diff --git a/.env.example b/.env.example
index 76d0139..c08b730 100644
--- a/.env.example
+++ b/.env.example
@@ -32,3 +32,6 @@ AGENT_MODEL_BASE_URL=https://ai.example.com/v1
 AGENT_MODEL_API_KEY=replace-with-provider-api-key
 AGENT_MODEL_CONTEXT_WINDOW=262000
 AGENT_MODEL_MAX_TOKENS=131072
+
+# Zopu lean server (standalone chat + work actor)
+VITE_ZOPU_SERVER_URL=http://localhost:3590
diff --git a/apps/web/src/components/standalone-chat/standalone-chat-page.tsx b/apps/web/src/components/standalone-chat/standalone-chat-page.tsx
new file mode 100644
index 0000000..9c21fc2
--- /dev/null
+++ b/apps/web/src/components/standalone-chat/standalone-chat-page.tsx
@@ -0,0 +1,186 @@
+import { env } from "@code/env/web";
+import { FlueProvider, useFlueAgent } from "@flue/react";
+import { createFlueClient } from "@flue/sdk";
+import { ArrowUp, Loader2, MessageSquare } from "lucide-react";
+import { useEffect, useMemo, useRef, useState } from "react";
+
+const STANDALONE_CHAT_ID = "zopu-standalone";
+
+const StandaloneFlueProvider = ({
+  children,
+}: {
+  children: React.ReactNode;
+}) => {
+  const client = useMemo(
+    () =>
+      createFlueClient({
+        baseUrl: env.VITE_ZOPU_SERVER_URL,
+      }),
+    []
+  );
+  return <FlueProvider client={client}>{children}</FlueProvider>;
+};
+
+const extractText = (parts: { type: string; text?: string }[]): string =>
+  parts
+    .filter((p) => p.type === "text" && p.text)
+    .map((p) => p.text ?? "")
+    .join("");
+
+const ChatMessage = ({
+  parts,
+  role,
+}: {
+  parts: { type: string; text?: string }[];
+  role: string;
+}) => {
+  const isUser = role === "user";
+  return (
+    <div
+      className={`flex w-full gap-3 px-4 py-3 ${isUser ? "justify-end" : "justify-start"}`}
+    >
+      {!isUser && (
+        <div className="mt-0.5 flex size-7 shrink-0 items-center justify-center rounded-full bg-[#1a1a19] text-[#e8e8e6]">
+          <MessageSquare className="size-3.5" />
+        </div>
+      )}
+      <div
+        className={`max-w-[78%] whitespace-pre-wrap rounded-2xl px-4 py-2.5 text-[15px] leading-relaxed ${
+          isUser ? "bg-[#e8e8e6] text-[#0e0e0d]" : "bg-[#1a1a19] text-[#e8e8e6]"
+        }`}
+      >
+        {extractText(parts) || <span className="text-[#888]">...</span>}
+      </div>
+    </div>
+  );
+};
+
+const ChatContent = () => {
+  const agent = useFlueAgent({
+    id: STANDALONE_CHAT_ID,
+    name: "zopu",
+  });
+  const [input, setInput] = useState("");
+  const scrollRef = useRef<HTMLDivElement>(null);
+
+  const hasMessages = agent.messages.length > 0;
+  const isBusy = agent.status === "submitted" || agent.status === "streaming";
+
+  useEffect(() => {
+    const el = scrollRef.current;
+    if (el) {
+      el.scrollTop = el.scrollHeight;
+    }
+  }, [agent.messages, isBusy]);
+
+  const submit = async () => {
+    const message = input.trim();
+    if (!message || isBusy) {
+      return;
+    }
+    setInput("");
+    await agent.sendMessage(message);
+  };
+
+  return (
+    <div className="flex h-svh flex-col bg-[#0e0e0d]">
+      <header className="flex items-center gap-2 border-b border-[#1f1f1e] px-4 py-3">
+        <div className="flex size-7 items-center justify-center rounded-full bg-[#e8e8e6]">
+          <span className="text-sm font-bold text-[#0e0e0d]">Z</span>
+        </div>
+        <div className="flex-1">
+          <h1 className="text-[15px] font-semibold text-[#e8e8e6]">Zopu</h1>
+          <p className="text-xs text-[#888]">
+            {isBusy ? "working..." : "ready"}
+          </p>
+        </div>
+      </header>
+
+      <div className="min-h-0 flex-1 overflow-y-auto py-2" ref={scrollRef}>
+        {!hasMessages && !agent.historyReady && (
+          <div className="flex h-full items-center justify-center">
+            <Loader2 className="size-5 animate-spin text-[#555]" />
+          </div>
+        )}
+        {!hasMessages && agent.historyReady && (
+          <div className="flex h-full flex-col items-center justify-center gap-4 px-8 text-center">
+            <div className="flex size-12 items-center justify-center rounded-2xl bg-[#1a1a19]">
+              <MessageSquare className="size-5 text-[#e8e8e6]" />
+            </div>
+            <div>
+              <p className="text-[15px] font-medium text-[#e8e8e6]">
+                Chat with Zopu
+              </p>
+              <p className="mt-1 text-sm text-[#888]">
+                Ask about issues, trigger work, or check PR status.
+              </p>
+            </div>
+            <div className="flex flex-wrap justify-center gap-2 pt-2">
+              {[
+                "List recent pull requests",
+                "Create an issue for adding a settings page",
+              ].map((suggestion) => (
+                <button
+                  className="rounded-full border border-[#2a2a29] bg-[#161615] px-3 py-1.5 text-xs text-[#aaa] transition hover:border-[#3a3a39] hover:text-[#e8e8e6]"
+                  key={suggestion}
+                  onClick={() => void agent.sendMessage(suggestion)}
+                  type="button"
+                >
+                  {suggestion}
+                </button>
+              ))}
+            </div>
+          </div>
+        )}
+        {agent.messages.map((message) => (
+          <ChatMessage
+            key={message.id}
+            parts={message.parts}
+            role={message.role}
+          />
+        ))}
+      </div>
+
+      <div className="border-t border-[#1f1f1e] px-3 py-3">
+        <div className="flex items-end gap-2 rounded-2xl border border-[#2a2a29] bg-[#161615] px-3 py-2">
+          <textarea
+            className="flex-1 resize-none bg-transparent text-[15px] text-[#e8e8e6] placeholder-[#666] outline-none"
+            onChange={(e) => setInput(e.target.value)}
+            onKeyDown={(e) => {
+              if (e.key === "Enter" && !e.shiftKey) {
+                e.preventDefault();
+                void submit();
+              }
+            }}
+            placeholder="Message Zopu..."
+            rows={1}
+            style={{ maxHeight: 120 }}
+            value={input}
+          />
+          <button
+            className={`flex size-8 shrink-0 items-center justify-center rounded-lg transition ${
+              input.trim() && !isBusy
+                ? "bg-[#e8e8e6] text-[#0e0e0d]"
+                : "bg-[#2a2a29] text-[#555]"
+            }`}
+            disabled={!input.trim() || isBusy}
+            onClick={() => void submit()}
+            type="button"
+          >
+            {isBusy ? (
+              <Loader2 className="size-4 animate-spin" />
+            ) : (
+              <ArrowUp className="size-4" />
+            )}
+          </button>
+        </div>
+      </div>
+    </div>
+  );
+};
+
+export const StandaloneChatPage = () => (
+  <StandaloneFlueProvider>
+    <ChatContent />
+  </StandaloneFlueProvider>
+);
diff --git a/apps/web/src/routes.ts b/apps/web/src/routes.ts
index 0898540..cd49f4c 100644
--- a/apps/web/src/routes.ts
+++ b/apps/web/src/routes.ts
@@ -2,6 +2,8 @@ import { index, layout, route } from "@react-router/dev/routes";
 import type { RouteConfig } from "@react-router/dev/routes";
 
 export default [
+  // Standalone chat page — no auth, mobile-first, talks to the zopu server.
+  route("chat", "./routes/standalone/chat/page.tsx"),
   layout("./routes/auth/layout.tsx", [
     route("login", "./routes/auth/login/page.tsx"),
     route("signup", "./routes/auth/signup/page.tsx"),
@@ -9,7 +11,7 @@ export default [
   layout("./routes/app/layout.tsx", [
     layout("./routes/app/mobile/layout.tsx", [
       index("./routes/app/mobile/page.tsx"),
-      route("chat", "./routes/app/mobile/chat/page.tsx"),
+      route("mobile/chat", "./routes/app/mobile/chat/page.tsx"),
       route("work", "./routes/app/mobile/work-list/page.tsx"),
       route("work/:workUnitId", "./routes/app/mobile/work/page.tsx"),
     ]),
diff --git a/apps/web/src/routes/standalone/chat/page.tsx b/apps/web/src/routes/standalone/chat/page.tsx
new file mode 100644
index 0000000..4698a12
--- /dev/null
+++ b/apps/web/src/routes/standalone/chat/page.tsx
@@ -0,0 +1,16 @@
+import { StandaloneChatPage } from "@/components/standalone-chat/standalone-chat-page";
+
+import type { Route } from "./+types/page";
+
+export const meta = (_args: Route.MetaArgs) => [
+  {
+    content: "width=device-width, initial-scale=1, viewport-fit=cover",
+    name: "viewport",
+  },
+  { content: "Chat with Zopu", name: "description" },
+  { title: "Zopu Chat" },
+];
+
+export default function Page() {
+  return <StandaloneChatPage />;
+}
diff --git a/bun.lock b/bun.lock
index 1240940..1864b58 100644
--- a/bun.lock
+++ b/bun.lock
@@ -257,6 +257,27 @@
         "vitest": "catalog:",
       },
     },
+    "packages/server": {
+      "name": "@code/server",
+      "version": "0.0.0",
+      "dependencies": {
+        "@agentos-software/codex-cli": "0.3.4",
+        "@agentos-software/git": "0.3.3",
+        "@agentos-software/opencode": "0.2.7",
+        "@agentos-software/pi": "0.2.7",
+        "@flue/runtime": "1.0.0-beta.9",
+        "@rivet-dev/agentos-core": "catalog:",
+        "effect": "catalog:",
+        "hono": "4.12.30",
+        "valibot": "^1.4.2",
+      },
+      "devDependencies": {
+        "@code/config": "workspace:*",
+        "@flue/cli": "latest",
+        "@types/bun": "catalog:",
+        "typescript": "catalog:",
+      },
+    },
     "packages/ui": {
       "name": "@code/ui",
       "version": "0.0.0",
@@ -653,6 +674,8 @@
 
     "@code/primitives": ["@code/primitives@workspace:packages/primitives"],
 
+    "@code/server": ["@code/server@workspace:packages/server"],
+
     "@code/ui": ["@code/ui@workspace:packages/ui"],
 
     "@convex-dev/better-auth": ["@convex-dev/better-auth@0.12.5", "", { "dependencies": { "@better-fetch/fetch": "^1.1.18", "common-tags": "^1.8.2", "convex-helpers": "^0.1.95", "jose": "^6.1.0", "remeda": "^2.32.0", "semver": "^7.7.3", "type-fest": "^5.0.0", "zod": "^4.0.0" }, "peerDependencies": { "better-auth": ">=1.6.11 <1.7.0", "convex": "^1.25.0", "react": "^18.3.1 || ^19.0.0" } }, "sha512-YFUbGk04OlINno9FpOTNZN67AP+kSQsblfep5zs1f/WTgMWjD5FymU6rSSh3mu52gukmDNnBJTjC/lj4QRpjlQ=="],
@@ -3189,7 +3212,7 @@
 
     "parse-png": ["parse-png@2.1.0", "", { "dependencies": { "pngjs": "^3.3.0" } }, "sha512-Nt/a5SfCLiTnQAjx3fHlqp8hRgTL3z7kTQZzvIMS9uCAepnCyjpdEc6M/sz69WqMBdaDBw9sF1F1UaHROYzGkQ=="],
 
-    "parse5": ["parse5@7.3.0", "", { "dependencies": { "entities": "^6.0.0" } }, "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw=="],
+    "parse5": ["parse5@5.1.1", "", {}, "sha512-ugq4DFI0Ptb+WWjAdOK16+u/nHfiIrcE+sh8kZMaM0WllQKLI9rOUq6c2b7cwPkXdzfQESqvoqK6ug7U/Yyzug=="],
 
     "parse5-htmlparser2-tree-adapter": ["parse5-htmlparser2-tree-adapter@6.0.1", "", { "dependencies": { "parse5": "^6.0.1" } }, "sha512-qPuWvbLgvDGilKc5BoicRovlT4MtYT6JfJyBOMDsKoiT+GiuP5qyrPCnR9HcPECIJJmZh5jRndyNThnhhb/vlA=="],
 
@@ -3981,6 +4004,8 @@
 
     "@code/backend/@types/node": ["@types/node@24.13.3", "", { "dependencies": { "undici-types": "~7.18.0" } }, "sha512-Dh8vAsV36ig5wa9OX4pXvMc9D3Veibfw2wix0CUwYODLD8nkj9UsLjASr49nPg+2eKzxhBV+v7L8pXvT4e639Q=="],
 
+    "@code/server/hono": ["hono@4.12.30", "", {}, "sha512-emn+JoJjrN9YTpRDS5it/UI2SO9BAE37T6I3d963RxcZ81G9A4pr2SZTEiiaiKbzx+NKRg5BZ89fCL7gCJCUog=="],
+
     "@cspotcode/source-map-support/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.9", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.0.3", "@jridgewell/sourcemap-codec": "^1.4.10" } }, "sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ=="],
 
     "@dotenvx/dotenvx/commander": ["commander@11.1.0", "", {}, "sha512-yPVavfyCcRhmorC7rWlkHn15b4wDVgVmBA7kV4QVBsF7kv/9TKJAbAXVTxvTnwP8HHKjRCJDClKbciiYS7p0DQ=="],
@@ -4153,8 +4178,6 @@
 
     "cli-highlight/chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
 
-    "cli-highlight/parse5": ["parse5@5.1.1", "", {}, "sha512-ugq4DFI0Ptb+WWjAdOK16+u/nHfiIrcE+sh8kZMaM0WllQKLI9rOUq6c2b7cwPkXdzfQESqvoqK6ug7U/Yyzug=="],
-
     "cli-highlight/yargs": ["yargs@16.2.2", "", { "dependencies": { "cliui": "^7.0.2", "escalade": "^3.1.1", "get-caller-file": "^2.0.5", "require-directory": "^2.1.1", "string-width": "^4.2.0", "y18n": "^5.0.5", "yargs-parser": "^20.2.2" } }, "sha512-Nt9ZJjXTv5R8MHbqby/wXQ6Gi0Bb3TcYZkR1bzuL4yB2OxWPkXknz513gEF0GoA6tn00UpbPvERW8rzCuWCA6w=="],
 
     "cliui/string-width": ["string-width@4.2.3", "", { "dependencies": { "emoji-regex": "^8.0.0", "is-fullwidth-code-point": "^3.0.0", "strip-ansi": "^6.0.1" } }, "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g=="],
@@ -4241,6 +4264,10 @@
 
     "googleapis-common/uuid": ["uuid@9.0.1", "", { "bin": { "uuid": "dist/bin/uuid" } }, "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA=="],
 
+    "hast-util-from-html/parse5": ["parse5@7.3.0", "", { "dependencies": { "entities": "^6.0.0" } }, "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw=="],
+
+    "hast-util-raw/parse5": ["parse5@7.3.0", "", { "dependencies": { "entities": "^6.0.0" } }, "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw=="],
+
     "hoist-non-react-statics/react-is": ["react-is@16.13.1", "", {}, "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ=="],
 
     "hosted-git-info/lru-cache": ["lru-cache@11.5.2", "", {}, "sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g=="],
diff --git a/docs/dogfood-plan.md b/docs/dogfood-plan.md
new file mode 100644
index 0000000..90528bf
--- /dev/null
+++ b/docs/dogfood-plan.md
@@ -0,0 +1,1281 @@
+You are the lead engineering agent responsible for shipping the first working Zopu dogfooding loop today.
+
+You are not here to merely produce a plan. You must inspect the repository, create isolated Paseo workspaces, spawn parallel GLM 5.2 coding agents, supervise them, review their work, request corrections, integrate their branches, run the complete system, and leave the repository in a demonstrably working state.
+
+You have shell access and may use the Paseo CLI to create and manage other Codex agents.
+
+All child agents must use:
+
+  --provider codex/glm-5.2
+
+The current repository is the Zopu monorepo. It already contains product documentation, design documentation, technical documentation, Effect primitives, Convex backend code, web/mobile/desktop applications, agent code, project-management primitives, Signals, and partial AgentOS/Rivet integration.
+
+The starting branch is expected to be:
+
+  feat/projects-backend
+
+Verify this rather than blindly assuming it.
+
+The final integration branch should be:
+
+  dogfood/v0
+
+Your job is to manage the entire implementation through parallel isolated worktrees.
+
+======================================================================
+1. PRODUCT OBJECTIVE
+======================================================================
+
+Ship the smallest complete Zopu dogfooding loop for the Zopu repository itself:
+
+1. The user opens the Zopu web application.
+2. The user selects the Zopu project.
+3. The project has access to:
+   - product.md / PRODUCT.md
+   - design.md / DESIGN.md
+   - tech.md / TECH.md
+   - AGENTS.md
+   - repository source and Git history
+4. The user sends a message through project chat.
+5. Zopu stores the exact message as evidence and extracts a Signal.
+6. The Signal either:
+   - attaches to an existing related work unit; or
+   - creates a new work unit.
+7. For this version, an existing ProjectIssue may serve as the work-unit implementation.
+8. Starting the work unit creates or resumes an execution run.
+9. The Zopu orchestration agent delegates coding to an Orb.
+10. The Orb consists of:
+    - AgentOS
+    - OpenCode
+    - an attached Docker sandbox
+    - repository checkout/worktree
+    - project context
+    - runtime tools
+    - model-gateway configuration
+11. OpenCode:
+    - reads the issue and project context;
+    - edits the repository;
+    - runs tests;
+    - iterates on failures;
+    - asks questions when blocked;
+    - commits and pushes a branch;
+    - opens a pull request.
+12. Events, Signals, steps, questions, artifacts, commits and the PR are shown in the work-unit card.
+13. The user can send a contextual follow-up to the same work unit.
+14. The same orchestration context and OpenCode run should continue when possible.
+15. The user manually reviews and merges the PR.
+
+The completed proof should be something like:
+
+  User:
+  “Add a health endpoint that exposes the current build commit.”
+
+  Result:
+  ✓ exact message evidence stored
+  ✓ Signal created
+  ✓ Work Unit created or updated
+  ✓ work started
+  ✓ Orb provisioned
+  ✓ OpenCode session started
+  ✓ repository changed
+  ✓ tests executed
+  ✓ branch committed and pushed
+  ✓ pull request opened
+  ✓ work card updated
+  ✓ contextual follow-up reaches the active work
+
+======================================================================
+2. HARD SCOPE
+======================================================================
+
+This is a narrow dogfooding implementation.
+
+Implement only:
+
+- one user;
+- one organization;
+- one project;
+- one repository: zopu-code;
+- web application only;
+- one primary mutating execution at a time;
+- OpenCode as the coding harness;
+- GLM 5.2 as the inference model;
+- Docker as the full execution sandbox;
+- AgentOS as the harness/orchestration environment;
+- Convex as the existing control-plane backend;
+- self-hosted Git/Gitea as source control;
+- manual pull-request merge.
+
+Do not build:
+
+- general multitenancy;
+- arbitrary repository onboarding;
+- customer-facing billing;
+- mobile UI;
+- desktop UI;
+- TUI changes;
+- stable production deployment of generated applications;
+- multiple sandbox providers;
+- agent swarms;
+- elaborate prioritization systems;
+- complex work-unit status taxonomy;
+- Slack, Telegram or email ingestion;
+- broad refactors unrelated to the dogfooding loop;
+- speculative frameworks that are not needed by the loop.
+
+ProjectIssue may remain the backend representation of a Work Unit for this version.
+
+Project events may represent execution steps and activity.
+
+Project artifacts may represent:
+- work.md;
+- steps.md;
+- agent reports;
+- test output;
+- diffs;
+- commits;
+- pull requests.
+
+======================================================================
+3. OPERATING RULES
+======================================================================
+
+Before changing anything:
+
+1. Run:
+   - pwd
+   - git status
+   - git branch --show-current
+   - git remote -v
+2. Read:
+   - root AGENTS.md
+   - product documentation
+   - design documentation
+   - technical documentation
+   - smoke/testing documentation
+3. Inspect existing packages and flows before creating replacements.
+4. Confirm whether the current orchestration framework is Flue rather than Flask. Treat speech-to-text references to “Flask agent” as untrusted until confirmed in the code.
+5. Inspect:
+   - Signals primitive
+   - ProjectIssue primitive
+   - project workspace hooks
+   - project-manager agent
+   - Zopu agent
+   - daemon
+   - AgentOS registry
+   - Git/Gitea actions
+   - existing smoke tests
+6. Search for current TODOs and unfinished contracts.
+7. Reuse existing abstractions when they are sound.
+8. Do not redesign the entire repository.
+
+Engineering requirements:
+
+- Follow existing Effect v4 conventions.
+- Preserve dependency direction.
+- Use tagged domain errors rather than generic thrown strings.
+- Validate external data with schemas.
+- Preserve exact provenance for user messages and agent events.
+- Keep infrastructure implementation out of pure domain packages.
+- Do not expose model, Git, Convex or infrastructure credentials in generated repository files.
+- Never let generated model text become trusted evidence without provenance.
+- Do not auto-merge pull requests.
+- Do not run multiple mutating agents in the same Git checkout.
+- Keep every child agent inside an isolated Paseo worktree.
+- Every child agent must commit its work.
+- Prefer that every child agent pushes its branch and opens a PR targeting dogfood/v0.
+- If the Git CLI cannot open a PR automatically, require the agent to leave exact commands and a complete PR description.
+- Do not let child agents merge their own branches.
+- The lead agent reviews and integrates them.
+
+When an agent is blocked:
+
+- inspect its logs;
+- send a focused follow-up using `paseo send`;
+- do not restart from scratch unless the workspace is broken;
+- continue supervising other lanes in parallel.
+
+Do not stop after spawning agents. You must monitor and integrate them.
+
+======================================================================
+4. INITIAL BRANCH PREPARATION
+======================================================================
+
+Inspect the current branch.
+
+If currently on feat/projects-backend:
+
+  git pull --ff-only
+  git switch -c dogfood/v0
+  git push -u origin dogfood/v0
+
+If dogfood/v0 already exists:
+
+  git switch dogfood/v0
+  git pull --ff-only
+
+If the expected branch is different, inspect the repository history and choose the branch containing the current projects backend work. Do not discard existing uncommitted work.
+
+Run the baseline checks before spawning agents. Record failures but do not spend the entire session fixing unrelated pre-existing problems.
+
+Suggested baseline:
+
+  bun install
+  bun run check
+
+Also inspect package-specific scripts and use the actual commands defined by the repository.
+
+======================================================================
+5. PASEO ORCHESTRATION
+======================================================================
+
+Verify Paseo first:
+
+  paseo status
+  paseo ls
+
+If the daemon is unavailable, inspect:
+
+  tail -n 200 ~/.paseo/daemon.log
+
+Do not continue spawning until Paseo works.
+
+For every child lane:
+
+1. Create a worktree workspace:
+
+   paseo workspace create \
+     --isolation worktree \
+     --mode branch-off \
+     --new-branch <branch> \
+     --base dogfood/v0 \
+     --title "<title>" \
+     --json
+
+2. Read the returned workspaceId.
+
+3. Start the child agent:
+
+   paseo run \
+     --provider codex/glm-5.2 \
+     --workspace <workspaceId> \
+     --title "<title>" \
+     --background \
+     --json \
+     "<full lane prompt>"
+
+4. Save:
+   - branch;
+   - workspaceId;
+   - agentId;
+   - task;
+   - current status.
+
+Maintain an orchestration note in a temporary file outside committed product code, for example:
+
+  /tmp/zopu-dogfood-orchestration.md
+
+Track:
+
+| Lane | Branch | Workspace ID | Agent ID | Status | PR |
+|------|--------|--------------|----------|--------|----|
+
+Use:
+
+  paseo ls
+  paseo inspect <agentId>
+  paseo logs <agentId>
+  paseo send <agentId> "<focused instruction>"
+  paseo wait <agentId>
+
+Do not block waiting on one child while others are still running. Poll all first-wave agents periodically.
+
+======================================================================
+6. SHARED CHILD-AGENT PREFIX
+======================================================================
+
+Prepend the following instructions to every child prompt:
+
+You are implementing one isolated lane of the Zopu dogfood v0 loop.
+
+Repository base branch:
+  dogfood/v0
+
+Your branch is already isolated in a Paseo Git worktree.
+
+Before changing code:
+
+1. Read root AGENTS.md.
+2. Read the product, design and technical Markdown files.
+3. Read smoke/testing documentation.
+4. Inspect the current implementation before proposing replacements.
+5. Preserve the existing Effect v4, Convex, Flue, AgentOS and repository boundaries.
+6. Do not edit generated Convex output manually.
+7. Do not edit vendored repositories.
+8. Do not modify mobile, desktop or TUI code unless this task explicitly requires it.
+9. Do not build general multitenancy, arbitrary repository support or speculative abstractions.
+10. Keep the implementation focused on the one-repository Zopu dogfooding loop.
+
+While working:
+
+- Make incremental changes.
+- Preserve existing behavior outside your lane.
+- Add focused tests.
+- Use tagged errors and schema validation at boundaries.
+- Do not store credentials in source code.
+- Do not merge branches.
+- Do not alter another lane’s primary ownership unless required to fix a compile contract. When cross-lane changes are unavoidable, keep them minimal and document them.
+
+Before finishing:
+
+1. Run formatting/linting for every changed file.
+2. Run targeted tests.
+3. Run package type checks.
+4. Run the root check.
+5. Clearly separate pre-existing unrelated failures from failures caused by your changes.
+6. Review `git diff`.
+7. Commit all intended changes.
+8. Push your branch.
+9. Open a pull request targeting dogfood/v0 when tooling permits.
+10. Return:
+    - summary;
+    - changed files;
+    - architecture decisions;
+    - tests run;
+    - exact failures;
+    - environment variables;
+    - PR URL or exact PR creation instructions;
+    - remaining limitations.
+
+======================================================================
+7. FIRST-WAVE PARALLEL LANES
+======================================================================
+
+Spawn all four first-wave agents immediately.
+
+----------------------------------------------------------------------
+LANE A — PROJECT CHAT, SIGNALS AND WORK ROUTING
+----------------------------------------------------------------------
+
+Branch:
+
+  dogfood/zopu-orchestrator
+
+Title:
+
+  Zopu Signals Orchestrator
+
+Prompt:
+
+Implement the project-scoped Zopu chat, Signal extraction and work-routing loop.
+
+Inspect the existing:
+- Zopu agent;
+- Signals primitive;
+- ProjectIssue primitive;
+- Convex Signal functions;
+- project-issue functions;
+- current Flue routes and authenticated agent transport;
+- project workspace hooks.
+
+Goal:
+
+A user sends a message in the selected project context.
+
+The system must:
+
+1. store the exact user message as evidence;
+2. create a Signal only when the message contains an actionable problem, request, opportunity, blocker or decision;
+3. inspect related open ProjectIssues;
+4. choose one of:
+   - attach the Signal to a related existing ProjectIssue;
+   - create a new ProjectIssue from the Signal;
+5. return a clear user-facing explanation of what happened;
+6. optionally allow the issue to be started;
+7. preserve project and organization scope;
+8. be idempotent under retries.
+
+Required tools or application capabilities:
+
+- read selected project;
+- read project context documents;
+- list recent project Signals;
+- list active ProjectIssues;
+- create Signal from exact stored evidence;
+- attach Signal to an existing ProjectIssue;
+- create ProjectIssue from Signal;
+- optionally begin the ProjectIssue.
+
+Rules:
+
+- The model must not supply or rewrite the raw source message.
+- Store a reference to the exact persisted message.
+- Do not create work from casual chat.
+- Ask one focused clarification when genuinely ambiguous.
+- Repeated delivery of the same message must not create duplicate Signals or duplicate attachments.
+- Reject cross-project and cross-organization access.
+- Use a proper relation if multiple Signals need to attach to one ProjectIssue.
+- Do not create generic WorkUnit architecture in this lane unless the repository already has it and it is required.
+- Do not implement background ingestion.
+- Do not touch Orb runtime implementation.
+
+Acceptance examples:
+
+Message:
+  “The work-unit card should expose the generated PR.”
+
+Expected:
+- exact message persisted;
+- Signal created;
+- attached to an existing UI/workspace issue if relevant;
+- otherwise a new ProjectIssue is created.
+
+Tests:
+
+- authentication;
+- project scoping;
+- idempotency;
+- attach versus create;
+- exact-message provenance;
+- casual conversation does not create work;
+- cross-project rejection.
+
+Likely ownership:
+
+- packages/agents/src/agents/zopu*
+- packages/agents/src/tools/*
+- packages/backend/convex/signals*
+- packages/backend/convex/projectIssues*
+- packages/backend/convex/schema*
+- Signal/project-issue primitives only as required.
+
+----------------------------------------------------------------------
+LANE B — ORB RUNTIME FOUNDATION
+----------------------------------------------------------------------
+
+Branch:
+
+  dogfood/orb-runtime
+
+Title:
+
+  AgentOS OpenCode Orb Runtime
+
+Prompt:
+
+Build the first real Zopu Orb runtime as a focused infrastructure/application package.
+
+Do not wire it into the existing project-manager agent yet. Provide the runtime contract, implementation and a bounded proof.
+
+Definition:
+
+An Orb is one logical execution workspace for one ProjectIssue run.
+
+For this version it contains:
+
+- AgentOS actor;
+- OpenCode harness;
+- Docker sandbox;
+- mounted repository workspace;
+- project context;
+- model-gateway configuration;
+- process/log handling;
+- normalized execution events;
+- cleanup lifecycle.
+
+Required stack:
+
+- existing Effect v4 conventions;
+- @rivet-dev/agentos;
+- @agentos-software/opencode;
+- @rivet-dev/agentos-sandbox or the current supported equivalent;
+- Docker sandbox provider;
+- existing repository preparation primitives;
+- existing model-gateway conventions.
+
+Do not use `opencode serve` unless the repository already requires it for a proven reason. Prefer native AgentOS/OpenCode ACP integration.
+
+Define a narrow domain and application contract:
+
+- OrbId;
+- OrbRunId;
+- OrbSessionId;
+- Orb state;
+- run state;
+- normalized OrbEvent;
+- tagged failures.
+
+Suggested operations:
+
+- create or resolve Orb;
+- prepare repository;
+- attach Docker sandbox;
+- open OpenCode session;
+- send initial task;
+- send follow-up;
+- stream normalized events;
+- execute commands;
+- read process logs;
+- cancel;
+- collect results;
+- dispose or suspend.
+
+Keep product-domain concepts separate from infrastructure leases.
+
+Do not make AgentOS VM state equal the work-unit state.
+
+Actor identity must include:
+- project;
+- issue/work unit;
+- run.
+
+Runtime behavior:
+
+1. Create AgentOS actor.
+2. Create one Docker sandbox for the Orb.
+3. Prepare a project checkout or worktree.
+4. Mount the sandbox project directory into AgentOS at a stable path.
+5. Configure OpenCode under its expected configuration location.
+6. Run OpenCode inside AgentOS.
+7. Execute Bun, package-manager, test and build commands through Docker.
+8. Stream meaningful events without exposing secrets.
+9. Support bounded cancellation and cleanup.
+10. Preserve enough session identity to send a later follow-up.
+
+Security:
+
+- no permanent provider credentials in project files;
+- no global Git credential;
+- use run-scoped runtime credentials when possible;
+- redact secrets from logs;
+- restrict writable mounts;
+- no production deployment capability;
+- no automatic merge capability.
+
+Proof fixture:
+
+Provide one local command or opt-in integration test that:
+
+1. creates an Orb;
+2. starts a Docker sandbox;
+3. writes or prepares a tiny TypeScript project;
+4. opens OpenCode;
+5. sends a bounded task;
+6. executes one command in Docker;
+7. streams events;
+8. cancels or completes;
+9. cleans up.
+
+Document:
+
+- environment variables;
+- local startup;
+- Docker requirements;
+- AgentOS endpoint;
+- model gateway;
+- filesystem layout;
+- current limitations.
+
+Do not modify:
+- Zopu chat behavior;
+- project-manager delegation;
+- web UI.
+
+----------------------------------------------------------------------
+LANE C — WEB WORKSPACE AND WORK CARDS
+----------------------------------------------------------------------
+
+Branch:
+
+  dogfood/web-workspace
+
+Title:
+
+  Zopu Web Work OS
+
+Prompt:
+
+Turn the current project workspace into the minimal web Work OS required for dogfooding.
+
+Use the existing Convex backend, project Signals, ProjectIssues, project events, artifacts and Flue agent transport.
+
+Do not make backend schema changes unless a tiny compatibility fix is absolutely required. Coordinate through existing contracts.
+
+Product projection:
+
+- ProjectIssue appears to the user as a Work Unit.
+- Signals are source evidence and inputs.
+- Project events are the step/activity timeline.
+- Project artifacts include plans, logs, diffs, commits and PRs.
+- A selected Work Unit has contextual chat.
+- Project chat is global within the selected project.
+
+Required interface:
+
+Header:
+- Zopu;
+- current project;
+- project/runtime connection status;
+- basic project switcher if already supported.
+
+Main surface:
+- global project conversation;
+- active Work Unit cards;
+- lightweight Signals display;
+- persistent composer.
+
+Collapsed Work Unit card:
+- title;
+- latest summary;
+- linked Signal count;
+- current activity;
+- step count;
+- artifact count;
+- PR indicator;
+- needs-input indicator when available.
+
+Expanded Work Unit:
+- objective;
+- linked Signals and provenance;
+- current plan or steps;
+- event/activity timeline;
+- questions/blockers;
+- artifacts;
+- commit or PR information;
+- contextual chat composer;
+- start or continue action.
+
+Composer modes:
+
+- Project
+- Selected Work Unit
+
+Project mode sends messages to the Zopu/global project agent.
+
+Work Unit mode sends messages to the existing issue-scoped project-manager agent identity.
+
+Do not create visible chat threads or session history navigation.
+
+A follow-up to a selected Work Unit should use the same issue identity and continue the existing agent context.
+
+Visual direction:
+
+- dark;
+- calm;
+- Apple-like;
+- large rounded surfaces;
+- readable dense information;
+- minimal borders;
+- restrained accent;
+- mobile-responsive web, but do not build native apps;
+- no Kanban board;
+- no model selector;
+- no thinking-level selector;
+- no raw infrastructure debug UI in the main experience.
+
+Implementation guidance:
+
+- Refactor oversized workspace components into focused components when useful.
+- Keep queries/mutations in hooks.
+- Keep presentation components mostly pure.
+- Preserve Convex reactivity.
+- Do not duplicate native/mobile abstractions.
+- Make loading, empty, error and needs-input states clear.
+- PR links must be directly usable.
+
+Acceptance:
+
+A signed-in user can:
+
+1. open the Zopu project;
+2. chat globally;
+3. see a resulting Work Unit;
+4. start it;
+5. select it;
+6. inspect Signals, events and artifacts;
+7. send a contextual follow-up;
+8. open a resulting PR.
+
+Tests:
+
+- event-to-card projection;
+- artifact display;
+- composer scope switching;
+- selected issue identity;
+- empty state;
+- needs-input display.
+
+----------------------------------------------------------------------
+LANE D — SINGLE-NODE EXECUTION DEPLOYMENT
+----------------------------------------------------------------------
+
+Branch:
+
+  dogfood/runtime-deploy
+
+Title:
+
+  Zopu Dedicated Runtime Deployment
+
+Prompt:
+
+Create the smallest reproducible deployment for the Zopu execution plane on a fresh Debian dedicated server.
+
+Context:
+
+- Convex is already deployed.
+- The dedicated server has approximately 12 CPU cores and 40 GB RAM.
+- Debian is freshly installed.
+- The execution plane should initially be single-node.
+- Docker sandboxes will execute repository workloads.
+- The web app does not need to be deployed in this lane.
+
+Deploy or document:
+
+1. Docker Engine.
+2. Bun.
+3. single-node Rivet Engine / current required AgentOS runtime.
+4. Zopu agent service.
+5. Bun/Effect daemon.
+6. Docker access required for Orb sandboxes.
+7. persistent logs.
+8. health checks.
+9. restart behavior.
+10. repository update workflow.
+
+Prefer:
+
+- Docker Compose for infrastructure where appropriate;
+- systemd for long-running application services where useful;
+- private networking;
+- Tailscale when available;
+- Caddy only for endpoints that genuinely need HTTP exposure;
+- single-node persistent filesystem storage;
+- non-root services where practical.
+
+Do not introduce:
+
+- Kubernetes;
+- PostgreSQL solely for Rivet;
+- multi-node coordination;
+- public administration endpoints;
+- secrets committed to the repository;
+- web-app deployment;
+- production generated-app hosting.
+
+Deliverables:
+
+- install/bootstrap script;
+- Compose file or equivalent;
+- systemd service files where useful;
+- environment template;
+- deployment documentation;
+- health-check script;
+- start/stop/restart commands;
+- log inspection commands;
+- update-to-commit procedure;
+- rollback procedure;
+- Docker cleanup guidance;
+- disk-space monitoring;
+- firewall/private-network notes.
+
+Required environment groups:
+
+- Convex;
+- self-hosted Git/Gitea;
+- model gateway;
+- AgentOS/Rivet;
+- Zopu agent;
+- daemon;
+- Docker sandbox;
+- service authentication.
+
+The deployment must be reproducible on a clean Debian host.
+
+Do not require the developer’s MacBook to remain online after deployment.
+
+======================================================================
+8. FIRST-WAVE MONITORING
+======================================================================
+
+After spawning all four first-wave agents:
+
+1. Record all agent and workspace IDs.
+2. Run `paseo ls`.
+3. Inspect each agent after a few minutes.
+4. Read logs for stalled or questioning agents.
+5. Send corrections when needed.
+6. Ensure agents are not editing each other’s lanes unnecessarily.
+7. Prevent lane B from wiring into project-manager prematurely.
+8. Prevent lane C from inventing a new backend schema.
+9. Prevent lane D from overengineering deployment.
+10. Prevent lane A from creating a second competing work-unit model.
+
+Use concise interventions.
+
+Examples:
+
+  paseo send <agentId> "Keep ProjectIssue as the v0 Work Unit. Do not introduce a second generic work-unit schema."
+
+  paseo send <agentId> "Do not wire project-manager yet. Finish the Orb port, adapter and proof fixture only."
+
+  paseo send <agentId> "Use existing Convex contracts. Avoid backend schema changes in the UI lane."
+
+Wait until each first-wave agent is idle, then inspect:
+
+  paseo inspect <agentId>
+  paseo logs <agentId>
+
+Review each branch yourself.
+
+For every lane:
+
+- inspect commit history;
+- inspect diff;
+- run targeted tests;
+- run package checks;
+- verify no secrets;
+- verify no unrelated broad refactors;
+- verify documentation;
+- verify branch was pushed;
+- verify PR targets dogfood/v0.
+
+Do not merge a failing lane merely because the child says it works.
+
+======================================================================
+9. FIRST-WAVE MERGE PROCESS
+======================================================================
+
+Recommended merge order:
+
+1. dogfood/zopu-orchestrator
+2. dogfood/orb-runtime
+3. dogfood/web-workspace
+4. dogfood/runtime-deploy
+
+Before every merge:
+
+  git switch dogfood/v0
+  git pull --ff-only
+  git fetch origin
+  git log --oneline --decorate --max-count=10 origin/<branch>
+  git diff dogfood/v0...origin/<branch>
+
+Run lane-specific checks.
+
+Merge using the repository’s normal PR workflow when possible.
+
+If merging locally:
+
+  git merge --no-ff origin/<branch>
+
+Resolve conflicts conservatively.
+
+After each merge:
+
+  bun install
+  run targeted checks
+  git push origin dogfood/v0
+
+Do not squash away useful commits unless repository policy requires squashing.
+
+======================================================================
+10. SECOND-WAVE LANE — WIRE PROJECT MANAGER TO ORBS
+======================================================================
+
+Only spawn this lane after the Orb runtime branch is integrated into dogfood/v0.
+
+Branch:
+
+  dogfood/orb-wiring
+
+Title:
+
+  Project Manager Orb Wiring
+
+Create its Paseo workspace from the updated dogfood/v0 branch.
+
+Prompt:
+
+Wire the existing ProjectIssue execution flow to the merged Orb runtime.
+
+Goal:
+
+The issue-scoped project-manager becomes a thin orchestration agent.
+
+OpenCode inside the Orb performs repository implementation.
+
+Required flow:
+
+1. User starts a ProjectIssue.
+2. The project-manager creates or resumes its Orb run.
+3. The project-manager assembles a concise context pack from:
+   - ProjectIssue;
+   - exact Signal evidence;
+   - project context files;
+   - AGENTS.md;
+   - relevant repository metadata;
+   - previous work artifacts.
+4. The project-manager sends the implementation objective to OpenCode.
+5. OpenCode edits and verifies in the Docker sandbox.
+6. Orb events are normalized into durable project events.
+7. Meaningful updates refresh the issue summary.
+8. OpenCode questions create a needs-input condition visible to the user.
+9. A later contextual user message is forwarded to the same OpenCode session when the session remains valid.
+10. A resumable replacement session may be created only when required by runtime loss, with previous context restored.
+11. Verification runs in Docker.
+12. Once verification passes:
+    - commit;
+    - push branch;
+    - create PR using the existing Git/Gitea lifecycle.
+13. Store:
+    - branch;
+    - commit;
+    - diff;
+    - verification report;
+    - PR metadata;
+    - agent summary.
+14. Mark completed only when:
+    - a PR exists; or
+    - a verified no-change result is explicitly recorded.
+15. Never merge automatically.
+
+Refactor the current Git lifecycle so it can be invoked from the Orb/application layer without requiring a particular interactive Flue shell, while preserving compatible existing adapters.
+
+Failure mapping:
+
+- runtime unavailable:
+  infrastructure failure with clear reason;
+- missing user context:
+  needs input;
+- failed tests that can be repaired:
+  agent continues;
+- unrecoverable repeated failure:
+  failed with logs and evidence;
+- cancellation:
+  terminate OpenCode and sandbox processes;
+- Git rejection:
+  preserve commit and expose exact failure;
+- PR creation failure:
+  retain pushed branch and retry safely.
+
+Idempotency:
+
+- starting the same active issue must not create duplicate active runs;
+- repeated completion events must not create duplicate commits or PRs;
+- follow-up messages must not accidentally create a separate unrelated issue;
+- retries must reuse stable run identity where safe.
+
+Tests:
+
+- fake Orb adapter;
+- fake Git adapter;
+- first-message start;
+- follow-up forwarding;
+- needs-input handling;
+- cancellation;
+- duplicate-start prevention;
+- successful PR completion;
+- failed PR creation recovery;
+- one opt-in live local integration test.
+
+Do not add multi-agent parallel execution.
+
+======================================================================
+11. SECOND-WAVE REVIEW AND MERGE
+======================================================================
+
+Monitor the orb-wiring agent closely.
+
+This lane crosses several boundaries and is the most likely to overreach.
+
+Intervene if it:
+
+- edits repository code directly from project-manager;
+- bypasses the Orb abstraction;
+- creates a new source-control system;
+- duplicates the existing project issue lifecycle;
+- exposes raw OpenCode event noise directly to the UI;
+- auto-merges;
+- starts several mutating runs for one issue.
+
+Review and merge it into dogfood/v0 only after:
+
+- fake integration tests pass;
+- affected packages type-check;
+- cancellation works;
+- idempotency is demonstrated;
+- no secrets appear in logs or artifacts.
+
+======================================================================
+12. FINAL LANE — END-TO-END DOGFOOD INTEGRATION
+======================================================================
+
+After all implementation lanes are merged, spawn the final integration agent.
+
+Branch:
+
+  dogfood/e2e-integration
+
+Title:
+
+  Zopu Dogfood End-to-End
+
+Prompt:
+
+Integrate and prove the complete Zopu dogfood v0 loop.
+
+Do not add new product scope. Fix integration defects and missing glue only.
+
+Required live scenario:
+
+1. Authenticate.
+2. Select or bootstrap the Zopu project.
+3. Confirm project context files are available.
+4. Send this or an equivalently tiny deterministic request through project chat:
+
+   “Add a health endpoint that exposes the current build commit.”
+
+5. Confirm the exact user message is durably stored.
+6. Confirm a Signal is created.
+7. Confirm the Signal creates or attaches to a ProjectIssue.
+8. Confirm a Work Unit card appears.
+9. Start the Work Unit.
+10. Confirm project-manager delegates to an Orb.
+11. Confirm AgentOS starts.
+12. Confirm Docker sandbox starts.
+13. Confirm repository checkout/worktree is prepared.
+14. Confirm OpenCode session starts with the correct context.
+15. Confirm OpenCode modifies the branch.
+16. Confirm tests or verification run.
+17. Confirm progress events update the work card.
+18. Confirm artifacts are generated.
+19. Confirm commit and push succeed.
+20. Confirm a Gitea PR is created.
+21. Confirm the web UI exposes the PR link.
+22. Send a contextual follow-up to the same Work Unit.
+23. Confirm the follow-up reaches the same active or resumably restored work context.
+
+Extend the existing smoke/test infrastructure rather than creating a disconnected framework.
+
+The smoke harness must support:
+
+- preflight-only;
+- one complete run;
+- sanitized JSON report;
+- bounded timeout;
+- stable success marker;
+- stable blocked marker;
+- cleanup instructions.
+
+Preflight checks:
+
+- Convex reachable;
+- authentication valid;
+- project exists;
+- Git repository reachable;
+- Git credentials valid;
+- daemon healthy;
+- Zopu agent healthy;
+- Rivet/AgentOS healthy;
+- Docker healthy;
+- OpenCode package available;
+- model gateway reachable;
+- GLM model usable;
+- repository writable;
+- Gitea PR creation available.
+
+Verification matrix:
+
+- primitive tests;
+- backend tests;
+- agents type check;
+- daemon type check/build;
+- Orb tests;
+- web tests;
+- web build;
+- root check;
+- smoke preflight;
+- live dogfood scenario.
+
+Produce:
+
+  docs/DOGFOOD_V0.md
+
+It must contain:
+
+- architecture summary;
+- exact service startup order;
+- required environment variables;
+- local MacBook development flow;
+- dedicated-server runtime flow;
+- exact demo procedure;
+- health checks;
+- logs;
+- failure recovery;
+- cleanup;
+- known limitations;
+- next incremental milestones.
+
+Commit, push and open a PR targeting dogfood/v0.
+
+======================================================================
+13. FINAL INTEGRATION RESPONSIBILITIES
+======================================================================
+
+After the final agent completes:
+
+1. Review its branch.
+2. Run the full verification matrix yourself.
+3. Merge it into dogfood/v0.
+4. Push dogfood/v0.
+5. Deploy or start the execution plane using the runtime runbook.
+6. Run the real smoke flow.
+7. Open the web application.
+8. Verify the Work Unit card and contextual chat manually.
+9. Verify the PR exists in the self-hosted Git system.
+10. Capture exact remaining failures.
+
+If the full live path cannot complete:
+
+- identify the first broken boundary;
+- fix that boundary;
+- do not mask it with fake success data;
+- rerun from a clean Signal or deterministic test issue;
+- preserve logs and artifacts.
+
+The final system must not claim that a PR exists unless it exists in Git.
+
+======================================================================
+14. QUALITY GATES
+======================================================================
+
+A lane is not done merely because code was generated.
+
+Every merged lane must satisfy:
+
+- no uncommitted intended changes;
+- no secrets committed;
+- no generated Convex files manually edited;
+- no unrelated mobile/desktop/TUI changes;
+- no second conflicting work-unit abstraction;
+- no automatic PR merge;
+- tagged errors for infrastructure failures;
+- schema validation at external boundaries;
+- idempotent retry behavior where relevant;
+- focused tests;
+- clear documentation;
+- branch pushed;
+- PR or merge record available.
+
+The complete v0 must satisfy:
+
+- project chat works;
+- exact evidence is retained;
+- Signal appears;
+- work appears;
+- work starts;
+- Orb starts;
+- OpenCode runs;
+- Docker executes commands;
+- events update;
+- user can answer a question;
+- changes are committed;
+- PR is created;
+- PR is visible in the UI.
+
+======================================================================
+15. RESOURCE AND CONCURRENCY LIMITS
+======================================================================
+
+For this v0:
+
+- maximum one mutating Orb per project;
+- maximum two child coding agents changing adjacent integration code at the same time;
+- no parallel mutation inside one worktree;
+- no agent may work directly in the lead agent’s checkout;
+- heavy build and browser work stays in Docker;
+- use bounded model and execution timeouts;
+- terminate abandoned Docker containers;
+- archive finished Paseo agents after all work is integrated.
+
+When agents are no longer needed:
+
+  paseo archive <agentId>
+
+Do not archive them until their logs and work have been reviewed.
+
+======================================================================
+16. COMMUNICATION WITH THE USER
+======================================================================
+
+Do not repeatedly ask the user to choose between reasonable implementation details.
+
+Make grounded decisions from the repository.
+
+Ask the user only when blocked by something that cannot be inferred, such as:
+
+- unavailable server credentials;
+- unavailable Git token;
+- missing model-gateway key;
+- a required destructive infrastructure action;
+- an irreversible product decision outside v0 scope.
+
+When requesting input, provide:
+
+- the exact blocker;
+- the exact command or credential needed;
+- what work continues without it;
+- the safest default.
+
+Continue supervising all unblocked lanes while waiting.
+
+======================================================================
+17. FINAL REPORT
+======================================================================
+
+When finished, provide a concise but complete report:
+
+## Dogfood status
+
+- Project chat:
+- Signal extraction:
+- Work routing:
+- Web cards:
+- Contextual chat:
+- Orb runtime:
+- Docker execution:
+- OpenCode:
+- Git commit/push:
+- PR creation:
+- Dedicated runtime:
+- End-to-end smoke:
+
+## Integrated branches
+
+For each branch:
+- purpose;
+- final commit;
+- PR;
+- tests.
+
+## Running services
+
+- service;
+- machine;
+- port or endpoint;
+- health status.
+
+## Demo instructions
+
+Exact steps to reproduce the loop.
+
+## Known limitations
+
+Only real limitations, not speculative roadmap items.
+
+## Next three increments
+
+Choose the three highest-leverage improvements after the dogfooding loop works.
+
+Your mission is complete only when the dogfooding loop is either demonstrably working or reduced to one clearly identified external blocker with all other implementation complete.
diff --git a/package.json b/package.json
index e9d6066..5633ee2 100644
--- a/package.json
+++ b/package.json
@@ -61,7 +61,9 @@
     "subtree": "bun run scripts/subtree.ts",
     "fix": "ultracite fix",
     "orb:proof": "bun run scripts/orb-proof.ts",
-    "orb:run": "bun run scripts/orb-project-run.ts"
+    "orb:run": "bun run scripts/orb-project-run.ts",
+    "dev:zopu": "vp run --filter @code/server dev",
+    "dev:zopu:web": "vp run --filter web dev"
   },
   "dependencies": {},
   "devDependencies": {
diff --git a/packages/backend/convex/_generated/api.d.ts b/packages/backend/convex/_generated/api.d.ts
index 7386dfe..09829ab 100644
--- a/packages/backend/convex/_generated/api.d.ts
+++ b/packages/backend/convex/_generated/api.d.ts
@@ -26,6 +26,7 @@ import type * as projectIssues from "../projectIssues.js";
 import type * as projectStore from "../projectStore.js";
 import type * as projects from "../projects.js";
 import type * as publicGit from "../publicGit.js";
+import type * as signalRouting from "../signalRouting.js";
 import type * as signals from "../signals.js";
 import type * as todos from "../todos.js";
 
@@ -54,6 +55,7 @@ declare const fullApi: ApiFromModules<{
   projectStore: typeof projectStore;
   projects: typeof projects;
   publicGit: typeof publicGit;
+  signalRouting: typeof signalRouting;
   signals: typeof signals;
   todos: typeof todos;
 }>;
diff --git a/packages/env/src/web.ts b/packages/env/src/web.ts
index 75d2069..c72c430 100644
--- a/packages/env/src/web.ts
+++ b/packages/env/src/web.ts
@@ -11,6 +11,7 @@ export const env = createEnv({
     VITE_CONVEX_SITE_URL: convexUrlSchema("example.convex.site"),
     VITE_CONVEX_URL: convexUrlSchema("example.convex.cloud"),
     VITE_FLUE_URL: z.url(),
+    VITE_ZOPU_SERVER_URL: z.url(),
   },
   clientPrefix: "VITE_",
   emptyStringAsUndefined: true,
diff --git a/packages/primitives/package.json.new b/packages/primitives/package.json.new
new file mode 100644
index 0000000..5bd6c8b
--- /dev/null
+++ b/packages/primitives/package.json.new
@@ -0,0 +1,13 @@
+{
+  "name": "@code/primitives",
+  "exports": {
+    ".": "./src/index.ts",
+    "./agent-os": "./src/agent-os.ts",
+    "./git": "./src/git.ts",
+    "./project": "./src/project.ts",
+    "./project-issue": "./src/project-issue.ts",
+    "./project-workspace": "./src/project-workspace.ts",
+    "./project-work": "./src/project-work.ts",
+    "./signal": "./src/signal.ts",
+    "./smoke": "./src/smoke.ts"
+  },
diff --git a/packages/server/data/zopu.db b/packages/server/data/zopu.db
new file mode 100644
index 0000000..bb4d6f9
Binary files /dev/null and b/packages/server/data/zopu.db differ
diff --git a/packages/server/flue.config.ts b/packages/server/flue.config.ts
new file mode 100644
index 0000000..273a77e
--- /dev/null
+++ b/packages/server/flue.config.ts
@@ -0,0 +1,11 @@
+import { defineConfig } from "@flue/cli/config";
+
+export default defineConfig({ target: "node" });
+
+export const vite = {
+  server: {
+    watch: {
+      ignored: ["**/data/**", "**/dist/**"],
+    },
+  },
+};
diff --git a/packages/server/package.json b/packages/server/package.json
new file mode 100644
index 0000000..fe7186a
--- /dev/null
+++ b/packages/server/package.json
@@ -0,0 +1,29 @@
+{
+  "name": "@code/server",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "bun --env-file=../../.env flue dev --port 3590",
+    "build": "bun --env-file=../../.env flue build --target node",
+    "start": "bun --env-file=../../.env dist/server.mjs",
+    "check-types": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@agentos-software/codex-cli": "0.3.4",
+    "@agentos-software/git": "0.3.3",
+    "@agentos-software/opencode": "0.2.7",
+    "@agentos-software/pi": "0.2.7",
+    "@flue/runtime": "1.0.0-beta.9",
+    "@rivet-dev/agentos-core": "catalog:",
+    "effect": "catalog:",
+    "hono": "4.12.30",
+    "valibot": "^1.4.2"
+  },
+  "devDependencies": {
+    "@code/config": "workspace:*",
+    "@flue/cli": "latest",
+    "@types/bun": "catalog:",
+    "typescript": "catalog:"
+  }
+}
diff --git a/packages/server/src/agents/zopu.ts b/packages/server/src/agents/zopu.ts
new file mode 100644
index 0000000..6d37f18
--- /dev/null
+++ b/packages/server/src/agents/zopu.ts
@@ -0,0 +1,42 @@
+import { defineAgent } from "@flue/runtime";
+
+import { createIssueTool, editIssueTool } from "../tools/issues";
+import {
+  checkPrStatusTool,
+  listPullRequestsTool,
+} from "../tools/pull-requests";
+import { env } from "../tools/runtime";
+import { triggerWorkflowTool } from "../tools/workflows";
+
+const INSTRUCTIONS = `You are Zopu, a lean coding-agent orchestrator for a single Git repository.
+
+You chat with the user and help them manage work on the repo. You have these tools:
+
+- create_issue: Track new work as a Gitea issue when the user describes something actionable.
+- edit_issue: Update or close an existing issue (set state to "closed" to resolve).
+- trigger_workflow: Start the resolve-issue work actor for a given issue number. The actor boots an isolated AgentOS VM, implements the fix, commits, and opens a pull request.
+- list_pull_requests: Show recent PRs and their state.
+- check_pr_status: Check whether a specific PR is open, merged, or closed — use this to tell the user whether an issue's work landed.
+
+Guidelines:
+- Keep conversation natural. Only create issues when the user describes concrete work.
+- When the user asks to "work on" or "fix" an issue, trigger the workflow with the issue number.
+- After triggering, tell the user the run ID. They can ask you to check the PR status later.
+- Be concise. Confirm actions with the key detail (issue number, PR number, URL).`;
+
+export default defineAgent(() => ({
+  description:
+    "Lean chat agent that manages issues, triggers the resolve-issue work actor, and checks PR status.",
+  instructions: INSTRUCTIONS,
+  model: `${env.AGENT_MODEL_PROVIDER}/${env.AGENT_MODEL_NAME}`,
+  tools: [
+    createIssueTool,
+    editIssueTool,
+    triggerWorkflowTool,
+    listPullRequestsTool,
+    checkPrStatusTool,
+  ],
+}));
+
+// Allow HTTP prompts and event streaming for this agent.
+export const route = (_c: unknown, next: () => Promise<void>) => next();
diff --git a/packages/server/src/app.ts b/packages/server/src/app.ts
new file mode 100644
index 0000000..be73f68
--- /dev/null
+++ b/packages/server/src/app.ts
@@ -0,0 +1,31 @@
+import { registerProvider } from "@flue/runtime";
+import { flue } from "@flue/runtime/routing";
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+
+import { env } from "./tools/runtime";
+
+// Register the GLM 5.2 provider once at module load.
+registerProvider(env.AGENT_MODEL_PROVIDER, {
+  api: env.AGENT_MODEL_API,
+  apiKey: env.AGENT_MODEL_API_KEY,
+  baseUrl: env.AGENT_MODEL_BASE_URL,
+  models: {
+    [env.AGENT_MODEL_NAME]: {
+      contextWindow: env.AGENT_MODEL_CONTEXT_WINDOW,
+      maxTokens: env.AGENT_MODEL_MAX_TOKENS,
+    },
+  },
+});
+
+const app = new Hono();
+
+// The chat UI is served from the web app origin, so browser calls here are
+// cross-origin; without CORS headers every preflight 405s and sends fail.
+app.use("*", cors());
+
+app.get("/health", (c) => c.json({ model: env.AGENT_MODEL_NAME, ok: true }));
+
+app.route("/", flue());
+
+export default app;
diff --git a/packages/server/src/db.ts b/packages/server/src/db.ts
new file mode 100644
index 0000000..c98368a
--- /dev/null
+++ b/packages/server/src/db.ts
@@ -0,0 +1,4 @@
+import { sqlite } from "@flue/runtime/node";
+
+// File-based SQLite persistence so conversations survive restarts.
+export default sqlite("./data/zopu.db");
diff --git a/packages/server/src/env.ts b/packages/server/src/env.ts
new file mode 100644
index 0000000..c39612b
--- /dev/null
+++ b/packages/server/src/env.ts
@@ -0,0 +1,46 @@
+// Lean env config for the zopu server. Read from process.env; no zod dependency.
+const required = (key: string): string => {
+  const value = process.env[key];
+  if (!value) {
+    throw new Error(`Missing required env var: ${key}`);
+  }
+  return value;
+};
+
+export interface ServerEnv {
+  readonly AGENT_MODEL_PROVIDER: string;
+  readonly AGENT_MODEL_NAME: string;
+  readonly AGENT_MODEL_API: string;
+  readonly AGENT_MODEL_API_KEY: string;
+  readonly AGENT_MODEL_BASE_URL: string;
+  readonly AGENT_MODEL_CONTEXT_WINDOW: number;
+  readonly AGENT_MODEL_MAX_TOKENS: number;
+  readonly GITEA_URL: string;
+  readonly GITEA_TOKEN: string;
+  readonly GIT_REPO: string;
+  readonly GIT_SSH_REMOTE: string;
+  readonly GIT_DEFAULT_BRANCH: string;
+  readonly WORKTREE_ROOT: string;
+  readonly PORT: string;
+}
+
+export const parseServerEnv = (): ServerEnv => ({
+  AGENT_MODEL_API: process.env.AGENT_MODEL_API ?? "openai-completions",
+  AGENT_MODEL_API_KEY: required("AGENT_MODEL_API_KEY"),
+  AGENT_MODEL_BASE_URL: required("AGENT_MODEL_BASE_URL"),
+  AGENT_MODEL_CONTEXT_WINDOW: Number(
+    process.env.AGENT_MODEL_CONTEXT_WINDOW ?? 262_000
+  ),
+  AGENT_MODEL_MAX_TOKENS: Number(process.env.AGENT_MODEL_MAX_TOKENS ?? 131_072),
+  AGENT_MODEL_NAME: process.env.AGENT_MODEL_NAME ?? "glm-5.2",
+  AGENT_MODEL_PROVIDER: process.env.AGENT_MODEL_PROVIDER ?? "cheaptricks",
+  GITEA_TOKEN: process.env.GITEA_TOKEN ?? "",
+  GITEA_URL: process.env.GITEA_URL ?? "https://git.openputer.com",
+  GIT_DEFAULT_BRANCH: process.env.GIT_DEFAULT_BRANCH ?? "main",
+  GIT_REPO: process.env.GIT_REPO ?? "puter/zopu-code",
+  GIT_SSH_REMOTE:
+    process.env.GIT_SSH_REMOTE ??
+    "ssh://git@git.openputer.com:2222/puter/zopu-code.git",
+  PORT: process.env.PORT ?? "3590",
+  WORKTREE_ROOT: process.env.WORKTREE_ROOT ?? "/tmp/zopu-worktrees",
+});
diff --git a/packages/server/src/git/gitea-service.ts b/packages/server/src/git/gitea-service.ts
new file mode 100644
index 0000000..24a0946
--- /dev/null
+++ b/packages/server/src/git/gitea-service.ts
@@ -0,0 +1,360 @@
+/* eslint-disable max-classes-per-file -- GiteaError and Gitea form one adapter contract. */
+import { Context, Effect, Layer, Schema } from "effect";
+
+const toPrState = (
+  merged: boolean,
+  state: string
+): "merged" | "closed" | "open" => {
+  if (merged) {
+    return "merged";
+  }
+  if (state === "closed") {
+    return "closed";
+  }
+  return "open";
+};
+
+// ---------------------------------------------------------------------------
+// Schemas / errors
+// ---------------------------------------------------------------------------
+
+export class GiteaError extends Schema.TaggedErrorClass<GiteaError>()(
+  "GiteaError",
+  {
+    message: Schema.String,
+    status: Schema.Number.pipe(Schema.optional),
+  }
+) {}
+
+export interface GiteaIssue {
+  readonly number: number;
+  readonly title: string;
+  readonly body: string;
+  readonly state: "open" | "closed";
+  readonly htmlUrl: string;
+}
+
+export interface GiteaPullRequest {
+  readonly number: number;
+  readonly title: string;
+  readonly state: "open" | "closed" | "merged";
+  readonly htmlUrl: string;
+  readonly head: string;
+  readonly base: string;
+  readonly merged: boolean;
+}
+
+export interface GiteaRepository {
+  readonly cloneUrl: string;
+  readonly sshUrl: string;
+  readonly htmlUrl: string;
+  readonly defaultBranch: string;
+  readonly name: string;
+}
+
+export interface CreateIssueInput {
+  readonly title: string;
+  readonly body: string;
+}
+
+export interface EditIssueInput {
+  readonly title?: string;
+  readonly body?: string;
+  readonly state?: "open" | "closed";
+}
+
+export interface CreatePrInput {
+  readonly title: string;
+  readonly body: string;
+  readonly head: string;
+  readonly base: string;
+}
+
+// ---------------------------------------------------------------------------
+// Service interface
+// ---------------------------------------------------------------------------
+
+export interface GiteaService {
+  readonly getIssue: (number: number) => Effect.Effect<GiteaIssue, GiteaError>;
+  readonly createIssue: (
+    input: CreateIssueInput
+  ) => Effect.Effect<GiteaIssue, GiteaError>;
+  readonly editIssue: (
+    number: number,
+    input: EditIssueInput
+  ) => Effect.Effect<GiteaIssue, GiteaError>;
+  readonly listPullRequests: () => Effect.Effect<
+    GiteaPullRequest[],
+    GiteaError
+  >;
+  readonly getPullRequest: (
+    number: number
+  ) => Effect.Effect<GiteaPullRequest, GiteaError>;
+  readonly createPullRequest: (
+    input: CreatePrInput
+  ) => Effect.Effect<GiteaPullRequest, GiteaError>;
+  readonly getRepository: () => Effect.Effect<GiteaRepository, GiteaError>;
+}
+
+export interface GiteaConfig {
+  readonly baseUrl: string;
+  readonly token: string;
+  readonly repoPath: string;
+}
+
+// ---------------------------------------------------------------------------
+// HTTP helper
+// ---------------------------------------------------------------------------
+
+const toHttpPath = (repoPath: string): string =>
+  repoPath
+    .split("/")
+    .map((segment) => encodeURIComponent(segment))
+    .join("/");
+
+const authHeaders = (token: string): Record<string, string> => {
+  const headers: Record<string, string> = {
+    Accept: "application/json",
+    "Content-Type": "application/json",
+  };
+  if (token) {
+    headers.Authorization = `token ${token}`;
+  }
+  return headers;
+};
+
+const giteaFetch = <T>(
+  config: GiteaConfig,
+  path: string,
+  init?: RequestInit
+): Effect.Effect<T, GiteaError> =>
+  Effect.tryPromise({
+    catch: (cause) => {
+      if (
+        cause instanceof Error &&
+        "status" in cause &&
+        typeof cause.status === "number"
+      ) {
+        return new GiteaError({
+          message: cause.message,
+          status: cause.status,
+        });
+      }
+      return new GiteaError({
+        message: cause instanceof Error ? cause.message : String(cause),
+      });
+    },
+    try: async () => {
+      const response = await fetch(
+        `${config.baseUrl.replace(/\/$/u, "")}${path}`,
+        {
+          ...init,
+          headers: { ...authHeaders(config.token), ...init?.headers },
+        }
+      );
+      if (!response.ok) {
+        const detail = await response.text();
+        throw Object.assign(new Error(`Gitea ${response.status}: ${detail}`), {
+          status: response.status,
+        });
+      }
+      if (response.status === 204) {
+        return undefined as T;
+      }
+      return (await response.json()) as T;
+    },
+  });
+
+// ---------------------------------------------------------------------------
+// Service + layer
+// ---------------------------------------------------------------------------
+
+export class Gitea extends Context.Service<Gitea, GiteaService>()(
+  "@zopu/server/Gitea"
+) {
+  static readonly layer = (config: GiteaConfig) =>
+    Layer.succeed(
+      Gitea,
+      Gitea.of({
+        createIssue: (input) =>
+          giteaFetch<{
+            number: number;
+            title: string;
+            body: string;
+            state: string;
+            html_url: string;
+          }>(config, `/api/v1/repos/${toHttpPath(config.repoPath)}/issues`, {
+            body: JSON.stringify({ body: input.body, title: input.title }),
+            method: "POST",
+          }).pipe(
+            Effect.map(
+              (i): GiteaIssue => ({
+                body: i.body ?? "",
+                htmlUrl: i.html_url,
+                number: i.number,
+                state: "open",
+                title: i.title,
+              })
+            )
+          ),
+
+        createPullRequest: (input) =>
+          giteaFetch<{
+            number: number;
+            title: string;
+            state: string;
+            html_url: string;
+            merged: boolean;
+            base: { ref: string };
+            head: { ref: string };
+          }>(config, `/api/v1/repos/${toHttpPath(config.repoPath)}/pulls`, {
+            body: JSON.stringify({
+              base: input.base,
+              body: input.body,
+              head: input.head,
+              title: input.title,
+            }),
+            method: "POST",
+          }).pipe(
+            Effect.map(
+              (pr): GiteaPullRequest => ({
+                base: pr.base.ref,
+                head: pr.head.ref,
+                htmlUrl: pr.html_url,
+                merged: pr.merged ?? false,
+                number: pr.number,
+                state: "open",
+                title: pr.title,
+              })
+            )
+          ),
+
+        editIssue: (number, input) =>
+          giteaFetch<{
+            number: number;
+            title: string;
+            body: string;
+            state: string;
+            html_url: string;
+          }>(
+            config,
+            `/api/v1/repos/${toHttpPath(config.repoPath)}/issues/${number}`,
+            {
+              body: JSON.stringify({
+                ...(input.body === undefined ? {} : { body: input.body }),
+                ...(input.state === undefined ? {} : { state: input.state }),
+                ...(input.title === undefined ? {} : { title: input.title }),
+              }),
+              method: "PATCH",
+            }
+          ).pipe(
+            Effect.map(
+              (i): GiteaIssue => ({
+                body: i.body ?? "",
+                htmlUrl: i.html_url,
+                number: i.number,
+                state: i.state === "closed" ? "closed" : "open",
+                title: i.title,
+              })
+            )
+          ),
+
+        getIssue: (number) =>
+          giteaFetch<{
+            number: number;
+            title: string;
+            body: string;
+            state: string;
+            html_url: string;
+          }>(
+            config,
+            `/api/v1/repos/${toHttpPath(config.repoPath)}/issues/${number}`
+          ).pipe(
+            Effect.map(
+              (i): GiteaIssue => ({
+                body: i.body ?? "",
+                htmlUrl: i.html_url,
+                number: i.number,
+                state: i.state === "closed" ? "closed" : "open",
+                title: i.title,
+              })
+            )
+          ),
+
+        getPullRequest: (number) =>
+          giteaFetch<{
+            number: number;
+            title: string;
+            state: string;
+            html_url: string;
+            merged: boolean;
+            base: { ref: string };
+            head: { ref: string };
+          }>(
+            config,
+            `/api/v1/repos/${toHttpPath(config.repoPath)}/pulls/${number}`
+          ).pipe(
+            Effect.map(
+              (pr): GiteaPullRequest => ({
+                base: pr.base.ref,
+                head: pr.head.ref,
+                htmlUrl: pr.html_url,
+                merged: pr.merged ?? false,
+                number: pr.number,
+                state: toPrState(pr.merged, pr.state),
+                title: pr.title,
+              })
+            )
+          ),
+
+        getRepository: () =>
+          giteaFetch<{
+            clone_url: string;
+            ssh_url: string;
+            html_url: string;
+            default_branch: string;
+            name: string;
+          }>(config, `/api/v1/repos/${toHttpPath(config.repoPath)}`).pipe(
+            Effect.map(
+              (r): GiteaRepository => ({
+                cloneUrl: r.clone_url,
+                defaultBranch: r.default_branch,
+                htmlUrl: r.html_url,
+                name: r.name,
+                sshUrl: r.ssh_url,
+              })
+            )
+          ),
+
+        listPullRequests: () =>
+          giteaFetch<
+            {
+              number: number;
+              title: string;
+              state: string;
+              html_url: string;
+              merged: boolean;
+              base: { ref: string };
+              head: { ref: string };
+            }[]
+          >(
+            config,
+            `/api/v1/repos/${toHttpPath(config.repoPath)}/pulls?state=all&limit=20&sort=recentupdate`
+          ).pipe(
+            Effect.map((prs): GiteaPullRequest[] =>
+              prs.map(
+                (pr): GiteaPullRequest => ({
+                  base: pr.base.ref,
+                  head: pr.head.ref,
+                  htmlUrl: pr.html_url,
+                  merged: pr.merged ?? false,
+                  number: pr.number,
+                  state: toPrState(pr.merged, pr.state),
+                  title: pr.title,
+                })
+              )
+            )
+          ),
+      })
+    );
+}
diff --git a/packages/server/src/sandboxes/agentos.ts b/packages/server/src/sandboxes/agentos.ts
new file mode 100644
index 0000000..c232eaf
--- /dev/null
+++ b/packages/server/src/sandboxes/agentos.ts
@@ -0,0 +1,114 @@
+import codex from "@agentos-software/codex-cli";
+import git from "@agentos-software/git";
+import opencode from "@agentos-software/opencode";
+import pi from "@agentos-software/pi";
+import { createSandboxSessionEnv } from "@flue/runtime";
+import type { FileStat, SandboxApi, SandboxFactory } from "@flue/runtime";
+import { AgentOs, createHostDirBackend } from "@rivet-dev/agentos-core";
+import type { AgentOsOptions, SoftwareInput } from "@rivet-dev/agentos-core";
+
+const WORK_SOFTWARE: SoftwareInput[] = [git, opencode, codex, pi];
+
+export interface WorkVmOptions {
+  readonly extraSoftware?: SoftwareInput[];
+  readonly worktreePath: string;
+}
+
+const statResult = (s: {
+  isDirectory: boolean;
+  isSymbolicLink: boolean;
+  mtimeMs: number;
+  size: number;
+}): FileStat => ({
+  isDirectory: s.isDirectory,
+  isFile: !s.isDirectory && !s.isSymbolicLink,
+  isSymbolicLink: s.isSymbolicLink,
+  mtime: new Date(s.mtimeMs),
+  size: s.size,
+});
+
+export const createWorkVm = async (
+  options: WorkVmOptions
+): Promise<{
+  readonly destroy: () => Promise<void>;
+  readonly sandbox: SandboxFactory;
+}> => {
+  const vm = await AgentOs.create({
+    defaultSoftware: true,
+    mounts: [
+      {
+        path: "/workspace/repository",
+        plugin: createHostDirBackend({
+          hostPath: options.worktreePath,
+          readOnly: false,
+        }),
+        readOnly: false,
+      },
+    ],
+    software: [...WORK_SOFTWARE, ...(options.extraSoftware ?? [])],
+  } satisfies AgentOsOptions);
+
+  const api: SandboxApi = {
+    async exec(
+      command: string,
+      opts?: {
+        cwd?: string;
+        env?: Record<string, string>;
+        signal?: AbortSignal;
+        timeoutMs?: number;
+      }
+    ) {
+      const result = await vm.exec(command, {
+        ...(opts?.cwd === undefined ? {} : { cwd: opts.cwd }),
+        ...(opts?.env === undefined ? {} : { env: opts.env }),
+        ...(opts?.timeoutMs === undefined ? {} : { timeout: opts.timeoutMs }),
+      });
+      return {
+        exitCode: result.exitCode,
+        stderr: result.stderr,
+        stdout: result.stdout,
+      };
+    },
+    async exists(path: string): Promise<boolean> {
+      try {
+        return await vm.exists(path);
+      } catch {
+        return false;
+      }
+    },
+    async mkdir(path: string, opts?: { recursive?: boolean }) {
+      await vm.mkdir(path, { recursive: opts?.recursive ?? false });
+    },
+    readFile(path: string): Promise<string> {
+      return vm.readFile(path).then((b) => new TextDecoder().decode(b));
+    },
+    readFileBuffer(path: string) {
+      return vm.readFile(path);
+    },
+    readdir(path: string): Promise<string[]> {
+      return vm.readdir(path);
+    },
+    async rm(path: string, opts?: { force?: boolean; recursive?: boolean }) {
+      if (opts?.force && !(await vm.exists(path))) {
+        return;
+      }
+      await vm.remove(path, { recursive: opts?.recursive });
+    },
+    async stat(path: string): Promise<FileStat> {
+      return statResult(await vm.stat(path));
+    },
+    writeFile(path: string, content: string | Uint8Array): Promise<void> {
+      return vm.writeFile(path, content);
+    },
+  };
+
+  const sandbox: SandboxFactory = {
+    createSessionEnv: () =>
+      Promise.resolve(createSandboxSessionEnv(api, "/workspace")),
+  };
+
+  return {
+    destroy: () => Promise.resolve(),
+    sandbox,
+  };
+};
diff --git a/packages/server/src/tools/issues.ts b/packages/server/src/tools/issues.ts
new file mode 100644
index 0000000..572f3f8
--- /dev/null
+++ b/packages/server/src/tools/issues.ts
@@ -0,0 +1,68 @@
+import { defineTool } from "@flue/runtime";
+import { Effect } from "effect";
+import * as v from "valibot";
+
+import { Gitea } from "../git/gitea-service";
+import { runWithGitea } from "./runtime";
+
+export const createIssueTool = defineTool({
+  description:
+    "Create a new issue in the repository. Use when the user describes actionable work that should be tracked.",
+  input: v.object({
+    body: v.pipe(v.string(), v.maxLength(20_000)),
+    title: v.pipe(v.string(), v.minLength(1), v.maxLength(200)),
+  }),
+  name: "create_issue",
+  output: v.object({
+    htmlUrl: v.string(),
+    number: v.number(),
+    state: v.string(),
+    title: v.string(),
+  }),
+  async run({ input }) {
+    const issue = await runWithGitea(
+      Effect.gen(function* issue() {
+        const gitea = yield* Gitea;
+        return yield* gitea.createIssue(input);
+      })
+    );
+    return {
+      htmlUrl: issue.htmlUrl,
+      number: issue.number,
+      state: issue.state,
+      title: issue.title,
+    };
+  },
+});
+
+export const editIssueTool = defineTool({
+  description:
+    "Edit an existing issue's title, body, or state. Set state to 'closed' to resolve it.",
+  input: v.object({
+    body: v.optional(v.pipe(v.string(), v.maxLength(20_000))),
+    number: v.pipe(v.number(), v.integer()),
+    state: v.optional(v.picklist(["open", "closed"])),
+    title: v.optional(v.pipe(v.string(), v.minLength(1), v.maxLength(200))),
+  }),
+  name: "edit_issue",
+  output: v.object({
+    htmlUrl: v.string(),
+    number: v.number(),
+    state: v.string(),
+    title: v.string(),
+  }),
+  async run({ input }) {
+    const issue = await runWithGitea(
+      Effect.gen(function* issue() {
+        const gitea = yield* Gitea;
+        return yield* gitea.editIssue(input.number, input);
+      })
+    );
+    return {
+      htmlUrl: issue.htmlUrl,
+      number: issue.number,
+      state: issue.state,
+      title: issue.title,
+    };
+  },
+});
diff --git a/packages/server/src/tools/pull-requests.ts b/packages/server/src/tools/pull-requests.ts
new file mode 100644
index 0000000..d4e4327
--- /dev/null
+++ b/packages/server/src/tools/pull-requests.ts
@@ -0,0 +1,68 @@
+import { defineTool } from "@flue/runtime";
+import { Effect } from "effect";
+import * as v from "valibot";
+
+import { Gitea } from "../git/gitea-service";
+import type { GiteaPullRequest } from "../git/gitea-service";
+import { runWithGitea } from "./runtime";
+
+export const listPullRequestsTool = defineTool({
+  description:
+    "List recent pull requests in the repository with their state (open, closed, merged).",
+  input: v.object({}),
+  name: "list_pull_requests",
+  async run() {
+    const prs: GiteaPullRequest[] = await runWithGitea(
+      Effect.gen(function* prs() {
+        const gitea = yield* Gitea;
+        return yield* gitea.listPullRequests();
+      })
+    );
+    return {
+      pullRequests: prs.map((pr) => ({
+        base: pr.base,
+        head: pr.head,
+        merged: pr.merged,
+        number: pr.number,
+        state: pr.state,
+        title: pr.title,
+        url: pr.htmlUrl,
+      })),
+    };
+  },
+});
+
+export const checkPrStatusTool = defineTool({
+  description:
+    "Check whether a specific pull request is open, merged, or closed. Use to verify if an issue's work was resolved.",
+  input: v.object({
+    number: v.pipe(v.number(), v.integer()),
+  }),
+  name: "check_pr_status",
+  output: v.object({
+    base: v.string(),
+    head: v.string(),
+    merged: v.boolean(),
+    number: v.number(),
+    state: v.string(),
+    title: v.string(),
+    url: v.string(),
+  }),
+  async run({ input }) {
+    const pr: GiteaPullRequest = await runWithGitea(
+      Effect.gen(function* pr() {
+        const gitea = yield* Gitea;
+        return yield* gitea.getPullRequest(input.number);
+      })
+    );
+    return {
+      base: pr.base,
+      head: pr.head,
+      merged: pr.merged,
+      number: pr.number,
+      state: pr.state,
+      title: pr.title,
+      url: pr.htmlUrl,
+    };
+  },
+});
diff --git a/packages/server/src/tools/runtime.ts b/packages/server/src/tools/runtime.ts
new file mode 100644
index 0000000..e6288e6
--- /dev/null
+++ b/packages/server/src/tools/runtime.ts
@@ -0,0 +1,22 @@
+import { Effect } from "effect";
+
+import { parseServerEnv } from "../env";
+import { Gitea } from "../git/gitea-service";
+import type { GiteaConfig } from "../git/gitea-service";
+
+const env = parseServerEnv();
+
+const config: GiteaConfig = {
+  baseUrl: env.GITEA_URL,
+  repoPath: env.GIT_REPO,
+  token: env.GITEA_TOKEN,
+};
+
+const giteaLayer = Gitea.layer(config);
+
+/** Run any Effect that depends on the Gitea service. */
+export const runWithGitea = <A, E>(
+  effect: Effect.Effect<A, E, Gitea>
+): Promise<A> => Effect.runPromise(effect.pipe(Effect.provide(giteaLayer)));
+
+export { env };
diff --git a/packages/server/src/tools/workflows.ts b/packages/server/src/tools/workflows.ts
new file mode 100644
index 0000000..50cd04c
--- /dev/null
+++ b/packages/server/src/tools/workflows.ts
@@ -0,0 +1,22 @@
+import { defineTool, invoke } from "@flue/runtime";
+import * as v from "valibot";
+
+import resolveIssueWorkflow from "../workflows/resolve-issue";
+
+export const triggerWorkflowTool = defineTool({
+  description:
+    "Trigger the resolve-issue workflow for a specific issue number. The workflow boots an isolated AgentOS VM, runs opencode to resolve the issue, then commits and opens a pull request. Returns the workflow run ID.",
+  input: v.object({
+    issueNumber: v.pipe(v.number(), v.integer()),
+  }),
+  name: "trigger_workflow",
+  output: v.object({
+    runId: v.string(),
+  }),
+  async run({ input }) {
+    const receipt = await invoke(resolveIssueWorkflow, {
+      input: { issueNumber: input.issueNumber },
+    });
+    return { runId: receipt.runId };
+  },
+});
diff --git a/packages/server/src/workflows/resolve-issue.ts b/packages/server/src/workflows/resolve-issue.ts
new file mode 100644
index 0000000..ce6f778
--- /dev/null
+++ b/packages/server/src/workflows/resolve-issue.ts
@@ -0,0 +1,159 @@
+import { execSync } from "node:child_process";
+import { mkdirSync, rmSync } from "node:fs";
+import path from "node:path";
+
+import { defineAgent, defineWorkflow } from "@flue/runtime";
+import type { WorkflowRouteHandler } from "@flue/runtime";
+import { local } from "@flue/runtime/node";
+import { Effect } from "effect";
+import * as v from "valibot";
+
+import { Gitea } from "../git/gitea-service";
+import type { GiteaIssue } from "../git/gitea-service";
+import { env, runWithGitea } from "../tools/runtime";
+
+const shellQuote = (value: string): string =>
+  `'${value.replaceAll("'", `'"'"'`)}'`;
+
+const runHost = (command: string, options?: { cwd?: string }): string =>
+  execSync(command, {
+    encoding: "utf-8",
+    timeout: 120_000,
+    ...(options?.cwd ? { cwd: options.cwd } : {}),
+  }).trim();
+
+const createWorktree = (
+  issueNumber: number
+): { branch: string; path: string } => {
+  const branch = `zopu/issue-${issueNumber}-${Date.now()}`;
+  const worktreePath = path.join(env.WORKTREE_ROOT, `issue-${issueNumber}`);
+  mkdirSync(env.WORKTREE_ROOT, { recursive: true });
+  rmSync(worktreePath, { force: true, recursive: true });
+  runHost(
+    `git worktree add -b ${shellQuote(branch)} ${shellQuote(worktreePath)} ${shellQuote(env.GIT_DEFAULT_BRANCH)}`
+  );
+  return { branch, path: worktreePath };
+};
+
+const publishChanges = async (
+  worktreePath: string,
+  branch: string,
+  issueNumber: number,
+  issueTitle: string
+): Promise<{
+  base: string;
+  head: string;
+  number: number;
+  state: string;
+  status: string;
+  url: string;
+}> => {
+  const status = runHost("git status --porcelain=v1", { cwd: worktreePath });
+  if (!status) {
+    return {
+      base: "",
+      head: branch,
+      number: 0,
+      state: "",
+      status: "no_changes",
+      url: "",
+    };
+  }
+
+  const commitMessage = `Resolve #${issueNumber}: ${issueTitle}`;
+  runHost(`git add --all && git commit -m ${shellQuote(commitMessage)}`, {
+    cwd: worktreePath,
+  });
+  runHost(
+    `git push ${shellQuote(env.GIT_SSH_REMOTE)} HEAD:${shellQuote(branch)}`,
+    { cwd: worktreePath }
+  );
+
+  const pr = await runWithGitea(
+    Effect.gen(function* pr() {
+      const gitea = yield* Gitea;
+      return yield* gitea.createPullRequest({
+        base: env.GIT_DEFAULT_BRANCH,
+        body: `Resolves #${issueNumber}.\n\nGenerated by the Zopu work actor using GLM 5.2.`,
+        head: branch,
+        title: `Resolve #${issueNumber}: ${issueTitle}`,
+      });
+    })
+  );
+  return {
+    base: pr.base,
+    head: pr.head,
+    number: pr.number,
+    state: pr.state,
+    status: "pull_request_open",
+    url: pr.htmlUrl,
+  };
+};
+
+const cleanupWorktree = (worktreePath: string): void => {
+  try {
+    runHost(`git worktree remove ${shellQuote(worktreePath)} --force`);
+  } catch {
+    // Best-effort cleanup.
+  }
+};
+
+const workActor = defineAgent(() => ({
+  cwd: "/workspace/repository",
+  instructions: `You are the Zopu work actor operating inside an isolated AgentOS VM with a git worktree at /workspace/repository.
+
+Your job:
+1. Read the issue you received.
+2. Inspect the codebase to find the relevant files.
+3. Implement the fix or feature directly.
+4. Verify your changes if tests or a typechecker are available.
+
+Do NOT run git commit, push, or create pull requests. The host-side workflow handles publishing after you finish. Focus on correct code changes only.`,
+  model: `${env.AGENT_MODEL_PROVIDER}/${env.AGENT_MODEL_NAME}`,
+  sandbox: local({ cwd: "/workspace/repository" }),
+}));
+
+export default defineWorkflow({
+  agent: workActor,
+  input: v.object({
+    issueNumber: v.pipe(v.number(), v.integer()),
+  }),
+  async run({ harness, input }) {
+    const issue: GiteaIssue = await runWithGitea(
+      Effect.gen(function* issue() {
+        const gitea = yield* Gitea;
+        return yield* gitea.getIssue(input.issueNumber);
+      })
+    );
+
+    const { branch, path: worktreePath } = createWorktree(input.issueNumber);
+
+    const session = await harness.session();
+    await session.prompt(
+      `Resolve issue #${issue.number}: ${issue.title}\n\n${issue.body}\n\nInspect /workspace/repository and implement the fix.`
+    );
+
+    const result = await publishChanges(
+      worktreePath,
+      branch,
+      input.issueNumber,
+      issue.title
+    );
+    cleanupWorktree(worktreePath);
+
+    return {
+      branch,
+      issueNumber: input.issueNumber,
+      pullRequest: {
+        base: result.base,
+        head: result.head,
+        number: result.number,
+        state: result.state,
+        url: result.url,
+      },
+      status: result.status,
+    };
+  },
+});
+
+export const route: WorkflowRouteHandler = (_c, next) => next();
diff --git a/packages/server/tsconfig.json b/packages/server/tsconfig.json
new file mode 100644
index 0000000..09e6502
--- /dev/null
+++ b/packages/server/tsconfig.json
@@ -0,0 +1,6 @@
+{
+  "extends": "@code/config/tsconfig.base.json",
+  "compilerOptions": { "types": ["bun"] },
+  "include": ["src/**/*.ts"],
+  "exclude": ["dist"]
+}