRef, xref);
                     var names = nameTree.getAll();
                     for (var name in names) {
-                      var fs24 = new FileSpec(names[name], xref);
+                      var fs25 = new FileSpec(names[name], xref);
                       if (!attachments) {
                         attachments = /* @__PURE__ */ Object.create(null);
                       }
-                      attachments[(0, _util.stringToPDFString)(name)] = fs24.serializable;
+                      attachments[(0, _util.stringToPDFString)(name)] = fs25.serializable;
                     }
                   }
                   return (0, _util.shadow)(this, "attachments", attachments);
@@ -216733,8 +216733,8 @@ var require_pdf_worker4 = __commonJS({
                   if (font.data && (isAddToPathSet || this.options.disableFontFace || state.fillColorSpace.name === "Pattern")) {
                     var buildPath = function buildPath2(fontChar) {
                       if (!font.renderer.hasBuiltPath(fontChar)) {
-                        var path33 = font.renderer.getPathJs(fontChar);
-                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path33]);
+                        var path34 = font.renderer.getPathJs(fontChar);
+                        _this5.handler.send("commonobj", [font.loadedName + "_path_" + fontChar, "FontPath", path34]);
                       }
                     };
                     for (var i = 0, ii = glyphs.length; i < ii; i++) {
@@ -248698,10 +248698,10 @@ var require_pdf4 = __commonJS({
                   ctx.save();
                   ctx.beginPath();
                   for (var i = 0; i < paths.length; i++) {
-                    var path33 = paths[i];
-                    ctx.setTransform.apply(ctx, path33.transform);
-                    ctx.translate(path33.x, path33.y);
-                    path33.addToPath(ctx, path33.fontSize);
+                    var path34 = paths[i];
+                    ctx.setTransform.apply(ctx, path34.transform);
+                    ctx.translate(path34.x, path34.y);
+                    path34.addToPath(ctx, path34.fontSize);
                   }
                   ctx.restore();
                   ctx.clip();
@@ -253970,7 +253970,7 @@ var require_pdf4 = __commonJS({
                 throw new TypeError("Cannot call a class as a function");
               }
             }
-            var fs24 = require("fs");
+            var fs25 = require("fs");
             var http2 = require("http");
             var https2 = require("https");
             var url2 = require("url");
@@ -254324,11 +254324,11 @@ var require_pdf4 = __commonJS({
               function PDFNodeStreamFsFullReader2(stream) {
                 _classCallCheck(this, PDFNodeStreamFsFullReader2);
                 var _this7 = _possibleConstructorReturn(this, (PDFNodeStreamFsFullReader2.__proto__ || Object.getPrototypeOf(PDFNodeStreamFsFullReader2)).call(this, stream));
-                var path33 = decodeURIComponent(_this7._url.path);
+                var path34 = decodeURIComponent(_this7._url.path);
                 if (fileUriRegex.test(_this7._url.href)) {
-                  path33 = path33.replace(/^\//, "");
+                  path34 = path34.replace(/^\//, "");
                 }
-                fs24.lstat(path33, function(error40, stat) {
+                fs25.lstat(path34, function(error40, stat) {
                   if (error40) {
                     _this7._errored = true;
                     _this7._reason = error40;
@@ -254336,7 +254336,7 @@ var require_pdf4 = __commonJS({
                     return;
                   }
                   _this7._contentLength = stat.size;
-                  _this7._setReadableStream(fs24.createReadStream(path33));
+                  _this7._setReadableStream(fs25.createReadStream(path34));
                   _this7._headersCapability.resolve();
                 });
                 return _this7;
@@ -254348,11 +254348,11 @@ var require_pdf4 = __commonJS({
               function PDFNodeStreamFsRangeReader2(stream, start, end) {
                 _classCallCheck(this, PDFNodeStreamFsRangeReader2);
                 var _this8 = _possibleConstructorReturn(this, (PDFNodeStreamFsRangeReader2.__proto__ || Object.getPrototypeOf(PDFNodeStreamFsRangeReader2)).call(this, stream));
-                var path33 = decodeURIComponent(_this8._url.path);
+                var path34 = decodeURIComponent(_this8._url.path);
                 if (fileUriRegex.test(_this8._url.href)) {
-                  path33 = path33.replace(/^\//, "");
+                  path34 = path34.replace(/^\//, "");
                 }
-                _this8._setReadableStream(fs24.createReadStream(path33, {
+                _this8._setReadableStream(fs25.createReadStream(path34, {
                   start,
                   end: end - 1
                 }));
@@ -257634,7 +257634,7 @@ function playbookNeedsOrchestration(playbook) {
     (s) => s.dependsOn !== void 0 || s.desiredState || s.captureVar
   );
 }
-function emit7(context2, toolName, input, output) {
+function emit8(context2, toolName, input, output) {
   context2.sendEvent(context2.sessionId, {
     messageId: context2.messageId,
     type: "tool_call",
@@ -257650,7 +257650,7 @@ async function managePlaybook(args, context2) {
   const m2 = context2.automationManager;
   if (!m2) {
     const msg2 = noStore2();
-    emit7(context2, "manage_playbook", args, msg2);
+    emit8(context2, "manage_playbook", args, msg2);
     return msg2;
   }
   const { action } = args;
@@ -257658,7 +257658,7 @@ async function managePlaybook(args, context2) {
     const all = m2.listPlaybooks();
     if (!all.length) {
       const msg3 = "No playbooks. Create one with manage_playbook action=create.";
-      emit7(context2, "manage_playbook", args, msg3);
+      emit8(context2, "manage_playbook", args, msg3);
       return msg3;
     }
     const body = all.map((p) => {
@@ -257667,20 +257667,20 @@ async function managePlaybook(args, context2) {
     }).join("\n");
     const msg2 = `Playbooks (${all.length}):
 ${body}`;
-    emit7(context2, "manage_playbook", args, msg2);
+    emit8(context2, "manage_playbook", args, msg2);
     return msg2;
   }
   if (action === "get") {
     const key = args.id ?? args.name;
     if (!key) {
       const msg3 = "get requires id or name.";
-      emit7(context2, "manage_playbook", args, msg3);
+      emit8(context2, "manage_playbook", args, msg3);
       return msg3;
     }
     const p = m2.getPlaybook(key);
     if (!p) {
       const msg3 = `No playbook "${key}".`;
-      emit7(context2, "manage_playbook", args, msg3);
+      emit8(context2, "manage_playbook", args, msg3);
       return msg3;
     }
     const steps = p.steps.map((s, i) => {
@@ -257694,13 +257694,13 @@ Scope: ${scope}
 Default onError: ${p.onError ?? "stop"}${p.requireApproval ? "\nMOP mode: requires an approved change record (manage_change) to run" : ""}
 Steps:
 ${steps}`;
-    emit7(context2, "manage_playbook", args, msg2);
+    emit8(context2, "manage_playbook", args, msg2);
     return msg2;
   }
   if (action === "create") {
     if (!args.name || !args.steps?.length) {
       const msg2 = "create requires name + at least one step.";
-      emit7(context2, "manage_playbook", args, msg2);
+      emit8(context2, "manage_playbook", args, msg2);
       return msg2;
     }
     try {
@@ -257715,18 +257715,18 @@ ${steps}`;
         requireApproval: args.requireApproval
       });
       const msg2 = `Created playbook "${p.name}" (id=${p.id}, ${p.steps.length} step(s)). ${p.requireApproval ? "MOP mode: run it via manage_change (plan \u2192 approve \u2192 run)." : "Run it with run_playbook."}`;
-      emit7(context2, "manage_playbook", args, msg2);
+      emit8(context2, "manage_playbook", args, msg2);
       return msg2;
     } catch (error40) {
       const msg2 = `Could not create playbook: ${error40 instanceof Error ? error40.message : error40}`;
-      emit7(context2, "manage_playbook", args, msg2);
+      emit8(context2, "manage_playbook", args, msg2);
       return msg2;
     }
   }
   if (action === "update") {
     if (!args.id) {
       const msg2 = "update requires id.";
-      emit7(context2, "manage_playbook", args, msg2);
+      emit8(context2, "manage_playbook", args, msg2);
       return msg2;
     }
     try {
@@ -257742,51 +257742,51 @@ ${steps}`;
         ...args.requireApproval !== void 0 ? { requireApproval: args.requireApproval } : {}
       });
       const msg2 = `Updated playbook "${p.name}" (${p.steps.length} step(s)).`;
-      emit7(context2, "manage_playbook", args, msg2);
+      emit8(context2, "manage_playbook", args, msg2);
       return msg2;
     } catch (error40) {
       const msg2 = `Could not update playbook: ${error40 instanceof Error ? error40.message : error40}`;
-      emit7(context2, "manage_playbook", args, msg2);
+      emit8(context2, "manage_playbook", args, msg2);
       return msg2;
     }
   }
   if (action === "delete") {
     if (!args.id) {
       const msg3 = "delete requires id.";
-      emit7(context2, "manage_playbook", args, msg3);
+      emit8(context2, "manage_playbook", args, msg3);
       return msg3;
     }
     const removed = m2.deletePlaybook(args.id);
     const msg2 = removed ? `Deleted playbook ${args.id}.` : `No playbook ${args.id}.`;
-    emit7(context2, "manage_playbook", args, msg2);
+    emit8(context2, "manage_playbook", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit7(context2, "manage_playbook", args, msg);
+  emit8(context2, "manage_playbook", args, msg);
   return msg;
 }
 async function runPlaybook(args, context2) {
   const m2 = context2.automationManager;
   if (!m2) {
     const msg2 = noStore2();
-    emit7(context2, "run_playbook", args, msg2);
+    emit8(context2, "run_playbook", args, msg2);
     return msg2;
   }
   const key = args.id ?? args.name;
   if (!key) {
     const msg2 = "run_playbook requires id or name.";
-    emit7(context2, "run_playbook", args, msg2);
+    emit8(context2, "run_playbook", args, msg2);
     return msg2;
   }
   const playbook = m2.getPlaybook(key);
   if (!playbook) {
     const msg2 = `No playbook "${key}". Use manage_playbook action=list to see valid playbooks.`;
-    emit7(context2, "run_playbook", args, msg2);
+    emit8(context2, "run_playbook", args, msg2);
     return msg2;
   }
   if (playbook.requireApproval) {
     const msg2 = `Playbook "${playbook.name}" is in MOP mode (requireApproval). Run it through a change record: manage_change action=plan name="${playbook.name}" \u2192 approve \u2192 run.`;
-    emit7(context2, "run_playbook", args, msg2);
+    emit8(context2, "run_playbook", args, msg2);
     return msg2;
   }
   if (args.dryRun) {
@@ -257814,7 +257814,7 @@ Targets (${plan.targets.length}): ${targetList}
 
 Steps (${plan.steps.length}):
 ${stepList}${notes}`;
-    emit7(context2, "run_playbook", args, msg2);
+    emit8(context2, "run_playbook", args, msg2);
     return msg2;
   }
   const settings = {
@@ -257854,7 +257854,7 @@ ${stepList}${notes}`;
     }
   } catch (error40) {
     const msg2 = `Playbook "${playbook.name}" could not run: ${error40 instanceof Error ? error40.message : error40}`;
-    emit7(context2, "run_playbook", args, msg2);
+    emit8(context2, "run_playbook", args, msg2);
     return msg2;
   }
   const lines = [];
@@ -257869,7 +257869,7 @@ ${stepList}${notes}`;
   const okTargets = record2.targets.filter((t) => t.ok).length;
   const msg = `Playbook "${record2.playbookName}" ${record2.ok ? "completed OK" : "FAILED"} (runId=${record2.runId}, ${okTargets}/${record2.targets.length} target(s) ok):
 ${lines.join("\n")}`;
-  emit7(context2, "run_playbook", args, msg);
+  emit8(context2, "run_playbook", args, msg);
   return msg;
 }
 var stepSchema, managePlaybookSchema, runPlaybookSchema;
@@ -258310,8 +258310,8 @@ function extractFields(message) {
   if (ip) fields.ip = ip[1];
   const port = message.match(/[Pp]ort[:\s]+(\d{1,5})/);
   if (port) fields.port = port[1];
-  const path33 = message.match(/([A-Za-z]:\\[^\s"',;]+)/);
-  if (path33) fields.path = path33[1];
+  const path34 = message.match(/([A-Za-z]:\\[^\s"',;]+)/);
+  if (path34) fields.path = path34[1];
   const key = message.match(/(HKLM|HKCU|HKCR|HKU)\\[^\s"',;]+/i);
   if (key) fields.key = key[0];
   const proc = message.match(/[Pp]rocess(?:Name)?[:\s]+([A-Za-z0-9_.-]+\.exe)/);
@@ -265869,8 +265869,8 @@ var require_utils2 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path33) {
-      let input = path33;
+    function removeDotSegments(path34) {
+      let input = path34;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -266069,8 +266069,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path33, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path33 && path33 !== "/" ? path33 : void 0;
+        const [path34, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path34 && path34 !== "/" ? path34 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -275109,12 +275109,12 @@ var require_dist2 = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs24, exportName) {
+    function addFormats(ajv, list, fs25, exportName) {
       var _a3;
       var _b;
       (_a3 = (_b = ajv.opts.code).formats) !== null && _a3 !== void 0 ? _a3 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs24[f]);
+        ajv.addFormat(f, fs25[f]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -275127,8 +275127,8 @@ var require_windows = __commonJS({
   "../../node_modules/isexe/windows.js"(exports2, module2) {
     module2.exports = isexe;
     isexe.sync = sync;
-    var fs24 = require("fs");
-    function checkPathExt(path33, options) {
+    var fs25 = require("fs");
+    function checkPathExt(path34, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -275139,25 +275139,25 @@ var require_windows = __commonJS({
       }
       for (var i = 0; i < pathext.length; i++) {
         var p = pathext[i].toLowerCase();
-        if (p && path33.substr(-p.length).toLowerCase() === p) {
+        if (p && path34.substr(-p.length).toLowerCase() === p) {
           return true;
         }
       }
       return false;
     }
-    function checkStat(stat, path33, options) {
+    function checkStat(stat, path34, options) {
       if (!stat.isSymbolicLink() && !stat.isFile()) {
         return false;
       }
-      return checkPathExt(path33, options);
+      return checkPathExt(path34, options);
     }
-    function isexe(path33, options, cb) {
-      fs24.stat(path33, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, path33, options));
+    function isexe(path34, options, cb) {
+      fs25.stat(path34, function(er, stat) {
+        cb(er, er ? false : checkStat(stat, path34, options));
       });
     }
-    function sync(path33, options) {
-      return checkStat(fs24.statSync(path33), path33, options);
+    function sync(path34, options) {
+      return checkStat(fs25.statSync(path34), path34, options);
     }
   }
 });
@@ -275167,14 +275167,14 @@ var require_mode = __commonJS({
   "../../node_modules/isexe/mode.js"(exports2, module2) {
     module2.exports = isexe;
     isexe.sync = sync;
-    var fs24 = require("fs");
-    function isexe(path33, options, cb) {
-      fs24.stat(path33, function(er, stat) {
+    var fs25 = require("fs");
+    function isexe(path34, options, cb) {
+      fs25.stat(path34, function(er, stat) {
         cb(er, er ? false : checkStat(stat, options));
       });
     }
-    function sync(path33, options) {
-      return checkStat(fs24.statSync(path33), options);
+    function sync(path34, options) {
+      return checkStat(fs25.statSync(path34), options);
     }
     function checkStat(stat, options) {
       return stat.isFile() && checkMode(stat, options);
@@ -275198,7 +275198,7 @@ var require_mode = __commonJS({
 // ../../node_modules/isexe/index.js
 var require_isexe = __commonJS({
   "../../node_modules/isexe/index.js"(exports2, module2) {
-    var fs24 = require("fs");
+    var fs25 = require("fs");
     var core2;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
       core2 = require_windows();
@@ -275207,7 +275207,7 @@ var require_isexe = __commonJS({
     }
     module2.exports = isexe;
     isexe.sync = sync;
-    function isexe(path33, options, cb) {
+    function isexe(path34, options, cb) {
       if (typeof options === "function") {
         cb = options;
         options = {};
@@ -275217,7 +275217,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve2, reject) {
-          isexe(path33, options || {}, function(er, is) {
+          isexe(path34, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
@@ -275226,7 +275226,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core2(path33, options || {}, function(er, is) {
+      core2(path34, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -275236,9 +275236,9 @@ var require_isexe = __commonJS({
         cb(er, is);
       });
     }
-    function sync(path33, options) {
+    function sync(path34, options) {
       try {
-        return core2.sync(path33, options || {});
+        return core2.sync(path34, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -275254,7 +275254,7 @@ var require_isexe = __commonJS({
 var require_which = __commonJS({
   "../../node_modules/which/which.js"(exports2, module2) {
     var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path33 = require("path");
+    var path34 = require("path");
     var COLON = isWindows ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
@@ -275292,7 +275292,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve2(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path33.join(pathPart, cmd);
+        const pCmd = path34.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve2(subStep(p, i, 0));
       });
@@ -275319,7 +275319,7 @@ var require_which = __commonJS({
       for (let i = 0; i < pathEnv.length; i++) {
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path33.join(pathPart, cmd);
+        const pCmd = path34.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j = 0; j < pathExt.length; j++) {
           const cur = p + pathExt[j];
@@ -275367,7 +275367,7 @@ var require_path_key = __commonJS({
 var require_resolveCommand = __commonJS({
   "../../node_modules/cross-spawn/lib/util/resolveCommand.js"(exports2, module2) {
     "use strict";
-    var path33 = require("path");
+    var path34 = require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -275385,7 +275385,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env[getPathKey({ env })],
-          pathExt: withoutPathExt ? path33.delimiter : void 0
+          pathExt: withoutPathExt ? path34.delimiter : void 0
         });
       } catch (e) {
       } finally {
@@ -275394,7 +275394,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path33.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path34.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -275448,8 +275448,8 @@ var require_shebang_command = __commonJS({
       if (!match) {
         return null;
       }
-      const [path33, argument] = match[0].replace(/#! ?/, "").split(" ");
-      const binary2 = path33.split("/").pop();
+      const [path34, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary2 = path34.split("/").pop();
       if (binary2 === "env") {
         return argument;
       }
@@ -275462,16 +275462,16 @@ var require_shebang_command = __commonJS({
 var require_readShebang = __commonJS({
   "../../node_modules/cross-spawn/lib/util/readShebang.js"(exports2, module2) {
     "use strict";
-    var fs24 = require("fs");
+    var fs25 = require("fs");
     var shebangCommand = require_shebang_command();
     function readShebang(command) {
       const size = 150;
       const buffer = Buffer.alloc(size);
       let fd;
       try {
-        fd = fs24.openSync(command, "r");
-        fs24.readSync(fd, buffer, 0, size, 0);
-        fs24.closeSync(fd);
+        fd = fs25.openSync(command, "r");
+        fs25.readSync(fd, buffer, 0, size, 0);
+        fs25.closeSync(fd);
       } catch (e) {
       }
       return shebangCommand(buffer.toString());
@@ -275484,7 +275484,7 @@ var require_readShebang = __commonJS({
 var require_parse2 = __commonJS({
   "../../node_modules/cross-spawn/lib/parse.js"(exports2, module2) {
     "use strict";
-    var path33 = require("path");
+    var path34 = require("path");
     var resolveCommand = require_resolveCommand();
     var escape2 = require_escape();
     var readShebang = require_readShebang();
@@ -275509,7 +275509,7 @@ var require_parse2 = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path33.normalize(parsed.command);
+        parsed.command = path34.normalize(parsed.command);
         parsed.command = escape2.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape2.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -276684,6 +276684,514 @@ var init_compoundingStore = __esm({
   }
 });
 
+// ../../packages/backend/src/services/ops/collabSession.ts
+function joinSession(sessionId, operator) {
+  const r = rooms.get(sessionId) ?? { sessionId, operators: [], holder: null };
+  if (!r.operators.includes(operator)) r.operators.push(operator);
+  if (!r.holder) r.holder = operator;
+  rooms.set(sessionId, r);
+  return r;
+}
+function takeConn(sessionId, operator) {
+  const r = rooms.get(sessionId);
+  if (!r) throw new Error("no session");
+  if (!r.operators.includes(operator)) r.operators.push(operator);
+  r.holder = operator;
+  return r;
+}
+function whoHasConn(sessionId) {
+  return rooms.get(sessionId)?.holder ?? null;
+}
+var rooms;
+var init_collabSession = __esm({
+  "../../packages/backend/src/services/ops/collabSession.ts"() {
+    "use strict";
+    rooms = /* @__PURE__ */ new Map();
+  }
+});
+
+// ../../packages/backend/src/services/ops/agentReplay.ts
+function replayWithStubs(runId, steps) {
+  return {
+    runId,
+    steps: steps.map((s) => ({
+      tool: s.tool,
+      usedStub: true,
+      output: s.stub
+    })),
+    wouldHaveCalled: steps.map((s) => s.tool)
+  };
+}
+function breakpointBefore(tool2, nextTool) {
+  return tool2 === nextTool;
+}
+var init_agentReplay = __esm({
+  "../../packages/backend/src/services/ops/agentReplay.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/backend/src/services/ops/djoinPlaybook.ts
+function planOfflineJoin2(opts) {
+  const domain2 = String(opts.domain || "").trim();
+  const machine = String(opts.machine || "").trim();
+  if (!domain2 || !machine) throw new Error("domain and machine required");
+  return {
+    domain: domain2,
+    machine,
+    provisionOn: opts.dcConnection,
+    applyOn: opts.memberConnection,
+    steps: [
+      `On ${opts.dcConnection}: djoin /provision /domain ${domain2} /machine ${machine} /savefile C:\\temp\\${machine}.odj`,
+      `Copy blob to ${opts.memberConnection} (no SMB \u2014 PSRP/WinRM file or pypsrp)`,
+      `On ${opts.memberConnection}: djoin /requestODJ /loadfile C:\\temp\\${machine}.odj /localos /windowspath C:\\Windows`,
+      `Restart ${opts.memberConnection}`,
+      `Verify PartOfDomain and Get-ADComputer ${machine}`
+    ]
+  };
+}
+function djoinProvisionCommand(domain2, machine, savefile = "C:\\temp\\odj.blob") {
+  return `djoin /provision /domain ${domain2} /machine ${machine} /savefile ${savefile}`;
+}
+function djoinRequestCommand(loadfile = "C:\\temp\\odj.blob") {
+  return `djoin /requestODJ /loadfile ${loadfile} /localos /windowspath C:\\Windows`;
+}
+var init_djoinPlaybook = __esm({
+  "../../packages/backend/src/services/ops/djoinPlaybook.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/backend/src/services/ops/netDevice.ts
+function parseCdpNeighbors(showCdp) {
+  const out = [];
+  const blocks2 = showCdp.split(/Device ID:/i);
+  for (const b of blocks2.slice(1)) {
+    const device = (b.split("\n")[0] || "").trim();
+    const local = /Interface:\s*(\S+)/i.exec(b)?.[1] ?? "";
+    const remote = /Port ID[^:]*:\s*(\S+)/i.exec(b)?.[1] ?? "";
+    if (device) out.push({ device, localIntf: local, remoteIntf: remote });
+  }
+  return out;
+}
+function configDiff(running, startup) {
+  const a = running.replace(/\r/g, "").trimEnd();
+  const b = startup.replace(/\r/g, "").trimEnd();
+  if (a === b) return { changed: false, unified: "" };
+  return { changed: true, unified: `--- startup
++++ running
+-${b.slice(0, 200)}
++${a.slice(0, 200)}` };
+}
+function inConfigMode(prompt) {
+  return /\(config[^)]*\)#\s*$/.test(prompt);
+}
+var init_netDevice = __esm({
+  "../../packages/backend/src/services/ops/netDevice.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/backend/src/services/ops/opsStore.ts
+function mapIncident(r) {
+  let tabIds = [];
+  try {
+    const parsed = JSON.parse(String(r.tab_ids ?? "[]"));
+    if (Array.isArray(parsed)) tabIds = parsed.map(String);
+  } catch {
+    tabIds = [];
+  }
+  return {
+    id: String(r.id),
+    title: String(r.title),
+    status: r.status === "closed" ? "closed" : "open",
+    sessionId: r.session_id ? String(r.session_id) : void 0,
+    tabIds,
+    recordingId: r.recording_id ? String(r.recording_id) : void 0,
+    runId: r.run_id ? String(r.run_id) : void 0,
+    notes: r.notes ? String(r.notes) : void 0,
+    openedAt: Number(r.opened_at ?? 0),
+    closedAt: r.closed_at ? Number(r.closed_at) : void 0
+  };
+}
+function mapJumpPath(r) {
+  let hops = [];
+  try {
+    const parsed = JSON.parse(String(r.hops ?? "[]"));
+    if (Array.isArray(parsed)) hops = parsed;
+  } catch {
+    hops = [];
+  }
+  return {
+    name: String(r.name),
+    hops,
+    breakGlassUntil: r.break_glass_until ? Number(r.break_glass_until) : void 0,
+    createdAt: Number(r.created_at ?? 0)
+  };
+}
+function mapSnapshot(r) {
+  return {
+    connection: String(r.connection),
+    command: String(r.command),
+    output: String(r.output ?? ""),
+    at: Number(r.at ?? 0)
+  };
+}
+function mapApproval(r) {
+  return {
+    id: String(r.id),
+    command: String(r.command),
+    state: String(r.state) ?? "pending",
+    twoPerson: Number(r.two_person ?? 0) === 1,
+    requestedAt: Number(r.requested_at ?? 0),
+    expiresAt: Number(r.expires_at ?? 0),
+    decidedBy: r.decided_by ? String(r.decided_by) : void 0,
+    decidedAt: r.decided_at ? Number(r.decided_at) : void 0
+  };
+}
+var import_node_fs13, import_node_path29, OPS_DB_FILE, OpsStore;
+var init_opsStore = __esm({
+  "../../packages/backend/src/services/ops/opsStore.ts"() {
+    "use strict";
+    import_node_fs13 = __toESM(require("node:fs"), 1);
+    import_node_path29 = __toESM(require("node:path"), 1);
+    init_betterSqlite3Runtime();
+    init_historyStoragePaths();
+    OPS_DB_FILE = "gyshell-ops.sqlite";
+    OpsStore = class {
+      db;
+      constructor(options) {
+        const filePath = options?.filePath || import_node_path29.default.join(resolveHistoryStorageDir(), OPS_DB_FILE);
+        import_node_fs13.default.mkdirSync(import_node_path29.default.dirname(filePath), { recursive: true });
+        this.db = openBetterSqlite3Database(filePath);
+        this.db.pragma("journal_mode = WAL");
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS incidents (
+        id TEXT PRIMARY KEY,
+        title TEXT NOT NULL,
+        status TEXT NOT NULL DEFAULT 'open',
+        session_id TEXT,
+        tab_ids TEXT NOT NULL DEFAULT '[]',
+        recording_id TEXT,
+        run_id TEXT,
+        notes TEXT,
+        opened_at INTEGER NOT NULL,
+        closed_at INTEGER
+      );
+      CREATE TABLE IF NOT EXISTS jump_paths (
+        name TEXT PRIMARY KEY,
+        hops TEXT NOT NULL DEFAULT '[]',
+        break_glass_until INTEGER,
+        created_at INTEGER NOT NULL
+      );
+      CREATE TABLE IF NOT EXISTS snapshots (
+        connection TEXT NOT NULL,
+        command TEXT NOT NULL,
+        output TEXT NOT NULL,
+        at INTEGER NOT NULL,
+        PRIMARY KEY (connection, command)
+      );
+      CREATE TABLE IF NOT EXISTS approvals (
+        id TEXT PRIMARY KEY,
+        command TEXT NOT NULL,
+        state TEXT NOT NULL DEFAULT 'pending',
+        two_person INTEGER NOT NULL DEFAULT 0,
+        requested_at INTEGER NOT NULL,
+        expires_at INTEGER NOT NULL,
+        decided_by TEXT,
+        decided_at INTEGER,
+        approvals TEXT NOT NULL DEFAULT '[]'
+      );
+    `);
+      }
+      // ── incidents ────────────────────────────────────────────────────────────
+      openIncident(title, parts = {}) {
+        const row = {
+          id: `inc-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 6)}`,
+          title,
+          status: "open",
+          tabIds: parts.tabIds ?? [],
+          sessionId: parts.sessionId,
+          recordingId: parts.recordingId,
+          runId: parts.runId,
+          notes: parts.notes,
+          openedAt: Date.now()
+        };
+        this.db.prepare(
+          `INSERT INTO incidents (id, title, status, session_id, tab_ids, recording_id, run_id, notes, opened_at)
+         VALUES (@id, @title, @status, @sessionId, @tabIds, @recordingId, @runId, @notes, @openedAt)`
+        ).run({ ...row, tabIds: JSON.stringify(row.tabIds) });
+        return row;
+      }
+      getIncident(id) {
+        const r = this.db.prepare(`SELECT * FROM incidents WHERE id = ?`).get(id);
+        return r ? mapIncident(r) : void 0;
+      }
+      listIncidents(status) {
+        const rows = status ? this.db.prepare(`SELECT * FROM incidents WHERE status = ? ORDER BY opened_at DESC`).all(status) : this.db.prepare(`SELECT * FROM incidents ORDER BY opened_at DESC`).all();
+        return rows.map(mapIncident);
+      }
+      closeIncident(id, notes) {
+        this.db.prepare(`UPDATE incidents SET status = 'closed', closed_at = ?, notes = COALESCE(?, notes) WHERE id = ?`).run(Date.now(), notes ?? null, id);
+        return this.getIncident(id);
+      }
+      // ── jump paths / break-glass ─────────────────────────────────────────────
+      defineJumpPath(name, hops) {
+        const row = { name, hops, createdAt: Date.now() };
+        this.db.prepare(
+          `INSERT INTO jump_paths (name, hops, break_glass_until, created_at) VALUES (?, ?, NULL, ?)
+         ON CONFLICT(name) DO UPDATE SET hops = excluded.hops`
+        ).run(name, JSON.stringify(hops), row.createdAt);
+        return row;
+      }
+      listJumpPaths() {
+        return this.db.prepare(`SELECT * FROM jump_paths ORDER BY name`).all().map(
+          mapJumpPath
+        );
+      }
+      /** Grant time-boxed break-glass on a path. */
+      grantBreakGlass(name, ttlMs) {
+        const until = Date.now() + Math.max(0, ttlMs);
+        this.db.prepare(`UPDATE jump_paths SET break_glass_until = ? WHERE name = ?`).run(until, name);
+        return this.listJumpPaths().find((p) => p.name === name);
+      }
+      /** allowed = no break-glass needed, or break-glass still valid. */
+      pathAllowed(name, now = Date.now()) {
+        const p = this.listJumpPaths().find((x) => x.name === name);
+        if (!p) return { allowed: false };
+        if (!p.breakGlassUntil) return { allowed: false };
+        const allowed = p.breakGlassUntil > now;
+        return { allowed, breakGlassUntil: p.breakGlassUntil, expired: !allowed };
+      }
+      // ── output snapshots ─────────────────────────────────────────────────────
+      rememberOutput(connection, command, output, at = Date.now()) {
+        const row = { connection, command, output, at };
+        this.db.prepare(
+          `INSERT INTO snapshots (connection, command, output, at) VALUES (@connection, @command, @output, @at)
+         ON CONFLICT(connection, command) DO UPDATE SET output = excluded.output, at = excluded.at`
+        ).run(row);
+        return row;
+      }
+      lastSnapshot(connection, command) {
+        const r = this.db.prepare(`SELECT * FROM snapshots WHERE connection = ? AND command = ?`).get(connection, command);
+        return r ? mapSnapshot(r) : void 0;
+      }
+      listSnapshots(connection) {
+        const rows = connection ? this.db.prepare(`SELECT * FROM snapshots WHERE connection = ? ORDER BY at DESC`).all(connection) : this.db.prepare(`SELECT * FROM snapshots ORDER BY at DESC`);
+        return rows.map(mapSnapshot);
+      }
+      /**
+       * Diff the stored output for (connection, command) against nextOutput and
+       * remember nextOutput as the new baseline (so the next call diffs again).
+       */
+      diffAndRemember(connection, command, nextOutput) {
+        const prev = this.lastSnapshot(connection, command);
+        const changed = prev ? prev.output !== nextOutput : false;
+        this.rememberOutput(connection, command, nextOutput);
+        return { previous: prev ? prev.output : null, current: nextOutput, changed };
+      }
+      // ── approvals (two-person + TTL) ─────────────────────────────────────────
+      requestApproval(command, ttlMs, twoPerson = false, now = Date.now()) {
+        const row = {
+          id: `ap-${now.toString(36)}-${Math.random().toString(36).slice(2, 6)}`,
+          command,
+          state: "pending",
+          twoPerson,
+          requestedAt: now,
+          expiresAt: now + Math.max(0, ttlMs)
+        };
+        this.db.prepare(
+          `INSERT INTO approvals (id, command, state, two_person, requested_at, expires_at, approvals)
+         VALUES (@id, @command, @state, @twoPerson, @requestedAt, @expiresAt, '[]')`
+        ).run({ ...row, twoPerson: row.twoPerson ? 1 : 0 });
+        return row;
+      }
+      getApproval(id) {
+        const r = this.db.prepare(`SELECT * FROM approvals WHERE id = ?`).get(id);
+        return r ? mapApproval(r) : void 0;
+      }
+      listApprovals(state) {
+        const rows = state ? this.db.prepare(`SELECT * FROM approvals WHERE state = ? ORDER BY requested_at DESC`).all(state) : this.db.prepare(`SELECT * FROM approvals ORDER BY requested_at DESC`);
+        return rows.map(mapApproval);
+      }
+      approvers(id) {
+        const r = this.db.prepare(`SELECT approvals FROM approvals WHERE id = ?`).get(id);
+        try {
+          const parsed = JSON.parse(r?.approvals ?? "[]");
+          return Array.isArray(parsed) ? parsed : [];
+        } catch {
+          return [];
+        }
+      }
+      /** Sweep pending approvals whose TTL has passed into 'expired'. Returns count. */
+      sweepExpired(now = Date.now()) {
+        const r = this.db.prepare(`UPDATE approvals SET state = 'expired' WHERE state = 'pending' AND expires_at <= ?`).run(now);
+        return Number(r.changes ?? 0);
+      }
+      /**
+       * Record a decision. A two-person approval needs TWO DISTINCT approvers before
+       * it flips to approved; a denial takes effect immediately. Expired approvals
+       * cannot be decided.
+       */
+      decide(id, who, approve, now = Date.now()) {
+        const a = this.getApproval(id);
+        if (!a) throw new Error(`unknown approval ${id}`);
+        this.sweepExpired(now);
+        const fresh = this.getApproval(id);
+        if (fresh.state === "expired") return { ok: false, approval: fresh, reason: "expired" };
+        if (fresh.state !== "pending") return { ok: false, approval: fresh, reason: `already ${fresh.state}` };
+        if (!approve) {
+          this.db.prepare(`UPDATE approvals SET state = 'denied', decided_by = ?, decided_at = ? WHERE id = ?`).run(who, now, id);
+          return { ok: false, approval: this.getApproval(id), reason: "denied" };
+        }
+        const prior = this.approvers(id);
+        if (prior.includes(who)) {
+          return { ok: false, approval: fresh, reason: `approver "${who}" already approved \u2014 a second person is required` };
+        }
+        const next = [...prior, who];
+        const needed = fresh.twoPerson ? 2 : 1;
+        const approved = next.length >= needed;
+        this.db.prepare(
+          `UPDATE approvals SET approvals = ?, state = ?, decided_by = ?, decided_at = ? WHERE id = ?`
+        ).run(JSON.stringify(next), approved ? "approved" : "pending", who, now, id);
+        return {
+          ok: approved,
+          approval: this.getApproval(id),
+          reason: approved ? void 0 : `need ${needed - next.length} more approver(s)`
+        };
+      }
+    };
+  }
+});
+
+// ../../packages/backend/src/services/ops/opsService.ts
+var opsService_exports = {};
+__export(opsService_exports, {
+  OpsService: () => OpsService
+});
+var OpsService;
+var init_opsService = __esm({
+  "../../packages/backend/src/services/ops/opsService.ts"() {
+    "use strict";
+    init_collabSession();
+    init_agentReplay();
+    init_djoinPlaybook();
+    init_netDevice();
+    init_opsStore();
+    OpsService = class {
+      store;
+      /** sessionId → operators, for the presence listing. */
+      rooms = /* @__PURE__ */ new Map();
+      constructor(deps = {}) {
+        this.store = new OpsStore({ filePath: deps.filePath });
+      }
+      // ── collaborate (two operators, one session) ─────────────────────────────
+      joinCollab(sessionId, operator) {
+        const p = joinSession(sessionId, operator);
+        this.rooms.set(sessionId, p);
+        return p;
+      }
+      takeConn(sessionId, operator) {
+        const p = takeConn(sessionId, operator);
+        this.rooms.set(sessionId, p);
+        return p;
+      }
+      whoHasConn(sessionId) {
+        const p = this.rooms.get(sessionId) ?? joinSession(sessionId, "system");
+        this.rooms.set(sessionId, p);
+        return { sessionId, holder: whoHasConn(sessionId), operators: p.operators };
+      }
+      listCollabSessions() {
+        return [...this.rooms.values()];
+      }
+      // ── incidents ────────────────────────────────────────────────────────────
+      openIncident(title, parts) {
+        return this.store.openIncident(title, parts);
+      }
+      getIncident(id) {
+        return this.store.getIncident(id);
+      }
+      listIncidents(status) {
+        return this.store.listIncidents(status);
+      }
+      closeIncident(id, notes) {
+        return this.store.closeIncident(id, notes);
+      }
+      // ── jump paths + break-glass ─────────────────────────────────────────────
+      defineJumpPath(name, hops) {
+        return this.store.defineJumpPath(name, hops);
+      }
+      listJumpPaths() {
+        return this.store.listJumpPaths();
+      }
+      grantBreakGlass(name, ttlMs) {
+        if (!this.store.listJumpPaths().some((p) => p.name === name)) {
+          throw new Error(`unknown jump path "${name}" \u2014 define it first`);
+        }
+        return this.store.grantBreakGlass(name, ttlMs);
+      }
+      pathAllowed(name) {
+        return this.store.pathAllowed(name);
+      }
+      // ── output snapshots + drift ─────────────────────────────────────────────
+      rememberOutput(connection, command, output) {
+        return this.store.rememberOutput(connection, command, output);
+      }
+      listSnapshots(connection) {
+        return this.store.listSnapshots(connection);
+      }
+      diffOutput(connection, command, nextOutput) {
+        return this.store.diffAndRemember(connection, command, nextOutput);
+      }
+      // ── approvals (TTL + two-person) ─────────────────────────────────────────
+      requestApproval(command, ttlMs, twoPerson = false) {
+        return this.store.requestApproval(command, ttlMs, twoPerson);
+      }
+      listApprovals(state) {
+        this.store.sweepExpired();
+        return this.store.listApprovals(state);
+      }
+      getApproval(id) {
+        this.store.sweepExpired();
+        return this.store.getApproval(id);
+      }
+      decideApproval(id, who, approve) {
+        return this.store.decide(id, who, approve);
+      }
+      sweepExpiredApprovals() {
+        return this.store.sweepExpired();
+      }
+      // ── agent replay (debug without touching live hosts) ─────────────────────
+      replay(runId, steps) {
+        return replayWithStubs(runId, steps);
+      }
+      shouldBreakpointBefore(tool2, nextTool) {
+        return breakpointBefore(tool2, nextTool);
+      }
+      // ── offline domain join ──────────────────────────────────────────────────
+      planOfflineJoin(opts) {
+        return planOfflineJoin2(opts);
+      }
+      djoinProvision(domain2, machine, savefile) {
+        return djoinProvisionCommand(domain2, machine, savefile);
+      }
+      djoinRequest(loadfile) {
+        return djoinRequestCommand(loadfile);
+      }
+      // ── network device helpers ───────────────────────────────────────────────
+      parseCdp(showCdp) {
+        return parseCdpNeighbors(showCdp);
+      }
+      configDiff(running, startup) {
+        return configDiff(running, startup);
+      }
+      inConfigMode(prompt) {
+        return inConfigMode(prompt);
+      }
+    };
+  }
+});
+
 // ../../node_modules/@nats-io/nats-core/lib/encoders.js
 var require_encoders = __commonJS({
   "../../node_modules/@nats-io/nats-core/lib/encoders.js"(exports2) {
@@ -285435,7 +285943,7 @@ var require_ws_transport = __commonJS({
       let protocol;
       let port;
       const host = url2.hostname;
-      const path33 = url2.pathname;
+      const path34 = url2.pathname;
       const search = url2.search || "";
       switch (srcProto) {
         case "http:":
@@ -285455,7 +285963,7 @@ var require_ws_transport = __commonJS({
           protocol = encrypted === true ? "wss:" : "ws:";
           break;
       }
-      return `${protocol}//${host}:${port}${path33}${search}`;
+      return `${protocol}//${host}:${port}${path34}${search}`;
     }
     function wsconnect(opts = {}) {
       (0, transport_1.setTransportFactory)({
@@ -287300,11 +287808,11 @@ var require_jsmconsumer_api = __commonJS({
           consumerName = cfg.name ?? cfg.durable_name ?? "";
         }
         if (consumerName !== "") {
-          let fs24 = cfg.filter_subject ?? void 0;
-          if (fs24 === ">") {
-            fs24 = void 0;
+          let fs25 = cfg.filter_subject ?? void 0;
+          if (fs25 === ">") {
+            fs25 = void 0;
           }
-          subj = fs24 !== void 0 ? `${this.prefix}.CONSUMER.CREATE.${stream}.${consumerName}.${fs24}` : `${this.prefix}.CONSUMER.CREATE.${stream}.${consumerName}`;
+          subj = fs25 !== void 0 ? `${this.prefix}.CONSUMER.CREATE.${stream}.${consumerName}.${fs25}` : `${this.prefix}.CONSUMER.CREATE.${stream}.${consumerName}`;
         } else {
           subj = cfg.durable_name ? `${this.prefix}.CONSUMER.DURABLE.CREATE.${stream}.${cfg.durable_name}` : `${this.prefix}.CONSUMER.CREATE.${stream}`;
         }
@@ -291854,8 +292362,8 @@ var init_natsEventBus = __esm({
 });
 
 // ../../packages/backend/src/runtimes/gybackend/startGyBackend.ts
-var import_node_path29 = __toESM(require("node:path"), 1);
-var import_node_fs13 = __toESM(require("node:fs"), 1);
+var import_node_path30 = __toESM(require("node:path"), 1);
+var import_node_fs14 = __toESM(require("node:fs"), 1);
 var import_node_process2 = __toESM(require("node:process"), 1);
 
 // ../../packages/backend/src/services/TerminalService.ts
@@ -293888,18 +294396,18 @@ var SSHBackend = class _SSHBackend {
     });
     return info.socket;
   }
-  async buildConnectSocketIfNeeded(sshConfig, emit11) {
+  async buildConnectSocketIfNeeded(sshConfig, emit12) {
     if (sshConfig.jumpHost) {
       const jumpId = `[Jump:${sshConfig.jumpHost.host}]`;
       console.log(`${jumpId} Starting jump host connection flow...`);
-      emit11(
+      emit12(
         `\x1B[36m\u25B9 ${jumpId} Establishing tunnel via jump host ${sshConfig.jumpHost.host}...\x1B[0m\r
 `
       );
       const jumpClient = new (loadSsh2()).Client();
       const jumpSock = await this.buildConnectSocketIfNeeded(
         sshConfig.jumpHost,
-        emit11
+        emit12
       );
       if (jumpSock) {
         console.log(
@@ -293943,7 +294451,7 @@ var SSHBackend = class _SSHBackend {
         });
         jumpClient.connect(jumpConnectConfig);
       });
-      emit11(
+      emit12(
         `\x1B[32m\u2714 ${jumpId} Jump host ready. Requesting forward to target ${sshConfig.host}:${sshConfig.port}...\x1B[0m\r
 `
       );
@@ -294259,25 +294767,25 @@ var SSHBackend = class _SSHBackend {
     };
     this.sessions.set(config2.id, instance);
     (async () => {
-      const emit11 = (data) => {
+      const emit12 = (data) => {
         instance.dataCallbacks.forEach((cb) => cb(data));
       };
       const emitExit = (code) => {
         this.emitExitOnce(config2.id, instance, code);
       };
       client2.on("ready", async () => {
-        emit11("\x1B[2J\x1B[H\x1B[32m\u2714 Connection established.\x1B[0m\r\n");
+        emit12("\x1B[2J\x1B[H\x1B[32m\u2714 Connection established.\x1B[0m\r\n");
         console.log(
           `[SSH] Connection ready for ${sshConfig.host}:${sshConfig.port}`
         );
         const rawShell = isRawShellPreset(sshConfig.algorithmsPreset);
         try {
-          emit11("\x1B[36m\u25B9 Setting up port forwards...\x1B[0m\r\n");
+          emit12("\x1B[36m\u25B9 Setting up port forwards...\x1B[0m\r\n");
           console.log(`[SSH] Setting up port forwards...`);
           await this.setupPortForwards(instance, sshConfig);
         } catch (e) {
           console.error(`[SSH] Port forward setup failed:`, e);
-          emit11(`\x1B[31m\u2718 Port forward failed: ${e.message}\x1B[0m\r
+          emit12(`\x1B[31m\u2718 Port forward failed: ${e.message}\x1B[0m\r
 `);
         }
         if (rawShell) {
@@ -294287,7 +294795,7 @@ var SSHBackend = class _SSHBackend {
           );
         } else {
           try {
-            emit11("\x1B[36m\u25B9 Detecting remote OS...\x1B[0m\r\n");
+            emit12("\x1B[36m\u25B9 Detecting remote OS...\x1B[0m\r\n");
             console.log(`[SSH] Detecting remote OS...`);
             const uname = await this.execCollect(client2, "uname -s");
             const u = (uname.stdout || uname.stderr || "").toLowerCase();
@@ -294307,13 +294815,13 @@ var SSHBackend = class _SSHBackend {
           if (!instance.remoteOs) instance.remoteOs = "unix";
           console.log(`[SSH] Remote OS detected: ${instance.remoteOs}`);
           try {
-            emit11("\x1B[36m\u25B9 Initializing SFTP channel...\x1B[0m\r\n");
+            emit12("\x1B[36m\u25B9 Initializing SFTP channel...\x1B[0m\r\n");
             await this.initializeSftp(instance);
-            emit11("\x1B[32m\u2714 SFTP channel ready.\x1B[0m\r\n");
+            emit12("\x1B[32m\u2714 SFTP channel ready.\x1B[0m\r\n");
           } catch (error40) {
             const message = error40 instanceof Error ? error40.message : String(error40);
             instance.sftpInitError = message;
-            emit11(
+            emit12(
               `\x1B[33m\u26A0 SFTP unavailable: ${message}. File panel features may be limited.\x1B[0m\r
 `
             );
@@ -294326,7 +294834,7 @@ var SSHBackend = class _SSHBackend {
             }
           }
         }
-        emit11("\x1B[36m\u25B9 Opening interactive shell...\x1B[0m\r\n");
+        emit12("\x1B[36m\u25B9 Opening interactive shell...\x1B[0m\r\n");
         console.log(`[SSH] Opening interactive shell...`);
         const initialWindowSize = this.resolveRequestedWindowSize(instance, {
           cols: config2.cols,
@@ -294356,7 +294864,7 @@ var SSHBackend = class _SSHBackend {
               console.error(`[SSH] Failed to open shell:`, err);
               instance.initializationState = "failed";
               instance.isInitializing = false;
-              emit11(`\x1B[31m\u2718 Failed to open shell: ${err.message}\x1B[0m\r
+              emit12(`\x1B[31m\u2718 Failed to open shell: ${err.message}\x1B[0m\r
 `);
               emitExit(-1);
               return;
@@ -294366,7 +294874,7 @@ var SSHBackend = class _SSHBackend {
             if (rawShell) {
               instance.initializationState = "ready";
               instance.isInitializing = false;
-              emit11("\x1B[32m\u2714 Shell ready.\x1B[0m\r\n");
+              emit12("\x1B[32m\u2714 Shell ready.\x1B[0m\r\n");
               console.log(
                 `[SSH] Raw-shell mode: shell ready immediately (preset=${sshConfig.algorithmsPreset}).`
               );
@@ -294374,14 +294882,14 @@ var SSHBackend = class _SSHBackend {
                 const chunk2 = data.toString();
                 const sanitizedChunk = this.stripReadyMarker(chunk2);
                 this.consumeOscMarkers(instance, sanitizedChunk);
-                if (sanitizedChunk) emit11(sanitizedChunk);
+                if (sanitizedChunk) emit12(sanitizedChunk);
               });
               stream.on("close", async (code) => {
                 emitExit(typeof code === "number" ? code : 0);
               });
               return;
             }
-            emit11("\x1B[36m\u25B9 Initializing shell integration...\x1B[0m\r\n");
+            emit12("\x1B[36m\u25B9 Initializing shell integration...\x1B[0m\r\n");
             console.log(
               `[SSH] Shell stream opened. Starting robust initialization...`
             );
@@ -294427,7 +294935,7 @@ var SSHBackend = class _SSHBackend {
                 if (retryCount >= maxRetries) {
                   instance.initializationState = "failed";
                   instance.isInitializing = false;
-                  emit11(
+                  emit12(
                     "\x1B[31m\u2718 Initialization failed. Entering fallback mode.\x1B[0m\r\n"
                   );
                   console.error(
@@ -294436,7 +294944,7 @@ var SSHBackend = class _SSHBackend {
                   clearInterval(watchdogInterval);
                   return;
                 }
-                emit11(
+                emit12(
                   `\x1B[33m\u26A0 Initialization timeout, retrying (${retryCount}/${maxRetries})...\x1B[0m\r
 `
                 );
@@ -294450,7 +294958,7 @@ var SSHBackend = class _SSHBackend {
               if (instance.isInitializing) {
                 instance.buffer += chunk2;
                 if (instance.buffer.includes(GYSHELL_READY_MARKER2)) {
-                  emit11("\x1B[2J\x1B[H");
+                  emit12("\x1B[2J\x1B[H");
                   isReadySent = true;
                   clearInterval(watchdogInterval);
                   const sawContinuation = /(?:\r?\n)>>\s*\r?\n/.test(instance.buffer) || instance.buffer.trimEnd().endsWith("\n>>") || instance.buffer.trimEnd().endsWith("\r\n>>");
@@ -294461,7 +294969,7 @@ var SSHBackend = class _SSHBackend {
                     const realContent = this.stripReadyMarker(
                       parts.slice(1).join(GYSHELL_READY_MARKER2)
                     ).trimStart();
-                    if (realContent) emit11(realContent);
+                    if (realContent) emit12(realContent);
                   }
                   instance.buffer = "";
                   if (sawContinuation && instance.remoteOs === "windows" && instance.stream) {
@@ -294477,7 +294985,7 @@ var SSHBackend = class _SSHBackend {
                 const sanitizedChunk = this.stripReadyMarker(chunk2);
                 this.consumeOscMarkers(instance, sanitizedChunk);
                 if (sanitizedChunk) {
-                  emit11(sanitizedChunk);
+                  emit12(sanitizedChunk);
                 }
               }
             });
@@ -294491,7 +294999,7 @@ var SSHBackend = class _SSHBackend {
         console.error(`[SSH] Client error:`, err);
         instance.initializationState = "failed";
         instance.isInitializing = false;
-        emit11(`\x1B[31m\u2718 SSH Error: ${err.message}\x1B[0m\r
+        emit12(`\x1B[31m\u2718 SSH Error: ${err.message}\x1B[0m\r
 `);
         emitExit(-1);
       });
@@ -294514,7 +295022,7 @@ var SSHBackend = class _SSHBackend {
               sshConfig.privateKeyPath
             );
           } catch (e) {
-            emit11(
+            emit12(
               `\x1B[31m\u2718 Failed to read private key: ${e.message}\x1B[0m\r
 `
             );
@@ -294526,19 +295034,19 @@ var SSHBackend = class _SSHBackend {
       }
       try {
         await new Promise((r) => setTimeout(r, 50));
-        emit11(
+        emit12(
           `\x1B[36m\u25B9 Connecting to ${sshConfig.host}:${sshConfig.port}...\x1B[0m\r
 `
         );
         console.log(
           `[SSH] Attempting to connect to ${sshConfig.host}:${sshConfig.port}...`
         );
-        const sock = await this.buildConnectSocketIfNeeded(sshConfig, emit11);
+        const sock = await this.buildConnectSocketIfNeeded(sshConfig, emit12);
         if (sock) {
           console.log(
             `[SSH] SUCCESS: Connection to ${sshConfig.host} will be tunneled through sock (Jump Host/Proxy).`
           );
-          emit11(
+          emit12(
             "\x1B[36m\u25B9 [Final] Using tunnel socket for target connection...\x1B[0m\r\n"
           );
           connectConfig.sock = sock;
@@ -294552,7 +295060,7 @@ var SSHBackend = class _SSHBackend {
         const errMsg = e instanceof Error ? e.message : String(e);
         instance.initializationState = "failed";
         instance.isInitializing = false;
-        emit11(`\x1B[31m\u2718 Connection failed: ${errMsg}\x1B[0m\r
+        emit12(`\x1B[31m\u2718 Connection failed: ${errMsg}\x1B[0m\r
 `);
         emitExit(-1);
       }
@@ -296501,6 +297009,8 @@ var PSRPTransport = class {
   /** pypsrp WSMan.session_id — one uuid for the life of the transport. */
   sessionId = `uuid:${(0, import_node_crypto3.randomUUID)().toUpperCase()}`;
   http;
+  /** Persistent runspace (v3.8.0): reuse one Microsoft.PowerShell shell across commands. */
+  pool = null;
   constructor(opts) {
     this.http = new WinHttpAuth({
       host: opts.host,
@@ -296524,6 +297034,7 @@ var PSRPTransport = class {
     const wsmv = "http://schemas.microsoft.com/wbem/wsman/1/wsman.xsd";
     return `<s:Envelope xmlns:s="${NS2.s}" xmlns:wsa="${NS2.a}" xmlns:wsman="${NS2.w}" xmlns:wsmv="${wsmv}" xmlns:rsp="${NS2.rsp}" xml:lang="en-US"><s:Header><wsa:Action s:mustUnderstand="true">${action}</wsa:Action><wsmv:DataLocale s:mustUnderstand="false" xml:lang="en-US" /><wsman:Locale s:mustUnderstand="false" xml:lang="en-US" /><wsman:MaxEnvelopeSize s:mustUnderstand="true">512000</wsman:MaxEnvelopeSize><wsa:MessageID>${mid}</wsa:MessageID><wsman:OperationTimeout>PT60.000S</wsman:OperationTimeout><wsa:ReplyTo><wsa:Address s:mustUnderstand="true">${NS2.a}/role/anonymous</wsa:Address></wsa:ReplyTo><wsman:ResourceURI s:mustUnderstand="true">${PSRP_SHELL_URI}</wsman:ResourceURI><wsmv:SessionId s:mustUnderstand="false">${this.sessionId}</wsmv:SessionId><wsa:To>${to}</wsa:To>${extraHeaders}</s:Header><s:Body>${body}</s:Body></s:Envelope>`;
   }
+  /** Test hook: subclasses may override. */
   async post(action, body, extraHeaders) {
     const envelope = this.envelope(action, body, extraHeaders);
     const res = await this.http.post(envelope);
@@ -296537,6 +297048,57 @@ var PSRPTransport = class {
    *   Receive loop (PIPELINE_OUTPUT / ERROR_RECORD / PIPELINE_STATE) → Delete.
    * The script travels inside the PSRP message body — no command-line length limit.
    */
+  /** Open (or return) a persistent runspace pool. */
+  async ensurePool(opts) {
+    if (this.pool) return { shellId: this.pool.shellId, rpid: this.pool.rpid };
+    const deadline = Date.now() + (opts?.timeoutMs ?? 12e4);
+    const rpid = (0, import_node_crypto3.randomUUID)().toUpperCase();
+    const creation = fragmentMessages([
+      psrpMessage(MSG.SESSION_CAPABILITY, rpid, "00000000-0000-0000-0000-000000000000", sessionCapabilityXml()),
+      psrpMessage(MSG.INIT_RUNSPACEPOOL, rpid, "00000000-0000-0000-0000-000000000000", initRunspacePoolXml())
+    ], 1);
+    const createBody = `<rsp:Shell ShellId="${rpid}"><rsp:InputStreams>stdin pr</rsp:InputStreams><rsp:OutputStreams>stdout</rsp:OutputStreams><creationXml xmlns="http://schemas.microsoft.com/powershell">` + creation.blob.toString("base64") + `</creationXml></rsp:Shell>`;
+    const createHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option MustComply="true" Name="protocolversion">2.3</wsman:Option></wsman:OptionSet>`;
+    const created = await this.post(
+      "http://schemas.xmlsoap.org/ws/2004/09/transfer/Create",
+      createBody,
+      createHeaders
+    );
+    this.assertOk(created, "Create");
+    const shellId = extractShellId2(created.body);
+    if (!shellId) throw new Error("PSRP Create succeeded but no ShellId returned.");
+    await this.waitForRunspaceOpened(shellId, deadline, opts?.signal);
+    this.pool = { shellId, rpid, nextObjectId: creation.nextObjectId };
+    return { shellId, rpid };
+  }
+  async closePool() {
+    const p = this.pool;
+    this.pool = null;
+    if (p) await this.deleteShell(p.shellId);
+  }
+  /**
+   * Run a script on the persistent pool (opens one if needed). Does NOT delete
+   * the shell — call closePool() when the tab dies.
+   */
+  async runScriptOnPool(script, opts) {
+    const deadline = Date.now() + (opts?.timeoutMs ?? 12e4);
+    const pool = await this.ensurePool(opts);
+    const pipelineId = (0, import_node_crypto3.randomUUID)().toUpperCase();
+    const createPipelineMsg = psrpMessage(MSG.CREATE_PIPELINE, pool.rpid, pipelineId, createPipelineXml(script));
+    const frag = fragmentMessages([createPipelineMsg], this.pool.nextObjectId);
+    this.pool.nextObjectId = frag.nextObjectId;
+    const commandBody = `<rsp:CommandLine CommandId="${pipelineId}"><rsp:Command></rsp:Command><rsp:Arguments>${frag.blob.toString("base64")}</rsp:Arguments></rsp:CommandLine>`;
+    const commandHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option Name="WINRS_SKIP_CMD_SHELL">False</wsman:Option></wsman:OptionSet>` + this.shellHeaders(pool.shellId);
+    const commanded = await this.post(
+      "http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Command",
+      commandBody,
+      commandHeaders
+    );
+    this.assertOk(commanded, "Command");
+    const commandId = firstText2(commanded.body, "CommandId");
+    if (!commandId) throw new Error("PSRP Command succeeded but no CommandId returned.");
+    return this.receivePipeline(pool.shellId, commandId, deadline, opts);
+  }
   async runScript(script, opts) {
     const deadline = Date.now() + (opts?.timeoutMs ?? 12e4);
     const rpid = (0, import_node_crypto3.randomUUID)().toUpperCase();
@@ -296569,63 +297131,76 @@ var PSRPTransport = class {
       this.assertOk(commanded, "Command");
       const commandId = firstText2(commanded.body, "CommandId");
       if (!commandId) throw new Error("PSRP Command succeeded but no CommandId returned.");
-      let stdout = "";
-      let stderr = "";
-      let hadErrors = false;
-      let exitCode = 0;
-      let pipelineDone = false;
-      for (; ; ) {
-        if (opts?.signal?.aborted) throw new Error("AbortError");
-        if (Date.now() > deadline) {
-          throw new Error(`PSRP command timed out after ${opts?.timeoutMs ?? 12e4}ms`);
-        }
-        const receiveBody = `<rsp:Receive><rsp:DesiredStream CommandId="${commandId}">stdout</rsp:DesiredStream></rsp:Receive>`;
-        const receiveHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option Name="WSMAN_CMDSHELL_OPTION_KEEPALIVE">True</wsman:Option></wsman:OptionSet>` + this.shellHeaders(shellId);
-        const received = await this.post(
-          "http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Receive",
-          receiveBody,
-          receiveHeaders
-        );
-        this.assertOk(received, "Receive");
-        const streamRe = /<\w*:?Stream\b[^>]*\bName="(?:stdout|stderr|pr)"[^>]*>([\s\S]*?)<\/\w*:?Stream>/gi;
-        let m2;
-        while ((m2 = streamRe.exec(received.body)) !== null) {
-          const b64 = m2[1].replace(/\s+/g, "");
-          if (!b64) continue;
-          for (const raw of unfragmentMessages(import_node_buffer2.Buffer.from(b64, "base64"))) {
-            if (raw.length < 40) continue;
-            const messageType = raw.readUInt32LE(4);
-            const payload = raw.subarray(40).toString("utf8").replace(/^\uFEFF/, "");
-            if (messageType === MSG.PIPELINE_OUTPUT) {
-              const sRe = /<S[^>]*>([\s\S]*?)<\/S>/gi;
-              let sm;
-              while ((sm = sRe.exec(payload)) !== null) stdout += sm[1];
-            } else if (messageType === MSG.ERROR_RECORD) {
-              hadErrors = true;
-              const mRe = payload.match(/<S N="Message">([\s\S]*?)<\/S>/i);
-              stderr += (mRe ? mRe[1] : payload) + "\n";
-            } else if (messageType === MSG.PIPELINE_STATE) {
-              pipelineDone = true;
-              const stateMatch = payload.match(/<I32 N="State">(\d+)<\/I32>/i);
-              if (stateMatch) {
-                if (parseInt(stateMatch[1], 10) === 5) hadErrors = true;
-              }
-              const ec = payload.match(/N="ExitCode"[^>]*>(-?\d+)</i);
-              if (ec) exitCode = parseInt(ec[1], 10);
-            }
-          }
-        }
-        const wsExit = received.body.match(/<\w*:?ExitCode>\s*(-?\d+)\s*<\/\w*:?ExitCode>/i);
-        if (wsExit) exitCode = parseInt(wsExit[1], 10);
-        if (pipelineDone) break;
-        if (/CommandState\/Done/i.test(received.body)) break;
-      }
-      if (exitCode !== 0) hadErrors = true;
-      return { stdout, stderr, exitCode, hadErrors };
+      return await this.receivePipeline(shellId, commandId, deadline, opts);
     } finally {
       await this.deleteShell(shellId);
     }
   }
+  async receivePipeline(shellId, commandId, deadline, opts) {
+    let stdout = "";
+    let stderr = "";
+    let hadErrors = false;
+    let exitCode = 0;
+    let pipelineDone = false;
+    for (; ; ) {
+      if (opts?.signal?.aborted) throw new Error("AbortError");
+      if (Date.now() > deadline) {
+        throw new Error(`PSRP command timed out after ${opts?.timeoutMs ?? 12e4}ms`);
+      }
+      const receiveBody = `<rsp:Receive><rsp:DesiredStream CommandId="${commandId}">stdout</rsp:DesiredStream></rsp:Receive>`;
+      const receiveHeaders = `<wsman:OptionSet s:mustUnderstand="true"><wsman:Option Name="WSMAN_CMDSHELL_OPTION_KEEPALIVE">True</wsman:Option></wsman:OptionSet>` + this.shellHeaders(shellId);
+      const received = await this.post(
+        "http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Receive",
+        receiveBody,
+        receiveHeaders
+      );
+      this.assertOk(received, "Receive");
+      const streamRe = /<\w*:?Stream\b[^>]*\bName="(?:stdout|stderr|pr)"[^>]*>([\s\S]*?)<\/\w*:?Stream>/gi;
+      let m2;
+      while ((m2 = streamRe.exec(received.body)) !== null) {
+        const b64 = m2[1].replace(/\s+/g, "");
+        if (!b64) continue;
+        for (const raw of unfragmentMessages(import_node_buffer2.Buffer.from(b64, "base64"))) {
+          if (raw.length < 40) continue;
+          const messageType = raw.readUInt32LE(4);
+          const payload = raw.subarray(40).toString("utf8").replace(/^\uFEFF/, "");
+          if (messageType === MSG.PIPELINE_OUTPUT) {
+            const sRe = /<S[^>]*>([\s\S]*?)<\/S>/gi;
+            let sm;
+            let extracted = false;
+            while ((sm = sRe.exec(payload)) !== null) {
+              stdout += sm[1];
+              extracted = true;
+            }
+            if (!extracted) {
+              const nRe = /<(?:I32|I64|B|ToString)[^>]*>([\s\S]*?)<\/(?:I32|I64|B|ToString)>/i;
+              const nm = payload.match(nRe);
+              if (nm) stdout += nm[1];
+              else stdout += payload.replace(/<[^>]+>/g, "").trim();
+            }
+          } else if (messageType === MSG.ERROR_RECORD) {
+            hadErrors = true;
+            const mRe = payload.match(/<S N="Message">([\s\S]*?)<\/S>/i);
+            stderr += (mRe ? mRe[1] : payload) + "\n";
+          } else if (messageType === MSG.PIPELINE_STATE) {
+            pipelineDone = true;
+            const stateMatch = payload.match(/<I32 N="State">(\d+)<\/I32>/i);
+            if (stateMatch) {
+              if (parseInt(stateMatch[1], 10) === 5) hadErrors = true;
+            }
+            const ec = payload.match(/N="ExitCode"[^>]*>(-?\d+)</i);
+            if (ec) exitCode = parseInt(ec[1], 10);
+          }
+        }
+      }
+      const wsExit = received.body.match(/<\w*:?ExitCode>\s*(-?\d+)\s*<\/\w*:?ExitCode>/i);
+      if (wsExit) exitCode = parseInt(wsExit[1], 10);
+      if (pipelineDone) break;
+      if (/CommandState\/Done/i.test(received.body)) break;
+    }
+    if (exitCode !== 0) hadErrors = true;
+    return { stdout, stderr, exitCode, hadErrors };
+  }
   /**
    * Drain Receive until RUNSPACEPOOL_STATE reports Opened (state=2).
    * Must run after Create and before Command.
@@ -296830,7 +297405,7 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
 \x1B[36m\u276F ${command}\x1B[0m\r
 `);
     const ps = this.translateCmdToPowerShell(command, instance.cwd);
-    const result = await transport.runScript(ps, {
+    const result = await transport.runScriptOnPool(ps, {
       timeoutMs: options?.timeoutMs ?? DEFAULT_WINRM_TIMEOUT_MS,
       signal: options?.signal
     });
@@ -296951,6 +297526,9 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
       void instance.winrm.deleteShell(instance.persistentShellId);
       instance.persistentShellId = void 0;
     }
+    if (instance.psrp) {
+      void instance.psrp.closePool();
+    }
     instance.exitCallback?.(0);
   }
   onData(ptyId, callback) {
@@ -297003,11 +297581,11 @@ Run commands with exec_command / run_fleet_command. Interactive TUI apps are not
 var import_node_crypto5 = require("node:crypto");
 var injectedSerial = null;
 var lazySerial;
-function constructPort(Ctor, path33, opts) {
+function constructPort(Ctor, path34, opts) {
   try {
-    return new Ctor(path33, opts);
+    return new Ctor(path34, opts);
   } catch (e) {
-    if (e instanceof TypeError) return new Ctor({ path: path33, ...opts });
+    if (e instanceof TypeError) return new Ctor({ path: path34, ...opts });
     throw e;
   }
 }
@@ -297025,7 +297603,7 @@ var SerialBackend = class {
     try {
       const mod = require("serialport");
       const Ctor = typeof mod?.SerialPort === "function" ? mod.SerialPort : mod;
-      lazySerial = ((path33, opts) => constructPort(Ctor, path33, opts));
+      lazySerial = ((path34, opts) => constructPort(Ctor, path34, opts));
     } catch {
       lazySerial = null;
     }
@@ -301479,8 +302057,8 @@ function shallowCopy(obj) {
 }
 function replaceSecrets(root, secretsMap) {
   const result = shallowCopy(root);
-  for (const [path33, secretId] of Object.entries(secretsMap)) {
-    const [last, ...partsReverse] = path33.split(".").reverse();
+  for (const [path34, secretId] of Object.entries(secretsMap)) {
+    const [last, ...partsReverse] = path34.split(".").reverse();
     let current = result;
     for (const part of partsReverse.reverse()) {
       if (current[part] === void 0) break;
@@ -306544,9 +307122,9 @@ var Client = class _Client {
     }
     return headers;
   }
-  _getPlatformEndpointPath(path33) {
+  _getPlatformEndpointPath(path34) {
     const needsV1Prefix = this.apiUrl.slice(-3) !== "/v1" && this.apiUrl.slice(-4) !== "/v1/";
-    return needsV1Prefix ? `/v1/platform/${path33}` : `/platform/${path33}`;
+    return needsV1Prefix ? `/v1/platform/${path34}` : `/platform/${path34}`;
   }
   async processInputs(inputs) {
     if (this.hideInputs === false) {
@@ -306582,9 +307160,9 @@ var Client = class _Client {
     }
     return runParams;
   }
-  async _getResponse(path33, queryParams) {
+  async _getResponse(path34, queryParams) {
     const paramsString = queryParams?.toString() ?? "";
-    const url2 = `${this.apiUrl}${path33}?${paramsString}`;
+    const url2 = `${this.apiUrl}${path34}?${paramsString}`;
     const response = await this.caller.call(async () => {
       const res = await this._fetch(url2, {
         method: "GET",
@@ -306592,22 +307170,22 @@ var Client = class _Client {
         signal: AbortSignal.timeout(this.timeout_ms),
         ...this.fetchOptions
       });
-      await raiseForStatus(res, `fetch ${path33}`);
+      await raiseForStatus(res, `fetch ${path34}`);
       return res;
     });
     return response;
   }
-  async _get(path33, queryParams) {
-    const response = await this._getResponse(path33, queryParams);
+  async _get(path34, queryParams) {
+    const response = await this._getResponse(path34, queryParams);
     return response.json();
   }
-  async *_getPaginated(path33, queryParams = new URLSearchParams(), transform2) {
+  async *_getPaginated(path34, queryParams = new URLSearchParams(), transform2) {
     let offset = Number(queryParams.get("offset")) || 0;
     const limit2 = Number(queryParams.get("limit")) || 100;
     while (true) {
       queryParams.set("offset", String(offset));
       queryParams.set("limit", String(limit2));
-      const url2 = `${this.apiUrl}${path33}?${queryParams}`;
+      const url2 = `${this.apiUrl}${path34}?${queryParams}`;
       const response = await this.caller.call(async () => {
         const res = await this._fetch(url2, {
           method: "GET",
@@ -306615,7 +307193,7 @@ var Client = class _Client {
           signal: AbortSignal.timeout(this.timeout_ms),
           ...this.fetchOptions
         });
-        await raiseForStatus(res, `fetch ${path33}`);
+        await raiseForStatus(res, `fetch ${path34}`);
         return res;
       });
       const items = transform2 ? transform2(await response.json()) : await response.json();
@@ -306629,19 +307207,19 @@ var Client = class _Client {
       offset += items.length;
     }
   }
-  async *_getCursorPaginatedList(path33, body = null, requestMethod = "POST", dataKey = "runs") {
+  async *_getCursorPaginatedList(path34, body = null, requestMethod = "POST", dataKey = "runs") {
     const bodyParams = body ? { ...body } : {};
     while (true) {
       const body2 = JSON.stringify(bodyParams);
       const response = await this.caller.call(async () => {
-        const res = await this._fetch(`${this.apiUrl}${path33}`, {
+        const res = await this._fetch(`${this.apiUrl}${path34}`, {
           method: requestMethod,
           headers: { ...this.headers, "Content-Type": "application/json" },
           signal: AbortSignal.timeout(this.timeout_ms),
           ...this.fetchOptions,
           body: body2
         });
-        await raiseForStatus(res, `fetch ${path33}`);
+        await raiseForStatus(res, `fetch ${path34}`);
         return res;
       });
       const responseBody = await response.json();
@@ -307570,8 +308148,8 @@ Context: ${context2}`);
       limit: Number(limit2) || 100
     };
     let currentOffset = Number(offset) || 0;
-    const path33 = "/runs/group";
-    const url2 = `${this.apiUrl}${path33}`;
+    const path34 = "/runs/group";
+    const url2 = `${this.apiUrl}${path34}`;
     while (true) {
       const currentBody = {
         ...baseBody,
@@ -307587,7 +308165,7 @@ Context: ${context2}`);
           ...this.fetchOptions,
           body
         });
-        await raiseForStatus(res, `Failed to fetch ${path33}`);
+        await raiseForStatus(res, `Failed to fetch ${path34}`);
         return res;
       });
       const items = await response.json();
@@ -307904,20 +308482,20 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     return result;
   }
   async hasProject({ projectId, projectName }) {
-    let path33 = "/sessions";
+    let path34 = "/sessions";
     const params = new URLSearchParams();
     if (projectId !== void 0 && projectName !== void 0) {
       throw new Error("Must provide either projectName or projectId, not both");
     } else if (projectId !== void 0) {
       assertUuid(projectId);
-      path33 += `/${projectId}`;
+      path34 += `/${projectId}`;
     } else if (projectName !== void 0) {
       params.append("name", projectName);
     } else {
       throw new Error("Must provide projectName or projectId");
     }
     const response = await this.caller.call(async () => {
-      const res = await this._fetch(`${this.apiUrl}${path33}?${params}`, {
+      const res = await this._fetch(`${this.apiUrl}${path34}?${params}`, {
         method: "GET",
         headers: this.headers,
         signal: AbortSignal.timeout(this.timeout_ms),
@@ -307940,13 +308518,13 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     }
   }
   async readProject({ projectId, projectName, includeStats }) {
-    let path33 = "/sessions";
+    let path34 = "/sessions";
     const params = new URLSearchParams();
     if (projectId !== void 0 && projectName !== void 0) {
       throw new Error("Must provide either projectName or projectId, not both");
     } else if (projectId !== void 0) {
       assertUuid(projectId);
-      path33 += `/${projectId}`;
+      path34 += `/${projectId}`;
     } else if (projectName !== void 0) {
       params.append("name", projectName);
     } else {
@@ -307955,7 +308533,7 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     if (includeStats !== void 0) {
       params.append("include_stats", includeStats.toString());
     }
-    const response = await this._get(path33, params);
+    const response = await this._get(path34, params);
     let result;
     if (Array.isArray(response)) {
       if (response.length === 0) {
@@ -308118,19 +308696,19 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     return result;
   }
   async readDataset({ datasetId, datasetName }) {
-    let path33 = "/datasets";
+    let path34 = "/datasets";
     const params = new URLSearchParams({ limit: "1" });
     if (datasetId && datasetName) {
       throw new Error("Must provide either datasetName or datasetId, not both");
     } else if (datasetId) {
       assertUuid(datasetId);
-      path33 += `/${datasetId}`;
+      path34 += `/${datasetId}`;
     } else if (datasetName) {
       params.append("name", datasetName);
     } else {
       throw new Error("Must provide datasetName or datasetId");
     }
-    const response = await this._get(path33, params);
+    const response = await this._get(path34, params);
     let result;
     if (Array.isArray(response)) {
       if (response.length === 0) {
@@ -308174,20 +308752,20 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     return response;
   }
   async readDatasetOpenaiFinetuning({ datasetId, datasetName }) {
-    const path33 = "/datasets";
+    const path34 = "/datasets";
     if (datasetId !== void 0) {
     } else if (datasetName !== void 0) {
       datasetId = (await this.readDataset({ datasetName })).id;
     } else {
       throw new Error("Must provide either datasetName or datasetId");
     }
-    const response = await this._getResponse(`${path33}/${datasetId}/openai_ft`);
+    const response = await this._getResponse(`${path34}/${datasetId}/openai_ft`);
     const datasetText = await response.text();
     const dataset = datasetText.trim().split("\n").map((line) => JSON.parse(line));
     return dataset;
   }
   async *listDatasets({ limit: limit2 = 100, offset = 0, datasetIds, datasetName, datasetNameContains, metadata } = {}) {
-    const path33 = "/datasets";
+    const path34 = "/datasets";
     const params = new URLSearchParams({
       limit: limit2.toString(),
       offset: offset.toString()
@@ -308206,7 +308784,7 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     if (metadata !== void 0) {
       params.append("metadata", JSON.stringify(metadata));
     }
-    for await (const datasets of this._getPaginated(path33, params)) {
+    for await (const datasets of this._getPaginated(path34, params)) {
       yield* datasets;
     }
   }
@@ -308275,7 +308853,7 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     });
   }
   async deleteDataset({ datasetId, datasetName }) {
-    let path33 = "/datasets";
+    let path34 = "/datasets";
     let datasetId_ = datasetId;
     if (datasetId !== void 0 && datasetName !== void 0) {
       throw new Error("Must provide either datasetName or datasetId, not both");
@@ -308285,18 +308863,18 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
     }
     if (datasetId_ !== void 0) {
       assertUuid(datasetId_);
-      path33 += `/${datasetId_}`;
+      path34 += `/${datasetId_}`;
     } else {
       throw new Error("Must provide datasetName or datasetId");
     }
     await this.caller.call(async () => {
-      const res = await this._fetch(this.apiUrl + path33, {
+      const res = await this._fetch(this.apiUrl + path34, {
         method: "DELETE",
         headers: this.headers,
         signal: AbortSignal.timeout(this.timeout_ms),
         ...this.fetchOptions
       });
-      await raiseForStatus(res, `delete ${path33}`, true);
+      await raiseForStatus(res, `delete ${path34}`, true);
       return res;
     });
   }
@@ -308487,8 +309065,8 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
   }
   async readExample(exampleId) {
     assertUuid(exampleId);
-    const path33 = `/examples/${exampleId}`;
-    const rawExample = await this._get(path33);
+    const path34 = `/examples/${exampleId}`;
+    const rawExample = await this._get(path34);
     const { attachment_urls, ...rest } = rawExample;
     const example = rest;
     if (attachment_urls) {
@@ -308571,15 +309149,15 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
   }
   async deleteExample(exampleId) {
     assertUuid(exampleId);
-    const path33 = `/examples/${exampleId}`;
+    const path34 = `/examples/${exampleId}`;
     await this.caller.call(async () => {
-      const res = await this._fetch(this.apiUrl + path33, {
+      const res = await this._fetch(this.apiUrl + path34, {
         method: "DELETE",
         headers: this.headers,
         signal: AbortSignal.timeout(this.timeout_ms),
         ...this.fetchOptions
       });
-      await raiseForStatus(res, `delete ${path33}`, true);
+      await raiseForStatus(res, `delete ${path34}`, true);
       return res;
     });
   }
@@ -308592,9 +309170,9 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
   async deleteExamples(exampleIds, options) {
     exampleIds.forEach((id) => assertUuid(id));
     if (options?.hardDelete) {
-      const path33 = this._getPlatformEndpointPath("datasets/examples/delete");
+      const path34 = this._getPlatformEndpointPath("datasets/examples/delete");
       await this.caller.call(async () => {
-        const res = await this._fetch(`${this.apiUrl}${path33}`, {
+        const res = await this._fetch(`${this.apiUrl}${path34}`, {
           method: "POST",
           headers: { ...this.headers, "Content-Type": "application/json" },
           body: JSON.stringify({
@@ -308828,21 +309406,21 @@ Message: ${Array.isArray(result.detail) ? result.detail.join("\n") : "Unspecifie
   }
   async readFeedback(feedbackId) {
     assertUuid(feedbackId);
-    const path33 = `/feedback/${feedbackId}`;
-    const response = await this._get(path33);
+    const path34 = `/feedback/${feedbackId}`;
+    const response = await this._get(path34);
     return response;
   }
   async deleteFeedback(feedbackId) {
     assertUuid(feedbackId);
-    const path33 = `/feedback/${feedbackId}`;
+    const path34 = `/feedback/${feedbackId}`;
     await this.caller.call(async () => {
-      const res = await this._fetch(this.apiUrl + path33, {
+      const res = await this._fetch(this.apiUrl + path34, {
         method: "DELETE",
         headers: this.headers,
         signal: AbortSignal.timeout(this.timeout_ms),
         ...this.fetchOptions
       });
-      await raiseForStatus(res, `delete ${path33}`, true);
+      await raiseForStatus(res, `delete ${path34}`, true);
       return res;
     });
   }
@@ -312438,12 +313016,12 @@ function isInteger(str3) {
   }
   return true;
 }
-function escapePathComponent(path33) {
-  if (path33.indexOf("/") === -1 && path33.indexOf("~") === -1) return path33;
-  return path33.replace(/~/g, "~0").replace(/\//g, "~1");
+function escapePathComponent(path34) {
+  if (path34.indexOf("/") === -1 && path34.indexOf("~") === -1) return path34;
+  return path34.replace(/~/g, "~0").replace(/\//g, "~1");
 }
-function unescapePathComponent(path33) {
-  return path33.replace(/~1/g, "/").replace(/~0/g, "~");
+function unescapePathComponent(path34) {
+  return path34.replace(/~1/g, "/").replace(/~0/g, "~");
 }
 function hasUndefined(obj) {
   if (obj === void 0) return true;
@@ -312637,8 +313215,8 @@ function applyOperation(document2, operation, validateOperation = false, mutateD
     else return returnValue;
   } else {
     if (!mutateDocument) document2 = _deepClone(document2);
-    const path33 = operation.path || "";
-    const keys = path33.split("/");
+    const path34 = operation.path || "";
+    const keys = path34.split("/");
     let obj = document2;
     let t = 1;
     let len = keys.length;
@@ -312761,7 +313339,7 @@ function _areEquals(a, b) {
 }
 
 // ../../node_modules/@langchain/core/dist/utils/fast-json-patch/src/duplex.js
-function _generate(mirror, obj, patches, path33, invertible) {
+function _generate(mirror, obj, patches, path34, invertible) {
   if (obj === mirror) return;
   if (typeof obj.toJSON === "function") obj = obj.toJSON();
   var newKeys = _objectKeys(obj);
@@ -312773,40 +313351,40 @@ function _generate(mirror, obj, patches, path33, invertible) {
     var oldVal = mirror[key];
     if (hasOwnProperty(obj, key) && !(obj[key] === void 0 && oldVal !== void 0 && Array.isArray(obj) === false)) {
       var newVal = obj[key];
-      if (typeof oldVal == "object" && oldVal != null && typeof newVal == "object" && newVal != null && Array.isArray(oldVal) === Array.isArray(newVal)) _generate(oldVal, newVal, patches, path33 + "/" + escapePathComponent(key), invertible);
+      if (typeof oldVal == "object" && oldVal != null && typeof newVal == "object" && newVal != null && Array.isArray(oldVal) === Array.isArray(newVal)) _generate(oldVal, newVal, patches, path34 + "/" + escapePathComponent(key), invertible);
       else if (oldVal !== newVal) {
         changed = true;
         if (invertible) patches.push({
           op: "test",
-          path: path33 + "/" + escapePathComponent(key),
+          path: path34 + "/" + escapePathComponent(key),
           value: _deepClone(oldVal)
         });
         patches.push({
           op: "replace",
-          path: path33 + "/" + escapePathComponent(key),
+          path: path34 + "/" + escapePathComponent(key),
           value: _deepClone(newVal)
         });
       }
     } else if (Array.isArray(mirror) === Array.isArray(obj)) {
       if (invertible) patches.push({
         op: "test",
-        path: path33 + "/" + escapePathComponent(key),
+        path: path34 + "/" + escapePathComponent(key),
         value: _deepClone(oldVal)
       });
       patches.push({
         op: "remove",
-        path: path33 + "/" + escapePathComponent(key)
+        path: path34 + "/" + escapePathComponent(key)
       });
       deleted = true;
     } else {
       if (invertible) patches.push({
         op: "test",
-        path: path33,
+        path: path34,
         value: mirror
       });
       patches.push({
         op: "replace",
-        path: path33,
+        path: path34,
         value: obj
       });
       changed = true;
@@ -312817,7 +313395,7 @@ function _generate(mirror, obj, patches, path33, invertible) {
     var key = newKeys[t];
     if (!hasOwnProperty(mirror, key) && obj[key] !== void 0) patches.push({
       op: "add",
-      path: path33 + "/" + escapePathComponent(key),
+      path: path34 + "/" + escapePathComponent(key),
       value: _deepClone(obj[key])
     });
   }
@@ -314203,10 +314781,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path33) {
-  if (!path33)
+function getElementAtPath(obj, path34) {
+  if (!path34)
     return obj;
-  return path33.reduce((acc, key) => acc?.[key], obj);
+  return path34.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -314526,11 +315104,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path33, issues) {
+function prefixIssues(path34, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path33);
+    iss.path.unshift(path34);
     return iss;
   });
 }
@@ -314667,7 +315245,7 @@ function treeifyError(error40, _mapper) {
     return issue2.message;
   };
   const result = { errors: [] };
-  const processError = (error41, path33 = []) => {
+  const processError = (error41, path34 = []) => {
     var _a3, _b;
     for (const issue2 of error41.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -314677,7 +315255,7 @@ function treeifyError(error40, _mapper) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path33, ...issue2.path];
+        const fullpath = [...path34, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -314707,9 +315285,9 @@ function treeifyError(error40, _mapper) {
   processError(error40);
   return result;
 }
-function toDotPath(path33) {
+function toDotPath(path34) {
   const segs = [];
-  for (const seg of path33) {
+  for (const seg of path34) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -326957,10 +327535,10 @@ var Runnable = class extends Serializable {
       }
       const paths = log.ops.filter((op) => op.path.startsWith("/logs/")).map((op) => op.path.split("/")[2]);
       const dedupedPaths = [...new Set(paths)];
-      for (const path33 of dedupedPaths) {
+      for (const path34 of dedupedPaths) {
         let eventType;
         let data = {};
-        const logEntry = runLog.state.logs[path33];
+        const logEntry = runLog.state.logs[path34];
         if (logEntry.end_time === void 0) if (logEntry.streamed_output.length > 0) eventType = "stream";
         else eventType = "start";
         else eventType = "end";
@@ -332653,7 +333231,7 @@ var initializeSax = function() {
     if (parser.opt.xmlns) parser.ns = Object.create(rootNS);
     parser.trackPosition = parser.opt.position !== false;
     if (parser.trackPosition) parser.position = parser.line = parser.column = 0;
-    emit11(parser, "onready");
+    emit12(parser, "onready");
   }
   if (!Object.create) Object.create = function(o) {
     function F2() {
@@ -333119,16 +333697,16 @@ var initializeSax = function() {
   });
   for (var s in sax$1.STATE) sax$1.STATE[sax$1.STATE[s]] = s;
   S2 = sax$1.STATE;
-  function emit11(parser, event, data) {
+  function emit12(parser, event, data) {
     parser[event] && parser[event](data);
   }
   function emitNode(parser, nodeType, data) {
     if (parser.textNode) closeText(parser);
-    emit11(parser, nodeType, data);
+    emit12(parser, nodeType, data);
   }
   function closeText(parser) {
     parser.textNode = textopts(parser.opt, parser.textNode);
-    if (parser.textNode) emit11(parser, "ontext", parser.textNode);
+    if (parser.textNode) emit12(parser, "ontext", parser.textNode);
     parser.textNode = "";
   }
   function textopts(opt, text) {
@@ -333141,7 +333719,7 @@ var initializeSax = function() {
     if (parser.trackPosition) er += "\nLine: " + parser.line + "\nColumn: " + parser.column + "\nChar: " + parser.c;
     er = new Error(er);
     parser.error = er;
-    emit11(parser, "onerror", er);
+    emit12(parser, "onerror", er);
     return parser;
   }
   function end(parser) {
@@ -333150,7 +333728,7 @@ var initializeSax = function() {
     closeText(parser);
     parser.c = "";
     parser.closed = true;
-    emit11(parser, "onend");
+    emit12(parser, "onend");
     SAXParser.call(parser, parser.strict, parser.opt);
     return parser;
   }
@@ -339025,13 +339603,13 @@ function combineAliasesAndInvert(constructor) {
   }, {});
 }
 async function reviver(value) {
-  const { optionalImportsMap, optionalImportEntrypoints: optionalImportEntrypoints$1, importMap, secretsMap, secretsFromEnv, path: path33, depth, maxDepth } = this;
-  const pathStr = path33.join(".");
+  const { optionalImportsMap, optionalImportEntrypoints: optionalImportEntrypoints$1, importMap, secretsMap, secretsFromEnv, path: path34, depth, maxDepth } = this;
+  const pathStr = path34.join(".");
   if (depth > maxDepth) throw new Error(`Maximum recursion depth (${maxDepth}) exceeded during deserialization. This may indicate a malicious payload or you may need to increase maxDepth.`);
   if (typeof value !== "object" || value == null) return value;
   if (Array.isArray(value)) return Promise.all(value.map((v, i) => reviver.call({
     ...this,
-    path: [...path33, `${i}`],
+    path: [...path34, `${i}`],
     depth: depth + 1
   }, v)));
   const record2 = value;
@@ -339086,7 +339664,7 @@ async function reviver(value) {
     if (typeof builder !== "function") throw new Error(`Invalid identifer: ${pathStr} -> ${str3}`);
     const kwargs = await reviver.call({
       ...this,
-      path: [...path33, "kwargs"],
+      path: [...path34, "kwargs"],
       depth: depth + 1
     }, serialized.kwargs);
     const instance = new builder(mapKeys(kwargs, keyFromJson, combineAliasesAndInvert(builder)));
@@ -339096,7 +339674,7 @@ async function reviver(value) {
   const result = {};
   for (const [key, val] of Object.entries(record2)) result[key] = await reviver.call({
     ...this,
-    path: [...path33, key],
+    path: [...path34, key],
     depth: depth + 1
   }, val);
   return result;
@@ -344224,10 +344802,10 @@ var Graph$1 = class {
     this.edges.add([startKey, endKey]);
     return this;
   }
-  addConditionalEdges(source, path33, pathMap) {
+  addConditionalEdges(source, path34, pathMap) {
     const options = typeof source === "object" ? source : {
       source,
-      path: path33,
+      path: path34,
       pathMap
     };
     this.warnIfCompiled("Adding an edge to a graph that has already been compiled. This will not be reflected in the compiled graph.");
@@ -345290,6 +345868,28 @@ var MessagesZodState = external_exports.object({ messages: withLangGraph(externa
 // ../../node_modules/@langchain/langgraph/dist/index.js
 initializeAsyncLocalStorageSingleton();
 
+// ../../packages/backend/src/services/redaction/secretRedact.ts
+var PATTERNS = [
+  { re: /\b(gys_at_[A-Za-z0-9_-]{16,})\b/g, label: "RTERM_TOKEN" },
+  { re: /\b(ghp_[A-Za-z0-9]{20,})\b/g, label: "GITHUB_PAT" },
+  { re: /\b(sk-[A-Za-z0-9_-]{20,})\b/g, label: "API_KEY" },
+  { re: /\b(AKIA[0-9A-Z]{16})\b/g, label: "AWS_KEY" },
+  { re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g, label: "PRIVATE_KEY" },
+  { re: /(password|passwd|pwd|secret|token)\s*[:=]\s*["']?([^\s"']{6,})/gi, label: "CREDENTIAL" }
+];
+function redactText(input, extraValues = []) {
+  let out = String(input ?? "");
+  for (const v of extraValues) {
+    const t = String(v || "");
+    if (t.length < 4) continue;
+    out = out.split(t).join(`[REDACTED]`);
+  }
+  for (const p of PATTERNS) {
+    out = out.replace(p.re, `[REDACTED:${p.label}]`);
+  }
+  return out;
+}
+
 // ../../packages/backend/src/services/agentRunLedger.ts
 var import_node_fs3 = __toESM(require("node:fs"), 1);
 var import_node_path5 = __toESM(require("node:path"), 1);
@@ -345759,16 +346359,16 @@ var Diff = class {
       }
     }
   }
-  addToPath(path33, added, removed, oldPosInc, options) {
-    const last = path33.lastComponent;
+  addToPath(path34, added, removed, oldPosInc, options) {
+    const last = path34.lastComponent;
     if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
       return {
-        oldPos: path33.oldPos + oldPosInc,
+        oldPos: path34.oldPos + oldPosInc,
         lastComponent: { count: last.count + 1, added, removed, previousComponent: last.previousComponent }
       };
     } else {
       return {
-        oldPos: path33.oldPos + oldPosInc,
+        oldPos: path34.oldPos + oldPosInc,
         lastComponent: { count: 1, added, removed, previousComponent: last }
       };
     }
@@ -350485,6 +351085,265 @@ ${usage}`;
   return msg;
 }
 
+// ../../packages/backend/src/services/AgentHelper/tools/ops_tools.ts
+init_zod();
+function emit6(context2, toolName, input, output) {
+  context2.sendEvent(context2.sessionId, {
+    messageId: context2.messageId,
+    type: "tool_call",
+    toolName,
+    input: typeof input === "string" ? input : JSON.stringify(input),
+    output
+  });
+}
+function noService(context2, tool2, args) {
+  const msg = "Ops service is not wired in this runtime.";
+  emit6(context2, tool2, args, msg);
+  return msg;
+}
+var manageIncidentSchema = external_exports.object({
+  action: external_exports.enum(["open", "get", "list", "close"]).describe("open a bundle, get one, list, or close it."),
+  id: external_exports.string().optional().describe("Incident id (get/close)."),
+  title: external_exports.string().optional().describe("Incident title (open)."),
+  notes: external_exports.string().optional().describe("Free-form notes (open/close)."),
+  chatId: external_exports.string().optional().describe("Session id to attach (open)."),
+  terminals: external_exports.array(external_exports.string()).optional().describe("Terminal ids to attach (open)."),
+  recordingId: external_exports.string().optional().describe("Recording id to attach (open)."),
+  runId: external_exports.string().optional().describe("Agent run id to attach (open)."),
+  status: external_exports.enum(["open", "closed"]).optional().describe("Filter for list.")
+});
+var manageCollabSchema = external_exports.object({
+  action: external_exports.enum(["join", "takeConn", "whoHasConn", "list"]).describe("Session presence for two operators."),
+  sessionId: external_exports.string().optional().describe("Session id (join/takeConn/whoHasConn)."),
+  operator: external_exports.string().optional().describe("Operator name (join/takeConn).")
+});
+var manageJumpPathSchema = external_exports.object({
+  action: external_exports.enum(["define", "list", "breakGlass", "allowed"]).describe("Named jump paths + time-boxed break-glass."),
+  name: external_exports.string().optional().describe("Path name (define/breakGlass/allowed)."),
+  hops: external_exports.array(external_exports.object({ host: external_exports.string(), user: external_exports.string().optional(), port: external_exports.number().optional() })).optional().describe('Ordered hops for define \u2014 e.g. [{host:"jump"}, {host:"target",user:"admin"}].'),
+  ttlSeconds: external_exports.number().optional().describe("Break-glass TTL in seconds (breakGlass). Default 3600.")
+});
+var manageApprovalSchema = external_exports.object({
+  action: external_exports.enum(["request", "list", "get", "decide", "sweep"]).describe("Time-boxed approvals; twoPerson needs two distinct approvers."),
+  id: external_exports.string().optional().describe("Approval id (get/decide)."),
+  command: external_exports.string().optional().describe("The command awaiting approval (request)."),
+  ttlSeconds: external_exports.number().optional().describe("TTL in seconds (request). Default 900."),
+  twoPerson: external_exports.boolean().optional().describe("Require two distinct approvers (request)."),
+  who: external_exports.string().optional().describe("Approver name (decide)."),
+  approve: external_exports.boolean().optional().describe("true = approve, false = deny (decide)."),
+  state: external_exports.enum(["pending", "approved", "denied", "expired"]).optional().describe("Filter for list.")
+});
+var snapshotOutputSchema = external_exports.object({
+  action: external_exports.enum(["remember", "list", "diff"]).describe("Baseline command output and diff against it later (config drift)."),
+  connection: external_exports.string().describe("Connection/tab name, e.g. CORP-WS2 or cisco-xe-1."),
+  command: external_exports.string().optional().describe("The command whose output is being baselined (remember/diff)."),
+  output: external_exports.string().optional().describe("The output text (remember/diff).")
+});
+var replayAgentRunSchema = external_exports.object({
+  runId: external_exports.string().describe("Run id from the run ledger to replay."),
+  steps: external_exports.array(
+    external_exports.object({
+      tool: external_exports.string(),
+      args: external_exports.unknown().optional(),
+      output: external_exports.string().optional().describe("Stubbed output \u2014 the real tool is NOT called.")
+    })
+  ).describe("Steps with stubbed outputs so a replay never touches live hosts.")
+});
+var planOfflineJoinSchema = external_exports.object({
+  domain: external_exports.string().describe("Target AD domain, e.g. corp.local."),
+  machine: external_exports.string().describe("Machine name to join, e.g. EC2AMAZ-C69VULQ."),
+  dcConnection: external_exports.string().describe("Saved connection name for the DC, e.g. CORP-DC1."),
+  memberConnection: external_exports.string().describe("Saved connection name for the member, e.g. CORP-WS2.")
+});
+var netDeviceSchema = external_exports.object({
+  action: external_exports.enum(["parseCdp", "configDiff", "inConfigMode"]).describe("Network-device helpers."),
+  output: external_exports.string().optional().describe("Text to parse (parseCdp) or the prompt to test (inConfigMode)."),
+  running: external_exports.string().optional().describe("running-config text (configDiff)."),
+  startup: external_exports.string().optional().describe("startup-config text (configDiff).")
+});
+async function manageIncident(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "manage_incident", args);
+  let msg;
+  if (args.action === "open") {
+    if (!args.title) {
+      msg = "open requires a title";
+    } else {
+      const inc = svc.openIncident(args.title, {
+        sessionId: args.chatId,
+        tabIds: args.terminals,
+        recordingId: args.recordingId,
+        runId: args.runId,
+        notes: args.notes
+      });
+      msg = `Opened incident ${inc.id} "${inc.title}"${inc.tabIds.length ? ` with ${inc.tabIds.length} terminal(s)` : ""}.`;
+    }
+  } else if (args.action === "get") {
+    const inc = args.id ? svc.getIncident(args.id) : void 0;
+    msg = inc ? JSON.stringify(inc) : `No incident ${args.id ?? "(missing id)"}`;
+  } else if (args.action === "close") {
+    const inc = args.id ? svc.closeIncident(args.id, args.notes) : void 0;
+    msg = inc ? `Closed incident ${inc.id}.` : `No incident ${args.id ?? "(missing id)"}`;
+  } else {
+    const list = svc.listIncidents(args.status);
+    msg = list.length ? list.map((i) => `- ${i.id} [${i.status}] ${i.title}${i.tabIds.length ? ` tabs=${i.tabIds.join(",")}` : ""}`).join("\n") : "No incidents.";
+  }
+  emit6(context2, "manage_incident", args, msg);
+  return msg;
+}
+async function manageCollab(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "manage_collab", args);
+  const sessionId = args.sessionId || context2.sessionId;
+  let msg;
+  if (args.action === "list") {
+    const rooms2 = svc.listCollabSessions();
+    msg = rooms2.length ? rooms2.map((r) => `- ${r.sessionId} holder=${r.holder ?? "none"} operators=${r.operators.join(",") || "none"}`).join("\n") : "No shared sessions yet.";
+  } else if (args.action === "whoHasConn") {
+    const p = svc.whoHasConn(sessionId);
+    msg = `Session ${p.sessionId}: holder=${p.holder ?? "none"} operators=${p.operators.join(",") || "none"}`;
+  } else {
+    const operator = args.operator || "agent";
+    const p = args.action === "join" ? svc.joinCollab(sessionId, operator) : svc.takeConn(sessionId, operator);
+    msg = `${operator} ${args.action === "join" ? "joined" : "has the conn"} for ${p.sessionId}; operators=${p.operators.join(",")} holder=${p.holder ?? "none"}`;
+  }
+  emit6(context2, "manage_collab", args, msg);
+  return msg;
+}
+async function manageJumpPath(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "manage_jump_path", args);
+  let msg;
+  if (args.action === "list") {
+    const paths = svc.listJumpPaths();
+    msg = paths.length ? paths.map((p) => {
+      const bg = p.breakGlassUntil ? new Date(p.breakGlassUntil).toISOString() : "none";
+      return `- ${p.name} hops=${p.hops.map((h) => h.host).join("->")} breakGlassUntil=${bg}`;
+    }).join("\n") : "No jump paths defined.";
+  } else if (args.action === "allowed") {
+    if (!args.name) msg = "allowed requires name";
+    else {
+      const r = svc.pathAllowed(args.name);
+      msg = `${args.name}: allowed=${r.allowed}${r.expired ? " (break-glass expired)" : ""}${r.breakGlassUntil ? ` until ${new Date(r.breakGlassUntil).toISOString()}` : ""}`;
+    }
+  } else if (args.action === "breakGlass") {
+    if (!args.name) msg = "breakGlass requires name";
+    else {
+      const p = svc.grantBreakGlass(args.name, (args.ttlSeconds ?? 3600) * 1e3);
+      msg = p ? `Break-glass granted on ${p.name} until ${new Date(p.breakGlassUntil ?? 0).toISOString()}` : `No jump path "${args.name}"`;
+    }
+  } else {
+    if (!args.name || !args.hops?.length) msg = "define requires name and hops";
+    else {
+      const p = svc.defineJumpPath(args.name, args.hops);
+      msg = `Defined jump path ${p.name} with ${p.hops.length} hop(s): ${p.hops.map((h) => h.host).join(" -> ")}`;
+    }
+  }
+  emit6(context2, "manage_jump_path", args, msg);
+  return msg;
+}
+async function manageApproval(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "manage_approval", args);
+  let msg;
+  if (args.action === "request") {
+    if (!args.command) msg = "request requires command";
+    else {
+      const a = svc.requestApproval(args.command, (args.ttlSeconds ?? 900) * 1e3, args.twoPerson === true);
+      msg = `Approval ${a.id} requested for: ${a.command}
+twoPerson=${a.twoPerson} expires=${new Date(a.expiresAt).toISOString()}
+` + (a.twoPerson ? "Two DISTINCT approvers are required before this may run." : "One approver suffices.");
+    }
+  } else if (args.action === "get") {
+    const a = args.id ? svc.getApproval(args.id) : void 0;
+    msg = a ? JSON.stringify(a) : `No approval ${args.id ?? "(missing id)"}`;
+  } else if (args.action === "sweep") {
+    msg = `Expired ${svc.sweepExpiredApprovals()} approval(s).`;
+  } else if (args.action === "decide") {
+    if (!args.id || !args.who || typeof args.approve !== "boolean") msg = "decide requires id, who and approve";
+    else {
+      const r = svc.decideApproval(args.id, args.who, args.approve);
+      msg = `approval ${r.approval.id}: state=${r.approval.state}${r.reason ? ` (${r.reason})` : ""}`;
+    }
+  } else {
+    const list = svc.listApprovals(args.state);
+    msg = list.length ? list.map((a) => `- ${a.id} [${a.state}]${a.twoPerson ? " (2-person)" : ""} ${a.command} expires=${new Date(a.expiresAt).toISOString()}`).join("\n") : "No approvals.";
+  }
+  emit6(context2, "manage_approval", args, msg);
+  return msg;
+}
+async function snapshotOutput(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "snapshot_output", args);
+  let msg;
+  if (args.action === "list") {
+    const snaps = svc.listSnapshots(args.connection);
+    msg = snaps.length ? snaps.map((s) => `- ${s.connection} :: ${s.command} (${s.output.length} chars @ ${new Date(s.at).toISOString()})`).join("\n") : `No snapshots for ${args.connection}.`;
+  } else if (args.action === "remember") {
+    if (!args.command || args.output === void 0) msg = "remember requires command and output";
+    else {
+      svc.rememberOutput(args.connection, args.command, args.output);
+      msg = `Baseline stored for ${args.connection} :: ${args.command} (${args.output.length} chars).`;
+    }
+  } else {
+    if (!args.command || args.output === void 0) msg = "diff requires command and output";
+    else {
+      const d = svc.diffOutput(args.connection, args.command, args.output);
+      msg = d.previous === null ? `No baseline existed \u2014 stored this output (${args.output.length} chars) as the baseline for ${args.connection} :: ${args.command}.` : `changed=${d.changed} for ${args.connection} :: ${args.command}`;
+    }
+  }
+  emit6(context2, "snapshot_output", args, msg);
+  return msg;
+}
+async function replayAgentRun(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "replay_agent_run", args);
+  const r = svc.replay(
+    args.runId,
+    args.steps.map((s) => ({
+      tool: s.tool,
+      args: s.args && typeof s.args === "object" && !Array.isArray(s.args) ? s.args : {},
+      stub: s.output ?? ""
+    }))
+  );
+  const msg = `Replay ${args.runId}: ${r.steps.length} step(s) completed. Tools that would have been called: ${r.wouldHaveCalled.join(", ") || "(none)"}. No live tool was called.`;
+  emit6(context2, "replay_agent_run", args, msg);
+  return msg;
+}
+async function planOfflineJoin(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "plan_offline_join", args);
+  svc.planOfflineJoin(args);
+  const lines = [
+    `Offline join plan for ${args.machine} into ${args.domain}:`,
+    `1. on ${args.dcConnection}: ${svc.djoinProvision(args.domain, args.machine)}`,
+    `2. copy the blob to ${args.memberConnection} (no SMB required)`,
+    `3. on ${args.memberConnection}: ${svc.djoinRequest()}`,
+    `4. reboot ${args.memberConnection}, then verify with estate_facts / collect_facts`,
+    `Use this INSTEAD of Add-Computer when NetUseAdd \\\\DC\\IPC$ fails with 64 (network name no longer available).`
+  ];
+  const msg = lines.join("\n");
+  emit6(context2, "plan_offline_join", args, msg);
+  return msg;
+}
+async function netDevice(args, context2) {
+  const svc = context2.opsService;
+  if (!svc) return noService(context2, "net_device", args);
+  let msg;
+  if (args.action === "parseCdp") {
+    const neighbors = svc.parseCdp(args.output ?? "");
+    msg = neighbors.length ? neighbors.map((n2) => `- ${n2.device} local=${n2.localIntf} remote=${n2.remoteIntf}`).join("\n") : "No CDP neighbors parsed (empty or unrecognised output).";
+  } else if (args.action === "inConfigMode") {
+    msg = svc.inConfigMode(args.output ?? "") ? "Device prompt looks like CONFIG mode." : "Not in config mode.";
+  } else {
+    const d = svc.configDiff(args.running ?? "", args.startup ?? "");
+    msg = d.changed ? `running-config DIFFERS from startup-config:
+${d.unified.slice(0, 4e3)}` : "running-config matches startup-config.";
+  }
+  emit6(context2, "net_device", args, msg);
+  return msg;
+}
+
 // ../../packages/backend/src/services/AgentHelper/tools/fleet_tools.ts
 init_zod();
 
@@ -351333,7 +352192,7 @@ function importPuttyReg(content, opts) {
 }
 
 // ../../packages/backend/src/services/AgentHelper/tools/automation_tools.ts
-function emit6(context2, _toolName, input, output) {
+function emit7(context2, _toolName, input, output) {
   context2.sendEvent(context2.sessionId, {
     messageId: context2.messageId,
     type: "tool_call",
@@ -351360,7 +352219,7 @@ async function manageDeviceMemory(args, context2) {
   const m2 = context2.automationManager;
   if (!m2) {
     const msg2 = noStore();
-    emit6(context2, "manage_device_memory", args, msg2);
+    emit7(context2, "manage_device_memory", args, msg2);
     return msg2;
   }
   const { action } = args;
@@ -351368,25 +352227,25 @@ async function manageDeviceMemory(args, context2) {
     const all = m2.listDeviceMemory();
     if (!all.length) {
       const msg3 = "No device memory entries.";
-      emit6(context2, "manage_device_memory", args, msg3);
+      emit7(context2, "manage_device_memory", args, msg3);
       return msg3;
     }
     const body = all.map((e) => `${e.host} (role=${e.role || "unspecified"}, ${e.incidents.length} incident(s))`).join("\n");
     const msg2 = `Device memory (${all.length}):
 ${body}`;
-    emit6(context2, "manage_device_memory", args, msg2);
+    emit7(context2, "manage_device_memory", args, msg2);
     return msg2;
   }
   if (!args.host) {
     const msg2 = `action="${action}" requires a host.`;
-    emit6(context2, "manage_device_memory", args, msg2);
+    emit7(context2, "manage_device_memory", args, msg2);
     return msg2;
   }
   if (action === "get") {
     const mem = m2.getDeviceMemory(args.host);
     if (!mem) {
       const msg3 = `No device memory for host "${args.host}".`;
-      emit6(context2, "manage_device_memory", args, msg3);
+      emit7(context2, "manage_device_memory", args, msg3);
       return msg3;
     }
     const msg2 = `Device memory for ${args.host}:
@@ -351394,18 +352253,18 @@ role: ${mem.role || "unspecified"}
 standing instructions: ${mem.standingInstructions || "(none)"}
 incidents (${mem.incidents.length}):
 ${mem.incidents.map((i) => `- [${i.at}] ${i.summary}${i.ticketId ? ` (ticket: ${i.ticketId})` : ""}${i.resolution ? ` \u2014 ${i.resolution}` : ""}`).join("\n")}`;
-    emit6(context2, "manage_device_memory", args, msg2);
+    emit7(context2, "manage_device_memory", args, msg2);
     return msg2;
   }
   if (action === "add_incident") {
     if (!args.incident) {
       const msg3 = "add_incident requires an `incident` object.";
-      emit6(context2, "manage_device_memory", args, msg3);
+      emit7(context2, "manage_device_memory", args, msg3);
       return msg3;
     }
     const inc = m2.addIncident(args.host, args.incident);
     const msg2 = `Recorded incident for ${args.host} at ${inc.at}: ${inc.summary}.`;
-    emit6(context2, "manage_device_memory", args, msg2);
+    emit7(context2, "manage_device_memory", args, msg2);
     return msg2;
   }
   if (action === "upsert") {
@@ -351416,17 +352275,17 @@ ${mem.incidents.map((i) => `- [${i.at}] ${i.summary}${i.ticketId ? ` (ticket: ${
       incidents: []
     });
     const msg2 = `Saved device memory for ${mem.host} (role=${mem.role || "unspecified"}).`;
-    emit6(context2, "manage_device_memory", args, msg2);
+    emit7(context2, "manage_device_memory", args, msg2);
     return msg2;
   }
   if (action === "delete") {
     const removed = m2.deleteDeviceMemory(args.host);
     const msg2 = removed ? `Deleted device memory for ${args.host}.` : `No device memory for ${args.host}.`;
-    emit6(context2, "manage_device_memory", args, msg2);
+    emit7(context2, "manage_device_memory", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit6(context2, "manage_device_memory", args, msg);
+  emit7(context2, "manage_device_memory", args, msg);
   return msg;
 }
 var manageScriptSchema = external_exports.object({
@@ -351442,7 +352301,7 @@ async function manageScript(args, context2) {
   const m2 = context2.automationManager;
   if (!m2) {
     const msg2 = noStore();
-    emit6(context2, "manage_script", args, msg2);
+    emit7(context2, "manage_script", args, msg2);
     return msg2;
   }
   const { action } = args;
@@ -351450,56 +352309,56 @@ async function manageScript(args, context2) {
     const all = m2.listScripts();
     if (!all.length) {
       const msg3 = "No saved scripts.";
-      emit6(context2, "manage_script", args, msg3);
+      emit7(context2, "manage_script", args, msg3);
       return msg3;
     }
     const body = all.map((s) => `- ${s.name} (id=${s.id}): ${s.command.split("\n")[0].slice(0, 60)}${s.command.length > 60 ? "\u2026" : ""}`).join("\n");
     const msg2 = `Saved scripts (${all.length}):
 ${body}`;
-    emit6(context2, "manage_script", args, msg2);
+    emit7(context2, "manage_script", args, msg2);
     return msg2;
   }
   if (action === "create") {
     if (!args.name || !args.command) {
       const msg3 = "create requires name + command.";
-      emit6(context2, "manage_script", args, msg3);
+      emit7(context2, "manage_script", args, msg3);
       return msg3;
     }
     const s = m2.createScript({ name: args.name, command: args.command, description: args.description, targets: args.targets, tags: args.tags });
     const msg2 = `Created script "${s.name}" (id=${s.id}). Run it on open tabs with run_fleet_command or exec_command using its command body.`;
-    emit6(context2, "manage_script", args, msg2);
+    emit7(context2, "manage_script", args, msg2);
     return msg2;
   }
   if (action === "update") {
     if (!args.id) {
       const msg3 = "update requires id.";
-      emit6(context2, "manage_script", args, msg3);
+      emit7(context2, "manage_script", args, msg3);
       return msg3;
     }
     const existing = m2.listScripts().find((s2) => s2.id === args.id);
     if (!existing) {
       const msg3 = `No script with id="${args.id}".`;
-      emit6(context2, "manage_script", args, msg3);
+      emit7(context2, "manage_script", args, msg3);
       return msg3;
     }
     const s = m2.updateScript({ ...existing, name: args.name ?? existing.name, command: args.command ?? existing.command, description: args.description ?? existing.description, targets: args.targets ?? existing.targets, tags: args.tags ?? existing.tags });
     const msg2 = `Updated script "${s.name}".`;
-    emit6(context2, "manage_script", args, msg2);
+    emit7(context2, "manage_script", args, msg2);
     return msg2;
   }
   if (action === "delete") {
     if (!args.id) {
       const msg3 = "delete requires id.";
-      emit6(context2, "manage_script", args, msg3);
+      emit7(context2, "manage_script", args, msg3);
       return msg3;
     }
     const removed = m2.deleteScript(args.id);
     const msg2 = removed ? `Deleted script ${args.id}.` : `No script ${args.id}.`;
-    emit6(context2, "manage_script", args, msg2);
+    emit7(context2, "manage_script", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit6(context2, "manage_script", args, msg);
+  emit7(context2, "manage_script", args, msg);
   return msg;
 }
 var manageGroupSchema = external_exports.object({
@@ -351512,7 +352371,7 @@ async function manageGroup(args, context2) {
   const m2 = context2.automationManager;
   if (!m2) {
     const msg2 = noStore();
-    emit6(context2, "manage_group", args, msg2);
+    emit7(context2, "manage_group", args, msg2);
     return msg2;
   }
   const { action } = args;
@@ -351520,49 +352379,49 @@ async function manageGroup(args, context2) {
     const all = m2.listGroups();
     if (!all.length) {
       const msg3 = "No groups.";
-      emit6(context2, "manage_group", args, msg3);
+      emit7(context2, "manage_group", args, msg3);
       return msg3;
     }
     const msg2 = `Groups (${all.length}):
 ${all.map((g) => `- ${g.name} (id=${g.id}${g.parentId ? `, parent=${g.parentId}` : ""})`).join("\n")}`;
-    emit6(context2, "manage_group", args, msg2);
+    emit7(context2, "manage_group", args, msg2);
     return msg2;
   }
   if (action === "create") {
     if (!args.name) {
       const msg3 = "create requires name.";
-      emit6(context2, "manage_group", args, msg3);
+      emit7(context2, "manage_group", args, msg3);
       return msg3;
     }
     const g = m2.createGroup(args.name, args.parentId ?? null);
     const msg2 = `Created group "${g.name}" (id=${g.id}). Assign a connection by setting its groupId via manage_ssh_connection.update or the Connections panel.`;
-    emit6(context2, "manage_group", args, msg2);
+    emit7(context2, "manage_group", args, msg2);
     return msg2;
   }
   if (action === "update") {
     if (!args.id) {
       const msg3 = "update requires id.";
-      emit6(context2, "manage_group", args, msg3);
+      emit7(context2, "manage_group", args, msg3);
       return msg3;
     }
     const g = m2.updateGroup({ id: args.id, name: args.name ?? "", parentId: args.parentId });
     const msg2 = `Updated group "${g.name}".`;
-    emit6(context2, "manage_group", args, msg2);
+    emit7(context2, "manage_group", args, msg2);
     return msg2;
   }
   if (action === "delete") {
     if (!args.id) {
       const msg3 = "delete requires id.";
-      emit6(context2, "manage_group", args, msg3);
+      emit7(context2, "manage_group", args, msg3);
       return msg3;
     }
     const removed = m2.deleteGroup(args.id);
     const msg2 = removed ? `Deleted group ${args.id} (children reparented to root).` : `No group ${args.id}.`;
-    emit6(context2, "manage_group", args, msg2);
+    emit7(context2, "manage_group", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit6(context2, "manage_group", args, msg);
+  emit7(context2, "manage_group", args, msg);
   return msg;
 }
 var manageScheduledTaskSchema = external_exports.object({
@@ -351592,7 +352451,7 @@ async function manageScheduledTask(args, context2) {
   const m2 = context2.automationManager;
   if (!m2) {
     const msg2 = noStore();
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   const { action } = args;
@@ -351600,30 +352459,30 @@ async function manageScheduledTask(args, context2) {
     const all = m2.listScheduledTasks();
     if (!all.length) {
       const msg3 = "No scheduled tasks.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const msg2 = `Scheduled tasks (${all.length}):
 ${all.map((t) => `- ${t.name} (id=${t.id}, cron="${t.cron}", enabled=${t.enabled}${t.lastRunAt ? `, lastRun=${t.lastRunAt}` : ""})`).join("\n")}`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   if (action === "create") {
     if (!args.name || !args.cron) {
       const msg3 = "create requires name + cron.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     if (!args.scriptId && !args.command && !args.playbookId) {
       const msg3 = "create requires scriptId, command, or playbookId.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const { validateCron: validateCron2 } = await Promise.resolve().then(() => (init_schedulerService(), schedulerService_exports));
     const v = validateCron2(args.cron);
     if (!v.ok) {
       const msg3 = `Invalid cron "${args.cron}": ${v.reason}`;
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const t = m2.createScheduledTask({
@@ -351647,47 +352506,47 @@ ${all.map((t) => `- ${t.name} (id=${t.id}, cron="${t.cron}", enabled=${t.enabled
       alertAfterFailures: args.alertAfterFailures
     });
     const msg2 = `Created scheduled task "${t.name}" (id=${t.id}, cron="${t.cron}"${args.timezone ? ` @ ${args.timezone}` : ""}). It will be evaluated by the local scheduler.`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   if (action === "update") {
     if (!args.id) {
       const msg3 = "update requires id.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const existing = m2.listScheduledTasks().find((t2) => t2.id === args.id);
     if (!existing) {
       const msg3 = `No task ${args.id}.`;
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const t = m2.updateScheduledTask({ ...existing, name: args.name ?? existing.name, cron: args.cron ?? existing.cron, scriptId: args.scriptId ?? existing.scriptId, command: args.command ?? existing.command, enabled: args.enabled ?? existing.enabled, groupId: args.groupId, tags: args.tags, targets: args.targets });
     const msg2 = `Updated task "${t.name}".`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   if (action === "delete") {
     if (!args.id) {
       const msg3 = "delete requires id.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const removed = m2.deleteScheduledTask(args.id);
     const msg2 = removed ? `Deleted task ${args.id}.` : `No task ${args.id}.`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   if (action === "validate") {
     if (!args.cron) {
       const msg3 = "validate requires cron.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const { validateCron: validateCron2 } = await Promise.resolve().then(() => (init_schedulerService(), schedulerService_exports));
     const v = validateCron2(args.cron);
     const msg2 = v.ok ? `Cron "${args.cron}" is valid.` : `Invalid cron "${args.cron}": ${v.reason}`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   if (action === "drift") {
@@ -351696,20 +352555,20 @@ ${all.map((t) => `- ${t.name} (id=${t.id}, cron="${t.cron}", enabled=${t.enabled
     const flagged = drift.filter((d) => d.drifted);
     const msg2 = flagged.length === 0 ? `No drift detected across ${drift.length} enabled task(s).` : `Drifted task(s) (${flagged.length}):
 ${flagged.map((d) => `- ${d.taskName} (id=${d.taskId}): ${Number.isFinite(d.minutesSinceLastRun) ? `${Math.round(d.minutesSinceLastRun)} min since last run` : "never ran"} vs expected \u2264${d.expectedIntervalMinutes} min`).join("\n")}`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   if (action === "history") {
     const sched = context2.scheduledTaskHistory;
     if (!sched) {
       const msg3 = "Run history is not available in this runtime (headless daemon exposes it via the gateway).";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const tasks = args.id ? m2.listScheduledTasks().filter((t) => t.id === args.id) : m2.listScheduledTasks();
     if (tasks.length === 0) {
       const msg3 = args.id ? `No task ${args.id}.` : "No scheduled tasks.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const lines = tasks.map((t) => {
@@ -351722,34 +352581,34 @@ ${flagged.map((d) => `- ${d.taskName} (id=${d.taskId}): ${Number.isFinite(d.minu
     });
     const msg2 = `Scheduled task history:
 ${lines.join("\n")}`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   if (action === "runNow") {
     if (!args.id) {
       const msg3 = "runNow requires id.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const task2 = m2.listScheduledTasks().find((t) => t.id === args.id);
     if (!task2) {
       const msg3 = `No task ${args.id}.`;
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const sched = context2.scheduledTaskRunner;
     if (!sched) {
       const msg3 = "Run-now is not available in this runtime.";
-      emit6(context2, "manage_scheduled_task", args, msg3);
+      emit7(context2, "manage_scheduled_task", args, msg3);
       return msg3;
     }
     const r = await sched(task2);
     const msg2 = r.ran ? `Task "${task2.name}" executed now.` : `Task "${task2.name}" not run: ${r.reason}.`;
-    emit6(context2, "manage_scheduled_task", args, msg2);
+    emit7(context2, "manage_scheduled_task", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit6(context2, "manage_scheduled_task", args, msg);
+  emit7(context2, "manage_scheduled_task", args, msg);
   return msg;
 }
 var manageTemplateSchema = external_exports.object({
@@ -351765,7 +352624,7 @@ async function manageTemplate(args, context2) {
   const m2 = context2.automationManager;
   if (!m2) {
     const msg2 = noStore();
-    emit6(context2, "manage_template", args, msg2);
+    emit7(context2, "manage_template", args, msg2);
     return msg2;
   }
   const { action } = args;
@@ -351773,57 +352632,57 @@ async function manageTemplate(args, context2) {
     const all = m2.listTemplates();
     if (!all.length) {
       const msg3 = "No templates.";
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const msg2 = `Templates (${all.length}):
 ${all.map((t) => `- ${t.name} (id=${t.id}, ${t.versions.length} version(s))`).join("\n")}`;
-    emit6(context2, "manage_template", args, msg2);
+    emit7(context2, "manage_template", args, msg2);
     return msg2;
   }
   if (action === "create") {
     if (!args.name || !args.body) {
       const msg3 = "create requires name + body.";
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const t = m2.createTemplate({ name: args.name, body: args.body, variables: args.variables ?? [] });
     const msg2 = `Created template "${t.name}" (id=${t.id}). Use action="render" to preview, action="version" to save a rendered version.`;
-    emit6(context2, "manage_template", args, msg2);
+    emit7(context2, "manage_template", args, msg2);
     return msg2;
   }
   if (action === "update") {
     if (!args.id) {
       const msg3 = "update requires id.";
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const t = m2.updateTemplate({ id: args.id, name: args.name, body: args.body, variables: args.variables });
     const msg2 = `Updated template "${t.name}".`;
-    emit6(context2, "manage_template", args, msg2);
+    emit7(context2, "manage_template", args, msg2);
     return msg2;
   }
   if (action === "delete") {
     if (!args.id) {
       const msg3 = "delete requires id.";
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const removed = m2.deleteTemplate(args.id);
     const msg2 = removed ? `Deleted template ${args.id}.` : `No template ${args.id}.`;
-    emit6(context2, "manage_template", args, msg2);
+    emit7(context2, "manage_template", args, msg2);
     return msg2;
   }
   if (action === "render") {
     if (!args.id) {
       const msg3 = "render requires id.";
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const t = m2.listTemplates().find((x) => x.id === args.id);
     if (!t) {
       const msg3 = `No template ${args.id}.`;
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const defaults2 = {};
@@ -351834,19 +352693,19 @@ ${all.map((t) => `- ${t.name} (id=${t.id}, ${t.versions.length} version(s))`).jo
 <rendered>
 ${rendered}
 </rendered>`;
-    emit6(context2, "manage_template", args, msg2);
+    emit7(context2, "manage_template", args, msg2);
     return msg2;
   }
   if (action === "version") {
     if (!args.id) {
       const msg3 = "version requires id.";
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const t = m2.listTemplates().find((x) => x.id === args.id);
     if (!t) {
       const msg3 = `No template ${args.id}.`;
-      emit6(context2, "manage_template", args, msg3);
+      emit7(context2, "manage_template", args, msg3);
       return msg3;
     }
     const defaults2 = {};
@@ -351860,11 +352719,11 @@ ${rendered}
 Diff vs previous version:
 ${diffStrings(prev.rendered, rendered)}` : "\n\n(first version)";
     const msg2 = `Saved version ${t.versions.length + 1} of "${t.name}" at ${v.at}.${diff}`;
-    emit6(context2, "manage_template", args, msg2);
+    emit7(context2, "manage_template", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit6(context2, "manage_template", args, msg);
+  emit7(context2, "manage_template", args, msg);
   return msg;
 }
 var importPuttySchema = external_exports.object({
@@ -351874,13 +352733,13 @@ async function importPutty(args, context2) {
   const cm = context2.connectionManager;
   if (!cm) {
     const msg2 = "Connection management is not available in this runtime.";
-    emit6(context2, "import_putty", args, msg2);
+    emit7(context2, "import_putty", args, msg2);
     return msg2;
   }
   const entries = importPuttyReg(args.regContent);
   if (!entries.length) {
     const msg2 = "No SSH sessions found in the provided PuTTY export (only ssh-protocol sessions with a HostName are imported).";
-    emit6(context2, "import_putty", args, msg2);
+    emit7(context2, "import_putty", args, msg2);
     return msg2;
   }
   let created = 0;
@@ -351891,7 +352750,7 @@ async function importPutty(args, context2) {
     created++;
   }
   const msg = `Imported ${created} SSH connection(s) from PuTTY${entries.length !== created ? ` (${entries.length - created} skipped as duplicates or non-ssh)` : ""}. Imported: ${entries.map((e) => e.name).join(", ")}. Open them with open_terminal_tab by Name.`;
-  emit6(context2, "import_putty", args, msg);
+  emit7(context2, "import_putty", args, msg);
   return msg;
 }
 
@@ -351902,7 +352761,7 @@ init_playbook_tools();
 init_zod();
 init_playbookRunner();
 init_scheduledTaskRunner();
-function emit8(context2, toolName, input, output) {
+function emit9(context2, toolName, input, output) {
   context2.sendEvent(context2.sessionId, {
     messageId: context2.messageId,
     type: "tool_call",
@@ -351942,12 +352801,12 @@ async function manageChange(args, context2) {
   const ledger = context2.changeLedger;
   if (!m2) {
     const msg2 = "Automation store is not available in this runtime.";
-    emit8(context2, "manage_change", args, msg2);
+    emit9(context2, "manage_change", args, msg2);
     return msg2;
   }
   if (!ledger) {
     const msg2 = "Change ledger is not available in this runtime.";
-    emit8(context2, "manage_change", args, msg2);
+    emit9(context2, "manage_change", args, msg2);
     return msg2;
   }
   const { action } = args;
@@ -351955,13 +352814,13 @@ async function manageChange(args, context2) {
     const key = args.playbookId ?? args.name;
     if (!key) {
       const msg3 = "plan requires playbookId or name.";
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const playbook = m2.getPlaybook(key);
     if (!playbook) {
       const msg3 = `No playbook "${key}".`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const settings = settingsFromContext(context2);
@@ -351981,58 +352840,58 @@ Targets (${targets.length || 1}): ${targets.length ? targets.map((t) => t.name).
 Steps:
 ${steps}
 Next: manage_change action=approve changeId=${changeId}, then action=run.`;
-    emit8(context2, "manage_change", args, msg2);
+    emit9(context2, "manage_change", args, msg2);
     return msg2;
   }
   if (action === "approve") {
     if (!args.changeId) {
       const msg3 = "approve requires changeId.";
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const existing = ledger.getChange(args.changeId);
     if (!existing) {
       const msg3 = `No change "${args.changeId}".`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     if (existing.change.status !== "planned") {
       const msg3 = `Change ${args.changeId} is ${existing.change.status} \u2014 only planned changes can be approved.`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     ledger.approveChange(args.changeId, args.approvedBy);
     const msg2 = `Change ${args.changeId} approved${args.approvedBy ? ` by ${args.approvedBy}` : ""}. Execute with manage_change action=run changeId=${args.changeId}.`;
-    emit8(context2, "manage_change", args, msg2);
+    emit9(context2, "manage_change", args, msg2);
     return msg2;
   }
   if (action === "run") {
     if (!args.changeId) {
       const msg3 = "run requires changeId.";
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const existing = ledger.getChange(args.changeId);
     if (!existing) {
       const msg3 = `No change "${args.changeId}". Plan one first with manage_change action=plan.`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     if (existing.change.status !== "approved") {
       const msg3 = `Change ${args.changeId} is ${existing.change.status} \u2014 it must be approved before execution (manage_change action=approve).`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const playbook = m2.getPlaybook(existing.change.playbookId);
     if (!playbook) {
       ledger.finishChange(args.changeId, "failed", "playbook no longer exists");
       const msg3 = `Playbook ${existing.change.playbookId} no longer exists; change marked failed.`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     if (!ledger.markExecuting(args.changeId)) {
       const msg3 = `Change ${args.changeId} could not transition to executing (status=${existing.change.status}).`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const settings = settingsFromContext(context2);
@@ -352054,7 +352913,7 @@ Next: manage_change action=approve changeId=${changeId}, then action=run.`;
       const errMsg = error40 instanceof Error ? error40.message : String(error40);
       ledger.finishChange(args.changeId, "failed", errMsg);
       const msg3 = `Change ${args.changeId} failed to execute: ${errMsg}`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const finalStatus = deriveFinalStatus(record2);
@@ -352072,19 +352931,19 @@ Next: manage_change action=approve changeId=${changeId}, then action=run.`;
     }
     const msg2 = `Change ${args.changeId} finished with status=${finalStatus} (runId=${record2.runId}).
 ${lines.join("\n")}`;
-    emit8(context2, "manage_change", args, msg2);
+    emit9(context2, "manage_change", args, msg2);
     return msg2;
   }
   if (action === "status") {
     if (!args.changeId) {
       const msg3 = "status requires changeId.";
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const got = ledger.getChange(args.changeId);
     if (!got) {
       const msg3 = `No change "${args.changeId}".`;
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const { change, steps } = got;
@@ -352103,14 +352962,14 @@ ${meta}
 Targets: ${change.targetsSnapshot ?? "n/a"}
 Events:
 ${body}`;
-    emit8(context2, "manage_change", args, msg2);
+    emit9(context2, "manage_change", args, msg2);
     return msg2;
   }
   if (action === "list") {
     const rows = ledger.listChanges({ status: args.status, limit: args.limit ?? 20 });
     if (!rows.length) {
       const msg3 = "No changes recorded yet. Plan one with manage_change action=plan.";
-      emit8(context2, "manage_change", args, msg3);
+      emit9(context2, "manage_change", args, msg3);
       return msg3;
     }
     const body = rows.map(
@@ -352118,18 +352977,18 @@ ${body}`;
     ).join("\n");
     const msg2 = `Changes (${rows.length}):
 ${body}`;
-    emit8(context2, "manage_change", args, msg2);
+    emit9(context2, "manage_change", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit8(context2, "manage_change", args, msg);
+  emit9(context2, "manage_change", args, msg);
   return msg;
 }
 
 // ../../packages/backend/src/services/AgentHelper/tools/trigger_tools.ts
 init_zod();
 var import_crypto6 = require("crypto");
-function emit9(context2, name, input, output) {
+function emit10(context2, name, input, output) {
   context2.sendEvent(context2.sessionId, {
     messageId: context2.messageId,
     type: "tool_call",
@@ -352158,7 +353017,7 @@ async function manageTrigger(args, context2) {
   const m2 = context2.automationManager;
   if (!m2 || typeof m2.listTriggers !== "function") {
     const msg2 = "Automation store with trigger support is not available in this runtime.";
-    emit9(context2, "manage_trigger", args, msg2);
+    emit10(context2, "manage_trigger", args, msg2);
     return msg2;
   }
   const engine = context2.triggerEngine;
@@ -352167,7 +353026,7 @@ async function manageTrigger(args, context2) {
     const all = m2.listTriggers();
     if (!all.length) {
       const msg3 = "No triggers configured.";
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     const body = all.map((t) => {
@@ -352176,14 +353035,14 @@ async function manageTrigger(args, context2) {
     }).join("\n");
     const msg2 = `Triggers (${all.length}):
 ${body}`;
-    emit9(context2, "manage_trigger", args, msg2);
+    emit10(context2, "manage_trigger", args, msg2);
     return msg2;
   }
   if (action === "fires") {
     const fires = engine?.listFires?.() ?? [];
     if (!fires.length) {
       const msg3 = "No trigger firings recorded yet.";
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     const limit2 = args.limit ?? 20;
@@ -352192,23 +353051,23 @@ ${body}`;
     ).join("\n");
     const msg2 = `Recent trigger firings (${Math.min(limit2, fires.length)} of ${fires.length}):
 ${body}`;
-    emit9(context2, "manage_trigger", args, msg2);
+    emit10(context2, "manage_trigger", args, msg2);
     return msg2;
   }
   if (action === "create") {
     if (!args.name) {
       const msg3 = "create requires a name.";
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     if (!args.kind) {
       const msg3 = "create requires a kind (pattern|threshold|webhook|schedule).";
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     if (!args.playbookId) {
       const msg3 = "create requires playbookId.";
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     const entry = {
@@ -352234,20 +353093,20 @@ ${body}`;
     } catch {
     }
     const msg2 = `Created trigger "${entry.name}" (${entry.id}) [${entry.kind}] \u2192 ${entry.action} ${entry.playbookId}.`;
-    emit9(context2, "manage_trigger", args, msg2);
+    emit10(context2, "manage_trigger", args, msg2);
     return msg2;
   }
   if (action === "update") {
     const key = args.id ?? args.name;
     if (!key) {
       const msg3 = "update requires id or name.";
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     const existing = m2.listTriggers().find((t) => t.id === key || t.name.trim().toLowerCase() === key.trim().toLowerCase());
     if (!existing) {
       const msg3 = `No trigger "${key}".`;
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     const merged = {
@@ -352270,14 +353129,14 @@ ${body}`;
     } catch {
     }
     const msg2 = `Updated trigger "${merged.name}" (${merged.id}).`;
-    emit9(context2, "manage_trigger", args, msg2);
+    emit10(context2, "manage_trigger", args, msg2);
     return msg2;
   }
   if (action === "delete") {
     const key = args.id ?? args.name;
     if (!key) {
       const msg3 = "delete requires id or name.";
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     const ok = m2.deleteTrigger(key);
@@ -352288,14 +353147,14 @@ ${body}`;
       }
     }
     const msg2 = ok ? `Deleted trigger "${key}".` : `No trigger "${key}".`;
-    emit9(context2, "manage_trigger", args, msg2);
+    emit10(context2, "manage_trigger", args, msg2);
     return msg2;
   }
   if (action === "enable" || action === "disable") {
     const key = args.id ?? args.name;
     if (!key) {
       const msg3 = `${action} requires id or name.`;
-      emit9(context2, "manage_trigger", args, msg3);
+      emit10(context2, "manage_trigger", args, msg3);
       return msg3;
     }
     const ok = m2.setTriggerEnabled(key, action === "enable");
@@ -352307,11 +353166,11 @@ ${body}`;
       }
     }
     const msg2 = ok ? `Trigger "${key}" ${action}d.` : `No trigger "${key}".`;
-    emit9(context2, "manage_trigger", args, msg2);
+    emit10(context2, "manage_trigger", args, msg2);
     return msg2;
   }
   const msg = `Unknown action "${action}".`;
-  emit9(context2, "manage_trigger", args, msg);
+  emit10(context2, "manage_trigger", args, msg);
   return msg;
 }
 
@@ -352669,10 +353528,10 @@ async function listGatewayMethods(args, context2) {
   const lines = methods.map((mm) => `- ${mm.name} [${mm.category}] ${mm.description}${mm.params ? " (params: " + Object.entries(mm.params).map(([k, v]) => `${k}${v.optional ? "?" : ""}:${v.type}`).join(", ") + ")" : ""}`);
   const out = `Gateway methods (${methods.length} of ${payload.count}, registry v${payload.version}):
 ${lines.join("\n")}`;
-  emit10(context2, "list_gateway_methods", args, out);
+  emit11(context2, "list_gateway_methods", args, out);
   return out;
 }
-function emit10(context2, toolName, input, output) {
+function emit11(context2, toolName, input, output) {
   context2.sendEvent(context2.sessionId, {
     messageId: context2.messageId,
     type: "tool_call",
@@ -352685,7 +353544,7 @@ function obs(context2, toolName, args) {
   const o = context2.observability;
   if (!o) {
     const msg = `${toolName} is not available in this runtime (observability not wired).`;
-    emit10(context2, toolName, args, msg);
+    emit11(context2, toolName, args, msg);
     return { o: null, msg };
   }
   return { o, msg: null };
@@ -352697,7 +353556,7 @@ async function getMetrics(args, context2) {
   const { o, msg } = obs(context2, "get_metrics", args);
   if (!o) return msg;
   const out = args.format === "prometheus" ? o.metricsExport.renderPrometheus() || "# no host metrics recorded yet" : await o.dashboard.summary();
-  emit10(context2, "get_metrics", args, out);
+  emit11(context2, "get_metrics", args, out);
   return out;
 }
 var manageSecretSchema = external_exports.object({
@@ -352712,7 +353571,7 @@ async function manageSecret(args, context2) {
   const v = o.secrets;
   if (!v.unlocked()) {
     const m2 = "Secrets vault is locked \u2014 start RTerm with RTERM_SECRETS_MASTER_KEY set.";
-    emit10(context2, "manage_secret", args, m2);
+    emit11(context2, "manage_secret", args, m2);
     return m2;
   }
   let out;
@@ -352739,7 +353598,7 @@ async function manageSecret(args, context2) {
       out = v.has(args.key) ? `'${args.key}' exists.` : `'${args.key}' does not exist.`;
     }
   }
-  emit10(context2, "manage_secret", args, out);
+  emit11(context2, "manage_secret", args, out);
   return out;
 }
 var manageOncallSchema = external_exports.object({
@@ -352791,7 +353650,7 @@ async function manageOncall(args, context2) {
   } catch (e) {
     out = `on-call error: ${e instanceof Error ? e.message : String(e)}`;
   }
-  emit10(context2, "manage_oncall", args, out);
+  emit11(context2, "manage_oncall", args, out);
   return out;
 }
 var getCostSchema = external_exports.object({
@@ -352815,7 +353674,7 @@ async function getCost(args, context2) {
     const b = o.cost.listBudgets();
     out = b.length ? b.map((x) => `- ${x.id}: ${x.model ?? "*"}/${x.profileId ?? "*"} ${x.period} cap $${x.capUsd}`).join("\n") : "No budgets configured.";
   }
-  emit10(context2, "get_cost", args, out);
+  emit11(context2, "get_cost", args, out);
   return out;
 }
 var manageRecordingSchema = external_exports.object({
@@ -352881,7 +353740,7 @@ async function manageRecording(args, context2) {
   } catch (e) {
     out = `recording error: ${e instanceof Error ? e.message : String(e)}`;
   }
-  emit10(context2, "manage_recording", args, out);
+  emit11(context2, "manage_recording", args, out);
   return out;
 }
 var manageGitopsSchema = external_exports.object({
@@ -352913,7 +353772,7 @@ async function manageGitops(args, context2) {
   } catch (e) {
     out = `gitops error: ${e instanceof Error ? e.message : String(e)}`;
   }
-  emit10(context2, "manage_gitops", args, out);
+  emit11(context2, "manage_gitops", args, out);
   return out;
 }
 var managePlaybookVersionSchema = external_exports.object({
@@ -352960,7 +353819,7 @@ async function managePlaybookVersion(args, context2) {
   } catch (e) {
     out = `playbook error: ${e instanceof Error ? e.message : String(e)}`;
   }
-  emit10(context2, "manage_playbook_version", args, out);
+  emit11(context2, "manage_playbook_version", args, out);
   return out;
 }
 var getCloudInventorySchema = external_exports.object({
@@ -352987,7 +353846,7 @@ async function getCloudInventory(args, context2) {
   } catch (e) {
     out = `cloud error: ${e instanceof Error ? e.message : String(e)}`;
   }
-  emit10(context2, "get_cloud_inventory", args, out);
+  emit11(context2, "get_cloud_inventory", args, out);
   return out;
 }
 var getMonitorStatusSchema = external_exports.object({
@@ -353002,7 +353861,7 @@ async function getMonitorStatus(args, context2) {
   } else {
     out = o.monitorStatus.summary();
   }
-  emit10(context2, "get_monitor_status", args, out);
+  emit11(context2, "get_monitor_status", args, out);
   return out;
 }
 var getLiveDashboardSchema = external_exports.object({
@@ -353018,7 +353877,7 @@ async function getLiveDashboard(args, context2) {
     const s = await o.dashboard.summary();
     out = s;
   }
-  emit10(context2, "get_live_dashboard", args, out);
+  emit11(context2, "get_live_dashboard", args, out);
   return out;
 }
 var ingestApmSpansSchema = external_exports.object({
@@ -353031,7 +353890,7 @@ async function ingestApmSpans(args, context2) {
   const { ingestOtlp: ingestOtlp2 } = await Promise.resolve().then(() => (init_spanLedger(), spanLedger_exports));
   const n2 = ingestOtlp2(o.spanLedger, args.payload, args.defaultService);
   const out = `Ingested ${n2} APM span(s) into the trace store.`;
-  emit10(context2, "ingest_apm_spans", args, out);
+  emit11(context2, "ingest_apm_spans", args, out);
   return out;
 }
 var getApmSummarySchema = external_exports.object({});
@@ -353040,7 +353899,7 @@ async function getApmSummary(_args, context2) {
   if (!o) return msg;
   const stats = o.spanLedger.serviceStats();
   const out = stats.length ? `APM: ${o.spanLedger.size()} spans across ${stats.length} service(s). ` + stats.map((x) => `${x.service}(${x.spans}${x.errors ? ", " + x.errors + " err" : ""})`).join(", ") : "APM: no spans ingested yet.";
-  emit10(context2, "get_apm_summary", _args, out);
+  emit11(context2, "get_apm_summary", _args, out);
   return out;
 }
 var ingestDemBeaconSchema = external_exports.object({
@@ -353051,7 +353910,7 @@ async function ingestDemBeacon(args, context2) {
   if (!o) return msg;
   const s = o.rumLedger.ingestBeacon(args.payload);
   const out = s ? `Ingested RUM beacon for ${s.page}${s.lcpMs ? ` (LCP ${s.lcpMs}ms)` : ""}.` : "Beacon ignored \u2014 needs a `page` field.";
-  emit10(context2, "ingest_dem_beacon", args, out);
+  emit11(context2, "ingest_dem_beacon", args, out);
   return out;
 }
 var getDemSummarySchema = external_exports.object({});
@@ -353060,7 +353919,7 @@ async function getDemSummary(_args, context2) {
   if (!o) return msg;
   const pages = o.rumLedger.pageStats();
   const out = pages.length ? `DEM: ${o.rumLedger.size()} sessions across ${pages.length} page(s). ` + pages.map((p) => `${p.page}(${p.sessions}${p.errorRate ? `, ${(p.errorRate * 100).toFixed(0)}% err` : ""})`).join(", ") : "DEM: no RUM sessions ingested yet.";
-  emit10(context2, "get_dem_summary", _args, out);
+  emit11(context2, "get_dem_summary", _args, out);
   return out;
 }
 var collectInfraSchema = external_exports.object({
@@ -353105,7 +353964,7 @@ async function collectInfra(args, context2) {
   } catch (e) {
     out = `infra collect failed (kubectl or cluster unavailable): ${e instanceof Error ? e.message : String(e)}`;
   }
-  emit10(context2, "collect_infra", args, out);
+  emit11(context2, "collect_infra", args, out);
   return out;
 }
 var manageEtwSchema = external_exports.object({
@@ -353164,7 +354023,7 @@ ${buildStopCommands2(s).join("\n")}`;
   } catch (e) {
     out = `etw error: ${e instanceof Error ? e.message : String(e)}`;
   }
-  emit10(context2, "manage_etw", args, out);
+  emit11(context2, "manage_etw", args, out);
   return out;
 }
 
@@ -353557,6 +354416,46 @@ function buildToolsForModel(readFileSupport) {
       name: "manage_etw",
       description: "Windows ETW diagnostics \u2014 start/stop a trace (logman), parse captured Get-WinEvent/Get-Counter output, list sessions. Use against a Windows host for network/file/registry/process/DNS diagnostics.",
       schema: manageEtwSchema
+    },
+    {
+      name: "manage_incident",
+      description: "Incident bundles \u2014 pack chat + terminals + recording + run id into one INC-* you can reopen (open/get/list/close).",
+      schema: manageIncidentSchema
+    },
+    {
+      name: "manage_collab",
+      description: 'Two-operator session presence: join, takeConn ("I have the conn"), whoHasConn, list.',
+      schema: manageCollabSchema
+    },
+    {
+      name: "manage_jump_path",
+      description: "Named multi-hop jump paths with time-boxed break-glass (define/list/breakGlass/allowed).",
+      schema: manageJumpPathSchema
+    },
+    {
+      name: "manage_approval",
+      description: "Queued HITL approvals with TTL auto-deny and optional two-person approve (request/list/get/decide/sweep).",
+      schema: manageApprovalSchema
+    },
+    {
+      name: "snapshot_output",
+      description: "Remember command output per connection and diff against the last snapshot.",
+      schema: snapshotOutputSchema
+    },
+    {
+      name: "replay_agent_run",
+      description: "Replay agent steps with stubbed tool outputs \u2014 debug without touching live hosts.",
+      schema: replayAgentRunSchema
+    },
+    {
+      name: "plan_offline_join",
+      description: "Plan offline domain join (djoin provision on DC + requestODJ on member) when SMB IPC$ is blocked.",
+      schema: planOfflineJoinSchema
+    },
+    {
+      name: "net_device",
+      description: "Network device helpers: parse CDP neighbors, diff running vs startup config, detect config mode.",
+      schema: netDeviceSchema
     }
   ].map((tool2) => convertToOpenAITool(tool2));
 }
@@ -353617,6 +354516,14 @@ var toolImplementations = {
   collectInfra,
   manageEtw,
   listGatewayMethods,
+  manageIncident,
+  manageCollab,
+  manageJumpPath,
+  manageApproval,
+  snapshotOutput,
+  replayAgentRun,
+  planOfflineJoin,
+  netDevice,
   writeFile,
   editFile,
   writeAndEdit,
@@ -355327,12 +356234,12 @@ function encodeURIPath(str3) {
   return str3.replace(/[^A-Za-z0-9\-._~!$&'()*+,;=:@]+/g, encodeURIComponent);
 }
 var EMPTY = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.create(null));
-var createPathTagFunction = (pathEncoder = encodeURIPath) => function path33(statics, ...params) {
+var createPathTagFunction = (pathEncoder = encodeURIPath) => function path34(statics, ...params) {
   if (statics.length === 1)
     return statics[0];
   let postPath = false;
   const invalidSegments = [];
-  const path34 = statics.reduce((previousValue, currentValue, index2) => {
+  const path35 = statics.reduce((previousValue, currentValue, index2) => {
     if (/[?#]/.test(currentValue)) {
       postPath = true;
     }
@@ -355349,7 +356256,7 @@ var createPathTagFunction = (pathEncoder = encodeURIPath) => function path33(sta
     }
     return previousValue + currentValue + (index2 === params.length ? "" : encoded);
   }, "");
-  const pathOnly = path34.split(/[?#]/, 1)[0];
+  const pathOnly = path35.split(/[?#]/, 1)[0];
   const invalidSegmentPattern = /(?<=^|\/)(?:\.|%2e){1,2}(?=\/|$)/gi;
   let match;
   while ((match = invalidSegmentPattern.exec(pathOnly)) !== null) {
@@ -355370,10 +356277,10 @@ var createPathTagFunction = (pathEncoder = encodeURIPath) => function path33(sta
     }, "");
     throw new OpenAIError(`Path parameters result in path with invalid segments:
 ${invalidSegments.map((e) => e.error).join("\n")}
-${path34}
+${path35}
 ${underline}`);
   }
-  return path34;
+  return path35;
 };
 var path8 = /* @__PURE__ */ createPathTagFunction(encodeURIPath);
 
@@ -355746,11 +356653,11 @@ var AbstractChatCompletionRunner = class extends EventStream {
       this._addMessage(message);
     return chatCompletion;
   }
-  _addMessage(message, emit11 = true) {
+  _addMessage(message, emit12 = true) {
     if (!("content" in message))
       message.content = null;
     this.messages.push(message);
-    if (emit11) {
+    if (emit12) {
       this._emit("message", message);
       if (isToolMessage2(message) && message.content) {
         this._emit("functionToolCallResult", message.content);
@@ -356002,8 +356909,8 @@ var ChatCompletionRunner = class _ChatCompletionRunner extends AbstractChatCompl
     runner._run(() => runner._runTools(client2, params, opts));
     return runner;
   }
-  _addMessage(message, emit11 = true) {
-    super._addMessage(message, emit11);
+  _addMessage(message, emit12 = true) {
+    super._addMessage(message, emit12);
     if (isAssistantMessage(message) && message.content) {
       this._emit("content", message.content);
     }
@@ -360190,9 +361097,9 @@ var OpenAI = class {
     this.apiKey = token;
     return true;
   }
-  buildURL(path33, query, defaultBaseURL) {
+  buildURL(path34, query, defaultBaseURL) {
     const baseURL = !__classPrivateFieldGet(this, _OpenAI_instances, "m", _OpenAI_baseURLOverridden).call(this) && defaultBaseURL || this.baseURL;
-    const url2 = isAbsoluteURL(path33) ? new URL(path33) : new URL(baseURL + (baseURL.endsWith("/") && path33.startsWith("/") ? path33.slice(1) : path33));
+    const url2 = isAbsoluteURL(path34) ? new URL(path34) : new URL(baseURL + (baseURL.endsWith("/") && path34.startsWith("/") ? path34.slice(1) : path34));
     const defaultQuery = this.defaultQuery();
     if (!isEmptyObj(defaultQuery)) {
       query = { ...defaultQuery, ...query };
@@ -360216,24 +361123,24 @@ var OpenAI = class {
    */
   async prepareRequest(request, { url: url2, options }) {
   }
-  get(path33, opts) {
-    return this.methodRequest("get", path33, opts);
+  get(path34, opts) {
+    return this.methodRequest("get", path34, opts);
   }
-  post(path33, opts) {
-    return this.methodRequest("post", path33, opts);
+  post(path34, opts) {
+    return this.methodRequest("post", path34, opts);
   }
-  patch(path33, opts) {
-    return this.methodRequest("patch", path33, opts);
+  patch(path34, opts) {
+    return this.methodRequest("patch", path34, opts);
   }
-  put(path33, opts) {
-    return this.methodRequest("put", path33, opts);
+  put(path34, opts) {
+    return this.methodRequest("put", path34, opts);
   }
-  delete(path33, opts) {
-    return this.methodRequest("delete", path33, opts);
+  delete(path34, opts) {
+    return this.methodRequest("delete", path34, opts);
   }
-  methodRequest(method, path33, opts) {
+  methodRequest(method, path34, opts) {
     return this.request(Promise.resolve(opts).then((opts2) => {
-      return { method, path: path33, ...opts2 };
+      return { method, path: path34, ...opts2 };
     }));
   }
   request(options, remainingRetries = null) {
@@ -360337,8 +361244,8 @@ var OpenAI = class {
     }));
     return { response, options, controller, requestLogID, retryOfRequestLogID, startTime };
   }
-  getAPIList(path33, Page2, opts) {
-    return this.requestAPIList(Page2, { method: "get", path: path33, ...opts });
+  getAPIList(path34, Page2, opts) {
+    return this.requestAPIList(Page2, { method: "get", path: path34, ...opts });
   }
   requestAPIList(Page2, options) {
     const request = this.makeRequest(options, null, void 0);
@@ -360416,8 +361323,8 @@ var OpenAI = class {
   }
   async buildRequest(inputOptions, { retryCount = 0 } = {}) {
     const options = { ...inputOptions };
-    const { method, path: path33, query, defaultBaseURL } = options;
-    const url2 = this.buildURL(path33, query, defaultBaseURL);
+    const { method, path: path34, query, defaultBaseURL } = options;
+    const url2 = this.buildURL(path34, query, defaultBaseURL);
     if ("timeout" in options)
       validatePositiveInteger("timeout", options.timeout);
     options.timeout = options.timeout ?? this.timeout;
@@ -362033,23 +362940,23 @@ function isNullable(schema2) {
   }
   return false;
 }
-function ensureStrictJsonSchema(jsonSchema, path33, root) {
+function ensureStrictJsonSchema(jsonSchema, path34, root) {
   if (typeof jsonSchema === "boolean") {
-    throw new TypeError(`Expected object schema but got boolean; path=${path33.join("/")}`);
+    throw new TypeError(`Expected object schema but got boolean; path=${path34.join("/")}`);
   }
   if (!isObject4(jsonSchema)) {
-    throw new TypeError(`Expected ${JSON.stringify(jsonSchema)} to be an object; path=${path33.join("/")}`);
+    throw new TypeError(`Expected ${JSON.stringify(jsonSchema)} to be an object; path=${path34.join("/")}`);
   }
   const defs = jsonSchema.$defs;
   if (isObject4(defs)) {
     for (const [defName, defSchema] of Object.entries(defs)) {
-      ensureStrictJsonSchema(defSchema, [...path33, "$defs", defName], root);
+      ensureStrictJsonSchema(defSchema, [...path34, "$defs", defName], root);
     }
   }
   const definitions = jsonSchema.definitions;
   if (isObject4(definitions)) {
     for (const [definitionName, definitionSchema] of Object.entries(definitions)) {
-      ensureStrictJsonSchema(definitionSchema, [...path33, "definitions", definitionName], root);
+      ensureStrictJsonSchema(definitionSchema, [...path34, "definitions", definitionName], root);
     }
   }
   const typ = jsonSchema.type;
@@ -362061,31 +362968,31 @@ function ensureStrictJsonSchema(jsonSchema, path33, root) {
   if (isObject4(properties)) {
     for (const [key, value] of Object.entries(properties)) {
       if (!isNullable(value) && !required2.includes(key)) {
-        throw new Error(`Zod field at \`${[...path33, "properties", key].join("/")}\` uses \`.optional()\` without \`.nullable()\` which is not supported by the API. See: https://platform.openai.com/docs/guides/structured-outputs?api-mode=responses#all-fields-must-be-required`);
+        throw new Error(`Zod field at \`${[...path34, "properties", key].join("/")}\` uses \`.optional()\` without \`.nullable()\` which is not supported by the API. See: https://platform.openai.com/docs/guides/structured-outputs?api-mode=responses#all-fields-must-be-required`);
       }
     }
     jsonSchema.required = Object.keys(properties);
     jsonSchema.properties = Object.fromEntries(Object.entries(properties).map(([key, propSchema]) => [
       key,
-      ensureStrictJsonSchema(propSchema, [...path33, "properties", key], root)
+      ensureStrictJsonSchema(propSchema, [...path34, "properties", key], root)
     ]));
   }
   const items = jsonSchema.items;
   if (isObject4(items)) {
-    jsonSchema.items = ensureStrictJsonSchema(items, [...path33, "items"], root);
+    jsonSchema.items = ensureStrictJsonSchema(items, [...path34, "items"], root);
   }
   const anyOf = jsonSchema.anyOf;
   if (Array.isArray(anyOf)) {
-    jsonSchema.anyOf = anyOf.map((variant, i) => ensureStrictJsonSchema(variant, [...path33, "anyOf", String(i)], root));
+    jsonSchema.anyOf = anyOf.map((variant, i) => ensureStrictJsonSchema(variant, [...path34, "anyOf", String(i)], root));
   }
   const allOf = jsonSchema.allOf;
   if (Array.isArray(allOf)) {
     if (allOf.length === 1) {
-      const resolved = ensureStrictJsonSchema(allOf[0], [...path33, "allOf", "0"], root);
+      const resolved = ensureStrictJsonSchema(allOf[0], [...path34, "allOf", "0"], root);
       Object.assign(jsonSchema, resolved);
       delete jsonSchema.allOf;
     } else {
-      jsonSchema.allOf = allOf.map((entry, i) => ensureStrictJsonSchema(entry, [...path33, "allOf", String(i)], root));
+      jsonSchema.allOf = allOf.map((entry, i) => ensureStrictJsonSchema(entry, [...path34, "allOf", String(i)], root));
     }
   }
   if (jsonSchema.default === null) {
@@ -362094,7 +363001,7 @@ function ensureStrictJsonSchema(jsonSchema, path33, root) {
   const ref = jsonSchema.$ref;
   if (ref && hasMoreThanNKeys(jsonSchema, 1)) {
     if (typeof ref !== "string") {
-      throw new TypeError(`Received non-string $ref - ${ref}; path=${path33.join("/")}`);
+      throw new TypeError(`Received non-string $ref - ${ref}; path=${path34.join("/")}`);
     }
     const resolved = resolveRef(root, ref);
     if (typeof resolved === "boolean") {
@@ -362105,7 +363012,7 @@ function ensureStrictJsonSchema(jsonSchema, path33, root) {
     }
     Object.assign(jsonSchema, { ...resolved, ...jsonSchema });
     delete jsonSchema.$ref;
-    return ensureStrictJsonSchema(jsonSchema, path33, root);
+    return ensureStrictJsonSchema(jsonSchema, path34, root);
   }
   return jsonSchema;
 }
@@ -366967,7 +367874,7 @@ function reconcileToolCalls(toolCalls) {
 var TOOL_RESULT_MAX_CHARS = 32768;
 function stringifyToolResult(result) {
   const raw = typeof result === "string" ? result : JSON.stringify(result);
-  return clipTextMiddle(raw, TOOL_RESULT_MAX_CHARS);
+  return redactText(clipTextMiddle(raw, TOOL_RESULT_MAX_CHARS));
 }
 function clipTextMiddle(input, maxChars) {
   if (maxChars <= 0) return "";
@@ -367013,6 +367920,7 @@ var AgentService_v2 = class {
    * agent run (start/finish lifecycle + per-call token usage). */
   agentRunLedger;
   compoundingStore;
+  opsService;
   changeLedger;
   mcpToolService;
   skillService;
@@ -367150,6 +368058,9 @@ var AgentService_v2 = class {
   setCompoundingStore(store) {
     this.compoundingStore = store ?? void 0;
   }
+  setOpsService(svc) {
+    this.opsService = svc ?? void 0;
+  }
   setFeedbackWaiter(waiter) {
     this.waitForFeedback = waiter;
   }
@@ -368675,6 +369586,78 @@ Actually, your intention might be different. Please re-read the description of t
           }
           break;
         }
+        case "manage_incident": {
+          try {
+            const validatedArgs = manageIncidentSchema.parse(toolCall.args || {});
+            result = await toolImplementations.manageIncident(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for manage_incident: ${err.message}`;
+          }
+          break;
+        }
+        case "manage_collab": {
+          try {
+            const validatedArgs = manageCollabSchema.parse(toolCall.args || {});
+            result = await toolImplementations.manageCollab(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for manage_collab: ${err.message}`;
+          }
+          break;
+        }
+        case "manage_jump_path": {
+          try {
+            const validatedArgs = manageJumpPathSchema.parse(toolCall.args || {});
+            result = await toolImplementations.manageJumpPath(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for manage_jump_path: ${err.message}`;
+          }
+          break;
+        }
+        case "manage_approval": {
+          try {
+            const validatedArgs = manageApprovalSchema.parse(toolCall.args || {});
+            result = await toolImplementations.manageApproval(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for manage_approval: ${err.message}`;
+          }
+          break;
+        }
+        case "snapshot_output": {
+          try {
+            const validatedArgs = snapshotOutputSchema.parse(toolCall.args || {});
+            result = await toolImplementations.snapshotOutput(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for snapshot_output: ${err.message}`;
+          }
+          break;
+        }
+        case "replay_agent_run": {
+          try {
+            const validatedArgs = replayAgentRunSchema.parse(toolCall.args || {});
+            result = await toolImplementations.replayAgentRun(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for replay_agent_run: ${err.message}`;
+          }
+          break;
+        }
+        case "plan_offline_join": {
+          try {
+            const validatedArgs = planOfflineJoinSchema.parse(toolCall.args || {});
+            result = await toolImplementations.planOfflineJoin(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for plan_offline_join: ${err.message}`;
+          }
+          break;
+        }
+        case "net_device": {
+          try {
+            const validatedArgs = netDeviceSchema.parse(toolCall.args || {});
+            result = await toolImplementations.netDevice(validatedArgs, executionContext);
+          } catch (err) {
+            result = `Parameter validation error for net_device: ${err.message}`;
+          }
+          break;
+        }
         case "manage_device_memory": {
           try {
             const validatedArgs = manageDeviceMemorySchema.parse(toolCall.args || {});
@@ -369152,6 +370135,22 @@ Actually, your intention might be different. Please re-read the description of t
         return ti.manageGoal(args, executionContext);
       case "estate_facts":
         return ti.estateFacts(args, executionContext);
+      case "manage_incident":
+        return ti.manageIncident(args, executionContext);
+      case "manage_collab":
+        return ti.manageCollab(args, executionContext);
+      case "manage_jump_path":
+        return ti.manageJumpPath(args, executionContext);
+      case "manage_approval":
+        return ti.manageApproval(args, executionContext);
+      case "snapshot_output":
+        return ti.snapshotOutput(args, executionContext);
+      case "replay_agent_run":
+        return ti.replayAgentRun(args, executionContext);
+      case "plan_offline_join":
+        return ti.planOfflineJoin(args, executionContext);
+      case "net_device":
+        return ti.netDevice(args, executionContext);
       case "list_gateway_methods":
         return ti.listGatewayMethods(args, executionContext);
       case "collect_facts":
@@ -369610,6 +370609,7 @@ ${reminder}`;
       sessionLogger: this.sessionLogger,
       agentRunLedger: this.agentRunLedger,
       compoundingStore: this.compoundingStore,
+      opsService: this.opsService,
       changeLedger: this.changeLedger,
       triggerEngine: this.triggerEngine,
       observability: this.observability,
@@ -373029,6 +374029,154 @@ var import_websocket_server = __toESM(require_websocket_server(), 1);
 
 // ../../packages/backend/src/services/Gateway/WebSocketGatewayAdapter.ts
 var import_node_module4 = require("node:module");
+
+// ../../packages/backend/src/services/Gateway/opsBridge.ts
+function requireOps(deps) {
+  const o = deps.ops();
+  if (!o) throw new Error("ops service is not available on this runtime");
+  return o;
+}
+var DEFAULT_APPROVAL_TTL_SECONDS = 900;
+function createOpsBridge(deps) {
+  return {
+    // ── collab ─────────────────────────────────────────────────────────────
+    collabJoin: async (p) => requireOps(deps).joinCollab(p.sessionId, p.operator),
+    collabTakeConn: async (p) => requireOps(deps).takeConn(p.sessionId, p.operator),
+    collabWhoHasConn: async (p) => requireOps(deps).whoHasConn(p.sessionId),
+    collabList: async () => ({ sessions: requireOps(deps).listCollabSessions() }),
+    // ── incidents ──────────────────────────────────────────────────────────
+    incidentOpen: async (p) => requireOps(deps).openIncident(p.title, {
+      sessionId: p.chatId,
+      tabIds: p.terminals,
+      recordingId: p.recordingId,
+      runId: p.runId,
+      notes: p.notes
+    }),
+    incidentGet: async (p) => {
+      const inc = requireOps(deps).getIncident(p.id);
+      if (!inc) throw new Error(`no incident ${p.id}`);
+      return inc;
+    },
+    incidentList: async (p) => ({ incidents: requireOps(deps).listIncidents(p?.status) }),
+    incidentClose: async (p) => {
+      const inc = requireOps(deps).closeIncident(p.id, p.notes);
+      if (!inc) throw new Error(`no incident ${p.id}`);
+      return inc;
+    },
+    // ── jump paths / break-glass ───────────────────────────────────────────
+    jumpPathDefine: async (p) => requireOps(deps).defineJumpPath(p.name, p.hops),
+    jumpPathList: async () => ({ paths: requireOps(deps).listJumpPaths() }),
+    jumpPathBreakGlass: async (p) => requireOps(deps).grantBreakGlass(p.name, Math.max(0, p.ttlSeconds) * 1e3),
+    jumpPathAllowed: async (p) => requireOps(deps).pathAllowed(p.name),
+    // ── output snapshots ───────────────────────────────────────────────────
+    snapshotRemember: async (p) => requireOps(deps).rememberOutput(p.connection, p.command, p.output),
+    snapshotList: async (p) => ({ snapshots: requireOps(deps).listSnapshots(p?.connection) }),
+    snapshotDiff: async (p) => requireOps(deps).diffOutput(p.connection, p.command, p.output),
+    // ── approvals ──────────────────────────────────────────────────────────
+    approvalRequest: async (p) => requireOps(deps).requestApproval(
+      p.command,
+      Math.max(1, p.ttlSeconds ?? DEFAULT_APPROVAL_TTL_SECONDS) * 1e3,
+      p.twoPerson === true
+    ),
+    approvalList: async (p) => ({ approvals: requireOps(deps).listApprovals(p?.state) }),
+    approvalGet: async (p) => {
+      const a = requireOps(deps).getApproval(p.id);
+      if (!a) throw new Error(`no approval ${p.id}`);
+      return a;
+    },
+    approvalDecide: async (p) => requireOps(deps).decideApproval(p.id, p.who, p.approve),
+    approvalSweep: async () => ({ expired: requireOps(deps).sweepExpiredApprovals() }),
+    // ── agent replay ───────────────────────────────────────────────────────
+    replayRun: async (p) => requireOps(deps).replay(
+      p.runId,
+      p.steps.map((s) => ({
+        tool: s.tool,
+        args: s.args && typeof s.args === "object" && !Array.isArray(s.args) ? s.args : {},
+        stub: typeof s.output === "string" ? s.output : ""
+      }))
+    ),
+    // ── offline domain join ────────────────────────────────────────────────
+    djoinPlan: async (p) => requireOps(deps).planOfflineJoin(p),
+    // ── network device ─────────────────────────────────────────────────────
+    netParseCdp: async (p) => ({ neighbors: requireOps(deps).parseCdp(p.output) }),
+    netConfigDiff: async (p) => requireOps(deps).configDiff(p.running, p.startup),
+    netInConfigMode: async (p) => ({ inConfigMode: requireOps(deps).inConfigMode(p.prompt) })
+  };
+}
+var OPS_METHODS = [
+  "ops:collabJoin",
+  "ops:collabTakeConn",
+  "ops:collabWhoHasConn",
+  "ops:collabList",
+  "ops:incidentOpen",
+  "ops:incidentGet",
+  "ops:incidentList",
+  "ops:incidentClose",
+  "ops:jumpPathDefine",
+  "ops:jumpPathList",
+  "ops:jumpPathBreakGlass",
+  "ops:jumpPathAllowed",
+  "ops:snapshotRemember",
+  "ops:snapshotList",
+  "ops:snapshotDiff",
+  "ops:approvalRequest",
+  "ops:approvalList",
+  "ops:approvalGet",
+  "ops:approvalDecide",
+  "ops:approvalSweep",
+  "ops:replayRun",
+  "ops:djoinPlan",
+  "ops:netParseCdp",
+  "ops:netConfigDiff",
+  "ops:netInConfigMode"
+];
+var OPS_METHOD_INFO = [
+  { name: "ops:collabJoin", description: "Join a shared agent session as an operator (two-operator collab).", since: "3.8.1" },
+  { name: "ops:collabTakeConn", description: "Take the conn for a shared session \u2014 records who is currently driving.", since: "3.8.1" },
+  { name: "ops:collabWhoHasConn", description: "Who currently holds the conn for a session, plus joined operators.", since: "3.8.1" },
+  { name: "ops:collabList", description: "List sessions with operators and current holder.", since: "3.8.1" },
+  { name: "ops:incidentOpen", description: "Open an incident bundle (chat + terminals + recording + run id). Persisted.", since: "3.8.1" },
+  { name: "ops:incidentGet", description: "Fetch one incident bundle by id.", since: "3.8.1" },
+  { name: "ops:incidentList", description: "List incident bundles (optionally by status).", since: "3.8.1" },
+  { name: "ops:incidentClose", description: "Close an incident bundle with optional notes.", since: "3.8.1" },
+  { name: "ops:jumpPathDefine", description: "Define a named multi-hop jump path (laptop \u2192 jump \u2192 target).", since: "3.8.1" },
+  { name: "ops:jumpPathList", description: "List defined jump paths and their break-glass state.", since: "3.8.1" },
+  { name: "ops:jumpPathBreakGlass", description: "Grant time-boxed break-glass (TTL seconds) on a jump path.", since: "3.8.1" },
+  { name: "ops:jumpPathAllowed", description: "Is a jump path usable right now (break-glass valid) or expired?", since: "3.8.1" },
+  { name: "ops:snapshotRemember", description: "Store command output as the baseline for a connection+command.", since: "3.8.1" },
+  { name: "ops:snapshotList", description: "List stored output snapshots.", since: "3.8.1" },
+  { name: "ops:snapshotDiff", description: "Diff new output against the stored baseline, then update the baseline.", since: "3.8.1" },
+  { name: "ops:approvalRequest", description: "Request an approval with a TTL; twoPerson requires two distinct approvers.", since: "3.8.1" },
+  { name: "ops:approvalList", description: "List approvals (sweeps expired first).", since: "3.8.1" },
+  { name: "ops:approvalGet", description: "Get one approval by id.", since: "3.8.1" },
+  { name: "ops:approvalDecide", description: "Approve or deny an approval as a named person.", since: "3.8.1" },
+  { name: "ops:approvalSweep", description: "Expire pending approvals past their TTL; returns the count.", since: "3.8.1" },
+  { name: "ops:replayRun", description: "Replay agent steps with stubbed tool outputs \u2014 debug without touching live hosts.", since: "3.8.1" },
+  { name: "ops:djoinPlan", description: "Plan offline domain join (djoin provision + request) across a DC and a member.", since: "3.8.1" },
+  { name: "ops:netParseCdp", description: "Parse `show cdp neighbors` output into structured neighbors.", since: "3.8.1" },
+  { name: "ops:netConfigDiff", description: "Diff running-config vs startup-config for a network device.", since: "3.8.1" },
+  { name: "ops:netInConfigMode", description: "Detect whether a device prompt is in config mode.", since: "3.8.1" }
+];
+
+// ../../packages/backend/src/services/security/tokenScopes.ts
+var SCOPE_FULL = "*";
+function methodAllowed(method, scopes) {
+  if (!scopes || scopes.length === 0) return true;
+  if (scopes.includes(SCOPE_FULL)) return true;
+  const m2 = String(method || "");
+  for (const s of scopes) {
+    if (s === m2) return true;
+    if (s.endsWith(":*")) {
+      const prefix = s.slice(0, -1);
+      if (m2.startsWith(prefix)) return true;
+      if (prefix === "terminals:" && m2.startsWith("terminal:")) return true;
+    }
+    if (s.endsWith("*") && m2.startsWith(s.slice(0, -1))) return true;
+  }
+  return false;
+}
+
+// ../../packages/backend/src/services/Gateway/WebSocketGatewayAdapter.ts
 var import_meta7 = {};
 var nodeRequire = (0, import_node_module4.createRequire)(
   typeof __filename !== "undefined" ? __filename : import_meta7.url
@@ -373133,6 +374281,7 @@ var WebSocketGatewayAdapter = class {
   server = null;
   transportIdBySocket = /* @__PURE__ */ new Map();
   isSameMachineBySocket = /* @__PURE__ */ new WeakMap();
+  scopesBySocket = /* @__PURE__ */ new WeakMap();
   serverFactory;
   logger;
   start() {
@@ -373230,6 +374379,12 @@ var WebSocketGatewayAdapter = class {
       this.isLoopbackAddress(String(remote))
     );
     this.gateway.registerTransport(transport);
+    const token = this.extractAccessToken(request);
+    const scopeFn = this.options.accessTokenAuth?.scopesForToken;
+    if (token && scopeFn) {
+      const scopes = await scopeFn(token);
+      if (scopes && scopes.length) this.scopesBySocket.set(socket, scopes);
+    }
     state.authorized = true;
     this.logger.info(
       `[WebSocketGatewayAdapter] Client connected: ${remote} (${transport.id})`
@@ -373527,6 +374682,13 @@ var WebSocketGatewayAdapter = class {
     );
   }
   async executeRequest(request, socket) {
+    const scopes = this.scopesBySocket.get(socket);
+    if (scopes && !methodAllowed(request.method, scopes)) {
+      throw new WebSocketRpcError(
+        "FORBIDDEN",
+        `Token is not allowed to call ${request.method}`
+      );
+    }
     const params = request.params ?? {};
     if (request.method.startsWith("observability:")) {
       const bridge = this.options.observabilityBridge;
@@ -373569,6 +374731,24 @@ var WebSocketGatewayAdapter = class {
       }
       return await fn(params);
     }
+    if (request.method.startsWith("ops:")) {
+      const ops = this.options.opsBridge;
+      if (!ops) {
+        throw new WebSocketRpcError(
+          "METHOD_NOT_FOUND",
+          `${request.method} is not available on this websocket gateway.`
+        );
+      }
+      const opName = request.method.slice("ops:".length);
+      const opFn = ops[opName];
+      if (typeof opFn !== "function") {
+        throw new WebSocketRpcError(
+          "METHOD_NOT_FOUND",
+          `Unknown ops method: ${request.method}`
+        );
+      }
+      return await opFn(params);
+    }
     switch (request.method) {
       case "gateway:ping":
         return { pong: true, ts: Date.now() };
@@ -373576,7 +374756,11 @@ var WebSocketGatewayAdapter = class {
         return { sameMachine: this.isSameMachineBySocket.get(socket) === true };
       case "gateway:describe": {
         const obs2 = OBSERVABILITY_METHODS.map((name) => ({ name }));
-        const payload = buildDescribePayload(obs2);
+        const opsMethods = OPS_METHODS.map((name) => {
+          const info = OPS_METHOD_INFO.find((m2) => m2.name === name);
+          return { name, description: info?.description, since: info?.since };
+        });
+        const payload = buildDescribePayload([...obs2, ...opsMethods]);
         const category = typeof params.category === "string" && params.category ? params.category : void 0;
         const prefix = typeof params.prefix === "string" && params.prefix ? params.prefix : void 0;
         let methods = payload.methods;
@@ -382942,20 +384126,25 @@ var FileAccessTokenStore = class {
     });
   }
   async verify(tokenRaw) {
+    const identified = await this.identify(tokenRaw);
+    return identified !== null;
+  }
+  /** Return the matching token's id+name, or null. Used as operator identity. */
+  async identify(tokenRaw) {
     const token = String(tokenRaw || "").trim();
-    if (!token) return false;
+    if (!token) return null;
     const payload = await this.readPayload();
     for (const record2 of payload.tokens) {
       try {
         const expected = Buffer.from(record2.tokenHash, "base64");
         const actual = await deriveTokenHash(token, record2.tokenSalt);
         if (expected.length === actual.length && (0, import_node_crypto19.timingSafeEqual)(expected, actual)) {
-          return true;
+          return { id: record2.id, name: record2.name };
         }
       } catch {
       }
     }
-    return false;
+    return null;
   }
   async runExclusive(operation) {
     const run = this.mutationQueue.then(operation, operation);
@@ -384986,8 +386175,8 @@ var IdleTimeoutService = class {
 };
 
 // ../../packages/backend/src/services/Gateway/restApi.ts
-function matchRestRoute(routes, method, path33) {
-  const normalized = path33.replace(/\/+$/, "") || "/";
+function matchRestRoute(routes, method, path34) {
+  const normalized = path34.replace(/\/+$/, "") || "/";
   const verb = method.toUpperCase();
   for (const route of routes) {
     if (route.method !== verb) continue;
@@ -393116,11 +394305,11 @@ function createObservability(deps) {
   const policyEngine = new AgtPolicyEngine({
     loadPolicy: async () => {
       const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta8.url);
-      const fs24 = req("node:fs");
-      const path33 = req("node:path");
-      const policyPath = path33.join(".", "policy.yaml");
-      if (fs24.existsSync(policyPath)) {
-        return parsePolicyYaml(fs24.readFileSync(policyPath, "utf8"));
+      const fs25 = req("node:fs");
+      const path34 = req("node:path");
+      const policyPath = path34.join(".", "policy.yaml");
+      if (fs25.existsSync(policyPath)) {
+        return parsePolicyYaml(fs25.readFileSync(policyPath, "utf8"));
       }
       return {
         name: "rterm-default",
@@ -393162,18 +394351,18 @@ function createObservability(deps) {
   const scanRoots = [pluginScanRoot, "./plugins"];
   try {
     const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta8.url);
-    const fs24 = req("node:fs");
-    if (fs24.existsSync(bundlePluginRoot)) scanRoots.push(bundlePluginRoot);
+    const fs25 = req("node:fs");
+    if (fs25.existsSync(bundlePluginRoot)) scanRoots.push(bundlePluginRoot);
   } catch {
   }
   try {
     const req = (0, import_node_module5.createRequire)(typeof __filename !== "undefined" ? __filename : import_meta8.url);
-    const fs24 = req("node:fs");
-    const path33 = req("node:path");
+    const fs25 = req("node:fs");
+    const path34 = req("node:path");
     const resourcesPath = process.resourcesPath;
     if (resourcesPath) {
-      const resourcesPlugins = path33.join(resourcesPath, "plugins");
-      if (fs24.existsSync(resourcesPlugins)) scanRoots.push(resourcesPlugins);
+      const resourcesPlugins = path34.join(resourcesPath, "plugins");
+      if (fs25.existsSync(resourcesPlugins)) scanRoots.push(resourcesPlugins);
     }
   } catch {
   }
@@ -395860,9 +397049,9 @@ function numberFromEnv(name, fallback) {
 function resolveDataDir() {
   const custom3 = (import_node_process2.default.env.GYBACKEND_DATA_DIR || "").trim();
   if (custom3) {
-    return import_node_path29.default.resolve(custom3);
+    return import_node_path30.default.resolve(custom3);
   }
-  return import_node_path29.default.join(import_node_process2.default.cwd(), ".gybackend-data");
+  return import_node_path30.default.join(import_node_process2.default.cwd(), ".gybackend-data");
 }
 async function startGyBackend() {
   const dataDir = resolveDataDir();
@@ -395895,7 +397084,7 @@ async function startGyBackend() {
   const modelCapabilityService = new ModelCapabilityService();
   const imageAttachmentService = new ImageAttachmentService(dataDir);
   const terminalStateStore = new TerminalStateStore(
-    import_node_path29.default.join(dataDir, "terminal-tabs-state.json")
+    import_node_path30.default.join(dataDir, "terminal-tabs-state.json")
   );
   const terminalService = new TerminalService({
     terminalStateStore
@@ -395986,6 +397175,9 @@ async function startGyBackend() {
   const { CompoundingStore: CompoundingStore2 } = await Promise.resolve().then(() => (init_compoundingStore(), compoundingStore_exports));
   const compoundingStore = new CompoundingStore2();
   agentService.setCompoundingStore(compoundingStore);
+  const { OpsService: OpsService2 } = await Promise.resolve().then(() => (init_opsService(), opsService_exports));
+  const opsService = new OpsService2();
+  agentService.setOpsService(opsService);
   try {
     const { connectionIdentity: connectionIdentity2 } = await Promise.resolve().then(() => (init_compoundingKnowledge(), compoundingKnowledge_exports));
     const winrm = settingsService.getSettings()?.connections?.winrm ?? [];
@@ -396111,7 +397303,7 @@ async function startGyBackend() {
     console.warn("[gybackend] Plugin tool wiring skipped:", e instanceof Error ? e.message : String(e));
   });
   if (settingsService.getSettings().sessionLogging?.enabled) {
-    const logDir = import_node_path29.default.join(
+    const logDir = import_node_path30.default.join(
       import_node_process2.default.env.GYSHELL_STORE_DIR || "",
       "session-logs"
     );
@@ -396229,21 +397421,21 @@ async function startGyBackend() {
     authFailureLimit: 5,
     authLockoutMs: 6e4
   });
-  const settingsDir = import_node_path29.default.dirname(settingsService.getSettingsPath?.() ?? "");
-  const backupsDir = settingsDir ? import_node_path29.default.join(settingsDir, "backups") : "";
+  const settingsDir = import_node_path30.default.dirname(settingsService.getSettingsPath?.() ?? "");
+  const backupsDir = settingsDir ? import_node_path30.default.join(settingsDir, "backups") : "";
   const settingsBackupService = new SettingsBackupService(
     backupsDir ? {
-      read: () => import_node_fs13.default.readFileSync(settingsService.getSettingsPath(), "utf8"),
-      write: (c) => import_node_fs13.default.writeFileSync(settingsService.getSettingsPath(), c),
-      listBackups: () => import_node_fs13.default.existsSync(backupsDir) ? import_node_fs13.default.readdirSync(backupsDir) : [],
-      readBackup: (n2) => import_node_fs13.default.readFileSync(import_node_path29.default.join(backupsDir, n2), "utf8"),
+      read: () => import_node_fs14.default.readFileSync(settingsService.getSettingsPath(), "utf8"),
+      write: (c) => import_node_fs14.default.writeFileSync(settingsService.getSettingsPath(), c),
+      listBackups: () => import_node_fs14.default.existsSync(backupsDir) ? import_node_fs14.default.readdirSync(backupsDir) : [],
+      readBackup: (n2) => import_node_fs14.default.readFileSync(import_node_path30.default.join(backupsDir, n2), "utf8"),
       writeBackup: (n2, c) => {
-        import_node_fs13.default.mkdirSync(backupsDir, { recursive: true });
-        import_node_fs13.default.writeFileSync(import_node_path29.default.join(backupsDir, n2), c);
+        import_node_fs14.default.mkdirSync(backupsDir, { recursive: true });
+        import_node_fs14.default.writeFileSync(import_node_path30.default.join(backupsDir, n2), c);
       },
       deleteBackup: (n2) => {
-        const p = import_node_path29.default.join(backupsDir, n2);
-        if (import_node_fs13.default.existsSync(p)) import_node_fs13.default.unlinkSync(p);
+        const p = import_node_path30.default.join(backupsDir, n2);
+        if (import_node_fs14.default.existsSync(p)) import_node_fs14.default.unlinkSync(p);
       }
     } : { read: () => "", write: () => {
     }, listBackups: () => [], readBackup: () => "", writeBackup: () => {
@@ -396751,6 +397943,9 @@ async function startGyBackend() {
         observabilityBridge: createObservabilityBridge({
           observability: () => observability,
           terminalService: () => terminalService
+        }),
+        opsBridge: createOpsBridge({
+          ops: () => opsService
         })
       });
       restDispatchTarget = adapter;