@aspectlylabs/mikka 0.0.65 → 0.0.66

package/main.js

@@ -2212,8 +2212,8 @@ var EventQueue = class {
         if (next.type === "exit") return;
         continue;
       }
-      await new Promise((resolve11) => {
-        this.waiter = resolve11;
+      await new Promise((resolve12) => {
+        this.waiter = resolve12;
       });
     }
   }
@@ -2284,13 +2284,13 @@ async function spawnCli(sandbox, argv, options) {
     stderr = (stderr + data).slice(-STDERR_TAIL * 4);
   });
   const exited = new Promise(
-    (resolve11) => {
+    (resolve12) => {
       child.once("error", (error) => {
         stderr += `
 ${error.message}`;
-        resolve11({ code: null, signal: null });
+        resolve12({ code: null, signal: null });
       });
-      child.once("exit", (code, signal) => resolve11({ code, signal }));
+      child.once("exit", (code, signal) => resolve12({ code, signal }));
     }
   ).finally(() => {
     signalGroup(pgid, "SIGKILL");
@@ -2307,8 +2307,8 @@ ${error.message}`;
       let timer;
       await Promise.race([
         exited,
-        new Promise((resolve11) => {
-          timer = setTimeout(resolve11, graceMs);
+        new Promise((resolve12) => {
+          timer = setTimeout(resolve12, graceMs);
         })
       ]);
       clearTimeout(timer);
@@ -2389,11 +2389,11 @@ var JsonlWriter = class extends AbstractMessageWriter {
   }
   stream;
   write(message) {
-    return new Promise((resolve11, reject) => {
+    return new Promise((resolve12, reject) => {
       this.stream.write(
         `${JSON.stringify(message)}
 `,
-        (error) => error ? reject(error) : resolve11()
+        (error) => error ? reject(error) : resolve12()
       );
     });
   }
@@ -3728,7 +3728,7 @@ import { join as join5 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.65",
+  version: "0.0.66",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3787,7 +3787,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "f566198f5cee77ff3a0ba56f6923a0cf0b005b0e"
+  gitHead: "362a5415cfca1dae687f81b235450908b4412153"
 };
 
 // src/paths.ts
@@ -6181,8 +6181,8 @@ async function runCodexCoordinator(input, host) {
   const messages = /* @__PURE__ */ new Map();
   let resolveEnd;
   let rejectEnd;
-  const ended = new Promise((resolve11, reject) => {
-    resolveEnd = resolve11;
+  const ended = new Promise((resolve12, reject) => {
+    resolveEnd = resolve12;
     rejectEnd = reject;
   });
   void ended.catch(() => void 0);
@@ -6363,10 +6363,10 @@ import {
   mkdirSync as mkdirSync16,
   readFileSync as readFileSync11,
   rmSync as rmSync17,
-  realpathSync as realpathSync12
+  realpathSync as realpathSync13
 } from "node:fs";
 import { arch, hostname, platform as platform2 } from "node:os";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/adapters/claude.ts
@@ -6492,8 +6492,8 @@ function spawnRunSandbox(options) {
   let outcome;
   let hardStop;
   let settle;
-  const exited = new Promise((resolve11) => {
-    settle = resolve11;
+  const exited = new Promise((resolve12) => {
+    settle = resolve12;
   });
   function send(message) {
     if (!child.connected || gone) return;
@@ -6766,9 +6766,9 @@ async function createNativeSubscriptionBroker(host) {
     }
   });
   try {
-    await new Promise((resolve11, reject) => {
+    await new Promise((resolve12, reject) => {
       server.once("error", reject);
-      server.listen(socket, resolve11);
+      server.listen(socket, resolve12);
     });
     chmodSync(socket, 384);
   } catch {
@@ -6781,7 +6781,7 @@ async function createNativeSubscriptionBroker(host) {
       halted = true;
       for (const abort of pending) abort.abort();
       server.closeAllConnections();
-      await new Promise((resolve11) => server.close(() => resolve11()));
+      await new Promise((resolve12) => server.close(() => resolve12()));
       rmSync9(dir, { recursive: true, force: true });
     }
   };
@@ -6945,8 +6945,8 @@ var PromptQueue = class {
         continue;
       }
       if (this.closed) return;
-      await new Promise((resolve11) => {
-        this.waiter = resolve11;
+      await new Promise((resolve12) => {
+        this.waiter = resolve12;
       });
     }
   }
@@ -6960,8 +6960,8 @@ async function untilSpoken(spoken) {
   try {
     return await Promise.race([
       spoken,
-      new Promise((resolve11) => {
-        timer = setTimeout(() => resolve11(true), CONTINUE_SILENCE_MS);
+      new Promise((resolve12) => {
+        timer = setTimeout(() => resolve12(true), CONTINUE_SILENCE_MS);
       })
     ]);
   } finally {
@@ -7098,9 +7098,9 @@ var ClaudeAdapter = class {
     let stderr = "";
     const stderrTail = () => stderr.slice(-STDERR_TAIL2).trim() || "no output";
     let spoke = () => void 0;
-    const spoken = new Promise((resolve11) => spoke = resolve11);
+    const spoken = new Promise((resolve12) => spoke = resolve12);
     let finished = () => void 0;
-    const gone = new Promise((resolve11) => finished = resolve11);
+    const gone = new Promise((resolve12) => finished = resolve12);
     if (externalAuth && this.options.onHostedSession) {
       try {
         await this.options.onHostedSession(sessionId);
@@ -8451,7 +8451,7 @@ var MockAdapter = class {
         if (line.hang) {
           if (!abort.signal.aborted) {
             await new Promise(
-              (resolve11) => abort.signal.addEventListener("abort", resolve11, { once: true })
+              (resolve12) => abort.signal.addEventListener("abort", resolve12, { once: true })
             );
           }
           yield { type: "exit", outcome: "cancelled" };
@@ -8815,35 +8815,71 @@ async function verifyExpectedOrigin(path, expected) {
   }
 }
 
-// src/service.ts
+// src/auto-update.ts
 import { execFile as execFile2 } from "node:child_process";
-import { promisify as promisify2 } from "node:util";
-import { mkdir, writeFile, rm } from "node:fs/promises";
+import { realpathSync as realpathSync10 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { dirname as dirname9, join as join17, resolve as resolve8 } from "node:path";
+import { promisify as promisify2 } from "node:util";
 var exec = promisify2(execFile2);
+var DAY = 24 * 60 * 60 * 1e3;
+function newerStableVersion(candidate, current) {
+  const stable = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+  if (typeof candidate !== "string" || !stable.test(candidate) || !stable.test(current)) return false;
+  const a = candidate.split(".").map(BigInt), b = current.split(".").map(BigInt);
+  for (let i = 0; i < 3; i++) if (a[i] !== b[i]) return a[i] > b[i];
+  return false;
+}
+async function runServiceNpm(args) {
+  const npm = realpathSync10(join17(dirname9(process.execPath), "npm"));
+  const { stdout } = await exec(process.execPath, [npm, ...args], {
+    cwd: homedir6(),
+    timeout: 3e5,
+    maxBuffer: 1024 * 1024,
+    env: { ...process.env, PATH: `${dirname9(process.execPath)}:${process.env.PATH ?? ""}` }
+  });
+  return stdout.trim();
+}
+async function checkLatestVersion(file, current, runtime, now = Date.now()) {
+  const state = readJson(file);
+  if (typeof state?.lastAttemptAt === "number" && now - state.lastAttemptAt < DAY) return;
+  writeJsonAtomic(file, { lastAttemptAt: now });
+  const latest = await runtime.latest();
+  return newerStableVersion(latest, current) ? latest : void 0;
+}
+
+// src/service.ts
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
+import { mkdir, writeFile, rm } from "node:fs/promises";
+import { homedir as homedir7 } from "node:os";
+import { dirname as dirname10, join as join18, resolve as resolve9 } from "node:path";
+var exec2 = promisify3(execFile3);
 var label = "com.aspectlylabs.mikka.daemon";
 async function restartService(update, beforeRestart, dependencies = {
   manager: process.env.MIKKA_SERVICE,
   update: async () => {
-    await exec("npm", ["install", "--global", "@aspectlylabs/mikka"], { timeout: 3e5, maxBuffer: 1024 * 1024 });
+    await runServiceNpm(["install", "--global", "--engine-strict", "@aspectlylabs/mikka"]);
   },
   restart: () => {
-    setImmediate(() => process.kill(process.pid, "SIGUSR2"));
+    setImmediate(() => {
+      if (canRestart()) process.kill(process.pid, "SIGUSR2");
+    });
   }
-}) {
+}, canRestart = () => true) {
   const manager = dependencies.manager;
   if (manager !== "systemd" && manager !== "launchd") throw new Error("Daemon is not running as a managed service");
   if (update) await dependencies.update();
+  if (!canRestart()) return;
   beforeRestart();
   dependencies.restart();
 }
 async function uninstallService(clearCredential, dependencies = {
   manager: process.env.MIKKA_SERVICE,
-  home: homedir6(),
+  home: homedir7(),
   uid: process.getuid?.() ?? 0,
   run: async (program, args) => {
-    await exec(program, args, { timeout: 1e4 });
+    await exec2(program, args, { timeout: 1e4 });
   },
   exit: () => {
     process.exit(0);
@@ -8852,10 +8888,10 @@ async function uninstallService(clearCredential, dependencies = {
   try {
     if (dependencies.manager === "systemd") {
       await dependencies.run("systemctl", ["--user", "disable", "mikka-daemon.service"]);
-      await rm(join17(dependencies.home, ".config/systemd/user/mikka-daemon.service"), { force: true });
+      await rm(join18(dependencies.home, ".config/systemd/user/mikka-daemon.service"), { force: true });
       await dependencies.run("systemctl", ["--user", "daemon-reload"]);
     } else if (dependencies.manager === "launchd") {
-      await rm(join17(dependencies.home, "Library/LaunchAgents", `${label}.plist`), { force: true });
+      await rm(join18(dependencies.home, "Library/LaunchAgents", `${label}.plist`), { force: true });
     }
   } finally {
     clearCredential();
@@ -9086,7 +9122,7 @@ async function detectHarnesses() {
 // src/lock.ts
 import { mkdirSync as mkdirSync12, readFileSync as readFileSync9, rmSync as rmSync11 } from "node:fs";
 import { createConnection } from "node:net";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 import lockfile from "proper-lockfile";
 var DaemonAlreadyRunningError = class extends Error {
@@ -9101,7 +9137,7 @@ var LOCK_STALE_MS = 5 * 6e4;
 var LOCK_UPDATE_MS = 3e4;
 var LOCK_TAKEOVER_MS = 6e3;
 function pidFile(dataDir) {
-  return join18(dataDir, "daemon.pid");
+  return join19(dataDir, "daemon.pid");
 }
 function holderPid(dataDir) {
   try {
@@ -9120,11 +9156,11 @@ function processAlive(pid) {
   }
 }
 function socketAnswers(socketPath) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const socket = createConnection(socketPath);
     const done = (alive) => {
       socket.destroy();
-      resolve11(alive);
+      resolve12(alive);
     };
     socket.once("connect", () => done(true));
     socket.once("error", () => done(false));
@@ -9233,7 +9269,7 @@ function closeLogger(logger) {
   const file = files.get(logger);
   if (!file) return Promise.resolve();
   files.delete(logger);
-  return new Promise((resolve11) => file.end(resolve11));
+  return new Promise((resolve12) => file.end(resolve12));
 }
 
 // src/outbox.ts
@@ -9245,7 +9281,7 @@ import {
   rmSync as rmSync12,
   truncateSync
 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 var Outbox = class {
   constructor(dir, link, log, retryMs = 1e3, onUndeliverable = () => void 0, retainResources = false) {
     this.dir = dir;
@@ -9268,10 +9304,10 @@ var Outbox = class {
   /** Runs whose file was checked for a torn tail since this process started. */
   repaired = /* @__PURE__ */ new Set();
   file(runId) {
-    return join19(this.dir, `${assertSafeId("run id", runId)}.jsonl`);
+    return join20(this.dir, `${assertSafeId("run id", runId)}.jsonl`);
   }
   ackFile(runId) {
-    return join19(this.dir, `${assertSafeId("run id", runId)}.ack.json`);
+    return join20(this.dir, `${assertSafeId("run id", runId)}.ack.json`);
   }
   parse(runId) {
     let data;
@@ -9455,16 +9491,16 @@ var Outbox = class {
 };
 
 // src/quota/local-credentials.ts
-import { homedir as homedir7 } from "node:os";
-import { join as join21 } from "node:path";
+import { homedir as homedir8 } from "node:os";
+import { join as join22 } from "node:path";
 
 // src/quota/files.ts
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile4 } from "node:child_process";
 import { constants as constants2 } from "node:fs";
 import { lstat as lstat2, open } from "node:fs/promises";
-import { promisify as promisify3 } from "node:util";
+import { promisify as promisify4 } from "node:util";
 var NOFOLLOW = constants2.O_NOFOLLOW ?? 0;
-var execFileAsync = promisify3(execFile3);
+var execFileAsync = promisify4(execFile4);
 var KEYCHAIN_TIMEOUT_MS = 3e4;
 var MAX_CREDENTIAL_BYTES = 64 * 1024;
 function sanitizeError(error) {
@@ -9490,8 +9526,8 @@ function classifyKeychainError(error) {
 function safeAccount(account) {
   return /^[A-Za-z0-9._-]{1,64}$/.test(account);
 }
-async function readKeychainPassword(service, accounts = [null], exec4 = execFileAsync) {
-  if (process.platform !== "darwin" && exec4 === execFileAsync) {
+async function readKeychainPassword(service, accounts = [null], exec5 = execFileAsync) {
+  if (process.platform !== "darwin" && exec5 === execFileAsync) {
     return { status: "notFound" };
   }
   let denied = false;
@@ -9505,7 +9541,7 @@ async function readKeychainPassword(service, accounts = [null], exec4 = execFile
       "-w"
     ];
     try {
-      const { stdout } = await exec4("/usr/bin/security", args, {
+      const { stdout } = await exec5("/usr/bin/security", args, {
         timeout: KEYCHAIN_TIMEOUT_MS,
         maxBuffer: MAX_CREDENTIAL_BYTES
       });
@@ -9954,12 +9990,12 @@ async function readCodexQuota(options) {
 
 // src/quota/cursor.ts
 import { lstat as lstat3 } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 var ENDPOINT3 = "https://cursor.com/api/usage-summary";
 var ACCESS_TOKEN_KEY = "cursorAuth/accessToken";
 function cursorDatabasePath(platform3, home) {
   if (platform3 === "darwin") {
-    return join20(
+    return join21(
       home,
       "Library",
       "Application Support",
@@ -9970,7 +10006,7 @@ function cursorDatabasePath(platform3, home) {
     );
   }
   if (platform3 === "win32") {
-    return join20(
+    return join21(
       home,
       "AppData",
       "Roaming",
@@ -9980,7 +10016,7 @@ function cursorDatabasePath(platform3, home) {
       "state.vscdb"
     );
   }
-  return join20(home, ".config", "Cursor", "User", "globalStorage", "state.vscdb");
+  return join21(home, ".config", "Cursor", "User", "globalStorage", "state.vscdb");
 }
 var CURSOR_PLANS = {
   pro: "Pro",
@@ -10152,10 +10188,10 @@ async function readCursorQuota(options) {
 // src/quota/local-credentials.ts
 var KEYCHAIN_SERVICE = "Claude Code-credentials";
 function claudeCredentialPath(home) {
-  return join21(home, ".claude", ".credentials.json");
+  return join22(home, ".claude", ".credentials.json");
 }
 function codexAuthPath(home) {
-  return join21(home, ".codex", "auth.json");
+  return join22(home, ".codex", "auth.json");
 }
 function unknown2(vendor, observedAt) {
   return {
@@ -10174,7 +10210,7 @@ var LocalCredentialsSource = class {
   options;
   id = "local_credentials";
   async read(signal) {
-    const home = this.options.home ?? homedir7();
+    const home = this.options.home ?? homedir8();
     const platform3 = this.options.platform ?? process.platform;
     const fetchImpl = this.options.fetch ?? globalThis.fetch;
     const now = this.options.now ?? Date.now;
@@ -10350,9 +10386,9 @@ var RpcServer = class {
     const { socketPath } = this.options;
     rmSync13(socketPath, { force: true });
     const server = createServer2((socket) => this.accept(socket));
-    await new Promise((resolve11, reject) => {
+    await new Promise((resolve12, reject) => {
       server.once("error", reject);
-      server.listen(socketPath, () => resolve11());
+      server.listen(socketPath, () => resolve12());
     });
     chmodSync2(socketPath, 384);
     this.server = server;
@@ -10416,9 +10452,9 @@ var RpcServer = class {
   }
   async close() {
     for (const socket of this.sockets) socket.destroy();
-    await new Promise((resolve11) => {
-      if (!this.server) return resolve11();
-      this.server.close(() => resolve11());
+    await new Promise((resolve12) => {
+      if (!this.server) return resolve12();
+      this.server.close(() => resolve12());
     });
     this.server = null;
     rmSync13(this.options.socketPath, { force: true });
@@ -10644,13 +10680,13 @@ function createRunMasker(secrets) {
 
 // src/runs/supervisor.ts
 import { createHash as createHash4, randomUUID as randomUUID5 } from "node:crypto";
-import { join as join23, resolve as resolve9 } from "node:path";
+import { join as join24, resolve as resolve10 } from "node:path";
 import { execa as execa12 } from "execa";
 
 // src/agents/checkpoint.ts
 import { mkdtempSync as mkdtempSync6, rmSync as rmSync14, writeFileSync as writeFileSync7 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 import { gunzipSync as gunzipSync2, gzipSync as gzipSync2 } from "node:zlib";
 import { execa as execa11 } from "execa";
 var CheckpointRecoveryError = class extends Error {
@@ -10697,8 +10733,8 @@ async function takeCheckpoint(options) {
 }
 async function applyCheckpoint(options) {
   const git2 = await pinnedGit(options.repoPath, options.worktree);
-  const dir = mkdtempSync6(join22(tmpdir2(), "mikka-checkpoint-"));
-  const file = join22(dir, "checkpoint.patch");
+  const dir = mkdtempSync6(join23(tmpdir2(), "mikka-checkpoint-"));
+  const file = join23(dir, "checkpoint.patch");
   try {
     const patch = gunzipSync2(Buffer.from(options.checkpoint.patch, "base64"));
     if (!patch.length && options.checkpoint.files === 0) return true;
@@ -10946,12 +10982,12 @@ var MemoryServer = class {
         this.check();
         let pending = this.pendingCommands(deviceId, skip);
         if (pending.length === 0 && waitSeconds > 0 && !signal?.aborted) {
-          await new Promise((resolve11) => {
-            const timer = setTimeout(resolve11, waitSeconds * 1e3);
-            signal?.addEventListener("abort", () => resolve11(), { once: true });
+          await new Promise((resolve12) => {
+            const timer = setTimeout(resolve12, waitSeconds * 1e3);
+            signal?.addEventListener("abort", () => resolve12(), { once: true });
             this.wakeCommands.push(() => {
               clearTimeout(timer);
-              resolve11();
+              resolve12();
             });
           });
           this.check();
@@ -11359,9 +11395,9 @@ var RunSupervisor = class {
       run2.abort.abort();
     }
     let timer;
-    const grace = new Promise((resolve11) => {
+    const grace = new Promise((resolve12) => {
       timer = setTimeout(
-        resolve11,
+        resolve12,
         this.deps.stopGraceMs ?? DEFAULT_STOP_GRACE_MS
       );
     });
@@ -11553,8 +11589,8 @@ var RunSupervisor = class {
     let timer;
     await Promise.race([
       this.deps.captures.flush(runId),
-      new Promise((resolve11) => {
-        timer = setTimeout(resolve11, 6e4);
+      new Promise((resolve12) => {
+        timer = setTimeout(resolve12, 6e4);
       })
     ]).finally(() => clearTimeout(timer));
   }
@@ -11888,7 +11924,7 @@ var RunSupervisor = class {
       mailbox
     };
     const resuming = entry.sessionId !== null && adapter.capabilities.supportsResume;
-    const inEarlierWorktree = continued !== null || entry.worktree !== null && resolve9(entry.worktree) !== resolve9(this.deps.worktrees.pathFor(runId));
+    const inEarlierWorktree = continued !== null || entry.worktree !== null && resolve10(entry.worktree) !== resolve10(this.deps.worktrees.pathFor(runId));
     const continueSession = !resuming && assignment.resumeSessionId && assignment.continuesRunId && inEarlierWorktree && adapter.capabilities.supportsResume ? {
       sessionId: assignment.resumeSessionId,
       runId: assignment.continuesRunId,
@@ -11935,7 +11971,7 @@ var RunSupervisor = class {
         if (!this.deps.adapterStateDir || assignment.harness === "mock" || !session.sessionId || resuming && session.sessionId !== entry.sessionId || assignment.requireSessionResume && session.sessionId !== assignment.resumeSessionId)
           throw new Error("Skill mount requires the actual original harness session");
         verifySkillAssignment(assignment);
-        const file = join23(
+        const file = join24(
           runPaths(this.deps.adapterStateDir, runId).runDir,
           SKILLS_DIR,
           skillSlug(assignment.skills[0].name),
@@ -12117,10 +12153,10 @@ function trackParts(open2, chunk) {
 }
 var ABORTED = /* @__PURE__ */ Symbol("aborted");
 function abortPromise(signal) {
-  return new Promise((resolve11) => {
-    if (signal.aborted) resolve11(ABORTED);
+  return new Promise((resolve12) => {
+    if (signal.aborted) resolve12(ABORTED);
     else
-      signal.addEventListener("abort", () => resolve11(ABORTED), { once: true });
+      signal.addEventListener("abort", () => resolve12(ABORTED), { once: true });
   });
 }
 function pickAgentReport(agent) {
@@ -12211,8 +12247,8 @@ var SessionRejectedError = class extends DaemonError {
 
 // src/repositories.ts
 import { createHash as createHash5, randomUUID as randomUUID6 } from "node:crypto";
-import { existsSync as existsSync5, lstatSync as lstatSync8, mkdirSync as mkdirSync14, readdirSync as readdirSync5, realpathSync as realpathSync10, renameSync as renameSync2, rmSync as rmSync15 } from "node:fs";
-import { dirname as dirname10, join as join24, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync5, lstatSync as lstatSync8, mkdirSync as mkdirSync14, readdirSync as readdirSync5, realpathSync as realpathSync11, renameSync as renameSync2, rmSync as rmSync15 } from "node:fs";
+import { dirname as dirname11, join as join25, resolve as resolve11 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
 import { execa as execa13 } from "execa";
 import lockfile2 from "proper-lockfile";
@@ -12227,8 +12263,8 @@ var RepositoryCache = class {
   retainResources;
   pathFor(remoteUrl) {
     const { key: key2 } = normalizeRepository(remoteUrl, { allowFile: this.allowFile });
-    const path = resolve10(this.root, "v2", createHash5("sha256").update(key2).digest("hex"));
-    if (!isInside(resolve10(this.root), path) || path === resolve10(this.root)) throw new Error("Invalid repository cache path");
+    const path = resolve11(this.root, "v2", createHash5("sha256").update(key2).digest("hex"));
+    if (!isInside(resolve11(this.root), path) || path === resolve11(this.root)) throw new Error("Invalid repository cache path");
     return path;
   }
   /** Serialize clone/fetch against the same cache, including other processes. */
@@ -12236,7 +12272,7 @@ var RepositoryCache = class {
     signal?.throwIfAborted();
     const { remoteUrl: remote } = normalizeRepository(remoteUrl, { allowFile: this.allowFile });
     const path = this.pathFor(remote);
-    this.ensureParents(dirname10(path));
+    this.ensureParents(dirname11(path));
     const release = await this.lock(path, signal);
     try {
       signal?.throwIfAborted();
@@ -12280,29 +12316,29 @@ var RepositoryCache = class {
   paths() {
     const visit = (path) => {
       if (!existsSync5(path) || lstatSync8(path).isSymbolicLink()) return [];
-      if (existsSync5(join24(path, ".git"))) {
+      if (existsSync5(join25(path, ".git"))) {
         this.assertClone(path);
         return [path];
       }
-      return readdirSync5(path, { withFileTypes: true }).flatMap((entry) => entry.isDirectory() && !entry.name.endsWith(".lock") && !entry.name.includes(".clone-") ? visit(join24(path, entry.name)) : []);
+      return readdirSync5(path, { withFileTypes: true }).flatMap((entry) => entry.isDirectory() && !entry.name.endsWith(".lock") && !entry.name.includes(".clone-") ? visit(join25(path, entry.name)) : []);
     };
-    return visit(resolve10(this.root));
+    return visit(resolve11(this.root));
   }
   ensureParents(path) {
     mkdirSync14(this.root, { recursive: true, mode: 448 });
     if (lstatSync8(this.root).isSymbolicLink()) throw new Error("Repository cache contains a symlink");
-    const root = realpathSync10(this.root);
-    let current = resolve10(this.root);
+    const root = realpathSync11(this.root);
+    let current = resolve11(this.root);
     for (const part of path.slice(current.length + 1).split("/").filter(Boolean)) {
-      current = join24(current, part);
+      current = join25(current, part);
       if (existsSync5(current) && lstatSync8(current).isSymbolicLink()) throw new Error("Repository cache contains a symlink");
       mkdirSync14(current, { recursive: true, mode: 448 });
-      if (!isInside(root, realpathSync10(current))) throw new Error("Repository cache escapes its directory");
+      if (!isInside(root, realpathSync11(current))) throw new Error("Repository cache escapes its directory");
     }
   }
   assertClone(path) {
-    if (lstatSync8(path).isSymbolicLink() || !lstatSync8(join24(path, ".git")).isDirectory() || lstatSync8(join24(path, ".git")).isSymbolicLink()) throw new Error("Repository cache is not a standard clone");
-    if (!isInside(realpathSync10(this.root), realpathSync10(path))) throw new Error("Repository cache escapes its directory");
+    if (lstatSync8(path).isSymbolicLink() || !lstatSync8(join25(path, ".git")).isDirectory() || lstatSync8(join25(path, ".git")).isSymbolicLink()) throw new Error("Repository cache is not a standard clone");
+    if (!isInside(realpathSync11(this.root), realpathSync11(path))) throw new Error("Repository cache escapes its directory");
   }
   async lock(path, signal) {
     const deadline = Date.now() + 12e4;
@@ -12319,7 +12355,7 @@ var RepositoryCache = class {
 };
 
 // src/subscription-hosted-runner.ts
-import { execFile as execFile4, spawn as spawn4 } from "node:child_process";
+import { execFile as execFile5, spawn as spawn4 } from "node:child_process";
 import { randomUUID as randomUUID7 } from "node:crypto";
 import {
   existsSync as existsSync6,
@@ -12327,13 +12363,13 @@ import {
   mkdirSync as mkdirSync15,
   mkdtempSync as mkdtempSync7,
   readdirSync as readdirSync6,
-  realpathSync as realpathSync11,
+  realpathSync as realpathSync12,
   rmSync as rmSync16
 } from "node:fs";
 import { createRequire } from "node:module";
-import { delimiter as delimiter2, dirname as dirname11, join as join26 } from "node:path";
+import { delimiter as delimiter2, dirname as dirname12, join as join27 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { promisify as promisify4 } from "node:util";
+import { promisify as promisify5 } from "node:util";
 
 // src/agents/public-egress.ts
 import { lookup } from "node:dns/promises";
@@ -12341,7 +12377,7 @@ import { chmod, mkdtemp, rm as rm2 } from "node:fs/promises";
 import { createServer as createServer3, request as httpRequest } from "node:http";
 import { connect, isIP as isIP3 } from "node:net";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 
 // ../../lib/search/url-policy.ts
 import { BlockList, isIP as isIP2 } from "node:net";
@@ -12410,9 +12446,9 @@ function endToEndHeaders(input) {
 }
 async function startPublicEgress(options) {
   options.signal.throwIfAborted();
-  const directory = await mkdtemp(join25(tmpdir3(), "mikka-egress-"));
+  const directory = await mkdtemp(join26(tmpdir3(), "mikka-egress-"));
   await chmod(directory, 448);
-  const socketPath = join25(directory, "egress.sock");
+  const socketPath = join26(directory, "egress.sock");
   const lifetime = new AbortController();
   const signal = AbortSignal.any([options.signal, lifetime.signal]);
   const sockets = /* @__PURE__ */ new Set();
@@ -12517,9 +12553,9 @@ async function startPublicEgress(options) {
     if (closing) return closing;
     lifetime.abort();
     for (const socket of sockets) socket.destroy();
-    closing = new Promise((resolve11, reject) => server.close((error) => {
+    closing = new Promise((resolve12, reject) => server.close((error) => {
       options.signal.removeEventListener("abort", onAbort);
-      void rm2(directory, { recursive: true, force: true }).then(() => error && error.code !== "ERR_SERVER_NOT_RUNNING" ? reject(error) : resolve11(), reject);
+      void rm2(directory, { recursive: true, force: true }).then(() => error && error.code !== "ERR_SERVER_NOT_RUNNING" ? reject(error) : resolve12(), reject);
     }));
     return closing;
   };
@@ -12528,11 +12564,11 @@ async function startPublicEgress(options) {
   };
   options.signal.addEventListener("abort", onAbort, { once: true });
   try {
-    await new Promise((resolve11, reject) => {
+    await new Promise((resolve12, reject) => {
       server.once("error", reject);
       server.listen(socketPath, () => {
         server.removeListener("error", reject);
-        resolve11();
+        resolve12();
       });
     });
     await chmod(socketPath, 384);
@@ -12545,7 +12581,7 @@ async function startPublicEgress(options) {
 }
 
 // src/subscription-hosted-runner.ts
-var exec2 = promisify4(execFile4);
+var exec3 = promisify5(execFile5);
 var image = HOSTED_NATIVE_IMAGE;
 var bootstrap = fileURLToPath2(
   new URL("./agents/native-container.mjs", import.meta.url)
@@ -12563,20 +12599,20 @@ async function createHostedBotRunner(host) {
     throw unavailable2();
   if (host.dockerSocket !== void 0 && host.dockerSocket !== "unix:///run/mikka-container/docker.sock") throw unavailable2();
   const bareEnv = { PATH: process.env.PATH, LANG: "C.UTF-8", ...host.dockerSocket ? { DOCKER_HOST: host.dockerSocket } : {} };
-  await exec2("docker", ["image", "inspect", image, "--format", "{{.Id}}"], {
+  await exec3("docker", ["image", "inspect", image, "--format", "{{.Id}}"], {
     env: bareEnv,
     timeout: 1e4
   }).catch(() => {
     throw unavailable2();
   });
-  const resources = join26(host.stateDir, "native-resources");
+  const resources = join27(host.stateDir, "native-resources");
   mkdirSync15(resources, { recursive: true, mode: 448 });
   const removeResource = async (file, record) => {
     if (!/^mikka-native-(?:verify-)?[a-f0-9-]{36}$/.test(record.name) || !/^[a-f0-9-]{36}$/.test(record.nonce))
       throw unavailable2();
     let described;
     try {
-      described = await exec2(
+      described = await exec3(
         "docker",
         [
           "inspect",
@@ -12590,7 +12626,7 @@ async function createHostedBotRunner(host) {
       if (record.state === "created" && /No such (?:container|object)/i.test(
         String(error.stderr)
       )) {
-        if (record.assets?.startsWith(join26(host.stateDir, "native-verify-git-")))
+        if (record.assets?.startsWith(join27(host.stateDir, "native-verify-git-")))
           rmSync16(record.assets, { recursive: true, force: true });
         rmSync16(file, { force: true });
         return;
@@ -12600,14 +12636,14 @@ async function createHostedBotRunner(host) {
     const [id4, labels] = described.stdout.trim().split("|").map((part) => JSON.parse(part));
     if (labels?.["com.mikka.native.resource"] !== record.nonce || record.id && record.id !== id4)
       throw unavailable2();
-    await exec2("docker", ["rm", "-f", id4], { env: bareEnv, timeout: 3e4 });
-    if (record.assets?.startsWith(join26(host.stateDir, "native-verify-git-")))
+    await exec3("docker", ["rm", "-f", id4], { env: bareEnv, timeout: 3e4 });
+    if (record.assets?.startsWith(join27(host.stateDir, "native-verify-git-")))
       rmSync16(record.assets, { recursive: true, force: true });
     rmSync16(file, { force: true });
   };
   for (const name of readdirSync6(resources))
     if (name.endsWith(".json")) {
-      const file = join26(resources, name);
+      const file = join27(resources, name);
       const record = readJson(file);
       if (!record) throw unavailable2();
       await removeResource(file, record);
@@ -12618,8 +12654,8 @@ async function createHostedBotRunner(host) {
     const bundled = createRequire(
       require2.resolve("@anthropic-ai/claude-agent-sdk")
     );
-    claude ??= join26(
-      dirname11(
+    claude ??= join27(
+      dirname12(
         bundled.resolve(
           "@anthropic-ai/claude-agent-sdk-linux-x64/package.json"
         )
@@ -12628,12 +12664,12 @@ async function createHostedBotRunner(host) {
     );
   } catch {
   }
-  const codex = host.binaries?.codex ?? (process.env.PATH ?? "").split(delimiter2).map((dir) => join26(dir, "codex")).find((path) => existsSync6(path));
+  const codex = host.binaries?.codex ?? (process.env.PATH ?? "").split(delimiter2).map((dir) => join27(dir, "codex")).find((path) => existsSync6(path));
   const binaries = { codex, claude_code: claude };
   for (const kind of ["codex", "claude_code"])
     if (binaries[kind]) {
       try {
-        binaries[kind] = realpathSync11(binaries[kind]);
+        binaries[kind] = realpathSync12(binaries[kind]);
         if (!lstatSync9(binaries[kind]).isFile()) delete binaries[kind];
       } catch {
         delete binaries[kind];
@@ -12642,16 +12678,16 @@ async function createHostedBotRunner(host) {
   if (!binaries.codex && !binaries.claude_code) throw unavailable2();
   const command = async (worktree, script, readOnly, timeoutMs, signal) => {
     const name = `mikka-native-verify-${randomUUID7()}`;
-    const file = join26(resources, name + ".json");
+    const file = join27(resources, name + ".json");
     const resource = { name, nonce: randomUUID7(), state: "creating" };
     const timing = { createMs: 0, runMs: 0 };
     let phase = "create";
     let began = performance.now();
-    const gitCopy = mkdtempSync7(join26(host.stateDir, "native-verify-git-"));
+    const gitCopy = mkdtempSync7(join27(host.stateDir, "native-verify-git-"));
     resource.assets = gitCopy;
     try {
-      const cwd = realpathSync11(worktree);
-      await exec2(
+      const cwd = realpathSync12(worktree);
+      await exec3(
         "git",
         [
           "-c",
@@ -12663,7 +12699,7 @@ async function createHostedBotRunner(host) {
           "--no-checkout",
           "--",
           cwd,
-          join26(gitCopy, "repo")
+          join27(gitCopy, "repo")
         ],
         {
           env: {
@@ -12678,10 +12714,10 @@ async function createHostedBotRunner(host) {
           maxBuffer: 1024 * 1024
         }
       );
-      const safeGit = join26(gitCopy, "repo", ".git");
-      const protectedGit = lstatSync9(join26(cwd, ".git")).isFile() ? join26(cwd, ".git") : safeGit;
+      const safeGit = join27(gitCopy, "repo", ".git");
+      const protectedGit = lstatSync9(join27(cwd, ".git")).isFile() ? join27(cwd, ".git") : safeGit;
       writeJsonAtomic(file, resource);
-      const created = await exec2(
+      const created = await exec3(
         "docker",
         [
           "create",
@@ -12739,7 +12775,7 @@ async function createHostedBotRunner(host) {
       timing.createMs = Math.round(performance.now() - began);
       phase = "run";
       began = performance.now();
-      const result = await exec2("docker", ["start", "-a", resource.id], {
+      const result = await exec3("docker", ["start", "-a", resource.id], {
         env: bareEnv,
         timeout: timeoutMs,
         signal,
@@ -12783,7 +12819,7 @@ async function createHostedBotRunner(host) {
         throw unavailable2();
       const name = `mikka-native-${randomUUID7()}`;
       const nonce = randomUUID7();
-      const resourceFile = join26(resources, name + ".json");
+      const resourceFile = join27(resources, name + ".json");
       const resource = { name, nonce, state: "creating" };
       const lifetime = new AbortController();
       let closed = false;
@@ -12856,11 +12892,11 @@ async function createHostedBotRunner(host) {
         };
         const paths = runPaths(host.stateDir, assignment.runId);
         mkdirSync15(paths.runDir, { recursive: true, mode: 448 });
-        const shadow = join26(paths.runDir, "runtime-git");
-        const emptyHome = join26(paths.runDir, "git-bootstrap-home");
+        const shadow = join27(paths.runDir, "runtime-git");
+        const emptyHome = join27(paths.runDir, "git-bootstrap-home");
         mkdirSync15(emptyHome, { recursive: true, mode: 448 });
         if (!existsSync6(shadow))
-          await exec2(
+          await exec3(
             "git",
             [
               "-c",
@@ -12871,7 +12907,7 @@ async function createHostedBotRunner(host) {
               "--no-hardlinks",
               "--no-checkout",
               "--",
-              realpathSync11(options.cwd),
+              realpathSync12(options.cwd),
               shadow
             ],
             {
@@ -12888,9 +12924,9 @@ async function createHostedBotRunner(host) {
             }
           );
         await live();
-        if (!lstatSync9(shadow).isDirectory() || !lstatSync9(join26(shadow, ".git")).isDirectory() || !realpathSync11(shadow).startsWith(realpathSync11(paths.runDir) + "/"))
+        if (!lstatSync9(shadow).isDirectory() || !lstatSync9(join27(shadow, ".git")).isDirectory() || !realpathSync12(shadow).startsWith(realpathSync12(paths.runDir) + "/"))
           throw unavailable2();
-        const ledger = join26(
+        const ledger = join27(
           host.stateDir,
           "native-ledgers",
           assignment.runId + ".json"
@@ -12909,13 +12945,13 @@ async function createHostedBotRunner(host) {
         const previous = readJson(ledger);
         if (existsSync6(ledger) && (!previous || JSON.stringify(previous.scope) !== JSON.stringify(scope) || typeof previous.sessionId !== "string"))
           throw unavailable2();
-        mkdirSync15(dirname11(ledger), { recursive: true, mode: 448 });
+        mkdirSync15(dirname12(ledger), { recursive: true, mode: 448 });
         const record = async (sessionId) => {
           assertOpen();
           writeJsonAtomic(ledger, { scope, sessionId });
         };
         brokerStarting = createNativeSubscriptionBroker({
-          root: join26(host.stateDir, "native-brokers"),
+          root: join27(host.stateDir, "native-brokers"),
           revision,
           check,
           worker: {
@@ -12942,7 +12978,7 @@ async function createHostedBotRunner(host) {
         });
         const readyBroker = await brokerStarting;
         await live();
-        const githubCli = options.github ? (process.env.PATH ?? "").split(delimiter2).map((dir) => join26(dir, "gh")).find((file) => existsSync6(file)) : void 0;
+        const githubCli = options.github ? (process.env.PATH ?? "").split(delimiter2).map((dir) => join27(dir, "gh")).find((file) => existsSync6(file)) : void 0;
         if (options.github && !githubCli) throw new Error("Install GitHub CLI (gh) in the cloud worker image");
         const githubDomains = options.github ? ["github.com", "api.github.com", new URL(options.github.endpoint).host] : [];
         const egressMaximum = runDomains(runPolicy(options.policy), [...options.networkAllow ?? [], ...githubDomains]);
@@ -12957,10 +12993,10 @@ async function createHostedBotRunner(host) {
           await egressStarting;
           await live();
         }
-        const cwd = realpathSync11(options.cwd);
-        const runDir = realpathSync11(paths.runDir);
-        const protectedGit = lstatSync9(join26(cwd, ".git")).isFile() ? join26(cwd, ".git") : join26(shadow, ".git");
-        if (!lstatSync9(runDir).isDirectory() || !runDir.startsWith(realpathSync11(host.stateDir) + "/runs/")) {
+        const cwd = realpathSync12(options.cwd);
+        const runDir = realpathSync12(paths.runDir);
+        const protectedGit = lstatSync9(join27(cwd, ".git")).isFile() ? join27(cwd, ".git") : join27(shadow, ".git");
+        if (!lstatSync9(runDir).isDirectory() || !runDir.startsWith(realpathSync12(host.stateDir) + "/runs/")) {
           await close();
           throw unavailable2();
         }
@@ -13013,7 +13049,7 @@ async function createHostedBotRunner(host) {
           `${MCP_SERVER_SCRIPT}:${MCP_SERVER_SCRIPT}:ro`,
           ...githubCli ? ["-v", `${githubCli}:/usr/local/bin/mikka-gh:ro`, "-v", `${GITHUB_CREDENTIAL_SCRIPT}:${GITHUB_CREDENTIAL_SCRIPT}:ro`] : [],
           "-v",
-          `${join26(dirname11(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join26(dirname11(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
+          `${join27(dirname12(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:${join27(dirname12(MCP_SERVER_SCRIPT), "capture-copy.mjs")}:ro`,
           "-v",
           `${readyBroker.socket}:/run/mikka-native.sock:ro`,
           ...computerGrant ? [
@@ -13039,7 +13075,7 @@ async function createHostedBotRunner(host) {
         await live();
         writeJsonAtomic(resourceFile, resource);
         try {
-          creating = exec2("docker", containerArgs, {
+          creating = exec3("docker", containerArgs, {
             env: bareEnv,
             timeout: 3e4
           }).then((created) => {
@@ -13056,13 +13092,13 @@ async function createHostedBotRunner(host) {
         }
         const spawnHosted = (config) => {
           assertOpen();
-          const home = join26(runDir, "runtime-home");
+          const home = join27(runDir, "runtime-home");
           mkdirSync15(home, { recursive: true, mode: 448 });
           const env = {
             ...config.env,
             HOME: kind === "claude_code" ? config.env.HOME ?? home : home,
-            PATH: `${options.github ? join26(runDir, "github", "bin") + ":" : ""}/usr/local/bin:/usr/bin:/bin`,
-            GIT_DIR: join26(shadow, ".git"),
+            PATH: `${options.github ? join27(runDir, "github", "bin") + ":" : ""}/usr/local/bin:/usr/bin:/bin`,
+            GIT_DIR: join27(shadow, ".git"),
             GIT_WORK_TREE: cwd,
             GIT_CONFIG_GLOBAL: "/dev/null",
             GIT_CONFIG_SYSTEM: "/dev/null",
@@ -13081,7 +13117,7 @@ async function createHostedBotRunner(host) {
             signal: AbortSignal.any([lifetime.signal, ...config.signal ? [config.signal] : []])
           });
           child.stdin.write(
-            JSON.stringify({ kind, args: config.args, cwd, env: task.env, publicEgress: Boolean(egress), ...options.github ? { githubBin: join26(runDir, "github", "bin") } : {} }) + "\n"
+            JSON.stringify({ kind, args: config.args, cwd, env: task.env, publicEgress: Boolean(egress), ...options.github ? { githubBin: join27(runDir, "github", "bin") } : {} }) + "\n"
           );
           return child;
         };
@@ -13095,9 +13131,9 @@ async function createHostedBotRunner(host) {
             signal: new AbortController().signal
           });
           child.stderr?.resume();
-          const exited = new Promise((resolve11) => {
-            child.once("exit", (code, signal) => resolve11({ code, signal }));
-            child.once("error", () => resolve11({ code: null, signal: null }));
+          const exited = new Promise((resolve12) => {
+            child.once("exit", (code, signal) => resolve12({ code, signal }));
+            child.once("error", () => resolve12({ code: null, signal: null }));
           });
           return {
             process: child,
@@ -13221,19 +13257,19 @@ import { createServer as createServer4 } from "node:net";
 
 // src/computer/driver.mjs
 import { spawn as spawn5 } from "node:child_process";
-import { execFile as execFile5 } from "node:child_process";
-import { promisify as promisify5 } from "node:util";
+import { execFile as execFile6 } from "node:child_process";
+import { promisify as promisify6 } from "node:util";
 import { createHash as createHash6 } from "node:crypto";
 import { readFile as readFile2, realpath as realpath2 } from "node:fs/promises";
 import { createInterface } from "node:readline";
-var exec3 = promisify5(execFile5);
+var exec4 = promisify6(execFile6);
 async function detectComputerDriver(binary = "cua-driver") {
   try {
-    const { stdout: located } = await exec3("which", [binary], {
+    const { stdout: located } = await exec4("which", [binary], {
       timeout: 5e3
     });
     const path = await realpath2(located.trim());
-    const { stdout } = await exec3(path, ["--version"], { timeout: 5e3 });
+    const { stdout } = await exec4(path, ["--version"], { timeout: 5e3 });
     const version = stdout.trim().split("\n")[0];
     if (!/^cua-driver\s+0\.38\.0\b/.test(version)) return null;
     return {
@@ -13357,9 +13393,9 @@ async function executeDriver(driver, input, display, leaseGuard, assertLive = ()
       )
     )
   );
-  const request = (method, params) => new Promise((resolve11, reject) => {
+  const request = (method, params) => new Promise((resolve12, reject) => {
     const n = ++id4;
-    pending.set(n, { resolve: resolve11, reject });
+    pending.set(n, { resolve: resolve12, reject });
     child.stdin.write(
       JSON.stringify({ jsonrpc: "2.0", id: n, method, params }) + "\n"
     );
@@ -13460,10 +13496,10 @@ var ComputerBroker = class {
         })();
       });
     });
-    await new Promise((resolve11, reject) => {
+    await new Promise((resolve12, reject) => {
       this.server.once("error", reject);
-      if (this.transport === "tcp") this.server.listen({ host: "127.0.0.1", port: 0 }, resolve11);
-      else this.server.listen(this.socketPath, resolve11);
+      if (this.transport === "tcp") this.server.listen({ host: "127.0.0.1", port: 0 }, resolve12);
+      else this.server.listen(this.socketPath, resolve12);
     });
     if (this.transport === "tcp") this.socketPath = `tcp://127.0.0.1:${this.server.address().port}`;
     else chmodSync3(this.socketPath, 384);
@@ -13494,7 +13530,7 @@ var ComputerBroker = class {
       expiresAt: this.now() + this.ttl
     };
     const digest2 = createHash7("sha256").update(JSON.stringify(request)).digest("hex");
-    return new Promise((resolve11, reject) => {
+    return new Promise((resolve12, reject) => {
       const timer = setTimeout(() => {
         this.pending.delete(request.id);
         signal?.removeEventListener("abort", cancel);
@@ -13511,7 +13547,7 @@ var ComputerBroker = class {
         assertLive,
         cleanup: () => signal?.removeEventListener("abort", cancel),
         request: { ...request, digest: digest2 },
-        resolve: resolve11,
+        resolve: resolve12,
         reject,
         timer
       });
@@ -13588,7 +13624,7 @@ var ComputerBroker = class {
   async close() {
     this.suspend();
     for (const socket of this.sockets) socket.destroy();
-    if (this.server?.listening) await new Promise((resolve11) => this.server.close(resolve11));
+    if (this.server?.listening) await new Promise((resolve12) => this.server.close(resolve12));
   }
 };
 
@@ -13657,11 +13693,11 @@ async function pollWebComputerReviews(broker, deviceId, link, signal, intervalMs
     } catch {
     }
     if (signal.aborted) break;
-    await new Promise((resolve11) => {
+    await new Promise((resolve12) => {
       const done = () => {
         clearTimeout(timer);
         signal.removeEventListener("abort", done);
-        resolve11();
+        resolve12();
       };
       const timer = setTimeout(done, intervalMs);
       signal.addEventListener("abort", done, { once: true });
@@ -13712,6 +13748,11 @@ var Daemon = class {
   server = "unregistered";
   timer = null;
   tick = Promise.resolve();
+  updating = false;
+  claimsInFlight = 0;
+  updateCheck = null;
+  maintenance = null;
+  updateVersion;
   draining = false;
   stopped = false;
   stopPromise = null;
@@ -13770,7 +13811,7 @@ var Daemon = class {
     if (this.options.credential)
       this.saveDevice({ credential: this.options.credential });
     this.journal = new RunJournal(paths.journal);
-    this.captureUploader = new CaptureUploader((runId) => join27(runPaths(paths.adapterState, runId).runDir, CAPTURES_DIR), this.options.link, this.log, join27(paths.dataDir, "capture-pending"));
+    this.captureUploader = new CaptureUploader((runId) => join28(runPaths(paths.adapterState, runId).runDir, CAPTURES_DIR), this.options.link, this.log, join28(paths.dataDir, "capture-pending"));
     this.outbox = new Outbox(
       paths.outbox,
       this.options.link,
@@ -13787,7 +13828,7 @@ var Daemon = class {
     if (this.localComputerDriver && this.options.link.syncComputerReviews && this.options.link.localComputerAuthority) {
       this.localComputerBroker = new ComputerBroker({
         driver: this.localComputerDriver,
-        socketPath: join27(paths.dataDir, "local-computer.sock"),
+        socketPath: join28(paths.dataDir, "local-computer.sock"),
         transport: "tcp",
         permitted: (runId) => {
           const assignment = this.journal.get(runId)?.assignment;
@@ -13829,7 +13870,7 @@ var Daemon = class {
       };
       this.cloudComputerBroker = new ComputerBroker({
         driver,
-        socketPath: join27(paths.dataDir, "computer.sock"),
+        socketPath: join28(paths.dataDir, "computer.sock"),
         permitted: (runId) => {
           const entry = this.journal.get(runId);
           return Boolean(!this.stopped && this.registered && entry?.assignment.computer && this.supervisor?.computerRunAllowed(runId));
@@ -13952,7 +13993,7 @@ var Daemon = class {
           worktree,
           tree,
           github: { ...assignment.github, runToken: assignment.mcp.token, issueId: assignment.issueId },
-          privateDir: join27(paths.adapterState, "pids"),
+          privateDir: join28(paths.adapterState, "pids"),
           ...hosted ? { hosted: true } : {},
           env: githubReceiptEnvironment()
         }) : publishRun({
@@ -14130,12 +14171,12 @@ var Daemon = class {
   /** Waits `ms`, or less if the daemon stops or the device registers. */
   pauseCommands(ms, signal) {
     if (signal.aborted) return Promise.resolve();
-    return new Promise((resolve11) => {
+    return new Promise((resolve12) => {
       const done = () => {
         clearTimeout(timer);
         signal.removeEventListener("abort", done);
         this.wakeCommands = null;
-        resolve11();
+        resolve12();
       };
       const timer = setTimeout(done, ms);
       signal.addEventListener("abort", done, { once: true });
@@ -14235,12 +14276,12 @@ var Daemon = class {
       const paths = runPaths(this.paths.adapterState, runId);
       return runVerify(sandbox, {
         command,
-        worktree: realpathSync12(worktree),
-        tmpRoot: join27(this.paths.adapterState, "verify", runId),
+        worktree: realpathSync13(worktree),
+        tmpRoot: join28(this.paths.adapterState, "verify", runId),
         privateDir: paths.privateDir,
         pidFile: paths.pidFile.replace(/\.pgid$/, ".verify.pgid"),
         networkAllow: repo.networkAllow,
-        env: { ...buildChildEnv(), MIKKA_HANDOFF_FILE: join27(paths.runDir, "handoff.json") },
+        env: { ...buildChildEnv(), MIKKA_HANDOFF_FILE: join28(paths.runDir, "handoff.json") },
         timeoutMs,
         signal,
         readOnly
@@ -14352,6 +14393,8 @@ var Daemon = class {
     return pass;
   }
   async syncPass() {
+    if (this.stopped) return;
+    this.checkAutoUpdate();
     const { link } = this.options;
     const { credential, workspaceId } = this.device;
     if (!credential) {
@@ -14403,7 +14446,7 @@ var Daemon = class {
         return;
       }
       if (command && !this.device.completedDeviceCommands?.includes(command.id) && !this.device.failedDeviceCommands?.some((failure) => failure.id === command.id)) {
-        if (command.kind === "redetect" || this.supervisor.heartbeatRuns().length === 0) {
+        if (command.kind === "redetect" || this.maintenanceIdle()) {
           try {
             if (command.kind === "redetect") {
               const detected = await detectHarnesses();
@@ -14414,8 +14457,13 @@ var Daemon = class {
               this.saveDevice({ completedDeviceCommands: [command.id], failedDeviceCommands: [] });
               void this.syncWithServer().catch(() => void 0);
             } else {
-              await restartService(command.kind === "update", () => {
-                this.saveDevice({ completedDeviceCommands: [command.id], failedDeviceCommands: [] });
+              this.startMaintenance(async () => {
+                await restartService(command.kind === "update", () => {
+                  if (this.stopped) throw new Error("Daemon stopped during update");
+                  this.saveDevice({ completedDeviceCommands: [command.id], failedDeviceCommands: [] });
+                }, void 0, () => !this.stopped);
+              }, () => {
+                this.saveDevice({ completedDeviceCommands: [], failedDeviceCommands: [{ id: command.id, error: "Device command failed; check daemon service logs." }] });
               });
             }
           } catch {
@@ -14430,7 +14478,7 @@ var Daemon = class {
       this.server = "online";
       await this.outbox.flushAll();
       for (const entry of this.journal.all()) if (isTerminalRunState(entry.state)) void this.captureUploader.flush(entry.assignment.runId, true);
-      if (!this.draining) {
+      if (!this.draining && !this.updating && !this.stopped) {
         await this.supervisor.resumeAll(true);
         this.startCoordinatorPass(deviceId);
         for (const runId of await link.pendingRuns(deviceId)) {
@@ -14468,6 +14516,17 @@ var Daemon = class {
     this.log.warn("server refused the device session; sign in again");
   }
   async claimAndStart(runId) {
+    if (this.draining || this.updating || this.stopped) {
+      throw new DaemonError(DAEMON_RPC_ERRORS.draining, "Daemon is draining");
+    }
+    this.claimsInFlight++;
+    try {
+      return await this.claimAndStartInternal(runId);
+    } finally {
+      this.claimsInFlight--;
+    }
+  }
+  async claimAndStartInternal(runId) {
     if (this.draining) {
       throw new DaemonError(DAEMON_RPC_ERRORS.draining, "Daemon is draining");
     }
@@ -14501,7 +14560,7 @@ var Daemon = class {
       }
     }
     if (assignment.computer && (!this.cloudComputerBroker || !assignment.subscriptionBinding || assignment.computer.ownerId !== assignment.subscriptionBinding.ownerId)) throw new Error("Cloud computer runtime unavailable");
-    return this.supervisor.start(assignment);
+    return await this.supervisor.start(assignment);
   }
   /**
    * A run id that could escape the daemon's dirs never reaches the
@@ -14699,7 +14758,7 @@ var Daemon = class {
   startCoordinatorPass(deviceId) {
     const link = this.options.link;
     const sandbox = this.agentSandbox();
-    if (this.nativeCoordinator || !link.claimCoordinator || !sandbox || this.stopped || !this.harnesses.some((info) => info.coordinator)) return;
+    if (this.updating || this.draining || this.nativeCoordinator || !link.claimCoordinator || !sandbox || this.stopped || !this.harnesses.some((info) => info.coordinator)) return;
     const controller = new AbortController();
     this.nativeAbort = controller;
     this.nativeCoordinator = (async () => {
@@ -14707,7 +14766,7 @@ var Daemon = class {
       if (!job || controller.signal.aborted) return;
       await runNativeCoordinatorJob(job, {
         deviceId,
-        stateDir: join27(this.paths.dataDir, "coordinator"),
+        stateDir: join28(this.paths.dataDir, "coordinator"),
         link,
         signal: controller.signal,
         sandbox,
@@ -14722,6 +14781,43 @@ var Daemon = class {
       this.nativeAbort = null;
     });
   }
+  maintenanceIdle() {
+    return !this.stopped && !this.draining && !this.updating && !this.nativeCoordinator && this.claimsInFlight === 0 && this.supervisor.heartbeatRuns().length === 0;
+  }
+  startMaintenance(work, failed = () => {
+  }) {
+    if (!this.maintenanceIdle()) return;
+    this.updating = true;
+    this.maintenance = work().catch(() => {
+      this.updating = false;
+      failed();
+      this.log.warn("Daemon update or restart failed; check service installation and npm configuration");
+    }).finally(() => {
+      this.maintenance = null;
+    });
+  }
+  checkAutoUpdate() {
+    const runtime = this.options.autoUpdate;
+    if (!runtime || this.draining || this.updating) return;
+    if (this.updateVersion && this.maintenanceIdle()) {
+      const version = this.updateVersion;
+      this.updateVersion = void 0;
+      this.startMaintenance(async () => {
+        await runtime.install(version);
+        if (this.stopped) return;
+        await restartService(false, () => {
+        }, void 0, () => !this.stopped);
+      });
+    } else if (!this.updateCheck && !this.updateVersion) {
+      this.updateCheck = checkLatestVersion(join28(this.paths.dataDir, "auto-update.json"), DAEMON_VERSION, runtime).then((version) => {
+        this.updateVersion = version;
+      }).catch(() => {
+        this.log.warn("Daemon automatic update check failed");
+      }).finally(() => {
+        this.updateCheck = null;
+      });
+    }
+  }
   stop() {
     return this.stopPromise ??= this.stopInternal();
   }
@@ -14729,6 +14825,8 @@ var Daemon = class {
     this.stopped = true;
     this.localComputerBroker?.suspend();
     await this.starting?.catch(() => void 0);
+    await this.updateCheck;
+    await this.maintenance;
     this.nativeAbort?.abort();
     await this.nativeCoordinator;
     if (this.timer) clearTimeout(this.timer);