ryco-cli 0.1.13 → 0.1.15

package/dist/bin.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { $ as AgentControlExternalOverviewResult, $a as DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH, $i as ThreadTurnDiffCompletedPayload$1, $n as ClaudeSettings, $r as OrchestrationEventType, $t as AgentControlMcpRecentActivityResult, A as AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS, Aa as ThreadPriorityBatchId, An as AtlassianConnectionStatus, Ao as ApprovalRequestId, At as AgentControlMcpProposeAutomationUpdateInput, B as AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES, Ba as defaultInstanceIdForDriver, Bi as ThreadGoalUpdatedPayload$1, Bn as McpProviderCapabilities, Bo as MessageId, Br as DEFAULT_PROJECT_METADATA_DIR, Bt as AgentControlMcpProposeProjectCreateInput, C as AGENT_CONTROL_DEVICE_ACTION_KINDS, Ci as ProjectCreatedPayload$1, Cn as DeviceUdid, Co as RelayProtocolVersion, Cr as ProviderSteerTurnInput, Ct as AgentControlMcpListThreadsInput, D as AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES, Di as ProjectScript, Dn as AtlassianCapability, Do as AuthRevokeClientSessionInput, Dr as CONTEXT_HANDOFF_ACTIVITY_KIND, Dt as AgentControlMcpOrchestrationEventsResult, E as AGENT_CONTROL_EXTERNAL_MCP_TOOLS, Ea as VcsProcessExitError, Ei as ProjectMetadataDir, En as ThreadPriorityRpcError, Eo as AuthCreatePairingCredentialInput, Er as AgentTokenMode, Et as AgentControlMcpOperationalReadInput, F as AGENT_CONTROL_MCP_TOOLS, Fa as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, Fi as ThreadArchivedPayload$1, Fn as McpInventoryResource, Fo as CommandId, Fr as ContextHandoffDigest, Ft as AgentControlMcpProposeDeviceInstallInput, G as AgentControlAutomationDefinition, Ga as TerminalNotRunningError, Gi as ThreadProposedPlanUpsertedPayload$1, Gn as McpServerWritableConfig, Gr as OrchestrationAggregateKind, Gt as AgentControlMcpReadAutomationInput, H as AgentControlActionKind, Hi as ThreadMessageSentPayload, Hn as McpServer, Ho as PositiveInt, Hr as ModelSelection, Ht as AgentControlMcpProposeProjectUpdateInput, I as AGENT_CONTROL_MCP_TOOL_NAMES, Ia as DEFAULT_MODEL, Ii as ThreadAttachedToWorktreePayload$1, In as McpInventoryResourceTemplate, Io as ContextHandoffId, Ir as ContextHandoffEndpointSnapshot, It as AgentControlMcpProposeDeviceLaunchInput, J as AgentControlAutomationRunId, Ja as EDITORS, Ji as ThreadSessionSetPayload$1, Jn as McpWorkspaceId, Jr as OrchestrationCheckpointSummary, Jt as AgentControlMcpReadDeviceContentInput, K as AgentControlAutomationId, Ka as TerminalSessionLookupError, Ki as ThreadRevertedPayload$1, Kn as McpSettingsError, Kr as OrchestrationCheckpointFile, Kt as AgentControlMcpReadAutomationResult, L as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT, La as MODEL_SLUG_ALIASES_BY_PROVIDER, Li as ThreadCreatedPayload$1, Ln as McpInventoryTool, Lo as EnvironmentId, Lr as ContextHandoffInspectionError, Lt as AgentControlMcpProposeDeviceOpenUrlInput, M as AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS, Ma as ThreadPriorityFingerprint, Mi as ProviderSessionRuntimeStatus, Mn as GitCommandError, Mo as AtlassianResourceId, Mr as ChatAttachment, Mt as AgentControlMcpProposeDeviceBootInput, N as AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS, Ni as RuntimeMode, Nn as GitManagerError, No as AuthSessionId, Nr as ClientOrchestrationCommand, Nt as AgentControlMcpProposeDeviceDetachInput, O as AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS, Oi as ProjectionPendingApprovalDecision, On as AtlassianConnectionError, Oo as AuthRevokePairingLinkInput, Or as CONTEXT_HANDOFF_ERROR_MAX_CHARS, Ot as AgentControlMcpProposeAutomationCancelInput, P as AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS, Pa as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, Pi as ThreadActivityAppendedPayload$1, Pn as TextGenerationError, Po as CheckpointRef, Pr as ContextHandoffActivityPayload, Pt as AgentControlMcpProposeDeviceInputInput, Q as AgentControlExternalIntegration, Qa as DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES, Qi as ThreadTokenModeSetPayload$1, Qn as ServerProviderUpdateError, Qo as TurnId, Qr as OrchestrationEventMetadata, Qt as AgentControlMcpReadThreadResult, R as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX, Ra as ProviderDriverKind, Ri as ThreadDeletedPayload$1, Rn as McpListServersResult, Ro as EventId, Rr as ContextHandoffMode, Rt as AgentControlMcpProposeDeviceRecordingInput, S as AGENT_CONTROL_CAPABILITIES, Sa as SourceControlRepositoryError, Si as ProjectAvatarSetPayload$1, Sn as DeviceRpcError, So as RelayFrame, Sr as ProviderSessionStartInput, St as AgentControlMcpListProjectsResult, T as AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE, Ti as ProjectMetaUpdatedPayload$1, Tn as ThreadPriorityCandidateRanking, To as AuthClientMetadataDeviceType, Tr as ProviderStopSessionInput, Tt as AgentControlMcpMutationResult, U as AgentControlActionPlan, Ua as TerminalCwdError, Ui as ThreadMetaUpdatedPayload$1, Un as McpServerConfig, Uo as ProjectId, Ur as ORCHESTRATION_WS_METHODS, Ut as AgentControlMcpProposeSettingsChangeInput, V as AGENT_CONTROL_WS_METHODS, Va as isProviderDriverKind, Vi as ThreadInteractionModeSetPayload$1, Vn as McpProviderSupport, Vo as NonNegativeInt, Vr as DEFAULT_PROVIDER_INTERACTION_MODE, Vt as AgentControlMcpProposeProjectRemoveInput, W as AgentControlAutomation, Wa as TerminalHistoryError, Wi as ThreadPriorityProjectedRanking, Wn as McpServerName, Wr as OrchestrationActorKind, Wt as AgentControlMcpProviderRuntimeEventsResult, X as AgentControlExternalCapabilitiesResult, Xa as DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH, Xi as ThreadSettlementOverride, Xn as UsageReadError, Xo as ThreadId, Xr as OrchestrationDispatchCommandError, Xt as AgentControlMcpReadDeviceStateResult, Y as AgentControlCapability, Ya as OpenError, Yi as ThreadSettledPayload$1, Yn as OpinionatedPluginError, Yr as OrchestrationCommandReceiptStatus, Yt as AgentControlMcpReadDeviceStateInput, Z as AgentControlExternalCreateTaskInput, Za as DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH, Zi as ThreadStatusBucketOverriddenPayload$1, Zn as ServerProvider, Zo as TrimmedNonEmptyString, Zr as OrchestrationEvent, Zt as AgentControlMcpReadThreadInput, _ as ProjectWriteFileError, _a as WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES, _i as OrchestrationThreadHistoryCursor, _n as AgentControlRpcError, _o as RELAY_MAX_RPC_MESSAGE_BYTES, _r as isToolLifecycleItemType, _t as AgentControlMcpListAutomationsInput, a as WS_METHODS, aa as WorktreeCreatedPayload$1, ai as OrchestrationGetWorkflowScriptError, an as AgentControlOperationId, ao as LOCAL_INTRODUCTION_MAX_BODY_BYTES, ar as OpenCodeSettings, at as AgentControlIntegrationId, b as AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS, bn as DEVICE_SWIPE_DURATION_MAX_MS, bo as RelayChannelId, br as ProviderRespondToUserInputInput, bt as AgentControlMcpListDevicesResult, c as WsRpcGroup, ca as WorktreeMetaUpdatedPayload$1, ci as OrchestrationProposedPlanId, cn as AgentControlPlanDigest, co as HubEnrollmentCeremonyDetail, cr as ThreadEnvMode, ct as AgentControlMcpControlRequestResult, da as PullRequestState, di as OrchestrationSession, dn as AgentControlProposal, do as RELAY_AUTHENTICATION_DEADLINE_MS, dr as KeybindingsConfigError, dt as AgentControlMcpDiagnosticsSummaryResult, ea as ThreadTurnInterruptRequestedPayload$1, ei as OrchestrationGetFullThreadDiffError, en as AgentControlMcpSendMessageInput, eo as DesktopNativeNodeClaimCommitRequest, er as CodexSettings, et as AgentControlExternalProjectScope, f as ProjectListEntriesError, fa as StatusBucket, fi as OrchestrationSessionStatus, fn as AgentControlProposalId, fo as RELAY_FRAME_TYPES, fr as MODEL_PICKER_JUMP_KEYBINDING_COMMANDS, ft as AgentControlMcpInstallation, g as ProjectStageFileReferenceError, ga as WORK_ITEM_DETAIL_BODY_MAX_BYTES, gi as OrchestrationThreadActivityTone, gn as AgentControlRiskTag, go as RELAY_MAX_RETRY_AFTER_MS, gr as ToolLifecycleItemType, gt as AgentControlMcpListAutomationRunsResult, h as ProjectSearchEntriesError, ha as ThreadGoal, hi as OrchestrationThread, hn as AgentControlResultEnvelope, ho as RELAY_MAX_DATA_FRAME_BYTES, hr as RuntimeSubagentStatus, ht as AgentControlMcpListAutomationRunsInput, i as fromLenientJson, ia as WorktreeArchivedPayload$1, ii as OrchestrationGetTurnDiffResult, in as AgentControlOperation, io as LOCAL_INTRODUCTION_DESCRIPTOR_PATH, ir as GrokSettings, it as AgentControlExternalWaitForTaskInput, j as AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS, ja as ThreadPriorityCandidateId, ji as ProviderInteractionMode, jn as AtlassianProduct, jo as AtlassianConnectionId, jr as CONTEXT_HANDOFF_WS_METHODS, jt as AgentControlMcpProposeDeviceAttachInput, k as AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS, ka as VcsUnsupportedOperationError, ki as ProjectionPendingApprovalStatus, kn as AtlassianConnectionKind, ko as AuthRpcError, kr as CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES, kt as AgentControlMcpProposeAutomationCreateInput, l as FilesystemBrowseError, la as WorktreeRestoredPayload$1, li as OrchestrationReadModel, ln as AgentControlPrincipal, lo as HubEnrollmentStartResult, lr as KeybindingRule, lt as AgentControlMcpCreateThreadsInput, m as ProjectReadFileError, ma as WorktreeId, mi as OrchestrationStopBackgroundTaskError, mn as AgentControlRequestId, mr as THREAD_JUMP_KEYBINDING_COMMANDS, mt as AgentControlMcpInterruptThreadInput, n as decodeJsonResult, na as ThreadUnsettledPayload$1, ni as OrchestrationGetTaskOutputError, nn as AgentControlMcpUpdateThreadInput, no as LOCAL_INTRODUCTION_COMPLETE_PATH, nr as CursorSettings, nt as AgentControlExternalTaskId, o as WsDeviceRpcGroup, oa as WorktreeDeletedPayload$1, oi as OrchestrationMessage, on as AgentControlOperationState, oo as LocalIntroductionCompleteRequest, or as ServerSettings, ot as AgentControlMcpCapabilitiesResult, p as ProjectReadFileBinaryError, pa as Worktree, pi as OrchestrationShellSnapshot, pn as AgentControlProposalStatus, po as RELAY_MAX_CONTROL_FRAME_BYTES, pr as ResolvedKeybindingRule, pt as AgentControlMcpInstallationId, q as AgentControlAutomationRun, qa as TerminalSubscriptionResyncError, qi as ThreadRuntimeModeSetPayload$1, qn as McpWorkspace, qo as RuntimeSessionId, qr as OrchestrationCheckpointStatus, qt as AgentControlMcpReadControlRequestInput, r as formatSchemaError, ra as TurnDispatchMode, ri as OrchestrationGetTurnDiffError, rn as AgentControlMcpWaitForControlRequestInput, rr as DEFAULT_SERVER_SETTINGS, rt as AgentControlExternalTaskIdInput, s as WsHostedRpcGroup, sa as WorktreeManualPositionSetPayload$1, si as OrchestrationMessageRole, sn as AgentControlOperationStatus, so as HubConnectorStatus, sr as ServerSettingsError, st as AgentControlMcpContextResult, t as collectUint8StreamText, ta as ThreadUnarchivedPayload$1, ti as OrchestrationGetSnapshotError, tn as AgentControlMcpSettingsSummaryResult, to as DesktopNativeNodeClaimSignRequest, tr as CopilotSettings, tt as AgentControlExternalRpcError, u as PROJECT_READ_FILE_BINARY_MAX_BYTES, ua as WorktreeSourceControlStateUpdatedPayload$1, ui as OrchestrationReplayEventsError, un as AgentControlPromptSummary, uo as HubIdentitySummary, ur as KeybindingsConfig, ut as AgentControlMcpDiagnosticsSummaryInput, v as AGENT_CONTROL_ACTION_CAPABILITIES, va as WorkItemProviderError, vi as OrchestrationThreadHistoryError, vn as DEVICE_CAPABILITY_LABELS, vo as RELAY_SUPPORTED_VERSION_RANGE, vr as ProviderInterruptTurnInput, vt as AgentControlMcpListAutomationsResult, w as AGENT_CONTROL_ERROR_CODES, wa as VcsDriverKind, wi as ProjectDeletedPayload$1, wn as ThreadPriorityBatchSnapshot, wo as AuthBootstrapInput, wr as ProviderStopBackgroundTaskInput, wt as AgentControlMcpListThreadsResult, x as AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS, xa as SourceControlProviderError, xn as DEVICE_WS_METHODS, xo as RelayEffectiveRole, xr as ProviderSendTurnInput, xt as AgentControlMcpListProjectsInput, y as AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS, ya as WorkItemProviderKind, yi as OrchestrationWorktreeShell, yn as DEVICE_FRAME_MAGIC, yo as RelayCapability, yr as ProviderRespondToRequestInput, yt as AgentControlMcpListDevicesInput, z as AGENT_CONTROL_RISK_TAGS, za as ProviderInstanceId, zi as ThreadGoalClearedPayload$1, zn as McpOauthLoginResult, zo as IsoDateTime, zr as DEFAULT_AGENT_TOKEN_MODE, zt as AgentControlMcpProposeDeviceShutdownInput } from "./collectUint8StreamText-EDg4F0TU.mjs";
+import { $ as AgentControlExternalOverviewResult, $a as DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH, $i as ThreadStatusBucketOverriddenPayload$1, $n as ClaudeSettings, $o as TrimmedNonEmptyString, $r as OrchestrationEventType, $t as AgentControlMcpRecentActivityResult, A as AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS, Ai as ProjectionPendingApprovalDecision, An as AtlassianConnectionStatus, Ao as AuthRevokePairingLinkInput, At as AgentControlMcpProposeAutomationUpdateInput, B as AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES, Ba as ProviderDriverKind, Bi as ThreadDeletedPayload$1, Bn as McpProviderCapabilities, Bo as EventId, Br as DEFAULT_PROJECT_METADATA_DIR, Bt as AgentControlMcpProposeProjectCreateInput, C as AGENT_CONTROL_DEVICE_ACTION_KINDS, Ca as SourceControlProviderError, Cn as DeviceUdid, Co as RelayEffectiveRole, Cr as ProviderSteerTurnInput, Ct as AgentControlMcpListThreadsInput, D as AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES, Di as ProjectMetaUpdatedPayload$1, Dn as AtlassianCapability, Do as AuthClientMetadataDeviceType, Dr as CONTEXT_HANDOFF_ACTIVITY_KIND, Dt as AgentControlMcpOrchestrationEventsResult, E as AGENT_CONTROL_EXTERNAL_MCP_TOOLS, Ea as VcsDriverKind, Ei as ProjectDeletedPayload$1, En as ThreadPriorityRpcError, Eo as AuthBootstrapInput, Er as AgentTokenMode, Et as AgentControlMcpOperationalReadInput, F as AGENT_CONTROL_MCP_TOOLS, Fi as RuntimeMode, Fn as McpInventoryResource, Fo as AuthSessionId, Fr as ContextHandoffDigest, Ft as AgentControlMcpProposeDeviceInstallInput, G as AgentControlAutomationDefinition, Ga as TerminalCwdError, Gi as ThreadMetaUpdatedPayload$1, Gn as McpServerWritableConfig, Go as ProjectId, Gr as OrchestrationAggregateKind, Gt as AgentControlMcpReadAutomationInput, H as AgentControlActionKind, Ha as defaultInstanceIdForDriver, Hi as ThreadGoalUpdatedPayload$1, Hn as McpServer, Ho as MessageId, Hr as ModelSelection, Ht as AgentControlMcpProposeProjectUpdateInput, I as AGENT_CONTROL_MCP_TOOL_NAMES, Ia as DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER, Ii as ThreadActivityAppendedPayload$1, In as McpInventoryResourceTemplate, Io as CheckpointRef, Ir as ContextHandoffEndpointSnapshot, It as AgentControlMcpProposeDeviceLaunchInput, J as AgentControlAutomationRunId, Ja as TerminalSessionLookupError, Ji as ThreadRevertedPayload$1, Jn as McpWorkspaceId, Jr as OrchestrationCheckpointSummary, Jt as AgentControlMcpReadDeviceContentInput, K as AgentControlAutomationId, Ka as TerminalHistoryError, Ki as ThreadPriorityProjectedRanking, Kn as McpSettingsError, Kr as OrchestrationCheckpointFile, Kt as AgentControlMcpReadAutomationResult, L as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT, La as DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER, Li as ThreadArchivedPayload$1, Ln as McpInventoryTool, Lo as CommandId, Lr as ContextHandoffInspectionError, Lt as AgentControlMcpProposeDeviceOpenUrlInput, M as AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS, Ma as ThreadPriorityBatchId, Mn as GitCommandError, Mo as ApprovalRequestId, Mr as ChatAttachment, Mt as AgentControlMcpProposeDeviceBootInput, N as AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS, Na as ThreadPriorityCandidateId, Ni as ProviderInteractionMode, Nn as GitManagerError, No as AtlassianConnectionId, Nr as ClientOrchestrationCommand, Nt as AgentControlMcpProposeDeviceDetachInput, O as AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS, Oa as VcsProcessExitError, Oi as ProjectMetadataDir, On as AtlassianConnectionError, Oo as AuthCreatePairingCredentialInput, Or as CONTEXT_HANDOFF_ERROR_MAX_CHARS, Ot as AgentControlMcpProposeAutomationCancelInput, P as AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS, Pa as ThreadPriorityFingerprint, Pi as ProviderSessionRuntimeStatus, Pn as TextGenerationError, Po as AtlassianResourceId, Pr as ContextHandoffActivityPayload, Pt as AgentControlMcpProposeDeviceInputInput, Q as AgentControlExternalIntegration, Qa as DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH, Qi as ThreadSettlementOverride, Qn as ServerProviderUpdateError, Qo as ThreadId, Qr as OrchestrationEventMetadata, Qt as AgentControlMcpReadThreadResult, R as AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX, Ra as DEFAULT_MODEL, Ri as ThreadAttachedToWorktreePayload$1, Rn as McpListServersResult, Ro as ContextHandoffId, Rr as ContextHandoffMode, Rt as AgentControlMcpProposeDeviceRecordingInput, S as AGENT_CONTROL_CAPABILITIES, Si as PROVIDER_SEND_TURN_MAX_IMAGE_BYTES, Sn as DeviceRpcError, So as RelayChannelId, Sr as ProviderSessionStartInput, St as AgentControlMcpListProjectsResult, T as AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE, Ti as ProjectCreatedPayload$1, Tn as ThreadPriorityCandidateRanking, To as RelayProtocolVersion, Tr as ProviderStopSessionInput, Tt as AgentControlMcpMutationResult, U as AgentControlActionPlan, Ua as isProviderDriverKind, Ui as ThreadInteractionModeSetPayload$1, Un as McpServerConfig, Uo as NonNegativeInt, Ur as ORCHESTRATION_WS_METHODS, Ut as AgentControlMcpProposeSettingsChangeInput, V as AGENT_CONTROL_WS_METHODS, Va as ProviderInstanceId, Vi as ThreadGoalClearedPayload$1, Vn as McpProviderSupport, Vo as IsoDateTime, Vr as DEFAULT_PROVIDER_INTERACTION_MODE, Vt as AgentControlMcpProposeProjectRemoveInput, W as AgentControlAutomation, Wi as ThreadMessageSentPayload, Wn as McpServerName, Wo as PositiveInt, Wr as OrchestrationActorKind, Wt as AgentControlMcpProviderRuntimeEventsResult, X as AgentControlExternalCapabilitiesResult, Xa as EDITORS, Xi as ThreadSessionSetPayload$1, Xn as UsageReadError, Xr as OrchestrationDispatchCommandError, Xt as AgentControlMcpReadDeviceStateResult, Y as AgentControlCapability, Ya as TerminalSubscriptionResyncError, Yi as ThreadRuntimeModeSetPayload$1, Yn as OpinionatedPluginError, Yo as RuntimeSessionId, Yr as OrchestrationCommandReceiptStatus, Yt as AgentControlMcpReadDeviceStateInput, Z as AgentControlExternalCreateTaskInput, Za as OpenError, Zi as ThreadSettledPayload$1, Zn as ServerProvider, Zr as OrchestrationEvent, Zt as AgentControlMcpReadThreadInput, _ as ProjectWriteFileError, _a as ThreadGoal, _i as OrchestrationThreadHistoryCursor, _n as AgentControlRpcError, _o as RELAY_MAX_DATA_FRAME_BYTES, _r as isToolLifecycleItemType, _t as AgentControlMcpListAutomationsInput, a as WS_METHODS, aa as TurnDispatchMode, ai as OrchestrationGetWorkflowScriptError, an as AgentControlOperationId, ar as OpenCodeSettings, at as AgentControlIntegrationId, b as AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS, ba as WorkItemProviderError, bi as PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES, bn as DEVICE_SWIPE_DURATION_MAX_MS, bo as RELAY_SUPPORTED_VERSION_RANGE, br as ProviderRespondToUserInputInput, bt as AgentControlMcpListDevicesResult, c as WsRpcGroup, ca as WorktreeDeletedPayload$1, ci as OrchestrationProposedPlanId, cn as AgentControlPlanDigest, co as LocalIntroductionCompleteRequest, cr as ThreadEnvMode, ct as AgentControlMcpControlRequestResult, da as WorktreeRestoredPayload$1, di as OrchestrationSession, dn as AgentControlProposal, do as HubEnrollmentStartResult, dr as KeybindingsConfigError, dt as AgentControlMcpDiagnosticsSummaryResult, ea as ThreadTokenModeSetPayload$1, ei as OrchestrationGetFullThreadDiffError, en as AgentControlMcpSendMessageInput, eo as DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES, er as CodexSettings, es as TurnId, et as AgentControlExternalProjectScope, f as ProjectListEntriesError, fa as WorktreeSourceControlStateUpdatedPayload$1, fi as OrchestrationSessionStatus, fn as AgentControlProposalId, fo as HubIdentitySummary, fr as MODEL_PICKER_JUMP_KEYBINDING_COMMANDS, ft as AgentControlMcpInstallation, g as ProjectStageFileReferenceError, ga as WorktreeId, gi as OrchestrationThreadActivityTone, gn as AgentControlRiskTag, gr as ToolLifecycleItemType, gt as AgentControlMcpListAutomationRunsResult, h as ProjectSearchEntriesError, ha as Worktree, hi as OrchestrationThread, hn as AgentControlResultEnvelope, ho as RELAY_MAX_CONTROL_FRAME_BYTES, hr as RuntimeSubagentStatus, ht as AgentControlMcpListAutomationRunsInput, i as fromLenientJson, ia as ThreadUnsettledPayload$1, ii as OrchestrationGetTurnDiffResult, in as AgentControlOperation, io as LOCAL_INTRODUCTION_COMPLETE_PATH, ir as GrokSettings, it as AgentControlExternalWaitForTaskInput, j as AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS, ja as VcsUnsupportedOperationError, ji as ProjectionPendingApprovalStatus, jn as AtlassianProduct, jo as AuthRpcError, jr as CONTEXT_HANDOFF_WS_METHODS, jt as AgentControlMcpProposeDeviceAttachInput, k as AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS, ki as ProjectScript, kn as AtlassianConnectionKind, ko as AuthRevokeClientSessionInput, kr as CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES, kt as AgentControlMcpProposeAutomationCreateInput, l as FilesystemBrowseError, la as WorktreeManualPositionSetPayload$1, li as OrchestrationReadModel, ln as AgentControlPrincipal, lo as HubConnectorStatus, lr as KeybindingRule, lt as AgentControlMcpCreateThreadsInput, m as ProjectReadFileError, ma as StatusBucket, mi as OrchestrationStopBackgroundTaskError, mn as AgentControlRequestId, mo as RELAY_FRAME_TYPES, mr as THREAD_JUMP_KEYBINDING_COMMANDS, mt as AgentControlMcpInterruptThreadInput, n as decodeJsonResult, na as ThreadTurnInterruptRequestedPayload$1, ni as OrchestrationGetTaskOutputError, nn as AgentControlMcpUpdateThreadInput, no as DesktopNativeNodeClaimCommitRequest, nr as CursorSettings, nt as AgentControlExternalTaskId, o as WsDeviceRpcGroup, oa as WorktreeArchivedPayload$1, oi as OrchestrationMessage, on as AgentControlOperationState, oo as LOCAL_INTRODUCTION_DESCRIPTOR_PATH, or as ServerSettings, ot as AgentControlMcpCapabilitiesResult, p as ProjectReadFileBinaryError, pa as PullRequestState, pi as OrchestrationShellSnapshot, pn as AgentControlProposalStatus, po as RELAY_AUTHENTICATION_DEADLINE_MS, pr as ResolvedKeybindingRule, pt as AgentControlMcpInstallationId, q as AgentControlAutomationRun, qa as TerminalNotRunningError, qi as ThreadProposedPlanUpsertedPayload$1, qn as McpWorkspace, qr as OrchestrationCheckpointStatus, qt as AgentControlMcpReadControlRequestInput, r as formatSchemaError, ra as ThreadUnarchivedPayload$1, ri as OrchestrationGetTurnDiffError, rn as AgentControlMcpWaitForControlRequestInput, ro as DesktopNativeNodeClaimSignRequest, rr as DEFAULT_SERVER_SETTINGS, rt as AgentControlExternalTaskIdInput, s as WsHostedRpcGroup, sa as WorktreeCreatedPayload$1, si as OrchestrationMessageRole, sn as AgentControlOperationStatus, so as LOCAL_INTRODUCTION_MAX_BODY_BYTES, sr as ServerSettingsError, st as AgentControlMcpContextResult, t as collectUint8StreamText, ta as ThreadTurnDiffCompletedPayload$1, ti as OrchestrationGetSnapshotError, tn as AgentControlMcpSettingsSummaryResult, to as DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH, tr as CopilotSettings, tt as AgentControlExternalRpcError, u as PROJECT_READ_FILE_BINARY_MAX_BYTES, ua as WorktreeMetaUpdatedPayload$1, ui as OrchestrationReplayEventsError, un as AgentControlPromptSummary, uo as HubEnrollmentCeremonyDetail, ur as KeybindingsConfig, ut as AgentControlMcpDiagnosticsSummaryInput, v as AGENT_CONTROL_ACTION_CAPABILITIES, va as WORK_ITEM_DETAIL_BODY_MAX_BYTES, vi as OrchestrationThreadHistoryError, vn as DEVICE_CAPABILITY_LABELS, vo as RELAY_MAX_RETRY_AFTER_MS, vr as ProviderInterruptTurnInput, vt as AgentControlMcpListAutomationsResult, w as AGENT_CONTROL_ERROR_CODES, wa as SourceControlRepositoryError, wi as ProjectAvatarSetPayload$1, wn as ThreadPriorityBatchSnapshot, wo as RelayFrame, wr as ProviderStopBackgroundTaskInput, wt as AgentControlMcpListThreadsResult, x as AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS, xa as WorkItemProviderKind, xi as PROVIDER_SEND_TURN_MAX_FILE_BYTES, xn as DEVICE_WS_METHODS, xo as RelayCapability, xr as ProviderSendTurnInput, xt as AgentControlMcpListProjectsInput, y as AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS, ya as WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES, yi as OrchestrationWorktreeShell, yn as DEVICE_FRAME_MAGIC, yo as RELAY_MAX_RPC_MESSAGE_BYTES, yr as ProviderRespondToRequestInput, yt as AgentControlMcpListDevicesInput, z as AGENT_CONTROL_RISK_TAGS, za as MODEL_SLUG_ALIASES_BY_PROVIDER, zi as ThreadCreatedPayload$1, zn as McpOauthLoginResult, zo as EnvironmentId, zr as DEFAULT_AGENT_TOKEN_MODE, zt as AgentControlMcpProposeDeviceShutdownInput } from "./collectUint8StreamText-oFvWyN3_.mjs";
 import { $ as normalizeGitRemoteUrl, A as runtimeQueueBlockedDuration, B as startupCommandGateQueueHighWater, C as providerStartupQueueHighWater, Ct as decode, D as providerTurnsTotal, E as providerTurnMetricAttributes, Et as Type, F as runtimeQueueHighWater, G as LocalDiagnosticsMetrics, H as terminalRestartsTotal, I as runtimeQueueOverflowsTotal, J as buildTemporaryWorktreeBranchName, K as LocalDiagnosticsMetricsLive, L as runtimeQueueRecoveriesTotal, M as runtimeQueueDepth, N as runtimeQueueDequeuesTotal, O as rpcRequestDuration, P as runtimeQueueEnqueuesTotal, Q as mergeGitStatusParts, R as startupCommandGateEnqueuesTotal, S as providerStartupQueueDepth, St as Tokeniser, T as providerTurnDuration, Tt as rfc8949EncodeOptions, U as terminalSessionsTotal, V as startupCommandGateQueueWaitDuration, W as withMetrics, X as detectSourceControlProviderFromGitRemoteUrl, Y as dedupeRemoteBranchesWithLocalMatches, Z as isTemporaryWorktreeBranch, _ as providerRuntimeEventsTotal, _t as encodeNodeKeyRotationTranscript, a as contextHandoffsTotal, at as DEFAULT_PORT, b as providerStaleStopTimeoutsTotal, bt as formatNodePublicKeyFingerprint, c as increment, ct as deriveServerPaths, d as orchestrationCommandAckDuration, dt as resolveManagedWorktreesRoot, et as resolveAutoFeatureBranchName, f as orchestrationCommandDuration, ft as resolveNodeE2eePolicyConfig, g as providerMetricAttributes, gt as encodeNodeAuthenticationTranscript, h as providerEventLogRecordsDroppedTotal, ht as encodeNativeNodeClaimTranscript, i as contextHandoffPreparationDuration, it as outcomeFromExit, j as runtimeQueueCoalescedTotal, k as rpcRequestsTotal, l as metricAttributes, lt as ensureServerDirectories, m as orchestrationEventsProcessedTotal, mt as canonicalizeHubOrigin, n as contextHandoffContextEntriesTotal, nt as sanitizeFeatureBranchName, o as gitCommandDuration, ot as RuntimeMode$1, p as orchestrationCommandsTotal, pt as resolveStaticDir, q as WORKTREE_BRANCH_PREFIX, r as contextHandoffDispatchDuration, rt as compactTraceAttributes, s as gitCommandsTotal, st as ServerConfig, t as contextHandoffContextBytesTotal, tt as sanitizeBranchFragment, u as metricNames, ut as resolveHubConnectorConfig, v as providerRuntimeStaleEventsTotal, vt as equalNodeIdentityBytes, w as providerStartupQueueWaitDuration, wt as encode, x as providerStartupAdmissionTotal, xt as normalizeHubNodeName, y as providerSessionsTotal, yt as fingerprintNodePublicKey, z as startupCommandGateQueueDepth } from "./Metrics-BP9YjxZB.mjs";
-import { a as makeForgejoDiscovery, c as sourceBranch, d as firstNonEmptyLine, f as probeSourceControlProvider, h as layer$20, i as makeBitbucketDiscovery, m as VcsProcess, n as githubDiscovery, o as SourceControlProvider, p as refineUnknownRemoteProvider, r as gitlabDiscovery, s as parseSourceControlOwnerRef, t as azureDevOpsDiscovery, u as detailFromCause } from "./SourceControlProviderDiscoveryCatalog-4_4yahsa.mjs";
+import { a as makeForgejoDiscovery, c as sourceBranch, d as firstNonEmptyLine, f as probeSourceControlProvider, h as layer$20, i as makeBitbucketDiscovery, m as VcsProcess, n as githubDiscovery, o as SourceControlProvider, p as refineUnknownRemoteProvider, r as gitlabDiscovery, s as parseSourceControlOwnerRef, t as azureDevOpsDiscovery, u as detailFromCause } from "./SourceControlProviderDiscoveryCatalog-hXWNwRMn.mjs";
 import { n as detectSourceControlProviderFromRemoteUrl, r as getChangeRequestTerminologyForKind } from "./sourceControl-BiEBxN01.mjs";
 import * as NodeRuntime from "@effect/platform-node/NodeRuntime";
 import * as NodeServices from "@effect/platform-node/NodeServices";
@@ -11,7 +11,7 @@ import * as Layer$1 from "effect/Layer";
 import { Argument, Command, Flag, GlobalFlag } from "effect/unstable/cli";
 import * as Net from "node:net";
 import { createServer } from "node:net";
-import { Array as Array$1, Cache, Cause, Clock, Config, Console, Context, Data, DateTime, Deferred, Duration, Effect, Encoding, Equal, Exit, Fiber, FileSystem, Layer, Logger, Metric, Option, Order, Path, Predicate, PubSub, Queue, Redacted, Ref, References, Result, Schedule, Schema, SchemaGetter, SchemaIssue, SchemaTransformation, Scope, Semaphore, Stream, Struct, SynchronizedRef, Tracer, TxQueue, TxRef } from "effect";
+import { Array as Array$1, Cache, Cause, Clock, Config, Console, Context, Data, DateTime, Deferred, Duration, Effect, Encoding, Equal, Exit, Fiber, FileSystem, Layer, Logger, Metric, Option, Order, Path, Predicate, PubSub, Queue, Redacted, Ref, References, Result, Schedule, Schema, SchemaGetter, SchemaIssue, SchemaTransformation, Scope, Semaphore, Stream, Struct, SubscriptionRef, SynchronizedRef, Tracer, TxQueue, TxRef } from "effect";
 import * as Schema$1 from "effect/Schema";
 import * as P from "effect/Predicate";
 import { FetchHttpClient, HttpBody, HttpClient, HttpClientRequest, HttpClientResponse, HttpRouter, HttpServer, HttpServerRequest, HttpServerResponse, Multipart } from "effect/unstable/http";
@@ -20,7 +20,7 @@ import path, { basename, dirname, extname, join } from "node:path";
 import * as Crypto from "node:crypto";
 import { createHash, createPrivateKey, createPublicKey, generateKeyPairSync, randomBytes, randomUUID, sign } from "node:crypto";
 import * as NFS from "node:fs";
-import fs, { accessSync, constants, existsSync, realpathSync, statSync } from "node:fs";
+import fs, { accessSync, closeSync, constants, existsSync, fstatSync, lstatSync, openSync, readFileSync, realpathSync, statSync } from "node:fs";
 import * as readline from "node:readline";
 import { createInterface } from "node:readline";
 import * as OS from "node:os";
@@ -51,7 +51,6 @@ import * as Sink$1 from "effect/Sink";
 import { createServer as createServer$1 } from "node:http";
 import * as SqlSchema from "effect/unstable/sql/SqlSchema";
 import { clamp } from "effect/Number";
-import { pathToFileURL } from "node:url";
 import { parsePatchFiles } from "@pierre/diffs";
 import * as HttpServerRequest$1 from "effect/unstable/http/HttpServerRequest";
 import { createInterface as createInterface$1 } from "node:readline/promises";
@@ -1514,6 +1513,7 @@ function attachmentRelativePath(attachment) {
 			});
 			return `${attachment.id}${extension}`;
 		}
+		case "file": return `${attachment.id}.bin`;
 	}
 }
 function resolveAttachmentPath(input) {
@@ -1522,6 +1522,64 @@ function resolveAttachmentPath(input) {
 		relativePath: attachmentRelativePath(input.attachment)
 	});
 }
+function attachmentByteLimit(attachment) {
+	return attachment.type === "image" ? PROVIDER_SEND_TURN_MAX_IMAGE_BYTES : PROVIDER_SEND_TURN_MAX_FILE_BYTES;
+}
+/**
+* Opens and reads a persisted attachment through one descriptor. Comparing
+* the path's lstat identity with the opened descriptor prevents a path or
+* symlink swap between validation and read, including on platforms without a
+* useful O_NOFOLLOW flag.
+*/
+function readPersistedAttachment(input) {
+	const attachmentPath = resolveAttachmentPath(input);
+	if (!attachmentPath) return {
+		ok: false,
+		reason: `Invalid attachment id '${input.attachment.id}'.`
+	};
+	let descriptor;
+	try {
+		const pathInfo = lstatSync(attachmentPath);
+		if (!pathInfo.isFile()) return {
+			ok: false,
+			reason: `Attachment '${input.attachment.name}' is not a regular file.`
+		};
+		const noFollow = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
+		descriptor = openSync(attachmentPath, constants.O_RDONLY | noFollow);
+		const openedInfo = fstatSync(descriptor);
+		if (!openedInfo.isFile() || openedInfo.dev !== pathInfo.dev || openedInfo.ino !== pathInfo.ino) return {
+			ok: false,
+			reason: `Attachment '${input.attachment.name}' changed while it was being opened. Attach it again and retry.`
+		};
+		const limit = attachmentByteLimit(input.attachment);
+		if (openedInfo.size <= 0 || openedInfo.size > limit) return {
+			ok: false,
+			reason: `Attachment '${input.attachment.name}' is ${openedInfo.size} bytes; limit is ${limit} bytes.`
+		};
+		if (openedInfo.size !== input.attachment.sizeBytes) return {
+			ok: false,
+			reason: `Attachment '${input.attachment.name}' changed after upload; expected ${input.attachment.sizeBytes} bytes but found ${openedInfo.size}.`
+		};
+		const bytes = readFileSync(descriptor);
+		const completedInfo = fstatSync(descriptor);
+		if (completedInfo.dev !== openedInfo.dev || completedInfo.ino !== openedInfo.ino || completedInfo.size !== openedInfo.size || bytes.byteLength !== openedInfo.size) return {
+			ok: false,
+			reason: `Attachment '${input.attachment.name}' changed while it was being read. Attach it again and retry.`
+		};
+		return {
+			ok: true,
+			bytes,
+			sizeBytes: bytes.byteLength
+		};
+	} catch {
+		return {
+			ok: false,
+			reason: `Attachment '${input.attachment.name}' is missing, unreadable, or not a safe regular file.`
+		};
+	} finally {
+		if (descriptor !== void 0) closeSync(descriptor);
+	}
+}
 function resolveAttachmentPathById(input) {
 	const normalizedId = normalizeAttachmentRelativePath(input.attachmentId);
 	if (!normalizedId || normalizedId.includes("/") || normalizedId.includes(".")) return null;
@@ -1971,7 +2029,7 @@ const authClientsRevokeOthersRouteLayer = HttpRouter.add("POST", "/api/auth/clie
 var ServerEnvironment = class extends Context.Service()("ryco/environment/Services/ServerEnvironment") {};
 //#endregion
 //#region src/http.ts
-const PROJECT_FAVICON_CACHE_CONTROL = "public, max-age=3600";
+const PROJECT_FAVICON_CACHE_CONTROL = "private, max-age=3600";
 const PROJECT_AVATAR_MAX_BYTES = 2097152;
 const PROJECT_AVATAR_CACHE_CONTROL = "private, max-age=0, must-revalidate";
 const STATIC_INDEX_CACHE_CONTROL = "no-cache";
@@ -1985,6 +2043,19 @@ const LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set([
 	"::1",
 	"localhost"
 ]);
+const SVG_CONTENT_SECURITY_POLICY = "default-src 'none'; style-src 'unsafe-inline'; sandbox";
+const DOWNLOAD_CONTENT_SECURITY_POLICY = "default-src 'none'; sandbox";
+const INLINE_ATTACHMENT_EXTENSIONS = /* @__PURE__ */ new Set([
+	".avif",
+	".bmp",
+	".gif",
+	".ico",
+	".jpeg",
+	".jpg",
+	".png",
+	".svg",
+	".webp"
+]);
 const STATIC_CONTENT_TYPES = {
 	".css": "text/css; charset=utf-8",
 	".html": "text/html; charset=utf-8",
@@ -2029,6 +2100,33 @@ function resolveStaticCacheControl(staticRelativePath) {
 	const basename = normalized.split("/").at(-1) ?? normalized;
 	return /(?:^|[-.])[a-zA-Z0-9_-]{8,}\.[a-zA-Z0-9]+$/u.test(basename) ? STATIC_IMMUTABLE_CACHE_CONTROL : STATIC_INDEX_CACHE_CONTROL;
 }
+/** Build a download disposition with a safe ASCII fallback and UTF-8 filename. */
+function downloadContentDisposition(fileName) {
+	if (fileName === void 0) return "attachment";
+	const sanitized = fileName.toWellFormed().replace(/[\u0000-\u001f"\\]/g, "_");
+	const asciiFallback = sanitized.replace(/[^\u0020-\u007e]/g, "_");
+	const extendedName = encodeURIComponent(sanitized).replace(/['()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+	return `attachment; filename="${asciiFallback}"${asciiFallback === sanitized ? "" : `; filename*=UTF-8''${extendedName}`}`;
+}
+function userAssetResponseHeaders(filePath, path) {
+	const extension = path.extname(filePath).toLowerCase();
+	return {
+		"Cache-Control": "private, max-age=3600",
+		"X-Content-Type-Options": "nosniff",
+		...!INLINE_ATTACHMENT_EXTENSIONS.has(extension) ? {
+			"Content-Disposition": downloadContentDisposition(path.basename(filePath)),
+			"Content-Security-Policy": DOWNLOAD_CONTENT_SECURITY_POLICY,
+			"Content-Type": "application/octet-stream"
+		} : extension === ".svg" ? { "Content-Security-Policy": SVG_CONTENT_SECURITY_POLICY } : {}
+	};
+}
+function inlineImageResponseHeaders(filePath) {
+	return {
+		"Cache-Control": PROJECT_FAVICON_CACHE_CONTROL,
+		"X-Content-Type-Options": "nosniff",
+		...filePath.toLowerCase().endsWith(".svg") ? { "Content-Security-Policy": SVG_CONTENT_SECURITY_POLICY } : {}
+	};
+}
 function resolveStaticContentType(filePath, path) {
 	return STATIC_CONTENT_TYPES[path.extname(filePath).toLowerCase()] ?? "application/octet-stream";
 }
@@ -2091,11 +2189,13 @@ const attachmentsRouteLayer = HttpRouter.add("GET", `${ATTACHMENTS_ROUTE_PREFIX}
 		relativePath: normalizedRelativePath
 	});
 	if (!filePath) return HttpServerResponse.text(isIdLookup ? "Not Found" : "Invalid attachment path", { status: isIdLookup ? 404 : 400 });
-	const fileInfo = yield* (yield* FileSystem.FileSystem).stat(filePath).pipe(Effect.catch(() => Effect.succeed(null)));
+	const fileSystem = yield* FileSystem.FileSystem;
+	const path = yield* Path.Path;
+	const fileInfo = yield* fileSystem.stat(filePath).pipe(Effect.catch(() => Effect.succeed(null)));
 	if (!fileInfo || fileInfo.type !== "File") return HttpServerResponse.text("Not Found", { status: 404 });
 	return yield* HttpServerResponse.file(filePath, {
 		status: 200,
-		headers: { "Cache-Control": "public, max-age=31536000, immutable" }
+		headers: userAssetResponseHeaders(filePath, path)
 	}).pipe(Effect.catch(() => Effect.succeed(HttpServerResponse.text("Internal Server Error", { status: 500 }))));
 }).pipe(Effect.catchTag("AuthError", respondToAuthError)));
 const projectFaviconRouteLayer = HttpRouter.add("GET", "/api/project-favicon", Effect.gen(function* () {
@@ -2109,11 +2209,11 @@ const projectFaviconRouteLayer = HttpRouter.add("GET", "/api/project-favicon", E
 	if (!faviconFilePath) return HttpServerResponse.text(FALLBACK_PROJECT_FAVICON_SVG, {
 		status: 200,
 		contentType: "image/svg+xml",
-		headers: { "Cache-Control": PROJECT_FAVICON_CACHE_CONTROL }
+		headers: inlineImageResponseHeaders("fallback.svg")
 	});
 	return yield* HttpServerResponse.file(faviconFilePath, {
 		status: 200,
-		headers: { "Cache-Control": PROJECT_FAVICON_CACHE_CONTROL }
+		headers: inlineImageResponseHeaders(faviconFilePath)
 	}).pipe(Effect.catch(() => Effect.succeed(HttpServerResponse.text("Internal Server Error", { status: 500 }))));
 }).pipe(Effect.catchTag("AuthError", respondToAuthError)));
 const AvatarFormSchema = Schema$1.Struct({ avatar: Multipart.SingleFileSchema });
@@ -5868,6 +5968,7 @@ const makeRuntimeSqliteLayer = Effect.fn("makeRuntimeSqliteLayer")(function* (co
 const setup = Layer.effectDiscard(Effect.gen(function* () {
 	const startedAt = Date.now();
 	const sql = yield* SqlClient.SqlClient;
+	yield* sql`PRAGMA busy_timeout = 5000;`;
 	yield* sql`PRAGMA journal_mode = WAL;`;
 	yield* sql`PRAGMA foreign_keys = ON;`;
 	yield* runMigrations();
@@ -7876,6 +7977,31 @@ const makeGitVcsDriverCore = Effect.fn("makeGitVcsDriverCore")(function* (option
 		}
 		const currentUpstream = yield* resolveCurrentUpstream(cwd).pipe(Effect.catch(() => Effect.succeed(null)));
 		if (currentUpstream) {
+			if (!(branch === currentUpstream.branchName || branch.endsWith(`/${currentUpstream.branchName}`) && currentUpstream.upstreamRef.endsWith(`/${branch}`))) {
+				const remoteName = (yield* resolvePushRemoteName(cwd, branch).pipe(Effect.catch(() => Effect.succeed(null)))) ?? currentUpstream.remoteName;
+				const publishBranch = yield* resolvePublishBranchName(cwd, branch);
+				if ((yield* runGitStdout("GitVcsDriver.pushCurrentBranch.readMergeBase", cwd, [
+					"config",
+					"--get",
+					`branch.${branch}.gh-merge-base`
+				], true).pipe(Effect.map((stdout) => stdout.trim()))).length === 0) yield* runGit("GitVcsDriver.pushCurrentBranch.recordMergeBase", cwd, [
+					"config",
+					`branch.${branch}.gh-merge-base`,
+					currentUpstream.branchName
+				]);
+				yield* runGit("GitVcsDriver.pushCurrentBranch.pushOwnBranch", cwd, [
+					"push",
+					"-u",
+					remoteName,
+					`HEAD:refs/heads/${publishBranch}`
+				]);
+				return {
+					status: "pushed",
+					branch,
+					upstreamBranch: `${remoteName}/${publishBranch}`,
+					setUpstream: true
+				};
+			}
 			yield* runGit("GitVcsDriver.pushCurrentBranch.pushUpstream", cwd, [
 				"push",
 				currentUpstream.remoteName,
@@ -8104,6 +8230,25 @@ const makeGitVcsDriverCore = Effect.fn("makeGitVcsDriverCore")(function* (option
 			input.refName
 		];
 		yield* executeGit("GitVcsDriver.createWorktree", input.cwd, args, { fallbackErrorMessage: "git worktree add failed" });
+		const gitmodulesPath = path.join(worktreePath, ".gitmodules");
+		if (yield* fileSystem.exists(gitmodulesPath).pipe(Effect.mapError((cause) => new GitCommandError({
+			operation: "GitVcsDriver.createWorktree.inspectSubmodules",
+			command: "inspect .gitmodules",
+			cwd: worktreePath,
+			detail: `Failed to inspect ${gitmodulesPath} after creating the worktree.`,
+			cause
+		})))) {
+			const submoduleArgs = [
+				"submodule",
+				"update",
+				"--init",
+				"--recursive"
+			];
+			yield* executeGit("GitVcsDriver.createWorktree.initializeSubmodules", worktreePath, submoduleArgs, {
+				timeoutMs: 12e4,
+				fallbackErrorMessage: "git submodule initialization failed"
+			}).pipe(Effect.mapError((error) => createGitCommandError("GitVcsDriver.createWorktree.initializeSubmodules", worktreePath, submoduleArgs, `The worktree was created, but its submodules could not be initialized: ${error.detail}`, error)));
+		}
 		if (input.dependencyHydration === "copyInstallDirs") yield* copyWorktreeDependencyInstallDirs({
 			cwd: input.cwd,
 			worktreePath
@@ -8168,6 +8313,15 @@ const makeGitVcsDriverCore = Effect.fn("makeGitVcsDriverCore")(function* (option
 			fallbackErrorMessage: "git worktree remove failed"
 		}).pipe(Effect.mapError((error) => createGitCommandError("GitVcsDriver.removeWorktree", input.cwd, args, `${commandLabel$1(args)} failed (cwd: ${input.cwd}): ${error.message}`, error)));
 	});
+	const pruneWorktrees = (cwd) => executeGit("GitVcsDriver.pruneWorktrees", cwd, [
+		"worktree",
+		"prune",
+		"--expire",
+		"now"
+	], {
+		timeoutMs: 1e4,
+		fallbackErrorMessage: "git worktree prune failed"
+	}).pipe(Effect.asVoid);
 	const renameBranch = Effect.fn("renameBranch")(function* (input) {
 		if (input.oldBranch === input.newBranch) return { branch: input.newBranch };
 		const targetBranch = yield* resolveAvailableBranchName(input.cwd, input.newBranch);
@@ -8294,6 +8448,7 @@ const makeGitVcsDriverCore = Effect.fn("makeGitVcsDriverCore")(function* (option
 		fetchRemoteTrackingBranch,
 		setBranchUpstream,
 		removeWorktree,
+		pruneWorktrees,
 		renameBranch,
 		createRef,
 		deleteBranch,
@@ -12672,26 +12827,26 @@ const make$12 = Effect.fn("makeSourceControlProviderRegistry")(function* () {
 	const azureDevOpsCli = yield* AzureDevOpsCli;
 	const fileSystem = yield* FileSystem.FileSystem;
 	const github = yield* makeLazyProvider("github", Effect.tryPromise({
-		try: () => import("./GitHubSourceControlProvider-Dmz1LJct.mjs"),
+		try: () => import("./GitHubSourceControlProvider-C7CJAslU.mjs"),
 		catch: (cause) => providerLoadError("github", cause)
 	}).pipe(Effect.flatMap((module) => module.make()), Effect.provideService(GitHubCli, githubCli), Effect.provideService(FileSystem.FileSystem, fileSystem)));
 	const gitlab = yield* makeLazyProvider("gitlab", Effect.tryPromise({
-		try: () => import("./GitLabSourceControlProvider-C21lwphV.mjs"),
+		try: () => import("./GitLabSourceControlProvider-u-Y-e8PV.mjs"),
 		catch: (cause) => providerLoadError("gitlab", cause)
 	}).pipe(Effect.flatMap((module) => module.make()), Effect.provideService(GitLabCli, gitlabCli)));
 	const bitbucket = yield* makeLazyProvider("bitbucket", Effect.tryPromise({
-		try: () => import("./BitbucketSourceControlProvider-BV6iRDi7.mjs"),
+		try: () => import("./BitbucketSourceControlProvider-B8IPx2Ad.mjs"),
 		catch: (cause) => providerLoadError("bitbucket", cause)
 	}).pipe(Effect.flatMap((module) => module.make()), Effect.provideService(BitbucketApi, bitbucketApi)), {
 		searchRepositories: true,
 		cloneAuthentication: true
 	});
 	const forgejo = yield* makeLazyProvider("forgejo", Effect.tryPromise({
-		try: () => import("./ForgejoSourceControlProvider-CeN7Snfr.mjs"),
+		try: () => import("./ForgejoSourceControlProvider-Ds0rU_PN.mjs"),
 		catch: (cause) => providerLoadError("forgejo", cause)
 	}).pipe(Effect.flatMap((module) => module.make()), Effect.provideService(ForgejoApi, forgejoApi)));
 	const azureDevOps = yield* makeLazyProvider("azure-devops", Effect.tryPromise({
-		try: () => import("./AzureDevOpsSourceControlProvider-CGlK6M0b.mjs"),
+		try: () => import("./AzureDevOpsSourceControlProvider-B0YsaJyI.mjs"),
 		catch: (cause) => providerLoadError("azure-devops", cause)
 	}).pipe(Effect.flatMap((module) => module.make()), Effect.provideService(AzureDevOpsCli, azureDevOpsCli)));
 	const bitbucketDiscovery = makeBitbucketDiscovery(bitbucketApi);
@@ -12930,6 +13085,11 @@ const DEFAULT_KEYBINDINGS = [
 		command: "thread.find",
 		when: "!terminalFocus"
 	},
+	{
+		key: "mod+alt+p",
+		command: "thread.pinToggle",
+		when: "!terminalFocus"
+	},
 	{
 		key: "mod+shift+[",
 		command: "thread.previous"
@@ -14516,7 +14676,8 @@ const ServerNotification__SpendControlLimitSnapshot = Schema$1.Struct({
 const ServerNotification__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const ServerNotification__TerminalInteractionNotification = Schema$1.Struct({
 	itemId: Schema$1.String,
@@ -15403,7 +15564,8 @@ const V2ItemCompletedNotification__ReasoningEffort = Schema$1.String.annotate({
 const V2ItemCompletedNotification__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ItemCompletedNotification__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -15587,7 +15749,8 @@ const V2ItemStartedNotification__ReasoningEffort = Schema$1.String.annotate({ de
 const V2ItemStartedNotification__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ItemStartedNotification__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -16082,7 +16245,8 @@ const V2ReviewStartResponse__ReasoningEffort = Schema$1.String.annotate({ descri
 const V2ReviewStartResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ReviewStartResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -16267,7 +16431,8 @@ const V2ThreadForkResponse__ReasoningEffort = Schema$1.String.annotate({ descrip
 const V2ThreadForkResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadForkResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -16449,7 +16614,8 @@ const V2ThreadListResponse__ReasoningEffort = Schema$1.String.annotate({ descrip
 const V2ThreadListResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadListResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -16585,7 +16751,8 @@ const V2ThreadMetadataUpdateResponse__ReasoningEffort = Schema$1.String.annotate
 const V2ThreadMetadataUpdateResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadMetadataUpdateResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -16716,7 +16883,8 @@ const V2ThreadReadResponse__ReasoningEffort = Schema$1.String.annotate({ descrip
 const V2ThreadReadResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadReadResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -16958,7 +17126,8 @@ const V2ThreadResumeResponse__ReasoningEffort = Schema$1.String.annotate({ descr
 const V2ThreadResumeResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadResumeResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -17089,7 +17258,8 @@ const V2ThreadRollbackResponse__ReasoningEffort = Schema$1.String.annotate({ des
 const V2ThreadRollbackResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadRollbackResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -17253,7 +17423,8 @@ const V2ThreadStartedNotification__ReasoningEffort = Schema$1.String.annotate({
 const V2ThreadStartedNotification__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadStartedNotification__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -17431,7 +17602,8 @@ const V2ThreadStartResponse__ReasoningEffort = Schema$1.String.annotate({ descri
 const V2ThreadStartResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadStartResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -17574,7 +17746,8 @@ const V2ThreadUnarchiveResponse__ReasoningEffort = Schema$1.String.annotate({ de
 const V2ThreadUnarchiveResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2ThreadUnarchiveResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -17704,7 +17877,8 @@ const V2TurnCompletedNotification__ReasoningEffort = Schema$1.String.annotate({
 const V2TurnCompletedNotification__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2TurnCompletedNotification__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -17831,7 +18005,8 @@ const V2TurnStartedNotification__ReasoningEffort = Schema$1.String.annotate({ de
 const V2TurnStartedNotification__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2TurnStartedNotification__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -17997,7 +18172,8 @@ const V2TurnStartResponse__ReasoningEffort = Schema$1.String.annotate({ descript
 const V2TurnStartResponse__SubAgentActivityKind = Schema$1.Literals([
 	"started",
 	"interacted",
-	"interrupted"
+	"interrupted",
+	"completed"
 ]);
 const V2TurnStartResponse__TextElement = Schema$1.Struct({
 	byteRange: Schema$1.Struct({
@@ -21908,14 +22084,19 @@ const ServerNotification__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -22313,14 +22494,19 @@ const V2ItemCompletedNotification__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -22507,14 +22693,19 @@ const V2ItemStartedNotification__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -22750,14 +22941,19 @@ const V2ReviewStartResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -22931,14 +23127,19 @@ const V2ThreadForkResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -23102,14 +23303,19 @@ const V2ThreadListResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -23273,14 +23479,19 @@ const V2ThreadMetadataUpdateResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -23444,14 +23655,19 @@ const V2ThreadReadResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -23616,14 +23832,19 @@ const V2ThreadResumeResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -23787,14 +24008,19 @@ const V2ThreadRollbackResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -23962,14 +24188,19 @@ const V2ThreadStartedNotification__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -24133,14 +24364,19 @@ const V2ThreadStartResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -24304,14 +24540,19 @@ const V2ThreadUnarchiveResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -24475,14 +24716,19 @@ const V2TurnCompletedNotification__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -24646,14 +24892,19 @@ const V2TurnStartedNotification__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -24817,14 +25068,19 @@ const V2TurnStartResponse__ThreadItem = Schema$1.Union([
 		status: Schema$1.Literals([
 			"inProgress",
 			"completed",
-			"failed"
+			"failed",
+			"interrupted"
 		]).annotate({ description: "Current status of the collab tool call." }),
 		tool: Schema$1.Literals([
 			"spawnAgent",
 			"sendInput",
 			"resumeAgent",
 			"wait",
-			"closeAgent"
+			"closeAgent",
+			"sendMessage",
+			"followupTask",
+			"interruptAgent",
+			"listAgents"
 		]).annotate({ description: "Name of the collab tool that was invoked." }),
 		type: Schema$1.Literal("collabAgentToolCall").annotate({ title: "CollabAgentToolCallThreadItemType" })
 	}).annotate({ title: "CollabAgentToolCallThreadItem" }),
@@ -28082,12 +28338,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals(["stdout", "stderr"]).annotate({ description: "Stream label for `command/exec/outputDelta` notifications." });
 Schema$1.Literals([
@@ -28811,12 +29072,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -28877,12 +29143,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -29239,12 +29510,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -29375,12 +29651,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -29486,12 +29767,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -29551,12 +29837,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -29609,12 +29900,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -29903,12 +30199,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -30037,12 +30338,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -30153,12 +30459,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -30303,12 +30614,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -30384,12 +30700,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -30439,12 +30760,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -30494,12 +30820,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -30556,12 +30887,17 @@ Schema$1.Literals([
 	"sendInput",
 	"resumeAgent",
 	"wait",
-	"closeAgent"
+	"closeAgent",
+	"sendMessage",
+	"followupTask",
+	"interruptAgent",
+	"listAgents"
 ]);
 Schema$1.Literals([
 	"inProgress",
 	"completed",
-	"failed"
+	"failed",
+	"interrupted"
 ]);
 Schema$1.Literals([
 	"agent",
@@ -31165,7 +31501,10 @@ const makeCodexAppServerPatchedProtocol = Effect$1.fn("makeCodexAppServerPatched
 	const incomingRequests = yield* options.onRequest ? Queue$1.sliding(PROTOCOL_QUEUE_CAPACITY) : Queue$1.bounded(PROTOCOL_QUEUE_CAPACITY);
 	const pending = yield* Ref$1.make(/* @__PURE__ */ new Map());
 	const nextRequestId = yield* Ref$1.make(1);
-	const remainder = yield* Ref$1.make("");
+	const remainder = {
+		fragments: [],
+		byteLength: 0
+	};
 	const terminationHandled = yield* Ref$1.make(false);
 	const logProtocol = (event) => {
 		if (event.direction === "incoming" && !options.logIncoming) return Effect$1.void;
@@ -31264,19 +31603,39 @@ const makeCodexAppServerPatchedProtocol = Effect$1.fn("makeCodexAppServerPatched
 			}
 		})), Effect$1.flatMap(routeMessage));
 	};
-	yield* options.stdio.stdin.pipe(Stream$1.decodeText(), Stream$1.runForEach((chunk) => Ref$1.modify(remainder, (current) => {
-		const lines = (current + chunk).split("\n");
-		const nextRemainder = lines.pop() ?? "";
-		return [{
-			lines: lines.map((line) => line.replace(/\r$/, "")),
-			remainderBytes: new TextEncoder().encode(nextRemainder).byteLength
-		}, nextRemainder];
-	}).pipe(Effect$1.flatMap(({ lines, remainderBytes }) => remainderBytes > PROTOCOL_MAX_FRAME_BYTES ? Effect$1.fail(new CodexAppServerProtocolOverloadedError({
-		queue: "incoming-frame-bytes",
-		capacity: PROTOCOL_MAX_FRAME_BYTES
-	})) : Effect$1.forEach(lines, handleLine, { discard: true })))), Effect$1.matchEffect({
+	yield* options.stdio.stdin.pipe(Stream$1.decodeText(), Stream$1.runForEach((chunk) => Effect$1.gen(function* () {
+		const lines = [];
+		let start = 0;
+		for (let newline = chunk.indexOf("\n"); newline !== -1; newline = chunk.indexOf("\n", start)) {
+			const fragment = chunk.slice(start, newline);
+			if (remainder.byteLength + new TextEncoder().encode(fragment).byteLength > PROTOCOL_MAX_FRAME_BYTES) return yield* Effect$1.fail(new CodexAppServerProtocolOverloadedError({
+				queue: "incoming-frame-bytes",
+				capacity: PROTOCOL_MAX_FRAME_BYTES
+			}));
+			remainder.fragments.push(fragment);
+			lines.push(remainder.fragments.join("").replace(/\r$/, ""));
+			remainder.fragments.length = 0;
+			remainder.byteLength = 0;
+			start = newline + 1;
+		}
+		if (start < chunk.length) {
+			const fragment = chunk.slice(start);
+			remainder.byteLength += new TextEncoder().encode(fragment).byteLength;
+			if (remainder.byteLength > PROTOCOL_MAX_FRAME_BYTES) return yield* Effect$1.fail(new CodexAppServerProtocolOverloadedError({
+				queue: "incoming-frame-bytes",
+				capacity: PROTOCOL_MAX_FRAME_BYTES
+			}));
+			remainder.fragments.push(fragment);
+		}
+		yield* Effect$1.forEach(lines, handleLine, { discard: true });
+	})), Effect$1.matchEffect({
 		onFailure: (error) => handleTermination(() => Effect$1.succeed(normalizeProtocolError(error, "Codex App Server input stream failed"))),
-		onSuccess: () => Ref$1.get(remainder).pipe(Effect$1.flatMap((line) => line.trim().length === 0 ? Effect$1.void : handleLine(line)), Effect$1.matchEffect({
+		onSuccess: () => Effect$1.sync(() => {
+			const line = remainder.fragments.join("");
+			remainder.fragments.length = 0;
+			remainder.byteLength = 0;
+			return line;
+		}).pipe(Effect$1.flatMap((line) => line.trim().length === 0 ? Effect$1.void : handleLine(line)), Effect$1.matchEffect({
 			onFailure: (error) => handleTermination(() => Effect$1.succeed(error)),
 			onSuccess: () => handleTermination(() => options.terminationError ?? Effect$1.succeed(new CodexAppServerTransportError({
 				detail: "Codex App Server input stream ended",
@@ -32384,7 +32743,7 @@ const DEVICE_TOOL_DEFINITIONS = [
 		}
 	}
 ];
-function asRecord$5(value) {
+function asRecord$6(value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Tool arguments must be a JSON object.");
 	return value;
 }
@@ -32607,7 +32966,7 @@ async function startDeviceToolGateway(manager) {
 			if (typeof method !== "string") return json(response, 400, mcpError$1(id, -32600, "Missing method."));
 			if (method === "notifications/initialized" || method === "notifications/cancelled") return empty(response, 202);
 			if (method === "initialize") {
-				const requested = asRecord$5(message.params ?? {}).protocolVersion;
+				const requested = asRecord$6(message.params ?? {}).protocolVersion;
 				return json(response, 200, mcpSuccess(id, {
 					protocolVersion: typeof requested === "string" ? requested : "2025-06-18",
 					capabilities: { tools: { listChanged: false } },
@@ -32627,7 +32986,7 @@ async function startDeviceToolGateway(manager) {
 					text: "Device tools are only available during an active Ryco turn."
 				}]
 			}));
-			const params = asRecord$5(message.params ?? {});
+			const params = asRecord$6(message.params ?? {});
 			const name = params.name;
 			if (typeof name !== "string" || !DEVICE_TOOL_NAMES.includes(name)) return json(response, 200, mcpError$1(id, -32602, "Unknown device tool."));
 			if (agentControlBlocksLegacyTool(binding.threadId, name)) return json(response, 200, mcpSuccess(id, {
@@ -32642,7 +33001,7 @@ async function startDeviceToolGateway(manager) {
 					manager,
 					threadId: binding.threadId,
 					name,
-					args: asRecord$5(params.arguments ?? {})
+					args: asRecord$6(params.arguments ?? {})
 				});
 				return json(response, 200, mcpSuccess(id, { content: value && typeof value === "object" && "_mcpContent" in value ? value._mcpContent : [{
 					type: "text",
@@ -32941,7 +33300,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: CodexSettings,
 		defaultConfig: () => Schema.decodeSync(CodexSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./CodexDriver-DBz2rPXb.mjs"),
+			try: () => import("./CodexDriver-DLwPz5sk.mjs"),
 			catch: (cause) => driverImportError(codexDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ CodexDriver }) => CodexDriver.create(input)))
 	},
@@ -32955,7 +33314,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: ClaudeSettings,
 		defaultConfig: () => Schema.decodeSync(ClaudeSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./ClaudeDriver-rooMNrJz.mjs"),
+			try: () => import("./ClaudeDriver-DsW8yDj9.mjs"),
 			catch: (cause) => driverImportError(claudeDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ ClaudeDriver }) => ClaudeDriver.create(input)))
 	},
@@ -32969,7 +33328,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: CopilotSettings,
 		defaultConfig: () => Schema.decodeSync(CopilotSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./CopilotDriver-D36vbGbn.mjs"),
+			try: () => import("./CopilotDriver-DXvGBv-s.mjs"),
 			catch: (cause) => driverImportError(copilotDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ CopilotDriver }) => CopilotDriver.create(input)))
 	},
@@ -32983,7 +33342,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: CursorSettings,
 		defaultConfig: () => Schema.decodeSync(CursorSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./CursorDriver-DWuuOSkJ.mjs"),
+			try: () => import("./CursorDriver-CeB_vMKJ.mjs"),
 			catch: (cause) => driverImportError(cursorDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ CursorDriver }) => CursorDriver.create(input)))
 	},
@@ -32997,7 +33356,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: GrokSettings,
 		defaultConfig: () => Schema.decodeSync(GrokSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./GrokDriver-qKX1a63G.mjs"),
+			try: () => import("./GrokDriver-CFgjwnvE.mjs"),
 			catch: (cause) => driverImportError(grokDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ GrokDriver }) => GrokDriver.create(input)))
 	},
@@ -33011,7 +33370,7 @@ const BUILT_IN_DRIVERS = [
 		configSchema: OpenCodeSettings,
 		defaultConfig: () => Schema.decodeSync(OpenCodeSettings)({}),
 		create: (input) => Effect.tryPromise({
-			try: () => import("./OpenCodeDriver-CbdswhqU.mjs"),
+			try: () => import("./OpenCodeDriver-DNApoGdu.mjs"),
 			catch: (cause) => driverImportError(openCodeDriverKind, input, cause)
 		}).pipe(Effect.flatMap(({ OpenCodeDriver }) => OpenCodeDriver.create(input)))
 	}
@@ -33726,7 +34085,7 @@ const scopedSafeTeardown = (label) => (effect) => Effect.gen(function* () {
 });
 //#endregion
 //#region package.json
-var version$1 = "0.1.13";
+var version$1 = "0.1.15";
 //#endregion
 //#region src/provider/Layers/CodexProvider.ts
 const PROVIDER_PROBE_TIMEOUT_MS = 8e3;
@@ -34211,7 +34570,7 @@ function sortProviderSupport(left, right) {
 	};
 	return statusRank[left.status] - statusRank[right.status] || Number(right.enabled) - Number(left.enabled) || left.driver.localeCompare(right.driver) || left.instanceId.localeCompare(right.instanceId);
 }
-function asRecord$4(value) {
+function asRecord$5(value) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) return;
 	return value;
 }
@@ -34219,7 +34578,7 @@ function asStringArray(value) {
 	return Array.isArray(value) ? value.filter((entry) => typeof entry === "string") : [];
 }
 function asStringRecord(value) {
-	const record = asRecord$4(value);
+	const record = asRecord$5(value);
 	if (!record) return {};
 	const entries = Object.entries(record).filter((entry) => {
 		const [, entryValue] = entry;
@@ -34244,7 +34603,7 @@ function asOptionalNumber(value) {
 	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
 }
 function sourceFromOrigin(origin) {
-	const type = asRecord$4(asRecord$4(origin)?.name)?.type;
+	const type = asRecord$5(asRecord$5(origin)?.name)?.type;
 	if (type === "user" || type === "project" || type === "system") return type;
 	if (type === "mdm") return "managed";
 	return "unknown";
@@ -34264,13 +34623,13 @@ function collectLayerServers(layers) {
 	if (!layers) return [];
 	const layerServers = [];
 	for (const layer of layers) {
-		const servers = asRecord$4(asRecord$4(layer.config)?.mcp_servers);
+		const servers = asRecord$5(asRecord$5(layer.config)?.mcp_servers);
 		if (servers) layerServers.push(servers);
 	}
 	return layerServers;
 }
 function decodeServerConfig(raw) {
-	const record = asRecord$4(raw);
+	const record = asRecord$5(raw);
 	if (!record) return Schema.decodeSync(McpServerConfig)({ transport: "unknown" });
 	const input = {
 		transport: typeof record.url === "string" ? "http" : typeof record.command === "string" ? "stdio" : "unknown",
@@ -34387,15 +34746,15 @@ function toStartupStatus(config, status) {
 }
 function extractConfigPath(layers) {
 	const userLayer = layers?.find((layer) => {
-		const name = asRecord$4(layer.name);
+		const name = asRecord$5(layer.name);
 		return name?.type === "user" && typeof name.file === "string";
 	});
-	const file = asRecord$4(userLayer?.name)?.file;
+	const file = asRecord$5(userLayer?.name)?.file;
 	return typeof file === "string" ? file : void 0;
 }
 function buildServers(input) {
 	const configRecord = input.configResponse.config;
-	const configuredServers = asRecord$4(configRecord.mcp_servers) ?? {};
+	const configuredServers = asRecord$5(configRecord.mcp_servers) ?? {};
 	const statusByName = new Map(input.statuses.map((status) => [status.name, status]));
 	const names = [.../* @__PURE__ */ new Set([...Object.keys(configuredServers), ...statusByName.keys()])].toSorted((left, right) => left.localeCompare(right));
 	const layerServers = collectLayerServers(input.configResponse.layers);
@@ -34620,7 +34979,7 @@ const makeCodexMcpService = Effect.gen(function* () {
 				cwd: serverConfig.cwd,
 				includeLayers: false
 			})).config;
-			const config = mergeServerSecrets((asRecord$4(configRecord.mcp_servers) ?? {})[input.name], input);
+			const config = mergeServerSecrets((asRecord$5(configRecord.mcp_servers) ?? {})[input.name], input);
 			return yield* client.request("config/batchWrite", {
 				edits: [{
 					keyPath: `mcp_servers.${input.name}`,
@@ -37133,6 +37492,20 @@ const OpenLive = Layer.effect(Open, make$10);
 */
 var OrchestrationEngineService = class extends Context.Service()("ryco/orchestration/Services/OrchestrationEngine/OrchestrationEngineService") {};
 //#endregion
+//#region src/orchestration/Services/ThreadDeletionReactor.ts
+/**
+* ThreadDeletionReactor - Thread deletion cleanup reactor service interface.
+*
+* Owns background workers that react to thread deletion domain events and
+* perform best-effort runtime cleanup for provider sessions and terminals.
+*
+* @module ThreadDeletionReactor
+*/
+/**
+* ThreadDeletionReactor - Service tag for thread deletion cleanup workers.
+*/
+var ThreadDeletionReactor = class extends Context.Service()("ryco/orchestration/Services/ThreadDeletionReactor") {};
+//#endregion
 //#region src/orchestration/Services/ContextHandoffInspection.ts
 var ContextHandoffInspection = class extends Context.Service()("ryco/orchestration/Services/ContextHandoffInspection") {};
 //#endregion
@@ -38678,6 +39051,9 @@ var WorkspaceAccessPolicy = class extends Context.Service()("ryco/workspace/Serv
 //#region src/provider/Services/ProviderSessionReaper.ts
 var ProviderSessionReaper = class extends Context.Service()("ryco/provider/Services/ProviderSessionReaper") {};
 //#endregion
+//#region src/provider/Services/ProviderSessionDirectory.ts
+var ProviderSessionDirectory = class extends Context.Service()("ryco/provider/Services/ProviderSessionDirectory") {};
+//#endregion
 //#region ../../packages/shared/src/qrCode.ts
 var QrCode = class QrCode {
 	static Ecc;
@@ -39892,6 +40268,86 @@ const validateRestrictedWorkspaceSnapshot = (snapshot) => Effect.gen(function* (
 		operation: "persisted worktree startup validation"
 	}), { discard: true });
 }).pipe(Effect.mapError(incompatibleWorkspaceStateError));
+const ORPHANED_PROVIDER_SESSION_ERROR = "Provider session did not survive a server restart. Send a new message to continue.";
+function clearRuntimePayloadActiveTurn(runtimePayload) {
+	if (typeof runtimePayload === "object" && runtimePayload !== null && !Array.isArray(runtimePayload)) return {
+		...runtimePayload,
+		activeTurnId: null
+	};
+	return { activeTurnId: null };
+}
+/**
+* Settle projected provider sessions whose native process did not survive this
+* server process. This runs after the provider/orchestration roots subscribe,
+* but before the startup command gate opens, so repaired state is authoritative
+* before clients can mutate it.
+*/
+const reconcileOrphanedProviderSessions = Effect.gen(function* () {
+	const directory = yield* ProviderSessionDirectory;
+	const orchestrationEngine = yield* OrchestrationEngineService;
+	const providerService = yield* ProviderService;
+	const projectionSnapshotQuery = yield* ProjectionSnapshotQuery;
+	const liveSessionsExit = yield* Effect.exit(providerService.listSessions());
+	if (Exit.isFailure(liveSessionsExit)) {
+		if (Cause.hasInterrupts(liveSessionsExit.cause)) return yield* Effect.failCause(liveSessionsExit.cause);
+		yield* Effect.logWarning("provider session startup inventory failed", { cause: Cause.pretty(liveSessionsExit.cause) });
+		return;
+	}
+	const liveThreadIds = new Set(liveSessionsExit.value.map((session) => session.threadId));
+	const orphanedThreads = (yield* projectionSnapshotQuery.getCommandReadModel()).threads.filter((thread) => thread.session !== null && (thread.session.status === "starting" || thread.session.status === "running" || thread.session.activeTurnId !== null) && !liveThreadIds.has(thread.id));
+	for (const thread of orphanedThreads) {
+		const session = thread.session;
+		if (session === null) continue;
+		yield* Effect.gen(function* () {
+			const binding = yield* directory.getBinding(thread.id);
+			if (Option.isNone(binding)) return;
+			yield* providerService.stopSessionBinding(binding.value).pipe(Effect.catchCause((cause) => Cause.hasInterrupts(cause) ? Effect.failCause(cause) : Effect.logWarning("failed to stop orphaned provider runtime binding", {
+				threadId: thread.id,
+				cause: Cause.pretty(cause)
+			})));
+			yield* directory.upsert({
+				...binding.value,
+				status: "stopped",
+				runtimePayload: clearRuntimePayloadActiveTurn(binding.value.runtimePayload)
+			});
+		}).pipe(Effect.catchCause((cause) => Cause.hasInterrupts(cause) ? Effect.failCause(cause) : Effect.logWarning("failed to reconcile orphaned provider session binding", {
+			threadId: thread.id,
+			cause: Cause.pretty(cause)
+		})));
+		const reconciledAt = (/* @__PURE__ */ new Date()).toISOString();
+		if (session.activeTurnId !== null) {
+			const interruptCommand = {
+				type: "thread.turn.interrupt",
+				commandId: CommandId.make(`provider:startup-reconciliation:turn-interrupt:${crypto.randomUUID()}`),
+				threadId: thread.id,
+				turnId: session.activeTurnId,
+				createdAt: reconciledAt
+			};
+			yield* Effect.suspend(() => orchestrationEngine.dispatch(interruptCommand)).pipe(Effect.retry(Schedule.recurs(1)), Effect.catchCause((cause) => Cause.hasInterrupts(cause) ? Effect.failCause(cause) : Effect.logWarning("failed to settle orphaned provider turn projection", {
+				threadId: thread.id,
+				turnId: session.activeTurnId,
+				cause: Cause.pretty(cause)
+			})));
+		}
+		const sessionCommand = {
+			type: "thread.session.set",
+			commandId: CommandId.make(`server:startup-reconciliation:${crypto.randomUUID()}`),
+			threadId: thread.id,
+			session: {
+				...session,
+				status: "error",
+				activeTurnId: null,
+				lastError: ORPHANED_PROVIDER_SESSION_ERROR,
+				updatedAt: reconciledAt
+			},
+			createdAt: reconciledAt
+		};
+		yield* Effect.suspend(() => orchestrationEngine.dispatch(sessionCommand)).pipe(Effect.retry(Schedule.recurs(1)), Effect.catchCause((cause) => Cause.hasInterrupts(cause) ? Effect.failCause(cause) : Effect.logWarning("failed to settle orphaned provider session projection", {
+			threadId: thread.id,
+			cause: Cause.pretty(cause)
+		})));
+	}
+}).pipe(Effect.catchCause((cause) => Cause.hasInterrupts(cause) ? Effect.failCause(cause) : Effect.logWarning("provider session startup reconciliation failed", { cause: Cause.pretty(cause) })));
 const makeServerRuntimeStartup = Effect.gen(function* () {
 	const runtimeStartedAt = Date.now();
 	const serverConfig = yield* ServerConfig;
@@ -39926,6 +40382,8 @@ const makeServerRuntimeStartup = Effect.gen(function* () {
 			concurrency: "unbounded",
 			discard: true
 		}));
+		yield* Effect.logDebug("startup phase: reconciling orphaned provider sessions");
+		yield* runStartupPhase("provider-sessions.reconcile", reconcileOrphanedProviderSessions);
 		const welcomeBase = yield* resolveWelcomeBase;
 		const environment = yield* serverEnvironment.getDescriptor;
 		yield* Effect.logDebug("startup phase: preparing welcome payload");
@@ -41010,17 +41468,40 @@ const makeGitManager = Effect.fn("makeGitManager")(function* () {
 		timeToLive: (exit) => Exit.isSuccess(exit) ? STATUS_RESULT_CACHE_TTL : Duration.zero
 	});
 	const invalidateLocalStatusResultCache = (cwd) => normalizeStatusCacheKey(cwd).pipe(Effect.flatMap((cacheKey) => Cache.invalidate(localStatusResultCache, cacheKey)));
+	const probeBranchPublished = Effect.fn("probeBranchPublished")(function* (cwd, branch, upstreamRef) {
+		if (upstreamRef !== null) return true;
+		return yield* Effect.gen(function* () {
+			const remotes = (yield* gitCore.execute({
+				operation: "GitManager.probeBranchPublished.remotes",
+				cwd,
+				args: ["remote"]
+			})).stdout.split("\n").map((remote) => remote.trim()).filter((remote) => remote.length > 0);
+			if (remotes.length === 0) return null;
+			const refsResult = yield* gitCore.execute({
+				operation: "GitManager.probeBranchPublished.remoteRefs",
+				cwd,
+				args: [
+					"for-each-ref",
+					"--format=%(refname:short)",
+					"refs/remotes"
+				]
+			});
+			const remoteRefs = new Set(refsResult.stdout.split("\n").map((ref) => ref.trim()).filter((ref) => ref.length > 0));
+			return remotes.some((remote) => remoteRefs.has(`${remote}/${branch}`));
+		}).pipe(Effect.catch(() => Effect.succeed(null)));
+	});
 	const readRemoteStatus = Effect.fn("readRemoteStatus")(function* (cwd) {
 		const details = yield* gitCore.statusDetails(cwd).pipe(Effect.catchIf(isNotGitRepositoryError, () => Effect.succeed(null)));
 		if (details === null || !details.isRepo) return null;
-		const pr = details.branch !== null ? yield* findLatestPr(cwd, {
+		const shouldQueryPullRequests = details.branch === null ? false : (yield* probeBranchPublished(cwd, details.branch, details.upstreamRef)) ?? true;
+		const pr = details.branch !== null && shouldQueryPullRequests ? yield* findLatestPr(cwd, {
 			branch: details.branch,
 			upstreamRef: details.upstreamRef
 		}).pipe(Effect.map((latest) => {
 			if (!latest) return null;
 			if (details.isDefaultBranch && latest.state !== "open") return null;
 			return toStatusPr(latest);
-		}), Effect.catch(() => Effect.succeed(null))) : null;
+		})) : null;
 		return {
 			hasUpstream: details.hasUpstream,
 			aheadCount: details.aheadCount,
@@ -41682,6 +42163,7 @@ const make$9 = Effect.fn("makeGitWorkflowService")(function* () {
 		listRefs: (input) => detectGitRepositoryForCommand("GitWorkflowService.listRefs", input.cwd).pipe(Effect.flatMap((isGitRepository) => isGitRepository ? git.listRefs(input).pipe(Effect.catch(recoverMissingCwd(input.cwd, nonRepositoryListRefs()))) : Effect.succeed(nonRepositoryListRefs()))),
 		createWorktree: (input) => ensureGitCommand("GitWorkflowService.createWorktree", input.cwd).pipe(Effect.andThen(git.createWorktree(input))),
 		removeWorktree: (input) => ensureGitCommand("GitWorkflowService.removeWorktree", input.cwd).pipe(Effect.andThen(git.removeWorktree(input))),
+		pruneWorktrees: (cwd) => ensureGitCommand("GitWorkflowService.pruneWorktrees", cwd).pipe(Effect.andThen(git.pruneWorktrees(cwd))),
 		listWorktreePaths: (cwd) => {
 			const empty = [];
 			return detectGitRepositoryForCommand("GitWorkflowService.listWorktreePaths", cwd).pipe(Effect.flatMap((isGitRepository) => isGitRepository ? git.listWorktreePaths(cwd).pipe(Effect.catch(recoverMissingCwd(cwd, empty))) : Effect.succeed(empty)));
@@ -44857,6 +45339,7 @@ const makeWsRpcContext = (principal) => Effect.gen(function* () {
 	const usageServiceOption = yield* Effect.serviceOption(UsageService);
 	const usageService = Option.getOrElse(usageServiceOption, () => UsageServiceTest);
 	const orchestrationEngine = yield* OrchestrationEngineService;
+	const threadDeletionReactor = yield* ThreadDeletionReactor;
 	const contextHandoffInspection = yield* Effect.serviceOption(ContextHandoffInspection);
 	const threadPriorityCoordinator = yield* Effect.serviceOption(ThreadPriorityCoordinator);
 	const agentControlProposals = yield* Effect.serviceOption(AgentControlProposalService);
@@ -45074,7 +45557,7 @@ const makeWsRpcContext = (principal) => Effect.gen(function* () {
 		})() : Effect.void;
 		return yield* Effect.gen(function* () {
 			if (bootstrap?.createThread) {
-				yield* orchestrationEngine.dispatch({
+				const created = yield* orchestrationEngine.dispatch({
 					type: "thread.create",
 					commandId: serverCommandId("bootstrap-thread-create"),
 					threadId: command.threadId,
@@ -45087,6 +45570,7 @@ const makeWsRpcContext = (principal) => Effect.gen(function* () {
 					worktreePath: bootstrap.createThread.worktreePath,
 					createdAt: bootstrap.createThread.createdAt
 				});
+				yield* threadDeletionReactor.drainThrough(created.sequence);
 				createdThread = true;
 			}
 			if (bootstrap?.prepareWorktree) {
@@ -45123,7 +45607,7 @@ const makeWsRpcContext = (principal) => Effect.gen(function* () {
 		}));
 	});
 	const dispatchNormalizedCommand = (normalizedCommand) => {
-		const dispatchEffect = normalizedCommand.type === "thread.turn.start" && normalizedCommand.bootstrap ? dispatchBootstrapTurnStart(normalizedCommand) : orchestrationEngine.dispatch(normalizedCommand).pipe(Effect.mapError((cause) => toDispatchCommandError(cause, "Failed to dispatch orchestration command")));
+		const dispatchEffect = normalizedCommand.type === "thread.turn.start" && normalizedCommand.bootstrap ? dispatchBootstrapTurnStart(normalizedCommand) : orchestrationEngine.dispatch(normalizedCommand).pipe(Effect.tap(({ sequence }) => normalizedCommand.type === "thread.create" ? threadDeletionReactor.drainThrough(sequence) : Effect.void), Effect.mapError((cause) => toDispatchCommandError(cause, "Failed to dispatch orchestration command")));
 		return startup.enqueueCommand(dispatchEffect).pipe(Effect.mapError((cause) => toDispatchCommandError(cause, "Failed to dispatch orchestration command")));
 	};
 	const loadDiagnosticsMetrics = localDiagnosticsMetrics.snapshot;
@@ -45511,18 +45995,24 @@ const normalizeDispatchCommand = (command) => Effect.gen(function* () {
 		...command.projectMetadataDir !== void 0 ? { projectMetadataDir: yield* normalizeProjectMetadataDir(command.projectMetadataDir) } : {}
 	};
 	if (command.type !== "thread.turn.start" && command.type !== "thread.turn.steer") return command;
-	const normalizedAttachments = yield* Effect.forEach(command.message.attachments, (attachment) => Effect.gen(function* () {
+	const preparedAttachments = yield* Effect.forEach(command.message.attachments, (attachment) => Effect.gen(function* () {
 		const parsed = parseBase64DataUrl(attachment.dataUrl);
-		if (!parsed || !parsed.mimeType.startsWith("image/")) return yield* new OrchestrationDispatchCommandError({ message: `Invalid image attachment payload for '${attachment.name}'.` });
-		const bytes = Buffer.from(parsed.base64, "base64");
-		if (bytes.byteLength === 0 || bytes.byteLength > 10485760) return yield* new OrchestrationDispatchCommandError({ message: `Image attachment '${attachment.name}' is empty or too large.` });
+		if (!parsed) return yield* new OrchestrationDispatchCommandError({ message: `Attachment '${attachment.name}' must use a valid base64 data URL.` });
+		const normalizedMimeType = parsed.mimeType.toLowerCase();
+		if (normalizedMimeType !== attachment.mimeType.toLowerCase()) return yield* new OrchestrationDispatchCommandError({ message: `Attachment '${attachment.name}' declares '${attachment.mimeType}' but its payload is '${parsed.mimeType}'.` });
+		if (attachment.type === "image" && !normalizedMimeType.startsWith("image/")) return yield* new OrchestrationDispatchCommandError({ message: `Image attachment '${attachment.name}' must use an image MIME type.` });
+		const normalizedBase64 = parsed.base64.replace(/\s+/g, "");
+		const bytes = Buffer.from(normalizedBase64, "base64");
+		if (bytes.byteLength === 0 || bytes.toString("base64") !== normalizedBase64 || bytes.byteLength !== attachment.sizeBytes) return yield* new OrchestrationDispatchCommandError({ message: `Attachment '${attachment.name}' has invalid base64 data or mismatched size metadata.` });
+		const attachmentLimit = attachment.type === "image" ? PROVIDER_SEND_TURN_MAX_IMAGE_BYTES : PROVIDER_SEND_TURN_MAX_FILE_BYTES;
+		if (bytes.byteLength > attachmentLimit) return yield* new OrchestrationDispatchCommandError({ message: `Attachment '${attachment.name}' is ${bytes.byteLength} bytes; limit is ${attachmentLimit} bytes.` });
 		const attachmentId = createAttachmentId(command.threadId);
 		if (!attachmentId) return yield* new OrchestrationDispatchCommandError({ message: "Failed to create a safe attachment id." });
 		const persistedAttachment = {
-			type: "image",
+			type: attachment.type,
 			id: attachmentId,
 			name: attachment.name,
-			mimeType: parsed.mimeType.toLowerCase(),
+			mimeType: normalizedMimeType,
 			sizeBytes: bytes.byteLength
 		};
 		const attachmentPath = resolveAttachmentPath({
@@ -45530,10 +46020,22 @@ const normalizeDispatchCommand = (command) => Effect.gen(function* () {
 			attachment: persistedAttachment
 		});
 		if (!attachmentPath) return yield* new OrchestrationDispatchCommandError({ message: `Failed to resolve persisted path for '${attachment.name}'.` });
-		yield* fileSystem.makeDirectory(path.dirname(attachmentPath), { recursive: true }).pipe(Effect.mapError(() => new OrchestrationDispatchCommandError({ message: `Failed to create attachment directory for '${attachment.name}'.` })));
-		yield* fileSystem.writeFile(attachmentPath, bytes).pipe(Effect.mapError(() => new OrchestrationDispatchCommandError({ message: `Failed to persist attachment '${attachment.name}'.` })));
-		return persistedAttachment;
+		return {
+			attachment: persistedAttachment,
+			attachmentPath,
+			bytes
+		};
 	}), { concurrency: 1 });
+	const totalAttachmentBytes = preparedAttachments.reduce((total, prepared) => total + prepared.bytes.byteLength, 0);
+	if (totalAttachmentBytes > 52428800) return yield* new OrchestrationDispatchCommandError({ message: `Attachments total ${totalAttachmentBytes} bytes; limit is ${PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES} bytes.` });
+	yield* Effect.forEach(preparedAttachments, ({ attachment, attachmentPath, bytes }) => fileSystem.makeDirectory(path.dirname(attachmentPath), { recursive: true }).pipe(Effect.mapError(() => new OrchestrationDispatchCommandError({ message: `Failed to create attachment directory for '${attachment.name}'.` })), Effect.andThen(fileSystem.writeFile(attachmentPath, bytes).pipe(Effect.mapError(() => new OrchestrationDispatchCommandError({ message: `Failed to persist attachment '${attachment.name}'.` }))))), {
+		concurrency: 1,
+		discard: true
+	}).pipe(Effect.onError(() => Effect.forEach(preparedAttachments, ({ attachmentPath }) => fileSystem.remove(attachmentPath).pipe(Effect.ignore), {
+		concurrency: 1,
+		discard: true
+	})));
+	const normalizedAttachments = preparedAttachments.map(({ attachment }) => attachment);
 	return {
 		...command,
 		message: {
@@ -47751,10 +48253,10 @@ const ContextHandoffDocument = Schema.Struct({
 	subagents: Schema.Array(ContextHandoffSubagentEntry),
 	priorHandoffs: Schema.Array(ContextHandoffBoundaryEntry)
 });
-function asRecord$3(value) {
+function asRecord$4(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
-function asTrimmedString$1(value) {
+function asTrimmedString$2(value) {
 	if (typeof value !== "string") return;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : void 0;
@@ -47773,7 +48275,7 @@ function truncateUnicodeSafe(value, maxChars) {
 	return value.slice(0, end);
 }
 function boundedString(value, maxChars) {
-	const normalized = asTrimmedString$1(value);
+	const normalized = asTrimmedString$2(value);
 	if (!normalized) return { truncated: false };
 	const bounded = truncateUnicodeSafe(normalized, maxChars);
 	return {
@@ -47825,7 +48327,7 @@ function boundedEndpoint(endpoint) {
 	};
 }
 function activityPayload(activity) {
-	return asRecord$3(activity.payload);
+	return asRecord$4(activity.payload);
 }
 function decodeHandoffPayload(activity) {
 	if (activity.kind !== "context-handoff") return;
@@ -47912,7 +48414,7 @@ function collectRuntimePlan(activities) {
 		if (!Array.isArray(payload?.plan)) continue;
 		let truncated = payload.plan.length > MAX_PLAN_STEPS;
 		const steps = payload.plan.slice(0, MAX_PLAN_STEPS).flatMap((entry) => {
-			const record = asRecord$3(entry);
+			const record = asRecord$4(entry);
 			const step = boundedString(record?.step, DETAIL_MAX_CHARS);
 			if (!step.value) return [];
 			truncated ||= step.truncated;
@@ -47939,21 +48441,21 @@ function collectRuntimePlan(activities) {
 	return latest ? [latest] : [];
 }
 function normalizeCommand(value) {
-	const direct = asTrimmedString$1(value);
+	const direct = asTrimmedString$2(value);
 	if (direct) return direct;
 	if (!Array.isArray(value)) return;
 	const parts = value.flatMap((entry) => {
-		const part = asTrimmedString$1(entry);
+		const part = asTrimmedString$2(entry);
 		return part ? [part] : [];
 	});
 	return parts.length > 0 ? parts.join(" ") : void 0;
 }
 function extractCommand(payload) {
-	const data = asRecord$3(payload.data);
-	const item = asRecord$3(data?.item);
-	const input = asRecord$3(item?.input);
-	const result = asRecord$3(item?.result);
-	const rawInput = asRecord$3(data?.rawInput);
+	const data = asRecord$4(payload.data);
+	const item = asRecord$4(data?.item);
+	const input = asRecord$4(item?.input);
+	const result = asRecord$4(item?.result);
+	const rawInput = asRecord$4(data?.rawInput);
 	for (const candidate of [
 		item?.command,
 		input?.command,
@@ -47964,7 +48466,7 @@ function extractCommand(payload) {
 		const command = normalizeCommand(candidate);
 		if (command) return command;
 	}
-	const executable = asTrimmedString$1(rawInput?.executable);
+	const executable = asTrimmedString$2(rawInput?.executable);
 	const args = normalizeCommand(rawInput?.args);
 	return executable ? args ? `${executable} ${args}` : executable : void 0;
 }
@@ -47972,36 +48474,36 @@ function textFromContentArray(value) {
 	if (!Array.isArray(value)) return;
 	const chunks = [];
 	for (const entry of value) {
-		const record = asRecord$3(entry);
-		const direct = asTrimmedString$1(record?.text);
-		const nested = asTrimmedString$1(asRecord$3(record?.content)?.text);
+		const record = asRecord$4(entry);
+		const direct = asTrimmedString$2(record?.text);
+		const nested = asTrimmedString$2(asRecord$4(record?.content)?.text);
 		if (direct) chunks.push(direct);
 		else if (nested) chunks.push(nested);
 	}
 	return chunks.length > 0 ? chunks.join("\n") : void 0;
 }
 function extractOutput(payload) {
-	const data = asRecord$3(payload.data);
-	const item = asRecord$3(data?.item);
-	if (item?.type === "commandExecution") return asTrimmedString$1(item.aggregatedOutput);
+	const data = asRecord$4(payload.data);
+	const item = asRecord$4(data?.item);
+	if (item?.type === "commandExecution") return asTrimmedString$2(item.aggregatedOutput);
 	if (item?.type === "mcpToolCall") {
-		const error = asTrimmedString$1(asRecord$3(item.error)?.message);
+		const error = asTrimmedString$2(asRecord$4(item.error)?.message);
 		if (error) return error;
-		const content = textFromContentArray(asRecord$3(item.result)?.content);
+		const content = textFromContentArray(asRecord$4(item.result)?.content);
 		if (content) return content;
 	}
 	if (item?.type === "dynamicToolCall") {
 		const content = textFromContentArray(item.contentItems);
 		if (content) return content;
 	}
-	const rawOutput = asRecord$3(data?.rawOutput);
-	return asTrimmedString$1(rawOutput?.stdout) ?? asTrimmedString$1(rawOutput?.stderr) ?? asTrimmedString$1(rawOutput?.content) ?? textFromContentArray(data?.content);
+	const rawOutput = asRecord$4(data?.rawOutput);
+	return asTrimmedString$2(rawOutput?.stdout) ?? asTrimmedString$2(rawOutput?.stderr) ?? asTrimmedString$2(rawOutput?.content) ?? textFromContentArray(data?.content);
 }
 function extractExitCode(payload) {
-	const data = asRecord$3(payload.data);
-	const item = asRecord$3(data?.item);
-	const itemResult = asRecord$3(item?.result);
-	const rawOutput = asRecord$3(data?.rawOutput);
+	const data = asRecord$4(payload.data);
+	const item = asRecord$4(data?.item);
+	const itemResult = asRecord$4(item?.result);
+	const rawOutput = asRecord$4(data?.rawOutput);
 	for (const candidate of [
 		item?.exitCode,
 		itemResult?.exitCode,
@@ -48010,7 +48512,7 @@ function extractExitCode(payload) {
 		const exitCode = asInteger(candidate);
 		if (exitCode !== void 0) return exitCode;
 	}
-	const detail = asTrimmedString$1(payload.detail);
+	const detail = asTrimmedString$2(payload.detail);
 	const match = detail ? /<exited with exit code (?<code>-?\d+)>\s*$/iu.exec(detail) : null;
 	const parsed = Number.parseInt(match?.groups?.code ?? "", 10);
 	return Number.isInteger(parsed) ? parsed : void 0;
@@ -48024,7 +48526,7 @@ function pathFromRecord(record) {
 		"newPath",
 		"oldPath"
 	]) {
-		const path = asTrimmedString$1(record[key]);
+		const path = asTrimmedString$2(record[key]);
 		if (path) return truncateUnicodeSafe(path, PATH_MAX_CHARS);
 	}
 }
@@ -48045,7 +48547,7 @@ function collectPathsAndChanges(value) {
 			for (const entry of current) visit(entry, depth + 1);
 			return;
 		}
-		const record = asRecord$3(current);
+		const record = asRecord$4(current);
 		if (!record || seenObjects.has(record)) return;
 		seenObjects.add(record);
 		const path = pathFromRecord(record);
@@ -48099,10 +48601,10 @@ function extractTool(activity) {
 	const lifecycle = toolLifecycle(activity.kind);
 	const payload = activityPayload(activity);
 	if (!lifecycle || !payload || !Schema.is(ToolLifecycleItemType)(payload.itemType)) return;
-	const data = asRecord$3(payload.data);
-	const providerRefs = asRecord$3(payload.providerRefs);
-	const providerItemId = asTrimmedString$1(payload.providerItemId) ?? asTrimmedString$1(providerRefs?.providerItemId);
-	const toolCallId = asTrimmedString$1(data?.toolCallId);
+	const data = asRecord$4(payload.data);
+	const providerRefs = asRecord$4(payload.providerRefs);
+	const providerItemId = asTrimmedString$2(payload.providerItemId) ?? asTrimmedString$2(providerRefs?.providerItemId);
+	const toolCallId = asTrimmedString$2(data?.toolCallId);
 	const command = boundedString(extractCommand(payload), TOOL_COMMAND_MAX_CHARS);
 	const output = boundedString(extractOutput(payload), TOOL_OUTPUT_MAX_CHARS);
 	const detail = boundedString(payload.detail, DETAIL_MAX_CHARS);
@@ -48194,7 +48696,7 @@ function parseQuestions(payload) {
 	let truncated = payload.questions.length > MAX_QUESTIONS_PER_REQUEST;
 	return {
 		questions: payload.questions.slice(0, MAX_QUESTIONS_PER_REQUEST).flatMap((value) => {
-			const record = asRecord$3(value);
+			const record = asRecord$4(value);
 			const id = boundedString(record?.id, LABEL_MAX_CHARS);
 			const header = boundedString(record?.header, LABEL_MAX_CHARS);
 			const question = boundedString(record?.question, QUESTION_MAX_CHARS);
@@ -48203,7 +48705,7 @@ function parseQuestions(payload) {
 			const rawOptions = Array.isArray(record?.options) ? record.options : [];
 			truncated ||= rawOptions.length > MAX_OPTIONS_PER_QUESTION;
 			const options = rawOptions.slice(0, MAX_OPTIONS_PER_QUESTION).flatMap((option) => {
-				const label = boundedString(asRecord$3(option)?.label, LABEL_MAX_CHARS);
+				const label = boundedString(asRecord$4(option)?.label, LABEL_MAX_CHARS);
 				truncated ||= label.truncated;
 				return label.value ? [label.value] : [];
 			});
@@ -48244,7 +48746,7 @@ function collectNotices(activities) {
 		const failure = failureFromActivity(activity);
 		if (failure) failures.push(failure);
 		const payload = activityPayload(activity);
-		const requestId = asTrimmedString$1(payload?.requestId);
+		const requestId = asTrimmedString$2(payload?.requestId);
 		if (!requestId) continue;
 		if (activity.kind === "user-input.resolved") {
 			pendingQuestions.delete(requestId);
@@ -48271,7 +48773,7 @@ function collectSubagents(activities) {
 	for (const activity of activities.toSorted(compareOrdered)) {
 		if (activity.kind !== "subagent.completed") continue;
 		const payload = activityPayload(activity);
-		const subagent = asRecord$3(payload?.subagent);
+		const subagent = asRecord$4(payload?.subagent);
 		const subagentId = boundedString(subagent?.subagentId, LABEL_MAX_CHARS);
 		const status = payload?.status;
 		if (!subagentId.value || !Schema.is(RuntimeSubagentStatus)(status)) continue;
@@ -50290,10 +50792,10 @@ const DEVICE_CAPABILITY_IDS = [
 	"accessibility",
 	"encoder"
 ];
-const asRecord$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+const asRecord$3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 const asNonEmptyString = (value) => typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
 const parseToolchain = (value) => {
-	const record = asRecord$2(value);
+	const record = asRecord$3(value);
 	if (!record) return void 0;
 	const toolchain = {
 		xcodeVersion: asNonEmptyString(record["xcodeVersion"]),
@@ -50315,7 +50817,7 @@ const parseCapability = (id, raw) => {
 		id,
 		ok: true
 	};
-	const record = asRecord$2(raw);
+	const record = asRecord$3(raw);
 	if (!record) return {
 		id,
 		ok: false,
@@ -50348,7 +50850,7 @@ const parseHelperProbe = (stdout) => {
 			error: "The device helper preflight returned unreadable output."
 		};
 	}
-	const record = asRecord$2(parsed);
+	const record = asRecord$3(parsed);
 	if (!record) return {
 		ok: false,
 		capabilities: DEVICE_CAPABILITY_IDS.map((id) => ({
@@ -50359,7 +50861,7 @@ const parseHelperProbe = (stdout) => {
 		toolchain: void 0,
 		error: "The device helper preflight returned unreadable output."
 	};
-	const capabilitiesRecord = asRecord$2(record["capabilities"]);
+	const capabilitiesRecord = asRecord$3(record["capabilities"]);
 	const error = asNonEmptyString(record["error"]);
 	if (!capabilitiesRecord) {
 		const ok = record["ok"] === true;
@@ -50612,7 +51114,7 @@ var DeviceHelperError = class extends Error {
 		this.code = code;
 	}
 };
-function asRecord$1(value) {
+function asRecord$2(value) {
 	return typeof value === "object" && value !== null ? value : {};
 }
 /**
@@ -50748,8 +51250,8 @@ var HelperClient = class {
 	async attach(udid, options = {}) {
 		if (!options.force && this.attachment?.udid === udid) return this.attachment;
 		this.attachment = null;
-		const result = asRecord$1(await this.request(HELPER_METHODS.attach, { udid }));
-		const capabilities = asRecord$1(result.capabilities);
+		const result = asRecord$2(await this.request(HELPER_METHODS.attach, { udid }));
+		const capabilities = asRecord$2(result.capabilities);
 		const pixelWidth = readNumber(result, "pixelWidth", 0);
 		const pixelHeight = readNumber(result, "pixelHeight", 0);
 		const scale = readNumber(result, "scale", 3);
@@ -50903,14 +51405,14 @@ var HelperClient = class {
 		} catch {
 			return;
 		}
-		const record = asRecord$1(message);
+		const record = asRecord$2(message);
 		if (typeof record.id !== "number") return;
 		const request = this.pending.get(record.id);
 		if (!request) return;
 		this.pending.delete(record.id);
 		clearTimeout(request.timer);
 		if (record.error !== void 0 && record.error !== null) {
-			const error = asRecord$1(record.error);
+			const error = asRecord$2(record.error);
 			request.reject(new DeviceHelperError(typeof error.code === "number" ? `helper_${error.code}` : "helper_error", typeof error.message === "string" ? error.message : "Device helper reported an error"));
 			return;
 		}
@@ -74982,9 +75484,6 @@ Schema.Struct({ threadId: ThreadId });
 */
 var ProviderSessionRuntimeRepository = class extends Context.Service()("ryco/persistence/Services/ProviderSessionRuntime/ProviderSessionRuntimeRepository") {};
 //#endregion
-//#region src/provider/Services/ProviderSessionDirectory.ts
-var ProviderSessionDirectory = class extends Context.Service()("ryco/provider/Services/ProviderSessionDirectory") {};
-//#endregion
 //#region src/provider/Layers/ProviderSessionDirectory.ts
 function toPersistenceError(operation) {
 	return (cause) => new ProviderSessionDirectoryPersistenceError({
@@ -75669,6 +76168,12 @@ const ProviderEventLoggersLive = Layer.effect(ProviderEventLoggers, Effect.gen(f
 	};
 }));
 //#endregion
+//#region ../../packages/shared/src/providerCapabilities.ts
+/** Drivers whose native turn API accepts arbitrary file bytes, not only images. */
+function providerSupportsGeneralFileAttachments(provider) {
+	return provider === "copilot" || provider === "opencode";
+}
+//#endregion
 //#region src/provider/Layers/ProviderService.ts
 /**
 * ProviderServiceLive - Cross-provider orchestration layer.
@@ -76215,6 +76720,8 @@ const makeProviderService = Effect.fn("makeProviderService")(function* (options)
 			});
 			metricProvider = routed.adapter.provider;
 			metricModel = input.modelSelection?.model;
+			const unsupportedFile = input.attachments.find((attachment) => attachment.type === "file");
+			if (unsupportedFile && !providerSupportsGeneralFileAttachments(routed.adapter.provider)) return yield* toValidationError("ProviderService.sendTurn", `Provider '${routed.adapter.provider}' does not accept general file attachments. Add '${unsupportedFile.name}' to the workspace and reference its path instead.`);
 			yield* Effect.annotateCurrentSpan({
 				"provider.kind": routed.adapter.provider,
 				...input.modelSelection?.model ? { "provider.model": input.modelSelection.model } : {}
@@ -76289,6 +76796,8 @@ const makeProviderService = Effect.fn("makeProviderService")(function* (options)
 			allowRecovery: false
 		});
 		if (!routed.isActive || routed.session === void 0) return yield* new ProviderSessionNotFoundError({ threadId: input.threadId });
+		const unsupportedFile = input.attachments.find((attachment) => attachment.type === "file");
+		if (unsupportedFile && !providerSupportsGeneralFileAttachments(routed.adapter.provider)) return yield* toValidationError("ProviderService.steerTurn", `Provider '${routed.adapter.provider}' does not accept general file attachments. Add '${unsupportedFile.name}' to the workspace and reference its path instead.`);
 		if (routed.session.activeTurnId !== input.expectedTurnId) return yield* toValidationError("ProviderService.steerTurn", `Expected active turn '${input.expectedTurnId}', found '${routed.session.activeTurnId ?? "none"}'.`);
 		const steer = routed.adapter.steerTurn;
 		if (routed.adapter.capabilities.turnSteering !== "native" || steer === void 0) return yield* toValidationError("ProviderService.steerTurn", `Provider '${routed.adapter.provider}' does not support active-turn steering.`);
@@ -76667,6 +77176,7 @@ const ProviderSessionReaperLive = makeProviderSessionReaperLive();
 const OPENCODE_SERVER_READY_PREFIX = "opencode server listening";
 const DEFAULT_OPENCODE_SERVER_TIMEOUT_MS = 5e3;
 const DEFAULT_HOSTNAME = "127.0.0.1";
+const MINIMUM_OPENCODE_VERSION = "1.14.19";
 const OPENCODE_RUNTIME_ERROR_TAG = "OpenCodeRuntimeError";
 var OpenCodeRuntimeError = class extends Data.TaggedError(OPENCODE_RUNTIME_ERROR_TAG) {
 	static is = (u) => Predicate.isTagged(u, OPENCODE_RUNTIME_ERROR_TAG);
@@ -76692,6 +77202,22 @@ const runOpenCodeSdk = (operation, fn) => Effect.tryPromise({
 		cause
 	})
 }).pipe(Effect.withSpan(`opencode.${operation}`));
+const verifyOpenCodeServerVersion = (client) => runOpenCodeSdk("global.health", (signal) => client.global.health({ signal })).pipe(Effect.timeoutOption("5 seconds"), Effect.flatMap((result) => {
+	if (Option.isNone(result)) return Effect.fail(new OpenCodeRuntimeError({
+		operation: "global.health",
+		detail: "Timed out while checking the OpenCode server version."
+	}));
+	const health = result.value.data;
+	if (!health?.healthy || typeof health.version !== "string" || health.version.length === 0) return Effect.fail(new OpenCodeRuntimeError({
+		operation: "global.health",
+		detail: "OpenCode server health check returned an invalid response."
+	}));
+	if (compareCliVersions(health.version, "1.14.19") < 0) return Effect.fail(new OpenCodeRuntimeError({
+		operation: "global.health",
+		detail: `OpenCode v${health.version} is too old. Upgrade to v${MINIMUM_OPENCODE_VERSION} or newer.`
+	}));
+	return Effect.succeed(health.version);
+}));
 let openCodeSdkModulePromise;
 const loadOpenCodeSdkModule = () => Effect.tryPromise({
 	try: async () => {
@@ -76709,6 +77235,11 @@ const loadOpenCodeSdkModule = () => Effect.tryPromise({
 		cause
 	})
 }).pipe(Effect.withSpan("opencode.sdk.load"));
+function resolveOpenCodeServerPassword(input) {
+	if (input.configuredPassword !== void 0) return input.configuredPassword;
+	if (input.external) return;
+	return input.environment === void 0 ? process.env.OPENCODE_SERVER_PASSWORD : input.environment.OPENCODE_SERVER_PASSWORD;
+}
 function parseServerUrlFromOutput(output) {
 	for (const line of output.split("\n")) {
 		if (!line.startsWith(OPENCODE_SERVER_READY_PREFIX)) continue;
@@ -76733,13 +77264,13 @@ function openCodeQuestionId(index, question) {
 function toOpenCodeFileParts(input) {
 	const parts = [];
 	for (const attachment of input.attachments ?? []) {
-		const attachmentPath = input.resolveAttachmentPath(attachment);
-		if (!attachmentPath) continue;
+		const attachmentUrl = input.resolveAttachmentUrl(attachment);
+		if (!attachmentUrl) continue;
 		parts.push({
 			type: "file",
 			mime: attachment.mimeType,
 			filename: attachment.name,
-			url: pathToFileURL(attachmentPath).href
+			url: attachmentUrl
 		});
 	}
 	return parts;
@@ -76858,11 +77389,17 @@ const makeOpenCodeRuntime = Effect.gen(function* () {
 			`--hostname=${hostname}`,
 			`--port=${port}`
 		];
+		const serverPassword = resolveOpenCodeServerPassword({
+			external: false,
+			...input.serverPassword !== void 0 ? { configuredPassword: input.serverPassword } : {},
+			...input.environment !== void 0 ? { environment: input.environment } : {}
+		});
 		const child = yield* spawner.spawn(ChildProcess.make(input.binaryPath, args, {
 			detached: process.platform !== "win32",
 			shell: process.platform === "win32",
 			env: {
 				...input.environment ?? process.env,
+				...serverPassword !== void 0 ? { OPENCODE_SERVER_PASSWORD: serverPassword } : {},
 				OPENCODE_CONFIG_CONTENT: JSON.stringify({})
 			}
 		})).pipe(Effect.provideService(Scope.Scope, runtimeScope), Effect.mapError((cause) => new OpenCodeRuntimeError({
@@ -76925,24 +77462,34 @@ const makeOpenCodeRuntime = Effect.gen(function* () {
 		}
 		return {
 			url: readyOption.value,
+			...serverPassword !== void 0 ? { serverPassword } : {},
 			exitCode: child.exitCode.pipe(Effect.map(Number), Effect.orElseSucceed(() => 0))
 		};
 	});
 	const connectToOpenCodeServer = (input) => {
 		const serverUrl = input.serverUrl?.trim();
-		if (serverUrl) return Effect.succeed({
-			url: serverUrl,
-			exitCode: null,
-			external: true
-		});
+		if (serverUrl) {
+			const serverPassword = resolveOpenCodeServerPassword({
+				external: true,
+				...input.serverPassword !== void 0 ? { configuredPassword: input.serverPassword } : {}
+			});
+			return Effect.succeed({
+				url: serverUrl,
+				...serverPassword !== void 0 ? { serverPassword } : {},
+				exitCode: null,
+				external: true
+			});
+		}
 		return startOpenCodeServerProcess({
 			binaryPath: input.binaryPath,
+			...input.serverPassword !== void 0 ? { serverPassword: input.serverPassword } : {},
 			...input.environment !== void 0 ? { environment: input.environment } : {},
 			...input.port !== void 0 ? { port: input.port } : {},
 			...input.hostname !== void 0 ? { hostname: input.hostname } : {},
 			...input.timeoutMs !== void 0 ? { timeoutMs: input.timeoutMs } : {}
 		}).pipe(Effect.map((server) => ({
 			url: server.url,
+			...server.serverPassword !== void 0 ? { serverPassword: server.serverPassword } : {},
 			exitCode: server.exitCode,
 			external: false
 		})));
@@ -76953,11 +77500,11 @@ const makeOpenCodeRuntime = Effect.gen(function* () {
 		...input.serverPassword ? { headers: { Authorization: `Basic ${Buffer.from(`opencode:${input.serverPassword}`, "utf8").toString("base64")}` } } : {},
 		throwOnError: true
 	})));
-	const loadProviders = (client) => runOpenCodeSdk("provider.list", () => client.provider.list()).pipe(Effect.filterMapOrFail((list) => list.data ? Result.succeed(list.data) : Result.fail(new OpenCodeRuntimeError({
+	const loadProviders = (client) => runOpenCodeSdk("provider.list", (signal) => client.provider.list({}, { signal })).pipe(Effect.filterMapOrFail((list) => list.data ? Result.succeed(list.data) : Result.fail(new OpenCodeRuntimeError({
 		operation: "provider.list",
 		detail: "OpenCode provider list was empty."
 	})), (result) => result));
-	const loadAgents = (client) => runOpenCodeSdk("app.agents", () => client.app.agents()).pipe(Effect.map((result) => result.data ?? []));
+	const loadAgents = (client) => runOpenCodeSdk("app.agents", (signal) => client.app.agents({}, { signal })).pipe(Effect.map((result) => result.data ?? []));
 	const loadOpenCodeInventory = (client) => Effect.all([loadProviders(client), loadAgents(client)], { concurrency: "unbounded" }).pipe(Effect.map(([providerList, agents]) => ({
 		providerList,
 		agents
@@ -77546,12 +78093,10 @@ const TERMINAL_ENV_BLOCKLIST = /* @__PURE__ */ new Set([
 var TerminalSubprocessCheckError = class extends Schema.TaggedError()("TerminalSubprocessCheckError", {
 	message: Schema.String,
 	cause: Schema.optional(Schema.Defect()),
-	terminalPid: Schema.Number,
-	command: Schema.Literals([
-		"powershell",
-		"pgrep",
-		"ps"
-	])
+	command: Schema.Literals(["powershell", "ps"]),
+	exitCode: Schema.optional(Schema.NullOr(Schema.Number)),
+	timedOut: Schema.optional(Schema.Boolean),
+	stdoutTruncated: Schema.optional(Schema.Boolean)
 }) {};
 var TerminalProcessSignalError = class extends Schema.TaggedError()("TerminalProcessSignalError", {
 	message: Schema.String,
@@ -77771,81 +78316,90 @@ function isRetryableShellSpawnError(error) {
 	const message = messages.join(" ").toLowerCase();
 	return message.includes("posix_spawnp failed") || message.includes("enoent") || message.includes("not found") || message.includes("file not found") || message.includes("no such file");
 }
-function checkWindowsSubprocessActivity(terminalPid) {
-	const command = [
-		`$children = Get-CimInstance Win32_Process -Filter "ParentProcessId = ${terminalPid}" -ErrorAction SilentlyContinue`,
-		"if ($children) { exit 0 }",
-		"exit 1"
-	].join("; ");
-	return Effect.tryPromise({
-		try: () => runProcess("powershell.exe", [
-			"-NoProfile",
-			"-NonInteractive",
-			"-Command",
-			command
-		], {
-			timeoutMs: 1500,
-			allowNonZeroExit: true,
-			maxBufferBytes: 32768,
-			outputMode: "truncate"
-		}),
-		catch: (cause) => new TerminalSubprocessCheckError({
-			message: "Failed to check Windows terminal subprocess activity.",
-			cause,
-			terminalPid,
-			command: "powershell"
-		})
-	}).pipe(Effect.map((result) => result.code === 0));
+function parsePosixProcessTable(stdout) {
+	const childrenByParent = /* @__PURE__ */ new Map();
+	for (const line of stdout.split(/\r?\n/g)) {
+		const match = /^\s*(\d+)\s+(\d+)(?:\s|$)/.exec(line);
+		if (!match) continue;
+		const pid = Number(match[1]);
+		const parentPid = Number(match[2]);
+		if (!Number.isInteger(pid) || !Number.isInteger(parentPid)) continue;
+		const children = childrenByParent.get(parentPid) ?? [];
+		children.push(pid);
+		childrenByParent.set(parentPid, children);
+	}
+	return { childrenByParent };
+}
+function parseWindowsProcessTable(stdout) {
+	const childrenByParent = /* @__PURE__ */ new Map();
+	for (const line of stdout.split(/\r?\n/g)) {
+		const [pidRaw, parentPidRaw] = line.trim().split("|", 2);
+		const pid = Number(pidRaw);
+		const parentPid = Number(parentPidRaw);
+		if (!Number.isInteger(pid) || !Number.isInteger(parentPid)) continue;
+		const children = childrenByParent.get(parentPid) ?? [];
+		children.push(pid);
+		childrenByParent.set(parentPid, children);
+	}
+	return { childrenByParent };
 }
-const checkPosixSubprocessActivity = Effect.fn("terminal.checkPosixSubprocessActivity")(function* (terminalPid) {
-	const runPgrep = Effect.tryPromise({
-		try: () => runProcess("pgrep", ["-P", String(terminalPid)], {
+const POSIX_PS_ABSOLUTE_PATHS = ["/bin/ps", "/usr/bin/ps"];
+const resolvePosixPsCommand = Effect.fn("terminal.resolvePosixPsCommand")(function* () {
+	const fileSystem = yield* FileSystem.FileSystem;
+	for (const candidate of POSIX_PS_ABSOLUTE_PATHS) if (yield* fileSystem.exists(candidate).pipe(Effect.orElseSucceed(() => false))) return candidate;
+	return "ps";
+});
+const snapshotPosixProcessTable = Effect.fn("terminal.snapshotPosixProcessTable")(function* (psCommand) {
+	const result = yield* Effect.tryPromise({
+		try: () => runProcess(psCommand, ["-eo", "pid=,ppid="], {
 			timeoutMs: 1e3,
 			allowNonZeroExit: true,
-			maxBufferBytes: 32768,
+			maxBufferBytes: 524288,
 			outputMode: "truncate"
 		}),
 		catch: (cause) => new TerminalSubprocessCheckError({
-			message: "Failed to inspect terminal subprocesses with pgrep.",
+			message: "Failed to snapshot POSIX processes.",
 			cause,
-			terminalPid,
-			command: "pgrep"
+			command: "ps"
 		})
 	});
-	const runPs = Effect.tryPromise({
-		try: () => runProcess("ps", ["-eo", "pid=,ppid="], {
-			timeoutMs: 1e3,
+	if (result.code !== 0 || result.timedOut || result.stdoutTruncated) return yield* new TerminalSubprocessCheckError({
+		message: "POSIX process snapshot was incomplete.",
+		command: "ps",
+		exitCode: result.code,
+		timedOut: result.timedOut,
+		stdoutTruncated: result.stdoutTruncated
+	});
+	return parsePosixProcessTable(result.stdout);
+});
+const snapshotWindowsProcessTable = Effect.fn("terminal.snapshotWindowsProcessTable")(function* () {
+	const command = ["$processes = Get-CimInstance Win32_Process -ErrorAction Stop", "foreach ($process in $processes) { Write-Output \"$($process.ProcessId)|$($process.ParentProcessId)\" }"].join("; ");
+	const result = yield* Effect.tryPromise({
+		try: () => runProcess("powershell.exe", [
+			"-NoProfile",
+			"-NonInteractive",
+			"-Command",
+			command
+		], {
+			timeoutMs: 1500,
 			allowNonZeroExit: true,
-			maxBufferBytes: 262144,
+			maxBufferBytes: 524288,
 			outputMode: "truncate"
 		}),
 		catch: (cause) => new TerminalSubprocessCheckError({
-			message: "Failed to inspect terminal subprocesses with ps.",
+			message: "Failed to snapshot Windows processes.",
 			cause,
-			terminalPid,
-			command: "ps"
+			command: "powershell"
 		})
 	});
-	const pgrepResult = yield* Effect.exit(runPgrep);
-	if (pgrepResult._tag === "Success") {
-		if (pgrepResult.value.code === 0) return pgrepResult.value.stdout.trim().length > 0;
-		if (pgrepResult.value.code === 1) return false;
-	}
-	const psResult = yield* Effect.exit(runPs);
-	if (psResult._tag === "Failure" || psResult.value.code !== 0) return false;
-	for (const line of psResult.value.stdout.split(/\r?\n/g)) {
-		const [pidRaw, ppidRaw] = line.trim().split(/\s+/g);
-		const pid = Number(pidRaw);
-		const ppid = Number(ppidRaw);
-		if (!Number.isInteger(pid) || !Number.isInteger(ppid)) continue;
-		if (ppid === terminalPid) return true;
-	}
-	return false;
-});
-const defaultSubprocessChecker = Effect.fn("terminal.defaultSubprocessChecker")(function* (terminalPid) {
-	if (!Number.isInteger(terminalPid) || terminalPid <= 0) return false;
-	if (process.platform === "win32") return yield* checkWindowsSubprocessActivity(terminalPid);
-	return yield* checkPosixSubprocessActivity(terminalPid);
+	if (result.code !== 0 || result.timedOut || result.stdoutTruncated) return yield* new TerminalSubprocessCheckError({
+		message: "Windows process snapshot was incomplete.",
+		command: "powershell",
+		exitCode: result.code,
+		timedOut: result.timedOut,
+		stdoutTruncated: result.stdoutTruncated
+	});
+	return parseWindowsProcessTable(result.stdout);
 });
 function capHistory(history, maxLines) {
 	if (history.length === 0) return history;
@@ -78037,7 +78591,8 @@ const makeTerminalManagerWithOptions = Effect.fn("makeTerminalManagerWithOptions
 	const platform = options.platform ?? process.platform;
 	const baseEnv = options.env ?? process.env;
 	const shellResolver = options.shellResolver ?? (() => defaultShellResolver(platform, baseEnv));
-	const subprocessChecker = options.subprocessChecker ?? defaultSubprocessChecker;
+	const posixPsCommand = options.processTableSnapshotter === void 0 && platform !== "win32" ? yield* resolvePosixPsCommand() : null;
+	const processTableSnapshotter = options.processTableSnapshotter ?? (platform === "win32" ? snapshotWindowsProcessTable : () => snapshotPosixProcessTable(posixPsCommand ?? "ps"));
 	const subprocessPollIntervalMs = options.subprocessPollIntervalMs ?? DEFAULT_SUBPROCESS_POLL_INTERVAL_MS;
 	const processKillGraceMs = options.processKillGraceMs ?? DEFAULT_PROCESS_KILL_GRACE_MS;
 	const maxRetainedInactiveSessions = options.maxRetainedInactiveSessions ?? DEFAULT_MAX_RETAINED_INACTIVE_SESSIONS;
@@ -78528,26 +79083,22 @@ const makeTerminalManagerWithOptions = Effect.fn("makeTerminalManagerWithOptions
 	const pollSubprocessActivity = Effect.fn("terminal.pollSubprocessActivity")(function* () {
 		const runningSessions = [...(yield* readManagerState).sessions.values()].filter((session) => session.status === "running" && Number.isInteger(session.pid));
 		if (runningSessions.length === 0) return;
+		const processTable = yield* processTableSnapshotter().pipe(Effect.map(Option.some), Effect.catch((reason) => Effect.logWarning("failed to snapshot processes for terminal subprocess polling", { reason }).pipe(Effect.as(Option.none()))));
+		if (Option.isNone(processTable)) return;
 		const checkSubprocessActivity = Effect.fn("terminal.checkSubprocessActivity")(function* (session) {
 			const terminalPid = session.pid;
-			const hasRunningSubprocess = yield* subprocessChecker(terminalPid).pipe(Effect.map(Option.some), Effect.catch((reason) => Effect.logWarning("failed to check terminal subprocess activity", {
-				threadId: session.threadId,
-				terminalId: session.terminalId,
-				terminalPid,
-				reason
-			}).pipe(Effect.as(Option.none()))));
-			if (Option.isNone(hasRunningSubprocess)) return;
+			const hasRunningSubprocess = (processTable.value.childrenByParent.get(terminalPid)?.length ?? 0) > 0;
 			const event = yield* modifyManagerState((state) => {
 				const liveSession = Option.fromNullishOr(state.sessions.get(toSessionKey(session.threadId, session.terminalId)));
-				if (Option.isNone(liveSession) || liveSession.value.status !== "running" || liveSession.value.pid !== terminalPid || liveSession.value.hasRunningSubprocess === hasRunningSubprocess.value) return [Option.none(), state];
-				liveSession.value.hasRunningSubprocess = hasRunningSubprocess.value;
+				if (Option.isNone(liveSession) || liveSession.value.status !== "running" || liveSession.value.pid !== terminalPid || liveSession.value.hasRunningSubprocess === hasRunningSubprocess) return [Option.none(), state];
+				liveSession.value.hasRunningSubprocess = hasRunningSubprocess;
 				liveSession.value.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
 				return [Option.some({
 					type: "activity",
 					threadId: liveSession.value.threadId,
 					terminalId: liveSession.value.terminalId,
 					createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-					hasRunningSubprocess: hasRunningSubprocess.value
+					hasRunningSubprocess
 				}), state];
 			});
 			if (Option.isSome(event)) yield* publishEvent(event.value);
@@ -78855,20 +79406,6 @@ var ProviderCommandReactor = class extends Context.Service()("ryco/orchestration
 */
 var ProviderRuntimeIngestionService = class extends Context.Service()("ryco/orchestration/Services/ProviderRuntimeIngestion/ProviderRuntimeIngestionService") {};
 //#endregion
-//#region src/orchestration/Services/ThreadDeletionReactor.ts
-/**
-* ThreadDeletionReactor - Thread deletion cleanup reactor service interface.
-*
-* Owns background workers that react to thread deletion domain events and
-* perform best-effort runtime cleanup for provider sessions and terminals.
-*
-* @module ThreadDeletionReactor
-*/
-/**
-* ThreadDeletionReactor - Service tag for thread deletion cleanup workers.
-*/
-var ThreadDeletionReactor = class extends Context.Service()("ryco/orchestration/Services/ThreadDeletionReactor") {};
-//#endregion
 //#region src/orchestration/Layers/OrchestrationReactor.ts
 const makeOrchestrationReactor = Effect.gen(function* () {
 	const providerRuntimeIngestion = yield* ProviderRuntimeIngestionService;
@@ -79444,6 +79981,227 @@ function make$4() {
 }
 const layer = Layer.effect(ThreadBackgroundLivenessService, Effect.sync(make$4));
 //#endregion
+//#region src/orchestration/ActivityPayloadProjection.ts
+function asRecord$1(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asTrimmedString$1(value) {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	return trimmed.length > 0 ? trimmed : null;
+}
+function summarizeToolTextOutput(value) {
+	const lines = [];
+	for (const rawLine of value.split(/\r?\n/u)) {
+		const line = rawLine.replace(/\s+/g, " ").trim();
+		if (line.length > 0) lines.push(line);
+	}
+	const firstLine = lines.find((line) => line !== "```");
+	if (firstLine) return firstLine.length <= 84 ? firstLine : `${firstLine.slice(0, 83).trimEnd()}…`;
+	if (lines.length > 1) return `${lines.length.toLocaleString()} lines`;
+	return null;
+}
+function pushChangedFile(target, seen, value) {
+	const normalized = asTrimmedString$1(value);
+	if (!normalized || seen.has(normalized)) return;
+	seen.add(normalized);
+	target.push(normalized);
+}
+function collectChangedFiles(value, target, seen, depth) {
+	if (depth > 4 || target.length >= 12) return;
+	if (Array.isArray(value)) {
+		for (const entry of value) {
+			collectChangedFiles(entry, target, seen, depth + 1);
+			if (target.length >= 12) return;
+		}
+		return;
+	}
+	const record = asRecord$1(value);
+	if (!record) return;
+	pushChangedFile(target, seen, record.path);
+	pushChangedFile(target, seen, record.filePath);
+	pushChangedFile(target, seen, record.relativePath);
+	pushChangedFile(target, seen, record.filename);
+	pushChangedFile(target, seen, record.newPath);
+	pushChangedFile(target, seen, record.oldPath);
+	for (const nestedKey of [
+		"item",
+		"result",
+		"input",
+		"data",
+		"changes",
+		"files",
+		"edits",
+		"patch",
+		"patches",
+		"operations"
+	]) {
+		if (!(nestedKey in record)) continue;
+		collectChangedFiles(record[nestedKey], target, seen, depth + 1);
+		if (target.length >= 12) return;
+	}
+}
+function projectCommandData(data) {
+	const item = asRecord$1(data.item);
+	if (!item) return;
+	const projectedItem = {};
+	if ("command" in item) projectedItem.command = item.command;
+	const aggregatedOutput = asTrimmedString$1(item.aggregatedOutput);
+	if (aggregatedOutput) {
+		const summary = summarizeToolTextOutput(aggregatedOutput);
+		if (summary) projectedItem.aggregatedOutput = summary;
+	}
+	const input = asRecord$1(item.input);
+	if (input && "command" in input) projectedItem.input = { command: input.command };
+	const result = asRecord$1(item.result);
+	if (result) {
+		const projectedResult = {};
+		if ("command" in result) projectedResult.command = result.command;
+		const content = asTrimmedString$1(result.content);
+		if (content) {
+			const summary = summarizeToolTextOutput(content);
+			if (summary) projectedResult.content = summary;
+		}
+		if (Object.keys(projectedResult).length > 0) projectedItem.result = projectedResult;
+	}
+	return Object.keys(projectedItem).length > 0 ? projectedItem : void 0;
+}
+function projectCommandValue(data) {
+	if (data.command !== void 0) return data.command;
+	const input = asRecord$1(data.input);
+	if (input?.command !== void 0) return input.command;
+	const stateInput = asRecord$1(asRecord$1(data.state)?.input);
+	if (stateInput?.command !== void 0) return stateInput.command;
+}
+const MCP_ITEM_KEPT_FIELDS = [
+	"type",
+	"id",
+	"tool",
+	"server",
+	"status",
+	"arguments",
+	"appContext",
+	"error",
+	"durationMs"
+];
+function extractMcpResultText(result) {
+	const record = asRecord$1(result);
+	if (!record) return typeof result === "string" ? result : null;
+	if (typeof record.content === "string") return record.content;
+	if (Array.isArray(record.content)) {
+		const texts = [];
+		for (const entry of record.content) {
+			const text = asRecord$1(entry)?.text;
+			if (typeof text === "string" && text.trim().length > 0) texts.push(text);
+		}
+		if (texts.length > 0) return texts.join("\n");
+	}
+	return null;
+}
+function summarizeMcpResult(result) {
+	if (result === void 0 || result === null) return;
+	const text = extractMcpResultText(result);
+	const summary = text ? summarizeToolTextOutput(text) : null;
+	return summary ? { content: summary } : void 0;
+}
+function projectMcpToolCallData(data) {
+	const projectedData = {};
+	const item = asRecord$1(data.item);
+	if (item) {
+		const projectedItem = {};
+		for (const key of MCP_ITEM_KEPT_FIELDS) if (key in item) projectedItem[key] = item[key];
+		const result = summarizeMcpResult(item.result);
+		if (result) projectedItem.result = result;
+		projectedData.item = projectedItem;
+	}
+	if ("toolName" in data) projectedData.toolName = data.toolName;
+	if ("input" in data) projectedData.input = data.input;
+	if (!item) {
+		const result = summarizeMcpResult(data.result);
+		if (result) projectedData.result = result;
+	}
+	if ("toolCallId" in data) projectedData.toolCallId = data.toolCallId;
+	if ("kind" in data) projectedData.kind = data.kind;
+	const changedFiles = [];
+	collectChangedFiles(data, changedFiles, /* @__PURE__ */ new Set(), 0);
+	if (changedFiles.length > 0) projectedData.files = changedFiles.map((path) => ({ path }));
+	return projectedData;
+}
+function projectRawOutput(value) {
+	const direct = asTrimmedString$1(value);
+	if (direct) {
+		const summary = summarizeToolTextOutput(direct);
+		return summary ? { content: summary } : void 0;
+	}
+	const rawOutput = asRecord$1(value);
+	if (!rawOutput) return;
+	if (typeof rawOutput.totalFiles === "number" && Number.isFinite(rawOutput.totalFiles)) return {
+		totalFiles: rawOutput.totalFiles,
+		...rawOutput.truncated === true ? { truncated: true } : {}
+	};
+	for (const key of [
+		"content",
+		"stdout",
+		"stderr"
+	]) {
+		const output = asTrimmedString$1(rawOutput[key]);
+		if (!output) continue;
+		const summary = summarizeToolTextOutput(output);
+		return summary ? { content: summary } : void 0;
+	}
+}
+function projectAcpContent(value) {
+	if (!Array.isArray(value)) return;
+	const summary = summarizeToolTextOutput(value.map((entryValue) => {
+		const entry = asRecord$1(entryValue);
+		const content = asRecord$1(entry?.content);
+		return entry?.type === "content" && content?.type === "text" ? asTrimmedString$1(content.text) : null;
+	}).filter((entry) => entry !== null).join("\n"));
+	return summary ? { content: summary } : void 0;
+}
+/**
+* Projects provider-specific tool data to the fields shared clients consume.
+* The result is safe to persist for cumulative streaming updates: unbounded
+* tool output is reduced to a one-line summary while identity, command, and
+* changed-file metadata remain available to every client.
+*/
+function projectActivityPayload(activity) {
+	const payload = asRecord$1(activity.payload);
+	const data = asRecord$1(payload?.data);
+	if (!payload || !data) return activity;
+	const itemStatus = asRecord$1(data.item)?.status;
+	const projectedPayload = payload.status === "completed" && (itemStatus === "failed" || itemStatus === "declined") ? {
+		...payload,
+		status: itemStatus
+	} : payload;
+	if (payload.itemType === "mcp_tool_call") return {
+		...activity,
+		payload: {
+			...projectedPayload,
+			data: projectMcpToolCallData(data)
+		}
+	};
+	const projectedData = {};
+	const item = projectCommandData(data);
+	if (item) projectedData.item = item;
+	const command = projectCommandValue(data);
+	if (command !== void 0) projectedData.command = command;
+	const changedFiles = [];
+	collectChangedFiles(data, changedFiles, /* @__PURE__ */ new Set(), 0);
+	if (changedFiles.length > 0) projectedData.files = changedFiles.map((path) => ({ path }));
+	if ("toolCallId" in data) projectedData.toolCallId = data.toolCallId;
+	if ("kind" in data) projectedData.kind = data.kind;
+	const rawOutput = projectRawOutput(data.rawOutput) ?? projectAcpContent(data.content);
+	if (rawOutput) projectedData.rawOutput = rawOutput;
+	return {
+		...activity,
+		payload: {
+			...projectedPayload,
+			data: projectedData
+		}
+	};
+}
+//#endregion
 //#region src/orchestration/Layers/ProviderRuntimeIngestion.ts
 const providerTurnKey = (threadId, turnId) => `${threadId}:${turnId}`;
 const providerTaskKey = (threadId, taskId) => `${threadId}:${taskId}`;
@@ -79961,7 +80719,7 @@ function runtimeEventToActivities(event, taskTitle) {
 		}
 		case "item.updated":
 			if (!isToolLifecycleItemType(event.payload.itemType)) return [];
-			return [{
+			return [projectActivityPayload({
 				id: event.eventId,
 				createdAt: event.createdAt,
 				tone: "tool",
@@ -79979,7 +80737,7 @@ function runtimeEventToActivities(event, taskTitle) {
 				},
 				turnId: toTurnId$1(event.turnId) ?? null,
 				...maybeSequence
-			}];
+			})];
 		case "item.completed":
 			if (!isToolLifecycleItemType(event.payload.itemType)) return [];
 			return [{
@@ -80955,6 +81713,15 @@ const HANDLED_TURN_START_KEY_TTL = Duration.minutes(30);
 const DEFAULT_RUNTIME_MODE = "full-access";
 const DEFAULT_TOKEN_MODE = DEFAULT_AGENT_TOKEN_MODE;
 const DEFAULT_THREAD_TITLE = "New thread";
+function pathEntryExists(targetPath) {
+	try {
+		lstatSync(targetPath);
+		return true;
+	} catch (error) {
+		if (error.code === "ENOENT") return false;
+		throw error;
+	}
+}
 function providerErrorLabel(value) {
 	const normalized = value?.trim();
 	return normalized && normalized.length > 0 ? normalized : "unknown";
@@ -80976,10 +81743,10 @@ function isUnknownPendingApprovalRequestError(cause) {
 	const error = findProviderAdapterRequestError(cause);
 	if (error) {
 		const detail = error.detail.toLowerCase();
-		return detail.includes("unknown pending approval request") || detail.includes("unknown pending permission request");
+		return detail.includes("unknown pending approval request") || detail.includes("unknown pending permission request") || detail.includes("unknown pending codex approval request");
 	}
-	const message = Cause.pretty(cause);
-	return message.includes("unknown pending approval request") || message.includes("unknown pending permission request");
+	const message = Cause.pretty(cause).toLowerCase();
+	return message.includes("unknown pending approval request") || message.includes("unknown pending permission request") || message.includes("unknown pending codex approval request");
 }
 function isUnknownPendingUserInputRequestError(cause) {
 	const error = findProviderAdapterRequestError(cause);
@@ -81063,9 +81830,64 @@ const make$2 = Effect.gen(function* () {
 	const resolveThread = Effect.fnUntraced(function* (threadId) {
 		return yield* projectionSnapshotQuery.getThreadDetailById(threadId).pipe(Effect.map(Option.getOrUndefined));
 	});
+	const ensureRecordedWorktreeAvailable = Effect.fn("ensureRecordedWorktreeAvailable")(function* (thread, project) {
+		if (thread.worktreePath === null) return;
+		if (!project) return yield* new ProviderAdapterRequestError({
+			provider: providerErrorLabel(String(thread.modelSelection.instanceId)),
+			method: "thread.turn.start",
+			detail: `Cannot verify worktree '${thread.worktreePath}' because project '${thread.projectId}' is unavailable.`
+		});
+		const repositoryRoot = path.resolve(project.workspaceRoot);
+		const worktreePath = path.resolve(thread.worktreePath);
+		if (worktreePath === repositoryRoot) return;
+		const registeredWorktreePaths = () => gitWorkflow.listWorktreePaths(repositoryRoot).pipe(Effect.map((paths) => paths.map((entry) => path.resolve(entry))));
+		const failRecovery = (detail) => new ProviderAdapterRequestError({
+			provider: providerErrorLabel(String(thread.modelSelection.instanceId)),
+			method: "thread.turn.start",
+			detail
+		});
+		if (pathEntryExists(worktreePath)) {
+			if (!(yield* registeredWorktreePaths()).includes(worktreePath)) return yield* failRecovery(`Refusing to use '${worktreePath}' because it exists but is not a registered worktree for '${repositoryRoot}'.`);
+			return;
+		}
+		const branch = thread.branch;
+		if (branch === null) return yield* failRecovery(`Cannot recreate missing worktree '${worktreePath}' because the thread has no recorded branch.`);
+		if (!(yield* gitWorkflow.listLocalBranchNames(repositoryRoot)).includes(branch)) return yield* failRecovery(`Cannot recreate missing worktree '${worktreePath}' because branch '${branch}' no longer exists.`);
+		yield* gitWorkflow.pruneWorktrees(repositoryRoot);
+		if (pathEntryExists(worktreePath)) {
+			if ((yield* registeredWorktreePaths()).includes(worktreePath)) return;
+			return yield* failRecovery(`Refusing to recreate worktree '${worktreePath}' because another filesystem entry now occupies that path.`);
+		}
+		const recreated = yield* gitWorkflow.createWorktree({
+			cwd: repositoryRoot,
+			path: worktreePath,
+			refName: branch,
+			dependencyHydration: "none"
+		});
+		if (path.resolve(recreated.worktree.path) !== worktreePath || recreated.worktree.refName !== branch) return yield* failRecovery(`Worktree recovery returned unexpected metadata for '${worktreePath}' and branch '${branch}'.`);
+		const changedAt = (/* @__PURE__ */ new Date()).toISOString();
+		yield* orchestrationEngine.dispatch({
+			type: "thread.meta.update",
+			commandId: serverCommandId$2("worktree-recovered"),
+			threadId: thread.id,
+			branch,
+			worktreePath
+		});
+		if (thread.worktreeId !== void 0 && thread.worktreeId !== null) yield* orchestrationEngine.dispatch({
+			type: "worktree.meta.update",
+			commandId: serverCommandId$2("worktree-recovered-meta"),
+			worktreeId: thread.worktreeId,
+			branch,
+			changedAt
+		});
+		yield* gitWorkflow.invalidateStatus(worktreePath);
+		yield* vcsStatusBroadcaster.refreshStatus(worktreePath).pipe(Effect.ignoreCause({ log: true }));
+	});
 	const ensureSessionForThread = Effect.fn("ensureSessionForThread")(function* (threadId, createdAt, options) {
 		const thread = yield* resolveThread(threadId);
 		if (!thread) return yield* Effect.die(/* @__PURE__ */ new Error(`Thread '${threadId}' was not found in read model.`));
+		const project = yield* resolveProject(thread.projectId);
+		yield* ensureRecordedWorktreeAvailable(thread, project);
 		const desiredRuntimeMode = thread.runtimeMode;
 		const desiredTokenMode = thread.tokenMode ?? DEFAULT_TOKEN_MODE;
 		const requestedModelSelection = options?.modelSelection;
@@ -81113,7 +81935,6 @@ const make$2 = Effect.gen(function* () {
 				detail: `Thread '${threadId}' cannot switch from instance '${currentInstanceId}' to '${desiredInstanceId}' because their provider resume state is incompatible.`
 			});
 		}
-		const project = yield* resolveProject(thread.projectId);
 		const effectiveCwd = resolveThreadWorkspaceCwd({
 			thread,
 			projects: project ? [project] : []
@@ -81301,7 +82122,10 @@ const make$2 = Effect.gen(function* () {
 				message: input.messageText,
 				...attachments.length > 0 ? { attachments } : {},
 				modelSelection
-			});
+			}).pipe(Effect.retry({
+				times: 2,
+				schedule: Schedule.exponential("2 seconds")
+			}));
 			if (!generated) return;
 			const thread = yield* resolveThread(input.threadId);
 			if (!thread) return;
@@ -81346,34 +82170,7 @@ const make$2 = Effect.gen(function* () {
 			});
 			return;
 		}
-		if (event.payload.contextHandoff !== void 0) {
-			yield* contextHandoffCoordinator.processTurnStart(event);
-			return;
-		}
-		if (thread.messages.filter((entry) => entry.role === "user").length === 1) {
-			const project = yield* resolveProject(thread.projectId);
-			const generationCwd = resolveThreadWorkspaceCwd({
-				thread,
-				projects: project ? [project] : []
-			}) ?? process.cwd();
-			const generationInput = {
-				messageText: message.text,
-				...message.attachments !== void 0 ? { attachments: message.attachments } : {},
-				...event.payload.titleSeed !== void 0 ? { titleSeed: event.payload.titleSeed } : {}
-			};
-			yield* maybeGenerateAndRenameWorktreeBranchForFirstTurn({
-				threadId: event.payload.threadId,
-				branch: thread.branch,
-				worktreePath: thread.worktreePath,
-				worktreeId: thread.worktreeId ?? null,
-				...generationInput
-			}).pipe(Effect.forkScoped);
-			if (canReplaceThreadTitle(thread.title, event.payload.titleSeed)) yield* maybeGenerateThreadTitleForFirstTurn({
-				threadId: event.payload.threadId,
-				cwd: generationCwd,
-				...generationInput
-			}).pipe(Effect.forkScoped);
-		}
+		const isFirstUserMessageTurn = thread.messages.filter((entry) => entry.role === "user").length === 1;
 		const handleTurnStartFailure = (cause) => {
 			if (Cause.hasInterruptsOnly(cause)) return Effect.void;
 			const detail = formatFailureDetail(cause);
@@ -81396,6 +82193,12 @@ const make$2 = Effect.gen(function* () {
 			cause: Cause.pretty(recoveryCause),
 			originalCause: Cause.pretty(cause)
 		})));
+		if (event.payload.contextHandoff !== void 0) {
+			const project = yield* resolveProject(thread.projectId);
+			if (!(yield* ensureRecordedWorktreeAvailable(thread, project).pipe(Effect.as(true), Effect.catchCause((cause) => handleTurnStartFailure(cause).pipe(Effect.as(false)))))) return;
+			yield* contextHandoffCoordinator.processTurnStart(event);
+			return;
+		}
 		const sendTurnRequest = yield* buildSendTurnRequestForThread({
 			threadId: event.payload.threadId,
 			messageText: message.text,
@@ -81406,6 +82209,30 @@ const make$2 = Effect.gen(function* () {
 			createdAt: event.payload.createdAt
 		}).pipe(Effect.map(Option.some), Effect.catchCause((cause) => handleTurnStartFailure(cause).pipe(Effect.as(Option.none()))));
 		if (Option.isNone(sendTurnRequest)) return;
+		if (isFirstUserMessageTurn) {
+			const project = yield* resolveProject(thread.projectId);
+			const generationCwd = resolveThreadWorkspaceCwd({
+				thread,
+				projects: project ? [project] : []
+			}) ?? process.cwd();
+			const generationInput = {
+				messageText: message.text,
+				...message.attachments !== void 0 ? { attachments: message.attachments } : {},
+				...event.payload.titleSeed !== void 0 ? { titleSeed: event.payload.titleSeed } : {}
+			};
+			yield* maybeGenerateAndRenameWorktreeBranchForFirstTurn({
+				threadId: event.payload.threadId,
+				branch: thread.branch,
+				worktreePath: thread.worktreePath,
+				worktreeId: thread.worktreeId ?? null,
+				...generationInput
+			}).pipe(Effect.forkScoped);
+			if (canReplaceThreadTitle(thread.title, event.payload.titleSeed)) yield* maybeGenerateThreadTitleForFirstTurn({
+				threadId: event.payload.threadId,
+				cwd: generationCwd,
+				...generationInput
+			}).pipe(Effect.forkScoped);
+		}
 		const commitAcceptedModelSelection = event.payload.modelSelection !== void 0 && !Equal.equals(thread.modelSelection, event.payload.modelSelection) ? orchestrationEngine.dispatch({
 			type: "thread.meta.update",
 			commandId: serverCommandId$2("accepted-model-selection"),
@@ -81418,7 +82245,8 @@ const make$2 = Effect.gen(function* () {
 		if (isProviderOriginatedCommandId(event.commandId)) return;
 		const thread = yield* resolveThread(event.payload.threadId);
 		if (!thread) return;
-		if (!(thread.session && thread.session.status !== "stopped")) return yield* appendProviderFailureActivity({
+		const session = thread.session;
+		if (!session || session.status === "stopped") return yield* appendProviderFailureActivity({
 			threadId: event.payload.threadId,
 			kind: "provider.turn.interrupt.failed",
 			summary: "Provider turn interrupt failed",
@@ -81426,7 +82254,41 @@ const make$2 = Effect.gen(function* () {
 			turnId: event.payload.turnId ?? null,
 			createdAt: event.payload.createdAt
 		});
-		yield* providerService.interruptTurn({ threadId: event.payload.threadId });
+		const recoverInterruptFailure = (cause) => {
+			if (Cause.hasInterruptsOnly(cause)) return Effect.interrupt;
+			const detail = formatFailureDetail(cause);
+			return Effect.gen(function* () {
+				const latestSession = (yield* resolveThread(event.payload.threadId))?.session;
+				if (!latestSession || latestSession.status === "stopped" || latestSession.status === "ready" || latestSession.activeTurnId === null || event.payload.turnId !== void 0 && latestSession.activeTurnId !== event.payload.turnId) return;
+				yield* providerService.stopSession({ threadId: event.payload.threadId }).pipe(Effect.catchCause((stopCause) => Cause.hasInterruptsOnly(stopCause) ? Effect.interrupt : Effect.logWarning("provider command reactor failed to stop session after interrupt failure", {
+					threadId: event.payload.threadId,
+					cause: Cause.pretty(stopCause),
+					originalCause: Cause.pretty(cause)
+				})));
+				const stoppedSession = (yield* resolveThread(event.payload.threadId))?.session;
+				if (!stoppedSession || stoppedSession.status === "stopped" || stoppedSession.status === "ready" || stoppedSession.activeTurnId === null || event.payload.turnId !== void 0 && stoppedSession.activeTurnId !== event.payload.turnId) return;
+				yield* setThreadSession({
+					threadId: event.payload.threadId,
+					session: {
+						...stoppedSession,
+						status: "stopped",
+						activeTurnId: null,
+						lastError: detail,
+						updatedAt: event.payload.createdAt
+					},
+					createdAt: event.payload.createdAt
+				});
+				yield* appendProviderFailureActivity({
+					threadId: event.payload.threadId,
+					kind: "provider.turn.interrupt.failed",
+					summary: "Provider turn interrupt failed",
+					detail,
+					turnId: event.payload.turnId ?? null,
+					createdAt: event.payload.createdAt
+				});
+			});
+		};
+		yield* providerService.interruptTurn({ threadId: event.payload.threadId }).pipe(Effect.catchCause(recoverInterruptFailure));
 	});
 	const processGoalUpdated = Effect.fn("processGoalUpdated")(function* (event) {
 		if (event.payload.origin !== "client") return;
@@ -83218,14 +84080,17 @@ const make = Effect.gen(function* () {
 		}),
 		process: processThreadDeletedSafely
 	});
+	const seenSequence = yield* SubscriptionRef.make(0);
+	const noteSeen = (sequence) => SubscriptionRef.update(seenSequence, (seen) => Math.max(seen, sequence));
 	return {
 		start: Effect.fn("start")(function* () {
-			yield* Effect.forkScoped(Stream.runForEach(orchestrationEngine.streamDomainEvents, (event) => {
-				if (event.type !== "thread.deleted") return Effect.void;
-				return worker.enqueue(event);
-			}));
+			const subscription = yield* orchestrationEngine.subscribeDomainEvents;
+			yield* Effect.forkScoped(Stream.runForEach(Stream.fromSubscription(subscription), (event) => (event.type === "thread.deleted" ? worker.enqueue(event) : Effect.void).pipe(Effect.andThen(noteSeen(event.sequence)))));
 		}),
-		drain: worker.drain
+		drainThrough: Effect.fn("ThreadDeletionReactor.drainThrough")(function* (targetSequence) {
+			yield* SubscriptionRef.changes(seenSequence).pipe(Stream.filter((seen) => seen >= targetSequence), Stream.runHead);
+			yield* worker.drain;
+		})
 	};
 });
 const ThreadDeletionReactorLive = Layer.effect(ThreadDeletionReactor, make);
@@ -97543,10 +98408,21 @@ const OrchestrationEventPersistedRowSchema = Schema.Struct({
 	payload: UnknownFromJsonString,
 	metadata: EventMetadataFromJsonString
 });
+const HasEventAfterRequestSchema = Schema.Struct({
+	aggregateKind: OrchestrationAggregateKind,
+	aggregateId: Schema.String,
+	type: OrchestrationEventType,
+	sequenceExclusive: NonNegativeInt
+});
 const ReadFromSequenceRequestSchema = Schema.Struct({
 	sequenceExclusive: NonNegativeInt,
 	limit: Schema.Number
 });
+const ReadThroughSequenceRequestSchema = Schema.Struct({
+	sequenceExclusive: NonNegativeInt,
+	sequenceInclusive: NonNegativeInt,
+	limit: Schema.Number
+});
 const DEFAULT_READ_FROM_SEQUENCE_LIMIT = 1e3;
 const READ_PAGE_SIZE = 500;
 function inferActorKind(event) {
@@ -97639,6 +98515,34 @@ const makeEventStore = Effect.gen(function* () {
         LIMIT ${request.limit}
       `
 	});
+	const readEventRowsThroughSequence = SqlSchema.findAll({
+		Request: ReadThroughSequenceRequestSchema,
+		Result: OrchestrationEventPersistedRowSchema,
+		execute: (request) => sql`
+        SELECT
+          sequence,
+          event_id AS "eventId",
+          event_type AS "type",
+          aggregate_kind AS "aggregateKind",
+          stream_id AS "aggregateId",
+          occurred_at AS "occurredAt",
+          command_id AS "commandId",
+          causation_event_id AS "causationEventId",
+          correlation_id AS "correlationId",
+          payload_json AS "payload",
+          metadata_json AS "metadata"
+        FROM orchestration_events
+        WHERE sequence > ${request.sequenceExclusive}
+          AND sequence <= ${request.sequenceInclusive}
+        ORDER BY sequence ASC
+        LIMIT ${request.limit}
+      `
+	});
+	const readLatestSequence = SqlSchema.findOne({
+		Request: Schema.Void,
+		Result: Schema.Struct({ sequence: Schema.NullOr(NonNegativeInt) }),
+		execute: () => sql`SELECT MAX(sequence) AS "sequence" FROM orchestration_events`
+	});
 	const readRecentEventRows = SqlSchema.findAll({
 		Request: Schema.Struct({
 			since: IsoDateTime,
@@ -97656,6 +98560,20 @@ const makeEventStore = Effect.gen(function* () {
       ORDER BY sequence DESC
       LIMIT ${limit}
     `
+	});
+	const findEventAfter = SqlSchema.findOneOption({
+		Request: HasEventAfterRequestSchema,
+		Result: Schema.Struct({ sequence: NonNegativeInt }),
+		execute: (request) => sql`
+        SELECT sequence
+        FROM orchestration_events
+        WHERE aggregate_kind = ${request.aggregateKind}
+          AND stream_id = ${request.aggregateId}
+          AND event_type = ${request.type}
+          AND sequence > ${request.sequenceExclusive}
+        ORDER BY sequence ASC
+        LIMIT 1
+      `
 	});
 	const append = (event) => appendEventRow({
 		eventId: event.eventId,
@@ -97684,6 +98602,22 @@ const makeEventStore = Effect.gen(function* () {
 		}));
 		return readPage(sequenceExclusive, normalizedLimit);
 	};
+	const readThroughSequence = (sequenceExclusive, sequenceInclusive) => {
+		const normalizedStart = Math.max(0, Math.floor(sequenceExclusive));
+		const normalizedEnd = Math.max(0, Math.floor(sequenceInclusive));
+		if (normalizedEnd <= normalizedStart) return Stream.empty;
+		const readPage = (cursor) => Stream.fromEffect(readEventRowsThroughSequence({
+			sequenceExclusive: cursor,
+			sequenceInclusive: normalizedEnd,
+			limit: READ_PAGE_SIZE
+		}).pipe(Effect.mapError(toPersistenceSqlOrDecodeError$2("OrchestrationEventStore.readThroughSequence:query", "OrchestrationEventStore.readThroughSequence:decodeRows")), Effect.flatMap((rows) => Effect.forEach(rows, (row) => decodeEvent(row).pipe(Effect.mapError(toPersistenceDecodeError("OrchestrationEventStore.readThroughSequence:rowToEvent"))))))).pipe(Stream.flatMap((events) => {
+			if (events.length === 0) return Stream.empty;
+			const nextCursor = events[events.length - 1].sequence;
+			return Stream.concat(Stream.fromIterable(events), nextCursor < normalizedEnd ? readPage(nextCursor) : Stream.empty);
+		}));
+		return readPage(normalizedStart);
+	};
+	const latestSequence = readLatestSequence(void 0).pipe(Effect.map((row) => row.sequence ?? 0), Effect.mapError(toPersistenceSqlOrDecodeError$2("OrchestrationEventStore.latestSequence:query", "OrchestrationEventStore.latestSequence:decodeRow")));
 	const readPage = (sequenceExclusive, limit) => {
 		const normalizedLimit = Math.max(0, Math.floor(limit));
 		const normalizedSequenceExclusive = Math.max(0, Math.floor(sequenceExclusive));
@@ -97705,12 +98639,16 @@ const makeEventStore = Effect.gen(function* () {
 		since: input.since,
 		limit: Math.min(Math.max(1, Math.floor(input.limit)), 500)
 	}).pipe(Effect.mapError(toPersistenceSqlOrDecodeError$2("OrchestrationEventStore.readRecent:query", "OrchestrationEventStore.readRecent:decodeRows")), Effect.flatMap((rows) => Effect.forEach(rows, (row) => decodeEvent(row).pipe(Effect.mapError(toPersistenceDecodeError("OrchestrationEventStore.readRecent:rowToEvent"))))));
+	const hasEventAfter = (input) => findEventAfter(input).pipe(Effect.map(Option.isSome), Effect.mapError(toPersistenceSqlOrDecodeError$2("OrchestrationEventStore.hasEventAfter:query", "OrchestrationEventStore.hasEventAfter:decodeRow")));
 	return {
 		append,
 		readPage,
 		readRecent,
 		readFromSequence,
-		readAll: () => readFromSequence(0, Number.MAX_SAFE_INTEGER)
+		readThroughSequence,
+		latestSequence,
+		readAll: () => readFromSequence(0, Number.MAX_SAFE_INTEGER),
+		hasEventAfter
 	};
 });
 const OrchestrationEventStoreLive = Layer.effect(OrchestrationEventStore, makeEventStore);
@@ -98028,7 +98966,8 @@ function requireThreadHasUserMessage(input) {
 	return requireThread(input).pipe(Effect.flatMap((thread) => thread.messages.some((message) => message.role === "user") ? Effect.succeed(thread) : Effect.fail(invariantError(input.command.type, `Thread '${input.threadId}' cannot be archived before a message has been sent.`))));
 }
 function requireThreadAbsent(input) {
-	if (!findThreadById(input.readModel, input.threadId)) return Effect.void;
+	const existing = findThreadById(input.readModel, input.threadId);
+	if (existing === void 0 || existing.deletedAt !== null) return Effect.void;
 	return Effect.fail(invariantError(input.command.type, `Thread '${input.threadId}' already exists and cannot be created twice.`));
 }
 //#endregion
@@ -100441,17 +101380,26 @@ const makeProjectionPendingApprovalRepository = Effect.gen(function* () {
 		execute: ({ requestId }) => sql`
         DELETE FROM projection_pending_approvals
         WHERE request_id = ${requestId}
+      `
+	});
+	const deleteProjectionPendingApprovalRowsByThread = SqlSchema.void({
+		Request: ListProjectionPendingApprovalsInput,
+		execute: ({ threadId }) => sql`
+        DELETE FROM projection_pending_approvals
+        WHERE thread_id = ${threadId}
       `
 	});
 	const upsert = (row) => upsertProjectionPendingApprovalRow(row).pipe(Effect.mapError(toPersistenceSqlError("ProjectionPendingApprovalRepository.upsert:query")));
 	const listByThreadId = (input) => listProjectionPendingApprovalRows(input).pipe(Effect.mapError(toPersistenceSqlError("ProjectionPendingApprovalRepository.listByThreadId:query")));
 	const getByRequestId = (input) => getProjectionPendingApprovalRow(input).pipe(Effect.mapError(toPersistenceSqlError("ProjectionPendingApprovalRepository.getByRequestId:query")));
 	const deleteByRequestId = (input) => deleteProjectionPendingApprovalRow(input).pipe(Effect.mapError(toPersistenceSqlError("ProjectionPendingApprovalRepository.deleteByRequestId:query")));
+	const deleteByThreadId = (input) => deleteProjectionPendingApprovalRowsByThread(input).pipe(Effect.mapError(toPersistenceSqlError("ProjectionPendingApprovalRepository.deleteByThreadId:query")));
 	return {
 		upsert,
 		listByThreadId,
 		getByRequestId,
-		deleteByRequestId
+		deleteByRequestId,
+		deleteByThreadId
 	};
 });
 const ProjectionPendingApprovalRepositoryLive = Layer.effect(ProjectionPendingApprovalRepository, makeProjectionPendingApprovalRepository);
@@ -101399,7 +102347,15 @@ const ORCHESTRATION_EVENT_PROJECTORS = {
 	"project.meta-updated": [ORCHESTRATION_PROJECTOR_NAMES.projects],
 	"project.avatar-set": [ORCHESTRATION_PROJECTOR_NAMES.projects],
 	"project.deleted": [ORCHESTRATION_PROJECTOR_NAMES.projects],
-	"thread.created": [ORCHESTRATION_PROJECTOR_NAMES.threads],
+	"thread.created": [
+		ORCHESTRATION_PROJECTOR_NAMES.threadMessages,
+		ORCHESTRATION_PROJECTOR_NAMES.threadProposedPlans,
+		ORCHESTRATION_PROJECTOR_NAMES.threadActivities,
+		ORCHESTRATION_PROJECTOR_NAMES.threadSessions,
+		ORCHESTRATION_PROJECTOR_NAMES.threadTurns,
+		ORCHESTRATION_PROJECTOR_NAMES.pendingApprovals,
+		ORCHESTRATION_PROJECTOR_NAMES.threads
+	],
 	"thread.deleted": [ORCHESTRATION_PROJECTOR_NAMES.threads],
 	"thread.archived": [ORCHESTRATION_PROJECTOR_NAMES.threads],
 	"thread.unarchived": [ORCHESTRATION_PROJECTOR_NAMES.threads],
@@ -101464,7 +102420,7 @@ function extractActivityRequestId(payload) {
 }
 function isStalePendingApprovalFailureDetail(detail) {
 	if (detail === null) return false;
-	return detail.includes("stale pending approval request") || detail.includes("unknown pending approval request") || detail.includes("unknown pending permission request");
+	return detail.includes("stale pending approval request") || detail.includes("unknown pending approval request") || detail.includes("unknown pending permission request") || detail.includes("unknown pending codex approval request");
 }
 function derivePendingUserInputStatesFromActivities(activities) {
 	const states = /* @__PURE__ */ new Map();
@@ -101549,7 +102505,6 @@ function collectThreadAttachmentRelativePaths(threadId, messages) {
 	if (!threadSegment) return /* @__PURE__ */ new Set();
 	const relativePaths = /* @__PURE__ */ new Set();
 	for (const message of messages) for (const attachment of message.attachments ?? []) {
-		if (attachment.type !== "image") continue;
 		const attachmentThreadSegment = parseThreadSegmentFromAttachmentId(attachment.id);
 		if (!attachmentThreadSegment || attachmentThreadSegment !== threadSegment) continue;
 		relativePaths.add(attachmentRelativePath(attachment));
@@ -101851,7 +102806,12 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 				return;
 			}
 			case "thread.deleted": {
-				attachmentSideEffects.deletedThreadIds.add(event.payload.threadId);
+				if (!(yield* eventStore.hasEventAfter({
+					aggregateKind: "thread",
+					aggregateId: event.payload.threadId,
+					type: "thread.created",
+					sequenceExclusive: event.sequence
+				}))) attachmentSideEffects.deletedThreadIds.add(event.payload.threadId);
 				const existingRow = yield* projectionThreadRepository.getById({ threadId: event.payload.threadId });
 				if (Option.isNone(existingRow)) return;
 				yield* projectionThreadRepository.upsert({
@@ -102086,6 +103046,9 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 	});
 	const applyThreadMessagesProjection = Effect.fn("applyThreadMessagesProjection")(function* (event, attachmentSideEffects) {
 		switch (event.type) {
+			case "thread.created":
+				yield* projectionThreadMessageRepository.deleteByThreadId({ threadId: event.payload.threadId });
+				return;
 			case "thread.message-sent": {
 				const existingMessage = yield* projectionThreadMessageRepository.getByMessageId({ messageId: event.payload.messageId });
 				const previousMessage = Option.getOrUndefined(existingMessage);
@@ -102127,6 +103090,9 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 	});
 	const applyThreadProposedPlansProjection = Effect.fn("applyThreadProposedPlansProjection")(function* (event, _attachmentSideEffects) {
 		switch (event.type) {
+			case "thread.created":
+				yield* projectionThreadProposedPlanRepository.deleteByThreadId({ threadId: event.payload.threadId });
+				return;
 			case "thread.proposed-plan-upserted":
 				yield* projectionThreadProposedPlanRepository.upsert({
 					planId: event.payload.proposedPlan.id,
@@ -102153,6 +103119,10 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 	});
 	const applyThreadActivitiesProjection = Effect.fn("applyThreadActivitiesProjection")(function* (event, attachmentSideEffects) {
 		switch (event.type) {
+			case "thread.created":
+				yield* projectionThreadActivityRepository.deleteByThreadId({ threadId: event.payload.threadId });
+				yield* projectionThreadUserInputRequestRepository.deleteByThreadId({ threadId: event.payload.threadId });
+				return;
 			case "thread.activity-appended": {
 				const requestId = extractActivityRequestId(event.payload.activity.payload);
 				const activityPayload = typeof event.payload.activity.payload === "object" && event.payload.activity.payload !== null ? event.payload.activity.payload : null;
@@ -102208,6 +103178,10 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 		}
 	});
 	const applyThreadSessionsProjection = Effect.fn("applyThreadSessionsProjection")(function* (event, _attachmentSideEffects) {
+		if (event.type === "thread.created") {
+			yield* projectionThreadSessionRepository.deleteByThreadId({ threadId: event.payload.threadId });
+			return;
+		}
 		if (event.type !== "thread.session-set") return;
 		yield* projectionThreadSessionRepository.upsert({
 			threadId: event.payload.threadId,
@@ -102224,6 +103198,9 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 	});
 	const applyThreadTurnsProjection = Effect.fn("applyThreadTurnsProjection")(function* (event, _attachmentSideEffects) {
 		switch (event.type) {
+			case "thread.created":
+				yield* projectionTurnRepository.deleteByThreadId({ threadId: event.payload.threadId });
+				return;
 			case "thread.turn-start-requested":
 				yield* projectionTurnRepository.replacePendingTurnStart({
 					threadId: event.payload.threadId,
@@ -102399,6 +103376,9 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 	const applyCheckpointsProjection = () => Effect.void;
 	const applyPendingApprovalsProjection = Effect.fn("applyPendingApprovalsProjection")(function* (event, attachmentSideEffects) {
 		switch (event.type) {
+			case "thread.created":
+				yield* projectionPendingApprovalRepository.deleteByThreadId({ threadId: event.payload.threadId });
+				return;
 			case "thread.activity-appended": {
 				const requestId = extractActivityRequestId(event.payload.activity.payload) ?? event.metadata.requestId ?? null;
 				if (requestId === null) return;
@@ -102556,7 +103536,8 @@ const makeOrchestrationProjectionPipeline = Effect.fn("makeOrchestrationProjecti
 		const lastAppliedByProjector = new Map(projectors.map((projector) => [projector.name, 0]));
 		for (const row of stateRows) if (lastAppliedByProjector.has(row.projector)) lastAppliedByProjector.set(row.projector, row.lastAppliedSequence);
 		const replayFromSequence = Math.min(...lastAppliedByProjector.values());
-		yield* Stream.runForEach(eventStore.readFromSequence(replayFromSequence), (event) => Effect.gen(function* () {
+		const replayThroughSequence = yield* eventStore.latestSequence;
+		yield* Stream.runForEach(eventStore.readThroughSequence(replayFromSequence, replayThroughSequence), (event) => Effect.gen(function* () {
 			const projectorsToAdvance = projectors.filter((projector) => event.sequence > (lastAppliedByProjector.get(projector.name) ?? 0));
 			if (projectorsToAdvance.length === 0) return;
 			const postCommit = yield* sql.withTransaction(applyProjectorsForEvent(event, projectorsToAdvance));
@@ -106475,4 +107456,4 @@ else if (external !== null) (external.action === "pair" ? promptAndPairExternalM
 });
 else NodeRuntime.runMain(program);
 //#endregion
-export { spawnAndCollect as $, V2ThreadRealtimeErrorNotification as $t, normalizeCliError as A, makeProviderMaintenanceCapabilities as An, ToolRequestUserInputParams as At, buildCodexInitializeParams as B, getModelSelectionBooleanOptionValue as Bn, V2ItemCompletedNotification as Bt, buildCommitMessagePrompt as C, decodeGitHubPullRequestListJson as Cn, SERVER_NOTIFICATION_METHODS as Ct, buildThreadPriorityPrompt as D, enrichProviderSnapshotWithVersionAdvisory as Dn, ServerRequest__ExecCommandApprovalParams as Dt, buildPrContentPrompt as E, AzureDevOpsCli as En, ServerRequest__DynamicToolCallParams as Et, makeClaudeCapabilitiesCacheKey as F, ServerSettingsService as Fn, V2CommandExecutionOutputDeltaNotification as Ft, buildSelectOptionDescriptor as G, getProviderOptionStringSelectionValue as Gn, V2PlanDeltaNotification as Gt, makePendingCodexProvider as H, getProviderOptionBooleanSelectionValue as Hn, V2McpServerOauthLoginCompletedNotification as Ht, makeClaudeContinuationGroupKey as I, resolveAttachmentPath as In, V2ConfigWarningNotification as It, detailFromResult as J, V2ServerRequestResolvedNotification as Jt, buildServerProvider as K, normalizeModelSlug as Kn, V2ReasoningSummaryTextDeltaNotification as Kt, makeClaudeEnvironment as L, resolveCommandPath as Ln, V2DeprecationNoticeNotification as Lt, sanitizePrTitle as M, normalizeCommandPath as Mn, V2AccountRateLimitsUpdatedNotification as Mt, sanitizeThreadTitle as N, resolveProviderMaintenanceCapabilitiesEffect as Nn, V2AccountUpdatedNotification as Nt, buildThreadTitlePrompt as O, makeManualOnlyProviderMaintenanceCapabilities as On, ServerRequest__FileChangeRequestApprovalParams as Ot, toJsonSchemaObject as P, compareCliVersions as Pn, V2AgentMessageDeltaNotification as Pt, providerModelsFromSettings as Q, V2ThreadRealtimeClosedNotification as Qt, resolveClaudeHomePath$1 as R, applyClaudePromptEffortPrefix as Rn, V2ErrorNotification as Rt, buildBranchNamePrompt as S, withoutStatusCheckRollupJsonField as Sn, CodexAppServerTransportError as St, buildIssueContentTitlePrompt as T, BitbucketApi as Tn, ServerRequest__CommandExecutionRequestApprovalParams as Tt, DEFAULT_TIMEOUT_MS as U, getProviderOptionCurrentValue as Un, V2McpToolCallProgressNotification as Ut, checkCodexProviderStatus as V, getModelSelectionStringOptionValue as Vn, V2ItemStartedNotification as Vt, buildBooleanOptionDescriptor as W, getProviderOptionDescriptors as Wn, V2ModelReroutedNotification as Wt, nonEmptyTrimmed as X, V2ThreadGoalUpdatedNotification as Xt, isCommandMissingCause as Y, V2ThreadGoalClearedNotification as Yt, parseGenericCliVersion as Z, V2ThreadNameUpdatedNotification as Zt, ProviderEventLoggers as _, GITHUB_PULL_REQUEST_LIST_JSON_FIELDS as _n, layerChildProcess as _t, PtyAdapter as a, V2ThreadTokenUsageUpdatedNotification as an, createProcessDeviceToolBinding as at, checkRtkAvailability as b, formatGitHubJsonFields as bn, CodexAppServerRequestError as bt, OpenCodeRuntimeError as c, V2TurnPlanUpdatedNotification as cn, ProviderAdapterSessionClosedError as ct, openCodeRuntimeErrorDetail as d, V2TurnStartResponse as dn, ProviderDriverError as dt, V2ThreadRealtimeItemAddedNotification as en, AGENT_CONTROL_INTERNAL_SERVER_NAME as et, parseOpenCodeModelSlug as f, V2TurnSteerParams as fn, codexContinuationIdentity as ft, toOpenCodeQuestionAnswers as g, GitLabCli as gn, CodexAppServerClient as gt, toOpenCodePermissionReply as h, V2WindowsWorldWritableWarningNotification as hn, expandHomePath$3 as ht, classifyTaskAgentKind as i, V2ThreadStatusChangedNotification as in, redactAgentControlSecrets as it, sanitizeCommitSubject as j, makeStaticProviderMaintenanceResolver as jn, ToolRequestUserInputResponse as jt, extractJsonObject as k, makePackageManagedProviderMaintenanceResolver as kn, ServerRequest__ToolRequestUserInputParams as kt, buildOpenCodePermissionRules as l, V2TurnStartParams as ln, ProviderAdapterSessionNotFoundError as lt, toOpenCodeFileParts as m, V2WindowsSandboxSetupCompletedNotification as mn, resolveCodexHomeLayout as mt, AgentControlSessionRegistry as n, V2ThreadRealtimeStartedNotification as nn, installAgentControlAcp as nt, PtySpawnError as o, V2TurnCompletedNotification as on, ProviderAdapterProcessError as ot, runOpenCodeSdk as p, V2TurnSteerResponse as pn, materializeCodexShadowHome as pt, collectStreamAsString as q, resolvePromptInjectedEffort as qn, V2ReasoningTextDeltaNotification as qt, ignoreProviderBackgroundCause as r, V2ThreadStartedNotification as rn, installAgentControlNativeHttp as rt, OpenCodeRuntime as s, V2TurnDiffUpdatedNotification as sn, ProviderAdapterRequestError as st, makeServerQueueMetrics as t, V2ThreadRealtimeOutputAudioDeltaNotification as tn, agentControlHostContext as tt, openCodeQuestionId as u, V2TurnStartParams__CollaborationMode as un, ProviderAdapterValidationError as ut, makeEventNdjsonLogger as v, GitHubCli as vn, CodexAppServerProcessExitedError as vt, buildIssueContentPolishPrompt as w, ForgejoApi as wn, ServerRequest__ApplyPatchApprovalParams as wt, validateRankInboxThreadsResult as x, isStatusCheckRollupAccessError as xn, CodexAppServerSpawnError as xt, buildTokenReductionInstructions as y, GitHubCliError as yn, CodexAppServerProtocolParseError as yt, mergeProviderInstanceEnvironment as z, createModelCapabilities as zn, V2FileChangeOutputDeltaNotification as zt };
+export { parseGenericCliVersion as $, V2ThreadNameUpdatedNotification as $t, buildThreadTitlePrompt as A, makeManualOnlyProviderMaintenanceCapabilities as An, ServerRequest__FileChangeRequestApprovalParams as At, resolveClaudeHomePath$1 as B, resolveCommandPath as Bn, V2ErrorNotification as Bt, validateRankInboxThreadsResult as C, isStatusCheckRollupAccessError as Cn, CodexAppServerSpawnError as Ct, buildIssueContentTitlePrompt as D, BitbucketApi as Dn, ServerRequest__CommandExecutionRequestApprovalParams as Dt, buildIssueContentPolishPrompt as E, ForgejoApi as En, ServerRequest__ApplyPatchApprovalParams as Et, sanitizeThreadTitle as F, resolveProviderMaintenanceCapabilitiesEffect as Fn, V2AccountUpdatedNotification as Ft, DEFAULT_TIMEOUT_MS as G, getProviderOptionBooleanSelectionValue as Gn, V2McpToolCallProgressNotification as Gt, buildCodexInitializeParams as H, createModelCapabilities as Hn, V2ItemCompletedNotification as Ht, toJsonSchemaObject as I, compareCliVersions as In, V2AgentMessageDeltaNotification as It, buildServerProvider as J, getProviderOptionStringSelectionValue as Jn, V2ReasoningSummaryTextDeltaNotification as Jt, buildBooleanOptionDescriptor as K, getProviderOptionCurrentValue as Kn, V2ModelReroutedNotification as Kt, makeClaudeCapabilitiesCacheKey as L, ServerSettingsService as Ln, V2CommandExecutionOutputDeltaNotification as Lt, normalizeCliError as M, makeProviderMaintenanceCapabilities as Mn, ToolRequestUserInputParams as Mt, sanitizeCommitSubject as N, makeStaticProviderMaintenanceResolver as Nn, ToolRequestUserInputResponse as Nt, buildPrContentPrompt as O, AzureDevOpsCli as On, ServerRequest__DynamicToolCallParams as Ot, sanitizePrTitle as P, normalizeCommandPath as Pn, V2AccountRateLimitsUpdatedNotification as Pt, nonEmptyTrimmed as Q, V2ThreadGoalUpdatedNotification as Qt, makeClaudeContinuationGroupKey as R, readPersistedAttachment as Rn, V2ConfigWarningNotification as Rt, checkRtkAvailability as S, formatGitHubJsonFields as Sn, CodexAppServerRequestError as St, buildCommitMessagePrompt as T, decodeGitHubPullRequestListJson as Tn, SERVER_NOTIFICATION_METHODS as Tt, checkCodexProviderStatus as U, getModelSelectionBooleanOptionValue as Un, V2ItemStartedNotification as Ut, mergeProviderInstanceEnvironment as V, applyClaudePromptEffortPrefix as Vn, V2FileChangeOutputDeltaNotification as Vt, makePendingCodexProvider as W, getModelSelectionStringOptionValue as Wn, V2McpServerOauthLoginCompletedNotification as Wt, detailFromResult as X, resolvePromptInjectedEffort as Xn, V2ServerRequestResolvedNotification as Xt, collectStreamAsString as Y, normalizeModelSlug as Yn, V2ReasoningTextDeltaNotification as Yt, isCommandMissingCause as Z, V2ThreadGoalClearedNotification as Zt, toOpenCodeQuestionAnswers as _, V2WindowsWorldWritableWarningNotification as _n, expandHomePath$3 as _t, PtyAdapter as a, V2ThreadStartedNotification as an, installAgentControlNativeHttp as at, makeEventNdjsonLogger as b, GitHubCli as bn, CodexAppServerProcessExitedError as bt, OpenCodeRuntime as c, V2TurnCompletedNotification as cn, ProviderAdapterProcessError as ct, openCodeQuestionId as d, V2TurnStartParams as dn, ProviderAdapterSessionNotFoundError as dt, V2ThreadRealtimeClosedNotification as en, providerModelsFromSettings as et, openCodeRuntimeErrorDetail as f, V2TurnStartParams__CollaborationMode as fn, ProviderAdapterValidationError as ft, toOpenCodePermissionReply as g, V2WindowsSandboxSetupCompletedNotification as gn, resolveCodexHomeLayout as gt, toOpenCodeFileParts as h, V2TurnSteerResponse as hn, materializeCodexShadowHome as ht, classifyTaskAgentKind as i, V2ThreadRealtimeStartedNotification as in, installAgentControlAcp as it, extractJsonObject as j, makePackageManagedProviderMaintenanceResolver as jn, ServerRequest__ToolRequestUserInputParams as jt, buildThreadPriorityPrompt as k, enrichProviderSnapshotWithVersionAdvisory as kn, ServerRequest__ExecCommandApprovalParams as kt, OpenCodeRuntimeError as l, V2TurnDiffUpdatedNotification as ln, ProviderAdapterRequestError as lt, runOpenCodeSdk as m, V2TurnSteerParams as mn, codexContinuationIdentity as mt, AgentControlSessionRegistry as n, V2ThreadRealtimeItemAddedNotification as nn, AGENT_CONTROL_INTERNAL_SERVER_NAME as nt, PtySpawnError as o, V2ThreadStatusChangedNotification as on, redactAgentControlSecrets as ot, parseOpenCodeModelSlug as p, V2TurnStartResponse as pn, ProviderDriverError as pt, buildSelectOptionDescriptor as q, getProviderOptionDescriptors as qn, V2PlanDeltaNotification as qt, ignoreProviderBackgroundCause as r, V2ThreadRealtimeOutputAudioDeltaNotification as rn, agentControlHostContext as rt, MINIMUM_OPENCODE_VERSION as s, V2ThreadTokenUsageUpdatedNotification as sn, createProcessDeviceToolBinding as st, makeServerQueueMetrics as t, V2ThreadRealtimeErrorNotification as tn, spawnAndCollect as tt, buildOpenCodePermissionRules as u, V2TurnPlanUpdatedNotification as un, ProviderAdapterSessionClosedError as ut, verifyOpenCodeServerVersion as v, GitLabCli as vn, CodexAppServerClient as vt, buildBranchNamePrompt as w, withoutStatusCheckRollupJsonField as wn, CodexAppServerTransportError as wt, buildTokenReductionInstructions as x, GitHubCliError as xn, CodexAppServerProtocolParseError as xt, ProviderEventLoggers as y, GITHUB_PULL_REQUEST_LIST_JSON_FIELDS as yn, layerChildProcess as yt, makeClaudeEnvironment as z, resolveAttachmentPath as zn, V2DeprecationNoticeNotification as zt };