diff --git a/.env.example b/.env.example
new file mode 100644
index 00000000..eddadb61
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,6 @@
+AGENTCOMPANY_UPDATE_URL=
+AGENTCOMPANY_DISABLE_UPDATES=true
+CSC_LINK=
+CSC_KEY_PASSWORD=
+WIN_CSC_LINK=
+WIN_CSC_KEY_PASSWORD=
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 00000000..e758b008
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,33 @@
+# Dependencies
+node_modules/
+
+# Build outputs
+out/
+build/
+dist/
+coverage/
+*.tsbuildinfo
+
+# Test artifacts
+test-results/
+playwright-report/
+
+# Environment files
+.env
+.env.local
+.env.*.local
+
+# Editor and OS files
+.DS_Store
+Thumbs.db
+.idea/
+.vscode/
+
+# Local reference material
+oldreference/
+
+# Package manager logs
+npm-debug.log*
+pnpm-debug.log*
+yarn-debug.log*
+yarn-error.log*
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 00000000..bf2e7648
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+shamefully-hoist=true
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 00000000..574e7a36
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,339 @@
+# AgentCompany Desktop
+
+Cross-platform Electron desktop control plane for local-first AI agent companies.
+
+## Tech Stack
+
+- **Runtime**: Electron 39+, Node 22+ (node:sqlite built-in)
+- **Renderer**: React 19, Tailwind CSS v4, Framer Motion, Phosphor Icons
+- **Fonts**: System stack (-apple-system, Segoe UI, etc.) for body; JetBrains Mono Variable for monospace
+- **State**: useState + IPC full-snapshot refresh pattern
+- **Build**: electron-vite, electron-builder (DMG/NSIS/AppImage)
+- **Validation**: Zod on both IPC sides (main + renderer)
+
+## Design Context
+
+### Users
+
+Technical operators (solo devs, AI-native founders, engineering leads) who run multiple AI coding agents simultaneously via CLI tools like Codex, Claude Code, Kimi CLI, Gemini CLI, and OpenCode. They are power users who think in terms of organizations, budgets, and orchestration - not chat windows. Their context is a focused workstation where this app is the primary command surface for their AI workforce.
+
+### Brand Personality
+
+**Warm, Approachable, Clean** - like Notion meets Raycast. Professional but never cold. The interface should feel like a well-organized workspace run by someone who cares about craft, not a sterile enterprise dashboard. Friendly to newcomers but capable enough for power users.
+
+### Emotional Goal
+
+**Professional authority** - "I'm running a company." The operator should feel like a capable executive at their control surface. Every screen should reinforce that they are in command of their AI organization - seeing status, making decisions, taking action. Not anxious monitoring, but confident oversight.
+
+### Aesthetic Direction
+
+**Primary references**: Linear + Raycast
+- Clean sidebar with grouped navigation
+- Fast keyboard-driven navigation
+- Subtle, purposeful animations (not decorative)
+- Monochrome palette with one warm accent color
+- Information density without clutter
+
+**Anti-references** (what this should NOT look like):
+- Cluttered enterprise dashboards (Jira, ServiceNow)
+- Overly playful / illustration-heavy consumer apps
+- Raw terminal UIs without visual hierarchy
+- Generic Bootstrap/Material admin templates
+
+### Theme Strategy
+
+**System-following** - automatically match OS light/dark preference. Both themes must be maintained. The current light palette is the foundation; dark mode tokens need to be added.
+
+### Color System
+
+| Token | Light | Purpose |
+|---|---|---|
+| `--bg` | `#fbfbfb` | App background |
+| `--panel` | `#ffffff` | Card/sidebar surfaces |
+| `--panel-soft` | `#f4f5f5` | Active/hover states |
+| `--text` | `#1a202c` | Primary text |
+| `--muted` | `#718096` | Secondary/caption text |
+| `--muted-strong` | `#4a5568` | Emphasized secondary text |
+| `--accent` | `#c06a3a` | Warm terracotta - primary action color (~4.6:1 contrast on white) |
+| `--accent-soft` | `#f7ece6` | Accent background tint |
+| `--danger` | `#e5484d` | Errors, destructive actions |
+| `--warn` | `#b7791f` | Warnings, budget alerts |
+| `--success` | `#2f855a` | Positive states, healthy budgets |
+| `--success-soft` | `#edf7f0` | Success background tint |
+| `--line` | `rgba(15,23,42,0.08)` | Subtle borders |
+| `--line-strong` | `rgba(15,23,42,0.14)` | Emphasized borders |
+
+The warm terracotta accent (`#c06a3a`) is the signature color. It appears in active states, primary buttons, focus rings, and the icon fill for active sidebar items. Use sparingly - it should draw the eye to what matters.
+
+### Typography Scale
+
+- Page titles: 31px, -0.03em tracking
+- Section headings: 18px semibold, -0.01em
+- Body/labels: 14px
+- Compact UI (sidebar, pills, badges): 13px, 0.005em tracking
+- Captions/meta: 12px
+- Micro labels (section headers, status pills): 10-11px uppercase, wide tracking (0.08-0.12em)
+- Monospace (logs, IDs, timestamps): JetBrains Mono, 11-12px
+
+### Spacing & Radius
+
+- Border radius: 6-8px for interactive elements, 10px for cards/panels
+- Sidebar width: 220px fixed
+- Content max-width: 1040px centered
+- Page padding: 40px horizontal, 32px vertical
+- Section spacing: 56px (space-y-14) between major sections
+
+### Animation Principles
+
+- All transitions use `cubic-bezier(0.16, 1, 0.3, 1)` (ease-out-expo feel)
+- Page transitions: 240ms, y-axis slide (12px in, -10px out)
+- Panel reveals: 220ms, height or y-axis
+- Hover/focus: 150ms via Tailwind `duration-150`
+- Respect `prefers-reduced-motion` globally
+
+### Icon System
+
+Phosphor Icons (react), weight `regular` by default, `fill` for active/selected states. Standard size 16-18px. Active sidebar icons use accent color.
+
+### Design Principles
+
+1. **Hierarchy before density** - Use typography scale, spacing, and color to create clear visual hierarchy. Never rely on borders or backgrounds alone to separate content.
+2. **Quiet until needed** - Default state is calm and minimal. Warnings, errors, and attention items earn their visual weight through color and placement, not through shouting.
+3. **One accent, used with intent** - The warm terracotta accent is reserved for: active navigation, primary actions, and focus states. Everything else is greyscale. If accent appears everywhere, it means nothing.
+4. **Native-feeling, not native-copying** - Feel at home on macOS (traffic lights, vibrancy cues, drag regions) but don't try to replicate AppKit. Same principle applies cross-platform.
+5. **Content over chrome** - Minimize UI framework noise. Headers, borders, and navigation are scaffolding - the user's agents, tasks, and runs are the content. Maximize the ratio of useful information to decorative structure.
+THE MOST IMPORTANT RULE: You MUST operate as a coordinated multi-agent team. All agents must strictly follow the defined roles, execution order, desktop application constraints, security boundaries, and delivery requirements. Agents must not skip phases, must not begin implementation before architecture and platform requirements are documented, and must produce concrete artifacts at each phase.
+
+THIS TEAM EXISTS TO DESIGN, BUILD, REVIEW, OPTIMIZE, AND SHIP A PRODUCTION-GRADE CROSS-PLATFORM DESKTOP APPLICATION USING ELECTRON. ALL OUTPUTS MUST TARGET REAL ELECTRON APPLICATION WORKFLOWS, REAL MAIN PROCESS AND RENDERER PROCESS BOUNDARIES, REAL IPC SECURITY REQUIREMENTS, REAL PACKAGING REQUIREMENTS, AND REAL CROSS-PLATFORM CONSTRAINTS FOR macOS, WINDOWS, AND LINUX. DO NOT FALL BACK TO GENERIC WEB APP ADVICE. DO NOT TREAT THE DESKTOP APP AS A NORMAL WEBSITE. DEFAULT TO A SECURE ELECTRON ARCHITECTURE WITH STRICT SEPARATION BETWEEN MAIN, PRELOAD, AND RENDERER.
+
+GLOBAL EXECUTION PIPELINE (MANDATORY ORDER)
+
+Phase 1: ProjectManager reviews the PRD, defines scope, and establishes cross-platform desktop milestones.
+Phase 2: ResearchAnalyst validates Electron capabilities, desktop UX expectations, packaging requirements, OS integration constraints, and security requirements.
+Phase 3: TechnicalImplementationResearcher determines architecture, IPC model, state model, storage strategy, updater strategy, and performance approach.
+Phase 4: EnterpriseArchitect validates standards, module boundaries, process separation, file structure, naming rules, and desktop engineering constraints.
+Phase 5: FrontendDesigner converts product intent or provided design references into a desktop-native design system and screen structure suitable for Electron.
+Phase 6: FrontendDeveloper implements the renderer application using the chosen frontend stack with desktop-aware UX.
+Phase 7: BackendDeveloper implements the Electron main process, preload bridge, IPC layer, OS integrations, storage boundaries, and background services.
+Phase 8: BuildVerificationEngineer validates build integrity, IPC behavior, packaging, signing configuration, updater flow, and cross-platform runtime correctness.
+Phase 9: CodeReviewer optimizes correctness, warnings, performance, memory behavior, startup time, renderer responsiveness, and bundle size.
+Phase 10: SecurityAuditor performs final audit for IPC safety, preload exposure, file system permissions, secrets handling, updater safety, and release hygiene.
+Phase 11: ProjectManager validates final integration completeness, release readiness, and milestone closure.
+
+Agents must never operate outside this pipeline. Implementation must not begin until scope, architecture, process boundaries, platform requirements, and design constraints are documented.
+
+PROJECT OBJECTIVE
+
+The goal is to produce a production-grade cross-platform desktop application using Electron with clear separation between main process, preload layer, and renderer process, strong IPC discipline, secure OS integration, maintainable architecture, stable packaging, and release-ready behavior across macOS, Windows, and Linux. The application must feel like a real desktop product rather than a website placed inside a desktop shell. Window behavior, menus, keyboard shortcuts, file dialogs, notifications, clipboard interactions, drag and drop, background tasks, persistence, and updater behavior must all be designed as desktop concerns.
+
+PROJECT COMPLETION CRITERIA
+
+The project is complete only when the application builds successfully for supported target platforms, type checking passes, linting passes, unit and integration tests for critical flows pass, renderer and main process communication works correctly, preload exposure is minimal and verified, packaging is valid, signing and notarization requirements are documented where relevant, auto-update strategy is defined if required, crashes and obvious runtime exceptions are eliminated, and no critical security or stability issues remain.
+
+SUPPORTED PLATFORM TARGET
+
+The system must explicitly define whether the app supports macOS only, Windows only, Linux only, or all three desktop targets. If the app is truly cross-platform, platform-specific differences in window chrome, file paths, menu behavior, notifications, keyboard modifiers, tray behavior, installer requirements, permissions, startup behavior, and signing or notarization requirements must be documented and handled intentionally. The application must not assume one platform’s conventions apply unchanged to another.
+
+REPOSITORY STRUCTURE
+
+The repository must follow a clear Electron-native structure.
+
+repo
+apps
+desktop
+src
+main
+preload
+renderer
+components
+pages
+hooks
+state
+services
+ipc
+storage
+platform
+utils
+assets
+tests
+unit
+integration
+e2e
+scripts
+build
+docs
+electron-builder.yml
+package.json
+tsconfig.json
+.env.example
+
+If the project is monorepo-based, workspace boundaries must remain explicit and maintainable. If the project is single-package, process boundaries must still remain explicit and not collapse into one mixed folder.
+
+MILESTONE STRUCTURE
+
+The ProjectManager must define milestones using native desktop release stages. At minimum these stages include architecture freeze, interactive prototype, internal alpha, cross-platform validation, signed beta build, release candidate, and production release readiness. Each milestone must specify feature scope, technical dependencies, blockers, packaging expectations, updater expectations, and acceptance criteria.
+
+ELECTRON SECURITY FIRST RULE
+
+Electron security is mandatory and not optional. The application must use contextIsolation enabled by default, nodeIntegration disabled in renderer by default, sandbox enabled where feasible, and a tightly scoped preload bridge. Renderer code must never access Node.js APIs directly unless explicitly allowed through audited preload exposure. Remote code execution risk, arbitrary file access, unsafe shell execution, and unrestricted IPC are forbidden.
+
+ARCHITECTURE DECISION RULE
+
+Architecture must be selected based on application complexity and process separation requirements. The team must evaluate and document why the chosen renderer framework and state strategy are appropriate for the project, including how the main process, preload layer, renderer, shared types, IPC contracts, storage layer, and background jobs interact. Architecture must be decided before full implementation begins. The system must avoid both monolithic god modules and unnecessary fragmentation.
+
+PROCESS BOUNDARY RULE
+
+The main process owns privileged access, OS integration, window lifecycle, menus, native dialogs, updater orchestration, and sensitive operations. The preload layer exposes a minimal, typed, audited bridge. The renderer handles UI, presentation logic, local interaction state, and calls only approved preload APIs. Business-critical privileged operations must never be executed directly in the renderer. Process boundaries must remain explicit, documented, and enforced by code structure.
+
+IPC CONTRACT RULE
+
+All IPC channels must be typed, versioned if needed, explicitly named, and documented. Unstructured string-based ad hoc IPC is forbidden. Every IPC operation must define request shape, response shape, error shape, privilege level, timeout expectations, and validation requirements. IPC handlers must validate inputs on the privileged side before performing any filesystem, network, shell, or OS-level action.
+
+STATE MANAGEMENT RULE
+
+State ownership must be explicit. UI-local state, app-global state, persisted state, async loading state, window state, and background task state must be clearly separated. The renderer must not become a dumping ground for all application logic. If shared state crosses process boundaries, that transfer must be deliberate and typed. The system must document where React Query, Zustand, Redux, Context API, or other state tools are used and why.
+
+STORAGE RULE
+
+Persistence must be chosen deliberately based on the app’s data model and offline behavior. The team must document whether persistence uses local files, SQLite, IndexedDB, key-value storage, or another desktop-safe mechanism. Sensitive data must never be stored insecurely when OS keychain or secure credential storage is available. Migration behavior, corruption handling, backup expectations, and recovery behavior must be documented. Storage locations must follow platform conventions.
+
+NETWORKING RULE
+
+If networking is required, the team must define whether requests originate in the main process or renderer and why. Timeout handling, retry behavior, cancellation, auth storage, offline support, background sync, streaming, and serialization rules must be documented. The app must never assume stable connectivity. Sensitive network requests should prefer the more controlled side of the architecture when security requires it.
+
+DESKTOP UX RULE
+
+All UI must be designed as desktop UI, not as transplanted mobile UI or plain website UI. The design must account for resizable windows, minimum window sizes, keyboard-first workflows, hover states, focus states, menus, context menus, drag and drop, clipboard flows, file system interactions, multi-window behavior if needed, command palette if relevant, and platform-specific modifier keys. Desktop affordances must be explicit and intentional.
+
+DESIGN SYSTEM RULE
+
+The FrontendDesigner must convert product intent or provided references into a desktop-compatible design system and view hierarchy. Typography scale, spacing scale, color tokens, surface hierarchy, focus states, hover states, loading states, empty states, error states, disabled states, and density behavior must be defined. If the application needs light mode and dark mode, that requirement must be specified early and implemented consistently. Icons, font loading, window framing behavior, and panel layouts must be documented.
+
+ACCESSIBILITY RULE
+
+Accessibility is mandatory. The application must support keyboard navigation, focus visibility, sufficient color contrast, readable sizing, reduced motion behavior where applicable, semantic roles where supported by the renderer framework, and accessible labeling for important interactions. Accessibility support must be treated as a product requirement rather than an optional polish pass.
+
+OBSERVABILITY RULE
+
+Diagnostic output must use structured logging with clear source ownership across main, preload, and renderer. Ad hoc console logging in final output is forbidden unless routed through a controlled logging strategy. Logs must not expose secrets, tokens, local private paths unless necessary, or personal user data. Crashes, failed IPC calls, updater issues, packaging issues, and important service failures must be observable without becoming noisy or unsafe.
+
+TESTING RULE
+
+The application must include testing appropriate to its scope. Core logic, IPC contracts, state transitions, storage boundaries, parsing, and critical workflows should have unit or integration tests. Important user flows should have end-to-end coverage where feasible. Cross-process behaviors must be tested deliberately, not assumed. Manual verification steps must be documented where automation is impractical.
+
+PACKAGING AND RELEASE RULE
+
+The system must produce release output suitable for native desktop distribution. Packaging expectations must be defined per platform, including macOS app bundle and signing or notarization expectations, Windows executable or installer expectations, and Linux packaging expectations if applicable. Auto-update strategy, icons, metadata, versioning, release channel separation, environment separation, and debug-versus-release behavior must be documented. Debug-only code must not remain in release output.
+
+PERFORMANCE RULE
+
+The application must feel responsive and desktop-grade. Startup time, idle memory usage, renderer responsiveness, large list performance, background task isolation, bundle size, unnecessary re-renders, preload overhead, IPC latency, and window creation performance must all be reviewed. Heavy CPU work must not block the renderer. Long-running privileged tasks must not freeze the UI. Performance-sensitive paths must be identified early rather than patched late.
+
+PROJECTMANAGER — ELECTRON PRD REVIEWER AND COORDINATOR
+
+The ProjectManager reviews the PRD and defines cross-platform desktop milestones, feature sequencing, dependency order, and delivery checkpoints. This role sets platform support requirements, packaging expectations, updater expectations, release stages, and coordination rules between design, renderer implementation, and main process implementation. The ProjectManager ensures that product scope remains realistic for Electron architecture and that milestone definitions are concrete enough for build execution.
+
+RESEARCHANALYST — ELECTRON ECOSYSTEM AND DESKTOP RESEARCHER
+
+The ResearchAnalyst researches current Electron capabilities, security recommendations, OS integration constraints, packaging requirements, secure storage options, updater options, platform-specific behavior, accessibility realities, and relevant open source implementation references. This role must distinguish between what Electron supports directly, what must be implemented through Node or native modules, and what remains risky or costly. The output must be concise, current, and implementation-relevant.
+
+TECHNICALIMPLEMENTATIONRESEARCHER — ELECTRON DESKTOP ARCHITECTURE AND OPTIMIZATION RESEARCHER
+
+The TechnicalImplementationResearcher studies the most efficient implementation path for the target features. This includes evaluating renderer framework choice, IPC modeling, preload API design, storage options, updater integration, worker usage, file watching, background processing, media handling, caching strategy, multi-window coordination, and memory behavior. The goal is to recommend a maintainable and performant architecture specifically for a desktop Electron application.
+
+FRONTENDDESIGNER — DESKTOP ELECTRON UI AND UX DESIGN REVIEWER
+
+The FrontendDesigner reviews provided design material and adapts it into a desktop-native design system and screen structure suitable for Electron. This role defines layout rules, spacing, typography, focus states, hover states, command surfaces, window-responsive behavior, toolbar behavior, panel layout, and desktop interaction flows. The design output must reflect actual desktop constraints including resizable windows, sidebars, toolbars, tabs if relevant, keyboard-first workflows, context menus, and dense information layouts where appropriate.
+
+ENTERPRISEARCHITECT — ELECTRON CODE STANDARDS GUARDIAN
+
+The EnterpriseArchitect enforces strict engineering rules. Main, preload, and renderer code must remain separated. No god modules are allowed. No direct Node access in renderer is allowed unless explicitly justified and audited. All IPC must be typed and validated. Secrets must never be hardcoded. Shell execution, filesystem access, and external process spawning must be isolated and strictly controlled. Reusable logic must not be duplicated. File naming must be descriptive and consistent. Shared types must be centralized. Public preload surface must be minimal. The architecture must remain secure and maintainable rather than imitating an unbounded full-trust desktop script.
+
+FRONTENDDEVELOPER — ELECTRON RENDERER ENTERPRISE ENGINEER
+
+The FrontendDeveloper implements the renderer application using the chosen frontend stack with strict type safety, maintainable component structure, predictable state management, desktop-aware interaction patterns, and minimal assumptions about privileged access. The renderer must consume only approved preload APIs or safe local browser APIs. The developer must implement loading states, error states, empty states, responsive window behavior, and keyboard-friendly interactions appropriate for desktop usage.
+
+BACKENDDEVELOPER — ELECTRON MAIN PROCESS AND PRELOAD ENGINEER
+
+The BackendDeveloper implements the Electron main process, preload bridge, IPC handlers, privileged integrations, storage access boundaries, menus, dialogs, notifications, background tasks, updater coordination, and platform integrations. This role owns sensitive operations and must validate all inputs before executing privileged actions. The preload layer must expose only minimal typed APIs. The implementation must be production-grade, secure, and aligned with the approved process model.
+
+BUILDVERIFICATIONENGINEER — ELECTRON BUILD, PACKAGE, AND DEPLOYMENT SPECIALIST
+
+The BuildVerificationEngineer validates local builds, packaging configuration, signing expectations, environment separation, preload bundling, IPC wiring, updater flow if applicable, installer integrity, and cross-platform runtime correctness. This role must confirm that production builds behave correctly, source maps and debug settings are handled appropriately, packaged apps launch correctly, and release artifacts are consistent with expectations.
+
+CODEREVIEWER — ELECTRON BUILD OPTIMIZER AND PERFORMANCE TUNER
+
+The CodeReviewer eliminates type errors, lint issues, avoidable bundle bloat, unnecessary renderer re-renders, untyped IPC paths, memory leaks, stale event listeners, preload overexposure, slow startup behavior, and privileged operations running on the wrong side of the architecture. This role reviews both correctness and runtime suitability for Electron desktop execution.
+
+SECURITYAUDITOR — ELECTRON SECURITY AND RELEASE AUDITOR
+
+The SecurityAuditor performs the final security and release review. Context isolation, sandbox policy, node integration policy, preload exposure, IPC validation, filesystem safety, secure credential storage, updater trust model, remote content policy, CSP strategy, shell execution boundaries, debug feature removal, and packaging hygiene must all be reviewed. The final audit must clearly state whether the application is safe and appropriate for internal alpha, public beta, or production release.
+
+IMPLEMENTATION CONSTRAINTS
+
+Use Electron as the desktop runtime. Maintain strict separation between main, preload, and renderer. Disable nodeIntegration in renderer by default. Enable contextIsolation by default. Use a minimal preload bridge. Validate all IPC inputs. Do not expose arbitrary filesystem, shell, or process APIs to renderer code. Do not hardcode secrets. Do not treat the desktop app as a normal website. Do not start implementation before milestone definition, architecture decision, process boundary review, platform requirement review, and design constraints are complete.
+
+Carefully review the full `PRD.md` and then inspect every single line of the current Electron cross-platform desktop application codebase, including main process, renderer process, preload scripts, IPC architecture, window lifecycle, view structure, routing, UI flow, interaction logic, state management, local persistence, file system access, settings model, update flow, packaging configuration, platform integrations, security model, performance behavior, and all existing screens, panels, dialogs, and workflows. The current application is not usable as a real product: it lacks meaningful interaction, lacks coherent UX flow, lacks clear information hierarchy, lacks robust state handling, lacks polished desktop behavior, lacks complete feature implementation, lacks proper security boundaries, and lacks the depth required for a finished cross-platform Electron application. Treat the current build as an unusable prototype and fully redesign it into a complete, production-ready, polished desktop product.
+
+Your task is to fully rebuild the application into a feature-complete, maintainable, performant, and production-ready cross-platform desktop experience. Do not do superficial edits. Do not only patch isolated bugs. Do not leave placeholder windows, placeholder views, placeholder copy, placeholder workflows, placeholder IPC hooks, incomplete screens, incomplete platform integrations, insecure bridges, mock logic, or “TODO” implementations. Redo the whole application in depth. This includes but is not limited to: full product flow, onboarding, window structure, multi-panel layout if relevant, navigation, keyboard and mouse interactions, drag-and-drop if relevant, empty states, loading states, error states, visual hierarchy, interaction feedback, text content, settings flow, persistence, async/background task coordination, IPC boundaries, file workflows, command palette if relevant, system integrations, update behavior, and overall product cohesion.
+
+Build the app as if it must stand on its own as a real commercial desktop product, not a demo. Every screen must have purpose. Every control must have a clear function. Every interaction must produce visible and coherent feedback. Every major section must have readable information architecture, UX integrity, visual hierarchy, and product meaning. Add proper onboarding so a first-time user can understand what to do. Add product structure so the app has a reason to be used continuously. Add all missing interaction logic. Add polished UI presentation. Add complete user-facing text wherever necessary. Add proper settings, logs, history, file/workspace flow, shortcuts, menus, dialogs, and desktop-native behaviors expected from a serious Electron application.
+
+You must work systematically and deeply, not lazily. First, audit the entire PRD and the full codebase. Identify all broken, missing, shallow, placeholder, insecure, or incoherent systems. Then redesign the application architecture where needed so the final result is maintainable and expandable. Then implement the full app end to end. Rewrite systems if the current ones are fundamentally bad. Replace weak screens if needed. Replace weak state flow if needed. Replace weak IPC design if needed. Rewrite copy, flows, and interaction logic if needed. Improve visual design, event handling, async coordination, security boundaries, state transitions, platform adaptation, and UX details so the result feels intentional and complete.
+
+The rebuilt application must be truly designed for Electron and desktop-quality behavior, not just a web page wrapped in a shell. Respect the Electron architecture properly. Build a clean separation between main process, renderer process, and preload layer. Use secure IPC patterns. Minimize attack surface. Use context isolation, disable unsafe defaults, expose only explicit preload APIs, and avoid insecure renderer access to Node capabilities. Handle native menus, window controls, file dialogs, notifications, clipboard access, deep links, protocol handlers, and OS integrations properly where relevant. The final product must feel like a serious desktop application on macOS, Windows, and Linux, not a browser tab pretending to be native.
+
+Prefer a production-grade Electron architecture and implementation style: strong module boundaries, explicit state ownership, clear separation between UI, domain logic, desktop integration, and persistence, predictable async execution, structured IPC contracts, robust error propagation, structured logging, testable units, maintainable packaging, and release-ready update strategy. If the current stack is weak or inconsistent, replace it with a maintainable Electron-native architecture.
+
+If relevant, support:
+- Multi-window or multi-panel workflows.
+- Workspace/project-based usage model.
+- Local-first persistence where appropriate.
+- File system integration, drag-and-drop, import/export, and artifact management.
+- Keyboard-first desktop workflows and command palette behavior.
+- Run history, logs, diagnostics, and error surfacing.
+- Auto-update flow where appropriate.
+- Crash handling, recovery, and safe state restoration.
+- Cross-platform packaging and runtime stability.
+- Clear security hardening across main, preload, and renderer boundaries.
+
+Deliverables must include:
+1. A full design and engineering audit of the current PRD and codebase, listing all major problems and why they make the application incomplete, insecure, or unusable.
+2. A complete redesign plan aligned with the PRD, including product flow, screen and window structure, navigation model, interaction model, IPC model, state model, persistence model, platform behavior, security model, and feature structure.
+3. A clear Electron architecture covering main process responsibilities, renderer responsibilities, preload API surface, IPC contracts, permissions, and security boundaries.
+4. Full implementation of all missing or broken systems in code.
+5. Fully functional screens, dialogs, panels, and workflows with complete interactions, guidance, and cross-platform desktop behavior.
+6. Complete user-facing copy and content where required, not placeholders.
+7. Full onboarding and product flow implementation from first launch to continued daily use.
+8. Proper animation and transition polish where technically appropriate for a desktop app.
+9. Application UX polish equivalent to game feel: responsiveness, feedback, clarity, smooth transitions, keyboard usability, pointer precision, and operational confidence.
+10. Removal of dead code, broken systems, placeholder logic, insecure patterns, and unused structures where appropriate.
+11. Packaging, updater, and runtime readiness for supported desktop platforms.
+12. A final fully usable Electron cross-platform desktop application, not a partial refactor.
+
+Rules:
+- Do not be lazy.
+- Do not summarize only.
+- Do not stop at analysis.
+- Do not leave placeholder text such as “coming soon”, “TODO”, “insert copy here”, mock screens, fake workflows, or dummy interactions.
+- Do not preserve bad legacy code just for convenience.
+- Do not make minimal edits when a system needs to be rebuilt.
+- Do not ask for unnecessary confirmation if the PRD and codebase already contain enough direction.
+- Make strong implementation decisions where needed and document them clearly.
+- Maintain internal consistency across product logic, UI, state, IPC behavior, persistence, async behavior, security boundaries, and platform integration.
+- Keep the visual and interaction design cohesive with a polished, premium desktop product identity.
+- Respect Electron constraints and strengths, but do not use them as an excuse for weak UX, poor security, or incomplete functionality.
+- Do not rush or shortcut the work. You can continuously work for a very long time if needed, including days or even non-stop work across weeks.
+- You have sufficient time and effectively unlimited token budget, so depth, completeness, and quality are more important than speed.
+
+Execution order:
+Phase 1: Read and understand the entire `PRD.md`.
+Phase 2: Review the entire codebase line by line and identify all structural, UX, engineering, IPC, security, platform, and packaging deficiencies.
+Phase 3: Produce a concrete rebuild plan.
+Phase 4: Redesign the desktop architecture across main process, renderer, preload, persistence, and platform integration.
+Phase 5: Implement the rebuilt app system by system.
+Phase 6: Connect all features into a complete and coherent Electron-based cross-platform desktop experience.
+Phase 7: Polish UX, state flow, async behavior, IPC contracts, security, platform behavior, keyboard workflows, animation, and packaging.
+Phase 8: Final verification: the application must be launchable, understandable, navigable, responsive, useful, stable, secure, and complete across supported desktop platforms.
+
+Assume the goal is not “improve a prototype” but “finish the app for real.” Act like a principal Electron engineer, desktop architect, security engineer, product designer, UX designer, build/release engineer, and technical director combined. Produce real implementation, real workflows, and a complete result.
\ No newline at end of file
diff --git a/README.md b/README.md
new file mode 100644
index 00000000..9428f19e
--- /dev/null
+++ b/README.md
@@ -0,0 +1,47 @@
+# AgentCompany
+
+Cross-platform Electron desktop control plane for local-first AI agent companies.
+
+AgentCompany is a standalone desktop application for managing multiple AI coding agents (Codex, Claude Code, Gemini CLI, OpenCode, Kimi Code) as an organization with goals, tasks, approvals, budgets, and audit trails.
+
+## Quick Start
+
+```sh
+pnpm install
+pnpm dev
+```
+
+## Verification
+
+```sh
+pnpm typecheck
+pnpm lint
+pnpm test:unit
+pnpm test:integration
+pnpm build
+```
+
+## Packaging
+
+```sh
+pnpm build        # Compile + package (DMG/NSIS/AppImage)
+pnpm build:dir    # Compile + unpackaged directory
+```
+
+- Supported targets: macOS, Windows, Linux
+- Packaging uses `electron-builder`
+- Local builds use ad-hoc signing (`CSC_IDENTITY_AUTO_DISCOVERY=false`)
+- Defaults to `--publish never`; override with `AGENTCOMPANY_ELECTRON_PUBLISH` env var
+
+## Architecture
+
+```
+src/
+  main/              # Electron main process, IPC, orchestration, database
+  preload/           # Typed bridge (contextIsolation)
+  renderer/          # React UI
+  shared/            # Contracts, types shared across processes
+packages/
+  adapter-utils/     # Shared adapter utilities
+  adapter-*/         # Per-connector adapter packages
+```
diff --git a/assets/icon.icns b/assets/icon.icns
new file mode 100644
index 00000000..4e90364c
Binary files /dev/null and b/assets/icon.icns differ
diff --git a/assets/icon.ico b/assets/icon.ico
new file mode 100644
index 00000000..51fce758
Binary files /dev/null and b/assets/icon.ico differ
diff --git a/assets/icon.png b/assets/icon.png
new file mode 100644
index 00000000..9a5ed061
Binary files /dev/null and b/assets/icon.png differ
diff --git a/assets/icon.svg b/assets/icon.svg
new file mode 100644
index 00000000..36d4964d
--- /dev/null
+++ b/assets/icon.svg
@@ -0,0 +1,21 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" fill="none">
+  <defs>
+    <linearGradient id="bg" x1="200" x2="824" y1="96" y2="928" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#111315"/>
+      <stop offset="1" stop-color="#1b1f23"/>
+    </linearGradient>
+    <radialGradient id="glow" cx="0" cy="0" r="1"
+      gradientTransform="translate(450 348) rotate(36) scale(800)" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#d97745" stop-opacity=".13"/>
+      <stop offset="1" stop-color="#d97745" stop-opacity="0"/>
+    </radialGradient>
+  </defs>
+  <rect width="896" height="896" x="64" y="64" rx="224" fill="url(#bg)"/>
+  <rect width="896" height="896" x="64" y="64" rx="224" fill="url(#glow)"/>
+  <polygon points="490,200 534,200 578,800 298,800" fill="#d97745" fill-opacity=".94"/>
+  <polygon points="490,200 534,200 726,800 446,800" fill="#d97745" fill-opacity=".94"/>
+  <rect x="400" y="419" width="224" height="42" rx="12" fill="#ffebd7"/>
+  <rect x="374" y="524" width="276" height="42" rx="12" fill="#ebb48c"/>
+  <rect x="348" y="629" width="328" height="42" rx="12" fill="#be8c69"/>
+  <circle cx="512" cy="198" r="20" fill="#ffebd7"/>
+</svg>
diff --git a/docs/01-project-manager-scope.md b/docs/01-project-manager-scope.md
new file mode 100644
index 00000000..39694cdf
--- /dev/null
+++ b/docs/01-project-manager-scope.md
@@ -0,0 +1,205 @@
+# Phase 1: ProjectManager Scope And Milestones
+
+## Product Frame
+
+- Product working name: `AgentCompany`
+- Product type: cross-platform Electron desktop application
+- Platform target: macOS, Windows, Linux
+- Primary mode: local-first single-operator control plane
+- Product goal: run a multi-agent company from one desktop application with explicit control over connectors, workspaces, tasks, runs, approvals, budgets, logs, and recovery
+
+## Scope Source
+
+- Existing Paperclip concept from `doc/GOAL.md`, `doc/PRODUCT.md`, `doc/SPEC-implementation.md`
+- Rebuild constraints and product direction from `/Users/zacharyzhang/Documents/Github/paperclip/PRD.md`
+
+## Supported MVP Domains
+
+- Local profile with backup and restore
+- Multi-company local data model
+- Connector registry with capability matrix
+- Agent registry and org tree
+- Goals, projects, tasks, lineage
+- Run orchestration with session persistence and live console
+- Approval queue and governance actions
+- Cost tracking and budget hard-stop behavior
+- Activity timeline and run diagnostics
+- Workspace and repository management
+- Secret management with OS-backed encryption where available
+- Packaging, signing configuration, updater wiring, and crash-safe recovery hooks
+
+## Explicit Platform Decision
+
+AgentCompany targets all three desktop platforms in the first implementation.
+
+Platform-specific constraints that must be handled intentionally:
+
+- macOS:
+  - standard traffic-light window controls
+  - `Cmd` modifiers in menus and shortcuts
+  - notification permission behavior
+  - notarization and Developer ID signing requirements
+  - `safeStorage` may block while Keychain access is resolved
+- Windows:
+  - NSIS installer target
+  - `Ctrl` modifiers in menus and shortcuts
+  - AppUserModelID and toast notification expectations
+  - code signing certificate requirement for trusted distribution
+- Linux:
+  - AppImage target with optional deb/rpm later
+  - tray behavior differs by desktop environment
+  - `safeStorage` backend may degrade to `basic_text`, so fallback vault behavior must stay explicit
+
+## Delivery Milestones
+
+### 1. Architecture Freeze
+
+Feature scope:
+
+- final process model
+- profile/storage layout
+- IPC contract surface
+- connector capability model
+- initial screen map
+
+Dependencies:
+
+- PRD audit
+- Electron security research
+- platform packaging research
+
+Acceptance criteria:
+
+- architecture docs complete
+- privileged boundaries defined
+- no renderer-to-Node direct access
+
+### 2. Interactive Prototype
+
+Feature scope:
+
+- shell window
+- top nav + sidebar + utility drawer
+- onboarding flow
+- fake local data rendered from real repositories/services
+
+Dependencies:
+
+- design system
+- typed preload bridge
+- renderer route skeleton
+
+Acceptance criteria:
+
+- navigable desktop shell
+- keyboard navigation baseline
+- console drawer and inspector patterns established
+
+### 3. Internal Alpha
+
+Feature scope:
+
+- local SQLite profile
+- connectors registry and environment checks
+- agents/tasks/approvals/workspaces CRUD
+- utility-process orchestrator
+- real run launch for supported local connectors
+
+Dependencies:
+
+- repository layer
+- connector host
+- activity logging
+
+Acceptance criteria:
+
+- launch first task run from onboarding
+- view live logs
+- persist app state across restart
+
+### 4. Cross-Platform Validation
+
+Feature scope:
+
+- window/menu differences
+- path handling
+- notifications
+- backup/restore
+- crash recovery path
+
+Dependencies:
+
+- packaged test builds
+- platform QA checklist
+
+Acceptance criteria:
+
+- app boots and navigates on macOS, Windows, Linux
+- core workflows verified on each target
+
+### 5. Signed Beta Build
+
+Feature scope:
+
+- electron-builder config
+- signing env handling
+- updater channel wiring
+- production logging paths
+
+Dependencies:
+
+- build pipeline
+- signing assets
+
+Acceptance criteria:
+
+- signed distributables generated
+- updater checks optional and disableable
+- release metadata generated
+
+### 6. Release Candidate
+
+Feature scope:
+
+- performance pass
+- memory/resource leak pass
+- e2e coverage for critical flows
+- security audit fixes
+
+Dependencies:
+
+- alpha feedback
+- perf instrumentation
+
+Acceptance criteria:
+
+- no known critical security issue
+- no crash in scripted happy path flows
+- startup and live console remain responsive under load
+
+### 7. Production Release Readiness
+
+Feature scope:
+
+- release checklist
+- support docs
+- backup guidance
+- known limitations register
+
+Dependencies:
+
+- verification results
+- signing and packaging validation
+
+Acceptance criteria:
+
+- typecheck/build/tests pass or deviations are explicitly recorded
+- security and packaging docs complete
+- final manual QA checklist complete
+
+## Feature Sequencing Rules
+
+- Connector execution begins only after IPC and orchestration boundaries are documented.
+- Renderer implementation begins only after screen structure and state ownership are defined.
+- Packaging config begins early, but signing and updater activation stay behind environment gating.
+- Kimi support is tracked explicitly. If its runtime contract remains lower capability than other first-class connectors, the UI must declare the downgrade rather than hiding it.
diff --git a/docs/02-current-paperclip-audit.md b/docs/02-current-paperclip-audit.md
new file mode 100644
index 00000000..f6b28234
--- /dev/null
+++ b/docs/02-current-paperclip-audit.md
@@ -0,0 +1,162 @@
+# Phase 1: Current Paperclip Audit
+
+## Audit Boundary
+
+This audit compares the current Paperclip repository against the target state defined in `PRD.md`: a secure Electron desktop application with strict `main` / `preload` / `renderer` separation, local-first orchestration, packaging, and OS-integrated workflows.
+
+## Severity 0: Blocking Architectural Mismatch
+
+### 1. No Electron process model exists
+
+- Current repo contains no `BrowserWindow`, `preload`, `contextBridge`, `ipcMain`, `ipcRenderer`, `utilityProcess`, or packaging configuration.
+- Evidence:
+  - root search for Electron APIs returns no application implementation
+  - [server/src/app.ts](/Users/zacharyzhang/Documents/Github/paperclip/server/src/app.ts)
+  - [ui/src/App.tsx](/Users/zacharyzhang/Documents/Github/paperclip/ui/src/App.tsx)
+
+Impact:
+
+- There is no privileged boundary for filesystem, keychain, window lifecycle, native dialogs, menus, notifications, updater, or desktop protocol handling.
+- The current product cannot be hardened into a desktop app by shell-wrapping the existing UI.
+
+### 2. Orchestration is server-centric, not desktop-local
+
+- Heartbeat execution, run tracking, workspace realization, and activity propagation live in the server process.
+- Evidence:
+  - [server/src/services/heartbeat.ts](/Users/zacharyzhang/Documents/Github/paperclip/server/src/services/heartbeat.ts)
+  - [server/src/services/workspace-runtime.ts](/Users/zacharyzhang/Documents/Github/paperclip/server/src/services/workspace-runtime.ts)
+
+Impact:
+
+- The current implementation assumes a long-lived backend service instead of a desktop-owned local orchestration core.
+- Crash semantics, app restart recovery, and foreground/background coordination are not modeled as desktop concerns.
+
+### 3. The product shell is a routed web board, not a desktop console
+
+- The top-level UI is route-driven, page-centric, and optimized for browser navigation rather than split-pane desktop operations.
+- Evidence:
+  - [ui/src/App.tsx](/Users/zacharyzhang/Documents/Github/paperclip/ui/src/App.tsx)
+  - [ui/src/components/Layout.tsx](/Users/zacharyzhang/Documents/Github/paperclip/ui/src/components/Layout.tsx)
+
+Impact:
+
+- No desktop-native command surfaces for file dialogs, tray, menu actions, run console docking, workspace reveal, or keyboard-first operations.
+- Core runtime objects such as connector health, workspace locks, session continuity, and log streams are not first-order interaction primitives.
+
+## Severity 1: Major Product And UX Gaps
+
+### 4. Onboarding is web-form oriented and does not establish a desktop local profile
+
+- Existing onboarding creates company, CEO, and task records through API calls, but it does not create a local profile boundary, filesystem roots, workspace permissions, or connector health setup.
+- Evidence:
+  - [ui/src/components/OnboardingWizard.tsx](/Users/zacharyzhang/Documents/Github/paperclip/ui/src/components/OnboardingWizard.tsx)
+
+Impact:
+
+- First launch does not establish the desktop objects required by the PRD: local profile, workspace selection, connector detection, secret storage, and first-run orchestration.
+
+### 5. Connector differences are hidden inside adapter packages instead of surfaced as product-level capability states
+
+- Adapters exist, but the UI treats them mainly as form configuration.
+- Evidence:
+  - [server/src/adapters/registry.ts](/Users/zacharyzhang/Documents/Github/paperclip/server/src/adapters/registry.ts)
+  - [ui/src/adapters/index.ts](/Users/zacharyzhang/Documents/Github/paperclip/ui/src/adapters/index.ts)
+
+Impact:
+
+- Users cannot reason about installation status, auth status, session resume support, structured transcript support, graceful cancel support, or unattributed cost behavior at the product level.
+
+### 6. Workspace and repo context are present in backend logic but weak in the product hierarchy
+
+- Workspace realization and worktree logic already exist, but they are not promoted to a central desktop experience.
+- Evidence:
+  - [server/src/services/workspace-runtime.ts](/Users/zacharyzhang/Documents/Github/paperclip/server/src/services/workspace-runtime.ts)
+  - [doc/DEVELOPING.md](/Users/zacharyzhang/Documents/Github/paperclip/doc/DEVELOPING.md)
+
+Impact:
+
+- The codebase contains useful execution semantics, but the current UI still behaves like a CRUD admin console with runtime details buried behind secondary screens.
+
+### 7. Run console and diagnostics are not treated as a persistent operational surface
+
+- Logs and transcript UX exist, but not as a docked desktop utility layer with search, filtering, and background status awareness.
+- Evidence:
+  - [ui/src/components/transcript/RunTranscriptView.tsx](/Users/zacharyzhang/Documents/Github/paperclip/ui/src/components/transcript/RunTranscriptView.tsx)
+  - [ui/src/pages/RunTranscriptUxLab.tsx](/Users/zacharyzhang/Documents/Github/paperclip/ui/src/pages/RunTranscriptUxLab.tsx)
+
+Impact:
+
+- Long-running desktop workflows need a utility drawer, live fan-out events, failure escalation, and state restoration, which the current web UX does not provide.
+
+## Severity 2: Security And Desktop-Readiness Gaps
+
+### 8. No preload boundary means there is no audited API surface for privileged actions
+
+Impact:
+
+- Desktop actions such as open folder, reveal artifact, backup profile, launch connector, store secret, or trigger updater would currently have no typed, validated boundary.
+
+### 9. Secret handling is designed for server deployment, not OS keychain-first desktop storage
+
+- Current repo includes secret versioning and local encrypted storage semantics.
+- Evidence:
+  - [server/src/services/secrets.ts](/Users/zacharyzhang/Documents/Github/paperclip/server/src/services/secrets.ts)
+  - [doc/DATABASE.md](/Users/zacharyzhang/Documents/Github/paperclip/doc/DATABASE.md)
+
+Impact:
+
+- The PRD requires OS-backed secure storage first. The current implementation does not model Electron `safeStorage`, keychain backend selection, or desktop fallback behavior.
+
+### 10. Packaging, signing, and updater flows do not exist
+
+Impact:
+
+- There is no release artifact model for DMG/NSIS/AppImage, no signing config, no update metadata flow, and no environment gates for release versus dev behavior.
+
+### 11. IPC sender validation, CSP, and custom protocol concerns are absent because there is no desktop surface yet
+
+Impact:
+
+- These are not bugs in the current web app, but they are missing mandatory controls for the target architecture.
+
+## Severity 3: Maintainability Risks When Porting Directly
+
+### 12. Existing routes and page layout would pull too much orchestration detail into the renderer
+
+- The current UI is page-heavy and query-heavy.
+- Directly transplanting it into an Electron renderer would encourage business and privileged logic to leak upward.
+
+### 13. Current shared contracts are REST-oriented
+
+- Existing shared types target HTTP API payloads and server validation.
+- Evidence:
+  - [packages/shared/src/api.ts](/Users/zacharyzhang/Documents/Github/paperclip/packages/shared/src/api.ts)
+  - [packages/shared/src/types](/Users/zacharyzhang/Documents/Github/paperclip/packages/shared/src/types)
+
+Impact:
+
+- Desktop IPC contracts need operation-specific schemas, privilege labels, and request/response/error shapes rather than generic REST reuse.
+
+### 14. Current database layer is PostgreSQL-first
+
+- Evidence:
+  - [packages/db/src/schema](/Users/zacharyzhang/Documents/Github/paperclip/packages/db/src/schema)
+  - [doc/DATABASE.md](/Users/zacharyzhang/Documents/Github/paperclip/doc/DATABASE.md)
+
+Impact:
+
+- The desktop app needs an embedded local database with explicit migration and recovery semantics. The current schema is a strong domain reference, but not a direct persistence drop-in.
+
+## Valuable Assets To Reuse
+
+- Company-scoped domain language
+- Agent org tree semantics
+- Goal / project / issue lineage rules
+- Approval lifecycle semantics
+- Budget and cost event concepts
+- Existing local connector adapter patterns for Codex, Claude, Gemini, OpenCode, Cursor, and generic process/http modes
+- Workspace and runtime service orchestration ideas
+
+## Rewrite Decision
+
+AgentCompany should reuse domain concepts and selected adapter/runtime patterns, but it should not inherit the current app shell, server-centric topology, or browser-admin navigation model.
diff --git a/docs/03-research-analyst-findings.md b/docs/03-research-analyst-findings.md
new file mode 100644
index 00000000..bd29ad0c
--- /dev/null
+++ b/docs/03-research-analyst-findings.md
@@ -0,0 +1,99 @@
+# Phase 2: ResearchAnalyst Findings
+
+## Sources
+
+- Electron security checklist: https://www.electronjs.org/docs/latest/tutorial/security
+- Electron safeStorage API: https://www.electronjs.org/docs/latest/api/safe-storage
+- Electron utilityProcess API: https://www.electronjs.org/docs/latest/api/utility-process
+- electron-builder auto-update: https://www.electron.build/auto-update
+- electron-builder code signing: https://www.electron.build/code-signing
+- Electron releases schedule: https://releases.electronjs.org/schedule
+- Electron releases index: https://releases.electronjs.org/release
+- Kimi Code official product/docs entry:
+  - https://www.kimi.com/code
+  - https://www.kimi.com/code/docs/en/
+
+## Electron Security Requirements
+
+From current Electron guidance, AgentCompany must treat desktop privilege as a first-order security boundary:
+
+- load only local packaged content in the main renderer
+- keep `nodeIntegration` disabled
+- keep `contextIsolation` enabled
+- keep renderer sandboxing enabled where feasible
+- expose a minimal preload API through `contextBridge`
+- validate IPC sender and payloads
+- restrict navigation and new window creation
+- avoid `file://` in production and prefer a custom protocol
+- define a restrictive CSP
+- never expose shell or filesystem primitives wholesale to renderer code
+
+## Runtime Version Decision
+
+- Initial architecture research targeted Electron `41.0.0`.
+- Build verification on March 12, 2026 found `better-sqlite3@12.6.2` failing native rebuild against Electron `41.0.0` / Node `24.14.0`.
+- The implementation baseline is therefore pinned to Electron `39.8.0` for now.
+
+Why this downgrade is deliberate:
+
+- Electron `39.8.0` is still a stable release line as of March 12, 2026.
+- It preserves the existing SQLite storage implementation without forcing a same-phase storage rewrite.
+- The downgrade is narrower in scope than replacing persistence with a different driver while the product shell, IPC, and orchestration layers are still being completed.
+
+Upgrade condition:
+
+- Revisit Electron `41.x` after the SQLite layer is migrated to a compatible runtime path or the upstream native module supports the newer V8 ABI cleanly.
+
+## Secret Storage Findings
+
+- `safeStorage` is main-process only and uses OS-backed cryptography semantics.
+- macOS: keychain-backed, app-specific protection
+- Windows: DPAPI-backed, user-scope protection
+- Linux: backend varies; it can degrade to `basic_text`
+
+Product implication:
+
+- AgentCompany should use `safeStorage` when encryption is available.
+- On Linux, the app must surface the selected backend and explicitly fall back to an app-local encrypted vault when the selected backend is `basic_text` or unavailable.
+
+## Background Processing Findings
+
+- `utilityProcess.fork()` provides a Chromium-managed child process with Node enabled and message ports available.
+- It is appropriate for orchestration work that should not block the renderer and should stay separate from window lifecycle concerns.
+
+Product implication:
+
+- Use a utility process for the orchestration core, run queue, workspace locks, and connector process supervision.
+- Keep UI projection in renderer, privileged OS coordination in main, and long-running execution in the utility process.
+
+## Packaging And Updater Findings
+
+- electron-builder supports cross-platform packaging with:
+  - macOS: `dmg` plus `zip`
+  - Windows: `nsis`
+  - Linux: `AppImage` and optional deb/rpm variants
+- Auto-update via `electron-updater` relies on generated metadata files such as `latest.yml`.
+- macOS auto-update requires a signed app.
+- Windows signing is also supported and should be treated as a release requirement.
+
+Product implication:
+
+- Package targets should default to DMG/ZIP, NSIS, and AppImage.
+- Update checks must be opt-in/disableable by user setting, as required by the PRD.
+- Signing configuration should be environment-driven and absent values must not block local development.
+
+## Desktop UX Research Conclusions
+
+- Desktop-first operators need split-pane information density, not a marketing-site layout.
+- Keyboard navigation, command surfaces, and context-preserving utility drawers matter more than route purity.
+- File reveal, open folder, drag/drop, and copy path are standard desktop affordances and should be first-class actions.
+
+## Connector Research Conclusions
+
+- The current Paperclip repo already contains strong local connector patterns for Codex, Claude Code, Gemini CLI, and OpenCode.
+- Kimi Code is a real official CLI offering, but its desktop integration contract requires explicit treatment instead of assuming parity with the existing adapters.
+
+Implementation decision:
+
+- Reuse the established adapter contract ideas from current Paperclip for supported local connectors.
+- Represent advanced capability differences explicitly in the connector registry and task/run UX.
diff --git a/docs/04-technical-implementation-research.md b/docs/04-technical-implementation-research.md
new file mode 100644
index 00000000..a55b4098
--- /dev/null
+++ b/docs/04-technical-implementation-research.md
@@ -0,0 +1,128 @@
+# Phase 3: TechnicalImplementationResearcher Decisions
+
+## Architecture Choice
+
+- Runtime: Electron `39.8.0`
+- Renderer: React + Vite + TypeScript
+- UI motion: Framer Motion, used selectively for layout transitions, state feedback, and utility-drawer choreography
+- Data: SQLite with WAL mode and a single-writer orchestration queue
+- Orchestration: Electron utility process
+- Packaging: electron-builder
+- Updates: `electron-updater`, gated by app settings and environment
+
+## Why This Stack
+
+- Electron is required by the project constraints and matches the need for local CLI/runtime orchestration.
+- React is already aligned with repo knowledge and keeps renderer iteration fast.
+- SQLite with WAL provides embedded local durability and low setup overhead, matching the PRD requirement to start without external database installation.
+- A utility process avoids freezing the renderer during process supervision, lock management, or log ingestion.
+
+Version note:
+
+- Electron `41.0.0` was evaluated first, but the shipping baseline moved to `39.8.0` because the current SQLite native dependency did not rebuild cleanly on the newer runtime during packaging verification.
+
+## State Ownership
+
+### Renderer-only state
+
+- split-pane layout and inspector visibility
+- filter/search state
+- command palette visibility
+- form drafts
+- optimistic mutation feedback
+
+### Main-process privileged state
+
+- windows
+- menus
+- file dialogs
+- notifications
+- backup/import/export paths
+- updater lifecycle
+- safeStorage encryption/decryption
+
+### Utility-process orchestration state
+
+- connector child process registry
+- run queue
+- workspace write locks
+- per-agent concurrency locks
+- session persistence and resume eligibility
+- unfinished run reconciliation
+
+### Persisted local state
+
+- companies
+- connectors and connector config documents
+- workspaces
+- agents
+- goals/projects/tasks
+- approvals and comments
+- runs, run events, cost events
+- activity log
+- app settings and window state
+
+## IPC Model
+
+IPC is split into three layers:
+
+1. Renderer to preload:
+   - typed methods only
+   - no raw channel strings in UI components
+2. Preload to main:
+   - schema-validated request/response handlers
+   - sender verified in main
+3. Main to utility process:
+   - internal command bus over message ports
+   - used for orchestration, not for UI privilege elevation
+
+## Storage Strategy
+
+- Database file: `profile.sqlite` under app profile data directory
+- WAL enabled
+- Attachments/logs/artifacts stored as files, indexed in SQLite
+- Secrets stored via `safeStorage` when available; otherwise fallback encrypted vault plus explicit risk state on Linux
+- Backups stored as timestamped archives under `backups/`
+
+## Performance Strategy
+
+- Renderer subscribes to normalized event streams instead of raw connector protocol noise
+- Utility process owns long-running child processes
+- Log viewer uses chunked pagination and windowed rendering
+- Expensive derived summaries are computed in main/utility and sent as projections
+
+## Connector Strategy
+
+Connector contract layers:
+
+- required:
+  - detect installation
+  - health/auth check
+  - execute
+  - normalize stdout/stderr/events
+  - declare capability matrix
+- optional:
+  - session resume
+  - graceful cancel
+  - model discovery
+  - structured transcript
+  - cost attribution
+
+## Updater Strategy
+
+- default channel: disabled unless configured
+- manual update check available from app menu and settings
+- before install:
+  - write backup manifest
+  - flush db/log handles
+- if signature validation fails:
+  - reject install
+  - record audit event
+
+## Failure Model
+
+- app restart scans unfinished runs
+- stale running records become `interrupted`
+- retryable runs expose resume/retry actions in UI
+- workspace lock conflicts enqueue runs as `queued`
+- connector health failures block new run dispatch
diff --git a/docs/05-enterprise-architecture.md b/docs/05-enterprise-architecture.md
new file mode 100644
index 00000000..f78841dd
--- /dev/null
+++ b/docs/05-enterprise-architecture.md
@@ -0,0 +1,113 @@
+# Phase 4: EnterpriseArchitect Standards
+
+## Top-Level Structure
+
+```text
+AgentCompany/
+  assets/
+  build/
+  docs/
+  scripts/
+  src/
+    main/
+    preload/
+    renderer/
+    shared/
+  tests/
+    unit/
+    integration/
+    e2e/
+  electron-builder.yml
+  package.json
+  tsconfig.json
+  .env.example
+```
+
+## Process Boundaries
+
+### Main process owns
+
+- window lifecycle
+- app protocol registration
+- IPC gateway
+- menu construction
+- native dialogs
+- notifications
+- updater
+- backup/restore coordination
+- safeStorage and vault bridge
+
+### Preload owns
+
+- narrow typed API
+- event subscription bridge
+- no business logic
+- no dynamic API exposure
+
+### Renderer owns
+
+- UI composition
+- read-only projections
+- local interaction state
+- invoking approved preload methods
+
+### Utility process owns
+
+- run execution
+- connector process supervision
+- workspace and agent locking
+- timeout handling
+- normalized event emission
+
+## Naming Rules
+
+- Use descriptive file names by role: `connector-service.ts`, `run-controller.ts`, `profile-repository.ts`
+- Shared schemas live under `src/shared`
+- No renderer component may import from `src/main`
+- No preload module may import from `src/renderer`
+
+## IPC Rules
+
+- All channels are constants in `src/shared/contracts/ipc.ts`
+- Every handler validates input with Zod before executing
+- Response shape is always `{ ok, data, error }`
+- Errors use explicit codes, never arbitrary thrown text at the renderer boundary
+
+## Security Rules
+
+- `contextIsolation: true`
+- `sandbox: true` for renderer window
+- `nodeIntegration: false`
+- navigation locked to `app://` content
+- `window.open` denied unless explicitly whitelisted
+- shell execution restricted to orchestration/connector host
+- connector env injection uses allowlists, never raw `process.env`
+
+## Resource Lifetime Rules
+
+Following the memory-safety constraints for long-lived desktop processes:
+
+- every event subscription returns a disposer
+- every spawned child process is registered and terminated on app shutdown
+- timers are stored centrally and cleared on teardown
+- database handles are singleton-owned and closed during quit/update install
+- utility-process channels are recreated deterministically after crash or restart
+
+## Module Boundaries
+
+- `src/shared`: pure types, schemas, ipc contracts, constants
+- `src/main/platform`: OS integration, menu, notifications, paths
+- `src/main/storage`: SQLite, migrations, repositories
+- `src/main/services`: profile, connectors, backups, updater, IPC composition
+- `src/main/orchestrator`: utility-process bootstrap and bridge
+- `src/renderer/pages`: route-level views
+- `src/renderer/components`: reusable UI primitives and panels
+- `src/renderer/state`: UI store, query clients, preferences
+
+## Non-Negotiable Constraints
+
+- No ad hoc IPC from components
+- No direct filesystem or shell access in renderer
+- No secrets in renderer state
+- No mixed god service containing windows, db, and orchestration together
+- No placeholder routes or dead menu entries
diff --git a/docs/06-frontend-design-system.md b/docs/06-frontend-design-system.md
new file mode 100644
index 00000000..a06e5eae
--- /dev/null
+++ b/docs/06-frontend-design-system.md
@@ -0,0 +1,121 @@
+# Frontend Design System
+
+## Product Tone
+
+- Audience: technical operators running multiple AI agents simultaneously
+- Interaction style: dense, precise, keyboard-first
+- Motion style: restrained, purposeful, confidence-building
+- Visual identity: warm, approachable workspace — Linear meets Raycast, not a neon cyber UI
+
+## Typography
+
+- Body/UI family: system stack (`-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif`)
+- Monospace family: JetBrains Mono Variable (`font-family: "JetBrains Mono Variable", monospace`)
+- Scale:
+  - Page titles: 31px, -0.03em tracking
+  - Section headings: 18px semibold, -0.01em
+  - Body/labels: 14px
+  - Compact UI (sidebar, pills, badges): 13px, 0.005em tracking
+  - Captions/meta: 12px
+  - Micro labels (status pills, section headers): 10-11px uppercase, 0.08-0.12em tracking
+  - Monospace (logs, IDs, timestamps): JetBrains Mono, 11-12px
+
+## Color Tokens
+
+### Light mode (`:root` default)
+
+| Token | Value | Purpose |
+|---|---|---|
+| `--bg` | `#fbfbfb` | App background |
+| `--panel` | `#ffffff` | Card/sidebar surfaces |
+| `--panel-soft` | `#f4f5f5` | Active/hover states |
+| `--text` | `#1a202c` | Primary text |
+| `--muted` | `#718096` | Secondary/caption text |
+| `--muted-strong` | `#4a5568` | Emphasized secondary text |
+| `--accent` | `#c06a3a` | Warm terracotta — primary action color (~4.6:1 on white) |
+| `--accent-soft` | `#f7ece6` | Accent background tint |
+| `--danger` | `#e5484d` | Errors, destructive actions |
+| `--warn` | `#b7791f` | Warnings, budget alerts |
+| `--success` | `#2f855a` | Positive states, healthy budgets |
+| `--success-soft` | `#edf7f0` | Success background tint |
+| `--line` | `rgba(15,23,42,0.08)` | Subtle borders |
+| `--line-strong` | `rgba(15,23,42,0.14)` | Emphasized borders |
+
+### Dark mode (`[data-theme="dark"]` and `prefers-color-scheme: dark` when `data-theme="system"`)
+
+| Token | Value |
+|---|---|
+| `--bg` | `#111315` |
+| `--panel` | `#1b1f23` |
+| `--panel-soft` | `#232931` |
+| `--text` | `#f4f7fb` |
+| `--muted` | `#9aa7b5` |
+| `--accent` | `#ee8a58` |
+| `--accent-soft` | `rgba(238,138,88,0.14)` |
+
+Dark mode is fully implemented via `data-theme` attribute on `:root`, with a `prefers-color-scheme` media query for the `"system"` setting.
+
+## Accent Color
+
+The warm terracotta accent (`#c06a3a` light / `#ee8a58` dark) is the signature color. Use it only for:
+- Active navigation items (icon fill + label)
+- Primary action buttons
+- Focus rings
+
+Everything else is greyscale. Overuse dilutes the signal.
+
+## Focus Ring
+
+```css
+.focus-ring:focus-visible {
+  box-shadow: 0 0 0 1px rgba(192,106,58,0.5), 0 0 0 4px rgba(192,106,58,0.12);
+  border-color: rgba(192,106,58,0.35);
+}
+```
+
+## Layout Model
+
+- Left sidebar: 220px fixed, keyboard-navigable
+- Main content: max-width 1040px centered, 40px horizontal / 32px vertical padding
+- Section spacing: 56px between major sections
+
+## Spacing & Radius
+
+- Interactive controls: 6-8px border radius
+- Cards/panels: 10px border radius
+- Dividers: 1px `var(--line)` borders, no heavy card shadows
+
+## Animation
+
+All transitions use `cubic-bezier(0.16, 1, 0.3, 1)` (ease-out-expo feel).
+
+| Context | Duration |
+|---|---|
+| Hover/focus | 150ms (`duration-150`) |
+| Page transitions | 240ms, y-axis slide (12px in, -10px out) |
+| Panel reveals | 220ms, height or y-axis |
+
+Respect `prefers-reduced-motion` globally — durations collapse to `0.01ms` when set.
+
+## Icon System
+
+Phosphor Icons (`@phosphor-icons/react`), weight `regular` by default, `fill` for active/selected states. Standard size 16-18px. Active sidebar icons use `--accent` color.
+
+## Design Principles
+
+1. **Hierarchy before density** — Typography, spacing, and color create visual hierarchy; never rely on borders alone.
+2. **Quiet until needed** — Default state is calm and minimal. Warnings and errors earn their visual weight through color and placement.
+3. **One accent, used with intent** — Terracotta is reserved for active navigation, primary actions, and focus states.
+4. **Native-feeling, not native-copying** — macOS-aware (drag regions, traffic lights) but not AppKit imitation.
+5. **Content over chrome** — The user's agents, tasks, and runs are the content. Minimize decorative scaffolding.
+
+## Required Screens
+
+Overview · Connectors · Agents · Tasks · Task Detail · Approvals · Costs · Activity · Workspaces · Settings · Onboarding
+
+## Desktop-Specific Behaviors
+
+- `Cmd` (macOS) / `Ctrl` (Windows/Linux) for search, command palette, save, refresh
+- Context menus on list rows and workspace rows
+- Drag/drop for workspace import and artifact attachment
+- Reveal in Finder/Explorer for logs and artifacts
diff --git a/docs/07-renderer-implementation.md b/docs/07-renderer-implementation.md
new file mode 100644
index 00000000..9295b5a9
--- /dev/null
+++ b/docs/07-renderer-implementation.md
@@ -0,0 +1,38 @@
+# Phase 6: FrontendDeveloper Renderer Implementation
+
+## Stack
+
+- React `19`
+- TypeScript
+- Vite / electron-vite
+- Framer Motion for shell transitions and utility drawer motion
+
+## Renderer Responsibilities Implemented
+
+- first-launch onboarding for company bootstrap and workspace selection
+- persistent desktop shell with section navigation
+- command palette toggle and keyboard-driven navigation hooks
+- connector registry with status, version, auth posture, and configuration surfaces
+- company, agent, goal, project, task, approval, cost, activity, workspace, and settings panels
+- run console utility drawer with live status and log retrieval
+- empty, loading, and error states for first-run and operational flows
+
+## State Model
+
+- snapshot-driven renderer state sourced from `window.agentCompany.loadSnapshot()`
+- local UI state for section selection, command palette visibility, console visibility, dialog drafts, and selection state
+- event subscription via `window.agentCompany.subscribe(...)` for domain changes and run updates
+
+## Desktop-Native UX Decisions
+
+- shell layout assumes resizable desktop windows, not mobile breakpoints
+- keyboard shortcuts are routed from the application menu into renderer event handling
+- workspace opening and log access are explicit desktop actions
+- drawer, inspector, and list/detail panels remain visible at desktop densities
+
+## Key Files
+
+- [App.tsx](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/renderer/App.tsx)
+- [main.tsx](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/renderer/main.tsx)
+- [styles.css](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/renderer/styles.css)
+- [index.html](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/renderer/index.html)
diff --git a/docs/08-main-process-implementation.md b/docs/08-main-process-implementation.md
new file mode 100644
index 00000000..35ad78a4
--- /dev/null
+++ b/docs/08-main-process-implementation.md
@@ -0,0 +1,35 @@
+# Phase 7: BackendDeveloper Main Process And Preload Implementation
+
+## Main Process Responsibilities Implemented
+
+- single-instance lock with focus restoration on second launch
+- secure `BrowserWindow` creation with `contextIsolation: true`, `nodeIntegration: false`, and `sandbox: true`
+- custom `app://` protocol for packaged renderer content
+- application menu, accelerators, native dialogs, and notifications
+- typed IPC registration with sender validation and schema validation
+- local SQLite profile bootstrap, backup, restore, and settings persistence
+- utility-process orchestration worker for run execution and log/status fan-out
+- updater wiring via `electron-updater`, gated by settings and environment
+
+## Preload Bridge
+
+- single exposed surface: `window.agentCompany`
+- no raw Node.js or Electron APIs exposed to renderer
+- typed invoke helpers only
+- renderer event subscription returns unsubscribe function and hides raw Electron event objects
+
+## Storage And Secrets
+
+- `node:sqlite` database under profile directory
+- WAL enabled
+- logs, artifacts, and backups stored as profile files
+- secrets encrypted with Electron `safeStorage` when available, otherwise vault fallback
+
+## Key Files
+
+- [index.ts](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/main/index.ts)
+- [database.ts](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/main/database.ts)
+- [vault.ts](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/main/vault.ts)
+- [worker.ts](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/main/orchestrator/worker.ts)
+- [index.ts](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/preload/index.ts)
+- [contracts.ts](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/src/shared/contracts.ts)
diff --git a/docs/09-build-verification.md b/docs/09-build-verification.md
new file mode 100644
index 00000000..c0050dbe
--- /dev/null
+++ b/docs/09-build-verification.md
@@ -0,0 +1,41 @@
+# Phase 8: BuildVerificationEngineer Validation
+
+## Commands Run
+
+```sh
+pnpm --filter @paperclipai/agent-company lint
+pnpm --filter @paperclipai/agent-company typecheck
+pnpm --filter @paperclipai/agent-company test:run
+pnpm --filter @paperclipai/agent-company build:dir
+```
+
+## Results
+
+- lint: passed (0 errors, 0 warnings)
+- typecheck: passed
+- unit tests: passed
+- integration tests: passed
+- Electron smoke E2E: passed
+- macOS directory packaging: passed
+
+## Validation Refresh (2026-03-13)
+
+- reran the full gate locally on macOS:
+  - `pnpm lint`
+  - `pnpm typecheck`
+  - `pnpm test:run`
+  - `pnpm build:dir`
+- all commands passed without blocking errors
+- package output again completed with ad-hoc macOS signing and no notarization credentials
+
+## Packaging Notes
+
+- `build:dir` now routes through [build-desktop.mjs](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/scripts/build-desktop.mjs)
+- default local packaging disables automatic signing identity discovery unless explicitly overridden
+- macOS packaging completed with ad-hoc signing fallback and skipped notarization when notarization credentials were not configured
+- custom app icons are now provided through [electron-builder.yml](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/electron-builder.yml) and [assets](/Users/zacharyzhang/Documents/Github/paperclip/AgentCompany/assets)
+
+## Platform Verification Boundary
+
+- verified on local macOS host
+- Windows and Linux packaging configuration exists but was not executed on this host
diff --git a/docs/10-code-review-and-performance.md b/docs/10-code-review-and-performance.md
new file mode 100644
index 00000000..572cab29
--- /dev/null
+++ b/docs/10-code-review-and-performance.md
@@ -0,0 +1,41 @@
+# Phase 9: Code Reviewer
+
+## Correctness Fixes Applied
+
+- removed `better-sqlite3` from the desktop runtime and replaced it with `node:sqlite`
+- fixed packaged runtime resolution for `electron-log/main.js`
+- bundled local adapter workspace packages into the main-process build instead of leaving
+  broken runtime imports behind after packaging
+- hardened trusted-sender checks for IPC invocation
+- pinned connector commands to audited runtime defaults instead of accepting arbitrary renderer
+  overrides
+- scoped secrets to companies and resolved secret bindings by `companyId`
+- validated worker messages at runtime instead of trusting unchecked casts
+- closed a test coverage gap where `*.test.ts` files were present but excluded from Vitest
+
+## Runtime Review
+
+- renderer responsiveness is acceptable for the current feature set, but continued extraction
+  of shell sections into smaller components remains a maintenance priority
+- heavy agent execution stays out of the renderer through the utility process boundary
+- background database work is local and bounded; privileged tasks do not run directly in the
+  renderer
+- critical run lifecycle writes now execute transactionally
+- lint baseline is now warning-free via `eslint.config.mjs` and `pnpm lint`
+
+## Remaining Performance Risks
+
+- the renderer bundle is still large enough that future work should split heavier sections and
+  defer rarely used surfaces
+- cross-platform production profiling has not yet been run on Windows and Linux hardware
+
+## Performance Snapshot (2026-03-13)
+
+- renderer JS bundle (`out/renderer/assets/index-*.js`): 1,162,405 bytes (~1.11 MB)
+- renderer CSS bundle (`out/renderer/assets/index-*.css`): 43,344 bytes (~42.3 KB)
+- main bundle (`out/main/index.js`): ~142.9 KB
+- main connector chunk (`out/main/chunks/connectors-*.js`): ~146.2 KB
+- preload bundle (`out/preload/index.js`): ~137.7 KB
+
+The primary optimization target remains renderer bundle splitting and lazy-loading of low-frequency
+surfaces.
diff --git a/docs/11-security-audit.md b/docs/11-security-audit.md
new file mode 100644
index 00000000..6b451525
--- /dev/null
+++ b/docs/11-security-audit.md
@@ -0,0 +1,56 @@
+# Phase 10: Security Auditor
+
+## Security Posture
+
+The desktop app now follows the required Electron baseline:
+
+- `contextIsolation: true`
+- `nodeIntegration: false`
+- `sandbox: true`
+- minimal preload bridge
+- no direct renderer access to filesystem, shell, or process APIs
+
+## Verified Controls
+
+- IPC channels are explicitly named and typed in `src/shared/contracts.ts`
+- privileged handlers validate payloads with Zod on the main-process side
+- IPC invocation is rejected for untrusted sender frames
+- `window.open` and `webview` attachment are denied
+- navigation outside approved content is blocked
+- packaged renderer content is served through a controlled `app://` protocol handler with path
+  traversal protection
+- `openPath` is restricted to managed workspace, log, artifact, backup, and profile paths
+- connector execution commands are pinned to the audited connector binary instead of renderer
+  overrides
+- secrets are company-scoped and secret binding resolution is company-aware
+- `safeStorage` is required for production secret writes; the insecure vault fallback is limited
+  to explicit test environments
+- worker-to-main messages are validated at runtime before mutating run state
+- **TODO**: Electron binary fuse hardening is NOT yet configured. Before public release,
+  add `@electron/fuses` to disable `runAsNode`, `NODE_OPTIONS` / inspect CLI argument injection,
+  enforce app-from-ASAR loading, and enable ASAR integrity validation
+
+## Release Hygiene
+
+- local builds do not auto-discover signing identities unless explicitly configured
+- desktop packaging defaults to `--publish never` to prevent accidental channel publication from local/CI build jobs
+- updater configuration remains present but still requires a real trusted update endpoint before
+  public distribution
+- notarization and production signing credentials are intentionally external to source control
+
+## Open Release Conditions
+
+The app is appropriate for internal alpha and signed beta preparation. Public production release
+still requires:
+
+- real signing credentials per platform
+- notarization on macOS
+- trusted update hosting
+- platform-native validation for Windows and Linux installers
+
+## Re-Verification Notes (2026-03-13)
+
+- reran lint, typecheck, tests, and macOS directory packaging with no security regressions
+- static source review confirmed no renderer-side `eval` / `new Function` usage
+- privileged surface remains preload-bridged through typed IPC channels only
+- `child_process.spawn` usage stays in main process and is constrained to connector command checks
diff --git a/docs/12-release-readiness.md b/docs/12-release-readiness.md
new file mode 100644
index 00000000..09df35c6
--- /dev/null
+++ b/docs/12-release-readiness.md
@@ -0,0 +1,199 @@
+# Phase 11: ProjectManager Release Readiness
+
+## Milestone Status
+
+- architecture freeze: complete
+- interactive prototype: complete
+- internal alpha desktop shell: complete
+- macOS local packaging validation: complete
+- signed beta build: pending signing/notarization credentials and platform-host verification
+- release candidate: pending Windows and Linux package validation
+- production release readiness: pending platform signing completion and final release-channel credentials
+
+## What Is Ready
+
+- dedicated Electron-native desktop workspace under `AgentCompany`
+- explicit main / preload / renderer / shared separation
+- local-first profile, secret storage, orchestration worker, IPC contracts, and desktop shell
+- onboarding to first usable shell flow
+- packaging configuration for macOS, Windows, and Linux
+- warning-free local lint baseline across main/preload/renderer
+- validation gate rerun on 2026-03-13 passed (`lint`, `typecheck`, `test:run`, `build:dir`)
+- **TODO**: PR CI quality gate workflow (`.github/workflows/agent-company-pr-verify.yml`) has not been created yet
+- **TODO**: Electron production fuse hardening has not been configured yet (see doc 11)
+- packaging script now defaults to `--publish never` unless explicitly overridden (`AGENTCOMPANY_ELECTRON_PUBLISH` or explicit `--publish`)
+
+## Release Ownership Boundaries
+
+| Area | Primary owner | Backup owner | Scope boundary | Exit evidence |
+| --- | --- | --- | --- | --- |
+| Release gate decision | CEO / ProjectManager | Product lead | Approves go/no-go only after all gates are green; does not bypass security/platform sign-off | Signed release checklist + release tag decision |
+| Signing credentials | Security Auditor | Platform Release Engineer | Manages cert issuance/rotation and secret distribution; build operators never commit secrets | Secret inventory record + cert expiry check |
+| macOS signing + notarization | macOS Release Engineer | Security Auditor | Runs signed build on macOS host and validates notarization ticket | `spctl`, `codesign`, `stapler` evidence |
+| Windows signing + installer trust | Windows Release Engineer | Security Auditor | Runs NSIS build on Windows host and validates Authenticode chain | `Get-AuthenticodeSignature` evidence |
+| Linux package validation | Linux Release Engineer | QA lead | Builds and smoke-tests AppImage on Linux host; verifies runtime dependencies | AppImage launch and smoke checklist |
+| Updater endpoint trust | Security Auditor | SRE / Infra | Owns TLS/domain trust policy and update channel integrity checks | `latest*.yml` metadata + artifact hash verification |
+| Cross-platform functional smoke | QA lead | Platform engineers | Verifies startup/onboarding/task-run/approval flows on each target OS | Smoke run logs + screenshots |
+
+## Release Checklist (Production Candidate)
+
+- [ ] `pnpm install --frozen-lockfile` completed on release host
+- [ ] `pnpm lint` passed
+- [ ] `pnpm typecheck` passed
+- [ ] `pnpm test:run` passed
+- [ ] `pnpm build:dir` passed
+- [ ] signing environment variables are set from secret manager (not shell history files)
+- [ ] `AGENTCOMPANY_UPDATE_URL` points to production or staging trusted domain (not `example.invalid`)
+- [ ] updater checks are enabled for release validation (`AGENTCOMPANY_DISABLE_UPDATES=false`)
+- [ ] macOS signed build + notarization validation completed on macOS host
+- [ ] Windows signed installer validation completed on Windows host
+- [ ] Linux AppImage validation completed on Linux host
+- [ ] update metadata (`latest*.yml`) and published artifacts hash-match
+- [ ] secrets regression check completed (existing local secrets remain readable after upgrade)
+- [ ] local data migration test completed (old profile boots and migrates without data loss)
+- [ ] final go/no-go approved by CEO / ProjectManager
+
+## Runbook
+
+### 1. Preflight (all platforms)
+
+```sh
+pnpm install --frozen-lockfile
+pnpm lint
+pnpm typecheck
+pnpm test:run
+pnpm build:dir
+```
+
+Expected: all commands pass; no skipped failures are allowed unless explicitly waived in release notes.
+
+### 2. Signing Material Readiness
+
+Prepare these values in CI secret manager or local secure vault:
+
+- `AGENTCOMPANY_UPDATE_URL`
+- `CSC_LINK`
+- `CSC_KEY_PASSWORD`
+- `WIN_CSC_LINK`
+- `WIN_CSC_KEY_PASSWORD`
+- macOS notarization credentials (`APPLE_ID`, `APPLE_APP_SPECIFIC_PASSWORD`, `APPLE_TEAM_ID`) if using Apple ID flow
+
+Sanity check before release build:
+
+```sh
+env | rg "^(AGENTCOMPANY_UPDATE_URL|CSC_LINK|WIN_CSC_LINK|APPLE_ID|APPLE_TEAM_ID)="
+```
+
+### 3. macOS Signed Build + Notarization (native macOS host)
+
+1. Enable release-mode updater behavior and set trusted update URL.
+2. Build signed artifacts.
+3. Validate signature + notarization ticket.
+
+```sh
+export AGENTCOMPANY_DISABLE_UPDATES=false
+export AGENTCOMPANY_UPDATE_URL="https://updates.<your-domain>/agentcompany/stable"
+export CSC_LINK="file://$HOME/.signing/agentcompany-mac.p12"
+export CSC_KEY_PASSWORD="<from-secret-manager>"
+export CSC_IDENTITY_AUTO_DISCOVERY=true
+export APPLE_ID="<apple-notarization-account>"
+export APPLE_APP_SPECIFIC_PASSWORD="<app-specific-password>"
+export APPLE_TEAM_ID="<team-id>"
+
+pnpm build -- --mac dmg zip --publish never
+
+spctl -a -vv "build/release/mac/AgentCompany.app"
+codesign -dv --verbose=4 "build/release/mac/AgentCompany.app" 2>&1 | rg "Authority=|TeamIdentifier="
+xcrun stapler validate "build/release"/*.dmg
+```
+
+Notes:
+
+- For public macOS distribution, switch `mac.hardenedRuntime` to `true` with proper entitlements before final GA build.
+- Keep ad-hoc signing only for local development and internal unsigned testing.
+
+### 4. Windows Signed Installer Validation (native Windows host)
+
+```powershell
+$env:AGENTCOMPANY_DISABLE_UPDATES = "false"
+$env:AGENTCOMPANY_UPDATE_URL = "https://updates.<your-domain>/agentcompany/stable"
+$env:WIN_CSC_LINK = "C:\signing\agentcompany-win.pfx"
+$env:WIN_CSC_KEY_PASSWORD = "<from-secret-manager>"
+
+pnpm build -- --win nsis --x64 --publish never
+
+Get-ChildItem .\build\release\*.exe | Get-AuthenticodeSignature |
+  Format-Table Path, Status, @{Name='Signer';Expression={$_.SignerCertificate.Subject}}
+```
+
+Expected:
+
+- `Status` is `Valid`
+- signer subject matches the intended publisher identity
+
+### 5. Linux AppImage Validation (native Linux host)
+
+```sh
+export AGENTCOMPANY_DISABLE_UPDATES=false
+export AGENTCOMPANY_UPDATE_URL="https://updates.<your-domain>/agentcompany/stable"
+
+pnpm build -- --linux AppImage --x64 --publish never
+
+chmod +x build/release/*.AppImage
+./build/release/*.AppImage --appimage-version
+```
+
+Then run manual smoke validation on Linux:
+
+- app launches and reaches main shell
+- company/workspace/agent CRUD works
+- task run + approval flow works
+- settings toggle for updater works
+
+### 6. Updater Endpoint Trust Verification
+
+1. Validate update metadata endpoint and schema.
+2. Verify published artifact hash against metadata.
+3. Validate app update check in runtime.
+
+```sh
+curl -fsSL "$AGENTCOMPANY_UPDATE_URL/latest.yml" -o /tmp/latest.yml
+rg "^(version|path|sha512):" /tmp/latest.yml
+```
+
+Hash verification (replace placeholders with actual artifact path/hash from metadata):
+
+```sh
+node -e "const fs=require('fs');const crypto=require('crypto');const [file,expected]=process.argv.slice(1);const got=crypto.createHash('sha512').update(fs.readFileSync(file)).digest('base64');if(got!==expected){console.error('sha512 mismatch');process.exit(1)}console.log('sha512 ok');" \
+  build/release/<artifact-file> \
+  "<sha512-from-latest-yml>"
+```
+
+Runtime verification:
+
+- launch packaged app with `AGENTCOMPANY_DISABLE_UPDATES=false`
+- trigger `Check for updates` from Settings
+- confirm request goes only to trusted `AGENTCOMPANY_UPDATE_URL` domain
+- confirm unsigned/untrusted update payloads are rejected by platform signing checks
+
+### 7. Windows/Linux Native-Host QA Gate
+
+Required evidence per platform:
+
+- startup success + no crash in first 5 minutes
+- create company + create workspace + create task + assign agent + run once
+- approve one pending approval item
+- inspect logs for uncaught errors
+- close/reopen app and confirm local data persistence
+
+### 8. Release Close-Out
+
+- publish artifacts and corresponding `latest*.yml` only after all platform owners sign off
+- attach evidence bundle (command output, screenshots, hash checks, signatures)
+- mark release decision in changelog/release note with approver and timestamp
+
+## Outstanding Risks Before Public GA
+
+- current config keeps `mac.hardenedRuntime: false`; must be enabled with release entitlements for notarized public mac builds
+- no trusted production updater endpoint is configured by default (`example.invalid` fallback)
+- Windows and Linux validation still requires native host execution each release cycle
diff --git a/electron-builder.yml b/electron-builder.yml
new file mode 100644
index 00000000..4359106e
--- /dev/null
+++ b/electron-builder.yml
@@ -0,0 +1,34 @@
+appId: com.agentcompany.desktop
+productName: AgentCompany
+directories:
+  buildResources: assets
+  output: build/release
+files:
+  - out/**
+  - package.json
+asar: true
+icon: assets/icon.png
+mac:
+  category: public.app-category.developer-tools
+  icon: assets/icon.icns
+  target:
+    - dmg
+    - zip
+  # hardenedRuntime requires a real code signing identity.
+  # For local/unsigned builds, keep it off. Enable when signing is configured.
+  hardenedRuntime: false
+win:
+  icon: assets/icon.ico
+  target:
+    - nsis
+linux:
+  icon: assets/icon.png
+  target:
+    - AppImage
+nsis:
+  oneClick: false
+  perMachine: false
+  allowToChangeInstallationDirectory: true
+publish:
+  provider: generic
+  url: ${AGENTCOMPANY_UPDATE_URL:-https://updates.example.invalid/agentcompany}
diff --git a/electron.vite.config.ts b/electron.vite.config.ts
new file mode 100644
index 00000000..77d3baef
--- /dev/null
+++ b/electron.vite.config.ts
@@ -0,0 +1,62 @@
+import { resolve } from "node:path";
+import react from "@vitejs/plugin-react";
+import tailwindcss from "@tailwindcss/vite";
+import { defineConfig, externalizeDepsPlugin } from "electron-vite";
+
+const bundledMainDependencies = [
+  "@agentcompany/adapter-claude-local",
+  "@agentcompany/adapter-codex-local",
+  "@agentcompany/adapter-gemini-local",
+  "@agentcompany/adapter-opencode-local",
+  "@agentcompany/adapter-utils",
+];
+
+export default defineConfig({
+  main: {
+    plugins: [externalizeDepsPlugin({ exclude: bundledMainDependencies })],
+    resolve: {
+      alias: {
+        "@shared": resolve("src/shared"),
+        "@main": resolve("src/main"),
+      },
+    },
+    build: {
+      rollupOptions: {
+        input: {
+          index: resolve("src/main/index.ts"),
+          worker: resolve("src/main/orchestrator/worker.ts"),
+        },
+      },
+    },
+  },
+  preload: {
+    plugins: [externalizeDepsPlugin({ exclude: ["zod"] })],
+    resolve: {
+      alias: {
+        "@shared": resolve("src/shared"),
+        "@preload": resolve("src/preload"),
+      },
+    },
+    build: {
+      rollupOptions: {
+        input: {
+          index: resolve("src/preload/index.ts"),
+        },
+        output: {
+          format: "cjs",
+          entryFileNames: "[name].js",
+          chunkFileNames: "chunks/[name]-[hash].js",
+        },
+      },
+    },
+  },
+  renderer: {
+    resolve: {
+      alias: {
+        "@shared": resolve("src/shared"),
+        "@renderer": resolve("src/renderer"),
+      },
+    },
+    plugins: [react(), tailwindcss()],
+  },
+});
diff --git a/eslint.config.mjs b/eslint.config.mjs
new file mode 100644
index 00000000..c03b81e3
--- /dev/null
+++ b/eslint.config.mjs
@@ -0,0 +1,65 @@
+import js from "@eslint/js";
+import globals from "globals";
+import reactHooks from "eslint-plugin-react-hooks";
+import reactRefresh from "eslint-plugin-react-refresh";
+import tseslint from "typescript-eslint";
+
+export default tseslint.config(
+  {
+    ignores: [
+      "out/**",
+      "build/**",
+      "dist/**",
+      "node_modules/**",
+      "test-results/**",
+      "playwright-report/**",
+      "coverage/**",
+    ],
+  },
+  js.configs.recommended,
+  ...tseslint.configs.recommended,
+  {
+    files: ["src/**/*.{ts,tsx}", "tests/**/*.{ts,tsx}", "scripts/**/*.{ts,mjs}", "packages/**/*.{ts,tsx}"],
+    languageOptions: {
+      ecmaVersion: "latest",
+      sourceType: "module",
+      parserOptions: {
+        ecmaFeatures: {
+          jsx: true,
+        },
+      },
+      globals: {
+        ...globals.node,
+        ...globals.browser,
+      },
+    },
+    plugins: {
+      "react-hooks": reactHooks,
+      "react-refresh": reactRefresh,
+    },
+    rules: {
+      ...reactHooks.configs.recommended.rules,
+      "react-refresh/only-export-components": "off",
+      "@typescript-eslint/no-unused-vars": [
+        "warn",
+        {
+          argsIgnorePattern: "^_",
+          varsIgnorePattern: "^_",
+          caughtErrorsIgnorePattern: "^_",
+        },
+      ],
+      "@typescript-eslint/no-explicit-any": "off",
+      "react-hooks/exhaustive-deps": "warn",
+      "react-hooks/set-state-in-effect": "off",
+      "react-hooks/refs": "off",
+    },
+  },
+  {
+    files: ["tests/**/*.{ts,tsx}"],
+    languageOptions: {
+      globals: {
+        ...globals.vitest,
+      },
+    },
+  }
+);
diff --git a/homepagedesign.html b/homepagedesign.html
new file mode 100644
index 00000000..39e7aa81
--- /dev/null
+++ b/homepagedesign.html
@@ -0,0 +1,436 @@
+<html lang="en" vid="0"><head vid="1">
+    <meta charset="UTF-8" vid="2">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" vid="3">
+    <title vid="4">Dashboard</title>
+    <style vid="5">
+        :root {
+            
+            --bg-base: #ffffff;
+            --bg-sidebar: #ffffff;
+            --bg-hover: #f4f5f5; 
+            --bg-element: #f4f5f5; 
+            --bg-card: #ffffff;
+            
+            
+            --text-primary: #1a202c; 
+            --text-secondary: #718096; 
+            --text-tertiary: #a0aec0; 
+            
+            --border-faint: rgba(0, 0, 0, 0.05); 
+            --accent-red: #e5484d; 
+            
+            
+            --radius-sm: 6px; 
+            --radius-md: 8px;
+            --radius-lg: 12px; 
+            
+            
+            --space-1: 4px;
+            --space-2: 8px;
+            --space-3: 16px;
+            --space-4: 24px;
+            --space-5: 32px;
+            --space-6: 48px;
+
+            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+        }
+
+        * {
+            box-sizing: border-box;
+            margin: 0;
+            padding: 0;
+        }
+
+        body {
+            background-color: var(--bg-base);
+            color: var(--text-primary);
+            display: flex;
+            height: 100vh;
+            overflow: hidden;
+            font-size: 14px;
+            -webkit-font-smoothing: antialiased;
+        }
+
+        
+        h1, h2, h3 {
+            font-weight: 600;
+            letter-spacing: -0.01em;
+            color: var(--text-primary);
+        }
+
+        .section-label {
+            font-size: 11px;
+            font-weight: 600;
+            color: var(--text-tertiary);
+            text-transform: capitalize;
+            letter-spacing: 0.02em;
+            margin-bottom: var(--space-2);
+            padding-left: var(--space-2);
+        }
+
+        .field-label {
+            font-size: 13px;
+            font-weight: 600;
+            color: var(--text-primary);
+            margin-bottom: var(--space-1);
+        }
+
+        .field-desc {
+            font-size: 13px;
+            color: var(--text-secondary);
+            margin-bottom: var(--space-3);
+            line-height: 1.4;
+        }
+
+        
+        .sidebar {
+            width: 240px;
+            background-color: var(--bg-sidebar);
+            border-right: 1px solid var(--border-faint);
+            padding: var(--space-4) var(--space-3);
+            display: flex;
+            flex-direction: column;
+            gap: var(--space-5);
+            flex-shrink: 0;
+        }
+
+        .main-content {
+            flex: 1;
+            overflow-y: auto;
+            padding: var(--space-6);
+        }
+
+        .content-inner {
+            max-width: 640px; 
+        }
+
+        
+        .nav-group {
+            display: flex;
+            flex-direction: column;
+            gap: 2px;
+        }
+
+        .nav-item {
+            display: flex;
+            align-items: center;
+            gap: var(--space-2);
+            padding: 8px 12px;
+            border-radius: var(--radius-sm);
+            color: var(--text-primary);
+            text-decoration: none;
+            font-weight: 500;
+            font-size: 13px;
+            transition: background-color 0.15s ease;
+            cursor: pointer;
+        }
+
+        .nav-item:hover {
+            background-color: var(--bg-hover);
+        }
+
+        .nav-item.active {
+            background-color: var(--bg-hover);
+            font-weight: 600;
+        }
+
+        .nav-item.danger {
+            color: var(--accent-red);
+        }
+
+        .nav-icon {
+            width: 16px;
+            height: 16px;
+            color: var(--text-secondary);
+            flex-shrink: 0;
+        }
+
+        .nav-item.active .nav-icon {
+            color: var(--text-primary);
+        }
+        
+        .nav-item.danger .nav-icon {
+            color: var(--accent-red);
+        }
+
+        
+        
+        .page-header {
+            margin-bottom: var(--space-6);
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+        }
+
+        .page-title {
+            font-size: 20px;
+        }
+
+        
+        .metrics-grid {
+            display: grid;
+            grid-template-columns: repeat(3, 1fr);
+            gap: var(--space-3);
+            margin-bottom: var(--space-6);
+        }
+
+        .metric-card {
+            background-color: var(--bg-element);
+            border-radius: var(--radius-sm);
+            padding: var(--space-3);
+            display: flex;
+            flex-direction: column;
+            gap: var(--space-1);
+        }
+
+        .metric-value {
+            font-size: 24px;
+            font-weight: 600;
+            color: var(--text-primary);
+            letter-spacing: -0.02em;
+        }
+
+        .metric-label {
+            font-size: 12px;
+            color: var(--text-secondary);
+            font-weight: 500;
+        }
+
+        
+        .data-section {
+            margin-bottom: var(--space-6);
+        }
+
+        .data-container {
+            background-color: var(--bg-card);
+            border: 1px solid var(--border-faint);
+            border-radius: var(--radius-lg);
+            overflow: hidden;
+            box-shadow: 0 1px 3px rgba(0,0,0,0.02); 
+        }
+
+        
+        .data-header {
+            background-color: #fafafa;
+            padding: var(--space-3) var(--space-4);
+            border-bottom: 1px solid var(--border-faint);
+            font-weight: 600;
+            font-size: 13px;
+            color: var(--text-primary);
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+        }
+
+        .data-list {
+            display: flex;
+            flex-direction: column;
+        }
+
+        .data-row {
+            padding: var(--space-3) var(--space-4);
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            border-bottom: 1px solid var(--border-faint);
+        }
+
+        .data-row:last-child {
+            border-bottom: none;
+        }
+
+        .row-content {
+            display: flex;
+            align-items: center;
+            gap: var(--space-3);
+        }
+
+        .row-avatar {
+            width: 32px;
+            height: 32px;
+            border-radius: 50%;
+            background-color: var(--bg-element);
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-weight: 600;
+            color: var(--text-secondary);
+            font-size: 12px;
+        }
+
+        .row-avatar.brand {
+            background-color: #e57339; 
+            color: white;
+        }
+
+        .row-text {
+            display: flex;
+            flex-direction: column;
+        }
+
+        .row-title {
+            font-size: 13px;
+            font-weight: 600;
+            color: var(--text-primary);
+        }
+
+        .row-subtitle {
+            font-size: 12px;
+            color: var(--text-secondary);
+        }
+
+        .action-button {
+            background-color: var(--bg-base);
+            border: 1px solid var(--border-faint);
+            border-radius: var(--radius-sm);
+            padding: 6px 12px;
+            font-size: 12px;
+            font-weight: 600;
+            color: var(--text-primary);
+            cursor: pointer;
+            transition: background-color 0.15s;
+            box-shadow: 0 1px 2px rgba(0,0,0,0.02);
+        }
+
+        .action-button:hover {
+            background-color: var(--bg-hover);
+        }
+
+        
+        svg {
+            stroke-width: 1.5;
+            stroke: currentColor;
+            fill: none;
+            stroke-linecap: round;
+            stroke-linejoin: round;
+        }
+
+    </style>
+</head>
+<body vid="6">
+
+    <aside class="sidebar" vid="7">
+        <div class="nav-group" vid="8">
+            <div class="section-label" vid="9">Overview</div>
+            <a href="#" class="nav-item active" vid="10">
+                <svg class="nav-icon" viewBox="0 0 24 24" vid="11"><rect x="3" y="3" width="7" height="7" vid="12"></rect><rect x="14" y="3" width="7" height="7" vid="13"></rect><rect x="14" y="14" width="7" height="7" vid="14"></rect><rect x="3" y="14" width="7" height="7" vid="15"></rect></svg>
+                Dashboard
+            </a>
+            <a href="#" class="nav-item" vid="16">
+                <svg class="nav-icon" viewBox="0 0 24 24" vid="17"><polyline points="22 12 18 12 15 21 9 3 6 12 2 12" vid="18"></polyline></svg>
+                Analytics
+            </a>
+            <a href="#" class="nav-item" vid="19">
+                <svg class="nav-icon" viewBox="0 0 24 24" vid="20"><path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2" vid="21"></path><circle cx="9" cy="7" r="4" vid="22"></circle><path d="M23 21v-2a4 4 0 0 0-3-3.87" vid="23"></path><path d="M16 3.13a4 4 0 0 1 0 7.75" vid="24"></path></svg>
+                Audience
+            </a>
+        </div>
+
+        <div class="nav-group" vid="25">
+            <div class="section-label" vid="26">Management</div>
+            <a href="#" class="nav-item" vid="27">
+                <svg class="nav-icon" viewBox="0 0 24 24" vid="28"><rect x="3" y="4" width="18" height="18" rx="2" ry="2" vid="29"></rect><line x1="16" y1="2" x2="16" y2="6" vid="30"></line><line x1="8" y1="2" x2="8" y2="6" vid="31"></line><line x1="3" y1="10" x2="21" y2="10" vid="32"></line></svg>
+                Campaigns
+            </a>
+            <a href="#" class="nav-item" vid="33">
+                <svg class="nav-icon" viewBox="0 0 24 24" vid="34"><path d="M22 19a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h5l2 3h9a2 2 0 0 1 2 2z" vid="35"></path></svg>
+                Assets
+            </a>
+        </div>
+
+        <div class="nav-group" style="margin-top: auto;" vid="36">
+            <a href="#" class="nav-item" vid="37">
+                <svg class="nav-icon" viewBox="0 0 24 24" vid="38"><circle cx="12" cy="12" r="3" vid="39"></circle><path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1 0 2.83 2 2 0 0 1-2.83 0l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-2 2 2 2 0 0 1-2-2v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83 0 2 2 0 0 1 0-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1-2-2 2 2 0 0 1 2-2h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 0-2.83 2 2 0 0 1 2.83 0l.06.06a1.65 1.65 0 0 0 1.82.33H9a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 2-2 2 2 0 0 1 2 2v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 0 2 2 0 0 1 0 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82V9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 2 2 2 2 0 0 1-2 2h-.09a1.65 1.65 0 0 0-1.51 1z" vid="40"></path></svg>
+                Settings
+            </a>
+            <a href="#" class="nav-item danger" vid="41">
+                <svg class="nav-icon" viewBox="0 0 24 24" vid="42"><path d="M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4" vid="43"></path><polyline points="16 17 21 12 16 7" vid="44"></polyline><line x1="21" y1="12" x2="9" y2="12" vid="45"></line></svg>
+                Log out
+            </a>
+        </div>
+    </aside>
+
+    <main class="main-content" vid="46">
+        <div class="content-inner" vid="47">
+            
+            <header class="page-header" vid="48">
+                <h1 class="page-title" vid="49">Overview</h1>
+            </header>
+
+            <section class="data-section" vid="50">
+                <div class="field-label" vid="51">Current Performance</div>
+                <div class="field-desc" vid="52">Metrics from the last 30 days.</div>
+                
+                <div class="metrics-grid" vid="53">
+                    <div class="metric-card" vid="54">
+                        <span class="metric-label" vid="55">Total Views</span>
+                        <span class="metric-value" vid="56">124,500</span>
+                    </div>
+                    <div class="metric-card" vid="57">
+                        <span class="metric-label" vid="58">Engagement Rate</span>
+                        <span class="metric-value" vid="59">4.2%</span>
+                    </div>
+                    <div class="metric-card" vid="60">
+                        <span class="metric-label" vid="61">Active Users</span>
+                        <span class="metric-value" vid="62">8,192</span>
+                    </div>
+                </div>
+            </section>
+
+            <section class="data-section" vid="63">
+                <div class="field-label" vid="64">Recent Activity</div>
+                <div class="field-desc" vid="65">Latest actions across your workspace.</div>
+
+                <div class="data-container" vid="66">
+                    <div class="data-header" vid="67">
+                        <span vid="68">Activity Feed</span>
+                        <span style="color: var(--text-secondary); font-weight: normal;" vid="69">View all</span>
+                    </div>
+                    <div class="data-list" vid="70">
+                        
+                        <div class="data-row" vid="71">
+                            <div class="row-content" vid="72">
+                                <div class="row-avatar brand" vid="73">J</div>
+                                <div class="row-text" vid="74">
+                                    <span class="row-title" vid="75">John Smith updated Profile</span>
+                                    <span class="row-subtitle" vid="76">2 hours ago • Settings</span>
+                                </div>
+                            </div>
+                            <button class="action-button" vid="77">Review</button>
+                        </div>
+
+                        <div class="data-row" vid="78">
+                            <div class="row-content" vid="79">
+                                <div class="row-avatar" vid="80">
+                                    <svg width="14" height="14" viewBox="0 0 24 24" vid="81"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4" vid="82"></path><polyline points="7 10 12 15 17 10" vid="83"></polyline><line x1="12" y1="15" x2="12" y2="3" vid="84"></line></svg>
+                                </div>
+                                <div class="row-text" vid="85">
+                                    <span class="row-title" vid="86">Q3 Report Generated</span>
+                                    <span class="row-subtitle" vid="87">Yesterday • System</span>
+                                </div>
+                            </div>
+                            <button class="action-button" vid="88">Download</button>
+                        </div>
+
+                        <div class="data-row" vid="89">
+                            <div class="row-content" vid="90">
+                                <div class="row-avatar" vid="91">
+                                    <svg width="14" height="14" viewBox="0 0 24 24" vid="92"><circle cx="12" cy="12" r="10" vid="93"></circle><polyline points="12 6 12 12 16 14" vid="94"></polyline></svg>
+                                </div>
+                                <div class="row-text" vid="95">
+                                    <span class="row-title" vid="96">New integration synced</span>
+                                    <span class="row-subtitle" vid="97">Oct 24 • Automations</span>
+                                </div>
+                            </div>
+                            <button class="action-button" vid="98">Manage</button>
+                        </div>
+
+                    </div>
+                </div>
+            </section>
+
+        </div>
+    </main>
+
+
+</body></html>
\ No newline at end of file
diff --git a/package.json b/package.json
new file mode 100644
index 00000000..e5b19494
--- /dev/null
+++ b/package.json
@@ -0,0 +1,61 @@
+{
+  "name": "agent-company",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "description": "Cross-platform Electron desktop control plane for local-first AI agent companies.",
+  "author": "AgentCompany",
+  "main": "out/main/index.js",
+  "scripts": {
+    "assets:generate": "python3 scripts/generate-icons.py",
+    "dev": "electron-vite dev",
+    "build": "electron-vite build && node scripts/build-desktop.mjs",
+    "build:dir": "electron-vite build && node scripts/build-desktop.mjs --dir",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "typecheck": "tsc --noEmit",
+    "test:unit": "vitest run --config vitest.config.ts tests/unit",
+    "test:integration": "vitest run --config vitest.config.ts tests/integration",
+    "test:e2e": "playwright test -c tests/e2e/playwright.config.ts",
+    "test:run": "pnpm test:unit && pnpm test:integration && pnpm test:e2e",
+    "postinstall": "bash scripts/patch-electron-name.sh || true"
+  },
+  "dependencies": {
+    "@fontsource-variable/jetbrains-mono": "5.2.8",
+    "@agentcompany/adapter-claude-local": "workspace:*",
+    "@agentcompany/adapter-codex-local": "workspace:*",
+    "@agentcompany/adapter-gemini-local": "workspace:*",
+    "@agentcompany/adapter-opencode-local": "workspace:*",
+    "@agentcompany/adapter-utils": "workspace:*",
+    "@phosphor-icons/react": "2.1.10",
+    "clsx": "2.1.1",
+    "electron-log": "5.4.3",
+    "electron-updater": "6.8.3",
+    "framer-motion": "12.36.0",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "tailwind-merge": "3.5.0",
+    "zod": "4.3.6"
+  },
+  "devDependencies": {
+    "@playwright/test": "1.58.2",
+    "@tailwindcss/vite": "4.2.1",
+    "@types/node": "^25.2.3",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "@vitejs/plugin-react": "^5.0.0",
+    "@eslint/js": "9.38.0",
+    "electron": "39.8.0",
+    "electron-builder": "26.8.1",
+    "electron-vite": "5.0.0",
+    "eslint": "9.38.0",
+    "eslint-plugin-react-hooks": "7.0.0",
+    "eslint-plugin-react-refresh": "0.4.24",
+    "globals": "16.4.0",
+    "tailwindcss": "4.2.1",
+    "typescript": "5.9.3",
+    "typescript-eslint": "8.46.1",
+    "vite": "^7.0.0",
+    "vitest": "4.1.0"
+  }
+}
diff --git a/packages/adapter-claude-local/CHANGELOG.md b/packages/adapter-claude-local/CHANGELOG.md
new file mode 100644
index 00000000..ac3bcac5
--- /dev/null
+++ b/packages/adapter-claude-local/CHANGELOG.md
@@ -0,0 +1,68 @@
+# @paperclipai/adapter-claude-local
+
+## 0.3.0
+
+### Minor Changes
+
+- Stable release preparation for 0.3.0
+
+### Patch Changes
+
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.3.0
+
+## 0.2.7
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.7
+
+## 0.2.6
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.6
+
+## 0.2.5
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.5
+
+## 0.2.4
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.4
+
+## 0.2.3
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.3
+
+## 0.2.2
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.2
+
+## 0.2.1
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.1
diff --git a/packages/adapter-claude-local/package.json b/packages/adapter-claude-local/package.json
new file mode 100644
index 00000000..4123e33e
--- /dev/null
+++ b/packages/adapter-claude-local/package.json
@@ -0,0 +1,51 @@
+{
+  "name": "@agentcompany/adapter-claude-local",
+  "version": "0.3.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./server": "./src/server/index.ts",
+    "./ui": "./src/ui/index.ts",
+    "./cli": "./src/cli/index.ts"
+  },
+  "publishConfig": {
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.js"
+      },
+      "./server": {
+        "types": "./dist/server/index.d.ts",
+        "import": "./dist/server/index.js"
+      },
+      "./ui": {
+        "types": "./dist/ui/index.d.ts",
+        "import": "./dist/ui/index.js"
+      },
+      "./cli": {
+        "types": "./dist/cli/index.d.ts",
+        "import": "./dist/cli/index.js"
+      }
+    },
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts"
+  },
+  "files": [
+    "dist",
+    "skills"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@agentcompany/adapter-utils": "workspace:*",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.6.0",
+    "typescript": "^5.7.3"
+  }
+}
diff --git a/packages/adapter-claude-local/src/cli/format-event.ts b/packages/adapter-claude-local/src/cli/format-event.ts
new file mode 100644
index 00000000..08423d6e
--- /dev/null
+++ b/packages/adapter-claude-local/src/cli/format-event.ts
@@ -0,0 +1,99 @@
+import pc from "picocolors";
+
+function asErrorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return "";
+  const obj = value as Record<string, unknown>;
+  const message =
+    (typeof obj.message === "string" && obj.message) ||
+    (typeof obj.error === "string" && obj.error) ||
+    (typeof obj.code === "string" && obj.code) ||
+    "";
+  if (message) return message;
+  try {
+    return JSON.stringify(obj);
+  } catch {
+    return "";
+  }
+}
+
+export function printClaudeStreamEvent(raw: string, debug: boolean): void {
+  const line = raw.trim();
+  if (!line) return;
+
+  let parsed: Record<string, unknown> | null = null;
+  try {
+    parsed = JSON.parse(line) as Record<string, unknown>;
+  } catch {
+    console.log(line);
+    return;
+  }
+
+  const type = typeof parsed.type === "string" ? parsed.type : "";
+
+  if (type === "system" && parsed.subtype === "init") {
+    const model = typeof parsed.model === "string" ? parsed.model : "unknown";
+    const sessionId = typeof parsed.session_id === "string" ? parsed.session_id : "";
+    console.log(pc.blue(`Claude initialized (model: ${model}${sessionId ? `, session: ${sessionId}` : ""})`));
+    return;
+  }
+
+  if (type === "assistant") {
+    const message =
+      typeof parsed.message === "object" && parsed.message !== null && !Array.isArray(parsed.message)
+        ? (parsed.message as Record<string, unknown>)
+        : {};
+    const content = Array.isArray(message.content) ? message.content : [];
+    for (const blockRaw of content) {
+      if (typeof blockRaw !== "object" || blockRaw === null || Array.isArray(blockRaw)) continue;
+      const block = blockRaw as Record<string, unknown>;
+      const blockType = typeof block.type === "string" ? block.type : "";
+      if (blockType === "text") {
+        const text = typeof block.text === "string" ? block.text : "";
+        if (text) console.log(pc.green(`assistant: ${text}`));
+      } else if (blockType === "tool_use") {
+        const name = typeof block.name === "string" ? block.name : "unknown";
+        console.log(pc.yellow(`tool_call: ${name}`));
+        if (block.input !== undefined) {
+          console.log(pc.gray(JSON.stringify(block.input, null, 2)));
+        }
+      }
+    }
+    return;
+  }
+
+  if (type === "result") {
+    const usage =
+      typeof parsed.usage === "object" && parsed.usage !== null && !Array.isArray(parsed.usage)
+        ? (parsed.usage as Record<string, unknown>)
+        : {};
+    const input = Number(usage.input_tokens ?? 0);
+    const output = Number(usage.output_tokens ?? 0);
+    const cached = Number(usage.cache_read_input_tokens ?? 0);
+    const cost = Number(parsed.total_cost_usd ?? 0);
+    const subtype = typeof parsed.subtype === "string" ? parsed.subtype : "";
+    const isError = parsed.is_error === true;
+    const resultText = typeof parsed.result === "string" ? parsed.result : "";
+    if (resultText) {
+      console.log(pc.green("result:"));
+      console.log(resultText);
+    }
+    const errors = Array.isArray(parsed.errors) ? parsed.errors.map(asErrorText).filter(Boolean) : [];
+    if (subtype.startsWith("error") || isError || errors.length > 0) {
+      console.log(pc.red(`claude_result: subtype=${subtype || "unknown"} is_error=${isError ? "true" : "false"}`));
+      if (errors.length > 0) {
+        console.log(pc.red(`claude_errors: ${errors.join(" | ")}`));
+      }
+    }
+    console.log(
+      pc.blue(
+        `tokens: in=${Number.isFinite(input) ? input : 0} out=${Number.isFinite(output) ? output : 0} cached=${Number.isFinite(cached) ? cached : 0} cost=$${Number.isFinite(cost) ? cost.toFixed(6) : "0.000000"}`,
+      ),
+    );
+    return;
+  }
+
+  if (debug) {
+    console.log(pc.gray(line));
+  }
+}
diff --git a/packages/adapter-claude-local/src/cli/index.ts b/packages/adapter-claude-local/src/cli/index.ts
new file mode 100644
index 00000000..7c81ab6f
--- /dev/null
+++ b/packages/adapter-claude-local/src/cli/index.ts
@@ -0,0 +1 @@
+export { printClaudeStreamEvent } from "./format-event.js";
diff --git a/packages/adapter-claude-local/src/index.ts b/packages/adapter-claude-local/src/index.ts
new file mode 100644
index 00000000..a273e009
--- /dev/null
+++ b/packages/adapter-claude-local/src/index.ts
@@ -0,0 +1,37 @@
+export const type = "claude_local";
+export const label = "Claude Code (local)";
+
+export const models = [
+  { id: "claude-opus-4-6", label: "Claude Opus 4.6" },
+  { id: "claude-sonnet-4-6", label: "Claude Sonnet 4.6" },
+  { id: "claude-haiku-4-6", label: "Claude Haiku 4.6" },
+  { id: "claude-sonnet-4-5-20250929", label: "Claude Sonnet 4.5" },
+  { id: "claude-haiku-4-5-20251001", label: "Claude Haiku 4.5" },
+];
+
+export const agentConfigurationDoc = `# claude_local agent configuration
+
+Adapter: claude_local
+
+Core fields:
+- cwd (string, optional): default absolute working directory fallback for the agent process (created if missing when possible)
+- instructionsFilePath (string, optional): absolute path to a markdown instructions file injected at runtime
+- model (string, optional): Claude model id
+- effort (string, optional): reasoning effort passed via --effort (low|medium|high)
+- chrome (boolean, optional): pass --chrome when running Claude
+- promptTemplate (string, optional): run prompt template
+- maxTurnsPerRun (number, optional): max turns for one run
+- dangerouslySkipPermissions (boolean, optional): pass --dangerously-skip-permissions to claude
+- command (string, optional): defaults to "claude"
+- extraArgs (string[], optional): additional CLI args
+- env (object, optional): KEY=VALUE environment variables
+- workspaceStrategy (object, optional): execution workspace strategy; currently supports { type: "git_worktree", baseRef?, branchTemplate?, worktreeParentDir? }
+- workspaceRuntime (object, optional): workspace runtime service intents; local host-managed services are realized before Claude starts and exposed back via context/env
+
+Operational fields:
+- timeoutSec (number, optional): run timeout in seconds
+- graceSec (number, optional): SIGTERM grace period in seconds
+
+Notes:
+- When AgentCompany realizes a workspace/runtime for a run, it injects AGENT_COMPANY_WORKSPACE_* and AGENT_COMPANY_RUNTIME_* env vars for agent-side tooling.
+`;
diff --git a/packages/adapter-claude-local/src/server/execute.ts b/packages/adapter-claude-local/src/server/execute.ts
new file mode 100644
index 00000000..057ca651
--- /dev/null
+++ b/packages/adapter-claude-local/src/server/execute.ts
@@ -0,0 +1,556 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import type { AdapterExecutionContext, AdapterExecutionResult } from "@agentcompany/adapter-utils";
+import type { RunProcessResult } from "@agentcompany/adapter-utils/server-utils";
+import {
+  asString,
+  asNumber,
+  asBoolean,
+  asStringArray,
+  parseObject,
+  parseJson,
+  buildAgentCompanyEnv,
+  redactEnvForLogs,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  renderTemplate,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import {
+  parseClaudeStreamJson,
+  describeClaudeFailure,
+  detectClaudeLoginRequired,
+  isClaudeMaxTurnsResult,
+  isClaudeUnknownSessionError,
+} from "./parse.js";
+
+const __moduleDir = path.dirname(fileURLToPath(import.meta.url));
+const SKILLS_CANDIDATES = [
+  path.resolve(__moduleDir, "../../skills"),         // published: <pkg>/dist/server/ -> <pkg>/skills/
+  path.resolve(__moduleDir, "../../../../../skills"), // dev: src/server/ -> repo root/skills/
+];
+
+async function resolveAgentCompanySkillsDir(): Promise<string | null> {
+  for (const candidate of SKILLS_CANDIDATES) {
+    const isDir = await fs.stat(candidate).then((s) => s.isDirectory()).catch(() => false);
+    if (isDir) return candidate;
+  }
+  return null;
+}
+
+/**
+ * Create a tmpdir with `.claude/skills/` containing symlinks to skills from
+ * the repo's `skills/` directory, so `--add-dir` makes Claude Code discover
+ * them as proper registered skills.
+ */
+async function buildSkillsDir(): Promise<string> {
+  const tmp = await fs.mkdtemp(path.join(os.tmpdir(), "agent-company-skills-"));
+  const target = path.join(tmp, ".claude", "skills");
+  await fs.mkdir(target, { recursive: true });
+  const skillsDir = await resolveAgentCompanySkillsDir();
+  if (!skillsDir) return tmp;
+  const entries = await fs.readdir(skillsDir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (entry.isDirectory()) {
+      await fs.symlink(
+        path.join(skillsDir, entry.name),
+        path.join(target, entry.name),
+      );
+    }
+  }
+  return tmp;
+}
+
+interface ClaudeExecutionInput {
+  runId: string;
+  agent: AdapterExecutionContext["agent"];
+  config: Record<string, unknown>;
+  context: Record<string, unknown>;
+  authToken?: string;
+}
+
+interface ClaudeRuntimeConfig {
+  command: string;
+  cwd: string;
+  workspaceId: string | null;
+  workspaceRepoUrl: string | null;
+  workspaceRepoRef: string | null;
+  env: Record<string, string>;
+  timeoutSec: number;
+  graceSec: number;
+  extraArgs: string[];
+}
+
+function buildLoginResult(input: {
+  proc: RunProcessResult;
+  loginUrl: string | null;
+}) {
+  return {
+    exitCode: input.proc.exitCode,
+    signal: input.proc.signal,
+    timedOut: input.proc.timedOut,
+    stdout: input.proc.stdout,
+    stderr: input.proc.stderr,
+    loginUrl: input.loginUrl,
+  };
+}
+
+function hasNonEmptyEnvValue(env: Record<string, string>, key: string): boolean {
+  const raw = env[key];
+  return typeof raw === "string" && raw.trim().length > 0;
+}
+
+function resolveClaudeBillingType(env: Record<string, string>): "api" | "subscription" {
+  // Claude uses API-key auth when ANTHROPIC_API_KEY is present; otherwise rely on local login/session auth.
+  return hasNonEmptyEnvValue(env, "ANTHROPIC_API_KEY") ? "api" : "subscription";
+}
+
+async function buildClaudeRuntimeConfig(input: ClaudeExecutionInput): Promise<ClaudeRuntimeConfig> {
+  const { runId, agent, config, context, authToken } = input;
+
+  const command = asString(config.command, "claude");
+  const workspaceContext = parseObject(context.agentCompanyWorkspace);
+  const workspaceCwd = asString(workspaceContext.cwd, "");
+  const workspaceSource = asString(workspaceContext.source, "");
+  const workspaceStrategy = asString(workspaceContext.strategy, "");
+  const workspaceId = asString(workspaceContext.workspaceId, "") || null;
+  const workspaceRepoUrl = asString(workspaceContext.repoUrl, "") || null;
+  const workspaceRepoRef = asString(workspaceContext.repoRef, "") || null;
+  const workspaceBranch = asString(workspaceContext.branchName, "") || null;
+  const workspaceWorktreePath = asString(workspaceContext.worktreePath, "") || null;
+  const workspaceHints = Array.isArray(context.agentCompanyWorkspaces)
+    ? context.agentCompanyWorkspaces.filter(
+        (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+      )
+    : [];
+  const runtimeServiceIntents = Array.isArray(context.agentCompanyRuntimeServiceIntents)
+    ? context.agentCompanyRuntimeServiceIntents.filter(
+        (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+      )
+    : [];
+  const runtimeServices = Array.isArray(context.agentCompanyRuntimeServices)
+    ? context.agentCompanyRuntimeServices.filter(
+        (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+      )
+    : [];
+  const runtimePrimaryUrl = asString(context.agentCompanyRuntimePrimaryUrl, "");
+  const configuredCwd = asString(config.cwd, "");
+  const useConfiguredInsteadOfAgentHome = workspaceSource === "agent_home" && configuredCwd.length > 0;
+  const effectiveWorkspaceCwd = useConfiguredInsteadOfAgentHome ? "" : workspaceCwd;
+  const cwd = effectiveWorkspaceCwd || configuredCwd || process.cwd();
+  await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+
+  const envConfig = parseObject(config.env);
+  const hasExplicitApiKey =
+    typeof envConfig.AGENT_COMPANY_API_KEY === "string" && envConfig.AGENT_COMPANY_API_KEY.trim().length > 0;
+  const env: Record<string, string> = { ...buildAgentCompanyEnv(agent) };
+  env.AGENT_COMPANY_RUN_ID = runId;
+
+  const wakeTaskId =
+    (typeof context.taskId === "string" && context.taskId.trim().length > 0 && context.taskId.trim()) ||
+    (typeof context.issueId === "string" && context.issueId.trim().length > 0 && context.issueId.trim()) ||
+    null;
+  const wakeReason =
+    typeof context.wakeReason === "string" && context.wakeReason.trim().length > 0
+      ? context.wakeReason.trim()
+      : null;
+  const wakeCommentId =
+    (typeof context.wakeCommentId === "string" && context.wakeCommentId.trim().length > 0 && context.wakeCommentId.trim()) ||
+    (typeof context.commentId === "string" && context.commentId.trim().length > 0 && context.commentId.trim()) ||
+    null;
+  const approvalId =
+    typeof context.approvalId === "string" && context.approvalId.trim().length > 0
+      ? context.approvalId.trim()
+      : null;
+  const approvalStatus =
+    typeof context.approvalStatus === "string" && context.approvalStatus.trim().length > 0
+      ? context.approvalStatus.trim()
+      : null;
+  const linkedIssueIds = Array.isArray(context.issueIds)
+    ? context.issueIds.filter((value): value is string => typeof value === "string" && value.trim().length > 0)
+    : [];
+
+  if (wakeTaskId) {
+    env.AGENT_COMPANY_TASK_ID = wakeTaskId;
+  }
+  if (wakeReason) {
+    env.AGENT_COMPANY_WAKE_REASON = wakeReason;
+  }
+  if (wakeCommentId) {
+    env.AGENT_COMPANY_WAKE_COMMENT_ID = wakeCommentId;
+  }
+  if (approvalId) {
+    env.AGENT_COMPANY_APPROVAL_ID = approvalId;
+  }
+  if (approvalStatus) {
+    env.AGENT_COMPANY_APPROVAL_STATUS = approvalStatus;
+  }
+  if (linkedIssueIds.length > 0) {
+    env.AGENT_COMPANY_LINKED_ISSUE_IDS = linkedIssueIds.join(",");
+  }
+  if (effectiveWorkspaceCwd) {
+    env.AGENT_COMPANY_WORKSPACE_CWD = effectiveWorkspaceCwd;
+  }
+  if (workspaceSource) {
+    env.AGENT_COMPANY_WORKSPACE_SOURCE = workspaceSource;
+  }
+  if (workspaceStrategy) {
+    env.AGENT_COMPANY_WORKSPACE_STRATEGY = workspaceStrategy;
+  }
+  if (workspaceId) {
+    env.AGENT_COMPANY_WORKSPACE_ID = workspaceId;
+  }
+  if (workspaceRepoUrl) {
+    env.AGENT_COMPANY_WORKSPACE_REPO_URL = workspaceRepoUrl;
+  }
+  if (workspaceRepoRef) {
+    env.AGENT_COMPANY_WORKSPACE_REPO_REF = workspaceRepoRef;
+  }
+  if (workspaceBranch) {
+    env.AGENT_COMPANY_WORKSPACE_BRANCH = workspaceBranch;
+  }
+  if (workspaceWorktreePath) {
+    env.AGENT_COMPANY_WORKSPACE_WORKTREE_PATH = workspaceWorktreePath;
+  }
+  if (workspaceHints.length > 0) {
+    env.AGENT_COMPANY_WORKSPACES_JSON = JSON.stringify(workspaceHints);
+  }
+  if (runtimeServiceIntents.length > 0) {
+    env.AGENT_COMPANY_RUNTIME_SERVICE_INTENTS_JSON = JSON.stringify(runtimeServiceIntents);
+  }
+  if (runtimeServices.length > 0) {
+    env.AGENT_COMPANY_RUNTIME_SERVICES_JSON = JSON.stringify(runtimeServices);
+  }
+  if (runtimePrimaryUrl) {
+    env.AGENT_COMPANY_RUNTIME_PRIMARY_URL = runtimePrimaryUrl;
+  }
+
+  for (const [key, value] of Object.entries(envConfig)) {
+    if (typeof value === "string") env[key] = value;
+  }
+
+  if (!hasExplicitApiKey && authToken) {
+    env.AGENT_COMPANY_API_KEY = authToken;
+  }
+
+  const runtimeEnv = ensurePathInEnv({ ...process.env, ...env });
+  await ensureCommandResolvable(command, cwd, runtimeEnv);
+
+  const timeoutSec = asNumber(config.timeoutSec, 0);
+  const graceSec = asNumber(config.graceSec, 20);
+  const extraArgs = (() => {
+    const fromExtraArgs = asStringArray(config.extraArgs);
+    if (fromExtraArgs.length > 0) return fromExtraArgs;
+    return asStringArray(config.args);
+  })();
+
+  return {
+    command,
+    cwd,
+    workspaceId,
+    workspaceRepoUrl,
+    workspaceRepoRef,
+    env,
+    timeoutSec,
+    graceSec,
+    extraArgs,
+  };
+}
+
+export async function runClaudeLogin(input: {
+  runId: string;
+  agent: AdapterExecutionContext["agent"];
+  config: Record<string, unknown>;
+  context?: Record<string, unknown>;
+  authToken?: string;
+  onLog?: (stream: "stdout" | "stderr", chunk: string) => Promise<void>;
+}) {
+  const onLog = input.onLog ?? (async () => {});
+  const runtime = await buildClaudeRuntimeConfig({
+    runId: input.runId,
+    agent: input.agent,
+    config: input.config,
+    context: input.context ?? {},
+    authToken: input.authToken,
+  });
+
+  const proc = await runChildProcess(input.runId, runtime.command, ["login"], {
+    cwd: runtime.cwd,
+    env: runtime.env,
+    timeoutSec: runtime.timeoutSec,
+    graceSec: runtime.graceSec,
+    onLog,
+  });
+
+  const loginMeta = detectClaudeLoginRequired({
+    parsed: null,
+    stdout: proc.stdout,
+    stderr: proc.stderr,
+  });
+
+  return buildLoginResult({
+    proc,
+    loginUrl: loginMeta.loginUrl,
+  });
+}
+
+export async function execute(ctx: AdapterExecutionContext): Promise<AdapterExecutionResult> {
+  const { runId, agent, runtime, config, context, onLog, onMeta, authToken } = ctx;
+
+  const promptTemplate = asString(
+    config.promptTemplate,
+    "{{context.taskTitle}}\n\n{{context.taskDescription}}",
+  );
+  const model = asString(config.model, "");
+  const effort = asString(config.effort, "");
+  const chrome = asBoolean(config.chrome, false);
+  const maxTurns = asNumber(config.maxTurnsPerRun, 0);
+  const dangerouslySkipPermissions = asBoolean(config.dangerouslySkipPermissions, false);
+  const instructionsFilePath = asString(config.instructionsFilePath, "").trim();
+  const instructionsFileDir = instructionsFilePath ? `${path.dirname(instructionsFilePath)}/` : "";
+  const commandNotes = instructionsFilePath
+    ? [
+        `Injected agent instructions via --append-system-prompt-file ${instructionsFilePath} (with path directive appended)`,
+      ]
+    : [];
+
+  const runtimeConfig = await buildClaudeRuntimeConfig({
+    runId,
+    agent,
+    config,
+    context,
+    authToken,
+  });
+  const {
+    command,
+    cwd,
+    workspaceId,
+    workspaceRepoUrl,
+    workspaceRepoRef,
+    env,
+    timeoutSec,
+    graceSec,
+    extraArgs,
+  } = runtimeConfig;
+  const billingType = resolveClaudeBillingType(env);
+  const skillsDir = await buildSkillsDir();
+
+  // When instructionsFilePath is configured, create a combined temp file that
+  // includes both the file content and the path directive, so we only need
+  // --append-system-prompt-file (Claude CLI forbids using both flags together).
+  let effectiveInstructionsFilePath = instructionsFilePath;
+  if (instructionsFilePath) {
+    const instructionsContent = await fs.readFile(instructionsFilePath, "utf-8");
+    const pathDirective = `\nThe above agent instructions were loaded from ${instructionsFilePath}. Resolve any relative file references from ${instructionsFileDir}.`;
+    const combinedPath = path.join(skillsDir, "agent-instructions.md");
+    await fs.writeFile(combinedPath, instructionsContent + pathDirective, "utf-8");
+    effectiveInstructionsFilePath = combinedPath;
+  }
+
+  const runtimeSessionParams = parseObject(runtime.sessionParams);
+  const runtimeSessionId = asString(runtimeSessionParams.sessionId, runtime.sessionId ?? "");
+  const runtimeSessionCwd = asString(runtimeSessionParams.cwd, "");
+  const canResumeSession =
+    runtimeSessionId.length > 0 &&
+    (runtimeSessionCwd.length === 0 || path.resolve(runtimeSessionCwd) === path.resolve(cwd));
+  const sessionId = canResumeSession ? runtimeSessionId : null;
+  if (runtimeSessionId && !canResumeSession) {
+    await onLog(
+      "stderr",
+      `[agent-company] Claude session "${runtimeSessionId}" was saved for cwd "${runtimeSessionCwd}" and will not be resumed in "${cwd}".\n`,
+    );
+  }
+  const prompt = renderTemplate(promptTemplate, {
+    agentId: agent.id,
+    companyId: agent.companyId,
+    runId,
+    company: { id: agent.companyId },
+    agent,
+    run: { id: runId, source: "on_demand" },
+    context,
+  });
+
+  const buildClaudeArgs = (resumeSessionId: string | null) => {
+    const args = ["--print", "-", "--output-format", "stream-json", "--verbose"];
+    if (resumeSessionId) args.push("--resume", resumeSessionId);
+    if (dangerouslySkipPermissions) args.push("--dangerously-skip-permissions");
+    if (chrome) args.push("--chrome");
+    if (model) args.push("--model", model);
+    if (effort) args.push("--effort", effort);
+    if (maxTurns > 0) args.push("--max-turns", String(maxTurns));
+    if (effectiveInstructionsFilePath) {
+      args.push("--append-system-prompt-file", effectiveInstructionsFilePath);
+    }
+    args.push("--add-dir", skillsDir);
+    if (extraArgs.length > 0) args.push(...extraArgs);
+    return args;
+  };
+
+  const parseFallbackErrorMessage = (proc: RunProcessResult) => {
+    const stderrLine =
+      proc.stderr
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .find(Boolean) ?? "";
+
+    if ((proc.exitCode ?? 0) === 0) {
+      return "Failed to parse claude JSON output";
+    }
+
+    return stderrLine
+      ? `Claude exited with code ${proc.exitCode ?? -1}: ${stderrLine}`
+      : `Claude exited with code ${proc.exitCode ?? -1}`;
+  };
+
+  const runAttempt = async (resumeSessionId: string | null) => {
+    const args = buildClaudeArgs(resumeSessionId);
+    if (onMeta) {
+      await onMeta({
+        adapterType: "claude_local",
+        command,
+        cwd,
+        commandArgs: args,
+        commandNotes,
+        env: redactEnvForLogs(env),
+        prompt,
+        context,
+      });
+    }
+
+    const proc = await runChildProcess(runId, command, args, {
+      cwd,
+      env,
+      stdin: prompt,
+      timeoutSec,
+      graceSec,
+      onLog,
+    });
+
+    const parsedStream = parseClaudeStreamJson(proc.stdout);
+    const parsed = parsedStream.resultJson ?? parseJson(proc.stdout);
+    return { proc, parsedStream, parsed };
+  };
+
+  const toAdapterResult = (
+    attempt: {
+      proc: RunProcessResult;
+      parsedStream: ReturnType<typeof parseClaudeStreamJson>;
+      parsed: Record<string, unknown> | null;
+    },
+    opts: { fallbackSessionId: string | null; clearSessionOnMissingSession?: boolean },
+  ): AdapterExecutionResult => {
+    const { proc, parsedStream, parsed } = attempt;
+    const loginMeta = detectClaudeLoginRequired({
+      parsed,
+      stdout: proc.stdout,
+      stderr: proc.stderr,
+    });
+    const errorMeta =
+      loginMeta.loginUrl != null
+        ? {
+            loginUrl: loginMeta.loginUrl,
+          }
+        : undefined;
+
+    if (proc.timedOut) {
+      return {
+        exitCode: proc.exitCode,
+        signal: proc.signal,
+        timedOut: true,
+        errorMessage: `Timed out after ${timeoutSec}s`,
+        errorCode: "timeout",
+        errorMeta,
+        clearSession: Boolean(opts.clearSessionOnMissingSession),
+      };
+    }
+
+    if (!parsed) {
+      return {
+        exitCode: proc.exitCode,
+        signal: proc.signal,
+        timedOut: false,
+        errorMessage: parseFallbackErrorMessage(proc),
+        errorCode: loginMeta.requiresLogin ? "claude_auth_required" : null,
+        errorMeta,
+        resultJson: {
+          stdout: proc.stdout,
+          stderr: proc.stderr,
+        },
+        clearSession: Boolean(opts.clearSessionOnMissingSession),
+      };
+    }
+
+    const usage =
+      parsedStream.usage ??
+      (() => {
+        const usageObj = parseObject(parsed.usage);
+        return {
+          inputTokens: asNumber(usageObj.input_tokens, 0),
+          cachedInputTokens: asNumber(usageObj.cache_read_input_tokens, 0),
+          outputTokens: asNumber(usageObj.output_tokens, 0),
+        };
+      })();
+
+    const resolvedSessionId =
+      parsedStream.sessionId ??
+      (asString(parsed.session_id, opts.fallbackSessionId ?? "") || opts.fallbackSessionId);
+    const resolvedSessionParams = resolvedSessionId
+      ? ({
+        sessionId: resolvedSessionId,
+        cwd,
+        ...(workspaceId ? { workspaceId } : {}),
+        ...(workspaceRepoUrl ? { repoUrl: workspaceRepoUrl } : {}),
+        ...(workspaceRepoRef ? { repoRef: workspaceRepoRef } : {}),
+      } as Record<string, unknown>)
+      : null;
+    const clearSessionForMaxTurns = isClaudeMaxTurnsResult(parsed);
+
+    return {
+      exitCode: proc.exitCode,
+      signal: proc.signal,
+      timedOut: false,
+      errorMessage:
+        (proc.exitCode ?? 0) === 0
+          ? null
+          : describeClaudeFailure(parsed) ?? `Claude exited with code ${proc.exitCode ?? -1}`,
+      errorCode: loginMeta.requiresLogin ? "claude_auth_required" : null,
+      errorMeta,
+      usage,
+      sessionId: resolvedSessionId,
+      sessionParams: resolvedSessionParams,
+      sessionDisplayId: resolvedSessionId,
+      provider: "anthropic",
+      model: parsedStream.model || asString(parsed.model, model),
+      billingType,
+      costUsd: parsedStream.costUsd ?? asNumber(parsed.total_cost_usd, 0),
+      resultJson: parsed,
+      summary: parsedStream.summary || asString(parsed.result, ""),
+      clearSession: clearSessionForMaxTurns || Boolean(opts.clearSessionOnMissingSession && !resolvedSessionId),
+    };
+  };
+
+  try {
+    const initial = await runAttempt(sessionId ?? null);
+    if (
+      sessionId &&
+      !initial.proc.timedOut &&
+      (initial.proc.exitCode ?? 0) !== 0 &&
+      initial.parsed &&
+      isClaudeUnknownSessionError(initial.parsed)
+    ) {
+      await onLog(
+        "stderr",
+        `[agent-company] Claude resume session "${sessionId}" is unavailable; retrying with a fresh session.\n`,
+      );
+      const retry = await runAttempt(null);
+      return toAdapterResult(retry, { fallbackSessionId: null, clearSessionOnMissingSession: true });
+    }
+
+    return toAdapterResult(initial, { fallbackSessionId: runtimeSessionId || runtime.sessionId });
+  } finally {
+    fs.rm(skillsDir, { recursive: true, force: true }).catch(() => {});
+  }
+}
diff --git a/packages/adapter-claude-local/src/server/index.ts b/packages/adapter-claude-local/src/server/index.ts
new file mode 100644
index 00000000..bed2e92f
--- /dev/null
+++ b/packages/adapter-claude-local/src/server/index.ts
@@ -0,0 +1,59 @@
+export { execute, runClaudeLogin } from "./execute.js";
+export { testEnvironment } from "./test.js";
+export {
+  parseClaudeStreamJson,
+  describeClaudeFailure,
+  isClaudeMaxTurnsResult,
+  isClaudeUnknownSessionError,
+} from "./parse.js";
+import type { AdapterSessionCodec } from "@agentcompany/adapter-utils";
+
+function readNonEmptyString(value: unknown): string | null {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+
+export const sessionCodec: AdapterSessionCodec = {
+  deserialize(raw: unknown) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+    const record = raw as Record<string, unknown>;
+    const sessionId = readNonEmptyString(record.sessionId) ?? readNonEmptyString(record.session_id);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(record.cwd) ??
+      readNonEmptyString(record.workdir) ??
+      readNonEmptyString(record.folder);
+    const workspaceId = readNonEmptyString(record.workspaceId) ?? readNonEmptyString(record.workspace_id);
+    const repoUrl = readNonEmptyString(record.repoUrl) ?? readNonEmptyString(record.repo_url);
+    const repoRef = readNonEmptyString(record.repoRef) ?? readNonEmptyString(record.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  serialize(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    const sessionId = readNonEmptyString(params.sessionId) ?? readNonEmptyString(params.session_id);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(params.cwd) ??
+      readNonEmptyString(params.workdir) ??
+      readNonEmptyString(params.folder);
+    const workspaceId = readNonEmptyString(params.workspaceId) ?? readNonEmptyString(params.workspace_id);
+    const repoUrl = readNonEmptyString(params.repoUrl) ?? readNonEmptyString(params.repo_url);
+    const repoRef = readNonEmptyString(params.repoRef) ?? readNonEmptyString(params.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  getDisplayId(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    return readNonEmptyString(params.sessionId) ?? readNonEmptyString(params.session_id);
+  },
+};
diff --git a/packages/adapter-claude-local/src/server/parse.ts b/packages/adapter-claude-local/src/server/parse.ts
new file mode 100644
index 00000000..fca598fc
--- /dev/null
+++ b/packages/adapter-claude-local/src/server/parse.ts
@@ -0,0 +1,179 @@
+import type { UsageSummary } from "@agentcompany/adapter-utils";
+import { asString, asNumber, parseObject, parseJson } from "@agentcompany/adapter-utils/server-utils";
+
+const CLAUDE_AUTH_REQUIRED_RE = /(?:not\s+logged\s+in|please\s+log\s+in|please\s+run\s+`?claude\s+login`?|login\s+required|requires\s+login|unauthorized|authentication\s+required)/i;
+const URL_RE = /(https?:\/\/[^\s'"`<>()[\]{};,!?]+[^\s'"`<>()[\]{};,!.?:]+)/gi;
+
+export function parseClaudeStreamJson(stdout: string) {
+  let sessionId: string | null = null;
+  let model = "";
+  let finalResult: Record<string, unknown> | null = null;
+  const assistantTexts: string[] = [];
+
+  for (const rawLine of stdout.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line) continue;
+    const event = parseJson(line);
+    if (!event) continue;
+
+    const type = asString(event.type, "");
+    if (type === "system" && asString(event.subtype, "") === "init") {
+      sessionId = asString(event.session_id, sessionId ?? "") || sessionId;
+      model = asString(event.model, model);
+      continue;
+    }
+
+    if (type === "assistant") {
+      sessionId = asString(event.session_id, sessionId ?? "") || sessionId;
+      const message = parseObject(event.message);
+      const content = Array.isArray(message.content) ? message.content : [];
+      for (const entry of content) {
+        if (typeof entry !== "object" || entry === null || Array.isArray(entry)) continue;
+        const block = entry as Record<string, unknown>;
+        if (asString(block.type, "") === "text") {
+          const text = asString(block.text, "");
+          if (text) assistantTexts.push(text);
+        }
+      }
+      continue;
+    }
+
+    if (type === "result") {
+      finalResult = event;
+      sessionId = asString(event.session_id, sessionId ?? "") || sessionId;
+    }
+  }
+
+  if (!finalResult) {
+    return {
+      sessionId,
+      model,
+      costUsd: null as number | null,
+      usage: null as UsageSummary | null,
+      summary: assistantTexts.join("\n\n").trim(),
+      resultJson: null as Record<string, unknown> | null,
+    };
+  }
+
+  const usageObj = parseObject(finalResult.usage);
+  const usage: UsageSummary = {
+    inputTokens: asNumber(usageObj.input_tokens, 0),
+    cachedInputTokens: asNumber(usageObj.cache_read_input_tokens, 0),
+    outputTokens: asNumber(usageObj.output_tokens, 0),
+  };
+  const costRaw = finalResult.total_cost_usd;
+  const costUsd = typeof costRaw === "number" && Number.isFinite(costRaw) ? costRaw : null;
+  const summary = asString(finalResult.result, assistantTexts.join("\n\n")).trim();
+
+  return {
+    sessionId,
+    model,
+    costUsd,
+    usage,
+    summary,
+    resultJson: finalResult,
+  };
+}
+
+function extractClaudeErrorMessages(parsed: Record<string, unknown>): string[] {
+  const raw = Array.isArray(parsed.errors) ? parsed.errors : [];
+  const messages: string[] = [];
+
+  for (const entry of raw) {
+    if (typeof entry === "string") {
+      const msg = entry.trim();
+      if (msg) messages.push(msg);
+      continue;
+    }
+
+    if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+      continue;
+    }
+
+    const obj = entry as Record<string, unknown>;
+    const msg = asString(obj.message, "") || asString(obj.error, "") || asString(obj.code, "");
+    if (msg) {
+      messages.push(msg);
+      continue;
+    }
+
+    try {
+      messages.push(JSON.stringify(obj));
+    } catch {
+      // skip non-serializable entry
+    }
+  }
+
+  return messages;
+}
+
+export function extractClaudeLoginUrl(text: string): string | null {
+  const match = text.match(URL_RE);
+  if (!match || match.length === 0) return null;
+  for (const rawUrl of match) {
+    const cleaned = rawUrl.replace(/[\])}.!,?;:'"]+$/g, "");
+    if (cleaned.includes("claude") || cleaned.includes("anthropic") || cleaned.includes("auth")) {
+      return cleaned;
+    }
+  }
+  return match[0]?.replace(/[\])}.!,?;:'"]+$/g, "") ?? null;
+}
+
+export function detectClaudeLoginRequired(input: {
+  parsed: Record<string, unknown> | null;
+  stdout: string;
+  stderr: string;
+}): { requiresLogin: boolean; loginUrl: string | null } {
+  const resultText = asString(input.parsed?.result, "").trim();
+  const messages = [resultText, ...extractClaudeErrorMessages(input.parsed ?? {}), input.stdout, input.stderr]
+    .join("\n")
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter(Boolean);
+
+  const requiresLogin = messages.some((line) => CLAUDE_AUTH_REQUIRED_RE.test(line));
+  return {
+    requiresLogin,
+    loginUrl: extractClaudeLoginUrl([input.stdout, input.stderr].join("\n")),
+  };
+}
+
+export function describeClaudeFailure(parsed: Record<string, unknown>): string | null {
+  const subtype = asString(parsed.subtype, "");
+  const resultText = asString(parsed.result, "").trim();
+  const errors = extractClaudeErrorMessages(parsed);
+
+  let detail = resultText;
+  if (!detail && errors.length > 0) {
+    detail = errors[0] ?? "";
+  }
+
+  const parts = ["Claude run failed"];
+  if (subtype) parts.push(`subtype=${subtype}`);
+  if (detail) parts.push(detail);
+  return parts.length > 1 ? parts.join(": ") : null;
+}
+
+export function isClaudeMaxTurnsResult(parsed: Record<string, unknown> | null | undefined): boolean {
+  if (!parsed) return false;
+
+  const subtype = asString(parsed.subtype, "").trim().toLowerCase();
+  if (subtype === "error_max_turns") return true;
+
+  const stopReason = asString(parsed.stop_reason, "").trim().toLowerCase();
+  if (stopReason === "max_turns") return true;
+
+  const resultText = asString(parsed.result, "").trim();
+  return /max(?:imum)?\s+turns?/i.test(resultText);
+}
+
+export function isClaudeUnknownSessionError(parsed: Record<string, unknown>): boolean {
+  const resultText = asString(parsed.result, "").trim();
+  const allMessages = [resultText, ...extractClaudeErrorMessages(parsed)]
+    .map((msg) => msg.trim())
+    .filter(Boolean);
+
+  return allMessages.some((msg) =>
+    /no conversation found with session id|unknown session|session .* not found/i.test(msg),
+  );
+}
diff --git a/packages/adapter-claude-local/src/server/test.ts b/packages/adapter-claude-local/src/server/test.ts
new file mode 100644
index 00000000..f0f06e78
--- /dev/null
+++ b/packages/adapter-claude-local/src/server/test.ts
@@ -0,0 +1,223 @@
+import type {
+  AdapterEnvironmentCheck,
+  AdapterEnvironmentTestContext,
+  AdapterEnvironmentTestResult,
+} from "@agentcompany/adapter-utils";
+import {
+  asString,
+  asBoolean,
+  asNumber,
+  asStringArray,
+  parseObject,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import path from "node:path";
+import { detectClaudeLoginRequired, parseClaudeStreamJson } from "./parse.js";
+
+function summarizeStatus(checks: AdapterEnvironmentCheck[]): AdapterEnvironmentTestResult["status"] {
+  if (checks.some((check) => check.level === "error")) return "fail";
+  if (checks.some((check) => check.level === "warn")) return "warn";
+  return "pass";
+}
+
+function isNonEmpty(value: unknown): value is string {
+  return typeof value === "string" && value.trim().length > 0;
+}
+
+function firstNonEmptyLine(text: string): string {
+  return (
+    text
+      .split(/\r?\n/)
+      .map((line) => line.trim())
+      .find(Boolean) ?? ""
+  );
+}
+
+function commandLooksLike(command: string, expected: string): boolean {
+  const base = path.basename(command).toLowerCase();
+  return base === expected || base === `${expected}.cmd` || base === `${expected}.exe`;
+}
+
+function summarizeProbeDetail(stdout: string, stderr: string): string | null {
+  const raw = firstNonEmptyLine(stderr) || firstNonEmptyLine(stdout);
+  if (!raw) return null;
+  const clean = raw.replace(/\s+/g, " ").trim();
+  const max = 240;
+  return clean.length > max ? `${clean.slice(0, max - 1)}…` : clean;
+}
+
+export async function testEnvironment(
+  ctx: AdapterEnvironmentTestContext,
+): Promise<AdapterEnvironmentTestResult> {
+  const checks: AdapterEnvironmentCheck[] = [];
+  const config = parseObject(ctx.config);
+  const command = asString(config.command, "claude");
+  const cwd = asString(config.cwd, process.cwd());
+
+  try {
+    await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+    checks.push({
+      code: "claude_cwd_valid",
+      level: "info",
+      message: `Working directory is valid: ${cwd}`,
+    });
+  } catch (err) {
+    checks.push({
+      code: "claude_cwd_invalid",
+      level: "error",
+      message: err instanceof Error ? err.message : "Invalid working directory",
+      detail: cwd,
+    });
+  }
+
+  const envConfig = parseObject(config.env);
+  const env: Record<string, string> = {};
+  for (const [key, value] of Object.entries(envConfig)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  const runtimeEnv = ensurePathInEnv({ ...process.env, ...env });
+  try {
+    await ensureCommandResolvable(command, cwd, runtimeEnv);
+    checks.push({
+      code: "claude_command_resolvable",
+      level: "info",
+      message: `Command is executable: ${command}`,
+    });
+  } catch (err) {
+    checks.push({
+      code: "claude_command_unresolvable",
+      level: "error",
+      message: err instanceof Error ? err.message : "Command is not executable",
+      detail: command,
+    });
+  }
+
+  const configApiKey = env.ANTHROPIC_API_KEY;
+  const hostApiKey = process.env.ANTHROPIC_API_KEY;
+  if (isNonEmpty(configApiKey) || isNonEmpty(hostApiKey)) {
+    const source = isNonEmpty(configApiKey) ? "adapter config env" : "server environment";
+    checks.push({
+      code: "claude_anthropic_api_key_overrides_subscription",
+      level: "warn",
+      message:
+        "ANTHROPIC_API_KEY is set. Claude will use API-key auth instead of subscription credentials.",
+      detail: `Detected in ${source}.`,
+      hint: "Unset ANTHROPIC_API_KEY if you want subscription-based Claude login behavior.",
+    });
+  } else {
+    checks.push({
+      code: "claude_subscription_mode_possible",
+      level: "info",
+      message: "ANTHROPIC_API_KEY is not set; subscription-based auth can be used if Claude is logged in.",
+    });
+  }
+
+  const canRunProbe =
+    checks.every((check) => check.code !== "claude_cwd_invalid" && check.code !== "claude_command_unresolvable");
+  if (canRunProbe) {
+    if (!commandLooksLike(command, "claude")) {
+      checks.push({
+        code: "claude_hello_probe_skipped_custom_command",
+        level: "info",
+        message: "Skipped hello probe because command is not `claude`.",
+        detail: command,
+        hint: "Use the `claude` CLI command to run the automatic login and installation probe.",
+      });
+    } else {
+      const model = asString(config.model, "").trim();
+      const effort = asString(config.effort, "").trim();
+      const chrome = asBoolean(config.chrome, false);
+      const maxTurns = asNumber(config.maxTurnsPerRun, 0);
+      const dangerouslySkipPermissions = asBoolean(config.dangerouslySkipPermissions, false);
+      const extraArgs = (() => {
+        const fromExtraArgs = asStringArray(config.extraArgs);
+        if (fromExtraArgs.length > 0) return fromExtraArgs;
+        return asStringArray(config.args);
+      })();
+
+      const args = ["--print", "-", "--output-format", "stream-json", "--verbose"];
+      if (dangerouslySkipPermissions) args.push("--dangerously-skip-permissions");
+      if (chrome) args.push("--chrome");
+      if (model) args.push("--model", model);
+      if (effort) args.push("--effort", effort);
+      if (maxTurns > 0) args.push("--max-turns", String(maxTurns));
+      if (extraArgs.length > 0) args.push(...extraArgs);
+
+      const probe = await runChildProcess(
+        `claude-envtest-${Date.now()}-${Math.random().toString(16).slice(2)}`,
+        command,
+        args,
+        {
+          cwd,
+          env,
+          timeoutSec: 45,
+          graceSec: 5,
+          stdin: "Respond with hello.",
+          onLog: async () => {},
+        },
+      );
+
+      const parsedStream = parseClaudeStreamJson(probe.stdout);
+      const parsed = parsedStream.resultJson;
+      const loginMeta = detectClaudeLoginRequired({
+        parsed,
+        stdout: probe.stdout,
+        stderr: probe.stderr,
+      });
+      const detail = summarizeProbeDetail(probe.stdout, probe.stderr);
+
+      if (probe.timedOut) {
+        checks.push({
+          code: "claude_hello_probe_timed_out",
+          level: "warn",
+          message: "Claude hello probe timed out.",
+          hint: "Retry the probe. If this persists, verify Claude can run `Respond with hello` from this directory manually.",
+        });
+      } else if (loginMeta.requiresLogin) {
+        checks.push({
+          code: "claude_hello_probe_auth_required",
+          level: "warn",
+          message: "Claude CLI is installed, but login is required.",
+          ...(detail ? { detail } : {}),
+          hint: loginMeta.loginUrl
+            ? `Run \`claude login\` and complete sign-in at ${loginMeta.loginUrl}, then retry.`
+            : "Run `claude login` in this environment, then retry the probe.",
+        });
+      } else if ((probe.exitCode ?? 1) === 0) {
+        const summary = parsedStream.summary.trim();
+        const hasHello = /\bhello\b/i.test(summary);
+        checks.push({
+          code: hasHello ? "claude_hello_probe_passed" : "claude_hello_probe_unexpected_output",
+          level: hasHello ? "info" : "warn",
+          message: hasHello
+            ? "Claude hello probe succeeded."
+            : "Claude probe ran but did not return `hello` as expected.",
+          ...(summary ? { detail: summary.replace(/\s+/g, " ").trim().slice(0, 240) } : {}),
+          ...(hasHello
+            ? {}
+            : {
+                hint: "Try the probe manually (`claude --print - --output-format stream-json --verbose`) and prompt `Respond with hello`.",
+              }),
+        });
+      } else {
+        checks.push({
+          code: "claude_hello_probe_failed",
+          level: "error",
+          message: "Claude hello probe failed.",
+          ...(detail ? { detail } : {}),
+          hint: "Run `claude --print - --output-format stream-json --verbose` manually in this directory and prompt `Respond with hello` to debug.",
+        });
+      }
+    }
+  }
+
+  return {
+    adapterType: ctx.adapterType,
+    status: summarizeStatus(checks),
+    checks,
+    testedAt: new Date().toISOString(),
+  };
+}
diff --git a/packages/adapter-claude-local/src/ui/build-config.ts b/packages/adapter-claude-local/src/ui/build-config.ts
new file mode 100644
index 00000000..5835ac47
--- /dev/null
+++ b/packages/adapter-claude-local/src/ui/build-config.ts
@@ -0,0 +1,100 @@
+import type { CreateConfigValues } from "@agentcompany/adapter-utils";
+
+function parseCommaArgs(value: string): string[] {
+  return value
+    .split(",")
+    .map((item) => item.trim())
+    .filter(Boolean);
+}
+
+function parseEnvVars(text: string): Record<string, string> {
+  const env: Record<string, string> = {};
+  for (const line of text.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eq = trimmed.indexOf("=");
+    if (eq <= 0) continue;
+    const key = trimmed.slice(0, eq).trim();
+    const value = trimmed.slice(eq + 1);
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    env[key] = value;
+  }
+  return env;
+}
+
+function parseEnvBindings(bindings: unknown): Record<string, unknown> {
+  if (typeof bindings !== "object" || bindings === null || Array.isArray(bindings)) return {};
+  const env: Record<string, unknown> = {};
+  for (const [key, raw] of Object.entries(bindings)) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    if (typeof raw === "string") {
+      env[key] = { type: "plain", value: raw };
+      continue;
+    }
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
+    const rec = raw as Record<string, unknown>;
+    if (rec.type === "plain" && typeof rec.value === "string") {
+      env[key] = { type: "plain", value: rec.value };
+      continue;
+    }
+    if (rec.type === "secret_ref" && typeof rec.secretId === "string") {
+      env[key] = {
+        type: "secret_ref",
+        secretId: rec.secretId,
+        ...(typeof rec.version === "number" || rec.version === "latest"
+          ? { version: rec.version }
+          : {}),
+      };
+    }
+  }
+  return env;
+}
+
+function parseJsonObject(text: string): Record<string, unknown> | null {
+  const trimmed = text.trim();
+  if (!trimmed) return null;
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+    return parsed as Record<string, unknown>;
+  } catch {
+    return null;
+  }
+}
+
+export function buildClaudeLocalConfig(v: CreateConfigValues): Record<string, unknown> {
+  const ac: Record<string, unknown> = {};
+  if (v.cwd) ac.cwd = v.cwd;
+  if (v.instructionsFilePath) ac.instructionsFilePath = v.instructionsFilePath;
+  if (v.promptTemplate) ac.promptTemplate = v.promptTemplate;
+  if (v.model) ac.model = v.model;
+  if (v.thinkingEffort) ac.effort = v.thinkingEffort;
+  if (v.chrome) ac.chrome = true;
+  ac.timeoutSec = 0;
+  ac.graceSec = 15;
+  const env = parseEnvBindings(v.envBindings);
+  const legacy = parseEnvVars(v.envVars);
+  for (const [key, value] of Object.entries(legacy)) {
+    if (!Object.prototype.hasOwnProperty.call(env, key)) {
+      env[key] = { type: "plain", value };
+    }
+  }
+  if (Object.keys(env).length > 0) ac.env = env;
+  ac.maxTurnsPerRun = v.maxTurnsPerRun;
+  ac.dangerouslySkipPermissions = v.dangerouslySkipPermissions;
+  if (v.workspaceStrategyType === "git_worktree") {
+    ac.workspaceStrategy = {
+      type: "git_worktree",
+      ...(v.workspaceBaseRef ? { baseRef: v.workspaceBaseRef } : {}),
+      ...(v.workspaceBranchTemplate ? { branchTemplate: v.workspaceBranchTemplate } : {}),
+      ...(v.worktreeParentDir ? { worktreeParentDir: v.worktreeParentDir } : {}),
+    };
+  }
+  const runtimeServices = parseJsonObject(v.runtimeServicesJson ?? "");
+  if (runtimeServices && Array.isArray(runtimeServices.services)) {
+    ac.workspaceRuntime = runtimeServices;
+  }
+  if (v.command) ac.command = v.command;
+  if (v.extraArgs) ac.extraArgs = parseCommaArgs(v.extraArgs);
+  return ac;
+}
diff --git a/packages/adapter-claude-local/src/ui/index.ts b/packages/adapter-claude-local/src/ui/index.ts
new file mode 100644
index 00000000..a7939af3
--- /dev/null
+++ b/packages/adapter-claude-local/src/ui/index.ts
@@ -0,0 +1,2 @@
+export { parseClaudeStdoutLine } from "./parse-stdout.js";
+export { buildClaudeLocalConfig } from "./build-config.js";
diff --git a/packages/adapter-claude-local/src/ui/parse-stdout.ts b/packages/adapter-claude-local/src/ui/parse-stdout.ts
new file mode 100644
index 00000000..cca5fd41
--- /dev/null
+++ b/packages/adapter-claude-local/src/ui/parse-stdout.ts
@@ -0,0 +1,144 @@
+import type { TranscriptEntry } from "@agentcompany/adapter-utils";
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  return value as Record<string, unknown>;
+}
+
+function asNumber(value: unknown): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = asRecord(value);
+  if (!rec) return "";
+  const msg =
+    (typeof rec.message === "string" && rec.message) ||
+    (typeof rec.error === "string" && rec.error) ||
+    (typeof rec.code === "string" && rec.code) ||
+    "";
+  if (msg) return msg;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+function safeJsonParse(text: string): unknown {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+export function parseClaudeStdoutLine(line: string, ts: string): TranscriptEntry[] {
+  const parsed = asRecord(safeJsonParse(line));
+  if (!parsed) {
+    return [{ kind: "stdout", ts, text: line }];
+  }
+
+  const type = typeof parsed.type === "string" ? parsed.type : "";
+  if (type === "system" && parsed.subtype === "init") {
+    return [
+      {
+        kind: "init",
+        ts,
+        model: typeof parsed.model === "string" ? parsed.model : "unknown",
+        sessionId: typeof parsed.session_id === "string" ? parsed.session_id : "",
+      },
+    ];
+  }
+
+  if (type === "assistant") {
+    const message = asRecord(parsed.message) ?? {};
+    const content = Array.isArray(message.content) ? message.content : [];
+    const entries: TranscriptEntry[] = [];
+    for (const blockRaw of content) {
+      const block = asRecord(blockRaw);
+      if (!block) continue;
+      const blockType = typeof block.type === "string" ? block.type : "";
+      if (blockType === "text") {
+        const text = typeof block.text === "string" ? block.text : "";
+        if (text) entries.push({ kind: "assistant", ts, text });
+      } else if (blockType === "thinking") {
+        const text = typeof block.thinking === "string" ? block.thinking : "";
+        if (text) entries.push({ kind: "thinking", ts, text });
+      } else if (blockType === "tool_use") {
+        entries.push({
+          kind: "tool_call",
+          ts,
+          name: typeof block.name === "string" ? block.name : "unknown",
+          toolUseId:
+            typeof block.id === "string"
+              ? block.id
+              : typeof block.tool_use_id === "string"
+                ? block.tool_use_id
+                : undefined,
+          input: block.input ?? {},
+        });
+      }
+    }
+    return entries.length > 0 ? entries : [{ kind: "stdout", ts, text: line }];
+  }
+
+  if (type === "user") {
+    const message = asRecord(parsed.message) ?? {};
+    const content = Array.isArray(message.content) ? message.content : [];
+    const entries: TranscriptEntry[] = [];
+    for (const blockRaw of content) {
+      const block = asRecord(blockRaw);
+      if (!block) continue;
+      const blockType = typeof block.type === "string" ? block.type : "";
+      if (blockType === "text") {
+        const text = typeof block.text === "string" ? block.text : "";
+        if (text) entries.push({ kind: "user", ts, text });
+      } else if (blockType === "tool_result") {
+        const toolUseId = typeof block.tool_use_id === "string" ? block.tool_use_id : "";
+        const isError = block.is_error === true;
+        let text = "";
+        if (typeof block.content === "string") {
+          text = block.content;
+        } else if (Array.isArray(block.content)) {
+          const parts: string[] = [];
+          for (const part of block.content) {
+            const p = asRecord(part);
+            if (p && typeof p.text === "string") parts.push(p.text);
+          }
+          text = parts.join("\n");
+        }
+        entries.push({ kind: "tool_result", ts, toolUseId, content: text, isError });
+      }
+    }
+    if (entries.length > 0) return entries;
+    // fall through to stdout for user messages without recognized blocks
+  }
+
+  if (type === "result") {
+    const usage = asRecord(parsed.usage) ?? {};
+    const inputTokens = asNumber(usage.input_tokens);
+    const outputTokens = asNumber(usage.output_tokens);
+    const cachedTokens = asNumber(usage.cache_read_input_tokens);
+    const costUsd = asNumber(parsed.total_cost_usd);
+    const subtype = typeof parsed.subtype === "string" ? parsed.subtype : "";
+    const isError = parsed.is_error === true;
+    const errors = Array.isArray(parsed.errors) ? parsed.errors.map(errorText).filter(Boolean) : [];
+    const text = typeof parsed.result === "string" ? parsed.result : "";
+    return [{
+      kind: "result",
+      ts,
+      text,
+      inputTokens,
+      outputTokens,
+      cachedTokens,
+      costUsd,
+      subtype,
+      isError,
+      errors,
+    }];
+  }
+
+  return [{ kind: "stdout", ts, text: line }];
+}
diff --git a/packages/adapter-claude-local/tsconfig.json b/packages/adapter-claude-local/tsconfig.json
new file mode 100644
index 00000000..5a24989c
--- /dev/null
+++ b/packages/adapter-claude-local/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}
diff --git a/packages/adapter-codex-local/CHANGELOG.md b/packages/adapter-codex-local/CHANGELOG.md
new file mode 100644
index 00000000..8a4e2d11
--- /dev/null
+++ b/packages/adapter-codex-local/CHANGELOG.md
@@ -0,0 +1,68 @@
+# @paperclipai/adapter-codex-local
+
+## 0.3.0
+
+### Minor Changes
+
+- Stable release preparation for 0.3.0
+
+### Patch Changes
+
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.3.0
+
+## 0.2.7
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.7
+
+## 0.2.6
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.6
+
+## 0.2.5
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.5
+
+## 0.2.4
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.4
+
+## 0.2.3
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.3
+
+## 0.2.2
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.2
+
+## 0.2.1
+
+### Patch Changes
+
+- Version bump (patch)
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.2.1
diff --git a/packages/adapter-codex-local/package.json b/packages/adapter-codex-local/package.json
new file mode 100644
index 00000000..38a3e231
--- /dev/null
+++ b/packages/adapter-codex-local/package.json
@@ -0,0 +1,51 @@
+{
+  "name": "@agentcompany/adapter-codex-local",
+  "version": "0.3.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./server": "./src/server/index.ts",
+    "./ui": "./src/ui/index.ts",
+    "./cli": "./src/cli/index.ts"
+  },
+  "publishConfig": {
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.js"
+      },
+      "./server": {
+        "types": "./dist/server/index.d.ts",
+        "import": "./dist/server/index.js"
+      },
+      "./ui": {
+        "types": "./dist/ui/index.d.ts",
+        "import": "./dist/ui/index.js"
+      },
+      "./cli": {
+        "types": "./dist/cli/index.d.ts",
+        "import": "./dist/cli/index.js"
+      }
+    },
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts"
+  },
+  "files": [
+    "dist",
+    "skills"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@agentcompany/adapter-utils": "workspace:*",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.6.0",
+    "typescript": "^5.7.3"
+  }
+}
diff --git a/packages/adapter-codex-local/src/cli/format-event.ts b/packages/adapter-codex-local/src/cli/format-event.ts
new file mode 100644
index 00000000..507d7624
--- /dev/null
+++ b/packages/adapter-codex-local/src/cli/format-event.ts
@@ -0,0 +1,231 @@
+import pc from "picocolors";
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  return value as Record<string, unknown>;
+}
+
+function asString(value: unknown, fallback = ""): string {
+  return typeof value === "string" ? value : fallback;
+}
+
+function asNumber(value: unknown, fallback = 0): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = asRecord(value);
+  if (!rec) return "";
+  const msg =
+    (typeof rec.message === "string" && rec.message) ||
+    (typeof rec.error === "string" && rec.error) ||
+    (typeof rec.code === "string" && rec.code) ||
+    "";
+  if (msg) return msg;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+function printItemStarted(item: Record<string, unknown>): boolean {
+  const itemType = asString(item.type);
+  if (itemType === "command_execution") {
+    const command = asString(item.command);
+    console.log(pc.yellow("tool_call: command_execution"));
+    if (command) console.log(pc.gray(command));
+    return true;
+  }
+
+  if (itemType === "tool_use") {
+    const name = asString(item.name, "unknown");
+    console.log(pc.yellow(`tool_call: ${name}`));
+    if (item.input !== undefined) {
+      try {
+        console.log(pc.gray(JSON.stringify(item.input, null, 2)));
+      } catch {
+        console.log(pc.gray(String(item.input)));
+      }
+    }
+    return true;
+  }
+
+  return false;
+}
+
+function printItemCompleted(item: Record<string, unknown>): boolean {
+  const itemType = asString(item.type);
+
+  if (itemType === "agent_message") {
+    const text = asString(item.text);
+    if (text) console.log(pc.green(`assistant: ${text}`));
+    return true;
+  }
+
+  if (itemType === "reasoning") {
+    const text = asString(item.text);
+    if (text) console.log(pc.gray(`thinking: ${text}`));
+    return true;
+  }
+
+  if (itemType === "tool_use") {
+    const name = asString(item.name, "unknown");
+    console.log(pc.yellow(`tool_call: ${name}`));
+    if (item.input !== undefined) {
+      try {
+        console.log(pc.gray(JSON.stringify(item.input, null, 2)));
+      } catch {
+        console.log(pc.gray(String(item.input)));
+      }
+    }
+    return true;
+  }
+
+  if (itemType === "command_execution") {
+    const command = asString(item.command);
+    const status = asString(item.status);
+    const exitCode = typeof item.exit_code === "number" && Number.isFinite(item.exit_code) ? item.exit_code : null;
+    const output = asString(item.aggregated_output).replace(/\s+$/, "");
+    const isError =
+      (exitCode !== null && exitCode !== 0) ||
+      status === "failed" ||
+      status === "errored" ||
+      status === "error" ||
+      status === "cancelled";
+
+    const summaryParts = [
+      "tool_result: command_execution",
+      command ? `command="${command}"` : "",
+      status ? `status=${status}` : "",
+      exitCode !== null ? `exit_code=${exitCode}` : "",
+    ].filter(Boolean);
+    console.log((isError ? pc.red : pc.cyan)(summaryParts.join(" ")));
+    if (output) console.log((isError ? pc.red : pc.gray)(output));
+    return true;
+  }
+
+  if (itemType === "file_change") {
+    const changes = Array.isArray(item.changes) ? item.changes : [];
+    const entries = changes
+      .map((changeRaw) => asRecord(changeRaw))
+      .filter((change): change is Record<string, unknown> => Boolean(change))
+      .map((change) => {
+        const kind = asString(change.kind, "update");
+        const path = asString(change.path, "unknown");
+        return `${kind} ${path}`;
+      });
+    const preview = entries.length > 0 ? entries.slice(0, 6).join(", ") : "none";
+    const more = entries.length > 6 ? ` (+${entries.length - 6} more)` : "";
+    console.log(pc.cyan(`file_change: ${preview}${more}`));
+    return true;
+  }
+
+  if (itemType === "error") {
+    const message = errorText(item.message ?? item.error ?? item);
+    if (message) console.log(pc.red(`error: ${message}`));
+    return true;
+  }
+
+  if (itemType === "tool_result") {
+    const isError = item.is_error === true || asString(item.status) === "error";
+    const text = asString(item.content) || asString(item.result) || asString(item.output);
+    console.log((isError ? pc.red : pc.cyan)(`tool_result${isError ? " (error)" : ""}`));
+    if (text) console.log((isError ? pc.red : pc.gray)(text));
+    return true;
+  }
+
+  return false;
+}
+
+export function printCodexStreamEvent(raw: string, debug: boolean): void {
+  const line = raw.trim();
+  if (!line) return;
+
+  let parsed: Record<string, unknown> | null = null;
+  try {
+    parsed = JSON.parse(line) as Record<string, unknown>;
+  } catch {
+    console.log(line);
+    return;
+  }
+
+  const type = asString(parsed.type);
+
+  if (type === "thread.started") {
+    const threadId = asString(parsed.thread_id);
+    const model = asString(parsed.model);
+    const details = [threadId ? `session: ${threadId}` : "", model ? `model: ${model}` : ""].filter(Boolean).join(", ");
+    console.log(pc.blue(`Codex thread started${details ? ` (${details})` : ""}`));
+    return;
+  }
+
+  if (type === "turn.started") {
+    console.log(pc.blue("turn started"));
+    return;
+  }
+
+  if (type === "item.started" || type === "item.completed") {
+    const item = asRecord(parsed.item);
+    if (item) {
+      const handled =
+        type === "item.started"
+          ? printItemStarted(item)
+          : printItemCompleted(item);
+      if (!handled) {
+        const itemType = asString(item.type, "unknown");
+        const id = asString(item.id);
+        const status = asString(item.status);
+        const meta = [id ? `id=${id}` : "", status ? `status=${status}` : ""].filter(Boolean).join(" ");
+        console.log(pc.gray(`${type}: ${itemType}${meta ? ` (${meta})` : ""}`));
+      }
+    } else {
+      console.log(pc.gray(type));
+    }
+    return;
+  }
+
+  if (type === "turn.completed") {
+    const usage = asRecord(parsed.usage);
+    const input = asNumber(usage?.input_tokens);
+    const output = asNumber(usage?.output_tokens);
+    const cached = asNumber(usage?.cached_input_tokens, asNumber(usage?.cache_read_input_tokens));
+    const cost = asNumber(parsed.total_cost_usd);
+    const isError = parsed.is_error === true;
+    const subtype = asString(parsed.subtype);
+    const errors = Array.isArray(parsed.errors) ? parsed.errors.map(errorText).filter(Boolean) : [];
+
+    console.log(
+      pc.blue(`tokens: in=${input} out=${output} cached=${cached} cost=$${cost.toFixed(6)}`),
+    );
+    if (subtype || isError || errors.length > 0) {
+      console.log(
+        pc.red(`result: subtype=${subtype || "unknown"} is_error=${isError ? "true" : "false"}`),
+      );
+      if (errors.length > 0) console.log(pc.red(`errors: ${errors.join(" | ")}`));
+    }
+    return;
+  }
+
+  if (type === "turn.failed") {
+    const usage = asRecord(parsed.usage);
+    const input = asNumber(usage?.input_tokens);
+    const output = asNumber(usage?.output_tokens);
+    const cached = asNumber(usage?.cached_input_tokens, asNumber(usage?.cache_read_input_tokens));
+    const message = errorText(parsed.error ?? parsed.message);
+    console.log(pc.red(`turn failed${message ? `: ${message}` : ""}`));
+    console.log(pc.blue(`tokens: in=${input} out=${output} cached=${cached}`));
+    return;
+  }
+
+  if (type === "error") {
+    const message = errorText(parsed.message ?? parsed.error ?? parsed);
+    if (message) console.log(pc.red(`error: ${message}`));
+    return;
+  }
+
+  if (debug) {
+    console.log(pc.gray(line));
+  }
+}
diff --git a/packages/adapter-codex-local/src/cli/index.ts b/packages/adapter-codex-local/src/cli/index.ts
new file mode 100644
index 00000000..22fec464
--- /dev/null
+++ b/packages/adapter-codex-local/src/cli/index.ts
@@ -0,0 +1 @@
+export { printCodexStreamEvent } from "./format-event.js";
diff --git a/packages/adapter-codex-local/src/index.ts b/packages/adapter-codex-local/src/index.ts
new file mode 100644
index 00000000..a1eb329a
--- /dev/null
+++ b/packages/adapter-codex-local/src/index.ts
@@ -0,0 +1,46 @@
+export const type = "codex_local";
+export const label = "Codex (local)";
+export const DEFAULT_CODEX_LOCAL_MODEL = "gpt-5.3-codex";
+export const DEFAULT_CODEX_LOCAL_BYPASS_APPROVALS_AND_SANDBOX = true;
+
+export const models = [
+  { id: "gpt-5.4", label: "gpt-5.4" },
+  { id: DEFAULT_CODEX_LOCAL_MODEL, label: DEFAULT_CODEX_LOCAL_MODEL },
+  { id: "gpt-5.3-codex-spark", label: "gpt-5.3-codex-spark" },
+  { id: "gpt-5", label: "gpt-5" },
+  { id: "o3", label: "o3" },
+  { id: "o4-mini", label: "o4-mini" },
+  { id: "gpt-5-mini", label: "gpt-5-mini" },
+  { id: "gpt-5-nano", label: "gpt-5-nano" },
+  { id: "o3-mini", label: "o3-mini" },
+  { id: "codex-mini-latest", label: "Codex Mini" },
+];
+
+export const agentConfigurationDoc = `# codex_local agent configuration
+
+Adapter: codex_local
+
+Core fields:
+- cwd (string, optional): default absolute working directory fallback for the agent process (created if missing when possible)
+- instructionsFilePath (string, optional): absolute path to a markdown instructions file prepended to stdin prompt at runtime
+- model (string, optional): Codex model id
+- modelReasoningEffort (string, optional): reasoning effort override (minimal|low|medium|high) passed via -c model_reasoning_effort=...
+- promptTemplate (string, optional): run prompt template
+- search (boolean, optional): run codex with --search
+- dangerouslyBypassApprovalsAndSandbox (boolean, optional): run with bypass flag
+- command (string, optional): defaults to "codex"
+- extraArgs (string[], optional): additional CLI args
+- env (object, optional): KEY=VALUE environment variables
+- workspaceStrategy (object, optional): execution workspace strategy; currently supports { type: "git_worktree", baseRef?, branchTemplate?, worktreeParentDir? }
+- workspaceRuntime (object, optional): workspace runtime service intents; local host-managed services are realized before Codex starts and exposed back via context/env
+
+Operational fields:
+- timeoutSec (number, optional): run timeout in seconds
+- graceSec (number, optional): SIGTERM grace period in seconds
+
+Notes:
+- Prompts are piped via stdin (Codex receives "-" prompt argument).
+- AgentCompany auto-injects local skills into Codex personal skills dir ("$CODEX_HOME/skills" or "~/.codex/skills") when missing, so Codex can discover "$agentcompany" and related skills.
+- Some model/tool combinations reject certain effort levels (for example minimal with web search enabled).
+- When AgentCompany realizes a workspace/runtime for a run, it injects AGENT_COMPANY_WORKSPACE_* and AGENT_COMPANY_RUNTIME_* env vars for agent-side tooling.
+`;
diff --git a/packages/adapter-codex-local/src/server/execute.ts b/packages/adapter-codex-local/src/server/execute.ts
new file mode 100644
index 00000000..ddc4235a
--- /dev/null
+++ b/packages/adapter-codex-local/src/server/execute.ts
@@ -0,0 +1,444 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import type { AdapterExecutionContext, AdapterExecutionResult } from "@agentcompany/adapter-utils";
+import {
+  asString,
+  asNumber,
+  asBoolean,
+  asStringArray,
+  parseObject,
+  buildAgentCompanyEnv,
+  redactEnvForLogs,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  renderTemplate,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import { parseCodexJsonl, isCodexUnknownSessionError } from "./parse.js";
+
+const __moduleDir = path.dirname(fileURLToPath(import.meta.url));
+const SKILLS_CANDIDATES = [
+  path.resolve(__moduleDir, "../../skills"),         // published: <pkg>/dist/server/ -> <pkg>/skills/
+  path.resolve(__moduleDir, "../../../../../skills"), // dev: src/server/ -> repo root/skills/
+];
+const CODEX_ROLLOUT_NOISE_RE =
+  /^\d{4}-\d{2}-\d{2}T[^\s]+\s+ERROR\s+codex_core::rollout::list:\s+state db missing rollout path for thread\s+[a-z0-9-]+$/i;
+
+function stripCodexRolloutNoise(text: string): string {
+  const parts = text.split(/\r?\n/);
+  const kept: string[] = [];
+  for (const part of parts) {
+    const trimmed = part.trim();
+    if (!trimmed) {
+      kept.push(part);
+      continue;
+    }
+    if (CODEX_ROLLOUT_NOISE_RE.test(trimmed)) continue;
+    kept.push(part);
+  }
+  return kept.join("\n");
+}
+
+function firstNonEmptyLine(text: string): string {
+  return (
+    text
+      .split(/\r?\n/)
+      .map((line) => line.trim())
+      .find(Boolean) ?? ""
+  );
+}
+
+function hasNonEmptyEnvValue(env: Record<string, string>, key: string): boolean {
+  const raw = env[key];
+  return typeof raw === "string" && raw.trim().length > 0;
+}
+
+function resolveCodexBillingType(env: Record<string, string>): "api" | "subscription" {
+  // Codex uses API-key auth when OPENAI_API_KEY is present; otherwise rely on local login/session auth.
+  return hasNonEmptyEnvValue(env, "OPENAI_API_KEY") ? "api" : "subscription";
+}
+
+function codexHomeDir(): string {
+  const fromEnv = process.env.CODEX_HOME;
+  if (typeof fromEnv === "string" && fromEnv.trim().length > 0) return fromEnv.trim();
+  return path.join(os.homedir(), ".codex");
+}
+
+async function resolveAgentCompanySkillsDir(): Promise<string | null> {
+  for (const candidate of SKILLS_CANDIDATES) {
+    const isDir = await fs.stat(candidate).then((s) => s.isDirectory()).catch(() => false);
+    if (isDir) return candidate;
+  }
+  return null;
+}
+
+async function ensureCodexSkillsInjected(onLog: AdapterExecutionContext["onLog"]) {
+  const skillsDir = await resolveAgentCompanySkillsDir();
+  if (!skillsDir) return;
+
+  const skillsHome = path.join(codexHomeDir(), "skills");
+  await fs.mkdir(skillsHome, { recursive: true });
+  const entries = await fs.readdir(skillsDir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const source = path.join(skillsDir, entry.name);
+    const target = path.join(skillsHome, entry.name);
+    const existing = await fs.lstat(target).catch(() => null);
+    if (existing) continue;
+
+    try {
+      await fs.symlink(source, target);
+      await onLog(
+        "stderr",
+        `[agent-company] Injected Codex skill "${entry.name}" into ${skillsHome}\n`,
+      );
+    } catch (err) {
+      await onLog(
+        "stderr",
+        `[agent-company] Failed to inject Codex skill "${entry.name}" into ${skillsHome}: ${err instanceof Error ? err.message : String(err)}\n`,
+      );
+    }
+  }
+}
+
+export async function execute(ctx: AdapterExecutionContext): Promise<AdapterExecutionResult> {
+  const { runId, agent, runtime, config, context, onLog, onMeta, authToken } = ctx;
+
+  const promptTemplate = asString(
+    config.promptTemplate,
+    "{{context.taskTitle}}\n\n{{context.taskDescription}}",
+  );
+  const command = asString(config.command, "codex");
+  const model = asString(config.model, "");
+  const modelReasoningEffort = asString(
+    config.modelReasoningEffort,
+    asString(config.reasoningEffort, ""),
+  );
+  const search = asBoolean(config.search, false);
+  const bypass = asBoolean(
+    config.dangerouslyBypassApprovalsAndSandbox,
+    asBoolean(config.dangerouslyBypassSandbox, false),
+  );
+
+  const workspaceContext = parseObject(context.agentCompanyWorkspace);
+  const workspaceCwd = asString(workspaceContext.cwd, "");
+  const workspaceSource = asString(workspaceContext.source, "");
+  const workspaceStrategy = asString(workspaceContext.strategy, "");
+  const workspaceId = asString(workspaceContext.workspaceId, "");
+  const workspaceRepoUrl = asString(workspaceContext.repoUrl, "");
+  const workspaceRepoRef = asString(workspaceContext.repoRef, "");
+  const workspaceBranch = asString(workspaceContext.branchName, "");
+  const workspaceWorktreePath = asString(workspaceContext.worktreePath, "");
+  const workspaceHints = Array.isArray(context.agentCompanyWorkspaces)
+    ? context.agentCompanyWorkspaces.filter(
+        (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+      )
+    : [];
+  const runtimeServiceIntents = Array.isArray(context.agentCompanyRuntimeServiceIntents)
+    ? context.agentCompanyRuntimeServiceIntents.filter(
+        (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+      )
+    : [];
+  const runtimeServices = Array.isArray(context.agentCompanyRuntimeServices)
+    ? context.agentCompanyRuntimeServices.filter(
+        (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+      )
+    : [];
+  const runtimePrimaryUrl = asString(context.agentCompanyRuntimePrimaryUrl, "");
+  const configuredCwd = asString(config.cwd, "");
+  const useConfiguredInsteadOfAgentHome = workspaceSource === "agent_home" && configuredCwd.length > 0;
+  const effectiveWorkspaceCwd = useConfiguredInsteadOfAgentHome ? "" : workspaceCwd;
+  const cwd = effectiveWorkspaceCwd || configuredCwd || process.cwd();
+  await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+  await ensureCodexSkillsInjected(onLog);
+  const envConfig = parseObject(config.env);
+  const hasExplicitApiKey =
+    typeof envConfig.AGENT_COMPANY_API_KEY === "string" && envConfig.AGENT_COMPANY_API_KEY.trim().length > 0;
+  const env: Record<string, string> = { ...buildAgentCompanyEnv(agent) };
+  env.AGENT_COMPANY_RUN_ID = runId;
+  const wakeTaskId =
+    (typeof context.taskId === "string" && context.taskId.trim().length > 0 && context.taskId.trim()) ||
+    (typeof context.issueId === "string" && context.issueId.trim().length > 0 && context.issueId.trim()) ||
+    null;
+  const wakeReason =
+    typeof context.wakeReason === "string" && context.wakeReason.trim().length > 0
+      ? context.wakeReason.trim()
+      : null;
+  const wakeCommentId =
+    (typeof context.wakeCommentId === "string" && context.wakeCommentId.trim().length > 0 && context.wakeCommentId.trim()) ||
+    (typeof context.commentId === "string" && context.commentId.trim().length > 0 && context.commentId.trim()) ||
+    null;
+  const approvalId =
+    typeof context.approvalId === "string" && context.approvalId.trim().length > 0
+      ? context.approvalId.trim()
+      : null;
+  const approvalStatus =
+    typeof context.approvalStatus === "string" && context.approvalStatus.trim().length > 0
+      ? context.approvalStatus.trim()
+      : null;
+  const linkedIssueIds = Array.isArray(context.issueIds)
+    ? context.issueIds.filter((value): value is string => typeof value === "string" && value.trim().length > 0)
+    : [];
+  if (wakeTaskId) {
+    env.AGENT_COMPANY_TASK_ID = wakeTaskId;
+  }
+  if (wakeReason) {
+    env.AGENT_COMPANY_WAKE_REASON = wakeReason;
+  }
+  if (wakeCommentId) {
+    env.AGENT_COMPANY_WAKE_COMMENT_ID = wakeCommentId;
+  }
+  if (approvalId) {
+    env.AGENT_COMPANY_APPROVAL_ID = approvalId;
+  }
+  if (approvalStatus) {
+    env.AGENT_COMPANY_APPROVAL_STATUS = approvalStatus;
+  }
+  if (linkedIssueIds.length > 0) {
+    env.AGENT_COMPANY_LINKED_ISSUE_IDS = linkedIssueIds.join(",");
+  }
+  if (effectiveWorkspaceCwd) {
+    env.AGENT_COMPANY_WORKSPACE_CWD = effectiveWorkspaceCwd;
+  }
+  if (workspaceSource) {
+    env.AGENT_COMPANY_WORKSPACE_SOURCE = workspaceSource;
+  }
+  if (workspaceStrategy) {
+    env.AGENT_COMPANY_WORKSPACE_STRATEGY = workspaceStrategy;
+  }
+  if (workspaceId) {
+    env.AGENT_COMPANY_WORKSPACE_ID = workspaceId;
+  }
+  if (workspaceRepoUrl) {
+    env.AGENT_COMPANY_WORKSPACE_REPO_URL = workspaceRepoUrl;
+  }
+  if (workspaceRepoRef) {
+    env.AGENT_COMPANY_WORKSPACE_REPO_REF = workspaceRepoRef;
+  }
+  if (workspaceBranch) {
+    env.AGENT_COMPANY_WORKSPACE_BRANCH = workspaceBranch;
+  }
+  if (workspaceWorktreePath) {
+    env.AGENT_COMPANY_WORKSPACE_WORKTREE_PATH = workspaceWorktreePath;
+  }
+  if (workspaceHints.length > 0) {
+    env.AGENT_COMPANY_WORKSPACES_JSON = JSON.stringify(workspaceHints);
+  }
+  if (runtimeServiceIntents.length > 0) {
+    env.AGENT_COMPANY_RUNTIME_SERVICE_INTENTS_JSON = JSON.stringify(runtimeServiceIntents);
+  }
+  if (runtimeServices.length > 0) {
+    env.AGENT_COMPANY_RUNTIME_SERVICES_JSON = JSON.stringify(runtimeServices);
+  }
+  if (runtimePrimaryUrl) {
+    env.AGENT_COMPANY_RUNTIME_PRIMARY_URL = runtimePrimaryUrl;
+  }
+  for (const [k, v] of Object.entries(envConfig)) {
+    if (typeof v === "string") env[k] = v;
+  }
+  if (!hasExplicitApiKey && authToken) {
+    env.AGENT_COMPANY_API_KEY = authToken;
+  }
+  const billingType = resolveCodexBillingType(env);
+  const runtimeEnv = ensurePathInEnv({ ...process.env, ...env });
+  await ensureCommandResolvable(command, cwd, runtimeEnv);
+
+  const timeoutSec = asNumber(config.timeoutSec, 0);
+  const graceSec = asNumber(config.graceSec, 20);
+  const extraArgs = (() => {
+    const fromExtraArgs = asStringArray(config.extraArgs);
+    if (fromExtraArgs.length > 0) return fromExtraArgs;
+    return asStringArray(config.args);
+  })();
+
+  const runtimeSessionParams = parseObject(runtime.sessionParams);
+  const runtimeSessionId = asString(runtimeSessionParams.sessionId, runtime.sessionId ?? "");
+  const runtimeSessionCwd = asString(runtimeSessionParams.cwd, "");
+  const canResumeSession =
+    runtimeSessionId.length > 0 &&
+    (runtimeSessionCwd.length === 0 || path.resolve(runtimeSessionCwd) === path.resolve(cwd));
+  const sessionId = canResumeSession ? runtimeSessionId : null;
+  if (runtimeSessionId && !canResumeSession) {
+    await onLog(
+      "stderr",
+      `[agent-company] Codex session "${runtimeSessionId}" was saved for cwd "${runtimeSessionCwd}" and will not be resumed in "${cwd}".\n`,
+    );
+  }
+  const instructionsFilePath = asString(config.instructionsFilePath, "").trim();
+  const instructionsDir = instructionsFilePath ? `${path.dirname(instructionsFilePath)}/` : "";
+  let instructionsPrefix = "";
+  if (instructionsFilePath) {
+    try {
+      const instructionsContents = await fs.readFile(instructionsFilePath, "utf8");
+      instructionsPrefix =
+        `${instructionsContents}\n\n` +
+        `The above agent instructions were loaded from ${instructionsFilePath}. ` +
+        `Resolve any relative file references from ${instructionsDir}.\n\n`;
+      await onLog(
+        "stderr",
+        `[agent-company] Loaded agent instructions file: ${instructionsFilePath}\n`,
+      );
+    } catch (err) {
+      const reason = err instanceof Error ? err.message : String(err);
+      await onLog(
+        "stderr",
+        `[agent-company] Warning: could not read agent instructions file "${instructionsFilePath}": ${reason}\n`,
+      );
+    }
+  }
+  const commandNotes = (() => {
+    if (!instructionsFilePath) return [] as string[];
+    if (instructionsPrefix.length > 0) {
+      return [
+        `Loaded agent instructions from ${instructionsFilePath}`,
+        `Prepended instructions + path directive to stdin prompt (relative references from ${instructionsDir}).`,
+      ];
+    }
+    return [
+      `Configured instructionsFilePath ${instructionsFilePath}, but file could not be read; continuing without injected instructions.`,
+    ];
+  })();
+  const renderedPrompt = renderTemplate(promptTemplate, {
+    agentId: agent.id,
+    companyId: agent.companyId,
+    runId,
+    company: { id: agent.companyId },
+    agent,
+    run: { id: runId, source: "on_demand" },
+    context,
+  });
+  const prompt = `${instructionsPrefix}${renderedPrompt}`;
+
+  const buildArgs = (resumeSessionId: string | null) => {
+    const args = ["exec", "--json"];
+    if (search) args.unshift("--search");
+    if (bypass) args.push("--dangerously-bypass-approvals-and-sandbox");
+    if (model) args.push("--model", model);
+    if (modelReasoningEffort) args.push("-c", `model_reasoning_effort=${JSON.stringify(modelReasoningEffort)}`);
+    if (extraArgs.length > 0) args.push(...extraArgs);
+    if (resumeSessionId) args.push("resume", resumeSessionId, "-");
+    else args.push("-");
+    return args;
+  };
+
+  const runAttempt = async (resumeSessionId: string | null) => {
+    const args = buildArgs(resumeSessionId);
+    if (onMeta) {
+      await onMeta({
+        adapterType: "codex_local",
+        command,
+        cwd,
+        commandNotes,
+        commandArgs: args.map((value, idx) => {
+          if (idx === args.length - 1 && value !== "-") return `<prompt ${prompt.length} chars>`;
+          return value;
+        }),
+        env: redactEnvForLogs(env),
+        prompt,
+        context,
+      });
+    }
+
+    const proc = await runChildProcess(runId, command, args, {
+      cwd,
+      env,
+      stdin: prompt,
+      timeoutSec,
+      graceSec,
+      onLog: async (stream, chunk) => {
+        if (stream !== "stderr") {
+          await onLog(stream, chunk);
+          return;
+        }
+        const cleaned = stripCodexRolloutNoise(chunk);
+        if (!cleaned.trim()) return;
+        await onLog(stream, cleaned);
+      },
+    });
+    const cleanedStderr = stripCodexRolloutNoise(proc.stderr);
+    return {
+      proc: {
+        ...proc,
+        stderr: cleanedStderr,
+      },
+      rawStderr: proc.stderr,
+      parsed: parseCodexJsonl(proc.stdout),
+    };
+  };
+
+  const toResult = (
+    attempt: { proc: { exitCode: number | null; signal: string | null; timedOut: boolean; stdout: string; stderr: string }; rawStderr: string; parsed: ReturnType<typeof parseCodexJsonl> },
+    clearSessionOnMissingSession = false,
+  ): AdapterExecutionResult => {
+    if (attempt.proc.timedOut) {
+      return {
+        exitCode: attempt.proc.exitCode,
+        signal: attempt.proc.signal,
+        timedOut: true,
+        errorMessage: `Timed out after ${timeoutSec}s`,
+        clearSession: clearSessionOnMissingSession,
+      };
+    }
+
+    const resolvedSessionId = attempt.parsed.sessionId ?? runtimeSessionId ?? runtime.sessionId ?? null;
+    const resolvedSessionParams = resolvedSessionId
+      ? ({
+        sessionId: resolvedSessionId,
+        cwd,
+        ...(workspaceId ? { workspaceId } : {}),
+        ...(workspaceRepoUrl ? { repoUrl: workspaceRepoUrl } : {}),
+        ...(workspaceRepoRef ? { repoRef: workspaceRepoRef } : {}),
+      } as Record<string, unknown>)
+      : null;
+    const parsedError = typeof attempt.parsed.errorMessage === "string" ? attempt.parsed.errorMessage.trim() : "";
+    const stderrLine = firstNonEmptyLine(attempt.proc.stderr);
+    const fallbackErrorMessage =
+      parsedError ||
+      stderrLine ||
+      `Codex exited with code ${attempt.proc.exitCode ?? -1}`;
+
+    return {
+      exitCode: attempt.proc.exitCode,
+      signal: attempt.proc.signal,
+      timedOut: false,
+      errorMessage:
+        (attempt.proc.exitCode ?? 0) === 0
+          ? null
+          : fallbackErrorMessage,
+      usage: attempt.parsed.usage,
+      sessionId: resolvedSessionId,
+      sessionParams: resolvedSessionParams,
+      sessionDisplayId: resolvedSessionId,
+      provider: "openai",
+      model,
+      billingType,
+      costUsd: null,
+      resultJson: {
+        stdout: attempt.proc.stdout,
+        stderr: attempt.proc.stderr,
+      },
+      summary: attempt.parsed.summary,
+      clearSession: Boolean(clearSessionOnMissingSession && !resolvedSessionId),
+    };
+  };
+
+  const initial = await runAttempt(sessionId);
+  if (
+    sessionId &&
+    !initial.proc.timedOut &&
+    (initial.proc.exitCode ?? 0) !== 0 &&
+    isCodexUnknownSessionError(initial.proc.stdout, initial.rawStderr)
+  ) {
+    await onLog(
+      "stderr",
+      `[agent-company] Codex resume session "${sessionId}" is unavailable; retrying with a fresh session.\n`,
+    );
+    const retry = await runAttempt(null);
+    return toResult(retry, true);
+  }
+
+  return toResult(initial);
+}
diff --git a/packages/adapter-codex-local/src/server/index.ts b/packages/adapter-codex-local/src/server/index.ts
new file mode 100644
index 00000000..b0adcc4f
--- /dev/null
+++ b/packages/adapter-codex-local/src/server/index.ts
@@ -0,0 +1,54 @@
+export { execute } from "./execute.js";
+export { testEnvironment } from "./test.js";
+export { parseCodexJsonl, isCodexUnknownSessionError } from "./parse.js";
+import type { AdapterSessionCodec } from "@agentcompany/adapter-utils";
+
+function readNonEmptyString(value: unknown): string | null {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+
+export const sessionCodec: AdapterSessionCodec = {
+  deserialize(raw: unknown) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+    const record = raw as Record<string, unknown>;
+    const sessionId = readNonEmptyString(record.sessionId) ?? readNonEmptyString(record.session_id);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(record.cwd) ??
+      readNonEmptyString(record.workdir) ??
+      readNonEmptyString(record.folder);
+    const workspaceId = readNonEmptyString(record.workspaceId) ?? readNonEmptyString(record.workspace_id);
+    const repoUrl = readNonEmptyString(record.repoUrl) ?? readNonEmptyString(record.repo_url);
+    const repoRef = readNonEmptyString(record.repoRef) ?? readNonEmptyString(record.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  serialize(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    const sessionId = readNonEmptyString(params.sessionId) ?? readNonEmptyString(params.session_id);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(params.cwd) ??
+      readNonEmptyString(params.workdir) ??
+      readNonEmptyString(params.folder);
+    const workspaceId = readNonEmptyString(params.workspaceId) ?? readNonEmptyString(params.workspace_id);
+    const repoUrl = readNonEmptyString(params.repoUrl) ?? readNonEmptyString(params.repo_url);
+    const repoRef = readNonEmptyString(params.repoRef) ?? readNonEmptyString(params.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  getDisplayId(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    return readNonEmptyString(params.sessionId) ?? readNonEmptyString(params.session_id);
+  },
+};
diff --git a/packages/adapter-codex-local/src/server/parse.ts b/packages/adapter-codex-local/src/server/parse.ts
new file mode 100644
index 00000000..a92035a8
--- /dev/null
+++ b/packages/adapter-codex-local/src/server/parse.ts
@@ -0,0 +1,73 @@
+import { asString, asNumber, parseObject, parseJson } from "@agentcompany/adapter-utils/server-utils";
+
+export function parseCodexJsonl(stdout: string) {
+  let sessionId: string | null = null;
+  const messages: string[] = [];
+  let errorMessage: string | null = null;
+  const usage = {
+    inputTokens: 0,
+    cachedInputTokens: 0,
+    outputTokens: 0,
+  };
+
+  for (const rawLine of stdout.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line) continue;
+
+    const event = parseJson(line);
+    if (!event) continue;
+
+    const type = asString(event.type, "");
+    if (type === "thread.started") {
+      sessionId = asString(event.thread_id, sessionId ?? "") || sessionId;
+      continue;
+    }
+
+    if (type === "error") {
+      const msg = asString(event.message, "").trim();
+      if (msg) errorMessage = msg;
+      continue;
+    }
+
+    if (type === "item.completed") {
+      const item = parseObject(event.item);
+      if (asString(item.type, "") === "agent_message") {
+        const text = asString(item.text, "");
+        if (text) messages.push(text);
+      }
+      continue;
+    }
+
+    if (type === "turn.completed") {
+      const usageObj = parseObject(event.usage);
+      usage.inputTokens = asNumber(usageObj.input_tokens, usage.inputTokens);
+      usage.cachedInputTokens = asNumber(usageObj.cached_input_tokens, usage.cachedInputTokens);
+      usage.outputTokens = asNumber(usageObj.output_tokens, usage.outputTokens);
+      continue;
+    }
+
+    if (type === "turn.failed") {
+      const err = parseObject(event.error);
+      const msg = asString(err.message, "").trim();
+      if (msg) errorMessage = msg;
+    }
+  }
+
+  return {
+    sessionId,
+    summary: messages.join("\n\n").trim(),
+    usage,
+    errorMessage,
+  };
+}
+
+export function isCodexUnknownSessionError(stdout: string, stderr: string): boolean {
+  const haystack = `${stdout}\n${stderr}`
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter(Boolean)
+    .join("\n");
+  return /unknown (session|thread)|session .* not found|thread .* not found|conversation .* not found|missing rollout path for thread|state db missing rollout path/i.test(
+    haystack,
+  );
+}
diff --git a/packages/adapter-codex-local/src/server/test.ts b/packages/adapter-codex-local/src/server/test.ts
new file mode 100644
index 00000000..24dff280
--- /dev/null
+++ b/packages/adapter-codex-local/src/server/test.ts
@@ -0,0 +1,223 @@
+import type {
+  AdapterEnvironmentCheck,
+  AdapterEnvironmentTestContext,
+  AdapterEnvironmentTestResult,
+} from "@agentcompany/adapter-utils";
+import {
+  asString,
+  asBoolean,
+  asStringArray,
+  parseObject,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import path from "node:path";
+import { parseCodexJsonl } from "./parse.js";
+
+function summarizeStatus(checks: AdapterEnvironmentCheck[]): AdapterEnvironmentTestResult["status"] {
+  if (checks.some((check) => check.level === "error")) return "fail";
+  if (checks.some((check) => check.level === "warn")) return "warn";
+  return "pass";
+}
+
+function isNonEmpty(value: unknown): value is string {
+  return typeof value === "string" && value.trim().length > 0;
+}
+
+function firstNonEmptyLine(text: string): string {
+  return (
+    text
+      .split(/\r?\n/)
+      .map((line) => line.trim())
+      .find(Boolean) ?? ""
+  );
+}
+
+function commandLooksLike(command: string, expected: string): boolean {
+  const base = path.basename(command).toLowerCase();
+  return base === expected || base === `${expected}.cmd` || base === `${expected}.exe`;
+}
+
+function summarizeProbeDetail(stdout: string, stderr: string, parsedError: string | null): string | null {
+  const raw = parsedError?.trim() || firstNonEmptyLine(stderr) || firstNonEmptyLine(stdout);
+  if (!raw) return null;
+  const clean = raw.replace(/\s+/g, " ").trim();
+  const max = 240;
+  return clean.length > max ? `${clean.slice(0, max - 1)}…` : clean;
+}
+
+const CODEX_AUTH_REQUIRED_RE =
+  /(?:not\s+logged\s+in|login\s+required|authentication\s+required|unauthorized|invalid(?:\s+or\s+missing)?\s+api(?:[_\s-]?key)?|openai[_\s-]?api[_\s-]?key|api[_\s-]?key.*required|please\s+run\s+`?codex\s+login`?)/i;
+
+export async function testEnvironment(
+  ctx: AdapterEnvironmentTestContext,
+): Promise<AdapterEnvironmentTestResult> {
+  const checks: AdapterEnvironmentCheck[] = [];
+  const config = parseObject(ctx.config);
+  const command = asString(config.command, "codex");
+  const cwd = asString(config.cwd, process.cwd());
+
+  try {
+    await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+    checks.push({
+      code: "codex_cwd_valid",
+      level: "info",
+      message: `Working directory is valid: ${cwd}`,
+    });
+  } catch (err) {
+    checks.push({
+      code: "codex_cwd_invalid",
+      level: "error",
+      message: err instanceof Error ? err.message : "Invalid working directory",
+      detail: cwd,
+    });
+  }
+
+  const envConfig = parseObject(config.env);
+  const env: Record<string, string> = {};
+  for (const [key, value] of Object.entries(envConfig)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  const runtimeEnv = ensurePathInEnv({ ...process.env, ...env });
+  try {
+    await ensureCommandResolvable(command, cwd, runtimeEnv);
+    checks.push({
+      code: "codex_command_resolvable",
+      level: "info",
+      message: `Command is executable: ${command}`,
+    });
+  } catch (err) {
+    checks.push({
+      code: "codex_command_unresolvable",
+      level: "error",
+      message: err instanceof Error ? err.message : "Command is not executable",
+      detail: command,
+    });
+  }
+
+  const configOpenAiKey = env.OPENAI_API_KEY;
+  const hostOpenAiKey = process.env.OPENAI_API_KEY;
+  if (isNonEmpty(configOpenAiKey) || isNonEmpty(hostOpenAiKey)) {
+    const source = isNonEmpty(configOpenAiKey) ? "adapter config env" : "server environment";
+    checks.push({
+      code: "codex_openai_api_key_present",
+      level: "info",
+      message: "OPENAI_API_KEY is set for Codex authentication.",
+      detail: `Detected in ${source}.`,
+    });
+  } else {
+    checks.push({
+      code: "codex_openai_api_key_missing",
+      level: "warn",
+      message: "OPENAI_API_KEY is not set. Codex runs may fail until authentication is configured.",
+      hint: "Set OPENAI_API_KEY in adapter env, shell environment, or Codex auth configuration.",
+    });
+  }
+
+  const canRunProbe =
+    checks.every((check) => check.code !== "codex_cwd_invalid" && check.code !== "codex_command_unresolvable");
+  if (canRunProbe) {
+    if (!commandLooksLike(command, "codex")) {
+      checks.push({
+        code: "codex_hello_probe_skipped_custom_command",
+        level: "info",
+        message: "Skipped hello probe because command is not `codex`.",
+        detail: command,
+        hint: "Use the `codex` CLI command to run the automatic login and installation probe.",
+      });
+    } else {
+      const model = asString(config.model, "").trim();
+      const modelReasoningEffort = asString(
+        config.modelReasoningEffort,
+        asString(config.reasoningEffort, ""),
+      ).trim();
+      const search = asBoolean(config.search, false);
+      const bypass = asBoolean(
+        config.dangerouslyBypassApprovalsAndSandbox,
+        asBoolean(config.dangerouslyBypassSandbox, false),
+      );
+      const extraArgs = (() => {
+        const fromExtraArgs = asStringArray(config.extraArgs);
+        if (fromExtraArgs.length > 0) return fromExtraArgs;
+        return asStringArray(config.args);
+      })();
+
+      const args = ["exec", "--json"];
+      if (search) args.unshift("--search");
+      if (bypass) args.push("--dangerously-bypass-approvals-and-sandbox");
+      if (model) args.push("--model", model);
+      if (modelReasoningEffort) {
+        args.push("-c", `model_reasoning_effort=${JSON.stringify(modelReasoningEffort)}`);
+      }
+      if (extraArgs.length > 0) args.push(...extraArgs);
+      args.push("-");
+
+      const probe = await runChildProcess(
+        `codex-envtest-${Date.now()}-${Math.random().toString(16).slice(2)}`,
+        command,
+        args,
+        {
+          cwd,
+          env,
+          timeoutSec: 45,
+          graceSec: 5,
+          stdin: "Respond with hello.",
+          onLog: async () => {},
+        },
+      );
+      const parsed = parseCodexJsonl(probe.stdout);
+      const detail = summarizeProbeDetail(probe.stdout, probe.stderr, parsed.errorMessage);
+      const authEvidence = `${parsed.errorMessage ?? ""}\n${probe.stdout}\n${probe.stderr}`.trim();
+
+      if (probe.timedOut) {
+        checks.push({
+          code: "codex_hello_probe_timed_out",
+          level: "warn",
+          message: "Codex hello probe timed out.",
+          hint: "Retry the probe. If this persists, verify Codex can run `Respond with hello` from this directory manually.",
+        });
+      } else if ((probe.exitCode ?? 1) === 0) {
+        const summary = parsed.summary.trim();
+        const hasHello = /\bhello\b/i.test(summary);
+        checks.push({
+          code: hasHello ? "codex_hello_probe_passed" : "codex_hello_probe_unexpected_output",
+          level: hasHello ? "info" : "warn",
+          message: hasHello
+            ? "Codex hello probe succeeded."
+            : "Codex probe ran but did not return `hello` as expected.",
+          ...(summary ? { detail: summary.replace(/\s+/g, " ").trim().slice(0, 240) } : {}),
+          ...(hasHello
+            ? {}
+            : {
+                hint: "Try the probe manually (`codex exec --json -` then prompt: Respond with hello) to inspect full output.",
+              }),
+        });
+      } else if (CODEX_AUTH_REQUIRED_RE.test(authEvidence)) {
+        checks.push({
+          code: "codex_hello_probe_auth_required",
+          level: "warn",
+          message: "Codex CLI is installed, but authentication is not ready.",
+          ...(detail ? { detail } : {}),
+          hint: "Configure OPENAI_API_KEY in adapter env/shell or run `codex login`, then retry the probe.",
+        });
+      } else {
+        checks.push({
+          code: "codex_hello_probe_failed",
+          level: "error",
+          message: "Codex hello probe failed.",
+          ...(detail ? { detail } : {}),
+          hint: "Run `codex exec --json -` manually in this working directory and prompt `Respond with hello` to debug.",
+        });
+      }
+    }
+  }
+
+  return {
+    adapterType: ctx.adapterType,
+    status: summarizeStatus(checks),
+    checks,
+    testedAt: new Date().toISOString(),
+  };
+}
diff --git a/packages/adapter-codex-local/src/ui/build-config.ts b/packages/adapter-codex-local/src/ui/build-config.ts
new file mode 100644
index 00000000..f8e86978
--- /dev/null
+++ b/packages/adapter-codex-local/src/ui/build-config.ts
@@ -0,0 +1,106 @@
+import type { CreateConfigValues } from "@agentcompany/adapter-utils";
+import {
+  DEFAULT_CODEX_LOCAL_BYPASS_APPROVALS_AND_SANDBOX,
+  DEFAULT_CODEX_LOCAL_MODEL,
+} from "../index.js";
+
+function parseCommaArgs(value: string): string[] {
+  return value
+    .split(",")
+    .map((item) => item.trim())
+    .filter(Boolean);
+}
+
+function parseEnvVars(text: string): Record<string, string> {
+  const env: Record<string, string> = {};
+  for (const line of text.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eq = trimmed.indexOf("=");
+    if (eq <= 0) continue;
+    const key = trimmed.slice(0, eq).trim();
+    const value = trimmed.slice(eq + 1);
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    env[key] = value;
+  }
+  return env;
+}
+
+function parseEnvBindings(bindings: unknown): Record<string, unknown> {
+  if (typeof bindings !== "object" || bindings === null || Array.isArray(bindings)) return {};
+  const env: Record<string, unknown> = {};
+  for (const [key, raw] of Object.entries(bindings)) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    if (typeof raw === "string") {
+      env[key] = { type: "plain", value: raw };
+      continue;
+    }
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
+    const rec = raw as Record<string, unknown>;
+    if (rec.type === "plain" && typeof rec.value === "string") {
+      env[key] = { type: "plain", value: rec.value };
+      continue;
+    }
+    if (rec.type === "secret_ref" && typeof rec.secretId === "string") {
+      env[key] = {
+        type: "secret_ref",
+        secretId: rec.secretId,
+        ...(typeof rec.version === "number" || rec.version === "latest"
+          ? { version: rec.version }
+          : {}),
+      };
+    }
+  }
+  return env;
+}
+
+function parseJsonObject(text: string): Record<string, unknown> | null {
+  const trimmed = text.trim();
+  if (!trimmed) return null;
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+    return parsed as Record<string, unknown>;
+  } catch {
+    return null;
+  }
+}
+
+export function buildCodexLocalConfig(v: CreateConfigValues): Record<string, unknown> {
+  const ac: Record<string, unknown> = {};
+  if (v.cwd) ac.cwd = v.cwd;
+  if (v.instructionsFilePath) ac.instructionsFilePath = v.instructionsFilePath;
+  if (v.promptTemplate) ac.promptTemplate = v.promptTemplate;
+  ac.model = v.model || DEFAULT_CODEX_LOCAL_MODEL;
+  if (v.thinkingEffort) ac.modelReasoningEffort = v.thinkingEffort;
+  ac.timeoutSec = 0;
+  ac.graceSec = 15;
+  const env = parseEnvBindings(v.envBindings);
+  const legacy = parseEnvVars(v.envVars);
+  for (const [key, value] of Object.entries(legacy)) {
+    if (!Object.prototype.hasOwnProperty.call(env, key)) {
+      env[key] = { type: "plain", value };
+    }
+  }
+  if (Object.keys(env).length > 0) ac.env = env;
+  ac.search = v.search;
+  ac.dangerouslyBypassApprovalsAndSandbox =
+    typeof v.dangerouslyBypassSandbox === "boolean"
+      ? v.dangerouslyBypassSandbox
+      : DEFAULT_CODEX_LOCAL_BYPASS_APPROVALS_AND_SANDBOX;
+  if (v.workspaceStrategyType === "git_worktree") {
+    ac.workspaceStrategy = {
+      type: "git_worktree",
+      ...(v.workspaceBaseRef ? { baseRef: v.workspaceBaseRef } : {}),
+      ...(v.workspaceBranchTemplate ? { branchTemplate: v.workspaceBranchTemplate } : {}),
+      ...(v.worktreeParentDir ? { worktreeParentDir: v.worktreeParentDir } : {}),
+    };
+  }
+  const runtimeServices = parseJsonObject(v.runtimeServicesJson ?? "");
+  if (runtimeServices && Array.isArray(runtimeServices.services)) {
+    ac.workspaceRuntime = runtimeServices;
+  }
+  if (v.command) ac.command = v.command;
+  if (v.extraArgs) ac.extraArgs = parseCommaArgs(v.extraArgs);
+  return ac;
+}
diff --git a/packages/adapter-codex-local/src/ui/index.ts b/packages/adapter-codex-local/src/ui/index.ts
new file mode 100644
index 00000000..ba222502
--- /dev/null
+++ b/packages/adapter-codex-local/src/ui/index.ts
@@ -0,0 +1,2 @@
+export { parseCodexStdoutLine } from "./parse-stdout.js";
+export { buildCodexLocalConfig } from "./build-config.js";
diff --git a/packages/adapter-codex-local/src/ui/parse-stdout.ts b/packages/adapter-codex-local/src/ui/parse-stdout.ts
new file mode 100644
index 00000000..1ca4025c
--- /dev/null
+++ b/packages/adapter-codex-local/src/ui/parse-stdout.ts
@@ -0,0 +1,263 @@
+import {
+  redactHomePathUserSegments,
+  redactHomePathUserSegmentsInValue,
+  type TranscriptEntry,
+} from "@agentcompany/adapter-utils";
+
+function safeJsonParse(text: string): unknown {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  return value as Record<string, unknown>;
+}
+
+function asString(value: unknown, fallback = ""): string {
+  return typeof value === "string" ? value : fallback;
+}
+
+function asNumber(value: unknown, fallback = 0): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = asRecord(value);
+  if (!rec) return "";
+  const msg =
+    (typeof rec.message === "string" && rec.message) ||
+    (typeof rec.error === "string" && rec.error) ||
+    (typeof rec.code === "string" && rec.code) ||
+    "";
+  if (msg) return msg;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+function stringifyUnknown(value: unknown): string {
+  if (typeof value === "string") return redactHomePathUserSegments(value);
+  if (value === null || value === undefined) return "";
+  try {
+    return JSON.stringify(redactHomePathUserSegmentsInValue(value), null, 2);
+  } catch {
+    return redactHomePathUserSegments(String(value));
+  }
+}
+
+function parseCommandExecutionItem(
+  item: Record<string, unknown>,
+  ts: string,
+  phase: "started" | "completed",
+): TranscriptEntry[] {
+  const id = asString(item.id);
+  const command = asString(item.command);
+  const status = asString(item.status);
+  const exitCode = typeof item.exit_code === "number" && Number.isFinite(item.exit_code) ? item.exit_code : null;
+  const safeCommand = redactHomePathUserSegments(command);
+  const output = redactHomePathUserSegments(asString(item.aggregated_output)).replace(/\s+$/, "");
+
+  if (phase === "started") {
+    return [{
+      kind: "tool_call",
+      ts,
+      name: "command_execution",
+      toolUseId: id || command || "command_execution",
+      input: {
+        id,
+        command: safeCommand,
+      },
+    }];
+  }
+
+  const lines: string[] = [];
+  if (safeCommand) lines.push(`command: ${safeCommand}`);
+  if (status) lines.push(`status: ${status}`);
+  if (exitCode !== null) lines.push(`exit_code: ${exitCode}`);
+  if (output) {
+    if (lines.length > 0) lines.push("");
+    lines.push(output);
+  }
+
+  const isError =
+    (exitCode !== null && exitCode !== 0) ||
+    status === "failed" ||
+    status === "errored" ||
+    status === "error" ||
+    status === "cancelled";
+
+  return [{
+    kind: "tool_result",
+    ts,
+    toolUseId: id || command || "command_execution",
+    content: lines.join("\n").trim() || "command completed",
+    isError,
+  }];
+}
+
+function parseFileChangeItem(item: Record<string, unknown>, ts: string): TranscriptEntry[] {
+  const changes = Array.isArray(item.changes) ? item.changes : [];
+  const entries = changes
+    .map((changeRaw) => asRecord(changeRaw))
+    .filter((change): change is Record<string, unknown> => Boolean(change))
+    .map((change) => {
+      const kind = asString(change.kind, "update");
+      const path = redactHomePathUserSegments(asString(change.path, "unknown"));
+      return `${kind} ${path}`;
+    });
+
+  if (entries.length === 0) {
+    return [{ kind: "system", ts, text: "file changes applied" }];
+  }
+
+  const preview = entries.slice(0, 6).join(", ");
+  const more = entries.length > 6 ? ` (+${entries.length - 6} more)` : "";
+  return [{ kind: "system", ts, text: `file changes: ${preview}${more}` }];
+}
+
+function parseCodexItem(
+  item: Record<string, unknown>,
+  ts: string,
+  phase: "started" | "completed",
+): TranscriptEntry[] {
+  const itemType = asString(item.type);
+
+  if (itemType === "agent_message") {
+    const text = asString(item.text);
+    if (text) return [{ kind: "assistant", ts, text: redactHomePathUserSegments(text) }];
+    return [];
+  }
+
+  if (itemType === "reasoning") {
+    const text = asString(item.text);
+    if (text) return [{ kind: "thinking", ts, text: redactHomePathUserSegments(text) }];
+    return [{ kind: "system", ts, text: phase === "started" ? "reasoning started" : "reasoning completed" }];
+  }
+
+  if (itemType === "command_execution") {
+    return parseCommandExecutionItem(item, ts, phase);
+  }
+
+  if (itemType === "file_change" && phase === "completed") {
+    return parseFileChangeItem(item, ts);
+  }
+
+  if (itemType === "tool_use") {
+    return [{
+      kind: "tool_call",
+      ts,
+      name: redactHomePathUserSegments(asString(item.name, "unknown")),
+      toolUseId: asString(item.id),
+      input: redactHomePathUserSegmentsInValue(item.input ?? {}),
+    }];
+  }
+
+  if (itemType === "tool_result" && phase === "completed") {
+    const toolUseId = asString(item.tool_use_id, asString(item.id));
+    const content =
+      asString(item.content) ||
+      asString(item.output) ||
+      asString(item.result) ||
+      stringifyUnknown(item.content ?? item.output ?? item.result);
+    const isError = item.is_error === true || asString(item.status) === "error";
+    return [{ kind: "tool_result", ts, toolUseId, content: redactHomePathUserSegments(content), isError }];
+  }
+
+  if (itemType === "error" && phase === "completed") {
+    const text = errorText(item.message ?? item.error ?? item);
+    return [{ kind: "stderr", ts, text: redactHomePathUserSegments(text || "error") }];
+  }
+
+  const id = asString(item.id);
+  const status = asString(item.status);
+  const meta = [id ? `id=${id}` : "", status ? `status=${status}` : ""].filter(Boolean).join(" ");
+  return [{
+    kind: "system",
+    ts,
+    text: redactHomePathUserSegments(`item ${phase}: ${itemType || "unknown"}${meta ? ` (${meta})` : ""}`),
+  }];
+}
+
+export function parseCodexStdoutLine(line: string, ts: string): TranscriptEntry[] {
+  const parsed = asRecord(safeJsonParse(line));
+  if (!parsed) {
+    return [{ kind: "stdout", ts, text: redactHomePathUserSegments(line) }];
+  }
+
+  const type = asString(parsed.type);
+
+  if (type === "thread.started") {
+    const threadId = asString(parsed.thread_id);
+    return [{
+      kind: "init",
+      ts,
+      model: redactHomePathUserSegments(asString(parsed.model, "codex")),
+      sessionId: redactHomePathUserSegments(threadId),
+    }];
+  }
+
+  if (type === "turn.started") {
+    return [{ kind: "system", ts, text: "turn started" }];
+  }
+
+  if (type === "item.started" || type === "item.completed") {
+    const item = asRecord(parsed.item);
+    if (!item) return [{ kind: "system", ts, text: type.replace(".", " ") }];
+    return parseCodexItem(item, ts, type === "item.started" ? "started" : "completed");
+  }
+
+  if (type === "turn.completed") {
+    const usage = asRecord(parsed.usage);
+    const inputTokens = asNumber(usage?.input_tokens);
+    const outputTokens = asNumber(usage?.output_tokens);
+    const cachedTokens = asNumber(usage?.cached_input_tokens, asNumber(usage?.cache_read_input_tokens));
+    return [{
+      kind: "result",
+      ts,
+      text: redactHomePathUserSegments(asString(parsed.result)),
+      inputTokens,
+      outputTokens,
+      cachedTokens,
+      costUsd: asNumber(parsed.total_cost_usd),
+      subtype: redactHomePathUserSegments(asString(parsed.subtype)),
+      isError: parsed.is_error === true,
+      errors: Array.isArray(parsed.errors)
+        ? parsed.errors.map(errorText).map(redactHomePathUserSegments).filter(Boolean)
+        : [],
+    }];
+  }
+
+  if (type === "turn.failed") {
+    const usage = asRecord(parsed.usage);
+    const inputTokens = asNumber(usage?.input_tokens);
+    const outputTokens = asNumber(usage?.output_tokens);
+    const cachedTokens = asNumber(usage?.cached_input_tokens, asNumber(usage?.cache_read_input_tokens));
+    const message = errorText(parsed.error ?? parsed.message);
+    return [{
+      kind: "result",
+      ts,
+      text: redactHomePathUserSegments(asString(parsed.result)),
+      inputTokens,
+      outputTokens,
+      cachedTokens,
+      costUsd: asNumber(parsed.total_cost_usd),
+      subtype: redactHomePathUserSegments(asString(parsed.subtype, "turn.failed")),
+      isError: true,
+      errors: message ? [redactHomePathUserSegments(message)] : [],
+    }];
+  }
+
+  if (type === "error") {
+    const message = errorText(parsed.message ?? parsed.error ?? parsed);
+    return [{ kind: "stderr", ts, text: redactHomePathUserSegments(message || line) }];
+  }
+
+  return [{ kind: "stdout", ts, text: redactHomePathUserSegments(line) }];
+}
diff --git a/packages/adapter-codex-local/tsconfig.json b/packages/adapter-codex-local/tsconfig.json
new file mode 100644
index 00000000..5a24989c
--- /dev/null
+++ b/packages/adapter-codex-local/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}
diff --git a/packages/adapter-gemini-local/package.json b/packages/adapter-gemini-local/package.json
new file mode 100644
index 00000000..571c0961
--- /dev/null
+++ b/packages/adapter-gemini-local/package.json
@@ -0,0 +1,51 @@
+{
+  "name": "@agentcompany/adapter-gemini-local",
+  "version": "0.2.7",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./server": "./src/server/index.ts",
+    "./ui": "./src/ui/index.ts",
+    "./cli": "./src/cli/index.ts"
+  },
+  "publishConfig": {
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.js"
+      },
+      "./server": {
+        "types": "./dist/server/index.d.ts",
+        "import": "./dist/server/index.js"
+      },
+      "./ui": {
+        "types": "./dist/ui/index.d.ts",
+        "import": "./dist/ui/index.js"
+      },
+      "./cli": {
+        "types": "./dist/cli/index.d.ts",
+        "import": "./dist/cli/index.js"
+      }
+    },
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts"
+  },
+  "files": [
+    "dist",
+    "skills"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@agentcompany/adapter-utils": "workspace:*",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.6.0",
+    "typescript": "^5.7.3"
+  }
+}
diff --git a/packages/adapter-gemini-local/src/cli/format-event.ts b/packages/adapter-gemini-local/src/cli/format-event.ts
new file mode 100644
index 00000000..777ef194
--- /dev/null
+++ b/packages/adapter-gemini-local/src/cli/format-event.ts
@@ -0,0 +1,210 @@
+import pc from "picocolors";
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  return value as Record<string, unknown>;
+}
+
+function asString(value: unknown, fallback = ""): string {
+  return typeof value === "string" ? value : fallback;
+}
+
+function asNumber(value: unknown, fallback = 0): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+
+function stringifyUnknown(value: unknown): string {
+  if (typeof value === "string") return value;
+  if (value === null || value === undefined) return "";
+  try {
+    return JSON.stringify(value, null, 2);
+  } catch {
+    return String(value);
+  }
+}
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = asRecord(value);
+  if (!rec) return "";
+  const msg =
+    (typeof rec.message === "string" && rec.message) ||
+    (typeof rec.error === "string" && rec.error) ||
+    (typeof rec.code === "string" && rec.code) ||
+    "";
+  if (msg) return msg;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+function printTextMessage(prefix: string, colorize: (text: string) => string, messageRaw: unknown): void {
+  if (typeof messageRaw === "string") {
+    const text = messageRaw.trim();
+    if (text) console.log(colorize(`${prefix}: ${text}`));
+    return;
+  }
+
+  const message = asRecord(messageRaw);
+  if (!message) return;
+
+  const directText = asString(message.text).trim();
+  if (directText) console.log(colorize(`${prefix}: ${directText}`));
+
+  const content = Array.isArray(message.content) ? message.content : [];
+  for (const partRaw of content) {
+    const part = asRecord(partRaw);
+    if (!part) continue;
+    const type = asString(part.type).trim();
+
+    if (type === "output_text" || type === "text" || type === "content") {
+      const text = asString(part.text).trim() || asString(part.content).trim();
+      if (text) console.log(colorize(`${prefix}: ${text}`));
+      continue;
+    }
+
+    if (type === "thinking") {
+      const text = asString(part.text).trim();
+      if (text) console.log(pc.gray(`thinking: ${text}`));
+      continue;
+    }
+
+    if (type === "tool_call") {
+      const name = asString(part.name, asString(part.tool, "tool"));
+      console.log(pc.yellow(`tool_call: ${name}`));
+      const input = part.input ?? part.arguments ?? part.args;
+      if (input !== undefined) console.log(pc.gray(stringifyUnknown(input)));
+      continue;
+    }
+
+    if (type === "tool_result" || type === "tool_response") {
+      const isError = part.is_error === true || asString(part.status).toLowerCase() === "error";
+      const contentText =
+        asString(part.output) ||
+        asString(part.text) ||
+        asString(part.result) ||
+        stringifyUnknown(part.output ?? part.result ?? part.text ?? part.response);
+      console.log((isError ? pc.red : pc.cyan)(`tool_result${isError ? " (error)" : ""}`));
+      if (contentText) console.log((isError ? pc.red : pc.gray)(contentText));
+    }
+  }
+}
+
+function printUsage(parsed: Record<string, unknown>) {
+  const usage = asRecord(parsed.usage) ?? asRecord(parsed.usageMetadata);
+  const usageMetadata = asRecord(usage?.usageMetadata);
+  const source = usageMetadata ?? usage ?? {};
+  const input = asNumber(source.input_tokens, asNumber(source.inputTokens, asNumber(source.promptTokenCount)));
+  const output = asNumber(source.output_tokens, asNumber(source.outputTokens, asNumber(source.candidatesTokenCount)));
+  const cached = asNumber(
+    source.cached_input_tokens,
+    asNumber(source.cachedInputTokens, asNumber(source.cachedContentTokenCount)),
+  );
+  const cost = asNumber(parsed.total_cost_usd, asNumber(parsed.cost_usd, asNumber(parsed.cost)));
+  console.log(pc.blue(`tokens: in=${input} out=${output} cached=${cached} cost=$${cost.toFixed(6)}`));
+}
+
+export function printGeminiStreamEvent(raw: string, debug: boolean): void {
+  const line = raw.trim();
+  if (!line) return;
+
+  let parsed: Record<string, unknown> | null = null;
+  try {
+    parsed = JSON.parse(line) as Record<string, unknown>;
+  } catch {
+    console.log(line);
+    return;
+  }
+
+  const type = asString(parsed.type);
+
+  if (type === "system") {
+    const subtype = asString(parsed.subtype);
+    if (subtype === "init") {
+      const sessionId =
+        asString(parsed.session_id) ||
+        asString(parsed.sessionId) ||
+        asString(parsed.sessionID) ||
+        asString(parsed.checkpoint_id);
+      const model = asString(parsed.model);
+      const details = [sessionId ? `session: ${sessionId}` : "", model ? `model: ${model}` : ""]
+        .filter(Boolean)
+        .join(", ");
+      console.log(pc.blue(`Gemini init${details ? ` (${details})` : ""}`));
+      return;
+    }
+    if (subtype === "error") {
+      const text = errorText(parsed.error ?? parsed.message ?? parsed.detail);
+      if (text) console.log(pc.red(`error: ${text}`));
+      return;
+    }
+    console.log(pc.blue(`system: ${subtype || "event"}`));
+    return;
+  }
+
+  if (type === "assistant") {
+    printTextMessage("assistant", pc.green, parsed.message);
+    return;
+  }
+
+  if (type === "user") {
+    printTextMessage("user", pc.gray, parsed.message);
+    return;
+  }
+
+  if (type === "thinking") {
+    const text = asString(parsed.text).trim() || asString(asRecord(parsed.delta)?.text).trim();
+    if (text) console.log(pc.gray(`thinking: ${text}`));
+    return;
+  }
+
+  if (type === "tool_call") {
+    const subtype = asString(parsed.subtype).trim().toLowerCase();
+    const toolCall = asRecord(parsed.tool_call ?? parsed.toolCall);
+    const [toolName] = toolCall ? Object.keys(toolCall) : [];
+    if (!toolCall || !toolName) {
+      console.log(pc.yellow(`tool_call${subtype ? `: ${subtype}` : ""}`));
+      return;
+    }
+    const payload = asRecord(toolCall[toolName]) ?? {};
+    if (subtype === "started" || subtype === "start") {
+      console.log(pc.yellow(`tool_call: ${toolName}`));
+      console.log(pc.gray(stringifyUnknown(payload.args ?? payload.input ?? payload.arguments ?? payload)));
+      return;
+    }
+    if (subtype === "completed" || subtype === "complete" || subtype === "finished") {
+      const isError =
+        parsed.is_error === true ||
+        payload.is_error === true ||
+        payload.error !== undefined ||
+        asString(payload.status).toLowerCase() === "error";
+      console.log((isError ? pc.red : pc.cyan)(`tool_result${isError ? " (error)" : ""}`));
+      console.log((isError ? pc.red : pc.gray)(stringifyUnknown(payload.result ?? payload.output ?? payload.error)));
+      return;
+    }
+    console.log(pc.yellow(`tool_call: ${toolName}${subtype ? ` (${subtype})` : ""}`));
+    return;
+  }
+
+  if (type === "result") {
+    printUsage(parsed);
+    const subtype = asString(parsed.subtype, "result");
+    const isError = parsed.is_error === true;
+    if (subtype || isError) {
+      console.log((isError ? pc.red : pc.blue)(`result: subtype=${subtype} is_error=${isError ? "true" : "false"}`));
+    }
+    return;
+  }
+
+  if (type === "error") {
+    const text = errorText(parsed.error ?? parsed.message ?? parsed.detail);
+    if (text) console.log(pc.red(`error: ${text}`));
+    return;
+  }
+
+  if (debug) {
+    console.log(pc.gray(line));
+  }
+}
diff --git a/packages/adapter-gemini-local/src/cli/index.ts b/packages/adapter-gemini-local/src/cli/index.ts
new file mode 100644
index 00000000..49ec4426
--- /dev/null
+++ b/packages/adapter-gemini-local/src/cli/index.ts
@@ -0,0 +1 @@
+export { printGeminiStreamEvent } from "./format-event.js";
diff --git a/packages/adapter-gemini-local/src/index.ts b/packages/adapter-gemini-local/src/index.ts
new file mode 100644
index 00000000..ec05f725
--- /dev/null
+++ b/packages/adapter-gemini-local/src/index.ts
@@ -0,0 +1,47 @@
+export const type = "gemini_local";
+export const label = "Gemini CLI (local)";
+export const DEFAULT_GEMINI_LOCAL_MODEL = "auto";
+
+export const models = [
+  { id: DEFAULT_GEMINI_LOCAL_MODEL, label: "Auto" },
+  { id: "gemini-2.5-pro", label: "Gemini 2.5 Pro" },
+  { id: "gemini-2.5-flash", label: "Gemini 2.5 Flash" },
+  { id: "gemini-2.5-flash-lite", label: "Gemini 2.5 Flash Lite" },
+  { id: "gemini-2.0-flash", label: "Gemini 2.0 Flash" },
+  { id: "gemini-2.0-flash-lite", label: "Gemini 2.0 Flash Lite" },
+];
+
+export const agentConfigurationDoc = `# gemini_local agent configuration
+
+Adapter: gemini_local
+
+Use when:
+- You want AgentCompany to run the Gemini CLI locally on the host machine
+- You want Gemini chat sessions resumed across heartbeats with --resume
+- You want AgentCompany skills injected locally without polluting the global environment
+
+Don't use when:
+- You need webhook-style external invocation (use http or openclaw_gateway)
+- You only need a one-shot script without an AI coding agent loop (use process)
+- Gemini CLI is not installed on the machine that runs AgentCompany
+
+Core fields:
+- cwd (string, optional): default absolute working directory fallback for the agent process (created if missing when possible)
+- instructionsFilePath (string, optional): absolute path to a markdown instructions file prepended to the run prompt
+- promptTemplate (string, optional): run prompt template
+- model (string, optional): Gemini model id. Defaults to auto.
+- sandbox (boolean, optional): run in sandbox mode (default: false, passes --sandbox=none)
+- command (string, optional): defaults to "gemini"
+- extraArgs (string[], optional): additional CLI args
+- env (object, optional): KEY=VALUE environment variables
+
+Operational fields:
+- timeoutSec (number, optional): run timeout in seconds
+- graceSec (number, optional): SIGTERM grace period in seconds
+
+Notes:
+- Runs use positional prompt arguments, not stdin.
+- Sessions resume with --resume when stored session cwd matches the current cwd.
+- AgentCompany auto-injects local skills into \`~/.gemini/skills/\` via symlinks, so the CLI can discover both credentials and skills in their natural location.
+- Authentication can use GEMINI_API_KEY / GOOGLE_API_KEY or local Gemini CLI login.
+`;
diff --git a/packages/adapter-gemini-local/src/server/execute.ts b/packages/adapter-gemini-local/src/server/execute.ts
new file mode 100644
index 00000000..e61a4c41
--- /dev/null
+++ b/packages/adapter-gemini-local/src/server/execute.ts
@@ -0,0 +1,436 @@
+import fs from "node:fs/promises";
+import type { Dirent } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import type { AdapterExecutionContext, AdapterExecutionResult } from "@agentcompany/adapter-utils";
+import {
+  asBoolean,
+  asNumber,
+  asString,
+  asStringArray,
+  buildAgentCompanyEnv,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  parseObject,
+  redactEnvForLogs,
+  renderTemplate,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import { DEFAULT_GEMINI_LOCAL_MODEL } from "../index.js";
+import {
+  describeGeminiFailure,
+  detectGeminiAuthRequired,
+  isGeminiTurnLimitResult,
+  isGeminiUnknownSessionError,
+  parseGeminiJsonl,
+} from "./parse.js";
+import { firstNonEmptyLine } from "./utils.js";
+
+const __moduleDir = path.dirname(fileURLToPath(import.meta.url));
+const SKILLS_CANDIDATES = [
+  path.resolve(__moduleDir, "../../skills"),
+  path.resolve(__moduleDir, "../../../../../skills"),
+];
+
+function hasNonEmptyEnvValue(env: Record<string, string>, key: string): boolean {
+  const raw = env[key];
+  return typeof raw === "string" && raw.trim().length > 0;
+}
+
+function resolveGeminiBillingType(env: Record<string, string>): "api" | "subscription" {
+  return hasNonEmptyEnvValue(env, "GEMINI_API_KEY") || hasNonEmptyEnvValue(env, "GOOGLE_API_KEY")
+    ? "api"
+    : "subscription";
+}
+
+function renderEnvNote(env: Record<string, string>): string {
+  const agentCompanyKeys = Object.keys(env)
+    .filter((key) => key.startsWith("AGENT_COMPANY_"))
+    .sort();
+  if (agentCompanyKeys.length === 0) return "";
+  return [
+    "Runtime note:",
+    `The following AGENT_COMPANY_* environment variables are available in this run: ${agentCompanyKeys.join(", ")}`,
+    "Do not assume these variables are missing without checking your shell environment.",
+    "",
+    "",
+  ].join("\n");
+}
+
+function renderApiAccessNote(env: Record<string, string>): string {
+  if (!hasNonEmptyEnvValue(env, "AGENT_COMPANY_API_URL") || !hasNonEmptyEnvValue(env, "AGENT_COMPANY_API_KEY")) return "";
+  return [
+    "API access note:",
+    "Use run_shell_command with curl to make API requests.",
+    "GET example:",
+    `  run_shell_command({ command: "curl -s -H \\"Authorization: Bearer $AGENT_COMPANY_API_KEY\\" \\"$AGENT_COMPANY_API_URL/api/agents/me\\"" })`,
+    "POST/PATCH example:",
+    `  run_shell_command({ command: "curl -s -X POST -H \\"Authorization: Bearer $AGENT_COMPANY_API_KEY\\" -H 'Content-Type: application/json' -H \\"X-Agent-Company-Run-Id: $AGENT_COMPANY_RUN_ID\\" -d '{...}' \\"$AGENT_COMPANY_API_URL/api/issues/{id}/checkout\\"" })`,
+    "",
+    "",
+  ].join("\n");
+}
+
+async function resolveAgentCompanySkillsDir(): Promise<string | null> {
+  for (const candidate of SKILLS_CANDIDATES) {
+    const isDir = await fs.stat(candidate).then((s) => s.isDirectory()).catch(() => false);
+    if (isDir) return candidate;
+  }
+  return null;
+}
+
+function geminiSkillsHome(): string {
+  return path.join(os.homedir(), ".gemini", "skills");
+}
+
+/**
+ * Inject AgentCompany skills directly into `~/.gemini/skills/` via symlinks.
+ * This avoids needing GEMINI_CLI_HOME overrides, so the CLI naturally finds
+ * both its auth credentials and the injected skills in the real home directory.
+ */
+async function ensureGeminiSkillsInjected(
+  onLog: AdapterExecutionContext["onLog"],
+): Promise<void> {
+  const skillsDir = await resolveAgentCompanySkillsDir();
+  if (!skillsDir) return;
+
+  const skillsHome = geminiSkillsHome();
+  try {
+    await fs.mkdir(skillsHome, { recursive: true });
+  } catch (err) {
+    await onLog(
+      "stderr",
+      `[agent-company] Failed to prepare Gemini skills directory ${skillsHome}: ${err instanceof Error ? err.message : String(err)}\n`,
+    );
+    return;
+  }
+
+  let entries: Dirent[];
+  try {
+    entries = await fs.readdir(skillsDir, { withFileTypes: true });
+  } catch (err) {
+    await onLog(
+      "stderr",
+      `[agent-company] Failed to read AgentCompany skills from ${skillsDir}: ${err instanceof Error ? err.message : String(err)}\n`,
+    );
+    return;
+  }
+
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const source = path.join(skillsDir, entry.name);
+    const target = path.join(skillsHome, entry.name);
+    const existing = await fs.lstat(target).catch(() => null);
+    if (existing) continue;
+
+    try {
+      await fs.symlink(source, target);
+      await onLog("stderr", `[agent-company] Linked Gemini skill: ${entry.name}\n`);
+    } catch (err) {
+      await onLog(
+        "stderr",
+        `[agent-company] Failed to link Gemini skill "${entry.name}": ${err instanceof Error ? err.message : String(err)}\n`,
+      );
+    }
+  }
+}
+
+export async function execute(ctx: AdapterExecutionContext): Promise<AdapterExecutionResult> {
+  const { runId, agent, runtime, config, context, onLog, onMeta, authToken } = ctx;
+
+  const promptTemplate = asString(
+    config.promptTemplate,
+    "{{context.taskTitle}}\n\n{{context.taskDescription}}",
+  );
+  const command = asString(config.command, "gemini");
+  const model = asString(config.model, DEFAULT_GEMINI_LOCAL_MODEL).trim();
+  const sandbox = asBoolean(config.sandbox, false);
+
+  const workspaceContext = parseObject(context.agentCompanyWorkspace);
+  const workspaceCwd = asString(workspaceContext.cwd, "");
+  const workspaceSource = asString(workspaceContext.source, "");
+  const workspaceId = asString(workspaceContext.workspaceId, "");
+  const workspaceRepoUrl = asString(workspaceContext.repoUrl, "");
+  const workspaceRepoRef = asString(workspaceContext.repoRef, "");
+  const workspaceHints = Array.isArray(context.agentCompanyWorkspaces)
+    ? context.agentCompanyWorkspaces.filter(
+      (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+    )
+    : [];
+  const configuredCwd = asString(config.cwd, "");
+  const useConfiguredInsteadOfAgentHome = workspaceSource === "agent_home" && configuredCwd.length > 0;
+  const effectiveWorkspaceCwd = useConfiguredInsteadOfAgentHome ? "" : workspaceCwd;
+  const cwd = effectiveWorkspaceCwd || configuredCwd || process.cwd();
+  await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+  await ensureGeminiSkillsInjected(onLog);
+
+  const envConfig = parseObject(config.env);
+  const hasExplicitApiKey =
+    typeof envConfig.AGENT_COMPANY_API_KEY === "string" && envConfig.AGENT_COMPANY_API_KEY.trim().length > 0;
+  const env: Record<string, string> = { ...buildAgentCompanyEnv(agent) };
+  env.AGENT_COMPANY_RUN_ID = runId;
+  const wakeTaskId =
+    (typeof context.taskId === "string" && context.taskId.trim().length > 0 && context.taskId.trim()) ||
+    (typeof context.issueId === "string" && context.issueId.trim().length > 0 && context.issueId.trim()) ||
+    null;
+  const wakeReason =
+    typeof context.wakeReason === "string" && context.wakeReason.trim().length > 0
+      ? context.wakeReason.trim()
+      : null;
+  const wakeCommentId =
+    (typeof context.wakeCommentId === "string" && context.wakeCommentId.trim().length > 0 && context.wakeCommentId.trim()) ||
+    (typeof context.commentId === "string" && context.commentId.trim().length > 0 && context.commentId.trim()) ||
+    null;
+  const approvalId =
+    typeof context.approvalId === "string" && context.approvalId.trim().length > 0
+      ? context.approvalId.trim()
+      : null;
+  const approvalStatus =
+    typeof context.approvalStatus === "string" && context.approvalStatus.trim().length > 0
+      ? context.approvalStatus.trim()
+      : null;
+  const linkedIssueIds = Array.isArray(context.issueIds)
+    ? context.issueIds.filter((value): value is string => typeof value === "string" && value.trim().length > 0)
+    : [];
+  if (wakeTaskId) env.AGENT_COMPANY_TASK_ID = wakeTaskId;
+  if (wakeReason) env.AGENT_COMPANY_WAKE_REASON = wakeReason;
+  if (wakeCommentId) env.AGENT_COMPANY_WAKE_COMMENT_ID = wakeCommentId;
+  if (approvalId) env.AGENT_COMPANY_APPROVAL_ID = approvalId;
+  if (approvalStatus) env.AGENT_COMPANY_APPROVAL_STATUS = approvalStatus;
+  if (linkedIssueIds.length > 0) env.AGENT_COMPANY_LINKED_ISSUE_IDS = linkedIssueIds.join(",");
+  if (effectiveWorkspaceCwd) env.AGENT_COMPANY_WORKSPACE_CWD = effectiveWorkspaceCwd;
+  if (workspaceSource) env.AGENT_COMPANY_WORKSPACE_SOURCE = workspaceSource;
+  if (workspaceId) env.AGENT_COMPANY_WORKSPACE_ID = workspaceId;
+  if (workspaceRepoUrl) env.AGENT_COMPANY_WORKSPACE_REPO_URL = workspaceRepoUrl;
+  if (workspaceRepoRef) env.AGENT_COMPANY_WORKSPACE_REPO_REF = workspaceRepoRef;
+  if (workspaceHints.length > 0) env.AGENT_COMPANY_WORKSPACES_JSON = JSON.stringify(workspaceHints);
+
+  for (const [key, value] of Object.entries(envConfig)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  if (!hasExplicitApiKey && authToken) {
+    env.AGENT_COMPANY_API_KEY = authToken;
+  }
+  const billingType = resolveGeminiBillingType(env);
+  const runtimeEnv = ensurePathInEnv({ ...process.env, ...env });
+  await ensureCommandResolvable(command, cwd, runtimeEnv);
+
+  const timeoutSec = asNumber(config.timeoutSec, 0);
+  const graceSec = asNumber(config.graceSec, 20);
+  const extraArgs = (() => {
+    const fromExtraArgs = asStringArray(config.extraArgs);
+    if (fromExtraArgs.length > 0) return fromExtraArgs;
+    return asStringArray(config.args);
+  })();
+
+  const runtimeSessionParams = parseObject(runtime.sessionParams);
+  const runtimeSessionId = asString(runtimeSessionParams.sessionId, runtime.sessionId ?? "");
+  const runtimeSessionCwd = asString(runtimeSessionParams.cwd, "");
+  const canResumeSession =
+    runtimeSessionId.length > 0 &&
+    (runtimeSessionCwd.length === 0 || path.resolve(runtimeSessionCwd) === path.resolve(cwd));
+  const sessionId = canResumeSession ? runtimeSessionId : null;
+  if (runtimeSessionId && !canResumeSession) {
+    await onLog(
+      "stderr",
+      `[agent-company] Gemini session "${runtimeSessionId}" was saved for cwd "${runtimeSessionCwd}" and will not be resumed in "${cwd}".\n`,
+    );
+  }
+
+  const instructionsFilePath = asString(config.instructionsFilePath, "").trim();
+  const instructionsDir = instructionsFilePath ? `${path.dirname(instructionsFilePath)}/` : "";
+  let instructionsPrefix = "";
+  if (instructionsFilePath) {
+    try {
+      const instructionsContents = await fs.readFile(instructionsFilePath, "utf8");
+      instructionsPrefix =
+        `${instructionsContents}\n\n` +
+        `The above agent instructions were loaded from ${instructionsFilePath}. ` +
+        `Resolve any relative file references from ${instructionsDir}.\n\n`;
+      await onLog(
+        "stderr",
+        `[agent-company] Loaded agent instructions file: ${instructionsFilePath}\n`,
+      );
+    } catch (err) {
+      const reason = err instanceof Error ? err.message : String(err);
+      await onLog(
+        "stderr",
+        `[agent-company] Warning: could not read agent instructions file "${instructionsFilePath}": ${reason}\n`,
+      );
+    }
+  }
+  const commandNotes = (() => {
+    const notes: string[] = ["Prompt is passed to Gemini as the final positional argument."];
+    notes.push("Added --approval-mode yolo for unattended execution.");
+    if (!instructionsFilePath) return notes;
+    if (instructionsPrefix.length > 0) {
+      notes.push(
+        `Loaded agent instructions from ${instructionsFilePath}`,
+        `Prepended instructions + path directive to prompt (relative references from ${instructionsDir}).`,
+      );
+      return notes;
+    }
+    notes.push(
+      `Configured instructionsFilePath ${instructionsFilePath}, but file could not be read; continuing without injected instructions.`,
+    );
+    return notes;
+  })();
+
+  const renderedPrompt = renderTemplate(promptTemplate, {
+    agentId: agent.id,
+    companyId: agent.companyId,
+    runId,
+    company: { id: agent.companyId },
+    agent,
+    run: { id: runId, source: "on_demand" },
+    context,
+  });
+  const envNote = renderEnvNote(env);
+  const apiAccessNote = renderApiAccessNote(env);
+  const prompt = `${instructionsPrefix}${envNote}${apiAccessNote}${renderedPrompt}`;
+
+  const buildArgs = (resumeSessionId: string | null) => {
+    const args = ["--output-format", "stream-json"];
+    if (resumeSessionId) args.push("--resume", resumeSessionId);
+    if (model && model !== DEFAULT_GEMINI_LOCAL_MODEL) args.push("--model", model);
+    args.push("--approval-mode", "yolo");
+    if (sandbox) {
+      args.push("--sandbox");
+    } else {
+      args.push("--sandbox=none");
+    }
+    if (extraArgs.length > 0) args.push(...extraArgs);
+    args.push(prompt);
+    return args;
+  };
+
+  const runAttempt = async (resumeSessionId: string | null) => {
+    const args = buildArgs(resumeSessionId);
+    if (onMeta) {
+      await onMeta({
+        adapterType: "gemini_local",
+        command,
+        cwd,
+        commandNotes,
+        commandArgs: args.map((value, index) => (
+          index === args.length - 1 ? `<prompt ${prompt.length} chars>` : value
+        )),
+        env: redactEnvForLogs(env),
+        prompt,
+        context,
+      });
+    }
+
+    const proc = await runChildProcess(runId, command, args, {
+      cwd,
+      env,
+      timeoutSec,
+      graceSec,
+      onLog,
+    });
+    return {
+      proc,
+      parsed: parseGeminiJsonl(proc.stdout),
+    };
+  };
+
+  const toResult = (
+    attempt: {
+      proc: {
+        exitCode: number | null;
+        signal: string | null;
+        timedOut: boolean;
+        stdout: string;
+        stderr: string;
+      };
+      parsed: ReturnType<typeof parseGeminiJsonl>;
+    },
+    clearSessionOnMissingSession = false,
+    isRetry = false,
+  ): AdapterExecutionResult => {
+    const authMeta = detectGeminiAuthRequired({
+      parsed: attempt.parsed.resultEvent,
+      stdout: attempt.proc.stdout,
+      stderr: attempt.proc.stderr,
+    });
+
+    if (attempt.proc.timedOut) {
+      return {
+        exitCode: attempt.proc.exitCode,
+        signal: attempt.proc.signal,
+        timedOut: true,
+        errorMessage: `Timed out after ${timeoutSec}s`,
+        errorCode: authMeta.requiresAuth ? "gemini_auth_required" : null,
+        clearSession: clearSessionOnMissingSession,
+      };
+    }
+
+    const clearSessionForTurnLimit = isGeminiTurnLimitResult(attempt.parsed.resultEvent, attempt.proc.exitCode);
+
+    // On retry, don't fall back to old session ID — the old session was stale
+    const canFallbackToRuntimeSession = !isRetry;
+    const resolvedSessionId = attempt.parsed.sessionId
+      ?? (canFallbackToRuntimeSession ? (runtimeSessionId ?? runtime.sessionId ?? null) : null);
+    const resolvedSessionParams = resolvedSessionId
+      ? ({
+        sessionId: resolvedSessionId,
+        cwd,
+        ...(workspaceId ? { workspaceId } : {}),
+        ...(workspaceRepoUrl ? { repoUrl: workspaceRepoUrl } : {}),
+        ...(workspaceRepoRef ? { repoRef: workspaceRepoRef } : {}),
+      } as Record<string, unknown>)
+      : null;
+    const parsedError = typeof attempt.parsed.errorMessage === "string" ? attempt.parsed.errorMessage.trim() : "";
+    const stderrLine = firstNonEmptyLine(attempt.proc.stderr);
+    const structuredFailure = attempt.parsed.resultEvent
+      ? describeGeminiFailure(attempt.parsed.resultEvent)
+      : null;
+    const fallbackErrorMessage =
+      parsedError ||
+      structuredFailure ||
+      stderrLine ||
+      `Gemini exited with code ${attempt.proc.exitCode ?? -1}`;
+
+    return {
+      exitCode: attempt.proc.exitCode,
+      signal: attempt.proc.signal,
+      timedOut: false,
+      errorMessage: (attempt.proc.exitCode ?? 0) === 0 ? null : fallbackErrorMessage,
+      errorCode: (attempt.proc.exitCode ?? 0) !== 0 && authMeta.requiresAuth ? "gemini_auth_required" : null,
+      usage: attempt.parsed.usage,
+      sessionId: resolvedSessionId,
+      sessionParams: resolvedSessionParams,
+      sessionDisplayId: resolvedSessionId,
+      provider: "google",
+      model,
+      billingType,
+      costUsd: attempt.parsed.costUsd,
+      resultJson: attempt.parsed.resultEvent ?? {
+        stdout: attempt.proc.stdout,
+        stderr: attempt.proc.stderr,
+      },
+      summary: attempt.parsed.summary,
+      question: attempt.parsed.question,
+      clearSession: clearSessionForTurnLimit || Boolean(clearSessionOnMissingSession && !resolvedSessionId),
+    };
+  };
+
+  const initial = await runAttempt(sessionId);
+  if (
+    sessionId &&
+    !initial.proc.timedOut &&
+    (initial.proc.exitCode ?? 0) !== 0 &&
+    isGeminiUnknownSessionError(initial.proc.stdout, initial.proc.stderr)
+  ) {
+    await onLog(
+      "stderr",
+      `[agent-company] Gemini resume session "${sessionId}" is unavailable; retrying with a fresh session.\n`,
+    );
+    const retry = await runAttempt(null);
+    return toResult(retry, true, true);
+  }
+
+  return toResult(initial);
+}
diff --git a/packages/adapter-gemini-local/src/server/index.ts b/packages/adapter-gemini-local/src/server/index.ts
new file mode 100644
index 00000000..471aaf80
--- /dev/null
+++ b/packages/adapter-gemini-local/src/server/index.ts
@@ -0,0 +1,70 @@
+export { execute } from "./execute.js";
+export { testEnvironment } from "./test.js";
+export {
+  parseGeminiJsonl,
+  isGeminiUnknownSessionError,
+  describeGeminiFailure,
+  detectGeminiAuthRequired,
+  isGeminiTurnLimitResult,
+} from "./parse.js";
+import type { AdapterSessionCodec } from "@agentcompany/adapter-utils";
+
+function readNonEmptyString(value: unknown): string | null {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+
+export const sessionCodec: AdapterSessionCodec = {
+  deserialize(raw: unknown) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+    const record = raw as Record<string, unknown>;
+    const sessionId =
+      readNonEmptyString(record.sessionId) ??
+      readNonEmptyString(record.session_id) ??
+      readNonEmptyString(record.sessionID);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(record.cwd) ??
+      readNonEmptyString(record.workdir) ??
+      readNonEmptyString(record.folder);
+    const workspaceId = readNonEmptyString(record.workspaceId) ?? readNonEmptyString(record.workspace_id);
+    const repoUrl = readNonEmptyString(record.repoUrl) ?? readNonEmptyString(record.repo_url);
+    const repoRef = readNonEmptyString(record.repoRef) ?? readNonEmptyString(record.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  serialize(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    const sessionId =
+      readNonEmptyString(params.sessionId) ??
+      readNonEmptyString(params.session_id) ??
+      readNonEmptyString(params.sessionID);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(params.cwd) ??
+      readNonEmptyString(params.workdir) ??
+      readNonEmptyString(params.folder);
+    const workspaceId = readNonEmptyString(params.workspaceId) ?? readNonEmptyString(params.workspace_id);
+    const repoUrl = readNonEmptyString(params.repoUrl) ?? readNonEmptyString(params.repo_url);
+    const repoRef = readNonEmptyString(params.repoRef) ?? readNonEmptyString(params.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  getDisplayId(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    return (
+      readNonEmptyString(params.sessionId) ??
+      readNonEmptyString(params.session_id) ??
+      readNonEmptyString(params.sessionID)
+    );
+  },
+};
diff --git a/packages/adapter-gemini-local/src/server/parse.ts b/packages/adapter-gemini-local/src/server/parse.ts
new file mode 100644
index 00000000..8321d1d3
--- /dev/null
+++ b/packages/adapter-gemini-local/src/server/parse.ts
@@ -0,0 +1,263 @@
+import { asNumber, asString, parseJson, parseObject } from "@agentcompany/adapter-utils/server-utils";
+
+function collectMessageText(message: unknown): string[] {
+  if (typeof message === "string") {
+    const trimmed = message.trim();
+    return trimmed ? [trimmed] : [];
+  }
+
+  const record = parseObject(message);
+  const direct = asString(record.text, "").trim();
+  const lines: string[] = direct ? [direct] : [];
+  const content = Array.isArray(record.content) ? record.content : [];
+
+  for (const partRaw of content) {
+    const part = parseObject(partRaw);
+    const type = asString(part.type, "").trim();
+    if (type === "output_text" || type === "text" || type === "content") {
+      const text = asString(part.text, "").trim() || asString(part.content, "").trim();
+      if (text) lines.push(text);
+    }
+  }
+
+  return lines;
+}
+
+function readSessionId(event: Record<string, unknown>): string | null {
+  return (
+    asString(event.session_id, "").trim() ||
+    asString(event.sessionId, "").trim() ||
+    asString(event.sessionID, "").trim() ||
+    asString(event.checkpoint_id, "").trim() ||
+    asString(event.thread_id, "").trim() ||
+    null
+  );
+}
+
+function asErrorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = parseObject(value);
+  const message =
+    asString(rec.message, "") ||
+    asString(rec.error, "") ||
+    asString(rec.code, "") ||
+    asString(rec.detail, "");
+  if (message) return message;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+function accumulateUsage(
+  target: { inputTokens: number; cachedInputTokens: number; outputTokens: number },
+  usageRaw: unknown,
+) {
+  const usage = parseObject(usageRaw);
+  const usageMetadata = parseObject(usage.usageMetadata);
+  const source = Object.keys(usageMetadata).length > 0 ? usageMetadata : usage;
+
+  target.inputTokens += asNumber(
+    source.input_tokens,
+    asNumber(source.inputTokens, asNumber(source.promptTokenCount, 0)),
+  );
+  target.cachedInputTokens += asNumber(
+    source.cached_input_tokens,
+    asNumber(source.cachedInputTokens, asNumber(source.cachedContentTokenCount, 0)),
+  );
+  target.outputTokens += asNumber(
+    source.output_tokens,
+    asNumber(source.outputTokens, asNumber(source.candidatesTokenCount, 0)),
+  );
+}
+
+export function parseGeminiJsonl(stdout: string) {
+  let sessionId: string | null = null;
+  const messages: string[] = [];
+  let errorMessage: string | null = null;
+  let costUsd: number | null = null;
+  let resultEvent: Record<string, unknown> | null = null;
+  let question: { prompt: string; choices: Array<{ key: string; label: string; description?: string }> } | null = null;
+  const usage = {
+    inputTokens: 0,
+    cachedInputTokens: 0,
+    outputTokens: 0,
+  };
+
+  for (const rawLine of stdout.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line) continue;
+
+    const event = parseJson(line);
+    if (!event) continue;
+
+    const foundSessionId = readSessionId(event);
+    if (foundSessionId) sessionId = foundSessionId;
+
+    const type = asString(event.type, "").trim();
+
+    if (type === "assistant") {
+      messages.push(...collectMessageText(event.message));
+      const messageObj = parseObject(event.message);
+      const content = Array.isArray(messageObj.content) ? messageObj.content : [];
+      for (const partRaw of content) {
+        const part = parseObject(partRaw);
+        if (asString(part.type, "").trim() === "question") {
+          question = {
+            prompt: asString(part.prompt, "").trim(),
+            choices: (Array.isArray(part.choices) ? part.choices : []).map((choiceRaw) => {
+              const choice = parseObject(choiceRaw);
+              return {
+                key: asString(choice.key, "").trim(),
+                label: asString(choice.label, "").trim(),
+                description: asString(choice.description, "").trim() || undefined,
+              };
+            }),
+          };
+          break; // only one question per message
+        }
+      }
+      continue;
+    }
+
+    if (type === "result") {
+      resultEvent = event;
+      accumulateUsage(usage, event.usage ?? event.usageMetadata);
+      const resultText =
+        asString(event.result, "").trim() ||
+        asString(event.text, "").trim() ||
+        asString(event.response, "").trim();
+      if (resultText && messages.length === 0) messages.push(resultText);
+      costUsd = asNumber(event.total_cost_usd, asNumber(event.cost_usd, asNumber(event.cost, costUsd ?? 0))) || costUsd;
+      const isError = event.is_error === true || asString(event.subtype, "").toLowerCase() === "error";
+      if (isError) {
+        const text = asErrorText(event.error ?? event.message ?? event.result).trim();
+        if (text) errorMessage = text;
+      }
+      continue;
+    }
+
+    if (type === "error") {
+      const text = asErrorText(event.error ?? event.message ?? event.detail).trim();
+      if (text) errorMessage = text;
+      continue;
+    }
+
+    if (type === "system") {
+      const subtype = asString(event.subtype, "").trim().toLowerCase();
+      if (subtype === "error") {
+        const text = asErrorText(event.error ?? event.message ?? event.detail).trim();
+        if (text) errorMessage = text;
+      }
+      continue;
+    }
+
+    if (type === "text") {
+      const part = parseObject(event.part);
+      const text = asString(part.text, "").trim();
+      if (text) messages.push(text);
+      continue;
+    }
+
+    if (type === "step_finish" || event.usage || event.usageMetadata) {
+      accumulateUsage(usage, event.usage ?? event.usageMetadata);
+      costUsd = asNumber(event.total_cost_usd, asNumber(event.cost_usd, asNumber(event.cost, costUsd ?? 0))) || costUsd;
+      continue;
+    }
+  }
+
+  return {
+    sessionId,
+    summary: messages.join("\n\n").trim(),
+    usage,
+    costUsd,
+    errorMessage,
+    resultEvent,
+    question,
+  };
+}
+
+export function isGeminiUnknownSessionError(stdout: string, stderr: string): boolean {
+  const haystack = `${stdout}\n${stderr}`
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter(Boolean)
+    .join("\n");
+
+  return /unknown\s+session|session\s+.*\s+not\s+found|resume\s+.*\s+not\s+found|checkpoint\s+.*\s+not\s+found|cannot\s+resume|failed\s+to\s+resume/i.test(
+    haystack,
+  );
+}
+
+function extractGeminiErrorMessages(parsed: Record<string, unknown>): string[] {
+  const messages: string[] = [];
+  const errorMsg = asString(parsed.error, "").trim();
+  if (errorMsg) messages.push(errorMsg);
+
+  const raw = Array.isArray(parsed.errors) ? parsed.errors : [];
+  for (const entry of raw) {
+    if (typeof entry === "string") {
+      const msg = entry.trim();
+      if (msg) messages.push(msg);
+      continue;
+    }
+    if (typeof entry !== "object" || entry === null || Array.isArray(entry)) continue;
+    const obj = entry as Record<string, unknown>;
+    const msg = asString(obj.message, "") || asString(obj.error, "") || asString(obj.code, "");
+    if (msg) {
+      messages.push(msg);
+      continue;
+    }
+    try {
+      messages.push(JSON.stringify(obj));
+    } catch {
+      // skip non-serializable entry
+    }
+  }
+
+  return messages;
+}
+
+export function describeGeminiFailure(parsed: Record<string, unknown>): string | null {
+  const status = asString(parsed.status, "");
+  const errors = extractGeminiErrorMessages(parsed);
+
+  const detail = errors[0] ?? "";
+  const parts = ["Gemini run failed"];
+  if (status) parts.push(`status=${status}`);
+  if (detail) parts.push(detail);
+  return parts.length > 1 ? parts.join(": ") : null;
+}
+
+const GEMINI_AUTH_REQUIRED_RE = /(?:not\s+authenticated|please\s+authenticate|api[_ ]?key\s+(?:required|missing|invalid)|authentication\s+required|unauthorized|invalid\s+credentials|not\s+logged\s+in|login\s+required|run\s+`?gemini\s+auth(?:\s+login)?`?\s+first)/i;
+
+export function detectGeminiAuthRequired(input: {
+  parsed: Record<string, unknown> | null;
+  stdout: string;
+  stderr: string;
+}): { requiresAuth: boolean } {
+  const errors = extractGeminiErrorMessages(input.parsed ?? {});
+  const messages = [...errors, input.stdout, input.stderr]
+    .join("\n")
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter(Boolean);
+
+  const requiresAuth = messages.some((line) => GEMINI_AUTH_REQUIRED_RE.test(line));
+  return { requiresAuth };
+}
+
+export function isGeminiTurnLimitResult(
+  parsed: Record<string, unknown> | null | undefined,
+  exitCode?: number | null,
+): boolean {
+  if (exitCode === 53) return true;
+  if (!parsed) return false;
+
+  const status = asString(parsed.status, "").trim().toLowerCase();
+  if (status === "turn_limit" || status === "max_turns") return true;
+
+  const error = asString(parsed.error, "").trim();
+  return /turn\s*limit|max(?:imum)?\s+turns?/i.test(error);
+}
diff --git a/packages/adapter-gemini-local/src/server/test.ts b/packages/adapter-gemini-local/src/server/test.ts
new file mode 100644
index 00000000..cfe6a146
--- /dev/null
+++ b/packages/adapter-gemini-local/src/server/test.ts
@@ -0,0 +1,223 @@
+import path from "node:path";
+import type {
+  AdapterEnvironmentCheck,
+  AdapterEnvironmentTestContext,
+  AdapterEnvironmentTestResult,
+} from "@agentcompany/adapter-utils";
+import {
+  asBoolean,
+  asString,
+  asStringArray,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  parseObject,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import { DEFAULT_GEMINI_LOCAL_MODEL } from "../index.js";
+import { detectGeminiAuthRequired, parseGeminiJsonl } from "./parse.js";
+import { firstNonEmptyLine } from "./utils.js";
+
+function summarizeStatus(checks: AdapterEnvironmentCheck[]): AdapterEnvironmentTestResult["status"] {
+  if (checks.some((check) => check.level === "error")) return "fail";
+  if (checks.some((check) => check.level === "warn")) return "warn";
+  return "pass";
+}
+
+function isNonEmpty(value: unknown): value is string {
+  return typeof value === "string" && value.trim().length > 0;
+}
+
+function commandLooksLike(command: string, expected: string): boolean {
+  const base = path.basename(command).toLowerCase();
+  return base === expected || base === `${expected}.cmd` || base === `${expected}.exe`;
+}
+
+function summarizeProbeDetail(stdout: string, stderr: string, parsedError: string | null): string | null {
+  const raw = parsedError?.trim() || firstNonEmptyLine(stderr) || firstNonEmptyLine(stdout);
+  if (!raw) return null;
+  const clean = raw.replace(/\s+/g, " ").trim();
+  const max = 240;
+  return clean.length > max ? `${clean.slice(0, max - 1)}…` : clean;
+}
+
+export async function testEnvironment(
+  ctx: AdapterEnvironmentTestContext,
+): Promise<AdapterEnvironmentTestResult> {
+  const checks: AdapterEnvironmentCheck[] = [];
+  const config = parseObject(ctx.config);
+  const command = asString(config.command, "gemini");
+  const cwd = asString(config.cwd, process.cwd());
+
+  try {
+    await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+    checks.push({
+      code: "gemini_cwd_valid",
+      level: "info",
+      message: `Working directory is valid: ${cwd}`,
+    });
+  } catch (err) {
+    checks.push({
+      code: "gemini_cwd_invalid",
+      level: "error",
+      message: err instanceof Error ? err.message : "Invalid working directory",
+      detail: cwd,
+    });
+  }
+
+  const envConfig = parseObject(config.env);
+  const env: Record<string, string> = {};
+  for (const [key, value] of Object.entries(envConfig)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  const runtimeEnv = ensurePathInEnv({ ...process.env, ...env });
+  try {
+    await ensureCommandResolvable(command, cwd, runtimeEnv);
+    checks.push({
+      code: "gemini_command_resolvable",
+      level: "info",
+      message: `Command is executable: ${command}`,
+    });
+  } catch (err) {
+    checks.push({
+      code: "gemini_command_unresolvable",
+      level: "error",
+      message: err instanceof Error ? err.message : "Command is not executable",
+      detail: command,
+    });
+  }
+
+  const configGeminiApiKey = env.GEMINI_API_KEY;
+  const hostGeminiApiKey = process.env.GEMINI_API_KEY;
+  const configGoogleApiKey = env.GOOGLE_API_KEY;
+  const hostGoogleApiKey = process.env.GOOGLE_API_KEY;
+  const hasGca = env.GOOGLE_GENAI_USE_GCA === "true" || process.env.GOOGLE_GENAI_USE_GCA === "true";
+  if (
+    isNonEmpty(configGeminiApiKey) ||
+    isNonEmpty(hostGeminiApiKey) ||
+    isNonEmpty(configGoogleApiKey) ||
+    isNonEmpty(hostGoogleApiKey) ||
+    hasGca
+  ) {
+    const source = hasGca
+      ? "Google account login (GCA)"
+      : isNonEmpty(configGeminiApiKey) || isNonEmpty(configGoogleApiKey)
+        ? "adapter config env"
+        : "server environment";
+    checks.push({
+      code: "gemini_api_key_present",
+      level: "info",
+      message: "Gemini API credentials are set for CLI authentication.",
+      detail: `Detected in ${source}.`,
+    });
+  } else {
+    checks.push({
+      code: "gemini_api_key_missing",
+      level: "info",
+      message: "No explicit API key detected. Gemini CLI may still authenticate via `gemini auth login` (OAuth).",
+      hint: "If the hello probe fails with an auth error, set GEMINI_API_KEY or GOOGLE_API_KEY in adapter env, or run `gemini auth login`.",
+    });
+  }
+
+  const canRunProbe =
+    checks.every((check) => check.code !== "gemini_cwd_invalid" && check.code !== "gemini_command_unresolvable");
+  if (canRunProbe) {
+    if (!commandLooksLike(command, "gemini")) {
+      checks.push({
+        code: "gemini_hello_probe_skipped_custom_command",
+        level: "info",
+        message: "Skipped hello probe because command is not `gemini`.",
+        detail: command,
+        hint: "Use the `gemini` CLI command to run the automatic installation and auth probe.",
+      });
+    } else {
+      const model = asString(config.model, DEFAULT_GEMINI_LOCAL_MODEL).trim();
+      const approvalMode = asString(config.approvalMode, asBoolean(config.yolo, false) ? "yolo" : "default");
+      const sandbox = asBoolean(config.sandbox, false);
+      const extraArgs = (() => {
+        const fromExtraArgs = asStringArray(config.extraArgs);
+        if (fromExtraArgs.length > 0) return fromExtraArgs;
+        return asStringArray(config.args);
+      })();
+
+      const args = ["--output-format", "stream-json"];
+      if (model && model !== DEFAULT_GEMINI_LOCAL_MODEL) args.push("--model", model);
+      if (approvalMode !== "default") args.push("--approval-mode", approvalMode);
+      if (sandbox) {
+        args.push("--sandbox");
+      } else {
+        args.push("--sandbox=none");
+      }
+      if (extraArgs.length > 0) args.push(...extraArgs);
+      args.push("Respond with hello.");
+
+      const probe = await runChildProcess(
+        `gemini-envtest-${Date.now()}-${Math.random().toString(16).slice(2)}`,
+        command,
+        args,
+        {
+          cwd,
+          env,
+          timeoutSec: 45,
+          graceSec: 5,
+          onLog: async () => { },
+        },
+      );
+      const parsed = parseGeminiJsonl(probe.stdout);
+      const detail = summarizeProbeDetail(probe.stdout, probe.stderr, parsed.errorMessage);
+      const authMeta = detectGeminiAuthRequired({
+        parsed: parsed.resultEvent,
+        stdout: probe.stdout,
+        stderr: probe.stderr,
+      });
+
+      if (probe.timedOut) {
+        checks.push({
+          code: "gemini_hello_probe_timed_out",
+          level: "warn",
+          message: "Gemini hello probe timed out.",
+          hint: "Retry the probe. If this persists, verify Gemini can run `Respond with hello.` from this directory manually.",
+        });
+      } else if ((probe.exitCode ?? 1) === 0) {
+        const summary = parsed.summary.trim();
+        const hasHello = /\bhello\b/i.test(summary);
+        checks.push({
+          code: hasHello ? "gemini_hello_probe_passed" : "gemini_hello_probe_unexpected_output",
+          level: hasHello ? "info" : "warn",
+          message: hasHello
+            ? "Gemini hello probe succeeded."
+            : "Gemini probe ran but did not return `hello` as expected.",
+          ...(summary ? { detail: summary.replace(/\s+/g, " ").trim().slice(0, 240) } : {}),
+          ...(hasHello
+            ? {}
+            : {
+              hint: "Try `gemini --output-format json \"Respond with hello.\"` manually to inspect full output.",
+            }),
+        });
+      } else if (authMeta.requiresAuth) {
+        checks.push({
+          code: "gemini_hello_probe_auth_required",
+          level: "warn",
+          message: "Gemini CLI is installed, but authentication is not ready.",
+          ...(detail ? { detail } : {}),
+          hint: "Run `gemini auth` or configure GEMINI_API_KEY / GOOGLE_API_KEY in adapter env/shell, then retry the probe.",
+        });
+      } else {
+        checks.push({
+          code: "gemini_hello_probe_failed",
+          level: "error",
+          message: "Gemini hello probe failed.",
+          ...(detail ? { detail } : {}),
+          hint: "Run `gemini --output-format json \"Respond with hello.\"` manually in this working directory to debug.",
+        });
+      }
+    }
+  }
+
+  return {
+    adapterType: ctx.adapterType,
+    status: summarizeStatus(checks),
+    checks,
+    testedAt: new Date().toISOString(),
+  };
+}
diff --git a/packages/adapter-gemini-local/src/server/utils.ts b/packages/adapter-gemini-local/src/server/utils.ts
new file mode 100644
index 00000000..fb11c75d
--- /dev/null
+++ b/packages/adapter-gemini-local/src/server/utils.ts
@@ -0,0 +1,8 @@
+export function firstNonEmptyLine(text: string): string {
+    return (
+        text
+            .split(/\r?\n/)
+            .map((line) => line.trim())
+            .find(Boolean) ?? ""
+    );
+}
diff --git a/packages/adapter-gemini-local/src/ui/build-config.ts b/packages/adapter-gemini-local/src/ui/build-config.ts
new file mode 100644
index 00000000..ad8ef161
--- /dev/null
+++ b/packages/adapter-gemini-local/src/ui/build-config.ts
@@ -0,0 +1,75 @@
+import type { CreateConfigValues } from "@agentcompany/adapter-utils";
+import { DEFAULT_GEMINI_LOCAL_MODEL } from "../index.js";
+
+function parseCommaArgs(value: string): string[] {
+  return value
+    .split(",")
+    .map((item) => item.trim())
+    .filter(Boolean);
+}
+
+function parseEnvVars(text: string): Record<string, string> {
+  const env: Record<string, string> = {};
+  for (const line of text.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eq = trimmed.indexOf("=");
+    if (eq <= 0) continue;
+    const key = trimmed.slice(0, eq).trim();
+    const value = trimmed.slice(eq + 1);
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    env[key] = value;
+  }
+  return env;
+}
+
+function parseEnvBindings(bindings: unknown): Record<string, unknown> {
+  if (typeof bindings !== "object" || bindings === null || Array.isArray(bindings)) return {};
+  const env: Record<string, unknown> = {};
+  for (const [key, raw] of Object.entries(bindings)) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    if (typeof raw === "string") {
+      env[key] = { type: "plain", value: raw };
+      continue;
+    }
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
+    const rec = raw as Record<string, unknown>;
+    if (rec.type === "plain" && typeof rec.value === "string") {
+      env[key] = { type: "plain", value: rec.value };
+      continue;
+    }
+    if (rec.type === "secret_ref" && typeof rec.secretId === "string") {
+      env[key] = {
+        type: "secret_ref",
+        secretId: rec.secretId,
+        ...(typeof rec.version === "number" || rec.version === "latest"
+          ? { version: rec.version }
+          : {}),
+      };
+    }
+  }
+  return env;
+}
+
+export function buildGeminiLocalConfig(v: CreateConfigValues): Record<string, unknown> {
+  const ac: Record<string, unknown> = {};
+  if (v.cwd) ac.cwd = v.cwd;
+  if (v.instructionsFilePath) ac.instructionsFilePath = v.instructionsFilePath;
+  if (v.promptTemplate) ac.promptTemplate = v.promptTemplate;
+  ac.model = v.model || DEFAULT_GEMINI_LOCAL_MODEL;
+  ac.timeoutSec = 0;
+  ac.graceSec = 15;
+  const env = parseEnvBindings(v.envBindings);
+  const legacy = parseEnvVars(v.envVars);
+  for (const [key, value] of Object.entries(legacy)) {
+    if (!Object.prototype.hasOwnProperty.call(env, key)) {
+      env[key] = { type: "plain", value };
+    }
+  }
+  if (Object.keys(env).length > 0) ac.env = env;
+  ac.sandbox = !v.dangerouslyBypassSandbox;
+
+  if (v.command) ac.command = v.command;
+  if (v.extraArgs) ac.extraArgs = parseCommaArgs(v.extraArgs);
+  return ac;
+}
diff --git a/packages/adapter-gemini-local/src/ui/index.ts b/packages/adapter-gemini-local/src/ui/index.ts
new file mode 100644
index 00000000..5d7708b1
--- /dev/null
+++ b/packages/adapter-gemini-local/src/ui/index.ts
@@ -0,0 +1,2 @@
+export { parseGeminiStdoutLine } from "./parse-stdout.js";
+export { buildGeminiLocalConfig } from "./build-config.js";
diff --git a/packages/adapter-gemini-local/src/ui/parse-stdout.ts b/packages/adapter-gemini-local/src/ui/parse-stdout.ts
new file mode 100644
index 00000000..cc9d1c75
--- /dev/null
+++ b/packages/adapter-gemini-local/src/ui/parse-stdout.ts
@@ -0,0 +1,274 @@
+import type { TranscriptEntry } from "@agentcompany/adapter-utils";
+
+function safeJsonParse(text: string): unknown {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  return value as Record<string, unknown>;
+}
+
+function asString(value: unknown, fallback = ""): string {
+  return typeof value === "string" ? value : fallback;
+}
+
+function asNumber(value: unknown, fallback = 0): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+
+function stringifyUnknown(value: unknown): string {
+  if (typeof value === "string") return value;
+  if (value === null || value === undefined) return "";
+  try {
+    return JSON.stringify(value, null, 2);
+  } catch {
+    return String(value);
+  }
+}
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = asRecord(value);
+  if (!rec) return "";
+  const msg =
+    (typeof rec.message === "string" && rec.message) ||
+    (typeof rec.error === "string" && rec.error) ||
+    (typeof rec.code === "string" && rec.code) ||
+    "";
+  if (msg) return msg;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+function collectTextEntries(messageRaw: unknown, ts: string, kind: "assistant" | "user"): TranscriptEntry[] {
+  if (typeof messageRaw === "string") {
+    const text = messageRaw.trim();
+    return text ? [{ kind, ts, text }] : [];
+  }
+
+  const message = asRecord(messageRaw);
+  if (!message) return [];
+
+  const entries: TranscriptEntry[] = [];
+  const directText = asString(message.text).trim();
+  if (directText) entries.push({ kind, ts, text: directText });
+
+  const content = Array.isArray(message.content) ? message.content : [];
+  for (const partRaw of content) {
+    const part = asRecord(partRaw);
+    if (!part) continue;
+    const type = asString(part.type).trim();
+    if (type !== "output_text" && type !== "text" && type !== "content") continue;
+    const text = asString(part.text).trim() || asString(part.content).trim();
+    if (text) entries.push({ kind, ts, text });
+  }
+
+  return entries;
+}
+
+function parseAssistantMessage(messageRaw: unknown, ts: string): TranscriptEntry[] {
+  if (typeof messageRaw === "string") {
+    const text = messageRaw.trim();
+    return text ? [{ kind: "assistant", ts, text }] : [];
+  }
+
+  const message = asRecord(messageRaw);
+  if (!message) return [];
+
+  const entries: TranscriptEntry[] = [];
+  const directText = asString(message.text).trim();
+  if (directText) entries.push({ kind: "assistant", ts, text: directText });
+
+  const content = Array.isArray(message.content) ? message.content : [];
+  for (const partRaw of content) {
+    const part = asRecord(partRaw);
+    if (!part) continue;
+    const type = asString(part.type).trim();
+
+    if (type === "output_text" || type === "text" || type === "content") {
+      const text = asString(part.text).trim() || asString(part.content).trim();
+      if (text) entries.push({ kind: "assistant", ts, text });
+      continue;
+    }
+
+    if (type === "thinking") {
+      const text = asString(part.text).trim();
+      if (text) entries.push({ kind: "thinking", ts, text });
+      continue;
+    }
+
+    if (type === "tool_call") {
+      const name = asString(part.name, asString(part.tool, "tool"));
+      entries.push({
+        kind: "tool_call",
+        ts,
+        name,
+        input: part.input ?? part.arguments ?? part.args ?? {},
+      });
+      continue;
+    }
+
+    if (type === "tool_result" || type === "tool_response") {
+      const toolUseId =
+        asString(part.tool_use_id) ||
+        asString(part.toolUseId) ||
+        asString(part.call_id) ||
+        asString(part.id) ||
+        "tool_result";
+      const contentText =
+        asString(part.output) ||
+        asString(part.text) ||
+        asString(part.result) ||
+        stringifyUnknown(part.output ?? part.result ?? part.text ?? part.response);
+      const isError = part.is_error === true || asString(part.status).toLowerCase() === "error";
+      entries.push({
+        kind: "tool_result",
+        ts,
+        toolUseId,
+        content: contentText,
+        isError,
+      });
+    }
+  }
+
+  return entries;
+}
+
+function parseTopLevelToolEvent(parsed: Record<string, unknown>, ts: string): TranscriptEntry[] {
+  const subtype = asString(parsed.subtype).trim().toLowerCase();
+  const callId = asString(parsed.call_id, asString(parsed.callId, asString(parsed.id, "tool_call")));
+  const toolCall = asRecord(parsed.tool_call ?? parsed.toolCall);
+  if (!toolCall) {
+    return [{ kind: "system", ts, text: `tool_call${subtype ? ` (${subtype})` : ""}` }];
+  }
+
+  const [toolName] = Object.keys(toolCall);
+  if (!toolName) {
+    return [{ kind: "system", ts, text: `tool_call${subtype ? ` (${subtype})` : ""}` }];
+  }
+  const payload = asRecord(toolCall[toolName]) ?? {};
+
+  if (subtype === "started" || subtype === "start") {
+    return [{
+      kind: "tool_call",
+      ts,
+      name: toolName,
+      input: payload.args ?? payload.input ?? payload.arguments ?? payload,
+    }];
+  }
+
+  if (subtype === "completed" || subtype === "complete" || subtype === "finished") {
+    const result = payload.result ?? payload.output ?? payload.error;
+    const isError =
+      parsed.is_error === true ||
+      payload.is_error === true ||
+      payload.error !== undefined ||
+      asString(payload.status).toLowerCase() === "error";
+    return [{
+      kind: "tool_result",
+      ts,
+      toolUseId: callId,
+      content: result !== undefined ? stringifyUnknown(result) : `${toolName} completed`,
+      isError,
+    }];
+  }
+
+  return [{ kind: "system", ts, text: `tool_call${subtype ? ` (${subtype})` : ""}: ${toolName}` }];
+}
+
+function readSessionId(parsed: Record<string, unknown>): string {
+  return (
+    asString(parsed.session_id) ||
+    asString(parsed.sessionId) ||
+    asString(parsed.sessionID) ||
+    asString(parsed.checkpoint_id) ||
+    asString(parsed.thread_id)
+  );
+}
+
+function readUsage(parsed: Record<string, unknown>) {
+  const usage = asRecord(parsed.usage) ?? asRecord(parsed.usageMetadata);
+  const usageMetadata = asRecord(usage?.usageMetadata);
+  const source = usageMetadata ?? usage ?? {};
+  return {
+    inputTokens: asNumber(source.input_tokens, asNumber(source.inputTokens, asNumber(source.promptTokenCount))),
+    outputTokens: asNumber(source.output_tokens, asNumber(source.outputTokens, asNumber(source.candidatesTokenCount))),
+    cachedTokens: asNumber(
+      source.cached_input_tokens,
+      asNumber(source.cachedInputTokens, asNumber(source.cachedContentTokenCount)),
+    ),
+  };
+}
+
+export function parseGeminiStdoutLine(line: string, ts: string): TranscriptEntry[] {
+  const parsed = asRecord(safeJsonParse(line));
+  if (!parsed) {
+    return [{ kind: "stdout", ts, text: line }];
+  }
+
+  const type = asString(parsed.type);
+
+  if (type === "system") {
+    const subtype = asString(parsed.subtype);
+    if (subtype === "init") {
+      const sessionId = readSessionId(parsed);
+      return [{ kind: "init", ts, model: asString(parsed.model, "gemini"), sessionId }];
+    }
+    if (subtype === "error") {
+      const text = errorText(parsed.error ?? parsed.message ?? parsed.detail);
+      return [{ kind: "stderr", ts, text: text || "error" }];
+    }
+    return [{ kind: "system", ts, text: `system: ${subtype || "event"}` }];
+  }
+
+  if (type === "assistant") {
+    return parseAssistantMessage(parsed.message, ts);
+  }
+
+  if (type === "user") {
+    return collectTextEntries(parsed.message, ts, "user");
+  }
+
+  if (type === "thinking") {
+    const text = asString(parsed.text).trim() || asString(asRecord(parsed.delta)?.text).trim();
+    return text ? [{ kind: "thinking", ts, text }] : [];
+  }
+
+  if (type === "tool_call") {
+    return parseTopLevelToolEvent(parsed, ts);
+  }
+
+  if (type === "result") {
+    const usage = readUsage(parsed);
+    const errors = parsed.is_error === true
+      ? [errorText(parsed.error ?? parsed.message ?? parsed.result)].filter(Boolean)
+      : [];
+    return [{
+      kind: "result",
+      ts,
+      text: asString(parsed.result) || asString(parsed.text) || asString(parsed.response),
+      inputTokens: usage.inputTokens,
+      outputTokens: usage.outputTokens,
+      cachedTokens: usage.cachedTokens,
+      costUsd: asNumber(parsed.total_cost_usd, asNumber(parsed.cost_usd, asNumber(parsed.cost))),
+      subtype: asString(parsed.subtype, "result"),
+      isError: parsed.is_error === true,
+      errors,
+    }];
+  }
+
+  if (type === "error") {
+    const text = errorText(parsed.error ?? parsed.message ?? parsed.detail);
+    return [{ kind: "stderr", ts, text: text || "error" }];
+  }
+
+  return [{ kind: "stdout", ts, text: line }];
+}
diff --git a/packages/adapter-gemini-local/tsconfig.json b/packages/adapter-gemini-local/tsconfig.json
new file mode 100644
index 00000000..5a24989c
--- /dev/null
+++ b/packages/adapter-gemini-local/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}
diff --git a/packages/adapter-opencode-local/CHANGELOG.md b/packages/adapter-opencode-local/CHANGELOG.md
new file mode 100644
index 00000000..904b21de
--- /dev/null
+++ b/packages/adapter-opencode-local/CHANGELOG.md
@@ -0,0 +1,18 @@
+# @paperclipai/adapter-opencode-local
+
+## 0.3.0
+
+### Minor Changes
+
+- Stable release preparation for 0.3.0
+
+### Patch Changes
+
+- Updated dependencies
+  - @paperclipai/adapter-utils@0.3.0
+
+## 0.2.7
+
+### Patch Changes
+
+- Add local OpenCode adapter package with server/UI/CLI modules.
diff --git a/packages/adapter-opencode-local/package.json b/packages/adapter-opencode-local/package.json
new file mode 100644
index 00000000..c5099059
--- /dev/null
+++ b/packages/adapter-opencode-local/package.json
@@ -0,0 +1,51 @@
+{
+  "name": "@agentcompany/adapter-opencode-local",
+  "version": "0.3.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./server": "./src/server/index.ts",
+    "./ui": "./src/ui/index.ts",
+    "./cli": "./src/cli/index.ts"
+  },
+  "publishConfig": {
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.js"
+      },
+      "./server": {
+        "types": "./dist/server/index.d.ts",
+        "import": "./dist/server/index.js"
+      },
+      "./ui": {
+        "types": "./dist/ui/index.d.ts",
+        "import": "./dist/ui/index.js"
+      },
+      "./cli": {
+        "types": "./dist/cli/index.d.ts",
+        "import": "./dist/cli/index.js"
+      }
+    },
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts"
+  },
+  "files": [
+    "dist",
+    "skills"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@agentcompany/adapter-utils": "workspace:*",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.6.0",
+    "typescript": "^5.7.3"
+  }
+}
diff --git a/packages/adapter-opencode-local/src/cli/format-event.ts b/packages/adapter-opencode-local/src/cli/format-event.ts
new file mode 100644
index 00000000..58d2038d
--- /dev/null
+++ b/packages/adapter-opencode-local/src/cli/format-event.ts
@@ -0,0 +1,121 @@
+import pc from "picocolors";
+
+function safeJsonParse(text: string): unknown {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  return value as Record<string, unknown>;
+}
+
+function asString(value: unknown, fallback = ""): string {
+  return typeof value === "string" ? value : fallback;
+}
+
+function asNumber(value: unknown, fallback = 0): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = asRecord(value);
+  if (!rec) return "";
+  const data = asRecord(rec.data);
+  const message =
+    asString(rec.message) ||
+    asString(data?.message) ||
+    asString(rec.name) ||
+    "";
+  if (message) return message;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+export function printOpenCodeStreamEvent(raw: string, _debug: boolean): void {
+  const line = raw.trim();
+  if (!line) return;
+
+  const parsed = asRecord(safeJsonParse(line));
+  if (!parsed) {
+    console.log(line);
+    return;
+  }
+
+  const type = asString(parsed.type);
+
+  if (type === "step_start") {
+    const sessionId = asString(parsed.sessionID);
+    console.log(pc.blue(`step started${sessionId ? ` (session: ${sessionId})` : ""}`));
+    return;
+  }
+
+  if (type === "text") {
+    const part = asRecord(parsed.part);
+    const text = asString(part?.text).trim();
+    if (text) console.log(pc.green(`assistant: ${text}`));
+    return;
+  }
+
+  if (type === "reasoning") {
+    const part = asRecord(parsed.part);
+    const text = asString(part?.text).trim();
+    if (text) console.log(pc.gray(`thinking: ${text}`));
+    return;
+  }
+
+  if (type === "tool_use") {
+    const part = asRecord(parsed.part);
+    const tool = asString(part?.tool, "tool");
+    const callID = asString(part?.callID);
+    const state = asRecord(part?.state);
+    const status = asString(state?.status);
+    const isError = status === "error";
+    const metadata = asRecord(state?.metadata);
+
+    console.log(pc.yellow(`tool_call: ${tool}${callID ? ` (${callID})` : ""}`));
+
+    if (status) {
+      const metaParts = [`status=${status}`];
+      if (metadata) {
+        for (const [key, value] of Object.entries(metadata)) {
+          if (value !== undefined && value !== null) metaParts.push(`${key}=${value}`);
+        }
+      }
+      console.log((isError ? pc.red : pc.gray)(`tool_result ${metaParts.join(" ")}`));
+    }
+
+    const output = (asString(state?.output) || asString(state?.error)).trim();
+    if (output) console.log((isError ? pc.red : pc.gray)(output));
+    return;
+  }
+
+  if (type === "step_finish") {
+    const part = asRecord(parsed.part);
+    const tokens = asRecord(part?.tokens);
+    const cache = asRecord(tokens?.cache);
+    const input = asNumber(tokens?.input, 0);
+    const output = asNumber(tokens?.output, 0) + asNumber(tokens?.reasoning, 0);
+    const cached = asNumber(cache?.read, 0);
+    const cost = asNumber(part?.cost, 0);
+    const reason = asString(part?.reason, "step");
+    console.log(pc.blue(`step finished: reason=${reason}`));
+    console.log(pc.blue(`tokens: in=${input} out=${output} cached=${cached} cost=$${cost.toFixed(6)}`));
+    return;
+  }
+
+  if (type === "error") {
+    const message = errorText(parsed.error ?? parsed.message);
+    if (message) console.log(pc.red(`error: ${message}`));
+    return;
+  }
+
+  console.log(line);
+}
diff --git a/packages/adapter-opencode-local/src/cli/index.ts b/packages/adapter-opencode-local/src/cli/index.ts
new file mode 100644
index 00000000..93c29b69
--- /dev/null
+++ b/packages/adapter-opencode-local/src/cli/index.ts
@@ -0,0 +1 @@
+export { printOpenCodeStreamEvent } from "./format-event.js";
diff --git a/packages/adapter-opencode-local/src/index.ts b/packages/adapter-opencode-local/src/index.ts
new file mode 100644
index 00000000..1e235c4a
--- /dev/null
+++ b/packages/adapter-opencode-local/src/index.ts
@@ -0,0 +1,40 @@
+export const type = "opencode_local";
+export const label = "OpenCode (local)";
+
+export const models: Array<{ id: string; label: string }> = [];
+
+export const agentConfigurationDoc = `# opencode_local agent configuration
+
+Adapter: opencode_local
+
+Use when:
+- You want AgentCompany to run OpenCode locally as the agent runtime
+- You want provider/model routing in OpenCode format (provider/model)
+- You want OpenCode session resume across heartbeats via --session
+
+Don't use when:
+- You need webhook-style external invocation (use openclaw_gateway or http)
+- You only need one-shot shell commands (use process)
+- OpenCode CLI is not installed on the machine
+
+Core fields:
+- cwd (string, optional): default absolute working directory fallback for the agent process (created if missing when possible)
+- instructionsFilePath (string, optional): absolute path to a markdown instructions file prepended to the run prompt
+- model (string, required): OpenCode model id in provider/model format (for example anthropic/claude-sonnet-4-5)
+- variant (string, optional): provider-specific model variant (for example minimal|low|medium|high|max)
+- promptTemplate (string, optional): run prompt template
+- command (string, optional): defaults to "opencode"
+- extraArgs (string[], optional): additional CLI args
+- env (object, optional): KEY=VALUE environment variables
+
+Operational fields:
+- timeoutSec (number, optional): run timeout in seconds
+- graceSec (number, optional): SIGTERM grace period in seconds
+
+Notes:
+- OpenCode supports multiple providers and models. Use \
+  \`opencode models\` to list available options in provider/model format.
+- AgentCompany requires an explicit \`model\` value for \`opencode_local\` agents.
+- Runs are executed with: opencode run --format json ...
+- Sessions are resumed with --session when stored session cwd matches current cwd.
+`;
diff --git a/packages/adapter-opencode-local/src/server/execute.ts b/packages/adapter-opencode-local/src/server/execute.ts
new file mode 100644
index 00000000..6914b13b
--- /dev/null
+++ b/packages/adapter-opencode-local/src/server/execute.ts
@@ -0,0 +1,370 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import type { AdapterExecutionContext, AdapterExecutionResult } from "@agentcompany/adapter-utils";
+import {
+  asString,
+  asNumber,
+  asStringArray,
+  parseObject,
+  buildAgentCompanyEnv,
+  redactEnvForLogs,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  renderTemplate,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import { isOpenCodeUnknownSessionError, parseOpenCodeJsonl } from "./parse.js";
+import { ensureOpenCodeModelConfiguredAndAvailable } from "./models.js";
+
+const __moduleDir = path.dirname(fileURLToPath(import.meta.url));
+const SKILLS_CANDIDATES = [
+  path.resolve(__moduleDir, "../../skills"),
+  path.resolve(__moduleDir, "../../../../../skills"),
+];
+
+function firstNonEmptyLine(text: string): string {
+  return (
+    text
+      .split(/\r?\n/)
+      .map((line) => line.trim())
+      .find(Boolean) ?? ""
+  );
+}
+
+function parseModelProvider(model: string | null): string | null {
+  if (!model) return null;
+  const trimmed = model.trim();
+  if (!trimmed.includes("/")) return null;
+  return trimmed.slice(0, trimmed.indexOf("/")).trim() || null;
+}
+
+function claudeSkillsHome(): string {
+  return path.join(os.homedir(), ".claude", "skills");
+}
+
+async function resolveAgentCompanySkillsDir(): Promise<string | null> {
+  for (const candidate of SKILLS_CANDIDATES) {
+    const isDir = await fs.stat(candidate).then((s) => s.isDirectory()).catch(() => false);
+    if (isDir) return candidate;
+  }
+  return null;
+}
+
+async function ensureOpenCodeSkillsInjected(onLog: AdapterExecutionContext["onLog"]) {
+  const skillsDir = await resolveAgentCompanySkillsDir();
+  if (!skillsDir) return;
+
+  const skillsHome = claudeSkillsHome();
+  await fs.mkdir(skillsHome, { recursive: true });
+  const entries = await fs.readdir(skillsDir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const source = path.join(skillsDir, entry.name);
+    const target = path.join(skillsHome, entry.name);
+    const existing = await fs.lstat(target).catch(() => null);
+    if (existing) continue;
+
+    try {
+      await fs.symlink(source, target);
+      await onLog(
+        "stderr",
+        `[agent-company] Injected OpenCode skill "${entry.name}" into ${skillsHome}\n`,
+      );
+    } catch (err) {
+      await onLog(
+        "stderr",
+        `[agent-company] Failed to inject OpenCode skill "${entry.name}" into ${skillsHome}: ${err instanceof Error ? err.message : String(err)}\n`,
+      );
+    }
+  }
+}
+
+export async function execute(ctx: AdapterExecutionContext): Promise<AdapterExecutionResult> {
+  const { runId, agent, runtime, config, context, onLog, onMeta, authToken } = ctx;
+
+  const promptTemplate = asString(
+    config.promptTemplate,
+    "{{context.taskTitle}}\n\n{{context.taskDescription}}",
+  );
+  const command = asString(config.command, "opencode");
+  const model = asString(config.model, "").trim();
+  const variant = asString(config.variant, "").trim();
+
+  const workspaceContext = parseObject(context.agentCompanyWorkspace);
+  const workspaceCwd = asString(workspaceContext.cwd, "");
+  const workspaceSource = asString(workspaceContext.source, "");
+  const workspaceId = asString(workspaceContext.workspaceId, "");
+  const workspaceRepoUrl = asString(workspaceContext.repoUrl, "");
+  const workspaceRepoRef = asString(workspaceContext.repoRef, "");
+  const workspaceHints = Array.isArray(context.agentCompanyWorkspaces)
+    ? context.agentCompanyWorkspaces.filter(
+        (value): value is Record<string, unknown> => typeof value === "object" && value !== null,
+      )
+    : [];
+  const configuredCwd = asString(config.cwd, "");
+  const useConfiguredInsteadOfAgentHome = workspaceSource === "agent_home" && configuredCwd.length > 0;
+  const effectiveWorkspaceCwd = useConfiguredInsteadOfAgentHome ? "" : workspaceCwd;
+  const cwd = effectiveWorkspaceCwd || configuredCwd || process.cwd();
+  await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+  await ensureOpenCodeSkillsInjected(onLog);
+
+  const envConfig = parseObject(config.env);
+  const hasExplicitApiKey =
+    typeof envConfig.AGENT_COMPANY_API_KEY === "string" && envConfig.AGENT_COMPANY_API_KEY.trim().length > 0;
+  const env: Record<string, string> = { ...buildAgentCompanyEnv(agent) };
+  env.AGENT_COMPANY_RUN_ID = runId;
+  const wakeTaskId =
+    (typeof context.taskId === "string" && context.taskId.trim().length > 0 && context.taskId.trim()) ||
+    (typeof context.issueId === "string" && context.issueId.trim().length > 0 && context.issueId.trim()) ||
+    null;
+  const wakeReason =
+    typeof context.wakeReason === "string" && context.wakeReason.trim().length > 0
+      ? context.wakeReason.trim()
+      : null;
+  const wakeCommentId =
+    (typeof context.wakeCommentId === "string" && context.wakeCommentId.trim().length > 0 && context.wakeCommentId.trim()) ||
+    (typeof context.commentId === "string" && context.commentId.trim().length > 0 && context.commentId.trim()) ||
+    null;
+  const approvalId =
+    typeof context.approvalId === "string" && context.approvalId.trim().length > 0
+      ? context.approvalId.trim()
+      : null;
+  const approvalStatus =
+    typeof context.approvalStatus === "string" && context.approvalStatus.trim().length > 0
+      ? context.approvalStatus.trim()
+      : null;
+  const linkedIssueIds = Array.isArray(context.issueIds)
+    ? context.issueIds.filter((value): value is string => typeof value === "string" && value.trim().length > 0)
+    : [];
+  if (wakeTaskId) env.AGENT_COMPANY_TASK_ID = wakeTaskId;
+  if (wakeReason) env.AGENT_COMPANY_WAKE_REASON = wakeReason;
+  if (wakeCommentId) env.AGENT_COMPANY_WAKE_COMMENT_ID = wakeCommentId;
+  if (approvalId) env.AGENT_COMPANY_APPROVAL_ID = approvalId;
+  if (approvalStatus) env.AGENT_COMPANY_APPROVAL_STATUS = approvalStatus;
+  if (linkedIssueIds.length > 0) env.AGENT_COMPANY_LINKED_ISSUE_IDS = linkedIssueIds.join(",");
+  if (effectiveWorkspaceCwd) env.AGENT_COMPANY_WORKSPACE_CWD = effectiveWorkspaceCwd;
+  if (workspaceSource) env.AGENT_COMPANY_WORKSPACE_SOURCE = workspaceSource;
+  if (workspaceId) env.AGENT_COMPANY_WORKSPACE_ID = workspaceId;
+  if (workspaceRepoUrl) env.AGENT_COMPANY_WORKSPACE_REPO_URL = workspaceRepoUrl;
+  if (workspaceRepoRef) env.AGENT_COMPANY_WORKSPACE_REPO_REF = workspaceRepoRef;
+  if (workspaceHints.length > 0) env.AGENT_COMPANY_WORKSPACES_JSON = JSON.stringify(workspaceHints);
+
+  for (const [key, value] of Object.entries(envConfig)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  if (!hasExplicitApiKey && authToken) {
+    env.AGENT_COMPANY_API_KEY = authToken;
+  }
+  const runtimeEnv = Object.fromEntries(
+    Object.entries(ensurePathInEnv({ ...process.env, ...env })).filter(
+      (entry): entry is [string, string] => typeof entry[1] === "string",
+    ),
+  );
+  await ensureCommandResolvable(command, cwd, runtimeEnv);
+
+  await ensureOpenCodeModelConfiguredAndAvailable({
+    model,
+    command,
+    cwd,
+    env: runtimeEnv,
+  });
+
+  const timeoutSec = asNumber(config.timeoutSec, 0);
+  const graceSec = asNumber(config.graceSec, 20);
+  const extraArgs = (() => {
+    const fromExtraArgs = asStringArray(config.extraArgs);
+    if (fromExtraArgs.length > 0) return fromExtraArgs;
+    return asStringArray(config.args);
+  })();
+
+  const runtimeSessionParams = parseObject(runtime.sessionParams);
+  const runtimeSessionId = asString(runtimeSessionParams.sessionId, runtime.sessionId ?? "");
+  const runtimeSessionCwd = asString(runtimeSessionParams.cwd, "");
+  const canResumeSession =
+    runtimeSessionId.length > 0 &&
+    (runtimeSessionCwd.length === 0 || path.resolve(runtimeSessionCwd) === path.resolve(cwd));
+  const sessionId = canResumeSession ? runtimeSessionId : null;
+  if (runtimeSessionId && !canResumeSession) {
+    await onLog(
+      "stderr",
+      `[agent-company] OpenCode session "${runtimeSessionId}" was saved for cwd "${runtimeSessionCwd}" and will not be resumed in "${cwd}".\n`,
+    );
+  }
+
+  const instructionsFilePath = asString(config.instructionsFilePath, "").trim();
+  const resolvedInstructionsFilePath = instructionsFilePath
+    ? path.resolve(cwd, instructionsFilePath)
+    : "";
+  const instructionsDir = resolvedInstructionsFilePath ? `${path.dirname(resolvedInstructionsFilePath)}/` : "";
+  let instructionsPrefix = "";
+  if (resolvedInstructionsFilePath) {
+    try {
+      const instructionsContents = await fs.readFile(resolvedInstructionsFilePath, "utf8");
+      instructionsPrefix =
+        `${instructionsContents}\n\n` +
+        `The above agent instructions were loaded from ${resolvedInstructionsFilePath}. ` +
+        `Resolve any relative file references from ${instructionsDir}.\n\n`;
+      await onLog(
+        "stderr",
+        `[agent-company] Loaded agent instructions file: ${resolvedInstructionsFilePath}\n`,
+      );
+    } catch (err) {
+      const reason = err instanceof Error ? err.message : String(err);
+      await onLog(
+        "stderr",
+        `[agent-company] Warning: could not read agent instructions file "${resolvedInstructionsFilePath}": ${reason}\n`,
+      );
+    }
+  }
+
+  const commandNotes = (() => {
+    if (!resolvedInstructionsFilePath) return [] as string[];
+    if (instructionsPrefix.length > 0) {
+      return [
+        `Loaded agent instructions from ${resolvedInstructionsFilePath}`,
+        `Prepended instructions + path directive to stdin prompt (relative references from ${instructionsDir}).`,
+      ];
+    }
+    return [
+      `Configured instructionsFilePath ${resolvedInstructionsFilePath}, but file could not be read; continuing without injected instructions.`,
+    ];
+  })();
+
+  const renderedPrompt = renderTemplate(promptTemplate, {
+    agentId: agent.id,
+    companyId: agent.companyId,
+    runId,
+    company: { id: agent.companyId },
+    agent,
+    run: { id: runId, source: "on_demand" },
+    context,
+  });
+  const prompt = `${instructionsPrefix}${renderedPrompt}`;
+
+  const buildArgs = (resumeSessionId: string | null) => {
+    const args = ["run", "--format", "json"];
+    if (resumeSessionId) args.push("--session", resumeSessionId);
+    if (model) args.push("--model", model);
+    if (variant) args.push("--variant", variant);
+    if (extraArgs.length > 0) args.push(...extraArgs);
+    return args;
+  };
+
+  const runAttempt = async (resumeSessionId: string | null) => {
+    const args = buildArgs(resumeSessionId);
+    if (onMeta) {
+      await onMeta({
+        adapterType: "opencode_local",
+        command,
+        cwd,
+        commandNotes,
+        commandArgs: [...args, `<stdin prompt ${prompt.length} chars>`],
+        env: redactEnvForLogs(env),
+        prompt,
+        context,
+      });
+    }
+
+    const proc = await runChildProcess(runId, command, args, {
+      cwd,
+      env: runtimeEnv,
+      stdin: prompt,
+      timeoutSec,
+      graceSec,
+      onLog,
+    });
+    return {
+      proc,
+      rawStderr: proc.stderr,
+      parsed: parseOpenCodeJsonl(proc.stdout),
+    };
+  };
+
+  const toResult = (
+    attempt: {
+      proc: { exitCode: number | null; signal: string | null; timedOut: boolean; stdout: string; stderr: string };
+      rawStderr: string;
+      parsed: ReturnType<typeof parseOpenCodeJsonl>;
+    },
+    clearSessionOnMissingSession = false,
+  ): AdapterExecutionResult => {
+    if (attempt.proc.timedOut) {
+      return {
+        exitCode: attempt.proc.exitCode,
+        signal: attempt.proc.signal,
+        timedOut: true,
+        errorMessage: `Timed out after ${timeoutSec}s`,
+        clearSession: clearSessionOnMissingSession,
+      };
+    }
+
+    const resolvedSessionId =
+      attempt.parsed.sessionId ??
+      (clearSessionOnMissingSession ? null : runtimeSessionId ?? runtime.sessionId ?? null);
+    const resolvedSessionParams = resolvedSessionId
+      ? ({
+          sessionId: resolvedSessionId,
+          cwd,
+          ...(workspaceId ? { workspaceId } : {}),
+          ...(workspaceRepoUrl ? { repoUrl: workspaceRepoUrl } : {}),
+          ...(workspaceRepoRef ? { repoRef: workspaceRepoRef } : {}),
+        } as Record<string, unknown>)
+      : null;
+
+    const parsedError = typeof attempt.parsed.errorMessage === "string" ? attempt.parsed.errorMessage.trim() : "";
+    const stderrLine = firstNonEmptyLine(attempt.proc.stderr);
+    const rawExitCode = attempt.proc.exitCode;
+    const synthesizedExitCode = parsedError && (rawExitCode ?? 0) === 0 ? 1 : rawExitCode;
+    const fallbackErrorMessage =
+      parsedError ||
+      stderrLine ||
+      `OpenCode exited with code ${synthesizedExitCode ?? -1}`;
+    const modelId = model || null;
+
+    return {
+      exitCode: synthesizedExitCode,
+      signal: attempt.proc.signal,
+      timedOut: false,
+      errorMessage: (synthesizedExitCode ?? 0) === 0 ? null : fallbackErrorMessage,
+      usage: {
+        inputTokens: attempt.parsed.usage.inputTokens,
+        outputTokens: attempt.parsed.usage.outputTokens,
+        cachedInputTokens: attempt.parsed.usage.cachedInputTokens,
+      },
+      sessionId: resolvedSessionId,
+      sessionParams: resolvedSessionParams,
+      sessionDisplayId: resolvedSessionId,
+      provider: parseModelProvider(modelId),
+      model: modelId,
+      billingType: "unknown",
+      costUsd: attempt.parsed.costUsd,
+      resultJson: {
+        stdout: attempt.proc.stdout,
+        stderr: attempt.proc.stderr,
+      },
+      summary: attempt.parsed.summary,
+      clearSession: Boolean(clearSessionOnMissingSession && !attempt.parsed.sessionId),
+    };
+  };
+
+  const initial = await runAttempt(sessionId);
+  const initialFailed =
+    !initial.proc.timedOut && ((initial.proc.exitCode ?? 0) !== 0 || Boolean(initial.parsed.errorMessage));
+  if (
+    sessionId &&
+    initialFailed &&
+    isOpenCodeUnknownSessionError(initial.proc.stdout, initial.rawStderr)
+  ) {
+    await onLog(
+      "stderr",
+      `[agent-company] OpenCode session "${sessionId}" is unavailable; retrying with a fresh session.\n`,
+    );
+    const retry = await runAttempt(null);
+    return toResult(retry, true);
+  }
+
+  return toResult(initial);
+}
diff --git a/packages/adapter-opencode-local/src/server/index.ts b/packages/adapter-opencode-local/src/server/index.ts
new file mode 100644
index 00000000..5b5b9e65
--- /dev/null
+++ b/packages/adapter-opencode-local/src/server/index.ts
@@ -0,0 +1,71 @@
+import type { AdapterSessionCodec } from "@agentcompany/adapter-utils";
+
+function readNonEmptyString(value: unknown): string | null {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+
+export const sessionCodec: AdapterSessionCodec = {
+  deserialize(raw: unknown) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+    const record = raw as Record<string, unknown>;
+    const sessionId =
+      readNonEmptyString(record.sessionId) ??
+      readNonEmptyString(record.session_id) ??
+      readNonEmptyString(record.sessionID);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(record.cwd) ??
+      readNonEmptyString(record.workdir) ??
+      readNonEmptyString(record.folder);
+    const workspaceId = readNonEmptyString(record.workspaceId) ?? readNonEmptyString(record.workspace_id);
+    const repoUrl = readNonEmptyString(record.repoUrl) ?? readNonEmptyString(record.repo_url);
+    const repoRef = readNonEmptyString(record.repoRef) ?? readNonEmptyString(record.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  serialize(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    const sessionId =
+      readNonEmptyString(params.sessionId) ??
+      readNonEmptyString(params.session_id) ??
+      readNonEmptyString(params.sessionID);
+    if (!sessionId) return null;
+    const cwd =
+      readNonEmptyString(params.cwd) ??
+      readNonEmptyString(params.workdir) ??
+      readNonEmptyString(params.folder);
+    const workspaceId = readNonEmptyString(params.workspaceId) ?? readNonEmptyString(params.workspace_id);
+    const repoUrl = readNonEmptyString(params.repoUrl) ?? readNonEmptyString(params.repo_url);
+    const repoRef = readNonEmptyString(params.repoRef) ?? readNonEmptyString(params.repo_ref);
+    return {
+      sessionId,
+      ...(cwd ? { cwd } : {}),
+      ...(workspaceId ? { workspaceId } : {}),
+      ...(repoUrl ? { repoUrl } : {}),
+      ...(repoRef ? { repoRef } : {}),
+    };
+  },
+  getDisplayId(params: Record<string, unknown> | null) {
+    if (!params) return null;
+    return (
+      readNonEmptyString(params.sessionId) ??
+      readNonEmptyString(params.session_id) ??
+      readNonEmptyString(params.sessionID)
+    );
+  },
+};
+
+export { execute } from "./execute.js";
+export { testEnvironment } from "./test.js";
+export {
+  listOpenCodeModels,
+  discoverOpenCodeModels,
+  ensureOpenCodeModelConfiguredAndAvailable,
+  resetOpenCodeModelsCacheForTests,
+} from "./models.js";
+export { parseOpenCodeJsonl, isOpenCodeUnknownSessionError } from "./parse.js";
diff --git a/packages/adapter-opencode-local/src/server/models.test.ts b/packages/adapter-opencode-local/src/server/models.test.ts
new file mode 100644
index 00000000..221d694b
--- /dev/null
+++ b/packages/adapter-opencode-local/src/server/models.test.ts
@@ -0,0 +1,33 @@
+import { afterEach, describe, expect, it } from "vitest";
+import {
+  ensureOpenCodeModelConfiguredAndAvailable,
+  listOpenCodeModels,
+  resetOpenCodeModelsCacheForTests,
+} from "./models.js";
+
+describe("openCode models", () => {
+  afterEach(() => {
+    delete process.env.AGENT_COMPANY_OPENCODE_COMMAND;
+    resetOpenCodeModelsCacheForTests();
+  });
+
+  it("returns an empty list when discovery command is unavailable", async () => {
+    process.env.AGENT_COMPANY_OPENCODE_COMMAND = "__agentcompany_missing_opencode_command__";
+    await expect(listOpenCodeModels()).resolves.toEqual([]);
+  });
+
+  it("rejects when model is missing", async () => {
+    await expect(
+      ensureOpenCodeModelConfiguredAndAvailable({ model: "" }),
+    ).rejects.toThrow("OpenCode requires `adapterConfig.model`");
+  });
+
+  it("rejects when discovery cannot run for configured model", async () => {
+    process.env.AGENT_COMPANY_OPENCODE_COMMAND = "__agentcompany_missing_opencode_command__";
+    await expect(
+      ensureOpenCodeModelConfiguredAndAvailable({
+        model: "openai/gpt-5",
+      }),
+    ).rejects.toThrow("Failed to start command");
+  });
+});
diff --git a/packages/adapter-opencode-local/src/server/models.ts b/packages/adapter-opencode-local/src/server/models.ts
new file mode 100644
index 00000000..9cee489f
--- /dev/null
+++ b/packages/adapter-opencode-local/src/server/models.ts
@@ -0,0 +1,195 @@
+import { createHash } from "node:crypto";
+import type { AdapterModel } from "@agentcompany/adapter-utils";
+import {
+  asString,
+  ensurePathInEnv,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+
+const MODELS_CACHE_TTL_MS = 60_000;
+
+function resolveOpenCodeCommand(input: unknown): string {
+  const envOverride =
+    typeof process.env.AGENT_COMPANY_OPENCODE_COMMAND === "string" &&
+    process.env.AGENT_COMPANY_OPENCODE_COMMAND.trim().length > 0
+      ? process.env.AGENT_COMPANY_OPENCODE_COMMAND.trim()
+      : "opencode";
+  return asString(input, envOverride);
+}
+
+const discoveryCache = new Map<string, { expiresAt: number; models: AdapterModel[] }>();
+const VOLATILE_ENV_KEY_PREFIXES = ["AGENT_COMPANY_", "npm_", "NPM_"] as const;
+const VOLATILE_ENV_KEY_EXACT = new Set(["PWD", "OLDPWD", "SHLVL", "_", "TERM_SESSION_ID"]);
+
+function dedupeModels(models: AdapterModel[]): AdapterModel[] {
+  const seen = new Set<string>();
+  const deduped: AdapterModel[] = [];
+  for (const model of models) {
+    const id = model.id.trim();
+    if (!id || seen.has(id)) continue;
+    seen.add(id);
+    deduped.push({ id, label: model.label.trim() || id });
+  }
+  return deduped;
+}
+
+function sortModels(models: AdapterModel[]): AdapterModel[] {
+  return [...models].sort((a, b) =>
+    a.id.localeCompare(b.id, "en", { numeric: true, sensitivity: "base" }),
+  );
+}
+
+function firstNonEmptyLine(text: string): string {
+  return (
+    text
+      .split(/\r?\n/)
+      .map((line) => line.trim())
+      .find(Boolean) ?? ""
+  );
+}
+
+function parseModelsOutput(stdout: string): AdapterModel[] {
+  const parsed: AdapterModel[] = [];
+  for (const raw of stdout.split(/\r?\n/)) {
+    const line = raw.trim();
+    if (!line) continue;
+    const firstToken = line.split(/\s+/)[0]?.trim() ?? "";
+    if (!firstToken.includes("/")) continue;
+    const provider = firstToken.slice(0, firstToken.indexOf("/")).trim();
+    const model = firstToken.slice(firstToken.indexOf("/") + 1).trim();
+    if (!provider || !model) continue;
+    parsed.push({ id: `${provider}/${model}`, label: `${provider}/${model}` });
+  }
+  return dedupeModels(parsed);
+}
+
+function normalizeEnv(input: unknown): Record<string, string> {
+  const envInput = typeof input === "object" && input !== null && !Array.isArray(input)
+    ? (input as Record<string, unknown>)
+    : {};
+  const env: Record<string, string> = {};
+  for (const [key, value] of Object.entries(envInput)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  return env;
+}
+
+function isVolatileEnvKey(key: string): boolean {
+  if (VOLATILE_ENV_KEY_EXACT.has(key)) return true;
+  return VOLATILE_ENV_KEY_PREFIXES.some((prefix) => key.startsWith(prefix));
+}
+
+function hashValue(value: string): string {
+  return createHash("sha256").update(value).digest("hex");
+}
+
+function discoveryCacheKey(command: string, cwd: string, env: Record<string, string>) {
+  const envKey = Object.entries(env)
+    .filter(([key]) => !isVolatileEnvKey(key))
+    .sort(([a], [b]) => a.localeCompare(b))
+    .map(([key, value]) => `${key}=${hashValue(value)}`)
+    .join("\n");
+  return `${command}\n${cwd}\n${envKey}`;
+}
+
+function pruneExpiredDiscoveryCache(now: number) {
+  for (const [key, value] of discoveryCache.entries()) {
+    if (value.expiresAt <= now) discoveryCache.delete(key);
+  }
+}
+
+export async function discoverOpenCodeModels(input: {
+  command?: unknown;
+  cwd?: unknown;
+  env?: unknown;
+} = {}): Promise<AdapterModel[]> {
+  const command = resolveOpenCodeCommand(input.command);
+  const cwd = asString(input.cwd, process.cwd());
+  const env = normalizeEnv(input.env);
+  const runtimeEnv = normalizeEnv(ensurePathInEnv({ ...process.env, ...env }));
+
+  const result = await runChildProcess(
+    `opencode-models-${Date.now()}-${Math.random().toString(16).slice(2)}`,
+    command,
+    ["models"],
+    {
+      cwd,
+      env: runtimeEnv,
+      timeoutSec: 20,
+      graceSec: 3,
+      onLog: async () => {},
+    },
+  );
+
+  if (result.timedOut) {
+    throw new Error("`opencode models` timed out.");
+  }
+  if ((result.exitCode ?? 1) !== 0) {
+    const detail = firstNonEmptyLine(result.stderr) || firstNonEmptyLine(result.stdout);
+    throw new Error(detail ? `\`opencode models\` failed: ${detail}` : "`opencode models` failed.");
+  }
+
+  return sortModels(parseModelsOutput(result.stdout));
+}
+
+export async function discoverOpenCodeModelsCached(input: {
+  command?: unknown;
+  cwd?: unknown;
+  env?: unknown;
+} = {}): Promise<AdapterModel[]> {
+  const command = resolveOpenCodeCommand(input.command);
+  const cwd = asString(input.cwd, process.cwd());
+  const env = normalizeEnv(input.env);
+  const key = discoveryCacheKey(command, cwd, env);
+  const now = Date.now();
+  pruneExpiredDiscoveryCache(now);
+  const cached = discoveryCache.get(key);
+  if (cached && cached.expiresAt > now) return cached.models;
+
+  const models = await discoverOpenCodeModels({ command, cwd, env });
+  discoveryCache.set(key, { expiresAt: now + MODELS_CACHE_TTL_MS, models });
+  return models;
+}
+
+export async function ensureOpenCodeModelConfiguredAndAvailable(input: {
+  model?: unknown;
+  command?: unknown;
+  cwd?: unknown;
+  env?: unknown;
+}): Promise<AdapterModel[]> {
+  const model = asString(input.model, "").trim();
+  if (!model) {
+    throw new Error("OpenCode requires `adapterConfig.model` in provider/model format.");
+  }
+
+  const models = await discoverOpenCodeModelsCached({
+    command: input.command,
+    cwd: input.cwd,
+    env: input.env,
+  });
+
+  if (models.length === 0) {
+    throw new Error("OpenCode returned no models. Run `opencode models` and verify provider auth.");
+  }
+
+  if (!models.some((entry) => entry.id === model)) {
+    const sample = models.slice(0, 12).map((entry) => entry.id).join(", ");
+    throw new Error(
+      `Configured OpenCode model is unavailable: ${model}. Available models: ${sample}${models.length > 12 ? ", ..." : ""}`,
+    );
+  }
+
+  return models;
+}
+
+export async function listOpenCodeModels(): Promise<AdapterModel[]> {
+  try {
+    return await discoverOpenCodeModelsCached();
+  } catch {
+    return [];
+  }
+}
+
+export function resetOpenCodeModelsCacheForTests() {
+  discoveryCache.clear();
+}
diff --git a/packages/adapter-opencode-local/src/server/parse.test.ts b/packages/adapter-opencode-local/src/server/parse.test.ts
new file mode 100644
index 00000000..5f4a3a36
--- /dev/null
+++ b/packages/adapter-opencode-local/src/server/parse.test.ts
@@ -0,0 +1,50 @@
+import { describe, expect, it } from "vitest";
+import { parseOpenCodeJsonl, isOpenCodeUnknownSessionError } from "./parse.js";
+
+describe("parseOpenCodeJsonl", () => {
+  it("parses assistant text, usage, cost, and errors", () => {
+    const stdout = [
+      JSON.stringify({
+        type: "text",
+        sessionID: "session_123",
+        part: { text: "Hello from OpenCode" },
+      }),
+      JSON.stringify({
+        type: "step_finish",
+        sessionID: "session_123",
+        part: {
+          reason: "done",
+          cost: 0.0025,
+          tokens: {
+            input: 120,
+            output: 40,
+            reasoning: 10,
+            cache: { read: 20, write: 0 },
+          },
+        },
+      }),
+      JSON.stringify({
+        type: "error",
+        sessionID: "session_123",
+        error: { message: "model unavailable" },
+      }),
+    ].join("\n");
+
+    const parsed = parseOpenCodeJsonl(stdout);
+    expect(parsed.sessionId).toBe("session_123");
+    expect(parsed.summary).toBe("Hello from OpenCode");
+    expect(parsed.usage).toEqual({
+      inputTokens: 120,
+      cachedInputTokens: 20,
+      outputTokens: 50,
+    });
+    expect(parsed.costUsd).toBeCloseTo(0.0025, 6);
+    expect(parsed.errorMessage).toContain("model unavailable");
+  });
+
+  it("detects unknown session errors", () => {
+    expect(isOpenCodeUnknownSessionError("Session not found: s_123", "")).toBe(true);
+    expect(isOpenCodeUnknownSessionError("", "unknown session id")).toBe(true);
+    expect(isOpenCodeUnknownSessionError("all good", "")).toBe(false);
+  });
+});
diff --git a/packages/adapter-opencode-local/src/server/parse.ts b/packages/adapter-opencode-local/src/server/parse.ts
new file mode 100644
index 00000000..a2d85708
--- /dev/null
+++ b/packages/adapter-opencode-local/src/server/parse.ts
@@ -0,0 +1,99 @@
+import { asNumber, asString, parseJson, parseObject } from "@agentcompany/adapter-utils/server-utils";
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = parseObject(value);
+  const message = asString(rec.message, "").trim();
+  if (message) return message;
+  const data = parseObject(rec.data);
+  const nestedMessage = asString(data.message, "").trim();
+  if (nestedMessage) return nestedMessage;
+  const name = asString(rec.name, "").trim();
+  if (name) return name;
+  const code = asString(rec.code, "").trim();
+  if (code) return code;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+export function parseOpenCodeJsonl(stdout: string) {
+  let sessionId: string | null = null;
+  const messages: string[] = [];
+  const errors: string[] = [];
+  const usage = {
+    inputTokens: 0,
+    cachedInputTokens: 0,
+    outputTokens: 0,
+  };
+  let costUsd = 0;
+
+  for (const rawLine of stdout.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line) continue;
+
+    const event = parseJson(line);
+    if (!event) continue;
+
+    const currentSessionId = asString(event.sessionID, "").trim();
+    if (currentSessionId) sessionId = currentSessionId;
+
+    const type = asString(event.type, "");
+
+    if (type === "text") {
+      const part = parseObject(event.part);
+      const text = asString(part.text, "").trim();
+      if (text) messages.push(text);
+      continue;
+    }
+
+    if (type === "step_finish") {
+      const part = parseObject(event.part);
+      const tokens = parseObject(part.tokens);
+      const cache = parseObject(tokens.cache);
+      usage.inputTokens += asNumber(tokens.input, 0);
+      usage.cachedInputTokens += asNumber(cache.read, 0);
+      usage.outputTokens += asNumber(tokens.output, 0) + asNumber(tokens.reasoning, 0);
+      costUsd += asNumber(part.cost, 0);
+      continue;
+    }
+
+    if (type === "tool_use") {
+      const part = parseObject(event.part);
+      const state = parseObject(part.state);
+      if (asString(state.status, "") === "error") {
+        const text = asString(state.error, "").trim();
+        if (text) errors.push(text);
+      }
+      continue;
+    }
+
+    if (type === "error") {
+      const text = errorText(event.error ?? event.message).trim();
+      if (text) errors.push(text);
+      continue;
+    }
+  }
+
+  return {
+    sessionId,
+    summary: messages.join("\n\n").trim(),
+    usage,
+    costUsd,
+    errorMessage: errors.length > 0 ? errors.join("\n") : null,
+  };
+}
+
+export function isOpenCodeUnknownSessionError(stdout: string, stderr: string): boolean {
+  const haystack = `${stdout}\n${stderr}`
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter(Boolean)
+    .join("\n");
+
+  return /unknown\s+session|session\b.*\bnot\s+found|resource\s+not\s+found:.*[\\/]session[\\/].*\.json|notfounderror|no session/i.test(
+    haystack,
+  );
+}
diff --git a/packages/adapter-opencode-local/src/server/test.ts b/packages/adapter-opencode-local/src/server/test.ts
new file mode 100644
index 00000000..deb6ea30
--- /dev/null
+++ b/packages/adapter-opencode-local/src/server/test.ts
@@ -0,0 +1,319 @@
+import type {
+  AdapterEnvironmentCheck,
+  AdapterEnvironmentTestContext,
+  AdapterEnvironmentTestResult,
+} from "@agentcompany/adapter-utils";
+import {
+  asString,
+  asStringArray,
+  parseObject,
+  ensureAbsoluteDirectory,
+  ensureCommandResolvable,
+  ensurePathInEnv,
+  runChildProcess,
+} from "@agentcompany/adapter-utils/server-utils";
+import { discoverOpenCodeModels, ensureOpenCodeModelConfiguredAndAvailable } from "./models.js";
+import { parseOpenCodeJsonl } from "./parse.js";
+
+function summarizeStatus(checks: AdapterEnvironmentCheck[]): AdapterEnvironmentTestResult["status"] {
+  if (checks.some((check) => check.level === "error")) return "fail";
+  if (checks.some((check) => check.level === "warn")) return "warn";
+  return "pass";
+}
+
+function firstNonEmptyLine(text: string): string {
+  return (
+    text
+      .split(/\r?\n/)
+      .map((line) => line.trim())
+      .find(Boolean) ?? ""
+  );
+}
+
+function summarizeProbeDetail(stdout: string, stderr: string, parsedError: string | null): string | null {
+  const raw = parsedError?.trim() || firstNonEmptyLine(stderr) || firstNonEmptyLine(stdout);
+  if (!raw) return null;
+  const clean = raw.replace(/\s+/g, " ").trim();
+  const max = 240;
+  return clean.length > max ? `${clean.slice(0, max - 1)}...` : clean;
+}
+
+function normalizeEnv(input: unknown): Record<string, string> {
+  if (typeof input !== "object" || input === null || Array.isArray(input)) return {};
+  const env: Record<string, string> = {};
+  for (const [key, value] of Object.entries(input as Record<string, unknown>)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  return env;
+}
+
+const OPENCODE_AUTH_REQUIRED_RE =
+  /(?:auth(?:entication)?\s+required|api\s*key|invalid\s*api\s*key|not\s+logged\s+in|opencode\s+auth\s+login|free\s+usage\s+exceeded)/i;
+
+export async function testEnvironment(
+  ctx: AdapterEnvironmentTestContext,
+): Promise<AdapterEnvironmentTestResult> {
+  const checks: AdapterEnvironmentCheck[] = [];
+  const config = parseObject(ctx.config);
+  const command = asString(config.command, "opencode");
+  const cwd = asString(config.cwd, process.cwd());
+
+  try {
+    await ensureAbsoluteDirectory(cwd, { createIfMissing: false });
+    checks.push({
+      code: "opencode_cwd_valid",
+      level: "info",
+      message: `Working directory is valid: ${cwd}`,
+    });
+  } catch (err) {
+    checks.push({
+      code: "opencode_cwd_invalid",
+      level: "error",
+      message: err instanceof Error ? err.message : "Invalid working directory",
+      detail: cwd,
+    });
+  }
+
+  const envConfig = parseObject(config.env);
+  const env: Record<string, string> = {};
+  for (const [key, value] of Object.entries(envConfig)) {
+    if (typeof value === "string") env[key] = value;
+  }
+
+  const openaiKeyOverride = "OPENAI_API_KEY" in envConfig ? asString(envConfig.OPENAI_API_KEY, "") : null;
+  if (openaiKeyOverride !== null && openaiKeyOverride.trim() === "") {
+    checks.push({
+      code: "opencode_openai_api_key_missing",
+      level: "warn",
+      message: "OPENAI_API_KEY override is empty.",
+      hint: "The OPENAI_API_KEY override is empty. Set a valid key or remove the override.",
+    });
+  }
+
+  const runtimeEnv = normalizeEnv(ensurePathInEnv({ ...process.env, ...env }));
+
+  const cwdInvalid = checks.some((check) => check.code === "opencode_cwd_invalid");
+  if (cwdInvalid) {
+    checks.push({
+      code: "opencode_command_skipped",
+      level: "warn",
+      message: "Skipped command check because working directory validation failed.",
+      detail: command,
+    });
+  } else {
+    try {
+      await ensureCommandResolvable(command, cwd, runtimeEnv);
+      checks.push({
+        code: "opencode_command_resolvable",
+        level: "info",
+        message: `Command is executable: ${command}`,
+      });
+    } catch (err) {
+      checks.push({
+        code: "opencode_command_unresolvable",
+        level: "error",
+        message: err instanceof Error ? err.message : "Command is not executable",
+        detail: command,
+      });
+    }
+  }
+
+  const canRunProbe =
+    checks.every((check) => check.code !== "opencode_cwd_invalid" && check.code !== "opencode_command_unresolvable");
+
+  let modelValidationPassed = false;
+  const configuredModel = asString(config.model, "").trim();
+
+  if (canRunProbe && configuredModel) {
+    try {
+      const discovered = await discoverOpenCodeModels({ command, cwd, env: runtimeEnv });
+      if (discovered.length > 0) {
+        checks.push({
+          code: "opencode_models_discovered",
+          level: "info",
+          message: `Discovered ${discovered.length} model(s) from OpenCode providers.`,
+        });
+      } else {
+        checks.push({
+          code: "opencode_models_empty",
+          level: "error",
+          message: "OpenCode returned no models.",
+          hint: "Run `opencode models` and verify provider authentication.",
+        });
+      }
+    } catch (err) {
+      const errMsg = err instanceof Error ? err.message : String(err);
+      if (/ProviderModelNotFoundError/i.test(errMsg)) {
+        checks.push({
+          code: "opencode_hello_probe_model_unavailable",
+          level: "warn",
+          message: "The configured model was not found by the provider.",
+          detail: errMsg,
+          hint: "Run `opencode models` and choose an available provider/model ID.",
+        });
+      } else {
+        checks.push({
+          code: "opencode_models_discovery_failed",
+          level: "error",
+          message: errMsg || "OpenCode model discovery failed.",
+          hint: "Run `opencode models` manually to verify provider auth and config.",
+        });
+      }
+    }
+  } else if (canRunProbe && !configuredModel) {
+    try {
+      const discovered = await discoverOpenCodeModels({ command, cwd, env: runtimeEnv });
+      if (discovered.length > 0) {
+        checks.push({
+          code: "opencode_models_discovered",
+          level: "info",
+          message: `Discovered ${discovered.length} model(s) from OpenCode providers.`,
+        });
+      }
+    } catch (err) {
+      const errMsg = err instanceof Error ? err.message : String(err);
+      if (/ProviderModelNotFoundError/i.test(errMsg)) {
+        checks.push({
+          code: "opencode_hello_probe_model_unavailable",
+          level: "warn",
+          message: "The configured model was not found by the provider.",
+          detail: errMsg,
+          hint: "Run `opencode models` and choose an available provider/model ID.",
+        });
+      } else {
+        checks.push({
+          code: "opencode_models_discovery_failed",
+          level: "warn",
+          message: errMsg || "OpenCode model discovery failed (best-effort, no model configured).",
+          hint: "Run `opencode models` manually to verify provider auth and config.",
+        });
+      }
+    }
+  }
+
+  const modelUnavailable = checks.some((check) => check.code === "opencode_hello_probe_model_unavailable");
+  if (!configuredModel && !modelUnavailable) {
+    // No model configured – skip model requirement if no model-related checks exist
+  } else if (configuredModel && canRunProbe) {
+    try {
+      await ensureOpenCodeModelConfiguredAndAvailable({
+        model: configuredModel,
+        command,
+        cwd,
+        env: runtimeEnv,
+      });
+      checks.push({
+        code: "opencode_model_configured",
+        level: "info",
+        message: `Configured model: ${configuredModel}`,
+      });
+      modelValidationPassed = true;
+    } catch (err) {
+      checks.push({
+        code: "opencode_model_invalid",
+        level: "error",
+        message: err instanceof Error ? err.message : "Configured model is unavailable.",
+        hint: "Run `opencode models` and choose a currently available provider/model ID.",
+      });
+    }
+  }
+
+  if (canRunProbe && modelValidationPassed) {
+    const extraArgs = (() => {
+      const fromExtraArgs = asStringArray(config.extraArgs);
+      if (fromExtraArgs.length > 0) return fromExtraArgs;
+      return asStringArray(config.args);
+    })();
+    const variant = asString(config.variant, "").trim();
+    const probeModel = configuredModel;
+
+    const args = ["run", "--format", "json"];
+    args.push("--model", probeModel);
+    if (variant) args.push("--variant", variant);
+    if (extraArgs.length > 0) args.push(...extraArgs);
+
+    try {
+      const probe = await runChildProcess(
+        `opencode-envtest-${Date.now()}-${Math.random().toString(16).slice(2)}`,
+        command,
+        args,
+        {
+          cwd,
+          env: runtimeEnv,
+          timeoutSec: 60,
+          graceSec: 5,
+          stdin: "Respond with hello.",
+          onLog: async () => {},
+        },
+      );
+
+      const parsed = parseOpenCodeJsonl(probe.stdout);
+      const detail = summarizeProbeDetail(probe.stdout, probe.stderr, parsed.errorMessage);
+      const authEvidence = `${parsed.errorMessage ?? ""}\n${probe.stdout}\n${probe.stderr}`.trim();
+
+      if (probe.timedOut) {
+        checks.push({
+          code: "opencode_hello_probe_timed_out",
+          level: "warn",
+          message: "OpenCode hello probe timed out.",
+          hint: "Retry the probe. If this persists, run OpenCode manually in this working directory.",
+        });
+      } else if ((probe.exitCode ?? 1) === 0 && !parsed.errorMessage) {
+        const summary = parsed.summary.trim();
+        const hasHello = /\bhello\b/i.test(summary);
+        checks.push({
+          code: hasHello ? "opencode_hello_probe_passed" : "opencode_hello_probe_unexpected_output",
+          level: hasHello ? "info" : "warn",
+          message: hasHello
+            ? "OpenCode hello probe succeeded."
+            : "OpenCode probe ran but did not return `hello` as expected.",
+          ...(summary ? { detail: summary.replace(/\s+/g, " ").trim().slice(0, 240) } : {}),
+          ...(hasHello
+            ? {}
+            : {
+                hint: "Run `opencode run --format json` manually and prompt `Respond with hello` to inspect output.",
+              }),
+        });
+      } else if (/ProviderModelNotFoundError/i.test(authEvidence)) {
+        checks.push({
+          code: "opencode_hello_probe_model_unavailable",
+          level: "warn",
+          message: "The configured model was not found by the provider.",
+          ...(detail ? { detail } : {}),
+          hint: "Run `opencode models` and choose an available provider/model ID.",
+        });
+      } else if (OPENCODE_AUTH_REQUIRED_RE.test(authEvidence)) {
+        checks.push({
+          code: "opencode_hello_probe_auth_required",
+          level: "warn",
+          message: "OpenCode is installed, but provider authentication is not ready.",
+          ...(detail ? { detail } : {}),
+          hint: "Run `opencode auth login` or set provider credentials, then retry the probe.",
+        });
+      } else {
+        checks.push({
+          code: "opencode_hello_probe_failed",
+          level: "error",
+          message: "OpenCode hello probe failed.",
+          ...(detail ? { detail } : {}),
+          hint: "Run `opencode run --format json` manually in this working directory to debug.",
+        });
+      }
+    } catch (err) {
+      checks.push({
+        code: "opencode_hello_probe_failed",
+        level: "error",
+        message: "OpenCode hello probe failed.",
+        detail: err instanceof Error ? err.message : String(err),
+        hint: "Run `opencode run --format json` manually in this working directory to debug.",
+      });
+    }
+  }
+
+  return {
+    adapterType: ctx.adapterType,
+    status: summarizeStatus(checks),
+    checks,
+    testedAt: new Date().toISOString(),
+  };
+}
diff --git a/packages/adapter-opencode-local/src/ui/build-config.ts b/packages/adapter-opencode-local/src/ui/build-config.ts
new file mode 100644
index 00000000..c8784140
--- /dev/null
+++ b/packages/adapter-opencode-local/src/ui/build-config.ts
@@ -0,0 +1,75 @@
+import type { CreateConfigValues } from "@agentcompany/adapter-utils";
+
+function parseCommaArgs(value: string): string[] {
+  return value
+    .split(",")
+    .map((item) => item.trim())
+    .filter(Boolean);
+}
+
+function parseEnvVars(text: string): Record<string, string> {
+  const env: Record<string, string> = {};
+  for (const line of text.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eq = trimmed.indexOf("=");
+    if (eq <= 0) continue;
+    const key = trimmed.slice(0, eq).trim();
+    const value = trimmed.slice(eq + 1);
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    env[key] = value;
+  }
+  return env;
+}
+
+function parseEnvBindings(bindings: unknown): Record<string, unknown> {
+  if (typeof bindings !== "object" || bindings === null || Array.isArray(bindings)) return {};
+  const env: Record<string, unknown> = {};
+  for (const [key, raw] of Object.entries(bindings)) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue;
+    if (typeof raw === "string") {
+      env[key] = { type: "plain", value: raw };
+      continue;
+    }
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
+    const rec = raw as Record<string, unknown>;
+    if (rec.type === "plain" && typeof rec.value === "string") {
+      env[key] = { type: "plain", value: rec.value };
+      continue;
+    }
+    if (rec.type === "secret_ref" && typeof rec.secretId === "string") {
+      env[key] = {
+        type: "secret_ref",
+        secretId: rec.secretId,
+        ...(typeof rec.version === "number" || rec.version === "latest"
+          ? { version: rec.version }
+          : {}),
+      };
+    }
+  }
+  return env;
+}
+
+export function buildOpenCodeLocalConfig(v: CreateConfigValues): Record<string, unknown> {
+  const ac: Record<string, unknown> = {};
+  if (v.cwd) ac.cwd = v.cwd;
+  if (v.instructionsFilePath) ac.instructionsFilePath = v.instructionsFilePath;
+  if (v.promptTemplate) ac.promptTemplate = v.promptTemplate;
+  if (v.model) ac.model = v.model;
+  if (v.thinkingEffort) ac.variant = v.thinkingEffort;
+  // OpenCode sessions can run until the CLI exits naturally; keep timeout disabled (0)
+  // and rely on graceSec for termination handling when a timeout is configured elsewhere.
+  ac.timeoutSec = 0;
+  ac.graceSec = 20;
+  const env = parseEnvBindings(v.envBindings);
+  const legacy = parseEnvVars(v.envVars);
+  for (const [key, value] of Object.entries(legacy)) {
+    if (!Object.prototype.hasOwnProperty.call(env, key)) {
+      env[key] = { type: "plain", value };
+    }
+  }
+  if (Object.keys(env).length > 0) ac.env = env;
+  if (v.command) ac.command = v.command;
+  if (v.extraArgs) ac.extraArgs = parseCommaArgs(v.extraArgs);
+  return ac;
+}
diff --git a/packages/adapter-opencode-local/src/ui/index.ts b/packages/adapter-opencode-local/src/ui/index.ts
new file mode 100644
index 00000000..a06f826d
--- /dev/null
+++ b/packages/adapter-opencode-local/src/ui/index.ts
@@ -0,0 +1,2 @@
+export { parseOpenCodeStdoutLine } from "./parse-stdout.js";
+export { buildOpenCodeLocalConfig } from "./build-config.js";
diff --git a/packages/adapter-opencode-local/src/ui/parse-stdout.ts b/packages/adapter-opencode-local/src/ui/parse-stdout.ts
new file mode 100644
index 00000000..bf495040
--- /dev/null
+++ b/packages/adapter-opencode-local/src/ui/parse-stdout.ts
@@ -0,0 +1,152 @@
+import type { TranscriptEntry } from "@agentcompany/adapter-utils";
+
+function safeJsonParse(text: string): unknown {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+  return value as Record<string, unknown>;
+}
+
+function asString(value: unknown, fallback = ""): string {
+  return typeof value === "string" ? value : fallback;
+}
+
+function asNumber(value: unknown, fallback = 0): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+
+function errorText(value: unknown): string {
+  if (typeof value === "string") return value;
+  const rec = asRecord(value);
+  if (!rec) return "";
+  const data = asRecord(rec.data);
+  const msg =
+    asString(rec.message) ||
+    asString(data?.message) ||
+    asString(rec.name) ||
+    "";
+  if (msg) return msg;
+  try {
+    return JSON.stringify(rec);
+  } catch {
+    return "";
+  }
+}
+
+function parseToolUse(parsed: Record<string, unknown>, ts: string): TranscriptEntry[] {
+  const part = asRecord(parsed.part);
+  if (!part) return [{ kind: "system", ts, text: "tool event" }];
+
+  const toolName = asString(part.tool, "tool");
+  const state = asRecord(part.state);
+  const input = state?.input ?? {};
+  const callEntry: TranscriptEntry = {
+    kind: "tool_call",
+    ts,
+    name: toolName,
+    toolUseId: asString(part.callID) || asString(part.id) || undefined,
+    input,
+  };
+
+  const status = asString(state?.status);
+  if (status !== "completed" && status !== "error") return [callEntry];
+
+  const rawOutput =
+    asString(state?.output) ||
+    asString(state?.error) ||
+    asString(part.title) ||
+    `${toolName} ${status}`;
+
+  const metadata = asRecord(state?.metadata);
+  const headerParts: string[] = [`status: ${status}`];
+  if (metadata) {
+    for (const [key, value] of Object.entries(metadata)) {
+      if (value !== undefined && value !== null) headerParts.push(`${key}: ${value}`);
+    }
+  }
+  const content = `${headerParts.join("\n")}\n\n${rawOutput}`.trim();
+
+  return [
+    callEntry,
+    {
+      kind: "tool_result",
+      ts,
+      toolUseId: asString(part.callID) || asString(part.id, toolName),
+      content,
+      isError: status === "error",
+    },
+  ];
+}
+
+export function parseOpenCodeStdoutLine(line: string, ts: string): TranscriptEntry[] {
+  const parsed = asRecord(safeJsonParse(line));
+  if (!parsed) {
+    return [{ kind: "stdout", ts, text: line }];
+  }
+
+  const type = asString(parsed.type);
+
+  if (type === "text") {
+    const part = asRecord(parsed.part);
+    const text = asString(part?.text).trim();
+    if (!text) return [];
+    return [{ kind: "assistant", ts, text }];
+  }
+
+  if (type === "reasoning") {
+    const part = asRecord(parsed.part);
+    const text = asString(part?.text).trim();
+    if (!text) return [];
+    return [{ kind: "thinking", ts, text }];
+  }
+
+  if (type === "tool_use") {
+    return parseToolUse(parsed, ts);
+  }
+
+  if (type === "step_start") {
+    const sessionId = asString(parsed.sessionID);
+    return [
+      {
+        kind: "system",
+        ts,
+        text: `step started${sessionId ? ` (${sessionId})` : ""}`,
+      },
+    ];
+  }
+
+  if (type === "step_finish") {
+    const part = asRecord(parsed.part);
+    const tokens = asRecord(part?.tokens);
+    const cache = asRecord(tokens?.cache);
+    const reason = asString(part?.reason, "step");
+    const output = asNumber(tokens?.output, 0) + asNumber(tokens?.reasoning, 0);
+    return [
+      {
+        kind: "result",
+        ts,
+        text: reason,
+        inputTokens: asNumber(tokens?.input, 0),
+        outputTokens: output,
+        cachedTokens: asNumber(cache?.read, 0),
+        costUsd: asNumber(part?.cost, 0),
+        subtype: reason,
+        isError: false,
+        errors: [],
+      },
+    ];
+  }
+
+  if (type === "error") {
+    const text = errorText(parsed.error ?? parsed.message);
+    return [{ kind: "stderr", ts, text: text || line }];
+  }
+
+  return [{ kind: "stdout", ts, text: line }];
+}
diff --git a/packages/adapter-opencode-local/tsconfig.json b/packages/adapter-opencode-local/tsconfig.json
new file mode 100644
index 00000000..5a24989c
--- /dev/null
+++ b/packages/adapter-opencode-local/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}
diff --git a/packages/adapter-opencode-local/vitest.config.ts b/packages/adapter-opencode-local/vitest.config.ts
new file mode 100644
index 00000000..f624398e
--- /dev/null
+++ b/packages/adapter-opencode-local/vitest.config.ts
@@ -0,0 +1,7 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+  },
+});
diff --git a/packages/adapter-utils/CHANGELOG.md b/packages/adapter-utils/CHANGELOG.md
new file mode 100644
index 00000000..dd4c015b
--- /dev/null
+++ b/packages/adapter-utils/CHANGELOG.md
@@ -0,0 +1,49 @@
+# @paperclipai/adapter-utils
+
+## 0.3.0
+
+### Minor Changes
+
+- Stable release preparation for 0.3.0
+
+## 0.2.7
+
+### Patch Changes
+
+- Version bump (patch)
+
+## 0.2.6
+
+### Patch Changes
+
+- Version bump (patch)
+
+## 0.2.5
+
+### Patch Changes
+
+- Version bump (patch)
+
+## 0.2.4
+
+### Patch Changes
+
+- Version bump (patch)
+
+## 0.2.3
+
+### Patch Changes
+
+- Version bump (patch)
+
+## 0.2.2
+
+### Patch Changes
+
+- Version bump (patch)
+
+## 0.2.1
+
+### Patch Changes
+
+- Version bump (patch)
diff --git a/packages/adapter-utils/package.json b/packages/adapter-utils/package.json
new file mode 100644
index 00000000..060936c7
--- /dev/null
+++ b/packages/adapter-utils/package.json
@@ -0,0 +1,36 @@
+{
+  "name": "@agentcompany/adapter-utils",
+  "version": "0.3.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./*": "./src/*.ts"
+  },
+  "publishConfig": {
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.js"
+      },
+      "./*": {
+        "types": "./dist/*.d.ts",
+        "import": "./dist/*.js"
+      }
+    },
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@types/node": "^24.6.0",
+    "typescript": "^5.7.3"
+  }
+}
diff --git a/packages/adapter-utils/src/index.ts b/packages/adapter-utils/src/index.ts
new file mode 100644
index 00000000..56579022
--- /dev/null
+++ b/packages/adapter-utils/src/index.ts
@@ -0,0 +1,30 @@
+export type {
+  AdapterAgent,
+  AdapterRuntime,
+  UsageSummary,
+  AdapterBillingType,
+  AdapterRuntimeServiceReport,
+  AdapterExecutionResult,
+  AdapterInvocationMeta,
+  AdapterExecutionContext,
+  AdapterEnvironmentCheckLevel,
+  AdapterEnvironmentCheck,
+  AdapterEnvironmentTestStatus,
+  AdapterEnvironmentTestResult,
+  AdapterEnvironmentTestContext,
+  AdapterSessionCodec,
+  AdapterModel,
+  HireApprovedPayload,
+  HireApprovedHookResult,
+  ServerAdapterModule,
+  TranscriptEntry,
+  StdoutLineParser,
+  CLIAdapterModule,
+  CreateConfigValues,
+} from "./types.js";
+export {
+  REDACTED_HOME_PATH_USER,
+  redactHomePathUserSegments,
+  redactHomePathUserSegmentsInValue,
+  redactTranscriptEntryPaths,
+} from "./log-redaction.js";
diff --git a/packages/adapter-utils/src/log-redaction.ts b/packages/adapter-utils/src/log-redaction.ts
new file mode 100644
index 00000000..037e279e
--- /dev/null
+++ b/packages/adapter-utils/src/log-redaction.ts
@@ -0,0 +1,81 @@
+import type { TranscriptEntry } from "./types.js";
+
+export const REDACTED_HOME_PATH_USER = "[]";
+
+const HOME_PATH_PATTERNS = [
+  {
+    regex: /\/Users\/[^/\\\s]+/g,
+    replace: `/Users/${REDACTED_HOME_PATH_USER}`,
+  },
+  {
+    regex: /\/home\/[^/\\\s]+/g,
+    replace: `/home/${REDACTED_HOME_PATH_USER}`,
+  },
+  {
+    regex: /([A-Za-z]:\\Users\\)[^\\/\s]+/g,
+    replace: `$1${REDACTED_HOME_PATH_USER}`,
+  },
+] as const;
+
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+
+export function redactHomePathUserSegments(text: string): string {
+  let result = text;
+  for (const pattern of HOME_PATH_PATTERNS) {
+    result = result.replace(pattern.regex, pattern.replace);
+  }
+  return result;
+}
+
+export function redactHomePathUserSegmentsInValue<T>(value: T): T {
+  if (typeof value === "string") {
+    return redactHomePathUserSegments(value) as T;
+  }
+  if (Array.isArray(value)) {
+    return value.map((entry) => redactHomePathUserSegmentsInValue(entry)) as T;
+  }
+  if (!isPlainObject(value)) {
+    return value;
+  }
+
+  const redacted: Record<string, unknown> = {};
+  for (const [key, entry] of Object.entries(value)) {
+    redacted[key] = redactHomePathUserSegmentsInValue(entry);
+  }
+  return redacted as T;
+}
+
+export function redactTranscriptEntryPaths(entry: TranscriptEntry): TranscriptEntry {
+  switch (entry.kind) {
+    case "assistant":
+    case "thinking":
+    case "user":
+    case "stderr":
+    case "system":
+    case "stdout":
+      return { ...entry, text: redactHomePathUserSegments(entry.text) };
+    case "tool_call":
+      return { ...entry, name: redactHomePathUserSegments(entry.name), input: redactHomePathUserSegmentsInValue(entry.input) };
+    case "tool_result":
+      return { ...entry, content: redactHomePathUserSegments(entry.content) };
+    case "init":
+      return {
+        ...entry,
+        model: redactHomePathUserSegments(entry.model),
+        sessionId: redactHomePathUserSegments(entry.sessionId),
+      };
+    case "result":
+      return {
+        ...entry,
+        text: redactHomePathUserSegments(entry.text),
+        subtype: redactHomePathUserSegments(entry.subtype),
+        errors: entry.errors.map((error) => redactHomePathUserSegments(error)),
+      };
+    default:
+      return entry;
+  }
+}
diff --git a/packages/adapter-utils/src/server-utils.ts b/packages/adapter-utils/src/server-utils.ts
new file mode 100644
index 00000000..9e4e7ceb
--- /dev/null
+++ b/packages/adapter-utils/src/server-utils.ts
@@ -0,0 +1,371 @@
+import { spawn, type ChildProcess } from "node:child_process";
+import { constants as fsConstants, promises as fs } from "node:fs";
+import path from "node:path";
+
+export interface RunProcessResult {
+  exitCode: number | null;
+  signal: string | null;
+  timedOut: boolean;
+  stdout: string;
+  stderr: string;
+}
+
+interface RunningProcess {
+  child: ChildProcess;
+  graceSec: number;
+}
+
+interface SpawnTarget {
+  command: string;
+  args: string[];
+}
+
+type ChildProcessWithEvents = ChildProcess & {
+  on(event: "error", listener: (err: Error) => void): ChildProcess;
+  on(
+    event: "close",
+    listener: (code: number | null, signal: NodeJS.Signals | null) => void,
+  ): ChildProcess;
+};
+
+export const runningProcesses = new Map<string, RunningProcess>();
+export const MAX_CAPTURE_BYTES = 4 * 1024 * 1024;
+export const MAX_EXCERPT_BYTES = 32 * 1024;
+const SENSITIVE_ENV_KEY = /(key|token|secret|password|passwd|authorization|cookie)/i;
+
+export function parseObject(value: unknown): Record<string, unknown> {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return {};
+  }
+  return value as Record<string, unknown>;
+}
+
+export function asString(value: unknown, fallback: string): string {
+  return typeof value === "string" && value.length > 0 ? value : fallback;
+}
+
+export function asNumber(value: unknown, fallback: number): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+
+export function asBoolean(value: unknown, fallback: boolean): boolean {
+  return typeof value === "boolean" ? value : fallback;
+}
+
+export function asStringArray(value: unknown): string[] {
+  return Array.isArray(value) ? value.filter((item): item is string => typeof item === "string") : [];
+}
+
+export function parseJson(value: string): Record<string, unknown> | null {
+  try {
+    return JSON.parse(value) as Record<string, unknown>;
+  } catch {
+    return null;
+  }
+}
+
+export function appendWithCap(prev: string, chunk: string, cap = MAX_CAPTURE_BYTES) {
+  const combined = prev + chunk;
+  return combined.length > cap ? combined.slice(combined.length - cap) : combined;
+}
+
+export function resolvePathValue(obj: Record<string, unknown>, dottedPath: string) {
+  const parts = dottedPath.split(".");
+  let cursor: unknown = obj;
+
+  for (const part of parts) {
+    if (typeof cursor !== "object" || cursor === null || Array.isArray(cursor)) {
+      return "";
+    }
+    cursor = (cursor as Record<string, unknown>)[part];
+  }
+
+  if (cursor === null || cursor === undefined) return "";
+  if (typeof cursor === "string") return cursor;
+  if (typeof cursor === "number" || typeof cursor === "boolean") return String(cursor);
+
+  try {
+    return JSON.stringify(cursor);
+  } catch {
+    return "";
+  }
+}
+
+export function renderTemplate(template: string, data: Record<string, unknown>) {
+  return template.replace(/{{\s*([a-zA-Z0-9_.-]+)\s*}}/g, (_, path) => resolvePathValue(data, path));
+}
+
+export function redactEnvForLogs(env: Record<string, string>): Record<string, string> {
+  const redacted: Record<string, string> = {};
+  for (const [key, value] of Object.entries(env)) {
+    redacted[key] = SENSITIVE_ENV_KEY.test(key) ? "***REDACTED***" : value;
+  }
+  return redacted;
+}
+
+export function buildAgentCompanyEnv(agent: { id: string; companyId: string }): Record<string, string> {
+  const resolveHostForUrl = (rawHost: string): string => {
+    const host = rawHost.trim();
+    if (!host || host === "0.0.0.0" || host === "::") return "localhost";
+    if (host.includes(":") && !host.startsWith("[") && !host.endsWith("]")) return `[${host}]`;
+    return host;
+  };
+  const vars: Record<string, string> = {
+    AGENT_COMPANY_AGENT_ID: agent.id,
+    AGENT_COMPANY_COMPANY_ID: agent.companyId,
+  };
+  const runtimeHost = resolveHostForUrl(
+    process.env.AGENT_COMPANY_LISTEN_HOST ?? process.env.HOST ?? "localhost",
+  );
+  const runtimePort = process.env.AGENT_COMPANY_LISTEN_PORT ?? process.env.PORT ?? "3100";
+  const apiUrl = process.env.AGENT_COMPANY_API_URL ?? `http://${runtimeHost}:${runtimePort}`;
+  vars.AGENT_COMPANY_API_URL = apiUrl;
+  return vars;
+}
+
+export function defaultPathForPlatform() {
+  if (process.platform === "win32") {
+    return "C:\\Windows\\System32;C:\\Windows;C:\\Windows\\System32\\Wbem";
+  }
+  return "/usr/local/bin:/opt/homebrew/bin:/usr/local/sbin:/usr/bin:/bin:/usr/sbin:/sbin";
+}
+
+function windowsPathExts(env: NodeJS.ProcessEnv): string[] {
+  return (env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";").filter(Boolean);
+}
+
+async function pathExists(candidate: string) {
+  try {
+    await fs.access(candidate, process.platform === "win32" ? fsConstants.F_OK : fsConstants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+async function resolveCommandPath(command: string, cwd: string, env: NodeJS.ProcessEnv): Promise<string | null> {
+  const hasPathSeparator = command.includes("/") || command.includes("\\");
+  if (hasPathSeparator) {
+    const absolute = path.isAbsolute(command) ? command : path.resolve(cwd, command);
+    return (await pathExists(absolute)) ? absolute : null;
+  }
+
+  const pathValue = env.PATH ?? env.Path ?? "";
+  const delimiter = process.platform === "win32" ? ";" : ":";
+  const dirs = pathValue.split(delimiter).filter(Boolean);
+  const exts = process.platform === "win32" ? windowsPathExts(env) : [""];
+  const hasExtension = process.platform === "win32" && path.extname(command).length > 0;
+
+  for (const dir of dirs) {
+    const candidates =
+      process.platform === "win32"
+        ? hasExtension
+          ? [path.join(dir, command)]
+          : exts.map((ext) => path.join(dir, `${command}${ext}`))
+        : [path.join(dir, command)];
+    for (const candidate of candidates) {
+      if (await pathExists(candidate)) return candidate;
+    }
+  }
+
+  return null;
+}
+
+function quoteForCmd(arg: string) {
+  if (!arg.length) return '""';
+  const escaped = arg.replace(/"/g, '""');
+  return /[\s"&<>|^()]/.test(escaped) ? `"${escaped}"` : escaped;
+}
+
+async function resolveSpawnTarget(
+  command: string,
+  args: string[],
+  cwd: string,
+  env: NodeJS.ProcessEnv,
+): Promise<SpawnTarget> {
+  const resolved = await resolveCommandPath(command, cwd, env);
+  const executable = resolved ?? command;
+
+  if (process.platform !== "win32") {
+    return { command: executable, args };
+  }
+
+  if (/\.(cmd|bat)$/i.test(executable)) {
+    const shell = env.ComSpec || process.env.ComSpec || "cmd.exe";
+    const commandLine = [quoteForCmd(executable), ...args.map(quoteForCmd)].join(" ");
+    return {
+      command: shell,
+      args: ["/d", "/s", "/c", commandLine],
+    };
+  }
+
+  return { command: executable, args };
+}
+
+export function ensurePathInEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {
+  if (typeof env.PATH === "string" && env.PATH.length > 0) return env;
+  if (typeof env.Path === "string" && env.Path.length > 0) return env;
+  return { ...env, PATH: defaultPathForPlatform() };
+}
+
+export async function ensureAbsoluteDirectory(
+  cwd: string,
+  opts: { createIfMissing?: boolean } = {},
+) {
+  if (!path.isAbsolute(cwd)) {
+    throw new Error(`Working directory must be an absolute path: "${cwd}"`);
+  }
+
+  const assertDirectory = async () => {
+    const stats = await fs.stat(cwd);
+    if (!stats.isDirectory()) {
+      throw new Error(`Working directory is not a directory: "${cwd}"`);
+    }
+  };
+
+  try {
+    await assertDirectory();
+    return;
+  } catch (err) {
+    const code = (err as NodeJS.ErrnoException).code;
+    if (!opts.createIfMissing || code !== "ENOENT") {
+      if (code === "ENOENT") {
+        throw new Error(`Working directory does not exist: "${cwd}"`);
+      }
+      throw err instanceof Error ? err : new Error(String(err));
+    }
+  }
+
+  try {
+    await fs.mkdir(cwd, { recursive: true });
+    await assertDirectory();
+  } catch (err) {
+    const reason = err instanceof Error ? err.message : String(err);
+    throw new Error(`Could not create working directory "${cwd}": ${reason}`);
+  }
+}
+
+export async function ensureCommandResolvable(command: string, cwd: string, env: NodeJS.ProcessEnv) {
+  const resolved = await resolveCommandPath(command, cwd, env);
+  if (resolved) return;
+  if (command.includes("/") || command.includes("\\")) {
+    const absolute = path.isAbsolute(command) ? command : path.resolve(cwd, command);
+    throw new Error(`Command is not executable: "${command}" (resolved: "${absolute}")`);
+  }
+  throw new Error(`Command not found in PATH: "${command}"`);
+}
+
+export async function runChildProcess(
+  runId: string,
+  command: string,
+  args: string[],
+  opts: {
+    cwd: string;
+    env: Record<string, string>;
+    timeoutSec: number;
+    graceSec: number;
+    onLog: (stream: "stdout" | "stderr", chunk: string) => Promise<void>;
+    onLogError?: (err: unknown, runId: string, message: string) => void;
+    stdin?: string;
+  },
+): Promise<RunProcessResult> {
+  const onLogError = opts.onLogError ?? ((err, id, msg) => console.warn({ err, runId: id }, msg));
+
+  return new Promise<RunProcessResult>((resolve, reject) => {
+    const rawMerged: NodeJS.ProcessEnv = { ...process.env, ...opts.env };
+
+    // Strip Claude Code nesting-guard env vars so spawned `claude` processes
+    // don't refuse to start with "cannot be launched inside another session".
+    // These vars leak in when the AgentCompany server itself is started from
+    // within a Claude Code session (e.g. `npx agentcompany run` in a terminal
+    // owned by Claude Code) or when cron inherits a contaminated shell env.
+    const CLAUDE_CODE_NESTING_VARS = [
+      "CLAUDECODE",
+      "CLAUDE_CODE_ENTRYPOINT",
+      "CLAUDE_CODE_SESSION",
+      "CLAUDE_CODE_PARENT_SESSION",
+    ] as const;
+    for (const key of CLAUDE_CODE_NESTING_VARS) {
+      delete rawMerged[key];
+    }
+
+    const mergedEnv = ensurePathInEnv(rawMerged);
+    void resolveSpawnTarget(command, args, opts.cwd, mergedEnv)
+      .then((target) => {
+        const child = spawn(target.command, target.args, {
+          cwd: opts.cwd,
+          env: mergedEnv,
+          shell: false,
+          stdio: [opts.stdin != null ? "pipe" : "ignore", "pipe", "pipe"],
+        }) as ChildProcessWithEvents;
+
+        if (opts.stdin != null && child.stdin) {
+          child.stdin.write(opts.stdin);
+          child.stdin.end();
+        }
+
+        runningProcesses.set(runId, { child, graceSec: opts.graceSec });
+
+        let timedOut = false;
+        let stdout = "";
+        let stderr = "";
+        let logChain: Promise<void> = Promise.resolve();
+
+        const timeout =
+          opts.timeoutSec > 0
+            ? setTimeout(() => {
+                timedOut = true;
+                child.kill("SIGTERM");
+                setTimeout(() => {
+                  if (!child.killed) {
+                    child.kill("SIGKILL");
+                  }
+                }, Math.max(1, opts.graceSec) * 1000);
+              }, opts.timeoutSec * 1000)
+            : null;
+
+        child.stdout?.on("data", (chunk: unknown) => {
+          const text = String(chunk);
+          stdout = appendWithCap(stdout, text);
+          logChain = logChain
+            .then(() => opts.onLog("stdout", text))
+            .catch((err) => onLogError(err, runId, "failed to append stdout log chunk"));
+        });
+
+        child.stderr?.on("data", (chunk: unknown) => {
+          const text = String(chunk);
+          stderr = appendWithCap(stderr, text);
+          logChain = logChain
+            .then(() => opts.onLog("stderr", text))
+            .catch((err) => onLogError(err, runId, "failed to append stderr log chunk"));
+        });
+
+        child.on("error", (err: Error) => {
+          if (timeout) clearTimeout(timeout);
+          runningProcesses.delete(runId);
+          const errno = (err as NodeJS.ErrnoException).code;
+          const pathValue = mergedEnv.PATH ?? mergedEnv.Path ?? "";
+          const msg =
+            errno === "ENOENT"
+              ? `Failed to start command "${command}" in "${opts.cwd}". Verify adapter command, working directory, and PATH (${pathValue}).`
+              : `Failed to start command "${command}" in "${opts.cwd}": ${err.message}`;
+          reject(new Error(msg));
+        });
+
+        child.on("close", (code: number | null, signal: NodeJS.Signals | null) => {
+          if (timeout) clearTimeout(timeout);
+          runningProcesses.delete(runId);
+          void logChain.finally(() => {
+            resolve({
+              exitCode: code,
+              signal,
+              timedOut,
+              stdout,
+              stderr,
+            });
+          });
+        });
+      })
+      .catch(reject);
+  });
+}
diff --git a/packages/adapter-utils/src/types.ts b/packages/adapter-utils/src/types.ts
new file mode 100644
index 00000000..6503e5a1
--- /dev/null
+++ b/packages/adapter-utils/src/types.ts
@@ -0,0 +1,250 @@
+// ---------------------------------------------------------------------------
+// Minimal adapter-facing interfaces (no drizzle dependency)
+// ---------------------------------------------------------------------------
+
+export interface AdapterAgent {
+  id: string;
+  companyId: string;
+  name: string;
+  adapterType: string | null;
+  adapterConfig: unknown;
+}
+
+export interface AdapterRuntime {
+  /**
+   * Legacy single session id view. Prefer `sessionParams` + `sessionDisplayId`.
+   */
+  sessionId: string | null;
+  sessionParams: Record<string, unknown> | null;
+  sessionDisplayId: string | null;
+  taskKey: string | null;
+}
+
+// ---------------------------------------------------------------------------
+// Execution types (moved from server/src/adapters/types.ts)
+// ---------------------------------------------------------------------------
+
+export interface UsageSummary {
+  inputTokens: number;
+  outputTokens: number;
+  cachedInputTokens?: number;
+}
+
+export type AdapterBillingType = "api" | "subscription" | "unknown";
+
+export interface AdapterRuntimeServiceReport {
+  id?: string | null;
+  projectId?: string | null;
+  projectWorkspaceId?: string | null;
+  issueId?: string | null;
+  scopeType?: "project_workspace" | "execution_workspace" | "run" | "agent";
+  scopeId?: string | null;
+  serviceName: string;
+  status?: "starting" | "running" | "stopped" | "failed";
+  lifecycle?: "shared" | "ephemeral";
+  reuseKey?: string | null;
+  command?: string | null;
+  cwd?: string | null;
+  port?: number | null;
+  url?: string | null;
+  providerRef?: string | null;
+  ownerAgentId?: string | null;
+  stopPolicy?: Record<string, unknown> | null;
+  healthStatus?: "unknown" | "healthy" | "unhealthy";
+}
+
+export interface AdapterExecutionResult {
+  exitCode: number | null;
+  signal: string | null;
+  timedOut: boolean;
+  errorMessage?: string | null;
+  errorCode?: string | null;
+  errorMeta?: Record<string, unknown>;
+  usage?: UsageSummary;
+  /**
+   * Legacy single session id output. Prefer `sessionParams` + `sessionDisplayId`.
+   */
+  sessionId?: string | null;
+  sessionParams?: Record<string, unknown> | null;
+  sessionDisplayId?: string | null;
+  provider?: string | null;
+  model?: string | null;
+  billingType?: AdapterBillingType | null;
+  costUsd?: number | null;
+  resultJson?: Record<string, unknown> | null;
+  runtimeServices?: AdapterRuntimeServiceReport[];
+  summary?: string | null;
+  clearSession?: boolean;
+  question?: {
+    prompt: string;
+    choices: Array<{
+      key: string;
+      label: string;
+      description?: string;
+    }>;
+  } | null;
+}
+
+export interface AdapterSessionCodec {
+  deserialize(raw: unknown): Record<string, unknown> | null;
+  serialize(params: Record<string, unknown> | null): Record<string, unknown> | null;
+  getDisplayId?: (params: Record<string, unknown> | null) => string | null;
+}
+
+export interface AdapterInvocationMeta {
+  adapterType: string;
+  command: string;
+  cwd?: string;
+  commandArgs?: string[];
+  commandNotes?: string[];
+  env?: Record<string, string>;
+  prompt?: string;
+  context?: Record<string, unknown>;
+}
+
+export interface AdapterExecutionContext {
+  runId: string;
+  agent: AdapterAgent;
+  runtime: AdapterRuntime;
+  config: Record<string, unknown>;
+  context: Record<string, unknown>;
+  onLog: (stream: "stdout" | "stderr", chunk: string) => Promise<void>;
+  onMeta?: (meta: AdapterInvocationMeta) => Promise<void>;
+  authToken?: string;
+}
+
+export interface AdapterModel {
+  id: string;
+  label: string;
+}
+
+export type AdapterEnvironmentCheckLevel = "info" | "warn" | "error";
+
+export interface AdapterEnvironmentCheck {
+  code: string;
+  level: AdapterEnvironmentCheckLevel;
+  message: string;
+  detail?: string | null;
+  hint?: string | null;
+}
+
+export type AdapterEnvironmentTestStatus = "pass" | "warn" | "fail";
+
+export interface AdapterEnvironmentTestResult {
+  adapterType: string;
+  status: AdapterEnvironmentTestStatus;
+  checks: AdapterEnvironmentCheck[];
+  testedAt: string;
+}
+
+export interface AdapterEnvironmentTestContext {
+  companyId: string;
+  adapterType: string;
+  config: Record<string, unknown>;
+  deployment?: {
+    mode?: "local_trusted" | "authenticated";
+    exposure?: "private" | "public";
+    bindHost?: string | null;
+    allowedHostnames?: string[];
+  };
+}
+
+/** Payload for the onHireApproved adapter lifecycle hook (e.g. join-request or hire_agent approval). */
+export interface HireApprovedPayload {
+  companyId: string;
+  agentId: string;
+  agentName: string;
+  adapterType: string;
+  /** "join_request" | "approval" */
+  source: "join_request" | "approval";
+  sourceId: string;
+  approvedAt: string;
+  /** Canonical operator-facing message for cloud adapters to show the user. */
+  message: string;
+}
+
+/** Result of onHireApproved hook; failures are non-fatal to the approval flow. */
+export interface HireApprovedHookResult {
+  ok: boolean;
+  error?: string;
+  detail?: Record<string, unknown>;
+}
+
+export interface ServerAdapterModule {
+  type: string;
+  execute(ctx: AdapterExecutionContext): Promise<AdapterExecutionResult>;
+  testEnvironment(ctx: AdapterEnvironmentTestContext): Promise<AdapterEnvironmentTestResult>;
+  sessionCodec?: AdapterSessionCodec;
+  supportsLocalAgentJwt?: boolean;
+  models?: AdapterModel[];
+  listModels?: () => Promise<AdapterModel[]>;
+  agentConfigurationDoc?: string;
+  /**
+   * Optional lifecycle hook when an agent is approved/hired (join-request or hire_agent approval).
+   * adapterConfig is the agent's adapter config so the adapter can e.g. send a callback to a configured URL.
+   */
+  onHireApproved?: (
+    payload: HireApprovedPayload,
+    adapterConfig: Record<string, unknown>,
+  ) => Promise<HireApprovedHookResult>;
+}
+
+// ---------------------------------------------------------------------------
+// UI types (moved from ui/src/adapters/types.ts)
+// ---------------------------------------------------------------------------
+
+export type TranscriptEntry =
+  | { kind: "assistant"; ts: string; text: string; delta?: boolean }
+  | { kind: "thinking"; ts: string; text: string; delta?: boolean }
+  | { kind: "user"; ts: string; text: string }
+  | { kind: "tool_call"; ts: string; name: string; input: unknown; toolUseId?: string }
+  | { kind: "tool_result"; ts: string; toolUseId: string; content: string; isError: boolean }
+  | { kind: "init"; ts: string; model: string; sessionId: string }
+  | { kind: "result"; ts: string; text: string; inputTokens: number; outputTokens: number; cachedTokens: number; costUsd: number; subtype: string; isError: boolean; errors: string[] }
+  | { kind: "stderr"; ts: string; text: string }
+  | { kind: "system"; ts: string; text: string }
+  | { kind: "stdout"; ts: string; text: string };
+
+export type StdoutLineParser = (line: string, ts: string) => TranscriptEntry[];
+
+// ---------------------------------------------------------------------------
+// CLI types (moved from cli/src/adapters/types.ts)
+// ---------------------------------------------------------------------------
+
+export interface CLIAdapterModule {
+  type: string;
+  formatStdoutEvent: (line: string, debug: boolean) => void;
+}
+
+// ---------------------------------------------------------------------------
+// UI config form values (moved from ui/src/components/AgentConfigForm.tsx)
+// ---------------------------------------------------------------------------
+
+export interface CreateConfigValues {
+  adapterType: string;
+  cwd: string;
+  instructionsFilePath?: string;
+  promptTemplate: string;
+  model: string;
+  thinkingEffort: string;
+  chrome: boolean;
+  dangerouslySkipPermissions: boolean;
+  search: boolean;
+  dangerouslyBypassSandbox: boolean;
+  command: string;
+  args: string;
+  extraArgs: string;
+  envVars: string;
+  envBindings: Record<string, unknown>;
+  url: string;
+  bootstrapPrompt: string;
+  payloadTemplateJson?: string;
+  workspaceStrategyType?: string;
+  workspaceBaseRef?: string;
+  workspaceBranchTemplate?: string;
+  worktreeParentDir?: string;
+  runtimeServicesJson?: string;
+  maxTurnsPerRun: number;
+  heartbeatEnabled: boolean;
+  intervalSec: number;
+}
diff --git a/packages/adapter-utils/tsconfig.json b/packages/adapter-utils/tsconfig.json
new file mode 100644
index 00000000..5a24989c
--- /dev/null
+++ b/packages/adapter-utils/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
new file mode 100644
index 00000000..72c0f5f9
--- /dev/null
+++ b/pnpm-lock.yaml
@@ -0,0 +1,5673 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+importers:
+
+  .:
+    dependencies:
+      '@agentcompany/adapter-claude-local':
+        specifier: workspace:*
+        version: link:packages/adapter-claude-local
+      '@agentcompany/adapter-codex-local':
+        specifier: workspace:*
+        version: link:packages/adapter-codex-local
+      '@agentcompany/adapter-gemini-local':
+        specifier: workspace:*
+        version: link:packages/adapter-gemini-local
+      '@agentcompany/adapter-opencode-local':
+        specifier: workspace:*
+        version: link:packages/adapter-opencode-local
+      '@agentcompany/adapter-utils':
+        specifier: workspace:*
+        version: link:packages/adapter-utils
+      '@fontsource-variable/jetbrains-mono':
+        specifier: 5.2.8
+        version: 5.2.8
+      '@fontsource-variable/outfit':
+        specifier: 5.2.8
+        version: 5.2.8
+      '@phosphor-icons/react':
+        specifier: 2.1.10
+        version: 2.1.10(react-dom@19.2.4(react@19.2.4))(react@19.2.4)
+      clsx:
+        specifier: 2.1.1
+        version: 2.1.1
+      electron-log:
+        specifier: 5.4.3
+        version: 5.4.3
+      electron-updater:
+        specifier: 6.8.3
+        version: 6.8.3
+      framer-motion:
+        specifier: 12.36.0
+        version: 12.36.0(react-dom@19.2.4(react@19.2.4))(react@19.2.4)
+      react:
+        specifier: 19.2.4
+        version: 19.2.4
+      react-dom:
+        specifier: 19.2.4
+        version: 19.2.4(react@19.2.4)
+      tailwind-merge:
+        specifier: 3.5.0
+        version: 3.5.0
+      zod:
+        specifier: 4.3.6
+        version: 4.3.6
+    devDependencies:
+      '@eslint/js':
+        specifier: 9.38.0
+        version: 9.38.0
+      '@playwright/test':
+        specifier: 1.58.2
+        version: 1.58.2
+      '@tailwindcss/vite':
+        specifier: 4.2.1
+        version: 4.2.1(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))
+      '@types/node':
+        specifier: ^25.2.3
+        version: 25.5.0
+      '@types/react':
+        specifier: ^19.2.2
+        version: 19.2.14
+      '@types/react-dom':
+        specifier: ^19.2.2
+        version: 19.2.3(@types/react@19.2.14)
+      '@vitejs/plugin-react':
+        specifier: ^5.0.0
+        version: 5.2.0(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))
+      electron:
+        specifier: 39.8.0
+        version: 39.8.0
+      electron-builder:
+        specifier: 26.8.1
+        version: 26.8.1(electron-builder-squirrel-windows@26.8.1)
+      electron-vite:
+        specifier: 5.0.0
+        version: 5.0.0(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))
+      eslint:
+        specifier: 9.38.0
+        version: 9.38.0(jiti@2.6.1)
+      eslint-plugin-react-hooks:
+        specifier: 7.0.0
+        version: 7.0.0(eslint@9.38.0(jiti@2.6.1))
+      eslint-plugin-react-refresh:
+        specifier: 0.4.24
+        version: 0.4.24(eslint@9.38.0(jiti@2.6.1))
+      globals:
+        specifier: 16.4.0
+        version: 16.4.0
+      tailwindcss:
+        specifier: 4.2.1
+        version: 4.2.1
+      typescript:
+        specifier: 5.9.3
+        version: 5.9.3
+      typescript-eslint:
+        specifier: 8.46.1
+        version: 8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      vite:
+        specifier: ^7.0.0
+        version: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)
+      vitest:
+        specifier: 4.1.0
+        version: 4.1.0(@types/node@25.5.0)(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))
+
+  packages/adapter-claude-local:
+    dependencies:
+      '@agentcompany/adapter-utils':
+        specifier: workspace:*
+        version: link:../adapter-utils
+      picocolors:
+        specifier: ^1.1.1
+        version: 1.1.1
+    devDependencies:
+      '@types/node':
+        specifier: ^24.6.0
+        version: 24.12.0
+      typescript:
+        specifier: ^5.7.3
+        version: 5.9.3
+
+  packages/adapter-codex-local:
+    dependencies:
+      '@agentcompany/adapter-utils':
+        specifier: workspace:*
+        version: link:../adapter-utils
+      picocolors:
+        specifier: ^1.1.1
+        version: 1.1.1
+    devDependencies:
+      '@types/node':
+        specifier: ^24.6.0
+        version: 24.12.0
+      typescript:
+        specifier: ^5.7.3
+        version: 5.9.3
+
+  packages/adapter-gemini-local:
+    dependencies:
+      '@agentcompany/adapter-utils':
+        specifier: workspace:*
+        version: link:../adapter-utils
+      picocolors:
+        specifier: ^1.1.1
+        version: 1.1.1
+    devDependencies:
+      '@types/node':
+        specifier: ^24.6.0
+        version: 24.12.0
+      typescript:
+        specifier: ^5.7.3
+        version: 5.9.3
+
+  packages/adapter-opencode-local:
+    dependencies:
+      '@agentcompany/adapter-utils':
+        specifier: workspace:*
+        version: link:../adapter-utils
+      picocolors:
+        specifier: ^1.1.1
+        version: 1.1.1
+    devDependencies:
+      '@types/node':
+        specifier: ^24.6.0
+        version: 24.12.0
+      typescript:
+        specifier: ^5.7.3
+        version: 5.9.3
+
+  packages/adapter-utils:
+    devDependencies:
+      '@types/node':
+        specifier: ^24.6.0
+        version: 24.12.0
+      typescript:
+        specifier: ^5.7.3
+        version: 5.9.3
+
+packages:
+
+  7zip-bin@5.2.0:
+    resolution: {integrity: sha512-ukTPVhqG4jNzMro2qA9HSCSSVJN3aN7tlb+hfqYCt3ER0yWroeA2VR38MNrOHLQ/cVj+DaIMad0kFCtWWowh/A==}
+
+  '@babel/code-frame@7.29.0':
+    resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/compat-data@7.29.0':
+    resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/core@7.29.0':
+    resolution: {integrity: sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/generator@7.29.1':
+    resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-compilation-targets@7.28.6':
+    resolution: {integrity: sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-globals@7.28.0':
+    resolution: {integrity: sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-imports@7.28.6':
+    resolution: {integrity: sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-transforms@7.28.6':
+    resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
+  '@babel/helper-plugin-utils@7.28.6':
+    resolution: {integrity: sha512-S9gzZ/bz83GRysI7gAD4wPT/AI3uCnY+9xn+Mx/KPs2JwHJIz1W8PZkg2cqyt3RNOBM8ejcXhV6y8Og7ly/Dug==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-string-parser@7.27.1':
+    resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-validator-identifier@7.28.5':
+    resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-validator-option@7.27.1':
+    resolution: {integrity: sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helpers@7.28.6':
+    resolution: {integrity: sha512-xOBvwq86HHdB7WUDTfKfT/Vuxh7gElQ+Sfti2Cy6yIWNW05P8iUslOVcZ4/sKbE+/jQaukQAdz/gf3724kYdqw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/parser@7.29.0':
+    resolution: {integrity: sha512-IyDgFV5GeDUVX4YdF/3CPULtVGSXXMLh1xVIgdCgxApktqnQV0r7/8Nqthg+8YLGaAtdyIlo2qIdZrbCv4+7ww==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
+  '@babel/plugin-transform-arrow-functions@7.27.1':
+    resolution: {integrity: sha512-8Z4TGic6xW70FKThA5HYEKKyBpOOsucTOD1DjU3fZxDg+K3zBJcXMFnt/4yQiZnf5+MiOMSXQ9PaEK/Ilh1DeA==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-transform-react-jsx-self@7.27.1':
+    resolution: {integrity: sha512-6UzkCs+ejGdZ5mFFC/OCUrv028ab2fp1znZmCZjAOBKiBK2jXD1O+BPSfX8X2qjJ75fZBMSnQn3Rq2mrBJK2mw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-transform-react-jsx-source@7.27.1':
+    resolution: {integrity: sha512-zbwoTsBruTeKB9hSq73ha66iFeJHuaFkUbwvqElnygoNbj/jHRsSeokowZFN3CZ64IvEqcmmkVe89OPXc7ldAw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/template@7.28.6':
+    resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/traverse@7.29.0':
+    resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/types@7.29.0':
+    resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
+    engines: {node: '>=6.9.0'}
+
+  '@develar/schema-utils@2.6.5':
+    resolution: {integrity: sha512-0cp4PsWQ/9avqTVMCtZ+GirikIA36ikvjtHweU4/j8yLtgObI0+JUPhYFScgwlteveGB1rt3Cm8UhN04XayDig==}
+    engines: {node: '>= 8.9.0'}
+
+  '@electron/asar@3.4.1':
+    resolution: {integrity: sha512-i4/rNPRS84t0vSRa2HorerGRXWyF4vThfHesw0dmcWHp+cspK743UanA0suA5Q5y8kzY2y6YKrvbIUn69BCAiA==}
+    engines: {node: '>=10.12.0'}
+    hasBin: true
+
+  '@electron/fuses@1.8.0':
+    resolution: {integrity: sha512-zx0EIq78WlY/lBb1uXlziZmDZI4ubcCXIMJ4uGjXzZW0nS19TjSPeXPAjzzTmKQlJUZm0SbmZhPKP7tuQ1SsEw==}
+    hasBin: true
+
+  '@electron/get@2.0.3':
+    resolution: {integrity: sha512-Qkzpg2s9GnVV2I2BjRksUi43U5e6+zaQMcjoJy0C+C5oxaKl+fmckGDQFtRpZpZV0NQekuZZ+tGz7EA9TVnQtQ==}
+    engines: {node: '>=12'}
+
+  '@electron/get@3.1.0':
+    resolution: {integrity: sha512-F+nKc0xW+kVbBRhFzaMgPy3KwmuNTYX1fx6+FxxoSnNgwYX6LD7AKBTWkU0MQ6IBoe7dz069CNkR673sPAgkCQ==}
+    engines: {node: '>=14'}
+
+  '@electron/notarize@2.5.0':
+    resolution: {integrity: sha512-jNT8nwH1f9X5GEITXaQ8IF/KdskvIkOFfB2CvwumsveVidzpSc+mvhhTMdAGSYF3O+Nq49lJ7y+ssODRXu06+A==}
+    engines: {node: '>= 10.0.0'}
+
+  '@electron/osx-sign@1.3.3':
+    resolution: {integrity: sha512-KZ8mhXvWv2rIEgMbWZ4y33bDHyUKMXnx4M0sTyPNK/vcB81ImdeY9Ggdqy0SWbMDgmbqyQ+phgejh6V3R2QuSg==}
+    engines: {node: '>=12.0.0'}
+    hasBin: true
+
+  '@electron/rebuild@4.0.3':
+    resolution: {integrity: sha512-u9vpTHRMkOYCs/1FLiSVAFZ7FbjsXK+bQuzviJZa+lG7BHZl1nz52/IcGvwa3sk80/fc3llutBkbCq10Vh8WQA==}
+    engines: {node: '>=22.12.0'}
+    hasBin: true
+
+  '@electron/universal@2.0.3':
+    resolution: {integrity: sha512-Wn9sPYIVFRFl5HmwMJkARCCf7rqK/EurkfQ/rJZ14mHP3iYTjZSIOSVonEAnhWeAXwtw7zOekGRlc6yTtZ0t+g==}
+    engines: {node: '>=16.4'}
+
+  '@electron/windows-sign@1.2.2':
+    resolution: {integrity: sha512-dfZeox66AvdPtb2lD8OsIIQh12Tp0GNCRUDfBHIKGpbmopZto2/A8nSpYYLoedPIHpqkeblZ/k8OV0Gy7PYuyQ==}
+    engines: {node: '>=14.14'}
+    hasBin: true
+
+  '@esbuild/aix-ppc64@0.25.12':
+    resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
+  '@esbuild/aix-ppc64@0.27.4':
+    resolution: {integrity: sha512-cQPwL2mp2nSmHHJlCyoXgHGhbEPMrEEU5xhkcy3Hs/O7nGZqEpZ2sUtLaL9MORLtDfRvVl2/3PAuEkYZH0Ty8Q==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
+  '@esbuild/android-arm64@0.25.12':
+    resolution: {integrity: sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
+  '@esbuild/android-arm64@0.27.4':
+    resolution: {integrity: sha512-gdLscB7v75wRfu7QSm/zg6Rx29VLdy9eTr2t44sfTW7CxwAtQghZ4ZnqHk3/ogz7xao0QAgrkradbBzcqFPasw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
+  '@esbuild/android-arm@0.25.12':
+    resolution: {integrity: sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
+  '@esbuild/android-arm@0.27.4':
+    resolution: {integrity: sha512-X9bUgvxiC8CHAGKYufLIHGXPJWnr0OCdR0anD2e21vdvgCI8lIfqFbnoeOz7lBjdrAGUhqLZLcQo6MLhTO2DKQ==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
+  '@esbuild/android-x64@0.25.12':
+    resolution: {integrity: sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
+  '@esbuild/android-x64@0.27.4':
+    resolution: {integrity: sha512-PzPFnBNVF292sfpfhiyiXCGSn9HZg5BcAz+ivBuSsl6Rk4ga1oEXAamhOXRFyMcjwr2DVtm40G65N3GLeH1Lvw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
+  '@esbuild/darwin-arm64@0.25.12':
+    resolution: {integrity: sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@esbuild/darwin-arm64@0.27.4':
+    resolution: {integrity: sha512-b7xaGIwdJlht8ZFCvMkpDN6uiSmnxxK56N2GDTMYPr2/gzvfdQN8rTfBsvVKmIVY/X7EM+/hJKEIbbHs9oA4tQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@esbuild/darwin-x64@0.25.12':
+    resolution: {integrity: sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@esbuild/darwin-x64@0.27.4':
+    resolution: {integrity: sha512-sR+OiKLwd15nmCdqpXMnuJ9W2kpy0KigzqScqHI3Hqwr7IXxBp3Yva+yJwoqh7rE8V77tdoheRYataNKL4QrPw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@esbuild/freebsd-arm64@0.25.12':
+    resolution: {integrity: sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-arm64@0.27.4':
+    resolution: {integrity: sha512-jnfpKe+p79tCnm4GVav68A7tUFeKQwQyLgESwEAUzyxk/TJr4QdGog9sqWNcUbr/bZt/O/HXouspuQDd9JxFSw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-x64@0.25.12':
+    resolution: {integrity: sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-x64@0.27.4':
+    resolution: {integrity: sha512-2kb4ceA/CpfUrIcTUl1wrP/9ad9Atrp5J94Lq69w7UwOMolPIGrfLSvAKJp0RTvkPPyn6CIWrNy13kyLikZRZQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@esbuild/linux-arm64@0.25.12':
+    resolution: {integrity: sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@esbuild/linux-arm64@0.27.4':
+    resolution: {integrity: sha512-7nQOttdzVGth1iz57kxg9uCz57dxQLHWxopL6mYuYthohPKEK0vU0C3O21CcBK6KDlkYVcnDXY099HcCDXd9dA==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@esbuild/linux-arm@0.25.12':
+    resolution: {integrity: sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
+  '@esbuild/linux-arm@0.27.4':
+    resolution: {integrity: sha512-aBYgcIxX/wd5n2ys0yESGeYMGF+pv6g0DhZr3G1ZG4jMfruU9Tl1i2Z+Wnj9/KjGz1lTLCcorqE2viePZqj4Eg==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
+  '@esbuild/linux-ia32@0.25.12':
+    resolution: {integrity: sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
+  '@esbuild/linux-ia32@0.27.4':
+    resolution: {integrity: sha512-oPtixtAIzgvzYcKBQM/qZ3R+9TEUd1aNJQu0HhGyqtx6oS7qTpvjheIWBbes4+qu1bNlo2V4cbkISr8q6gRBFA==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
+  '@esbuild/linux-loong64@0.25.12':
+    resolution: {integrity: sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
+  '@esbuild/linux-loong64@0.27.4':
+    resolution: {integrity: sha512-8mL/vh8qeCoRcFH2nM8wm5uJP+ZcVYGGayMavi8GmRJjuI3g1v6Z7Ni0JJKAJW+m0EtUuARb6Lmp4hMjzCBWzA==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
+  '@esbuild/linux-mips64el@0.25.12':
+    resolution: {integrity: sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
+  '@esbuild/linux-mips64el@0.27.4':
+    resolution: {integrity: sha512-1RdrWFFiiLIW7LQq9Q2NES+HiD4NyT8Itj9AUeCl0IVCA459WnPhREKgwrpaIfTOe+/2rdntisegiPWn/r/aAw==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
+  '@esbuild/linux-ppc64@0.25.12':
+    resolution: {integrity: sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@esbuild/linux-ppc64@0.27.4':
+    resolution: {integrity: sha512-tLCwNG47l3sd9lpfyx9LAGEGItCUeRCWeAx6x2Jmbav65nAwoPXfewtAdtbtit/pJFLUWOhpv0FpS6GQAmPrHA==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@esbuild/linux-riscv64@0.25.12':
+    resolution: {integrity: sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@esbuild/linux-riscv64@0.27.4':
+    resolution: {integrity: sha512-BnASypppbUWyqjd1KIpU4AUBiIhVr6YlHx/cnPgqEkNoVOhHg+YiSVxM1RLfiy4t9cAulbRGTNCKOcqHrEQLIw==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@esbuild/linux-s390x@0.25.12':
+    resolution: {integrity: sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
+  '@esbuild/linux-s390x@0.27.4':
+    resolution: {integrity: sha512-+eUqgb/Z7vxVLezG8bVB9SfBie89gMueS+I0xYh2tJdw3vqA/0ImZJ2ROeWwVJN59ihBeZ7Tu92dF/5dy5FttA==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
+  '@esbuild/linux-x64@0.25.12':
+    resolution: {integrity: sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
+  '@esbuild/linux-x64@0.27.4':
+    resolution: {integrity: sha512-S5qOXrKV8BQEzJPVxAwnryi2+Iq5pB40gTEIT69BQONqR7JH1EPIcQ/Uiv9mCnn05jff9umq/5nqzxlqTOg9NA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
+  '@esbuild/netbsd-arm64@0.25.12':
+    resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-arm64@0.27.4':
+    resolution: {integrity: sha512-xHT8X4sb0GS8qTqiwzHqpY00C95DPAq7nAwX35Ie/s+LO9830hrMd3oX0ZMKLvy7vsonee73x0lmcdOVXFzd6Q==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-x64@0.25.12':
+    resolution: {integrity: sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-x64@0.27.4':
+    resolution: {integrity: sha512-RugOvOdXfdyi5Tyv40kgQnI0byv66BFgAqjdgtAKqHoZTbTF2QqfQrFwa7cHEORJf6X2ht+l9ABLMP0dnKYsgg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@esbuild/openbsd-arm64@0.25.12':
+    resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-arm64@0.27.4':
+    resolution: {integrity: sha512-2MyL3IAaTX+1/qP0O1SwskwcwCoOI4kV2IBX1xYnDDqthmq5ArrW94qSIKCAuRraMgPOmG0RDTA74mzYNQA9ow==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-x64@0.25.12':
+    resolution: {integrity: sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-x64@0.27.4':
+    resolution: {integrity: sha512-u8fg/jQ5aQDfsnIV6+KwLOf1CmJnfu1ShpwqdwC0uA7ZPwFws55Ngc12vBdeUdnuWoQYx/SOQLGDcdlfXhYmXQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@esbuild/openharmony-arm64@0.25.12':
+    resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@esbuild/openharmony-arm64@0.27.4':
+    resolution: {integrity: sha512-JkTZrl6VbyO8lDQO3yv26nNr2RM2yZzNrNHEsj9bm6dOwwu9OYN28CjzZkH57bh4w0I2F7IodpQvUAEd1mbWXg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@esbuild/sunos-x64@0.25.12':
+    resolution: {integrity: sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
+  '@esbuild/sunos-x64@0.27.4':
+    resolution: {integrity: sha512-/gOzgaewZJfeJTlsWhvUEmUG4tWEY2Spp5M20INYRg2ZKl9QPO3QEEgPeRtLjEWSW8FilRNacPOg8R1uaYkA6g==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
+  '@esbuild/win32-arm64@0.25.12':
+    resolution: {integrity: sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@esbuild/win32-arm64@0.27.4':
+    resolution: {integrity: sha512-Z9SExBg2y32smoDQdf1HRwHRt6vAHLXcxD2uGgO/v2jK7Y718Ix4ndsbNMU/+1Qiem9OiOdaqitioZwxivhXYg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@esbuild/win32-ia32@0.25.12':
+    resolution: {integrity: sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
+  '@esbuild/win32-ia32@0.27.4':
+    resolution: {integrity: sha512-DAyGLS0Jz5G5iixEbMHi5KdiApqHBWMGzTtMiJ72ZOLhbu/bzxgAe8Ue8CTS3n3HbIUHQz/L51yMdGMeoxXNJw==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
+  '@esbuild/win32-x64@0.25.12':
+    resolution: {integrity: sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
+  '@esbuild/win32-x64@0.27.4':
+    resolution: {integrity: sha512-+knoa0BDoeXgkNvvV1vvbZX4+hizelrkwmGJBdT17t8FNPwG2lKemmuMZlmaNQ3ws3DKKCxpb4zRZEIp3UxFCg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
+  '@eslint-community/eslint-utils@4.9.1':
+    resolution: {integrity: sha512-phrYmNiYppR7znFEdqgfWHXR6NCkZEK7hwWDHZUjit/2/U0r6XvkDl0SYnoM51Hq7FhCGdLDT6zxCCOY1hexsQ==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+    peerDependencies:
+      eslint: ^6.0.0 || ^7.0.0 || >=8.0.0
+
+  '@eslint-community/regexpp@4.12.2':
+    resolution: {integrity: sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==}
+    engines: {node: ^12.0.0 || ^14.0.0 || >=16.0.0}
+
+  '@eslint/config-array@0.21.2':
+    resolution: {integrity: sha512-nJl2KGTlrf9GjLimgIru+V/mzgSK0ABCDQRvxw5BjURL7WfH5uoWmizbH7QB6MmnMBd8cIC9uceWnezL1VZWWw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/config-helpers@0.4.2':
+    resolution: {integrity: sha512-gBrxN88gOIf3R7ja5K9slwNayVcZgK6SOUORm2uBzTeIEfeVaIhOpCtTox3P6R7o2jLFwLFTLnC7kU/RGcYEgw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/core@0.16.0':
+    resolution: {integrity: sha512-nmC8/totwobIiFcGkDza3GIKfAw1+hLiYVrh3I1nIomQ8PEr5cxg34jnkmGawul/ep52wGRAcyeDCNtWKSOj4Q==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/core@0.17.0':
+    resolution: {integrity: sha512-yL/sLrpmtDaFEiUj1osRP4TI2MDz1AddJL+jZ7KSqvBuliN4xqYY54IfdN8qD8Toa6g1iloph1fxQNkjOxrrpQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/eslintrc@3.3.5':
+    resolution: {integrity: sha512-4IlJx0X0qftVsN5E+/vGujTRIFtwuLbNsVUe7TO6zYPDR1O6nFwvwhIKEKSrl6dZchmYBITazxKoUYOjdtjlRg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/js@9.38.0':
+    resolution: {integrity: sha512-UZ1VpFvXf9J06YG9xQBdnzU+kthors6KjhMAl6f4gH4usHyh31rUf2DLGInT8RFYIReYXNSydgPY0V2LuWgl7A==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/object-schema@2.1.7':
+    resolution: {integrity: sha512-VtAOaymWVfZcmZbp6E2mympDIHvyjXs/12LqWYjVw6qjrfF+VK+fyG33kChz3nnK+SU5/NeHOqrTEHS8sXO3OA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/plugin-kit@0.4.1':
+    resolution: {integrity: sha512-43/qtrDUokr7LJqoF2c3+RInu/t4zfrpYdoSDfYyhg52rwLV6TnOvdG4fXm7IkSB3wErkcmJS9iEhjVtOSEjjA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@fontsource-variable/jetbrains-mono@5.2.8':
+    resolution: {integrity: sha512-WBA9elru6Jdp5df2mES55wuOO0WIrn3kpXnI4+W2ek5u3ZgLS9XS4gmIlcQhiZOWEKl95meYdvK7xI+ETLCq/Q==}
+
+  '@fontsource-variable/outfit@5.2.8':
+    resolution: {integrity: sha512-4oUDCZx/Tcz6HZP423w/niqEH31Gks5IsqHV2ZZz1qKHaVIZdj2f0/S1IK2n8jl6Xo0o3N+3RjNHlV9R73ozQA==}
+
+  '@humanfs/core@0.19.1':
+    resolution: {integrity: sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanfs/node@0.16.7':
+    resolution: {integrity: sha512-/zUx+yOsIrG4Y43Eh2peDeKCxlRt/gET6aHfaKpuq267qXdYDFViVHfMaLyygZOnl0kGWxFIgsBy8QFuTLUXEQ==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanwhocodes/module-importer@1.0.1':
+    resolution: {integrity: sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==}
+    engines: {node: '>=12.22'}
+
+  '@humanwhocodes/retry@0.4.3':
+    resolution: {integrity: sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==}
+    engines: {node: '>=18.18'}
+
+  '@isaacs/cliui@8.0.2':
+    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
+    engines: {node: '>=12'}
+
+  '@isaacs/fs-minipass@4.0.1':
+    resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
+    engines: {node: '>=18.0.0'}
+
+  '@jridgewell/gen-mapping@0.3.13':
+    resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
+
+  '@jridgewell/remapping@2.3.5':
+    resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
+
+  '@jridgewell/resolve-uri@3.1.2':
+    resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==}
+    engines: {node: '>=6.0.0'}
+
+  '@jridgewell/sourcemap-codec@1.5.5':
+    resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
+
+  '@jridgewell/trace-mapping@0.3.31':
+    resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
+
+  '@malept/cross-spawn-promise@2.0.0':
+    resolution: {integrity: sha512-1DpKU0Z5ThltBwjNySMC14g0CkbyhCaz9FkhxqNsZI6uAPJXFS8cMXlBKo26FJ8ZuW6S9GCMcR9IO5k2X5/9Fg==}
+    engines: {node: '>= 12.13.0'}
+
+  '@malept/flatpak-bundler@0.4.0':
+    resolution: {integrity: sha512-9QOtNffcOF/c1seMCDnjckb3R9WHcG34tky+FHpNKKCW0wc/scYLwMtO+ptyGUfMW0/b/n4qRiALlaFHc9Oj7Q==}
+    engines: {node: '>= 10.0.0'}
+
+  '@nodelib/fs.scandir@2.1.5':
+    resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
+    engines: {node: '>= 8'}
+
+  '@nodelib/fs.stat@2.0.5':
+    resolution: {integrity: sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==}
+    engines: {node: '>= 8'}
+
+  '@nodelib/fs.walk@1.2.8':
+    resolution: {integrity: sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==}
+    engines: {node: '>= 8'}
+
+  '@npmcli/agent@3.0.0':
+    resolution: {integrity: sha512-S79NdEgDQd/NGCay6TCoVzXSj74skRZIKJcpJjC5lOq34SZzyI6MqtiiWoiVWoVrTcGjNeC4ipbh1VIHlpfF5Q==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  '@npmcli/fs@4.0.0':
+    resolution: {integrity: sha512-/xGlezI6xfGO9NwuJlnwz/K14qD1kCSAGtacBHnGzeAIuJGazcp45KP5NuyARXoKb7cwulAGWVsbeSxdG/cb0Q==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  '@phosphor-icons/react@2.1.10':
+    resolution: {integrity: sha512-vt8Tvq8GLjheAZZYa+YG/pW7HDbov8El/MANW8pOAz4eGxrwhnbfrQZq0Cp4q8zBEu8NIhHdnr+r8thnfRSNYA==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      react: '>= 16.8'
+      react-dom: '>= 16.8'
+
+  '@pkgjs/parseargs@0.11.0':
+    resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
+    engines: {node: '>=14'}
+
+  '@playwright/test@1.58.2':
+    resolution: {integrity: sha512-akea+6bHYBBfA9uQqSYmlJXn61cTa+jbO87xVLCWbTqbWadRVmhxlXATaOjOgcBaWU4ePo0wB41KMFv3o35IXA==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  '@rolldown/pluginutils@1.0.0-rc.3':
+    resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
+
+  '@rollup/rollup-android-arm-eabi@4.59.0':
+    resolution: {integrity: sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==}
+    cpu: [arm]
+    os: [android]
+
+  '@rollup/rollup-android-arm64@4.59.0':
+    resolution: {integrity: sha512-hZ+Zxj3SySm4A/DylsDKZAeVg0mvi++0PYVceVyX7hemkw7OreKdCvW2oQ3T1FMZvCaQXqOTHb8qmBShoqk69Q==}
+    cpu: [arm64]
+    os: [android]
+
+  '@rollup/rollup-darwin-arm64@4.59.0':
+    resolution: {integrity: sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@rollup/rollup-darwin-x64@4.59.0':
+    resolution: {integrity: sha512-ZW2KkwlS4lwTv7ZVsYDiARfFCnSGhzYPdiOU4IM2fDbL+QGlyAbjgSFuqNRbSthybLbIJ915UtZBtmuLrQAT/w==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@rollup/rollup-freebsd-arm64@4.59.0':
+    resolution: {integrity: sha512-EsKaJ5ytAu9jI3lonzn3BgG8iRBjV4LxZexygcQbpiU0wU0ATxhNVEpXKfUa0pS05gTcSDMKpn3Sx+QB9RlTTA==}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@rollup/rollup-freebsd-x64@4.59.0':
+    resolution: {integrity: sha512-d3DuZi2KzTMjImrxoHIAODUZYoUUMsuUiY4SRRcJy6NJoZ6iIqWnJu9IScV9jXysyGMVuW+KNzZvBLOcpdl3Vg==}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@rollup/rollup-linux-arm-gnueabihf@4.59.0':
+    resolution: {integrity: sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==}
+    cpu: [arm]
+    os: [linux]
+
+  '@rollup/rollup-linux-arm-musleabihf@4.59.0':
+    resolution: {integrity: sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==}
+    cpu: [arm]
+    os: [linux]
+
+  '@rollup/rollup-linux-arm64-gnu@4.59.0':
+    resolution: {integrity: sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rollup/rollup-linux-arm64-musl@4.59.0':
+    resolution: {integrity: sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rollup/rollup-linux-loong64-gnu@4.59.0':
+    resolution: {integrity: sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==}
+    cpu: [loong64]
+    os: [linux]
+
+  '@rollup/rollup-linux-loong64-musl@4.59.0':
+    resolution: {integrity: sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==}
+    cpu: [loong64]
+    os: [linux]
+
+  '@rollup/rollup-linux-ppc64-gnu@4.59.0':
+    resolution: {integrity: sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@rollup/rollup-linux-ppc64-musl@4.59.0':
+    resolution: {integrity: sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@rollup/rollup-linux-riscv64-gnu@4.59.0':
+    resolution: {integrity: sha512-NDYMpsXYJJaj+I7UdwIuHHNxXZ/b/N2hR15NyH3m2qAtb/hHPA4g4SuuvrdxetTdndfj9b1WOmy73kcPRoERUg==}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@rollup/rollup-linux-riscv64-musl@4.59.0':
+    resolution: {integrity: sha512-nLckB8WOqHIf1bhymk+oHxvM9D3tyPndZH8i8+35p/1YiVoVswPid2yLzgX7ZJP0KQvnkhM4H6QZ5m0LzbyIAg==}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@rollup/rollup-linux-s390x-gnu@4.59.0':
+    resolution: {integrity: sha512-oF87Ie3uAIvORFBpwnCvUzdeYUqi2wY6jRFWJAy1qus/udHFYIkplYRW+wo+GRUP4sKzYdmE1Y3+rY5Gc4ZO+w==}
+    cpu: [s390x]
+    os: [linux]
+
+  '@rollup/rollup-linux-x64-gnu@4.59.0':
+    resolution: {integrity: sha512-3AHmtQq/ppNuUspKAlvA8HtLybkDflkMuLK4DPo77DfthRb71V84/c4MlWJXixZz4uruIH4uaa07IqoAkG64fg==}
+    cpu: [x64]
+    os: [linux]
+
+  '@rollup/rollup-linux-x64-musl@4.59.0':
+    resolution: {integrity: sha512-2UdiwS/9cTAx7qIUZB/fWtToJwvt0Vbo0zmnYt7ED35KPg13Q0ym1g442THLC7VyI6JfYTP4PiSOWyoMdV2/xg==}
+    cpu: [x64]
+    os: [linux]
+
+  '@rollup/rollup-openbsd-x64@4.59.0':
+    resolution: {integrity: sha512-M3bLRAVk6GOwFlPTIxVBSYKUaqfLrn8l0psKinkCFxl4lQvOSz8ZrKDz2gxcBwHFpci0B6rttydI4IpS4IS/jQ==}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@rollup/rollup-openharmony-arm64@4.59.0':
+    resolution: {integrity: sha512-tt9KBJqaqp5i5HUZzoafHZX8b5Q2Fe7UjYERADll83O4fGqJ49O1FsL6LpdzVFQcpwvnyd0i+K/VSwu/o/nWlA==}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@rollup/rollup-win32-arm64-msvc@4.59.0':
+    resolution: {integrity: sha512-V5B6mG7OrGTwnxaNUzZTDTjDS7F75PO1ae6MJYdiMu60sq0CqN5CVeVsbhPxalupvTX8gXVSU9gq+Rx1/hvu6A==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@rollup/rollup-win32-ia32-msvc@4.59.0':
+    resolution: {integrity: sha512-UKFMHPuM9R0iBegwzKF4y0C4J9u8C6MEJgFuXTBerMk7EJ92GFVFYBfOZaSGLu6COf7FxpQNqhNS4c4icUPqxA==}
+    cpu: [ia32]
+    os: [win32]
+
+  '@rollup/rollup-win32-x64-gnu@4.59.0':
+    resolution: {integrity: sha512-laBkYlSS1n2L8fSo1thDNGrCTQMmxjYY5G0WFWjFFYZkKPjsMBsgJfGf4TLxXrF6RyhI60L8TMOjBMvXiTcxeA==}
+    cpu: [x64]
+    os: [win32]
+
+  '@rollup/rollup-win32-x64-msvc@4.59.0':
+    resolution: {integrity: sha512-2HRCml6OztYXyJXAvdDXPKcawukWY2GpR5/nxKp4iBgiO3wcoEGkAaqctIbZcNB6KlUQBIqt8VYkNSj2397EfA==}
+    cpu: [x64]
+    os: [win32]
+
+  '@sindresorhus/is@4.6.0':
+    resolution: {integrity: sha512-t09vSN3MdfsyCHoFcTRCH/iUtG7OJ0CsjzB8cjAmKc/va/kIgeDI/TxsigdncE/4be734m0cvIYwNaV4i2XqAw==}
+    engines: {node: '>=10'}
+
+  '@standard-schema/spec@1.1.0':
+    resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
+
+  '@szmarczak/http-timer@4.0.6':
+    resolution: {integrity: sha512-4BAffykYOgO+5nzBWYwE3W90sBgLJoUPRWWcL8wlyiM8IB8ipJz3UMJ9KXQd1RKQXpKp8Tutn80HZtWsu2u76w==}
+    engines: {node: '>=10'}
+
+  '@tailwindcss/node@4.2.1':
+    resolution: {integrity: sha512-jlx6sLk4EOwO6hHe1oCGm1Q4AN/s0rSrTTPBGPM0/RQ6Uylwq17FuU8IeJJKEjtc6K6O07zsvP+gDO6MMWo7pg==}
+
+  '@tailwindcss/oxide-android-arm64@4.2.1':
+    resolution: {integrity: sha512-eZ7G1Zm5EC8OOKaesIKuw77jw++QJ2lL9N+dDpdQiAB/c/B2wDh0QPFHbkBVrXnwNugvrbJFk1gK2SsVjwWReg==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [android]
+
+  '@tailwindcss/oxide-darwin-arm64@4.2.1':
+    resolution: {integrity: sha512-q/LHkOstoJ7pI1J0q6djesLzRvQSIfEto148ppAd+BVQK0JYjQIFSK3JgYZJa+Yzi0DDa52ZsQx2rqytBnf8Hw==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-darwin-x64@4.2.1':
+    resolution: {integrity: sha512-/f/ozlaXGY6QLbpvd/kFTro2l18f7dHKpB+ieXz+Cijl4Mt9AI2rTrpq7V+t04nK+j9XBQHnSMdeQRhbGyt6fw==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-freebsd-x64@4.2.1':
+    resolution: {integrity: sha512-5e/AkgYJT/cpbkys/OU2Ei2jdETCLlifwm7ogMC7/hksI2fC3iiq6OcXwjibcIjPung0kRtR3TxEITkqgn0TcA==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.2.1':
+    resolution: {integrity: sha512-Uny1EcVTTmerCKt/1ZuKTkb0x8ZaiuYucg2/kImO5A5Y/kBz41/+j0gxUZl+hTF3xkWpDmHX+TaWhOtba2Fyuw==}
+    engines: {node: '>= 20'}
+    cpu: [arm]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.2.1':
+    resolution: {integrity: sha512-CTrwomI+c7n6aSSQlsPL0roRiNMDQ/YzMD9EjcR+H4f0I1SQ8QqIuPnsVp7QgMkC1Qi8rtkekLkOFjo7OlEFRQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.2.1':
+    resolution: {integrity: sha512-WZA0CHRL/SP1TRbA5mp9htsppSEkWuQ4KsSUumYQnyl8ZdT39ntwqmz4IUHGN6p4XdSlYfJwM4rRzZLShHsGAQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.2.1':
+    resolution: {integrity: sha512-qMFzxI2YlBOLW5PhblzuSWlWfwLHaneBE0xHzLrBgNtqN6mWfs+qYbhryGSXQjFYB1Dzf5w+LN5qbUTPhW7Y5g==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-x64-musl@4.2.1':
+    resolution: {integrity: sha512-5r1X2FKnCMUPlXTWRYpHdPYUY6a1Ar/t7P24OuiEdEOmms5lyqjDRvVY1yy9Rmioh+AunQ0rWiOTPE8F9A3v5g==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+
+  '@tailwindcss/oxide-wasm32-wasi@4.2.1':
+    resolution: {integrity: sha512-MGFB5cVPvshR85MTJkEvqDUnuNoysrsRxd6vnk1Lf2tbiqNlXpHYZqkqOQalydienEWOHHFyyuTSYRsLfxFJ2Q==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+    bundledDependencies:
+      - '@napi-rs/wasm-runtime'
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@tybys/wasm-util'
+      - '@emnapi/wasi-threads'
+      - tslib
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.2.1':
+    resolution: {integrity: sha512-YlUEHRHBGnCMh4Nj4GnqQyBtsshUPdiNroZj8VPkvTZSoHsilRCwXcVKnG9kyi0ZFAS/3u+qKHBdDc81SADTRA==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.2.1':
+    resolution: {integrity: sha512-rbO34G5sMWWyrN/idLeVxAZgAKWrn5LiR3/I90Q9MkA67s6T1oB0xtTe+0heoBvHSpbU9Mk7i6uwJnpo4u21XQ==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [win32]
+
+  '@tailwindcss/oxide@4.2.1':
+    resolution: {integrity: sha512-yv9jeEFWnjKCI6/T3Oq50yQEOqmpmpfzG1hcZsAOaXFQPfzWprWrlHSdGPEF3WQTi8zu8ohC9Mh9J470nT5pUw==}
+    engines: {node: '>= 20'}
+
+  '@tailwindcss/vite@4.2.1':
+    resolution: {integrity: sha512-TBf2sJjYeb28jD2U/OhwdW0bbOsxkWPwQ7SrqGf9sVcoYwZj7rkXljroBO9wKBut9XnmQLXanuDUeqQK0lGg/w==}
+    peerDependencies:
+      vite: ^5.2.0 || ^6 || ^7
+
+  '@types/babel__core@7.20.5':
+    resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
+
+  '@types/babel__generator@7.27.0':
+    resolution: {integrity: sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==}
+
+  '@types/babel__template@7.4.4':
+    resolution: {integrity: sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==}
+
+  '@types/babel__traverse@7.28.0':
+    resolution: {integrity: sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==}
+
+  '@types/cacheable-request@6.0.3':
+    resolution: {integrity: sha512-IQ3EbTzGxIigb1I3qPZc1rWJnH0BmSKv5QYTalEwweFvyBDLSAe24zP0le/hyi7ecGfZVlIVAg4BZqb8WBwKqw==}
+
+  '@types/chai@5.2.3':
+    resolution: {integrity: sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==}
+
+  '@types/debug@4.1.12':
+    resolution: {integrity: sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==}
+
+  '@types/deep-eql@4.0.2':
+    resolution: {integrity: sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==}
+
+  '@types/estree@1.0.8':
+    resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==}
+
+  '@types/fs-extra@9.0.13':
+    resolution: {integrity: sha512-nEnwB++1u5lVDM2UI4c1+5R+FYaKfaAzS4OococimjVm3nQw3TuzH5UNsocrcTBbhnerblyHj4A49qXbIiZdpA==}
+
+  '@types/http-cache-semantics@4.2.0':
+    resolution: {integrity: sha512-L3LgimLHXtGkWikKnsPg0/VFx9OGZaC+eN1u4r+OB1XRqH3meBIAVC2zr1WdMH+RHmnRkqliQAOHNJ/E0j/e0Q==}
+
+  '@types/json-schema@7.0.15':
+    resolution: {integrity: sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==}
+
+  '@types/keyv@3.1.4':
+    resolution: {integrity: sha512-BQ5aZNSCpj7D6K2ksrRCTmKRLEpnPvWDiLPfoGyhZ++8YtiK9d/3DBKPJgry359X/P1PfruyYwvnvwFjuEiEIg==}
+
+  '@types/ms@2.1.0':
+    resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
+
+  '@types/node@22.19.15':
+    resolution: {integrity: sha512-F0R/h2+dsy5wJAUe3tAU6oqa2qbWY5TpNfL/RGmo1y38hiyO1w3x2jPtt76wmuaJI4DQnOBu21cNXQ2STIUUWg==}
+
+  '@types/node@24.12.0':
+    resolution: {integrity: sha512-GYDxsZi3ChgmckRT9HPU0WEhKLP08ev/Yfcq2AstjrDASOYCSXeyjDsHg4v5t4jOj7cyDX3vmprafKlWIG9MXQ==}
+
+  '@types/node@25.5.0':
+    resolution: {integrity: sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw==}
+
+  '@types/plist@3.0.5':
+    resolution: {integrity: sha512-E6OCaRmAe4WDmWNsL/9RMqdkkzDCY1etutkflWk4c+AcjDU07Pcz1fQwTX0TQz+Pxqn9i4L1TU3UFpjnrcDgxA==}
+
+  '@types/react-dom@19.2.3':
+    resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==}
+    peerDependencies:
+      '@types/react': ^19.2.0
+
+  '@types/react@19.2.14':
+    resolution: {integrity: sha512-ilcTH/UniCkMdtexkoCN0bI7pMcJDvmQFPvuPvmEaYA/NSfFTAgdUSLAoVjaRJm7+6PvcM+q1zYOwS4wTYMF9w==}
+
+  '@types/responselike@1.0.3':
+    resolution: {integrity: sha512-H/+L+UkTV33uf49PH5pCAUBVPNj2nDBXTN+qS1dOwyyg24l3CcicicCA7ca+HMvJBZcFgl5r8e+RR6elsb4Lyw==}
+
+  '@types/verror@1.10.11':
+    resolution: {integrity: sha512-RlDm9K7+o5stv0Co8i8ZRGxDbrTxhJtgjqjFyVh/tXQyl/rYtTKlnTvZ88oSTeYREWurwx20Js4kTuKCsFkUtg==}
+
+  '@types/yauzl@2.10.3':
+    resolution: {integrity: sha512-oJoftv0LSuaDZE3Le4DbKX+KS9G36NzOeSap90UIK0yMA/NhKJhqlSGtNDORNRaIbQfzjXDrQa0ytJ6mNRGz/Q==}
+
+  '@typescript-eslint/eslint-plugin@8.46.1':
+    resolution: {integrity: sha512-rUsLh8PXmBjdiPY+Emjz9NX2yHvhS11v0SR6xNJkm5GM1MO9ea/1GoDKlHHZGrOJclL/cZ2i/vRUYVtjRhrHVQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      '@typescript-eslint/parser': ^8.46.1
+      eslint: ^8.57.0 || ^9.0.0
+      typescript: '>=4.8.4 <6.0.0'
+
+  '@typescript-eslint/parser@8.46.1':
+    resolution: {integrity: sha512-6JSSaBZmsKvEkbRUkf7Zj7dru/8ZCrJxAqArcLaVMee5907JdtEbKGsZ7zNiIm/UAkpGUkaSMZEXShnN2D1HZA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0
+      typescript: '>=4.8.4 <6.0.0'
+
+  '@typescript-eslint/project-service@8.46.1':
+    resolution: {integrity: sha512-FOIaFVMHzRskXr5J4Jp8lFVV0gz5ngv3RHmn+E4HYxSJ3DgDzU7fVI1/M7Ijh1zf6S7HIoaIOtln1H5y8V+9Zg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.0.0'
+
+  '@typescript-eslint/scope-manager@8.46.1':
+    resolution: {integrity: sha512-weL9Gg3/5F0pVQKiF8eOXFZp8emqWzZsOJuWRUNtHT+UNV2xSJegmpCNQHy37aEQIbToTq7RHKhWvOsmbM680A==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@typescript-eslint/tsconfig-utils@8.46.1':
+    resolution: {integrity: sha512-X88+J/CwFvlJB+mK09VFqx5FE4H5cXD+H/Bdza2aEWkSb8hnWIQorNcscRl4IEo1Cz9VI/+/r/jnGWkbWPx54g==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.0.0'
+
+  '@typescript-eslint/type-utils@8.46.1':
+    resolution: {integrity: sha512-+BlmiHIiqufBxkVnOtFwjah/vrkF4MtKKvpXrKSPLCkCtAp8H01/VV43sfqA98Od7nJpDcFnkwgyfQbOG0AMvw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0
+      typescript: '>=4.8.4 <6.0.0'
+
+  '@typescript-eslint/types@8.46.1':
+    resolution: {integrity: sha512-C+soprGBHwWBdkDpbaRC4paGBrkIXxVlNohadL5o0kfhsXqOC6GYH2S/Obmig+I0HTDl8wMaRySwrfrXVP8/pQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@typescript-eslint/typescript-estree@8.46.1':
+    resolution: {integrity: sha512-uIifjT4s8cQKFQ8ZBXXyoUODtRoAd7F7+G8MKmtzj17+1UbdzFl52AzRyZRyKqPHhgzvXunnSckVu36flGy8cg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.0.0'
+
+  '@typescript-eslint/utils@8.46.1':
+    resolution: {integrity: sha512-vkYUy6LdZS7q1v/Gxb2Zs7zziuXN0wxqsetJdeZdRe/f5dwJFglmuvZBfTUivCtjH725C1jWCDfpadadD95EDQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0
+      typescript: '>=4.8.4 <6.0.0'
+
+  '@typescript-eslint/visitor-keys@8.46.1':
+    resolution: {integrity: sha512-ptkmIf2iDkNUjdeu2bQqhFPV1m6qTnFFjg7PPDjxKWaMaP0Z6I9l30Jr3g5QqbZGdw8YdYvLp+XnqnWWZOg/NA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@vitejs/plugin-react@5.2.0':
+    resolution: {integrity: sha512-YmKkfhOAi3wsB1PhJq5Scj3GXMn3WvtQ/JC0xoopuHoXSdmtdStOpFrYaT1kie2YgFBcIe64ROzMYRjCrYOdYw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
+
+  '@vitest/expect@4.1.0':
+    resolution: {integrity: sha512-EIxG7k4wlWweuCLG9Y5InKFwpMEOyrMb6ZJ1ihYu02LVj/bzUwn2VMU+13PinsjRW75XnITeFrQBMH5+dLvCDA==}
+
+  '@vitest/mocker@4.1.0':
+    resolution: {integrity: sha512-evxREh+Hork43+Y4IOhTo+h5lGmVRyjqI739Rz4RlUPqwrkFFDF6EMvOOYjTx4E8Tl6gyCLRL8Mu7Ry12a13Tw==}
+    peerDependencies:
+      msw: ^2.4.9
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0-0
+    peerDependenciesMeta:
+      msw:
+        optional: true
+      vite:
+        optional: true
+
+  '@vitest/pretty-format@4.1.0':
+    resolution: {integrity: sha512-3RZLZlh88Ib0J7NQTRATfc/3ZPOnSUn2uDBUoGNn5T36+bALixmzphN26OUD3LRXWkJu4H0s5vvUeqBiw+kS0A==}
+
+  '@vitest/runner@4.1.0':
+    resolution: {integrity: sha512-Duvx2OzQ7d6OjchL+trw+aSrb9idh7pnNfxrklo14p3zmNL4qPCDeIJAK+eBKYjkIwG96Bc6vYuxhqDXQOWpoQ==}
+
+  '@vitest/snapshot@4.1.0':
+    resolution: {integrity: sha512-0Vy9euT1kgsnj1CHttwi9i9o+4rRLEaPRSOJ5gyv579GJkNpgJK+B4HSv/rAWixx2wdAFci1X4CEPjiu2bXIMg==}
+
+  '@vitest/spy@4.1.0':
+    resolution: {integrity: sha512-pz77k+PgNpyMDv2FV6qmk5ZVau6c3R8HC8v342T2xlFxQKTrSeYw9waIJG8KgV9fFwAtTu4ceRzMivPTH6wSxw==}
+
+  '@vitest/utils@4.1.0':
+    resolution: {integrity: sha512-XfPXT6a8TZY3dcGY8EdwsBulFCIw+BeeX0RZn2x/BtiY/75YGh8FeWGG8QISN/WhaqSrE2OrlDgtF8q5uhOTmw==}
+
+  '@xmldom/xmldom@0.8.11':
+    resolution: {integrity: sha512-cQzWCtO6C8TQiYl1ruKNn2U6Ao4o4WBBcbL61yJl84x+j5sOWWFU9X7DpND8XZG3daDppSsigMdfAIl2upQBRw==}
+    engines: {node: '>=10.0.0'}
+
+  abbrev@3.0.1:
+    resolution: {integrity: sha512-AO2ac6pjRB3SJmGJo+v5/aK6Omggp6fsLrs6wN9bd35ulu4cCwaAU9+7ZhXjeqHVkaHThLuzH0nZr0YpCDhygg==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  acorn-jsx@5.3.2:
+    resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
+    peerDependencies:
+      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
+
+  acorn@8.16.0:
+    resolution: {integrity: sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==}
+    engines: {node: '>=0.4.0'}
+    hasBin: true
+
+  agent-base@7.1.4:
+    resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==}
+    engines: {node: '>= 14'}
+
+  ajv-keywords@3.5.2:
+    resolution: {integrity: sha512-5p6WTN0DdTGVQk6VjcEju19IgaHudalcfabD7yhDGeA6bcQnmL+CpveLJq/3hvfwd1aof6L386Ougkx6RfyMIQ==}
+    peerDependencies:
+      ajv: ^6.9.1
+
+  ajv@6.14.0:
+    resolution: {integrity: sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==}
+
+  ansi-regex@5.0.1:
+    resolution: {integrity: sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==}
+    engines: {node: '>=8'}
+
+  ansi-regex@6.2.2:
+    resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
+    engines: {node: '>=12'}
+
+  ansi-styles@4.3.0:
+    resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
+    engines: {node: '>=8'}
+
+  ansi-styles@6.2.3:
+    resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
+    engines: {node: '>=12'}
+
+  app-builder-bin@5.0.0-alpha.12:
+    resolution: {integrity: sha512-j87o0j6LqPL3QRr8yid6c+Tt5gC7xNfYo6uQIQkorAC6MpeayVMZrEDzKmJJ/Hlv7EnOQpaRm53k6ktDYZyB6w==}
+
+  app-builder-lib@26.8.1:
+    resolution: {integrity: sha512-p0Im/Dx5C4tmz8QEE1Yn4MkuPC8PrnlRneMhWJj7BBXQfNTJUshM/bp3lusdEsDbvvfJZpXWnYesgSLvwtM2Zw==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      dmg-builder: 26.8.1
+      electron-builder-squirrel-windows: 26.8.1
+
+  argparse@2.0.1:
+    resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
+
+  assert-plus@1.0.0:
+    resolution: {integrity: sha512-NfJ4UzBCcQGLDlQq7nHxH+tv3kyZ0hHQqF5BO6J7tNJeP5do1llPr8dZ8zHonfhAu0PHAdMkSo+8o0wxg9lZWw==}
+    engines: {node: '>=0.8'}
+
+  assertion-error@2.0.1:
+    resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
+    engines: {node: '>=12'}
+
+  astral-regex@2.0.0:
+    resolution: {integrity: sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==}
+    engines: {node: '>=8'}
+
+  async-exit-hook@2.0.1:
+    resolution: {integrity: sha512-NW2cX8m1Q7KPA7a5M2ULQeZ2wR5qI5PAbw5L0UOMxdioVk9PMZ0h1TmyZEkPYrCvYjDlFICusOu1dlEKAAeXBw==}
+    engines: {node: '>=0.12.0'}
+
+  async@3.2.6:
+    resolution: {integrity: sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==}
+
+  asynckit@0.4.0:
+    resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
+
+  at-least-node@1.0.0:
+    resolution: {integrity: sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==}
+    engines: {node: '>= 4.0.0'}
+
+  balanced-match@1.0.2:
+    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
+
+  balanced-match@4.0.4:
+    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
+    engines: {node: 18 || 20 || >=22}
+
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
+  baseline-browser-mapping@2.10.7:
+    resolution: {integrity: sha512-1ghYO3HnxGec0TCGBXiDLVns4eCSx4zJpxnHrlqFQajmhfKMQBzUGDdkMK7fUW7PTHTeLf+j87aTuKuuwWzMGw==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
+  boolean@3.2.0:
+    resolution: {integrity: sha512-d0II/GO9uf9lfUHH2BQsjxzRJZBdsjgsBiW4BvhWk/3qoKwQFjIDVN19PfX8F2D/r9PCMTtLWjYVCFrpeYUzsw==}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+
+  brace-expansion@1.1.12:
+    resolution: {integrity: sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==}
+
+  brace-expansion@2.0.2:
+    resolution: {integrity: sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==}
+
+  brace-expansion@5.0.4:
+    resolution: {integrity: sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==}
+    engines: {node: 18 || 20 || >=22}
+
+  braces@3.0.3:
+    resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
+    engines: {node: '>=8'}
+
+  browserslist@4.28.1:
+    resolution: {integrity: sha512-ZC5Bd0LgJXgwGqUknZY/vkUQ04r8NXnJZ3yYi4vDmSiZmC/pdSN0NbNRPxZpbtO4uAfDUAFffO8IZoM3Gj8IkA==}
+    engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
+    hasBin: true
+
+  buffer-crc32@0.2.13:
+    resolution: {integrity: sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==}
+
+  buffer-from@1.1.2:
+    resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
+
+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
+  builder-util-runtime@9.5.1:
+    resolution: {integrity: sha512-qt41tMfgHTllhResqM5DcnHyDIWNgzHvuY2jDcYP9iaGpkWxTUzV6GQjDeLnlR1/DtdlcsWQbA7sByMpmJFTLQ==}
+    engines: {node: '>=12.0.0'}
+
+  builder-util@26.8.1:
+    resolution: {integrity: sha512-pm1lTYbGyc90DHgCDO7eo8Rl4EqKLciayNbZqGziqnH9jrlKe8ZANGdityLZU+pJh16dfzjAx2xQq9McuIPEtw==}
+
+  cac@6.7.14:
+    resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
+    engines: {node: '>=8'}
+
+  cacache@19.0.1:
+    resolution: {integrity: sha512-hdsUxulXCi5STId78vRVYEtDAjq99ICAUktLTeTYsLoTE6Z8dS0c8pWNCxwdrk9YfJeobDZc2Y186hD/5ZQgFQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  cacheable-lookup@5.0.4:
+    resolution: {integrity: sha512-2/kNscPhpcxrOigMZzbiWF7dz8ilhb/nIHU3EyZiXWXpeq/au8qJ8VhdftMkty3n7Gj6HIGalQG8oiBNB3AJgA==}
+    engines: {node: '>=10.6.0'}
+
+  cacheable-request@7.0.4:
+    resolution: {integrity: sha512-v+p6ongsrp0yTGbJXjgxPow2+DL93DASP4kXCDKb8/bwRtt9OEF3whggkkDkGNzgcWy2XaF4a8nZglC7uElscg==}
+    engines: {node: '>=8'}
+
+  call-bind-apply-helpers@1.0.2:
+    resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
+    engines: {node: '>= 0.4'}
+
+  callsites@3.1.0:
+    resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
+    engines: {node: '>=6'}
+
+  caniuse-lite@1.0.30001778:
+    resolution: {integrity: sha512-PN7uxFL+ExFJO61aVmP1aIEG4i9whQd4eoSCebav62UwDyp5OHh06zN4jqKSMePVgxHifCw1QJxdRkA1Pisekg==}
+
+  chai@6.2.2:
+    resolution: {integrity: sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==}
+    engines: {node: '>=18'}
+
+  chalk@4.1.2:
+    resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==}
+    engines: {node: '>=10'}
+
+  chownr@3.0.0:
+    resolution: {integrity: sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==}
+    engines: {node: '>=18'}
+
+  chromium-pickle-js@0.2.0:
+    resolution: {integrity: sha512-1R5Fho+jBq0DDydt+/vHWj5KJNJCKdARKOCwZUen84I5BreWoLqRLANH1U87eJy1tiASPtMnGqJJq0ZsLoRPOw==}
+
+  ci-info@4.3.1:
+    resolution: {integrity: sha512-Wdy2Igu8OcBpI2pZePZ5oWjPC38tmDVx5WKUXKwlLYkA0ozo85sLsLvkBbBn/sZaSCMFOGZJ14fvW9t5/d7kdA==}
+    engines: {node: '>=8'}
+
+  ci-info@4.4.0:
+    resolution: {integrity: sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==}
+    engines: {node: '>=8'}
+
+  cli-cursor@3.1.0:
+    resolution: {integrity: sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==}
+    engines: {node: '>=8'}
+
+  cli-spinners@2.9.2:
+    resolution: {integrity: sha512-ywqV+5MmyL4E7ybXgKys4DugZbX0FC6LnwrhjuykIjnK9k8OQacQ7axGKnjDXWNhns0xot3bZI5h55H8yo9cJg==}
+    engines: {node: '>=6'}
+
+  cli-truncate@2.1.0:
+    resolution: {integrity: sha512-n8fOixwDD6b/ObinzTrp1ZKFzbgvKZvuz/TvejnLn1aQfC6r52XEx85FmuC+3HI+JM7coBRXUvNqEU2PHVrHpg==}
+    engines: {node: '>=8'}
+
+  cliui@8.0.1:
+    resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==}
+    engines: {node: '>=12'}
+
+  clone-response@1.0.3:
+    resolution: {integrity: sha512-ROoL94jJH2dUVML2Y/5PEDNaSHgeOdSDicUyS7izcF63G6sTc/FTjLub4b8Il9S8S0beOfYt0TaA5qvFK+w0wA==}
+
+  clone@1.0.4:
+    resolution: {integrity: sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==}
+    engines: {node: '>=0.8'}
+
+  clsx@2.1.1:
+    resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
+    engines: {node: '>=6'}
+
+  color-convert@2.0.1:
+    resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
+    engines: {node: '>=7.0.0'}
+
+  color-name@1.1.4:
+    resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==}
+
+  combined-stream@1.0.8:
+    resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==}
+    engines: {node: '>= 0.8'}
+
+  commander@5.1.0:
+    resolution: {integrity: sha512-P0CysNDQ7rtVw4QIQtm+MRxV66vKFSvlsQvGYXZWR3qFU0jlMKHZZZgw8e+8DSah4UDKMqnknRDQz+xuQXQ/Zg==}
+    engines: {node: '>= 6'}
+
+  commander@9.5.0:
+    resolution: {integrity: sha512-KRs7WVDKg86PWiuAqhDrAQnTXZKraVcCc6vFdL14qrZ/DcWwuRo7VoiYXalXO7S5GKpqYiVEwCbgFDfxNHKJBQ==}
+    engines: {node: ^12.20.0 || >=14}
+
+  compare-version@0.1.2:
+    resolution: {integrity: sha512-pJDh5/4wrEnXX/VWRZvruAGHkzKdr46z11OlTPN+VrATlWWhSKewNCJ1futCO5C7eJB3nPMFZA1LeYtcFboZ2A==}
+    engines: {node: '>=0.10.0'}
+
+  concat-map@0.0.1:
+    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
+
+  convert-source-map@2.0.0:
+    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
+
+  core-util-is@1.0.2:
+    resolution: {integrity: sha512-3lqz5YjWTYnW6dlDa5TLaTCcShfar1e40rmcJVwCBJC6mWlFuj0eCHIElmG1g5kyuJ/GD+8Wn4FFCcz4gJPfaQ==}
+
+  crc@3.8.0:
+    resolution: {integrity: sha512-iX3mfgcTMIq3ZKLIsVFAbv7+Mc10kxabAGQb8HvjA1o3T1PIYprbakQ65d3I+2HGHt6nSKkM9PYjgoJO2KcFBQ==}
+
+  cross-dirname@0.1.0:
+    resolution: {integrity: sha512-+R08/oI0nl3vfPcqftZRpytksBXDzOUveBq/NBVx0sUp1axwzPQrKinNx5yd5sxPu8j1wIy8AfnVQ+5eFdha6Q==}
+
+  cross-spawn@7.0.6:
+    resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
+    engines: {node: '>= 8'}
+
+  csstype@3.2.3:
+    resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
+
+  debug@4.4.3:
+    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
+    engines: {node: '>=6.0'}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
+  decompress-response@6.0.0:
+    resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
+    engines: {node: '>=10'}
+
+  deep-is@0.1.4:
+    resolution: {integrity: sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==}
+
+  defaults@1.0.4:
+    resolution: {integrity: sha512-eFuaLoy/Rxalv2kr+lqMlUnrDWV+3j4pljOIJgLIhI058IQfWJ7vXhyEIHu+HtC738klGALYxOKDO0bQP3tg8A==}
+
+  defer-to-connect@2.0.1:
+    resolution: {integrity: sha512-4tvttepXG1VaYGrRibk5EwJd1t4udunSOVMdLSAL6mId1ix438oPwPZMALY41FCijukO1L0twNcGsdzS7dHgDg==}
+    engines: {node: '>=10'}
+
+  define-data-property@1.1.4:
+    resolution: {integrity: sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==}
+    engines: {node: '>= 0.4'}
+
+  define-properties@1.2.1:
+    resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
+    engines: {node: '>= 0.4'}
+
+  delayed-stream@1.0.0:
+    resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
+    engines: {node: '>=0.4.0'}
+
+  detect-libc@2.1.2:
+    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
+    engines: {node: '>=8'}
+
+  detect-node@2.1.0:
+    resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==}
+
+  dir-compare@4.2.0:
+    resolution: {integrity: sha512-2xMCmOoMrdQIPHdsTawECdNPwlVFB9zGcz3kuhmBO6U3oU+UQjsue0i8ayLKpgBcm+hcXPMVSGUN9d+pvJ6+VQ==}
+
+  dmg-builder@26.8.1:
+    resolution: {integrity: sha512-glMJgnTreo8CFINujtAhCgN96QAqApDMZ8Vl1r8f0QT8QprvC1UCltV4CcWj20YoIyLZx6IUskaJZ0NV8fokcg==}
+
+  dmg-license@1.0.11:
+    resolution: {integrity: sha512-ZdzmqwKmECOWJpqefloC5OJy1+WZBBse5+MR88z9g9Zn4VY+WYUkAyojmhzJckH5YbbZGcYIuGAkY5/Ys5OM2Q==}
+    engines: {node: '>=8'}
+    os: [darwin]
+    hasBin: true
+
+  dotenv-expand@11.0.7:
+    resolution: {integrity: sha512-zIHwmZPRshsCdpMDyVsqGmgyP0yT8GAgXUnkdAoJisxvf33k7yO6OuoKmcTGuXPWSsm8Oh88nZicRLA9Y0rUeA==}
+    engines: {node: '>=12'}
+
+  dotenv@16.6.1:
+    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
+    engines: {node: '>=12'}
+
+  dunder-proto@1.0.1:
+    resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
+    engines: {node: '>= 0.4'}
+
+  eastasianwidth@0.2.0:
+    resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
+
+  ejs@3.1.10:
+    resolution: {integrity: sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==}
+    engines: {node: '>=0.10.0'}
+    hasBin: true
+
+  electron-builder-squirrel-windows@26.8.1:
+    resolution: {integrity: sha512-o288fIdgPLHA76eDrFADHPoo7VyGkDCYbLV1GzndaMSAVBoZrGvM9m2IehdcVMzdAZJ2eV9bgyissQXHv5tGzA==}
+
+  electron-builder@26.8.1:
+    resolution: {integrity: sha512-uWhx1r74NGpCagG0ULs/P9Nqv2nsoo+7eo4fLUOB8L8MdWltq9odW/uuLXMFCDGnPafknYLZgjNX0ZIFRzOQAw==}
+    engines: {node: '>=14.0.0'}
+    hasBin: true
+
+  electron-log@5.4.3:
+    resolution: {integrity: sha512-sOUsM3LjZdugatazSQ/XTyNcw8dfvH1SYhXWiJyfYodAAKOZdHs0txPiLDXFzOZbhXgAgshQkshH2ccq0feyLQ==}
+    engines: {node: '>= 14'}
+
+  electron-publish@26.8.1:
+    resolution: {integrity: sha512-q+jrSTIh/Cv4eGZa7oVR+grEJo/FoLMYBAnSL5GCtqwUpr1T+VgKB/dn1pnzxIxqD8S/jP1yilT9VrwCqINR4w==}
+
+  electron-to-chromium@1.5.313:
+    resolution: {integrity: sha512-QBMrTWEf00GXZmJyx2lbYD45jpI3TUFnNIzJ5BBc8piGUDwMPa1GV6HJWTZVvY/eiN3fSopl7NRbgGp9sZ9LTA==}
+
+  electron-updater@6.8.3:
+    resolution: {integrity: sha512-Z6sgw3jgbikWKXei1ENdqFOxBP0WlXg3TtKfz0rgw2vIZFJUyI4pD7ZN7jrkm7EoMK+tcm/qTnPUdqfZukBlBQ==}
+
+  electron-vite@5.0.0:
+    resolution: {integrity: sha512-OHp/vjdlubNlhNkPkL/+3JD34ii5ov7M0GpuXEVdQeqdQ3ulvVR7Dg/rNBLfS5XPIFwgoBLDf9sjjrL+CuDyRQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      '@swc/core': ^1.0.0
+      vite: ^5.0.0 || ^6.0.0 || ^7.0.0
+    peerDependenciesMeta:
+      '@swc/core':
+        optional: true
+
+  electron-winstaller@5.4.0:
+    resolution: {integrity: sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==}
+    engines: {node: '>=8.0.0'}
+
+  electron@39.8.0:
+    resolution: {integrity: sha512-K+f3YelSyh9Q4LgUXuIhLB4kq73LJrqnIbe8ih9vpWi+iSdPebj0w7FRYwILCMDoyBQMFC9LicYHuIPmZzdKlg==}
+    engines: {node: '>= 12.20.55'}
+    hasBin: true
+
+  emoji-regex@8.0.0:
+    resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
+
+  emoji-regex@9.2.2:
+    resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
+
+  encoding@0.1.13:
+    resolution: {integrity: sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==}
+
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
+  enhanced-resolve@5.20.0:
+    resolution: {integrity: sha512-/ce7+jQ1PQ6rVXwe+jKEg5hW5ciicHwIQUagZkp6IufBoY3YDgdTTY1azVs0qoRgVmvsNB+rbjLJxDAeHHtwsQ==}
+    engines: {node: '>=10.13.0'}
+
+  env-paths@2.2.1:
+    resolution: {integrity: sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==}
+    engines: {node: '>=6'}
+
+  err-code@2.0.3:
+    resolution: {integrity: sha512-2bmlRpNKBxT/CRmPOlyISQpNj+qSeYvcym/uT0Jx2bMOlKLtSy1ZmLuVxSEKKyor/N5yhvp/ZiG1oE3DEYMSFA==}
+
+  es-define-property@1.0.1:
+    resolution: {integrity: sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==}
+    engines: {node: '>= 0.4'}
+
+  es-errors@1.3.0:
+    resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
+    engines: {node: '>= 0.4'}
+
+  es-module-lexer@2.0.0:
+    resolution: {integrity: sha512-5POEcUuZybH7IdmGsD8wlf0AI55wMecM9rVBTI/qEAy2c1kTOm3DjFYjrBdI2K3BaJjJYfYFeRtM0t9ssnRuxw==}
+
+  es-object-atoms@1.1.1:
+    resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
+    engines: {node: '>= 0.4'}
+
+  es-set-tostringtag@2.1.0:
+    resolution: {integrity: sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==}
+    engines: {node: '>= 0.4'}
+
+  es6-error@4.1.1:
+    resolution: {integrity: sha512-Um/+FxMr9CISWh0bi5Zv0iOD+4cFh5qLeks1qhAopKVAJw3drgKbKySikp7wGhDL0HPeaja0P5ULZrxLkniUVg==}
+
+  esbuild@0.25.12:
+    resolution: {integrity: sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  esbuild@0.27.4:
+    resolution: {integrity: sha512-Rq4vbHnYkK5fws5NF7MYTU68FPRE1ajX7heQ/8QXXWqNgqqJ/GkmmyxIzUnf2Sr/bakf8l54716CcMGHYhMrrQ==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  escalade@3.2.0:
+    resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
+    engines: {node: '>=6'}
+
+  escape-string-regexp@4.0.0:
+    resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
+    engines: {node: '>=10'}
+
+  eslint-plugin-react-hooks@7.0.0:
+    resolution: {integrity: sha512-fNXaOwvKwq2+pXiRpXc825Vd63+KM4DLL40Rtlycb8m7fYpp6efrTp1sa6ZbP/Ap58K2bEKFXRmhURE+CJAQWw==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      eslint: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0 || ^9.0.0
+
+  eslint-plugin-react-refresh@0.4.24:
+    resolution: {integrity: sha512-nLHIW7TEq3aLrEYWpVaJ1dRgFR+wLDPN8e8FpYAql/bMV2oBEfC37K0gLEGgv9fy66juNShSMV8OkTqzltcG/w==}
+    peerDependencies:
+      eslint: '>=8.40'
+
+  eslint-scope@8.4.0:
+    resolution: {integrity: sha512-sNXOfKCn74rt8RICKMvJS7XKV/Xk9kA7DyJr8mJik3S7Cwgy3qlkkmyS2uQB3jiJg6VNdZd/pDBJu0nvG2NlTg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  eslint-visitor-keys@3.4.3:
+    resolution: {integrity: sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  eslint-visitor-keys@4.2.1:
+    resolution: {integrity: sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  eslint@9.38.0:
+    resolution: {integrity: sha512-t5aPOpmtJcZcz5UJyY2GbvpDlsK5E8JqRqoKtfiKE3cNh437KIqfJr3A3AKf5k64NPx6d0G3dno6XDY05PqPtw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    hasBin: true
+    peerDependencies:
+      jiti: '*'
+    peerDependenciesMeta:
+      jiti:
+        optional: true
+
+  espree@10.4.0:
+    resolution: {integrity: sha512-j6PAQ2uUr79PZhBjP5C5fhl8e39FmRnOjsD5lGnWrFU8i2G776tBK7+nP8KuQUTTyAZUwfQqXAgrVH5MbH9CYQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  esquery@1.7.0:
+    resolution: {integrity: sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==}
+    engines: {node: '>=0.10'}
+
+  esrecurse@4.3.0:
+    resolution: {integrity: sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==}
+    engines: {node: '>=4.0'}
+
+  estraverse@5.3.0:
+    resolution: {integrity: sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==}
+    engines: {node: '>=4.0'}
+
+  estree-walker@3.0.3:
+    resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==}
+
+  esutils@2.0.3:
+    resolution: {integrity: sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==}
+    engines: {node: '>=0.10.0'}
+
+  expect-type@1.3.0:
+    resolution: {integrity: sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==}
+    engines: {node: '>=12.0.0'}
+
+  exponential-backoff@3.1.3:
+    resolution: {integrity: sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==}
+
+  extract-zip@2.0.1:
+    resolution: {integrity: sha512-GDhU9ntwuKyGXdZBUgTIe+vXnWj0fppUEtMDL0+idd5Sta8TGpHssn/eusA9mrPr9qNDym6SxAYZjNvCn/9RBg==}
+    engines: {node: '>= 10.17.0'}
+    hasBin: true
+
+  extsprintf@1.4.1:
+    resolution: {integrity: sha512-Wrk35e8ydCKDj/ArClo1VrPVmN8zph5V4AtHwIuHhvMXsKf73UT3BOD+azBIW+3wOJ4FhEH7zyaJCFvChjYvMA==}
+    engines: {'0': node >=0.6.0}
+
+  fast-deep-equal@3.1.3:
+    resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
+
+  fast-glob@3.3.3:
+    resolution: {integrity: sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==}
+    engines: {node: '>=8.6.0'}
+
+  fast-json-stable-stringify@2.1.0:
+    resolution: {integrity: sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==}
+
+  fast-levenshtein@2.0.6:
+    resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==}
+
+  fastq@1.20.1:
+    resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==}
+
+  fd-slicer@1.1.0:
+    resolution: {integrity: sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==}
+
+  fdir@6.5.0:
+    resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
+    engines: {node: '>=12.0.0'}
+    peerDependencies:
+      picomatch: ^3 || ^4
+    peerDependenciesMeta:
+      picomatch:
+        optional: true
+
+  file-entry-cache@8.0.0:
+    resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
+    engines: {node: '>=16.0.0'}
+
+  filelist@1.0.6:
+    resolution: {integrity: sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA==}
+
+  fill-range@7.1.1:
+    resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==}
+    engines: {node: '>=8'}
+
+  find-up@5.0.0:
+    resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
+    engines: {node: '>=10'}
+
+  flat-cache@4.0.1:
+    resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
+    engines: {node: '>=16'}
+
+  flatted@3.4.1:
+    resolution: {integrity: sha512-IxfVbRFVlV8V/yRaGzk0UVIcsKKHMSfYw66T/u4nTwlWteQePsxe//LjudR1AMX4tZW3WFCh3Zqa/sjlqpbURQ==}
+
+  foreground-child@3.3.1:
+    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
+    engines: {node: '>=14'}
+
+  form-data@4.0.5:
+    resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==}
+    engines: {node: '>= 6'}
+
+  framer-motion@12.36.0:
+    resolution: {integrity: sha512-4PqYHAT7gev0ke0wos+PyrcFxI0HScjm3asgU8nSYa8YzJFuwgIvdj3/s3ZaxLq0bUSboIn19A2WS/MHwLCvfw==}
+    peerDependencies:
+      '@emotion/is-prop-valid': '*'
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
+    peerDependenciesMeta:
+      '@emotion/is-prop-valid':
+        optional: true
+      react:
+        optional: true
+      react-dom:
+        optional: true
+
+  fs-extra@10.1.0:
+    resolution: {integrity: sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==}
+    engines: {node: '>=12'}
+
+  fs-extra@11.3.4:
+    resolution: {integrity: sha512-CTXd6rk/M3/ULNQj8FBqBWHYBVYybQ3VPBw0xGKFe3tuH7ytT6ACnvzpIQ3UZtB8yvUKC2cXn1a+x+5EVQLovA==}
+    engines: {node: '>=14.14'}
+
+  fs-extra@7.0.1:
+    resolution: {integrity: sha512-YJDaCJZEnBmcbw13fvdAM9AwNOJwOzrE4pqMqBq5nFiEqXUqHwlK4B+3pUw6JNvfSPtX05xFHtYy/1ni01eGCw==}
+    engines: {node: '>=6 <7 || >=8'}
+
+  fs-extra@8.1.0:
+    resolution: {integrity: sha512-yhlQgA6mnOJUKOsRUFsgJdQCvkKhcz8tlZG5HBQfReYZy46OwLcY+Zia0mtdHsOo9y/hP+CxMN0TU9QxoOtG4g==}
+    engines: {node: '>=6 <7 || >=8'}
+
+  fs-extra@9.1.0:
+    resolution: {integrity: sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==}
+    engines: {node: '>=10'}
+
+  fs-minipass@3.0.3:
+    resolution: {integrity: sha512-XUBA9XClHbnJWSfBzjkm6RvPsyg3sryZt06BEQoXcF7EK/xpGaQYJgQKDJSUH5SGZ76Y7pFx1QBnXz09rU5Fbw==}
+    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+
+  fs.realpath@1.0.0:
+    resolution: {integrity: sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==}
+
+  fsevents@2.3.2:
+    resolution: {integrity: sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==}
+    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
+    os: [darwin]
+
+  fsevents@2.3.3:
+    resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==}
+    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
+    os: [darwin]
+
+  function-bind@1.1.2:
+    resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
+
+  gensync@1.0.0-beta.2:
+    resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
+    engines: {node: '>=6.9.0'}
+
+  get-caller-file@2.0.5:
+    resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
+    engines: {node: 6.* || 8.* || >= 10.*}
+
+  get-intrinsic@1.3.0:
+    resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
+    engines: {node: '>= 0.4'}
+
+  get-proto@1.0.1:
+    resolution: {integrity: sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==}
+    engines: {node: '>= 0.4'}
+
+  get-stream@5.2.0:
+    resolution: {integrity: sha512-nBF+F1rAZVCu/p7rjzgA+Yb4lfYXrpl7a6VmJrU8wF9I1CKvP/QwPNZHnOlwbTkY6dvtFIzFMSyQXbLoTQPRpA==}
+    engines: {node: '>=8'}
+
+  glob-parent@5.1.2:
+    resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==}
+    engines: {node: '>= 6'}
+
+  glob-parent@6.0.2:
+    resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==}
+    engines: {node: '>=10.13.0'}
+
+  glob@10.5.0:
+    resolution: {integrity: sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+    hasBin: true
+
+  glob@7.2.3:
+    resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+
+  global-agent@3.0.0:
+    resolution: {integrity: sha512-PT6XReJ+D07JvGoxQMkT6qji/jVNfX/h364XHZOWeRzy64sSFr+xJ5OX7LI3b4MPQzdL4H8Y8M0xzPpsVMwA8Q==}
+    engines: {node: '>=10.0'}
+
+  globals@14.0.0:
+    resolution: {integrity: sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==}
+    engines: {node: '>=18'}
+
+  globals@16.4.0:
+    resolution: {integrity: sha512-ob/2LcVVaVGCYN+r14cnwnoDPUufjiYgSqRhiFD0Q1iI4Odora5RE8Iv1D24hAz5oMophRGkGz+yuvQmmUMnMw==}
+    engines: {node: '>=18'}
+
+  globalthis@1.0.4:
+    resolution: {integrity: sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ==}
+    engines: {node: '>= 0.4'}
+
+  gopd@1.2.0:
+    resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
+    engines: {node: '>= 0.4'}
+
+  got@11.8.6:
+    resolution: {integrity: sha512-6tfZ91bOr7bOXnK7PRDCGBLa1H4U080YHNaAQ2KsMGlLEzRbk44nsZF2E1IeRc3vtJHPVbKCYgdFbaGO2ljd8g==}
+    engines: {node: '>=10.19.0'}
+
+  graceful-fs@4.2.11:
+    resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
+
+  graphemer@1.4.0:
+    resolution: {integrity: sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==}
+
+  has-flag@4.0.0:
+    resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
+    engines: {node: '>=8'}
+
+  has-property-descriptors@1.0.2:
+    resolution: {integrity: sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==}
+
+  has-symbols@1.1.0:
+    resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
+    engines: {node: '>= 0.4'}
+
+  has-tostringtag@1.0.2:
+    resolution: {integrity: sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==}
+    engines: {node: '>= 0.4'}
+
+  hasown@2.0.2:
+    resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==}
+    engines: {node: '>= 0.4'}
+
+  hermes-estree@0.25.1:
+    resolution: {integrity: sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw==}
+
+  hermes-parser@0.25.1:
+    resolution: {integrity: sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA==}
+
+  hosted-git-info@4.1.0:
+    resolution: {integrity: sha512-kyCuEOWjJqZuDbRHzL8V93NzQhwIB71oFWSyzVo+KPZI+pnQPPxucdkrOZvkLRnrf5URsQM+IJ09Dw29cRALIA==}
+    engines: {node: '>=10'}
+
+  http-cache-semantics@4.2.0:
+    resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==}
+
+  http-proxy-agent@7.0.2:
+    resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
+    engines: {node: '>= 14'}
+
+  http2-wrapper@1.0.3:
+    resolution: {integrity: sha512-V+23sDMr12Wnz7iTcDeJr3O6AIxlnvT/bmaAAAP/Xda35C90p9599p0F1eHR/N1KILWSoWVAiOMFjBBXaXSMxg==}
+    engines: {node: '>=10.19.0'}
+
+  https-proxy-agent@7.0.6:
+    resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
+    engines: {node: '>= 14'}
+
+  iconv-corefoundation@1.1.7:
+    resolution: {integrity: sha512-T10qvkw0zz4wnm560lOEg0PovVqUXuOFhhHAkixw8/sycy7TJt7v/RrkEKEQnAw2viPSJu6iAkErxnzR0g8PpQ==}
+    engines: {node: ^8.11.2 || >=10}
+    os: [darwin]
+
+  iconv-lite@0.6.3:
+    resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
+    engines: {node: '>=0.10.0'}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
+  ignore@5.3.2:
+    resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
+    engines: {node: '>= 4'}
+
+  ignore@7.0.5:
+    resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
+    engines: {node: '>= 4'}
+
+  import-fresh@3.3.1:
+    resolution: {integrity: sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==}
+    engines: {node: '>=6'}
+
+  imurmurhash@0.1.4:
+    resolution: {integrity: sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==}
+    engines: {node: '>=0.8.19'}
+
+  inflight@1.0.6:
+    resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
+    deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
+
+  inherits@2.0.4:
+    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
+
+  ip-address@10.1.0:
+    resolution: {integrity: sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==}
+    engines: {node: '>= 12'}
+
+  is-extglob@2.1.1:
+    resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
+    engines: {node: '>=0.10.0'}
+
+  is-fullwidth-code-point@3.0.0:
+    resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==}
+    engines: {node: '>=8'}
+
+  is-glob@4.0.3:
+    resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==}
+    engines: {node: '>=0.10.0'}
+
+  is-interactive@1.0.0:
+    resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
+    engines: {node: '>=8'}
+
+  is-number@7.0.0:
+    resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==}
+    engines: {node: '>=0.12.0'}
+
+  is-unicode-supported@0.1.0:
+    resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
+    engines: {node: '>=10'}
+
+  isbinaryfile@4.0.10:
+    resolution: {integrity: sha512-iHrqe5shvBUcFbmZq9zOQHBoeOhZJu6RQGrDpBgenUm/Am+F3JM2MgQj+rK3Z601fzrL5gLZWtAPH2OBaSVcyw==}
+    engines: {node: '>= 8.0.0'}
+
+  isbinaryfile@5.0.7:
+    resolution: {integrity: sha512-gnWD14Jh3FzS3CPhF0AxNOJ8CxqeblPTADzI38r0wt8ZyQl5edpy75myt08EG2oKvpyiqSqsx+Wkz9vtkbTqYQ==}
+    engines: {node: '>= 18.0.0'}
+
+  isexe@2.0.0:
+    resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
+
+  isexe@3.1.5:
+    resolution: {integrity: sha512-6B3tLtFqtQS4ekarvLVMZ+X+VlvQekbe4taUkf/rhVO3d/h0M2rfARm/pXLcPEsjjMsFgrFgSrhQIxcSVrBz8w==}
+    engines: {node: '>=18'}
+
+  jackspeak@3.4.3:
+    resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==}
+
+  jake@10.9.4:
+    resolution: {integrity: sha512-wpHYzhxiVQL+IV05BLE2Xn34zW1S223hvjtqk0+gsPrwd/8JNLXJgZZM/iPFsYc1xyphF+6M6EvdE5E9MBGkDA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  jiti@2.6.1:
+    resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
+    hasBin: true
+
+  js-tokens@4.0.0:
+    resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
+
+  js-yaml@4.1.1:
+    resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
+    hasBin: true
+
+  jsesc@3.1.0:
+    resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
+    engines: {node: '>=6'}
+    hasBin: true
+
+  json-buffer@3.0.1:
+    resolution: {integrity: sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==}
+
+  json-schema-traverse@0.4.1:
+    resolution: {integrity: sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==}
+
+  json-stable-stringify-without-jsonify@1.0.1:
+    resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
+
+  json-stringify-safe@5.0.1:
+    resolution: {integrity: sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA==}
+
+  json5@2.2.3:
+    resolution: {integrity: sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==}
+    engines: {node: '>=6'}
+    hasBin: true
+
+  jsonfile@4.0.0:
+    resolution: {integrity: sha512-m6F1R3z8jjlf2imQHS2Qez5sjKWQzbuuhuJ/FKYFRZvPE3PuHcSMVZzfsLhGVOkfd20obL5SWEBew5ShlquNxg==}
+
+  jsonfile@6.2.0:
+    resolution: {integrity: sha512-FGuPw30AdOIUTRMC2OMRtQV+jkVj2cfPqSeWXv1NEAJ1qZ5zb1X6z1mFhbfOB/iy3ssJCD+3KuZ8r8C3uVFlAg==}
+
+  keyv@4.5.4:
+    resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
+
+  lazy-val@1.0.5:
+    resolution: {integrity: sha512-0/BnGCCfyUMkBpeDgWihanIAF9JmZhHBgUhEqzvf+adhNGLoP6TaiI5oF8oyb3I45P+PcnrqihSf01M0l0G5+Q==}
+
+  levn@0.4.1:
+    resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
+    engines: {node: '>= 0.8.0'}
+
+  lightningcss-android-arm64@1.31.1:
+    resolution: {integrity: sha512-HXJF3x8w9nQ4jbXRiNppBCqeZPIAfUo8zE/kOEGbW5NZvGc/K7nMxbhIr+YlFlHW5mpbg/YFPdbnCh1wAXCKFg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [android]
+
+  lightningcss-darwin-arm64@1.31.1:
+    resolution: {integrity: sha512-02uTEqf3vIfNMq3h/z2cJfcOXnQ0GRwQrkmPafhueLb2h7mqEidiCzkE4gBMEH65abHRiQvhdcQ+aP0D0g67sg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  lightningcss-darwin-x64@1.31.1:
+    resolution: {integrity: sha512-1ObhyoCY+tGxtsz1lSx5NXCj3nirk0Y0kB/g8B8DT+sSx4G9djitg9ejFnjb3gJNWo7qXH4DIy2SUHvpoFwfTA==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  lightningcss-freebsd-x64@1.31.1:
+    resolution: {integrity: sha512-1RINmQKAItO6ISxYgPwszQE1BrsVU5aB45ho6O42mu96UiZBxEXsuQ7cJW4zs4CEodPUioj/QrXW1r9pLUM74A==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [freebsd]
+
+  lightningcss-linux-arm-gnueabihf@1.31.1:
+    resolution: {integrity: sha512-OOCm2//MZJ87CdDK62rZIu+aw9gBv4azMJuA8/KB74wmfS3lnC4yoPHm0uXZ/dvNNHmnZnB8XLAZzObeG0nS1g==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm]
+    os: [linux]
+
+  lightningcss-linux-arm64-gnu@1.31.1:
+    resolution: {integrity: sha512-WKyLWztD71rTnou4xAD5kQT+982wvca7E6QoLpoawZ1gP9JM0GJj4Tp5jMUh9B3AitHbRZ2/H3W5xQmdEOUlLg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+
+  lightningcss-linux-arm64-musl@1.31.1:
+    resolution: {integrity: sha512-mVZ7Pg2zIbe3XlNbZJdjs86YViQFoJSpc41CbVmKBPiGmC4YrfeOyz65ms2qpAobVd7WQsbW4PdsSJEMymyIMg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+
+  lightningcss-linux-x64-gnu@1.31.1:
+    resolution: {integrity: sha512-xGlFWRMl+0KvUhgySdIaReQdB4FNudfUTARn7q0hh/V67PVGCs3ADFjw+6++kG1RNd0zdGRlEKa+T13/tQjPMA==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+
+  lightningcss-linux-x64-musl@1.31.1:
+    resolution: {integrity: sha512-eowF8PrKHw9LpoZii5tdZwnBcYDxRw2rRCyvAXLi34iyeYfqCQNA9rmUM0ce62NlPhCvof1+9ivRaTY6pSKDaA==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+
+  lightningcss-win32-arm64-msvc@1.31.1:
+    resolution: {integrity: sha512-aJReEbSEQzx1uBlQizAOBSjcmr9dCdL3XuC/6HLXAxmtErsj2ICo5yYggg1qOODQMtnjNQv2UHb9NpOuFtYe4w==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  lightningcss-win32-x64-msvc@1.31.1:
+    resolution: {integrity: sha512-I9aiFrbd7oYHwlnQDqr1Roz+fTz61oDDJX7n9tYF9FJymH1cIN1DtKw3iYt6b8WZgEjoNwVSncwF4wx/ZedMhw==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [win32]
+
+  lightningcss@1.31.1:
+    resolution: {integrity: sha512-l51N2r93WmGUye3WuFoN5k10zyvrVs0qfKBhyC5ogUQ6Ew6JUSswh78mbSO+IU3nTWsyOArqPCcShdQSadghBQ==}
+    engines: {node: '>= 12.0.0'}
+
+  locate-path@6.0.0:
+    resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
+    engines: {node: '>=10'}
+
+  lodash.escaperegexp@4.1.2:
+    resolution: {integrity: sha512-TM9YBvyC84ZxE3rgfefxUWiQKLilstD6k7PTGt6wfbtXF8ixIJLOL3VYyV/z+ZiPLsVxAsKAFVwWlWeb2Y8Yyw==}
+
+  lodash.isequal@4.5.0:
+    resolution: {integrity: sha512-pDo3lu8Jhfjqls6GkMgpahsF9kCyayhgykjyLMNFTKWrpVdAQtYyB4muAMWozBB4ig/dtWAmsMxLEI8wuz+DYQ==}
+    deprecated: This package is deprecated. Use require('node:util').isDeepStrictEqual instead.
+
+  lodash.merge@4.6.2:
+    resolution: {integrity: sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==}
+
+  lodash@4.17.23:
+    resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}
+
+  log-symbols@4.1.0:
+    resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
+    engines: {node: '>=10'}
+
+  lowercase-keys@2.0.0:
+    resolution: {integrity: sha512-tqNXrS78oMOE73NMxK4EMLQsQowWf8jKooH9g7xPavRT706R6bkQJ6DY2Te7QukaZsulxa30wQ7bk0pm4XiHmA==}
+    engines: {node: '>=8'}
+
+  lru-cache@10.4.3:
+    resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
+
+  lru-cache@5.1.1:
+    resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
+
+  lru-cache@6.0.0:
+    resolution: {integrity: sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==}
+    engines: {node: '>=10'}
+
+  magic-string@0.30.21:
+    resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
+
+  make-fetch-happen@14.0.3:
+    resolution: {integrity: sha512-QMjGbFTP0blj97EeidG5hk/QhKQ3T4ICckQGLgz38QF7Vgbk6e6FTARN8KhKxyBbWn8R0HU+bnw8aSoFPD4qtQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  matcher@3.0.0:
+    resolution: {integrity: sha512-OkeDaAZ/bQCxeFAozM55PKcKU0yJMPGifLwV4Qgjitu+5MoAfSQN4lsLJeXZ1b8w0x+/Emda6MZgXS1jvsapng==}
+    engines: {node: '>=10'}
+
+  math-intrinsics@1.1.0:
+    resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
+    engines: {node: '>= 0.4'}
+
+  merge2@1.4.1:
+    resolution: {integrity: sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==}
+    engines: {node: '>= 8'}
+
+  micromatch@4.0.8:
+    resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
+    engines: {node: '>=8.6'}
+
+  mime-db@1.52.0:
+    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
+    engines: {node: '>= 0.6'}
+
+  mime-types@2.1.35:
+    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
+    engines: {node: '>= 0.6'}
+
+  mime@2.6.0:
+    resolution: {integrity: sha512-USPkMeET31rOMiarsBNIHZKLGgvKc/LrjofAnBlOttf5ajRvqiRA8QsenbcooctK6d6Ts6aqZXBA+XbkKthiQg==}
+    engines: {node: '>=4.0.0'}
+    hasBin: true
+
+  mimic-fn@2.1.0:
+    resolution: {integrity: sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==}
+    engines: {node: '>=6'}
+
+  mimic-response@1.0.1:
+    resolution: {integrity: sha512-j5EctnkH7amfV/q5Hgmoal1g2QHFJRraOtmx0JpIqkxhBhI/lJSl1nMpQ45hVarwNETOoWEimndZ4QK0RHxuxQ==}
+    engines: {node: '>=4'}
+
+  mimic-response@3.1.0:
+    resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
+    engines: {node: '>=10'}
+
+  minimatch@10.2.4:
+    resolution: {integrity: sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==}
+    engines: {node: 18 || 20 || >=22}
+
+  minimatch@3.1.5:
+    resolution: {integrity: sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
+
+  minimatch@5.1.9:
+    resolution: {integrity: sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==}
+    engines: {node: '>=10'}
+
+  minimatch@9.0.9:
+    resolution: {integrity: sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  minimist@1.2.8:
+    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
+
+  minipass-collect@2.0.1:
+    resolution: {integrity: sha512-D7V8PO9oaz7PWGLbCACuI1qEOsq7UKfLotx/C0Aet43fCUB/wfQ7DYeq2oR/svFJGYDHPr38SHATeaj/ZoKHKw==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  minipass-fetch@4.0.1:
+    resolution: {integrity: sha512-j7U11C5HXigVuutxebFadoYBbd7VSdZWggSe64NVdvWNBqGAiXPL2QVCehjmw7lY1oF9gOllYbORh+hiNgfPgQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  minipass-flush@1.0.5:
+    resolution: {integrity: sha512-JmQSYYpPUqX5Jyn1mXaRwOda1uQ8HP5KAT/oDSLCzt1BYRhQU0/hDtsB1ufZfEEzMZ9aAVmsBw8+FWsIXlClWw==}
+    engines: {node: '>= 8'}
+
+  minipass-pipeline@1.2.4:
+    resolution: {integrity: sha512-xuIq7cIOt09RPRJ19gdi4b+RiNvDFYe5JH+ggNvBqGqpQXcru3PcRmOZuHBKWK1Txf9+cQ+HMVN4d6z46LZP7A==}
+    engines: {node: '>=8'}
+
+  minipass-sized@1.0.3:
+    resolution: {integrity: sha512-MbkQQ2CTiBMlA2Dm/5cY+9SWFEN8pzzOXi6rlM5Xxq0Yqbda5ZQy9sU75a673FE9ZK0Zsbr6Y5iP6u9nktfg2g==}
+    engines: {node: '>=8'}
+
+  minipass@3.3.6:
+    resolution: {integrity: sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==}
+    engines: {node: '>=8'}
+
+  minipass@7.1.3:
+    resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  minizlib@3.1.0:
+    resolution: {integrity: sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==}
+    engines: {node: '>= 18'}
+
+  mkdirp@0.5.6:
+    resolution: {integrity: sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==}
+    hasBin: true
+
+  motion-dom@12.36.0:
+    resolution: {integrity: sha512-Ep1pq8P88rGJ75om8lTCA13zqd7ywPGwCqwuWwin6BKc0hMLkVfcS6qKlRqEo2+t0DwoUcgGJfXwaiFn4AOcQA==}
+
+  motion-utils@12.36.0:
+    resolution: {integrity: sha512-eHWisygbiwVvf6PZ1vhaHCLamvkSbPIeAYxWUuL3a2PD/TROgE7FvfHWTIH4vMl798QLfMw15nRqIaRDXTlYRg==}
+
+  ms@2.1.3:
+    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
+
+  nanoid@3.3.11:
+    resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==}
+    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
+    hasBin: true
+
+  natural-compare@1.4.0:
+    resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
+
+  negotiator@1.0.0:
+    resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==}
+    engines: {node: '>= 0.6'}
+
+  node-abi@4.27.0:
+    resolution: {integrity: sha512-M6PypnnjGwr6Wv1O7twPpnJiie8MeLoBSh99zF1jnRRU2NLgxO/fUEQW1rfAhAKzPa/fvQ4PKitt1O+c8l243Q==}
+    engines: {node: '>=22.12.0'}
+
+  node-addon-api@1.7.2:
+    resolution: {integrity: sha512-ibPK3iA+vaY1eEjESkQkM0BbCqFOaZMiXRTtdB0u7b4djtY6JnsjvPdUHVMg6xQt3B8fpTTWHI9A+ADjM9frzg==}
+
+  node-api-version@0.2.1:
+    resolution: {integrity: sha512-2xP/IGGMmmSQpI1+O/k72jF/ykvZ89JeuKX3TLJAYPDVLUalrshrLHkeVcCCZqG/eEa635cr8IBYzgnDvM2O8Q==}
+
+  node-gyp@11.5.0:
+    resolution: {integrity: sha512-ra7Kvlhxn5V9Slyus0ygMa2h+UqExPqUIkfk7Pc8QTLT956JLSy51uWFwHtIYy0vI8cB4BDhc/S03+880My/LQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+    hasBin: true
+
+  node-releases@2.0.36:
+    resolution: {integrity: sha512-TdC8FSgHz8Mwtw9g5L4gR/Sh9XhSP/0DEkQxfEFXOpiul5IiHgHan2VhYYb6agDSfp4KuvltmGApc8HMgUrIkA==}
+
+  nopt@8.1.0:
+    resolution: {integrity: sha512-ieGu42u/Qsa4TFktmaKEwM6MQH0pOWnaB3htzh0JRtx84+Mebc0cbZYN5bC+6WTZ4+77xrL9Pn5m7CV6VIkV7A==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+    hasBin: true
+
+  normalize-url@6.1.0:
+    resolution: {integrity: sha512-DlL+XwOy3NxAQ8xuC0okPgK46iuVNAK01YN7RueYBqqFeGsBjV9XmCAzAdgt+667bCl5kPh9EqKKDwnaPG1I7A==}
+    engines: {node: '>=10'}
+
+  object-keys@1.1.1:
+    resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
+    engines: {node: '>= 0.4'}
+
+  obug@2.1.1:
+    resolution: {integrity: sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==}
+
+  once@1.4.0:
+    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
+
+  onetime@5.1.2:
+    resolution: {integrity: sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==}
+    engines: {node: '>=6'}
+
+  optionator@0.9.4:
+    resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
+    engines: {node: '>= 0.8.0'}
+
+  ora@5.4.1:
+    resolution: {integrity: sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==}
+    engines: {node: '>=10'}
+
+  p-cancelable@2.1.1:
+    resolution: {integrity: sha512-BZOr3nRQHOntUjTrH8+Lh54smKHoHyur8We1V8DSMVrl5A2malOOwuJRnKRDjSnkoeBh4at6BwEnb5I7Jl31wg==}
+    engines: {node: '>=8'}
+
+  p-limit@3.1.0:
+    resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
+    engines: {node: '>=10'}
+
+  p-locate@5.0.0:
+    resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
+    engines: {node: '>=10'}
+
+  p-map@7.0.4:
+    resolution: {integrity: sha512-tkAQEw8ysMzmkhgw8k+1U/iPhWNhykKnSk4Rd5zLoPJCuJaGRPo6YposrZgaxHKzDHdDWWZvE/Sk7hsL2X/CpQ==}
+    engines: {node: '>=18'}
+
+  package-json-from-dist@1.0.1:
+    resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
+
+  parent-module@1.0.1:
+    resolution: {integrity: sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==}
+    engines: {node: '>=6'}
+
+  path-exists@4.0.0:
+    resolution: {integrity: sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==}
+    engines: {node: '>=8'}
+
+  path-is-absolute@1.0.1:
+    resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
+    engines: {node: '>=0.10.0'}
+
+  path-key@3.1.1:
+    resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==}
+    engines: {node: '>=8'}
+
+  path-scurry@1.11.1:
+    resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
+    engines: {node: '>=16 || 14 >=14.18'}
+
+  pathe@2.0.3:
+    resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
+
+  pe-library@0.4.1:
+    resolution: {integrity: sha512-eRWB5LBz7PpDu4PUlwT0PhnQfTQJlDDdPa35urV4Osrm0t0AqQFGn+UIkU3klZvwJ8KPO3VbBFsXquA6p6kqZw==}
+    engines: {node: '>=12', npm: '>=6'}
+
+  pend@1.2.0:
+    resolution: {integrity: sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==}
+
+  picocolors@1.1.1:
+    resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
+
+  picomatch@2.3.1:
+    resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==}
+    engines: {node: '>=8.6'}
+
+  picomatch@4.0.3:
+    resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==}
+    engines: {node: '>=12'}
+
+  playwright-core@1.58.2:
+    resolution: {integrity: sha512-yZkEtftgwS8CsfYo7nm0KE8jsvm6i/PTgVtB8DL726wNf6H2IMsDuxCpJj59KDaxCtSnrWan2AeDqM7JBaultg==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  playwright@1.58.2:
+    resolution: {integrity: sha512-vA30H8Nvkq/cPBnNw4Q8TWz1EJyqgpuinBcHET0YVJVFldr8JDNiU9LaWAE1KqSkRYazuaBhTpB5ZzShOezQ6A==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  plist@3.1.0:
+    resolution: {integrity: sha512-uysumyrvkUX0rX/dEVqt8gC3sTBzd4zoWfLeS29nb53imdaXVvLINYXTI2GNqzaMuvacNx4uJQ8+b3zXR0pkgQ==}
+    engines: {node: '>=10.4.0'}
+
+  postcss@8.5.8:
+    resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==}
+    engines: {node: ^10 || ^12 || >=14}
+
+  postject@1.0.0-alpha.6:
+    resolution: {integrity: sha512-b9Eb8h2eVqNE8edvKdwqkrY6O7kAwmI8kcnBv1NScolYJbo59XUF0noFq+lxbC1yN20bmC0WBEbDC5H/7ASb0A==}
+    engines: {node: '>=14.0.0'}
+    hasBin: true
+
+  prelude-ls@1.2.1:
+    resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==}
+    engines: {node: '>= 0.8.0'}
+
+  proc-log@5.0.0:
+    resolution: {integrity: sha512-Azwzvl90HaF0aCz1JrDdXQykFakSSNPaPoiZ9fm5qJIMHioDZEi7OAdRwSm6rSoPtY3Qutnm3L7ogmg3dc+wbQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  progress@2.0.3:
+    resolution: {integrity: sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==}
+    engines: {node: '>=0.4.0'}
+
+  promise-retry@2.0.1:
+    resolution: {integrity: sha512-y+WKFlBR8BGXnsNlIHFGPZmyDf3DFMoLhaflAnyZgV6rG6xu+JwesTo2Q9R6XwYmtmwAFCkAk3e35jEdoeh/3g==}
+    engines: {node: '>=10'}
+
+  proper-lockfile@4.1.2:
+    resolution: {integrity: sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA==}
+
+  pump@3.0.4:
+    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
+
+  punycode@2.3.1:
+    resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
+    engines: {node: '>=6'}
+
+  queue-microtask@1.2.3:
+    resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==}
+
+  quick-lru@5.1.1:
+    resolution: {integrity: sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==}
+    engines: {node: '>=10'}
+
+  react-dom@19.2.4:
+    resolution: {integrity: sha512-AXJdLo8kgMbimY95O2aKQqsz2iWi9jMgKJhRBAxECE4IFxfcazB2LmzloIoibJI3C12IlY20+KFaLv+71bUJeQ==}
+    peerDependencies:
+      react: ^19.2.4
+
+  react-refresh@0.18.0:
+    resolution: {integrity: sha512-QgT5//D3jfjJb6Gsjxv0Slpj23ip+HtOpnNgnb2S5zU3CB26G/IDPGoy4RJB42wzFE46DRsstbW6tKHoKbhAxw==}
+    engines: {node: '>=0.10.0'}
+
+  react@19.2.4:
+    resolution: {integrity: sha512-9nfp2hYpCwOjAN+8TZFGhtWEwgvWHXqESH8qT89AT/lWklpLON22Lc8pEtnpsZz7VmawabSU0gCjnj8aC0euHQ==}
+    engines: {node: '>=0.10.0'}
+
+  read-binary-file-arch@1.0.6:
+    resolution: {integrity: sha512-BNg9EN3DD3GsDXX7Aa8O4p92sryjkmzYYgmgTAc6CA4uGLEDzFfxOxugu21akOxpcXHiEgsYkC6nPsQvLLLmEg==}
+    hasBin: true
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  require-directory@2.1.1:
+    resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
+    engines: {node: '>=0.10.0'}
+
+  resedit@1.7.2:
+    resolution: {integrity: sha512-vHjcY2MlAITJhC0eRD/Vv8Vlgmu9Sd3LX9zZvtGzU5ZImdTN3+d6e/4mnTyV8vEbyf1sgNIrWxhWlrys52OkEA==}
+    engines: {node: '>=12', npm: '>=6'}
+
+  resolve-alpn@1.2.1:
+    resolution: {integrity: sha512-0a1F4l73/ZFZOakJnQ3FvkJ2+gSTQWz/r2KE5OdDY0TxPm5h4GkqkWWfM47T7HsbnOtcJVEF4epCVy6u7Q3K+g==}
+
+  resolve-from@4.0.0:
+    resolution: {integrity: sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==}
+    engines: {node: '>=4'}
+
+  responselike@2.0.1:
+    resolution: {integrity: sha512-4gl03wn3hj1HP3yzgdI7d3lCkF95F21Pz4BPGvKHinyQzALR5CapwC8yIi0Rh58DEMQ/SguC03wFj2k0M/mHhw==}
+
+  restore-cursor@3.1.0:
+    resolution: {integrity: sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==}
+    engines: {node: '>=8'}
+
+  retry@0.12.0:
+    resolution: {integrity: sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==}
+    engines: {node: '>= 4'}
+
+  reusify@1.1.0:
+    resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
+    engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
+
+  rimraf@2.6.3:
+    resolution: {integrity: sha512-mwqeW5XsA2qAejG46gYdENaxXjx9onRNCfn7L0duuP4hCuTIi/QO7PDK07KJfp1d+izWPrzEJDcSqBa0OZQriA==}
+    deprecated: Rimraf versions prior to v4 are no longer supported
+    hasBin: true
+
+  roarr@2.15.4:
+    resolution: {integrity: sha512-CHhPh+UNHD2GTXNYhPWLnU8ONHdI+5DI+4EYIAOaiD63rHeYlZvyh8P+in5999TTSFgUYuKUAjzRI4mdh/p+2A==}
+    engines: {node: '>=8.0'}
+
+  rollup@4.59.0:
+    resolution: {integrity: sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==}
+    engines: {node: '>=18.0.0', npm: '>=8.0.0'}
+    hasBin: true
+
+  run-parallel@1.2.0:
+    resolution: {integrity: sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==}
+
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
+  safer-buffer@2.1.2:
+    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
+
+  sanitize-filename@1.6.3:
+    resolution: {integrity: sha512-y/52Mcy7aw3gRm7IrcGDFx/bCk4AhRh2eI9luHOQM86nZsqwiRkkq2GekHXBBD+SmPidc8i2PqtYZl+pWJ8Oeg==}
+
+  sax@1.5.0:
+    resolution: {integrity: sha512-21IYA3Q5cQf089Z6tgaUTr7lDAyzoTPx5HRtbhsME8Udispad8dC/+sziTNugOEx54ilvatQ9YCzl4KQLPcRHA==}
+    engines: {node: '>=11.0.0'}
+
+  scheduler@0.27.0:
+    resolution: {integrity: sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==}
+
+  semver-compare@1.0.0:
+    resolution: {integrity: sha512-YM3/ITh2MJ5MtzaM429anh+x2jiLVjqILF4m4oyQB18W7Ggea7BfqdH/wGMK7dDiMghv/6WG7znWMwUDzJiXow==}
+
+  semver@5.7.2:
+    resolution: {integrity: sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==}
+    hasBin: true
+
+  semver@6.3.1:
+    resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
+    hasBin: true
+
+  semver@7.7.4:
+    resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  serialize-error@7.0.1:
+    resolution: {integrity: sha512-8I8TjW5KMOKsZQTvoxjuSIa7foAwPWGOts+6o7sgjz41/qMD9VQHEDxi6PBvK2l0MXUmqZyNpUK+T2tQaaElvw==}
+    engines: {node: '>=10'}
+
+  shebang-command@2.0.0:
+    resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
+    engines: {node: '>=8'}
+
+  shebang-regex@3.0.0:
+    resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
+    engines: {node: '>=8'}
+
+  siginfo@2.0.0:
+    resolution: {integrity: sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==}
+
+  signal-exit@3.0.7:
+    resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
+
+  signal-exit@4.1.0:
+    resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
+    engines: {node: '>=14'}
+
+  simple-update-notifier@2.0.0:
+    resolution: {integrity: sha512-a2B9Y0KlNXl9u/vsW6sTIu9vGEpfKu2wRV6l1H3XEas/0gUIzGzBoP/IouTcUQbm9JWZLH3COxyn03TYlFax6w==}
+    engines: {node: '>=10'}
+
+  slice-ansi@3.0.0:
+    resolution: {integrity: sha512-pSyv7bSTC7ig9Dcgbw9AuRNUb5k5V6oDudjZoMBSr13qpLBG7tB+zgCkARjq7xIUgdz5P1Qe8u+rSGdouOOIyQ==}
+    engines: {node: '>=8'}
+
+  smart-buffer@4.2.0:
+    resolution: {integrity: sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==}
+    engines: {node: '>= 6.0.0', npm: '>= 3.0.0'}
+
+  socks-proxy-agent@8.0.5:
+    resolution: {integrity: sha512-HehCEsotFqbPW9sJ8WVYB6UbmIMv7kUUORIF2Nncq4VQvBfNBLibW9YZR5dlYCSUhwcD628pRllm7n+E+YTzJw==}
+    engines: {node: '>= 14'}
+
+  socks@2.8.7:
+    resolution: {integrity: sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==}
+    engines: {node: '>= 10.0.0', npm: '>= 3.0.0'}
+
+  source-map-js@1.2.1:
+    resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
+    engines: {node: '>=0.10.0'}
+
+  source-map-support@0.5.21:
+    resolution: {integrity: sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==}
+
+  source-map@0.6.1:
+    resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
+    engines: {node: '>=0.10.0'}
+
+  sprintf-js@1.1.3:
+    resolution: {integrity: sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==}
+
+  ssri@12.0.0:
+    resolution: {integrity: sha512-S7iGNosepx9RadX82oimUkvr0Ct7IjJbEbs4mJcTxst8um95J3sDYU1RBEOvdu6oL1Wek2ODI5i4MAw+dZ6cAQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  stackback@0.0.2:
+    resolution: {integrity: sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==}
+
+  stat-mode@1.0.0:
+    resolution: {integrity: sha512-jH9EhtKIjuXZ2cWxmXS8ZP80XyC3iasQxMDV8jzhNJpfDb7VbQLVW4Wvsxz9QZvzV+G4YoSfBUVKDOyxLzi/sg==}
+    engines: {node: '>= 6'}
+
+  std-env@4.0.0:
+    resolution: {integrity: sha512-zUMPtQ/HBY3/50VbpkupYHbRroTRZJPRLvreamgErJVys0ceuzMkD44J/QjqhHjOzK42GQ3QZIeFG1OYfOtKqQ==}
+
+  string-width@4.2.3:
+    resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
+    engines: {node: '>=8'}
+
+  string-width@5.1.2:
+    resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
+    engines: {node: '>=12'}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  strip-ansi@6.0.1:
+    resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
+    engines: {node: '>=8'}
+
+  strip-ansi@7.2.0:
+    resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
+    engines: {node: '>=12'}
+
+  strip-json-comments@3.1.1:
+    resolution: {integrity: sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==}
+    engines: {node: '>=8'}
+
+  sumchecker@3.0.1:
+    resolution: {integrity: sha512-MvjXzkz/BOfyVDkG0oFOtBxHX2u3gKbMHIF/dXblZsgD3BWOFLmHovIpZY7BykJdAjcqRCBi1WYBNdEC9yI7vg==}
+    engines: {node: '>= 8.0'}
+
+  supports-color@7.2.0:
+    resolution: {integrity: sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==}
+    engines: {node: '>=8'}
+
+  tailwind-merge@3.5.0:
+    resolution: {integrity: sha512-I8K9wewnVDkL1NTGoqWmVEIlUcB9gFriAEkXkfCjX5ib8ezGxtR3xD7iZIxrfArjEsH7F1CHD4RFUtxefdqV/A==}
+
+  tailwindcss@4.2.1:
+    resolution: {integrity: sha512-/tBrSQ36vCleJkAOsy9kbNTgaxvGbyOamC30PRePTQe/o1MFwEKHQk4Cn7BNGaPtjp+PuUrByJehM1hgxfq4sw==}
+
+  tapable@2.3.0:
+    resolution: {integrity: sha512-g9ljZiwki/LfxmQADO3dEY1CbpmXT5Hm2fJ+QaGKwSXUylMybePR7/67YW7jOrrvjEgL1Fmz5kzyAjWVWLlucg==}
+    engines: {node: '>=6'}
+
+  tar@7.5.11:
+    resolution: {integrity: sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==}
+    engines: {node: '>=18'}
+
+  temp-file@3.4.0:
+    resolution: {integrity: sha512-C5tjlC/HCtVUOi3KWVokd4vHVViOmGjtLwIh4MuzPo/nMYTV/p1urt3RnMz2IWXDdKEGJH3k5+KPxtqRsUYGtg==}
+
+  temp@0.9.4:
+    resolution: {integrity: sha512-yYrrsWnrXMcdsnu/7YMYAofM1ktpL5By7vZhf15CrXijWWrEYZks5AXBudalfSWJLlnen/QUJUB5aoB0kqZUGA==}
+    engines: {node: '>=6.0.0'}
+
+  tiny-async-pool@1.3.0:
+    resolution: {integrity: sha512-01EAw5EDrcVrdgyCLgoSPvqznC0sVxDSVeiOz09FUpjh71G79VCqneOr+xvt7T1r76CF6ZZfPjHorN2+d+3mqA==}
+
+  tiny-typed-emitter@2.1.0:
+    resolution: {integrity: sha512-qVtvMxeXbVej0cQWKqVSSAHmKZEHAvxdF8HEUBFWts8h+xEo5m/lEiPakuyZ3BnCBjOD8i24kzNOiOLLgsSxhA==}
+
+  tinybench@2.9.0:
+    resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}
+
+  tinyexec@1.0.4:
+    resolution: {integrity: sha512-u9r3uZC0bdpGOXtlxUIdwf9pkmvhqJdrVCH9fapQtgy/OeTTMZ1nqH7agtvEfmGui6e1XxjcdrlxvxJvc3sMqw==}
+    engines: {node: '>=18'}
+
+  tinyglobby@0.2.15:
+    resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==}
+    engines: {node: '>=12.0.0'}
+
+  tinyrainbow@3.1.0:
+    resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==}
+    engines: {node: '>=14.0.0'}
+
+  tmp-promise@3.0.3:
+    resolution: {integrity: sha512-RwM7MoPojPxsOBYnyd2hy0bxtIlVrihNs9pj5SUvY8Zz1sQcQG2tG1hSr8PDxfgEB8RNKDhqbIlroIarSNDNsQ==}
+
+  tmp@0.2.5:
+    resolution: {integrity: sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==}
+    engines: {node: '>=14.14'}
+
+  to-regex-range@5.0.1:
+    resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==}
+    engines: {node: '>=8.0'}
+
+  truncate-utf8-bytes@1.0.2:
+    resolution: {integrity: sha512-95Pu1QXQvruGEhv62XCMO3Mm90GscOCClvrIUwCM0PYOXK3kaF3l3sIHxx71ThJfcbM2O5Au6SO3AWCSEfW4mQ==}
+
+  ts-api-utils@2.4.0:
+    resolution: {integrity: sha512-3TaVTaAv2gTiMB35i3FiGJaRfwb3Pyn/j3m/bfAvGe8FB7CF6u+LMYqYlDh7reQf7UNvoTvdfAqHGmPGOSsPmA==}
+    engines: {node: '>=18.12'}
+    peerDependencies:
+      typescript: '>=4.8.4'
+
+  tslib@2.8.1:
+    resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
+
+  type-check@0.4.0:
+    resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==}
+    engines: {node: '>= 0.8.0'}
+
+  type-fest@0.13.1:
+    resolution: {integrity: sha512-34R7HTnG0XIJcBSn5XhDd7nNFPRcXYRZrBB2O2jdKqYODldSzBAqzsWoZYYvduky73toYS/ESqxPvkDf/F0XMg==}
+    engines: {node: '>=10'}
+
+  typescript-eslint@8.46.1:
+    resolution: {integrity: sha512-VHgijW803JafdSsDO8I761r3SHrgk4T00IdyQ+/UsthtgPRsBWQLqoSxOolxTpxRKi1kGXK0bSz4CoAc9ObqJA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0
+      typescript: '>=4.8.4 <6.0.0'
+
+  typescript@5.9.3:
+    resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
+    engines: {node: '>=14.17'}
+    hasBin: true
+
+  undici-types@6.21.0:
+    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
+
+  undici-types@7.16.0:
+    resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
+
+  undici-types@7.18.2:
+    resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
+
+  unique-filename@4.0.0:
+    resolution: {integrity: sha512-XSnEewXmQ+veP7xX2dS5Q4yZAvO40cBN2MWkJ7D/6sW4Dg6wYBNwM1Vrnz1FhH5AdeLIlUXRI9e28z1YZi71NQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  unique-slug@5.0.0:
+    resolution: {integrity: sha512-9OdaqO5kwqR+1kVgHAhsp5vPNU0hnxRa26rBFNfNgM7M6pNtgzeBn3s/xbyCQL3dcjzOatcef6UUHpB/6MaETg==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  universalify@0.1.2:
+    resolution: {integrity: sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==}
+    engines: {node: '>= 4.0.0'}
+
+  universalify@2.0.1:
+    resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
+    engines: {node: '>= 10.0.0'}
+
+  update-browserslist-db@1.2.3:
+    resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==}
+    hasBin: true
+    peerDependencies:
+      browserslist: '>= 4.21.0'
+
+  uri-js@4.4.1:
+    resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}
+
+  utf8-byte-length@1.0.5:
+    resolution: {integrity: sha512-Xn0w3MtiQ6zoz2vFyUVruaCL53O/DwUvkEeOvj+uulMm0BkUGYWmBYVyElqZaSLhY6ZD0ulfU3aBra2aVT4xfA==}
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  verror@1.10.1:
+    resolution: {integrity: sha512-veufcmxri4e3XSrT0xwfUR7kguIkaxBeosDg00yDWhk49wdwkSUrvvsm7nc75e1PUyvIeZj6nS8VQRYz2/S4Xg==}
+    engines: {node: '>=0.6.0'}
+
+  vite@7.3.1:
+    resolution: {integrity: sha512-w+N7Hifpc3gRjZ63vYBXA56dvvRlNWRczTdmCBBa+CotUzAPf5b7YMdMR/8CQoeYE5LX3W4wj6RYTgonm1b9DA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      '@types/node': ^20.19.0 || >=22.12.0
+      jiti: '>=1.21.0'
+      less: ^4.0.0
+      lightningcss: ^1.21.0
+      sass: ^1.70.0
+      sass-embedded: ^1.70.0
+      stylus: '>=0.54.8'
+      sugarss: ^5.0.0
+      terser: ^5.16.0
+      tsx: ^4.8.1
+      yaml: ^2.4.2
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+      jiti:
+        optional: true
+      less:
+        optional: true
+      lightningcss:
+        optional: true
+      sass:
+        optional: true
+      sass-embedded:
+        optional: true
+      stylus:
+        optional: true
+      sugarss:
+        optional: true
+      terser:
+        optional: true
+      tsx:
+        optional: true
+      yaml:
+        optional: true
+
+  vitest@4.1.0:
+    resolution: {integrity: sha512-YbDrMF9jM2Lqc++2530UourxZHmkKLxrs4+mYhEwqWS97WJ7wOYEkcr+QfRgJ3PW9wz3odRijLZjHEaRLTNbqw==}
+    engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
+    hasBin: true
+    peerDependencies:
+      '@edge-runtime/vm': '*'
+      '@opentelemetry/api': ^1.9.0
+      '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
+      '@vitest/browser-playwright': 4.1.0
+      '@vitest/browser-preview': 4.1.0
+      '@vitest/browser-webdriverio': 4.1.0
+      '@vitest/ui': 4.1.0
+      happy-dom: '*'
+      jsdom: '*'
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0-0
+    peerDependenciesMeta:
+      '@edge-runtime/vm':
+        optional: true
+      '@opentelemetry/api':
+        optional: true
+      '@types/node':
+        optional: true
+      '@vitest/browser-playwright':
+        optional: true
+      '@vitest/browser-preview':
+        optional: true
+      '@vitest/browser-webdriverio':
+        optional: true
+      '@vitest/ui':
+        optional: true
+      happy-dom:
+        optional: true
+      jsdom:
+        optional: true
+
+  wcwidth@1.0.1:
+    resolution: {integrity: sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==}
+
+  which@2.0.2:
+    resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
+    engines: {node: '>= 8'}
+    hasBin: true
+
+  which@5.0.0:
+    resolution: {integrity: sha512-JEdGzHwwkrbWoGOlIHqQ5gtprKGOenpDHpxE9zVR1bWbOtYRyPPHMe9FaP6x61CmNaTThSkb0DAJte5jD+DmzQ==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+    hasBin: true
+
+  why-is-node-running@2.3.0:
+    resolution: {integrity: sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==}
+    engines: {node: '>=8'}
+    hasBin: true
+
+  word-wrap@1.2.5:
+    resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
+    engines: {node: '>=0.10.0'}
+
+  wrap-ansi@7.0.0:
+    resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
+    engines: {node: '>=10'}
+
+  wrap-ansi@8.1.0:
+    resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
+    engines: {node: '>=12'}
+
+  wrappy@1.0.2:
+    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
+
+  xmlbuilder@15.1.1:
+    resolution: {integrity: sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==}
+    engines: {node: '>=8.0'}
+
+  y18n@5.0.8:
+    resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
+    engines: {node: '>=10'}
+
+  yallist@3.1.1:
+    resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
+
+  yallist@4.0.0:
+    resolution: {integrity: sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==}
+
+  yallist@5.0.0:
+    resolution: {integrity: sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==}
+    engines: {node: '>=18'}
+
+  yargs-parser@21.1.1:
+    resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
+    engines: {node: '>=12'}
+
+  yargs@17.7.2:
+    resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==}
+    engines: {node: '>=12'}
+
+  yauzl@2.10.0:
+    resolution: {integrity: sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==}
+
+  yocto-queue@0.1.0:
+    resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
+    engines: {node: '>=10'}
+
+  zod-validation-error@4.0.2:
+    resolution: {integrity: sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ==}
+    engines: {node: '>=18.0.0'}
+    peerDependencies:
+      zod: ^3.25.0 || ^4.0.0
+
+  zod@4.3.6:
+    resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
+
+snapshots:
+
+  7zip-bin@5.2.0: {}
+
+  '@babel/code-frame@7.29.0':
+    dependencies:
+      '@babel/helper-validator-identifier': 7.28.5
+      js-tokens: 4.0.0
+      picocolors: 1.1.1
+
+  '@babel/compat-data@7.29.0': {}
+
+  '@babel/core@7.29.0':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/helper-compilation-targets': 7.28.6
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0)
+      '@babel/helpers': 7.28.6
+      '@babel/parser': 7.29.0
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+      '@jridgewell/remapping': 2.3.5
+      convert-source-map: 2.0.0
+      debug: 4.4.3
+      gensync: 1.0.0-beta.2
+      json5: 2.2.3
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/generator@7.29.1':
+    dependencies:
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+      jsesc: 3.1.0
+
+  '@babel/helper-compilation-targets@7.28.6':
+    dependencies:
+      '@babel/compat-data': 7.29.0
+      '@babel/helper-validator-option': 7.27.1
+      browserslist: 4.28.1
+      lru-cache: 5.1.1
+      semver: 6.3.1
+
+  '@babel/helper-globals@7.28.0': {}
+
+  '@babel/helper-module-imports@7.28.6':
+    dependencies:
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-imports': 7.28.6
+      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/traverse': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-plugin-utils@7.28.6': {}
+
+  '@babel/helper-string-parser@7.27.1': {}
+
+  '@babel/helper-validator-identifier@7.28.5': {}
+
+  '@babel/helper-validator-option@7.27.1': {}
+
+  '@babel/helpers@7.28.6':
+    dependencies:
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
+
+  '@babel/parser@7.29.0':
+    dependencies:
+      '@babel/types': 7.29.0
+
+  '@babel/plugin-transform-arrow-functions@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+
+  '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+
+  '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+
+  '@babel/template@7.28.6':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
+
+  '@babel/traverse@7.29.0':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/helper-globals': 7.28.0
+      '@babel/parser': 7.29.0
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/types@7.29.0':
+    dependencies:
+      '@babel/helper-string-parser': 7.27.1
+      '@babel/helper-validator-identifier': 7.28.5
+
+  '@develar/schema-utils@2.6.5':
+    dependencies:
+      ajv: 6.14.0
+      ajv-keywords: 3.5.2(ajv@6.14.0)
+
+  '@electron/asar@3.4.1':
+    dependencies:
+      commander: 5.1.0
+      glob: 7.2.3
+      minimatch: 3.1.5
+
+  '@electron/fuses@1.8.0':
+    dependencies:
+      chalk: 4.1.2
+      fs-extra: 9.1.0
+      minimist: 1.2.8
+
+  '@electron/get@2.0.3':
+    dependencies:
+      debug: 4.4.3
+      env-paths: 2.2.1
+      fs-extra: 8.1.0
+      got: 11.8.6
+      progress: 2.0.3
+      semver: 6.3.1
+      sumchecker: 3.0.1
+    optionalDependencies:
+      global-agent: 3.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@electron/get@3.1.0':
+    dependencies:
+      debug: 4.4.3
+      env-paths: 2.2.1
+      fs-extra: 8.1.0
+      got: 11.8.6
+      progress: 2.0.3
+      semver: 6.3.1
+      sumchecker: 3.0.1
+    optionalDependencies:
+      global-agent: 3.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@electron/notarize@2.5.0':
+    dependencies:
+      debug: 4.4.3
+      fs-extra: 9.1.0
+      promise-retry: 2.0.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@electron/osx-sign@1.3.3':
+    dependencies:
+      compare-version: 0.1.2
+      debug: 4.4.3
+      fs-extra: 10.1.0
+      isbinaryfile: 4.0.10
+      minimist: 1.2.8
+      plist: 3.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@electron/rebuild@4.0.3':
+    dependencies:
+      '@malept/cross-spawn-promise': 2.0.0
+      debug: 4.4.3
+      detect-libc: 2.1.2
+      got: 11.8.6
+      graceful-fs: 4.2.11
+      node-abi: 4.27.0
+      node-api-version: 0.2.1
+      node-gyp: 11.5.0
+      ora: 5.4.1
+      read-binary-file-arch: 1.0.6
+      semver: 7.7.4
+      tar: 7.5.11
+      yargs: 17.7.2
+    transitivePeerDependencies:
+      - supports-color
+
+  '@electron/universal@2.0.3':
+    dependencies:
+      '@electron/asar': 3.4.1
+      '@malept/cross-spawn-promise': 2.0.0
+      debug: 4.4.3
+      dir-compare: 4.2.0
+      fs-extra: 11.3.4
+      minimatch: 9.0.9
+      plist: 3.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@electron/windows-sign@1.2.2':
+    dependencies:
+      cross-dirname: 0.1.0
+      debug: 4.4.3
+      fs-extra: 11.3.4
+      minimist: 1.2.8
+      postject: 1.0.0-alpha.6
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  '@esbuild/aix-ppc64@0.25.12':
+    optional: true
+
+  '@esbuild/aix-ppc64@0.27.4':
+    optional: true
+
+  '@esbuild/android-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/android-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/android-arm@0.25.12':
+    optional: true
+
+  '@esbuild/android-arm@0.27.4':
+    optional: true
+
+  '@esbuild/android-x64@0.25.12':
+    optional: true
+
+  '@esbuild/android-x64@0.27.4':
+    optional: true
+
+  '@esbuild/darwin-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/darwin-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/darwin-x64@0.25.12':
+    optional: true
+
+  '@esbuild/darwin-x64@0.27.4':
+    optional: true
+
+  '@esbuild/freebsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/freebsd-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/freebsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/freebsd-x64@0.27.4':
+    optional: true
+
+  '@esbuild/linux-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/linux-arm@0.25.12':
+    optional: true
+
+  '@esbuild/linux-arm@0.27.4':
+    optional: true
+
+  '@esbuild/linux-ia32@0.25.12':
+    optional: true
+
+  '@esbuild/linux-ia32@0.27.4':
+    optional: true
+
+  '@esbuild/linux-loong64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-loong64@0.27.4':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.25.12':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.27.4':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.27.4':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.27.4':
+    optional: true
+
+  '@esbuild/linux-s390x@0.25.12':
+    optional: true
+
+  '@esbuild/linux-s390x@0.27.4':
+    optional: true
+
+  '@esbuild/linux-x64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-x64@0.27.4':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.27.4':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.27.4':
+    optional: true
+
+  '@esbuild/openharmony-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/openharmony-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/sunos-x64@0.25.12':
+    optional: true
+
+  '@esbuild/sunos-x64@0.27.4':
+    optional: true
+
+  '@esbuild/win32-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/win32-arm64@0.27.4':
+    optional: true
+
+  '@esbuild/win32-ia32@0.25.12':
+    optional: true
+
+  '@esbuild/win32-ia32@0.27.4':
+    optional: true
+
+  '@esbuild/win32-x64@0.25.12':
+    optional: true
+
+  '@esbuild/win32-x64@0.27.4':
+    optional: true
+
+  '@eslint-community/eslint-utils@4.9.1(eslint@9.38.0(jiti@2.6.1))':
+    dependencies:
+      eslint: 9.38.0(jiti@2.6.1)
+      eslint-visitor-keys: 3.4.3
+
+  '@eslint-community/regexpp@4.12.2': {}
+
+  '@eslint/config-array@0.21.2':
+    dependencies:
+      '@eslint/object-schema': 2.1.7
+      debug: 4.4.3
+      minimatch: 3.1.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@eslint/config-helpers@0.4.2':
+    dependencies:
+      '@eslint/core': 0.17.0
+
+  '@eslint/core@0.16.0':
+    dependencies:
+      '@types/json-schema': 7.0.15
+
+  '@eslint/core@0.17.0':
+    dependencies:
+      '@types/json-schema': 7.0.15
+
+  '@eslint/eslintrc@3.3.5':
+    dependencies:
+      ajv: 6.14.0
+      debug: 4.4.3
+      espree: 10.4.0
+      globals: 14.0.0
+      ignore: 5.3.2
+      import-fresh: 3.3.1
+      js-yaml: 4.1.1
+      minimatch: 3.1.5
+      strip-json-comments: 3.1.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@eslint/js@9.38.0': {}
+
+  '@eslint/object-schema@2.1.7': {}
+
+  '@eslint/plugin-kit@0.4.1':
+    dependencies:
+      '@eslint/core': 0.17.0
+      levn: 0.4.1
+
+  '@fontsource-variable/jetbrains-mono@5.2.8': {}
+
+  '@fontsource-variable/outfit@5.2.8': {}
+
+  '@humanfs/core@0.19.1': {}
+
+  '@humanfs/node@0.16.7':
+    dependencies:
+      '@humanfs/core': 0.19.1
+      '@humanwhocodes/retry': 0.4.3
+
+  '@humanwhocodes/module-importer@1.0.1': {}
+
+  '@humanwhocodes/retry@0.4.3': {}
+
+  '@isaacs/cliui@8.0.2':
+    dependencies:
+      string-width: 5.1.2
+      string-width-cjs: string-width@4.2.3
+      strip-ansi: 7.2.0
+      strip-ansi-cjs: strip-ansi@6.0.1
+      wrap-ansi: 8.1.0
+      wrap-ansi-cjs: wrap-ansi@7.0.0
+
+  '@isaacs/fs-minipass@4.0.1':
+    dependencies:
+      minipass: 7.1.3
+
+  '@jridgewell/gen-mapping@0.3.13':
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/remapping@2.3.5':
+    dependencies:
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/resolve-uri@3.1.2': {}
+
+  '@jridgewell/sourcemap-codec@1.5.5': {}
+
+  '@jridgewell/trace-mapping@0.3.31':
+    dependencies:
+      '@jridgewell/resolve-uri': 3.1.2
+      '@jridgewell/sourcemap-codec': 1.5.5
+
+  '@malept/cross-spawn-promise@2.0.0':
+    dependencies:
+      cross-spawn: 7.0.6
+
+  '@malept/flatpak-bundler@0.4.0':
+    dependencies:
+      debug: 4.4.3
+      fs-extra: 9.1.0
+      lodash: 4.17.23
+      tmp-promise: 3.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@nodelib/fs.scandir@2.1.5':
+    dependencies:
+      '@nodelib/fs.stat': 2.0.5
+      run-parallel: 1.2.0
+
+  '@nodelib/fs.stat@2.0.5': {}
+
+  '@nodelib/fs.walk@1.2.8':
+    dependencies:
+      '@nodelib/fs.scandir': 2.1.5
+      fastq: 1.20.1
+
+  '@npmcli/agent@3.0.0':
+    dependencies:
+      agent-base: 7.1.4
+      http-proxy-agent: 7.0.2
+      https-proxy-agent: 7.0.6
+      lru-cache: 10.4.3
+      socks-proxy-agent: 8.0.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@npmcli/fs@4.0.0':
+    dependencies:
+      semver: 7.7.4
+
+  '@phosphor-icons/react@2.1.10(react-dom@19.2.4(react@19.2.4))(react@19.2.4)':
+    dependencies:
+      react: 19.2.4
+      react-dom: 19.2.4(react@19.2.4)
+
+  '@pkgjs/parseargs@0.11.0':
+    optional: true
+
+  '@playwright/test@1.58.2':
+    dependencies:
+      playwright: 1.58.2
+
+  '@rolldown/pluginutils@1.0.0-rc.3': {}
+
+  '@rollup/rollup-android-arm-eabi@4.59.0':
+    optional: true
+
+  '@rollup/rollup-android-arm64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-darwin-arm64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-darwin-x64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-freebsd-arm64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-freebsd-x64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-arm-gnueabihf@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-arm-musleabihf@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-arm64-gnu@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-arm64-musl@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-loong64-gnu@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-loong64-musl@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-ppc64-gnu@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-ppc64-musl@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-riscv64-gnu@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-riscv64-musl@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-s390x-gnu@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-x64-gnu@4.59.0':
+    optional: true
+
+  '@rollup/rollup-linux-x64-musl@4.59.0':
+    optional: true
+
+  '@rollup/rollup-openbsd-x64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-openharmony-arm64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-win32-arm64-msvc@4.59.0':
+    optional: true
+
+  '@rollup/rollup-win32-ia32-msvc@4.59.0':
+    optional: true
+
+  '@rollup/rollup-win32-x64-gnu@4.59.0':
+    optional: true
+
+  '@rollup/rollup-win32-x64-msvc@4.59.0':
+    optional: true
+
+  '@sindresorhus/is@4.6.0': {}
+
+  '@standard-schema/spec@1.1.0': {}
+
+  '@szmarczak/http-timer@4.0.6':
+    dependencies:
+      defer-to-connect: 2.0.1
+
+  '@tailwindcss/node@4.2.1':
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      enhanced-resolve: 5.20.0
+      jiti: 2.6.1
+      lightningcss: 1.31.1
+      magic-string: 0.30.21
+      source-map-js: 1.2.1
+      tailwindcss: 4.2.1
+
+  '@tailwindcss/oxide-android-arm64@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-arm64@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-x64@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-freebsd-x64@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-musl@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-wasm32-wasi@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.2.1':
+    optional: true
+
+  '@tailwindcss/oxide@4.2.1':
+    optionalDependencies:
+      '@tailwindcss/oxide-android-arm64': 4.2.1
+      '@tailwindcss/oxide-darwin-arm64': 4.2.1
+      '@tailwindcss/oxide-darwin-x64': 4.2.1
+      '@tailwindcss/oxide-freebsd-x64': 4.2.1
+      '@tailwindcss/oxide-linux-arm-gnueabihf': 4.2.1
+      '@tailwindcss/oxide-linux-arm64-gnu': 4.2.1
+      '@tailwindcss/oxide-linux-arm64-musl': 4.2.1
+      '@tailwindcss/oxide-linux-x64-gnu': 4.2.1
+      '@tailwindcss/oxide-linux-x64-musl': 4.2.1
+      '@tailwindcss/oxide-wasm32-wasi': 4.2.1
+      '@tailwindcss/oxide-win32-arm64-msvc': 4.2.1
+      '@tailwindcss/oxide-win32-x64-msvc': 4.2.1
+
+  '@tailwindcss/vite@4.2.1(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))':
+    dependencies:
+      '@tailwindcss/node': 4.2.1
+      '@tailwindcss/oxide': 4.2.1
+      tailwindcss: 4.2.1
+      vite: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)
+
+  '@types/babel__core@7.20.5':
+    dependencies:
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
+      '@types/babel__generator': 7.27.0
+      '@types/babel__template': 7.4.4
+      '@types/babel__traverse': 7.28.0
+
+  '@types/babel__generator@7.27.0':
+    dependencies:
+      '@babel/types': 7.29.0
+
+  '@types/babel__template@7.4.4':
+    dependencies:
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
+
+  '@types/babel__traverse@7.28.0':
+    dependencies:
+      '@babel/types': 7.29.0
+
+  '@types/cacheable-request@6.0.3':
+    dependencies:
+      '@types/http-cache-semantics': 4.2.0
+      '@types/keyv': 3.1.4
+      '@types/node': 25.5.0
+      '@types/responselike': 1.0.3
+
+  '@types/chai@5.2.3':
+    dependencies:
+      '@types/deep-eql': 4.0.2
+      assertion-error: 2.0.1
+
+  '@types/debug@4.1.12':
+    dependencies:
+      '@types/ms': 2.1.0
+
+  '@types/deep-eql@4.0.2': {}
+
+  '@types/estree@1.0.8': {}
+
+  '@types/fs-extra@9.0.13':
+    dependencies:
+      '@types/node': 25.5.0
+
+  '@types/http-cache-semantics@4.2.0': {}
+
+  '@types/json-schema@7.0.15': {}
+
+  '@types/keyv@3.1.4':
+    dependencies:
+      '@types/node': 25.5.0
+
+  '@types/ms@2.1.0': {}
+
+  '@types/node@22.19.15':
+    dependencies:
+      undici-types: 6.21.0
+
+  '@types/node@24.12.0':
+    dependencies:
+      undici-types: 7.16.0
+
+  '@types/node@25.5.0':
+    dependencies:
+      undici-types: 7.18.2
+
+  '@types/plist@3.0.5':
+    dependencies:
+      '@types/node': 25.5.0
+      xmlbuilder: 15.1.1
+    optional: true
+
+  '@types/react-dom@19.2.3(@types/react@19.2.14)':
+    dependencies:
+      '@types/react': 19.2.14
+
+  '@types/react@19.2.14':
+    dependencies:
+      csstype: 3.2.3
+
+  '@types/responselike@1.0.3':
+    dependencies:
+      '@types/node': 25.5.0
+
+  '@types/verror@1.10.11':
+    optional: true
+
+  '@types/yauzl@2.10.3':
+    dependencies:
+      '@types/node': 25.5.0
+    optional: true
+
+  '@typescript-eslint/eslint-plugin@8.46.1(@typescript-eslint/parser@8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3))(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)':
+    dependencies:
+      '@eslint-community/regexpp': 4.12.2
+      '@typescript-eslint/parser': 8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/scope-manager': 8.46.1
+      '@typescript-eslint/type-utils': 8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/visitor-keys': 8.46.1
+      eslint: 9.38.0(jiti@2.6.1)
+      graphemer: 1.4.0
+      ignore: 7.0.5
+      natural-compare: 1.4.0
+      ts-api-utils: 2.4.0(typescript@5.9.3)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/parser@8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/scope-manager': 8.46.1
+      '@typescript-eslint/types': 8.46.1
+      '@typescript-eslint/typescript-estree': 8.46.1(typescript@5.9.3)
+      '@typescript-eslint/visitor-keys': 8.46.1
+      debug: 4.4.3
+      eslint: 9.38.0(jiti@2.6.1)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/project-service@8.46.1(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/tsconfig-utils': 8.46.1(typescript@5.9.3)
+      '@typescript-eslint/types': 8.46.1
+      debug: 4.4.3
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/scope-manager@8.46.1':
+    dependencies:
+      '@typescript-eslint/types': 8.46.1
+      '@typescript-eslint/visitor-keys': 8.46.1
+
+  '@typescript-eslint/tsconfig-utils@8.46.1(typescript@5.9.3)':
+    dependencies:
+      typescript: 5.9.3
+
+  '@typescript-eslint/type-utils@8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/types': 8.46.1
+      '@typescript-eslint/typescript-estree': 8.46.1(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      debug: 4.4.3
+      eslint: 9.38.0(jiti@2.6.1)
+      ts-api-utils: 2.4.0(typescript@5.9.3)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/types@8.46.1': {}
+
+  '@typescript-eslint/typescript-estree@8.46.1(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/project-service': 8.46.1(typescript@5.9.3)
+      '@typescript-eslint/tsconfig-utils': 8.46.1(typescript@5.9.3)
+      '@typescript-eslint/types': 8.46.1
+      '@typescript-eslint/visitor-keys': 8.46.1
+      debug: 4.4.3
+      fast-glob: 3.3.3
+      is-glob: 4.0.3
+      minimatch: 9.0.9
+      semver: 7.7.4
+      ts-api-utils: 2.4.0(typescript@5.9.3)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/utils@8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)':
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@9.38.0(jiti@2.6.1))
+      '@typescript-eslint/scope-manager': 8.46.1
+      '@typescript-eslint/types': 8.46.1
+      '@typescript-eslint/typescript-estree': 8.46.1(typescript@5.9.3)
+      eslint: 9.38.0(jiti@2.6.1)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/visitor-keys@8.46.1':
+    dependencies:
+      '@typescript-eslint/types': 8.46.1
+      eslint-visitor-keys: 4.2.1
+
+  '@vitejs/plugin-react@5.2.0(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
+      '@rolldown/pluginutils': 1.0.0-rc.3
+      '@types/babel__core': 7.20.5
+      react-refresh: 0.18.0
+      vite: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vitest/expect@4.1.0':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@vitest/spy': 4.1.0
+      '@vitest/utils': 4.1.0
+      chai: 6.2.2
+      tinyrainbow: 3.1.0
+
+  '@vitest/mocker@4.1.0(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))':
+    dependencies:
+      '@vitest/spy': 4.1.0
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+    optionalDependencies:
+      vite: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)
+
+  '@vitest/pretty-format@4.1.0':
+    dependencies:
+      tinyrainbow: 3.1.0
+
+  '@vitest/runner@4.1.0':
+    dependencies:
+      '@vitest/utils': 4.1.0
+      pathe: 2.0.3
+
+  '@vitest/snapshot@4.1.0':
+    dependencies:
+      '@vitest/pretty-format': 4.1.0
+      '@vitest/utils': 4.1.0
+      magic-string: 0.30.21
+      pathe: 2.0.3
+
+  '@vitest/spy@4.1.0': {}
+
+  '@vitest/utils@4.1.0':
+    dependencies:
+      '@vitest/pretty-format': 4.1.0
+      convert-source-map: 2.0.0
+      tinyrainbow: 3.1.0
+
+  '@xmldom/xmldom@0.8.11': {}
+
+  abbrev@3.0.1: {}
+
+  acorn-jsx@5.3.2(acorn@8.16.0):
+    dependencies:
+      acorn: 8.16.0
+
+  acorn@8.16.0: {}
+
+  agent-base@7.1.4: {}
+
+  ajv-keywords@3.5.2(ajv@6.14.0):
+    dependencies:
+      ajv: 6.14.0
+
+  ajv@6.14.0:
+    dependencies:
+      fast-deep-equal: 3.1.3
+      fast-json-stable-stringify: 2.1.0
+      json-schema-traverse: 0.4.1
+      uri-js: 4.4.1
+
+  ansi-regex@5.0.1: {}
+
+  ansi-regex@6.2.2: {}
+
+  ansi-styles@4.3.0:
+    dependencies:
+      color-convert: 2.0.1
+
+  ansi-styles@6.2.3: {}
+
+  app-builder-bin@5.0.0-alpha.12: {}
+
+  app-builder-lib@26.8.1(dmg-builder@26.8.1)(electron-builder-squirrel-windows@26.8.1):
+    dependencies:
+      '@develar/schema-utils': 2.6.5
+      '@electron/asar': 3.4.1
+      '@electron/fuses': 1.8.0
+      '@electron/get': 3.1.0
+      '@electron/notarize': 2.5.0
+      '@electron/osx-sign': 1.3.3
+      '@electron/rebuild': 4.0.3
+      '@electron/universal': 2.0.3
+      '@malept/flatpak-bundler': 0.4.0
+      '@types/fs-extra': 9.0.13
+      async-exit-hook: 2.0.1
+      builder-util: 26.8.1
+      builder-util-runtime: 9.5.1
+      chromium-pickle-js: 0.2.0
+      ci-info: 4.3.1
+      debug: 4.4.3
+      dmg-builder: 26.8.1(electron-builder-squirrel-windows@26.8.1)
+      dotenv: 16.6.1
+      dotenv-expand: 11.0.7
+      ejs: 3.1.10
+      electron-builder-squirrel-windows: 26.8.1(dmg-builder@26.8.1)
+      electron-publish: 26.8.1
+      fs-extra: 10.1.0
+      hosted-git-info: 4.1.0
+      isbinaryfile: 5.0.7
+      jiti: 2.6.1
+      js-yaml: 4.1.1
+      json5: 2.2.3
+      lazy-val: 1.0.5
+      minimatch: 10.2.4
+      plist: 3.1.0
+      proper-lockfile: 4.1.2
+      resedit: 1.7.2
+      semver: 7.7.4
+      tar: 7.5.11
+      temp-file: 3.4.0
+      tiny-async-pool: 1.3.0
+      which: 5.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  argparse@2.0.1: {}
+
+  assert-plus@1.0.0:
+    optional: true
+
+  assertion-error@2.0.1: {}
+
+  astral-regex@2.0.0:
+    optional: true
+
+  async-exit-hook@2.0.1: {}
+
+  async@3.2.6: {}
+
+  asynckit@0.4.0: {}
+
+  at-least-node@1.0.0: {}
+
+  balanced-match@1.0.2: {}
+
+  balanced-match@4.0.4: {}
+
+  base64-js@1.5.1: {}
+
+  baseline-browser-mapping@2.10.7: {}
+
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  boolean@3.2.0:
+    optional: true
+
+  brace-expansion@1.1.12:
+    dependencies:
+      balanced-match: 1.0.2
+      concat-map: 0.0.1
+
+  brace-expansion@2.0.2:
+    dependencies:
+      balanced-match: 1.0.2
+
+  brace-expansion@5.0.4:
+    dependencies:
+      balanced-match: 4.0.4
+
+  braces@3.0.3:
+    dependencies:
+      fill-range: 7.1.1
+
+  browserslist@4.28.1:
+    dependencies:
+      baseline-browser-mapping: 2.10.7
+      caniuse-lite: 1.0.30001778
+      electron-to-chromium: 1.5.313
+      node-releases: 2.0.36
+      update-browserslist-db: 1.2.3(browserslist@4.28.1)
+
+  buffer-crc32@0.2.13: {}
+
+  buffer-from@1.1.2: {}
+
+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  builder-util-runtime@9.5.1:
+    dependencies:
+      debug: 4.4.3
+      sax: 1.5.0
+    transitivePeerDependencies:
+      - supports-color
+
+  builder-util@26.8.1:
+    dependencies:
+      7zip-bin: 5.2.0
+      '@types/debug': 4.1.12
+      app-builder-bin: 5.0.0-alpha.12
+      builder-util-runtime: 9.5.1
+      chalk: 4.1.2
+      cross-spawn: 7.0.6
+      debug: 4.4.3
+      fs-extra: 10.1.0
+      http-proxy-agent: 7.0.2
+      https-proxy-agent: 7.0.6
+      js-yaml: 4.1.1
+      sanitize-filename: 1.6.3
+      source-map-support: 0.5.21
+      stat-mode: 1.0.0
+      temp-file: 3.4.0
+      tiny-async-pool: 1.3.0
+    transitivePeerDependencies:
+      - supports-color
+
+  cac@6.7.14: {}
+
+  cacache@19.0.1:
+    dependencies:
+      '@npmcli/fs': 4.0.0
+      fs-minipass: 3.0.3
+      glob: 10.5.0
+      lru-cache: 10.4.3
+      minipass: 7.1.3
+      minipass-collect: 2.0.1
+      minipass-flush: 1.0.5
+      minipass-pipeline: 1.2.4
+      p-map: 7.0.4
+      ssri: 12.0.0
+      tar: 7.5.11
+      unique-filename: 4.0.0
+
+  cacheable-lookup@5.0.4: {}
+
+  cacheable-request@7.0.4:
+    dependencies:
+      clone-response: 1.0.3
+      get-stream: 5.2.0
+      http-cache-semantics: 4.2.0
+      keyv: 4.5.4
+      lowercase-keys: 2.0.0
+      normalize-url: 6.1.0
+      responselike: 2.0.1
+
+  call-bind-apply-helpers@1.0.2:
+    dependencies:
+      es-errors: 1.3.0
+      function-bind: 1.1.2
+
+  callsites@3.1.0: {}
+
+  caniuse-lite@1.0.30001778: {}
+
+  chai@6.2.2: {}
+
+  chalk@4.1.2:
+    dependencies:
+      ansi-styles: 4.3.0
+      supports-color: 7.2.0
+
+  chownr@3.0.0: {}
+
+  chromium-pickle-js@0.2.0: {}
+
+  ci-info@4.3.1: {}
+
+  ci-info@4.4.0: {}
+
+  cli-cursor@3.1.0:
+    dependencies:
+      restore-cursor: 3.1.0
+
+  cli-spinners@2.9.2: {}
+
+  cli-truncate@2.1.0:
+    dependencies:
+      slice-ansi: 3.0.0
+      string-width: 4.2.3
+    optional: true
+
+  cliui@8.0.1:
+    dependencies:
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+      wrap-ansi: 7.0.0
+
+  clone-response@1.0.3:
+    dependencies:
+      mimic-response: 1.0.1
+
+  clone@1.0.4: {}
+
+  clsx@2.1.1: {}
+
+  color-convert@2.0.1:
+    dependencies:
+      color-name: 1.1.4
+
+  color-name@1.1.4: {}
+
+  combined-stream@1.0.8:
+    dependencies:
+      delayed-stream: 1.0.0
+
+  commander@5.1.0: {}
+
+  commander@9.5.0:
+    optional: true
+
+  compare-version@0.1.2: {}
+
+  concat-map@0.0.1: {}
+
+  convert-source-map@2.0.0: {}
+
+  core-util-is@1.0.2:
+    optional: true
+
+  crc@3.8.0:
+    dependencies:
+      buffer: 5.7.1
+    optional: true
+
+  cross-dirname@0.1.0:
+    optional: true
+
+  cross-spawn@7.0.6:
+    dependencies:
+      path-key: 3.1.1
+      shebang-command: 2.0.0
+      which: 2.0.2
+
+  csstype@3.2.3: {}
+
+  debug@4.4.3:
+    dependencies:
+      ms: 2.1.3
+
+  decompress-response@6.0.0:
+    dependencies:
+      mimic-response: 3.1.0
+
+  deep-is@0.1.4: {}
+
+  defaults@1.0.4:
+    dependencies:
+      clone: 1.0.4
+
+  defer-to-connect@2.0.1: {}
+
+  define-data-property@1.1.4:
+    dependencies:
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      gopd: 1.2.0
+    optional: true
+
+  define-properties@1.2.1:
+    dependencies:
+      define-data-property: 1.1.4
+      has-property-descriptors: 1.0.2
+      object-keys: 1.1.1
+    optional: true
+
+  delayed-stream@1.0.0: {}
+
+  detect-libc@2.1.2: {}
+
+  detect-node@2.1.0:
+    optional: true
+
+  dir-compare@4.2.0:
+    dependencies:
+      minimatch: 3.1.5
+      p-limit: 3.1.0
+
+  dmg-builder@26.8.1(electron-builder-squirrel-windows@26.8.1):
+    dependencies:
+      app-builder-lib: 26.8.1(dmg-builder@26.8.1)(electron-builder-squirrel-windows@26.8.1)
+      builder-util: 26.8.1
+      fs-extra: 10.1.0
+      iconv-lite: 0.6.3
+      js-yaml: 4.1.1
+    optionalDependencies:
+      dmg-license: 1.0.11
+    transitivePeerDependencies:
+      - electron-builder-squirrel-windows
+      - supports-color
+
+  dmg-license@1.0.11:
+    dependencies:
+      '@types/plist': 3.0.5
+      '@types/verror': 1.10.11
+      ajv: 6.14.0
+      crc: 3.8.0
+      iconv-corefoundation: 1.1.7
+      plist: 3.1.0
+      smart-buffer: 4.2.0
+      verror: 1.10.1
+    optional: true
+
+  dotenv-expand@11.0.7:
+    dependencies:
+      dotenv: 16.6.1
+
+  dotenv@16.6.1: {}
+
+  dunder-proto@1.0.1:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-errors: 1.3.0
+      gopd: 1.2.0
+
+  eastasianwidth@0.2.0: {}
+
+  ejs@3.1.10:
+    dependencies:
+      jake: 10.9.4
+
+  electron-builder-squirrel-windows@26.8.1(dmg-builder@26.8.1):
+    dependencies:
+      app-builder-lib: 26.8.1(dmg-builder@26.8.1)(electron-builder-squirrel-windows@26.8.1)
+      builder-util: 26.8.1
+      electron-winstaller: 5.4.0
+    transitivePeerDependencies:
+      - dmg-builder
+      - supports-color
+
+  electron-builder@26.8.1(electron-builder-squirrel-windows@26.8.1):
+    dependencies:
+      app-builder-lib: 26.8.1(dmg-builder@26.8.1)(electron-builder-squirrel-windows@26.8.1)
+      builder-util: 26.8.1
+      builder-util-runtime: 9.5.1
+      chalk: 4.1.2
+      ci-info: 4.4.0
+      dmg-builder: 26.8.1(electron-builder-squirrel-windows@26.8.1)
+      fs-extra: 10.1.0
+      lazy-val: 1.0.5
+      simple-update-notifier: 2.0.0
+      yargs: 17.7.2
+    transitivePeerDependencies:
+      - electron-builder-squirrel-windows
+      - supports-color
+
+  electron-log@5.4.3: {}
+
+  electron-publish@26.8.1:
+    dependencies:
+      '@types/fs-extra': 9.0.13
+      builder-util: 26.8.1
+      builder-util-runtime: 9.5.1
+      chalk: 4.1.2
+      form-data: 4.0.5
+      fs-extra: 10.1.0
+      lazy-val: 1.0.5
+      mime: 2.6.0
+    transitivePeerDependencies:
+      - supports-color
+
+  electron-to-chromium@1.5.313: {}
+
+  electron-updater@6.8.3:
+    dependencies:
+      builder-util-runtime: 9.5.1
+      fs-extra: 10.1.0
+      js-yaml: 4.1.1
+      lazy-val: 1.0.5
+      lodash.escaperegexp: 4.1.2
+      lodash.isequal: 4.5.0
+      semver: 7.7.4
+      tiny-typed-emitter: 2.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  electron-vite@5.0.0(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)):
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.0)
+      cac: 6.7.14
+      esbuild: 0.25.12
+      magic-string: 0.30.21
+      picocolors: 1.1.1
+      vite: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  electron-winstaller@5.4.0:
+    dependencies:
+      '@electron/asar': 3.4.1
+      debug: 4.4.3
+      fs-extra: 7.0.1
+      lodash: 4.17.23
+      temp: 0.9.4
+    optionalDependencies:
+      '@electron/windows-sign': 1.2.2
+    transitivePeerDependencies:
+      - supports-color
+
+  electron@39.8.0:
+    dependencies:
+      '@electron/get': 2.0.3
+      '@types/node': 22.19.15
+      extract-zip: 2.0.1
+    transitivePeerDependencies:
+      - supports-color
+
+  emoji-regex@8.0.0: {}
+
+  emoji-regex@9.2.2: {}
+
+  encoding@0.1.13:
+    dependencies:
+      iconv-lite: 0.6.3
+    optional: true
+
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+
+  enhanced-resolve@5.20.0:
+    dependencies:
+      graceful-fs: 4.2.11
+      tapable: 2.3.0
+
+  env-paths@2.2.1: {}
+
+  err-code@2.0.3: {}
+
+  es-define-property@1.0.1: {}
+
+  es-errors@1.3.0: {}
+
+  es-module-lexer@2.0.0: {}
+
+  es-object-atoms@1.1.1:
+    dependencies:
+      es-errors: 1.3.0
+
+  es-set-tostringtag@2.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      has-tostringtag: 1.0.2
+      hasown: 2.0.2
+
+  es6-error@4.1.1:
+    optional: true
+
+  esbuild@0.25.12:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.25.12
+      '@esbuild/android-arm': 0.25.12
+      '@esbuild/android-arm64': 0.25.12
+      '@esbuild/android-x64': 0.25.12
+      '@esbuild/darwin-arm64': 0.25.12
+      '@esbuild/darwin-x64': 0.25.12
+      '@esbuild/freebsd-arm64': 0.25.12
+      '@esbuild/freebsd-x64': 0.25.12
+      '@esbuild/linux-arm': 0.25.12
+      '@esbuild/linux-arm64': 0.25.12
+      '@esbuild/linux-ia32': 0.25.12
+      '@esbuild/linux-loong64': 0.25.12
+      '@esbuild/linux-mips64el': 0.25.12
+      '@esbuild/linux-ppc64': 0.25.12
+      '@esbuild/linux-riscv64': 0.25.12
+      '@esbuild/linux-s390x': 0.25.12
+      '@esbuild/linux-x64': 0.25.12
+      '@esbuild/netbsd-arm64': 0.25.12
+      '@esbuild/netbsd-x64': 0.25.12
+      '@esbuild/openbsd-arm64': 0.25.12
+      '@esbuild/openbsd-x64': 0.25.12
+      '@esbuild/openharmony-arm64': 0.25.12
+      '@esbuild/sunos-x64': 0.25.12
+      '@esbuild/win32-arm64': 0.25.12
+      '@esbuild/win32-ia32': 0.25.12
+      '@esbuild/win32-x64': 0.25.12
+
+  esbuild@0.27.4:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.27.4
+      '@esbuild/android-arm': 0.27.4
+      '@esbuild/android-arm64': 0.27.4
+      '@esbuild/android-x64': 0.27.4
+      '@esbuild/darwin-arm64': 0.27.4
+      '@esbuild/darwin-x64': 0.27.4
+      '@esbuild/freebsd-arm64': 0.27.4
+      '@esbuild/freebsd-x64': 0.27.4
+      '@esbuild/linux-arm': 0.27.4
+      '@esbuild/linux-arm64': 0.27.4
+      '@esbuild/linux-ia32': 0.27.4
+      '@esbuild/linux-loong64': 0.27.4
+      '@esbuild/linux-mips64el': 0.27.4
+      '@esbuild/linux-ppc64': 0.27.4
+      '@esbuild/linux-riscv64': 0.27.4
+      '@esbuild/linux-s390x': 0.27.4
+      '@esbuild/linux-x64': 0.27.4
+      '@esbuild/netbsd-arm64': 0.27.4
+      '@esbuild/netbsd-x64': 0.27.4
+      '@esbuild/openbsd-arm64': 0.27.4
+      '@esbuild/openbsd-x64': 0.27.4
+      '@esbuild/openharmony-arm64': 0.27.4
+      '@esbuild/sunos-x64': 0.27.4
+      '@esbuild/win32-arm64': 0.27.4
+      '@esbuild/win32-ia32': 0.27.4
+      '@esbuild/win32-x64': 0.27.4
+
+  escalade@3.2.0: {}
+
+  escape-string-regexp@4.0.0: {}
+
+  eslint-plugin-react-hooks@7.0.0(eslint@9.38.0(jiti@2.6.1)):
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/parser': 7.29.0
+      eslint: 9.38.0(jiti@2.6.1)
+      hermes-parser: 0.25.1
+      zod: 4.3.6
+      zod-validation-error: 4.0.2(zod@4.3.6)
+    transitivePeerDependencies:
+      - supports-color
+
+  eslint-plugin-react-refresh@0.4.24(eslint@9.38.0(jiti@2.6.1)):
+    dependencies:
+      eslint: 9.38.0(jiti@2.6.1)
+
+  eslint-scope@8.4.0:
+    dependencies:
+      esrecurse: 4.3.0
+      estraverse: 5.3.0
+
+  eslint-visitor-keys@3.4.3: {}
+
+  eslint-visitor-keys@4.2.1: {}
+
+  eslint@9.38.0(jiti@2.6.1):
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@9.38.0(jiti@2.6.1))
+      '@eslint-community/regexpp': 4.12.2
+      '@eslint/config-array': 0.21.2
+      '@eslint/config-helpers': 0.4.2
+      '@eslint/core': 0.16.0
+      '@eslint/eslintrc': 3.3.5
+      '@eslint/js': 9.38.0
+      '@eslint/plugin-kit': 0.4.1
+      '@humanfs/node': 0.16.7
+      '@humanwhocodes/module-importer': 1.0.1
+      '@humanwhocodes/retry': 0.4.3
+      '@types/estree': 1.0.8
+      ajv: 6.14.0
+      chalk: 4.1.2
+      cross-spawn: 7.0.6
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      eslint-scope: 8.4.0
+      eslint-visitor-keys: 4.2.1
+      espree: 10.4.0
+      esquery: 1.7.0
+      esutils: 2.0.3
+      fast-deep-equal: 3.1.3
+      file-entry-cache: 8.0.0
+      find-up: 5.0.0
+      glob-parent: 6.0.2
+      ignore: 5.3.2
+      imurmurhash: 0.1.4
+      is-glob: 4.0.3
+      json-stable-stringify-without-jsonify: 1.0.1
+      lodash.merge: 4.6.2
+      minimatch: 3.1.5
+      natural-compare: 1.4.0
+      optionator: 0.9.4
+    optionalDependencies:
+      jiti: 2.6.1
+    transitivePeerDependencies:
+      - supports-color
+
+  espree@10.4.0:
+    dependencies:
+      acorn: 8.16.0
+      acorn-jsx: 5.3.2(acorn@8.16.0)
+      eslint-visitor-keys: 4.2.1
+
+  esquery@1.7.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  esrecurse@4.3.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  estraverse@5.3.0: {}
+
+  estree-walker@3.0.3:
+    dependencies:
+      '@types/estree': 1.0.8
+
+  esutils@2.0.3: {}
+
+  expect-type@1.3.0: {}
+
+  exponential-backoff@3.1.3: {}
+
+  extract-zip@2.0.1:
+    dependencies:
+      debug: 4.4.3
+      get-stream: 5.2.0
+      yauzl: 2.10.0
+    optionalDependencies:
+      '@types/yauzl': 2.10.3
+    transitivePeerDependencies:
+      - supports-color
+
+  extsprintf@1.4.1:
+    optional: true
+
+  fast-deep-equal@3.1.3: {}
+
+  fast-glob@3.3.3:
+    dependencies:
+      '@nodelib/fs.stat': 2.0.5
+      '@nodelib/fs.walk': 1.2.8
+      glob-parent: 5.1.2
+      merge2: 1.4.1
+      micromatch: 4.0.8
+
+  fast-json-stable-stringify@2.1.0: {}
+
+  fast-levenshtein@2.0.6: {}
+
+  fastq@1.20.1:
+    dependencies:
+      reusify: 1.1.0
+
+  fd-slicer@1.1.0:
+    dependencies:
+      pend: 1.2.0
+
+  fdir@6.5.0(picomatch@4.0.3):
+    optionalDependencies:
+      picomatch: 4.0.3
+
+  file-entry-cache@8.0.0:
+    dependencies:
+      flat-cache: 4.0.1
+
+  filelist@1.0.6:
+    dependencies:
+      minimatch: 5.1.9
+
+  fill-range@7.1.1:
+    dependencies:
+      to-regex-range: 5.0.1
+
+  find-up@5.0.0:
+    dependencies:
+      locate-path: 6.0.0
+      path-exists: 4.0.0
+
+  flat-cache@4.0.1:
+    dependencies:
+      flatted: 3.4.1
+      keyv: 4.5.4
+
+  flatted@3.4.1: {}
+
+  foreground-child@3.3.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      signal-exit: 4.1.0
+
+  form-data@4.0.5:
+    dependencies:
+      asynckit: 0.4.0
+      combined-stream: 1.0.8
+      es-set-tostringtag: 2.1.0
+      hasown: 2.0.2
+      mime-types: 2.1.35
+
+  framer-motion@12.36.0(react-dom@19.2.4(react@19.2.4))(react@19.2.4):
+    dependencies:
+      motion-dom: 12.36.0
+      motion-utils: 12.36.0
+      tslib: 2.8.1
+    optionalDependencies:
+      react: 19.2.4
+      react-dom: 19.2.4(react@19.2.4)
+
+  fs-extra@10.1.0:
+    dependencies:
+      graceful-fs: 4.2.11
+      jsonfile: 6.2.0
+      universalify: 2.0.1
+
+  fs-extra@11.3.4:
+    dependencies:
+      graceful-fs: 4.2.11
+      jsonfile: 6.2.0
+      universalify: 2.0.1
+
+  fs-extra@7.0.1:
+    dependencies:
+      graceful-fs: 4.2.11
+      jsonfile: 4.0.0
+      universalify: 0.1.2
+
+  fs-extra@8.1.0:
+    dependencies:
+      graceful-fs: 4.2.11
+      jsonfile: 4.0.0
+      universalify: 0.1.2
+
+  fs-extra@9.1.0:
+    dependencies:
+      at-least-node: 1.0.0
+      graceful-fs: 4.2.11
+      jsonfile: 6.2.0
+      universalify: 2.0.1
+
+  fs-minipass@3.0.3:
+    dependencies:
+      minipass: 7.1.3
+
+  fs.realpath@1.0.0: {}
+
+  fsevents@2.3.2:
+    optional: true
+
+  fsevents@2.3.3:
+    optional: true
+
+  function-bind@1.1.2: {}
+
+  gensync@1.0.0-beta.2: {}
+
+  get-caller-file@2.0.5: {}
+
+  get-intrinsic@1.3.0:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.1
+      function-bind: 1.1.2
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      has-symbols: 1.1.0
+      hasown: 2.0.2
+      math-intrinsics: 1.1.0
+
+  get-proto@1.0.1:
+    dependencies:
+      dunder-proto: 1.0.1
+      es-object-atoms: 1.1.1
+
+  get-stream@5.2.0:
+    dependencies:
+      pump: 3.0.4
+
+  glob-parent@5.1.2:
+    dependencies:
+      is-glob: 4.0.3
+
+  glob-parent@6.0.2:
+    dependencies:
+      is-glob: 4.0.3
+
+  glob@10.5.0:
+    dependencies:
+      foreground-child: 3.3.1
+      jackspeak: 3.4.3
+      minimatch: 9.0.9
+      minipass: 7.1.3
+      package-json-from-dist: 1.0.1
+      path-scurry: 1.11.1
+
+  glob@7.2.3:
+    dependencies:
+      fs.realpath: 1.0.0
+      inflight: 1.0.6
+      inherits: 2.0.4
+      minimatch: 3.1.5
+      once: 1.4.0
+      path-is-absolute: 1.0.1
+
+  global-agent@3.0.0:
+    dependencies:
+      boolean: 3.2.0
+      es6-error: 4.1.1
+      matcher: 3.0.0
+      roarr: 2.15.4
+      semver: 7.7.4
+      serialize-error: 7.0.1
+    optional: true
+
+  globals@14.0.0: {}
+
+  globals@16.4.0: {}
+
+  globalthis@1.0.4:
+    dependencies:
+      define-properties: 1.2.1
+      gopd: 1.2.0
+    optional: true
+
+  gopd@1.2.0: {}
+
+  got@11.8.6:
+    dependencies:
+      '@sindresorhus/is': 4.6.0
+      '@szmarczak/http-timer': 4.0.6
+      '@types/cacheable-request': 6.0.3
+      '@types/responselike': 1.0.3
+      cacheable-lookup: 5.0.4
+      cacheable-request: 7.0.4
+      decompress-response: 6.0.0
+      http2-wrapper: 1.0.3
+      lowercase-keys: 2.0.0
+      p-cancelable: 2.1.1
+      responselike: 2.0.1
+
+  graceful-fs@4.2.11: {}
+
+  graphemer@1.4.0: {}
+
+  has-flag@4.0.0: {}
+
+  has-property-descriptors@1.0.2:
+    dependencies:
+      es-define-property: 1.0.1
+    optional: true
+
+  has-symbols@1.1.0: {}
+
+  has-tostringtag@1.0.2:
+    dependencies:
+      has-symbols: 1.1.0
+
+  hasown@2.0.2:
+    dependencies:
+      function-bind: 1.1.2
+
+  hermes-estree@0.25.1: {}
+
+  hermes-parser@0.25.1:
+    dependencies:
+      hermes-estree: 0.25.1
+
+  hosted-git-info@4.1.0:
+    dependencies:
+      lru-cache: 6.0.0
+
+  http-cache-semantics@4.2.0: {}
+
+  http-proxy-agent@7.0.2:
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  http2-wrapper@1.0.3:
+    dependencies:
+      quick-lru: 5.1.1
+      resolve-alpn: 1.2.1
+
+  https-proxy-agent@7.0.6:
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  iconv-corefoundation@1.1.7:
+    dependencies:
+      cli-truncate: 2.1.0
+      node-addon-api: 1.7.2
+    optional: true
+
+  iconv-lite@0.6.3:
+    dependencies:
+      safer-buffer: 2.1.2
+
+  ieee754@1.2.1: {}
+
+  ignore@5.3.2: {}
+
+  ignore@7.0.5: {}
+
+  import-fresh@3.3.1:
+    dependencies:
+      parent-module: 1.0.1
+      resolve-from: 4.0.0
+
+  imurmurhash@0.1.4: {}
+
+  inflight@1.0.6:
+    dependencies:
+      once: 1.4.0
+      wrappy: 1.0.2
+
+  inherits@2.0.4: {}
+
+  ip-address@10.1.0: {}
+
+  is-extglob@2.1.1: {}
+
+  is-fullwidth-code-point@3.0.0: {}
+
+  is-glob@4.0.3:
+    dependencies:
+      is-extglob: 2.1.1
+
+  is-interactive@1.0.0: {}
+
+  is-number@7.0.0: {}
+
+  is-unicode-supported@0.1.0: {}
+
+  isbinaryfile@4.0.10: {}
+
+  isbinaryfile@5.0.7: {}
+
+  isexe@2.0.0: {}
+
+  isexe@3.1.5: {}
+
+  jackspeak@3.4.3:
+    dependencies:
+      '@isaacs/cliui': 8.0.2
+    optionalDependencies:
+      '@pkgjs/parseargs': 0.11.0
+
+  jake@10.9.4:
+    dependencies:
+      async: 3.2.6
+      filelist: 1.0.6
+      picocolors: 1.1.1
+
+  jiti@2.6.1: {}
+
+  js-tokens@4.0.0: {}
+
+  js-yaml@4.1.1:
+    dependencies:
+      argparse: 2.0.1
+
+  jsesc@3.1.0: {}
+
+  json-buffer@3.0.1: {}
+
+  json-schema-traverse@0.4.1: {}
+
+  json-stable-stringify-without-jsonify@1.0.1: {}
+
+  json-stringify-safe@5.0.1:
+    optional: true
+
+  json5@2.2.3: {}
+
+  jsonfile@4.0.0:
+    optionalDependencies:
+      graceful-fs: 4.2.11
+
+  jsonfile@6.2.0:
+    dependencies:
+      universalify: 2.0.1
+    optionalDependencies:
+      graceful-fs: 4.2.11
+
+  keyv@4.5.4:
+    dependencies:
+      json-buffer: 3.0.1
+
+  lazy-val@1.0.5: {}
+
+  levn@0.4.1:
+    dependencies:
+      prelude-ls: 1.2.1
+      type-check: 0.4.0
+
+  lightningcss-android-arm64@1.31.1:
+    optional: true
+
+  lightningcss-darwin-arm64@1.31.1:
+    optional: true
+
+  lightningcss-darwin-x64@1.31.1:
+    optional: true
+
+  lightningcss-freebsd-x64@1.31.1:
+    optional: true
+
+  lightningcss-linux-arm-gnueabihf@1.31.1:
+    optional: true
+
+  lightningcss-linux-arm64-gnu@1.31.1:
+    optional: true
+
+  lightningcss-linux-arm64-musl@1.31.1:
+    optional: true
+
+  lightningcss-linux-x64-gnu@1.31.1:
+    optional: true
+
+  lightningcss-linux-x64-musl@1.31.1:
+    optional: true
+
+  lightningcss-win32-arm64-msvc@1.31.1:
+    optional: true
+
+  lightningcss-win32-x64-msvc@1.31.1:
+    optional: true
+
+  lightningcss@1.31.1:
+    dependencies:
+      detect-libc: 2.1.2
+    optionalDependencies:
+      lightningcss-android-arm64: 1.31.1
+      lightningcss-darwin-arm64: 1.31.1
+      lightningcss-darwin-x64: 1.31.1
+      lightningcss-freebsd-x64: 1.31.1
+      lightningcss-linux-arm-gnueabihf: 1.31.1
+      lightningcss-linux-arm64-gnu: 1.31.1
+      lightningcss-linux-arm64-musl: 1.31.1
+      lightningcss-linux-x64-gnu: 1.31.1
+      lightningcss-linux-x64-musl: 1.31.1
+      lightningcss-win32-arm64-msvc: 1.31.1
+      lightningcss-win32-x64-msvc: 1.31.1
+
+  locate-path@6.0.0:
+    dependencies:
+      p-locate: 5.0.0
+
+  lodash.escaperegexp@4.1.2: {}
+
+  lodash.isequal@4.5.0: {}
+
+  lodash.merge@4.6.2: {}
+
+  lodash@4.17.23: {}
+
+  log-symbols@4.1.0:
+    dependencies:
+      chalk: 4.1.2
+      is-unicode-supported: 0.1.0
+
+  lowercase-keys@2.0.0: {}
+
+  lru-cache@10.4.3: {}
+
+  lru-cache@5.1.1:
+    dependencies:
+      yallist: 3.1.1
+
+  lru-cache@6.0.0:
+    dependencies:
+      yallist: 4.0.0
+
+  magic-string@0.30.21:
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.5.5
+
+  make-fetch-happen@14.0.3:
+    dependencies:
+      '@npmcli/agent': 3.0.0
+      cacache: 19.0.1
+      http-cache-semantics: 4.2.0
+      minipass: 7.1.3
+      minipass-fetch: 4.0.1
+      minipass-flush: 1.0.5
+      minipass-pipeline: 1.2.4
+      negotiator: 1.0.0
+      proc-log: 5.0.0
+      promise-retry: 2.0.1
+      ssri: 12.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  matcher@3.0.0:
+    dependencies:
+      escape-string-regexp: 4.0.0
+    optional: true
+
+  math-intrinsics@1.1.0: {}
+
+  merge2@1.4.1: {}
+
+  micromatch@4.0.8:
+    dependencies:
+      braces: 3.0.3
+      picomatch: 2.3.1
+
+  mime-db@1.52.0: {}
+
+  mime-types@2.1.35:
+    dependencies:
+      mime-db: 1.52.0
+
+  mime@2.6.0: {}
+
+  mimic-fn@2.1.0: {}
+
+  mimic-response@1.0.1: {}
+
+  mimic-response@3.1.0: {}
+
+  minimatch@10.2.4:
+    dependencies:
+      brace-expansion: 5.0.4
+
+  minimatch@3.1.5:
+    dependencies:
+      brace-expansion: 1.1.12
+
+  minimatch@5.1.9:
+    dependencies:
+      brace-expansion: 2.0.2
+
+  minimatch@9.0.9:
+    dependencies:
+      brace-expansion: 2.0.2
+
+  minimist@1.2.8: {}
+
+  minipass-collect@2.0.1:
+    dependencies:
+      minipass: 7.1.3
+
+  minipass-fetch@4.0.1:
+    dependencies:
+      minipass: 7.1.3
+      minipass-sized: 1.0.3
+      minizlib: 3.1.0
+    optionalDependencies:
+      encoding: 0.1.13
+
+  minipass-flush@1.0.5:
+    dependencies:
+      minipass: 3.3.6
+
+  minipass-pipeline@1.2.4:
+    dependencies:
+      minipass: 3.3.6
+
+  minipass-sized@1.0.3:
+    dependencies:
+      minipass: 3.3.6
+
+  minipass@3.3.6:
+    dependencies:
+      yallist: 4.0.0
+
+  minipass@7.1.3: {}
+
+  minizlib@3.1.0:
+    dependencies:
+      minipass: 7.1.3
+
+  mkdirp@0.5.6:
+    dependencies:
+      minimist: 1.2.8
+
+  motion-dom@12.36.0:
+    dependencies:
+      motion-utils: 12.36.0
+
+  motion-utils@12.36.0: {}
+
+  ms@2.1.3: {}
+
+  nanoid@3.3.11: {}
+
+  natural-compare@1.4.0: {}
+
+  negotiator@1.0.0: {}
+
+  node-abi@4.27.0:
+    dependencies:
+      semver: 7.7.4
+
+  node-addon-api@1.7.2:
+    optional: true
+
+  node-api-version@0.2.1:
+    dependencies:
+      semver: 7.7.4
+
+  node-gyp@11.5.0:
+    dependencies:
+      env-paths: 2.2.1
+      exponential-backoff: 3.1.3
+      graceful-fs: 4.2.11
+      make-fetch-happen: 14.0.3
+      nopt: 8.1.0
+      proc-log: 5.0.0
+      semver: 7.7.4
+      tar: 7.5.11
+      tinyglobby: 0.2.15
+      which: 5.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  node-releases@2.0.36: {}
+
+  nopt@8.1.0:
+    dependencies:
+      abbrev: 3.0.1
+
+  normalize-url@6.1.0: {}
+
+  object-keys@1.1.1:
+    optional: true
+
+  obug@2.1.1: {}
+
+  once@1.4.0:
+    dependencies:
+      wrappy: 1.0.2
+
+  onetime@5.1.2:
+    dependencies:
+      mimic-fn: 2.1.0
+
+  optionator@0.9.4:
+    dependencies:
+      deep-is: 0.1.4
+      fast-levenshtein: 2.0.6
+      levn: 0.4.1
+      prelude-ls: 1.2.1
+      type-check: 0.4.0
+      word-wrap: 1.2.5
+
+  ora@5.4.1:
+    dependencies:
+      bl: 4.1.0
+      chalk: 4.1.2
+      cli-cursor: 3.1.0
+      cli-spinners: 2.9.2
+      is-interactive: 1.0.0
+      is-unicode-supported: 0.1.0
+      log-symbols: 4.1.0
+      strip-ansi: 6.0.1
+      wcwidth: 1.0.1
+
+  p-cancelable@2.1.1: {}
+
+  p-limit@3.1.0:
+    dependencies:
+      yocto-queue: 0.1.0
+
+  p-locate@5.0.0:
+    dependencies:
+      p-limit: 3.1.0
+
+  p-map@7.0.4: {}
+
+  package-json-from-dist@1.0.1: {}
+
+  parent-module@1.0.1:
+    dependencies:
+      callsites: 3.1.0
+
+  path-exists@4.0.0: {}
+
+  path-is-absolute@1.0.1: {}
+
+  path-key@3.1.1: {}
+
+  path-scurry@1.11.1:
+    dependencies:
+      lru-cache: 10.4.3
+      minipass: 7.1.3
+
+  pathe@2.0.3: {}
+
+  pe-library@0.4.1: {}
+
+  pend@1.2.0: {}
+
+  picocolors@1.1.1: {}
+
+  picomatch@2.3.1: {}
+
+  picomatch@4.0.3: {}
+
+  playwright-core@1.58.2: {}
+
+  playwright@1.58.2:
+    dependencies:
+      playwright-core: 1.58.2
+    optionalDependencies:
+      fsevents: 2.3.2
+
+  plist@3.1.0:
+    dependencies:
+      '@xmldom/xmldom': 0.8.11
+      base64-js: 1.5.1
+      xmlbuilder: 15.1.1
+
+  postcss@8.5.8:
+    dependencies:
+      nanoid: 3.3.11
+      picocolors: 1.1.1
+      source-map-js: 1.2.1
+
+  postject@1.0.0-alpha.6:
+    dependencies:
+      commander: 9.5.0
+    optional: true
+
+  prelude-ls@1.2.1: {}
+
+  proc-log@5.0.0: {}
+
+  progress@2.0.3: {}
+
+  promise-retry@2.0.1:
+    dependencies:
+      err-code: 2.0.3
+      retry: 0.12.0
+
+  proper-lockfile@4.1.2:
+    dependencies:
+      graceful-fs: 4.2.11
+      retry: 0.12.0
+      signal-exit: 3.0.7
+
+  pump@3.0.4:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
+  punycode@2.3.1: {}
+
+  queue-microtask@1.2.3: {}
+
+  quick-lru@5.1.1: {}
+
+  react-dom@19.2.4(react@19.2.4):
+    dependencies:
+      react: 19.2.4
+      scheduler: 0.27.0
+
+  react-refresh@0.18.0: {}
+
+  react@19.2.4: {}
+
+  read-binary-file-arch@1.0.6:
+    dependencies:
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  require-directory@2.1.1: {}
+
+  resedit@1.7.2:
+    dependencies:
+      pe-library: 0.4.1
+
+  resolve-alpn@1.2.1: {}
+
+  resolve-from@4.0.0: {}
+
+  responselike@2.0.1:
+    dependencies:
+      lowercase-keys: 2.0.0
+
+  restore-cursor@3.1.0:
+    dependencies:
+      onetime: 5.1.2
+      signal-exit: 3.0.7
+
+  retry@0.12.0: {}
+
+  reusify@1.1.0: {}
+
+  rimraf@2.6.3:
+    dependencies:
+      glob: 7.2.3
+
+  roarr@2.15.4:
+    dependencies:
+      boolean: 3.2.0
+      detect-node: 2.1.0
+      globalthis: 1.0.4
+      json-stringify-safe: 5.0.1
+      semver-compare: 1.0.0
+      sprintf-js: 1.1.3
+    optional: true
+
+  rollup@4.59.0:
+    dependencies:
+      '@types/estree': 1.0.8
+    optionalDependencies:
+      '@rollup/rollup-android-arm-eabi': 4.59.0
+      '@rollup/rollup-android-arm64': 4.59.0
+      '@rollup/rollup-darwin-arm64': 4.59.0
+      '@rollup/rollup-darwin-x64': 4.59.0
+      '@rollup/rollup-freebsd-arm64': 4.59.0
+      '@rollup/rollup-freebsd-x64': 4.59.0
+      '@rollup/rollup-linux-arm-gnueabihf': 4.59.0
+      '@rollup/rollup-linux-arm-musleabihf': 4.59.0
+      '@rollup/rollup-linux-arm64-gnu': 4.59.0
+      '@rollup/rollup-linux-arm64-musl': 4.59.0
+      '@rollup/rollup-linux-loong64-gnu': 4.59.0
+      '@rollup/rollup-linux-loong64-musl': 4.59.0
+      '@rollup/rollup-linux-ppc64-gnu': 4.59.0
+      '@rollup/rollup-linux-ppc64-musl': 4.59.0
+      '@rollup/rollup-linux-riscv64-gnu': 4.59.0
+      '@rollup/rollup-linux-riscv64-musl': 4.59.0
+      '@rollup/rollup-linux-s390x-gnu': 4.59.0
+      '@rollup/rollup-linux-x64-gnu': 4.59.0
+      '@rollup/rollup-linux-x64-musl': 4.59.0
+      '@rollup/rollup-openbsd-x64': 4.59.0
+      '@rollup/rollup-openharmony-arm64': 4.59.0
+      '@rollup/rollup-win32-arm64-msvc': 4.59.0
+      '@rollup/rollup-win32-ia32-msvc': 4.59.0
+      '@rollup/rollup-win32-x64-gnu': 4.59.0
+      '@rollup/rollup-win32-x64-msvc': 4.59.0
+      fsevents: 2.3.3
+
+  run-parallel@1.2.0:
+    dependencies:
+      queue-microtask: 1.2.3
+
+  safe-buffer@5.2.1: {}
+
+  safer-buffer@2.1.2: {}
+
+  sanitize-filename@1.6.3:
+    dependencies:
+      truncate-utf8-bytes: 1.0.2
+
+  sax@1.5.0: {}
+
+  scheduler@0.27.0: {}
+
+  semver-compare@1.0.0:
+    optional: true
+
+  semver@5.7.2: {}
+
+  semver@6.3.1: {}
+
+  semver@7.7.4: {}
+
+  serialize-error@7.0.1:
+    dependencies:
+      type-fest: 0.13.1
+    optional: true
+
+  shebang-command@2.0.0:
+    dependencies:
+      shebang-regex: 3.0.0
+
+  shebang-regex@3.0.0: {}
+
+  siginfo@2.0.0: {}
+
+  signal-exit@3.0.7: {}
+
+  signal-exit@4.1.0: {}
+
+  simple-update-notifier@2.0.0:
+    dependencies:
+      semver: 7.7.4
+
+  slice-ansi@3.0.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      astral-regex: 2.0.0
+      is-fullwidth-code-point: 3.0.0
+    optional: true
+
+  smart-buffer@4.2.0: {}
+
+  socks-proxy-agent@8.0.5:
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3
+      socks: 2.8.7
+    transitivePeerDependencies:
+      - supports-color
+
+  socks@2.8.7:
+    dependencies:
+      ip-address: 10.1.0
+      smart-buffer: 4.2.0
+
+  source-map-js@1.2.1: {}
+
+  source-map-support@0.5.21:
+    dependencies:
+      buffer-from: 1.1.2
+      source-map: 0.6.1
+
+  source-map@0.6.1: {}
+
+  sprintf-js@1.1.3:
+    optional: true
+
+  ssri@12.0.0:
+    dependencies:
+      minipass: 7.1.3
+
+  stackback@0.0.2: {}
+
+  stat-mode@1.0.0: {}
+
+  std-env@4.0.0: {}
+
+  string-width@4.2.3:
+    dependencies:
+      emoji-regex: 8.0.0
+      is-fullwidth-code-point: 3.0.0
+      strip-ansi: 6.0.1
+
+  string-width@5.1.2:
+    dependencies:
+      eastasianwidth: 0.2.0
+      emoji-regex: 9.2.2
+      strip-ansi: 7.2.0
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  strip-ansi@6.0.1:
+    dependencies:
+      ansi-regex: 5.0.1
+
+  strip-ansi@7.2.0:
+    dependencies:
+      ansi-regex: 6.2.2
+
+  strip-json-comments@3.1.1: {}
+
+  sumchecker@3.0.1:
+    dependencies:
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  supports-color@7.2.0:
+    dependencies:
+      has-flag: 4.0.0
+
+  tailwind-merge@3.5.0: {}
+
+  tailwindcss@4.2.1: {}
+
+  tapable@2.3.0: {}
+
+  tar@7.5.11:
+    dependencies:
+      '@isaacs/fs-minipass': 4.0.1
+      chownr: 3.0.0
+      minipass: 7.1.3
+      minizlib: 3.1.0
+      yallist: 5.0.0
+
+  temp-file@3.4.0:
+    dependencies:
+      async-exit-hook: 2.0.1
+      fs-extra: 10.1.0
+
+  temp@0.9.4:
+    dependencies:
+      mkdirp: 0.5.6
+      rimraf: 2.6.3
+
+  tiny-async-pool@1.3.0:
+    dependencies:
+      semver: 5.7.2
+
+  tiny-typed-emitter@2.1.0: {}
+
+  tinybench@2.9.0: {}
+
+  tinyexec@1.0.4: {}
+
+  tinyglobby@0.2.15:
+    dependencies:
+      fdir: 6.5.0(picomatch@4.0.3)
+      picomatch: 4.0.3
+
+  tinyrainbow@3.1.0: {}
+
+  tmp-promise@3.0.3:
+    dependencies:
+      tmp: 0.2.5
+
+  tmp@0.2.5: {}
+
+  to-regex-range@5.0.1:
+    dependencies:
+      is-number: 7.0.0
+
+  truncate-utf8-bytes@1.0.2:
+    dependencies:
+      utf8-byte-length: 1.0.5
+
+  ts-api-utils@2.4.0(typescript@5.9.3):
+    dependencies:
+      typescript: 5.9.3
+
+  tslib@2.8.1: {}
+
+  type-check@0.4.0:
+    dependencies:
+      prelude-ls: 1.2.1
+
+  type-fest@0.13.1:
+    optional: true
+
+  typescript-eslint@8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3):
+    dependencies:
+      '@typescript-eslint/eslint-plugin': 8.46.1(@typescript-eslint/parser@8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3))(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/parser': 8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/typescript-estree': 8.46.1(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.46.1(eslint@9.38.0(jiti@2.6.1))(typescript@5.9.3)
+      eslint: 9.38.0(jiti@2.6.1)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  typescript@5.9.3: {}
+
+  undici-types@6.21.0: {}
+
+  undici-types@7.16.0: {}
+
+  undici-types@7.18.2: {}
+
+  unique-filename@4.0.0:
+    dependencies:
+      unique-slug: 5.0.0
+
+  unique-slug@5.0.0:
+    dependencies:
+      imurmurhash: 0.1.4
+
+  universalify@0.1.2: {}
+
+  universalify@2.0.1: {}
+
+  update-browserslist-db@1.2.3(browserslist@4.28.1):
+    dependencies:
+      browserslist: 4.28.1
+      escalade: 3.2.0
+      picocolors: 1.1.1
+
+  uri-js@4.4.1:
+    dependencies:
+      punycode: 2.3.1
+
+  utf8-byte-length@1.0.5: {}
+
+  util-deprecate@1.0.2: {}
+
+  verror@1.10.1:
+    dependencies:
+      assert-plus: 1.0.0
+      core-util-is: 1.0.2
+      extsprintf: 1.4.1
+    optional: true
+
+  vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1):
+    dependencies:
+      esbuild: 0.27.4
+      fdir: 6.5.0(picomatch@4.0.3)
+      picomatch: 4.0.3
+      postcss: 8.5.8
+      rollup: 4.59.0
+      tinyglobby: 0.2.15
+    optionalDependencies:
+      '@types/node': 25.5.0
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      lightningcss: 1.31.1
+
+  vitest@4.1.0(@types/node@25.5.0)(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)):
+    dependencies:
+      '@vitest/expect': 4.1.0
+      '@vitest/mocker': 4.1.0(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1))
+      '@vitest/pretty-format': 4.1.0
+      '@vitest/runner': 4.1.0
+      '@vitest/snapshot': 4.1.0
+      '@vitest/spy': 4.1.0
+      '@vitest/utils': 4.1.0
+      es-module-lexer: 2.0.0
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      obug: 2.1.1
+      pathe: 2.0.3
+      picomatch: 4.0.3
+      std-env: 4.0.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.4
+      tinyglobby: 0.2.15
+      tinyrainbow: 3.1.0
+      vite: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.31.1)
+      why-is-node-running: 2.3.0
+    optionalDependencies:
+      '@types/node': 25.5.0
+    transitivePeerDependencies:
+      - msw
+
+  wcwidth@1.0.1:
+    dependencies:
+      defaults: 1.0.4
+
+  which@2.0.2:
+    dependencies:
+      isexe: 2.0.0
+
+  which@5.0.0:
+    dependencies:
+      isexe: 3.1.5
+
+  why-is-node-running@2.3.0:
+    dependencies:
+      siginfo: 2.0.0
+      stackback: 0.0.2
+
+  word-wrap@1.2.5: {}
+
+  wrap-ansi@7.0.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+
+  wrap-ansi@8.1.0:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 5.1.2
+      strip-ansi: 7.2.0
+
+  wrappy@1.0.2: {}
+
+  xmlbuilder@15.1.1: {}
+
+  y18n@5.0.8: {}
+
+  yallist@3.1.1: {}
+
+  yallist@4.0.0: {}
+
+  yallist@5.0.0: {}
+
+  yargs-parser@21.1.1: {}
+
+  yargs@17.7.2:
+    dependencies:
+      cliui: 8.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      require-directory: 2.1.1
+      string-width: 4.2.3
+      y18n: 5.0.8
+      yargs-parser: 21.1.1
+
+  yauzl@2.10.0:
+    dependencies:
+      buffer-crc32: 0.2.13
+      fd-slicer: 1.1.0
+
+  yocto-queue@0.1.0: {}
+
+  zod-validation-error@4.0.2(zod@4.3.6):
+    dependencies:
+      zod: 4.3.6
+
+  zod@4.3.6: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
new file mode 100644
index 00000000..dee51e92
--- /dev/null
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,2 @@
+packages:
+  - "packages/*"
diff --git a/scripts/build-desktop.mjs b/scripts/build-desktop.mjs
new file mode 100644
index 00000000..a33b7c35
--- /dev/null
+++ b/scripts/build-desktop.mjs
@@ -0,0 +1,53 @@
+import { spawn } from "node:child_process";
+
+const extraArgs = process.argv.slice(2);
+const env = { ...process.env };
+
+if (env.CSC_IDENTITY_AUTO_DISCOVERY === undefined) {
+  env.CSC_IDENTITY_AUTO_DISCOVERY = "false";
+}
+
+const allowedPublishModes = new Set(["always", "never", "onTag", "onTagOrDraft"]);
+const explicitPublishArg = extraArgs.some((arg) => arg === "--publish" || arg.startsWith("--publish="));
+const requestedPublishMode = env.AGENTCOMPANY_ELECTRON_PUBLISH?.trim();
+let publishMode = "never";
+
+if (requestedPublishMode) {
+  if (!allowedPublishModes.has(requestedPublishMode)) {
+    console.warn(
+      `[build-desktop] Ignoring invalid AGENTCOMPANY_ELECTRON_PUBLISH="${requestedPublishMode}". ` +
+        "Falling back to --publish never.",
+    );
+  } else {
+    publishMode = requestedPublishMode;
+  }
+}
+
+const builderArgs = ["exec", "electron-builder", "--config", "electron-builder.yml"];
+if (!explicitPublishArg) {
+  builderArgs.push("--publish", publishMode);
+}
+builderArgs.push(...extraArgs);
+
+const child = spawn(
+  "pnpm",
+  builderArgs,
+  {
+    stdio: "inherit",
+    env,
+    shell: process.platform === "win32",
+  },
+);
+
+child.on("exit", (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal);
+    return;
+  }
+  process.exit(code ?? 1);
+});
+
+child.on("error", (error) => {
+  console.error(error);
+  process.exit(1);
+});
diff --git a/scripts/generate-icons.py b/scripts/generate-icons.py
new file mode 100644
index 00000000..4841cb2d
--- /dev/null
+++ b/scripts/generate-icons.py
@@ -0,0 +1,215 @@
+#!/usr/bin/env python3
+"""Generate AgentCompany app icons (PNG, ICO, ICNS, SVG).
+
+Design v3b: Bold "A" monogram that doubles as an org-chart hierarchy.
+Two terracotta legs meet at an apex, with three warm crossbars of
+decreasing brightness (CEO → Managers → ICs).  All tones stay warm.
+"""
+
+from __future__ import annotations
+
+import math
+import shutil
+import subprocess
+from pathlib import Path
+
+from PIL import Image, ImageDraw, ImageFilter
+
+ROOT = Path(__file__).resolve().parents[1]
+ASSETS = ROOT / "assets"
+ICONSET = ASSETS / "icon.iconset"
+PNG_PATH = ASSETS / "icon.png"
+ICO_PATH = ASSETS / "icon.ico"
+ICNS_PATH = ASSETS / "icon.icns"
+SVG_PATH = ASSETS / "icon.svg"
+SIZE = 1024
+
+# ── Brand palette ──────────────────────────────────────────────────────
+TERRACOTTA = (217, 119, 69)        # #d97745
+SLATE_TOP = (17, 19, 21)           # #111315
+SLATE_BOT = (27, 31, 35)           # #1b1f23
+
+# Bar colours — all warm, decreasing brightness
+BAR_CEO = (255, 235, 215)          # warm cream — brightest
+BAR_MGR = (235, 180, 140)          # warm peach
+BAR_IC  = (190, 140, 105)          # muted terracotta
+
+
+def rgba(r: int, g: int, b: int, a: int = 255) -> tuple[int, int, int, int]:
+    return (r, g, b, a)
+
+
+def blend(
+    a: tuple[int, ...], b: tuple[int, ...], t: float,
+) -> tuple[int, ...]:
+    return tuple(int(a[i] + (b[i] - a[i]) * t) for i in range(len(a)))
+
+
+def build_icon() -> Image.Image:
+    # ── 1. Gradient background with warm glow ──────────────────────────
+    bg = Image.new("RGBA", (SIZE, SIZE), (0, 0, 0, 0))
+    px = bg.load()
+    top_c = rgba(*SLATE_TOP)
+    bot_c = rgba(*SLATE_BOT)
+    glow_cx, glow_cy = SIZE * 0.44, SIZE * 0.34
+    glow_r = SIZE * 0.78
+
+    for y in range(SIZE):
+        t = y / (SIZE - 1)
+        base = blend(top_c, bot_c, t)
+        for x in range(SIZE):
+            d = math.hypot(x - glow_cx, y - glow_cy) / glow_r
+            warmth = max(0.0, 1.0 - d) ** 1.8 * 0.13
+            px[x, y] = blend(base, rgba(*TERRACOTTA), warmth)
+
+    # ── 2. Rounded-rect mask + shadow ──────────────────────────────────
+    icon = Image.new("RGBA", (SIZE, SIZE), (0, 0, 0, 0))
+    mask = Image.new("L", (SIZE, SIZE), 0)
+    inset = 64
+    ImageDraw.Draw(mask).rounded_rectangle(
+        (inset, inset, SIZE - inset, SIZE - inset), radius=224, fill=255,
+    )
+    shadow_alpha = mask.filter(ImageFilter.GaussianBlur(28))
+    shadow_layer = Image.new("RGBA", (SIZE, SIZE), (0, 0, 0, 48))
+    shadow_layer.putalpha(shadow_alpha)
+    icon.alpha_composite(shadow_layer, (0, 12))
+    icon.alpha_composite(bg)
+    icon.putalpha(mask)
+
+    # ── 3. Draw the "A" mark ───────────────────────────────────────────
+    overlay = Image.new("RGBA", (SIZE, SIZE), (0, 0, 0, 0))
+    draw = ImageDraw.Draw(overlay)
+
+    cx = SIZE // 2
+    apex_y = 200
+    base_y = 800
+    leg_w = 64
+    base_half = 250
+
+    def leg_x(y: int) -> tuple[float, float]:
+        t = (y - apex_y) / (base_y - apex_y)
+        spread = base_half * t
+        return (cx - spread, cx + spread)
+
+    ll_top, _ = leg_x(apex_y)
+    ll_bot, _ = leg_x(base_y)
+    _, lr_top = leg_x(apex_y)
+    _, lr_bot = leg_x(base_y)
+
+    left_leg = [
+        (ll_top - leg_w * 0.35, apex_y),
+        (ll_top + leg_w * 0.35, apex_y),
+        (ll_bot + leg_w, base_y),
+        (ll_bot - leg_w, base_y),
+    ]
+    right_leg = [
+        (lr_top - leg_w * 0.35, apex_y),
+        (lr_top + leg_w * 0.35, apex_y),
+        (lr_bot + leg_w, base_y),
+        (lr_bot - leg_w, base_y),
+    ]
+
+    draw.polygon(left_leg, fill=rgba(*TERRACOTTA, 240))
+    draw.polygon(right_leg, fill=rgba(*TERRACOTTA, 240))
+
+    # ── 4. Three crossbars — warm tones, hierarchy brightness ──────────
+    bar_h = 42
+    bar_r = 12
+    bar_pad = 14
+
+    tiers = [
+        (440, rgba(*BAR_CEO)),
+        (545, rgba(*BAR_MGR)),
+        (650, rgba(*BAR_IC)),
+    ]
+
+    for bar_cy, fill in tiers:
+        left_cx, right_cx = leg_x(bar_cy)
+        bx0 = int(left_cx + bar_pad)
+        bx1 = int(right_cx - bar_pad)
+        draw.rounded_rectangle(
+            (bx0, bar_cy - bar_h // 2, bx1, bar_cy + bar_h // 2),
+            radius=bar_r,
+            fill=fill,
+        )
+
+    # ── 5. Apex beacon ─────────────────────────────────────────────────
+    dot_r = 20
+    dot_cy = apex_y - 2
+    draw.ellipse(
+        (cx - dot_r, dot_cy - dot_r, cx + dot_r, dot_cy + dot_r),
+        fill=rgba(*BAR_CEO),
+    )
+
+    icon.alpha_composite(overlay)
+    return icon
+
+
+def save_svg() -> None:
+    svg = """\
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" fill="none">
+  <defs>
+    <linearGradient id="bg" x1="200" x2="824" y1="96" y2="928" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#111315"/>
+      <stop offset="1" stop-color="#1b1f23"/>
+    </linearGradient>
+    <radialGradient id="glow" cx="0" cy="0" r="1"
+      gradientTransform="translate(450 348) rotate(36) scale(800)" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#d97745" stop-opacity=".13"/>
+      <stop offset="1" stop-color="#d97745" stop-opacity="0"/>
+    </radialGradient>
+  </defs>
+  <rect width="896" height="896" x="64" y="64" rx="224" fill="url(#bg)"/>
+  <rect width="896" height="896" x="64" y="64" rx="224" fill="url(#glow)"/>
+  <polygon points="490,200 534,200 578,800 298,800" fill="#d97745" fill-opacity=".94"/>
+  <polygon points="490,200 534,200 726,800 446,800" fill="#d97745" fill-opacity=".94"/>
+  <rect x="400" y="419" width="224" height="42" rx="12" fill="#ffebd7"/>
+  <rect x="374" y="524" width="276" height="42" rx="12" fill="#ebb48c"/>
+  <rect x="348" y="629" width="328" height="42" rx="12" fill="#be8c69"/>
+  <circle cx="512" cy="198" r="20" fill="#ffebd7"/>
+</svg>
+"""
+    SVG_PATH.write_text(svg, encoding="utf-8")
+
+
+def save_png_and_ico(image: Image.Image) -> None:
+    ASSETS.mkdir(parents=True, exist_ok=True)
+    image.save(PNG_PATH, format="PNG")
+    image.save(
+        ICO_PATH,
+        format="ICO",
+        sizes=[(16, 16), (24, 24), (32, 32), (48, 48), (64, 64), (128, 128), (256, 256)],
+    )
+
+
+def save_icns(image: Image.Image) -> None:
+    if ICONSET.exists():
+        shutil.rmtree(ICONSET)
+    ICONSET.mkdir(parents=True, exist_ok=True)
+
+    for size in (16, 32, 64, 128, 256, 512):
+        image.resize((size, size), Image.Resampling.LANCZOS).save(
+            ICONSET / f"icon_{size}x{size}.png", format="PNG",
+        )
+        image.resize((size * 2, size * 2), Image.Resampling.LANCZOS).save(
+            ICONSET / f"icon_{size}x{size}@2x.png", format="PNG",
+        )
+
+    subprocess.run(
+        ["iconutil", "-c", "icns", str(ICONSET), "-o", str(ICNS_PATH)],
+        check=True,
+    )
+    shutil.rmtree(ICONSET)
+
+
+def main() -> None:
+    ASSETS.mkdir(parents=True, exist_ok=True)
+    save_svg()
+    image = build_icon()
+    save_png_and_ico(image)
+    save_icns(image)
+    print(f"Generated: {PNG_PATH}, {ICO_PATH}, {ICNS_PATH}, {SVG_PATH}")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/patch-electron-name.sh b/scripts/patch-electron-name.sh
new file mode 100755
index 00000000..68be43dc
--- /dev/null
+++ b/scripts/patch-electron-name.sh
@@ -0,0 +1,34 @@
+#!/bin/bash
+# Patch the Electron.app bundle name so macOS shows "AgentCompany"
+# in the dock and menu bar during development.
+# This runs as a postinstall hook and is safe to re-run.
+
+set -euo pipefail
+
+APP_NAME="AgentCompany"
+
+# Find the Electron.app Info.plist (works with pnpm hoisted or nested)
+PLIST=$(find node_modules -path "*/electron/dist/Electron.app/Contents/Info.plist" -maxdepth 8 2>/dev/null | head -1)
+
+if [ -z "$PLIST" ]; then
+  echo "[patch-electron-name] Electron.app not found, skipping."
+  exit 0
+fi
+
+# Also find helper plists
+HELPERS_DIR=$(dirname "$PLIST")/../Frameworks
+MAIN_PLIST="$PLIST"
+
+echo "[patch-electron-name] Patching $MAIN_PLIST"
+/usr/libexec/PlistBuddy -c "Set :CFBundleName $APP_NAME" "$MAIN_PLIST" 2>/dev/null || true
+/usr/libexec/PlistBuddy -c "Set :CFBundleDisplayName $APP_NAME" "$MAIN_PLIST" 2>/dev/null || true
+
+# Patch helper apps too (they show in Activity Monitor)
+for HELPER in "$HELPERS_DIR"/Electron\ Helper*.app/Contents/Info.plist; do
+  if [ -f "$HELPER" ]; then
+    HELPER_NAME=$(basename "$(dirname "$(dirname "$HELPER")")" .app | sed "s/Electron Helper/$APP_NAME Helper/")
+    /usr/libexec/PlistBuddy -c "Set :CFBundleName $HELPER_NAME" "$HELPER" 2>/dev/null || true
+  fi
+done
+
+echo "[patch-electron-name] Done — dock and menu bar will show \"$APP_NAME\"."
diff --git a/scripts/seed-research-team.ts b/scripts/seed-research-team.ts
new file mode 100644
index 00000000..51fcede2
--- /dev/null
+++ b/scripts/seed-research-team.ts
@@ -0,0 +1,244 @@
+/**
+ * Seed script: Create a multi-agent Research Company with 8 specialized roles.
+ *
+ * Usage: Run via the AgentCompany API after creating a company and workspace.
+ *
+ * Team Structure:
+ *   ProjectManager (CEO — reports to Board)
+ *   ├── WebResearcher (IC — primary data gathering)
+ *   ├── DataAnalyst (IC — market data synthesis)
+ *   ├── ReportArchitect (IC — report writing)
+ *   ├── VisualDesigner (IC — presentation design)
+ *   ├── FactChecker (IC — source verification)
+ *   ├── EnterpriseArchitect (Manager — standards guardian)
+ *   │   └── SecurityAuditor (IC — ethics & privacy)
+ *   └── (all other ICs report to ProjectManager)
+ */
+
+interface AgentDefinition {
+  name: string;
+  role: string;
+  title: string;
+  capabilities: string;
+  reportsTo: string | null; // name of manager, null = CEO
+  connectorId: string;
+  budgetMonthlyUsd: number;
+}
+
+const RESEARCH_TEAM: AgentDefinition[] = [
+  {
+    name: "ProjectManager",
+    role: "Research Project Coordinator",
+    title: "CEO — Research Operations",
+    capabilities: [
+      "Review research brief/PRD first.",
+      "Define research objectives, target markets (geographic/demographic), and key questions to answer.",
+      "Create research timeline with milestones (data collection → analysis → report writing).",
+      "Ensure compliance with data privacy regulations (GDPR, CCPA) when collecting public data.",
+      "Define deliverable formats (PDF report, presentation deck, raw data spreadsheet).",
+      "Set authority thresholds (peer-reviewed only, or include industry reports).",
+      "Tools: File system, Documentation viewer, Project management board.",
+    ].join(" "),
+    reportsTo: null, // Top-level executive
+    connectorId: "claude_local",
+    budgetMonthlyUsd: 500,
+  },
+  {
+    name: "WebResearcher",
+    role: "Agent Browser Research Specialist",
+    title: "Senior Research Analyst",
+    capabilities: [
+      "PRIMARY DATA GATHERING ROLE.",
+      "Use Agent Browser extensively to gather market data.",
+      "Research competitor websites (feature comparison, pricing pages, positioning statements).",
+      "Search industry reports (Gartner, McKinsey, Statista, IBISWorld).",
+      "Scrape public financial data (earnings reports, SEC 10-K filings, Crunchbase funding data).",
+      "Research social media sentiment (Reddit discussions, LinkedIn professional opinions, Twitter/X trends).",
+      "Find authoritative sources only (.edu, .gov, established publications like WSJ, Reuters).",
+      "Archive all sources with URLs, access dates, and credibility ratings.",
+      "Use advanced search operators (site:, filetype:, intitle:) for precision.",
+      "Never paywall-bypass illegally.",
+      "Tools: Agent Browser, Web scraper (legal/ethical only), Documentation library, Archive.org.",
+    ].join(" "),
+    reportsTo: "ProjectManager",
+    connectorId: "claude_local",
+    budgetMonthlyUsd: 300,
+  },
+  {
+    name: "DataAnalyst",
+    role: "Market Data Synthesizer",
+    title: "Senior Data Analyst",
+    capabilities: [
+      "Structure collected data into analytical frameworks (SWOT analysis, Porter's Five Forces, TAM/SAM/SOM market sizing).",
+      "Create comparison matrices for competitor analysis (features, pricing, market share).",
+      "Normalize pricing data across different currencies and regions (PPP adjustment).",
+      "Identify market trends and patterns using statistical methods.",
+      "Verify statistical significance of findings (sample sizes, confidence intervals).",
+      "Create data visualizations (Matplotlib/Seaborn charts, Tableau dashboards) from research findings.",
+      "Flag data gaps and limitations.",
+      "Tools: Spreadsheet (Excel/Google Sheets), Data visualization tools, Python (Pandas, Jupyter), Statistical calculator.",
+    ].join(" "),
+    reportsTo: "ProjectManager",
+    connectorId: "codex_local",
+    budgetMonthlyUsd: 250,
+  },
+  {
+    name: "ReportArchitect",
+    role: "Research Report Engineer",
+    title: "Lead Technical Writer",
+    capabilities: [
+      "Write comprehensive research reports with clear structure: Executive Summary, Methodology, Key Findings, Competitive Landscape, Market Trends, Risk Analysis, and Strategic Recommendations.",
+      "Ensure actionable insights (not just data dumping).",
+      "Write for specific target audience (C-suite executives need high-level strategy, Product Managers need feature comparisons).",
+      "Maintain consistent citation style throughout (APA 7th edition recommended).",
+      "Include appendices for raw data and detailed methodology.",
+      "Tools: Document editor (Word/Google Docs), Markdown, Citation manager (Zotero/Mendeley).",
+    ].join(" "),
+    reportsTo: "ProjectManager",
+    connectorId: "claude_local",
+    budgetMonthlyUsd: 200,
+  },
+  {
+    name: "VisualDesigner",
+    role: "Research Presentation Designer",
+    title: "Visual Design Specialist",
+    capabilities: [
+      "Design professional layouts for research deliverables.",
+      "Create color-coded competitive landscapes (perceptual maps, magic quadrants).",
+      "Design infographics for key statistics and trends.",
+      "Ensure brand consistency in all materials (client fonts, colors, logos).",
+      "Create presentation templates (PowerPoint/Google Slides) with master slides.",
+      "Optimize layouts for readability and visual hierarchy (information density management).",
+      "Ensure accessibility in charts (colorblind-friendly palettes, alt text).",
+      "Tools: Design software (Figma/Adobe Illustrator), Presentation tools (PowerPoint/Keynote), Image preview.",
+    ].join(" "),
+    reportsTo: "ProjectManager",
+    connectorId: "gemini_local",
+    budgetMonthlyUsd: 200,
+  },
+  {
+    name: "FactChecker",
+    role: "Source Verification Specialist",
+    title: "Research Integrity Analyst",
+    capabilities: [
+      "Verify all statistics and claims against original primary sources (not secondary citations).",
+      "Check for outdated information (ensure market data is < 2 years old unless historical trend analysis).",
+      "Identify potential biases in sources (vendor-funded research, self-reported data).",
+      "Cross-reference competitor claims with independent third-party validation.",
+      "Ensure all images/charts have proper attribution and licensing.",
+      "Verify calculation accuracy in market sizing (TAM calculations, CAGR formulas).",
+      "Flag uncertain or questionable data with confidence ratings.",
+      "Tools: Agent Browser (re-verification), Documentation library, Archive.org (historical verification).",
+    ].join(" "),
+    reportsTo: "ProjectManager",
+    connectorId: "claude_local",
+    budgetMonthlyUsd: 150,
+  },
+  {
+    name: "EnterpriseArchitect",
+    role: "Research Standards Guardian",
+    title: "Head of Research Integrity",
+    capabilities: [
+      "ENFORCE RESEARCH INTEGRITY STANDARDS:",
+      "NO plagiarism — all content must be original synthesis or properly cited with quotation marks for direct quotes.",
+      "NO unsupported claims — every statistic needs inline citation (Author, Year) or footnote.",
+      "File naming convention: YYYY-MM-DD_Topic_Source_Description.pdf.",
+      "Variable naming in datasets: descriptive snake_case (market_share_percent_2024 not ms24).",
+      "NO circular reporting — Wikipedia cannot cite itself, avoid tertiary sources citing each other.",
+      "Primary sources preferred over secondary (SEC filings > News articles about filings).",
+      "Methodology section must be explicit about data collection methods and limitations.",
+      "NO speculation presented as fact — clearly distinguish between 'Data shows X' and 'Analyst suggests Y might happen'.",
+      "Conflict of interest disclosure mandatory (funded by industry player vs independent).",
+      "Tools: Plagiarism checker (Turnitin/Copyscape), Document editor, Reference manager.",
+    ].join(" "),
+    reportsTo: "ProjectManager",
+    connectorId: "claude_local",
+    budgetMonthlyUsd: 200,
+  },
+  {
+    name: "SecurityAuditor",
+    role: "Research Ethics & Privacy Auditor",
+    title: "Privacy & Compliance Officer",
+    capabilities: [
+      "Final audit before delivery:",
+      "Verify no private/personal data (PII) was collected without consent (check datasets for names, emails, phone numbers scraped from social media).",
+      "Ensure no proprietary/trade secret information was accessed inappropriately (no hacked data, no insider leaks).",
+      "Check for defamatory content about competitors (stick to verified facts, no opinion-as-fact).",
+      "Verify licensing of third-party images/data (Creative Commons attribution, Fair Use justification documented).",
+      "Ensure confidential client information is redacted if sample reports contain examples.",
+      "Check that web scraping complied with robots.txt and Terms of Service (rate limiting respected).",
+      "Tools: Privacy scanner (PII detection), Document review, Legal compliance checklist.",
+    ].join(" "),
+    reportsTo: "EnterpriseArchitect",
+    connectorId: "claude_local",
+    budgetMonthlyUsd: 150,
+  },
+];
+
+/**
+ * Generate curl commands to seed the research team via the AgentCompany API.
+ * Replace $API_URL, $API_KEY, $COMPANY_ID, and $WORKSPACE_ID with real values.
+ */
+function generateSetupCommands(): string {
+  const lines: string[] = [
+    "#!/bin/bash",
+    "# Research Company Multi-Agent Team Setup",
+    "# Prerequisites:",
+    "#   1. AgentCompany desktop running with a company and workspace created",
+    "#   2. At least one connector (claude_local) in 'ready' status",
+    "#   3. Set these variables:",
+    "",
+    'API_URL="${AGENT_COMPANY_API_URL:-http://127.0.0.1:3456}"',
+    'API_KEY="${AGENT_COMPANY_API_KEY}"',
+    'COMPANY_ID="${AGENT_COMPANY_COMPANY_ID}"',
+    'WORKSPACE_ID="${AGENT_COMPANY_WORKSPACE_ID}"',
+    "",
+  ];
+
+  // Create agents in order (CEO first, then reports)
+  const agentVarMap = new Map<string, string>();
+
+  for (const agent of RESEARCH_TEAM) {
+    const varName = agent.name.toUpperCase() + "_ID";
+    const reportsToVar = agent.reportsTo
+      ? agentVarMap.get(agent.reportsTo) ?? "null"
+      : "null";
+
+    agentVarMap.set(agent.name, `$${varName}`);
+
+    lines.push(`# Create ${agent.name} — ${agent.role}`);
+    lines.push(`${varName}=$(curl -s -X POST "$API_URL/api/companies/$COMPANY_ID/agents" \\`);
+    lines.push(`  -H "Authorization: Bearer $API_KEY" \\`);
+    lines.push(`  -H "Content-Type: application/json" \\`);
+    lines.push(`  -d '{`);
+    lines.push(`    "name": "${agent.name}",`);
+    lines.push(`    "role": "${agent.role}",`);
+    lines.push(`    "title": "${agent.title}",`);
+    lines.push(`    "connectorId": "${agent.connectorId}",`);
+    lines.push(`    "workspaceId": "'$WORKSPACE_ID'",`);
+    lines.push(`    "capabilities": ${JSON.stringify(agent.capabilities)},`);
+    lines.push(`    "budgetMonthlyUsd": ${agent.budgetMonthlyUsd}${agent.reportsTo ? `,\n    "reportsTo": "'${reportsToVar}'"` : ""}`);
+    lines.push(`  }' | jq -r '.agentId // .id')`);
+    lines.push(`echo "Created ${agent.name}: $${varName}"`);
+    lines.push("");
+  }
+
+  return lines.join("\n");
+}
+
+// Export for use in tests or scripts
+export { RESEARCH_TEAM, type AgentDefinition };
+
+// Print setup commands when run directly
+if (typeof process !== "undefined" && process.argv[1]?.includes("seed-research-team")) {
+  console.log(generateSetupCommands());
+  console.log("\n# Team Structure:");
+  console.log("# ProjectManager (CEO)");
+  console.log("#   ├── WebResearcher (IC)");
+  console.log("#   ├── DataAnalyst (IC)");
+  console.log("#   ├── ReportArchitect (IC)");
+  console.log("#   ├── VisualDesigner (IC)");
+  console.log("#   ├── FactChecker (IC)");
+  console.log("#   └── EnterpriseArchitect (Manager)");
+  console.log("#       └── SecurityAuditor (IC)");
+}
diff --git a/src/main/agent-auth.ts b/src/main/agent-auth.ts
new file mode 100644
index 00000000..a9349256
--- /dev/null
+++ b/src/main/agent-auth.ts
@@ -0,0 +1,62 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+
+/**
+ * Lightweight HMAC-based agent token system.
+ * Tokens are short-lived and scoped to a specific agent + company + run.
+ * No external JWT library needed.
+ */
+
+const SIGNING_KEY = randomBytes(32);
+const TOKEN_TTL_MS = 12 * 60 * 60 * 1000; // 12 hours
+
+interface TokenPayload {
+  agentId: string;
+  companyId: string;
+  runId: string;
+  iat: number;
+  exp: number;
+}
+
+function sign(payload: TokenPayload): string {
+  const header = Buffer.from(JSON.stringify({ alg: "HS256", typ: "JWT" })).toString("base64url");
+  const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+  const signature = createHmac("sha256", SIGNING_KEY)
+    .update(`${header}.${body}`)
+    .digest("base64url");
+  return `${header}.${body}.${signature}`;
+}
+
+function verify(token: string): TokenPayload | null {
+  const parts = token.split(".");
+  if (parts.length !== 3) return null;
+  const [header, body, signature] = parts as [string, string, string];
+
+  const expectedSignature = createHmac("sha256", SIGNING_KEY)
+    .update(`${header}.${body}`)
+    .digest("base64url");
+
+  const sigBuffer = Buffer.from(signature, "base64url");
+  const expectedBuffer = Buffer.from(expectedSignature, "base64url");
+  if (sigBuffer.length !== expectedBuffer.length || !timingSafeEqual(sigBuffer, expectedBuffer)) {
+    return null;
+  }
+
+  try {
+    const payload = JSON.parse(Buffer.from(body, "base64url").toString()) as TokenPayload;
+    if (Date.now() > payload.exp) return null;
+    return payload;
+  } catch {
+    return null;
+  }
+}
+
+export function createAgentToken(agentId: string, companyId: string, runId: string): string {
+  const now = Date.now();
+  return sign({ agentId, companyId, runId, iat: now, exp: now + TOKEN_TTL_MS });
+}
+
+export function validateAgentToken(token: string): TokenPayload | null {
+  return verify(token);
+}
+
+export type { TokenPayload };
diff --git a/src/main/api-server.ts b/src/main/api-server.ts
new file mode 100644
index 00000000..eb09ffa7
--- /dev/null
+++ b/src/main/api-server.ts
@@ -0,0 +1,839 @@
+import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
+import log from "electron-log/main.js";
+import { z } from "zod";
+import { validateAgentToken, type TokenPayload } from "./agent-auth";
+import type { AppDatabase } from "./database";
+import { agentInputSchema, approvalInputSchema, goalInputSchema, projectInputSchema, taskInputSchema } from "@shared/contracts";
+
+type RequestHandler = (
+  req: IncomingMessage,
+  res: ServerResponse,
+  params: Record<string, string>,
+  token: TokenPayload,
+  body: unknown,
+) => void | Promise<void>;
+
+interface Route {
+  method: string;
+  pattern: RegExp;
+  paramNames: string[];
+  handler: RequestHandler;
+}
+
+const taskUpdateSchema = z.object({
+  status: z.enum(["backlog", "todo", "in_progress", "in_review", "done", "blocked", "cancelled"]).optional(),
+  comment: z.string().min(1).max(4000).optional(),
+  title: z.string().min(2).max(160).optional(),
+  description: z.string().max(4000).optional(),
+});
+
+const checkoutSchema = z.object({
+  agentId: z.string().uuid().optional(),
+});
+
+const approvalListQuerySchema = z.object({
+  requestedByAgentId: z.string().uuid().optional(),
+  relatedTaskId: z.string().uuid().optional(),
+  status: z.string().optional(),
+});
+
+/**
+ * Lightweight local HTTP API server for agent-to-system interaction.
+ * Agents call this API during runs to create tasks, request approvals,
+ * post comments, and query their assignments.
+ */
+export class AgentApiServer {
+  private routes: Route[] = [];
+  private server: ReturnType<typeof createServer> | null = null;
+  private port = 0;
+  private db: AppDatabase;
+  private onDomainChanged: () => void;
+  private onWakeAgent: (agentId: string, companyId: string, trigger: string) => void;
+
+  constructor(db: AppDatabase, onDomainChanged: () => void, onWakeAgent: (agentId: string, companyId: string, trigger: string) => void) {
+    this.db = db;
+    this.onDomainChanged = onDomainChanged;
+    this.onWakeAgent = onWakeAgent;
+    this.registerRoutes();
+  }
+
+  getPort(): number {
+    return this.port;
+  }
+
+  async start(): Promise<number> {
+    return new Promise((resolve, reject) => {
+      this.server = createServer((req, res) => void this.handleRequest(req, res));
+      this.server.listen(0, "127.0.0.1", () => {
+        const addr = this.server!.address();
+        this.port = typeof addr === "object" && addr ? addr.port : 0;
+        log.info(`[api] Agent API server listening on http://127.0.0.1:${this.port}`);
+        resolve(this.port);
+      });
+      this.server.on("error", reject);
+    });
+  }
+
+  stop() {
+    this.server?.close();
+    this.server = null;
+  }
+
+  private addRoute(method: string, path: string, handler: RequestHandler) {
+    const paramNames: string[] = [];
+    const patternStr = path.replace(/:(\w+)/g, (_match, name: string) => {
+      paramNames.push(name);
+      return "([^/]+)";
+    });
+    this.routes.push({ method, pattern: new RegExp(`^${patternStr}$`), paramNames, handler });
+  }
+
+  private async handleRequest(req: IncomingMessage, res: ServerResponse) {
+    const origin = req.headers.origin;
+    if (origin) {
+      const allowedOrigin =
+        origin === "app://-" ||
+        origin.startsWith("http://127.0.0.1:") ||
+        origin.startsWith("http://localhost:");
+      if (!allowedOrigin) {
+        this.json(res, 403, { error: "Origin not allowed" });
+        return;
+      }
+      res.setHeader("Access-Control-Allow-Origin", origin);
+      res.setHeader("Vary", "Origin");
+    }
+    res.setHeader("Access-Control-Allow-Methods", "GET, POST, PATCH, PUT, DELETE, OPTIONS");
+    res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Agent-Company-Run-Id");
+
+    if (req.method === "OPTIONS") {
+      res.writeHead(204);
+      res.end();
+      return;
+    }
+
+    // Parse URL
+    const url = new URL(req.url ?? "/", `http://127.0.0.1:${this.port}`);
+    const pathname = url.pathname;
+    const method = (req.method ?? "GET").toUpperCase();
+
+    // Auth
+    const authHeader = req.headers.authorization;
+    if (!authHeader?.startsWith("Bearer ")) {
+      this.json(res, 401, { error: "Missing or invalid Authorization header" });
+      return;
+    }
+    const token = validateAgentToken(authHeader.slice(7));
+    if (!token) {
+      this.json(res, 401, { error: "Invalid or expired token" });
+      return;
+    }
+
+    // Bind token to its run — verify the run exists and belongs to the token's company
+    if (!this.db.belongsToCompany("runs", token.runId, token.companyId)) {
+      this.json(res, 403, { error: "Token references an unknown or mismatched run" });
+      return;
+    }
+
+    // Match route
+    for (const route of this.routes) {
+      if (route.method !== method) continue;
+      const match = pathname.match(route.pattern);
+      if (!match) continue;
+
+      const params: Record<string, string> = {};
+      route.paramNames.forEach((name, i) => {
+        params[name] = match[i + 1]!;
+      });
+
+      // Parse body for POST/PATCH/PUT
+      let body: unknown = null;
+      if (["POST", "PATCH", "PUT"].includes(method)) {
+        try {
+          body = await this.readBody(req);
+        } catch {
+          this.json(res, 400, { error: "Invalid JSON body" });
+          return;
+        }
+      }
+
+      try {
+        await route.handler(req, res, params, token, body);
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        log.error(`[api] ${method} ${pathname}: ${message}`);
+        this.json(res, 500, { error: message });
+      }
+      return;
+    }
+
+    this.json(res, 404, { error: "Not found" });
+  }
+
+  private readBody(req: IncomingMessage): Promise<unknown> {
+    const MAX_BODY_BYTES = 1_048_576; // 1 MB
+    return new Promise((resolve, reject) => {
+      let data = "";
+      let bytes = 0;
+      req.on("data", (chunk) => {
+        bytes += Buffer.byteLength(chunk);
+        if (bytes > MAX_BODY_BYTES) {
+          req.destroy();
+          reject(new Error("Request body too large"));
+          return;
+        }
+        data += String(chunk);
+      });
+      req.on("end", () => {
+        try { resolve(data ? JSON.parse(data) : null); }
+        catch { reject(new Error("Invalid JSON")); }
+      });
+      req.on("error", reject);
+    });
+  }
+
+  private json(res: ServerResponse, status: number, data: unknown) {
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(data));
+  }
+
+  private companyRefError(
+    res: ServerResponse,
+    companyId: string,
+    refs: Array<{ id: string | null | undefined; table: "agents" | "goals" | "projects" | "tasks" | "workspaces" | "approvals"; label: string }>,
+  ) {
+    const invalid = refs.find((ref) => ref.id && !this.db.belongsToCompany(ref.table, ref.id, companyId));
+    if (!invalid) return false;
+    this.json(res, 422, { error: `${invalid.label} does not belong to the current company` });
+    return true;
+  }
+
+  private registerRoutes() {
+    // GET /api/agents/me — Agent identity
+    this.addRoute("GET", "/api/agents/me", (_req, res, _params, token) => {
+      const agent = this.db.getAgent(token.agentId);
+      const chainOfCommand = this.db.getChainOfCommand(token.agentId);
+      const directReports = this.db.getDirectReports(token.agentId, token.companyId);
+      this.json(res, 200, { agent, chainOfCommand, directReports });
+    });
+
+    // GET /api/companies/:companyId/issues — List issues with filters
+    this.addRoute("GET", "/api/companies/:companyId/issues", (req, res, params, token) => {
+      const companyId = params.companyId!;
+      if (companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const url = new URL(req.url ?? "/", `http://127.0.0.1:${this.port}`);
+      const assigneeAgentId = url.searchParams.get("assigneeAgentId");
+      const statusFilter = url.searchParams.get("status");
+      const statuses = statusFilter ? statusFilter.split(",") : ["todo", "in_progress", "blocked"];
+
+      if (assigneeAgentId) {
+        const tasks = this.db.listAgentTasks(assigneeAgentId, companyId, statuses);
+        this.json(res, 200, tasks);
+      } else {
+        // Return all company tasks with the given statuses
+        const snapshot = this.db.listSnapshot();
+        const tasks = snapshot.tasks.filter((t) => t.companyId === companyId && statuses.includes(t.status));
+        this.json(res, 200, tasks);
+      }
+    });
+
+    // GET /api/issues/:issueId — Get single issue
+    this.addRoute("GET", "/api/issues/:issueId", (_req, res, params, token) => {
+      try {
+        const task = this.db.getTask(params.issueId!);
+        if (task.companyId !== token.companyId) {
+          this.json(res, 404, { error: "Task not found" });
+          return;
+        }
+        this.json(res, 200, task);
+      } catch {
+        this.json(res, 404, { error: "Task not found" });
+      }
+    });
+
+    // POST /api/issues/:issueId/checkout — Claim a task
+    this.addRoute("POST", "/api/issues/:issueId/checkout", (_req, res, params, token, body) => {
+      const parsedBody = checkoutSchema.safeParse(body);
+      if (!parsedBody.success) {
+        this.json(res, 400, { error: "Invalid checkout payload" });
+        return;
+      }
+      const agentId = parsedBody.data.agentId ?? token.agentId;
+      if (agentId !== token.agentId) {
+        this.json(res, 403, { error: "Agents can only checkout work for themselves" });
+        return;
+      }
+      let task;
+      try {
+        task = this.db.getTask(params.issueId!);
+      } catch {
+        this.json(res, 404, { error: "Task not found" });
+        return;
+      }
+      if (task.companyId !== token.companyId) {
+        this.json(res, 404, { error: "Task not found" });
+        return;
+      }
+      const success = this.db.checkoutTask(params.issueId!, agentId);
+      if (!success) {
+        this.json(res, 409, { error: "Task cannot be checked out — already assigned or not in valid status" });
+        return;
+      }
+      this.onDomainChanged();
+      this.json(res, 200, { ok: true });
+    });
+
+    // PATCH /api/issues/:issueId — Update task
+    this.addRoute("PATCH", "/api/issues/:issueId", (_req, res, params, token, body) => {
+      const parsedUpdate = taskUpdateSchema.safeParse(body);
+      if (!parsedUpdate.success) {
+        this.json(res, 400, { error: "Invalid task update payload" });
+        return;
+      }
+      const update = parsedUpdate.data;
+
+      try {
+        const task = this.db.getTask(params.issueId!);
+        if (task.companyId !== token.companyId) {
+          this.json(res, 404, { error: "Task not found" });
+          return;
+        }
+
+        // Update fields
+        const input: Record<string, unknown> = {
+          id: task.id,
+          companyId: task.companyId,
+          title: update.title ?? task.title,
+          description: update.description ?? task.description,
+          status: update.status ?? task.status,
+          priority: task.priority,
+          projectId: task.projectId,
+          goalId: task.goalId,
+          parentId: task.parentId,
+          assigneeAgentId: task.assigneeAgentId,
+          workspaceId: task.workspaceId,
+        };
+        this.db.saveTask(input as Parameters<typeof this.db.saveTask>[0]);
+
+        // Add comment if provided
+        if (update.comment) {
+          const agent = this.db.getAgent(token.agentId);
+          this.db.addComment({
+            companyId: task.companyId,
+            taskId: task.id,
+            authorAgentId: token.agentId,
+            authorName: agent.name,
+            body: update.comment,
+          });
+        }
+
+        this.db.addActivity({
+          companyId: task.companyId,
+          actor: token.agentId,
+          action: `task.${update.status ? "status_changed" : "updated"}`,
+          entityType: "task",
+          entityId: task.id,
+          detail: update.comment ?? `Status → ${update.status ?? task.status}`,
+        });
+
+        this.onDomainChanged();
+
+        // Step 5a: Wake propagation on task status change
+        // Completion notification → task tree (parentId → parent assignee)
+        if (update.status && ["done", "in_review"].includes(update.status)) {
+          if (task.parentId) {
+            try {
+              const parentTask = this.db.getTask(task.parentId);
+              if (parentTask.assigneeAgentId && parentTask.assigneeAgentId !== token.agentId) {
+                this.onWakeAgent(parentTask.assigneeAgentId, task.companyId, "subtask_completed");
+              }
+            } catch { /* parent task may have been deleted */ }
+          } else {
+            // Root task (no parent) — fall back to org hierarchy to notify manager
+            const chain = this.db.getChainOfCommand(token.agentId);
+            if (chain.length > 0) {
+              this.onWakeAgent(chain[0].id, task.companyId, "subtask_completed");
+            }
+          }
+        }
+
+        // Blocked escalation → org hierarchy (agent's manager)
+        if (update.status === "blocked") {
+          const chain = this.db.getChainOfCommand(token.agentId);
+          if (chain.length > 0) {
+            this.onWakeAgent(chain[0].id, task.companyId, "report_blocked");
+          }
+        }
+
+        // Review feedback: when a non-assignee (manager) changes status back to
+        // in_progress or todo, wake the assignee so they know to address feedback
+        if (update.status && ["in_progress", "todo"].includes(update.status) &&
+            task.assigneeAgentId && task.assigneeAgentId !== token.agentId) {
+          this.onWakeAgent(task.assigneeAgentId, task.companyId, "assignment");
+        }
+
+        // Comment with status change → wake assignee + manager for the comment
+        // Comment-only PATCH (no status change) → also wake assignee + manager
+        if (update.comment) {
+          const wokenForComment = new Set<string>();
+          if (task.assigneeAgentId && task.assigneeAgentId !== token.agentId) {
+            this.onWakeAgent(task.assigneeAgentId, task.companyId, "comment");
+            wokenForComment.add(task.assigneeAgentId);
+          }
+          const chain = this.db.getChainOfCommand(token.agentId);
+          if (chain.length > 0 && chain[0].id !== token.agentId && !wokenForComment.has(chain[0].id)) {
+            this.onWakeAgent(chain[0].id, task.companyId, "comment");
+          }
+        }
+
+        this.json(res, 200, { ok: true });
+      } catch (error) {
+        if (error instanceof Error && error.message.includes("require an assignee")) {
+          this.json(res, 422, { error: error.message });
+          return;
+        }
+        this.json(res, 404, { error: "Task not found" });
+      }
+    });
+
+    // POST /api/companies/:companyId/issues — Create task/subtask
+    this.addRoute("POST", "/api/companies/:companyId/issues", (_req, res, params, token, body) => {
+      const companyId = params.companyId!;
+      if (companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const parsed = taskInputSchema.safeParse({
+        companyId,
+        ...(typeof body === "object" && body ? body : {}),
+      });
+      if (!parsed.success) {
+        this.json(res, 400, { error: "Invalid task payload" });
+        return;
+      }
+      const input = parsed.data;
+      if (this.companyRefError(res, companyId, [
+        { id: input.assigneeAgentId, table: "agents", label: "assignee" },
+        { id: input.parentId, table: "tasks", label: "parent task" },
+        { id: input.projectId, table: "projects", label: "project" },
+        { id: input.goalId, table: "goals", label: "goal" },
+        { id: input.workspaceId, table: "workspaces", label: "workspace" },
+      ])) {
+        return;
+      }
+
+      let id: string;
+      try {
+        id = this.db.saveTask({
+          companyId,
+          title: input.title,
+          description: input.description ?? "",
+          assigneeAgentId: input.assigneeAgentId ?? null,
+          parentId: input.parentId ?? null,
+          projectId: input.projectId ?? null,
+          goalId: input.goalId ?? null,
+          priority: input.priority,
+          status: input.status,
+          workspaceId: input.workspaceId ?? null,
+        });
+      } catch (error) {
+        this.json(res, 422, { error: error instanceof Error ? error.message : "Task could not be saved" });
+        return;
+      }
+
+      this.db.addActivity({
+        companyId,
+        actor: token.agentId,
+        action: "task.created",
+        entityType: "task",
+        entityId: id,
+        detail: input.title,
+      });
+
+      this.onDomainChanged();
+
+      // Auto-cascade: when a task is assigned to an agent, enable their heartbeat and wake them
+      if (input.assigneeAgentId && input.assigneeAgentId !== token.agentId) {
+        try {
+          const assignee = this.db.getAgent(input.assigneeAgentId);
+          if (!assignee.heartbeatEnabled) {
+            this.db.setHeartbeat(input.assigneeAgentId, true, assignee.heartbeatIntervalSec || 120);
+          }
+          this.onWakeAgent(input.assigneeAgentId, companyId, "assignment");
+        } catch { /* ignore if agent not found */ }
+      }
+
+      this.json(res, 201, { id });
+    });
+
+    // POST /api/companies/:companyId/projects — Create project
+    this.addRoute("POST", "/api/companies/:companyId/projects", (_req, res, params, token, body) => {
+      const companyId = params.companyId!;
+      if (companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const parsed = projectInputSchema.safeParse({
+        companyId,
+        ...(typeof body === "object" && body ? body : {}),
+      });
+      if (!parsed.success) {
+        this.json(res, 400, { error: "Invalid project payload" });
+        return;
+      }
+      const input = parsed.data;
+      if (this.companyRefError(res, companyId, [
+        { id: input.goalId, table: "goals", label: "goal" },
+        { id: input.leadAgentId, table: "agents", label: "lead agent" },
+      ])) {
+        return;
+      }
+
+      const id = this.db.saveProject({
+        companyId,
+        name: input.name,
+        description: input.description ?? "",
+        goalId: input.goalId ?? null,
+        leadAgentId: input.leadAgentId ?? null,
+        status: (input.status as "planned") ?? "planned",
+        targetDate: input.targetDate ?? null,
+      });
+
+      this.db.addActivity({
+        companyId,
+        actor: token.agentId,
+        action: "project.created",
+        entityType: "project",
+        entityId: id,
+        detail: input.name,
+      });
+
+      this.onDomainChanged();
+      if (input.leadAgentId && input.leadAgentId !== token.agentId) {
+        try {
+          const lead = this.db.getAgent(input.leadAgentId);
+          if (!lead.heartbeatEnabled) {
+            this.db.setHeartbeat(input.leadAgentId, true, lead.heartbeatIntervalSec || 120);
+          }
+          this.onWakeAgent(input.leadAgentId, companyId, "assignment");
+        } catch {
+          // Ignore missing lead agents after validation drift.
+        }
+      }
+      this.json(res, 201, { id });
+    });
+
+    // POST /api/companies/:companyId/goals — Create goal
+    this.addRoute("POST", "/api/companies/:companyId/goals", (_req, res, params, token, body) => {
+      const companyId = params.companyId!;
+      if (companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const parsed = goalInputSchema.safeParse({
+        companyId,
+        ...(typeof body === "object" && body ? body : {}),
+      });
+      if (!parsed.success) {
+        this.json(res, 400, { error: "Invalid goal payload" });
+        return;
+      }
+      const input = parsed.data;
+      if (this.companyRefError(res, companyId, [
+        { id: input.parentId, table: "goals", label: "parent goal" },
+        { id: input.ownerAgentId, table: "agents", label: "owner agent" },
+      ])) {
+        return;
+      }
+
+      const id = this.db.saveGoal(input);
+      this.db.addActivity({
+        companyId,
+        actor: token.agentId,
+        action: "goal.created",
+        entityType: "goal",
+        entityId: id,
+        detail: input.title,
+      });
+      this.onDomainChanged();
+      if (input.ownerAgentId && input.ownerAgentId !== token.agentId && input.status === "active") {
+        try {
+          const owner = this.db.getAgent(input.ownerAgentId);
+          if (!owner.heartbeatEnabled) {
+            this.db.setHeartbeat(input.ownerAgentId, true, owner.heartbeatIntervalSec || 120);
+          }
+          this.onWakeAgent(input.ownerAgentId, companyId, "goal_activated");
+        } catch {
+          // Ignore missing owner agents after validation drift.
+        }
+      }
+      this.json(res, 201, { id });
+    });
+
+    // POST /api/companies/:companyId/agents — Propose a hire
+    this.addRoute("POST", "/api/companies/:companyId/agents", (_req, res, params, token, body) => {
+      const companyId = params.companyId!;
+      if (companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const parsed = agentInputSchema.safeParse({
+        companyId,
+        status: "pending_approval",
+        ...(typeof body === "object" && body ? body : {}),
+        reportsTo:
+          typeof body === "object" && body && "reportsTo" in body
+            ? (body as { reportsTo?: string | null }).reportsTo
+            : token.agentId,
+      });
+      if (!parsed.success) {
+        this.json(res, 400, { error: "Invalid hire payload" });
+        return;
+      }
+      const input = parsed.data;
+      if (this.companyRefError(res, companyId, [
+        { id: input.reportsTo, table: "agents", label: "manager" },
+        { id: input.workspaceId, table: "workspaces", label: "workspace" },
+      ])) {
+        return;
+      }
+
+      let agentId: string;
+      try {
+        agentId = this.db.saveAgent({
+          id: input.id ?? null,
+          companyId,
+          name: input.name,
+          role: input.role,
+          title: input.title,
+          status: "pending_approval",
+          reportsTo: input.reportsTo ?? token.agentId,
+          connectorId: input.connectorId,
+          workspaceId: input.workspaceId ?? null,
+          model: input.model ?? null,
+          metadataJson: input.metadataJson,
+          capabilities: input.capabilities,
+          budgetMonthlyUsd: input.budgetMonthlyUsd,
+        });
+      } catch (error) {
+        this.json(res, 422, { error: error instanceof Error ? error.message : "Hire could not be created" });
+        return;
+      }
+
+      const approvalId = this.db.requestApproval({
+        companyId,
+        requestedByAgentId: token.agentId,
+        type: "hire_agent",
+        payloadSummary: `Hire ${input.name} as ${input.role}`,
+        impactSummary: input.capabilities || `${input.name} will report to ${input.reportsTo ?? token.agentId}.`,
+        payloadJson: JSON.stringify({
+          agentId,
+          requestedByAgentId: token.agentId,
+          requestedConfigurationSnapshot: {
+            connectorId: input.connectorId,
+            workspaceId: input.workspaceId ?? null,
+            model: input.model ?? null,
+            metadataJson: input.metadataJson,
+            capabilities: input.capabilities,
+            budgetMonthlyUsd: input.budgetMonthlyUsd,
+            reportsTo: input.reportsTo ?? token.agentId,
+          },
+        }),
+      });
+
+      this.db.addActivity({
+        companyId,
+        actor: token.agentId,
+        action: "agent.hire_requested",
+        entityType: "agent",
+        entityId: agentId,
+        detail: input.name,
+      });
+      this.onDomainChanged();
+      this.json(res, 201, { agentId, approvalId });
+    });
+
+    // POST /api/issues/:issueId/comments — Add comment
+    this.addRoute("POST", "/api/issues/:issueId/comments", (_req, res, params, token, body) => {
+      const input = body as { body?: string } | null;
+      if (!input?.body || typeof input.body !== "string") {
+        this.json(res, 400, { error: "body is required" });
+        return;
+      }
+      if (input.body.length > 4000) {
+        this.json(res, 400, { error: "Comment body must not exceed 4000 characters" });
+        return;
+      }
+      try {
+        const task = this.db.getTask(params.issueId!);
+        if (task.companyId !== token.companyId) {
+          this.json(res, 404, { error: "Task not found" });
+          return;
+        }
+        const agent = this.db.getAgent(token.agentId);
+        const comment = this.db.addComment({
+          companyId: task.companyId,
+          taskId: task.id,
+          authorAgentId: token.agentId,
+          authorName: agent.name,
+          body: input.body,
+        });
+        this.onDomainChanged();
+
+        // Step 5b: Wake task assignee (if not the comment author)
+        const wokenForComment = new Set<string>();
+        if (task.assigneeAgentId && task.assigneeAgentId !== token.agentId) {
+          this.onWakeAgent(task.assigneeAgentId, task.companyId, "comment");
+          wokenForComment.add(task.assigneeAgentId);
+        }
+
+        // Wake comment author's manager (org hierarchy — for upward reporting chain)
+        const chain = this.db.getChainOfCommand(token.agentId);
+        if (chain.length > 0 && chain[0].id !== token.agentId && !wokenForComment.has(chain[0].id)) {
+          this.onWakeAgent(chain[0].id, task.companyId, "comment");
+        }
+
+        this.json(res, 201, comment);
+      } catch {
+        this.json(res, 404, { error: "Task not found" });
+      }
+    });
+
+    // GET /api/issues/:issueId/comments — List comments
+    this.addRoute("GET", "/api/issues/:issueId/comments", (_req, res, params, token) => {
+      try {
+        const task = this.db.getTask(params.issueId!);
+        if (task.companyId !== token.companyId) {
+          this.json(res, 404, { error: "Task not found" });
+          return;
+        }
+      } catch {
+        this.json(res, 404, { error: "Task not found" });
+        return;
+      }
+      const comments = this.db.listComments(params.issueId!);
+      this.json(res, 200, comments);
+    });
+
+    // POST /api/companies/:companyId/approvals — Request approval
+    this.addRoute("POST", "/api/companies/:companyId/approvals", (_req, res, params, token, body) => {
+      const companyId = params.companyId!;
+      if (companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const parsed = approvalInputSchema.safeParse({
+        companyId,
+        ...(typeof body === "object" && body ? body : {}),
+        requestedByAgentId: token.agentId,
+      });
+      if (!parsed.success) {
+        this.json(res, 400, { error: "Invalid approval payload" });
+        return;
+      }
+      const input = parsed.data;
+      if (this.companyRefError(res, companyId, [
+        { id: input.relatedTaskId, table: "tasks", label: "related task" },
+        { id: token.agentId, table: "agents", label: "requesting agent" },
+      ])) {
+        return;
+      }
+
+      const id = this.db.requestApproval({
+        companyId,
+        type: input.type,
+        relatedTaskId: input.relatedTaskId ?? null,
+        requestedByAgentId: token.agentId,
+        payloadSummary: input.payloadSummary,
+        impactSummary: input.impactSummary,
+      });
+
+      this.db.addActivity({
+        companyId,
+        actor: token.agentId,
+        action: "approval.created",
+        entityType: "approval",
+        entityId: id,
+        detail: input.payloadSummary,
+      });
+
+      this.onDomainChanged();
+      this.json(res, 201, { id });
+    });
+
+    // GET /api/companies/:companyId/approvals — List approvals for polling
+    this.addRoute("GET", "/api/companies/:companyId/approvals", (req, res, params, token) => {
+      const companyId = params.companyId!;
+      if (companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const url = new URL(req.url ?? "/", `http://127.0.0.1:${this.port}`);
+      const parsedQuery = approvalListQuerySchema.safeParse({
+        requestedByAgentId: url.searchParams.get("requestedByAgentId") ?? undefined,
+        relatedTaskId: url.searchParams.get("relatedTaskId") ?? undefined,
+        status: url.searchParams.get("status") ?? undefined,
+      });
+      if (!parsedQuery.success) {
+        this.json(res, 400, { error: "Invalid approval query" });
+        return;
+      }
+      const statuses = parsedQuery.data.status?.split(",").filter(Boolean) ?? null;
+      const snapshot = this.db.listSnapshot();
+      const approvals = snapshot.approvals.filter((approval) => {
+        if (approval.companyId !== companyId) return false;
+        if (parsedQuery.data.requestedByAgentId && approval.requestedByAgentId !== parsedQuery.data.requestedByAgentId) return false;
+        if (parsedQuery.data.relatedTaskId && approval.relatedTaskId !== parsedQuery.data.relatedTaskId) return false;
+        if (statuses && !statuses.includes(approval.state)) return false;
+        return true;
+      });
+      this.json(res, 200, approvals);
+    });
+
+    // GET /api/approvals/:approvalId — Get approval
+    this.addRoute("GET", "/api/approvals/:approvalId", (_req, res, params, token) => {
+      const snapshot = this.db.listSnapshot();
+      const approval = snapshot.approvals.find((a) => a.id === params.approvalId && a.companyId === token.companyId);
+      if (!approval) {
+        this.json(res, 404, { error: "Approval not found" });
+        return;
+      }
+      this.json(res, 200, approval);
+    });
+
+    // GET /api/companies/:companyId/agents — List agents
+    this.addRoute("GET", "/api/companies/:companyId/agents", (_req, res, params, token) => {
+      if (params.companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const snapshot = this.db.listSnapshot();
+      const agents = snapshot.agents.filter((a) => a.companyId === params.companyId);
+      this.json(res, 200, agents);
+    });
+
+    // GET /api/companies/:companyId/goals — List goals
+    this.addRoute("GET", "/api/companies/:companyId/goals", (_req, res, params, token) => {
+      if (params.companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const snapshot = this.db.listSnapshot();
+      const goals = snapshot.goals.filter((g) => g.companyId === params.companyId);
+      this.json(res, 200, goals);
+    });
+
+    // GET /api/companies/:companyId/projects — List projects
+    this.addRoute("GET", "/api/companies/:companyId/projects", (_req, res, params, token) => {
+      if (params.companyId !== token.companyId) {
+        this.json(res, 403, { error: "Company mismatch" });
+        return;
+      }
+      const snapshot = this.db.listSnapshot();
+      const projects = snapshot.projects.filter((p) => p.companyId === params.companyId);
+      this.json(res, 200, projects);
+    });
+  }
+}
diff --git a/src/main/connectors.ts b/src/main/connectors.ts
new file mode 100644
index 00000000..fc2e6aa1
--- /dev/null
+++ b/src/main/connectors.ts
@@ -0,0 +1,313 @@
+import type {
+  AdapterExecutionContext,
+  AdapterExecutionResult,
+  AdapterEnvironmentTestContext,
+  AdapterEnvironmentTestResult,
+  ServerAdapterModule,
+} from "@agentcompany/adapter-utils";
+import { asNumber, asString, ensureAbsoluteDirectory, ensureCommandResolvable, ensurePathInEnv, runChildProcess } from "@agentcompany/adapter-utils/server-utils";
+import { agentConfigurationDoc as claudeDoc, models as claudeModels } from "@agentcompany/adapter-claude-local";
+import { execute as claudeExecute, sessionCodec as claudeSessionCodec, testEnvironment as claudeTestEnvironment } from "@agentcompany/adapter-claude-local/server";
+import {
+  agentConfigurationDoc as codexDoc,
+  DEFAULT_CODEX_LOCAL_MODEL,
+  models as codexModels,
+} from "@agentcompany/adapter-codex-local";
+import { execute as codexExecute, sessionCodec as codexSessionCodec, testEnvironment as codexTestEnvironment } from "@agentcompany/adapter-codex-local/server";
+import { agentConfigurationDoc as geminiDoc, DEFAULT_GEMINI_LOCAL_MODEL, models as geminiModels } from "@agentcompany/adapter-gemini-local";
+import { execute as geminiExecute, sessionCodec as geminiSessionCodec, testEnvironment as geminiTestEnvironment } from "@agentcompany/adapter-gemini-local/server";
+import { agentConfigurationDoc as opencodeDoc } from "@agentcompany/adapter-opencode-local";
+import { execute as opencodeExecute, listOpenCodeModels, sessionCodec as opencodeSessionCodec, testEnvironment as opencodeTestEnvironment } from "@agentcompany/adapter-opencode-local/server";
+import type { CapabilityMatrix, ConnectorId, ConnectorRecord } from "@shared/types";
+
+function normalizeEnv(input: NodeJS.ProcessEnv): Record<string, string> {
+  return Object.fromEntries(
+    Object.entries(input).filter((entry): entry is [string, string] => typeof entry[1] === "string"),
+  );
+}
+
+interface ConnectorDefinition {
+  id: ConnectorId;
+  label: string;
+  description: string;
+  defaultCommand: string;
+  defaultModel: string | null;
+  notes: string;
+  capabilityMatrix: CapabilityMatrix;
+  configurationDoc: string;
+  module: ServerAdapterModule;
+  listModels?: () => Promise<Array<{ id: string; label: string }>>;
+}
+
+const kimiModule: ServerAdapterModule = {
+  type: "kimi_local",
+  async testEnvironment(ctx: AdapterEnvironmentTestContext): Promise<AdapterEnvironmentTestResult> {
+    const command = asString(ctx.config.command, "kimi");
+    const cwd = asString(ctx.config.cwd, process.cwd());
+    const env = normalizeEnv(ensurePathInEnv({ ...(ctx.config.env as Record<string, string> ?? process.env) }));
+    try {
+      await ensureCommandResolvable(command, cwd, env);
+      return {
+        adapterType: "kimi_local",
+        status: "warn",
+        checks: [
+          {
+            code: "kimi_command_detected",
+            level: "info",
+            message: `Detected Kimi Code command "${command}".`,
+          },
+          {
+            code: "kimi_runtime_generic_mode",
+            level: "warn",
+            message:
+              "Kimi integration is running in generic CLI mode. Session resume, model discovery, and structured transcript are not guaranteed.",
+          },
+        ],
+        testedAt: new Date().toISOString(),
+      };
+    } catch (error) {
+      return {
+        adapterType: "kimi_local",
+        status: "fail",
+        checks: [
+          {
+            code: "kimi_command_missing",
+            level: "error",
+            message: error instanceof Error ? error.message : "Kimi command is not available.",
+            hint: "Install Kimi Code and ensure the CLI is available on PATH.",
+          },
+        ],
+        testedAt: new Date().toISOString(),
+      };
+    }
+  },
+  async execute(ctx: AdapterExecutionContext): Promise<AdapterExecutionResult> {
+    const command = asString(ctx.config.command, "kimi");
+    const cwd = asString(ctx.config.cwd, process.cwd());
+    const model = asString(ctx.config.model, "kimi-for-coding");
+    const timeoutSec = asNumber(ctx.config.timeoutSec, 0);
+    const graceSec = asNumber(ctx.config.graceSec, 20);
+    await ensureAbsoluteDirectory(cwd, { createIfMissing: true });
+
+    const prompt = typeof ctx.context.taskTitle === "string" && ctx.context.taskTitle.length > 0
+      ? [
+          ctx.context.taskTitle,
+          typeof ctx.context.taskDescription === "string" && ctx.context.taskDescription.length > 0
+            ? ctx.context.taskDescription
+            : "",
+        ].filter(Boolean).join("\n\n")
+      : [
+          `You are agent ${ctx.agent.name}.`,
+          "Respond with a concise execution summary when complete.",
+        ].join("\n\n");
+
+    const env = normalizeEnv(ensurePathInEnv({ ...(ctx.config.env as Record<string, string> ?? process.env) }));
+    await ensureCommandResolvable(command, cwd, env);
+    const result = await runChildProcess(ctx.runId, command, [], {
+      cwd,
+      env,
+      timeoutSec,
+      graceSec,
+      stdin: prompt,
+      onLog: ctx.onLog,
+    });
+
+    const summary =
+      result.stdout
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter(Boolean)
+        .slice(-8)
+        .join("\n") || null;
+
+    return {
+      exitCode: result.exitCode,
+      signal: result.signal,
+      timedOut: result.timedOut,
+      summary,
+      model,
+      billingType: "unknown",
+    };
+  },
+};
+
+const CONNECTORS: ConnectorDefinition[] = [
+  {
+    id: "codex_local",
+    label: "Codex",
+    description: "Local Codex CLI with session resume, structured event parsing, and model selection.",
+    defaultCommand: "codex",
+    defaultModel: DEFAULT_CODEX_LOCAL_MODEL,
+    notes: "Best fit for high-context coding tasks and shell-heavy automation.",
+    capabilityMatrix: {
+      sessionResume: true,
+      gracefulCancel: true,
+      modelDiscovery: false,
+      structuredTranscript: true,
+      costAttribution: false,
+    },
+    configurationDoc: codexDoc,
+    module: {
+      type: "codex_local",
+      execute: codexExecute,
+      testEnvironment: codexTestEnvironment,
+      sessionCodec: codexSessionCodec,
+      models: codexModels,
+    },
+    listModels: async () => codexModels,
+  },
+  {
+    id: "claude_local",
+    label: "Claude Code",
+    description: "Local Claude Code CLI with session persistence and structured result parsing.",
+    defaultCommand: "claude",
+    defaultModel: claudeModels[0]?.id ?? null,
+    notes: "Useful for long-running coding sessions and agent-style loops.",
+    capabilityMatrix: {
+      sessionResume: true,
+      gracefulCancel: true,
+      modelDiscovery: false,
+      structuredTranscript: true,
+      costAttribution: true,
+    },
+    configurationDoc: claudeDoc,
+    module: {
+      type: "claude_local",
+      execute: claudeExecute,
+      testEnvironment: claudeTestEnvironment,
+      sessionCodec: claudeSessionCodec,
+      models: claudeModels,
+    },
+    listModels: async () => claudeModels,
+  },
+  {
+    id: "gemini_local",
+    label: "Gemini CLI",
+    description: "Local Gemini CLI with resume support and JSON event parsing.",
+    defaultCommand: "gemini",
+    defaultModel: DEFAULT_GEMINI_LOCAL_MODEL,
+    notes: "Good for multi-provider local workflows when Google auth is already in place.",
+    capabilityMatrix: {
+      sessionResume: true,
+      gracefulCancel: true,
+      modelDiscovery: false,
+      structuredTranscript: true,
+      costAttribution: true,
+    },
+    configurationDoc: geminiDoc,
+    module: {
+      type: "gemini_local",
+      execute: geminiExecute,
+      testEnvironment: geminiTestEnvironment,
+      sessionCodec: geminiSessionCodec,
+      models: geminiModels,
+    },
+    listModels: async () => geminiModels,
+  },
+  {
+    id: "opencode_local",
+    label: "OpenCode",
+    description: "Local OpenCode runtime with provider/model routing and session restore.",
+    defaultCommand: "opencode",
+    defaultModel: null,
+    notes: "Best when model routing belongs to the runtime rather than the app.",
+    capabilityMatrix: {
+      sessionResume: true,
+      gracefulCancel: true,
+      modelDiscovery: true,
+      structuredTranscript: true,
+      costAttribution: false,
+    },
+    configurationDoc: opencodeDoc,
+    module: {
+      type: "opencode_local",
+      execute: opencodeExecute,
+      testEnvironment: opencodeTestEnvironment,
+      sessionCodec: opencodeSessionCodec,
+      models: [],
+      listModels: listOpenCodeModels,
+    },
+    listModels: listOpenCodeModels,
+  },
+  {
+    id: "kimi_local",
+    label: "Kimi Code",
+    description: "Official Kimi Code CLI surfaced through a generic execution contract with explicit capability downgrade.",
+    defaultCommand: "kimi",
+    defaultModel: "kimi-for-coding",
+    notes: "MVP support is explicit generic mode until richer runtime contract evidence is implemented.",
+    capabilityMatrix: {
+      sessionResume: false,
+      gracefulCancel: false,
+      modelDiscovery: false,
+      structuredTranscript: false,
+      costAttribution: false,
+    },
+    configurationDoc: [
+      "# kimi_local agent configuration",
+      "",
+      "Core fields:",
+      "- command (string, optional): defaults to \"kimi\"",
+      "- cwd (string, optional): working directory for the Kimi CLI process",
+      "- model (string, optional): default kimi-for-coding",
+      "- timeoutSec (number, optional)",
+      "- graceSec (number, optional)",
+      "",
+      "Notes:",
+      "- This connector currently runs Kimi in generic CLI mode.",
+      "- Session resume, model discovery, structured transcript, and cost attribution are declared unsupported.",
+      "- The UI must surface these limitations explicitly.",
+    ].join("\n"),
+    module: kimiModule,
+    listModels: async () => [{ id: "kimi-for-coding", label: "kimi-for-coding" }],
+  },
+];
+
+export function listConnectorDefinitions(): ConnectorDefinition[] {
+  return CONNECTORS;
+}
+
+export function getConnectorDefinition(id: ConnectorId): ConnectorDefinition {
+  const definition = CONNECTORS.find((entry) => entry.id === id);
+  if (!definition) {
+    throw new Error(`Unknown connector: ${id}`);
+  }
+  return definition;
+}
+
+export function parseEnvBindingText(text: string): Record<string, string> {
+  const bindings: Record<string, string> = {};
+  for (const rawLine of text.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line || line.startsWith("#")) continue;
+    const [envKey, ...rest] = line.split("=");
+    const key = envKey?.trim();
+    const value = rest.join("=").trim();
+    if (!key || !value) continue;
+    bindings[key] = value;
+  }
+  return bindings;
+}
+
+export function buildDefaultConnectorRows(existing: Array<Partial<ConnectorRecord>> = []): ConnectorRecord[] {
+  const byId = new Map(existing.map((record) => [record.id, record]));
+  return CONNECTORS.map((definition) => {
+    const existingRecord = byId.get(definition.id);
+    return {
+      id: definition.id,
+      label: definition.label,
+      description: definition.description,
+      status: existingRecord?.status ?? "not_installed",
+      command: definition.defaultCommand,
+      version: existingRecord?.version ?? null,
+      authState: existingRecord?.authState ?? "unknown",
+      lastCheckedAt: existingRecord?.lastCheckedAt ?? null,
+      lastError: existingRecord?.lastError ?? null,
+      model: existingRecord?.model ?? definition.defaultModel,
+      envBindingText: existingRecord?.envBindingText ?? "",
+      notes: existingRecord?.notes ?? definition.notes,
+      configurationDoc: definition.configurationDoc,
+      capabilityMatrix: definition.capabilityMatrix,
+    };
+  });
+}
diff --git a/src/main/database.ts b/src/main/database.ts
new file mode 100644
index 00000000..90a5304e
--- /dev/null
+++ b/src/main/database.ts
@@ -0,0 +1,1767 @@
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { appendFile, copyFile, cp, rm } from "node:fs/promises";
+import { join, resolve, sep } from "node:path";
+import { randomUUID } from "node:crypto";
+import { DatabaseSync, backup as backupDatabase, type SQLInputValue } from "node:sqlite";
+import { getConnectorDefinition, buildDefaultConnectorRows, parseEnvBindingText } from "./connectors";
+import { SecretVault } from "./vault";
+import type {
+  ActivityRecord,
+  AgentRecord,
+  ApprovalRecord,
+  CommentRecord,
+  CompanyRecord,
+  ConnectorId,
+  ConnectorRecord,
+  CostRecord,
+  GoalRecord,
+  ProfileSnapshot,
+  ProjectRecord,
+  RunRecord,
+  SecretRecord,
+  TaskRecord,
+  WorkspaceRecord,
+} from "@shared/types";
+
+type SqliteDatabase = DatabaseSync;
+
+function nowIso() {
+  return new Date().toISOString();
+}
+
+function parseJson<T>(value: string | null | undefined, fallback: T): T {
+  if (!value) return fallback;
+  try {
+    return JSON.parse(value) as T;
+  } catch {
+    return fallback;
+  }
+}
+
+function ensureId(id: string | null | undefined) {
+  return id && id.length > 0 ? id : randomUUID();
+}
+
+function normalizeOptionalId(id: string | null | undefined) {
+  return id && id.length > 0 ? id : null;
+}
+
+function toBoolean(value: unknown) {
+  return value === true || value === 1 || value === "1";
+}
+
+function isWithinOrEqual(targetPath: string, rootPath: string) {
+  const resolvedTarget = resolve(targetPath);
+  const resolvedRoot = resolve(rootPath);
+  return resolvedTarget === resolvedRoot || resolvedTarget.startsWith(`${resolvedRoot}${sep}`);
+}
+
+function taskPriorityOrderSql(columnName: string) {
+  return `case ${columnName}
+    when 'critical' then 4
+    when 'high' then 3
+    when 'medium' then 2
+    when 'low' then 1
+    else 0
+  end`;
+}
+
+export class AppDatabase {
+  readonly profileDir: string;
+  readonly dbPath: string;
+  readonly logsDir: string;
+  readonly artifactsDir: string;
+  readonly backupsDir: string;
+  readonly vault: SecretVault;
+  private db: SqliteDatabase;
+
+  constructor(rootDir: string) {
+    this.profileDir = rootDir;
+    this.dbPath = join(rootDir, "profile.sqlite");
+    this.logsDir = join(rootDir, "logs");
+    this.artifactsDir = join(rootDir, "artifacts");
+    this.backupsDir = join(rootDir, "backups");
+    mkdirSync(rootDir, { recursive: true });
+    mkdirSync(this.logsDir, { recursive: true });
+    mkdirSync(this.artifactsDir, { recursive: true });
+    mkdirSync(this.backupsDir, { recursive: true });
+    this.vault = new SecretVault(rootDir);
+    this.db = this.openConnection();
+  }
+
+  init() {
+    this.db.exec("PRAGMA journal_mode = WAL; PRAGMA foreign_keys = ON;");
+    this.db.exec(`
+      create table if not exists settings (
+        key text primary key,
+        value text not null
+      );
+      create table if not exists companies (
+        id text primary key,
+        name text not null,
+        description text not null,
+        status text not null,
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists connectors (
+        id text primary key,
+        label text not null,
+        description text not null,
+        status text not null,
+        command text not null,
+        version text,
+        auth_state text not null,
+        last_checked_at text,
+        last_error text,
+        model text,
+        env_binding_text text not null,
+        notes text not null,
+        updated_at text
+      );
+      create table if not exists workspaces (
+        id text primary key,
+        company_id text not null,
+        name text not null,
+        local_path text not null,
+        repo_url text not null,
+        repo_ref text not null,
+        project_id text,
+        state text not null,
+        is_primary integer not null default 0,
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists agents (
+        id text primary key,
+        company_id text not null,
+        name text not null,
+        role text not null,
+        title text not null,
+        status text not null,
+        reports_to text,
+        connector_id text not null,
+        workspace_id text,
+        model text,
+        capabilities text not null,
+        budget_monthly_usd real not null default 0,
+        spent_monthly_usd real not null default 0,
+        metadata_json text not null default '{}',
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists goals (
+        id text primary key,
+        company_id text not null,
+        title text not null,
+        description text not null,
+        parent_id text,
+        owner_agent_id text,
+        status text not null,
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists projects (
+        id text primary key,
+        company_id text not null,
+        goal_id text,
+        name text not null,
+        description text not null,
+        lead_agent_id text,
+        status text not null,
+        target_date text,
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists tasks (
+        id text primary key,
+        company_id text not null,
+        project_id text,
+        goal_id text,
+        parent_id text,
+        title text not null,
+        description text not null,
+        assignee_agent_id text,
+        workspace_id text,
+        status text not null,
+        priority text not null,
+        active_run_id text,
+        session_json text,
+        session_display_id text,
+        cost_usd real not null default 0,
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists approvals (
+        id text primary key,
+        company_id text not null,
+        related_task_id text,
+        requested_by_agent_id text,
+        type text not null,
+        payload_summary text not null,
+        impact_summary text not null,
+        payload_json text,
+        decision_note text not null default '',
+        state text not null,
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists runs (
+        id text primary key,
+        company_id text not null,
+        task_id text not null,
+        agent_id text not null,
+        workspace_id text,
+        connector_id text not null,
+        status text not null,
+        summary text not null,
+        error_message text,
+        exit_code integer,
+        signal text,
+        model text,
+        session_display_id text,
+        cost_usd real,
+        unattributed_cost integer not null default 0,
+        started_at text,
+        finished_at text,
+        log_path text,
+        created_at text not null,
+        updated_at text not null
+      );
+      create table if not exists cost_entries (
+        id text primary key,
+        company_id text not null,
+        run_id text not null,
+        task_id text,
+        agent_id text,
+        connector_id text not null,
+        amount_usd real,
+        unattributed integer not null default 0,
+        created_at text not null
+      );
+      create table if not exists activity (
+        id text primary key,
+        company_id text not null,
+        actor text not null,
+        action text not null,
+        entity_type text not null,
+        entity_id text not null,
+        detail text not null,
+        created_at text not null
+      );
+      create table if not exists secrets (
+        id text primary key,
+        company_id text not null,
+        name text not null,
+        description text not null,
+        backend text not null,
+        ciphertext blob not null,
+        updated_at text not null,
+        created_at text not null,
+        unique(company_id, name)
+      );
+    `);
+
+    this.db.exec(`
+      create index if not exists idx_workspaces_company on workspaces(company_id);
+      create index if not exists idx_agents_company on agents(company_id);
+      create index if not exists idx_goals_company on goals(company_id);
+      create index if not exists idx_projects_company on projects(company_id);
+      create index if not exists idx_tasks_company on tasks(company_id);
+      create index if not exists idx_tasks_assignee on tasks(assignee_agent_id);
+      create index if not exists idx_tasks_project on tasks(project_id);
+      create index if not exists idx_approvals_company on approvals(company_id);
+      create index if not exists idx_runs_company on runs(company_id);
+      create index if not exists idx_runs_task on runs(task_id);
+      create index if not exists idx_runs_agent on runs(agent_id);
+      create index if not exists idx_cost_entries_company on cost_entries(company_id);
+      create index if not exists idx_cost_entries_run on cost_entries(run_id);
+      create index if not exists idx_activity_company on activity(company_id);
+    `);
+
+    // Step 3: Deferred wake queue — prevents silent wake loss when agent is busy
+    this.db.exec(`
+      create table if not exists pending_wakes (
+        id text primary key,
+        company_id text not null,
+        agent_id text not null,
+        trigger_reason text not null,
+        created_at text not null
+      );
+      create index if not exists idx_pending_wakes_agent on pending_wakes(agent_id);
+    `);
+
+    this.migrateSecretsTable();
+    this.ensureOptionalColumns();
+
+    // secrets index must run AFTER migrateSecretsTable adds company_id column
+    this.db.exec(`create index if not exists idx_secrets_company on secrets(company_id);`);
+
+    // Forward-only migration system
+    this.runMigrations();
+
+    this.seedSettings();
+    this.seedConnectors();
+    this.interruptStaleRuns();
+    // Purge expired run logs based on retention setting
+    this.purgeExpiredRunLogs();
+  }
+
+  close() {
+    this.db.close();
+  }
+
+  getProfilePath() {
+    return this.profileDir;
+  }
+
+  getCurrentCompanyId() {
+    return this.getSetting("current_company_id");
+  }
+
+  setCurrentCompany(companyId: string) {
+    this.setSetting("current_company_id", companyId);
+  }
+
+  hasCompany(companyId: string) {
+    const row = this.db.prepare("select id from companies where id = ?").get(companyId) as { id: string } | undefined;
+    return Boolean(row);
+  }
+
+  belongsToCompany(table: "workspaces" | "agents" | "goals" | "projects" | "tasks" | "approvals" | "runs" | "secrets", id: string, companyId: string) {
+    const queries: Record<string, string> = {
+      workspaces: "select 1 as present from workspaces where id = ? and company_id = ?",
+      agents: "select 1 as present from agents where id = ? and company_id = ?",
+      goals: "select 1 as present from goals where id = ? and company_id = ?",
+      projects: "select 1 as present from projects where id = ? and company_id = ?",
+      tasks: "select 1 as present from tasks where id = ? and company_id = ?",
+      approvals: "select 1 as present from approvals where id = ? and company_id = ?",
+      runs: "select 1 as present from runs where id = ? and company_id = ?",
+      secrets: "select 1 as present from secrets where id = ? and company_id = ?",
+    };
+    const sql = queries[table];
+    if (!sql) throw new Error(`Unknown table: ${table}`);
+    const row = this.db.prepare(sql).get(id, companyId) as { present: number } | undefined;
+    return Boolean(row?.present);
+  }
+
+  canOpenPath(targetPath: string) {
+    if (!targetPath || !existsSync(targetPath)) {
+      return false;
+    }
+
+    const managedRoots = [this.profileDir, this.logsDir, this.artifactsDir, this.backupsDir];
+    if (managedRoots.some((rootPath) => isWithinOrEqual(targetPath, rootPath))) {
+      return true;
+    }
+
+    const workspaces = this.readAll<{ localPath: string }>("select local_path as localPath from workspaces");
+    if (workspaces.some((workspace) => isWithinOrEqual(targetPath, workspace.localPath))) {
+      return true;
+    }
+
+    const runLogs = this.readAll<{ logPath: string | null }>("select log_path as logPath from runs where log_path is not null");
+    return runLogs.some((run) => run.logPath ? resolve(run.logPath) === resolve(targetPath) : false);
+  }
+
+  updateSettings(input: { theme?: "system" | "light" | "dark"; updatesEnabled?: boolean; logRetentionDays?: number }) {
+    if (input.theme) {
+      this.setSetting("theme", input.theme);
+    }
+    if (typeof input.updatesEnabled === "boolean") {
+      this.setSetting("updates_enabled", input.updatesEnabled ? "true" : "false");
+    }
+    if (typeof input.logRetentionDays === "number") {
+      this.setSetting("log_retention_days", String(input.logRetentionDays));
+    }
+  }
+
+  getLogRetentionDays(): number {
+    const raw = this.getSetting("log_retention_days");
+    const parsed = raw ? parseInt(raw, 10) : NaN;
+    return Number.isFinite(parsed) && parsed >= 1 ? parsed : 90; // default 90 days
+  }
+
+  /**
+   * Purge run logs older than the retention window.
+   * Deletes the log file and clears the log_path column.
+   * Returns the number of runs purged.
+   */
+  purgeExpiredRunLogs(): number {
+    const retentionDays = this.getLogRetentionDays();
+    const cutoff = new Date(Date.now() - retentionDays * 86_400_000).toISOString();
+    const expiredRuns = this.readAll<{ id: string; logPath: string | null }>(
+      "select id, log_path as logPath from runs where finished_at is not null and finished_at < ? and log_path is not null",
+      cutoff,
+    );
+    let purged = 0;
+    for (const run of expiredRuns) {
+      if (run.logPath) {
+        try {
+          unlinkSync(run.logPath);
+        } catch {
+          // File may already be gone — that's fine
+        }
+      }
+      this.db
+        .prepare("update runs set log_path = null, updated_at = ? where id = ?")
+        .run(nowIso(), run.id);
+      purged++;
+    }
+    return purged;
+  }
+
+  listSnapshot(): ProfileSnapshot {
+    const connectors = this.readConnectors();
+    const theme = (this.getSetting("theme") as "system" | "light" | "dark" | null) ?? "system";
+    return {
+      currentCompanyId: this.getCurrentCompanyId(),
+      profilePath: this.profileDir,
+      updatesEnabled: this.getSetting("updates_enabled") !== "false",
+      theme,
+      backend: {
+        secretBackend: this.vault.getBackendLabel(),
+      },
+      companies: this.readAll<CompanyRecord>(
+        "select id, name, description, status, created_at as createdAt, updated_at as updatedAt from companies order by created_at asc",
+      ),
+      connectors,
+      workspaces: this.readAll<WorkspaceRecord>(
+        "select id, company_id as companyId, name, local_path as localPath, repo_url as repoUrl, repo_ref as repoRef, project_id as projectId, state, is_primary as isPrimary, created_at as createdAt, updated_at as updatedAt from workspaces order by created_at desc",
+      ).map((record) => ({ ...record, isPrimary: toBoolean(record.isPrimary) })) as WorkspaceRecord[],
+      agents: this.readAll<AgentRecord>(
+        "select id, company_id as companyId, name, role, title, status, reports_to as reportsTo, connector_id as connectorId, workspace_id as workspaceId, model, capabilities, budget_monthly_usd as budgetMonthlyUsd, spent_monthly_usd as spentMonthlyUsd, metadata_json as metadataJson, heartbeat_enabled as heartbeatEnabled, heartbeat_interval_sec as heartbeatIntervalSec, last_heartbeat_at as lastHeartbeatAt, created_at as createdAt, updated_at as updatedAt from agents order by created_at asc",
+      ).map((record) => ({ ...record, heartbeatEnabled: toBoolean(record.heartbeatEnabled) })) as AgentRecord[],
+      goals: this.readAll<GoalRecord>(
+        "select id, company_id as companyId, title, description, parent_id as parentId, owner_agent_id as ownerAgentId, status, created_at as createdAt, updated_at as updatedAt from goals order by created_at asc",
+      ),
+      projects: this.readAll<ProjectRecord>(
+        "select id, company_id as companyId, goal_id as goalId, name, description, lead_agent_id as leadAgentId, status, target_date as targetDate, created_at as createdAt, updated_at as updatedAt from projects order by created_at desc",
+      ),
+      tasks: this.readAll<TaskRecord>(
+        "select id, company_id as companyId, project_id as projectId, goal_id as goalId, parent_id as parentId, title, description, assignee_agent_id as assigneeAgentId, workspace_id as workspaceId, status, priority, active_run_id as activeRunId, session_json as sessionJson, session_display_id as sessionDisplayId, cost_usd as costUsd, created_at as createdAt, updated_at as updatedAt from tasks order by created_at desc",
+      ),
+      approvals: this.readAll<ApprovalRecord>(
+        "select id, company_id as companyId, related_task_id as relatedTaskId, related_agent_id as relatedAgentId, requested_by_agent_id as requestedByAgentId, type, payload_summary as payloadSummary, impact_summary as impactSummary, payload_json as payloadJson, decision_note as decisionNote, state, created_at as createdAt, updated_at as updatedAt from approvals order by created_at desc",
+      ),
+      runs: this.readAll<RunRecord>(
+        "select id, company_id as companyId, task_id as taskId, agent_id as agentId, workspace_id as workspaceId, connector_id as connectorId, status, summary, error_message as errorMessage, exit_code as exitCode, signal, model, session_display_id as sessionDisplayId, cost_usd as costUsd, unattributed_cost as unattributedCost, started_at as startedAt, finished_at as finishedAt, log_path as logPath, created_at as createdAt, updated_at as updatedAt from runs order by created_at desc limit 500",
+      ).map((record) => ({ ...record, unattributedCost: Boolean(record.unattributedCost) })) as RunRecord[],
+      costs: this.readAll<CostRecord>(
+        "select id, company_id as companyId, run_id as runId, task_id as taskId, agent_id as agentId, connector_id as connectorId, amount_usd as amountUsd, unattributed, created_at as createdAt from cost_entries order by created_at desc limit 500",
+      ).map((entry) => ({ ...entry, unattributed: Boolean(entry.unattributed) })) as CostRecord[],
+      activity: this.readAll<ActivityRecord>(
+        "select id, company_id as companyId, actor, action, entity_type as entityType, entity_id as entityId, detail, created_at as createdAt from activity order by created_at desc limit 250",
+      ),
+      secrets: this.readAll<SecretRecord>(
+        "select id, company_id as companyId, name, description, backend, updated_at as updatedAt from secrets order by updated_at desc",
+      ),
+      comments: this.readAll<CommentRecord>(
+        "select id, company_id as companyId, task_id as taskId, author_agent_id as authorAgentId, author_name as authorName, body, created_at as createdAt from task_comments order by created_at asc",
+      ),
+    };
+  }
+
+  saveCompany(input: { id?: string | null; name: string; description: string; status: string }) {
+    const id = ensureId(input.id ?? null);
+    const ts = nowIso();
+    const existing = this.db.prepare("select id from companies where id = ?").get(id) as { id: string } | undefined;
+    if (existing) {
+      this.db
+        .prepare("update companies set name = ?, description = ?, status = ?, updated_at = ? where id = ?")
+        .run(input.name, input.description, input.status, ts, id);
+    } else {
+      this.db
+        .prepare("insert into companies (id, name, description, status, created_at, updated_at) values (?, ?, ?, ?, ?, ?)")
+        .run(id, input.name, input.description, input.status, ts, ts);
+      if (!this.getCurrentCompanyId()) {
+        this.setCurrentCompany(id);
+      }
+    }
+    return id;
+  }
+
+  saveConnector(input: {
+    id: ConnectorId;
+    command: string;
+    model: string | null;
+    envBindingText: string;
+    notes: string;
+  }) {
+    const definition = getConnectorDefinition(input.id);
+    this.db
+      .prepare(
+        "update connectors set command = ?, model = ?, env_binding_text = ?, notes = ?, updated_at = ? where id = ?",
+      )
+      .run(definition.defaultCommand, input.model, input.envBindingText, input.notes, nowIso(), input.id);
+  }
+
+  updateConnectorHealth(input: {
+    id: ConnectorId;
+    status: string;
+    authState: string;
+    version: string | null;
+    lastError: string | null;
+  }) {
+    this.db
+      .prepare(
+        "update connectors set status = ?, auth_state = ?, version = ?, last_checked_at = ?, last_error = ?, updated_at = ? where id = ?",
+      )
+      .run(input.status, input.authState, input.version, nowIso(), input.lastError, nowIso(), input.id);
+  }
+
+  saveWorkspace(input: {
+    id?: string | null;
+    companyId: string;
+    name: string;
+    localPath: string;
+    repoUrl: string;
+    repoRef: string;
+    projectId?: string | null;
+    isPrimary: boolean;
+  }) {
+    const id = ensureId(input.id ?? null);
+    const ts = nowIso();
+    if (input.isPrimary) {
+      this.db.prepare("update workspaces set is_primary = 0 where company_id = ?").run(input.companyId);
+    }
+    const existing = this.db.prepare("select id from workspaces where id = ? and company_id = ?").get(id, input.companyId) as { id: string } | undefined;
+    if (existing) {
+      this.db
+        .prepare(
+          "update workspaces set name = ?, local_path = ?, repo_url = ?, repo_ref = ?, project_id = ?, is_primary = ?, updated_at = ? where id = ? and company_id = ?",
+        )
+        .run(input.name, input.localPath, input.repoUrl, input.repoRef, normalizeOptionalId(input.projectId), input.isPrimary ? 1 : 0, ts, id, input.companyId);
+    } else {
+      this.db
+        .prepare(
+          "insert into workspaces (id, company_id, name, local_path, repo_url, repo_ref, project_id, state, is_primary, created_at, updated_at) values (?, ?, ?, ?, ?, ?, ?, 'ready', ?, ?, ?)",
+        )
+        .run(id, input.companyId, input.name, input.localPath, input.repoUrl, input.repoRef, normalizeOptionalId(input.projectId), input.isPrimary ? 1 : 0, ts, ts);
+    }
+    return id;
+  }
+
+  saveAgent(input: {
+    id?: string | null;
+    companyId: string;
+    name: string;
+    role: string;
+    title: string;
+    status: AgentRecord["status"];
+    reportsTo?: string | null;
+    connectorId: ConnectorId;
+    workspaceId?: string | null;
+    model?: string | null;
+    metadataJson?: string;
+    capabilities: string;
+    budgetMonthlyUsd: number;
+  }) {
+    const id = ensureId(input.id ?? null);
+    const ts = nowIso();
+    const metadataJson = input.metadataJson ?? "{}";
+    const reportsTo = normalizeOptionalId(input.reportsTo);
+    if (this.wouldCreateAgentCycle(id, reportsTo)) {
+      throw new Error("Agent reporting relationship would create a cycle.");
+    }
+    const existing = this.db.prepare("select id from agents where id = ? and company_id = ?").get(id, input.companyId) as { id: string } | undefined;
+    if (existing) {
+      this.db
+        .prepare(
+          "update agents set name = ?, role = ?, title = ?, status = ?, reports_to = ?, connector_id = ?, workspace_id = ?, model = ?, metadata_json = ?, capabilities = ?, budget_monthly_usd = ?, updated_at = ? where id = ? and company_id = ?",
+        )
+        .run(
+          input.name,
+          input.role,
+          input.title,
+          input.status,
+          reportsTo,
+          input.connectorId,
+          normalizeOptionalId(input.workspaceId),
+          normalizeOptionalId(input.model),
+          metadataJson,
+          input.capabilities,
+          input.budgetMonthlyUsd,
+          ts,
+          id,
+          input.companyId,
+        );
+    } else {
+      this.db
+        .prepare(
+          "insert into agents (id, company_id, name, role, title, status, reports_to, connector_id, workspace_id, model, capabilities, budget_monthly_usd, spent_monthly_usd, metadata_json, created_at, updated_at) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?)",
+        )
+        .run(
+          id,
+          input.companyId,
+          input.name,
+          input.role,
+          input.title,
+          input.status,
+          reportsTo,
+          input.connectorId,
+          normalizeOptionalId(input.workspaceId),
+          normalizeOptionalId(input.model),
+          input.capabilities,
+          input.budgetMonthlyUsd,
+          metadataJson,
+          ts,
+          ts,
+        );
+    }
+    return id;
+  }
+
+  saveGoal(input: { id?: string | null; companyId: string; title: string; description: string; parentId?: string | null; ownerAgentId?: string | null; status: string }) {
+    const id = ensureId(input.id ?? null);
+    const ts = nowIso();
+    const existing = this.db.prepare("select id from goals where id = ? and company_id = ?").get(id, input.companyId) as { id: string } | undefined;
+    if (existing) {
+      this.db
+        .prepare(
+          "update goals set title = ?, description = ?, parent_id = ?, owner_agent_id = ?, status = ?, updated_at = ? where id = ? and company_id = ?",
+        )
+        .run(input.title, input.description, normalizeOptionalId(input.parentId), normalizeOptionalId(input.ownerAgentId), input.status, ts, id, input.companyId);
+    } else {
+      this.db
+        .prepare(
+          "insert into goals (id, company_id, title, description, parent_id, owner_agent_id, status, created_at, updated_at) values (?, ?, ?, ?, ?, ?, ?, ?, ?)",
+        )
+        .run(id, input.companyId, input.title, input.description, normalizeOptionalId(input.parentId), normalizeOptionalId(input.ownerAgentId), input.status, ts, ts);
+    }
+    return id;
+  }
+
+  saveProject(input: { id?: string | null; companyId: string; goalId?: string | null; name: string; description: string; leadAgentId?: string | null; targetDate?: string | null; status: string }) {
+    const id = ensureId(input.id ?? null);
+    const ts = nowIso();
+    const existing = this.db.prepare("select id from projects where id = ? and company_id = ?").get(id, input.companyId) as { id: string } | undefined;
+    if (existing) {
+      this.db
+        .prepare(
+          "update projects set goal_id = ?, name = ?, description = ?, lead_agent_id = ?, status = ?, target_date = ?, updated_at = ? where id = ? and company_id = ?",
+        )
+        .run(normalizeOptionalId(input.goalId), input.name, input.description, normalizeOptionalId(input.leadAgentId), input.status, normalizeOptionalId(input.targetDate), ts, id, input.companyId);
+    } else {
+      this.db
+        .prepare(
+          "insert into projects (id, company_id, goal_id, name, description, lead_agent_id, status, target_date, created_at, updated_at) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
+        )
+        .run(id, input.companyId, normalizeOptionalId(input.goalId), input.name, input.description, normalizeOptionalId(input.leadAgentId), input.status, normalizeOptionalId(input.targetDate), ts, ts);
+    }
+    return id;
+  }
+
+  saveTask(input: {
+    id?: string | null;
+    companyId: string;
+    projectId?: string | null;
+    goalId?: string | null;
+    parentId?: string | null;
+    title: string;
+    description: string;
+    assigneeAgentId?: string | null;
+    workspaceId?: string | null;
+    priority: string;
+    status: string;
+  }) {
+    const id = ensureId(input.id ?? null);
+    const ts = nowIso();
+    const assigneeAgentId = normalizeOptionalId(input.assigneeAgentId);
+    if (input.status === "in_progress" && !assigneeAgentId) {
+      throw new Error("Tasks in progress require an assignee.");
+    }
+    const existing = this.db.prepare("select id from tasks where id = ? and company_id = ?").get(id, input.companyId) as { id: string } | undefined;
+    if (existing) {
+      this.db
+        .prepare(
+          "update tasks set project_id = ?, goal_id = ?, parent_id = ?, title = ?, description = ?, assignee_agent_id = ?, workspace_id = ?, priority = ?, status = ?, updated_at = ? where id = ? and company_id = ?",
+        )
+        .run(normalizeOptionalId(input.projectId), normalizeOptionalId(input.goalId), normalizeOptionalId(input.parentId), input.title, input.description, assigneeAgentId, normalizeOptionalId(input.workspaceId), input.priority, input.status, ts, id, input.companyId);
+    } else {
+      this.db
+        .prepare(
+          "insert into tasks (id, company_id, project_id, goal_id, parent_id, title, description, assignee_agent_id, workspace_id, status, priority, created_at, updated_at) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
+        )
+        .run(id, input.companyId, normalizeOptionalId(input.projectId), normalizeOptionalId(input.goalId), normalizeOptionalId(input.parentId), input.title, input.description, assigneeAgentId, normalizeOptionalId(input.workspaceId), input.status, input.priority, ts, ts);
+    }
+    return id;
+  }
+
+  requestApproval(input: {
+    companyId: string;
+    relatedTaskId?: string | null;
+    requestedByAgentId?: string | null;
+    relatedAgentId?: string | null;
+    type: string;
+    payloadSummary: string;
+    impactSummary: string;
+    payloadJson?: string | null;
+  }) {
+    const id = randomUUID();
+    const ts = nowIso();
+    // Extract relatedAgentId from payload for hire_agent approvals if not explicitly set
+    let relatedAgentId = normalizeOptionalId(input.relatedAgentId);
+    if (!relatedAgentId && input.type === "hire_agent" && input.payloadJson) {
+      try {
+        const payload = JSON.parse(input.payloadJson) as { agentId?: string };
+        relatedAgentId = payload.agentId ?? null;
+      } catch { /* ignore malformed payload */ }
+    }
+    this.db
+      .prepare(
+        "insert into approvals (id, company_id, related_task_id, requested_by_agent_id, related_agent_id, type, payload_summary, impact_summary, payload_json, decision_note, state, created_at, updated_at) values (?, ?, ?, ?, ?, ?, ?, ?, ?, '', 'pending', ?, ?)",
+      )
+      .run(
+        id,
+        input.companyId,
+        normalizeOptionalId(input.relatedTaskId),
+        normalizeOptionalId(input.requestedByAgentId),
+        relatedAgentId,
+        input.type,
+        input.payloadSummary,
+        input.impactSummary,
+        normalizeOptionalId(input.payloadJson),
+        ts,
+        ts,
+      );
+    return id;
+  }
+
+  decideApproval(input: { approvalId: string; state: string; decisionNote: string }) {
+    const approval = this.getApprovalRecord(input.approvalId);
+    if (approval.state !== "pending") {
+      throw new Error(`Approval ${input.approvalId} is already ${approval.state} and cannot be re-decided.`);
+    }
+    const ts = nowIso();
+    this.transaction(() => {
+      this.db
+        .prepare("update approvals set state = ?, decision_note = ?, updated_at = ? where id = ?")
+        .run(input.state, input.decisionNote, ts, input.approvalId);
+      if (approval.type === "hire_agent") {
+        // Prefer structured related_agent_id; fall back to payload_json for legacy records
+        const agentId = approval.relatedAgentId
+          ?? parseJson<{ agentId?: string } | null>(approval.payloadJson, null)?.agentId
+          ?? null;
+        if (agentId) {
+          if (input.state === "approved") {
+            this.db
+              .prepare("update agents set status = 'idle', updated_at = ? where id = ? and company_id = ? and status = 'pending_approval'")
+              .run(ts, agentId, approval.companyId);
+          }
+          if (input.state === "rejected") {
+            this.db
+              .prepare("update agents set status = 'terminated', updated_at = ? where id = ? and company_id = ? and status = 'pending_approval'")
+              .run(ts, agentId, approval.companyId);
+          }
+        }
+      }
+    });
+  }
+
+  saveSecret(input: { id?: string | null; companyId: string; name: string; description: string; value: string }) {
+    const id = ensureId(input.id ?? null);
+    const encrypted = this.vault.encrypt(input.value);
+    const ts = nowIso();
+    const existing = this.db.prepare("select id, company_id as companyId from secrets where id = ?").get(id) as
+      | { id: string; companyId: string }
+      | undefined;
+    if (existing) {
+      if (existing.companyId !== input.companyId) {
+        throw new Error("Secrets cannot be moved across companies.");
+      }
+      this.db
+        .prepare("update secrets set name = ?, description = ?, backend = ?, ciphertext = ?, updated_at = ? where id = ? and company_id = ?")
+        .run(input.name, input.description, encrypted.backend, encrypted.payload, ts, id, input.companyId);
+    } else {
+      this.db
+        .prepare("insert into secrets (id, company_id, name, description, backend, ciphertext, updated_at, created_at) values (?, ?, ?, ?, ?, ?, ?, ?)")
+        .run(id, input.companyId, input.name, input.description, encrypted.backend, encrypted.payload, ts, ts);
+    }
+    return id;
+  }
+
+  resolveSecretEnv(bindingText: string, companyId: string): Record<string, string> {
+    const bindings = parseEnvBindingText(bindingText);
+    const result: Record<string, string> = {};
+    for (const [envKey, secretName] of Object.entries(bindings)) {
+      const row = this.db.prepare("select backend, ciphertext from secrets where company_id = ? and name = ?").get(companyId, secretName) as
+        | { backend: "safe_storage" | "vault"; ciphertext: Uint8Array }
+        | undefined;
+      if (!row) continue;
+      result[envKey] = this.vault.decrypt(row.backend, Buffer.from(row.ciphertext));
+    }
+    return result;
+  }
+
+  getConnector(id: ConnectorId): ConnectorRecord {
+    const record = this.readConnectors().find((entry) => entry.id === id);
+    if (!record) throw new Error(`Connector not found: ${id}`);
+    return record;
+  }
+
+  getTask(id: string): TaskRecord {
+    const row = this.db
+      .prepare(
+        "select id, company_id as companyId, project_id as projectId, goal_id as goalId, parent_id as parentId, title, description, assignee_agent_id as assigneeAgentId, workspace_id as workspaceId, status, priority, active_run_id as activeRunId, session_json as sessionJson, session_display_id as sessionDisplayId, cost_usd as costUsd, created_at as createdAt, updated_at as updatedAt from tasks where id = ?",
+      )
+      .get(id) as TaskRecord | undefined;
+    if (!row) throw new Error(`Task not found: ${id}`);
+    return row;
+  }
+
+  getApprovalRecord(id: string) {
+    const row = this.db
+      .prepare(
+        "select id, company_id as companyId, related_task_id as relatedTaskId, requested_by_agent_id as requestedByAgentId, related_agent_id as relatedAgentId, type, payload_summary as payloadSummary, impact_summary as impactSummary, payload_json as payloadJson, decision_note as decisionNote, state, created_at as createdAt, updated_at as updatedAt from approvals where id = ?",
+      )
+      .get(id) as (ApprovalRecord & { payloadJson: string | null; relatedAgentId: string | null }) | undefined;
+    if (!row) throw new Error(`Approval not found: ${id}`);
+    return row;
+  }
+
+  getAgent(id: string): AgentRecord {
+    const row = this.db
+      .prepare(
+        "select id, company_id as companyId, name, role, title, status, reports_to as reportsTo, connector_id as connectorId, workspace_id as workspaceId, model, capabilities, budget_monthly_usd as budgetMonthlyUsd, spent_monthly_usd as spentMonthlyUsd, metadata_json as metadataJson, heartbeat_enabled as heartbeatEnabled, heartbeat_interval_sec as heartbeatIntervalSec, last_heartbeat_at as lastHeartbeatAt, created_at as createdAt, updated_at as updatedAt from agents where id = ?",
+      )
+      .get(id) as AgentRecord | undefined;
+    if (!row) throw new Error(`Agent not found: ${id}`);
+    return row;
+  }
+
+  getWorkspace(id: string | null | undefined): WorkspaceRecord | null {
+    if (!id) return null;
+    const row = this.db
+      .prepare(
+        "select id, company_id as companyId, name, local_path as localPath, repo_url as repoUrl, repo_ref as repoRef, project_id as projectId, state, is_primary as isPrimary, created_at as createdAt, updated_at as updatedAt from workspaces where id = ?",
+      )
+      .get(id) as WorkspaceRecord | undefined;
+    return row ? { ...row, isPrimary: toBoolean(row.isPrimary) } : null;
+  }
+
+  getProjectPrimaryWorkspace(companyId: string): WorkspaceRecord | null {
+    const row = this.db
+      .prepare(
+        "select id, company_id as companyId, name, local_path as localPath, repo_url as repoUrl, repo_ref as repoRef, project_id as projectId, state, is_primary as isPrimary, created_at as createdAt, updated_at as updatedAt from workspaces where company_id = ? and is_primary = 1 order by created_at asc limit 1",
+      )
+      .get(companyId) as WorkspaceRecord | undefined;
+    return row ? { ...row, isPrimary: toBoolean(row.isPrimary) } : null;
+  }
+
+  /** Get any workspace in the company (last resort fallback). */
+  getAnyCompanyWorkspace(companyId: string): WorkspaceRecord | null {
+    const row = this.db
+      .prepare(
+        "select id, company_id as companyId, name, local_path as localPath, repo_url as repoUrl, repo_ref as repoRef, project_id as projectId, state, is_primary as isPrimary, created_at as createdAt, updated_at as updatedAt from workspaces where company_id = ? order by is_primary desc, created_at asc limit 1",
+      )
+      .get(companyId) as WorkspaceRecord | undefined;
+    return row ? { ...row, isPrimary: toBoolean(row.isPrimary) } : null;
+  }
+
+  createRun(input: {
+    companyId: string;
+    taskId: string;
+    agentId: string;
+    workspaceId: string | null;
+    connectorId: ConnectorId;
+  }) {
+    const id = randomUUID();
+    const ts = nowIso();
+    const logPath = join(this.logsDir, `${id}.log`);
+    this.transaction(() => {
+      this.db
+        .prepare(
+          "insert into runs (id, company_id, task_id, agent_id, workspace_id, connector_id, status, summary, unattributed_cost, log_path, created_at, updated_at) values (?, ?, ?, ?, ?, ?, 'queued', '', 0, ?, ?, ?)",
+        )
+        .run(id, input.companyId, input.taskId, input.agentId, input.workspaceId, input.connectorId, logPath, ts, ts);
+      this.db.prepare("update tasks set active_run_id = ?, updated_at = ? where id = ?").run(id, ts, input.taskId);
+    });
+    writeFileSync(logPath, "");
+    return { id, logPath };
+  }
+
+  appendRunLog(runId: string, stream: "stdout" | "stderr", chunk: string) {
+    const run = this.db.prepare("select log_path as logPath from runs where id = ?").get(runId) as { logPath: string | null } | undefined;
+    if (!run?.logPath) return;
+    return appendFile(run.logPath, `[${new Date().toISOString()}][${stream}] ${chunk}`);
+  }
+
+  readRunLog(runId: string) {
+    const run = this.db.prepare("select log_path as logPath from runs where id = ?").get(runId) as { logPath: string | null } | undefined;
+    if (!run?.logPath) return "";
+    try {
+      return readFileSync(run.logPath, "utf8");
+    } catch {
+      return "";
+    }
+  }
+
+  markRunStatus(runId: string, status: RunRecord["status"], message: string) {
+    const ts = nowIso();
+    const startedAt = status === "running" ? ts : null;
+    this.db
+      .prepare(
+        "update runs set status = ?, summary = case when ? != '' then ? else summary end, started_at = coalesce(started_at, ?), updated_at = ? where id = ?",
+      )
+      .run(status, message, message, startedAt, ts, runId);
+  }
+
+  finishRun(input: {
+    runId: string;
+    status: RunRecord["status"];
+    summary: string | null;
+    errorMessage: string | null;
+    exitCode: number | null;
+    signal: string | null;
+    model: string | null;
+    sessionDisplayId: string | null;
+    costUsd: number | null;
+    unattributedCost: boolean;
+  }) {
+    const run = this.db.prepare("select task_id as taskId, agent_id as agentId, company_id as companyId, connector_id as connectorId from runs where id = ?").get(input.runId) as
+      | { taskId: string; agentId: string; companyId: string; connectorId: ConnectorId }
+      | undefined;
+    if (!run) return { budgetHardStopped: false };
+    const ts = nowIso();
+    const agent = this.db.prepare(
+      "select budget_monthly_usd as budgetMonthlyUsd, spent_monthly_usd as spentMonthlyUsd, status from agents where id = ?",
+    ).get(run.agentId) as { budgetMonthlyUsd: number; spentMonthlyUsd: number; status: AgentRecord["status"] } | undefined;
+    const nextSpend =
+      agent && typeof input.costUsd === "number" && Number.isFinite(input.costUsd)
+        ? agent.spentMonthlyUsd + input.costUsd
+        : agent?.spentMonthlyUsd ?? 0;
+    const budgetHardStopped = Boolean(
+      agent &&
+      agent.budgetMonthlyUsd > 0 &&
+      nextSpend >= agent.budgetMonthlyUsd &&
+      agent.status !== "paused" &&
+      agent.status !== "terminated",
+    );
+    this.transaction(() => {
+      this.db
+        .prepare(
+          "update runs set status = ?, summary = ?, error_message = ?, exit_code = ?, signal = ?, model = ?, session_display_id = ?, cost_usd = ?, unattributed_cost = ?, finished_at = ?, updated_at = ? where id = ?",
+        )
+        .run(
+          input.status,
+          input.summary ?? "",
+          input.errorMessage,
+          input.exitCode,
+          input.signal,
+          input.model,
+          input.sessionDisplayId,
+          input.costUsd,
+          input.unattributedCost ? 1 : 0,
+          ts,
+          ts,
+          input.runId,
+        );
+      this.db.prepare("update tasks set active_run_id = null, updated_at = ? where id = ?").run(ts, run.taskId);
+      if (typeof input.costUsd === "number" && Number.isFinite(input.costUsd)) {
+        this.db
+          .prepare("update tasks set cost_usd = cost_usd + ?, updated_at = ? where id = ?")
+          .run(input.costUsd, ts, run.taskId);
+        this.db
+          .prepare("update agents set spent_monthly_usd = spent_monthly_usd + ?, updated_at = ? where id = ?")
+          .run(input.costUsd, ts, run.agentId);
+        this.db
+          .prepare(
+            "update agents set status = case when budget_monthly_usd > 0 and (spent_monthly_usd + ?) >= budget_monthly_usd then 'paused' else status end, updated_at = ? where id = ?",
+          )
+          .run(input.costUsd, ts, run.agentId);
+      }
+      this.db
+          .prepare("insert into cost_entries (id, company_id, run_id, task_id, agent_id, connector_id, amount_usd, unattributed, created_at) values (?, ?, ?, ?, ?, ?, ?, ?, ?)")
+        .run(randomUUID(), run.companyId, input.runId, run.taskId, run.agentId, run.connectorId, input.costUsd, input.unattributedCost ? 1 : 0, ts);
+      if (budgetHardStopped) {
+        this.db
+          .prepare("update agents set status = 'paused', updated_at = ? where id = ?")
+          .run(ts, run.agentId);
+      }
+    });
+    return { budgetHardStopped };
+  }
+
+  updateTaskSession(taskId: string, sessionJson: Record<string, unknown> | null, sessionDisplayId: string | null) {
+    this.db
+      .prepare("update tasks set session_json = ?, session_display_id = ?, updated_at = ? where id = ?")
+      .run(sessionJson ? JSON.stringify(sessionJson) : null, sessionDisplayId, nowIso(), taskId);
+  }
+
+  getTaskSession(taskId: string) {
+    const row = this.db.prepare("select session_json as sessionJson, session_display_id as sessionDisplayId from tasks where id = ?").get(taskId) as
+      | { sessionJson: string | null; sessionDisplayId: string | null }
+      | undefined;
+    return {
+      sessionParams: parseJson<Record<string, unknown> | null>(row?.sessionJson, null),
+      sessionDisplayId: row?.sessionDisplayId ?? null,
+    };
+  }
+
+  addActivity(input: { companyId: string; actor: string; action: string; entityType: string; entityId: string; detail: string }) {
+    this.db
+      .prepare("insert into activity (id, company_id, actor, action, entity_type, entity_id, detail, created_at) values (?, ?, ?, ?, ?, ?, ?, ?)")
+      .run(randomUUID(), input.companyId, input.actor, input.action, input.entityType, input.entityId, input.detail, nowIso());
+  }
+
+  deleteCompany(companyId: string) {
+    this.transaction(() => {
+      this.db.prepare("delete from pending_wakes where company_id = ?").run(companyId);
+      this.db.prepare("delete from cost_entries where company_id = ?").run(companyId);
+      this.db.prepare("delete from activity where company_id = ?").run(companyId);
+      this.db.prepare("delete from task_comments where company_id = ?").run(companyId);
+      this.db.prepare("delete from runs where company_id = ?").run(companyId);
+      this.db.prepare("delete from approvals where company_id = ?").run(companyId);
+      this.db.prepare("delete from tasks where company_id = ?").run(companyId);
+      this.db.prepare("delete from projects where company_id = ?").run(companyId);
+      this.db.prepare("delete from goals where company_id = ?").run(companyId);
+      this.db.prepare("delete from agents where company_id = ?").run(companyId);
+      this.db.prepare("delete from secrets where company_id = ?").run(companyId);
+      this.db.prepare("delete from workspaces where company_id = ?").run(companyId);
+      this.db.prepare("delete from companies where id = ?").run(companyId);
+      // Switch to another company if the deleted one was current
+      if (this.getCurrentCompanyId() === companyId) {
+        const next = this.db.prepare("select id from companies order by created_at asc limit 1").get() as { id: string } | undefined;
+        if (next) {
+          this.setCurrentCompany(next.id);
+        } else {
+          this.setSetting("current_company_id", "");
+        }
+      }
+    });
+  }
+
+  deleteAgent(id: string, companyId: string) {
+    this.transaction(() => {
+      // Clear references from tasks
+      this.db.prepare("update tasks set assignee_agent_id = null where assignee_agent_id = ? and company_id = ?").run(id, companyId);
+      // Clear references from goals
+      this.db.prepare("update goals set owner_agent_id = null where owner_agent_id = ? and company_id = ?").run(id, companyId);
+      // Clear references from projects
+      this.db.prepare("update projects set lead_agent_id = null where lead_agent_id = ? and company_id = ?").run(id, companyId);
+      // Clear reports-to references
+      this.db.prepare("update agents set reports_to = null where reports_to = ? and company_id = ?").run(id, companyId);
+      // Delete the agent
+      this.db.prepare("delete from agents where id = ? and company_id = ?").run(id, companyId);
+    });
+  }
+
+  deleteTask(id: string, companyId: string) {
+    this.transaction(() => {
+      // Clear parent references
+      this.db.prepare("update tasks set parent_id = null where parent_id = ? and company_id = ?").run(id, companyId);
+      // Delete related approvals
+      this.db.prepare("delete from approvals where related_task_id = ? and company_id = ?").run(id, companyId);
+      // Delete related comments
+      this.db.prepare("delete from task_comments where task_id = ? and company_id = ?").run(id, companyId);
+      // Delete the task
+      this.db.prepare("delete from tasks where id = ? and company_id = ?").run(id, companyId);
+    });
+  }
+
+  deleteGoal(id: string, companyId: string) {
+    this.transaction(() => {
+      // Clear parent references
+      this.db.prepare("update goals set parent_id = null where parent_id = ? and company_id = ?").run(id, companyId);
+      // Clear goal references from projects
+      this.db.prepare("update projects set goal_id = null where goal_id = ? and company_id = ?").run(id, companyId);
+      // Clear goal references from tasks
+      this.db.prepare("update tasks set goal_id = null where goal_id = ? and company_id = ?").run(id, companyId);
+      // Delete the goal
+      this.db.prepare("delete from goals where id = ? and company_id = ?").run(id, companyId);
+    });
+  }
+
+  deleteProject(id: string, companyId: string) {
+    this.transaction(() => {
+      // Clear project references from tasks
+      this.db.prepare("update tasks set project_id = null where project_id = ? and company_id = ?").run(id, companyId);
+      // Clear project references from workspaces
+      this.db.prepare("update workspaces set project_id = null where project_id = ? and company_id = ?").run(id, companyId);
+      // Delete the project
+      this.db.prepare("delete from projects where id = ? and company_id = ?").run(id, companyId);
+    });
+  }
+
+  deleteWorkspace(id: string, companyId: string) {
+    this.transaction(() => {
+      // Clear workspace references from agents
+      this.db.prepare("update agents set workspace_id = null where workspace_id = ? and company_id = ?").run(id, companyId);
+      // Clear workspace references from tasks
+      this.db.prepare("update tasks set workspace_id = null where workspace_id = ? and company_id = ?").run(id, companyId);
+      // Delete the workspace
+      this.db.prepare("delete from workspaces where id = ? and company_id = ?").run(id, companyId);
+    });
+  }
+
+  deleteApproval(id: string, companyId: string) {
+    this.db.prepare("delete from approvals where id = ? and company_id = ?").run(id, companyId);
+  }
+
+  deleteSecret(id: string, companyId: string) {
+    this.db.prepare("delete from secrets where id = ? and company_id = ?").run(id, companyId);
+  }
+
+  getSidebarBadges(companyId: string): { pendingApprovals: number; activeRuns: number; failedRuns: number; todoTasks: number; budgetWarnings: number } {
+    const pendingApprovals = (this.db.prepare("select count(*) as c from approvals where company_id = ? and state = 'pending'").get(companyId) as { c: number })?.c ?? 0;
+    const activeRuns = (this.db.prepare("select count(*) as c from runs where company_id = ? and status in ('queued', 'running')").get(companyId) as { c: number })?.c ?? 0;
+    const failedRuns = (this.db.prepare("select count(*) as c from runs where company_id = ? and status in ('failed', 'timed_out', 'interrupted')").get(companyId) as { c: number })?.c ?? 0;
+    const todoTasks = (this.db.prepare("select count(*) as c from tasks where company_id = ? and status in ('todo', 'in_progress', 'in_review')").get(companyId) as { c: number })?.c ?? 0;
+    const budgetWarnings = (this.db.prepare("select count(*) as c from agents where company_id = ? and budget_monthly_usd > 0 and (spent_monthly_usd * 1.0 / budget_monthly_usd) >= 0.8").get(companyId) as { c: number })?.c ?? 0;
+    return { pendingApprovals, activeRuns, failedRuns, todoTasks, budgetWarnings };
+  }
+
+  /* ─── Comments ────────────────────────────────────────────────────── */
+
+  addComment(input: { companyId: string; taskId: string; authorAgentId: string | null; authorName: string; body: string }): CommentRecord {
+    // Validate task belongs to the specified company
+    const taskRow = this.db.prepare("select company_id from tasks where id = ?").get(input.taskId) as { company_id: string } | undefined;
+    if (!taskRow) throw new Error("Task not found.");
+    if (taskRow.company_id !== input.companyId) throw new Error("Task does not belong to this company.");
+    const id = randomUUID();
+    const ts = nowIso();
+    this.db.prepare(
+      "insert into task_comments (id, company_id, task_id, author_agent_id, author_name, body, created_at) values (?, ?, ?, ?, ?, ?, ?)",
+    ).run(id, input.companyId, input.taskId, input.authorAgentId, input.authorName, input.body, ts);
+    return { id, companyId: input.companyId, taskId: input.taskId, authorAgentId: input.authorAgentId, authorName: input.authorName, body: input.body, createdAt: ts };
+  }
+
+  listComments(taskId: string): CommentRecord[] {
+    return this.readAll<CommentRecord>(
+      "select id, company_id as companyId, task_id as taskId, author_agent_id as authorAgentId, author_name as authorName, body, created_at as createdAt from task_comments where task_id = ? order by created_at asc",
+      taskId,
+    );
+  }
+
+  /* ─── Heartbeat ──────────────────────────────────────────────────── */
+
+  setHeartbeat(agentId: string, enabled: boolean, intervalSec: number) {
+    this.db.prepare(
+      "update agents set heartbeat_enabled = ?, heartbeat_interval_sec = ?, updated_at = ? where id = ?",
+    ).run(enabled ? 1 : 0, intervalSec, nowIso(), agentId);
+  }
+
+  markHeartbeatAt(agentId: string) {
+    this.db.prepare("update agents set last_heartbeat_at = ? where id = ?").run(nowIso(), agentId);
+  }
+
+  listHeartbeatEligibleAgents(companyId: string): AgentRecord[] {
+    return this.readAll<AgentRecord>(
+      "select id, company_id as companyId, name, role, title, status, reports_to as reportsTo, connector_id as connectorId, workspace_id as workspaceId, model, capabilities, budget_monthly_usd as budgetMonthlyUsd, spent_monthly_usd as spentMonthlyUsd, metadata_json as metadataJson, heartbeat_enabled as heartbeatEnabled, heartbeat_interval_sec as heartbeatIntervalSec, last_heartbeat_at as lastHeartbeatAt, created_at as createdAt, updated_at as updatedAt from agents where company_id = ? and heartbeat_enabled = 1 and status not in ('terminated', 'paused', 'error', 'pending_approval')",
+      companyId,
+    ).map((record) => ({ ...record, heartbeatEnabled: toBoolean(record.heartbeatEnabled) })) as AgentRecord[];
+  }
+
+  /* ─── Task Checkout (for agent API) ──────────────────────────────── */
+
+  checkoutTask(taskId: string, agentId: string): boolean {
+    const result = this.db
+      .prepare(
+        `update tasks
+           set assignee_agent_id = ?, status = 'in_progress', updated_at = ?
+         where id = ?
+           and status in ('todo', 'backlog')
+           and (assignee_agent_id is null or assignee_agent_id = ?)`,
+      )
+      .run(agentId, nowIso(), taskId, agentId);
+    return result.changes > 0;
+  }
+
+  listAgentTasks(agentId: string, companyId: string, statuses: string[]): TaskRecord[] {
+    const placeholders = statuses.map(() => "?").join(",");
+    return this.readAll<TaskRecord>(
+      `select id, company_id as companyId, project_id as projectId, goal_id as goalId, parent_id as parentId, title, description, assignee_agent_id as assigneeAgentId, workspace_id as workspaceId, status, priority, active_run_id as activeRunId, session_json as sessionJson, session_display_id as sessionDisplayId, cost_usd as costUsd, created_at as createdAt, updated_at as updatedAt
+         from tasks
+        where company_id = ? and assignee_agent_id = ? and status in (${placeholders})
+        order by
+          case status
+            when 'in_progress' then 0
+            when 'todo' then 1
+            when 'blocked' then 2
+            when 'backlog' then 3
+            else 4
+          end asc,
+          ${taskPriorityOrderSql("priority")} desc,
+          created_at asc`,
+      companyId, agentId, ...statuses,
+    );
+  }
+
+  /**
+   * List tasks from an agent's direct reports that are awaiting review (status = in_review).
+   * Used to populate the "Tasks Awaiting Your Review" section in the agent prompt.
+   */
+  listReviewTasksForManager(managerId: string, companyId: string): TaskRecord[] {
+    return this.readAll<TaskRecord>(
+      `select t.id, t.company_id as companyId, t.project_id as projectId, t.goal_id as goalId,
+              t.parent_id as parentId, t.title, t.description,
+              t.assignee_agent_id as assigneeAgentId, t.workspace_id as workspaceId,
+              t.status, t.priority, t.active_run_id as activeRunId,
+              t.session_json as sessionJson, t.session_display_id as sessionDisplayId,
+              t.cost_usd as costUsd, t.created_at as createdAt, t.updated_at as updatedAt
+       from tasks t
+       inner join agents a on t.assignee_agent_id = a.id
+       where t.company_id = ? and t.status = 'in_review' and a.reports_to = ?
+       order by ${taskPriorityOrderSql("t.priority")} desc, t.created_at asc`,
+      companyId, managerId,
+    );
+  }
+
+  /* ─── Org helpers for agent API ──────────────────────────────────── */
+
+  getChainOfCommand(agentId: string): AgentRecord[] {
+    const chain: AgentRecord[] = [];
+    const visited = new Set<string>();
+    let current: AgentRecord | undefined;
+    try { current = this.getAgent(agentId); } catch { return chain; }
+    while (current?.reportsTo) {
+      if (visited.has(current.reportsTo)) {
+        break;
+      }
+      visited.add(current.reportsTo);
+      try {
+        current = this.getAgent(current.reportsTo);
+        chain.push(current);
+      } catch { break; }
+    }
+    return chain;
+  }
+
+  getDirectReports(agentId: string, companyId: string): AgentRecord[] {
+    return this.readAll<AgentRecord>(
+      "select id, company_id as companyId, name, role, title, status, reports_to as reportsTo, connector_id as connectorId, workspace_id as workspaceId, model, capabilities, budget_monthly_usd as budgetMonthlyUsd, spent_monthly_usd as spentMonthlyUsd, metadata_json as metadataJson, heartbeat_enabled as heartbeatEnabled, heartbeat_interval_sec as heartbeatIntervalSec, last_heartbeat_at as lastHeartbeatAt, created_at as createdAt, updated_at as updatedAt from agents where company_id = ? and reports_to = ?",
+      companyId, agentId,
+    ).map((record) => ({ ...record, heartbeatEnabled: toBoolean(record.heartbeatEnabled) })) as AgentRecord[];
+  }
+
+  /* ─── Deferred Wake Queue (Step 3) ─────────────────────────────── */
+
+  enqueuePendingWake(companyId: string, agentId: string, trigger: string) {
+    this.db
+      .prepare(
+        "insert into pending_wakes (id, company_id, agent_id, trigger_reason, created_at) values (?, ?, ?, ?, ?)",
+      )
+      .run(randomUUID(), companyId, agentId, trigger, nowIso());
+  }
+
+  consumePendingWakes(agentId: string): Array<{ id: string; companyId: string; trigger: string }> {
+    const rows = this.readAll<{ id: string; companyId: string; trigger: string }>(
+      "select id, company_id as companyId, trigger_reason as trigger from pending_wakes where agent_id = ? order by created_at asc",
+      agentId,
+    );
+    if (rows.length > 0) {
+      this.db.prepare("delete from pending_wakes where agent_id = ?").run(agentId);
+    }
+    return rows;
+  }
+
+  exportBackup(targetDir: string) {
+    mkdirSync(targetDir, { recursive: true });
+    this.db.exec("PRAGMA wal_checkpoint(TRUNCATE);");
+    const copyJobs = [
+      backupDatabase(this.db, join(targetDir, "profile.sqlite")),
+      cp(this.logsDir, join(targetDir, "logs"), { recursive: true, force: true }),
+      cp(this.artifactsDir, join(targetDir, "artifacts"), { recursive: true, force: true }),
+      copyIfExists(join(this.profileDir, "vault.key"), join(targetDir, "vault.key")),
+      copyIfExists(`${this.dbPath}-wal`, join(targetDir, "profile.sqlite-wal")),
+      copyIfExists(`${this.dbPath}-shm`, join(targetDir, "profile.sqlite-shm")),
+    ];
+    return Promise.all(copyJobs);
+  }
+
+  async restoreFromBackup(sourceDir: string) {
+    const sourceDbPath = join(sourceDir, "profile.sqlite");
+    if (!existsSync(sourceDbPath)) {
+      throw new Error("Backup directory is missing profile.sqlite.");
+    }
+
+    this.validateBackupDirectory(sourceDir);
+    const recoveryDir = join(this.backupsDir, `pre-restore-${Date.now()}`);
+    await this.exportBackup(recoveryDir);
+
+    this.close();
+    try {
+      await this.applyBackup(sourceDir);
+    } catch (error) {
+      await this.applyBackup(recoveryDir);
+      const message = error instanceof Error ? error.message : String(error);
+      throw new Error(`Restore failed. Previous profile was recovered from ${recoveryDir}. ${message}`);
+    }
+  }
+
+  private readConnectors(): ConnectorRecord[] {
+    const rows = this.readAll<{
+      id: ConnectorId;
+      label: string;
+      description: string;
+      status: ConnectorRecord["status"];
+      command: string;
+      version: string | null;
+      auth_state: ConnectorRecord["authState"];
+      last_checked_at: string | null;
+      last_error: string | null;
+      model: string | null;
+      env_binding_text: string;
+      notes: string;
+    }>(
+      "select id, label, description, status, command, version, auth_state, last_checked_at, last_error, model, env_binding_text, notes from connectors order by label asc",
+    );
+    return rows.map((row) => {
+      const definition = getConnectorDefinition(row.id);
+      return {
+        id: row.id,
+        label: row.label,
+        description: row.description,
+        status: row.status,
+        command: row.command,
+        version: row.version,
+        authState: row.auth_state,
+        lastCheckedAt: row.last_checked_at,
+        lastError: row.last_error,
+        model: row.model,
+        envBindingText: row.env_binding_text,
+        notes: row.notes,
+        configurationDoc: definition.configurationDoc,
+        capabilityMatrix: definition.capabilityMatrix,
+      };
+    });
+  }
+
+  private seedConnectors() {
+    const currentRows = this.readAll<Partial<ConnectorRecord>>(
+      "select id, label, description, status, command, version, auth_state as authState, last_checked_at as lastCheckedAt, last_error as lastError, model, env_binding_text as envBindingText, notes from connectors",
+    );
+    const merged = buildDefaultConnectorRows(currentRows);
+    const statement = this.db.prepare(
+      "insert or replace into connectors (id, label, description, status, command, version, auth_state, last_checked_at, last_error, model, env_binding_text, notes, updated_at) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
+    );
+    const updatedAt = nowIso();
+    for (const row of merged) {
+      statement.run(
+        row.id,
+        row.label,
+        row.description,
+        row.status,
+        row.command,
+        row.version,
+        row.authState,
+        row.lastCheckedAt,
+        row.lastError,
+        row.model,
+        row.envBindingText,
+        row.notes,
+        updatedAt,
+      );
+    }
+  }
+
+  private seedSettings() {
+    if (!this.getSetting("theme")) {
+      this.setSetting("theme", "system");
+    }
+    if (!this.getSetting("updates_enabled")) {
+      this.setSetting("updates_enabled", "false");
+    }
+    if (!this.getSetting("log_retention_days")) {
+      this.setSetting("log_retention_days", "90");
+    }
+  }
+
+  private interruptStaleRuns() {
+    const ts = nowIso();
+    this.transaction(() => {
+      this.db
+        .prepare(
+          "update runs set status = 'interrupted', error_message = 'AgentCompany restarted before the run could report completion.', finished_at = ?, updated_at = ? where status in ('queued', 'running')",
+        )
+        .run(ts, ts);
+      this.db.prepare("update tasks set active_run_id = null where active_run_id is not null").run();
+      // Release all workspace locks that were held by interrupted runs
+      this.releaseAllWorkspaceLocks();
+    });
+  }
+
+  private getSetting(key: string): string | null {
+    const row = this.db.prepare("select value from settings where key = ?").get(key) as { value: string } | undefined;
+    return row?.value ?? null;
+  }
+
+  private setSetting(key: string, value: string) {
+    this.db
+      .prepare("insert into settings (key, value) values (?, ?) on conflict(key) do update set value = excluded.value")
+      .run(key, value);
+  }
+
+  private readAll<T>(sql: string, ...params: SQLInputValue[]): T[] {
+    return this.db.prepare(sql).all(...params) as T[];
+  }
+
+  private wouldCreateAgentCycle(agentId: string, reportsTo: string | null) {
+    if (!reportsTo) return false;
+    if (reportsTo === agentId) return true;
+
+    const visited = new Set<string>([agentId]);
+    let currentId: string | null = reportsTo;
+    while (currentId) {
+      if (visited.has(currentId)) {
+        return true;
+      }
+      visited.add(currentId);
+      const current = this.db
+        .prepare("select reports_to as reportsTo from agents where id = ?")
+        .get(currentId) as { reportsTo: string | null } | undefined;
+      currentId = current?.reportsTo ?? null;
+    }
+    return false;
+  }
+
+  private ensureOptionalColumns() {
+    try {
+      this.db.prepare("alter table connectors add column updated_at text").run();
+    } catch {
+      // Column already exists.
+    }
+    try {
+      this.db.prepare("alter table approvals add column payload_json text").run();
+    } catch {
+      // Column already exists.
+    }
+    // Heartbeat columns on agents
+    for (const col of [
+      "alter table agents add column heartbeat_enabled integer not null default 0",
+      "alter table agents add column heartbeat_interval_sec integer not null default 120",
+      "alter table agents add column last_heartbeat_at text",
+    ]) {
+      try {
+        this.db.prepare(col).run();
+      } catch {
+        // Column already exists.
+      }
+    }
+    // Comments table
+    this.db.exec(`
+      create table if not exists task_comments (
+        id text primary key,
+        company_id text not null,
+        task_id text not null,
+        author_agent_id text,
+        author_name text not null,
+        body text not null,
+        created_at text not null
+      );
+      create index if not exists idx_comments_task on task_comments(task_id);
+      create index if not exists idx_comments_company on task_comments(company_id);
+    `);
+  }
+
+  /**
+   * Check whether a run can start given pending approvals.
+   * Returns null if no blocking approval exists, or the blocking approval record.
+   *
+   * Uses the structured `related_agent_id` column for hire_agent lookups
+   * instead of fragile payload_json LIKE matching.
+   */
+  getBlockingApproval(companyId: string, agentId: string, taskId: string | null): ApprovalRecord | null {
+    const rows = this.readAll<ApprovalRecord>(
+      `select id, company_id as companyId, related_task_id as relatedTaskId,
+              requested_by_agent_id as requestedByAgentId, type,
+              payload_summary as payloadSummary, impact_summary as impactSummary,
+              decision_note as decisionNote, state,
+              created_at as createdAt, updated_at as updatedAt
+       from approvals
+       where company_id = ? and state = 'pending'
+         and (
+           (type = 'hire_agent' and related_agent_id = ?)
+           or (type = 'dangerous_command' and (related_task_id = ? or requested_by_agent_id = ?))
+           or (type = 'secret_access' and (related_task_id = ? or requested_by_agent_id = ?))
+           or (type = 'approve_ceo_strategy' and (related_task_id = ? or requested_by_agent_id = ?))
+         )
+       order by created_at asc limit 1`,
+      companyId,
+      agentId,
+      taskId ?? "",
+      agentId,
+      taskId ?? "",
+      agentId,
+      taskId ?? "",
+      agentId,
+    );
+    return rows.length > 0 ? rows[0] : null;
+  }
+
+  /**
+   * Check if an agent is pending hire approval (status = pending_approval).
+   * Runs must not start for agents that haven't been approved yet.
+   */
+  isAgentPendingApproval(agentId: string): boolean {
+    const row = this.db
+      .prepare("select status from agents where id = ?")
+      .get(agentId) as { status: string } | undefined;
+    return row?.status === "pending_approval";
+  }
+
+  /**
+   * Check if an agent's budget is exhausted (would trigger hard stop).
+   */
+  isAgentBudgetExhausted(agentId: string): boolean {
+    const row = this.db
+      .prepare("select budget_monthly_usd as budget, spent_monthly_usd as spent from agents where id = ?")
+      .get(agentId) as { budget: number; spent: number } | undefined;
+    if (!row || row.budget <= 0) return false;
+    return row.spent >= row.budget;
+  }
+
+  /**
+   * Update workspace state (ready/busy/blocked/missing/error).
+   */
+  setWorkspaceState(workspaceId: string, state: WorkspaceRecord["state"]) {
+    this.db
+      .prepare("update workspaces set state = ?, updated_at = ? where id = ?")
+      .run(state, nowIso(), workspaceId);
+  }
+
+  /**
+   * Acquire a workspace write lock for a run. Returns true if acquired.
+   * If another run already holds the lock, returns false.
+   */
+  acquireWorkspaceLock(workspaceId: string, runId: string): boolean {
+    const ts = nowIso();
+    const result = this.db
+      .prepare(
+        `update workspaces
+           set lock_holder_run_id = ?, lock_acquired_at = ?, state = 'busy', updated_at = ?
+         where id = ?
+           and (lock_holder_run_id is null or lock_holder_run_id = ?)`,
+      )
+      .run(runId, ts, ts, workspaceId, runId);
+    return result.changes > 0;
+  }
+
+  /**
+   * Release a workspace write lock. Only the holding run can release it.
+   */
+  releaseWorkspaceLock(workspaceId: string, runId: string) {
+    this.db
+      .prepare(
+        `update workspaces
+           set lock_holder_run_id = null, lock_acquired_at = null, state = 'ready', updated_at = ?
+         where id = ? and lock_holder_run_id = ?`,
+      )
+      .run(nowIso(), workspaceId, runId);
+  }
+
+  /**
+   * Force-release all workspace locks (used during crash recovery on startup).
+   */
+  releaseAllWorkspaceLocks() {
+    this.db
+      .prepare(
+        "update workspaces set lock_holder_run_id = null, lock_acquired_at = null, state = 'ready', updated_at = ? where lock_holder_run_id is not null",
+      )
+      .run(nowIso());
+  }
+
+  /**
+   * Persist a run to the deferred queue so it survives worker restarts.
+   */
+  enqueueDeferredRun(runId: string) {
+    this.db
+      .prepare("update runs set status = 'queued', updated_at = ? where id = ? and status = 'queued'")
+      .run(nowIso(), runId);
+  }
+
+  /**
+   * List runs that were queued but never finished (for crash recovery re-enqueue).
+   */
+  listRecoverableQueuedRuns(): Array<{ id: string; taskId: string; agentId: string; companyId: string; workspaceId: string | null; connectorId: ConnectorId }> {
+    return this.readAll<{ id: string; taskId: string; agentId: string; companyId: string; workspaceId: string | null; connectorId: ConnectorId }>(
+      "select id, task_id as taskId, agent_id as agentId, company_id as companyId, workspace_id as workspaceId, connector_id as connectorId from runs where status = 'queued' order by created_at asc",
+    );
+  }
+
+  /* ─── Forward-Only Migration System ──────────────────────────────── */
+
+  private runMigrations() {
+    // Create migration tracking table
+    this.db.exec(`
+      create table if not exists schema_migrations (
+        version integer primary key,
+        name text not null,
+        applied_at text not null
+      );
+    `);
+
+    const applied = new Set(
+      this.readAll<{ version: number }>("select version from schema_migrations")
+        .map((row) => row.version),
+    );
+
+    const migrations: Array<{ version: number; name: string; sql: string }> = [
+      {
+        version: 1,
+        name: "add_workspace_lock_lease",
+        sql: `
+          alter table workspaces add column lock_holder_run_id text;
+          alter table workspaces add column lock_acquired_at text;
+        `,
+      },
+      {
+        version: 2,
+        name: "add_approval_related_agent_id",
+        sql: `
+          alter table approvals add column related_agent_id text;
+        `,
+      },
+      {
+        version: 3,
+        name: "add_profile_metadata",
+        sql: `
+          insert or ignore into settings (key, value) values ('profile_version', '1');
+          insert or ignore into settings (key, value) values ('profile_created_at', '${nowIso()}');
+        `,
+      },
+      {
+        version: 4,
+        name: "add_connector_capability_snapshot",
+        sql: `
+          alter table connectors add column capability_json text;
+        `,
+      },
+      // Migration 5 (convert_usd_to_cents) was removed: the runtime, shared types,
+      // and renderer all treat monetary values as dollars. Converting stored data to
+      // cents without updating every consumer would cause 100x display errors.
+      // Dollar float values are sufficient for a local-first desktop app.
+    ];
+
+    for (const migration of migrations) {
+      if (applied.has(migration.version)) continue;
+      try {
+        this.transaction(() => {
+          for (const stmt of migration.sql.split(";").map((s) => s.trim()).filter(Boolean)) {
+            this.db.prepare(stmt).run();
+          }
+          this.db
+            .prepare("insert into schema_migrations (version, name, applied_at) values (?, ?, ?)")
+            .run(migration.version, migration.name, nowIso());
+        });
+      } catch (error) {
+        // Only swallow "duplicate column" errors — these happen when
+        // ensureOptionalColumns already added the column before the migration
+        // system existed. All other errors must propagate.
+        const message = error instanceof Error ? error.message : String(error);
+        const isDuplicateColumn = /duplicate column|already exists/i.test(message);
+        if (isDuplicateColumn) {
+          // Idempotent case: column existed, mark migration as applied
+          this.db
+            .prepare("insert or ignore into schema_migrations (version, name, applied_at) values (?, ?, ?)")
+            .run(migration.version, migration.name, nowIso());
+        } else {
+          // Real failure: disk error, SQL syntax, table corruption, etc.
+          // Do NOT mark as applied — the migration must be retried on next startup.
+          throw new Error(`Migration ${migration.version} (${migration.name}) failed: ${message}`);
+        }
+      }
+    }
+  }
+
+  private migrateSecretsTable() {
+    const columns = this.readAll<{ name: string }>("pragma table_info(secrets)");
+    if (columns.some((column) => column.name === "company_id")) {
+      this.db.prepare("create unique index if not exists secrets_company_name_idx on secrets(company_id, name)").run();
+      return;
+    }
+
+    const fallbackCompanyId =
+      ((this.db.prepare("select value from settings where key = 'current_company_id'").get() as { value: string } | undefined)?.value) ??
+      ((this.db.prepare("select id from companies order by created_at asc limit 1").get() as { id: string } | undefined)?.id) ??
+      "00000000-0000-0000-0000-000000000000";
+
+    this.db.exec(`
+      alter table secrets rename to secrets_legacy;
+      create table secrets (
+        id text primary key,
+        company_id text not null,
+        name text not null,
+        description text not null,
+        backend text not null,
+        ciphertext blob not null,
+        updated_at text not null,
+        created_at text not null,
+        unique(company_id, name)
+      );
+    `);
+    this.db
+      .prepare(
+        "insert into secrets (id, company_id, name, description, backend, ciphertext, updated_at, created_at) select id, ?, name, description, backend, ciphertext, updated_at, created_at from secrets_legacy",
+      )
+      .run(fallbackCompanyId);
+    this.db.exec("drop table secrets_legacy;");
+  }
+
+  private transaction<T>(operation: () => T): T {
+    this.db.exec("BEGIN IMMEDIATE");
+    try {
+      const result = operation();
+      this.db.exec("COMMIT");
+      return result;
+    } catch (error) {
+      this.db.exec("ROLLBACK");
+      throw error;
+    }
+  }
+
+  private validateBackupDirectory(sourceDir: string) {
+    const validationDb = new DatabaseSync(join(sourceDir, "profile.sqlite"));
+    try {
+      const requiredTables = ["settings", "companies", "connectors"] as const;
+      for (const table of requiredTables) {
+        const row = validationDb
+          .prepare("select name from sqlite_master where type = 'table' and name = ?")
+          .get(table) as { name: string } | undefined;
+        if (!row) {
+          throw new Error(`Backup is missing the required table "${table}".`);
+        }
+      }
+    } finally {
+      validationDb.close();
+    }
+  }
+
+  private async applyBackup(sourceDir: string) {
+    await rm(this.dbPath, { force: true });
+    await rm(`${this.dbPath}-wal`, { force: true });
+    await rm(`${this.dbPath}-shm`, { force: true });
+
+    await copyFile(join(sourceDir, "profile.sqlite"), this.dbPath);
+    await copyIfExists(join(sourceDir, "profile.sqlite-wal"), `${this.dbPath}-wal`);
+    await copyIfExists(join(sourceDir, "profile.sqlite-shm"), `${this.dbPath}-shm`);
+
+    await rm(this.logsDir, { recursive: true, force: true });
+    await rm(this.artifactsDir, { recursive: true, force: true });
+    mkdirSync(this.logsDir, { recursive: true });
+    mkdirSync(this.artifactsDir, { recursive: true });
+
+    if (existsSync(join(sourceDir, "logs"))) {
+      await cp(join(sourceDir, "logs"), this.logsDir, { recursive: true, force: true });
+    }
+    if (existsSync(join(sourceDir, "artifacts"))) {
+      await cp(join(sourceDir, "artifacts"), this.artifactsDir, { recursive: true, force: true });
+    }
+    await copyIfExists(join(sourceDir, "vault.key"), join(this.profileDir, "vault.key"));
+
+    this.db = this.openConnection();
+    this.init();
+  }
+
+  private openConnection(): SqliteDatabase {
+    return new DatabaseSync(this.dbPath);
+  }
+}
+
+async function copyIfExists(source: string, destination: string) {
+  if (!existsSync(source)) {
+    return;
+  }
+  await copyFile(source, destination);
+}
diff --git a/src/main/index.ts b/src/main/index.ts
new file mode 100644
index 00000000..61aaa4f2
--- /dev/null
+++ b/src/main/index.ts
@@ -0,0 +1,1935 @@
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { pathToFileURL } from "node:url";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import {
+  app,
+  BrowserWindow,
+  dialog,
+  type IpcMainInvokeEvent,
+  ipcMain,
+  Menu,
+  nativeImage,
+  Notification,
+  protocol,
+  net,
+  session,
+  shell,
+  utilityProcess,
+} from "electron";
+import electronUpdater from "electron-updater";
+import log from "electron-log/main.js";
+import { z } from "zod";
+import {
+  IPC_CHANNELS,
+  approvalDecisionSchema,
+  approvalInputSchema,
+  agentInputSchema,
+  cancelRunSchema,
+  commentInputSchema,
+  companyInputSchema,
+  connectorInputSchema,
+  deleteEntitySchema,
+  goalInputSchema,
+  heartbeatSettingsSchema,
+  listCommentsSchema,
+  type DesktopResult,
+  projectInputSchema,
+  runLogSchema,
+  secretInputSchema,
+  settingsSchema,
+  startRunSchema,
+  taskInputSchema,
+  triggerHeartbeatSchema,
+  workspaceInputSchema,
+} from "@shared/contracts";
+import type { DesktopEvent } from "@shared/types";
+import { getConnectorDefinition } from "./connectors";
+import { AppDatabase } from "./database";
+import { AgentApiServer } from "./api-server";
+import { createAgentToken } from "./agent-auth";
+import { buildTaskPrompt } from "./prompt-builder";
+
+app.name = "AgentCompany";
+
+// ── Fix PATH for packaged macOS/Linux apps ──────────────────────────────────
+// Packaged Electron apps on macOS launched from Finder inherit a minimal PATH
+// (/usr/bin:/bin:/usr/sbin:/sbin) that doesn't include Homebrew, nvm, cargo, etc.
+// We prepend common installation directories so connectors like claude, codex,
+// gemini, opencode, kimi can be found.
+{
+  const extra = [
+    "/usr/local/bin",
+    "/opt/homebrew/bin",
+    "/opt/homebrew/sbin",
+    `${process.env.HOME}/.local/bin`,
+    `${process.env.HOME}/.cargo/bin`,
+    `${process.env.HOME}/.nvm/current/bin`,
+    `${process.env.HOME}/.volta/bin`,
+    `${process.env.HOME}/.bun/bin`,
+    "/usr/local/sbin",
+    // Common Linux snap/flatpak paths
+    "/snap/bin",
+  ].filter((p) => p && !p.includes("undefined"));
+  const current = process.env.PATH ?? "";
+  const existing = new Set(current.split(":").filter(Boolean));
+  const toAdd = extra.filter((p) => !existing.has(p));
+  if (toAdd.length > 0) {
+    process.env.PATH = [...toAdd, current].join(":");
+  }
+}
+
+protocol.registerSchemesAsPrivileged([
+  {
+    scheme: "app",
+    privileges: {
+      secure: true,
+      standard: true,
+      supportFetchAPI: true,
+      stream: true,
+    },
+  },
+]);
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PRELOAD_PATH = join(__dirname, "../preload/index.js");
+const RENDERER_DIST = join(__dirname, "../renderer");
+const WORKER_PATH = join(__dirname, "worker.js");
+const ICON_PATH = resolve(__dirname, "../../assets/icon.png");
+const isDev = Boolean(process.env.ELECTRON_RENDERER_URL);
+const devServerOrigin = process.env.ELECTRON_RENDERER_URL ? new URL(process.env.ELECTRON_RENDERER_URL).origin : null;
+const { autoUpdater } = electronUpdater;
+
+let mainWindow: BrowserWindow | null = null;
+let db: AppDatabase;
+let worker: ReturnType<typeof utilityProcess.fork> | null = null;
+let apiServer: AgentApiServer | null = null;
+let heartbeatTimer: ReturnType<typeof setInterval> | null = null;
+let isQuitting = false;
+let backgroundCloseNoticeShown = false;
+
+const companyIdSchema = z.string().uuid();
+const runStatusSchema = z.enum(["queued", "running", "succeeded", "failed", "cancelled", "timed_out", "interrupted"]);
+const workerMessageSchema = z.union([
+  z.object({
+    type: z.literal("run-log"),
+    runId: z.string().uuid(),
+    stream: z.enum(["stdout", "stderr"]),
+    chunk: z.string(),
+  }),
+  z.object({
+    type: z.literal("run-status"),
+    runId: z.string().uuid(),
+    status: runStatusSchema,
+    message: z.string(),
+  }),
+  z.object({
+    type: z.literal("run-finished"),
+    runId: z.string().uuid(),
+    status: runStatusSchema,
+    summary: z.string().nullable(),
+    errorMessage: z.string().nullable(),
+    exitCode: z.number().int().nullable(),
+    signal: z.string().nullable(),
+    model: z.string().nullable(),
+    sessionParams: z.record(z.string(), z.unknown()).nullable(),
+    sessionDisplayId: z.string().nullable(),
+    costUsd: z.number().nullable(),
+    unattributedCost: z.boolean(),
+  }),
+]);
+
+type CompanyScopedTable = "workspaces" | "agents" | "goals" | "projects" | "tasks" | "approvals" | "runs" | "secrets";
+
+function ok<T>(data: T): DesktopResult<T> {
+  return { ok: true, data };
+}
+
+function fail(code: string, message: string): DesktopResult<never> {
+  return { ok: false, error: { code, message } };
+}
+
+function isTrustedRendererUrl(url: string) {
+  if (!url) {
+    return false;
+  }
+  if (isDev) {
+    return devServerOrigin ? url.startsWith(devServerOrigin) : false;
+  }
+  return url.startsWith("app://-");
+}
+
+function registerHandle(
+  channel: string,
+  handler: (event: IpcMainInvokeEvent, ...args: unknown[]) => Promise<DesktopResult<unknown>> | DesktopResult<unknown>,
+) {
+  ipcMain.handle(channel, async (event, ...args) => {
+    const senderUrl = event.senderFrame?.url ?? event.sender.getURL();
+    if (!isTrustedRendererUrl(senderUrl)) {
+      log.error(`[ipc:${channel}] blocked untrusted sender ${senderUrl || "<empty>"}`);
+      return fail("IPC_FORBIDDEN", "IPC sender is not allowed.");
+    }
+    try {
+      return await handler(event, ...args);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      log.error(`[ipc:${channel}] ${message}`);
+      return fail("IPC_HANDLER_FAILED", message);
+    }
+  });
+}
+
+function emitEvent(event: DesktopEvent) {
+  if (mainWindow && !mainWindow.isDestroyed()) {
+    mainWindow.webContents.send(IPC_CHANNELS.rendererEvent, event);
+  }
+}
+
+function ensureCompanyExists(companyId: string) {
+  return db.hasCompany(companyId)
+    ? null
+    : fail("COMPANY_NOT_FOUND", "The selected company no longer exists.");
+}
+
+function findInvalidReference(
+  companyId: string,
+  refs: Array<{ id: string | null | undefined; table: CompanyScopedTable; label: string }>,
+) {
+  return refs.find((ref) => ref.id && !db.belongsToCompany(ref.table, ref.id, companyId)) ?? null;
+}
+
+function publishDomainChanged() {
+  emitEvent({ type: "domain-changed" });
+}
+
+function notify(title: string, body: string) {
+  if (Notification.isSupported()) {
+    new Notification({ title, body }).show();
+  }
+}
+
+function buildMenu() {
+  const macAppMenu: Electron.MenuItemConstructorOptions = {
+    label: app.name,
+    submenu: [
+      { role: "about" },
+      { type: "separator" },
+      { role: "services" },
+      { type: "separator" },
+      { role: "hide" },
+      { role: "hideOthers" },
+      { role: "unhide" },
+      { type: "separator" },
+      { role: "quit" },
+    ],
+  };
+  const template: Electron.MenuItemConstructorOptions[] = [
+    ...(process.platform === "darwin" ? [macAppMenu] : []),
+    {
+      label: "File",
+      submenu: [
+        {
+          label: "Open Workspace Folder",
+          accelerator: "CmdOrCtrl+O",
+          click: async () => {
+            const result = await dialog.showOpenDialog({
+              properties: ["openDirectory"],
+            });
+            if (result.canceled || result.filePaths.length === 0) return;
+            shell.openPath(result.filePaths[0] ?? "");
+          },
+        },
+        { type: "separator" },
+        {
+          label: "Backup Profile",
+          accelerator: "CmdOrCtrl+Shift+B",
+          click: async () => {
+            const target = await dialog.showOpenDialog({
+              properties: ["openDirectory", "createDirectory"],
+            });
+            if (target.canceled || target.filePaths.length === 0) return;
+            await db.exportBackup(join(target.filePaths[0]!, `agentcompany-backup-${Date.now()}`));
+          },
+        },
+        ...(process.platform === "darwin" ? [] : [{ type: "separator" as const }, { role: "quit" as const }]),
+      ],
+    },
+    {
+      label: "Edit",
+      submenu: [
+        { role: "undo" },
+        { role: "redo" },
+        { type: "separator" },
+        { role: "cut" },
+        { role: "copy" },
+        { role: "paste" },
+        { role: "selectAll" },
+      ],
+    },
+    {
+      label: "View",
+      submenu: [
+        {
+          label: "Command Palette",
+          accelerator: "CmdOrCtrl+K",
+          click: () => emitEvent({ type: "shortcut", action: "toggle-command-palette" }),
+        },
+        {
+          label: "Toggle Console",
+          accelerator: "CmdOrCtrl+`",
+          click: () => emitEvent({ type: "shortcut", action: "toggle-console" }),
+        },
+        {
+          label: "Refresh Data",
+          accelerator: "CmdOrCtrl+R",
+          click: () => emitEvent({ type: "shortcut", action: "refresh" }),
+        },
+        { type: "separator" },
+        { role: "toggleDevTools", visible: isDev },
+      ],
+    },
+    {
+      label: "Run",
+      submenu: [
+        {
+          label: "Check For Updates",
+          click: async () => {
+            await checkForUpdates();
+          },
+        },
+      ],
+    },
+  ];
+  Menu.setApplicationMenu(Menu.buildFromTemplate(template));
+}
+
+function installSecurityGuards() {
+  session.defaultSession.setPermissionCheckHandler(() => false);
+  session.defaultSession.setPermissionRequestHandler((_webContents, _permission, callback) => {
+    callback(false);
+  });
+  app.on("web-contents-created", (_event, contents) => {
+    contents.setWindowOpenHandler(() => ({ action: "deny" }));
+    contents.on("will-attach-webview", (event) => {
+      event.preventDefault();
+    });
+    contents.on("will-navigate", (event) => {
+      event.preventDefault();
+    });
+  });
+}
+
+function registerProtocol() {
+  protocol.handle("app", (request) => {
+    const url = new URL(request.url);
+    const relativePath = decodeURIComponent(url.pathname === "/" ? "index.html" : url.pathname.replace(/^\/+/, ""));
+    const targetPath = resolve(RENDERER_DIST, relativePath);
+    if (!targetPath.startsWith(RENDERER_DIST) || !existsSync(targetPath)) {
+      return new Response("Not found", { status: 404 });
+    }
+    return net.fetch(pathToFileURL(targetPath).toString());
+  });
+}
+
+async function createWindow() {
+  const windowIcon = nativeImage.createFromPath(ICON_PATH);
+  mainWindow = new BrowserWindow({
+    title: "AgentCompany",
+    icon: windowIcon.isEmpty() ? undefined : windowIcon,
+    width: 1480,
+    height: 980,
+    minWidth: 1180,
+    minHeight: 760,
+    backgroundColor: "#13110f",
+    titleBarStyle: process.platform === "darwin" ? "hiddenInset" : "default",
+    webPreferences: {
+      preload: PRELOAD_PATH,
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: true,
+      devTools: isDev,
+      webSecurity: true,
+      allowRunningInsecureContent: false,
+    },
+  });
+
+  if (isDev) {
+    await mainWindow.loadURL(process.env.ELECTRON_RENDERER_URL!);
+  } else {
+    await mainWindow.loadURL("app://-/index.html");
+  }
+  mainWindow.on("close", (event) => {
+    if (process.platform === "darwin" || isQuitting) {
+      return;
+    }
+    event.preventDefault();
+    mainWindow?.hide();
+    if (!backgroundCloseNoticeShown) {
+      backgroundCloseNoticeShown = true;
+      notify("AgentCompany is still running", "Automation continues in the background until you quit the app.");
+    }
+  });
+  mainWindow.on("closed", () => {
+    mainWindow = null;
+  });
+}
+
+function createWorker() {
+  worker = utilityProcess.fork(WORKER_PATH, [], {
+    stdio: "pipe",
+    serviceName: "AgentCompany Orchestrator",
+  });
+
+  worker.stdout?.on("data", (chunk) => log.info(`[worker] ${String(chunk).trim()}`));
+  worker.stderr?.on("data", (chunk) => log.error(`[worker] ${String(chunk).trim()}`));
+
+  // Step 7: Worker crash recovery
+  worker.on("exit", (code) => {
+    if (isQuitting) return;
+
+    log.warn(`[worker] Worker exited with code ${code}, recovering...`);
+
+    // Separate running runs (truly executing — mark interrupted) from queued runs
+    // (never started — eligible for re-enqueue after worker restarts).
+    const snapshot = db.listSnapshot();
+    const affectedAgentIds = new Set<string>();
+    const requeueCandidates: Array<{ id: string; taskId: string; agentId: string; companyId: string; workspaceId: string | null; connectorId: string }> = [];
+
+    for (const run of snapshot.runs) {
+      if (run.status === "running") {
+        // Running runs were actually executing — mark interrupted
+        db.finishRun({
+          runId: run.id,
+          status: "interrupted",
+          summary: "Worker process crashed.",
+          errorMessage: "Worker process exited unexpectedly.",
+          exitCode: code,
+          signal: null,
+          model: null,
+          sessionDisplayId: null,
+          costUsd: null,
+          unattributedCost: true,
+        });
+        if (run.workspaceId) {
+          db.releaseWorkspaceLock(run.workspaceId, run.id);
+        }
+        affectedAgentIds.add(run.agentId);
+
+        const chain = db.getChainOfCommand(run.agentId);
+        if (chain.length > 0) {
+          wakeAgentIfPossible(chain[0].id, run.companyId, "report_failed");
+        }
+      } else if (run.status === "queued") {
+        // Queued runs never started — collect for re-enqueue
+        requeueCandidates.push({
+          id: run.id,
+          taskId: run.taskId,
+          agentId: run.agentId,
+          companyId: run.companyId,
+          workspaceId: run.workspaceId,
+          connectorId: run.connectorId,
+        });
+      }
+    }
+
+    // Drain deferred wakes for affected agents
+    for (const agentId of affectedAgentIds) {
+      const pendingWakes = db.consumePendingWakes(agentId);
+      if (pendingWakes.length > 0) {
+        const wake = pendingWakes[0];
+        wakeAgentIfPossible(agentId, wake.companyId, wake.trigger);
+      }
+    }
+
+    publishDomainChanged();
+
+    // Restart the worker, then re-enqueue queued runs that never started
+    createWorker();
+
+    if (requeueCandidates.length > 0 && worker) {
+      log.info(`[worker] Re-enqueuing ${requeueCandidates.length} queued run(s) after worker restart.`);
+      const recoverySnapshot = db.listSnapshot();
+      for (const candidate of requeueCandidates) {
+        try {
+          const task = db.getTask(candidate.taskId);
+          const agent = db.getAgent(candidate.agentId);
+          const connector = db.getConnector(agent.connectorId as import("@shared/types").ConnectorId);
+          const workspace = db.getWorkspace(candidate.workspaceId);
+          const env = db.resolveSecretEnv(connector.envBindingText, candidate.companyId);
+          const session = db.getTaskSession(task.id);
+
+          // Build systemPrompt exactly like the normal heartbeat path
+          const recoveryApiPort = apiServer?.getPort() ?? 0;
+          const recoveryApiUrl = recoveryApiPort ? `http://127.0.0.1:${recoveryApiPort}` : "";
+          const recoveryApiKey = recoveryApiUrl ? createAgentToken(agent.id, candidate.companyId, candidate.id) : "";
+
+          const recoveryPrompt = recoveryApiUrl ? buildTaskPrompt({
+            agent,
+            apiUrl: recoveryApiUrl,
+            apiKey: recoveryApiKey,
+            runId: candidate.id,
+            task,
+            companyName: recoverySnapshot.companies.find((c) => c.id === candidate.companyId)?.name ?? "Company",
+            goals: recoverySnapshot.goals.filter((g) => g.companyId === candidate.companyId),
+            projects: recoverySnapshot.projects.filter((p) => p.companyId === candidate.companyId),
+            directReports: db.getDirectReports(agent.id, candidate.companyId),
+            chainOfCommand: db.getChainOfCommand(agent.id),
+            assignedTasks: db.listAgentTasks(agent.id, candidate.companyId, ["todo", "in_progress", "blocked"]),
+            allAgents: recoverySnapshot.agents.filter((a) => a.companyId === candidate.companyId),
+            pendingApprovals: recoverySnapshot.approvals.filter(
+              (a) => a.companyId === candidate.companyId &&
+                a.requestedByAgentId === agent.id &&
+                (a.state === "pending" || a.state === "revision_requested"),
+            ),
+            tasksAwaitingReview: db.listReviewTasksForManager(agent.id, candidate.companyId),
+            wakeReason: "recovery",
+          }) : null;
+
+          // Inject API credentials exactly like the normal path
+          if (recoveryApiUrl) {
+            env.AGENT_COMPANY_API_URL = recoveryApiUrl;
+            env.AGENT_COMPANY_API_KEY = recoveryApiKey;
+            env.AGENT_COMPANY_AGENT_ID = agent.id;
+            env.AGENT_COMPANY_COMPANY_ID = candidate.companyId;
+            env.AGENT_COMPANY_RUN_ID = candidate.id;
+            env.AGENT_COMPANY_TASK_ID = task.id;
+            env.AGENT_COMPANY_WAKE_REASON = "recovery";
+          }
+
+          // Parse thinkingEffort exactly like the normal path
+          let recoveryThinkingEffort: string | null = null;
+          try {
+            const meta = JSON.parse(agent.metadataJson || "{}");
+            if (typeof meta.thinkingEffort === "string" && meta.thinkingEffort) {
+              recoveryThinkingEffort = meta.thinkingEffort;
+            }
+          } catch { /* ignore malformed json */ }
+
+          worker.postMessage({
+            type: "enqueue-run",
+            payload: {
+              runId: candidate.id,
+              companyId: candidate.companyId,
+              taskId: task.id,
+              taskTitle: task.title,
+              taskDescription: task.description,
+              agentId: agent.id,
+              agentName: agent.name,
+              connectorId: agent.connectorId,
+              workspaceId: workspace?.id ?? null,
+              workspacePath: workspace?.localPath ?? null,
+              command: connector.command,
+              model: connector.model ?? agent.model,
+              thinkingEffort: recoveryThinkingEffort,
+              env,
+              sessionParams: session.sessionParams,
+              systemPrompt: recoveryPrompt,
+              trigger: "recovery",
+            },
+          });
+        } catch (error) {
+          // Re-enqueue failed — mark interrupted AND release workspace lock
+          log.warn(`[worker] Failed to re-enqueue run ${candidate.id}: ${error instanceof Error ? error.message : String(error)}`);
+          db.finishRun({
+            runId: candidate.id,
+            status: "interrupted",
+            summary: "Could not re-enqueue after worker restart.",
+            errorMessage: error instanceof Error ? error.message : String(error),
+            exitCode: null,
+            signal: null,
+            model: null,
+            sessionDisplayId: null,
+            costUsd: null,
+            unattributedCost: true,
+          });
+          if (candidate.workspaceId) {
+            db.releaseWorkspaceLock(candidate.workspaceId, candidate.id);
+          }
+        }
+      }
+    }
+  });
+
+  worker.on("message", async (message) => {
+    let event: z.infer<typeof workerMessageSchema>;
+    try {
+      event = workerMessageSchema.parse(message);
+    } catch (error) {
+      log.error("[worker] invalid message payload", error);
+      return;
+    }
+
+    if (event.type === "run-log") {
+      await db.appendRunLog(event.runId, event.stream, event.chunk);
+      emitEvent(event);
+      return;
+    }
+
+    if (event.type === "run-status") {
+      db.markRunStatus(event.runId, event.status, event.message);
+      emitEvent(event);
+      publishDomainChanged();
+      return;
+    }
+
+    const snapshot = db.listSnapshot();
+    const run = snapshot.runs.find((entry) => entry.id === event.runId);
+    if (run) {
+      const connector = getConnectorDefinition(run.connectorId);
+
+      // Guard: task/agent may have been deleted while the run was active
+      let task: ReturnType<typeof db.getTask> | null = null;
+      try { task = db.getTask(run.taskId); } catch { /* task deleted mid-run */ }
+
+      if (task) {
+        if (event.sessionParams && connector.module.sessionCodec) {
+          const serialized = connector.module.sessionCodec.serialize(event.sessionParams);
+          db.updateTaskSession(task.id, serialized, connector.module.sessionCodec.getDisplayId?.(serialized ?? null) ?? event.sessionDisplayId ?? null);
+        }
+        if (!event.sessionParams) {
+          db.updateTaskSession(task.id, null, null);
+        }
+      }
+
+      const runOutcome = db.finishRun(event);
+      // Release workspace lock now that the run is finished
+      if (run.workspaceId) {
+        db.releaseWorkspaceLock(run.workspaceId, run.id);
+      }
+      db.addActivity({
+        companyId: run.companyId,
+        actor: run.agentId,
+        action: `run.${event.status}`,
+        entityType: "run",
+        entityId: run.id,
+        detail: event.summary ?? event.errorMessage ?? "",
+      });
+      publishDomainChanged();
+      emitEvent({
+        type: "run-status",
+        runId: run.id,
+        status: event.status,
+        message: event.summary ?? event.errorMessage ?? event.status,
+      });
+      if ((event.status === "failed" || event.status === "timed_out" || event.status === "interrupted") && task) {
+        notify("Run attention required", task.title);
+      }
+
+      // Guard: agent may have been deleted while the run was active
+      let updatedAgent: ReturnType<typeof db.getAgent> | null = null;
+      try { updatedAgent = db.getAgent(run.agentId); } catch { /* agent deleted mid-run */ }
+
+      if (updatedAgent && runOutcome.budgetHardStopped) {
+        autoPauseBudgetExceededAgent(updatedAgent);
+      }
+
+      // Step 6: Run failure escalation — wake agent's manager via org hierarchy
+      if (event.status === "failed" || event.status === "timed_out") {
+        try {
+          const chain = db.getChainOfCommand(run.agentId);
+          if (chain.length > 0) {
+            wakeAgentIfPossible(chain[0].id, run.companyId, "report_failed");
+          }
+        } catch { /* agent deleted, skip escalation */ }
+      }
+
+      // Step 3c: Consume deferred wakes — re-wake agent for each pending trigger
+      const pendingWakes = db.consumePendingWakes(run.agentId);
+      if (pendingWakes.length > 0) {
+        // Process the first wake immediately; additional wakes will be
+        // re-enqueued by wakeAgentIfPossible if the agent is still busy.
+        for (const wake of pendingWakes) {
+          wakeAgentIfPossible(run.agentId, wake.companyId, wake.trigger);
+        }
+      }
+    }
+  });
+}
+
+function parseVersion(command: string): Promise<string | null> {
+  return new Promise((resolve) => {
+    const child = spawn(command, ["--version"], {
+      env: process.env,
+      shell: false,
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+    let buffer = "";
+    child.stdout.on("data", (chunk) => {
+      buffer += String(chunk);
+    });
+    child.stderr.on("data", (chunk) => {
+      buffer += String(chunk);
+    });
+    child.on("error", () => resolve(null));
+    child.on("close", () => {
+      const versionLine = buffer.split(/\r?\n/).map((line) => line.trim()).find(Boolean) ?? null;
+      resolve(versionLine);
+    });
+  });
+}
+
+async function checkConnector(id: Parameters<typeof db.getConnector>[0]) {
+  const connector = db.getConnector(id);
+  const definition = getConnectorDefinition(id);
+
+  // Set "detected" (checking) state immediately so the UI shows progress
+  db.updateConnectorHealth({
+    id,
+    status: "detected",
+    authState: connector.authState,
+    version: connector.version,
+    lastError: null,
+  });
+  publishDomainChanged();
+
+  const result = await definition.module.testEnvironment({
+    companyId: db.getCurrentCompanyId() ?? randomFallbackCompanyId(),
+    adapterType: id,
+    config: {
+      command: connector.command,
+      model: connector.model,
+      cwd: process.cwd(),
+      // These flags allow the health probe to run non-interactively.
+      // Without them, CLIs like Codex/Gemini enter interactive approval mode
+      // and the probe hangs or fails.
+      dangerouslyBypassApprovalsAndSandbox: true,  // Codex
+      dangerouslySkipPermissions: true,              // Claude
+      approvalMode: "yolo",                          // Gemini
+      sandbox: false,                                // Gemini
+      yolo: true,                                    // Gemini fallback
+      extraArgs: id === "codex_local" ? ["--skip-git-repo-check"] : [],
+    },
+  });
+
+  const authState =
+    result.checks.some((check) => check.code.includes("auth") || check.code.includes("login"))
+      ? result.status === "fail"
+        ? "required"
+        : "ok"
+      : result.status === "fail"
+        ? "error"
+        : "ok";
+  const version = await parseVersion(connector.command);
+
+  // Map adapter status to connector state: pass/warn → ready, fail → error/auth_required
+  // "warn" means the connector works but has non-fatal issues (e.g. missing API key that
+  // might be set at runtime) — still usable, so map to "ready" not "degraded"
+  db.updateConnectorHealth({
+    id,
+    status:
+      result.status === "pass" || result.status === "warn"
+        ? "ready"
+        : authState === "required"
+          ? "auth_required"
+          : "error",
+    authState,
+    version,
+    lastError: result.status === "fail" ? result.checks.map((check) => check.message).join(" | ") : null,
+  });
+  db.addActivity({
+    companyId: db.getCurrentCompanyId() ?? randomFallbackCompanyId(),
+    actor: "system",
+    action: "connector.tested",
+    entityType: "connector",
+    entityId: id,
+    detail: result.status,
+  });
+  publishDomainChanged();
+}
+
+function randomFallbackCompanyId() {
+  const snapshot = db.listSnapshot();
+  return snapshot.companies[0]?.id ?? "00000000-0000-0000-0000-000000000000";
+}
+
+function autoPauseBudgetExceededAgent(agent: { id: string; companyId: string; name: string; spentMonthlyUsd: number; budgetMonthlyUsd: number }) {
+  if (!(agent.budgetMonthlyUsd > 0) || agent.spentMonthlyUsd < agent.budgetMonthlyUsd) {
+    return false;
+  }
+  db.addActivity({
+    companyId: agent.companyId,
+    actor: "system",
+    action: "agent.auto_paused",
+    entityType: "agent",
+    entityId: agent.id,
+    detail: `Budget exhausted at ${agent.spentMonthlyUsd.toFixed(2)} / ${agent.budgetMonthlyUsd.toFixed(2)} USD.`,
+  });
+  notify("Agent paused for budget limit", agent.name);
+  publishDomainChanged();
+  return true;
+}
+
+function ensureAgentHeartbeatEnabled(agentId: string) {
+  const agent = db.getAgent(agentId);
+  if (!agent.heartbeatEnabled) {
+    db.setHeartbeat(agentId, true, agent.heartbeatIntervalSec || 120);
+  }
+}
+
+function wakeAgentIfPossible(agentId: string | null | undefined, companyId: string, trigger: string) {
+  if (!agentId) return null;
+  try {
+    ensureAgentHeartbeatEnabled(agentId);
+  } catch {
+    return null;
+  }
+
+  // Check if agent is specifically busy (has active run) before attempting wake.
+  // Only enqueue deferred wakes for the "busy" case, not for other skip reasons
+  // (inactive company, paused agent, budget exhaustion, connector not ready).
+  const snapshot = db.listSnapshot();
+  const hasActiveRun = snapshot.runs.some(
+    (run) => run.companyId === companyId && run.agentId === agentId && (run.status === "queued" || run.status === "running"),
+  );
+
+  const runId = startAgentHeartbeatRun(agentId, companyId, trigger);
+  if (!runId && hasActiveRun) {
+    // Agent is busy with an active run — defer the wake so it's not lost
+    db.enqueuePendingWake(companyId, agentId, trigger);
+  }
+  return runId;
+}
+
+function getRunEligibilityFailure(
+  agent: { status: string; budgetMonthlyUsd: number; spentMonthlyUsd: number; name: string; connectorId: string; id: string; companyId: string },
+  connector: { id: string; status: string },
+) {
+  if (["terminated", "paused", "pending_approval"].includes(agent.status)) {
+    return "AGENT_NOT_RUNNABLE";
+  }
+  if (agent.budgetMonthlyUsd > 0 && agent.spentMonthlyUsd >= agent.budgetMonthlyUsd) {
+    autoPauseBudgetExceededAgent(agent);
+    log.info(`[run] Agent ${agent.name} budget exhausted, skipping`);
+    return "AGENT_BUDGET_EXHAUSTED";
+  }
+  if (connector.status !== "ready" && connector.status !== "degraded") {
+    log.info(`[run] Agent ${agent.name} connector ${connector.id} not ready (${connector.status})`);
+    return "CONNECTOR_NOT_READY";
+  }
+  return null;
+}
+
+function startAgentHeartbeatRun(agentId: string, companyId: string, trigger: string): string | null {
+  if (!worker) return null;
+  const snapshot = db.listSnapshot();
+  const company = snapshot.companies.find((entry) => entry.id === companyId) ?? null;
+  if (!company || company.status !== "active") {
+    log.info(`[heartbeat] Skipping ${agentId} because company ${companyId} is not active.`);
+    return null;
+  }
+  const agent = db.getAgent(agentId);
+  const connector = db.getConnector(agent.connectorId);
+  if (getRunEligibilityFailure(agent, connector)) {
+    return null;
+  }
+  if (
+    snapshot.runs.some(
+      (run) => run.companyId === companyId && run.agentId === agent.id && (run.status === "queued" || run.status === "running"),
+    )
+  ) {
+    log.info(`[heartbeat] Skipping ${agent.name} because it already has an active run.`);
+    return null;
+  }
+
+  // Phase 3: Approval hard gate — don't start heartbeat runs for pending-approval agents
+  if (db.isAgentPendingApproval(agentId)) {
+    log.info(`[heartbeat] Skipping ${agent.name} because agent is pending hire approval.`);
+    return null;
+  }
+
+  // Find an existing assigned task to run against
+  const assignedTasks = db.listAgentTasks(agentId, companyId, ["todo", "in_progress", "blocked"]);
+
+  // For timer-triggered heartbeats, only pick up real user-created tasks (not old heartbeat tasks)
+  const isTimer = trigger === "timer";
+  const candidateTasks = isTimer
+    ? assignedTasks.filter((entry) => !entry.title.startsWith("[Heartbeat]"))
+    : assignedTasks;
+
+  let task = candidateTasks.find((entry) => !entry.activeRunId) ?? null;
+
+  if (!task) {
+    const hasActiveAssignedRun = candidateTasks.some(
+      (entry) =>
+        entry.activeRunId &&
+        snapshot.runs.some(
+          (run) => run.id === entry.activeRunId && run.companyId === companyId && (run.status === "queued" || run.status === "running"),
+        ),
+    );
+    if (hasActiveAssignedRun) {
+      return null;
+    }
+    // Timer should never create new heartbeat tasks — only explicit triggers can
+    if (isTimer) {
+      log.info(`[heartbeat] Skipping ${agent.name} — no actionable tasks and trigger is timer.`);
+      return null;
+    }
+    // Create a heartbeat check task (inherit workspace from agent)
+    const taskId = db.saveTask({
+      companyId,
+      title: `[Heartbeat] ${agent.name} — Check for work`,
+      description: `Automated heartbeat run for ${agent.name}. Review assigned tasks, check goals, and take action as needed.`,
+      assigneeAgentId: agentId,
+      workspaceId: agent.workspaceId ?? undefined,
+      status: "in_progress",
+      priority: "medium",
+    });
+    task = db.getTask(taskId);
+  }
+  if (
+    task.activeRunId ||
+    snapshot.runs.some(
+      (run) => run.taskId === task.id && run.companyId === companyId && (run.status === "queued" || run.status === "running"),
+    )
+  ) {
+    log.info(`[heartbeat] Skipping ${agent.name} because task ${task.title} already has an active run.`);
+    return null;
+  }
+
+  const workspace =
+    db.getWorkspace(task.workspaceId) ??
+    db.getWorkspace(agent.workspaceId) ??
+    db.getProjectPrimaryWorkspace(companyId) ??
+    db.getAnyCompanyWorkspace(companyId);
+
+  log.info(
+    `[heartbeat] Workspace resolution for ${agent.name}: task.workspaceId=${task.workspaceId ?? "null"}, agent.workspaceId=${agent.workspaceId ?? "null"}, resolved=${workspace?.name ?? "NONE"}, localPath=${workspace?.localPath ?? "NONE"}`,
+  );
+
+  // Attempt workspace lock BEFORE creating the run — if another run holds it, defer
+  if (workspace && !db.acquireWorkspaceLock(workspace.id, `pre-check-${agent.id}`)) {
+    log.info(`[heartbeat] Skipping ${agent.name} because workspace ${workspace.name} is locked by another run.`);
+    // Release the pre-check placeholder
+    db.releaseWorkspaceLock(workspace.id, `pre-check-${agent.id}`);
+    return null;
+  }
+  // Release pre-check — the real lock will be acquired with the actual run ID below
+  if (workspace) {
+    db.releaseWorkspaceLock(workspace.id, `pre-check-${agent.id}`);
+  }
+
+  const run = db.createRun({
+    companyId,
+    taskId: task.id,
+    agentId: agent.id,
+    workspaceId: workspace?.id ?? null,
+    connectorId: connector.id,
+  });
+
+  // Acquire workspace lock with the real run ID
+  if (workspace) {
+    const locked = db.acquireWorkspaceLock(workspace.id, run.id);
+    if (!locked) {
+      // Race condition: someone else grabbed the lock between pre-check and here
+      log.warn(`[heartbeat] Workspace lock race for ${workspace.name}, aborting run ${run.id}`);
+      db.finishRun({ runId: run.id, status: "cancelled", summary: "Workspace lock contention.", errorMessage: null, exitCode: null, signal: null, model: null, sessionDisplayId: null, costUsd: null, unattributedCost: true });
+      return null;
+    }
+  }
+
+  const env = db.resolveSecretEnv(connector.envBindingText, companyId);
+
+  // Build rich prompt with API context
+  const apiPort = apiServer?.getPort() ?? 0;
+  const apiUrl = apiPort ? `http://127.0.0.1:${apiPort}` : "";
+  const apiKey = apiUrl ? createAgentToken(agent.id, companyId, run.id) : "";
+
+  const systemPrompt = apiUrl ? buildTaskPrompt({
+    agent,
+    apiUrl,
+    apiKey,
+    runId: run.id,
+    task,
+    companyName: company.name,
+    goals: snapshot.goals.filter((g) => g.companyId === companyId),
+    projects: snapshot.projects.filter((p) => p.companyId === companyId),
+    directReports: db.getDirectReports(agent.id, companyId),
+    chainOfCommand: db.getChainOfCommand(agent.id),
+    assignedTasks: assignedTasks,
+    allAgents: snapshot.agents.filter((a) => a.companyId === companyId),
+    pendingApprovals: snapshot.approvals.filter(
+      (a) => a.companyId === companyId &&
+        a.requestedByAgentId === agent.id &&
+        (a.state === "pending" || a.state === "revision_requested"),
+    ),
+    tasksAwaitingReview: db.listReviewTasksForManager(agent.id, companyId),
+    wakeReason: trigger,
+  }) : null;
+
+  // Add API credentials to env
+  if (apiUrl) {
+    env.AGENT_COMPANY_API_URL = apiUrl;
+    env.AGENT_COMPANY_API_KEY = apiKey;
+    env.AGENT_COMPANY_AGENT_ID = agent.id;
+    env.AGENT_COMPANY_COMPANY_ID = companyId;
+    env.AGENT_COMPANY_RUN_ID = run.id;
+    env.AGENT_COMPANY_TASK_ID = task.id;
+    env.AGENT_COMPANY_WAKE_REASON = trigger;
+  }
+
+  const session = db.getTaskSession(task.id);
+  let thinkingEffort: string | null = null;
+  try {
+    const meta = JSON.parse(agent.metadataJson || "{}");
+    if (typeof meta.thinkingEffort === "string" && meta.thinkingEffort) {
+      thinkingEffort = meta.thinkingEffort;
+    }
+  } catch { /* ignore malformed json */ }
+
+  worker.postMessage({
+    type: "enqueue-run",
+    payload: {
+      runId: run.id,
+      companyId,
+      taskId: task.id,
+      taskTitle: task.title,
+      taskDescription: task.description,
+      agentId: agent.id,
+      agentName: agent.name,
+      connectorId: connector.id,
+      workspaceId: workspace?.id ?? null,
+      workspacePath: workspace?.localPath ?? null,
+      command: connector.command,
+      model: connector.model ?? agent.model,
+      thinkingEffort,
+      env,
+      sessionParams: session.sessionParams,
+      systemPrompt,
+      trigger,
+    },
+  });
+
+  db.markHeartbeatAt(agentId);
+  db.addActivity({
+    companyId,
+    actor: "system",
+    action: "heartbeat.triggered",
+    entityType: "agent",
+    entityId: agent.id,
+    detail: `${trigger} heartbeat for ${agent.name}`,
+  });
+  publishDomainChanged();
+  return run.id;
+}
+
+function startHeartbeatScheduler() {
+  if (heartbeatTimer) clearInterval(heartbeatTimer);
+
+  heartbeatTimer = setInterval(() => {
+    try {
+      const snapshot = db.listSnapshot();
+      const now = Date.now();
+
+      for (const company of snapshot.companies.filter((entry) => entry.status === "active")) {
+        try {
+          const eligibleAgents = db.listHeartbeatEligibleAgents(company.id);
+          for (const agent of eligibleAgents) {
+            const hasActiveRun = snapshot.runs.some(
+              (r) => r.agentId === agent.id && (r.status === "running" || r.status === "queued"),
+            );
+            if (hasActiveRun) continue;
+
+            const lastHeartbeat = agent.lastHeartbeatAt ? new Date(agent.lastHeartbeatAt).getTime() : 0;
+            const intervalMs = agent.heartbeatIntervalSec * 1000;
+            if (now - lastHeartbeat < intervalMs) continue;
+
+            log.info(`[heartbeat] Waking agent ${agent.name} (interval: ${agent.heartbeatIntervalSec}s)`);
+            startAgentHeartbeatRun(agent.id, company.id, "timer");
+          }
+        } catch (companyError) {
+          log.error(`[heartbeat] Error processing company ${company.id}: ${companyError instanceof Error ? companyError.message : String(companyError)}`);
+        }
+      }
+    } catch (error) {
+      log.error(`[heartbeat] Scheduler error: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }, 15_000); // Check every 15 seconds
+}
+
+function registerHandlers() {
+  registerHandle(IPC_CHANNELS.loadSnapshot, async () => ok(db.listSnapshot()));
+
+  registerHandle(IPC_CHANNELS.pickDirectory, async () => {
+    const result = await dialog.showOpenDialog({
+      properties: ["openDirectory", "createDirectory"],
+    });
+    return ok(result.canceled ? null : (result.filePaths[0] ?? null));
+  });
+
+  registerHandle(IPC_CHANNELS.openPath, async (_event, targetPath) => {
+    if (typeof targetPath !== "string" || targetPath.length === 0) {
+      return fail("INVALID_PATH", "A valid path is required.");
+    }
+    if (!db.canOpenPath(targetPath)) {
+      return fail("OPEN_PATH_FORBIDDEN", "The requested path is outside the managed desktop workspace.");
+    }
+    const error = await shell.openPath(targetPath);
+    return error ? fail("OPEN_PATH_FAILED", error) : ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.saveCompany, async (_event, payload) => {
+    const parsed = companyInputSchema.parse(payload);
+    const id = db.saveCompany(parsed);
+    db.addActivity({
+      companyId: id,
+      actor: "board",
+      action: parsed.id ? "company.updated" : "company.created",
+      entityType: "company",
+      entityId: id,
+      detail: parsed.name,
+    });
+    publishDomainChanged();
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.setCurrentCompany, async (_event, companyId) => {
+    let parsedCompanyId: string;
+    try {
+      parsedCompanyId = companyIdSchema.parse(companyId);
+    } catch {
+      return fail("INVALID_COMPANY_ID", "A valid company id is required.");
+    }
+    if (!db.hasCompany(parsedCompanyId)) {
+      return fail("COMPANY_NOT_FOUND", "The selected company does not exist.");
+    }
+    db.setCurrentCompany(parsedCompanyId);
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.saveConnector, async (_event, payload) => {
+    const parsed = connectorInputSchema.parse(payload);
+    const definition = getConnectorDefinition(parsed.id);
+    if (parsed.command !== definition.defaultCommand) {
+      return fail("CONNECTOR_COMMAND_LOCKED", `Connector command is managed by AgentCompany and must remain "${definition.defaultCommand}".`);
+    }
+    db.saveConnector({
+      ...parsed,
+      command: definition.defaultCommand,
+      model: parsed.model ?? null,
+    });
+    db.addActivity({
+      companyId: db.getCurrentCompanyId() ?? randomFallbackCompanyId(),
+      actor: "board",
+      action: "connector.updated",
+      entityType: "connector",
+      entityId: parsed.id,
+      detail: definition.defaultCommand,
+    });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.testConnector, async (_event, id) => {
+    const parsed = connectorInputSchema.shape.id.parse(id);
+    await checkConnector(parsed);
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.saveWorkspace, async (_event, payload) => {
+    const parsed = workspaceInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const invalidReference = findInvalidReference(parsed.companyId, [
+      { id: parsed.projectId, table: "projects", label: "project" },
+    ]);
+    if (invalidReference) {
+      return fail("INVALID_COMPANY_REFERENCE", `The selected ${invalidReference.label} does not belong to the current company.`);
+    }
+    const id = db.saveWorkspace(parsed);
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: "board",
+      action: parsed.id ? "workspace.updated" : "workspace.created",
+      entityType: "workspace",
+      entityId: id,
+      detail: parsed.localPath,
+    });
+    publishDomainChanged();
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.saveAgent, async (_event, payload) => {
+    const parsed = agentInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const invalidReference = findInvalidReference(parsed.companyId, [
+      { id: parsed.reportsTo, table: "agents", label: "manager" },
+      { id: parsed.workspaceId, table: "workspaces", label: "workspace" },
+    ]);
+    if (invalidReference) {
+      return fail("INVALID_COMPANY_REFERENCE", `The selected ${invalidReference.label} does not belong to the current company.`);
+    }
+    let id: string;
+    try {
+      id = db.saveAgent({
+        id: parsed.id ?? null,
+        companyId: parsed.companyId,
+        name: parsed.name,
+        role: parsed.role,
+        title: parsed.title,
+        status: parsed.status,
+        reportsTo: parsed.reportsTo ?? null,
+        connectorId: parsed.connectorId,
+        workspaceId: parsed.workspaceId ?? null,
+        model: parsed.model ?? null,
+        metadataJson: parsed.metadataJson,
+        capabilities: parsed.capabilities,
+        budgetMonthlyUsd: parsed.budgetMonthlyUsd,
+      });
+    } catch (error) {
+      return fail("INVALID_AGENT_HIERARCHY", error instanceof Error ? error.message : "Agent could not be saved.");
+    }
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: "board",
+      action: parsed.id ? "agent.updated" : "agent.created",
+      entityType: "agent",
+      entityId: id,
+      detail: parsed.name,
+    });
+    publishDomainChanged();
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.saveGoal, async (_event, payload) => {
+    const parsed = goalInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const invalidReference = findInvalidReference(parsed.companyId, [
+      { id: parsed.parentId, table: "goals", label: "parent goal" },
+      { id: parsed.ownerAgentId, table: "agents", label: "owner agent" },
+    ]);
+    if (invalidReference) {
+      return fail("INVALID_COMPANY_REFERENCE", `The selected ${invalidReference.label} does not belong to the current company.`);
+    }
+    const id = db.saveGoal(parsed);
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: "board",
+      action: parsed.id ? "goal.updated" : "goal.created",
+      entityType: "goal",
+      entityId: id,
+      detail: parsed.title,
+    });
+    publishDomainChanged();
+
+    // Auto-cascade: when a goal becomes active with an owner agent, enable heartbeat and wake immediately
+    if (parsed.status === "active" && parsed.ownerAgentId) {
+      wakeAgentIfPossible(parsed.ownerAgentId, parsed.companyId, "goal_activated");
+    }
+
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.saveProject, async (_event, payload) => {
+    const parsed = projectInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const invalidReference = findInvalidReference(parsed.companyId, [
+      { id: parsed.goalId, table: "goals", label: "goal" },
+      { id: parsed.leadAgentId, table: "agents", label: "lead agent" },
+    ]);
+    if (invalidReference) {
+      return fail("INVALID_COMPANY_REFERENCE", `The selected ${invalidReference.label} does not belong to the current company.`);
+    }
+    const id = db.saveProject(parsed);
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: "board",
+      action: parsed.id ? "project.updated" : "project.created",
+      entityType: "project",
+      entityId: id,
+      detail: parsed.name,
+    });
+    if (parsed.leadAgentId) {
+      wakeAgentIfPossible(parsed.leadAgentId, parsed.companyId, "assignment");
+    }
+    publishDomainChanged();
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.saveTask, async (_event, payload) => {
+    const parsed = taskInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const invalidReference = findInvalidReference(parsed.companyId, [
+      { id: parsed.projectId, table: "projects", label: "project" },
+      { id: parsed.goalId, table: "goals", label: "goal" },
+      { id: parsed.parentId, table: "tasks", label: "parent task" },
+      { id: parsed.assigneeAgentId, table: "agents", label: "assignee agent" },
+      { id: parsed.workspaceId, table: "workspaces", label: "workspace" },
+    ]);
+    if (invalidReference) {
+      return fail("INVALID_COMPANY_REFERENCE", `The selected ${invalidReference.label} does not belong to the current company.`);
+    }
+    let id: string;
+    try {
+      id = db.saveTask(parsed);
+    } catch (error) {
+      return fail("INVALID_TASK_STATE", error instanceof Error ? error.message : "Task could not be saved.");
+    }
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: "board",
+      action: parsed.id ? "task.updated" : "task.created",
+      entityType: "task",
+      entityId: id,
+      detail: parsed.title,
+    });
+    if (parsed.assigneeAgentId) {
+      wakeAgentIfPossible(parsed.assigneeAgentId, parsed.companyId, "assignment");
+    }
+    publishDomainChanged();
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.requestApproval, async (_event, payload) => {
+    const parsed = approvalInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const invalidReference = findInvalidReference(parsed.companyId, [
+      { id: parsed.relatedTaskId, table: "tasks", label: "task" },
+      { id: parsed.requestedByAgentId, table: "agents", label: "requesting agent" },
+    ]);
+    if (invalidReference) {
+      return fail("INVALID_COMPANY_REFERENCE", `The selected ${invalidReference.label} does not belong to the current company.`);
+    }
+    const id = db.requestApproval(parsed);
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: parsed.requestedByAgentId ?? "board",
+      action: "approval.created",
+      entityType: "approval",
+      entityId: id,
+      detail: parsed.payloadSummary,
+    });
+    notify("Approval requested", parsed.payloadSummary);
+    publishDomainChanged();
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.decideApproval, async (_event, payload) => {
+    const parsed = approvalDecisionSchema.parse(payload);
+    db.decideApproval(parsed);
+    const snapshot = db.listSnapshot();
+    const approval = snapshot.approvals.find((entry) => entry.id === parsed.approvalId);
+    if (approval) {
+      db.addActivity({
+        companyId: approval.companyId,
+        actor: "board",
+        action: `approval.${parsed.state}`,
+        entityType: "approval",
+        entityId: approval.id,
+        detail: parsed.decisionNote,
+      });
+      if (parsed.state === "approved" || parsed.state === "revision_requested" || parsed.state === "rejected") {
+        wakeAgentIfPossible(approval.requestedByAgentId, approval.companyId, "approval_resolved");
+      }
+
+      // Step 4: Wake newly hired agent when hire is approved
+      if (approval.type === "hire_agent" && parsed.state === "approved") {
+        try {
+          const fullApproval = db.getApprovalRecord(parsed.approvalId);
+          const payload = JSON.parse(fullApproval.payloadJson || "{}") as { agentId?: string };
+          if (payload.agentId) {
+            // Don't wake new hires if org-strategy is still pending approval
+            const hasPendingOrgApproval = snapshot.approvals.some(
+              (a) =>
+                a.companyId === approval.companyId &&
+                a.type === "approve_ceo_strategy" &&
+                (a.state === "pending" || a.state === "revision_requested"),
+            );
+            if (!hasPendingOrgApproval) {
+              wakeAgentIfPossible(payload.agentId, approval.companyId, "assignment");
+            }
+          }
+        } catch { /* ignore if approval payload is malformed */ }
+      }
+    }
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.saveSecret, async (_event, payload) => {
+    const parsed = secretInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const id = db.saveSecret(parsed);
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: "board",
+      action: parsed.id ? "secret.updated" : "secret.created",
+      entityType: "secret",
+      entityId: id,
+      detail: parsed.name,
+    });
+    publishDomainChanged();
+    return ok(id);
+  });
+
+  registerHandle(IPC_CHANNELS.startTaskRun, async (_event, payload) => {
+    if (!worker) return fail("WORKER_UNAVAILABLE", "Orchestration worker is not ready.");
+    const parsed = startRunSchema.parse(payload);
+    const task = db.getTask(parsed.taskId);
+    const snapshot = db.listSnapshot();
+    const company = snapshot.companies.find((entry) => entry.id === task.companyId) ?? null;
+    if (!company || company.status !== "active") {
+      return fail("COMPANY_NOT_ACTIVE", "Runs can only start while the company is active.");
+    }
+    if (
+      task.activeRunId ||
+      snapshot.runs.some(
+        (run) => run.taskId === task.id && run.companyId === task.companyId && (run.status === "queued" || run.status === "running"),
+      )
+    ) {
+      return fail("TASK_ALREADY_RUNNING", "This task already has an active run.");
+    }
+    if (!task.assigneeAgentId) return fail("TASK_UNASSIGNED", "Assign an agent before starting a run.");
+    const agent = db.getAgent(task.assigneeAgentId);
+    if (agent.companyId !== task.companyId) {
+      return fail("AGENT_COMPANY_MISMATCH", "The assigned agent does not belong to the task company.");
+    }
+    const connector = db.getConnector(agent.connectorId);
+    const eligibilityFailure = getRunEligibilityFailure(agent, connector);
+    if (eligibilityFailure === "AGENT_NOT_RUNNABLE") {
+      return fail("AGENT_NOT_RUNNABLE", "The assigned agent is paused, pending approval, or terminated.");
+    }
+    if (eligibilityFailure === "AGENT_BUDGET_EXHAUSTED") {
+      return fail("AGENT_BUDGET_EXHAUSTED", "The assigned agent has exhausted its monthly budget.");
+    }
+    if (eligibilityFailure === "CONNECTOR_NOT_READY") {
+      return fail("CONNECTOR_NOT_READY", "The assigned agent connector is not ready.");
+    }
+    if (
+      snapshot.runs.some(
+        (run) => run.companyId === task.companyId && run.agentId === agent.id && (run.status === "queued" || run.status === "running"),
+      )
+    ) {
+      return fail("AGENT_ALREADY_RUNNING", "The assigned agent already has an active run.");
+    }
+
+    // Phase 3: Approval hard gate — block runs when relevant approvals are pending
+    if (db.isAgentPendingApproval(agent.id)) {
+      return fail("AGENT_PENDING_APPROVAL", "This agent is pending hire approval and cannot run tasks.");
+    }
+    const blockingApproval = db.getBlockingApproval(task.companyId, agent.id, task.id);
+    if (blockingApproval) {
+      return fail(
+        "APPROVAL_GATE_BLOCKED",
+        `Run blocked by pending approval: ${blockingApproval.type} — "${blockingApproval.payloadSummary}". Approve or reject before starting.`,
+      );
+    }
+
+    const workspace =
+      db.getWorkspace(task.workspaceId) ??
+      db.getWorkspace(agent.workspaceId) ??
+      db.getProjectPrimaryWorkspace(task.companyId) ??
+      db.getAnyCompanyWorkspace(task.companyId);
+
+    log.info(
+      `[run] Workspace resolution for ${agent.name}: task.workspaceId=${task.workspaceId ?? "null"}, agent.workspaceId=${agent.workspaceId ?? "null"}, resolved=${workspace?.name ?? "NONE"}, localPath=${workspace?.localPath ?? "NONE"}`,
+    );
+
+    if (workspace && workspace.companyId !== task.companyId) {
+      return fail("WORKSPACE_COMPANY_MISMATCH", "The selected workspace does not belong to the task company.");
+    }
+
+    // Check workspace lock BEFORE creating the run — fail if another run holds it
+    if (workspace && !db.acquireWorkspaceLock(workspace.id, `pre-check-manual-${agent.id}`)) {
+      return fail("WORKSPACE_LOCKED", `Workspace "${workspace.name}" is locked by another active run. Wait for it to finish or cancel it.`);
+    }
+    if (workspace) {
+      db.releaseWorkspaceLock(workspace.id, `pre-check-manual-${agent.id}`);
+    }
+
+    const run = db.createRun({
+      companyId: task.companyId,
+      taskId: task.id,
+      agentId: agent.id,
+      workspaceId: workspace?.id ?? null,
+      connectorId: connector.id,
+    });
+
+    // Acquire workspace lock with real run ID — if race condition, cancel the run
+    if (workspace) {
+      const locked = db.acquireWorkspaceLock(workspace.id, run.id);
+      if (!locked) {
+        db.finishRun({ runId: run.id, status: "cancelled", summary: "Workspace lock contention.", errorMessage: null, exitCode: null, signal: null, model: null, sessionDisplayId: null, costUsd: null, unattributedCost: true });
+        return fail("WORKSPACE_LOCKED", `Workspace "${workspace.name}" was locked by another run during startup.`);
+      }
+    }
+
+    const env = db.resolveSecretEnv(connector.envBindingText, task.companyId);
+
+    // Build rich prompt with API context
+    const apiPort = apiServer?.getPort() ?? 0;
+    const apiUrl = apiPort ? `http://127.0.0.1:${apiPort}` : "";
+    const apiKey = apiUrl ? createAgentToken(agent.id, task.companyId, run.id) : "";
+
+    const systemPrompt = apiUrl ? buildTaskPrompt({
+      agent,
+      apiUrl,
+      apiKey,
+      runId: run.id,
+      task,
+      companyName: snapshot.companies.find((c) => c.id === task.companyId)?.name ?? "Company",
+      goals: snapshot.goals.filter((g) => g.companyId === task.companyId),
+      projects: snapshot.projects.filter((p) => p.companyId === task.companyId),
+      directReports: db.getDirectReports(agent.id, task.companyId),
+      chainOfCommand: db.getChainOfCommand(agent.id),
+      assignedTasks: db.listAgentTasks(agent.id, task.companyId, ["todo", "in_progress", "blocked"]),
+      allAgents: snapshot.agents.filter((a) => a.companyId === task.companyId),
+      pendingApprovals: snapshot.approvals.filter(
+        (a) => a.companyId === task.companyId &&
+          a.requestedByAgentId === agent.id &&
+          (a.state === "pending" || a.state === "revision_requested"),
+      ),
+      tasksAwaitingReview: db.listReviewTasksForManager(agent.id, task.companyId),
+      wakeReason: "manual",
+    }) : null;
+
+    // Add API credentials to env
+    if (apiUrl) {
+      env.AGENT_COMPANY_API_URL = apiUrl;
+      env.AGENT_COMPANY_API_KEY = apiKey;
+      env.AGENT_COMPANY_AGENT_ID = agent.id;
+      env.AGENT_COMPANY_COMPANY_ID = task.companyId;
+      env.AGENT_COMPANY_RUN_ID = run.id;
+      env.AGENT_COMPANY_TASK_ID = task.id;
+      env.AGENT_COMPANY_WAKE_REASON = "manual";
+    }
+
+    const session = db.getTaskSession(task.id);
+    let thinkingEffort: string | null = null;
+    try {
+      const meta = JSON.parse(agent.metadataJson || "{}");
+      if (typeof meta.thinkingEffort === "string" && meta.thinkingEffort) {
+        thinkingEffort = meta.thinkingEffort;
+      }
+    } catch { /* ignore malformed json */ }
+    worker.postMessage({
+      type: "enqueue-run",
+      payload: {
+        runId: run.id,
+        companyId: task.companyId,
+        taskId: task.id,
+        taskTitle: task.title,
+        taskDescription: task.description,
+        agentId: agent.id,
+        agentName: agent.name,
+        connectorId: connector.id,
+        workspaceId: workspace?.id ?? null,
+        workspacePath: workspace?.localPath ?? null,
+        command: connector.command,
+        model: connector.model ?? agent.model,
+        thinkingEffort,
+        env,
+        sessionParams: session.sessionParams,
+        systemPrompt,
+        trigger: "manual",
+      },
+    });
+    db.addActivity({
+      companyId: task.companyId,
+      actor: "board",
+      action: "run.queued",
+      entityType: "run",
+      entityId: run.id,
+      detail: task.title,
+    });
+    publishDomainChanged();
+    return ok(run.id);
+  });
+
+  registerHandle(IPC_CHANNELS.cancelRun, async (_event, payload) => {
+    const parsed = cancelRunSchema.parse(payload);
+    worker?.postMessage({ type: "cancel-run", runId: parsed.runId });
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.getRunLog, async (_event, payload) => {
+    const parsed = runLogSchema.parse(payload);
+    return ok(db.readRunLog(parsed.runId));
+  });
+
+  registerHandle(IPC_CHANNELS.backupProfile, async () => {
+    const result = await dialog.showOpenDialog({
+      properties: ["openDirectory", "createDirectory"],
+    });
+    if (result.canceled || result.filePaths.length === 0) return ok(null);
+    const backupPath = join(result.filePaths[0]!, `agentcompany-backup-${Date.now()}`);
+    await db.exportBackup(backupPath);
+    return ok(backupPath);
+  });
+
+  registerHandle(IPC_CHANNELS.restoreProfile, async () => {
+    const result = await dialog.showOpenDialog({
+      properties: ["openDirectory"],
+    });
+    if (result.canceled || result.filePaths.length === 0) return ok(false);
+    await db.restoreFromBackup(result.filePaths[0]!);
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.updateSettings, async (_event, payload) => {
+    const parsed = settingsSchema.parse(payload);
+    db.updateSettings(parsed);
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.checkForUpdates, async () => {
+    await checkForUpdates();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteCompany, async (_event, companyId) => {
+    if (typeof companyId !== "string" || companyId.length === 0) {
+      return fail("INVALID_INPUT", "Company ID is required.");
+    }
+    if (!db.hasCompany(companyId)) {
+      return fail("COMPANY_NOT_FOUND", "Company not found.");
+    }
+    db.deleteCompany(companyId);
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteAgent, async (_event, payload) => {
+    const parsed = deleteEntitySchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("agents", parsed.id, parsed.companyId)) {
+      return fail("AGENT_NOT_FOUND", "Agent not found in the current company.");
+    }
+    db.deleteAgent(parsed.id, parsed.companyId);
+    db.addActivity({ companyId: parsed.companyId, actor: "board", action: "agent.deleted", entityType: "agent", entityId: parsed.id, detail: "" });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteTask, async (_event, payload) => {
+    const parsed = deleteEntitySchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("tasks", parsed.id, parsed.companyId)) {
+      return fail("TASK_NOT_FOUND", "Task not found in the current company.");
+    }
+    db.deleteTask(parsed.id, parsed.companyId);
+    db.addActivity({ companyId: parsed.companyId, actor: "board", action: "task.deleted", entityType: "task", entityId: parsed.id, detail: "" });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteGoal, async (_event, payload) => {
+    const parsed = deleteEntitySchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("goals", parsed.id, parsed.companyId)) {
+      return fail("GOAL_NOT_FOUND", "Goal not found in the current company.");
+    }
+    db.deleteGoal(parsed.id, parsed.companyId);
+    db.addActivity({ companyId: parsed.companyId, actor: "board", action: "goal.deleted", entityType: "goal", entityId: parsed.id, detail: "" });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteProject, async (_event, payload) => {
+    const parsed = deleteEntitySchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("projects", parsed.id, parsed.companyId)) {
+      return fail("PROJECT_NOT_FOUND", "Project not found in the current company.");
+    }
+    db.deleteProject(parsed.id, parsed.companyId);
+    db.addActivity({ companyId: parsed.companyId, actor: "board", action: "project.deleted", entityType: "project", entityId: parsed.id, detail: "" });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteWorkspace, async (_event, payload) => {
+    const parsed = deleteEntitySchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("workspaces", parsed.id, parsed.companyId)) {
+      return fail("WORKSPACE_NOT_FOUND", "Workspace not found in the current company.");
+    }
+    db.deleteWorkspace(parsed.id, parsed.companyId);
+    db.addActivity({ companyId: parsed.companyId, actor: "board", action: "workspace.deleted", entityType: "workspace", entityId: parsed.id, detail: "" });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteApproval, async (_event, payload) => {
+    const parsed = deleteEntitySchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("approvals", parsed.id, parsed.companyId)) {
+      return fail("APPROVAL_NOT_FOUND", "Approval not found in the current company.");
+    }
+    db.deleteApproval(parsed.id, parsed.companyId);
+    db.addActivity({ companyId: parsed.companyId, actor: "board", action: "approval.deleted", entityType: "approval", entityId: parsed.id, detail: "" });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.deleteSecret, async (_event, payload) => {
+    const parsed = deleteEntitySchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("secrets", parsed.id, parsed.companyId)) {
+      return fail("SECRET_NOT_FOUND", "Secret not found in the current company.");
+    }
+    db.deleteSecret(parsed.id, parsed.companyId);
+    db.addActivity({ companyId: parsed.companyId, actor: "board", action: "secret.deleted", entityType: "secret", entityId: parsed.id, detail: "" });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.getSidebarBadges, async (_event, companyId) => {
+    let parsedCompanyId: string;
+    try {
+      parsedCompanyId = companyIdSchema.parse(companyId);
+    } catch {
+      return fail("INVALID_COMPANY_ID", "A valid company id is required.");
+    }
+    return ok(db.getSidebarBadges(parsedCompanyId));
+  });
+
+  /* ─── Comments ────────────────────────────────────────────────────── */
+
+  registerHandle(IPC_CHANNELS.addComment, async (_event, payload) => {
+    const parsed = commentInputSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    const comment = db.addComment({
+      companyId: parsed.companyId,
+      taskId: parsed.taskId,
+      authorAgentId: parsed.authorAgentId ?? null,
+      authorName: parsed.authorName,
+      body: parsed.body,
+    });
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: parsed.authorAgentId ?? "board",
+      action: "comment.created",
+      entityType: "task",
+      entityId: parsed.taskId,
+      detail: parsed.body.slice(0, 100),
+    });
+    emitEvent({ type: "agent-message", taskId: parsed.taskId, comment });
+    publishDomainChanged();
+
+    // Step 5c: Wake task assignee when Board/UI posts a comment
+    try {
+      const task = db.getTask(parsed.taskId);
+      if (task.assigneeAgentId) {
+        wakeAgentIfPossible(task.assigneeAgentId, task.companyId, "comment");
+      }
+    } catch { /* ignore if task not found */ }
+
+    return ok(comment.id);
+  });
+
+  registerHandle(IPC_CHANNELS.listComments, async (_event, payload) => {
+    const parsed = listCommentsSchema.parse(payload);
+    return ok(db.listComments(parsed.taskId));
+  });
+
+  /* ─── Heartbeat ──────────────────────────────────────────────────── */
+
+  registerHandle(IPC_CHANNELS.setHeartbeat, async (_event, payload) => {
+    const parsed = heartbeatSettingsSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("agents", parsed.agentId, parsed.companyId)) {
+      return fail("AGENT_NOT_FOUND", "Agent not found in the current company.");
+    }
+    db.setHeartbeat(parsed.agentId, parsed.enabled, parsed.intervalSec);
+    db.addActivity({
+      companyId: parsed.companyId,
+      actor: "board",
+      action: parsed.enabled ? "heartbeat.enabled" : "heartbeat.disabled",
+      entityType: "agent",
+      entityId: parsed.agentId,
+      detail: `Interval: ${parsed.intervalSec}s`,
+    });
+    emitEvent({ type: "heartbeat-status", agentId: parsed.agentId, enabled: parsed.enabled, nextWakeAt: null });
+    publishDomainChanged();
+    return ok(true);
+  });
+
+  registerHandle(IPC_CHANNELS.triggerHeartbeat, async (_event, payload) => {
+    const parsed = triggerHeartbeatSchema.parse(payload);
+    const companyError = ensureCompanyExists(parsed.companyId);
+    if (companyError) return companyError;
+    if (!db.belongsToCompany("agents", parsed.agentId, parsed.companyId)) {
+      return fail("AGENT_NOT_FOUND", "Agent not found in the current company.");
+    }
+    const runId = startAgentHeartbeatRun(parsed.agentId, parsed.companyId, parsed.trigger);
+    if (!runId) return fail("HEARTBEAT_SKIPPED", "Agent cannot be woken right now (check connector status, budget, or active runs).");
+    return ok(runId);
+  });
+
+  registerHandle(IPC_CHANNELS.getApiPort, async () => {
+    return ok(apiServer?.getPort() ?? 0);
+  });
+
+  registerHandle(IPC_CHANNELS.listConnectorModels, async (_event, connectorId) => {
+    try {
+      const parsed = connectorInputSchema.shape.id.parse(connectorId);
+      const definition = getConnectorDefinition(parsed);
+      if (definition.listModels) {
+        const models = await definition.listModels();
+        return ok(models);
+      }
+      return ok([]);
+    } catch {
+      return ok([]);
+    }
+  });
+}
+
+async function checkForUpdates() {
+  const snapshot = db.listSnapshot();
+  if (!snapshot.updatesEnabled || process.env.AGENTCOMPANY_DISABLE_UPDATES === "true") {
+    return false;
+  }
+  try {
+    autoUpdater.logger = log;
+    autoUpdater.autoDownload = false;
+    await autoUpdater.checkForUpdates();
+    return true;
+  } catch (error) {
+    log.error(error);
+    return false;
+  }
+}
+
+async function bootstrap() {
+  await app.whenReady();
+  log.initialize();
+
+  // Resolve the user's full shell PATH for packaged apps.
+  // The static PATH fix above covers common directories, but the login shell
+  // may have additional paths from .zshrc, .bashrc, nvm, pyenv, etc.
+  if (process.platform !== "win32") {
+    try {
+      const userShell = process.env.SHELL || "/bin/zsh";
+      const shellPath = await new Promise<string>((resolve) => {
+        const child = spawn(userShell, ["-ilc", "echo -n $PATH"], {
+          env: { ...process.env },
+          stdio: ["ignore", "pipe", "ignore"],
+          timeout: 5000,
+        });
+        let output = "";
+        child.stdout?.on("data", (chunk: Buffer) => { output += chunk.toString(); });
+        child.on("close", () => resolve(output.trim()));
+        child.on("error", () => resolve(""));
+      });
+      if (shellPath && shellPath.length > 0) {
+        const current = new Set((process.env.PATH ?? "").split(":").filter(Boolean));
+        const shellParts = shellPath.split(":").filter(Boolean);
+        const toAdd = shellParts.filter((p) => !current.has(p));
+        if (toAdd.length > 0) {
+          process.env.PATH = [process.env.PATH, ...toAdd].join(":");
+          log.info(`[path] Added ${toAdd.length} shell PATH entries.`);
+        }
+      }
+    } catch {
+      // Non-fatal — static PATH fix is already in place
+    }
+  }
+
+  // Set app icon for dock/taskbar (applies even during dev)
+  const appIcon = nativeImage.createFromPath(ICON_PATH);
+  if (!appIcon.isEmpty()) {
+    if (process.platform === "darwin" && app.dock) {
+      app.dock.setIcon(appIcon);
+    }
+  }
+
+  if (process.platform === "win32") {
+    app.setAppUserModelId("com.agentcompany.desktop");
+  }
+  installSecurityGuards();
+  registerProtocol();
+  db = new AppDatabase(process.env.AGENTCOMPANY_PROFILE_DIR ?? join(app.getPath("userData"), "profile"));
+  db.init();
+  buildMenu();
+  createWorker();
+  registerHandlers();
+
+  // Start local API server for agent-to-system interaction
+  apiServer = new AgentApiServer(db, publishDomainChanged, (agentId, companyId, trigger) => {
+    wakeAgentIfPossible(agentId, companyId, trigger);
+  });
+  await apiServer.start();
+
+  // Start heartbeat scheduler for continuous agent operation
+  startHeartbeatScheduler();
+
+  await createWindow();
+
+  for (const connector of db.listSnapshot().connectors) {
+    void checkConnector(connector.id);
+  }
+
+  app.on("activate", async () => {
+    if (mainWindow && !mainWindow.isDestroyed()) {
+      if (!mainWindow.isVisible()) {
+        mainWindow.show();
+      }
+      mainWindow.focus();
+      return;
+    }
+    if (BrowserWindow.getAllWindows().length === 0) {
+      await createWindow();
+    }
+  });
+}
+
+const hasSingleInstanceLock =
+  process.env.AGENTCOMPANY_DISABLE_SINGLE_INSTANCE === "true"
+    ? true
+    : app.requestSingleInstanceLock();
+
+app.on("second-instance", () => {
+  if (!hasSingleInstanceLock) {
+    return;
+  }
+  if (!mainWindow) {
+    return;
+  }
+  if (!mainWindow.isVisible()) {
+    mainWindow.show();
+  }
+  if (mainWindow.isMinimized()) {
+    mainWindow.restore();
+  }
+  mainWindow.focus();
+});
+
+app.on("window-all-closed", () => {
+  // Keep the process alive so scheduled automation and background runs continue.
+});
+
+app.on("before-quit", () => {
+  isQuitting = true;
+  if (heartbeatTimer) clearInterval(heartbeatTimer);
+  heartbeatTimer = null;
+  apiServer?.stop();
+  apiServer = null;
+  worker?.kill();
+  worker = null;
+  db?.close();
+});
+
+if (hasSingleInstanceLock) {
+  void bootstrap();
+} else {
+  app.quit();
+}
diff --git a/src/main/orchestrator/worker.ts b/src/main/orchestrator/worker.ts
new file mode 100644
index 00000000..2c445245
--- /dev/null
+++ b/src/main/orchestrator/worker.ts
@@ -0,0 +1,321 @@
+import { runningProcesses } from "@agentcompany/adapter-utils/server-utils";
+import { getConnectorDefinition } from "@main/connectors";
+import type { ConnectorId, RunStatus } from "@shared/types";
+
+/**
+ * Environment variables allowed to propagate from the host process to connector
+ * child processes. Any env var NOT in this list is stripped. Secret bindings
+ * resolved from the vault are always injected regardless of this allowlist.
+ */
+const ENV_ALLOWLIST: ReadonlySet<string> = new Set([
+  // PATH is required for command resolution
+  "PATH",
+  // Basic locale / terminal
+  "HOME", "USER", "SHELL", "LANG", "LC_ALL", "LC_CTYPE", "TERM", "TMPDIR",
+  // macOS-specific
+  "DEVELOPER_DIR", "SDKROOT",
+  // Node
+  "NODE_ENV", "NODE_OPTIONS",
+  // Git
+  "GIT_AUTHOR_NAME", "GIT_AUTHOR_EMAIL", "GIT_COMMITTER_NAME", "GIT_COMMITTER_EMAIL",
+  "GIT_SSH_COMMAND", "GIT_ASKPASS", "GIT_TERMINAL_PROMPT",
+  // XDG
+  "XDG_CONFIG_HOME", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_RUNTIME_DIR",
+  // Platform / display (Linux)
+  "DISPLAY", "WAYLAND_DISPLAY", "DBUS_SESSION_BUS_ADDRESS",
+  // Windows
+  "APPDATA", "LOCALAPPDATA", "USERPROFILE", "SYSTEMROOT", "COMSPEC", "PROGRAMFILES",
+  // AgentCompany injected
+  "AGENT_COMPANY_API_URL", "AGENT_COMPANY_API_KEY", "AGENT_COMPANY_RUN_ID",
+]);
+
+/**
+ * Build a sanitized environment for a connector child process.
+ * Only allowlisted host vars + explicitly resolved secret bindings are included.
+ */
+function buildSanitizedEnv(
+  hostEnv: Record<string, string>,
+  secretBindings: Record<string, string>,
+): Record<string, string> {
+  const result: Record<string, string> = {};
+  for (const key of ENV_ALLOWLIST) {
+    if (key in hostEnv) {
+      result[key] = hostEnv[key];
+    }
+  }
+  // Secret bindings always override — they are resolved from the vault
+  Object.assign(result, secretBindings);
+  return result;
+}
+
+/**
+ * Build a log redaction function that masks any secret values present in the env.
+ * Only values that look like secrets (length >= 8, not PATH-like) are redacted.
+ */
+function buildRedactor(env: Record<string, string>): (text: string) => string {
+  const sensitivePatterns: string[] = [];
+  for (const [key, value] of Object.entries(env)) {
+    // Skip short values, PATH, HOME, and other system vars unlikely to be secrets
+    if (value.length < 8) continue;
+    if (["PATH", "HOME", "USER", "SHELL", "LANG", "TMPDIR", "TERM"].includes(key)) continue;
+    sensitivePatterns.push(value);
+  }
+  if (sensitivePatterns.length === 0) return (text) => text;
+  // Sort by length descending so longer patterns are replaced first
+  sensitivePatterns.sort((a, b) => b.length - a.length);
+  return (text: string) => {
+    let result = text;
+    for (const pattern of sensitivePatterns) {
+      if (result.includes(pattern)) {
+        result = result.replaceAll(pattern, "[REDACTED]");
+      }
+    }
+    return result;
+  };
+}
+
+interface RunJob {
+  runId: string;
+  companyId: string;
+  taskId: string;
+  taskTitle: string;
+  taskDescription: string;
+  agentId: string;
+  agentName: string;
+  connectorId: ConnectorId;
+  workspaceId: string | null;
+  workspacePath: string | null;
+  command: string;
+  model: string | null;
+  thinkingEffort: string | null;
+  env: Record<string, string>;
+  sessionParams: Record<string, unknown> | null;
+  /** Rich system prompt with API instructions for autonomous operation */
+  systemPrompt: string | null;
+  /** Heartbeat trigger that caused this run */
+  trigger: string | null;
+}
+
+type ParentMessage =
+  | { type: "enqueue-run"; payload: RunJob }
+  | { type: "cancel-run"; runId: string };
+
+type ChildMessage =
+  | { type: "run-log"; runId: string; stream: "stdout" | "stderr"; chunk: string }
+  | { type: "run-status"; runId: string; status: RunStatus; message: string }
+  | {
+      type: "run-finished";
+      runId: string;
+      status: RunStatus;
+      summary: string | null;
+      errorMessage: string | null;
+      exitCode: number | null;
+      signal: string | null;
+      model: string | null;
+      sessionParams: Record<string, unknown> | null;
+      sessionDisplayId: string | null;
+      costUsd: number | null;
+      unattributedCost: boolean;
+    };
+
+const parentPort = process.parentPort;
+
+if (!parentPort) {
+  throw new Error("AgentCompany worker requires process.parentPort");
+}
+
+const activeByAgent = new Map<string, string>();
+const activeByWorkspace = new Map<string, string>();
+const queue: RunJob[] = [];
+const cancelledRuns = new Set<string>();
+
+function post(message: ChildMessage) {
+  parentPort.postMessage(message);
+}
+
+function workspaceKey(job: RunJob) {
+  return job.workspaceId ?? job.workspacePath ?? `task:${job.taskId}`;
+}
+
+function enqueue(job: RunJob) {
+  queue.push(job);
+  post({
+    type: "run-status",
+    runId: job.runId,
+    status: "queued",
+    message: "Run queued in orchestration worker.",
+  });
+  void maybeStartQueuedRuns();
+}
+
+async function maybeStartQueuedRuns() {
+  const readyJobs = [...queue];
+  for (const job of readyJobs) {
+    if (activeByAgent.has(job.agentId)) continue;
+    if (activeByWorkspace.has(workspaceKey(job))) continue;
+    const index = queue.findIndex((entry) => entry.runId === job.runId);
+    if (index >= 0) queue.splice(index, 1);
+    void startRun(job);
+  }
+}
+
+async function startRun(job: RunJob) {
+  const definition = getConnectorDefinition(job.connectorId);
+  const lockKey = workspaceKey(job);
+  activeByAgent.set(job.agentId, job.runId);
+  activeByWorkspace.set(lockKey, job.runId);
+  post({
+    type: "run-status",
+    runId: job.runId,
+    status: "running",
+    message: `Running with ${definition.label}.`,
+  });
+
+  // Build sanitized env: only allowlisted host vars + resolved secret bindings
+  const sanitizedEnv = buildSanitizedEnv(
+    Object.fromEntries(
+      Object.entries(process.env).filter((e): e is [string, string] => typeof e[1] === "string"),
+    ),
+    job.env,
+  );
+
+  // Build log redactor from secret bindings to prevent accidental secret leakage
+  const redact = buildRedactor(job.env);
+
+  try {
+    const result = await definition.module.execute({
+      runId: job.runId,
+      agent: {
+        id: job.agentId,
+        companyId: job.companyId,
+        name: job.agentName,
+        adapterType: job.connectorId,
+        adapterConfig: {},
+      },
+      runtime: {
+        sessionId:
+          typeof job.sessionParams?.sessionId === "string" ? job.sessionParams.sessionId : null,
+        sessionParams: job.sessionParams,
+        sessionDisplayId:
+          typeof job.sessionParams?.sessionId === "string" ? job.sessionParams.sessionId : null,
+        taskKey: job.taskId,
+      },
+      config: {
+        command: job.command,
+        cwd: job.workspacePath ?? process.cwd(),
+        model: job.model,
+        env: sanitizedEnv,
+        // Claude: thinking effort
+        effort: job.connectorId === "claude_local" ? (job.thinkingEffort ?? "") : "",
+        // Codex: reasoning effort
+        modelReasoningEffort: job.connectorId === "codex_local" ? (job.thinkingEffort ?? "") : "",
+        // Claude: run without permission prompts — required for headless operation
+        dangerouslySkipPermissions: true,
+        // Codex: bypass sandbox and approval prompts, skip git trust check
+        dangerouslyBypassApprovalsAndSandbox: true,
+        extraArgs: job.connectorId === "codex_local" ? ["--skip-git-repo-check"] : [],
+      },
+      context: {
+        taskId: job.taskId,
+        taskTitle: job.systemPrompt ?? job.taskTitle,
+        taskDescription: job.systemPrompt ? "" : job.taskDescription,
+        agentCompanyWorkspace: job.workspaceId || job.workspacePath ? {
+          workspaceId: job.workspaceId ?? "",
+          cwd: job.workspacePath ?? "",
+          source: "agent_company",
+        } : undefined,
+      },
+      onLog: async (stream, chunk) => {
+        post({
+          type: "run-log",
+          runId: job.runId,
+          stream,
+          chunk: redact(chunk),
+        });
+      },
+    });
+
+    const cancelled = cancelledRuns.has(job.runId);
+    const finalStatus = cancelled
+      ? "cancelled"
+      : result.timedOut
+        ? "timed_out"
+        : result.errorMessage || result.exitCode
+          ? "failed"
+          : "succeeded";
+
+    post({
+      type: "run-finished",
+      runId: job.runId,
+      status: finalStatus,
+      summary: result.summary ?? null,
+      errorMessage: result.errorMessage ?? null,
+      exitCode: result.exitCode,
+      signal: result.signal,
+      model: result.model ?? job.model,
+      sessionParams: result.sessionParams ?? null,
+      sessionDisplayId: result.sessionDisplayId ?? null,
+      costUsd: typeof result.costUsd === "number" ? result.costUsd : null,
+      unattributedCost: !result.costUsd,
+    });
+  } catch (error) {
+    post({
+      type: "run-finished",
+      runId: job.runId,
+      status: cancelledRuns.has(job.runId) ? "cancelled" : "failed",
+      summary: null,
+      errorMessage: error instanceof Error ? error.message : String(error),
+      exitCode: null,
+      signal: null,
+      model: job.model,
+      sessionParams: null,
+      sessionDisplayId: null,
+      costUsd: null,
+      unattributedCost: true,
+    });
+  } finally {
+    cancelledRuns.delete(job.runId);
+    activeByAgent.delete(job.agentId);
+    activeByWorkspace.delete(lockKey);
+    void maybeStartQueuedRuns();
+  }
+}
+
+function cancelRun(runId: string) {
+  const queuedIndex = queue.findIndex((entry) => entry.runId === runId);
+  if (queuedIndex >= 0) {
+    queue.splice(queuedIndex, 1);
+    post({
+      type: "run-finished",
+      runId,
+      status: "cancelled",
+      summary: "Cancelled before execution.",
+      errorMessage: null,
+      exitCode: null,
+      signal: null,
+      model: null,
+      sessionParams: null,
+      sessionDisplayId: null,
+      costUsd: null,
+      unattributedCost: true,
+    });
+    return;
+  }
+
+  cancelledRuns.add(runId);
+  const running = runningProcesses.get(runId);
+  if (running) {
+    running.child.kill("SIGTERM");
+  }
+}
+
+parentPort.on("message", (event) => {
+  const message = event.data as ParentMessage;
+  if (message.type === "enqueue-run") {
+    enqueue(message.payload);
+    return;
+  }
+  if (message.type === "cancel-run") {
+    cancelRun(message.runId);
+  }
+});
diff --git a/src/main/prompt-builder.ts b/src/main/prompt-builder.ts
new file mode 100644
index 00000000..64f9cfc6
--- /dev/null
+++ b/src/main/prompt-builder.ts
@@ -0,0 +1,453 @@
+import type { AgentRecord, ApprovalRecord, GoalRecord, ProjectRecord, TaskRecord } from "@shared/types";
+
+interface PromptContext {
+  agent: AgentRecord;
+  apiUrl: string;
+  apiKey: string;
+  runId: string;
+  task: TaskRecord | null;
+  companyName: string;
+  goals: GoalRecord[];
+  projects: ProjectRecord[];
+  directReports: AgentRecord[];
+  chainOfCommand: AgentRecord[];
+  assignedTasks: TaskRecord[];
+  allAgents: AgentRecord[];
+  pendingApprovals: ApprovalRecord[];
+  /** Tasks from direct reports that are awaiting this agent's review */
+  tasksAwaitingReview: TaskRecord[];
+  wakeReason: string | null;
+}
+
+export function buildSystemPrompt(ctx: PromptContext): string {
+  const sections: string[] = [];
+
+  // Identity
+  sections.push(`# Agent Identity
+You are ${ctx.agent.name}, a ${ctx.agent.role}${ctx.agent.title ? ` (${ctx.agent.title})` : ""} at ${ctx.companyName}.
+${ctx.agent.capabilities ? `Your capabilities: ${ctx.agent.capabilities}` : ""}
+`);
+
+  // Organization context
+  if (ctx.chainOfCommand.length > 0) {
+    sections.push(`# Chain of Command
+You report to: ${ctx.chainOfCommand.map((a) => `${a.name} (${a.role})`).join(" → ")}
+`);
+  } else {
+    sections.push(`# Position
+You are the top-level executive. You report directly to the human operator (Board).
+`);
+  }
+
+  if (ctx.directReports.length > 0) {
+    sections.push(`# Your Direct Reports
+${ctx.directReports.map((a) => `- ${a.name}: ${a.role}${a.title ? ` (${a.title})` : ""}${a.capabilities ? ` — ${a.capabilities}` : ""} [status: ${a.status}, connector: ${a.connectorId}]`).join("\n")}
+`);
+  }
+
+  // Active goals
+  const activeGoals = ctx.goals.filter((g) => g.status === "active" || g.status === "planned");
+  if (activeGoals.length > 0) {
+    sections.push(`# Active Goals
+${activeGoals.map((g) => `- [${g.id}] ${g.title}: ${g.description || "No description"} (status: ${g.status}${g.ownerAgentId === ctx.agent.id ? " — YOU OWN THIS" : ""})`).join("\n")}
+`);
+  }
+
+  // Active projects
+  const relevantProjects = ctx.projects.filter((p) =>
+    p.status === "in_progress" || p.status === "planned" ||
+    p.leadAgentId === ctx.agent.id,
+  );
+  if (relevantProjects.length > 0) {
+    sections.push(`# Projects
+${relevantProjects.map((p) => `- [${p.id}] ${p.name}: ${p.description || ""} (status: ${p.status}${p.leadAgentId === ctx.agent.id ? " — YOU LEAD THIS" : ""})`).join("\n")}
+`);
+  }
+
+  // Current task
+  if (ctx.task) {
+    sections.push(`# Current Task
+- ID: ${ctx.task.id}
+- Title: ${ctx.task.title}
+- Description: ${ctx.task.description || "No description"}
+- Status: ${ctx.task.status}
+- Priority: ${ctx.task.priority}
+${ctx.task.projectId ? `- Project: ${ctx.projects.find((p) => p.id === ctx.task!.projectId)?.name ?? ctx.task.projectId}` : ""}
+${ctx.task.goalId ? `- Goal: ${ctx.goals.find((g) => g.id === ctx.task!.goalId)?.title ?? ctx.task.goalId}` : ""}
+`);
+  }
+
+  // Assigned tasks
+  if (ctx.assignedTasks.length > 0) {
+    sections.push(`# Your Assigned Tasks
+${ctx.assignedTasks.map((t) => `- [${t.id}] ${t.title} (status: ${t.status}, priority: ${t.priority})`).join("\n")}
+`);
+  }
+
+  // Tasks from direct reports awaiting this agent's review
+  if (ctx.tasksAwaitingReview.length > 0) {
+    sections.push(`# Tasks Awaiting Your Review
+${ctx.tasksAwaitingReview.map((t) => {
+  const assigneeName = ctx.allAgents.find((a) => a.id === t.assigneeAgentId)?.name ?? "Unknown";
+  return `- [${t.id}] ${t.title} (by ${assigneeName}, priority: ${t.priority})`;
+}).join("\n")}
+
+These tasks have been submitted for your review by your direct reports. Read their comments, then either:
+- Approve: PATCH /api/issues/{issueId} with status "done" and an approving comment
+- Request changes: PATCH /api/issues/{issueId} with status "in_progress" and feedback comment
+`);
+  }
+
+  // Pending Approvals (Step 2b)
+  if (ctx.pendingApprovals.length > 0) {
+    sections.push(`# Pending Approvals
+${ctx.pendingApprovals.map((a) => `- [${a.id}] ${a.type}: ${a.payloadSummary} (status: ${a.state})`).join("\n")}
+`);
+  }
+
+  // API instructions
+  sections.push(`# AgentCompany API
+You have access to the AgentCompany API to manage your work. Base URL: ${ctx.apiUrl}
+Use the environment variables AGENT_COMPANY_API_URL and AGENT_COMPANY_API_KEY for authenticated calls.
+Do not print or echo AGENT_COMPANY_API_KEY into comments, summaries, or external tools.
+
+## Available Endpoints
+
+### Get Your Identity
+GET /api/agents/me
+Returns your agent record with chain of command.
+
+### List Your Assigned Tasks
+GET /api/companies/{companyId}/issues?assigneeAgentId={yourId}&status=todo,in_progress,blocked
+Returns tasks assigned to you.
+
+### Checkout a Task (claim it)
+POST /api/issues/{issueId}/checkout
+Body: { "agentId": "${ctx.agent.id}" }
+Returns 409 if already claimed by another agent.
+
+### Update Task Status
+PATCH /api/issues/{issueId}
+Body: { "status": "done", "comment": "What was accomplished" }
+Valid statuses: backlog, todo, in_progress, in_review, done, blocked, cancelled
+
+### Create a Subtask (delegate work)
+POST /api/companies/{companyId}/issues
+Body: {
+  "title": "Task title",
+  "description": "Task description",
+  "assigneeAgentId": "{reportId}",
+  "parentId": "{parentIssueId}",
+  "projectId": "{projectId}",
+  "goalId": "{goalId}",
+  "priority": "medium",
+  "status": "todo"
+}
+Always set parentId to maintain task hierarchy.
+
+### Create a Project
+POST /api/companies/{companyId}/projects
+Body: {
+  "name": "Project name",
+  "description": "Project description",
+  "goalId": "{goalId}",
+  "leadAgentId": "{agentId}",
+  "status": "planned"
+}
+
+### Create a Goal
+POST /api/companies/{companyId}/goals
+Body: {
+  "title": "Goal title",
+  "description": "Definition of done",
+  "parentId": "{optionalParentGoalId}",
+  "ownerAgentId": "{agentId}",
+  "status": "active"
+}
+
+### Propose a Hire
+POST /api/companies/{companyId}/agents
+Body: {
+  "name": "New hire name",
+  "role": "CTO",
+  "title": "Engineering lead",
+  "reportsTo": "{managerAgentId}",
+  "connectorId": "codex_local",
+  "workspaceId": "{optionalWorkspaceId}",
+  "model": "optional-model",
+  "capabilities": "What this hire should own",
+  "budgetMonthlyUsd": 250
+}
+This creates the agent in pending approval state and opens a hire approval for the Board.
+
+### Add Comment (communicate with other agents)
+POST /api/issues/{issueId}/comments
+Body: { "body": "Your message" }
+
+### Read Comments
+GET /api/issues/{issueId}/comments
+
+### Request Approval (when you need human permission)
+POST /api/companies/{companyId}/approvals
+Body: {
+  "type": "secret_access",
+  "relatedTaskId": "{taskId}",
+  "requestedByAgentId": "${ctx.agent.id}",
+  "payloadSummary": "Need access to X account credentials",
+  "impactSummary": "Required for social media marketing campaign"
+}
+Approval types: hire_agent, approve_ceo_strategy, dangerous_command, secret_access
+
+### Check Approval Status
+GET /api/approvals/{approvalId}
+
+### List Company Approvals
+GET /api/companies/{companyId}/approvals?requestedByAgentId={yourId}&status=pending,approved,revision_requested
+
+### List All Agents
+GET /api/companies/{companyId}/agents
+
+### List Company Goals
+GET /api/companies/{companyId}/goals
+
+### List Company Projects
+GET /api/companies/{companyId}/projects
+`);
+
+  // Step 1: CEO role detection fix — use chainOfCommand, not directReports
+  const isCEO = ctx.chainOfCommand.length === 0;
+  const isExecutive = isCEO;
+  const isManager = !isCEO && ctx.directReports.length > 0;
+
+  if (isExecutive) {
+    // Step 2c: CEO phased prompts
+    // Filter to active reports only (exclude pending_approval, terminated)
+    const activeReports = ctx.directReports.filter(
+      (a) => a.status !== "pending_approval" && a.status !== "terminated",
+    );
+    const hasPendingOrgApproval = ctx.pendingApprovals.some(
+      (a) => a.type === "approve_ceo_strategy",
+    );
+    // Check if there are pending hires (submitted but not yet approved by Board)
+    const hasPendingHires = ctx.directReports.some(
+      (a) => a.status === "pending_approval",
+    );
+
+    if (activeReports.length === 0 && !hasPendingOrgApproval && !hasPendingHires) {
+      // Phase 0 — Team Building
+      sections.push(`# Operating Instructions (CEO — Team Building Phase)
+
+You are the new CEO. Your company has no active team members yet.
+
+Step 1: Review Goals
+- Check Active Goals to understand the company direction.
+
+Step 2: Design Organization
+- Based on goals, determine what C-suite roles are needed (CTO/CMO/CPO etc.)
+- Use POST /api/companies/{companyId}/agents to submit hire requests
+- Each role needs clear capabilities, connector, workspace
+
+Step 3: Submit Org Plan for Approval
+- Create an approve_ceo_strategy approval with your org structure plan
+- Use GET /api/approvals/{id} to check approval status
+- Do NOT delegate work or create projects until the Board approves
+
+IMPORTANT: You MUST wait for the Board (human operator) to approve your org structure before starting operations.
+`);
+    } else if (hasPendingOrgApproval) {
+      // Phase 1 — Awaiting Org Approval
+      sections.push(`# Operating Instructions (CEO — Awaiting Org Approval)
+
+You have submitted an organization strategy for Board approval.
+Check your pending approvals. If revision_requested, modify your team structure accordingly.
+Do NOT delegate business tasks until the org strategy is approved.
+`);
+    } else if (activeReports.length === 0 && hasPendingHires) {
+      // Phase 0.5 — Hires submitted, awaiting Board action
+      sections.push(`# Operating Instructions (CEO — Awaiting Hire Approvals)
+
+You have submitted hire requests. The Board (human operator) is reviewing them.
+If you haven't already, submit an approve_ceo_strategy approval with your organization plan.
+Check your pending approvals for updates. Do NOT delegate business tasks until your team is active and your org strategy is approved.
+`);
+    } else {
+      // Phase 2 — Normal Operations
+      sections.push(`# Operating Instructions (Executive / CEO)
+
+You are the top executive. Your primary responsibilities:
+
+1. **Goal Decomposition**: When you have active goals, break them down into concrete projects.
+   - Create projects with clear scope and assign a lead from your direct reports.
+   - Each project should have a goal linked to it.
+
+2. **Delegation**: Assign projects and high-level tasks to your C-suite reports.
+   - Match tasks to the agent whose role fits best.
+   - CTO/Engineering Lead → technical tasks
+   - CMO/Marketing Lead → marketing, growth, content tasks
+   - CPO/Product Lead → product design, UX, feature scoping
+   - Other roles → match by capabilities description
+
+3. **Review Completed Work**: When you receive a "subtask_completed" wake:
+   - Check which tasks/projects from your reports have status "in_review" or "done".
+   - Read comments on those tasks to understand what was accomplished.
+   - If satisfactory: update the task status to "done" and leave an approving comment.
+   - If changes are needed: post a comment with feedback and set the task back to "in_progress".
+
+4. **Coordination**: Check on project progress. Read comments from your reports.
+   If a report is blocked or needs credentials, either:
+   a. Resolve it yourself if you can
+   b. Escalate to the Board by creating an approval request
+
+5. **Credential Escalation**: When a report needs account access:
+   - Create a secret_access approval for the Board
+   - After approval, notify the requesting agent via comment
+
+6. **Hiring**: When the team needs additional members:
+   - Use POST /api/companies/{companyId}/agents to propose new hires
+   - New hires will be pending Board approval
+   - Assign them to report to the appropriate C-suite lead
+
+7. **Reporting**: After each run, leave a summary comment on your primary task.
+
+IMPORTANT: Do NOT try to do all the work yourself. Your job is to DELEGATE, REVIEW, and COORDINATE.
+`);
+    }
+  } else if (isManager) {
+    // Step 2d: Manager with credential escalation instruction
+    sections.push(`# Operating Instructions (Manager)
+
+You are a middle manager. Your primary responsibilities:
+
+1. **Task Breakdown**: When assigned a project or high-level task, break it into smaller, actionable subtasks.
+   - Use POST /api/companies/{companyId}/issues to create subtasks.
+   - Set assigneeAgentId to one of your direct reports.
+   - Set parentId to link subtasks to the parent task.
+
+2. **Delegation**: Assign subtasks to your direct reports based on their capabilities.
+   - Match each report's capabilities to the right subtask.
+   - Each subtask should have a clear title and description explaining what needs to be done.
+
+3. **Review Completed Work**: When you receive a "subtask_completed" wake:
+   - Check which subtasks have status "in_review" or "done".
+   - Read comments on those tasks to understand what was done.
+   - If the work is satisfactory: update the subtask status to "done" and leave an approving comment.
+   - If changes are needed: post a comment explaining what needs to change, and set the subtask status back to "in_progress".
+   - This is your core management duty — do NOT skip reviews.
+
+4. **Ask Questions / Give Feedback**: Use comments to communicate with your reports.
+   - POST /api/issues/{issueId}/comments to ask a question or give feedback on any task.
+   - The task assignee will be automatically woken and notified.
+
+5. **Progress Tracking**: Check comments and task statuses of your reports.
+   - GET /api/companies/{companyId}/issues to see all tasks and their statuses.
+   - GET /api/issues/{issueId}/comments to read discussion on specific tasks.
+
+6. **Escalation**: If you or your reports need credentials:
+   - Post a comment on the parent task explaining the need.
+   - Your manager will be notified and escalate further.
+   - Do NOT create secret_access approvals directly — escalate upward.
+
+7. **Hiring**: If you need additional team members to handle workload:
+   - Use POST /api/companies/{companyId}/agents to propose new hires that report to you.
+   - New hires require Board approval before they can start working.
+
+8. **Reporting**: Update your task status and leave summary comments for your manager.
+`);
+  } else {
+    // Step 2d: IC with credential escalation instruction
+    sections.push(`# Operating Instructions (Individual Contributor)
+
+You are an individual contributor. Your primary responsibilities:
+
+1. **Execute Tasks**: Work on your assigned tasks using your capabilities and tools.
+   - Focus on tasks that match your role and capabilities.
+   - Use the tools available in your workspace (CLI, code editors, etc.) to produce deliverables.
+
+2. **Checkout First**: Always checkout a task before starting work on it.
+   - POST /api/issues/{issueId}/checkout to claim the task.
+
+3. **Break Down Complex Work**: If your assigned task is large or complex:
+   - Create subtasks for yourself using POST /api/companies/{companyId}/issues.
+   - Set assigneeAgentId to your own ID and parentId to the original task.
+   - This helps you track progress on multi-step work.
+
+4. **Report Progress**: Leave comments on your tasks with progress updates.
+   - POST /api/issues/{issueId}/comments with a summary of what you did.
+   - Your manager will be automatically notified of your comments.
+
+5. **Submit for Review**: When your work is complete, update the task status to "in_review".
+   - PATCH /api/issues/{issueId} with status "in_review" and a comment describing what was done.
+   - Your manager will be automatically notified to review your work.
+   - Wait for your manager's feedback before marking as "done".
+
+6. **Ask Questions**: If requirements are unclear or you need guidance:
+   - Post a comment on your task with your question.
+   - Your manager will be notified and can respond.
+   - Check comments on your task for any feedback or answers.
+
+7. **Handle Review Feedback**: When your manager posts a comment or sets your task back to "in_progress":
+   - Read the comment to understand what changes are needed.
+   - Make the changes and submit for review again.
+
+8. **Report Blockers**: If you're blocked (need credentials, unclear requirements, etc.):
+   - Update task status to "blocked"
+   - Leave a comment explaining what's needed
+   - Your manager will be notified
+
+9. **Request Credentials**: If you need credentials (API keys, account access, etc.):
+   - Post a comment on your task explaining what you need and why
+   - Your manager will be notified and help resolve it
+   - Only create a secret_access approval directly if you have NO manager
+
+10. **Propose Hires**: If you believe the team needs additional members:
+    - Use POST /api/companies/{companyId}/agents to propose a new hire.
+    - Set reportsTo to your manager's agent ID.
+    - The Board must approve before the hire becomes active.
+`);
+  }
+
+  sections.push(`# Important Rules
+- Company ID: ${ctx.agent.companyId}
+- Your Agent ID: ${ctx.agent.id}
+- Current Run ID: ${ctx.runId}
+- Always include appropriate headers when calling the API:
+  Authorization: Bearer $AGENT_COMPANY_API_KEY
+  Content-Type: application/json
+  X-Agent-Company-Run-Id: ${ctx.runId}
+- Be concise and action-oriented. Focus on making progress.
+- If your current task is already done, check for other assigned tasks.
+- Respond with a concise execution summary when complete.
+- CRITICAL: Only work on the tasks and goals described above. Do NOT use any external task manager, prior conversation state, or cached requests from previous sessions. Your sole source of truth is the AgentCompany API and the task description in this prompt. Ignore any MCP tools, TaskManager servers, or prior request/task IDs not from the AgentCompany API.
+- CRITICAL: Stay in the working directory you were started in. Do NOT cd or navigate to other projects or repositories.
+`);
+
+  return sections.join("\n");
+}
+
+export function buildTaskPrompt(ctx: PromptContext): string {
+  const systemPrompt = buildSystemPrompt(ctx);
+  const parts: string[] = [systemPrompt];
+
+  // Step 8: Wake reason injection
+  if (ctx.wakeReason && ctx.wakeReason !== "timer" && ctx.wakeReason !== "manual") {
+    const reasonMap: Record<string, string> = {
+      assignment: "You have been assigned new work.",
+      goal_activated: "A goal you own has been activated.",
+      approval_resolved: "An approval you requested has been resolved. Check your pending approvals.",
+      subtask_completed: "A subtask assigned to one of your reports has been completed or moved to review.",
+      comment: "A new comment has been posted on one of your tasks. Check comments for updates.",
+      report_blocked: "One of your reports is blocked and needs your help.",
+      report_failed: "A run by one of your reports has failed. Check their task status.",
+    };
+    const explanation = reasonMap[ctx.wakeReason] ?? `Trigger: ${ctx.wakeReason}`;
+    parts.push(`\n# Wake Reason\n${explanation}\n`);
+  }
+
+  if (ctx.task) {
+    parts.push(`\n---\n\nYour immediate task:\n\nTitle: ${ctx.task.title}\nDescription: ${ctx.task.description || "No additional description."}\nPriority: ${ctx.task.priority}\n\nPlease execute this task according to your operating instructions.`);
+  } else {
+    parts.push(`\n---\n\nYou have been woken for a heartbeat check. Review your assigned tasks and active goals, then take appropriate action. If there's nothing to do, respond with a brief status summary.`);
+  }
+
+  return parts.join("");
+}
diff --git a/src/main/vault.ts b/src/main/vault.ts
new file mode 100644
index 00000000..3b11f827
--- /dev/null
+++ b/src/main/vault.ts
@@ -0,0 +1,91 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { safeStorage } from "electron";
+
+export class SecretVault {
+  private readonly keyPath: string;
+
+  constructor(private readonly profileDir: string) {
+    this.keyPath = join(profileDir, "vault.key");
+  }
+
+  getBackendLabel(): string {
+    if (this.canUseSafeStorage()) {
+      const selectedBackend = typeof safeStorage?.getSelectedStorageBackend === "function"
+        ? safeStorage.getSelectedStorageBackend()
+        : "platform";
+      if (selectedBackend && selectedBackend !== "basic_text") {
+        return `safe_storage:${selectedBackend}`;
+      }
+    }
+    return this.allowInsecureVaultFallback() ? "vault:aes-256-gcm" : "unavailable";
+  }
+
+  encrypt(value: string): { backend: "safe_storage" | "vault"; payload: Buffer } {
+    if (this.canUseSafeStorage()) {
+      const selectedBackend = typeof safeStorage?.getSelectedStorageBackend === "function"
+        ? safeStorage.getSelectedStorageBackend()
+        : "platform";
+      if (selectedBackend !== "basic_text") {
+        return {
+          backend: "safe_storage",
+          payload: safeStorage.encryptString(value),
+        };
+      }
+    }
+
+    if (!this.allowInsecureVaultFallback()) {
+      throw new Error("Secure secret storage is unavailable. AgentCompany requires OS-backed credential storage unless AGENTCOMPANY_ALLOW_INSECURE_VAULT=true is set for test-only environments.");
+    }
+
+    const iv = randomBytes(12);
+    const key = this.ensureKey();
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const encrypted = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return {
+      backend: "vault",
+      payload: Buffer.concat([iv, tag, encrypted]),
+    };
+  }
+
+  decrypt(backend: "safe_storage" | "vault", payload: Buffer): string {
+    if (backend === "safe_storage") {
+      if (!this.canUseSafeStorage()) {
+        throw new Error("safeStorage backend is unavailable in the current runtime.");
+      }
+      return safeStorage.decryptString(payload);
+    }
+    const key = this.ensureKey();
+    const iv = payload.subarray(0, 12);
+    const tag = payload.subarray(12, 28);
+    const encrypted = payload.subarray(28);
+    const decipher = createDecipheriv("aes-256-gcm", key, iv);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(encrypted), decipher.final()]).toString("utf8");
+  }
+
+  private ensureKey(): Buffer {
+    mkdirSync(this.profileDir, { recursive: true });
+    if (!existsSync(this.keyPath)) {
+      const nextKey = randomBytes(32);
+      writeFileSync(this.keyPath, nextKey);
+      chmodSync(this.keyPath, 0o600);
+      return nextKey;
+    }
+    return readFileSync(this.keyPath);
+  }
+
+  private canUseSafeStorage() {
+    return typeof safeStorage?.isEncryptionAvailable === "function" && safeStorage.isEncryptionAvailable();
+  }
+
+  private allowInsecureVaultFallback() {
+    return (
+      process.env.AGENTCOMPANY_ALLOW_INSECURE_VAULT === "true" ||
+      process.env.NODE_ENV === "test" ||
+      process.env.VITEST === "true"
+    );
+  }
+}
diff --git a/src/preload/index.ts b/src/preload/index.ts
new file mode 100644
index 00000000..c8fdf0c8
--- /dev/null
+++ b/src/preload/index.ts
@@ -0,0 +1,55 @@
+import { contextBridge, ipcRenderer } from "electron";
+import {
+  IPC_CHANNELS,
+  type DesktopApi,
+} from "@shared/contracts";
+import type { DesktopEvent } from "@shared/types";
+
+const api: DesktopApi = {
+  loadSnapshot: () => ipcRenderer.invoke(IPC_CHANNELS.loadSnapshot),
+  pickDirectory: () => ipcRenderer.invoke(IPC_CHANNELS.pickDirectory),
+  openPath: (targetPath) => ipcRenderer.invoke(IPC_CHANNELS.openPath, targetPath),
+  saveCompany: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveCompany, input),
+  setCurrentCompany: (companyId) => ipcRenderer.invoke(IPC_CHANNELS.setCurrentCompany, companyId),
+  saveConnector: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveConnector, input),
+  testConnector: (id) => ipcRenderer.invoke(IPC_CHANNELS.testConnector, id),
+  saveWorkspace: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveWorkspace, input),
+  saveAgent: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveAgent, input),
+  saveGoal: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveGoal, input),
+  saveProject: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveProject, input),
+  saveTask: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveTask, input),
+  requestApproval: (input) => ipcRenderer.invoke(IPC_CHANNELS.requestApproval, input),
+  decideApproval: (input) => ipcRenderer.invoke(IPC_CHANNELS.decideApproval, input),
+  saveSecret: (input) => ipcRenderer.invoke(IPC_CHANNELS.saveSecret, input),
+  startTaskRun: (input) => ipcRenderer.invoke(IPC_CHANNELS.startTaskRun, input),
+  cancelRun: (input) => ipcRenderer.invoke(IPC_CHANNELS.cancelRun, input),
+  getRunLog: (input) => ipcRenderer.invoke(IPC_CHANNELS.getRunLog, input),
+  backupProfile: () => ipcRenderer.invoke(IPC_CHANNELS.backupProfile),
+  restoreProfile: () => ipcRenderer.invoke(IPC_CHANNELS.restoreProfile),
+  updateSettings: (input) => ipcRenderer.invoke(IPC_CHANNELS.updateSettings, input),
+  checkForUpdates: () => ipcRenderer.invoke(IPC_CHANNELS.checkForUpdates),
+  deleteCompany: (companyId) => ipcRenderer.invoke(IPC_CHANNELS.deleteCompany, companyId),
+  deleteAgent: (input) => ipcRenderer.invoke(IPC_CHANNELS.deleteAgent, input),
+  deleteTask: (input) => ipcRenderer.invoke(IPC_CHANNELS.deleteTask, input),
+  deleteGoal: (input) => ipcRenderer.invoke(IPC_CHANNELS.deleteGoal, input),
+  deleteProject: (input) => ipcRenderer.invoke(IPC_CHANNELS.deleteProject, input),
+  deleteWorkspace: (input) => ipcRenderer.invoke(IPC_CHANNELS.deleteWorkspace, input),
+  deleteApproval: (input) => ipcRenderer.invoke(IPC_CHANNELS.deleteApproval, input),
+  deleteSecret: (input) => ipcRenderer.invoke(IPC_CHANNELS.deleteSecret, input),
+  getSidebarBadges: (companyId) => ipcRenderer.invoke(IPC_CHANNELS.getSidebarBadges, companyId),
+  listConnectorModels: (connectorId) => ipcRenderer.invoke(IPC_CHANNELS.listConnectorModels, connectorId),
+  addComment: (input) => ipcRenderer.invoke(IPC_CHANNELS.addComment, input),
+  listComments: (input) => ipcRenderer.invoke(IPC_CHANNELS.listComments, input),
+  setHeartbeat: (input) => ipcRenderer.invoke(IPC_CHANNELS.setHeartbeat, input),
+  triggerHeartbeat: (input) => ipcRenderer.invoke(IPC_CHANNELS.triggerHeartbeat, input),
+  getApiPort: () => ipcRenderer.invoke(IPC_CHANNELS.getApiPort),
+  subscribe: (callback: (event: DesktopEvent) => void) => {
+    const listener = (_event: Electron.IpcRendererEvent, payload: DesktopEvent) => callback(payload);
+    ipcRenderer.on(IPC_CHANNELS.rendererEvent, listener);
+    return () => {
+      ipcRenderer.removeListener(IPC_CHANNELS.rendererEvent, listener);
+    };
+  },
+};
+
+contextBridge.exposeInMainWorld("agentCompany", api);
diff --git a/src/renderer/App.tsx b/src/renderer/App.tsx
new file mode 100644
index 00000000..4aea9d9a
--- /dev/null
+++ b/src/renderer/App.tsx
@@ -0,0 +1,1270 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { AnimatePresence, motion } from "framer-motion";
+import {
+  ArrowClockwise,
+  CaretUpDown,
+  Check,
+  Command,
+  Cpu,
+  CurrencyCircleDollar,
+  FolderOpen,
+  Gear,
+  Kanban,
+  ListChecks,
+  MagnifyingGlass,
+  Plus,
+  Pulse,
+  Robot,
+  ShieldCheck,
+  Trash,
+  SquaresFour,
+  Target,
+  TreeStructure,
+  SidebarSimple,
+  TerminalWindow,
+  WarningCircle,
+  Wrench,
+  X,
+} from "@phosphor-icons/react";
+import type {
+  CompanyRecord,
+  DesktopEvent,
+  ProfileSnapshot,
+  RunRecord,
+  SectionId,
+} from "@shared/types";
+import type { SidebarBadges } from "@shared/contracts";
+import { CompanyOnboarding } from "./components/CompanyOnboarding";
+import { ConnectorEditor } from "./components/connectors";
+import { EntityWorkspace } from "./components/EntityWorkspace";
+import {
+  ActivityList,
+  ApprovalInspector,
+  ApprovalList,
+  BudgetSummary,
+  CostList,
+  PendingReviewList,
+  SecretCreator,
+  SettingsPane,
+  TaskCreator,
+  TaskInspector,
+  TaskQueue,
+  WorkspaceCreator,
+  WorkspaceList,
+} from "./components/execution";
+import {
+  AgentCreator,
+  AgentEditor,
+  AgentRoster,
+  GoalCreator,
+  GoalEditor,
+  GoalList,
+  OrgChart,
+  ProjectCreator,
+  ProjectEditor,
+  ProjectList,
+} from "./components/organization";
+import { ActionButton, ErrorBoundary, ListFrame, ListRow, Modal, Panel, SectionButton, Select, StatusPill, useFocusTrap, useReducedMotion } from "./components/ui";
+import { unwrap } from "./lib/desktop";
+import { formatMoney, formatTime } from "./lib/formatters";
+
+type NavItem = { id: SectionId; label: string; icon: typeof SquaresFour };
+type NavGroup = { label: string; items: NavItem[] };
+
+const navGroups: NavGroup[] = [
+  {
+    label: "Overview",
+    items: [
+      { id: "overview", label: "Dashboard", icon: SquaresFour },
+    ],
+  },
+  {
+    label: "Organization",
+    items: [
+      { id: "agents", label: "Agents", icon: Robot },
+      { id: "orgchart", label: "Org Chart", icon: TreeStructure },
+      { id: "goals", label: "Goals", icon: Target },
+      { id: "projects", label: "Projects", icon: Kanban },
+      { id: "tasks", label: "Tasks", icon: ListChecks },
+    ],
+  },
+  {
+    label: "Operations",
+    items: [
+      { id: "approvals", label: "Approvals", icon: ShieldCheck },
+      { id: "costs", label: "Costs", icon: CurrencyCircleDollar },
+      { id: "activity", label: "Activity", icon: Pulse },
+    ],
+  },
+  {
+    label: "Infrastructure",
+    items: [
+      { id: "connectors", label: "Connectors", icon: Cpu },
+      { id: "workspaces", label: "Workspaces", icon: FolderOpen },
+    ],
+  },
+];
+
+const navItems: NavItem[] = navGroups.flatMap((group) => group.items).concat({ id: "settings", label: "Settings", icon: Gear });
+
+export function App() {
+  const reducedMotion = useReducedMotion();
+  const noMotion = { duration: 0 };
+  const pageTransition = reducedMotion ? noMotion : { duration: 0.24, ease: [0.16, 1, 0.3, 1] as const };
+  const panelTransition = reducedMotion ? noMotion : { duration: 0.22, ease: [0.16, 1, 0.3, 1] as const };
+
+  const [snapshot, setSnapshot] = useState<ProfileSnapshot | null>(null);
+  const [section, setSection] = useState<SectionId>("overview");
+  const [error, setError] = useState<string | null>(null);
+  const [commandPaletteOpen, setCommandPaletteOpen] = useState(false);
+  const [consoleOpen, setConsoleOpen] = useState(false);
+  const [sidebarCollapsed, setSidebarCollapsed] = useState(false);
+  const [companySwitcherOpen, setCompanySwitcherOpen] = useState(false);
+  const [confirmDeleteCompanyId, setConfirmDeleteCompanyId] = useState<string | null>(null);
+  const [selectedTaskId, setSelectedTaskId] = useState<string | null>(null);
+  const [selectedConnectorId, setSelectedConnectorId] = useState<string | null>(null);
+  const [selectedApprovalId, setSelectedApprovalId] = useState<string | null>(null);
+  const [selectedRunId, setSelectedRunId] = useState<string | null>(null);
+  const [selectedAgentId, setSelectedAgentId] = useState<string | null>(null);
+  const [selectedGoalId, setSelectedGoalId] = useState<string | null>(null);
+  const [selectedProjectId, setSelectedProjectId] = useState<string | null>(null);
+  const logBufferRef = useRef<Record<string, string>>({});
+  const [, setLogRevision] = useState(0);
+  const [badges, setBadges] = useState<SidebarBadges | null>(null);
+  const [commandPaletteSearch, setCommandPaletteSearch] = useState("");
+  const [showOnboarding, setShowOnboarding] = useState(false);
+
+  const refresh = useCallback(async () => {
+    try {
+      const next = unwrap<ProfileSnapshot>(await window.agentCompany.loadSnapshot());
+      setSnapshot(next);
+      // Tasks are opened explicitly by clicking; don't auto-select.
+      if (!selectedConnectorId && next.connectors[0]) setSelectedConnectorId(next.connectors[0].id);
+      if (!selectedApprovalId && next.approvals[0]) setSelectedApprovalId(next.approvals[0].id);
+      if (!selectedRunId && next.runs[0]) setSelectedRunId(next.runs[0].id);
+      if (next.currentCompanyId) {
+        const badgeResult = await window.agentCompany.getSidebarBadges(next.currentCompanyId);
+        if (badgeResult.ok) setBadges(badgeResult.data);
+      }
+      setError(null);
+    } catch (nextError) {
+      setError(nextError instanceof Error ? nextError.message : String(nextError));
+    }
+  }, [selectedApprovalId, selectedConnectorId, selectedRunId]);
+
+  useEffect(() => {
+    void refresh();
+    const unsubscribe = window.agentCompany.subscribe((event: DesktopEvent) => {
+      if (event.type === "run-log") {
+        logBufferRef.current = {
+          ...logBufferRef.current,
+          [event.runId]: `${logBufferRef.current[event.runId] ?? ""}${event.chunk}`,
+        };
+        setLogRevision((r) => r + 1);
+        return;
+      }
+      if (event.type === "shortcut") {
+        if (event.action === "toggle-command-palette") setCommandPaletteOpen((current) => !current);
+        if (event.action === "toggle-console") setConsoleOpen((current) => !current);
+        if (event.action === "refresh") void refresh();
+        return;
+      }
+      void refresh();
+    });
+    return unsubscribe;
+  }, [refresh]);
+
+  useEffect(() => {
+    if (!selectedRunId) return;
+    void (async () => {
+      const result = await window.agentCompany.getRunLog({ runId: selectedRunId });
+      if (result.ok) {
+        logBufferRef.current = { ...logBufferRef.current, [selectedRunId]: result.data };
+        setLogRevision((r) => r + 1);
+        return;
+      }
+      setError(result.error.message);
+    })();
+  }, [selectedRunId]);
+
+  useEffect(() => {
+    if (!snapshot) return;
+    const root = document.documentElement;
+    root.dataset.theme = snapshot.theme;
+    root.style.colorScheme = snapshot.theme === "system" ? "light dark" : snapshot.theme;
+  }, [snapshot]);
+
+  // Global Escape key handler for command palette
+  useEffect(() => {
+    if (!commandPaletteOpen) return;
+    function onKey(event: KeyboardEvent) {
+      if (event.key === "Escape") {
+        setCommandPaletteOpen(false);
+        setCommandPaletteSearch("");
+      }
+    }
+    document.addEventListener("keydown", onKey);
+    return () => document.removeEventListener("keydown", onKey);
+  }, [commandPaletteOpen]);
+
+  const paletteTrapRef = useFocusTrap(commandPaletteOpen);
+
+  const currentCompany = useMemo<CompanyRecord | null>(() => {
+    if (!snapshot) return null;
+    return snapshot.companies.find((company) => company.id === snapshot.currentCompanyId) ?? snapshot.companies[0] ?? null;
+  }, [snapshot]);
+
+  const tasks = useMemo(() => snapshot?.tasks.filter((task) => !currentCompany || task.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const selectedTask = selectedTaskId ? (tasks.find((task) => task.id === selectedTaskId) ?? null) : null;
+  const selectedConnector = snapshot?.connectors.find((connector) => connector.id === selectedConnectorId) ?? snapshot?.connectors[0] ?? null;
+  const approvals = useMemo(() => snapshot?.approvals.filter((approval) => !currentCompany || approval.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const selectedApproval = approvals.find((approval) => approval.id === selectedApprovalId) ?? approvals[0] ?? null;
+  const runs = useMemo(() => snapshot?.runs.filter((run) => !currentCompany || run.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const selectedRun = runs.find((run) => run.id === selectedRunId) ?? runs[0] ?? null;
+
+  // Derived selections for organization entities
+  const companyAgents = useMemo(() => snapshot?.agents.filter((a) => !currentCompany || a.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const selectedAgent = companyAgents.find((a) => a.id === selectedAgentId) ?? null;
+  const companyGoals = useMemo(() => snapshot?.goals.filter((g) => !currentCompany || g.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const selectedGoal = companyGoals.find((g) => g.id === selectedGoalId) ?? null;
+  const companyProjects = useMemo(() => snapshot?.projects.filter((p) => !currentCompany || p.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const selectedProject = companyProjects.find((p) => p.id === selectedProjectId) ?? null;
+
+  // Sidebar badge mapping
+  const navBadges = useMemo<Partial<Record<SectionId, { count: number; tone: "default" | "warn" | "danger" }>>>(() => badges ? {
+    tasks: badges.todoTasks > 0 ? { count: badges.todoTasks, tone: "default" } : undefined,
+    approvals: badges.pendingApprovals > 0 ? { count: badges.pendingApprovals, tone: "warn" } : undefined,
+    costs: badges.budgetWarnings > 0 ? { count: badges.budgetWarnings, tone: "danger" } : undefined,
+  } : {}, [badges]);
+
+  const liveRuns = useMemo(() => runs.filter((run) => run.status === "running" || run.status === "queued"), [runs]);
+  const failedRuns = useMemo(() => runs.filter((run) => ["failed", "timed_out", "interrupted"].includes(run.status)), [runs]);
+  const pendingApprovals = useMemo(() => approvals.filter((approval) => approval.state === "pending"), [approvals]);
+  const tasksInProgress = useMemo(() => tasks.filter((task) => task.status === "in_progress" || task.status === "in_review"), [tasks]);
+  const companyWorkspaces = useMemo(() => snapshot?.workspaces.filter((workspace) => !currentCompany || workspace.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const companyCosts = useMemo(() => snapshot?.costs.filter((entry) => !currentCompany || entry.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const filteredActivity = useMemo(() => snapshot?.activity.filter((entry) => !currentCompany || entry.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const companySecrets = useMemo(() => snapshot?.secrets.filter((secret) => !currentCompany || secret.companyId === currentCompany.id) ?? [], [snapshot, currentCompany]);
+  const totalSpend = useMemo(() => companyCosts.reduce((sum, entry) => sum + (entry.amountUsd ?? 0), 0), [companyCosts]);
+  const overviewRows = useMemo(() => [
+    { label: "Live runs", value: String(liveRuns.length), tone: liveRuns.length > 0 ? "text-[color:var(--success)]" : "" },
+    { label: "Pending approvals", value: String(pendingApprovals.length), tone: pendingApprovals.length > 0 ? "text-[color:var(--warn)]" : "" },
+    { label: "Active tasks", value: String(tasksInProgress.length), tone: "" },
+    { label: "Known spend", value: formatMoney(totalSpend), tone: "" },
+  ], [liveRuns, pendingApprovals, tasksInProgress, totalSpend]);
+
+  // Command palette entity search
+  const paletteQuery = commandPaletteSearch.trim().toLowerCase();
+  const paletteResults = useMemo(() => {
+    const filteredNavItems = paletteQuery
+      ? navItems.filter((item) => item.label.toLowerCase().includes(paletteQuery) || item.id.toLowerCase().includes(paletteQuery))
+      : navItems;
+    const matchedAgents = paletteQuery ? companyAgents.filter((a) => a.name.toLowerCase().includes(paletteQuery) || a.role.toLowerCase().includes(paletteQuery)).slice(0, 5) : [];
+    const matchedTasks = paletteQuery ? tasks.filter((t) => t.title.toLowerCase().includes(paletteQuery)).slice(0, 5) : [];
+    const matchedGoals = paletteQuery ? companyGoals.filter((g) => g.title.toLowerCase().includes(paletteQuery)).slice(0, 5) : [];
+    const matchedProjects = paletteQuery ? companyProjects.filter((p) => p.name.toLowerCase().includes(paletteQuery)).slice(0, 5) : [];
+    const hasEntityResults = matchedAgents.length > 0 || matchedTasks.length > 0 || matchedGoals.length > 0 || matchedProjects.length > 0;
+    return { filteredNavItems, matchedAgents, matchedTasks, matchedGoals, matchedProjects, hasEntityResults };
+  }, [paletteQuery, companyAgents, tasks, companyGoals, companyProjects]);
+  const { filteredNavItems, matchedAgents, matchedTasks, matchedGoals, matchedProjects, hasEntityResults } = paletteResults;
+
+  const setCompany = useCallback(async (companyId: string) => {
+    if (companyId === "__new__") {
+      setShowOnboarding(true);
+      return;
+    }
+    try {
+      unwrap(await window.agentCompany.setCurrentCompany(companyId));
+      await refresh();
+      setError(null);
+    } catch (error) {
+      setError(error instanceof Error ? error.message : String(error));
+    }
+  }, [refresh]);
+
+  const deleteCompany = useCallback(async (companyId: string) => {
+    try {
+      unwrap(await window.agentCompany.deleteCompany(companyId));
+      setConfirmDeleteCompanyId(null);
+      setCompanySwitcherOpen(false);
+      await refresh();
+    } catch (error) {
+      setError(error instanceof Error ? error.message : String(error));
+    }
+  }, [refresh]);
+
+  const startRun = useCallback(async (taskId: string) => {
+    const result = await window.agentCompany.startTaskRun({ taskId });
+    if (!result.ok) {
+      setError(result.error.message);
+      return;
+    }
+    setSelectedRunId(result.data);
+    setConsoleOpen(true);
+    await refresh();
+  }, [refresh]);
+
+  const cancelRun = useCallback(async (runId: string) => {
+    try {
+      unwrap(await window.agentCompany.cancelRun({ runId }));
+      await refresh();
+      setError(null);
+    } catch (error) {
+      setError(error instanceof Error ? error.message : String(error));
+    }
+  }, [refresh]);
+
+  const quickConnectorCheck = useCallback(async () => {
+    if (!selectedConnector) return;
+    try {
+      unwrap(await window.agentCompany.testConnector(selectedConnector.id));
+      await refresh();
+      setError(null);
+    } catch (error) {
+      setError(error instanceof Error ? error.message : String(error));
+    }
+  }, [selectedConnector, refresh]);
+
+  if (!snapshot) {
+    return (
+      <div className="flex min-h-[100dvh] items-center justify-center text-[13px] text-[color:var(--muted)]">
+        Loading local profile...
+      </div>
+    );
+  }
+
+  if (snapshot.companies.length === 0 || showOnboarding) {
+    return <CompanyOnboarding connectors={snapshot.connectors} onDone={async () => { setShowOnboarding(false); await refresh(); }} />;
+  }
+
+  return (
+    <div className={`grid h-[100dvh] overflow-hidden bg-[color:var(--bg)] ${sidebarCollapsed ? "grid-cols-[56px_minmax(0,1fr)]" : "grid-cols-[220px_minmax(0,1fr)]"}`}>
+      <aside className="flex h-[100dvh] flex-col overflow-hidden border-r border-[color:var(--line)] bg-[color:var(--panel)]">
+        {sidebarCollapsed ? (
+          <div className="sidebar-drag flex items-center justify-center px-2 pb-3 pt-[38px]">
+            <button
+              aria-label="Open command palette"
+              title="Command palette"
+              className="focus-ring flex h-[30px] w-[30px] shrink-0 items-center justify-center rounded-[6px] border border-[color:var(--line)] text-[color:var(--muted)] transition hover:bg-[color:var(--panel-soft)] hover:text-[color:var(--text)]"
+              onClick={() => setCommandPaletteOpen(true)}
+            >
+              <Command size={14} />
+            </button>
+          </div>
+        ) : (
+          <div className="sidebar-drag flex items-center gap-2.5 px-4 pb-4 pt-[38px]">
+            <div className="relative min-w-0 flex-1">
+              <button
+                type="button"
+                className="focus-ring flex w-full items-center gap-2 rounded-[6px] border border-[color:var(--line)] bg-[color:var(--panel)] px-2.5 py-1.5 text-left text-[13px] font-medium text-[color:var(--text)] transition hover:bg-[color:var(--panel-soft)]"
+                onClick={() => setCompanySwitcherOpen((v) => !v)}
+              >
+                <span className="min-w-0 flex-1 truncate">{currentCompany?.name ?? "Select company"}</span>
+                <CaretUpDown size={14} className="shrink-0 text-[color:var(--muted)]" />
+              </button>
+              {companySwitcherOpen && (
+                <>
+                  <div className="fixed inset-0 z-40" onClick={() => { setCompanySwitcherOpen(false); setConfirmDeleteCompanyId(null); }} />
+                  <div className="absolute left-0 right-0 top-full z-50 mt-1 overflow-hidden rounded-[8px] border border-[color:var(--line)] bg-[color:var(--panel)] shadow-lg">
+                    <div className="max-h-[240px] overflow-y-auto py-1">
+                      {snapshot.companies.map((company) => (
+                        <div key={company.id} className="group flex items-center">
+                          {confirmDeleteCompanyId === company.id ? (
+                            <div className="flex w-full items-center gap-2 px-3 py-2">
+                              <span className="flex-1 truncate text-[12px] text-[color:var(--danger)]">Delete {company.name}?</span>
+                              <button
+                                type="button"
+                                className="rounded px-2 py-0.5 text-[11px] font-semibold text-[color:var(--danger)] transition hover:bg-[color:var(--danger)] hover:text-white"
+                                onClick={() => void deleteCompany(company.id)}
+                              >
+                                Yes
+                              </button>
+                              <button
+                                type="button"
+                                className="rounded px-2 py-0.5 text-[11px] font-semibold text-[color:var(--muted)] transition hover:bg-[color:var(--panel-soft)]"
+                                onClick={() => setConfirmDeleteCompanyId(null)}
+                              >
+                                No
+                              </button>
+                            </div>
+                          ) : (
+                            <>
+                              <button
+                                type="button"
+                                className={`flex min-w-0 flex-1 items-center gap-2.5 px-3 py-2 text-left text-[13px] transition hover:bg-[color:var(--panel-soft)] ${
+                                  company.id === currentCompany?.id ? "font-semibold text-[color:var(--text)]" : "text-[color:var(--muted-strong)]"
+                                }`}
+                                onClick={() => { void setCompany(company.id); setCompanySwitcherOpen(false); }}
+                              >
+                                <span className="w-4 shrink-0">{company.id === currentCompany?.id ? <Check size={14} weight="bold" className="text-[color:var(--accent)]" /> : null}</span>
+                                <span className="min-w-0 flex-1 truncate">{company.name}</span>
+                              </button>
+                              <button
+                                type="button"
+                                className="mr-2 rounded p-1 text-[color:var(--muted)] opacity-0 transition hover:bg-[color:var(--danger)] hover:text-white group-hover:opacity-100"
+                                title={`Delete ${company.name}`}
+                                onClick={() => setConfirmDeleteCompanyId(company.id)}
+                              >
+                                <Trash size={13} />
+                              </button>
+                            </>
+                          )}
+                        </div>
+                      ))}
+                    </div>
+                    <div className="border-t border-[color:var(--line)]">
+                      <button
+                        type="button"
+                        className="flex w-full items-center gap-2.5 px-3 py-2 text-left text-[13px] text-[color:var(--muted-strong)] transition hover:bg-[color:var(--panel-soft)] hover:text-[color:var(--text)]"
+                        onClick={() => { void setCompany("__new__"); setCompanySwitcherOpen(false); }}
+                      >
+                        <Plus size={14} />
+                        <span>New company</span>
+                      </button>
+                    </div>
+                  </div>
+                </>
+              )}
+            </div>
+            <button
+              aria-label="Open command palette"
+              className="focus-ring flex h-[30px] w-[30px] shrink-0 items-center justify-center rounded-[6px] border border-[color:var(--line)] text-[color:var(--muted)] transition hover:bg-[color:var(--panel-soft)] hover:text-[color:var(--text)]"
+              onClick={() => setCommandPaletteOpen(true)}
+            >
+              <Command size={14} />
+            </button>
+          </div>
+        )}
+        <nav aria-label="Main navigation" className={`flex-1 overflow-y-auto pb-3 ${sidebarCollapsed ? "px-1.5" : "px-3"}`}>
+          {navGroups.map((group) => (
+            <div key={group.label} className="mb-1">
+              {!sidebarCollapsed ? (
+                <div className="px-3 pb-1.5 pt-4 text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">{group.label}</div>
+              ) : (
+                <div className="pb-1 pt-3" />
+              )}
+              <div className="space-y-0.5">
+                {group.items.map((item) => (
+                  <SectionButton
+                    key={item.id}
+                    active={section === item.id}
+                    label={item.label}
+                    icon={item.icon}
+                    onClick={() => setSection(item.id)}
+                    badge={navBadges[item.id]?.count}
+                    badgeTone={navBadges[item.id]?.tone}
+                    collapsed={sidebarCollapsed}
+                  />
+                ))}
+              </div>
+            </div>
+          ))}
+        </nav>
+        <div className={`border-t border-[color:var(--line)] py-2 ${sidebarCollapsed ? "px-1.5" : "px-3"}`}>
+          <SectionButton
+            active={section === "settings"}
+            label="Settings"
+            icon={Gear}
+            onClick={() => setSection("settings")}
+            collapsed={sidebarCollapsed}
+          />
+          <button
+            aria-label={sidebarCollapsed ? "Expand sidebar" : "Collapse sidebar"}
+            title={sidebarCollapsed ? "Expand sidebar" : "Collapse sidebar"}
+            className={`focus-ring mt-1 flex w-full items-center rounded-[6px] py-[7px] text-[color:var(--muted)] transition duration-150 hover:bg-[color:var(--panel-soft)] hover:text-[color:var(--text)] ${sidebarCollapsed ? "justify-center p-2" : "gap-2.5 px-3"}`}
+            onClick={() => setSidebarCollapsed((c) => !c)}
+          >
+            <SidebarSimple size={sidebarCollapsed ? 18 : 17} className={sidebarCollapsed ? "" : ""} />
+            {!sidebarCollapsed ? <span className="text-[13px] font-medium tracking-[0.005em]">Collapse</span> : null}
+          </button>
+        </div>
+      </aside>
+
+      <main aria-label="Content" className="flex min-w-0 flex-col overflow-hidden">
+        <div className="flex-1 overflow-auto">
+        <div className="mx-auto flex w-full max-w-[1040px] flex-col px-6 py-6 lg:px-10 lg:py-8">
+        <header className="mb-8 flex items-start justify-between gap-4 border-b border-[color:var(--line)] pb-5 lg:mb-10 lg:gap-6">
+          <h1 className="text-[24px] tracking-[-0.03em] text-[color:var(--text)] lg:text-[31px]">
+            {navItems.find((item) => item.id === section)?.label}
+          </h1>
+          <div className="flex shrink-0 items-center gap-3 lg:gap-5">
+            <button
+              type="button"
+              aria-label="Refresh"
+              title="Refresh"
+              className="focus-ring inline-flex items-center gap-2 py-1 text-[12px] font-semibold text-[color:var(--muted-strong)] transition hover:text-[color:var(--text)]"
+              onClick={() => void refresh()}
+            >
+              <ArrowClockwise size={16} />
+              <span className="hidden lg:inline">Refresh</span>
+            </button>
+            <button
+              type="button"
+              aria-label={consoleOpen ? "Hide console" : "Show console"}
+              title={consoleOpen ? "Hide console" : "Show console"}
+              className="focus-ring inline-flex items-center gap-2 py-1 text-[12px] font-semibold text-[color:var(--muted-strong)] transition hover:text-[color:var(--text)]"
+              onClick={() => setConsoleOpen((current) => !current)}
+            >
+              <TerminalWindow size={16} />
+              <span className="hidden lg:inline">{consoleOpen ? "Hide console" : "Show console"}</span>
+            </button>
+          </div>
+        </header>
+
+        {error ? (
+          <div className="mb-6 flex items-center gap-3 rounded-[10px] bg-[color:var(--danger-soft)] px-4 py-3 text-[13px] text-[color:var(--danger)]">
+            <WarningCircle size={18} />
+            <span>{error}</span>
+          </div>
+        ) : null}
+
+        <div className="min-h-0 flex-1">
+          <ErrorBoundary>
+            <AnimatePresence mode="wait">
+            <motion.div
+              key={section}
+              initial={{ opacity: 0, y: 12 }}
+              animate={{ opacity: 1, y: 0 }}
+              exit={{ opacity: 0, y: -10 }}
+              transition={pageTransition}
+              className="space-y-14"
+            >
+              {section === "overview" ? (
+                <>
+                  {/* Status metrics */}
+                  <section className="space-y-3">
+                    <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Current status</div>
+                    <div className="grid grid-cols-2 border-y border-[color:var(--line)] lg:grid-cols-4">
+                      {overviewRows.map((row, index) => (
+                        <div
+                          key={row.label}
+                          className={`px-4 py-4 lg:px-5 lg:first:pl-0 lg:last:pr-0 ${
+                            index > 0 ? "border-l border-[color:var(--line)]" : ""
+                          } ${index >= 2 ? "border-t border-[color:var(--line)] lg:border-t-0" : ""}`}
+                        >
+                          <div className="text-[12px] font-medium text-[color:var(--muted)]">{row.label}</div>
+                          <div className={`mono text-[18px] font-semibold tracking-[-0.01em] sm:mt-2 ${row.tone || "text-[color:var(--text)]"}`}>{row.value}</div>
+                        </div>
+                      ))}
+                    </div>
+                  </section>
+
+                  {/* Live runs */}
+                  {liveRuns.length > 0 ? (
+                    <section className="space-y-3">
+                      <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--success)]">Live runs</div>
+                      <ListFrame>
+                        {liveRuns.slice(0, 5).map((run) => {
+                          const agent = companyAgents.find((a) => a.id === run.agentId);
+                          const task = tasks.find((t) => t.id === run.taskId);
+                          return (
+                            <ListRow key={run.id} onClick={() => { setSelectedRunId(run.id); setConsoleOpen(true); }}>
+                              <div className="flex items-center justify-between gap-4">
+                                <div className="min-w-0">
+                                  <div className="truncate text-[14px] font-medium text-[color:var(--text)]">{task?.title ?? run.id.slice(0, 8)}</div>
+                                  <div className="mt-1 flex items-center gap-3 text-[11px] uppercase tracking-[0.12em] text-[color:var(--muted)]">
+                                    {agent ? <span>{agent.name}</span> : null}
+                                    <span>{run.connectorId.replace("_local", "")}</span>
+                                    {run.model ? <span className="mono text-[10px] normal-case tracking-normal">{run.model}</span> : null}
+                                  </div>
+                                </div>
+                                <StatusPill status={run.status} />
+                              </div>
+                            </ListRow>
+                          );
+                        })}
+                      </ListFrame>
+                    </section>
+                  ) : null}
+
+                  {/* Needs attention: pending approvals + failed runs */}
+                  {(pendingApprovals.length > 0 || failedRuns.length > 0) ? (
+                    <section className="space-y-3">
+                      <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--warn)]">Needs attention</div>
+                      <ListFrame>
+                        {pendingApprovals.slice(0, 4).map((approval) => {
+                          const requester = companyAgents.find((a) => a.id === approval.requestedByAgentId);
+                          return (
+                            <ListRow key={approval.id} onClick={() => { setSelectedApprovalId(approval.id); setSection("approvals"); }}>
+                              <div className="flex items-center justify-between gap-4">
+                                <div className="min-w-0">
+                                  <div className="truncate text-[14px] font-medium text-[color:var(--text)]">{approval.payloadSummary}</div>
+                                  <div className="mt-1 flex items-center gap-3 text-[11px] uppercase tracking-[0.12em] text-[color:var(--muted)]">
+                                    <span>{approval.type.replaceAll("_", " ")}</span>
+                                    {requester ? <span>by {requester.name}</span> : null}
+                                  </div>
+                                </div>
+                                <StatusPill status={approval.state} />
+                              </div>
+                            </ListRow>
+                          );
+                        })}
+                        {failedRuns.slice(0, 3).map((run) => {
+                          const agent = companyAgents.find((a) => a.id === run.agentId);
+                          return (
+                            <ListRow key={run.id} onClick={() => { setSelectedRunId(run.id); setConsoleOpen(true); }}>
+                              <div className="flex items-center justify-between gap-4">
+                                <div className="min-w-0">
+                                  <div className="truncate text-[14px] font-medium text-[color:var(--text)]">{run.summary || "Run ended with an error"}</div>
+                                  <div className="mt-1 flex items-center gap-3 text-[11px] text-[color:var(--danger)]">
+                                    {agent ? <span className="uppercase tracking-[0.12em]">{agent.name}</span> : null}
+                                    {run.errorMessage ? <span className="truncate">{run.errorMessage}</span> : null}
+                                  </div>
+                                </div>
+                                <StatusPill status={run.status} />
+                              </div>
+                            </ListRow>
+                          );
+                        })}
+                      </ListFrame>
+                    </section>
+                  ) : null}
+
+                  {/* Budget alerts */}
+                  {(() => {
+                    const budgetWarningAgents = companyAgents.filter(
+                      (a) => a.budgetMonthlyUsd > 0 && (a.spentMonthlyUsd / a.budgetMonthlyUsd) >= 0.8,
+                    );
+                    if (budgetWarningAgents.length === 0) return null;
+                    return (
+                      <section className="space-y-3">
+                        <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--danger)]">Budget alerts</div>
+                        <ListFrame>
+                          {budgetWarningAgents.map((agent) => {
+                            const pct = agent.budgetMonthlyUsd > 0 ? Math.round((agent.spentMonthlyUsd / agent.budgetMonthlyUsd) * 100) : 0;
+                            const overBudget = agent.spentMonthlyUsd >= agent.budgetMonthlyUsd;
+                            return (
+                              <ListRow key={agent.id} onClick={() => { setSelectedAgentId(agent.id); setSection("agents"); }}>
+                                <div className="flex items-center justify-between gap-4">
+                                  <div className="min-w-0">
+                                    <div className="text-[14px] font-medium text-[color:var(--text)]">{agent.name}</div>
+                                    <div className="mt-1 flex items-center gap-3 text-[11px] text-[color:var(--muted)]">
+                                      <span className="uppercase tracking-[0.12em]">{agent.role}</span>
+                                      <span className={overBudget ? "text-[color:var(--danger)]" : "text-[color:var(--warn)]"}>
+                                        {formatMoney(agent.spentMonthlyUsd)} / {formatMoney(agent.budgetMonthlyUsd)} ({pct}%)
+                                      </span>
+                                    </div>
+                                  </div>
+                                  <StatusPill status={overBudget ? "error" : "degraded"} />
+                                </div>
+                              </ListRow>
+                            );
+                          })}
+                        </ListFrame>
+                      </section>
+                    );
+                  })()}
+
+                  {/* Connector health */}
+                  <section className="space-y-3">
+                    <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Connector health</div>
+                    <div className="grid grid-cols-1 gap-2 sm:grid-cols-2 lg:grid-cols-3">
+                      {snapshot.connectors.map((connector) => {
+                        const isReady = connector.status === "ready" || connector.status === "degraded";
+                        const isError = connector.status === "error" || connector.status === "auth_required";
+                        return (
+                          <button
+                            key={connector.id}
+                            type="button"
+                            onClick={() => { setSelectedConnectorId(connector.id); setSection("connectors"); }}
+                            className={`focus-ring flex items-center gap-3 rounded-[10px] border px-4 py-3 text-left transition duration-150 hover:bg-[color:var(--panel-soft)] ${
+                              isError ? "border-[color:var(--danger)] border-opacity-30" : "border-[color:var(--line)]"
+                            }`}
+                          >
+                            <div className={`h-2 w-2 shrink-0 rounded-full ${
+                              isReady ? "bg-[color:var(--success)]" : isError ? "bg-[color:var(--danger)]" : "bg-[color:var(--muted)]"
+                            }`} />
+                            <div className="min-w-0">
+                              <div className="truncate text-[13px] font-medium text-[color:var(--text)]">{connector.label}</div>
+                              <div className="truncate text-[11px] text-[color:var(--muted)]">{connector.status.replaceAll("_", " ")}</div>
+                            </div>
+                            {!connector.capabilityMatrix.costAttribution ? (
+                              <span className="ml-auto shrink-0 rounded bg-[color:var(--panel-soft)] px-1.5 py-0.5 text-[9px] font-semibold uppercase tracking-[0.12em] text-[color:var(--muted)]">no cost</span>
+                            ) : null}
+                          </button>
+                        );
+                      })}
+                    </div>
+                  </section>
+
+                  {/* Open work */}
+                  <section className="space-y-3">
+                    <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Open work</div>
+                    <ListFrame>
+                      {tasks.length === 0 ? (
+                        <div className="py-8 text-center text-[13px] text-[color:var(--muted)]">No work queued</div>
+                      ) : (
+                        tasks.slice(0, 8).map((task) => {
+                          const run = runs.find((entry) => entry.id === task.activeRunId) ?? null;
+                          const assignee = companyAgents.find((agent) => agent.id === task.assigneeAgentId) ?? null;
+                          return (
+                            <ListRow key={task.id} onClick={() => { setSection("tasks"); setSelectedTaskId(task.id); }}>
+                              <div className="flex items-center justify-between gap-4">
+                                <div className="min-w-0">
+                                  <div className="truncate text-[14px] font-medium text-[color:var(--text)]">{task.title}</div>
+                                  <div className="mt-1 flex flex-wrap items-center gap-x-3 gap-y-1 text-[11px] uppercase tracking-[0.12em] text-[color:var(--muted)]">
+                                    <span className={task.priority === "critical" ? "text-[color:var(--danger)]" : task.priority === "high" ? "text-[color:var(--warn)]" : ""}>{task.priority}</span>
+                                    {assignee ? <span>{assignee.name}</span> : null}
+                                  </div>
+                                </div>
+                                <StatusPill status={run?.status ?? task.status} />
+                              </div>
+                            </ListRow>
+                          );
+                        })
+                      )}
+                    </ListFrame>
+                  </section>
+
+                  {/* Workspace issues */}
+                  {(() => {
+                    const problemWorkspaces = companyWorkspaces.filter(
+                      (w) => w.state !== "ready",
+                    );
+                    if (problemWorkspaces.length === 0) return null;
+                    return (
+                      <section className="space-y-3">
+                        <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--warn)]">Workspace issues</div>
+                        <ListFrame>
+                          {problemWorkspaces.map((ws) => (
+                            <ListRow key={ws.id} onClick={() => setSection("workspaces")}>
+                              <div className="flex items-center justify-between gap-4">
+                                <div className="min-w-0">
+                                  <div className="text-[14px] font-medium text-[color:var(--text)]">{ws.name}</div>
+                                  <div className="mt-1 truncate text-[11px] text-[color:var(--muted)] mono">{ws.localPath}</div>
+                                </div>
+                                <StatusPill status={ws.state} />
+                              </div>
+                            </ListRow>
+                          ))}
+                        </ListFrame>
+                      </section>
+                    );
+                  })()}
+                </>
+              ) : null}
+
+              {section === "connectors" && selectedConnector ? (
+                <div className="space-y-10">
+                  <Panel title="Connector registry">
+                    <ListFrame>
+                      {snapshot.connectors.map((connector) => (
+                        <ListRow
+                          key={connector.id}
+                          onClick={() => setSelectedConnectorId(connector.id)}
+                          className={`cursor-pointer transition-colors duration-100 ${
+                            selectedConnector.id === connector.id
+                              ? "bg-[color:var(--accent-soft)]"
+                              : "hover:bg-[color:var(--panel-soft)]"
+                          }`}
+                        >
+                          <div className="flex items-center justify-between">
+                            <div className="min-w-0">
+                              <div className="text-[14px] font-medium text-[color:var(--text)]">{connector.label}</div>
+                              <div className="mt-1 truncate text-[11px] uppercase tracking-[0.12em] text-[color:var(--muted)]">{connector.command}</div>
+                            </div>
+                            <StatusPill status={connector.status} />
+                          </div>
+                        </ListRow>
+                      ))}
+                    </ListFrame>
+                  </Panel>
+                  <Panel
+                    title={selectedConnector.label}
+                    eyebrow={undefined}
+                    action={<ActionButton label="Run health check" onClick={() => void quickConnectorCheck()} icon={Wrench} tone="accent" />}
+                  >
+                    <ConnectorEditor connector={selectedConnector} onSaved={refresh} />
+                  </Panel>
+                </div>
+              ) : null}
+
+              {section === "agents" ? (
+                <>
+                  <Panel title="Agent roster" action={<ActionButton label="New agent" icon={Robot} tone="accent" onClick={() => setSelectedAgentId("__new__")} />}>
+                    <AgentRoster
+                      agents={companyAgents}
+                      connectors={snapshot.connectors}
+                      workspaces={companyWorkspaces}
+                      selectedAgentId={selectedAgentId}
+                      onSelect={setSelectedAgentId}
+                    />
+                  </Panel>
+                  <Modal open={selectedAgentId === "__new__"} title="New agent" onClose={() => setSelectedAgentId(null)}>
+                    <AgentCreator companyId={currentCompany!.id} connectors={snapshot.connectors} workspaces={companyWorkspaces} agents={companyAgents} onSaved={async () => { setSelectedAgentId(null); await refresh(); }} />
+                  </Modal>
+                  <Modal open={!!selectedAgent} title={selectedAgent ? `Edit: ${selectedAgent.name}` : ""} onClose={() => setSelectedAgentId(null)}>
+                    {selectedAgent ? (
+                      <AgentEditor
+                        key={selectedAgentId}
+                        agent={selectedAgent}
+                        connectors={snapshot.connectors}
+                        workspaces={companyWorkspaces}
+                        agents={companyAgents}
+                        companyId={currentCompany!.id}
+                        onSaved={async () => { setSelectedAgentId(null); await refresh(); }}
+                        onDeleted={async () => { setSelectedAgentId(null); await refresh(); }}
+                      />
+                    ) : null}
+                  </Modal>
+                </>
+              ) : null}
+
+              {section === "orgchart" ? (
+                <OrgChart agents={companyAgents} onSelectAgent={(id) => { setSelectedAgentId(id); setSection("agents"); }} />
+              ) : null}
+
+              {section === "goals" ? (
+                <>
+                  <Panel title="Goal stack" action={<ActionButton label="New goal" icon={Target} tone="accent" onClick={() => setSelectedGoalId("__new__")} />}>
+                    <GoalList goals={companyGoals} agents={companyAgents} selectedGoalId={selectedGoalId} onSelect={setSelectedGoalId} />
+                  </Panel>
+                  <Modal open={selectedGoalId === "__new__"} title="New goal" onClose={() => setSelectedGoalId(null)}>
+                    <GoalCreator companyId={currentCompany!.id} agents={companyAgents} goals={companyGoals} onSaved={async () => { setSelectedGoalId(null); await refresh(); }} />
+                  </Modal>
+                  <Modal open={!!selectedGoal} title={selectedGoal ? `Edit: ${selectedGoal.title}` : ""} onClose={() => setSelectedGoalId(null)}>
+                    {selectedGoal ? (
+                      <GoalEditor
+                        key={selectedGoalId}
+                        goal={selectedGoal}
+                        goals={companyGoals}
+                        agents={companyAgents}
+                        companyId={currentCompany!.id}
+                        onSaved={async () => { setSelectedGoalId(null); await refresh(); }}
+                        onDeleted={async () => { setSelectedGoalId(null); await refresh(); }}
+                      />
+                    ) : null}
+                  </Modal>
+                </>
+              ) : null}
+
+              {section === "projects" ? (
+                <>
+                  <Panel title="Projects" action={<ActionButton label="New project" icon={Kanban} tone="accent" onClick={() => setSelectedProjectId("__new__")} />}>
+                    <ProjectList projects={companyProjects} goals={companyGoals} agents={companyAgents} workspaces={companyWorkspaces} selectedProjectId={selectedProjectId} onSelect={setSelectedProjectId} />
+                  </Panel>
+                  <Modal open={selectedProjectId === "__new__"} title="New project" onClose={() => setSelectedProjectId(null)}>
+                    <ProjectCreator companyId={currentCompany!.id} goals={companyGoals} agents={companyAgents} onSaved={async () => { setSelectedProjectId(null); await refresh(); }} />
+                  </Modal>
+                  <Modal open={!!selectedProject} title={selectedProject ? `Edit: ${selectedProject.name}` : ""} onClose={() => setSelectedProjectId(null)}>
+                    {selectedProject ? (
+                      <ProjectEditor
+                        key={selectedProjectId}
+                        project={selectedProject}
+                        goals={companyGoals}
+                        agents={companyAgents}
+                        companyId={currentCompany!.id}
+                        onSaved={async () => { setSelectedProjectId(null); await refresh(); }}
+                        onDeleted={async () => { setSelectedProjectId(null); await refresh(); }}
+                      />
+                    ) : null}
+                  </Modal>
+                </>
+              ) : null}
+
+              {section === "tasks" ? (
+                <>
+                  <Panel title="Task queue" action={<ActionButton label="New task" icon={ListChecks} tone="accent" onClick={() => setSelectedTaskId("__new__")} />}>
+                    <TaskQueue tasks={tasks} runs={runs} onSelect={setSelectedTaskId} selectedTaskId={selectedTask?.id ?? null} />
+                  </Panel>
+                  <Modal open={selectedTaskId === "__new__"} title="New task" onClose={() => setSelectedTaskId(null)}>
+                    <TaskCreator companyId={currentCompany!.id} goals={companyGoals} projects={companyProjects} agents={companyAgents} workspaces={companyWorkspaces} onSaved={async () => { setSelectedTaskId(null); await refresh(); }} />
+                  </Modal>
+                  <Modal open={!!selectedTask} title={selectedTask?.title ?? ""} onClose={() => setSelectedTaskId(null)} width="720px">
+                    {selectedTask ? (
+                      <TaskInspector
+                        task={selectedTask}
+                        tasks={tasks}
+                        runs={runs.filter((run) => run.taskId === selectedTask.id)}
+                        agents={companyAgents}
+                        goals={companyGoals}
+                        projects={companyProjects}
+                        workspaces={companyWorkspaces}
+                        companyId={currentCompany!.id}
+                        onRun={startRun}
+                        onCancelRun={cancelRun}
+                        onCreateApproval={async () => {
+                          const isBlocked = selectedTask.status === "blocked";
+                          const approvalId = unwrap(await window.agentCompany.requestApproval({
+                            companyId: currentCompany!.id,
+                            relatedTaskId: selectedTask.id,
+                            requestedByAgentId: selectedTask.assigneeAgentId,
+                            type: isBlocked ? "secret_access" : "approve_ceo_strategy",
+                            payloadSummary: isBlocked
+                              ? `Blocker: ${selectedTask.title} — needs operator assistance`
+                              : `Review needed: ${selectedTask.title}`,
+                            impactSummary: isBlocked
+                              ? "Agent is blocked and needs operator input (credentials, access, or decision)."
+                              : "No automated reviewer available. Operator review required.",
+                          }));
+                          setSelectedApprovalId(approvalId);
+                          await refresh();
+                        }}
+                        onDeleted={async () => { setSelectedTaskId(null); await refresh(); }}
+                      />
+                    ) : null}
+                  </Modal>
+                </>
+              ) : null}
+
+              {section === "approvals" ? (
+                <>
+                  <Panel title="Agent reviews in progress">
+                    <PendingReviewList tasks={tasks} agents={companyAgents} />
+                  </Panel>
+                  <Panel title="Pending approvals">
+                    <ApprovalList approvals={approvals} selectedApprovalId={selectedApproval?.id ?? null} onSelect={setSelectedApprovalId} />
+                  </Panel>
+                  <Modal open={!!selectedApproval} title={selectedApproval?.payloadSummary ?? "Approval detail"} onClose={() => setSelectedApprovalId(null)}>
+                    {selectedApproval ? (
+                      <ApprovalInspector
+                        approval={selectedApproval}
+                        agents={companyAgents}
+                        tasks={tasks}
+                        companyId={currentCompany!.id}
+                        onDecide={async (state, note) => {
+                          unwrap(await window.agentCompany.decideApproval({ approvalId: selectedApproval.id, state, decisionNote: note ?? `${state} from desktop control surface.` }));
+                          await refresh();
+                        }}
+                        onDeleted={async () => { setSelectedApprovalId(null); await refresh(); }}
+                      />
+                    ) : null}
+                  </Modal>
+                </>
+              ) : null}
+
+              {section === "costs" ? (
+                <EntityWorkspace
+                  title="Costs"
+                  eyebrow={undefined}
+                  primary={
+                    <Panel title="Recent cost entries">
+                      <CostList costs={companyCosts} agents={companyAgents} runs={runs} />
+                    </Panel>
+                  }
+                  secondary={
+                    <Panel title="Budget posture">
+                      <BudgetSummary agents={companyAgents} costs={companyCosts} />
+                    </Panel>
+                  }
+                />
+              ) : null}
+
+              {section === "activity" ? (
+                <Panel title="Activity timeline">
+                  <ActivityList activity={filteredActivity} />
+                </Panel>
+              ) : null}
+
+              {section === "workspaces" ? (
+                <EntityWorkspace
+                  title="Workspaces"
+                  eyebrow={undefined}
+                  primary={
+                    <Panel title="Workspace registry">
+                      <WorkspaceList
+                        workspaces={companyWorkspaces}
+                        projects={companyProjects}
+                        companyId={currentCompany!.id}
+                        onOpen={(path) => window.agentCompany.openPath(path).then(() => undefined)}
+                        onDeleted={refresh}
+                      />
+                    </Panel>
+                  }
+                  secondary={
+                    <Panel title="Add workspace">
+                      <WorkspaceCreator companyId={currentCompany!.id} projects={companyProjects} onSaved={refresh} />
+                    </Panel>
+                  }
+                />
+              ) : null}
+
+              {section === "settings" ? (
+                <div className="space-y-10">
+                  <Panel title="Profile and release">
+                    <SettingsPane snapshot={snapshot} secrets={companySecrets} companyId={currentCompany!.id} onSaved={refresh} />
+                  </Panel>
+                  <Panel title="Secret bindings">
+                    <SecretCreator companyId={currentCompany!.id} onSaved={refresh} />
+                  </Panel>
+                </div>
+              ) : null}
+            </motion.div>
+          </AnimatePresence>
+          </ErrorBoundary>
+        </div>
+        </div>
+        </div>
+
+        <AnimatePresence>
+          {consoleOpen ? (
+            <motion.section
+              initial={{ height: 0, opacity: 0 }}
+              animate={{ height: "auto", opacity: 1 }}
+              exit={{ height: 0, opacity: 0 }}
+              transition={panelTransition}
+              className="shrink-0 overflow-hidden border-t border-[color:var(--line)] bg-[color:var(--panel)]"
+            >
+              <div className="flex items-center justify-between px-5 py-2.5">
+                <div className="flex items-center gap-3">
+                  <TerminalWindow size={15} className="text-[color:var(--muted)]" />
+                  <span className="text-[13px] font-semibold text-[color:var(--text)]">Console</span>
+                </div>
+                <div className="flex items-center gap-3">
+                  <Select
+                    compact
+                    value={selectedRun?.id ?? ""}
+                    onChange={setSelectedRunId}
+                    options={(runs.length > 0 ? runs : [{ id: "", summary: "No runs" } as RunRecord]).map((run) => ({
+                      value: run.id,
+                      label: run.summary || `Run ${run.id.slice(0, 8)}`,
+                    }))}
+                  />
+                  <button
+                    type="button"
+                    className="focus-ring rounded-[6px] p-1 text-[color:var(--muted)] transition hover:text-[color:var(--text)]"
+                    onClick={() => setConsoleOpen(false)}
+                    aria-label="Close console"
+                  >
+                    <X size={14} />
+                  </button>
+                </div>
+              </div>
+              <div className="grid border-t border-[color:var(--line)] xl:grid-cols-[240px_minmax(0,1fr)]">
+                <div className="border-b border-[color:var(--line)] px-5 py-3 xl:border-b-0 xl:border-r">
+                  {selectedRun ? (
+                    <div className="space-y-2.5 text-[12px] text-[color:var(--muted-strong)]">
+                      <div className="flex items-center justify-between">
+                        <span>Status</span>
+                        <StatusPill status={selectedRun.status} />
+                      </div>
+                      <div className="flex items-center justify-between">
+                        <span>Started</span>
+                        <span className="mono text-[11px]">{formatTime(selectedRun.startedAt)}</span>
+                      </div>
+                      <div className="flex items-center justify-between">
+                        <span>Finished</span>
+                        <span className="mono text-[11px]">{formatTime(selectedRun.finishedAt)}</span>
+                      </div>
+                      <div className="flex items-center justify-between">
+                        <span>Cost</span>
+                        <span className="mono text-[11px]">{formatMoney(selectedRun.costUsd)}</span>
+                      </div>
+                      {selectedRun.logPath ? (
+                        <div className="pt-1">
+                          <ActionButton label="Open log" onClick={() => void window.agentCompany.openPath(selectedRun.logPath!)} icon={FolderOpen} />
+                        </div>
+                      ) : null}
+                    </div>
+                  ) : (
+                    <div className="py-4 text-center text-[12px] text-[color:var(--muted)]">No run selected</div>
+                  )}
+                </div>
+                <div className="h-[200px] overflow-auto px-5 py-3">
+                  <pre className="mono whitespace-pre-wrap text-[12px] leading-relaxed text-[color:var(--muted-strong)]">
+                    {selectedRun ? logBufferRef.current[selectedRun.id] ?? "Waiting for log output..." : "No run selected."}
+                  </pre>
+                </div>
+              </div>
+            </motion.section>
+          ) : null}
+        </AnimatePresence>
+      </main>
+
+      <AnimatePresence>
+        {commandPaletteOpen ? (
+          <motion.div
+            initial={{ opacity: 0 }}
+            animate={{ opacity: 1 }}
+            exit={{ opacity: 0 }}
+            className="fixed inset-0 z-50 flex items-start justify-center bg-[color:var(--bg)]/72 px-4 pt-24 backdrop-blur-sm"
+            onClick={() => { setCommandPaletteOpen(false); setCommandPaletteSearch(""); }}
+          >
+            <motion.div
+              ref={paletteTrapRef}
+              role="dialog"
+              aria-modal="true"
+              aria-label="Command palette"
+              initial={{ opacity: 0, y: 14, scale: 0.98 }}
+              animate={{ opacity: 1, y: 0, scale: 1 }}
+              exit={{ opacity: 0, y: 10, scale: 0.98 }}
+              transition={panelTransition}
+              className="w-full max-w-[560px] rounded-[12px] border border-[color:var(--line)] bg-[color:var(--panel)] px-5 py-4 shadow-[0_18px_40px_rgba(15,23,42,0.08)]"
+              onClick={(event) => event.stopPropagation()}
+            >
+              <div className="mb-3 flex items-center gap-3">
+                <MagnifyingGlass size={18} className="text-[color:var(--accent)]" />
+                <input
+                  type="text"
+                  aria-label="Search"
+                  className="flex-1 bg-transparent text-[14px] text-[color:var(--text)] placeholder:text-[color:var(--muted)] outline-none"
+                  placeholder="Search sections, agents, tasks, goals, projects..."
+                  value={commandPaletteSearch}
+                  onChange={(e) => setCommandPaletteSearch(e.target.value)}
+                  autoFocus
+                />
+                {commandPaletteSearch && (
+                  <button
+                    className="text-[12px] text-[color:var(--muted)] hover:text-[color:var(--text)]"
+                    onClick={() => setCommandPaletteSearch("")}
+                  >
+                    Clear
+                  </button>
+                )}
+              </div>
+
+              {filteredNavItems.length > 0 ? (
+                <>
+                  <div className="mb-1 text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Sections</div>
+                  <ListFrame>
+                    {filteredNavItems.map((item) => (
+                      <ListRow
+                        key={item.id}
+                        className="py-3"
+                        onClick={() => {
+                          setSection(item.id);
+                          setCommandPaletteOpen(false);
+                          setCommandPaletteSearch("");
+                        }}
+                      >
+                        <div className="flex items-center justify-between">
+                          <div className="flex items-center gap-3 text-[color:var(--text)]">
+                            <item.icon size={16} />
+                            <span className="text-[13px] tracking-[0.005em]">{item.label}</span>
+                          </div>
+                          <span className="mono text-[11px] text-[color:var(--muted)]">{item.id}</span>
+                        </div>
+                      </ListRow>
+                    ))}
+                  </ListFrame>
+                </>
+              ) : null}
+
+              {hasEntityResults ? (
+                <div className="mt-3 space-y-3">
+                  {matchedAgents.length > 0 ? (
+                    <>
+                      <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Agents</div>
+                      <ListFrame>
+                        {matchedAgents.map((agent) => (
+                          <ListRow
+                            key={agent.id}
+                            className="py-3"
+                            onClick={() => {
+                              setSection("agents");
+                              setSelectedAgentId(agent.id);
+                              setCommandPaletteOpen(false);
+                              setCommandPaletteSearch("");
+                            }}
+                          >
+                            <div className="flex items-center justify-between">
+                              <div className="flex items-center gap-3 text-[color:var(--text)]">
+                                <Robot size={16} />
+                                <span className="text-[13px] tracking-[0.005em]">{agent.name}</span>
+                                <span className="text-[11px] text-[color:var(--muted)]">{agent.role}</span>
+                              </div>
+                              <StatusPill status={agent.status} />
+                            </div>
+                          </ListRow>
+                        ))}
+                      </ListFrame>
+                    </>
+                  ) : null}
+
+                  {matchedTasks.length > 0 ? (
+                    <>
+                      <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Tasks</div>
+                      <ListFrame>
+                        {matchedTasks.map((task) => (
+                          <ListRow
+                            key={task.id}
+                            className="py-3"
+                            onClick={() => {
+                              setSection("tasks");
+                              setSelectedTaskId(task.id);
+                              setCommandPaletteOpen(false);
+                              setCommandPaletteSearch("");
+                            }}
+                          >
+                            <div className="flex items-center justify-between">
+                              <div className="flex items-center gap-3 text-[color:var(--text)]">
+                                <ListChecks size={16} />
+                                <span className="text-[13px] tracking-[0.005em]">{task.title}</span>
+                              </div>
+                              <StatusPill status={task.status} />
+                            </div>
+                          </ListRow>
+                        ))}
+                      </ListFrame>
+                    </>
+                  ) : null}
+
+                  {matchedGoals.length > 0 ? (
+                    <>
+                      <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Goals</div>
+                      <ListFrame>
+                        {matchedGoals.map((goal) => (
+                          <ListRow
+                            key={goal.id}
+                            className="py-3"
+                            onClick={() => {
+                              setSection("goals");
+                              setSelectedGoalId(goal.id);
+                              setCommandPaletteOpen(false);
+                              setCommandPaletteSearch("");
+                            }}
+                          >
+                            <div className="flex items-center justify-between">
+                              <div className="flex items-center gap-3 text-[color:var(--text)]">
+                                <Target size={16} />
+                                <span className="text-[13px] tracking-[0.005em]">{goal.title}</span>
+                              </div>
+                              <StatusPill status={goal.status} />
+                            </div>
+                          </ListRow>
+                        ))}
+                      </ListFrame>
+                    </>
+                  ) : null}
+
+                  {matchedProjects.length > 0 ? (
+                    <>
+                      <div className="text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Projects</div>
+                      <ListFrame>
+                        {matchedProjects.map((project) => (
+                          <ListRow
+                            key={project.id}
+                            className="py-3"
+                            onClick={() => {
+                              setSection("projects");
+                              setSelectedProjectId(project.id);
+                              setCommandPaletteOpen(false);
+                              setCommandPaletteSearch("");
+                            }}
+                          >
+                            <div className="flex items-center justify-between">
+                              <div className="flex items-center gap-3 text-[color:var(--text)]">
+                                <Kanban size={16} />
+                                <span className="text-[13px] tracking-[0.005em]">{project.name}</span>
+                              </div>
+                              <StatusPill status={project.status} />
+                            </div>
+                          </ListRow>
+                        ))}
+                      </ListFrame>
+                    </>
+                  ) : null}
+                </div>
+              ) : null}
+
+              {paletteQuery && filteredNavItems.length === 0 && !hasEntityResults ? (
+                <div className="py-6 text-center text-[13px] text-[color:var(--muted)]">No results for "{commandPaletteSearch}"</div>
+              ) : null}
+            </motion.div>
+          </motion.div>
+        ) : null}
+      </AnimatePresence>
+
+    </div>
+  );
+}
diff --git a/src/renderer/components/CompanyOnboarding.tsx b/src/renderer/components/CompanyOnboarding.tsx
new file mode 100644
index 00000000..bac63af6
--- /dev/null
+++ b/src/renderer/components/CompanyOnboarding.tsx
@@ -0,0 +1,178 @@
+import { useState } from "react";
+import { motion } from "framer-motion";
+import { Buildings, CheckCircle, FolderOpen, WarningCircle, XCircle } from "@phosphor-icons/react";
+import type { ProfileSnapshot } from "@shared/types";
+import { unwrap } from "../lib/desktop";
+import { ActionButton, Input } from "./ui";
+
+export function CompanyOnboarding({
+  connectors,
+  onDone,
+}: {
+  connectors: ProfileSnapshot["connectors"];
+  onDone: () => Promise<void>;
+}) {
+  const [companyName, setCompanyName] = useState("");
+  const [workspacePath, setWorkspacePath] = useState("");
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const hasReadyConnector = connectors.some((c) => c.status === "ready" || c.status === "degraded");
+
+  async function pickDirectory() {
+    setError(null);
+    const result = await window.agentCompany.pickDirectory();
+    if (!result.ok) {
+      setError(result.error.message);
+      return;
+    }
+    if (result.data) {
+      setWorkspacePath(result.data);
+    }
+  }
+
+  async function submit() {
+    if (loading) return;
+    if (!companyName.trim()) {
+      setError("Enter a company name.");
+      return;
+    }
+    if (!hasReadyConnector) {
+      setError("At least one connector must be detected before creating a company.");
+      return;
+    }
+    setLoading(true);
+    setError(null);
+    try {
+      const companyId = unwrap(
+        await window.agentCompany.saveCompany({
+          name: companyName.trim(),
+          description: "",
+          status: "active",
+        }),
+      );
+      if (workspacePath) {
+        unwrap(
+          await window.agentCompany.saveWorkspace({
+            companyId,
+            name: "Default Workspace",
+            localPath: workspacePath,
+            repoUrl: "",
+            repoRef: "",
+            isPrimary: true,
+          }),
+        );
+      }
+      unwrap(await window.agentCompany.setCurrentCompany(companyId));
+      await onDone();
+    } catch (submitError) {
+      setError(submitError instanceof Error ? submitError.message : "Unable to create the company.");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  return (
+    <div className="grid min-h-[100dvh] grid-cols-1 bg-[color:var(--bg)] md:grid-cols-[minmax(0,1fr)_440px]">
+      <div className="flex items-center px-8 py-12 md:px-16">
+        <motion.div
+          initial={{ opacity: 0, y: 24 }}
+          animate={{ opacity: 1, y: 0 }}
+          transition={{ duration: 0.45, ease: [0.16, 1, 0.3, 1] }}
+          className="max-w-[420px]"
+        >
+          <div className="mb-3 text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">AgentCompany Desktop</div>
+          <h1 className="text-[38px] leading-[0.98] tracking-[-0.03em] text-[color:var(--text)] md:text-[48px]">
+            Welcome.
+          </h1>
+          <p className="mt-4 text-[14px] leading-relaxed text-[color:var(--muted)]">
+            We detected the following coding agents on your system. You'll configure your organization structure, goals, and agents from the dashboard after setup.
+          </p>
+          <div className="mt-8">
+            <div className="mb-3 text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Detected connectors</div>
+            <div className="space-y-2.5">
+              {connectors.map((c) => {
+                const isOk = c.status === "ready" || c.status === "degraded";
+                const isFail = c.status === "not_installed";
+                return (
+                  <div key={c.id} className="flex items-center gap-2.5 text-[13px]">
+                    {isOk ? (
+                      <CheckCircle size={16} weight="fill" className="shrink-0 text-[color:var(--success)]" />
+                    ) : isFail ? (
+                      <XCircle size={16} weight="fill" className="shrink-0 text-[color:var(--muted)]" />
+                    ) : (
+                      <WarningCircle size={16} weight="fill" className="shrink-0 text-[color:var(--warn)]" />
+                    )}
+                    <span className={isOk ? "font-medium text-[color:var(--text)]" : "text-[color:var(--muted)]"}>
+                      {c.label}
+                    </span>
+                    <span className="text-[11px] text-[color:var(--muted)]">
+                      {c.status.replaceAll("_", " ")}
+                    </span>
+                  </div>
+                );
+              })}
+            </div>
+            {!hasReadyConnector && (
+              <div className="mt-4 rounded-[10px] border border-[color:var(--warn)] bg-[color:var(--warn-soft)] px-4 py-3 text-[12px] text-[color:var(--warn)]">
+                No connector detected. Install at least one supported CLI tool (Claude Code, Codex, Gemini CLI, OpenCode, or Kimi Code) and restart.
+              </div>
+            )}
+          </div>
+        </motion.div>
+      </div>
+
+      <div className="flex items-center border-l border-[color:var(--line)] bg-[color:var(--bg-subtle)] px-6 py-10 md:px-10">
+        <motion.div
+          initial={{ opacity: 0, y: 18 }}
+          animate={{ opacity: 1, y: 0 }}
+          transition={{ delay: 0.08, duration: 0.4, ease: [0.16, 1, 0.3, 1] }}
+          className="surface w-full rounded-[12px] p-7"
+        >
+          <div className="mb-2 text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Getting started</div>
+          <div className="mb-1 text-[18px] font-semibold tracking-[-0.01em] text-[color:var(--text)]">Create your company</div>
+          <div className="mb-6 h-px bg-[color:var(--line)]" />
+          <div className="space-y-4">
+            <Input label="Company name" value={companyName} onChange={setCompanyName} placeholder="e.g. Acme Engineering" />
+            <div>
+              <label
+                htmlFor="onboarding-workspace-path"
+                className="mb-1.5 block text-[12px] font-medium text-[color:var(--muted-strong)]"
+              >
+                Workspace folder <span className="font-normal text-[color:var(--muted)]">(optional)</span>
+              </label>
+              <div className="flex gap-3">
+                <Input
+                  id="onboarding-workspace-path"
+                  ariaLabel="Workspace folder"
+                  value={workspacePath}
+                  onChange={setWorkspacePath}
+                  placeholder="/Users/you/project"
+                />
+                <ActionButton label="Choose" onClick={() => void pickDirectory()} icon={FolderOpen} />
+              </div>
+              <div className="mt-1.5 text-[11px] text-[color:var(--muted)]">
+                You can add more workspaces later from the dashboard.
+              </div>
+            </div>
+          </div>
+          {error ? (
+            <div className="mt-5 rounded-[10px] border border-[color:var(--danger)] bg-[color:var(--danger-soft)] px-4 py-3 text-[13px] text-[color:var(--danger)]" role="alert">
+              {error}
+            </div>
+          ) : null}
+          <div className="mt-8 flex items-center justify-end gap-4">
+            <ActionButton
+              label={loading ? "Creating..." : "Continue to dashboard"}
+              onClick={() => void submit()}
+              icon={Buildings}
+              tone="accent"
+              loading={loading}
+              disabled={!hasReadyConnector || !companyName.trim()}
+            />
+          </div>
+        </motion.div>
+      </div>
+    </div>
+  );
+}
diff --git a/src/renderer/components/EntityWorkspace.tsx b/src/renderer/components/EntityWorkspace.tsx
new file mode 100644
index 00000000..95e2d6af
--- /dev/null
+++ b/src/renderer/components/EntityWorkspace.tsx
@@ -0,0 +1,23 @@
+import type { ReactNode } from "react";
+
+export function EntityWorkspace({
+  title,
+  eyebrow,
+  primary,
+  secondary,
+}: {
+  title: string;
+  eyebrow?: string;
+  primary: ReactNode;
+  secondary: ReactNode;
+}) {
+  return (
+    <div className="space-y-14">
+      <div>
+        {eyebrow ? <div className="text-[10px] uppercase tracking-[0.08em] text-[color:var(--muted)]">{eyebrow}</div> : null}
+        <h2 className={`${eyebrow ? "mt-2" : ""} text-[18px] font-semibold tracking-[-0.01em] text-[color:var(--text)]`}>{title}</h2>
+      </div>
+      <div className="space-y-14">{primary}{secondary}</div>
+    </div>
+  );
+}
diff --git a/src/renderer/components/connectors.tsx b/src/renderer/components/connectors.tsx
new file mode 100644
index 00000000..c17a0d03
--- /dev/null
+++ b/src/renderer/components/connectors.tsx
@@ -0,0 +1,70 @@
+import { useEffect, useState } from "react";
+import { CheckCircle } from "@phosphor-icons/react";
+import type { ConnectorRecord } from "@shared/types";
+import { ActionButton, Input, StatusPill, TextArea } from "./ui";
+
+export function ConnectorEditor({ connector, onSaved }: { connector: ConnectorRecord; onSaved: () => Promise<void> }) {
+  const [model, setModel] = useState(connector.model ?? "");
+  const [envBindingText, setEnvBindingText] = useState(connector.envBindingText);
+  const [notes, setNotes] = useState(connector.notes);
+
+  useEffect(() => {
+    setModel(connector.model ?? "");
+    setEnvBindingText(connector.envBindingText);
+    setNotes(connector.notes);
+  }, [connector]);
+
+  return (
+    <div className="grid gap-4">
+      <div className="grid gap-4 md:grid-cols-2">
+        <div>
+          <div className="mb-1.5 text-[12px] font-medium text-[color:var(--muted-strong)]">Status</div>
+          <div className="flex items-center gap-3">
+            <StatusPill status={connector.status} />
+            <span className="text-[12px] text-[color:var(--muted)]">{connector.version ?? "version unknown"}</span>
+          </div>
+        </div>
+        <div>
+          <div className="mb-1.5 text-[12px] font-medium text-[color:var(--muted-strong)]">Capability matrix</div>
+          <div className="grid grid-cols-2 gap-2">
+            {Object.entries(connector.capabilityMatrix).map(([key, value]) => (
+              <div key={key} className={`rounded-[6px] border px-3 py-2 text-[12px] ${value ? "border-[color:var(--accent)] border-opacity-20 bg-[color:var(--accent-soft)] text-[color:var(--accent)]" : "border-[color:var(--line)] bg-[color:var(--panel-soft)] text-[color:var(--muted)]"}`}>
+                {key}
+              </div>
+            ))}
+          </div>
+        </div>
+      </div>
+      <div>
+        <Input label="Command" value={connector.command} onChange={() => undefined} readOnly />
+        <div className="mt-1.5 text-[12px] leading-relaxed text-[color:var(--muted)]">
+          AgentCompany pins connector execution to the audited binary for this runtime. Command overrides are not accepted from the renderer.
+        </div>
+      </div>
+      <Input label="Model" value={model} onChange={setModel} placeholder="Leave empty to use connector default" />
+      <TextArea label="Secret bindings" value={envBindingText} onChange={setEnvBindingText} rows={4} placeholder={"OPENAI_API_KEY=my-vault-key\nANTHROPIC_API_KEY=my-anthropic-key"} />
+      <TextArea label="Operational notes" value={notes} onChange={setNotes} rows={4} />
+      <div className="grid gap-3 md:grid-cols-[auto_1fr]">
+        <ActionButton
+          label="Save connector"
+          tone="accent"
+          onClick={() => void (async () => {
+            await window.agentCompany.saveConnector({
+              id: connector.id,
+              command: connector.command,
+              model: model || null,
+              envBindingText,
+              notes,
+            });
+            await onSaved();
+          })()}
+          icon={CheckCircle}
+        />
+        <div className="rounded-[10px] border border-[color:var(--line)] bg-[color:var(--panel-soft)] px-4 py-4 text-[12px] leading-relaxed text-[color:var(--muted)]">
+          <div className="mb-2 text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">Configuration doc</div>
+          <pre className="mono whitespace-pre-wrap">{connector.configurationDoc}</pre>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/src/renderer/components/execution.tsx b/src/renderer/components/execution.tsx
new file mode 100644
index 00000000..4b236e70
--- /dev/null
+++ b/src/renderer/components/execution.tsx
@@ -0,0 +1,1449 @@
+import { useCallback, useEffect, useState, useMemo } from "react";
+import {
+  ArrowClockwise,
+  ArrowSquareOut,
+  CheckCircle,
+  ClockCounterClockwise,
+  Download,
+  FolderOpen,
+  ListChecks,
+  MagnifyingGlass,
+  Pencil,
+  Play,
+  ShieldCheck,
+  Trash,
+  XCircle,
+  Warning,
+  Robot,
+  CheckSquare,
+  Gear,
+  Key,
+  Lightning,
+  Target,
+  Briefcase,
+  Buildings,
+  ArrowRight,
+} from "@phosphor-icons/react";
+import type {
+  ActivityRecord,
+  AgentRecord,
+  ApprovalRecord,
+  GoalRecord,
+  ProfileSnapshot,
+  ProjectRecord,
+  RunRecord,
+  SecretRecord,
+  TaskRecord,
+  TaskStatus,
+  WorkspaceRecord,
+} from "@shared/types";
+import { formatMoney, formatTime } from "../lib/formatters";
+import { unwrap } from "../lib/desktop";
+import { ActionButton, EmptyState, Field, Input, ListFrame, ListRow, Select, StatusPill, TextArea, useFocusTrap } from "./ui";
+
+function describeActionError(error: unknown) {
+  return error instanceof Error ? error.message : "The action could not be completed.";
+}
+
+function InlineNotice({
+  message,
+  tone = "danger",
+}: {
+  message: string;
+  tone?: "danger" | "success" | "warn";
+}) {
+  const toneClass = tone === "success"
+    ? "border-[color:var(--success)] bg-[color:var(--success-soft)] text-[color:var(--success)]"
+    : tone === "warn"
+      ? "border-[color:var(--warn)] bg-[color:var(--warn-soft)] text-[color:var(--warn)]"
+      : "border-[color:var(--danger)] bg-[color:var(--danger-soft)] text-[color:var(--danger)]";
+  return (
+    <div className={`rounded-[10px] border px-4 py-3 text-[13px] ${toneClass}`} role={tone === "danger" ? "alert" : "status"}>
+      {message}
+    </div>
+  );
+}
+
+/* ─── Confirm Dialog ─────────────────────────────────────────────────── */
+
+export function ConfirmDialog({ open, title, message, errorMessage, onConfirm, onCancel }: {
+  open: boolean;
+  title: string;
+  message: string;
+  errorMessage?: string | null;
+  onConfirm: () => void;
+  onCancel: () => void;
+}) {
+  const trapRef = useFocusTrap(open);
+
+  useEffect(() => {
+    if (!open) return;
+    function onKey(event: KeyboardEvent) {
+      if (event.key === "Escape") onCancel();
+    }
+    document.addEventListener("keydown", onKey);
+    return () => document.removeEventListener("keydown", onKey);
+  }, [open, onCancel]);
+
+  if (!open) return null;
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center bg-[color:var(--text)]/45" onClick={onCancel}>
+      <div
+        ref={trapRef}
+        role="dialog"
+        aria-modal="true"
+        aria-labelledby="confirm-dialog-title"
+        className="w-full max-w-[400px] rounded-[12px] bg-[color:var(--panel)] border border-[color:var(--line)] p-6 shadow-lg"
+        onClick={e => e.stopPropagation()}
+      >
+        <div id="confirm-dialog-title" className="text-[16px] font-semibold text-[color:var(--text)] mb-2">{title}</div>
+        <div className="text-[13px] text-[color:var(--muted)] mb-6">{message}</div>
+        {errorMessage ? <div className="mb-4"><InlineNotice message={errorMessage} /></div> : null}
+        <div className="flex gap-3 justify-end">
+          <ActionButton label="Cancel" onClick={onCancel} />
+          <ActionButton label="Confirm" tone="danger" onClick={onConfirm} />
+        </div>
+      </div>
+    </div>
+  );
+}
+
+/* ─── Entity-type icon lookup ────────────────────────────────────────── */
+
+const ENTITY_ICONS: Record<string, typeof Robot> = {
+  agent: Robot,
+  task: CheckSquare,
+  run: Play,
+  approval: ShieldCheck,
+  connector: Gear,
+  workspace: FolderOpen,
+  secret: Key,
+  goal: Target,
+  project: Briefcase,
+  company: Buildings,
+};
+
+const ENTITY_TYPE_OPTIONS = [
+  "all", "agent", "task", "run", "approval", "connector", "workspace", "secret", "goal", "project", "company",
+] as const;
+
+/* ─── Workspace state pills ──────────────────────────────────────────── */
+
+function WorkspaceStatePill({ state }: { state: string }) {
+  const colorMap: Record<string, string> = {
+    ready: "text-[color:var(--success)] bg-[color:var(--success-soft)]",
+    busy: "text-[color:var(--warn)] bg-[color:var(--warn-soft)]",
+    blocked: "text-[color:var(--danger)] bg-[color:var(--danger-soft)]",
+    missing: "text-[color:var(--muted-strong)] bg-[color:var(--panel-soft)]",
+    error: "text-[color:var(--danger)] bg-[color:var(--danger-soft)]",
+  };
+  return (
+    <span className={`inline-flex items-center gap-1.5 rounded-full px-2 py-0.5 text-[10px] font-semibold uppercase tracking-[0.1em] ${colorMap[state] ?? colorMap.missing}`}>
+      {state}
+    </span>
+  );
+}
+
+/* ─── Priority indicator ─────────────────────────────────────────────── */
+
+function PriorityDot({ priority }: { priority: string }) {
+  const color = priority === "critical"
+    ? "bg-[color:var(--danger)]"
+    : priority === "high"
+      ? "bg-[color:var(--warn)]"
+      : priority === "low"
+        ? "bg-[color:var(--muted)]"
+        : "bg-[color:var(--muted-strong)]";
+  return <span className={`inline-block h-2 w-2 shrink-0 rounded-full ${color}`} aria-label={`${priority} priority`} />;
+}
+
+/* ─── Task Queue ─────────────────────────────────────────────────────── */
+
+export function TaskQueue({
+  tasks,
+  runs,
+  selectedTaskId,
+  onSelect,
+}: {
+  tasks: TaskRecord[];
+  runs: RunRecord[];
+  selectedTaskId: string | null;
+  onSelect: (taskId: string) => void;
+}) {
+  if (tasks.length === 0) {
+    return <EmptyState title="Task queue is empty" />;
+  }
+  return (
+    <ListFrame>
+      {tasks.map((task) => {
+        const activeRun = runs.find((run) => run.id === task.activeRunId) ?? null;
+        return (
+          <button
+            key={task.id}
+            className={`focus-ring relative w-full border-b border-[color:var(--line)] px-5 py-4 text-left transition last:border-b-0 ${
+              selectedTaskId === task.id
+                ? "bg-transparent"
+                : "bg-transparent hover:bg-[color:var(--panel-soft)]"
+            }`}
+            onClick={() => onSelect(task.id)}
+          >
+            {selectedTaskId === task.id ? (
+              <span className="absolute inset-y-3 left-0 w-0.5 rounded-full bg-[color:var(--accent)]" />
+            ) : null}
+            <div className="flex items-center justify-between gap-4">
+              <div className="flex min-w-0 items-center gap-2.5">
+                <PriorityDot priority={task.priority} />
+                <div className={`truncate text-[14px] text-[color:var(--text)] ${selectedTaskId === task.id ? "font-semibold" : "font-medium"}`}>{task.title}</div>
+              </div>
+              <StatusPill status={activeRun?.status ?? task.status} />
+            </div>
+          </button>
+        );
+      })}
+    </ListFrame>
+  );
+}
+
+/* ─── Task Inspector ─────────────────────────────────────────────────── */
+
+export function TaskInspector({
+  task,
+  tasks,
+  runs,
+  agents,
+  goals,
+  projects,
+  workspaces,
+  companyId,
+  onRun,
+  onCancelRun,
+  onCreateApproval,
+  onDeleted,
+}: {
+  task: TaskRecord;
+  tasks: TaskRecord[];
+  runs: RunRecord[];
+  agents: ProfileSnapshot["agents"];
+  goals: GoalRecord[];
+  projects: ProjectRecord[];
+  workspaces: WorkspaceRecord[];
+  companyId: string;
+  onRun: (taskId: string) => Promise<void>;
+  onCancelRun: (runId: string) => Promise<void>;
+  onCreateApproval: () => Promise<void>;
+  onDeleted: () => Promise<void>;
+}) {
+  const [editing, setEditing] = useState(false);
+  const [editTitle, setEditTitle] = useState(task.title);
+  const [editDescription, setEditDescription] = useState(task.description);
+  const [editPriority, setEditPriority] = useState(task.priority);
+  const [editStatus, setEditStatus] = useState<TaskStatus>(task.status);
+  const [editAssignee, setEditAssignee] = useState(task.assigneeAgentId ?? "");
+  const [editWorkspace, setEditWorkspace] = useState(task.workspaceId ?? "");
+  const [editProject, setEditProject] = useState(task.projectId ?? "");
+  const [editGoal, setEditGoal] = useState(task.goalId ?? "");
+  const [confirmDelete, setConfirmDelete] = useState(false);
+  const [actionError, setActionError] = useState<string | null>(null);
+  const [actionNotice, setActionNotice] = useState<string | null>(null);
+  const [deleteError, setDeleteError] = useState<string | null>(null);
+  const [savingChanges, setSavingChanges] = useState(false);
+  const [updatingStatus, setUpdatingStatus] = useState<TaskStatus | null>(null);
+  const [creatingApproval, setCreatingApproval] = useState(false);
+
+  const assignee = agents.find((agent) => agent.id === task.assigneeAgentId) ?? null;
+  const project = projects.find((entry) => entry.id === task.projectId) ?? null;
+  const goal = goals.find((entry) => entry.id === task.goalId) ?? null;
+  const workspace = workspaces.find((entry) => entry.id === task.workspaceId) ?? null;
+  const activeRun = runs.find((run) => run.id === task.activeRunId) ?? null;
+  const reviewer = assignee?.reportsTo ? (agents.find((a) => a.id === assignee.reportsTo) ?? null) : null;
+  const needsGovernance = task.status === "blocked" || (task.status === "in_review" && !reviewer);
+
+  const budgetWarning = assignee && assignee.budgetMonthlyUsd > 0
+    ? assignee.spentMonthlyUsd / assignee.budgetMonthlyUsd
+    : 0;
+
+  function startEdit() {
+    setActionError(null);
+    setActionNotice(null);
+    setEditTitle(task.title);
+    setEditDescription(task.description);
+    setEditPriority(task.priority);
+    setEditStatus(task.status);
+    setEditAssignee(task.assigneeAgentId ?? "");
+    setEditWorkspace(task.workspaceId ?? "");
+    setEditProject(task.projectId ?? "");
+    setEditGoal(task.goalId ?? "");
+    setEditing(true);
+  }
+
+  async function saveChanges() {
+    setActionError(null);
+    setActionNotice(null);
+    setSavingChanges(true);
+    try {
+      unwrap(await window.agentCompany.saveTask({
+        id: task.id,
+        companyId: task.companyId,
+        title: editTitle,
+        description: editDescription,
+        priority: editPriority as TaskRecord["priority"],
+        status: editStatus,
+        assigneeAgentId: editAssignee || null,
+        workspaceId: editWorkspace || null,
+        projectId: editProject || null,
+        goalId: editGoal || null,
+      }));
+      setEditing(false);
+      setActionNotice("Task changes saved.");
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setSavingChanges(false);
+    }
+  }
+
+  async function quickStatus(status: TaskStatus) {
+    setActionError(null);
+    setActionNotice(null);
+    setUpdatingStatus(status);
+    try {
+      unwrap(await window.agentCompany.saveTask({
+        id: task.id,
+        companyId: task.companyId,
+        title: task.title,
+        description: task.description,
+        priority: task.priority,
+        status,
+        assigneeAgentId: task.assigneeAgentId,
+        workspaceId: task.workspaceId,
+        projectId: task.projectId,
+        goalId: task.goalId,
+      }));
+      setActionNotice(`Task moved to ${status.replaceAll("_", " ")}.`);
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setUpdatingStatus(null);
+    }
+  }
+
+  async function handleCreateApproval() {
+    setActionError(null);
+    setActionNotice(null);
+    setCreatingApproval(true);
+    try {
+      await onCreateApproval();
+      setActionNotice(task.status === "blocked" ? "Approval created and routed to leadership." : "Approval created.");
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setCreatingApproval(false);
+    }
+  }
+
+  async function handleDelete() {
+    setDeleteError(null);
+    try {
+      unwrap(await window.agentCompany.deleteTask({ id: task.id, companyId }));
+      setConfirmDelete(false);
+      await onDeleted();
+    } catch (error) {
+      setDeleteError(describeActionError(error));
+    }
+  }
+
+  return (
+    <div className="space-y-5">
+      <ConfirmDialog
+        open={confirmDelete}
+        title="Delete task"
+        message={`Permanently delete "${task.title}"? This cannot be undone.`}
+        errorMessage={deleteError}
+        onConfirm={() => void handleDelete()}
+        onCancel={() => {
+          setDeleteError(null);
+          setConfirmDelete(false);
+        }}
+      />
+
+      {/* Budget warning */}
+      {budgetWarning > 0.8 && assignee ? (
+        <div className={`flex items-center gap-2 rounded-[8px] border px-4 py-3 text-[13px] font-medium ${
+          budgetWarning > 1
+            ? "border-[color:var(--danger)] bg-[color:var(--danger-soft)] text-[color:var(--danger)]"
+            : "border-[color:var(--warn)] bg-[color:var(--warn-soft)] text-[color:var(--warn)]"
+        }`}>
+          <Warning size={16} weight="fill" />
+          {assignee.name} has used {Math.round(budgetWarning * 100)}% of their monthly budget ({formatMoney(assignee.spentMonthlyUsd)} / {formatMoney(assignee.budgetMonthlyUsd)})
+        </div>
+      ) : null}
+
+      {actionError ? <InlineNotice message={actionError} /> : null}
+      {!actionError && actionNotice ? <InlineNotice message={actionNotice} tone="success" /> : null}
+
+      {/* Edit mode */}
+      {editing ? (
+        <div className="grid gap-3 border-y border-[color:var(--line)] py-4 md:grid-cols-2">
+          <div className="md:col-span-2">
+            <Input label="Title" value={editTitle} onChange={setEditTitle} placeholder="Task title" />
+          </div>
+          <div className="md:col-span-2">
+            <TextArea label="Description" value={editDescription} onChange={setEditDescription} placeholder="Description" rows={4} />
+          </div>
+          <Select label="Priority" value={editPriority} onChange={v => setEditPriority(v as TaskRecord["priority"])} options={["critical", "high", "medium", "low"].map(v => ({ value: v, label: v }))} />
+          <Select label="Status" value={editStatus} onChange={v => setEditStatus(v as TaskStatus)} options={["backlog", "todo", "in_progress", "in_review", "done", "blocked", "cancelled"].map(v => ({ value: v, label: v.replaceAll("_", " ") }))} />
+          <Select label="Assignee" value={editAssignee} onChange={setEditAssignee} options={[{ value: "", label: "Unassigned" }, ...agents.map(a => ({ value: a.id, label: a.name }))]} />
+          <Select label="Workspace" value={editWorkspace} onChange={setEditWorkspace} options={[{ value: "", label: "No workspace" }, ...workspaces.map(w => ({ value: w.id, label: w.name }))]} />
+          <Select label="Project" value={editProject} onChange={setEditProject} options={[{ value: "", label: "No project" }, ...projects.map(p => ({ value: p.id, label: p.name }))]} />
+          <Select label="Goal" value={editGoal} onChange={setEditGoal} options={[{ value: "", label: "No goal" }, ...goals.map(g => ({ value: g.id, label: g.title }))]} />
+          <div className="md:col-span-2 flex gap-3">
+            <ActionButton label="Save" tone="accent" onClick={() => void saveChanges()} icon={CheckCircle} loading={savingChanges} />
+            <ActionButton label="Cancel" onClick={() => setEditing(false)} icon={XCircle} />
+          </div>
+        </div>
+      ) : (
+        <>
+          {/* Compact metadata */}
+          <div className="grid gap-x-6 gap-y-1 text-[13px] md:grid-cols-2">
+            {assignee && <div className="text-[color:var(--muted)]">Assignee: <span className="text-[color:var(--text)]">{assignee.name}</span></div>}
+            {project && <div className="text-[color:var(--muted)]">Project: <span className="text-[color:var(--text)]">{project.name}</span></div>}
+            {goal && <div className="text-[color:var(--muted)]">Goal: <span className="text-[color:var(--text)]">{goal.title}</span></div>}
+            {task.parentId && (() => { const parent = tasks.find((t) => t.id === task.parentId); return parent ? <div className="text-[color:var(--muted)]">Parent: <span className="text-[color:var(--text)]">{parent.title}</span></div> : null; })()}
+            {workspace && <div className="text-[color:var(--muted)]">Workspace: <span className="text-[color:var(--text)]">{workspace.name}</span></div>}
+            {task.costUsd > 0 && <div className="text-[color:var(--muted)]">Cost: <span className="mono text-[color:var(--text)]">{formatMoney(task.costUsd)}</span></div>}
+          </div>
+
+          {/* Description */}
+          {task.description ? (
+            <div className="text-[13px] leading-relaxed text-[color:var(--muted-strong)] whitespace-pre-wrap">{task.description}</div>
+          ) : null}
+
+          {task.status === "in_review" && reviewer ? (
+            <div className="rounded-[10px] border border-blue-200 bg-blue-50 px-4 py-3">
+              <div className="flex items-center gap-2 text-[13px] font-semibold text-blue-700">
+                <Robot size={16} weight="fill" />
+                Being reviewed by {reviewer.name}{reviewer.title ? ` (${reviewer.title})` : ""}
+              </div>
+              <div className="mt-1 text-[13px] leading-relaxed text-blue-600/80">
+                {assignee?.name} submitted this task for review. {reviewer.name} will approve, request revisions, or escalate.
+              </div>
+            </div>
+          ) : needsGovernance ? (
+            <div className="rounded-[10px] border border-[color:var(--warn)] bg-[color:var(--warn-soft)] px-4 py-3">
+              <div className="flex items-center gap-2 text-[13px] font-semibold text-[color:var(--warn)]">
+                <ShieldCheck size={16} weight="fill" />
+                {task.status === "blocked" ? "Governance action required" : "Task is waiting on review"}
+              </div>
+              <div className="mt-1 text-[13px] leading-relaxed text-[color:var(--muted-strong)]">
+                {task.status === "blocked"
+                  ? "Create an approval so leadership can resolve the blocker, provide credentials, or authorize the next privileged action."
+                  : "Create an approval entry if this task needs an explicit operator decision before it can move forward."}
+              </div>
+              <div className="mt-3">
+                <ActionButton
+                  label={task.status === "blocked" ? "Create unblock approval" : "Create review approval"}
+                  onClick={() => void handleCreateApproval()}
+                  icon={ShieldCheck}
+                  loading={creatingApproval}
+                />
+              </div>
+            </div>
+          ) : null}
+
+          {/* Contextual actions — only show what makes sense for current state */}
+          <div className="flex items-center gap-2 pt-1">
+            {activeRun ? (
+              <ActionButton label="Cancel run" onClick={() => void onCancelRun(activeRun.id)} icon={XCircle} tone="danger" />
+            ) : (
+              <>
+                {["todo", "in_progress", "blocked"].includes(task.status) && (
+                  <ActionButton label="Run" onClick={() => void onRun(task.id)} icon={Play} tone="accent" />
+                )}
+                {task.status === "in_review" && (
+                  <ActionButton label="Done" onClick={() => void quickStatus("done")} icon={CheckCircle} tone="accent" loading={updatingStatus === "done"} />
+                )}
+                {task.status === "blocked" && (
+                  <ActionButton label="Unblock" onClick={() => void quickStatus("in_progress")} icon={Play} loading={updatingStatus === "in_progress"} />
+                )}
+              </>
+            )}
+            <ActionButton label="Edit" onClick={startEdit} icon={Pencil} />
+            <ActionButton label="Delete" onClick={() => setConfirmDelete(true)} icon={Trash} tone="danger" />
+          </div>
+        </>
+      )}
+
+      {/* Communication */}
+      <TaskComments taskId={task.id} companyId={task.companyId} agents={agents} />
+
+      {/* Run history — only if there are runs */}
+      {runs.length > 0 && (
+        <div className="space-y-2">
+          <div className="text-[11px] font-medium uppercase tracking-[0.08em] text-[color:var(--muted)]">Run history</div>
+          <div className="space-y-2">
+            {runs.slice(0, 5).map((run) => (
+              <div key={run.id} className="flex items-center justify-between rounded-md bg-[color:var(--panel-soft)] px-3 py-2">
+                <div>
+                  <div className="text-[13px] text-[color:var(--text)]">{run.summary || "Run"}</div>
+                  <div className="text-[11px] text-[color:var(--muted)]">{formatTime(run.startedAt)}{run.finishedAt ? ` · ${formatTime(run.finishedAt)}` : ""}</div>
+                  {run.errorMessage ? <div className="mt-1 text-[11px] text-[color:var(--danger)]">{run.errorMessage}</div> : null}
+                </div>
+                <StatusPill status={run.status} />
+              </div>
+            ))}
+            {runs.length > 5 && <div className="text-[11px] text-[color:var(--muted)] text-center">+{runs.length - 5} more runs</div>}
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+/* ─── Task Comments ──────────────────────────────────────────────────── */
+
+function TaskComments({
+  taskId,
+  companyId,
+  agents,
+}: {
+  taskId: string;
+  companyId: string;
+  agents: ProfileSnapshot["agents"];
+}) {
+  const [comments, setComments] = useState<Array<{ id: string; authorAgentId: string | null; authorName: string; body: string; createdAt: string }>>([]);
+  const [newComment, setNewComment] = useState("");
+  const [loading, setLoading] = useState(true);
+  const [submitError, setSubmitError] = useState<string | null>(null);
+
+  const loadComments = useCallback(async () => {
+    const result = await window.agentCompany.listComments({ taskId });
+    if (result.ok) setComments(result.data);
+    setLoading(false);
+  }, [taskId]);
+
+  useEffect(() => {
+    void loadComments();
+    const unsubscribe = window.agentCompany.subscribe((event) => {
+      if (event.type === "agent-message" && event.taskId === taskId) {
+        setComments((prev) => [...prev, event.comment]);
+      }
+    });
+    return unsubscribe;
+  }, [taskId, loadComments]);
+
+  const handleSubmit = async () => {
+    if (!newComment.trim()) return;
+    setSubmitError(null);
+    try {
+      unwrap(await window.agentCompany.addComment({
+        companyId,
+        taskId,
+        authorName: "Board",
+        body: newComment.trim(),
+      }));
+      setNewComment("");
+      await loadComments();
+    } catch (error) {
+      setSubmitError(describeActionError(error));
+    }
+  };
+
+  return (
+    <div className="space-y-3">
+      <div className="flex items-center gap-2">
+        <Robot size={16} className="text-[color:var(--muted)]" />
+        <span className="text-[13px] font-semibold text-[color:var(--text)]">Communication</span>
+        <span className="text-[11px] text-[color:var(--muted)]">({comments.length})</span>
+      </div>
+      {loading ? (
+        <div className="text-[12px] text-[color:var(--muted)]">Loading...</div>
+      ) : comments.length === 0 ? (
+        <div className="text-[12px] text-[color:var(--muted)]">No messages yet. Agents will post updates here during runs.</div>
+      ) : (
+        <div className="max-h-[240px] space-y-2 overflow-y-auto rounded-lg border border-[color:var(--line)] p-3">
+          {comments.map((comment) => {
+            const isAgent = Boolean(comment.authorAgentId);
+            const agent = isAgent ? agents.find((a) => a.id === comment.authorAgentId) : null;
+            return (
+              <div key={comment.id} className="rounded-md bg-[color:var(--panel-soft)] px-3 py-2">
+                <div className="flex items-center gap-2">
+                  <span className={`text-[12px] font-semibold ${isAgent ? "text-[color:var(--accent)]" : "text-[color:var(--text)]"}`}>
+                    {comment.authorName}
+                  </span>
+                  {agent && <span className="text-[10px] text-[color:var(--muted)]">{agent.role}</span>}
+                  <span className="text-[10px] text-[color:var(--muted)]">{formatTime(comment.createdAt)}</span>
+                </div>
+                <div className="mt-1 whitespace-pre-wrap text-[13px] text-[color:var(--text)]">{comment.body}</div>
+              </div>
+            );
+          })}
+        </div>
+      )}
+      {submitError ? <InlineNotice message={submitError} /> : null}
+      <div className="flex gap-2">
+        <input
+          className="flex-1 rounded-md border border-[color:var(--line)] bg-[color:var(--panel)] px-3 py-2 text-[13px] text-[color:var(--text)] placeholder:text-[color:var(--muted)] focus:border-[color:var(--accent)] focus:outline-none"
+          placeholder="Send a message to the team..."
+          value={newComment}
+          onChange={(e) => setNewComment(e.target.value)}
+          onKeyDown={(e) => { if (e.key === "Enter" && !e.shiftKey) { e.preventDefault(); void handleSubmit(); } }}
+        />
+        <ActionButton label="Send" tone="accent" onClick={() => void handleSubmit()} icon={ArrowRight} />
+      </div>
+    </div>
+  );
+}
+
+/* ─── Task Creator ───────────────────────────────────────────────────── */
+
+export function TaskCreator({
+  companyId,
+  goals,
+  projects,
+  agents,
+  workspaces,
+  onSaved,
+}: {
+  companyId: string;
+  goals: GoalRecord[];
+  projects: ProjectRecord[];
+  agents: ProfileSnapshot["agents"];
+  workspaces: WorkspaceRecord[];
+  onSaved: () => Promise<void>;
+}) {
+  const [title, setTitle] = useState("");
+  const [description, setDescription] = useState("");
+  const [goalId, setGoalId] = useState(goals[0]?.id ?? "");
+  const [projectId, setProjectId] = useState(projects[0]?.id ?? "");
+  const [assigneeAgentId, setAssigneeAgentId] = useState(agents[0]?.id ?? "");
+  const [workspaceId, setWorkspaceId] = useState(workspaces[0]?.id ?? "");
+  const [priority, setPriority] = useState("medium");
+  const [submitError, setSubmitError] = useState<string | null>(null);
+  const [submitting, setSubmitting] = useState(false);
+
+  async function handleCreateTask() {
+    setSubmitError(null);
+    setSubmitting(true);
+    try {
+      unwrap(await window.agentCompany.saveTask({
+        companyId,
+        projectId: projectId || null,
+        goalId: goalId || null,
+        title,
+        description,
+        assigneeAgentId: assigneeAgentId || null,
+        workspaceId: workspaceId || null,
+        priority: priority as TaskRecord["priority"],
+        status: "todo",
+      }));
+      setTitle("");
+      setDescription("");
+      await onSaved();
+    } catch (error) {
+      setSubmitError(describeActionError(error));
+    } finally {
+      setSubmitting(false);
+    }
+  }
+
+  return (
+    <div className="grid gap-4 md:grid-cols-2">
+      <Input label="Title" value={title} onChange={setTitle} placeholder="Task title" />
+      <Select label="Priority" value={priority} onChange={setPriority} options={["critical", "high", "medium", "low"].map((value) => ({ value, label: value }))} />
+      <div className="md:col-span-2"><TextArea label="Description" value={description} onChange={setDescription} placeholder="What should the agent do, and what result should come back into the run summary?" rows={5} /></div>
+      <Select label="Goal" value={goalId} onChange={setGoalId} options={[{ value: "", label: "No goal" }, ...goals.map((goal) => ({ value: goal.id, label: goal.title }))]} />
+      <Select label="Project" value={projectId} onChange={setProjectId} options={[{ value: "", label: "No project" }, ...projects.map((project) => ({ value: project.id, label: project.name }))]} />
+      <Select label="Assignee" value={assigneeAgentId} onChange={setAssigneeAgentId} options={[{ value: "", label: "Unassigned" }, ...agents.map((agent) => ({ value: agent.id, label: agent.name }))]} />
+      <Select label="Workspace" value={workspaceId} onChange={setWorkspaceId} options={[{ value: "", label: "No workspace" }, ...workspaces.map((workspace) => ({ value: workspace.id, label: workspace.name }))]} />
+      {submitError ? <div className="md:col-span-2"><InlineNotice message={submitError} /></div> : null}
+      <div className="md:col-span-2">
+        <ActionButton
+          label="Create task"
+          tone="accent"
+          onClick={() => void handleCreateTask()}
+          icon={ListChecks}
+          loading={submitting}
+        />
+      </div>
+    </div>
+  );
+}
+
+/* ─── Pending Review List ────────────────────────────────────────────── */
+
+export function PendingReviewList({ tasks, agents }: { tasks: TaskRecord[]; agents: AgentRecord[] }) {
+  const reviewTasks = tasks.filter((t) => t.status === "in_review");
+  if (reviewTasks.length === 0) {
+    return <EmptyState title="No agent reviews in progress" />;
+  }
+  return (
+    <ListFrame>
+      {reviewTasks.map((task) => {
+        const assignee = agents.find((a) => a.id === task.assigneeAgentId) ?? null;
+        const reviewer = assignee?.reportsTo ? (agents.find((a) => a.id === assignee.reportsTo) ?? null) : null;
+        return (
+          <div key={task.id} className="flex items-start gap-3 border-b border-[color:var(--line)] px-5 py-4 last:border-b-0">
+            <Robot size={16} weight="fill" className="mt-0.5 shrink-0 text-blue-500" />
+            <div className="min-w-0 flex-1">
+              <div className="text-[13px] font-medium text-[color:var(--text)] truncate">{task.title}</div>
+              <div className="mt-0.5 text-[12px] text-[color:var(--muted)]">
+                {assignee ? assignee.name : "Unassigned"}
+                {reviewer ? <> &rarr; reviewed by <span className="text-[color:var(--muted-strong)]">{reviewer.name}{reviewer.title ? ` (${reviewer.title})` : ""}</span></> : " · awaiting review"}
+              </div>
+            </div>
+          </div>
+        );
+      })}
+    </ListFrame>
+  );
+}
+
+/* ─── Approval List ──────────────────────────────────────────────────── */
+
+export function ApprovalList({ approvals, selectedApprovalId, onSelect }: { approvals: ApprovalRecord[]; selectedApprovalId: string | null; onSelect: (id: string) => void }) {
+  if (approvals.length === 0) {
+    return <EmptyState title="No approvals" />;
+  }
+  return (
+    <ListFrame>
+      {approvals.map((approval) => (
+        <button
+          key={approval.id}
+          className={`focus-ring relative w-full border-b border-[color:var(--line)] px-5 py-4 text-left transition last:border-b-0 ${
+            selectedApprovalId === approval.id
+              ? "bg-transparent"
+              : "bg-transparent hover:bg-[color:var(--panel-soft)]"
+          }`}
+          onClick={() => onSelect(approval.id)}
+        >
+          {selectedApprovalId === approval.id ? (
+            <span className="absolute inset-y-3 left-0 w-0.5 rounded-full bg-[color:var(--warn)]" />
+          ) : null}
+          <div className="flex items-center justify-between gap-4">
+            <div className={`text-[15px] text-[color:var(--text)] ${selectedApprovalId === approval.id ? "font-semibold" : "font-medium"}`}>{approval.payloadSummary}</div>
+            <StatusPill status={approval.state} />
+          </div>
+        </button>
+      ))}
+    </ListFrame>
+  );
+}
+
+/* ─── Approval Inspector ─────────────────────────────────────────────── */
+
+export function ApprovalInspector({
+  approval,
+  agents,
+  tasks,
+  companyId,
+  onDecide,
+  onDeleted,
+}: {
+  approval: ApprovalRecord;
+  agents: AgentRecord[];
+  tasks: TaskRecord[];
+  companyId: string;
+  onDecide: (state: "approved" | "rejected" | "revision_requested", note?: string) => Promise<void>;
+  onDeleted: () => Promise<void>;
+}) {
+  const [decisionNote, setDecisionNote] = useState("");
+  const [confirmDelete, setConfirmDelete] = useState(false);
+  const [actionError, setActionError] = useState<string | null>(null);
+  const [acting, setActing] = useState<"approved" | "rejected" | "revision_requested" | "delete" | null>(null);
+
+  const requestingAgent = agents.find((a) => a.id === approval.requestedByAgentId) ?? null;
+  const relatedTask = tasks.find((t) => t.id === approval.relatedTaskId) ?? null;
+  const isDecided = approval.state !== "pending";
+
+  async function handleDelete() {
+    setActionError(null);
+    setActing("delete");
+    try {
+      unwrap(await window.agentCompany.deleteApproval({ id: approval.id, companyId }));
+      setConfirmDelete(false);
+      await onDeleted();
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setActing(null);
+    }
+  }
+
+  async function handleDecision(state: "approved" | "rejected" | "revision_requested") {
+    setActionError(null);
+    setActing(state);
+    try {
+      await onDecide(state, decisionNote || undefined);
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setActing(null);
+    }
+  }
+
+  return (
+    <div className="space-y-5">
+      <ConfirmDialog
+        open={confirmDelete}
+        title="Delete approval"
+        message={`Permanently delete this approval? This cannot be undone.`}
+        errorMessage={actionError}
+        onConfirm={() => void handleDelete()}
+        onCancel={() => {
+          setActionError(null);
+          setConfirmDelete(false);
+        }}
+      />
+
+      {actionError && !confirmDelete ? <InlineNotice message={actionError} /> : null}
+
+      <div className="border-y border-[color:var(--line)] py-4 text-[13px] leading-relaxed text-[color:var(--muted)]">
+        <div className="mb-3 text-[color:var(--text)]">{approval.payloadSummary}</div>
+        <div className="mb-3">{approval.impactSummary}</div>
+        <div className="grid gap-2 md:grid-cols-2">
+          <div>Requested by: <span className="text-[color:var(--text)]">{requestingAgent?.name ?? "Unknown agent"}</span></div>
+          <div>Related task: <span className="text-[color:var(--text)]">{relatedTask?.title ?? "None"}</span></div>
+          <div>Type: <span className="text-[color:var(--text)]">{approval.type.replaceAll("_", " ")}</span></div>
+          <div>State: <StatusPill status={approval.state} /></div>
+        </div>
+      </div>
+
+      {/* Decision note input */}
+      {!isDecided ? (
+        <div>
+          <label className="mb-1 block text-[11px] font-semibold text-[color:var(--muted)]">Decision note</label>
+          <TextArea value={decisionNote} onChange={setDecisionNote} placeholder="Optional note to accompany your decision..." rows={3} />
+        </div>
+      ) : null}
+
+      <div className="flex flex-wrap gap-3">
+        {!isDecided ? (
+          <>
+            <ActionButton label="Approve" tone="accent" onClick={() => void handleDecision("approved")} icon={CheckCircle} loading={acting === "approved"} />
+            <ActionButton label="Request revision" onClick={() => void handleDecision("revision_requested")} icon={ClockCounterClockwise} loading={acting === "revision_requested"} />
+            <ActionButton label="Reject" tone="danger" onClick={() => void handleDecision("rejected")} icon={XCircle} loading={acting === "rejected"} />
+          </>
+        ) : null}
+        {isDecided ? (
+          <ActionButton label="Delete" onClick={() => setConfirmDelete(true)} icon={Trash} tone="danger" loading={acting === "delete"} />
+        ) : null}
+      </div>
+
+      {approval.decisionNote ? (
+        <div className="border-t border-[color:var(--line)] pt-4 text-[13px] text-[color:var(--muted-strong)]">
+          Last note: {approval.decisionNote}
+        </div>
+      ) : null}
+    </div>
+  );
+}
+
+/* ─── Cost List ──────────────────────────────────────────────────────── */
+
+export function CostList({ costs, agents, runs }: { costs: ProfileSnapshot["costs"]; agents: ProfileSnapshot["agents"]; runs: ProfileSnapshot["runs"] }) {
+  const [connectorFilter, setConnectorFilter] = useState("all");
+
+  const connectorIds = useMemo(() => {
+    const ids = new Set(costs.map((c) => c.connectorId));
+    return Array.from(ids).sort();
+  }, [costs]);
+
+  const filtered = useMemo(() => {
+    if (connectorFilter === "all") return costs;
+    return costs.filter((c) => c.connectorId === connectorFilter);
+  }, [costs, connectorFilter]);
+
+  const total = useMemo(() => filtered.reduce((sum, c) => sum + (c.amountUsd ?? 0), 0), [filtered]);
+
+  if (costs.length === 0) {
+    return <EmptyState title="No cost data yet" />;
+  }
+
+  return (
+    <div className="space-y-3">
+      <div className="flex items-center gap-3">
+        <Select
+          value={connectorFilter}
+          onChange={setConnectorFilter}
+          options={[{ value: "all", label: "All connectors" }, ...connectorIds.map((id) => ({ value: id, label: id }))]}
+        />
+      </div>
+      <ListFrame>
+        {filtered.map((entry) => (
+          <ListRow key={entry.id} className="flex items-center justify-between">
+            <div>
+              <div className="text-[14px] text-[color:var(--text)]">{runs.find((run) => run.id === entry.runId)?.summary || "Run cost"}</div>
+              <div className="text-[12px] text-[color:var(--muted)]">{agents.find((agent) => agent.id === entry.agentId)?.name ?? "Unknown agent"} · {entry.connectorId}</div>
+            </div>
+            <div className="text-right">
+              <div className="mono text-[13px] text-[color:var(--text)]">{formatMoney(entry.amountUsd)}</div>
+              {entry.unattributed ? <div className="text-[11px] text-[color:var(--warn)]">unattributed</div> : null}
+            </div>
+          </ListRow>
+        ))}
+        {/* Total row */}
+        <ListRow className="flex items-center justify-between">
+          <div className="text-[14px] font-semibold text-[color:var(--text)]">Total ({filtered.length} entries)</div>
+          <div className="mono text-[14px] font-semibold text-[color:var(--text)]">{formatMoney(total)}</div>
+        </ListRow>
+      </ListFrame>
+    </div>
+  );
+}
+
+/* ─── Budget Summary ─────────────────────────────────────────────────── */
+
+export function BudgetSummary({ agents, costs }: { agents: ProfileSnapshot["agents"]; costs: ProfileSnapshot["costs"] }) {
+  const knownSpend = costs.reduce((sum, entry) => sum + (entry.amountUsd ?? 0), 0);
+  const unattributedCount = costs.filter((entry) => entry.unattributed).length;
+  return (
+    <div className="space-y-4">
+      <div className="border-y border-[color:var(--line)]">
+        <div className="flex items-end justify-between gap-4 py-3">
+          <div className="text-[12px] text-[color:var(--muted)]">Known spend</div>
+          <div className="mono text-[22px] tracking-[-0.03em] text-[color:var(--text)]">{formatMoney(knownSpend)}</div>
+        </div>
+        <div className="flex items-end justify-between gap-4 border-t border-[color:var(--line)] py-3">
+          <div className="text-[12px] text-[color:var(--muted)]">Unattributed entries</div>
+          <div className="mono text-[18px] text-[color:var(--text)]">{String(unattributedCount)}</div>
+        </div>
+      </div>
+      <ListFrame>
+        {agents.map((agent) => {
+          const pct = agent.budgetMonthlyUsd > 0
+            ? (agent.spentMonthlyUsd / agent.budgetMonthlyUsd) * 100
+            : 0;
+          const isWarning = pct > 80 && pct <= 100;
+          const isDanger = pct > 100;
+
+          const barColor = isDanger
+            ? "bg-[color:var(--danger)]"
+            : isWarning
+              ? "bg-[color:var(--warn)]"
+              : "bg-[color:var(--success)]";
+
+          const nameColor = isDanger
+            ? "text-[color:var(--danger)]"
+            : isWarning
+              ? "text-[color:var(--warn)]"
+              : "text-[color:var(--text)]";
+
+          return (
+            <ListRow key={agent.id}>
+              <div className="mb-2 flex items-center justify-between">
+                <div className="flex items-center gap-2">
+                  <div className={`text-[14px] font-medium ${nameColor}`}>{agent.name}</div>
+                  {isDanger ? <Warning size={14} weight="fill" className="text-[color:var(--danger)]" /> : null}
+                  {isWarning ? <Warning size={14} weight="fill" className="text-[color:var(--warn)]" /> : null}
+                </div>
+                <div className="flex items-center gap-2">
+                  <div className="mono text-[12px] text-[color:var(--text)]">{formatMoney(agent.spentMonthlyUsd)} / {formatMoney(agent.budgetMonthlyUsd)}</div>
+                  <span className={`mono text-[11px] font-semibold ${isDanger ? "text-[color:var(--danger)]" : isWarning ? "text-[color:var(--warn)]" : "text-[color:var(--muted)]"}`}>
+                    {Math.round(pct)}%
+                  </span>
+                </div>
+              </div>
+              <div className="h-2 rounded-full bg-[color:var(--line)]">
+                <div
+                  className={`h-2 rounded-full ${barColor}`}
+                  style={{ width: `${Math.min(100, pct)}%` }}
+                />
+              </div>
+            </ListRow>
+          );
+        })}
+      </ListFrame>
+    </div>
+  );
+}
+
+/* ─── Activity List ──────────────────────────────────────────────────── */
+
+export function ActivityList({ activity }: { activity: ActivityRecord[] }) {
+  const [search, setSearch] = useState("");
+  const [entityFilter, setEntityFilter] = useState<string>("all");
+  const [visibleCount, setVisibleCount] = useState(100);
+
+  const filtered = useMemo(() => {
+    let result = activity;
+    if (entityFilter !== "all") {
+      result = result.filter((entry) => entry.entityType === entityFilter);
+    }
+    if (search.trim()) {
+      const q = search.toLowerCase();
+      result = result.filter((entry) =>
+        entry.action.toLowerCase().includes(q) ||
+        entry.actor.toLowerCase().includes(q) ||
+        entry.detail.toLowerCase().includes(q) ||
+        entry.entityType.toLowerCase().includes(q)
+      );
+    }
+    return result;
+  }, [activity, entityFilter, search]);
+
+  const visible = filtered.slice(0, visibleCount);
+
+  if (activity.length === 0) {
+    return <EmptyState title="No activity yet" />;
+  }
+  return (
+    <div className="space-y-3">
+      {/* Search and filter bar */}
+      <div className="flex items-center gap-3">
+        <div className="relative flex-1">
+          <MagnifyingGlass size={14} className="absolute left-3 top-1/2 -translate-y-1/2 text-[color:var(--muted)]" />
+          <input
+            type="text"
+            className="focus-ring w-full rounded-[8px] border border-[color:var(--line)] bg-[color:var(--panel)] py-2.5 pl-8 pr-3.5 text-[13px] text-[color:var(--text)] placeholder:text-[color:var(--muted)]"
+            value={search}
+            onChange={(e) => setSearch(e.target.value)}
+            placeholder="Search activity..."
+          />
+        </div>
+        <Select
+          value={entityFilter}
+          onChange={setEntityFilter}
+          options={ENTITY_TYPE_OPTIONS.map((v) => ({ value: v, label: v === "all" ? "All types" : v }))}
+        />
+      </div>
+
+      {visible.length === 0 ? (
+        <EmptyState title="No matching activity" />
+      ) : (
+        <>
+          <ListFrame>
+            {visible.map((entry) => {
+              const EntityIcon = ENTITY_ICONS[entry.entityType] ?? Lightning;
+              return (
+                <ListRow key={entry.id}>
+                  <div className="mb-2 flex items-center justify-between gap-3">
+                    <div className="flex items-center gap-2">
+                      <EntityIcon size={14} weight="duotone" className="text-[color:var(--muted)]" />
+                      <div className="text-[14px] text-[color:var(--text)]">{entry.action}</div>
+                    </div>
+                    <div className="mono text-[11px] text-[color:var(--muted)]">{formatTime(entry.createdAt)}</div>
+                  </div>
+                  <div className="flex items-center gap-2 text-[13px] text-[color:var(--muted)]">
+                    <span className="font-medium text-[color:var(--muted-strong)]">{entry.actor}</span>
+                    <span>·</span>
+                    <span>{entry.detail || `${entry.entityType}:${entry.entityId}`}</span>
+                  </div>
+                </ListRow>
+              );
+            })}
+          </ListFrame>
+          {visibleCount < filtered.length ? (
+            <div className="flex justify-center pt-2">
+              <ActionButton label={`Load more (${filtered.length - visibleCount} remaining)`} onClick={() => setVisibleCount((c) => c + 100)} icon={ArrowRight} />
+            </div>
+          ) : null}
+        </>
+      )}
+    </div>
+  );
+}
+
+/* ─── Workspace List ─────────────────────────────────────────────────── */
+
+export function WorkspaceList({
+  workspaces,
+  projects,
+  companyId,
+  onOpen,
+  onDeleted,
+}: {
+  workspaces: WorkspaceRecord[];
+  projects: ProjectRecord[];
+  companyId: string;
+  onOpen: (path: string) => Promise<void>;
+  onDeleted: () => Promise<void>;
+}) {
+  const [confirmDeleteId, setConfirmDeleteId] = useState<string | null>(null);
+  const [deleteError, setDeleteError] = useState<string | null>(null);
+  const toDelete = workspaces.find((w) => w.id === confirmDeleteId) ?? null;
+
+  async function handleDelete(id: string) {
+    setDeleteError(null);
+    try {
+      unwrap(await window.agentCompany.deleteWorkspace({ id, companyId }));
+      setConfirmDeleteId(null);
+      await onDeleted();
+    } catch (error) {
+      setDeleteError(describeActionError(error));
+    }
+  }
+
+  if (workspaces.length === 0) {
+    return <EmptyState title="No workspaces yet" />;
+  }
+  return (
+    <>
+      <ConfirmDialog
+        open={confirmDeleteId !== null}
+        title="Delete workspace"
+        message={`Delete workspace "${toDelete?.name ?? ""}"? This only removes it from the company registry; files on disk are not affected.`}
+        errorMessage={deleteError}
+        onConfirm={() => confirmDeleteId && void handleDelete(confirmDeleteId)}
+        onCancel={() => {
+          setDeleteError(null);
+          setConfirmDeleteId(null);
+        }}
+      />
+      <ListFrame>
+        {workspaces.map((workspace) => {
+          const linkedProject = projects.find((p) => p.id === workspace.projectId) ?? null;
+          return (
+            <ListRow key={workspace.id}>
+              <div className="mb-2 flex items-center justify-between">
+                <div>
+                  <div className="flex items-center gap-2">
+                    <div className="text-[14px] text-[color:var(--text)]">{workspace.name}</div>
+                    <WorkspaceStatePill state={workspace.state} />
+                  </div>
+                  <div className="mono text-[11px] text-[color:var(--muted)]">{workspace.localPath}</div>
+                </div>
+                <div className="flex items-center gap-2">
+                  {workspace.isPrimary ? <StatusPill status="ready" /> : null}
+                  <ActionButton label="Reveal" onClick={() => void onOpen(workspace.localPath)} icon={ArrowSquareOut} />
+                  <ActionButton label="Delete" onClick={() => setConfirmDeleteId(workspace.id)} icon={Trash} tone="danger" />
+                </div>
+              </div>
+              <div className="text-[12px] text-[color:var(--muted)]">
+                {workspace.repoUrl || "No remote URL"} {workspace.repoRef ? `· ${workspace.repoRef}` : ""}
+                {linkedProject ? <span> · Project: <span className="text-[color:var(--text)]">{linkedProject.name}</span></span> : null}
+              </div>
+            </ListRow>
+          );
+        })}
+      </ListFrame>
+    </>
+  );
+}
+
+/* ─── Workspace Creator ──────────────────────────────────────────────── */
+
+export function WorkspaceCreator({ companyId, projects, onSaved }: { companyId: string; projects: ProjectRecord[]; onSaved: () => Promise<void> }) {
+  const [name, setName] = useState("");
+  const [localPath, setLocalPath] = useState("");
+  const [repoUrl, setRepoUrl] = useState("");
+  const [repoRef, setRepoRef] = useState("");
+  const [projectId, setProjectId] = useState(projects[0]?.id ?? "");
+  const [submitError, setSubmitError] = useState<string | null>(null);
+  const [submitting, setSubmitting] = useState(false);
+
+  async function handleChooseDirectory() {
+    setSubmitError(null);
+    const result = await window.agentCompany.pickDirectory();
+    if (!result.ok) {
+      setSubmitError(result.error.message);
+      return;
+    }
+    if (result.data) {
+      setLocalPath(result.data);
+    }
+  }
+
+  async function handleSaveWorkspace() {
+    setSubmitError(null);
+    setSubmitting(true);
+    try {
+      unwrap(await window.agentCompany.saveWorkspace({ companyId, name, localPath, repoUrl, repoRef, projectId: projectId || null, isPrimary: false }));
+      setName("");
+      setLocalPath("");
+      setRepoUrl("");
+      setRepoRef("");
+      await onSaved();
+    } catch (error) {
+      setSubmitError(describeActionError(error));
+    } finally {
+      setSubmitting(false);
+    }
+  }
+
+  return (
+    <div className="grid gap-4">
+      <Input label="Workspace name" value={name} onChange={setName} placeholder="Workspace name" />
+      <Field label="Local path">
+        <div className="flex gap-3">
+          <Input value={localPath} onChange={setLocalPath} placeholder="/Users/you/project" />
+          <ActionButton
+            label="Choose"
+            onClick={() => void handleChooseDirectory()}
+            icon={FolderOpen}
+          />
+        </div>
+      </Field>
+      <Input label="Repository URL" value={repoUrl} onChange={setRepoUrl} placeholder="https://github.com/org/repo" />
+      <Input label="Branch / ref" value={repoRef} onChange={setRepoRef} placeholder="main" />
+      <Select label="Project" value={projectId} onChange={setProjectId} options={[{ value: "", label: "No project binding" }, ...projects.map((project) => ({ value: project.id, label: project.name }))]} />
+      {submitError ? <InlineNotice message={submitError} /> : null}
+      <ActionButton
+        label="Add workspace"
+        tone="accent"
+        onClick={() => void handleSaveWorkspace()}
+        icon={FolderOpen}
+        loading={submitting}
+      />
+    </div>
+  );
+}
+
+/* ─── Settings Pane ──────────────────────────────────────────────────── */
+
+export function SettingsPane({
+  snapshot,
+  secrets,
+  companyId,
+  onSaved,
+}: {
+  snapshot: ProfileSnapshot;
+  secrets: SecretRecord[];
+  companyId: string;
+  onSaved: () => Promise<void>;
+}) {
+  const [theme, setTheme] = useState(snapshot.theme);
+  const [updatesEnabled, setUpdatesEnabled] = useState(snapshot.updatesEnabled);
+  const [confirmDeleteSecretId, setConfirmDeleteSecretId] = useState<string | null>(null);
+  const [actionError, setActionError] = useState<string | null>(null);
+  const [actionNotice, setActionNotice] = useState<string | null>(null);
+  const [deleteSecretError, setDeleteSecretError] = useState<string | null>(null);
+  const [loadingAction, setLoadingAction] = useState<"save" | "check" | "backup" | "restore" | null>(null);
+  const secretToDelete = secrets.find((s) => s.id === confirmDeleteSecretId) ?? null;
+
+  useEffect(() => {
+    setTheme(snapshot.theme);
+    setUpdatesEnabled(snapshot.updatesEnabled);
+  }, [snapshot.theme, snapshot.updatesEnabled]);
+
+  async function handleDeleteSecret(id: string) {
+    setDeleteSecretError(null);
+    setActionError(null);
+    setActionNotice(null);
+    try {
+      unwrap(await window.agentCompany.deleteSecret({ id, companyId }));
+      setConfirmDeleteSecretId(null);
+      setActionNotice("Secret deleted.");
+      await onSaved();
+    } catch (error) {
+      setDeleteSecretError(describeActionError(error));
+    }
+  }
+
+  async function handleSaveSettings() {
+    setActionError(null);
+    setActionNotice(null);
+    setLoadingAction("save");
+    try {
+      unwrap(await window.agentCompany.updateSettings({ theme, updatesEnabled }));
+      await onSaved();
+      setActionNotice("Settings saved.");
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setLoadingAction(null);
+    }
+  }
+
+  async function handleCheckForUpdates() {
+    setActionError(null);
+    setActionNotice(null);
+    setLoadingAction("check");
+    try {
+      unwrap(await window.agentCompany.checkForUpdates());
+      setActionNotice("Update check started.");
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setLoadingAction(null);
+    }
+  }
+
+  async function handleBackupProfile() {
+    setActionError(null);
+    setActionNotice(null);
+    setLoadingAction("backup");
+    try {
+      const backupPath = unwrap(await window.agentCompany.backupProfile());
+      if (backupPath) {
+        setActionNotice(`Profile backup created at ${backupPath}.`);
+      }
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setLoadingAction(null);
+    }
+  }
+
+  async function handleRestoreProfile() {
+    setActionError(null);
+    setActionNotice(null);
+    setLoadingAction("restore");
+    try {
+      const restored = unwrap(await window.agentCompany.restoreProfile());
+      if (!restored) {
+        return;
+      }
+      await onSaved();
+      setActionNotice("Profile restored.");
+    } catch (error) {
+      setActionError(describeActionError(error));
+    } finally {
+      setLoadingAction(null);
+    }
+  }
+
+  return (
+    <div className="space-y-6">
+      <ConfirmDialog
+        open={confirmDeleteSecretId !== null}
+        title="Delete secret"
+        message={`Permanently delete secret "${secretToDelete?.name ?? ""}"? Any connectors referencing it will lose access.`}
+        errorMessage={deleteSecretError}
+        onConfirm={() => confirmDeleteSecretId && void handleDeleteSecret(confirmDeleteSecretId)}
+        onCancel={() => {
+          setDeleteSecretError(null);
+          setConfirmDeleteSecretId(null);
+        }}
+      />
+
+      {actionError ? <InlineNotice message={actionError} /> : null}
+      {!actionError && actionNotice ? <InlineNotice message={actionNotice} tone="success" /> : null}
+
+      {/* Profile info */}
+      <div>
+        <div className="mb-3 text-[12px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Profile</div>
+        <div className="border-y border-[color:var(--line)] py-4">
+          <div className="mb-2 text-[12px] text-[color:var(--muted)]">Profile path</div>
+          <div className="mono text-[12px] text-[color:var(--muted-strong)]">{snapshot.profilePath}</div>
+        </div>
+      </div>
+
+      {/* Theme & updates */}
+      <div>
+        <div className="mb-3 text-[12px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Preferences</div>
+        <Select value={theme} onChange={(value) => setTheme(value as ProfileSnapshot["theme"])} options={[{ value: "system", label: "System" }, { value: "dark", label: "Dark" }, { value: "light", label: "Light" }]} />
+        <div className="border-y border-[color:var(--line)] py-4 mt-3">
+          <label className="flex items-center justify-between text-[13px] text-[color:var(--muted-strong)]">
+            <span>Enable updater checks</span>
+            <input type="checkbox" checked={updatesEnabled} onChange={(event) => setUpdatesEnabled(event.target.checked)} />
+          </label>
+        </div>
+      </div>
+
+      {/* Actions */}
+      <div>
+        <div className="mb-3 text-[12px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Actions</div>
+        <div className="grid gap-3 md:grid-cols-2">
+          <ActionButton label="Save settings" tone="accent" onClick={() => void handleSaveSettings()} icon={CheckCircle} loading={loadingAction === "save"} />
+          <ActionButton label="Check for updates" onClick={() => void handleCheckForUpdates()} icon={Download} loading={loadingAction === "check"} />
+          <ActionButton label="Backup profile" onClick={() => void handleBackupProfile()} icon={ClockCounterClockwise} loading={loadingAction === "backup"} />
+          <ActionButton label="Restore profile" onClick={() => void handleRestoreProfile()} icon={ArrowClockwise} loading={loadingAction === "restore"} />
+        </div>
+      </div>
+
+      {/* Secret backend info */}
+      <div>
+        <div className="mb-3 text-[12px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Secret backend</div>
+        <div className="border-y border-[color:var(--line)] py-3 text-[13px] text-[color:var(--muted-strong)]">
+          {snapshot.backend.secretBackend}
+        </div>
+      </div>
+
+      {/* Secrets table */}
+      <div>
+        <div className="mb-3 text-[12px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Secrets ({secrets.length})</div>
+        {secrets.length === 0 ? (
+          <EmptyState title="No secrets stored" />
+        ) : (
+          <div className="border-y border-[color:var(--line)] overflow-x-auto">
+            <table className="w-full text-left text-[13px]">
+              <thead>
+                <tr className="border-b border-[color:var(--line)]">
+                  <th className="px-4 py-3 text-[11px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Name</th>
+                  <th className="px-4 py-3 text-[11px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Description</th>
+                  <th className="px-4 py-3 text-[11px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Backend</th>
+                  <th className="px-4 py-3 text-[11px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]">Updated</th>
+                  <th className="px-4 py-3 text-[11px] font-semibold uppercase tracking-[0.06em] text-[color:var(--muted)]" />
+                </tr>
+              </thead>
+              <tbody>
+                {secrets.map((secret) => (
+                  <tr key={secret.id} className="border-b border-[color:var(--line)] last:border-b-0">
+                    <td className="px-4 py-3 font-medium text-[color:var(--text)]">{secret.name}</td>
+                    <td className="px-4 py-3 text-[color:var(--muted)]">{secret.description || "No description"}</td>
+                    <td className="px-4 py-3 mono text-[color:var(--muted-strong)]">{secret.backend}</td>
+                    <td className="px-4 py-3 mono text-[color:var(--muted)]">{formatTime(secret.updatedAt)}</td>
+                    <td className="px-4 py-3">
+                      <ActionButton label="Delete" onClick={() => setConfirmDeleteSecretId(secret.id)} icon={Trash} tone="danger" />
+                    </td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
+
+/* ─── Secret Creator ─────────────────────────────────────────────────── */
+
+export function SecretCreator({ companyId, onSaved }: { companyId: string; onSaved: () => Promise<void> }) {
+  const [name, setName] = useState("");
+  const [description, setDescription] = useState("");
+  const [value, setValue] = useState("");
+  const [errors, setErrors] = useState<{ name?: string; value?: string }>({});
+  const [submitError, setSubmitError] = useState<string | null>(null);
+  const [submitting, setSubmitting] = useState(false);
+
+  function validate(): boolean {
+    const next: typeof errors = {};
+    if (!name.trim()) next.name = "Secret name is required.";
+    else if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name.trim())) next.name = "Name must be alphanumeric with underscores, starting with a letter or underscore.";
+    if (!value.trim()) next.value = "Secret value cannot be empty.";
+    setErrors(next);
+    return Object.keys(next).length === 0;
+  }
+
+  return (
+    <div className="grid gap-4">
+      <div>
+        <Input label="Secret name" value={name} onChange={(v) => { setName(v); if (errors.name) setErrors((e) => ({ ...e, name: undefined })); }} placeholder="e.g. ANTHROPIC_API_KEY" />
+        {errors.name ? <div className="mt-1 text-[12px] text-[color:var(--danger)]" role="alert">{errors.name}</div> : null}
+      </div>
+      <Input label="Description" value={description} onChange={setDescription} placeholder="What this secret is used for" />
+      <div>
+        <TextArea label="Secret value" value={value} onChange={(v) => { setValue(v); if (errors.value) setErrors((e) => ({ ...e, value: undefined })); }} rows={5} placeholder="Paste the secret value. It will be encrypted before persistence." />
+        {errors.value ? <div className="mt-1 text-[12px] text-[color:var(--danger)]" role="alert">{errors.value}</div> : null}
+      </div>
+      {submitError ? <InlineNotice message={submitError} /> : null}
+      <ActionButton
+        label="Store secret"
+        tone="accent"
+        onClick={() => void (async () => {
+          if (!validate()) return;
+          setSubmitError(null);
+          setSubmitting(true);
+          try {
+            unwrap(await window.agentCompany.saveSecret({ companyId, name: name.trim(), description, value }));
+            setName("");
+            setDescription("");
+            setValue("");
+            setErrors({});
+            await onSaved();
+          } catch (error) {
+            setSubmitError(describeActionError(error));
+          } finally {
+            setSubmitting(false);
+          }
+        })()}
+        icon={ShieldCheck}
+        loading={submitting}
+      />
+      <div className="border-t border-[color:var(--line)] pt-4 text-[12px] leading-relaxed text-[color:var(--muted)]">
+        Connector secret bindings use `ENV_NAME=secret-name` lines. Values stay outside renderer state after submission.
+      </div>
+    </div>
+  );
+}
diff --git a/src/renderer/components/organization.tsx b/src/renderer/components/organization.tsx
new file mode 100644
index 00000000..9f264cb6
--- /dev/null
+++ b/src/renderer/components/organization.tsx
@@ -0,0 +1,1310 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import {
+  CheckCircle,
+  Heartbeat,
+  Kanban,
+  Lightning,
+  Pencil,
+  Robot,
+  Target,
+  Trash,
+  XCircle,
+} from "@phosphor-icons/react";
+import type {
+  AgentRecord,
+  ConnectorRecord,
+  GoalRecord,
+  ProjectRecord,
+  WorkspaceRecord,
+} from "@shared/types";
+import { formatMoney, formatTime } from "../lib/formatters";
+import { unwrap } from "../lib/desktop";
+import {
+  ActionButton,
+  EmptyState,
+  Input,
+  ListFrame,
+  ListRow,
+  Select,
+  StatusPill,
+  TextArea,
+} from "./ui";
+
+/* ------------------------------------------------------------------ */
+/*  Helpers                                                           */
+/* ------------------------------------------------------------------ */
+
+function BudgetBar({ spent, budget }: { spent: number; budget: number }) {
+  const pct = budget > 0 ? Math.min((spent / budget) * 100, 100) : 0;
+  const overBudget = spent > budget && budget > 0;
+  return (
+    <div className="flex items-center gap-2">
+      <div className="h-1.5 w-20 overflow-hidden rounded-full bg-[color:var(--line)]">
+        <div
+          className={`h-full rounded-full transition-all ${overBudget ? "bg-[color:var(--danger)]" : "bg-[color:var(--success)]"}`}
+          style={{ width: `${pct}%` }}
+        />
+      </div>
+      <span className={`text-[11px] ${overBudget ? "text-[color:var(--danger)]" : "text-[color:var(--muted)]"}`}>
+        {formatMoney(spent)} / {formatMoney(budget)}
+      </span>
+    </div>
+  );
+}
+
+function ConfirmDelete({
+  entityLabel,
+  onConfirm,
+  onCancel,
+}: {
+  entityLabel: string;
+  onConfirm: () => void;
+  onCancel: () => void;
+}) {
+  return (
+    <div className="flex items-center gap-3 rounded-[8px] border border-[color:var(--danger)] bg-[color:var(--danger-soft)] px-4 py-3">
+      <span className="text-[13px] text-[color:var(--danger)]">Delete {entityLabel}?</span>
+      <ActionButton label="Yes, delete" tone="danger" onClick={onConfirm} icon={Trash} />
+      <ActionButton label="Cancel" onClick={onCancel} icon={XCircle} />
+    </div>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  AgentRoster                                                       */
+/* ------------------------------------------------------------------ */
+
+export function AgentRoster({
+  agents,
+  connectors,
+  workspaces,
+  selectedAgentId,
+  onSelect,
+}: {
+  agents: AgentRecord[];
+  connectors: ConnectorRecord[];
+  workspaces: WorkspaceRecord[];
+  selectedAgentId: string | null;
+  onSelect: (agentId: string) => void;
+}) {
+  if (agents.length === 0) {
+    return <EmptyState title="No agents yet" />;
+  }
+  return (
+    <ListFrame>
+      {agents.map((agent) => {
+        const connector = connectors.find((c) => c.id === agent.connectorId);
+        const workspace = agent.workspaceId
+          ? workspaces.find((w) => w.id === agent.workspaceId)
+          : null;
+        const isSelected = agent.id === selectedAgentId;
+        return (
+          <ListRow
+            key={agent.id}
+            onClick={() => onSelect(agent.id)}
+            className={`cursor-pointer transition-colors duration-100 ${isSelected ? "bg-[color:var(--accent-soft)]" : "hover:bg-[color:var(--panel-soft)]"}`}
+          >
+            <div className="mb-2 flex items-center justify-between">
+              <div className="flex items-center gap-2">
+                {isSelected && (
+                  <CheckCircle size={16} weight="fill" className="text-[color:var(--accent)]" />
+                )}
+                <div>
+                  <div className="text-[15px] text-[color:var(--text)]">{agent.name}</div>
+                  <div className="text-[12px] text-[color:var(--muted)]">
+                    {agent.role} · {agent.title || "No title"}
+                  </div>
+                </div>
+              </div>
+              <StatusPill status={agent.status} />
+            </div>
+            <div className="flex items-center justify-between text-[12px] text-[color:var(--muted)]">
+              <span>Connector: {connector?.label ?? agent.connectorId}</span>
+              {workspace && <span>Workspace: {workspace.name}</span>}
+            </div>
+            <div className="mt-1.5">
+              <BudgetBar spent={agent.spentMonthlyUsd} budget={agent.budgetMonthlyUsd} />
+            </div>
+          </ListRow>
+        );
+      })}
+    </ListFrame>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  AgentCreator                                                      */
+/* ------------------------------------------------------------------ */
+
+export function AgentCreator({
+  companyId,
+  connectors,
+  workspaces,
+  agents,
+  onSaved,
+}: {
+  companyId: string;
+  connectors: ConnectorRecord[];
+  workspaces: WorkspaceRecord[];
+  agents: AgentRecord[];
+  onSaved: () => Promise<void>;
+}) {
+  const [name, setName] = useState("");
+  const [role, setRole] = useState("");
+  const [title, setTitle] = useState("");
+  const [connectorId, setConnectorId] = useState(connectors[0]?.id ?? "codex_local");
+  const [model, setModel] = useState("");
+  const [availableModels, setAvailableModels] = useState<Array<{ id: string; label: string }>>([]);
+  const [workspaceId, setWorkspaceId] = useState(workspaces[0]?.id ?? "");
+  const [budget, setBudget] = useState("120");
+  const [capabilities, setCapabilities] = useState("");
+  const [reportsTo, setReportsTo] = useState("");
+  const [thinkingEffort, setThinkingEffort] = useState("");
+  const supportsEffort = connectorId === "claude_local" || connectorId === "codex_local";
+
+  useEffect(() => {
+    void (async () => {
+      const result = await window.agentCompany.listConnectorModels(connectorId);
+      if (result.ok) {
+        setAvailableModels(result.data);
+        setModel(result.data[0]?.id ?? "");
+      }
+    })();
+    if (connectorId !== "claude_local" && connectorId !== "codex_local") {
+      setThinkingEffort("");
+    }
+  }, [connectorId]);
+
+  return (
+    <div className="grid gap-4">
+      <Input label="Agent name" value={name} onChange={setName} placeholder="Agent name" />
+      <Input label="Role" value={role} onChange={setRole} placeholder="e.g. Engineer, PM, CEO" />
+      <Input label="Title" value={title} onChange={setTitle} placeholder="Title" />
+      <Select
+        label="Connector"
+        value={connectorId}
+        onChange={(value) => setConnectorId(value as ConnectorRecord["id"])}
+        options={connectors.map((connector) => ({ value: connector.id, label: connector.label }))}
+      />
+      {availableModels.length > 0 ? (
+        <Select
+          label="Model"
+          value={model}
+          onChange={setModel}
+          options={availableModels.map((m) => ({ value: m.id, label: m.label }))}
+        />
+      ) : null}
+      {supportsEffort ? (
+        <Select
+          label="Thinking effort"
+          value={thinkingEffort}
+          onChange={setThinkingEffort}
+          options={[
+            { value: "", label: "Default" },
+            { value: "low", label: "Low" },
+            { value: "medium", label: "Medium" },
+            { value: "high", label: "High" },
+          ]}
+        />
+      ) : null}
+      <Select
+        label="Workspace"
+        value={workspaceId}
+        onChange={setWorkspaceId}
+        options={[
+          { value: "", label: "No workspace" },
+          ...workspaces.map((workspace) => ({ value: workspace.id, label: workspace.name })),
+        ]}
+      />
+      <Select
+        label="Reports to"
+        value={reportsTo}
+        onChange={setReportsTo}
+        options={[
+          { value: "", label: "No manager" },
+          ...agents.map((a) => ({ value: a.id, label: a.name })),
+        ]}
+      />
+      <Input label="Monthly budget (USD)" value={budget} onChange={setBudget} placeholder="120" type="number" />
+      <TextArea
+        label="Capabilities"
+        value={capabilities}
+        onChange={setCapabilities}
+        placeholder="What this agent is expected to do and when it becomes relevant."
+      />
+      <ActionButton
+        label="Create agent"
+        tone="accent"
+        onClick={() =>
+          void (async () => {
+            try {
+              const meta: Record<string, string> = {};
+              if (thinkingEffort) meta.thinkingEffort = thinkingEffort;
+              await window.agentCompany.saveAgent({
+                companyId,
+                name,
+                role,
+                title,
+                connectorId: connectorId as ConnectorRecord["id"],
+                workspaceId: workspaceId || null,
+                reportsTo: reportsTo || null,
+                model: model || null,
+                metadataJson: JSON.stringify(meta),
+                capabilities,
+                budgetMonthlyUsd: Number(budget || 0),
+                status: "idle",
+              });
+              setName("");
+              setRole("");
+              setTitle("");
+              setCapabilities("");
+              setReportsTo("");
+              await onSaved();
+            } catch (error) {
+              console.error("Failed to create agent:", error);
+            }
+          })()
+        }
+        icon={Robot}
+      />
+    </div>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  AgentEditor                                                       */
+/* ------------------------------------------------------------------ */
+
+export function AgentEditor({
+  agent,
+  connectors,
+  workspaces,
+  agents,
+  companyId,
+  onSaved,
+  onDeleted,
+}: {
+  agent: AgentRecord;
+  connectors: ConnectorRecord[];
+  workspaces: WorkspaceRecord[];
+  agents: AgentRecord[];
+  companyId: string;
+  onSaved: () => Promise<void>;
+  onDeleted: () => Promise<void>;
+}) {
+  const [name, setName] = useState(agent.name);
+  const [role, setRole] = useState(agent.role);
+  const [title, setTitle] = useState(agent.title);
+  const [status, setStatus] = useState<AgentRecord["status"]>(agent.status);
+  const [connectorId, setConnectorId] = useState<ConnectorRecord["id"]>(agent.connectorId);
+  const [model, setModel] = useState(agent.model ?? "");
+  const [availableModels, setAvailableModels] = useState<Array<{ id: string; label: string }>>([]);
+  const [workspaceId, setWorkspaceId] = useState(agent.workspaceId ?? "");
+  const [budget, setBudget] = useState(String(agent.budgetMonthlyUsd));
+  const [capabilities, setCapabilities] = useState(agent.capabilities);
+  const [reportsTo, setReportsTo] = useState(agent.reportsTo ?? "");
+  const [confirmingDelete, setConfirmingDelete] = useState(false);
+  const [saveError, setSaveError] = useState<string | null>(null);
+  const existingMeta = useMemo(() => { try { return JSON.parse(agent.metadataJson || "{}"); } catch { return {}; } }, [agent.metadataJson]);
+  const [thinkingEffort, setThinkingEffort] = useState<string>(existingMeta.thinkingEffort ?? "");
+  const supportsEffort = connectorId === "claude_local" || connectorId === "codex_local";
+
+  useEffect(() => {
+    void (async () => {
+      const result = await window.agentCompany.listConnectorModels(connectorId);
+      if (result.ok) {
+        setAvailableModels(result.data);
+        // Only reset model when connector changes, not on initial load
+        if (connectorId !== agent.connectorId) {
+          setModel(result.data[0]?.id ?? "");
+        }
+      }
+    })();
+    if (connectorId !== "claude_local" && connectorId !== "codex_local") {
+      setThinkingEffort("");
+    }
+  }, [connectorId, agent.connectorId]);
+
+  // Exclude self from the "reports to" list to avoid cycles
+  const managerCandidates = agents.filter((a) => a.id !== agent.id);
+
+  return (
+    <div className="grid gap-4">
+      <Input label="Agent name" value={name} onChange={setName} placeholder="Agent name" />
+      <Input label="Role" value={role} onChange={setRole} placeholder="Role" />
+      <Input label="Title" value={title} onChange={setTitle} placeholder="Title" />
+      <Select
+        label="Status"
+        value={status}
+        onChange={(v) => setStatus(v as AgentRecord["status"])}
+        options={[
+          { value: "idle", label: "Idle" },
+          { value: "active", label: "Active" },
+          { value: "running", label: "Running" },
+          { value: "paused", label: "Paused" },
+          { value: "error", label: "Error" },
+          { value: "pending_approval", label: "Pending Approval" },
+          { value: "terminated", label: "Terminated" },
+        ]}
+      />
+      <Select
+        label="Connector"
+        value={connectorId}
+        onChange={(v) => setConnectorId(v as ConnectorRecord["id"])}
+        options={connectors.map((c) => ({ value: c.id, label: c.label }))}
+      />
+      {availableModels.length > 0 ? (
+        <Select
+          label="Model"
+          value={model}
+          onChange={setModel}
+          options={availableModels.map((m) => ({ value: m.id, label: m.label }))}
+        />
+      ) : null}
+      {supportsEffort ? (
+        <Select
+          label="Thinking effort"
+          value={thinkingEffort}
+          onChange={setThinkingEffort}
+          options={[
+            { value: "", label: "Default" },
+            { value: "low", label: "Low" },
+            { value: "medium", label: "Medium" },
+            { value: "high", label: "High" },
+          ]}
+        />
+      ) : null}
+      <Select
+        label="Workspace"
+        value={workspaceId}
+        onChange={setWorkspaceId}
+        options={[
+          { value: "", label: "No workspace" },
+          ...workspaces.map((w) => ({ value: w.id, label: w.name })),
+        ]}
+      />
+      <Select
+        label="Reports to"
+        value={reportsTo}
+        onChange={setReportsTo}
+        options={[
+          { value: "", label: "No manager" },
+          ...managerCandidates.map((a) => ({ value: a.id, label: a.name })),
+        ]}
+      />
+      <Input label="Monthly budget (USD)" value={budget} onChange={setBudget} placeholder="120" type="number" />
+      <TextArea label="Capabilities" value={capabilities} onChange={setCapabilities} placeholder="Capabilities" />
+
+      {/* Heartbeat / Continuous Execution */}
+      <div className="rounded-lg border border-[color:var(--line)] p-3">
+        <div className="mb-2 flex items-center gap-2">
+          <Heartbeat size={16} className="text-[color:var(--accent)]" />
+          <span className="text-[13px] font-semibold text-[color:var(--text)]">Continuous Execution</span>
+        </div>
+        <div className="mb-2 flex items-center gap-3">
+          <label className="flex cursor-pointer items-center gap-2">
+            <input
+              type="checkbox"
+              checked={agent.heartbeatEnabled}
+              onChange={(e) =>
+                void (async () => {
+                  await window.agentCompany.setHeartbeat({
+                    agentId: agent.id,
+                    companyId,
+                    enabled: e.target.checked,
+                    intervalSec: agent.heartbeatIntervalSec || 120,
+                  });
+                  await onSaved();
+                })()
+              }
+              className="h-4 w-4 rounded border-[color:var(--line)] accent-[color:var(--accent)]"
+            />
+            <span className="text-[13px] text-[color:var(--text)]">Enable heartbeat</span>
+          </label>
+          {agent.heartbeatEnabled && (
+            <span className="text-[11px] text-[color:var(--muted)]">
+              Every {agent.heartbeatIntervalSec}s
+              {agent.lastHeartbeatAt ? ` · Last: ${formatTime(agent.lastHeartbeatAt)}` : ""}
+            </span>
+          )}
+        </div>
+        {agent.heartbeatEnabled && (
+          <Select
+            label="Interval"
+            value={String(agent.heartbeatIntervalSec)}
+            onChange={(v) =>
+              void (async () => {
+                await window.agentCompany.setHeartbeat({
+                  agentId: agent.id,
+                  companyId,
+                  enabled: true,
+                  intervalSec: Number(v),
+                });
+                await onSaved();
+              })()
+            }
+            options={[
+              { value: "30", label: "30 seconds" },
+              { value: "60", label: "1 minute" },
+              { value: "120", label: "2 minutes" },
+              { value: "300", label: "5 minutes" },
+              { value: "600", label: "10 minutes" },
+              { value: "1800", label: "30 minutes" },
+              { value: "3600", label: "1 hour" },
+            ]}
+          />
+        )}
+        <div className="mt-2">
+          <ActionButton
+            label="Wake now"
+            tone="accent"
+            icon={Lightning}
+            onClick={() =>
+              void (async () => {
+                await window.agentCompany.triggerHeartbeat({
+                  agentId: agent.id,
+                  companyId,
+                  trigger: "manual",
+                });
+                await onSaved();
+              })()
+            }
+          />
+        </div>
+      </div>
+
+      <div className="flex items-center gap-3">
+        <ActionButton
+          label="Save changes"
+          tone="accent"
+          icon={Pencil}
+          onClick={() =>
+            void (async () => {
+              setSaveError(null);
+              const meta = { ...existingMeta };
+              if (thinkingEffort) meta.thinkingEffort = thinkingEffort;
+              else delete meta.thinkingEffort;
+              try {
+                unwrap(await window.agentCompany.saveAgent({
+                  id: agent.id,
+                  companyId,
+                  name,
+                  role,
+                  title,
+                  status,
+                  connectorId,
+                  workspaceId: workspaceId || null,
+                  reportsTo: reportsTo || null,
+                  model: model || null,
+                  metadataJson: JSON.stringify(meta),
+                  budgetMonthlyUsd: Number(budget || 0),
+                  capabilities,
+                }));
+                await onSaved();
+              } catch (error) {
+                setSaveError(error instanceof Error ? error.message : "Failed to save agent.");
+              }
+            })()
+          }
+        />
+        {confirmingDelete ? (
+          <ConfirmDelete
+            entityLabel={agent.name}
+            onConfirm={() =>
+              void (async () => {
+                await window.agentCompany.deleteAgent({ id: agent.id, companyId });
+                await onDeleted();
+              })()
+            }
+            onCancel={() => setConfirmingDelete(false)}
+          />
+        ) : (
+          <ActionButton
+            label="Delete"
+            tone="danger"
+            icon={Trash}
+            onClick={() => setConfirmingDelete(true)}
+          />
+        )}
+      </div>
+      {saveError ? <p className="text-[12px] text-[color:var(--danger)]">{saveError}</p> : null}
+    </div>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  GoalList                                                          */
+/* ------------------------------------------------------------------ */
+
+export function GoalList({
+  goals,
+  agents,
+  selectedGoalId,
+  onSelect,
+}: {
+  goals: GoalRecord[];
+  agents: AgentRecord[];
+  selectedGoalId: string | null;
+  onSelect: (goalId: string) => void;
+}) {
+  if (goals.length === 0) {
+    return <EmptyState title="No goals yet" />;
+  }
+  return (
+    <ListFrame>
+      {goals.map((goal) => {
+        const isSelected = goal.id === selectedGoalId;
+        const parentGoal = goal.parentId ? goals.find((g) => g.id === goal.parentId) : null;
+        const ownerAgent = goal.ownerAgentId
+          ? agents.find((a) => a.id === goal.ownerAgentId)
+          : null;
+        return (
+          <ListRow
+            key={goal.id}
+            onClick={() => onSelect(goal.id)}
+            className={`cursor-pointer transition-colors duration-100 ${isSelected ? "bg-[color:var(--accent-soft)]" : "hover:bg-[color:var(--panel-soft)]"}`}
+          >
+            <div className="mb-2 flex items-center justify-between">
+              <div className="flex items-center gap-2">
+                {isSelected && (
+                  <CheckCircle size={16} weight="fill" className="text-[color:var(--accent)]" />
+                )}
+                <div className="text-[15px] text-[color:var(--text)]">{goal.title}</div>
+              </div>
+              <StatusPill status={goal.status} />
+            </div>
+            <div className="text-[13px] text-[color:var(--muted)]">{goal.description}</div>
+            <div className="mt-1 flex gap-4 text-[12px] text-[color:var(--muted)]">
+              {parentGoal && <span>Parent: {parentGoal.title}</span>}
+              {ownerAgent && <span>Owner: {ownerAgent.name}</span>}
+            </div>
+          </ListRow>
+        );
+      })}
+    </ListFrame>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  GoalCreator                                                       */
+/* ------------------------------------------------------------------ */
+
+export function GoalCreator({
+  companyId,
+  agents,
+  goals,
+  onSaved,
+}: {
+  companyId: string;
+  agents: AgentRecord[];
+  goals: GoalRecord[];
+  onSaved: () => Promise<void>;
+}) {
+  const [title, setTitle] = useState("");
+  const [description, setDescription] = useState("");
+  const [ownerAgentId, setOwnerAgentId] = useState(agents[0]?.id ?? "");
+  const [parentId, setParentId] = useState("");
+  return (
+    <div className="grid gap-4">
+      <Input label="Goal title" value={title} onChange={setTitle} placeholder="Goal title" />
+      <TextArea
+        label="Success criteria"
+        value={description}
+        onChange={setDescription}
+        placeholder="What must become true for this goal to count as achieved?"
+      />
+      <Select
+        label="Owner agent"
+        value={ownerAgentId}
+        onChange={setOwnerAgentId}
+        options={[
+          { value: "", label: "No owner" },
+          ...agents.map((agent) => ({ value: agent.id, label: agent.name })),
+        ]}
+      />
+      <Select
+        label="Parent goal"
+        value={parentId}
+        onChange={setParentId}
+        options={[
+          { value: "", label: "No parent goal" },
+          ...goals.map((g) => ({ value: g.id, label: g.title })),
+        ]}
+      />
+      <ActionButton
+        label="Create goal"
+        tone="accent"
+        onClick={() =>
+          void (async () => {
+            try {
+            await window.agentCompany.saveGoal({
+              companyId,
+              title,
+              description,
+              ownerAgentId: ownerAgentId || null,
+              parentId: parentId || null,
+              status: "active",
+            });
+            setTitle("");
+            setDescription("");
+            await onSaved();
+            } catch (error) {
+              console.error("Failed to create goal:", error);
+            }
+          })()
+        }
+        icon={Target}
+      />
+    </div>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  GoalEditor                                                        */
+/* ------------------------------------------------------------------ */
+
+export function GoalEditor({
+  goal,
+  goals,
+  agents,
+  companyId,
+  onSaved,
+  onDeleted,
+}: {
+  goal: GoalRecord;
+  goals: GoalRecord[];
+  agents: AgentRecord[];
+  companyId: string;
+  onSaved: () => Promise<void>;
+  onDeleted: () => Promise<void>;
+}) {
+  const [title, setTitle] = useState(goal.title);
+  const [description, setDescription] = useState(goal.description);
+  const [status, setStatus] = useState<GoalRecord["status"]>(goal.status);
+  const [parentId, setParentId] = useState(goal.parentId ?? "");
+  const [ownerAgentId, setOwnerAgentId] = useState(goal.ownerAgentId ?? "");
+  const [confirmingDelete, setConfirmingDelete] = useState(false);
+
+  // Exclude self from parent list
+  const parentCandidates = goals.filter((g) => g.id !== goal.id);
+
+  return (
+    <div className="grid gap-4">
+      <Input label="Goal title" value={title} onChange={setTitle} placeholder="Goal title" />
+      <TextArea label="Description" value={description} onChange={setDescription} placeholder="Description" />
+      <Select
+        label="Status"
+        value={status}
+        onChange={(v) => setStatus(v as GoalRecord["status"])}
+        options={[
+          { value: "planned", label: "Planned" },
+          { value: "active", label: "Active" },
+          { value: "achieved", label: "Achieved" },
+          { value: "cancelled", label: "Cancelled" },
+        ]}
+      />
+      <Select
+        label="Parent goal"
+        value={parentId}
+        onChange={setParentId}
+        options={[
+          { value: "", label: "No parent goal" },
+          ...parentCandidates.map((g) => ({ value: g.id, label: g.title })),
+        ]}
+      />
+      <Select
+        label="Owner agent"
+        value={ownerAgentId}
+        onChange={setOwnerAgentId}
+        options={[
+          { value: "", label: "No owner" },
+          ...agents.map((a) => ({ value: a.id, label: a.name })),
+        ]}
+      />
+
+      <div className="flex items-center gap-3 flex-wrap">
+        <ActionButton
+          label="Save changes"
+          tone="accent"
+          icon={Pencil}
+          onClick={() =>
+            void (async () => {
+              try {
+              await window.agentCompany.saveGoal({
+                id: goal.id,
+                companyId,
+                title,
+                description,
+                status,
+                parentId: parentId || null,
+                ownerAgentId: ownerAgentId || null,
+              });
+              await onSaved();
+              } catch (error) {
+                console.error("Failed to save goal:", error);
+              }
+            })()
+          }
+        />
+        {confirmingDelete ? (
+          <ConfirmDelete
+            entityLabel={goal.title}
+            onConfirm={() =>
+              void (async () => {
+                await window.agentCompany.deleteGoal({ id: goal.id, companyId });
+                await onDeleted();
+              })()
+            }
+            onCancel={() => setConfirmingDelete(false)}
+          />
+        ) : (
+          <ActionButton
+            label="Delete"
+            tone="danger"
+            icon={Trash}
+            onClick={() => setConfirmingDelete(true)}
+          />
+        )}
+      </div>
+    </div>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  ProjectList                                                       */
+/* ------------------------------------------------------------------ */
+
+export function ProjectList({
+  projects,
+  goals,
+  agents,
+  workspaces,
+  selectedProjectId,
+  onSelect,
+}: {
+  projects: ProjectRecord[];
+  goals: GoalRecord[];
+  agents: AgentRecord[];
+  workspaces: WorkspaceRecord[];
+  selectedProjectId: string | null;
+  onSelect: (projectId: string) => void;
+}) {
+  if (projects.length === 0) {
+    return <EmptyState title="No projects yet" />;
+  }
+  return (
+    <ListFrame>
+      {projects.map((project) => {
+        const isSelected = project.id === selectedProjectId;
+        const wsCount = workspaces.filter((w) => w.projectId === project.id).length;
+        return (
+          <ListRow
+            key={project.id}
+            onClick={() => onSelect(project.id)}
+            className={`cursor-pointer transition-colors duration-100 ${isSelected ? "bg-[color:var(--accent-soft)]" : "hover:bg-[color:var(--panel-soft)]"}`}
+          >
+            <div className="mb-2 flex items-center justify-between">
+              <div className="flex items-center gap-2">
+                {isSelected && (
+                  <CheckCircle size={16} weight="fill" className="text-[color:var(--accent)]" />
+                )}
+                <div className="text-[15px] text-[color:var(--text)]">{project.name}</div>
+              </div>
+              <StatusPill status={project.status} />
+            </div>
+            <div className="mb-2 text-[13px] text-[color:var(--muted)]">{project.description}</div>
+            <div className="flex flex-wrap gap-4 text-[12px] text-[color:var(--muted)]">
+              <span>
+                Goal: {goals.find((g) => g.id === project.goalId)?.title ?? "None"}
+              </span>
+              <span>
+                Lead: {agents.find((a) => a.id === project.leadAgentId)?.name ?? "Unassigned"}
+              </span>
+              {project.targetDate && <span>Target: {project.targetDate}</span>}
+              {wsCount > 0 && (
+                <span>
+                  {wsCount} workspace{wsCount !== 1 ? "s" : ""}
+                </span>
+              )}
+            </div>
+          </ListRow>
+        );
+      })}
+    </ListFrame>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  ProjectCreator                                                    */
+/* ------------------------------------------------------------------ */
+
+export function ProjectCreator({
+  companyId,
+  goals,
+  agents,
+  onSaved,
+}: {
+  companyId: string;
+  goals: GoalRecord[];
+  agents: AgentRecord[];
+  onSaved: () => Promise<void>;
+}) {
+  const [name, setName] = useState("");
+  const [description, setDescription] = useState("");
+  const [goalId, setGoalId] = useState(goals[0]?.id ?? "");
+  const [leadAgentId, setLeadAgentId] = useState(agents[0]?.id ?? "");
+  const [targetDate, setTargetDate] = useState("");
+  return (
+    <div className="grid gap-4">
+      <Input label="Project name" value={name} onChange={setName} placeholder="Project name" />
+      <TextArea
+        label="Description"
+        value={description}
+        onChange={setDescription}
+        placeholder="What delivery lane does this project own?"
+      />
+      <Select
+        label="Linked goal"
+        value={goalId}
+        onChange={setGoalId}
+        options={[
+          { value: "", label: "No linked goal" },
+          ...goals.map((goal) => ({ value: goal.id, label: goal.title })),
+        ]}
+      />
+      <Select
+        label="Lead agent"
+        value={leadAgentId}
+        onChange={setLeadAgentId}
+        options={[
+          { value: "", label: "No lead" },
+          ...agents.map((agent) => ({ value: agent.id, label: agent.name })),
+        ]}
+      />
+      <Input label="Target date" value={targetDate} onChange={setTargetDate} placeholder="YYYY-MM-DD" />
+      <ActionButton
+        label="Create project"
+        tone="accent"
+        onClick={() =>
+          void (async () => {
+            try {
+            await window.agentCompany.saveProject({
+              companyId,
+              goalId: goalId || null,
+              name,
+              description,
+              leadAgentId: leadAgentId || null,
+              targetDate: targetDate || null,
+              status: "planned",
+            });
+            setName("");
+            setDescription("");
+            setTargetDate("");
+            await onSaved();
+            } catch (error) {
+              console.error("Failed to create project:", error);
+            }
+          })()
+        }
+        icon={Kanban}
+      />
+    </div>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  ProjectEditor                                                     */
+/* ------------------------------------------------------------------ */
+
+export function ProjectEditor({
+  project,
+  goals,
+  agents,
+  companyId,
+  onSaved,
+  onDeleted,
+}: {
+  project: ProjectRecord;
+  goals: GoalRecord[];
+  agents: AgentRecord[];
+  companyId: string;
+  onSaved: () => Promise<void>;
+  onDeleted: () => Promise<void>;
+}) {
+  const [name, setName] = useState(project.name);
+  const [description, setDescription] = useState(project.description);
+  const [status, setStatus] = useState<ProjectRecord["status"]>(project.status);
+  const [goalId, setGoalId] = useState(project.goalId ?? "");
+  const [leadAgentId, setLeadAgentId] = useState(project.leadAgentId ?? "");
+  const [targetDate, setTargetDate] = useState(project.targetDate ?? "");
+  const [confirmingDelete, setConfirmingDelete] = useState(false);
+
+  return (
+    <div className="grid gap-4">
+      <Input label="Project name" value={name} onChange={setName} placeholder="Project name" />
+      <TextArea label="Description" value={description} onChange={setDescription} placeholder="Description" />
+      <Select
+        label="Status"
+        value={status}
+        onChange={(v) => setStatus(v as ProjectRecord["status"])}
+        options={[
+          { value: "backlog", label: "Backlog" },
+          { value: "planned", label: "Planned" },
+          { value: "in_progress", label: "In Progress" },
+          { value: "completed", label: "Completed" },
+          { value: "cancelled", label: "Cancelled" },
+        ]}
+      />
+      <Select
+        label="Linked goal"
+        value={goalId}
+        onChange={setGoalId}
+        options={[
+          { value: "", label: "No linked goal" },
+          ...goals.map((g) => ({ value: g.id, label: g.title })),
+        ]}
+      />
+      <Select
+        label="Lead agent"
+        value={leadAgentId}
+        onChange={setLeadAgentId}
+        options={[
+          { value: "", label: "No lead" },
+          ...agents.map((a) => ({ value: a.id, label: a.name })),
+        ]}
+      />
+      <Input label="Target date" value={targetDate} onChange={setTargetDate} placeholder="YYYY-MM-DD" />
+
+      <div className="flex items-center gap-3">
+        <ActionButton
+          label="Save changes"
+          tone="accent"
+          icon={Pencil}
+          onClick={() =>
+            void (async () => {
+              try {
+              await window.agentCompany.saveProject({
+                id: project.id,
+                companyId,
+                name,
+                description,
+                status,
+                goalId: goalId || null,
+                leadAgentId: leadAgentId || null,
+                targetDate: targetDate || null,
+              });
+              await onSaved();
+              } catch (error) {
+                console.error("Failed to save project:", error);
+              }
+            })()
+          }
+        />
+        {confirmingDelete ? (
+          <ConfirmDelete
+            entityLabel={project.name}
+            onConfirm={() =>
+              void (async () => {
+                await window.agentCompany.deleteProject({ id: project.id, companyId });
+                await onDeleted();
+              })()
+            }
+            onCancel={() => setConfirmingDelete(false)}
+          />
+        ) : (
+          <ActionButton
+            label="Delete"
+            tone="danger"
+            icon={Trash}
+            onClick={() => setConfirmingDelete(true)}
+          />
+        )}
+      </div>
+    </div>
+  );
+}
+
+/* ------------------------------------------------------------------ */
+/*  OrgChart – tree layout with pan & zoom */
+/* ------------------------------------------------------------------ */
+
+const CARD_W = 200;
+const CARD_H = 100;
+const GAP_X = 32;
+const GAP_Y = 80;
+const CHART_PADDING = 60;
+
+interface OrgTreeNode {
+  agent: AgentRecord;
+  children: OrgTreeNode[];
+}
+
+interface LayoutNode {
+  agent: AgentRecord;
+  x: number;
+  y: number;
+  children: LayoutNode[];
+}
+
+function buildOrgTree(agents: AgentRecord[]): OrgTreeNode[] {
+  const agentIds = new Set(agents.map((a) => a.id));
+  const childrenMap = new Map<string, AgentRecord[]>();
+  const roots: AgentRecord[] = [];
+  for (const agent of agents) {
+    if (!agent.reportsTo || !agentIds.has(agent.reportsTo)) {
+      roots.push(agent);
+    } else {
+      const list = childrenMap.get(agent.reportsTo) ?? [];
+      list.push(agent);
+      childrenMap.set(agent.reportsTo, list);
+    }
+  }
+  function toNode(agent: AgentRecord): OrgTreeNode {
+    const kids = childrenMap.get(agent.id) ?? [];
+    return { agent, children: kids.map(toNode) };
+  }
+  return roots.map(toNode);
+}
+
+function subtreeWidth(node: OrgTreeNode): number {
+  if (node.children.length === 0) return CARD_W;
+  const childrenW = node.children.reduce((sum, c) => sum + subtreeWidth(c), 0);
+  const gaps = (node.children.length - 1) * GAP_X;
+  return Math.max(CARD_W, childrenW + gaps);
+}
+
+function layoutTree(node: OrgTreeNode, x: number, y: number): LayoutNode {
+  const totalW = subtreeWidth(node);
+  const layoutChildren: LayoutNode[] = [];
+  if (node.children.length > 0) {
+    const childrenW = node.children.reduce((sum, c) => sum + subtreeWidth(c), 0);
+    const gaps = (node.children.length - 1) * GAP_X;
+    let cx = x + (totalW - childrenW - gaps) / 2;
+    for (const child of node.children) {
+      const cw = subtreeWidth(child);
+      layoutChildren.push(layoutTree(child, cx, y + CARD_H + GAP_Y));
+      cx += cw + GAP_X;
+    }
+  }
+  return { agent: node.agent, x: x + (totalW - CARD_W) / 2, y, children: layoutChildren };
+}
+
+function layoutForest(roots: OrgTreeNode[]): LayoutNode[] {
+  let x = CHART_PADDING;
+  return roots.map((root) => {
+    const w = subtreeWidth(root);
+    const node = layoutTree(root, x, CHART_PADDING);
+    x += w + GAP_X;
+    return node;
+  });
+}
+
+function flattenLayout(nodes: LayoutNode[]): LayoutNode[] {
+  const result: LayoutNode[] = [];
+  function walk(n: LayoutNode) { result.push(n); n.children.forEach(walk); }
+  nodes.forEach(walk);
+  return result;
+}
+
+function collectEdges(nodes: LayoutNode[]): Array<{ parent: LayoutNode; child: LayoutNode }> {
+  const edges: Array<{ parent: LayoutNode; child: LayoutNode }> = [];
+  function walk(n: LayoutNode) { for (const c of n.children) { edges.push({ parent: n, child: c }); walk(c); } }
+  nodes.forEach(walk);
+  return edges;
+}
+
+const statusDotColor: Record<string, string> = {
+  running: "#22d3ee",
+  active: "#4ade80",
+  paused: "#facc15",
+  idle: "#facc15",
+  error: "#f87171",
+  terminated: "#a3a3a3",
+};
+
+const adapterLabels: Record<string, string> = {
+  claude_local: "Claude",
+  codex_local: "Codex",
+  gemini_local: "Gemini",
+  opencode_local: "OpenCode",
+  kimi_local: "Kimi",
+};
+
+export function OrgChart({
+  agents,
+  onSelectAgent,
+}: {
+  agents: AgentRecord[];
+  onSelectAgent?: (agentId: string) => void;
+}) {
+  const containerRef = useRef<HTMLDivElement>(null);
+  const [pan, setPan] = useState({ x: 0, y: 0 });
+  const [zoom, setZoom] = useState(1);
+  const [dragging, setDragging] = useState(false);
+  const dragStart = useRef({ x: 0, y: 0, panX: 0, panY: 0 });
+
+  const orgTree = useMemo(() => buildOrgTree(agents), [agents]);
+  const layout = useMemo(() => layoutForest(orgTree), [orgTree]);
+  const allNodes = useMemo(() => flattenLayout(layout), [layout]);
+  const edges = useMemo(() => collectEdges(layout), [layout]);
+  const bounds = useMemo(() => {
+    if (allNodes.length === 0) return { width: 800, height: 600 };
+    let maxX = 0, maxY = 0;
+    for (const n of allNodes) { maxX = Math.max(maxX, n.x + CARD_W); maxY = Math.max(maxY, n.y + CARD_H); }
+    return { width: maxX + CHART_PADDING, height: maxY + CHART_PADDING };
+  }, [allNodes]);
+
+  const hasInitialized = useRef(false);
+  useEffect(() => {
+    if (hasInitialized.current || allNodes.length === 0 || !containerRef.current) return;
+    hasInitialized.current = true;
+    const cW = containerRef.current.clientWidth;
+    const cH = containerRef.current.clientHeight;
+    const scaleX = (cW - 40) / bounds.width;
+    const scaleY = (cH - 40) / bounds.height;
+    const fitZoom = Math.min(scaleX, scaleY, 1);
+    const chartW = bounds.width * fitZoom;
+    const chartH = bounds.height * fitZoom;
+    setZoom(fitZoom);
+    setPan({ x: (cW - chartW) / 2, y: (cH - chartH) / 2 });
+  }, [allNodes, bounds]);
+
+  const fitToScreen = useCallback(() => {
+    if (!containerRef.current) return;
+    const cW = containerRef.current.clientWidth;
+    const cH = containerRef.current.clientHeight;
+    const scaleX = (cW - 40) / bounds.width;
+    const scaleY = (cH - 40) / bounds.height;
+    const fitZoom = Math.min(scaleX, scaleY, 1);
+    const chartW = bounds.width * fitZoom;
+    const chartH = bounds.height * fitZoom;
+    setZoom(fitZoom);
+    setPan({ x: (cW - chartW) / 2, y: (cH - chartH) / 2 });
+  }, [bounds]);
+
+  const handleMouseDown = useCallback((e: React.MouseEvent) => {
+    if (e.button !== 0) return;
+    if ((e.target as HTMLElement).closest("[data-org-card]")) return;
+    setDragging(true);
+    dragStart.current = { x: e.clientX, y: e.clientY, panX: pan.x, panY: pan.y };
+  }, [pan]);
+
+  const handleMouseMove = useCallback((e: React.MouseEvent) => {
+    if (!dragging) return;
+    setPan({ x: dragStart.current.panX + (e.clientX - dragStart.current.x), y: dragStart.current.panY + (e.clientY - dragStart.current.y) });
+  }, [dragging]);
+
+  const handleMouseUp = useCallback(() => setDragging(false), []);
+
+  const handleWheel = useCallback((e: React.WheelEvent) => {
+    e.preventDefault();
+    const container = containerRef.current;
+    if (!container) return;
+    const rect = container.getBoundingClientRect();
+    const mouseX = e.clientX - rect.left;
+    const mouseY = e.clientY - rect.top;
+    const factor = e.deltaY < 0 ? 1.1 : 0.9;
+    const newZoom = Math.min(Math.max(zoom * factor, 0.2), 2);
+    const scale = newZoom / zoom;
+    setPan({ x: mouseX - scale * (mouseX - pan.x), y: mouseY - scale * (mouseY - pan.y) });
+    setZoom(newZoom);
+  }, [zoom, pan]);
+
+  if (agents.length === 0) {
+    return <EmptyState title="No agents to display" />;
+  }
+
+  return (
+    <div
+      ref={containerRef}
+      className="relative h-[480px] w-full overflow-hidden rounded-[10px] border border-[color:var(--line)] bg-[color:var(--bg)]"
+      style={{ cursor: dragging ? "grabbing" : "grab" }}
+      onMouseDown={handleMouseDown}
+      onMouseMove={handleMouseMove}
+      onMouseUp={handleMouseUp}
+      onMouseLeave={handleMouseUp}
+      onWheel={handleWheel}
+    >
+      {/* Zoom controls */}
+      <div className="absolute right-3 top-3 z-10 flex flex-col gap-1">
+        {[
+          { label: "+", ariaLabel: "Zoom in", action: () => { const nz = Math.min(zoom * 1.2, 2); const c = containerRef.current; if (c) { const cx = c.clientWidth / 2; const cy = c.clientHeight / 2; const s = nz / zoom; setPan({ x: cx - s * (cx - pan.x), y: cy - s * (cy - pan.y) }); } setZoom(nz); } },
+          { label: "\u2212", ariaLabel: "Zoom out", action: () => { const nz = Math.max(zoom * 0.8, 0.2); const c = containerRef.current; if (c) { const cx = c.clientWidth / 2; const cy = c.clientHeight / 2; const s = nz / zoom; setPan({ x: cx - s * (cx - pan.x), y: cy - s * (cy - pan.y) }); } setZoom(nz); } },
+          { label: "Fit", ariaLabel: "Fit chart to screen", action: fitToScreen },
+        ].map((btn) => (
+          <button
+            key={btn.ariaLabel}
+            className="flex h-7 w-7 items-center justify-center rounded-[6px] border border-[color:var(--line)] bg-[color:var(--panel)] text-[12px] text-[color:var(--text)] transition hover:bg-[color:var(--panel-soft)]"
+            onClick={btn.action}
+            aria-label={btn.ariaLabel}
+          >
+            {btn.label}
+          </button>
+        ))}
+      </div>
+
+      {/* SVG edges */}
+      <svg className="pointer-events-none absolute inset-0" style={{ width: "100%", height: "100%" }}>
+        <g transform={`translate(${pan.x}, ${pan.y}) scale(${zoom})`}>
+          {edges.map(({ parent, child }) => {
+            const x1 = parent.x + CARD_W / 2;
+            const y1 = parent.y + CARD_H;
+            const x2 = child.x + CARD_W / 2;
+            const y2 = child.y;
+            const midY = (y1 + y2) / 2;
+            return (
+              <path
+                key={`${parent.agent.id}-${child.agent.id}`}
+                d={`M ${x1} ${y1} L ${x1} ${midY} L ${x2} ${midY} L ${x2} ${y2}`}
+                fill="none"
+                stroke="var(--line-strong)"
+                strokeWidth={1.5}
+              />
+            );
+          })}
+        </g>
+      </svg>
+
+      {/* Card layer */}
+      <div
+        className="absolute inset-0"
+        style={{ transform: `translate(${pan.x}px, ${pan.y}px) scale(${zoom})`, transformOrigin: "0 0" }}
+      >
+        {allNodes.map((node) => {
+          const dotColor = statusDotColor[node.agent.status] ?? "#a3a3a3";
+          const connectorLabel = adapterLabels[node.agent.connectorId] ?? node.agent.connectorId;
+          return (
+            <div
+              key={node.agent.id}
+              data-org-card
+              className="absolute cursor-pointer select-none rounded-[8px] border border-[color:var(--line)] bg-[color:var(--panel)] shadow-sm transition-[box-shadow,border-color] duration-150 hover:border-[color:var(--line-strong)] hover:shadow-md"
+              style={{ left: node.x, top: node.y, width: CARD_W, minHeight: CARD_H }}
+              onClick={() => onSelectAgent?.(node.agent.id)}
+            >
+              <div className="flex items-center gap-3 px-4 py-3">
+                <div className="relative shrink-0">
+                  <div className="flex h-9 w-9 items-center justify-center rounded-full bg-[color:var(--panel-soft)]">
+                    <Robot size={18} className="text-[color:var(--muted-strong)]" />
+                  </div>
+                  <span
+                    className="absolute -bottom-0.5 -right-0.5 h-3 w-3 rounded-full border-2 border-[color:var(--panel)]"
+                    style={{ backgroundColor: dotColor }}
+                  />
+                </div>
+                <div className="flex min-w-0 flex-1 flex-col items-start">
+                  <span className="text-[13px] font-semibold leading-tight text-[color:var(--text)]">{node.agent.name}</span>
+                  <span className="mt-0.5 text-[11px] leading-tight text-[color:var(--muted)]">
+                    {node.agent.title || node.agent.role}
+                  </span>
+                  <span className="mono mt-1 text-[10px] leading-tight text-[color:var(--muted)]">
+                    {connectorLabel}
+                  </span>
+                </div>
+              </div>
+            </div>
+          );
+        })}
+      </div>
+    </div>
+  );
+}
diff --git a/src/renderer/components/ui.tsx b/src/renderer/components/ui.tsx
new file mode 100644
index 00000000..9b19cb52
--- /dev/null
+++ b/src/renderer/components/ui.tsx
@@ -0,0 +1,488 @@
+import { Component, useEffect, useRef, type ElementType, type ErrorInfo, type ReactNode } from "react";
+
+export function Badge({ count, tone = "default" }: { count: number; tone?: "default" | "warn" | "danger" }) {
+  if (count <= 0) return null;
+  const toneClass = tone === "danger" ? "bg-[color:var(--danger)] text-white" : tone === "warn" ? "bg-[color:var(--warn)] text-white" : "bg-[color:var(--muted)] text-white";
+  return (
+    <span className={`ml-auto inline-flex h-[18px] min-w-[18px] items-center justify-center rounded-full px-1.5 text-[10px] font-bold ${toneClass}`}>
+      {count > 99 ? "99+" : count}
+    </span>
+  );
+}
+
+export function SectionButton({
+  active,
+  label,
+  icon: Icon,
+  onClick,
+  badge,
+  badgeTone,
+  collapsed = false,
+}: {
+  active: boolean;
+  label: string;
+  icon: ElementType;
+  onClick: () => void;
+  badge?: number;
+  badgeTone?: "default" | "warn" | "danger";
+  collapsed?: boolean;
+}) {
+  if (collapsed) {
+    return (
+      <button
+        aria-current={active ? "page" : undefined}
+        aria-label={label}
+        title={label}
+        className={`focus-ring relative flex w-full items-center justify-center rounded-[6px] p-2 transition duration-150 ${
+          active
+            ? "bg-[color:var(--panel-soft)] text-[color:var(--text)]"
+            : "text-[color:var(--muted-strong)] hover:bg-[color:var(--panel-soft)] hover:text-[color:var(--text)]"
+        }`}
+        onClick={onClick}
+      >
+        <Icon size={18} weight={active ? "fill" : "regular"} className={active ? "text-[color:var(--accent)]" : ""} />
+        {badge ? (
+          <span className={`absolute right-1 top-1 h-[6px] w-[6px] rounded-full ${
+            badgeTone === "danger" ? "bg-[color:var(--danger)]" : badgeTone === "warn" ? "bg-[color:var(--warn)]" : "bg-[color:var(--muted)]"
+          }`} />
+        ) : null}
+      </button>
+    );
+  }
+  return (
+    <button
+      aria-current={active ? "page" : undefined}
+      className={`focus-ring flex w-full items-center gap-2.5 rounded-[6px] px-3 py-[7px] text-left transition duration-150 ${
+        active
+          ? "bg-[color:var(--panel-soft)] text-[color:var(--text)]"
+          : "text-[color:var(--muted-strong)] hover:bg-[color:var(--panel-soft)] hover:text-[color:var(--text)]"
+      }`}
+      onClick={onClick}
+    >
+      <Icon size={17} weight={active ? "fill" : "regular"} className={active ? "text-[color:var(--accent)]" : ""} />
+      <span className={`text-[13px] tracking-[0.005em] ${active ? "font-semibold" : "font-medium"}`}>{label}</span>
+      {badge ? <Badge count={badge} tone={badgeTone} /> : null}
+    </button>
+  );
+}
+
+export function Panel({
+  title,
+  eyebrow,
+  children,
+  action,
+  className = "",
+  tone = "plain",
+}: {
+  title: string;
+  eyebrow?: string;
+  children: ReactNode;
+  action?: ReactNode;
+  className?: string;
+  tone?: "plain" | "surface";
+}) {
+  return (
+    <section className={`space-y-4 ${className}`}>
+      <div className={`flex items-end justify-between gap-4 ${tone === "surface" ? "border-b border-[color:var(--line)] pb-3" : ""}`}>
+        <div>
+          {eyebrow ? <div className="mb-1 text-[10px] font-semibold uppercase tracking-[0.08em] text-[color:var(--muted)]">{eyebrow}</div> : null}
+          <h2 className="text-[18px] font-semibold tracking-[-0.01em] text-[color:var(--text)]">{title}</h2>
+        </div>
+        {action}
+      </div>
+      <div>{children}</div>
+    </section>
+  );
+}
+
+export function Modal({
+  open,
+  title,
+  onClose,
+  children,
+  width = "640px",
+}: {
+  open: boolean;
+  title: string;
+  onClose: () => void;
+  children: ReactNode;
+  width?: string;
+}) {
+  const trapRef = useFocusTrap(open);
+
+  useEffect(() => {
+    if (!open) return;
+    function onKey(event: KeyboardEvent) {
+      if (event.key === "Escape") onClose();
+    }
+    document.addEventListener("keydown", onKey);
+    return () => document.removeEventListener("keydown", onKey);
+  }, [open, onClose]);
+
+  if (!open) return null;
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center bg-[color:var(--text)]/45" onClick={onClose}>
+      <div
+        ref={trapRef}
+        role="dialog"
+        aria-modal="true"
+        aria-label={title}
+        className="flex w-full flex-col rounded-[12px] border border-[color:var(--line)] bg-[color:var(--panel)] shadow-xl"
+        style={{ maxWidth: width, maxHeight: "80vh" }}
+        onClick={(e) => e.stopPropagation()}
+      >
+        <div className="flex shrink-0 items-center justify-between border-b border-[color:var(--line)] px-6 py-4">
+          <h2 className="text-[16px] font-semibold text-[color:var(--text)]">{title}</h2>
+          <button
+            type="button"
+            className="focus-ring rounded-[6px] p-1 text-[color:var(--muted)] transition hover:text-[color:var(--text)]"
+            onClick={onClose}
+            aria-label="Close"
+          >
+            <svg width="14" height="14" viewBox="0 0 14 14" fill="none"><path d="M1 1l12 12M13 1L1 13" stroke="currentColor" strokeWidth="1.5" strokeLinecap="round" /></svg>
+          </button>
+        </div>
+        <div className="overflow-y-auto px-6 py-5">{children}</div>
+      </div>
+    </div>
+  );
+}
+
+export function Field({ label, children }: { label: string; children: ReactNode }) {
+  return (
+    <label className="block">
+      <div className="mb-1.5 text-[12px] font-medium text-[color:var(--muted-strong)]">{label}</div>
+      {children}
+    </label>
+  );
+}
+
+export function Input({
+  value,
+  onChange,
+  placeholder,
+  type = "text",
+  readOnly = false,
+  disabled = false,
+  label,
+  id,
+  ariaLabel,
+}: {
+  value: string;
+  onChange: (value: string) => void;
+  placeholder?: string;
+  type?: string;
+  readOnly?: boolean;
+  disabled?: boolean;
+  label?: string;
+  id?: string;
+  ariaLabel?: string;
+}) {
+  const input = (
+    <input
+      id={id}
+      aria-label={ariaLabel}
+      type={type}
+      className="focus-ring w-full rounded-[8px] border border-[color:var(--line)] bg-[color:var(--panel)] px-3.5 py-2.5 text-[14px] text-[color:var(--text)] placeholder:text-[color:var(--muted)] disabled:cursor-not-allowed disabled:opacity-60"
+      value={value}
+      placeholder={placeholder}
+      readOnly={readOnly}
+      disabled={disabled}
+      onChange={(event) => onChange(event.target.value)}
+    />
+  );
+  if (label) {
+    return (
+      <label className="block">
+        <div className="mb-1.5 text-[12px] font-medium text-[color:var(--muted-strong)]">{label}</div>
+        {input}
+      </label>
+    );
+  }
+  return input;
+}
+
+export function TextArea({
+  value,
+  onChange,
+  placeholder,
+  rows = 4,
+  label,
+}: {
+  value: string;
+  onChange: (value: string) => void;
+  placeholder?: string;
+  rows?: number;
+  label?: string;
+}) {
+  const textarea = (
+    <textarea
+      className="focus-ring w-full rounded-[8px] border border-[color:var(--line)] bg-[color:var(--panel)] px-3.5 py-2.5 text-[14px] text-[color:var(--text)] placeholder:text-[color:var(--muted)]"
+      value={value}
+      rows={rows}
+      placeholder={placeholder}
+      onChange={(event) => onChange(event.target.value)}
+    />
+  );
+  if (label) {
+    return (
+      <label className="block">
+        <div className="mb-1.5 text-[12px] font-medium text-[color:var(--muted-strong)]">{label}</div>
+        {textarea}
+      </label>
+    );
+  }
+  return textarea;
+}
+
+export function Select({
+  value,
+  onChange,
+  options,
+  compact = false,
+  label,
+}: {
+  value: string;
+  onChange: (value: string) => void;
+  options: Array<{ value: string; label: string }>;
+  compact?: boolean;
+  label?: string;
+}) {
+  const select = (
+    <select
+      className={`focus-ring w-full border bg-[color:var(--panel)] text-[color:var(--text)] ${
+        compact
+          ? "rounded-[6px] border-[color:var(--line)] px-2.5 py-1.5 text-[13px] font-medium"
+          : "rounded-[8px] border-[color:var(--line)] px-3.5 py-2.5 text-[14px]"
+      }`}
+      value={value}
+      onChange={(event) => onChange(event.target.value)}
+    >
+      {options.map((option) => (
+        <option key={option.value} value={option.value} className="bg-[color:var(--panel)] text-[color:var(--text)]">
+          {option.label}
+        </option>
+      ))}
+    </select>
+  );
+  if (label) {
+    return (
+      <label className="block">
+        <div className="mb-1.5 text-[12px] font-medium text-[color:var(--muted-strong)]">{label}</div>
+        {select}
+      </label>
+    );
+  }
+  return select;
+}
+
+export function ActionButton({
+  label,
+  onClick,
+  icon: Icon,
+  tone = "default",
+  loading = false,
+  disabled = false,
+}: {
+  label: string;
+  onClick: () => void;
+  icon?: ElementType;
+  tone?: "default" | "accent" | "danger";
+  loading?: boolean;
+  disabled?: boolean;
+}) {
+  const isDisabled = loading || disabled;
+  const toneClass =
+    tone === "accent"
+      ? "border-transparent bg-[color:var(--accent)] text-white hover:brightness-90"
+      : tone === "danger"
+        ? "border-transparent bg-[color:var(--danger)] text-white hover:brightness-90"
+        : "border-[color:var(--line)] bg-[color:var(--panel)] text-[color:var(--text)] hover:bg-[color:var(--panel-soft)]";
+
+  return (
+    <button
+      className={`focus-ring inline-flex items-center gap-2 rounded-[7px] border px-3.5 py-2 text-[12px] font-semibold transition duration-150 active:translate-y-px ${toneClass} ${isDisabled ? "pointer-events-none opacity-60" : ""}`}
+      onClick={onClick}
+      disabled={isDisabled}
+      aria-busy={loading}
+    >
+      {loading ? (
+        <svg className="h-4 w-4 animate-spin" viewBox="0 0 16 16" fill="none">
+          <circle cx="8" cy="8" r="6" stroke="currentColor" strokeWidth="2" opacity="0.3" />
+          <path d="M14 8a6 6 0 0 0-6-6" stroke="currentColor" strokeWidth="2" strokeLinecap="round" />
+        </svg>
+      ) : Icon ? (
+        <Icon size={16} />
+      ) : null}
+      <span>{label}</span>
+    </button>
+  );
+}
+
+export function StatusPill({ status }: { status: string }) {
+  const positive = ["ready", "active", "running", "succeeded", "approved", "achieved", "done"].includes(status);
+  const negative = ["error", "failed", "cancelled", "blocked", "rejected", "interrupted"].includes(status);
+  const warning = ["auth_required", "degraded", "pending", "in_review", "todo", "queued"].includes(status);
+  const checking = status === "detected" || status === "not_installed";
+  const toneClass = positive
+    ? "text-[color:var(--success)]"
+    : negative
+      ? "text-[color:var(--danger)]"
+      : warning
+        ? "text-[color:var(--warn)]"
+        : "text-[color:var(--muted-strong)]";
+  const dotClass = positive
+    ? "bg-[color:var(--success)]"
+    : negative
+      ? "bg-[color:var(--danger)]"
+      : warning
+        ? "bg-[color:var(--warn)]"
+        : "bg-[color:var(--muted)]";
+
+  const displayLabel = checking ? "checking" : status.replaceAll("_", " ");
+
+  return (
+    <span className={`inline-flex items-center gap-2 text-[11px] font-semibold uppercase tracking-[0.12em] ${toneClass}`}>
+      {checking ? (
+        <span className="h-1.5 w-1.5 animate-pulse rounded-full bg-[color:var(--muted)]" aria-hidden="true" />
+      ) : (
+        <span className={`h-1.5 w-1.5 rounded-full ${dotClass}`} aria-hidden="true" />
+      )}
+      {displayLabel}
+    </span>
+  );
+}
+
+export function EmptyState({
+  title,
+  detail,
+  action,
+}: {
+  title: string;
+  detail?: string;
+  action?: ReactNode;
+}) {
+  return (
+    <div className="px-1 py-8 text-center">
+      <div className="mb-2 text-[15px] font-semibold text-[color:var(--text)]">{title}</div>
+      {detail ? <div className="mx-auto max-w-[48ch] text-[13px] leading-relaxed text-[color:var(--muted)]">{detail}</div> : null}
+      {action ? <div className="mt-5">{action}</div> : null}
+    </div>
+  );
+}
+
+export function ListFrame({
+  children,
+  className = "",
+}: {
+  children: ReactNode;
+  className?: string;
+}) {
+  return <div className={`border-y border-[color:var(--line)] ${className}`}>{children}</div>;
+}
+
+export function ListRow({
+  children,
+  className = "",
+  onClick,
+}: {
+  children: ReactNode;
+  className?: string;
+  onClick?: () => void;
+}) {
+  if (onClick) {
+    return (
+      <button
+        type="button"
+        className={`focus-ring block w-full border-b border-[color:var(--line)] px-5 py-4 text-left last:border-b-0 ${className}`}
+        onClick={onClick}
+      >
+        {children}
+      </button>
+    );
+  }
+  return <div className={`border-b border-[color:var(--line)] px-5 py-4 last:border-b-0 ${className}`}>{children}</div>;
+}
+
+/* ── Focus Trap Hook ────────────────────────────────────────────────── */
+
+export function useFocusTrap(active: boolean) {
+  const ref = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    if (!active || !ref.current) return;
+
+    const container = ref.current;
+    const previouslyFocused = document.activeElement as HTMLElement | null;
+
+    // Focus first focusable element
+    const focusable = container.querySelectorAll<HTMLElement>(
+      'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])',
+    );
+    focusable[0]?.focus();
+
+    function handleKeyDown(event: KeyboardEvent) {
+      if (event.key !== "Tab") return;
+      const focusableNow = container.querySelectorAll<HTMLElement>(
+        'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])',
+      );
+      if (focusableNow.length === 0) return;
+
+      const first = focusableNow[0];
+      const last = focusableNow[focusableNow.length - 1];
+
+      if (event.shiftKey) {
+        if (document.activeElement === first) {
+          event.preventDefault();
+          last.focus();
+        }
+      } else {
+        if (document.activeElement === last) {
+          event.preventDefault();
+          first.focus();
+        }
+      }
+    }
+
+    container.addEventListener("keydown", handleKeyDown);
+    return () => {
+      container.removeEventListener("keydown", handleKeyDown);
+      previouslyFocused?.focus();
+    };
+  }, [active]);
+
+  return ref;
+}
+
+/* ── Reduced Motion Hook ────────────────────────────────────────────── */
+
+export function useReducedMotion() {
+  const query = typeof window !== "undefined" ? window.matchMedia("(prefers-reduced-motion: reduce)") : null;
+  // Return static value — Electron doesn't change this mid-session
+  return query?.matches ?? false;
+}
+
+export class ErrorBoundary extends Component<{ children: ReactNode; fallback?: ReactNode }, { hasError: boolean; error: Error | null }> {
+  constructor(props: { children: ReactNode; fallback?: ReactNode }) {
+    super(props);
+    this.state = { hasError: false, error: null };
+  }
+  static getDerivedStateFromError(error: Error) {
+    return { hasError: true, error };
+  }
+  componentDidCatch(error: Error, info: ErrorInfo) {
+    console.error("[ErrorBoundary]", error, info);
+  }
+  render() {
+    if (this.state.hasError) {
+      return this.props.fallback ?? (
+        <div className="p-8 text-center" role="alert">
+          <div className="text-[15px] font-semibold text-[color:var(--danger)] mb-2">Something went wrong</div>
+          <div className="text-[13px] text-[color:var(--muted)] mb-4">{this.state.error?.message}</div>
+          <ActionButton label="Reload page" onClick={() => window.location.reload()} />
+        </div>
+      );
+    }
+    return this.props.children;
+  }
+}
diff --git a/src/renderer/env.d.ts b/src/renderer/env.d.ts
new file mode 100644
index 00000000..e09f6db1
--- /dev/null
+++ b/src/renderer/env.d.ts
@@ -0,0 +1,9 @@
+import type { DesktopApi } from "@shared/contracts";
+
+declare global {
+  interface Window {
+    agentCompany: DesktopApi;
+  }
+}
+
+export {};
diff --git a/src/renderer/index.html b/src/renderer/index.html
new file mode 100644
index 00000000..9e724df9
--- /dev/null
+++ b/src/renderer/index.html
@@ -0,0 +1,16 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self';"
+    />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>AgentCompany</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="./main.tsx"></script>
+  </body>
+  </html>
diff --git a/src/renderer/lib/desktop.ts b/src/renderer/lib/desktop.ts
new file mode 100644
index 00000000..c75a8817
--- /dev/null
+++ b/src/renderer/lib/desktop.ts
@@ -0,0 +1,8 @@
+import type { DesktopResult } from "@shared/contracts";
+
+export function unwrap<T>(result: DesktopResult<T>): T {
+  if (!result.ok) {
+    throw new Error(result.error.message);
+  }
+  return result.data;
+}
diff --git a/src/renderer/lib/formatters.ts b/src/renderer/lib/formatters.ts
new file mode 100644
index 00000000..cf8c9561
--- /dev/null
+++ b/src/renderer/lib/formatters.ts
@@ -0,0 +1,13 @@
+export function formatMoney(value: number | null | undefined) {
+  if (typeof value !== "number" || Number.isNaN(value)) return "$0.00";
+  return new Intl.NumberFormat("en-US", {
+    style: "currency",
+    currency: "USD",
+    minimumFractionDigits: 2,
+  }).format(value);
+}
+
+export function formatTime(value: string | null | undefined) {
+  if (!value) return "Not yet";
+  return new Date(value).toLocaleString();
+}
diff --git a/src/renderer/main.tsx b/src/renderer/main.tsx
new file mode 100644
index 00000000..d6faae96
--- /dev/null
+++ b/src/renderer/main.tsx
@@ -0,0 +1,11 @@
+import "@fontsource-variable/jetbrains-mono";
+import "./styles.css";
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import { App } from "./App";
+
+createRoot(document.getElementById("root")!).render(
+  <StrictMode>
+    <App />
+  </StrictMode>,
+);
diff --git a/src/renderer/styles.css b/src/renderer/styles.css
new file mode 100644
index 00000000..6ec1c2d8
--- /dev/null
+++ b/src/renderer/styles.css
@@ -0,0 +1,156 @@
+@import "tailwindcss";
+
+:root {
+  color-scheme: light;
+  --bg: #fbfbfb;
+  --bg-subtle: #ffffff;
+  --panel: #ffffff;
+  --panel-soft: #f4f5f5;
+  --panel-strong: #fafafa;
+  --line: rgba(15, 23, 42, 0.08);
+  --line-strong: rgba(15, 23, 42, 0.14);
+  --text: #1a202c;
+  --muted: #718096;
+  --muted-strong: #4a5568;
+  --accent: #c06a3a;
+  --accent-soft: #f7ece6;
+  --danger: #e5484d;
+  --danger-soft: #fdebec;
+  --warn: #b7791f;
+  --warn-soft: #fdf6e3;
+  --success: #2f855a;
+  --success-soft: #edf7f0;
+}
+
+:root[data-theme="light"] {
+  color-scheme: light;
+}
+
+:root[data-theme="dark"] {
+  color-scheme: dark;
+  --bg: #111315;
+  --bg-subtle: #171a1d;
+  --panel: #1b1f23;
+  --panel-soft: #232931;
+  --panel-strong: #20252c;
+  --line: rgba(226, 232, 240, 0.1);
+  --line-strong: rgba(226, 232, 240, 0.18);
+  --text: #f4f7fb;
+  --muted: #9aa7b5;
+  --muted-strong: #c2ccd8;
+  --accent: #ee8a58;
+  --accent-soft: rgba(238, 138, 88, 0.14);
+  --danger: #ff7b86;
+  --danger-soft: rgba(255, 123, 134, 0.14);
+  --warn: #f4bc5b;
+  --warn-soft: rgba(244, 188, 91, 0.14);
+  --success: #61d69d;
+  --success-soft: rgba(97, 214, 157, 0.14);
+}
+
+@media (prefers-color-scheme: dark) {
+  :root[data-theme="system"] {
+    color-scheme: dark;
+    --bg: #111315;
+    --bg-subtle: #171a1d;
+    --panel: #1b1f23;
+    --panel-soft: #232931;
+    --panel-strong: #20252c;
+    --line: rgba(226, 232, 240, 0.1);
+    --line-strong: rgba(226, 232, 240, 0.18);
+    --text: #f4f7fb;
+    --muted: #9aa7b5;
+    --muted-strong: #c2ccd8;
+    --accent: #ee8a58;
+    --accent-soft: rgba(238, 138, 88, 0.14);
+    --danger: #ff7b86;
+    --danger-soft: rgba(255, 123, 134, 0.14);
+    --warn: #f4bc5b;
+    --warn-soft: rgba(244, 188, 91, 0.14);
+    --success: #61d69d;
+    --success-soft: rgba(97, 214, 157, 0.14);
+  }
+}
+
+html,
+body,
+#root {
+  min-height: 100dvh;
+}
+
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--text);
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+  -webkit-font-smoothing: antialiased;
+  text-rendering: optimizeLegibility;
+}
+
+.sidebar-drag {
+  -webkit-app-region: drag;
+}
+
+.sidebar-drag button,
+.sidebar-drag select,
+.sidebar-drag input,
+.sidebar-drag a {
+  -webkit-app-region: no-drag;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+button,
+input,
+textarea,
+select {
+  font: inherit;
+}
+
+::-webkit-scrollbar {
+  width: 10px;
+  height: 10px;
+}
+
+::-webkit-scrollbar-thumb {
+  border-radius: 999px;
+  background: rgba(113, 128, 150, 0.3);
+}
+
+.mono {
+  font-family: "JetBrains Mono Variable", monospace;
+}
+
+.surface {
+  background: var(--panel);
+  border: 1px solid var(--line);
+  box-shadow: 0 1px 2px rgba(15, 23, 42, 0.04);
+}
+
+.focus-ring {
+  outline: none;
+  transition:
+    box-shadow 180ms cubic-bezier(0.16, 1, 0.3, 1),
+    border-color 180ms cubic-bezier(0.16, 1, 0.3, 1),
+    transform 120ms cubic-bezier(0.16, 1, 0.3, 1);
+}
+
+.focus-ring:focus-visible {
+  box-shadow:
+    0 0 0 1px rgba(192, 106, 58, 0.5),
+    0 0 0 4px rgba(192, 106, 58, 0.12);
+  border-color: rgba(192, 106, 58, 0.35);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  *,
+  *::before,
+  *::after {
+    animation-duration: 0.01ms !important;
+    animation-iteration-count: 1 !important;
+    transition-duration: 0.01ms !important;
+    scroll-behavior: auto !important;
+  }
+}
diff --git a/src/shared/contracts.ts b/src/shared/contracts.ts
new file mode 100644
index 00000000..aa48237e
--- /dev/null
+++ b/src/shared/contracts.ts
@@ -0,0 +1,250 @@
+import { z } from "zod";
+import type { CommentRecord, DesktopEvent, ProfileSnapshot } from "./types";
+
+export const IPC_CHANNELS = {
+  loadSnapshot: "agent-company:load-snapshot",
+  pickDirectory: "agent-company:pick-directory",
+  openPath: "agent-company:open-path",
+  saveCompany: "agent-company:save-company",
+  setCurrentCompany: "agent-company:set-current-company",
+  saveConnector: "agent-company:save-connector",
+  testConnector: "agent-company:test-connector",
+  saveWorkspace: "agent-company:save-workspace",
+  saveAgent: "agent-company:save-agent",
+  saveGoal: "agent-company:save-goal",
+  saveProject: "agent-company:save-project",
+  saveTask: "agent-company:save-task",
+  requestApproval: "agent-company:request-approval",
+  decideApproval: "agent-company:decide-approval",
+  saveSecret: "agent-company:save-secret",
+  startTaskRun: "agent-company:start-task-run",
+  cancelRun: "agent-company:cancel-run",
+  getRunLog: "agent-company:get-run-log",
+  backupProfile: "agent-company:backup-profile",
+  restoreProfile: "agent-company:restore-profile",
+  updateSettings: "agent-company:update-settings",
+  checkForUpdates: "agent-company:check-for-updates",
+  deleteCompany: "agent-company:delete-company",
+  deleteAgent: "agent-company:delete-agent",
+  deleteTask: "agent-company:delete-task",
+  deleteGoal: "agent-company:delete-goal",
+  deleteProject: "agent-company:delete-project",
+  deleteWorkspace: "agent-company:delete-workspace",
+  deleteApproval: "agent-company:delete-approval",
+  deleteSecret: "agent-company:delete-secret",
+  getSidebarBadges: "agent-company:get-sidebar-badges",
+  listConnectorModels: "agent-company:list-connector-models",
+  addComment: "agent-company:add-comment",
+  listComments: "agent-company:list-comments",
+  setHeartbeat: "agent-company:set-heartbeat",
+  triggerHeartbeat: "agent-company:trigger-heartbeat",
+  getApiPort: "agent-company:get-api-port",
+  rendererEvent: "agent-company:event",
+} as const;
+
+const optionalId = z.preprocess(
+  (value) => (value === "" ? null : value),
+  z.string().uuid().nullable().optional(),
+);
+
+export const companyInputSchema = z.object({
+  id: optionalId,
+  name: z.string().min(2).max(80),
+  description: z.string().max(500).default(""),
+  status: z.enum(["active", "paused", "archived"]).default("active"),
+});
+
+export const connectorInputSchema = z.object({
+  id: z.enum(["codex_local", "claude_local", "gemini_local", "opencode_local", "kimi_local"]),
+  command: z.string().min(1),
+  model: z.string().nullable().optional(),
+  envBindingText: z.string().default(""),
+  notes: z.string().default(""),
+});
+
+export const workspaceInputSchema = z.object({
+  id: optionalId,
+  companyId: z.string().uuid(),
+  name: z.string().min(2).max(80),
+  localPath: z.string().min(1),
+  repoUrl: z.string().default(""),
+  repoRef: z.string().default(""),
+  projectId: optionalId,
+  isPrimary: z.boolean().default(false),
+});
+
+export const agentInputSchema = z.object({
+  id: optionalId,
+  companyId: z.string().uuid(),
+  name: z.string().min(2).max(80),
+  role: z.string().min(2).max(80),
+  title: z.string().default(""),
+  reportsTo: optionalId,
+  connectorId: connectorInputSchema.shape.id,
+  workspaceId: optionalId,
+  model: z.string().nullable().optional(),
+  metadataJson: z.string().default("{}").optional(),
+  capabilities: z.string().default(""),
+  budgetMonthlyUsd: z.number().min(0).default(0),
+  status: z.enum(["idle", "active", "running", "paused", "error", "pending_approval", "terminated"]).default("idle"),
+});
+
+export const goalInputSchema = z.object({
+  id: optionalId,
+  companyId: z.string().uuid(),
+  title: z.string().min(2).max(120),
+  description: z.string().default(""),
+  parentId: optionalId,
+  ownerAgentId: optionalId,
+  status: z.enum(["planned", "active", "achieved", "cancelled"]).default("planned"),
+});
+
+export const projectInputSchema = z.object({
+  id: optionalId,
+  companyId: z.string().uuid(),
+  goalId: optionalId,
+  name: z.string().min(2).max(120),
+  description: z.string().default(""),
+  leadAgentId: optionalId,
+  targetDate: z.string().nullable().optional(),
+  status: z.enum(["backlog", "planned", "in_progress", "completed", "cancelled"]).default("planned"),
+});
+
+export const taskInputSchema = z.object({
+  id: optionalId,
+  companyId: z.string().uuid(),
+  projectId: optionalId,
+  goalId: optionalId,
+  parentId: optionalId,
+  title: z.string().min(2).max(160),
+  description: z.string().default(""),
+  assigneeAgentId: optionalId,
+  workspaceId: optionalId,
+  priority: z.enum(["critical", "high", "medium", "low"]).default("medium"),
+  status: z.enum(["backlog", "todo", "in_progress", "in_review", "done", "blocked", "cancelled"]).default("todo"),
+});
+
+export const approvalInputSchema = z.object({
+  companyId: z.string().uuid(),
+  relatedTaskId: optionalId,
+  requestedByAgentId: optionalId,
+  type: z.enum(["hire_agent", "approve_ceo_strategy", "dangerous_command", "secret_access"]),
+  payloadSummary: z.string().min(2).max(280),
+  impactSummary: z.string().min(2).max(400),
+});
+
+export const approvalDecisionSchema = z.object({
+  approvalId: z.string().uuid(),
+  state: z.enum(["approved", "rejected", "revision_requested"]),
+  decisionNote: z.string().max(400).default(""),
+});
+
+export const secretInputSchema = z.object({
+  id: optionalId,
+  companyId: z.string().uuid(),
+  name: z.string().min(2).max(80),
+  description: z.string().default(""),
+  value: z.string().min(1).max(2000),
+});
+
+export const startRunSchema = z.object({
+  taskId: z.string().uuid(),
+});
+
+export const cancelRunSchema = z.object({
+  runId: z.string().uuid(),
+});
+
+export const runLogSchema = z.object({
+  runId: z.string().uuid(),
+});
+
+export const deleteEntitySchema = z.object({
+  id: z.string().uuid(),
+  companyId: z.string().uuid(),
+});
+
+export const sidebarBadgesSchema = z.object({
+  pendingApprovals: z.number(),
+  activeRuns: z.number(),
+  failedRuns: z.number(),
+  todoTasks: z.number(),
+  budgetWarnings: z.number(),
+});
+export type SidebarBadges = z.infer<typeof sidebarBadgesSchema>;
+
+export const settingsSchema = z.object({
+  theme: z.enum(["system", "light", "dark"]).optional(),
+  updatesEnabled: z.boolean().optional(),
+  logRetentionDays: z.number().int().min(1).max(365).optional(),
+});
+
+export const commentInputSchema = z.object({
+  companyId: z.string().uuid(),
+  taskId: z.string().uuid(),
+  authorAgentId: optionalId,
+  authorName: z.string().min(1).max(80),
+  body: z.string().min(1).max(4000),
+});
+
+export const listCommentsSchema = z.object({
+  taskId: z.string().uuid(),
+});
+
+export const heartbeatSettingsSchema = z.object({
+  agentId: z.string().uuid(),
+  companyId: z.string().uuid(),
+  enabled: z.boolean(),
+  intervalSec: z.number().int().min(30).max(86400).default(120),
+});
+
+export const triggerHeartbeatSchema = z.object({
+  agentId: z.string().uuid(),
+  companyId: z.string().uuid(),
+  trigger: z.enum(["manual", "timer", "assignment", "goal_activated", "approval_resolved", "subtask_completed", "comment", "report_blocked", "report_failed", "recovery"]).default("manual"),
+});
+
+export type DesktopResult<T> =
+  | { ok: true; data: T }
+  | { ok: false; error: { code: string; message: string } };
+
+export type DesktopApi = {
+  loadSnapshot: () => Promise<DesktopResult<ProfileSnapshot>>;
+  pickDirectory: () => Promise<DesktopResult<string | null>>;
+  openPath: (targetPath: string) => Promise<DesktopResult<boolean>>;
+  saveCompany: (input: z.infer<typeof companyInputSchema>) => Promise<DesktopResult<string>>;
+  setCurrentCompany: (companyId: string) => Promise<DesktopResult<boolean>>;
+  saveConnector: (input: z.infer<typeof connectorInputSchema>) => Promise<DesktopResult<boolean>>;
+  testConnector: (id: z.infer<typeof connectorInputSchema.shape.id>) => Promise<DesktopResult<boolean>>;
+  saveWorkspace: (input: z.infer<typeof workspaceInputSchema>) => Promise<DesktopResult<string>>;
+  saveAgent: (input: z.infer<typeof agentInputSchema>) => Promise<DesktopResult<string>>;
+  saveGoal: (input: z.infer<typeof goalInputSchema>) => Promise<DesktopResult<string>>;
+  saveProject: (input: z.infer<typeof projectInputSchema>) => Promise<DesktopResult<string>>;
+  saveTask: (input: z.infer<typeof taskInputSchema>) => Promise<DesktopResult<string>>;
+  requestApproval: (input: z.infer<typeof approvalInputSchema>) => Promise<DesktopResult<string>>;
+  decideApproval: (input: z.infer<typeof approvalDecisionSchema>) => Promise<DesktopResult<boolean>>;
+  saveSecret: (input: z.infer<typeof secretInputSchema>) => Promise<DesktopResult<string>>;
+  startTaskRun: (input: z.infer<typeof startRunSchema>) => Promise<DesktopResult<string>>;
+  cancelRun: (input: z.infer<typeof cancelRunSchema>) => Promise<DesktopResult<boolean>>;
+  getRunLog: (input: z.infer<typeof runLogSchema>) => Promise<DesktopResult<string>>;
+  backupProfile: () => Promise<DesktopResult<string | null>>;
+  restoreProfile: () => Promise<DesktopResult<boolean>>;
+  updateSettings: (input: z.infer<typeof settingsSchema>) => Promise<DesktopResult<boolean>>;
+  checkForUpdates: () => Promise<DesktopResult<boolean>>;
+  deleteCompany: (companyId: string) => Promise<DesktopResult<boolean>>;
+  deleteAgent: (input: z.infer<typeof deleteEntitySchema>) => Promise<DesktopResult<boolean>>;
+  deleteTask: (input: z.infer<typeof deleteEntitySchema>) => Promise<DesktopResult<boolean>>;
+  deleteGoal: (input: z.infer<typeof deleteEntitySchema>) => Promise<DesktopResult<boolean>>;
+  deleteProject: (input: z.infer<typeof deleteEntitySchema>) => Promise<DesktopResult<boolean>>;
+  deleteWorkspace: (input: z.infer<typeof deleteEntitySchema>) => Promise<DesktopResult<boolean>>;
+  deleteApproval: (input: z.infer<typeof deleteEntitySchema>) => Promise<DesktopResult<boolean>>;
+  deleteSecret: (input: z.infer<typeof deleteEntitySchema>) => Promise<DesktopResult<boolean>>;
+  getSidebarBadges: (companyId: string) => Promise<DesktopResult<SidebarBadges>>;
+  listConnectorModels: (connectorId: string) => Promise<DesktopResult<Array<{ id: string; label: string }>>>;
+  addComment: (input: z.infer<typeof commentInputSchema>) => Promise<DesktopResult<string>>;
+  listComments: (input: z.infer<typeof listCommentsSchema>) => Promise<DesktopResult<CommentRecord[]>>;
+  setHeartbeat: (input: z.infer<typeof heartbeatSettingsSchema>) => Promise<DesktopResult<boolean>>;
+  triggerHeartbeat: (input: z.infer<typeof triggerHeartbeatSchema>) => Promise<DesktopResult<string>>;
+  getApiPort: () => Promise<DesktopResult<number>>;
+  subscribe: (callback: (event: DesktopEvent) => void) => () => void;
+};
diff --git a/src/shared/types.ts b/src/shared/types.ts
new file mode 100644
index 00000000..c0f0aab8
--- /dev/null
+++ b/src/shared/types.ts
@@ -0,0 +1,321 @@
+export type SectionId =
+  | "overview"
+  | "connectors"
+  | "agents"
+  | "orgchart"
+  | "goals"
+  | "projects"
+  | "tasks"
+  | "approvals"
+  | "costs"
+  | "activity"
+  | "workspaces"
+  | "settings";
+
+export type ConnectorId =
+  | "codex_local"
+  | "claude_local"
+  | "gemini_local"
+  | "opencode_local"
+  | "kimi_local";
+
+export type ConnectorStatus =
+  | "not_installed"
+  | "detected"
+  | "auth_required"
+  | "ready"
+  | "degraded"
+  | "error";
+
+export type WorkspaceState = "ready" | "busy" | "blocked" | "missing" | "error";
+export type CompanyStatus = "active" | "paused" | "archived";
+export type AgentStatus =
+  | "idle"
+  | "active"
+  | "running"
+  | "paused"
+  | "error"
+  | "pending_approval"
+  | "terminated";
+export type GoalStatus = "planned" | "active" | "achieved" | "cancelled";
+export type ProjectStatus = "backlog" | "planned" | "in_progress" | "completed" | "cancelled";
+export type TaskStatus = "backlog" | "todo" | "in_progress" | "in_review" | "done" | "blocked" | "cancelled";
+export type ApprovalState = "pending" | "approved" | "rejected" | "revision_requested";
+export type RunStatus =
+  | "queued"
+  | "running"
+  | "succeeded"
+  | "failed"
+  | "cancelled"
+  | "timed_out"
+  | "interrupted";
+
+export interface CapabilityMatrix {
+  sessionResume: boolean;
+  gracefulCancel: boolean;
+  modelDiscovery: boolean;
+  structuredTranscript: boolean;
+  costAttribution: boolean;
+}
+
+export interface CompanyRecord {
+  id: string;
+  name: string;
+  description: string;
+  status: CompanyStatus;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface ConnectorRecord {
+  id: ConnectorId;
+  label: string;
+  description: string;
+  status: ConnectorStatus;
+  command: string;
+  version: string | null;
+  authState: "unknown" | "ok" | "required" | "error";
+  lastCheckedAt: string | null;
+  lastError: string | null;
+  model: string | null;
+  envBindingText: string;
+  notes: string;
+  configurationDoc: string;
+  capabilityMatrix: CapabilityMatrix;
+}
+
+export interface WorkspaceRecord {
+  id: string;
+  companyId: string;
+  name: string;
+  localPath: string;
+  repoUrl: string;
+  repoRef: string;
+  projectId: string | null;
+  state: WorkspaceState;
+  isPrimary: boolean;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface AgentRecord {
+  id: string;
+  companyId: string;
+  name: string;
+  role: string;
+  title: string;
+  status: AgentStatus;
+  reportsTo: string | null;
+  connectorId: ConnectorId;
+  workspaceId: string | null;
+  model: string | null;
+  capabilities: string;
+  budgetMonthlyUsd: number;
+  spentMonthlyUsd: number;
+  metadataJson: string;
+  heartbeatEnabled: boolean;
+  heartbeatIntervalSec: number;
+  lastHeartbeatAt: string | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface GoalRecord {
+  id: string;
+  companyId: string;
+  title: string;
+  description: string;
+  parentId: string | null;
+  ownerAgentId: string | null;
+  status: GoalStatus;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface ProjectRecord {
+  id: string;
+  companyId: string;
+  goalId: string | null;
+  name: string;
+  description: string;
+  leadAgentId: string | null;
+  status: ProjectStatus;
+  targetDate: string | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface TaskRecord {
+  id: string;
+  companyId: string;
+  projectId: string | null;
+  goalId: string | null;
+  parentId: string | null;
+  title: string;
+  description: string;
+  assigneeAgentId: string | null;
+  workspaceId: string | null;
+  status: TaskStatus;
+  priority: "critical" | "high" | "medium" | "low";
+  activeRunId: string | null;
+  sessionJson: string | null;
+  sessionDisplayId: string | null;
+  costUsd: number;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface ApprovalRecord {
+  id: string;
+  companyId: string;
+  relatedTaskId: string | null;
+  relatedAgentId: string | null;
+  requestedByAgentId: string | null;
+  type: "hire_agent" | "approve_ceo_strategy" | "dangerous_command" | "secret_access";
+  payloadSummary: string;
+  impactSummary: string;
+  payloadJson: string | null;
+  decisionNote: string;
+  state: ApprovalState;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface RunRecord {
+  id: string;
+  companyId: string;
+  taskId: string;
+  agentId: string;
+  workspaceId: string | null;
+  connectorId: ConnectorId;
+  status: RunStatus;
+  summary: string;
+  errorMessage: string | null;
+  exitCode: number | null;
+  signal: string | null;
+  model: string | null;
+  sessionDisplayId: string | null;
+  costUsd: number | null;
+  unattributedCost: boolean;
+  startedAt: string | null;
+  finishedAt: string | null;
+  logPath: string | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface CostRecord {
+  id: string;
+  companyId: string;
+  runId: string;
+  taskId: string | null;
+  agentId: string | null;
+  connectorId: ConnectorId;
+  amountUsd: number | null;
+  unattributed: boolean;
+  createdAt: string;
+}
+
+export interface ActivityRecord {
+  id: string;
+  companyId: string;
+  actor: string;
+  action: string;
+  entityType: string;
+  entityId: string;
+  detail: string;
+  createdAt: string;
+}
+
+export interface SecretRecord {
+  id: string;
+  companyId: string;
+  name: string;
+  description: string;
+  backend: "safe_storage" | "vault";
+  updatedAt: string;
+}
+
+export interface ProfileSnapshot {
+  currentCompanyId: string | null;
+  profilePath: string;
+  updatesEnabled: boolean;
+  theme: "system" | "light" | "dark";
+  backend: {
+    secretBackend: string;
+  };
+  companies: CompanyRecord[];
+  connectors: ConnectorRecord[];
+  workspaces: WorkspaceRecord[];
+  agents: AgentRecord[];
+  goals: GoalRecord[];
+  projects: ProjectRecord[];
+  tasks: TaskRecord[];
+  approvals: ApprovalRecord[];
+  runs: RunRecord[];
+  costs: CostRecord[];
+  activity: ActivityRecord[];
+  secrets: SecretRecord[];
+  comments: CommentRecord[];
+}
+
+export interface LogChunkEvent {
+  type: "run-log";
+  runId: string;
+  stream: "stdout" | "stderr";
+  chunk: string;
+}
+
+export interface DomainChangedEvent {
+  type: "domain-changed";
+}
+
+export interface ShortcutEvent {
+  type: "shortcut";
+  action: "toggle-command-palette" | "toggle-console" | "refresh";
+}
+
+export interface RunStatusEvent {
+  type: "run-status";
+  runId: string;
+  status: RunStatus;
+  message: string;
+}
+
+export type HeartbeatTrigger = "manual" | "timer" | "assignment" | "goal_activated" | "approval_resolved" | "subtask_completed" | "comment" | "report_blocked" | "report_failed" | "recovery";
+
+export interface CommentRecord {
+  id: string;
+  companyId: string;
+  taskId: string;
+  authorAgentId: string | null;
+  authorName: string;
+  body: string;
+  createdAt: string;
+}
+
+export interface OrgChartNode {
+  agent: AgentRecord;
+  children: OrgChartNode[];
+}
+
+export interface HeartbeatStatusEvent {
+  type: "heartbeat-status";
+  agentId: string;
+  enabled: boolean;
+  nextWakeAt: string | null;
+}
+
+export interface AgentMessageEvent {
+  type: "agent-message";
+  taskId: string;
+  comment: CommentRecord;
+}
+
+export type DesktopEvent =
+  | LogChunkEvent
+  | DomainChangedEvent
+  | ShortcutEvent
+  | RunStatusEvent
+  | HeartbeatStatusEvent
+  | AgentMessageEvent;
diff --git a/tests/e2e/desktop.smoke.spec.ts b/tests/e2e/desktop.smoke.spec.ts
new file mode 100644
index 00000000..6b6a866a
--- /dev/null
+++ b/tests/e2e/desktop.smoke.spec.ts
@@ -0,0 +1,51 @@
+import { existsSync } from "node:fs";
+import { mkdtemp, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { _electron as electron, expect, test } from "@playwright/test";
+import { getElectronExecutablePath, getMainEntryPath } from "./launch";
+
+test("first launch onboarding creates a company and opens the desktop shell", async () => {
+  const entry = getMainEntryPath();
+  expect(existsSync(entry)).toBeTruthy();
+
+  const profileDir = await mkdtemp(join(tmpdir(), "agentcompany-e2e-"));
+  const workspaceDir = await mkdtemp(join(tmpdir(), "agentcompany-workspace-"));
+
+  const app = await electron.launch({
+    executablePath: getElectronExecutablePath(),
+    args: [entry],
+    cwd: process.cwd(),
+    env: {
+      ...process.env,
+      AGENTCOMPANY_PROFILE_DIR: profileDir,
+      AGENTCOMPANY_DISABLE_UPDATES: "true",
+      AGENTCOMPANY_DISABLE_SINGLE_INSTANCE: "true",
+    },
+  });
+
+  try {
+    const page = await app.firstWindow();
+    await expect(page.getByText("AgentCompany Desktop")).toBeVisible();
+    await page.getByLabel("Company name").fill("Orbit Foundry");
+    await page.getByLabel("Workspace folder").fill(workspaceDir);
+    await page.getByRole("button", { name: /Continue to dashboard/i }).click();
+
+    await expect(page.getByRole("heading", { name: "Dashboard" })).toBeVisible();
+    // Company name is rendered in a custom dropdown trigger button in the sidebar.
+    await expect(page.locator("aside button", { hasText: "Orbit Foundry" }).first()).toBeVisible();
+    const showConsoleButton = page.getByRole("button", { name: /show console/i });
+    await expect(showConsoleButton).toBeVisible();
+    await showConsoleButton.click();
+    await expect(page.getByText("Console", { exact: true })).toBeVisible();
+    const hideConsoleButton = page.getByRole("button", { name: /hide console/i });
+    await expect(hideConsoleButton).toBeVisible();
+    await hideConsoleButton.click();
+    await expect(page.getByText("Console", { exact: true })).toBeHidden();
+    await expect(showConsoleButton).toBeVisible();
+  } finally {
+    await app.close();
+    await rm(profileDir, { recursive: true, force: true });
+    await rm(workspaceDir, { recursive: true, force: true });
+  }
+});
diff --git a/tests/e2e/e2e-global-setup.ts b/tests/e2e/e2e-global-setup.ts
new file mode 100644
index 00000000..9b88763f
--- /dev/null
+++ b/tests/e2e/e2e-global-setup.ts
@@ -0,0 +1,13 @@
+import { execFileSync } from "node:child_process";
+
+/**
+ * Playwright globalSetup: build the Electron app from source before E2E tests.
+ * Uses execFileSync (no shell) for safety and deterministic builds.
+ */
+export default function globalSetup() {
+  execFileSync("pnpm", ["electron-vite", "build"], {
+    stdio: "inherit",
+    cwd: process.cwd(),
+    timeout: 120_000,
+  });
+}
diff --git a/tests/e2e/launch.ts b/tests/e2e/launch.ts
new file mode 100644
index 00000000..50b1f606
--- /dev/null
+++ b/tests/e2e/launch.ts
@@ -0,0 +1,9 @@
+import { resolve } from "node:path";
+
+export function getElectronExecutablePath() {
+  return resolve(process.cwd(), process.platform === "win32" ? "node_modules/.bin/electron.cmd" : "node_modules/.bin/electron");
+}
+
+export function getMainEntryPath() {
+  return resolve(process.cwd(), "out/main/index.js");
+}
diff --git a/tests/e2e/playwright.config.ts b/tests/e2e/playwright.config.ts
new file mode 100644
index 00000000..883ef0bd
--- /dev/null
+++ b/tests/e2e/playwright.config.ts
@@ -0,0 +1,18 @@
+import { defineConfig } from "@playwright/test";
+
+export default defineConfig({
+  testDir: ".",
+  testMatch: ["desktop.smoke.spec.ts"],
+  timeout: 120_000,
+  fullyParallel: false,
+  workers: 1,
+  reporter: "list",
+  use: {
+    trace: "on-first-retry",
+    screenshot: "only-on-failure",
+  },
+  // Build from current source before running e2e tests.
+  // Uses globalSetup (not webServer) because electron-vite build is a
+  // one-shot build command, not a long-running server process.
+  globalSetup: "./e2e-global-setup.ts",
+});
diff --git a/tests/integration/autonomous-chain.spec.ts b/tests/integration/autonomous-chain.spec.ts
new file mode 100644
index 00000000..9673132b
--- /dev/null
+++ b/tests/integration/autonomous-chain.spec.ts
@@ -0,0 +1,1056 @@
+/**
+ * End-to-end integration tests for the autonomous operation chain.
+ * Tests all 8 steps from IMPLEMENTATION_PLAN.md v2:
+ *
+ * Step 1: CEO role detection fix
+ * Step 2: CEO phased prompts + pending approvals + credential escalation
+ * Step 3: Deferred wake queue
+ * Step 4: Hire approval wake
+ * Step 5: Task status + comment wake propagation
+ * Step 6: Run failure escalation
+ * Step 7: Worker crash recovery
+ * Step 8: Wake reason injection into prompt
+ */
+
+import { mkdtemp, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { AppDatabase } from "../../src/main/database";
+import { buildSystemPrompt, buildTaskPrompt } from "../../src/main/prompt-builder";
+import type { AgentRecord, ApprovalRecord, TaskRecord } from "../../src/shared/types";
+
+const tempDirs: string[] = [];
+
+async function createTempDir(prefix: string) {
+  const dir = await mkdtemp(join(tmpdir(), prefix));
+  tempDirs.push(dir);
+  return dir;
+}
+
+let db: AppDatabase;
+let companyId: string;
+let workspaceId: string;
+
+beforeEach(async () => {
+  const profileDir = await createTempDir("agentcompany-chain-test-");
+  db = new AppDatabase(profileDir);
+  db.init();
+
+  companyId = db.saveCompany({
+    name: "Autonomous Test Corp",
+    description: "Test company for autonomous chain",
+    status: "active",
+  });
+
+  workspaceId = db.saveWorkspace({
+    companyId,
+    name: "Primary",
+    localPath: profileDir,
+    repoUrl: "https://example.com/repo.git",
+    repoRef: "main",
+    isPrimary: true,
+  });
+});
+
+afterEach(async () => {
+  db?.close();
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
+});
+
+function createAgent(overrides: Partial<Parameters<typeof db.saveAgent>[0]> = {}): string {
+  return db.saveAgent({
+    companyId,
+    name: "TestAgent",
+    role: "CEO",
+    title: "Test",
+    status: "idle",
+    reportsTo: null,
+    connectorId: "codex_local",
+    workspaceId,
+    model: null,
+    capabilities: "Test capabilities",
+    budgetMonthlyUsd: 200,
+    ...overrides,
+  });
+}
+
+function buildCtx(overrides: Record<string, unknown> = {}): Parameters<typeof buildSystemPrompt>[0] {
+  const agent = db.getAgent(overrides.agentId as string ?? createAgent());
+  return {
+    agent,
+    apiUrl: "http://127.0.0.1:3000",
+    apiKey: "test-key",
+    runId: "test-run-id",
+    task: null,
+    companyName: "Autonomous Test Corp",
+    goals: [],
+    projects: [],
+    directReports: overrides.directReports as AgentRecord[] ?? [],
+    chainOfCommand: overrides.chainOfCommand as AgentRecord[] ?? [],
+    assignedTasks: [],
+    allAgents: [],
+    pendingApprovals: overrides.pendingApprovals as ApprovalRecord[] ?? [],
+    tasksAwaitingReview: overrides.tasksAwaitingReview as TaskRecord[] ?? [],
+    wakeReason: overrides.wakeReason as string | null ?? null,
+    ...overrides,
+  } as Parameters<typeof buildSystemPrompt>[0];
+}
+
+// ─── Step 1: CEO Role Detection ─────────────────────────────────────
+
+describe("Step 1: CEO role detection", () => {
+  it("identifies CEO when chainOfCommand is empty, even with no direct reports", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [], // no reports yet!
+      chainOfCommand: [], // top-level
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+
+    // CEO should NOT get IC instructions
+    expect(prompt).not.toContain("Individual Contributor");
+    // CEO should get executive instructions (Phase 0: Team Building)
+    expect(prompt).toContain("CEO");
+    expect(prompt).toContain("Team Building");
+  });
+
+  it("identifies manager when has reports and has chain of command", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const managerId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId });
+    const ceo = db.getAgent(ceoId);
+    const icId = createAgent({ name: "IC", role: "Engineer", reportsTo: managerId });
+    const ic = db.getAgent(icId);
+
+    const ctx = buildCtx({
+      agentId: managerId,
+      directReports: [ic],
+      chainOfCommand: [ceo], // reports to CEO
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Operating Instructions (Manager)");
+    expect(prompt).not.toContain("Individual Contributor");
+    expect(prompt).not.toContain("Executive / CEO");
+  });
+
+  it("identifies IC when has chain of command and no direct reports", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ceo = db.getAgent(ceoId);
+    const icId = createAgent({ name: "Dev", role: "Engineer", reportsTo: ceoId });
+
+    const ctx = buildCtx({
+      agentId: icId,
+      directReports: [],
+      chainOfCommand: [ceo],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Individual Contributor");
+    expect(prompt).not.toContain("Operating Instructions (Manager)");
+  });
+});
+
+// ─── Step 2: CEO Phased Prompts ─────────────────────────────────────
+
+describe("Step 2: CEO phased prompts", () => {
+  it("Phase 0: shows team building instructions when no reports at all", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [], // truly no reports
+      chainOfCommand: [],
+      pendingApprovals: [],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Team Building Phase");
+    expect(prompt).toContain("Design Organization");
+    expect(prompt).toContain("Submit Org Plan for Approval");
+    expect(prompt).not.toContain("Awaiting Org Approval");
+    expect(prompt).not.toContain("Goal Decomposition");
+  });
+
+  it("Phase 0.5: shows awaiting hire approvals when pending_approval hires exist but no org approval", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+
+    const hireId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId, status: "pending_approval" as "idle" });
+    const hire = db.getAgent(hireId);
+
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [hire],
+      chainOfCommand: [],
+      pendingApprovals: [],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Awaiting Hire Approvals");
+    expect(prompt).not.toContain("Team Building Phase");
+    expect(prompt).not.toContain("Goal Decomposition");
+  });
+
+  it("Phase 1: shows awaiting org approval when pending approve_ceo_strategy exists", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [],
+      chainOfCommand: [],
+      pendingApprovals: [
+        {
+          id: "approval-1",
+          companyId,
+          type: "approve_ceo_strategy",
+          state: "pending",
+          payloadSummary: "Org structure: CEO + CTO + CMO",
+          impactSummary: "Team of 3",
+          requestedByAgentId: ceoId,
+          relatedTaskId: null,
+          decisionNote: "",
+          createdAt: new Date().toISOString(),
+          updatedAt: new Date().toISOString(),
+        } as ApprovalRecord,
+      ],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Awaiting Org Approval");
+    expect(prompt).not.toContain("Team Building Phase");
+    expect(prompt).not.toContain("Goal Decomposition");
+  });
+
+  it("Phase 2: shows normal executive instructions when active reports and no pending org approval", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId, status: "idle" });
+    const cto = db.getAgent(ctoId);
+
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [cto],
+      chainOfCommand: [],
+      pendingApprovals: [],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Executive / CEO");
+    expect(prompt).toContain("Goal Decomposition");
+    expect(prompt).toContain("Delegation");
+    expect(prompt).toContain("Credential Escalation");
+    expect(prompt).not.toContain("Team Building Phase");
+    expect(prompt).not.toContain("Awaiting Org Approval");
+  });
+
+  it("includes pending approvals section in prompt", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId, status: "idle" });
+    const cto = db.getAgent(ctoId);
+
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [cto],
+      chainOfCommand: [],
+      pendingApprovals: [
+        {
+          id: "approval-x",
+          companyId,
+          type: "secret_access",
+          state: "pending",
+          payloadSummary: "Need Twitter API keys",
+          impactSummary: "",
+          requestedByAgentId: ceoId,
+          relatedTaskId: null,
+          decisionNote: "",
+          createdAt: new Date().toISOString(),
+          updatedAt: new Date().toISOString(),
+        } as ApprovalRecord,
+      ],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Pending Approvals");
+    expect(prompt).toContain("Need Twitter API keys");
+  });
+
+  it("Manager prompt includes credential escalation guidance", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ceo = db.getAgent(ceoId);
+    const managerId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId });
+    const icId = createAgent({ name: "Dev", role: "Engineer", reportsTo: managerId });
+    const ic = db.getAgent(icId);
+
+    const ctx = buildCtx({
+      agentId: managerId,
+      directReports: [ic],
+      chainOfCommand: [ceo],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Do NOT create secret_access approvals directly");
+    expect(prompt).toContain("escalate upward");
+  });
+
+  it("IC prompt includes credential escalation guidance", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ceo = db.getAgent(ceoId);
+    const icId = createAgent({ name: "Dev", role: "Engineer", reportsTo: ceoId });
+
+    const ctx = buildCtx({
+      agentId: icId,
+      directReports: [],
+      chainOfCommand: [ceo],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Your manager will be notified and help resolve it");
+    expect(prompt).toContain("Only create a secret_access approval directly if you have NO manager");
+  });
+});
+
+// ─── Step 3: Deferred Wake Queue ────────────────────────────────────
+
+describe("Step 3: Deferred wake queue (database)", () => {
+  it("enqueue and consume pending wakes", () => {
+    const agentId = createAgent({ name: "TestAgent" });
+
+    // Enqueue two wakes
+    db.enqueuePendingWake(companyId, agentId, "subtask_completed");
+    db.enqueuePendingWake(companyId, agentId, "comment");
+
+    // Consume returns them in order
+    const wakes = db.consumePendingWakes(agentId);
+    expect(wakes).toHaveLength(2);
+    expect(wakes[0].trigger).toBe("subtask_completed");
+    expect(wakes[1].trigger).toBe("comment");
+    expect(wakes[0].companyId).toBe(companyId);
+
+    // Second consume returns empty (they've been deleted)
+    const wakes2 = db.consumePendingWakes(agentId);
+    expect(wakes2).toHaveLength(0);
+  });
+
+  it("returns empty array when no pending wakes exist", () => {
+    const agentId = createAgent({ name: "TestAgent" });
+    const wakes = db.consumePendingWakes(agentId);
+    expect(wakes).toHaveLength(0);
+  });
+
+  it("does not consume wakes for other agents", () => {
+    const agent1 = createAgent({ name: "Agent1" });
+    const agent2 = createAgent({ name: "Agent2" });
+
+    db.enqueuePendingWake(companyId, agent1, "comment");
+    db.enqueuePendingWake(companyId, agent2, "subtask_completed");
+
+    const wakes1 = db.consumePendingWakes(agent1);
+    expect(wakes1).toHaveLength(1);
+    expect(wakes1[0].trigger).toBe("comment");
+
+    // Agent2's wake should still be there
+    const wakes2 = db.consumePendingWakes(agent2);
+    expect(wakes2).toHaveLength(1);
+    expect(wakes2[0].trigger).toBe("subtask_completed");
+  });
+});
+
+// ─── Step 4: Hire Approval Wake ─────────────────────────────────────
+
+describe("Step 4: Hire approval + decideApproval", () => {
+  it("decideApproval sets hired agent to idle when approved", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const hireId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId, status: "pending_approval" as "idle" });
+
+    const approvalId = db.requestApproval({
+      companyId,
+      requestedByAgentId: ceoId,
+      type: "hire_agent",
+      payloadSummary: "Hire CTO",
+      impactSummary: "Test impact",
+      payloadJson: JSON.stringify({ agentId: hireId }),
+    });
+
+    db.decideApproval({
+      approvalId,
+      state: "approved",
+      decisionNote: "Approved by board",
+    });
+
+    const updatedAgent = db.getAgent(hireId);
+    expect(updatedAgent.status).toBe("idle");
+  });
+
+  it("decideApproval sets hired agent to terminated when rejected", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const hireId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId, status: "pending_approval" as "idle" });
+
+    const approvalId = db.requestApproval({
+      companyId,
+      requestedByAgentId: ceoId,
+      type: "hire_agent",
+      payloadSummary: "Hire CTO",
+      impactSummary: "Test impact",
+      payloadJson: JSON.stringify({ agentId: hireId }),
+    });
+
+    db.decideApproval({
+      approvalId,
+      state: "rejected",
+      decisionNote: "Not needed",
+    });
+
+    const updatedAgent = db.getAgent(hireId);
+    expect(updatedAgent.status).toBe("terminated");
+  });
+
+  it("getApprovalRecord includes payloadJson", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const approvalId = db.requestApproval({
+      companyId,
+      requestedByAgentId: ceoId,
+      type: "hire_agent",
+      payloadSummary: "Hire CTO",
+      impactSummary: "Test",
+      payloadJson: JSON.stringify({ agentId: "some-agent-id", config: { connector: "codex_local" } }),
+    });
+
+    const approval = db.getApprovalRecord(approvalId);
+    expect(approval.payloadJson).toBeTruthy();
+    const payload = JSON.parse(approval.payloadJson!);
+    expect(payload.agentId).toBe("some-agent-id");
+  });
+});
+
+// ─── Step 5: Task Status + Comment Wake Propagation ─────────────────
+
+describe("Step 5: Task status + comment wake propagation", () => {
+  it("getChainOfCommand returns correct hierarchy", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO", reportsTo: null });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId });
+    const icId = createAgent({ name: "Dev", role: "Engineer", reportsTo: ctoId });
+
+    const chain = db.getChainOfCommand(icId);
+    expect(chain).toHaveLength(2);
+    expect(chain[0].id).toBe(ctoId); // immediate manager
+    expect(chain[1].id).toBe(ceoId); // top level
+  });
+
+  it("getChainOfCommand handles circular references safely", () => {
+    // Create a potential cycle (shouldn't happen in practice, but guard against it)
+    const agent1 = createAgent({ name: "Agent1" });
+    // agent1 reports to no one (CEO), so chain should be empty
+    const chain = db.getChainOfCommand(agent1);
+    expect(chain).toHaveLength(0);
+  });
+
+  it("task tree supports parent-child relationships", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId });
+
+    const parentTaskId = db.saveTask({
+      companyId,
+      title: "Build feature X",
+      description: "Top-level task",
+      assigneeAgentId: ctoId,
+      workspaceId,
+      priority: "high",
+      status: "in_progress",
+    });
+
+    const childTaskId = db.saveTask({
+      companyId,
+      title: "Implement module A",
+      description: "Subtask",
+      assigneeAgentId: ctoId,
+      parentId: parentTaskId,
+      workspaceId,
+      priority: "medium",
+      status: "todo",
+    });
+
+    const childTask = db.getTask(childTaskId);
+    expect(childTask.parentId).toBe(parentTaskId);
+
+    const parentTask = db.getTask(parentTaskId);
+    expect(parentTask.assigneeAgentId).toBe(ctoId);
+  });
+});
+
+// ─── Step 6: Run Failure Escalation ─────────────────────────────────
+
+describe("Step 6: Run failure escalation (database layer)", () => {
+  it("finishRun marks run as failed and returns outcome", () => {
+    const agentId = createAgent({ name: "IC", role: "Engineer" });
+    const taskId = db.saveTask({
+      companyId,
+      title: "Failing task",
+      description: "Will fail",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "medium",
+      status: "in_progress",
+    });
+
+    const run = db.createRun({
+      companyId,
+      taskId,
+      agentId,
+      workspaceId,
+      connectorId: "codex_local",
+    });
+
+    db.markRunStatus(run.id, "running", "Started");
+
+    const outcome = db.finishRun({
+      runId: run.id,
+      status: "failed",
+      summary: null,
+      errorMessage: "Process crashed",
+      exitCode: 1,
+      signal: null,
+      model: "gpt-5-codex",
+      sessionDisplayId: null,
+      costUsd: 0.5,
+      unattributedCost: false,
+    });
+
+    expect(outcome.budgetHardStopped).toBe(false);
+
+    const snapshot = db.listSnapshot();
+    const finishedRun = snapshot.runs.find((r) => r.id === run.id);
+    expect(finishedRun?.status).toBe("failed");
+    expect(finishedRun?.errorMessage).toBe("Process crashed");
+  });
+
+  it("getChainOfCommand returns manager for failure escalation", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId });
+    const icId = createAgent({ name: "Dev", role: "Engineer", reportsTo: ctoId });
+
+    const chain = db.getChainOfCommand(icId);
+    // First in chain is the immediate manager (CTO)
+    expect(chain.length).toBeGreaterThan(0);
+    expect(chain[0].name).toBe("CTO");
+  });
+});
+
+// ─── Step 7: Worker Crash Recovery ──────────────────────────────────
+
+describe("Step 7: Worker crash recovery (database layer)", () => {
+  it("interruptStaleRuns clears running and queued runs on init", async () => {
+    const agentId = createAgent({ name: "Agent" });
+    const taskId = db.saveTask({
+      companyId,
+      title: "In-progress task",
+      description: "Running when crash happened",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "medium",
+      status: "in_progress",
+    });
+
+    const run = db.createRun({
+      companyId,
+      taskId,
+      agentId,
+      workspaceId,
+      connectorId: "codex_local",
+    });
+
+    db.markRunStatus(run.id, "running", "Started");
+
+    // Verify it's running
+    let snapshot = db.listSnapshot();
+    expect(snapshot.runs.find((r) => r.id === run.id)?.status).toBe("running");
+
+    // Simulate app restart — close and re-init
+    db.close();
+
+    const profileDir = tempDirs[tempDirs.length - 1]!;
+    db = new AppDatabase(profileDir);
+    db.init(); // This calls interruptStaleRuns()
+
+    snapshot = db.listSnapshot();
+    const recoveredRun = snapshot.runs.find((r) => r.id === run.id);
+    expect(recoveredRun?.status).toBe("interrupted");
+  });
+
+  it("finishRun can mark interrupted runs from crash recovery", () => {
+    const agentId = createAgent({ name: "Agent" });
+    const taskId = db.saveTask({
+      companyId,
+      title: "Crash recovery task",
+      description: "Test",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "medium",
+      status: "in_progress",
+    });
+
+    const run = db.createRun({
+      companyId,
+      taskId,
+      agentId,
+      workspaceId,
+      connectorId: "codex_local",
+    });
+
+    db.markRunStatus(run.id, "running", "Started");
+
+    // Simulate crash recovery - mark as interrupted
+    db.finishRun({
+      runId: run.id,
+      status: "interrupted",
+      summary: "Worker process crashed.",
+      errorMessage: "Worker process exited unexpectedly.",
+      exitCode: 1,
+      signal: null,
+      model: null,
+      sessionDisplayId: null,
+      costUsd: null,
+      unattributedCost: true,
+    });
+
+    const snapshot = db.listSnapshot();
+    const recovered = snapshot.runs.find((r) => r.id === run.id);
+    expect(recovered?.status).toBe("interrupted");
+    expect(recovered?.errorMessage).toBe("Worker process exited unexpectedly.");
+  });
+});
+
+// ─── Step 8: Wake Reason Injection ──────────────────────────────────
+
+describe("Step 8: Wake reason injection", () => {
+  it("includes wake reason section for non-timer triggers", () => {
+    const agentId = createAgent({ name: "CTO", role: "CTO" });
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ceo = db.getAgent(ceoId);
+
+    const ctx = buildCtx({
+      agentId,
+      chainOfCommand: [ceo],
+      wakeReason: "subtask_completed",
+    });
+
+    const prompt = buildTaskPrompt(ctx);
+    expect(prompt).toContain("Wake Reason");
+    expect(prompt).toContain("subtask assigned to one of your reports has been completed");
+  });
+
+  it("does not include wake reason for timer triggers", () => {
+    const agentId = createAgent({ name: "Agent" });
+
+    const ctx = buildCtx({
+      agentId,
+      wakeReason: "timer",
+    });
+
+    const prompt = buildTaskPrompt(ctx);
+    expect(prompt).not.toContain("Wake Reason");
+  });
+
+  it("does not include wake reason for manual triggers", () => {
+    const agentId = createAgent({ name: "Agent" });
+
+    const ctx = buildCtx({
+      agentId,
+      wakeReason: "manual",
+    });
+
+    const prompt = buildTaskPrompt(ctx);
+    expect(prompt).not.toContain("Wake Reason");
+  });
+
+  it("includes correct message for each wake reason", () => {
+    const agentId = createAgent({ name: "Agent" });
+
+    const reasons: Record<string, string> = {
+      assignment: "assigned new work",
+      goal_activated: "goal you own has been activated",
+      approval_resolved: "approval you requested has been resolved",
+      subtask_completed: "subtask assigned to one of your reports has been completed",
+      comment: "new comment has been posted",
+      report_blocked: "reports is blocked",
+      report_failed: "reports has failed",
+    };
+
+    for (const [reason, expectedText] of Object.entries(reasons)) {
+      const ctx = buildCtx({
+        agentId,
+        wakeReason: reason,
+      });
+      const prompt = buildTaskPrompt(ctx);
+      expect(prompt).toContain("Wake Reason");
+      expect(prompt).toContain(expectedText);
+    }
+  });
+
+  it("handles unknown wake reason gracefully", () => {
+    const agentId = createAgent({ name: "Agent" });
+
+    const ctx = buildCtx({
+      agentId,
+      wakeReason: "custom_trigger_xyz",
+    });
+
+    const prompt = buildTaskPrompt(ctx);
+    expect(prompt).toContain("Wake Reason");
+    expect(prompt).toContain("Trigger: custom_trigger_xyz");
+  });
+
+  it("includes wake reason before task description", () => {
+    const agentId = createAgent({ name: "Agent" });
+    const taskId = db.saveTask({
+      companyId,
+      title: "Do the thing",
+      description: "Test task",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "medium",
+      status: "todo",
+    });
+    const task = db.getTask(taskId);
+
+    const ctx = buildCtx({
+      agentId,
+      task,
+      wakeReason: "assignment",
+    });
+
+    const prompt = buildTaskPrompt(ctx);
+    const wakeIndex = prompt.indexOf("Wake Reason");
+    const taskIndex = prompt.indexOf("Your immediate task");
+    expect(wakeIndex).toBeGreaterThan(-1);
+    expect(taskIndex).toBeGreaterThan(-1);
+    expect(wakeIndex).toBeLessThan(taskIndex);
+  });
+});
+
+// ─── E2E: Full Autonomous Chain Flow ────────────────────────────────
+
+describe("E2E: Full autonomous CEO cold start flow", () => {
+  it("simulates complete chain: CEO creation → team build → org approval → delegation → completion", () => {
+    // 1. Create CEO agent
+    const ceoId = createAgent({ name: "Atlas", role: "CEO", status: "idle" });
+
+    // CEO has no team yet → Phase 0
+    const phase0Ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [],
+      chainOfCommand: [],
+      pendingApprovals: [],
+    });
+    const phase0Prompt = buildSystemPrompt(phase0Ctx);
+    expect(phase0Prompt).toContain("Team Building Phase");
+
+    // 2. CEO submits hire requests
+    const ctoId = createAgent({ name: "Nova", role: "CTO", reportsTo: ceoId, status: "pending_approval" as "idle" });
+    const cmoId = createAgent({ name: "Aria", role: "CMO", reportsTo: ceoId, status: "pending_approval" as "idle" });
+
+    // 3. CEO submits org strategy approval
+    const orgApprovalId = db.requestApproval({
+      companyId,
+      requestedByAgentId: ceoId,
+      type: "approve_ceo_strategy",
+      payloadSummary: "Org: CEO + CTO + CMO",
+      impactSummary: "3-person team",
+    });
+
+    // CEO now in Phase 1
+    const ctoRecord = db.getAgent(ctoId);
+    const cmoRecord = db.getAgent(cmoId);
+    const phase1Ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [ctoRecord, cmoRecord],
+      chainOfCommand: [],
+      pendingApprovals: [{
+        id: orgApprovalId,
+        companyId,
+        type: "approve_ceo_strategy",
+        state: "pending",
+        payloadSummary: "Org: CEO + CTO + CMO",
+        impactSummary: "3-person team",
+        requestedByAgentId: ceoId,
+        relatedTaskId: null,
+        decisionNote: "",
+        createdAt: new Date().toISOString(),
+        updatedAt: new Date().toISOString(),
+      } as ApprovalRecord],
+    });
+    const phase1Prompt = buildSystemPrompt(phase1Ctx);
+    expect(phase1Prompt).toContain("Awaiting Org Approval");
+
+    // 4. Board approves hires
+    const hireApprovalCTO = db.requestApproval({
+      companyId,
+      requestedByAgentId: ceoId,
+      type: "hire_agent",
+      payloadSummary: "Hire Nova as CTO",
+      impactSummary: "Test",
+      payloadJson: JSON.stringify({ agentId: ctoId }),
+    });
+    db.decideApproval({ approvalId: hireApprovalCTO, state: "approved", decisionNote: "Approved" });
+
+    const hireApprovalCMO = db.requestApproval({
+      companyId,
+      requestedByAgentId: ceoId,
+      type: "hire_agent",
+      payloadSummary: "Hire Aria as CMO",
+      impactSummary: "Test",
+      payloadJson: JSON.stringify({ agentId: cmoId }),
+    });
+    db.decideApproval({ approvalId: hireApprovalCMO, state: "approved", decisionNote: "Approved" });
+
+    // Agents now idle
+    expect(db.getAgent(ctoId).status).toBe("idle");
+    expect(db.getAgent(cmoId).status).toBe("idle");
+
+    // 5. Board approves org strategy
+    db.decideApproval({ approvalId: orgApprovalId, state: "approved", decisionNote: "Go ahead" });
+
+    // 6. CEO now in Phase 2
+    const updatedCto = db.getAgent(ctoId);
+    const updatedCmo = db.getAgent(cmoId);
+    const phase2Ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [updatedCto, updatedCmo],
+      chainOfCommand: [],
+      pendingApprovals: [], // all approved now
+    });
+    const phase2Prompt = buildSystemPrompt(phase2Ctx);
+    expect(phase2Prompt).toContain("Executive / CEO");
+    expect(phase2Prompt).toContain("Goal Decomposition");
+    expect(phase2Prompt).toContain("Delegation");
+
+    // 7. Verify hierarchical chain
+    const ctoChain = db.getChainOfCommand(ctoId);
+    expect(ctoChain).toHaveLength(1);
+    expect(ctoChain[0].id).toBe(ceoId);
+
+    // 8. Create task tree
+    const projectId = db.saveProject({
+      companyId,
+      name: "Launch MVP",
+      description: "Build and launch MVP",
+      goalId: null,
+      leadAgentId: ctoId,
+      status: "in_progress",
+    });
+
+    const parentTaskId = db.saveTask({
+      companyId,
+      title: "Build backend",
+      description: "Implement API",
+      assigneeAgentId: ctoId,
+      projectId,
+      workspaceId,
+      priority: "high",
+      status: "in_progress",
+    });
+
+    // CTO creates subtask for IC (would be done via API)
+    const icId = createAgent({ name: "Dev", role: "Engineer", reportsTo: ctoId, status: "idle" });
+    const subtaskId = db.saveTask({
+      companyId,
+      title: "Implement auth",
+      description: "JWT auth",
+      assigneeAgentId: icId,
+      parentId: parentTaskId,
+      projectId,
+      workspaceId,
+      priority: "medium",
+      status: "todo",
+    });
+
+    // Verify parent-child relationship
+    const subtask = db.getTask(subtaskId);
+    expect(subtask.parentId).toBe(parentTaskId);
+
+    // 9. Deferred wake test: enqueue wake while IC is busy
+    db.enqueuePendingWake(companyId, icId, "comment");
+    const pendingWakes = db.consumePendingWakes(icId);
+    expect(pendingWakes).toHaveLength(1);
+    expect(pendingWakes[0].trigger).toBe("comment");
+
+    // 10. Verify IC prompt has correct wake reason
+    const icPromptCtx = buildCtx({
+      agentId: icId,
+      task: subtask,
+      chainOfCommand: [db.getAgent(ctoId), db.getAgent(ceoId)],
+      wakeReason: "assignment",
+    });
+    const icPrompt = buildTaskPrompt(icPromptCtx);
+    expect(icPrompt).toContain("Wake Reason");
+    expect(icPrompt).toContain("assigned new work");
+    expect(icPrompt).toContain("Implement auth");
+  });
+});
+
+// ─── E2E: Deferred Wake + Run Lifecycle ─────────────────────────────
+
+describe("E2E: Deferred wake queue with run lifecycle", () => {
+  it("wake enqueue + run finish + consume cycle", () => {
+    const agentId = createAgent({ name: "Agent" });
+
+    // Simulate: agent is running, wakes come in
+    db.enqueuePendingWake(companyId, agentId, "subtask_completed");
+    db.enqueuePendingWake(companyId, agentId, "comment");
+    db.enqueuePendingWake(companyId, agentId, "report_blocked");
+
+    // Agent finishes run → consume pending wakes
+    const wakes = db.consumePendingWakes(agentId);
+    expect(wakes).toHaveLength(3);
+    expect(wakes[0].trigger).toBe("subtask_completed");
+    expect(wakes[1].trigger).toBe("comment");
+    expect(wakes[2].trigger).toBe("report_blocked");
+
+    // All consumed
+    expect(db.consumePendingWakes(agentId)).toHaveLength(0);
+  });
+});
+
+// ─── E2E: Blocked Escalation Chain ──────────────────────────────────
+
+describe("E2E: Blocked escalation through org hierarchy", () => {
+  it("getChainOfCommand provides escalation path for blocked IC", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId });
+    const icId = createAgent({ name: "Dev", role: "Engineer", reportsTo: ctoId });
+
+    // When IC marks task blocked, we need to find its manager
+    const chain = db.getChainOfCommand(icId);
+    expect(chain[0].id).toBe(ctoId); // immediate manager gets woken
+
+    // When CTO needs to escalate further
+    const ctoChain = db.getChainOfCommand(ctoId);
+    expect(ctoChain[0].id).toBe(ceoId);
+  });
+});
+
+// ─── Adversarial Review Fix Tests ───────────────────────────────────
+
+describe("Review Fix: CEO phase ordering edge case", () => {
+  it("shows awaiting hire approvals when org strategy approved first but hires still pending", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    // Hires submitted but not yet approved
+    const hireId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId, status: "pending_approval" as "idle" });
+    const hire = db.getAgent(hireId);
+
+    // Org strategy already approved (not in pendingApprovals), but hires still pending
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [hire], // only pending_approval
+      chainOfCommand: [],
+      pendingApprovals: [], // org strategy already resolved
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    // Should NOT get Phase 0 (team building) — hires are already submitted
+    expect(prompt).not.toContain("Team Building Phase");
+    // Should get the awaiting hire approvals phase
+    expect(prompt).toContain("Awaiting Hire Approvals");
+  });
+
+  it("moves to Phase 2 once hires are approved (no pending org approval)", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId, status: "idle" });
+    const cto = db.getAgent(ctoId);
+
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [cto], // active report
+      chainOfCommand: [],
+      pendingApprovals: [],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Executive / CEO");
+    expect(prompt).not.toContain("Awaiting Hire Approvals");
+    expect(prompt).not.toContain("Team Building Phase");
+  });
+});
+
+describe("Review Fix: Org gate consistency (revision_requested)", () => {
+  it("org-strategy revision_requested blocks the CEO in Phase 1", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+
+    const ctx = buildCtx({
+      agentId: ceoId,
+      directReports: [],
+      chainOfCommand: [],
+      pendingApprovals: [
+        {
+          id: "approval-rev",
+          companyId,
+          type: "approve_ceo_strategy",
+          state: "revision_requested",
+          payloadSummary: "Org plan needs changes",
+          impactSummary: "",
+          requestedByAgentId: ceoId,
+          relatedTaskId: null,
+          decisionNote: "Please add a CPO",
+          createdAt: new Date().toISOString(),
+          updatedAt: new Date().toISOString(),
+        } as ApprovalRecord,
+      ],
+    });
+
+    const prompt = buildSystemPrompt(ctx);
+    expect(prompt).toContain("Awaiting Org Approval");
+    expect(prompt).toContain("revision_requested");
+  });
+});
+
+describe("Review Fix: Rejected approval wakes agent", () => {
+  it("decideApproval with rejected state still triggers wake (tested via DB)", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+
+    const approvalId = db.requestApproval({
+      companyId,
+      requestedByAgentId: ceoId,
+      type: "approve_ceo_strategy",
+      payloadSummary: "Org plan",
+      impactSummary: "test",
+    });
+
+    db.decideApproval({
+      approvalId,
+      state: "rejected",
+      decisionNote: "Not ready",
+    });
+
+    // Verify approval state
+    const approval = db.getApprovalRecord(approvalId);
+    expect(approval.state).toBe("rejected");
+    // The IPC handler in index.ts now wakes on rejected too —
+    // we verify the DB layer works; the wakeAgentIfPossible call is in index.ts
+  });
+});
+
+describe("Review Fix: Root task completion notification", () => {
+  it("root task (no parentId) should still have org hierarchy for manager lookup", () => {
+    const ceoId = createAgent({ name: "CEO", role: "CEO" });
+    const ctoId = createAgent({ name: "CTO", role: "CTO", reportsTo: ceoId });
+
+    // CTO has a root-level task (no parentId)
+    const taskId = db.saveTask({
+      companyId,
+      title: "Standalone task from CEO",
+      description: "No parent",
+      assigneeAgentId: ctoId,
+      workspaceId,
+      priority: "high",
+      status: "done",
+    });
+
+    const task = db.getTask(taskId);
+    expect(task.parentId).toBeNull();
+
+    // CTO's chain of command includes CEO — so api-server can wake CEO on completion
+    const chain = db.getChainOfCommand(ctoId);
+    expect(chain).toHaveLength(1);
+    expect(chain[0].id).toBe(ceoId);
+  });
+});
diff --git a/tests/integration/database.spec.ts b/tests/integration/database.spec.ts
new file mode 100644
index 00000000..f9b22ebe
--- /dev/null
+++ b/tests/integration/database.spec.ts
@@ -0,0 +1,150 @@
+import { mkdtemp, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { afterEach, describe, expect, it } from "vitest";
+import { AppDatabase } from "../../src/main/database";
+
+const tempDirs: string[] = [];
+
+async function createTempDir(prefix: string) {
+  const dir = await mkdtemp(join(tmpdir(), prefix));
+  tempDirs.push(dir);
+  return dir;
+}
+
+afterEach(async () => {
+  await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
+});
+
+describe("AppDatabase", () => {
+  it("persists core entities, secrets, run logs, and backup restore state", async () => {
+    const profileDir = await createTempDir("agentcompany-profile-");
+    const backupDir = await createTempDir("agentcompany-backup-");
+    const db = new AppDatabase(profileDir);
+    db.init();
+
+    const companyId = db.saveCompany({
+      name: "Orbit Foundry",
+      description: "Test company",
+      status: "active",
+    });
+
+    const workspaceId = db.saveWorkspace({
+      companyId,
+      name: "Primary",
+      localPath: profileDir,
+      repoUrl: "https://example.com/repo.git",
+      repoRef: "main",
+      isPrimary: true,
+    });
+
+    const agentId = db.saveAgent({
+      companyId,
+      name: "Helios",
+      role: "CEO",
+      title: "Lead agent",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId,
+      model: null,
+      capabilities: "Operate the company",
+      budgetMonthlyUsd: 200,
+    });
+
+    const goalId = db.saveGoal({
+      companyId,
+      title: "Ship the desktop app",
+      description: "Reach packaged desktop parity.",
+      ownerAgentId: agentId,
+      status: "active",
+    });
+
+    const projectId = db.saveProject({
+      companyId,
+      goalId,
+      name: "Desktop rebuild",
+      description: "Rebuild as Electron desktop app.",
+      leadAgentId: agentId,
+      status: "in_progress",
+    });
+
+    const taskId = db.saveTask({
+      companyId,
+      projectId,
+      goalId,
+      title: "Validate connector state",
+      description: "Run a health check and capture output.",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "high",
+      status: "todo",
+    });
+
+    db.saveSecret({
+      companyId,
+      name: "vault-openai",
+      description: "Test key",
+      value: "sk-test-123",
+    });
+
+    db.saveConnector({
+      id: "codex_local",
+      command: "codex",
+      model: null,
+      envBindingText: "OPENAI_API_KEY=vault-openai",
+      notes: "Connector note",
+    });
+
+    expect(db.resolveSecretEnv("OPENAI_API_KEY=vault-openai", companyId)).toEqual({
+      OPENAI_API_KEY: "sk-test-123",
+    });
+
+    const run = db.createRun({
+      companyId,
+      taskId,
+      agentId,
+      workspaceId,
+      connectorId: "codex_local",
+    });
+
+    await db.appendRunLog(run.id, "stdout", "hello from run\n");
+    expect(db.readRunLog(run.id)).toContain("hello from run");
+
+    db.markRunStatus(run.id, "running", "Connector launched");
+    db.finishRun({
+      runId: run.id,
+      status: "succeeded",
+      summary: "Completed successfully",
+      errorMessage: null,
+      exitCode: 0,
+      signal: null,
+      model: "gpt-5-codex",
+      sessionDisplayId: "session-1",
+      costUsd: 12.5,
+      unattributedCost: false,
+    });
+
+    const snapshotBeforeBackup = db.listSnapshot();
+    expect(snapshotBeforeBackup.companies).toHaveLength(1);
+    expect(snapshotBeforeBackup.runs[0]?.status).toBe("succeeded");
+    expect(snapshotBeforeBackup.tasks[0]?.activeRunId).toBeNull();
+
+    await db.exportBackup(backupDir);
+
+    db.saveCompany({
+      name: "Temporary company",
+      description: "Should disappear after restore",
+      status: "active",
+    });
+    expect(db.listSnapshot().companies).toHaveLength(2);
+
+    await db.restoreFromBackup(backupDir);
+    const restoredSnapshot = db.listSnapshot();
+    expect(restoredSnapshot.companies).toHaveLength(1);
+    expect(restoredSnapshot.companies[0]?.name).toBe("Orbit Foundry");
+    expect(restoredSnapshot.runs[0]?.summary).toBe("Completed successfully");
+
+    db.close();
+  });
+});
diff --git a/tests/unit/connectors.spec.ts b/tests/unit/connectors.spec.ts
new file mode 100644
index 00000000..010a731f
--- /dev/null
+++ b/tests/unit/connectors.spec.ts
@@ -0,0 +1,37 @@
+import { describe, expect, it } from "vitest";
+import { buildDefaultConnectorRows, parseEnvBindingText } from "../../src/main/connectors";
+
+describe("parseEnvBindingText", () => {
+  it("ignores comments and blank lines while preserving values with equals", () => {
+    expect(
+      parseEnvBindingText(`
+        # comment
+        OPENAI_API_KEY=vault-openai
+
+        CUSTOM=value=with=equals
+      `),
+    ).toEqual({
+      OPENAI_API_KEY: "vault-openai",
+      CUSTOM: "value=with=equals",
+    });
+  });
+});
+
+describe("buildDefaultConnectorRows", () => {
+  it("keeps security-sensitive commands pinned to connector defaults", () => {
+    const [codex] = buildDefaultConnectorRows([
+      {
+        id: "codex_local",
+        command: "/usr/local/bin/codex",
+        status: "ready",
+        notes: "custom note",
+      },
+    ]);
+
+    expect(codex.id).toBe("codex_local");
+    expect(codex.command).toBe("codex");
+    expect(codex.status).toBe("ready");
+    expect(codex.notes).toBe("custom note");
+    expect(codex.capabilityMatrix.structuredTranscript).toBe(true);
+  });
+});
diff --git a/tests/unit/contracts.test.ts b/tests/unit/contracts.test.ts
new file mode 100644
index 00000000..883ef5e5
--- /dev/null
+++ b/tests/unit/contracts.test.ts
@@ -0,0 +1,67 @@
+import { describe, expect, it } from "vitest";
+import {
+  connectorInputSchema,
+  runLogSchema,
+  secretInputSchema,
+  startRunSchema,
+  workspaceInputSchema,
+} from "../../src/shared/contracts";
+
+describe("shared contracts", () => {
+  it("fills connector defaults for optional fields", () => {
+    const parsed = connectorInputSchema.parse({
+      id: "codex_local",
+      command: "codex",
+    });
+
+    expect(parsed.model).toBeUndefined();
+    expect(parsed.envBindingText).toBe("");
+    expect(parsed.notes).toBe("");
+  });
+
+  it("validates workspace and run payloads", () => {
+    expect(() =>
+      workspaceInputSchema.parse({
+        companyId: "bad-id",
+        name: "Primary Workspace",
+        localPath: "/tmp/workspace",
+      }),
+    ).toThrow();
+
+    expect(() =>
+      startRunSchema.parse({
+        taskId: "bad-id",
+      }),
+    ).toThrow();
+
+    expect(() =>
+      runLogSchema.parse({
+        runId: "bad-id",
+      }),
+    ).toThrow();
+  });
+
+  it("accepts bounded secret payloads", () => {
+    const parsed = secretInputSchema.parse({
+      companyId: "00000000-0000-0000-0000-000000000000",
+      name: "vault-openai",
+      description: "OpenAI API token",
+      value: "sk-test-value",
+    });
+
+    expect(parsed.companyId).toBe("00000000-0000-0000-0000-000000000000");
+    expect(parsed.name).toBe("vault-openai");
+    expect(parsed.value).toContain("sk-");
+  });
+
+  it("normalizes empty optional ids to null", () => {
+    const parsed = workspaceInputSchema.parse({
+      companyId: "00000000-0000-0000-0000-000000000000",
+      name: "Primary Workspace",
+      localPath: "/tmp/workspace",
+      projectId: "",
+    });
+
+    expect(parsed.projectId).toBeNull();
+  });
+});
diff --git a/tests/unit/database.test.ts b/tests/unit/database.test.ts
new file mode 100644
index 00000000..58fdab0e
--- /dev/null
+++ b/tests/unit/database.test.ts
@@ -0,0 +1,661 @@
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { mkdtemp, rm } from "node:fs/promises";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+vi.mock("electron", () => ({
+  safeStorage: {
+    isEncryptionAvailable: () => false,
+    getSelectedStorageBackend: () => "basic_text",
+    encryptString: (value: string) => Buffer.from(value, "utf8"),
+    decryptString: (value: Buffer) => value.toString("utf8"),
+  },
+}));
+
+import { AppDatabase } from "../../src/main/database";
+
+describe("AppDatabase", () => {
+  let tempDir: string;
+  let db: AppDatabase;
+
+  beforeEach(async () => {
+    tempDir = await mkdtemp(join(tmpdir(), "agentcompany-db-"));
+    db = new AppDatabase(tempDir);
+    db.init();
+  });
+
+  afterEach(async () => {
+    db.close();
+    await rm(tempDir, { recursive: true, force: true });
+  });
+
+  it("persists company-scoped entities and resolves secret env bindings", () => {
+    const companyId = db.saveCompany({
+      name: "Northline Systems",
+      description: "Operator company",
+      status: "active",
+    });
+    const workspaceId = db.saveWorkspace({
+      companyId,
+      name: "Primary Workspace",
+      localPath: "/tmp/northline",
+      repoUrl: "https://github.com/example/northline",
+      repoRef: "main",
+      isPrimary: true,
+    });
+    const agentId = db.saveAgent({
+      companyId,
+      name: "Chief Operator",
+      role: "CEO",
+      title: "Lead operator",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId,
+      model: "gpt-5",
+      capabilities: "Directs execution",
+      budgetMonthlyUsd: 250,
+    });
+    const goalId = db.saveGoal({
+      companyId,
+      title: "Ship the desktop product",
+      description: "Stabilize the local operator console.",
+      ownerAgentId: agentId,
+      status: "active",
+    });
+    const projectId = db.saveProject({
+      companyId,
+      goalId,
+      name: "Desktop Rebuild",
+      description: "Main delivery lane",
+      leadAgentId: agentId,
+      status: "in_progress",
+      targetDate: null,
+    });
+    const taskId = db.saveTask({
+      companyId,
+      projectId,
+      goalId,
+      title: "Validate connector health",
+      description: "Run a local connector check and capture diagnostics.",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "high",
+      status: "todo",
+    });
+
+    db.saveSecret({
+      companyId,
+      name: "vault-openai",
+      description: "OpenAI API token",
+      value: "sk-test-secret",
+    });
+    db.saveConnector({
+      id: "codex_local",
+      command: "codex",
+      model: "gpt-5",
+      envBindingText: "OPENAI_API_KEY=vault-openai",
+      notes: "Primary coding connector",
+    });
+
+    const snapshot = db.listSnapshot();
+
+    expect(snapshot.currentCompanyId).toBe(companyId);
+    expect(snapshot.workspaces[0]?.id).toBe(workspaceId);
+    expect(snapshot.agents[0]?.id).toBe(agentId);
+    expect(snapshot.goals[0]?.id).toBe(goalId);
+    expect(snapshot.projects[0]?.id).toBe(projectId);
+    expect(snapshot.tasks[0]?.id).toBe(taskId);
+    expect(db.resolveSecretEnv("OPENAI_API_KEY=vault-openai", companyId)).toEqual({
+      OPENAI_API_KEY: "sk-test-secret",
+    });
+  });
+
+  it("backs up and restores the profile", async () => {
+    const companyId = db.saveCompany({
+      name: "Backup Test Co",
+      description: "Backup validation company",
+      status: "active",
+    });
+    const backupDir = await mkdtemp(join(tmpdir(), "agentcompany-backup-"));
+
+    await db.exportBackup(backupDir);
+    db.saveCompany({
+      id: companyId,
+      name: "Mutated Company",
+      description: "Changed after backup",
+      status: "paused",
+    });
+
+    await db.restoreFromBackup(backupDir);
+
+    const snapshot = db.listSnapshot();
+    expect(snapshot.companies[0]?.name).toBe("Backup Test Co");
+
+    await rm(backupDir, { recursive: true, force: true });
+  });
+
+  it("scopes secret resolution to the owning company", () => {
+    const alphaCompanyId = db.saveCompany({
+      name: "Alpha Company",
+      description: "Alpha",
+      status: "active",
+    });
+    const betaCompanyId = db.saveCompany({
+      name: "Beta Company",
+      description: "Beta",
+      status: "active",
+    });
+
+    db.saveSecret({
+      companyId: alphaCompanyId,
+      name: "shared-secret-name",
+      description: "Alpha secret",
+      value: "alpha-secret",
+    });
+
+    expect(db.resolveSecretEnv("API_KEY=shared-secret-name", alphaCompanyId)).toEqual({
+      API_KEY: "alpha-secret",
+    });
+    expect(db.resolveSecretEnv("API_KEY=shared-secret-name", betaCompanyId)).toEqual({});
+  });
+
+  it("atomically checks out unclaimed work to a single agent", () => {
+    const companyId = db.saveCompany({
+      name: "Checkout Company",
+      description: "Atomic checkout validation",
+      status: "active",
+    });
+    const workspaceId = db.saveWorkspace({
+      companyId,
+      name: "Execution Workspace",
+      localPath: "/tmp/checkout",
+      repoUrl: "https://github.com/example/checkout",
+      repoRef: "main",
+      isPrimary: true,
+    });
+    const leadId = db.saveAgent({
+      companyId,
+      name: "Lead",
+      role: "CEO",
+      title: "Lead",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId,
+      model: null,
+      capabilities: "Leads",
+      budgetMonthlyUsd: 100,
+    });
+    const contributorId = db.saveAgent({
+      companyId,
+      name: "Contributor",
+      role: "IC",
+      title: "Contributor",
+      status: "active",
+      reportsTo: leadId,
+      connectorId: "codex_local",
+      workspaceId,
+      model: null,
+      capabilities: "Executes",
+      budgetMonthlyUsd: 100,
+    });
+    const taskId = db.saveTask({
+      companyId,
+      title: "Claim me",
+      description: "First agent wins the checkout.",
+      assigneeAgentId: null,
+      workspaceId,
+      priority: "medium",
+      status: "todo",
+    });
+
+    expect(db.checkoutTask(taskId, leadId)).toBe(true);
+    expect(db.checkoutTask(taskId, contributorId)).toBe(false);
+
+    const task = db.getTask(taskId);
+    expect(task.assigneeAgentId).toBe(leadId);
+    expect(task.status).toBe("in_progress");
+  });
+
+  it("auto-pauses an agent when a run exhausts the monthly budget", () => {
+    const companyId = db.saveCompany({
+      name: "Budget Company",
+      description: "Budget hard stop validation",
+      status: "active",
+    });
+    const workspaceId = db.saveWorkspace({
+      companyId,
+      name: "Budget Workspace",
+      localPath: "/tmp/budget",
+      repoUrl: "https://github.com/example/budget",
+      repoRef: "main",
+      isPrimary: true,
+    });
+    const agentId = db.saveAgent({
+      companyId,
+      name: "Budget Owner",
+      role: "CTO",
+      title: "Budget Owner",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId,
+      model: null,
+      capabilities: "Ships work",
+      budgetMonthlyUsd: 10,
+    });
+    const taskId = db.saveTask({
+      companyId,
+      title: "Spend budget",
+      description: "One run should exhaust the allowance.",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "high",
+      status: "todo",
+    });
+
+    const run = db.createRun({
+      companyId,
+      taskId,
+      agentId,
+      workspaceId,
+      connectorId: "codex_local",
+    });
+
+    const outcome = db.finishRun({
+      runId: run.id,
+      status: "succeeded",
+      summary: "Budget consumed",
+      errorMessage: null,
+      exitCode: 0,
+      signal: null,
+      model: "gpt-5",
+      sessionDisplayId: "session-budget",
+      costUsd: 12,
+      unattributedCost: false,
+    });
+
+    expect(outcome.budgetHardStopped).toBe(true);
+    expect(db.getAgent(agentId).status).toBe("paused");
+    expect(db.getAgent(agentId).spentMonthlyUsd).toBe(12);
+  });
+
+  it("activates pending hires when the corresponding approval is granted", () => {
+    const companyId = db.saveCompany({
+      name: "Hiring Company",
+      description: "Approval-driven hiring",
+      status: "active",
+    });
+    const managerId = db.saveAgent({
+      companyId,
+      name: "Manager",
+      role: "CEO",
+      title: "Manager",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId: null,
+      model: null,
+      capabilities: "Manages",
+      budgetMonthlyUsd: 100,
+    });
+    const pendingHireId = db.saveAgent({
+      companyId,
+      name: "Pending Hire",
+      role: "IC",
+      title: "Pending Hire",
+      status: "pending_approval",
+      reportsTo: managerId,
+      connectorId: "codex_local",
+      workspaceId: null,
+      model: null,
+      capabilities: "Will execute after approval",
+      budgetMonthlyUsd: 50,
+    });
+
+    const approvalId = db.requestApproval({
+      companyId,
+      relatedTaskId: null,
+      requestedByAgentId: managerId,
+      type: "hire_agent",
+      payloadSummary: "Approve pending hire",
+      impactSummary: "Activate the pending hire so they can begin receiving assignments.",
+      payloadJson: JSON.stringify({ agentId: pendingHireId }),
+    });
+
+    db.decideApproval({
+      approvalId,
+      state: "approved",
+      decisionNote: "Approved",
+    });
+
+    expect(db.getAgent(pendingHireId).status).toBe("idle");
+  });
+
+  it("detects pending-approval agents via isAgentPendingApproval", () => {
+    const companyId = db.saveCompany({
+      name: "Gate Test Co",
+      description: "Approval gate validation",
+      status: "active",
+    });
+    const activeAgentId = db.saveAgent({
+      companyId,
+      name: "Active Agent",
+      role: "CTO",
+      title: "Active",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId: null,
+      model: null,
+      capabilities: "Ships",
+      budgetMonthlyUsd: 100,
+    });
+    const pendingAgentId = db.saveAgent({
+      companyId,
+      name: "Pending Agent",
+      role: "IC",
+      title: "Pending",
+      status: "pending_approval",
+      reportsTo: activeAgentId,
+      connectorId: "codex_local",
+      workspaceId: null,
+      model: null,
+      capabilities: "Waiting",
+      budgetMonthlyUsd: 50,
+    });
+
+    expect(db.isAgentPendingApproval(activeAgentId)).toBe(false);
+    expect(db.isAgentPendingApproval(pendingAgentId)).toBe(true);
+  });
+
+  it("detects budget exhaustion via isAgentBudgetExhausted", () => {
+    const companyId = db.saveCompany({
+      name: "Budget Gate Co",
+      description: "Budget gate validation",
+      status: "active",
+    });
+    const workspaceId = db.saveWorkspace({
+      companyId,
+      name: "WS",
+      localPath: "/tmp/budget-gate",
+      repoUrl: "",
+      repoRef: "",
+      isPrimary: true,
+    });
+    const agentId = db.saveAgent({
+      companyId,
+      name: "Budget Agent",
+      role: "IC",
+      title: "Budget",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId,
+      model: null,
+      capabilities: "Test",
+      budgetMonthlyUsd: 10,
+    });
+
+    expect(db.isAgentBudgetExhausted(agentId)).toBe(false);
+
+    // Exhaust the budget via a run
+    const taskId = db.saveTask({
+      companyId,
+      title: "Budget drain",
+      description: "Test",
+      assigneeAgentId: agentId,
+      workspaceId,
+      priority: "medium",
+      status: "todo",
+    });
+    const run = db.createRun({ companyId, taskId, agentId, workspaceId, connectorId: "codex_local" });
+    db.finishRun({
+      runId: run.id,
+      status: "succeeded",
+      summary: "Done",
+      errorMessage: null,
+      exitCode: 0,
+      signal: null,
+      model: null,
+      sessionDisplayId: null,
+      costUsd: 15,
+      unattributedCost: false,
+    });
+
+    expect(db.isAgentBudgetExhausted(agentId)).toBe(true);
+  });
+
+  it("runs forward-only migrations and creates schema_migrations table", () => {
+    // The migration system runs during init() — verify the tracking table exists
+    const snapshot = db.listSnapshot();
+    expect(snapshot).toBeTruthy();
+
+    // Verify we can re-init without errors (migrations are idempotent)
+    db.close();
+    db = new AppDatabase(tempDir);
+    db.init();
+
+    const snapshot2 = db.listSnapshot();
+    expect(snapshot2).toBeTruthy();
+  });
+
+  it("acquires and releases workspace locks", () => {
+    const companyId = db.saveCompany({
+      name: "Lock Test Co",
+      description: "Workspace lock test",
+      status: "active",
+    });
+    const wsId = db.saveWorkspace({
+      companyId,
+      name: "Lockable WS",
+      localPath: "/tmp/lock-test",
+      repoUrl: "",
+      repoRef: "",
+      isPrimary: true,
+    });
+
+    // Acquire lock for run-1
+    expect(db.acquireWorkspaceLock(wsId, "run-1")).toBe(true);
+    let ws = db.getWorkspace(wsId);
+    expect(ws?.state).toBe("busy");
+
+    // Same run can re-acquire (idempotent)
+    expect(db.acquireWorkspaceLock(wsId, "run-1")).toBe(true);
+
+    // Different run cannot acquire while run-1 holds the lock
+    expect(db.acquireWorkspaceLock(wsId, "run-2")).toBe(false);
+
+    // Release lock
+    db.releaseWorkspaceLock(wsId, "run-1");
+    ws = db.getWorkspace(wsId);
+    expect(ws?.state).toBe("ready");
+
+    // Now run-2 can acquire
+    expect(db.acquireWorkspaceLock(wsId, "run-2")).toBe(true);
+    db.releaseWorkspaceLock(wsId, "run-2");
+  });
+
+  it("releases all workspace locks on crash recovery", () => {
+    const companyId = db.saveCompany({
+      name: "Recovery Co",
+      description: "Lock recovery test",
+      status: "active",
+    });
+    const wsId = db.saveWorkspace({
+      companyId,
+      name: "Recovery WS",
+      localPath: "/tmp/recovery-test",
+      repoUrl: "",
+      repoRef: "",
+      isPrimary: true,
+    });
+
+    db.acquireWorkspaceLock(wsId, "stale-run");
+    expect(db.getWorkspace(wsId)?.state).toBe("busy");
+
+    db.releaseAllWorkspaceLocks();
+    expect(db.getWorkspace(wsId)?.state).toBe("ready");
+  });
+
+  it("purges expired run logs based on retention setting", async () => {
+    const companyId = db.saveCompany({
+      name: "Purge Co",
+      description: "Log purge test",
+      status: "active",
+    });
+    const wsId = db.saveWorkspace({
+      companyId,
+      name: "PurgeWS",
+      localPath: "/tmp/purge",
+      repoUrl: "",
+      repoRef: "",
+      isPrimary: true,
+    });
+    const agentId = db.saveAgent({
+      companyId,
+      name: "Purge Agent",
+      role: "IC",
+      title: "Test",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId: wsId,
+      model: null,
+      capabilities: "test",
+      budgetMonthlyUsd: 100,
+    });
+    const taskId = db.saveTask({
+      companyId,
+      title: "Purge task",
+      description: "test",
+      assigneeAgentId: agentId,
+      workspaceId: wsId,
+      priority: "medium",
+      status: "todo",
+    });
+
+    const run = db.createRun({ companyId, taskId, agentId, workspaceId: wsId, connectorId: "codex_local" });
+    await db.appendRunLog(run.id, "stdout", "test log line\n");
+
+    // Finish the run with a very old timestamp
+    db.finishRun({
+      runId: run.id,
+      status: "succeeded",
+      summary: "done",
+      errorMessage: null,
+      exitCode: 0,
+      signal: null,
+      model: null,
+      sessionDisplayId: null,
+      costUsd: 0,
+      unattributedCost: true,
+    });
+
+    // Log should exist before purge
+    expect(db.readRunLog(run.id)).toContain("test log line");
+
+    // Set retention to 1 day and manually backdate the run's finished_at
+    db.updateSettings({ logRetentionDays: 1 });
+    // Backdate finished_at to 10 days ago
+    const tenDaysAgo = new Date(Date.now() - 10 * 86_400_000).toISOString();
+    // Direct SQL update for test only
+    (db as unknown as { db: { prepare: (sql: string) => { run: (...args: unknown[]) => void } } }).db
+      .prepare("update runs set finished_at = ? where id = ?")
+      .run(tenDaysAgo, run.id);
+
+    const purged = db.purgeExpiredRunLogs();
+    expect(purged).toBe(1);
+
+    // Log should be gone after purge
+    expect(db.readRunLog(run.id)).toBe("");
+  });
+
+  it("populates related_agent_id on hire approvals", () => {
+    const companyId = db.saveCompany({
+      name: "Agent Approval Co",
+      description: "test",
+      status: "active",
+    });
+    const managerId = db.saveAgent({
+      companyId,
+      name: "Manager",
+      role: "CEO",
+      title: "CEO",
+      status: "active",
+      reportsTo: null,
+      connectorId: "codex_local",
+      workspaceId: null,
+      model: null,
+      capabilities: "manage",
+      budgetMonthlyUsd: 100,
+    });
+    const hireId = db.saveAgent({
+      companyId,
+      name: "New Hire",
+      role: "IC",
+      title: "IC",
+      status: "pending_approval",
+      reportsTo: managerId,
+      connectorId: "codex_local",
+      workspaceId: null,
+      model: null,
+      capabilities: "code",
+      budgetMonthlyUsd: 50,
+    });
+
+    const approvalId = db.requestApproval({
+      companyId,
+      requestedByAgentId: managerId,
+      type: "hire_agent",
+      payloadSummary: "Hire New Hire",
+      impactSummary: "test",
+      payloadJson: JSON.stringify({ agentId: hireId }),
+    });
+
+    const approval = db.getApprovalRecord(approvalId);
+    // related_agent_id should be populated from payloadJson extraction
+    expect(approval.relatedAgentId).toBe(hireId);
+
+    // Explicit relatedAgentId param should also work
+    const approvalId2 = db.requestApproval({
+      companyId,
+      requestedByAgentId: managerId,
+      relatedAgentId: hireId,
+      type: "hire_agent",
+      payloadSummary: "Hire New Hire v2",
+      impactSummary: "test",
+    });
+
+    const approval2 = db.getApprovalRecord(approvalId2);
+    expect(approval2.relatedAgentId).toBe(hireId);
+  });
+
+  it("updates workspace state", () => {
+    const companyId = db.saveCompany({
+      name: "WS State Co",
+      description: "Workspace state test",
+      status: "active",
+    });
+    const wsId = db.saveWorkspace({
+      companyId,
+      name: "Test WS",
+      localPath: "/tmp/ws-state",
+      repoUrl: "",
+      repoRef: "",
+      isPrimary: true,
+    });
+
+    let ws = db.getWorkspace(wsId);
+    expect(ws?.state).toBe("ready");
+
+    db.setWorkspaceState(wsId, "busy");
+    ws = db.getWorkspace(wsId);
+    expect(ws?.state).toBe("busy");
+
+    db.setWorkspaceState(wsId, "error");
+    ws = db.getWorkspace(wsId);
+    expect(ws?.state).toBe("error");
+  });
+});
diff --git a/tests/unit/worker-utils.spec.ts b/tests/unit/worker-utils.spec.ts
new file mode 100644
index 00000000..021d4c1b
--- /dev/null
+++ b/tests/unit/worker-utils.spec.ts
@@ -0,0 +1,128 @@
+import { describe, expect, it } from "vitest";
+
+// The worker runs in a utility process so we can't import it directly.
+// Instead, we duplicate the pure utility functions here to test their logic.
+
+const ENV_ALLOWLIST: ReadonlySet<string> = new Set([
+  "PATH", "HOME", "USER", "SHELL", "LANG", "LC_ALL", "LC_CTYPE", "TERM", "TMPDIR",
+  "DEVELOPER_DIR", "SDKROOT", "NODE_ENV", "NODE_OPTIONS",
+  "GIT_AUTHOR_NAME", "GIT_AUTHOR_EMAIL", "GIT_COMMITTER_NAME", "GIT_COMMITTER_EMAIL",
+  "GIT_SSH_COMMAND", "GIT_ASKPASS", "GIT_TERMINAL_PROMPT",
+  "XDG_CONFIG_HOME", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_RUNTIME_DIR",
+  "DISPLAY", "WAYLAND_DISPLAY", "DBUS_SESSION_BUS_ADDRESS",
+  "APPDATA", "LOCALAPPDATA", "USERPROFILE", "SYSTEMROOT", "COMSPEC", "PROGRAMFILES",
+  "AGENT_COMPANY_API_URL", "AGENT_COMPANY_API_KEY", "AGENT_COMPANY_RUN_ID",
+]);
+
+function buildSanitizedEnv(
+  hostEnv: Record<string, string>,
+  secretBindings: Record<string, string>,
+): Record<string, string> {
+  const result: Record<string, string> = {};
+  for (const key of ENV_ALLOWLIST) {
+    if (key in hostEnv) {
+      result[key] = hostEnv[key];
+    }
+  }
+  Object.assign(result, secretBindings);
+  return result;
+}
+
+function buildRedactor(env: Record<string, string>): (text: string) => string {
+  const sensitivePatterns: string[] = [];
+  for (const [key, value] of Object.entries(env)) {
+    if (value.length < 8) continue;
+    if (["PATH", "HOME", "USER", "SHELL", "LANG", "TMPDIR", "TERM"].includes(key)) continue;
+    sensitivePatterns.push(value);
+  }
+  if (sensitivePatterns.length === 0) return (text) => text;
+  sensitivePatterns.sort((a, b) => b.length - a.length);
+  return (text: string) => {
+    let result = text;
+    for (const pattern of sensitivePatterns) {
+      if (result.includes(pattern)) {
+        result = result.replaceAll(pattern, "[REDACTED]");
+      }
+    }
+    return result;
+  };
+}
+
+describe("buildSanitizedEnv", () => {
+  it("only includes allowlisted env vars from host", () => {
+    const result = buildSanitizedEnv(
+      {
+        PATH: "/usr/bin",
+        HOME: "/home/user",
+        OPENAI_API_KEY: "sk-secret-12345",
+        AWS_SECRET_ACCESS_KEY: "aws-secret-key",
+        RANDOM_ENV: "should-not-appear",
+      },
+      {},
+    );
+
+    expect(result.PATH).toBe("/usr/bin");
+    expect(result.HOME).toBe("/home/user");
+    expect(result.OPENAI_API_KEY).toBeUndefined();
+    expect(result.AWS_SECRET_ACCESS_KEY).toBeUndefined();
+    expect(result.RANDOM_ENV).toBeUndefined();
+  });
+
+  it("secret bindings override allowlisted vars", () => {
+    const result = buildSanitizedEnv(
+      { PATH: "/usr/bin" },
+      { OPENAI_API_KEY: "sk-resolved-from-vault", AGENT_COMPANY_API_URL: "http://127.0.0.1:9999" },
+    );
+
+    expect(result.PATH).toBe("/usr/bin");
+    expect(result.OPENAI_API_KEY).toBe("sk-resolved-from-vault");
+    expect(result.AGENT_COMPANY_API_URL).toBe("http://127.0.0.1:9999");
+  });
+
+  it("produces empty env when host has no allowlisted vars", () => {
+    const result = buildSanitizedEnv(
+      { DANGEROUS_VAR: "should-not-appear" },
+      {},
+    );
+    expect(Object.keys(result)).toHaveLength(0);
+  });
+});
+
+describe("buildRedactor", () => {
+  it("redacts secret values from log text", () => {
+    const redact = buildRedactor({
+      OPENAI_API_KEY: "sk-test-secret-12345",
+      ANTHROPIC_API_KEY: "sk-ant-secret-67890",
+    });
+
+    const text = "Calling API with key sk-test-secret-12345 and sk-ant-secret-67890";
+    const result = redact(text);
+    expect(result).toBe("Calling API with key [REDACTED] and [REDACTED]");
+  });
+
+  it("does not redact short values or system vars", () => {
+    const redact = buildRedactor({
+      PATH: "/usr/local/bin:/usr/bin",
+      HOME: "/Users/testuser",
+      SHORT: "abc",
+    });
+
+    const text = "PATH=/usr/local/bin:/usr/bin HOME=/Users/testuser SHORT=abc";
+    expect(redact(text)).toBe(text);
+  });
+
+  it("handles multiple occurrences of the same secret", () => {
+    const redact = buildRedactor({
+      TOKEN: "my-secret-token-value",
+    });
+
+    const text = "Token: my-secret-token-value and again: my-secret-token-value";
+    expect(redact(text)).toBe("Token: [REDACTED] and again: [REDACTED]");
+  });
+
+  it("returns identity function when no secrets present", () => {
+    const redact = buildRedactor({});
+    const text = "No secrets here";
+    expect(redact(text)).toBe(text);
+  });
+});
diff --git a/tsconfig.base.json b/tsconfig.base.json
new file mode 100644
index 00000000..25e06d83
--- /dev/null
+++ b/tsconfig.base.json
@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "esModuleInterop": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true
+  }
+}
diff --git a/tsconfig.json b/tsconfig.json
new file mode 100644
index 00000000..28e71a44
--- /dev/null
+++ b/tsconfig.json
@@ -0,0 +1,25 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "useDefineForClassFields": true,
+    "lib": ["ES2023", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "moduleResolution": "Bundler",
+    "allowImportingTsExtensions": false,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "strict": true,
+    "baseUrl": ".",
+    "paths": {
+      "@shared/*": ["src/shared/*"],
+      "@main/*": ["src/main/*"],
+      "@renderer/*": ["src/renderer/*"],
+      "@preload/*": ["src/preload/*"]
+    },
+    "types": ["node"]
+  },
+  "include": ["src", "electron.vite.config.ts", "tests"]
+}
diff --git a/vitest.config.ts b/vitest.config.ts
new file mode 100644
index 00000000..33b2d11c
--- /dev/null
+++ b/vitest.config.ts
@@ -0,0 +1,19 @@
+import { resolve } from "node:path";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      "@shared": resolve("src/shared"),
+      "@main": resolve("src/main"),
+      "@renderer": resolve("src/renderer"),
+      "@preload": resolve("src/preload"),
+    },
+  },
+  test: {
+    environment: "node",
+    include: ["tests/**/*.{spec,test}.ts"],
+    exclude: ["tests/e2e/**"],
+    restoreMocks: true,
+  },
+});