usebeeline 0.1.20 → 0.1.22

package/dist/usebeeline.mjs

@@ -212,8 +212,8 @@ async function runSquireBrokerLink(options) {
   const pending = /* @__PURE__ */ new Map();
   const queued = [];
   let resolveDone;
-  const done = new Promise((resolve45) => {
-    resolveDone = resolve45;
+  const done = new Promise((resolve49) => {
+    resolveDone = resolve49;
   });
   const failResponse = (id) => `${JSON.stringify({
     jsonrpc: "2.0",
@@ -480,8 +480,8 @@ function socketHolders(inodes, profileDir, procRoot = "/proc") {
 }
 function alive(pid, procRoot) {
   try {
-    const stat10 = readFileSync(join(procRoot, String(pid), "stat"), "utf8");
-    return stat10.slice(stat10.lastIndexOf(")") + 2, stat10.lastIndexOf(")") + 3) !== "Z";
+    const stat11 = readFileSync(join(procRoot, String(pid), "stat"), "utf8");
+    return stat11.slice(stat11.lastIndexOf(")") + 2, stat11.lastIndexOf(")") + 3) !== "Z";
   } catch {
     return false;
   }
@@ -5680,11 +5680,11 @@ async function stageRelease(layout, manifestUrl, published, opts = {}) {
     const extract2 = await run("tar", ["-xzf", tempArchive, "-C", releaseDir], 5 * 6e4);
     if (extract2.status !== 0)
       throw new Error(`extracting bundle failed: ${extract2.stderr}`);
-    for (const relative4 of requiredBundlePaths()) {
+    for (const relative5 of requiredBundlePaths()) {
       try {
-        await access(join8(releaseDir, relative4), fsConstants2.F_OK);
+        await access(join8(releaseDir, relative5), fsConstants2.F_OK);
       } catch {
-        throw new Error(`staged bundle is missing ${relative4}`);
+        throw new Error(`staged bundle is missing ${relative5}`);
       }
     }
     const engineMinimum = await readBundleEngineMinimum(releaseDir);
@@ -10099,10 +10099,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep3, value } = collItem;
+        const { start, key, sep: sep4, value } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep3?.[0],
+          next: key ?? sep4?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -10116,7 +10116,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep3) {
+          if (!keyProps.anchor && !keyProps.tag && !sep4) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -10140,7 +10140,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep4 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -10156,7 +10156,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep3, null, valueProps, onError);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep4, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
           offset = valueNode.range[2];
@@ -10247,7 +10247,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep3 = "";
+        let sep4 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -10261,13 +10261,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep3 + cb;
-              sep3 = "";
+                comment += sep4 + cb;
+              sep4 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep3 += source;
+                sep4 += source;
               hasSpace = true;
               break;
             default:
@@ -10310,18 +10310,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i3 = 0; i3 < fc.items.length; ++i3) {
         const collItem = fc.items[i3];
-        const { start, key, sep: sep3, value } = collItem;
+        const { start, key, sep: sep4, value } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep3?.[0],
+          next: key ?? sep4?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep3 && !value) {
+          if (!props.anchor && !props.tag && !sep4 && !value) {
             if (i3 === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i3 < fc.items.length - 1)
@@ -10375,8 +10375,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap && !sep3 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep3, null, props, onError);
+        if (!isMap && !sep4 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep4, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -10388,7 +10388,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep4 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -10399,8 +10399,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep3)
-                for (const st of sep3) {
+              if (sep4)
+                for (const st of sep4) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -10417,7 +10417,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep4, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -10597,7 +10597,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i3 + 1;
       }
       let value = "";
-      let sep3 = "";
+      let sep4 = "";
       let prevMoreIndented = false;
       for (let i3 = 0; i3 < contentStart; ++i3)
         value += lines[i3][0].slice(trimIndent) + "\n";
@@ -10614,24 +10614,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep3 + indent.slice(trimIndent) + content;
-          sep3 = "\n";
+          value += sep4 + indent.slice(trimIndent) + content;
+          sep4 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep3 === " ")
-            sep3 = "\n";
-          else if (!prevMoreIndented && sep3 === "\n")
-            sep3 = "\n\n";
-          value += sep3 + indent.slice(trimIndent) + content;
-          sep3 = "\n";
+          if (sep4 === " ")
+            sep4 = "\n";
+          else if (!prevMoreIndented && sep4 === "\n")
+            sep4 = "\n\n";
+          value += sep4 + indent.slice(trimIndent) + content;
+          sep4 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep3 === "\n")
+          if (sep4 === "\n")
             value += "\n";
           else
-            sep3 = "\n";
+            sep4 = "\n";
         } else {
-          value += sep3 + content;
-          sep3 = " ";
+          value += sep4 + content;
+          sep4 = " ";
           prevMoreIndented = false;
         }
       }
@@ -10813,25 +10813,25 @@ var require_resolve_flow_scalar = __commonJS({
       if (!match)
         return source;
       let res = match[1];
-      let sep3 = " ";
+      let sep4 = " ";
       let pos = first.lastIndex;
       line.lastIndex = pos;
       while (match = line.exec(source)) {
         if (match[1] === "") {
-          if (sep3 === "\n")
-            res += sep3;
+          if (sep4 === "\n")
+            res += sep4;
           else
-            sep3 = "\n";
+            sep4 = "\n";
         } else {
-          res += sep3 + match[1];
-          sep3 = " ";
+          res += sep4 + match[1];
+          sep4 = " ";
         }
         pos = line.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source);
-      return res + sep3 + (match?.[1] ?? "");
+      return res + sep4 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError) {
       let res = "";
@@ -11641,14 +11641,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep3, value }) {
+    function stringifyItem({ start, key, sep: sep4, value }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep3)
-        for (const st of sep3)
+      if (sep4)
+        for (const st of sep4)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -12815,18 +12815,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep3;
+          let sep4;
           if (scalar.end) {
-            sep3 = scalar.end;
-            sep3.push(this.sourceToken);
+            sep4 = scalar.end;
+            sep4.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep3 = [this.sourceToken];
+            sep4 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep3 }]
+            items: [{ start, key: scalar, sep: sep4 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -12979,15 +12979,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep3 = it.sep;
-                  sep3.push(this.sourceToken);
+                  const sep4 = it.sep;
+                  sep4.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep3 }]
+                    items: [{ start: start2, key, sep: sep4 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -13181,13 +13181,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep3 = fc.end.splice(1, fc.end.length);
-            sep3.push(this.sourceToken);
+            const sep4 = fc.end.splice(1, fc.end.length);
+            sep4.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep3 }]
+              items: [{ start, key: fc, sep: sep4 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -13722,7 +13722,38 @@ function squireApprovalFromMcp(request, response) {
   if (!link2)
     return void 0;
   const args = record(params?.arguments) ?? {};
-  return { tool, ...squireApprovalCopy(tool, args), ...link2 };
+  const expiresAt = approvalExpiryIn(response.result);
+  return {
+    tool,
+    ...squireApprovalCopy(tool, args),
+    ...link2,
+    ...expiresAt !== void 0 ? { expiresAt } : {}
+  };
+}
+function approvalExpiryIn(value, depth = 0) {
+  if (depth > 6)
+    return void 0;
+  if (typeof value === "string") {
+    if (value.length > 2e4 || !/^[{[]/.test(value.trim()))
+      return void 0;
+    try {
+      return approvalExpiryIn(JSON.parse(value), depth + 1);
+    } catch {
+      return void 0;
+    }
+  }
+  if (Array.isArray(value))
+    return value.map((entry) => approvalExpiryIn(entry, depth + 1)).find((expiry) => expiry !== void 0);
+  const item = record(value);
+  if (!item)
+    return void 0;
+  const raw = item.expires_at ?? item.expiresAt;
+  if (typeof raw === "string") {
+    const parsed = Date.parse(raw);
+    if (Number.isFinite(parsed) && parsed > 0)
+      return parsed;
+  }
+  return Object.values(item).map((entry) => approvalExpiryIn(entry, depth + 1)).find((expiry) => expiry !== void 0);
 }
 function squireLoginWallIn(value, depth = 0) {
   if (depth > 6)
@@ -14036,7 +14067,7 @@ function configureNetworkFamilyDefaults(network = net) {
 configureNetworkFamilyDefaults();
 
 // apps/body/dist/cli.js
-import { dirname as dirname31, resolve as resolve44 } from "node:path";
+import { dirname as dirname32, resolve as resolve48 } from "node:path";
 import { stdin as stdin4, stdout as stdout5 } from "node:process";
 
 // node_modules/@clack/core/dist/index.mjs
@@ -15476,7 +15507,7 @@ function parseCursorModelsOutput(output) {
   };
 }
 async function enumerateCursorModels(env = process.env) {
-  return new Promise((resolve45) => {
+  return new Promise((resolve49) => {
     const child = spawn2("cursor-agent", ["models"], {
       env,
       stdio: ["ignore", "pipe", "ignore"]
@@ -15490,11 +15521,11 @@ async function enumerateCursorModels(env = process.env) {
     });
     child.on("error", () => {
       clearTimeout(timer);
-      resolve45(void 0);
+      resolve49(void 0);
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve45(code === 0 ? parseCursorModelsOutput(output) : void 0);
+      resolve49(code === 0 ? parseCursorModelsOutput(output) : void 0);
     });
   });
 }
@@ -15921,13 +15952,13 @@ var CursorAcpServer = class {
         consumeLine(line);
     });
     try {
-      const { code, signal } = await new Promise((resolve45) => {
+      const { code, signal } = await new Promise((resolve49) => {
         let settled = false;
         const finish = (exitCode, exitSignal) => {
           if (settled)
             return;
           settled = true;
-          resolve45({ code: exitCode, signal: exitSignal });
+          resolve49({ code: exitCode, signal: exitSignal });
         };
         child.once("error", (error) => {
           spawnError = error instanceof Error ? error.message : String(error);
@@ -16072,10 +16103,10 @@ function releaseSquireConnectSession(log2, owner = "") {
 function squireChromeProfileDir() {
   return process.env.TRUSTY_SQUIRE_PROFILE_DIR ?? squireHostPaths(homedir2()).profileDir;
 }
-var defaultShellRunner = (command, args) => new Promise((resolve45) => {
+var defaultShellRunner = (command, args) => new Promise((resolve49) => {
   execFile(command, [...args], { timeout: 12e4, maxBuffer: 4 * 1024 * 1024, encoding: "utf8" }, (error, stdout6, stderr) => {
     const code = error?.code;
-    resolve45({
+    resolve49({
       code: typeof code === "number" ? code : error ? 1 : 0,
       stdout: String(stdout6 ?? ""),
       stderr: String(stderr ?? "")
@@ -16100,7 +16131,7 @@ function killConnectTree(child) {
   }
   child.kill();
 }
-var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((resolve45) => {
+var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((resolve49) => {
   const child = spawn5(command, args, {
     stdio: ["ignore", "pipe", "pipe"],
     env: env ?? squireConnectProcessEnv(),
@@ -16114,7 +16145,7 @@ var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((res
   const safetyTimer = setTimeout(() => {
     if (!resolved) {
       resolved = true;
-      resolve45({ stdout: stdout6, stderr, pid: child.pid ?? void 0, report, abort: () => {
+      resolve49({ stdout: stdout6, stderr, pid: child.pid ?? void 0, report, abort: () => {
       } });
     }
     killConnectTree(child);
@@ -16149,7 +16180,7 @@ var defaultStreamedRunner = (command, args, env, owner = "") => new Promise((res
   const finish = (result) => {
     if (!resolved) {
       resolved = true;
-      resolve45(result);
+      resolve49(result);
     }
   };
   const settle = (result) => {
@@ -16641,13 +16672,13 @@ var StdioSquireMcpClient = class {
     const child = this.child;
     if (!child)
       return Promise.reject(new Error("Squire MCP session is not running"));
-    return new Promise((resolve45, reject) => {
+    return new Promise((resolve49, reject) => {
       const timeoutMs = method === "initialize" ? INITIALIZE_TIMEOUT_MS : CALL_TIMEOUT_MS;
       const timer = setTimeout(() => {
         this.pending.delete(id);
         reject(new Error(`${toolName2 ?? method} timed out after ${timeoutMs}ms`));
       }, timeoutMs);
-      this.pending.set(id, { resolve: resolve45, reject, timer });
+      this.pending.set(id, { resolve: resolve49, reject, timer });
       child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}
 `);
     });
@@ -16809,9 +16840,9 @@ var SquireTaskRelay = class {
           response.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: error instanceof Error ? error.message : "Squire relay failed" }));
         }
       });
-      await new Promise((resolve45, reject) => {
+      await new Promise((resolve49, reject) => {
         server.once("error", reject);
-        server.listen(0, "127.0.0.1", resolve45);
+        server.listen(0, "127.0.0.1", resolve49);
       });
       this.server = server;
       const address = server.address();
@@ -17850,11 +17881,11 @@ var RegistryMcpHostBroker = class {
         })();
       });
     });
-    await new Promise((resolve45, reject) => {
+    await new Promise((resolve49, reject) => {
       this.server.once("error", reject);
       this.server.listen(this.socketPath, () => {
         this.server.off("error", reject);
-        resolve45();
+        resolve49();
       });
     });
     chmodSync(this.socketPath, 384);
@@ -17863,12 +17894,12 @@ var RegistryMcpHostBroker = class {
     const server = this.server;
     this.server = void 0;
     if (server)
-      await new Promise((resolve45) => server.close(() => resolve45()));
+      await new Promise((resolve49) => server.close(() => resolve49()));
     rmSync(this.socketPath, { force: true });
   }
 };
 async function brokerRequest(socketPath, request) {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve49, reject) => {
     const socket = createConnection3(socketPath);
     let output = "";
     socket.setEncoding("utf8");
@@ -17885,7 +17916,7 @@ async function brokerRequest(socketPath, request) {
           throw new Error(parsed.error);
         if (!Array.isArray(parsed.messages) || !parsed.messages.every((entry) => typeof entry === "string"))
           throw new Error("Registry MCP broker returned an invalid response");
-        resolve45(parsed.messages);
+        resolve49(parsed.messages);
       } catch (error) {
         reject(error);
       }
@@ -18099,7 +18130,8 @@ var TURN_SILENCE_KINDS = [
   "helper-out-of-date",
   "update-interrupted",
   "offline",
-  "context-overflow"
+  "context-overflow",
+  "resource-limit"
 ];
 var TURN_RECEIPT_REASON_KINDS = [
   "hiccup",
@@ -18111,6 +18143,7 @@ var TURN_RECEIPT_REASON_KINDS = [
   "update-interrupted",
   "offline",
   "context-overflow",
+  "resource-limit",
   "model-selection-unavailable"
 ];
 function isTurnReceiptReasonKind(value) {
@@ -18158,6 +18191,9 @@ function classifyTurnSilence(reason, reasonKind) {
   if (isContextOverflowFault(text2)) {
     return { kind: "context-overflow" };
   }
+  if (/\bresource_limit: ACP session exceeded its \d+ MiB memory limit\b/i.test(text2)) {
+    return { kind: "resource-limit" };
+  }
   if (/\b402\b/.test(text2) || /usage limit/i.test(text2) || /more credits/i.test(text2) || /quota/i.test(text2) || /allowance is spent/i.test(text2)) {
     return {
       kind: "allowance-spent",
@@ -19354,7 +19390,7 @@ var AgentSignIn = class {
     };
     for (const name of ISOLATION_VARIABLES)
       delete env[name];
-    return new Promise((resolve45, reject) => {
+    return new Promise((resolve49, reject) => {
       let output = "";
       let answered = false;
       let child;
@@ -19395,7 +19431,7 @@ var AgentSignIn = class {
           return;
         answered = true;
         clearTimeout(linkTimer);
-        resolve45(link2);
+        resolve49(link2);
       };
       child.stdout?.on("data", read2);
       child.stderr?.on("data", read2);
@@ -29228,13 +29264,13 @@ var RoomSupervisor = class {
    */
   retryDelay(failures, signal, since = this.#wakes) {
     const delay = this.delaysMs[failures - 1];
-    return new Promise((resolve45) => {
+    return new Promise((resolve49) => {
       let timer;
       const done = () => {
         clearTimeout(timer);
         this.#parked.delete(done);
         signal?.removeEventListener("abort", done);
-        resolve45();
+        resolve49();
       };
       this.#parked.add(done);
       signal?.addEventListener("abort", done, { once: true });
@@ -29426,12 +29462,12 @@ async function retryBeforeReady(work, options) {
           if (wait2 <= 0)
             break;
           await options.extendStartTimeout(wait2 + 15e3);
-          await new Promise((resolve45) => {
+          await new Promise((resolve49) => {
             const timer = setTimeout(done, wait2);
             function done() {
               clearTimeout(timer);
               options.signal?.removeEventListener("abort", done);
-              resolve45();
+              resolve49();
             }
             wake = done;
             options.signal?.addEventListener("abort", done, { once: true });
@@ -29599,6 +29635,94 @@ import { resolve as resolve20 } from "node:path";
 import { spawn as spawn11 } from "node:child_process";
 import { EventEmitter } from "node:events";
 
+// apps/body/dist/acp-resource-scope.js
+import { execFile as execFile6 } from "node:child_process";
+import { randomUUID as randomUUID6 } from "node:crypto";
+import { readFileSync as readFileSync4 } from "node:fs";
+import { totalmem } from "node:os";
+import { promisify as promisify5 } from "node:util";
+var execFileAsync5 = promisify5(execFile6);
+function acpSessionMemoryMaxBytes(hostMemoryBytes = totalmem()) {
+  return Math.max(8 * 1024 ** 3, Math.floor(hostMemoryBytes / 4));
+}
+var ACP_SESSION_MEMORY_MAX_BYTES = acpSessionMemoryMaxBytes();
+var AcpResourceScope = class {
+  memoryMaxBytes;
+  unit = `beeline-acp-${randomUUID6()}.scope`;
+  #stop;
+  constructor(memoryMaxBytes = ACP_SESSION_MEMORY_MAX_BYTES) {
+    this.memoryMaxBytes = memoryMaxBytes;
+  }
+  launch(command, args, agentEnv) {
+    const env = { ...agentEnv };
+    const stripBus = !Object.hasOwn(agentEnv, "DBUS_SESSION_BUS_ADDRESS");
+    if (stripBus && process.env.DBUS_SESSION_BUS_ADDRESS)
+      env.DBUS_SESSION_BUS_ADDRESS = process.env.DBUS_SESSION_BUS_ADDRESS;
+    if (!env.XDG_RUNTIME_DIR && process.env.XDG_RUNTIME_DIR)
+      env.XDG_RUNTIME_DIR = process.env.XDG_RUNTIME_DIR;
+    const stripRuntime = !Object.hasOwn(agentEnv, "XDG_RUNTIME_DIR");
+    const owner = managedServiceUnit();
+    return {
+      command: "systemd-run",
+      args: [
+        "--user",
+        "--scope",
+        "--quiet",
+        "--same-dir",
+        `--unit=${this.unit}`,
+        `--property=MemoryMax=${this.memoryMaxBytes}`,
+        "--property=MemorySwapMax=0",
+        "--property=OOMPolicy=kill",
+        "--property=KillMode=control-group",
+        "--property=TimeoutStopSec=1s",
+        ...owner ? [`--property=BindsTo=${owner}`, `--property=After=${owner}`] : [],
+        "/usr/bin/env",
+        ...stripBus ? ["-u", "DBUS_SESSION_BUS_ADDRESS"] : [],
+        ...stripRuntime ? ["-u", "XDG_RUNTIME_DIR"] : [],
+        command,
+        ...args
+      ],
+      env
+    };
+  }
+  /** An OOM result survives process exit until reset-failed unloads the unit. */
+  async exceededMemoryLimit() {
+    try {
+      const { stdout: stdout6 } = await execFileAsync5("systemctl", ["--user", "show", this.unit, "--property=Result", "--value"], { timeout: 5e3 });
+      return stdout6.trim() === "oom-kill";
+    } catch {
+      return false;
+    }
+  }
+  async stop() {
+    return this.#stop ??= (async () => {
+      try {
+        await execFileAsync5("systemctl", ["--user", "stop", this.unit], { timeout: 5e3 });
+      } catch (error) {
+        const { stdout: stdout6 } = await execFileAsync5("systemctl", ["--user", "show", this.unit, "--property=LoadState", "--value"], { timeout: 5e3 });
+        if (stdout6.trim() !== "not-found")
+          throw error;
+      } finally {
+        await execFileAsync5("systemctl", ["--user", "reset-failed", this.unit], { timeout: 5e3 }).catch(() => void 0);
+      }
+    })().catch((error) => {
+      this.#stop = void 0;
+      throw error;
+    });
+  }
+};
+function managedServiceUnit() {
+  if (process.env.BEELINE_MANAGED_BY_SYSTEMD !== "1")
+    return void 0;
+  try {
+    const cgroup = readFileSync4("/proc/self/cgroup", "utf8");
+    const path = cgroup.split("\n").find((line) => line.startsWith("0::"))?.slice(3);
+    return path?.split("/").find((part) => /^beeline-(?:helper|agent@.+)\.service$/.test(part));
+  } catch {
+    return void 0;
+  }
+}
+
 // apps/body/dist/harness-capabilities.js
 var PROFILES = [
   {
@@ -29912,6 +30036,13 @@ var AcpRuntimeExitedError = class extends Error {
     this.name = "AcpRuntimeExitedError";
   }
 };
+var AcpResourceLimitError = class extends Error {
+  cause = "resource_limit";
+  constructor(memoryMaxBytes) {
+    super(`resource_limit: ACP session exceeded its ${Math.floor(memoryMaxBytes / 1024 / 1024)} MiB memory limit`);
+    this.name = "AcpResourceLimitError";
+  }
+};
 function killChildProcessGroup(child, signal) {
   if (!child.pid)
     return;
@@ -30196,6 +30327,10 @@ var AcpClient = class extends EventEmitter {
   permissionAllowlist;
   commandsHandler;
   oomKills;
+  useResourceScope;
+  resourceScopeMemoryMaxBytes;
+  resourceScope;
+  resourceScopeUnavailable = false;
   /** A deliberate stop owns its SIGKILL; that exit is never labelled OOM. */
   stopping = false;
   constructor(opts) {
@@ -30216,21 +30351,25 @@ var AcpClient = class extends EventEmitter {
     this.permissionAllowlist = opts.permissionAllowlist;
     this.commandsHandler = opts.onCommands;
     this.oomKills = opts.oomKills ?? new OomKillTracker(cgroupOomKillProbe());
+    this.useResourceScope = opts.resourceScope === "systemd" || opts.resourceScope === void 0 && process.platform === "linux" && process.env.BEELINE_MANAGED_BY_SYSTEMD === "1";
+    this.resourceScopeMemoryMaxBytes = opts.resourceScopeMemoryMaxBytes;
   }
   async start(timeoutMs = 6e4) {
     if (this.alive)
       return;
     await this.oomKills.prime().catch(() => void 0);
     this.stopping = false;
-    this.child = await withAdapterInstallLock(() => spawn11(this.agentCommand, this.agentArgs, {
+    const childEnv = this.inheritProcessEnv ? { ...process.env, ...this.agentEnv } : this.agentEnv;
+    this.resourceScope = this.useResourceScope && !this.resourceScopeUnavailable ? new AcpResourceScope(this.resourceScopeMemoryMaxBytes) : void 0;
+    const launch = this.resourceScope?.launch(this.agentCommand, this.agentArgs, childEnv);
+    this.child = await withAdapterInstallLock(() => spawn11(launch?.command ?? this.agentCommand, launch?.args ?? this.agentArgs, {
       // agentEnv is the child's whole environment: buildAgentEnv's allowlist is
       // a real boundary, not a decorative one layered over a full inherit.
-      env: this.inheritProcessEnv ? { ...process.env, ...this.agentEnv } : this.agentEnv,
+      env: launch?.env ?? childEnv,
       ...this.agentCwd ? { cwd: this.agentCwd } : {},
-      // The harness and every tool it spawns share a disposable process
-      // group. A hard turn deadline can therefore retire the whole tree,
-      // never just the ACP parent while a shell/compiler keeps running.
-      detached: process.platform !== "win32",
+      // Managed Linux sessions use a cgroup scope. The process-group fallback
+      // covers helpers without a user systemd manager.
+      detached: !launch && process.platform !== "win32",
       stdio: ["pipe", "pipe", "pipe"]
     }));
     this.alive = true;
@@ -30265,10 +30404,35 @@ var AcpClient = class extends EventEmitter {
       if (this.listenerCount("error") > 0)
         this.emit("error", err);
     });
-    const initResult = await this.request("initialize", {
-      protocolVersion: 1,
-      clientCapabilities: {}
-    }, timeoutMs);
+    let initResult;
+    try {
+      initResult = await this.request("initialize", {
+        protocolVersion: 1,
+        clientCapabilities: {}
+      }, timeoutMs);
+    } catch (error) {
+      if (launch && /EPIPE/.test(String(error)) && this.child?.exitCode === null) {
+        await new Promise((resolve49) => {
+          const timer = setTimeout(resolve49, 250);
+          this.child?.once("close", () => {
+            clearTimeout(timer);
+            resolve49();
+          });
+        });
+      }
+      const scopeUnavailable = launch && !this.resourceScopeUnavailable && /(?:Failed to connect to bus|Failed to create bus connection|spawn systemd-run ENOENT)/i.test(`${this.stderrTail}
+${String(error)}`);
+      await this.stop().catch(() => void 0);
+      if (scopeUnavailable) {
+        this.resourceScopeUnavailable = true;
+        this.resourceScope = void 0;
+        this.child = null;
+        this.alive = false;
+        console.warn("[acp] systemd user scope unavailable; starting ACP session in a process group");
+        return this.start(timeoutMs);
+      }
+      throw error;
+    }
     const initMeta = initResult._meta;
     const steering = initMeta?.steering;
     this.supportsStandardSteering = steering?.supported === true;
@@ -30281,22 +30445,25 @@ var AcpClient = class extends EventEmitter {
   }
   /**
    * One child exit: reject every in-flight request so the turn fails and is
-   * reported instead of hanging, then publish the exit. A SIGKILL is checked
-   * against the daemon cgroup's OOM counter so the rejection can name the real
-   * cause instead of a bare signal.
+   * reported instead of hanging, then publish the exit. A scoped exit reads
+   * that scope's result; an unscoped SIGKILL uses the daemon cgroup's OOM
+   * counter so the rejection can name the cause instead of a bare signal.
    */
   async handleChildExit(code, signal) {
+    const child = this.child;
     this.alive = false;
     for (const p of this.pending.values())
       this.clearTimer(p);
+    const scope = this.resourceScope;
+    const memoryLimited = scope && !this.stopping ? await scope.exceededMemoryLimit() : false;
     let oomKilled = false;
-    if (signal === "SIGKILL" && !this.stopping) {
+    if (!memoryLimited && signal === "SIGKILL" && !this.stopping) {
       let diagnosticTimer;
       try {
         oomKilled = await Promise.race([
           this.oomKills.consume().catch(() => false),
-          new Promise((resolve45) => {
-            diagnosticTimer = setTimeout(() => resolve45(false), 100);
+          new Promise((resolve49) => {
+            diagnosticTimer = setTimeout(() => resolve49(false), 100);
           })
         ]);
       } finally {
@@ -30308,13 +30475,21 @@ var AcpClient = class extends EventEmitter {
     const stderrSuffix = meaningful ? `: ${meaningful}` : "";
     for (const [, p] of this.pending) {
       this.clearTimer(p);
-      p.reject(new AcpRuntimeExitedError(`${exitText}${stderrSuffix}`));
+      p.reject(memoryLimited ? new AcpResourceLimitError(scope.memoryMaxBytes) : new AcpRuntimeExitedError(`${exitText}${stderrSuffix}`));
     }
     this.pending.clear();
     this.activeRunIds.clear();
     this.activePromptSessions.clear();
     this.toolCallMetadata.clear();
     this.sessionCommands.clear();
+    if (scope) {
+      await scope.stop().then(() => {
+        if (this.resourceScope === scope)
+          this.resourceScope = void 0;
+        if (this.child === child)
+          this.child = null;
+      }).catch((error) => console.error("[acp] resource scope cleanup failed:", error));
+    }
     this.emit("exit", { code, signal });
   }
   failRuntime(detail) {
@@ -30324,27 +30499,36 @@ var AcpClient = class extends EventEmitter {
       p.reject(new AcpRuntimeExitedError(detail));
     }
     this.pending.clear();
+    if (this.resourceScope)
+      void this.resourceScope.stop().catch((error) => console.error("[acp] resource scope cleanup failed:", error));
   }
   async stop() {
     const child = this.child;
-    if (!child)
+    const scope = this.resourceScope;
+    if (!child && !scope)
       return;
     this.stopping = true;
     try {
-      if (this.child?.stdin.writable) {
+      if (child?.stdin.writable) {
         this.notify("shutdown", {});
       }
     } catch {
     }
-    await new Promise((r2) => setTimeout(r2, 300));
-    try {
-      killChildProcessGroup(child, "SIGTERM");
-    } catch {
-    }
-    await new Promise((r2) => setTimeout(r2, 500));
-    try {
-      killChildProcessGroup(child, "SIGKILL");
-    } catch {
+    if (scope) {
+      await scope.stop();
+      if (this.resourceScope === scope)
+        this.resourceScope = void 0;
+    } else if (child) {
+      await new Promise((r2) => setTimeout(r2, 300));
+      try {
+        killChildProcessGroup(child, "SIGTERM");
+      } catch {
+      }
+      await new Promise((r2) => setTimeout(r2, 500));
+      try {
+        killChildProcessGroup(child, "SIGKILL");
+      } catch {
+      }
     }
     this.child = null;
     this.alive = false;
@@ -30720,7 +30904,7 @@ var AcpClient = class extends EventEmitter {
     const current = this.activeRunIds.get(sessionId);
     if (current)
       return Promise.resolve(current);
-    return new Promise((resolve45, reject) => {
+    return new Promise((resolve49, reject) => {
       const onUpdate = (update) => {
         if (update.sessionId !== sessionId)
           return;
@@ -30728,7 +30912,7 @@ var AcpClient = class extends EventEmitter {
         if (!runId)
           return;
         cleanup();
-        resolve45(runId);
+        resolve49(runId);
       };
       const timer = setTimeout(() => {
         cleanup();
@@ -30807,14 +30991,14 @@ var AcpClient = class extends EventEmitter {
     }
     const id = this.nextId++;
     const payload = { jsonrpc: "2.0", id, method, params };
-    return new Promise((resolve45, reject) => {
+    return new Promise((resolve49, reject) => {
       const timer = backstop ? void 0 : setTimeout(() => {
         this.pending.delete(id);
         reject(new AcpRequestTimeoutError(method, timeoutMs, this.stderrTail, false, detail));
       }, timeoutMs);
       const sessionId = params?.sessionId;
       this.pending.set(id, {
-        resolve: resolve45,
+        resolve: resolve49,
         reject,
         timer,
         method,
@@ -30845,7 +31029,7 @@ var AcpClient = class extends EventEmitter {
 
 // apps/body/dist/agent-home.js
 var import_yaml2 = __toESM(require_dist(), 1);
-import { existsSync as existsSync7, readFileSync as readFileSync5, watch } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, watch } from "node:fs";
 
 // node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
@@ -31013,7 +31197,7 @@ function skipVoid(ctx, banNewLines, banComments) {
     skipComment(ctx);
   }
 }
-function skipUntil(ctx, sep3, end) {
+function skipUntil(ctx, sep4, end) {
   let ptr = ctx.p;
   if (!end) {
     ptr = indexOfNewline(ctx.s, ptr);
@@ -31024,7 +31208,7 @@ function skipUntil(ctx, sep3, end) {
     let c2 = ctx.s.charCodeAt(ctx.p);
     if (c2 === 35) {
       skipComment(ctx);
-    } else if (c2 === end || c2 === sep3) {
+    } else if (c2 === end || c2 === sep4) {
       return;
     }
   }
@@ -31642,7 +31826,7 @@ function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false } = {}) {
 }
 
 // apps/body/dist/agent-home.js
-import { createHash as createHash7, randomUUID as randomUUID6 } from "node:crypto";
+import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
 import { chmod as chmod5, copyFile, lstat as lstat3, mkdir as mkdir11, readFile as readFile16, readlink, readdir as readdir4, realpath, rename as rename7, rm as rm6, symlink as symlink2, unlink as unlink5, writeFile as writeFile9 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
 import { basename as basename3, dirname as dirname12, join as join12, relative, resolve as resolve16, sep } from "node:path";
@@ -31768,7 +31952,7 @@ function androidAgentEnv(input) {
 }
 
 // apps/body/dist/beeline-skill.js
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { resolve as resolve13 } from "node:path";
 
 // packages/api-contract/dist/phone-types.js
@@ -32275,7 +32459,7 @@ var BEELINE_ROOM_MECHANICS = [
   "If you need reach outside the sandbox, call beeline-agent request_grant. If you already know discrete options, call beeline-agent ask_choice (one human, optional) or open_poll (every human in this Room, required deadline). A poll is refused below two electors and above fifty, and in a DM. A plurality is a fact, never permission to deploy, delete, merge, or spend. Open-ended asks stay tagged prose. Never put Always / Once / No on a preference.",
   "To state something that happened so the Room and other agents can act on it, call beeline-agent emit_event with your own agent:<slug> kind, one sentence, and optionally the agent members to wake. Chains of events are bounded and a refused emit posts nothing."
 ].join(" ");
-function runningBeelineReleaseId(env = process.env, read2 = (path) => readFileSync4(path, "utf8")) {
+function runningBeelineReleaseId(env = process.env, read2 = (path) => readFileSync5(path, "utf8")) {
   try {
     const lib = env.BEELINE_LIB_DIR;
     if (!lib)
@@ -32312,7 +32496,7 @@ The tools this build knows, what each is for, and which the owner of this machin
 
 **Use available tools before asking the person.** Before asking a person for a code, a status or a file, call workbench_status and check whether a tool or connected app you already have can get it, then use it. This includes an emailed verification code in an already-connected inbox. Ask only when none can, and say why. The key-ownership and grant rules still apply.
 
-**Offer the tool at the moment you need it.** When the work in front of you needs a tool the person does not have, do not send them to a settings page and do not stop at naming it. Call workbench_status first - a tool they already have is used, not offered. In a Room or DM, call offer_connector with the connectorType and one short reason: a card appears there, spoken by you, addressed to the person you are answering, with one action. Connector offers are unavailable in corners; use a Room or DM for those. Your turn pauses on the card - say in prose what you are waiting for and end the turn; you are woken when it is added, and then you carry on.
+**Offer the tool at the moment you need it.** When the work in front of you needs a tool the person does not have, do not send them to a settings page and do not stop at naming it. Call workbench_status first - a tool they already have is used, not offered. In a Room or DM, call offer_connector with the connectorType and one short reason: a card appears there, spoken by you, addressed to the person you are answering, with one action. Connector offers are unavailable in corners; use a Room or DM for those. When the person wants Squire on a different Google account (or its signed-in account is the wrong one), call offer_connector with connectorType trusty-squire and intent "switch" - a plain connect keeps the account it already has. Your turn pauses on the card - say in prose what you are waiting for and end the turn; you are woken when it is added, and then you carry on.
 
 **Research before you offer, and say so.** Never offer a tool you cannot describe. If someone asks you to install or add something you do not already know - by name, by purpose, or by what it will hold - say plainly that you are looking it up first, find out what it is and what it does with credentials, and state what you learned in your reply BEFORE the card appears. A person reading "Add X?" must already have read, in your own words, what X is. Refusing to act blind is part of being trusted with keys.
 
@@ -33579,7 +33763,7 @@ async function writeBackDetachedClaudeLogin(target, source) {
   const written = await withSharedClaudeLoginLock(shared, async () => {
     if (!await isNewer())
       return false;
-    const temp = `${shared}.beeline-${randomUUID6()}`;
+    const temp = `${shared}.beeline-${randomUUID7()}`;
     try {
       await writeFile9(temp, detached, { flag: "wx", mode: 384 });
       await chmod5(temp, 384);
@@ -33596,7 +33780,7 @@ async function writeBackDetachedClaudeLogin(target, source) {
     return "not-newer";
   if (await readFile16(target, "utf8") !== detached)
     return "busy";
-  const link2 = `${target}.beeline-link-${randomUUID6()}`;
+  const link2 = `${target}.beeline-link-${randomUUID7()}`;
   await symlink2(source, link2);
   await rename7(link2, target);
   return "linked";
@@ -33626,7 +33810,7 @@ async function repairRoomAgentCredentialLinks(input) {
         if (outcome !== "not-newer")
           continue;
       }
-      const quarantine = `${target}.beeline-quarantine-${Date.now()}-${randomUUID6()}`;
+      const quarantine = `${target}.beeline-quarantine-${Date.now()}-${randomUUID7()}`;
       await rename7(target, quarantine);
     }
     await symlink2(source, target);
@@ -33745,7 +33929,7 @@ async function provisionAgentSkillsAndMcp(root, operatorHome, skillReleaseId, fa
     try {
       const source = resolve16(operatorHome, config.toml);
       const target = resolve16(root, config.dir, "config.toml");
-      const mcpSection = existsSync7(source) ? localHarnessMcpToml(readFileSync5(source, "utf8")) : void 0;
+      const mcpSection = existsSync7(source) ? localHarnessMcpToml(readFileSync6(source, "utf8")) : void 0;
       const section = config.dir === "codex" ? [CODEX_ROOM_AGENT_LOCKDOWN_TOML, CODEX_ROOM_WEB_SEARCH_TOML, mcpSection].filter(Boolean).join("\n") : mcpSection;
       if (!section) {
         await unlink5(target).catch(() => void 0);
@@ -33765,7 +33949,7 @@ async function provisionAgentSkillsAndMcp(root, operatorHome, skillReleaseId, fa
       const source = resolve16(operatorHome, ".config", "goose", name);
       const target = resolve16(gooseConfigDir, name);
       if (existsSync7(source)) {
-        const body = readFileSync5(source, "utf8");
+        const body = readFileSync6(source, "utf8");
         await writeIsolatedHarnessFile(target, name === "config.yaml" ? localGooseConfig(body) : body);
       } else {
         await unlink5(target).catch(() => void 0);
@@ -33843,7 +34027,7 @@ async function applyGrantedHostRoutes(root, operatorHome, granted, agentKind, fa
       if (Object.keys(routes).length === 0)
         continue;
       const target = resolve16(root, config.dir, "config.toml");
-      const existing = existsSync7(target) ? readFileSync5(target, "utf8") : void 0;
+      const existing = existsSync7(target) ? readFileSync6(target, "utf8") : void 0;
       const merged = mergeTomlHostRoutes(existing, routes);
       if (merged)
         await writeIsolatedHarnessFile(target, merged);
@@ -33854,7 +34038,7 @@ async function applyGrantedHostRoutes(root, operatorHome, granted, agentKind, fa
         const gooseConfigDir = resolve16(root, "goose", "config");
         await mkdir11(gooseConfigDir, { recursive: true, mode: 448 });
         const target = resolve16(gooseConfigDir, "config.yaml");
-        const existing = existsSync7(target) ? readFileSync5(target, "utf8") : void 0;
+        const existing = existsSync7(target) ? readFileSync6(target, "utf8") : void 0;
         const merged = mergeGooseHostRoutes(existing, routes);
         if (merged)
           await writeIsolatedHarnessFile(target, merged);
@@ -33929,7 +34113,7 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed, open
     if (resolvedSource !== source) {
       throw new AgentHomeSecurityError(`Pi custom model config resolves through a link: ${source}`);
     }
-    const sourceValue = JSON.parse(readFileSync5(resolvedSource, "utf8"));
+    const sourceValue = JSON.parse(readFileSync6(resolvedSource, "utf8"));
     await writeIsolatedHarnessFile(target, `${JSON.stringify(withOpenRouterModelRouting(sourceValue, pin), null, 2)}
 `);
   } catch (error) {
@@ -33941,7 +34125,7 @@ async function provisionPiCustomModelConfig(root, operatorHome, failClosed, open
 }
 function readClaudeUserScopeMcpServers(path) {
   try {
-    const parsed = JSON.parse(readFileSync5(path, "utf8"));
+    const parsed = JSON.parse(readFileSync6(path, "utf8"));
     const servers = recordValue2(parsed.mcpServers);
     if (servers)
       return localMcpServers(servers);
@@ -34142,7 +34326,7 @@ function readExistingText(path) {
   if (!existsSync7(path))
     return void 0;
   try {
-    return readFileSync5(path, "utf8");
+    return readFileSync6(path, "utf8");
   } catch {
     return void 0;
   }
@@ -34164,7 +34348,7 @@ async function provisionManagedSkillsDir(target, managedSkills, sharedSkills, op
   const plan = await planManagedSkills(managedSkills, sharedSkills, optionalShares);
   if (await materializedSkillManifest(target) === plan.manifest)
     return;
-  const staged = resolve16(parent, `.skills.${process.pid}.${randomUUID6()}.tmp`);
+  const staged = resolve16(parent, `.skills.${process.pid}.${randomUUID7()}.tmp`);
   await mkdir11(staged, { mode: 448 });
   try {
     for (const entry of plan.entries) {
@@ -34416,7 +34600,7 @@ async function writeIsolatedHarnessFile(path, content) {
   if (!parentStats.isDirectory() || parentStats.isSymbolicLink()) {
     throw new Error(`isolated harness parent is not a real directory: ${parent}`);
   }
-  const temporary = resolve16(parent, `.${basename3(path)}.${process.pid}.${randomUUID6()}.tmp`);
+  const temporary = resolve16(parent, `.${basename3(path)}.${process.pid}.${randomUUID7()}.tmp`);
   try {
     await writeFile9(temporary, content, { mode: 384, flag: "wx" });
     await chmod5(temporary, 384);
@@ -34473,8 +34657,8 @@ function harnessStateDirsFromEnv(env) {
 }
 
 // apps/body/dist/bwrap-sandbox.js
-import { execFile as execFile6, spawnSync } from "node:child_process";
-import { lstatSync, readdirSync as readdirSync3, readFileSync as readFileSync6, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { execFile as execFile7, spawnSync } from "node:child_process";
+import { lstatSync, readdirSync as readdirSync3, readFileSync as readFileSync7, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { basename as basename4, dirname as dirname13, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve17 } from "node:path";
 var DEFAULT_SANDBOX_POLICY = "bwrap";
@@ -34533,7 +34717,7 @@ var KNOWN_CREDENTIAL_MASK_PATHS = [
   ".secrets.env",
   ".beeline/registry-mcp"
 ];
-function credentialMaskPaths(extraPaths, home = homedir12(), stat10 = (path) => {
+function credentialMaskPaths(extraPaths, home = homedir12(), stat11 = (path) => {
   try {
     const info = lstatSync(path);
     return { isDirectory: info.isDirectory() };
@@ -34552,7 +34736,7 @@ function credentialMaskPaths(extraPaths, home = homedir12(), stat10 = (path) =>
     if (seen.has(path))
       continue;
     seen.add(path);
-    const info = stat10(path);
+    const info = stat11(path);
     if (!info) {
       if (required.has(path))
         masks.push({ path, kind: "dir", create: true });
@@ -34787,7 +34971,7 @@ function readInstallFailure(stateDir) {
   if (!stateDir)
     return void 0;
   try {
-    const at = Number.parseInt(readFileSync6(installFailureMarker(stateDir), "utf8").trim(), 10);
+    const at = Number.parseInt(readFileSync7(installFailureMarker(stateDir), "utf8").trim(), 10);
     return Number.isFinite(at) ? at : void 0;
   } catch {
     return void 0;
@@ -34810,8 +34994,8 @@ function clearInstallFailure(stateDir) {
   } catch {
   }
 }
-var runSandboxInstallCommand = (command, args) => new Promise((resolve45) => {
-  execFile6(command, [...args], {
+var runSandboxInstallCommand = (command, args) => new Promise((resolve49) => {
+  execFile7(command, [...args], {
     timeout: INSTALL_TIMEOUT_MS,
     maxBuffer: INSTALL_OUTPUT_LIMIT * 2,
     // A dpkg prompt on a host with a held conffile would otherwise sit on
@@ -34820,7 +35004,7 @@ var runSandboxInstallCommand = (command, args) => new Promise((resolve45) => {
   }, (error, stdout6, stderr) => {
     const code = error && "code" in error && typeof error.code === "number" ? error.code : error ? null : 0;
     const output = [stdout6, stderr].join("").trim();
-    resolve45({ code, output: output || (error ? error.message : "") });
+    resolve49({ code, output: output || (error ? error.message : "") });
   });
 });
 function lastLine2(output, fallback) {
@@ -35105,7 +35289,7 @@ function isAllowedAgentModelConfigCategory(category, id) {
 }
 
 // apps/body/dist/model-config.js
-import { lstatSync as lstatSync2, readFileSync as readFileSync7 } from "node:fs";
+import { lstatSync as lstatSync2, readFileSync as readFileSync8 } from "node:fs";
 import { basename as basename5, resolve as resolve19 } from "node:path";
 
 // apps/body/dist/transient-provider-error.js
@@ -35331,7 +35515,7 @@ function credentialedPiCustomProviders(env) {
     if (!stats.isFile() || stats.isSymbolicLink() || stats.nlink !== 1 || stats.size > 1048576) {
       return held;
     }
-    const parsed = JSON.parse(readFileSync7(path, "utf8"));
+    const parsed = JSON.parse(readFileSync8(path, "utf8"));
     const providers = parsed.providers;
     const remember = (name, config) => {
       if (typeof name !== "string" || !name.trim() || !config || typeof config !== "object")
@@ -35564,7 +35748,7 @@ function describeCurrentReleaseOutcome(outcome) {
 async function retryWhileAdapterReinstalls(run2, options = {}) {
   const attempts = options.attempts ?? 12;
   const delayMs = options.delayMs ?? 5e3;
-  const sleep4 = options.sleep ?? ((ms) => new Promise((resolve45) => setTimeout(resolve45, ms)));
+  const sleep4 = options.sleep ?? ((ms) => new Promise((resolve49) => setTimeout(resolve49, ms)));
   for (let attempt = 1; ; attempt += 1) {
     try {
       return await run2();
@@ -36792,7 +36976,7 @@ async function runStartCommand(args, interactiveUi, dependencyOverrides = {}) {
 
 // apps/body/dist/connect-command.js
 import { spawn as spawn13 } from "node:child_process";
-import { createHash as createHash9, randomUUID as randomUUID7 } from "node:crypto";
+import { createHash as createHash9, randomUUID as randomUUID8 } from "node:crypto";
 import { chmod as chmod7, mkdir as mkdir16, readFile as readFile20, unlink as unlink7, writeFile as writeFile13 } from "node:fs/promises";
 import { homedir as homedir15, hostname } from "node:os";
 import { dirname as dirname19, resolve as resolve26 } from "node:path";
@@ -36912,7 +37096,7 @@ async function validateAgentModelSelection(agent, agentEnv, selection) {
 }
 
 // apps/body/dist/config.js
-import { accessSync as accessSync3, constants as constants2, existsSync as existsSync8, readFileSync as readFileSync8 } from "node:fs";
+import { accessSync as accessSync3, constants as constants2, existsSync as existsSync8, readFileSync as readFileSync9 } from "node:fs";
 import { basename as basename7, dirname as dirname17, resolve as resolve24 } from "node:path";
 function firstExisting2(paths) {
   for (const p of paths) {
@@ -37009,7 +37193,7 @@ function parseEnvFile(path) {
   const out = {};
   if (!existsSync8(path))
     return out;
-  const text2 = readFileSync8(path, "utf8");
+  const text2 = readFileSync9(path, "utf8");
   for (const raw of text2.split("\n")) {
     const line = raw.trim();
     if (!line || line.startsWith("#"))
@@ -37856,7 +38040,7 @@ async function readMachineId(env = process.env) {
     if (!/^[0-9a-f-]{32,}$/.test(machineId))
       throw new Error("invalid persisted machine id");
   } catch {
-    machineId = randomUUID7();
+    machineId = randomUUID8();
     try {
       await mkdir16(configDir, { recursive: true, mode: 448 });
       await writeFile13(machineIdPath, `${machineId}
@@ -38186,7 +38370,7 @@ async function probeReleaseInSubprocess(input) {
     return { kind: "unavailable", reason: `release ${input.releaseId} has no runnable CLI entrypoint` };
   }
   const timeoutMs = input.timeoutMs ?? CURRENT_RELEASE_PROBE_TIMEOUT_MS;
-  return new Promise((resolve45) => {
+  return new Promise((resolve49) => {
     const child = spawn14(input.execPath ?? process.execPath, [entrypoint, UPDATE_PROBE_COMMAND, "--config", input.runtimeConfigPath], { env: input.env ?? process.env, stdio: ["ignore", "pipe", "pipe"] });
     let stdout6 = "";
     let stderr = "";
@@ -38196,7 +38380,7 @@ async function probeReleaseInSubprocess(input) {
         return;
       settled = true;
       clearTimeout(timer);
-      resolve45(outcome);
+      resolve49(outcome);
     };
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
@@ -38276,12 +38460,12 @@ async function runUpdateProbeCommand(args, options = {}) {
 }
 
 // apps/body/dist/machine-helper.js
-import { mkdir as mkdir29, rename as rename13, stat as stat9, writeFile as writeFile22 } from "node:fs/promises";
-import { dirname as dirname30 } from "node:path";
+import { mkdir as mkdir29, rename as rename13, stat as stat10, writeFile as writeFile22 } from "node:fs/promises";
+import { dirname as dirname31, resolve as resolve47 } from "node:path";
 
 // apps/body/dist/agent-runtime.js
 import { homedir as homedir19 } from "node:os";
-import { dirname as dirname29, join as join21, resolve as resolve43 } from "node:path";
+import { dirname as dirname30, join as join23, resolve as resolve45 } from "node:path";
 
 // apps/body/dist/model-availability.js
 var SECRET_VALUE = /(?:token|key|secret|password)=?[^\s,;]*/gi;
@@ -38404,8 +38588,8 @@ async function syncAgentModelCatalog(input) {
 }
 
 // apps/body/dist/connector-tailscale.js
-import { execFile as execFile7 } from "node:child_process";
-import { randomUUID as randomUUID8 } from "node:crypto";
+import { execFile as execFile8 } from "node:child_process";
+import { randomUUID as randomUUID9 } from "node:crypto";
 import { rm as rm10 } from "node:fs/promises";
 import { tmpdir as tmpdir3, userInfo } from "node:os";
 import { join as join14 } from "node:path";
@@ -38415,10 +38599,10 @@ var LOGIN_URL = /https:\/\/login\.tailscale\.com\/[A-Za-z0-9_/-]+/u;
 function clipped(value) {
   return value.length <= OUTPUT_LIMIT ? value : value.slice(value.length - OUTPUT_LIMIT);
 }
-var runTailscaleCommand = (command, args) => new Promise((resolve45) => {
-  execFile7(command, [...args], { timeout: COMMAND_TIMEOUT_MS, maxBuffer: OUTPUT_LIMIT * 2 }, (error, stdout6, stderr) => {
+var runTailscaleCommand = (command, args) => new Promise((resolve49) => {
+  execFile8(command, [...args], { timeout: COMMAND_TIMEOUT_MS, maxBuffer: OUTPUT_LIMIT * 2 }, (error, stdout6, stderr) => {
     const code = error && "code" in error && typeof error.code === "number" ? error.code : error ? null : 0;
-    resolve45({ code, stdout: clipped(stdout6), stderr: clipped(stderr) });
+    resolve49({ code, stdout: clipped(stdout6), stderr: clipped(stderr) });
   });
 });
 function loginUrlFrom(status, output) {
@@ -38495,7 +38679,7 @@ async function ensureInstalled(run2, onProgress, platform) {
       }
     };
   }
-  const script = join14(tmpdir3(), `beeline-tailscale-install-${process.pid}-${randomUUID8()}.sh`);
+  const script = join14(tmpdir3(), `beeline-tailscale-install-${process.pid}-${randomUUID9()}.sh`);
   const steps2 = [
     step2("Tailscale installed", "running", {
       command: "curl -fsSL https://tailscale.com/install.sh"
@@ -38978,16 +39162,16 @@ function describe2(error) {
 }
 
 // apps/body/dist/room-runtime.js
-import { execFile as execFile13 } from "node:child_process";
+import { execFile as execFile16 } from "node:child_process";
 import { createHash as createHash14 } from "node:crypto";
 import { existsSync as existsSync10, mkdirSync as mkdirSync3 } from "node:fs";
-import { mkdir as mkdir27, readdir as readdir9, realpath as realpath2, rm as rm15 } from "node:fs/promises";
-import { dirname as dirname27, relative as relative3, resolve as resolve38, sep as sep2 } from "node:path";
-import { promisify as promisify8 } from "node:util";
+import { lstat as lstat7, mkdir as mkdir27, readdir as readdir11, realpath as realpath3, rm as rm17 } from "node:fs/promises";
+import { dirname as dirname28, relative as relative4, resolve as resolve40, sep as sep3 } from "node:path";
+import { promisify as promisify11 } from "node:util";
 
 // apps/body/dist/grant-runner.js
-import { execFile as execFile8 } from "node:child_process";
-import { createHash as createHash11, randomBytes as randomBytes9, randomUUID as randomUUID9 } from "node:crypto";
+import { execFile as execFile9 } from "node:child_process";
+import { createHash as createHash11, randomBytes as randomBytes9, randomUUID as randomUUID10 } from "node:crypto";
 import { chmod as chmod8, mkdir as mkdir17, readFile as readFile22, readdir as readdir6, rename as rename9, rm as rm11, rmdir, stat as stat7, writeFile as writeFile15 } from "node:fs/promises";
 import { createServer as createServer3 } from "node:http";
 import { dirname as dirname21, resolve as resolve28 } from "node:path";
@@ -39168,7 +39352,7 @@ var GrantCommandRunner = class {
     const sandboxMarker = runsOnHost ? void 0 : `[beeline-sandbox-started:${randomBytes9(16).toString("hex")}]`;
     const spawn15 = runsOnHost ? { command: argv[0], args: argv.slice(1) } : roomSandboxCommand(policy, room.cwd, argv, sandboxMarker);
     const outcome = await new Promise((resolveRun) => {
-      const child = execFile8(spawn15.command, spawn15.args, {
+      const child = execFile9(spawn15.command, spawn15.args, {
         cwd: room.cwd,
         env,
         timeout: this.options.timeoutMs ?? GRANT_COMMAND_TIMEOUT_MS,
@@ -39538,13 +39722,13 @@ var TurnUsageAccumulator = class {
 };
 
 // apps/body/dist/server-command-intake.js
-import { randomUUID as randomUUID10 } from "node:crypto";
+import { randomUUID as randomUUID11 } from "node:crypto";
 import { mkdir as mkdir18, writeFile as writeFile16 } from "node:fs/promises";
 import { writeFileSync as writeFileSync4 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 import { dirname as dirname22, join as join16 } from "node:path";
 var CommandExecutionContext = class {
-  generationId = randomUUID10();
+  generationId = randomUUID11();
   path;
   current;
   constructor(root) {
@@ -39702,11 +39886,11 @@ async function runServerCommandIntake(options) {
               if (attempt === 3)
                 throw error;
               const waitMs = Math.max(250 * 2 ** attempt, error instanceof DaemonApiError ? error.retryAfterMs ?? 0 : 0);
-              await new Promise((resolve45) => {
+              await new Promise((resolve49) => {
                 const done = () => {
                   clearTimeout(timer);
                   signal?.removeEventListener("abort", done);
-                  resolve45();
+                  resolve49();
                 };
                 const timer = setTimeout(done, waitMs);
                 signal?.addEventListener("abort", done, { once: true });
@@ -39797,11 +39981,11 @@ async function runServerCommandIntake(options) {
         }
       }
       options.onPoll?.();
-      const reconcile = await new Promise((resolve45) => {
+      const reconcile = await new Promise((resolve49) => {
         const done = (needed) => {
           signal?.removeEventListener("abort", aborted);
           wake = void 0;
-          resolve45(needed);
+          resolve49(needed);
         };
         const aborted = () => done(false);
         wake = done;
@@ -39841,13 +40025,13 @@ async function runServerCommandIntake(options) {
 }
 
 // apps/body/dist/monolith-corner-turn.js
-import { execFile as execFile12 } from "node:child_process";
+import { execFile as execFile14 } from "node:child_process";
 import { createHash as createHash13 } from "node:crypto";
 import { existsSync as existsSync9 } from "node:fs";
 import { mkdir as mkdir26, readFile as readFile30, writeFile as writeFile20 } from "node:fs/promises";
 import { homedir as homedir18, hostname as hostname3 } from "node:os";
-import { dirname as dirname26, join as join20, resolve as resolve37 } from "node:path";
-import { promisify as promisify7 } from "node:util";
+import { dirname as dirname26, join as join21, resolve as resolve38 } from "node:path";
+import { promisify as promisify9 } from "node:util";
 
 // apps/body/dist/agent-command-catalog.js
 function agentCommandCatalogPublisher(input) {
@@ -40497,13 +40681,13 @@ async function hasCornerPrepareScript(worktreePath) {
 }
 
 // apps/body/dist/pi-mcp-bridge.js
-import { execFile as execFile9 } from "node:child_process";
+import { execFile as execFile10 } from "node:child_process";
 import { mkdtemp as mkdtemp2, mkdir as mkdir20, readFile as readFile26, rm as rm12, unlink as unlink8 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
 import { resolve as resolve30 } from "node:path";
-import { promisify as promisify5 } from "node:util";
+import { promisify as promisify6 } from "node:util";
 var PI_MCP_BRIDGE_FILENAME = "beeline-mcp-bridge.js";
-var execFileAsync5 = promisify5(execFile9);
+var execFileAsync6 = promisify6(execFile10);
 var nativeMcpProbes = /* @__PURE__ */ new Map();
 async function piHasNativeMcp(command, env) {
   const path = env?.PATH ?? process.env.PATH ?? "";
@@ -40513,7 +40697,7 @@ async function piHasNativeMcp(command, env) {
     probe = (async () => {
       const home = await mkdtemp2(resolve30(tmpdir5(), "beeline-pi-mcp-probe-"));
       try {
-        const { stdout: stdout6 } = await execFileAsync5(command, ["mcp", "list", "--json"], {
+        const { stdout: stdout6 } = await execFileAsync6(command, ["mcp", "list", "--json"], {
           cwd: home,
           timeout: 1200,
           env: { PATH: path, HOME: home, PI_CODING_AGENT_DIR: home, PI_OFFLINE: "1" }
@@ -40810,7 +40994,7 @@ export default async function (pi) {
 `;
 
 // apps/body/dist/corner-branch-sync.js
-import { execFile as execFile10 } from "node:child_process";
+import { execFile as execFile11 } from "node:child_process";
 import { access as access2, readFile as readFile27 } from "node:fs/promises";
 import { resolve as resolve31 } from "node:path";
 var CORNER_GIT_SYNC_TIMEOUT_MS = 12e4;
@@ -40818,7 +41002,7 @@ var CORNER_GIT_SYNC_KILL_GRACE_MS = 1e3;
 var CornerGitSyncInterruptedError = class extends Error {
 };
 async function syncCornerBranch(input) {
-  const git = async (args, cleanup = false) => {
+  const git2 = async (args, cleanup = false) => {
     const controller = new AbortController();
     const signal = input.signal && !cleanup ? AbortSignal.any([input.signal, controller.signal]) : controller.signal;
     const timer = setTimeout(() => controller.abort(), CORNER_GIT_SYNC_TIMEOUT_MS);
@@ -40826,11 +41010,11 @@ async function syncCornerBranch(input) {
     try {
       if (signal.aborted)
         throw interrupted();
-      return await new Promise((resolve45, reject) => {
+      return await new Promise((resolve49, reject) => {
         let killTimer;
         let stdout6 = "";
         let failure = null;
-        const child = input.git ? void 0 : execFile10("git", ["-C", input.worktreePath, ...args], {
+        const child = input.git ? void 0 : execFile11("git", ["-C", input.worktreePath, ...args], {
           ...input.env ? { env: input.env } : {},
           signal,
           maxBuffer: 4 * 1024 * 1024
@@ -40860,10 +41044,10 @@ async function syncCornerBranch(input) {
             else if (failure)
               reject(failure);
             else
-              resolve45(stdout6);
+              resolve49(stdout6);
           });
         else
-          input.git(args).then(resolve45, reject).finally(cleanup2);
+          input.git(args).then(resolve49, reject).finally(cleanup2);
       });
     } finally {
       clearTimeout(timer);
@@ -40873,10 +41057,10 @@ async function syncCornerBranch(input) {
   const gitDir = resolve31(input.worktreePath, marker.startsWith("gitdir: ") ? marker.slice(8).trim() : ".git");
   for (const directory of ["rebase-merge", "rebase-apply"]) {
     if (await access2(resolve31(gitDir, directory)).then(() => true, () => false))
-      await git(["rebase", "--abort"], true);
+      await git2(["rebase", "--abort"], true);
   }
   const remoteRef = `refs/remotes/origin/${input.featureBranch}`;
-  const fetched = await git([
+  const fetched = await git2([
     "fetch",
     "origin",
     `+refs/heads/${input.featureBranch}:${remoteRef}`
@@ -40888,31 +41072,31 @@ async function syncCornerBranch(input) {
   });
   if (!fetched)
     return "unchanged";
-  const remote = (await git(["rev-parse", remoteRef])).trim();
+  const remote = (await git2(["rev-parse", remoteRef])).trim();
   if (!remote)
     throw new Error(`fetched corner branch has no remote ref: ${remoteRef}`);
-  const local = (await git(["rev-parse", "HEAD"])).trim();
+  const local = (await git2(["rev-parse", "HEAD"])).trim();
   if (local === remote)
     return "unchanged";
-  if (await contains(git, local, remote))
+  if (await contains(git2, local, remote))
     return "unchanged";
-  const behind = await contains(git, remote, local);
+  const behind = await contains(git2, remote, local);
   try {
-    await git(behind ? ["merge", "--ff-only", remote] : ["rebase", remote]);
+    await git2(behind ? ["merge", "--ff-only", remote] : ["rebase", remote]);
     return behind ? "fast-forwarded" : "rebased";
   } catch (error) {
-    await git(["rebase", "--abort"], true).catch((error2) => {
+    await git2(["rebase", "--abort"], true).catch((error2) => {
       if (error2 instanceof CornerGitSyncInterruptedError)
         throw error2;
     });
     if (error instanceof CornerGitSyncInterruptedError)
       throw error;
-    await git(["reset", "--hard", remote]);
+    await git2(["reset", "--hard", remote]);
     return "realigned";
   }
 }
-async function contains(git, head, ancestor) {
-  return git(["merge-base", "--is-ancestor", ancestor, head]).then(() => true, (error) => {
+async function contains(git2, head, ancestor) {
+  return git2(["merge-base", "--is-ancestor", ancestor, head]).then(() => true, (error) => {
     if (error instanceof CornerGitSyncInterruptedError)
       throw error;
     return false;
@@ -41066,6 +41250,7 @@ var AGENT_SURFACE_TOOL_NAMES = [
   "pr_checks_status",
   "post_artifact",
   "write_scratch_file",
+  "scratch_status",
   "fetch_image",
   "connect_app"
 ];
@@ -41138,11 +41323,11 @@ function beelineAgentMcpServer(config, api, context) {
       { name: "BEELINE_DAEMON_ROOM_ID", value: context.roomId },
       { name: "BEELINE_DAEMON_WORKSPACE_ID", value: context.workspaceId },
       ...context.cornerId ? [{ name: "BEELINE_DAEMON_CORNER_ID", value: context.cornerId }] : [],
-      ...context.agentMayCloseCorner ? [{ name: "BEELINE_CORNER_AGENT_CLOSE", value: "1" }] : [],
       ...context.reviewer ? [{ name: "BEELINE_CORNER_REVIEWER", value: "1" }] : [],
       ...context.cornerId && context.repositoryBacked ? [{ name: "BEELINE_CORNER_REPOSITORY", value: "1" }] : [],
       ...context.attachRoot ? [{ name: "BEELINE_ATTACH_ROOT", value: context.attachRoot }] : [],
       ...context.attachScratchRoot ? [{ name: "BEELINE_ATTACH_SCRATCH_ROOT", value: context.attachScratchRoot }] : [],
+      ...context.cornerScratchRoot ? [{ name: "BEELINE_CORNER_SCRATCH_ROOT", value: context.cornerScratchRoot }] : [],
       ...context.grantRunner ? [
         { name: "BEELINE_GRANT_RUNNER_URL", value: context.grantRunner.url },
         { name: "BEELINE_GRANT_RUNNER_TOKEN", value: context.grantRunner.token }
@@ -41172,6 +41357,90 @@ function readOnlyMcpServer(config, cwd, agentMemoryDir) {
   };
 }
 
+// apps/body/dist/scratch-lifecycle.js
+import { execFile as execFile12 } from "node:child_process";
+import { lstat as lstat4, readdir as readdir7, rmdir as rmdir2, rm as rm13, stat as stat8, unlink as unlink9 } from "node:fs/promises";
+import { join as join18, resolve as resolve33 } from "node:path";
+import { promisify as promisify7 } from "node:util";
+var execFileAsync7 = promisify7(execFile12);
+var CORNER_SCRATCH_BUDGET_BYTES = 5 * 1024 ** 3;
+var CORNER_SCRATCH_TTL_MS = 14 * 24 * 60 * 6e4;
+var SHARED_MODEL_CACHE_BUDGET_BYTES = 32 * 1024 ** 3;
+var MODEL_CACHE_IDLE_MS = 24 * 60 * 6e4;
+async function allocatedDirectoryBytes(path) {
+  if (!await lstat4(path).catch(() => void 0))
+    return 0;
+  const output = await execFileAsync7("du", ["-s", "-B1", "--", path], {
+    maxBuffer: 1024 * 1024
+  }).then((result) => result.stdout);
+  const bytes = Number(output.split(/\s+/)[0]);
+  if (!Number.isSafeInteger(bytes) || bytes < 0)
+    throw new Error("scratch usage could not be measured");
+  return bytes;
+}
+function scratchBudgetMessage(usage2, budget = CORNER_SCRATCH_BUDGET_BYTES) {
+  const mib = (bytes) => Math.ceil(bytes / 1024 ** 2);
+  return `Scratch ${mib(usage2)} / ${mib(budget)} MiB; files idle for 14 days expire. Use scratch_status and your shell to inspect, update or delete files. ${usage2 > budget ? "OVER BUDGET: remove files before writing more." : ""}`.trim();
+}
+function scratchGrowthExceedsBudget(usage2, atTurnStart, budget = CORNER_SCRATCH_BUDGET_BYTES) {
+  return usage2 > budget && usage2 > atTurnStart;
+}
+async function sweepStaleCornerScratch(root, now2 = Date.now(), ttlMs = CORNER_SCRATCH_TTL_MS) {
+  const cutoff = now2 - ttlMs;
+  let files = 0;
+  let bytes = 0;
+  const visit = async (dir, top) => {
+    for (const entry of await readdir7(dir, { withFileTypes: true }).catch(() => [])) {
+      if (top && (entry.name === "agent-home" || entry.name === ".git"))
+        continue;
+      const path = join18(dir, entry.name);
+      const info = await lstat4(path).catch(() => void 0);
+      if (!info || info.isSymbolicLink())
+        continue;
+      if (info.isDirectory()) {
+        await visit(path, false);
+        if (!top)
+          await rmdir2(path).catch(() => void 0);
+      } else if (info.isFile() && info.mtimeMs < cutoff) {
+        await unlink9(path);
+        files++;
+        bytes += info.size;
+      }
+    }
+  };
+  if ((await lstat4(root).catch(() => void 0))?.isDirectory())
+    await visit(resolve33(root), true);
+  return { files, bytes };
+}
+async function pruneSharedModelCache(root, now2 = Date.now(), budget = SHARED_MODEL_CACHE_BUDGET_BYTES) {
+  let usage2 = await allocatedDirectoryBytes(root);
+  if (usage2 <= budget)
+    return [];
+  const candidates = [];
+  for (const parent of [join18(root, "hub"), root]) {
+    for (const entry of await readdir7(parent, { withFileTypes: true }).catch(() => [])) {
+      const eligible = parent === root ? entry.name === "xet" : /^(?:models|datasets|spaces)--/.test(entry.name);
+      if (!eligible || !entry.isDirectory())
+        continue;
+      const path = join18(parent, entry.name);
+      const info = await stat8(path);
+      if (info.mtimeMs > now2 - MODEL_CACHE_IDLE_MS)
+        continue;
+      candidates.push({ path, usedAt: info.mtimeMs });
+    }
+  }
+  candidates.sort((a2, b) => a2.usedAt - b.usedAt || a2.path.localeCompare(b.path));
+  const removed = [];
+  for (const item of candidates) {
+    if (usage2 <= budget)
+      break;
+    await rm13(item.path, { recursive: true, force: true });
+    usage2 = await allocatedDirectoryBytes(root);
+    removed.push(item.path);
+  }
+  return removed;
+}
+
 // apps/body/dist/institutional-context.js
 import { performance as performance2 } from "node:perf_hooks";
 var INSTITUTIONAL_CONTEXT_TIMEOUT_MS = 500;
@@ -41220,16 +41489,16 @@ async function awaitInstitutionalContext(fetch2, log2 = console.warn, budgetMs =
 }
 
 // apps/body/dist/codegraph.js
-import { execFile as execFile11 } from "node:child_process";
+import { execFile as execFile13 } from "node:child_process";
 import { access as access3, appendFile, mkdir as mkdir21, readFile as readFile28 } from "node:fs/promises";
-import { dirname as dirname23, isAbsolute as isAbsolute3, resolve as resolve33 } from "node:path";
-import { promisify as promisify6 } from "node:util";
-var execFileAsync6 = promisify6(execFile11);
+import { dirname as dirname23, isAbsolute as isAbsolute3, resolve as resolve34 } from "node:path";
+import { promisify as promisify8 } from "node:util";
+var execFileAsync8 = promisify8(execFile13);
 var CODEGRAPH_MCP_SERVER_NAME = "codegraph";
 var CODEGRAPH_INDEX_PATH = ".codegraph/codegraph.db";
 var CODEGRAPH_PREPARE_TIMEOUT_MS = 12e4;
 function codegraphIndexDirectory(cwd) {
-  return resolve33(cwd, dirname23(CODEGRAPH_INDEX_PATH));
+  return resolve34(cwd, dirname23(CODEGRAPH_INDEX_PATH));
 }
 function codegraphMcpServer(config, cwd, options) {
   if (!config.codegraphCommand)
@@ -41237,7 +41506,7 @@ function codegraphMcpServer(config, cwd, options) {
   return {
     name: CODEGRAPH_MCP_SERVER_NAME,
     command: config.codegraphCommand,
-    args: ["serve", "--mcp", "--path", resolve33(cwd), ...options.readonly ? ["--no-watch"] : []],
+    args: ["serve", "--mcp", "--path", resolve34(cwd), ...options.readonly ? ["--no-watch"] : []],
     env: [
       { name: "CODEGRAPH_TELEMETRY", value: "0" },
       // One MCP child per harness session is easier to contain than a daemon
@@ -41251,25 +41520,25 @@ function codegraphFingerprintServers(config, servers, mounted = Boolean(config.c
 }
 async function isGitWorktree(cwd) {
   try {
-    const { stdout: stdout6 } = await execFileAsync6("git", ["rev-parse", "--show-toplevel"], {
+    const { stdout: stdout6 } = await execFileAsync8("git", ["rev-parse", "--show-toplevel"], {
       cwd,
       timeout: 1e4
     });
-    return resolve33(stdout6.trim()) === resolve33(cwd);
+    return resolve34(stdout6.trim()) === resolve34(cwd);
   } catch {
     return false;
   }
 }
 async function excludeIndexFromGitStatus(cwd) {
   try {
-    const { stdout: stdout6 } = await execFileAsync6("git", ["rev-parse", "--git-path", "info/exclude"], {
+    const { stdout: stdout6 } = await execFileAsync8("git", ["rev-parse", "--git-path", "info/exclude"], {
       cwd,
       timeout: 1e4
     });
     const gitPath = stdout6.trim();
     if (!gitPath)
       return;
-    const path = isAbsolute3(gitPath) ? gitPath : resolve33(cwd, gitPath);
+    const path = isAbsolute3(gitPath) ? gitPath : resolve34(cwd, gitPath);
     await mkdir21(dirname23(path), { recursive: true });
     const existing = await readFile28(path, "utf8").catch(() => "");
     if (existing.split("\n").includes(".codegraph/"))
@@ -41284,11 +41553,11 @@ async function prepareCodegraphIndex(config, cwd) {
   if (!command || !await isGitWorktree(cwd))
     return false;
   await excludeIndexFromGitStatus(cwd);
-  const indexPath = resolve33(cwd, CODEGRAPH_INDEX_PATH);
+  const indexPath = resolve34(cwd, CODEGRAPH_INDEX_PATH);
   const indexed = await access3(indexPath).then(() => true, () => false);
   const args = indexed ? ["sync", "--quiet", cwd] : ["init", "--yes", cwd];
   try {
-    await execFileAsync6(command, args, {
+    await execFileAsync8(command, args, {
       cwd,
       env: { ...process.env, CODEGRAPH_TELEMETRY: "0", CODEGRAPH_NO_DAEMON: "1" },
       timeout: CODEGRAPH_PREPARE_TIMEOUT_MS,
@@ -41304,7 +41573,7 @@ async function prepareCodegraphIndex(config, cwd) {
 // apps/body/dist/monolith-room-turn.js
 import { mkdir as mkdir23, writeFile as writeFile18 } from "node:fs/promises";
 import { homedir as homedir17, hostname as hostname2 } from "node:os";
-import { dirname as dirname24, join as join18 } from "node:path";
+import { dirname as dirname24, join as join19 } from "node:path";
 
 // packages/api-contract/dist/scheduled-prompts.js
 var SCHEDULE_SCHEDULER_NAME = "Beeline Scheduler";
@@ -41408,6 +41677,7 @@ function cornerHasRepositoryWork(brief) {
 var CORNER_RUNTIME_AUTHOR_CONTRACT = `The current brief's spec \u2014 stories, criteria, non-goals, risks \u2014 defines scope and done. The human approval quote wins any conflict. The short objective is navigation-only, never scope.
 Meet every story; respect every non-goal and risk.
 Before any code or build action, the brief must hold this ask's outline; opening and prompting inside it is not that outline. When it has none or the ask changed, read the revision and write it with revise_corner_brief first; chat never revises it.
+Then post the brief's outline, with an HTML mock for any frontend change, and wait for a human reply that approves it. The request that opened the work is not approval.
 Follow the beeline-triage skill's bugfix execution contract when the spec or its approval quote reports a defect.
 Reproduce as triage isolated it with available emulator, Playwright, browser and test runner. Record attempts and observations. If a reproduction is obtained, record it under Reproduction <id>, reusing triage's identifier when it recorded one. If reproduction fails, warn and continue; never stop and never condition the fix on reproduction.
 Fix only the spec and approval quote. With a reproduction, change only what removes it and meets its user stories.
@@ -41416,6 +41686,7 @@ No unrequested features, flags, compatibility shims or refactors.`;
 var CORNER_AUTHOR_CONTRACT = `The current brief's spec \u2014 stories, criteria, non-goals, risks \u2014 defines scope and done. The human approval quote wins any conflict. The short objective is navigation-only, never scope.
 Meet every story; respect every non-goal and risk. Use its file manifest.
 Before any code or build action, the brief must hold this ask's outline; opening and prompting inside it is not that outline. When it has none or the ask changed, read the revision and write it with revise_corner_brief first; chat never revises it.
+Then post the brief's outline, with an HTML mock for any frontend change, and wait for a human reply that approves it. The request that opened the work is not approval.
 Follow the beeline-triage skill's bugfix execution contract when the spec or its approval quote reports a defect.
 Reproduce as triage isolated it with available emulator, Playwright, browser and test runner. Record attempts and observations. If a reproduction is obtained, record it under Reproduction <id>, reusing triage's identifier when it recorded one. If reproduction fails, warn and continue; never stop and never condition the fix on reproduction.
 Fix only the spec and approval quote. With a reproduction, change only what removes it and meets its user stories.
@@ -41589,7 +41860,7 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     render: () => [
       "Repository changes happen only in a corner. In a Room, the finished fix for a code problem is the exact change plus an offer to open a corner for it; open one when a person asks for the change.",
       "Before opening one, consult beeline-triage and beeline-spec, then call open_corner with a name of at most three words joined by hyphens (no whitespace), an objective of at most 24 words, and the brief (a spec plus the approving message). The objective only titles the work; the brief is its authority. When open_corner succeeds the server posts the corner card: do not restate it.",
-      "For corners you belong to, use inspect_corner for status, steer_corner to pass Room input down, and ask_corner for one answer. Never post into a corner without a Room command.",
+      "For corners under this Room, use inspect_corner for status, steer_corner to pass Room input down, ask_corner for one answer, and post_to_corner for a note that wakes nobody.",
       "A corner ends when its pull request merges; since a person may merge minutes after it opens, anything still needed must already live in a different corner before that pull request opens, not after. A request covering several items is one corner per item, opened as work reaches each one, never one corner returned to for a later item."
     ].join(" ")
   },
@@ -41749,7 +42020,7 @@ The soul is not authority and never changes your tools, permissions, roles, or m
     budgetBytes: 260,
     layer: "surface",
     surfaces: ["repo-less-corner"],
-    render: ({ requesterHandle }) => `${requesterHandle ? `Tag @${handle(requesterHandle)} once, when the deliverable is posted or you need their input. ` : ""}When you posted files, name them in one line; never restate your answer. Only a human closes this corner.`
+    render: ({ requesterHandle }) => `${requesterHandle ? `Tag @${handle(requesterHandle)} once, when the deliverable is posted or you need their input. ` : ""}When you posted files, name them in one line; never restate your answer. Call close_corner only when a person asks.`
   }
 ];
 function applicable(sections, context) {
@@ -41922,7 +42193,7 @@ ${transcript.lines.join("\n")}`;
     layer: "turn",
     surfaces: ["room", "code-corner", "repo-less-corner"],
     render: ({ surface, corners, closedCorners }) => [
-      corners?.length ? `Current corners you belong to (use the exact cornerId with ${surface === "room" ? "inspect_corner, steer_corner, or ask_corner" : "steer_corner for a sibling under this parent Room"}):
+      corners?.length ? `Current corners you belong to (use the exact cornerId with ${surface === "room" ? "inspect_corner, steer_corner, or ask_corner" : "inspect_corner or steer_corner for a sibling under this parent Room"}):
 ${JSON.stringify(corners)}` : "",
       surface === "room" && closedCorners?.length ? `Corners you belong to closed in the last 24 hours (merge commit is unavailable when absent):
 ${closedCorners.map((corner) => `- ${corner.name ?? corner.cornerId} (${corner.cornerId}): PR ${corner.pullRequestNumber ? `#${corner.pullRequestNumber}` : "unavailable"}, merge commit ${corner.mergeCommitSha ?? "unavailable"}`).join("\n")}` : ""
@@ -41989,8 +42260,8 @@ function assembleTurnPrompt(context) {
 }
 
 // apps/body/dist/turn-trace.js
-import { appendFile as appendFile2, mkdir as mkdir22, readdir as readdir7, rm as rm13 } from "node:fs/promises";
-import { resolve as resolve34 } from "node:path";
+import { appendFile as appendFile2, mkdir as mkdir22, readdir as readdir8, rm as rm14 } from "node:fs/promises";
+import { resolve as resolve35 } from "node:path";
 import { performance as performance3 } from "node:perf_hooks";
 var TURN_PHASES = [
   /** Enqueued on `SessionScheduler` until this turn holds a slot. A capacity wait lives here. */
@@ -42276,7 +42547,7 @@ function formatTurnTraceLine(record5) {
   return [head, ...record5.attempts.map((attempt) => formatTurnAttempt(attempt))].join("\n  ");
 }
 function turnTraceDirectory(runtimeDir) {
-  return resolve34(runtimeDir, "turn-traces");
+  return resolve35(runtimeDir, "turn-traces");
 }
 var TURN_TRACE_RETENTION_DAYS = 7;
 function traceFileName(date) {
@@ -42293,7 +42564,7 @@ var TurnTraceFile = class {
     this.options = options;
   }
   path(now2 = (this.options.clock ?? (() => /* @__PURE__ */ new Date()))()) {
-    return resolve34(this.directory, traceFileName(now2));
+    return resolve35(this.directory, traceFileName(now2));
   }
   write(record5) {
     this.tail = this.tail.catch(() => void 0).then(async () => {
@@ -42316,8 +42587,8 @@ var TurnTraceFile = class {
       return;
     this.prunedDay = day;
     const cutoff = traceFileName(new Date(now2.getTime() - TURN_TRACE_RETENTION_DAYS * 864e5));
-    const names = await readdir7(this.directory).catch(() => []);
-    await Promise.all(names.filter((name) => /^turns-\d{4}-\d{2}-\d{2}\.jsonl$/.test(name) && name < cutoff).map((name) => rm13(resolve34(this.directory, name), { force: true })));
+    const names = await readdir8(this.directory).catch(() => []);
+    await Promise.all(names.filter((name) => /^turns-\d{4}-\d{2}-\d{2}\.jsonl$/.test(name) && name < cutoff).map((name) => rm14(resolve35(this.directory, name), { force: true })));
   }
 };
 
@@ -42669,7 +42940,7 @@ var MonolithRoomTurnLoop = class {
     const cached = this.deliveredAttachments.get(item.id);
     if (cached?.length === item.attachments.length)
       return cached;
-    const delivered = await deliverAttachments(item.attachments, join18(this.attachmentDir, item.id.replace(/[^\w-]/g, "_")), this.options.fetchImpl, cached);
+    const delivered = await deliverAttachments(item.attachments, join19(this.attachmentDir, item.id.replace(/[^\w-]/g, "_")), this.options.fetchImpl, cached);
     this.deliveredAttachments.set(item.id, withoutImageData(delivered.filter((entry) => entry.path)));
     return delivered;
   }
@@ -42739,7 +43010,7 @@ var MonolithRoomTurnLoop = class {
     this.sessionFingerprint = void 0;
     this.sessionCodegraphReady = false;
     this.pinnedProviderOverride = void 0;
-    if (client?.isAlive)
+    if (client)
       await client.stop();
   }
   /**
@@ -42919,7 +43190,7 @@ var MonolithRoomTurnLoop = class {
       args: this.options.config.agentArgs ?? []
     }, selection);
     const { stateDirs, tmpDir } = harnessStateDirsFromEnv(agentEnv);
-    this.attachmentDir = tmpDir ? join18(tmpDir, "beeline-attachments") : void 0;
+    this.attachmentDir = tmpDir ? join19(tmpDir, "beeline-attachments") : void 0;
     this.sessionScratchDir = tmpDir;
     this.sessionStateDirs = stateDirs;
     const homeStateDirs = harnessHomeStateDirs(harnessLabel, agentEnv.HOME ?? operatorHome);
@@ -43160,7 +43431,7 @@ var MonolithRoomTurnLoop = class {
     this.sessionId = void 0;
     this.sessionFingerprint = void 0;
     this.sessionCodegraphReady = false;
-    if (client?.isAlive)
+    if (client)
       await client.stop();
     this.pinnedProviderOverride = next;
     await (trace ? trace.measure("activation", () => this.activate(trace)) : this.activate());
@@ -43239,8 +43510,8 @@ var MonolithRoomTurnLoop = class {
         let timer;
         const stats = statsPromise && remaining > 0 ? await Promise.race([
           statsPromise,
-          new Promise((resolve45) => {
-            timer = setTimeout(() => resolve45(void 0), remaining);
+          new Promise((resolve49) => {
+            timer = setTimeout(() => resolve49(void 0), remaining);
           })
         ]).finally(() => {
           if (timer)
@@ -43624,6 +43895,7 @@ var MonolithRoomTurnLoop = class {
       this.squireRelay.close();
       this.options.grantRunner?.unregister(roomId);
       await this.options.scheduler.suspend(roomId);
+      this.options.scheduler.forget(roomId);
     }
   }
 };
@@ -43654,9 +43926,9 @@ function roomMessagePrompt(author, body, attachments, delivered, harnessAcceptsI
 
 // apps/body/dist/corner-github-auth.js
 import { chmod as chmod9, mkdir as mkdir24, writeFile as writeFile19 } from "node:fs/promises";
-import { delimiter as delimiter3, resolve as resolve35 } from "node:path";
+import { delimiter as delimiter3, resolve as resolve36 } from "node:path";
 async function installCornerGitHubWrappers(input) {
-  const bin = resolve35(input.root, "beeline-github-bin");
+  const bin = resolve36(input.root, "beeline-github-bin");
   await mkdir24(bin, { recursive: true, mode: 448 });
   const common = {
     node: process.execPath,
@@ -43668,13 +43940,13 @@ async function installCornerGitHubWrappers(input) {
     gitCommand: input.gitBinary,
     originUrl: input.originUrl ?? ""
   };
-  await writeLauncher(resolve35(bin, "git"), {
+  await writeLauncher(resolve36(bin, "git"), {
     ...common,
     command: input.gitBinary,
     launcher: "git",
     restFallback: false
   });
-  await writeLauncher(resolve35(bin, "gh"), {
+  await writeLauncher(resolve36(bin, "gh"), {
     ...common,
     command: input.ghBinary ?? "",
     launcher: "gh",
@@ -44109,37 +44381,37 @@ if (!refusal) {
 }
 
 // apps/body/dist/warm-node-modules.js
-import { createHash as createHash12, randomUUID as randomUUID11 } from "node:crypto";
+import { createHash as createHash12, randomUUID as randomUUID12 } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
-import { chmod as chmod10, copyFile as copyFile2, link, lstat as lstat4, mkdir as mkdir25, readdir as readdir8, readFile as readFile29, readlink as readlink2, rename as rename10, rm as rm14, stat as stat8, symlink as symlink3, utimes } from "node:fs/promises";
-import { dirname as dirname25, join as join19, resolve as resolve36 } from "node:path";
+import { chmod as chmod10, copyFile as copyFile2, link, lstat as lstat5, mkdir as mkdir25, readdir as readdir9, readFile as readFile29, readlink as readlink2, rename as rename10, rm as rm15, stat as stat9, symlink as symlink3, utimes } from "node:fs/promises";
+import { dirname as dirname25, join as join20, resolve as resolve37 } from "node:path";
 var STORE_FORMAT = "v1";
 var STAGING_PREFIX = ".beeline-warm-";
 var STAGING_SWEEP_MS = 24 * 60 * 60 * 1e3;
 var WARM_STORE_MAX_ENTRIES = 3;
 function sharedNpmCacheDir(supervisorRoot) {
-  return resolve36(supervisorRoot, "beeline", "npm-cache");
+  return resolve37(supervisorRoot, "beeline", "npm-cache");
 }
 function sharedPnpmStoreDir(supervisorRoot) {
-  return resolve36(supervisorRoot, "beeline", "pnpm-store");
+  return resolve37(supervisorRoot, "beeline", "pnpm-store");
 }
 function sharedCargoTargetDir(supervisorRoot) {
-  return resolve36(supervisorRoot, "beeline", "cargo-target");
+  return resolve37(supervisorRoot, "beeline", "cargo-target");
 }
 function sharedTurboCacheDir(supervisorRoot) {
-  return resolve36(supervisorRoot, "beeline", "turbo-cache");
+  return resolve37(supervisorRoot, "beeline", "turbo-cache");
 }
 function warmNodeModulesStoreDir(supervisorRoot) {
-  return resolve36(supervisorRoot, "beeline", "node-modules");
+  return resolve37(supervisorRoot, "beeline", "node-modules");
 }
 function mobileNodeModulesStoreDir(supervisorRoot) {
-  return resolve36(supervisorRoot, "beeline", "node-modules-mobile");
+  return resolve37(supervisorRoot, "beeline", "node-modules-mobile");
 }
 function isPlanRefusal(value) {
   return "failure" in value;
 }
 async function readWarmPlan(worktreePath) {
-  const lockfile = await readFile29(resolve36(worktreePath, "package-lock.json")).catch(() => void 0);
+  const lockfile = await readFile29(resolve37(worktreePath, "package-lock.json")).catch(() => void 0);
   if (!lockfile)
     return { failure: "no-lockfile" };
   const packages = parseLockfilePackages(lockfile);
@@ -44178,11 +44450,11 @@ async function seedWarmNodeModules(input) {
     return { reason: plan.failure, ...plan.detail ? { detail: plan.detail } : {} };
   }
   for (const tree of plan.trees) {
-    if (await pathExists(resolve36(input.worktreePath, tree))) {
+    if (await pathExists(resolve37(input.worktreePath, tree))) {
       return { reason: "present", key: plan.key };
     }
   }
-  const entry = resolve36(input.storeRoot, plan.key);
+  const entry = resolve37(input.storeRoot, plan.key);
   if (!await isDirectory(entry))
     return { reason: "cold", key: plan.key };
   const [storeDevice, checkoutDevice] = await Promise.all([
@@ -44192,29 +44464,29 @@ async function seedWarmNodeModules(input) {
   if (storeDevice === void 0 || storeDevice !== checkoutDevice) {
     return { reason: "cross-device", key: plan.key };
   }
-  const staging = resolve36(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID11()}`);
+  const staging = resolve37(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID12()}`);
   const placed = [];
   const now2 = (input.now ?? Date.now)();
   try {
     await sweepStaleStaging(input.storeRoot, now2);
     await utimes(entry, now2 / 1e3, now2 / 1e3).catch(() => void 0);
     for (const tree of plan.trees) {
-      await cloneTree(resolve36(entry, tree), resolve36(staging, tree), seedFile);
+      await cloneTree(resolve37(entry, tree), resolve37(staging, tree), seedFile);
     }
     for (const tree of plan.trees) {
-      const target = resolve36(input.worktreePath, tree);
+      const target = resolve37(input.worktreePath, tree);
       await mkdir25(dirname25(target), { recursive: true });
-      await rename10(resolve36(staging, tree), target);
+      await rename10(resolve37(staging, tree), target);
       placed.push(target);
     }
     return { reason: "seeded", key: plan.key };
   } catch (error) {
     for (const target of placed) {
-      await rm14(target, { recursive: true, force: true }).catch(() => void 0);
+      await rm15(target, { recursive: true, force: true }).catch(() => void 0);
     }
     return { reason: "failed", key: plan.key, detail: describe3(error) };
   } finally {
-    await rm14(staging, { recursive: true, force: true }).catch(() => void 0);
+    await rm15(staging, { recursive: true, force: true }).catch(() => void 0);
   }
 }
 async function harvestWarmNodeModules(input) {
@@ -44222,11 +44494,11 @@ async function harvestWarmNodeModules(input) {
   if (isPlanRefusal(plan)) {
     return { reason: plan.failure, ...plan.detail ? { detail: plan.detail } : {} };
   }
-  const entry = resolve36(input.storeRoot, plan.key);
+  const entry = resolve37(input.storeRoot, plan.key);
   if (await pathExists(entry))
     return { reason: "already-warm", key: plan.key };
   for (const tree of plan.trees) {
-    if (!await isDirectory(resolve36(input.worktreePath, tree))) {
+    if (!await isDirectory(resolve37(input.worktreePath, tree))) {
       return { reason: "no-node-modules", key: plan.key, detail: tree };
     }
   }
@@ -44238,12 +44510,12 @@ async function harvestWarmNodeModules(input) {
       detail: `${missing.length} absent, e.g. ${missing.slice(0, 3).join(", ")}`
     };
   }
-  const staging = resolve36(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID11()}`);
+  const staging = resolve37(input.storeRoot, `${STAGING_PREFIX}${process.pid}.${randomUUID12()}`);
   try {
     await mkdir25(input.storeRoot, { recursive: true, mode: 493 });
     await sweepStaleStaging(input.storeRoot, (input.now ?? Date.now)());
     for (const tree of plan.trees) {
-      await cloneTree(resolve36(input.worktreePath, tree), resolve36(staging, tree), harvestFile);
+      await cloneTree(resolve37(input.worktreePath, tree), resolve37(staging, tree), harvestFile);
     }
     await input.onCopied?.();
     if (!await stagedTreeIsPublishable(input.worktreePath, staging, plan.key)) {
@@ -44257,25 +44529,25 @@ async function harvestWarmNodeModules(input) {
       return { reason: "already-warm", key: plan.key };
     return { reason: "failed", key: plan.key, detail: describe3(error) };
   } finally {
-    await rm14(staging, { recursive: true, force: true }).catch(() => void 0);
+    await rm15(staging, { recursive: true, force: true }).catch(() => void 0);
   }
 }
 async function stagedTreeIsPublishable(worktreePath, staging, key) {
   const settled = await readWarmPlan(worktreePath);
   if (isPlanRefusal(settled) || settled.key !== key)
     return false;
-  const hidden = join19("node_modules", ".package-lock.json");
+  const hidden = join20("node_modules", ".package-lock.json");
   const [copied, current] = await Promise.all([
-    readFile29(resolve36(staging, hidden)).catch(() => void 0),
-    readFile29(resolve36(worktreePath, hidden)).catch(() => void 0)
+    readFile29(resolve37(staging, hidden)).catch(() => void 0),
+    readFile29(resolve37(worktreePath, hidden)).catch(() => void 0)
   ]);
   if (!copied || !current || !copied.equals(current))
     return false;
   return (await missingInstalledPackages(worktreePath, staging)).length === 0;
 }
 async function missingInstalledPackages(worktreePath, treeRoot = worktreePath) {
-  const wanted = parseLockfilePackages(await readFile29(resolve36(worktreePath, "package-lock.json")).catch(() => void 0));
-  const installed = parseLockfilePackages(await readFile29(resolve36(treeRoot, "node_modules", ".package-lock.json")).catch(() => void 0));
+  const wanted = parseLockfilePackages(await readFile29(resolve37(worktreePath, "package-lock.json")).catch(() => void 0));
+  const installed = parseLockfilePackages(await readFile29(resolve37(treeRoot, "node_modules", ".package-lock.json")).catch(() => void 0));
   if (!wanted)
     return ["package-lock.json is unreadable"];
   if (!installed)
@@ -44295,14 +44567,14 @@ async function missingInstalledPackages(worktreePath, treeRoot = worktreePath) {
       required.push(path);
   }
   await mapWithLimit(required, INTEGRITY_READ_CONCURRENCY, async (path) => {
-    if (!(path in installed) || !await isInstalledPackage(resolve36(treeRoot, path))) {
+    if (!(path in installed) || !await isInstalledPackage(resolve37(treeRoot, path))) {
       missing.push(path);
     }
   });
   return missing.sort();
 }
 async function isInstalledPackage(path) {
-  return stat8(join19(path, "package.json")).then((info) => info.isFile(), () => false);
+  return stat9(join20(path, "package.json")).then((info) => info.isFile(), () => false);
 }
 var INTEGRITY_READ_CONCURRENCY = 64;
 async function mapWithLimit(values, limit, visit) {
@@ -44335,9 +44607,9 @@ function isContainedTreePath(value) {
 }
 async function cloneTree(source, target, file, topLevel = true) {
   await mkdir25(target, { recursive: true, mode: 493 });
-  for (const entry of await readdir8(source, { withFileTypes: true })) {
-    const from = join19(source, entry.name);
-    const to = join19(target, entry.name);
+  for (const entry of await readdir9(source, { withFileTypes: true })) {
+    const from = join20(source, entry.name);
+    const to = join20(target, entry.name);
     if (entry.isSymbolicLink()) {
       await symlink3(await readlink2(from), to);
       continue;
@@ -44352,7 +44624,7 @@ async function cloneTree(source, target, file, topLevel = true) {
 }
 var harvestFile = async (source, target) => {
   await copyFile2(source, target, fsConstants3.COPYFILE_FICLONE);
-  const info = await stat8(source);
+  const info = await stat9(source);
   await chmod10(target, info.mode & 4095 & ~146);
 };
 var seedFile = async (source, target, topLevel) => {
@@ -44364,46 +44636,46 @@ var seedFile = async (source, target, topLevel) => {
   await chmod10(target, 420);
 };
 async function pruneWarmStore(storeRoot, keep) {
-  const names = (await readdir8(storeRoot).catch(() => [])).filter((name) => !name.startsWith(STAGING_PREFIX));
+  const names = (await readdir9(storeRoot).catch(() => [])).filter((name) => !name.startsWith(STAGING_PREFIX));
   const entries = [];
   for (const name of names) {
-    const info = await lstat4(join19(storeRoot, name)).catch(() => void 0);
+    const info = await lstat5(join20(storeRoot, name)).catch(() => void 0);
     if (info?.isDirectory())
       entries.push({ name, usedAt: info.mtimeMs });
   }
   const dropped = entries.sort((a2, b) => b.usedAt - a2.usedAt || a2.name.localeCompare(b.name)).slice(keep);
   for (const entry of dropped) {
-    await rm14(join19(storeRoot, entry.name), { recursive: true, force: true }).catch(() => void 0);
+    await rm15(join20(storeRoot, entry.name), { recursive: true, force: true }).catch(() => void 0);
   }
   return dropped.map((entry) => entry.name);
 }
 async function sweepStaleStaging(storeRoot, now2) {
-  const entries = await readdir8(storeRoot).catch(() => []);
+  const entries = await readdir9(storeRoot).catch(() => []);
   for (const name of entries) {
     if (!name.startsWith(STAGING_PREFIX))
       continue;
-    const path = join19(storeRoot, name);
-    const info = await lstat4(path).catch(() => void 0);
+    const path = join20(storeRoot, name);
+    const info = await lstat5(path).catch(() => void 0);
     if (!info || now2 - info.mtimeMs < STAGING_SWEEP_MS)
       continue;
-    await rm14(path, { recursive: true, force: true }).catch(() => void 0);
+    await rm15(path, { recursive: true, force: true }).catch(() => void 0);
   }
 }
 async function pathExists(path) {
-  return lstat4(path).then(() => true, () => false);
+  return lstat5(path).then(() => true, () => false);
 }
 async function deviceOf(path) {
-  return stat8(path).then((info) => info.dev, () => void 0);
+  return stat9(path).then((info) => info.dev, () => void 0);
 }
 async function isDirectory(path) {
-  return stat8(path).then((info) => info.isDirectory(), () => false);
+  return stat9(path).then((info) => info.isDirectory(), () => false);
 }
 function describe3(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
 // apps/body/dist/monolith-corner-turn.js
-var execFileAsync7 = promisify7(execFile12);
+var execFileAsync9 = promisify9(execFile14);
 var TOOL_ARGUMENT_MAX_BYTES = 1200;
 var TOOL_OUTPUT_MAX_BYTES = 3200;
 var TOOL_PATH_LIMIT = 12;
@@ -44417,8 +44689,8 @@ function isCornerReviewTurn(reviewer, trigger) {
 async function cornerUndeliveredRepositoryState(worktreePath, featureBranch, targetBranch) {
   try {
     const [{ stdout: status }, ahead] = await Promise.all([
-      execFileAsync7("git", ["-C", worktreePath, "status", "--porcelain=v1"]),
-      featureBranch ? firstResolvedRemoteRef(worktreePath, [featureBranch, targetBranch]).then((remoteRef) => remoteRef ? execFileAsync7("git", [
+      execFileAsync9("git", ["-C", worktreePath, "status", "--porcelain=v1"]),
+      featureBranch ? firstResolvedRemoteRef(worktreePath, [featureBranch, targetBranch]).then((remoteRef) => remoteRef ? execFileAsync9("git", [
         "-C",
         worktreePath,
         "rev-list",
@@ -44438,7 +44710,7 @@ async function firstResolvedRemoteRef(worktreePath, branches) {
     if (!branch)
       continue;
     const ref = `refs/remotes/origin/${branch}`;
-    const resolved = await execFileAsync7("git", ["-C", worktreePath, "rev-parse", "--verify", ref]).then(() => true).catch(() => false);
+    const resolved = await execFileAsync9("git", ["-C", worktreePath, "rev-parse", "--verify", ref]).then(() => true).catch(() => false);
     if (resolved)
       return ref;
   }
@@ -44590,7 +44862,7 @@ async function cornerToolActivity(call, worktreePath, requestedBy) {
   let title = oneLine(redactToolDetail(call.title ?? "")) || `${operation} tool`;
   if (isSuccessfulCommit(call)) {
     try {
-      const shown = await execFileAsync7("git", ["-C", worktreePath, "show", "--format=%s", "--name-only", "--no-renames", "HEAD"], { maxBuffer: 1024 * 1024 });
+      const shown = await execFileAsync9("git", ["-C", worktreePath, "show", "--format=%s", "--name-only", "--no-renames", "HEAD"], { maxBuffer: 1024 * 1024 });
       const lines = shown.stdout.split(/\r?\n/);
       const subject = oneLine(lines.shift() ?? "commit");
       const files = new Set(lines.map(oneLine).filter(Boolean));
@@ -44851,7 +45123,7 @@ var MonolithCornerTurnLoop = class {
     this.sessionCodegraphReady = false;
     this.pinnedProviderOverride = void 0;
     this.sessionModel = null;
-    if (client?.isAlive)
+    if (client)
       await client.stop();
   }
   /** See `MonolithRoomTurnLoop.sessionIsCurrent`: retention never keeps a
@@ -45012,9 +45284,9 @@ var MonolithCornerTurnLoop = class {
     const repository = this.options.repository;
     let githubEnv = repository ? { GH_TOKEN: repository.githubToken, GITHUB_TOKEN: repository.githubToken } : {};
     if (repository && this.options.config.runtimeConfigPath && this.options.config.agentHomeRoot) {
-      const gitBinary = (await execFileAsync7("which", ["git"])).stdout.trim();
-      const ghBinary = await execFileAsync7("which", ["gh"]).then((result) => result.stdout.trim()).catch(() => void 0);
-      const originUrl = await execFileAsync7(gitBinary, [
+      const gitBinary = (await execFileAsync9("which", ["git"])).stdout.trim();
+      const ghBinary = await execFileAsync9("which", ["gh"]).then((result) => result.stdout.trim()).catch(() => void 0);
+      const originUrl = await execFileAsync9(gitBinary, [
         "-C",
         this.options.worktreePath,
         "remote",
@@ -45040,7 +45312,8 @@ var MonolithCornerTurnLoop = class {
     const pnpmStoreDir = sharedPnpmStoreDir(this.options.runtime.supervisorRoot);
     const cargoTargetDir = sharedCargoTargetDir(this.options.runtime.supervisorRoot);
     const turboCacheDir = sharedTurboCacheDir(this.options.runtime.supervisorRoot);
-    await Promise.all([npmCacheDir, pnpmStoreDir, cargoTargetDir, turboCacheDir].map((path) => mkdir26(path, { recursive: true, mode: 448 })));
+    const modelCacheDir = resolve38(this.options.runtime.supervisorRoot, "beeline", "model-cache");
+    await Promise.all([npmCacheDir, pnpmStoreDir, cargoTargetDir, turboCacheDir, modelCacheDir].map((path) => mkdir26(path, { recursive: true, mode: 448 })));
     const agentEnv = {
       ...this.options.config.agentEnv,
       ...homeOverlay,
@@ -45050,7 +45323,9 @@ var MonolithCornerTurnLoop = class {
       // hardlinks packages out of this content-addressable store.
       PNPM_CONFIG_STORE_DIR: pnpmStoreDir,
       CARGO_TARGET_DIR: cargoTargetDir,
-      TURBO_CACHE_DIR: turboCacheDir
+      TURBO_CACHE_DIR: turboCacheDir,
+      HF_HOME: modelCacheDir,
+      HUGGINGFACE_HUB_CACHE: join21(modelCacheDir, "hub")
     };
     this.agentEnv = agentEnv;
     this.modelContextTokens = await modelContextWindowTokens(selection.model, agentEnv.PI_CODING_AGENT_DIR);
@@ -45060,7 +45335,7 @@ var MonolithCornerTurnLoop = class {
       args: this.options.config.agentArgs ?? []
     }, selection);
     const { stateDirs, tmpDir } = harnessStateDirsFromEnv(agentEnv);
-    this.attachmentDir = tmpDir ? join20(tmpDir, "beeline-attachments") : void 0;
+    this.attachmentDir = tmpDir ? join21(tmpDir, "beeline-attachments") : void 0;
     this.sessionScratchDir = tmpDir;
     const homeStateDirs = harnessHomeStateDirs(harnessLabel, agentEnv.HOME ?? operatorHome);
     await Promise.all(homeStateDirs.map((dir) => mkdir26(dir, { recursive: true })));
@@ -45087,6 +45362,7 @@ var MonolithCornerTurnLoop = class {
           pnpmStoreDir,
           cargoTargetDir,
           turboCacheDir,
+          modelCacheDir,
           ...registryMcpHostBindPaths(configuration.registryMcpRoutes, this.options.config.registryMcpBrokerSocket),
           ...grantedSquireHostBindPaths({
             operatorHome,
@@ -45165,7 +45441,9 @@ var MonolithCornerTurnLoop = class {
             // per-corner cache.
             { name: "npm_config_cache", value: npmCacheDir },
             { name: "PNPM_CONFIG_STORE_DIR", value: pnpmStoreDir },
-            { name: "CARGO_TARGET_DIR", value: cargoTargetDir }
+            { name: "CARGO_TARGET_DIR", value: cargoTargetDir },
+            { name: "HF_HOME", value: modelCacheDir },
+            { name: "HUGGINGFACE_HUB_CACHE", value: join21(modelCacheDir, "hub") }
           ]
         }
       ] : [],
@@ -45173,13 +45451,13 @@ var MonolithCornerTurnLoop = class {
         roomId: this.options.parentRoomId,
         workspaceId: this.options.workspaceId,
         cornerId: this.options.cornerId,
-        agentMayCloseCorner: Boolean(repository),
         reviewer,
         repositoryBacked: Boolean(repository),
         attachRoot: this.options.worktreePath,
         // The whole per-session overlay, not an enumerated subset: see
         // `monolith-room-turn.ts`'s matching comment.
         attachScratchRoot,
+        ...!repository ? { cornerScratchRoot: this.options.worktreePath } : {},
         turnContextPath: this.commandContext.path,
         squireRelay: squireScope.relay,
         ...this.options.grantRunnerEndpoint ? { grantRunner: this.options.grantRunnerEndpoint } : {}
@@ -45273,7 +45551,7 @@ var MonolithCornerTurnLoop = class {
         this.options.api.execute("getCornerRestoreState", {
           cornerId: this.options.cornerId
         }),
-        execFileAsync7("git", ["-C", this.options.worktreePath, "rev-parse", "HEAD"]).then(({ stdout: stdout6 }) => stdout6.trim())
+        execFileAsync9("git", ["-C", this.options.worktreePath, "rev-parse", "HEAD"]).then(({ stdout: stdout6 }) => stdout6.trim())
       ]);
       const pr = restore.lifecycle?.pr;
       if (restore.lifecycle?.checks !== "passing" || !pr?.number || !pr.headSha || pr.headSha !== localHead)
@@ -45287,7 +45565,7 @@ var MonolithCornerTurnLoop = class {
           briefRevision: restore.brief?.revision
         }),
         ...this.options.config.agentHomeRoot && this.options.config.agentKind && !AGENT_SKILL_DIRS.includes(this.options.config.agentKind) ? [
-          `This harness has no verified native skill discovery. Read the release-managed review procedure at ${resolve37(this.options.config.agentHomeRoot, "codex", "skills", "beeline-review", "SKILL.md")} before the verdict.`
+          `This harness has no verified native skill discovery. Read the release-managed review procedure at ${resolve38(this.options.config.agentHomeRoot, "codex", "skills", "beeline-review", "SKILL.md")} before the verdict.`
         ] : []
       ].join("\n");
     } catch {
@@ -45353,7 +45631,7 @@ var MonolithCornerTurnLoop = class {
     this.sessionId = void 0;
     this.sessionFingerprint = void 0;
     this.sessionCodegraphReady = false;
-    if (client?.isAlive)
+    if (client)
       await client.stop();
     this.pinnedProviderOverride = next;
     await (trace ? trace.measure("activation", () => this.activate(trace)) : this.activate());
@@ -45402,8 +45680,8 @@ var MonolithCornerTurnLoop = class {
         let timer;
         const stats = statsPromise && remaining > 0 ? await Promise.race([
           statsPromise,
-          new Promise((resolve45) => {
-            timer = setTimeout(() => resolve45(void 0), remaining);
+          new Promise((resolve49) => {
+            timer = setTimeout(() => resolve49(void 0), remaining);
           })
         ]).finally(() => {
           if (timer)
@@ -45454,7 +45732,7 @@ var MonolithCornerTurnLoop = class {
           let repositoryWork = cornerHasRepositoryWork(restored.brief);
           let repositoryHeld = restored.held === true;
           let assignedBrief = restored.brief;
-          const taskDelivered = this.attachmentDir && attachments.length ? await deliverAttachments(attachments, join20(this.attachmentDir, requestId.replace(/[^\w-]/g, "_")), this.options.fetchImpl) : [];
+          const taskDelivered = this.attachmentDir && attachments.length ? await deliverAttachments(attachments, join21(this.attachmentDir, requestId.replace(/[^\w-]/g, "_")), this.options.fetchImpl) : [];
           let delivered = taskDelivered;
           let briefFileLines = [];
           let missingRequiredBriefFile = false;
@@ -45465,7 +45743,7 @@ var MonolithCornerTurnLoop = class {
               mimeType: file.mime,
               size: file.size
             }));
-            const briefDelivered = this.attachmentDir && briefAttachments.length ? await deliverAttachments(briefAttachments, join20(this.attachmentDir, requestId.replace(/[^\w-]/g, "_"), "brief", String(assignedBrief.revision)), this.options.fetchImpl) : [];
+            const briefDelivered = this.attachmentDir && briefAttachments.length ? await deliverAttachments(briefAttachments, join21(this.attachmentDir, requestId.replace(/[^\w-]/g, "_"), "brief", String(assignedBrief.revision)), this.options.fetchImpl) : [];
             briefFileLines = await Promise.all((assignedBrief?.attachments ?? []).map(async (file, index) => {
               const entry = briefDelivered.find((item) => item.attachment === briefAttachments[index]);
               const verified = entry?.path && createHash13("sha256").update(await readFile30(entry.path)).digest("hex") === file.sha256;
@@ -45551,11 +45829,19 @@ var MonolithCornerTurnLoop = class {
               }
             });
             trace.notePromptSections(assembled.report);
-            trace.notePromptWindow(assembled.text, this.modelContextTokens);
             this.commandContext.notePromptSections([
               ...this.sessionPromptSectionIds,
               ...assembled.report.map((section) => section.id)
             ]);
+            if (!repositoryWork) {
+              const usage2 = await allocatedDirectoryBytes(this.options.worktreePath);
+              const text2 = `${assembled.text}
+
+${scratchBudgetMessage(usage2)}`;
+              trace.notePromptWindow(text2, this.modelContextTokens);
+              return text2;
+            }
+            trace.notePromptWindow(assembled.text, this.modelContextTokens);
             return assembled.text;
           };
           const stream = new AgentTurnStream({
@@ -45664,24 +45950,34 @@ var MonolithCornerTurnLoop = class {
             narrationRunBoundary = 0;
             currentNarrationRun = "";
             trace.promptSent();
-            return this.turnUsage.measure({ agentEnv: this.agentEnv, sessionId: this.sessionId }, () => this.client.sessionPrompt(this.sessionId, promptWithImages(prompt, attachmentImageBlocks(delivered, this.acceptsImages())), ROOM_PROMPT_BACKSTOP_MS, (delta, full, currentRun, runs) => {
-              trace.firstModelOutput();
-              if (runs) {
-                completedNarrationRuns = runs.slice(narrationRunBoundary);
-                currentNarrationRun = "";
-              } else if (currentRun === void 0)
-                currentNarrationRun += delta;
-              else {
-                if (currentNarrationRun && currentNarrationRun !== currentRun && !currentRun.startsWith(currentNarrationRun))
-                  completedNarrationRuns.push(currentNarrationRun);
-                currentNarrationRun = currentRun;
+            const scratchRoot = this.repositoryWork ? void 0 : this.options.worktreePath;
+            const scratchAtStart = scratchRoot ? await allocatedDirectoryBytes(scratchRoot) : 0;
+            try {
+              return await this.turnUsage.measure({ agentEnv: this.agentEnv, sessionId: this.sessionId }, () => this.client.sessionPrompt(this.sessionId, promptWithImages(prompt, attachmentImageBlocks(delivered, this.acceptsImages())), ROOM_PROMPT_BACKSTOP_MS, (delta, full, currentRun, runs) => {
+                trace.firstModelOutput();
+                if (runs) {
+                  completedNarrationRuns = runs.slice(narrationRunBoundary);
+                  currentNarrationRun = "";
+                } else if (currentRun === void 0)
+                  currentNarrationRun += delta;
+                else {
+                  if (currentNarrationRun && currentNarrationRun !== currentRun && !currentRun.startsWith(currentNarrationRun))
+                    completedNarrationRuns.push(currentNarrationRun);
+                  currentNarrationRun = currentRun;
+                }
+                stream.onChunk(delta, full, currentRun);
+              }, void 0, (calls) => {
+                trace.toolCalls(calls);
+                publishToolCalls(calls, true);
+                publishToolCalls(calls, false, lastNarratedToolCall);
+              }));
+            } finally {
+              if (scratchRoot) {
+                const usage2 = await allocatedDirectoryBytes(scratchRoot);
+                if (scratchGrowthExceedsBudget(usage2, scratchAtStart))
+                  throw new Error(`Scratch budget exceeded. ${scratchBudgetMessage(usage2)}`);
               }
-              stream.onChunk(delta, full, currentRun);
-            }, void 0, (calls) => {
-              trace.toolCalls(calls);
-              publishToolCalls(calls, true);
-              publishToolCalls(calls, false, lastNarratedToolCall);
-            }));
+            }
           };
           let loginRetryUsed = false;
           const runPrompt = async (prompt, continuation) => {
@@ -45886,13 +46182,13 @@ ${continuation}` : assembled;
     if (this.harvest || !this.options.repository)
       return;
     const { cornerId, worktreePath, runtime } = this.options;
-    const mobilePath = resolve37(worktreePath, "apps/mobile");
+    const mobilePath = resolve38(worktreePath, "apps/mobile");
     const jobs = [
       harvestWarmNodeModules({
         worktreePath,
         storeRoot: warmNodeModulesStoreDir(runtime.supervisorRoot)
       }),
-      ...existsSync9(resolve37(mobilePath, "package-lock.json")) ? [
+      ...existsSync9(resolve38(mobilePath, "package-lock.json")) ? [
         harvestWarmNodeModules({
           worktreePath: mobilePath,
           storeRoot: mobileNodeModulesStoreDir(runtime.supervisorRoot)
@@ -45940,7 +46236,7 @@ ${continuation}` : assembled;
         const delay = outage ? Math.min(2e3 * 2 ** attempt, 3e4) : 250 * (attempt + 1);
         if ((outage ? Date.now() + delay > outageDeadline : attempt === 2) || this.forcedStop || this.currentTurn && this.stoppedTurns.has(this.currentTurn.requestId))
           throw error;
-        await new Promise((resolve45) => setTimeout(resolve45, delay));
+        await new Promise((resolve49) => setTimeout(resolve49, delay));
       }
     }
     if (!token)
@@ -46032,11 +46328,95 @@ ${continuation}` : assembled;
       this.squireRelay.close();
       this.options.grantRunner?.unregister(cornerId);
       await this.options.scheduler.suspend(cornerId);
+      this.options.scheduler.forget(cornerId);
       await this.harvest;
     }
   }
 };
 
+// apps/body/dist/corner-disk-recovery.js
+import { execFile as execFile15 } from "node:child_process";
+import { lstat as lstat6, readdir as readdir10, realpath as realpath2, rm as rm16 } from "node:fs/promises";
+import { basename as basename9, dirname as dirname27, join as join22, relative as relative3, resolve as resolve39, sep as sep2 } from "node:path";
+import { promisify as promisify10 } from "node:util";
+var execFileAsync10 = promisify10(execFile15);
+var GENERATED_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  "target",
+  "build",
+  "dist",
+  ".next",
+  ".turbo",
+  ".expo"
+]);
+var MAX_DIRECTORY_DEPTH = 4;
+var MAX_VISITED_DIRECTORIES = 5e3;
+function cornerRecoveryPointerPath(worktree) {
+  const checkout = resolve39(worktree.path);
+  if (basename9(checkout) !== worktree.cornerId || basename9(dirname27(checkout)) !== "corners" || basename9(dirname27(dirname27(checkout))) !== "beeline" || !/^[a-zA-Z0-9-]{1,80}$/.test(worktree.cornerId)) {
+    throw new Error("refusing recovery pointer outside a Beeline corner checkout");
+  }
+  return resolve39(dirname27(dirname27(checkout)), "recovery", "corners", `${worktree.cornerId}.json`);
+}
+async function git(checkout, args) {
+  const result = await execFileAsync10("git", ["-C", checkout, ...args], {
+    maxBuffer: 4 * 1024 * 1024
+  });
+  return result.stdout;
+}
+async function ignoredAndUntracked(checkout, path) {
+  const rel = relative3(checkout, path);
+  if (!rel || rel === ".." || rel.startsWith(`..${sep2}`))
+    return false;
+  const ignored = await git(checkout, ["check-ignore", "-q", "--", `${rel}/`]).then(() => true, () => false);
+  if (!ignored)
+    return false;
+  return !(await git(checkout, ["ls-files", "--", rel])).trim();
+}
+async function preserveUnpublishedCornerWorktree(worktree, reason) {
+  const checkout = resolve39(worktree.path);
+  const pointer = cornerRecoveryPointerPath(worktree);
+  const info = await lstat6(checkout);
+  if (!info.isDirectory() || await realpath2(checkout) !== checkout) {
+    throw new Error("refusing to prune a non-canonical corner checkout");
+  }
+  const head = (await git(checkout, ["rev-parse", "--verify", "HEAD"])).trim();
+  const record5 = {
+    cornerId: worktree.cornerId,
+    checkout,
+    branch: worktree.branch,
+    head,
+    reason,
+    recordedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await writePrivateFileAtomically(pointer, `${JSON.stringify(record5, null, 2)}
+`);
+  const pruned = [];
+  const pending = [{ path: checkout, depth: 0 }];
+  let visited = 0;
+  while (pending.length) {
+    const current = pending.shift();
+    if (++visited > MAX_VISITED_DIRECTORIES)
+      break;
+    if (current.depth >= MAX_DIRECTORY_DEPTH)
+      continue;
+    for (const entry of await readdir10(current.path, { withFileTypes: true })) {
+      if (!entry.isDirectory() || entry.name === ".git")
+        continue;
+      const path = join22(current.path, entry.name);
+      if (GENERATED_DIRS.has(entry.name)) {
+        if (await ignoredAndUntracked(checkout, path)) {
+          await rm16(path, { recursive: true, force: true });
+          pruned.push(relative3(checkout, path));
+        }
+        continue;
+      }
+      pending.push({ path, depth: current.depth + 1 });
+    }
+  }
+  return { pointer, pruned };
+}
+
 // apps/body/dist/surface-health.js
 var SurfaceHealth = class {
   surfaces = /* @__PURE__ */ new Map();
@@ -46125,7 +46505,7 @@ function resolveSessionIdleMs(env = process.env) {
   return Number.isSafeInteger(value) && value > 0 ? value : DEFAULT_SESSION_IDLE_MS;
 }
 var DEFAULT_WORKSPACE_LIVE_SESSIONS_FLOOR = 4;
-var SessionScheduler = class {
+var SessionScheduler = class _SessionScheduler {
   /** Fixed ceiling when explicitly configured; undefined selects the dynamic one. */
   fixedMaxLiveSessions;
   perRoomLiveSessions;
@@ -46140,6 +46520,7 @@ var SessionScheduler = class {
   queues = /* @__PURE__ */ new Map();
   drainingKeys = /* @__PURE__ */ new Set();
   physicalHistory = /* @__PURE__ */ new Map();
+  static MAX_GENERATIONS_PER_KEY = 4;
   /**
    * Sessions already removed from `live` whose process is still being torn
    * down. They keep occupying capacity until `suspend()` resolves, so an
@@ -46263,6 +46644,10 @@ var SessionScheduler = class {
   generations(key) {
     return this.physicalHistory.get(key) ?? [];
   }
+  /** A Room/corner loop ended; its diagnostic IDs no longer have a reader. */
+  forget(key) {
+    this.physicalHistory.delete(key);
+  }
   /**
    * Read-only capacity diagnostic, exported beside the turn trace
    * (`turn-trace.ts`) so a stalled turn can be attributed to a capacity wait
@@ -46336,6 +46721,7 @@ var SessionScheduler = class {
     this.sweepTimer = void 0;
     const sessions = [...this.live.values()];
     this.live.clear();
+    this.physicalHistory.clear();
     await Promise.all(sessions.map((session) => this.retire(session)));
     this.wakeCapacityWaiters();
   }
@@ -46449,6 +46835,8 @@ var SessionScheduler = class {
         await this.notifyState(lifecycle, "live");
         const generations = this.physicalHistory.get(key) ?? [];
         generations.push(physicalSessionId);
+        if (generations.length > _SessionScheduler.MAX_GENERATIONS_PER_KEY)
+          generations.shift();
         this.physicalHistory.set(key, generations);
         return true;
       } catch (error) {
@@ -46548,7 +46936,7 @@ function cornerStartConfigKey(repository, objective) {
 function cornerRepositoryCacheDir(supervisorRoot, remote) {
   const normalizedRemote = roomCheckoutRemote(remote);
   const repositoryHash = createHash14("sha256").update(normalizedRemote).digest("hex").slice(0, 24);
-  return resolve38(supervisorRoot, "beeline", "repositories", `${repositoryHash}.git`);
+  return resolve40(supervisorRoot, "beeline", "repositories", `${repositoryHash}.git`);
 }
 function isStandingCornerStartFault(error) {
   const text2 = error instanceof Error ? error.message : String(error);
@@ -46557,24 +46945,24 @@ function isStandingCornerStartFault(error) {
 async function materializeCornerWorktree(input) {
   const remote = roomCheckoutRemote(input.remote);
   const gitCommonDir = cornerRepositoryCacheDir(input.supervisorRoot, remote);
-  const path = resolve38(input.supervisorRoot, "beeline", "corners", input.cornerId);
-  await mkdir27(dirname27(gitCommonDir), { recursive: true, mode: 448 });
-  await mkdir27(dirname27(path), { recursive: true, mode: 448 });
+  const path = resolve40(input.supervisorRoot, "beeline", "corners", input.cornerId);
+  await mkdir27(dirname28(gitCommonDir), { recursive: true, mode: 448 });
+  await mkdir27(dirname28(path), { recursive: true, mode: 448 });
   const authEnv = githubGitEnv(input.token);
-  if (!existsSync10(resolve38(gitCommonDir, "HEAD"))) {
-    await execFileAsync8("git", ["clone", "--bare", remote, gitCommonDir], {
+  if (!existsSync10(resolve40(gitCommonDir, "HEAD"))) {
+    await execFileAsync11("git", ["clone", "--bare", remote, gitCommonDir], {
       env: authEnv,
       maxBuffer: 4 * 1024 * 1024
     });
   }
-  await execFileAsync8("git", [
+  await execFileAsync11("git", [
     `--git-dir=${gitCommonDir}`,
     "fetch",
     "--prune",
     "origin",
     `+refs/heads/${input.targetBranch}:refs/remotes/origin/${input.targetBranch}`
   ], { env: authEnv, maxBuffer: 4 * 1024 * 1024 });
-  const restored = await execFileAsync8("git", [
+  const restored = await execFileAsync11("git", [
     `--git-dir=${gitCommonDir}`,
     "fetch",
     "origin",
@@ -46584,9 +46972,9 @@ async function materializeCornerWorktree(input) {
       return false;
     throw error;
   });
-  if (!existsSync10(resolve38(path, ".git"))) {
-    await rm15(path, { recursive: true, force: true });
-    await execFileAsync8("git", [
+  if (!existsSync10(resolve40(path, ".git"))) {
+    await rm17(path, { recursive: true, force: true });
+    await execFileAsync11("git", [
       `--git-dir=${gitCommonDir}`,
       "worktree",
       "add",
@@ -46602,8 +46990,8 @@ async function materializeCornerWorktree(input) {
     if (seed.reason !== "no-lockfile") {
       console.log(`[thin-core] corner ${input.cornerId} warm node_modules: ${seed.reason}${seed.detail ? ` (${seed.detail})` : ""}`);
     }
-    const mobilePath = resolve38(path, "apps/mobile");
-    if (existsSync10(resolve38(mobilePath, "package-lock.json"))) {
+    const mobilePath = resolve40(path, "apps/mobile");
+    if (existsSync10(resolve40(mobilePath, "package-lock.json"))) {
       const mobileSeed = await seedWarmNodeModules({
         worktreePath: mobilePath,
         storeRoot: mobileNodeModulesStoreDir(input.supervisorRoot)
@@ -46613,14 +47001,14 @@ async function materializeCornerWorktree(input) {
       }
     }
   }
-  await execFileAsync8("git", [
+  await execFileAsync11("git", [
     `--git-dir=${gitCommonDir}`,
     "config",
     "extensions.worktreeConfig",
     "true"
   ]);
-  await execFileAsync8("git", ["-C", path, "config", "--worktree", "core.bare", "false"]);
-  await execFileAsync8("git", [
+  await execFileAsync11("git", ["-C", path, "config", "--worktree", "core.bare", "false"]);
+  await execFileAsync11("git", [
     "-C",
     path,
     "config",
@@ -46628,7 +47016,7 @@ async function materializeCornerWorktree(input) {
     "credential.https://github.com.helper",
     "!f() { echo username=x-access-token; echo password=$GH_TOKEN; }; f"
   ]);
-  await execFileAsync8("git", [
+  await execFileAsync11("git", [
     "-C",
     path,
     "config",
@@ -46636,7 +47024,7 @@ async function materializeCornerWorktree(input) {
     "user.name",
     input.committer.name
   ]);
-  await execFileAsync8("git", [
+  await execFileAsync11("git", [
     "-C",
     path,
     "config",
@@ -46644,8 +47032,8 @@ async function materializeCornerWorktree(input) {
     "user.email",
     `${input.committer.publicKey.slice(0, 16)}@users.noreply.github.com`
   ]);
-  const top = (await execFileAsync8("git", ["-C", path, "rev-parse", "--show-toplevel"])).stdout.trim();
-  if (await realpath2(top) !== await realpath2(path)) {
+  const top = (await execFileAsync11("git", ["-C", path, "rev-parse", "--show-toplevel"])).stdout.trim();
+  if (await realpath3(top) !== await realpath3(path)) {
     throw new Error(`corner worktree escaped its isolated root: ${top}`);
   }
   return { path, gitCommonDir };
@@ -46660,31 +47048,31 @@ async function mapWithConcurrency(values, limit, visit) {
   }));
 }
 async function discoverCornerWorktree(supervisorRoot, cornerId) {
-  const cornersRoot = resolve38(supervisorRoot, "beeline", "corners");
-  const path = resolve38(cornersRoot, cornerId);
-  if (dirname27(path) !== cornersRoot || !existsSync10(resolve38(path, ".git")))
+  const cornersRoot = resolve40(supervisorRoot, "beeline", "corners");
+  const path = resolve40(cornersRoot, cornerId);
+  if (dirname28(path) !== cornersRoot || !existsSync10(resolve40(path, ".git")))
     return void 0;
   const [canonicalRoot, canonicalPath] = await Promise.all([
-    realpath2(cornersRoot),
-    realpath2(path).catch(() => void 0)
+    realpath3(cornersRoot),
+    realpath3(path).catch(() => void 0)
   ]);
-  if (!canonicalPath || relative3(canonicalRoot, canonicalPath) !== cornerId) {
+  if (!canonicalPath || relative4(canonicalRoot, canonicalPath) !== cornerId) {
     throw new Error(`refusing corner ${cornerId} whose checkout path is not canonical`);
   }
-  const common = await execFileAsync8("git", ["-C", path, "rev-parse", "--git-common-dir"]).catch(() => void 0);
+  const common = await execFileAsync11("git", ["-C", path, "rev-parse", "--git-common-dir"]).catch(() => void 0);
   if (!common)
     return void 0;
-  const gitCommonDir = resolve38(path, common.stdout.trim());
-  const repositoriesRoot = resolve38(supervisorRoot, "beeline", "repositories");
-  const commonRelative = relative3(repositoriesRoot, gitCommonDir);
-  if (!commonRelative || commonRelative === ".." || commonRelative.startsWith(`..${sep2}`) || commonRelative.startsWith(sep2)) {
+  const gitCommonDir = resolve40(path, common.stdout.trim());
+  const repositoriesRoot = resolve40(supervisorRoot, "beeline", "repositories");
+  const commonRelative = relative4(repositoriesRoot, gitCommonDir);
+  if (!commonRelative || commonRelative === ".." || commonRelative.startsWith(`..${sep3}`) || commonRelative.startsWith(sep3)) {
     throw new Error(`refusing corner ${cornerId} with git directory outside repository cache`);
   }
   return { path, gitCommonDir };
 }
 async function localCornerWorktreeIds(supervisorRoot) {
-  const root = resolve38(supervisorRoot, "beeline", "corners");
-  const entries = await readdir9(root, { withFileTypes: true }).catch((error) => {
+  const root = resolve40(supervisorRoot, "beeline", "corners");
+  const entries = await readdir11(root, { withFileTypes: true }).catch((error) => {
     if (error.code === "ENOENT")
       return [];
     throw error;
@@ -46698,12 +47086,12 @@ async function removeCornerWorktreeAndBranches(worktree, options = {}) {
   const worktreeExists = existsSync10(worktree.path);
   const localExists = await gitRefExists(worktree.gitCommonDir, localRef);
   if (worktreeExists) {
-    const checkedOut = await execFileAsync8("git", ["-C", worktree.path, "symbolic-ref", "--quiet", "HEAD"], { maxBuffer: 4 * 1024 * 1024 }).then((result) => result.stdout.trim(), () => void 0);
+    const checkedOut = await execFileAsync11("git", ["-C", worktree.path, "symbolic-ref", "--quiet", "HEAD"], { maxBuffer: 4 * 1024 * 1024 }).then((result) => result.stdout.trim(), () => void 0);
     if (!worktree.recovered && checkedOut !== localRef) {
       throw new Error(`corner worktree branch mismatch: expected ${localRef}`);
     }
     await assertCornerWorktreePublished(worktree);
-    await execFileAsync8("git", [
+    await execFileAsync11("git", [
       `--git-dir=${worktree.gitCommonDir}`,
       "worktree",
       "remove",
@@ -46728,7 +47116,7 @@ async function removeCornerWorktreeAndBranches(worktree, options = {}) {
     await deleteExactRemoteBranch(worktree.gitCommonDir, remoteRef, worktree.token);
   }
   if (await gitRefExists(worktree.gitCommonDir, localRef)) {
-    await execFileAsync8("git", [
+    await execFileAsync11("git", [
       `--git-dir=${worktree.gitCommonDir}`,
       "branch",
       "--delete",
@@ -46739,18 +47127,18 @@ async function removeCornerWorktreeAndBranches(worktree, options = {}) {
   }
 }
 async function assertCornerWorktreePublished(worktree) {
-  const status = async () => (await execFileAsync8("git", ["-C", worktree.path, "status", "--porcelain=v1", "--untracked-files=all"], { maxBuffer: 4 * 1024 * 1024 })).stdout.trim();
-  const originalHead = (await execFileAsync8("git", ["-C", worktree.path, "rev-parse", "--verify", "HEAD"])).stdout.trim();
+  const status = async () => (await execFileAsync11("git", ["-C", worktree.path, "status", "--porcelain=v1", "--untracked-files=all"], { maxBuffer: 4 * 1024 * 1024 })).stdout.trim();
+  const originalHead = (await execFileAsync11("git", ["-C", worktree.path, "rev-parse", "--verify", "HEAD"])).stdout.trim();
   if (await status())
     throw new Error(`corner ${worktree.cornerId} has unpushed working-tree work`);
   await assertPublishedOnOrigin(worktree.gitCommonDir, originalHead, worktree.cornerId, worktree.token);
-  const settledHead = (await execFileAsync8("git", ["-C", worktree.path, "rev-parse", "--verify", "HEAD"])).stdout.trim();
+  const settledHead = (await execFileAsync11("git", ["-C", worktree.path, "rev-parse", "--verify", "HEAD"])).stdout.trim();
   if (settledHead !== originalHead || await status()) {
     throw new Error(`corner ${worktree.cornerId} changed during cleanup`);
   }
 }
 async function assertLocalBranchPublished(worktree) {
-  const head = (await execFileAsync8("git", [
+  const head = (await execFileAsync11("git", [
     `--git-dir=${worktree.gitCommonDir}`,
     "rev-parse",
     "--verify",
@@ -46761,7 +47149,7 @@ async function assertLocalBranchPublished(worktree) {
 async function assertPublishedOnOrigin(gitCommonDir, head, cornerId, token) {
   let published = await originContains(gitCommonDir, head);
   if (!published) {
-    await execFileAsync8("git", [
+    await execFileAsync11("git", [
       `--git-dir=${gitCommonDir}`,
       "fetch",
       "--prune",
@@ -46777,7 +47165,7 @@ function hasUnpublishedWork(error) {
   return error instanceof Error && / has unpushed (?:commits|working-tree work)$/.test(error.message);
 }
 async function originContains(gitCommonDir, head) {
-  const result = await execFileAsync8("git", [
+  const result = await execFileAsync11("git", [
     `--git-dir=${gitCommonDir}`,
     "for-each-ref",
     "--format=%(refname)",
@@ -46787,13 +47175,13 @@ async function originContains(gitCommonDir, head) {
   ]);
   return Boolean(result.stdout.trim());
 }
-var execFileAsync8 = promisify8(execFile13);
+var execFileAsync11 = promisify11(execFile16);
 async function removeCornerScratchWorkspace(input) {
-  const expected = resolve38(input.roomRoot, "scratch");
-  if (resolve38(input.scratchPath) !== expected) {
+  const expected = resolve40(input.roomRoot, "scratch");
+  if (resolve40(input.scratchPath) !== expected) {
     throw new Error(`refusing to remove scratch outside corner ${input.cornerId}`);
   }
-  await rm15(expected, { recursive: true, force: true });
+  await rm17(expected, { recursive: true, force: true });
 }
 var RoomRuntimeCoordinator = class {
   configPath;
@@ -46820,6 +47208,7 @@ var RoomRuntimeCoordinator = class {
    * then left alone; the checkout and its commits are kept, never deleted.
    */
   archiveCleanupAbandoned = /* @__PURE__ */ new Set();
+  lastCornerScratchSweepAt = 0;
   startingCorners = /* @__PURE__ */ new Set();
   /**
    * Rooms whose start is in flight. `running` is not set until the checkout
@@ -47060,7 +47449,8 @@ var RoomRuntimeCoordinator = class {
         return;
       try {
         const result = await this.options.daemonApi.execute("listRoomCorners", {
-          roomId: room.roomId
+          roomId: room.roomId,
+          activeOnly: true
         });
         for (const corner of result.corners) {
           this.monolithCornerParents.set(corner.cornerId, room.roomId);
@@ -47100,6 +47490,9 @@ var RoomRuntimeCoordinator = class {
     if (this.stopped)
       return "member";
     await this.sweepArchivedCornerWorktrees(archivedCorners, desired);
+    if (this.stopped)
+      return "member";
+    await this.sweepCornerLocalState(archivedCorners, desired);
     if (this.stopped)
       return "member";
     for (const cornerId of this.idleCornerSubscriptions.keys()) {
@@ -47117,6 +47510,10 @@ var RoomRuntimeCoordinator = class {
       await this.stopRunning(channelId, running);
       this.roomRemovalConfirmations.delete(channelId);
     }
+    for (const cornerId of this.monolithCornerParents.keys()) {
+      if (!desired.has(cornerId) && !this.running.has(cornerId) && !this.startingCorners.has(cornerId))
+        this.monolithCornerParents.delete(cornerId);
+    }
     this.surfaceHealth.retain(/* @__PURE__ */ new Set([...desired, ...this.running.keys()]));
     await mapWithConcurrency(desiredTopRooms, ROOM_JOIN_CONCURRENCY, async (roomId) => {
       if (this.stopped)
@@ -47191,6 +47588,8 @@ var RoomRuntimeCoordinator = class {
     if (event.archived === true) {
       this.unwatchCorner(roomId);
       this.surfaceHealth.remove(roomId);
+      if (!this.running.has(roomId))
+        this.monolithCornerParents.delete(roomId);
       return;
     }
     this.roomRemovalConfirmations.delete(roomId);
@@ -47228,18 +47627,20 @@ var RoomRuntimeCoordinator = class {
     } catch (error) {
       console.error(`[thin-core] corner ${channelId} cleanup failed; will retry:`, error);
     }
+    if (running.worktree || running.scratch)
+      await this.cleanupArchivedCornerLocalState(channelId);
   }
   roomRecord(roomId) {
     return this.runtime.rooms.find((room) => room.channelId === roomId);
   }
   roomRoot(roomId) {
-    return this.roomRecord(roomId)?.root ?? resolve38(dirname27(this.configPath), "rooms", roomId);
+    return this.roomRecord(roomId)?.root ?? resolve40(dirname28(this.configPath), "rooms", roomId);
   }
   roomAgentHomeRoot(workspaceRoot, required = false) {
     const flag = process.env.BUZZY_BODY_ROOM_HOME;
     if (!required && flag === "0")
       return void 0;
-    const home = resolve38(workspaceRoot, "agent-home");
+    const home = resolve40(workspaceRoot, "agent-home");
     if (!required && flag !== "1" && !existsSync10(home) && existsSync10(workspaceRoot))
       return void 0;
     try {
@@ -47255,10 +47656,10 @@ var RoomRuntimeCoordinator = class {
     return {
       ...this.baseConfig,
       workspaceRoot,
-      agentPrivateRoot: resolve38(workspaceRoot, "agent-private"),
-      agentMemoryRoot: resolve38(dirname27(this.configPath), "memory"),
-      openRouterRoutingCacheDir: openRouterRoutingCacheDir(dirname27(this.configPath)),
-      turnTraceDir: turnTraceDirectory(dirname27(this.configPath)),
+      agentPrivateRoot: resolve40(workspaceRoot, "agent-private"),
+      agentMemoryRoot: resolve40(dirname28(this.configPath), "memory"),
+      openRouterRoutingCacheDir: openRouterRoutingCacheDir(dirname28(this.configPath)),
+      turnTraceDir: turnTraceDirectory(dirname28(this.configPath)),
       ...agentHomeRoot ? { agentHomeRoot } : {}
     };
   }
@@ -47339,17 +47740,17 @@ var RoomRuntimeCoordinator = class {
     const remote = roomCheckoutRemote(repository.remote);
     const targetBranch = repository.targetBranch || "main";
     const checkoutId = createHash14("sha256").update(`${roomId}\0${remote}\0${targetBranch}`).digest("hex").slice(0, 24);
-    const path = resolve38(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
-    await mkdir27(dirname27(path), { recursive: true, mode: 448 });
+    const path = resolve40(this.runtime.supervisorRoot, "beeline", "room-checkouts", checkoutId);
+    await mkdir27(dirname28(path), { recursive: true, mode: 448 });
     const token = remote.startsWith("https://github.com/") ? await this.parentRepositoryToken(roomId) : void 0;
     const env = token ? githubGitEnv(token.token) : process.env;
-    if (!existsSync10(resolve38(path, ".git"))) {
-      await execFileAsync8("git", ["clone", "--no-checkout", remote, path], {
+    if (!existsSync10(resolve40(path, ".git"))) {
+      await execFileAsync11("git", ["clone", "--no-checkout", remote, path], {
         env,
         maxBuffer: 4 * 1024 * 1024
       });
     }
-    const fetched = await execFileAsync8("git", [
+    const fetched = await execFileAsync11("git", [
       "-C",
       path,
       "fetch",
@@ -47365,7 +47766,7 @@ var RoomRuntimeCoordinator = class {
       void this.options.daemonApi.execute("noteEmptyRoomRepository", { roomId }).catch((error) => console.warn(`[thin-core] Room ${roomId} empty-repository notice failed:`, error));
       return this.roomRoot(roomId);
     }
-    await execFileAsync8("git", ["-C", path, "checkout", "--detach", "--force", `origin/${targetBranch}`], {
+    await execFileAsync11("git", ["-C", path, "checkout", "--detach", "--force", `origin/${targetBranch}`], {
       env,
       maxBuffer: 4 * 1024 * 1024
     });
@@ -47380,7 +47781,7 @@ var RoomRuntimeCoordinator = class {
       const cwd = await this.materializeRoomCheckout(roomId, repository);
       if (cwd === this.roomRoot(roomId))
         return { cwd };
-      const { stdout: stdout6 } = await execFileAsync8("git", ["-C", cwd, "rev-parse", "--verify", "HEAD"]);
+      const { stdout: stdout6 } = await execFileAsync11("git", ["-C", cwd, "rev-parse", "--verify", "HEAD"]);
       return { cwd, branch, commit: stdout6.trim() };
     } catch (error) {
       console.warn(`[thin-core] Room ${roomId} checkout refresh unavailable:`, error);
@@ -47430,9 +47831,11 @@ var RoomRuntimeCoordinator = class {
         featureBranch,
         token: granted.token
       }) : void 0;
-      const workspacePath = worktree?.path ?? resolve38(this.roomRoot(corner.cornerId), "scratch");
+      const workspacePath = worktree?.path ?? resolve40(this.roomRoot(corner.cornerId), "scratch");
       if (!worktree)
         await mkdir27(workspacePath, { recursive: true, mode: 448 });
+      await writePrivateFileAtomically(resolve40(this.roomRoot(corner.cornerId), ".beeline-corner.json"), `${JSON.stringify({ cornerId: corner.cornerId, parentRoomId: corner.parentRoomId })}
+`);
       if (worktree && shouldPostInitialCornerWorkingState(restore)) {
         await this.options.daemonApi.execute("postCornerRemoteState", {
           cornerId: corner.cornerId,
@@ -47486,10 +47889,11 @@ var RoomRuntimeCoordinator = class {
           this.surfaceHealth.degraded(corner.cornerId, "corner command loop exited");
           console.error(`[thin-core] corner ${corner.cornerId} failed:`, error);
         }
-      }).finally(() => {
+      }).finally(async () => {
         if (this.running.get(corner.cornerId)?.body === loop) {
           this.running.delete(corner.cornerId);
         }
+        await this.cleanupArchivedCornerLocalState(corner.cornerId).catch((error) => console.error(`[thin-core] corner ${corner.cornerId} local cleanup deferred:`, error));
       });
       if (this.stopped) {
         controller.abort();
@@ -47606,7 +48010,7 @@ var RoomRuntimeCoordinator = class {
       await this.restartRunningRoomForRepositoryChange(roomId);
       if (this.stopped)
         return;
-      const result = await this.options.daemonApi.execute("listRoomCorners", { roomId });
+      const result = await this.options.daemonApi.execute("listRoomCorners", { roomId, activeOnly: true });
       for (const corner of result.corners) {
         this.monolithCornerParents.set(corner.cornerId, roomId);
         if (corner.archived)
@@ -47763,6 +48167,12 @@ var RoomRuntimeCoordinator = class {
       } catch (error) {
         if (hasUnpublishedWork(error)) {
           this.archiveCleanupAbandoned.add(cornerId);
+          try {
+            const saved = await preserveUnpublishedCornerWorktree(worktree, "archived with unpublished local work");
+            console.warn(`[thin-core] corner ${cornerId} recoverable at ${saved.pointer}; pruned ${saved.pruned.join(", ") || "no generated directories"}`);
+          } catch (preserveError) {
+            console.error(`[thin-core] corner ${cornerId} recovery preservation failed:`, preserveError);
+          }
           console.error(`[thin-core] corner ${cornerId} branch cleanup abandoned; unpublished work kept:`, error);
           continue;
         }
@@ -47783,11 +48193,14 @@ var RoomRuntimeCoordinator = class {
         continue;
       if (!this.archiveCleanupDue(cornerId))
         continue;
+      if (this.archiveCleanupAbandoned.has(cornerId))
+        continue;
       if (this.archiveCleanupAccessDenied.has(cornerId) && !corners.has(cornerId))
         continue;
       this.archiveCleanupAccessDenied.delete(cornerId);
       let corner = corners.get(cornerId);
       let discovered;
+      let candidate;
       try {
         discovered = await discoverCornerWorktree(this.runtime.supervisorRoot, cornerId);
         if (!discovered) {
@@ -47813,22 +48226,33 @@ var RoomRuntimeCoordinator = class {
           throw new Error(`archived corner ${corner.cornerId} has no authoritative repository`);
         }
         const expectedCommonDir = cornerRepositoryCacheDir(this.runtime.supervisorRoot, repository.remote);
-        if (resolve38(discovered.gitCommonDir) !== expectedCommonDir) {
+        if (resolve40(discovered.gitCommonDir) !== expectedCommonDir) {
           throw new Error(`archived corner ${corner.cornerId} repository cache does not match`);
         }
         if (!restore.featureBranch) {
           throw new Error(`archived corner ${corner.cornerId} has no authoritative feature branch`);
         }
-        await this.reapCornerWorktree({
+        candidate = {
           ...discovered,
           cornerId: corner.cornerId,
           branch: restore.featureBranch,
           parentRoomId: corner.parentRoomId,
           token: "",
           recovered: true
-        });
+        };
+        await this.reapCornerWorktree(candidate);
         console.log(`[thin-core] swept archived corner worktree ${cornerId}`);
       } catch (error) {
+        if (candidate && hasUnpublishedWork(error)) {
+          this.archiveCleanupAbandoned.add(cornerId);
+          try {
+            const saved = await preserveUnpublishedCornerWorktree(candidate, "archived with unpublished local work");
+            console.warn(`[thin-core] archived corner ${cornerId} recoverable at ${saved.pointer}; pruned ${saved.pruned.join(", ") || "no generated directories"}`);
+          } catch (preserveError) {
+            console.error(`[thin-core] archived corner ${cornerId} recovery preservation failed:`, preserveError);
+          }
+          continue;
+        }
         if (error instanceof DaemonApiError && error.status === 403)
           this.archiveCleanupAccessDenied.add(cornerId);
         else
@@ -47885,6 +48309,64 @@ var RoomRuntimeCoordinator = class {
       scratchPath: scratch.path
     });
   }
+  /** Reap a corner's private state only after the server confirms archive and
+   * its ACP session has suspended. A missing/failed read is never authority. */
+  async cleanupArchivedCornerLocalState(cornerId, knownArchive) {
+    if (this.running.has(cornerId) || this.startingCorners.has(cornerId))
+      return false;
+    const root = resolve40(dirname28(this.configPath), "rooms", cornerId);
+    if (this.roomRoot(cornerId) !== root || !/^[a-zA-Z0-9-]{1,80}$/.test(cornerId))
+      return false;
+    const info = await lstat7(root).catch(() => void 0);
+    if (!info?.isDirectory() || await realpath3(root) !== root)
+      return false;
+    let archived = knownArchive?.has(cornerId) ?? false;
+    if (!archived) {
+      try {
+        const restore = await this.options.daemonApi.execute("getCornerRestoreState", { cornerId });
+        archived = restore.archived === true;
+      } catch {
+        return false;
+      }
+    }
+    if (!archived)
+      return false;
+    await this.scheduler.suspend(cornerId);
+    await rm17(resolve40(root, "scratch"), { recursive: true, force: true });
+    await rm17(resolve40(root, "agent-home"), { recursive: true, force: true });
+    await rm17(resolve40(root, ".beeline-corner.json"), { force: true });
+    return true;
+  }
+  /** Recover chat-only scratch and per-member homes after missed close events
+   * or a helper restart. A marker identifies new code corners after their
+   * checkout has already gone; a scratch directory identifies legacy chat
+   * corners. Active scratch gets a 14-day file TTL, never a wholesale reap. */
+  async sweepCornerLocalState(archived, desired) {
+    const root = resolve40(dirname28(this.configPath), "rooms");
+    const due = this.now() - this.lastCornerScratchSweepAt >= 6 * 60 * 6e4;
+    if (due)
+      this.lastCornerScratchSweepAt = this.now();
+    for (const entry of await readdir11(root, { withFileTypes: true }).catch(() => [])) {
+      if (!entry.isDirectory() || !/^[a-zA-Z0-9-]{1,80}$/.test(entry.name))
+        continue;
+      const roomRoot = resolve40(root, entry.name);
+      const scratch = resolve40(roomRoot, "scratch");
+      const marker = resolve40(roomRoot, ".beeline-corner.json");
+      const hasScratch = (await lstat7(scratch).catch(() => void 0))?.isDirectory() ?? false;
+      const hasMarker = (await lstat7(marker).catch(() => void 0))?.isFile() ?? false;
+      if (!hasScratch && !hasMarker)
+        continue;
+      if (desired.has(entry.name)) {
+        if (due && hasScratch && !this.startingCorners.has(entry.name) && !this.running.get(entry.name)?.body.isBusy()) {
+          await sweepStaleCornerScratch(scratch, this.now(), CORNER_SCRATCH_TTL_MS).catch((error) => console.error(`[thin-core] corner ${entry.name} scratch TTL sweep failed:`, error));
+        }
+        continue;
+      }
+      if (this.running.has(entry.name) || this.startingCorners.has(entry.name))
+        continue;
+      await this.cleanupArchivedCornerLocalState(entry.name, archived).catch((error) => console.error(`[thin-core] corner ${entry.name} local cleanup deferred:`, error));
+    }
+  }
   notePoll(roomId) {
     this.surfaceHealth.intakeReady(roomId);
     const room = this.running.get(roomId);
@@ -47969,7 +48451,7 @@ function githubGitEnv(token) {
 }
 async function gitRefExists(gitCommonDir, ref) {
   try {
-    await execFileAsync8("git", [
+    await execFileAsync11("git", [
       `--git-dir=${gitCommonDir}`,
       "show-ref",
       "--verify",
@@ -47985,7 +48467,7 @@ async function gitRefExists(gitCommonDir, ref) {
 }
 async function repositoryHeadRef(gitCommonDir) {
   try {
-    const head = await execFileAsync8("git", [
+    const head = await execFileAsync11("git", [
       `--git-dir=${gitCommonDir}`,
       "symbolic-ref",
       "--quiet",
@@ -48005,7 +48487,7 @@ ${gitStderr(error)}`);
 }
 async function deleteExactRemoteBranch(gitCommonDir, remoteRef, token, options = {}) {
   const authEnv = githubGitEnv(token);
-  const listRemote = () => execFileAsync8("git", [`--git-dir=${gitCommonDir}`, "ls-remote", "--heads", "origin", remoteRef], {
+  const listRemote = () => execFileAsync11("git", [`--git-dir=${gitCommonDir}`, "ls-remote", "--heads", "origin", remoteRef], {
     env: authEnv,
     maxBuffer: 4 * 1024 * 1024
   });
@@ -48021,7 +48503,7 @@ async function deleteExactRemoteBranch(gitCommonDir, remoteRef, token, options =
     try {
       const remote = await listRemote();
       if (remote.stdout.trim()) {
-        await execFileAsync8("git", [`--git-dir=${gitCommonDir}`, "push", "origin", `:${remoteRef}`], {
+        await execFileAsync11("git", [`--git-dir=${gitCommonDir}`, "push", "origin", `:${remoteRef}`], {
           env: authEnv,
           maxBuffer: 4 * 1024 * 1024
         });
@@ -48163,15 +48645,15 @@ var ThinDaemonCore = class {
 };
 
 // apps/body/dist/force-update-journal.js
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync9, renameSync, writeFileSync as writeFileSync5 } from "node:fs";
-import { resolve as resolve39 } from "node:path";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync10, renameSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { resolve as resolve41 } from "node:path";
 var NAME = "force-update-interruptions.json";
 function pathFor(runtimeDir) {
-  return resolve39(runtimeDir, NAME);
+  return resolve41(runtimeDir, NAME);
 }
 function read(runtimeDir) {
   try {
-    const rows = JSON.parse(readFileSync9(pathFor(runtimeDir), "utf8"));
+    const rows = JSON.parse(readFileSync10(pathFor(runtimeDir), "utf8"));
     if (!Array.isArray(rows))
       throw new Error("invalid force-update interruption journal");
     return rows.map((row) => {
@@ -48245,17 +48727,17 @@ function staleGeneration(error) {
 init_launchd();
 init_systemd();
 import { mkdir as mkdir28, rename as rename11 } from "node:fs/promises";
-import { dirname as dirname28, resolve as resolve40 } from "node:path";
+import { dirname as dirname29, resolve as resolve42 } from "node:path";
 async function retireRemovedAgent(runtime, options = {}) {
-  const deletedRoot = resolve40(runtime.supervisorRoot, "beeline", "deleted-runtimes");
-  const target = resolve40(deletedRoot, `${runtime.agent.publicKey}-${Date.now()}`);
+  const deletedRoot = resolve42(runtime.supervisorRoot, "beeline", "deleted-runtimes");
+  const target = resolve42(deletedRoot, `${runtime.agent.publicKey}-${Date.now()}`);
   return relocateAgentRuntime(runtime, target, {
     ...options.run ? { run: options.run } : {}
   });
 }
 async function relocateAgentRuntime(runtime, target, options = {}) {
   const source = runtimeDirectory(runtime.supervisorRoot, runtime.agent.publicKey);
-  const destination = resolve40(target);
+  const destination = resolve42(target);
   if (destination === source || destination.startsWith(`${source}/`)) {
     throw new Error("agent runtime destination must be outside the live runtime");
   }
@@ -48268,7 +48750,7 @@ async function relocateAgentRuntime(runtime, target, options = {}) {
       ...options.run ? { run: options.run } : {}
     });
   }
-  await mkdir28(dirname28(destination), { recursive: true, mode: 448 });
+  await mkdir28(dirname29(destination), { recursive: true, mode: 448 });
   await rename11(source, destination);
   return destination;
 }
@@ -48278,8 +48760,8 @@ init_self_update();
 init_systemd();
 
 // apps/body/dist/release-status.js
-import { readFile as readFile31, readdir as readdir10, rename as rename12, writeFile as writeFile21 } from "node:fs/promises";
-import { resolve as resolve41 } from "node:path";
+import { readFile as readFile31, readdir as readdir12, rename as rename12, writeFile as writeFile21 } from "node:fs/promises";
+import { resolve as resolve43 } from "node:path";
 var DAEMON_RELEASE_STATUS_FILE = "release-status.json";
 var RELEASE_VERSION = /^v\d+\.\d+\.\d+$/;
 var SOURCE_SHA = /^[0-9a-f]{7,64}$/;
@@ -48296,7 +48778,7 @@ async function writeDaemonReleaseStatus(runtimeDir, agentPubkey, identity, optio
     pid: options.pid ?? process.pid,
     readyAt: (options.now?.() ?? /* @__PURE__ */ new Date()).toISOString()
   };
-  const target = resolve41(runtimeDir, DAEMON_RELEASE_STATUS_FILE);
+  const target = resolve43(runtimeDir, DAEMON_RELEASE_STATUS_FILE);
   const temporary = `${target}.${status.pid}.tmp`;
   await writeFile21(temporary, `${JSON.stringify(status, null, 2)}
 `, { mode: 384 });
@@ -48305,8 +48787,8 @@ async function writeDaemonReleaseStatus(runtimeDir, agentPubkey, identity, optio
 }
 
 // apps/body/dist/scratch-sweep.js
-import { lstat as lstat5, readdir as readdir11, rmdir as rmdir2, unlink as unlink9 } from "node:fs/promises";
-import { resolve as resolve42 } from "node:path";
+import { lstat as lstat8, readdir as readdir13, rmdir as rmdir3, unlink as unlink10 } from "node:fs/promises";
+import { resolve as resolve44 } from "node:path";
 var DEFAULT_SCRATCH_TTL_HOURS = 72;
 var NEVER_SWEEP_SUBDIR_NAMES = new Set(HOME_SUBDIRS.filter((name) => name !== "tmp"));
 function scratchTtlMs(env = process.env) {
@@ -48315,10 +48797,10 @@ function scratchTtlMs(env = process.env) {
   return (Number.isFinite(hours) && hours > 0 ? hours : DEFAULT_SCRATCH_TTL_HOURS) * 60 * 60 * 1e3;
 }
 async function discoverAttachScratchRoots(runtimeDir) {
-  const roomsDir = resolve42(runtimeDir, "rooms");
+  const roomsDir = resolve44(runtimeDir, "rooms");
   let entries;
   try {
-    entries = await readdir11(roomsDir, { withFileTypes: true });
+    entries = await readdir13(roomsDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -48326,8 +48808,8 @@ async function discoverAttachScratchRoots(runtimeDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const home = resolve42(roomsDir, entry.name, "agent-home");
-    const stats = await lstat5(home).catch(() => void 0);
+    const home = resolve44(roomsDir, entry.name, "agent-home");
+    const stats = await lstat8(home).catch(() => void 0);
     if (stats?.isDirectory())
       roots.push(home);
   }
@@ -48336,7 +48818,7 @@ async function discoverAttachScratchRoots(runtimeDir) {
 async function removeStaleFiles(dir, cutoffMs, protectNamesHere) {
   let entries;
   try {
-    entries = await readdir11(dir, { withFileTypes: true });
+    entries = await readdir13(dir, { withFileTypes: true });
   } catch {
     return { removedFiles: 0, removedBytes: 0 };
   }
@@ -48345,22 +48827,22 @@ async function removeStaleFiles(dir, cutoffMs, protectNamesHere) {
   for (const entry of entries) {
     if (protectNamesHere && NEVER_SWEEP_SUBDIR_NAMES.has(entry.name))
       continue;
-    const path = resolve42(dir, entry.name);
-    const stats = await lstat5(path).catch(() => void 0);
+    const path = resolve44(dir, entry.name);
+    const stats = await lstat8(path).catch(() => void 0);
     if (!stats || stats.isSymbolicLink())
       continue;
     if (stats.isDirectory()) {
       const nested = await removeStaleFiles(path, cutoffMs, false);
       removedFiles += nested.removedFiles;
       removedBytes += nested.removedBytes;
-      const remaining = await readdir11(path).catch(() => void 0);
+      const remaining = await readdir13(path).catch(() => void 0);
       if (remaining && remaining.length === 0)
-        await rmdir2(path).catch(() => void 0);
+        await rmdir3(path).catch(() => void 0);
       continue;
     }
     if (!stats.isFile() || stats.mtimeMs >= cutoffMs)
       continue;
-    await unlink9(path).catch(() => void 0);
+    await unlink10(path).catch(() => void 0);
     removedFiles += 1;
     removedBytes += stats.size;
   }
@@ -48371,7 +48853,7 @@ async function sweepAttachScratchRoots(roots, ttlMs, now2 = Date.now()) {
   let removedFiles = 0;
   let removedBytes = 0;
   for (const root of roots) {
-    const stats = await lstat5(root).catch(() => void 0);
+    const stats = await lstat8(root).catch(() => void 0);
     if (!stats?.isDirectory())
       continue;
     const result = await removeStaleFiles(root, cutoffMs, true);
@@ -48394,7 +48876,7 @@ function runScratchSweepLogged(runtimeDir) {
   void runScratchSweep(runtimeDir).catch((error) => console.error("[body] scratch sweep failed:", error));
 }
 async function runAgentRuntime(configPath, host, signal) {
-  const runtimeDir = dirname29(configPath);
+  const runtimeDir = dirname30(configPath);
   await convergeRuntimeRecordFileModes(configPath);
   const accessMigration = await migrateRuntimeRecordAccessPolicy(configPath);
   let runtime = accessMigration.runtime;
@@ -48430,7 +48912,7 @@ async function runAgentRuntime(configPath, host, signal) {
     BUZZ_DEV_MCP_BIN: runtime.mcpBinary
   };
   const config = loadBodyConfig({
-    workspaceRoot: resolve43(runtimeDir, "workspace"),
+    workspaceRoot: resolve45(runtimeDir, "workspace"),
     llmEnvFile: runtime.llmEnvFile,
     env,
     agent
@@ -48740,7 +49222,7 @@ async function runAgentRuntime(configPath, host, signal) {
   return exitReason ?? lifecycle.stopReason ?? "stopped";
 }
 function registryBrokerSocketPath(home, agentId) {
-  return join21(home ?? homedir19(), ".beeline", "registry-mcp-broker", `${process.pid}-${agentId.slice(0, 8)}.sock`);
+  return join23(home ?? homedir19(), ".beeline", "registry-mcp-broker", `${process.pid}-${agentId.slice(0, 8)}.sock`);
 }
 function interruptHostedAgent(agent) {
   agent.lifecycle.quiesce("force-update");
@@ -48781,6 +49263,78 @@ var ForceUpdateCoordinator = class {
 init_launchd();
 init_self_update();
 init_systemd();
+
+// apps/body/dist/host-disk-retention.js
+import { execFile as execFile17 } from "node:child_process";
+import { lstat as lstat9, readdir as readdir14, rm as rm18 } from "node:fs/promises";
+import { join as join24, resolve as resolve46 } from "node:path";
+import { promisify as promisify12 } from "node:util";
+var execFileAsync12 = promisify12(execFile17);
+var DELETED_RUNTIME_TTL_MS = 30 * 24 * 60 * 6e4;
+var REPOSITORY_CACHE_TTL_MS = 30 * 24 * 60 * 6e4;
+async function pruneDeletedRuntimes(supervisorRoot, now2 = Date.now()) {
+  const root = resolve46(supervisorRoot, "beeline", "deleted-runtimes");
+  const removed = [];
+  for (const entry of await readdir14(root, { withFileTypes: true }).catch(() => [])) {
+    const match = /^([a-f0-9]{64})-(\d{13})$/.exec(entry.name);
+    if (!entry.isDirectory() || !match || now2 - Number(match[2]) < DELETED_RUNTIME_TTL_MS)
+      continue;
+    const path = join24(root, entry.name);
+    if (!(await lstat9(path)).isDirectory())
+      continue;
+    await rm18(path, { recursive: true, force: true });
+    removed.push(path);
+  }
+  return removed;
+}
+async function pruneRepositoryCaches(supervisorRoot, now2 = Date.now()) {
+  const root = resolve46(supervisorRoot, "beeline", "repositories");
+  const removed = [];
+  for (const entry of await readdir14(root, { withFileTypes: true }).catch(() => [])) {
+    if (!entry.isDirectory() || !/^[a-f0-9]{24}\.git$/.test(entry.name))
+      continue;
+    const path = join24(root, entry.name);
+    const info = await lstat9(path);
+    if (!info.isDirectory() || now2 - info.mtimeMs < REPOSITORY_CACHE_TTL_MS)
+      continue;
+    const listing = await execFileAsync12("git", [`--git-dir=${path}`, "worktree", "list", "--porcelain"]).then((result) => result.stdout, () => void 0);
+    if (listing === void 0)
+      continue;
+    const attached = listing.split("\n").some((line) => line.startsWith("worktree ") && resolve46(line.slice("worktree ".length)) !== path);
+    if (attached)
+      continue;
+    const refs = await execFileAsync12("git", [
+      `--git-dir=${path}`,
+      "for-each-ref",
+      "--format=%(refname) %(objectname)"
+    ]).then((result) => result.stdout, () => void 0);
+    if (refs === void 0)
+      continue;
+    const byName = /* @__PURE__ */ new Map();
+    for (const line of refs.trim().split("\n")) {
+      const match = /^(refs\/\S+) ([a-f0-9]{40,64})$/.exec(line);
+      if (match)
+        byName.set(match[1], match[2]);
+    }
+    const unpublishedHead = [...byName].some(([name, oid]) => name.startsWith("refs/heads/") && byName.get(name.replace("refs/heads/", "refs/remotes/origin/")) !== oid);
+    if (unpublishedHead)
+      continue;
+    const unreachable = await execFileAsync12("git", [
+      `--git-dir=${path}`,
+      "fsck",
+      "--unreachable",
+      "--no-reflogs",
+      "--no-progress"
+    ]).then((result) => result.stdout, () => void 0);
+    if (unreachable === void 0 || /unreachable commit /.test(unreachable))
+      continue;
+    await rm18(path, { recursive: true, force: true });
+    removed.push(path);
+  }
+  return removed;
+}
+
+// apps/body/dist/machine-helper.js
 var AGENT_RESTART_BASE_MS = 5e3;
 var AGENT_RESTART_MAX_MS = 6e4;
 var PREVIOUS_HOLDER_WAIT_MS = 12e4;
@@ -48801,6 +49355,32 @@ async function runMachineHelper(options = {}) {
   const slots = /* @__PURE__ */ new Map();
   const hosted = /* @__PURE__ */ new Map();
   const links = /* @__PURE__ */ new Map();
+  let diskSweepRunning = false;
+  let lastModelSweepAt = 0;
+  let lastRetentionSweepAt = 0;
+  const sweepHostDisk = async () => {
+    const now2 = Date.now();
+    if (controller.signal.aborted || diskSweepRunning || [...slots.values()].some((slot) => slot.state === "starting" || slot.state === "restarting") || [...hosted.values()].some((agent) => !agent.core.isWorkspaceIdle()) || now2 - lastModelSweepAt < 60 * 6e4 && now2 - lastRetentionSweepAt < 24 * 60 * 6e4)
+      return;
+    diskSweepRunning = true;
+    try {
+      const modelDue = now2 - lastModelSweepAt >= 60 * 6e4;
+      const removed = modelDue ? await pruneSharedModelCache(resolve47(supervisorRoot, "beeline", "model-cache")) : [];
+      if (modelDue)
+        lastModelSweepAt = now2;
+      if (now2 - lastRetentionSweepAt >= 24 * 60 * 6e4) {
+        removed.push(...await pruneDeletedRuntimes(supervisorRoot));
+        removed.push(...await pruneRepositoryCaches(supervisorRoot));
+        lastRetentionSweepAt = now2;
+      }
+      if (removed.length)
+        console.log(`[helper] idle disk sweep removed ${removed.length} expired cache/runtime directories`);
+    } catch (error) {
+      console.warn("[helper] idle disk sweep failed:", error);
+    } finally {
+      diskSweepRunning = false;
+    }
+  };
   if (!options.configPaths)
     await writeHelperPidRecord(supervisorRoot, process.pid);
   const layout = beelineInstallLayout(env);
@@ -48812,7 +49392,7 @@ async function runMachineHelper(options = {}) {
     const paths = options.configPaths ?? await findAgentRuntimeConfigPaths(env);
     const live = [];
     for (const path of paths) {
-      if (!await stat9(path).then(() => true, () => false))
+      if (!await stat10(path).then(() => true, () => false))
         continue;
       if (await isAgentStopped(path))
         continue;
@@ -48832,7 +49412,7 @@ async function runMachineHelper(options = {}) {
     const settle = await settleUpdateAttemptOnStart(layout);
     if (settle.kind === "rolled-back") {
       for (const path of await hostedRuntimes())
-        await queueUpdateRollbackAlert(dirname30(path), settle.record.releaseId);
+        await queueUpdateRollbackAlert(dirname31(path), settle.record.releaseId);
       console.error(`[helper] self-update ROLLED BACK: bundle ${describeIdentity(settle.record.to)} never confirmed healthy; restored ${settle.record.previousReleaseId ?? "previous release"}`);
       return finish(await standDownForRollback());
     }
@@ -48873,7 +49453,7 @@ async function runMachineHelper(options = {}) {
           since: new Date(slot.since).toISOString()
         }]))
       };
-      await mkdir29(dirname30(path), { recursive: true, mode: 448 });
+      await mkdir29(dirname31(path), { recursive: true, mode: 448 });
       const staged = `${path}.${process.pid}.tmp`;
       await writeFile22(staged, `${JSON.stringify(body, null, 2)}
 `, { mode: 384 });
@@ -48966,6 +49546,7 @@ async function runMachineHelper(options = {}) {
       for (const agent of hosted.values())
         agent.lifecycle.resumeAfterFailedUpdate(() => agent.core.resumeServing());
     }
+    void sweepHostDisk();
   };
   let readyResolve;
   const allEstablished = new Promise((resolveReady) => {
@@ -49020,7 +49601,7 @@ async function runMachineHelper(options = {}) {
   const supervise = async (slot) => {
     let failures = 0;
     while (!controller.signal.aborted && !slot.controller.signal.aborted) {
-      if (!await stat9(slot.configPath).then(() => true, () => false)) {
+      if (!await stat10(slot.configPath).then(() => true, () => false)) {
         setState(slot, "removed", "runtime no longer on this machine");
         break;
       }
@@ -49030,7 +49611,7 @@ async function runMachineHelper(options = {}) {
         reason = await runAgent(slot.configPath, host, slot.controller.signal);
       } catch (error) {
         console.error(`[helper] agent ${slot.agentId} failed:`, error);
-        const failure = await settleDaemonStartFailure(dirname30(slot.configPath), error).catch(() => ({ distressed: false }));
+        const failure = await settleDaemonStartFailure(dirname31(slot.configPath), error).catch(() => ({ distressed: false }));
         if (failure.distressed) {
           console.error(`[helper] agent ${slot.agentId} failed to start ${failure.count} times; it stays stopped. operator record: ${failure.path}`);
           reason = "distress";
@@ -49079,7 +49660,7 @@ async function runMachineHelper(options = {}) {
     const runtime = await readRuntimeRecord(configPath).catch(() => void 0);
     const slot = existing ?? {
       configPath,
-      agentId: runtime?.agent.publicKey ?? dirname30(configPath).split("/").at(-1),
+      agentId: runtime?.agent.publicKey ?? dirname31(configPath).split("/").at(-1),
       controller: new AbortController(),
       state: "starting",
       status: "",
@@ -49119,6 +49700,8 @@ async function runMachineHelper(options = {}) {
       allEstablished,
       new Promise((resolveAbort) => controller.signal.addEventListener("abort", () => resolveAbort(), { once: true }))
     ]);
+    if (!controller.signal.aborted)
+      void sweepHostDisk();
     if (!controller.signal.aborted)
       await notifier.ready(`ready; ${statusLine()}`).catch((error) => console.error("[helper] ready notification failed:", error));
     if (!controller.signal.aborted)
@@ -49185,7 +49768,7 @@ async function waitForPreviousHolder(configPath, signal) {
       return;
     if (!announced) {
       announced = true;
-      console.log(`[helper] waiting for process ${pid} to let go of ${dirname30(configPath)}`);
+      console.log(`[helper] waiting for process ${pid} to let go of ${dirname31(configPath)}`);
     }
     const waited = Date.now() - startedAt;
     if (waited >= PREVIOUS_HOLDER_WAIT_MS && !asked) {
@@ -49310,7 +49893,7 @@ async function main() {
     const roomId = roomFlag >= 0 ? args[roomFlag + 1] : void 0;
     if (!configPath || !roomId)
       throw new Error("corner-read-token requires --config and --room");
-    const activated = await activateDaemonTransport(resolve44(configPath));
+    const activated = await activateDaemonTransport(resolve48(configPath));
     if (!activated)
       throw new Error("corner-read-token requires monolith transport");
     const credential = await activated.client.execute("getRoomGitHubToken", { roomId });
@@ -49365,7 +49948,7 @@ async function main() {
     }
     if (!configPath && !args.includes("--machine"))
       throw new Error("daemon requires --machine, or --config <runtime.json> for one agent");
-    const { reason, lifecycle } = await runMachineHelper(configPath ? { configPaths: [resolve44(configPath)] } : {});
+    const { reason, lifecycle } = await runMachineHelper(configPath ? { configPaths: [resolve48(configPath)] } : {});
     daemonLifecycle = lifecycle;
     lifecycle.exit(reason);
     return;
@@ -49388,7 +49971,7 @@ async function main() {
     if (!agentPubkey)
       throw new Error("stop requires --agent <pubkey>");
     const configs = await findAgentRuntimeConfigPaths(process.env, process.cwd());
-    const configPath = configs.find((candidate) => dirname31(candidate).endsWith(agentPubkey));
+    const configPath = configs.find((candidate) => dirname32(candidate).endsWith(agentPubkey));
     if (!configPath)
       throw new Error(`no stored runtime found for agent ${agentPubkey}`);
     const runtime = await readRuntimeRecord(configPath);