zelari-code 1.30.4 → 1.31.0

package/dist/cli/main.bundled.js

@@ -395,7 +395,7 @@ async function refreshGrokToken(options) {
   return parseTokenResponseBody(obj, accessToken);
 }
 async function openBrowser(url2) {
-  const { spawn: spawn12 } = await import("node:child_process");
+  const { spawn: spawn13 } = await import("node:child_process");
   const cmd = (() => {
     switch (process.platform) {
       case "darwin":
@@ -408,7 +408,7 @@ async function openBrowser(url2) {
   })();
   return new Promise((resolve3, reject) => {
     try {
-      const child = spawn12(cmd.bin, cmd.args, {
+      const child = spawn13(cmd.bin, cmd.args, {
         stdio: "ignore",
         detached: true
       });
@@ -1829,10 +1829,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path47) {
-  if (!path47)
+function getElementAtPath(obj, path48) {
+  if (!path48)
     return obj;
-  return path47.reduce((acc, key) => acc?.[key], obj);
+  return path48.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -2160,11 +2160,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path47, issues) {
+function prefixIssues(path48, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path47);
+    iss.path.unshift(path48);
     return iss;
   });
 }
@@ -2382,16 +2382,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path47 = []) => {
+  const processError = (error52, path48 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path47, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path48, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path47, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path47, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
       } else {
-        const fullpath = [...path47, ...issue2.path];
+        const fullpath = [...path48, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -2418,17 +2418,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path47 = []) => {
+  const processError = (error52, path48 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path47, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path48, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path47, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path47, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
       } else {
-        const fullpath = [...path47, ...issue2.path];
+        const fullpath = [...path48, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -2460,8 +2460,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path47 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path47) {
+  const path48 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path48) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -15964,13 +15964,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path47 = ref.slice(1).split("/").filter(Boolean);
-  if (path47.length === 0) {
+  const path48 = ref.slice(1).split("/").filter(Boolean);
+  if (path48.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path47[0] === defsKey) {
-    const key = path47[1];
+  if (path48[0] === defsKey) {
+    const key = path48[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -18134,11 +18134,11 @@ var init_tools = __esm({
           if (!ctx.addDocument)
             return "Knowledge vault tool not available.";
           const title = args["title"] || "New Document";
-          const path47 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
+          const path48 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
           const content = args["content"] || "";
           const tags = args["tags"] || [];
           ctx.addDocument({
-            path: path47,
+            path: path48,
             title,
             content,
             format: "markdown",
@@ -18147,7 +18147,7 @@ var init_tools = __esm({
             workspaceId: ctx.workspaceId
           });
           ctx.addActivity("vault", "created document", title);
-          return `Document "${title}" created at "${path47}".`;
+          return `Document "${title}" created at "${path48}".`;
         }
       }
     ];
@@ -21970,11 +21970,11 @@ var init_synthesisAudit = __esm({
 import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "node:fs";
 import { join as join2 } from "node:path";
 function loadNfrSpec(zelariRoot) {
-  const path47 = join2(zelariRoot, "nfr-spec.json");
-  if (!existsSync6(path47))
+  const path48 = join2(zelariRoot, "nfr-spec.json");
+  if (!existsSync6(path48))
     return null;
   try {
-    const raw = JSON.parse(readFileSync5(path47, "utf8"));
+    const raw = JSON.parse(readFileSync5(path48, "utf8"));
     if (raw.version !== 1 || !Array.isArray(raw.targets))
       return null;
     return raw;
@@ -24280,9 +24280,9 @@ var init_types3 = __esm({
 import { readFileSync as readFileSync10 } from "node:fs";
 import { join as join8 } from "node:path";
 function readLessonsDeduped(zelariRoot) {
-  const path47 = join8(zelariRoot, LESSONS_FILE);
+  const path48 = join8(zelariRoot, LESSONS_FILE);
   try {
-    const raw = readFileSync10(path47, "utf8");
+    const raw = readFileSync10(path48, "utf8");
     const byId = /* @__PURE__ */ new Map();
     for (const line of raw.split(/\r?\n/)) {
       if (!line.trim())
@@ -24383,8 +24383,8 @@ function keywordsFrom(check2, signature) {
   return [.../* @__PURE__ */ new Set([...fromId, ...words])].slice(0, 12);
 }
 function writeLesson(zelariRoot, lesson) {
-  const path47 = join9(zelariRoot, LESSONS_FILE);
-  appendFileSync(path47, `${JSON.stringify(lesson)}
+  const path48 = join9(zelariRoot, LESSONS_FILE);
+  appendFileSync(path48, `${JSON.stringify(lesson)}
 `, "utf8");
 }
 function findSimilar(lessons, signature) {
@@ -24997,9 +24997,9 @@ function findCycle(nodes) {
     if (color.get(start) !== WHITE)
       continue;
     const stack = [[start, 0]];
-    const path47 = [];
+    const path48 = [];
     color.set(start, GRAY);
-    path47.push(start);
+    path48.push(start);
     while (stack.length > 0) {
       const top = stack[stack.length - 1];
       const [id, idx] = top;
@@ -25012,17 +25012,17 @@ function findCycle(nodes) {
           continue;
         const c = color.get(dep);
         if (c === GRAY) {
-          const at = path47.indexOf(dep);
-          return [...path47.slice(at), dep];
+          const at = path48.indexOf(dep);
+          return [...path48.slice(at), dep];
         }
         if (c === WHITE) {
           color.set(dep, GRAY);
-          path47.push(dep);
+          path48.push(dep);
           stack.push([dep, 0]);
         }
       } else {
         color.set(id, BLACK);
-        path47.pop();
+        path48.pop();
         stack.pop();
       }
     }
@@ -25942,8 +25942,8 @@ var init_runner = __esm({
           failed: [...this.tentaclesById.values()].filter((r) => r.status === "error"),
           pending: []
         };
-        const path47 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
-        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path47}`);
+        const path48 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
+        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path48}`);
         return snapshot;
       }
       callLog(msg, data) {
@@ -26412,6 +26412,8 @@ var init_graphStatus = __esm({
 var openai_compatible_exports = {};
 __export(openai_compatible_exports, {
   PROVIDER_ENDPOINTS: () => PROVIDER_ENDPOINTS,
+  dataUriFromImage: () => dataUriFromImage,
+  modelSupportsVision: () => modelSupportsVision,
   openaiCompatibleProvider: () => openaiCompatibleProvider,
   parseCachedPromptTokens: () => parseCachedPromptTokens,
   providerConfigFor: () => providerConfigFor,
@@ -26481,6 +26483,16 @@ function backoffDelay(attempt, retryAfterHeader) {
   }
   return Math.min(BACKOFF_BASE_MS * 2 ** attempt, BACKOFF_CAP_MS);
 }
+function modelSupportsVision(model) {
+  const force = process.env.ZELARI_VISION;
+  if (force === "1" || force === "true" || force === "on") return true;
+  if (force === "0" || force === "false" || force === "off") return false;
+  const m = model.toLowerCase();
+  return VISION_MODEL_HINTS.some((hint) => m.includes(hint));
+}
+function dataUriFromImage(img) {
+  return `data:${img.mime};base64,${img.dataBase64}`;
+}
 function resolveActiveProvider() {
   return getProviderConfig().activeProviderId;
 }
@@ -26505,6 +26517,7 @@ function resolveBaseUrl(providerId) {
 }
 function openaiCompatibleProvider(config2) {
   return async function* (params) {
+    const vision = modelSupportsVision(params.model);
     const messages = params.messages.map((m) => {
       if (m.role === "tool") {
         return {
@@ -26538,6 +26551,29 @@ function openaiCompatibleProvider(config2) {
           reasoning_content: m.reasoningContent
         };
       }
+      if (m.role === "user" && m.images && m.images.length > 0) {
+        if (vision) {
+          return {
+            role: "user",
+            content: [
+              { type: "text", text: m.content ?? "" },
+              ...m.images.map((img) => ({
+                type: "image_url",
+                image_url: { url: dataUriFromImage(img) }
+              }))
+            ]
+          };
+        }
+        const notes = m.images.map((img) => `[Immagine allegata: ${img.alt ?? img.mime}]`).join("\n");
+        return {
+          role: "user",
+          content: `${m.content ?? ""}
+
+${notes}
+
+(Il modello attivo non supporta input visivi: i pixel non sono stati inviati.)`
+        };
+      }
       return { role: m.role, content: m.content };
     });
     const body = {
@@ -26818,7 +26854,7 @@ async function providerConfigFor(providerId) {
     providerId
   };
 }
-var RETRYABLE_STATUSES, MAX_RETRIES, BACKOFF_BASE_MS, BACKOFF_CAP_MS, PROVIDER_CONNECT_TIMEOUT_MS, PROVIDER_STREAM_IDLE_MS, PROVIDER_STREAM_MAX_MS, PROVIDER_ENDPOINTS;
+var RETRYABLE_STATUSES, MAX_RETRIES, BACKOFF_BASE_MS, BACKOFF_CAP_MS, PROVIDER_CONNECT_TIMEOUT_MS, PROVIDER_STREAM_IDLE_MS, PROVIDER_STREAM_MAX_MS, VISION_MODEL_HINTS, PROVIDER_ENDPOINTS;
 var init_openai_compatible = __esm({
   "src/cli/provider/openai-compatible.ts"() {
     "use strict";
@@ -26847,6 +26883,33 @@ var init_openai_compatible = __esm({
       const n = raw ? Number.parseInt(raw, 10) : 18e5;
       return Number.isFinite(n) && n >= 6e4 ? n : 18e5;
     })();
+    VISION_MODEL_HINTS = [
+      "grok-4",
+      "grok-3",
+      "grok-2-vision",
+      "grok-vision",
+      "glm-4v",
+      "glm-4.5v",
+      "glm-4.1v",
+      "glm-5v",
+      "qwen-vl",
+      "qwen2-vl",
+      "qwen2.5-vl",
+      "qwen3-vl",
+      "gpt-4o",
+      "gpt-4.1",
+      "gpt-4.5",
+      "gpt-4-vision",
+      "gpt-5",
+      "claude-3",
+      "claude-4",
+      "gemini-",
+      "gemini/",
+      "minimax-m1",
+      "minimax-m2",
+      "minimax-m3",
+      "deepseek-vl"
+    ];
     PROVIDER_ENDPOINTS = {
       "openai-compatible": "https://api.x.ai/v1",
       "minimax": "https://api.minimax.io/v1",
@@ -26898,9 +26961,9 @@ function spillToolOutput(fullText, meta3) {
     const rnd = randomBytes(3).toString("hex");
     const safeTool = (meta3?.toolName ?? "tool").replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 32);
     const file2 = `${stamp}-${safeTool}-${hash3}-${rnd}.txt`;
-    const path47 = join11(dir, file2);
-    writeFileSync10(path47, fullText, "utf8");
-    return path47;
+    const path48 = join11(dir, file2);
+    writeFileSync10(path48, fullText, "utf8");
+    return path48;
   } catch {
     return null;
   }
@@ -26946,10 +27009,10 @@ function truncateToolResult(text, capOrOpts = TOOL_RESULT_LINE_CAP) {
 ${tail}`;
   }
   if (doSpill) {
-    const path47 = spillToolOutput(text, { toolName: opts.toolName });
-    if (path47) {
+    const path48 = spillToolOutput(text, { toolName: opts.toolName });
+    if (path48) {
       const spillNote = `
-\u2026 [full output spilled to: ${path47} \u2014 re-read with read_file if you need the complete text] \u2026`;
+\u2026 [full output spilled to: ${path48} \u2014 re-read with read_file if you need the complete text] \u2026`;
       if (preview.includes("] \u2026\n")) {
         preview = preview.replace("] \u2026\n", `] \u2026${spillNote}
 `);
@@ -29890,21 +29953,21 @@ function normalizeAuth(auth) {
   return "agent";
 }
 function readSecrets() {
-  const path47 = getSshSecretsPath();
-  if (!existsSync17(path47)) return {};
+  const path48 = getSshSecretsPath();
+  if (!existsSync17(path48)) return {};
   try {
-    return JSON.parse(readFileSync16(path47, "utf8"));
+    return JSON.parse(readFileSync16(path48, "utf8"));
   } catch {
     return {};
   }
 }
 function writeSecrets(data) {
-  const path47 = getSshSecretsPath();
-  mkdirSync9(dirname2(path47), { recursive: true });
-  writeFileSync11(path47, `${JSON.stringify(data, null, 2)}
+  const path48 = getSshSecretsPath();
+  mkdirSync9(dirname2(path48), { recursive: true });
+  writeFileSync11(path48, `${JSON.stringify(data, null, 2)}
 `, "utf8");
   try {
-    chmodSync(path47, 384);
+    chmodSync(path48, 384);
   } catch {
   }
 }
@@ -29933,10 +29996,10 @@ function deleteSshPassword(id) {
   writeSecrets({ passwords });
 }
 function readStore2() {
-  const path47 = getSshTargetsPath();
-  if (!existsSync17(path47)) return [];
+  const path48 = getSshTargetsPath();
+  if (!existsSync17(path48)) return [];
   try {
-    const parsed = JSON.parse(readFileSync16(path47, "utf8"));
+    const parsed = JSON.parse(readFileSync16(path48, "utf8"));
     const list = Array.isArray(parsed.targets) ? parsed.targets : [];
     return list.filter(
       (t) => t && typeof t.id === "string" && typeof t.host === "string" && typeof t.user === "string"
@@ -29951,11 +30014,11 @@ function readStore2() {
   }
 }
 function writeStore2(targets) {
-  const path47 = getSshTargetsPath();
-  mkdirSync9(dirname2(path47), { recursive: true });
+  const path48 = getSshTargetsPath();
+  mkdirSync9(dirname2(path48), { recursive: true });
   const clean = targets.map(({ hasPassword: _hp, ...t }) => t);
   writeFileSync11(
-    path47,
+    path48,
     `${JSON.stringify({ targets: clean }, null, 2)}
 `,
     "utf8"
@@ -30201,11 +30264,11 @@ function formatSshTargetsForPrompt() {
   ];
   for (const t of targets) {
     const tags = t.tags?.length ? ` tags=[${t.tags.join(",")}]` : "";
-    const path47 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
+    const path48 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
     const allow = t.allowedCommands?.length ? ` allowed=${t.allowedCommands.join("|")}` : " allowed=status-only";
     const auth = t.auth === "password" ? " auth=password" : t.auth === "keyPath" ? " auth=key" : " auth=agent";
     lines.push(
-      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path47}${tags}${allow}`
+      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path48}${tags}${allow}`
     );
   }
   return lines.join("\n");
@@ -32113,6 +32176,268 @@ var init_phase = __esm({
   }
 });
 
+// src/cli/provider/localCli/claudeStreamJson.ts
+function textBlock(text) {
+  return { type: "text", text };
+}
+function buildClaudeInputLines(messages) {
+  const lines = [];
+  for (const m of messages) {
+    if (m.role === "system") {
+      lines.push(JSON.stringify({ type: "system", content: m.content }));
+      continue;
+    }
+    if (m.role === "user") {
+      lines.push(
+        JSON.stringify({
+          type: "user",
+          message: { role: "user", content: [textBlock(m.content)] }
+        })
+      );
+      continue;
+    }
+    if (m.role === "tool") {
+      lines.push(
+        JSON.stringify({
+          type: "user",
+          message: {
+            role: "user",
+            content: [
+              {
+                type: "tool_result",
+                tool_use_id: m.toolCallId ?? "tool-result",
+                content: m.content
+              }
+            ]
+          }
+        })
+      );
+      continue;
+    }
+    const content = [];
+    if (m.content.length > 0) content.push(textBlock(m.content));
+    for (const tc of m.toolCalls ?? []) {
+      content.push({ type: "tool_use", id: tc.id, name: tc.name, input: tc.args });
+    }
+    if (content.length === 0) content.push(textBlock(""));
+    lines.push(
+      JSON.stringify({
+        type: "assistant",
+        message: { role: "assistant", content }
+      })
+    );
+  }
+  return lines;
+}
+function createClaudeStreamParser() {
+  let finished = false;
+  let stopReason = "stop";
+  let totalTextStreamed = 0;
+  const push = (line) => {
+    if (finished) return [];
+    const trimmed = line.trim();
+    if (!trimmed) return [];
+    let msg;
+    try {
+      msg = JSON.parse(trimmed);
+    } catch {
+      return [];
+    }
+    const type = msg.type;
+    if (type === "stream_event") {
+      const event = msg.event;
+      if (event?.type === "content_block_delta" && event.delta?.type === "text_delta" && typeof event.delta.text === "string") {
+        totalTextStreamed += event.delta.text.length;
+        return [{ kind: "text", delta: event.delta.text }];
+      }
+      return [];
+    }
+    if (type === "assistant") {
+      const message = msg.message;
+      if (message?.stop_reason) {
+        stopReason = message.stop_reason === "end_turn" ? "stop" : message.stop_reason;
+      }
+      const deltas = [];
+      for (const block of message?.content ?? []) {
+        if (block.type === "tool_use" && typeof block.name === "string") {
+          deltas.push({ kind: "text", delta: TOOL_USE_TEXT(block.name, block.input) });
+        }
+      }
+      return deltas;
+    }
+    if (type === "result") {
+      finished = true;
+      const deltas = [];
+      if (totalTextStreamed === 0 && typeof msg.result === "string" && msg.result.length > 0) {
+        deltas.push({ kind: "text", delta: msg.result });
+      }
+      const usage = msg.usage;
+      if (usage && typeof usage.input_tokens === "number" && typeof usage.output_tokens === "number") {
+        const promptTokens = usage.input_tokens;
+        const completionTokens = usage.output_tokens;
+        deltas.push({
+          kind: "usage",
+          usage: {
+            promptTokens,
+            completionTokens,
+            totalTokens: promptTokens + completionTokens,
+            ...typeof usage.cache_read_input_tokens === "number" ? { cachedTokens: usage.cache_read_input_tokens } : {}
+          }
+        });
+      }
+      deltas.push({ kind: "finish", reason: stopReason });
+      return deltas;
+    }
+    return [];
+  };
+  return {
+    push,
+    get finished() {
+      return finished;
+    },
+    get stopReason() {
+      return stopReason;
+    }
+  };
+}
+var TOOL_USE_TEXT;
+var init_claudeStreamJson = __esm({
+  "src/cli/provider/localCli/claudeStreamJson.ts"() {
+    "use strict";
+    TOOL_USE_TEXT = (name, input) => `
+[CLI tool] ${name} ${JSON.stringify(input ?? {})}
+`;
+  }
+});
+
+// src/cli/provider/localCli/claudeProvider.ts
+var claudeProvider_exports = {};
+__export(claudeProvider_exports, {
+  createLocalCliProvider: () => createLocalCliProvider
+});
+import { spawn as spawn6 } from "node:child_process";
+function waitForExit(child, timeoutMs = 2e3) {
+  return new Promise((resolve3) => {
+    if (child.exitCode != null) return resolve3(child.exitCode);
+    const timer = setTimeout(() => resolve3(child.exitCode ?? null), timeoutMs);
+    timer.unref?.();
+    child.once("exit", (code) => {
+      clearTimeout(timer);
+      resolve3(code ?? null);
+    });
+  });
+}
+function createLocalCliProvider(opts = {}) {
+  return async function* (params) {
+    const cli = opts.cli ?? process.env.ZELARI_LOCAL_CLI ?? "claude";
+    const model = opts.model ?? params.model;
+    const permSocket = opts.permissionSocketPath ?? process.env.ZELARI_PERM_SOCKET ?? "";
+    const args = opts.args ?? [...DEFAULT_ARGS];
+    if (opts.args === void 0) {
+      if (model) {
+        args.push("--model", model);
+      }
+      if (permSocket) {
+        args.push(
+          "--permission-prompt-tool",
+          `zelari-code --permission-mcp ${permSocket}`
+        );
+      }
+    }
+    const spawnFn = opts.spawnFn ?? spawn6;
+    let child;
+    try {
+      child = spawnFn(cli, args, {
+        stdio: ["pipe", "pipe", "pipe"],
+        ...opts.env ? { env: opts.env } : {}
+      });
+    } catch (err) {
+      yield {
+        kind: "error",
+        message: `[local-cli] failed to spawn ${cli}: ${err instanceof Error ? err.message : String(err)}`
+      };
+      return;
+    }
+    const spawnErrorBox = { err: null };
+    child.once("error", (err) => {
+      spawnErrorBox.err = err;
+    });
+    const onAbort = () => {
+      child.kill();
+    };
+    params.signal?.addEventListener("abort", onAbort, { once: true });
+    let stderrTail = "";
+    child.stderr.setEncoding("utf8");
+    child.stderr.on("data", (d) => {
+      stderrTail = (stderrTail + d).slice(-2e3);
+    });
+    for (const line of buildClaudeInputLines(params.messages)) {
+      child.stdin.write(line + "\n");
+    }
+    child.stdin.end();
+    const parser = createClaudeStreamParser();
+    let buf = "";
+    let finished = false;
+    try {
+      for await (const chunk of child.stdout) {
+        buf += chunk.toString("utf8");
+        let nl;
+        while ((nl = buf.indexOf("\n")) >= 0) {
+          const line = buf.slice(0, nl);
+          buf = buf.slice(nl + 1);
+          for (const delta of parser.push(line)) {
+            if (delta.kind === "finish") finished = true;
+            yield delta;
+          }
+        }
+      }
+      if (buf.trim().length > 0) {
+        for (const delta of parser.push(buf)) {
+          if (delta.kind === "finish") finished = true;
+          yield delta;
+        }
+      }
+      if (!finished) {
+        const spawnErr = spawnErrorBox.err;
+        if (spawnErr) {
+          yield {
+            kind: "error",
+            message: `[local-cli] ${cli} failed to start: ${spawnErr.message}`
+          };
+        } else {
+          const exitCode = await waitForExit(child);
+          if (exitCode != null && exitCode !== 0) {
+            yield {
+              kind: "error",
+              message: `[local-cli] ${cli} exited ${exitCode}: ${stderrTail.trim() || "no stderr"}`
+            };
+          } else {
+            yield { kind: "finish", reason: parser.stopReason || "stop" };
+          }
+        }
+      }
+    } finally {
+      params.signal?.removeEventListener("abort", onAbort);
+      if (child.exitCode == null) child.kill();
+    }
+  };
+}
+var DEFAULT_ARGS;
+var init_claudeProvider = __esm({
+  "src/cli/provider/localCli/claudeProvider.ts"() {
+    "use strict";
+    init_claudeStreamJson();
+    DEFAULT_ARGS = [
+      "-p",
+      "--output-format",
+      "stream-json",
+      "--input-format",
+      "stream-json",
+      "--verbose"
+    ];
+  }
+});
+
 // src/cli/workspace/projectInstructions.ts
 import { existsSync as existsSync19, readFileSync as readFileSync17 } from "node:fs";
 import { join as join16 } from "node:path";
@@ -33064,28 +33389,28 @@ var init_storage = __esm({
     VALID_SCALARS = /^(true|false|null|~)$/i;
     Storage = class {
       /** Read a Markdown file with frontmatter. Throws if not found. */
-      read(path47) {
-        if (!existsSync25(path47)) {
-          throw new Error(`File not found: ${path47}`);
+      read(path48) {
+        if (!existsSync25(path48)) {
+          throw new Error(`File not found: ${path48}`);
         }
-        const md = readFileSync21(path47, "utf8");
+        const md = readFileSync21(path48, "utf8");
         return parseFrontmatter(md);
       }
       /** Read a Markdown file; returns null if not found. */
-      readIfExists(path47) {
-        if (!existsSync25(path47)) return null;
-        return this.read(path47);
+      readIfExists(path48) {
+        if (!existsSync25(path48)) return null;
+        return this.read(path48);
       }
       /**
        * Write a Markdown file atomically (tmp + rename). Creates parent dirs.
        * The meta object is serialized as YAML frontmatter; body as Markdown.
        */
-      write(path47, meta3, body) {
-        mkdirSync11(dirname4(path47), { recursive: true });
-        const tmp = path47 + ".tmp-" + process.pid;
+      write(path48, meta3, body) {
+        mkdirSync11(dirname4(path48), { recursive: true });
+        const tmp = path48 + ".tmp-" + process.pid;
         const md = serializeFrontmatter(meta3, body);
         writeFileSync13(tmp, md, "utf8");
-        renameSync2(tmp, path47);
+        renameSync2(tmp, path48);
       }
       /** List all .md files in a directory (non-recursive). */
       listMarkdown(dir) {
@@ -33163,8 +33488,8 @@ function readPlan(ctx) {
     } catch {
     }
   }
-  const path47 = workspaceFile(ctx.rootDir, "plan");
-  const doc = ctx.storage.readIfExists(path47);
+  const path48 = workspaceFile(ctx.rootDir, "plan");
+  const doc = ctx.storage.readIfExists(path48);
   if (!doc) return { phases: [], tasks: [], milestones: [] };
   const meta3 = doc.meta;
   return {
@@ -33329,7 +33654,7 @@ function addMilestoneRecord(ctx, summary, input) {
     dueDate: input.dueDate,
     targetVersion: version2
   });
-  const path47 = join23(ctx.rootDir, "milestones", `${id}.md`);
+  const path48 = join23(ctx.rootDir, "milestones", `${id}.md`);
   const meta3 = {
     kind: "milestone",
     id,
@@ -33346,7 +33671,7 @@ function addMilestoneRecord(ctx, summary, input) {
     `Target version: ${version2}`,
     ""
   ].join("\n");
-  ctx.storage.write(path47, meta3, body);
+  ctx.storage.write(path48, meta3, body);
   return { id, created: true };
 }
 function readPlanSummary(ctx) {
@@ -33550,7 +33875,7 @@ function addIdeaStub(ctx) {
         const tags = args["tags"] ?? [];
         const category = args["category"] ?? "General";
         const id = `${nextAdrId(ctx)}-${slugify3(title)}`;
-        const path47 = workspaceArtifact(ctx.rootDir, "decisions", id);
+        const path48 = workspaceArtifact(ctx.rootDir, "decisions", id);
         const meta3 = {
           kind: "adr",
           status: "proposed",
@@ -33576,7 +33901,7 @@ function addIdeaStub(ctx) {
           ...consequences.map((c) => `- ${c}`),
           ""
         ].join("\n");
-        ctx.storage.write(path47, meta3, body);
+        ctx.storage.write(path48, meta3, body);
         return `ADR ${id} created: "${title}". Status: proposed. Promote to accepted via /update ADR or manual edit.`;
       });
     }
@@ -33658,14 +33983,14 @@ function createDocumentStub(ctx) {
           ctx.storage.write(risksPath, riskMeta, content);
           return `Document "${title}" created at risks.md (workspace root).`;
         }
-        const path47 = workspaceArtifact(ctx.rootDir, "docs", slug);
+        const path48 = workspaceArtifact(ctx.rootDir, "docs", slug);
         const meta3 = {
           kind: "doc",
           id: slug,
           date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
           tags
         };
-        ctx.storage.write(path47, meta3, content);
+        ctx.storage.write(path48, meta3, content);
         return `Document "${title}" created at docs/${slug}.md.`;
       });
     }
@@ -33882,7 +34207,7 @@ __export(updater_exports, {
   resolveBundledNpmCli: () => resolveBundledNpmCli
 });
 import { createRequire as createRequire2 } from "node:module";
-import { spawn as spawn6 } from "node:child_process";
+import { spawn as spawn7 } from "node:child_process";
 import { existsSync as existsSync27 } from "node:fs";
 import path27 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -33969,7 +34294,7 @@ async function checkForUpdate(fetcher = fetch, registryUrl) {
     updateAvailable: cmp < 0
   };
 }
-async function performUpdate(packageName = "zelari-code", executor = spawn6, resolveNpmCli = resolveBundledNpmCli) {
+async function performUpdate(packageName = "zelari-code", executor = spawn7, resolveNpmCli = resolveBundledNpmCli) {
   const args = ["install", "-g", `${packageName}@latest`];
   const primary = await runNpm(executor, args, "shim");
   if (primary.ok) return primary;
@@ -34027,7 +34352,7 @@ var init_updater = __esm({
 });
 
 // src/cli/mcp/mcpClient.ts
-import { spawn as spawn7 } from "node:child_process";
+import { spawn as spawn8 } from "node:child_process";
 var DEFAULT_REQUEST_TIMEOUT_MS, INIT_TIMEOUT_MS, MCP_PROTOCOL_VERSION, McpClient;
 var init_mcpClient = __esm({
   "src/cli/mcp/mcpClient.ts"() {
@@ -34055,10 +34380,10 @@ var init_mcpClient = __esm({
           env: { ...process.env, ...this.config.env ?? {} },
           windowsHide: true
         };
-        const child = process.platform === "win32" ? spawn7(buildCmdLine(this.config.command, this.config.args ?? []), {
+        const child = process.platform === "win32" ? spawn8(buildCmdLine(this.config.command, this.config.args ?? []), {
           ...spawnOpts,
           shell: true
-        }) : spawn7(this.config.command, this.config.args ?? [], spawnOpts);
+        }) : spawn8(this.config.command, this.config.args ?? [], spawnOpts);
         this.child = child;
         child.stdout.setEncoding("utf8");
         child.stdout.on("data", (chunk) => this.onStdout(chunk));
@@ -34209,10 +34534,10 @@ function getUserMcpPath() {
 function getProjectMcpPath(projectRoot) {
   return join24(projectRoot, ".zelari", "mcp.json");
 }
-function readFile2(path47) {
-  if (!existsSync28(path47)) return {};
+function readFile2(path48) {
+  if (!existsSync28(path48)) return {};
   try {
-    const parsed = JSON.parse(readFileSync23(path47, "utf8"));
+    const parsed = JSON.parse(readFileSync23(path48, "utf8"));
     const out = {};
     for (const [name, cfg] of Object.entries(parsed.mcpServers ?? {})) {
       if (!cfg || typeof cfg.command !== "string" || !cfg.command.trim()) continue;
@@ -34228,10 +34553,10 @@ function readFile2(path47) {
     return {};
   }
 }
-function writeFile(path47, servers) {
-  mkdirSync13(dirname6(path47), { recursive: true });
+function writeFile(path48, servers) {
+  mkdirSync13(dirname6(path48), { recursive: true });
   const body = { mcpServers: servers };
-  writeFileSync15(path47, `${JSON.stringify(body, null, 2)}
+  writeFileSync15(path48, `${JSON.stringify(body, null, 2)}
 `, "utf8");
 }
 function listMcpServers(projectRoot) {
@@ -34264,9 +34589,9 @@ function upsertMcpServer(opts) {
   if (!opts.config.command?.trim()) {
     return { ok: false, error: "command is required" };
   }
-  let path47;
+  let path48;
   if (opts.scope === "user") {
-    path47 = getUserMcpPath();
+    path48 = getUserMcpPath();
   } else {
     const root = opts.projectRoot?.trim();
     if (!root) {
@@ -34275,30 +34600,30 @@ function upsertMcpServer(opts) {
         error: "projectRoot required for project scope (Open Folder first)"
       };
     }
-    path47 = getProjectMcpPath(root);
+    path48 = getProjectMcpPath(root);
   }
-  const current = readFile2(path47);
+  const current = readFile2(path48);
   current[name] = {
     command: opts.config.command.trim(),
     args: opts.config.args,
     env: opts.config.env,
     enabled: opts.config.enabled !== false
   };
-  writeFile(path47, current);
-  return { ok: true, path: path47 };
+  writeFile(path48, current);
+  return { ok: true, path: path48 };
 }
 function removeMcpServer(opts) {
-  const path47 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
-  if (!path47) {
+  const path48 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
+  if (!path48) {
     return { ok: false, error: "projectRoot required for project scope" };
   }
-  const current = readFile2(path47);
+  const current = readFile2(path48);
   if (!(opts.name in current)) {
-    return { ok: false, error: `Server "${opts.name}" not found in ${path47}` };
+    return { ok: false, error: `Server "${opts.name}" not found in ${path48}` };
   }
   delete current[opts.name];
-  writeFile(path47, current);
-  return { ok: true, path: path47 };
+  writeFile(path48, current);
+  return { ok: true, path: path48 };
 }
 var init_mcpConfigIo = __esm({
   "src/cli/mcp/mcpConfigIo.ts"() {
@@ -34307,11 +34632,60 @@ var init_mcpConfigIo = __esm({
 });
 
 // src/cli/mcp/mcpPresets.ts
+function buildComposioPreset() {
+  return {
+    id: "composio",
+    servers: {
+      composio: {
+        command: "npx",
+        args: ["-y", "composio-mcp@latest"],
+        env: process.env.COMPOSIO_API_KEY ? { COMPOSIO_API_KEY: process.env.COMPOSIO_API_KEY } : {},
+        enabled: true
+      }
+    },
+    notes: [
+      "Composio Connect \u2014 500+ app integrations (GitHub, Slack, Notion, ...) as MCP tools.",
+      "Set COMPOSIO_API_KEY before applying: export COMPOSIO_API_KEY=<key>",
+      "Connect apps at https://composio.dev \u2014 each connected account becomes a tool.",
+      "The key is stored in mcp.json env, never in argv.",
+      "Kill switch: disable the composio server in mcp.json or ZELARI_MCP=0"
+    ]
+  };
+}
+function buildQwenMmPreset() {
+  const plugin = process.env.QWEN_MM_PLUGIN?.trim() || "qwen-mm-plugins-core";
+  return {
+    id: "qwen-mm-plugins",
+    servers: {
+      "qwen-mm-plugins": {
+        command: "uvx",
+        args: [plugin],
+        env: {
+          ...process.env.DASHSCOPE_API_KEY ? { DASHSCOPE_API_KEY: process.env.DASHSCOPE_API_KEY } : {},
+          ...process.env.SERPER_API_KEY ? { SERPER_API_KEY: process.env.SERPER_API_KEY } : {}
+        },
+        enabled: true
+      }
+    },
+    notes: [
+      "Qwen-MM-Plugins \u2014 multimodal capabilities (core / video-memory / video-edit / blender / freecad) as MCP tools.",
+      "Run the upstream guided installer first: curl -fsSL https://raw.githubusercontent.com/QwenLM/Qwen-MM-Plugins/main/install.sh | bash",
+      "Windows: use WSL2 (Ubuntu); native Windows is not validated upstream.",
+      "Pick a capability: export QWEN_MM_PLUGIN=qwen-mm-plugins-video-memory (default: qwen-mm-plugins-core).",
+      "API keys read at apply time: DASHSCOPE_API_KEY, SERPER_API_KEY (native reading works without them).",
+      "Blender/FreeCAD variants: start the host app before invoking tools.",
+      "Kill switch: disable the qwen-mm-plugins server in mcp.json or ZELARI_MCP=0"
+    ]
+  };
+}
 function listMcpPresetIds() {
-  return Object.keys(PRESETS).filter((k) => k === "cua");
+  return Object.keys(PRESETS).filter(
+    (k) => k === "cua" || k === "composio" || k === "qwen-mm-plugins"
+  );
 }
 function getMcpPreset(id) {
-  return PRESETS[id.trim().toLowerCase()] ?? null;
+  const factory = PRESETS[id.trim().toLowerCase()];
+  return factory ? factory() : null;
 }
 function applyMcpPreset(opts) {
   const preset = getMcpPreset(opts.presetId);
@@ -34371,8 +34745,11 @@ var init_mcpPresets = __esm({
       ]
     };
     PRESETS = {
-      cua: CUA_DRIVER_PRESET,
-      "cua-driver": CUA_DRIVER_PRESET
+      cua: () => CUA_DRIVER_PRESET,
+      "cua-driver": () => CUA_DRIVER_PRESET,
+      composio: buildComposioPreset,
+      "qwen-mm-plugins": buildQwenMmPreset,
+      "qwen-mm": buildQwenMmPreset
     };
   }
 });
@@ -34635,10 +35012,10 @@ import { createHash as createHash5 } from "node:crypto";
 import { join as join26 } from "node:path";
 import { readFile as readFile3 } from "node:fs/promises";
 async function readPackageJson2(projectRoot) {
-  const path47 = join26(projectRoot, "package.json");
-  if (!existsSync30(path47)) return null;
+  const path48 = join26(projectRoot, "package.json");
+  if (!existsSync30(path48)) return null;
   try {
-    return JSON.parse(await readFile3(path47, "utf8"));
+    return JSON.parse(await readFile3(path48, "utf8"));
   } catch {
     return null;
   }
@@ -34720,9 +35097,9 @@ async function genBuild(ctx) {
   ].join("\n");
 }
 async function genOpenQuestions(ctx) {
-  const path47 = join26(ctx.rootDir, "risks.md");
-  if (!existsSync30(path47)) return "_No open questions._";
-  const content = readFileSync25(path47, "utf8");
+  const path48 = join26(ctx.rootDir, "risks.md");
+  if (!existsSync30(path48)) return "_No open questions._";
+  const content = readFileSync25(path48, "utf8");
   const lines = content.split("\n");
   const questions = [];
   let currentTitle = "";
@@ -34967,7 +35344,7 @@ var init_completeDesign = __esm({
 });
 
 // src/cli/workspace/projectSmoke.ts
-import { spawn as spawn8 } from "node:child_process";
+import { spawn as spawn9 } from "node:child_process";
 import { existsSync as existsSync31, readFileSync as readFileSync26 } from "node:fs";
 import { join as join27 } from "node:path";
 function pickSmokeScript(scripts) {
@@ -34997,12 +35374,12 @@ async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS) {
     return { ran: false, reason: "no typecheck/test/build script (skipped)" };
   }
   return await new Promise((resolveRun) => {
-    const child = process.platform === "win32" ? spawn8(buildCmdLine("npm.cmd", ["run", script]), {
+    const child = process.platform === "win32" ? spawn9(buildCmdLine("npm.cmd", ["run", script]), {
       cwd: projectRoot,
       stdio: ["ignore", "pipe", "pipe"],
       env: process.env,
       shell: true
-    }) : spawn8("npm", ["run", script], {
+    }) : spawn9("npm", ["run", script], {
       cwd: projectRoot,
       stdio: ["ignore", "pipe", "pipe"],
       env: process.env
@@ -35074,7 +35451,7 @@ __export(postCouncilHook_exports, {
   runImplementationVerificationHook: () => runImplementationVerificationHook,
   runPostCouncilHook: () => runPostCouncilHook
 });
-import { spawn as spawn9 } from "node:child_process";
+import { spawn as spawn10 } from "node:child_process";
 import { existsSync as existsSync32, readFileSync as readFileSync27 } from "node:fs";
 import { join as join28 } from "node:path";
 async function runCompleteDesignPostProcessor(ctx, options) {
@@ -35123,7 +35500,7 @@ async function runCompleteDesignPostProcessor(ctx, options) {
     }
   }
   return await new Promise((resolveRun) => {
-    const child = spawn9(process.execPath, [scriptPath], {
+    const child = spawn10(process.execPath, [scriptPath], {
       cwd: ctx.projectRoot,
       stdio: ["ignore", "pipe", "pipe"],
       env: process.env
@@ -35289,8 +35666,8 @@ async function runPostCouncilHook(ctx, options) {
           sources: scope.sources
         } : void 0
       });
-      const path47 = writeCouncilCompletion(ctx.rootDir, completion);
-      completionHook = { ran: true, path: path47, completion };
+      const path48 = writeCouncilCompletion(ctx.rootDir, completion);
+      completionHook = { ran: true, path: path48, completion };
     } catch (err) {
       completionHook = {
         ran: true,
@@ -36502,6 +36879,307 @@ var init_missionSlice = __esm({
   }
 });
 
+// src/cli/mcp/permissionBroker.ts
+var permissionBroker_exports = {};
+__export(permissionBroker_exports, {
+  PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS: () => PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS,
+  PERMISSION_BROKER_DEFAULT_TIMEOUT_MS: () => PERMISSION_BROKER_DEFAULT_TIMEOUT_MS,
+  requestBrokerAsk: () => requestBrokerAsk,
+  startPermissionBroker: () => startPermissionBroker
+});
+import { connect, createServer } from "node:net";
+import { unlink } from "node:fs";
+function sendJson(socket, obj) {
+  if (socket.destroyed) return;
+  socket.write(JSON.stringify(obj) + "\n");
+}
+function safeSocketPath(socketPath) {
+  return socketPath.trim();
+}
+function startPermissionBroker(socketPath, handlers, opts) {
+  const path48 = safeSocketPath(socketPath);
+  const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
+  const sockets = /* @__PURE__ */ new Set();
+  const server = createServer((socket) => {
+    socket.setEncoding("utf8");
+    sockets.add(socket);
+    socket.on("close", () => sockets.delete(socket));
+    socket.on("error", () => {
+    });
+    let buffer = "";
+    socket.on("data", (chunk) => {
+      buffer += chunk;
+      let nl;
+      while ((nl = buffer.indexOf("\n")) >= 0) {
+        const line = buffer.slice(0, nl).trim();
+        buffer = buffer.slice(nl + 1);
+        if (!line) continue;
+        void handleLine(socket, line);
+      }
+    });
+  });
+  server.on("error", () => {
+  });
+  async function handleLine(socket, line) {
+    let msg;
+    try {
+      msg = JSON.parse(line);
+    } catch {
+      return;
+    }
+    if (!msg || msg.t !== "ask" || typeof msg.id !== "string" || !msg.id) return;
+    const id = msg.id;
+    let settled = false;
+    let timer;
+    const reply = (answer) => {
+      if (settled) return;
+      settled = true;
+      if (timer) clearTimeout(timer);
+      sendJson(socket, { t: "answer", id, ...answer });
+    };
+    timer = setTimeout(() => {
+      reply({
+        behavior: "deny",
+        message: `[zelari] permission broker timed out after ${requestTimeoutMs}ms`
+      });
+    }, requestTimeoutMs);
+    if (typeof timer.unref === "function") timer.unref();
+    try {
+      if (msg.kind === "question") {
+        if (!handlers.onQuestion) {
+          reply({
+            behavior: "deny",
+            message: "[zelari] no interactive answer available (question handler missing)"
+          });
+          return;
+        }
+        const answer2 = await handlers.onQuestion({
+          id,
+          question: msg.question ?? "",
+          choices: msg.choices,
+          context: msg.context
+        });
+        if (answer2 == null) {
+          reply({
+            behavior: "deny",
+            message: "[zelari] question cancelled (no answer)"
+          });
+          return;
+        }
+        if (answer2.behavior === "deny") {
+          reply({
+            behavior: "deny",
+            message: answer2.message ?? "[zelari] question denied by handler"
+          });
+          return;
+        }
+        reply({ behavior: "allow", answer: answer2.answer ?? "" });
+        return;
+      }
+      const answer = handlers.onPermission ? await handlers.onPermission({
+        id,
+        tool: msg.tool ?? "unknown",
+        input: msg.input,
+        toolUseId: msg.toolUseId,
+        suggestions: msg.suggestions
+      }) : {
+        behavior: "deny",
+        message: "[zelari] permission broker has no approval handler"
+      };
+      reply(answer);
+    } catch (err) {
+      reply({
+        behavior: "deny",
+        message: `[zelari] permission broker error: ${err instanceof Error ? err.message : String(err)}`
+      });
+    }
+  }
+  return new Promise((resolve3, reject) => {
+    const onError = (err) => reject(err);
+    server.once("error", onError);
+    server.listen(path48, () => {
+      server.removeListener("error", onError);
+      resolve3({
+        socketPath: path48,
+        stop: () => new Promise((res) => {
+          for (const s of sockets) s.destroy();
+          sockets.clear();
+          const closeAll = server.closeAllConnections;
+          if (typeof closeAll === "function") closeAll.call(server);
+          let done = false;
+          const finish = () => {
+            if (done) return;
+            done = true;
+            if (process.platform !== "win32") {
+              unlink(path48, () => res());
+            } else {
+              res();
+            }
+          };
+          server.close(() => finish());
+          setTimeout(finish, 1e3).unref?.();
+        })
+      });
+    });
+  });
+}
+function requestBrokerAsk(socketPath, ask, opts) {
+  const path48 = safeSocketPath(socketPath);
+  const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
+  const connectTimeoutMs = opts?.connectTimeoutMs ?? PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS;
+  return new Promise((resolve3, reject) => {
+    const socket = connect(path48);
+    let buffer = "";
+    let settled = false;
+    const settle = (fn) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(connectTimer);
+      clearTimeout(requestTimer);
+      socket.destroy();
+      fn();
+    };
+    const connectTimer = setTimeout(() => {
+      settle(
+        () => reject(
+          new Error(
+            `permission broker unavailable at "${path48}" (connect timed out after ${connectTimeoutMs}ms)`
+          )
+        )
+      );
+    }, connectTimeoutMs);
+    const requestTimer = setTimeout(() => {
+      settle(
+        () => reject(
+          new Error(
+            `permission broker timed out after ${requestTimeoutMs}ms waiting for an answer`
+          )
+        )
+      );
+    }, requestTimeoutMs);
+    socket.setEncoding("utf8");
+    socket.on("connect", () => clearTimeout(connectTimer));
+    socket.on("error", (err) => settle(() => reject(err)));
+    socket.on("close", () => {
+      settle(
+        () => reject(new Error("permission broker closed the connection without an answer"))
+      );
+    });
+    socket.on("data", (chunk) => {
+      buffer += chunk;
+      let nl;
+      while ((nl = buffer.indexOf("\n")) >= 0) {
+        const line = buffer.slice(0, nl).trim();
+        buffer = buffer.slice(nl + 1);
+        if (!line) continue;
+        let msg;
+        try {
+          msg = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        if (msg?.t === "answer" && msg.id === ask.id) {
+          const { t: _t, id: _id, ...answer } = msg;
+          settle(() => resolve3(answer));
+          return;
+        }
+      }
+    });
+    sendJson(socket, ask);
+  });
+}
+var PERMISSION_BROKER_DEFAULT_TIMEOUT_MS, PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS;
+var init_permissionBroker = __esm({
+  "src/cli/mcp/permissionBroker.ts"() {
+    "use strict";
+    PERMISSION_BROKER_DEFAULT_TIMEOUT_MS = 6e4;
+    PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS = 2e3;
+  }
+});
+
+// src/cli/mcp/brokerHandlers.ts
+var brokerHandlers_exports = {};
+__export(brokerHandlers_exports, {
+  createBrokerPermissionHandler: () => createBrokerPermissionHandler,
+  createBrokerQuestionHandler: () => createBrokerQuestionHandler,
+  inferPermissionCategories: () => inferPermissionCategories
+});
+function inferPermissionCategories(toolName, input) {
+  const cats = /* @__PURE__ */ new Set();
+  const name = toolName.toLowerCase();
+  const obj = input && typeof input === "object" ? input : {};
+  if (/bash|shell|exec|command|run|npm|npx|yarn|pnpm|git|deno|bun|make/.test(name)) {
+    cats.add("execute");
+  }
+  if (typeof obj.file_path === "string" || typeof obj.path === "string" || typeof obj.file === "string" || typeof obj.destination === "string" || typeof obj.repo === "string" || typeof obj.target === "string") {
+    cats.add("write");
+  }
+  if (typeof obj.url === "string" || typeof obj.endpoint === "string" || typeof obj.host === "string" || /fetch|http|web|network|request/.test(name)) {
+    cats.add("network");
+  }
+  if (cats.size === 0) {
+    cats.add("execute");
+    cats.add("network");
+  }
+  return [...cats];
+}
+function createBrokerPermissionHandler(opts) {
+  const policy = opts.policy ?? defaultPermissionPolicy();
+  return async (req) => {
+    const categories = inferPermissionCategories(req.tool, req.input);
+    const decision = resolveToolPermission(req.tool, categories, policy);
+    if (decision.action === "allow") {
+      const granted = isSessionGranted(
+        req.tool,
+        categories.length ? categories : ["execute"]
+      );
+      return granted ? { behavior: "allow", always: true } : { behavior: "allow" };
+    }
+    if (decision.action === "deny") {
+      return { behavior: "deny", message: decision.reason };
+    }
+    if (!opts.onPermissionAsk) {
+      return {
+        behavior: "deny",
+        message: `[zelari] no interactive approval available for "${req.tool}" (set ZELARI_AUTO=1 to auto-allow).`
+      };
+    }
+    const ok = await opts.onPermissionAsk({
+      toolName: req.tool,
+      reason: decision.reason,
+      categories,
+      args: req.input
+    });
+    if (!ok) {
+      return { behavior: "deny", message: "[zelari] denied by user" };
+    }
+    if (isSessionGranted(req.tool, categories.length ? categories : ["execute"])) {
+      return { behavior: "allow", always: true };
+    }
+    return { behavior: "allow" };
+  };
+}
+function createBrokerQuestionHandler(opts) {
+  return async (req) => {
+    if (!opts.onQuestion) return null;
+    const answer = await opts.onQuestion({
+      question: req.question,
+      choices: req.choices,
+      context: req.context
+    });
+    if (answer == null || !String(answer).trim()) {
+      return { behavior: "deny", message: "[zelari] question cancelled" };
+    }
+    return { behavior: "allow", answer: String(answer).trim() };
+  };
+}
+var init_brokerHandlers = __esm({
+  "src/cli/mcp/brokerHandlers.ts"() {
+    "use strict";
+    init_toolPermissions();
+  }
+});
+
 // src/cli/kraken/planner.ts
 var planner_exports = {};
 __export(planner_exports, {
@@ -37208,6 +37886,230 @@ var init_tentacle = __esm({
   }
 });
 
+// src/cli/kraken/workbench.ts
+import { promises as fs20 } from "node:fs";
+import path35 from "node:path";
+function isWorkbenchEnabled(env = process.env) {
+  const v = (env.ZELARI_KRAKEN_WORKBENCH ?? "1").trim().toLowerCase();
+  if (v === "0" || v === "false" || v === "no" || v === "off") return false;
+  return true;
+}
+function workbenchPath(cwd, graphId) {
+  return path35.join(cwd, ".zelari", "radio", `workbench-${graphId}.md`);
+}
+function countByStatus2(nodes) {
+  const out = { pending: 0, running: 0, done: 0, error: 0, skipped: 0 };
+  for (const n of nodes) out[n.status] += 1;
+  return out;
+}
+function statusEmoji(s) {
+  switch (s) {
+    case "pending":
+      return "\u25CB";
+    case "running":
+      return "\u2191";
+    case "done":
+      return "\u2713";
+    case "error":
+      return "\u2717";
+    case "skipped":
+      return "\u2013";
+  }
+}
+function formatMs(ms) {
+  if (ms < 1e3) return `${ms}ms`;
+  if (ms < 6e4) return `${(ms / 1e3).toFixed(1)}s`;
+  return `${Math.floor(ms / 6e4)}m ${Math.floor(ms % 6e4 / 1e3)}s`;
+}
+function formatElapsed(ms) {
+  const totalSec = Math.max(0, Math.floor(ms / 1e3));
+  const hh = String(Math.floor(totalSec / 3600)).padStart(2, "0");
+  const mm = String(Math.floor(totalSec % 3600 / 60)).padStart(2, "0");
+  const ss = String(totalSec % 60).padStart(2, "0");
+  return `${hh}:${mm}:${ss}`;
+}
+var DEBOUNCE_DEFAULT_MS, MAX_EVENTS, MAX_NODES_IN_TABLE, WorkbenchWriter;
+var init_workbench = __esm({
+  "src/cli/kraken/workbench.ts"() {
+    "use strict";
+    init_dist();
+    DEBOUNCE_DEFAULT_MS = 500;
+    MAX_EVENTS = 30;
+    MAX_NODES_IN_TABLE = 200;
+    WorkbenchWriter = class {
+      cwd;
+      graphId;
+      goal;
+      enabled;
+      debounceMs;
+      startedAt;
+      nodesById = /* @__PURE__ */ new Map();
+      events = [];
+      dirty = true;
+      timer = null;
+      lastWrite = null;
+      constructor(opts) {
+        this.cwd = opts.cwd;
+        this.graphId = opts.graphId;
+        this.goal = opts.goal;
+        this.enabled = opts.enabled ?? isWorkbenchEnabled();
+        this.debounceMs = opts.debounceMs ?? DEBOUNCE_DEFAULT_MS;
+        this.startedAt = (/* @__PURE__ */ new Date()).toISOString();
+      }
+      /** Seed the writer with the planned nodes. Idempotent: later calls
+       *  merge — a node's status is not reset to `pending` if it's already
+       *  `running` / `done` / `error`. */
+      setNodes(nodes) {
+        if (!this.enabled) return;
+        for (const n of nodes) {
+          const existing = this.nodesById.get(n.id);
+          if (!existing) this.nodesById.set(n.id, { ...n });
+          else if (existing.status !== "pending") {
+            this.nodesById.set(n.id, { ...existing, ...n, status: existing.status });
+          } else {
+            this.nodesById.set(n.id, { ...n });
+          }
+        }
+        this.markDirty();
+      }
+      markStart(id, patch = {}) {
+        if (!this.enabled) return;
+        const n = this.nodesById.get(id) ?? { id, kind: "general", label: id, status: "pending" };
+        this.nodesById.set(id, {
+          ...n,
+          ...patch,
+          id,
+          status: "running",
+          startedAt: patch.startedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+        });
+        this.events.push({ ts: (/* @__PURE__ */ new Date()).toISOString(), text: `node_start ${id} ${patch.kind ?? n.kind}` });
+        this.markDirty();
+      }
+      markEnd(id, patch) {
+        if (!this.enabled) return;
+        const n = this.nodesById.get(id);
+        if (!n) return;
+        let verdict;
+        let weaknessScore;
+        if (patch.findings && patch.findings.length > 0) {
+          const parsed = parsePersonaVerdict(patch.findings);
+          verdict = parsed.verdict;
+          weaknessScore = parsed.weaknessScore;
+        }
+        this.nodesById.set(id, {
+          ...n,
+          status: patch.status,
+          ...patch.durationMs !== void 0 ? { durationMs: patch.durationMs } : {},
+          ...patch.error ? { error: patch.error.slice(0, 200) } : {},
+          ...Array.isArray(patch.deps) ? { deps: patch.deps } : {},
+          ...verdict ? { verdict } : {},
+          ...typeof weaknessScore === "number" ? { weaknessScore } : {},
+          ...patch.model ? { model: patch.model } : {},
+          endedAt: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        this.events.push({
+          ts: (/* @__PURE__ */ new Date()).toISOString(),
+          text: `node_end ${id} ${patch.status}${patch.durationMs !== void 0 ? ` (${patch.durationMs}ms)` : ""}${verdict ? ` \xB7 ${verdict}${typeof weaknessScore === "number" ? ` w=${weaknessScore.toFixed(2)}` : ""}` : ""}${patch.error ? ` \u2014 ${patch.error.slice(0, 80)}` : ""}`
+        });
+        this.markDirty();
+      }
+      logEvent(text) {
+        if (!this.enabled) return;
+        this.events.push({ ts: (/* @__PURE__ */ new Date()).toISOString(), text });
+        this.markDirty();
+      }
+      /** Mark "this set of node ids is running in parallel right now". The
+       *  workbench surfaces a "wave" line so a `tail -f` reader can see when
+       *  a new parallel wave starts. */
+      markWave(ids) {
+        if (!this.enabled) return;
+        this.events.push({ ts: (/* @__PURE__ */ new Date()).toISOString(), text: `wave: ${ids.join(", ")}` });
+        this.markDirty();
+      }
+      /** Force a synchronous-style flush. Returns the path written, or null
+       *  when the writer is disabled. */
+      async flush() {
+        if (!this.enabled) return null;
+        if (this.timer) {
+          clearTimeout(this.timer);
+          this.timer = null;
+        }
+        return this.writeNow();
+      }
+      /** Cancel any pending debounced write. The next `flush()` will write. */
+      close() {
+        if (this.timer) {
+          clearTimeout(this.timer);
+          this.timer = null;
+        }
+      }
+      // --- internals ------------------------------------------------------------
+      markDirty() {
+        if (!this.enabled) return;
+        this.dirty = true;
+        if (this.timer) return;
+        this.timer = setTimeout(() => {
+          this.timer = null;
+          void this.writeNow().catch(() => {
+          });
+        }, this.debounceMs);
+      }
+      async writeNow() {
+        if (!this.enabled) return null;
+        if (!this.dirty && this.lastWrite) return this.lastWrite;
+        const out = workbenchPath(this.cwd, this.graphId);
+        await fs20.mkdir(path35.dirname(out), { recursive: true });
+        const body = this.render();
+        const tmp = `${out}.${process.pid}.${Date.now()}.tmp`;
+        await fs20.writeFile(tmp, body, "utf8");
+        await fs20.rename(tmp, out);
+        this.dirty = false;
+        this.lastWrite = Promise.resolve(out);
+        return out;
+      }
+      render() {
+        const counts = countByStatus2([...this.nodesById.values()]);
+        const elapsed = formatElapsed(Date.now() - Date.parse(this.startedAt));
+        const lines = [
+          `# Kraken workbench`,
+          ``,
+          `**Goal:** ${this.goal}`,
+          `**Graph id:** \`${this.graphId}\``,
+          `**Started:** ${this.startedAt} \xB7 **Elapsed:** ${elapsed}`,
+          ``,
+          `## Progress: ${counts.done + counts.skipped}/${this.nodesById.size} \xB7 ${counts.running}\u2191 \xB7 ${counts.error}\u2717`,
+          ``
+        ];
+        lines.push(`## Wave`);
+        lines.push(``);
+        lines.push(`| id | label | kind | deps | scope | status | verdict | weakness | model | duration |`);
+        lines.push(`|----|-------|------|------|-------|--------|---------|----------|-------|----------|`);
+        const sorted = [...this.nodesById.values()].sort((a, b) => a.id.localeCompare(b.id)).slice(0, MAX_NODES_IN_TABLE);
+        for (const n of sorted) {
+          const status = statusEmoji(n.status);
+          const scope = n.scope ? n.scope.join(", ") : "";
+          const dur = n.durationMs != null ? formatMs(n.durationMs) : "";
+          const verdict = n.verdict ?? "";
+          const weakness = typeof n.weaknessScore === "number" ? n.weaknessScore.toFixed(2) : "";
+          const deps = n.deps && n.deps.length > 0 ? n.deps.join(", ") : "";
+          lines.push(`| ${n.id} | ${n.label} | ${n.kind} | ${deps} | ${scope} | ${status} | ${verdict} | ${weakness} | ${n.model ?? ""} | ${dur} |`);
+        }
+        lines.push(``);
+        lines.push(`## Events (latest ${MAX_EVENTS})`);
+        lines.push(``);
+        const tail = this.events.slice(-MAX_EVENTS);
+        if (tail.length === 0) {
+          lines.push(`(no events yet)`);
+        } else {
+          for (const e of tail) lines.push(`- ${e.ts.slice(11, 19)} ${e.text}`);
+        }
+        lines.push(``);
+        return lines.join("\n");
+      }
+    };
+  }
+});
+
 // src/cli/kraken/weaknessMeter.ts
 var weaknessMeter_exports = {};
 __export(weaknessMeter_exports, {
@@ -37353,7 +38255,7 @@ __export(executor_exports, {
   thoroughnessForKind: () => thoroughnessForKind
 });
 import { existsSync as existsSync34 } from "node:fs";
-import path35 from "node:path";
+import path36 from "node:path";
 function resolveMaxParallel(env = process.env) {
   const raw = env.ZELARI_KRAKEN_MAX_PARALLEL;
   if (raw === void 0 || raw === "") return DEFAULT_MAX_PARALLEL;
@@ -37411,7 +38313,7 @@ function isWorldModelGateEnabled(cwd, env = process.env, checksExists = defaultC
 }
 function defaultChecksExists(cwd) {
   try {
-    return existsSync34(path35.join(cwd, ".zelari", "world", "checks.json"));
+    return existsSync34(path36.join(cwd, ".zelari", "world", "checks.json"));
   } catch {
     return false;
   }
@@ -37471,6 +38373,7 @@ var init_executor = __esm({
     init_worldModel();
     init_graphStatus();
     init_graphMemory();
+    init_workbench();
     DEFAULT_MAX_PARALLEL = 12;
     DEFAULT_FIX_BUDGET = 3;
     DEFAULT_MAX_REVIEW_ROUNDS = 1;
@@ -37498,6 +38401,8 @@ var init_executor = __esm({
       runTentacleFn;
       mergeFn;
       backtestFn;
+      /** Live workbench writer for this run (created once the graph starts). */
+      wb = null;
       nodeRunState = /* @__PURE__ */ new Map();
       /** fix node id → id of the failed node it was spawned to repair. */
       repairs = /* @__PURE__ */ new Map();
@@ -37546,6 +38451,44 @@ var init_executor = __esm({
         this.mergeFn = opts.mergeFn ?? mergeKrakenWorktree;
         this.backtestFn = opts.backtestFn ?? runBacktest;
       }
+      /** Map a graph node onto the workbench's node shape. */
+      toWorkbenchNode(n) {
+        return {
+          id: n.id,
+          kind: n.kind,
+          label: n.label,
+          status: n.status,
+          ...n.scope && n.scope.length > 0 ? { scope: n.scope } : {},
+          ...n.deps.length > 0 ? { deps: n.deps } : {}
+        };
+      }
+      /**
+       * Create (once) and seed the live workbench writer for this graph. This is
+       * what makes the `.zelari/radio/workbench-<graphId>.md` file exist at all —
+       * the desktop graph/tail tabs read that file, and before this wiring
+       * nothing in the production flow ever constructed the writer, so the tabs
+       * stayed empty no matter how much the graph ran.
+       */
+      initWorkbench(graph) {
+        if (this.wb) return;
+        this.wb = new WorkbenchWriter({
+          cwd: this.parentCwd,
+          graphId: graph.id,
+          goal: this.goal ?? graph.id
+        });
+        this.wb.setNodes([...graph.nodes.values()].map((n) => this.toWorkbenchNode(n)));
+        this.wb.logEvent(`graph_start ${graph.id} (${graph.nodes.size} nodes)`);
+      }
+      /** Mark every skipped node in the workbench. Cheap and idempotent enough
+       *  to call after each cascade-skip pass. */
+      syncWorkbenchSkipped(graph) {
+        for (const n of graph.nodes.values()) {
+          if (n.status === "skipped") this.wb?.markEnd(n.id, { status: "skipped" });
+        }
+      }
+      isReviewerKind(kind) {
+        return kind === "verify" || kind === "spec" || kind === "conformance";
+      }
       /** Execute the graph in place (mutates node statuses) until it settles. */
       async execute(graph) {
         if (this.fixBudgetOption === void 0) {
@@ -37581,6 +38524,7 @@ var init_executor = __esm({
         let iterations = 0;
         const inFlight = /* @__PURE__ */ new Map();
         startKrakenGraphLive(graph);
+        this.initWorkbench(graph);
         while (!isSettled(graph)) {
           iterations += 1;
           if (iterations > maxIterations) {
@@ -37596,13 +38540,23 @@ var init_executor = __esm({
           if (admitted.length > 0) {
             for (const node of admitted) node.status = "running";
             updateKrakenGraphLive(graph);
+            for (const node of admitted) {
+              this.wb?.markStart(node.id, {
+                kind: node.kind,
+                label: node.label,
+                ...node.scope && node.scope.length > 0 ? { scope: node.scope } : {},
+                ...node.deps.length > 0 ? { deps: node.deps } : {}
+              });
+            }
+            if (admitted.length > 0) this.wb?.markWave(admitted.map((n) => n.id));
             for (const node of admitted) inFlight.set(node.id, this.runNodeSafely(node, graph));
           }
           if (inFlight.size === 0) {
-            if (!this.skipBlockedNodes(graph)) {
-              break;
+            if (this.skipBlockedNodes(graph)) {
+              this.syncWorkbenchSkipped(graph);
+              continue;
             }
-            continue;
+            break;
           }
           const { id, res } = await Promise.race(inFlight.values());
           inFlight.delete(id);
@@ -37621,6 +38575,7 @@ var init_executor = __esm({
           for (const n of graph.nodes.values()) {
             if (n.status === "pending") n.status = "skipped";
           }
+          this.syncWorkbenchSkipped(graph);
         }
         let backtest;
         const converged = !this.aborted && isConverged(graph);
@@ -37642,6 +38597,11 @@ var init_executor = __esm({
           });
         }
         endKrakenGraphLive(graph, converged);
+        this.wb?.logEvent(
+          converged ? "graph_converged" : `graph_failed: ${this.aborted ? "cancelled" : failedNodeIds(graph).join(", ") || "none"}`
+        );
+        await this.wb?.flush();
+        this.wb?.close();
         await saveGraphSnapshot(
           this.parentCwd,
           toGraphSnapshot(graph, {
@@ -37934,6 +38894,13 @@ ${upstream}` : node.prompt,
           node.status = "done";
           node.result = res.result;
           this.radio("node_end", { description: node.label, agent: node.kind, ok: true });
+          this.wb?.markEnd(node.id, {
+            status: "done",
+            durationMs: this.durationsMs.get(node.id),
+            // Reviewers surface verdict + Bennett weakness; writers don't.
+            ...this.isReviewerKind(node.kind) && typeof node.result === "string" && node.result.length > 0 ? { findings: node.result } : {},
+            ...res.model && res.model !== "n/a" ? { model: res.model } : {}
+          });
           this.reconcileRepairedNode(graph, node);
           if (node.kind === "verify") this.applyVerifyVerdict(graph, node);
           return;
@@ -37947,6 +38914,11 @@ ${upstream}` : node.prompt,
             detail: res.error,
             ok: false
           });
+          this.wb?.markEnd(node.id, {
+            status: "error",
+            error: res.error,
+            durationMs: this.durationsMs.get(node.id)
+          });
           return;
         }
         if (res.cancelled === false) {
@@ -37957,6 +38929,11 @@ ${upstream}` : node.prompt,
             detail: res.error,
             ok: false
           });
+          this.wb?.markEnd(node.id, {
+            status: "error",
+            error: res.error,
+            durationMs: this.durationsMs.get(node.id)
+          });
           return;
         }
         if (node.retryCount < node.maxRetries) {
@@ -37968,6 +38945,7 @@ ${upstream}` : node.prompt,
             detail: `retry ${node.retryCount}/${node.maxRetries}: ${res.error}`,
             ok: false
           });
+          this.wb?.markEnd(node.id, { status: "pending" });
           return;
         }
         if (this.fixBudgetRemaining > 0 && node.kind !== "fix") {
@@ -37980,6 +38958,11 @@ ${upstream}` : node.prompt,
             detail: `spawned to address failure of "${node.label}": ${res.error}`,
             ok: false
           });
+          this.wb?.markEnd(node.id, {
+            status: "error",
+            error: res.error,
+            durationMs: this.durationsMs.get(node.id)
+          });
           node.status = "error";
           return;
         }
@@ -37990,6 +38973,11 @@ ${upstream}` : node.prompt,
           detail: res.error,
           ok: false
         });
+        this.wb?.markEnd(node.id, {
+          status: "error",
+          error: res.error,
+          durationMs: this.durationsMs.get(node.id)
+        });
       }
       /**
        * A `fix` node just completed the work its failed predecessor could not.
@@ -38019,6 +39007,10 @@ ${upstream}` : node.prompt,
           detail: `repaired by ${fixNode.id}`,
           ok: true
         });
+        this.wb?.markEnd(failed.id, {
+          status: "done",
+          durationMs: this.durationsMs.get(failed.id)
+        });
       }
       /**
        * Act on what a completed `verify` node concluded.
@@ -38153,6 +39145,7 @@ ${findings || "(the reviewer reported FAIL without detail)"}`,
           maxRetries: verify.maxRetries
         };
         graph.nodes.set(reVerifyId, reVerifyNode);
+        this.wb?.setNodes([this.toWorkbenchNode(reworkNode), this.toWorkbenchNode(reVerifyNode)]);
         for (const other of graph.nodes.values()) {
           if (other.id === reworkId || other.id === reVerifyId) continue;
           if (other.deps.includes(verify.id)) {
@@ -38192,6 +39185,7 @@ ${failed.error ?? "unknown error"}`,
           // no further retries — one fix attempt per failed node in v1
         };
         graph.nodes.set(fixId, fixNode);
+        this.wb?.setNodes([this.toWorkbenchNode(fixNode)]);
         this.repairs.set(fixId, failed.id);
         for (const other of graph.nodes.values()) {
           if (other.id === fixId) continue;
@@ -38658,10 +39652,10 @@ var init_prereqChecks = __esm({
 
 // src/cli/plugins/prefs.ts
 import { existsSync as existsSync36, readFileSync as readFileSync29, writeFileSync as writeFileSync18, mkdirSync as mkdirSync15 } from "node:fs";
-import path38 from "node:path";
+import path39 from "node:path";
 import os9 from "node:os";
 function getPluginPrefsPath() {
-  return process.env.ZELARI_PLUGINS_PREFS_FILE ?? path38.join(os9.homedir(), ".tmp", "zelari-code", "plugins.json");
+  return process.env.ZELARI_PLUGINS_PREFS_FILE ?? path39.join(os9.homedir(), ".tmp", "zelari-code", "plugins.json");
 }
 function getPluginPrefs() {
   const file2 = getPluginPrefsPath();
@@ -38682,7 +39676,7 @@ function getPluginPrefs() {
 }
 function writePluginPrefs(prefs) {
   const file2 = getPluginPrefsPath();
-  mkdirSync15(path38.dirname(file2), { recursive: true });
+  mkdirSync15(path39.dirname(file2), { recursive: true });
   writeFileSync18(file2, JSON.stringify(prefs, null, 2), {
     encoding: "utf-8",
     mode: 384
@@ -38719,7 +39713,7 @@ __export(registry_exports, {
   isBinaryOnPath: () => isBinaryOnPath
 });
 import { existsSync as existsSync37 } from "node:fs";
-import path39 from "node:path";
+import path40 from "node:path";
 function detectLocalBin(bin) {
   return (cwd) => {
     try {
@@ -38737,7 +39731,7 @@ function isBinaryOnPath(bin, opts = {}) {
   const platform = opts.platform ?? process.platform;
   const exists = opts.exists ?? existsSync37;
   const pathEnv = opts.pathEnv ?? process.env.PATH ?? "";
-  const pathMod = platform === "win32" ? path39.win32 : path39.posix;
+  const pathMod = platform === "win32" ? path40.win32 : path40.posix;
   const sep2 = platform === "win32" ? ";" : ":";
   const dirs = pathEnv.split(sep2).filter((d) => d.length > 0);
   const candidates = [bin];
@@ -38875,7 +39869,11 @@ __export(atMentions_exports, {
   hasAtMentions: () => hasAtMentions
 });
 import { existsSync as existsSync40, readFileSync as readFileSync31, statSync as statSync6 } from "node:fs";
-import { isAbsolute as isAbsolute2, relative as relative3, resolve, sep } from "node:path";
+import { basename as basename3, isAbsolute as isAbsolute2, relative as relative3, resolve, sep } from "node:path";
+function isImagePath(abs) {
+  const ext = abs.split(".").pop()?.toLowerCase() ?? "";
+  return ext in IMAGE_MIME_BY_EXT;
+}
 function isProbablyText(name, head) {
   if (/\.(txt|md|markdown|json|jsonc|ts|tsx|js|jsx|mjs|cjs|css|scss|html|htm|xml|yml|yaml|toml|ini|cfg|conf|rs|go|py|java|kt|swift|c|cc|cpp|h|hpp|cs|rb|php|sh|bash|zsh|ps1|sql|graphql|env|gitignore|dockerfile|makefile|cmake|lock|svg)$/i.test(
     name
@@ -38893,32 +39891,29 @@ function underRoot(abs, root) {
 function extractAtMentions(text) {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
-  AT_PATH_RE.lastIndex = 0;
-  let m;
-  while ((m = AT_PATH_RE.exec(text)) !== null) {
-    const token = (m[2] ?? "").trim();
-    if (!token || token.includes("@")) continue;
-    const key = token.replace(/\\/g, "/").toLowerCase();
-    if (seen.has(key)) continue;
-    seen.add(key);
-    out.push(token);
-  }
+  const collect = (re) => {
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+      const token = (m[2] ?? "").trim().replace(/^@/, "");
+      if (!token || token.includes("@")) continue;
+      if (re === AT_PATH_RE && /^[a-zA-Z]$/.test(token) && text.charAt(m.index + m[0].length) === ":") {
+        continue;
+      }
+      const key = token.replace(/\\/g, "/").toLowerCase();
+      if (seen.has(key)) continue;
+      seen.add(key);
+      out.push(token);
+    }
+  };
+  collect(AT_PATH_RE);
+  collect(AT_WIN_ABS_RE);
+  collect(AT_POSIX_ABS_RE);
   return out;
 }
 function resolveMention(token, cwd) {
   const abs = isAbsolute2(token) ? resolve(token) : resolve(cwd, token);
-  if (!underRoot(abs, cwd) && !isAbsolute2(token)) {
-    if (!underRoot(abs, cwd)) {
-      return {
-        raw: token,
-        path: token,
-        absolute: abs,
-        isDir: false,
-        note: "outside project root \u2014 skipped"
-      };
-    }
-  }
-  if (isAbsolute2(token) && !underRoot(abs, cwd)) {
+  if (!underRoot(abs, cwd) && !isImagePath(abs)) {
     return {
       raw: token,
       path: token,
@@ -38967,6 +39962,28 @@ function resolveMention(token, cwd) {
       note: `too large (${Math.round(st.size / 1024)} KB) \u2014 path only`
     };
   }
+  const ext = abs.split(".").pop()?.toLowerCase() ?? "";
+  const mime = IMAGE_MIME_BY_EXT[ext];
+  if (mime) {
+    if (st.size > ATTACH_IMAGE_MAX_BYTES) {
+      return {
+        raw: token,
+        path: rel2,
+        absolute: abs,
+        isDir: false,
+        note: `image too large (${Math.round(st.size / 1024)} KB) \u2014 path only`
+      };
+    }
+    const dataBase64 = readFileSync31(abs).toString("base64");
+    return {
+      raw: token,
+      path: rel2,
+      absolute: abs,
+      isDir: false,
+      text: `[Immagine: ${rel2}]`,
+      image: { mime, dataBase64, alt: basename3(abs) }
+    };
+  }
   try {
     const buf = readFileSync31(abs);
     const head = buf.subarray(0, 800).toString("utf8");
@@ -39012,6 +40029,10 @@ function expandAtMentions(userText, cwd = process.cwd()) {
   }
   const blocks = hits.map((h) => {
     const label = h.path || h.raw;
+    if (h.image) {
+      const kb = Math.round(h.image.dataBase64.length * 3 / 4 / 1024);
+      return `--- Image: ${label} (${h.image.mime}, ~${kb} KB) ---`;
+    }
     if (h.text != null && h.text.length > 0) {
       return `--- File: ${label} ---
 ${h.text}
@@ -39029,13 +40050,28 @@ ${blocks.join("\n\n")}`;
 function hasAtMentions(text) {
   return extractAtMentions(text).length > 0;
 }
-var ATTACH_TEXT_MAX, ATTACH_FILE_MAX_BYTES, AT_PATH_RE;
+var ATTACH_TEXT_MAX, ATTACH_FILE_MAX_BYTES, ATTACH_IMAGE_MAX_BYTES, IMAGE_MIME_BY_EXT, AT_PATH_RE, BS_CHAR, AT_WIN_ABS_RE, AT_POSIX_ABS_RE;
 var init_atMentions = __esm({
   "src/cli/atMentions.ts"() {
     "use strict";
     ATTACH_TEXT_MAX = 48e3;
     ATTACH_FILE_MAX_BYTES = 512e3;
+    ATTACH_IMAGE_MAX_BYTES = 8 * 1024 * 1024;
+    IMAGE_MIME_BY_EXT = {
+      jpg: "image/jpeg",
+      jpeg: "image/jpeg",
+      png: "image/png",
+      gif: "image/gif",
+      webp: "image/webp",
+      bmp: "image/bmp"
+    };
     AT_PATH_RE = /(^|[\s([{])@((?:\.{1,2}\/)?[A-Za-z0-9_.+-]+(?:[\\/][A-Za-z0-9_.+-]+)*)/g;
+    BS_CHAR = String.fromCharCode(92);
+    AT_WIN_ABS_RE = new RegExp(
+      "(^|[" + BS_CHAR + "s([{])(@[A-Za-z]:[" + BS_CHAR + BS_CHAR + "/][^" + BS_CHAR + "s@]+)",
+      "g"
+    );
+    AT_POSIX_ABS_RE = /(^|[\s([{])@(\/[^\s@]+)/g;
   }
 });
 
@@ -39046,10 +40082,10 @@ __export(triggerLock_exports, {
   lockPath: () => lockPath,
   releaseLock: () => releaseLock
 });
-import { promises as fs27 } from "node:fs";
-import * as path44 from "node:path";
+import { promises as fs28 } from "node:fs";
+import * as path45 from "node:path";
 function lockPath(projectRoot) {
-  return path44.join(projectRoot, ".zelari", "trigger.lock");
+  return path45.join(projectRoot, ".zelari", "trigger.lock");
 }
 function isPidAlive(pid) {
   try {
@@ -39062,10 +40098,10 @@ function isPidAlive(pid) {
 }
 async function acquireLock(projectRoot, now = () => /* @__PURE__ */ new Date()) {
   const lp = lockPath(projectRoot);
-  const dir = path44.dirname(lp);
-  await fs27.mkdir(dir, { recursive: true });
+  const dir = path45.dirname(lp);
+  await fs28.mkdir(dir, { recursive: true });
   try {
-    const raw = await fs27.readFile(lp, "utf8");
+    const raw = await fs28.readFile(lp, "utf8");
     const existing = JSON.parse(raw);
     if (existing.pid && isPidAlive(existing.pid)) {
       return { acquired: false, heldBy: existing.pid, lockPath: lp };
@@ -39076,13 +40112,13 @@ async function acquireLock(projectRoot, now = () => /* @__PURE__ */ new Date())
     pid: process.pid,
     acquiredAt: now().toISOString()
   };
-  await fs27.writeFile(lp, JSON.stringify(payload, null, 2) + "\n", "utf8");
+  await fs28.writeFile(lp, JSON.stringify(payload, null, 2) + "\n", "utf8");
   return { acquired: true, lockPath: lp };
 }
 async function releaseLock(projectRoot) {
   const lp = lockPath(projectRoot);
   try {
-    await fs27.unlink(lp);
+    await fs28.unlink(lp);
   } catch {
   }
 }
@@ -39344,6 +40380,272 @@ var init_desktopConfig = __esm({
   }
 });
 
+// src/cli/mcp/mcpPermissionServer.ts
+import { createInterface } from "node:readline";
+import { randomUUID as randomUUID7 } from "node:crypto";
+function startPermissionMcpServer(opts) {
+  const socketPath = opts.socketPath.trim();
+  const requestTimeoutMs = opts.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
+  const input = opts.input ?? process.stdin;
+  const output = opts.output ?? process.stdout;
+  input.on?.("error", () => {
+  });
+  output.on?.("error", () => {
+  });
+  let closedResolve = () => {
+  };
+  const closed = new Promise((resolve3) => {
+    closedResolve = resolve3;
+  });
+  let stopped = false;
+  const send = (obj) => {
+    if (stopped || output.destroyed) return;
+    output.write(JSON.stringify(obj) + "\n");
+  };
+  const rl = createInterface({ input, crlfDelay: Infinity });
+  rl.on("line", (line) => {
+    const text = line.trim();
+    if (!text) return;
+    let msg;
+    try {
+      msg = JSON.parse(text);
+    } catch {
+      return;
+    }
+    if (typeof msg.id === "undefined") return;
+    void handleRpc(msg).then((out) => {
+      send({
+        jsonrpc: "2.0",
+        id: msg.id,
+        ...out ?? {}
+      });
+    }).catch((err) => {
+      send({
+        jsonrpc: "2.0",
+        id: msg.id,
+        error: {
+          code: -32603,
+          message: `internal error: ${err instanceof Error ? err.message : String(err)}`
+        }
+      });
+    });
+  });
+  rl.on("close", () => {
+    closedResolve();
+  });
+  async function handleRpc(msg) {
+    const method = msg.method ?? "";
+    if (typeof msg.id === "undefined") {
+      return { result: null };
+    }
+    if (method === "initialize") {
+      const requested = typeof msg.params?.protocolVersion === "string" ? msg.params.protocolVersion : PERMISSION_MCP_PROTOCOL_VERSION;
+      return {
+        result: {
+          protocolVersion: requested,
+          capabilities: { tools: {} },
+          serverInfo: {
+            name: "zelari-permission-mcp",
+            version: getCurrentVersion()
+          }
+        }
+      };
+    }
+    if (method === "tools/list") {
+      return { result: { tools: PERMISSION_MCP_TOOLS } };
+    }
+    if (method === "tools/call") {
+      const params = msg.params ?? {};
+      const name = typeof params.name === "string" ? params.name : "";
+      const args = params.arguments && typeof params.arguments === "object" ? params.arguments : {};
+      const out = name === "approve" ? await callApprove(args, requestTimeoutMs) : name === "ask_user" ? await callAskUser(args, requestTimeoutMs) : { error: { code: -32602, message: `unknown tool: ${name}` } };
+      if (out && typeof out === "object" && "error" in out && out.error) {
+        return { error: out.error };
+      }
+      return { result: out };
+    }
+    return { error: { code: -32601, message: `method not found: ${method}` } };
+  }
+  async function callApprove(args, timeoutMs) {
+    const toolName = typeof args.tool_name === "string" ? args.tool_name : "";
+    if (!toolName) {
+      return { error: { code: -32602, message: "approve requires a string tool_name" } };
+    }
+    const input2 = args.input ?? {};
+    const suggestions = Array.isArray(args.permission_suggestions) ? args.permission_suggestions : Array.isArray(args.suggestions) ? args.suggestions : void 0;
+    try {
+      const res = await requestBrokerAsk(
+        socketPath,
+        {
+          t: "ask",
+          id: randomUUID7(),
+          kind: "permission",
+          tool: toolName,
+          input: input2,
+          toolUseId: typeof args.tool_use_id === "string" ? args.tool_use_id : void 0,
+          suggestions
+        },
+        { requestTimeoutMs: timeoutMs }
+      );
+      const result = res.behavior === "allow" ? {
+        behavior: "allow",
+        updatedInput: input2,
+        ...res.always === true && suggestions && suggestions.length > 0 ? { updatedPermissions: suggestions } : {}
+      } : {
+        behavior: "deny",
+        message: res.message ?? "[zelari] permission denied (no reason given)"
+      };
+      return textResult(JSON.stringify(result));
+    } catch (err) {
+      return textResult(
+        JSON.stringify({
+          behavior: "deny",
+          message: `[zelari] permission broker unavailable: ${err instanceof Error ? err.message : String(err)}`
+        })
+      );
+    }
+  }
+  async function callAskUser(args, timeoutMs) {
+    const question = typeof args.question === "string" ? args.question : "";
+    if (!question) {
+      return { error: { code: -32602, message: "ask_user requires a string question" } };
+    }
+    const choices = Array.isArray(args.choices) ? args.choices.filter((c) => typeof c === "string") : void 0;
+    const context = typeof args.context === "string" ? args.context : void 0;
+    try {
+      const res = await requestBrokerAsk(
+        socketPath,
+        {
+          t: "ask",
+          id: randomUUID7(),
+          kind: "question",
+          question,
+          choices,
+          context
+        },
+        { requestTimeoutMs: timeoutMs }
+      );
+      const text = res.behavior === "allow" && typeof res.answer === "string" ? res.answer : res.message ?? "No answer was given \u2014 use your best judgment.";
+      return textResult(text);
+    } catch (err) {
+      return textResult(
+        JSON.stringify({
+          behavior: "deny",
+          message: `[zelari] permission broker unavailable: ${err instanceof Error ? err.message : String(err)}`
+        })
+      );
+    }
+  }
+  function textResult(text) {
+    return {
+      content: [{ type: "text", text }]
+    };
+  }
+  return Promise.resolve({
+    closed,
+    stop: async () => {
+      if (stopped) return;
+      stopped = true;
+      rl.close();
+      closedResolve();
+    }
+  });
+}
+var PERMISSION_MCP_PROTOCOL_VERSION, APPROVE_TOOL, ASK_USER_TOOL, PERMISSION_MCP_TOOLS;
+var init_mcpPermissionServer = __esm({
+  "src/cli/mcp/mcpPermissionServer.ts"() {
+    "use strict";
+    init_updater();
+    init_permissionBroker();
+    PERMISSION_MCP_PROTOCOL_VERSION = "2025-03-26";
+    APPROVE_TOOL = {
+      name: "approve",
+      description: "Ask the human to approve or deny a tool call from an external agent. Returns JSON {behavior: 'allow'|'deny', updatedInput?, updatedPermissions?}.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          tool_name: { type: "string", description: "Name of the tool the agent wants to run" },
+          input: { type: "object", description: "Arguments the agent wants to pass" },
+          tool_use_id: { type: "string", description: "Agent-side tool use id (echoed back)" },
+          permission_suggestions: {
+            type: "array",
+            items: { type: "object" },
+            description: "Permission rules the CLI suggests; returned as updatedPermissions only when the user allows permanently"
+          },
+          suggestions: {
+            type: "array",
+            items: { type: "object" },
+            description: "Alias of permission_suggestions (accepted for compat)"
+          }
+        },
+        required: ["tool_name", "input"]
+      }
+    };
+    ASK_USER_TOOL = {
+      name: "ask_user",
+      description: "Ask the human a structured question. Returns JSON {answer: '<text>'} or {behavior: 'deny', message} if cancelled/unavailable.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          question: { type: "string", description: "One focused question" },
+          choices: {
+            type: "array",
+            items: { type: "string" },
+            description: "2\u20136 concrete options; the human may still type a free answer"
+          },
+          context: { type: "string", description: "Why this choice matters (one short line)" }
+        },
+        required: ["question"]
+      }
+    };
+    PERMISSION_MCP_TOOLS = [
+      APPROVE_TOOL,
+      ASK_USER_TOOL
+    ];
+  }
+});
+
+// src/cli/mcp/permissionCli.ts
+var permissionCli_exports = {};
+__export(permissionCli_exports, {
+  runPermissionCli: () => runPermissionCli
+});
+async function runPermissionCli(socketPath) {
+  const server = await startPermissionMcpServer({ socketPath });
+  process.stderr.write(
+    `[zelari-code --permission-mcp] listening on ${socketPath}
+`
+  );
+  let exiting = false;
+  const shutdown2 = async (code) => {
+    if (exiting) return;
+    exiting = true;
+    try {
+      await server.stop();
+    } catch {
+    }
+    process.exit(code);
+  };
+  process.stdin.on("close", () => {
+    void shutdown2(0);
+  });
+  process.on("SIGINT", () => {
+    void shutdown2(0);
+  });
+  process.on("SIGTERM", () => {
+    void shutdown2(0);
+  });
+  process.stdin.resume?.();
+  await server.closed;
+  await shutdown2(0);
+}
+var init_permissionCli = __esm({
+  "src/cli/mcp/permissionCli.ts"() {
+    "use strict";
+    init_mcpPermissionServer();
+  }
+});
+
 // src/cli/companion/config.ts
 import {
   existsSync as existsSync43,
@@ -39370,12 +40672,12 @@ function ensureHome() {
   }
 }
 function loadCompanionConfig() {
-  const path47 = getCompanionConfigPath();
-  if (!existsSync43(path47)) {
+  const path48 = getCompanionConfigPath();
+  if (!existsSync43(path48)) {
     return { projects: [] };
   }
   try {
-    const raw = JSON.parse(readFileSync34(path47, "utf8"));
+    const raw = JSON.parse(readFileSync34(path48, "utf8"));
     const projects = Array.isArray(raw.projects) ? raw.projects.filter(
       (p3) => p3 && typeof p3.path === "string" && p3.path.trim() && typeof (p3.id ?? p3.name) === "string"
     ).map((p3) => ({
@@ -39413,16 +40715,16 @@ function loadOrCreateToken(explicit) {
     return { token: explicit.trim(), created: false };
   }
   ensureHome();
-  const path47 = getCompanionTokenPath();
-  if (existsSync43(path47)) {
-    const t = readFileSync34(path47, "utf8").trim();
+  const path48 = getCompanionTokenPath();
+  if (existsSync43(path48)) {
+    const t = readFileSync34(path48, "utf8").trim();
     if (t) return { token: t, created: false };
   }
   const token = randomBytes4(24).toString("base64url");
-  writeFileSync21(path47, token + "\n", "utf8");
+  writeFileSync21(path48, token + "\n", "utf8");
   try {
-    const fs29 = __require("node:fs");
-    fs29.chmodSync?.(path47, 384);
+    const fs30 = __require("node:fs");
+    fs30.chmodSync?.(path48, 384);
   } catch {
   }
   return { token, created: true };
@@ -39447,17 +40749,17 @@ function mergeProjects(cfg, extraPaths) {
     byId.set(p3.id, p3);
   }
   for (const raw of extraPaths) {
-    const path47 = raw.trim();
-    if (!path47) continue;
-    let id = slugFromPath(path47);
+    const path48 = raw.trim();
+    if (!path48) continue;
+    let id = slugFromPath(path48);
     let n = 2;
-    while (byId.has(id) && byId.get(id).path !== path47) {
-      id = `${slugFromPath(path47)}-${n++}`;
+    while (byId.has(id) && byId.get(id).path !== path48) {
+      id = `${slugFromPath(path48)}-${n++}`;
     }
     byId.set(id, {
       id,
-      name: slugFromPath(path47),
-      path: path47
+      name: slugFromPath(path48),
+      path: path48
     });
   }
   return [...byId.values()];
@@ -39505,9 +40807,9 @@ var init_config = __esm({
 });
 
 // src/cli/companion/runManager.ts
-import { spawn as spawn11 } from "node:child_process";
-import { createInterface } from "node:readline";
-import { randomUUID as randomUUID7 } from "node:crypto";
+import { spawn as spawn12 } from "node:child_process";
+import { createInterface as createInterface2 } from "node:readline";
+import { randomUUID as randomUUID8 } from "node:crypto";
 import { writeFileSync as writeFileSync22, unlinkSync as unlinkSync2 } from "node:fs";
 import { join as join36 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
@@ -39576,7 +40878,7 @@ var init_runManager = __esm({
         }
         const prompt = args.prompt?.trim();
         if (!prompt) return { ok: false, error: "prompt is required" };
-        const id = randomUUID7();
+        const id = randomUUID8();
         const mode = (args.mode || "kraken").toLowerCase();
         const phase2 = (args.phase || "build").toLowerCase();
         const run = {
@@ -39621,7 +40923,7 @@ var init_runManager = __esm({
             historyFile = void 0;
           }
         }
-        const child = spawn11(process.execPath, argv, {
+        const child = spawn12(process.execPath, argv, {
           cwd: args.cwd,
           env: {
             ...process.env,
@@ -39638,7 +40940,7 @@ var init_runManager = __esm({
           message: `[companion] run ${id} started mode=${mode} phase=${phase2} cwd=${args.cwd}`
         });
         if (child.stdout) {
-          const rl = createInterface({ input: child.stdout });
+          const rl = createInterface2({ input: child.stdout });
           rl.on("line", (line) => {
             const t = line.trim();
             if (!t) return;
@@ -39739,7 +41041,7 @@ __export(serve_exports, {
   parseServeFlags: () => parseServeFlags,
   runCompanionServe: () => runCompanionServe
 });
-import { createServer } from "node:http";
+import { createServer as createServer2 } from "node:http";
 import { existsSync as existsSync44 } from "node:fs";
 import { resolve as resolve2 } from "node:path";
 function readBody(req, max = 2e6) {
@@ -39759,7 +41061,7 @@ function readBody(req, max = 2e6) {
     req.on("error", reject);
   });
 }
-function sendJson(res, status, body, extraHeaders) {
+function sendJson2(res, status, body, extraHeaders) {
   const data = JSON.stringify(body);
   res.writeHead(status, {
     "content-type": "application/json; charset=utf-8",
@@ -39823,7 +41125,7 @@ async function runCompanionServe(opts = {}) {
     );
   }
   const runs = new RunManager();
-  const server = createServer(async (req, res) => {
+  const server = createServer2(async (req, res) => {
     if (req.method === "OPTIONS") {
       res.writeHead(204, {
         "access-control-allow-origin": "*",
@@ -39834,10 +41136,10 @@ async function runCompanionServe(opts = {}) {
       return;
     }
     const url2 = parseUrl(req);
-    const path47 = url2.pathname.replace(/\/+$/, "") || "/";
+    const path48 = url2.pathname.replace(/\/+$/, "") || "/";
     try {
-      if (req.method === "GET" && (path47 === "/health" || path47 === "/v1/health")) {
-        sendJson(res, 200, {
+      if (req.method === "GET" && (path48 === "/health" || path48 === "/v1/health")) {
+        sendJson2(res, 200, {
           ok: true,
           service: "zelari-companion",
           version: getCurrentVersion(),
@@ -39848,19 +41150,19 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (path47.startsWith("/v1")) {
+      if (path48.startsWith("/v1")) {
         if (!tokenMatches(token, getBearer(req))) {
-          sendJson(res, 401, { ok: false, error: "unauthorized" });
+          sendJson2(res, 401, { ok: false, error: "unauthorized" });
           return;
         }
       }
-      if (req.method === "GET" && path47 === "/v1/config") {
+      if (req.method === "GET" && path48 === "/v1/config") {
         const snap = buildDesktopConfigSnapshot();
-        sendJson(res, 200, { ok: true, ...snap });
+        sendJson2(res, 200, { ok: true, ...snap });
         return;
       }
-      if (req.method === "GET" && path47 === "/v1/projects") {
-        sendJson(res, 200, {
+      if (req.method === "GET" && path48 === "/v1/projects") {
+        sendJson2(res, 200, {
           ok: true,
           projects: projects.map((p3) => ({
             id: p3.id,
@@ -39870,8 +41172,8 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "GET" && path47 === "/v1/runs") {
-        sendJson(res, 200, {
+      if (req.method === "GET" && path48 === "/v1/runs") {
+        sendJson2(res, 200, {
           ok: true,
           active: runs.getActive(),
           recent: runs.listRecent().map((r) => ({
@@ -39888,13 +41190,13 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "POST" && path47 === "/v1/runs") {
+      if (req.method === "POST" && path48 === "/v1/runs") {
         const raw = await readBody(req);
         let body = {};
         try {
           body = raw ? JSON.parse(raw) : {};
         } catch {
-          sendJson(res, 400, { ok: false, error: "invalid JSON body" });
+          sendJson2(res, 400, { ok: false, error: "invalid JSON body" });
           return;
         }
         const prompt = String(body.prompt ?? body.task ?? "").trim();
@@ -39903,7 +41205,7 @@ async function runCompanionServe(opts = {}) {
         const cwdArg = body.cwd != null ? String(body.cwd) : body.projectId != null ? String(body.projectId) : null;
         const resolved = resolveProjectPath(projects, cwdArg);
         if (!resolved.ok) {
-          sendJson(res, 400, { ok: false, error: resolved.error });
+          sendJson2(res, 400, { ok: false, error: resolved.error });
           return;
         }
         const history2 = Array.isArray(body.history) ? body.history : void 0;
@@ -39917,10 +41219,10 @@ async function runCompanionServe(opts = {}) {
           history: history2
         });
         if (!result.ok) {
-          sendJson(res, 409, { ok: false, error: result.error });
+          sendJson2(res, 409, { ok: false, error: result.error });
           return;
         }
-        sendJson(res, 201, {
+        sendJson2(res, 201, {
           ok: true,
           run: {
             id: result.run.id,
@@ -39935,12 +41237,12 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path47);
+      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path48);
       if (req.method === "GET" && eventsMatch) {
         const runId = eventsMatch[1];
         const run = runs.getRun(runId);
         if (!run) {
-          sendJson(res, 404, { ok: false, error: "run not found" });
+          sendJson2(res, 404, { ok: false, error: "run not found" });
           return;
         }
         res.writeHead(200, {
@@ -40000,20 +41302,20 @@ async function runCompanionServe(opts = {}) {
         }, 500);
         return;
       }
-      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path47);
+      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path48);
       if (req.method === "POST" && cancelMatch) {
         const runId = cancelMatch[1];
         const result = runs.cancel(runId);
         if (!result.ok) {
-          sendJson(res, 404, { ok: false, error: result.error });
+          sendJson2(res, 404, { ok: false, error: result.error });
           return;
         }
-        sendJson(res, 200, { ok: true, cancelled: runId });
+        sendJson2(res, 200, { ok: true, cancelled: runId });
         return;
       }
-      sendJson(res, 404, { ok: false, error: "not found" });
+      sendJson2(res, 404, { ok: false, error: "not found" });
     } catch (err) {
-      sendJson(res, 500, {
+      sendJson2(res, 500, {
         ok: false,
         error: err instanceof Error ? err.message : String(err)
       });
@@ -40112,11 +41414,11 @@ import { execSync as execSync2 } from "node:child_process";
 import { existsSync as existsSync45, readFileSync as readFileSync35, readlinkSync, statSync as statSync7 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import path46 from "node:path";
+import path47 from "node:path";
 function findPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 6; i += 1) {
-    const candidate = path46.join(dir, "package.json");
+    const candidate = path47.join(dir, "package.json");
     if (existsSync45(candidate)) {
       try {
         const pkg = JSON.parse(readFileSync35(candidate, "utf8"));
@@ -40124,11 +41426,11 @@ function findPackageRoot(start) {
       } catch {
       }
     }
-    const parent = path46.dirname(dir);
+    const parent = path47.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
-  return path46.resolve(__dirname3, "..", "..", "..");
+  return path47.resolve(__dirname3, "..", "..", "..");
 }
 function tryExec(cmd) {
   try {
@@ -40142,7 +41444,7 @@ function tryExec(cmd) {
 }
 function readPackageJson3() {
   try {
-    const pkgPath = path46.join(packageRoot, "package.json");
+    const pkgPath = path47.join(packageRoot, "package.json");
     return JSON.parse(readFileSync35(pkgPath, "utf8"));
   } catch {
     return null;
@@ -40158,7 +41460,7 @@ function checkShim(pkgName) {
   }
   const isWin = process.platform === "win32";
   const shimName = isWin ? "zelari-code.cmd" : "zelari-code";
-  const shimPath = path46.join(prefix, shimName);
+  const shimPath = path47.join(prefix, shimName);
   if (!existsSync45(shimPath)) {
     return FAIL(
       `shim not found at ${shimPath}
@@ -40186,8 +41488,8 @@ function checkShim(pkgName) {
          fix:  npm install -g ${pkgName}@latest --force`
       );
     }
-    const resolved = path46.resolve(path46.dirname(shimPath), target);
-    const expected = path46.join(
+    const resolved = path47.resolve(path47.dirname(shimPath), target);
+    const expected = path47.join(
       prefix,
       "node_modules",
       pkgName,
@@ -40226,7 +41528,7 @@ function checkNode(pkg) {
   return OK(`node ${raw}`);
 }
 function checkBundle() {
-  const bundle = path46.join(packageRoot, "dist", "cli", "main.bundled.js");
+  const bundle = path47.join(packageRoot, "dist", "cli", "main.bundled.js");
   if (!existsSync45(bundle)) {
     return FAIL(
       `dist/cli/main.bundled.js missing at ${bundle}
@@ -40247,7 +41549,7 @@ function checkRuntimeDeps() {
   const missing = [];
   for (const dep of required2) {
     try {
-      const localReq = createRequire3(path46.join(packageRoot, "package.json"));
+      const localReq = createRequire3(path47.join(packageRoot, "package.json"));
       localReq.resolve(dep);
     } catch {
       missing.push(dep);
@@ -40423,7 +41725,7 @@ var init_doctor = __esm({
     "use strict";
     init_prereqChecks();
     require3 = createRequire3(import.meta.url);
-    __dirname3 = path46.dirname(fileURLToPath2(import.meta.url));
+    __dirname3 = path47.dirname(fileURLToPath2(import.meta.url));
     packageRoot = findPackageRoot(__dirname3);
     OK = (message) => ({
       ok: true,
@@ -40606,7 +41908,7 @@ import React15 from "react";
 import { render } from "ink";
 
 // src/cli/app.tsx
-import React10, { useState as useState8, useMemo, useCallback as useCallback5, useEffect as useEffect7 } from "react";
+import React10, { useState as useState8, useMemo, useCallback as useCallback5, useEffect as useEffect8 } from "react";
 import { Box as Box9, Static, useInput as useInput2, useStdin as useStdin2 } from "ink";
 
 // src/cli/components/InputBar.tsx
@@ -44443,15 +45745,22 @@ function useChatTurn(params) {
         historySeedLen = getHistory().length;
         const anchored = maybeAnchorShortAnswer(userText);
         const effectiveUserText = anchored ?? userText;
-        envConfig = await providerFromEnv();
-        if (!envConfig) {
-          const active = resolveActiveProvider();
-          const spec = PROVIDERS.find((p3) => p3.id === active);
-          appendSystem(
-            setMessages,
-            `No API key for the active provider "${active}". Set ${spec?.envVar ?? "the provider API key env var"} or run /login ${active}.`
-          );
-          return;
+        const localCli = (process.env.ZELARI_LOCAL_CLI ?? "").trim();
+        let localCliProvider = null;
+        if (localCli) {
+          const { createLocalCliProvider: createLocalCliProvider2 } = await Promise.resolve().then(() => (init_claudeProvider(), claudeProvider_exports));
+          localCliProvider = createLocalCliProvider2({ cli: localCli });
+        } else {
+          envConfig = await providerFromEnv();
+          if (!envConfig) {
+            const active = resolveActiveProvider();
+            const spec = PROVIDERS.find((p3) => p3.id === active);
+            appendSystem(
+              setMessages,
+              `No API key for the active provider "${active}". Set ${spec?.envVar ?? "the provider API key env var"} or run /login ${active}.`
+            );
+            return;
+          }
         }
         setBusy(true);
         const workPhase = getPhase();
@@ -44499,29 +45808,34 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il turno continua dopo
           onPermissionAsk,
           permissionPolicy: defaultPermissionPolicy()
         });
-        const baseProviderStream = openaiCompatibleProvider(envConfig);
-        const failoverResolution = await resolveFailoverStream({
-          failoverEnabled: process.env.ANATHEMA_FAILOVER !== "0",
-          envValue: process.env.ANATHEMA_FAILOVER_PROVIDER,
-          primaryProviderId: envConfig.providerId,
-          primary: baseProviderStream,
-          validProviderIds: PROVIDERS.map((p3) => p3.id),
-          lookupFallbackConfig: async (id) => providerConfigFor(id),
-          buildStream: (config2) => openaiCompatibleProvider(
-            config2
-          )
-        });
-        if (failoverResolution.warning) {
-          appendSystem(setMessages, `[failover] ${failoverResolution.warning}`);
-        }
-        const providerStream = failoverResolution.fallbackLabel ? providerFailover({
-          primary: baseProviderStream,
-          fallback: failoverResolution.fallback,
-          fallbackLabel: failoverResolution.fallbackLabel
-        }) : providerFailover({
-          primary: baseProviderStream,
-          fallback: failoverResolution.fallback
-        });
+        const baseProviderStream = localCliProvider ?? openaiCompatibleProvider(envConfig);
+        let providerStream;
+        if (localCliProvider) {
+          providerStream = localCliProvider;
+        } else {
+          const failoverResolution = await resolveFailoverStream({
+            failoverEnabled: process.env.ANATHEMA_FAILOVER !== "0",
+            envValue: process.env.ANATHEMA_FAILOVER_PROVIDER,
+            primaryProviderId: envConfig.providerId,
+            primary: baseProviderStream,
+            validProviderIds: PROVIDERS.map((p3) => p3.id),
+            lookupFallbackConfig: async (id) => providerConfigFor(id),
+            buildStream: (config2) => openaiCompatibleProvider(
+              config2
+            )
+          });
+          if (failoverResolution.warning) {
+            appendSystem(setMessages, `[failover] ${failoverResolution.warning}`);
+          }
+          providerStream = failoverResolution.fallbackLabel ? providerFailover({
+            primary: baseProviderStream,
+            fallback: failoverResolution.fallback,
+            fallbackLabel: failoverResolution.fallbackLabel
+          }) : providerFailover({
+            primary: baseProviderStream,
+            fallback: failoverResolution.fallback
+          });
+        }
         const cwd = process.cwd();
         let composedWorkspace = "";
         let composedInstructions = "";
@@ -45795,6 +47109,83 @@ async function runZelariMissionInTui(userMessage, deps, emit) {
   }
 }
 
+// src/cli/hooks/usePermissionBroker.ts
+init_permissionBroker();
+init_brokerHandlers();
+import { useEffect as useEffect5, useRef as useRef5 } from "react";
+function usePermissionBroker(opts) {
+  const { setPicker: setPicker2, setMessages } = opts;
+  const handleRef = useRef5(null);
+  useEffect5(() => {
+    const socketPath = process.env.ZELARI_PERM_SOCKET?.trim();
+    if (!socketPath) return;
+    let disposed = false;
+    let handle = null;
+    const onPermissionAsk = createPermissionAskHandler({
+      setPicker: setPicker2,
+      appendSystem: (msg, at) => appendSystem(setMessages, msg, at ?? Date.now())
+    });
+    const onQuestion = (req) => new Promise((resolve3) => {
+      const choices = (req.choices ?? []).map((c) => String(c).trim()).filter((c) => c.length > 0);
+      if (choices.length < 2) {
+        resolve3(null);
+        return;
+      }
+      let settled = false;
+      const finish = (value) => {
+        if (settled) return;
+        settled = true;
+        setPicker2(null);
+        resolve3(value);
+      };
+      appendSystem(
+        setMessages,
+        `[external agent] ${req.question}
+\u2192 ${choices.join(" \xB7 ")}`,
+        Date.now()
+      );
+      setPicker2({
+        kind: "clarification",
+        title: req.question,
+        items: choices.map((c) => ({ value: c, label: c })),
+        onAnswer: (value) => finish(value),
+        onCancel: () => finish(null)
+      });
+    });
+    void startPermissionBroker(socketPath, {
+      onPermission: createBrokerPermissionHandler({ onPermissionAsk }),
+      onQuestion: createBrokerQuestionHandler({ onQuestion })
+    }).then((h) => {
+      if (disposed) {
+        void h.stop();
+        return;
+      }
+      handle = h;
+      handleRef.current = h;
+      appendSystem(
+        setMessages,
+        `[permission-broker] listening on ${socketPath} \u2014 external agents can request approvals.`,
+        Date.now()
+      );
+      process.stderr.write(
+        `[zelari-code] permission broker listening on ${socketPath}
+`
+      );
+    }).catch((err) => {
+      process.stderr.write(
+        `[zelari-code] permission broker failed to start: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+    });
+    return () => {
+      disposed = true;
+      if (handle) void handle.stop();
+      handleRef.current = null;
+    };
+  }, [setPicker2, setMessages]);
+  return { socketPath: process.env.ZELARI_PERM_SOCKET?.trim() || void 0 };
+}
+
 // src/cli/hooks/useSlashDispatch.ts
 import { useCallback as useCallback3 } from "react";
 
@@ -45901,6 +47292,7 @@ function handleSlashCommand(text, availableSkills) {
   /update [--yes|-y] \u2014 check for zelari-code updates; --yes performs the update (v3-N)
   /plugins \u2014 list optional tool plugins (Playwright, eslint, ruff, LSP servers)
   /plugins install <id> \u2014 install a plugin now (e.g. /plugins install eslint)
+  /integrations \u2014 list MCP integration presets (cua, composio, qwen-mm-plugins) + status
   /steer <text> \u2014 enqueue a follow-up prompt on the active run (Task 18.2)
   /steer --interrupt <text> \u2014 cancel current run + enqueue <text> for next dispatch (Task C.3.2)
   /compact \u2014 compact the session transcript
@@ -46269,6 +47661,27 @@ ${formatSkillList(availableSkills)}`
         message: "Usage: /plugins \u2014 list optional tool plugins (Playwright, eslint, ruff, LSP servers)\n       /plugins install <id> \u2014 install a plugin now (e.g. /plugins install eslint)"
       };
     }
+    case "integrations": {
+      const lines = [
+        "/integrations \u2014 MCP integration presets (apply: zelari-code --preset <id> [--scope user|project])",
+        "",
+        "  cua             \u2014 Cua Driver desktop computer-use (binary on PATH, https://cua.ai/docs)",
+        `                  status: ${process.env.ZELARI_CUA === "0" ? "disabled (ZELARI_CUA=0)" : "enabled (kill switch: ZELARI_CUA=0)"}`,
+        "  composio        \u2014 Composio Connect: 500+ app integrations as MCP tools",
+        `                  status: ${process.env.COMPOSIO_API_KEY ? "ready (COMPOSIO_API_KEY set)" : "missing COMPOSIO_API_KEY \u2014 export it first"}`,
+        "  qwen-mm-plugins \u2014 Qwen-MM-Plugins multimodal MCP tools (uvx; WSL2 on Windows)",
+        `                  status: ${process.env.QWEN_MM_PLUGIN ? "ready (QWEN_MM_PLUGIN=" + process.env.QWEN_MM_PLUGIN + ")" : "ready (default: qwen-mm-plugins-core)"}`,
+        "",
+        "Apply: zelari-code --preset composio          (writes ~/.zelari-code/mcp.json)",
+        "       zelari-code --preset cua --scope project     (writes .zelari/mcp.json)",
+        "       zelari-code --preset qwen-mm-plugins          (writes ~/.zelari-code/mcp.json)"
+      ];
+      return {
+        handled: true,
+        kind: "integrations_list",
+        message: lines.join("\n")
+      };
+    }
     case "undo": {
       const confirmed = args.includes("--yes") || args.includes("-y");
       if (confirmed) {
@@ -46919,13 +48332,13 @@ ${digest}
 // src/cli/slashHandlers/krakenFanout.ts
 init_auditLogger();
 init_toolRegistry();
-import { promises as fs21 } from "node:fs";
+import { promises as fs22 } from "node:fs";
 
 // src/cli/tools/krakenCsvFanout.ts
 init_zod();
 init_taskTool();
-import { promises as fs20 } from "node:fs";
-import path36 from "node:path";
+import { promises as fs21 } from "node:fs";
+import path37 from "node:path";
 import { randomBytes as randomBytes3 } from "node:crypto";
 var CsvFanoutArgsSchema = external_exports.object({
   csv_path: external_exports.string().min(1),
@@ -46946,7 +48359,7 @@ var CsvFanoutArgsSchema = external_exports.object({
   max_runtime_seconds: external_exports.number().int().positive().optional()
 });
 async function readCsv(filePath) {
-  const text = await fs20.readFile(filePath, "utf8");
+  const text = await fs21.readFile(filePath, "utf8");
   return parseCsv(text);
 }
 function parseCsv(text) {
@@ -47019,8 +48432,8 @@ function resolveMaxConcurrency(env = process.env) {
 }
 async function runCsvFanout(args, deps, opts) {
   const start = Date.now();
-  const absCsv = path36.isAbsolute(args.csv_path) ? args.csv_path : path36.join(opts.parentCwd, args.csv_path);
-  const absOut = path36.isAbsolute(args.output_csv_path) ? args.output_csv_path : path36.join(opts.parentCwd, args.output_csv_path);
+  const absCsv = path37.isAbsolute(args.csv_path) ? args.csv_path : path37.join(opts.parentCwd, args.csv_path);
+  const absOut = path37.isAbsolute(args.output_csv_path) ? args.output_csv_path : path37.join(opts.parentCwd, args.output_csv_path);
   const { headers, rows } = await readCsv(absCsv);
   if (headers.length === 0) {
     throw new Error(`kraken_csv_fanout: ${absCsv} is empty`);
@@ -47076,7 +48489,7 @@ async function runCsvFanout(args, deps, opts) {
         errored += 1;
         errors.push(`${row[args.id_column] ?? i}: ${res.error}`);
       }
-      await fs20.mkdir(path36.dirname(absOut), { recursive: true });
+      await fs21.mkdir(path37.dirname(absOut), { recursive: true });
       await queueWrite(serializeCsv(outHeaders, outputRecords));
     }
   }
@@ -47098,8 +48511,8 @@ async function runCsvFanout(args, deps, opts) {
 }
 async function atomicWrite(file2, contents) {
   const tmp = `${file2}.${process.pid}.${Date.now()}.${randomBytes3(6).toString("hex")}.tmp`;
-  await fs20.writeFile(tmp, contents, "utf8");
-  await fs20.rename(tmp, file2);
+  await fs21.writeFile(tmp, contents, "utf8");
+  await fs21.rename(tmp, file2);
 }
 
 // src/cli/slashHandlers/krakenFanout.ts
@@ -47197,7 +48610,7 @@ async function handleKrakenFanout(ctx, raw) {
   }
   const absCsv = isAbsolute(parsed.args.csv_path) ? parsed.args.csv_path : joinPath(ctx.cwd, parsed.args.csv_path);
   try {
-    await fs21.access(absCsv);
+    await fs22.access(absCsv);
   } catch {
     appendSystem(ctx.setMessages, `[kraken fanout] source CSV not found: ${absCsv}`);
     return;
@@ -47269,8 +48682,8 @@ function splitArgs(s) {
 }
 
 // src/cli/slashHandlers/krakenWorkbench.ts
-import { promises as fs22 } from "node:fs";
-import path37 from "node:path";
+import { promises as fs23 } from "node:fs";
+import path38 from "node:path";
 
 // src/cli/kraken/workbenchView.ts
 var EMPTY = {
@@ -47387,15 +48800,15 @@ function formatWorkbenchForTerminal(p3) {
 
 // src/cli/slashHandlers/krakenWorkbench.ts
 async function handleKrakenWorkbench(ctx) {
-  const dir = path37.join(ctx.cwd, ".zelari", "radio");
+  const dir = path38.join(ctx.cwd, ".zelari", "radio");
   let latest = null;
   let latestMtime = 0;
   try {
-    const files = await fs22.readdir(dir);
+    const files = await fs23.readdir(dir);
     for (const f of files) {
       if (!f.startsWith("workbench-") || !f.endsWith(".md")) continue;
-      const full = path37.join(dir, f);
-      const stat = await fs22.stat(full);
+      const full = path38.join(dir, f);
+      const stat = await fs23.stat(full);
       if (stat.mtimeMs > latestMtime) {
         latestMtime = stat.mtimeMs;
         latest = full;
@@ -47407,14 +48820,14 @@ async function handleKrakenWorkbench(ctx) {
     appendSystem(ctx.setMessages, "[kraken workbench] no workbench file found (.zelari/radio/workbench-*.md)");
     return;
   }
-  const content = await fs22.readFile(latest, "utf8");
+  const content = await fs23.readFile(latest, "utf8");
   const parsed = parseWorkbench(content);
   const rendered = formatWorkbenchForTerminal(parsed);
   if (!rendered.trim()) {
-    appendSystem(ctx.setMessages, `[kraken workbench] ${path37.basename(latest)}: (no nodes / no events yet)`);
+    appendSystem(ctx.setMessages, `[kraken workbench] ${path38.basename(latest)}: (no nodes / no events yet)`);
     return;
   }
-  appendSystem(ctx.setMessages, `[kraken workbench] ${path37.basename(latest)}:
+  appendSystem(ctx.setMessages, `[kraken workbench] ${path38.basename(latest)}:
 ${rendered}`);
 }
 
@@ -47566,8 +48979,8 @@ init_registry3();
 // src/cli/plugins/installer.ts
 init_cmdline();
 init_updater();
-import { spawn as spawn10 } from "node:child_process";
-async function installPlugin(spec, cwd, executor = spawn10) {
+import { spawn as spawn11 } from "node:child_process";
+async function installPlugin(spec, cwd, executor = spawn11) {
   const scopeFlag = spec.installScope === "global" ? "-g" : "-D";
   const args = ["install", scopeFlag, spec.npmPackage];
   let result = await runNpm2(executor, args, cwd, "shim");
@@ -47715,17 +49128,17 @@ ${result.output.split("\n").slice(-8).join("\n")}` : "";
 }
 
 // src/cli/slashHandlers/promoteMember.ts
-import { promises as fs23 } from "node:fs";
-import path40 from "node:path";
+import { promises as fs24 } from "node:fs";
+import path41 from "node:path";
 import os10 from "node:os";
 async function handlePromoteMember(ctx, memberId) {
   try {
     const { promoteMember: promoteMember2 } = await Promise.resolve().then(() => (init_council(), council_exports));
     const { skill, markdown } = promoteMember2(memberId);
-    const skillDir = process.env.ANATHEMA_SKILL_DIR ?? path40.join(os10.homedir(), ".tmp", "zelari-code", "skills");
-    await fs23.mkdir(skillDir, { recursive: true });
-    const filePath = path40.join(skillDir, `${skill.id}.md`);
-    await fs23.writeFile(filePath, markdown, "utf8");
+    const skillDir = process.env.ANATHEMA_SKILL_DIR ?? path41.join(os10.homedir(), ".tmp", "zelari-code", "skills");
+    await fs24.mkdir(skillDir, { recursive: true });
+    const filePath = path41.join(skillDir, `${skill.id}.md`);
+    await fs24.writeFile(filePath, markdown, "utf8");
     appendSystem(
       ctx.setMessages,
       `[promote-member] ${skill.name} (${memberId}) \u2192 ${filePath}
@@ -47741,25 +49154,25 @@ async function handlePromoteMember(ctx, memberId) {
 }
 
 // src/cli/branchManager.ts
-import { promises as fs24, existsSync as existsSync38, readFileSync as readFileSync30, writeFileSync as writeFileSync19, mkdirSync as mkdirSync16, statSync as statSync4, rmSync as rmSync3 } from "node:fs";
-import path41 from "node:path";
+import { promises as fs25, existsSync as existsSync38, readFileSync as readFileSync30, writeFileSync as writeFileSync19, mkdirSync as mkdirSync16, statSync as statSync4, rmSync as rmSync3 } from "node:fs";
+import path42 from "node:path";
 import os11 from "node:os";
 var META_FILENAME = "meta.json";
 var SESSIONS_SUBDIR = "sessions";
 function getBranchesBaseDir() {
-  return process.env.ANATHEMA_BRANCHES_DIR ?? path41.join(os11.homedir(), ".tmp", "zelari-code", "branches");
+  return process.env.ANATHEMA_BRANCHES_DIR ?? path42.join(os11.homedir(), ".tmp", "zelari-code", "branches");
 }
 function getSessionsBaseDir() {
-  return process.env.ANATHEMA_SESSIONS_DIR ?? path41.join(os11.homedir(), ".tmp", "zelari-code", "sessions");
+  return process.env.ANATHEMA_SESSIONS_DIR ?? path42.join(os11.homedir(), ".tmp", "zelari-code", "sessions");
 }
 function branchPathFor(name, baseDir) {
-  return path41.join(baseDir, name);
+  return path42.join(baseDir, name);
 }
 function metaPathFor(name, baseDir) {
-  return path41.join(baseDir, name, META_FILENAME);
+  return path42.join(baseDir, name, META_FILENAME);
 }
 function sessionsPathFor(name, baseDir) {
-  return path41.join(baseDir, name, SESSIONS_SUBDIR);
+  return path42.join(baseDir, name, SESSIONS_SUBDIR);
 }
 function readBranchMeta(name, baseDir) {
   const metaPath = metaPathFor(name, baseDir);
@@ -47784,13 +49197,13 @@ function readBranchMeta(name, baseDir) {
 }
 function writeBranchMeta(name, baseDir, meta3) {
   const metaPath = metaPathFor(name, baseDir);
-  mkdirSync16(path41.dirname(metaPath), { recursive: true });
+  mkdirSync16(path42.dirname(metaPath), { recursive: true });
   writeFileSync19(metaPath, JSON.stringify(meta3, null, 2), "utf-8");
 }
 async function countSessions(name, baseDir) {
   const sessionsPath = sessionsPathFor(name, baseDir);
   try {
-    const entries = await fs24.readdir(sessionsPath);
+    const entries = await fs25.readdir(sessionsPath);
     return entries.filter((e) => e.endsWith(".jsonl")).length;
   } catch (err) {
     if (err.code === "ENOENT") return 0;
@@ -47835,15 +49248,15 @@ async function createBranch(name, fromSessionId, baseDir = getBranchesBaseDir(),
   if (branchExists(name, baseDir)) {
     throw new BranchAlreadyExistsError(name);
   }
-  const sourcePath = path41.join(sessionsBaseDir, `${fromSessionId}.jsonl`);
+  const sourcePath = path42.join(sessionsBaseDir, `${fromSessionId}.jsonl`);
   if (!existsSync38(sourcePath)) {
     throw new SessionNotFoundError(`Source session "${fromSessionId}" not found at ${sourcePath}`);
   }
   const branchPath = branchPathFor(name, baseDir);
   const branchSessionsPath = sessionsPathFor(name, baseDir);
   mkdirSync16(branchSessionsPath, { recursive: true });
-  const destPath = path41.join(branchSessionsPath, `${fromSessionId}.jsonl`);
-  await fs24.copyFile(sourcePath, destPath);
+  const destPath = path42.join(branchSessionsPath, `${fromSessionId}.jsonl`);
+  await fs25.copyFile(sourcePath, destPath);
   const meta3 = {
     name,
     createdAt: Date.now(),
@@ -47861,7 +49274,7 @@ async function createBranch(name, fromSessionId, baseDir = getBranchesBaseDir(),
 async function listBranches(baseDir = getBranchesBaseDir()) {
   let entries;
   try {
-    entries = await fs24.readdir(baseDir);
+    entries = await fs25.readdir(baseDir);
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -47942,26 +49355,26 @@ async function handleBranchCheckout(ctx, branchName) {
 }
 
 // src/cli/slashHandlers/workspace.ts
-import { promises as fs25 } from "node:fs";
-import path42 from "node:path";
+import { promises as fs26 } from "node:fs";
+import path43 from "node:path";
 async function handleWorkspaceShow(ctx, what) {
   try {
-    const zelari = path42.join(process.cwd(), ".zelari");
+    const zelari = path43.join(process.cwd(), ".zelari");
     let content;
     switch (what) {
       case "plan": {
-        const planPath = path42.join(zelari, "plan.md");
+        const planPath = path43.join(zelari, "plan.md");
         try {
-          content = await fs25.readFile(planPath, "utf-8");
+          content = await fs26.readFile(planPath, "utf-8");
         } catch {
           content = "(no plan.md yet \u2014 run a council session first)";
         }
         break;
       }
       case "decisions": {
-        const decisionsDir = path42.join(zelari, "decisions");
+        const decisionsDir = path43.join(zelari, "decisions");
         try {
-          const files = (await fs25.readdir(decisionsDir)).filter((f) => f.endsWith(".md")).sort();
+          const files = (await fs26.readdir(decisionsDir)).filter((f) => f.endsWith(".md")).sort();
           if (files.length === 0) {
             content = "(no ADRs yet \u2014 invoke /council to generate some)";
           } else {
@@ -47969,7 +49382,7 @@ async function handleWorkspaceShow(ctx, what) {
 `];
             const { parseFrontmatter: parseFrontmatter2 } = await Promise.resolve().then(() => (init_storage(), storage_exports));
             for (const f of files) {
-              const raw = await fs25.readFile(path42.join(decisionsDir, f), "utf-8");
+              const raw = await fs26.readFile(path43.join(decisionsDir, f), "utf-8");
               const { meta: meta3, body } = parseFrontmatter2(raw);
               const title = meta3.title ?? body.split("\n")[0]?.replace(/^#\s*/, "").trim() ?? f;
               lines.push(`- **${f.replace(/\.md$/, "")}** [${meta3.status ?? "unknown"}] ${title}`);
@@ -47982,27 +49395,27 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "risks": {
-        const risksPath = path42.join(zelari, "risks.md");
+        const risksPath = path43.join(zelari, "risks.md");
         try {
-          content = await fs25.readFile(risksPath, "utf-8");
+          content = await fs26.readFile(risksPath, "utf-8");
         } catch {
           content = "(no risks.md yet)";
         }
         break;
       }
       case "agents": {
-        const agentsPath = path42.join(process.cwd(), "AGENTS.MD");
+        const agentsPath = path43.join(process.cwd(), "AGENTS.MD");
         try {
-          content = await fs25.readFile(agentsPath, "utf-8");
+          content = await fs26.readFile(agentsPath, "utf-8");
         } catch {
           content = "(no AGENTS.MD yet at project root \u2014 run `/workspace sync` after a council session)";
         }
         break;
       }
       case "docs": {
-        const docsDir = path42.join(zelari, "docs");
+        const docsDir = path43.join(zelari, "docs");
         try {
-          const files = (await fs25.readdir(docsDir)).filter((f) => f.endsWith(".md")).sort();
+          const files = (await fs26.readdir(docsDir)).filter((f) => f.endsWith(".md")).sort();
           content = files.length ? `# Docs (${files.length})
 
 ` + files.map((f) => `- ${f}`).join("\n") : "(no docs drafts yet)";
@@ -48042,8 +49455,8 @@ async function handleWorkspaceReset(ctx, force) {
     return;
   }
   try {
-    const target = path42.join(process.cwd(), ".zelari");
-    await fs25.rm(target, { recursive: true, force: true });
+    const target = path43.join(process.cwd(), ".zelari");
+    await fs26.rm(target, { recursive: true, force: true });
     appendSystem(ctx.setMessages, "[workspace] .zelari/ removed");
   } catch (err) {
     appendSystem(ctx.setMessages, `[workspace reset error] ${err instanceof Error ? err.message : String(err)}`);
@@ -48402,16 +49815,16 @@ function handleModelsRefresh(ctx) {
 }
 
 // src/cli/slashHandlers/skills.ts
-import path43 from "node:path";
+import path44 from "node:path";
 import os12 from "node:os";
 
 // src/cli/skillHistory.ts
-import { promises as fs26, existsSync as existsSync39, statSync as statSync5, renameSync as renameSync4, appendFileSync as appendFileSync4, mkdirSync as mkdirSync17 } from "node:fs";
+import { promises as fs27, existsSync as existsSync39, statSync as statSync5, renameSync as renameSync4, appendFileSync as appendFileSync4, mkdirSync as mkdirSync17 } from "node:fs";
 var SKILL_HISTORY_ROTATE_BYTES = 10 * 1024 * 1024;
 async function readSkillHistory(file2) {
   let raw = "";
   try {
-    raw = await fs26.readFile(file2, "utf-8");
+    raw = await fs27.readFile(file2, "utf-8");
   } catch {
     return [];
   }
@@ -48528,7 +49941,7 @@ function handleSkillPicker(ctx, skills, openPicker, fallbackMessage) {
   });
 }
 async function handleSkillStats(ctx, skillId) {
-  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path43.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
+  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path44.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
   try {
     const records = await readSkillHistory(historyFile);
     const stats = getSkillStats(records, skillId);
@@ -48544,7 +49957,7 @@ async function handleSkillCompare(ctx, ids, fallbackMessage) {
     appendSystem(ctx.setMessages, fallbackMessage ?? "[skill-compare] missing args");
     return;
   }
-  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path43.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
+  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path44.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
   try {
     const formatted = await compareSkillsFromFile(ids[0], ids[1], historyFile);
     appendSystem(ctx.setMessages, formatted);
@@ -49100,10 +50513,10 @@ function useSlashDispatch(params) {
 }
 
 // src/cli/hooks/useBatchedMessages.ts
-import { useCallback as useCallback4, useEffect as useEffect5, useRef as useRef5 } from "react";
+import { useCallback as useCallback4, useEffect as useEffect6, useRef as useRef6 } from "react";
 function useBatchedMessages(state3, setState, cadenceMs = 16) {
-  const pendingRef = useRef5(null);
-  const timerRef = useRef5(null);
+  const pendingRef = useRef6(null);
+  const timerRef = useRef6(null);
   const flush = useCallback4(() => {
     if (timerRef.current !== null) {
       clearTimeout(timerRef.current);
@@ -49141,7 +50554,7 @@ function useBatchedMessages(state3, setState, cadenceMs = 16) {
     },
     [cadenceMs, setState]
   );
-  useEffect5(() => {
+  useEffect6(() => {
     return () => {
       if (timerRef.current !== null) {
         clearTimeout(timerRef.current);
@@ -49153,7 +50566,7 @@ function useBatchedMessages(state3, setState, cadenceMs = 16) {
 }
 
 // src/cli/hooks/useTerminalSize.ts
-import { useEffect as useEffect6, useState as useState7 } from "react";
+import { useEffect as useEffect7, useState as useState7 } from "react";
 import { useStdout as useStdout2 } from "ink";
 var DEFAULT_COALESCE_MS = 120;
 function useTerminalSize(options = {}) {
@@ -49163,7 +50576,7 @@ function useTerminalSize(options = {}) {
     columns: stdout?.columns ?? defaults.columns,
     rows: stdout?.rows ?? defaults.rows
   });
-  useEffect6(() => {
+  useEffect7(() => {
     if (!stdout) return;
     const read = () => ({
       columns: stdout.columns ?? defaults.columns,
@@ -49227,6 +50640,7 @@ function App() {
   const activeProviderSpec = getActiveProvider();
   const activeModel = providerConfig.modelByProvider[activeProviderSpec.id];
   const session = useSession();
+  usePermissionBroker({ setPicker: setPicker2, setMessages: session.setMessages });
   const size = useTerminalSize();
   const gitChanges = useGitChanges();
   const cwd = useMemo(() => shortenCwd(process.cwd(), 32), []);
@@ -49240,7 +50654,7 @@ function App() {
     },
     { isActive: isRawModeSupported === true }
   );
-  useEffect7(() => {
+  useEffect8(() => {
     const id = activeProviderSpec.id;
     if (!["grok", "glm", "minimax", "deepseek", "openai-compatible"].includes(id)) return;
     if (!isModelsCacheStale(id)) return;
@@ -49330,7 +50744,7 @@ function App() {
     };
   }, []);
   const [sidebarOpen, setSidebarOpen] = useState8(false);
-  useEffect7(() => {
+  useEffect8(() => {
     setSidebarOpen((prev2) => sidebarVisibility(size.columns, size.rows, prev2));
   }, [size.columns, size.rows]);
   const staticKey = `${session.sessionId || "pre-bootstrap"}-${clearEpoch}`;
@@ -49390,7 +50804,7 @@ function App() {
 }
 
 // src/cli/components/SplashScreen.tsx
-import React11, { useEffect as useEffect8, useState as useState9 } from "react";
+import React11, { useEffect as useEffect9, useState as useState9 } from "react";
 import { Box as Box10, Text as Text11, useInput as useInput3, useStdin as useStdin3 } from "ink";
 var SPLASH_DURATION_MS = 2e3;
 var EMBLEM_LARGE = `                              =%@*-
@@ -49516,7 +50930,7 @@ function Splash({ onDone, version: version2 }) {
   const columns = process.stdout.columns ?? 80;
   const rows = process.stdout.rows ?? 24;
   const picked = pickSplashArt(columns, rows);
-  useEffect8(() => {
+  useEffect9(() => {
     const t = setTimeout(onDone, SPLASH_DURATION_MS);
     return () => clearTimeout(t);
   }, [onDone]);
@@ -49561,7 +50975,7 @@ function SplashGate({
 }
 
 // src/cli/components/PluginGate.tsx
-import React12, { useEffect as useEffect9, useState as useState10, useCallback as useCallback6 } from "react";
+import React12, { useEffect as useEffect10, useState as useState10, useCallback as useCallback6 } from "react";
 import { Box as Box11, Text as Text12, useStdin as useStdin4 } from "ink";
 init_registry3();
 init_prefs();
@@ -49575,7 +50989,7 @@ function PluginGate({ cwd, children }) {
   const [current, setCurrent] = useState10(null);
   const [result, setResult] = useState10(null);
   const skipGate = process.env.ZELARI_NO_PLUGIN_PROMPT === "1" || isRawModeSupported !== true;
-  useEffect9(() => {
+  useEffect10(() => {
     if (skipGate) {
       setPhase2("done");
       return;
@@ -49688,7 +51102,7 @@ function PluginGate({ cwd, children }) {
 }
 function ContinueKey({ onContinue }) {
   const { isRawModeSupported } = useStdin4();
-  useEffect9(() => {
+  useEffect10(() => {
     const t = setTimeout(onContinue, 1500);
     return () => clearTimeout(t);
   }, [onContinue]);
@@ -49737,7 +51151,7 @@ function parseWizardFlags(argv) {
 }
 
 // src/cli/wizard/runWizard.tsx
-import React14, { useEffect as useEffect10, useState as useState11 } from "react";
+import React14, { useEffect as useEffect11, useState as useState11 } from "react";
 import { Box as Box13, Text as Text14 } from "ink";
 import { useInput as useInput4 } from "ink";
 init_keyStore();
@@ -49902,7 +51316,7 @@ function RunWizard(_props) {
     })
   );
   const [, force] = useState11(0);
-  useEffect10(() => {
+  useEffect11(() => {
     if (typeof wiz.subscribe === "function") {
       const sub = wiz.subscribe(() => force((n) => n + 1));
       return () => sub();
@@ -49972,7 +51386,7 @@ function RunWizard(_props) {
 }
 function PostCommitBridge() {
   const [showApp, setShowApp] = useState11(false);
-  useEffect10(() => {
+  useEffect11(() => {
     const t = setTimeout(() => setShowApp(true), 1200);
     return () => clearTimeout(t);
   }, []);
@@ -50169,6 +51583,7 @@ init_dist();
 init_conversationContext();
 init_council();
 init_toolRegistry();
+init_claudeProvider();
 init_skills2();
 init_envNumber();
 init_phaseState();
@@ -50203,8 +51618,8 @@ function createStreamScrubber() {
 
 // src/cli/runHeadless.ts
 init_taskTool();
-import { promises as fs28 } from "node:fs";
-import path45 from "node:path";
+import { promises as fs29 } from "node:fs";
+import path46 from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
 async function runHeadless(opts) {
   resetTaskSpawnCount();
@@ -50212,10 +51627,14 @@ async function runHeadless(opts) {
     const { expandAtMentions: expandAtMentions2 } = await Promise.resolve().then(() => (init_atMentions(), atMentions_exports));
     const task = typeof opts.task === "string" ? opts.task : "";
     if (task.includes("@")) {
-      const { text } = expandAtMentions2(task, process.cwd());
+      const { text, hits } = expandAtMentions2(task, process.cwd());
       if (text !== task) {
         opts = { ...opts, task: text };
       }
+      const images = hits.filter((h) => h.image).map((h) => h.image);
+      if (images.length > 0) {
+        opts = { ...opts, images };
+      }
     }
   } catch {
   }
@@ -50245,19 +51664,51 @@ ${err.stack}` : "";
   process.on("uncaughtException", (err) => handleFatal("uncaughtException", err));
   process.on("unhandledRejection", (err) => handleFatal("unhandledRejection", err));
   setPhase(opts.phase ?? "build");
-  const { provider, model } = resolveHeadlessProvider(opts);
-  const key = await resolveHeadlessKey(provider);
-  if ("error" in key) {
-    process.stderr.write(`[zelari-code --headless] ${key.error}
-`);
-    return 1;
+  let permBrokerStop = null;
+  const permSocket = process.env.ZELARI_PERM_SOCKET?.trim();
+  if (permSocket) {
+    try {
+      const { startPermissionBroker: startPermissionBroker2 } = await Promise.resolve().then(() => (init_permissionBroker(), permissionBroker_exports));
+      const { createBrokerPermissionHandler: createBrokerPermissionHandler2 } = await Promise.resolve().then(() => (init_brokerHandlers(), brokerHandlers_exports));
+      const h = await startPermissionBroker2(permSocket, {
+        onPermission: createBrokerPermissionHandler2({})
+      });
+      permBrokerStop = h.stop;
+      process.stderr.write(
+        `[zelari-code] permission broker listening on ${permSocket}
+`
+      );
+    } catch (err) {
+      process.stderr.write(
+        `[zelari-code] permission broker failed to start: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+    }
   }
-  const providerStream = openaiCompatibleProvider({
-    providerId: provider,
-    apiKey: key.apiKey,
-    baseUrl: key.baseUrl,
-    model
+  process.once("exit", () => {
+    void permBrokerStop?.();
   });
+  const { provider: resolvedProvider, model } = resolveHeadlessProvider(opts);
+  let provider = resolvedProvider;
+  const localCli = (process.env.ZELARI_LOCAL_CLI ?? "").trim();
+  let providerStream;
+  if (localCli) {
+    provider = "local-cli";
+    providerStream = createLocalCliProvider({ cli: localCli, model });
+  } else {
+    const key = await resolveHeadlessKey(provider);
+    if ("error" in key) {
+      process.stderr.write(`[zelari-code --headless] ${key.error}
+`);
+      return 1;
+    }
+    providerStream = openaiCompatibleProvider({
+      providerId: provider,
+      apiKey: key.apiKey,
+      baseUrl: key.baseUrl,
+      model
+    });
+  }
   const mode = opts.mode ?? (opts.useCouncil ? "council" : "kraken");
   if (opts.output === "json") {
     emitEvent({
@@ -50316,11 +51767,11 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
   try {
     let preflightGraph;
     if (opts.runPlan && opts.runPlan.trim() !== "") {
-      const planPath = path45.join(cwd, ".zelari", "radio", `plan-${opts.runPlan}.json`);
+      const planPath = path46.join(cwd, ".zelari", "radio", `plan-${opts.runPlan}.json`);
       log(`loading pre-flight plan: ${planPath}`);
       let raw;
       try {
-        raw = await fs28.readFile(planPath, "utf8");
+        raw = await fs29.readFile(planPath, "utf8");
       } catch (e) {
         log(`plan file not found: ${planPath} (${e.message})`);
         return 1;
@@ -50356,10 +51807,10 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
     log(formatKrakenGraphAscii2(graph));
     if (opts.planOnly) {
       const planId = randomUUID6();
-      const planDir = path45.join(cwd, ".zelari", "radio");
-      const planPath = path45.join(planDir, `plan-${planId}.json`);
-      await fs28.mkdir(planDir, { recursive: true });
-      await fs28.writeFile(planPath, JSON.stringify(graph, null, 2), "utf8");
+      const planDir = path46.join(cwd, ".zelari", "radio");
+      const planPath = path46.join(planDir, `plan-${planId}.json`);
+      await fs29.mkdir(planDir, { recursive: true });
+      await fs29.writeFile(planPath, JSON.stringify(graph, null, 2), "utf8");
       log(`plan-only: wrote ${planPath} (${graph.nodes.size} nodes)`);
       log(
         `re-run with ZELARI_KRAKEN_RUN_PLAN=${planId} to execute (or --run-plan <id> when the desktop wiring is in place)`
@@ -50709,7 +52160,11 @@ async function runHeadlessSingle(opts, provider, model, providerStream) {
   const initialMessages = [
     { role: "system", content: systemPrompt },
     ...historySeed,
-    { role: "user", content: effectiveTask }
+    {
+      role: "user",
+      content: effectiveTask,
+      ...opts.images && opts.images.length > 0 ? { images: opts.images } : {}
+    }
   ];
   let pass = await runSinglePass(initialMessages, sessionId);
   const wantWrites = expectsDiskImplementation(
@@ -51382,7 +52837,8 @@ var BUILTIN_SKILL_MODULES = [
   "@zelari/core/skills/builtin/review",
   "@zelari/core/skills/builtin/testing",
   "@zelari/core/skills/builtin/schema-loop",
-  "@zelari/core/skills/builtin/computer-use-cua"
+  "@zelari/core/skills/builtin/computer-use-cua",
+  "@zelari/core/skills/builtin/qwen-mm-plugins"
 ];
 var builtinsLoaded = false;
 function ensureBuiltinSkillsLoadedSync() {
@@ -51545,7 +53001,7 @@ function upsertSkill(opts) {
     }
     dir = getProjectSkillsDir(root);
   }
-  const path47 = skillFilePath(dir, name);
+  const path48 = skillFilePath(dir, name);
   const content = serializeSkillMd({
     name,
     description,
@@ -51554,13 +53010,13 @@ function upsertSkill(opts) {
     tools: opts.tools,
     cost: opts.cost
   });
-  const parsed = parseSkillMd(content, path47);
+  const parsed = parseSkillMd(content, path48);
   if (!parsed) {
     return { ok: false, error: "Generated SKILL.md failed validation" };
   }
-  mkdirSync18(dirname9(path47), { recursive: true });
-  writeFileSync20(path47, content, "utf8");
-  return { ok: true, path: path47 };
+  mkdirSync18(dirname9(path48), { recursive: true });
+  writeFileSync20(path48, content, "utf8");
+  return { ok: true, path: path48 };
 }
 function removeSkill(opts) {
   const name = opts.name.trim().toLowerCase();
@@ -51578,8 +53034,8 @@ function removeSkill(opts) {
     dir = getProjectSkillsDir(root);
   }
   const skillDir = join34(dir, name);
-  const path47 = skillFilePath(dir, name);
-  if (!existsSync42(path47) && !existsSync42(skillDir)) {
+  const path48 = skillFilePath(dir, name);
+  if (!existsSync42(path48) && !existsSync42(skillDir)) {
     return { ok: false, error: `Skill "${name}" not found in ${dir}` };
   }
   try {
@@ -51590,7 +53046,7 @@ function removeSkill(opts) {
       error: err instanceof Error ? err.message : String(err)
     };
   }
-  return { ok: true, path: path47 };
+  return { ok: true, path: path48 };
 }
 
 // src/cli/generateSkillFromUrl.ts
@@ -51680,8 +53136,8 @@ function normalizeDraft(raw, sourceUrl, provider, model) {
   let name = String(o.name ?? "").trim().toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64);
   if (!name || !/^[a-z0-9][a-z0-9-]{0,63}$/.test(name)) {
     try {
-      const path47 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
-      name = path47 && /^[a-z0-9]/.test(path47) ? path47 : "imported-skill";
+      const path48 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+      name = path48 && /^[a-z0-9]/.test(path48) ? path48 : "imported-skill";
     } catch {
       name = "imported-skill";
     }
@@ -51863,6 +53319,21 @@ function pickRootComponent() {
     void runPluginsInstall(argv).then((code) => process.exit(code));
     return { kind: "done" };
   }
+  if (argv.includes("--permission-mcp")) {
+    const i = argv.indexOf("--permission-mcp");
+    const socketPath = i >= 0 && argv[i + 1] ? argv[i + 1] : void 0;
+    if (!socketPath) {
+      console.error("[zelari-code --permission-mcp] a socket path argument is required");
+      process.exit(1);
+    }
+    void Promise.resolve().then(() => (init_permissionCli(), permissionCli_exports)).then(({ runPermissionCli: runPermissionCli2 }) => runPermissionCli2(socketPath)).catch((err) => {
+      console.error(
+        `[zelari-code --permission-mcp] ${err instanceof Error ? err.message : String(err)}`
+      );
+      process.exit(1);
+    });
+    return { kind: "done" };
+  }
   if (argv.includes("serve") || argv.includes("--serve")) {
     const { parseServeFlags: parseServeFlags2 } = (init_serve(), __toCommonJS(serve_exports));
     return { kind: "serve", serveOpts: parseServeFlags2(argv) ?? {} };
@@ -51943,7 +53414,7 @@ function pickRootComponent() {
   }
   if (argv.includes("--help") || argv.includes("-h")) {
     console.log(
-      "zelari-code \u2014 AI Council coding agent CLI.\n\nUsage: zelari-code [options]\n\nOptions:\n  --version, -v       Print version and exit\n  --help, -h          Print this help and exit\n  --doctor            Diagnose install health (shim, bundle, PATH, deps,\n                      node/git/bash in the agent shell)\n  --fix-path          Add the npm global prefix to the user PATH\n                      (Windows only; fixes 'command not found' after install)\n  --fix-budget        Set recommended ZELARI_MAX_TOOL_LOOP_HARD=180,\n                      ZELARI_MAX_TOOL_LOOP_ITERATIONS=60, ZELARI_CONTEXT_LIMIT=400000\n                      at User scope (prevents the agent stopping mid-task)\n  --skip-checks       Skip the boot-time prerequisite check\n                      (alias for ZELARI_SKIP_PREFLIGHT=1)\n  --no-wizard         Skip the first-run wizard\n  --reset-config      Re-run the wizard (clears provider.json on commit)\n  --headless          Run a single task without mounting the TUI\n    --task <text>       Task prompt (required in headless mode)\n    --output json|plain Output format (default: json)\n    --mode kraken|council|zelari  Dispatch mode (default: kraken; agent=alias)\n    --council          Alias for --mode council\n    --phase plan|build  Work phase (default: build)\n    --provider <id>    Provider override (default: active)\n    --model <id>       Model override (default: provider default)\n  serve               Companion host for Android/remote clients (Tailscale)\n    --bind <ip>       Listen address (default: 127.0.0.1; use Tailscale IP)\n    --port <n>        Port (default: 7421)\n    --token <secret>  Bearer token (default: ~/.zelari-code/companion.token)\n    --project <path>  Allowlisted project root (repeatable)\n    --save-projects   Persist --project list to companion.json\n  --print-config      Print provider/model config as JSON (no secrets)\n  --plugins-status    JSON status of optional plugins (Playwright, eslint, \u2026)\n  --plugins-install <id>  Install plugin (playwright also fetches Chromium)\n    --cwd <path>       Workspace for -D installs (default: process.cwd())\n  --set-config        Persist provider/model/endpoint\n    --provider <id>    Set active provider\n    --model <id>       Set model for that provider\n    --endpoint <url>   Custom OpenAI-compatible base URL\n    --endpoint-clear   Remove custom endpoint override\n  --set-key           Store an API key (never printed back)\n    --provider <id>    Provider id (required)\n    --key <secret>     API key (required)\n  --discover-models   Refresh model list for a provider\n    --provider <id>    Provider (default: active)\n  --print-mcp         Print MCP server config (user + project)\n    --cwd <path>      Project root for .zelari/mcp.json\n  --set-mcp           Add/update an MCP server entry\n    --name <id>       Server name (required)\n    --command <bin>   Executable (required)\n    --args <json>     JSON array of args (optional)\n    --scope user|project  Default: user\n    --enabled true|false  Default: true\n    --cwd <path>      Required when scope=project\n  --set-mcp-preset    Install a named MCP preset (e.g. cua)\n    --preset cua      Cua Driver desktop computer-use (MCP)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-mcp        Remove an MCP server entry\n    --name <id> --scope user|project [--cwd <path>]\n  --print-skills      Print skills (builtin + user + project)\n    --cwd <path>      Project root for .zelari/skills\n  --set-skill         Add/update a SKILL.md skill\n    --name <id>       Skill id (required)\n    --description <t> One-line description (required)\n    --body <text>     Markdown instructions (required)\n    --category <c>    plan|refactor|debug|review|test|docs|ops|git|db|maint\n    --tools <csv>     Comma-separated required tools (optional)\n    --cost <l>        low|medium|high (default: medium)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-skill      Remove a user/project SKILL.md\n    --name <id> --scope user|project [--cwd <path>]\n  --generate-skill-from-url  Fetch URL + draft skill via model (JSON)\n    --url <https://...>  Required\n    --provider <id>   Override active provider\n    --model <name>    Override model for the selected provider\n  --print-ssh-targets Print SSH deploy/monitor targets\n  --set-ssh-target    Upsert target (--json '{...}' or flags)\n  --remove-ssh-target --id <id>\n  --test-ssh-target   --id <id>  (BatchMode ssh true)\n  --print-ssh-pubkey  --path <private-or-.pub>  (display public key)\n\nEnvironment:\n  ZELARI_NO_WIZARD=1    Skip the first-run wizard\n  ZELARI_SKIP_PREFLIGHT=1  Skip the boot prerequisite check\n  ZELARI_NO_PLUGIN_PROMPT=1  Skip the boot plugin-install prompt\n  ANATHEMA_DEV=1        Disable background update check + preflight\n"
+      "zelari-code \u2014 AI Council coding agent CLI.\n\nUsage: zelari-code [options]\n\nOptions:\n  --version, -v       Print version and exit\n  --help, -h          Print this help and exit\n  --doctor            Diagnose install health (shim, bundle, PATH, deps,\n                      node/git/bash in the agent shell)\n  --fix-path          Add the npm global prefix to the user PATH\n                      (Windows only; fixes 'command not found' after install)\n  --fix-budget        Set recommended ZELARI_MAX_TOOL_LOOP_HARD=180,\n                      ZELARI_MAX_TOOL_LOOP_ITERATIONS=60, ZELARI_CONTEXT_LIMIT=400000\n                      at User scope (prevents the agent stopping mid-task)\n  --permission-mcp <socket>  MCP stdio server for external agent permission prompts\n                      (spawned by claude --permission-prompt-tool)\n  --skip-checks       Skip the boot-time prerequisite check\n                      (alias for ZELARI_SKIP_PREFLIGHT=1)\n  --no-wizard         Skip the first-run wizard\n  --reset-config      Re-run the wizard (clears provider.json on commit)\n  --headless          Run a single task without mounting the TUI\n    --task <text>       Task prompt (required in headless mode)\n    --output json|plain Output format (default: json)\n    --mode kraken|council|zelari  Dispatch mode (default: kraken; agent=alias)\n    --council          Alias for --mode council\n    --phase plan|build  Work phase (default: build)\n    --provider <id>    Provider override (default: active)\n    --model <id>       Model override (default: provider default)\n  serve               Companion host for Android/remote clients (Tailscale)\n    --bind <ip>       Listen address (default: 127.0.0.1; use Tailscale IP)\n    --port <n>        Port (default: 7421)\n    --token <secret>  Bearer token (default: ~/.zelari-code/companion.token)\n    --project <path>  Allowlisted project root (repeatable)\n    --save-projects   Persist --project list to companion.json\n  --print-config      Print provider/model config as JSON (no secrets)\n  --plugins-status    JSON status of optional plugins (Playwright, eslint, \u2026)\n  --plugins-install <id>  Install plugin (playwright also fetches Chromium)\n    --cwd <path>       Workspace for -D installs (default: process.cwd())\n  --set-config        Persist provider/model/endpoint\n    --provider <id>    Set active provider\n    --model <id>       Set model for that provider\n    --endpoint <url>   Custom OpenAI-compatible base URL\n    --endpoint-clear   Remove custom endpoint override\n  --set-key           Store an API key (never printed back)\n    --provider <id>    Provider id (required)\n    --key <secret>     API key (required)\n  --discover-models   Refresh model list for a provider\n    --provider <id>    Provider (default: active)\n  --print-mcp         Print MCP server config (user + project)\n    --cwd <path>      Project root for .zelari/mcp.json\n  --set-mcp           Add/update an MCP server entry\n    --name <id>       Server name (required)\n    --command <bin>   Executable (required)\n    --args <json>     JSON array of args (optional)\n    --scope user|project  Default: user\n    --enabled true|false  Default: true\n    --cwd <path>      Required when scope=project\n  --set-mcp-preset    Install a named MCP preset (e.g. cua)\n    --preset cua      Cua Driver desktop computer-use (MCP)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-mcp        Remove an MCP server entry\n    --name <id> --scope user|project [--cwd <path>]\n  --print-skills      Print skills (builtin + user + project)\n    --cwd <path>      Project root for .zelari/skills\n  --set-skill         Add/update a SKILL.md skill\n    --name <id>       Skill id (required)\n    --description <t> One-line description (required)\n    --body <text>     Markdown instructions (required)\n    --category <c>    plan|refactor|debug|review|test|docs|ops|git|db|maint\n    --tools <csv>     Comma-separated required tools (optional)\n    --cost <l>        low|medium|high (default: medium)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-skill      Remove a user/project SKILL.md\n    --name <id> --scope user|project [--cwd <path>]\n  --generate-skill-from-url  Fetch URL + draft skill via model (JSON)\n    --url <https://...>  Required\n    --provider <id>   Override active provider\n    --model <name>    Override model for the selected provider\n  --print-ssh-targets Print SSH deploy/monitor targets\n  --set-ssh-target    Upsert target (--json '{...}' or flags)\n  --remove-ssh-target --id <id>\n  --test-ssh-target   --id <id>  (BatchMode ssh true)\n  --print-ssh-pubkey  --path <private-or-.pub>  (display public key)\n\nEnvironment:\n  ZELARI_NO_WIZARD=1    Skip the first-run wizard\n  ZELARI_SKIP_PREFLIGHT=1  Skip the boot prerequisite check\n  ZELARI_NO_PLUGIN_PROMPT=1  Skip the boot plugin-install prompt\n  ANATHEMA_DEV=1        Disable background update check + preflight\n"
     );
     process.exit(0);
   }