@aspectlylabs/mikka 0.0.134 → 0.0.137

package/cli.js

@@ -4457,7 +4457,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.134",
+  version: "0.0.137",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4517,7 +4517,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "6801dda136789ca969e5efaf57fb8f89ca194c09"
+  gitHead: "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6"
 };
 
 // src/paths.ts
@@ -5677,7 +5677,7 @@ async function registrationLogin(options) {
 
 // src/coordinator/runner.ts
 import { mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync3, rmSync as rmSync9, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname8, join as join12 } from "node:path";
+import { dirname as dirname9, join as join12 } from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 import { z as z30 } from "zod";
 
@@ -6091,7 +6091,7 @@ import {
   rmSync as rmSync5
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join8, resolve as resolve5 } from "node:path";
+import { dirname as dirname7, join as join8, resolve as resolve5 } from "node:path";
 
 // src/ids.ts
 var SAFE_ID = /^[A-Za-z0-9_-]{1,64}$/;
@@ -6512,7 +6512,8 @@ async function worktreeGitWritePaths(repoPath, worktree, runId) {
   const common = resolve5(gitDir, "..", "..");
   const branch = `mikka/run-${assertSafeId("run id", runId)}`;
   const ref = join8(common, "refs", "heads", branch);
-  return [gitDir, join8(common, "objects"), ref, `${ref}.lock`, join8(common, "logs", "refs", "heads", branch)];
+  const logsRef = join8(common, "logs", "refs", "heads", branch);
+  return [gitDir, join8(common, "objects"), dirname7(ref), ref, `${ref}.lock`, dirname7(logsRef), logsRef];
 }
 function safeRealpath(path) {
   try {
@@ -6726,14 +6727,20 @@ exec env NODE_USE_ENV_PROXY=1 ${process.versions.electron ? "ELECTRON_RUN_AS_NOD
     PATH: `${bin}${delimiter}${path}`,
     GH_HOST: "github.com",
     GH_REPO: github.repository,
+    // The agent commits inside the sandbox, where a signing program or agent
+    // configured outside it (gpg, ssh-agent, a signing helper) is unreachable.
     GIT_TERMINAL_PROMPT: "0",
-    GIT_CONFIG_COUNT: "3",
+    GIT_CONFIG_COUNT: "5",
     GIT_CONFIG_KEY_0: "credential.helper",
     GIT_CONFIG_VALUE_0: "",
     GIT_CONFIG_KEY_1: "credential.https://github.com.helper",
     GIT_CONFIG_VALUE_1: `!env NODE_USE_ENV_PROXY=1 ${process.versions.electron ? "ELECTRON_RUN_AS_NODE=1 " : ""}${quote(node)} ${quote(helper)} git ${quote(config)}`,
     GIT_CONFIG_KEY_2: "credential.useHttpPath",
     GIT_CONFIG_VALUE_2: "true",
+    GIT_CONFIG_KEY_3: "commit.gpgSign",
+    GIT_CONFIG_VALUE_3: "false",
+    GIT_CONFIG_KEY_4: "tag.gpgSign",
+    GIT_CONFIG_VALUE_4: "false",
     GIT_AUTHOR_NAME: "Mikka Agent",
     GIT_AUTHOR_EMAIL: "agent@mikka.invalid",
     GIT_COMMITTER_NAME: "Mikka Agent",
@@ -6797,7 +6804,7 @@ import {
   writeFileSync as writeFileSync4
 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname7, join as join11, resolve as resolve7 } from "node:path";
+import { dirname as dirname8, join as join11, resolve as resolve7 } from "node:path";
 
 // src/agents/skill-artifact.ts
 import { createHash as createHash2 } from "node:crypto";
@@ -7100,7 +7107,7 @@ var RunContext = class {
       for (const file of skill.files) {
         const target = resolve7(dir, file.path);
         if (!target.startsWith(`${dir}/`)) continue;
-        mkdirSync8(dirname7(target), { recursive: true });
+        mkdirSync8(dirname8(target), { recursive: true });
         writeFileSync4(target, file.content, "utf8");
       }
     }
@@ -7620,7 +7627,7 @@ sandbox_mode = "read-only"
         env: { ...buildChildEnv(process.env), CODEX_HOME: home.home },
         policy: {
           allowWrite: [dir],
-          denyRead: [...credentialDenyRead("codex"), ...daemonSecrets(dirname8(options.stateDir))],
+          denyRead: [...credentialDenyRead("codex"), ...daemonSecrets(dirname9(options.stateDir))],
           allowDomains: HARNESS_DOMAINS.codex
         },
         pidFile: join12(dir, "private", "codex.pid"),
@@ -9691,7 +9698,7 @@ ${firstMessage}` : firstMessage
 // src/adapters/mock.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { mkdirSync as mkdirSync11, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname9, join as join17, resolve as resolve8 } from "node:path";
+import { dirname as dirname10, join as join17, resolve as resolve8 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 import { execa as execa5 } from "execa";
 
@@ -9842,7 +9849,7 @@ var MockAdapter = class {
             );
           }
           const target = resolve8(options.cwd, line.write.path);
-          mkdirSync11(dirname9(target), { recursive: true });
+          mkdirSync11(dirname10(target), { recursive: true });
           writeFileSync6(target, line.write.content);
         }
         if (line.chunk) yield { type: "chunk", chunk: line.chunk };
@@ -10104,7 +10111,7 @@ import { SandboxManager as SandboxManager2 } from "@anthropic-ai/sandbox-runtime
 import { execFile as execFile3 } from "node:child_process";
 import { readdir as readdir2, realpath, stat } from "node:fs/promises";
 import { homedir as homedir5, platform } from "node:os";
-import { basename as basename2, dirname as dirname10, isAbsolute as isAbsolute5, join as join19, resolve as resolve9 } from "node:path";
+import { basename as basename2, dirname as dirname11, isAbsolute as isAbsolute5, join as join19, resolve as resolve9 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 var run = promisify3(execFile3);
 async function git(cwd, args) {
@@ -10186,7 +10193,7 @@ async function browseFolder(request) {
       isRepo: await exists(join19(full, ".git"))
     });
   }
-  const parent = dirname10(path);
+  const parent = dirname11(path);
   return {
     ok: true,
     path,
@@ -10413,7 +10420,7 @@ function harnessFingerprint(store) {
 import { spawn as spawn4 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import { existsSync as existsSync5, readFileSync as readFileSync10 } from "node:fs";
-import { dirname as dirname11, join as join22, resolve as resolve10 } from "node:path";
+import { dirname as dirname12, join as join22, resolve as resolve10 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { execa as execa9 } from "execa";
 
@@ -10672,7 +10679,7 @@ function containerMounts(policy, gitCommonDir2) {
   if (gitCommonDir2) mounts.set(gitCommonDir2, "ro");
   for (const path of policy.allowWrite) mounts.set(path, "rw");
   for (const path of policy.denyWrite ?? []) if (existsSync5(path)) mounts.set(path, "ro");
-  for (const path of [MCP_SERVER_SCRIPT, join22(dirname11(MCP_SERVER_SCRIPT), "capture-copy.mjs")]) mounts.set(path, "ro");
+  for (const path of [MCP_SERVER_SCRIPT, join22(dirname12(MCP_SERVER_SCRIPT), "capture-copy.mjs")]) mounts.set(path, "ro");
   return [...mounts].flatMap(([path, mode]) => ["-v", `${path}:${path}:${mode}`]);
 }
 function containerArgs(options) {
@@ -10871,7 +10878,7 @@ function createLocalSubscriptionRunner(host) {
 
 // src/sandbox-tools.ts
 import { chmodSync as chmodSync2, existsSync as existsSync6, lstatSync as lstatSync8, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync6, readdirSync as readdirSync6, readlinkSync as readlinkSync2, renameSync as renameSync3, rmSync as rmSync14, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname12, isAbsolute as isAbsolute7, join as join25 } from "node:path";
+import { dirname as dirname13, isAbsolute as isAbsolute7, join as join25 } from "node:path";
 import { execa as execa10 } from "execa";
 
 // src/path-search.ts
@@ -10952,7 +10959,7 @@ function resolveUnpackedBinary(root, command) {
   for (let hops = 0; hops < 10; hops++) {
     if (!lstatSync8(path).isSymbolicLink()) return path;
     const target = readlinkSync2(path);
-    path = isAbsolute7(target) ? join25(root, `.${target}`) : join25(dirname12(path), target);
+    path = isAbsolute7(target) ? join25(root, `.${target}`) : join25(dirname13(path), target);
   }
   throw new Error(`${command} resolves through too many symlinks`);
 }
@@ -13228,7 +13235,7 @@ function fixedCandidateCheck(assignment) {
 // src/repositories.ts
 import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
 import { existsSync as existsSync7, lstatSync as lstatSync9, mkdirSync as mkdirSync16, readdirSync as readdirSync8, realpathSync as realpathSync10, renameSync as renameSync4, rmSync as rmSync18 } from "node:fs";
-import { dirname as dirname13, join as join29, resolve as resolve12 } from "node:path";
+import { dirname as dirname14, join as join29, resolve as resolve12 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 import { execa as execa14 } from "execa";
 import lockfile2 from "proper-lockfile";
@@ -13252,7 +13259,7 @@ var RepositoryCache = class {
     signal?.throwIfAborted();
     const { remoteUrl: remote } = normalizeRepository(remoteUrl, { allowFile: this.allowFile });
     const path = this.pathFor(remote);
-    this.ensureParents(dirname13(path));
+    this.ensureParents(dirname14(path));
     const release = await this.lock(path, signal);
     try {
       return await withRepoConfig(path, () => this.update(path, remote, signal));
@@ -13350,7 +13357,7 @@ import {
   rmSync as rmSync19
 } from "node:fs";
 import { createRequire } from "node:module";
-import { delimiter as delimiter3, dirname as dirname14, join as join30 } from "node:path";
+import { delimiter as delimiter3, dirname as dirname15, join as join30 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { promisify as promisify6 } from "node:util";
 var exec3 = promisify6(execFile6);
@@ -13427,7 +13434,7 @@ async function createHostedBotRunner(host) {
       require2.resolve("@anthropic-ai/claude-agent-sdk")
     );
     claude ??= join30(
-      dirname14(
+      dirname15(
         bundled.resolve(
           "@anthropic-ai/claude-agent-sdk-linux-x64/package.json"
         )
@@ -13718,7 +13725,7 @@ async function createHostedBotRunner(host) {
         const previous = readJson(ledger);
         if (existsSync8(ledger) && (!previous || JSON.stringify(previous.scope) !== JSON.stringify(scope) || typeof previous.sessionId !== "string"))
           throw unavailable3();
-        mkdirSync17(dirname14(ledger), { recursive: true, mode: 448 });
+        mkdirSync17(dirname15(ledger), { recursive: true, mode: 448 });
         const record = async (sessionId) => {
           assertOpen();
           writeJsonAtomic(ledger, { scope, sessionId });
@@ -13822,7 +13829,7 @@ async function createHostedBotRunner(host) {
           `${MCP_SERVER_SCRIPT}:${MCP_SERVER_SCRIPT}:ro`,
           ...githubCli ? ["-v", `${githubCli}:/usr/local/bin/mikka-gh:ro`, "-v", `${GITHUB_CREDENTIAL_SCRIPT}:${GITHUB_CREDENTIAL_SCRIPT}:ro`] : [],
           "-v",
-          `${join30(dirname14(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join30(dirname14(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
+          `${join30(dirname15(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join30(dirname15(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
           "-v",
           `${readyBroker.socket}:/run/mikka-native.sock:ro`,
           ...computerGrant ? [

package/client.js

@@ -3719,7 +3719,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.134",
+  version: "0.0.137",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3779,7 +3779,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "6801dda136789ca969e5efaf57fb8f89ca194c09"
+  gitHead: "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6"
 };
 
 // src/paths.ts

package/http-link.js

@@ -4121,7 +4121,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.134",
+  version: "0.0.137",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4181,7 +4181,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "6801dda136789ca969e5efaf57fb8f89ca194c09"
+  gitHead: "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6"
 };
 
 // src/paths.ts

package/login.js

@@ -3726,7 +3726,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.134",
+  version: "0.0.137",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3786,7 +3786,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "6801dda136789ca969e5efaf57fb8f89ca194c09"
+  gitHead: "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6"
 };
 
 // src/paths.ts

package/main.js

@@ -2024,7 +2024,7 @@ var require_semver2 = __commonJS({
 
 // src/coordinator/runner.ts
 import { mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync8, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname6, join as join9 } from "node:path";
+import { dirname as dirname7, join as join9 } from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 import { z as z26 } from "zod";
 
@@ -2665,7 +2665,7 @@ import {
   rmSync as rmSync4
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join3, resolve as resolve2 } from "node:path";
+import { dirname as dirname3, join as join3, resolve as resolve2 } from "node:path";
 
 // src/ids.ts
 var SAFE_ID = /^[A-Za-z0-9_-]{1,64}$/;
@@ -3086,7 +3086,8 @@ async function worktreeGitWritePaths(repoPath, worktree, runId) {
   const common = resolve2(gitDir, "..", "..");
   const branch = `mikka/run-${assertSafeId("run id", runId)}`;
   const ref = join3(common, "refs", "heads", branch);
-  return [gitDir, join3(common, "objects"), ref, `${ref}.lock`, join3(common, "logs", "refs", "heads", branch)];
+  const logsRef = join3(common, "logs", "refs", "heads", branch);
+  return [gitDir, join3(common, "objects"), dirname3(ref), ref, `${ref}.lock`, dirname3(logsRef), logsRef];
 }
 function safeRealpath(path) {
   try {
@@ -3300,14 +3301,20 @@ exec env NODE_USE_ENV_PROXY=1 ${process.versions.electron ? "ELECTRON_RUN_AS_NOD
     PATH: `${bin}${delimiter}${path}`,
     GH_HOST: "github.com",
     GH_REPO: github.repository,
+    // The agent commits inside the sandbox, where a signing program or agent
+    // configured outside it (gpg, ssh-agent, a signing helper) is unreachable.
     GIT_TERMINAL_PROMPT: "0",
-    GIT_CONFIG_COUNT: "3",
+    GIT_CONFIG_COUNT: "5",
     GIT_CONFIG_KEY_0: "credential.helper",
     GIT_CONFIG_VALUE_0: "",
     GIT_CONFIG_KEY_1: "credential.https://github.com.helper",
     GIT_CONFIG_VALUE_1: `!env NODE_USE_ENV_PROXY=1 ${process.versions.electron ? "ELECTRON_RUN_AS_NODE=1 " : ""}${quote(node)} ${quote(helper)} git ${quote(config)}`,
     GIT_CONFIG_KEY_2: "credential.useHttpPath",
     GIT_CONFIG_VALUE_2: "true",
+    GIT_CONFIG_KEY_3: "commit.gpgSign",
+    GIT_CONFIG_VALUE_3: "false",
+    GIT_CONFIG_KEY_4: "tag.gpgSign",
+    GIT_CONFIG_VALUE_4: "false",
     GIT_AUTHOR_NAME: "Mikka Agent",
     GIT_AUTHOR_EMAIL: "agent@mikka.invalid",
     GIT_COMMITTER_NAME: "Mikka Agent",
@@ -3391,7 +3398,7 @@ import {
   writeFileSync as writeFileSync4
 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname5, join as join8, resolve as resolve5 } from "node:path";
+import { dirname as dirname6, join as join8, resolve as resolve5 } from "node:path";
 
 // ../protocol/src/run.ts
 import { z as z4 } from "zod";
@@ -3773,7 +3780,7 @@ import { join as join5 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.134",
+  version: "0.0.137",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3833,7 +3840,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "6801dda136789ca969e5efaf57fb8f89ca194c09"
+  gitHead: "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6"
 };
 
 // src/paths.ts
@@ -3877,7 +3884,7 @@ function daemonPaths(dataDir) {
 import { lstatSync as lstatSync5, readlinkSync, realpathSync as realpathSync5 } from "node:fs";
 import {
   basename,
-  dirname as dirname3,
+  dirname as dirname4,
   isAbsolute as isAbsolute2,
   join as join6,
   relative as relative2,
@@ -4018,10 +4025,10 @@ function realTarget(path) {
     } catch {
       if (lstatSync5(current, { throwIfNoEntry: false })?.isSymbolicLink()) {
         if (++hops > 40) return path;
-        current = resolve4(dirname3(current), readlinkSync(current));
+        current = resolve4(dirname4(current), readlinkSync(current));
         continue;
       }
-      const parent = dirname3(current);
+      const parent = dirname4(current);
       if (parent === current) return path;
       missing.push(basename(current));
       current = parent;
@@ -5589,9 +5596,9 @@ import {
   renameSync,
   writeSync
 } from "node:fs";
-import { dirname as dirname4 } from "node:path";
+import { dirname as dirname5 } from "node:path";
 function writeFileAtomic(file, data, mode = 384) {
-  mkdirSync5(dirname4(file), { recursive: true });
+  mkdirSync5(dirname5(file), { recursive: true });
   const tmp = `${file}.${process.pid}.tmp`;
   const fd = openSync(tmp, "w", mode);
   try {
@@ -5887,7 +5894,7 @@ var RunContext = class {
       for (const file of skill.files) {
         const target = resolve5(dir, file.path);
         if (!target.startsWith(`${dir}/`)) continue;
-        mkdirSync7(dirname5(target), { recursive: true });
+        mkdirSync7(dirname6(target), { recursive: true });
         writeFileSync4(target, file.content, "utf8");
       }
     }
@@ -6407,7 +6414,7 @@ sandbox_mode = "read-only"
         env: { ...buildChildEnv(process.env), CODEX_HOME: home.home },
         policy: {
           allowWrite: [dir],
-          denyRead: [...credentialDenyRead("codex"), ...daemonSecrets(dirname6(options.stateDir))],
+          denyRead: [...credentialDenyRead("codex"), ...daemonSecrets(dirname7(options.stateDir))],
           allowDomains: HARNESS_DOMAINS.codex
         },
         pidFile: join9(dir, "private", "codex.pid"),
@@ -8513,7 +8520,7 @@ ${firstMessage}` : firstMessage
 // src/adapters/mock.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { mkdirSync as mkdirSync10, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname7, join as join14, resolve as resolve6 } from "node:path";
+import { dirname as dirname8, join as join14, resolve as resolve6 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 import { execa as execa5 } from "execa";
 
@@ -8664,7 +8671,7 @@ var MockAdapter = class {
             );
           }
           const target = resolve6(options.cwd, line.write.path);
-          mkdirSync10(dirname7(target), { recursive: true });
+          mkdirSync10(dirname8(target), { recursive: true });
           writeFileSync6(target, line.write.content);
         }
         if (line.chunk) yield { type: "chunk", chunk: line.chunk };
@@ -8926,7 +8933,7 @@ import { SandboxManager as SandboxManager2 } from "@anthropic-ai/sandbox-runtime
 import { execFile } from "node:child_process";
 import { readdir as readdir2, realpath, stat } from "node:fs/promises";
 import { homedir as homedir3, platform } from "node:os";
-import { basename as basename2, dirname as dirname8, isAbsolute as isAbsolute5, join as join16, resolve as resolve7 } from "node:path";
+import { basename as basename2, dirname as dirname9, isAbsolute as isAbsolute5, join as join16, resolve as resolve7 } from "node:path";
 import { promisify } from "node:util";
 var run = promisify(execFile);
 async function git(cwd, args) {
@@ -9008,7 +9015,7 @@ async function browseFolder(request) {
       isRepo: await exists(join16(full, ".git"))
     });
   }
-  const parent = dirname8(path);
+  const parent = dirname9(path);
   return {
     ok: true,
     path,
@@ -9036,7 +9043,7 @@ async function verifyExpectedOrigin(path, expected) {
 import { execFile as execFile2 } from "node:child_process";
 import { realpathSync as realpathSync9 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname9, join as join17, resolve as resolve8 } from "node:path";
+import { dirname as dirname10, join as join17, resolve as resolve8 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 var exec = promisify2(execFile2);
 var DAY = 24 * 60 * 60 * 1e3;
@@ -9048,12 +9055,12 @@ function newerStableVersion(candidate, current) {
   return false;
 }
 async function runServiceNpm(args) {
-  const npm = realpathSync9(join17(dirname9(process.execPath), "npm"));
+  const npm = realpathSync9(join17(dirname10(process.execPath), "npm"));
   const { stdout } = await exec(process.execPath, [npm, ...args], {
     cwd: homedir4(),
     timeout: 3e5,
     maxBuffer: 1024 * 1024,
-    env: { ...process.env, PATH: `${dirname9(process.execPath)}:${process.env.PATH ?? ""}` }
+    env: { ...process.env, PATH: `${dirname10(process.execPath)}:${process.env.PATH ?? ""}` }
   });
   return stdout.trim();
 }
@@ -9070,7 +9077,7 @@ import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
 import { mkdir, writeFile, rm } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname10, join as join18, resolve as resolve9 } from "node:path";
+import { dirname as dirname11, join as join18, resolve as resolve9 } from "node:path";
 var exec2 = promisify3(execFile3);
 var label = "com.aspectlylabs.mikka.daemon";
 async function restartService(update, beforeRestart, dependencies = {
@@ -9323,7 +9330,7 @@ function harnessFingerprint(store) {
 import { spawn as spawn4 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import { existsSync as existsSync5, readFileSync as readFileSync9 } from "node:fs";
-import { dirname as dirname11, join as join21, resolve as resolve10 } from "node:path";
+import { dirname as dirname12, join as join21, resolve as resolve10 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { execa as execa9 } from "execa";
 
@@ -9582,7 +9589,7 @@ function containerMounts(policy, gitCommonDir2) {
   if (gitCommonDir2) mounts.set(gitCommonDir2, "ro");
   for (const path of policy.allowWrite) mounts.set(path, "rw");
   for (const path of policy.denyWrite ?? []) if (existsSync5(path)) mounts.set(path, "ro");
-  for (const path of [MCP_SERVER_SCRIPT, join21(dirname11(MCP_SERVER_SCRIPT), "capture-copy.mjs")]) mounts.set(path, "ro");
+  for (const path of [MCP_SERVER_SCRIPT, join21(dirname12(MCP_SERVER_SCRIPT), "capture-copy.mjs")]) mounts.set(path, "ro");
   return [...mounts].flatMap(([path, mode]) => ["-v", `${path}:${path}:${mode}`]);
 }
 function containerArgs(options) {
@@ -9781,7 +9788,7 @@ function createLocalSubscriptionRunner(host) {
 
 // src/sandbox-tools.ts
 import { chmodSync as chmodSync2, existsSync as existsSync6, lstatSync as lstatSync8, mkdirSync as mkdirSync13, mkdtempSync as mkdtempSync6, readdirSync as readdirSync6, readlinkSync as readlinkSync2, renameSync as renameSync3, rmSync as rmSync13, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname12, isAbsolute as isAbsolute7, join as join24 } from "node:path";
+import { dirname as dirname13, isAbsolute as isAbsolute7, join as join24 } from "node:path";
 import { execa as execa10 } from "execa";
 
 // src/path-search.ts
@@ -9862,7 +9869,7 @@ function resolveUnpackedBinary(root, command) {
   for (let hops = 0; hops < 10; hops++) {
     if (!lstatSync8(path).isSymbolicLink()) return path;
     const target = readlinkSync2(path);
-    path = isAbsolute7(target) ? join24(root, `.${target}`) : join24(dirname12(path), target);
+    path = isAbsolute7(target) ? join24(root, `.${target}`) : join24(dirname13(path), target);
   }
   throw new Error(`${command} resolves through too many symlinks`);
 }
@@ -12303,7 +12310,7 @@ var SessionRejectedError = class extends DaemonError {
 // src/repositories.ts
 import { createHash as createHash7, randomUUID as randomUUID6 } from "node:crypto";
 import { existsSync as existsSync7, lstatSync as lstatSync9, mkdirSync as mkdirSync16, readdirSync as readdirSync8, realpathSync as realpathSync10, renameSync as renameSync4, rmSync as rmSync18 } from "node:fs";
-import { dirname as dirname13, join as join29, resolve as resolve12 } from "node:path";
+import { dirname as dirname14, join as join29, resolve as resolve12 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 import { execa as execa14 } from "execa";
 import lockfile2 from "proper-lockfile";
@@ -12327,7 +12334,7 @@ var RepositoryCache = class {
     signal?.throwIfAborted();
     const { remoteUrl: remote } = normalizeRepository(remoteUrl, { allowFile: this.allowFile });
     const path = this.pathFor(remote);
-    this.ensureParents(dirname13(path));
+    this.ensureParents(dirname14(path));
     const release = await this.lock(path, signal);
     try {
       return await withRepoConfig(path, () => this.update(path, remote, signal));
@@ -12425,7 +12432,7 @@ import {
   rmSync as rmSync19
 } from "node:fs";
 import { createRequire } from "node:module";
-import { delimiter as delimiter3, dirname as dirname14, join as join30 } from "node:path";
+import { delimiter as delimiter3, dirname as dirname15, join as join30 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { promisify as promisify6 } from "node:util";
 var exec3 = promisify6(execFile6);
@@ -12502,7 +12509,7 @@ async function createHostedBotRunner(host) {
       require2.resolve("@anthropic-ai/claude-agent-sdk")
     );
     claude ??= join30(
-      dirname14(
+      dirname15(
         bundled.resolve(
           "@anthropic-ai/claude-agent-sdk-linux-x64/package.json"
         )
@@ -12793,7 +12800,7 @@ async function createHostedBotRunner(host) {
         const previous = readJson(ledger);
         if (existsSync8(ledger) && (!previous || JSON.stringify(previous.scope) !== JSON.stringify(scope) || typeof previous.sessionId !== "string"))
           throw unavailable3();
-        mkdirSync17(dirname14(ledger), { recursive: true, mode: 448 });
+        mkdirSync17(dirname15(ledger), { recursive: true, mode: 448 });
         const record = async (sessionId) => {
           assertOpen();
           writeJsonAtomic(ledger, { scope, sessionId });
@@ -12897,7 +12904,7 @@ async function createHostedBotRunner(host) {
           `${MCP_SERVER_SCRIPT}:${MCP_SERVER_SCRIPT}:ro`,
           ...githubCli ? ["-v", `${githubCli}:/usr/local/bin/mikka-gh:ro`, "-v", `${GITHUB_CREDENTIAL_SCRIPT}:${GITHUB_CREDENTIAL_SCRIPT}:ro`] : [],
           "-v",
-          `${join30(dirname14(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join30(dirname14(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
+          `${join30(dirname15(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join30(dirname15(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
           "-v",
           `${readyBroker.socket}:/run/mikka-native.sock:ro`,
           ...computerGrant ? [

package/mikka-release-manifest.json

@@ -1,11 +1,11 @@
 {
   "version": 1,
-  "sourceSha": "6801dda136789ca969e5efaf57fb8f89ca194c09",
+  "sourceSha": "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6",
   "repository": "alexj11324/Mikka",
-  "buildRunId": "41272628095",
+  "buildRunId": "41273318229",
   "buildKind": "github-actions-main",
   "sourceLockSha256": "c99f1e4f641d8e004cfe807653478e10f91e53fcf47102add5f4c154cdc1cb57",
-  "createdAt": "2026-11-01T04:32:26.681Z",
+  "createdAt": "2026-11-01T04:42:18.233Z",
   "sbom": "sbom.cdx.json",
   "files": [
     {
@@ -40,13 +40,13 @@
     },
     {
       "path": "cli.js",
-      "size": 634339,
-      "sha256": "ede1931a6fef0739895581463c61b83794f89c9c8e688948fa9315e004cefe4f"
+      "size": 634724,
+      "sha256": "0f90daa50f571daafb4ac8d5d6e57ecff8ac481be7dedfa158fe6f31a0bb43e7"
     },
     {
       "path": "client.js",
       "size": 139865,
-      "sha256": "89ca5511e7b1b9cc6d9934f14f581389eeab870cf2b4dadcf47fed908f4256ec"
+      "sha256": "4d0e7b8763db3d42380d14e7db123fc21290b80a06612f85f86173e1d7422629"
     },
     {
       "path": "computer/driver.mjs",
@@ -171,7 +171,7 @@
     {
       "path": "http-link.js",
       "size": 181108,
-      "sha256": "22d722fc1daf1ad387d06f368779b214668749cfb40347a5f6f9b20f5db58917"
+      "sha256": "798c9754b2dbcc028ec4c42595ee47c2503ef82fd8ad23ec826eb4b9565d9cc5"
     },
     {
       "path": "log.js",
@@ -181,12 +181,12 @@
     {
       "path": "login.js",
       "size": 144600,
-      "sha256": "1bc118a613ffe194ad7b3e0272beff5d89a6d4bff8feae8388f375480e5ce601"
+      "sha256": "e122a2a3686942abbbe36d785985e0f8ddde07cbc86a279f9761f0dd90c6bab1"
     },
     {
       "path": "main.js",
-      "size": 579964,
-      "sha256": "67979b1e57ee491e441e6f8357cf3103a247e3cca456d0c797a54f14ee02caee"
+      "size": 580350,
+      "sha256": "e17154083cd17b156ab56f4d6ab256d2d95ec325e8ee7ee37255740251f7cc04"
     },
     {
       "path": "mikka-mcp.mjs",
@@ -195,23 +195,23 @@
     },
     {
       "path": "mikka.js",
-      "size": 634355,
-      "sha256": "426940e19fa90830a811335718110b06d8220215dbd2129af0c686c9cfce6144"
+      "size": 634740,
+      "sha256": "905ecad76b53df54f4268237445fa0da27e1fdc6ad1d033e360d3111f9ac6436"
     },
     {
       "path": "npm-shrinkwrap.json",
       "size": 78117,
-      "sha256": "2ac3373dc6f77c61596d203399d087855910d09da26b6ce20988e5d1d30ed2a2"
+      "sha256": "29f0c09c9836b6f53ec21716fb4e662e6e843eb95b587f53239e7d938fc0225a"
     },
     {
       "path": "package.json",
       "size": 1247,
-      "sha256": "b22f89f554d57732b2a5ca4c914da5bc65ea353dbec2a0190a6ec7ca7728be75"
+      "sha256": "57cc6ed74e54fa091fe16b008c4a34440e7d188aae4b752e77a7d2cdab14d342"
     },
     {
       "path": "paths.js",
       "size": 4138,
-      "sha256": "7466f3398cf914e393f52f1f0789b934bf2a351d4021dd6f1a588308465a8820"
+      "sha256": "4dce5b4e25fb8d3f529db5bc4dd20c427b88ef29e8bccc8a6bf35ab445dd9969"
     },
     {
       "path": "sandbox.js",
@@ -221,7 +221,7 @@
     {
       "path": "sbom.cdx.json",
       "size": 144314,
-      "sha256": "72f782956355dbf14a0c961d1c0e891d2112aa21406f29a141b22e7811423251"
+      "sha256": "21aed31e8c01b4a27def6b05a3f3087e6896bc0c5ea01178639e07ae21377894"
     }
   ]
 }

package/mikka.js

@@ -4458,7 +4458,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.134",
+  version: "0.0.137",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4518,7 +4518,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "6801dda136789ca969e5efaf57fb8f89ca194c09"
+  gitHead: "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6"
 };
 
 // src/paths.ts
@@ -5678,7 +5678,7 @@ async function registrationLogin(options) {
 
 // src/coordinator/runner.ts
 import { mkdirSync as mkdirSync9, mkdtempSync as mkdtempSync3, rmSync as rmSync9, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname8, join as join12 } from "node:path";
+import { dirname as dirname9, join as join12 } from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 import { z as z30 } from "zod";
 
@@ -6092,7 +6092,7 @@ import {
   rmSync as rmSync5
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join8, resolve as resolve5 } from "node:path";
+import { dirname as dirname7, join as join8, resolve as resolve5 } from "node:path";
 
 // src/ids.ts
 var SAFE_ID = /^[A-Za-z0-9_-]{1,64}$/;
@@ -6513,7 +6513,8 @@ async function worktreeGitWritePaths(repoPath, worktree, runId) {
   const common = resolve5(gitDir, "..", "..");
   const branch = `mikka/run-${assertSafeId("run id", runId)}`;
   const ref = join8(common, "refs", "heads", branch);
-  return [gitDir, join8(common, "objects"), ref, `${ref}.lock`, join8(common, "logs", "refs", "heads", branch)];
+  const logsRef = join8(common, "logs", "refs", "heads", branch);
+  return [gitDir, join8(common, "objects"), dirname7(ref), ref, `${ref}.lock`, dirname7(logsRef), logsRef];
 }
 function safeRealpath(path) {
   try {
@@ -6727,14 +6728,20 @@ exec env NODE_USE_ENV_PROXY=1 ${process.versions.electron ? "ELECTRON_RUN_AS_NOD
     PATH: `${bin}${delimiter}${path}`,
     GH_HOST: "github.com",
     GH_REPO: github.repository,
+    // The agent commits inside the sandbox, where a signing program or agent
+    // configured outside it (gpg, ssh-agent, a signing helper) is unreachable.
     GIT_TERMINAL_PROMPT: "0",
-    GIT_CONFIG_COUNT: "3",
+    GIT_CONFIG_COUNT: "5",
     GIT_CONFIG_KEY_0: "credential.helper",
     GIT_CONFIG_VALUE_0: "",
     GIT_CONFIG_KEY_1: "credential.https://github.com.helper",
     GIT_CONFIG_VALUE_1: `!env NODE_USE_ENV_PROXY=1 ${process.versions.electron ? "ELECTRON_RUN_AS_NODE=1 " : ""}${quote(node)} ${quote(helper)} git ${quote(config)}`,
     GIT_CONFIG_KEY_2: "credential.useHttpPath",
     GIT_CONFIG_VALUE_2: "true",
+    GIT_CONFIG_KEY_3: "commit.gpgSign",
+    GIT_CONFIG_VALUE_3: "false",
+    GIT_CONFIG_KEY_4: "tag.gpgSign",
+    GIT_CONFIG_VALUE_4: "false",
     GIT_AUTHOR_NAME: "Mikka Agent",
     GIT_AUTHOR_EMAIL: "agent@mikka.invalid",
     GIT_COMMITTER_NAME: "Mikka Agent",
@@ -6798,7 +6805,7 @@ import {
   writeFileSync as writeFileSync4
 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname7, join as join11, resolve as resolve7 } from "node:path";
+import { dirname as dirname8, join as join11, resolve as resolve7 } from "node:path";
 
 // src/agents/skill-artifact.ts
 import { createHash as createHash2 } from "node:crypto";
@@ -7101,7 +7108,7 @@ var RunContext = class {
       for (const file of skill.files) {
         const target = resolve7(dir, file.path);
         if (!target.startsWith(`${dir}/`)) continue;
-        mkdirSync8(dirname7(target), { recursive: true });
+        mkdirSync8(dirname8(target), { recursive: true });
         writeFileSync4(target, file.content, "utf8");
       }
     }
@@ -7621,7 +7628,7 @@ sandbox_mode = "read-only"
         env: { ...buildChildEnv(process.env), CODEX_HOME: home.home },
         policy: {
           allowWrite: [dir],
-          denyRead: [...credentialDenyRead("codex"), ...daemonSecrets(dirname8(options.stateDir))],
+          denyRead: [...credentialDenyRead("codex"), ...daemonSecrets(dirname9(options.stateDir))],
           allowDomains: HARNESS_DOMAINS.codex
         },
         pidFile: join12(dir, "private", "codex.pid"),
@@ -9692,7 +9699,7 @@ ${firstMessage}` : firstMessage
 // src/adapters/mock.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { mkdirSync as mkdirSync11, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname9, join as join17, resolve as resolve8 } from "node:path";
+import { dirname as dirname10, join as join17, resolve as resolve8 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 import { execa as execa5 } from "execa";
 
@@ -9843,7 +9850,7 @@ var MockAdapter = class {
             );
           }
           const target = resolve8(options.cwd, line.write.path);
-          mkdirSync11(dirname9(target), { recursive: true });
+          mkdirSync11(dirname10(target), { recursive: true });
           writeFileSync6(target, line.write.content);
         }
         if (line.chunk) yield { type: "chunk", chunk: line.chunk };
@@ -10105,7 +10112,7 @@ import { SandboxManager as SandboxManager2 } from "@anthropic-ai/sandbox-runtime
 import { execFile as execFile3 } from "node:child_process";
 import { readdir as readdir2, realpath, stat } from "node:fs/promises";
 import { homedir as homedir5, platform } from "node:os";
-import { basename as basename2, dirname as dirname10, isAbsolute as isAbsolute5, join as join19, resolve as resolve9 } from "node:path";
+import { basename as basename2, dirname as dirname11, isAbsolute as isAbsolute5, join as join19, resolve as resolve9 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 var run = promisify3(execFile3);
 async function git(cwd, args) {
@@ -10187,7 +10194,7 @@ async function browseFolder(request) {
       isRepo: await exists(join19(full, ".git"))
     });
   }
-  const parent = dirname10(path);
+  const parent = dirname11(path);
   return {
     ok: true,
     path,
@@ -10414,7 +10421,7 @@ function harnessFingerprint(store) {
 import { spawn as spawn4 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import { existsSync as existsSync5, readFileSync as readFileSync10 } from "node:fs";
-import { dirname as dirname11, join as join22, resolve as resolve10 } from "node:path";
+import { dirname as dirname12, join as join22, resolve as resolve10 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { execa as execa9 } from "execa";
 
@@ -10673,7 +10680,7 @@ function containerMounts(policy, gitCommonDir2) {
   if (gitCommonDir2) mounts.set(gitCommonDir2, "ro");
   for (const path of policy.allowWrite) mounts.set(path, "rw");
   for (const path of policy.denyWrite ?? []) if (existsSync5(path)) mounts.set(path, "ro");
-  for (const path of [MCP_SERVER_SCRIPT, join22(dirname11(MCP_SERVER_SCRIPT), "capture-copy.mjs")]) mounts.set(path, "ro");
+  for (const path of [MCP_SERVER_SCRIPT, join22(dirname12(MCP_SERVER_SCRIPT), "capture-copy.mjs")]) mounts.set(path, "ro");
   return [...mounts].flatMap(([path, mode]) => ["-v", `${path}:${path}:${mode}`]);
 }
 function containerArgs(options) {
@@ -10872,7 +10879,7 @@ function createLocalSubscriptionRunner(host) {
 
 // src/sandbox-tools.ts
 import { chmodSync as chmodSync2, existsSync as existsSync6, lstatSync as lstatSync8, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync6, readdirSync as readdirSync6, readlinkSync as readlinkSync2, renameSync as renameSync3, rmSync as rmSync14, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname12, isAbsolute as isAbsolute7, join as join25 } from "node:path";
+import { dirname as dirname13, isAbsolute as isAbsolute7, join as join25 } from "node:path";
 import { execa as execa10 } from "execa";
 
 // src/path-search.ts
@@ -10953,7 +10960,7 @@ function resolveUnpackedBinary(root, command) {
   for (let hops = 0; hops < 10; hops++) {
     if (!lstatSync8(path).isSymbolicLink()) return path;
     const target = readlinkSync2(path);
-    path = isAbsolute7(target) ? join25(root, `.${target}`) : join25(dirname12(path), target);
+    path = isAbsolute7(target) ? join25(root, `.${target}`) : join25(dirname13(path), target);
   }
   throw new Error(`${command} resolves through too many symlinks`);
 }
@@ -13229,7 +13236,7 @@ function fixedCandidateCheck(assignment) {
 // src/repositories.ts
 import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
 import { existsSync as existsSync7, lstatSync as lstatSync9, mkdirSync as mkdirSync16, readdirSync as readdirSync8, realpathSync as realpathSync10, renameSync as renameSync4, rmSync as rmSync18 } from "node:fs";
-import { dirname as dirname13, join as join29, resolve as resolve12 } from "node:path";
+import { dirname as dirname14, join as join29, resolve as resolve12 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 import { execa as execa14 } from "execa";
 import lockfile2 from "proper-lockfile";
@@ -13253,7 +13260,7 @@ var RepositoryCache = class {
     signal?.throwIfAborted();
     const { remoteUrl: remote } = normalizeRepository(remoteUrl, { allowFile: this.allowFile });
     const path = this.pathFor(remote);
-    this.ensureParents(dirname13(path));
+    this.ensureParents(dirname14(path));
     const release = await this.lock(path, signal);
     try {
       return await withRepoConfig(path, () => this.update(path, remote, signal));
@@ -13351,7 +13358,7 @@ import {
   rmSync as rmSync19
 } from "node:fs";
 import { createRequire } from "node:module";
-import { delimiter as delimiter3, dirname as dirname14, join as join30 } from "node:path";
+import { delimiter as delimiter3, dirname as dirname15, join as join30 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { promisify as promisify6 } from "node:util";
 var exec3 = promisify6(execFile6);
@@ -13428,7 +13435,7 @@ async function createHostedBotRunner(host) {
       require2.resolve("@anthropic-ai/claude-agent-sdk")
     );
     claude ??= join30(
-      dirname14(
+      dirname15(
         bundled.resolve(
           "@anthropic-ai/claude-agent-sdk-linux-x64/package.json"
         )
@@ -13719,7 +13726,7 @@ async function createHostedBotRunner(host) {
         const previous = readJson(ledger);
         if (existsSync8(ledger) && (!previous || JSON.stringify(previous.scope) !== JSON.stringify(scope) || typeof previous.sessionId !== "string"))
           throw unavailable3();
-        mkdirSync17(dirname14(ledger), { recursive: true, mode: 448 });
+        mkdirSync17(dirname15(ledger), { recursive: true, mode: 448 });
         const record = async (sessionId) => {
           assertOpen();
           writeJsonAtomic(ledger, { scope, sessionId });
@@ -13823,7 +13830,7 @@ async function createHostedBotRunner(host) {
           `${MCP_SERVER_SCRIPT}:${MCP_SERVER_SCRIPT}:ro`,
           ...githubCli ? ["-v", `${githubCli}:/usr/local/bin/mikka-gh:ro`, "-v", `${GITHUB_CREDENTIAL_SCRIPT}:${GITHUB_CREDENTIAL_SCRIPT}:ro`] : [],
           "-v",
-          `${join30(dirname14(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join30(dirname14(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
+          `${join30(dirname15(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join30(dirname15(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
           "-v",
           `${readyBroker.socket}:/run/mikka-native.sock:ro`,
           ...computerGrant ? [

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.134",
+  "version": "0.0.137",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@aspectlylabs/mikka",
-      "version": "0.0.134",
+      "version": "0.0.137",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@agentclientprotocol/sdk": "1.9.0",

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.134",
+  "version": "0.0.137",
   "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-  "gitHead": "6801dda136789ca969e5efaf57fb8f89ca194c09",
+  "gitHead": "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6",
   "type": "module",
   "private": false,
   "license": "AGPL-3.0-only",

package/paths.js

@@ -6,7 +6,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.134",
+  version: "0.0.137",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -66,7 +66,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "6801dda136789ca969e5efaf57fb8f89ca194c09"
+  gitHead: "686bcc2d8211e09c9ef0ff941fa58bc7fb1eefe6"
 };
 
 // src/paths.ts

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:56d62fc0-4793-4fcd-80d3-16853540ba71",
+  "serialNumber": "urn:uuid:0263a7a3-87ac-42e7-9814-6ac65813ffb7",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-11-01T04:32:25.754Z",
+    "timestamp": "2026-11-01T04:42:17.485Z",
     "lifecycles": [
       {
         "phase": "pre-build"
@@ -19,13 +19,13 @@
       }
     ],
     "component": {
-      "bom-ref": "@aspectlylabs/mikka@0.0.134",
+      "bom-ref": "@aspectlylabs/mikka@0.0.137",
       "type": "library",
-      "name": ".retained-build-ayyqrk",
-      "version": "0.0.134",
+      "name": ".retained-build-DRDmmY",
+      "version": "0.0.137",
       "scope": "required",
       "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.134",
+      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.137",
       "properties": [],
       "externalReferences": [
         {
@@ -4627,7 +4627,7 @@
   ],
   "dependencies": [
     {
-      "ref": "@aspectlylabs/mikka@0.0.134",
+      "ref": "@aspectlylabs/mikka@0.0.137",
       "dependsOn": [
         "@agentclientprotocol/sdk@1.9.0",
         "@anthropic-ai/claude-agent-sdk@0.3.305",