sessionpipe-core 0.7.0 → 0.10.0

package/dist/index.js

@@ -1,10 +1,525 @@
-// sessionpipe-core 0.7.0 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe-core 0.10.0 · Apache-2.0 · https://sessionpipe.org
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/adapters/acp-control.ts
+var acp_control_exports = {};
+__export(acp_control_exports, {
+  ACP_AGENTS: () => ACP_AGENTS,
+  ACP_HARNESSES: () => ACP_HARNESSES,
+  acpAgent: () => acpAgent,
+  acpHarnesses: () => acpHarnesses,
+  acpOverride: () => acpOverride,
+  errorWords: () => errorWords,
+  findAcpAgent: () => findAcpAgent,
+  permissionChoice: () => permissionChoice,
+  startAcp: () => startAcp
+});
+import { spawn as spawn2 } from "node:child_process";
+import os from "node:os";
+import path2 from "node:path";
+
+// src/adapters/headless.ts
+import { spawn } from "node:child_process";
+import { accessSync, constants, statSync } from "node:fs";
+import path from "node:path";
+var JOB_TIMEOUT_MS = 30 * 6e4;
+var OUT_CAP = 1024 * 1024;
+function isExe(p) {
+  try {
+    if (!statSync(p).isFile()) return false;
+    accessSync(p, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function findBinary(o) {
+  if (o.override && isExe(o.override)) return o.override;
+  for (const d of String(o.env?.PATH || "").split(path.delimiter)) {
+    if (!d || !path.isAbsolute(d)) continue;
+    for (const n of o.names) if (isExe(path.join(d, n))) return path.join(d, n);
+  }
+  for (const d of o.dirs) for (const n of o.names) if (isExe(path.join(d, n))) return path.join(d, n);
+  return null;
+}
+function jobEnv(env = process.env) {
+  return { ...env, SESSIONPIPE_CONTROL_JOB: "1" };
+}
+function runHeadless(bin, args, o) {
+  return new Promise((resolve) => {
+    let out = [];
+    let outLen = 0;
+    let tooBig = false;
+    let errTail = "";
+    let timedOut = false;
+    let settled = false;
+    let child;
+    try {
+      child = spawn(bin, args, {
+        cwd: o.cwd,
+        env: o.env,
+        stdio: ["ignore", "pipe", "pipe"],
+        detached: process.platform !== "win32",
+        windowsHide: true
+      });
+    } catch (e) {
+      resolve({ error: e.message });
+      return;
+    }
+    const kill = (sig) => {
+      try {
+        if (process.platform !== "win32" && child.pid) process.kill(-child.pid, sig);
+        else child.kill(sig);
+      } catch {
+        try {
+          child.kill(sig);
+        } catch {
+        }
+      }
+    };
+    const keep = (line) => {
+      if (!o.keep?.(line)) return;
+      out = [Buffer.from(line)];
+      outLen = line.length;
+    };
+    let partial = "";
+    child.stdout?.on("data", (b) => {
+      if (o.onLine) {
+        const chunk = partial + b.toString("utf8");
+        const lines = chunk.split("\n");
+        partial = lines.pop();
+        for (const line of lines) {
+          if (!line.trim()) continue;
+          try {
+            o.onLine(line);
+          } catch {
+          }
+          keep(line);
+        }
+        if (partial.length > OUT_CAP) partial = "";
+        return;
+      }
+      if (tooBig) return;
+      if (outLen + b.length > OUT_CAP) {
+        tooBig = true;
+        out = [];
+        return;
+      }
+      out.push(b);
+      outLen += b.length;
+    });
+    child.stderr?.on("data", (b) => {
+      errTail = (errTail + b.toString("utf8")).slice(-4e3);
+    });
+    const timer = setTimeout(() => {
+      timedOut = true;
+      kill("SIGTERM");
+      setTimeout(() => kill("SIGKILL"), 1e4).unref();
+    }, o.timeoutMs ?? JOB_TIMEOUT_MS);
+    const result = (code, signal) => ({
+      code,
+      signal,
+      stdout: tooBig ? null : Buffer.concat(out).toString("utf8"),
+      tooBig,
+      stderr: errTail,
+      timedOut
+    });
+    const finish = (r) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolve(r);
+    };
+    child.on("error", (e) => finish({ error: e.message }));
+    child.on("exit", (code, signal) => setTimeout(() => finish(result(code, signal)), 2e3).unref());
+    child.on("close", (code, signal) => {
+      if (o.onLine && partial.trim()) {
+        try {
+          o.onLine(partial);
+        } catch {
+        }
+        keep(partial);
+        partial = "";
+      }
+      finish(result(code, signal));
+    });
+  });
+}
+function stderrTail(stderr, n = 3) {
+  return String(stderr || "").trim().split("\n").slice(-n).join(" ").trim();
+}
+function deniedNote(names, count) {
+  if (!count) return "";
+  return `
+
+(Not allowed on this machine, since nobody was there to approve: ${names.join(", ") || `${count} action(s)`}.)`;
+}
+function runFailure(label, res) {
+  if (res.error) return `couldn't start ${label}: ${res.error}`;
+  if (res.timedOut) return `${label} was still working after 30 minutes, so it was stopped`;
+  return null;
+}
+
+// src/adapters/acp-control.ts
+var ACP_AGENTS = [
+  { harness: "gemini-cli", registry: "gemini", label: "Gemini CLI", bin: "gemini", args: ["--acp"] },
+  { harness: "devin", registry: "devin", label: "Devin", bin: "devin", args: ["acp"] },
+  { harness: "opencode", registry: "opencode", label: "OpenCode", bin: "opencode", args: ["acp"] },
+  { harness: "cursor", registry: "cursor", label: "Cursor", bin: "cursor-agent", args: ["acp"] },
+  { harness: "copilot-cli", registry: "github-copilot-cli", label: "Copilot CLI", bin: "copilot", args: ["--acp"] },
+  {
+    harness: "droid",
+    registry: "factory-droid",
+    label: "Droid",
+    bin: "droid",
+    args: ["exec", "--output-format", "acp-daemon"]
+  },
+  { harness: "goose", registry: "goose", label: "goose", bin: "goose", args: ["acp"] },
+  { harness: "kilo", registry: "kilo", label: "Kilo", bin: "kilo", args: ["acp"] },
+  {
+    harness: "qwen-code",
+    registry: "qwen-code",
+    label: "Qwen Code",
+    bin: "qwen",
+    args: ["--acp", "--experimental-skills"]
+  },
+  { harness: "cline", registry: "cline", label: "Cline", bin: "cline", args: ["--acp"] },
+  { harness: "auggie", registry: "auggie", label: "Auggie", bin: "auggie", args: ["--acp"] },
+  { harness: "kimi", registry: "kimi", label: "Kimi CLI", bin: "kimi", args: ["acp"] },
+  { harness: "amp", registry: "amp-acp", label: "Amp", bin: "amp-acp", args: [] },
+  { harness: "mistral-vibe", registry: "mistral-vibe", label: "Mistral Vibe", bin: "vibe-acp", args: [] },
+  { harness: "bob", registry: "bob", label: "Bob", bin: "bob", args: ["acp"] },
+  { harness: "grok-build", registry: "grok-build", label: "Grok Build", bin: "grok", args: ["agent", "stdio"] },
+  { harness: "qoder", registry: "qoder", label: "Qoder CLI", bin: "qodercli", args: ["--acp"] },
+  { harness: "minimax-code", registry: "minimax-code", label: "MiniMax Code", bin: "mcode", args: ["acp"] },
+  { harness: "codebuddy-code", registry: "codebuddy-code", label: "Codebuddy Code", bin: "codebuddy", args: ["--acp"] },
+  { harness: "nova", registry: "nova", label: "Nova", bin: "nova", args: ["acp"] },
+  { harness: "dimcode", registry: "dimcode", label: "DimCode", bin: "dim", args: ["acp"] },
+  { harness: "dirac", registry: "dirac", label: "Dirac", bin: "dirac", args: ["--acp"] },
+  { harness: "harn", registry: "harn", label: "Harn", bin: "harn", args: ["serve", "acp"] },
+  { harness: "vtcode", registry: "vtcode", label: "VT Code", bin: "vtcode", args: ["acp"] },
+  { harness: "stakpak", registry: "stakpak", label: "Stakpak", bin: "stakpak", args: ["acp"] },
+  { harness: "crow-cli", registry: "crow-cli", label: "crow-cli", bin: "crow-cli", args: ["acp"] },
+  { harness: "corust-agent", registry: "corust-agent", label: "Corust Agent", bin: "corust-agent-acp", args: [] },
+  { harness: "cortex-code", registry: "cortex-code", label: "Cortex Code", bin: "cortex", args: ["acp", "serve"] },
+  { harness: "kimchi", registry: "kimchi", label: "Kimchi", bin: "kimchi", args: ["--mode", "acp"] }
+];
+var ACP_HARNESSES = ACP_AGENTS.map((a) => a.harness);
+var acpAgent = (harness) => ACP_AGENTS.find((a) => a.harness === harness);
+var acpOverride = (harness) => `SESSIONPIPE_ACP_${harness.toUpperCase().replace(/-/g, "_")}`;
+function findAcpAgent(harness, env = process.env, home = os.homedir(), nodeDir = path2.dirname(process.execPath)) {
+  const a = acpAgent(harness);
+  if (!a) return null;
+  const bin = findBinary({
+    override: env[acpOverride(harness)],
+    names: process.platform === "win32" ? [`${a.bin}.exe`, `${a.bin}.cmd`] : [a.bin],
+    env,
+    dirs: [
+      nodeDir,
+      path2.join(home, ".local", "bin"),
+      path2.join(home, ".cargo", "bin"),
+      "/opt/homebrew/bin",
+      "/usr/local/bin"
+    ]
+  });
+  return bin ? { bin, args: a.args } : null;
+}
+function acpHarnesses(env = process.env) {
+  return ACP_HARNESSES.filter((h) => findAcpAgent(h, env));
+}
+var obj = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : null;
+var str = (v) => typeof v === "string" ? v : "";
+function permissionChoice(options, mode) {
+  const list = (Array.isArray(options) ? options : []).map(obj).filter((o) => !!o && !!str(o.optionId)).map((o) => ({ optionId: str(o.optionId), kind: str(o.kind) }));
+  const want = mode === "auto" ? ["allow_once", "allow_always"] : ["reject_once", "reject_always"];
+  for (const k of want) {
+    const hit = list.find((o) => o.kind === k);
+    if (hit) return hit;
+  }
+  return null;
+}
+function errorWords(err) {
+  const message = str(err.message);
+  const data = str(err.data) || str(obj(err.data)?.message);
+  return data && data !== message ? message ? `${message}: ${data}` : data : message;
+}
+function toolName(call, titles) {
+  if (!call) return null;
+  const t = str(call.title) || titles.get(str(call.toolCallId)) || str(call.name) || str(call.toolCallId);
+  return t ? t.slice(0, 80) : null;
+}
+var CLIENT_INFO = { name: "sessionpipe", title: "sessionpipe control", version: "1" };
+function startAcp(o) {
+  const now = o.now ?? Date.now;
+  const log = o.log ?? (() => {
+  });
+  const label = o.label;
+  let child;
+  try {
+    child = spawn2(o.bin, o.args, {
+      cwd: o.cwd,
+      env: jobEnv(o.env),
+      stdio: ["pipe", "pipe", "pipe"],
+      detached: process.platform !== "win32",
+      windowsHide: true
+    });
+  } catch (e) {
+    return Promise.resolve({ failed: `couldn't start ${label}: ${e.message}` });
+  }
+  const kill = (sig) => {
+    try {
+      if (process.platform !== "win32" && child.pid) process.kill(-child.pid, sig);
+      else child.kill(sig);
+    } catch {
+    }
+  };
+  let gone = null;
+  let errTail = "";
+  let nextId = 1;
+  const pending = /* @__PURE__ */ new Map();
+  const write = (m) => {
+    if (gone) return;
+    try {
+      child.stdin?.write(`${JSON.stringify(m)}
+`);
+    } catch {
+    }
+  };
+  const request = (method, params, timeoutMs) => new Promise((resolve, reject) => {
+    if (gone) return reject(new Error(gone));
+    const id = nextId++;
+    const t = setTimeout(() => {
+      pending.delete(id);
+      reject(new Error(`${label} didn't answer ${method} in ${Math.round(timeoutMs / 1e3)} s`));
+    }, timeoutMs);
+    t.unref();
+    pending.set(id, {
+      resolve: (r) => {
+        clearTimeout(t);
+        resolve(r);
+      },
+      reject: (e) => {
+        clearTimeout(t);
+        reject(e);
+      }
+    });
+    write({ jsonrpc: "2.0", id, method, params });
+  });
+  const notify = (method, params) => write({ jsonrpc: "2.0", method, params });
+  let turn = null;
+  const titles = /* @__PURE__ */ new Map();
+  const onUpdate = (u) => {
+    if (!u) return;
+    const kind = str(u.sessionUpdate);
+    if (kind === "tool_call" && str(u.toolCallId) && str(u.title)) {
+      if (titles.size >= 200) titles.clear();
+      titles.set(str(u.toolCallId), str(u.title));
+      return;
+    }
+    if (kind !== "agent_message_chunk" || !turn) return;
+    const c = obj(u.content);
+    if (c?.type !== "text" || !str(c.text)) return;
+    const mid = str(u.messageId) || null;
+    if (turn.message !== void 0 && mid !== turn.message && turn.text.trim())
+      turn.text = `${turn.text.trimEnd()}
+
+`;
+    turn.message = mid;
+    turn.text += str(c.text);
+    o.onText?.(turn.text);
+  };
+  const onRequest = (id, method, params) => {
+    if (method !== "session/request_permission") {
+      write({ jsonrpc: "2.0", id, error: { code: -32601, message: `Method not found: ${method}` } });
+      return;
+    }
+    const pick = permissionChoice(params?.options, o.mode);
+    if (!pick?.kind.startsWith("allow")) {
+      const name = toolName(obj(params?.toolCall), titles);
+      if (turn) {
+        turn.count++;
+        if (name && !turn.denied.includes(name) && turn.denied.length < 20) turn.denied.push(name);
+      }
+    }
+    write({
+      jsonrpc: "2.0",
+      id,
+      result: { outcome: pick ? { outcome: "selected", optionId: pick.optionId } : { outcome: "cancelled" } }
+    });
+  };
+  const onLine = (line) => {
+    let m;
+    try {
+      m = obj(JSON.parse(line));
+    } catch {
+      return;
+    }
+    if (!m) return;
+    const method = str(m.method);
+    if (method) {
+      if (m.id !== void 0) onRequest(m.id, method, obj(m.params));
+      else if (method === "session/update") onUpdate(obj(obj(m.params)?.update));
+      return;
+    }
+    const p = typeof m.id === "number" ? pending.get(m.id) : void 0;
+    if (!p) return;
+    pending.delete(m.id);
+    const err = obj(m.error);
+    if (err) p.reject(new Error(errorWords(err) || `${label} returned error ${String(err.code ?? "?")}`));
+    else p.resolve(m.result);
+  };
+  let partial = "";
+  child.stdout?.on("data", (b) => {
+    const lines = (partial + b.toString("utf8")).split("\n");
+    partial = lines.pop();
+    for (const l of lines) if (l.trim()) onLine(l);
+    if (partial.length > 4 * 1024 * 1024) partial = "";
+  });
+  child.stderr?.on("data", (b) => {
+    errTail = (errTail + b.toString("utf8")).slice(-4e3);
+  });
+  const left = (why) => {
+    if (gone) return;
+    gone = why;
+    for (const p of pending.values()) p.reject(new Error(why));
+    pending.clear();
+  };
+  child.on("error", (e) => left(`couldn't start ${label}: ${e.message}`));
+  const exited = (code, signal) => {
+    const tail = errTail.trim().split("\n").slice(-3).join(" ").trim();
+    left(`${label} exited (${signal || `code ${code}`})${tail ? `: ${tail}` : ""}`);
+  };
+  child.on("exit", exited);
+  child.on("close", exited);
+  let closed = false;
+  const close = () => {
+    if (closed) return;
+    closed = true;
+    try {
+      child.stdin?.end();
+    } catch {
+    }
+    const grace = o.closeGraceMs ?? 2e3;
+    const t = setTimeout(() => kill("SIGTERM"), grace);
+    t.unref();
+    const k = setTimeout(() => kill("SIGKILL"), grace * 6);
+    k.unref();
+    child.once("exit", () => {
+      clearTimeout(t);
+      clearTimeout(k);
+    });
+  };
+  const open = o.openTimeoutMs ?? 6e4;
+  function held(session) {
+    let busy = false;
+    let lastUsed = now();
+    return {
+      session,
+      mode: "api",
+      get busy() {
+        return busy;
+      },
+      get lastUsed() {
+        return lastUsed;
+      },
+      get closed() {
+        return closed || !!gone;
+      },
+      async send(text) {
+        if (closed) return { reply: "", error: `${label} was closed` };
+        busy = true;
+        lastUsed = now();
+        const t = { text: "", denied: [], count: 0 };
+        turn = t;
+        const limit = o.timeoutMs ?? JOB_TIMEOUT_MS;
+        let timedOut = false;
+        const timer = setTimeout(() => {
+          timedOut = true;
+          notify("session/cancel", { sessionId: session });
+          setTimeout(close, 5e3).unref();
+        }, limit);
+        timer.unref();
+        try {
+          const res = obj(
+            await request("session/prompt", { sessionId: session, prompt: [{ type: "text", text }] }, limit + 1e4)
+          );
+          const stop = str(res?.stopReason);
+          const words = t.text.trim() || `(${label} finished without a written reply.)`;
+          const refused = deniedNote(t.denied, t.count);
+          if (stop === "end_turn" || stop === "max_tokens") return { reply: words + refused };
+          if (stop === "refusal") return { reply: `${words}
+
+(${label} refused the request.)${refused}` };
+          if (stop === "cancelled")
+            return timedOut ? {
+              reply: "",
+              error: `${label} was still working after ${Math.round(limit / 6e4)} minutes, so it was stopped`
+            } : { reply: `${words}
+
+(The turn was cancelled.)${refused}` };
+          return { reply: "", error: `${label} ended the turn with ${stop || "no stop reason"}` };
+        } catch (e) {
+          return { reply: "", error: e.message };
+        } finally {
+          clearTimeout(timer);
+          turn = null;
+          busy = false;
+          lastUsed = now();
+        }
+      },
+      async interrupt() {
+        notify("session/cancel", { sessionId: session });
+      },
+      close
+    };
+  }
+  return (async () => {
+    let signIn = "";
+    try {
+      const init = obj(
+        await request(
+          "initialize",
+          {
+            protocolVersion: 1,
+            clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false },
+            clientInfo: CLIENT_INFO
+          },
+          open
+        )
+      );
+      const caps = obj(init?.agentCapabilities);
+      const info = obj(init?.agentInfo);
+      log(
+        `${label}: ${str(info?.name) || "agent"} ${str(info?.version)} (ACP ${String(init?.protocolVersion ?? "?")})`
+      );
+      const methods = Array.isArray(init?.authMethods) ? init.authMethods.map(obj) : [];
+      if (methods.length) {
+        const how = str(methods[0]?.description) || str(methods[0]?.name);
+        signIn = ` (if ${label} wants a sign-in, do it at the machine's terminal${how ? `: ${how}` : ""})`;
+      }
+      if (o.load) {
+        if (!caps?.loadSession) {
+          close();
+          return { unsupported: `${label} can't reopen a session once it has been closed (no session/load)` };
+        }
+        await request("session/load", { sessionId: o.load, cwd: o.cwd, mcpServers: [] }, open);
+        return { held: held(o.load) };
+      }
+      const res = obj(await request("session/new", { cwd: o.cwd, mcpServers: [] }, open));
+      const session = str(res?.sessionId);
+      if (!session) throw new Error(`${label} opened a session without naming it`);
+      return { held: held(session) };
+    } catch (e) {
+      close();
+      return { failed: `${e.message}${signIn}` };
+    }
+  })();
+}
+
 // src/adapters/antigravity.ts
 import {
   existsSync as existsSync2,
@@ -12,38 +527,42 @@ import {
   readdirSync as readdirSync2,
   readFileSync as readFileSync2,
   realpathSync,
-  statSync as statSync2,
+  statSync as statSync3,
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import path4 from "node:path";
+import path6 from "node:path";
 
 // src/paths.ts
-import os from "node:os";
-import path from "node:path";
-var HOME = os.homedir();
+import os2 from "node:os";
+import path3 from "node:path";
+var homeDir = () => os2.homedir();
 function configFile(env = process.env) {
-  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);
+  if (env.SESSIONPIPE_CONFIG) return path3.resolve(env.SESSIONPIPE_CONFIG);
   if (process.platform === "win32")
-    return path.join(env.APPDATA || path.join(HOME, "AppData", "Roaming"), "sessionpipe", "config.json");
-  return path.join(env.XDG_CONFIG_HOME || path.join(HOME, ".config"), "sessionpipe", "config.json");
+    return path3.join(env.APPDATA || path3.join(homeDir(), "AppData", "Roaming"), "sessionpipe", "config.json");
+  return path3.join(env.XDG_CONFIG_HOME || path3.join(homeDir(), ".config"), "sessionpipe", "config.json");
 }
 function stateDir(env = process.env) {
-  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);
+  if (env.SESSIONPIPE_STATE) return path3.resolve(env.SESSIONPIPE_STATE);
   if (process.platform === "win32")
-    return path.join(env.LOCALAPPDATA || path.join(HOME, "AppData", "Local"), "sessionpipe");
-  return path.join(env.XDG_STATE_HOME || path.join(HOME, ".local", "state"), "sessionpipe");
+    return path3.join(env.LOCALAPPDATA || path3.join(homeDir(), "AppData", "Local"), "sessionpipe");
+  return path3.join(env.XDG_STATE_HOME || path3.join(homeDir(), ".local", "state"), "sessionpipe");
 }
-function tilde(p, home = HOME) {
+function tilde(p, home = homeDir()) {
   if (!p) return p;
   if (p === home) return "~";
-  return p.startsWith(home + path.sep) || p.startsWith(`${home}/`) ? `~${p.slice(home.length)}` : p;
+  return p.startsWith(home + path3.sep) || p.startsWith(`${home}/`) ? `~${p.slice(home.length)}` : p;
+}
+function untilde(p, home = homeDir()) {
+  if (p === "~") return home;
+  return /^~[\\/]/.test(p) ? path3.join(home, p.slice(2)) : p;
 }
 var safeId = (s) => String(s).replace(/[^A-Za-z0-9_.-]/g, "_").slice(0, 160);
 
 // src/readers/files.ts
-import { closeSync, fstatSync, openSync, readdirSync, readSync, statSync } from "node:fs";
-import path2 from "node:path";
+import { closeSync, fstatSync, openSync, readdirSync, readSync, statSync as statSync2 } from "node:fs";
+import path4 from "node:path";
 function ends(file, headBytes, tailBytes) {
   let fd;
   try {
@@ -115,14 +634,14 @@ function recentFiles(root, depth, sinceMs, match) {
       return;
     }
     for (const e of names) {
-      const p = path2.join(dir, e.name);
+      const p = path4.join(dir, e.name);
       if (e.isDirectory()) {
         if (d < depth) walk(p, d + 1);
         continue;
       }
       if (!match(e.name)) continue;
       try {
-        if (statSync(p).mtimeMs >= sinceMs) out.push(p);
+        if (statSync2(p).mtimeMs >= sinceMs) out.push(p);
       } catch {
       }
     }
@@ -131,6 +650,19 @@ function recentFiles(root, depth, sinceMs, match) {
   return out;
 }
 
+// src/adapters/codex-rollout.ts
+function codexSubagent(meta) {
+  if (meta?.type !== "session_meta") return false;
+  const p = meta.payload;
+  return !!p?.source?.subagent;
+}
+function codexReplayBoundary(meta) {
+  if (meta?.type !== "session_meta") return void 0;
+  const p = meta.payload;
+  if (!p || !p.forked_from_id && !p.source?.subagent) return void 0;
+  return (record) => typeof p.id === "string" && !!p.id && record?.type === "event_msg" && record.payload?.thread_id === p.id;
+}
+
 // src/readers/transcripts.ts
 function pairTurns(msgs, endLine) {
   const turns = [];
@@ -153,10 +685,14 @@ ${m.text}`;
   }
   if (cur?.assistant) turns.push(cur);
   const line = cur && !cur.assistant ? cur.startLine : endLine;
-  return { turns: turns.map((t) => ({ user: t.user, assistant: t.assistant, at: t.at, endLine: t.endLine })), line };
+  const out = {
+    turns: turns.map((t) => ({ user: t.user, assistant: t.assistant, at: t.at, endLine: t.endLine })),
+    line
+  };
+  if (cur && !cur.assistant && cur.user) out.open = { user: cur.user, at: cur.at };
+  return out;
 }
-var isInjected = (text) => /^<[a-z_-]+>/i.test(text) && /<\/[a-z_-]+>\s*$/i.test(text) || /^<!--\s/.test(text) || /^<command-/.test(text);
-var endOf = (lines) => lines[lines.length - 1] === "" ? lines.length - 1 : lines.length;
+var isInjected = (text) => /^<[a-z_-]+(?:\s[^>]*)?>/i.test(text) && /<\/[a-z_-]+>\s*$/i.test(text) || /^<!--\s/.test(text) || /^<command-/.test(text);
 var parse = (raw) => {
   try {
     return JSON.parse(raw);
@@ -164,6 +700,11 @@ var parse = (raw) => {
     return null;
   }
 };
+var endOf = (lines) => {
+  const last = lines[lines.length - 1];
+  if (last === void 0) return 0;
+  return last === "" || parse(last) === null ? lines.length - 1 : lines.length;
+};
 var textParts = (c, kinds) => {
   if (typeof c === "string") return c;
   if (!Array.isArray(c)) return "";
@@ -171,13 +712,21 @@ var textParts = (c, kinds) => {
     (b) => b && typeof b === "object" && kinds.includes(b.type ?? "") && typeof b.text === "string"
   ).map((b) => b.text).join("\n");
 };
+var queuedPrompt = (a) => {
+  if (!a || typeof a !== "object") return "";
+  const q = a;
+  if (q.type !== "queued_command" || (q.commandMode ?? "prompt") !== "prompt") return "";
+  if (q.origin?.kind && q.origin.kind !== "human") return "";
+  return textParts(q.prompt, ["text"]).trim();
+};
 function readClaude(lines, from) {
   const msgs = [];
   for (let i = from; i < lines.length; i++) {
     const j = lines[i] ? parse(lines[i]) : null;
     if (!j || j.isSidechain) continue;
     const origin = j.origin;
-    if (j.type === "user" && (j.isMeta || origin?.kind && origin.kind !== "human")) continue;
+    if (j.type === "user" && (j.isMeta || j.isCompactSummary || j.repeatsCompactSummary || origin?.kind && origin.kind !== "human"))
+      continue;
     const at = Date.parse(String(j.timestamp ?? "")) || Date.now();
     const c = j.message?.content;
     if (j.type === "user") {
@@ -187,6 +736,9 @@ function readClaude(lines, from) {
     } else if (j.type === "assistant" && Array.isArray(c)) {
       const text = textParts(c, ["text"]).trim();
       if (text) msgs.push({ role: "assistant", text, at, line: i });
+    } else if (j.type === "attachment") {
+      const text = queuedPrompt(j.attachment);
+      if (text && !isInjected(text)) msgs.push({ role: "user", text, at, line: i });
     }
   }
   return pairTurns(msgs, endOf(lines));
@@ -196,7 +748,10 @@ function codexInjected(text) {
 }
 function readCodex(lines, from) {
   const msgs = [];
-  for (let i = from; i < lines.length; i++) {
+  const boundary = codexReplayBoundary(parse(lines.find((line) => line.trim()) ?? ""));
+  const start = boundary ? lines.findIndex((line) => boundary(parse(line))) : 0;
+  if (start < 0) return pairTurns(msgs, endOf(lines));
+  for (let i = Math.max(from, start); i < lines.length; i++) {
     const j = lines[i] ? parse(lines[i]) : null;
     if (!j || j.type !== "response_item") continue;
     const p = j.payload;
@@ -234,7 +789,7 @@ function readAntigravity(lines, from) {
     const at = Date.parse(String(j.created_at ?? j.timestamp ?? "")) || Date.now();
     if (j.type === "USER_INPUT") {
       const m = /<USER_REQUEST>([\s\S]*?)(?:<\/USER_REQUEST>|$)/.exec(j.content);
-      const text = (m ? m[1] ?? "" : j.content).trim();
+      const text = (m ? m[1] : j.content).trim();
       if (text) msgs.push({ role: "user", text, at, line: i });
     } else if (j.type === "PLANNER_RESPONSE") {
       const text = j.content.trim();
@@ -246,7 +801,7 @@ function readAntigravity(lines, from) {
 
 // src/adapters/claude-shaped.ts
 import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import path3 from "node:path";
+import path5 from "node:path";
 var OURS = /(?:sessionpipe[^"\n]*[\\/]hook\.js|[\\/]sessionpipe-hook)"?\s+[a-z][a-z-]*\s+[A-Za-z]+\s*$/;
 var isOurs = (h) => Array.isArray(h?.hooks) && h.hooks.some((x) => typeof x.command === "string" && OURS.test(x.command));
 function readJsonFile(file) {
@@ -282,6 +837,10 @@ function formatJson(value, f) {
   const text = JSON.stringify(value, null, f.indent).replace(/\n/g, f.eol);
   return f.finalNewline ? text + f.eol : text;
 }
+function readJson(file) {
+  const f = readJsonFile(file);
+  return f.ok ? f.value : {};
+}
 function entryFor(event, harness, cmd, o) {
   const matcher = o.matcherFor(event);
   return {
@@ -323,7 +882,7 @@ function installClaudeShaped(file, harness, events, cmd, o) {
   }
   if (changed) {
     settings2.hooks = hooks;
-    mkdirSync(path3.dirname(file), { recursive: true });
+    mkdirSync(path5.dirname(file), { recursive: true });
     writeFileSync(file, formatJson(settings2, f));
   }
   return { file, changed, created: !f.existed && changed };
@@ -351,8 +910,7 @@ function uninstallClaudeShaped(file, events, opts = {}) {
     unlinkSync(file);
     return { file, changed: true, note: "removed (sessionpipe created it)" };
   }
-  const next = formatJson(settings2, f);
-  if (next !== f.raw) writeFileSync(file, next);
+  writeFileSync(file, formatJson(settings2, f));
   return { file, changed: true };
 }
 function installedClaudeShaped(file, harness, events, cmd, o) {
@@ -379,10 +937,10 @@ var HOOK_NAME = "sessionpipe";
 var AG_EVENTS = ["PreInvocation", "PostInvocation", "PostToolUse", "Stop"];
 var AG_STALE_PRETOOL = '{"decision":"ask","reason":"sessionpipe: an outdated PreToolUse hook is still loaded. Restart this conversation (or run sessionpipe install) to drop it."}\n';
 var antigravityAnswer = (event) => event === "PreToolUse" ? AG_STALE_PRETOOL : "{}\n";
-var gemini = (env) => env.GEMINI_CLI_HOME || path4.join(HOME, ".gemini");
-var hooksFile = (env) => path4.join(gemini(env), "config", "hooks.json");
-var projectsDir = (env) => path4.join(gemini(env), "config", "projects");
-var dataDirs = (env) => ["antigravity", "antigravity-cli", "antigravity-ide"].map((d) => path4.join(gemini(env), d));
+var gemini = (env) => env.GEMINI_CLI_HOME || path6.join(homeDir(), ".gemini");
+var hooksFile = (env) => path6.join(gemini(env), "config", "hooks.json");
+var projectsDir = (env) => path6.join(gemini(env), "config", "projects");
+var dataDirs = (env) => ["antigravity", "antigravity-cli", "antigravity-ide"].map((d) => path6.join(gemini(env), d));
 var ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 var validTool = (n) => typeof n === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(n);
 function entry(cmd) {
@@ -394,7 +952,7 @@ function entry(cmd) {
 var antigravity = {
   name: NAME,
   events: AG_EVENTS,
-  detect: (env = process.env) => existsSync2(path4.join(gemini(env), "config")) || dataDirs(env).some((d) => existsSync2(d)),
+  detect: (env = process.env) => existsSync2(path6.join(gemini(env), "config")) || dataDirs(env).some((d) => existsSync2(d)),
   configFiles: (env = process.env) => [hooksFile(env)],
   install(cmd, env = process.env) {
     const file = hooksFile(env);
@@ -404,7 +962,7 @@ var antigravity = {
     const e = entry(cmd);
     if (JSON.stringify(hooks[HOOK_NAME]) === JSON.stringify(e)) return [{ file, changed: false }];
     hooks[HOOK_NAME] = e;
-    mkdirSync2(path4.dirname(file), { recursive: true });
+    mkdirSync2(path6.dirname(file), { recursive: true });
     writeFileSync2(file, formatJson(hooks, f));
     return [
       {
@@ -445,7 +1003,8 @@ var antigravity = {
     const event = input.argv[1] ?? "";
     let s = {};
     try {
-      s = input.stdin ? JSON.parse(input.stdin) : {};
+      const j = input.stdin ? JSON.parse(input.stdin) : {};
+      if (j && typeof j === "object" && !Array.isArray(j)) s = j;
     } catch {
     }
     const id = s.conversationId ?? s.session_id ?? s.sessionId;
@@ -501,39 +1060,36 @@ var antigravity = {
     }
     return readAntigravity(text.split("\n"), fromLine);
   },
-  facts(session, transcript, hints, state) {
+  facts(session, transcript, hints) {
     if (!transcript) return {};
     return antigravityFacts(transcript, {
       conversation: session.id,
       workspaces: hints.workspaces ?? (session.cwd ? [session.cwd] : []),
-      state,
       env: process.env
     });
   },
   backfill(sinceMs, env = process.env) {
-    const rows = [];
-    const noState = { get: () => ({}), save: () => {
-    } };
+    const rows2 = [];
     for (const data of dataDirs(env)) {
       let ids = [];
       try {
-        ids = readdirSync2(path4.join(data, "brain")).filter((n) => /^[0-9a-f-]{36}$/i.test(n));
+        ids = readdirSync2(path6.join(data, "brain")).filter((n) => /^[0-9a-f-]{36}$/i.test(n));
       } catch {
       }
       for (const id of ids) {
-        const f = path4.join(data, "brain", id, ".system_generated", "logs", "transcript.jsonl");
+        const f = path6.join(data, "brain", id, ".system_generated", "logs", "transcript.jsonl");
         try {
-          if (statSync2(f).mtimeMs < sinceMs) continue;
+          if (statSync3(f).mtimeMs < sinceMs) continue;
         } catch {
           continue;
         }
-        const facts = antigravityFacts(f, { conversation: id, workspaces: [], state: noState, env });
+        const facts = antigravityFacts(f, { conversation: id, workspaces: [], env });
         if (!facts.started_at || !facts.last_at) continue;
         const { started_at, last_at, first_ask: _fa, harness_version: _hv, ...rest } = facts;
-        rows.push({ session: { id, ...rest }, started_at, last_at });
+        rows2.push({ session: { id, ...rest }, started_at, last_at });
       }
     }
-    return rows;
+    return rows2;
   }
 };
 function prune(o) {
@@ -551,8 +1107,8 @@ function agPath(p) {
     }
     if (process.platform === "win32" && /^\/[A-Za-z]:/.test(s)) s = s.slice(1);
   } else if (/^[a-z][a-z0-9+.-]*:\/\//i.test(s)) return null;
-  if (!path4.isAbsolute(s)) return null;
-  return path4.resolve(s);
+  if (!path6.isAbsolute(s)) return null;
+  return path6.resolve(s);
 }
 var agWorkspaces = (paths) => (Array.isArray(paths) ? paths : []).map(agPath).filter((p) => !!p).filter((p, i, a) => a.indexOf(p) === i);
 function agVariants(p) {
@@ -577,13 +1133,13 @@ function agProjects(dir) {
     if (!ID_RE.test(id)) continue;
     let j;
     try {
-      j = JSON.parse(readFileSync2(path4.join(dir, n), "utf8"));
+      j = JSON.parse(readFileSync2(path6.join(dir, n), "utf8"));
     } catch {
       continue;
     }
     const folders = [];
     for (const r of j?.projectResources?.resources ?? []) {
-      const f = agPath(r?.folderUri);
+      const f = agPath(r?.folderUri ?? r?.gitFolder?.folderUri);
       if (f) folders.push(...agVariants(f));
     }
     if (folders.length) out.push({ id, folders });
@@ -600,7 +1156,7 @@ function agMatchProject(projects, workspaces) {
   let bestLen = -1;
   for (const pr of projects)
     for (const f of pr.folders) {
-      const within = ws.some((w) => w === f || w.startsWith(f.endsWith(path4.sep) ? f : f + path4.sep));
+      const within = ws.some((w) => w === f || w.startsWith(f.endsWith(path6.sep) ? f : f + path6.sep));
       if (within && f.length > bestLen) {
         best = pr.id;
         bestLen = f.length;
@@ -609,12 +1165,12 @@ function agMatchProject(projects, workspaces) {
   return best;
 }
 function antigravityRemoteUrl(transcript, opts) {
-  const i = transcript.indexOf(`${path4.sep}brain${path4.sep}`);
+  const i = transcript.indexOf(`${path6.sep}brain${path6.sep}`);
   const dirs = (i > 0 ? [transcript.slice(0, i)] : []).concat(dataDirs(opts.env));
   for (const d of dirs) {
     try {
       const m = /installation_uuid:\s*"([0-9a-f-]{36})"/i.exec(
-        readFileSync2(path4.join(d, "antigravity_state.pbtxt"), "utf8")
+        readFileSync2(path6.join(d, "antigravity_state.pbtxt"), "utf8")
       );
       if (!m) continue;
       const base = `https://antigravity.google.com/r/${m[1]}-v2`;
@@ -637,7 +1193,7 @@ function antigravityFacts(file, opts) {
   for (const j of H) {
     if (j.type !== "USER_INPUT" || typeof j.content !== "string") continue;
     const m = /<USER_REQUEST>([\s\S]*?)(?:<\/USER_REQUEST>|$)/.exec(j.content);
-    const text = (m ? m[1] ?? "" : j.content).trim();
+    const text = (m ? m[1] : j.content).trim();
     const line = (text.split("\n").find((l) => l.trim()) ?? "").trim();
     if (!line || /^<[a-z_-]+>/i.test(line)) continue;
     out.title = line.length > 80 ? `${line.slice(0, 80).replace(/\s+\S*$/, "")}\u2026` : line;
@@ -661,167 +1217,28 @@ __export(antigravity_control_exports, {
   agyError: () => agyError,
   agyLine: () => agyLine,
   agyModeFlags: () => agyModeFlags,
+  defaultLevel: () => defaultLevel,
   findAgy: () => findAgy,
+  offeredLevels: () => offeredLevels,
   reading: () => reading
 });
-import os2 from "node:os";
-import path6 from "node:path";
-
-// src/adapters/headless.ts
-import { spawn } from "node:child_process";
-import { accessSync, constants, statSync as statSync3 } from "node:fs";
-import path5 from "node:path";
-var JOB_TIMEOUT_MS = 30 * 6e4;
-var OUT_CAP = 1024 * 1024;
-function isExe(p) {
-  try {
-    if (!statSync3(p).isFile()) return false;
-    accessSync(p, constants.X_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function findBinary(o) {
-  if (o.override && isExe(o.override)) return o.override;
-  for (const d of String(o.env?.PATH || "").split(path5.delimiter)) {
-    if (!d || !path5.isAbsolute(d)) continue;
-    for (const n of o.names) if (isExe(path5.join(d, n))) return path5.join(d, n);
-  }
-  for (const d of o.dirs) for (const n of o.names) if (isExe(path5.join(d, n))) return path5.join(d, n);
-  return null;
-}
-function jobEnv(env = process.env) {
-  return { ...env, SESSIONPIPE_CONTROL_JOB: "1" };
-}
-function runHeadless(bin, args, o) {
-  return new Promise((resolve) => {
-    let out = [];
-    let outLen = 0;
-    let tooBig = false;
-    let errTail = "";
-    let timedOut = false;
-    let settled = false;
-    let child;
-    try {
-      child = spawn(bin, args, {
-        cwd: o.cwd,
-        env: o.env,
-        stdio: ["ignore", "pipe", "pipe"],
-        detached: process.platform !== "win32",
-        windowsHide: true
-      });
-    } catch (e) {
-      resolve({ error: e.message });
-      return;
-    }
-    const kill = (sig) => {
-      try {
-        if (process.platform !== "win32" && child.pid) process.kill(-child.pid, sig);
-        else child.kill(sig);
-      } catch {
-        try {
-          child.kill(sig);
-        } catch {
-        }
-      }
-    };
-    const keep = (line) => {
-      if (!o.keep?.(line)) return;
-      out = [Buffer.from(line)];
-      outLen = line.length;
-    };
-    let partial = "";
-    child.stdout?.on("data", (b) => {
-      if (o.onLine) {
-        const chunk = partial + b.toString("utf8");
-        const lines = chunk.split("\n");
-        partial = lines.pop() ?? "";
-        for (const line of lines) {
-          if (!line.trim()) continue;
-          try {
-            o.onLine(line);
-          } catch {
-          }
-          keep(line);
-        }
-        if (partial.length > OUT_CAP) partial = "";
-        return;
-      }
-      if (tooBig) return;
-      if (outLen + b.length > OUT_CAP) {
-        tooBig = true;
-        out = [];
-        return;
-      }
-      out.push(b);
-      outLen += b.length;
-    });
-    child.stderr?.on("data", (b) => {
-      errTail = (errTail + b.toString("utf8")).slice(-4e3);
-    });
-    const timer = setTimeout(() => {
-      timedOut = true;
-      kill("SIGTERM");
-      setTimeout(() => kill("SIGKILL"), 1e4).unref();
-    }, o.timeoutMs ?? JOB_TIMEOUT_MS);
-    const result = (code, signal) => ({
-      code,
-      signal,
-      stdout: tooBig ? null : Buffer.concat(out).toString("utf8"),
-      tooBig,
-      stderr: errTail,
-      timedOut
-    });
-    const finish = (r) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      resolve(r);
-    };
-    child.on("error", (e) => finish({ error: e.message }));
-    child.on("exit", (code, signal) => setTimeout(() => finish(result(code, signal)), 2e3).unref());
-    child.on("close", (code, signal) => {
-      if (o.onLine && partial.trim()) {
-        try {
-          o.onLine(partial);
-        } catch {
-        }
-        keep(partial);
-        partial = "";
-      }
-      finish(result(code, signal));
-    });
-  });
-}
-function stderrTail(stderr, n = 3) {
-  return String(stderr || "").trim().split("\n").slice(-n).join(" ").trim();
-}
-function deniedNote(names, count) {
-  if (!count) return "";
-  return `
-
-(Not allowed on this machine, since nobody was there to approve: ${names.join(", ") || `${count} action(s)`}.)`;
-}
-function runFailure(label, res) {
-  if (res.error) return `couldn't start ${label}: ${res.error}`;
-  if (res.timedOut) return `${label} was still working after 30 minutes, so it was stopped`;
-  return null;
-}
-
-// src/adapters/antigravity-control.ts
+import os3 from "node:os";
+import path7 from "node:path";
 var LABEL = "Antigravity";
-function findAgy(env = process.env, home = os2.homedir()) {
+function findAgy(env = process.env, home = os3.homedir()) {
   return findBinary({
     override: env.SESSIONPIPE_AGY,
     names: process.platform === "win32" ? ["agy.exe", "agy.cmd"] : ["agy"],
     env,
-    dirs: [path6.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
+    dirs: [path7.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   });
 }
-function agyModeFlags(mode) {
-  return mode === "auto" ? ["--mode", "accept-edits"] : [];
+function agyModeFlags(level) {
+  if (level === "read") throw new Error("Antigravity has no read-only mode");
+  return level === "safe" || level === "inherit" ? [] : ["--mode", "accept-edits"];
 }
+var offeredLevels = (mode) => mode === "auto" ? ["safe", "edits"] : ["safe"];
+var defaultLevel = (mode) => mode === "auto" ? "edits" : mode;
 function agyArgs(o) {
   const prompt = o.prompt.startsWith("-") ? ` ${o.prompt}` : o.prompt;
   return [
@@ -830,7 +1247,7 @@ function agyArgs(o) {
     prompt,
     "--output-format",
     "stream-json",
-    ...agyModeFlags(o.mode)
+    ...agyModeFlags(o.permission)
   ];
 }
 var agyEnv = (env = process.env) => jobEnv(env);
@@ -842,26 +1259,26 @@ function agyLine(line) {
     return null;
   }
   if (!j || typeof j !== "object") return null;
-  const str = (v) => typeof v === "string" ? v : "";
+  const str2 = (v) => typeof v === "string" ? v : "";
   const out = {};
   if (j.event === "init") {
-    if (str(j.conversation_id)) out.session = str(j.conversation_id);
+    if (str2(j.conversation_id)) out.session = str2(j.conversation_id);
   } else if (j.event === "step_update") {
     const s = j.step_update ?? {};
-    if (str(s.conversation_id)) out.session = str(s.conversation_id);
-    if (s.step_type === "agent_response" && str(s.text_delta))
-      out.delta = { step: Number(s.step_index ?? 0), text: str(s.text_delta) };
+    if (str2(s.conversation_id)) out.session = str2(s.conversation_id);
+    if (s.step_type === "agent_response" && str2(s.text_delta))
+      out.delta = { step: Number(s.step_index ?? 0), text: str2(s.text_delta) };
     if (s.step_type === "error_message") {
-      const why = str(s.text_delta) || str(s.error) || str(s.message);
+      const why = str2(s.text_delta) || str2(s.error) || str2(s.message);
       if (why) out.note = why;
     }
   } else if (j.event === "result") {
     const r = j.result ?? {};
-    if (str(r.conversation_id)) out.session = str(r.conversation_id);
+    if (str2(r.conversation_id)) out.session = str2(r.conversation_id);
     out.result = {
-      status: str(r.status),
-      response: str(r.response),
-      error: str(r.error),
+      status: str2(r.status),
+      response: str2(r.response),
+      error: str2(r.error),
       denied: Array.isArray(r.denied_actions) ? r.denied_actions : []
     };
   } else return null;
@@ -885,7 +1302,7 @@ function agyError(stderr) {
     for (const k of ["message", "error", "detail"]) if (typeof j[k] === "string" && j[k]) return j[k];
   } catch {
   }
-  return raw.split("\n")[0]?.slice(0, 300) ?? "";
+  return raw.split("\n")[0].slice(0, 300);
 }
 var AgyReading = class {
   session = null;
@@ -933,7 +1350,7 @@ var reading = () => new AgyReading();
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash } from "node:crypto";
 import { existsSync as existsSync3, readdirSync as readdirSync3, readFileSync as readFileSync3, statSync as statSync4 } from "node:fs";
-import path7 from "node:path";
+import path8 from "node:path";
 
 // src/readers/git.ts
 import { execFileSync } from "node:child_process";
@@ -962,10 +1379,9 @@ function gitFacts(cwd) {
   return out;
 }
 function stripCredentials(url) {
-  let u = url.replace(/\/\/[^/@]*@/, "//");
-  const ssh = /^(?:ssh:\/\/)?git@([^:/]+)[:/](.+?)(?:\.git)?$/.exec(u);
-  if (ssh) u = `${ssh[1]}/${ssh[2]}`;
-  return u.replace(/^https?:\/\//, "").replace(/\.git$/, "");
+  const ssh = /^(?:ssh:\/\/)?git@([^:/]+)[:/](.+?)(?:\.git)?$/.exec(url);
+  if (ssh) return `${ssh[1]}/${ssh[2]}`;
+  return url.replace(/\/\/[^/@]*@/, "//").replace(/^https?:\/\//, "").replace(/\.git$/, "");
 }
 
 // src/adapters/claude-code.ts
@@ -996,27 +1412,27 @@ var OPTS = {
   timeoutFor: (e) => e === "PermissionRequest" ? 130 : void 0
 };
 var DESKTOP_ID = /^local_[A-Za-z0-9-]{1,64}$/;
-function claudeDirs(env = process.env, home = env.HOME || HOME) {
+function claudeDirs(env = process.env, home = env.HOME || homeDir()) {
   const out = [];
   const add = (d) => {
     if (!d) return;
-    const r = path7.resolve(d);
+    const r = path8.resolve(d);
     if (!out.includes(r)) out.push(r);
   };
-  add(path7.join(home, ".claude"));
+  add(path8.join(home, ".claude"));
   add(env.CLAUDE_CONFIG_DIR);
   try {
     for (const e of readdirSync3(home, { withFileTypes: true })) {
       if (!e.isDirectory() || !/^\.claude[-_.]/.test(e.name)) continue;
-      const d = path7.join(home, e.name);
-      if (existsSync3(path7.join(d, "projects")) || existsSync3(path7.join(d, "settings.json"))) add(d);
+      const d = path8.join(home, e.name);
+      if (existsSync3(path8.join(d, "projects")) || existsSync3(path8.join(d, "settings.json"))) add(d);
     }
   } catch {
   }
   return out.filter((d, i) => i === 0 || existsSync3(d));
 }
-var settingsIn = (dir) => path7.join(dir, "settings.json");
-var configDirOf = (transcript) => path7.dirname(path7.dirname(path7.dirname(transcript)));
+var settingsIn = (dir) => path8.join(dir, "settings.json");
+var configDirOf = (transcript) => path8.dirname(path8.dirname(path8.dirname(transcript)));
 var validTool2 = (n) => typeof n === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(n);
 var endReason = (r) => r === "clear" || r === "logout" || r === "exit" ? r : r === "prompt_input_exit" ? "exit" : "other";
 var notifKind = (t) => t === "permission_prompt" ? "permission" : t === "idle_prompt" ? "idle" : t === "elicitation_dialog" ? "elicitation" : "question";
@@ -1037,11 +1453,13 @@ var claudeCode = {
     const event = input.argv[1] ?? "";
     let s = {};
     try {
-      s = input.stdin ? JSON.parse(input.stdin) : {};
+      const j = input.stdin ? JSON.parse(input.stdin) : {};
+      if (j && typeof j === "object" && !Array.isArray(j)) s = j;
     } catch {
     }
     const id = s.session_id ?? s.sessionId;
     if (!id) return null;
+    if (notClaudeCode(String(id), s)) return null;
     const session = { id: String(id), cwd: typeof s.cwd === "string" ? s.cwd : input.cwd };
     if (typeof s.model === "string") session.model = s.model;
     if (typeof s.agent_id === "string" && event.startsWith("Subagent") === false && s.agent_id)
@@ -1058,14 +1476,28 @@ var claudeCode = {
       case "SessionStart":
         events.push(ev("session.started", { source: pickSource(s.source ?? s.trigger) }));
         break;
-      case "UserPromptSubmit":
+      case "UserPromptSubmit": {
+        const prompt = typeof s.prompt === "string" ? s.prompt : void 0;
         events.push(
           ev("turn.started", {
             turn_id,
-            prompt_chars: typeof s.prompt === "string" ? [...s.prompt].length : void 0
+            prompt_chars: prompt === void 0 ? void 0 : [...prompt].length,
+            // Claude Code's hook schema documents `source`
+            // (user | sdk | system | loop_wakeup | schedule_wakeup | poll_event) and says a
+            // payload may omit it while the field rolls out; 2.1.304's payload has no such
+            // key at all. Forwarded verbatim, shape-guarded only: the list is the harness's
+            // to extend.
+            submitted_by: harnessWord(s.source),
+            // One of Claude Code's own prompt wrappers: the prompt is a block the harness
+            // wrote, so it is not the person's words. Absent is unknown, never "the person" —
+            // and `true` is never "no person caused this turn", because a Talk or
+            // `sessionpipe wait` delivery hands the person's own message over inside a
+            // <task-notification> (PROTOCOL.md §4).
+            injected: prompt !== void 0 && injectedBlock(prompt) ? true : void 0
           })
         );
         break;
+      }
       case "PreToolUse":
         if (tool) events.push(ev("tool.started", { tool, call_id, turn_id, agent_id, input: s.tool_input }));
         break;
@@ -1120,7 +1552,13 @@ var claudeCode = {
         );
         break;
       case "Stop":
-        events.push(ev("turn.ended", { turn_id, reason: "stop" }));
+        events.push(
+          ev("turn.ended", {
+            turn_id,
+            reason: "stop",
+            background: Array.isArray(s.background_tasks) ? s.background_tasks.length : void 0
+          })
+        );
         break;
       case "StopFailure":
         events.push(
@@ -1160,8 +1598,11 @@ var claudeCode = {
         return null;
     }
     const hints = {};
+    if (event === "UserPromptSubmit" && typeof s.prompt === "string") hints.prompt = s.prompt;
     const host = input.env.CLAUDE_CODE_HOST_SESSION_ID;
     if (host && DESKTOP_ID.test(host)) hints.desktop_id = host;
+    const attended = input.env.CLAUDE_CODE_SESSION_ATTENDED;
+    if (attended === "1" || attended === "0") hints.attended = attended === "1" || !!input.env.SESSIONPIPE_CONTROL_JOB;
     if (event !== "PreToolUse" && event !== "PostToolUse") hints.claude_pid = claudePid(input.env);
     const r = { session, events, hints };
     if (typeof s.transcript_path === "string") r.transcript = s.transcript_path;
@@ -1182,37 +1623,45 @@ var claudeCode = {
     const cwd = out.cwd ?? session.cwd;
     Object.assign(out, gitFacts(cwd), out.branch ? { branch: out.branch } : {});
     if (!out.url && typeof hints.desktop_id === "string") out.url = `claude://code/continue/${hints.desktop_id}`;
+    if (typeof hints.attended === "boolean") out.attended = hints.attended || !!out.url;
     return out;
   },
   backfill(sinceMs, env = process.env) {
-    const rows = [];
+    const rows2 = [];
     const files = [];
     for (const d of claudeDirs(env))
-      files.push(...recentFiles(path7.join(d, "projects"), 1, sinceMs, (n) => /^[0-9a-f-]{36}\.jsonl$/.test(n)));
+      files.push(...recentFiles(path8.join(d, "projects"), 1, sinceMs, (n) => /^[0-9a-f-]{36}\.jsonl$/.test(n)));
     const noState = { get: () => ({}), save: () => {
     } };
     for (const f of files) {
-      const id = path7.basename(f, ".jsonl");
+      const id = path8.basename(f, ".jsonl");
       const facts = claudeFacts(f, id, {}, noState);
       if (!facts.started_at || !facts.last_at) continue;
       const { started_at, last_at, first_ask: _fa, harness_version: _hv, ...rest } = facts;
       const cwd = rest.cwd;
-      rows.push({
+      rows2.push({
         session: { id, ...rest, ...gitFacts(cwd), ...rest.branch ? { branch: rest.branch } : {} },
         started_at,
         last_at
       });
     }
-    return rows;
+    return rows2;
   }
 };
 function prune2(o) {
   for (const k of Object.keys(o)) if (o[k] === void 0) delete o[k];
   return o;
 }
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function notClaudeCode(id, s) {
+  return typeof s.transcript_path !== "string" && !UUID.test(id);
+}
 function pickSource(v) {
   return typeof v === "string" && ["startup", "resume", "clear", "compact", "fork"].includes(v) ? v : "unknown";
 }
+var harnessWord = (v) => typeof v === "string" && /^[A-Za-z0-9][A-Za-z0-9_.-]{0,39}$/.test(v) ? v : void 0;
+var WRAPPER = /^<(?:task-notification|cross-session-message|system-reminder|local-command-stdout|command-[a-z-]+)[\s/>]/i;
+var injectedBlock = (prompt) => WRAPPER.test(prompt.trim());
 function errText(v) {
   if (typeof v === "string") return v.slice(0, 2e3);
   if (v && typeof v === "object") {
@@ -1252,12 +1701,12 @@ function claudeLive(dir) {
   const map = /* @__PURE__ */ new Map();
   let names = [];
   try {
-    names = readdirSync3(path7.join(dir, "sessions")).filter((n) => n.endsWith(".json"));
+    names = readdirSync3(path8.join(dir, "sessions")).filter((n) => n.endsWith(".json"));
   } catch {
   }
   for (const n of names) {
     try {
-      const e = registryEntry(JSON.parse(readFileSync3(path7.join(dir, "sessions", n), "utf8")));
+      const e = registryEntry(JSON.parse(readFileSync3(path8.join(dir, "sessions", n), "utf8")));
       if (e?.sessionId) map.set(e.sessionId, e);
     } catch {
     }
@@ -1268,7 +1717,7 @@ function claudeLive(dir) {
 function claudeLiveByPid(dir, pid) {
   if (!pid) return null;
   try {
-    return registryEntry(JSON.parse(readFileSync3(path7.join(dir, "sessions", `${pid}.json`), "utf8")));
+    return registryEntry(JSON.parse(readFileSync3(path8.join(dir, "sessions", `${pid}.json`), "utf8")));
   } catch {
     return null;
   }
@@ -1276,7 +1725,7 @@ function claudeLiveByPid(dir, pid) {
 function claudePid(env = process.env) {
   try {
     const dirs = claudeDirs(env);
-    const has = (pid2) => dirs.some((d) => existsSync3(path7.join(d, "sessions", `${pid2}.json`)));
+    const has = (pid2) => dirs.some((d) => existsSync3(path8.join(d, "sessions", `${pid2}.json`)));
     let pid = process.ppid;
     if (has(pid)) return pid;
     const parent = parentOf();
@@ -1315,26 +1764,61 @@ function parentOf() {
   }
   return (pid) => table.get(pid) || 0;
 }
-var accountCache = /* @__PURE__ */ new Map();
-function claudeAccount(dir) {
-  const hit = accountCache.get(dir);
-  if (hit !== void 0) return hit;
-  const files = [path7.join(dir, ".claude.json")];
-  if (path7.resolve(dir) === path7.join(HOME, ".claude")) files.unshift(path7.join(HOME, ".claude.json"));
-  let acct = null;
+var EMAIL_RE = /^[^@\s]{1,64}@[^@\s]{1,189}$/;
+function claudeLogin(dir, home = homeDir()) {
+  const files = [path8.join(dir, ".claude.json")];
+  if (path8.resolve(dir) === path8.join(home, ".claude")) files.unshift(path8.join(home, ".claude.json"));
   for (const f of files) {
     try {
       const a = JSON.parse(readFileSync3(f, "utf8")).oauthAccount;
-      if (a?.accountUuid) {
-        acct = String(a.accountUuid);
-        break;
+      if (typeof a?.accountUuid === "string" && a.accountUuid) {
+        const email = typeof a.emailAddress === "string" && EMAIL_RE.test(a.emailAddress) ? a.emailAddress : void 0;
+        return { id: a.accountUuid.slice(0, 128), ...email ? { email } : {} };
       }
     } catch {
     }
   }
+  return apiAccount(dir);
+}
+var ANTHROPIC_HOST = /(^|\.)anthropic\.com$/i;
+function apiAccount(dir) {
+  let base;
+  try {
+    base = JSON.parse(readFileSync3(settingsIn(dir), "utf8")).env?.ANTHROPIC_BASE_URL;
+  } catch {
+    return null;
+  }
+  if (typeof base !== "string") return null;
+  let u;
+  try {
+    u = new URL(base.trim());
+  } catch {
+    return null;
+  }
+  if (u.protocol !== "https:" && u.protocol !== "http:" || !u.hostname || ANTHROPIC_HOST.test(u.hostname))
+    return null;
+  const origin = `${u.protocol}//${u.host}`;
+  return { id: `api-${createHash("sha256").update(origin).digest("hex").slice(0, 16)}`, name: u.host };
+}
+var accountCache = /* @__PURE__ */ new Map();
+function claudeAccount(dir) {
+  const hit = accountCache.get(dir);
+  if (hit !== void 0) return hit;
+  const acct = claudeLogin(dir)?.id ?? null;
   accountCache.set(dir, acct);
   return acct;
 }
+function claudeAccounts(dirs, home = homeDir()) {
+  const out = [];
+  for (const d of dirs) {
+    const l = claudeLogin(d, home);
+    if (!l) continue;
+    const seen = out.find((a) => a.id === l.id);
+    if (!seen) out.push({ harness: NAME2, ...l });
+    else if (!seen.email && l.email) seen.email = l.email;
+  }
+  return out;
+}
 var LINK_RE = /^https:\/\/claude\.ai\/code\/session_[A-Za-z0-9]+$/;
 function transcriptLink(records) {
   for (let i = records.length - 1; i >= 0; i--) {
@@ -1405,7 +1889,7 @@ function claudeFacts(file, sessionId, hints, state) {
   const H = parseLines(head);
   const T = parseLines(tail);
   const out = {};
-  const id = sessionId || path7.basename(file, ".jsonl");
+  const id = sessionId || path8.basename(file, ".jsonl");
   const mem = state.get(NAME2, id);
   let custom = null;
   let ai = null;
@@ -1489,8 +1973,12 @@ function claudeFacts(file, sessionId, hints, state) {
 var claude_code_control_exports = {};
 __export(claude_code_control_exports, {
   JOB_TIMEOUT_MS: () => JOB_TIMEOUT_MS,
+  ceilingLevel: () => ceilingLevel,
+  claudeArgs: () => claudeArgs,
   claudeEnv: () => claudeEnv,
-  claudeLogin: () => claudeLogin,
+  claudeLogin: () => claudeLogin2,
+  cmpVersion: () => cmpVersion,
+  defaultLevel: () => defaultLevel2,
   detectCaps: () => detectCaps,
   findClaude: () => findClaude,
   findTranscript: () => findTranscript,
@@ -1499,6 +1987,8 @@ __export(claude_code_control_exports, {
   loginCommand: () => loginCommand,
   loginHint: () => loginHint,
   modeFlags: () => modeFlags,
+  offeredLevels: () => offeredLevels2,
+  outputArgs: () => outputArgs,
   parseAuthStatus: () => parseAuthStatus,
   parseCaps: () => parseCaps,
   parseResult: () => parseResult,
@@ -1508,8 +1998,22 @@ __export(claude_code_control_exports, {
 });
 import { execFile, execFileSync as execFileSync3 } from "node:child_process";
 import { closeSync as closeSync2, openSync as openSync2, readdirSync as readdirSync4, readFileSync as readFileSync4, readSync as readSync2, statSync as statSync5 } from "node:fs";
-import os3 from "node:os";
-import path8 from "node:path";
+import os4 from "node:os";
+import path9 from "node:path";
+
+// src/control/verify.ts
+var GRANT_MAX_MS = 24 * 36e5;
+var SKEW_MS = 5 * 6e4;
+var MACHINE_MAX_AGE_MS = 24 * 36e5;
+var RECEIVER_MAX_AGE_MS = 10 * 6e4;
+var NONCE_TTL_MS = 25 * 36e5;
+var MODEL_RE = /^[A-Za-z0-9][A-Za-z0-9._:/@[\]-]*$/;
+var START_PERMISSIONS = ["read", "safe", "edits", "auto"];
+var levelRank = (l) => START_PERMISSIONS.indexOf(l);
+var enc = new TextEncoder();
+var dec = new TextDecoder();
+
+// src/adapters/claude-code-control.ts
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var LIVE_WRITE_MS = 9e4;
 var cmpVersion = (a, b) => {
@@ -1519,28 +2023,28 @@ var cmpVersion = (a, b) => {
     if ((pa[i] ?? 0) !== (pb[i] ?? 0)) return (pa[i] ?? 0) - (pb[i] ?? 0);
   return 0;
 };
-function findClaude(env = process.env, home = os3.homedir()) {
+function findClaude(env = process.env, home = os4.homedir()) {
   if (env.SESSIONPIPE_CLAUDE && isExe(env.SESSIONPIPE_CLAUDE)) return env.SESSIONPIPE_CLAUDE;
   const names = process.platform === "win32" ? ["claude.exe", "claude.cmd"] : ["claude"];
-  for (const d of String(env.PATH || "").split(path8.delimiter)) {
-    if (!d || !path8.isAbsolute(d)) continue;
-    for (const n of names) if (isExe(path8.join(d, n))) return path8.join(d, n);
+  for (const d of String(env.PATH || "").split(path9.delimiter)) {
+    if (!d || !path9.isAbsolute(d)) continue;
+    for (const n of names) if (isExe(path9.join(d, n))) return path9.join(d, n);
   }
   for (const p of [
-    path8.join(home, ".claude", "local", "claude"),
-    path8.join(home, ".local", "bin", "claude"),
+    path9.join(home, ".claude", "local", "claude"),
+    path9.join(home, ".local", "bin", "claude"),
     "/opt/homebrew/bin/claude",
     "/usr/local/bin/claude"
   ])
     if (isExe(p)) return p;
-  const app = path8.join(home, "Library", "Application Support", "Claude", "claude-code");
+  const app = path9.join(home, "Library", "Application Support", "Claude", "claude-code");
   let versions = [];
   try {
     versions = readdirSync4(app).filter((n) => /^\d+(\.\d+)*$/.test(n)).sort(cmpVersion).reverse();
   } catch {
   }
   for (const v of versions) {
-    const p = path8.join(app, v, "claude.app", "Contents", "MacOS", "claude");
+    const p = path9.join(app, v, "claude.app", "Contents", "MacOS", "claude");
     if (isExe(p)) return p;
   }
   return null;
@@ -1566,11 +2070,19 @@ function parseCaps(help) {
     stream: !!optionBlock(help, "--include-partial-messages")
   };
 }
-function modeFlags(mode, caps) {
-  if (mode === "auto") {
-    if (!caps.modes.includes("auto"))
-      return { error: "this machine is in auto mode, but its Claude Code has no auto permission mode" };
-    return { args: ["--permission-mode", "auto"] };
+var LEVEL_MODE = {
+  read: "plan",
+  edits: "acceptEdits",
+  auto: "auto"
+};
+function modeFlags(level, caps) {
+  if (level === "inherit") return { args: [] };
+  if (level === "auto" && !caps.modes.includes("auto"))
+    return { error: "this machine is in auto mode, but its Claude Code has no auto permission mode" };
+  if (level !== "safe") {
+    const m = LEVEL_MODE[level];
+    if (!caps.modes.includes(m)) return { error: `this machine's Claude Code has no ${m} permission mode` };
+    return { args: ["--permission-mode", m] };
   }
   if (caps.modes.includes("dontAsk")) return { args: ["--permission-mode", "dontAsk"] };
   const args = [];
@@ -1582,6 +2094,32 @@ function modeFlags(mode, caps) {
   if (caps.promptsNone) args.push("--permission-prompts", "none");
   return { args };
 }
+var ceilingLevel = (mode) => mode === "inherit" ? "safe" : mode;
+function offeredLevels2(mode, caps) {
+  return START_PERMISSIONS.filter(
+    (l) => levelRank(l) <= levelRank(ceilingLevel(mode)) && (l === "safe" || caps.modes.includes(LEVEL_MODE[l]))
+  );
+}
+var defaultLevel2 = (mode) => mode;
+function outputArgs(caps) {
+  return caps.stream ? ["--output-format", "stream-json", "--verbose", "--include-partial-messages"] : ["--output-format", "json"];
+}
+function claudeArgs(o) {
+  const mf = modeFlags(o.level, o.caps);
+  if ("error" in mf) return mf;
+  const where = o.resume ? ["--resume", o.resume, ...o.fork ? ["--fork-session"] : []] : ["--session-id", o.session];
+  return {
+    args: [
+      "-p",
+      ...outputArgs(o.caps),
+      ...mf.args,
+      ...o.model ? ["--model", o.model] : [],
+      ...o.allowedTools?.length ? [`--allowedTools=${o.allowedTools.join(",")}`] : [],
+      ...where,
+      o.prompt.startsWith("-") ? ` ${o.prompt}` : o.prompt
+    ]
+  };
+}
 function claudeEnv(configDir, env = process.env) {
   const e = { ...env };
   for (const k of [
@@ -1595,7 +2133,7 @@ function claudeEnv(configDir, env = process.env) {
     delete e[k];
   e.SESSIONPIPE_CONTROL_JOB = "1";
   if (configDir !== void 0) {
-    if (path8.resolve(configDir) === path8.resolve(os3.homedir(), ".claude")) delete e.CLAUDE_CONFIG_DIR;
+    if (path9.resolve(configDir) === path9.resolve(os4.homedir(), ".claude")) delete e.CLAUDE_CONFIG_DIR;
     else e.CLAUDE_CONFIG_DIR = configDir;
   }
   return e;
@@ -1616,7 +2154,7 @@ function parseAuthStatus(stdout) {
     return { loggedIn: null };
   }
 }
-function claudeLogin(bin, configDir, env = process.env) {
+function claudeLogin2(bin, configDir, env = process.env) {
   return new Promise((resolve) => {
     execFile(
       bin,
@@ -1628,12 +2166,12 @@ function claudeLogin(bin, configDir, env = process.env) {
   });
 }
 function loginCommand(configDir) {
-  const home = os3.homedir();
-  const isDefault = !configDir || path8.resolve(configDir) === path8.resolve(home, ".claude");
+  const home = os4.homedir();
+  const isDefault = !configDir || path9.resolve(configDir) === path9.resolve(home, ".claude");
   return isDefault ? "`claude auth login`" : `\`CLAUDE_CONFIG_DIR=${configDir.replace(home, "~")} claude auth login\``;
 }
 function loginHint(configDir, platform = process.platform) {
-  const shown = configDir ? configDir.replace(os3.homedir(), "~") : "~/.claude";
+  const shown = configDir ? configDir.replace(os4.homedir(), "~") : "~/.claude";
   const login = loginCommand(configDir);
   if (platform === "darwin")
     return `Claude Code (${shown}) isn't signed in as this machine's background service sees it. On a Mac its login lives in the login keychain, which a background service can read only while someone is logged in at the screen: log in at the Mac, or run ${login} there.`;
@@ -1659,13 +2197,13 @@ function findTranscript(session, dirs) {
   for (const dir of dirs) {
     let projects = [];
     try {
-      projects = readdirSync4(path8.join(dir, "projects"), { withFileTypes: true });
+      projects = readdirSync4(path9.join(dir, "projects"), { withFileTypes: true });
     } catch {
       continue;
     }
     for (const p of projects) {
       if (!p.isDirectory()) continue;
-      const file = path8.join(dir, "projects", p.name, `${session}.jsonl`);
+      const file = path9.join(dir, "projects", p.name, `${session}.jsonl`);
       try {
         if (statSync5(file).isFile()) return { file, configDir: dir, project: p.name };
       } catch {
@@ -1687,7 +2225,7 @@ function sessionFolder(t, cap2 = 8 * 1024 * 1024) {
     } catch {
       return null;
     }
-    if (!j || typeof j.cwd !== "string" || !path8.isAbsolute(j.cwd)) return null;
+    if (!j || typeof j.cwd !== "string" || !path9.isAbsolute(j.cwd)) return null;
     if (projectName(j.cwd) === t.project) return j.cwd;
     first ??= j.cwd;
     count++;
@@ -1748,13 +2286,13 @@ function pidAlive(pid) {
 function liveProcess(session, configDir) {
   let names = [];
   try {
-    names = readdirSync4(path8.join(configDir, "sessions")).filter((n) => /^\d+\.json$/.test(n));
+    names = readdirSync4(path9.join(configDir, "sessions")).filter((n) => /^\d+\.json$/.test(n));
   } catch {
     return false;
   }
   for (const n of names) {
     try {
-      const j = JSON.parse(readFileSync4(path8.join(configDir, "sessions", n), "utf8"));
+      const j = JSON.parse(readFileSync4(path9.join(configDir, "sessions", n), "utf8"));
       if (String(j.sessionId) !== session) continue;
       if (pidAlive(Number(j.pid ?? n.slice(0, -5)))) return true;
     } catch {
@@ -1803,7 +2341,7 @@ var isUuid = (s) => typeof s === "string" && UUID_RE.test(s);
 
 // src/adapters/codex.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync5, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "node:fs";
-import path9 from "node:path";
+import path10 from "node:path";
 
 // src/adapters/codex-config.ts
 var NOTIFY_LINE = /^[ \t]*notify[ \t]*=[ \t]*(\[.*\])[ \t]*(?:#.*)?$/m;
@@ -1867,18 +2405,13 @@ function parseArgv(raw) {
 function readNotify(text) {
   const { head, tail, at } = split(text);
   const m = NOTIFY_LINE.exec(head);
-  if (m)
-    return {
-      raw: m[1] ?? "",
-      argv: parseArgv(m[1] ?? ""),
-      index: m.index,
-      length: m[0].length,
-      misplaced: false,
-      other: !OURS2.test(m[1] ?? "")
-    };
+  if (m) {
+    const raw = m[1];
+    return { raw, argv: parseArgv(raw), index: m.index, length: m[0].length, misplaced: false, other: !OURS2.test(raw) };
+  }
   const k = NOTIFY_KEY.exec(head);
   if (k) {
-    const rest = head.slice(k.index).split("\n")[0] ?? "";
+    const rest = head.slice(k.index).split("\n")[0];
     return {
       raw: rest.replace(NOTIFY_KEY, "").trim(),
       argv: null,
@@ -1889,15 +2422,11 @@ function readNotify(text) {
     };
   }
   const t = NOTIFY_LINE.exec(tail);
-  if (t && OURS2.test(t[1] ?? ""))
-    return {
-      raw: t[1] ?? "",
-      argv: parseArgv(t[1] ?? ""),
-      index: at + t.index,
-      length: t[0].length,
-      misplaced: true,
-      other: false
-    };
+  if (t) {
+    const raw = t[1];
+    if (OURS2.test(raw))
+      return { raw, argv: parseArgv(raw), index: at + t.index, length: t[0].length, misplaced: true, other: false };
+  }
   return null;
 }
 function dropLine(text, index, length) {
@@ -1916,9 +2445,7 @@ function withNotify(text, line) {
   if (n?.misplaced) return insertTopLevel(dropLine(text, n.index, n.length), line);
   return insertTopLevel(text, line);
 }
-function replaceNotify(text, line) {
-  const n = readNotify(text);
-  if (!n || n.misplaced || !n.length) return null;
+function replaceNotify(text, n, line) {
   return text.slice(0, n.index) + line + text.slice(n.index + n.length);
 }
 function withoutNotify(text) {
@@ -1959,10 +2486,10 @@ var CODEX_EVENTS = [
 ];
 var OPTS2 = { matcherFor: (e) => /Tool|Permission/.test(e) ? "" : void 0, timeout: 5 };
 var eventsFor2 = (lean) => lean ? CODEX_EVENTS.filter((e) => e !== "PreToolUse") : [...CODEX_EVENTS];
-var codexHome = (env) => env.CODEX_HOME || path9.join(HOME, ".codex");
-var hooksFile2 = (env) => path9.join(codexHome(env), "hooks.json");
-var configFile2 = (env) => path9.join(codexHome(env), "config.toml");
-var sessionsDir = (env) => path9.join(codexHome(env), "sessions");
+var codexHome = (env) => env.CODEX_HOME || path10.join(homeDir(), ".codex");
+var hooksFile2 = (env) => path10.join(codexHome(env), "hooks.json");
+var configFile2 = (env) => path10.join(codexHome(env), "config.toml");
+var sessionsDir = (env) => path10.join(codexHome(env), "sessions");
 var validTool3 = (n) => typeof n === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(n);
 var endReason2 = (r) => r === "clear" || r === "logout" || r === "exit" ? r : "other";
 function installNotify(cmd, env) {
@@ -1976,7 +2503,7 @@ function installNotify(cmd, env) {
   const line = `notify = ${JSON.stringify(argv)}`;
   const n = readNotify(text);
   const write = (next) => {
-    mkdirSync3(path9.dirname(file), { recursive: true });
+    mkdirSync3(path10.dirname(file), { recursive: true });
     writeFileSync3(file, next);
   };
   if (n && !n.other) {
@@ -1997,11 +2524,8 @@ function installNotify(cmd, env) {
           return { file, changed: false, note: "notify current (after Codex Computer Use)" };
       }
       if (!prev || OURS2.test(JSON.stringify(prev))) {
-        const next = replaceNotify(text, `notify = ${withPreviousRaw(n.raw, argv)}`);
-        if (next) {
-          write(next);
-          return { file, changed: true, note: "chained after Codex Computer Use (--previous-notify)" };
-        }
+        write(replaceNotify(text, n, `notify = ${withPreviousRaw(n.raw, argv)}`));
+        return { file, changed: true, note: "chained after Codex Computer Use (--previous-notify)" };
       }
     }
     return {
@@ -2030,8 +2554,7 @@ function uninstallNotify(env) {
   }
   const prev = previousNotify(n.argv);
   if (isComputerUse(n.argv) && prev && OURS2.test(JSON.stringify(prev))) {
-    const next = replaceNotify(text, `notify = ${stripPreviousRaw(n.raw)}`);
-    if (next) writeFileSync3(file, next);
+    writeFileSync3(file, replaceNotify(text, n, `notify = ${stripPreviousRaw(n.raw)}`));
     return { file, changed: true };
   }
   return { file, changed: false };
@@ -2047,7 +2570,7 @@ function findRollout(threadId, env = process.env) {
       return;
     }
     for (const n of names.sort().reverse()) {
-      const p = path9.join(dir, n);
+      const p = path10.join(dir, n);
       if (n.endsWith(`-${threadId}.jsonl`)) {
         best = p;
         return;
@@ -2061,6 +2584,13 @@ function findRollout(threadId, env = process.env) {
   walk(sessionsDir(env), 0);
   return best;
 }
+function rolloutMeta(file) {
+  return scanLines(file, (line) => parseLines([line])[0] ?? {});
+}
+function ofAnotherThread(file, id) {
+  const m = /-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl(?:\.zst)?$/i.exec(file);
+  return !!m?.[1] && m[1].toLowerCase() !== id.toLowerCase();
+}
 var codex = {
   name: NAME3,
   events: CODEX_EVENTS,
@@ -2103,11 +2633,14 @@ var codex = {
     if (event === "notify") {
       const raw = input.argv.find((a) => a.startsWith("{")) ?? input.stdin;
       try {
-        s = raw ? JSON.parse(raw) : {};
+        const j = raw ? JSON.parse(raw) : {};
+        if (j && typeof j === "object" && !Array.isArray(j)) s = j;
       } catch {
       }
       const id2 = s["thread-id"] ?? s.thread_id ?? s["session-id"] ?? s.session_id;
       if (!id2) return null;
+      const file = findRollout(String(id2), input.env);
+      if (!file || codexSubagent(rolloutMeta(file))) return null;
       const r2 = {
         session: { id: String(id2), cwd: typeof s.cwd === "string" ? s.cwd : input.cwd },
         events: [
@@ -2117,18 +2650,19 @@ var codex = {
             harnessEvent: "notify"
           }
         ],
-        hints: {}
+        hints: {},
+        transcript: file
       };
-      const file = findRollout(String(id2), input.env);
-      if (file) r2.transcript = file;
       return r2;
     }
     try {
-      s = input.stdin ? JSON.parse(input.stdin) : {};
+      const j = input.stdin ? JSON.parse(input.stdin) : {};
+      if (j && typeof j === "object" && !Array.isArray(j)) s = j;
     } catch {
     }
-    const id = s.session_id;
+    const id = s.session_id ?? s.thread_id ?? s.conversation_id ?? s["thread-id"] ?? s["session-id"];
     if (!id) return null;
+    if (s.transcript_path === null) return null;
     const session = { id: String(id), cwd: typeof s.cwd === "string" ? s.cwd : input.cwd };
     if (typeof s.model === "string") session.model = s.model;
     const turn_id = typeof s.turn_id === "string" ? s.turn_id : void 0;
@@ -2200,7 +2734,8 @@ var codex = {
         return null;
     }
     const r = { session, events, hints: {} };
-    if (typeof s.transcript_path === "string") r.transcript = s.transcript_path;
+    if (typeof s.transcript_path === "string" && !ofAnotherThread(s.transcript_path, String(id)))
+      r.transcript = s.transcript_path;
     return r;
   },
   readTranscript(file, fromLine) {
@@ -2218,16 +2753,17 @@ var codex = {
     return out;
   },
   backfill(sinceMs, env = process.env) {
-    const rows = [];
+    const rows2 = [];
     for (const f of recentFiles(sessionsDir(env), 3, sinceMs, (n) => /^rollout-.*\.jsonl$/.test(n))) {
-      const m = /([0-9a-f]{8}-[0-9a-f-]{27,})\.jsonl$/i.exec(path9.basename(f));
+      const m = /([0-9a-f]{8}-[0-9a-f-]{27,})\.jsonl$/i.exec(path10.basename(f));
       if (!m?.[1]) continue;
+      if (codexSubagent(rolloutMeta(f))) continue;
       const facts = codexFacts(f);
       if (!facts.started_at || !facts.last_at) continue;
       const { started_at, last_at, first_ask: _fa, harness_version: _hv, ...rest } = facts;
-      rows.push({ session: { id: m[1], ...rest }, started_at, last_at });
+      rows2.push({ session: { id: m[1], ...rest }, started_at, last_at });
     }
-    return rows;
+    return rows2;
   }
 };
 function prune3(o) {
@@ -2236,10 +2772,11 @@ function prune3(o) {
 }
 function codexFacts(file) {
   const { head, tail } = ends(file, 128 * 1024, 64 * 1024);
-  const H = parseLines(head);
-  const T = parseLines(tail);
+  let H = parseLines(head);
+  let T = parseLines(tail);
   const out = {};
   const meta = H.find((j) => j.type === "session_meta" && j.payload);
+  const boundary = codexReplayBoundary(meta);
   if (meta?.payload) {
     const p = meta.payload;
     if (p.cwd) out.cwd = p.cwd;
@@ -2247,6 +2784,13 @@ function codexFacts(file) {
     if (p.git?.branch) out.branch = p.git.branch;
     if (p.git?.repository_url) out.repo = String(p.git.repository_url).replace(/\/\/[^/@]*@/, "//");
   }
+  if (boundary) {
+    const h = H.findIndex(boundary);
+    const t = T.findIndex(boundary);
+    H = h < 0 ? [] : H.slice(h);
+    const found = h >= 0 || t >= 0 || scanLines(file, (line) => boundary(parseLines([line])[0] ?? null) ? true : null, Number.POSITIVE_INFINITY);
+    T = t >= 0 ? T.slice(t) : found ? T : [];
+  }
   const ctx = H.concat(T).reverse().find((j) => j.type === "turn_context" && j.payload?.model);
   if (ctx?.payload?.model) out.model = ctx.payload.model;
   for (const j of H) {
@@ -2254,12 +2798,12 @@ function codexFacts(file) {
     if (j.type !== "response_item" || !p || p.type !== "message" || p.role !== "user") continue;
     const text = (p.content ?? []).filter((b) => b && b.type === "input_text" && typeof b.text === "string").map((b) => b.text).join("\n").trim();
     if (!text || codexInjected(text)) continue;
-    const line = text.split("\n").find((l) => l.trim()) ?? "";
+    const line = text.split("\n")[0];
     out.title = line.length > 80 ? `${line.slice(0, 80).replace(/\s+\S*$/, "")}\u2026` : line;
     out.title_source = "first-ask";
     break;
   }
-  const times = H.concat(T).map((j) => Date.parse(String(j.timestamp ?? ""))).filter((n) => n > 0);
+  const times = (boundary && meta ? [meta, ...H, ...T] : H.concat(T)).map((j) => Date.parse(String(j.timestamp ?? ""))).filter((n) => n > 0);
   if (times.length) {
     out.started_at = Math.min(...times);
     out.last_at = Math.max(...times);
@@ -2278,38 +2822,71 @@ __export(codex_control_exports, {
   codexLine: () => codexLine,
   codexLogin: () => codexLogin,
   codexModeFlags: () => codexModeFlags,
+  codexModels: () => codexModels,
+  defaultLevel: () => defaultLevel3,
   findCodex: () => findCodex,
   findRollout: () => findRollout,
+  offeredLevels: () => offeredLevels3,
   reading: () => reading2
 });
 import { execFile as execFile2 } from "node:child_process";
-import os4 from "node:os";
-import path10 from "node:path";
+import { readFileSync as readFileSync6 } from "node:fs";
+import os5 from "node:os";
+import path11 from "node:path";
 var LABEL2 = "Codex";
-function findCodex(env = process.env, home = os4.homedir(), nodeDir = path10.dirname(process.execPath)) {
+function findCodex(env = process.env, home = os5.homedir(), nodeDir = path11.dirname(process.execPath)) {
   return findBinary({
     override: env.SESSIONPIPE_CODEX,
     names: process.platform === "win32" ? ["codex.exe", "codex.cmd"] : ["codex"],
     env,
-    dirs: [nodeDir, path10.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
+    dirs: [nodeDir, path11.join(home, ".local", "bin"), "/opt/homebrew/bin", "/usr/local/bin"]
   });
 }
-function codexModeFlags(mode, resume = false) {
+function codexModeFlags(level, resume = false) {
+  if (level === "inherit") return [];
+  const sandbox = level === "read" ? "read-only" : "workspace-write";
   if (resume)
-    return mode === "auto" ? [
+    return level === "auto" ? [
       "-c",
       'sandbox_mode="workspace-write"',
       "-c",
       'approval_policy="on-request"',
       "-c",
       'approvals_reviewer="auto_review"'
-    ] : ["-c", 'sandbox_mode="workspace-write"'];
-  return mode === "auto" ? ["--approve-for-me"] : ["-s", "workspace-write"];
+    ] : ["-c", `sandbox_mode="${sandbox}"`];
+  return level === "auto" ? ["--approve-for-me"] : ["-s", sandbox];
 }
+var offeredLevels3 = (mode) => mode === "auto" ? ["read", "safe", "auto"] : ["read", "safe"];
+var defaultLevel3 = (mode) => mode;
 function codexArgs(o) {
   const common = ["--json", "--skip-git-repo-check"];
-  if (o.resume) return ["exec", "resume", ...common, ...codexModeFlags(o.mode, true), "--", o.resume, o.prompt];
-  return ["exec", ...common, ...o.cwd ? ["-C", o.cwd] : [], ...codexModeFlags(o.mode), "--", o.prompt];
+  const model = o.model ? ["-m", o.model] : [];
+  if (o.resume)
+    return ["exec", "resume", ...common, ...codexModeFlags(o.permission, true), ...model, "--", o.resume, o.prompt];
+  return [
+    "exec",
+    ...common,
+    ...o.cwd ? ["-C", o.cwd] : [],
+    ...codexModeFlags(o.permission),
+    ...model,
+    "--",
+    o.prompt
+  ];
+}
+function codexModels(env = process.env, home = os5.homedir()) {
+  try {
+    const file = path11.join(env.CODEX_HOME || path11.join(home, ".codex"), "models_cache.json");
+    const j = JSON.parse(readFileSync6(file, "utf8"));
+    if (!Array.isArray(j.models)) return [];
+    const out = [];
+    for (const m of j.models)
+      if (m && m.visibility === "list" && typeof m.slug === "string" && MODEL_RE.test(m.slug) && m.slug.length <= 100) {
+        if (!out.includes(m.slug)) out.push(m.slug);
+      }
+    return out.slice(0, 50);
+  } catch {
+    return [];
+  }
 }
 var codexEnv = (env = process.env) => jobEnv(env);
 var LOGIN_HINT = "Codex isn't signed in on this machine: run `codex login --device-auth` there.";
@@ -2336,22 +2913,22 @@ function codexLine(line) {
     return null;
   }
   if (!j || typeof j !== "object") return null;
-  const str = (v) => typeof v === "string" ? v : "";
+  const str2 = (v) => typeof v === "string" ? v : "";
   switch (j.type) {
     case "thread.started":
-      return str(j.thread_id) ? { session: str(j.thread_id) } : null;
+      return str2(j.thread_id) ? { session: str2(j.thread_id) } : null;
     case "item.completed": {
       const it = j.item;
-      if (it?.type === "agent_message" && str(it.text)) return { message: str(it.text) };
-      if (it?.type === "error" && str(it.message)) return { warning: str(it.message) };
+      if (it?.type === "agent_message" && str2(it.text)) return { message: str2(it.text) };
+      if (it?.type === "error" && str2(it.message)) return { warning: str2(it.message) };
       return null;
     }
     case "turn.completed":
       return { done: true };
     case "turn.failed":
-      return { done: true, failed: str(j.error?.message) || "Codex reported an error" };
+      return { done: true, failed: str2(j.error?.message) || "Codex reported an error" };
     case "error":
-      return str(j.message) ? { note: str(j.message) } : null;
+      return str2(j.message) ? { note: str2(j.message) } : null;
     default:
       return null;
   }
@@ -2401,11 +2978,432 @@ function codexStderr(stderr) {
 }
 var reading2 = () => new CodexReading();
 
-// src/adapters/gemini-cli.ts
+// src/adapters/devin.ts
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync6, readlinkSync } from "node:fs";
+import path12 from "node:path";
+
+// src/readers/sqlite.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync6 } from "node:fs";
-import path11 from "node:path";
-var NAME4 = "gemini-cli";
+import { existsSync as existsSync5 } from "node:fs";
+import { createRequire } from "node:module";
+function quiet(fn) {
+  const original = process.emitWarning;
+  try {
+    process.emitWarning = ((warning, ...rest) => {
+      const kind = typeof rest[0] === "string" ? rest[0] : rest[0]?.type;
+      if (kind === "ExperimentalWarning" && /sqlite/i.test(String(warning))) return;
+      original.call(process, warning, ...rest);
+    });
+    return fn();
+  } finally {
+    process.emitWarning = original;
+  }
+}
+var ctorCache;
+function dbCtor() {
+  if (ctorCache !== void 0) return ctorCache;
+  ctorCache = null;
+  try {
+    const req = createRequire(import.meta.url);
+    const m = quiet(() => req("node:sqlite"));
+    if (typeof m?.DatabaseSync === "function") ctorCache = m.DatabaseSync;
+  } catch {
+  }
+  return ctorCache;
+}
+function plain(row) {
+  if (!row || typeof row !== "object") return null;
+  const out = {};
+  for (const [k, v] of Object.entries(row)) {
+    if (typeof v === "bigint") out[k] = Number(v);
+    else if (v instanceof Uint8Array) out[k] = null;
+    else out[k] = v;
+  }
+  return out;
+}
+var rows = (v) => {
+  if (!Array.isArray(v)) return null;
+  const out = [];
+  for (const r of v) {
+    const p = plain(r);
+    if (p) out.push(p);
+  }
+  return out;
+};
+function viaNode(file, sql, params, o) {
+  const C = dbCtor();
+  if (!C) return null;
+  let db;
+  try {
+    db = quiet(() => new C(file, { readOnly: true, timeout: o.timeoutMs }));
+  } catch {
+    return null;
+  }
+  try {
+    try {
+      db.exec(`PRAGMA busy_timeout = ${Math.round(o.timeoutMs)}`);
+    } catch {
+    }
+    return quiet(() => rows(db.prepare(sql).all(...params)));
+  } catch {
+    return null;
+  } finally {
+    try {
+      db.close();
+    } catch {
+    }
+  }
+}
+var CHILD = `const { DatabaseSync } = require("node:sqlite");
+const [, file, sql, params, ms] = process.argv;
+const db = new DatabaseSync(file, { readOnly: true, timeout: Number(ms) });
+try { db.exec("PRAGMA busy_timeout = " + Number(ms)); } catch {}
+const out = db.prepare(sql).all(...JSON.parse(params));
+db.close();
+process.stdout.write(JSON.stringify(out));`;
+function viaChild(file, sql, params, o) {
+  try {
+    const out = execFileSync4(
+      process.execPath,
+      ["--experimental-sqlite", "--no-warnings", "-e", CHILD, file, sql, JSON.stringify(params), String(o.timeoutMs)],
+      {
+        encoding: "utf8",
+        timeout: o.timeoutMs + 3e3,
+        stdio: ["ignore", "pipe", "ignore"],
+        maxBuffer: o.maxBuffer,
+        windowsHide: true
+      }
+    );
+    return rows(JSON.parse(out || "null"));
+  } catch {
+    return null;
+  }
+}
+var SAFE = /^[A-Za-z0-9 ._:@/+-]{0,256}$/;
+function inlineParams(sql, params) {
+  if (sql.includes("'")) return null;
+  const holes = sql.split("?").length - 1;
+  if (holes !== params.length) return null;
+  let i = 0;
+  let bad = false;
+  const out = sql.replace(/\?/g, () => {
+    const p = params[i++];
+    if (typeof p === "number") {
+      if (!Number.isFinite(p)) {
+        bad = true;
+        return "NULL";
+      }
+      return String(p);
+    }
+    if (typeof p !== "string" || !SAFE.test(p)) {
+      bad = true;
+      return "NULL";
+    }
+    return `'${p}'`;
+  });
+  return bad ? null : out;
+}
+function viaCli(file, sql, params, o) {
+  const text = inlineParams(sql, params);
+  if (!text) return null;
+  try {
+    const out = execFileSync4("sqlite3", ["-readonly", "-json", file, text], {
+      encoding: "utf8",
+      timeout: o.timeoutMs + 3e3,
+      stdio: ["ignore", "pipe", "ignore"],
+      maxBuffer: o.maxBuffer,
+      windowsHide: true
+    }).trim();
+    if (!out) return [];
+    return rows(JSON.parse(out));
+  } catch {
+    return null;
+  }
+}
+function querySqlite(file, sql, params = [], opts = {}) {
+  const o = {
+    timeoutMs: opts.timeoutMs ?? 2e3,
+    engine: opts.engine ?? "auto",
+    maxBuffer: opts.maxBuffer ?? 32 * 1024 * 1024
+  };
+  if (!file) return null;
+  try {
+    if (!existsSync5(file)) return null;
+  } catch {
+    return null;
+  }
+  const ways = o.engine === "auto" ? [viaNode, viaChild, viaCli] : o.engine === "node" ? [viaNode] : o.engine === "child" ? [viaChild] : [viaCli];
+  for (const way of ways) {
+    const r = way(file, sql, params, o);
+    if (r) return r;
+  }
+  return null;
+}
+
+// src/adapters/devin.ts
+var NAME4 = "devin";
+var DEVIN_EVENTS = [
+  "SessionStart",
+  "UserPromptSubmit",
+  "PreToolUse",
+  "PostToolUse",
+  "PermissionRequest",
+  "Stop",
+  "PostCompaction",
+  "SessionEnd"
+];
+var OPTS3 = { matcherFor: (e) => /Tool|Permission/.test(e) ? "" : void 0, timeout: 5 };
+var eventsFor3 = (lean) => lean ? DEVIN_EVENTS.filter((e) => e !== "PreToolUse") : [...DEVIN_EVENTS];
+var INSTALL_NOTE = "Devin drops a whole hooks file on one event name it doesn't know; `/hooks` in `devin` lists what loaded";
+var CLAUDE_NOTE = "Devin also reads ~/.claude/settings.json hooks (read_config_from.claude); a Claude-only event name there makes it ignore that file whole";
+var deadFileNote = (bad) => `Devin loads NO hooks from this file: "${bad}" is not one of its event names and it rejects the file whole \u2014 remove that key (\`/hooks\` in \`devin\` lists what loaded)`;
+function foreignEvent(file) {
+  const hooks = readJson(file).hooks;
+  if (!hooks || typeof hooks !== "object" || Array.isArray(hooks)) return void 0;
+  const ok = DEVIN_EVENTS;
+  return Object.keys(hooks).find((k) => !ok.includes(k));
+}
+var homeOf = (env) => env.HOME || homeDir();
+var appData = (env) => env.APPDATA || path12.join(homeOf(env), "AppData", "Roaming");
+var devinConfigDir = (env = process.env) => process.platform === "win32" ? path12.join(appData(env), "devin") : path12.join(env.XDG_CONFIG_HOME || path12.join(homeOf(env), ".config"), "devin");
+var configFile3 = (env) => path12.join(devinConfigDir(env), "config.json");
+var devinDataDir = (env = process.env) => process.platform === "win32" ? path12.join(appData(env), "devin", "cli") : path12.join(env.XDG_DATA_HOME || path12.join(homeOf(env), ".local", "share"), "devin", "cli");
+var sessionsDb = (env) => path12.join(devinDataDir(env), "sessions.db");
+var SESSION_ID = /^[A-Za-z0-9._:-]{1,128}$/;
+var validTool4 = (n) => typeof n === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(n);
+var endReason3 = (r) => r === "clear" || r === "logout" || r === "exit" ? r : "other";
+var pickSource2 = (v) => typeof v === "string" && ["startup", "resume", "clear", "compact", "fork"].includes(v) ? v : "unknown";
+function errText2(v) {
+  if (typeof v === "string" && v) return v.slice(0, 2e3);
+  if (v && typeof v === "object") {
+    const e = v;
+    if (typeof e.message === "string" && e.message) return e.message.slice(0, 2e3);
+    if (typeof e.error === "string" && e.error) return e.error.slice(0, 2e3);
+  }
+  return void 0;
+}
+var cut = (s, n) => s.length > n ? `${s.slice(0, n).replace(/\s+\S*$/, "")}\u2026` : s;
+var devin = {
+  name: NAME4,
+  events: DEVIN_EVENTS,
+  detect: (env = process.env) => existsSync6(devinConfigDir(env)) || existsSync6(devinDataDir(env)),
+  configFiles: (env = process.env) => [configFile3(env)],
+  install: (cmd, env = process.env, opts = {}) => {
+    const file = configFile3(env);
+    const r = installClaudeShaped(file, NAME4, eventsFor3(opts.lean), cmd, OPTS3);
+    if (r.skipped) return [r];
+    const bad = foreignEvent(file);
+    return [{ ...r, note: bad ? deadFileNote(bad) : INSTALL_NOTE }];
+  },
+  uninstall: (env = process.env, opts = {}) => [
+    uninstallClaudeShaped(configFile3(env), DEVIN_EVENTS, { created: opts.created?.includes(configFile3(env)) })
+  ],
+  installed: (cmd, env = process.env, opts = {}) => {
+    const file = configFile3(env);
+    const state = installedClaudeShaped(file, NAME4, eventsFor3(opts.lean), cmd, OPTS3);
+    const bad = state === "missing" ? void 0 : foreignEvent(file);
+    return [{ file, state: bad ? "inactive" : state, note: bad ? deadFileNote(bad) : CLAUDE_NOTE }];
+  },
+  fromHook(input) {
+    const event = input.argv[1] ?? "";
+    let s = {};
+    try {
+      const j = input.stdin ? JSON.parse(input.stdin) : {};
+      if (j && typeof j === "object" && !Array.isArray(j)) s = j;
+    } catch {
+    }
+    const id = typeof s.session_id === "string" ? s.session_id : "";
+    if (!id) return null;
+    const session = { id, cwd: input.env.DEVIN_PROJECT_DIR ?? input.cwd };
+    const turn_id = typeof s.prompt_id === "string" ? s.prompt_id : void 0;
+    const tool = validTool4(s.tool_name) ? s.tool_name : void 0;
+    const call_id = typeof s.tool_use_id === "string" ? s.tool_use_id : void 0;
+    const response = s.tool_response && typeof s.tool_response === "object" && !Array.isArray(s.tool_response) ? s.tool_response : void 0;
+    const permissionId = () => `perm-${createHash2("sha256").update(`${turn_id ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
+    const ev = (type, data) => ({ type, data: prune4(data), harnessEvent: event });
+    const events = [];
+    switch (event) {
+      case "SessionStart":
+        events.push(ev("session.started", { source: pickSource2(s.source) }));
+        break;
+      case "UserPromptSubmit":
+        events.push(
+          ev("turn.started", {
+            turn_id,
+            prompt_chars: typeof s.prompt === "string" ? [...s.prompt].length : void 0
+          })
+        );
+        break;
+      case "PreToolUse":
+        if (tool) events.push(ev("tool.started", { tool, call_id, turn_id, input: s.tool_input }));
+        break;
+      case "PostToolUse":
+        if (tool)
+          events.push(
+            ev("tool.ended", {
+              tool,
+              call_id,
+              turn_id,
+              // `ok` is required on tool.ended (PROTOCOL.md §events), so a response
+              // that carries no success flag at all reads as "nothing said it failed".
+              ok: response?.success !== false,
+              error: errText2(response?.error),
+              input: s.tool_input,
+              output: response ? response.output : s.tool_response
+            })
+          );
+        break;
+      case "PermissionRequest":
+        events.push(ev("attention.needed", { attention_id: call_id ?? permissionId(), kind: "permission", tool }));
+        break;
+      case "Stop":
+        events.push(ev("turn.ended", { turn_id, reason: "stop" }));
+        break;
+      case "PostCompaction":
+        events.push(ev("context.compacted", { trigger: "auto" }));
+        break;
+      case "SessionEnd":
+        events.push(ev("session.ended", { reason: endReason3(s.reason) }));
+        break;
+      default:
+        return null;
+    }
+    return {
+      session,
+      events,
+      hints: {},
+      transcript: transcriptRef(sessionsDb(input.env), id)
+    };
+  },
+  readTranscript(file, fromLine) {
+    const ref = splitRef(file);
+    if (!ref) return { turns: [], line: fromLine };
+    return readDevinChain(ref.db, ref.session, fromLine);
+  },
+  facts(session, transcript, _hints, _state, env = process.env) {
+    const out = {};
+    const version = devinVersion(env);
+    if (version) out.harness_version = version;
+    const account = devinAccount(env);
+    if (account) out.account_id = account;
+    const ref = splitRef(transcript) ?? { db: sessionsDb(env), session: session.id };
+    if (!SESSION_ID.test(ref.session)) return out;
+    const rows2 = querySqlite(ref.db, SESSION_SQL, [ref.session]);
+    const row = rows2?.[0];
+    if (!row) return out;
+    Object.assign(out, sessionFacts(row));
+    return out;
+  },
+  backfill(sinceMs, env = process.env) {
+    const rows2 = querySqlite(sessionsDb(env), BACKFILL_SQL, ["text", Math.floor(sinceMs / 1e3)]);
+    if (!rows2) return [];
+    const out = [];
+    for (const row of rows2) {
+      const id = String(row.id);
+      if (!SESSION_ID.test(id)) continue;
+      const { started_at, last_at, ...rest } = sessionFacts(row);
+      if (!started_at || !last_at) continue;
+      out.push({ session: { id, ...rest }, started_at, last_at });
+    }
+    return out;
+  }
+};
+function prune4(o) {
+  for (const k of Object.keys(o)) if (o[k] === void 0) delete o[k];
+  return o;
+}
+var transcriptRef = (db, session) => `${db}#${session}`;
+function splitRef(ref) {
+  if (!ref) return null;
+  const at = ref.lastIndexOf("#");
+  if (at <= 0) return null;
+  const db = ref.slice(0, at);
+  const session = ref.slice(at + 1);
+  return db && SESSION_ID.test(session) ? { db, session } : null;
+}
+var CHAIN_LIMIT = 4e3;
+var CHAIN_SQL = `WITH RECURSIVE chain(node_id, parent_node_id, chat_message, created_at) AS (
+  SELECT node_id, parent_node_id, chat_message, created_at FROM message_nodes
+   WHERE session_id = ? AND node_id = (SELECT main_chain_id FROM sessions WHERE id = ?)
+  UNION ALL
+  SELECT m.node_id, m.parent_node_id, m.chat_message, m.created_at FROM message_nodes m
+    JOIN chain c ON m.node_id = c.parent_node_id AND m.session_id = ? AND m.node_id >= ?
+)
+SELECT node_id, chat_message, created_at FROM chain ORDER BY node_id DESC LIMIT ${CHAIN_LIMIT}`;
+var SESSION_FIELDS = `s.model, s.working_directory, s.created_at, s.last_activity_at,
+       (SELECT p.content FROM prompt_history p WHERE p.session_id = s.id AND p.is_shell = 0
+         ORDER BY p.timestamp ASC, p.id ASC LIMIT 1) AS first_ask`;
+var SESSION_SQL = `SELECT ${SESSION_FIELDS} FROM sessions s WHERE s.id = ? LIMIT 1`;
+var BACKFILL_SQL = `SELECT s.id, ${SESSION_FIELDS} FROM sessions s
+ WHERE s.hidden = 0 AND typeof(s.id) = ? AND s.last_activity_at >= ?
+ ORDER BY s.last_activity_at DESC LIMIT 500`;
+function sessionFacts(row) {
+  const out = {};
+  if (typeof row.model === "string" && row.model) out.model = row.model;
+  if (typeof row.working_directory === "string" && path12.isAbsolute(row.working_directory))
+    out.cwd = row.working_directory;
+  const started = Number(row.created_at);
+  const last = Number(row.last_activity_at);
+  if (Number.isFinite(started) && started > 0) out.started_at = Math.round(started * 1e3);
+  if (Number.isFinite(last) && last > 0) out.last_at = Math.round(last * 1e3);
+  if (typeof row.first_ask === "string") {
+    const line = row.first_ask.split("\n").find((l) => l.trim()) ?? "";
+    if (line.trim()) {
+      out.title = cut(line.trim(), 80);
+      out.title_source = "first-ask";
+    }
+  }
+  return out;
+}
+function readDevinChain(db, session, fromLine) {
+  if (!SESSION_ID.test(session)) return { turns: [], line: fromLine };
+  const floor = Number.isFinite(fromLine) && fromLine > 0 ? Math.floor(fromLine) : 0;
+  const rows2 = querySqlite(db, CHAIN_SQL, [session, session, session, floor]);
+  if (!rows2?.length) return { turns: [], line: fromLine };
+  const msgs = [];
+  let end = fromLine;
+  for (const row of rows2) {
+    const node = Number(row.node_id);
+    if (!Number.isFinite(node)) continue;
+    if (node + 1 > end) end = node + 1;
+    if (node < fromLine) continue;
+    let j;
+    try {
+      j = JSON.parse(String(row.chat_message ?? ""));
+    } catch {
+      continue;
+    }
+    const text = typeof j.content === "string" ? j.content.trim() : "";
+    if (!text) continue;
+    const secs = Number(row.created_at);
+    const at = Date.parse(String(j.metadata?.created_at ?? "")) || (Number.isFinite(secs) && secs > 0 ? Math.round(secs * 1e3) : 0) || Date.now();
+    if (j.role === "user" && j.metadata?.is_user_input === true) msgs.push({ role: "user", text, at, line: node });
+    else if (j.role === "assistant") msgs.push({ role: "assistant", text, at, line: node });
+  }
+  msgs.sort((a, b) => a.line - b.line);
+  return pairTurns(msgs, end);
+}
+function devinVersion(env = process.env) {
+  try {
+    const target = readlinkSync(path12.join(devinDataDir(env), "_versions", "current"));
+    const name = path12.basename(target);
+    return /^[0-9][0-9A-Za-z.+-]{0,63}$/.test(name) ? name : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function devinAccount(env = process.env) {
+  const d = readJson(configFile3(env)).devin;
+  const id = d && typeof d === "object" ? d.org_id : void 0;
+  return typeof id === "string" && /^[A-Za-z0-9_.:-]{1,128}$/.test(id) ? id : void 0;
+}
+
+// src/adapters/gemini-cli.ts
+import { execFileSync as execFileSync5 } from "node:child_process";
+import { existsSync as existsSync7, readFileSync as readFileSync7 } from "node:fs";
+import path13 from "node:path";
+var NAME5 = "gemini-cli";
 var GEMINI_EVENTS = [
   "SessionStart",
   "BeforeAgent",
@@ -2416,15 +3414,15 @@ var GEMINI_EVENTS = [
   "PreCompress",
   "SessionEnd"
 ];
-var OPTS3 = { matcherFor: (e) => /Tool/.test(e) ? ".*" : void 0, timeout: 5e3 };
-var geminiDir = (env) => env.GEMINI_CLI_HOME || path11.join(HOME, ".gemini");
-var settings = (env) => path11.join(geminiDir(env), "settings.json");
-var validTool4 = (n) => typeof n === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(n);
-var eventsFor3 = (lean) => lean ? GEMINI_EVENTS.filter((e) => e !== "BeforeTool") : [...GEMINI_EVENTS];
+var OPTS4 = { matcherFor: (e) => /Tool/.test(e) ? ".*" : void 0, timeout: 5e3 };
+var geminiDir = (env) => env.GEMINI_CLI_HOME || path13.join(homeDir(), ".gemini");
+var settings = (env) => path13.join(geminiDir(env), "settings.json");
+var validTool5 = (n) => typeof n === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(n);
+var eventsFor4 = (lean) => lean ? GEMINI_EVENTS.filter((e) => e !== "BeforeTool") : [...GEMINI_EVENTS];
 function geminiHooksActive(settingsFile) {
   let tools;
   try {
-    tools = JSON.parse(readFileSync6(settingsFile, "utf8")).tools;
+    tools = JSON.parse(readFileSync7(settingsFile, "utf8")).tools;
   } catch {
   }
   if (tools?.enableHooks === true) return { active: true };
@@ -2432,7 +3430,7 @@ function geminiHooksActive(settingsFile) {
     return { active: false, note: "inactive: tools.enableHooks is false in settings.json" };
   let version = "";
   try {
-    version = execFileSync4("gemini", ["--version"], {
+    version = execFileSync5("gemini", ["--version"], {
       encoding: "utf8",
       timeout: 4e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -2451,13 +3449,13 @@ function geminiHooksActive(settingsFile) {
   };
 }
 var geminiCli = {
-  name: NAME4,
+  name: NAME5,
   events: GEMINI_EVENTS,
   // ~/.gemini also belongs to Antigravity; Gemini CLI is here when its settings or its chat logs exist.
-  detect: (env = process.env) => existsSync5(settings(env)) || existsSync5(path11.join(geminiDir(env), "tmp")),
+  detect: (env = process.env) => existsSync7(settings(env)) || existsSync7(path13.join(geminiDir(env), "tmp")),
   configFiles: (env = process.env) => [settings(env)],
   install: (cmd, env = process.env, opts = {}) => {
-    const r = installClaudeShaped(settings(env), NAME4, eventsFor3(opts.lean), cmd, OPTS3);
+    const r = installClaudeShaped(settings(env), NAME5, eventsFor4(opts.lean), cmd, OPTS4);
     const a = geminiHooksActive(settings(env));
     return [a.note && !r.skipped ? { ...r, note: [r.note, a.note].filter(Boolean).join("; ") } : r];
   },
@@ -2465,7 +3463,7 @@ var geminiCli = {
     uninstallClaudeShaped(settings(env), GEMINI_EVENTS, { created: opts.created?.includes(settings(env)) })
   ],
   installed: (cmd, env = process.env, opts = {}) => {
-    const state = installedClaudeShaped(settings(env), NAME4, eventsFor3(opts.lean), cmd, OPTS3);
+    const state = installedClaudeShaped(settings(env), NAME5, eventsFor4(opts.lean), cmd, OPTS4);
     const a = geminiHooksActive(settings(env));
     return [
       {
@@ -2479,14 +3477,15 @@ var geminiCli = {
     const event = input.argv[1] ?? "";
     let s = {};
     try {
-      s = input.stdin ? JSON.parse(input.stdin) : {};
+      const j = input.stdin ? JSON.parse(input.stdin) : {};
+      if (j && typeof j === "object" && !Array.isArray(j)) s = j;
     } catch {
     }
     const id = s.session_id;
     if (!id) return null;
     const session = { id: String(id), cwd: typeof s.cwd === "string" ? s.cwd : input.cwd };
-    const tool = validTool4(s.tool_name) ? s.tool_name : void 0;
-    const ev = (type, data) => ({ type, data: prune4(data), harnessEvent: event });
+    const tool = validTool5(s.tool_name) ? s.tool_name : void 0;
+    const ev = (type, data) => ({ type, data: prune5(data), harnessEvent: event });
     const events = [];
     switch (event) {
       case "SessionStart":
@@ -2551,7 +3550,7 @@ var geminiCli = {
   readTranscript(file, fromLine) {
     let text = "";
     try {
-      text = readFileSync6(file, "utf8");
+      text = readFileSync7(file, "utf8");
     } catch {
       return { turns: [], line: fromLine };
     }
@@ -2567,7 +3566,7 @@ var geminiCli = {
     const raw = first ? first.content ?? first.message ?? first.text : void 0;
     const text = typeof raw === "string" ? raw.trim() : "";
     if (text) {
-      const line = text.split("\n").find((l) => l.trim()) ?? "";
+      const line = text.split("\n")[0];
       out.title = line.length > 80 ? `${line.slice(0, 80).replace(/\s+\S*$/, "")}\u2026` : line;
       out.title_source = "first-ask";
     }
@@ -2581,29 +3580,31 @@ var geminiCli = {
   backfill: () => []
   // chat logs are keyed by a project hash, not a session id we can name; the first hook of a resumed session reports it
 };
-function prune4(o) {
+function prune5(o) {
   for (const k of Object.keys(o)) if (o[k] === void 0) delete o[k];
   return o;
 }
 
 // src/adapters/index.ts
-var ADAPTERS = [claudeCode, codex, geminiCli, antigravity];
+var ADAPTERS = [claudeCode, codex, geminiCli, antigravity, devin];
 var adapterByName = (name) => ADAPTERS.find((a) => a.name === name);
+var HELLO_HARNESSES_MAX = 20;
 function drivableHarnesses(env = process.env) {
   return [
     ...findClaude(env) ? ["claude-code"] : [],
     ...findCodex(env) ? ["codex"] : [],
-    ...findAgy(env) ? ["antigravity"] : []
-  ];
+    ...findAgy(env) ? ["antigravity"] : [],
+    ...acpHarnesses(env)
+  ].slice(0, HELLO_HARNESSES_MAX);
 }
 
 // src/config.ts
-import { chmodSync, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
-import path12 from "node:path";
+import { chmodSync, existsSync as existsSync8, mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "node:fs";
+import path14 from "node:path";
 var DEFAULT_CONFIG = { sinks: [], harnesses: {}, update_check: true, keep_days: 30 };
 function readConfig(file = configFile()) {
   try {
-    const j = JSON.parse(readFileSync7(file, "utf8"));
+    const j = JSON.parse(readFileSync8(file, "utf8"));
     return {
       ...DEFAULT_CONFIG,
       ...j,
@@ -2615,10 +3616,10 @@ function readConfig(file = configFile()) {
   }
 }
 function writeConfig(c, file = configFile()) {
-  mkdirSync4(path12.dirname(file), { recursive: true, mode: 448 });
+  mkdirSync4(path14.dirname(file), { recursive: true, mode: 448 });
   writeFileSync4(file, `${JSON.stringify(c, null, 2)}
 `, { mode: 384 });
-  if (process.platform !== "win32" && existsSync6(file)) {
+  if (process.platform !== "win32" && existsSync8(file)) {
     try {
       chmodSync(file, 384);
     } catch {
@@ -2647,7 +3648,7 @@ function encodeTime(t) {
 function ulid(now = Date.now()) {
   if (now === lastTime) {
     for (let i = lastRand.length - 1; i >= 0; i--) {
-      const v = (lastRand[i] ?? 0) + 1;
+      const v = lastRand[i] + 1;
       if (v < 32) {
         lastRand[i] = v;
         break;
@@ -2656,8 +3657,7 @@ function ulid(now = Date.now()) {
     }
   } else {
     lastTime = now;
-    const b = randomBytes(16);
-    lastRand = Array.from({ length: 16 }, (_, i) => (b[i] ?? 0) % 32);
+    lastRand = Array.from(randomBytes(16), (b) => b % 32);
   }
   return encodeTime(now) + lastRand.map((v) => ALPHABET[v]).join("");
 }
@@ -2681,57 +3681,76 @@ function makeEvent(a, ctx) {
   };
 }
 
+// src/launched-by.ts
+var LAUNCHED_BY_ENV = "SESSIONPIPE_LAUNCHED_BY";
+var LAUNCHED_BY = /^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/;
+function launchedBy(env) {
+  const v = env[LAUNCHED_BY_ENV]?.trim();
+  return v && LAUNCHED_BY.test(v) ? v : void 0;
+}
+function readHook(adapter, input) {
+  const r = adapter.fromHook(input);
+  if (r && !r.session.parent_id) {
+    const launcher = launchedBy(input.env);
+    if (launcher && launcher !== `${adapter.name}:${r.session.id}`) r.session.launched_by = launcher;
+  }
+  return r;
+}
+
 // src/outbox.ts
 import {
   appendFileSync,
   closeSync as closeSync3,
-  existsSync as existsSync7,
+  existsSync as existsSync9,
   mkdirSync as mkdirSync5,
   openSync as openSync3,
   readdirSync as readdirSync6,
-  readFileSync as readFileSync8,
+  readFileSync as readFileSync9,
   readSync as readSync3,
   renameSync,
   statSync as statSync6,
   unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync5
 } from "node:fs";
-import path13 from "node:path";
+import path15 from "node:path";
+var READ_CHUNK = 1024 * 1024;
+var READ_MAX = 8 * 1024 * 1024;
 var Outbox = class {
   constructor(root) {
     this.root = root;
   }
   root;
   dir(harness) {
-    return path13.join(this.root, "outbox", safeId(harness));
+    return path15.join(this.root, "outbox", safeId(harness));
   }
   file(ref) {
-    return path13.join(this.dir(ref.harness), `${safeId(ref.session)}.jsonl`);
+    return path15.join(this.dir(ref.harness), `${safeId(ref.session)}.jsonl`);
   }
   seqFile(ref) {
-    return path13.join(this.dir(ref.harness), `${safeId(ref.session)}.seq`);
+    return path15.join(this.dir(ref.harness), `${safeId(ref.session)}.seq`);
   }
   /** The next seq for a session, persisted (survives a hibernating machine and a
    *  restart; an in-memory counter would restart at 0 and collide). */
   nextSeq(ref) {
     const f = this.seqFile(ref);
-    let n = 0;
+    let n = -1;
     try {
-      n = Number(readFileSync8(f, "utf8")) || 0;
+      const t = readFileSync9(f, "utf8").trim();
+      if (/^\d+$/.test(t)) n = Number(t);
     } catch {
-      n = this.lastSeqInFile(ref) + 1;
     }
-    mkdirSync5(path13.dirname(f), { recursive: true, mode: 448 });
+    if (n < 0) n = this.lastSeqInFile(ref) + 1;
+    mkdirSync5(path15.dirname(f), { recursive: true, mode: 448 });
     writeFileSync5(f, String(n + 1), { mode: 384 });
     return n;
   }
   lastSeqInFile(ref) {
     const f = this.file(ref);
-    if (!existsSync7(f)) return -1;
-    const lines = readFileSync8(f, "utf8").trim().split("\n");
+    if (!existsSync9(f)) return -1;
+    const lines = readFileSync9(f, "utf8").trim().split("\n");
     for (let i = lines.length - 1; i >= 0; i--) {
       try {
-        const j = JSON.parse(lines[i] ?? "");
+        const j = JSON.parse(lines[i]);
         if (typeof j.session?.seq === "number") return j.session.seq;
       } catch {
       }
@@ -2747,10 +3766,10 @@ var Outbox = class {
   /** Every session file, newest first. */
   sessions() {
     const out = [];
-    const base = path13.join(this.root, "outbox");
-    if (!existsSync7(base)) return [];
+    const base = path15.join(this.root, "outbox");
+    if (!existsSync9(base)) return [];
     for (const h of readdirSync6(base)) {
-      const d = path13.join(base, h);
+      const d = path15.join(base, h);
       let names = [];
       try {
         names = readdirSync6(d).filter((n) => n.endsWith(".jsonl"));
@@ -2759,7 +3778,7 @@ var Outbox = class {
       }
       for (const n of names) {
         try {
-          out.push({ ref: { harness: h, session: n.slice(0, -6) }, mtime: statSync6(path13.join(d, n)).mtimeMs });
+          out.push({ ref: { harness: h, session: n.slice(0, -6) }, mtime: statSync6(path15.join(d, n)).mtimeMs });
         } catch {
         }
       }
@@ -2767,31 +3786,43 @@ var Outbox = class {
     return out.sort((a, b) => b.mtime - a.mtime).map((x) => x.ref);
   }
   /** Read events after byte offset `from`; returns them and the new offset. Lines
-   *  are read whole; a partial trailing line (a write in progress) is left. */
+   *  are read whole; a partial trailing line (a write in progress) is left. A read
+   *  takes READ_CHUNK bytes at a time, not the rest of the file: a session file grows
+   *  to tens of MB and a drain takes it in batches of 50. It reads on until the batch
+   *  is full or the file ends, so lines that parse to nothing never stop a drain; one
+   *  line longer than the chunk gets a larger one, up to READ_MAX. */
   read(ref, from, maxEvents = 500) {
     const f = this.file(ref);
-    if (!existsSync7(f)) return { events: [], offset: from };
+    if (!existsSync9(f)) return { events: [], offset: from };
     const size = statSync6(f).size;
     if (from >= size) return { events: [], offset: from };
     const fd = openSync3(f, "r");
     try {
-      const buf = Buffer.alloc(Math.min(size - from, 8 * 1024 * 1024));
-      const n = readSync3(fd, buf, 0, buf.length, from);
-      const text = buf.subarray(0, n).toString("utf8");
       const events = [];
       let offset = from;
-      let pos = 0;
-      while (events.length < maxEvents) {
-        const nl = text.indexOf("\n", pos);
-        if (nl < 0) break;
-        const line = text.slice(pos, nl);
-        pos = nl + 1;
-        offset = from + Buffer.byteLength(text.slice(0, pos), "utf8");
-        if (!line.trim()) continue;
-        try {
-          events.push(JSON.parse(line));
-        } catch {
+      let chunk = READ_CHUNK;
+      while (events.length < maxEvents && offset < size) {
+        const buf = Buffer.alloc(Math.min(size - offset, chunk));
+        const n = readSync3(fd, buf, 0, buf.length, offset);
+        const text = buf.subarray(0, n).toString("utf8");
+        let pos = 0;
+        let used = 0;
+        while (events.length < maxEvents) {
+          const nl = text.indexOf("\n", pos);
+          if (nl < 0) break;
+          const line = text.slice(pos, nl);
+          pos = nl + 1;
+          used += Buffer.byteLength(line, "utf8") + 1;
+          if (!line.trim()) continue;
+          try {
+            events.push(JSON.parse(line));
+          } catch {
+          }
         }
+        offset += used;
+        if (used) continue;
+        if (offset + n >= size || chunk >= READ_MAX) break;
+        chunk *= 2;
       }
       return { events, offset };
     } finally {
@@ -2835,18 +3866,18 @@ var Cursors = class {
   root;
   sink;
   file() {
-    return path13.join(this.root, "cursors", `${safeId(this.sink)}.json`);
+    return path15.join(this.root, "cursors", `${safeId(this.sink)}.json`);
   }
   read() {
     try {
-      return JSON.parse(readFileSync8(this.file(), "utf8"));
+      return JSON.parse(readFileSync9(this.file(), "utf8"));
     } catch {
       return {};
     }
   }
   write(c) {
     const f = this.file();
-    mkdirSync5(path13.dirname(f), { recursive: true, mode: 448 });
+    mkdirSync5(path15.dirname(f), { recursive: true, mode: 448 });
     const tmp = `${f}.${process.pid}.tmp`;
     writeFileSync5(tmp, JSON.stringify(c), { mode: 384 });
     renameSync(tmp, f);
@@ -2856,11 +3887,14 @@ var Cursors = class {
   }
 };
 function takeLock(root, ref, staleMs = 5 * 6e4) {
-  const dir = path13.join(root, "locks");
+  return takeNamedLock(root, `${safeId(ref.harness)}-${safeId(ref.session)}`, staleMs);
+}
+function takeNamedLock(root, name, staleMs = 5 * 6e4) {
+  const dir = path15.join(root, "locks");
   mkdirSync5(dir, { recursive: true, mode: 448 });
-  const f = path13.join(dir, `${safeId(ref.harness)}-${safeId(ref.session)}.lock`);
+  const f = path15.join(dir, `${name}.lock`);
   try {
-    if (Date.now() - statSync6(f).mtimeMs > staleMs) unlinkSync3(f);
+    if (Date.now() - statSync6(f).mtimeMs > staleMs || !processAlive(Number(readFileSync9(f, "utf8")))) unlinkSync3(f);
     else return null;
   } catch {
   }
@@ -2876,9 +3910,18 @@ function takeLock(root, ref, staleMs = 5 * 6e4) {
     }
   };
 }
+function processAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return true;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e.code === "EPERM";
+  }
+}
 
 // src/privacy/pii.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 var RULESET_PII = "pii@1";
 var EMAIL = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
 var PHONE = /(?<![\w.])(?:\+\d{1,3}[ .-]?)?(?:\(\d{2,4}\)[ .-]?)?\d{2,4}(?:[ .-]?\d{2,4}){1,3}(?!\w)/g;
@@ -2900,7 +3943,7 @@ function reducePii(text, home) {
   return out;
 }
 function hashMachine(name) {
-  return createHash2("sha256").update(name).digest("hex").slice(0, 8);
+  return createHash3("sha256").update(name).digest("hex").slice(0, 8);
 }
 function reducePiiDeep(v, home) {
   if (typeof v === "string") return reducePii(v, home);
@@ -2989,12 +4032,12 @@ function redactAssignments(text) {
   let last = 0;
   NAME_SEP.lastIndex = 0;
   for (let m = NAME_SEP.exec(text); m; m = NAME_SEP.exec(text)) {
-    const name = m[1] ?? "";
+    const name = m[1];
     if (!isSecretName(name)) continue;
     VALUE.lastIndex = NAME_SEP.lastIndex;
     const v = VALUE.exec(text);
     if (!v) continue;
-    const value = v[1] ?? v[2] ?? v[3] ?? v[4] ?? "";
+    const value = v[1] ?? v[2] ?? v[3] ?? v[4];
     NAME_SEP.lastIndex = VALUE.lastIndex;
     if (isPlaceholder(value) || value.includes(REDACTED)) continue;
     if (/tokens?$/i.test(name) && /^\d+(?:[.,]\d+)*[km]?$/i.test(value)) continue;
@@ -3050,7 +4093,7 @@ function redactSecrets(text) {
   let out = text;
   for (const re of TOKEN_PATTERNS) out = out.replace(re, REDACTED);
   out = out.replace(URL_CREDENTIALS, (_m, head, _pw, at) => `${head}${REDACTED}${at}`);
-  out = out.replace(AUTH_HEADER, (m, head, v) => v.includes(REDACTED) ? m : `${head}${REDACTED}`);
+  out = out.replace(AUTH_HEADER, (_m, head) => `${head}${REDACTED}`);
   out = redactAssignments(out);
   out = out.replace(
     PROSE,
@@ -3082,6 +4125,7 @@ var TYPE_TIER = {
   "turn.started": 0,
   "turn.ended": 0,
   "turn.transcript": 2,
+  "turn.progress": 2,
   "tool.started": 1,
   "tool.ended": 1,
   "files.changed": 1,
@@ -3098,9 +4142,10 @@ var DATA_ALLOW = {
   "session.ended": { 0: ["reason"] },
   "session.backfill": { 0: ["started_at", "last_at", "turns"] },
   "session.forgotten": { 0: [] },
-  "turn.started": { 0: ["turn_id"], 1: ["prompt_chars"] },
-  "turn.ended": { 0: ["turn_id", "reason", "ms"], 1: ["error"] },
+  "turn.started": { 0: ["turn_id", "submitted_by", "injected"], 1: ["prompt_chars"] },
+  "turn.ended": { 0: ["turn_id", "reason", "ms", "background"], 1: ["error"] },
   "turn.transcript": { 2: ["turn", "user", "assistant", "at"] },
+  "turn.progress": { 2: ["turn", "user", "assistant", "at"] },
   "tool.started": { 1: ["tool", "call_id", "turn_id", "agent_id"], 3: ["input"] },
   "tool.ended": { 1: ["tool", "call_id", "turn_id", "agent_id", "ms", "ok", "error"], 3: ["input", "output"] },
   "files.changed": { 1: ["paths"] },
@@ -3122,7 +4167,9 @@ var SESSION_ALLOW = [
   "title_source",
   "url",
   "account_id",
-  "parent_id"
+  "attended",
+  "parent_id",
+  "launched_by"
 ];
 var MAX_SIDE = 2e4;
 var MAX_IO = 64 * 1024;
@@ -3141,10 +4188,12 @@ function cap(v, max) {
   }
   return v;
 }
+function capTail(v, max) {
+  return v.length > max ? `\u2026${v.slice(v.length - max + 1)}` : v;
+}
 function filterEvent(event, tier, pii, opts = {}) {
   const minTier = TYPE_TIER[event.type];
   if (minTier !== void 0 && minTier > tier) return null;
-  if (event.type === "native" && tier < 3) return null;
   const session = {};
   for (const k of SESSION_ALLOW)
     if (event.session[k] !== void 0)
@@ -3154,7 +4203,8 @@ function filterEvent(event, tier, pii, opts = {}) {
   if (keys === null) data = { ...event.data };
   else for (const k of keys) if (event.data[k] !== void 0) data[k] = event.data[k];
   if (typeof data.user === "string") data.user = cap(data.user, MAX_SIDE);
-  if (typeof data.assistant === "string") data.assistant = cap(data.assistant, MAX_SIDE);
+  if (typeof data.assistant === "string")
+    data.assistant = event.type === "turn.progress" ? capTail(data.assistant, MAX_SIDE) : cap(data.assistant, MAX_SIDE);
   if (data.input !== void 0) data.input = cap(data.input, MAX_IO);
   if (data.output !== void 0) data.output = cap(data.output, MAX_IO);
   if (typeof data.message === "string") data.message = cap(data.message, 200);
@@ -3175,9 +4225,15 @@ function filterEvent(event, tier, pii, opts = {}) {
   return out;
 }
 
+// src/short-id.ts
+import { createHash as createHash4 } from "node:crypto";
+function shortId(harness, id) {
+  return createHash4("sha256").update(`sessionpipe.session:${harness}:${id}`).digest("hex").slice(0, 8);
+}
+
 // src/sinks/file.ts
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync6 } from "node:fs";
-import path14 from "node:path";
+import path16 from "node:path";
 var FileSink = class {
   constructor(name, file, tier, pii) {
     this.name = name;
@@ -3191,7 +4247,7 @@ var FileSink = class {
   pii;
   async send(events) {
     try {
-      mkdirSync6(path14.dirname(this.file), { recursive: true });
+      mkdirSync6(path16.dirname(this.file), { recursive: true });
       appendFileSync2(this.file, `${events.map((e) => JSON.stringify(e)).join("\n")}
 `);
       return { ok: true, acknowledged: events.length, accepted: events.length, duplicates: 0, rejected: [] };
@@ -3215,8 +4271,12 @@ var StdoutSink = class {
   pii;
   write;
   async send(events) {
-    for (const e of events) this.write(JSON.stringify(e));
-    return { ok: true, acknowledged: events.length, accepted: events.length, duplicates: 0, rejected: [] };
+    try {
+      for (const e of events) this.write(JSON.stringify(e));
+      return { ok: true, acknowledged: events.length, accepted: events.length, duplicates: 0, rejected: [] };
+    } catch (e) {
+      return { ok: false, acknowledged: 0, error: String(e.message ?? e), action: "retry" };
+    }
   }
 };
 
@@ -3227,9 +4287,11 @@ export {
   AG_STALE_PRETOOL,
   Cursors,
   DEFAULT_CONFIG,
+  DEVIN_EVENTS,
   FileSink,
-  HOME,
+  HELLO_HARNESSES_MAX,
   JOB_TIMEOUT_MS,
+  LAUNCHED_BY_ENV,
   Outbox,
   PROTOCOL_VERSION,
   REDACTED,
@@ -3237,10 +4299,13 @@ export {
   RULESET_SECRETS,
   StdoutSink,
   TYPE_TIER,
+  acp_control_exports as acpControl,
   adapterByName,
   antigravity,
   antigravityAnswer,
   antigravity_control_exports as antigravityControl,
+  capTail,
+  claudeAccounts,
   claudeCode,
   claude_code_control_exports as claudeControl,
   claudeDirs,
@@ -3248,35 +4313,47 @@ export {
   codex_control_exports as codexControl,
   configFile,
   deniedNote,
+  devin,
+  devinConfigDir,
+  devinDataDir,
   drivableHarnesses,
   filterEvent,
   geminiCli,
   gitFacts,
   hasSecret,
   hashMachine,
+  homeDir,
   isInjected,
   isSecretName,
   isUlid,
   jobEnv,
+  launchedBy,
   machineName,
   makeEvent,
+  notClaudeCode,
   pairTurns,
+  processAlive,
   readAntigravity,
   readClaude,
   readCodex,
   readConfig,
+  readDevinChain,
   readGemini,
+  readHook,
   redactDeep,
   redactSecrets,
   reducePii,
   reducePiiDeep,
   runHeadless,
   safeId,
+  shortId,
   stateDir,
   stripCredentials,
   takeLock,
+  takeNamedLock,
   tilde,
   ulid,
+  untilde,
   writeConfig
 };
 //# sourceMappingURL=index.js.map