usebeeline 0.0.134 → 0.1.0

package/dist/usebeeline.mjs

@@ -9071,7 +9071,7 @@ var init_access_policy = __esm({
 import { randomBytes as randomBytes5 } from "node:crypto";
 import { execFile } from "node:child_process";
 import { closeSync, openSync, readFileSync } from "node:fs";
-import { mkdir, readFile as readFile2, readdir, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { chmod, mkdir, readFile as readFile2, readdir, rename, stat, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, resolve } from "node:path";
 import { spawn as spawn2 } from "node:child_process";
@@ -9138,6 +9138,10 @@ async function readRuntimeRecord(path) {
   runtimeIdentity(parsed.body);
   return parsed;
 }
+async function convergeRuntimeRecordFileModes(path) {
+  await chmod(dirname(path), 448).catch(() => void 0);
+  await chmod(path, 384).catch(() => void 0);
+}
 async function migrateRuntimeRecordAccessPolicy(path) {
   const runtime = await readRuntimeRecord(path);
   if (runtime.accessPolicy)
@@ -9983,7 +9987,7 @@ var init_systemd = __esm({
 // apps/body/dist/launchd.js
 import { execFile as execFile3 } from "node:child_process";
 import { realpathSync } from "node:fs";
-import { chmod, mkdir as mkdir3, readFile as readFile4, readdir as readdir2, rename as rename2, rm, stat as stat3, writeFile as writeFile3 } from "node:fs/promises";
+import { chmod as chmod2, mkdir as mkdir3, readFile as readFile4, readdir as readdir2, rename as rename2, rm, stat as stat3, writeFile as writeFile3 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname4, resolve as resolve4 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
@@ -10150,7 +10154,7 @@ async function writeManagedFile(path, content, mode) {
   await mkdir3(dirname4(path), { recursive: true, mode: 448 });
   const pending = `${path}.${process.pid}.pending`;
   await writeFile3(pending, content, { mode });
-  await chmod(pending, mode);
+  await chmod2(pending, mode);
   await rename2(pending, path);
   return true;
 }
@@ -10402,7 +10406,7 @@ __export(self_update_exports, {
 });
 import { createHash } from "node:crypto";
 import { constants as fsConstants2 } from "node:fs";
-import { access, chmod as chmod2, lstat, mkdir as mkdir4, open, readFile as readFile5, rename as rename3, rm as rm2, symlink, writeFile as writeFile4 } from "node:fs/promises";
+import { access, chmod as chmod3, lstat, mkdir as mkdir4, open, readFile as readFile5, rename as rename3, rm as rm2, symlink, writeFile as writeFile4 } from "node:fs/promises";
 import { spawn as spawn4 } from "node:child_process";
 import { homedir as homedir5 } from "node:os";
 import { dirname as dirname5, join as join3, resolve as resolve5 } from "node:path";
@@ -10704,7 +10708,7 @@ function forwarderScript(tool) {
 async function replaceFile(path, contents, mode) {
   const temp = `${path}.new-${process.pid}`;
   await writeFile4(temp, contents, { mode });
-  await chmod2(temp, mode);
+  await chmod3(temp, mode);
   await rename3(temp, path);
 }
 async function activateRelease(layout, releaseId) {
@@ -11244,7 +11248,7 @@ var init_cursor_models = __esm({
 // apps/body/dist/cursor-acp-bridge.js
 import { spawn as spawn6 } from "node:child_process";
 import { existsSync as existsSync3 } from "node:fs";
-import { chmod as chmod3, lstat as lstat2, mkdir as mkdir6, rename as rename4, unlink as unlink3, writeFile as writeFile5 } from "node:fs/promises";
+import { chmod as chmod4, lstat as lstat2, mkdir as mkdir6, rename as rename4, unlink as unlink3, writeFile as writeFile5 } from "node:fs/promises";
 import { createRequire as createRequire3 } from "node:module";
 import { createInterface as createInterface3 } from "node:readline";
 import { basename, dirname as dirname7, resolve as resolvePath } from "node:path";
@@ -11316,7 +11320,7 @@ async function writeIsolatedCursorFile(path, content) {
   const temporary = resolvePath(parent, `.${basename(path)}.${process.pid}.${randomUUID2()}.tmp`);
   try {
     await writeFile5(temporary, content, { mode: 384, flag: "wx" });
-    await chmod3(temporary, 384);
+    await chmod4(temporary, 384);
     await rename4(temporary, path);
   } finally {
     await unlink3(temporary).catch(() => void 0);
@@ -23288,6 +23292,8 @@ function isSquireApprovalUrl(value) {
   const host = url.hostname;
   if (!["trustysquire.ai", "trustysquire.test"].some((domain) => host === domain || host.endsWith(`.${domain}`)))
     return false;
+  if (url.pathname === "/" || url.pathname === "/install")
+    return true;
   return /^\/(?:vault\/(?:pay|fetch|mutate|mutate-card)|approval|passkey|vouch)\/[^/]+\/?$/.test(url.pathname);
 }
 function linkKindFor(key, url) {
@@ -23479,6 +23485,56 @@ function squireApprovalFromMcp(request, response) {
   const args = record(params?.arguments) ?? {};
   return { tool, ...squireApprovalCopy(tool, args), ...link2 };
 }
+function squireLoginWallIn(value, depth = 0) {
+  if (depth > 6)
+    return void 0;
+  if (typeof value === "string") {
+    const trimmed = value.trim();
+    if (trimmed.length > 2e4 || !/^[{[]/.test(trimmed))
+      return void 0;
+    try {
+      return squireLoginWallIn(JSON.parse(trimmed), depth + 1);
+    } catch {
+      return void 0;
+    }
+  }
+  if (Array.isArray(value)) {
+    for (const entry of value) {
+      const found = squireLoginWallIn(entry, depth + 1);
+      if (found)
+        return found;
+    }
+    return void 0;
+  }
+  const item = record(value);
+  if (!item)
+    return void 0;
+  const needsUser = record(item.needs_user);
+  if (needsUser?.wall === "google_session") {
+    const message = shortString(needsUser.message);
+    if (message)
+      return { wall: "google_session", message };
+  }
+  const oauth = record(item.oauth);
+  if (oauth?.state === "awaiting_human") {
+    const reason = shortString(oauth.reason);
+    if (reason)
+      return { wall: "awaiting_human", message: reason };
+  }
+  for (const entry of Object.values(item)) {
+    const found = squireLoginWallIn(entry, depth + 1);
+    if (found)
+      return found;
+  }
+  return void 0;
+}
+function squireLoginWallFromMcp(request, response) {
+  if (!request || request.method !== "tools/call" || request.id !== response.id)
+    return void 0;
+  if (!("result" in response))
+    return void 0;
+  return squireLoginWallIn(response.result);
+}
 async function postSquireApproval(approval, authFile, signInUrl, fetchImpl = fetch) {
   const auth = JSON.parse(await readFile(authFile, "utf8"));
   const context = JSON.parse(await readFile(auth.turnContextPath, "utf8"));
@@ -23495,6 +23551,22 @@ async function postSquireApproval(approval, authFile, signInUrl, fetchImpl = fet
     signal: AbortSignal.timeout(2e4)
   });
 }
+async function postSquireLoginWall(wall, authFile, fetchImpl = fetch) {
+  const auth = JSON.parse(await readFile(authFile, "utf8"));
+  const context = JSON.parse(await readFile(auth.turnContextPath, "utf8"));
+  if (![context.roomId, context.requestId, context.generationId].every((value) => typeof value === "string" && value.length > 0))
+    return;
+  await fetchImpl(new URL("/v1/daemon/operations/postSquireLoginWall", auth.baseUrl), {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${auth.daemonToken}`,
+      "content-type": "application/json",
+      "x-beeline-helper-version": auth.helperVersion ?? "v0.0.0"
+    },
+    body: JSON.stringify({ ...context, wall: wall.wall, message: wall.message }),
+    signal: AbortSignal.timeout(2e4)
+  });
+}
 function resourceCallFacts(message, target) {
   if (message.method !== "tools/call")
     return {};
@@ -23560,6 +23632,11 @@ function runResourceFacade(env = process.env) {
       if (request?.drivenUrl && activeSquireBrowserUrl === request.drivenUrl)
         activeSquireBrowserUrl = void 0;
     }
+    const loginWall = squireLoginWallFromMcp(request?.message, message);
+    if (loginWall) {
+      await postSquireLoginWall(loginWall, authFile).catch(() => {
+      });
+    }
   };
   const authorizedResponseIds = /* @__PURE__ */ new Set();
   let child;
@@ -23725,7 +23802,7 @@ function configureNetworkFamilyDefaults(network = net) {
 configureNetworkFamilyDefaults();
 
 // apps/body/dist/cli.js
-import { dirname as dirname26, resolve as resolve39 } from "node:path";
+import { dirname as dirname27, resolve as resolve39 } from "node:path";
 import { stdin as stdin4, stdout as stdout5 } from "node:process";
 
 // node_modules/@clack/core/dist/index.mjs
@@ -25808,7 +25885,13 @@ async function installSquire(options) {
   if (resolution.reResolved) {
     log2(`trusty-squire stale copy ${resolution.resolvedVersion ?? "unknown"} re-resolved against current release ${resolution.currentRelease}`);
   }
-  const install = await streamRun("npx", [...resolution.npxArgs, "connect", "--target=codex", "--json"], squireConnectProcessEnv(profileDir));
+  const install = await streamRun("npx", [
+    ...resolution.npxArgs,
+    "connect",
+    "--target=codex",
+    "--json",
+    ...options.forceReloginProvider ? [`--force-relogin=${options.forceReloginProvider}`] : []
+  ], squireConnectProcessEnv(profileDir));
   const report = install.report;
   const version = resolution.resolvedVersion;
   if (!report) {
@@ -26543,549 +26626,1143 @@ function isAllowedAgentModelConfigCategory(category, id) {
 // apps/body/dist/model-config.js
 import { lstatSync, readFileSync as readFileSync3 } from "node:fs";
 import { basename as basename3, resolve as resolve9 } from "node:path";
-var GROK_SESSION_MODEL_AXIS_ID = "beeline:grok-session-model";
-var GROK_LAUNCH_EFFORT_AXIS_ID = "beeline:grok-launch-reasoning-effort";
-function isGrokAgentCommand(agent) {
-  if (agent.kind === "grok")
-    return true;
-  if (agent.kind && agent.kind !== "custom")
+
+// packages/api-contract/dist/daemon-operations.js
+function isAgentCommand(value) {
+  if (!value || typeof value !== "object")
     return false;
-  return /^grok(?:\.[a-z0-9]+)?$/i.test(basename3(agent.command));
-}
-function agentArgsWithModelSelection(agent, selection) {
-  const original = [...agent.args];
-  if (!selection || !selection.model && !selection.effort || !isGrokAgentCommand(agent) || !original.includes("agent") || !original.includes("stdio")) {
-    return original;
-  }
-  const stripped = [];
-  for (let index = 0; index < original.length; index += 1) {
-    const arg = original[index];
-    if (arg === "-m" || arg === "--model" || arg === "--reasoning-effort") {
-      index += 1;
-      continue;
-    }
-    if (arg.startsWith("--model=") || arg.startsWith("--reasoning-effort=") || /^-m=/.test(arg)) {
-      continue;
-    }
-    stripped.push(arg);
-  }
-  const stdioIndex = stripped.lastIndexOf("stdio");
-  const configured = [
-    ...selection.model ? ["--model", selection.model] : [],
-    ...selection.effort ? ["--reasoning-effort", selection.effort] : []
-  ];
-  stripped.splice(stdioIndex, 0, ...configured);
-  return stripped;
-}
-function advertisedChoiceId(choice) {
-  if (typeof choice.id === "string" && choice.id.length > 0)
-    return choice.id;
-  if (typeof choice.value === "string" && choice.value.length > 0)
-    return choice.value;
-  return void 0;
+  const c2 = value;
+  if (![
+    "id",
+    "roomId",
+    "agentId",
+    "sourceMessageId",
+    "turnRequestId",
+    "rootCommandId",
+    "rootSourceMessageId",
+    "reason"
+  ].every((key) => typeof c2[key] === "string" && c2[key].length > 0))
+    return false;
+  if (!["input", "resume", "stop", "restart"].includes(String(c2.action)) || !Number.isInteger(c2.agentDepth) || Number(c2.agentDepth) < 0 || Number(c2.agentDepth) > 3)
+    return false;
+  const source = c2.source;
+  return Boolean(source && typeof source.id === "string" && typeof source.authorId === "string" && typeof source.body === "string" && typeof source.createdAt === "number" && Array.isArray(source.attachments));
 }
-function sortModelChoicesNewestFirst(choices) {
-  return choices.map((choice, index) => ({ choice, index })).sort((left, right) => {
-    const leftParts = left.choice.id.match(/\d+/g)?.map(Number) ?? [];
-    const rightParts = right.choice.id.match(/\d+/g)?.map(Number) ?? [];
-    for (let index = 0; index < Math.max(leftParts.length, rightParts.length); index += 1) {
-      const delta = (rightParts[index] ?? -1) - (leftParts[index] ?? -1);
-      if (delta !== 0)
-        return delta;
-    }
-    return left.index - right.index;
-  }).map(({ choice }) => choice);
+
+// packages/api-contract/dist/artifacts.js
+var ARTIFACT_EXTENSIONS_BY_MIME = {
+  "text/html": [".html", ".htm"],
+  "image/svg+xml": [".svg"],
+  "application/pdf": [".pdf"],
+  "text/markdown": [".md"],
+  "image/png": [".png"],
+  "image/jpeg": [".jpg", ".jpeg"],
+  "image/gif": [".gif"],
+  "image/webp": [".webp"],
+  "text/plain": [".txt", ".log"],
+  "application/json": [".json"],
+  "text/csv": [".csv"],
+  "application/zip": [".zip"],
+  "application/octet-stream": []
+};
+var ARTIFACT_MIME_BY_EXTENSION = Object.fromEntries(Object.entries(ARTIFACT_EXTENSIONS_BY_MIME).flatMap(([mime, extensions]) => extensions.map((extension2) => [extension2, mime])));
+var ARTIFACT_MAXIMUM_BYTES = 25 * 1024 * 1024;
+
+// packages/api-contract/dist/daemon.js
+init_agent_access();
+
+// packages/api-contract/dist/system-events.js
+var SERVER_EVENT_KINDS = [
+  "joined",
+  "schedule-ran",
+  "corner-opened",
+  "check-passed",
+  "check-failed",
+  "merged",
+  "grant-decided",
+  "connector-offer-decided",
+  "turn-cancelled",
+  "choice-answered",
+  "choice-skipped",
+  "poll-closed",
+  "workflow-handoff"
+];
+
+// packages/api-contract/dist/turn-silence.js
+var HICCUP_BACKOFF_MS = [0, 5e3, 2e4];
+var TURN_SILENCE_KINDS = [
+  "hiccup",
+  "wrong-model",
+  "allowance-spent",
+  "not-signed-in",
+  "workspace-failure",
+  "helper-out-of-date",
+  "update-interrupted",
+  "offline"
+];
+var TURN_RECEIPT_REASON_KINDS = [
+  "hiccup",
+  "wrong-model",
+  "allowance-spent",
+  "not-signed-in",
+  "workspace-failure",
+  "helper-out-of-date",
+  "update-interrupted",
+  "offline",
+  "model-selection-unavailable"
+];
+function isTurnReceiptReasonKind(value) {
+  return typeof value === "string" && TURN_RECEIPT_REASON_KINDS.includes(value);
 }
-function parseAdvertisedConfigOptions(raw, preferredModelId, includeLaunchEffort = false) {
-  const configOptions = raw?.configOptions;
-  const result = [];
-  for (const entry of Array.isArray(configOptions) ? configOptions : []) {
-    if (!entry || typeof entry !== "object")
-      continue;
-    const record6 = entry;
-    const id = record6.id;
-    const category = record6.category;
-    if (typeof id !== "string" || typeof category !== "string")
-      continue;
-    const rawChoices = Array.isArray(record6.options) ? record6.options : [];
-    const choices = [];
-    for (const rawChoice of rawChoices) {
-      if (!rawChoice || typeof rawChoice !== "object")
-        continue;
-      const choice = rawChoice;
-      const choiceId = advertisedChoiceId(choice);
-      if (!choiceId)
-        continue;
-      choices.push({
-        id: choiceId,
-        ...typeof choice.name === "string" ? { name: choice.name } : {}
-      });
-    }
-    result.push({
-      id,
-      category,
-      ...typeof record6.currentValue === "string" ? { currentValue: record6.currentValue } : {},
-      options: category === "model" ? sortModelChoicesNewestFirst(choices) : choices
-    });
-  }
-  const models = raw?.models;
-  if (!models || typeof models !== "object")
-    return result;
-  const modelState = models;
-  const availableModels = Array.isArray(modelState.availableModels) ? modelState.availableModels : [];
-  const modelChoices = [];
-  for (const entry of availableModels) {
-    if (!entry || typeof entry !== "object")
-      continue;
-    const model = entry;
-    if (typeof model.modelId !== "string" || !model.modelId)
-      continue;
-    modelChoices.push({
-      id: model.modelId,
-      ...typeof model.name === "string" ? { name: model.name } : {}
-    });
-  }
-  const currentModelId = typeof modelState.currentModelId === "string" ? modelState.currentModelId : void 0;
-  if (modelChoices.length > 0 && !result.some((axis) => axis.category === "model")) {
-    result.push({
-      id: GROK_SESSION_MODEL_AXIS_ID,
-      category: "model",
-      ...currentModelId ? { currentValue: currentModelId } : {},
-      options: sortModelChoicesNewestFirst(modelChoices)
-    });
-  }
-  const effortModelId = preferredModelId ?? currentModelId;
-  const currentModel = availableModels.find((entry) => entry && typeof entry === "object" && entry.modelId === effortModelId);
-  const meta = currentModel?._meta;
-  const modelMeta = meta && typeof meta === "object" ? meta : void 0;
-  const efforts = Array.isArray(modelMeta?.reasoningEfforts) ? modelMeta.reasoningEfforts : [];
-  const effortChoices = [];
-  for (const entry of efforts) {
-    if (!entry || typeof entry !== "object")
-      continue;
-    const effort = entry;
-    const id = advertisedChoiceId(effort);
-    if (!id)
-      continue;
-    effortChoices.push({
-      id,
-      ...typeof effort.label === "string" ? { name: effort.label } : typeof effort.name === "string" ? { name: effort.name } : {}
-    });
-  }
-  const hasEffortAxis = result.some((axis) => ["thought_level", "effort", "reasoning_effort"].includes(axis.category));
-  if (includeLaunchEffort && effortChoices.length > 0 && !hasEffortAxis) {
-    const currentEffort = typeof modelMeta?.reasoningEffort === "string" ? modelMeta.reasoningEffort : efforts.find((entry) => entry && typeof entry === "object" && entry.default)?.value;
-    result.push({
-      id: GROK_LAUNCH_EFFORT_AXIS_ID,
-      category: "reasoning_effort",
-      ...typeof currentEffort === "string" ? { currentValue: currentEffort } : {},
-      options: effortChoices
-    });
-  }
-  return result;
+function receiptKindToSilenceKind(kind) {
+  if (kind === "model-selection-unavailable" || kind === "wrong-model")
+    return "wrong-model";
+  if (kind && TURN_SILENCE_KINDS.includes(kind))
+    return kind;
+  return "hiccup";
 }
-function filterAllowedModelConfigOptions(options) {
-  return options.filter((option) => isAllowedAgentModelConfigCategory(option.category, option.id));
+var ALLOWANCE_UNTIL = /(?:try again at|until|resets?(?: at)?|available(?: again)?(?: at)?)\s+([A-Z][a-z]{2,9}\s+\d{1,2}(?:st|nd|rd|th)?,?\s+\d{4}(?:\s+\d{1,2}:\d{2}(?:\s*[AP]M)?)?)/i;
+var REPO_FROM_URL = /github\.com[:/]([^/\s]+\/[^/\s.]+?)(?:\.git)?(?:[/\s]|$)/i;
+var REPO_FROM_SLUG = /\b([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)\b/;
+function firstMatch(value, pattern) {
+  const match = value.match(pattern);
+  const captured = match?.[1]?.trim();
+  return captured || void 0;
 }
-var PROVIDER_CREDENTIAL_ENV_HINTS = {
-  openai: ["OPENAI_API_KEY", "OPENAI_COMPAT_API_KEY"],
-  openrouter: ["OPENROUTER_API_KEY"],
-  anthropic: ["ANTHROPIC_API_KEY"],
-  google: ["GOOGLE_API_KEY", "GEMINI_API_KEY"],
-  groq: ["GROQ_API_KEY"],
-  mistral: ["MISTRAL_API_KEY"],
-  deepseek: ["DEEPSEEK_API_KEY"],
-  xai: ["XAI_API_KEY"],
-  cohere: ["COHERE_API_KEY"],
-  together: ["TOGETHER_API_KEY"],
-  fireworks: ["FIREWORKS_API_KEY"]
-};
-function credentialedProviders(env) {
-  const held = /* @__PURE__ */ new Set();
-  for (const [provider, names] of Object.entries(PROVIDER_CREDENTIAL_ENV_HINTS)) {
-    if (names.some((name) => Boolean(env[name]?.trim())))
-      held.add(provider);
-  }
-  for (const provider of credentialedPiCustomProviders(env))
-    held.add(provider);
-  return held;
+function isAuthShapedFault(text2) {
+  return /authentication required/i.test(text2) || /not signed in/i.test(text2) || /isn't signed in/i.test(text2) || /invalid api[_ -]?key/i.test(text2) || /\b401\b/.test(text2);
 }
-function credentialedPiCustomProviders(env) {
-  const agentDir = env.PI_CODING_AGENT_DIR?.trim() ? resolve9(env.PI_CODING_AGENT_DIR) : env.HOME?.trim() ? resolve9(env.HOME, ".pi/agent") : void 0;
-  const held = /* @__PURE__ */ new Set();
-  if (!agentDir)
-    return held;
-  const path = resolve9(agentDir, "models.json");
-  try {
-    const stats = lstatSync(path);
-    if (!stats.isFile() || stats.isSymbolicLink() || stats.nlink !== 1 || stats.size > 1048576) {
-      return held;
+function classifyTurnSilence(reason, reasonKind) {
+  if (isTurnReceiptReasonKind(reasonKind)) {
+    const kind = receiptKindToSilenceKind(reasonKind);
+    if (kind === "hiccup") {
+      return { kind, fault: (reason ?? "").trim() || "the turn stalled" };
     }
-    const parsed = JSON.parse(readFileSync3(path, "utf8"));
-    const providers = parsed.providers;
-    const remember = (name, config) => {
-      if (typeof name !== "string" || !name.trim() || !config || typeof config !== "object")
-        return;
-      const apiKey = config.apiKey;
-      if (typeof apiKey === "string" && apiKey.trim())
-        held.add(name.trim());
+    return {
+      kind,
+      ...kind === "allowance-spent" ? { allowanceUntil: firstMatch(reason ?? "", ALLOWANCE_UNTIL) } : {},
+      ...kind === "workspace-failure" ? { repo: repoFromReason(reason ?? "") } : {}
     };
-    if (Array.isArray(providers)) {
-      for (const provider of providers) {
-        const record6 = provider;
-        remember(record6?.name ?? record6?.id, record6);
-      }
-    } else if (providers && typeof providers === "object") {
-      for (const [name, config] of Object.entries(providers)) {
-        remember(name, config);
-      }
-    }
-  } catch {
   }
-  return held;
-}
-function filterModelOptionsByCredentials(options, env) {
-  const held = credentialedProviders(env);
-  return options.map((option) => {
-    if (option.category !== "model")
-      return option;
+  const text2 = (reason ?? "").trim();
+  if (!text2)
+    return { kind: "hiccup", fault: "the turn stalled" };
+  if (/model selection unavailable/i.test(text2) || /isn't available/i.test(text2) || /not advertised/i.test(text2)) {
+    return { kind: "wrong-model" };
+  }
+  if (/\b402\b/.test(text2) || /usage limit/i.test(text2) || /more credits/i.test(text2) || /quota/i.test(text2) || /allowance is spent/i.test(text2)) {
     return {
-      ...option,
-      options: option.options.filter((choice) => {
-        const slash = choice.id.indexOf("/");
-        if (slash < 0)
-          return true;
-        return held.has(choice.id.slice(0, slash));
-      })
+      kind: "allowance-spent",
+      allowanceUntil: firstMatch(text2, ALLOWANCE_UNTIL)
     };
-  });
-}
-var DisallowedModelConfigOptionError = class extends Error {
-  constructor(configId) {
-    super(`model config option "${configId}" is not in the allow-listed catalog`);
-    this.name = "DisallowedModelConfigOptionError";
-  }
-};
-function supportsFastMode(options) {
-  const axis = options.find((option) => option.id === "fast-mode" && option.category === "model_config");
-  return Boolean(axis?.options.some((choice) => choice.id === "on") && axis.options.some((choice) => choice.id === "off"));
-}
-var ModelSelectionUnavailableError = class extends Error {
-  label;
-  value;
-  reason;
-  guidance;
-  constructor(input) {
-    const recovery = input.guidance ? ` ${input.guidance}` : " Choose one of the values in the live harness catalog.";
-    super(`${input.label} "${input.value}" is unavailable.${recovery}`);
-    this.name = "ModelSelectionUnavailableError";
-    this.label = input.label;
-    this.value = input.value;
-    this.reason = input.reason;
-    this.guidance = input.guidance;
   }
-};
-function withEffectiveCurrentValues(options, selection) {
-  if (!selection || !selection.model && !selection.effort)
-    return options;
-  return options.map((option) => {
-    const target = modelSelectionTargets(selection).find((entry) => entry.categories.includes(option.category));
-    if (!target?.value || option.currentValue === target.value)
-      return option;
-    return { ...option, currentValue: target.value };
-  });
-}
-function modelSelectionTargets(selection) {
-  return [
-    { categories: ["model"], label: "model", value: selection.model },
-    {
-      categories: ["thought_level", "effort", "reasoning_effort"],
-      label: "effort",
-      value: selection.effort
-    }
-  ];
-}
-function assertModelConfigAxisAllowed(configId, advertisedOptions) {
-  const axis = advertisedOptions.find((option) => option.id === configId);
-  if (!axis || !isAllowedAgentModelConfigCategory(axis.category, axis.id)) {
-    throw new DisallowedModelConfigOptionError(configId);
+  if (isAuthShapedFault(text2)) {
+    return { kind: "not-signed-in" };
   }
-}
-async function applyAgentModelSelectionWithUpdatedCatalog(client, sessionId, advertisedOptions, selection) {
-  let currentOptions = advertisedOptions;
-  for (const target of modelSelectionTargets(selection)) {
-    if (!target.value)
-      continue;
-    const axis = currentOptions.find((option) => target.categories.includes(option.category));
-    if (!axis)
-      continue;
-    assertModelConfigAxisAllowed(axis.id, currentOptions);
-    if (!axis.options.some((choice) => choice.id === target.value)) {
-      throw new ModelSelectionUnavailableError({
-        label: target.label,
-        value: target.value,
-        reason: "not-advertised"
-      });
-    }
-    try {
-      if (axis.id === GROK_SESSION_MODEL_AXIS_ID) {
-        if (!client.setModel)
-          throw new Error("ACP client does not support session/set_model");
-        await client.setModel(sessionId, target.value);
-      } else if (axis.id === GROK_LAUNCH_EFFORT_AXIS_ID) {
-        if (axis.currentValue !== target.value) {
-          throw new Error(`Grok started with reasoning effort "${axis.currentValue ?? "unknown"}", not "${target.value}"`);
-        }
-      } else {
-        const updated = await client.setConfigOption(sessionId, axis.id, target.value);
-        const refreshed = filterAllowedModelConfigOptions(parseAdvertisedConfigOptions(updated, selection.model));
-        if (refreshed.length > 0)
-          currentOptions = refreshed;
-      }
-    } catch (error) {
-      throw new ModelSelectionUnavailableError({
-        label: target.label,
-        value: target.value,
-        reason: "provider-refused",
-        guidance: error instanceof Error ? error.message : String(error)
-      });
-    }
+  if (/command protocol/i.test(text2) || /refusing intake/i.test(text2) || /helper is out of date/i.test(text2)) {
+    return { kind: "helper-out-of-date" };
   }
-  if (selection.fastMode && !supportsFastMode(currentOptions)) {
-    throw new Error("Fast mode is unavailable for the selected model and harness");
+  if (/working copy/i.test(text2) || /could not (?:clone|fetch|checkout)/i.test(text2) || /repository not found/i.test(text2) || /could not resolve host/i.test(text2) || /failed to start corner/i.test(text2) || /unable to access/i.test(text2) || /\bgit clone\b/i.test(text2) || /repository state is not verified/i.test(text2) || /incomplete repository binding/i.test(text2) || /no authoritative objective fact/i.test(text2) || /profile_busy/i.test(text2) || /broker unavailable/i.test(text2)) {
+    return { kind: "workspace-failure", repo: repoFromReason(text2) };
   }
-  if (supportsFastMode(currentOptions)) {
-    await client.setConfigOption(sessionId, "fast-mode", selection.fastMode ? "on" : "off");
+  if (/helper isn't running/i.test(text2) || /helper is offline/i.test(text2)) {
+    return { kind: "offline" };
   }
-  return currentOptions;
+  const fault = text2 || "the turn stalled";
+  return { kind: "hiccup", fault };
 }
-async function applyAgentModelSelection(client, sessionId, advertisedOptions, selection) {
-  await applyAgentModelSelectionWithUpdatedCatalog(client, sessionId, advertisedOptions, selection);
+function repoFromReason(text2) {
+  return firstMatch(text2, REPO_FROM_URL) ?? firstMatch(text2, REPO_FROM_SLUG) ?? "the repository";
+}
+function isStandingWorkspaceConfigurationFault(text2) {
+  return /repository state is not verified/i.test(text2) || /incomplete repository binding/i.test(text2) || /no authoritative objective fact/i.test(text2);
+}
+function hiccupBackoffMs(attempt) {
+  const index = Math.max(1, attempt) - 1;
+  return HICCUP_BACKOFF_MS[Math.min(index, HICCUP_BACKOFF_MS.length - 1)] ?? 0;
 }
 
-// apps/body/dist/model-catalog.js
-import { mkdtemp, rm as rm3 } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { resolve as resolve10 } from "node:path";
-
-// apps/body/dist/acp.js
-init_adapter_install_lock();
-import { spawn as spawn10 } from "node:child_process";
-import { EventEmitter } from "node:events";
-
-// apps/body/dist/harness-capabilities.js
-init_cursor_acp_bridge();
-var PROFILES = [
-  {
-    match: /(^|[/\\])codex-acp(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "sandboxed",
-      note: "codex-acp asks for every command/file change and enforces an offline read-only OS sandbox in read-only mode; under bubblewrap a Room runs it in agent-full-access and bwrap holds the filesystem rule"
-    }
-  },
-  {
-    match: /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "permission-callback",
-      note: "claude-agent-acp asks for every tool call; it advertises no read-only mode, so the daemon callback is the only boundary"
-    }
-  },
-  {
-    match: /(^|[/\\])pi-acp(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "none",
-      note: "pi-acp never sends session/request_permission for a tool call: pi executes reads, writes, edits, and shell commands before the daemon sees them, and exposes no sandbox or permission flag to pass at spawn"
-    }
-  },
-  {
-    match: /(^|[/\\])grok(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "permission-callback",
-      note: "grok sends standard session/request_permission requests for mutating tools in its default ask mode; it advertises no read-only ACP mode, so the daemon callback is the only boundary unless the OS sandbox wraps it"
-    }
-  },
-  {
-    match: /(^|[/\\])buzz-agent(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "permission-callback",
-      note: "buzz-agent sends session/request_permission for mutating tools"
-    }
-  },
-  {
-    match: CURSOR_HARNESS_COMMAND,
-    profile: {
-      enforcement: "none",
-      note: "cursor-acp-bridge drives cursor-agent with --force --approve-mcps in non-interactive stream-json mode, so cursor-agent never sends session/request_permission; Beeline already sandboxes the child"
-    }
-  }
-];
-function harnessEnforcement(agentCommand) {
-  if (!agentCommand)
-    return { enforcement: "unknown", note: "no ACP command configured" };
-  for (const { match, profile } of PROFILES) {
-    if (match.test(agentCommand))
-      return profile;
+// packages/api-contract/dist/institutional-memory.js
+var INSTITUTIONAL_MEMORY_PROPOSAL_VERSION = 1;
+var INSTITUTIONAL_MEMORY_BODY_MAX_BYTES = 200;
+var INSTITUTIONAL_MEMORY_KEYWORDS_MIN = 1;
+var INSTITUTIONAL_MEMORY_KEYWORDS_MAX = 6;
+var INSTITUTIONAL_MEMORY_KEYWORD_PATTERN = /^[a-z0-9][a-z0-9_./-]{2,31}$/;
+var INSTITUTIONAL_MEMORY_STOPWORDS = /* @__PURE__ */ new Set([
+  "the",
+  "and",
+  "you",
+  "your",
+  "for",
+  "with",
+  "that",
+  "this",
+  "are",
+  "was",
+  "were",
+  "but",
+  "not",
+  "have",
+  "has",
+  "had",
+  "can",
+  "all",
+  "any",
+  "our",
+  "out",
+  "use",
+  "get",
+  "got",
+  "how",
+  "what",
+  "when",
+  "who",
+  "why",
+  "will",
+  "just",
+  "from",
+  "they",
+  "them",
+  "then",
+  "than",
+  "there",
+  "here",
+  "about",
+  "into",
+  "also",
+  "its",
+  "it's",
+  "please",
+  "should",
+  "would",
+  "could",
+  "some",
+  "more",
+  "most",
+  "very",
+  "only",
+  "one",
+  "now",
+  "yes",
+  "okay",
+  "let",
+  "make",
+  "want",
+  "need",
+  "does",
+  "did",
+  "done",
+  "like",
+  "know",
+  "think",
+  "see",
+  "look",
+  "thing",
+  "things",
+  "way"
+]);
+var INSTITUTIONAL_STANDING_PREFERENCE_KEY = "standing";
+var INSTITUTIONAL_MEMORY_CANONICAL_KEY_MAX_LENGTH = 160;
+var INSTITUTIONAL_MEMORY_RATIONALE_MAX_LENGTH = 500;
+var INSTITUTIONAL_MEMORY_SOURCE_MESSAGE_MAX = 16;
+var INSTITUTIONAL_MEMORY_JOB_ERROR_MAX_LENGTH = 1e3;
+var WORKSPACE_SKILL_DESCRIPTION_MAX_LENGTH = 60;
+var WORKSPACE_SKILL_MARKDOWN_MAX_BYTES = 32 * 1024;
+var WORKSPACE_SKILL_SLUG_MAX_LENGTH = 64;
+var INSTITUTIONAL_REVIEW_FINDING_MAX = 20;
+var INSTITUTIONAL_CURATOR_ACTION_MAX = 50;
+function record2(value, label) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error(`${label} must be an object`);
   }
-  return {
-    enforcement: "unknown",
-    note: `'${agentCommand}' has not been verified to send session/request_permission for mutating tools`
-  };
+  return value;
 }
-function harnessHonorsSessionSystemPrompt(agentCommand) {
-  return Boolean(agentCommand && /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i.test(agentCommand));
+function exactKeys(value, allowed, label) {
+  const unknown = Object.keys(value).find((key) => !allowed.includes(key));
+  if (unknown)
+    throw new Error(`${label} has unknown field ${unknown}`);
 }
-var GROK_WARM_SESSION_IDLE_MS = 30 * 6e4;
-function cornerAutonomyModeCandidates(agentCommand) {
-  if (agentCommand && /(^|[/\\])codex-acp(\.[a-z]+)?$/i.test(agentCommand)) {
-    return ["agent-full-access"];
+function omitted(value) {
+  return value === void 0 || value === null;
+}
+function boundedText(value, label, maximum, bytes = false) {
+  if (typeof value !== "string" || value.includes("\0"))
+    throw new Error(`${label} is invalid`);
+  const normalized = value.trim();
+  const size = bytes ? new TextEncoder().encode(normalized).length : normalized.length;
+  if (!normalized || size > maximum)
+    throw new Error(`${label} is invalid`);
+  return normalized;
+}
+var FILLER_OPENINGS = /^(?:the user|user|this user|the requester|requester|it is|it's|note that|please|remember that|keep in mind)\b/i;
+var HEDGES = /\b(?:maybe|perhaps|probably|possibly|might|seems?|i think|apparently|likely)\b/i;
+function conciseInstitutionalMemoryBody(value) {
+  const body = boundedText(value, `institutional memory body (at most ${INSTITUTIONAL_MEMORY_BODY_MAX_BYTES} bytes)`, INSTITUTIONAL_MEMORY_BODY_MAX_BYTES, true);
+  if (FILLER_OPENINGS.test(body)) {
+    throw new Error("institutional memory body must state the fact itself, without a filler opening");
   }
-  if (agentCommand && /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i.test(agentCommand)) {
-    return ["bypassPermissions"];
+  if (/[.!?;]\s+\S/.test(body) || /\n/.test(body)) {
+    throw new Error("institutional memory body must be one sentence");
   }
-  if (agentCommand && /(^|[/\\])grok(\.[a-z]+)?$/i.test(agentCommand))
-    return [];
-  if (agentCommand && /(^|[/\\])pi-acp(\.[a-z]+)?$/i.test(agentCommand))
-    return [];
-  return ["agent", "edit", "code"];
+  if (HEDGES.test(body)) {
+    throw new Error("institutional memory body must not hedge; save only what is known");
+  }
+  return body;
 }
-function roomModeCandidates(agentCommand, options = {}) {
-  if (options.osSandbox && agentCommand && /(^|[/\\])codex-acp(\.[a-z]+)?$/i.test(agentCommand)) {
-    return ["agent-full-access"];
+function institutionalMemoryKeywords(value) {
+  if (!Array.isArray(value) || value.length < INSTITUTIONAL_MEMORY_KEYWORDS_MIN || value.length > INSTITUTIONAL_MEMORY_KEYWORDS_MAX) {
+    throw new Error(`institutional memory needs ${INSTITUTIONAL_MEMORY_KEYWORDS_MIN} to ${INSTITUTIONAL_MEMORY_KEYWORDS_MAX} keywords`);
   }
-  return ["read-only", "readonly"];
+  const keywords = value.map((keyword) => typeof keyword === "string" ? keyword.trim().toLocaleLowerCase("en-US") : "");
+  if (keywords.some((keyword) => !INSTITUTIONAL_MEMORY_KEYWORD_PATTERN.test(keyword) || INSTITUTIONAL_MEMORY_STOPWORDS.has(keyword))) {
+    throw new Error("institutional memory keywords are distinctive single lower-case words of 3 to 32 letters, digits, or _./-");
+  }
+  if (new Set(keywords).size !== keywords.length) {
+    throw new Error("institutional memory keywords must be unique");
+  }
+  return keywords;
 }
-function harnessDeclaresShellExecuteKind(agentCommand) {
-  return Boolean(agentCommand && (/(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i.test(agentCommand) || /(^|[/\\])grok(\.[a-z]+)?$/i.test(agentCommand)));
+function parseInstitutionalMemoryProposal(value) {
+  const proposal = record2(value, "institutional memory proposal");
+  exactKeys(proposal, [
+    "proposalVersion",
+    "candidateType",
+    "memoryKind",
+    "subjectIdentityId",
+    "canonicalKey",
+    "body",
+    "keywords",
+    "source",
+    "audience",
+    "confidence",
+    "classification",
+    "cas"
+  ], "institutional memory proposal");
+  if (proposal.proposalVersion !== INSTITUTIONAL_MEMORY_PROPOSAL_VERSION) {
+    throw new Error("institutional memory proposal version is unsupported");
+  }
+  if (proposal.candidateType !== "correction_candidate" && proposal.candidateType !== "fact_candidate" && proposal.candidateType !== "preference_candidate") {
+    throw new Error("institutional memory candidate type is invalid");
+  }
+  if (proposal.memoryKind !== "workspace_fact" && proposal.memoryKind !== "human_profile_fact") {
+    throw new Error("institutional memory kind is invalid");
+  }
+  if (proposal.audience !== "workspace" && proposal.audience !== "human_profile") {
+    throw new Error("institutional memory audience is invalid");
+  }
+  if (typeof proposal.confidence !== "number" || !Number.isFinite(proposal.confidence) || proposal.confidence < 0 || proposal.confidence > 1) {
+    throw new Error("institutional memory confidence is invalid");
+  }
+  const source = record2(proposal.source, "institutional memory source");
+  exactKeys(source, ["roomId", "messageIds"], "institutional memory source");
+  const roomId = boundedText(source.roomId, "institutional memory source room", 200);
+  if (!Array.isArray(source.messageIds) || source.messageIds.length === 0 || source.messageIds.length > INSTITUTIONAL_MEMORY_SOURCE_MESSAGE_MAX) {
+    throw new Error("institutional memory source messages are invalid");
+  }
+  const messageIds = source.messageIds.map((messageId) => boundedText(messageId, "institutional memory source message", 200));
+  if (new Set(messageIds).size !== messageIds.length) {
+    throw new Error("institutional memory source messages must be unique");
+  }
+  const classification = record2(proposal.classification, "institutional memory classification");
+  exactKeys(classification, ["stillTrueForAnotherRequester", "subjectIsRequester", "rationale"], "institutional memory classification");
+  if (classification.stillTrueForAnotherRequester !== void 0 && typeof classification.stillTrueForAnotherRequester !== "boolean") {
+    throw new Error("institutional memory classification test is invalid");
+  }
+  if (classification.subjectIsRequester !== void 0 && typeof classification.subjectIsRequester !== "boolean") {
+    throw new Error("institutional memory subject classification is invalid");
+  }
+  const canonicalKey = boundedText(proposal.canonicalKey, "institutional memory canonical key", INSTITUTIONAL_MEMORY_CANONICAL_KEY_MAX_LENGTH);
+  if (canonicalKey === INSTITUTIONAL_STANDING_PREFERENCE_KEY) {
+    throw new Error("the standing preference key is reserved for owner-confirmed preferences");
+  }
+  const rationale = boundedText(classification.rationale, "institutional memory classification rationale", INSTITUTIONAL_MEMORY_RATIONALE_MAX_LENGTH);
+  const cas = record2(proposal.cas, "institutional memory CAS");
+  exactKeys(cas, ["baseVersion", "supersedesItemId"], "institutional memory CAS");
+  if (cas.baseVersion !== null && (!Number.isSafeInteger(cas.baseVersion) || cas.baseVersion < 0)) {
+    throw new Error("institutional memory base version is invalid");
+  }
+  const supersedesItemId = cas.supersedesItemId === void 0 ? void 0 : boundedText(cas.supersedesItemId, "institutional memory supersedes item", 200);
+  const workspaceFact = proposal.memoryKind === "workspace_fact";
+  if (classification.subjectIsRequester !== void 0 && classification.subjectIsRequester === workspaceFact) {
+    throw new Error("institutional memory kind contradicts its subject");
+  }
+  if (proposal.audience === "workspace" !== workspaceFact) {
+    throw new Error("institutional memory audience contradicts its kind");
+  }
+  const subjectIdentityId = proposal.subjectIdentityId === void 0 ? void 0 : boundedText(proposal.subjectIdentityId, "institutional memory profile subject", 200);
+  if (workspaceFact === Boolean(subjectIdentityId)) {
+    throw new Error(workspaceFact ? "workspace facts cannot name a profile subject" : "human profile facts require a subject");
+  }
+  return {
+    proposalVersion: INSTITUTIONAL_MEMORY_PROPOSAL_VERSION,
+    candidateType: proposal.candidateType,
+    memoryKind: proposal.memoryKind,
+    ...subjectIdentityId ? { subjectIdentityId } : {},
+    canonicalKey,
+    body: conciseInstitutionalMemoryBody(proposal.body),
+    keywords: institutionalMemoryKeywords(proposal.keywords),
+    source: { roomId, messageIds },
+    audience: proposal.audience,
+    confidence: proposal.confidence,
+    classification: {
+      ...classification.stillTrueForAnotherRequester === void 0 ? {} : {
+        stillTrueForAnotherRequester: classification.stillTrueForAnotherRequester
+      },
+      ...classification.subjectIsRequester === void 0 ? {} : {
+        subjectIsRequester: classification.subjectIsRequester
+      },
+      rationale
+    },
+    cas: {
+      baseVersion: cas.baseVersion,
+      ...supersedesItemId ? { supersedesItemId } : {}
+    }
+  };
 }
-function roomShellCapability(agentCommand, options = {}) {
-  const { enforcement } = harnessEnforcement(agentCommand);
-  if (enforcement === "sandboxed" || enforcement === "none")
-    return "runs";
-  if (enforcement === "unknown")
-    return "unknown";
-  if (!harnessDeclaresShellExecuteKind(agentCommand))
-    return "unknown";
-  return options.osSandbox ? "runs" : "refused";
+function repositoryRelativePath(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 500)
+    return void 0;
+  if (value.startsWith("/") || value.includes("\\") || value.split("/").some((segment) => segment === ".." || segment === "")) {
+    return void 0;
+  }
+  return value;
 }
-
-// apps/body/dist/harness-tool-scope.js
-init_cursor_acp_bridge();
-var CLAUDE_TOOL_SCOPE_SETTINGS = { disableClaudeAiConnectors: true };
-var CLAUDE_PROFILE = {
-  // `settingSources: ['user']` admits the sanitized user MCP copy
-  // while rejecting repository/local/plugin MCP. `strictMcpConfig` cannot be
-  // used because it would reject the user copy too. Account-bound claude.ai
-  // cloud connectors remain off independently.
-  enforcement: "config-isolated",
-  note: "claude-agent-acp forwards _meta.claudeCode.options to the Claude Agent SDK; user-only settingSources loads MCP from the isolated CLAUDE_CONFIG_DIR without repository/local settings, while disableClaudeAiConnectors keeps account-bound connectors off",
-  sessionMeta: {
-    claudeCode: {
-      options: {
-        // Only the sanitized user config in the isolated CLAUDE_CONFIG_DIR;
-        // never a repository's .mcp.json, local settings, or plugins.
-        settingSources: ["user"],
-        // Account-bound claude.ai cloud connectors are not fetched at all.
-        settings: CLAUDE_TOOL_SCOPE_SETTINGS
+function optionalAnchorField(key, value) {
+  return value === void 0 ? {} : { [key]: value };
+}
+function parseInstitutionalMergeReviewProposal(value) {
+  const proposal = record2(value, "institutional merge review proposal");
+  exactKeys(proposal, ["proposalVersion", "skill", "findings"], "institutional merge review proposal");
+  if (proposal.proposalVersion !== 1) {
+    throw new Error("institutional merge review proposal version is unsupported");
+  }
+  let skill = null;
+  if (!omitted(proposal.skill)) {
+    const rawSkill = record2(proposal.skill, "workspace skill proposal");
+    exactKeys(rawSkill, ["slug", "description", "markdown", "baseVersion", "anchor"], "workspace skill proposal");
+    const slug = boundedText(rawSkill.slug, "workspace skill slug", WORKSPACE_SKILL_SLUG_MAX_LENGTH);
+    if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug)) {
+      throw new Error("workspace skill slug is invalid");
+    }
+    const anchor = record2(rawSkill.anchor, "workspace skill code anchor");
+    exactKeys(anchor, ["repository", "targetCommit", "path"], "workspace skill code anchor");
+    if (rawSkill.baseVersion !== null && (!Number.isSafeInteger(rawSkill.baseVersion) || rawSkill.baseVersion <= 0)) {
+      throw new Error("workspace skill base version is invalid");
+    }
+    skill = {
+      slug,
+      description: boundedText(rawSkill.description, "workspace skill description", WORKSPACE_SKILL_DESCRIPTION_MAX_LENGTH),
+      markdown: boundedText(rawSkill.markdown, "workspace skill markdown", WORKSPACE_SKILL_MARKDOWN_MAX_BYTES, true),
+      baseVersion: rawSkill.baseVersion,
+      anchor: {
+        repository: boundedText(anchor.repository, "workspace skill repository", 300),
+        targetCommit: boundedText(anchor.targetCommit, "workspace skill target commit", 160),
+        ...optionalAnchorField("path", repositoryRelativePath(anchor.path))
       }
+    };
+  }
+  if (!Array.isArray(proposal.findings) || proposal.findings.length > INSTITUTIONAL_REVIEW_FINDING_MAX) {
+    throw new Error("institutional review findings are invalid");
+  }
+  const findings = proposal.findings.map((value2) => {
+    const finding = record2(value2, "institutional review finding");
+    exactKeys(finding, ["taxonomy", "summary", "severity", "confidence", "path"], "institutional review finding");
+    if (finding.severity !== "info" && finding.severity !== "warning" && finding.severity !== "error") {
+      throw new Error("institutional review finding severity is invalid");
     }
-  },
-  metaSystemPrompt: true
-};
-var PROFILES2 = [
-  { match: /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i, profile: CLAUDE_PROFILE },
-  {
-    match: /(^|[/\\])codex-acp(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "config-isolated",
-      note: "codex-acp merges the session's MCP servers into $CODEX_HOME/config.toml's own [mcp_servers] instead of replacing them, so only an isolated CODEX_HOME scopes the session; the ChatGPT account's codex_apps connectors survive either way"
+    const severity = finding.severity;
+    if (typeof finding.confidence !== "number" || !Number.isFinite(finding.confidence) || finding.confidence < 0 || finding.confidence > 1) {
+      throw new Error("institutional review finding confidence is invalid");
     }
-  },
-  {
-    match: /(^|[/\\])pi-acp(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "config-isolated",
-      note: "pi-acp 0.0.33 still stores session/new mcpServers and never reads them; pi 0.85.1 itself has no MCP client, while optional pi-mcp-adapter reads $PI_CODING_AGENT_DIR/mcp.json and isolated homes exclude the settings.json that would load it"
+    return {
+      taxonomy: boundedText(finding.taxonomy, "institutional review finding taxonomy", 120),
+      summary: boundedText(finding.summary, "institutional review finding summary", 1e3),
+      severity,
+      confidence: finding.confidence,
+      ...omitted(finding.path) ? {} : { path: boundedText(finding.path, "institutional review finding path", 500) }
+    };
+  });
+  return { proposalVersion: 1, skill, findings };
+}
+function parseInstitutionalCuratorProposal(value) {
+  const proposal = record2(value, "institutional curator proposal");
+  exactKeys(proposal, ["proposalVersion", "partition", "actions"], "institutional curator proposal");
+  if (proposal.proposalVersion !== 1) {
+    throw new Error("institutional curator proposal version is unsupported");
+  }
+  const partition = boundedText(proposal.partition, "institutional curator partition", 300);
+  if (!Array.isArray(proposal.actions) || proposal.actions.length > INSTITUTIONAL_CURATOR_ACTION_MAX) {
+    throw new Error("institutional curator actions are invalid");
+  }
+  const actions = proposal.actions.map((value2) => {
+    const action = record2(value2, "institutional curator action");
+    exactKeys(action, [
+      "action",
+      "targetType",
+      "targetId",
+      "baseVersion",
+      "duplicateIds",
+      "body",
+      "description",
+      "markdown",
+      "rationale"
+    ], "institutional curator action");
+    if (action.action !== "retain" && action.action !== "stale" && action.action !== "archive" && action.action !== "consolidate") {
+      throw new Error("institutional curator action kind is invalid");
     }
-  },
-  {
-    match: /(^|[/\\])grok(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "config-isolated",
-      note: "grok loads the operator's own ~/.grok MCP servers even when session/new passes an empty mcpServers list (measured live), so only an isolated GROK_HOME scopes the session; no account-bound connector surface was found"
+    if (action.targetType !== "memory_item" && action.targetType !== "workspace_skill") {
+      throw new Error("institutional curator target type is invalid");
     }
-  },
-  {
-    match: /(^|[/\\])buzz-agent(\.[a-z]+)?$/i,
-    profile: {
-      enforcement: "allowlisted",
-      note: "buzz-agent mounts only the MCP servers the daemon passes; it has no operator-global tool config"
+    if (!Number.isSafeInteger(action.baseVersion) || action.baseVersion <= 0) {
+      throw new Error("institutional curator base version is invalid");
     }
-  },
-  {
-    match: CURSOR_HARNESS_COMMAND,
-    profile: {
-      enforcement: "config-isolated",
-      note: "cursor-acp-bridge writes session/new mcpServers into the isolated CURSOR_HOME mcp.json and the isolated $HOME/.cursor/mcp.json cursor-agent loads; it never writes the operator ~/.cursor"
+    if (!Array.isArray(action.duplicateIds) || action.duplicateIds.length > 20 || action.duplicateIds.some((id) => typeof id !== "string" || !id || id.length > 100)) {
+      throw new Error("institutional curator duplicate ids are invalid");
     }
-  }
-];
-function sessionToolScopeMeta(agentCommand) {
-  const meta = matchProfile(agentCommand)?.sessionMeta;
-  return meta ? JSON.parse(JSON.stringify(meta)) : void 0;
-}
-function harnessReadsMetaSystemPrompt(agentCommand) {
-  return matchProfile(agentCommand)?.metaSystemPrompt === true;
+    if (action.action === "consolidate" && action.duplicateIds.length === 0) {
+      throw new Error("institutional curator consolidation needs duplicates");
+    }
+    if (action.action !== "consolidate" && action.duplicateIds.length !== 0) {
+      throw new Error("institutional curator lifecycle action cannot carry duplicates");
+    }
+    const body = omitted(action.body) ? void 0 : action.targetType === "memory_item" ? conciseInstitutionalMemoryBody(action.body) : boundedText(action.body, "institutional curator body", INSTITUTIONAL_MEMORY_BODY_MAX_BYTES, true);
+    const description = omitted(action.description) ? void 0 : boundedText(action.description, "institutional curator skill description", WORKSPACE_SKILL_DESCRIPTION_MAX_LENGTH);
+    const markdown = omitted(action.markdown) ? void 0 : boundedText(action.markdown, "institutional curator skill markdown", WORKSPACE_SKILL_MARKDOWN_MAX_BYTES, true);
+    if (action.action === "consolidate" && (action.targetType === "memory_item" && (!body || description || markdown) || action.targetType === "workspace_skill" && (!description || !markdown || body))) {
+      throw new Error("institutional curator consolidation content is invalid");
+    }
+    if (action.action !== "consolidate" && (body || description || markdown)) {
+      throw new Error("institutional curator lifecycle action cannot replace content");
+    }
+    return {
+      action: action.action,
+      targetType: action.targetType,
+      targetId: boundedText(action.targetId, "institutional curator target id", 100),
+      baseVersion: action.baseVersion,
+      duplicateIds: [...new Set(action.duplicateIds)],
+      ...body ? { body } : {},
+      ...description ? { description } : {},
+      ...markdown ? { markdown } : {},
+      rationale: boundedText(action.rationale, "institutional curator rationale", 500)
+    };
+  });
+  return { proposalVersion: 1, partition, actions };
 }
-function matchProfile(agentCommand) {
-  if (!agentCommand)
-    return void 0;
-  for (const { match, profile } of PROFILES2) {
-    if (match.test(agentCommand))
-      return profile;
-  }
-  return void 0;
+
+// packages/api-contract/dist/workflow-contracts.js
+var WORKFLOW_TIMEOUT_SECONDS_MAX = 30 * 24 * 60 * 60;
+
+// packages/api-contract/dist/agent-classes.js
+var WEIGHT_TIER_RULE_PATTERN_MAX_LENGTH = 32;
+var RULE_PATTERN_SHAPE = new RegExp(`^[a-z0-9*.-]{1,${WEIGHT_TIER_RULE_PATTERN_MAX_LENGTH}}$`);
+
+// apps/body/dist/transient-provider-error.js
+var TRANSIENT_PATTERNS = [
+  /\b429\b/,
+  /\b529\b/,
+  /overloaded/i,
+  /rate.?limit/i,
+  /\bETIMEDOUT\b/,
+  /\bECONNRESET\b/,
+  /\bECONNREFUSED\b/,
+  /timed out/i,
+  /\btimeout\b/i
+];
+function isTransientProviderText(text2) {
+  return TRANSIENT_PATTERNS.some((pattern) => pattern.test(text2));
 }
 
-// apps/body/dist/acp.js
-var STDERR_TAIL_MAX_CHARS2 = 2e3;
-function braceDelta(line) {
-  let delta = 0;
-  for (const char of line) {
-    if (char === "{")
-      delta += 1;
-    else if (char === "}")
-      delta -= 1;
-  }
-  return delta;
+// apps/body/dist/model-config.js
+var GROK_SESSION_MODEL_AXIS_ID = "beeline:grok-session-model";
+var GROK_LAUNCH_EFFORT_AXIS_ID = "beeline:grok-launch-reasoning-effort";
+function isGrokAgentCommand(agent) {
+  if (agent.kind === "grok")
+    return true;
+  if (agent.kind && agent.kind !== "custom")
+    return false;
+  return /^grok(?:\.[a-z0-9]+)?$/i.test(basename3(agent.command));
 }
-function meaningfulHarnessStderr(tail) {
-  const lines = tail.split(/\r?\n/);
-  const kept = [];
-  for (let index = 0; index < lines.length; index += 1) {
-    const line = lines[index];
-    if (!/error handling notification/i.test(line)) {
-      kept.push(line);
-      continue;
-    }
-    const block2 = [line];
-    let depth = braceDelta(line);
-    if (depth === 0 && lines[index + 1]?.trimStart().startsWith("{")) {
+function agentArgsWithModelSelection(agent, selection) {
+  const original = [...agent.args];
+  if (!selection || !selection.model && !selection.effort || !isGrokAgentCommand(agent) || !original.includes("agent") || !original.includes("stdio")) {
+    return original;
+  }
+  const stripped = [];
+  for (let index = 0; index < original.length; index += 1) {
+    const arg = original[index];
+    if (arg === "-m" || arg === "--model" || arg === "--reasoning-effort") {
       index += 1;
-      block2.push(lines[index]);
-      depth = braceDelta(lines[index]);
+      continue;
     }
-    while (depth > 0 && index + 1 < lines.length) {
-      index += 1;
-      block2.push(lines[index]);
-      depth += braceDelta(lines[index]);
+    if (arg.startsWith("--model=") || arg.startsWith("--reasoning-effort=") || /^-m=/.test(arg)) {
+      continue;
     }
-    if (!/notifications\/initialized/.test(block2.join("\n")))
-      kept.push(...block2);
+    stripped.push(arg);
   }
-  return kept.join("\n").trim();
-}
-function flattenHarnessCause(tail) {
-  return meaningfulHarnessStderr(tail).replace(/\s+/g, " ").trim();
+  const stdioIndex = stripped.lastIndexOf("stdio");
+  const configured = [
+    ...selection.model ? ["--model", selection.model] : [],
+    ...selection.effort ? ["--reasoning-effort", selection.effort] : []
+  ];
+  stripped.splice(stdioIndex, 0, ...configured);
+  return stripped;
+}
+function advertisedChoiceId(choice) {
+  if (typeof choice.id === "string" && choice.id.length > 0)
+    return choice.id;
+  if (typeof choice.value === "string" && choice.value.length > 0)
+    return choice.value;
+  return void 0;
+}
+function modelFamilyKey(choice) {
+  return (/^\s*[\p{L}]+/u.exec(choice.name ?? "")?.[0] ?? "").toLowerCase();
+}
+function modelVersionKey(choice) {
+  const digits = choice.name?.match(/\d+/g) ?? choice.id.match(/\d+/g) ?? [];
+  return digits.map(Number);
+}
+function sortModelChoicesNewestFirst(choices) {
+  const indexed = choices.map((choice, index) => ({ choice, index }));
+  const families = /* @__PURE__ */ new Map();
+  for (const entry of indexed) {
+    const key = modelFamilyKey(entry.choice);
+    const bucket = families.get(key);
+    if (bucket)
+      bucket.push(entry);
+    else
+      families.set(key, [entry]);
+  }
+  const result = [];
+  for (const bucket of families.values()) {
+    bucket.sort((left, right) => {
+      const leftParts = modelVersionKey(left.choice);
+      const rightParts = modelVersionKey(right.choice);
+      for (let index = 0; index < Math.max(leftParts.length, rightParts.length); index += 1) {
+        const delta = (rightParts[index] ?? -1) - (leftParts[index] ?? -1);
+        if (delta !== 0)
+          return delta;
+      }
+      return left.index - right.index;
+    });
+    result.push(...bucket.map(({ choice }) => choice));
+  }
+  return result;
+}
+function resolveModelFamilyFallback(options, missingId) {
+  const family = (/^\s*[\p{L}]+/u.exec(missingId)?.[0] ?? "").toLowerCase();
+  if (!family)
+    return void 0;
+  return options.find((choice) => modelFamilyKey(choice) === family);
+}
+function parseAdvertisedConfigOptions(raw, preferredModelId, includeLaunchEffort = false) {
+  const configOptions = raw?.configOptions;
+  const result = [];
+  for (const entry of Array.isArray(configOptions) ? configOptions : []) {
+    if (!entry || typeof entry !== "object")
+      continue;
+    const record6 = entry;
+    const id = record6.id;
+    const category = record6.category;
+    if (typeof id !== "string" || typeof category !== "string")
+      continue;
+    const rawChoices = Array.isArray(record6.options) ? record6.options : [];
+    const choices = [];
+    for (const rawChoice of rawChoices) {
+      if (!rawChoice || typeof rawChoice !== "object")
+        continue;
+      const choice = rawChoice;
+      const choiceId = advertisedChoiceId(choice);
+      if (!choiceId)
+        continue;
+      choices.push({
+        id: choiceId,
+        ...typeof choice.name === "string" ? { name: choice.name } : {}
+      });
+    }
+    result.push({
+      id,
+      category,
+      ...typeof record6.currentValue === "string" ? { currentValue: record6.currentValue } : {},
+      options: category === "model" ? sortModelChoicesNewestFirst(choices) : choices
+    });
+  }
+  const models = raw?.models;
+  if (!models || typeof models !== "object")
+    return result;
+  const modelState = models;
+  const availableModels = Array.isArray(modelState.availableModels) ? modelState.availableModels : [];
+  const modelChoices = [];
+  for (const entry of availableModels) {
+    if (!entry || typeof entry !== "object")
+      continue;
+    const model = entry;
+    if (typeof model.modelId !== "string" || !model.modelId)
+      continue;
+    modelChoices.push({
+      id: model.modelId,
+      ...typeof model.name === "string" ? { name: model.name } : {}
+    });
+  }
+  const currentModelId = typeof modelState.currentModelId === "string" ? modelState.currentModelId : void 0;
+  if (modelChoices.length > 0 && !result.some((axis) => axis.category === "model")) {
+    result.push({
+      id: GROK_SESSION_MODEL_AXIS_ID,
+      category: "model",
+      ...currentModelId ? { currentValue: currentModelId } : {},
+      options: sortModelChoicesNewestFirst(modelChoices)
+    });
+  }
+  const effortModelId = preferredModelId ?? currentModelId;
+  const currentModel = availableModels.find((entry) => entry && typeof entry === "object" && entry.modelId === effortModelId);
+  const meta = currentModel?._meta;
+  const modelMeta = meta && typeof meta === "object" ? meta : void 0;
+  const efforts = Array.isArray(modelMeta?.reasoningEfforts) ? modelMeta.reasoningEfforts : [];
+  const effortChoices = [];
+  for (const entry of efforts) {
+    if (!entry || typeof entry !== "object")
+      continue;
+    const effort = entry;
+    const id = advertisedChoiceId(effort);
+    if (!id)
+      continue;
+    effortChoices.push({
+      id,
+      ...typeof effort.label === "string" ? { name: effort.label } : typeof effort.name === "string" ? { name: effort.name } : {}
+    });
+  }
+  const hasEffortAxis = result.some((axis) => ["thought_level", "effort", "reasoning_effort"].includes(axis.category));
+  if (includeLaunchEffort && effortChoices.length > 0 && !hasEffortAxis) {
+    const currentEffort = typeof modelMeta?.reasoningEffort === "string" ? modelMeta.reasoningEffort : efforts.find((entry) => entry && typeof entry === "object" && entry.default)?.value;
+    result.push({
+      id: GROK_LAUNCH_EFFORT_AXIS_ID,
+      category: "reasoning_effort",
+      ...typeof currentEffort === "string" ? { currentValue: currentEffort } : {},
+      options: effortChoices
+    });
+  }
+  return result;
+}
+function filterAllowedModelConfigOptions(options) {
+  return options.filter((option) => isAllowedAgentModelConfigCategory(option.category, option.id));
+}
+var PROVIDER_CREDENTIAL_ENV_HINTS = {
+  openai: ["OPENAI_API_KEY", "OPENAI_COMPAT_API_KEY"],
+  openrouter: ["OPENROUTER_API_KEY"],
+  anthropic: ["ANTHROPIC_API_KEY"],
+  google: ["GOOGLE_API_KEY", "GEMINI_API_KEY"],
+  groq: ["GROQ_API_KEY"],
+  mistral: ["MISTRAL_API_KEY"],
+  deepseek: ["DEEPSEEK_API_KEY"],
+  xai: ["XAI_API_KEY"],
+  cohere: ["COHERE_API_KEY"],
+  together: ["TOGETHER_API_KEY"],
+  fireworks: ["FIREWORKS_API_KEY"]
+};
+function credentialedProviders(env) {
+  const held = /* @__PURE__ */ new Set();
+  for (const [provider, names] of Object.entries(PROVIDER_CREDENTIAL_ENV_HINTS)) {
+    if (names.some((name) => Boolean(env[name]?.trim())))
+      held.add(provider);
+  }
+  for (const provider of credentialedPiCustomProviders(env))
+    held.add(provider);
+  return held;
+}
+function credentialedPiCustomProviders(env) {
+  const agentDir = env.PI_CODING_AGENT_DIR?.trim() ? resolve9(env.PI_CODING_AGENT_DIR) : env.HOME?.trim() ? resolve9(env.HOME, ".pi/agent") : void 0;
+  const held = /* @__PURE__ */ new Set();
+  if (!agentDir)
+    return held;
+  const path = resolve9(agentDir, "models.json");
+  try {
+    const stats = lstatSync(path);
+    if (!stats.isFile() || stats.isSymbolicLink() || stats.nlink !== 1 || stats.size > 1048576) {
+      return held;
+    }
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
+    const providers = parsed.providers;
+    const remember = (name, config) => {
+      if (typeof name !== "string" || !name.trim() || !config || typeof config !== "object")
+        return;
+      const apiKey = config.apiKey;
+      if (typeof apiKey === "string" && apiKey.trim())
+        held.add(name.trim());
+    };
+    if (Array.isArray(providers)) {
+      for (const provider of providers) {
+        const record6 = provider;
+        remember(record6?.name ?? record6?.id, record6);
+      }
+    } else if (providers && typeof providers === "object") {
+      for (const [name, config] of Object.entries(providers)) {
+        remember(name, config);
+      }
+    }
+  } catch {
+  }
+  return held;
+}
+function filterModelOptionsByCredentials(options, env) {
+  const held = credentialedProviders(env);
+  return options.map((option) => {
+    if (option.category !== "model")
+      return option;
+    return {
+      ...option,
+      options: option.options.filter((choice) => {
+        const slash = choice.id.indexOf("/");
+        if (slash < 0)
+          return true;
+        return held.has(choice.id.slice(0, slash));
+      })
+    };
+  });
+}
+var DisallowedModelConfigOptionError = class extends Error {
+  constructor(configId) {
+    super(`model config option "${configId}" is not in the allow-listed catalog`);
+    this.name = "DisallowedModelConfigOptionError";
+  }
+};
+function supportsFastMode(options) {
+  const axis = options.find((option) => option.id === "fast-mode" && option.category === "model_config");
+  return Boolean(axis?.options.some((choice) => choice.id === "on") && axis.options.some((choice) => choice.id === "off"));
+}
+var ModelSelectionUnavailableError = class extends Error {
+  label;
+  value;
+  reason;
+  guidance;
+  constructor(input) {
+    const recovery = input.guidance ? ` ${input.guidance}` : " Choose one of the values in the live harness catalog.";
+    super(`${input.label} "${input.value}" is unavailable.${recovery}`);
+    this.name = "ModelSelectionUnavailableError";
+    this.label = input.label;
+    this.value = input.value;
+    this.reason = input.reason;
+    this.guidance = input.guidance;
+  }
+};
+function withEffectiveCurrentValues(options, selection) {
+  if (!selection || !selection.model && !selection.effort)
+    return options;
+  return options.map((option) => {
+    const target = modelSelectionTargets(selection).find((entry) => entry.categories.includes(option.category));
+    if (!target?.value || option.currentValue === target.value)
+      return option;
+    return { ...option, currentValue: target.value };
+  });
+}
+function modelSelectionTargets(selection) {
+  return [
+    { categories: ["model"], label: "model", value: selection.model },
+    {
+      categories: ["thought_level", "effort", "reasoning_effort"],
+      label: "effort",
+      value: selection.effort
+    }
+  ];
+}
+function assertModelConfigAxisAllowed(configId, advertisedOptions) {
+  const axis = advertisedOptions.find((option) => option.id === configId);
+  if (!axis || !isAllowedAgentModelConfigCategory(axis.category, axis.id)) {
+    throw new DisallowedModelConfigOptionError(configId);
+  }
+}
+async function applyAgentModelSelectionWithUpdatedCatalog(client, sessionId, advertisedOptions, selection) {
+  let currentOptions = advertisedOptions;
+  const appliedSelection = {};
+  let modelWasSubstituted = false;
+  for (const target of modelSelectionTargets(selection)) {
+    if (!target.value)
+      continue;
+    const axis = currentOptions.find((option) => target.categories.includes(option.category));
+    if (!axis)
+      continue;
+    assertModelConfigAxisAllowed(axis.id, currentOptions);
+    let value = target.value;
+    if (!axis.options.some((choice) => choice.id === value)) {
+      const fallback = target.label === "model" ? resolveModelFamilyFallback(axis.options, value) : void 0;
+      if (fallback) {
+        value = fallback.id;
+        modelWasSubstituted = true;
+      } else if (target.label === "effort" && modelWasSubstituted) {
+        continue;
+      } else {
+        throw new ModelSelectionUnavailableError({
+          label: target.label,
+          value: target.value,
+          reason: "not-advertised"
+        });
+      }
+    }
+    try {
+      if (axis.id === GROK_SESSION_MODEL_AXIS_ID) {
+        if (!client.setModel)
+          throw new Error("ACP client does not support session/set_model");
+        await client.setModel(sessionId, value);
+      } else if (axis.id === GROK_LAUNCH_EFFORT_AXIS_ID) {
+        if (axis.currentValue !== value) {
+          throw new Error(`Grok started with reasoning effort "${axis.currentValue ?? "unknown"}", not "${value}"`);
+        }
+      } else {
+        const updated = await client.setConfigOption(sessionId, axis.id, value);
+        const refreshed = filterAllowedModelConfigOptions(parseAdvertisedConfigOptions(updated, target.label === "model" ? value : selection.model));
+        if (refreshed.length > 0)
+          currentOptions = refreshed;
+      }
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (isTransientProviderText(message) || isAuthShapedFault(message)) {
+        throw error instanceof Error ? error : new Error(message);
+      }
+      throw new ModelSelectionUnavailableError({
+        label: target.label,
+        value: target.value,
+        reason: "provider-refused",
+        guidance: message
+      });
+    }
+    if (target.label === "model")
+      appliedSelection.model = value;
+    else
+      appliedSelection.effort = value;
+  }
+  if (selection.fastMode && !supportsFastMode(currentOptions)) {
+    throw new Error("Fast mode is unavailable for the selected model and harness");
+  }
+  if (supportsFastMode(currentOptions)) {
+    await client.setConfigOption(sessionId, "fast-mode", selection.fastMode ? "on" : "off");
+  }
+  return { options: currentOptions, appliedSelection };
+}
+async function applyAgentModelSelection(client, sessionId, advertisedOptions, selection) {
+  return applyAgentModelSelectionWithUpdatedCatalog(client, sessionId, advertisedOptions, selection);
+}
+
+// apps/body/dist/model-catalog.js
+import { mkdtemp, rm as rm3 } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { resolve as resolve10 } from "node:path";
+
+// apps/body/dist/acp.js
+init_adapter_install_lock();
+import { spawn as spawn10 } from "node:child_process";
+import { EventEmitter } from "node:events";
+
+// apps/body/dist/harness-capabilities.js
+init_cursor_acp_bridge();
+var PROFILES = [
+  {
+    match: /(^|[/\\])codex-acp(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "sandboxed",
+      note: "codex-acp asks for every command/file change and enforces an offline read-only OS sandbox in read-only mode; under bubblewrap a Room runs it in agent-full-access and bwrap holds the filesystem rule"
+    }
+  },
+  {
+    match: /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "permission-callback",
+      note: "claude-agent-acp asks for every tool call; it advertises no read-only mode, so the daemon callback is the only boundary"
+    }
+  },
+  {
+    match: /(^|[/\\])pi-acp(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "none",
+      note: "pi-acp never sends session/request_permission for a tool call: pi executes reads, writes, edits, and shell commands before the daemon sees them, and exposes no sandbox or permission flag to pass at spawn"
+    }
+  },
+  {
+    match: /(^|[/\\])grok(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "permission-callback",
+      note: "grok sends standard session/request_permission requests for mutating tools in its default ask mode; it advertises no read-only ACP mode, so the daemon callback is the only boundary unless the OS sandbox wraps it"
+    }
+  },
+  {
+    match: /(^|[/\\])buzz-agent(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "permission-callback",
+      note: "buzz-agent sends session/request_permission for mutating tools"
+    }
+  },
+  {
+    match: CURSOR_HARNESS_COMMAND,
+    profile: {
+      enforcement: "none",
+      note: "cursor-acp-bridge drives cursor-agent with --force --approve-mcps in non-interactive stream-json mode, so cursor-agent never sends session/request_permission; Beeline already sandboxes the child"
+    }
+  }
+];
+function harnessEnforcement(agentCommand) {
+  if (!agentCommand)
+    return { enforcement: "unknown", note: "no ACP command configured" };
+  for (const { match, profile } of PROFILES) {
+    if (match.test(agentCommand))
+      return profile;
+  }
+  return {
+    enforcement: "unknown",
+    note: `'${agentCommand}' has not been verified to send session/request_permission for mutating tools`
+  };
+}
+function harnessHonorsSessionSystemPrompt(agentCommand) {
+  return Boolean(agentCommand && /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i.test(agentCommand));
+}
+var GROK_WARM_SESSION_IDLE_MS = 30 * 6e4;
+function cornerAutonomyModeCandidates(agentCommand) {
+  if (agentCommand && /(^|[/\\])codex-acp(\.[a-z]+)?$/i.test(agentCommand)) {
+    return ["agent-full-access"];
+  }
+  if (agentCommand && /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i.test(agentCommand)) {
+    return ["bypassPermissions"];
+  }
+  if (agentCommand && /(^|[/\\])grok(\.[a-z]+)?$/i.test(agentCommand))
+    return [];
+  if (agentCommand && /(^|[/\\])pi-acp(\.[a-z]+)?$/i.test(agentCommand))
+    return [];
+  return ["agent", "edit", "code"];
+}
+function roomModeCandidates(agentCommand, options = {}) {
+  if (options.osSandbox && agentCommand && /(^|[/\\])codex-acp(\.[a-z]+)?$/i.test(agentCommand)) {
+    return ["agent-full-access"];
+  }
+  return ["read-only", "readonly"];
+}
+function harnessDeclaresShellExecuteKind(agentCommand) {
+  return Boolean(agentCommand && (/(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i.test(agentCommand) || /(^|[/\\])grok(\.[a-z]+)?$/i.test(agentCommand)));
+}
+function roomShellCapability(agentCommand, options = {}) {
+  const { enforcement } = harnessEnforcement(agentCommand);
+  if (enforcement === "sandboxed" || enforcement === "none")
+    return "runs";
+  if (enforcement === "unknown")
+    return "unknown";
+  if (!harnessDeclaresShellExecuteKind(agentCommand))
+    return "unknown";
+  return options.osSandbox ? "runs" : "refused";
+}
+
+// apps/body/dist/harness-tool-scope.js
+init_cursor_acp_bridge();
+var CLAUDE_TOOL_SCOPE_SETTINGS = { disableClaudeAiConnectors: true };
+var CLAUDE_PROFILE = {
+  // `settingSources: ['user']` admits the sanitized user MCP copy
+  // while rejecting repository/local/plugin MCP. `strictMcpConfig` cannot be
+  // used because it would reject the user copy too. Account-bound claude.ai
+  // cloud connectors remain off independently.
+  enforcement: "config-isolated",
+  note: "claude-agent-acp forwards _meta.claudeCode.options to the Claude Agent SDK; user-only settingSources loads MCP from the isolated CLAUDE_CONFIG_DIR without repository/local settings, while disableClaudeAiConnectors keeps account-bound connectors off",
+  sessionMeta: {
+    claudeCode: {
+      options: {
+        // Only the sanitized user config in the isolated CLAUDE_CONFIG_DIR;
+        // never a repository's .mcp.json, local settings, or plugins.
+        settingSources: ["user"],
+        // Account-bound claude.ai cloud connectors are not fetched at all.
+        settings: CLAUDE_TOOL_SCOPE_SETTINGS
+      }
+    }
+  },
+  metaSystemPrompt: true
+};
+var PROFILES2 = [
+  { match: /(^|[/\\])claude-(agent|code)-acp(\.[a-z]+)?$/i, profile: CLAUDE_PROFILE },
+  {
+    match: /(^|[/\\])codex-acp(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "config-isolated",
+      note: "codex-acp merges the session's MCP servers into $CODEX_HOME/config.toml's own [mcp_servers] instead of replacing them, so only an isolated CODEX_HOME scopes the session; the ChatGPT account's codex_apps connectors survive either way"
+    }
+  },
+  {
+    match: /(^|[/\\])pi-acp(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "config-isolated",
+      note: "pi-acp 0.0.33 still stores session/new mcpServers and never reads them; pi 0.85.1 itself has no MCP client, while optional pi-mcp-adapter reads $PI_CODING_AGENT_DIR/mcp.json and isolated homes exclude the settings.json that would load it"
+    }
+  },
+  {
+    match: /(^|[/\\])grok(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "config-isolated",
+      note: "grok loads the operator's own ~/.grok MCP servers even when session/new passes an empty mcpServers list (measured live), so only an isolated GROK_HOME scopes the session; no account-bound connector surface was found"
+    }
+  },
+  {
+    match: /(^|[/\\])buzz-agent(\.[a-z]+)?$/i,
+    profile: {
+      enforcement: "allowlisted",
+      note: "buzz-agent mounts only the MCP servers the daemon passes; it has no operator-global tool config"
+    }
+  },
+  {
+    match: CURSOR_HARNESS_COMMAND,
+    profile: {
+      enforcement: "config-isolated",
+      note: "cursor-acp-bridge writes session/new mcpServers into the isolated CURSOR_HOME mcp.json and the isolated $HOME/.cursor/mcp.json cursor-agent loads; it never writes the operator ~/.cursor"
+    }
+  }
+];
+function sessionToolScopeMeta(agentCommand) {
+  const meta = matchProfile(agentCommand)?.sessionMeta;
+  return meta ? JSON.parse(JSON.stringify(meta)) : void 0;
+}
+function harnessReadsMetaSystemPrompt(agentCommand) {
+  return matchProfile(agentCommand)?.metaSystemPrompt === true;
+}
+function matchProfile(agentCommand) {
+  if (!agentCommand)
+    return void 0;
+  for (const { match, profile } of PROFILES2) {
+    if (match.test(agentCommand))
+      return profile;
+  }
+  return void 0;
+}
+
+// apps/body/dist/acp.js
+var STDERR_TAIL_MAX_CHARS2 = 2e3;
+function braceDelta(line) {
+  let delta = 0;
+  for (const char of line) {
+    if (char === "{")
+      delta += 1;
+    else if (char === "}")
+      delta -= 1;
+  }
+  return delta;
+}
+function meaningfulHarnessStderr(tail) {
+  const lines = tail.split(/\r?\n/);
+  const kept = [];
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (!/error handling notification/i.test(line)) {
+      kept.push(line);
+      continue;
+    }
+    const block2 = [line];
+    let depth = braceDelta(line);
+    if (depth === 0 && lines[index + 1]?.trimStart().startsWith("{")) {
+      index += 1;
+      block2.push(lines[index]);
+      depth = braceDelta(lines[index]);
+    }
+    while (depth > 0 && index + 1 < lines.length) {
+      index += 1;
+      block2.push(lines[index]);
+      depth += braceDelta(lines[index]);
+    }
+    if (!/notifications\/initialized/.test(block2.join("\n")))
+      kept.push(...block2);
+  }
+  return kept.join("\n").trim();
+}
+function flattenHarnessCause(tail) {
+  return meaningfulHarnessStderr(tail).replace(/\s+/g, " ").trim();
 }
 var AcpRequestTimeoutError = class extends Error {
   method;
@@ -27972,9 +28649,17 @@ function filterAgentModelCatalog(agent, raw, agentEnv) {
   const allowed = filterAllowedModelConfigOptions(raw).filter((axis) => axis.id !== "fast-mode" || agent.kind === "codex");
   return agent.kind === "goose" || agent.kind === "opencode" ? allowed : filterModelOptionsByCredentials(allowed, agentEnv);
 }
-async function withAgentModelCatalog(agent, agentEnv, selection, inspect, limits = {}) {
-  const deadline = limits.timeoutMs === void 0 ? void 0 : Date.now() + limits.timeoutMs;
-  const remaining = () => deadline === void 0 ? void 0 : Math.max(1, deadline - Date.now());
+function withDeadline(work, ms, what) {
+  let timer;
+  const expired = new Promise((_, reject) => {
+    timer = setTimeout(() => reject(new Error(`${what} timed out after ${ms}ms`)), ms);
+    timer.unref?.();
+  });
+  return Promise.race([work, expired]).finally(() => clearTimeout(timer));
+}
+async function withAgentModelCatalog(agent, agentEnv, selection, inspect, limits = {}) {
+  const deadline = limits.timeoutMs === void 0 ? void 0 : Date.now() + limits.timeoutMs;
+  const remaining = () => deadline === void 0 ? void 0 : Math.max(1, deadline - Date.now());
   const scratchCwd = await mkdtemp(resolve10(tmpdir(), "beeline-pair-model-check-"));
   const probeEnv = modelCatalogProbeEnvironment(agent, agentEnv, scratchCwd);
   const client = new AcpClient({
@@ -27998,7 +28683,9 @@ async function withAgentModelCatalog(agent, agentEnv, selection, inspect, limits
     });
     const raw = parseAdvertisedConfigOptions(sessionRaw, selection?.model, isGrokAgentCommand(agent));
     const catalog = filterAgentModelCatalog(agent, raw, probeEnv);
-    return await inspect({ client, sessionId, raw, catalog });
+    const inspected = inspect({ client, sessionId, raw, catalog });
+    const inspectDeadline = remaining();
+    return inspectDeadline === void 0 ? await inspected : await withDeadline(inspected, inspectDeadline, "model catalog probe");
   } finally {
     await client.stop().catch(() => void 0);
     await rm3(scratchCwd, { recursive: true, force: true }).catch(() => void 0);
@@ -28024,7 +28711,7 @@ async function filterModelChoicesByLiveValidation(client, sessionId, catalog, pr
       });
       available.push(choice);
       if (choice.id === preferred)
-        preferredCatalog = updated;
+        preferredCatalog = updated.options;
     } catch {
     }
   }
@@ -28034,7 +28721,7 @@ async function filterModelChoicesByLiveValidation(client, sessionId, catalog, pr
 async function validateAgentModelSelection(agent, agentEnv, selection) {
   return withAgentModelCatalog(agent, agentEnv, selection, async ({ client, sessionId, raw, catalog }) => {
     const applied = await applyAgentModelSelectionWithUpdatedCatalog(client, sessionId, catalog, selection);
-    return { raw, catalog: applied };
+    return { raw, catalog: applied.options };
   });
 }
 
@@ -28064,6 +28751,9 @@ function modelUnavailableState(selection, error) {
 }
 
 // apps/body/dist/runtime-model-validation.js
+function resolvePreflightModelSelection(local, server) {
+  return server ?? local;
+}
 async function revalidateRuntimeModelSelection(agent, agentEnv, selection, validate = validateAgentModelSelection, refreshAdapter) {
   if (!selection.model && !selection.effort)
     return void 0;
@@ -28142,7 +28832,8 @@ async function syncAgentModelCatalog(input) {
       // `fetchAgentModelCatalog` already applied the category allow-list.
       options: effectiveCatalog,
       ...selection ? { selection } : {},
-      ...input.startupUnavailable ? { unavailable: input.startupUnavailable } : {}
+      ...input.startupUnavailable ? { unavailable: input.startupUnavailable } : {},
+      ...input.agent.kind ? { harness: input.agent.kind } : {}
     });
     await writeFile6(hashPath, `${hash}
 `, { mode: 384 });
@@ -28439,7 +29130,7 @@ function isHostMcpIdentity(candidate, hostNames = CODE_OWNED_HOST_MCP_NAMES) {
 
 // apps/body/dist/registry-mcp.js
 var REGISTRY_MCP_BROKER_FLAG = "--registry-mcp-broker";
-function record2(value) {
+function record3(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function safeUrl(value) {
@@ -28535,7 +29226,7 @@ async function jsonResponse(response) {
   if (bytes.byteLength > 256 * 1024)
     throw new Error("provider metadata is too large");
   const parsed = JSON.parse(new TextDecoder().decode(bytes));
-  const result = record2(parsed);
+  const result = record3(parsed);
   if (!result)
     throw new Error("provider metadata is invalid");
   return result;
@@ -29109,878 +29800,363 @@ var ConnectorAssignmentLoop = class {
    * to a new generation, and a ceremony latched to the old one must never
    * swallow it. */
   registryCeremonies = /* @__PURE__ */ new Map();
-  readVaultFn;
-  revokeGrantsFn;
-  /** Armed only while this helper owns a live sign-in ceremony. */
-  connectWatch;
-  started = false;
-  stopped = false;
-  /** One install at a time per connector; concurrent wakes skip it. */
-  inFlight = /* @__PURE__ */ new Set();
-  mcp;
-  constructor(options) {
-    this.agentId = options.agentId;
-    this.api = options.api;
-    this.log = options.log ?? (() => {
-    });
-    this.install = options.install ?? installSquire;
-    this.installTailscale = options.installTailscale ?? installTailscale;
-    this.watchTailscaleSignIn = options.watchTailscaleSignIn ?? watchTailscaleSignIn;
-    this.registryHomeDir = options.registryHome ?? process.env.HOME ?? process.cwd();
-    this.installRegistry = options.installRegistry ?? installRegistryMcp;
-    this.readVaultFn = options.readVault ?? readVault;
-    this.revokeGrantsFn = options.revokeGrants ?? revokeGrants;
-  }
-  start() {
-    if (this.stopped || this.started)
-      return;
-    this.started = true;
-    void this.runOnce();
-  }
-  /** Event-driven drain, also called when the socket reconnects. */
-  wake() {
-    if (this.stopped)
-      return;
-    void this.runOnce();
-  }
-  stop() {
-    this.stopped = true;
-    this.connectWatch?.();
-    this.connectWatch = void 0;
-    this.tailscaleWatch?.();
-    this.tailscaleWatch = void 0;
-  }
-  /**
-   * Watch the sign-in this helper is holding open. The phone paints
-   * `installing` for the whole ceremony and only a drain that reaches
-   * Squire's already-connected short-circuit flips the row to `connected`;
-   * nothing on the wire announces that the human finished, so the connect
-   * process exiting is the signal. Drain on that, and the row settles on the
-   * process exit event without waiting for a server read timer.
-   */
-  watchConnectSignIn() {
-    if (this.stopped || this.connectWatch)
-      return;
-    const claim = squireConnectSession();
-    this.connectWatch = claim?.onExit?.(() => {
-      this.connectWatch = void 0;
-      if (!this.stopped)
-        void this.runOnce();
-    });
-  }
-  /** Drain the queue once; every failure is logged, never raised. */
-  async runOnce() {
-    let assignments;
-    try {
-      const result = await this.api.execute("getConnectorAssignments", { agentId: this.agentId });
-      assignments = result.assignments;
-    } catch (error) {
-      this.log(`connector assignments unavailable: ${describe(error)}`);
-      return;
-    }
-    for (const assignment of assignments) {
-      const key = `${assignment.kind}:${assignment.connectorId}`;
-      if (assignment.kind === "uninstall")
-        continue;
-      if (this.inFlight.has(key))
-        continue;
-      this.inFlight.add(key);
-      void this.handle(assignment).catch((error) => this.log(`connector assignment ${key} failed: ${describe(error)}`)).finally(() => this.inFlight.delete(key));
-    }
-  }
-  squire() {
-    this.mcp ??= defaultSquireMcpClient({ agentId: this.agentId, roomId: "connector" });
-    return this.mcp;
-  }
-  async handle(assignment) {
-    const pairingGeneration = assignment.kind === "install" || assignment.kind === "uninstall" ? assignment.pairingGeneration : void 0;
-    if (assignment.kind === "install") {
-      if (assignment.connectorType?.startsWith("google-")) {
-        await this.api.execute("postConnectorStatus", {
-          agentId: this.agentId,
-          connectorId: assignment.connectorId,
-          steps: [{
-            label: "Connect app",
-            status: "failed",
-            reason: "Reconnect through Connect an app"
-          }],
-          errorMessage: "Reconnect through Connect an app",
-          ...pairingGeneration !== void 0 ? { pairingGeneration } : {}
-        });
-      } else if (assignment.connectorType === "registry-mcp") {
-        await this.runRegistryMcpInstall(assignment);
-      } else if (assignment.connectorType === "tailscale") {
-        await this.runTailscaleInstall(assignment.connectorId, pairingGeneration);
-      } else {
-        await this.runInstall(assignment.connectorId, pairingGeneration);
-      }
-    } else if (assignment.kind === "sync" && assignment.connectorType === "tailscale") {
-      await this.runTailscaleInstall(assignment.connectorId);
-    } else if (assignment.kind === "sync") {
-      await this.runSync();
-    } else if (assignment.kind === "refresh-google-grant") {
-      this.log("retired Google grant assignment ignored; reconnect through Connect an app");
-    } else if (assignment.kind === "revoke-grants")
-      await this.runRevoke(assignment.connectorId, assignment.reference);
-  }
-  ceremonyKey(assignment) {
-    return `${assignment.connectorId}:${assignment.pairingGeneration ?? 1}`;
-  }
-  async runRegistryMcpInstall(assignment) {
-    const generation = assignment.pairingGeneration !== void 0 ? { pairingGeneration: assignment.pairingGeneration } : {};
-    const ceremonyKey = this.ceremonyKey(assignment);
-    const result = await this.installRegistry({
-      api: this.api,
-      agentId: this.agentId,
-      assignment,
-      home: this.registryHomeDir
-    });
-    const stopWatch = () => {
-    };
-    if (result.status === "connected") {
-      stopWatch();
-      this.registryCeremonies.delete(ceremonyKey);
-      await this.api.execute("installConnector", {
-        agentId: this.agentId,
-        connectorId: assignment.connectorId,
-        ...generation
-      });
-      return;
-    }
-    if (result.status === "installing") {
-      const ceremony = this.registryCeremonies.get(ceremonyKey);
-      if (!ceremony || ceremony.attemptId !== result.attemptId) {
-        this.registryCeremonies.set(ceremonyKey, {
-          attemptId: result.attemptId,
-          endsAt: result.attemptExpiresAt
-        });
-      } else if (ceremony.expired) {
-        return;
-      } else if (Date.now() >= ceremony.endsAt) {
-        stopWatch();
-        this.registryCeremonies.set(ceremonyKey, { ...ceremony, expired: true });
-        await this.api.execute("postConnectorStatus", {
-          agentId: this.agentId,
-          connectorId: assignment.connectorId,
-          steps: [
-            { label: "Connect provider account", status: "failed", reason: CEREMONY_EXPIRED }
-          ],
-          signIn: null,
-          errorMessage: CEREMONY_EXPIRED,
-          ...generation
-        });
-        return;
-      }
-    } else {
-      this.registryCeremonies.delete(ceremonyKey);
-    }
-    await this.api.execute("postConnectorStatus", {
-      agentId: this.agentId,
-      connectorId: assignment.connectorId,
-      steps: result.steps,
-      ...result.status === "installing" ? {
-        signIn: {
-          method: "oauth",
-          url: result.authorizationUrl,
-          attemptId: result.attemptId
-        }
-      } : { signIn: null, errorMessage: result.errorMessage },
-      ...generation
-    });
-  }
-  /** Install Tailscale and publish its browser login URL until the tailnet is connected. */
-  async runTailscaleInstall(connectorId, pairingGeneration) {
-    const generation = pairingGeneration !== void 0 ? { pairingGeneration } : {};
-    const report = async (steps2) => {
-      try {
-        await this.api.execute("postConnectorStatus", {
-          agentId: this.agentId,
-          connectorId,
-          steps: steps2,
-          ...generation
-        });
-      } catch (error) {
-        this.log(`step report failed: ${describe(error)}`);
-      }
-    };
-    const existing = await this.connectorRow(connectorId);
-    const result = await this.installTailscale({
-      onProgress: report,
-      ...existing?.signIn ? { signIn: existing.signIn } : {}
-    });
-    if (result.status === "connected") {
-      this.tailscaleWatch?.();
-      this.tailscaleWatch = void 0;
-      await this.api.execute("installConnector", {
-        agentId: this.agentId,
-        connectorId,
-        ...result.signedInAs ? { signedInAs: result.signedInAs } : {},
-        ...generation
-      });
-      return;
-    }
-    await this.api.execute("postConnectorStatus", {
-      agentId: this.agentId,
-      connectorId,
-      steps: result.steps,
-      signIn: result.status === "installing" ? result.signIn : null,
-      ...result.status === "error" ? { errorMessage: result.errorMessage } : {},
-      ...generation
-    });
-    if (result.status === "installing" && !this.tailscaleWatch)
-      this.tailscaleWatch = this.watchTailscaleSignIn(() => {
-        this.tailscaleWatch = void 0;
-        if (!this.stopped)
-          this.wake();
-      });
-  }
-  /** Install Trusty Squire, reporting every step as it settles. */
-  async runInstall(connectorId, pairingGeneration) {
-    const generation = pairingGeneration !== void 0 ? { pairingGeneration } : {};
-    const claim = squireConnectSession();
-    const spent = claim ? Date.now() - claim.claimedAt >= CONNECT_TIMEOUT_MS : false;
-    if (claim && !spent && isProcessAlive(claim.pid)) {
-      if (!await this.rearmedByHuman(connectorId)) {
-        this.log(`trusty-squire connect still waiting for sign-in (pid ${String(claim.pid)}); leaving it alone`);
-        this.watchConnectSignIn();
-        return;
-      }
-      this.log("trusty-squire re-pair requested; superseding the connect holding the browser");
-    } else if (spent && (await this.connectorRow(connectorId))?.signIn) {
-      releaseSquireConnectSession((message) => this.log(`[trusty-squire] ${message}`));
-      await this.api.execute("postConnectorStatus", {
-        agentId: this.agentId,
-        connectorId,
-        steps: [{ label: "waiting for sign-in", status: "failed", reason: CEREMONY_EXPIRED }],
-        signIn: null,
-        errorMessage: CEREMONY_EXPIRED,
-        ...generation
-      });
-      return;
-    }
-    const report = async (steps2) => {
-      try {
-        await this.api.execute("postConnectorStatus", {
-          agentId: this.agentId,
-          connectorId,
-          steps: steps2,
-          ...generation
-        });
-      } catch (error) {
-        this.log(`step report failed: ${describe(error)}`);
-      }
-    };
-    const result = await this.install({
-      workspaceId: this.agentId,
-      mcp: this.squire(),
-      onProgress: report,
-      log: (message) => this.log(`[trusty-squire] ${message}`)
-    });
-    if (result.status === "error") {
-      await this.api.execute("postConnectorStatus", {
-        agentId: this.agentId,
-        connectorId,
-        steps: result.steps,
-        signIn: null,
-        errorMessage: result.errorMessage,
-        ...generation
-      });
-      return;
-    }
-    if (result.status === "connected") {
-      await this.api.execute("installConnector", {
-        agentId: this.agentId,
-        connectorId,
-        ...result.squireVersion ? { squireVersion: result.squireVersion } : {},
-        ...generation
-      });
-      await this.reportVault(connectorId);
-      return;
-    }
-    await this.api.execute("postConnectorStatus", {
-      agentId: this.agentId,
-      connectorId,
-      steps: result.steps,
-      signIn: result.signIn ?? null,
-      ...result.squireVersion ? { squireVersion: result.squireVersion } : {},
-      ...generation
-    });
-    this.watchConnectSignIn();
-  }
-  /** This connector's own row, or undefined when the server cannot answer. */
-  async connectorRow(connectorId) {
-    try {
-      const status = await this.api.execute("getConnectorStatus", {
-        agentId: this.agentId,
-        connectorId
-      });
-      return status.connectorId === connectorId ? status : void 0;
-    } catch (error) {
-      this.log(`connector status unavailable: ${describe(error)}`);
-      return void 0;
-    }
-  }
-  /**
-   * True when a human asked for this connector again while a connect of ours
-   * still holds the browser. `pairConnector` re-arms the row to its default
-   * all-pending steps, so a row whose every step is still pending is a fresh
-   * request; the row carrying the ceremony this helper published has settled
-   * ones. An unreadable row is not evidence of a retry.
-   */
-  async rearmedByHuman(connectorId) {
-    const status = await this.connectorRow(connectorId);
-    if (!status)
-      return false;
-    return status.steps.length > 0 && status.steps.every((step3) => step3.status === "pending");
-  }
-  /** One vault report covers every live trusty-squire connector on this helper. */
-  async runSync() {
-    await this.reportVault();
-  }
-  async runRevoke(connectorId, reference) {
-    const outcome = await this.revokeGrantsFn(this.squire(), reference);
-    this.log(`revoked ${outcome.revoked} grant(s) on ${reference}` + (outcome.failed ? `, ${outcome.failed} failed` : ""));
-    if (outcome.failed)
-      return;
-    await this.api.execute("revokeConnectionGrants", {
-      agentId: this.agentId,
-      ref: reference
-    });
-    void connectorId;
-  }
-  async reportVault(_connectorId) {
-    const connections = await this.readVaultFn(this.squire());
-    await this.api.execute("postConnectorVault", { agentId: this.agentId, connections });
-  }
-};
-function describe(error) {
-  return error instanceof Error ? error.message : String(error);
-}
-
-// apps/body/dist/institutional-memory-shadow-worker.js
-import { mkdtemp as mkdtemp2, rm as rm5 } from "node:fs/promises";
-import { tmpdir as tmpdir3 } from "node:os";
-import { resolve as resolve12 } from "node:path";
-
-// packages/api-contract/dist/daemon-operations.js
-function isAgentCommand(value) {
-  if (!value || typeof value !== "object")
-    return false;
-  const c2 = value;
-  if (![
-    "id",
-    "roomId",
-    "agentId",
-    "sourceMessageId",
-    "turnRequestId",
-    "rootCommandId",
-    "rootSourceMessageId",
-    "reason"
-  ].every((key) => typeof c2[key] === "string" && c2[key].length > 0))
-    return false;
-  if (!["input", "resume", "stop", "restart"].includes(String(c2.action)) || !Number.isInteger(c2.agentDepth) || Number(c2.agentDepth) < 0 || Number(c2.agentDepth) > 3)
-    return false;
-  const source = c2.source;
-  return Boolean(source && typeof source.id === "string" && typeof source.authorId === "string" && typeof source.body === "string" && typeof source.createdAt === "number" && Array.isArray(source.attachments));
-}
-
-// packages/api-contract/dist/artifacts.js
-var ARTIFACT_EXTENSIONS_BY_MIME = {
-  "text/html": [".html", ".htm"],
-  "image/svg+xml": [".svg"],
-  "application/pdf": [".pdf"],
-  "text/markdown": [".md"],
-  "image/png": [".png"],
-  "image/jpeg": [".jpg", ".jpeg"],
-  "image/gif": [".gif"],
-  "image/webp": [".webp"],
-  "text/plain": [".txt", ".log"],
-  "application/json": [".json"],
-  "text/csv": [".csv"],
-  "application/zip": [".zip"],
-  "application/octet-stream": []
-};
-var ARTIFACT_MIME_BY_EXTENSION = Object.fromEntries(Object.entries(ARTIFACT_EXTENSIONS_BY_MIME).flatMap(([mime, extensions]) => extensions.map((extension2) => [extension2, mime])));
-var ARTIFACT_MAXIMUM_BYTES = 25 * 1024 * 1024;
-
-// packages/api-contract/dist/daemon.js
-init_agent_access();
-
-// packages/api-contract/dist/system-events.js
-var SERVER_EVENT_KINDS = [
-  "joined",
-  "schedule-ran",
-  "corner-opened",
-  "check-passed",
-  "check-failed",
-  "merged",
-  "grant-decided",
-  "connector-offer-decided",
-  "turn-cancelled",
-  "choice-answered",
-  "choice-skipped",
-  "poll-closed"
-];
-
-// packages/api-contract/dist/turn-silence.js
-var HICCUP_BACKOFF_MS = [0, 5e3, 2e4];
-var TURN_SILENCE_KINDS = [
-  "hiccup",
-  "wrong-model",
-  "allowance-spent",
-  "not-signed-in",
-  "workspace-failure",
-  "helper-out-of-date",
-  "update-interrupted",
-  "offline"
-];
-var TURN_RECEIPT_REASON_KINDS = [
-  "hiccup",
-  "wrong-model",
-  "allowance-spent",
-  "not-signed-in",
-  "workspace-failure",
-  "helper-out-of-date",
-  "update-interrupted",
-  "offline",
-  "model-selection-unavailable"
-];
-function isTurnReceiptReasonKind(value) {
-  return typeof value === "string" && TURN_RECEIPT_REASON_KINDS.includes(value);
-}
-function receiptKindToSilenceKind(kind) {
-  if (kind === "model-selection-unavailable" || kind === "wrong-model")
-    return "wrong-model";
-  if (kind && TURN_SILENCE_KINDS.includes(kind))
-    return kind;
-  return "hiccup";
-}
-var ALLOWANCE_UNTIL = /(?:try again at|until|resets?(?: at)?|available(?: again)?(?: at)?)\s+([A-Z][a-z]{2,9}\s+\d{1,2}(?:st|nd|rd|th)?,?\s+\d{4}(?:\s+\d{1,2}:\d{2}(?:\s*[AP]M)?)?)/i;
-var REPO_FROM_URL = /github\.com[:/]([^/\s]+\/[^/\s.]+?)(?:\.git)?(?:[/\s]|$)/i;
-var REPO_FROM_SLUG = /\b([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)\b/;
-function firstMatch(value, pattern) {
-  const match = value.match(pattern);
-  const captured = match?.[1]?.trim();
-  return captured || void 0;
-}
-function classifyTurnSilence(reason, reasonKind) {
-  if (isTurnReceiptReasonKind(reasonKind)) {
-    const kind = receiptKindToSilenceKind(reasonKind);
-    if (kind === "hiccup") {
-      return { kind, fault: (reason ?? "").trim() || "the turn stalled" };
-    }
-    return {
-      kind,
-      ...kind === "allowance-spent" ? { allowanceUntil: firstMatch(reason ?? "", ALLOWANCE_UNTIL) } : {},
-      ...kind === "workspace-failure" ? { repo: repoFromReason(reason ?? "") } : {}
-    };
-  }
-  const text2 = (reason ?? "").trim();
-  if (!text2)
-    return { kind: "hiccup", fault: "the turn stalled" };
-  if (/model selection unavailable/i.test(text2) || /isn't available/i.test(text2) || /not advertised/i.test(text2)) {
-    return { kind: "wrong-model" };
-  }
-  if (/\b402\b/.test(text2) || /usage limit/i.test(text2) || /more credits/i.test(text2) || /quota/i.test(text2) || /allowance is spent/i.test(text2)) {
-    return {
-      kind: "allowance-spent",
-      allowanceUntil: firstMatch(text2, ALLOWANCE_UNTIL)
-    };
-  }
-  if (/authentication required/i.test(text2) || /not signed in/i.test(text2) || /isn't signed in/i.test(text2) || /invalid api[_ -]?key/i.test(text2) || /\b401\b/.test(text2)) {
-    return { kind: "not-signed-in" };
-  }
-  if (/command protocol/i.test(text2) || /refusing intake/i.test(text2) || /helper is out of date/i.test(text2)) {
-    return { kind: "helper-out-of-date" };
-  }
-  if (/working copy/i.test(text2) || /could not (?:clone|fetch|checkout)/i.test(text2) || /repository not found/i.test(text2) || /could not resolve host/i.test(text2) || /failed to start corner/i.test(text2) || /unable to access/i.test(text2) || /\bgit clone\b/i.test(text2) || /repository state is not verified/i.test(text2) || /incomplete repository binding/i.test(text2) || /no authoritative objective fact/i.test(text2) || /profile_busy/i.test(text2) || /broker unavailable/i.test(text2)) {
-    return { kind: "workspace-failure", repo: repoFromReason(text2) };
-  }
-  if (/helper isn't running/i.test(text2) || /helper is offline/i.test(text2)) {
-    return { kind: "offline" };
-  }
-  const fault = text2 || "the turn stalled";
-  return { kind: "hiccup", fault };
-}
-function repoFromReason(text2) {
-  return firstMatch(text2, REPO_FROM_URL) ?? firstMatch(text2, REPO_FROM_SLUG) ?? "the repository";
-}
-function isStandingWorkspaceConfigurationFault(text2) {
-  return /repository state is not verified/i.test(text2) || /incomplete repository binding/i.test(text2) || /no authoritative objective fact/i.test(text2);
-}
-function hiccupBackoffMs(attempt) {
-  const index = Math.max(1, attempt) - 1;
-  return HICCUP_BACKOFF_MS[Math.min(index, HICCUP_BACKOFF_MS.length - 1)] ?? 0;
-}
-
-// packages/api-contract/dist/institutional-memory.js
-var INSTITUTIONAL_MEMORY_PROPOSAL_VERSION = 1;
-var INSTITUTIONAL_MEMORY_BODY_MAX_BYTES = 200;
-var INSTITUTIONAL_MEMORY_KEYWORDS_MIN = 1;
-var INSTITUTIONAL_MEMORY_KEYWORDS_MAX = 6;
-var INSTITUTIONAL_MEMORY_KEYWORD_PATTERN = /^[a-z0-9][a-z0-9_./-]{2,31}$/;
-var INSTITUTIONAL_MEMORY_STOPWORDS = /* @__PURE__ */ new Set([
-  "the",
-  "and",
-  "you",
-  "your",
-  "for",
-  "with",
-  "that",
-  "this",
-  "are",
-  "was",
-  "were",
-  "but",
-  "not",
-  "have",
-  "has",
-  "had",
-  "can",
-  "all",
-  "any",
-  "our",
-  "out",
-  "use",
-  "get",
-  "got",
-  "how",
-  "what",
-  "when",
-  "who",
-  "why",
-  "will",
-  "just",
-  "from",
-  "they",
-  "them",
-  "then",
-  "than",
-  "there",
-  "here",
-  "about",
-  "into",
-  "also",
-  "its",
-  "it's",
-  "please",
-  "should",
-  "would",
-  "could",
-  "some",
-  "more",
-  "most",
-  "very",
-  "only",
-  "one",
-  "now",
-  "yes",
-  "okay",
-  "let",
-  "make",
-  "want",
-  "need",
-  "does",
-  "did",
-  "done",
-  "like",
-  "know",
-  "think",
-  "see",
-  "look",
-  "thing",
-  "things",
-  "way"
-]);
-var INSTITUTIONAL_STANDING_PREFERENCE_KEY = "standing";
-var INSTITUTIONAL_MEMORY_CANONICAL_KEY_MAX_LENGTH = 160;
-var INSTITUTIONAL_MEMORY_RATIONALE_MAX_LENGTH = 500;
-var INSTITUTIONAL_MEMORY_SOURCE_MESSAGE_MAX = 16;
-var INSTITUTIONAL_MEMORY_JOB_ERROR_MAX_LENGTH = 1e3;
-var WORKSPACE_SKILL_DESCRIPTION_MAX_LENGTH = 60;
-var WORKSPACE_SKILL_MARKDOWN_MAX_BYTES = 32 * 1024;
-var WORKSPACE_SKILL_SLUG_MAX_LENGTH = 64;
-var INSTITUTIONAL_REVIEW_FINDING_MAX = 20;
-var INSTITUTIONAL_CURATOR_ACTION_MAX = 50;
-function record3(value, label) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error(`${label} must be an object`);
-  }
-  return value;
-}
-function exactKeys(value, allowed, label) {
-  const unknown = Object.keys(value).find((key) => !allowed.includes(key));
-  if (unknown)
-    throw new Error(`${label} has unknown field ${unknown}`);
-}
-function omitted(value) {
-  return value === void 0 || value === null;
-}
-function boundedText(value, label, maximum, bytes = false) {
-  if (typeof value !== "string" || value.includes("\0"))
-    throw new Error(`${label} is invalid`);
-  const normalized = value.trim();
-  const size = bytes ? new TextEncoder().encode(normalized).length : normalized.length;
-  if (!normalized || size > maximum)
-    throw new Error(`${label} is invalid`);
-  return normalized;
-}
-var FILLER_OPENINGS = /^(?:the user|user|this user|the requester|requester|it is|it's|note that|please|remember that|keep in mind)\b/i;
-var HEDGES = /\b(?:maybe|perhaps|probably|possibly|might|seems?|i think|apparently|likely)\b/i;
-function conciseInstitutionalMemoryBody(value) {
-  const body = boundedText(value, `institutional memory body (at most ${INSTITUTIONAL_MEMORY_BODY_MAX_BYTES} bytes)`, INSTITUTIONAL_MEMORY_BODY_MAX_BYTES, true);
-  if (FILLER_OPENINGS.test(body)) {
-    throw new Error("institutional memory body must state the fact itself, without a filler opening");
-  }
-  if (/[.!?;]\s+\S/.test(body) || /\n/.test(body)) {
-    throw new Error("institutional memory body must be one sentence");
-  }
-  if (HEDGES.test(body)) {
-    throw new Error("institutional memory body must not hedge; save only what is known");
-  }
-  return body;
-}
-function institutionalMemoryKeywords(value) {
-  if (!Array.isArray(value) || value.length < INSTITUTIONAL_MEMORY_KEYWORDS_MIN || value.length > INSTITUTIONAL_MEMORY_KEYWORDS_MAX) {
-    throw new Error(`institutional memory needs ${INSTITUTIONAL_MEMORY_KEYWORDS_MIN} to ${INSTITUTIONAL_MEMORY_KEYWORDS_MAX} keywords`);
-  }
-  const keywords = value.map((keyword) => typeof keyword === "string" ? keyword.trim().toLocaleLowerCase("en-US") : "");
-  if (keywords.some((keyword) => !INSTITUTIONAL_MEMORY_KEYWORD_PATTERN.test(keyword) || INSTITUTIONAL_MEMORY_STOPWORDS.has(keyword))) {
-    throw new Error("institutional memory keywords are distinctive single lower-case words of 3 to 32 letters, digits, or _./-");
-  }
-  if (new Set(keywords).size !== keywords.length) {
-    throw new Error("institutional memory keywords must be unique");
-  }
-  return keywords;
-}
-function parseInstitutionalMemoryProposal(value) {
-  const proposal = record3(value, "institutional memory proposal");
-  exactKeys(proposal, [
-    "proposalVersion",
-    "candidateType",
-    "memoryKind",
-    "subjectIdentityId",
-    "canonicalKey",
-    "body",
-    "keywords",
-    "source",
-    "audience",
-    "confidence",
-    "classification",
-    "cas"
-  ], "institutional memory proposal");
-  if (proposal.proposalVersion !== INSTITUTIONAL_MEMORY_PROPOSAL_VERSION) {
-    throw new Error("institutional memory proposal version is unsupported");
-  }
-  if (proposal.candidateType !== "correction_candidate" && proposal.candidateType !== "fact_candidate" && proposal.candidateType !== "preference_candidate") {
-    throw new Error("institutional memory candidate type is invalid");
-  }
-  if (proposal.memoryKind !== "workspace_fact" && proposal.memoryKind !== "human_profile_fact") {
-    throw new Error("institutional memory kind is invalid");
-  }
-  if (proposal.audience !== "workspace" && proposal.audience !== "human_profile") {
-    throw new Error("institutional memory audience is invalid");
-  }
-  if (typeof proposal.confidence !== "number" || !Number.isFinite(proposal.confidence) || proposal.confidence < 0 || proposal.confidence > 1) {
-    throw new Error("institutional memory confidence is invalid");
-  }
-  const source = record3(proposal.source, "institutional memory source");
-  exactKeys(source, ["roomId", "messageIds"], "institutional memory source");
-  const roomId = boundedText(source.roomId, "institutional memory source room", 200);
-  if (!Array.isArray(source.messageIds) || source.messageIds.length === 0 || source.messageIds.length > INSTITUTIONAL_MEMORY_SOURCE_MESSAGE_MAX) {
-    throw new Error("institutional memory source messages are invalid");
-  }
-  const messageIds = source.messageIds.map((messageId) => boundedText(messageId, "institutional memory source message", 200));
-  if (new Set(messageIds).size !== messageIds.length) {
-    throw new Error("institutional memory source messages must be unique");
-  }
-  const classification = record3(proposal.classification, "institutional memory classification");
-  exactKeys(classification, ["stillTrueForAnotherRequester", "subjectIsRequester", "rationale"], "institutional memory classification");
-  if (classification.stillTrueForAnotherRequester !== void 0 && typeof classification.stillTrueForAnotherRequester !== "boolean") {
-    throw new Error("institutional memory classification test is invalid");
-  }
-  if (classification.subjectIsRequester !== void 0 && typeof classification.subjectIsRequester !== "boolean") {
-    throw new Error("institutional memory subject classification is invalid");
-  }
-  const canonicalKey = boundedText(proposal.canonicalKey, "institutional memory canonical key", INSTITUTIONAL_MEMORY_CANONICAL_KEY_MAX_LENGTH);
-  if (canonicalKey === INSTITUTIONAL_STANDING_PREFERENCE_KEY) {
-    throw new Error("the standing preference key is reserved for owner-confirmed preferences");
+  readVaultFn;
+  revokeGrantsFn;
+  /** Armed only while this helper owns a live sign-in ceremony. */
+  connectWatch;
+  started = false;
+  stopped = false;
+  /** One install at a time per connector; concurrent wakes skip it. */
+  inFlight = /* @__PURE__ */ new Set();
+  mcp;
+  constructor(options) {
+    this.agentId = options.agentId;
+    this.api = options.api;
+    this.log = options.log ?? (() => {
+    });
+    this.install = options.install ?? installSquire;
+    this.installTailscale = options.installTailscale ?? installTailscale;
+    this.watchTailscaleSignIn = options.watchTailscaleSignIn ?? watchTailscaleSignIn;
+    this.registryHomeDir = options.registryHome ?? process.env.HOME ?? process.cwd();
+    this.installRegistry = options.installRegistry ?? installRegistryMcp;
+    this.readVaultFn = options.readVault ?? readVault;
+    this.revokeGrantsFn = options.revokeGrants ?? revokeGrants;
   }
-  const rationale = boundedText(classification.rationale, "institutional memory classification rationale", INSTITUTIONAL_MEMORY_RATIONALE_MAX_LENGTH);
-  const cas = record3(proposal.cas, "institutional memory CAS");
-  exactKeys(cas, ["baseVersion", "supersedesItemId"], "institutional memory CAS");
-  if (cas.baseVersion !== null && (!Number.isSafeInteger(cas.baseVersion) || cas.baseVersion < 0)) {
-    throw new Error("institutional memory base version is invalid");
+  start() {
+    if (this.stopped || this.started)
+      return;
+    this.started = true;
+    void this.runOnce();
   }
-  const supersedesItemId = cas.supersedesItemId === void 0 ? void 0 : boundedText(cas.supersedesItemId, "institutional memory supersedes item", 200);
-  const workspaceFact = proposal.memoryKind === "workspace_fact";
-  if (classification.subjectIsRequester !== void 0 && classification.subjectIsRequester === workspaceFact) {
-    throw new Error("institutional memory kind contradicts its subject");
+  /** Event-driven drain, also called when the socket reconnects. */
+  wake() {
+    if (this.stopped)
+      return;
+    void this.runOnce();
   }
-  if (proposal.audience === "workspace" !== workspaceFact) {
-    throw new Error("institutional memory audience contradicts its kind");
+  stop() {
+    this.stopped = true;
+    this.connectWatch?.();
+    this.connectWatch = void 0;
+    this.tailscaleWatch?.();
+    this.tailscaleWatch = void 0;
   }
-  const subjectIdentityId = proposal.subjectIdentityId === void 0 ? void 0 : boundedText(proposal.subjectIdentityId, "institutional memory profile subject", 200);
-  if (workspaceFact === Boolean(subjectIdentityId)) {
-    throw new Error(workspaceFact ? "workspace facts cannot name a profile subject" : "human profile facts require a subject");
+  /**
+   * Watch the sign-in this helper is holding open. The phone paints
+   * `installing` for the whole ceremony and only a drain that reaches
+   * Squire's already-connected short-circuit flips the row to `connected`;
+   * nothing on the wire announces that the human finished, so the connect
+   * process exiting is the signal. Drain on that, and the row settles on the
+   * process exit event without waiting for a server read timer.
+   */
+  watchConnectSignIn() {
+    if (this.stopped || this.connectWatch)
+      return;
+    const claim = squireConnectSession();
+    this.connectWatch = claim?.onExit?.(() => {
+      this.connectWatch = void 0;
+      if (!this.stopped)
+        void this.runOnce();
+    });
   }
-  return {
-    proposalVersion: INSTITUTIONAL_MEMORY_PROPOSAL_VERSION,
-    candidateType: proposal.candidateType,
-    memoryKind: proposal.memoryKind,
-    ...subjectIdentityId ? { subjectIdentityId } : {},
-    canonicalKey,
-    body: conciseInstitutionalMemoryBody(proposal.body),
-    keywords: institutionalMemoryKeywords(proposal.keywords),
-    source: { roomId, messageIds },
-    audience: proposal.audience,
-    confidence: proposal.confidence,
-    classification: {
-      ...classification.stillTrueForAnotherRequester === void 0 ? {} : {
-        stillTrueForAnotherRequester: classification.stillTrueForAnotherRequester
-      },
-      ...classification.subjectIsRequester === void 0 ? {} : {
-        subjectIsRequester: classification.subjectIsRequester
-      },
-      rationale
-    },
-    cas: {
-      baseVersion: cas.baseVersion,
-      ...supersedesItemId ? { supersedesItemId } : {}
+  /** Drain the queue once; every failure is logged, never raised. */
+  async runOnce() {
+    let assignments;
+    try {
+      const result = await this.api.execute("getConnectorAssignments", { agentId: this.agentId });
+      assignments = result.assignments;
+    } catch (error) {
+      this.log(`connector assignments unavailable: ${describe(error)}`);
+      return;
+    }
+    for (const assignment of assignments) {
+      const key = `${assignment.kind}:${assignment.connectorId}`;
+      if (assignment.kind === "uninstall")
+        continue;
+      if (this.inFlight.has(key))
+        continue;
+      this.inFlight.add(key);
+      void this.handle(assignment).catch((error) => this.log(`connector assignment ${key} failed: ${describe(error)}`)).finally(() => this.inFlight.delete(key));
     }
-  };
-}
-function repositoryRelativePath(value) {
-  if (typeof value !== "string" || value.length === 0 || value.length > 500)
-    return void 0;
-  if (value.startsWith("/") || value.includes("\\") || value.split("/").some((segment) => segment === ".." || segment === "")) {
-    return void 0;
   }
-  return value;
-}
-function optionalAnchorField(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function parseInstitutionalMergeReviewProposal(value) {
-  const proposal = record3(value, "institutional merge review proposal");
-  exactKeys(proposal, ["proposalVersion", "skill", "findings"], "institutional merge review proposal");
-  if (proposal.proposalVersion !== 1) {
-    throw new Error("institutional merge review proposal version is unsupported");
+  squire() {
+    this.mcp ??= defaultSquireMcpClient({ agentId: this.agentId, roomId: "connector" });
+    return this.mcp;
   }
-  let skill = null;
-  if (!omitted(proposal.skill)) {
-    const rawSkill = record3(proposal.skill, "workspace skill proposal");
-    exactKeys(rawSkill, ["slug", "description", "markdown", "baseVersion", "anchor"], "workspace skill proposal");
-    const slug = boundedText(rawSkill.slug, "workspace skill slug", WORKSPACE_SKILL_SLUG_MAX_LENGTH);
-    if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug)) {
-      throw new Error("workspace skill slug is invalid");
-    }
-    const anchor = record3(rawSkill.anchor, "workspace skill code anchor");
-    exactKeys(anchor, ["repository", "targetCommit", "path"], "workspace skill code anchor");
-    if (rawSkill.baseVersion !== null && (!Number.isSafeInteger(rawSkill.baseVersion) || rawSkill.baseVersion <= 0)) {
-      throw new Error("workspace skill base version is invalid");
-    }
-    skill = {
-      slug,
-      description: boundedText(rawSkill.description, "workspace skill description", WORKSPACE_SKILL_DESCRIPTION_MAX_LENGTH),
-      markdown: boundedText(rawSkill.markdown, "workspace skill markdown", WORKSPACE_SKILL_MARKDOWN_MAX_BYTES, true),
-      baseVersion: rawSkill.baseVersion,
-      anchor: {
-        repository: boundedText(anchor.repository, "workspace skill repository", 300),
-        targetCommit: boundedText(anchor.targetCommit, "workspace skill target commit", 160),
-        ...optionalAnchorField("path", repositoryRelativePath(anchor.path))
+  async handle(assignment) {
+    const pairingGeneration = assignment.kind === "install" || assignment.kind === "uninstall" ? assignment.pairingGeneration : void 0;
+    if (assignment.kind === "install") {
+      if (assignment.connectorType?.startsWith("google-")) {
+        await this.api.execute("postConnectorStatus", {
+          agentId: this.agentId,
+          connectorId: assignment.connectorId,
+          steps: [{
+            label: "Connect app",
+            status: "failed",
+            reason: "Reconnect through Connect an app"
+          }],
+          errorMessage: "Reconnect through Connect an app",
+          ...pairingGeneration !== void 0 ? { pairingGeneration } : {}
+        });
+      } else if (assignment.connectorType === "registry-mcp") {
+        await this.runRegistryMcpInstall(assignment);
+      } else if (assignment.connectorType === "tailscale") {
+        await this.runTailscaleInstall(assignment.connectorId, pairingGeneration);
+      } else {
+        await this.runInstall(assignment.connectorId, pairingGeneration, assignment.forceReloginProvider);
       }
-    };
+    } else if (assignment.kind === "sync" && assignment.connectorType === "tailscale") {
+      await this.runTailscaleInstall(assignment.connectorId);
+    } else if (assignment.kind === "sync") {
+      await this.runSync();
+    } else if (assignment.kind === "refresh-google-grant") {
+      this.log("retired Google grant assignment ignored; reconnect through Connect an app");
+    } else if (assignment.kind === "revoke-grants")
+      await this.runRevoke(assignment.connectorId, assignment.reference);
   }
-  if (!Array.isArray(proposal.findings) || proposal.findings.length > INSTITUTIONAL_REVIEW_FINDING_MAX) {
-    throw new Error("institutional review findings are invalid");
+  ceremonyKey(assignment) {
+    return `${assignment.connectorId}:${assignment.pairingGeneration ?? 1}`;
   }
-  const findings = proposal.findings.map((value2) => {
-    const finding = record3(value2, "institutional review finding");
-    exactKeys(finding, ["taxonomy", "summary", "severity", "confidence", "path"], "institutional review finding");
-    if (finding.severity !== "info" && finding.severity !== "warning" && finding.severity !== "error") {
-      throw new Error("institutional review finding severity is invalid");
-    }
-    const severity = finding.severity;
-    if (typeof finding.confidence !== "number" || !Number.isFinite(finding.confidence) || finding.confidence < 0 || finding.confidence > 1) {
-      throw new Error("institutional review finding confidence is invalid");
-    }
-    return {
-      taxonomy: boundedText(finding.taxonomy, "institutional review finding taxonomy", 120),
-      summary: boundedText(finding.summary, "institutional review finding summary", 1e3),
-      severity,
-      confidence: finding.confidence,
-      ...omitted(finding.path) ? {} : { path: boundedText(finding.path, "institutional review finding path", 500) }
+  async runRegistryMcpInstall(assignment) {
+    const generation = assignment.pairingGeneration !== void 0 ? { pairingGeneration: assignment.pairingGeneration } : {};
+    const ceremonyKey = this.ceremonyKey(assignment);
+    const result = await this.installRegistry({
+      api: this.api,
+      agentId: this.agentId,
+      assignment,
+      home: this.registryHomeDir
+    });
+    const stopWatch = () => {
     };
-  });
-  return { proposalVersion: 1, skill, findings };
-}
-function parseInstitutionalCuratorProposal(value) {
-  const proposal = record3(value, "institutional curator proposal");
-  exactKeys(proposal, ["proposalVersion", "partition", "actions"], "institutional curator proposal");
-  if (proposal.proposalVersion !== 1) {
-    throw new Error("institutional curator proposal version is unsupported");
-  }
-  const partition = boundedText(proposal.partition, "institutional curator partition", 300);
-  if (!Array.isArray(proposal.actions) || proposal.actions.length > INSTITUTIONAL_CURATOR_ACTION_MAX) {
-    throw new Error("institutional curator actions are invalid");
-  }
-  const actions = proposal.actions.map((value2) => {
-    const action = record3(value2, "institutional curator action");
-    exactKeys(action, [
-      "action",
-      "targetType",
-      "targetId",
-      "baseVersion",
-      "duplicateIds",
-      "body",
-      "description",
-      "markdown",
-      "rationale"
-    ], "institutional curator action");
-    if (action.action !== "retain" && action.action !== "stale" && action.action !== "archive" && action.action !== "consolidate") {
-      throw new Error("institutional curator action kind is invalid");
-    }
-    if (action.targetType !== "memory_item" && action.targetType !== "workspace_skill") {
-      throw new Error("institutional curator target type is invalid");
+    if (result.status === "connected") {
+      stopWatch();
+      this.registryCeremonies.delete(ceremonyKey);
+      await this.api.execute("installConnector", {
+        agentId: this.agentId,
+        connectorId: assignment.connectorId,
+        ...generation
+      });
+      return;
     }
-    if (!Number.isSafeInteger(action.baseVersion) || action.baseVersion <= 0) {
-      throw new Error("institutional curator base version is invalid");
+    if (result.status === "installing") {
+      const ceremony = this.registryCeremonies.get(ceremonyKey);
+      if (!ceremony || ceremony.attemptId !== result.attemptId) {
+        this.registryCeremonies.set(ceremonyKey, {
+          attemptId: result.attemptId,
+          endsAt: result.attemptExpiresAt
+        });
+      } else if (ceremony.expired) {
+        return;
+      } else if (Date.now() >= ceremony.endsAt) {
+        stopWatch();
+        this.registryCeremonies.set(ceremonyKey, { ...ceremony, expired: true });
+        await this.api.execute("postConnectorStatus", {
+          agentId: this.agentId,
+          connectorId: assignment.connectorId,
+          steps: [
+            { label: "Connect provider account", status: "failed", reason: CEREMONY_EXPIRED }
+          ],
+          signIn: null,
+          errorMessage: CEREMONY_EXPIRED,
+          ...generation
+        });
+        return;
+      }
+    } else {
+      this.registryCeremonies.delete(ceremonyKey);
     }
-    if (!Array.isArray(action.duplicateIds) || action.duplicateIds.length > 20 || action.duplicateIds.some((id) => typeof id !== "string" || !id || id.length > 100)) {
-      throw new Error("institutional curator duplicate ids are invalid");
+    await this.api.execute("postConnectorStatus", {
+      agentId: this.agentId,
+      connectorId: assignment.connectorId,
+      steps: result.steps,
+      ...result.status === "installing" ? {
+        signIn: {
+          method: "oauth",
+          url: result.authorizationUrl,
+          attemptId: result.attemptId
+        }
+      } : { signIn: null, errorMessage: result.errorMessage },
+      ...generation
+    });
+  }
+  /** Install Tailscale and publish its browser login URL until the tailnet is connected. */
+  async runTailscaleInstall(connectorId, pairingGeneration) {
+    const generation = pairingGeneration !== void 0 ? { pairingGeneration } : {};
+    const report = async (steps2) => {
+      try {
+        await this.api.execute("postConnectorStatus", {
+          agentId: this.agentId,
+          connectorId,
+          steps: steps2,
+          ...generation
+        });
+      } catch (error) {
+        this.log(`step report failed: ${describe(error)}`);
+      }
+    };
+    const existing = await this.connectorRow(connectorId);
+    const result = await this.installTailscale({
+      onProgress: report,
+      ...existing?.signIn ? { signIn: existing.signIn } : {}
+    });
+    if (result.status === "connected") {
+      this.tailscaleWatch?.();
+      this.tailscaleWatch = void 0;
+      await this.api.execute("installConnector", {
+        agentId: this.agentId,
+        connectorId,
+        ...result.signedInAs ? { signedInAs: result.signedInAs } : {},
+        ...generation
+      });
+      return;
     }
-    if (action.action === "consolidate" && action.duplicateIds.length === 0) {
-      throw new Error("institutional curator consolidation needs duplicates");
+    await this.api.execute("postConnectorStatus", {
+      agentId: this.agentId,
+      connectorId,
+      steps: result.steps,
+      signIn: result.status === "installing" ? result.signIn : null,
+      ...result.status === "error" ? { errorMessage: result.errorMessage } : {},
+      ...generation
+    });
+    if (result.status === "installing" && !this.tailscaleWatch)
+      this.tailscaleWatch = this.watchTailscaleSignIn(() => {
+        this.tailscaleWatch = void 0;
+        if (!this.stopped)
+          this.wake();
+      });
+  }
+  /** Install Trusty Squire, reporting every step as it settles.
+   *  `forceReloginProvider` is set only for a login-wall reconnect. */
+  async runInstall(connectorId, pairingGeneration, forceReloginProvider) {
+    const generation = pairingGeneration !== void 0 ? { pairingGeneration } : {};
+    const claim = squireConnectSession();
+    const spent = claim ? Date.now() - claim.claimedAt >= CONNECT_TIMEOUT_MS : false;
+    if (claim && !spent && isProcessAlive(claim.pid)) {
+      if (!await this.rearmedByHuman(connectorId)) {
+        this.log(`trusty-squire connect still waiting for sign-in (pid ${String(claim.pid)}); leaving it alone`);
+        this.watchConnectSignIn();
+        return;
+      }
+      this.log("trusty-squire re-pair requested; superseding the connect holding the browser");
+    } else if (spent && (await this.connectorRow(connectorId))?.signIn) {
+      releaseSquireConnectSession((message) => this.log(`[trusty-squire] ${message}`));
+      await this.api.execute("postConnectorStatus", {
+        agentId: this.agentId,
+        connectorId,
+        steps: [{ label: "waiting for sign-in", status: "failed", reason: CEREMONY_EXPIRED }],
+        signIn: null,
+        errorMessage: CEREMONY_EXPIRED,
+        ...generation
+      });
+      return;
     }
-    if (action.action !== "consolidate" && action.duplicateIds.length !== 0) {
-      throw new Error("institutional curator lifecycle action cannot carry duplicates");
+    const report = async (steps2) => {
+      try {
+        await this.api.execute("postConnectorStatus", {
+          agentId: this.agentId,
+          connectorId,
+          steps: steps2,
+          ...generation
+        });
+      } catch (error) {
+        this.log(`step report failed: ${describe(error)}`);
+      }
+    };
+    const result = await this.install({
+      workspaceId: this.agentId,
+      mcp: this.squire(),
+      onProgress: report,
+      log: (message) => this.log(`[trusty-squire] ${message}`),
+      ...forceReloginProvider ? { forceReloginProvider } : {}
+    });
+    if (result.status === "error") {
+      await this.api.execute("postConnectorStatus", {
+        agentId: this.agentId,
+        connectorId,
+        steps: result.steps,
+        signIn: null,
+        errorMessage: result.errorMessage,
+        ...generation
+      });
+      return;
     }
-    const body = omitted(action.body) ? void 0 : action.targetType === "memory_item" ? conciseInstitutionalMemoryBody(action.body) : boundedText(action.body, "institutional curator body", INSTITUTIONAL_MEMORY_BODY_MAX_BYTES, true);
-    const description = omitted(action.description) ? void 0 : boundedText(action.description, "institutional curator skill description", WORKSPACE_SKILL_DESCRIPTION_MAX_LENGTH);
-    const markdown = omitted(action.markdown) ? void 0 : boundedText(action.markdown, "institutional curator skill markdown", WORKSPACE_SKILL_MARKDOWN_MAX_BYTES, true);
-    if (action.action === "consolidate" && (action.targetType === "memory_item" && (!body || description || markdown) || action.targetType === "workspace_skill" && (!description || !markdown || body))) {
-      throw new Error("institutional curator consolidation content is invalid");
+    if (result.status === "connected") {
+      await this.api.execute("installConnector", {
+        agentId: this.agentId,
+        connectorId,
+        ...result.squireVersion ? { squireVersion: result.squireVersion } : {},
+        ...generation
+      });
+      await this.reportVault(connectorId);
+      return;
     }
-    if (action.action !== "consolidate" && (body || description || markdown)) {
-      throw new Error("institutional curator lifecycle action cannot replace content");
+    await this.api.execute("postConnectorStatus", {
+      agentId: this.agentId,
+      connectorId,
+      steps: result.steps,
+      signIn: result.signIn ?? null,
+      ...result.squireVersion ? { squireVersion: result.squireVersion } : {},
+      ...generation
+    });
+    this.watchConnectSignIn();
+  }
+  /** This connector's own row, or undefined when the server cannot answer. */
+  async connectorRow(connectorId) {
+    try {
+      const status = await this.api.execute("getConnectorStatus", {
+        agentId: this.agentId,
+        connectorId
+      });
+      return status.connectorId === connectorId ? status : void 0;
+    } catch (error) {
+      this.log(`connector status unavailable: ${describe(error)}`);
+      return void 0;
     }
-    return {
-      action: action.action,
-      targetType: action.targetType,
-      targetId: boundedText(action.targetId, "institutional curator target id", 100),
-      baseVersion: action.baseVersion,
-      duplicateIds: [...new Set(action.duplicateIds)],
-      ...body ? { body } : {},
-      ...description ? { description } : {},
-      ...markdown ? { markdown } : {},
-      rationale: boundedText(action.rationale, "institutional curator rationale", 500)
-    };
-  });
-  return { proposalVersion: 1, partition, actions };
+  }
+  /**
+   * True when a human asked for this connector again while a connect of ours
+   * still holds the browser. `pairConnector` re-arms the row to its default
+   * all-pending steps, so a row whose every step is still pending is a fresh
+   * request; the row carrying the ceremony this helper published has settled
+   * ones. An unreadable row is not evidence of a retry.
+   */
+  async rearmedByHuman(connectorId) {
+    const status = await this.connectorRow(connectorId);
+    if (!status)
+      return false;
+    return status.steps.length > 0 && status.steps.every((step3) => step3.status === "pending");
+  }
+  /** One vault report covers every live trusty-squire connector on this helper. */
+  async runSync() {
+    await this.reportVault();
+  }
+  async runRevoke(connectorId, reference) {
+    const outcome = await this.revokeGrantsFn(this.squire(), reference);
+    this.log(`revoked ${outcome.revoked} grant(s) on ${reference}` + (outcome.failed ? `, ${outcome.failed} failed` : ""));
+    if (outcome.failed)
+      return;
+    await this.api.execute("revokeConnectionGrants", {
+      agentId: this.agentId,
+      ref: reference
+    });
+    void connectorId;
+  }
+  async reportVault(_connectorId) {
+    const connections = await this.readVaultFn(this.squire());
+    await this.api.execute("postConnectorVault", { agentId: this.agentId, connections });
+  }
+};
+function describe(error) {
+  return error instanceof Error ? error.message : String(error);
 }
 
+// apps/body/dist/institutional-memory-shadow-worker.js
+import { mkdtemp as mkdtemp2, rm as rm5 } from "node:fs/promises";
+import { tmpdir as tmpdir3 } from "node:os";
+import { resolve as resolve12 } from "node:path";
+
 // apps/body/dist/institutional-context.js
+import { performance as performance2 } from "node:perf_hooks";
 var INSTITUTIONAL_CONTEXT_TIMEOUT_MS = 200;
 var INSTITUTIONAL_MEMORY_LIVE_FLAG = "BEELINE_INSTITUTIONAL_MEMORY_ENABLED";
 function institutionalMemoryFlagEnabled(env, flag) {
@@ -29993,21 +30169,34 @@ var EMPTY_INSTITUTIONAL_CONTEXT = {
   totalBytes: 0,
   omitted: {}
 };
-async function institutionalContextForTurn(api, roomId, log2 = console.warn, timeoutMs = INSTITUTIONAL_CONTEXT_TIMEOUT_MS, enabled = institutionalMemoryFlagEnabled(process.env, INSTITUTIONAL_MEMORY_LIVE_FLAG)) {
-  if (!enabled)
-    return EMPTY_INSTITUTIONAL_CONTEXT;
+var INSTITUTIONAL_CONTEXT_MISSED_TEXT = "institutional memory did not load this turn; use search_memory before concluding anything is not stored.";
+function startInstitutionalContextFetch(api, roomId, enabled = institutionalMemoryFlagEnabled(process.env, INSTITUTIONAL_MEMORY_LIVE_FLAG), now2 = () => performance2.now()) {
+  const startedAt = now2();
+  const promise = enabled ? api.execute("getInstitutionalContext", { roomId }) : Promise.resolve(EMPTY_INSTITUTIONAL_CONTEXT);
+  promise.catch(() => {
+  });
+  return { promise, startedAt };
+}
+async function awaitInstitutionalContext(fetch2, log2 = console.warn, budgetMs = INSTITUTIONAL_CONTEXT_TIMEOUT_MS, now2 = () => performance2.now()) {
+  const remainingMs = budgetMs - (now2() - fetch2.startedAt);
   let timer;
   try {
-    return await Promise.race([
-      api.execute("getInstitutionalContext", { roomId }),
+    const snapshot = await Promise.race([
+      fetch2.promise,
       new Promise((_, reject) => {
-        timer = setTimeout(() => reject(new Error("institutional context timed out")), timeoutMs);
+        timer = setTimeout(() => reject(new Error("institutional context timed out")), Math.max(0, remainingMs));
         timer.unref?.();
       })
     ]);
+    const served = snapshot.text !== "" || snapshot.standingPreference !== void 0;
+    return { ...snapshot, outcome: served ? "served" : "empty" };
   } catch (error) {
     log2(`institutional context unavailable: ${error instanceof Error ? error.message : String(error)}`);
-    return EMPTY_INSTITUTIONAL_CONTEXT;
+    return {
+      ...EMPTY_INSTITUTIONAL_CONTEXT,
+      text: INSTITUTIONAL_CONTEXT_MISSED_TEXT,
+      outcome: "timed-out"
+    };
   } finally {
     if (timer)
       clearTimeout(timer);
@@ -30927,7 +31116,7 @@ import { execFile as execFile12 } from "node:child_process";
 import { createHash as createHash10 } from "node:crypto";
 import { existsSync as existsSync8, mkdirSync as mkdirSync3 } from "node:fs";
 import { cp, mkdir as mkdir20, readdir as readdir8, realpath as realpath2, rm as rm9 } from "node:fs/promises";
-import { dirname as dirname18, relative as relative3, resolve as resolve29, sep as sep2 } from "node:path";
+import { dirname as dirname19, relative as relative3, resolve as resolve29, sep as sep2 } from "node:path";
 import { promisify as promisify8 } from "node:util";
 
 // apps/body/dist/grant-runner.js
@@ -30935,7 +31124,7 @@ import { execFile as execFile8 } from "node:child_process";
 import { createHash as createHash6, randomBytes as randomBytes7 } from "node:crypto";
 import { readFile as readFile12 } from "node:fs/promises";
 import { createServer as createServer3 } from "node:http";
-import { dirname as dirname11, resolve as resolve16 } from "node:path";
+import { dirname as dirname12, resolve as resolve16 } from "node:path";
 
 // packages/api-contract/dist/agent-grants.js
 var AGENT_GRANT_KINDS = [
@@ -31182,9 +31371,9 @@ function surfaceAllows(surface, capability) {
 init_agent_command();
 init_cursor_acp_bridge();
 import { execFile as execFile7, spawnSync } from "node:child_process";
-import { lstatSync as lstatSync2, readFileSync as readFileSync5, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { lstatSync as lstatSync2, readdirSync as readdirSync2, readFileSync as readFileSync5, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
-import { isAbsolute as isAbsolute2, relative, resolve as resolve14 } from "node:path";
+import { basename as basename4, dirname as dirname10, isAbsolute as isAbsolute2, relative, resolve as resolve14 } from "node:path";
 var DEFAULT_SANDBOX_POLICY = "bwrap";
 function isSandboxPolicy(value) {
   return value === "bwrap" || value === "off";
@@ -31270,6 +31459,18 @@ function credentialMaskPaths(extraPaths, home = homedir11(), stat8 = (path) => {
   }
   return masks.sort((a2, b) => a2.path.localeCompare(b.path));
 }
+function siblingAgentMaskPaths(ownRuntimeDir, listAgentDirs = (agentsRoot) => {
+  try {
+    return readdirSync2(agentsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
+}) {
+  const own = resolve14(ownRuntimeDir);
+  const agentsRoot = dirname10(own);
+  const ownName = basename4(own).toLowerCase();
+  return listAgentDirs(agentsRoot).filter((name) => name.toLowerCase() !== ownName).map((name) => ({ path: resolve14(agentsRoot, name), kind: "dir" })).sort((a2, b) => a2.path.localeCompare(b.path));
+}
 function isUnderTmp(path) {
   const rel = relative("/tmp", path);
   return rel === "" || !rel.startsWith("..") && !isAbsolute2(rel);
@@ -31584,9 +31785,9 @@ async function ensureBwrapSandbox(options = {}) {
 }
 
 // apps/body/dist/provider-key-store.js
-import { chmod as chmod4, mkdir as mkdir8, readFile as readFile11, writeFile as writeFile8 } from "node:fs/promises";
+import { chmod as chmod5, mkdir as mkdir8, readFile as readFile11, writeFile as writeFile8 } from "node:fs/promises";
 import { homedir as homedir12 } from "node:os";
-import { dirname as dirname10, resolve as resolve15 } from "node:path";
+import { dirname as dirname11, resolve as resolve15 } from "node:path";
 var PROVIDER_KEY_ENV_VARS = {
   openrouter: "OPENROUTER_API_KEY",
   openai: "OPENAI_API_KEY",
@@ -31620,10 +31821,10 @@ async function readSavedProviderKey(provider, env = process.env) {
 async function saveProviderKey(provider, key, env = process.env) {
   const path = providerKeyStorePath(env);
   const store = { ...await readProviderKeyStore(env), [provider]: key };
-  await mkdir8(dirname10(path), { recursive: true, mode: 448 });
+  await mkdir8(dirname11(path), { recursive: true, mode: 448 });
   await writeFile8(path, `${JSON.stringify(store, null, 2)}
 `, { mode: 384 });
-  await chmod4(path, 384);
+  await chmod5(path, 384);
 }
 function providerKeyFromEnvironment(provider, env = process.env) {
   const primary = env[PROVIDER_KEY_ENV_VARS[provider]]?.trim();
@@ -31658,7 +31859,7 @@ function operatorSecretResolver(env = process.env) {
       if (saved)
         return saved;
     }
-    const raw = await readFile12(resolve16(dirname11(providerKeyStorePath(env)), "secrets.json"), "utf8").catch(() => void 0);
+    const raw = await readFile12(resolve16(dirname12(providerKeyStorePath(env)), "secrets.json"), "utf8").catch(() => void 0);
     if (!raw)
       return void 0;
     try {
@@ -32230,7 +32431,7 @@ async function readHarnessTurnUsage(input) {
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { mkdir as mkdir9, writeFile as writeFile9 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
-import { dirname as dirname12, join as join8 } from "node:path";
+import { dirname as dirname13, join as join8 } from "node:path";
 var CommandExecutionContext = class {
   generationId = randomUUID7();
   path;
@@ -32240,7 +32441,7 @@ var CommandExecutionContext = class {
   }
   async enter(command) {
     this.current = command;
-    await mkdir9(dirname12(this.path), { recursive: true });
+    await mkdir9(dirname13(this.path), { recursive: true });
     await writeFile9(this.path, JSON.stringify({
       roomId: command.roomId,
       requestId: command.turnRequestId,
@@ -32337,6 +32538,9 @@ async function runServerCommandIntake(options) {
           continue;
         pending.delete(command.id);
         claimed.add(command.id);
+        const startingTurn = command.action !== "restart" && command.action !== "stop";
+        if (startingTurn)
+          options.onClaiming?.(command);
         try {
           await api.execute("claimAgentCommand", {
             roomId,
@@ -32345,6 +32549,8 @@ async function runServerCommandIntake(options) {
           });
         } catch (error) {
           claimed.delete(command.id);
+          if (startingTurn)
+            options.onClaimFailed?.(command);
           options.onError?.(error);
           continue;
         }
@@ -32408,7 +32614,7 @@ import { execFile as execFile11 } from "node:child_process";
 import { createHash as createHash9 } from "node:crypto";
 import { mkdir as mkdir18, readFile as readFile19, writeFile as writeFile14 } from "node:fs/promises";
 import { homedir as homedir14, hostname } from "node:os";
-import { dirname as dirname16, join as join13, resolve as resolve28 } from "node:path";
+import { dirname as dirname17, join as join13, resolve as resolve28 } from "node:path";
 import { promisify as promisify7 } from "node:util";
 
 // apps/body/dist/agent-home.js
@@ -33211,9 +33417,9 @@ function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false } = {}) {
 
 // apps/body/dist/agent-home.js
 import { createHash as createHash7, randomUUID as randomUUID8 } from "node:crypto";
-import { chmod as chmod5, copyFile, lstat as lstat3, mkdir as mkdir11, readFile as readFile16, readlink, readdir as readdir5, realpath, rename as rename5, rm as rm6, symlink as symlink2, unlink as unlink5, writeFile as writeFile11 } from "node:fs/promises";
+import { chmod as chmod6, copyFile, lstat as lstat3, mkdir as mkdir11, readFile as readFile16, readlink, readdir as readdir5, realpath, rename as rename5, rm as rm6, symlink as symlink2, unlink as unlink5, writeFile as writeFile11 } from "node:fs/promises";
 import { homedir as homedir13 } from "node:os";
-import { basename as basename4, dirname as dirname13, join as join10, relative as relative2, resolve as resolve21, sep } from "node:path";
+import { basename as basename5, dirname as dirname14, join as join10, relative as relative2, resolve as resolve21, sep } from "node:path";
 
 // apps/body/dist/draw-avatar-skill.js
 var DRAW_AVATAR_SKILL_NAME = "draw-avatar";
@@ -34534,7 +34740,7 @@ async function repairRoomAgentCredentialLinks(input) {
     if (!existsSync7(source))
       continue;
     const target = resolve21(root, credential.dir, credential.target);
-    await mkdir11(dirname13(target), { recursive: true, mode: 448 });
+    await mkdir11(dirname14(target), { recursive: true, mode: 448 });
     const stats = await lstat3(target).catch((error) => {
       if (isMissingPathError(error))
         return void 0;
@@ -34542,7 +34748,7 @@ async function repairRoomAgentCredentialLinks(input) {
     });
     if (stats?.isSymbolicLink()) {
       const linked = await readlink(target);
-      if (resolve21(dirname13(target), linked) === source)
+      if (resolve21(dirname14(target), linked) === source)
         continue;
     }
     if (stats) {
@@ -34999,8 +35205,8 @@ function readJsonObject(path) {
   }
 }
 async function provisionManagedSkillsDir(target, managedSkills, sharedSkills, optionalShares) {
-  const parent = dirname13(target);
-  await assertRealContainedDirectory(parent, dirname13(parent));
+  const parent = dirname14(target);
+  await assertRealContainedDirectory(parent, dirname14(parent));
   const plan = await planManagedSkills(managedSkills, sharedSkills, optionalShares);
   if (await materializedSkillManifest(target) === plan.manifest)
     return;
@@ -35221,7 +35427,7 @@ async function walkSafeSkillTree(source, sourceRoot, visitor, rel = "") {
   const stats = await lstat3(resolvedSource);
   if (stats.isSymbolicLink())
     throw new Error(`shared skill contains a symlink: ${source}`);
-  if (BLOCKED_SHARED_FILENAMES.test(basename4(source))) {
+  if (BLOCKED_SHARED_FILENAMES.test(basename5(source))) {
     throw new Error(`shared skill contains credential or configuration material: ${source}`);
   }
   if (stats.isDirectory()) {
@@ -35246,20 +35452,20 @@ async function copySafeSkillTree(source, target, sourceRoot) {
     file: async (rel, realPath) => {
       const destination = resolve21(target, rel);
       await copyFile(realPath, destination);
-      await chmod5(destination, 384);
+      await chmod6(destination, 384);
     }
   });
 }
 async function writeIsolatedHarnessFile(path, content) {
-  const parent = dirname13(path);
+  const parent = dirname14(path);
   const parentStats = await lstat3(parent);
   if (!parentStats.isDirectory() || parentStats.isSymbolicLink()) {
     throw new Error(`isolated harness parent is not a real directory: ${parent}`);
   }
-  const temporary = resolve21(parent, `.${basename4(path)}.${process.pid}.${randomUUID8()}.tmp`);
+  const temporary = resolve21(parent, `.${basename5(path)}.${process.pid}.${randomUUID8()}.tmp`);
   try {
     await writeFile11(temporary, content, { mode: 384, flag: "wx" });
-    await chmod5(temporary, 384);
+    await chmod6(temporary, 384);
     await rename5(temporary, path);
   } finally {
     await unlink5(temporary).catch(() => void 0);
@@ -35324,7 +35530,7 @@ function agentCommandCatalogPublisher(input) {
 
 // apps/body/dist/attachment-delivery.js
 import { mkdir as mkdir12, writeFile as writeFile12 } from "node:fs/promises";
-import { basename as basename5, extname, join as join11 } from "node:path";
+import { basename as basename6, extname, join as join11 } from "node:path";
 var MAX_ATTACHMENT_BYTES = 25 * 1024 * 1024;
 var EXPIRED_REASON = "expired: these attachment bytes are past their retention window";
 var FETCH_TIMEOUT_MS = 3e4;
@@ -35354,7 +35560,7 @@ async function fetchBoundedBytes(url, fetchImpl = fetch) {
 }
 var MAX_INLINE_IMAGE_BYTES = 5 * 1024 * 1024;
 function safeFileName(attachment, index, taken) {
-  const raw = basename5(attachment.name ?? "").replace(/[^\w.-]+/g, "_").replace(/^\.+/, "");
+  const raw = basename6(attachment.name ?? "").replace(/[^\w.-]+/g, "_").replace(/^\.+/, "");
   let name = raw || `attachment-${index + 1}`;
   if (taken.has(name)) {
     const ext = extname(name);
@@ -35807,7 +36013,7 @@ function distillTurnFailureReason(error) {
   const clean4 = redactToolDetail(stripped).trim();
   const text2 = !clean4 ? "turn failed" : clean4.length > TURN_FAILURE_REASON_MAX ? `${clean4.slice(0, TURN_FAILURE_REASON_MAX - 1)}\u2026` : clean4;
   const classified = classifyTurnSilence(redactToolDetail(informative.join(" ")).replace(/\s+/g, " ") || text2);
-  const kind = classified.kind === "wrong-model" ? "model-selection-unavailable" : classified.kind;
+  const kind = classified.kind === "wrong-model" ? "model-selection-unavailable" : classified.kind === "not-signed-in" ? "hiccup" : classified.kind;
   return { text: text2, kind };
 }
 
@@ -36379,14 +36585,14 @@ function readOnlyMcpServer(config, cwd, agentMemoryDir) {
 // apps/body/dist/codegraph.js
 import { execFile as execFile10 } from "node:child_process";
 import { access as access2, appendFile, mkdir as mkdir14, readFile as readFile17 } from "node:fs/promises";
-import { dirname as dirname14, isAbsolute as isAbsolute3, resolve as resolve24 } from "node:path";
+import { dirname as dirname15, isAbsolute as isAbsolute3, resolve as resolve24 } from "node:path";
 import { promisify as promisify6 } from "node:util";
 var execFileAsync6 = promisify6(execFile10);
 var CODEGRAPH_MCP_SERVER_NAME = "codegraph";
 var CODEGRAPH_INDEX_PATH = ".codegraph/codegraph.db";
 var CODEGRAPH_PREPARE_TIMEOUT_MS = 12e4;
 function codegraphIndexDirectory(cwd) {
-  return resolve24(cwd, dirname14(CODEGRAPH_INDEX_PATH));
+  return resolve24(cwd, dirname15(CODEGRAPH_INDEX_PATH));
 }
 function codegraphMcpServer(config, cwd, options) {
   if (!config.codegraphCommand)
@@ -36427,7 +36633,7 @@ async function excludeIndexFromGitStatus(cwd) {
     if (!gitPath)
       return;
     const path = isAbsolute3(gitPath) ? gitPath : resolve24(cwd, gitPath);
-    await mkdir14(dirname14(path), { recursive: true });
+    await mkdir14(dirname15(path), { recursive: true });
     const existing = await readFile17(path, "utf8").catch(() => "");
     if (existing.split("\n").includes(".codegraph/"))
       return;
@@ -36607,6 +36813,7 @@ var CORNER_REVIEWER_UNSTABLE_HEAD_INSTRUCTION = "There is no stable green PR hea
 var CORNER_DELIVERY_NUDGE = "Before ending this turn, inspect the repository state and finish delivering the work unless a human hold stands: commit and push the intended changes and open the pull request if one does not exist. Decide yourself whether any remaining dirty work belongs to the objective; do not discard it merely to make the worktree clean. The pull request body must carry ## Reproduced and ## Demonstrated; if they are missing, add them before ending the turn.";
 var CORNER_YOLO_MERGE_NUDGE = 'Yolo is on. Call pr_checks_status now and merge this pull request with gh pr merge --squash --match-head-commit <sha> only when it returns checks="passed" and mergeAllowed=true. If checks="unknown", reply in this corner with the tool reason and stop instead of retrying. Otherwise stop without merging.';
 var RESEARCH_CORNER_HOLD = "This is a research corner with writable repository access. Investigate and edit files as needed. Do not commit, push, or open a pull request until a human explicitly directs that step. Never merge. Leave the corner open; only a human closes it.";
+var UPGRADE_INTENT_RULE = "Call this only while answering a human message, in this same corner, that clearly conveys intent to change the code \u2014 a bug report, a requested change, or a problem described for you to fix, not a specific required phrase. Never call it from an earlier message, or your own initiative.";
 var handle = (value) => value.replace(/^@/, "");
 function cornerMergeInstruction(yoloMode, reviewerHandle) {
   if (!reviewerHandle)
@@ -36859,7 +37066,7 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     surfaces: ["no-code-corner"],
     render: ({ agentMayUpgradeCorner }) => [
       "This is a no-code corner with no repository checkout and no GitHub workflow. Work in this corner's writable workspace: create files with write_scratch_file or your own tools, then send them with post_artifact.",
-      agentMayUpgradeCorner ? "Do not initialize a repository, create a branch, commit, push, open a pull request, or wait for GitHub checks. The one exception is beeline-agent upgrade_corner_to_code: call it only when the human message you are currently answering explicitly asks for code edits in this same corner. That one-way upgrade restarts this same corner with a feature branch and writable checkout, keeps its discussion, and re-delivers that same request in the code session, so end this turn immediately once it succeeds and do not edit this workspace. Never call it from an implied request, an earlier message, or your own initiative." : "Do not initialize a repository, create a branch, commit, push, open a pull request, or wait for GitHub checks."
+      agentMayUpgradeCorner ? `Do not initialize a repository, create a branch, commit, push, open a pull request, or wait for GitHub checks. The one exception is beeline-agent upgrade_corner_to_code. ${UPGRADE_INTENT_RULE} That one-way upgrade restarts this same corner with a feature branch and writable checkout, keeps its discussion, and re-delivers that same request in the code session, so end this turn immediately once it succeeds and do not edit this workspace.` : "Do not initialize a repository, create a branch, commit, push, open a pull request, or wait for GitHub checks."
     ].join("\n")
   },
   {
@@ -37144,7 +37351,7 @@ async function withTurnReceiptHeartbeat(api, receipt, task, onHeartbeatError) {
 // apps/body/dist/turn-trace.js
 import { appendFile as appendFile2, mkdir as mkdir15, readdir as readdir6, rm as rm7 } from "node:fs/promises";
 import { resolve as resolve25 } from "node:path";
-import { performance as performance2 } from "node:perf_hooks";
+import { performance as performance3 } from "node:perf_hooks";
 var TURN_PHASES = [
   /** Enqueued on `SessionScheduler` until this turn holds a slot. A capacity wait lives here. */
   "queue-wait",
@@ -37183,7 +37390,7 @@ var TurnTrace = class {
   toolCallIds = /* @__PURE__ */ new Set();
   constructor(options) {
     this.options = options;
-    this.now = options.now ?? (() => performance2.now());
+    this.now = options.now ?? (() => performance3.now());
     this.begunAt = this.now();
     this.attempts.push(this.newAttempt(1));
   }
@@ -37238,6 +37445,10 @@ var TurnTrace = class {
   noteActivation(kind) {
     this.current.activation = kind;
   }
+  /** How this turn's institutional-memory snapshot fetch resolved (see the field's own doc). */
+  noteInstitutionalMemory(outcome) {
+    this.current.institutionalMemory = outcome;
+  }
   /** What each section of the assembled prompt cost, so growth shows in the trace. */
   notePromptSections(report) {
     this.promptSections = Object.fromEntries(report.map((entry) => [entry.id, entry.bytes]));
@@ -37335,6 +37546,7 @@ var TurnTrace = class {
         ...attempt.capacityWait ? { capacityWait: true } : {},
         ...attempt.provider ? { provider: attempt.provider } : {},
         ...attempt.retryReason ? { retryReason: attempt.retryReason } : {},
+        ...attempt.institutionalMemory ? { institutionalMemory: attempt.institutionalMemory } : {},
         phases: Object.fromEntries(TURN_PHASES.filter((phase) => attempt.phases.has(phase)).map((phase) => [
           phase,
           round(attempt.phases.get(phase))
@@ -37379,6 +37591,8 @@ function formatTurnAttempt(attempt) {
     parts.push("capacity-wait");
   if (attempt.provider)
     parts.push(`provider ${attempt.provider}`);
+  if (attempt.institutionalMemory)
+    parts.push(`memory ${attempt.institutionalMemory}`);
   for (const phase of TURN_PHASES) {
     const value = attempt.phases[phase];
     if (value === void 0)
@@ -37440,7 +37654,7 @@ var TurnTraceFile = class {
 };
 
 // apps/body/dist/corner-github-auth.js
-import { chmod as chmod6, mkdir as mkdir16, writeFile as writeFile13 } from "node:fs/promises";
+import { chmod as chmod7, mkdir as mkdir16, writeFile as writeFile13 } from "node:fs/promises";
 import { delimiter as delimiter2, resolve as resolve26 } from "node:path";
 async function installCornerGitHubWrappers(input) {
   const bin = resolve26(input.root, "beeline-github-bin");
@@ -37592,14 +37806,14 @@ if (result.error) throw result.error;
 process.exit(result.status ?? 1);
 `;
   await writeFile13(path, source, { mode: 448 });
-  await chmod6(path, 448);
+  await chmod7(path, 448);
 }
 
 // apps/body/dist/warm-node-modules.js
 import { createHash as createHash8, randomUUID as randomUUID9 } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
-import { chmod as chmod7, copyFile as copyFile2, link, lstat as lstat4, mkdir as mkdir17, readdir as readdir7, readFile as readFile18, readlink as readlink2, rename as rename6, rm as rm8, stat as stat6, symlink as symlink3, utimes } from "node:fs/promises";
-import { dirname as dirname15, join as join12, resolve as resolve27 } from "node:path";
+import { chmod as chmod8, copyFile as copyFile2, link, lstat as lstat4, mkdir as mkdir17, readdir as readdir7, readFile as readFile18, readlink as readlink2, rename as rename6, rm as rm8, stat as stat6, symlink as symlink3, utimes } from "node:fs/promises";
+import { dirname as dirname16, join as join12, resolve as resolve27 } from "node:path";
 var STORE_FORMAT = "v1";
 var STAGING_PREFIX = ".beeline-warm-";
 var STAGING_SWEEP_MS = 24 * 60 * 60 * 1e3;
@@ -37684,7 +37898,7 @@ async function seedWarmNodeModules(input) {
     }
     for (const tree of plan.trees) {
       const target = resolve27(input.worktreePath, tree);
-      await mkdir17(dirname15(target), { recursive: true });
+      await mkdir17(dirname16(target), { recursive: true });
       await rename6(resolve27(staging, tree), target);
       placed.push(target);
     }
@@ -37834,7 +38048,7 @@ async function cloneTree(source, target, file, topLevel = true) {
 var harvestFile = async (source, target) => {
   await copyFile2(source, target, fsConstants3.COPYFILE_FICLONE);
   const info = await stat6(source);
-  await chmod7(target, info.mode & 4095 & ~146);
+  await chmod8(target, info.mode & 4095 & ~146);
 };
 var seedFile = async (source, target, topLevel) => {
   if (!topLevel) {
@@ -37842,7 +38056,7 @@ var seedFile = async (source, target, topLevel) => {
     return;
   }
   await copyFile2(source, target);
-  await chmod7(target, 420);
+  await chmod8(target, 420);
 };
 async function pruneWarmStore(storeRoot, keep) {
   const names = (await readdir7(storeRoot).catch(() => [])).filter((name) => !name.startsWith(STAGING_PREFIX));
@@ -38403,7 +38617,7 @@ var MonolithCornerTurnLoop = class {
       }) ? { relay: await this.squireRelay.listen() } : {}
     };
     const resourceAuthFile = `${this.commandContext.path}.resource-auth.json`;
-    await mkdir18(dirname16(resourceAuthFile), { recursive: true, mode: 448 });
+    await mkdir18(dirname17(resourceAuthFile), { recursive: true, mode: 448 });
     await writeFile14(resourceAuthFile, JSON.stringify({
       ...this.options.api.connection(),
       turnContextPath: this.commandContext.path
@@ -38498,7 +38712,10 @@ var MonolithCornerTurnLoop = class {
           cargoTargetDir,
           ...registryMcpHostBindPaths(configuration.registryMcpRoutes)
         ],
-        maskPaths: credentialMaskPaths(this.options.config.sandboxMaskPaths, operatorHome)
+        maskPaths: [
+          ...credentialMaskPaths(this.options.config.sandboxMaskPaths, operatorHome),
+          ...siblingAgentMaskPaths(runtimeDirectory(this.options.runtime.supervisorRoot, this.options.runtime.agent.publicKey))
+        ]
       },
       command,
       args: agentArgs
@@ -38617,13 +38834,35 @@ var MonolithCornerTurnLoop = class {
     this.sessionId = opened.sessionId;
     this.sessionFingerprint = fingerprint;
     this.sessionCodegraphReady = codegraphReady;
+    let appliedModel;
     if (selection) {
       const options = filterAllowedModelConfigOptions(parseAdvertisedConfigOptions(opened.raw, selection.model));
-      await applyAgentModelSelection(this.client, opened.sessionId, options, selection);
+      const applied = await applyAgentModelSelection(this.client, opened.sessionId, options, selection);
+      appliedModel = applied.appliedSelection.model;
+      if (selection.model && appliedModel && appliedModel !== selection.model) {
+        this.recordModelFallback(applied.appliedSelection, applied.options);
+      }
     }
-    this.sessionModel = selection?.model ?? null;
+    this.sessionModel = appliedModel ?? selection?.model ?? null;
     return opened.sessionId;
   }
+  /**
+   * A vanished model id was just substituted for a same-family replacement
+   * (`resolveModelFamilyFallback`) so THIS turn could proceed instead of
+   * failing it. Persist the correction so the phone stops offering the dead
+   * id and the durable `model_unavailable` flag stays clear, and let the
+   * server (`daemon-service.ts`'s `modelCatalog`) name the change in the
+   * agent's DM — fire-and-forget: a slow or failed report must never hold up
+   * or fail a turn that already succeeded with the fallback model applied.
+   */
+  recordModelFallback(appliedSelection, options) {
+    this.options.api.execute("postAgentModelCatalog", {
+      agentId: this.agent.publicKey,
+      workspaceId: this.options.workspaceId,
+      options,
+      selection: appliedSelection
+    }).catch((error) => console.error(`[thin-core] failed to persist automatic model fallback for corner ${this.options.cornerId}:`, error));
+  }
   /**
    * Resolve the review target at prompt time, not session activation time.
    *
@@ -38769,6 +39008,7 @@ var MonolithCornerTurnLoop = class {
     } : void 0;
     this.currentTurn = { requestId, ...requester ? { requester } : {} };
     const trace = this.beginTurnTrace(requestId);
+    const institutionalContextFetch = startInstitutionalContextFetch(api, cornerId);
     let deliberateNoReply = false;
     let laneUpgraded = false;
     try {
@@ -38797,8 +39037,9 @@ var MonolithCornerTurnLoop = class {
             this.roster(),
             api.execute("getCornerRestoreState", { cornerId }),
             this.activeReviewerInstruction(),
-            institutionalContextForTurn(api, cornerId, (message) => console.warn(`[thin-core] corner ${cornerId}: ${message}`))
+            awaitInstitutionalContext(institutionalContextFetch, (message) => console.warn(`[thin-core] corner ${cornerId}: ${message}`))
           ]));
+          trace.noteInstitutionalMemory(institutionalContext.outcome);
           const briefAttachments = (restored.brief?.attachments ?? []).map((file) => ({
             url: new URL(`/v1/media/${file.objectId}`, api.baseUrl).toString(),
             name: file.title,
@@ -39240,6 +39481,17 @@ var MonolithCornerTurnLoop = class {
           this.options.onIntakeError?.(error);
           console.error("[thin-core] corner command failed", error);
         },
+        // See monolith-room-turn.ts (C112): mark busy the instant a claim
+        // attempt starts, before its own network round trip and before
+        // context.enter()'s own file I/O, so a reconcile busy-check landing
+        // anywhere in that window can never see this corner as idle when a
+        // turn was already claimed (or about to be).
+        onClaiming: () => {
+          this.busy = true;
+        },
+        onClaimFailed: () => {
+          this.busy = false;
+        },
         onEnter: (command) => this.squireRelay.activate(command, this.commandContext.generationId),
         onLeave: (command) => this.squireRelay.deactivate(command.turnRequestId),
         stop: (requestId) => this.stopTurn(requestId),
@@ -39280,7 +39532,7 @@ var MonolithCornerTurnLoop = class {
 // apps/body/dist/monolith-room-turn.js
 import { mkdir as mkdir19, writeFile as writeFile15 } from "node:fs/promises";
 import { homedir as homedir15, hostname as hostname2 } from "node:os";
-import { dirname as dirname17, join as join15 } from "node:path";
+import { dirname as dirname18, join as join15 } from "node:path";
 
 // packages/api-contract/dist/scheduled-prompts.js
 var SCHEDULE_SCHEDULER_NAME = "Beeline Scheduler";
@@ -39478,7 +39730,10 @@ var MonolithRoomTurnLoop = class {
       ...this.options.config.bwrapPath ? { bwrapPath: this.options.config.bwrapPath } : {},
       ...this.sessionScratchDir ? { scratch: this.sessionScratchDir } : {},
       ...this.sessionStateDirs.length ? { harnessStateDirs: this.sessionStateDirs } : {},
-      maskPaths: credentialMaskPaths(this.options.config.sandboxMaskPaths, this.options.config.operatorHome ?? homedir15())
+      maskPaths: [
+        ...credentialMaskPaths(this.options.config.sandboxMaskPaths, this.options.config.operatorHome ?? homedir15()),
+        ...siblingAgentMaskPaths(runtimeDirectory(this.options.runtime.supervisorRoot, this.options.runtime.agent.publicKey))
+      ]
     };
   }
   /**
@@ -39728,7 +39983,7 @@ var MonolithRoomTurnLoop = class {
       }) ? { relay: await this.squireRelay.listen() } : {}
     };
     const resourceAuthFile = `${this.commandContext.path}.resource-auth.json`;
-    await mkdir19(dirname17(resourceAuthFile), { recursive: true, mode: 448 });
+    await mkdir19(dirname18(resourceAuthFile), { recursive: true, mode: 448 });
     await writeFile15(resourceAuthFile, JSON.stringify({
       ...this.options.api.connection(),
       turnContextPath: this.commandContext.path
@@ -39803,7 +40058,10 @@ var MonolithRoomTurnLoop = class {
           ...codegraphReady ? [codegraphIndexDirectory(this.options.cwd)] : [],
           ...registryMcpHostBindPaths(configuration.registryMcpRoutes)
         ],
-        maskPaths: credentialMaskPaths(this.options.config.sandboxMaskPaths, operatorHome)
+        maskPaths: [
+          ...credentialMaskPaths(this.options.config.sandboxMaskPaths, operatorHome),
+          ...siblingAgentMaskPaths(runtimeDirectory(this.options.runtime.supervisorRoot, this.options.runtime.agent.publicKey))
+        ]
       },
       command,
       args: agentArgs
@@ -39909,10 +40167,30 @@ var MonolithRoomTurnLoop = class {
     this.sessionCodegraphReady = codegraphReady;
     if (selection) {
       const options = filterAllowedModelConfigOptions(parseAdvertisedConfigOptions(opened.raw, selection.model));
-      await applyAgentModelSelection(this.client, opened.sessionId, options, selection);
+      const applied = await applyAgentModelSelection(this.client, opened.sessionId, options, selection);
+      if (selection.model && applied.appliedSelection.model && applied.appliedSelection.model !== selection.model) {
+        this.recordModelFallback(applied.appliedSelection, applied.options);
+      }
     }
     return opened.sessionId;
   }
+  /**
+   * A vanished model id was just substituted for a same-family replacement
+   * (`resolveModelFamilyFallback`) so THIS turn could proceed instead of
+   * failing it. Persist the correction so the phone stops offering the dead
+   * id and the durable `model_unavailable` flag stays clear, and let the
+   * server (`daemon-service.ts`'s `modelCatalog`) name the change in the
+   * agent's DM — fire-and-forget: a slow or failed report must never hold up
+   * or fail a turn that already succeeded with the fallback model applied.
+   */
+  recordModelFallback(appliedSelection, options) {
+    this.options.api.execute("postAgentModelCatalog", {
+      agentId: this.agent.publicKey,
+      workspaceId: this.options.workspaceId,
+      options,
+      selection: appliedSelection
+    }).catch((error) => console.error(`[thin-core] failed to persist automatic model fallback for Room ${this.options.roomId}:`, error));
+  }
   /**
    * The scheduler seam, and the only place that can see the boundary between
    * waiting for a slot and spawning a harness: `queue-wait` closes the instant
@@ -40031,6 +40309,7 @@ var MonolithRoomTurnLoop = class {
     this.busy = true;
     this.turnMetrics = {};
     const trace = this.beginTurnTrace(item.id);
+    const institutionalContextFetch = startInstitutionalContextFetch(api, this.options.roomId);
     let liveStream;
     let liveCornerOpened = false;
     try {
@@ -40070,8 +40349,9 @@ var MonolithRoomTurnLoop = class {
             this.roster(),
             this.deliver(item),
             api.execute("listRoomCorners", { roomId: this.options.roomId }),
-            institutionalContextForTurn(api, this.options.roomId, (message) => console.warn(`[thin-core] Room ${this.options.roomId}: ${message}`))
+            awaitInstitutionalContext(institutionalContextFetch, (message) => console.warn(`[thin-core] Room ${this.options.roomId}: ${message}`))
           ]));
+          trace.noteInstitutionalMemory(institutionalContext.outcome);
           const names = new Map(roster.members.map((member) => [member.identityId, member.name]));
           const transcriptRows = conversation.items.filter((message) => message.type === "message" && message.id !== item.id && !active.steers.some((steerItem) => steerItem.id === message.id)).slice(-80).map((message) => ({
             id: message.id,
@@ -40327,6 +40607,18 @@ var MonolithRoomTurnLoop = class {
           this.options.onIntakeError?.(error);
           console.error("[thin-core] Room command failed", error);
         },
+        // Marks this loop busy the instant it attempts to claim a real
+        // turn, before the claim's own network round trip and before
+        // context.enter()'s own file I/O - closing the window where
+        // RoomRuntimeCoordinator.reconcile's repository-revision restart
+        // could see a claiming-but-not-yet-`busy` Room as idle and stop it,
+        // cancelling a turn that had already begun (or was about to) (C112).
+        onClaiming: () => {
+          this.busy = true;
+        },
+        onClaimFailed: () => {
+          this.busy = false;
+        },
         onEnter: (command) => this.squireRelay.activate(command, this.commandContext.generationId),
         onLeave: (command) => this.squireRelay.deactivate(command.turnRequestId, this.pausedOnGrantRequestId),
         stop: (requestId) => this.stopTurn(requestId),
@@ -40913,8 +41205,8 @@ async function materializeCornerWorktree(input) {
   const remote = roomCheckoutRemote(input.remote);
   const gitCommonDir = cornerRepositoryCacheDir(input.supervisorRoot, remote);
   const path = resolve29(input.supervisorRoot, "beeline", "corners", input.cornerId);
-  await mkdir20(dirname18(gitCommonDir), { recursive: true, mode: 448 });
-  await mkdir20(dirname18(path), { recursive: true, mode: 448 });
+  await mkdir20(dirname19(gitCommonDir), { recursive: true, mode: 448 });
+  await mkdir20(dirname19(path), { recursive: true, mode: 448 });
   const authEnv = githubGitEnv(input.token);
   if (!existsSync8(resolve29(gitCommonDir, "HEAD"))) {
     await execFileAsync8("git", ["clone", "--bare", remote, gitCommonDir], {
@@ -41035,7 +41327,7 @@ async function mapWithConcurrency(values, limit, visit) {
 async function discoverCornerWorktree(supervisorRoot, cornerId) {
   const cornersRoot = resolve29(supervisorRoot, "beeline", "corners");
   const path = resolve29(cornersRoot, cornerId);
-  if (dirname18(path) !== cornersRoot || !existsSync8(resolve29(path, ".git")))
+  if (dirname19(path) !== cornersRoot || !existsSync8(resolve29(path, ".git")))
     return void 0;
   const [canonicalRoot, canonicalPath] = await Promise.all([
     realpath2(cornersRoot),
@@ -41605,7 +41897,7 @@ var RoomRuntimeCoordinator = class {
     return this.runtime.rooms.find((room) => room.channelId === roomId);
   }
   roomRoot(roomId) {
-    return this.roomRecord(roomId)?.root ?? resolve29(dirname18(this.configPath), "rooms", roomId);
+    return this.roomRecord(roomId)?.root ?? resolve29(dirname19(this.configPath), "rooms", roomId);
   }
   roomAgentHomeRoot(workspaceRoot, required = false) {
     const flag = process.env.BUZZY_BODY_ROOM_HOME;
@@ -41628,9 +41920,9 @@ var RoomRuntimeCoordinator = class {
       ...this.baseConfig,
       workspaceRoot,
       agentPrivateRoot: resolve29(workspaceRoot, "agent-private"),
-      agentMemoryRoot: resolve29(dirname18(this.configPath), "memory"),
-      openRouterRoutingCacheDir: openRouterRoutingCacheDir(dirname18(this.configPath)),
-      turnTraceDir: turnTraceDirectory(dirname18(this.configPath)),
+      agentMemoryRoot: resolve29(dirname19(this.configPath), "memory"),
+      openRouterRoutingCacheDir: openRouterRoutingCacheDir(dirname19(this.configPath)),
+      turnTraceDir: turnTraceDirectory(dirname19(this.configPath)),
       ...agentHomeRoot ? { agentHomeRoot } : {}
     };
   }
@@ -41726,7 +42018,7 @@ var RoomRuntimeCoordinator = class {
     const targetBranch = repository.targetBranch || "main";
     const checkoutId = createHash10("sha256").update(`${roomId}\0${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
     const path = resolve29(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
-    await mkdir20(dirname18(path), { recursive: true, mode: 448 });
+    await mkdir20(dirname19(path), { recursive: true, mode: 448 });
     const token = remote.startsWith("https://github.com/") ? await this.parentRepositoryToken(roomId) : void 0;
     const env = token ? githubGitEnv(token.token) : process.env;
     if (!existsSync8(resolve29(path, ".git"))) {
@@ -42638,7 +42930,7 @@ init_systemd();
 import { spawn as spawn11 } from "node:child_process";
 import { createHash as createHash11 } from "node:crypto";
 import { mkdir as mkdir23, rm as rm11, stat as stat7, writeFile as writeFile17 } from "node:fs/promises";
-import { dirname as dirname20, resolve as resolve33 } from "node:path";
+import { dirname as dirname21, resolve as resolve33 } from "node:path";
 
 // apps/body/dist/update-functional-probe.js
 import { mkdir as mkdir21, rm as rm10 } from "node:fs/promises";
@@ -42825,7 +43117,10 @@ async function runUpdateFunctionalProbe(input) {
           cwd,
           harnessStateDirs: stateDirs,
           harnessHomeStateDirs: homeStateDirs,
-          maskPaths: credentialMaskPaths(input.config.sandboxMaskPaths, operatorHome),
+          maskPaths: [
+            ...credentialMaskPaths(input.config.sandboxMaskPaths, operatorHome),
+            ...siblingAgentMaskPaths(input.runtimeDir)
+          ],
           ...tmpDir ? { tmpDir } : {}
         },
         command,
@@ -42972,7 +43267,7 @@ async function runUpdateFunctionalProbe(input) {
 
 // apps/body/dist/update-rollback-alert.js
 import { mkdir as mkdir22, readFile as readFile21, rename as rename7, unlink as unlink6, writeFile as writeFile16 } from "node:fs/promises";
-import { dirname as dirname19, resolve as resolve32 } from "node:path";
+import { dirname as dirname20, resolve as resolve32 } from "node:path";
 var REPORT_INTERVAL_MS = 60 * 60 * 1e3;
 var lastLogged = /* @__PURE__ */ new Map();
 function updateRollbackAlertPath(runtimeDir) {
@@ -42981,7 +43276,7 @@ function updateRollbackAlertPath(runtimeDir) {
 async function writeAlert(runtimeDir, alert) {
   const path = updateRollbackAlertPath(runtimeDir);
   const staged = `${path}.${process.pid}.tmp`;
-  await mkdir22(dirname19(path), { recursive: true });
+  await mkdir22(dirname20(path), { recursive: true });
   await writeFile16(staged, `${JSON.stringify(alert, null, 2)}
 `, { mode: 384 });
   await rename7(staged, path);
@@ -43054,7 +43349,7 @@ async function withInstallLock(layout, work, options = {}) {
   const now2 = options.now ?? Date.now;
   const lock = resolve33(layout.releasesRoot, ".state", "install.lock");
   const deadline = now2() + (options.waitMs ?? 1e4);
-  await mkdir23(dirname20(lock), { recursive: true });
+  await mkdir23(dirname21(lock), { recursive: true });
   for (; ; ) {
     try {
       await mkdir23(lock);
@@ -43680,7 +43975,7 @@ init_launchd();
 init_systemd();
 init_runtime();
 import { mkdir as mkdir24, rename as rename8 } from "node:fs/promises";
-import { dirname as dirname21, resolve as resolve34 } from "node:path";
+import { dirname as dirname22, resolve as resolve34 } from "node:path";
 async function retireRemovedAgent(runtime, options = {}) {
   const deletedRoot = resolve34(runtime.supervisorRoot, "beeline", "deleted-runtimes");
   const target = resolve34(deletedRoot, `${runtime.agent.publicKey}-${Date.now()}`);
@@ -43703,13 +43998,13 @@ async function relocateAgentRuntime(runtime, target, options = {}) {
       ...options.run ? { run: options.run } : {}
     });
   }
-  await mkdir24(dirname21(destination), { recursive: true, mode: 448 });
+  await mkdir24(dirname22(destination), { recursive: true, mode: 448 });
   await rename8(source, destination);
   return destination;
 }
 
 // apps/body/dist/start-command.js
-import { basename as basename6, dirname as dirname22 } from "node:path";
+import { basename as basename7, dirname as dirname23 } from "node:path";
 var import_picocolors2 = __toESM(require_picocolors(), 1);
 init_agent_command();
 init_runtime();
@@ -43924,7 +44219,7 @@ async function startStoredRuntime(configPath, opts = {}, dependencyOverrides = {
   return { status: "started", pid };
 }
 function agentStartId(configPath) {
-  return basename6(dirname22(configPath));
+  return basename7(dirname23(configPath));
 }
 async function startRuntime(configPath, spinnerHandle) {
   const report = (text2) => spinnerHandle ? spinnerHandle.message(text2) : console.log(text2);
@@ -44005,7 +44300,7 @@ async function runStartCommand(args, interactiveUi, dependencyOverrides = {}) {
   for (const path of unique) {
     const id = agentStartId(path);
     const spinnerHandle = interactiveUi ? spinner() : void 0;
-    spinnerHandle?.start(`Starting ${dirname22(path)}\u2026`);
+    spinnerHandle?.start(`Starting ${dirname23(path)}\u2026`);
     try {
       const outcome = await deps.startOne(path, spinnerHandle);
       const report = { id, path, ...outcome };
@@ -44039,9 +44334,9 @@ async function runStartCommand(args, interactiveUi, dependencyOverrides = {}) {
 // apps/body/dist/connect-command.js
 import { spawn as spawn12 } from "node:child_process";
 import { createHash as createHash12, randomUUID as randomUUID10 } from "node:crypto";
-import { chmod as chmod8, mkdir as mkdir25, readFile as readFile22, unlink as unlink7, writeFile as writeFile18 } from "node:fs/promises";
+import { chmod as chmod9, mkdir as mkdir25, readFile as readFile22, unlink as unlink7, writeFile as writeFile18 } from "node:fs/promises";
 import { homedir as homedir17, hostname as hostname3 } from "node:os";
-import { dirname as dirname23, resolve as resolve35 } from "node:path";
+import { dirname as dirname24, resolve as resolve35 } from "node:path";
 import { stdin as stdin3, stdout as stdout4 } from "node:process";
 init_access_policy();
 init_agent_command();
@@ -44530,7 +44825,7 @@ async function loadConnectModelCatalog(input, dependencies = {}) {
     ...effort ? { effort } : {}
   };
 }
-var CONNECT_PROBE_TIMEOUT_MS = 12e3;
+var CONNECT_PROBE_TIMEOUT_MS = 25e3;
 function connectProbeFoundModels(catalog) {
   return catalog.note === void 0 && catalog.options.length > 0;
 }
@@ -44588,13 +44883,17 @@ async function collectConnectWizard(prompts = clackPrompts, loadModels = loadCon
     return (picked ?? "").trim();
   };
   const probe = async (candidate) => {
+    const spinner2 = spinner({ output: clackPromptOutput() });
+    spinner2.start(brass(`Checking ${connectHarnessLabel(candidate)}\u2026`));
     try {
       const catalog2 = await loadModels({
         harness: candidate,
         timeoutMs: CONNECT_PROBE_TIMEOUT_MS
       });
+      spinner2.stop();
       return connectProbeFoundModels(catalog2) ? catalog2 : void 0;
     } catch {
+      spinner2.stop();
       return void 0;
     }
   };
@@ -44805,21 +45104,21 @@ function providerEnvironment(selection) {
   };
 }
 async function writePrivateJson(path, value) {
-  await mkdir25(dirname23(path), { recursive: true, mode: 448 });
+  await mkdir25(dirname24(path), { recursive: true, mode: 448 });
   await writeFile18(path, `${JSON.stringify(value, null, 2)}
 `, { mode: 384 });
-  await chmod8(path, 384);
+  await chmod9(path, 384);
 }
 async function writeProviderEnv(selection, agentPubkey) {
   const values = providerEnvironment(selection);
   if (Object.keys(values).length === 0)
     return void 0;
   const path = resolve35(defaultSupervisorRoot(process.env), "beeline", "connect", `${agentPubkey}.env`);
-  await mkdir25(dirname23(path), { recursive: true, mode: 448 });
+  await mkdir25(dirname24(path), { recursive: true, mode: 448 });
   const contents = Object.entries(values).map(([key, value]) => `${key}=${JSON.stringify(value)}`).join("\n");
   await writeFile18(path, `${contents}
 `, { mode: 384 });
-  await chmod8(path, 384);
+  await chmod9(path, 384);
   return path;
 }
 async function runInstalledFinish(binary, grantPath) {
@@ -44980,7 +45279,7 @@ async function runConnectFinishCommand(path) {
     if (model) {
       const decision2 = await resolveOpenRouterRouting({
         model,
-        cacheDir: openRouterRoutingCacheDir(dirname23(connected.configPath)),
+        cacheDir: openRouterRoutingCacheDir(dirname24(connected.configPath)),
         ...apiKey ? { apiKey } : {},
         probeTimeoutMs: 1e4
       });
@@ -44999,7 +45298,7 @@ init_self_update();
 
 // apps/body/dist/daemon-failure.js
 import { mkdir as mkdir26, readFile as readFile23, rename as rename9, rm as rm12, writeFile as writeFile19 } from "node:fs/promises";
-import { dirname as dirname24, resolve as resolve36 } from "node:path";
+import { dirname as dirname25, resolve as resolve36 } from "node:path";
 var DAEMON_FAILURE_LIMIT = 3;
 var DAEMON_FAILURE_WINDOW_MS = 5 * 6e4;
 function daemonFailurePath(runtimeDir) {
@@ -45019,7 +45318,7 @@ async function readFailureRecord(runtimeDir) {
 async function writeFailureRecord(runtimeDir, record6) {
   const path = daemonFailurePath(runtimeDir);
   const staged = `${path}.${process.pid}.tmp`;
-  await mkdir26(dirname24(path), { recursive: true, mode: 448 });
+  await mkdir26(dirname25(path), { recursive: true, mode: 448 });
   await writeFile19(staged, `${JSON.stringify(record6, null, 2)}
 `, { mode: 384 });
   await rename9(staged, path);
@@ -45046,7 +45345,7 @@ init_systemd();
 
 // apps/body/dist/current-release-probe.js
 import { spawn as spawn13 } from "node:child_process";
-import { dirname as dirname25, join as join16 } from "node:path";
+import { dirname as dirname26, join as join16 } from "node:path";
 init_runtime();
 init_self_update();
 var CURRENT_RELEASE_PROBE_TIMEOUT_MS = 12e4;
@@ -45153,7 +45452,7 @@ async function runUpdateProbeCommand(args, options = {}) {
   const runtime = await readRuntimeRecord(configPath);
   const agent = runtimeAgentCommand(runtime);
   const config = loadBodyConfig({
-    workspaceRoot: join16(dirname25(configPath), "workspace"),
+    workspaceRoot: join16(dirname26(configPath), "workspace"),
     llmEnvFile: runtime.llmEnvFile,
     env: { ...env, BUZZ_AGENT_BIN: agent.command, BUZZ_DEV_MCP_BIN: runtime.mcpBinary },
     agent
@@ -45171,7 +45470,7 @@ async function runUpdateProbeCommand(args, options = {}) {
   }
   const layout = beelineInstallLayout(env);
   const releaseId = (layout && await activeReleaseId(layout).catch(() => void 0)) ?? "unknown";
-  const runtimeDir = dirname25(configPath);
+  const runtimeDir = dirname26(configPath);
   const outcome = await probeOutcome(() => (options.probe ?? runUpdateFunctionalProbe)({
     config,
     runtimeDir,
@@ -45342,7 +45641,8 @@ var DaemonExitError = class extends Error {
 };
 async function runStoredDaemon(pathOrPointer) {
   const configPath = await resolveRuntimeConfigPath(pathOrPointer);
-  daemonFailureRuntimeDir = dirname26(configPath);
+  daemonFailureRuntimeDir = dirname27(configPath);
+  await convergeRuntimeRecordFileModes(configPath);
   const accessMigration = await migrateRuntimeRecordAccessPolicy(configPath);
   let runtime = accessMigration.runtime;
   if (!runtime.transport) {
@@ -45376,7 +45676,7 @@ async function runStoredDaemon(pathOrPointer) {
     BUZZ_DEV_MCP_BIN: runtime.mcpBinary
   };
   const config = loadBodyConfig({
-    workspaceRoot: resolve39(dirname26(configPath), "workspace"),
+    workspaceRoot: resolve39(dirname27(configPath), "workspace"),
     llmEnvFile: runtime.llmEnvFile,
     env,
     agent
@@ -45392,8 +45692,10 @@ async function runStoredDaemon(pathOrPointer) {
   }
   if (runtime.sharedSkills)
     config.sharedSkills = [...runtime.sharedSkills];
-  if (runtime.modelSelection) {
-    await applyRuntimeModelPreflight(config, agent, runtime.modelSelection, void 0, refreshRuntimeAdapter);
+  const serverModelSelection = await daemonApi.execute("getAgentConfiguration", { agentId: runtime.agent.publicKey }).then((result) => result.model || result.effort ? { ...result.model ? { model: result.model } : {}, ...result.effort ? { effort: result.effort } : {} } : void 0).catch(() => void 0);
+  const preflightModelSelection = resolvePreflightModelSelection(runtime.modelSelection, serverModelSelection);
+  if (preflightModelSelection) {
+    await applyRuntimeModelPreflight(config, agent, preflightModelSelection, void 0, refreshRuntimeAdapter);
     if (!config.modelUnavailable) {
       console.log("[body] persisted model/effort selection passed live startup validation");
     } else {
@@ -45403,7 +45705,7 @@ async function runStoredDaemon(pathOrPointer) {
   config.runtimeConfigPath = configPath;
   const sandbox = await ensureBwrapSandbox({
     ...runtime.sandbox ? { policy: runtime.sandbox } : {},
-    stateDir: dirname26(configPath),
+    stateDir: dirname27(configPath),
     beforeInstall: () => extendSystemdStartTimeout(BUBBLEWRAP_INSTALL_BUDGET_MS)
   });
   if (sandbox.path)
@@ -45415,7 +45717,7 @@ async function runStoredDaemon(pathOrPointer) {
   }
   const controller = new AbortController();
   const disposeStopSignals = installDaemonStopSignals(controller);
-  const runtimeDir = dirname26(configPath);
+  const runtimeDir = dirname27(configPath);
   const layout = beelineInstallLayout(process.env);
   const notifier = new SystemdNotifier();
   let rollbackAlertDrain;
@@ -45862,7 +46164,7 @@ async function main() {
     }
     if (!configPath && agentPubkey) {
       const configs = await findAgentRuntimeConfigPaths(process.env, process.cwd());
-      configPath = configs.find((candidate) => dirname26(candidate).endsWith(agentPubkey));
+      configPath = configs.find((candidate) => dirname27(candidate).endsWith(agentPubkey));
     }
     if (!configPath && agentPubkey) {
       throw new DaemonExitError(`unknown agent ${agentPubkey}: no durable runtime exists; refusing service restart loop`, UNKNOWN_AGENT_EXIT_STATUS);
@@ -45890,7 +46192,7 @@ async function main() {
     if (!agentPubkey)
       throw new Error("stop requires --agent <pubkey>");
     const configs = await findAgentRuntimeConfigPaths(process.env, process.cwd());
-    const configPath = configs.find((candidate) => dirname26(candidate).endsWith(agentPubkey));
+    const configPath = configs.find((candidate) => dirname27(candidate).endsWith(agentPubkey));
     if (!configPath)
       throw new Error(`no stored runtime found for agent ${agentPubkey}`);
     const runtime = await readRuntimeRecord(configPath);