@band-app/server 0.53.0 → 0.54.1

package/dist/start-server.mjs

@@ -2136,7 +2136,7 @@ var require_thread_stream = __commonJS({
     var { version: version3 } = require_package();
     var { EventEmitter: EventEmitter4 } = __require("events");
     var { Worker: Worker2 } = __require("worker_threads");
-    var { join: join60 } = __require("path");
+    var { join: join59 } = __require("path");
     var { pathToFileURL } = __require("url");
     var { wait } = require_wait();
     var {
@@ -2172,7 +2172,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join60(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join59(__dirname, "lib", "worker.js");
       const worker2 = new Worker2(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -2558,7 +2558,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire2 } = __require("module");
     var getCallers = require_caller();
-    var { join: join60, isAbsolute: isAbsolute7, sep: sep11 } = __require("node:path");
+    var { join: join59, isAbsolute: isAbsolute7, sep: sep11 } = __require("node:path");
     var sleep3 = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -2621,7 +2621,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join60(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join59(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -2639,7 +2639,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline3) {
-        target = bundlerOverrides["pino-worker"] || join60(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join59(__dirname, "worker.js");
         options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
@@ -2661,7 +2661,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join60(__dirname, "..", "file.js");
+          return join59(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -2989,11 +2989,11 @@ var require_tools = __commonJS({
         }
       }
     }
-    function buildFormatters(level, bindings, log91) {
+    function buildFormatters(level, bindings, log90) {
       return {
         level,
         bindings,
-        log: log91
+        log: log90
       };
     }
     function normalizeDestFileDescriptor(destination) {
@@ -3376,11 +3376,11 @@ var require_proto = __commonJS({
         }
       } else instance[serializersSym] = serializers;
       if (options.hasOwnProperty("formatters")) {
-        const { level, bindings: chindings, log: log91 } = options.formatters;
+        const { level, bindings: chindings, log: log90 } = options.formatters;
         instance[formattersSym] = buildFormatters(
           level || formatters.level,
           chindings || resetChildingsFormatter,
-          log91 || formatters.log
+          log90 || formatters.log
         );
       } else {
         instance[formattersSym] = buildFormatters(
@@ -3650,7 +3650,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join60 = ",";
+            let join59 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -3664,7 +3664,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join60 = `,
+                join59 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3672,13 +3672,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join60;
+                res += join59;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join60}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join59}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3699,7 +3699,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join60 = `,
+              join59 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3713,13 +3713,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key3, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join60;
+                separator = join59;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join60;
+              separator = join59;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -3760,7 +3760,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join60 = ",";
+            let join59 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -3773,7 +3773,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join60 = `,
+                join59 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3781,13 +3781,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join60;
+                res += join59;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join60}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join59}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3800,7 +3800,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join60 = `,
+              join59 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3809,7 +3809,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key3, value[key3], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join60;
+                separator = join59;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -3867,20 +3867,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join61 = `,
+              const join60 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join61;
+                res2 += join60;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join61}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join60}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -3896,16 +3896,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join60 = `,
+            const join59 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join60, maximumBreadth);
+              res += stringifyTypedArray(value, join59, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join60;
+              separator = join59;
             }
             if (deterministic) {
               keys = sort(keys, comparator2);
@@ -3916,13 +3916,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key3, value[key3], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}: ${tmp}`;
-                separator = join60;
+                separator = join59;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join60;
+              separator = join59;
             }
             if (separator !== "") {
               res = `
@@ -14699,7 +14699,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes17, createHash: createHash15 } = __require("crypto");
+    var { randomBytes: randomBytes17, createHash: createHash14 } = __require("crypto");
     var { Duplex, Readable: Readable3 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -15359,7 +15359,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash15("sha1").update(key2 + GUID).digest("base64");
+        const digest2 = createHash14("sha1").update(key2 + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -15726,7 +15726,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter4 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash15 } = __require("crypto");
+    var { createHash: createHash14 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -16027,7 +16027,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest2 = createHash15("sha1").update(key2 + GUID).digest("base64");
+        const digest2 = createHash14("sha1").update(key2 + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -41799,7 +41799,7 @@ var init_sql = __esm({
         return new SQL([new StringChunk(str4)]);
       }
       _sql.raw = raw;
-      function join60(chunks, separator) {
+      function join59(chunks, separator) {
         const result = [];
         for (const [i, chunk] of chunks.entries()) {
           if (i > 0 && separator !== void 0) result.push(separator);
@@ -41807,7 +41807,7 @@ var init_sql = __esm({
         }
         return new SQL(result);
       }
-      _sql.join = join60;
+      _sql.join = join59;
       function identifier(value) {
         return new Name(value);
       }
@@ -43735,7 +43735,7 @@ var init_sql2 = __esm({
         return new SQL3([new StringChunk2(str4)]);
       }
       _sql.raw = raw;
-      function join60(chunks, separator) {
+      function join59(chunks, separator) {
         const result = [];
         for (const [i, chunk] of chunks.entries()) {
           if (i > 0 && separator !== void 0) result.push(separator);
@@ -43743,7 +43743,7 @@ var init_sql2 = __esm({
         }
         return new SQL3(result);
       }
-      _sql.join = join60;
+      _sql.join = join59;
       function identifier(value) {
         return new Name2(value);
       }
@@ -48936,7 +48936,7 @@ var init_select3 = __esm({
           const baseTableName = this.tableName;
           const tableName = getTableLikeName(table);
           for (const item of extractUsedTable(table)) this.usedTables.add(item);
-          if (typeof tableName === "string" && this.config.joins?.some((join60) => join60.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins?.some((join59) => join59.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (!this.isPartialSelect) {
             if (Object.keys(this.joinsNotNullableMap).length === 1 && typeof baseTableName === "string") this.config.fields = { [baseTableName]: this.config.fields };
             if (typeof tableName === "string" && !is2(table, SQL3)) {
@@ -50201,7 +50201,7 @@ var init_dialect = __esm({
           if (!joins2) return;
           const withEntries = Object.entries(joins2).filter(([_2, v2]) => v2);
           if (!withEntries.length) return;
-          return sql2.join(withEntries.map(([k2, join60]) => {
+          return sql2.join(withEntries.map(([k2, join59]) => {
             const relation = tableConfig.relations[k2];
             const isSingle2 = is2(relation, One);
             const targetTable = aliasedTable(relation.targetTable, `d${currentDepth + 1}`);
@@ -50212,7 +50212,7 @@ var init_dialect = __esm({
               table: targetTable,
               mode: isSingle2 ? "first" : "many",
               schema,
-              queryConfig: join60,
+              queryConfig: join59,
               tableConfig: schema[relation.targetTableName],
               relationWhere: filter,
               isNested: true,
@@ -50226,7 +50226,7 @@ var init_dialect = __esm({
               key: k2,
               selection: innerQuery.selection,
               isArray: !isSingle2,
-              isOptional: (relation.optional ?? false) || join60 !== true && !!join60.where
+              isOptional: (relation.optional ?? false) || join59 !== true && !!join59.where
             });
             const jsonColumns = sql2.join(innerQuery.selection.map((s2) => {
               return sql2`${sql2.raw(this.escapeString(s2.key))}, ${s2.selection ? sql2`${jsonb2}(${sql2.identifier(s2.key)})` : sql2.identifier(s2.key)}`;
@@ -50745,7 +50745,7 @@ var init_update = __esm({
       createJoin(joinType) {
         return ((table, on) => {
           const tableName = getTableLikeName(table);
-          if (typeof tableName === "string" && this.config.joins.some((join60) => join60.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins.some((join59) => join59.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (typeof on === "function") {
             const from = this.config.from ? is2(table, SQLiteTable2) ? table[Table2.Symbol.Columns] : is2(table, Subquery2) ? table._.selectedFields : is2(table, SQLiteViewBase) ? table[ViewBaseConfig2].selectedFields : void 0 : void 0;
             on = on(new Proxy(this.config.table[Table2.Symbol.Columns], new SelectionProxyHandler({
@@ -54081,7 +54081,7 @@ import { lstatSync as lstatSync3, realpathSync as realpathSync4 } from "node:fs"
 import { platform } from "node:os";
 import { delimiter as delimiter3, join as join19, resolve as resolve4 } from "node:path";
 function findCliBinaryAt(opts) {
-  const { cwd, dirname: dirname17 } = opts;
+  const { cwd, dirname: dirname18 } = opts;
   const exe = platform() === "win32" ? "band.exe" : "band";
   const explicit = process.env.BAND_CLI_PATH;
   if (explicit) {
@@ -54097,7 +54097,7 @@ function findCliBinaryAt(opts) {
     // cwd = repo root (fallback)
     resolve4(cwd, "apps"),
     // From this source file in dev (packages/host-local/src/process/ → apps/)
-    resolve4(dirname17, "..", "..", "..", "..", "apps"),
+    resolve4(dirname18, "..", "..", "..", "..", "apps"),
     // From bundled `dist/` file (<Resources>/web/dist/ → <Resources>/) only
     // — in dev mode this resolves to `packages/`, which has no
     // `cli/target/<profile>/band` and is harmless; the walk above is the
@@ -54105,7 +54105,7 @@ function findCliBinaryAt(opts) {
     // layout under <Resources>/cli/ would still resolve. Today's Electron
     // bundle ships the binary under `binaries/` (handled by Strategy B),
     // so this strategy never hits in production either.
-    resolve4(dirname17, "..", "..", "..")
+    resolve4(dirname18, "..", "..", "..")
   ];
   for (const appsDir of appsStrategies) {
     for (const profile of ["release", "debug"]) {
@@ -54122,7 +54122,7 @@ function findCliBinaryAt(opts) {
     resolve4(cwd, "..", "binaries", exe),
     // From the bundled dist file (<Resources>/web/dist/start-server.mjs)
     // → <Resources>/binaries/band
-    resolve4(dirname17, "..", "..", "binaries", exe)
+    resolve4(dirname18, "..", "..", "binaries", exe)
   ];
   for (const p2 of electronCandidates) {
     try {
@@ -63153,10 +63153,10 @@ var init_agent_command = __esm({
 import { readdirSync as readdirSync8 } from "node:fs";
 import { mkdir as mkdir5 } from "node:fs/promises";
 import { join as join38 } from "node:path";
-async function openSharedDir(worktreeId4) {
+async function openSharedDir(worktreeId4, chatId) {
   const host = hostRegistry.hostFor(worktreeId4);
   if (host.id === hostRegistry.local.id) {
-    const path3 = join38(bandHome(), "shared", worktreeId4);
+    const path3 = join38(bandHome(), "shared", worktreeId4, chatId);
     await mkdir5(path3, { recursive: true });
     return {
       path: path3,
@@ -63171,7 +63171,7 @@ async function openSharedDir(worktreeId4) {
   }
   const dirs = (await host.info()).dirs;
   if (!dirs) throw new Error(`Worker ${host.id} has no directory for shared files`);
-  const path2 = join38(dirs.shared, worktreeId4);
+  const path2 = join38(dirs.shared, worktreeId4, chatId);
   await host.fs.mkdir(path2, { recursive: true });
   return {
     path: path2,
@@ -63192,6 +63192,25 @@ async function agentExtraDirs(worktreeId4) {
   const dirs = (await host.info()).dirs;
   return dirs ? [dirs.uploads, dirs.shared] : [];
 }
+function sharedFileUrl(worktreeId4, chatId, filename) {
+  return `/api/shared/${encodeURIComponent(worktreeId4)}/${encodeURIComponent(chatId)}/${encodeURIComponent(filename)}`;
+}
+function parseSharedPath(rest) {
+  const raw = rest.split("?")[0].split("/");
+  if (raw.length !== 2 && raw.length !== 3) return null;
+  const parts = [];
+  for (const segment of raw) {
+    let decoded;
+    try {
+      decoded = decodeURIComponent(segment);
+    } catch {
+      return null;
+    }
+    if (!decoded || decoded === "." || decoded === ".." || /[/\\\0]/.test(decoded)) return null;
+    parts.push(decoded);
+  }
+  return parts.length === 3 ? { worktreeId: parts[0], chatId: parts[1], name: parts[2] } : { worktreeId: parts[0], name: parts[1] };
+}
 var init_shared_dir = __esm({
   "src/server/services/_utils/shared-dir.ts"() {
     "use strict";
@@ -68229,7 +68248,7 @@ function turnUsage(res, ctx) {
   return { ...usage, model, costUsd: (previousCost ?? 0) + cost };
 }
 function sharedDirNote(sharedDir) {
-  return `[File sharing: to send a file to the user, write or copy it to ${sharedDir}/ and it will appear as a downloadable file card in the chat.]`;
+  return `[File sharing: to send a file to the user, write or copy it to ${sharedDir}/ and it will appear as a file card in this chat.]`;
 }
 function fileUri(path2) {
   return `file://${path2.split("/").map(encodeURIComponent).join("/")}`;
@@ -68729,6 +68748,8 @@ var init_session3 = __esm({
         this.misses = opts.heartbeatMisses ?? HEARTBEAT_MISSES;
         this.nextChan = opts.role === "client" ? 1 : 2;
       }
+      /** Close code and reason of the last socket that ended. Code 1006 means no close frame arrived. */
+      lastClose = null;
       get attached() {
         return this.ws !== null && this.ws.readyState === 1;
       }
@@ -68823,8 +68844,10 @@ var init_session3 = __esm({
         ws.on("message", (data, isBinary) => {
           if (this.ws === ws) this.onMessage(data, isBinary);
         });
-        ws.on("close", () => {
-          if (this.ws === ws) this.detach();
+        ws.on("close", (code, reason) => {
+          if (this.ws !== ws) return;
+          this.lastClose = { code, reason: reason.toString().slice(0, 200) };
+          this.detach();
         });
         ws.on("error", () => {
         });
@@ -68913,34 +68936,40 @@ var init_session3 = __esm({
           let frame;
           try {
             frame = decodeFrame(Buffer.isBuffer(data) ? data : Buffer.from(data));
-          } catch {
-            this.ws?.terminate();
+          } catch (err) {
+            this.cut("undecodable frame", err);
             return;
           }
           try {
             this.channels.get(frame.chan)?.handleFrame(frame);
-          } catch {
-            this.ws?.terminate();
+          } catch (err) {
+            this.cut(`channel ${frame.chan} failed to handle a frame`, err);
           }
           return;
         }
         let msg;
         try {
           msg = JSON.parse(data.toString());
-        } catch {
-          this.ws?.terminate();
+        } catch (err) {
+          this.cut("unparsable message", err);
           return;
         }
         if (msg === null || typeof msg !== "object") {
-          this.ws?.terminate();
+          this.cut("message is not an object");
           return;
         }
         try {
           this.dispatchText(msg);
-        } catch {
-          this.ws?.terminate();
+        } catch (err) {
+          this.cut("invalid message", err);
         }
       }
+      /** Drops the socket after a protocol violation, and says why, so the drop is not silent. */
+      cut(reason, err) {
+        const detail = err instanceof Error ? `: ${err.message}` : "";
+        this.emit("fault", `${reason}${detail}`);
+        this.ws?.terminate();
+      }
       dispatchText(msg) {
         if (typeof msg.method === "string") {
           if ("id" in msg && msg.id !== void 0 && msg.id !== null)
@@ -68965,14 +68994,32 @@ var init_session3 = __esm({
               throw new Error("malformed link.open");
             }
             if (this.channels.has(p2.chan) || this.tombstones.has(p2.chan)) return;
-            if (this.channels.size >= MAX_CHANNELS) throw new Error("too many channels");
+            if (this.channels.size >= MAX_CHANNELS) {
+              this.emit("fault", `refused channel ${p2.chan}: too many channels`);
+              this.writeBinary(
+                encodeFrame({
+                  chan: p2.chan,
+                  seq: 0,
+                  kind: "reset",
+                  payload: Buffer.from("too many channels")
+                })
+              );
+              return;
+            }
             const ch = new Channel(this, p2.chan, p2.name, p2.meta, this.window);
             this.channels.set(p2.chan, ch);
             this.emit("channel", ch);
             return;
           }
         }
-        this.notifyHandlers.get(msg.method)?.(msg.params);
+        try {
+          this.notifyHandlers.get(msg.method)?.(msg.params);
+        } catch (err) {
+          this.emit(
+            "fault",
+            `notification ${msg.method} handler threw: ${err instanceof Error ? err.message : String(err)}`
+          );
+        }
       }
       async onRequest(msg) {
         const handler = this.handlers.get(msg.method);
@@ -69110,7 +69157,7 @@ var init_payload = __esm({
 });
 
 // ../../packages/link/src/relay.ts
-var METHOD_RELAY_REGISTER, METHOD_RELAY_REVOKE, METHOD_RELAY_HTTP, RELAY_MAX_BODY_BYTES, METHOD_CLI_FETCH, METHOD_LIFECYCLE_IDLE, METHOD_LIFECYCLE_POLICY, METHOD_LIFECYCLE_SLEEP, METHOD_LIFECYCLE_SHUTDOWN, METHOD_LIFECYCLE_EXPORT_SESSIONS, METHOD_LIFECYCLE_IMPORT_SESSIONS, METHOD_GIT_CREDENTIAL, METHOD_GH_TOKEN, METHOD_LEASE_RENEW, METHOD_WORKER_UPDATE;
+var METHOD_RELAY_REGISTER, METHOD_RELAY_REVOKE, METHOD_RELAY_HTTP, RELAY_MAX_BODY_BYTES, METHOD_LIFECYCLE_IDLE, METHOD_LIFECYCLE_POLICY, METHOD_LIFECYCLE_SLEEP, METHOD_LIFECYCLE_SHUTDOWN, METHOD_LIFECYCLE_EXPORT_SESSIONS, METHOD_LIFECYCLE_IMPORT_SESSIONS, METHOD_GIT_CREDENTIAL, METHOD_GH_TOKEN, METHOD_LEASE_RENEW, METHOD_WORKER_UPDATE;
 var init_relay = __esm({
   "../../packages/link/src/relay.ts"() {
     "use strict";
@@ -69118,7 +69165,6 @@ var init_relay = __esm({
     METHOD_RELAY_REVOKE = "relay.revoke";
     METHOD_RELAY_HTTP = "relay.http";
     RELAY_MAX_BODY_BYTES = 512 * 1024;
-    METHOD_CLI_FETCH = "cli.fetch";
     METHOD_LIFECYCLE_IDLE = "lifecycle.idle";
     METHOD_LIFECYCLE_POLICY = "lifecycle.policy";
     METHOD_LIFECYCLE_SLEEP = "lifecycle.sleep";
@@ -69324,7 +69370,8 @@ var init_server3 = __esm({
             resumed,
             wsPing: true
           });
-        } catch {
+        } catch (err) {
+          this.emit("fault", session, `attach failed: ${err instanceof Error ? err.message : err}`);
           ws.terminate();
           return;
         }
@@ -69341,6 +69388,7 @@ var init_server3 = __esm({
           this.expiry.set(session.workerId, t2);
         });
         session.on("lost", () => this.emit("lost", session));
+        session.on("fault", (reason) => this.emit("fault", session, reason));
       }
       dropSession(session, reason) {
         clearTimeout(this.expiry.get(session.workerId));
@@ -70413,7 +70461,7 @@ async function runTask(task) {
   }
   if (task.model) await applyTurnChoice(chatId, "model", task.model);
   if (task.mode) await applyTurnChoice(chatId, "mode", task.mode);
-  const shared2 = await openSharedDir(task.worktreeId);
+  const shared2 = await openSharedDir(task.worktreeId, chatId);
   const seenShared = new Set(await shared2.list());
   const announce = (names) => {
     for (const filename of names) {
@@ -70422,7 +70470,7 @@ async function runTask(task) {
       agentSessionService.record(chatId, {
         type: "file",
         mediaType: mimeTypeFromFilename(filename),
-        url: `/api/shared/${encodeURIComponent(task.worktreeId)}/${encodeURIComponent(filename)}`,
+        url: sharedFileUrl(task.worktreeId, chatId, filename),
         filename
       });
     }
@@ -72197,8 +72245,8 @@ var init_environment_builds = __esm({
       get(id) {
         return getDb().select().from(environmentBuilds).where(eq2(environmentBuilds.id, id)).get();
       }
-      setLog(id, log91) {
-        getDb().update(environmentBuilds).set({ log: log91 }).where(eq2(environmentBuilds.id, id)).run();
+      setLog(id, log90) {
+        getDb().update(environmentBuilds).set({ log: log90 }).where(eq2(environmentBuilds.id, id)).run();
       }
       finish(id, result) {
         getDb().update(environmentBuilds).set({
@@ -72566,32 +72614,32 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
       }
       // ---- running ---------------------------------------------------------------
       async run(row, plan) {
-        const log91 = new BuildLog(row.id, (id, text4) => this.queries.setLog(id, text4));
+        const log90 = new BuildLog(row.id, (id, text4) => this.queries.setLog(id, text4));
         let tmp = null;
         const container = `band-env-${row.id.slice(0, 12)}`;
         let failure4 = null;
         try {
-          log91.add(`Building ${plan.tag} for ${plan.repo} at ${plan.ref} (${plan.commit.slice(0, 12)})`);
-          log91.flush();
+          log90.add(`Building ${plan.tag} for ${plan.repo} at ${plan.ref} (${plan.commit.slice(0, 12)})`);
+          log90.flush();
           tmp = await plan.host.fs.mkdtemp("band-env-");
-          await this.exportCheckout(plan, tmp, log91);
-          const toolchain = await this.buildToolchain(plan, tmp, log91);
-          const layered = await this.addWorkerLayer(plan, tmp, toolchain, log91);
-          await this.install(plan, tmp, layered, container, log91);
-          if (plan.registry) await this.push(plan, log91);
-          log91.add(`Done: ${plan.tag}`);
+          await this.exportCheckout(plan, tmp, log90);
+          const toolchain = await this.buildToolchain(plan, tmp, log90);
+          const layered = await this.addWorkerLayer(plan, tmp, toolchain, log90);
+          await this.install(plan, tmp, layered, container, log90);
+          if (plan.registry) await this.push(plan, log90);
+          log90.add(`Done: ${plan.tag}`);
         } catch (err) {
           failure4 = err.message;
-          log91.add(`FAILED: ${failure4}`);
+          log90.add(`FAILED: ${failure4}`);
         }
-        await this.exec(plan.host, "docker", ["rm", "--force", container], log91, { quiet: true }).catch(
+        await this.exec(plan.host, "docker", ["rm", "--force", container], log90, { quiet: true }).catch(
           () => void 0
         );
         await this.exec(
           plan.host,
           "docker",
           ["rmi", toolchainTag(plan.repo, plan.key), layeredTag(plan.repo, plan.key)],
-          log91,
+          log90,
           { quiet: true }
         ).catch(() => void 0);
         if (tmp) await plan.host.fs.rm(tmp, { recursive: true, force: true }).catch(() => void 0);
@@ -72600,14 +72648,14 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
             this.queries.finish(row.id, {
               status: "ready",
               image: plan.tag,
-              log: log91.toString(),
+              log: log90.toString(),
               at: Date.now()
             });
           } else {
             this.queries.finish(row.id, {
               status: "failed",
               error: failure4.slice(0, 2e3),
-              log: log91.toString(),
+              log: log90.toString(),
               at: Date.now()
             });
           }
@@ -72616,9 +72664,9 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
         }
       }
       /** Runs a command on the builder host, adding it and its output to the log. */
-      async exec(host, tool, args, log91, options = {}) {
+      async exec(host, tool, args, log90, options = {}) {
         const bin = tool === "docker" ? this.dockerBin(host) : tool === "devcontainer" ? this.devcontainerBin(host) : "git";
-        if (!options.quiet) log91.add(`$ ${tool} ${args.join(" ")}`);
+        if (!options.quiet) log90.add(`$ ${tool} ${args.join(" ")}`);
         try {
           const out = await host.exec(bin, args, {
             cwd: options.cwd,
@@ -72626,35 +72674,35 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
             timeoutMs: envNumber("BAND_ENVIRONMENT_BUILD_TIMEOUT_MS", DEFAULT_STEP_TIMEOUT_MS)
           });
           if (!options.quiet) {
-            if (out.stdout.trim()) log91.add(out.stdout.trimEnd());
-            if (out.stderr.trim()) log91.add(out.stderr.trimEnd());
-            log91.flush();
+            if (out.stdout.trim()) log90.add(out.stdout.trimEnd());
+            if (out.stderr.trim()) log90.add(out.stderr.trimEnd());
+            log90.flush();
           }
           return out.stdout;
         } catch (err) {
           if (!options.quiet) {
-            log91.add(err.message);
-            log91.flush();
+            log90.add(err.message);
+            log90.flush();
           }
           throw new Error(`${tool} ${args[0] ?? ""} failed: ${firstLine(err.message)}`);
         }
       }
       /** Writes the default branch's files, with no `.git`, to `<tmp>/src`. */
-      async exportCheckout(plan, tmp, log91) {
+      async exportCheckout(plan, tmp, log90) {
         const src = posix4.join(tmp, "src");
         await plan.host.fs.mkdir(src);
         const index3 = posix4.join(tmp, "index");
-        await this.exec(plan.host, "git", ["read-tree", plan.ref], log91, {
+        await this.exec(plan.host, "git", ["read-tree", plan.ref], log90, {
           cwd: plan.repoPath,
           env: { GIT_INDEX_FILE: index3 }
         });
-        await this.exec(plan.host, "git", ["checkout-index", "--all", `--prefix=${src}/`], log91, {
+        await this.exec(plan.host, "git", ["checkout-index", "--all", `--prefix=${src}/`], log90, {
           cwd: plan.repoPath,
           env: { GIT_INDEX_FILE: index3 }
         });
       }
       /** Layer 2: returns the tag of an image holding the repo's toolchain. */
-      async buildToolchain(plan, tmp, log91) {
+      async buildToolchain(plan, tmp, log90) {
         const build = plan.environment.build;
         const src = posix4.join(tmp, "src");
         const tag = toolchainTag(plan.repo, plan.key);
@@ -72663,7 +72711,7 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
             plan.host,
             "docker",
             dockerBuildArgs({ checkout: src, dockerfile: build.dockerfile, tag }),
-            log91
+            log90
           );
           return tag;
         }
@@ -72673,7 +72721,7 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
               plan.host,
               "devcontainer",
               devcontainerBuildArgs({ checkout: src, config: build.devcontainer, tag }),
-              log91
+              log90
             );
           } catch (err) {
             throw new Error(
@@ -72683,11 +72731,11 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
           return tag;
         }
         const image = build?.image;
-        await this.exec(plan.host, "docker", ["pull", image], log91);
+        await this.exec(plan.host, "docker", ["pull", image], log90);
         return image;
       }
       /** Layer 1 on top of layer 2: copies the worker from the worker base image. */
-      async addWorkerLayer(plan, tmp, toolchain, log91) {
+      async addWorkerLayer(plan, tmp, toolchain, log90) {
         const dir = posix4.join(tmp, "layer");
         await plan.host.fs.mkdir(dir);
         await plan.host.fs.writeFile(
@@ -72699,38 +72747,38 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
         });
         await plan.host.fs.mkdir(posix4.join(dir, "root", "work"), { recursive: true });
         const tag = layeredTag(plan.repo, plan.key);
-        await this.exec(plan.host, "docker", ["build", "--tag", tag, dir], log91);
+        await this.exec(plan.host, "docker", ["build", "--tag", tag, dir], log90);
         return tag;
       }
       /** Runs `install` at the default branch inside the image and commits the result as the final tag. */
-      async install(plan, tmp, layered, container, log91) {
+      async install(plan, tmp, layered, container, log90) {
         const install = plan.environment.install;
         if (install === void 0) {
-          await this.exec(plan.host, "docker", ["tag", layered, plan.tag], log91);
+          await this.exec(plan.host, "docker", ["tag", layered, plan.tag], log90);
           return;
         }
         await this.exec(
           plan.host,
           "docker",
           installCreateArgs({ name: container, image: layered, install }),
-          log91
+          log90
         );
         await this.exec(
           plan.host,
           "docker",
           ["cp", `${posix4.join(tmp, "src")}/.`, `${container}:${IMAGE_WORKDIR}`],
-          log91
+          log90
         );
-        await this.exec(plan.host, "docker", ["start", "--attach", container], log91);
+        await this.exec(plan.host, "docker", ["start", "--attach", container], log90);
         await this.exec(
           plan.host,
           "docker",
           commitArgs({ container, tag: plan.tag, key: plan.key, commit: plan.commit }),
-          log91
+          log90
         );
       }
-      async push(plan, log91) {
-        await this.exec(plan.host, "docker", ["push", plan.tag], log91);
+      async push(plan, log90) {
+        await this.exec(plan.host, "docker", ["push", plan.tag], log90);
       }
       // ---- auto trigger ----------------------------------------------------------
       /**
@@ -75665,10 +75713,8 @@ var init_client_state_keys = __esm({
       perWorktree("band:dockview-layout-v9:", [jsonPart("device")]),
       // The `at` of the continuation the user has seen, which hides the sidebar clock icon.
       perWorktree("band:continued-seen:", [rawPart("device")]),
-      // The repo names the mobile app's worktree list has collapsed.
+      // The repo and group names the mobile app's worktree list has collapsed.
       exact("band.mobile.collapsed-repos", [jsonPart("device")]),
-      // How the mobile worktree list is grouped: repo, origin or host.
-      exact("band.mobile.group-by", [rawPart("device")]),
       // The group the mobile worktree list is filtered to (a group id; unset means All).
       exact("band.mobile.group-filter", [rawPart("device")])
     ];
@@ -75803,7 +75849,7 @@ var init_client_state_service = __esm({
         }
         const updatedAt = Date.now();
         const version3 = input2.baseVersion + 1;
-        const written = input2.baseVersion === 0 ? this.queries.insertIfAbsent({
+        let written = input2.baseVersion === 0 ? this.queries.insertIfAbsent({
           key: input2.key,
           scope: input2.scope,
           worktreeId: worktreeId4,
@@ -75815,6 +75861,16 @@ var init_client_state_service = __esm({
           version: version3,
           updatedAt
         });
+        if (!written && input2.baseVersion === 0) {
+          const current3 = this.queries.find(input2.key, input2.scope);
+          if (current3 && current3.value === null) {
+            written = this.queries.updateIfVersion(input2.key, input2.scope, current3.version, {
+              value,
+              version: current3.version + 1,
+              updatedAt
+            });
+          }
+        }
         const entry = this.queries.find(input2.key, input2.scope) ?? {
           key: input2.key,
           scope: input2.scope,
@@ -83233,7 +83289,7 @@ var init_agent_session_service = __esm({
         ownerGrants.delete(chatId);
         const grant = await worktree.host.relay?.issue({ worktreeId: chat.worktreeId, chatId });
         if (grant) ownerGrants.set(chatId, grant);
-        const shared2 = await openSharedDir(chat.worktreeId).catch(() => null);
+        const shared2 = await openSharedDir(chat.worktreeId, chatId).catch(() => null);
         const login = await agentLoginService.resolve({
           agentType: def.type,
           repo: worktree.repo.name,
@@ -88139,11 +88195,11 @@ var require_core = __commonJS({
     Ajv2.ValidationError = validation_error_1.default;
     Ajv2.MissingRefError = ref_error_1.default;
     exports.default = Ajv2;
-    function checkOptions(checkOpts, options, msg, log91 = "error") {
+    function checkOptions(checkOpts, options, msg, log90 = "error") {
       for (const key2 in checkOpts) {
         const opt = key2;
         if (opt in options)
-          this.logger[log91](`${msg}: option ${key2}. ${checkOpts[opt]}`);
+          this.logger[log90](`${msg}: option ${key2}. ${checkOpts[opt]}`);
       }
     }
     function getSchEnv(keyRef) {
@@ -90632,10 +90688,11 @@ import {
   existsSync as existsSync18,
   mkdirSync as mkdirSync11,
   readFileSync as readFileSync12,
+  realpathSync as realpathSync7,
   statSync as statSync16
 } from "node:fs";
 import { createServer as createServer3 } from "node:http";
-import { basename as basename7, join as join59, resolve as resolve14, sep as sep10 } from "node:path";
+import { basename as basename7, join as join58, resolve as resolve14, sep as sep10 } from "node:path";
 import { pipeline as pipeline2, Readable as Readable2 } from "node:stream";
 import { parseArgs } from "node:util";
 
@@ -111646,7 +111703,7 @@ init_registry();
 // package.json
 var package_default = {
   name: "@band-app/server",
-  version: "0.53.0",
+  version: "0.54.1",
   type: "module",
   types: "src/index.ts",
   exports: {
@@ -111686,6 +111743,7 @@ var package_default = {
     "@agentclientprotocol/claude-agent-acp": "0.81.2",
     "@agentclientprotocol/codex-acp": "1.13.1",
     "@agentclientprotocol/sdk": "1.5.0",
+    "@anthropic-ai/sdk": "1.1.0",
     "@vscode/ripgrep": "^1.18.0",
     "node-pty": "^1.1.0",
     prettier: "^3.8.3",
@@ -112663,84 +112721,6 @@ init_git_credential_service();
 init_placement_service();
 init_token_service();
 init_watcher_service();
-
-// src/server/services/worker-cli-service.ts
-init_cli_binary();
-init_src7();
-init_src();
-import { createHash as createHash12 } from "node:crypto";
-import { readFile as readFile12 } from "node:fs/promises";
-import { join as join52 } from "node:path";
-var log65 = createLogger("worker-cli");
-var RPC_INVALID_PARAMS2 = -32602;
-var PLATFORM_NAME = /^[a-z0-9_]{1,16}$/;
-function candidatesFor(platform3, arch) {
-  const out = [];
-  const dir = process.env.BAND_CLI_BINARIES_DIR;
-  if (dir) out.push(join52(dir, `band-${platform3}-${arch}${platform3 === "win32" ? ".exe" : ""}`));
-  if (platform3 === process.platform && arch === process.arch) {
-    const own2 = findCliBinary();
-    if (own2) out.push(own2);
-  }
-  return out;
-}
-async function readFirst(paths) {
-  for (const path2 of paths) {
-    const data = await readFile12(path2).catch(() => null);
-    if (data) return data;
-  }
-  return null;
-}
-var WorkerCliService = class {
-  /** Answers `cli.fetch` on a worker's session. */
-  attach(session) {
-    session.handle(METHOD_CLI_FETCH, (params) => this.handle(session, params));
-  }
-  async handle(session, params) {
-    const { platform: platform3, arch, have } = parseParams3(params);
-    const data = await readFirst(candidatesFor(platform3, arch));
-    if (!data) {
-      return {
-        available: false,
-        reason: `the hub has no band CLI for ${platform3}-${arch}`
-      };
-    }
-    const sha2563 = createHash12("sha256").update(data).digest("hex");
-    if (have === sha2563) return { available: true, sha256: sha2563, size: data.length };
-    log65.info(
-      `sending the band CLI (${platform3}-${arch}, ${data.length} bytes) to ${session.workerId}`
-    );
-    const ch = session.openChannel("cli.body", { platform: platform3, arch });
-    void (async () => {
-      try {
-        await ch.send(data);
-        ch.end();
-        const drained = setTimeout(() => ch.reset("the worker did not close the channel"), 3e4);
-        drained.unref?.();
-        await ch.readAll().finally(() => clearTimeout(drained));
-      } catch (err) {
-        ch.reset(err instanceof Error ? err.message : "cli transfer failed");
-      }
-    })();
-    return { available: true, sha256: sha2563, size: data.length, chan: ch.id };
-  }
-};
-function parseParams3(params) {
-  const p2 = params ?? {};
-  if (typeof p2.platform !== "string" || !PLATFORM_NAME.test(p2.platform)) {
-    throw new RpcError(RPC_INVALID_PARAMS2, "platform must be a short lowercase name");
-  }
-  if (typeof p2.arch !== "string" || !PLATFORM_NAME.test(p2.arch)) {
-    throw new RpcError(RPC_INVALID_PARAMS2, "arch must be a short lowercase name");
-  }
-  if (p2.have !== void 0 && typeof p2.have !== "string") {
-    throw new RpcError(RPC_INVALID_PARAMS2, "have must be a string");
-  }
-  return { platform: p2.platform, arch: p2.arch, have: p2.have };
-}
-var workerCliService = new WorkerCliService();
-
-// src/server/services/worker-link-service.ts
 init_worker_lease_service();
 
 // src/server/services/worker-relay-service.ts
@@ -112800,7 +112780,7 @@ function repoHostRefusal(repo, callerHostId) {
 init_state();
 init_subscription_service();
 init_terminal_service();
-var log66 = createLogger("worker-relay");
+var log65 = createLogger("worker-relay");
 var REPLY_HEADERS = ["content-type", "cache-control", "mcp-session-id"];
 var FORWARDED_HEADERS = [
   "content-type",
@@ -112809,7 +112789,7 @@ var FORWARDED_HEADERS = [
   "mcp-session-id",
   "last-event-id"
 ];
-var RPC_INVALID_PARAMS3 = -32602;
+var RPC_INVALID_PARAMS2 = -32602;
 var defaultLookups = {
   hostOfWorktree: (id) => hostRegistry.hostIdOfScope(id),
   worktreeOfChat: (id) => {
@@ -112841,7 +112821,7 @@ var WorkerRelayService = class {
     let request = parseRequest(params);
     const verdict = checkRelayRequest(request, session.workerId, this.lookups);
     if (!verdict.ok) {
-      log66.warn(
+      log65.warn(
         `refused ${request.method} ${request.path.split("?")[0]} from ${session.workerId}: ${verdict.reason}`
       );
       return this.answer(session, verdict.status, refusalBody(request, verdict));
@@ -112854,7 +112834,7 @@ var WorkerRelayService = class {
         chatId: request.scope.chatId,
         ...entry
       });
-      log66.info(
+      log65.info(
         `admin host ${session.workerId} called ${entry.procedure}${entry.targetHostId ? ` on ${entry.targetHostId}` : ""}`
       );
     }
@@ -112887,7 +112867,7 @@ var WorkerRelayService = class {
         redirect: "manual"
       });
     } catch (err) {
-      log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+      log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
       return this.answer(session, 502, { error: "The hub could not answer" });
     }
     const replyHeaders = {};
@@ -112904,7 +112884,7 @@ var WorkerRelayService = class {
       try {
         return this.answer(session, upstream.status, redactSettingsReply(await upstream.json()));
       } catch (err) {
-        log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+        log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
         return this.answer(session, 502, { error: "The hub could not answer" });
       }
     }
@@ -112913,7 +112893,7 @@ var WorkerRelayService = class {
         const filtered = filterReposReply(await upstream.json(), session.workerId);
         return this.answer(session, upstream.status, filtered);
       } catch (err) {
-        log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+        log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
         return this.answer(session, 502, { error: "The hub could not answer" });
       }
     }
@@ -112921,7 +112901,7 @@ var WorkerRelayService = class {
       try {
         return this.answer(session, upstream.status, redactHostsReply(await upstream.json()));
       } catch (err) {
-        log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+        log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
         return this.answer(session, 502, { error: "The hub could not answer" });
       }
     }
@@ -112966,7 +112946,7 @@ function parseRequest(params) {
   const p2 = params;
   const scope3 = p2?.scope;
   if (!p2 || typeof p2.method !== "string" || typeof p2.path !== "string" || typeof scope3?.worktreeId !== "string" || scope3.chatId !== void 0 && typeof scope3.chatId !== "string" || scope3.terminalId !== void 0 && typeof scope3.terminalId !== "string" || !/^\/(?![/\\])/.test(p2.path) || !["GET", "POST", "DELETE", "OPTIONS", "HEAD"].includes(p2.method) || typeof p2.headers !== "object" || p2.headers === null || Object.values(p2.headers).some((v2) => typeof v2 !== "string") || p2.body !== void 0 && typeof p2.body !== "string") {
-    throw new RpcError(RPC_INVALID_PARAMS3, "bad relay.http params");
+    throw new RpcError(RPC_INVALID_PARAMS2, "bad relay.http params");
   }
   return p2;
 }
@@ -112974,7 +112954,7 @@ var workerRelayService = new WorkerRelayService();
 
 // src/server/services/worker-link-service.ts
 init_worktree_service();
-var log67 = createLogger("worker-link");
+var log66 = createLogger("worker-link");
 var repoQueries5 = new RepoQueries();
 var LOCAL_HOST_ID12 = "local";
 var CAPABILITY_REFRESH_MS = 3 * 6e4;
@@ -113002,9 +112982,18 @@ var WorkerLinkService = class {
     this.server = new LinkServer({ authenticate: (hello) => this.authenticate(hello) });
     this.server.on("session", (session) => this.onSession(session));
     this.server.on("connected", (session) => void this.onConnected(session));
+    this.server.on("disconnected", (session) => {
+      const close = session.lastClose;
+      if (close) {
+        log66.info(
+          `link of ${session.workerId} closed (code ${close.code}${close.reason ? `, ${close.reason}` : ""})`
+        );
+      }
+      this.setStatus(session.workerId, "offline", this.now());
+    });
     this.server.on(
-      "disconnected",
-      (session) => this.setStatus(session.workerId, "offline", this.now())
+      "fault",
+      (session, reason) => log66.warn(`link of ${session.workerId}: ${reason}`)
     );
     this.server.on(
       "lost",
@@ -113029,12 +113018,12 @@ var WorkerLinkService = class {
     const problem2 = compatibilityProblem(version3, HUB_VERSION);
     if (!problem2) return auth2;
     if (HUB_VERSION_UNRELEASED) {
-      log67.info(
+      log66.info(
         `worker ${hello.workerId} runs ${version3}, which would be refused by a released hub, but this hub runs from source (${HUB_VERSION}), so version checks are skipped`
       );
       return auth2;
     }
-    log67.warn(`worker ${hello.workerId} refused: ${problem2}`);
+    log66.warn(`worker ${hello.workerId} refused: ${problem2}`);
     if (this.server.getSession(hello.workerId)?.attached) {
       return { ok: false, reason: problem2, code: VERSION_REFUSED_CODE };
     }
@@ -113045,7 +113034,7 @@ var WorkerLinkService = class {
     try {
       this.queries.setHostRefusal(hello.workerId, { version: version3, reason: problem2 });
     } catch (err) {
-      log67.warn(`could not record the refusal: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`could not record the refusal: ${err instanceof Error ? err.message : err}`);
     }
     this.publish(hello.workerId, "offline");
     return { ok: false, reason: problem2, code: VERSION_REFUSED_CODE };
@@ -113068,7 +113057,7 @@ var WorkerLinkService = class {
     this.refreshTimer.unref();
     this.unsubscribeRevoke = this.tokens.onRevoked((row) => {
       if (row.kind === "worker_session" && row.hostId) {
-        if (this.server.drop(row.hostId, "token revoked")) log67.info(`cut link of ${row.hostId}`);
+        if (this.server.drop(row.hostId, "token revoked")) log66.info(`cut link of ${row.hostId}`);
       }
     });
   }
@@ -113098,7 +113087,7 @@ var WorkerLinkService = class {
       this.queries.setHostInfo(row.id, stored);
       if (changed) this.publish(row.id, "online");
     } catch (err) {
-      log67.debug(
+      log66.debug(
         `could not refresh the report of ${row.id}: ${err instanceof Error ? err.message : err}`
       );
     }
@@ -113128,7 +113117,6 @@ var WorkerLinkService = class {
   onSession(session) {
     this.remoteHost(session.workerId).attachSession(session);
     workerRelayService.attach(session);
-    workerCliService.attach(session);
     gitCredentialService.attach(session);
     ephemeralLifecycleService.attach(session);
     checkpointService.attach(session);
@@ -113142,7 +113130,7 @@ var WorkerLinkService = class {
     try {
       info = await this.remoteHost(workerId).info();
     } catch (err) {
-      log67.warn(
+      log66.warn(
         `could not read host info from ${workerId}: ${err instanceof Error ? err.message : err}`
       );
     }
@@ -113162,37 +113150,37 @@ var WorkerLinkService = class {
     const version3 = workerVersionOf(hello);
     this.queries.markHostOnline(workerId, at, { info: stored, version: version3 ?? hello.buildId });
     workerUpdateService.onConnected(workerId, version3);
-    log67.info(`worker ${workerId} is online`);
+    log66.info(`worker ${workerId} is online`);
     workerLeaseService.onConnected(session);
     try {
       seedCodingAgentsFromTypes(hello.agents);
     } catch (err) {
-      log67.warn(`could not seed coding agents: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`could not seed coding agents: ${err instanceof Error ? err.message : err}`);
     }
     this.publish(workerId, "online");
     void repoService.backfillRemotesFromWorker(workerId).catch((err) => {
-      log67.warn(`remote backfill on ${workerId}: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`remote backfill on ${workerId}: ${err instanceof Error ? err.message : err}`);
     });
     chatOwnershipService.onConnected(session);
     void ephemeralLifecycleService.onConnected(session);
     void followService.onHostReturned(workerId).catch((err) => {
-      log67.warn(`follow check on ${workerId}: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`follow check on ${workerId}: ${err instanceof Error ? err.message : err}`);
     });
     placementService.onHostOnline(workerId);
     void worktreeService.finishPendingRemovals(workerId).catch((err) => {
-      log67.warn(`pending removals on ${workerId}: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`pending removals on ${workerId}: ${err instanceof Error ? err.message : err}`);
     });
   }
   setStatus(workerId, status, lastSeenAt) {
     try {
       this.queries.setHostStatus(workerId, status, lastSeenAt);
     } catch (err) {
-      log67.warn(
+      log66.warn(
         `could not record ${workerId} as ${status}: ${err instanceof Error ? err.message : err}`
       );
       return;
     }
-    log67.info(`worker ${workerId} is ${status}`);
+    log66.info(`worker ${workerId} is ${status}`);
     this.publish(workerId, status);
   }
   publish(hostId2, hostStatus) {
@@ -113237,7 +113225,7 @@ var WorkerLinkService = class {
       send3(200, out);
     } catch (err) {
       if (!(err instanceof TokenExchangeError)) throw err;
-      log67.warn(`bootstrap exchange refused: ${err.reason}`);
+      log66.warn(`bootstrap exchange refused: ${err.reason}`);
       send3(401, { error: "invalid or expired token" });
     }
   }
@@ -113254,7 +113242,7 @@ function reportKey(report2) {
 
 // src/server/services/worker-update-service.ts
 init_worktree_service();
-var log68 = createLogger("worker-update");
+var log67 = createLogger("worker-update");
 var INSTALL_TIMEOUT_MS = 11 * 6e4;
 var RESTART_TIMEOUT_MS = 3 * 6e4;
 var WorkerUpdateError = class extends Error {
@@ -113300,7 +113288,7 @@ var WorkerUpdateService = class {
       throw new WorkerUpdateError("not-updatable", "The worker is not connected");
     const target = view4.updateTarget;
     this.set(hostId2, { target, state: "installing", error: null }, row.status);
-    log68.info(`updating worker ${hostId2} to ${target}`);
+    log67.info(`updating worker ${hostId2} to ${target}`);
     void this.run(hostId2, target, session, row.status);
     return { target };
   }
@@ -113314,7 +113302,7 @@ var WorkerUpdateService = class {
     } catch (err) {
       const message = this.describe(err, target);
       this.set(hostId2, { target, state: "failed", error: message }, hostStatus);
-      log68.warn(`update of worker ${hostId2} failed: ${message}`);
+      log67.warn(`update of worker ${hostId2} failed: ${message}`);
       return;
     }
     if (this.updates.get(hostId2)?.state !== "installing") return;
@@ -113351,7 +113339,7 @@ var WorkerUpdateService = class {
     this.timers.delete(hostId2);
     if (version3 === current3.target) {
       this.updates.delete(hostId2);
-      log68.info(`worker ${hostId2} now runs ${version3}`);
+      log67.info(`worker ${hostId2} now runs ${version3}`);
     } else {
       this.set(
         hostId2,
@@ -116176,9 +116164,9 @@ init_zod();
 // src/server/services/provisioning-service.ts
 init_src();
 init_dist();
-import { createHash as createHash13, randomBytes as randomBytes16, randomUUID as randomUUID18 } from "node:crypto";
+import { createHash as createHash12, randomBytes as randomBytes16, randomUUID as randomUUID18 } from "node:crypto";
 import { createReadStream as createReadStream4, existsSync as existsSync17, mkdirSync as mkdirSync10, rmSync as rmSync7, statSync as statSync14 } from "node:fs";
-import { join as join53 } from "node:path";
+import { join as join52 } from "node:path";
 
 // src/server/infra/db/queries/provisions.ts
 init_drizzle_orm2();
@@ -116205,11 +116193,11 @@ var ProvisionQueries = class {
     const result = this.db().update(hostProvisions).set({ spentAt: at, hostId: hostId2, runHash, state: "running", updatedAt: at }).where(and2(eq2(hostProvisions.id, id), isNull2(hostProvisions.spentAt))).run();
     return Number(result.changes ?? 0) > 0;
   }
-  setLog(id, log91, at) {
-    this.db().update(hostProvisions).set({ log: log91, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
+  setLog(id, log90, at) {
+    this.db().update(hostProvisions).set({ log: log90, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
   }
-  finish(id, state2, exitCode, log91, at) {
-    this.db().update(hostProvisions).set({ state: state2, exitCode, log: log91, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
+  finish(id, state2, exitCode, log90, at) {
+    this.db().update(hostProvisions).set({ state: state2, exitCode, log: log90, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
   }
   /** Ids of rows created before `at`, so their bundle files can be deleted. */
   idsCreatedBefore(at) {
@@ -116461,7 +116449,7 @@ function renderProvisionScript(opts) {
 init_settings_service();
 init_token_service();
 init_vault_service();
-var log69 = createLogger("provisioning");
+var log68 = createLogger("provisioning");
 var DEFAULT_PROVISION_TTL_MS = 60 * 60 * 1e3;
 var DEFAULT_START_COMMAND = "band/provision.sh";
 var MAX_LOG_BYTES2 = 256 * 1024;
@@ -116493,7 +116481,7 @@ var ProvisionAuthError = class extends Error {
   }
 };
 function sha2562(text4) {
-  return createHash13("sha256").update(text4).digest("hex");
+  return createHash12("sha256").update(text4).digest("hex");
 }
 function newSecret(prefix) {
   return `${prefix}${randomBytes16(32).toString("base64url")}`;
@@ -116536,7 +116524,7 @@ var ProvisioningService = class {
     return Date.now();
   }
   dir(id) {
-    return join53(bandHome(), "provisioning", id);
+    return join52(bandHome(), "provisioning", id);
   }
   settings() {
     const s2 = settingsService.get().provisioning ?? {};
@@ -116591,7 +116579,7 @@ var ProvisioningService = class {
       spentAt: null,
       updatedAt: at
     });
-    log69.info(
+    log68.info(
       `created provisioning command ${id}${commitSha ? ` at ${commitSha.slice(0, 12)}` : ""}`
     );
     const command2 = `curl -fsSL ${hubUrl}/api/provision/${code}/script | sh`;
@@ -116631,7 +116619,7 @@ var ProvisioningService = class {
       tokenService.removeHost(boot.hostId);
       throw new ProvisionExchangeError("used");
     }
-    log69.info(`exchanged provisioning code ${row.id} for host ${boot.hostId}`);
+    log68.info(`exchanged provisioning code ${row.id} for host ${boot.hostId}`);
     const lines = [
       `token=${boot.token}`,
       `workerId=${boot.hostId}`,
@@ -116656,7 +116644,7 @@ var ProvisioningService = class {
   /** The bundle file and size for a code, once its run token is shown. */
   bundle(code, runToken) {
     const row = this.authorize(code, runToken);
-    const file3 = join53(this.dir(row.id), "bundle.tgz");
+    const file3 = join52(this.dir(row.id), "bundle.tgz");
     if (!row.repoUrl || !existsSync17(file3)) throw new ProvisionAuthError();
     return { stream: createReadStream4(file3), size: statSync14(file3).size };
   }
@@ -116673,7 +116661,7 @@ var ProvisioningService = class {
       return;
     }
     this.queries.finish(row.id, exit === 0 ? "done" : "failed", exit, next, at);
-    if (exit !== 0) log69.info(`provisioning ${row.id} failed with exit code ${exit}`);
+    if (exit !== 0) log68.info(`provisioning ${row.id} failed with exit code ${exit}`);
   }
   status(id) {
     const row = this.queries.findById(id);
@@ -116698,7 +116686,7 @@ band provision: the worker did not say hello within ${minutes} min. Marked faile
 `;
     const exitCode = row.exitCode ?? TIMEOUT_EXIT_CODE;
     this.queries.finish(row.id, "failed", exitCode, row.log + note, at);
-    log69.info(`provisioning ${row.id} timed out waiting for host ${row.hostId}`);
+    log68.info(`provisioning ${row.id} timed out waiting for host ${row.hostId}`);
     return { ...row, state: "failed", exitCode, log: row.log + note };
   }
   view(spent) {
@@ -116735,7 +116723,7 @@ band provision: the worker did not say hello within ${minutes} min. Marked faile
   async buildBundle(id, settings3) {
     const dir = this.dir(id);
     mkdirSync10(dir, { recursive: true });
-    const src = join53(dir, "src");
+    const src = join52(dir, "src");
     const host = hostRegistry.local;
     const env = { GIT_TERMINAL_PROMPT: "0" };
     const key2 = parseRemoteUrl2(settings3.repoUrl);
@@ -116757,10 +116745,10 @@ band provision: the worker did not say hello within ${minutes} min. Marked faile
       await host.exec("git", args, { env, timeoutMs: 12e4 });
       const sha = (await host.exec("git", ["-C", src, "rev-parse", "HEAD"], { env })).stdout.trim();
       const command2 = settings3.command || DEFAULT_START_COMMAND;
-      if (!existsSync17(join53(src, command2))) {
+      if (!existsSync17(join52(src, command2))) {
         throw new Error(`the repo at ${sha.slice(0, 12)} has no ${command2}`);
       }
-      await host.exec("tar", ["-czf", join53(dir, "bundle.tgz"), "--exclude=.git", "-C", src, "."], {
+      await host.exec("tar", ["-czf", join52(dir, "bundle.tgz"), "--exclude=.git", "-C", src, "."], {
         timeoutMs: 12e4
       });
       rmSync7(src, { recursive: true, force: true });
@@ -116853,12 +116841,12 @@ init_zod();
 init_registry();
 init_queued_message_store();
 import { realpathSync as realpathSync6 } from "node:fs";
-import { join as join54, resolve as resolve11, sep as sep7 } from "node:path";
+import { join as join53, resolve as resolve11, sep as sep7 } from "node:path";
 init_chat_ownership_service();
 init_chat_service();
 init_state();
 init_task_service();
-var log70 = createLogger("trpc.queue");
+var log69 = createLogger("trpc.queue");
 var queuedFileSchema = external_exports2.object({
   mediaType: external_exports2.string(),
   url: external_exports2.string(),
@@ -116866,7 +116854,7 @@ var queuedFileSchema = external_exports2.object({
   filename: external_exports2.string().optional()
 });
 function isPathWithinUploadDir(p2) {
-  const uploadDir = join54(bandHome(), "uploads");
+  const uploadDir = join53(bandHome(), "uploads");
   const normalized2 = resolve11(p2);
   if (normalized2 !== uploadDir && !normalized2.startsWith(uploadDir + sep7)) {
     return false;
@@ -116891,7 +116879,7 @@ async function resolveQueuedFiles(chatId, worktreeId4, files) {
     if (derivedPath) {
       const inside = remote ? await isWithinUploads(worktreeId4, derivedPath) : isPathWithinUploadDir(derivedPath);
       if (!inside) {
-        log70.warn(
+        log69.warn(
           { chatId, path: derivedPath, filename: file3.filename },
           "queue: dropping file with path outside uploads directory"
         );
@@ -116916,7 +116904,7 @@ async function resolveQueuedFiles(chatId, worktreeId4, files) {
       });
       continue;
     }
-    log70.warn(
+    log69.warn(
       { chatId, url: file3.url, filename: file3.filename },
       "queue: dropping file with no path and non-data URL \u2014 cannot recover disk path"
     );
@@ -116924,7 +116912,7 @@ async function resolveQueuedFiles(chatId, worktreeId4, files) {
   if (needsSave.length > 0) {
     const saved = await saveWorktreeUploads(worktreeId4, needsSave);
     if (saved.length !== needsSave.length) {
-      log70.error(
+      log69.error(
         { chatId, expected: needsSave.length, got: saved.length },
         "queue: saveUploadedFilesDetailed returned unexpected count \u2014 dropping data-URL files (cannot map 1:1)"
       );
@@ -116957,7 +116945,7 @@ var queueRouter = t.router({
     try {
       files = await resolveQueuedFiles(chatId, input2.worktreeId, input2.files);
     } catch (err) {
-      log70.error(
+      log69.error(
         { chatId, err: err instanceof Error ? err.message : err },
         "queue.push: failed to persist file uploads; enqueuing text only"
       );
@@ -117007,7 +116995,7 @@ var queueRouter = t.router({
             files: await resolveQueuedFiles(chatId, input2.worktreeId, m2.files)
           };
         } catch (err) {
-          log70.error(
+          log69.error(
             { chatId, messageId: m2.id, err: err instanceof Error ? err.message : err },
             "queue: failed to resolve files for queued message; dropping its files"
           );
@@ -117164,7 +117152,7 @@ function aggregateTurnsByHourAndModel(snap, provider) {
   }
   return Array.from(buckets.values());
 }
-var log71 = createLogger("usage-scanner");
+var log70 = createLogger("usage-scanner");
 var SCHEDULER_KEY2 = Symbol.for("band.usage-scanner");
 var g7 = globalThis;
 if (!g7[SCHEDULER_KEY2]) {
@@ -117226,14 +117214,14 @@ var UsageScannerService = class {
         try {
           totalRows += await this.scanPair(ws, a);
         } catch (err) {
-          log71.warn(
+          log70.warn(
             { err, worktreeId: ws.worktreeId, agentType: a.agentType },
             "usage scanner pair failed"
           );
         }
       }
     }
-    log71.debug(
+    log70.debug(
       { durationMs: this.now() - started, worktrees: worktrees2.length, rowsWritten: totalRows },
       "usage scanner tick complete"
     );
@@ -117278,7 +117266,7 @@ var UsageScannerService = class {
     try {
       reader = await this.getUsageReader(a, ws.hostId);
     } catch (err) {
-      log71.debug({ err, agentId: a.agentId }, "failed to resolve usage reader for scan");
+      log70.debug({ err, agentId: a.agentId }, "failed to resolve usage reader for scan");
       return 0;
     }
     if (!reader) return 0;
@@ -117287,7 +117275,7 @@ var UsageScannerService = class {
     try {
       sessions = await reader.listSessions(ws.worktreePath);
     } catch (err) {
-      log71.debug(
+      log70.debug(
         { err, agentId: a.agentId, worktreePath: ws.worktreePath },
         "listSessions failed during usage scan"
       );
@@ -117303,7 +117291,7 @@ var UsageScannerService = class {
       try {
         snap = await reader.getSessionUsage(s2.sessionId, ws.worktreePath);
       } catch (err) {
-        log71.debug(
+        log70.debug(
           { err, sessionId: s2.sessionId, agentType: a.agentType },
           "getSessionUsage failed"
         );
@@ -117342,7 +117330,7 @@ var UsageScannerService = class {
       this.scanState.set(ws.worktreeId, a.agentType, maxObserved);
     }
     if (changed.length > slice.length) {
-      log71.debug(
+      log70.debug(
         {
           worktreeId: ws.worktreeId,
           agentType: a.agentType,
@@ -117409,11 +117397,11 @@ function startUsageScanner(options = {}) {
   const intervalMs = options.intervalMs ?? USAGE_SCAN_INTERVAL_MS;
   const svc = getUsageScannerService();
   svc.tick().catch((err) => {
-    log71.warn({ err }, "initial usage scanner tick failed");
+    log70.warn({ err }, "initial usage scanner tick failed");
   });
   const timer = setInterval(() => {
     svc.tick().catch((err) => {
-      log71.warn({ err }, "scheduled usage scanner tick failed");
+      log70.warn({ err }, "scheduled usage scanner tick failed");
     });
   }, intervalMs);
   timer.unref();
@@ -117784,7 +117772,7 @@ function worktreeGh(host, localHostId, cwd) {
 init_branch_status_poller();
 init_plugin_host_service();
 init_worktree_service();
-var log72 = createLogger("review-service");
+var log71 = createLogger("review-service");
 var NoOpenReviewError = class extends Error {
   constructor(worktreeId4) {
     super(`No open review to merge for worktree ${worktreeId4}`);
@@ -117825,7 +117813,7 @@ var ReviewService = class {
       };
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
-      log72.warn("Review lookup failed for %s (%s): %s", worktreeId4, provider.id, message);
+      log71.warn("Review lookup failed for %s (%s): %s", worktreeId4, provider.id, message);
       return { status: "error", message };
     }
   }
@@ -117990,7 +117978,7 @@ init_ephemeral_lifecycle_service();
 init_runner_service();
 init_state();
 init_token_service();
-var log73 = createLogger("reaper");
+var log72 = createLogger("reaper");
 var DEFAULT_INTERVAL_MS = 3e4;
 var DEFAULT_HELLO_GRACE_MS = 6e4;
 var DEFAULT_OFFLINE_MS = 12e4;
@@ -118087,12 +118075,12 @@ var RunnerReaperService = class {
         try {
           await this.reap(machine, Date.now());
         } catch (err) {
-          log73.warn(`could not check machine ${machine.id}: ${errorText5(err)}`);
+          log72.warn(`could not check machine ${machine.id}: ${errorText5(err)}`);
         }
       }
       await this.reapOrphans();
     } catch (err) {
-      log73.warn(`sweep failed: ${errorText5(err)}`);
+      log72.warn(`sweep failed: ${errorText5(err)}`);
     } finally {
       this.ticking = false;
     }
@@ -118154,7 +118142,7 @@ var RunnerReaperService = class {
     const deadline = machine.spawnedAt + lifetimeMs + runner.lifetimeGraceSec * 1e3;
     if (machine.state === "running") {
       this.machines.update(machine.id, { state: "stopping", stoppingSince: now });
-      log73.info(`machine ${machine.id} reached its maximum lifetime of ${runner.maxLifetimeSec}s`);
+      log72.info(`machine ${machine.id} reached its maximum lifetime of ${runner.maxLifetimeSec}s`);
     }
     const reason = `maximum lifetime of ${runner.maxLifetimeSec}s reached`;
     if (!online) {
@@ -118200,7 +118188,7 @@ var RunnerReaperService = class {
       return;
     }
     const lost = this.unstored(machine.workerId);
-    log73.error(
+    log72.error(
       `HARD DEADLINE: destroying machine ${machine.id} (${reason}) although worktree(s) ${lost.join(", ") || "of its worker"} were not stored`
     );
     await this.destroyNow(
@@ -118227,11 +118215,11 @@ var RunnerReaperService = class {
     const key2 = `${machine.id}:${text4}`;
     if (!this.warned.has(key2)) {
       this.warned.add(key2);
-      log73.info(`machine ${machine.id}: ${text4}`);
+      log72.info(`machine ${machine.id}: ${text4}`);
     }
   }
   async destroyNow(machine, reason, opts = {}) {
-    log73.info(`destroying machine ${machine.id} of runner ${machine.runnerId}: ${reason}`);
+    log72.info(`destroying machine ${machine.id} of runner ${machine.runnerId}: ${reason}`);
     const task = this.runners.destroyMachine(machine.id, reason);
     this.pending.add(task);
     try {
@@ -118247,7 +118235,7 @@ var RunnerReaperService = class {
       tokenService.removeHost(hostId2);
       hostRegistry.unregister(hostId2);
     } catch (err) {
-      log73.warn(`could not remove host ${hostId2}: ${errorText5(err)}`);
+      log72.warn(`could not remove host ${hostId2}: ${errorText5(err)}`);
     }
   }
   // ---- orphans ---------------------------------------------------------------
@@ -118266,7 +118254,7 @@ var RunnerReaperService = class {
       try {
         handles = await this.runners.listHandles(runner);
       } catch (err) {
-        log73.warn(`status of runner ${runner.id} failed: ${errorText5(err)}`);
+        log72.warn(`status of runner ${runner.id} failed: ${errorText5(err)}`);
         continue;
       }
       if (this.runners.hasAttemptInFlight(runner.id)) continue;
@@ -118278,10 +118266,10 @@ var RunnerReaperService = class {
         if (nowKnown.has(handle)) continue;
         const ok2 = await this.runners.destroyHandle(runner, handle, "no record of this machine");
         if (ok2) {
-          log73.info(`destroyed orphan ${handle} of runner ${runner.id}`);
+          log72.info(`destroyed orphan ${handle} of runner ${runner.id}`);
           this.machines.settleHandle(runner.id, handle, "destroyed by the reaper as an orphan");
         } else {
-          log73.warn(`could not destroy orphan ${handle} of runner ${runner.id}`);
+          log72.warn(`could not destroy orphan ${handle} of runner ${runner.id}`);
         }
       }
     }
@@ -118347,7 +118335,7 @@ init_errors6();
 init_agent_session_service();
 init_chat_service();
 init_worktree_service();
-var log74 = createLogger("session-service");
+var log73 = createLogger("session-service");
 var SessionService = class {
   /** Lists past sessions for a worktree's chat pane (default chat when
    *  `chatId` is undefined). */
@@ -118360,7 +118348,7 @@ var SessionService = class {
     if (!chatService.get(chatId)) {
       chatService.create(input2.worktreeId, { id: chatId, name: "Chat" });
     }
-    log74.debug({ chatId, worktreeId: input2.worktreeId }, "listing past sessions for chat");
+    log73.debug({ chatId, worktreeId: input2.worktreeId }, "listing past sessions for chat");
     return agentSessionService.listSessions(chatId);
   }
 };
@@ -118687,7 +118675,7 @@ init_branch_status_poller();
 init_client_activity_service();
 init_state();
 init_tunnel_service();
-var log75 = createLogger("trpc.system");
+var log74 = createLogger("trpc.system");
 var systemRouter = t.router({
   /**
    * Combined liveness probe — webserver is always true if this query
@@ -118695,16 +118683,16 @@ var systemRouter = t.router({
    * an interval to drive the bottom-bar status pill.
    */
   health: publicProcedure.query(() => {
-    log75.debug("services.health called");
+    log74.debug("services.health called");
     const tunnel = tunnelService.getStatus();
-    log75.debug({ tunnel }, "services.health: tunnel status");
+    log74.debug({ tunnel }, "services.health: tunnel status");
     const result = {
       webserver: true,
       version: package_default.version,
       tunnel: tunnel.running,
       tunnel_url: tunnel.url
     };
-    log75.debug({ result }, "services.health result");
+    log74.debug({ result }, "services.health result");
     return result;
   }),
   // What this client's UI is doing, so the branch-status poller can slow down. A client names
@@ -118843,7 +118831,7 @@ init_errors6();
 init_chat_service();
 init_state();
 init_task_service();
-var log76 = createLogger("tasks-router");
+var log75 = createLogger("tasks-router");
 var tasksRouter = t.router({
   list: publicProcedure.input(
     external_exports2.object({
@@ -118905,7 +118893,7 @@ var tasksRouter = t.router({
     if (input2.files && input2.files.length > 0) {
       const savedFiles = await saveWorktreeUploads(input2.worktreeId, input2.files);
       if (savedFiles.length !== input2.files.length) {
-        log76.warn(
+        log75.warn(
           { chatId, submitted: input2.files.length, saved: savedFiles.length },
           "tasks.submit: some file uploads were dropped (malformed data URL?)"
         );
@@ -119331,25 +119319,25 @@ var tokensRouter = t.router({
 init_src();
 init_zod();
 init_tunnel_service();
-var log77 = createLogger("trpc.tunnel");
+var log76 = createLogger("trpc.tunnel");
 var tunnelRouter = t.router({
   status: publicProcedure.query(() => {
     return tunnelService.getStatus();
   }),
   start: publicProcedure.input(external_exports2.object({}).optional()).mutation(async () => {
-    log77.debug("tunnel.start called");
+    log76.debug("tunnel.start called");
     try {
       await tunnelService.start();
     } catch (err) {
-      log77.debug({ err }, "tunnel.start: startTunnel failed");
+      log76.debug({ err }, "tunnel.start: startTunnel failed");
       return { ok: true, url: null };
     }
     const status = tunnelService.getStatus();
-    log77.debug({ status }, "tunnel.start: after startTunnel");
+    log76.debug({ status }, "tunnel.start: after startTunnel");
     if (status.url) {
       return { ok: true, url: status.url };
     }
-    log77.debug("tunnel.start: no URL available");
+    log76.debug("tunnel.start: no URL available");
     return { ok: true, url: null };
   }),
   stop: publicProcedure.mutation(async () => {
@@ -119739,8 +119727,8 @@ function verifyWorktreePreviewGrant(worktreeId4, grant, filePath, now = Date.now
 init_src2();
 init_src();
 init_resolver();
-import { join as join55, resolve as resolve12, sep as sep8 } from "node:path";
-var log78 = createLogger("diff-service");
+import { join as join54, resolve as resolve12, sep as sep8 } from "node:path";
+var log77 = createLogger("diff-service");
 var EMPTY_TREE_ARGS = ["hash-object", "-t", "tree", "/dev/null"];
 var DEFAULT_BRANCH_LIMIT = 50;
 var STAGING_BRANCH_PRIORITY = [
@@ -119836,7 +119824,7 @@ function parseFileStatuses(nameStatusOutput) {
   return fileStatuses;
 }
 function assertWorktreeRelative(cwd, filePath) {
-  const target = resolve12(join55(cwd, filePath));
+  const target = resolve12(join54(cwd, filePath));
   if (target !== cwd && !target.startsWith(cwd + sep8)) {
     throw new Error("Invalid path");
   }
@@ -119851,7 +119839,7 @@ function assertWorktreeRelative(cwd, filePath) {
 }
 async function readUntrackedFileLines(host, cwd, file3) {
   try {
-    const content = new TextDecoder().decode(await host.fs.readFile(join55(cwd, file3)));
+    const content = new TextDecoder().decode(await host.fs.readFile(join54(cwd, file3)));
     const lines = content.split("\n");
     if (lines.length > 0 && lines[lines.length - 1] === "") {
       lines.pop();
@@ -120087,7 +120075,7 @@ var DiffService = class {
       );
       refs = output2.split("\n").map((line2) => parseBranchRef(line2.trim())).filter((ref) => ref !== null);
     } catch (err) {
-      log78.error(
+      log77.error(
         `listBranches: for-each-ref failed for ${cwd}: ${err instanceof Error ? err.message : err}`
       );
     }
@@ -120198,7 +120186,7 @@ var DiffService = class {
     const compareBranch = options.compareBranch ?? defaultBranch;
     const cwd = worktree.worktree.path;
     const execGit2 = gitRunner(worktree.host);
-    const hasGit = await worktree.host.fs.stat(join55(cwd, ".git")).then(
+    const hasGit = await worktree.host.fs.stat(join54(cwd, ".git")).then(
       () => true,
       (err) => {
         if (err instanceof HostOfflineError || err instanceof HostTimeoutError) throw err;
@@ -120236,7 +120224,7 @@ var DiffService = class {
     applyLineCounts(status.staged, parseNumstat(stagedNumstat));
     await Promise.all(
       status.untracked.map(async (entry) => {
-        const lines = await countUntrackedLines(worktree.host, join55(cwd, entry.path));
+        const lines = await countUntrackedLines(worktree.host, join54(cwd, entry.path));
         if (lines !== null) {
           entry.additions = lines;
           entry.deletions = 0;
@@ -120393,7 +120381,7 @@ init_src();
 init_errors6();
 init_local_host_policy();
 init_worktree_service();
-var log79 = createLogger("direct-access");
+var log78 = createLogger("direct-access");
 var DEFAULT_TOKEN_TTL_MS2 = 10 * 6e4;
 function tokenTtlMs() {
   const ms = Number(process.env.BAND_DIRECT_TOKEN_TTL_MS);
@@ -120428,7 +120416,7 @@ var DirectAccessService = class {
       );
       return { hostId: hostId2, ...grant };
     } catch (err) {
-      log79.debug(
+      log78.debug(
         { hostId: hostId2, worktreeId: worktreeId4, message: err instanceof Error ? err.message : String(err) },
         "no direct path to the worker"
       );
@@ -120440,7 +120428,7 @@ var directAccessService = new DirectAccessService();
 
 // ../../packages/worktree-ops/src/files.ts
 init_resolver();
-import { dirname as dirname16, extname as extname3, join as join56, resolve as resolve13, sep as sep9 } from "node:path";
+import { dirname as dirname16, extname as extname3, join as join55, resolve as resolve13, sep as sep9 } from "node:path";
 var MAX_FILE_SIZE2 = 1024 * 1024;
 var LANG_MAP2 = {
   ".js": "javascript",
@@ -120507,7 +120495,7 @@ var FilesService = class {
       throw new WorktreeNotFoundError(worktreeId4);
     }
     const root = worktree.worktree.path;
-    const target = resolve13(join56(root, relative2));
+    const target = resolve13(join55(root, relative2));
     const insideRoot = target === root || target.startsWith(root + sep9);
     if (!insideRoot) {
       throw new Error("Invalid path");
@@ -120688,7 +120676,7 @@ var filesService = new FilesService({
 
 // src/server/services/git-graph-service.ts
 init_src2();
-import { createHash as createHash14 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 init_errors6();
 init_worktree_service();
 var FS = "";
@@ -120760,7 +120748,7 @@ var GitGraphService = class {
     } catch {
       return "";
     }
-    return createHash14("sha1").update(out).digest("hex");
+    return createHash13("sha1").update(out).digest("hex");
   }
   /**
    * One page of HEAD's history, newest first in topological order, so every
@@ -122804,7 +122792,7 @@ async function readBody2(req, max3) {
 // src/server/api/mcp-proxy/stdio.ts
 init_src();
 init_mcp_stdio_service();
-var log80 = createLogger("mcp-proxy-stdio");
+var log79 = createLogger("mcp-proxy-stdio");
 var MAX_REQUEST_BYTES = 4 * 1024 * 1024;
 var sessionHeader = (req) => {
   const value = req.headers["mcp-session-id"];
@@ -122935,7 +122923,7 @@ data: ${JSON.stringify(message)}
     if (gone) {
       return sendJson3(res, 404, { error: "The stdio MCP server's session ended" });
     }
-    log80.warn(
+    log79.warn(
       { server: server.name, err: err instanceof Error ? err.name : "unknown" },
       "no answer"
     );
@@ -122960,7 +122948,7 @@ data: ${JSON.stringify(message)}
 }
 
 // src/server/api/mcp-proxy/handler.ts
-var log81 = createLogger("mcp-proxy");
+var log80 = createLogger("mcp-proxy");
 var MCP_PROXY_PREFIX = "/mcp-proxy/";
 var ROUTE = /^\/mcp-proxy\/([^/]+)\/?$/;
 var MAX_REQUEST_BYTES2 = 4 * 1024 * 1024;
@@ -123122,13 +123110,13 @@ async function handleMcpProxy(req, res) {
   try {
     upstream = await sendUpstream(server, { method, headers, body, signal: abort.signal });
   } catch (err) {
-    log81.warn({ server: name5, err: errorCode2(err) }, "upstream failed");
+    log80.warn({ server: name5, err: errorCode2(err) }, "upstream failed");
     auditUnanswered(server, auth2.sessionId, plan, "upstream-unreachable");
     return sendJson3(res, 502, { error: "The upstream MCP server did not answer" });
   }
   if (upstream.status === 401 || upstream.status >= 300 && upstream.status < 400) {
     await upstream.body?.cancel().catch(() => void 0);
-    log81.warn({ server: name5, status: upstream.status }, "upstream refused the stored credential");
+    log80.warn({ server: name5, status: upstream.status }, "upstream refused the stored credential");
     auditUnanswered(server, auth2.sessionId, plan, `upstream-${upstream.status}`);
     return sendJson3(res, 502, {
       error: upstream.status === 401 ? "The upstream MCP server rejected the stored credential" : "The upstream MCP server redirected, which the proxy does not follow"
@@ -123196,7 +123184,7 @@ async function handleMcpProxy(req, res) {
   } catch (err) {
     auditUnanswered(server, auth2.sessionId, plan, "stream-failed");
     if (!abort.signal.aborted) {
-      log81.warn(
+      log80.warn(
         { server: name5, err: errorCode2(err) },
         err instanceof SseEventTooLargeError ? "event too large to inspect" : "proxy stream failed"
       );
@@ -123231,7 +123219,7 @@ function getScalarHtml(specUrl) {
 // src/server/api/pairing/handler.ts
 init_src();
 init_token_service();
-var log82 = createLogger("pairing");
+var log81 = createLogger("pairing");
 var PAIR_EXCHANGE_PATH = "/api/pair/exchange";
 var MAX_BODY_BYTES2 = 4096;
 var PAIR_REFUSED_MESSAGE = "This link was already used or has expired. Ask for a new one in Settings > Devices.";
@@ -123323,7 +123311,7 @@ async function handlePairExchange(req, res) {
     send3(200, out, { "Set-Cookie": buildCookieHeader(out.token, isSecure(req)) });
   } catch (err) {
     if (!(err instanceof PairingExchangeError)) throw err;
-    log82.debug(`pairing exchange refused: ${err.reason}`);
+    log81.debug(`pairing exchange refused: ${err.reason}`);
     send3(401, { error: PAIR_REFUSED_MESSAGE });
   }
 }
@@ -123331,7 +123319,7 @@ async function handlePairExchange(req, res) {
 // src/server/api/provisioning/handler.ts
 init_src();
 import { pipeline } from "node:stream";
-var log83 = createLogger("provisioning");
+var log82 = createLogger("provisioning");
 var PROVISION_PREFIX = "/api/provision/";
 var MAX_EXCHANGE_BODY_BYTES2 = 4096;
 var MAX_LOG_BODY_BYTES = 128 * 1024;
@@ -123388,7 +123376,7 @@ async function handleProvision(req, res) {
       send3(200, provisioningService.exchange(code2), "text/plain; charset=utf-8");
     } catch (err) {
       if (!(err instanceof ProvisionExchangeError)) throw err;
-      log83.debug(`provisioning exchange refused: ${err.reason}`);
+      log82.debug(`provisioning exchange refused: ${err.reason}`);
       refused();
     }
     return;
@@ -123524,7 +123512,7 @@ var OutputFlow = class {
 };
 
 // ../../packages/worktree-ops/src/terminal-socket.ts
-var log84 = createLogger("terminal-ws");
+var log83 = createLogger("terminal-ws");
 var MAX_CLOSE_REASON_BYTES = 123;
 var HEARTBEAT_INTERVAL_MS2 = 3e4;
 function clampCloseReason(reason) {
@@ -123592,7 +123580,7 @@ function createInbox(ws) {
   };
 }
 function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendingMessage) {
-  log84.debug(
+  log83.debug(
     "Terminal %s: %s (worktree %s)",
     isNew ? "connected" : "reconnected",
     terminalId,
@@ -123612,7 +123600,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
   });
   const unsubscribeExit = backend.onExit(terminalId, (event) => {
     unsubscribeTitle();
-    log84.debug("PTY exited with code %d for terminal %s", event.exitCode, terminalId);
+    log83.debug("PTY exited with code %d for terminal %s", event.exitCode, terminalId);
     if (ws.readyState === ws.OPEN) {
       ws.close(1e3, "Terminal exited");
     }
@@ -123640,7 +123628,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
     try {
       attached = await backend.attach(terminalId, dims);
     } catch (err) {
-      log84.error("Failed to attach terminal %s: %s", terminalId, err);
+      log83.error("Failed to attach terminal %s: %s", terminalId, err);
       safeClose(ws, 1011, "Terminal attach failed");
       return;
     }
@@ -123682,7 +123670,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
           const cols = Number.isFinite(parsed.cols) && parsed.cols > 0 ? parsed.cols : void 0;
           const rows = Number.isFinite(parsed.rows) && parsed.rows > 0 ? parsed.rows : void 0;
           void startReplay(cols, rows, parsed.flow === true).catch((err) => {
-            log84.error("Failed to replay terminal %s: %s", terminalId, err);
+            log83.error("Failed to replay terminal %s: %s", terminalId, err);
           });
           return;
         }
@@ -123702,7 +123690,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
     flow?.dispose();
     attachment?.detach();
     unsubscribeExit();
-    log84.debug("Terminal disconnected: %s (PTY kept alive)", terminalId);
+    log83.debug("Terminal disconnected: %s (PTY kept alive)", terminalId);
   });
   if (pendingMessage) {
     processMessage(pendingMessage);
@@ -123725,7 +123713,7 @@ function handleMessage(backend, ws, terminalId, message) {
       }
       if (parsed.type === "close") {
         void backend.kill(terminalId).catch((err) => {
-          log84.error("Failed to kill terminal %s: %s", terminalId, err);
+          log83.error("Failed to kill terminal %s: %s", terminalId, err);
         });
         ws.close(1e3, "Terminal closed by client");
         return;
@@ -123741,7 +123729,7 @@ function handleMessage(backend, ws, terminalId, message) {
 
 // src/server/api/terminals/ws.ts
 init_terminal_service();
-var log85 = createLogger("terminal-ws");
+var log84 = createLogger("terminal-ws");
 async function handleTerminalConnection(ws, req) {
   if (!req.url) {
     safeClose(ws, 4e3, "Missing request URL");
@@ -123760,7 +123748,7 @@ async function handleTerminalConnection(ws, req) {
     existing = await terminalService.info(terminalId) !== null;
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    log85.error("Failed to look up terminal %s: %s", terminalId, msg);
+    log84.error("Failed to look up terminal %s: %s", terminalId, msg);
     safeClose(ws, 1011, msg);
     return;
   }
@@ -123808,7 +123796,7 @@ async function handleTerminalConnection(ws, req) {
     await terminalService.spawn(worktreeId4, terminalId, spawnOpts);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    log85.error("Failed to spawn terminal %s for worktree %s: %s", terminalId, worktreeId4, msg);
+    log84.error("Failed to spawn terminal %s for worktree %s: %s", terminalId, worktreeId4, msg);
     safeClose(ws, 4001, msg);
     return;
   }
@@ -123908,14 +123896,14 @@ async function handleVoiceTranscribe(req, res) {
 
 // src/server/api/web-app-manifest.ts
 import { createReadStream as createReadStream5, statSync as statSync15 } from "node:fs";
-import { join as join57 } from "node:path";
+import { join as join56 } from "node:path";
 var WEB_APP_MANIFEST_PATH = "/manifest.webmanifest";
 var ICON_FILES = ["band-192.png", "band-512.png", "apple-touch-icon.png"];
 function handleWebAppManifest(req, res, publicDir) {
   if (req.method !== "GET" && req.method !== "HEAD") return false;
   const pathname = req.url?.split("?")[0];
   if (pathname === WEB_APP_MANIFEST_PATH) {
-    sendFile(req, res, join57(publicDir, "manifest.webmanifest"), {
+    sendFile(req, res, join56(publicDir, "manifest.webmanifest"), {
       "Content-Type": "application/manifest+json",
       "Cache-Control": "no-cache"
     });
@@ -123923,7 +123911,7 @@ function handleWebAppManifest(req, res, publicDir) {
   }
   const icon = ICON_FILES.find((name5) => pathname === `/icons/${name5}`);
   if (!icon) return false;
-  sendFile(req, res, join57(publicDir, "icons", icon), {
+  sendFile(req, res, join56(publicDir, "icons", icon), {
     "Content-Type": "image/png",
     "Cache-Control": "public, max-age=86400"
   });
@@ -123947,7 +123935,7 @@ init_src();
 init_wrapper();
 init_browser_lookup();
 init_remote_cdp();
-var log86 = createLogger("cdp-proxy");
+var log85 = createLogger("cdp-proxy");
 async function handleCdpConnection(ws, req) {
   const url3 = new URL(req.url ?? "", `http://${req.headers.host}`);
   const bandTabId = url3.searchParams.get("bandTabId");
@@ -123990,17 +123978,17 @@ async function handleCdpConnection(ws, req) {
     cdpTargetId = await ensureCdpTargetId(bandTabId);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log86.debug("ensureCdpTargetId failed for %s: %s", bandTabId, message);
+    log85.debug("ensureCdpTargetId failed for %s: %s", bandTabId, message);
     if (ws.readyState === ws.OPEN) {
       ws.close(4001, message.slice(0, 123));
     }
     return;
   }
   const upstreamUrl = `ws://${DESKTOP_CDP_HOST}:${DESKTOP_CDP_PORT}/devtools/page/${encodeURIComponent(cdpTargetId)}`;
-  log86.info("CDP proxy connecting bandTabId=%s upstream=%s", bandTabId, upstreamUrl);
+  log85.info("CDP proxy connecting bandTabId=%s upstream=%s", bandTabId, upstreamUrl);
   upstream = new wrapper_default(upstreamUrl);
   upstream.on("open", () => {
-    log86.info("CDP upstream open bandTabId=%s pending=%d", bandTabId, pending2.length);
+    log85.info("CDP upstream open bandTabId=%s pending=%d", bandTabId, pending2.length);
     for (const msg of pending2) {
       upstream?.send(msg);
     }
@@ -124012,20 +124000,20 @@ async function handleCdpConnection(ws, req) {
     }
   });
   upstream.on("error", (err) => {
-    log86.warn("CDP upstream error bandTabId=%s: %s", bandTabId, err.message);
+    log85.warn("CDP upstream error bandTabId=%s: %s", bandTabId, err.message);
     markTargetDestroyed(bandTabId);
     if (ws.readyState === ws.OPEN) {
       ws.close(4001, `Desktop CDP error: ${err.message}`.slice(0, 123));
     }
   });
   upstream.on("close", (code) => {
-    log86.info("CDP upstream closed bandTabId=%s code=%d", bandTabId, code);
+    log85.info("CDP upstream closed bandTabId=%s code=%d", bandTabId, code);
     if (ws.readyState === ws.OPEN) {
       ws.close(1e3, "Upstream closed");
     }
   });
   ws.on("close", () => {
-    log86.debug("CDP client closed bandTabId=%s", bandTabId);
+    log85.debug("CDP client closed bandTabId=%s", bandTabId);
     if (upstream && (upstream.readyState === wrapper_default.OPEN || upstream.readyState === wrapper_default.CONNECTING)) {
       try {
         upstream.close();
@@ -124034,7 +124022,7 @@ async function handleCdpConnection(ws, req) {
     }
   });
   ws.on("error", (err) => {
-    log86.debug("CDP client error bandTabId=%s: %s", bandTabId, err.message);
+    log85.debug("CDP client error bandTabId=%s: %s", bandTabId, err.message);
     try {
       upstream?.close();
     } catch {
@@ -124064,7 +124052,7 @@ async function bridgeRemote(ws, worktreeId4) {
     cdp = await openRemoteCdp(worktreeId4);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log86.warn("remote CDP failed for worktree %s: %s", worktreeId4, message);
+    log85.warn("remote CDP failed for worktree %s: %s", worktreeId4, message);
     if (ws.readyState === ws.OPEN)
       ws.close(4001, closeReason(`Remote browser unavailable: ${message}`));
     return true;
@@ -124088,7 +124076,7 @@ async function bridgeRemote(ws, worktreeId4) {
         if (ws.readyState === ws.OPEN) ws.send(message);
       }
     } catch (err) {
-      log86.debug("remote CDP stream ended for worktree %s: %s", worktreeId4, String(err));
+      log85.debug("remote CDP stream ended for worktree %s: %s", worktreeId4, String(err));
     }
     if (ws.readyState === ws.OPEN) ws.close(1e3, "Upstream closed");
   })();
@@ -124098,7 +124086,7 @@ async function bridgeRemote(ws, worktreeId4) {
 // src/server/infra/browser-host/cdp-targets.ts
 init_src();
 init_wrapper();
-var log87 = createLogger("cdp-targets");
+var log86 = createLogger("cdp-targets");
 var CdpUnreachableError = class extends Error {
   constructor(message) {
     super(message);
@@ -124154,7 +124142,7 @@ async function captureSnapshot(bandTabId) {
     });
     ws.on("error", (err) => {
       clearTimeout(timeout);
-      log87.debug("captureSnapshot ws error for tab %s: %s", bandTabId, err.message);
+      log86.debug("captureSnapshot ws error for tab %s: %s", bandTabId, err.message);
       markTargetDestroyed(bandTabId);
       settle2(new CdpUnreachableError(err.message));
     });
@@ -124281,7 +124269,7 @@ var RfbClientFilter = class {
 };
 
 // src/server/infra/host/desktop-proxy.ts
-var log88 = createLogger("desktop-proxy");
+var log87 = createLogger("desktop-proxy");
 var DESKTOP_PATH = /^\/api\/hosts\/([^/]+)\/desktop$/;
 function desktopHostId(pathname) {
   const match = DESKTOP_PATH.exec(pathname);
@@ -124330,7 +124318,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
       );
       if (enabled !== null) {
         filter.viewOnly = !enabled;
-        log88.debug("desktop of host %s is now %s", hostId2, enabled ? "controlled" : "view-only");
+        log87.debug("desktop of host %s is now %s", hostId2, enabled ? "controlled" : "view-only");
       }
       return;
     }
@@ -124365,7 +124353,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
     opened = true;
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log88.warn("desktop of host %s is unavailable: %s", hostId2, message);
+    log87.warn("desktop of host %s is unavailable: %s", hostId2, message);
     release();
     ws.close(4001, message.slice(0, 120));
     return;
@@ -124375,7 +124363,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
     release();
     return;
   }
-  log88.debug("desktop viewer connected: %s (%s)", hostId2, req.socket.remoteAddress ?? "unknown");
+  log87.debug("desktop viewer connected: %s (%s)", hostId2, req.socket.remoteAddress ?? "unknown");
   for (const chunk of pending2.splice(0)) desktop.write(chunk);
   try {
     for await (const bytes of desktop.output) {
@@ -124383,7 +124371,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
       await new Promise((resolve15) => ws.send(bytes, { binary: true }, () => resolve15()));
     }
   } catch (err) {
-    log88.warn("desktop stream of host %s failed: %s", hostId2, err.message);
+    log87.warn("desktop stream of host %s failed: %s", hostId2, err.message);
   } finally {
     if (opened) {
       desktop.close();
@@ -124401,7 +124389,7 @@ init_src();
 init_worktrees();
 init_registry();
 var worktreeQueries2 = new WorktreeQueries();
-var log89 = createLogger("lsp-proxy");
+var log88 = createLogger("lsp-proxy");
 function frameMessage(json3) {
   const body = Buffer.from(json3, "utf-8");
   const header = `Content-Length: ${body.byteLength}\r
@@ -124419,7 +124407,7 @@ function createFrameParser(onMessage) {
       const headerStr = buffer.subarray(0, separatorIdx).toString("ascii");
       const match = headerStr.match(/Content-Length:\s*(\d+)/i);
       if (!match) {
-        log89.warn("Malformed LSP header: %s", headerStr);
+        log88.warn("Malformed LSP header: %s", headerStr);
         buffer = buffer.subarray(separatorIdx + 4);
         continue;
       }
@@ -124464,7 +124452,7 @@ async function handleLspConnection(ws, req) {
     connection = await hostRegistry.hostFor(worktreeId4).lsp.connect({ worktreeId: worktreeId4, lang, root: worktree.worktreePath });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log89.error("Failed to spawn %s language server for worktree %s: %s", lang, worktreeId4, message);
+    log88.error("Failed to spawn %s language server for worktree %s: %s", lang, worktreeId4, message);
     ws.close(4001, message);
     return;
   }
@@ -124472,7 +124460,7 @@ async function handleLspConnection(ws, req) {
     connection.close();
     return;
   }
-  log89.debug("LSP client connected: %s/%s", worktreeId4, lang);
+  log88.debug("LSP client connected: %s/%s", worktreeId4, lang);
   const pendingRequests = /* @__PURE__ */ new Map();
   const openDocuments = /* @__PURE__ */ new Set();
   const serverId = `${worktreeId4}:${lang}`;
@@ -124508,7 +124496,7 @@ async function handleLspConnection(ws, req) {
   const retriedIds = /* @__PURE__ */ new Set();
   const RETRY_DELAY_MS = 2e3;
   const parseFrame = createFrameParser((json3) => {
-    log89.debug(
+    log88.debug(
       "LSP stdout [%s/%s]: %s",
       worktreeId4,
       lang,
@@ -124520,7 +124508,7 @@ async function handleLspConnection(ws, req) {
         const originalRequest = pendingRequests.get(msg.id);
         retriedIds.add(msg.id);
         pendingRequests.delete(msg.id);
-        log89.debug(
+        log88.debug(
           "LSP retrying request %d after 'No Project' error [%s/%s]",
           msg.id,
           worktreeId4,
@@ -124551,16 +124539,16 @@ async function handleLspConnection(ws, req) {
       for await (const chunk of connection.output)
         parseFrame(Buffer.from(chunk.buffer, chunk.byteOffset, chunk.byteLength));
     } catch (err) {
-      log89.warn("LSP output stream failed [%s/%s]: %s", worktreeId4, lang, String(err));
+      log88.warn("LSP output stream failed [%s/%s]: %s", worktreeId4, lang, String(err));
     }
     release();
     if (ws.readyState === ws.OPEN) {
-      log89.debug("LSP server exited, closing WebSocket");
+      log88.debug("LSP server exited, closing WebSocket");
       ws.close(1e3, "Language server exited");
     }
   })();
   function forwardToStdin(json3) {
-    log89.debug(
+    log88.debug(
       "LSP stdin [%s/%s]: %s",
       worktreeId4,
       lang,
@@ -124592,7 +124580,7 @@ async function handleLspConnection(ws, req) {
   ws.on("close", () => {
     release();
     connection.close();
-    log89.debug("LSP client disconnected: %s/%s (server kept alive)", worktreeId4, lang);
+    log88.debug("LSP client disconnected: %s/%s (server kept alive)", worktreeId4, lang);
   });
 }
 
@@ -124601,8 +124589,8 @@ init_webhook();
 
 // src/server/services/_utils/hosted-file.ts
 init_registry();
-import { basename as basename6, join as join58 } from "node:path";
-async function openHostedFile(kind, worktreeId4, rawName) {
+import { basename as basename6, dirname as dirname17, join as join57 } from "node:path";
+async function openHostedFile(kind, worktreeId4, rawName, chatId) {
   const host = hostRegistry.hostFor(worktreeId4);
   if (host.id === hostRegistry.local.id) return null;
   let name5;
@@ -124615,7 +124603,9 @@ async function openHostedFile(kind, worktreeId4, rawName) {
   try {
     const dirs = (await host.info()).dirs;
     if (!dirs) return null;
-    const path2 = join58(dirs[kind], worktreeId4, name5);
+    const path2 = chatId ? join57(dirs[kind], worktreeId4, chatId, name5) : join57(dirs[kind], worktreeId4, name5);
+    const dir = await host.fs.realpath(dirname17(path2));
+    if (!(await host.fs.realpath(path2)).startsWith(`${dir}/`)) return null;
     const stat7 = await host.fs.stat(path2, { followSymlinks: true });
     if (stat7.kind !== "file") return null;
     return { size: stat7.size, stream: host.fs.readStream(path2) };
@@ -132736,6 +132726,7 @@ async function listenWithFallback(server, startPort, attempts = 20) {
 }
 
 // start-server.ts
+init_shared_dir();
 init_agent_session_registry_service();
 init_branch_status_poller();
 init_browser_service();
@@ -132754,15 +132745,15 @@ init_src();
 init_registry();
 async function installSkills2(opts = {}) {
   const result = await hostRegistry.local.agentEnv.installSkills({ home: opts.home });
-  const log91 = opts.log;
-  if (log91) {
-    for (const warning of result.warnings) log91.warn(warning);
-    for (const path2 of result.written) log91.info("Installed skill at %s", path2);
+  const log90 = opts.log;
+  if (log90) {
+    for (const warning of result.warnings) log90.warn(warning);
+    for (const path2 of result.written) log90.info("Installed skill at %s", path2);
     for (const path2 of result.updated) {
-      log91.info("Updated skill at %s (content differed \u2014 shipped version reinstalled)", path2);
+      log90.info("Updated skill at %s (content differed \u2014 shipped version reinstalled)", path2);
     }
     for (const conflict of result.conflicts) {
-      log91.warn("Skill symlink conflict \u2014 %s (left as-is; remove it manually to re-link)", conflict);
+      log90.warn("Skill symlink conflict \u2014 %s (left as-is; remove it manually to re-link)", conflict);
     }
   }
   return result;
@@ -132775,7 +132766,7 @@ init_state();
 init_sync_service();
 init_worktree_group_service();
 init_worktree_service();
-var log90 = createLogger("setup");
+var log89 = createLogger("setup");
 async function runFirstTimeSetup() {
   forgetLocalWorktrees();
   convertLegacyLabels();
@@ -132788,7 +132779,7 @@ async function runFirstTimeSetup() {
   ]);
   for (const r of results) {
     if (r.status === "rejected") {
-      log90.warn(
+      log89.warn(
         "Setup step failed: %s",
         r.reason instanceof Error ? r.reason.message : String(r.reason)
       );
@@ -132802,7 +132793,7 @@ async function refreshAgentModelsInBackground() {
     const ok2 = results.filter((r) => !r.error).length;
     const failed = results.length - ok2;
     if (results.length > 0) {
-      log90.info(
+      log89.info(
         "Background model refresh: %d/%d agents updated (%d failed)",
         ok2,
         results.length,
@@ -132810,7 +132801,7 @@ async function refreshAgentModelsInBackground() {
       );
     }
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Background model refresh failed: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132825,7 +132816,7 @@ async function ensureRepoRemotes() {
   try {
     await repoService.backfillRemotes();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to record repo remotes at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132835,7 +132826,7 @@ function migrateRepoCronjobs() {
   try {
     cronjobService.migrateRepoJobs();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to move repo-scoped cronjobs to worktrees at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132845,7 +132836,7 @@ function convertLegacyLabels() {
   try {
     worktreeGroupService.convertLegacyLabels();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to convert repo labels to groups at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132855,7 +132846,7 @@ function forgetLocalWorktrees() {
   try {
     worktreeService.forgetLocalWorktrees();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to forget local worktrees at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132865,7 +132856,7 @@ async function ensureRepoStateInSync() {
   try {
     await syncService.syncWorktrees();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to sync repo state at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132876,22 +132867,22 @@ async function ensureCliInstalled() {
   try {
     cliStatus = await checkCli();
   } catch (err) {
-    log90.warn("Could not check CLI status: %s", err instanceof Error ? err.message : String(err));
+    log89.warn("Could not check CLI status: %s", err instanceof Error ? err.message : String(err));
     return;
   }
   if (cliStatus === "Installed") {
     return;
   }
   if (cliStatus !== "NotInstalled") {
-    log90.warn("CLI not auto-installed (status: %s)", cliStatus);
+    log89.warn("CLI not auto-installed (status: %s)", cliStatus);
     return;
   }
-  log90.info("Installing band CLI...");
+  log89.info("Installing band CLI...");
   try {
     await installCli();
-    log90.info("CLI installed to %s", SYMLINK_PATH);
+    log89.info("CLI installed to %s", SYMLINK_PATH);
   } catch (err) {
-    log90.warn("CLI installation failed: %s", err instanceof Error ? err.message : String(err));
+    log89.warn("CLI installation failed: %s", err instanceof Error ? err.message : String(err));
   }
 }
 async function ensureDefaultCodingAgents() {
@@ -132900,17 +132891,17 @@ async function ensureDefaultCodingAgents() {
   if (Array.isArray(existing) && existing.length > 0) {
     return;
   }
-  log90.info("Detecting installed coding agents...");
+  log89.info("Detecting installed coding agents...");
   const detected = [];
   for (const check3 of AGENT_CHECKS) {
     const path2 = await systemService.whichBinary(check3.binary);
     if (path2) {
-      log90.info("Detected coding agent: %s (%s)", check3.id, path2);
+      log89.info("Detected coding agent: %s (%s)", check3.id, path2);
       detected.push({ id: check3.id, type: check3.type, label: check3.label });
     }
   }
   if (detected.length === 0) {
-    log90.info("No coding agent CLIs detected on PATH");
+    log89.info("No coding agent CLIs detected on PATH");
     return;
   }
   const current3 = loadSettings();
@@ -132919,7 +132910,7 @@ async function ensureDefaultCodingAgents() {
     current3.defaultCodingAgent = detected[0].id;
   }
   saveSettings(current3);
-  log90.info("Enabled %d coding agent(s); default = %s", detected.length, current3.defaultCodingAgent);
+  log89.info("Enabled %d coding agent(s); default = %s", detected.length, current3.defaultCodingAgent);
 }
 function ensureNotificationDefaults() {
   const settings3 = loadSettings();
@@ -132931,7 +132922,7 @@ function ensureNotificationDefaults() {
     ...settings3,
     notifications: { ...notifications, soundOnNeedsAttention: true }
   });
-  log90.info("Set default notifications.soundOnNeedsAttention = true");
+  log89.info("Set default notifications.soundOnNeedsAttention = true");
 }
 function migrateAgentDefaultMode() {
   const settings3 = loadSettings();
@@ -132939,15 +132930,15 @@ function migrateAgentDefaultMode() {
   const mode = agentModeFromVia(settings3.cli?.defaultVia);
   if (!mode) return;
   saveSettings({ ...settings3, agents: { ...settings3.agents, defaultMode: mode } });
-  log90.info("Migrated cli.defaultVia to agents.defaultMode = %s", mode);
+  log89.info("Migrated cli.defaultVia to agents.defaultMode = %s", mode);
 }
 async function ensureSkillsInstalled() {
   try {
-    const result = await installSkills2({ log: log90 });
+    const result = await installSkills2({ log: log89 });
     const wrote = result.written.length + result.updated.length;
     const linkChange = result.linked.length;
     if (wrote > 0 || linkChange > 0 || result.conflicts.length > 0) {
-      log90.info(
+      log89.info(
         "Synced CLI skills (shared: %d written, %d updated, %d unchanged; symlinks: %d created, %d already-linked, %d conflicts, %d skipped)",
         result.written.length,
         result.updated.length,
@@ -132959,7 +132950,7 @@ async function ensureSkillsInstalled() {
       );
     }
   } catch (err) {
-    log90.warn("Failed to sync CLI skills: %s", err instanceof Error ? err.message : String(err));
+    log89.warn("Failed to sync CLI skills: %s", err instanceof Error ? err.message : String(err));
   }
 }
 var SetupService = class {
@@ -132980,7 +132971,7 @@ init_worktree_service();
 function logCrash(message) {
   try {
     mkdirSync11(bandHome(), { recursive: true });
-    appendFileSync2(join59(bandHome(), "server.log"), message, "utf-8");
+    appendFileSync2(join58(bandHome(), "server.log"), message, "utf-8");
   } catch {
   }
 }
@@ -133020,9 +133011,9 @@ function resolveUiDir() {
   if (explicit) return resolve14(explicit);
   const candidates = [
     resolve14(SERVER_ROOT, "..", "..", "web", "dist", "client"),
-    join59(SERVER_ROOT, "client")
+    join58(SERVER_ROOT, "client")
   ];
-  return candidates.find((dir) => existsSync18(join59(dir, "_shell.html"))) ?? candidates[1];
+  return candidates.find((dir) => existsSync18(join58(dir, "_shell.html"))) ?? candidates[1];
 }
 var clientDir = resolveUiDir();
 var uiRoot = process.env.BAND_UI_ROOT ? resolve14(process.env.BAND_UI_ROOT) : resolve14(SERVER_ROOT, "..", "web");
@@ -133073,7 +133064,7 @@ function getOpenApiSpec() {
     if (isDev) {
       const { generateOpenAPIDocument } = await import("@trpc/openapi");
       const doc = await generateOpenAPIDocument(
-        join59(SERVER_ROOT, "src", "server", "api", "router.ts"),
+        join58(SERVER_ROOT, "src", "server", "api", "router.ts"),
         {
           title: "Band API",
           version: "1.0.0"
@@ -133082,7 +133073,7 @@ function getOpenApiSpec() {
       doc.servers = [{ url: "/trpc" }];
       return JSON.stringify(doc, null, 2);
     }
-    const openApiDoc = JSON.parse(readFileSync12(join59(SERVER_ROOT, "openapi.json"), "utf-8"));
+    const openApiDoc = JSON.parse(readFileSync12(join58(SERVER_ROOT, "openapi.json"), "utf-8"));
     openApiDoc.servers = [{ url: "/trpc" }];
     return JSON.stringify(openApiDoc, null, 2);
   })().catch((err) => {
@@ -133098,6 +133089,13 @@ function getCachedScalarHtml() {
   _scalarHtml = getScalarHtml("/api/openapi.json");
   return _scalarHtml;
 }
+function hostedFileHeaders(contentType) {
+  const headers = { "X-Content-Type-Options": "nosniff" };
+  if (/^(text\/html|image\/svg\+xml)\b/.test(contentType)) {
+    headers["Content-Security-Policy"] = "sandbox allow-scripts";
+  }
+  return headers;
+}
 function serveStaticFile(res, root, subdir, rawFilename) {
   const filename = basename7(decodeURIComponent(rawFilename));
   if (!filename || filename.includes("..")) {
@@ -133105,14 +133103,21 @@ function serveStaticFile(res, root, subdir, rawFilename) {
     res.end("Bad request");
     return;
   }
-  const filePath = join59(root, subdir, filename);
+  const filePath = join58(root, subdir, filename);
   try {
+    const dir = realpathSync7(join58(root, subdir));
+    if (!realpathSync7(filePath).startsWith(dir + sep10)) {
+      res.writeHead(404);
+      res.end("Not found");
+      return;
+    }
     const fileStat = statSync16(filePath);
     const contentType = mimeTypeFromFilename(filename);
     res.writeHead(200, {
       "Content-Type": contentType,
       "Content-Length": fileStat.size.toString(),
-      "Cache-Control": "private, max-age=86400"
+      "Cache-Control": "private, max-age=86400",
+      ...hostedFileHeaders(contentType)
     });
     createReadStream6(filePath).pipe(res);
   } catch {
@@ -133120,18 +133125,20 @@ function serveStaticFile(res, root, subdir, rawFilename) {
     res.end("Not found");
   }
 }
-async function serveHostedFile(res, kind, worktreeId4, rawName) {
+async function serveHostedFile(res, kind, worktreeId4, rawName, chatId) {
   if (hostRegistry.hostFor(worktreeId4).id === hostRegistry.local.id) return false;
-  const file3 = await openHostedFile(kind, worktreeId4, rawName);
+  const file3 = await openHostedFile(kind, worktreeId4, rawName, chatId);
   if (!file3) {
     res.writeHead(404);
     res.end("Not found");
     return true;
   }
+  const contentType = mimeTypeFromFilename(basename7(decodeURIComponent(rawName)));
   res.writeHead(200, {
-    "Content-Type": mimeTypeFromFilename(basename7(decodeURIComponent(rawName))),
+    "Content-Type": contentType,
     "Content-Length": file3.size.toString(),
-    "Cache-Control": "private, max-age=86400"
+    "Cache-Control": "private, max-age=86400",
+    ...hostedFileHeaders(contentType)
   });
   pipeline2(
     Readable2.from(file3.stream, { objectMode: false, highWaterMark: 64 * 1024 }),
@@ -133149,7 +133156,7 @@ async function serveWorktreeFile(res, worktreeId4, rawPath, extraHeaders = {}, v
     return;
   }
   const root = worktree.worktree.path;
-  const target = resolve14(join59(root, rawPath));
+  const target = resolve14(join58(root, rawPath));
   if (!target.startsWith(root + sep10) && target !== root) {
     res.writeHead(400);
     res.end("Bad request");
@@ -133460,7 +133467,7 @@ async function main() {
       res.end(JSON.stringify({ status: "ok", app: "band-web-server" }));
       return;
     }
-    if (handleWebAppManifest(req, res, isDev ? join59(uiRoot, "public") : clientDir)) return;
+    if (handleWebAppManifest(req, res, isDev ? join58(uiRoot, "public") : clientDir)) return;
     if (req.url?.split("?")[0] === WORKER_EXCHANGE_PATH) {
       await workerLinkService.handleExchange(req, res);
       return;
@@ -133559,21 +133566,17 @@ async function main() {
       return;
     }
     if (req.url?.startsWith("/api/shared/")) {
-      const rest = req.url.slice("/api/shared/".length).split("?")[0];
-      const slashIdx = rest.indexOf("/");
-      if (slashIdx === -1) {
+      const parsed = parseSharedPath(req.url.slice("/api/shared/".length));
+      if (!parsed) {
         res.writeHead(400);
         res.end("Bad request");
         return;
       }
-      const partition = basename7(decodeURIComponent(rest.slice(0, slashIdx)));
-      if (!partition || partition === ".." || partition === ".") {
-        res.writeHead(400);
-        res.end("Bad request");
+      const encodedName = encodeURIComponent(parsed.name);
+      if (await serveHostedFile(res, "shared", parsed.worktreeId, encodedName, parsed.chatId))
         return;
-      }
-      if (await serveHostedFile(res, "shared", partition, rest.slice(slashIdx + 1))) return;
-      serveStaticFile(res, bandHome(), join59("shared", partition), rest.slice(slashIdx + 1));
+      const subdir = parsed.chatId ? join58("shared", parsed.worktreeId, parsed.chatId) : join58("shared", parsed.worktreeId);
+      serveStaticFile(res, bandHome(), subdir, encodedName);
       return;
     }
     if (req.url?.startsWith("/api/worktree-file/")) {
@@ -133793,7 +133796,7 @@ async function main() {
         if (pathname.startsWith("/_shell")) res.setHeader("Cache-Control", "no-cache");
       }
     });
-    const shellPath2 = join59(clientDir, "_shell.html");
+    const shellPath2 = join58(clientDir, "_shell.html");
     if (!existsSync18(shellPath2)) {
       throw new Error(
         `UI build not found at ${clientDir} (no _shell.html). Run \`pnpm build\` or pass --ui-dir <path>.`