@band-app/server 0.42.1 → 0.43.0

package/dist/start-server.mjs

@@ -2031,7 +2031,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter: EventEmitter3 } = __require("events");
     var { Worker: Worker2 } = __require("worker_threads");
-    var { join: join63 } = __require("path");
+    var { join: join64 } = __require("path");
     var { pathToFileURL } = __require("url");
     var { wait } = require_wait();
     var {
@@ -2067,7 +2067,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join63(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join64(__dirname, "lib", "worker.js");
       const worker2 = new Worker2(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -2453,7 +2453,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire2 } = __require("module");
     var getCallers = require_caller();
-    var { join: join63, isAbsolute: isAbsolute7, sep: sep13 } = __require("node:path");
+    var { join: join64, isAbsolute: isAbsolute7, sep: sep13 } = __require("node:path");
     var sleep3 = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -2516,7 +2516,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join63(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join64(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -2534,7 +2534,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join63(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join64(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -2556,7 +2556,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join63(__dirname, "..", "file.js");
+          return join64(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -3545,7 +3545,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join63 = ",";
+            let join64 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -3559,7 +3559,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join63 = `,
+                join64 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3567,13 +3567,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join63;
+                res += join64;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join63}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join64}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3594,7 +3594,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join63 = `,
+              join64 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3608,13 +3608,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key3, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join63;
+                separator = join64;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join63;
+              separator = join64;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -3655,7 +3655,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join63 = ",";
+            let join64 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -3668,7 +3668,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join63 = `,
+                join64 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3676,13 +3676,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join63;
+                res += join64;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join63}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join64}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3695,7 +3695,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join63 = `,
+              join64 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3704,7 +3704,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key3, value[key3], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join63;
+                separator = join64;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -3762,20 +3762,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join64 = `,
+              const join65 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join64;
+                res2 += join65;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join64}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join65}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -3791,16 +3791,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join63 = `,
+            const join64 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join63, maximumBreadth);
+              res += stringifyTypedArray(value, join64, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join63;
+              separator = join64;
             }
             if (deterministic) {
               keys = sort(keys, comparator2);
@@ -3811,13 +3811,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key3, value[key3], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}: ${tmp}`;
-                separator = join63;
+                separator = join64;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join63;
+              separator = join64;
             }
             if (separator !== "") {
               res = `
@@ -13105,7 +13105,7 @@ var init_sql = __esm({
         return new SQL([new StringChunk(str4)]);
       }
       _sql.raw = raw;
-      function join63(chunks, separator) {
+      function join64(chunks, separator) {
         const result = [];
         for (const [i, chunk] of chunks.entries()) {
           if (i > 0 && separator !== void 0) result.push(separator);
@@ -13113,7 +13113,7 @@ var init_sql = __esm({
         }
         return new SQL(result);
       }
-      _sql.join = join63;
+      _sql.join = join64;
       function identifier(value) {
         return new Name(value);
       }
@@ -18267,7 +18267,7 @@ var init_select2 = __esm({
           const baseTableName = this.tableName;
           const tableName = getTableLikeName(table);
           for (const item of extractUsedTable(table)) this.usedTables.add(item);
-          if (typeof tableName === "string" && this.config.joins?.some((join63) => join63.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins?.some((join64) => join64.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (!this.isPartialSelect) {
             if (Object.keys(this.joinsNotNullableMap).length === 1 && typeof baseTableName === "string") this.config.fields = { [baseTableName]: this.config.fields };
             if (typeof tableName === "string" && !is(table, SQL)) {
@@ -19517,7 +19517,7 @@ var init_dialect = __esm({
           if (!joins2) return;
           const withEntries = Object.entries(joins2).filter(([_2, v2]) => v2);
           if (!withEntries.length) return;
-          return sql.join(withEntries.map(([k2, join63]) => {
+          return sql.join(withEntries.map(([k2, join64]) => {
             const relation = tableConfig.relations[k2];
             const isSingle2 = is(relation, One);
             const targetTable = aliasedTable(relation.targetTable, `d${currentDepth + 1}`);
@@ -19528,7 +19528,7 @@ var init_dialect = __esm({
               table: targetTable,
               mode: isSingle2 ? "first" : "many",
               schema,
-              queryConfig: join63,
+              queryConfig: join64,
               tableConfig: schema[relation.targetTableName],
               relationWhere: filter,
               isNested: true,
@@ -19542,7 +19542,7 @@ var init_dialect = __esm({
               key: k2,
               selection: innerQuery.selection,
               isArray: !isSingle2,
-              isOptional: (relation.optional ?? false) || join63 !== true && !!join63.where
+              isOptional: (relation.optional ?? false) || join64 !== true && !!join64.where
             });
             const jsonColumns = sql.join(innerQuery.selection.map((s2) => {
               return sql`${sql.raw(this.escapeString(s2.key))}, ${s2.selection ? sql`${jsonb2}(${sql.identifier(s2.key)})` : sql.identifier(s2.key)}`;
@@ -20061,7 +20061,7 @@ var init_update = __esm({
       createJoin(joinType) {
         return ((table, on) => {
           const tableName = getTableLikeName(table);
-          if (typeof tableName === "string" && this.config.joins.some((join63) => join63.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins.some((join64) => join64.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (typeof on === "function") {
             const from = this.config.from ? is(table, SQLiteTable) ? table[Table.Symbol.Columns] : is(table, Subquery) ? table._.selectedFields : is(table, SQLiteViewBase) ? table[ViewBaseConfig].selectedFields : void 0 : void 0;
             on = on(new Proxy(this.config.table[Table.Symbol.Columns], new SelectionProxyHandler({
@@ -26784,10 +26784,10 @@ var init_zod = __esm({
 
 // src/server/infra/db/queries/repos.ts
 import { existsSync as existsSync10 } from "node:fs";
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 function reconcileKindForRepo(repo) {
   if (!repo.path || !existsSync10(repo.path)) return false;
-  const detectedKind = existsSync10(join34(repo.path, ".git")) ? "git" : "plain";
+  const detectedKind = existsSync10(join35(repo.path, ".git")) ? "git" : "plain";
   if (detectedKind === repo.kind) return false;
   repo.kind = detectedKind;
   if (detectedKind === "plain") {
@@ -27338,7 +27338,7 @@ var init_isolation = __esm({
 
 // src/server/services/_utils/runner-config.ts
 import { existsSync as existsSync11 } from "node:fs";
-import { dirname as dirname10, isAbsolute as isAbsolute2, join as join35, resolve as resolve8 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute2, join as join36, resolve as resolve8 } from "node:path";
 function parseRunners(raw) {
   if (raw === void 0 || raw === null) return { runners: [], errors: [] };
   if (!Array.isArray(raw)) return { runners: [], errors: ["runners must be a list"] };
@@ -27363,8 +27363,8 @@ function bundledRunnersDir() {
   if (fromEnv) return resolve8(fromEnv);
   let dir = import.meta.dirname;
   for (let i = 0; i < 10; i++) {
-    const candidate = join35(dir, "runners");
-    if (existsSync11(join35(candidate, "local", "spawn.sh"))) return candidate;
+    const candidate = join36(dir, "runners");
+    if (existsSync11(join36(candidate, "local", "spawn.sh"))) return candidate;
     const parent = dirname10(dir);
     if (parent === dir) break;
     dir = parent;
@@ -27375,7 +27375,7 @@ function resolveHookPath(spec, script) {
   if (spec.startsWith(BUNDLED_PREFIX)) {
     const name5 = spec.slice(BUNDLED_PREFIX.length);
     if (!/^[a-z][a-z0-9-]*$/.test(name5)) throw new Error(`invalid bundled hook "${spec}"`);
-    return join35(bundledRunnersDir(), name5, `${script}.sh`);
+    return join36(bundledRunnersDir(), name5, `${script}.sh`);
   }
   return isAbsolute2(spec) ? spec : resolve8(bandHome(), spec);
 }
@@ -27474,7 +27474,7 @@ var init_runner_config = __esm({
 });
 
 // src/server/services/settings-service.ts
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 function agentModeFromVia(via) {
   if (via === "chat") return "gui";
   if (via === "terminal") return "tui";
@@ -27668,7 +27668,7 @@ var init_settings_service = __esm({
        */
       worktreesDir() {
         const raw = this.rawWorktreesDir();
-        return raw ?? join36(bandHome(), "worktrees");
+        return raw ?? join37(bandHome(), "worktrees");
       }
       /**
        * Return the raw `worktreesDir` value from settings without applying the
@@ -34771,7 +34771,7 @@ import {
   statSync as statSync14
 } from "node:fs";
 import { createServer as createServer3 } from "node:http";
-import { basename as basename7, join as join62, resolve as resolve15, sep as sep12 } from "node:path";
+import { basename as basename7, join as join63, resolve as resolve15, sep as sep12 } from "node:path";
 import { pipeline, Readable as Readable2 } from "node:stream";
 import { parseArgs } from "node:util";
 
@@ -41327,6 +41327,11 @@ function openSseStream(res) {
 // src/server/services/agent-session-service.ts
 import { randomUUID as randomUUID17 } from "node:crypto";
 
+// ../../packages/host-api/src/capabilities.ts
+function agentIsUsable(a) {
+  return Boolean(a?.installed) && a?.loggedIn !== false;
+}
+
 // ../../packages/host-api/src/errors.ts
 var HostPathDeniedError = class extends Error {
   path;
@@ -56856,11 +56861,11 @@ var ChatEventQueries = class {
 init_settings();
 
 // src/server/infra/host/registry.ts
-import { join as join37 } from "node:path";
+import { join as join38 } from "node:path";
 
 // ../../packages/host-local/src/local-host.ts
 init_src2();
-import { execFile as execFile11, spawn as spawn7 } from "node:child_process";
+import { execFile as execFile12, spawn as spawn7 } from "node:child_process";
 import { createReadStream as createReadStream3, watch as fsWatch } from "node:fs";
 import {
   cp,
@@ -56872,12 +56877,12 @@ import {
   readFile as readFile7,
   realpath as realpath4,
   rename as rename3,
-  rm as rm3,
+  rm as rm4,
   stat as stat7,
   writeFile as writeFile4
 } from "node:fs/promises";
-import { homedir as homedir13, hostname as hostname3, tmpdir as tmpdir2 } from "node:os";
-import { join as join33 } from "node:path";
+import { homedir as homedir14, hostname as hostname3, tmpdir as tmpdir2 } from "node:os";
+import { join as join34 } from "node:path";
 
 // ../../packages/host-local/src/agents/acp-launch.ts
 init_src2();
@@ -57959,7 +57964,7 @@ var NETWORK_TIMEOUT_MS = 3e4;
 var LOCAL_TIMEOUT_MS = 3e4;
 var MAX_PUSH_ATTEMPTS = 5;
 var APPEND_ONLY = ["learnings/**", "inbox/**"];
-var LOCAL_ONLY = ["/tasks/", "/repos/", "/AGENTS.md", "/CLAUDE.md"];
+var LOCAL_ONLY = ["/tasks/", "/repos/"];
 function gitEnv(extra = {}) {
   const env = {};
   for (const [k2, v2] of Object.entries(process.env)) {
@@ -58296,6 +58301,32 @@ var ContextSync = class {
 `);
     await this.git(dir, ["config", "rebase.autoStash", "false"]);
     await this.git(dir, ["config", "commit.gpgsign", "false"]);
+    await this.dropLegacyInstructions(dir);
+  }
+  /**
+   * Older Band wrote a generated AGENTS.md and CLAUDE.md into each host's copy and kept them out of
+   * the context repo. They are synced files now, so an untracked leftover would conflict with the
+   * hub's seeded file or be pushed as the user's own. Remove an untracked one that still carries
+   * Band's generated header.
+   */
+  async dropLegacyInstructions(dir) {
+    const markers = {
+      "AGENTS.md": "<!-- Written by Band from the project's settings",
+      "CLAUDE.md": "<!-- Written by Band. Claude Code reads this file"
+    };
+    for (const [file2, marker] of Object.entries(markers)) {
+      try {
+        const text3 = await readFile4(join23(dir, file2), "utf8");
+        if (!text3.startsWith(marker)) continue;
+        const tracked2 = await run2(["ls-files", "--error-unmatch", "--", file2], {
+          cwd: dir,
+          timeoutMs: LOCAL_TIMEOUT_MS
+        });
+        if (tracked2.code === 0) continue;
+        await rm2(join23(dir, file2), { force: true });
+      } catch {
+      }
+    }
   }
   async branch(dir) {
     const r = await this.git(dir, ["symbolic-ref", "--short", "HEAD"]);
@@ -58646,9 +58677,9 @@ async function listWorktrees(repoPath) {
   if (currentPath) await pushCurrent();
   return worktrees2;
 }
-async function getRepoInfo(worktreePath, run4 = execGit) {
+async function getRepoInfo(worktreePath, run5 = execGit) {
   try {
-    const remoteUrl = (await run4(["remote", "get-url", "origin"], worktreePath)).trim();
+    const remoteUrl = (await run5(["remote", "get-url", "origin"], worktreePath)).trim();
     const parsed = parseGitRemoteUrl(remoteUrl);
     if (!parsed) {
       log10.debug('getRepoInfo: failed to parse remote URL "%s" for %s', remoteUrl, worktreePath);
@@ -58827,76 +58858,10 @@ function killAllServers() {
   worktreeServers.clear();
 }
 
-// ../../packages/host-local/src/process/du.ts
+// ../../packages/host-local/src/process/capabilities.ts
 import { execFile as execFile7 } from "node:child_process";
-import { readdir as readdir4, stat as stat4 } from "node:fs/promises";
-import { join as join27 } from "node:path";
-var MAX_DU_BUFFER = 10 * 1024 * 1024;
-var DU_TIMEOUT_MS = 3e4;
-var STAT_CHUNK = 256;
-async function duBytesNodeWalk(path2) {
-  const deadline = Date.now() + DU_TIMEOUT_MS;
-  let total = 0;
-  const stack = [path2];
-  while (stack.length > 0) {
-    if (Date.now() > deadline) break;
-    const dir = stack.pop();
-    try {
-      const entries = await readdir4(dir, { withFileTypes: true });
-      const filePaths = [];
-      for (const entry of entries) {
-        if (entry.isDirectory()) {
-          stack.push(join27(dir, entry.name));
-        } else if (entry.isFile()) {
-          filePaths.push(join27(dir, entry.name));
-        }
-      }
-      for (let i = 0; i < filePaths.length; i += STAT_CHUNK) {
-        if (Date.now() > deadline) break;
-        const sizes = await Promise.all(
-          filePaths.slice(i, i + STAT_CHUNK).map(
-            (p2) => stat4(p2).then(
-              (s2) => s2.size,
-              () => 0
-              // vanished between readdir and stat — count as 0
-            )
-          )
-        );
-        for (const size of sizes) total += size;
-      }
-    } catch {
-    }
-  }
-  return total;
-}
-async function duBytes(path2) {
-  if (process.platform === "win32") {
-    return duBytesNodeWalk(path2);
-  }
-  const stdout = await new Promise((resolve16, reject) => {
-    execFile7(
-      "du",
-      ["-sk", path2],
-      { maxBuffer: MAX_DU_BUFFER, timeout: DU_TIMEOUT_MS },
-      (err, out) => {
-        if (err && !out) {
-          reject(err);
-          return;
-        }
-        resolve16(out);
-      }
-    );
-  });
-  const kbStr = stdout.trim().split(/\s+/)[0];
-  const kb = Number.parseInt(kbStr, 10);
-  if (!Number.isFinite(kb)) {
-    throw new Error(`du output not numeric: ${JSON.stringify(stdout)}`);
-  }
-  return kb * 1024;
-}
-
-// ../../packages/host-local/src/process/tools.ts
-import { execFile as execFile8 } from "node:child_process";
+import { homedir as homedir12 } from "node:os";
+import { delimiter as delimiter5, join as join27 } from "node:path";
 
 // ../../packages/environment/src/image.ts
 import { createHash as createHash3 } from "node:crypto";
@@ -59319,7 +59284,213 @@ ${start}
   return install ?? start ?? null;
 }
 
+// ../../packages/host-local/src/process/capabilities.ts
+var AGENT_PROBES = [
+  {
+    type: "claude-code",
+    bin: "claude",
+    login: ["auth", "status"],
+    envKeys: ["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"],
+    install: "npm install -g @anthropic-ai/claude-code",
+    loginFix: "claude auth login"
+  },
+  {
+    type: "codex",
+    bin: "codex",
+    login: ["login", "status"],
+    envKeys: ["OPENAI_API_KEY"],
+    install: "npm install -g @openai/codex",
+    loginFix: "codex login"
+  },
+  {
+    type: "opencode",
+    bin: "opencode",
+    login: null,
+    envKeys: [],
+    install: "npm install -g opencode-ai",
+    loginFix: "opencode auth login"
+  },
+  {
+    type: "gemini-cli",
+    bin: "gemini",
+    login: null,
+    envKeys: ["GEMINI_API_KEY"],
+    install: "npm install -g @google/gemini-cli",
+    loginFix: "gemini"
+  },
+  {
+    type: "cursor-cli",
+    bin: "cursor-agent",
+    login: null,
+    envKeys: ["CURSOR_API_KEY"],
+    install: "curl https://cursor.com/install -fsS | bash",
+    loginFix: "cursor-agent login"
+  }
+];
+var PROBE_TIMEOUT_MS = 8e3;
+function searchPath() {
+  const extra = process.env.BAND_AGENT_BIN_DIRS?.trim();
+  const home = homedir12();
+  const installDirs = [
+    ".local/bin",
+    ".opencode/bin",
+    ".claude/local",
+    ".bun/bin",
+    ".npm-global/bin"
+  ].map((d) => join27(home, d));
+  return [...extra ? [extra] : [], prependBinDirs(process.env.PATH), ...installDirs].join(
+    delimiter5
+  );
+}
+function run3(bin, args) {
+  return new Promise((resolve16) => {
+    execFile7(
+      bin,
+      args,
+      {
+        env: { ...process.env, PATH: searchPath() },
+        timeout: PROBE_TIMEOUT_MS
+      },
+      (err, stdout, stderr) => {
+        const notFound = err?.code === "ENOENT";
+        resolve16({ ok: !err, found: !notFound, out: `${stdout}
+${stderr}` });
+      }
+    );
+  });
+}
+async function probeAgent(probe) {
+  const version2 = await run3(probe.bin, ["--version"]);
+  if (!version2.found) {
+    return {
+      type: probe.type,
+      installed: false,
+      version: null,
+      loggedIn: null,
+      fix: probe.install
+    };
+  }
+  let loggedIn = null;
+  if (probe.envKeys.some((k2) => Boolean(process.env[k2]))) loggedIn = true;
+  else if (probe.login) loggedIn = (await run3(probe.bin, probe.login)).ok;
+  return {
+    type: probe.type,
+    installed: true,
+    version: extractVersion(version2.out),
+    loggedIn,
+    fix: loggedIn === false ? probe.loginFix : ""
+  };
+}
+async function probeGh() {
+  const v2 = await run3("gh", ["--version"]);
+  if (!v2.found) {
+    return {
+      tool: "gh",
+      installed: false,
+      version: null,
+      loggedIn: null,
+      fix: "install the GitHub CLI from https://cli.github.com"
+    };
+  }
+  const auth2 = process.env.GH_TOKEN || process.env.GITHUB_TOKEN ? { ok: true } : await run3("gh", ["auth", "status"]);
+  return {
+    tool: "gh",
+    installed: true,
+    version: extractVersion(v2.out),
+    loggedIn: auth2.ok,
+    fix: auth2.ok ? "" : "gh auth login"
+  };
+}
+async function probeGit() {
+  const v2 = await run3("git", ["--version"]);
+  return {
+    tool: "git",
+    installed: v2.found && v2.ok,
+    version: v2.found ? extractVersion(v2.out) : null,
+    loggedIn: null,
+    fix: v2.found ? "" : "install git"
+  };
+}
+async function probeCapabilities(agentTypes) {
+  const probes = agentTypes ? AGENT_PROBES.filter((p2) => agentTypes.includes(p2.type)) : AGENT_PROBES;
+  const [agents, gh, git3] = await Promise.all([
+    Promise.all(probes.map(probeAgent)),
+    probeGh(),
+    probeGit()
+  ]);
+  return { agents, tools: [git3, gh], checkedAt: Date.now() };
+}
+
+// ../../packages/host-local/src/process/du.ts
+import { execFile as execFile8 } from "node:child_process";
+import { readdir as readdir4, stat as stat4 } from "node:fs/promises";
+import { join as join28 } from "node:path";
+var MAX_DU_BUFFER = 10 * 1024 * 1024;
+var DU_TIMEOUT_MS = 3e4;
+var STAT_CHUNK = 256;
+async function duBytesNodeWalk(path2) {
+  const deadline = Date.now() + DU_TIMEOUT_MS;
+  let total = 0;
+  const stack = [path2];
+  while (stack.length > 0) {
+    if (Date.now() > deadline) break;
+    const dir = stack.pop();
+    try {
+      const entries = await readdir4(dir, { withFileTypes: true });
+      const filePaths = [];
+      for (const entry of entries) {
+        if (entry.isDirectory()) {
+          stack.push(join28(dir, entry.name));
+        } else if (entry.isFile()) {
+          filePaths.push(join28(dir, entry.name));
+        }
+      }
+      for (let i = 0; i < filePaths.length; i += STAT_CHUNK) {
+        if (Date.now() > deadline) break;
+        const sizes = await Promise.all(
+          filePaths.slice(i, i + STAT_CHUNK).map(
+            (p2) => stat4(p2).then(
+              (s2) => s2.size,
+              () => 0
+              // vanished between readdir and stat — count as 0
+            )
+          )
+        );
+        for (const size of sizes) total += size;
+      }
+    } catch {
+    }
+  }
+  return total;
+}
+async function duBytes(path2) {
+  if (process.platform === "win32") {
+    return duBytesNodeWalk(path2);
+  }
+  const stdout = await new Promise((resolve16, reject) => {
+    execFile8(
+      "du",
+      ["-sk", path2],
+      { maxBuffer: MAX_DU_BUFFER, timeout: DU_TIMEOUT_MS },
+      (err, out) => {
+        if (err && !out) {
+          reject(err);
+          return;
+        }
+        resolve16(out);
+      }
+    );
+  });
+  const kbStr = stdout.trim().split(/\s+/)[0];
+  const kb = Number.parseInt(kbStr, 10);
+  if (!Number.isFinite(kb)) {
+    throw new Error(`du output not numeric: ${JSON.stringify(stdout)}`);
+  }
+  return kb * 1024;
+}
+
 // ../../packages/host-local/src/process/tools.ts
+import { execFile as execFile9 } from "node:child_process";
 var PROBES = [
   { tool: "node", bin: "node", args: ["--version"] },
   { tool: "python", bin: "python3", args: ["--version"] },
@@ -59329,15 +59500,15 @@ var PROBES = [
   { tool: "docker", bin: "docker", args: ["--version"] },
   { tool: "git", bin: "git", args: ["--version"] }
 ];
-var PROBE_TIMEOUT_MS = 5e3;
+var PROBE_TIMEOUT_MS2 = 5e3;
 function versionOf(bin, args) {
   return new Promise((resolve16) => {
-    execFile8(
+    execFile9(
       bin,
       args,
       {
         env: { ...process.env, PATH: prependBinDirs(process.env.PATH) },
-        timeout: PROBE_TIMEOUT_MS
+        timeout: PROBE_TIMEOUT_MS2
       },
       (err, stdout, stderr) => resolve16(err ? null : extractVersion(`${stdout}
 ${stderr}`))
@@ -59355,13 +59526,14 @@ async function probeTools() {
 
 // ../../packages/host-local/src/project/project-folder.ts
 import { spawn as spawn5 } from "node:child_process";
-import { mkdir as mkdir4, open as open2, readdir as readdir5, realpath as realpath2, stat as stat5 } from "node:fs/promises";
-import { join as join28, resolve as resolve6, sep as sep3 } from "node:path";
+import { mkdir as mkdir4, open as open2, readdir as readdir5, realpath as realpath2, rm as rm3, stat as stat5 } from "node:fs/promises";
+import { join as join29, resolve as resolve6, sep as sep3 } from "node:path";
 var PROJECT_NAME = /^[a-z0-9][a-z0-9_-]{0,62}$/;
 var REPO_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;
 var BRANCH_NAME = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,199}$/;
 var DEFAULT_FETCH_THROTTLE_MS = 6e4;
 var FETCH_TIMEOUT_MS = 3e4;
+var CLONE_TIMEOUT_MS = 10 * 6e4;
 var LOCAL_TIMEOUT_MS2 = 3e4;
 var DEFAULT_READ_BYTES = 2e5;
 var MAX_READ_BYTES = 1e6;
@@ -59454,11 +59626,11 @@ var ProjectFolder = class {
   locks = /* @__PURE__ */ new Map();
   folderOf(project) {
     checkProject(project);
-    return join28(this.bandHome(), "projects", project);
+    return join29(this.bandHome(), "projects", project);
   }
   checkoutOf(project, repo) {
     checkRepo({ name: repo });
-    return join28(this.folderOf(project), "repos", repo);
+    return join29(this.folderOf(project), "repos", repo);
   }
   // ---- ensure ------------------------------------------------------------------
   async ensure(req) {
@@ -59483,7 +59655,8 @@ var ProjectFolder = class {
     });
   }
   async ensureCheckout(project, repo, fetchMode) {
-    const branch = (() => {
+    const branch = repo.defaultBranch;
+    const legacyBranch = (() => {
       try {
         checkRepo(repo);
         return projectBranch(project, repo.defaultBranch);
@@ -59491,7 +59664,7 @@ var ProjectFolder = class {
         return projectBranch(project, "?");
       }
     })();
-    const path2 = join28(this.folderOf(project), "repos", repo.name);
+    const path2 = join29(this.folderOf(project), "repos", repo.name);
     const base = {
       repo: repo.name,
       path: path2,
@@ -59506,8 +59679,20 @@ var ProjectFolder = class {
       checkRepo(repo);
       let fetchError;
       if (fetchMode !== "never") fetchError = await this.fetchClone(repo.clonePath, fetchMode);
-      if (!await exists2(join28(path2, ".git"))) {
-        await this.createCheckout(project, repo, path2, branch);
+      let legacyWorktree = false;
+      let created = false;
+      if (!await exists2(join29(path2, ".git"))) {
+        await this.createCheckout(project, repo, path2);
+        created = true;
+      } else if (await isWorktreeCheckout(path2)) {
+        legacyWorktree = !await this.convertWorktree(repo, path2, legacyBranch);
+        if (!legacyWorktree) {
+          await this.createCheckout(project, repo, path2);
+          created = true;
+        }
+      }
+      if (fetchMode !== "never" && !created && !legacyWorktree) {
+        fetchError ??= await this.fetchClone(path2, fetchMode);
       }
       let state2 = await this.state(path2);
       let updated = false;
@@ -59520,10 +59705,12 @@ var ProjectFolder = class {
       const status = updated ? "updated" : state2.behind > 0 ? "behind" : state2.ahead > 0 || state2.dirty ? "ahead" : "current";
       return {
         ...base,
+        branch: legacyWorktree ? (await repoGit(path2, ["symbolic-ref", "--short", "HEAD"])).stdout.trim() || legacyBranch : branch,
         status,
         ahead: state2.ahead,
         behind: state2.behind,
         dirty: state2.dirty,
+        ...legacyWorktree ? { legacyWorktree } : {},
         ...fetchError ? { fetchError } : {}
       };
     } catch (err) {
@@ -59550,9 +59737,25 @@ var ProjectFolder = class {
     this.lastFetchError.delete(clonePath);
     return void 0;
   }
-  async createCheckout(project, repo, path2, branch) {
-    await mkdir4(join28(this.folderOf(project), "repos"), { recursive: true });
-    await repoGit(repo.clonePath, ["worktree", "prune"]);
+  /**
+   * Removes a worktree an older Band made, with its local branch, when it has nothing the remote
+   * lacks. Returns false and changes nothing when it is dirty or ahead.
+   */
+  async convertWorktree(repo, path2, legacyBranch) {
+    const state2 = await this.state(path2);
+    if (state2.dirty || state2.ahead > 0) return false;
+    const removed = await repoGit(repo.clonePath, ["worktree", "remove", path2]);
+    if (removed.code !== 0) throw new Error(brief(removed));
+    await repoGit(repo.clonePath, ["branch", "-D", legacyBranch]);
+    return true;
+  }
+  /**
+   * Clones the repo's origin into `path`, borrowing the objects of the repo's own clone and then
+   * copying them (`--reference --dissociate`), so the checkout depends on nothing in that clone.
+   * Without a usable reference it is a plain clone.
+   */
+  async createCheckout(project, repo, path2) {
+    await mkdir4(join29(this.folderOf(project), "repos"), { recursive: true });
     const upstream = `origin/${repo.defaultBranch}`;
     const hasUpstream = await repoGit(repo.clonePath, [
       "rev-parse",
@@ -59563,16 +59766,31 @@ var ProjectFolder = class {
     if (hasUpstream.code !== 0) {
       throw new Error(`${repo.name} has no ${upstream}. Fetch the repository first.`);
     }
-    const hasBranch = (await repoGit(repo.clonePath, ["rev-parse", "--verify", "--quiet", `refs/heads/${branch}`])).code === 0;
-    const added = hasBranch ? await repoGit(repo.clonePath, ["worktree", "add", path2, branch]) : await repoGit(repo.clonePath, ["worktree", "add", "--track", "-b", branch, path2, upstream]);
-    if (added.code !== 0) throw new Error(brief(added));
-    const ext = await repoGit(repo.clonePath, ["config", "extensions.worktreeConfig", "true"]);
-    if (ext.code !== 0) throw new Error(brief(ext));
-    const pushDefault = await repoGit(path2, ["config", "--worktree", "push.default", "upstream"]);
-    if (pushDefault.code !== 0) throw new Error(brief(pushDefault));
-    if (hasBranch) {
-      await repoGit(path2, ["branch", "--set-upstream-to", upstream, branch]);
+    const origin = (await repoGit(repo.clonePath, ["remote", "get-url", "origin"])).stdout.trim();
+    if (!origin) throw new Error(`${repo.name} has no origin remote`);
+    if (origin.startsWith("-")) throw new Error(`${repo.name} has an invalid origin remote`);
+    const existedBefore = await stat5(path2).then(
+      () => true,
+      () => false
+    );
+    const common2 = ["clone", "--quiet", "--branch", repo.defaultBranch, "--no-tags"];
+    let cloned = await repoGit(
+      join29(this.folderOf(project), "repos"),
+      [...common2, "--reference", repo.clonePath, "--dissociate", "--", origin, path2],
+      CLONE_TIMEOUT_MS
+    );
+    if (cloned.code !== 0) {
+      if (existedBefore) throw new Error(brief(cloned));
+      await rm3(path2, { recursive: true, force: true });
+      cloned = await repoGit(
+        join29(this.folderOf(project), "repos"),
+        [...common2, "--", origin, path2],
+        CLONE_TIMEOUT_MS
+      );
     }
+    if (cloned.code !== 0) throw new Error(brief(cloned));
+    const pushDefault = await repoGit(path2, ["config", "push.default", "upstream"]);
+    if (pushDefault.code !== 0) throw new Error(brief(pushDefault));
   }
   async state(path2) {
     const counts = await repoGit(path2, ["rev-list", "--left-right", "--count", "HEAD...@{u}"]);
@@ -59586,7 +59804,7 @@ var ProjectFolder = class {
   /** The checkout of a repo, which must exist. */
   async existingCheckout(project, repo) {
     const path2 = this.checkoutOf(project, repo);
-    if (!await exists2(join28(path2, ".git"))) {
+    if (!await exists2(join29(path2, ".git"))) {
       throw new Error(`Repo "${repo}" has no checkout in project "${project}" on this host`);
     }
     return path2;
@@ -59885,7 +60103,7 @@ var ProjectFolder = class {
   async removeRepo(req) {
     const path2 = this.checkoutOf(req.project, req.repo);
     await this.exclusive(req.project, async () => {
-      if (!await exists2(join28(path2, ".git"))) {
+      if (!await exists2(join29(path2, ".git"))) {
         await repoGit(req.clonePath, ["worktree", "prune"]);
         return;
       }
@@ -59900,10 +60118,14 @@ var ProjectFolder = class {
           `The checkout of "${req.repo}" in ${path2} has ${reasons.join(" and ")}. Commit and push or discard them first.`
         );
       }
-      const removed = await repoGit(req.clonePath, ["worktree", "remove", path2]);
-      if (removed.code !== 0) throw new Error(brief(removed));
-      if (branch.startsWith(`band/${req.project}/`)) {
-        await repoGit(req.clonePath, ["branch", "-D", branch]);
+      if (await isWorktreeCheckout(path2)) {
+        const removed = await repoGit(req.clonePath, ["worktree", "remove", path2]);
+        if (removed.code !== 0) throw new Error(brief(removed));
+        if (branch.startsWith(`band/${req.project}/`)) {
+          await repoGit(req.clonePath, ["branch", "-D", branch]);
+        }
+      } else {
+        await rm3(path2, { recursive: true, force: true });
       }
     });
   }
@@ -59919,6 +60141,13 @@ var ProjectFolder = class {
     }
   }
 };
+async function isWorktreeCheckout(path2) {
+  try {
+    return (await stat5(join29(path2, ".git"))).isFile();
+  } catch {
+    return false;
+  }
+}
 async function exists2(path2) {
   try {
     await stat5(path2);
@@ -59929,12 +60158,12 @@ async function exists2(path2) {
 }
 
 // ../../packages/host-local/src/repos/host-repos.ts
-import { execFile as execFile9 } from "node:child_process";
+import { execFile as execFile10 } from "node:child_process";
 import { createHash as createHash4, randomBytes as randomBytes2 } from "node:crypto";
 import { existsSync as existsSync9 } from "node:fs";
 import { mkdir as mkdir5, readdir as readdir6, readFile as readFile6, realpath as realpath3, rename as rename2, stat as stat6, writeFile as writeFile3 } from "node:fs/promises";
-import { homedir as homedir12 } from "node:os";
-import { dirname as dirname8, join as join29, sep as sep4 } from "node:path";
+import { homedir as homedir13 } from "node:os";
+import { dirname as dirname8, join as join30, sep as sep4 } from "node:path";
 
 // ../../packages/shared/src/remote-url.ts
 function stripGitSuffix(path2) {
@@ -60012,9 +60241,9 @@ function stripUrlCredentials(input) {
 }
 
 // ../../packages/host-local/src/repos/host-repos.ts
-var CLONE_TIMEOUT_MS = 10 * 60 * 1e3;
+var CLONE_TIMEOUT_MS2 = 10 * 60 * 1e3;
 function defaultReposDir() {
-  return process.env.BAND_REPOS_DIR?.trim() || join29(homedir12(), "band", "repos");
+  return process.env.BAND_REPOS_DIR?.trim() || join30(homedir13(), "band", "repos");
 }
 async function git(args, cwd) {
   try {
@@ -60027,10 +60256,10 @@ function clone2(url2, dest) {
   const env = { ...process.env, GIT_TERMINAL_PROMPT: "0" };
   env.PATH = prependBinDirs(env.PATH);
   return new Promise((resolve16, reject) => {
-    execFile9(
+    execFile10(
       "git",
       ["clone", "--", url2, dest],
-      { env, timeout: CLONE_TIMEOUT_MS, maxBuffer: 10 * 1024 * 1024 },
+      { env, timeout: CLONE_TIMEOUT_MS2, maxBuffer: 10 * 1024 * 1024 },
       (err, _stdout, stderr) => {
         if (err)
           reject(
@@ -60123,11 +60352,11 @@ var LocalRepos = class {
     }
     const running = this.ensuring.get(id.key);
     if (running) return running;
-    const run4 = this.doEnsure(id.key, id.url, id.owner, id.name).finally(
+    const run5 = this.doEnsure(id.key, id.url, id.owner, id.name).finally(
       () => this.ensuring.delete(id.key)
     );
-    this.ensuring.set(id.key, run4);
-    return run4;
+    this.ensuring.set(id.key, run5);
+    return run5;
   }
   async doEnsure(key2, url2, owner, name5) {
     const mappings = await this.load();
@@ -60135,7 +60364,7 @@ var LocalRepos = class {
     if (mapped && existsSync9(mapped.path) && await isDirectory(mapped.path)) {
       return { path: mapped.path, cloned: false };
     }
-    const base = join29(this.options.reposDir(), owner, name5);
+    const base = join30(this.options.reposDir(), owner, name5);
     let dest = base;
     if (existsSync9(dest)) {
       const origin = await git(["remote", "get-url", "origin"], dest);
@@ -60155,7 +60384,7 @@ var LocalRepos = class {
   }
 };
 async function browseFolder(path2) {
-  const home = homedir12();
+  const home = homedir13();
   const target = await realpath3(path2?.trim() ? path2 : home).catch(() => {
     throw new Error(`${path2} does not exist`);
   });
@@ -60163,11 +60392,11 @@ async function browseFolder(path2) {
   const dirents = await readdir6(target, { withFileTypes: true });
   const entries = [];
   for (const d of dirents) {
-    const full = join29(target, d.name);
+    const full = join30(target, d.name);
     let isDir = d.isDirectory();
     if (d.isSymbolicLink()) isDir = await isDirectory(full);
     if (!isDir) continue;
-    entries.push({ name: d.name, path: full, isGit: existsSync9(join29(full, ".git")) });
+    entries.push({ name: d.name, path: full, isGit: existsSync9(join30(full, ".git")) });
   }
   entries.sort((a, b2) => a.name.localeCompare(b2.name));
   const parent = dirname8(target);
@@ -60181,7 +60410,7 @@ async function browseFolder(path2) {
 }
 
 // ../../packages/host-local/src/search/ripgrep-client.ts
-import { execFile as execFile10, spawn as spawn6 } from "node:child_process";
+import { execFile as execFile11, spawn as spawn6 } from "node:child_process";
 import { rgPath } from "@vscode/ripgrep";
 function streamMatches(options) {
   return {
@@ -60303,7 +60532,7 @@ function listFiles(cwd) {
     "!**/.DS_Store"
   ];
   return new Promise((resolve16, reject) => {
-    execFile10(
+    execFile11(
       rgPath,
       args,
       { cwd, maxBuffer: LIST_FILES_MAX_BUFFER, encoding: "utf-8" },
@@ -60320,13 +60549,13 @@ function listFiles(cwd) {
 }
 
 // ../../packages/host-local/src/setup/repo-config.ts
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 init_src();
 init_zod();
 var log12 = createLogger("repo-config");
 async function loadRepoConfig(host, worktreePath, repoPath) {
   for (const base of [worktreePath, repoPath]) {
-    const text3 = await readConfig(host, join30(base, ".band", "config.json"));
+    const text3 = await readConfig(host, join31(base, ".band", "config.json"));
     if (text3 === null) continue;
     try {
       return JSON.parse(text3);
@@ -60337,10 +60566,10 @@ async function loadRepoConfig(host, worktreePath, repoPath) {
 }
 async function loadEnvironment(host, worktreePath, repoPath) {
   for (const base of [worktreePath, repoPath]) {
-    const file2 = join30(base, ENVIRONMENT_FILE);
+    const file2 = join31(base, ENVIRONMENT_FILE);
     const text3 = await readConfig(host, file2);
     if (text3 === null) continue;
-    const exists4 = (relative3) => host.fs.stat(join30(base, relative3)).then(
+    const exists4 = (relative3) => host.fs.stat(join31(base, relative3)).then(
       () => true,
       () => false
     );
@@ -60372,7 +60601,7 @@ async function readConfig(host, configPath) {
 }
 var CopyFilesSchema = external_exports2.array(external_exports2.string()).optional();
 async function getCopyFiles(host, repoPath) {
-  const configPath = join30(repoPath, ".band", "config.json");
+  const configPath = join31(repoPath, ".band", "config.json");
   const text3 = await readConfig(host, configPath);
   if (text3 === null) return null;
   let raw;
@@ -60397,7 +60626,7 @@ async function getCopyFiles(host, repoPath) {
 
 // ../../packages/host-local/src/setup/script-run.ts
 init_src();
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 var log13 = createLogger("script-run");
 var POLL_MS = 1e3;
 var decoder = new TextDecoder();
@@ -60406,8 +60635,8 @@ function quote(value) {
 }
 async function prepareScriptRun(host, script, label2) {
   const dir = await host.fs.mkdtemp("band-script-");
-  const scriptFile = join31(dir, `${label2}.sh`);
-  const exitFile = join31(dir, "exit-code");
+  const scriptFile = join32(dir, `${label2}.sh`);
+  const exitFile = join32(dir, "exit-code");
   const partialFile = `${exitFile}.partial`;
   const onExit = [
     "rc=$?",
@@ -60467,7 +60696,7 @@ async function prepareScriptRun(host, script, label2) {
 
 // ../../packages/host-local/src/setup/worktree-files.ts
 init_src();
-import { dirname as dirname9, isAbsolute, join as join32, relative, resolve as resolve7, sep as sep5 } from "node:path";
+import { dirname as dirname9, isAbsolute, join as join33, relative, resolve as resolve7, sep as sep5 } from "node:path";
 var log14 = createLogger("worktree-files");
 var MAX_COPY_FILES_ENTRIES = 100;
 var MAX_COPY_FILES_MATCHES = 500;
@@ -60498,7 +60727,7 @@ async function copyWorktreeFiles(host, repoPath, worktreePath) {
   }
   for (const [absSource, source] of byAbs) {
     const rel = relative(repoPath, absSource);
-    const dest = join32(worktreePath, rel);
+    const dest = join33(worktreePath, rel);
     if (rel.startsWith("..") || isAbsolute(rel)) {
       log14.warn({ source, entry: absSource }, "refusing to copy file outside repo root \u2014 skipping");
       continue;
@@ -60587,7 +60816,7 @@ async function resolveFromConfig(host, repoPath, missing) {
   return out;
 }
 async function resolveFromWorktreeInclude(host, repoPath) {
-  const includePath = join32(repoPath, ".worktreeinclude");
+  const includePath = join33(repoPath, ".worktreeinclude");
   let includeContent;
   try {
     includeContent = new TextDecoder().decode(await host.fs.readFile(includePath));
@@ -60629,14 +60858,15 @@ function hasGlobMeta(pattern) {
 
 // ../../packages/host-local/src/local-host.ts
 var TOOLS_TTL_MS = 6e4;
+var REPORT_TTL_MS = 2 * 6e4;
 var EXEC_MAX_BUFFER = 50 * 1024 * 1024;
 var LOCAL_HOST_ID = "local";
 var LocalHost = class {
   constructor(options) {
     this.options = options;
-    const bandHome2 = () => process.env.BAND_HOME ?? join33(homedir13(), ".band");
+    const bandHome2 = () => process.env.BAND_HOME ?? join34(homedir14(), ".band");
     this.repos = new LocalRepos({
-      mappingsFile: options.repos?.mappingsFile ?? (() => join33(bandHome2(), "repo-mappings.json")),
+      mappingsFile: options.repos?.mappingsFile ?? (() => join34(bandHome2(), "repo-mappings.json")),
       reposDir: options.repos?.reposDir ?? defaultReposDir
     });
     const source = options.context;
@@ -60700,7 +60930,7 @@ var LocalHost = class {
     openStdio: (spec) => openMcpStdio(spec)
   };
   chromium = new ChromiumManager(
-    () => join33(process.env.BAND_HOME ?? join33(homedir13(), ".band"), "browser-profiles")
+    () => join34(process.env.BAND_HOME ?? join34(homedir14(), ".band"), "browser-profiles")
   );
   browser = {
     open: (spec) => this.chromium.open(spec),
@@ -60787,7 +61017,31 @@ var LocalHost = class {
     })();
     return this.cliFacts;
   }
+  reportValue;
+  reportAt = 0;
+  reportProbe = null;
+  /**
+   * Probing the agent CLIs runs several processes and `claude auth status` can take seconds, so
+   * `info()` never waits for it: it returns the last report and refreshes it in the background once
+   * it is older than `REPORT_TTL_MS`. The first `info()` has no report yet.
+   */
+  refreshReport() {
+    if (this.reportProbe) return this.reportProbe;
+    if (this.reportValue && Date.now() - this.reportAt <= REPORT_TTL_MS) return Promise.resolve();
+    this.reportProbe = probeCapabilities().then((value) => {
+      this.reportValue = value;
+      this.reportAt = Date.now();
+    }).catch(() => void 0).finally(() => {
+      this.reportProbe = null;
+    });
+    return this.reportProbe;
+  }
+  /** Waits for the capability report to exist. A worker calls it once before its hello, which carries it. */
+  async awaitReport() {
+    await this.refreshReport();
+  }
   async info() {
+    void this.refreshReport();
     const { versions: probed, gh } = await this.probeCliFacts();
     const versions = { ...probed };
     return {
@@ -60795,11 +61049,12 @@ var LocalHost = class {
       os: process.platform,
       arch: process.arch,
       hostname: hostname3(),
-      home: homedir13(),
+      home: homedir14(),
       labels: [],
       roots: [],
       versions,
       tools: await this.toolVersions(),
+      report: this.reportValue,
       repoMappings: await this.repos.list(),
       capabilities: {
         git: "git" in versions,
@@ -60817,7 +61072,7 @@ var LocalHost = class {
     return new Promise((resolve16, reject) => {
       const env = { ...process.env, ...options.env };
       env.PATH = prependBinDirs(env.PATH);
-      execFile11(
+      execFile12(
         bin,
         args,
         { cwd: options.cwd, env, maxBuffer: EXEC_MAX_BUFFER, timeout: options.timeoutMs },
@@ -60872,7 +61127,7 @@ var localFs = {
     for await (const match of fsGlob(pattern, { cwd })) matches2.push(match);
     return matches2;
   },
-  mkdtemp: (prefix) => mkdtemp(join33(tmpdir2(), prefix)),
+  mkdtemp: (prefix) => mkdtemp(join34(tmpdir2(), prefix)),
   async list(path2) {
     const entries = await readdir7(path2, { withFileTypes: true });
     return entries.map((entry) => ({ name: entry.name, kind: kindOf(entry) }));
@@ -60880,7 +61135,7 @@ var localFs = {
   async mkdir(path2, options) {
     await mkdir6(path2, { recursive: options?.recursive });
   },
-  rm: (path2, options) => rm3(path2, options),
+  rm: (path2, options) => rm4(path2, options),
   rename: (from, to) => rename3(from, to),
   // dereference: copy a symlink's target bytes, as copyFileSync did, so the copy never links back into the source tree.
   copy: (from, to, options) => cp(from, to, {
@@ -61086,6 +61341,12 @@ function chatScope(chat) {
   throw new Error("A chat has neither a worktree nor a project");
 }
 
+// src/server/infra/host/local-host-enabled.ts
+function isLocalHostEnabled() {
+  const value = process.env.BAND_LOCAL_HOST?.trim().toLowerCase();
+  return !(value === "off" || value === "false" || value === "0");
+}
+
 // src/server/infra/host/registry.ts
 var worktreeQueries = new WorktreeQueries();
 var repoQueries2 = new RepoQueries();
@@ -61110,13 +61371,22 @@ var HostRegistry = class {
     return host;
   }
   hostFor(worktreeId2) {
+    if (projectIdOfScope(worktreeId2)) {
+      const id = this.hostIdOfScope(worktreeId2);
+      if (!id) throw new Error("The project has no host yet: it is waiting for a worker");
+      return this.hostById(id);
+    }
     if (this.hosts.size === 1) return this.local;
     return this.hostById(this.hostIdOfScope(worktreeId2) ?? this.local.id);
   }
   /** The host id of a worktree, or of a project chat's scope (the project's coordinator host). */
   hostIdOfScope(scopeId) {
     const projectId = projectIdOfScope(scopeId);
-    if (projectId) return projectQueries.find(projectId)?.coordinatorHostId ?? this.local.id;
+    if (projectId) {
+      const placed = projectQueries.find(projectId)?.coordinatorHostId;
+      if (placed && (placed !== this.local.id || isLocalHostEnabled())) return placed;
+      return isLocalHostEnabled() ? this.local.id : null;
+    }
     return worktreeQueries.findHostId(scopeId);
   }
   /**
@@ -61156,7 +61426,7 @@ var hostRegistry = new HostRegistry(
     // The hub is a host too. Its working copies sit in its own BAND_HOME and read the bare repos by path.
     context: {
       bandHome: () => bandHome(),
-      remote: async (name5) => ({ url: join37(bandHome(), "context", `${name5}.git`) })
+      remote: async (name5) => ({ url: join38(bandHome(), "context", `${name5}.git`) })
     },
     // `gh` is the GitHub plugin's tool: with that plugin disabled the host never runs it. The
     // import is dynamic because the services import this registry.
@@ -61278,27 +61548,27 @@ function textChunk(row) {
 }
 function rowsToEvents(rows) {
   const out = [];
-  let run4 = null;
+  let run5 = null;
   const flush = () => {
-    if (!run4) return;
+    if (!run5) return;
     out.push({
       type: "update",
-      update: { ...run4.update, content: { type: "text", text: run4.text } },
-      eventId: run4.lastId,
-      createdAt: run4.createdAt
+      update: { ...run5.update, content: { type: "text", text: run5.text } },
+      eventId: run5.lastId,
+      createdAt: run5.createdAt
     });
-    run4 = null;
+    run5 = null;
   };
   for (const row of rows) {
     const chunk = textChunk(row);
-    if (chunk && run4 && run4.update.sessionUpdate === chunk.sessionUpdate && (run4.update.messageId ?? null) === (chunk.messageId ?? null)) {
-      if (chunk.content.type === "text") run4.text += chunk.content.text;
-      run4.lastId = row.id;
+    if (chunk && run5 && run5.update.sessionUpdate === chunk.sessionUpdate && (run5.update.messageId ?? null) === (chunk.messageId ?? null)) {
+      if (chunk.content.type === "text") run5.text += chunk.content.text;
+      run5.lastId = row.id;
       continue;
     }
     flush();
     if (chunk) {
-      run4 = {
+      run5 = {
         update: chunk,
         text: chunk.content.type === "text" ? chunk.content.text : "",
         lastId: row.id,
@@ -61415,12 +61685,12 @@ function resolvePolicy(policy, coordinatorModel) {
 // src/server/services/_utils/shared-dir.ts
 import { readdirSync as readdirSync8 } from "node:fs";
 import { mkdir as mkdir7 } from "node:fs/promises";
-import { join as join38 } from "node:path";
+import { join as join39 } from "node:path";
 init_state();
 async function openSharedDir(worktreeId2) {
   const host = hostRegistry.hostFor(worktreeId2);
   if (host.id === hostRegistry.local.id) {
-    const path3 = join38(bandHome(), "shared", worktreeId2);
+    const path3 = join39(bandHome(), "shared", worktreeId2);
     await mkdir7(path3, { recursive: true });
     return {
       path: path3,
@@ -61435,7 +61705,7 @@ async function openSharedDir(worktreeId2) {
   }
   const dirs = (await host.info()).dirs;
   if (!dirs) throw new Error(`Host ${host.id} has no directory for shared files`);
-  const path2 = join38(dirs.shared, worktreeId2);
+  const path2 = join39(dirs.shared, worktreeId2);
   await host.fs.mkdir(path2, { recursive: true });
   return {
     path: path2,
@@ -61451,7 +61721,7 @@ async function openSharedDir(worktreeId2) {
 async function agentExtraDirs(worktreeId2) {
   const host = hostRegistry.hostFor(worktreeId2);
   if (host.id === hostRegistry.local.id) {
-    return [join38(bandHome(), "uploads"), join38(bandHome(), "shared")];
+    return [join39(bandHome(), "uploads"), join39(bandHome(), "shared")];
   }
   const dirs = (await host.info()).dirs;
   return dirs ? [dirs.uploads, dirs.shared] : [];
@@ -62013,13 +62283,13 @@ function parseBatchedCIResponse(data, aliases, defaultBranches) {
     }
     let aggregatedState = "success";
     let aggregatedUrl = null;
-    for (const run4 of latestByWorkflow.values()) {
+    for (const run5 of latestByWorkflow.values()) {
       let runState;
-      if (run4.status === "IN_PROGRESS" || run4.status === "QUEUED") {
-        runState = run4.status === "QUEUED" ? "pending" : "running";
-      } else if (run4.conclusion === "FAILURE") {
+      if (run5.status === "IN_PROGRESS" || run5.status === "QUEUED") {
+        runState = run5.status === "QUEUED" ? "pending" : "running";
+      } else if (run5.conclusion === "FAILURE") {
         runState = "failure";
-      } else if (run4.conclusion === "CANCELLED") {
+      } else if (run5.conclusion === "CANCELLED") {
         runState = "cancelled";
       } else {
         runState = "success";
@@ -62027,7 +62297,7 @@ function parseBatchedCIResponse(data, aliases, defaultBranches) {
       const priority = statePriority(runState);
       if (priority >= statePriority(aggregatedState)) {
         aggregatedState = runState;
-        aggregatedUrl = run4.url;
+        aggregatedUrl = run5.url;
       }
     }
     results.set(alias, {
@@ -62055,14 +62325,14 @@ async function mapLimited(items, limit, fn) {
 }
 
 // src/server/services/github-poll-service.ts
-import { tmpdir as tmpdir5 } from "node:os";
+import { tmpdir as tmpdir6 } from "node:os";
 init_src();
 
 // src/server/infra/subscriptions/github.ts
 init_settings();
 import { createHmac, randomBytes as randomBytes3, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { chmodSync as chmodSync2, existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname11, join as join39 } from "node:path";
+import { dirname as dirname11, join as join40 } from "node:path";
 var GITHUB_HOOK_EVENTS = [
   "pull_request",
   "pull_request_review",
@@ -62077,7 +62347,7 @@ var SNIPPET_LIMIT = 200;
 var githubPrKey = (repo, number4) => `github:pr:${repo}#${number4}`;
 var githubCiKey = (repo, branch) => `github:ci:${repo}@${branch}`;
 function secretPath() {
-  return join39(bandHome(), "github-webhook-secret");
+  return join40(bandHome(), "github-webhook-secret");
 }
 function readWebhookSecret() {
   const fromEnv = process.env.BAND_GITHUB_WEBHOOK_SECRET;
@@ -62213,10 +62483,10 @@ function parseGithubDelivery(eventType, delivery, payload, now = Date.now()) {
     case "check_suite":
     case "workflow_run": {
       if (action !== "completed") return { type: "ignored" };
-      const run4 = obj(body[eventType]);
-      const suite = obj(run4?.check_suite);
-      const branch = str(run4?.head_branch) || str(suite?.head_branch);
-      const sha = str(run4?.head_sha) || str(suite?.head_sha);
+      const run5 = obj(body[eventType]);
+      const suite = obj(run5?.check_suite);
+      const branch = str(run5?.head_branch) || str(suite?.head_branch);
+      const sha = str(run5?.head_sha) || str(suite?.head_sha);
       if (!branch || !/^[0-9a-f]{7,64}$/i.test(sha)) return { type: "ignored" };
       return { type: "check", trigger: { repo, branch, sha } };
     }
@@ -62265,15 +62535,15 @@ function parseCheckRuns(output) {
   const runs = parsed?.check_runs;
   if (!Array.isArray(runs)) throw new Error("Unexpected check-runs response");
   return runs.flatMap((r) => {
-    const run4 = obj(r);
-    if (!run4) return [];
+    const run5 = obj(r);
+    if (!run5) return [];
     return [
       {
-        name: str(run4.name) || "unnamed check",
-        status: str(run4.status),
-        conclusion: typeof run4.conclusion === "string" ? run4.conclusion : null,
-        url: str(run4.html_url) || void 0,
-        headSha: str(run4.head_sha) || void 0
+        name: str(run5.name) || "unnamed check",
+        status: str(run5.status),
+        conclusion: typeof run5.conclusion === "string" ? run5.conclusion : null,
+        url: str(run5.html_url) || void 0,
+        headSha: str(run5.head_sha) || void 0
       }
     ];
   });
@@ -62379,7 +62649,7 @@ function initialCursor(createdAt) {
 }
 
 // src/server/services/_utils/hub-gh-auth.ts
-import { tmpdir as tmpdir4 } from "node:os";
+import { tmpdir as tmpdir5 } from "node:os";
 
 // src/server/services/vault-service.ts
 import { createHash as createHash9, randomUUID as randomUUID13, timingSafeEqual as timingSafeEqual6 } from "node:crypto";
@@ -62786,14 +63056,14 @@ function accountFromIdToken(idToken) {
 // src/server/services/_utils/vault-crypto.ts
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes5 } from "node:crypto";
 import { chmodSync as chmodSync3, existsSync as existsSync13, readFileSync as readFileSync9, renameSync as renameSync5, rmSync as rmSync2, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join40 } from "node:path";
+import { join as join41 } from "node:path";
 init_settings();
 var VERSION = "v1:";
 var KEY_BYTES = 32;
 var NONCE_BYTES = 12;
 var TAG_BYTES = 16;
 function vaultKeyFile() {
-  return join40(bandHome(), "vault.key");
+  return join41(bandHome(), "vault.key");
 }
 function keySource() {
   return process.env.BAND_VAULT_KEY?.trim() ? "env" : "file";
@@ -62853,7 +63123,7 @@ function decrypt(key2, aad, blob2) {
 }
 
 // src/server/services/github-webhook-service.ts
-import { tmpdir as tmpdir3 } from "node:os";
+import { tmpdir as tmpdir4 } from "node:os";
 init_src();
 
 // src/server/services/pushed-sha-service.ts
@@ -64034,7 +64304,7 @@ init_state();
 init_src2();
 import { randomUUID as randomUUID11 } from "node:crypto";
 import { unlinkSync as unlinkSync4 } from "node:fs";
-import { join as join46, posix as posix6 } from "node:path";
+import { join as join48, posix as posix6 } from "node:path";
 
 // ../../packages/host-local/src/git/git-refusals.ts
 var MAX_LISTED_FILES = 3;
@@ -64439,7 +64709,7 @@ var placementInput = external_exports2.object({
 });
 
 // src/server/services/_utils/write-brief.ts
-import { dirname as dirname12, join as join41, posix as posix3 } from "node:path";
+import { dirname as dirname12, join as join42, posix as posix3 } from "node:path";
 
 // src/server/services/_utils/dispatch-brief.ts
 var BRIEF_DIR = ".am";
@@ -64478,7 +64748,7 @@ ${input.scenarios.map((s2, i) => `- S${i + 1}: ${s2.trim()}`).join("\n")}`
 
 // src/server/services/_utils/write-brief.ts
 async function writeBrief(host, worktreePath, brief2, remote) {
-  const p2 = remote ? posix3 : { join: join41 };
+  const p2 = remote ? posix3 : { join: join42 };
   const dir = p2.join(worktreePath, BRIEF_DIR);
   await host.fs.mkdir(dir, { recursive: true });
   await host.fs.writeFile(p2.join(dir, BRIEF_FILE), brief2);
@@ -64588,7 +64858,7 @@ function removeTerminalFromLayout(worktreeId2, terminalId) {
 // src/server/services/ephemeral-lifecycle-service.ts
 import { rmSync as rmSync4 } from "node:fs";
 import { mkdir as mkdir8, readFile as readFile8, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join43, posix as posix5 } from "node:path";
+import { join as join44, posix as posix5 } from "node:path";
 
 // ../../packages/host-remote/src/pty.ts
 import { StringDecoder } from "node:string_decoder";
@@ -66299,6 +66569,7 @@ init_repos();
 init_isolation();
 init_runner_config();
 init_settings_service();
+init_state();
 
 // src/server/services/token-service.ts
 init_src();
@@ -66390,6 +66661,10 @@ var TokenQueries = class _TokenQueries {
   markHostOnline(id, at, fields) {
     this.db().update(hosts).set({ status: "online", lastSeenAt: at, info: fields.info, version: fields.version }).where(eq(hosts.id, id)).run();
   }
+  /** Replaces what a host reported about itself, without touching its status. */
+  setHostInfo(id, info) {
+    this.db().update(hosts).set({ info }).where(eq(hosts.id, id)).run();
+  }
   /** Sets a host's status and, when the worker was last heard from, its last-seen time. */
   setHostStatus(id, status, lastSeenAt) {
     this.db().update(hosts).set(lastSeenAt === void 0 ? { status } : { status, lastSeenAt }).where(eq(hosts.id, id)).run();
@@ -66412,12 +66687,6 @@ var TokenQueries = class _TokenQueries {
   }
 };
 
-// src/server/infra/host/local-host-enabled.ts
-function isLocalHostEnabled() {
-  const value = process.env.BAND_LOCAL_HOST?.trim().toLowerCase();
-  return !(value === "off" || value === "false" || value === "0");
-}
-
 // src/server/services/token-service.ts
 var log19 = createLogger("token-service");
 var SHARED_TOKEN_ID = "shared";
@@ -66444,6 +66713,16 @@ function stringMap(value) {
     Object.entries(value).filter((e) => typeof e[1] === "string")
   );
 }
+function reportOf(info) {
+  const report2 = info?.report;
+  return report2 && Array.isArray(report2.agents) && Array.isArray(report2.tools) ? report2 : null;
+}
+function usableAgents(info) {
+  const report2 = reportOf(info);
+  if (report2)
+    return report2.agents.filter((a) => a.installed && a.loggedIn !== false).map((a) => a.type);
+  return stringList(info?.agents);
+}
 function stringList(value) {
   return Array.isArray(value) ? value.filter((v2) => typeof v2 === "string") : [];
 }
@@ -66707,7 +66986,8 @@ var TokenService = class {
       version: h.version,
       createdAt: h.createdAt,
       info: h.info,
-      agents: stringList(h.info?.agents),
+      agents: usableAgents(h.info),
+      report: reportOf(h.info),
       roots: stringList(h.info?.roots),
       capabilities: capabilityNames(h.info?.capabilities),
       home: typeof h.info?.home === "string" ? h.info.home : null,
@@ -66889,6 +67169,7 @@ var PlacementService = class {
       const tools = stringRecord(info?.tools ?? stored.tools);
       out.push({
         id: row.id,
+        agents: row.agents,
         labels: [
           .../* @__PURE__ */ new Set([...stringList2(row.labels), ...stringList2(info?.labels ?? stored.labels)])
         ],
@@ -66909,10 +67190,12 @@ var PlacementService = class {
    * a host, and a `worktree` worktree never lands on a host that was started
    * for one of those.
    */
-  async place(placement, onlyHosts) {
+  async place(placement, onlyHosts, agent) {
     if (requestedIsolation(placement.environment ?? null) !== "worktree") return null;
     const fits = (await this.candidates()).filter(
-      (c) => !isExclusiveHost(c.labels) && (onlyHosts === void 0 || onlyHosts.includes(c.id)) && matches(c, placement)
+      (c) => !isExclusiveHost(c.labels) && (onlyHosts === void 0 || onlyHosts.includes(c.id)) && // A worker must report the agent installed and logged in. The hub's own machine is
+      // described live elsewhere, so it is not held to a report here.
+      (agent === void 0 || c.id === LOCAL_HOST_ID2 || c.agents.includes(agent)) && matches(c, placement)
     );
     if (fits.length === 0) return null;
     const load = this.queries.worktreeCounts();
@@ -66938,7 +67221,8 @@ var PlacementService = class {
     const open4 = this.queries.findOpenForWorktree(worktreeId2);
     if (open4) return { kind: "request", requestId: open4.id };
     const holders = this.holdersOfRemotelessRepo(input.repo);
-    const hostId2 = await this.place(placement, holders ?? void 0);
+    const agent = input.codingAgentId ? loadSettings().codingAgents?.find((a) => a.id === input.codingAgentId)?.type ?? input.codingAgentId : void 0;
+    const hostId2 = await this.place(placement, holders ?? void 0, agent);
     if (hostId2) return { kind: "host", hostId: hostId2 };
     if (holders) {
       throw new Error(
@@ -67195,7 +67479,7 @@ var placementService = new PlacementService();
 import { spawn as spawn8 } from "node:child_process";
 import { randomBytes as randomBytes10 } from "node:crypto";
 import { appendFileSync, mkdirSync as mkdirSync7, readFileSync as readFileSync10, rmSync as rmSync3, statSync as statSync11 } from "node:fs";
-import { dirname as dirname13, join as join42 } from "node:path";
+import { dirname as dirname13, join as join43 } from "node:path";
 init_src();
 
 // src/server/infra/db/queries/runner-machines.ts
@@ -68189,7 +68473,7 @@ var RunnerService = class {
     }
   }
   logFile(requestId2) {
-    return join42(bandHome(), "runners", "logs", `${requestId2}.log`);
+    return join43(bandHome(), "runners", "logs", `${requestId2}.log`);
   }
   /** Every valid runner in settings. */
   configs() {
@@ -68205,12 +68489,12 @@ var RunnerService = class {
   }
   /** Whether the worker id belongs to an attempt in flight. */
   isAttempting(workerId) {
-    for (const run4 of this.running.values()) if (run4.workerId === workerId) return true;
+    for (const run5 of this.running.values()) if (run5.workerId === workerId) return true;
     return false;
   }
   runningCount(runnerId2) {
     let n = 0;
-    for (const run4 of this.running.values()) if (run4.runnerId === runnerId2) n++;
+    for (const run5 of this.running.values()) if (run5.runnerId === runnerId2) n++;
     return n;
   }
   // ---- leasing -------------------------------------------------------------
@@ -68246,7 +68530,7 @@ var RunnerService = class {
     }
   }
   begin(runner, row) {
-    const run4 = {
+    const run5 = {
       requestId: row.id,
       runnerId: runner.id,
       worktreeId: row.worktreeId,
@@ -68257,27 +68541,27 @@ var RunnerService = class {
       endedAt: null,
       error: null
     };
-    this.running.set(row.id, run4);
-    const done = this.run(runner, row, run4).catch(
+    this.running.set(row.id, run5);
+    const done = this.run(runner, row, run5).catch(
       (err) => log22.error(`run of ${row.id} crashed: ${err instanceof Error ? err.stack : err}`)
     ).finally(() => {
       this.running.delete(row.id);
-      run4.endedAt = Date.now();
-      this.history.push(run4);
+      run5.endedAt = Date.now();
+      this.history.push(run5);
       if (this.history.length > HISTORY_LIMIT) this.history.shift();
       this.settled.delete(done);
     });
     this.settled.add(done);
   }
   // ---- one request ---------------------------------------------------------
-  async run(runner, row, run4) {
+  async run(runner, row, run5) {
     const runLog = new RunLog(this.logFile(row.id));
     runLog.write("hub", `runner ${runner.id} took request ${row.id} for ${row.worktreeId}`);
     const environment = parseRequestEnvironment(row);
     if (!environment.ok) {
       runLog.write("hub", environment.error);
-      run4.status = "failed";
-      run4.error = environment.error;
+      run5.status = "failed";
+      run5.error = environment.error;
       try {
         placementService.fail(row.id, environment.error);
       } catch (err) {
@@ -68287,19 +68571,19 @@ var RunnerService = class {
     }
     let lastError = "";
     for (let attempt = 1; attempt <= ATTEMPTS; attempt++) {
-      run4.attempt = attempt;
+      run5.attempt = attempt;
       runLog.write("hub", `attempt ${attempt} of ${ATTEMPTS}`);
       const attemptState = { hostId: null, token: null };
       try {
-        const hostId2 = await this.attempt(runner, row, run4, runLog, attemptState);
-        run4.workerId = hostId2;
-        run4.status = "ready";
+        const hostId2 = await this.attempt(runner, row, run5, runLog, attemptState);
+        run5.workerId = hostId2;
+        run5.status = "ready";
         runLog.write("hub", `worker ${hostId2} said hello; request fulfilled`);
         return;
       } catch (err) {
         if (err instanceof Aborted) {
-          run4.status = "aborted";
-          run4.error = err.message;
+          run5.status = "aborted";
+          run5.error = err.message;
           runLog.write("hub", `stopped: ${err.message}`);
           await this.cleanup(runner, row, attemptState, runLog);
           return;
@@ -68310,8 +68594,8 @@ var RunnerService = class {
       }
     }
     const reason = this.failureReason(runner, lastError, runLog);
-    run4.status = "failed";
-    run4.error = lastError;
+    run5.status = "failed";
+    run5.error = lastError;
     try {
       placementService.fail(row.id, reason);
     } catch (err) {
@@ -68384,13 +68668,13 @@ ${tail}` : head;
    * runner holds a snapshot for tries `restore` first, and starts a fresh worker with `spawn` when
    * that fails, so the git and session state the sleep stored is what brings the worktree back.
    */
-  async attempt(runner, row, run4, runLog, state2) {
+  async attempt(runner, row, run5, runLog, state2) {
     const wake = wakeOf(row);
     const snapshot = wake ? this.restorableSnapshot(runner, wake.hostId) : void 0;
     if (snapshot) {
       this.restoring.add(snapshot.id);
       try {
-        return await this.launch(runner, row, run4, runLog, state2, "restore", snapshot);
+        return await this.launch(runner, row, run5, runLog, state2, "restore", snapshot);
       } catch (err) {
         if (err instanceof Aborted) throw err;
         runLog.write(
@@ -68403,7 +68687,7 @@ ${tail}` : head;
         this.restoring.delete(snapshot.id);
       }
     }
-    return this.launch(runner, row, run4, runLog, state2, "spawn");
+    return this.launch(runner, row, run5, runLog, state2, "spawn");
   }
   /** The snapshot a wake can restore from: this runner's, still alive, and the runner has a `restore` hook. */
   restorableSnapshot(runner, hostId2) {
@@ -68413,7 +68697,7 @@ ${tail}` : head;
       return void 0;
     return latest;
   }
-  async launch(runner, row, run4, runLog, state2, kind, snapshot) {
+  async launch(runner, row, run5, runLog, state2, kind, snapshot) {
     const deadline = Date.now() + runner.timeoutSec * 1e3;
     const labelList = Object.entries(row.labels).map(([k2, v2]) => `${k2}=${v2}`);
     const wanted = requestedIsolation(row.environment);
@@ -68425,7 +68709,7 @@ ${tail}` : head;
     state2.reused = wake !== null;
     state2.token = issued.token;
     runLog.addSecret(issued.token);
-    run4.workerId = issued.hostId;
+    run5.workerId = issued.hostId;
     runLog.write("hub", `issued worker ${issued.hostId}`);
     const machineId = this.recordMachine(runner, row, issued.hostId);
     state2.machineId = machineId;
@@ -68555,11 +68839,11 @@ ${tail}` : head;
   destroyMachine(machineId, reason) {
     const inflight = this.destroying.get(machineId);
     if (inflight) return inflight;
-    const run4 = this.doDestroyMachine(machineId, reason).finally(
+    const run5 = this.doDestroyMachine(machineId, reason).finally(
       () => this.destroying.delete(machineId)
     );
-    this.destroying.set(machineId, run4);
-    return run4;
+    this.destroying.set(machineId, run5);
+    return run5;
   }
   async doDestroyMachine(machineId, reason) {
     const machine = this.machines.get(machineId);
@@ -68568,7 +68852,7 @@ ${tail}` : head;
     const runner = this.findRunner(machine.runnerId);
     const request = machine.requestId ? placementService.get(machine.requestId) : void 0;
     const runLog = new RunLog(
-      machine.requestId ? this.logFile(machine.requestId) : join42(bandHome(), "runners", "logs", `${machine.id}.log`)
+      machine.requestId ? this.logFile(machine.requestId) : join43(bandHome(), "runners", "logs", `${machine.id}.log`)
     );
     runLog.write(
       "hub",
@@ -68616,7 +68900,7 @@ ${tail}` : head;
   /** Runs `destroy` for a machine the hub has no record of, named only by the handle `status` printed. */
   async destroyHandle(runner, handle, reason) {
     if (!runner.destroy) return false;
-    const file2 = join42(bandHome(), "runners", "logs", "reaper.log");
+    const file2 = join43(bandHome(), "runners", "logs", "reaper.log");
     try {
       if (statSync11(file2).size > LOG_FILE_LIMIT) rmSync3(file2, { force: true });
     } catch {
@@ -68838,7 +69122,7 @@ ${tail}` : head;
       // The repo's current environment image (plan step 3.2), empty before its first ready build.
       BAND_REPO_IMAGE: row ? this.repoImage(row.repo) : "",
       BAND_RUNNER_ID: runner.id,
-      BAND_RUNNER_DIR: join42(bandHome(), "runners", runner.id),
+      BAND_RUNNER_DIR: join43(bandHome(), "runners", runner.id),
       BAND_NODE: process.execPath
     });
     if (runner.desktop) env.BAND_DESKTOP = "1";
@@ -68864,7 +69148,7 @@ ${tail}` : head;
    */
   runHook(opts) {
     const { runner, name: name5, path: path2, env, timeoutMs, runLog, watch, onStdout, onStderr } = opts;
-    const cwd = join42(bandHome(), "runners", runner.id);
+    const cwd = join43(bandHome(), "runners", runner.id);
     mkdirSync7(cwd, { recursive: true, mode: 448 });
     return new Promise((resolve16, reject) => {
       let child;
@@ -68965,7 +69249,7 @@ function idleTimeoutMs() {
   return Number.isFinite(raw) && raw > 0 ? raw : void 0;
 }
 function sleepDir(worktreeId2) {
-  return join43(bandHome(), "sleep", worktreeId2);
+  return join44(bandHome(), "sleep", worktreeId2);
 }
 var errorText2 = (err) => err instanceof Error ? err.message : String(err);
 var EphemeralLifecycleService = class {
@@ -69266,7 +69550,7 @@ var EphemeralLifecycleService = class {
       const dir = sleepDir(worktreeId2);
       try {
         await mkdir8(dir, { recursive: true, mode: 448 });
-        await writeFile5(join43(dir, "snapshot.bundle"), await host.fs.readFile(bundle), {
+        await writeFile5(join44(dir, "snapshot.bundle"), await host.fs.readFile(bundle), {
           mode: 384
         });
       } catch (err) {
@@ -69290,7 +69574,7 @@ var EphemeralLifecycleService = class {
     try {
       const dir = sleepDir(worktreeId2);
       await mkdir8(dir, { recursive: true, mode: 448 });
-      await writeFile5(join43(dir, "sessions.json"), JSON.stringify({ files }), { mode: 384 });
+      await writeFile5(join44(dir, "sessions.json"), JSON.stringify({ files }), { mode: 384 });
     } catch (err) {
       log23.warn(`could not keep the agent sessions of ${worktreeId2}: ${errorText2(err)}`);
       return [];
@@ -69416,7 +69700,7 @@ var EphemeralLifecycleService = class {
       const bundle = posix5.join(wipDir, `${row.worktreeId}.bundle`);
       await host.fs.writeFile(
         bundle,
-        await readFile8(join43(sleepDir(row.worktreeId), "snapshot.bundle"))
+        await readFile8(join44(sleepDir(row.worktreeId), "snapshot.bundle"))
       );
       try {
         await git3(["fetch", "--force", bundle, `${local}:${local}`]);
@@ -69473,7 +69757,7 @@ var EphemeralLifecycleService = class {
     if (row.sessionIds.length === 0) return;
     let files;
     try {
-      files = JSON.parse(await readFile8(join43(sleepDir(row.worktreeId), "sessions.json"), "utf8")).files;
+      files = JSON.parse(await readFile8(join44(sleepDir(row.worktreeId), "sessions.json"), "utf8")).files;
     } catch (err) {
       log23.warn(`${row.worktreeId}: no saved agent sessions: ${errorText2(err)}`);
       return;
@@ -69509,12 +69793,100 @@ init_worktree_id();
 import { randomBytes as randomBytes12 } from "node:crypto";
 init_worktrees();
 
+// src/server/services/_utils/project-instructions.ts
+var INSTRUCTIONS_FILE = "AGENTS.md";
+var CLAUDE_FILE = "CLAUDE.md";
+var CLAUDE_TEXT = `@${INSTRUCTIONS_FILE}
+`;
+function defaultInstructions(view4) {
+  const p2 = view4.policy;
+  const repos2 = view4.repos.map((r) => `- \`${r.repo}\`${r.role ? ` (role: ${r.role})` : ""}`).join("\n");
+  const limits = [
+    p2.maxConcurrent ? `at most ${p2.maxConcurrent} worker agents run at once` : "no limit on concurrent worker agents",
+    p2.budgetUsd ? `a soft budget of $${p2.budgetUsd} for the project` : "no budget limit",
+    `worker agents run at isolation "${p2.isolationFloor}" or stronger`,
+    p2.labels.length ? `workers go only on hosts labeled ${p2.labels.join(", ")}` : "workers may go on any host"
+  ].join("; ");
+  const autonomy = p2.autonomy === "observe" ? "Autonomy is observe. You may read project state and worker chats. You may not message, stop or dispatch anything. Report what you find and recommend actions to the user." : p2.autoMerge ? "Autonomy is autonomous with auto-merge on. You may dispatch workers within the limits and merge pull requests whose CI passed." : "Autonomy is autonomous. You may dispatch workers within the limits. Merging still needs the user's confirmation.";
+  const folderEdits = p2.autonomy === "autonomous" ? "When the user asks for such an edit, you may commit it, and you may push it because autonomy is autonomous." : `When the user asks for such an edit, commit it but do not push without the user's confirmation, because autonomy is ${p2.autonomy}.`;
+  return `${[
+    `# Coordinator of the Band project "${view4.name}"`,
+    view4.description ? `Project description: ${view4.description}` : "",
+    "You coordinate this project. Plan the work across the project's repos, hand it to worker agents, check on them and keep the user informed. Each worker agent works in one git worktree of one repo, with its own chat. Work that spans repos takes one worker per repo, and you keep them in step.",
+    "This file is yours and the user's to edit. It started from the project's settings at creation. The Band hub enforces the limits below in its tools whatever this file says, so a refused call names the reason and you should tell the user what blocked you instead of retrying.",
+    `## Working directory
+
+You run in the project folder on the coordinator host. It is the working copy of the project context (notes.md, docs/, learnings/, inbox/, handoffs/) and has a checkout of every project repo's default branch under \`repos/<repo>/\` (a clone of the repo's default branch that tracks \`origin/<default>\`). Read the current code there, or through repo_read, repo_search and repo_log. Band fetches before your turns and fast-forwards a checkout only when it is clean, so a checkout with local changes can be behind origin. Code changes go through worker agents (worktree_create). Do not edit a default branch checkout unless the user explicitly asks you to. ${folderEdits} The folder \`repos/\` is never synced to the context repo. Everything else in the project folder (notes, docs, inbox, handoffs, learnings and any file you or the user add) syncs to the hub and to every worker of the project on its own, within seconds: write a file and the others see it, with no commit or push.`,
+    `## Repos
+
+${repos2 || "- none yet"}`,
+    `## Models and limits
+
+You run on ${p2.models.coordinator}, worker agents on ${p2.models.worker}, reviewers on ${p2.models.reviewer}. Limits: ${limits}.
+
+${autonomy}`,
+    `## Context
+
+The project context repo "${view4.contextName}" is shared by every agent in the project, and the user context holds the user's preferences. Read them before you plan. Layout of the project context: notes.md (running notes), docs/ (design and contracts), media/ (screenshots, recordings), inbox/<agent>.md (pointers to handoffs for an agent), handoffs/ (one file per handoff), learnings/ (what agents learned). Use context_search to find things, context_append_learning to record what future agents should know, and context_handoff to pass work on. Write contracts between repos (API shapes, event formats) to docs/ so the agent on the other side can read them.`,
+    `## Tools
+
+You act on the project only through the ${COORDINATOR_SERVER} tools: project_status (worktrees, agents, pull requests, spend), worktrees_list, worktree_create, chats_read, chats_send and worktree_stop, plus repo_read {repo, path}, repo_search {repo, query} and repo_log {repo, n} for the default branch checkouts. They are limited to this project's worktrees and repos.`,
+    "## Dispatching\n\nworktree_create starts a worker agent in a new worktree of one repo of the project, on the branch you name, with your brief in .am/BRIEF.md. Write the brief so the worker can act on it alone: the goal, the constraints, the contracts with other repos and what is out of scope, plus acceptance scenarios it can check. For work across repos, start one worker per repo, usually on the same branch name, put the contract between them in docs/ of the project folder first, and decide the order their pull requests merge in.",
+    `## Wake-ups
+
+Band wakes you with a "Subscription update" message when something needs you: a worker chat ended its turn with an error, is waiting for a permission or an answer, or finished; a pull request of a project worktree has a review comment, a CI result or was merged or closed; or a new file appeared in inbox/ or handoffs/ of the project context. The message names the chat id or the file path. Read the source before you act on it. Events are batched, so one message can carry several. A pull request's subscriptions end when it merges or closes.`,
+    `## Notes and the inbox
+
+You are the only writer of notes.md in the project context: workers do not edit it, so keep it current with decisions and status. learnings/ is append-only: add entries, never rewrite or delete them. Handoffs from workers land in handoffs/<stamp>-<from>-to-<to>.md and a pointer line in inbox/<to>.md. When you have dealt with an item in inbox/ or handoffs/, move the file into inbox/done/ (a plain move in the project folder, which syncs on its own). A file in inbox/done/ does not wake you again.`,
+    "## Merging\n\nNever merge a pull request unless the user confirmed it in this conversation or auto-merge is on."
+  ].filter(Boolean).join("\n\n")}
+`;
+}
+
+// src/server/services/context-browser-service.ts
+import { mkdtempSync, rmSync as rmSync6 } from "node:fs";
+import { tmpdir as tmpdir3 } from "node:os";
+import { join as join46 } from "node:path";
+
+// src/server/services/_utils/context-redaction.ts
+function scanForSecrets(text3) {
+  return scanText("", text3, [], { looseAssignments: true }).map((f2) => ({
+    kind: RULE_LABELS[f2.rule] ?? f2.rule,
+    line: f2.line
+  }));
+}
+var PLACEHOLDER = "[redacted]";
+var EXTRA_PATTERNS = [
+  /\bglpat-[A-Za-z0-9_-]{16,}/g,
+  /\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{16,}/g,
+  /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g,
+  // Credentials inside URLs: scheme://user:password@host.
+  /(?<=:\/\/[^\s/:@]+:)[^\s/@]+(?=@)/g
+];
+var ASSIGNMENT2 = /\b([A-Za-z0-9_.-]*(?:password|passwd|secret|token|api[_-]?key|access[_-]?key|private[_-]?key|credential)[A-Za-z0-9_.-]*)(["']?\s*[:=]\s*["']?)([^\s"',;]{6,})/gi;
+var globally = (re) => new RegExp(re.source, re.flags.includes("g") ? re.flags : `${re.flags}g`);
+function redactSecrets(text3) {
+  let out = text3;
+  for (const [kind, pattern] of SECRET_PATTERNS) {
+    const re = globally(pattern);
+    out = kind === "private key" ? out.replace(
+      /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g,
+      PLACEHOLDER
+    ) : kind === "bearer token" ? out.replace(re, `Bearer ${PLACEHOLDER}`) : out.replace(re, PLACEHOLDER);
+  }
+  for (const pattern of EXTRA_PATTERNS) out = out.replace(pattern, PLACEHOLDER);
+  return out.replace(
+    ASSIGNMENT2,
+    (match, name5, sep13, value) => value.startsWith("[redacted") ? match : `${name5}${sep13}${PLACEHOLDER}`
+  );
+}
+
 // src/server/services/context-service.ts
 init_src();
 import { spawn as spawn9 } from "node:child_process";
 import { randomBytes as randomBytes11 } from "node:crypto";
 import { mkdirSync as mkdirSync8, rmSync as rmSync5 } from "node:fs";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 
 // src/server/infra/db/queries/contexts.ts
 init_drizzle_orm();
@@ -69581,10 +69953,10 @@ function toView2(row) {
   };
 }
 function contextRoot() {
-  return join44(bandHome(), "context");
+  return join45(bandHome(), "context");
 }
 function contextRepoPath(name5) {
-  return join44(contextRoot(), `${name5}.git`);
+  return join45(contextRoot(), `${name5}.git`);
 }
 function contextGitEnv(extra = {}) {
   return {
@@ -70084,6 +70456,323 @@ var ContextService = class {
 };
 var contextService = new ContextService();
 
+// src/server/services/context-browser-service.ts
+var MAX_FILE_BYTES2 = 1024 * 1024;
+var MAX_DIFF_BYTES2 = 200 * 1024;
+var MAX_MESSAGE = 200;
+var LOG_LIMIT = 200;
+var CONFLICT = /^(.*?)\.conflict-([A-Za-z0-9]+)((?:\.[^/.]+)?)$/;
+var ContextConflictError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ContextConflictError";
+  }
+};
+function conflictOriginal(path2) {
+  const m2 = CONFLICT.exec(path2);
+  return m2 ? `${m2[1]}${m2[3]}` : null;
+}
+function hasControl(text3, allowWhitespace = false) {
+  for (let i = 0; i < text3.length; i++) {
+    const c = text3.charCodeAt(i);
+    if (allowWhitespace && (c === 9 || c === 10 || c === 13)) continue;
+    if (c < 32 || c === 127) return true;
+  }
+  return false;
+}
+function checkPath(path2) {
+  const bad = !path2 || path2.length > 500 || path2.startsWith("/") || path2.endsWith("/") || path2.startsWith(":") || hasControl(path2) || path2.includes("\\") || path2.split("/").some((seg) => seg === "" || seg === "." || seg === ".." || seg === ".git");
+  if (bad) throw new ContextInputError(`"${path2}" is not a valid path inside a context`);
+  return path2;
+}
+function checkMessage(message) {
+  const trimmed = message.trim();
+  if (!trimmed) throw new ContextInputError("A commit message is required");
+  if (hasControl(trimmed, true)) {
+    throw new ContextInputError("The commit message holds control characters");
+  }
+  if (scanForSecrets(trimmed).length > 0) {
+    throw new ContextInputError("Not saved: the commit message looks like it holds a credential.");
+  }
+  if (trimmed.length > MAX_MESSAGE) {
+    throw new ContextInputError(`The commit message is longer than ${MAX_MESSAGE} characters`);
+  }
+  return trimmed;
+}
+var ContextBrowserService = class {
+  repo(name5) {
+    contextService.require(name5);
+    return contextRepoPath(name5);
+  }
+  /** The commit HEAD points at, or null in a repo with no commits. */
+  async head(repo) {
+    const r = await runGit(["rev-parse", "--verify", "-q", "HEAD^{commit}"], { cwd: repo });
+    return r.code === 0 ? r.stdout.trim() : null;
+  }
+  async tree(name5) {
+    const repo = this.repo(name5);
+    const head = await this.head(repo);
+    if (!head) return { head, entries: [] };
+    const out = await git2(["ls-tree", "-r", "-z", "--long", head], { cwd: repo });
+    const entries = [];
+    for (const rec of out.split("\0")) {
+      if (!rec) continue;
+      const tab = rec.indexOf("	");
+      const meta = rec.slice(0, tab).split(/\s+/);
+      if (meta[1] !== "blob") continue;
+      const path2 = rec.slice(tab + 1);
+      entries.push({ path: path2, size: Number(meta[3]) || 0, conflictOf: conflictOriginal(path2) });
+    }
+    entries.sort((a, b2) => a.path.localeCompare(b2.path));
+    return { head, entries };
+  }
+  async file(name5, path2) {
+    const repo = this.repo(name5);
+    checkPath(path2);
+    const head = await this.head(repo);
+    if (!head) throw new ContextInputError(`"${path2}" does not exist`);
+    const size = await runGit(["cat-file", "-s", `${head}:${path2}`], { cwd: repo });
+    if (size.code !== 0) throw new ContextInputError(`"${path2}" does not exist`);
+    const bytes = Number(size.stdout.trim());
+    const type = await git2(["cat-file", "-t", `${head}:${path2}`], { cwd: repo });
+    if (type.trim() !== "blob") throw new ContextInputError(`"${path2}" is a folder`);
+    if (bytes > MAX_FILE_BYTES2) {
+      return { path: path2, binary: true, content: null, size: bytes, commit: head };
+    }
+    const content = await git2(["cat-file", "blob", `${head}:${path2}`], { cwd: repo });
+    if (content.includes("\0") || content.includes("\uFFFD")) {
+      return { path: path2, binary: true, content: null, size: bytes, commit: head };
+    }
+    return { path: path2, binary: false, content, size: bytes, commit: head };
+  }
+  async log(name5, path2, limit = 50) {
+    const repo = this.repo(name5);
+    if (path2) checkPath(path2);
+    if (!await this.head(repo)) return [];
+    const args = [
+      "--literal-pathspecs",
+      "log",
+      "--no-color",
+      `-n${Math.min(Math.max(limit, 1), LOG_LIMIT)}`,
+      "--format=%H%x1f%an%x1f%at%x1f%s%x1e"
+    ];
+    if (path2) args.push("--", path2);
+    const out = await git2(args, { cwd: repo });
+    return out.split("").map((rec) => rec.trim()).filter(Boolean).map((rec) => {
+      const [sha = "", author = "", at = "0", subject = ""] = rec.split("");
+      return { sha, author, at: Number(at) * 1e3, subject };
+    });
+  }
+  async diff(name5, sha, path2) {
+    const repo = this.repo(name5);
+    if (!/^[0-9a-f]{40}$/.test(sha)) throw new ContextInputError("Not a commit id");
+    if (path2) checkPath(path2);
+    const exists4 = await runGit(["cat-file", "-e", `${sha}^{commit}`], { cwd: repo });
+    if (exists4.code !== 0) throw new ContextInputError("No such commit");
+    const scope3 = path2 ? ["--", path2] : [];
+    const patch = await git2(
+      [
+        "--literal-pathspecs",
+        "show",
+        "--root",
+        "--format=",
+        "--patch",
+        "--no-color",
+        "-M",
+        "--no-ext-diff",
+        sha,
+        ...scope3
+      ],
+      { cwd: repo }
+    );
+    const names = await git2(
+      [
+        "diff-tree",
+        "--root",
+        "-m",
+        "--first-parent",
+        "--no-commit-id",
+        "--name-status",
+        "-r",
+        "-M",
+        sha
+      ],
+      { cwd: repo }
+    );
+    const files = names.split("\n").filter(Boolean).map((line2) => {
+      const parts = line2.split("	");
+      return { status: parts[0] ?? "M", path: parts[parts.length - 1] ?? "" };
+    });
+    const patchBytes = Buffer.from(patch);
+    const truncated = patchBytes.length > MAX_DIFF_BYTES2;
+    return {
+      diff: truncated ? patchBytes.subarray(0, MAX_DIFF_BYTES2).toString("utf8") : patch,
+      truncated,
+      files
+    };
+  }
+  /** The newest learnings and handoffs files, one row per file, newest commit first. */
+  async recent(name5, limit = 20) {
+    const repo = this.repo(name5);
+    if (!await this.head(repo)) return [];
+    const out = await git2(
+      [
+        "log",
+        "--no-color",
+        "-n300",
+        "--name-only",
+        "--format=%x1e%H%x1f%at%x1f%s",
+        "--",
+        "learnings",
+        "handoffs"
+      ],
+      { cwd: repo }
+    );
+    const seen = /* @__PURE__ */ new Set();
+    const rows = [];
+    for (const block of out.split("")) {
+      const [header = "", ...files] = block.split("\n").filter((l, i) => i === 0 || l.trim());
+      const [sha = "", at = "0", subject = ""] = header.split("");
+      if (!sha) continue;
+      for (const path2 of files) {
+        const kind = path2.startsWith("learnings/") ? "learnings" : path2.startsWith("handoffs/") ? "handoffs" : null;
+        if (!kind || path2.endsWith(".gitkeep") || seen.has(path2)) continue;
+        seen.add(path2);
+        rows.push({ path: path2, kind, sha, at: Number(at) * 1e3, subject });
+      }
+    }
+    const { entries } = await this.tree(name5);
+    const live = new Set(entries.map((e) => e.path));
+    return rows.filter((r) => live.has(r.path)).slice(0, limit);
+  }
+  /**
+   * Saves `content` at `path` as one commit. `base` is the commit the editor
+   * loaded: when the file changed since, the save is refused so an edit never
+   * overwrites a newer version unseen.
+   */
+  async write(name5, path2, content, message, base) {
+    checkPath(path2);
+    if (Buffer.byteLength(content) > MAX_FILE_BYTES2) {
+      throw new ContextInputError("The file is larger than 1 MiB");
+    }
+    const found = scanForSecrets(content);
+    if (found.length > 0) {
+      const list = found.map((f2) => `${f2.kind} on line ${f2.line}`).join(", ");
+      throw new ContextInputError(
+        `Not saved: the text looks like it holds a credential (${list}). Remove it first.`
+      );
+    }
+    return this.commit(name5, [{ path: path2, content }], checkMessage(message), { base, guard: path2 });
+  }
+  /** Keeps one version of a conflicted file at its original path and deletes the conflict copy. */
+  async resolveConflict(name5, conflictPath, keep, message) {
+    checkPath(conflictPath);
+    const original = conflictOriginal(conflictPath);
+    if (!original) throw new ContextInputError(`"${conflictPath}" is not a conflict copy`);
+    const msg = checkMessage(
+      message ?? `Resolve conflict in ${original}: keep ${keep === "conflict" ? "the conflict copy" : "the original"}`
+    );
+    const repo = this.repo(name5);
+    const result = await contextService.exclusive(name5, async () => {
+      const head = await this.head(repo);
+      if (!head) throw new ContextInputError(`"${conflictPath}" does not exist`);
+      const blob2 = await runGit(["rev-parse", "--verify", "-q", `${head}:${conflictPath}`], {
+        cwd: repo
+      });
+      if (blob2.code !== 0) throw new ContextInputError(`"${conflictPath}" does not exist`);
+      if (keep === "original") {
+        const orig = await runGit(["rev-parse", "--verify", "-q", `${head}:${original}`], {
+          cwd: repo
+        });
+        if (orig.code !== 0) {
+          throw new ContextInputError(
+            `"${original}" does not exist, so "${conflictPath}" is not a conflict copy of anything`
+          );
+        }
+      }
+      const changes = [{ path: conflictPath }];
+      if (keep === "conflict") changes.push({ path: original, blob: blob2.stdout.trim() });
+      return this.commitLocked(repo, name5, head, changes, msg);
+    });
+    return { commit: result.commit, path: original };
+  }
+  commit(name5, changes, message, opts = {}) {
+    const repo = this.repo(name5);
+    return contextService.exclusive(name5, async () => {
+      const head = await this.head(repo);
+      if (head && opts.base && opts.guard && head !== opts.base) {
+        const at = async (rev) => {
+          const r = await runGit(["rev-parse", "--verify", "-q", `${rev}:${opts.guard}`], {
+            cwd: repo
+          });
+          return r.code === 0 ? r.stdout.trim() : "";
+        };
+        if (await at(head) !== await at(opts.base)) {
+          throw new ContextConflictError(
+            `"${opts.guard}" changed since you opened it. Reload it to see the newer version.`
+          );
+        }
+      }
+      return this.commitLocked(repo, name5, head, changes, message, opts.author);
+    });
+  }
+  /** Builds the commit in a private index. The caller holds the context's lock. */
+  async commitLocked(repo, name5, head, changes, message, author) {
+    const dir = mkdtempSync(join46(tmpdir3(), "band-context-index-"));
+    try {
+      const env = contextGitEnv({
+        GIT_INDEX_FILE: join46(dir, "index"),
+        ...author ? {
+          GIT_AUTHOR_NAME: author,
+          GIT_AUTHOR_EMAIL: `${author}@localhost`,
+          GIT_COMMITTER_NAME: author,
+          GIT_COMMITTER_EMAIL: `${author}@localhost`
+        } : {}
+      });
+      const opts = { cwd: repo, env };
+      if (head) await git2(["read-tree", head], opts);
+      for (const change of changes) {
+        if (change.content === void 0 && change.blob === void 0) {
+          await git2(["update-index", "--index-info"], {
+            ...opts,
+            input: `0 ${"0".repeat(40)}	${change.path}
+`
+          });
+          continue;
+        }
+        const oid = change.blob ?? (await git2(["hash-object", "-w", "--stdin"], { ...opts, input: change.content })).trim();
+        const r = await runGit(
+          ["update-index", "--add", "--cacheinfo", `100644,${oid},${change.path}`],
+          opts
+        );
+        if (r.code !== 0) {
+          throw new ContextInputError(
+            `Cannot save "${change.path}": ${r.stderr.trim().slice(0, 200)}`
+          );
+        }
+      }
+      const tree = (await git2(["write-tree"], opts)).trim();
+      if (head) {
+        const current3 = (await git2(["rev-parse", `${head}^{tree}`], opts)).trim();
+        if (current3 === tree) return { commit: head, changed: false };
+      }
+      const commit = (await git2(["commit-tree", tree, ...head ? ["-p", head] : [], "-m", message], opts)).trim();
+      const ref2 = (await git2(["symbolic-ref", "-q", "HEAD"], { cwd: repo })).trim();
+      const moved = await runGit(["update-ref", "-m", "context browser", ref2, commit, head ?? ""], {
+        cwd: repo
+      });
+      if (moved.code !== 0) {
+        throw new ContextConflictError("The context changed while saving. Reload and try again.");
+      }
+      contextService.syncSoon(name5);
+      return { commit, changed: true };
+    } finally {
+      rmSync6(dir, { recursive: true, force: true });
+    }
+  }
+};
+var contextBrowserService = new ContextBrowserService();
+
 // src/server/services/project-service.ts
 init_state();
 var log25 = createLogger("project-service");
@@ -70230,8 +70919,41 @@ var ProjectService = class {
       throw err;
     }
     log25.info(`created project ${name5} with ${repos2.length} repos`);
+    await this.seedInstructions(row.id);
     return this.get(row.id);
   }
+  /**
+   * Gives the project's context repo a default `AGENTS.md` and a `CLAUDE.md` that imports it, when
+   * it has none. The files then belong to the user and are never rewritten. Never throws, so a
+   * failure leaves a project without them and the coordinator without instructions.
+   */
+  async seedInstructions(ref2) {
+    try {
+      const view4 = this.get(ref2);
+      const have = new Set(
+        (await contextBrowserService.tree(view4.contextName)).entries.map((e) => e.path)
+      );
+      const files = [
+        [
+          INSTRUCTIONS_FILE,
+          defaultInstructions({
+            name: view4.name,
+            description: view4.description,
+            contextName: view4.contextName,
+            repos: view4.repos,
+            policy: view4.effectivePolicy
+          })
+        ],
+        [CLAUDE_FILE, CLAUDE_TEXT]
+      ];
+      for (const [path2, content] of files) {
+        if (have.has(path2)) continue;
+        await contextBrowserService.write(view4.contextName, path2, content, `Add ${path2}`);
+      }
+    } catch (err) {
+      log25.warn({ project: ref2, err }, "could not add the default AGENTS.md to the project context");
+    }
+  }
   update(ref2, patch) {
     const row = this.require(ref2);
     const set2 = {};
@@ -70468,59 +71190,49 @@ var projectService = new ProjectService();
 
 // src/server/services/project-folder-service.ts
 init_state();
+var LOCAL_HOST_ID4 = "local";
+var WaitingForWorkerError = class extends Error {
+  constructor(agent) {
+    super(`Waiting for a worker that can run ${agent}`);
+    this.name = "WaitingForWorkerError";
+  }
+};
 var log26 = createLogger("project-folder");
-var INSTRUCTIONS_FILE = "AGENTS.md";
-var CLAUDE_FILE = "CLAUDE.md";
-var CLAUDE_TEXT = `<!-- Written by Band. Claude Code reads this file; it imports the project's instructions. -->
-@${INSTRUCTIONS_FILE}
-`;
 var ProjectFolderService = class {
   states = /* @__PURE__ */ new Map();
   inflight = /* @__PURE__ */ new Map();
-  /** The coordinator's charter of a project. Set by `ProjectCoordinatorService`, which imports this file. */
-  instructionsOf = null;
-  setInstructions(fn) {
-    this.instructionsOf = fn;
-  }
-  /**
-   * Writes the project's agent instructions into its folder: `AGENTS.md` holds the coordinator's
-   * charter (Codex, OpenCode and most agents read it) and `CLAUDE.md` imports it for Claude Code. So
-   * any agent started in the folder, in a chat or a terminal, works from the same text. Band
-   * rewrites both whenever the folder is prepared or the project changes, and the context sync
-   * leaves them out, so each host keeps its own copy and an edit never spreads. A file is only
-   * written when its text changed. Never throws.
-   */
-  async writeInstructions(row, folder) {
-    const charter = this.instructionsOf?.(row);
-    const dir = folder ?? this.states.get(row.id)?.folder;
-    if (!charter || !dir) return;
-    const host = this.hostOf(row);
-    const body = charter.replace(/(?<![`\w])([\w./-]*<[\w-]+>[\w./<>-]*)/g, "`$1`");
-    const agents = `<!-- Written by Band from the project's settings, repos and policy. Edits are overwritten: change the project in Settings > Projects instead. -->
-
-${body}
-`;
-    for (const [name5, text3] of [
-      [INSTRUCTIONS_FILE, agents],
-      [CLAUDE_FILE, CLAUDE_TEXT]
-    ]) {
-      const path2 = `${dir.replace(/\/+$/, "")}/${name5}`;
-      try {
-        const current3 = await host.fs.readFile(path2).then((b2) => new TextDecoder().decode(b2)).catch(() => null);
-        if (current3 !== text3) await host.fs.writeFile(path2, text3);
-      } catch (err) {
-        log26.warn(
-          { project: row.name, file: name5, err },
-          "could not write the project's agent instructions"
-        );
-      }
-    }
-  }
   /** `project:host` folders a view prepared without checkouts, so the next view asks nothing. */
   prepared = /* @__PURE__ */ new Set();
-  /** The host the project's folder is on. */
+  /**
+   * The id of the host the project's folder is on, or null while no host can take it. A hub with
+   * `BAND_LOCAL_HOST=off` never uses its own machine: the coordinator goes on the first online
+   * worker that reports the coordinator's agent installed and logged in, and that choice is saved.
+   * With no such worker the project waits, and nothing is placed.
+   */
+  hostIdOf(row) {
+    const localOn = isLocalHostEnabled();
+    const chosen = row.coordinatorHostId;
+    if (chosen && (localOn || chosen !== LOCAL_HOST_ID4)) return chosen;
+    if (localOn) return LOCAL_HOST_ID4;
+    const agent = this.coordinatorAgentType(row);
+    const eligible = tokenService.listHosts().find(
+      (h) => h.id !== LOCAL_HOST_ID4 && h.status === "online" && agentIsUsable(h.report?.agents.find((a) => a.type === agent))
+    );
+    if (!eligible) return null;
+    projectService.update(row.id, { coordinatorHostId: eligible.id });
+    log26.info({ project: row.name, host: eligible.id, agent }, "placed the coordinator on a worker");
+    return eligible.id;
+  }
+  /** The agent type the project's coordinator runs. */
+  coordinatorAgentType(row) {
+    const id = row.coordinatorAgent ?? "claude-code";
+    return loadSettings().codingAgents?.find((a) => a.id === id)?.type ?? id;
+  }
+  /** The host the project's folder is on. Throws while the project waits for a worker. */
   hostOf(row) {
-    return hostRegistry.hostById(row.coordinatorHostId ?? hostRegistry.local.id);
+    const id = this.hostIdOf(row);
+    if (!id) throw new WaitingForWorkerError(this.coordinatorAgentType(row));
+    return hostRegistry.hostById(id);
   }
   /**
    * The project's git repos with their clone on `host`, and the repos that have none. A repo with a
@@ -70591,7 +71303,6 @@ ${body}
         skipped
       };
       this.states.set(row.id, state2);
-      await this.writeInstructions(row, state2.folder);
       return state2;
     })().finally(() => {
       if (this.inflight.get(row.id) === work) this.inflight.delete(row.id);
@@ -72721,7 +73432,7 @@ exit`;
 var cronjobService = new CronjobService();
 
 // src/server/services/local-host-policy.ts
-var LOCAL_HOST_ID4 = "local";
+var LOCAL_HOST_ID5 = "local";
 var LocalHostDisabledError = class extends Error {
   constructor() {
     super(
@@ -72740,20 +73451,20 @@ var NoDefaultHostError = class extends Error {
 };
 function resolveWorktreeHostId(requested) {
   if (!isLocalHostEnabled()) {
-    if (requested === LOCAL_HOST_ID4) throw new LocalHostDisabledError();
+    if (requested === LOCAL_HOST_ID5) throw new LocalHostDisabledError();
     if (requested) return requested;
     const configured = process.env.BAND_DEFAULT_HOST?.trim();
     if (configured) {
-      if (configured === LOCAL_HOST_ID4) throw new LocalHostDisabledError();
+      if (configured === LOCAL_HOST_ID5) throw new LocalHostDisabledError();
       return configured;
     }
-    const online = tokenService.listHosts().filter((h) => h.id !== LOCAL_HOST_ID4 && h.status === "online");
+    const online = tokenService.listHosts().filter((h) => h.id !== LOCAL_HOST_ID5 && h.status === "online");
     if (online.length === 1) return online[0].id;
     throw new NoDefaultHostError(
       online.length === 0 ? "No worker is online." : "More than one worker is online."
     );
   }
-  return requested ?? LOCAL_HOST_ID4;
+  return requested ?? LOCAL_HOST_ID5;
 }
 
 // src/server/services/panel-focus-service.ts
@@ -72847,7 +73558,7 @@ init_settings_service();
 init_state();
 
 // src/server/services/sync-service.ts
-import { join as join45, relative as relative2, sep as sep6 } from "node:path";
+import { join as join47, relative as relative2, sep as sep6 } from "node:path";
 
 // src/server/services/_utils/remote-worktrees.ts
 async function refreshRemoteWorktrees(repoName2, repoPath, worktrees2) {
@@ -72955,7 +73666,7 @@ function isProjectCheckout(path2, roots) {
   });
 }
 async function projectFolderRoots() {
-  const root = join45(bandHome(), "projects");
+  const root = join47(bandHome(), "projects");
   let real3 = root;
   try {
     real3 = await hostRegistry.hostById("local").fs.realpath(root);
@@ -73375,7 +74086,7 @@ var WorktreeService = class {
     const project = projectService.find(projectId);
     if (!project) return null;
     const host = projectFolderService.hostOf(project);
-    const folder = projectFolderService.state(project.id)?.folder ?? (host.id === hostRegistry.local.id ? join46(bandHome(), "projects", project.name) : void 0);
+    const folder = projectFolderService.state(project.id)?.folder ?? (host.id === hostRegistry.local.id ? join48(bandHome(), "projects", project.name) : void 0);
     if (!folder) return null;
     const worktree = {
       name: project.name,
@@ -73539,8 +74250,8 @@ var WorktreeService = class {
     const remote = hostId2 !== hostRegistry.local.id;
     const repoPath = await this.checkoutOn(repo, host, input.hostRepoPath);
     const wtDir = remote ? await this.remoteWorktreesDir(host) : worktreesDir();
-    const worktreePath = remote ? posix6.join(wtDir, input.repo, input.branch) : join46(wtDir, input.repo, input.branch);
-    await host.fs.mkdir(remote ? posix6.join(wtDir, input.repo) : join46(wtDir, input.repo), {
+    const worktreePath = remote ? posix6.join(wtDir, input.repo, input.branch) : join48(wtDir, input.repo, input.branch);
+    await host.fs.mkdir(remote ? posix6.join(wtDir, input.repo) : join48(wtDir, input.repo), {
       recursive: true
     });
     let base = input.base;
@@ -73798,7 +74509,7 @@ var WorktreeService = class {
     saveState(state2);
     removal.commit();
     try {
-      unlinkSync4(join46(bandHome(), "workspace-prompts", `${worktreeId2}.json`));
+      unlinkSync4(join48(bandHome(), "workspace-prompts", `${worktreeId2}.json`));
     } catch {
     }
     deleteWorktreeStatus(worktreeId2);
@@ -74182,7 +74893,7 @@ var WorktreeService = class {
     if (!/^[a-zA-Z0-9._-]+$/.test(input.scriptType) || input.scriptType.includes("..")) {
       throw new Error(`Invalid script type "${input.scriptType}"`);
     }
-    const scriptPath = join46(input.path, ".band", input.scriptType);
+    const scriptPath = join48(input.path, ".band", input.scriptType);
     const host = hostRegistry.local;
     try {
       await host.fs.stat(scriptPath);
@@ -75309,11 +76020,11 @@ function publicHubUrl() {
   }
 }
 function ghApi(args) {
-  return withHubGhCredential((env) => execGh(["api", ...args], tmpdir3(), env));
+  return withHubGhCredential((env) => execGh(["api", ...args], tmpdir4(), env));
 }
 function ghApiJson(endpoint, body) {
   return withHubGhCredential(
-    (env) => execGhWithInput(["api", endpoint, "--input", "-"], tmpdir3(), JSON.stringify(body), env)
+    (env) => execGhWithInput(["api", endpoint, "--input", "-"], tmpdir4(), JSON.stringify(body), env)
   );
 }
 var seenDeliveries = /* @__PURE__ */ new Set();
@@ -75384,11 +76095,11 @@ var GithubWebhookService = class {
     if (running) {
       await running;
     }
-    const run4 = this.fetchAndIngest(trigger).finally(() => {
-      if (checking.get(flight) === run4) checking.delete(flight);
+    const run5 = this.fetchAndIngest(trigger).finally(() => {
+      if (checking.get(flight) === run5) checking.delete(flight);
     });
-    checking.set(flight, run4);
-    await run4;
+    checking.set(flight, run5);
+    await run5;
   }
   async fetchAndIngest(trigger) {
     const checks = [];
@@ -75428,11 +76139,11 @@ var GithubWebhookService = class {
     const repo = sub.config.repo;
     if (sub.source !== "github" || !repo) return;
     const previous = registering.get(repo) ?? Promise.resolve();
-    const run4 = previous.then(() => this.register(sub.id, repo)).finally(() => {
-      if (registering.get(repo) === run4) registering.delete(repo);
+    const run5 = previous.then(() => this.register(sub.id, repo)).finally(() => {
+      if (registering.get(repo) === run5) registering.delete(repo);
     });
-    registering.set(repo, run4);
-    await run4;
+    registering.set(repo, run5);
+    await run5;
   }
   async register(subscriptionId, repo) {
     const set2 = (status, error40) => {
@@ -75990,7 +76701,7 @@ async function machineHasLogin() {
   if (loginCheck && now - loginCheck.at < LOGIN_CHECK_TTL_MS) return loginCheck.loggedIn;
   let loggedIn = false;
   try {
-    await execGh(["auth", "status", "--hostname", "github.com"], tmpdir4());
+    await execGh(["auth", "status", "--hostname", "github.com"], tmpdir5());
     loggedIn = true;
   } catch {
     loggedIn = false;
@@ -76006,10 +76717,10 @@ async function hubGhEnv() {
 async function hubGhHasNoCredential() {
   return !await machineHasLogin() && vaultService.findGitHubToken() === void 0;
 }
-async function withHubGhCredential(run4) {
+async function withHubGhCredential(run5) {
   const env = await hubGhEnv();
   try {
-    return await run4(env);
+    return await run5(env);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     if (env.GH_TOKEN === void 0 && UNAUTHENTICATED.test(message) && await hubGhHasNoCredential()) {
@@ -76172,11 +76883,11 @@ function parseBranchChecks(data) {
     if (!suite.workflowRun) continue;
     const workflowName = suite.workflowRun.workflow.name;
     for (const node of suite.checkRuns.nodes) {
-      const run4 = fromCheckRun(node, workflowName);
-      const key2 = `${workflowName}\0${run4.name}`;
+      const run5 = fromCheckRun(node, workflowName);
+      const key2 = `${workflowName}\0${run5.name}`;
       const existing = latest.get(key2);
-      if (!existing || (run4.startedAt ?? "") > (existing.startedAt ?? "")) {
-        latest.set(key2, run4);
+      if (!existing || (run5.startedAt ?? "") > (existing.startedAt ?? "")) {
+        latest.set(key2, run5);
       }
     }
   }
@@ -76588,7 +77299,7 @@ var GithubPollService = class {
   /** One `gh` call, counted against the poll's budget. */
   gh(args) {
     this.state.callsLeft--;
-    return withHubGhCredential((env) => execGh(args, tmpdir5(), env));
+    return withHubGhCredential((env) => execGh(args, tmpdir6(), env));
   }
   /** Logs a failure once per distinct message, and skips the item for longer each time it repeats. */
   fail(item, poll, err) {
@@ -77120,7 +77831,7 @@ var WatcherService = class {
     this.poller.start();
     const statuses = loadCurrentStatuses();
     const runningScripts = worktreeScriptService.getRunning();
-    const runningSetups = [...new Set(runningScripts.map((run4) => run4.worktreeId))];
+    const runningSetups = [...new Set(runningScripts.map((run5) => run5.worktreeId))];
     listener({ kind: "snapshot", statuses, runningSetups });
     for (const event of this.loadCurrentBranchStatuses()) {
       listener(event);
@@ -77250,47 +77961,14 @@ var agentSessionRegistry = new AgentSessionRegistryService();
 // src/server/services/context-capture-service.ts
 init_src();
 
-// src/server/services/_utils/context-redaction.ts
-function scanForSecrets(text3) {
-  return scanText("", text3, [], { looseAssignments: true }).map((f2) => ({
-    kind: RULE_LABELS[f2.rule] ?? f2.rule,
-    line: f2.line
-  }));
-}
-var PLACEHOLDER = "[redacted]";
-var EXTRA_PATTERNS = [
-  /\bglpat-[A-Za-z0-9_-]{16,}/g,
-  /\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{16,}/g,
-  /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g,
-  // Credentials inside URLs: scheme://user:password@host.
-  /(?<=:\/\/[^\s/:@]+:)[^\s/@]+(?=@)/g
-];
-var ASSIGNMENT2 = /\b([A-Za-z0-9_.-]*(?:password|passwd|secret|token|api[_-]?key|access[_-]?key|private[_-]?key|credential)[A-Za-z0-9_.-]*)(["']?\s*[:=]\s*["']?)([^\s"',;]{6,})/gi;
-var globally = (re) => new RegExp(re.source, re.flags.includes("g") ? re.flags : `${re.flags}g`);
-function redactSecrets(text3) {
-  let out = text3;
-  for (const [kind, pattern] of SECRET_PATTERNS) {
-    const re = globally(pattern);
-    out = kind === "private key" ? out.replace(
-      /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g,
-      PLACEHOLDER
-    ) : kind === "bearer token" ? out.replace(re, `Bearer ${PLACEHOLDER}`) : out.replace(re, PLACEHOLDER);
-  }
-  for (const pattern of EXTRA_PATTERNS) out = out.replace(pattern, PLACEHOLDER);
-  return out.replace(
-    ASSIGNMENT2,
-    (match, name5, sep13, value) => value.startsWith("[redacted") ? match : `${name5}${sep13}${PLACEHOLDER}`
-  );
-}
-
 // src/server/services/context-tools-service.ts
 init_worktree_id();
 import { randomBytes as randomBytes14 } from "node:crypto";
 
 // src/server/services/context-store.ts
-import { mkdtempSync, rmSync as rmSync6 } from "node:fs";
-import { tmpdir as tmpdir6 } from "node:os";
-import { join as join47 } from "node:path";
+import { mkdtempSync as mkdtempSync2, rmSync as rmSync7 } from "node:fs";
+import { tmpdir as tmpdir7 } from "node:os";
+import { join as join49 } from "node:path";
 var MAX_TERMS = 8;
 var MAX_FILES_SCANNED = 5e3;
 var SNIPPETS_PER_FILE = 3;
@@ -77349,11 +78027,11 @@ async function commitAppends(name5, edits, message) {
   const sha = await contextService.withLock(name5, async () => {
     let lastError = "";
     for (let attempt = 0; attempt < WRITE_ATTEMPTS; attempt++) {
-      const dir = mkdtempSync(join47(tmpdir6(), "band-context-"));
+      const dir = mkdtempSync2(join49(tmpdir7(), "band-context-"));
       try {
         const headRef = (await git2(["symbolic-ref", "-q", "HEAD"], { cwd: repo })).trim();
         const parent = await headCommit(repo);
-        const env = contextGitEnv({ GIT_INDEX_FILE: join47(dir, "index") });
+        const env = contextGitEnv({ GIT_INDEX_FILE: join49(dir, "index") });
         if (parent) await git2(["read-tree", parent], { cwd: repo, env });
         for (const edit of edits) {
           let current3 = "";
@@ -77375,7 +78053,7 @@ async function commitAppends(name5, edits, message) {
         if (update.code === 0) return commit;
         lastError = update.stderr.trim();
       } finally {
-        rmSync6(dir, { recursive: true, force: true });
+        rmSync7(dir, { recursive: true, force: true });
       }
     }
     throw new Error(`The context moved while writing: ${lastError.slice(0, 200)}`);
@@ -78163,7 +78841,7 @@ init_src();
 // src/server/services/context-sync-service.ts
 init_src();
 var log47 = createLogger("context-sync");
-var LOCAL_HOST_ID5 = "local";
+var LOCAL_HOST_ID6 = "local";
 var DEFAULT_PULL_TIMEOUT_MS2 = 1e4;
 function pullTimeoutMs() {
   return Number(process.env.BAND_CONTEXT_PULL_TIMEOUT_MS) || DEFAULT_PULL_TIMEOUT_MS2;
@@ -78179,8 +78857,10 @@ var ContextSyncService = class {
     const project = projectId ? projectService.find(projectId) : void 0;
     const worktree = projectId ? void 0 : worktreeService.resolve(scopeId);
     if (projectId ? !project : !worktree) return null;
-    const host = project ? hostRegistry.hostById(project.coordinatorHostId ?? LOCAL_HOST_ID5) : worktree.host;
-    const labels3 = host.id === LOCAL_HOST_ID5 ? (await host.info().catch(() => null))?.labels ?? [] : tokenService.hostLabels(host.id) ?? [];
+    const projectHostId = project ? projectFolderService.hostIdOf(project) : null;
+    if (project && !projectHostId) return null;
+    const host = project ? hostRegistry.hostById(projectHostId ?? LOCAL_HOST_ID6) : worktree.host;
+    const labels3 = host.id === LOCAL_HOST_ID6 ? (await host.info().catch(() => null))?.labels ?? [] : tokenService.hostLabels(host.id) ?? [];
     const rows = project ? contextService.forSession("", labels3, contextService.find(project.contextName)) : contextService.forSession(
       worktree.repo.name,
       labels3,
@@ -78228,7 +78908,7 @@ var ContextSyncService = class {
       const { readOnly } = target;
       const hostId2 = target.host.id;
       const writable = target.specs.filter(
-        (s2) => target.host.id !== LOCAL_HOST_ID5 || !readOnly.has(s2.name)
+        (s2) => target.host.id !== LOCAL_HOST_ID6 || !readOnly.has(s2.name)
       );
       if (writable.length === 0) return [];
       const results = await target.host.context.push({
@@ -79152,6 +79832,7 @@ var mcpProxyService = new McpProxyService();
 // src/server/services/project-coordinator-service.ts
 init_src();
 init_worktree_id();
+init_status_event_bus();
 
 // src/server/services/project-subscription-service.ts
 init_src();
@@ -79345,11 +80026,11 @@ var ProjectSubscriptionService = class {
   /** Records the member's PR and subscribes or unsubscribes the coordinator for it. */
   syncMemberPr(worktreeId2, pr) {
     const previous = this.memberLanes.get(worktreeId2) ?? Promise.resolve();
-    const run4 = previous.catch(() => void 0).then(() => this.syncMemberPrNow(worktreeId2, pr)).finally(() => {
-      if (this.memberLanes.get(worktreeId2) === run4) this.memberLanes.delete(worktreeId2);
+    const run5 = previous.catch(() => void 0).then(() => this.syncMemberPrNow(worktreeId2, pr)).finally(() => {
+      if (this.memberLanes.get(worktreeId2) === run5) this.memberLanes.delete(worktreeId2);
     });
-    this.memberLanes.set(worktreeId2, run4);
-    return run4;
+    this.memberLanes.set(worktreeId2, run5);
+    return run5;
   }
   async syncMemberPrNow(worktreeId2, pr) {
     const row = projectService.projectOfWorker(worktreeId2);
@@ -79419,10 +80100,10 @@ var ProjectSubscriptionService = class {
     const row = projectService.findByContext(name5);
     if (!row?.coordinatorChatId) return;
     const previous = this.contextLanes.get(name5) ?? Promise.resolve();
-    const run4 = previous.catch(() => void 0).then(() => this.scanContext(row, name5)).catch((err) => log51.warn({ err, context: name5 }, "could not scan the context for new files")).finally(() => {
-      if (this.contextLanes.get(name5) === run4) this.contextLanes.delete(name5);
+    const run5 = previous.catch(() => void 0).then(() => this.scanContext(row, name5)).catch((err) => log51.warn({ err, context: name5 }, "could not scan the context for new files")).finally(() => {
+      if (this.contextLanes.get(name5) === run5) this.contextLanes.delete(name5);
     });
-    this.contextLanes.set(name5, run4);
+    this.contextLanes.set(name5, run5);
   }
   async scanContext(row, name5) {
     const head = await this.headOf(name5);
@@ -79467,7 +80148,7 @@ var projectSubscriptionService = new ProjectSubscriptionService();
 // src/server/services/project-coordinator-service.ts
 var log52 = createLogger("project-coordinator");
 var DEFAULT_COORDINATOR_AGENT = "claude-code";
-var MAX_MESSAGE = 2e4;
+var MAX_MESSAGE2 = 2e4;
 var MAX_READ_TURNS = 20;
 var MAX_TRANSCRIPT_CHARS = 3e4;
 var CoordinatorToolError = class extends Error {
@@ -79484,7 +80165,7 @@ var ProjectCoordinatorService = class {
   // ---- session start -----------------------------------------------------------------
   /**
    * Creates the coordinator's chat when the project has none, and starts the agent so it
-   * receives the charter. Needs at least one repo. The agent starts in the background (it
+   * starts with it. Needs at least one repo. The agent starts in the background (it
    * prepares the project folder first), so a slow or failing agent never fails the caller.
    * Safe to call again: a running start is shared.
    */
@@ -79505,14 +80186,47 @@ var ProjectCoordinatorService = class {
    * the new host when `coordinatorHostId` changed.
    */
   async update(ref2, patch) {
-    const before = projectFolderService.hostOf(projectService.row(ref2)).id;
+    const row = projectService.row(ref2);
+    const before = projectFolderService.hostIdOf(row);
+    const next = patch.coordinatorHostId?.trim() || null;
+    if (before && next && next !== before) await this.assertMovable(row, before);
     const updated = projectService.update(ref2, patch);
     this.syncModel(updated.id);
-    if (projectFolderService.hostOf(projectService.row(updated.id)).id !== before) {
+    if (projectFolderService.hostIdOf(projectService.row(updated.id)) !== before) {
       await this.moveHost(updated.id);
     }
     return projectService.get(updated.id);
   }
+  /**
+   * Refuses a move while a default-branch checkout on the old host has changes or commits that
+   * exist nowhere else. A host that cannot be reached (offline, or no checkout there) cannot be
+   * checked, so it does not block the move.
+   */
+  async assertMovable(row, hostId2) {
+    const host = hostRegistry.hostById(hostId2);
+    const blockers = [];
+    for (const { repo } of projectService.get(row.id).repos) {
+      try {
+        const status = await host.project.status({ project: row.name, repo });
+        const reasons = [];
+        if (status.dirty) reasons.push("uncommitted changes");
+        if (status.ahead > 0) {
+          reasons.push(`${status.ahead} unpushed commit${status.ahead === 1 ? "" : "s"}`);
+        }
+        if (reasons.length > 0) blockers.push(`${repo} has ${reasons.join(" and ")}`);
+      } catch (err) {
+        log52.info(
+          { project: row.name, repo, hostId: hostId2, err },
+          "could not check a checkout before a move"
+        );
+      }
+    }
+    if (blockers.length > 0) {
+      throw new ProjectConflictError(
+        `Cannot move the coordinator off host "${hostId2}": ${blockers.join("; ")}. Commit and push or discard them first.`
+      );
+    }
+  }
   /**
    * Moves the project's folder view to its current coordinator host after `coordinatorHostId`
    * changed. Every chat of the view stops its agent process on the old host and starts a fresh
@@ -79532,6 +80246,26 @@ var ProjectCoordinatorService = class {
   lastError(projectId) {
     return this.startErrors.get(projectId) ?? null;
   }
+  /** Whether the project has no coordinator host yet, because no worker can run the agent. */
+  isWaiting(projectId) {
+    return this.waiting.has(projectId) && !this.projectById(projectId)?.coordinatorHostId;
+  }
+  waiting = /* @__PURE__ */ new Set();
+  stopListening = null;
+  /**
+   * Starts the coordinators that wait for a worker when a worker comes online or reports new
+   * capabilities. Called once the server is up.
+   */
+  start() {
+    this.stopListening ??= subscribe((event) => {
+      if (event.kind !== "host-status-changed" || event.hostStatus !== "online") return;
+      for (const id of [...this.waiting]) {
+        void this.ensureCoordinator(id).catch((err) => {
+          log52.warn({ projectId: id, err }, "could not start a waiting coordinator");
+        });
+      }
+    });
+  }
   async create(projectId) {
     try {
       const row = projectService.row(projectId);
@@ -79547,11 +80281,14 @@ var ProjectCoordinatorService = class {
         projectService.setCoordinator(row.id, chat.id);
       }
       this.startErrors.delete(row.id);
+      await projectService.seedInstructions(row.id);
       const chatId = chat.id;
       void projectSubscriptionService.reconcile(row.id).catch((err) => {
         log52.warn({ projectId: row.id, err }, "could not subscribe the coordinator");
       });
-      void agentSessionService.ensureSession(chatId, "prompt").catch((err) => {
+      void agentSessionService.ensureSession(chatId, "prompt").then(() => this.waiting.delete(row.id)).catch((err) => {
+        if (err instanceof WaitingForWorkerError) this.waiting.add(row.id);
+        else this.waiting.delete(row.id);
         this.startErrors.set(row.id, err instanceof Error ? err.message : String(err));
         log52.warn({ projectId: row.id, chatId, err }, "coordinator agent did not start");
       });
@@ -79643,7 +80380,7 @@ var ProjectCoordinatorService = class {
       chatService.update(row.coordinatorChatId, { model: row.coordinatorModel });
     }
   }
-  // ---- charter and session scope --------------------------------------------------------
+  // ---- session scope --------------------------------------------------------
   /** The project a chat coordinates, or undefined for any other chat. */
   projectOfChat(chatId) {
     const chat = chatService.get(chatId);
@@ -79658,53 +80395,6 @@ var ProjectCoordinatorService = class {
       return void 0;
     }
   }
-  /** The charter the project page shows. */
-  charterFor(ref2) {
-    return this.charter(projectService.row(ref2));
-  }
-  /** The system prompt appended to a coordinator session. */
-  charter(row) {
-    const view4 = projectService.get(row.id);
-    const p2 = view4.effectivePolicy;
-    const repos2 = view4.repos.map((r) => `- ${r.repo}${r.role ? ` (role: ${r.role})` : ""}`).join("\n");
-    const limits = [
-      p2.maxConcurrent ? `at most ${p2.maxConcurrent} worker agents run at once` : "no limit on concurrent worker agents",
-      p2.budgetUsd ? `a soft budget of $${p2.budgetUsd} for the project` : "no budget limit",
-      `worker agents run at isolation "${p2.isolationFloor}" or stronger`,
-      p2.labels.length ? `workers go only on hosts labeled ${p2.labels.join(", ")}` : "workers may go on any host"
-    ].join("; ");
-    const autonomy = {
-      observe: "Autonomy is observe. You may read project state and worker chats. You may not message, stop or dispatch anything. Report what you find and recommend actions to the user.",
-      autonomous: p2.autoMerge ? "Autonomy is autonomous with auto-merge on. You may dispatch workers within the limits and merge pull requests whose CI passed." : "Autonomy is autonomous. You may dispatch workers within the limits. Merging still needs the user's confirmation."
-    };
-    return [
-      `You are the coordinator of the Band project "${view4.name}".`,
-      view4.description ? `
-Project description: ${view4.description}` : "",
-      "\nYour job is to plan the work across the project's repos, hand it to worker agents, check on them and keep the user informed. Each worker agent works in one git worktree of one repo, with its own chat. Work that spans repos takes one worker per repo, and you keep them in step.",
-      `
-Working directory. You run in the project folder on the coordinator host. It is the working copy of the project context (notes.md, docs/, learnings/, inbox/, handoffs/) and has a checkout of every project repo's default branch under repos/<repo>/ (the local branch band/${view4.name}/<default>, which tracks origin/<default>). Read the current code there, or through repo_read, repo_search and repo_log. Band fetches before your turns and fast-forwards a checkout only when it is clean, so a checkout with local changes can be behind origin. Code changes go through worker agents (worktree_create). Do not edit a default branch checkout unless the user explicitly asks you to. ${p2.autonomy === "autonomous" ? "When the user asks for such an edit, you may commit it, and you may push it because autonomy is autonomous." : `When the user asks for such an edit, commit it but do not push without the user's confirmation, because autonomy is ${p2.autonomy}.`} The folder repos/ is never synced to the context repo. Everything else in the project folder (notes, docs, inbox, handoffs, learnings and any file you or the user add) syncs to the hub and to every worker of the project on its own, within seconds: write a file and the others see it, with no commit or push.`,
-      `
-Repos in this project:
-${repos2 || "- none yet"}`,
-      `
-Models: you run on ${p2.models.coordinator}, worker agents on ${p2.models.worker}, reviewers on ${p2.models.reviewer}.`,
-      `
-Policy: ${limits}.`,
-      `
-${autonomy[p2.autonomy]}`,
-      `
-Context. The project context repo "${view4.contextName}" is shared by every agent in the project, and the user context holds the user's preferences. Read them before you plan. Layout of the project context: notes.md (running notes), docs/ (design and contracts), media/ (screenshots, recordings), inbox/<agent>.md (pointers to handoffs for an agent), handoffs/ (one file per handoff), learnings/ (what agents learned). Use context_search to find things, context_append_learning to record what future agents should know, and context_handoff to pass work on. Write contracts between repos (API shapes, event formats) to docs/ so the agent on the other side can read them.`,
-      `
-Tools. You act on the project only through the ${COORDINATOR_SERVER} tools: project_status (worktrees, agents, pull requests, spend), worktrees_list, worktree_create, chats_read, chats_send and worktree_stop, plus repo_read {repo, path}, repo_search {repo, query} and repo_log {repo, n} for the default branch checkouts. They are limited to this project's worktrees and repos. A refused call names the reason, so tell the user what blocked you instead of retrying.`,
-      "\nDispatching. worktree_create starts a worker agent in a new worktree of one repo of the project, on the branch you name, with your brief in .am/BRIEF.md. Write the brief so the worker can act on it alone: the goal, the constraints, the contracts with other repos and what is out of scope, plus acceptance scenarios it can check. For work across repos, start one worker per repo, usually on the same branch name, put the contract between them in docs/ of the project folder first, and decide the order their pull requests merge in.",
-      `
-Wake-ups. Band wakes you with a "Subscription update" message when something needs you: a worker chat ended its turn with an error, is waiting for a permission or an answer, or finished; a pull request of a project worktree has a review comment, a CI result or was merged or closed; or a new file appeared in inbox/ or handoffs/ of the project context. The message names the chat id or the file path. Read the source before you act on it. Events are batched, so one message can carry several. A pull request's subscriptions end when it merges or closes.`,
-      `
-Notes and the inbox. You are the only writer of notes.md in the project context: workers do not edit it, so keep it current with decisions and status. learnings/ is append-only: add entries, never rewrite or delete them. Handoffs from workers land in handoffs/<stamp>-<from>-to-<to>.md and a pointer line in inbox/<to>.md. When you have dealt with an item in inbox/ or handoffs/, move the file into inbox/done/ (a plain move in the project folder, which syncs on its own). A file in inbox/done/ does not wake you again.`,
-      "\nMerging. Never merge a pull request unless the user confirmed it in this conversation or auto-merge is on."
-    ].filter(Boolean).join("\n");
-  }
   // ---- tool logic ---------------------------------------------------------------------
   workersOf(row) {
     return projectService.workersOf(row).map((w2) => {
@@ -79846,8 +80536,8 @@ Notes and the inbox. You are the only writer of notes.md in the project context:
     const chat = this.workerChat(row, chatId);
     const text3 = message.trim();
     if (!text3) throw new CoordinatorToolError("The message is empty.");
-    if (text3.length > MAX_MESSAGE) {
-      throw new CoordinatorToolError(`The message is over ${MAX_MESSAGE} characters.`);
+    if (text3.length > MAX_MESSAGE2) {
+      throw new CoordinatorToolError(`The message is over ${MAX_MESSAGE2} characters.`);
     }
     this.checkDispatch(row, { newRun: !this.isRunning(chatId) });
     const result = submitOrQueueTask({ worktreeId: chatScope(chat), chatId, prompt: text3 });
@@ -79901,7 +80591,6 @@ Notes and the inbox. You are the only writer of notes.md in the project context:
   }
 };
 var projectCoordinatorService = new ProjectCoordinatorService();
-projectFolderService.setInstructions((row) => projectCoordinatorService.charter(row));
 
 // src/server/services/agent-session-service.ts
 var log53 = createLogger("agent-sessions");
@@ -80003,6 +80692,7 @@ function stopRuntime(rt) {
   rt.process = null;
   rt.sessionId = null;
   runtimes.delete(rt.chatId);
+  mcpProxyService.revokeSession(rt.chatId);
 }
 function idleTimeoutMs2() {
   const override = Number(process.env.BAND_AGENT_IDLE_TIMEOUT_MS);
@@ -80320,7 +81010,9 @@ async function ensureProcess(rt, def, cwd) {
     const exited = handlers2.onExit;
     handlers2.onExit = (code, stderr) => {
       void grant?.revoke();
-      mcpProxyService.revokeSession(rt.chatId);
+      if (runtimes.get(rt.chatId) === rt && rt.generation === generation) {
+        mcpProxyService.revokeSession(rt.chatId);
+      }
       exited?.(code, stderr);
     };
     let proc;
@@ -80427,6 +81119,13 @@ function sessionMcpServers(rt, proc) {
       );
       return [];
     }
+    if (!rt.relayEnv && hostRegistry.hostFor(rt.worktreeId).id !== hostRegistry.local.id) {
+      log53.warn(
+        { chatId: rt.chatId, scope: rt.worktreeId },
+        "the agent runs on a worker but has no relay grant, so no MCP servers are passed"
+      );
+      return [];
+    }
     mcpProxyService.revokeSession(rt.chatId);
     const { token } = mcpProxyService.issueSessionToken(
       rt.chatId,
@@ -80439,6 +81138,16 @@ function sessionMcpServers(rt, proc) {
     if (rt.relayEnv?.BAND_TOKEN) {
       headers.push({ name: "X-Band-Relay-Token", value: rt.relayEnv.BAND_TOKEN });
     }
+    log53.info(
+      {
+        chatId: rt.chatId,
+        scope: rt.worktreeId,
+        servers: names,
+        baseUrl: base,
+        viaRelay: Boolean(rt.relayEnv?.BAND_TOKEN)
+      },
+      "MCP servers for the session"
+    );
     return names.map((name5) => ({
       type: "http",
       name: name5,
@@ -81287,7 +81996,7 @@ var sessionIdSchema = external_exports2.string().regex(SESSION_ID_PATTERN3, "inv
 
 // src/server/services/_utils/upload-utils.ts
 import { mkdir as mkdir9, writeFile as writeFile6 } from "node:fs/promises";
-import { join as join48, resolve as resolve9, sep as sep7 } from "node:path";
+import { join as join50, resolve as resolve9, sep as sep7 } from "node:path";
 init_state();
 function decodeParts(fileParts) {
   const baseTimestamp = Date.now();
@@ -81308,11 +82017,11 @@ function decodeParts(fileParts) {
   return decoded;
 }
 async function saveUploadedFilesDetailed(fileParts) {
-  const uploadDir = join48(bandHome(), "uploads");
+  const uploadDir = join50(bandHome(), "uploads");
   await mkdir9(uploadDir, { recursive: true });
   const saved = [];
   for (const part of decodeParts(fileParts)) {
-    const filePath = join48(uploadDir, part.storedName);
+    const filePath = join50(uploadDir, part.storedName);
     await writeFile6(filePath, part.buffer);
     saved.push({
       path: filePath,
@@ -81327,7 +82036,7 @@ async function saveUploadedFilesDetailed(fileParts) {
 async function remoteUploadDir(host, worktreeId2) {
   const dirs = (await host.info()).dirs;
   if (!dirs) throw new Error(`Host ${host.id} has no directory for uploads`);
-  return join48(dirs.uploads, worktreeId2);
+  return join50(dirs.uploads, worktreeId2);
 }
 async function saveWorktreeUploads(worktreeId2, fileParts) {
   const host = hostRegistry.hostFor(worktreeId2);
@@ -81336,7 +82045,7 @@ async function saveWorktreeUploads(worktreeId2, fileParts) {
   await host.fs.mkdir(dir, { recursive: true });
   const saved = [];
   for (const part of decodeParts(fileParts)) {
-    const filePath = join48(dir, part.storedName);
+    const filePath = join50(dir, part.storedName);
     await host.fs.writeFile(filePath, part.buffer, { exclusive: true, mode: 384 });
     saved.push({
       path: filePath,
@@ -81352,19 +82061,19 @@ async function uploadPathFromUrl(worktreeId2, url2) {
   const host = hostRegistry.hostFor(worktreeId2);
   const match = url2.match(/^\/api\/uploads\/(.+)$/);
   if (!match) return null;
-  if (host.id === hostRegistry.local.id) return join48(bandHome(), "uploads", match[1]);
+  if (host.id === hostRegistry.local.id) return join50(bandHome(), "uploads", match[1]);
   const rest = match[1].split("/");
   if (rest.length !== 2) return null;
   try {
     if (decodeURIComponent(rest[0]) !== worktreeId2) return null;
-    return join48(await remoteUploadDir(host, worktreeId2), decodeURIComponent(rest[1]));
+    return join50(await remoteUploadDir(host, worktreeId2), decodeURIComponent(rest[1]));
   } catch {
     return null;
   }
 }
 async function isWithinUploads(worktreeId2, path2) {
   const host = hostRegistry.hostFor(worktreeId2);
-  const dir = host.id === hostRegistry.local.id ? join48(bandHome(), "uploads") : await remoteUploadDir(host, worktreeId2).catch(() => null);
+  const dir = host.id === hostRegistry.local.id ? join50(bandHome(), "uploads") : await remoteUploadDir(host, worktreeId2).catch(() => null);
   if (!dir) return false;
   const normalized2 = resolve9(path2);
   return normalized2 === dir || normalized2.startsWith(dir + sep7);
@@ -88353,7 +89062,8 @@ function createContext(opts) {
   return {
     chatId: readHeader(opts?.req?.headers, CHAT_ID_HEADER),
     worktreeId: readHeader(opts?.req?.headers, WORKTREE_ID_HEADER),
-    admin: opts?.admin === true
+    admin: opts?.admin === true,
+    tokenId: opts?.tokenId
   };
 }
 
@@ -89306,7 +90016,7 @@ var chatsRouter = t.router({
 init_zod();
 
 // src/server/services/cli-service.ts
-import { execFile as execFile12 } from "node:child_process";
+import { execFile as execFile13 } from "node:child_process";
 import {
   accessSync as accessSync3,
   constants as constants3,
@@ -89319,13 +90029,13 @@ import {
   unlinkSync as unlinkSync5,
   writeFileSync as writeFileSync7
 } from "node:fs";
-import { homedir as homedir14, platform as platform2 } from "node:os";
-import { basename as basename2, dirname as dirname14, join as join49 } from "node:path";
+import { homedir as homedir15, platform as platform2 } from "node:os";
+import { basename as basename2, dirname as dirname14, join as join51 } from "node:path";
 function windowsBinDir() {
-  const localAppData = process.env.LOCALAPPDATA || join49(homedir14(), "AppData", "Local");
-  return join49(localAppData, "band", "bin");
+  const localAppData = process.env.LOCALAPPDATA || join51(homedir15(), "AppData", "Local");
+  return join51(localAppData, "band", "bin");
 }
-var SYMLINK_PATH = platform2() === "win32" ? join49(windowsBinDir(), "band.cmd") : "/usr/local/bin/band";
+var SYMLINK_PATH = platform2() === "win32" ? join51(windowsBinDir(), "band.cmd") : "/usr/local/bin/band";
 function checkCliWindows() {
   let contents;
   try {
@@ -89356,8 +90066,8 @@ async function checkCli() {
     } catch {
       return "NotInstalled";
     }
-    const isCargoBuild = target.includes(join49("apps", "cli", "target"));
-    const isElectronSidecar = target.endsWith(join49("binaries", "band"));
+    const isCargoBuild = target.includes(join51("apps", "cli", "target"));
+    const isElectronSidecar = target.endsWith(join51("binaries", "band"));
     if (isCargoBuild || isElectronSidecar) {
       return "Installed";
     }
@@ -89400,7 +90110,7 @@ function noBinaryError(env = process.env) {
 }
 function runReg(args) {
   return new Promise((resolve16) => {
-    execFile12("reg", args, { windowsHide: true }, (err, stdout) => {
+    execFile13("reg", args, { windowsHide: true }, (err, stdout) => {
       resolve16(err ? "" : stdout ?? "");
     });
   });
@@ -89530,328 +90240,6 @@ var clientStateRouter = t.router({
 
 // src/server/api/context/router.ts
 init_zod();
-
-// src/server/services/context-browser-service.ts
-import { mkdtempSync as mkdtempSync2, rmSync as rmSync7 } from "node:fs";
-import { tmpdir as tmpdir7 } from "node:os";
-import { join as join50 } from "node:path";
-var MAX_FILE_BYTES2 = 1024 * 1024;
-var MAX_DIFF_BYTES2 = 200 * 1024;
-var MAX_MESSAGE2 = 200;
-var LOG_LIMIT = 200;
-var CONFLICT = /^(.*?)\.conflict-([A-Za-z0-9]+)((?:\.[^/.]+)?)$/;
-var ContextConflictError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "ContextConflictError";
-  }
-};
-function conflictOriginal(path2) {
-  const m2 = CONFLICT.exec(path2);
-  return m2 ? `${m2[1]}${m2[3]}` : null;
-}
-function hasControl(text3, allowWhitespace = false) {
-  for (let i = 0; i < text3.length; i++) {
-    const c = text3.charCodeAt(i);
-    if (allowWhitespace && (c === 9 || c === 10 || c === 13)) continue;
-    if (c < 32 || c === 127) return true;
-  }
-  return false;
-}
-function checkPath(path2) {
-  const bad = !path2 || path2.length > 500 || path2.startsWith("/") || path2.endsWith("/") || path2.startsWith(":") || hasControl(path2) || path2.includes("\\") || path2.split("/").some((seg) => seg === "" || seg === "." || seg === ".." || seg === ".git");
-  if (bad) throw new ContextInputError(`"${path2}" is not a valid path inside a context`);
-  return path2;
-}
-function checkMessage(message) {
-  const trimmed = message.trim();
-  if (!trimmed) throw new ContextInputError("A commit message is required");
-  if (hasControl(trimmed, true)) {
-    throw new ContextInputError("The commit message holds control characters");
-  }
-  if (scanForSecrets(trimmed).length > 0) {
-    throw new ContextInputError("Not saved: the commit message looks like it holds a credential.");
-  }
-  if (trimmed.length > MAX_MESSAGE2) {
-    throw new ContextInputError(`The commit message is longer than ${MAX_MESSAGE2} characters`);
-  }
-  return trimmed;
-}
-var ContextBrowserService = class {
-  repo(name5) {
-    contextService.require(name5);
-    return contextRepoPath(name5);
-  }
-  /** The commit HEAD points at, or null in a repo with no commits. */
-  async head(repo) {
-    const r = await runGit(["rev-parse", "--verify", "-q", "HEAD^{commit}"], { cwd: repo });
-    return r.code === 0 ? r.stdout.trim() : null;
-  }
-  async tree(name5) {
-    const repo = this.repo(name5);
-    const head = await this.head(repo);
-    if (!head) return { head, entries: [] };
-    const out = await git2(["ls-tree", "-r", "-z", "--long", head], { cwd: repo });
-    const entries = [];
-    for (const rec of out.split("\0")) {
-      if (!rec) continue;
-      const tab = rec.indexOf("	");
-      const meta = rec.slice(0, tab).split(/\s+/);
-      if (meta[1] !== "blob") continue;
-      const path2 = rec.slice(tab + 1);
-      entries.push({ path: path2, size: Number(meta[3]) || 0, conflictOf: conflictOriginal(path2) });
-    }
-    entries.sort((a, b2) => a.path.localeCompare(b2.path));
-    return { head, entries };
-  }
-  async file(name5, path2) {
-    const repo = this.repo(name5);
-    checkPath(path2);
-    const head = await this.head(repo);
-    if (!head) throw new ContextInputError(`"${path2}" does not exist`);
-    const size = await runGit(["cat-file", "-s", `${head}:${path2}`], { cwd: repo });
-    if (size.code !== 0) throw new ContextInputError(`"${path2}" does not exist`);
-    const bytes = Number(size.stdout.trim());
-    const type = await git2(["cat-file", "-t", `${head}:${path2}`], { cwd: repo });
-    if (type.trim() !== "blob") throw new ContextInputError(`"${path2}" is a folder`);
-    if (bytes > MAX_FILE_BYTES2) {
-      return { path: path2, binary: true, content: null, size: bytes, commit: head };
-    }
-    const content = await git2(["cat-file", "blob", `${head}:${path2}`], { cwd: repo });
-    if (content.includes("\0") || content.includes("\uFFFD")) {
-      return { path: path2, binary: true, content: null, size: bytes, commit: head };
-    }
-    return { path: path2, binary: false, content, size: bytes, commit: head };
-  }
-  async log(name5, path2, limit = 50) {
-    const repo = this.repo(name5);
-    if (path2) checkPath(path2);
-    if (!await this.head(repo)) return [];
-    const args = [
-      "--literal-pathspecs",
-      "log",
-      "--no-color",
-      `-n${Math.min(Math.max(limit, 1), LOG_LIMIT)}`,
-      "--format=%H%x1f%an%x1f%at%x1f%s%x1e"
-    ];
-    if (path2) args.push("--", path2);
-    const out = await git2(args, { cwd: repo });
-    return out.split("").map((rec) => rec.trim()).filter(Boolean).map((rec) => {
-      const [sha = "", author = "", at = "0", subject = ""] = rec.split("");
-      return { sha, author, at: Number(at) * 1e3, subject };
-    });
-  }
-  async diff(name5, sha, path2) {
-    const repo = this.repo(name5);
-    if (!/^[0-9a-f]{40}$/.test(sha)) throw new ContextInputError("Not a commit id");
-    if (path2) checkPath(path2);
-    const exists4 = await runGit(["cat-file", "-e", `${sha}^{commit}`], { cwd: repo });
-    if (exists4.code !== 0) throw new ContextInputError("No such commit");
-    const scope3 = path2 ? ["--", path2] : [];
-    const patch = await git2(
-      [
-        "--literal-pathspecs",
-        "show",
-        "--root",
-        "--format=",
-        "--patch",
-        "--no-color",
-        "-M",
-        "--no-ext-diff",
-        sha,
-        ...scope3
-      ],
-      { cwd: repo }
-    );
-    const names = await git2(
-      [
-        "diff-tree",
-        "--root",
-        "-m",
-        "--first-parent",
-        "--no-commit-id",
-        "--name-status",
-        "-r",
-        "-M",
-        sha
-      ],
-      { cwd: repo }
-    );
-    const files = names.split("\n").filter(Boolean).map((line2) => {
-      const parts = line2.split("	");
-      return { status: parts[0] ?? "M", path: parts[parts.length - 1] ?? "" };
-    });
-    const patchBytes = Buffer.from(patch);
-    const truncated = patchBytes.length > MAX_DIFF_BYTES2;
-    return {
-      diff: truncated ? patchBytes.subarray(0, MAX_DIFF_BYTES2).toString("utf8") : patch,
-      truncated,
-      files
-    };
-  }
-  /** The newest learnings and handoffs files, one row per file, newest commit first. */
-  async recent(name5, limit = 20) {
-    const repo = this.repo(name5);
-    if (!await this.head(repo)) return [];
-    const out = await git2(
-      [
-        "log",
-        "--no-color",
-        "-n300",
-        "--name-only",
-        "--format=%x1e%H%x1f%at%x1f%s",
-        "--",
-        "learnings",
-        "handoffs"
-      ],
-      { cwd: repo }
-    );
-    const seen = /* @__PURE__ */ new Set();
-    const rows = [];
-    for (const block of out.split("")) {
-      const [header = "", ...files] = block.split("\n").filter((l, i) => i === 0 || l.trim());
-      const [sha = "", at = "0", subject = ""] = header.split("");
-      if (!sha) continue;
-      for (const path2 of files) {
-        const kind = path2.startsWith("learnings/") ? "learnings" : path2.startsWith("handoffs/") ? "handoffs" : null;
-        if (!kind || path2.endsWith(".gitkeep") || seen.has(path2)) continue;
-        seen.add(path2);
-        rows.push({ path: path2, kind, sha, at: Number(at) * 1e3, subject });
-      }
-    }
-    const { entries } = await this.tree(name5);
-    const live = new Set(entries.map((e) => e.path));
-    return rows.filter((r) => live.has(r.path)).slice(0, limit);
-  }
-  /**
-   * Saves `content` at `path` as one commit. `base` is the commit the editor
-   * loaded: when the file changed since, the save is refused so an edit never
-   * overwrites a newer version unseen.
-   */
-  async write(name5, path2, content, message, base) {
-    checkPath(path2);
-    if (Buffer.byteLength(content) > MAX_FILE_BYTES2) {
-      throw new ContextInputError("The file is larger than 1 MiB");
-    }
-    const found = scanForSecrets(content);
-    if (found.length > 0) {
-      const list = found.map((f2) => `${f2.kind} on line ${f2.line}`).join(", ");
-      throw new ContextInputError(
-        `Not saved: the text looks like it holds a credential (${list}). Remove it first.`
-      );
-    }
-    return this.commit(name5, [{ path: path2, content }], checkMessage(message), { base, guard: path2 });
-  }
-  /** Keeps one version of a conflicted file at its original path and deletes the conflict copy. */
-  async resolveConflict(name5, conflictPath, keep, message) {
-    checkPath(conflictPath);
-    const original = conflictOriginal(conflictPath);
-    if (!original) throw new ContextInputError(`"${conflictPath}" is not a conflict copy`);
-    const msg = checkMessage(
-      message ?? `Resolve conflict in ${original}: keep ${keep === "conflict" ? "the conflict copy" : "the original"}`
-    );
-    const repo = this.repo(name5);
-    const result = await contextService.exclusive(name5, async () => {
-      const head = await this.head(repo);
-      if (!head) throw new ContextInputError(`"${conflictPath}" does not exist`);
-      const blob2 = await runGit(["rev-parse", "--verify", "-q", `${head}:${conflictPath}`], {
-        cwd: repo
-      });
-      if (blob2.code !== 0) throw new ContextInputError(`"${conflictPath}" does not exist`);
-      if (keep === "original") {
-        const orig = await runGit(["rev-parse", "--verify", "-q", `${head}:${original}`], {
-          cwd: repo
-        });
-        if (orig.code !== 0) {
-          throw new ContextInputError(
-            `"${original}" does not exist, so "${conflictPath}" is not a conflict copy of anything`
-          );
-        }
-      }
-      const changes = [{ path: conflictPath }];
-      if (keep === "conflict") changes.push({ path: original, blob: blob2.stdout.trim() });
-      return this.commitLocked(repo, name5, head, changes, msg);
-    });
-    return { commit: result.commit, path: original };
-  }
-  commit(name5, changes, message, opts = {}) {
-    const repo = this.repo(name5);
-    return contextService.exclusive(name5, async () => {
-      const head = await this.head(repo);
-      if (head && opts.base && opts.guard && head !== opts.base) {
-        const at = async (rev) => {
-          const r = await runGit(["rev-parse", "--verify", "-q", `${rev}:${opts.guard}`], {
-            cwd: repo
-          });
-          return r.code === 0 ? r.stdout.trim() : "";
-        };
-        if (await at(head) !== await at(opts.base)) {
-          throw new ContextConflictError(
-            `"${opts.guard}" changed since you opened it. Reload it to see the newer version.`
-          );
-        }
-      }
-      return this.commitLocked(repo, name5, head, changes, message, opts.author);
-    });
-  }
-  /** Builds the commit in a private index. The caller holds the context's lock. */
-  async commitLocked(repo, name5, head, changes, message, author) {
-    const dir = mkdtempSync2(join50(tmpdir7(), "band-context-index-"));
-    try {
-      const env = contextGitEnv({
-        GIT_INDEX_FILE: join50(dir, "index"),
-        ...author ? {
-          GIT_AUTHOR_NAME: author,
-          GIT_AUTHOR_EMAIL: `${author}@localhost`,
-          GIT_COMMITTER_NAME: author,
-          GIT_COMMITTER_EMAIL: `${author}@localhost`
-        } : {}
-      });
-      const opts = { cwd: repo, env };
-      if (head) await git2(["read-tree", head], opts);
-      for (const change of changes) {
-        if (change.content === void 0 && change.blob === void 0) {
-          await git2(["update-index", "--index-info"], {
-            ...opts,
-            input: `0 ${"0".repeat(40)}	${change.path}
-`
-          });
-          continue;
-        }
-        const oid = change.blob ?? (await git2(["hash-object", "-w", "--stdin"], { ...opts, input: change.content })).trim();
-        const r = await runGit(
-          ["update-index", "--add", "--cacheinfo", `100644,${oid},${change.path}`],
-          opts
-        );
-        if (r.code !== 0) {
-          throw new ContextInputError(
-            `Cannot save "${change.path}": ${r.stderr.trim().slice(0, 200)}`
-          );
-        }
-      }
-      const tree = (await git2(["write-tree"], opts)).trim();
-      if (head) {
-        const current3 = (await git2(["rev-parse", `${head}^{tree}`], opts)).trim();
-        if (current3 === tree) return { commit: head, changed: false };
-      }
-      const commit = (await git2(["commit-tree", tree, ...head ? ["-p", head] : [], "-m", message], opts)).trim();
-      const ref2 = (await git2(["symbolic-ref", "-q", "HEAD"], { cwd: repo })).trim();
-      const moved = await runGit(["update-ref", "-m", "context browser", ref2, commit, head ?? ""], {
-        cwd: repo
-      });
-      if (moved.code !== 0) {
-        throw new ContextConflictError("The context changed while saving. Reload and try again.");
-      }
-      contextService.syncSoon(name5);
-      return { commit, changed: true };
-    } finally {
-      rmSync7(dir, { recursive: true, force: true });
-    }
-  }
-};
-var contextBrowserService = new ContextBrowserService();
-
-// src/server/api/context/router.ts
 var name2 = external_exports2.string().trim().min(1).max(63);
 var labels = external_exports2.array(external_exports2.string().min(1).max(100)).max(20);
 var repoNames = external_exports2.array(external_exports2.string().trim().min(1).max(200)).max(100);
@@ -90048,7 +90436,7 @@ function throwAsTRPCError(err) {
 init_zod();
 
 // src/server/services/editor-service.ts
-import { isAbsolute as isAbsolute5, join as join52, resolve as resolve10, sep as sep8 } from "node:path";
+import { isAbsolute as isAbsolute5, join as join53, resolve as resolve10, sep as sep8 } from "node:path";
 
 // ../../packages/shared/src/file-location.ts
 function formatFileLocation(filePath, line2, options) {
@@ -90148,7 +90536,7 @@ function subscribeToFileChanges(worktreeId2, listener) {
 
 // src/server/services/formatter.ts
 init_src();
-import { basename as basename3, dirname as dirname15, isAbsolute as isAbsolute4, join as join51, resolve as resolvePath3 } from "node:path";
+import { basename as basename3, dirname as dirname15, isAbsolute as isAbsolute4, join as join52, resolve as resolvePath3 } from "node:path";
 import prettier from "prettier";
 var log59 = createLogger("formatter");
 var FormatterError = class extends Error {
@@ -90230,10 +90618,10 @@ async function resolveConfigOnHost(fs3, absFile, worktreePath) {
   let dir = dirname15(absFile);
   for (; ; ) {
     for (const name5 of JSON_CONFIGS) {
-      const parsed = await readJson2(fs3, join51(dir, name5));
+      const parsed = await readJson2(fs3, join52(dir, name5));
       if (parsed && typeof parsed === "object") return withoutPlugins(parsed);
     }
-    const pkg = await readJson2(fs3, join51(dir, "package.json"));
+    const pkg = await readJson2(fs3, join52(dir, "package.json"));
     if (pkg && typeof pkg.prettier === "object" && pkg.prettier !== null) {
       return withoutPlugins(pkg.prettier);
     }
@@ -90271,7 +90659,7 @@ async function isInsideWorktree(fs3, absFile, worktreePath) {
     realFile = await fs3.realpath(absFile);
   } catch {
     try {
-      realFile = join51(await fs3.realpath(dirname15(absFile)), basename3(absFile));
+      realFile = join52(await fs3.realpath(dirname15(absFile)), basename3(absFile));
     } catch {
       realFile = absFile;
     }
@@ -90456,7 +90844,7 @@ async function canonicalizeMaybeMissing(fs3, p2) {
     const prefix = parts.slice(0, i).join(sep8) || sep8;
     try {
       const canonicalPrefix = await fs3.realpath(prefix);
-      return join52(canonicalPrefix, ...parts.slice(i));
+      return join53(canonicalPrefix, ...parts.slice(i));
     } catch {
     }
   }
@@ -90531,14 +90919,14 @@ import { basename as basename5, dirname as dirname16, isAbsolute as isAbsolute6
 
 // src/server/services/repo-service.ts
 import { existsSync as existsSync15 } from "node:fs";
-import { basename as basename4, join as join54, posix as posix7, resolve as resolve11 } from "node:path";
+import { basename as basename4, join as join55, posix as posix7, resolve as resolve11 } from "node:path";
 init_worktree_id();
 init_repos();
 init_worktree_statuses();
 
 // src/server/services/repo-avatar-service.ts
 import { mkdir as mkdir10, readFile as readFile9, rename as rename4, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join53 } from "node:path";
+import { join as join54 } from "node:path";
 init_src();
 init_repos();
 init_settings();
@@ -90690,7 +91078,7 @@ var RepoAvatarService = class {
         return null;
       }
       await mkdir10(cacheDir(), { recursive: true });
-      const imagePath = join53(cacheDir(), `${key2}.img`);
+      const imagePath = join54(cacheDir(), `${key2}.img`);
       await writeFile7(`${imagePath}.tmp`, result.bytes);
       await rename4(`${imagePath}.tmp`, imagePath);
       await this.writeMeta(key2, entry, {
@@ -90708,7 +91096,7 @@ var RepoAvatarService = class {
   async readCached(key2, meta) {
     if (meta?.status !== "ok" || !meta.contentType) return null;
     try {
-      const bytes = await readFile9(join53(cacheDir(), `${key2}.img`));
+      const bytes = await readFile9(join54(cacheDir(), `${key2}.img`));
       return { bytes, contentType: meta.contentType };
     } catch {
       return null;
@@ -90718,7 +91106,7 @@ var RepoAvatarService = class {
     entry.meta = meta;
     entry.retryAfter = 0;
     await mkdir10(cacheDir(), { recursive: true });
-    await writeFile7(join53(cacheDir(), `${key2}.json`), JSON.stringify(meta));
+    await writeFile7(join54(cacheDir(), `${key2}.json`), JSON.stringify(meta));
   }
   /** In-memory view of one owner's cache sidecar, loaded from disk once. */
   async entry(ref2) {
@@ -90727,7 +91115,7 @@ var RepoAvatarService = class {
     if (entry) return entry;
     let meta = null;
     try {
-      meta = JSON.parse(await readFile9(join53(cacheDir(), `${key2}.json`), "utf-8"));
+      meta = JSON.parse(await readFile9(join54(cacheDir(), `${key2}.json`), "utf-8"));
     } catch {
     }
     entry = this.entries.get(key2) ?? { meta, retryAfter: 0 };
@@ -90749,7 +91137,7 @@ var RepoAvatarService = class {
   }
 };
 function cacheDir() {
-  return join53(bandHome(), "cache", "github-avatars");
+  return join54(bandHome(), "cache", "github-avatars");
 }
 function cacheKey2(ref2) {
   return `${ref2.host.replace(/[^a-z0-9.-]/g, "_")}__${ref2.owner.toLowerCase()}`;
@@ -90899,7 +91287,7 @@ var RepoService = class {
       }
     }
     const resolvedPath = resolve11(path2);
-    const kind = existsSync15(join54(resolvedPath, ".git")) ? "git" : "plain";
+    const kind = existsSync15(join55(resolvedPath, ".git")) ? "git" : "plain";
     let defaultBranch = "main";
     let worktrees2 = [];
     if (kind === "git") {
@@ -91851,14 +92239,16 @@ var hostsRouter = t.router({
   list: publicProcedure.input(
     external_exports2.object({ limit: external_exports2.number().int().min(1).max(MAX_LIST_LIMIT).default(DEFAULT_LIST_LIMIT) }).default({ limit: DEFAULT_LIST_LIMIT })
   ).query(async ({ input }) => {
-    const hosts2 = tokenService.listHosts(input.limit);
+    const all = tokenService.listHosts(input.limit);
+    const hosts2 = all.filter((h) => h.id !== "local" || h.usable);
     const local = hosts2.find((h) => h.id === "local");
     if (local) {
       const info = await hostRegistry.local.info().catch(() => null);
       if (info) {
         local.home = info.home ?? null;
         local.capabilities = Object.entries(info.capabilities).filter(([, on]) => on).map(([name5]) => name5);
-        local.agents = await agentTypesOn(hostRegistry.local);
+        local.report = info.report ?? null;
+        local.agents = info.report ? info.report.agents.filter((a) => a.installed && a.loggedIn !== false).map((a) => a.type) : await agentTypesOn(hostRegistry.local);
         local.tools = info.tools;
       }
     }
@@ -94630,10 +95020,10 @@ var pluginsRouter = t.router({
 });
 
 // ../../packages/host-local/src/process/install.ts
-import { execFile as execFile13 } from "node:child_process";
+import { execFile as execFile14 } from "node:child_process";
 async function brewInstall(pkg, resolvedPath) {
   await new Promise((resolve16, reject) => {
-    execFile13(
+    execFile14(
       "brew",
       ["install", pkg],
       { env: { ...process.env, PATH: resolvedPath }, timeout: 12e4 },
@@ -94933,16 +95323,16 @@ async function checkout(fn) {
   });
 }
 function present(view4) {
-  return { ...view4, coordinatorError: projectCoordinatorService.lastError(view4.id) };
+  return {
+    ...view4,
+    coordinatorError: projectCoordinatorService.lastError(view4.id),
+    coordinatorWaiting: projectCoordinatorService.isWaiting(view4.id)
+  };
 }
 var projectsRouter = t.router({
   list: publicProcedure.query(() => ({ projects: projectService.list().map(present) })),
   /** `project` is an id or a name. */
   get: publicProcedure.input(external_exports2.object({ project: ref })).query(({ input }) => guard3(() => ({ project: present(projectService.get(input.project)) }))),
-  /** The charter the coordinator starts with, for the project's view. */
-  charter: publicProcedure.input(external_exports2.object({ project: ref })).query(
-    ({ input }) => guard3(() => ({ charter: projectCoordinatorService.charterFor(input.project) }))
-  ),
   create: adminProcedure.input(
     external_exports2.object({
       name: external_exports2.string().trim().min(1).max(63),
@@ -94984,7 +95374,6 @@ var projectsRouter = t.router({
     ({ input }) => guard3(async () => {
       const { project, ...patch } = input;
       const updated = await projectCoordinatorService.update(project, patch);
-      void projectFolderService.writeInstructions(projectService.row(updated.id));
       return { project: present(updated) };
     })
   ),
@@ -95040,7 +95429,6 @@ var projectsRouter = t.router({
         throw new ProjectConflictError(err instanceof Error ? err.message : String(err));
       }
       const view4 = projectService.removeRepo(row.id, input.repo);
-      void projectFolderService.writeInstructions(projectService.row(row.id));
       return { project: view4 };
     })
   ),
@@ -95161,7 +95549,7 @@ var projectsRouter = t.router({
 init_src();
 init_zod();
 import { realpathSync as realpathSync5 } from "node:fs";
-import { join as join55, resolve as resolve12, sep as sep9 } from "node:path";
+import { join as join56, resolve as resolve12, sep as sep9 } from "node:path";
 init_state();
 var log63 = createLogger("trpc.queue");
 var queuedFileSchema = external_exports2.object({
@@ -95171,7 +95559,7 @@ var queuedFileSchema = external_exports2.object({
   filename: external_exports2.string().optional()
 });
 function isPathWithinUploadDir(p2) {
-  const uploadDir = join55(bandHome(), "uploads");
+  const uploadDir = join56(bandHome(), "uploads");
   const normalized2 = resolve12(p2);
   if (normalized2 !== uploadDir && !normalized2.startsWith(uploadDir + sep9)) {
     return false;
@@ -95911,12 +96299,12 @@ function allowed(args) {
 var UNAUTHENTICATED2 = /gh auth login|GH_TOKEN|GITHUB_TOKEN|authentication|HTTP 401|bad credentials/i;
 var MISSING_GH = /ENOENT|command not found|executable file not found|no such file/i;
 var GH_TIMEOUT_MS2 = 3e4;
-function withTimeout2(run4) {
+function withTimeout2(run5) {
   let timer;
   const timeout = new Promise((_2, reject) => {
     timer = setTimeout(() => reject(new Error("gh timed out")), GH_TIMEOUT_MS2);
   });
-  return Promise.race([run4, timeout]).finally(() => clearTimeout(timer));
+  return Promise.race([run5, timeout]).finally(() => clearTimeout(timer));
 }
 function firstLine2(err) {
   return (err instanceof Error ? err.message : String(err)).split("\n")[0];
@@ -97190,6 +97578,11 @@ var terminalsRouters = {
 init_zod();
 var label = external_exports2.string().trim().min(1).max(100);
 var tokensRouter = t.router({
+  /** Which token this request uses. Any device token may ask; it returns no secret. */
+  current: publicProcedure.query(({ ctx }) => ({
+    tokenId: ctx.tokenId ?? null,
+    admin: ctx.admin
+  })),
   list: adminProcedure.input(
     external_exports2.object({ limit: external_exports2.number().int().min(1).max(MAX_LIST_LIMIT).default(DEFAULT_LIST_LIMIT) }).default({ limit: DEFAULT_LIST_LIMIT })
   ).query(({ input }) => ({ tokens: tokenService.list(input.limit) })),
@@ -97313,7 +97706,7 @@ var vaultRouter = t.router({
 init_zod();
 
 // src/server/services/diff-service.ts
-import { join as join56, resolve as resolve13, sep as sep10 } from "node:path";
+import { join as join57, resolve as resolve13, sep as sep10 } from "node:path";
 init_src();
 var log71 = createLogger("diff-service");
 var EMPTY_TREE_ARGS = ["hash-object", "-t", "tree", "/dev/null"];
@@ -97411,7 +97804,7 @@ function parseFileStatuses(nameStatusOutput) {
   return fileStatuses;
 }
 function assertWorktreeRelative(cwd, filePath) {
-  const target = resolve13(join56(cwd, filePath));
+  const target = resolve13(join57(cwd, filePath));
   if (target !== cwd && !target.startsWith(cwd + sep10)) {
     throw new Error("Invalid path");
   }
@@ -97426,7 +97819,7 @@ function assertWorktreeRelative(cwd, filePath) {
 }
 async function readUntrackedFileLines(host, cwd, file2) {
   try {
-    const content = new TextDecoder().decode(await host.fs.readFile(join56(cwd, file2)));
+    const content = new TextDecoder().decode(await host.fs.readFile(join57(cwd, file2)));
     const lines = content.split("\n");
     if (lines.length > 0 && lines[lines.length - 1] === "") {
       lines.pop();
@@ -97773,7 +98166,7 @@ var DiffService = class {
     const compareBranch = options.compareBranch ?? defaultBranch;
     const cwd = worktree.worktree.path;
     const execGit2 = gitRunner(worktree.host);
-    const hasGit = await worktree.host.fs.stat(join56(cwd, ".git")).then(
+    const hasGit = await worktree.host.fs.stat(join57(cwd, ".git")).then(
       () => true,
       (err) => {
         if (err instanceof HostOfflineError || err instanceof HostTimeoutError) throw err;
@@ -97811,7 +98204,7 @@ var DiffService = class {
     applyLineCounts(status.staged, parseNumstat(stagedNumstat));
     await Promise.all(
       status.untracked.map(async (entry) => {
-        const lines = await countUntrackedLines(worktree.host, join56(cwd, entry.path));
+        const lines = await countUntrackedLines(worktree.host, join57(cwd, entry.path));
         if (lines !== null) {
           entry.additions = lines;
           entry.deletions = 0;
@@ -97959,7 +98352,7 @@ var DiffService = class {
 var diffService = new DiffService();
 
 // src/server/services/files-service.ts
-import { dirname as dirname17, extname as extname3, join as join57, resolve as resolve14, sep as sep11 } from "node:path";
+import { dirname as dirname17, extname as extname3, join as join58, resolve as resolve14, sep as sep11 } from "node:path";
 var MAX_FILE_SIZE2 = 1024 * 1024;
 var LANG_MAP2 = {
   ".js": "javascript",
@@ -98023,7 +98416,7 @@ var FilesService = class {
       throw new WorktreeNotFoundError(worktreeId2);
     }
     const root = worktree.worktree.path;
-    const target = resolve14(join57(root, relative3));
+    const target = resolve14(join58(root, relative3));
     const insideRoot = target === root || target.startsWith(root + sep11);
     if (!insideRoot) {
       throw new Error("Invalid path");
@@ -99902,7 +100295,7 @@ function createMcpServer(req) {
   return server;
 }
 function registerContextTools(server, caller) {
-  const run4 = async (fn) => {
+  const run5 = async (fn) => {
     try {
       return { content: [{ type: "text", text: JSON.stringify(await fn(), null, 2) }] };
     } catch (err) {
@@ -99922,7 +100315,7 @@ function registerContextTools(server, caller) {
       // biome-ignore lint/suspicious/noExplicitAny: MCP SDK accepts Zod schemas as AnySchema
     },
     // biome-ignore lint/suspicious/noExplicitAny: handler args follow the schema above
-    (args) => run4(() => contextToolsService.search(caller, args.query, args.scope, args.limit))
+    (args) => run5(() => contextToolsService.search(caller, args.query, args.scope, args.limit))
   );
   server.registerTool(
     "context_append_learning",
@@ -99935,7 +100328,7 @@ function registerContextTools(server, caller) {
       // biome-ignore lint/suspicious/noExplicitAny: MCP SDK accepts Zod schemas as AnySchema
     },
     // biome-ignore lint/suspicious/noExplicitAny: handler args follow the schema above
-    (args) => run4(() => contextToolsService.appendLearning(caller, args))
+    (args) => run5(() => contextToolsService.appendLearning(caller, args))
   );
   server.registerTool(
     "context_handoff",
@@ -99949,7 +100342,7 @@ function registerContextTools(server, caller) {
       // biome-ignore lint/suspicious/noExplicitAny: MCP SDK accepts Zod schemas as AnySchema
     },
     // biome-ignore lint/suspicious/noExplicitAny: handler args follow the schema above
-    (args) => run4(() => contextToolsService.handoff(caller, args))
+    (args) => run5(() => contextToolsService.handoff(caller, args))
   );
 }
 async function handleMcpRequest(req, res) {
@@ -100245,8 +100638,8 @@ init_isolation();
 var log73 = createLogger("project-dispatch");
 var DEFAULT_WORKER_AGENT = "claude-code";
 var lanes = /* @__PURE__ */ new Map();
-function serialized(projectId, run4) {
-  const next = (lanes.get(projectId) ?? Promise.resolve()).then(run4, run4);
+function serialized(projectId, run5) {
+  const next = (lanes.get(projectId) ?? Promise.resolve()).then(run5, run5);
   const tail = next.catch(() => void 0);
   lanes.set(projectId, tail);
   void tail.then(() => {
@@ -100332,7 +100725,9 @@ var ProjectDispatchService = class {
         repo: input.repo,
         branch,
         projectId: row.id,
-        ...Object.keys(placement).length > 0 ? { placement } : {},
+        // With the hub's own machine off there is no default host, so a call that names no
+        // placement still goes through placement and gets the least loaded capable worker.
+        ...Object.keys(placement).length > 0 || !isLocalHostEnabled() ? { placement } : {},
         brief: renderBrief({
           title: input.title?.trim() || void 0,
           project: row.name,
@@ -100436,12 +100831,12 @@ function lookUpToolsOnce(server, listPage) {
   if (running) return running;
   const last = lookupMissedAt.get(server.id);
   if (last !== void 0 && Date.now() - last < LOOKUP_COOLDOWN_MS) return Promise.resolve();
-  const run4 = lookUpTools(server, listPage).catch(() => void 0).finally(() => {
+  const run5 = lookUpTools(server, listPage).catch(() => void 0).finally(() => {
     lookupsInFlight.delete(server.id);
     lookupMissedAt.set(server.id, Date.now());
   });
-  lookupsInFlight.set(server.id, run4);
-  return run4;
+  lookupsInFlight.set(server.id, run5);
+  return run5;
 }
 async function lookUpTools(server, listPage) {
   const tools = /* @__PURE__ */ new Map();
@@ -100600,7 +100995,7 @@ async function readBody2(req, max2) {
 
 // src/server/api/mcp-proxy/coordinator.ts
 var log74 = createLogger("coordinator-mcp");
-async function run3(fn) {
+async function run4(fn) {
   try {
     const value = await fn();
     return { content: [{ type: "text", text: JSON.stringify(value, null, 2) }] };
@@ -100623,7 +101018,7 @@ function createServer2(projectId) {
     server.registerTool(
       name5,
       { description, inputSchema },
-      (args) => run3(() => handler(args ?? {}))
+      (args) => run4(() => handler(args ?? {}))
     );
   };
   tool(
@@ -101131,7 +101526,7 @@ import {
   statSync as statSync12,
   writeFileSync as writeFileSync8
 } from "node:fs";
-import { join as join58 } from "node:path";
+import { join as join59 } from "node:path";
 var MEDIA_ID = /^[0-9a-f]{64}$/;
 var DEFAULT_MAX_MEDIA_BYTES = 50 * 1024 * 1024;
 var ALLOWED_MEDIA_TYPES = /* @__PURE__ */ new Set([
@@ -101159,7 +101554,7 @@ function maxMediaBytes() {
   return Number.isFinite(n) && n > 0 ? n : DEFAULT_MAX_MEDIA_BYTES;
 }
 function mediaDir() {
-  return join58(bandHome(), "media");
+  return join59(bandHome(), "media");
 }
 function allowedMediaType(header) {
   const type = (header ?? "").split(";")[0].trim().toLowerCase();
@@ -101179,7 +101574,7 @@ var mediaService = {
     }
     const dir = mediaDir();
     mkdirSync10(dir, { recursive: true });
-    const tmp = join58(dir, `.upload-${randomBytes17(8).toString("hex")}`);
+    const tmp = join59(dir, `.upload-${randomBytes17(8).toString("hex")}`);
     const hash = createHash12("sha256");
     const limit = maxMediaBytes();
     let size = 0;
@@ -101200,11 +101595,11 @@ var mediaService = {
       if (expectedId && expectedId !== id) {
         throw new MediaRefusedError(400, "The id is not the SHA-256 of the content");
       }
-      const target = join58(dir, id);
+      const target = join59(dir, id);
       const created = !existsSync16(target);
-      const typePath = join58(dir, `${id}.type`);
+      const typePath = join59(dir, `${id}.type`);
       if (created || !existsSync16(typePath)) {
-        const typeTmp = join58(dir, `.type-${randomBytes17(8).toString("hex")}`);
+        const typeTmp = join59(dir, `.type-${randomBytes17(8).toString("hex")}`);
         writeFileSync8(typeTmp, contentType);
         renameSync6(typeTmp, typePath);
       }
@@ -101225,15 +101620,15 @@ var mediaService = {
   meta(id) {
     if (!MEDIA_ID.test(id)) return null;
     try {
-      const size = statSync12(join58(mediaDir(), id)).size;
-      const contentType = readFileSync12(join58(mediaDir(), `${id}.type`), "utf8").trim();
+      const size = statSync12(join59(mediaDir(), id)).size;
+      const contentType = readFileSync12(join59(mediaDir(), `${id}.type`), "utf8").trim();
       return { size, contentType };
     } catch {
       return null;
     }
   },
   read(id, range) {
-    return createReadStream4(join58(mediaDir(), id), range);
+    return createReadStream4(join59(mediaDir(), id), range);
   }
 };
 
@@ -101747,14 +102142,14 @@ async function handleOAuthCallback(req, res) {
 
 // src/server/api/web-app-manifest.ts
 import { createReadStream as createReadStream5, statSync as statSync13 } from "node:fs";
-import { join as join59 } from "node:path";
+import { join as join60 } from "node:path";
 var WEB_APP_MANIFEST_PATH = "/manifest.webmanifest";
 var ICON_FILES = ["band-192.png", "band-512.png", "apple-touch-icon.png"];
 function handleWebAppManifest(req, res, publicDir) {
   if (req.method !== "GET" && req.method !== "HEAD") return false;
   const pathname = req.url?.split("?")[0];
   if (pathname === WEB_APP_MANIFEST_PATH) {
-    sendFile(req, res, join59(publicDir, "manifest.webmanifest"), {
+    sendFile(req, res, join60(publicDir, "manifest.webmanifest"), {
       "Content-Type": "application/manifest+json",
       "Cache-Control": "no-cache"
     });
@@ -101762,7 +102157,7 @@ function handleWebAppManifest(req, res, publicDir) {
   }
   const icon = ICON_FILES.find((name5) => pathname === `/icons/${name5}`);
   if (!icon) return false;
-  sendFile(req, res, join59(publicDir, "icons", icon), {
+  sendFile(req, res, join60(publicDir, "icons", icon), {
     "Content-Type": "image/png",
     "Cache-Control": "public, max-age=86400"
   });
@@ -102022,6 +102417,10 @@ var MSG_KEY_EVENT = 4;
 var MSG_POINTER_EVENT = 5;
 var MSG_CLIENT_CUT_TEXT = 6;
 var MAX_MESSAGE_BYTES2 = 1024 * 1024;
+function cutTextSize(payload) {
+  if (8 + payload > MAX_MESSAGE_BYTES2) throw new RfbFilterError("RFB message too large");
+  return 8 + payload;
+}
 var RfbFilterError = class extends Error {
 };
 var RfbClientFilter = class {
@@ -102072,7 +102471,7 @@ var RfbClientFilter = class {
       case MSG_POINTER_EVENT:
         return 6;
       case MSG_CLIENT_CUT_TEXT:
-        return buf.length < 8 ? null : 8 + buf.readUInt32BE(4);
+        return buf.length < 8 ? null : cutTextSize(Math.abs(buf.readInt32BE(4)));
       default:
         throw new RfbFilterError(`Unsupported RFB message type ${buf[0]}`);
     }
@@ -102419,7 +102818,7 @@ async function handleLspConnection(ws, req) {
 }
 
 // src/server/services/_utils/hosted-file.ts
-import { basename as basename6, join as join60 } from "node:path";
+import { basename as basename6, join as join61 } from "node:path";
 async function openHostedFile(kind, worktreeId2, rawName) {
   const host = hostRegistry.hostFor(worktreeId2);
   if (host.id === hostRegistry.local.id) return null;
@@ -102433,7 +102832,7 @@ async function openHostedFile(kind, worktreeId2, rawName) {
   try {
     const dirs = (await host.info()).dirs;
     if (!dirs) return null;
-    const path2 = join60(dirs[kind], worktreeId2, name5);
+    const path2 = join61(dirs[kind], worktreeId2, name5);
     const stat8 = await host.fs.stat(path2, { followSymlinks: true });
     if (stat8.kind !== "file") return null;
     return { size: stat8.size, stream: host.fs.readStream(path2) };
@@ -102479,7 +102878,7 @@ async function listenWithFallback(server, startPort, attempts = 20) {
 init_src();
 init_worktree_id();
 var log82 = createLogger("context-autosync");
-var LOCAL_HOST_ID6 = "local";
+var LOCAL_HOST_ID7 = "local";
 var DEFAULT_INTERVAL_MS2 = 5e3;
 var SOON_MS = 300;
 var MAX_STALE_WAIT = 12;
@@ -102620,18 +103019,20 @@ var ContextAutosyncService = class {
     const online = new Set(
       tokenService.listHosts().filter((h) => h.status === "online").map((h) => h.id)
     );
-    online.add(LOCAL_HOST_ID6);
+    online.add(LOCAL_HOST_ID7);
     let localLabels;
     const lifecycle = ephemeralLifecycleService.states();
     const out = [];
     for (const project of projectService.rows()) {
       const context = contextService.find(project.contextName);
       if (!context) continue;
-      const hostIds = /* @__PURE__ */ new Set([projectFolderService.hostOf(project).id]);
+      const hostIds = /* @__PURE__ */ new Set();
+      const folderHost = projectFolderService.hostIdOf(project);
+      if (folderHost) hostIds.add(folderHost);
       for (const w2 of projectService.allWorktreesOf(project.id)) {
         const id = toWorktreeId(w2.repoName, w2.name);
         if (lifecycle.has(id)) continue;
-        hostIds.add(w2.hostId ?? LOCAL_HOST_ID6);
+        hostIds.add(w2.hostId ?? LOCAL_HOST_ID7);
       }
       for (const hostId2 of hostIds) {
         if (!online.has(hostId2)) continue;
@@ -102641,10 +103042,10 @@ var ContextAutosyncService = class {
         } catch {
           continue;
         }
-        if (hostId2 === LOCAL_HOST_ID6 && localLabels === void 0) {
+        if (hostId2 === LOCAL_HOST_ID7 && localLabels === void 0) {
           localLabels = (await host.info().catch(() => null))?.labels ?? [];
         }
-        const labels3 = hostId2 === LOCAL_HOST_ID6 ? localLabels ?? [] : tokenService.hostLabels(hostId2) ?? [];
+        const labels3 = hostId2 === LOCAL_HOST_ID7 ? localLabels ?? [] : tokenService.hostLabels(hostId2) ?? [];
         if (contextService.forSession("", labels3, context).every((r) => r.name !== context.name)) {
           continue;
         }
@@ -102652,7 +103053,7 @@ var ContextAutosyncService = class {
           project,
           host,
           spec: { name: context.name, kind: "project" },
-          readOnly: hostId2 !== LOCAL_HOST_ID6 && context.workerAccess === "read-only"
+          readOnly: hostId2 !== LOCAL_HOST_ID7 && context.workerAccess === "read-only"
         });
       }
     }
@@ -102883,7 +103284,7 @@ init_repos();
 // src/server/services/worker-cli-service.ts
 import { createHash as createHash13 } from "node:crypto";
 import { readFile as readFile10 } from "node:fs/promises";
-import { join as join61 } from "node:path";
+import { join as join62 } from "node:path";
 init_src();
 var log84 = createLogger("worker-cli");
 var RPC_INVALID_PARAMS2 = -32602;
@@ -102891,7 +103292,7 @@ var PLATFORM_NAME = /^[a-z0-9_]{1,16}$/;
 function candidatesFor(platform3, arch) {
   const out = [];
   const dir = process.env.BAND_CLI_BINARIES_DIR;
-  if (dir) out.push(join61(dir, `band-${platform3}-${arch}${platform3 === "win32" ? ".exe" : ""}`));
+  if (dir) out.push(join62(dir, `band-${platform3}-${arch}${platform3 === "win32" ? ".exe" : ""}`));
   if (platform3 === process.platform && arch === process.arch) {
     const own = findCliBinary();
     if (own) out.push(own);
@@ -103441,7 +103842,8 @@ var workerRelayService = new WorkerRelayService();
 // src/server/services/worker-link-service.ts
 var log86 = createLogger("worker-link");
 var repoQueries4 = new RepoQueries();
-var LOCAL_HOST_ID7 = "local";
+var LOCAL_HOST_ID8 = "local";
+var CAPABILITY_REFRESH_MS = 3 * 6e4;
 var WORKER_CONNECT_PATH = "/api/workers/connect";
 var WORKER_EXCHANGE_PATH = "/api/workers/exchange";
 var MAX_EXCHANGE_BODY_BYTES = 4 * 1024;
@@ -103457,6 +103859,7 @@ var WorkerLinkService = class {
     handleProtocols: selectWsProtocol
   });
   unsubscribeRevoke = null;
+  refreshTimer = null;
   constructor(options = {}) {
     this.tokens = options.tokens ?? tokenService;
     this.queries = options.queries ?? new TokenQueries();
@@ -103482,20 +103885,59 @@ var WorkerLinkService = class {
   /** Makes every known worker resolvable, so a worktree on an offline host still finds its host. */
   start() {
     for (const row of this.queries.listHosts(1e3)) {
-      if (row.id !== LOCAL_HOST_ID7) this.remoteHost(row.id);
+      if (row.id !== LOCAL_HOST_ID8) this.remoteHost(row.id);
     }
     for (const row of this.queries.listHosts(1e3)) {
-      if (row.id !== LOCAL_HOST_ID7 && row.status === "online") {
+      if (row.id !== LOCAL_HOST_ID8 && row.status === "online") {
         this.queries.setHostStatus(row.id, "offline");
       }
     }
+    const every = Number(process.env.BAND_CAPABILITY_REFRESH_MS);
+    this.refreshTimer = setInterval(
+      () => void this.refreshReports(),
+      Number.isFinite(every) && every > 0 ? every : CAPABILITY_REFRESH_MS
+    );
+    this.refreshTimer.unref();
     this.unsubscribeRevoke = this.tokens.onRevoked((row) => {
       if (row.kind === "worker_session" && row.hostId) {
         if (this.server.drop(row.hostId, "token revoked")) log86.info(`cut link of ${row.hostId}`);
       }
     });
   }
+  /**
+   * Reads `host.info` again from every online worker and stores its capability report. The call is
+   * passive, so it does not keep an ephemeral worker awake. A change goes out as a host status
+   * event, which Settings > Hosts follows and a coordinator waiting for a worker listens to.
+   */
+  async refreshReports() {
+    if (this.refreshing) return;
+    this.refreshing = true;
+    try {
+      await Promise.allSettled(
+        this.queries.listHosts(1e3).filter((row) => row.id !== LOCAL_HOST_ID8 && row.status === "online").map((row) => this.refreshReport(row))
+      );
+    } finally {
+      this.refreshing = false;
+    }
+  }
+  refreshing = false;
+  async refreshReport(row) {
+    try {
+      const info = await this.remoteHost(row.id).info();
+      const { repoMappings: _mappings, ...facts } = info;
+      const stored = { ...row.info ?? {}, ...facts };
+      const changed = reportKey(stored.report) !== reportKey(row.info?.report);
+      this.queries.setHostInfo(row.id, stored);
+      if (changed) this.publish(row.id, "online");
+    } catch (err) {
+      log86.debug(
+        `could not refresh the report of ${row.id}: ${err instanceof Error ? err.message : err}`
+      );
+    }
+  }
   async close() {
+    if (this.refreshTimer) clearInterval(this.refreshTimer);
+    this.refreshTimer = null;
     this.unsubscribeRevoke?.();
     for (const ws of this.wss.clients) ws.terminate();
     await this.server.close();
@@ -103618,12 +104060,16 @@ var WorkerLinkService = class {
   }
 };
 var workerLinkService = new WorkerLinkService();
+function reportKey(report2) {
+  const { checkedAt: _at, ...rest } = report2 ?? {};
+  return JSON.stringify(rest);
+}
 
 // start-server.ts
 function logCrash(message) {
   try {
     mkdirSync11(bandHome(), { recursive: true });
-    appendFileSync2(join62(bandHome(), "server.log"), message, "utf-8");
+    appendFileSync2(join63(bandHome(), "server.log"), message, "utf-8");
   } catch {
   }
 }
@@ -103663,9 +104109,9 @@ function resolveUiDir() {
   if (explicit) return resolve15(explicit);
   const candidates2 = [
     resolve15(SERVER_ROOT, "..", "..", "web", "dist", "client"),
-    join62(SERVER_ROOT, "client")
+    join63(SERVER_ROOT, "client")
   ];
-  return candidates2.find((dir) => existsSync17(join62(dir, "_shell.html"))) ?? candidates2[1];
+  return candidates2.find((dir) => existsSync17(join63(dir, "_shell.html"))) ?? candidates2[1];
 }
 var clientDir = resolveUiDir();
 var uiRoot = process.env.BAND_UI_ROOT ? resolve15(process.env.BAND_UI_ROOT) : resolve15(SERVER_ROOT, "..", "web");
@@ -103701,12 +104147,12 @@ function allowedOrigins() {
   ];
 }
 var handleCors = createCorsMiddleware(allowedOrigins);
-function requestIsAdmin(req) {
-  if (!expectedToken) return true;
+function requestDevice(req) {
+  if (!expectedToken) return { admin: true, tokenId: void 0 };
   const token = authenticatedCredential(req, (c) => tokenService.resolveDevice(c), {
     allowCookie: req.headers.origin !== "null"
   });
-  return token?.admin === true;
+  return { admin: token?.admin === true, tokenId: token?.id };
 }
 var assets = null;
 var _openApiSpec = null;
@@ -103716,7 +104162,7 @@ function getOpenApiSpec() {
     if (isDev) {
       const { generateOpenAPIDocument } = await import("@trpc/openapi");
       const doc = await generateOpenAPIDocument(
-        join62(SERVER_ROOT, "src", "server", "api", "router.ts"),
+        join63(SERVER_ROOT, "src", "server", "api", "router.ts"),
         {
           title: "Band API",
           version: "1.0.0"
@@ -103725,7 +104171,7 @@ function getOpenApiSpec() {
       doc.servers = [{ url: "/trpc" }];
       return JSON.stringify(doc, null, 2);
     }
-    const openApiDoc = JSON.parse(readFileSync13(join62(SERVER_ROOT, "openapi.json"), "utf-8"));
+    const openApiDoc = JSON.parse(readFileSync13(join63(SERVER_ROOT, "openapi.json"), "utf-8"));
     openApiDoc.servers = [{ url: "/trpc" }];
     return JSON.stringify(openApiDoc, null, 2);
   })().catch((err) => {
@@ -103748,7 +104194,7 @@ function serveStaticFile(res, root, subdir, rawFilename) {
     res.end("Bad request");
     return;
   }
-  const filePath = join62(root, subdir, filename);
+  const filePath = join63(root, subdir, filename);
   try {
     const fileStat = statSync14(filePath);
     const contentType = mimeTypeFromFilename(filename);
@@ -103792,7 +104238,7 @@ async function serveWorktreeFile(res, worktreeId2, rawPath) {
     return;
   }
   const root = worktree.worktree.path;
-  const target = resolve15(join62(root, rawPath));
+  const target = resolve15(join63(root, rawPath));
   if (!target.startsWith(root + sep12) && target !== root) {
     res.writeHead(400);
     res.end("Bad request");
@@ -104024,7 +104470,7 @@ async function main() {
       res.end(JSON.stringify({ status: "ok", app: "band-web-server" }));
       return;
     }
-    if (handleWebAppManifest(req, res, isDev ? join62(uiRoot, "public") : clientDir)) return;
+    if (handleWebAppManifest(req, res, isDev ? join63(uiRoot, "public") : clientDir)) return;
     if (req.url?.split("?")[0] === WORKER_EXCHANGE_PATH) {
       await workerLinkService.handleExchange(req, res);
       return;
@@ -104125,7 +104571,7 @@ async function main() {
         return;
       }
       if (await serveHostedFile(res, "shared", partition, rest.slice(slashIdx + 1))) return;
-      serveStaticFile(res, bandHome(), join62("shared", partition), rest.slice(slashIdx + 1));
+      serveStaticFile(res, bandHome(), join63("shared", partition), rest.slice(slashIdx + 1));
       return;
     }
     if (req.url?.startsWith("/api/worktree-file/")) {
@@ -104260,7 +104706,7 @@ async function main() {
         endpoint: "/trpc",
         req: request,
         router: appRouter,
-        createContext: ({ req: webRequest }) => createContext({ req: webRequest, admin: requestIsAdmin(req) })
+        createContext: ({ req: webRequest }) => createContext({ req: webRequest, ...requestDevice(req) })
       });
       pipeWebResponseToNodeRes(response, res);
       return;
@@ -104333,7 +104779,7 @@ async function main() {
         if (pathname.startsWith("/_shell")) res.setHeader("Cache-Control", "no-cache");
       }
     });
-    const shellPath2 = join62(clientDir, "_shell.html");
+    const shellPath2 = join63(clientDir, "_shell.html");
     if (!existsSync17(shellPath2)) {
       throw new Error(
         `UI build not found at ${clientDir} (no _shell.html). Run \`pnpm build\` or pass --ui-dir <path>.`
@@ -104345,7 +104791,7 @@ async function main() {
   const wssHandler = applyWSSHandler({
     wss,
     router: appRouter,
-    createContext: ({ req }) => createContext({ req, admin: requestIsAdmin(req) })
+    createContext: ({ req }) => createContext({ req, ...requestDevice(req) })
   });
   const terminalWss = new import_websocket_server.default({ noServer: true, handleProtocols: selectWsProtocol });
   const lspWss = new import_websocket_server.default({ noServer: true, handleProtocols: selectWsProtocol });
@@ -104489,6 +104935,7 @@ Failed to bind any port in ${initialPort}..${initialPort + 19}:
       subscriptionService.start();
       void projectCoordinatorService.removeLegacyWorktrees().catch((err) => console.error("Failed to remove legacy coordinator worktrees:", err)).finally(() => {
         projectSubscriptionService.start();
+        projectCoordinatorService.start();
         void projectFolderService.warmAll();
         contextAutosyncService.start();
       });