feat: project durable agent conversations

fix: serve web assets from app directory
deploy: attach backend to shared network
2026-07-29 08:19:17 +05:30 · 2026-07-29 08:13:52 +05:30 · 2026-07-29 08:09:30 +05:30 · 2026-07-29 07:51:07 +05:30 · 2026-07-29 07:40:44 +05:30 · 2026-07-29 07:31:36 +05:30
93 changed files with 26077 additions and 6047 deletions
--- a/.env.example
+++ b/.env.example
@@ -17,7 +17,9 @@ DAEMON_NAME=Local MacBook
 DAEMON_VERSION=0.0.0
 DAEMON_HEARTBEAT_MS=15000
 DAEMON_COMMAND_LEASE_MS=60000
-# RIVET_ENDPOINT=http://localhost:6420
+RIVET_ENDPOINT=http://localhost:6420
 RIVET_PUBLIC_ENDPOINT=http://localhost:6420
 RIVET_WORKSPACE_TOKEN=replace-with-a-long-random-workspace-token
 # Flue persistence adapter
 FLUE_DB_TOKEN=replace-with-a-long-random-token
--- a/.npmrc
+++ b/.npmrc
@@ -0,0 +1 @@
 verify-deps-before-run=false
--- a/apps/web/Dockerfile
+++ b/apps/web/Dockerfile
@@ -0,0 +1,36 @@
 FROM oven/bun:1.3.14 AS bun
 FROM node:24-bookworm-slim AS build
 COPY --from=bun /usr/local/bin/bun /usr/local/bin/bun
 WORKDIR /app
 RUN apt-get update && apt-get install -y --no-install-recommends \
  ca-certificates \
  g++ \
  make \
  python3 \
  && rm -rf /var/lib/apt/lists/*
 COPY . .
 ARG VITE_AUTH_URL
 ARG VITE_CONVEX_URL
 ENV VITE_AUTH_URL=$VITE_AUTH_URL
 ENV VITE_CONVEX_URL=$VITE_CONVEX_URL
 RUN bun install --frozen-lockfile
 RUN bun run --filter web build
 FROM node:24-bookworm-slim
 ENV HOST=0.0.0.0
 ENV NODE_ENV=production
 ENV PORT=3000
 WORKDIR /app/apps/web
 COPY --from=build /app /app
 EXPOSE 3000
 CMD ["node", "node_modules/.bin/react-router-serve", "build/server/index.js"]
--- a/apps/web/src/components/slice-one/slice-one-page.tsx
+++ b/apps/web/src/components/slice-one/slice-one-page.tsx
@@ -1,657 +0,0 @@
 import { projectWorkNotices } from "@code/primitives/work";
 import {
  Conversation,
  ConversationContent,
 } from "@code/ui/components/ai-elements/conversation";
 import { Button } from "@code/ui/components/button";
 import {
  ChevronRight,
  Check,
  FolderGit2,
  Hammer,
  LoaderCircle,
  Menu,
  MessageSquareText,
  ImagePlus,
  Play,
  RotateCcw,
  Send,
  Sparkles,
  X,
 } from "lucide-react";
 import { useMemo, useRef, useState } from "react";
 import { PendingChatAttachments } from "@/components/chat/chat-attachments";
 import { ChatMessage } from "@/components/chat/chat-message";
 import { ChatThinkingResponse } from "@/components/chat/chat-thinking-response";
 import { useChatImages } from "@/hooks/chat/use-chat-images";
 import { useSliceOne } from "@/hooks/slice-one/use-slice-one";
 import { useVisualViewportStyle } from "@/hooks/slice-one/use-visual-viewport";
 import {
  buildSliceOneTimeline,
  findSourceMessageTarget,
 } from "@/lib/slice-one/presentation";
 type SliceWork = NonNullable<ReturnType<typeof useSliceOne>["works"]>[number];
 const EMPTY_WORKS: readonly SliceWork[] = [];
 interface WorkCardProps {
  readonly onSourceSelect: (rawText: string) => void;
  readonly work: SliceWork;
  readonly slice: SliceOneState;
 }
 const starterDefinition = (work: SliceWork) => ({
  acceptanceCriteria: ["The requested outcome is observable and documented"],
  affectedUsers: ["Project users"],
  assumptions: [],
  constraints: [],
  desiredOutcome: work.objective,
  inScope: [work.objective],
  outOfScope: ["Unrelated product changes"],
  problem: work.objective,
  questions: [],
  requiredArtifacts: ["Simulation activity and terminal outcome"],
  risk: "medium",
 });
 const starterDesign = (work: SliceWork) => ({
  architectureSummary:
    "Validate the approved Definition, then exercise one deterministic fake slice.",
  callFlowDelta: [
    "Work -> Run -> Attempt -> normalized events -> terminal outcome",
  ],
  concerns: [],
  evidenceRequirements: ["Terminal Run classification"],
  fileTreeDelta: [],
  impactMap: {
    files: [],
    modules: [],
    risks: [],
    summary: "Compact vertical-slice simulation",
  },
  invariants: [
    "Simulation never claims implementation",
    "Every Attempt reaches a terminal classification",
  ],
  keyInterfaces: ["HarnessRuntime", "AttemptOutcome"],
  slices: [
    {
      codeBoundaries: ["workExecution"],
      dependsOn: [],
      evidenceRequirements: ["Normalized activity events"],
      id: "slice-1",
      objective: work.objective,
      observableBehavior: "A terminal fake Run is visible",
      reviewRequired: false,
      title: "Deterministic simulation",
      verification: ["Run completes with a terminal classification"],
    },
  ],
  tradeoffs: ["Fake runtime proves contract before sandbox integration"],
 });
 // oxlint-disable-next-line complexity -- the expanded card intentionally keeps the three review sections together.
 const WorkCard = ({ onSourceSelect, work, slice }: WorkCardProps) => {
  const [sourcesOpen, setSourcesOpen] = useState(false);
  const [expanded, setExpanded] = useState(false);
  const sources = work.signals.flatMap((signal) => signal.sources);
  const { definition } = work;
  const { design } = work;
  const [latestRun] = work.runs;
  return (
    <article className="border border-[#d7d3c7] bg-[#fffefa] p-4 text-[#20201d] shadow-[0_10px_30px_rgba(30,30,20,0.06)]">
      <div className="flex items-start gap-3">
        <span className="grid size-8 shrink-0 place-items-center bg-[#dcff68]">
          <Sparkles className="size-4" />
        </span>
        <div className="min-w-0 flex-1">
          <p className="text-[10px] font-semibold uppercase text-[#65713a]">
            Proposed Work
          </p>
          <h2 className="mt-1 text-[15px] font-semibold leading-5">
            {work.title}
          </h2>
          <p className="mt-1.5 text-[13px] leading-5 text-[#626057]">
            {work.objective}
          </p>
        </div>
      </div>
      <button
        className="mt-3 flex w-full items-center justify-between border-t border-[#e7e3d9] pt-3 text-left text-xs text-[#69675e]"
        onClick={() => setSourcesOpen((open) => !open)}
        type="button"
      >
        <span>
          {sources.length} exact source{" "}
          {sources.length === 1 ? "message" : "messages"}
        </span>
        <ChevronRight
          className={`size-4 transition-transform ${sourcesOpen ? "rotate-90" : ""}`}
        />
      </button>
      <button
        className="mt-2 flex w-full items-center justify-between border-t border-[#e7e3d9] pt-3 text-left text-xs font-medium text-[#20201d]"
        onClick={() => setExpanded((open) => !open)}
        type="button"
      >
        <span>{expanded ? "Hide Work details" : "Open Work details"}</span>
        <ChevronRight
          className={`size-4 transition-transform ${expanded ? "rotate-90" : ""}`}
        />
      </button>
      {sourcesOpen ? (
        <div className="mt-3 space-y-2">
          {sources.map((source) => (
            <button
              className="flex w-full items-start gap-2 border-l-2 border-[#a8b750] bg-[#f4f2e9] px-3 py-2 text-left text-xs leading-5 hover:bg-[#ece9dd]"
              key={source.messageId}
              onClick={() => onSourceSelect(source.rawText)}
              type="button"
            >
              <MessageSquareText className="mt-1 size-3.5 shrink-0 text-[#65713a]" />
              <span className="min-w-0 flex-1">{source.rawText}</span>
            </button>
          ))}
        </div>
      ) : null}
      {expanded ? (
        <div className="mt-4 space-y-4 border-t border-[#e7e3d9] pt-4 text-xs">
          <section>
            <p className="font-semibold uppercase tracking-wide text-[#65713a]">
              Outcome
            </p>
            <p className="mt-1 leading-5 text-[#626057]">{work.objective}</p>
            <p className="mt-2 text-[#747168]">
              Risk: {definition?.risk ?? "not defined"}
            </p>
            {definition?.questions?.length ? (
              <p className="mt-1 text-amber-800">
                {
                  definition.questions.filter(
                    (question) => question.status === "open"
                  ).length
                }{" "}
                open question(s)
              </p>
            ) : null}
            <div className="mt-2 flex flex-wrap gap-2">
              {work.status === "proposed" ? (
                <Button
                  size="sm"
                  onClick={() => void slice.requestDefinition(work._id)}
                >
                  <Sparkles className="size-3.5" /> Define
                </Button>
              ) : null}
              {work.status === "defining" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() =>
                    void slice.saveDefinition(work._id, starterDefinition(work))
                  }
                >
                  <Hammer className="size-3.5" /> Save definition
                </Button>
              ) : null}
              {work.status === "awaiting-definition-approval" &&
              work.definitionVersion ? (
                <Button
                  size="sm"
                  onClick={() =>
                    void slice.approveDefinition(
                      work._id,
                      work.definitionVersion as number
                    )
                  }
                >
                  <Check className="size-3.5" /> Approve
                </Button>
              ) : null}
            </div>
          </section>
          <section>
            <p className="font-semibold uppercase tracking-wide text-[#65713a]">
              Design
            </p>
            <p className="mt-1 leading-5 text-[#626057]">
              {design?.architectureSummary ?? "No Design Packet yet."}
            </p>
            {design?.slices?.map((item) => (
              <p className="mt-1 text-[#747168]" key={item.id}>
                {item.title}: {item.observableBehavior}
              </p>
            ))}
            <div className="mt-2 flex flex-wrap gap-2">
              {work.status === "designing" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() =>
                    void slice.saveDesign(work._id, starterDesign(work))
                  }
                >
                  <Hammer className="size-3.5" /> Save design
                </Button>
              ) : null}
              {work.status === "awaiting-design-approval" &&
              work.definitionApprovalVersion &&
              work.designVersion ? (
                <Button
                  size="sm"
                  onClick={() =>
                    void slice.approveDesign(
                      work._id,
                      work.definitionApprovalVersion as number,
                      work.designVersion as number
                    )
                  }
                >
                  <Check className="size-3.5" /> Approve design
                </Button>
              ) : null}
            </div>
          </section>
          <section>
            <p className="font-semibold uppercase tracking-wide text-[#65713a]">
              Build
            </p>
            {latestRun ? (
              <p className="mt-1 leading-5 text-[#626057]">
                Run {latestRun.status}:{" "}
                {latestRun.terminalSummary ??
                  latestRun.terminalClassification ??
                  "activity is still arriving"}
              </p>
            ) : (
              <p className="mt-1 text-[#747168]">No simulation Run yet.</p>
            )}
            <div className="mt-2 flex flex-wrap gap-2">
              {work.status === "ready" ? (
                <Button
                  size="sm"
                  onClick={() =>
                    void slice.startSimulation(
                      work._id,
                      "success",
                      design?.slices?.[0]?.id
                    )
                  }
                >
                  <Play className="size-3.5" /> Simulate
                </Button>
              ) : null}
              {latestRun?.status === "running" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() => void slice.cancelSimulation(latestRun._id)}
                >
                  <X className="size-3.5" /> Cancel
                </Button>
              ) : null}
              {latestRun?.status === "terminal" &&
              latestRun.terminalClassification === "RetryableFailure" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() => void slice.retrySimulation(latestRun._id)}
                >
                  <RotateCcw className="size-3.5" /> Retry
                </Button>
              ) : null}
            </div>
          </section>
        </div>
      ) : null}
    </article>
  );
 };
 const ConversationLoading = () => (
  <output
    aria-label="Loading conversation"
    className="mx-auto flex min-h-[55vh] w-full max-w-md flex-col justify-center gap-4"
  >
    <span className="h-16 w-4/5 animate-pulse rounded-sm bg-[#e3e0d5]" />
    <span className="ml-auto h-12 w-3/5 animate-pulse rounded-sm bg-[#dedbd0]" />
    <span className="h-24 w-full animate-pulse rounded-sm bg-[#e3e0d5]" />
    <span className="sr-only">Loading conversation…</span>
  </output>
 );
 const ConversationEmptyState = () => (
  <div className="grid min-h-[55vh] place-items-center text-center">
    <div>
      <MessageSquareText className="mx-auto size-7 text-[#8a887f]" />
      <h1 className="mt-4 text-xl font-semibold">What should move forward?</h1>
      <p className="mx-auto mt-2 max-w-sm text-sm leading-6 text-[#69675f]">
        Describe an outcome or problem. Casual conversation stays conversation.
      </p>
    </div>
  </div>
 );
 type SliceOneState = ReturnType<typeof useSliceOne>;
 const ProjectsLoading = () => (
  <div className="grid min-h-svh place-items-center bg-[#f2f0e7]">
    <LoaderCircle className="size-5 animate-spin" />
  </div>
 );
 const ConnectProject = ({ slice }: { slice: SliceOneState }) => (
  <main className="grid min-h-svh place-items-center bg-[#f2f0e7] px-5 text-[#20201d]">
    <form
      className="w-full max-w-sm"
      onSubmit={(event) => {
        event.preventDefault();
        void slice.connectRepository();
      }}
    >
      <span className="grid size-11 place-items-center bg-[#20201d] text-white">
        <FolderGit2 className="size-5" />
      </span>
      <h1 className="mt-6 text-2xl font-semibold">Connect one project</h1>
      <p className="mt-2 text-sm leading-6 text-[#68665e]">
        Slice 1 turns actionable conversation into proposed Work with exact
        provenance.
      </p>
      <input
        aria-label="Public Git repository URL"
        className="mt-6 h-12 w-full border border-[#c9c5b9] bg-[#fffefa] px-3 text-sm outline-none focus:border-[#55564e]"
        onChange={(event) => slice.setRepository(event.target.value)}
        placeholder="https://github.com/owner/repository"
        required
        value={slice.repository}
      />
      {slice.error ? (
        <p className="mt-2 text-xs text-red-700">{slice.error.message}</p>
      ) : null}
      <Button
        className="mt-3 h-12 w-full"
        disabled={slice.pending}
        type="submit"
      >
        {slice.pending ? (
          <LoaderCircle className="size-4 animate-spin" />
        ) : null}
        {slice.pending ? "Connecting" : "Connect project"}
      </Button>
    </form>
  </main>
 );
 export const SliceOnePage = () => {
  const slice = useSliceOne();
  const viewportStyle = useVisualViewportStyle();
  const [draft, setDraft] = useState("");
  const attachments = useChatImages();
  const imageInput = useRef<HTMLInputElement>(null);
  const [drawerOpen, setDrawerOpen] = useState(false);
  const [highlightedMessageId, setHighlightedMessageId] = useState<string>();
  const highlightTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
  const works = slice.works ?? EMPTY_WORKS;
  const workById = useMemo(
    () => new Map(works.map((work) => [String(work._id), work])),
    [works]
  );
  const notices = useMemo(() => projectWorkNotices(works), [works]);
  const timeline = useMemo(
    () => buildSliceOneTimeline(slice.agent.messages, notices),
    [notices, slice.agent.messages]
  );
  const busy =
    slice.agent.status === "submitted" || slice.agent.status === "streaming";
  const revealSourceMessage = (rawText: string) => {
    const messageId = findSourceMessageTarget(slice.agent.messages, rawText);
    if (!messageId) {
      return;
    }
    setDrawerOpen(false);
    setHighlightedMessageId(messageId);
    if (highlightTimer.current) {
      clearTimeout(highlightTimer.current);
    }
    requestAnimationFrame(() => {
      document
        .querySelector(`#${CSS.escape(`slice-message-${messageId}`)}`)
        ?.scrollIntoView({ behavior: "smooth", block: "center" });
    });
    highlightTimer.current = setTimeout(
      () => setHighlightedMessageId(undefined),
      1800
    );
  };
  if (slice.projects === undefined) {
    return <ProjectsLoading />;
  }
  if (!slice.selectedProject) {
    return <ConnectProject slice={slice} />;
  }
  const send = async () => {
    const message = draft.trim();
    if (!message || busy) {
      return;
    }
    await slice.agent.sendMessage(message, {
      images: attachments.images.map((image) => image.file),
    });
    setDraft("");
    attachments.clear();
  };
  return (
    <main
      className="slice-one-surface fixed inset-x-0 top-0 flex min-h-0 overflow-hidden bg-[#f2f0e7] text-[#20201d]"
      style={viewportStyle}
    >
      <section className="flex min-w-0 flex-1 flex-col">
        <header className="flex h-14 shrink-0 items-center border-b border-[#d7d3c7] bg-[#faf9f4] px-4">
          <div className="min-w-0 flex-1 pr-2">
            <select
              aria-label="Current project"
              className="block h-7 max-w-full border-0 bg-transparent pr-7 text-sm font-semibold text-[#20201d] outline-none"
              onChange={(event) => slice.selectProject(event.target.value)}
              value={slice.selectedProject.id}
            >
              {slice.projects.map((project) => (
                <option key={project.id} value={project.id}>
                  {project.name}
                </option>
              ))}
            </select>
            <p className="text-[10px] uppercase text-[#858277]">
              Conversation to proposed Work
            </p>
          </div>
          <button
            className="flex h-9 items-center gap-2 border border-[#c9c5b9] bg-white px-3 text-xs lg:hidden"
            onClick={() => setDrawerOpen(true)}
            type="button"
          >
            <Menu className="size-4" /> Work{" "}
            {slice.works === undefined ? "…" : works.length}
          </button>
        </header>
        <Conversation className="min-h-0 flex-1">
          <ConversationContent className="mx-auto min-h-full w-full max-w-2xl gap-4 px-4 py-5 sm:px-6">
            {!slice.agent.historyReady && timeline.length === 0 ? (
              <ConversationLoading />
            ) : null}
            {slice.agent.historyReady && timeline.length === 0 ? (
              <ConversationEmptyState />
            ) : null}
            {timeline.map((item) => {
              if (item.kind === "work") {
                const work = workById.get(item.notice.workId);
                return work ? (
                  <div
                    className="chat-message ml-7"
                    key={`notice-${item.notice.eventId}`}
                  >
                    <p className="mb-2 text-[10px] font-semibold uppercase text-[#65713a]">
                      Work proposed from this conversation
                    </p>
                    <WorkCard
                      onSourceSelect={revealSourceMessage}
                      slice={slice}
                      work={work}
                    />
                  </div>
                ) : null;
              }
              return (
                <div
                  className={`rounded-sm transition-colors duration-300 ${
                    highlightedMessageId === item.message.id
                      ? "bg-[#dcff68]/70 ring-2 ring-[#7f9130] ring-offset-4 ring-offset-[#f2f0e7]"
                      : ""
                  }`}
                  id={`slice-message-${item.message.id}`}
                  key={item.message.id}
                >
                  <ChatMessage message={item.message} />
                </div>
              );
            })}
            {slice.agent.status === "submitted" ? (
              <ChatThinkingResponse />
            ) : null}
          </ConversationContent>
        </Conversation>
        <div className="shrink-0 border-t border-[#d7d3c7] bg-[#faf9f4] p-3 pb-[max(0.75rem,env(safe-area-inset-bottom))]">
          {attachments.images.length > 0 ? (
            <div className="mx-auto max-w-2xl">
              <PendingChatAttachments
                images={attachments.images}
                onRemove={attachments.handleRemove}
              />
            </div>
          ) : null}
          {slice.agent.error ? (
            <p className="mx-auto mb-2 max-w-2xl text-xs text-red-700">
              {slice.agent.error.message}
            </p>
          ) : null}
          {attachments.error ? (
            <p className="mx-auto mb-2 max-w-2xl text-xs text-red-700">
              {attachments.error}
            </p>
          ) : null}
          <div className="mx-auto flex max-w-2xl items-end gap-2">
            <input
              accept="image/*"
              aria-label="Attach images"
              className="sr-only"
              multiple
              onChange={(event) => {
                attachments.addFiles(event.target.files);
                event.target.value = "";
              }}
              ref={imageInput}
              type="file"
            />
            <Button
              aria-label="Attach images"
              className="size-11 shrink-0"
              disabled={busy}
              onClick={() => imageInput.current?.click()}
              size="icon"
              type="button"
              variant="outline"
            >
              <ImagePlus className="size-4" />
            </Button>
            <textarea
              aria-label="Message Zopu"
              className="max-h-32 min-h-11 flex-1 resize-none border border-[#c9c5b9] bg-white px-3 py-2.5 text-sm outline-none focus:border-[#55564e]"
              disabled={busy}
              onChange={(event) => setDraft(event.target.value)}
              onKeyDown={(event) => {
                if (event.key === "Enter" && !event.shiftKey) {
                  event.preventDefault();
                  void send();
                }
              }}
              placeholder="Describe an outcome or problem…"
              rows={1}
              value={draft}
            />
            <Button
              aria-label="Send message"
              className="size-11 shrink-0"
              disabled={!draft.trim() || busy}
              onClick={() => void send()}
              size="icon"
              type="button"
            >
              {busy ? (
                <LoaderCircle className="size-4 animate-spin" />
              ) : (
                <Send className="size-4" />
              )}
            </Button>
          </div>
        </div>
      </section>
      <aside className="hidden w-[380px] shrink-0 overflow-y-auto border-l border-[#d7d3c7] bg-[#e9e7de] p-4 lg:block">
        <h2 className="text-sm font-semibold">Proposed Work</h2>
        <p className="mb-4 text-xs text-[#747168]">
          {works.length} durable outcomes
        </p>
        <div className="space-y-3">
          {works.map((work) => (
            <WorkCard
              key={work._id}
              onSourceSelect={revealSourceMessage}
              slice={slice}
              work={work}
            />
          ))}
        </div>
      </aside>
      {drawerOpen ? (
        <div className="fixed inset-0 z-50 bg-black/30 lg:hidden">
          <button
            aria-label="Close Work drawer"
            className="absolute inset-0"
            onClick={() => setDrawerOpen(false)}
            type="button"
          />
          <section className="absolute inset-y-0 right-0 flex w-[min(92vw,380px)] flex-col bg-[#e9e7de] shadow-2xl">
            <header className="flex h-14 items-center border-b border-[#cfcbc0] px-4">
              <h2 className="flex-1 text-sm font-semibold">Proposed Work</h2>
              <button
                aria-label="Close Work drawer"
                className="grid size-9 place-items-center"
                onClick={() => setDrawerOpen(false)}
                type="button"
              >
                <X className="size-4" />
              </button>
            </header>
            <div className="flex-1 space-y-3 overflow-y-auto p-4">
              {works.length === 0 ? (
                <p className="py-12 text-center text-sm text-[#747168]">
                  Actionable messages will appear here.
                </p>
              ) : null}
              {works.map((work) => (
                <WorkCard
                  key={work._id}
                  onSourceSelect={revealSourceMessage}
                  slice={slice}
                  work={work}
                />
              ))}
            </div>
          </section>
        </div>
      ) : null}
    </main>
  );
 };
--- a/apps/web/src/components/workspace/conversation-composer.tsx
+++ b/apps/web/src/components/workspace/conversation-composer.tsx
@@ -0,0 +1,112 @@
 import { Button } from "@code/ui/components/button";
 import { ImagePlus, LoaderCircle, Send } from "lucide-react";
 import { useRef } from "react";
 import { PendingChatAttachments } from "@/components/chat/chat-attachments";
 import { useChatImages } from "@/hooks/chat/use-chat-images";
 import type { WorkspaceState } from "@/lib/workspace/types";
 export const ConversationComposer = ({
  draft,
  onDraftChange,
  workspace,
 }: {
  readonly draft: string;
  readonly onDraftChange: (draft: string) => void;
  readonly workspace: WorkspaceState;
 }) => {
  const imageInput = useRef<HTMLInputElement>(null);
  const attachments = useChatImages();
  const busy =
    workspace.agent.status === "submitted" ||
    workspace.agent.status === "streaming";
  const send = async () => {
    const message = draft.trim();
    if (!message || busy) {
      return;
    }
    await workspace.agent.sendMessage(message, {
      images: attachments.images.map((image) => image.file),
    });
    onDraftChange("");
    attachments.clear();
  };
  return (
    <div className="shrink-0 border-t border-[#d7d3c7] bg-[#faf9f4] p-3 pb-[max(0.75rem,env(safe-area-inset-bottom))]">
      {attachments.images.length > 0 ? (
        <div className="mx-auto max-w-2xl">
          <PendingChatAttachments
            images={attachments.images}
            onRemove={attachments.handleRemove}
          />
        </div>
      ) : null}
      {workspace.agent.error ? (
        <p className="mx-auto mb-2 max-w-2xl text-xs text-red-700">
          {workspace.agent.error.message}
        </p>
      ) : null}
      {attachments.error ? (
        <p className="mx-auto mb-2 max-w-2xl text-xs text-red-700">
          {attachments.error}
        </p>
      ) : null}
      <div className="mx-auto flex max-w-2xl items-end gap-2">
        <input
          accept="image/*"
          aria-label="Attach images"
          className="sr-only"
          multiple
          onChange={(event) => {
            attachments.addFiles(event.target.files);
            event.target.value = "";
          }}
          ref={imageInput}
          type="file"
        />
        <Button
          aria-label="Attach images"
          className="size-11 shrink-0"
          disabled={busy}
          onClick={() => imageInput.current?.click()}
          size="icon"
          type="button"
          variant="outline"
        >
          <ImagePlus className="size-4" />
        </Button>
        <textarea
          aria-label="Message Zopu"
          className="max-h-32 min-h-11 flex-1 resize-none border border-[#c9c5b9] bg-white px-3 py-2.5 text-sm outline-none focus:border-[#55564e]"
          disabled={busy}
          onChange={(event) => onDraftChange(event.target.value)}
          onKeyDown={(event) => {
            if (event.key === "Enter" && !event.shiftKey) {
              event.preventDefault();
              void send();
            }
          }}
          placeholder="Describe an outcome or problem…"
          rows={1}
          value={draft}
        />
        <Button
          aria-label="Send message"
          className="size-11 shrink-0"
          disabled={!draft.trim() || busy}
          onClick={() => void send()}
          size="icon"
          type="button"
        >
          {busy ? (
            <LoaderCircle className="size-4 animate-spin" />
          ) : (
            <Send className="size-4" />
          )}
        </Button>
      </div>
    </div>
  );
 };
--- a/apps/web/src/components/workspace/conversation-feed.tsx
+++ b/apps/web/src/components/workspace/conversation-feed.tsx
@@ -0,0 +1,108 @@
 import { projectWorkNotices } from "@code/primitives/work";
 import {
  Conversation,
  ConversationContent,
 } from "@code/ui/components/ai-elements/conversation";
 import { MessageSquareText } from "lucide-react";
 import { useMemo } from "react";
 import { ChatMessage } from "@/components/chat/chat-message";
 import { ChatThinkingResponse } from "@/components/chat/chat-thinking-response";
 import { buildWorkspaceTimeline } from "@/lib/workspace/presentation";
 import type { WorkRecord, WorkspaceState } from "@/lib/workspace/types";
 import { WorkCard } from "./work-card";
 const ConversationLoading = () => (
  <output
    aria-label="Loading conversation"
    className="mx-auto flex min-h-[55vh] w-full max-w-md flex-col justify-center gap-4"
  >
    <span className="h-16 w-4/5 animate-pulse rounded-sm bg-[#e3e0d5]" />
    <span className="ml-auto h-12 w-3/5 animate-pulse rounded-sm bg-[#dedbd0]" />
    <span className="h-24 w-full animate-pulse rounded-sm bg-[#e3e0d5]" />
    <span className="sr-only">Loading conversation…</span>
  </output>
 );
 const ConversationEmptyState = () => (
  <div className="grid min-h-[55vh] place-items-center text-center">
    <div>
      <MessageSquareText className="mx-auto size-7 text-[#8a887f]" />
      <h1 className="mt-4 text-xl font-semibold">What should move forward?</h1>
      <p className="mx-auto mt-2 max-w-sm text-sm leading-6 text-[#69675f]">
        Describe an outcome or problem. Casual conversation stays conversation.
      </p>
    </div>
  </div>
 );
 export const ConversationFeed = ({
  highlightedMessageId,
  onSourceSelect,
  workspace,
 }: {
  readonly highlightedMessageId?: string;
  readonly onSourceSelect: (rawText: string) => void;
  readonly workspace: WorkspaceState;
 }) => {
  const works = workspace.works ?? [];
  const workById = new Map(
    works.map((work) => [String(work._id), work] as const)
  );
  const notices = projectWorkNotices(works);
  const timeline = useMemo(
    () => buildWorkspaceTimeline(workspace.agent.messages, notices),
    [notices, workspace.agent.messages]
  );
  return (
    <Conversation className="min-h-0 flex-1">
      <ConversationContent className="mx-auto min-h-full w-full max-w-2xl gap-4 px-4 py-5 sm:px-6">
        {!workspace.agent.historyReady && timeline.length === 0 ? (
          <ConversationLoading />
        ) : null}
        {workspace.agent.historyReady && timeline.length === 0 ? (
          <ConversationEmptyState />
        ) : null}
        {timeline.map((item) => {
          if (item.kind === "work") {
            const work = workById.get(item.notice.workId) as
              | WorkRecord
              | undefined;
            return work ? (
              <div
                className="chat-message ml-7"
                key={`notice-${item.notice.eventId}`}
              >
                <p className="mb-2 text-[10px] font-semibold uppercase text-[#65713a]">
                  Work proposed from this conversation
                </p>
                <div className="rounded-sm">
                  <span className="sr-only">Proposed Work</span>
                  <WorkCard
                    onSourceSelect={onSourceSelect}
                    work={work}
                    workspace={workspace}
                  />
                </div>
              </div>
            ) : null;
          }
          return (
            <div
              className={`rounded-sm transition-colors duration-300 ${highlightedMessageId === item.message.id ? "bg-[#dcff68]/70 ring-2 ring-[#7f9130] ring-offset-4 ring-offset-[#f2f0e7]" : ""}`}
              id={`workspace-message-${item.message.id}`}
              key={item.message.id}
            >
              <ChatMessage message={item.message} />
            </div>
          );
        })}
        {workspace.agent.status === "submitted" ? (
          <ChatThinkingResponse />
        ) : null}
      </ConversationContent>
    </Conversation>
  );
 };
--- a/apps/web/src/components/workspace/project-connect-form.tsx
+++ b/apps/web/src/components/workspace/project-connect-form.tsx
@@ -0,0 +1,50 @@
 import { Button } from "@code/ui/components/button";
 import { FolderGit2, LoaderCircle } from "lucide-react";
 import type { WorkspaceState } from "@/lib/workspace/types";
 export const ProjectConnectForm = ({
  workspace,
 }: {
  readonly workspace: WorkspaceState;
 }) => (
  <main className="grid min-h-svh place-items-center bg-[#f2f0e7] px-5 text-[#20201d]">
    <form
      className="w-full max-w-sm"
      onSubmit={(event) => {
        event.preventDefault();
        void workspace.connectRepository();
      }}
    >
      <span className="grid size-11 place-items-center bg-[#20201d] text-white">
        <FolderGit2 className="size-5" />
      </span>
      <h1 className="mt-6 text-2xl font-semibold">Connect a project</h1>
      <p className="mt-2 text-sm leading-6 text-[#68665e]">
        Turn actionable project conversation into proposed Work with exact
        provenance.
      </p>
      <input
        aria-label="Public Git repository URL"
        className="mt-6 h-12 w-full border border-[#c9c5b9] bg-[#fffefa] px-3 text-sm outline-none focus:border-[#55564e]"
        onChange={(event) => workspace.setRepository(event.target.value)}
        placeholder="https://github.com/owner/repository"
        required
        value={workspace.repository}
      />
      {workspace.error ? (
        <p className="mt-2 text-xs text-red-700">{workspace.error.message}</p>
      ) : null}
      <Button
        className="mt-3 h-12 w-full"
        disabled={workspace.pending}
        type="submit"
      >
        {workspace.pending ? (
          <LoaderCircle className="size-4 animate-spin" />
        ) : null}
        {workspace.pending ? "Connecting" : "Connect project"}
      </Button>
    </form>
  </main>
 );
--- a/apps/web/src/components/workspace/project-header.tsx
+++ b/apps/web/src/components/workspace/project-header.tsx
@@ -0,0 +1,63 @@
 import { Button } from "@code/ui/components/button";
 import { Menu, Settings } from "lucide-react";
 import { useState } from "react";
 import type { WorkspaceState } from "@/lib/workspace/types";
 import { ProjectSettingsPanel } from "./project-settings-panel";
 export const ProjectHeader = ({
  onOpenDrawer,
  workspace,
 }: {
  readonly onOpenDrawer: () => void;
  readonly workspace: WorkspaceState;
 }) => {
  const [settingsOpen, setSettingsOpen] = useState(false);
  const works = workspace.works ?? [];
  return (
    <header className="relative flex h-14 shrink-0 items-center border-b border-[#d7d3c7] bg-[#faf9f4] px-4">
      <div className="min-w-0 flex-1 pr-2">
        <select
          aria-label="Current project"
          className="block h-7 max-w-full border-0 bg-transparent pr-7 text-sm font-semibold text-[#20201d] outline-none"
          onChange={(event) => workspace.selectProject(event.target.value)}
          value={workspace.selectedProject?.id ?? ""}
        >
          {(workspace.projects ?? []).map((project) => (
            <option key={project.id} value={project.id}>
              {project.name}
            </option>
          ))}
        </select>
        <p className="text-[10px] uppercase text-[#858277]">
          Conversation to proposed Work
        </p>
      </div>
      <Button
        aria-label="Project settings"
        className="mr-2 size-9"
        onClick={() => setSettingsOpen((open) => !open)}
        size="icon"
        variant="outline"
      >
        <Settings className="size-4" />
      </Button>
      <button
        className="flex h-9 items-center gap-2 border border-[#c9c5b9] bg-white px-3 text-xs lg:hidden"
        onClick={onOpenDrawer}
        type="button"
      >
        <Menu className="size-4" /> Work{" "}
        {workspace.works === undefined ? "…" : works.length}
      </button>
      {settingsOpen ? (
        <ProjectSettingsPanel
          onClose={() => setSettingsOpen(false)}
          workspace={workspace}
        />
      ) : null}
    </header>
  );
 };
--- a/apps/web/src/components/workspace/project-settings-panel.tsx
+++ b/apps/web/src/components/workspace/project-settings-panel.tsx
@@ -0,0 +1,100 @@
 import { Button } from "@code/ui/components/button";
 import { AlertTriangle, X } from "lucide-react";
 import { useState } from "react";
 import type { WorkspaceState } from "@/lib/workspace/types";
 export const ProjectSettingsPanel = ({
  onClose,
  workspace,
 }: {
  readonly onClose: () => void;
  readonly workspace: WorkspaceState;
 }) => {
  const [serverUrl, setServerUrl] = useState("https://git.openputer.com");
  const [username, setUsername] = useState("");
  const [token, setToken] = useState("");
  const handleClearOperationError = () => workspace.clearOperationError();
  return (
    <section className="absolute right-4 top-12 z-40 w-[min(92vw,360px)] border border-[#c9c5b9] bg-[#fffefa] p-4 shadow-xl">
      <div className="flex items-center justify-between">
        <h2 className="text-sm font-semibold">Project Git</h2>
        <button aria-label="Close settings" onClick={onClose} type="button">
          <X className="size-4" />
        </button>
      </div>
      <p className="mt-1 text-xs text-[#747168]">
        {workspace.projectGitConnection
          ? `${workspace.projectGitConnection.provider} · ${workspace.projectGitConnection.serverUrl}`
          : "No Git credentials attached"}
      </p>
      {workspace.operationError ? (
        <p className="mt-2 flex items-start gap-1.5 border border-red-300 bg-red-50 px-2 py-1.5 text-xs text-red-800">
          <AlertTriangle className="mt-0.5 size-3.5 shrink-0" />
          <span className="min-w-0 flex-1 leading-5">
            {workspace.operationError.message}
          </span>
          <button
            aria-label="Dismiss error"
            className="shrink-0"
            onClick={handleClearOperationError}
            type="button"
          >
            <X className="size-3.5" />
          </button>
        </p>
      ) : null}
      <div className="mt-4 flex gap-2">
        <Button
          size="sm"
          variant="outline"
          onClick={() => void workspace.authorizeGithub()}
        >
          Authorize GitHub
        </Button>
        <Button size="sm" onClick={() => void workspace.connectLinkedGithub()}>
          Use GitHub
        </Button>
      </div>
      <div className="mt-4 space-y-2 border-t border-[#e7e3d9] pt-4">
        <input
          aria-label="Gitea server URL"
          className="h-9 w-full border px-2 text-xs"
          onChange={(event) => setServerUrl(event.target.value)}
          value={serverUrl}
        />
        <input
          aria-label="Gitea username"
          className="h-9 w-full border px-2 text-xs"
          onChange={(event) => setUsername(event.target.value)}
          placeholder="Username (optional)"
          value={username}
        />
        <input
          aria-label="Gitea access token"
          className="h-9 w-full border px-2 text-xs"
          onChange={(event) => setToken(event.target.value)}
          placeholder="Personal access token"
          type="password"
          value={token}
        />
        <Button
          className="w-full"
          disabled={!token.trim()}
          size="sm"
          onClick={() => {
            void workspace.connectGitea({
              serverUrl,
              token,
              username: username || undefined,
            });
            setToken("");
          }}
        >
          Connect Gitea
        </Button>
      </div>
    </section>
  );
 };
--- a/apps/web/src/components/workspace/project-workspace-page.tsx
+++ b/apps/web/src/components/workspace/project-workspace-page.tsx
@@ -0,0 +1,123 @@
 import { useRef, useState } from "react";
 import { useProjectWorkspace } from "@/hooks/workspace/use-project-workspace";
 import { useVisualViewportStyle } from "@/hooks/workspace/use-visual-viewport";
 import { findSourceMessageTarget } from "@/lib/workspace/presentation";
 import { ConversationComposer } from "./conversation-composer";
 import { ConversationFeed } from "./conversation-feed";
 import { ProjectConnectForm } from "./project-connect-form";
 import { ProjectHeader } from "./project-header";
 import { WorkFeed } from "./work-feed";
 const ProjectLoading = () => (
  <main className="grid min-h-svh place-items-center bg-[#f2f0e7]">
    <span className="size-5 animate-spin rounded-full border-2 border-[#20201d] border-t-transparent" />
  </main>
 );
 export const ProjectWorkspacePage = () => {
  const workspace = useProjectWorkspace();
  const viewportStyle = useVisualViewportStyle();
  const [draft, setDraft] = useState("");
  const [drawerOpen, setDrawerOpen] = useState(false);
  const [highlightedMessageId, setHighlightedMessageId] = useState<string>();
  const highlightTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
  if (workspace.projects === undefined) {
    return <ProjectLoading />;
  }
  if (!workspace.selectedProject) {
    return <ProjectConnectForm workspace={workspace} />;
  }
  const works = workspace.works ?? [];
  const revealSourceMessage = (rawText: string) => {
    const messageId = findSourceMessageTarget(
      workspace.agent.messages,
      rawText
    );
    if (!messageId) {
      return;
    }
    setDrawerOpen(false);
    setHighlightedMessageId(messageId);
    if (highlightTimer.current) {
      clearTimeout(highlightTimer.current);
    }
    requestAnimationFrame(() =>
      document
        .querySelector(`#workspace-message-${CSS.escape(messageId)}`)
        ?.scrollIntoView({ behavior: "smooth", block: "center" })
    );
    highlightTimer.current = setTimeout(
      () => setHighlightedMessageId(undefined),
      1800
    );
  };
  return (
    <main
      className="workspace-surface fixed inset-x-0 top-0 flex min-h-0 overflow-hidden bg-[#f2f0e7] text-[#20201d]"
      style={viewportStyle}
    >
      <section className="flex min-w-0 flex-1 flex-col">
        <ProjectHeader
          onOpenDrawer={() => setDrawerOpen(true)}
          workspace={workspace}
        />
        <ConversationFeed
          highlightedMessageId={highlightedMessageId}
          onSourceSelect={revealSourceMessage}
          workspace={workspace}
        />
        <ConversationComposer
          draft={draft}
          onDraftChange={setDraft}
          workspace={workspace}
        />
      </section>
      <aside className="hidden w-[380px] shrink-0 overflow-y-auto border-l border-[#d7d3c7] bg-[#e9e7de] p-4 lg:block">
        <h2 className="text-sm font-semibold">Proposed Work</h2>
        <p className="mb-4 text-xs text-[#747168]">
          {works.length} durable outcomes
        </p>
        <WorkFeed
          onSourceSelect={revealSourceMessage}
          works={works}
          workspace={workspace}
        />
      </aside>
      {drawerOpen ? (
        <div className="fixed inset-0 z-50 bg-black/30 lg:hidden">
          <button
            aria-label="Close Work drawer"
            className="absolute inset-0"
            onClick={() => setDrawerOpen(false)}
            type="button"
          />
          <section className="absolute inset-y-0 right-0 flex w-[min(92vw,380px)] flex-col bg-[#e9e7de] shadow-2xl">
            <header className="flex h-14 items-center border-b border-[#cfcbc0] px-4">
              <h2 className="flex-1 text-sm font-semibold">Proposed Work</h2>
              <button
                aria-label="Close Work drawer"
                className="grid size-9 place-items-center"
                onClick={() => setDrawerOpen(false)}
                type="button"
              >
                ×
              </button>
            </header>
            <div className="flex-1 overflow-y-auto p-4">
              <WorkFeed
                onSourceSelect={revealSourceMessage}
                works={works}
                workspace={workspace}
              />
            </div>
          </section>
        </div>
      ) : null}
    </main>
  );
 };
--- a/apps/web/src/components/workspace/work-card.tsx
+++ b/apps/web/src/components/workspace/work-card.tsx
@@ -0,0 +1,395 @@
 import { Button } from "@code/ui/components/button";
 import {
  AlertTriangle,
  Check,
  ChevronRight,
  FileCode2,
  Hammer,
  Play,
  RotateCcw,
  ScrollText,
  Sparkles,
  X,
 } from "lucide-react";
 import { useState } from "react";
 import { changedFilesFor } from "@/lib/workspace/types";
 import type { WorkRecord, WorkspaceState } from "@/lib/workspace/types";
 interface WorkCardProps {
  readonly onSourceSelect: (rawText: string) => void;
  readonly work: WorkRecord;
  readonly workspace: WorkspaceState;
 }
 const starterDefinition = (work: WorkRecord) => ({
  acceptanceCriteria: ["The requested outcome is observable and documented"],
  affectedUsers: ["Project users"],
  assumptions: [],
  constraints: [],
  desiredOutcome: work.objective,
  inScope: [work.objective],
  outOfScope: ["Unrelated product changes"],
  problem: work.objective,
  questions: [],
  requiredArtifacts: ["Simulation activity and terminal outcome"],
  risk: "medium",
 });
 const starterDesign = (work: WorkRecord) => ({
  architectureSummary:
    "Validate the approved Definition, then exercise one deterministic fake slice.",
  callFlowDelta: [
    "Work -> Run -> Attempt -> normalized events -> terminal outcome",
  ],
  concerns: [],
  evidenceRequirements: ["Terminal Run classification"],
  fileTreeDelta: [],
  impactMap: {
    files: [],
    modules: [],
    risks: [],
    summary: "Compact vertical-slice simulation",
  },
  invariants: [
    "Simulation never claims implementation",
    "Every Attempt reaches a terminal classification",
  ],
  keyInterfaces: ["HarnessRuntime", "AttemptOutcome"],
  slices: [
    {
      codeBoundaries: ["workExecution"],
      dependsOn: [],
      evidenceRequirements: ["Normalized activity events"],
      id: "deterministic-simulation",
      objective: work.objective,
      observableBehavior: "A terminal fake Run is visible",
      reviewRequired: false,
      title: "Deterministic simulation",
      verification: ["Run completes with a terminal classification"],
    },
  ],
  tradeoffs: ["Fake runtime proves contract before sandbox integration"],
 });
 // oxlint-disable-next-line complexity -- this card intentionally coordinates review actions and run evidence.
 export const WorkCard = ({
  onSourceSelect,
  work,
  workspace,
 }: WorkCardProps) => {
  const [sourcesOpen, setSourcesOpen] = useState(false);
  const [expanded, setExpanded] = useState(false);
  const [logsOpen, setLogsOpen] = useState(false);
  const sources = work.signals.flatMap((signal) => signal.sources);
  const [latestRun] = work.runs;
  const openQuestions =
    work.definition?.questions?.filter((question) => question.status === "open")
      .length ?? 0;
  return (
    <article className="border border-[#d7d3c7] bg-[#fffefa] p-4 text-[#20201d] shadow-[0_10px_30px_rgba(30,30,20,0.06)]">
      <div className="flex items-start gap-3">
        <span className="grid size-8 shrink-0 place-items-center bg-[#dcff68]">
          <Sparkles className="size-4" />
        </span>
        <div className="min-w-0 flex-1">
          <p className="text-[10px] font-semibold uppercase text-[#65713a]">
            Proposed Work
          </p>
          <h2 className="mt-1 text-[15px] font-semibold leading-5">
            {work.title}
          </h2>
          <p className="mt-1.5 text-[13px] leading-5 text-[#626057]">
            {work.objective}
          </p>
        </div>
      </div>
      <button
        className="mt-3 flex w-full items-center justify-between border-t border-[#e7e3d9] pt-3 text-left text-xs text-[#69675e]"
        onClick={() => setSourcesOpen((open) => !open)}
        type="button"
      >
        <span>
          {sources.length} exact source{" "}
          {sources.length === 1 ? "message" : "messages"}
        </span>
        <ChevronRight
          className={`size-4 transition-transform ${sourcesOpen ? "rotate-90" : ""}`}
        />
      </button>
      <button
        className="mt-2 flex w-full items-center justify-between border-t border-[#e7e3d9] pt-3 text-left text-xs font-medium text-[#20201d]"
        onClick={() => setExpanded((open) => !open)}
        type="button"
      >
        <span>{expanded ? "Hide Work details" : "Open Work details"}</span>
        <ChevronRight
          className={`size-4 transition-transform ${expanded ? "rotate-90" : ""}`}
        />
      </button>
      {sourcesOpen ? (
        <div className="mt-3 space-y-2">
          {sources.map((source) => (
            <button
              className="flex w-full items-start gap-2 border-l-2 border-[#a8b750] bg-[#f4f2e9] px-3 py-2 text-left text-xs leading-5 hover:bg-[#ece9dd]"
              key={source.messageId}
              onClick={() => onSourceSelect(source.rawText)}
              type="button"
            >
              <span className="min-w-0 flex-1">{source.rawText}</span>
            </button>
          ))}
        </div>
      ) : null}
      {expanded ? (
        <div className="mt-4 space-y-4 border-t border-[#e7e3d9] pt-4 text-xs">
          <section>
            <p className="font-semibold uppercase tracking-wide text-[#65713a]">
              Outcome
            </p>
            <p className="mt-1 leading-5 text-[#626057]">{work.objective}</p>
            <p className="mt-2 text-[#747168]">
              Risk: {work.definition?.risk ?? "not defined"}
            </p>
            {openQuestions > 0 ? (
              <p className="mt-1 text-amber-800">
                {openQuestions} open question(s)
              </p>
            ) : null}
            <div className="mt-2 flex flex-wrap gap-2">
              {work.status === "proposed" ? (
                <Button
                  size="sm"
                  onClick={() => void workspace.requestDefinition(work._id)}
                >
                  <Sparkles className="size-3.5" /> Define
                </Button>
              ) : null}
              {work.status === "defining" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() =>
                    void workspace.saveDefinition(
                      work._id,
                      starterDefinition(work)
                    )
                  }
                >
                  <Hammer className="size-3.5" /> Save definition
                </Button>
              ) : null}
              {work.status === "awaiting-definition-approval" &&
              work.definitionVersion ? (
                <Button
                  size="sm"
                  onClick={() =>
                    void workspace.approveDefinition(
                      work._id,
                      work.definitionVersion as number
                    )
                  }
                >
                  <Check className="size-3.5" /> Approve
                </Button>
              ) : null}
            </div>
          </section>
          <section>
            <p className="font-semibold uppercase tracking-wide text-[#65713a]">
              Design
            </p>
            <p className="mt-1 leading-5 text-[#626057]">
              {work.design?.architectureSummary ?? "No Design Packet yet."}
            </p>
            {work.design?.slices?.map((item) => (
              <p className="mt-1 text-[#747168]" key={item.id}>
                {item.title}: {item.observableBehavior}
              </p>
            ))}
            <div className="mt-2 flex flex-wrap gap-2">
              {work.status === "designing" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() =>
                    void workspace.saveDesign(work._id, starterDesign(work))
                  }
                >
                  <Hammer className="size-3.5" /> Save design
                </Button>
              ) : null}
              {work.status === "awaiting-design-approval" &&
              work.definitionApprovalVersion &&
              work.designVersion ? (
                <Button
                  size="sm"
                  onClick={() =>
                    void workspace.approveDesign(
                      work._id,
                      work.definitionApprovalVersion as number,
                      work.designVersion as number
                    )
                  }
                >
                  <Check className="size-3.5" /> Approve design
                </Button>
              ) : null}
            </div>
          </section>
          <section>
            <p className="font-semibold uppercase tracking-wide text-[#65713a]">
              Build
            </p>
            {workspace.operationError ? (
              <p className="mt-2 flex items-start gap-1.5 border border-red-300 bg-red-50 px-2 py-1.5 text-red-800">
                <AlertTriangle className="mt-0.5 size-3.5 shrink-0" />
                <span className="min-w-0 flex-1 leading-5">
                  {workspace.operationError.message}
                </span>
                <button
                  aria-label="Dismiss error"
                  className="shrink-0"
                  onClick={() => workspace.clearOperationError()}
                  type="button"
                >
                  <X className="size-3.5" />
                </button>
              </p>
            ) : null}
            {latestRun ? (
              <div className="mt-1 space-y-2 text-[#626057]">
                <p className="leading-5">
                  {latestRun.executionKind === "real"
                    ? "AgentOS"
                    : "Simulation"}{" "}
                  run {latestRun.status}:{" "}
                  {latestRun.terminalSummary ??
                    latestRun.terminalClassification ??
                    "activity is still arriving"}
                </p>
                {latestRun.baseRevision ? (
                  <p className="font-mono text-[10px] text-[#747168]">
                    {latestRun.baseRevision.slice(0, 8)} →{" "}
                    {latestRun.candidateRevision?.slice(0, 8) ?? "working"}
                  </p>
                ) : null}
                {latestRun.artifacts?.map((artifact) => (
                  <div key={artifact._id} className="space-y-1">
                    <p className="font-medium">
                      {artifact.uri ? (
                        <a
                          className="underline"
                          href={artifact.uri}
                          rel="noreferrer"
                          target="_blank"
                        >
                          {artifact.title}
                        </a>
                      ) : (
                        artifact.title
                      )}
                    </p>
                    {changedFilesFor(artifact).length > 0 ? (
                      <ul className="space-y-0.5">
                        {changedFilesFor(artifact).map((file) => (
                          <li
                            className="flex items-start gap-1.5 font-mono text-[11px] leading-5 text-[#747168]"
                            key={file}
                          >
                            <FileCode2 className="mt-0.5 size-3 shrink-0 text-[#9a985f]" />
                            <span className="min-w-0 break-all">{file}</span>
                          </li>
                        ))}
                      </ul>
                    ) : null}
                  </div>
                ))}
                {latestRun.attemptEvents &&
                latestRun.attemptEvents.length > 0 ? (
                  <div className="space-y-1">
                    {(logsOpen
                      ? latestRun.attemptEvents
                      : latestRun.attemptEvents.slice(-3)
                    ).map((item) => (
                      <p
                        className="border-l-2 border-[#b8c760] pl-2 leading-5"
                        key={item._id}
                      >
                        {item.message}
                      </p>
                    ))}
                    {latestRun.attemptEvents.length > 3 ? (
                      <button
                        className="flex items-center gap-1 font-medium text-[#65713a] hover:underline"
                        onClick={() => setLogsOpen((open) => !open)}
                        type="button"
                      >
                        <ScrollText className="size-3.5" />
                        {logsOpen
                          ? "Show recent activity"
                          : `Show full activity log (${latestRun.attemptEvents.length})`}
                        <ChevronRight
                          className={`size-3.5 transition-transform ${logsOpen ? "rotate-90" : ""}`}
                        />
                      </button>
                    ) : null}
                  </div>
                ) : null}
              </div>
            ) : (
              <p className="mt-1 text-[#747168]">No implementation Run yet.</p>
            )}
            <div className="mt-2 flex flex-wrap gap-2">
              {work.status === "ready" ? (
                <>
                  <Button
                    size="sm"
                    disabled={!workspace.projectGitConnection}
                    onClick={() => void workspace.startExecution(work._id)}
                  >
                    <Play className="size-3.5" /> Run
                  </Button>
                  <Button
                    size="sm"
                    variant="outline"
                    onClick={() =>
                      void workspace.startSimulation(work._id, "success")
                    }
                  >
                    <Play className="size-3.5" /> Simulate
                  </Button>
                </>
              ) : null}
              {latestRun?.status === "running" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() =>
                    void (latestRun.executionKind === "real"
                      ? workspace.cancelExecution(latestRun._id)
                      : workspace.cancelSimulation(latestRun._id))
                  }
                >
                  <X className="size-3.5" /> Cancel
                </Button>
              ) : null}
              {latestRun?.executionKind !== "real" &&
              latestRun?.status === "terminal" &&
              latestRun.terminalClassification === "RetryableFailure" ? (
                <Button
                  size="sm"
                  variant="outline"
                  onClick={() => void workspace.retrySimulation(latestRun._id)}
                >
                  <RotateCcw className="size-3.5" /> Retry
                </Button>
              ) : null}
            </div>
          </section>
        </div>
      ) : null}
    </article>
  );
 };
--- a/apps/web/src/components/workspace/work-feed.tsx
+++ b/apps/web/src/components/workspace/work-feed.tsx
@@ -0,0 +1,29 @@
 import type { WorkRecord, WorkspaceState } from "@/lib/workspace/types";
 import { WorkCard } from "./work-card";
 export const WorkFeed = ({
  onSourceSelect,
  works,
  workspace,
 }: {
  readonly onSourceSelect: (rawText: string) => void;
  readonly works: readonly WorkRecord[];
  readonly workspace: WorkspaceState;
 }) => (
  <div className="space-y-3">
    {works.length === 0 ? (
      <p className="py-12 text-center text-sm text-[#747168]">
        Actionable messages will appear here.
      </p>
    ) : null}
    {works.map((work) => (
      <WorkCard
        key={work._id}
        onSourceSelect={onSourceSelect}
        work={work}
        workspace={workspace}
      />
    ))}
  </div>
 );
--- a/apps/web/src/hooks/chat/use-chat-agent.ts
+++ b/apps/web/src/hooks/chat/use-chat-agent.ts
@@ -55,7 +55,12 @@ export const useOrganizationChatAgent = (
  const projected = projectConversation(rows ?? []);
-  let status: AgentStatus = projected.pending ? "submitted" : "idle";
+  let status: AgentStatus = "idle";
  if (projected.streaming) {
    status = "streaming";
  } else if (projected.pending) {
    status = "submitted";
  }
  if (!organizationId || rows === undefined) {
    status = organization.error ? "error" : "connecting";
  } else if (projected.failedError || sendError) {
--- a/apps/web/src/hooks/slice-one/use-slice-one.ts
+++ b/apps/web/src/hooks/slice-one/use-slice-one.ts
@@ -1,209 +0,0 @@
 import { api } from "@code/backend/convex/_generated/api";
 import type { Id } from "@code/backend/convex/_generated/dataModel";
 import { useAction, useMutation, useQuery } from "convex/react";
 import { makeFunctionReference } from "convex/server";
 import { useMemo, useState } from "react";
 import { useOrganizationChatAgent } from "@/hooks/chat/use-chat-agent";
 import { usePersonalOrganization } from "@/hooks/use-personal-organization";
 const toError = (error: unknown) =>
  error instanceof Error ? error : new Error(String(error));
 interface WorkRecord {
  readonly _id: Id<"works">;
  readonly title: string;
  readonly objective: string;
  readonly status: string;
  readonly definitionVersion?: number;
  readonly definitionApprovalVersion?: number;
  readonly designVersion?: number;
  readonly designApprovalVersion?: number;
  readonly signals: readonly {
    sources: readonly { messageId: string; rawText: string }[];
  }[];
  readonly events: readonly { _id: string; createdAt: number; kind: string }[];
  readonly definitions: readonly unknown[];
  readonly designs: readonly unknown[];
  readonly slices: readonly unknown[];
  readonly runs: readonly {
    _id: Id<"workRuns">;
    status: string;
    terminalClassification?: string;
    terminalSummary?: string;
  }[];
  readonly definition: {
    risk?: string;
    questions?: { status: string }[];
  } | null;
  readonly design: {
    architectureSummary?: string;
    slices?: { id: string; title: string; observableBehavior: string }[];
  } | null;
 }
 const workListRef = makeFunctionReference<
  "query",
  { projectId: Id<"projects"> },
  WorkRecord[]
 >("workPlanning:listForProject");
 const requestDefinitionRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works"> },
  unknown
 >("workPlanning:requestDefinition");
 const saveDefinitionRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; payloadJson: string },
  unknown
 >("workPlanning:saveDefinitionProposal");
 const approveDefinitionRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; version: number },
  unknown
 >("workPlanning:approveDefinition");
 const saveDesignRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; payloadJson: string },
  unknown
 >("workPlanning:saveDesignProposal");
 const approveDesignRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; definitionVersion: number; designVersion: number },
  unknown
 >("workPlanning:approveDesign");
 const startSimulationRef = makeFunctionReference<
  "mutation",
  {
    workId: Id<"works">;
    scenario:
      | "success"
      | "transient-failure-then-success"
      | "needs-input"
      | "permanent-failure"
      | "cancelled";
    sliceId?: string;
  },
  unknown
 >("workExecution:startSimulatedExecution");
 const cancelSimulationRef = makeFunctionReference<
  "mutation",
  { runId: Id<"workRuns"> },
  unknown
 >("workExecution:cancelSimulatedExecution");
 const retrySimulationRef = makeFunctionReference<
  "mutation",
  { runId: Id<"workRuns"> },
  unknown
 >("workExecution:retrySimulatedExecution");
 export const useSliceOne = () => {
  const organization = usePersonalOrganization();
  const projects = useQuery(
    api.projects.list,
    organization.organizationId ? {} : "skip"
  );
  const importPublicGit = useAction(api.projects.importPublicGit);
  const agent = useOrganizationChatAgent(organization);
  const [selectedProjectId, setSelectedProjectId] =
    useState<Id<"projects"> | null>(null);
  const [repository, setRepository] = useState("");
  const [pending, setPending] = useState(false);
  const [error, setError] = useState<Error>();
  const selectedProjectStillExists = projects?.some(
    (project) => project.id === (selectedProjectId as unknown as string)
  );
  const activeProjectId = selectedProjectStillExists
    ? selectedProjectId
    : ((projects?.[0]?.id as unknown as Id<"projects"> | undefined) ?? null);
  const works = useQuery(
    workListRef,
    activeProjectId ? { projectId: activeProjectId } : "skip"
  );
  const requestDefinitionMutation = useMutation(requestDefinitionRef);
  const saveDefinitionMutation = useMutation(saveDefinitionRef);
  const approveDefinitionMutation = useMutation(approveDefinitionRef);
  const saveDesignMutation = useMutation(saveDesignRef);
  const approveDesignMutation = useMutation(approveDesignRef);
  const startSimulationMutation = useMutation(startSimulationRef);
  const cancelSimulationMutation = useMutation(cancelSimulationRef);
  const retrySimulationMutation = useMutation(retrySimulationRef);
  const selectedProject = useMemo(
    () =>
      projects?.find(
        (project) => project.id === (activeProjectId as unknown as string)
      ) ?? null,
    [activeProjectId, projects]
  );
  const connectRepository = async () => {
    const repositoryUrl = repository.trim();
    if (!repositoryUrl || pending) {
      return;
    }
    setPending(true);
    setError(undefined);
    try {
      const project = await importPublicGit({ repositoryUrl });
      setSelectedProjectId(project.id as unknown as Id<"projects">);
      setRepository("");
    } catch (caughtError) {
      setError(toError(caughtError));
    } finally {
      setPending(false);
    }
  };
  const selectProject = (projectId: string) => {
    setSelectedProjectId(projectId as unknown as Id<"projects">);
  };
  const requestDefinition = (workId: Id<"works">) =>
    requestDefinitionMutation({ workId });
  const saveDefinition = (workId: Id<"works">, payload: unknown) =>
    saveDefinitionMutation({ payloadJson: JSON.stringify(payload), workId });
  const approveDefinition = (workId: Id<"works">, version: number) =>
    approveDefinitionMutation({ version, workId });
  const saveDesign = (workId: Id<"works">, payload: unknown) =>
    saveDesignMutation({ payloadJson: JSON.stringify(payload), workId });
  const approveDesign = (
    workId: Id<"works">,
    definitionVersion: number,
    designVersion: number
  ) => approveDesignMutation({ definitionVersion, designVersion, workId });
  const startSimulation = (
    workId: Id<"works">,
    scenario:
      | "success"
      | "transient-failure-then-success"
      | "needs-input"
      | "permanent-failure"
      | "cancelled",
    sliceId?: string
  ) => startSimulationMutation({ scenario, sliceId, workId });
  const cancelSimulation = (runId: Id<"workRuns">) =>
    cancelSimulationMutation({ runId });
  const retrySimulation = (runId: Id<"workRuns">) =>
    retrySimulationMutation({ runId });
  return {
    agent,
    approveDefinition,
    approveDesign,
    cancelSimulation,
    connectRepository,
    error,
    pending,
    projects,
    repository,
    requestDefinition,
    retrySimulation,
    saveDefinition,
    saveDesign,
    selectProject,
    selectedProject,
    setRepository,
    startSimulation,
    works,
  } as const;
 };
--- a/apps/web/src/hooks/workspace/use-project-workspace.ts
+++ b/apps/web/src/hooks/workspace/use-project-workspace.ts
@@ -0,0 +1,276 @@
 import { authClient } from "@code/auth/web";
 import { api } from "@code/backend/convex/_generated/api";
 import type { Id } from "@code/backend/convex/_generated/dataModel";
 import { useAction, useMutation, useQuery } from "convex/react";
 import { makeFunctionReference } from "convex/server";
 import { useMemo, useState } from "react";
 import { useOrganizationChatAgent } from "@/hooks/chat/use-chat-agent";
 import { usePersonalOrganization } from "@/hooks/use-personal-organization";
 import type { WorkRecord, WorkspaceState } from "@/lib/workspace/types";
 const toError = (error: unknown) =>
  error instanceof Error ? error : new Error(String(error));
 type ExecutionScenario =
  | "success"
  | "transient-failure-then-success"
  | "needs-input"
  | "permanent-failure"
  | "cancelled";
 const workListRef = makeFunctionReference<
  "query",
  { projectId: Id<"projects"> },
  WorkRecord[]
 >("workPlanning:listForProject");
 const requestDefinitionRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works"> },
  unknown
 >("workPlanning:requestDefinition");
 const saveDefinitionRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; payloadJson: string },
  unknown
 >("workPlanning:saveDefinitionProposal");
 const approveDefinitionRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; version: number },
  unknown
 >("workPlanning:approveDefinition");
 const saveDesignRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; payloadJson: string },
  unknown
 >("workPlanning:saveDesignProposal");
 const approveDesignRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; definitionVersion: number; designVersion: number },
  unknown
 >("workPlanning:approveDesign");
 const startSimulationRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; scenario: ExecutionScenario; sliceId?: string },
  unknown
 >("workExecution:startSimulatedExecution");
 const cancelSimulationRef = makeFunctionReference<
  "mutation",
  { runId: Id<"workRuns"> },
  unknown
 >("workExecution:cancelSimulatedExecution");
 const retrySimulationRef = makeFunctionReference<
  "mutation",
  { runId: Id<"workRuns"> },
  unknown
 >("workExecution:retrySimulatedExecution");
 const startExecutionRef = makeFunctionReference<
  "mutation",
  { workId: Id<"works">; sliceId?: string },
  unknown
 >("workExecutionWorkflow:startExecution");
 const cancelExecutionRef = makeFunctionReference<
  "mutation",
  { runId: Id<"workRuns"> },
  unknown
 >("workExecutionWorkflow:cancelExecution");
 const listGitConnectionsRef = makeFunctionReference<
  "query",
  Record<string, never>,
  readonly {
    id: string;
    provider: "github" | "gitea";
    serverUrl: string;
    username?: string;
  }[]
 >("gitConnectionData:list");
 const projectGitConnectionRef = makeFunctionReference<
  "query",
  { projectId: Id<"projects"> },
  {
    id: string;
    provider: "github" | "gitea";
    serverUrl: string;
    username?: string;
  } | null
 >("gitConnectionData:getForProject");
 const connectGiteaRef = makeFunctionReference<
  "action",
  { serverUrl: string; token: string; username?: string },
  { connectionId: Id<"gitConnections"> }
 >("gitConnections:connectGitea");
 const connectGithubRef = makeFunctionReference<
  "action",
  Record<string, never>,
  { connectionId: Id<"gitConnections"> }
 >("gitConnections:connectGithub");
 const attachGitConnectionRef = makeFunctionReference<
  "mutation",
  { connectionId: Id<"gitConnections">; projectId: Id<"projects"> },
  unknown
 >("gitConnectionData:attachToProject");
 export const useProjectWorkspace = (): WorkspaceState => {
  const organization = usePersonalOrganization();
  const projects = useQuery(
    api.projects.list,
    organization.organizationId ? {} : "skip"
  );
  const importPublicGit = useAction(api.projects.importPublicGit);
  const agent = useOrganizationChatAgent(organization);
  const [selectedProjectId, setSelectedProjectId] =
    useState<Id<"projects"> | null>(null);
  const [repository, setRepository] = useState("");
  const [pending, setPending] = useState(false);
  const [error, setError] = useState<Error>();
  const [operationError, setOperationError] = useState<Error>();
  const selectedProjectStillExists = projects?.some(
    (project) => project.id === (selectedProjectId as unknown as string)
  );
  const activeProjectId = selectedProjectStillExists
    ? selectedProjectId
    : ((projects?.[0]?.id as unknown as Id<"projects"> | undefined) ?? null);
  const works = useQuery(
    workListRef,
    activeProjectId ? { projectId: activeProjectId } : "skip"
  );
  const gitConnections = useQuery(
    listGitConnectionsRef,
    organization.organizationId ? {} : "skip"
  );
  const projectGitConnection = useQuery(
    projectGitConnectionRef,
    activeProjectId ? { projectId: activeProjectId } : "skip"
  );
  const requestDefinitionMutation = useMutation(requestDefinitionRef);
  const saveDefinitionMutation = useMutation(saveDefinitionRef);
  const approveDefinitionMutation = useMutation(approveDefinitionRef);
  const saveDesignMutation = useMutation(saveDesignRef);
  const approveDesignMutation = useMutation(approveDesignRef);
  const startSimulationMutation = useMutation(startSimulationRef);
  const cancelSimulationMutation = useMutation(cancelSimulationRef);
  const retrySimulationMutation = useMutation(retrySimulationRef);
  const startExecutionMutation = useMutation(startExecutionRef);
  const cancelExecutionMutation = useMutation(cancelExecutionRef);
  const attachGitConnectionMutation = useMutation(attachGitConnectionRef);
  const connectGiteaAction = useAction(connectGiteaRef);
  const connectGithubAction = useAction(connectGithubRef);
  const selectedProject = useMemo(
    () =>
      projects?.find(
        (project) => project.id === (activeProjectId as unknown as string)
      ) ?? null,
    [activeProjectId, projects]
  );
  const runOperation = async <T>(operation: () => Promise<T>): Promise<T> => {
    setOperationError(undefined);
    try {
      return await operation();
    } catch (caughtError) {
      setOperationError(toError(caughtError));
      throw caughtError;
    }
  };
  const connectRepository = async () => {
    const repositoryUrl = repository.trim();
    if (!repositoryUrl || pending) {
      return;
    }
    setPending(true);
    setError(undefined);
    try {
      const project = await importPublicGit({ repositoryUrl });
      setSelectedProjectId(project.id as unknown as Id<"projects">);
      setRepository("");
    } catch (caughtError) {
      setError(toError(caughtError));
    } finally {
      setPending(false);
    }
  };
  const attachConnection = async (connectionId: Id<"gitConnections">) => {
    if (!activeProjectId) {
      throw new Error("Select a project first");
    }
    await attachGitConnectionMutation({
      connectionId,
      projectId: activeProjectId,
    });
  };
  const connectGitea = (input: {
    serverUrl: string;
    token: string;
    username?: string;
  }) =>
    runOperation(async () => {
      const result = await connectGiteaAction(input);
      await attachConnection(result.connectionId);
    });
  const connectLinkedGithub = () =>
    runOperation(async () => {
      const result = await connectGithubAction({});
      await attachConnection(result.connectionId);
    });
  return {
    agent,
    approveDefinition: (workId: Id<"works">, version: number) =>
      approveDefinitionMutation({ version, workId }),
    approveDesign: (
      workId: Id<"works">,
      definitionVersion: number,
      designVersion: number
    ) => approveDesignMutation({ definitionVersion, designVersion, workId }),
    authorizeGithub: () =>
      authClient.signIn.social({
        callbackURL: window.location.href,
        provider: "github",
      }),
    cancelExecution: (runId: Id<"workRuns">) =>
      runOperation(() => cancelExecutionMutation({ runId })),
    cancelSimulation: (runId: Id<"workRuns">) =>
      runOperation(() => cancelSimulationMutation({ runId })),
    clearOperationError: () => setOperationError(undefined),
    connectGitea,
    connectLinkedGithub,
    connectRepository,
    error,
    gitConnections,
    operationError,
    pending,
    projectGitConnection,
    projects,
    repository,
    requestDefinition: (workId: Id<"works">) =>
      requestDefinitionMutation({ workId }),
    retrySimulation: (runId: Id<"workRuns">) =>
      runOperation(() => retrySimulationMutation({ runId })),
    saveDefinition: (workId: Id<"works">, payload: unknown) =>
      saveDefinitionMutation({ payloadJson: JSON.stringify(payload), workId }),
    saveDesign: (workId: Id<"works">, payload: unknown) =>
      saveDesignMutation({ payloadJson: JSON.stringify(payload), workId }),
    selectProject: (projectId: string) =>
      setSelectedProjectId(projectId as unknown as Id<"projects">),
    selectedProject: selectedProject
      ? { id: selectedProject.id, name: selectedProject.name }
      : null,
    setRepository,
    startExecution: (workId: Id<"works">, sliceId?: string) =>
      runOperation(() => startExecutionMutation({ sliceId, workId })),
    startSimulation: (
      workId: Id<"works">,
      scenario: ExecutionScenario,
      sliceId?: string
    ) =>
      runOperation(() =>
        startSimulationMutation({ scenario, sliceId, workId })
      ),
    works,
  };
 };
--- a/apps/web/src/hooks/workspace/use-visual-viewport.test.ts
+++ b/apps/web/src/hooks/workspace/use-visual-viewport.test.ts
@@ -2,7 +2,7 @@ import { describe, expect, test } from "vitest";
 import { visualViewportStyle } from "./use-visual-viewport";
-describe("Slice 1 visual viewport", () => {
+describe("Workspace visual viewport", () => {
  test("shrinks the application surface to the keyboard-visible height", () => {
    expect(visualViewportStyle({ height: 500, offsetTop: 0 })).toEqual({
      height: "500px",
--- a/apps/web/src/hooks/workspace/use-visual-viewport.ts
+++ b/apps/web/src/hooks/workspace/use-visual-viewport.ts
@@ -33,7 +33,7 @@ export const useVisualViewportStyle = (): CSSProperties => {
      });
    };
-    root.classList.add("slice-one-viewport-lock");
+    root.classList.add("workspace-viewport-lock");
    update();
    window.addEventListener("resize", update);
    viewport?.addEventListener("resize", update);
@@ -41,7 +41,7 @@ export const useVisualViewportStyle = (): CSSProperties => {
    return () => {
      cancelAnimationFrame(animationFrame);
-      root.classList.remove("slice-one-viewport-lock");
+      root.classList.remove("workspace-viewport-lock");
      window.removeEventListener("resize", update);
      viewport?.removeEventListener("resize", update);
      viewport?.removeEventListener("scroll", update);
--- a/apps/web/src/index.css
+++ b/apps/web/src/index.css
@@ -6,8 +6,8 @@ body {
  min-height: 100%;
 }
-html.slice-one-viewport-lock,
+html.workspace-viewport-lock,
-html.slice-one-viewport-lock body {
+html.workspace-viewport-lock body {
  height: 100%;
  overflow: hidden;
  overscroll-behavior: none;
@@ -116,9 +116,9 @@ html.slice-one-viewport-lock body {
  color: var(--foreground);
 }
-.slice-one-surface .chat-markdown,
+.workspace-surface .chat-markdown,
-.slice-one-surface .chat-reasoning,
+.workspace-surface .chat-reasoning,
-.slice-one-surface .thinking-line {
+.workspace-surface .thinking-line {
  color: #232321;
 }
--- a/apps/web/src/lib/chat/conversation.test.ts
+++ b/apps/web/src/lib/chat/conversation.test.ts
@@ -20,7 +20,7 @@ describe("projectConversation", () => {
        messageId: "user-1",
        rawText: "Build it",
        role: "user",
-        status: "processing",
+        status: "dispatching",
      }),
      row({ messageId: "assistant-1", role: "assistant", status: "queued" }),
    ]);
@@ -28,6 +28,21 @@ describe("projectConversation", () => {
    expect(state.messages).toHaveLength(1);
  });
  test("projects partial assistant text as streaming", () => {
    const state = projectConversation([
      row({
        messageId: "assistant-streaming",
        rawText: "Working",
        role: "assistant",
        status: "running",
      }),
    ]);
    expect(state.streaming).toBe(true);
    expect(state.messages[0]?.parts).toEqual([
      { state: "streaming", text: "Working", type: "text" },
    ]);
  });
  test("projects completed Convex rows into renderable messages", () => {
    const state = projectConversation([
      row({
--- a/apps/web/src/lib/chat/conversation.ts
+++ b/apps/web/src/lib/chat/conversation.ts
@@ -11,40 +11,67 @@ export interface ConversationRow {
  readonly messageId: string;
  readonly rawText: string;
  readonly role: "assistant" | "user";
-  readonly status: "completed" | "failed" | "processing" | "queued";
+  readonly status:
    | "aborted"
    | "completed"
    | "dispatching"
    | "failed"
    | "queued"
    | "running";
 }
-export const projectConversation = (rows: readonly ConversationRow[]) => ({
+export const projectConversation = (rows: readonly ConversationRow[]) => {
-  failedError: rows.findLast(
+  const streaming = rows.some(
    (row) => row.role === "assistant" && row.status === "failed"
  )?.error,
  messages: rows
    .filter((row) => row.role === "user" || row.status === "completed")
    .map<ConversationMessage>((row) => ({
      id: row.messageId,
      parts: [
        ...row.attachments.map((attachment) => ({
          filename: attachment.filename ?? undefined,
          id: attachment.id,
          mediaType: attachment.mediaType,
          type: "file" as const,
          url: attachment.url ?? undefined,
        })),
        ...(row.rawText
          ? [
              {
                state: "done" as const,
                text: row.rawText,
                type: "text" as const,
              },
            ]
          : []),
      ],
      role: row.role,
    })),
  pending: rows.some(
    (row) =>
      row.role === "assistant" &&
-      (row.status === "queued" || row.status === "processing")
+      row.status === "running" &&
-  ),
+      row.rawText.length > 0
-});
+  );
  return {
    failedError: rows.findLast(
      (row) => row.role === "assistant" && row.status === "failed"
    )?.error,
    messages: rows
      .filter(
        (row) =>
          row.role === "user" ||
          row.status === "completed" ||
          (row.role === "assistant" &&
            row.status === "running" &&
            row.rawText.length > 0)
      )
      .map<ConversationMessage>((row) => ({
        id: row.messageId,
        parts: [
          ...row.attachments.map((attachment) => ({
            filename: attachment.filename ?? undefined,
            id: attachment.id,
            mediaType: attachment.mediaType,
            type: "file" as const,
            url: attachment.url ?? undefined,
          })),
          ...(row.rawText
            ? [
                {
                  state:
                    row.status === "running"
                      ? ("streaming" as const)
                      : ("done" as const),
                  text: row.rawText,
                  type: "text" as const,
                },
              ]
            : []),
        ],
        role: row.role,
      })),
    pending: rows.some(
      (row) =>
        row.role === "assistant" &&
        (row.status === "queued" ||
          row.status === "dispatching" ||
          row.status === "running")
    ),
    streaming,
  };
 };
--- a/apps/web/src/lib/workspace/frontend-regressions.test.ts
+++ b/apps/web/src/lib/workspace/frontend-regressions.test.ts
@@ -5,27 +5,36 @@ import { describe, expect, test } from "vitest";
 const source = (relativePath: string) =>
  readFileSync(new URL(relativePath, import.meta.url), "utf-8");
-describe("Slice 1 frontend regression contracts", () => {
+describe("Workspace frontend regression contracts", () => {
  test("keeps keyboard resizing on the visual viewport instead of page scroll", () => {
-    const page = source("../../components/slice-one/slice-one-page.tsx");
+    const page = source(
      "../../components/workspace/project-workspace-page.tsx"
    );
    const viewport = source("../../hooks/workspace/use-visual-viewport.ts");
    const root = source("../../root.tsx");
    const styles = source("../../index.css");
    expect(root).toContain("interactive-widget=resizes-content");
    expect(page).toContain("style={viewportStyle}");
    expect(page).toContain("fixed inset-x-0 top-0");
-    expect(page).not.toContain("slice-one-surface flex h-svh");
+    expect(viewport).toContain("workspace-viewport-lock");
-    expect(styles).toContain("html.slice-one-viewport-lock body");
+    expect(styles).toContain("html.workspace-viewport-lock body");
    expect(styles).toContain("overflow: hidden");
  });
  test("keeps the responsive shell shrinkable with a pinned composer", () => {
-    const page = source("../../components/slice-one/slice-one-page.tsx");
+    const page = source(
      "../../components/workspace/project-workspace-page.tsx"
    );
    const feed = source("../../components/workspace/conversation-feed.tsx");
    const composer = source(
      "../../components/workspace/conversation-composer.tsx"
    );
    expect(page).toContain('className="flex min-w-0 flex-1 flex-col"');
-    expect(page).toContain('<Conversation className="min-h-0 flex-1">');
+    expect(feed).toContain('<Conversation className="min-h-0 flex-1">');
-    expect(page).toContain('className="shrink-0 border-t');
+    expect(composer).toContain('className="shrink-0 border-t');
-    expect(page).toContain(
+    expect(composer).toContain(
      'className="mx-auto flex max-w-2xl items-end gap-2"'
    );
  });
--- a/apps/web/src/lib/workspace/presentation.test.ts
+++ b/apps/web/src/lib/workspace/presentation.test.ts
@@ -3,7 +3,10 @@ import { describe, expect, test } from "vitest";
 import type { ConversationMessage } from "@/lib/chat/types";
-import { buildSliceOneTimeline, findSourceMessageTarget } from "./presentation";
+import {
  buildWorkspaceTimeline,
  findSourceMessageTarget,
 } from "./presentation";
 const textMessage = (
  id: string,
@@ -23,9 +26,9 @@ const notice: WorkNotice = {
  workId: "work-1",
 };
-describe("Slice 1 presentation", () => {
+describe("Workspace presentation", () => {
  test("places proposed Work after the assistant response to its source", () => {
-    const timeline = buildSliceOneTimeline(
+    const timeline = buildWorkspaceTimeline(
      [
        textMessage("user-1", "user", "Build the phone flow."),
        textMessage("assistant-1", "assistant", "Captured and proposed Work."),
--- a/apps/web/src/lib/workspace/presentation.ts
+++ b/apps/web/src/lib/workspace/presentation.ts
@@ -7,14 +7,9 @@ import {
 } from "@/lib/chat/transforms";
 import type { ConversationMessage } from "@/lib/chat/types";
-export type SliceTimelineItem =
+import type { WorkspaceTimelineItem } from "./types";
  | {
      readonly kind: "message";
      readonly message: ConversationMessage;
    }
  | { readonly kind: "work"; readonly notice: WorkNotice };
-export const isSliceOneVisibleMessage = (
+export const isVisibleConversationMessage = (
  message: ConversationMessage
 ): boolean =>
  message.role === "user" ||
@@ -42,11 +37,11 @@ const targetIndexForNotice = (
  return responseOffset === -1 ? sourceIndex : sourceIndex + responseOffset + 1;
 };
-export const buildSliceOneTimeline = (
+export const buildWorkspaceTimeline = (
  allMessages: readonly ConversationMessage[],
  notices: readonly WorkNotice[]
-): readonly SliceTimelineItem[] => {
+): readonly WorkspaceTimelineItem[] => {
-  const messages = allMessages.filter(isSliceOneVisibleMessage);
+  const messages = allMessages.filter(isVisibleConversationMessage);
  const noticesByMessageIndex = new Map<number, WorkNotice[]>();
  for (const notice of notices) {
    const targetIndex = targetIndexForNotice(messages, notice);
@@ -55,7 +50,7 @@ export const buildSliceOneTimeline = (
    noticesByMessageIndex.set(targetIndex, atTarget);
  }
-  const timeline: SliceTimelineItem[] = [];
+  const timeline: WorkspaceTimelineItem[] = [];
  for (const [index, message] of messages.entries()) {
    timeline.push({ kind: "message", message });
    for (const notice of noticesByMessageIndex.get(index) ?? []) {
--- a/apps/web/src/lib/workspace/types.ts
+++ b/apps/web/src/lib/workspace/types.ts
@@ -0,0 +1,163 @@
 import type { Id } from "@code/backend/convex/_generated/dataModel";
 import type { WorkNotice } from "@code/primitives/work";
 import type { ConversationMessage } from "@/lib/chat/types";
 export interface WorkRecord {
  readonly _id: Id<"works">;
  readonly title: string;
  readonly objective: string;
  readonly status: string;
  readonly definitionVersion?: number;
  readonly definitionApprovalVersion?: number;
  readonly designVersion?: number;
  readonly signals: readonly {
    readonly sources: readonly { messageId: string; rawText: string }[];
  }[];
  readonly runs: readonly WorkRun[];
  readonly definition: {
    readonly risk?: string;
    readonly questions?: readonly { status: string }[];
  } | null;
  readonly design: {
    readonly architectureSummary?: string;
    readonly slices?: readonly {
      readonly id: string;
      readonly title: string;
      readonly observableBehavior: string;
    }[];
  } | null;
 }
 export interface WorkRun {
  readonly artifacts?: readonly WorkArtifact[];
  readonly attemptEvents?: readonly WorkAttemptEvent[];
  readonly baseRevision?: string;
  readonly candidateRevision?: string;
  readonly executionKind?: string;
  readonly _id: Id<"workRuns">;
  readonly status: string;
  readonly terminalClassification?: string;
  readonly terminalSummary?: string;
 }
 export interface WorkArtifact {
  readonly _id: string;
  readonly metadataJson: string;
  readonly title: string;
  readonly uri?: string;
 }
 export interface WorkAttemptEvent {
  readonly _id: string;
  readonly message: string;
 }
 export interface GitConnection {
  readonly id: string;
  readonly provider: "github" | "gitea";
  readonly serverUrl: string;
  readonly username?: string;
 }
 export interface ProjectListItem {
  readonly id: string;
  readonly name: string;
 }
 export interface WorkspaceState {
  readonly agent: {
    readonly error?: Error;
    readonly historyReady: boolean;
    readonly messages: readonly ConversationMessage[];
    readonly sendMessage: (
      message: string,
      options?: { readonly images?: readonly File[] }
    ) => Promise<void>;
    readonly status:
      | "connecting"
      | "error"
      | "idle"
      | "streaming"
      | "submitted";
  };
  readonly approveDefinition: (
    workId: Id<"works">,
    version: number
  ) => Promise<unknown>;
  readonly approveDesign: (
    workId: Id<"works">,
    definitionVersion: number,
    designVersion: number
  ) => Promise<unknown>;
  readonly authorizeGithub: () => Promise<unknown>;
  readonly cancelExecution: (runId: Id<"workRuns">) => Promise<unknown>;
  readonly cancelSimulation: (runId: Id<"workRuns">) => Promise<unknown>;
  readonly clearOperationError: () => void;
  readonly connectGitea: (input: {
    readonly serverUrl: string;
    readonly token: string;
    readonly username?: string;
  }) => Promise<void>;
  readonly connectLinkedGithub: () => Promise<void>;
  readonly connectRepository: () => Promise<void>;
  readonly error?: Error;
  readonly gitConnections: readonly GitConnection[] | undefined;
  readonly operationError?: Error;
  readonly pending: boolean;
  readonly projectGitConnection: GitConnection | null | undefined;
  readonly projects: readonly ProjectListItem[] | undefined;
  readonly repository: string;
  readonly requestDefinition: (workId: Id<"works">) => Promise<unknown>;
  readonly retrySimulation: (runId: Id<"workRuns">) => Promise<unknown>;
  readonly saveDefinition: (
    workId: Id<"works">,
    payload: unknown
  ) => Promise<unknown>;
  readonly saveDesign: (
    workId: Id<"works">,
    payload: unknown
  ) => Promise<unknown>;
  readonly selectProject: (projectId: string) => void;
  readonly selectedProject: ProjectListItem | null;
  readonly setRepository: (value: string) => void;
  readonly startExecution: (
    workId: Id<"works">,
    sliceId?: string
  ) => Promise<unknown>;
  readonly startSimulation: (
    workId: Id<"works">,
    scenario:
      | "success"
      | "transient-failure-then-success"
      | "needs-input"
      | "permanent-failure"
      | "cancelled",
    sliceId?: string
  ) => Promise<unknown>;
  readonly works: readonly WorkRecord[] | undefined;
 }
 export type WorkspaceTimelineItem =
  | { readonly kind: "message"; readonly message: ConversationMessage }
  | { readonly kind: "work"; readonly notice: WorkNotice };
 export interface ArtifactMetadata {
  readonly changedFiles?: readonly string[];
 }
 export const parseArtifactMetadata = (
  artifact: WorkArtifact
 ): ArtifactMetadata => {
  if (!artifact.metadataJson) {
    return {};
  }
  try {
    return JSON.parse(artifact.metadataJson) as ArtifactMetadata;
  } catch {
    return {};
  }
 };
 export const changedFilesFor = (artifact: WorkArtifact): readonly string[] =>
  parseArtifactMetadata(artifact).changedFiles ?? [];
--- a/apps/web/src/routes.ts
+++ b/apps/web/src/routes.ts
@@ -6,8 +6,5 @@ export default [
    route("login", "./routes/auth/login/page.tsx"),
    route("signup", "./routes/auth/signup/page.tsx"),
  ]),
-  layout("./routes/app/layout.tsx", [
+  layout("./routes/app/layout.tsx", [index("./routes/app/workspace/page.tsx")]),
    index("./routes/app/mobile/page.tsx"),
    route("dashboard", "./routes/app/dashboard/page.tsx"),
  ]),
 ] satisfies RouteConfig;
--- a/apps/web/src/routes/app/dashboard/page.tsx
+++ b/apps/web/src/routes/app/dashboard/page.tsx
@@ -1,5 +0,0 @@
 import { SliceOnePage } from "@/components/slice-one/slice-one-page";
 export default function Dashboard() {
  return <SliceOnePage />;
 }
--- a/apps/web/src/routes/app/mobile/page.tsx
+++ b/apps/web/src/routes/app/mobile/page.tsx
@@ -1,5 +0,0 @@
 import { SliceOnePage } from "@/components/slice-one/slice-one-page";
 export default function MobileLandingRedirect() {
  return <SliceOnePage />;
 }
--- a/apps/web/src/routes/app/workspace/page.tsx
+++ b/apps/web/src/routes/app/workspace/page.tsx
@@ -0,0 +1,5 @@
 import { ProjectWorkspacePage } from "@/components/workspace/project-workspace-page";
 export default function ProjectWorkspaceRoute() {
  return <ProjectWorkspacePage />;
 }
--- a/apps/web/vite.config.ts
+++ b/apps/web/vite.config.ts
@@ -7,6 +7,9 @@ import { defineConfig } from "vite-plus";
 export default defineConfig({
  envDir: path.resolve(import.meta.dirname, "../.."),
  plugins: [tailwindcss(), reactRouter()],
  ssr: {
    noExternal: true,
  },
  resolve: {
    dedupe: ["convex", "react", "react-dom"],
    tsconfigPaths: true,
--- a/bun.lock
+++ b/bun.lock
--- a/deploy/dokploy/agent.Dockerfile
+++ b/deploy/dokploy/agent.Dockerfile
@@ -0,0 +1,20 @@
 FROM oven/bun:1.3.14 AS build
 WORKDIR /app
 COPY . .
 RUN bun install --frozen-lockfile
 RUN bun run --filter @code/agents build
 FROM node:24-bookworm-slim
 ENV NODE_ENV=production
 ENV PORT=3000
 WORKDIR /app
 COPY --from=build /app /app
 EXPOSE 3000
 CMD ["node", "packages/agents/dist/server.mjs"]
--- a/deploy/dokploy/backend.compose.yml
+++ b/deploy/dokploy/backend.compose.yml
@@ -0,0 +1,31 @@
 services:
  backend:
    build:
      context: ../..
      dockerfile: packages/agents/Dockerfile
    environment:
      AGENT_BACKEND_URL: ${AGENT_BACKEND_URL}
      AGENT_MODEL_API: ${AGENT_MODEL_API}
      AGENT_MODEL_API_KEY: ${AGENT_MODEL_API_KEY}
      AGENT_MODEL_BASE_URL: ${AGENT_MODEL_BASE_URL}
      AGENT_MODEL_CONTEXT_WINDOW: ${AGENT_MODEL_CONTEXT_WINDOW}
      AGENT_MODEL_MAX_TOKENS: ${AGENT_MODEL_MAX_TOKENS}
      AGENT_MODEL_NAME: ${AGENT_MODEL_NAME}
      AGENT_MODEL_PROVIDER: ${AGENT_MODEL_PROVIDER}
      CONVEX_URL: ${CONVEX_URL}
      DAEMON_ID: zopu-agent-backend
      FLUE_DB_TOKEN: ${FLUE_DB_TOKEN}
      GITEA_TOKEN: ${GITEA_TOKEN:-}
      GITEA_URL: ${GITEA_URL:-https://git.openputer.com}
      PORT: "3000"
      RIVET_ENDPOINT: ${RIVET_ENDPOINT}
      RIVET_PUBLIC_ENDPOINT: ${RIVET_PUBLIC_ENDPOINT}
      RIVET_WORKSPACE_TOKEN: ${RIVET_WORKSPACE_TOKEN}
    networks:
      - default
      - dokploy-network
    restart: unless-stopped
 networks:
  dokploy-network:
    external: true
--- a/deploy/dokploy/frontend.compose.yml
+++ b/deploy/dokploy/frontend.compose.yml
@@ -0,0 +1,15 @@
 services:
  frontend:
    build:
      context: ../..
      dockerfile: apps/web/Dockerfile
      args:
        VITE_AUTH_URL: ${VITE_AUTH_URL}
        VITE_CONVEX_URL: ${VITE_CONVEX_URL}
    environment:
      HOST: 0.0.0.0
      NODE_ENV: production
      PORT: "3000"
      VITE_AUTH_URL: ${VITE_AUTH_URL}
      VITE_CONVEX_URL: ${VITE_CONVEX_URL}
    restart: unless-stopped
--- a/deploy/dokploy/runner.Dockerfile
+++ b/deploy/dokploy/runner.Dockerfile
@@ -0,0 +1,23 @@
 FROM oven/bun:1.3.14 AS bun
 FROM node:24-bookworm-slim
 COPY --from=bun /usr/local/bin/bun /usr/local/bin/bun
 RUN apt-get update \
  && apt-get install -y --no-install-recommends ca-certificates g++ git make python3 \
  && rm -rf /var/lib/apt/lists/*
 WORKDIR /opt/zopu-source
 COPY . .
 RUN bun install --frozen-lockfile
 ENV AGENT_WORKSPACE_ROOT=/var/lib/zopu/workspaces
 ENV BUN_EXECUTABLE=/usr/local/bin/bun
 ENV DAEMON_ID=zopu-agentos-runner
 ENV ZOPU_SOURCE_REPOSITORY=/opt/zopu-source
 VOLUME ["/var/lib/zopu/workspaces"]
 CMD ["bun", "packages/agents/src/runner.ts"]
--- a/deploy/dokploy/runner.compose.yml
+++ b/deploy/dokploy/runner.compose.yml
@@ -0,0 +1,26 @@
 services:
  runner:
    build:
      context: .
      dockerfile: deploy/dokploy/runner.Dockerfile
    environment:
      AGENT_MODEL_API: ${AGENT_MODEL_API}
      AGENT_MODEL_API_KEY: ${AGENT_MODEL_API_KEY}
      AGENT_MODEL_BASE_URL: ${AGENT_MODEL_BASE_URL}
      AGENT_MODEL_CONTEXT_WINDOW: ${AGENT_MODEL_CONTEXT_WINDOW}
      AGENT_MODEL_MAX_TOKENS: ${AGENT_MODEL_MAX_TOKENS}
      AGENT_MODEL_NAME: ${AGENT_MODEL_NAME}
      AGENT_MODEL_PROVIDER: ${AGENT_MODEL_PROVIDER}
      CONVEX_URL: ${CONVEX_URL}
      DAEMON_ID: zopu-agentos-runner
      FLUE_DB_TOKEN: ${FLUE_DB_TOKEN}
      RIVET_ENDPOINT: ${RIVET_ENDPOINT}
      RIVET_PUBLIC_ENDPOINT: ${RIVET_PUBLIC_ENDPOINT}
      RIVET_WORKSPACE_TOKEN: ${RIVET_WORKSPACE_TOKEN}
      ZOPU_SOURCE_REPOSITORY: /opt/zopu-source
    volumes:
      - runner-workspaces:/var/lib/zopu/workspaces
    restart: unless-stopped
 volumes:
  runner-workspaces:
--- a/deploy/dokploy/web.Dockerfile
+++ b/deploy/dokploy/web.Dockerfile
@@ -0,0 +1,21 @@
 FROM oven/bun:1.3.14 AS build
 WORKDIR /app
 COPY . .
 RUN bun install --frozen-lockfile
 RUN bun run --filter web build
 FROM node:24-bookworm-slim
 ENV HOST=0.0.0.0
 ENV NODE_ENV=production
 ENV PORT=3000
 WORKDIR /app
 COPY --from=build /app /app
 EXPOSE 3000
 CMD ["node", "apps/web/node_modules/.bin/react-router-serve", "apps/web/build/server/index.js"]
--- a/deploy/zopu-runtime/.env.template
+++ b/deploy/zopu-runtime/.env.template
@@ -25,14 +25,7 @@ CONVEX_INSTANCE_NAME=zopu-production
 CONVEX_INSTANCE_SECRET=
 # ---------------------------------------------------------------------------
-# 2. Self-hosted Git / Gitea — REQUIRED for issue lifecycle
+# 2. Model gateway — REQUIRED
 #    The agent daemon clones repos and creates PRs through Gitea.
 # ---------------------------------------------------------------------------
 GITEA_URL=https://git.openputer.com
 GITEA_TOKEN=replace-with-gitea-api-token
 # ---------------------------------------------------------------------------
 # 3. Model gateway — REQUIRED
 #    All model calls route through this OpenAI-compatible endpoint.
 # ---------------------------------------------------------------------------
 AGENT_MODEL_PROVIDER=cheaptricks
@@ -44,24 +37,25 @@ AGENT_MODEL_CONTEXT_WINDOW=262000
 AGENT_MODEL_MAX_TOKENS=131072
 # ---------------------------------------------------------------------------
-# 4. AgentOS / RivetKit — OPTIONAL (defaults shown)
+# 3. AgentOS / Rivet Engine — REQUIRED for the execution runner
-#    registry.start() in the daemon boots an in-process RivetKit engine
+#    The runner creates isolated worktrees from ZOPU_SOURCE_REPOSITORY and
-#    (envoy mode) backed by a native Rust sidecar. createClient() connects
+#    connects to AgentOS through the public engine endpoint.
 #    back to RIVET_ENDPOINT. No separate Rivet Engine process is required
 #    for single-node operation. Leave RIVET_ENDPOINT unset to use the
 #    library default (http://localhost:6420).
 # ---------------------------------------------------------------------------
-#RIVET_ENDPOINT=http://localhost:6420
+RIVET_ENDPOINT=https://default:@rivet.example.com
-
+RIVET_PUBLIC_ENDPOINT=https://default@rivet.example.com
 RIVET_RUNNER_VERSION=1
 RIVET_WORKSPACE_TOKEN=replace-with-a-long-random-workspace-token
 ZOPU_SOURCE_REPOSITORY=/opt/zopu-source
 # ---------------------------------------------------------------------------
-# 5. Zopu agent service (Flue)
+# 4. Zopu agent service (Flue)
 #    FLUE_DB_TOKEN authenticates the Flue persistence adapter.
 #    zopu-agent.service pins the Flue Node server to port 3583.
 # ---------------------------------------------------------------------------
 FLUE_DB_TOKEN=replace-with-long-random-token
 AGENT_BACKEND_URL=https://zopu-agent.example.com
 # ---------------------------------------------------------------------------
-# 6. Daemon identity
+# 5. Daemon identity
 # ---------------------------------------------------------------------------
 DAEMON_ID=zopu-dedicated
 DAEMON_NAME=Zopu-Dedicated-Server
--- a/deploy/zopu-runtime/runner/Dockerfile
+++ b/deploy/zopu-runtime/runner/Dockerfile
@@ -0,0 +1,23 @@
 FROM oven/bun:1.3.14 AS bun
 FROM node:24-bookworm-slim
 COPY --from=bun /usr/local/bin/bun /usr/local/bin/bun
 RUN apt-get update \
  && apt-get install -y --no-install-recommends ca-certificates g++ git make python3 \
  && rm -rf /var/lib/apt/lists/*
 WORKDIR /opt/zopu-source
 COPY . .
 RUN bun install --frozen-lockfile
 ENV AGENT_WORKSPACE_ROOT=/var/lib/zopu/workspaces
 ENV BUN_EXECUTABLE=/usr/local/bin/bun
 ENV DAEMON_ID=zopu-agentos-runner
 ENV ZOPU_SOURCE_REPOSITORY=/opt/zopu-source
 VOLUME ["/var/lib/zopu/workspaces"]
 CMD ["bun", "packages/agents/src/runner.ts"]
--- a/deploy/zopu-runtime/runner/docker-compose.yml
+++ b/deploy/zopu-runtime/runner/docker-compose.yml
@@ -0,0 +1,26 @@
 services:
  zopu-agentos-runner:
    build:
      context: ../../..
      dockerfile: deploy/zopu-runtime/runner/Dockerfile
    environment:
      AGENT_MODEL_API: ${AGENT_MODEL_API}
      AGENT_MODEL_API_KEY: ${AGENT_MODEL_API_KEY}
      AGENT_MODEL_BASE_URL: ${AGENT_MODEL_BASE_URL}
      AGENT_MODEL_CONTEXT_WINDOW: ${AGENT_MODEL_CONTEXT_WINDOW}
      AGENT_MODEL_MAX_TOKENS: ${AGENT_MODEL_MAX_TOKENS}
      AGENT_MODEL_NAME: ${AGENT_MODEL_NAME}
      AGENT_MODEL_PROVIDER: ${AGENT_MODEL_PROVIDER}
      CONVEX_URL: ${CONVEX_URL}
      DAEMON_ID: zopu-agentos-runner
      FLUE_DB_TOKEN: ${FLUE_DB_TOKEN}
      RIVET_ENDPOINT: ${RIVET_ENDPOINT}
      RIVET_PUBLIC_ENDPOINT: ${RIVET_PUBLIC_ENDPOINT}
      RIVET_WORKSPACE_TOKEN: ${RIVET_WORKSPACE_TOKEN}
      ZOPU_SOURCE_REPOSITORY: /opt/zopu-source
    volumes:
      - zopu-agentos-workspaces:/var/lib/zopu/workspaces
    restart: unless-stopped
 volumes:
  zopu-agentos-workspaces:
--- a/docs/TECH.md
+++ b/docs/TECH.md
@@ -18,29 +18,28 @@ Convex application backend
 ├── normalized product data
 ├── conversation turn queue
 └── reactive client projections
-          │ service-authenticated dispatch
+          │ durable Workflow steps + service-authenticated dispatch
          ▼
-FLUE orchestration service
+Private agent backend
-├── model calls
+├── FLUE product agents and typed tools
-├── typed tools
+├── AgentOS execution environments
-└── canonical Flue persistence in Convex
+├── Codex implementation harness
-          │ later execution commands
+└── canonical events/results returned to Convex
          │ optional attached full sandbox
          ▼
-Rivet Engine + AgentOS (post-Slice 1)
+Cube/E2B-compatible runtime (later)
 └── sandboxes, harnesses, and durable execution
 ```
-Clients MUST communicate only with Convex. FLUE and future Rivet/AgentOS
+Clients MUST communicate only with Convex. FLUE and future Rivet/AgentOS services are private workers: Convex admits durable commands, invokes the worker, and stores the product-facing result before clients observe it.
 services are private workers: Convex admits durable commands, invokes the
 worker, and stores the product-facing result before clients observe it.
 ### Ownership
 | Layer | Owns |
-|---|---|
+| --- | --- |
 | Convex | authentication, normalized product records, command admission, reactive reads |
-| FLUE | private programmable orchestration and domain-specific agents |
+| Convex Workflow | durable sequencing, retries, cancellation, scheduling, and completion callbacks |
-| Rivet actors (later) | serialized execution ownership, recovery, timers, leases |
+| Agent backend | private programmable agents and execution adapters |
 | Rivet Engine + runners | placement, routing, sleep/wake, and execution ownership for AgentOS workspaces |
 | Harness | bounded coding/tool loop |
 | Sandbox/runtime | filesystem, processes, network, isolation |
 | Git | source revision history |
@@ -63,11 +62,7 @@ signals ──< signalWorkAttachments >── works
 works ──< workEvents
 ```
-Convex mutations provide atomic transactions and optimistic serializability.
+Convex mutations provide atomic transactions and optimistic serializability. Foreign-key integrity and uniqueness are enforced in the owning mutations; composite indexes back every identity and relation lookup. Flue's adapter tables remain isolated infrastructure persistence and are not product-domain relations.
 Foreign-key integrity and uniqueness are enforced in the owning mutations;
 composite indexes back every identity and relation lookup. Flue's adapter
 tables remain isolated infrastructure persistence and are not product-domain
 relations.
 ## 2. Domain boundaries
@@ -106,93 +101,93 @@ Avoid package proliferation in v0; logical boundaries may begin as folders.
 Minimal durable model:
 ```ts
-type Id = string
+type Id = string;
 interface Message {
-  id: Id
+  id: Id;
-  projectId: Id
+  projectId: Id;
-  content: string
+  content: string;
-  createdAt: number
+  createdAt: number;
 }
 interface Signal {
-  id: Id
+  id: Id;
-  projectId: Id
+  projectId: Id;
-  sourceType: string
+  sourceType: string;
-  sourceId: string
+  sourceId: string;
-  sourcePayloadRef?: string
+  sourcePayloadRef?: string;
-  summary: string
+  summary: string;
-  fingerprint: string
+  fingerprint: string;
-  status: "candidate" | "accepted" | "dismissed"
+  status: "candidate" | "accepted" | "dismissed";
 }
 interface Work {
-  id: Id
+  id: Id;
-  projectId: Id
+  projectId: Id;
-  title: string
+  title: string;
-  objective: string
+  objective: string;
-  risk: "low" | "medium" | "high"
+  risk: "low" | "medium" | "high";
-  status: WorkStatus
+  status: WorkStatus;
-  definitionVersion?: number
+  definitionVersion?: number;
-  designVersion?: number
+  designVersion?: number;
-  createdAt: number
+  createdAt: number;
-  updatedAt: number
+  updatedAt: number;
 }
 interface Step {
-  id: Id
+  id: Id;
-  workId: Id
+  workId: Id;
-  sliceId?: Id
+  sliceId?: Id;
-  kind: "design" | "implement" | "verify" | "integrate" | "publish" | "observe"
+  kind: "design" | "implement" | "verify" | "integrate" | "publish" | "observe";
-  objective: string
+  objective: string;
-  dependsOn: readonly Id[]
+  dependsOn: readonly Id[];
-  status: StepStatus
+  status: StepStatus;
 }
 interface Run {
-  id: Id
+  id: Id;
-  workId: Id
+  workId: Id;
-  stepId: Id
+  stepId: Id;
-  kitVersion: string
+  kitVersion: string;
-  status: RunStatus
+  status: RunStatus;
 }
 interface Attempt {
-  id: Id
+  id: Id;
-  runId: Id
+  runId: Id;
-  number: number
+  number: number;
-  harness: string
+  harness: string;
-  runtime: string
+  runtime: string;
-  sourceRevision: string
+  sourceRevision: string;
-  status: AttemptStatus
+  status: AttemptStatus;
-  startedAt?: number
+  startedAt?: number;
-  endedAt?: number
+  endedAt?: number;
 }
 interface Artifact {
-  id: Id
+  id: Id;
-  workId: Id
+  workId: Id;
-  stepId?: Id
+  stepId?: Id;
-  runId?: Id
+  runId?: Id;
-  attemptId?: Id
+  attemptId?: Id;
-  type: string
+  type: string;
-  uri?: string
+  uri?: string;
-  contentHash?: string
+  contentHash?: string;
-  sourceRevision?: string
+  sourceRevision?: string;
-  environmentId?: string
+  environmentId?: string;
-  metadata: unknown
+  metadata: unknown;
 }
 interface Question {
-  id: Id
+  id: Id;
-  workId: Id
+  workId: Id;
-  stepId?: Id
+  stepId?: Id;
-  attemptId?: Id
+  attemptId?: Id;
-  prompt: string
+  prompt: string;
-  recommendation?: string
+  recommendation?: string;
-  alternatives: readonly string[]
+  alternatives: readonly string[];
-  status: "open" | "answered" | "withdrawn"
+  status: "open" | "answered" | "withdrawn";
-  answer?: string
+  answer?: string;
 }
 ```
@@ -337,35 +332,49 @@ Keep domain/application code provider-neutral.
 ```ts
 interface HarnessRuntime {
-  open(input: OpenHarnessInput): Effect.Effect<HarnessSession, HarnessError>
+  open(input: OpenHarnessInput): Effect.Effect<HarnessSession, HarnessError>;
-  prompt(id: string, content: string): Effect.Effect<void, HarnessError>
+  prompt(id: string, content: string): Effect.Effect<void, HarnessError>;
-  events(id: string): Stream.Stream<HarnessEvent, HarnessError>
+  events(id: string): Stream.Stream<HarnessEvent, HarnessError>;
-  approve(input: PermissionDecision): Effect.Effect<void, HarnessError>
+  approve(input: PermissionDecision): Effect.Effect<void, HarnessError>;
-  abort(id: string): Effect.Effect<void, HarnessError>
+  abort(id: string): Effect.Effect<void, HarnessError>;
-  close(id: string): Effect.Effect<void, HarnessError>
+  close(id: string): Effect.Effect<void, HarnessError>;
 }
 interface SandboxRuntime {
-  create(spec: SandboxSpec): Effect.Effect<SandboxLease, SandboxError>
+  create(spec: SandboxSpec): Effect.Effect<SandboxLease, SandboxError>;
-  exec(lease: SandboxLease, cmd: Command): Effect.Effect<CommandResult, SandboxError>
+  exec(
-  readFile(lease: SandboxLease, path: string): Effect.Effect<Uint8Array, SandboxError>
+    lease: SandboxLease,
-  writeFile(lease: SandboxLease, path: string, body: Uint8Array): Effect.Effect<void, SandboxError>
+    cmd: Command
-  pause(lease: SandboxLease): Effect.Effect<void, SandboxError>
+  ): Effect.Effect<CommandResult, SandboxError>;
-  resume(id: string): Effect.Effect<SandboxLease, SandboxError>
+  readFile(
-  terminate(lease: SandboxLease): Effect.Effect<void, SandboxError>
+    lease: SandboxLease,
    path: string
  ): Effect.Effect<Uint8Array, SandboxError>;
  writeFile(
    lease: SandboxLease,
    path: string,
    body: Uint8Array
  ): Effect.Effect<void, SandboxError>;
  pause(lease: SandboxLease): Effect.Effect<void, SandboxError>;
  resume(id: string): Effect.Effect<SandboxLease, SandboxError>;
  terminate(lease: SandboxLease): Effect.Effect<void, SandboxError>;
 }
 interface SourceControl {
-  prepareWorktree(input: WorktreeInput): Effect.Effect<Worktree, GitError>
+  prepareWorktree(input: WorktreeInput): Effect.Effect<Worktree, GitError>;
-  diff(worktree: Worktree): Effect.Effect<DiffArtifact, GitError>
+  diff(worktree: Worktree): Effect.Effect<DiffArtifact, GitError>;
-  commit(input: CommitInput): Effect.Effect<CommitArtifact, GitError>
+  commit(input: CommitInput): Effect.Effect<CommitArtifact, GitError>;
-  push(input: PushInput): Effect.Effect<BranchArtifact, GitError>
+  push(input: PushInput): Effect.Effect<BranchArtifact, GitError>;
-  createPullRequest(input: PullRequestInput): Effect.Effect<PullRequestArtifact, GitError>
+  createPullRequest(
    input: PullRequestInput
  ): Effect.Effect<PullRequestArtifact, GitError>;
 }
 interface VerificationRuntime {
-  execute(plan: VerificationPlan, env: EnvironmentRef):
+  execute(
-    Effect.Effect<VerificationResult, VerificationError>
+    plan: VerificationPlan,
    env: EnvironmentRef
  ): Effect.Effect<VerificationResult, VerificationError>;
 }
 ```
@@ -420,6 +429,10 @@ Zopu owns Work, branches, worktrees, budgets, approvals, artifacts, and completi
 ## 10. Runtime strategy
 ### Convex orchestration
 Slice 5 uses the Convex Workflow component as the durable product orchestration layer. Workflow steps call private agent-backend actions, while all user-visible state, events, artifacts, idempotency keys, and cancellation remain canonical in Convex.
 ### CubeSandbox
 Best for full Linux execution:
@@ -443,7 +456,7 @@ Best for:
 - actor-adjacent orchestration;
 - context/files/networking that fit runtime limits.
-Use an attached full sandbox when native/heavy tooling is needed.
+Slice 5 starts here with one Codex-backed AgentOS actor and one authenticated repository checkout per project. Convex Workflow owns product orchestration; Rivet Engine coordinates placement while a normal runner executes the actor. Use an attached full sandbox through the E2B-compatible boundary when native/heavy tooling is needed.
 ### Persistent project machine
--- a/docs/slices.md
+++ b/docs/slices.md
@@ -211,16 +211,18 @@ Zopu implements one approved slice in an isolated repository environment and str
 Initial adapter choice:
 ```text
-SandboxRuntime = CubeSandboxLive
+SandboxRuntime = AgentOsSandboxLive
-HarnessRuntime = OmpHarnessLive (or one chosen harness)
+HarnessRuntime = CodexHarnessLive
 Durable orchestration = Convex Workflow
 ```
 Flow:
 ```text
-prepare worktree
+load the project's authenticated Git connection
-→ create sandbox
+→ start durable Convex workflow
-→ clone/mount repo
+→ create AgentOS execution environment
 → clone the single configured repo
 → inject context
 → run one slice
 → normalize events
@@ -230,14 +232,15 @@ prepare worktree
 Security:
- scoped Git/model tokens;
+- GitHub OAuth or self-hosted Gitea PAT, scoped to one project;
 - scoped Git/model tokens passed only to private execution;
 - isolated HOME/worktree;
 - one mutating attempt per worktree;
 - timeout/cancel cleanup.
 ### Frontend
-Current activity, changed files, artifact links, expandable raw logs.
+Project selector/settings, Git connection status, current activity, changed files, artifact links, expandable raw logs, cancel/retry, and manual Git delivery controls.
 ### Acceptance
@@ -247,6 +250,8 @@ Current activity, changed files, artifact links, expandable raw logs.
 - provider failure becomes classified attempt outcome;
 - exact base/candidate revision recorded.
 Rivet Engine coordinates AgentOS actor placement through a normal runner, but does not own product orchestration; Convex Workflow remains canonical for the Run lifecycle. Cube/Kubernetes sandbox support remains behind `SandboxRuntime` and can be mounted through AgentOS incrementally.
 ---
 ## Slice 6 — Independent verification and repair
@@ -490,4 +495,4 @@ browser-tester integration-coordinator
 1 → 2 → 3 → 4 → 5 → 6 → 7 → 8 → 9 → 10 → 11 → 12
 ```
-Parallel engineering is allowed *within* a slice after contracts land, but product release order remains sequential.
+Parallel engineering is allowed _within_ a slice after contracts land, but product release order remains sequential.
--- a/package.json
+++ b/package.json
@@ -1,59 +1,12 @@
 {
  "name": "code",
  "private": true,
  "workspaces": {
    "packages": [
      "apps/web",
      "packages/agents",
      "packages/auth",
      "packages/backend",
      "packages/config",
      "packages/env",
      "packages/primitives",
      "packages/ui"
    ],
    "catalog": {
      "@rivet-dev/agentos": "^0.2.7",
      "@rivet-dev/agentos-core": "^0.2.10",
      "@effect/platform-bun": "4.0.0-beta.99",
      "dotenv": "^17.4.2",
      "zod": "^4.4.3",
      "lucide-react": "^1.23.0",
      "next-themes": "^0.4.6",
      "react": "19.2.8",
      "react-dom": "19.2.8",
      "sonner": "^2.0.7",
      "convex": "^1.42.1",
      "better-auth": "1.6.15",
      "@convex-dev/better-auth": "^0.12.5",
      "@tanstack/react-form": "^1.33.0",
      "@types/react-dom": "^19.2.3",
      "tailwindcss": "^4.3.2",
      "tailwind-merge": "^3.6.0",
      "@better-auth/expo": "1.6.15",
      "effect": "4.0.0-beta.99",
      "typescript": "^6",
      "@types/bun": "latest",
      "heroui-native": "^1.0.5",
      "vite": "^7.3.6",
      "vitest": "^4.1.10",
      "convex-test": "^0.0.54",
      "react-native": "0.86.0",
      "@types/react": "^19.2.17",
      "@types/node": "^22.13.14",
      "hono": "^4.8.3",
      "valibot": "^1.4.2",
      "streamdown": "2.5.0",
      "@tailwindcss/postcss": "^4.3.2",
      "@tailwindcss/vite": "^4.3.2"
    }
  },
  "type": "module",
  "scripts": {
    "dev": "vp run -r dev",
    "build": "vp run -r build",
    "check-types": "vp run -r check-types",
-    "check": "ultracite check package.json vite.config.ts apps/web/package.json apps/web/src/root.tsx apps/web/src/index.css apps/web/src/components/chat apps/web/src/components/slice-one apps/web/src/hooks/chat apps/web/src/hooks/slice-one apps/web/src/lib/chat apps/web/src/lib/slice-one apps/web/src/routes.ts apps/web/src/routes/app/dashboard/page.tsx apps/web/src/routes/app/mobile/page.tsx packages/agents/package.json packages/agents/src/agents/zopu.ts packages/agents/src/app.ts packages/agents/src/auth.ts packages/agents/src/tools/slice-one.ts packages/backend/package.json packages/backend/convex/conversationMessages.ts packages/backend/convex/conversationMessages.test.ts packages/backend/convex/fluePersistence.test.ts packages/backend/convex/projects.ts packages/backend/convex/schema.ts packages/backend/convex/signalRouting.ts packages/backend/convex/signalRouting.test.ts packages/backend/convex/works.ts packages/backend/convex/works.test.ts packages/backend/convex/workArtifacts.ts packages/backend/convex/workArtifacts.test.ts packages/backend/convex/workExecution.ts packages/backend/convex/workExecution.test.ts packages/backend/convex/workPlanning.ts packages/backend/convex/workPlanning.test.ts packages/backend/convex/crons.ts packages/primitives/src/work.ts packages/primitives/src/work.test.ts packages/primitives/src/work-artifact.ts packages/primitives/src/work-artifact.test.ts packages/primitives/src/resolver.ts packages/primitives/src/work-lifecycle.ts packages/primitives/src/work-resolution.test.ts",
+    "check": "ultracite check package.json vite.config.ts apps/web/package.json apps/web/src/root.tsx apps/web/src/index.css apps/web/src/components/chat apps/web/src/components/workspace apps/web/src/hooks/chat apps/web/src/hooks/workspace apps/web/src/lib/chat apps/web/src/lib/workspace apps/web/src/routes.ts apps/web/src/routes/app/dashboard/page.tsx apps/web/src/routes/app/workspace/page.tsx packages/agents/package.json packages/agents/src/agents/zopu.ts packages/agents/src/app.ts packages/agents/src/auth.ts packages/agents/src/tools/slice-one.ts packages/backend/package.json packages/backend/convex/conversationMessages.ts packages/backend/convex/conversationMessages.test.ts packages/backend/convex/fluePersistence.test.ts packages/backend/convex/projects.ts",
    "lint": "oxlint --disable-nested-config",
    "format": "vp fmt",
    "staged": "vp staged",
@@ -65,14 +18,10 @@
    "dev:server": "vp run --filter @code/backend dev",
    "dev:setup": "vp run --filter @code/backend dev:setup",
    "build:agents": "vp run --filter @code/agents build",
-    "docs:update": "bun run scripts/update-docs.ts",
+    "docs:update": "node scripts/update-docs.ts",
-    "subtree": "bun run scripts/subtree.ts",
+    "subtree": "node scripts/subtree.ts",
-    "fix": "ultracite fix",
+    "fix": "ultracite fix"
    "slice1": "vp run -r dev",
    "dev:zopu": "vp run --filter @code/agents dev",
    "dev:zopu:web": "vp run --filter web dev"
  },
  "dependencies": {},
  "devDependencies": {
    "@code/backend": "workspace:*",
    "@code/config": "workspace:*",
@@ -84,16 +33,13 @@
    "convex": "catalog:",
    "convex-test": "catalog:",
    "effect": "catalog:",
-    "oxfmt": "latest",
+    "oxfmt": "0.61.0",
-    "oxlint": "latest",
+    "oxlint": "1.76.0",
    "rolldown": "1.1.4",
    "typescript": "catalog:",
    "ultracite": "7.9.3",
    "vite-plus": "0.2.2",
    "vitest": "catalog:"
  },
-  "overrides": {
+  "packageManager": "pnpm@11.17.0"
    "vite": "npm:@voidzero-dev/vite-plus-core@0.2.2"
  },
  "packageManager": "bun@1.3.14"
 }
--- a/packages/agents/Dockerfile
+++ b/packages/agents/Dockerfile
@@ -0,0 +1,32 @@
 FROM oven/bun:1.3.14 AS bun
 FROM node:24-bookworm-slim AS build
 COPY --from=bun /usr/local/bin/bun /usr/local/bin/bun
 WORKDIR /app
 RUN apt-get update && apt-get install -y --no-install-recommends \
  ca-certificates \
  g++ \
  make \
  python3 \
  && rm -rf /var/lib/apt/lists/*
 COPY . .
 RUN bun install --frozen-lockfile
 RUN node packages/agents/node_modules/@flue/cli/bin/flue.mjs build --target node --root packages/agents
 FROM node:24-bookworm-slim
 ENV NODE_OPTIONS=--experimental-specifier-resolution=node
 ENV NODE_ENV=production
 ENV PORT=3000
 WORKDIR /app
 COPY --from=build /app /app
 EXPOSE 3000
 CMD ["node", "packages/agents/dist/server.mjs"]
--- a/packages/agents/flue.config.ts
+++ b/packages/agents/flue.config.ts
@@ -1,5 +1,5 @@
-import { defineConfig } from '@flue/cli/config';
+import { defineConfig } from "@flue/cli/config";
 export default defineConfig({
-  target: 'node',
+  target: "node",
 });
--- a/packages/agents/package.json
+++ b/packages/agents/package.json
@@ -4,26 +4,37 @@
  "private": true,
  "type": "module",
  "scripts": {
-    "build": "bun --env-file=../../.env flue build",
+    "build": "node --env-file=../../.env node_modules/@flue/cli/bin/flue.mjs build",
    "start": "node --env-file=../../.env dist/server.mjs",
    "check-types": "tsc --noEmit",
-    "dev": "bun --env-file=../../.env flue dev",
+    "dev": "node --env-file=../../.env node_modules/@flue/cli/bin/flue.mjs dev",
-    "dev:tailscale": "bun --env-file=../../.env flue dev",
+    "dev:tailscale": "node --env-file=../../.env node_modules/@flue/cli/bin/flue.mjs dev",
-    "run": "bun --env-file=../../.env flue run",
+    "run": "node --env-file=../../.env node_modules/@flue/cli/bin/flue.mjs run",
-    "run:zopu": "bun --env-file=../../.env flue run zopu",
+    "runner": "node --env-file=../../.env src/runner.ts",
-    "run:work-planner": "bun --env-file=../../.env flue run work-planner"
+    "run:zopu": "node --env-file=../../.env node_modules/@flue/cli/bin/flue.mjs run zopu",
    "run:work-planner": "node --env-file=../../.env node_modules/@flue/cli/bin/flue.mjs run work-planner"
  },
  "dependencies": {
    "@agentos-software/git": "0.3.3",
    "@code/backend": "workspace:*",
    "@code/env": "workspace:*",
    "@code/primitives": "workspace:*",
    "@flue/runtime": "latest",
    "@rivet-dev/agentos": "0.2.14",
    "@rivet-dev/agentos-core": "0.2.14",
    "convex": "catalog:",
    "hono": "catalog:",
    "rivetkit": "2.3.9",
    "valibot": "catalog:"
  },
  "devDependencies": {
    "@code/config": "workspace:*",
    "@flue/cli": "latest",
    "@types/bun": "catalog:",
    "@types/node": "catalog:",
    "typescript": "catalog:"
  },
  "engines": {
    "node": ">=22.18 <23 || >=23.6"
  }
 }
--- a/packages/agents/src/admission-context.ts
+++ b/packages/agents/src/admission-context.ts
@@ -0,0 +1,16 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 export interface TurnAdmissionContext {
  readonly clientRequestId: string;
  readonly turnId: string;
 }
 const turnAdmissionContext = new AsyncLocalStorage<TurnAdmissionContext>();
 export const currentTurnAdmission = (): TurnAdmissionContext | undefined =>
  turnAdmissionContext.getStore();
 export const withTurnAdmission = <T>(
  context: TurnAdmissionContext,
  run: () => T
 ): T => turnAdmissionContext.run(context, run);
--- a/packages/agents/src/agents/zopu.ts
+++ b/packages/agents/src/agents/zopu.ts
@@ -1,54 +1,9 @@
 import { parseAgentEnv } from "@code/env/agent";
 import { defineAgent } from "@flue/runtime";
 import INSTRUCTIONS from "../prompts/zopu-instructions.md" with { type: "markdown" };
 import { createSliceOneTools } from "../tools/slice-one";
 const INSTRUCTIONS = `You are Zopu for product Slice 1 and the Work planning handoff.
 ## Your role
 The application stores each user message as exact evidence before you process it. You may interpret that evidence, but never supply, rewrite, or invent source text.
 ## Work routing loop
 When a user sends a message, follow this decision flow:
 1. **Assess actionability.** Does the message contain a concrete problem, request, blocker, opportunity, or decision that warrants a work unit? Greetings, questions about the system, casual conversation, and exploration do NOT create work. If the message is casual conversation, respond naturally and do nothing else.
   Direct questions, casual conversation, and image-reading requests must be answered immediately without calling any tools.
 2. **Identify project context.** Call list_projects. If there is one project, use it. If there are several and the request is ambiguous, ask one focused question.
 3. **Create a Signal (only when actionable).** When the message is actionable:
   a. Call list_signal_evidence to see the exact admitted user messages.
   b. Select the message IDs that compose the problem statement.
   c. Call create_signal with a structured problem statement (title, summary, desiredOutcome, constraints). The problem statement must faithfully represent the user's own intent. Do not invent scope they did not mention.
   d. Include the projectId when the project is known.
 4. **Route the Signal.** After creating the Signal:
   a. Call list_proposed_work for the project.
   b. If the Signal clearly describes the same desired outcome as existing Work, call attach_signal_to_work.
   c. Otherwise call create_work_from_signal.
   e. If genuinely uncertain whether to attach or create, ask one focused question.
 5. **Explain the outcome.** Tell the user clearly what happened:
   - "Captured [Signal title] and linked it to [Work title]."
   - "Captured [Signal title] and proposed [Work title]."
   - Keep the response brief; the product renders the durable Work card separately.
 ## Rules
 - Never supply or rewrite the raw source message text. The control plane copies it server-side.
 - You receive and can see images attached to the current user message. This model supports image input. Never claim images are unavailable, omitted, or unsupported. If a message has attached images, inspect them before responding.
 - Never create Work from casual chat.
 - Ask at most one focused clarification when genuinely ambiguous.
 - Preserve project and organization scope at all times.
 - Repeated delivery of the same message must not create duplicate Signals or attachments. The backend is idempotent.
 - Never claim you created a Signal until the tool call returns successfully.
 - Do not start implementation, planning, sandboxes, Git, verification, or delivery. Those are explicitly outside Slice 1.
   - After creating proposed Work, the system may invoke the private work-planner. Never claim that a Definition, Design, approval, or implementation exists unless Convex reports it.
   - Proposed Work is the only Work status you directly create.`;
 export {
  convexAgentRoute as attachments,
  convexAgentRoute as route,
--- a/packages/agents/src/app.ts
+++ b/packages/agents/src/app.ts
@@ -1,7 +1,15 @@
 import { parseAgentEnv } from "@code/env/agent";
 import { WorkAttemptExecutionError } from "@code/primitives/execution-runtime";
 import { registerProvider } from "@flue/runtime";
 import type { Fetchable } from "@flue/runtime/routing";
 import { flue } from "@flue/runtime/routing";
 import { Hono } from "hono";
 import {
  cancelAgentOsAttempt,
  executeAgentOsAttempt,
  runtimeRegistry,
 } from "./runtime/agent-os";
 const agentEnv = parseAgentEnv(process.env);
@@ -24,5 +32,55 @@ registerProvider(agentEnv.AGENT_MODEL_PROVIDER, {
  },
 });
-// flue() returns a complete Hono app; the Fetchable contract accepts it.
+const app = new Hono();
-export default flue() satisfies Fetchable;
+
 app.post("/internal/work-attempts/execute", async (context) => {
  if (
    context.req.header("authorization") !== `Bearer ${agentEnv.FLUE_DB_TOKEN}`
  ) {
    return context.json({ error: "Unauthorized" }, 401);
  }
  try {
    return context.json(await executeAgentOsAttempt(await context.req.json()));
  } catch (error) {
    const failure =
      error instanceof WorkAttemptExecutionError
        ? error
        : new WorkAttemptExecutionError({
            message:
              error instanceof Error ? error.message : "Execution failed",
            reason: "HarnessFailed",
            retryable: false,
          });
    return context.json(
      {
        error: {
          message: failure.message,
          reason: failure.reason,
          retryable: failure.retryable,
        },
      },
      500
    );
  }
 });
 app.post("/internal/work-attempts/:workspaceKey/cancel", async (context) => {
  if (
    context.req.header("authorization") !== `Bearer ${agentEnv.FLUE_DB_TOKEN}`
  ) {
    return context.json({ error: "Unauthorized" }, 401);
  }
  const body = (await context.req.json()) as { attemptId?: unknown };
  if (typeof body.attemptId !== "string" || body.attemptId.length === 0) {
    return context.json({ error: "attemptId is required" }, 400);
  }
  await cancelAgentOsAttempt(context.req.param("workspaceKey"), body.attemptId);
  return context.json({ cancelled: true });
 });
 app.all("/api/rivet/*", (context) => runtimeRegistry.handler(context.req.raw));
 app.route("/", flue());
 export default app satisfies Fetchable;
--- a/packages/agents/src/auth.ts
+++ b/packages/agents/src/auth.ts
@@ -1,6 +1,8 @@
 import { parseAgentEnv } from "@code/env/agent";
 import type { AgentRouteHandler } from "@flue/runtime";
 import { withTurnAdmission } from "./admission-context";
 /** Only Convex may invoke or observe the organization-scoped Flue agent. */
 export const convexAgentRoute: AgentRouteHandler = async (context, next) => {
  const env = parseAgentEnv(process.env);
@@ -14,5 +16,15 @@ export const convexAgentRoute: AgentRouteHandler = async (context, next) => {
    return context.json({ error: "Forbidden" }, 403);
  }
-  return await next().then(() => context.res);
+  if (context.req.method !== "POST") {
    return await next();
  }
  const clientRequestId = context.req.header("x-zopu-request-id");
  const turnId = context.req.header("x-zopu-turn-id");
  if (!clientRequestId || !turnId) {
    return context.json({ error: "Missing turn correlation headers" }, 400);
  }
  return await withTurnAdmission({ clientRequestId, turnId }, () => next());
 };
--- a/packages/agents/src/db.ts
+++ b/packages/agents/src/db.ts
@@ -26,11 +26,74 @@
 */
 import { env } from "@code/env/server";
-import { AttachmentConflictError, DEFAULT_LIST_LIMIT, DEFAULT_READ_LIMIT, MAX_LIST_LIMIT, MAX_READ_LIMIT, StreamListenerRegistry, assertSupportedFlueSchemaVersion, clampLimit, copyAttachmentBytes, createSessionStorageKey, decodeRunCursor, encodeRunCursor, formatOffset, hydratePersistedDirectSubmission, parseOffset, prepareDirectSubmission, verifyAttachmentBytes } from '@flue/runtime/adapter';
+import {
-import type { AgentAttemptMarker, AgentDispatchAdmission, AgentDispatchReceipt, AgentExecutionStore, AgentSubmission, AgentSubmissionStore, AttachmentRef, AttachmentStore, ConversationProducerClaim, ConversationRecord, ConversationStreamBatch, ConversationStreamIdentity, ConversationStreamMeta, ConversationStreamReadResult, ConversationStreamStore, CreateRunInput, DirectAgentSubmissionInput, DispatchAgentSubmissionInput, DispatchInput, EndRunInput, EventStreamMeta, EventStreamReadResult, EventStreamStore, GetAttachmentInput, PersistedChunkRow, PersistenceAdapter, PersistenceStores, PutAttachmentInput, RunPointer, RunRecord, RunStore, RunStatus, StoredAttachment, SubmissionAttemptRef, SubmissionClaimRef, SubmissionDurability, SubmissionSettlementObligation, SubmissionSettledRecord } from '@flue/runtime/adapter';
+  AttachmentConflictError,
  DEFAULT_LIST_LIMIT,
  DEFAULT_READ_LIMIT,
  MAX_LIST_LIMIT,
  MAX_READ_LIMIT,
  StreamListenerRegistry,
  assertSupportedFlueSchemaVersion,
  clampLimit,
  copyAttachmentBytes,
  createSessionStorageKey,
  decodeRunCursor,
  encodeRunCursor,
  formatOffset,
  hydratePersistedDirectSubmission,
  parseOffset,
  prepareDirectSubmission,
  verifyAttachmentBytes,
 } from "@flue/runtime/adapter";
 import type {
  AgentAttemptMarker,
  AgentDispatchAdmission,
  AgentDispatchReceipt,
  AgentExecutionStore,
  AgentSubmission,
  AgentSubmissionStore,
  AttachmentRef,
  AttachmentStore,
  ConversationProducerClaim,
  ConversationRecord,
  ConversationStreamBatch,
  ConversationStreamIdentity,
  ConversationStreamMeta,
  ConversationStreamReadResult,
  ConversationStreamStore,
  CreateRunInput,
  DirectAgentSubmissionInput,
  DispatchAgentSubmissionInput,
  DispatchInput,
  EndRunInput,
  EventStreamMeta,
  EventStreamReadResult,
  EventStreamStore,
  GetAttachmentInput,
  PersistedChunkRow,
  PersistenceAdapter,
  PersistenceStores,
  PutAttachmentInput,
  RunPointer,
  RunRecord,
  RunStore,
  RunStatus,
  StoredAttachment,
  SubmissionAttemptRef,
  SubmissionClaimRef,
  SubmissionDurability,
  SubmissionSettlementObligation,
  SubmissionSettledRecord,
 } from "@flue/runtime/adapter";
 import { ConvexHttpClient } from "convex/browser";
-import { makeFunctionReference } from 'convex/server';
+import { makeFunctionReference } from "convex/server";
-import type { FunctionArgs, FunctionReference, FunctionReturnType } from 'convex/server';
+import type {
  FunctionArgs,
  FunctionReference,
  FunctionReturnType,
 } from "convex/server";
 import { currentTurnAdmission } from "./admission-context";
 // ---------------------------------------------------------------------------
 // Token + arg types
@@ -42,7 +105,10 @@ import type { FunctionArgs, FunctionReference, FunctionReturnType } from 'convex
 // ---------------------------------------------------------------------------
 /** Auth token present on every Convex function call. */
-interface TokenArgs { readonly token: string; readonly [key: string]: unknown }
+interface TokenArgs {
  readonly token: string;
  readonly [key: string]: unknown;
 }
 const TOKEN = (): string => env.FLUE_DB_TOKEN;
@@ -152,7 +218,7 @@ interface AttachmentRefWire {
 // ---------------------------------------------------------------------------
 const checkSchemaVersion = makeFunctionReference<"query", TokenArgs, string>(
-  "fluePersistence:checkSchemaVersion",
+  "fluePersistence:checkSchemaVersion"
 );
 const getSubmission = makeFunctionReference<
@@ -221,7 +287,11 @@ interface AdmitSubmissionResponse {
 }
 const admitSubmission = makeFunctionReference<
  "mutation",
-  TokenArgs & { readonly input: AdmitSubmissionEnvelope },
+  TokenArgs & {
    readonly clientRequestId?: string;
    readonly input: AdmitSubmissionEnvelope;
    readonly turnId?: string;
  },
  AdmitSubmissionResponse
 >("fluePersistence:admitSubmission");
@@ -290,11 +360,9 @@ type SettleArgs = TokenArgs &
    readonly outcome: "completed" | "failed";
    readonly errorJson?: string;
  };
-const settleSubmission = makeFunctionReference<
+const settleSubmission = makeFunctionReference<"mutation", SettleArgs, boolean>(
-  "mutation",
+  "fluePersistence:settleSubmission"
-  SettleArgs,
+);
  boolean
 >("fluePersistence:settleSubmission");
 const insertAttemptMarker = makeFunctionReference<
  "mutation",
@@ -349,10 +417,16 @@ type AppendBatchArgs = TokenArgs & {
  readonly producerEpoch: number;
  readonly incarnation: string;
  readonly producerSequence: number;
-  readonly submission?: { readonly submissionId: string; readonly attemptId: string };
+  readonly submission?: {
    readonly submissionId: string;
    readonly attemptId: string;
  };
  readonly recordsJson: string;
 };
-interface AppendResult { readonly offset: number; readonly appended: boolean }
+interface AppendResult {
  readonly offset: number;
  readonly appended: boolean;
 }
 const appendConversationBatch = makeFunctionReference<
  "mutation",
  AppendBatchArgs,
@@ -438,7 +512,10 @@ const closeEventStream = makeFunctionReference<
  void
 >("fluePersistence:closeEventStream");
-interface EventStreamMetaRow { readonly nextOffset: number; readonly closed: boolean }
+interface EventStreamMetaRow {
  readonly nextOffset: number;
  readonly closed: boolean;
 }
 const getEventStreamMeta = makeFunctionReference<
  "query",
  TokenArgs & { readonly path: string },
@@ -454,7 +531,7 @@ type CreateRunArgs = TokenArgs & {
  readonly traceCarrierJson?: string;
 };
 const createRun = makeFunctionReference<"mutation", CreateRunArgs, void>(
-  "fluePersistence:createRun",
+  "fluePersistence:createRun"
 );
 type EndRunArgs = TokenArgs & {
@@ -466,7 +543,7 @@ type EndRunArgs = TokenArgs & {
  readonly errorJson?: string;
 };
 const endRun = makeFunctionReference<"mutation", EndRunArgs, void>(
-  "fluePersistence:endRun",
+  "fluePersistence:endRun"
 );
 const getRun = makeFunctionReference<
@@ -492,7 +569,7 @@ interface ListRunsResult {
  readonly hasMore: boolean;
 }
 const listRuns = makeFunctionReference<"query", ListRunsArgs, ListRunsResult>(
-  "fluePersistence:listRuns",
+  "fluePersistence:listRuns"
 );
 // Attachments
@@ -534,7 +611,9 @@ const deleteAttachmentsForInstance = makeFunctionReference<
 // ---------------------------------------------------------------------------
 const safeJsonParse = <T>(text: string | null | undefined): T | undefined => {
-  if (text === null || text === undefined || text === "") {return undefined;}
+  if (text === null || text === undefined || text === "") {
    return undefined;
  }
  return JSON.parse(text) as T;
 };
@@ -544,7 +623,7 @@ const parseAcceptedAt = (value: string, label: string): number => {
  const ms = Date.parse(value);
  if (!Number.isFinite(ms)) {
    throw new TypeError(
-      `[flue] ${label} produced non-finite acceptedAt: ${value}`,
+      `[flue] ${label} produced non-finite acceptedAt: ${value}`
    );
  }
  return ms;
@@ -610,7 +689,7 @@ const hydrateSubmission = (row: SubmissionRow): AgentSubmission => {
    const input = safeJsonParse<DispatchAgentSubmissionInput>(row.inputJson);
    if (input === undefined) {
      throw new Error(
-        `[flue] persisted dispatch submission ${row.submissionId} has empty inputJson`,
+        `[flue] persisted dispatch submission ${row.submissionId} has empty inputJson`
      );
    }
    const inputWithCarrier =
@@ -621,7 +700,7 @@ const hydrateSubmission = (row: SubmissionRow): AgentSubmission => {
  const stripped = safeJsonParse<DirectAgentSubmissionInput>(row.inputJson);
  if (stripped === undefined) {
    throw new Error(
-      `[flue] persisted direct submission ${row.submissionId} has empty inputJson`,
+      `[flue] persisted direct submission ${row.submissionId} has empty inputJson`
    );
  }
  const chunks = safeJsonParse<PersistedChunkRow[]>(row.chunksJson) ?? [];
@@ -632,12 +711,12 @@ const hydrateSubmission = (row: SubmissionRow): AgentSubmission => {
 };
 const hydrateObligation = (
-  row: SettlementObligationRow,
+  row: SettlementObligationRow
 ): SubmissionSettlementObligation => {
  const record = safeJsonParse<SubmissionSettledRecord>(row.recordJson);
  if (record === undefined) {
    throw new Error(
-      `[flue] persisted settlement obligation ${row.submissionId} has empty recordJson`,
+      `[flue] persisted settlement obligation ${row.submissionId} has empty recordJson`
    );
  }
  return {
@@ -692,14 +771,14 @@ class ConvexClient {
  query<F extends FunctionReference<"query">>(
    ref: F,
-    args: FunctionArgs<F>,
+    args: FunctionArgs<F>
  ): Promise<FunctionReturnType<F>> {
    return this.client.query(ref, args);
  }
  mutation<F extends FunctionReference<"mutation">>(
    ref: F,
-    args: FunctionArgs<F>,
+    args: FunctionArgs<F>
  ): Promise<FunctionReturnType<F>> {
    return this.client.mutation(ref, args);
  }
@@ -757,7 +836,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  async replaceSubmissionAttempt(
    attempt: SubmissionAttemptRef,
    nextAttemptId: string,
-    lease?: { ownerId: string; leaseExpiresAt: number },
+    lease?: { ownerId: string; leaseExpiresAt: number }
  ): Promise<AgentSubmission | null> {
    const row = await this.convex.mutation(replaceSubmissionAttempt, {
      attemptId: attempt.attemptId,
@@ -808,10 +887,11 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  }
  async admitDirect(
-    input: DirectAgentSubmissionInput,
+    input: DirectAgentSubmissionInput
  ): Promise<AgentSubmission> {
    const sessionKey = createSessionStorageKey(input.id, "default", "default");
    const extracted = prepareDirectSubmission(input);
    const admission = currentTurnAdmission();
    const res = await this.convex.mutation(admitSubmission, {
      input: {
        acceptedAt: parseAcceptedAt(input.acceptedAt, "admitDirect"),
@@ -825,6 +905,12 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
          : { traceCarrierJson: jsonStringify(input.traceCarrier) }),
      },
      token: TOKEN(),
      ...(admission === undefined
        ? {}
        : {
            clientRequestId: admission.clientRequestId,
            turnId: admission.turnId,
          }),
    });
    if (res.kind === "submission" && res.submission !== undefined) {
      return hydrateSubmission(res.submission);
@@ -833,12 +919,12 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
    // submission; if the backend signals a non-submission result we cannot
    // satisfy the `AgentSubmission` return type.
    throw new Error(
-      `[flue] admitDirect for ${input.submissionId} did not return a submission`,
+      `[flue] admitDirect for ${input.submissionId} did not return a submission`
    );
  }
  async markSubmissionCanonicalReady(
-    submissionId: string,
+    submissionId: string
  ): Promise<AgentSubmission | null> {
    const row = await this.convex.mutation(markSubmissionCanonicalReady, {
      submissionId,
@@ -848,7 +934,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  }
  async claimSubmission(
-    claim: SubmissionClaimRef,
+    claim: SubmissionClaimRef
  ): Promise<AgentSubmission | null> {
    const row = await this.convex.mutation(claimSubmission, {
      attemptId: claim.attemptId,
@@ -862,7 +948,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  markSubmissionInputApplied(
    attempt: SubmissionAttemptRef,
-    durability?: SubmissionDurability,
+    durability?: SubmissionDurability
  ): Promise<boolean> {
    return this.convex.mutation(markSubmissionInputApplied, {
      attemptId: attempt.attemptId,
@@ -872,9 +958,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
    });
  }
-  requestSubmissionRecovery(
+  requestSubmissionRecovery(attempt: SubmissionAttemptRef): Promise<boolean> {
    attempt: SubmissionAttemptRef,
  ): Promise<boolean> {
    return this.convex.mutation(requestSubmissionRecovery, {
      attemptId: attempt.attemptId,
      submissionId: attempt.submissionId,
@@ -890,7 +974,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  }
  requeueSubmissionBeforeInputApplied(
-    attempt: SubmissionAttemptRef,
+    attempt: SubmissionAttemptRef
  ): Promise<boolean> {
    return this.convex.mutation(requeueSubmissionBeforeInputApplied, {
      attemptId: attempt.attemptId,
@@ -901,7 +985,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  async reserveSubmissionSettlement(
    attempt: SubmissionAttemptRef,
-    settlement: { recordId: string; record: SubmissionSettledRecord },
+    settlement: { recordId: string; record: SubmissionSettledRecord }
  ): Promise<SubmissionSettlementObligation | null> {
    const row = await this.convex.mutation(reserveSubmissionSettlement, {
      attemptId: attempt.attemptId,
@@ -915,7 +999,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  finalizeSubmissionSettlement(
    attempt: SubmissionAttemptRef,
-    recordId: string,
+    recordId: string
  ): Promise<boolean> {
    return this.convex.mutation(finalizeSubmissionSettlement, {
      attemptId: attempt.attemptId,
@@ -936,7 +1020,7 @@ class ConvexAgentSubmissionStore implements AgentSubmissionStore {
  failSubmission(
    attempt: SubmissionAttemptRef,
-    error: unknown,
+    error: unknown
  ): Promise<boolean> {
    return this.convex.mutation(settleSubmission, {
      attemptId: attempt.attemptId,
@@ -1001,7 +1085,7 @@ class ConvexConversationStreamStore implements ConversationStreamStore {
  async createStream(
    path: string,
-    identity: ConversationStreamIdentity,
+    identity: ConversationStreamIdentity
  ): Promise<void> {
    await this.convex.mutation(createConversationStream, {
      identity,
@@ -1012,7 +1096,7 @@ class ConvexConversationStreamStore implements ConversationStreamStore {
  acquireProducer(
    path: string,
-    producerId: string,
+    producerId: string
  ): Promise<ConversationProducerClaim> {
    return this.convex.mutation(acquireConversationProducer, {
      path,
@@ -1038,7 +1122,9 @@ class ConvexConversationStreamStore implements ConversationStreamStore {
      producerSequence: input.producerSequence,
      recordsJson: jsonStringify(input.records),
      token: TOKEN(),
-      ...(input.submission === undefined ? {} : { submission: input.submission }),
+      ...(input.submission === undefined
        ? {}
        : { submission: input.submission }),
    });
    if (result.appended) {
      this.listeners.notify(input.path);
@@ -1048,12 +1134,12 @@ class ConvexConversationStreamStore implements ConversationStreamStore {
  async read(
    path: string,
-    options?: { offset?: string; limit?: number },
+    options?: { offset?: string; limit?: number }
  ): Promise<ConversationStreamReadResult> {
    const limit = clampLimit(
      options?.limit,
      DEFAULT_READ_LIMIT,
-      MAX_READ_LIMIT,
+      MAX_READ_LIMIT
    );
    const result = await this.convex.query(readConversationBatches, {
      afterOffset: afterOffset(options?.offset),
@@ -1077,7 +1163,9 @@ class ConvexConversationStreamStore implements ConversationStreamStore {
      path,
      token: TOKEN(),
    });
-    if (row === null) {return null;}
+    if (row === null) {
      return null;
    }
    return {
      identity: row.identity,
      incarnation: row.incarnation,
@@ -1131,7 +1219,7 @@ class ConvexEventStreamStore implements EventStreamStore {
  async appendEventOnce(
    path: string,
    key: string,
-    event: unknown,
+    event: unknown
  ): Promise<string> {
    const result = await this.convex.mutation(appendEventOnce, {
      dataJson: jsonStringify(event),
@@ -1147,7 +1235,7 @@ class ConvexEventStreamStore implements EventStreamStore {
  async readEvents(
    path: string,
-    opts?: { offset?: string; limit?: number },
+    opts?: { offset?: string; limit?: number }
  ): Promise<EventStreamReadResult> {
    const limit = clampLimit(opts?.limit, DEFAULT_READ_LIMIT, MAX_READ_LIMIT);
    const result = await this.convex.query(readEventsFn, {
@@ -1179,7 +1267,9 @@ class ConvexEventStreamStore implements EventStreamStore {
      path,
      token: TOKEN(),
    });
-    if (row === null) {return null;}
+    if (row === null) {
      return null;
    }
    return {
      closed: row.closed,
      nextOffset: formatOffset(row.nextOffset),
@@ -1233,7 +1323,7 @@ class ConvexRunStore implements RunStore {
  }
  lookupRun(
-    runId: string,
+    runId: string
  ): Promise<{ runId: string; workflowName: string } | null> {
    return this.convex.query(lookupRun, { runId, token: TOKEN() });
  }
@@ -1281,7 +1371,7 @@ class ConvexAttachmentStore implements AttachmentStore {
      attachment: attachmentRefToWire(input.attachment),
      bytes: bytes.buffer.slice(
        bytes.byteOffset,
-        bytes.byteOffset + bytes.byteLength,
+        bytes.byteOffset + bytes.byteLength
      ) as ArrayBuffer,
      conversationId: input.conversationId,
      streamPath: input.streamPath,
@@ -1302,7 +1392,9 @@ class ConvexAttachmentStore implements AttachmentStore {
      streamPath: input.streamPath,
      token: TOKEN(),
    });
-    if (row === null) {return null;}
+    if (row === null) {
      return null;
    }
    const attachment = wireRefToAttachmentRef(row.attachment);
    const bytes = new Uint8Array(row.bytes);
    // Verify integrity before handing bytes back to the runtime; throws
@@ -1345,7 +1437,7 @@ class ConvexPersistenceAdapterImpl implements PersistenceAdapter {
  connect(): PersistenceStores {
    if (!this.migrated) {
      throw new Error(
-        "[flue] ConvexPersistenceAdapter.connect() called before migrate() completed",
+        "[flue] ConvexPersistenceAdapter.connect() called before migrate() completed"
      );
    }
    const submissions = new ConvexAgentSubmissionStore(this.convex);
--- a/packages/agents/src/prompts/zopu-instructions.md
+++ b/packages/agents/src/prompts/zopu-instructions.md
@@ -0,0 +1,45 @@
 You are Zopu for product Slice 1 and the Work planning handoff.
 ## Your role
 The application stores each user message as exact evidence before you process it. You may interpret that evidence, but never supply, rewrite, or invent source text.
 ## Work routing loop
 When a user sends a message, follow this decision flow:
 1. **Assess actionability.** Does the message contain a concrete problem, request, blocker, opportunity, or decision that warrants a work unit? Greetings, questions about the system, casual conversation, and exploration do NOT create work. If the message is casual conversation, respond naturally and do nothing else.
   Direct questions, casual conversation, and image-reading requests must be answered immediately without calling any tools.
 2. **Identify project context.** Call list_projects. If there is one project, use it. If there are several and the request is ambiguous, ask one focused question.
 3. **Create a Signal (only when actionable).** When the message is actionable:
   a. Call list_signal_evidence to see the exact admitted user messages.
   b. Select the message IDs that compose the problem statement.
   c. Call create_signal with a structured problem statement (title, summary, desiredOutcome, constraints). The problem statement must faithfully represent the user's own intent. Do not invent scope they did not mention.
   d. Include the projectId when the project is known.
 4. **Route the Signal.** After creating the Signal:
   a. Call list_proposed_work for the project.
   b. If the Signal clearly describes the same desired outcome as existing Work, call attach_signal_to_work.
   c. Otherwise call create_work_from_signal.
   e. If genuinely uncertain whether to attach or create, ask one focused question.
 5. **Explain the outcome.** Tell the user clearly what happened:
   - "Captured [Signal title] and linked it to [Work title]."
   - "Captured [Signal title] and proposed [Work title]."
   - Keep the response brief; the product renders the durable Work card separately.
 ## Rules
 - Never supply or rewrite the raw source message text. The control plane copies it server-side.
 - You receive and can see images attached to the current user message. This model supports image input. Never claim images are unavailable, omitted, or unsupported. If a message has attached images, inspect them before responding.
 - Never create Work from casual chat.
 - Ask at most one focused clarification when genuinely ambiguous.
 - Preserve project and organization scope at all times.
 - Repeated delivery of the same message must not create duplicate Signals or attachments. The backend is idempotent.
 - Never claim you created a Signal until the tool call returns successfully.
 - Do not start implementation, planning, sandboxes, Git, verification, or delivery. Those are explicitly outside Slice 1.
   - After creating proposed Work, the system may invoke the private work-planner. Never claim that a Definition, Design, approval, or implementation exists unless Convex reports it.
   - Proposed Work is the only Work status you directly create.
--- a/packages/agents/src/runner.ts
+++ b/packages/agents/src/runner.ts
@@ -0,0 +1,3 @@
 import { runtimeRegistry } from "./runtime/agent-os";
 await runtimeRegistry.startAndWait();
--- a/packages/agents/src/runtime/agent-os.ts
+++ b/packages/agents/src/runtime/agent-os.ts
@@ -0,0 +1,255 @@
 import { parseAgentEnv } from "@code/env/agent";
 import {
  makePiAgentOsConfig,
  makePiHomeFiles,
  decodeWorkAttemptExecutionInput,
  WorkAttemptExecutionError,
  piSessionEnv,
 } from "@code/primitives";
 import type {
  ExecutionEvent,
  WorkAttemptExecutionResult,
 } from "@code/primitives";
 import { agentOS, setup } from "@rivet-dev/agentos";
 import { createHostDirBackend } from "@rivet-dev/agentos-core";
 import { createClient } from "@rivet-dev/agentos/client";
 import { Effect } from "effect";
 import { HostRepositoryWorkspace } from "./host-repository";
 const piConfig = makePiAgentOsConfig();
 const workspace = agentOS<undefined, { token: string }>({
  onBeforeConnect: (_context, params) => {
    if (params.token !== process.env.RIVET_WORKSPACE_TOKEN) {
      throw new Error("Unauthorized workspace connection");
    }
  },
  options: {
    actionTimeout: 10 * 60 * 1000,
  },
  permissions: piConfig.permissions,
  software: piConfig.software,
 });
 export const runtimeRegistry = setup({ use: { workspace } });
 const event = (
  sequence: number,
  kind: ExecutionEvent["kind"],
  message: string,
  metadata: Record<string, string> = {}
 ): ExecutionEvent => ({
  kind,
  message,
  metadata,
  occurredAt: Date.now(),
  sequence,
 });
 const executionError = (
  message: string,
  reason: WorkAttemptExecutionError["reason"],
  retryable: boolean
 ) => new WorkAttemptExecutionError({ message, reason, retryable });
 const classifyRuntimeFailure = (cause: unknown): WorkAttemptExecutionError => {
  if (cause instanceof WorkAttemptExecutionError) {
    return cause;
  }
  const message = cause instanceof Error ? cause.message : "Execution failed";
  if (/auth|credential|401|403/iu.test(message)) {
    return executionError(message, "Authentication", false);
  }
  if (/clone|checkout|repository|git /iu.test(message)) {
    return executionError(message, "RepositoryFailed", false);
  }
  if (/timeout|timed out/iu.test(message)) {
    return executionError(message, "Timeout", true);
  }
  if (/connect|network|unavailable|502|503|504/iu.test(message)) {
    return executionError(message, "ProviderUnavailable", true);
  }
  return executionError(message, "HarnessFailed", false);
 };
 export const executeAgentOsAttempt = async (
  rawInput: unknown
 ): Promise<WorkAttemptExecutionResult> => {
  try {
    const input = await Effect.runPromise(
      decodeWorkAttemptExecutionInput(rawInput)
    );
    const env = parseAgentEnv(process.env);
    const client = createClient<typeof runtimeRegistry>({
      disableMetadataLookup: true,
      endpoint: env.RIVET_PUBLIC_ENDPOINT ?? env.RIVET_ENDPOINT,
    });
    const vm = client.workspace.getOrCreate([input.workspaceKey], {
      params: { token: env.RIVET_WORKSPACE_TOKEN },
    });
    const events: ExecutionEvent[] = [
      event(0, "runtime.preparing", "AgentOS workspace selected", {
        workspaceKey: input.workspaceKey,
      }),
    ];
    const hostRepository = new HostRepositoryWorkspace();
    const prepared = await hostRepository.prepare({
      attemptId: input.attemptId,
      piHomeFiles: makePiHomeFiles({
        api: env.AGENT_MODEL_API,
        apiKeyEnvironmentVariable: "AGENT_MODEL_API_KEY",
        baseUrl: env.AGENT_MODEL_BASE_URL,
        contextWindow: env.AGENT_MODEL_CONTEXT_WINDOW,
        maxTokens: env.AGENT_MODEL_MAX_TOKENS,
        model: env.AGENT_MODEL_NAME,
        provider: env.AGENT_MODEL_PROVIDER,
      }),
    });
    events.push(
      event(
        1,
        "runtime.preparing",
        prepared.created
          ? "Isolated Zopu worktree created on the execution host"
          : "Isolated Zopu worktree recreated"
      )
    );
    const mounts = [
      {
        hostPath: prepared.checkoutPath,
        path: "/workspace/repository",
        readOnly: false,
      },
      {
        hostPath: prepared.sourceRepositoryPath,
        path: prepared.sourceRepositoryPath,
        readOnly: false,
      },
      {
        hostPath: prepared.piHomePath,
        path: "/home/zopu",
        readOnly: false,
      },
      {
        hostPath: prepared.toolsPath,
        path: "/opt/zopu-tools",
        readOnly: true,
      },
    ] as const;
    const mountNext = async (index: number): Promise<void> => {
      const mount = mounts[index];
      if (!mount) {
        return;
      }
      try {
        await vm.mountFs({
          path: mount.path,
          plugin: createHostDirBackend({
            hostPath: mount.hostPath,
            readOnly: mount.readOnly,
          }),
          readOnly: mount.readOnly,
        });
      } catch (error) {
        const message = error instanceof Error ? error.message : String(error);
        throw executionError(
          `Failed to mount ${mount.hostPath} at ${mount.path}: ${message}`,
          "HarnessFailed",
          false
        );
      }
      await mountNext(index + 1);
    };
    await mountNext(0);
    const { baseRevision } = prepared;
    events.push(
      event(2, "repository.ready", "Repository checkout is ready", {
        baseRevision,
      })
    );
    const sessionId = `pi-${input.attemptId}`;
    await vm.openSession({
      additionalDirectories: [`${prepared.sourceRepositoryPath}/.git`],
      additionalInstructions:
        "Work only inside /workspace/repository. This is an isolated worktree of the Zopu product repository. Read AGENTS.md and the relevant product specifications before changing code. Never reveal credentials, modify the read-only base checkout, push, or open a pull request. Implement the requested change and run focused verification.",
      agent: "pi",
      cwd: "/workspace/repository",
      env: piSessionEnv(env.AGENT_MODEL_API_KEY),
      permissionPolicy: "allow_all",
      sessionId,
    });
    events.push(
      event(3, "harness.started", "Pi implementation session started")
    );
    const promptResult = await vm.prompt({
      content: [{ text: input.prompt, type: "text" }],
      idempotencyKey: input.attemptId,
      sessionId,
    });
    if (promptResult.stopReason !== "end_turn") {
      const reason =
        promptResult.stopReason === "cancelled" ? "Cancelled" : "HarnessFailed";
      throw executionError(
        `Pi stopped with ${promptResult.stopReason}`,
        reason,
        promptResult.stopReason === "max_tokens" ||
          promptResult.stopReason === "max_turn_requests"
      );
    }
    events.push(
      event(4, "harness.progress", "Pi implementation turn completed", {
        stopReason: promptResult.stopReason,
      })
    );
    const collected = await HostRepositoryWorkspace.collect({
      attemptId: input.attemptId,
      baseRevision,
      checkoutPath: prepared.checkoutPath,
    });
    const { candidateRevision, changedFiles, diff } = collected;
    events.push(
      event(
        5,
        "repository.changed",
        `${changedFiles.length} changed file(s) collected`,
        {
          candidateRevision,
        }
      ),
      event(6, "runtime.completed", "AgentOS execution completed")
    );
    return {
      baseRevision,
      candidateRevision,
      changedFiles,
      diff,
      environmentId: input.workspaceKey,
      events,
      summary:
        changedFiles.length > 0
          ? `Pi changed ${changedFiles.length} file(s)`
          : "Pi completed without repository changes",
    };
  } catch (error) {
    throw classifyRuntimeFailure(error);
  }
 };
 export const cancelAgentOsAttempt = async (
  workspaceKey: string,
  attemptId: string
 ) => {
  const env = parseAgentEnv(process.env);
  const client = createClient<typeof runtimeRegistry>({
    disableMetadataLookup: true,
    endpoint: env.RIVET_PUBLIC_ENDPOINT ?? env.RIVET_ENDPOINT,
  });
  await client.workspace
    .getOrCreate([workspaceKey], {
      params: { token: env.RIVET_WORKSPACE_TOKEN },
    })
    .cancelPrompt({ sessionId: `pi-${attemptId}` });
 };
--- a/packages/agents/src/runtime/host-repository.ts
+++ b/packages/agents/src/runtime/host-repository.ts
@@ -0,0 +1,274 @@
 import { execFileSync, spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { once } from "node:events";
 import {
  access,
  chmod,
  copyFile,
  mkdir,
  rm,
  writeFile,
 } from "node:fs/promises";
 import path from "node:path";
 import type { PiHomeFiles } from "@code/primitives";
 interface PrepareRepositoryInput {
  attemptId: string;
  piHomeFiles: PiHomeFiles;
 }
 interface PreparedRepository {
  baseRevision: string;
  checkoutPath: string;
  created: boolean;
  piHomePath: string;
  sourceRepositoryPath: string;
  toolsPath: string;
 }
 interface CollectRepositoryInput {
  attemptId: string;
  baseRevision: string;
  checkoutPath: string;
 }
 interface CollectedRepository {
  candidateRevision: string;
  changedFiles: string[];
  diff: string;
 }
 interface ProcessResult {
  exitCode: number;
  stderr: string;
  stdout: string;
 }
 const requireSuccess = (result: ProcessResult, operation: string): string => {
  if (result.exitCode !== 0) {
    throw new Error(`${operation} failed: ${result.stderr || result.stdout}`);
  }
  return result.stdout.trim();
 };
 const changedFilePath = (line: string): string => {
  const filePath = line.slice(3).trim();
  const renameSeparator = " -> ";
  const renameIndex = filePath.lastIndexOf(renameSeparator);
  return renameIndex === -1
    ? filePath
    : filePath.slice(renameIndex + renameSeparator.length);
 };
 const runProcess = async (
  command: string,
  args: readonly string[],
  cwd: string,
  env: Record<string, string> = {}
 ): Promise<ProcessResult> => {
  const environment = Object.fromEntries(
    Object.entries(process.env).filter(
      (entry): entry is [string, string] => entry[1] !== undefined
    )
  );
  const child = spawn(command, args, {
    cwd,
    env: { ...environment, ...env },
  });
  const stderr: Uint8Array[] = [];
  const stdout: Uint8Array[] = [];
  child.stderr.on("data", (chunk: Uint8Array) => stderr.push(chunk));
  child.stdout.on("data", (chunk: Uint8Array) => stdout.push(chunk));
  const [exitCode] = await once(child, "close");
  return {
    exitCode: typeof exitCode === "number" ? exitCode : 1,
    stderr: Buffer.concat(stderr).toString(),
    stdout: Buffer.concat(stdout).toString(),
  };
 };
 const runGit = (cwd: string, args: readonly string[]) =>
  runProcess("git", args, cwd);
 const pathExists = async (target: string): Promise<boolean> => {
  try {
    await access(target);
    return true;
  } catch {
    return false;
  }
 };
 export class HostRepositoryWorkspace {
  readonly #root: string;
  readonly #sourceRepositoryPath: string;
  readonly #installDependencies: boolean;
  constructor(
    root = process.env.AGENT_WORKSPACE_ROOT ?? "/var/lib/zopu/workspaces",
    sourceRepositoryPath = process.env.ZOPU_SOURCE_REPOSITORY ??
      "/opt/zopu-source",
    installDependencies = true
  ) {
    this.#root = root;
    this.#sourceRepositoryPath = sourceRepositoryPath;
    this.#installDependencies = installDependencies;
  }
  async prepare(input: PrepareRepositoryInput): Promise<PreparedRepository> {
    if (!(await pathExists(path.join(this.#sourceRepositoryPath, ".git")))) {
      throw new Error(
        `Fixed Zopu source repository is unavailable at ${this.#sourceRepositoryPath}`
      );
    }
    const identity = createHash("sha256")
      .update(input.attemptId)
      .digest("hex")
      .slice(0, 24);
    const workspacePath = path.join(this.#root, identity);
    const checkoutPath = path.join(workspacePath, "repository");
    const toolsPath = path.join(workspacePath, "tools");
    const piHomePath = path.join(workspacePath, "home");
    const branch = `zopu/attempt-${identity}`;
    const created = !(await pathExists(path.join(checkoutPath, ".git")));
    await mkdir(workspacePath, { recursive: true });
    if (!created) {
      requireSuccess(
        await runGit(this.#sourceRepositoryPath, [
          "worktree",
          "remove",
          "--force",
          checkoutPath,
        ]),
        "Existing worktree removal"
      );
    }
    await rm(checkoutPath, { force: true, recursive: true });
    requireSuccess(
      await runGit(this.#sourceRepositoryPath, [
        "worktree",
        "add",
        "-B",
        branch,
        checkoutPath,
        "HEAD",
      ]),
      "Zopu worktree creation"
    );
    const bunExecutable =
      process.env.BUN_EXECUTABLE ??
      execFileSync("which", ["bun"], { encoding: "utf-8" }).trim();
    const sourceEnvPath = path.join(this.#sourceRepositoryPath, ".env");
    if (await pathExists(sourceEnvPath)) {
      await copyFile(sourceEnvPath, path.join(checkoutPath, ".env"));
    }
    if (this.#installDependencies) {
      requireSuccess(
        await runProcess(
          bunExecutable,
          ["install", "--frozen-lockfile"],
          checkoutPath,
          { CI: "1" }
        ),
        "Workspace dependency installation"
      );
    }
    const toolsBinPath = path.join(toolsPath, "bin");
    await mkdir(toolsBinPath, { recursive: true });
    const bunPath = path.join(toolsBinPath, "bun");
    await copyFile(bunExecutable, bunPath);
    await chmod(bunPath, 0o755);
    const piAgentPath = path.join(piHomePath, ".pi", "agent");
    await mkdir(piAgentPath, { recursive: true });
    await writeFile(
      path.join(piAgentPath, "models.json"),
      input.piHomeFiles.models
    );
    await writeFile(
      path.join(piAgentPath, "settings.json"),
      input.piHomeFiles.settings
    );
    return {
      baseRevision: requireSuccess(
        await runGit(checkoutPath, ["rev-parse", "HEAD"]),
        "Base revision lookup"
      ),
      checkoutPath,
      created,
      piHomePath,
      sourceRepositoryPath: this.#sourceRepositoryPath,
      toolsPath,
    };
  }
  static async collect(
    input: CollectRepositoryInput
  ): Promise<CollectedRepository> {
    const status = requireSuccess(
      await runGit(input.checkoutPath, ["status", "--porcelain"]),
      "Changed file lookup"
    );
    let diff = "";
    const changedFiles = status
      .split("\n")
      .filter(Boolean)
      .map(changedFilePath);
    let candidateRevision = input.baseRevision;
    if (changedFiles.length > 0) {
      requireSuccess(
        await runGit(input.checkoutPath, ["add", "-A"]),
        "Candidate staging"
      );
      diff = requireSuccess(
        await runGit(input.checkoutPath, [
          "diff",
          "--binary",
          "--cached",
          "--no-ext-diff",
          input.baseRevision,
        ]),
        "Diff collection"
      );
      const tree = requireSuccess(
        await runGit(input.checkoutPath, ["write-tree"]),
        "Candidate tree creation"
      );
      candidateRevision = requireSuccess(
        await runProcess(
          "git",
          [
            "commit-tree",
            tree,
            "-p",
            input.baseRevision,
            "-m",
            `Zopu candidate for ${input.attemptId}`,
          ],
          input.checkoutPath,
          {
            GIT_AUTHOR_EMAIL: "agent@zopu.dev",
            GIT_AUTHOR_NAME: "Zopu Agent",
            GIT_COMMITTER_EMAIL: "agent@zopu.dev",
            GIT_COMMITTER_NAME: "Zopu Agent",
          }
        ),
        "Candidate revision creation"
      );
      requireSuccess(
        await runGit(input.checkoutPath, ["reset"]),
        "Candidate index reset"
      );
    }
    return { candidateRevision, changedFiles, diff };
  }
 }
--- a/packages/agents/tsconfig.json
+++ b/packages/agents/tsconfig.json
@@ -1,6 +1,6 @@
 {
  "extends": "@code/config/tsconfig.base.json",
-  "compilerOptions": { "types": ["bun"] },
+  "compilerOptions": { "allowImportingTsExtensions": true, "types": ["bun"] },
  "include": ["src/**/*.ts"],
  "exclude": ["dist"]
 }
--- a/packages/backend/convex/_generated/api.d.ts
+++ b/packages/backend/convex/_generated/api.d.ts
@@ -11,7 +11,11 @@
 import type * as auth from "../auth.js";
 import type * as authz from "../authz.js";
 import type * as conversationMessages from "../conversationMessages.js";
 import type * as conversationProjections from "../conversationProjections.js";
 import type * as crons from "../crons.js";
 import type * as fluePersistence from "../fluePersistence.js";
 import type * as gitConnectionData from "../gitConnectionData.js";
 import type * as gitConnections from "../gitConnections.js";
 import type * as healthCheck from "../healthCheck.js";
 import type * as http from "../http.js";
 import type * as organizations from "../organizations.js";
@@ -19,6 +23,11 @@ import type * as privateData from "../privateData.js";
 import type * as projects from "../projects.js";
 import type * as publicGit from "../publicGit.js";
 import type * as signalRouting from "../signalRouting.js";
 import type * as workArtifacts from "../workArtifacts.js";
 import type * as workExecution from "../workExecution.js";
 import type * as workExecutionAgent from "../workExecutionAgent.js";
 import type * as workExecutionWorkflow from "../workExecutionWorkflow.js";
 import type * as workPlanning from "../workPlanning.js";
 import type * as works from "../works.js";
 import type {
@@ -31,7 +40,11 @@ declare const fullApi: ApiFromModules<{
  auth: typeof auth;
  authz: typeof authz;
  conversationMessages: typeof conversationMessages;
  conversationProjections: typeof conversationProjections;
  crons: typeof crons;
  fluePersistence: typeof fluePersistence;
  gitConnectionData: typeof gitConnectionData;
  gitConnections: typeof gitConnections;
  healthCheck: typeof healthCheck;
  http: typeof http;
  organizations: typeof organizations;
@@ -39,6 +52,11 @@ declare const fullApi: ApiFromModules<{
  projects: typeof projects;
  publicGit: typeof publicGit;
  signalRouting: typeof signalRouting;
  workArtifacts: typeof workArtifacts;
  workExecution: typeof workExecution;
  workExecutionAgent: typeof workExecutionAgent;
  workExecutionWorkflow: typeof workExecutionWorkflow;
  workPlanning: typeof workPlanning;
  works: typeof works;
 }>;
@@ -70,4 +88,5 @@ export declare const internal: FilterApi<
 export declare const components: {
  betterAuth: import("@convex-dev/better-auth/_generated/component.js").ComponentApi<"betterAuth">;
  workflow: import("@convex-dev/workflow/_generated/component.js").ComponentApi<"workflow">;
 };
--- a/packages/backend/convex/_generated/server.d.ts
+++ b/packages/backend/convex/_generated/server.d.ts
@@ -25,10 +25,14 @@ import type { DataModel } from "./dataModel.js";
 * Typesafe environment variables declared in `convex.config.ts`.
 */
 type Env = {
  readonly AGENT_BACKEND_URL: string | undefined;
  readonly FLUE_DB_TOKEN: string;
  readonly FLUE_URL: string | undefined;
  readonly GITEA_TOKEN: string | undefined;
  readonly GITEA_URL: string | undefined;
  readonly GITHUB_CLIENT_ID: string | undefined;
  readonly GITHUB_CLIENT_SECRET: string | undefined;
  readonly GIT_CREDENTIAL_ENCRYPTION_KEY: string | undefined;
  readonly NATIVE_APP_URL: string | undefined;
  readonly SITE_URL: string;
 };
--- a/packages/backend/convex/auth.ts
+++ b/packages/backend/convex/auth.ts
@@ -30,6 +30,15 @@ const createAuth = (ctx: GenericCtx<DataModel>) =>
        jwksRotateOnTokenGenerationError: true,
      }),
    ],
    socialProviders:
      env.GITHUB_CLIENT_ID && env.GITHUB_CLIENT_SECRET
        ? {
            github: {
              clientId: env.GITHUB_CLIENT_ID,
              clientSecret: env.GITHUB_CLIENT_SECRET,
            },
          }
        : {},
    trustedOrigins: [siteUrl, nativeAppUrl, "exp://"],
  });
--- a/packages/backend/convex/conversationMessages.test.ts
+++ b/packages/backend/convex/conversationMessages.test.ts
@@ -20,17 +20,6 @@ const markProcessingRef = makeFunctionReference<
  { turnId: string; attempt: number; leaseOwner: string },
  boolean
 >("conversationMessages:markProcessing");
 const completeTurnRef = makeFunctionReference<
  "mutation",
  {
    turnId: string;
    attempt: number;
    leaseOwner: string;
    submissionId: string;
    text: string;
  },
  boolean
 >("conversationMessages:completeTurn");
 const failTurnRef = makeFunctionReference<
  "mutation",
  {
@@ -137,7 +126,7 @@ describe("conversationMessages", () => {
    ).rejects.toThrow(/Organization membership required/u);
  });
-  test("fences stale turn attempts from overwriting a retry", async () => {
+  test("fences stale dispatch failures after admission", async () => {
    const t = newTest();
    const organization = await ensureOrg(t, identityA);
    const sent = await t
@@ -146,7 +135,7 @@ describe("conversationMessages", () => {
        clientRequestId: "request-fenced",
        images: [],
        organizationId: organization._id,
-        rawText: "Keep only the current response",
+        rawText: "Keep only the admitted submission",
      });
    expect(
@@ -156,46 +145,27 @@ describe("conversationMessages", () => {
        turnId: sent.turnId,
      })
    ).toBe(true);
    await t.run(async (ctx) => {
      await ctx.db.patch(sent.turnId, {
        leaseExpiresAt: undefined,
        leaseOwner: undefined,
        status: "running",
        submissionId: "submission-1",
      });
    });
    expect(
      await t.mutation(failTurnRef, {
        attempt: 1,
-        error: "retry",
+        error: "lost 202",
        leaseOwner: "worker-1",
        retry: true,
        turnId: sent.turnId,
      })
    ).toBe(true);
    expect(
      await t.mutation(completeTurnRef, {
        attempt: 1,
        leaseOwner: "worker-1",
        submissionId: "stale",
        text: "stale response",
        turnId: sent.turnId,
      })
    ).toBe(false);
-    expect(
+    expect(await t.run((ctx) => ctx.db.get(sent.turnId))).toMatchObject({
-      await t.mutation(markProcessingRef, {
+      status: "running",
-        attempt: 2,
+      submissionId: "submission-1",
-        leaseOwner: "worker-2",
+    });
        turnId: sent.turnId,
      })
    ).toBe(true);
    expect(
      await t.mutation(completeTurnRef, {
        attempt: 2,
        leaseOwner: "worker-2",
        submissionId: "current",
        text: "current response",
        turnId: sent.turnId,
      })
    ).toBe(true);
    const messages = await t
      .withIdentity(identityA)
      .query(api.conversationMessages.listForCurrentOrganization, {
        organizationId: organization._id,
      });
    expect(messages[1]?.rawText).toBe("current response");
  });
 });
--- a/packages/backend/convex/conversationMessages.ts
+++ b/packages/backend/convex/conversationMessages.ts
@@ -38,17 +38,6 @@ const markProcessingRef = makeFunctionReference<
  },
  boolean
 >("conversationMessages:markProcessing");
 const completeTurnRef = makeFunctionReference<
  "mutation",
  {
    turnId: Id<"conversationTurns">;
    attempt: number;
    leaseOwner: string;
    submissionId: string;
    text: string;
  },
  boolean
 >("conversationMessages:completeTurn");
 const failTurnRef = makeFunctionReference<
  "mutation",
  {
@@ -268,47 +257,7 @@ export const markProcessing = internalMutation({
      error: undefined,
      leaseExpiresAt: Date.now() + 60_000,
      leaseOwner: args.leaseOwner,
-      status: "processing",
+      status: "dispatching",
    });
    return true;
  },
 });
 export const completeTurn = internalMutation({
  args: {
    attempt: v.number(),
    leaseOwner: v.string(),
    submissionId: v.string(),
    text: v.string(),
    turnId: v.id("conversationTurns"),
  },
  handler: async (ctx, args): Promise<boolean> => {
    const turn = await ctx.db.get(args.turnId);
    if (
      !turn ||
      turn.status !== "processing" ||
      (turn.attemptNumber ?? 1) !== args.attempt ||
      turn.leaseOwner !== args.leaseOwner ||
      (turn.leaseExpiresAt !== undefined && turn.leaseExpiresAt < Date.now())
    ) {
      return false;
    }
    const assistant = await ctx.db
      .query("conversationMessages")
      .withIndex("by_turnId_and_role", (q) =>
        q.eq("turnId", args.turnId).eq("role", "assistant")
      )
      .unique();
    if (assistant) {
      await ctx.db.patch(assistant._id, { content: args.text });
    }
    await ctx.db.patch(args.turnId, {
      completedAt: Date.now(),
      error: undefined,
      leaseExpiresAt: undefined,
      leaseOwner: undefined,
      status: "completed",
      submissionId: args.submissionId,
    });
    return true;
  },
@@ -326,10 +275,9 @@ export const failTurn = internalMutation({
    const turn = await ctx.db.get(args.turnId);
    if (
      !turn ||
-      turn.status !== "processing" ||
+      turn.status !== "dispatching" ||
      (turn.attemptNumber ?? 1) !== args.attempt ||
      turn.leaseOwner !== args.leaseOwner ||
-      (turn.leaseExpiresAt !== undefined && turn.leaseExpiresAt < Date.now())
+      (turn.attemptNumber ?? 1) !== args.attempt
    ) {
      return false;
    }
@@ -392,7 +340,6 @@ export const runTurn = internalAction({
        `agents/zopu/${encodeURIComponent(String(turn.organizationId))}`,
        `${flueUrl.replace(/\/+$/u, "")}/`
      );
      endpoint.searchParams.set("wait", "result");
      const response = await fetch(endpoint, {
        body: JSON.stringify({ images, message: turn.user.content }),
        headers: {
@@ -400,41 +347,29 @@ export const runTurn = internalAction({
          "content-type": "application/json",
          "x-zopu-organization-id": String(turn.organizationId),
          "x-zopu-request-id": turn.turn.clientRequestId,
          "x-zopu-turn-id": String(args.turnId),
        },
        method: "POST",
      });
-      const payload: unknown = await response.json().catch(() => null);
+      if (!response.ok) {
-      if (
+        throw new Error(
-        !response.ok ||
+          `Flue admission failed (${response.status}): ${await response.text().catch(() => "")}`
-        typeof payload !== "object" ||
+        );
-        payload === null ||
+      }
-        !("submissionId" in payload) ||
+      const admitted = await ctx.runQuery(getTurnRef, { turnId: args.turnId });
-        typeof payload.submissionId !== "string" ||
+      if (admitted?.turn.submissionId === undefined) {
-        !("result" in payload) ||
+        throw new Error("Flue admission did not bind the product turn");
        typeof payload.result !== "object" ||
        payload.result === null ||
        !("text" in payload.result) ||
        typeof payload.result.text !== "string"
      ) {
        throw new Error(`Flue turn failed (${response.status})`);
      }
      await ctx.runMutation(completeTurnRef, {
        attempt: args.attempt,
        leaseOwner,
        submissionId: payload.submissionId,
        text: payload.result.text,
        turnId: args.turnId,
      });
    } catch (error) {
      const retry = args.attempt < MAX_ATTEMPTS;
-      await ctx.runMutation(failTurnRef, {
+      const failed = await ctx.runMutation(failTurnRef, {
        attempt: args.attempt,
        error: error instanceof Error ? error.message : String(error),
        leaseOwner,
        retry,
        turnId: args.turnId,
      });
-      if (retry) {
+      if (failed && retry) {
        await ctx.scheduler.runAfter(args.attempt * 1000, runTurnRef, {
          attempt: args.attempt + 1,
          turnId: args.turnId,
@@ -451,10 +386,18 @@ export const reconcileExpiredTurns = internalMutation({
    const expired = await ctx.db
      .query("conversationTurns")
      .withIndex("by_status_and_leaseExpiresAt", (q) =>
-        q.eq("status", "processing").lt("leaseExpiresAt", Date.now())
+        q.eq("status", "dispatching").lt("leaseExpiresAt", Date.now())
      )
      .collect();
    for (const turn of expired) {
      if (turn.submissionId !== undefined) {
        await ctx.db.patch(turn._id, {
          leaseExpiresAt: undefined,
          leaseOwner: undefined,
          status: "running",
        });
        continue;
      }
      const attempt = turn.attemptNumber ?? 1;
      const retry = attempt < MAX_ATTEMPTS;
      await ctx.db.patch(turn._id, {
--- a/packages/backend/convex/conversationProjections.ts
+++ b/packages/backend/convex/conversationProjections.ts
@@ -0,0 +1,145 @@
 import type { Id } from "./_generated/dataModel";
 import type { MutationCtx } from "./_generated/server";
 interface ProjectionContext {
  readonly assistantMessageId: Id<"conversationMessages"> | null;
  readonly turnId: Id<"conversationTurns"> | null;
 }
 const parseStringField = (record: unknown, key: string): string | undefined => {
  if (typeof record !== "object" || record === null) {
    return undefined;
  }
  const value = (record as Record<string, unknown>)[key];
  return typeof value === "string" ? value : undefined;
 };
 const resolveContext = async (
  ctx: MutationCtx,
  submissionId: string | undefined
 ): Promise<ProjectionContext> => {
  if (submissionId === undefined) {
    return { assistantMessageId: null, turnId: null };
  }
  const turn = await ctx.db
    .query("conversationTurns")
    .withIndex("by_submissionId", (q) => q.eq("submissionId", submissionId))
    .unique();
  if (turn === null) {
    return { assistantMessageId: null, turnId: null };
  }
  const assistant = await ctx.db
    .query("conversationMessages")
    .withIndex("by_turnId_and_role", (q) =>
      q.eq("turnId", turn._id).eq("role", "assistant")
    )
    .unique();
  return {
    assistantMessageId: assistant?._id ?? null,
    turnId: turn._id,
  };
 };
 const terminalError = (record: unknown): string => {
  if (typeof record !== "object" || record === null) {
    return "Flue submission failed";
  }
  const value = (record as Record<string, unknown>).error;
  if (typeof value === "string") {
    return value.slice(0, 2000);
  }
  if (typeof value === "object" && value !== null) {
    const { message } = value as Record<string, unknown>;
    if (typeof message === "string") {
      return message.slice(0, 2000);
    }
  }
  return "Flue submission failed";
 };
 /**
 * Project the small product view from Flue's canonical conversation stream.
 * The raw stream remains authoritative; this function only updates the existing
 * assistant message and turn row that the web already reads.
 */
 export const projectConversationRecords = async (
  ctx: MutationCtx,
  recordsJson: string,
  submissionId: string | undefined
 ): Promise<void> => {
  let records: unknown[];
  try {
    const parsed = JSON.parse(recordsJson) as unknown;
    if (!Array.isArray(parsed)) {
      return;
    }
    records = parsed;
  } catch {
    return;
  }
  const projection = await resolveContext(ctx, submissionId);
  if (projection.turnId === null) {
    return;
  }
  for (const record of records) {
    const type = parseStringField(record, "type");
    if (type === "assistant_text_delta" && projection.assistantMessageId) {
      const delta = parseStringField(record, "delta");
      if (delta !== undefined) {
        const assistant = await ctx.db.get(projection.assistantMessageId);
        if (assistant !== null) {
          await ctx.db.patch(assistant._id, {
            content: `${assistant.content}${delta}`,
          });
        }
      }
      continue;
    }
    if (type !== "submission_settled") {
      continue;
    }
    const turn = await ctx.db.get(projection.turnId);
    if (
      turn === null ||
      turn.status === "completed" ||
      turn.status === "failed" ||
      turn.status === "aborted"
    ) {
      continue;
    }
    const outcome = parseStringField(record, "outcome");
    if (outcome === "completed" && projection.assistantMessageId) {
      const result =
        typeof record === "object" && record !== null
          ? (record as Record<string, unknown>).result
          : undefined;
      const text =
        typeof result === "object" && result !== null
          ? (result as Record<string, unknown>).text
          : undefined;
      if (typeof text === "string") {
        await ctx.db.patch(projection.assistantMessageId, { content: text });
      }
    }
    let status: "aborted" | "completed" | "failed" = "failed";
    if (outcome === "completed") {
      status = "completed";
    } else if (outcome === "aborted") {
      status = "aborted";
    }
    await ctx.db.patch(turn._id, {
      completedAt: Date.now(),
      error: outcome === "failed" ? terminalError(record) : undefined,
      leaseExpiresAt: undefined,
      leaseOwner: undefined,
      status,
    });
  }
 };
--- a/packages/backend/convex/convex.config.ts
+++ b/packages/backend/convex/convex.config.ts
@@ -1,17 +1,23 @@
 import betterAuth from "@convex-dev/better-auth/convex.config";
 import workflow from "@convex-dev/workflow/convex.config.js";
 import { defineApp } from "convex/server";
 import { v } from "convex/values";
 const app = defineApp({
  env: {
    AGENT_BACKEND_URL: v.optional(v.string()),
    FLUE_DB_TOKEN: v.string(),
    FLUE_URL: v.optional(v.string()),
    GITEA_TOKEN: v.optional(v.string()),
    GITEA_URL: v.optional(v.string()),
    GITHUB_CLIENT_ID: v.optional(v.string()),
    GITHUB_CLIENT_SECRET: v.optional(v.string()),
    GIT_CREDENTIAL_ENCRYPTION_KEY: v.optional(v.string()),
    NATIVE_APP_URL: v.optional(v.string()),
    SITE_URL: v.string(),
  },
 });
 app.use(betterAuth);
 app.use(workflow);
 export default app;
--- a/packages/backend/convex/fluePersistence.test.ts
+++ b/packages/backend/convex/fluePersistence.test.ts
@@ -74,6 +74,53 @@ describe("Flue Convex persistence", () => {
    });
  });
  test("binds a direct admission to the product turn atomically", async () => {
    const t = convexTest({ modules, schema });
    const organizationId = await t.run(async (ctx) =>
      ctx.db.insert("organizations", {
        createdAt: 1,
        createdBy: "user-1",
        kind: "personal",
        name: "Test",
      })
    );
    const conversationId = await t.run(async (ctx) =>
      ctx.db.insert("conversations", { createdAt: 1, organizationId })
    );
    const turnId = await t.run(async (ctx) =>
      ctx.db.insert("conversationTurns", {
        attemptNumber: 1,
        clientRequestId: "request-1",
        conversationId,
        createdAt: 1,
        leaseExpiresAt: 100,
        leaseOwner: "worker",
        status: "dispatching",
      })
    );
    await t.mutation(api.fluePersistence.admitSubmission, {
      clientRequestId: "request-1",
      input: {
        acceptedAt: 1,
        chunksJson: "[]",
        inputJson: '{"kind":"direct"}',
        kind: "direct",
        sessionKey: "agent/instance/default",
        submissionId: "submission-1",
      },
      token,
      turnId,
    });
    const turn = await t.run((ctx) => ctx.db.get(turnId));
    expect(turn).toMatchObject({
      status: "running",
      submissionId: "submission-1",
    });
    expect(turn).not.toHaveProperty("leaseExpiresAt");
    expect(turn).not.toHaveProperty("leaseOwner");
  });
  test("fences stale conversation producers and conflicting attachments", async () => {
    const t = convexTest({ modules, schema });
    await t.mutation(api.fluePersistence.createConversationStream, {
--- a/packages/backend/convex/fluePersistence.ts
+++ b/packages/backend/convex/fluePersistence.ts
@@ -1,9 +1,11 @@
 /* eslint-disable unicorn/no-array-sort, no-await-in-loop, unicorn/no-await-expression-member, unicorn/filename-case, unicorn/prefer-at, unicorn/no-array-reduce, @typescript-eslint/no-non-null-assertion */
 import { env } from "@code/env/convex";
 import { v } from "convex/values";
 import type { Doc } from "./_generated/dataModel";
 import { mutation, query } from "./_generated/server";
 import type { MutationCtx, QueryCtx } from "./_generated/server";
-import { v } from "convex/values";
+import { projectConversationRecords } from "./conversationProjections";
 const FLUE_SCHEMA_VERSION = "4";
 const DURABILITY_DEFAULT_MAX_ATTEMPTS = 10;
@@ -129,16 +131,24 @@ interface AttachmentWire {
  readonly bytes: ArrayBuffer;
 }
 interface AdmitSubmissionResponse {
  readonly kind: "submission" | "retained_receipt" | "conflict";
  readonly submission?: SubmissionRow;
-  readonly receipt?: { readonly submissionId: string; readonly acceptedAt: number };
+  readonly receipt?: {
    readonly submissionId: string;
    readonly acceptedAt: number;
  };
 }
-interface AppendResult { readonly offset: number; readonly appended: boolean }
+interface AppendResult {
  readonly offset: number;
  readonly appended: boolean;
 }
-interface ListRunsCursor { readonly startedAt: string; readonly runId: string }
+interface ListRunsCursor {
  readonly startedAt: string;
  readonly runId: string;
 }
 interface OwnedConversationRecord {
  readonly id?: string;
@@ -151,7 +161,7 @@ const submissionKind = v.union(v.literal("dispatch"), v.literal("direct"));
 const runStatus = v.union(
  v.literal("active"),
  v.literal("completed"),
-  v.literal("errored"),
+  v.literal("errored")
 );
 const attachmentRef = v.object({
  digest: v.string(),
@@ -199,7 +209,7 @@ const toSubmissionRow = (doc: SubmissionDoc): SubmissionRow => ({
 });
 const toSettlementObligationRow = (
-  doc: SubmissionDoc,
+  doc: SubmissionDoc
 ): SettlementObligationRow | null => {
  if (
    doc.attemptId === undefined ||
@@ -224,7 +234,7 @@ const toAttemptMarkerRow = (doc: AttemptMarkerDoc): AttemptMarkerRow => ({
 });
 const toConversationStreamRow = (
-  doc: ConversationStreamDoc,
+  doc: ConversationStreamDoc
 ): ConversationStreamRow => ({
  identity: safeJsonParse<ConversationStreamIdentity>(doc.identityJson),
  incarnation: doc.incarnation,
@@ -234,7 +244,9 @@ const toConversationStreamRow = (
  producerId: doc.producerId ?? null,
 });
-const toConversationBatchRow = (doc: ConversationBatchDoc): ConversationBatchRow => ({
+const toConversationBatchRow = (
  doc: ConversationBatchDoc
 ): ConversationBatchRow => ({
  offset: doc.seq,
  recordsJson: doc.recordsJson,
 });
@@ -299,7 +311,7 @@ const sameAttachment = (
    readonly conversationId: string;
    readonly attachment: AttachmentRefWire;
    readonly bytes: ArrayBuffer;
-  },
+  }
 ): boolean =>
  existing.conversationId === input.conversationId &&
  existing.attachmentId === input.attachment.id &&
@@ -309,7 +321,10 @@ const sameAttachment = (
  existing.filename === input.attachment.filename &&
  compareBuffers(existing.bytes, input.bytes);
-const compareRunPointerDesc = (left: RunPointerRow, right: RunPointerRow): number => {
+const compareRunPointerDesc = (
  left: RunPointerRow,
  right: RunPointerRow
 ): number => {
  if (left.startedAt !== right.startedAt) {
    return left.startedAt < right.startedAt ? 1 : -1;
  }
@@ -326,11 +341,10 @@ const parseSessionInstance = (sessionKey: string): string | undefined => {
    return undefined;
  }
  try {
-    const parsed = JSON.parse(sessionKey.slice("agent-session:".length)) as unknown;
+    const parsed = JSON.parse(
-    if (
+      sessionKey.slice("agent-session:".length)
-      Array.isArray(parsed) &&
+    ) as unknown;
-      typeof parsed[0] === "string"
+    if (Array.isArray(parsed) && typeof parsed[0] === "string") {
    ) {
      return parsed[0];
    }
  } catch {
@@ -350,11 +364,15 @@ const parseOwnedRecord = (record: unknown): OwnedConversationRecord | null => {
    ...(typeof value.submissionId === "string"
      ? { submissionId: value.submissionId }
      : {}),
-    ...(typeof value.attemptId === "string" ? { attemptId: value.attemptId } : {}),
+    ...(typeof value.attemptId === "string"
      ? { attemptId: value.attemptId }
      : {}),
  };
 };
-const parseSettledOutcome = (recordJson: string | undefined): SettledOutcome | undefined => {
+const parseSettledOutcome = (
  recordJson: string | undefined
 ): SettledOutcome | undefined => {
  if (recordJson === undefined) {
    return undefined;
  }
@@ -376,10 +394,9 @@ const parseSettledOutcome = (recordJson: string | undefined): SettledOutcome | u
 type ReadCtx = QueryCtx | MutationCtx;
 const getSubmissionDoc = (
  ctx: ReadCtx,
-  submissionId: string,
+  submissionId: string
 ): Promise<SubmissionDoc | null> =>
  ctx.db
    .query("flueSubmissions")
@@ -388,14 +405,13 @@ const getSubmissionDoc = (
 const getConversationStreamDoc = (
  ctx: ReadCtx,
-  path: string,
+  path: string
 ): Promise<ConversationStreamDoc | null> =>
  ctx.db
    .query("flueConversationStreams")
    .withIndex("by_path", (q) => q.eq("path", path))
    .unique();
 const assertSubmissionAuthorization = async (
  ctx: ReadCtx,
  path: string,
@@ -405,7 +421,7 @@ const assertSubmissionAuthorization = async (
        readonly attemptId: string;
      }
    | undefined,
-  recordsJson: string,
+  recordsJson: string
 ): Promise<void> => {
  const records = safeJsonParse<unknown[]>(recordsJson);
  const owned = records
@@ -413,13 +429,13 @@ const assertSubmissionAuthorization = async (
    .filter(
      (record): record is OwnedConversationRecord =>
        record !== null &&
-        (record.submissionId !== undefined || record.attemptId !== undefined),
+        (record.submissionId !== undefined || record.attemptId !== undefined)
    );
  if (submission === undefined) {
    if (owned.length > 0) {
      throw new Error(
-        `[flue] Conversation stream "${path}" received submission-owned records without authorization.`,
+        `[flue] Conversation stream "${path}" received submission-owned records without authorization.`
      );
    }
    return;
@@ -429,11 +445,11 @@ const assertSubmissionAuthorization = async (
    owned.some(
      (record) =>
        record.submissionId !== submission.submissionId ||
-        record.attemptId !== submission.attemptId,
+        record.attemptId !== submission.attemptId
    )
  ) {
    throw new Error(
-      `[flue] Conversation stream "${path}" record ownership does not match the authorized submission attempt.`,
+      `[flue] Conversation stream "${path}" record ownership does not match the authorized submission attempt.`
    );
  }
@@ -441,11 +457,13 @@ const assertSubmissionAuthorization = async (
  const stored = await getSubmissionDoc(ctx, submission.submissionId);
  if (stream === null || stored === null) {
    throw new Error(
-      `[flue] Submission attempt no longer owns work for agent instance "${path}".`,
+      `[flue] Submission attempt no longer owns work for agent instance "${path}".`
    );
  }
-  const streamIdentity = safeJsonParse<ConversationStreamIdentity>(stream.identityJson);
+  const streamIdentity = safeJsonParse<ConversationStreamIdentity>(
    stream.identityJson
  );
  const terminalizingSettlement =
    stored.status === "terminalizing" &&
    stored.attemptId === submission.attemptId &&
@@ -466,7 +484,7 @@ const assertSubmissionAuthorization = async (
    )
  ) {
    throw new Error(
-      `[flue] Submission attempt no longer owns work for agent instance "${path}".`,
+      `[flue] Submission attempt no longer owns work for agent instance "${path}".`
    );
  }
 };
@@ -489,7 +507,9 @@ export const getSubmission = query({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    return submission === null ? null : toSubmissionRow(submission);
  },
@@ -509,7 +529,7 @@ export const listRunnableSubmissions = query({
  handler: async (ctx, args) => {
    assertToken(args.token);
    const rows = (await ctx.db.query("flueSubmissions").collect()).sort(
-      (left, right) => left.sequence - right.sequence,
+      (left, right) => left.sequence - right.sequence
    );
    return rows
      .filter(
@@ -520,8 +540,8 @@ export const listRunnableSubmissions = query({
            (candidate) =>
              candidate.sessionKey === row.sessionKey &&
              candidate.sequence < row.sequence &&
-              isUnsettled(candidate.status),
+              isUnsettled(candidate.status)
-          ),
+          )
      )
      .map(toSubmissionRow);
  },
@@ -533,7 +553,7 @@ export const listUnreadySubmissions = query({
    assertToken(args.token);
    return (await ctx.db.query("flueSubmissions").collect())
      .filter(
-        (row) => row.status === "queued" && row.canonicalReadyAt === undefined,
+        (row) => row.status === "queued" && row.canonicalReadyAt === undefined
      )
      .sort((left, right) => left.sequence - right.sequence)
      .map(toSubmissionRow);
@@ -576,7 +596,9 @@ export const replaceSubmissionAttempt = mutation({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (
      submission === null ||
@@ -591,7 +613,9 @@ export const replaceSubmissionAttempt = mutation({
      attemptId: args.nextAttemptId,
      recoveryRequestedAt: undefined,
      startedAt: now,
-      ...(args.ownerId === undefined ? { ownerId: undefined } : { ownerId: args.ownerId }),
+      ...(args.ownerId === undefined
        ? { ownerId: undefined }
        : { ownerId: args.ownerId }),
      ...(args.leaseExpiresAt === undefined
        ? { leaseExpiresAt: submission.leaseExpiresAt }
        : { leaseExpiresAt: args.leaseExpiresAt }),
@@ -605,6 +629,7 @@ export const replaceSubmissionAttempt = mutation({
 export const admitSubmission = mutation({
  args: {
    ...tokenArgs,
    clientRequestId: v.optional(v.string()),
    input: v.object({
      acceptedAt: v.number(),
      chunksJson: v.optional(v.string()),
@@ -614,12 +639,25 @@ export const admitSubmission = mutation({
      submissionId: v.string(),
      traceCarrierJson: v.optional(v.string()),
    }),
    turnId: v.optional(v.id("conversationTurns")),
  },
  handler: async (ctx, args): Promise<AdmitSubmissionResponse> => {
    assertToken(args.token);
    const correlatedTurn =
      args.clientRequestId === undefined || args.turnId === undefined
        ? null
        : await ctx.db.get(args.turnId);
    if (
      correlatedTurn !== null &&
      correlatedTurn.clientRequestId !== args.clientRequestId
    ) {
      throw new Error("[flue] Turn admission correlation does not match.");
    }
    const existing = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.input.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.input.submissionId)
      )
      .unique();
    if (existing !== null) {
@@ -629,7 +667,8 @@ export const admitSubmission = mutation({
        existing.acceptedAt === args.input.acceptedAt &&
        existing.inputJson === args.input.inputJson &&
        existing.chunksJson === (args.input.chunksJson ?? "[]") &&
-        (existing.traceCarrierJson ?? undefined) === args.input.traceCarrierJson;
+        (existing.traceCarrierJson ?? undefined) ===
          args.input.traceCarrierJson;
      if (!exactMatch) {
        return { kind: "conflict" };
      }
@@ -642,14 +681,25 @@ export const admitSubmission = mutation({
          },
        };
      }
      if (
        correlatedTurn !== null &&
        correlatedTurn.submissionId !== existing.submissionId
      ) {
        await ctx.db.patch(correlatedTurn._id, {
          error: undefined,
          leaseExpiresAt: undefined,
          leaseOwner: undefined,
          status: "running",
          submissionId: existing.submissionId,
        });
      }
      return { kind: "submission", submission: toSubmissionRow(existing) };
    }
    const all = await ctx.db.query("flueSubmissions").collect();
-    const nextSequence = all.reduce(
+    const nextSequence =
-      (max, row) => (row.sequence > max ? row.sequence : max),
+      all.reduce((max, row) => (row.sequence > max ? row.sequence : max), -1) +
-      -1,
+      1;
    ) + 1;
    const now = Date.now();
    const rowId = await ctx.db.insert("flueSubmissions", {
      acceptedAt: args.input.acceptedAt,
@@ -671,6 +721,15 @@ export const admitSubmission = mutation({
    if (created === null) {
      throw new Error("[flue] Failed to create submission row.");
    }
    if (correlatedTurn !== null) {
      await ctx.db.patch(correlatedTurn._id, {
        error: undefined,
        leaseExpiresAt: undefined,
        leaseOwner: undefined,
        status: "running",
        submissionId: args.input.submissionId,
      });
    }
    return { kind: "submission", submission: toSubmissionRow(created) };
  },
 });
@@ -681,7 +740,9 @@ export const markSubmissionCanonicalReady = mutation({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (submission === null || submission.status !== "queued") {
      return null;
@@ -708,9 +769,10 @@ export const claimSubmission = mutation({
  handler: async (ctx, args) => {
    assertToken(args.token);
    const rows = (await ctx.db.query("flueSubmissions").collect()).sort(
-      (left, right) => left.sequence - right.sequence,
+      (left, right) => left.sequence - right.sequence
    );
-    const submission = rows.find((row) => row.submissionId === args.submissionId) ?? null;
+    const submission =
      rows.find((row) => row.submissionId === args.submissionId) ?? null;
    if (
      submission === null ||
      submission.status !== "queued" ||
@@ -722,7 +784,7 @@ export const claimSubmission = mutation({
      (row) =>
        row.sessionKey === submission.sessionKey &&
        row.sequence < submission.sequence &&
-        isUnsettled(row.status),
+        isUnsettled(row.status)
    );
    if (hasEarlierUnsettled) {
      return null;
@@ -762,7 +824,9 @@ export const markSubmissionInputApplied = mutation({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (
      submission === null ||
@@ -793,7 +857,9 @@ export const requestSubmissionRecovery = mutation({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (
      submission === null ||
@@ -817,7 +883,7 @@ export const requestSessionAbort = mutation({
    const rows = (await ctx.db.query("flueSubmissions").collect()).filter(
      (row) =>
        row.sessionKey === args.sessionKey &&
-        (row.status === "queued" || row.status === "running"),
+        (row.status === "queued" || row.status === "running")
    );
    const now = Date.now();
    for (const row of rows) {
@@ -835,7 +901,9 @@ export const requeueSubmissionBeforeInputApplied = mutation({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (
      submission === null ||
@@ -870,7 +938,9 @@ export const reserveSubmissionSettlement = mutation({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (submission === null) {
      return null;
@@ -901,12 +971,19 @@ export const reserveSubmissionSettlement = mutation({
 });
 export const finalizeSubmissionSettlement = mutation({
-  args: { ...tokenArgs, attemptId: v.string(), recordId: v.string(), submissionId: v.string() },
+  args: {
    ...tokenArgs,
    attemptId: v.string(),
    recordId: v.string(),
    submissionId: v.string(),
  },
  handler: async (ctx, args) => {
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (
      submission === null ||
@@ -940,7 +1017,9 @@ export const settleSubmission = mutation({
    assertToken(args.token);
    const submission = await ctx.db
      .query("flueSubmissions")
-      .withIndex("by_submissionId", (q) => q.eq("submissionId", args.submissionId))
+      .withIndex("by_submissionId", (q) =>
        q.eq("submissionId", args.submissionId)
      )
      .unique();
    if (
      submission === null ||
@@ -968,7 +1047,7 @@ export const insertAttemptMarker = mutation({
    const existing = await ctx.db
      .query("flueAttemptMarkers")
      .withIndex("by_submissionId_and_attemptId", (q) =>
-        q.eq("submissionId", args.submissionId).eq("attemptId", args.attemptId),
+        q.eq("submissionId", args.submissionId).eq("attemptId", args.attemptId)
      )
      .unique();
    if (existing !== null) {
@@ -994,7 +1073,7 @@ export const deleteAttemptMarker = mutation({
    const existing = await ctx.db
      .query("flueAttemptMarkers")
      .withIndex("by_submissionId_and_attemptId", (q) =>
-        q.eq("submissionId", args.submissionId).eq("attemptId", args.attemptId),
+        q.eq("submissionId", args.submissionId).eq("attemptId", args.attemptId)
      )
      .collect();
    for (const row of existing) {
@@ -1014,7 +1093,11 @@ export const listAttemptMarkers = query({
 });
 export const renewLeases = mutation({
-  args: { ...tokenArgs, ownerId: v.string(), submissionIds: v.array(v.string()) },
+  args: {
    ...tokenArgs,
    ownerId: v.string(),
    submissionIds: v.array(v.string()),
  },
  handler: async (ctx, args) => {
    assertToken(args.token);
    const wanted = new Set(args.submissionIds);
@@ -1046,7 +1129,7 @@ export const listExpiredSubmissions = query({
        (row) =>
          row.status === "running" &&
          row.leaseExpiresAt > 0 &&
-          row.leaseExpiresAt < now,
+          row.leaseExpiresAt < now
      )
      .sort((left, right) => left.sequence - right.sequence)
      .map(toSubmissionRow);
@@ -1065,7 +1148,7 @@ export const createConversationStream = mutation({
    if (existing !== null) {
      if (existing.identityJson !== identityJson) {
        throw new Error(
-          `[flue] Conversation stream "${args.path}" identity conflicts with the existing stream.`,
+          `[flue] Conversation stream "${args.path}" identity conflicts with the existing stream.`
        );
      }
      return;
@@ -1092,7 +1175,9 @@ export const acquireConversationProducer = mutation({
      .withIndex("by_path", (q) => q.eq("path", args.path))
      .unique();
    if (stream === null) {
-      throw new Error(`[flue] Conversation stream "${args.path}" does not exist.`);
+      throw new Error(
        `[flue] Conversation stream "${args.path}" does not exist.`
      );
    }
    const producerEpoch = stream.producerEpoch + 1;
    await ctx.db.patch(stream._id, {
@@ -1120,7 +1205,7 @@ export const appendConversationBatch = mutation({
    producerSequence: v.number(),
    recordsJson: v.string(),
    submission: v.optional(
-      v.object({ attemptId: v.string(), submissionId: v.string() }),
+      v.object({ attemptId: v.string(), submissionId: v.string() })
    ),
  },
  handler: async (ctx, args): Promise<AppendResult> => {
@@ -1128,7 +1213,7 @@ export const appendConversationBatch = mutation({
    const records = safeJsonParse<unknown[]>(args.recordsJson);
    if (records.length === 0) {
      throw new Error(
-        `[flue] Conversation stream "${args.path}" cannot append an empty canonical batch.`,
+        `[flue] Conversation stream "${args.path}" cannot append an empty canonical batch.`
      );
    }
    const stream = await ctx.db
@@ -1136,7 +1221,9 @@ export const appendConversationBatch = mutation({
      .withIndex("by_path", (q) => q.eq("path", args.path))
      .unique();
    if (stream === null) {
-      throw new Error(`[flue] Conversation stream "${args.path}" does not exist.`);
+      throw new Error(
        `[flue] Conversation stream "${args.path}" does not exist.`
      );
    }
    if (
      stream.producerId !== args.producerId ||
@@ -1144,7 +1231,7 @@ export const appendConversationBatch = mutation({
      stream.incarnation !== args.incarnation
    ) {
      throw new Error(
-        `[flue] Conversation stream "${args.path}" producer ownership is stale.`,
+        `[flue] Conversation stream "${args.path}" producer ownership is stale.`
      );
    }
    const existing = await ctx.db
@@ -1154,7 +1241,7 @@ export const appendConversationBatch = mutation({
          .eq("path", args.path)
          .eq("producerId", args.producerId)
          .eq("producerEpoch", args.producerEpoch)
-          .eq("producerSequence", args.producerSequence),
+          .eq("producerSequence", args.producerSequence)
      )
      .unique();
    if (existing !== null) {
@@ -1163,17 +1250,22 @@ export const appendConversationBatch = mutation({
        existing.attemptId === args.submission?.attemptId;
      if (!sameSubmission || existing.recordsJson !== args.recordsJson) {
        throw new Error(
-          `[flue] Conversation stream "${args.path}" producer sequence has conflicting content.`,
+          `[flue] Conversation stream "${args.path}" producer sequence has conflicting content.`
        );
      }
      return { appended: false, offset: existing.seq };
    }
    if (stream.nextProducerSequence !== args.producerSequence) {
      throw new Error(
-        `[flue] Conversation stream "${args.path}" producer sequence is not the next expected value.`,
+        `[flue] Conversation stream "${args.path}" producer sequence is not the next expected value.`
      );
    }
-    await assertSubmissionAuthorization(ctx, args.path, args.submission, args.recordsJson);
+    await assertSubmissionAuthorization(
      ctx,
      args.path,
      args.submission,
      args.recordsJson
    );
    const seq = stream.nextOffset;
    await ctx.db.insert("flueConversationBatches", {
      appendedAt: Date.now(),
@@ -1190,12 +1282,28 @@ export const appendConversationBatch = mutation({
      nextOffset: seq + 1,
      nextProducerSequence: stream.nextProducerSequence + 1,
    });
    // Projection is a disposable product view. Canonical persistence must win
    // even if a future projector record shape is malformed.
    try {
      await projectConversationRecords(
        ctx,
        args.recordsJson,
        args.submission?.submissionId
      );
    } catch {
      // The raw canonical batch above remains durable and replayable.
    }
    return { appended: true, offset: seq };
  },
 });
 export const readConversationBatches = query({
-  args: { ...tokenArgs, afterOffset: v.number(), limit: v.number(), path: v.string() },
+  args: {
    ...tokenArgs,
    afterOffset: v.number(),
    limit: v.number(),
    path: v.string(),
  },
  handler: async (ctx, args) => {
    assertToken(args.token);
    const stream = await ctx.db
@@ -1209,10 +1317,12 @@ export const readConversationBatches = query({
        upToDate: true,
      };
    }
-    const rows = (await ctx.db
+    const rows = (
-      .query("flueConversationBatches")
+      await ctx.db
-      .withIndex("by_path_and_seq", (q) => q.eq("path", args.path))
+        .query("flueConversationBatches")
-      .collect())
+        .withIndex("by_path_and_seq", (q) => q.eq("path", args.path))
        .collect()
    )
      .filter((row) => row.seq > args.afterOffset)
      .sort((left, right) => left.seq - right.seq);
    const page = rows.slice(0, args.limit);
@@ -1305,7 +1415,12 @@ export const appendEvent = mutation({
 });
 export const appendEventOnce = mutation({
-  args: { ...tokenArgs, dataJson: v.string(), key: v.string(), path: v.string() },
+  args: {
    ...tokenArgs,
    dataJson: v.string(),
    key: v.string(),
    path: v.string(),
  },
  handler: async (ctx, args): Promise<AppendResult> => {
    assertToken(args.token);
    const stream = await ctx.db
@@ -1321,13 +1436,13 @@ export const appendEventOnce = mutation({
    const existing = await ctx.db
      .query("flueEventEntries")
      .withIndex("by_path_and_onceKey", (q) =>
-        q.eq("path", args.path).eq("onceKey", args.key),
+        q.eq("path", args.path).eq("onceKey", args.key)
      )
      .unique();
    if (existing !== null) {
      if (existing.dataJson !== args.dataJson) {
        throw new Error(
-          `[flue] Event key "${args.key}" already has a conflicting payload.`,
+          `[flue] Event key "${args.key}" already has a conflicting payload.`
        );
      }
      return { appended: false, offset: existing.seq };
@@ -1346,7 +1461,12 @@ export const appendEventOnce = mutation({
 });
 export const readEvents = query({
-  args: { ...tokenArgs, afterOffset: v.number(), limit: v.number(), path: v.string() },
+  args: {
    ...tokenArgs,
    afterOffset: v.number(),
    limit: v.number(),
    path: v.string(),
  },
  handler: async (ctx, args) => {
    assertToken(args.token);
    const stream = await ctx.db
@@ -1361,10 +1481,12 @@ export const readEvents = query({
        upToDate: true,
      };
    }
-    const rows = (await ctx.db
+    const rows = (
-      .query("flueEventEntries")
+      await ctx.db
-      .withIndex("by_path_and_seq", (q) => q.eq("path", args.path))
+        .query("flueEventEntries")
-      .collect())
+        .withIndex("by_path_and_seq", (q) => q.eq("path", args.path))
        .collect()
    )
      .filter((row) => row.seq > args.afterOffset)
      .sort((left, right) => left.seq - right.seq);
    const page = rows.slice(0, args.limit);
@@ -1507,7 +1629,8 @@ export const listRuns = query({
      .filter(
        (row) =>
          (args.status === undefined || row.status === args.status) &&
-          (args.workflowName === undefined || row.workflowName === args.workflowName),
+          (args.workflowName === undefined ||
            row.workflowName === args.workflowName)
      )
      .sort(compareRunPointerDesc)
      .filter((row) => {
@@ -1540,7 +1663,9 @@ export const putAttachment = mutation({
    const existing = await ctx.db
      .query("flueAttachments")
      .withIndex("by_streamPath_and_attachmentId", (q) =>
-        q.eq("streamPath", args.streamPath).eq("attachmentId", args.attachment.id),
+        q
          .eq("streamPath", args.streamPath)
          .eq("attachmentId", args.attachment.id)
      )
      .unique();
    if (existing !== null) {
@@ -1576,7 +1701,7 @@ export const getAttachment = query({
        q
          .eq("streamPath", args.streamPath)
          .eq("conversationId", args.conversationId)
-          .eq("attachmentId", args.attachmentId),
+          .eq("attachmentId", args.attachmentId)
      )
      .unique();
    return attachment === null ? null : toAttachmentWire(attachment);
--- a/packages/backend/convex/gitConnectionData.ts
+++ b/packages/backend/convex/gitConnectionData.ts
@@ -0,0 +1,143 @@
 import { ConvexError, v } from "convex/values";
 import { internalMutation, mutation, query } from "./_generated/server";
 import { requireCurrentOrganization, requireProjectMember } from "./authz";
 // Provider ("forge") that owns a repository host. A project's source must be
 // served by the same forge whose credentials are attached, so a Gitea token is
 // never offered to GitHub and vice versa. Unknown hosts return null, leaving
 // the caller free to attach without a forge constraint.
 export const forgeForHost = (host: string): "github" | "gitea" | null => {
  const normalized = host.toLowerCase();
  if (normalized === "github.com" || normalized.endsWith(".githost.com")) {
    return "github";
  }
  if (normalized === "git.openputer.com") {
    return "gitea";
  }
  return null;
 };
 export const persist = internalMutation({
  args: {
    credentialCiphertext: v.string(),
    credentialIv: v.string(),
    credentialKind: v.union(v.literal("oauth"), v.literal("token")),
    provider: v.union(v.literal("github"), v.literal("gitea")),
    serverUrl: v.string(),
    userId: v.string(),
    username: v.optional(v.string()),
  },
  handler: async (ctx, args) => {
    const organization = await ctx.db
      .query("organizations")
      .withIndex("by_createdBy_and_kind", (q) =>
        q.eq("createdBy", args.userId).eq("kind", "personal")
      )
      .unique();
    if (!organization) {
      throw new ConvexError("Organization not found");
    }
    const existing = await ctx.db
      .query("gitConnections")
      .withIndex("by_organizationId_and_provider_and_serverUrl", (q) =>
        q
          .eq("organizationId", organization._id)
          .eq("provider", args.provider)
          .eq("serverUrl", args.serverUrl)
      )
      .unique();
    const timestamp = Date.now();
    if (existing) {
      await ctx.db.patch(existing._id, {
        credentialCiphertext: args.credentialCiphertext,
        credentialIv: args.credentialIv,
        credentialKind: args.credentialKind,
        updatedAt: timestamp,
        username: args.username,
      });
      return existing._id;
    }
    return await ctx.db.insert("gitConnections", {
      connectedAt: timestamp,
      credentialCiphertext: args.credentialCiphertext,
      credentialIv: args.credentialIv,
      credentialKind: args.credentialKind,
      organizationId: organization._id,
      provider: args.provider,
      serverUrl: args.serverUrl,
      updatedAt: timestamp,
      username: args.username,
    });
  },
 });
 export const list = query({
  args: {},
  handler: async (ctx) => {
    const { organizationId } = await requireCurrentOrganization(ctx);
    const connections = await ctx.db
      .query("gitConnections")
      .withIndex("by_organizationId", (q) =>
        q.eq("organizationId", organizationId)
      )
      .collect();
    return connections.map((connection) => ({
      connectedAt: connection.connectedAt,
      credentialKind: connection.credentialKind,
      id: String(connection._id),
      provider: connection.provider,
      serverUrl: connection.serverUrl,
      username: connection.username,
    }));
  },
 });
 export const getForProject = query({
  args: { projectId: v.id("projects") },
  handler: async (ctx, args) => {
    await requireProjectMember(ctx, args.projectId);
    const project = await ctx.db.get(args.projectId);
    const connection = project?.gitConnectionId
      ? await ctx.db.get(project.gitConnectionId)
      : null;
    return connection
      ? {
          connectedAt: connection.connectedAt,
          credentialKind: connection.credentialKind,
          id: String(connection._id),
          provider: connection.provider,
          serverUrl: connection.serverUrl,
          username: connection.username,
        }
      : null;
  },
 });
 export const attachToProject = mutation({
  args: {
    connectionId: v.id("gitConnections"),
    projectId: v.id("projects"),
  },
  handler: async (ctx, args) => {
    const { organizationId } = await requireProjectMember(ctx, args.projectId);
    const connection = await ctx.db.get(args.connectionId);
    if (!connection || connection.organizationId !== organizationId) {
      throw new ConvexError("Git connection not found");
    }
    const project = await ctx.db.get(args.projectId);
    if (project) {
      const expected = forgeForHost(project.sourceHost);
      if (expected && connection.provider !== expected) {
        throw new ConvexError(
          `Git credential provider (${connection.provider}) does not match this project's forge (${expected})`
        );
      }
    }
    await ctx.db.patch(args.projectId, {
      gitConnectionId: connection._id,
      updatedAt: Date.now(),
    });
    return { attached: true };
  },
 });
--- a/packages/backend/convex/gitConnections.ts
+++ b/packages/backend/convex/gitConnections.ts
@@ -0,0 +1,124 @@
 "use node";
 import { env } from "@code/env/convex";
 import { decodeGitConnectionInput } from "@code/primitives/execution-runtime";
 import { ConvexError, v } from "convex/values";
 import { Effect } from "effect";
 import { internal } from "./_generated/api";
 import type { Id } from "./_generated/dataModel";
 import { action } from "./_generated/server";
 import { authComponent, createAuth } from "./auth";
 const encryptionKey = async (): Promise<CryptoKey> => {
  if (!env.GIT_CREDENTIAL_ENCRYPTION_KEY) {
    throw new ConvexError("Git credential encryption is not configured");
  }
  const bytes = Buffer.from(env.GIT_CREDENTIAL_ENCRYPTION_KEY, "base64url");
  if (bytes.byteLength !== 32) {
    throw new ConvexError("Git credential encryption key must be 32 bytes");
  }
  return await crypto.subtle.importKey("raw", bytes, "AES-GCM", false, [
    "encrypt",
    "decrypt",
  ]);
 };
 const encryptCredential = async (credential: string) => {
  const iv = crypto.getRandomValues(new Uint8Array(12));
  const encrypted = await crypto.subtle.encrypt(
    { iv, name: "AES-GCM" },
    await encryptionKey(),
    new TextEncoder().encode(credential)
  );
  return {
    credentialCiphertext: Buffer.from(encrypted).toString("base64url"),
    credentialIv: Buffer.from(iv).toString("base64url"),
  };
 };
 export const decryptCredential = async (
  credentialCiphertext: string,
  credentialIv: string
 ): Promise<string> => {
  const decrypted = await crypto.subtle.decrypt(
    {
      iv: Buffer.from(credentialIv, "base64url"),
      name: "AES-GCM",
    },
    await encryptionKey(),
    Buffer.from(credentialCiphertext, "base64url")
  );
  return new TextDecoder().decode(decrypted);
 };
 export const connectGitea = action({
  args: {
    serverUrl: v.string(),
    token: v.string(),
    username: v.optional(v.string()),
  },
  handler: async (
    ctx,
    args
  ): Promise<{ connectionId: Id<"gitConnections"> }> => {
    const userId = await ctx.auth.getUserIdentity().then((identity) => {
      if (!identity) {
        throw new ConvexError("Authentication required");
      }
      return identity.tokenIdentifier;
    });
    const connection = await Effect.runPromise(
      decodeGitConnectionInput({
        credential: args.token,
        credentialKind: "token",
        provider: "gitea",
        serverUrl: args.serverUrl,
        username: args.username,
      })
    );
    const encrypted = await encryptCredential(connection.credential);
    const connectionId = await ctx.runMutation(
      internal.gitConnectionData.persist,
      {
        ...encrypted,
        credentialKind: connection.credentialKind,
        provider: connection.provider,
        serverUrl: connection.serverUrl,
        userId,
        username: connection.username,
      }
    );
    return { connectionId };
  },
 });
 export const connectGithub = action({
  args: {},
  handler: async (ctx): Promise<{ connectionId: Id<"gitConnections"> }> => {
    const identity = await ctx.auth.getUserIdentity();
    if (!identity) {
      throw new ConvexError("Authentication required");
    }
    const { auth, headers } = await authComponent.getAuth(createAuth, ctx);
    const token = await auth.api.getAccessToken({
      body: { providerId: "github" },
      headers,
    });
    if (!token.accessToken) {
      throw new ConvexError("GitHub account is not connected");
    }
    const encrypted = await encryptCredential(token.accessToken);
    const connectionId = await ctx.runMutation(
      internal.gitConnectionData.persist,
      {
        ...encrypted,
        credentialKind: "oauth",
        provider: "github",
        serverUrl: "https://github.com",
        userId: identity.tokenIdentifier,
      }
    );
    return { connectionId };
  },
 });
--- a/packages/backend/convex/schema.ts
+++ b/packages/backend/convex/schema.ts
@@ -44,10 +44,28 @@ export default defineSchema({
    .index("by_userId", ["userId"])
    .index("by_organizationId", ["organizationId"])
    .index("by_organizationId_and_userId", ["organizationId", "userId"]),
  gitConnections: defineTable({
    connectedAt: v.number(),
    credentialCiphertext: v.string(),
    credentialIv: v.string(),
    credentialKind: v.union(v.literal("oauth"), v.literal("token")),
    organizationId: v.id("organizations"),
    provider: v.union(v.literal("github"), v.literal("gitea")),
    serverUrl: v.string(),
    updatedAt: v.number(),
    username: v.optional(v.string()),
  })
    .index("by_organizationId", ["organizationId"])
    .index("by_organizationId_and_provider_and_serverUrl", [
      "organizationId",
      "provider",
      "serverUrl",
    ]),
  projects: defineTable({
    createdAt: v.number(),
    defaultBranch: v.optional(v.string()),
    description: v.optional(v.string()),
    gitConnectionId: v.optional(v.id("gitConnections")),
    name: v.string(),
    normalizedSourceUrl: v.string(),
    organizationId: v.id("organizations"),
@@ -93,9 +111,11 @@ export default defineSchema({
    leaseOwner: v.optional(v.string()),
    status: v.union(
      v.literal("queued"),
-      v.literal("processing"),
+      v.literal("dispatching"),
      v.literal("running"),
      v.literal("completed"),
-      v.literal("failed")
+      v.literal("failed"),
      v.literal("aborted")
    ),
    submissionId: v.optional(v.string()),
  })
@@ -103,7 +123,8 @@ export default defineSchema({
      "conversationId",
      "clientRequestId",
    ])
-    .index("by_status_and_leaseExpiresAt", ["status", "leaseExpiresAt"]),
+    .index("by_status_and_leaseExpiresAt", ["status", "leaseExpiresAt"])
    .index("by_submissionId", ["submissionId"]),
  conversationMessages: defineTable({
    content: v.string(),
    conversationId: v.id("conversations"),
@@ -314,11 +335,17 @@ export default defineSchema({
    ]),
  workRuns: defineTable({
    baseRevision: v.optional(v.string()),
    candidateRevision: v.optional(v.string()),
    createdAt: v.number(),
    designVersion: v.optional(v.number()),
    endedAt: v.optional(v.number()),
    kitId: v.string(),
    kitVersion: v.string(),
    environmentId: v.optional(v.string()),
    executionKind: v.optional(
      v.union(v.literal("simulated"), v.literal("real"))
    ),
    scenario: v.union(
      v.literal("success"),
      v.literal("transient-failure-then-success"),
@@ -337,11 +364,23 @@ export default defineSchema({
    ),
    terminalClassification: v.optional(attemptClassification),
    terminalSummary: v.optional(v.string()),
    workflowId: v.optional(v.string()),
    workId: v.id("works"),
  }).index("by_work_and_createdAt", ["workId", "createdAt"]),
  workAttempts: defineTable({
    classification: v.optional(attemptClassification),
    failureReason: v.optional(
      v.union(
        v.literal("Authentication"),
        v.literal("Cancelled"),
        v.literal("HarnessFailed"),
        v.literal("InvalidInput"),
        v.literal("ProviderUnavailable"),
        v.literal("RepositoryFailed"),
        v.literal("Timeout")
      )
    ),
    endedAt: v.optional(v.number()),
    leaseExpiresAt: v.optional(v.number()),
    leaseOwner: v.optional(v.string()),
@@ -356,6 +395,7 @@ export default defineSchema({
    ),
    summary: v.optional(v.string()),
    workId: v.id("works"),
    workspaceKey: v.optional(v.string()),
  })
    .index("by_runId_and_number", ["runId", "number"])
    .index("by_status_and_leaseExpiresAt", ["status", "leaseExpiresAt"]),
--- a/packages/backend/convex/signalRouting.test.ts
+++ b/packages/backend/convex/signalRouting.test.ts
@@ -42,7 +42,7 @@ describe("signalRouting", () => {
        clientRequestId: "request-1",
        conversationId,
        createdAt: 1,
-        status: "processing",
+        status: "running",
      });
      const messageId = await ctx.db.insert("conversationMessages", {
        content: "Fix the deploy",
--- a/packages/backend/convex/signalRouting.ts
+++ b/packages/backend/convex/signalRouting.ts
@@ -60,7 +60,7 @@ export const listEvidence = query({
        continue;
      }
      const turn = await ctx.db.get(message.turnId);
-      if (!turn || !["processing", "completed"].includes(turn.status)) {
+      if (!turn || !["running", "completed"].includes(turn.status)) {
        continue;
      }
      const consumed = await ctx.db
@@ -131,7 +131,7 @@ export const createSignal = mutation({
        throw new ConvexError(`Source message not found: ${messageId}`);
      }
      const turn = await ctx.db.get(message.turnId);
-      if (!turn || !["processing", "completed"].includes(turn.status)) {
+      if (!turn || !["running", "completed"].includes(turn.status)) {
        throw new ConvexError(`Source message is not admitted: ${messageId}`);
      }
      messages.push(message);
--- a/packages/backend/convex/workExecutionAgent.ts
+++ b/packages/backend/convex/workExecutionAgent.ts
@@ -0,0 +1,97 @@
 "use node";
 import { env } from "@code/env/convex";
 import {
  WorkAttemptExecutionError,
  decodeWorkAttemptExecutionFailure,
  decodeWorkAttemptExecutionResult,
 } from "@code/primitives/execution-runtime";
 import { ConvexError, v } from "convex/values";
 import { Effect } from "effect";
 import { internal } from "./_generated/api";
 import { internalAction } from "./_generated/server";
 import { decryptCredential } from "./gitConnections";
 const backendUrl = () => env.AGENT_BACKEND_URL ?? env.FLUE_URL;
 export const executeAttempt = internalAction({
  args: { attemptId: v.id("workAttempts") },
  handler: async (ctx, args) => {
    const running = await ctx.runMutation(
      internal.workExecutionWorkflow.markAttemptRunning,
      args
    );
    if (!running) {
      throw new ConvexError("Attempt is no longer runnable");
    }
    const context = await ctx.runQuery(
      internal.workExecutionWorkflow.executionContext,
      args
    );
    const credential = await decryptCredential(
      context.connection.credentialCiphertext,
      context.connection.credentialIv
    );
    const response = await fetch(
      `${backendUrl()}/internal/work-attempts/execute`,
      {
        body: JSON.stringify({
          attemptId: String(context.attempt._id),
          auth: {
            credential,
            provider: context.connection.provider,
            serverUrl: context.connection.serverUrl,
            username: context.connection.username,
          },
          baseBranch: context.project.defaultBranch ?? "main",
          prompt: context.prompt,
          repositoryUrl: context.project.sourceUrl,
          runId: String(context.run._id),
          workId: String(context.work._id),
          workspaceKey: context.attempt.workspaceKey,
        }),
        headers: {
          authorization: `Bearer ${env.FLUE_DB_TOKEN}`,
          "content-type": "application/json",
        },
        method: "POST",
      }
    );
    const payload = (await response.json()) as unknown;
    if (!response.ok) {
      // Decode the agent's classified failure envelope and re-throw as the
      // typed runtime error so the workflow handler maps reason/retryable to
      // a durable attempt classification. A malformed envelope falls back to
      // an InvalidInput failure (non-retryable).
      const failure = await Effect.runPromise(
        decodeWorkAttemptExecutionFailure(payload)
      );
      throw new WorkAttemptExecutionError(failure.error);
    }
    return await Effect.runPromise(decodeWorkAttemptExecutionResult(payload));
  },
 });
 export const cancelAttempt = internalAction({
  args: {
    attemptId: v.string(),
    workspaceKey: v.string(),
  },
  handler: async (_ctx, args) => {
    // The workspace key remains the URL path segment (workspace identity),
    // while the body carries the attemptId so the runtime can target the
    // matching Pi ACP session for cancellation.
    await fetch(
      `${backendUrl()}/internal/work-attempts/${encodeURIComponent(args.workspaceKey)}/cancel`,
      {
        body: JSON.stringify({ attemptId: args.attemptId }),
        headers: {
          authorization: `Bearer ${env.FLUE_DB_TOKEN}`,
          "content-type": "application/json",
        },
        method: "POST",
      }
    );
  },
 });
--- a/packages/backend/convex/workExecutionWorkflow.test.ts
+++ b/packages/backend/convex/workExecutionWorkflow.test.ts
@@ -0,0 +1,381 @@
 import { convexTest } from "convex-test";
 import { anyApi } from "convex/server";
 import { describe, expect, test } from "vitest";
 import schema from "./schema";
 const modules = import.meta.glob("./**/*.ts");
 const api = anyApi;
 type TestContext = ReturnType<typeof convexTest>;
 interface Seeded {
  attemptId: string;
  runId: string;
  t: TestContext;
  workId: string;
 }
 // Seed an in-flight real attempt so each mutation under test starts from a
 // realistic running state: Work "executing", Run "running", Attempt "running".
 const seedRunningAttempt = async (
  overrides: {
    attemptStatus?: "queued" | "claimed" | "running" | "terminal";
    runStatus?: "ready" | "running" | "terminal" | "cancelled";
  } = {}
 ): Promise<Seeded> => {
  const t = convexTest({ modules, schema });
  const seeded = await t.run(async (ctx) => {
    const organizationId = await ctx.db.insert("organizations", {
      createdAt: 1,
      createdBy: "user",
      kind: "personal",
      name: "Personal",
    });
    const projectId = await ctx.db.insert("projects", {
      createdAt: 1,
      name: "Zopu",
      normalizedSourceUrl: "https://github.com/puter/zopu",
      organizationId,
      repositoryPath: "puter/zopu",
      sourceHost: "github.com",
      sourceUrl: "https://github.com/puter/zopu",
      updatedAt: 1,
    });
    const workId = await ctx.db.insert("works", {
      createdAt: 1,
      objective: "Implement a real slice",
      organizationId,
      projectId,
      status: "executing",
      title: "Real execution",
      updatedAt: 1,
    });
    const sliceRowId = await ctx.db.insert("workSlices", {
      designVersion: 1,
      objective: "Change the repo",
      observableBehavior: "A diff exists",
      ordinal: 0,
      payloadJson: "{}",
      sliceId: "slice-1",
      status: "running",
      title: "Implementation",
      workId,
    });
    const runId = await ctx.db.insert("workRuns", {
      createdAt: 1,
      designVersion: 1,
      executionKind: "real",
      kitId: "coding-v0",
      kitVersion: "1",
      scenario: "success",
      sliceId: "slice-1",
      sliceRowId,
      status: overrides.runStatus ?? "running",
      workId,
    });
    const attemptId = await ctx.db.insert("workAttempts", {
      number: 1,
      runId,
      status: overrides.attemptStatus ?? "running",
      workId,
      workspaceKey: "workspace-1",
    });
    return { attemptId, runId, workId };
  });
  return { ...seeded, t };
 };
 const successResult = {
  baseRevision: "base123",
  candidateRevision: "candidate456",
  changedFiles: ["src/index.ts"],
  diff: "+export const ready = true;",
  environmentId: "workspace-1",
  events: [
    {
      kind: "runtime.completed",
      message: "completed",
      metadata: {},
      occurredAt: 2,
      sequence: 0,
    },
  ],
  summary: "Changed one file",
 };
 describe("real work execution persistence", () => {
  test("records revisions, activity, diff, and terminal state atomically", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    await t.mutation(api.workExecutionWorkflow.completeAttempt, {
      attemptId: seeded.attemptId,
      result: successResult,
    });
    const state = await t.run(async (ctx) => ({
      artifacts: await ctx.db.query("workArtifacts").collect(),
      attempt: await ctx.db.get(seeded.attemptId as any),
      run: await ctx.db.get(seeded.runId as any),
      work: await ctx.db.get(seeded.workId as any),
    }));
    expect(state.attempt?.classification).toBe("Succeeded");
    expect(state.run).toMatchObject({
      baseRevision: "base123",
      candidateRevision: "candidate456",
      terminalClassification: "Succeeded",
    });
    expect(state.work?.status).toBe("completed");
    expect(state.artifacts[0]).toMatchObject({
      kind: "diff",
      sourceRevision: "candidate456",
    });
  });
 });
 describe("classified failure mapping", () => {
  test("maps a transient runtime reason to a retryable classification", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    await t.mutation(api.workExecutionWorkflow.failAttempt, {
      attemptId: seeded.attemptId,
      reason: "ProviderUnavailable",
      retryable: true,
      summary: "model provider timed out",
    });
    const attempt = await t.run((ctx) => ctx.db.get(seeded.attemptId as any));
    expect(attempt?.classification).toBe("RetryableFailure");
    expect(attempt?.failureReason).toBe("ProviderUnavailable");
  });
  test("queues a new attempt without terminalizing a retryable run", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    await t.mutation(api.workExecutionWorkflow.failAttempt, {
      attemptId: seeded.attemptId,
      reason: "ProviderUnavailable",
      retryable: true,
      summary: "provider unavailable",
    });
    const state = await t.run(async (ctx) => ({
      attempts: await ctx.db.query("workAttempts").collect(),
      run: await ctx.db.get(seeded.runId as any),
      work: await ctx.db.get(seeded.workId as any),
    }));
    expect(state.attempts).toHaveLength(2);
    expect(state.attempts[1]).toMatchObject({
      number: 2,
      status: "queued",
      workspaceKey: "workspace-1",
    });
    expect(state.run?.status).toBe("running");
    expect(state.work?.status).toBe("executing");
  });
  test("maps an authentication reason to a permanent failure", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    await t.mutation(api.workExecutionWorkflow.failAttempt, {
      attemptId: seeded.attemptId,
      reason: "Authentication",
      retryable: false,
      summary: "token rejected",
    });
    const state = await t.run(async (ctx) => ({
      attempt: await ctx.db.get(seeded.attemptId as any),
      run: await ctx.db.get(seeded.runId as any),
      work: await ctx.db.get(seeded.workId as any),
    }));
    expect(state.attempt?.classification).toBe("PermanentFailure");
    expect(state.attempt?.failureReason).toBe("Authentication");
    expect(state.run?.terminalClassification).toBe("PermanentFailure");
    expect(state.work?.status).toBe("failed");
  });
 });
 describe("cancellation fencing", () => {
  test("a cancelled attempt cannot later settle success", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    // Simulate cancellation marking the attempt/run terminal as Cancelled.
    await t.run(async (ctx) => {
      await ctx.db.patch(seeded.attemptId as any, {
        classification: "Cancelled",
        endedAt: 5,
        status: "terminal",
        summary: "Execution cancelled",
      });
      await ctx.db.patch(seeded.runId as any, {
        endedAt: 5,
        status: "cancelled",
        terminalClassification: "Cancelled",
        terminalSummary: "Execution cancelled",
      });
    });
    // A late-arriving completion must be ignored.
    await t.mutation(api.workExecutionWorkflow.completeAttempt, {
      attemptId: seeded.attemptId,
      result: successResult,
    });
    const attempt = await t.run((ctx) => ctx.db.get(seeded.attemptId as any));
    expect(attempt?.classification).toBe("Cancelled");
    expect(attempt?.status).toBe("terminal");
  });
  test("a late failure does not overwrite a cancelled run", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    await t.run(async (ctx) => {
      await ctx.db.patch(seeded.attemptId as any, {
        classification: "Cancelled",
        endedAt: 5,
        status: "terminal",
      });
      await ctx.db.patch(seeded.runId as any, { status: "cancelled" });
    });
    await t.mutation(api.workExecutionWorkflow.failAttempt, {
      attemptId: seeded.attemptId,
      reason: "HarnessFailed",
      retryable: true,
      summary: "late failure",
    });
    const attempt = await t.run((ctx) => ctx.db.get(seeded.attemptId as any));
    expect(attempt?.classification).toBe("Cancelled");
  });
 });
 describe("empty-change rejection", () => {
  test("a no-op result with no changed files fails as permanent", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    await t.mutation(api.workExecutionWorkflow.completeAttempt, {
      attemptId: seeded.attemptId,
      result: {
        ...successResult,
        changedFiles: [],
        candidateRevision: "base123",
      },
    });
    const state = await t.run(async (ctx) => ({
      attempt: await ctx.db.get(seeded.attemptId as any),
      work: await ctx.db.get(seeded.workId as any),
    }));
    expect(state.attempt?.classification).toBe("PermanentFailure");
    expect(state.attempt?.failureReason).toBe("InvalidInput");
    expect(state.work?.status).toBe("failed");
  });
  test("identical base and candidate revisions are rejected", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    await t.mutation(api.workExecutionWorkflow.completeAttempt, {
      attemptId: seeded.attemptId,
      result: {
        ...successResult,
        baseRevision: "same",
        candidateRevision: "same",
      },
    });
    const attempt = await t.run((ctx) => ctx.db.get(seeded.attemptId as any));
    expect(attempt?.classification).toBe("PermanentFailure");
  });
 });
 describe("attempt re-entry", () => {
  test("markAttemptRunning re-claims an already-running attempt", async () => {
    const { t, ...seeded } = await seedRunningAttempt();
    // First claim (already "running" from seed) must still succeed so a
    // workflow replay can re-enter the same live attempt.
    const first = await t.mutation(
      api.workExecutionWorkflow.markAttemptRunning,
      { attemptId: seeded.attemptId }
    );
    expect(first).toBe(true);
    const attempt = await t.run((ctx) => ctx.db.get(seeded.attemptId as any));
    expect(attempt?.status).toBe("running");
    expect(attempt?.leaseExpiresAt).toBeGreaterThan(0);
  });
  test("a terminal attempt is not re-runnable", async () => {
    const { t, ...seeded } = await seedRunningAttempt({
      attemptStatus: "terminal",
    });
    const result = await t.mutation(
      api.workExecutionWorkflow.markAttemptRunning,
      { attemptId: seeded.attemptId }
    );
    expect(result).toBe(false);
  });
  test("a cancelled run cannot re-enter a queued attempt", async () => {
    const { t, ...seeded } = await seedRunningAttempt({
      attemptStatus: "queued",
      runStatus: "cancelled",
    });
    const result = await t.mutation(
      api.workExecutionWorkflow.markAttemptRunning,
      { attemptId: seeded.attemptId }
    );
    expect(result).toBe(false);
    const attempt = await t.run((ctx) => ctx.db.get(seeded.attemptId as any));
    expect(attempt?.status).toBe("queued");
  });
 });
 describe("forge credential validation", () => {
  const identity = { tokenIdentifier: "https://convex.test|forge-user" };
  const seedForgableProject = async (
    provider: "github" | "gitea",
    sourceHost: string
  ) => {
    const t = convexTest({ modules, schema }).withIdentity(identity);
    const ids = await t.run(async (ctx) => {
      const organizationId = await ctx.db.insert("organizations", {
        createdAt: 1,
        createdBy: identity.tokenIdentifier,
        kind: "personal",
        name: "Personal",
      });
      await ctx.db.insert("organizationMembers", {
        createdAt: 1,
        organizationId,
        role: "owner",
        userId: identity.tokenIdentifier,
      });
      const projectId = await ctx.db.insert("projects", {
        createdAt: 1,
        name: "Zopu",
        normalizedSourceUrl: `https://${sourceHost}/puter/zopu`,
        organizationId,
        repositoryPath: "puter/zopu",
        sourceHost,
        sourceUrl: `https://${sourceHost}/puter/zopu`,
        updatedAt: 1,
      });
      const connectionId = await ctx.db.insert("gitConnections", {
        connectedAt: 1,
        credentialCiphertext: "x",
        credentialIv: "y",
        credentialKind: provider === "github" ? "oauth" : "token",
        organizationId,
        provider,
        serverUrl: `https://${sourceHost}`,
        updatedAt: 1,
        username: "zopu",
      });
      return { connectionId, projectId };
    });
    return { t, ids };
  };
  test("rejects a git connection whose provider mismatches the project forge", async () => {
    // Gitea token attached to a GitHub-hosted project.
    const { t, ids } = await seedForgableProject("gitea", "github.com");
    await expect(
      t.mutation(api.gitConnectionData.attachToProject, {
        connectionId: ids.connectionId,
        projectId: ids.projectId,
      })
    ).rejects.toThrow(/does not match this project's forge/u);
  });
  test("accepts a matching provider for the project forge", async () => {
    const { t, ids } = await seedForgableProject("github", "github.com");
    const result = await t.mutation(api.gitConnectionData.attachToProject, {
      connectionId: ids.connectionId,
      projectId: ids.projectId,
    });
    expect(result).toMatchObject({ attached: true });
  });
 });
--- a/packages/backend/convex/workExecutionWorkflow.ts
+++ b/packages/backend/convex/workExecutionWorkflow.ts
@@ -0,0 +1,632 @@
 import { WorkAttemptExecutionError } from "@code/primitives/execution-runtime";
 import type { WorkAttemptExecutionErrorReason } from "@code/primitives/execution-runtime";
 import { defaultCodingKitV0, resolveOutcome } from "@code/primitives/resolver";
 import type { AttemptClassification } from "@code/primitives/resolver";
 import { WorkflowManager } from "@convex-dev/workflow";
 import type { WorkflowId } from "@convex-dev/workflow";
 import { ConvexError, v } from "convex/values";
 import { components, internal } from "./_generated/api";
 import type { Doc, Id } from "./_generated/dataModel";
 import { internalMutation, internalQuery, mutation } from "./_generated/server";
 import type { MutationCtx } from "./_generated/server";
 import { requireProjectMember } from "./authz";
 import { forgeForHost } from "./gitConnectionData";
 export const workflow = new WorkflowManager(components.workflow);
 // Lease window for a running real attempt. Long enough to outlast a single
 // agent turn; the workflow's own retry/lease reconciliation covers crashes.
 const LEASE_MS = 5 * 60_000;
 // Runtime failure reason -> durable attempt classification. The Convex
 // workflow stores classifications, not provider-specific reasons, so the
 // resolver and Work lifecycle stay forge-agnostic. `retryable` from the
 // runtime is carried alongside and consulted by the kit retry policy.
 const FAILURE_REASON_CLASSIFICATION = {
  Authentication: "PermanentFailure",
  Cancelled: "Cancelled",
  HarnessFailed: "RetryableFailure",
  InvalidInput: "PermanentFailure",
  ProviderUnavailable: "RetryableFailure",
  RepositoryFailed: "PermanentFailure",
  Timeout: "RetryableFailure",
 } as const satisfies Record<
  WorkAttemptExecutionErrorReason,
  AttemptClassification
 >;
 export const classifyFailure = (
  reason: WorkAttemptExecutionErrorReason
 ): AttemptClassification => FAILURE_REASON_CLASSIFICATION[reason];
 // Normalize an error thrown from the agent action into the durable failure
 // triple (reason/retryable/summary). WorkAttemptExecutionError is the
 // classified runtime failure; anything else is a Convex/infrastructure error
 // treated as a transient HarnessFailed so the workflow retry policy decides.
 const toExecutionFailure = (
  error: unknown
 ): {
  message: string;
  reason: WorkAttemptExecutionErrorReason;
  retryable: boolean;
 } =>
  error instanceof WorkAttemptExecutionError
    ? {
        message: error.message,
        reason: error.reason,
        retryable: error.retryable,
      }
    : {
        message: error instanceof Error ? error.message : "Execution failed",
        reason: "HarnessFailed",
        retryable: true,
      };
 const failureReasonValues = v.union(
  v.literal("Authentication"),
  v.literal("Cancelled"),
  v.literal("HarnessFailed"),
  v.literal("InvalidInput"),
  v.literal("ProviderUnavailable"),
  v.literal("RepositoryFailed"),
  v.literal("Timeout")
 );
 const resolveReadySlice = async (
  ctx: MutationCtx,
  work: Doc<"works">,
  sliceId?: string
 ) => {
  if (work.designVersion === undefined) {
    throw new ConvexError("Work has no approved Design to execute");
  }
  const slices = await ctx.db
    .query("workSlices")
    .withIndex("by_workId_and_designVersion", (q) =>
      q.eq("workId", work._id).eq("designVersion", work.designVersion!)
    )
    .collect();
  const slice = sliceId
    ? slices.find((candidate) => candidate.sliceId === sliceId)
    : slices
        .sort((left, right) => left.ordinal - right.ordinal)
        .find((candidate) => candidate.status === "ready");
  if (!slice || slice.status !== "ready") {
    throw new ConvexError("Only the next ready slice can be executed");
  }
  return slice;
 };
 // Deployment prerequisite gate for real execution. Rejects before any
 // workflow/sandbox starts when the project lacks an attached, forge-matched
 // Git connection with a cloneable source URL and default branch. Returns the
 // validated connection so the caller can pass it to the agent unchanged.
 const validateProjectDeployment = async (
  ctx: MutationCtx,
  work: Doc<"works">
 ): Promise<Doc<"gitConnections">> => {
  const project = await ctx.db.get(work.projectId);
  if (!project) {
    throw new ConvexError("Project not found");
  }
  if (!project.gitConnectionId) {
    throw new ConvexError("Connect Git credentials to this project first");
  }
  const connection = await ctx.db.get(project.gitConnectionId);
  if (!connection) {
    throw new ConvexError("Git connection not found");
  }
  const expected = forgeForHost(project.sourceHost);
  if (expected && connection.provider !== expected) {
    throw new ConvexError(
      `Git credential provider (${connection.provider}) does not match this project's forge (${expected})`
    );
  }
  return connection;
 };
 export const execute = workflow
  .define({ args: { attemptId: v.id("workAttempts") } })
  .handler(async (step, args): Promise<void> => {
    try {
      const result = await step.runAction(
        internal.workExecutionAgent.executeAttempt,
        args,
        { retry: true }
      );
      await step.runMutation(internal.workExecutionWorkflow.completeAttempt, {
        attemptId: args.attemptId,
        result: {
          ...result,
          changedFiles: [...result.changedFiles],
          events: result.events.map((item) => ({
            ...item,
            metadata: { ...item.metadata },
          })),
        },
      });
    } catch (error) {
      const failure = toExecutionFailure(error);
      await step.runMutation(internal.workExecutionWorkflow.failAttempt, {
        attemptId: args.attemptId,
        reason: failure.reason,
        retryable: failure.retryable,
        summary: failure.message,
      });
    }
  });
 export const startExecution = mutation({
  args: {
    sliceId: v.optional(v.string()),
    workId: v.id("works"),
  },
  handler: async (
    ctx,
    args
  ): Promise<{
    attemptId: Id<"workAttempts">;
    runId: Id<"workRuns">;
    workflowId: WorkflowId;
  }> => {
    const work = await ctx.db.get(args.workId);
    if (!work) {
      throw new ConvexError("Work not found");
    }
    await requireProjectMember(ctx, work.projectId);
    if (work.status !== "ready") {
      throw new ConvexError("Work must be Ready before execution");
    }
    if (
      work.definitionApprovalVersion !== work.definitionVersion ||
      work.designApprovalVersion !== work.designVersion
    ) {
      throw new ConvexError("Execution requires exact approved versions");
    }
    await validateProjectDeployment(ctx, work);
    const slice = await resolveReadySlice(ctx, work, args.sliceId);
    const createdAt = Date.now();
    const runId = await ctx.db.insert("workRuns", {
      createdAt,
      designVersion: slice.designVersion,
      executionKind: "real",
      kitId: defaultCodingKitV0.id,
      kitVersion: defaultCodingKitV0.version,
      scenario: "success",
      sliceId: slice.sliceId,
      sliceRowId: slice._id,
      status: "running",
      workId: work._id,
    });
    const workspaceKey = `work-${work._id}-run-${runId}`;
    const attemptId = await ctx.db.insert("workAttempts", {
      number: 1,
      runId,
      status: "queued",
      workId: work._id,
      workspaceKey,
    });
    const workflowId: WorkflowId = await workflow.start(
      ctx,
      internal.workExecutionWorkflow.execute,
      { attemptId }
    );
    await ctx.db.patch(runId, { startedAt: createdAt, workflowId });
    await ctx.db.patch(slice._id, { status: "running" });
    await ctx.db.patch(work._id, { status: "executing", updatedAt: createdAt });
    await ctx.db.insert("workEvents", {
      createdAt,
      idempotencyKey: `real-run-started:${runId}`,
      kind: "run.started",
      referenceId: String(runId),
      workId: work._id,
    });
    return { attemptId, runId, workflowId };
  },
 });
 export const executionContext = internalQuery({
  args: { attemptId: v.id("workAttempts") },
  handler: async (ctx, args) => {
    const attempt = await ctx.db.get(args.attemptId);
    if (!attempt) {
      throw new ConvexError("Attempt not found");
    }
    const run = await ctx.db.get(attempt.runId);
    const work = await ctx.db.get(attempt.workId);
    if (!run || !work || !run.sliceRowId) {
      throw new ConvexError("Execution records are incomplete");
    }
    const [slice, project] = await Promise.all([
      ctx.db.get(run.sliceRowId),
      ctx.db.get(work.projectId),
    ]);
    if (!slice || !project?.gitConnectionId) {
      throw new ConvexError("Project execution configuration is incomplete");
    }
    const connection = await ctx.db.get(project.gitConnectionId);
    if (!connection) {
      throw new ConvexError("Git connection not found");
    }
    const expectedForge = forgeForHost(project.sourceHost);
    if (expectedForge && connection.provider !== expectedForge) {
      throw new ConvexError(
        `Git credential provider (${connection.provider}) does not match this project's forge (${expectedForge})`
      );
    }
    return {
      attempt,
      connection,
      project,
      prompt: [
        `Implement this approved Zopu slice: ${slice.title}`,
        `Objective: ${slice.objective}`,
        `Observable behavior: ${slice.observableBehavior}`,
        "Inspect the repository instructions first. Make focused changes and run relevant checks.",
      ].join("\n\n"),
      run,
      work,
    };
  },
 });
 export const markAttemptRunning = internalMutation({
  args: { attemptId: v.id("workAttempts") },
  handler: async (ctx, args) => {
    const attempt = await ctx.db.get(args.attemptId);
    if (!attempt || attempt.status === "terminal") {
      return false;
    }
    const run = await ctx.db.get(attempt.runId);
    if (!run || run.status !== "running") {
      return false;
    }
    await ctx.db.patch(attempt._id, {
      leaseExpiresAt: Date.now() + LEASE_MS,
      startedAt: attempt.startedAt ?? Date.now(),
      status: "running",
    });
    return true;
  },
 });
 const settleSliceAndWork = async (
  ctx: MutationCtx,
  run: Doc<"workRuns">,
  succeeded: boolean,
  workStatus: Doc<"works">["status"]
 ) => {
  if (!run.sliceRowId) {
    return;
  }
  const slice = await ctx.db.get(run.sliceRowId);
  if (!slice) {
    return;
  }
  let sliceStatus: "blocked" | "completed" | "ready" = "ready";
  if (succeeded) {
    sliceStatus = "completed";
  } else if (workStatus === "blocked") {
    sliceStatus = "blocked";
  }
  await ctx.db.patch(slice._id, { status: sliceStatus });
  const work = await ctx.db.get(run.workId);
  if (!work) {
    return;
  }
  let status = workStatus;
  if (succeeded) {
    const slices = await ctx.db
      .query("workSlices")
      .withIndex("by_workId_and_designVersion", (q) =>
        q.eq("workId", work._id).eq("designVersion", slice.designVersion)
      )
      .collect();
    const next = slices
      .sort((left, right) => left.ordinal - right.ordinal)
      .find((candidate) => candidate.status === "planned");
    if (next) {
      await ctx.db.patch(next._id, { status: "ready" });
      status = "ready";
    }
  }
  await ctx.db.patch(work._id, { status, updatedAt: Date.now() });
 };
 export const completeAttempt = internalMutation({
  args: {
    attemptId: v.id("workAttempts"),
    result: v.object({
      baseRevision: v.string(),
      candidateRevision: v.string(),
      changedFiles: v.array(v.string()),
      diff: v.string(),
      environmentId: v.string(),
      events: v.array(
        v.object({
          kind: v.string(),
          message: v.string(),
          metadata: v.record(v.string(), v.string()),
          occurredAt: v.number(),
          sequence: v.number(),
        })
      ),
      summary: v.string(),
    }),
  },
  handler: async (ctx, args) => {
    const attempt = await ctx.db.get(args.attemptId);
    // Cancellation fencing: a terminal or cancelled attempt/run must never
    // later settle success, even if the agent action raced to completion.
    if (!attempt || attempt.status === "terminal") {
      return;
    }
    const run = await ctx.db.get(attempt.runId);
    const work = await ctx.db.get(attempt.workId);
    if (!run || !work) {
      throw new ConvexError("Execution records not found");
    }
    if (run.status === "terminal" || run.status === "cancelled") {
      return;
    }
    // Empty-change rejection: a no-op result (no changed files, or identical
    // base/candidate revisions) is not a successful implementation. Fail it
    // as a permanent InvalidInput so the resolver does not mark Work done.
    const noOp =
      args.result.changedFiles.length === 0 ||
      args.result.baseRevision === args.result.candidateRevision;
    if (noOp) {
      await ctx.db.patch(attempt._id, {
        classification: "PermanentFailure",
        endedAt: Date.now(),
        failureReason: "InvalidInput",
        leaseExpiresAt: undefined,
        status: "terminal",
        summary: "Execution produced no repository changes",
      });
      await ctx.db.patch(run._id, {
        endedAt: Date.now(),
        status: "terminal",
        terminalClassification: "PermanentFailure",
        terminalSummary: "Execution produced no repository changes",
      });
      await settleSliceAndWork(ctx, run, false, "failed");
      return;
    }
    for (const item of args.result.events) {
      await ctx.db.insert("workAttemptEvents", {
        attemptId: attempt._id,
        kind: item.kind,
        message: item.message,
        metadataJson: JSON.stringify(item.metadata),
        occurredAt: item.occurredAt,
        sequence: item.sequence,
      });
    }
    const endedAt = Date.now();
    await ctx.db.patch(attempt._id, {
      classification: "Succeeded",
      endedAt,
      leaseExpiresAt: undefined,
      status: "terminal",
      summary: args.result.summary,
    });
    await ctx.db.patch(run._id, {
      baseRevision: args.result.baseRevision,
      candidateRevision: args.result.candidateRevision,
      endedAt,
      environmentId: args.result.environmentId,
      status: "terminal",
      terminalClassification: "Succeeded",
      terminalSummary: args.result.summary,
    });
    await ctx.db.insert("workArtifacts", {
      attemptId: attempt._id,
      createdAt: endedAt,
      designVersion: run.designVersion,
      environmentId: args.result.environmentId,
      idempotencyKey: `real-diff:${attempt._id}`,
      kind: "diff",
      metadataJson: JSON.stringify({ changedFiles: args.result.changedFiles }),
      organizationId: work.organizationId,
      producer: "agentos-pi",
      projectId: work.projectId,
      provenanceJson: JSON.stringify({
        baseRevision: args.result.baseRevision,
      }),
      runId: run._id,
      sliceId: run.sliceId,
      sourceRevision: args.result.candidateRevision,
      title: "Implementation diff",
      verificationStatus: "unverified",
      workId: work._id,
      ...(args.result.diff.length > 0
        ? {
            uri: `data:text/plain;charset=utf-8,${encodeURIComponent(args.result.diff.slice(0, 50_000))}`,
          }
        : {}),
    });
    await settleSliceAndWork(ctx, run, true, "completed");
    await ctx.db.insert("workEvents", {
      createdAt: endedAt,
      idempotencyKey: `real-run-completed:${run._id}`,
      kind: "run.completed",
      payloadJson: JSON.stringify({ classification: "Succeeded" }),
      referenceId: String(run._id),
      workId: work._id,
    });
  },
 });
 export const launchAttemptWorkflow = internalMutation({
  args: { attemptId: v.id("workAttempts") },
  handler: async (ctx, args) => {
    const attempt = await ctx.db.get(args.attemptId);
    if (!attempt || attempt.status === "terminal") {
      return;
    }
    const run = await ctx.db.get(attempt.runId);
    if (!run || run.status !== "running") {
      return;
    }
    const workflowId: WorkflowId = await workflow.start(
      ctx,
      internal.workExecutionWorkflow.execute,
      args
    );
    await ctx.db.patch(run._id, { workflowId });
  },
 });
 export const failAttempt = internalMutation({
  args: {
    attemptId: v.id("workAttempts"),
    reason: failureReasonValues,
    retryable: v.boolean(),
    summary: v.string(),
  },
  handler: async (ctx, args) => {
    const attempt = await ctx.db.get(args.attemptId);
    // Cancellation fencing: once an attempt or run is terminal/cancelled, a
    // late failure from the workflow catch block must not overwrite the
    // settled state. This also prevents a cancelled attempt from settling
    // as a different classification after cancelExecution ran.
    if (!attempt || attempt.status === "terminal") {
      return;
    }
    const run = await ctx.db.get(attempt.runId);
    if (!run || run.status === "terminal" || run.status === "cancelled") {
      return;
    }
    const classification = classifyFailure(args.reason);
    const endedAt = Date.now();
    await ctx.db.patch(attempt._id, {
      classification,
      endedAt,
      failureReason: args.reason,
      leaseExpiresAt: undefined,
      status: "terminal",
      summary: args.summary,
    });
    const outcome = resolveOutcome(
      { classification, retryable: args.retryable, summary: args.summary },
      attempt.number,
      defaultCodingKitV0.retryPolicy
    );
    await ctx.db.insert("resolverDecisions", {
      attemptId: attempt._id,
      attemptNumber: attempt.number,
      classification,
      createdAt: endedAt,
      decision: outcome.kind,
      ...(outcome.kind === "terminal"
        ? { resultingWorkStatus: outcome.workStatus }
        : {}),
      runId: run._id,
      summary: args.summary,
      workId: attempt.workId,
    });
    if (outcome.kind === "retry") {
      const nextAttemptId = await ctx.db.insert("workAttempts", {
        number: attempt.number + 1,
        runId: run._id,
        status: "queued",
        workId: attempt.workId,
        workspaceKey: attempt.workspaceKey,
      });
      await ctx.scheduler.runAfter(
        0,
        internal.workExecutionWorkflow.launchAttemptWorkflow,
        { attemptId: nextAttemptId }
      );
      return;
    }
    await ctx.db.patch(run._id, {
      endedAt,
      status: "terminal",
      terminalClassification: classification,
      terminalSummary: args.summary,
    });
    await settleSliceAndWork(ctx, run, false, outcome.workStatus);
    const work = await ctx.db.get(run.workId);
    if (work) {
      await ctx.db.insert("workEvents", {
        createdAt: endedAt,
        idempotencyKey: `real-run-failed:${run._id}`,
        kind: "run.completed",
        payloadJson: JSON.stringify({ classification }),
        referenceId: String(run._id),
        workId: work._id,
      });
    }
  },
 });
 export const cancelExecution = mutation({
  args: { runId: v.id("workRuns") },
  handler: async (ctx, args) => {
    const run = await ctx.db.get(args.runId);
    if (!run) {
      throw new ConvexError("Run not found");
    }
    await requireProjectMember(ctx, (await ctx.db.get(run.workId))!.projectId);
    if (run.status !== "running") {
      return { cancelled: false };
    }
    if (run.workflowId) {
      await workflow.cancel(ctx, run.workflowId as WorkflowId);
    }
    const attempts = await ctx.db
      .query("workAttempts")
      .withIndex("by_runId_and_number", (q) => q.eq("runId", run._id))
      .collect();
    const attempt = attempts.find(
      (candidate) => candidate.status !== "terminal"
    );
    if (attempt?.workspaceKey) {
      await ctx.scheduler.runAfter(
        0,
        internal.workExecutionAgent.cancelAttempt,
        {
          attemptId: String(attempt._id),
          workspaceKey: attempt.workspaceKey,
        }
      );
      const cancelledAt = Date.now();
      await ctx.db.patch(attempt._id, {
        classification: "Cancelled",
        endedAt: cancelledAt,
        failureReason: "Cancelled",
        leaseExpiresAt: undefined,
        status: "terminal",
        summary: "Execution cancelled",
      });
      await ctx.db.insert("resolverDecisions", {
        attemptId: attempt._id,
        attemptNumber: attempt.number,
        classification: "Cancelled",
        createdAt: cancelledAt,
        decision: "terminal",
        resultingWorkStatus: "ready",
        runId: run._id,
        summary: "Execution cancelled",
        workId: run.workId,
      });
    }
    await ctx.db.patch(run._id, {
      endedAt: Date.now(),
      status: "cancelled",
      terminalClassification: "Cancelled",
      terminalSummary: "Execution cancelled",
    });
    if (run.sliceRowId) {
      await ctx.db.patch(run.sliceRowId, { status: "ready" });
    }
    const work = await ctx.db.get(run.workId);
    if (work) {
      await ctx.db.patch(work._id, { status: "ready", updatedAt: Date.now() });
    }
    return { cancelled: true };
  },
 });
--- a/packages/backend/convex/workPlanning.ts
+++ b/packages/backend/convex/workPlanning.ts
@@ -771,13 +771,41 @@ export const listForProject = query({
              .eq("designVersion", work.designVersion ?? 0)
          )
          .collect();
-        const runs = await ctx.db
+        const runRows = await ctx.db
          .query("workRuns")
          .withIndex("by_work_and_createdAt", (q: any) =>
            q.eq("workId", work._id)
          )
          .order("desc")
          .take(10);
        const runs = await Promise.all(
          runRows.map(async (run) => {
            const attempts = await ctx.db
              .query("workAttempts")
              .withIndex("by_runId_and_number", (q) => q.eq("runId", run._id))
              .collect();
            const eventsByAttempt = await Promise.all(
              attempts.map((attempt) =>
                ctx.db
                  .query("workAttemptEvents")
                  .withIndex("by_attempt_and_sequence", (q: any) =>
                    q.eq("attemptId", attempt._id)
                  )
                  .collect()
              )
            );
            const attemptEvents = eventsByAttempt
              .flat()
              .sort((left, right) => left.occurredAt - right.occurredAt);
            const artifacts = await ctx.db
              .query("workArtifacts")
              .withIndex("by_runId_and_createdAt", (q) =>
                q.eq("runId", run._id)
              )
              .collect();
            return { ...run, artifacts, attemptEvents, attempts };
          })
        );
        const events = await ctx.db
          .query("workEvents")
          .withIndex("by_work_and_createdAt", (q: any) =>
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -16,6 +16,7 @@
    "@code/env": "workspace:*",
    "@code/primitives": "workspace:*",
    "@convex-dev/better-auth": "catalog:",
    "@convex-dev/workflow": "0.4.4",
    "better-auth": "catalog:",
    "convex": "catalog:",
    "effect": "catalog:",
--- a/packages/env/src/agent.ts
+++ b/packages/env/src/agent.ts
@@ -14,6 +14,10 @@ const agentEnvSchema = z.object({
  GITEA_TOKEN: z.string().min(1).optional(),
  GITEA_URL: z.url().default("https://git.openputer.com"),
  OPENROUTER_API_KEY: z.string().min(1).optional(),
  RIVET_ENDPOINT: z.url(),
  RIVET_PUBLIC_ENDPOINT: z.url().optional(),
  RIVET_WORKSPACE_TOKEN: z.string().min(32),
  ZOPU_SOURCE_REPOSITORY: z.string().min(1).default("/opt/zopu-source"),
 });
 export type AgentEnv = z.infer<typeof agentEnvSchema>;
--- a/packages/env/src/convex.ts
+++ b/packages/env/src/convex.ts
@@ -5,10 +5,15 @@ export const env = createEnv({
  emptyStringAsUndefined: true,
  runtimeEnv: process.env,
  server: {
    AGENT_BACKEND_URL: z.url().optional(),
    CONVEX_SITE_URL: z.url(),
    FLUE_DB_TOKEN: z.string().min(1),
    FLUE_URL: z.url().optional(),
    GITEA_TOKEN: z.string().min(1).optional(),
    GITEA_URL: z.url().default("https://git.openputer.com"),
    GITHUB_CLIENT_ID: z.string().min(1).optional(),
    GITHUB_CLIENT_SECRET: z.string().min(1).optional(),
    GIT_CREDENTIAL_ENCRYPTION_KEY: z.string().min(43).optional(),
    NATIVE_APP_URL: z.string().min(1).default("code://"),
    SITE_URL: z.url(),
  },
--- a/packages/primitives/package.json
+++ b/packages/primitives/package.json
@@ -6,6 +6,7 @@
  "exports": {
    ".": "./src/index.ts",
    "./agent-os": "./src/agent-os.ts",
    "./execution-runtime": "./src/execution-runtime.ts",
    "./git": "./src/git.ts",
    "./git-local-runtime": "./src/git-local-runtime.ts",
    "./git-remote-runtime": "./src/git-remote-runtime.ts",
@@ -29,9 +30,9 @@
    "test:watch": "vitest"
  },
  "dependencies": {
-    "@agentos-software/codex-cli": "0.3.4",
+    "@agentos-software/pi": "0.2.7",
    "@agentos-software/git": "0.3.3",
-    "@rivet-dev/agentos": "catalog:",
+    "@rivet-dev/agentos": "0.2.14",
    "effect": "catalog:"
  },
  "devDependencies": {
--- a/packages/primitives/src/agent-os.test.ts
+++ b/packages/primitives/src/agent-os.test.ts
@@ -1,25 +0,0 @@
 import { describe, expect, it } from "vitest";
 import { codexSessionEnv, makeCodexAgentOsConfig } from "./agent-os";
 describe("Codex agent-os config", () => {
  it("always includes the codex + git software bundle", () => {
    const config = makeCodexAgentOsConfig();
    expect(config.software).toHaveLength(2);
    expect(config.software?.[0]).toBeTypeOf("object");
  });
  it("builds model-provider session env", () => {
    const env = codexSessionEnv(
      {
        apiKey: "sk-test",
        baseUrl: "https://ai.example.com/v1",
        model: "glm-5.2",
      },
      { CODEX_MODEL: "glm-5.2" }
    );
    expect(env.OPENAI_API_KEY).toBe("sk-test");
    expect(env.OPENAI_BASE_URL).toBe("https://ai.example.com/v1");
    expect(env.CODEX_MODEL).toBe("glm-5.2");
  });
 });
--- a/packages/primitives/src/agent-os.ts
+++ b/packages/primitives/src/agent-os.ts
@@ -1,10 +1,10 @@
 /* eslint-disable max-classes-per-file -- the AgentOS service and its tagged error form one adapter contract. */
-import codex from "@agentos-software/codex-cli";
+import pi from "@agentos-software/pi";
 import { agentOS as createAgentOsActor } from "@rivet-dev/agentos";
 import type { AgentOSConfigInput } from "@rivet-dev/agentos";
 import { Context, Effect, Layer, Schema } from "effect";
-import { getExecutableGitSoftware } from "./agent-os-git-software";
+import { getExecutableGitSoftware } from "./agent-os-git-software.ts";
 const withGitSoftware = (
  config: AgentOSConfigInput<undefined>
@@ -73,50 +73,94 @@ export const createAgentOsActorEffect = Effect.fn("createAgentOsActorEffect")(
 );
 // ---------------------------------------------------------------------------
-// Codex harness configuration
+// Pi harness configuration
 //
-// The canonical execution registry runs exactly one AgentOS actor for the
+// Slice 5 intentionally runs one harness against the server's fixed Zopu
-// puter/zopu-code repo, booted with the Codex CLI harness + git. The model
+// checkout. Pi speaks ACP natively and reads its model gateway from a mounted
-// provider is injected as VM env (OpenAI-compatible base URL + key) so Codex
+// HOME, avoiding a second executable adapter or credentials path.
 // authenticates against the configured gateway without a second credentials
 // path. This is a pure config builder; the RivetKit registry/server that hosts
 // the actor lives in the agents package.
 // ---------------------------------------------------------------------------
-/** Software bundle for a Codex-capable VM: the Codex harness plus git. */
+/** Software bundle for a Pi-capable VM: the Pi ACP harness plus git. */
-export const codexSoftware = [codex, getExecutableGitSoftware()] as const;
+export const piSoftware = [pi, getExecutableGitSoftware()] as const;
-/** Model-provider env that Codex reads inside the VM. Pass this to the session's
+export interface PiModelConfig {
- * `env` when opening a Codex session (`agent: "codex"`). */
+  readonly api: "openai-completions";
-export interface CodexModelEnv {
+  readonly apiKeyEnvironmentVariable: string;
  readonly apiKey: string;
  readonly baseUrl: string;
  readonly contextWindow: number;
  readonly maxTokens: number;
  readonly model: string;
  readonly provider: string;
 }
-/** Builds the VM env record Codex reads to authenticate against the model gateway. */
+export interface PiHomeFiles {
-export const codexSessionEnv = (
+  readonly models: string;
-  model: CodexModelEnv,
+  readonly settings: string;
 }
 /** Builds the two files Pi reads from ~/.pi/agent. */
 export const makePiHomeFiles = (model: PiModelConfig): PiHomeFiles => ({
  models: JSON.stringify(
    {
      providers: {
        [model.provider]: {
          api: model.api,
          apiKey: model.apiKeyEnvironmentVariable,
          authHeader: true,
          baseUrl: model.baseUrl,
          models: [
            {
              contextWindow: model.contextWindow,
              id: model.model,
              maxTokens: model.maxTokens,
              name: model.model,
            },
          ],
        },
      },
    },
    null,
    2
  ),
  settings: JSON.stringify(
    {
      defaultModel: model.model,
      defaultProvider: model.provider,
      quietStartup: true,
    },
    null,
    2
  ),
 });
 /** Environment supplied to the Pi ACP session. */
 export const piSessionEnv = (
  apiKey: string,
  extra: Readonly<Record<string, string>> = {}
 ): Record<string, string> => ({
-  OPENAI_API_KEY: model.apiKey,
+  AGENT_MODEL_API_KEY: apiKey,
-  OPENAI_BASE_URL: model.baseUrl,
+  HOME: "/home/zopu",
  PATH: "/opt/zopu-tools/bin:/usr/local/bin:/usr/bin:/bin",
  ...extra,
 });
-export interface CodexAgentOsConfigInput {
+export interface PiAgentOsConfigInput {
-  /** Extra software merged after the Codex+git bundle. */
+  /** Extra software merged after the Pi+git bundle. */
  readonly software?: NonNullable<AgentOSConfigInput<undefined>["software"]>;
  /** VM permission overrides merged over the execution policy. */
  readonly permissions?: AgentOSConfigInput<undefined>["permissions"];
 }
-/**
+export const makePiAgentOsConfig = (
- * Builds an AgentOS actor config for a Codex-backed VM. The Codex CLI and git
+  input: PiAgentOsConfigInput = {}
 * are always present; software the caller passes is appended, never replacing
 * the harness or git. Model-provider env is supplied per session via
 * `codexSessionEnv`, not here — the actor config has no env field.
 */
 export const makeCodexAgentOsConfig = (
  input: CodexAgentOsConfigInput = {}
 ): AgentOSConfigInput<undefined> => ({
-  software: [...codexSoftware, ...(input.software ?? [])],
+  permissions: {
    childProcess: "allow",
    env: "allow",
    fs: "allow",
    network: "allow",
    process: "allow",
    ...input.permissions,
  },
  software: [...piSoftware, ...(input.software ?? [])],
 });
--- a/packages/primitives/src/execution-runtime.test.ts
+++ b/packages/primitives/src/execution-runtime.test.ts
@@ -0,0 +1,38 @@
 import { Effect } from "effect";
 import { describe, expect, test } from "vitest";
 import {
  decodeGitConnectionInput,
  decodeWorkAttemptExecutionResult,
 } from "./execution-runtime";
 describe("execution runtime contracts", () => {
  test("accepts one authenticated Gitea connection", async () => {
    const decoded = await Effect.runPromise(
      decodeGitConnectionInput({
        credential: "secret",
        credentialKind: "token",
        provider: "gitea",
        serverUrl: "https://git.example.com",
        username: "zopu",
      })
    );
    expect(decoded.provider).toBe("gitea");
  });
  test("requires exact base and candidate revisions", async () => {
    await expect(
      Effect.runPromise(
        decodeWorkAttemptExecutionResult({
          baseRevision: "",
          candidateRevision: "abc123",
          changedFiles: [],
          diff: "",
          environmentId: "workspace-1",
          events: [],
          summary: "done",
        })
      )
    ).rejects.toMatchObject({ reason: "InvalidInput" });
  });
 });
--- a/packages/primitives/src/execution-runtime.ts
+++ b/packages/primitives/src/execution-runtime.ts
@@ -0,0 +1,171 @@
 /* eslint-disable max-classes-per-file -- execution boundary errors live with their schemas. */
 import { Effect, Schema } from "effect";
 const Text = Schema.String.check(
  Schema.makeFilter((value) => value.trim().length > 0, {
    expected: "a non-empty string",
  })
 );
 const HttpUrl = Schema.String.check(
  Schema.makeFilter(
    (value) => {
      try {
        const url = new URL(value);
        return url.protocol === "http:" || url.protocol === "https:";
      } catch {
        return false;
      }
    },
    { expected: "an HTTP URL" }
  )
 );
 export const GitProvider = Schema.Literals(["github", "gitea"]);
 export type GitProvider = typeof GitProvider.Type;
 export const GitCredentialKind = Schema.Literals(["oauth", "token"]);
 export type GitCredentialKind = typeof GitCredentialKind.Type;
 export const GitConnectionInput = Schema.Struct({
  credential: Text,
  credentialKind: GitCredentialKind,
  provider: GitProvider,
  serverUrl: HttpUrl,
  username: Schema.optional(Text),
 });
 export type GitConnectionInput = typeof GitConnectionInput.Type;
 export const GitConnectionView = Schema.Struct({
  connectedAt: Schema.Number,
  credentialKind: GitCredentialKind,
  id: Text,
  provider: GitProvider,
  serverUrl: HttpUrl,
  username: Schema.optional(Text),
 });
 export type GitConnectionView = typeof GitConnectionView.Type;
 export const RepositoryExecutionAuth = Schema.Struct({
  credential: Text,
  provider: GitProvider,
  serverUrl: HttpUrl,
  username: Schema.optional(Text),
 });
 export type RepositoryExecutionAuth = typeof RepositoryExecutionAuth.Type;
 export const ExecutionEventKind = Schema.Literals([
  "runtime.preparing",
  "repository.cloning",
  "repository.ready",
  "harness.started",
  "harness.progress",
  "harness.log",
  "repository.changed",
  "runtime.completed",
  "runtime.failed",
  "runtime.cancelled",
 ]);
 export type ExecutionEventKind = typeof ExecutionEventKind.Type;
 export const ExecutionEvent = Schema.Struct({
  kind: ExecutionEventKind,
  message: Text,
  metadata: Schema.Record(Schema.String, Schema.String),
  occurredAt: Schema.Number,
  sequence: Schema.Int,
 });
 export type ExecutionEvent = typeof ExecutionEvent.Type;
 export const WorkAttemptExecutionInput = Schema.Struct({
  attemptId: Text,
  auth: RepositoryExecutionAuth,
  baseBranch: Text,
  prompt: Text,
  repositoryUrl: HttpUrl,
  runId: Text,
  workId: Text,
  workspaceKey: Text,
 });
 export type WorkAttemptExecutionInput = typeof WorkAttemptExecutionInput.Type;
 export const WorkAttemptExecutionResult = Schema.Struct({
  baseRevision: Text,
  candidateRevision: Text,
  changedFiles: Schema.Array(Text),
  diff: Schema.String,
  environmentId: Text,
  events: Schema.Array(ExecutionEvent),
  summary: Text,
 });
 export type WorkAttemptExecutionResult = typeof WorkAttemptExecutionResult.Type;
 export const WorkAttemptExecutionErrorReason = Schema.Literals([
  "Authentication",
  "Cancelled",
  "HarnessFailed",
  "InvalidInput",
  "ProviderUnavailable",
  "RepositoryFailed",
  "Timeout",
 ]);
 export type WorkAttemptExecutionErrorReason =
  typeof WorkAttemptExecutionErrorReason.Type;
 export class WorkAttemptExecutionError extends Schema.TaggedErrorClass<WorkAttemptExecutionError>()(
  "WorkAttemptExecutionError",
  {
    message: Schema.String,
    reason: WorkAttemptExecutionErrorReason,
    retryable: Schema.Boolean,
  }
 ) {}
 export const WorkAttemptExecutionFailure = Schema.Struct({
  error: Schema.Struct({
    message: Text,
    reason: WorkAttemptExecutionErrorReason,
    retryable: Schema.Boolean,
  }),
 });
 export type WorkAttemptExecutionFailure =
  typeof WorkAttemptExecutionFailure.Type;
 const invalidInput = (message: string) =>
  new WorkAttemptExecutionError({
    message,
    reason: "InvalidInput",
    retryable: false,
  });
 export const decodeGitConnectionInput = (input: unknown) =>
  Schema.decodeUnknownEffect(GitConnectionInput)(input).pipe(
    Effect.mapError((cause) => invalidInput(cause.message))
  );
 export const decodeWorkAttemptExecutionInput = (input: unknown) =>
  Schema.decodeUnknownEffect(WorkAttemptExecutionInput)(input).pipe(
    Effect.mapError((cause) => invalidInput(cause.message))
  );
 export const decodeWorkAttemptExecutionResult = (input: unknown) =>
  Schema.decodeUnknownEffect(WorkAttemptExecutionResult)(input).pipe(
    Effect.mapError((cause) => invalidInput(cause.message))
  );
 export const decodeWorkAttemptExecutionFailure = (input: unknown) =>
  Schema.decodeUnknownEffect(WorkAttemptExecutionFailure)(input).pipe(
    Effect.mapError((cause) => invalidInput(cause.message))
  );
 export interface SandboxRuntime {
  readonly name: string;
  readonly execute: (
    input: WorkAttemptExecutionInput,
    signal?: AbortSignal
  ) => Effect.Effect<WorkAttemptExecutionResult, WorkAttemptExecutionError>;
  readonly cancel: (
    workspaceKey: string,
    attemptId: string
  ) => Effect.Effect<void, WorkAttemptExecutionError>;
 }
--- a/packages/primitives/src/git-local-runtime.ts
+++ b/packages/primitives/src/git-local-runtime.ts
@@ -4,7 +4,7 @@ import { promisify } from "node:util";
 import { Context, Effect, Layer, Schema } from "effect";
-import { GitBranchName } from "./git.js";
+import { GitBranchName } from "./git.ts";
 const execFileP = promisify(execFile);
--- a/packages/primitives/src/harness-runtime.ts
+++ b/packages/primitives/src/harness-runtime.ts
@@ -1,6 +1,6 @@
 import { Effect, Schema } from "effect";
-import type { AttemptOutcome } from "./resolver";
+import type { AttemptOutcome } from "./resolver.ts";
 const Text = Schema.String.check(
  Schema.makeFilter((value) => value.trim().length > 0, {
--- a/packages/primitives/src/index.ts
+++ b/packages/primitives/src/index.ts
@@ -1,18 +1,19 @@
 // oxlint-disable-next-line no-barrel-file -- The package root intentionally exposes its public modules.
-export * from "./agent-os";
+export * from "./agent-os.ts";
-export * from "./git";
+export * from "./execution-runtime.ts";
-export * from "./git-local-runtime";
+export * from "./git.ts";
-export * from "./git-remote-runtime";
+export * from "./git-local-runtime.ts";
-export * from "./project";
+export * from "./git-remote-runtime.ts";
-export * from "./project-issue";
+export * from "./project.ts";
-export * from "./project-workspace";
+export * from "./project-issue.ts";
-export * from "./project-work";
+export * from "./project-workspace.ts";
-export * from "./signal";
+export * from "./project-work.ts";
-export * from "./smoke";
+export * from "./signal.ts";
-export * from "./work";
+export * from "./smoke.ts";
-export * from "./work-artifact";
+export * from "./work.ts";
-export * from "./work-definition";
+export * from "./work-artifact.ts";
-export * from "./work-design";
+export * from "./work-definition.ts";
-export * from "./work-lifecycle";
+export * from "./work-design.ts";
-export * from "./resolver";
+export * from "./work-lifecycle.ts";
-export * from "./harness-runtime";
+export * from "./resolver.ts";
 export * from "./harness-runtime.ts";
--- a/packages/primitives/src/project-issue.ts
+++ b/packages/primitives/src/project-issue.ts
@@ -1,7 +1,7 @@
 /* eslint-disable max-classes-per-file -- each domain failure has a distinct tagged reason. */
 import { Effect, Schema } from "effect";
-import { ProblemStatement, ProjectId, SignalId } from "./signal.js";
+import { ProblemStatement, ProjectId, SignalId } from "./signal.ts";
 const MeaningfulString = Schema.String.check(
  Schema.makeFilter((value) => value.trim().length > 0, {
--- a/packages/primitives/src/project-work.ts
+++ b/packages/primitives/src/project-work.ts
@@ -1,4 +1,4 @@
-import type { ProjectIssueStatus } from "./project-issue.js";
+import type { ProjectIssueStatus } from "./project-issue.ts";
 export const PROJECT_ISSUE_STATUSES = [
  "open",
--- a/packages/primitives/src/project-workspace.ts
+++ b/packages/primitives/src/project-workspace.ts
@@ -1,9 +1,9 @@
 /* eslint-disable max-classes-per-file -- workspace errors stay next to their contracts. */
 import { Effect, Schema } from "effect";
-import { CONTEXT_KINDS } from "./project.js";
+import { CONTEXT_KINDS } from "./project.ts";
-export type { ContextKind } from "./project.js";
+export type { ContextKind } from "./project.ts";
 const MeaningfulString = Schema.String.check(
  Schema.makeFilter((value) => value.trim().length > 0, {
--- a/packages/primitives/src/project.ts
+++ b/packages/primitives/src/project.ts
@@ -1,9 +1,9 @@
 /* eslint-disable max-classes-per-file -- deep Effect v4 domain module: branded schemas, tagged errors, and context services */
 import { Context, Effect, Layer, Schema } from "effect";
-import { OrganizationId, ProjectId, TimestampMs } from "./signal.js";
+import { OrganizationId, ProjectId, TimestampMs } from "./signal.ts";
-export type { OrganizationId, ProjectId } from "./signal.js";
+export type { OrganizationId, ProjectId } from "./signal.ts";
 // ---------------------------------------------------------------------------
 // Domain constants
@@ -649,19 +649,21 @@ export class ProjectApplication extends Context.Service<
      const store = yield* ProjectStore;
      return ProjectApplication.of({
-        getProject: Effect.fn("ProjectApplication.getProject")(function*  getProject({
+        getProject: Effect.fn("ProjectApplication.getProject")(
-          userId,
+          function* getProject({
-          projectId,
+            userId,
-        }: {
+            projectId,
-          readonly userId: string;
+          }: {
-          readonly projectId: ProjectId;
+            readonly userId: string;
-        }) {
+            readonly projectId: ProjectId;
-          return yield* store
+          }) {
-            .getProject(userId, projectId)
+            return yield* store
-            .pipe(Effect.mapError(mapStoreError));
+              .getProject(userId, projectId)
-        }),
+              .pipe(Effect.mapError(mapStoreError));
          }
        ),
        importPublicGit: Effect.fn("ProjectApplication.importPublicGit")(
-          function*  importPublicGit({
+          function* importPublicGit({
            userId,
            repositoryUrl,
          }: {
@@ -686,7 +688,7 @@ export class ProjectApplication extends Context.Service<
          }
        ),
        importPublicText: Effect.fn("ProjectApplication.importPublicText")(
-          function*  importPublicText({
+          function* importPublicText({
            userId,
            projectId,
            kind,
@@ -724,38 +726,38 @@ export class ProjectApplication extends Context.Service<
              .pipe(Effect.mapError(mapStoreError));
          }
        ),
-        listProjects: Effect.fn("ProjectApplication.listProjects")(function*  listProjects({
+        listProjects: Effect.fn("ProjectApplication.listProjects")(
-          userId,
+          function* listProjects({ userId }: { readonly userId: string }) {
-        }: {
+            return yield* store
-          readonly userId: string;
+              .listProjects(userId)
-        }) {
+              .pipe(Effect.mapError(mapStoreError));
-          return yield* store
+          }
-            .listProjects(userId)
+        ),
-            .pipe(Effect.mapError(mapStoreError));
+        putContext: Effect.fn("ProjectApplication.putContext")(
-        }),
+          function* putContext({
-        putContext: Effect.fn("ProjectApplication.putContext")(function*  putContext({
+            userId,
-          userId,
+            projectId,
          projectId,
          kind,
          content,
          origin,
        }: {
          readonly userId: string;
          readonly projectId: ProjectId;
          readonly kind: ContextKind;
          readonly content: string;
          readonly origin: "paste" | "upload";
        }) {
          const write: ContextWrite = {
            _tag: "UserText",
            content,
            kind,
            content,
            origin,
-          };
+          }: {
-          return yield* store
+            readonly userId: string;
-            .putContext({ projectId, userId, write })
+            readonly projectId: ProjectId;
-            .pipe(Effect.mapError(mapStoreError));
+            readonly kind: ContextKind;
-        }),
+            readonly content: string;
            readonly origin: "paste" | "upload";
          }) {
            const write: ContextWrite = {
              _tag: "UserText",
              content,
              kind,
              origin,
            };
            return yield* store
              .putContext({ projectId, userId, write })
              .pipe(Effect.mapError(mapStoreError));
          }
        ),
      });
    })
  );
--- a/packages/primitives/src/resolver.ts
+++ b/packages/primitives/src/resolver.ts
@@ -1,6 +1,6 @@
 import { Schema } from "effect";
-import type { WorkStatus } from "./work-lifecycle";
+import type { WorkStatus } from "./work-lifecycle.ts";
 const Text = Schema.String.check(
  Schema.makeFilter((value) => value.trim().length > 0, {
--- a/packages/primitives/src/work.ts
+++ b/packages/primitives/src/work.ts
@@ -1,7 +1,7 @@
 import { Array as EffectArray, Effect, Order, Schema } from "effect";
-export { WorkStatus } from "./work-lifecycle";
+export { WorkStatus } from "./work-lifecycle.ts";
-export type { WorkStatus as WorkLifecycleStatus } from "./work-lifecycle";
+export type { WorkStatus as WorkLifecycleStatus } from "./work-lifecycle.ts";
 const MeaningfulString = Schema.String.check(
  Schema.makeFilter((value) => value.trim().length > 0, {
--- a/packages/primitives/tsconfig.json
+++ b/packages/primitives/tsconfig.json
@@ -1,5 +1,6 @@
 {
  "extends": "@code/config/tsconfig.base.json",
  "compilerOptions": { "allowImportingTsExtensions": true },
  "include": ["src/**/*.ts"],
  "exclude": ["dist"]
 }
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,62 @@
 packages:
  - apps/web
  - packages/agents
  - packages/auth
  - packages/backend
  - packages/config
  - packages/env
  - packages/primitives
  - packages/ui
 allowBuilds:
  "@google/genai": true
  "@mongodb-js/zstd": true
  better-sqlite3: true
  cbor-extract: true
  esbuild: true
  isolated-vm: true
  koffi: true
  msgpackr-extract: true
  node-liblzma: true
  protobufjs: true
  workerd: true
 catalog:
  "@rivet-dev/agentos": "0.2.14"
  "@rivet-dev/agentos-core": "0.2.14"
  "@effect/platform-bun": "4.0.0-beta.99"
  dotenv: "17.4.2"
  zod: "4.4.3"
  lucide-react: "1.27.0"
  next-themes: "0.4.6"
  react: "19.2.8"
  react-dom: "19.2.8"
  sonner: "2.0.7"
  convex: "1.42.3"
  better-auth: "1.6.15"
  "@convex-dev/better-auth": "0.12.5"
  "@tanstack/react-form": "1.33.2"
  "@types/react-dom": "19.2.3"
  tailwindcss: "4.3.3"
  tailwind-merge: "3.6.0"
  "@better-auth/expo": "1.6.15"
  effect: "4.0.0-beta.99"
  typescript: "7.0.2"
  "@types/bun": "1.3.14"
  heroui-native: "1.0.6"
  vite: "8.1.5"
  vitest: "4.1.10"
  convex-test: "0.0.54"
  react-native: "0.86.0"
  "@types/react": "19.2.17"
  "@types/node": "22.20.1"
  hono: "4.12.32"
  valibot: "1.4.2"
  streamdown: "2.5.0"
  "@tailwindcss/postcss": "4.3.3"
  "@tailwindcss/vite": "4.3.3"
 overrides:
  react: "19.2.8"
  react-dom: "19.2.8"
  vite: "npm:@voidzero-dev/vite-plus-core@0.2.2"
Author	SHA1	Message	Date
-Puter	3ffa1cfc7c	feat: project durable agent conversations	2026-07-29 08:19:17 +05:30
-Puter	18eb150d7d	fix: serve web assets from app directory	2026-07-29 08:13:52 +05:30
-Puter	e1b0b731e0	deploy: attach backend to shared network	2026-07-29 08:09:30 +05:30
-Puter	d428a2492b	fix: make primitives Node ESM compatible	2026-07-29 07:51:07 +05:30
-Puter	fe0fd9b16c	deploy: enable Node TypeScript export resolution	2026-07-29 07:40:44 +05:30
-Puter	fc1fcf5d44	deploy: run agent backend with Bun	2026-07-29 07:31:36 +05:30
-Puter	3ae72864bd	deploy: target agent package during Flue build	2026-07-29 07:21:02 +05:30
-Puter	0d5d54caa8	deploy: build agent without local env file	2026-07-29 07:15:19 +05:30
-Puter	830bcc4756	deploy: build applications on Node base	2026-07-29 07:09:07 +05:30
-Puter	0e56a462cd	deploy: prefer Node for native install scripts	2026-07-29 07:03:32 +05:30
-Puter	9fb293a539	deploy: build native modules with Node	2026-07-29 07:00:47 +05:30
-Puter	062c00f53c	deploy: install frontend build toolchain	2026-07-29 06:58:04 +05:30
-Puter	a7e70c9b2a	deploy: install backend build toolchain	2026-07-29 06:56:36 +05:30
-Puter	526ed59776	deploy: fix compose build contexts	2026-07-29 06:46:07 +05:30
-Puter	fd3980c6bf	deploy: split Dokploy services	2026-07-29 06:42:06 +05:30
-Puter	d8a4bbe804	chore cleanp	2026-07-29 01:24:37 +05:30
-Puter	9eb6bcd25f	refactor canonical components and remove slice 1	2026-07-29 01:24:16 +05:30
-Puter	a907539810	flue refactor and migrations	2026-07-29 00:45:46 +05:30
-Puter	601aca73c2	pnpm migrations	2026-07-29 00:45:33 +05:30
-Puter	ffecff3857	Run fixed Zopu worktrees with Pi	2026-07-28 22:20:42 +05:30
-Puter	0d7162544b	fix: run AgentOS workspaces on remote runner	2026-07-28 20:08:46 +05:30
-Puter	092a9793ea	fix: resolve repository hosts outside AgentOS	2026-07-28 18:30:08 +05:30
-Puter	5ee0a8d50e	fix: allow AgentOS process environment	2026-07-28 18:27:16 +05:30
-Puter	420676f2d7	fix: allow AgentOS command execution	2026-07-28 18:21:31 +05:30
-Puter	24d82e2a06	fix: allow AgentOS workspace filesystem	2026-07-28 18:18:24 +05:30
-Puter	d47fa0e96a	fix: allow slow AgentOS workspace boot	2026-07-28 18:14:32 +05:30
-Puter	1e7c893985	fix: apply AgentOS runtime permissions	2026-07-28 17:49:41 +05:30
-Puter	f9ebcb4a01	fix: align AgentOS runtime packages	2026-07-28 17:40:40 +05:30
-Puter	dceaa2b417	fix: allow AgentOS outbound networking	2026-07-28 17:29:47 +05:30
-Puter	a4f121e190	chore: preserve work attempt schema order	2026-07-28 17:12:54 +05:30
-Puter	4edd456b5b	feat: wire real AgentOS execution	2026-07-28 16:52:49 +05:30
-Puter	4d9f6da41b	fix: install AgentOS Codex session adapter	2026-07-28 16:09:34 +05:30
-Puter	a53029cf7a	fix: await Rivet envoy registration	2026-07-28 15:34:08 +05:30
-Puter	eede4c10ba	fix: build runner native modules with Node	2026-07-28 15:20:03 +05:30
-Puter	35169672e1	fix: add runner native build toolchain	2026-07-28 15:12:57 +05:30
-Puter	359d9e2285	feat: add durable AgentOS slice execution	2026-07-28 14:50:45 +05:30
-Puter	05a3baaac3	fix: bundle all SSR deps to eliminate React instance duplication	2026-07-28 03:27:41 +05:30
-Puter	4cc40cb2e4	fix: broaden SSR noExternal to cover all React-dependent workspace packages	2026-07-28 03:25:27 +05:30
-Puter	814df02be9	fix: bundle @convex-dev/better-auth in SSR to prevent React instance duplication	2026-07-28 03:21:41 +05:30
-Puter	d7f6cbdcdc	fix: pin react/react-dom to 19.2.8 to prevent SSR duplicate instance crash	2026-07-28 03:16:34 +05:30
		`@@ -0,0 +1,3 @@`
							`import { runtimeRegistry } from "./runtime/agent-os";`

							`await runtimeRegistry.startAndWait();`