@band-app/server 0.54.0 → 0.54.2

package/dist/start-server.mjs

@@ -2136,7 +2136,7 @@ var require_thread_stream = __commonJS({
     var { version: version3 } = require_package();
     var { EventEmitter: EventEmitter4 } = __require("events");
     var { Worker: Worker2 } = __require("worker_threads");
-    var { join: join60 } = __require("path");
+    var { join: join59 } = __require("path");
     var { pathToFileURL } = __require("url");
     var { wait } = require_wait();
     var {
@@ -2172,7 +2172,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join60(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join59(__dirname, "lib", "worker.js");
       const worker2 = new Worker2(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -2558,7 +2558,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire2 } = __require("module");
     var getCallers = require_caller();
-    var { join: join60, isAbsolute: isAbsolute7, sep: sep11 } = __require("node:path");
+    var { join: join59, isAbsolute: isAbsolute7, sep: sep11 } = __require("node:path");
     var sleep3 = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -2621,7 +2621,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join60(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join59(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -2639,7 +2639,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline3) {
-        target = bundlerOverrides["pino-worker"] || join60(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join59(__dirname, "worker.js");
         options.pipelines = [pipeline3.map((dest) => {
           return {
             ...dest,
@@ -2661,7 +2661,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join60(__dirname, "..", "file.js");
+          return join59(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -2989,11 +2989,11 @@ var require_tools = __commonJS({
         }
       }
     }
-    function buildFormatters(level, bindings, log91) {
+    function buildFormatters(level, bindings, log90) {
       return {
         level,
         bindings,
-        log: log91
+        log: log90
       };
     }
     function normalizeDestFileDescriptor(destination) {
@@ -3376,11 +3376,11 @@ var require_proto = __commonJS({
         }
       } else instance[serializersSym] = serializers;
       if (options.hasOwnProperty("formatters")) {
-        const { level, bindings: chindings, log: log91 } = options.formatters;
+        const { level, bindings: chindings, log: log90 } = options.formatters;
         instance[formattersSym] = buildFormatters(
           level || formatters.level,
           chindings || resetChildingsFormatter,
-          log91 || formatters.log
+          log90 || formatters.log
         );
       } else {
         instance[formattersSym] = buildFormatters(
@@ -3650,7 +3650,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join60 = ",";
+            let join59 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -3664,7 +3664,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join60 = `,
+                join59 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3672,13 +3672,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join60;
+                res += join59;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join60}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join59}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3699,7 +3699,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join60 = `,
+              join59 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3713,13 +3713,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key3, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join60;
+                separator = join59;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join60;
+              separator = join59;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -3760,7 +3760,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join60 = ",";
+            let join59 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -3773,7 +3773,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join60 = `,
+                join59 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -3781,13 +3781,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join60;
+                res += join59;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join60}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join59}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -3800,7 +3800,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join60 = `,
+              join59 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -3809,7 +3809,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key3, value[key3], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}:${whitespace}${tmp}`;
-                separator = join60;
+                separator = join59;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -3867,20 +3867,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join61 = `,
+              const join60 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join61;
+                res2 += join60;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join61}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join60}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -3896,16 +3896,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join60 = `,
+            const join59 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join60, maximumBreadth);
+              res += stringifyTypedArray(value, join59, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join60;
+              separator = join59;
             }
             if (deterministic) {
               keys = sort(keys, comparator2);
@@ -3916,13 +3916,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key3, value[key3], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key3)}: ${tmp}`;
-                separator = join60;
+                separator = join59;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join60;
+              separator = join59;
             }
             if (separator !== "") {
               res = `
@@ -14699,7 +14699,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes17, createHash: createHash15 } = __require("crypto");
+    var { randomBytes: randomBytes17, createHash: createHash14 } = __require("crypto");
     var { Duplex, Readable: Readable3 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -15359,7 +15359,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash15("sha1").update(key2 + GUID).digest("base64");
+        const digest2 = createHash14("sha1").update(key2 + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -15726,7 +15726,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter4 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash15 } = __require("crypto");
+    var { createHash: createHash14 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -16027,7 +16027,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest2 = createHash15("sha1").update(key2 + GUID).digest("base64");
+        const digest2 = createHash14("sha1").update(key2 + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -41799,7 +41799,7 @@ var init_sql = __esm({
         return new SQL([new StringChunk(str4)]);
       }
       _sql.raw = raw;
-      function join60(chunks, separator) {
+      function join59(chunks, separator) {
         const result = [];
         for (const [i, chunk] of chunks.entries()) {
           if (i > 0 && separator !== void 0) result.push(separator);
@@ -41807,7 +41807,7 @@ var init_sql = __esm({
         }
         return new SQL(result);
       }
-      _sql.join = join60;
+      _sql.join = join59;
       function identifier(value) {
         return new Name(value);
       }
@@ -43735,7 +43735,7 @@ var init_sql2 = __esm({
         return new SQL3([new StringChunk2(str4)]);
       }
       _sql.raw = raw;
-      function join60(chunks, separator) {
+      function join59(chunks, separator) {
         const result = [];
         for (const [i, chunk] of chunks.entries()) {
           if (i > 0 && separator !== void 0) result.push(separator);
@@ -43743,7 +43743,7 @@ var init_sql2 = __esm({
         }
         return new SQL3(result);
       }
-      _sql.join = join60;
+      _sql.join = join59;
       function identifier(value) {
         return new Name2(value);
       }
@@ -48936,7 +48936,7 @@ var init_select3 = __esm({
           const baseTableName = this.tableName;
           const tableName = getTableLikeName(table);
           for (const item of extractUsedTable(table)) this.usedTables.add(item);
-          if (typeof tableName === "string" && this.config.joins?.some((join60) => join60.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins?.some((join59) => join59.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (!this.isPartialSelect) {
             if (Object.keys(this.joinsNotNullableMap).length === 1 && typeof baseTableName === "string") this.config.fields = { [baseTableName]: this.config.fields };
             if (typeof tableName === "string" && !is2(table, SQL3)) {
@@ -50201,7 +50201,7 @@ var init_dialect = __esm({
           if (!joins2) return;
           const withEntries = Object.entries(joins2).filter(([_2, v2]) => v2);
           if (!withEntries.length) return;
-          return sql2.join(withEntries.map(([k2, join60]) => {
+          return sql2.join(withEntries.map(([k2, join59]) => {
             const relation = tableConfig.relations[k2];
             const isSingle2 = is2(relation, One);
             const targetTable = aliasedTable(relation.targetTable, `d${currentDepth + 1}`);
@@ -50212,7 +50212,7 @@ var init_dialect = __esm({
               table: targetTable,
               mode: isSingle2 ? "first" : "many",
               schema,
-              queryConfig: join60,
+              queryConfig: join59,
               tableConfig: schema[relation.targetTableName],
               relationWhere: filter,
               isNested: true,
@@ -50226,7 +50226,7 @@ var init_dialect = __esm({
               key: k2,
               selection: innerQuery.selection,
               isArray: !isSingle2,
-              isOptional: (relation.optional ?? false) || join60 !== true && !!join60.where
+              isOptional: (relation.optional ?? false) || join59 !== true && !!join59.where
             });
             const jsonColumns = sql2.join(innerQuery.selection.map((s2) => {
               return sql2`${sql2.raw(this.escapeString(s2.key))}, ${s2.selection ? sql2`${jsonb2}(${sql2.identifier(s2.key)})` : sql2.identifier(s2.key)}`;
@@ -50745,7 +50745,7 @@ var init_update = __esm({
       createJoin(joinType) {
         return ((table, on) => {
           const tableName = getTableLikeName(table);
-          if (typeof tableName === "string" && this.config.joins.some((join60) => join60.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins.some((join59) => join59.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (typeof on === "function") {
             const from = this.config.from ? is2(table, SQLiteTable2) ? table[Table2.Symbol.Columns] : is2(table, Subquery2) ? table._.selectedFields : is2(table, SQLiteViewBase) ? table[ViewBaseConfig2].selectedFields : void 0 : void 0;
             on = on(new Proxy(this.config.table[Table2.Symbol.Columns], new SelectionProxyHandler({
@@ -68350,6 +68350,9 @@ function validateHello(h) {
   if (h.serviceManager !== void 0 && h.serviceManager !== "launchd" && h.serviceManager !== "systemd") {
     return "serviceManager must be launchd or systemd";
   }
+  if (h.updateBlocked !== void 0 && (typeof h.updateBlocked !== "string" || h.updateBlocked.length > 300)) {
+    return "updateBlocked must be a short string";
+  }
   if (h.tools !== void 0) {
     const tools = h.tools;
     if (typeof tools !== "object" || tools === null || Array.isArray(tools) || !Object.values(tools).every((v2) => typeof v2 === "string")) {
@@ -68472,6 +68475,8 @@ var init_channel = __esm({
       reportedBytes = 0;
       remoteEnded = false;
       readWaiter = null;
+      /** The reader left its loop early. Later data is consumed on arrival, so the channel can finish. */
+      discarding = false;
       failure = null;
       host;
       window;
@@ -68546,6 +68551,16 @@ var init_channel = __esm({
         this.fail(new Error(`channel ${this.id} reset: ${reason}`));
       }
       // ---- session hooks -----------------------------------------------------
+      /**
+       * For a channel nobody on this side reads any more: one this side only writes to, or a reader
+       * that left its loop for good. The peer's frames, including its end marker, are consumed on
+       * arrival. Without that the end is never acknowledged and the channel stays in both
+       * sessions' maps. Do not call it while a reader may still come back to the channel.
+       */
+      discardIncoming() {
+        this.discarding = true;
+        this.discardInbox();
+      }
       /** After a (re)attach: restart transmission from the first frame the peer lacks. */
       resumeSend(peerLastSeq) {
         this.retained = this.retained.filter((f2) => f2.frame.seq > peerLastSeq);
@@ -68583,6 +68598,7 @@ var init_channel = __esm({
             } else {
               this.inbox.push({ seq: frame.seq, data: frame.payload });
             }
+            if (this.discarding) this.discardInbox();
             this.wakeReader();
             return;
           }
@@ -68637,6 +68653,7 @@ var init_channel = __esm({
                 return { value: item.data, done: false };
               }
               if (this.failure) throw this.failure;
+              if (this.discarding && this.remoteEnded) return { value: void 0, done: true };
               await new Promise((resolve15) => {
                 this.readWaiter = resolve15;
               });
@@ -68684,6 +68701,19 @@ var init_channel = __esm({
         this.readWaiter = null;
         w2?.();
       }
+      /** Consumes everything queued without delivering it, and reports the credit. */
+      discardInbox() {
+        while (this.inbox.length > 0) {
+          const item = this.inbox.shift();
+          this.consumedSeq = item.seq;
+          if (item.data) {
+            this.inboxBytes -= item.data.length;
+            this.consumedBytes += item.data.length;
+          }
+        }
+        this.sendCredit(true);
+        this.maybeDone();
+      }
       maybeDone() {
         if (this.localEndAcked && this.remoteEnded && this.inbox.length === 0)
           this.host.channelDone(this.id);
@@ -68817,6 +68847,15 @@ var init_session3 = __esm({
       getChannel(id) {
         return this.channels.get(id);
       }
+      /** How many channels are open, by name. Largest first. */
+      channelCounts() {
+        const counts = /* @__PURE__ */ new Map();
+        for (const ch of this.channels.values()) counts.set(ch.name, (counts.get(ch.name) ?? 0) + 1);
+        return [...counts].map(([name5, count3]) => ({ name: name5, count: count3 })).sort((a, b2) => b2.count - a.count);
+      }
+      get openChannelCount() {
+        return this.channels.size;
+      }
       /** Highest received sequence per channel, for `hello.resume` and `ready.resume`. */
       resumeMap() {
         const out = {};
@@ -68995,7 +69034,8 @@ var init_session3 = __esm({
             }
             if (this.channels.has(p2.chan) || this.tombstones.has(p2.chan)) return;
             if (this.channels.size >= MAX_CHANNELS) {
-              this.emit("fault", `refused channel ${p2.chan}: too many channels`);
+              const held = this.channelCounts().slice(0, 5).map((c) => `${c.name}=${c.count}`).join(", ");
+              this.emit("fault", `refused channel ${p2.chan}: too many channels (open: ${held})`);
               this.writeBinary(
                 encodeFrame({
                   chan: p2.chan,
@@ -69134,6 +69174,7 @@ function sendPayload(session, value) {
   const text4 = JSON.stringify(value ?? null);
   if (Buffer.byteLength(text4) <= PAYLOAD_INLINE_LIMIT) return { json: value ?? null };
   const ch = session.openChannel("payload");
+  ch.discardIncoming();
   ch.send(Buffer.from(text4)).then(
     () => ch.end(),
     () => void 0
@@ -69157,7 +69198,7 @@ var init_payload = __esm({
 });
 
 // ../../packages/link/src/relay.ts
-var METHOD_RELAY_REGISTER, METHOD_RELAY_REVOKE, METHOD_RELAY_HTTP, RELAY_MAX_BODY_BYTES, METHOD_CLI_FETCH, METHOD_LIFECYCLE_IDLE, METHOD_LIFECYCLE_POLICY, METHOD_LIFECYCLE_SLEEP, METHOD_LIFECYCLE_SHUTDOWN, METHOD_LIFECYCLE_EXPORT_SESSIONS, METHOD_LIFECYCLE_IMPORT_SESSIONS, METHOD_GIT_CREDENTIAL, METHOD_GH_TOKEN, METHOD_LEASE_RENEW, METHOD_WORKER_UPDATE;
+var METHOD_RELAY_REGISTER, METHOD_RELAY_REVOKE, METHOD_RELAY_HTTP, RELAY_MAX_BODY_BYTES, METHOD_LIFECYCLE_IDLE, METHOD_LIFECYCLE_POLICY, METHOD_LIFECYCLE_SLEEP, METHOD_LIFECYCLE_SHUTDOWN, METHOD_LIFECYCLE_EXPORT_SESSIONS, METHOD_LIFECYCLE_IMPORT_SESSIONS, METHOD_GIT_CREDENTIAL, METHOD_GH_TOKEN, METHOD_LEASE_RENEW, METHOD_WORKER_UPDATE;
 var init_relay = __esm({
   "../../packages/link/src/relay.ts"() {
     "use strict";
@@ -69165,7 +69206,6 @@ var init_relay = __esm({
     METHOD_RELAY_REVOKE = "relay.revoke";
     METHOD_RELAY_HTTP = "relay.http";
     RELAY_MAX_BODY_BYTES = 512 * 1024;
-    METHOD_CLI_FETCH = "cli.fetch";
     METHOD_LIFECYCLE_IDLE = "lifecycle.idle";
     METHOD_LIFECYCLE_POLICY = "lifecycle.policy";
     METHOD_LIFECYCLE_SLEEP = "lifecycle.sleep";
@@ -70994,6 +71034,7 @@ var init_pty2 = __esm({
         this.done = true;
         this.release();
         this.channel.end();
+        this.channel.discardIncoming();
       }
       release() {
         const resume = this.resume;
@@ -71154,6 +71195,7 @@ function duplexOf(ch) {
     close: () => {
       closed = true;
       ch.end();
+      ch.discardIncoming();
     }
   };
 }
@@ -71277,6 +71319,7 @@ var init_remote_host = __esm({
             });
           }
           const ch = this.rpc.session().openChannel("speech.audio", {});
+          ch.discardIncoming();
           const done = this.rpc.call("speech.transcribe", {
             ...rest,
             audio: { chan: ch.id }
@@ -71408,6 +71451,7 @@ var init_remote_host = __esm({
           return;
         }
         const ch = this.rpc.session().openChannel("fs.write", { path: path2 });
+        ch.discardIncoming();
         const done = this.rpc.call("fs.writeFile", { ...base, data: { chan: ch.id } });
         done.catch(() => void 0);
         try {
@@ -71450,8 +71494,14 @@ var init_remote_host = __esm({
         const reply = await this.rpc.request("acp.spawn", { ...launch, cwd });
         const stdio = this.rpc.channel(reply.stdio);
         const stderr = this.rpc.channel(reply.stderr);
-        const exit = new Promise((resolve15) => this.agents.set(reply.agentId, resolve15));
         let closed = false;
+        const exit = new Promise(
+          (resolve15) => this.agents.set(reply.agentId, (result) => {
+            resolve15(result);
+            closed = true;
+            stdio.end();
+          })
+        );
         return {
           pid: reply.pid ?? void 0,
           stdin: {
@@ -72246,8 +72296,8 @@ var init_environment_builds = __esm({
       get(id) {
         return getDb().select().from(environmentBuilds).where(eq2(environmentBuilds.id, id)).get();
       }
-      setLog(id, log91) {
-        getDb().update(environmentBuilds).set({ log: log91 }).where(eq2(environmentBuilds.id, id)).run();
+      setLog(id, log90) {
+        getDb().update(environmentBuilds).set({ log: log90 }).where(eq2(environmentBuilds.id, id)).run();
       }
       finish(id, result) {
         getDb().update(environmentBuilds).set({
@@ -72615,32 +72665,32 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
       }
       // ---- running ---------------------------------------------------------------
       async run(row, plan) {
-        const log91 = new BuildLog(row.id, (id, text4) => this.queries.setLog(id, text4));
+        const log90 = new BuildLog(row.id, (id, text4) => this.queries.setLog(id, text4));
         let tmp = null;
         const container = `band-env-${row.id.slice(0, 12)}`;
         let failure4 = null;
         try {
-          log91.add(`Building ${plan.tag} for ${plan.repo} at ${plan.ref} (${plan.commit.slice(0, 12)})`);
-          log91.flush();
+          log90.add(`Building ${plan.tag} for ${plan.repo} at ${plan.ref} (${plan.commit.slice(0, 12)})`);
+          log90.flush();
           tmp = await plan.host.fs.mkdtemp("band-env-");
-          await this.exportCheckout(plan, tmp, log91);
-          const toolchain = await this.buildToolchain(plan, tmp, log91);
-          const layered = await this.addWorkerLayer(plan, tmp, toolchain, log91);
-          await this.install(plan, tmp, layered, container, log91);
-          if (plan.registry) await this.push(plan, log91);
-          log91.add(`Done: ${plan.tag}`);
+          await this.exportCheckout(plan, tmp, log90);
+          const toolchain = await this.buildToolchain(plan, tmp, log90);
+          const layered = await this.addWorkerLayer(plan, tmp, toolchain, log90);
+          await this.install(plan, tmp, layered, container, log90);
+          if (plan.registry) await this.push(plan, log90);
+          log90.add(`Done: ${plan.tag}`);
         } catch (err) {
           failure4 = err.message;
-          log91.add(`FAILED: ${failure4}`);
+          log90.add(`FAILED: ${failure4}`);
         }
-        await this.exec(plan.host, "docker", ["rm", "--force", container], log91, { quiet: true }).catch(
+        await this.exec(plan.host, "docker", ["rm", "--force", container], log90, { quiet: true }).catch(
           () => void 0
         );
         await this.exec(
           plan.host,
           "docker",
           ["rmi", toolchainTag(plan.repo, plan.key), layeredTag(plan.repo, plan.key)],
-          log91,
+          log90,
           { quiet: true }
         ).catch(() => void 0);
         if (tmp) await plan.host.fs.rm(tmp, { recursive: true, force: true }).catch(() => void 0);
@@ -72649,14 +72699,14 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
             this.queries.finish(row.id, {
               status: "ready",
               image: plan.tag,
-              log: log91.toString(),
+              log: log90.toString(),
               at: Date.now()
             });
           } else {
             this.queries.finish(row.id, {
               status: "failed",
               error: failure4.slice(0, 2e3),
-              log: log91.toString(),
+              log: log90.toString(),
               at: Date.now()
             });
           }
@@ -72665,9 +72715,9 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
         }
       }
       /** Runs a command on the builder host, adding it and its output to the log. */
-      async exec(host, tool, args, log91, options = {}) {
+      async exec(host, tool, args, log90, options = {}) {
         const bin = tool === "docker" ? this.dockerBin(host) : tool === "devcontainer" ? this.devcontainerBin(host) : "git";
-        if (!options.quiet) log91.add(`$ ${tool} ${args.join(" ")}`);
+        if (!options.quiet) log90.add(`$ ${tool} ${args.join(" ")}`);
         try {
           const out = await host.exec(bin, args, {
             cwd: options.cwd,
@@ -72675,35 +72725,35 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
             timeoutMs: envNumber("BAND_ENVIRONMENT_BUILD_TIMEOUT_MS", DEFAULT_STEP_TIMEOUT_MS)
           });
           if (!options.quiet) {
-            if (out.stdout.trim()) log91.add(out.stdout.trimEnd());
-            if (out.stderr.trim()) log91.add(out.stderr.trimEnd());
-            log91.flush();
+            if (out.stdout.trim()) log90.add(out.stdout.trimEnd());
+            if (out.stderr.trim()) log90.add(out.stderr.trimEnd());
+            log90.flush();
           }
           return out.stdout;
         } catch (err) {
           if (!options.quiet) {
-            log91.add(err.message);
-            log91.flush();
+            log90.add(err.message);
+            log90.flush();
           }
           throw new Error(`${tool} ${args[0] ?? ""} failed: ${firstLine(err.message)}`);
         }
       }
       /** Writes the default branch's files, with no `.git`, to `<tmp>/src`. */
-      async exportCheckout(plan, tmp, log91) {
+      async exportCheckout(plan, tmp, log90) {
         const src = posix4.join(tmp, "src");
         await plan.host.fs.mkdir(src);
         const index3 = posix4.join(tmp, "index");
-        await this.exec(plan.host, "git", ["read-tree", plan.ref], log91, {
+        await this.exec(plan.host, "git", ["read-tree", plan.ref], log90, {
           cwd: plan.repoPath,
           env: { GIT_INDEX_FILE: index3 }
         });
-        await this.exec(plan.host, "git", ["checkout-index", "--all", `--prefix=${src}/`], log91, {
+        await this.exec(plan.host, "git", ["checkout-index", "--all", `--prefix=${src}/`], log90, {
           cwd: plan.repoPath,
           env: { GIT_INDEX_FILE: index3 }
         });
       }
       /** Layer 2: returns the tag of an image holding the repo's toolchain. */
-      async buildToolchain(plan, tmp, log91) {
+      async buildToolchain(plan, tmp, log90) {
         const build = plan.environment.build;
         const src = posix4.join(tmp, "src");
         const tag = toolchainTag(plan.repo, plan.key);
@@ -72712,7 +72762,7 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
             plan.host,
             "docker",
             dockerBuildArgs({ checkout: src, dockerfile: build.dockerfile, tag }),
-            log91
+            log90
           );
           return tag;
         }
@@ -72722,7 +72772,7 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
               plan.host,
               "devcontainer",
               devcontainerBuildArgs({ checkout: src, config: build.devcontainer, tag }),
-              log91
+              log90
             );
           } catch (err) {
             throw new Error(
@@ -72732,11 +72782,11 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
           return tag;
         }
         const image = build?.image;
-        await this.exec(plan.host, "docker", ["pull", image], log91);
+        await this.exec(plan.host, "docker", ["pull", image], log90);
         return image;
       }
       /** Layer 1 on top of layer 2: copies the worker from the worker base image. */
-      async addWorkerLayer(plan, tmp, toolchain, log91) {
+      async addWorkerLayer(plan, tmp, toolchain, log90) {
         const dir = posix4.join(tmp, "layer");
         await plan.host.fs.mkdir(dir);
         await plan.host.fs.writeFile(
@@ -72748,38 +72798,38 @@ ${this.text.slice(-MAX_LOG_BYTES)}`;
         });
         await plan.host.fs.mkdir(posix4.join(dir, "root", "work"), { recursive: true });
         const tag = layeredTag(plan.repo, plan.key);
-        await this.exec(plan.host, "docker", ["build", "--tag", tag, dir], log91);
+        await this.exec(plan.host, "docker", ["build", "--tag", tag, dir], log90);
         return tag;
       }
       /** Runs `install` at the default branch inside the image and commits the result as the final tag. */
-      async install(plan, tmp, layered, container, log91) {
+      async install(plan, tmp, layered, container, log90) {
         const install = plan.environment.install;
         if (install === void 0) {
-          await this.exec(plan.host, "docker", ["tag", layered, plan.tag], log91);
+          await this.exec(plan.host, "docker", ["tag", layered, plan.tag], log90);
           return;
         }
         await this.exec(
           plan.host,
           "docker",
           installCreateArgs({ name: container, image: layered, install }),
-          log91
+          log90
         );
         await this.exec(
           plan.host,
           "docker",
           ["cp", `${posix4.join(tmp, "src")}/.`, `${container}:${IMAGE_WORKDIR}`],
-          log91
+          log90
         );
-        await this.exec(plan.host, "docker", ["start", "--attach", container], log91);
+        await this.exec(plan.host, "docker", ["start", "--attach", container], log90);
         await this.exec(
           plan.host,
           "docker",
           commitArgs({ container, tag: plan.tag, key: plan.key, commit: plan.commit }),
-          log91
+          log90
         );
       }
-      async push(plan, log91) {
-        await this.exec(plan.host, "docker", ["push", plan.tag], log91);
+      async push(plan, log90) {
+        await this.exec(plan.host, "docker", ["push", plan.tag], log90);
       }
       // ---- auto trigger ----------------------------------------------------------
       /**
@@ -88196,11 +88246,11 @@ var require_core = __commonJS({
     Ajv2.ValidationError = validation_error_1.default;
     Ajv2.MissingRefError = ref_error_1.default;
     exports.default = Ajv2;
-    function checkOptions(checkOpts, options, msg, log91 = "error") {
+    function checkOptions(checkOpts, options, msg, log90 = "error") {
       for (const key2 in checkOpts) {
         const opt = key2;
         if (opt in options)
-          this.logger[log91](`${msg}: option ${key2}. ${checkOpts[opt]}`);
+          this.logger[log90](`${msg}: option ${key2}. ${checkOpts[opt]}`);
       }
     }
     function getSchEnv(keyRef) {
@@ -90693,7 +90743,7 @@ import {
   statSync as statSync16
 } from "node:fs";
 import { createServer as createServer3 } from "node:http";
-import { basename as basename7, join as join59, resolve as resolve14, sep as sep10 } from "node:path";
+import { basename as basename7, join as join58, resolve as resolve14, sep as sep10 } from "node:path";
 import { pipeline as pipeline2, Readable as Readable2 } from "node:stream";
 import { parseArgs } from "node:util";
 
@@ -111704,7 +111754,7 @@ init_registry();
 // package.json
 var package_default = {
   name: "@band-app/server",
-  version: "0.54.0",
+  version: "0.54.2",
   type: "module",
   types: "src/index.ts",
   exports: {
@@ -111744,6 +111794,7 @@ var package_default = {
     "@agentclientprotocol/claude-agent-acp": "0.81.2",
     "@agentclientprotocol/codex-acp": "1.13.1",
     "@agentclientprotocol/sdk": "1.5.0",
+    "@anthropic-ai/sdk": "1.1.0",
     "@vscode/ripgrep": "^1.18.0",
     "node-pty": "^1.1.0",
     prettier: "^3.8.3",
@@ -111819,6 +111870,7 @@ function describeHostVersion(host, hubVersion, latest) {
       serviceManager: null,
       updateTarget: null,
       canUpdate: false,
+      updateBlockedReason: null,
       manualCommand: null
     };
   }
@@ -111837,6 +111889,7 @@ function describeHostVersion(host, hubVersion, latest) {
     serviceManager,
     updateTarget,
     canUpdate: host.status === "online" && serviceManager !== null && updateTarget !== null,
+    updateBlockedReason: typeof host.info?.updateBlocked === "string" ? host.info.updateBlocked : null,
     manualCommand: updateTarget ? workerUpdateCommand(updateTarget) : null
   };
 }
@@ -112721,84 +112774,6 @@ init_git_credential_service();
 init_placement_service();
 init_token_service();
 init_watcher_service();
-
-// src/server/services/worker-cli-service.ts
-init_cli_binary();
-init_src7();
-init_src();
-import { createHash as createHash12 } from "node:crypto";
-import { readFile as readFile12 } from "node:fs/promises";
-import { join as join52 } from "node:path";
-var log65 = createLogger("worker-cli");
-var RPC_INVALID_PARAMS2 = -32602;
-var PLATFORM_NAME = /^[a-z0-9_]{1,16}$/;
-function candidatesFor(platform3, arch) {
-  const out = [];
-  const dir = process.env.BAND_CLI_BINARIES_DIR;
-  if (dir) out.push(join52(dir, `band-${platform3}-${arch}${platform3 === "win32" ? ".exe" : ""}`));
-  if (platform3 === process.platform && arch === process.arch) {
-    const own2 = findCliBinary();
-    if (own2) out.push(own2);
-  }
-  return out;
-}
-async function readFirst(paths) {
-  for (const path2 of paths) {
-    const data = await readFile12(path2).catch(() => null);
-    if (data) return data;
-  }
-  return null;
-}
-var WorkerCliService = class {
-  /** Answers `cli.fetch` on a worker's session. */
-  attach(session) {
-    session.handle(METHOD_CLI_FETCH, (params) => this.handle(session, params));
-  }
-  async handle(session, params) {
-    const { platform: platform3, arch, have } = parseParams3(params);
-    const data = await readFirst(candidatesFor(platform3, arch));
-    if (!data) {
-      return {
-        available: false,
-        reason: `the hub has no band CLI for ${platform3}-${arch}`
-      };
-    }
-    const sha2563 = createHash12("sha256").update(data).digest("hex");
-    if (have === sha2563) return { available: true, sha256: sha2563, size: data.length };
-    log65.info(
-      `sending the band CLI (${platform3}-${arch}, ${data.length} bytes) to ${session.workerId}`
-    );
-    const ch = session.openChannel("cli.body", { platform: platform3, arch });
-    void (async () => {
-      try {
-        await ch.send(data);
-        ch.end();
-        const drained = setTimeout(() => ch.reset("the worker did not close the channel"), 3e4);
-        drained.unref?.();
-        await ch.readAll().finally(() => clearTimeout(drained));
-      } catch (err) {
-        ch.reset(err instanceof Error ? err.message : "cli transfer failed");
-      }
-    })();
-    return { available: true, sha256: sha2563, size: data.length, chan: ch.id };
-  }
-};
-function parseParams3(params) {
-  const p2 = params ?? {};
-  if (typeof p2.platform !== "string" || !PLATFORM_NAME.test(p2.platform)) {
-    throw new RpcError(RPC_INVALID_PARAMS2, "platform must be a short lowercase name");
-  }
-  if (typeof p2.arch !== "string" || !PLATFORM_NAME.test(p2.arch)) {
-    throw new RpcError(RPC_INVALID_PARAMS2, "arch must be a short lowercase name");
-  }
-  if (p2.have !== void 0 && typeof p2.have !== "string") {
-    throw new RpcError(RPC_INVALID_PARAMS2, "have must be a string");
-  }
-  return { platform: p2.platform, arch: p2.arch, have: p2.have };
-}
-var workerCliService = new WorkerCliService();
-
-// src/server/services/worker-link-service.ts
 init_worker_lease_service();
 
 // src/server/services/worker-relay-service.ts
@@ -112858,7 +112833,7 @@ function repoHostRefusal(repo, callerHostId) {
 init_state();
 init_subscription_service();
 init_terminal_service();
-var log66 = createLogger("worker-relay");
+var log65 = createLogger("worker-relay");
 var REPLY_HEADERS = ["content-type", "cache-control", "mcp-session-id"];
 var FORWARDED_HEADERS = [
   "content-type",
@@ -112867,7 +112842,7 @@ var FORWARDED_HEADERS = [
   "mcp-session-id",
   "last-event-id"
 ];
-var RPC_INVALID_PARAMS3 = -32602;
+var RPC_INVALID_PARAMS2 = -32602;
 var defaultLookups = {
   hostOfWorktree: (id) => hostRegistry.hostIdOfScope(id),
   worktreeOfChat: (id) => {
@@ -112899,7 +112874,7 @@ var WorkerRelayService = class {
     let request = parseRequest(params);
     const verdict = checkRelayRequest(request, session.workerId, this.lookups);
     if (!verdict.ok) {
-      log66.warn(
+      log65.warn(
         `refused ${request.method} ${request.path.split("?")[0]} from ${session.workerId}: ${verdict.reason}`
       );
       return this.answer(session, verdict.status, refusalBody(request, verdict));
@@ -112912,7 +112887,7 @@ var WorkerRelayService = class {
         chatId: request.scope.chatId,
         ...entry
       });
-      log66.info(
+      log65.info(
         `admin host ${session.workerId} called ${entry.procedure}${entry.targetHostId ? ` on ${entry.targetHostId}` : ""}`
       );
     }
@@ -112945,7 +112920,7 @@ var WorkerRelayService = class {
         redirect: "manual"
       });
     } catch (err) {
-      log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+      log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
       return this.answer(session, 502, { error: "The hub could not answer" });
     }
     const replyHeaders = {};
@@ -112962,7 +112937,7 @@ var WorkerRelayService = class {
       try {
         return this.answer(session, upstream.status, redactSettingsReply(await upstream.json()));
       } catch (err) {
-        log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+        log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
         return this.answer(session, 502, { error: "The hub could not answer" });
       }
     }
@@ -112971,7 +112946,7 @@ var WorkerRelayService = class {
         const filtered = filterReposReply(await upstream.json(), session.workerId);
         return this.answer(session, upstream.status, filtered);
       } catch (err) {
-        log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+        log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
         return this.answer(session, 502, { error: "The hub could not answer" });
       }
     }
@@ -112979,7 +112954,7 @@ var WorkerRelayService = class {
       try {
         return this.answer(session, upstream.status, redactHostsReply(await upstream.json()));
       } catch (err) {
-        log66.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
+        log65.warn(`relay call failed: ${err instanceof Error ? err.message : err}`);
         return this.answer(session, 502, { error: "The hub could not answer" });
       }
     }
@@ -113010,6 +112985,7 @@ var WorkerRelayService = class {
   /** A short JSON answer, sent the same way as any other. */
   answer(session, status, body) {
     const ch = session.openChannel("relay.body");
+    ch.discardIncoming();
     ch.send(Buffer.from(JSON.stringify(body))).then(() => ch.end()).catch(() => void 0);
     return { status, headers: { "content-type": "application/json" }, chan: ch.id };
   }
@@ -113024,7 +113000,7 @@ function parseRequest(params) {
   const p2 = params;
   const scope3 = p2?.scope;
   if (!p2 || typeof p2.method !== "string" || typeof p2.path !== "string" || typeof scope3?.worktreeId !== "string" || scope3.chatId !== void 0 && typeof scope3.chatId !== "string" || scope3.terminalId !== void 0 && typeof scope3.terminalId !== "string" || !/^\/(?![/\\])/.test(p2.path) || !["GET", "POST", "DELETE", "OPTIONS", "HEAD"].includes(p2.method) || typeof p2.headers !== "object" || p2.headers === null || Object.values(p2.headers).some((v2) => typeof v2 !== "string") || p2.body !== void 0 && typeof p2.body !== "string") {
-    throw new RpcError(RPC_INVALID_PARAMS3, "bad relay.http params");
+    throw new RpcError(RPC_INVALID_PARAMS2, "bad relay.http params");
   }
   return p2;
 }
@@ -113032,7 +113008,7 @@ var workerRelayService = new WorkerRelayService();
 
 // src/server/services/worker-link-service.ts
 init_worktree_service();
-var log67 = createLogger("worker-link");
+var log66 = createLogger("worker-link");
 var repoQueries5 = new RepoQueries();
 var LOCAL_HOST_ID12 = "local";
 var CAPABILITY_REFRESH_MS = 3 * 6e4;
@@ -113063,7 +113039,7 @@ var WorkerLinkService = class {
     this.server.on("disconnected", (session) => {
       const close = session.lastClose;
       if (close) {
-        log67.info(
+        log66.info(
           `link of ${session.workerId} closed (code ${close.code}${close.reason ? `, ${close.reason}` : ""})`
         );
       }
@@ -113071,7 +113047,7 @@ var WorkerLinkService = class {
     });
     this.server.on(
       "fault",
-      (session, reason) => log67.warn(`link of ${session.workerId}: ${reason}`)
+      (session, reason) => log66.warn(`link of ${session.workerId}: ${reason}`)
     );
     this.server.on(
       "lost",
@@ -113096,12 +113072,12 @@ var WorkerLinkService = class {
     const problem2 = compatibilityProblem(version3, HUB_VERSION);
     if (!problem2) return auth2;
     if (HUB_VERSION_UNRELEASED) {
-      log67.info(
+      log66.info(
         `worker ${hello.workerId} runs ${version3}, which would be refused by a released hub, but this hub runs from source (${HUB_VERSION}), so version checks are skipped`
       );
       return auth2;
     }
-    log67.warn(`worker ${hello.workerId} refused: ${problem2}`);
+    log66.warn(`worker ${hello.workerId} refused: ${problem2}`);
     if (this.server.getSession(hello.workerId)?.attached) {
       return { ok: false, reason: problem2, code: VERSION_REFUSED_CODE };
     }
@@ -113112,7 +113088,7 @@ var WorkerLinkService = class {
     try {
       this.queries.setHostRefusal(hello.workerId, { version: version3, reason: problem2 });
     } catch (err) {
-      log67.warn(`could not record the refusal: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`could not record the refusal: ${err instanceof Error ? err.message : err}`);
     }
     this.publish(hello.workerId, "offline");
     return { ok: false, reason: problem2, code: VERSION_REFUSED_CODE };
@@ -113135,7 +113111,7 @@ var WorkerLinkService = class {
     this.refreshTimer.unref();
     this.unsubscribeRevoke = this.tokens.onRevoked((row) => {
       if (row.kind === "worker_session" && row.hostId) {
-        if (this.server.drop(row.hostId, "token revoked")) log67.info(`cut link of ${row.hostId}`);
+        if (this.server.drop(row.hostId, "token revoked")) log66.info(`cut link of ${row.hostId}`);
       }
     });
   }
@@ -113165,7 +113141,7 @@ var WorkerLinkService = class {
       this.queries.setHostInfo(row.id, stored);
       if (changed) this.publish(row.id, "online");
     } catch (err) {
-      log67.debug(
+      log66.debug(
         `could not refresh the report of ${row.id}: ${err instanceof Error ? err.message : err}`
       );
     }
@@ -113195,7 +113171,6 @@ var WorkerLinkService = class {
   onSession(session) {
     this.remoteHost(session.workerId).attachSession(session);
     workerRelayService.attach(session);
-    workerCliService.attach(session);
     gitCredentialService.attach(session);
     ephemeralLifecycleService.attach(session);
     checkpointService.attach(session);
@@ -113209,7 +113184,7 @@ var WorkerLinkService = class {
     try {
       info = await this.remoteHost(workerId).info();
     } catch (err) {
-      log67.warn(
+      log66.warn(
         `could not read host info from ${workerId}: ${err instanceof Error ? err.message : err}`
       );
     }
@@ -113224,42 +113199,43 @@ var WorkerLinkService = class {
       agents: hello.agents,
       tools: info?.tools ?? hello.tools ?? {},
       mode: hello.mode,
-      ...hello.serviceManager ? { serviceManager: hello.serviceManager } : {}
+      ...hello.serviceManager ? { serviceManager: hello.serviceManager } : {},
+      ...hello.updateBlocked ? { updateBlocked: hello.updateBlocked } : {}
     };
     const version3 = workerVersionOf(hello);
     this.queries.markHostOnline(workerId, at, { info: stored, version: version3 ?? hello.buildId });
     workerUpdateService.onConnected(workerId, version3);
-    log67.info(`worker ${workerId} is online`);
+    log66.info(`worker ${workerId} is online`);
     workerLeaseService.onConnected(session);
     try {
       seedCodingAgentsFromTypes(hello.agents);
     } catch (err) {
-      log67.warn(`could not seed coding agents: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`could not seed coding agents: ${err instanceof Error ? err.message : err}`);
     }
     this.publish(workerId, "online");
     void repoService.backfillRemotesFromWorker(workerId).catch((err) => {
-      log67.warn(`remote backfill on ${workerId}: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`remote backfill on ${workerId}: ${err instanceof Error ? err.message : err}`);
     });
     chatOwnershipService.onConnected(session);
     void ephemeralLifecycleService.onConnected(session);
     void followService.onHostReturned(workerId).catch((err) => {
-      log67.warn(`follow check on ${workerId}: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`follow check on ${workerId}: ${err instanceof Error ? err.message : err}`);
     });
     placementService.onHostOnline(workerId);
     void worktreeService.finishPendingRemovals(workerId).catch((err) => {
-      log67.warn(`pending removals on ${workerId}: ${err instanceof Error ? err.message : err}`);
+      log66.warn(`pending removals on ${workerId}: ${err instanceof Error ? err.message : err}`);
     });
   }
   setStatus(workerId, status, lastSeenAt) {
     try {
       this.queries.setHostStatus(workerId, status, lastSeenAt);
     } catch (err) {
-      log67.warn(
+      log66.warn(
         `could not record ${workerId} as ${status}: ${err instanceof Error ? err.message : err}`
       );
       return;
     }
-    log67.info(`worker ${workerId} is ${status}`);
+    log66.info(`worker ${workerId} is ${status}`);
     this.publish(workerId, status);
   }
   publish(hostId2, hostStatus) {
@@ -113304,7 +113280,7 @@ var WorkerLinkService = class {
       send3(200, out);
     } catch (err) {
       if (!(err instanceof TokenExchangeError)) throw err;
-      log67.warn(`bootstrap exchange refused: ${err.reason}`);
+      log66.warn(`bootstrap exchange refused: ${err.reason}`);
       send3(401, { error: "invalid or expired token" });
     }
   }
@@ -113321,7 +113297,7 @@ function reportKey(report2) {
 
 // src/server/services/worker-update-service.ts
 init_worktree_service();
-var log68 = createLogger("worker-update");
+var log67 = createLogger("worker-update");
 var INSTALL_TIMEOUT_MS = 11 * 6e4;
 var RESTART_TIMEOUT_MS = 3 * 6e4;
 var WorkerUpdateError = class extends Error {
@@ -113367,7 +113343,7 @@ var WorkerUpdateService = class {
       throw new WorkerUpdateError("not-updatable", "The worker is not connected");
     const target = view4.updateTarget;
     this.set(hostId2, { target, state: "installing", error: null }, row.status);
-    log68.info(`updating worker ${hostId2} to ${target}`);
+    log67.info(`updating worker ${hostId2} to ${target}`);
     void this.run(hostId2, target, session, row.status);
     return { target };
   }
@@ -113381,7 +113357,7 @@ var WorkerUpdateService = class {
     } catch (err) {
       const message = this.describe(err, target);
       this.set(hostId2, { target, state: "failed", error: message }, hostStatus);
-      log68.warn(`update of worker ${hostId2} failed: ${message}`);
+      log67.warn(`update of worker ${hostId2} failed: ${message}`);
       return;
     }
     if (this.updates.get(hostId2)?.state !== "installing") return;
@@ -113418,7 +113394,7 @@ var WorkerUpdateService = class {
     this.timers.delete(hostId2);
     if (version3 === current3.target) {
       this.updates.delete(hostId2);
-      log68.info(`worker ${hostId2} now runs ${version3}`);
+      log67.info(`worker ${hostId2} now runs ${version3}`);
     } else {
       this.set(
         hostId2,
@@ -116243,9 +116219,9 @@ init_zod();
 // src/server/services/provisioning-service.ts
 init_src();
 init_dist();
-import { createHash as createHash13, randomBytes as randomBytes16, randomUUID as randomUUID18 } from "node:crypto";
+import { createHash as createHash12, randomBytes as randomBytes16, randomUUID as randomUUID18 } from "node:crypto";
 import { createReadStream as createReadStream4, existsSync as existsSync17, mkdirSync as mkdirSync10, rmSync as rmSync7, statSync as statSync14 } from "node:fs";
-import { join as join53 } from "node:path";
+import { join as join52 } from "node:path";
 
 // src/server/infra/db/queries/provisions.ts
 init_drizzle_orm2();
@@ -116272,11 +116248,11 @@ var ProvisionQueries = class {
     const result = this.db().update(hostProvisions).set({ spentAt: at, hostId: hostId2, runHash, state: "running", updatedAt: at }).where(and2(eq2(hostProvisions.id, id), isNull2(hostProvisions.spentAt))).run();
     return Number(result.changes ?? 0) > 0;
   }
-  setLog(id, log91, at) {
-    this.db().update(hostProvisions).set({ log: log91, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
+  setLog(id, log90, at) {
+    this.db().update(hostProvisions).set({ log: log90, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
   }
-  finish(id, state2, exitCode, log91, at) {
-    this.db().update(hostProvisions).set({ state: state2, exitCode, log: log91, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
+  finish(id, state2, exitCode, log90, at) {
+    this.db().update(hostProvisions).set({ state: state2, exitCode, log: log90, updatedAt: at }).where(eq2(hostProvisions.id, id)).run();
   }
   /** Ids of rows created before `at`, so their bundle files can be deleted. */
   idsCreatedBefore(at) {
@@ -116528,7 +116504,7 @@ function renderProvisionScript(opts) {
 init_settings_service();
 init_token_service();
 init_vault_service();
-var log69 = createLogger("provisioning");
+var log68 = createLogger("provisioning");
 var DEFAULT_PROVISION_TTL_MS = 60 * 60 * 1e3;
 var DEFAULT_START_COMMAND = "band/provision.sh";
 var MAX_LOG_BYTES2 = 256 * 1024;
@@ -116560,7 +116536,7 @@ var ProvisionAuthError = class extends Error {
   }
 };
 function sha2562(text4) {
-  return createHash13("sha256").update(text4).digest("hex");
+  return createHash12("sha256").update(text4).digest("hex");
 }
 function newSecret(prefix) {
   return `${prefix}${randomBytes16(32).toString("base64url")}`;
@@ -116603,7 +116579,7 @@ var ProvisioningService = class {
     return Date.now();
   }
   dir(id) {
-    return join53(bandHome(), "provisioning", id);
+    return join52(bandHome(), "provisioning", id);
   }
   settings() {
     const s2 = settingsService.get().provisioning ?? {};
@@ -116658,7 +116634,7 @@ var ProvisioningService = class {
       spentAt: null,
       updatedAt: at
     });
-    log69.info(
+    log68.info(
       `created provisioning command ${id}${commitSha ? ` at ${commitSha.slice(0, 12)}` : ""}`
     );
     const command2 = `curl -fsSL ${hubUrl}/api/provision/${code}/script | sh`;
@@ -116698,7 +116674,7 @@ var ProvisioningService = class {
       tokenService.removeHost(boot.hostId);
       throw new ProvisionExchangeError("used");
     }
-    log69.info(`exchanged provisioning code ${row.id} for host ${boot.hostId}`);
+    log68.info(`exchanged provisioning code ${row.id} for host ${boot.hostId}`);
     const lines = [
       `token=${boot.token}`,
       `workerId=${boot.hostId}`,
@@ -116723,7 +116699,7 @@ var ProvisioningService = class {
   /** The bundle file and size for a code, once its run token is shown. */
   bundle(code, runToken) {
     const row = this.authorize(code, runToken);
-    const file3 = join53(this.dir(row.id), "bundle.tgz");
+    const file3 = join52(this.dir(row.id), "bundle.tgz");
     if (!row.repoUrl || !existsSync17(file3)) throw new ProvisionAuthError();
     return { stream: createReadStream4(file3), size: statSync14(file3).size };
   }
@@ -116740,7 +116716,7 @@ var ProvisioningService = class {
       return;
     }
     this.queries.finish(row.id, exit === 0 ? "done" : "failed", exit, next, at);
-    if (exit !== 0) log69.info(`provisioning ${row.id} failed with exit code ${exit}`);
+    if (exit !== 0) log68.info(`provisioning ${row.id} failed with exit code ${exit}`);
   }
   status(id) {
     const row = this.queries.findById(id);
@@ -116765,7 +116741,7 @@ band provision: the worker did not say hello within ${minutes} min. Marked faile
 `;
     const exitCode = row.exitCode ?? TIMEOUT_EXIT_CODE;
     this.queries.finish(row.id, "failed", exitCode, row.log + note, at);
-    log69.info(`provisioning ${row.id} timed out waiting for host ${row.hostId}`);
+    log68.info(`provisioning ${row.id} timed out waiting for host ${row.hostId}`);
     return { ...row, state: "failed", exitCode, log: row.log + note };
   }
   view(spent) {
@@ -116802,7 +116778,7 @@ band provision: the worker did not say hello within ${minutes} min. Marked faile
   async buildBundle(id, settings3) {
     const dir = this.dir(id);
     mkdirSync10(dir, { recursive: true });
-    const src = join53(dir, "src");
+    const src = join52(dir, "src");
     const host = hostRegistry.local;
     const env = { GIT_TERMINAL_PROMPT: "0" };
     const key2 = parseRemoteUrl2(settings3.repoUrl);
@@ -116824,10 +116800,10 @@ band provision: the worker did not say hello within ${minutes} min. Marked faile
       await host.exec("git", args, { env, timeoutMs: 12e4 });
       const sha = (await host.exec("git", ["-C", src, "rev-parse", "HEAD"], { env })).stdout.trim();
       const command2 = settings3.command || DEFAULT_START_COMMAND;
-      if (!existsSync17(join53(src, command2))) {
+      if (!existsSync17(join52(src, command2))) {
         throw new Error(`the repo at ${sha.slice(0, 12)} has no ${command2}`);
       }
-      await host.exec("tar", ["-czf", join53(dir, "bundle.tgz"), "--exclude=.git", "-C", src, "."], {
+      await host.exec("tar", ["-czf", join52(dir, "bundle.tgz"), "--exclude=.git", "-C", src, "."], {
         timeoutMs: 12e4
       });
       rmSync7(src, { recursive: true, force: true });
@@ -116920,12 +116896,12 @@ init_zod();
 init_registry();
 init_queued_message_store();
 import { realpathSync as realpathSync6 } from "node:fs";
-import { join as join54, resolve as resolve11, sep as sep7 } from "node:path";
+import { join as join53, resolve as resolve11, sep as sep7 } from "node:path";
 init_chat_ownership_service();
 init_chat_service();
 init_state();
 init_task_service();
-var log70 = createLogger("trpc.queue");
+var log69 = createLogger("trpc.queue");
 var queuedFileSchema = external_exports2.object({
   mediaType: external_exports2.string(),
   url: external_exports2.string(),
@@ -116933,7 +116909,7 @@ var queuedFileSchema = external_exports2.object({
   filename: external_exports2.string().optional()
 });
 function isPathWithinUploadDir(p2) {
-  const uploadDir = join54(bandHome(), "uploads");
+  const uploadDir = join53(bandHome(), "uploads");
   const normalized2 = resolve11(p2);
   if (normalized2 !== uploadDir && !normalized2.startsWith(uploadDir + sep7)) {
     return false;
@@ -116958,7 +116934,7 @@ async function resolveQueuedFiles(chatId, worktreeId4, files) {
     if (derivedPath) {
       const inside = remote ? await isWithinUploads(worktreeId4, derivedPath) : isPathWithinUploadDir(derivedPath);
       if (!inside) {
-        log70.warn(
+        log69.warn(
           { chatId, path: derivedPath, filename: file3.filename },
           "queue: dropping file with path outside uploads directory"
         );
@@ -116983,7 +116959,7 @@ async function resolveQueuedFiles(chatId, worktreeId4, files) {
       });
       continue;
     }
-    log70.warn(
+    log69.warn(
       { chatId, url: file3.url, filename: file3.filename },
       "queue: dropping file with no path and non-data URL \u2014 cannot recover disk path"
     );
@@ -116991,7 +116967,7 @@ async function resolveQueuedFiles(chatId, worktreeId4, files) {
   if (needsSave.length > 0) {
     const saved = await saveWorktreeUploads(worktreeId4, needsSave);
     if (saved.length !== needsSave.length) {
-      log70.error(
+      log69.error(
         { chatId, expected: needsSave.length, got: saved.length },
         "queue: saveUploadedFilesDetailed returned unexpected count \u2014 dropping data-URL files (cannot map 1:1)"
       );
@@ -117024,7 +117000,7 @@ var queueRouter = t.router({
     try {
       files = await resolveQueuedFiles(chatId, input2.worktreeId, input2.files);
     } catch (err) {
-      log70.error(
+      log69.error(
         { chatId, err: err instanceof Error ? err.message : err },
         "queue.push: failed to persist file uploads; enqueuing text only"
       );
@@ -117074,7 +117050,7 @@ var queueRouter = t.router({
             files: await resolveQueuedFiles(chatId, input2.worktreeId, m2.files)
           };
         } catch (err) {
-          log70.error(
+          log69.error(
             { chatId, messageId: m2.id, err: err instanceof Error ? err.message : err },
             "queue: failed to resolve files for queued message; dropping its files"
           );
@@ -117231,7 +117207,7 @@ function aggregateTurnsByHourAndModel(snap, provider) {
   }
   return Array.from(buckets.values());
 }
-var log71 = createLogger("usage-scanner");
+var log70 = createLogger("usage-scanner");
 var SCHEDULER_KEY2 = Symbol.for("band.usage-scanner");
 var g7 = globalThis;
 if (!g7[SCHEDULER_KEY2]) {
@@ -117293,14 +117269,14 @@ var UsageScannerService = class {
         try {
           totalRows += await this.scanPair(ws, a);
         } catch (err) {
-          log71.warn(
+          log70.warn(
             { err, worktreeId: ws.worktreeId, agentType: a.agentType },
             "usage scanner pair failed"
           );
         }
       }
     }
-    log71.debug(
+    log70.debug(
       { durationMs: this.now() - started, worktrees: worktrees2.length, rowsWritten: totalRows },
       "usage scanner tick complete"
     );
@@ -117345,7 +117321,7 @@ var UsageScannerService = class {
     try {
       reader = await this.getUsageReader(a, ws.hostId);
     } catch (err) {
-      log71.debug({ err, agentId: a.agentId }, "failed to resolve usage reader for scan");
+      log70.debug({ err, agentId: a.agentId }, "failed to resolve usage reader for scan");
       return 0;
     }
     if (!reader) return 0;
@@ -117354,7 +117330,7 @@ var UsageScannerService = class {
     try {
       sessions = await reader.listSessions(ws.worktreePath);
     } catch (err) {
-      log71.debug(
+      log70.debug(
         { err, agentId: a.agentId, worktreePath: ws.worktreePath },
         "listSessions failed during usage scan"
       );
@@ -117370,7 +117346,7 @@ var UsageScannerService = class {
       try {
         snap = await reader.getSessionUsage(s2.sessionId, ws.worktreePath);
       } catch (err) {
-        log71.debug(
+        log70.debug(
           { err, sessionId: s2.sessionId, agentType: a.agentType },
           "getSessionUsage failed"
         );
@@ -117409,7 +117385,7 @@ var UsageScannerService = class {
       this.scanState.set(ws.worktreeId, a.agentType, maxObserved);
     }
     if (changed.length > slice.length) {
-      log71.debug(
+      log70.debug(
         {
           worktreeId: ws.worktreeId,
           agentType: a.agentType,
@@ -117476,11 +117452,11 @@ function startUsageScanner(options = {}) {
   const intervalMs = options.intervalMs ?? USAGE_SCAN_INTERVAL_MS;
   const svc = getUsageScannerService();
   svc.tick().catch((err) => {
-    log71.warn({ err }, "initial usage scanner tick failed");
+    log70.warn({ err }, "initial usage scanner tick failed");
   });
   const timer = setInterval(() => {
     svc.tick().catch((err) => {
-      log71.warn({ err }, "scheduled usage scanner tick failed");
+      log70.warn({ err }, "scheduled usage scanner tick failed");
     });
   }, intervalMs);
   timer.unref();
@@ -117851,7 +117827,7 @@ function worktreeGh(host, localHostId, cwd) {
 init_branch_status_poller();
 init_plugin_host_service();
 init_worktree_service();
-var log72 = createLogger("review-service");
+var log71 = createLogger("review-service");
 var NoOpenReviewError = class extends Error {
   constructor(worktreeId4) {
     super(`No open review to merge for worktree ${worktreeId4}`);
@@ -117892,7 +117868,7 @@ var ReviewService = class {
       };
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
-      log72.warn("Review lookup failed for %s (%s): %s", worktreeId4, provider.id, message);
+      log71.warn("Review lookup failed for %s (%s): %s", worktreeId4, provider.id, message);
       return { status: "error", message };
     }
   }
@@ -118057,7 +118033,7 @@ init_ephemeral_lifecycle_service();
 init_runner_service();
 init_state();
 init_token_service();
-var log73 = createLogger("reaper");
+var log72 = createLogger("reaper");
 var DEFAULT_INTERVAL_MS = 3e4;
 var DEFAULT_HELLO_GRACE_MS = 6e4;
 var DEFAULT_OFFLINE_MS = 12e4;
@@ -118154,12 +118130,12 @@ var RunnerReaperService = class {
         try {
           await this.reap(machine, Date.now());
         } catch (err) {
-          log73.warn(`could not check machine ${machine.id}: ${errorText5(err)}`);
+          log72.warn(`could not check machine ${machine.id}: ${errorText5(err)}`);
         }
       }
       await this.reapOrphans();
     } catch (err) {
-      log73.warn(`sweep failed: ${errorText5(err)}`);
+      log72.warn(`sweep failed: ${errorText5(err)}`);
     } finally {
       this.ticking = false;
     }
@@ -118221,7 +118197,7 @@ var RunnerReaperService = class {
     const deadline = machine.spawnedAt + lifetimeMs + runner.lifetimeGraceSec * 1e3;
     if (machine.state === "running") {
       this.machines.update(machine.id, { state: "stopping", stoppingSince: now });
-      log73.info(`machine ${machine.id} reached its maximum lifetime of ${runner.maxLifetimeSec}s`);
+      log72.info(`machine ${machine.id} reached its maximum lifetime of ${runner.maxLifetimeSec}s`);
     }
     const reason = `maximum lifetime of ${runner.maxLifetimeSec}s reached`;
     if (!online) {
@@ -118267,7 +118243,7 @@ var RunnerReaperService = class {
       return;
     }
     const lost = this.unstored(machine.workerId);
-    log73.error(
+    log72.error(
       `HARD DEADLINE: destroying machine ${machine.id} (${reason}) although worktree(s) ${lost.join(", ") || "of its worker"} were not stored`
     );
     await this.destroyNow(
@@ -118294,11 +118270,11 @@ var RunnerReaperService = class {
     const key2 = `${machine.id}:${text4}`;
     if (!this.warned.has(key2)) {
       this.warned.add(key2);
-      log73.info(`machine ${machine.id}: ${text4}`);
+      log72.info(`machine ${machine.id}: ${text4}`);
     }
   }
   async destroyNow(machine, reason, opts = {}) {
-    log73.info(`destroying machine ${machine.id} of runner ${machine.runnerId}: ${reason}`);
+    log72.info(`destroying machine ${machine.id} of runner ${machine.runnerId}: ${reason}`);
     const task = this.runners.destroyMachine(machine.id, reason);
     this.pending.add(task);
     try {
@@ -118314,7 +118290,7 @@ var RunnerReaperService = class {
       tokenService.removeHost(hostId2);
       hostRegistry.unregister(hostId2);
     } catch (err) {
-      log73.warn(`could not remove host ${hostId2}: ${errorText5(err)}`);
+      log72.warn(`could not remove host ${hostId2}: ${errorText5(err)}`);
     }
   }
   // ---- orphans ---------------------------------------------------------------
@@ -118333,7 +118309,7 @@ var RunnerReaperService = class {
       try {
         handles = await this.runners.listHandles(runner);
       } catch (err) {
-        log73.warn(`status of runner ${runner.id} failed: ${errorText5(err)}`);
+        log72.warn(`status of runner ${runner.id} failed: ${errorText5(err)}`);
         continue;
       }
       if (this.runners.hasAttemptInFlight(runner.id)) continue;
@@ -118345,10 +118321,10 @@ var RunnerReaperService = class {
         if (nowKnown.has(handle)) continue;
         const ok2 = await this.runners.destroyHandle(runner, handle, "no record of this machine");
         if (ok2) {
-          log73.info(`destroyed orphan ${handle} of runner ${runner.id}`);
+          log72.info(`destroyed orphan ${handle} of runner ${runner.id}`);
           this.machines.settleHandle(runner.id, handle, "destroyed by the reaper as an orphan");
         } else {
-          log73.warn(`could not destroy orphan ${handle} of runner ${runner.id}`);
+          log72.warn(`could not destroy orphan ${handle} of runner ${runner.id}`);
         }
       }
     }
@@ -118414,7 +118390,7 @@ init_errors6();
 init_agent_session_service();
 init_chat_service();
 init_worktree_service();
-var log74 = createLogger("session-service");
+var log73 = createLogger("session-service");
 var SessionService = class {
   /** Lists past sessions for a worktree's chat pane (default chat when
    *  `chatId` is undefined). */
@@ -118427,7 +118403,7 @@ var SessionService = class {
     if (!chatService.get(chatId)) {
       chatService.create(input2.worktreeId, { id: chatId, name: "Chat" });
     }
-    log74.debug({ chatId, worktreeId: input2.worktreeId }, "listing past sessions for chat");
+    log73.debug({ chatId, worktreeId: input2.worktreeId }, "listing past sessions for chat");
     return agentSessionService.listSessions(chatId);
   }
 };
@@ -118754,7 +118730,7 @@ init_branch_status_poller();
 init_client_activity_service();
 init_state();
 init_tunnel_service();
-var log75 = createLogger("trpc.system");
+var log74 = createLogger("trpc.system");
 var systemRouter = t.router({
   /**
    * Combined liveness probe — webserver is always true if this query
@@ -118762,16 +118738,16 @@ var systemRouter = t.router({
    * an interval to drive the bottom-bar status pill.
    */
   health: publicProcedure.query(() => {
-    log75.debug("services.health called");
+    log74.debug("services.health called");
     const tunnel = tunnelService.getStatus();
-    log75.debug({ tunnel }, "services.health: tunnel status");
+    log74.debug({ tunnel }, "services.health: tunnel status");
     const result = {
       webserver: true,
       version: package_default.version,
       tunnel: tunnel.running,
       tunnel_url: tunnel.url
     };
-    log75.debug({ result }, "services.health result");
+    log74.debug({ result }, "services.health result");
     return result;
   }),
   // What this client's UI is doing, so the branch-status poller can slow down. A client names
@@ -118910,7 +118886,7 @@ init_errors6();
 init_chat_service();
 init_state();
 init_task_service();
-var log76 = createLogger("tasks-router");
+var log75 = createLogger("tasks-router");
 var tasksRouter = t.router({
   list: publicProcedure.input(
     external_exports2.object({
@@ -118972,7 +118948,7 @@ var tasksRouter = t.router({
     if (input2.files && input2.files.length > 0) {
       const savedFiles = await saveWorktreeUploads(input2.worktreeId, input2.files);
       if (savedFiles.length !== input2.files.length) {
-        log76.warn(
+        log75.warn(
           { chatId, submitted: input2.files.length, saved: savedFiles.length },
           "tasks.submit: some file uploads were dropped (malformed data URL?)"
         );
@@ -119398,25 +119374,25 @@ var tokensRouter = t.router({
 init_src();
 init_zod();
 init_tunnel_service();
-var log77 = createLogger("trpc.tunnel");
+var log76 = createLogger("trpc.tunnel");
 var tunnelRouter = t.router({
   status: publicProcedure.query(() => {
     return tunnelService.getStatus();
   }),
   start: publicProcedure.input(external_exports2.object({}).optional()).mutation(async () => {
-    log77.debug("tunnel.start called");
+    log76.debug("tunnel.start called");
     try {
       await tunnelService.start();
     } catch (err) {
-      log77.debug({ err }, "tunnel.start: startTunnel failed");
+      log76.debug({ err }, "tunnel.start: startTunnel failed");
       return { ok: true, url: null };
     }
     const status = tunnelService.getStatus();
-    log77.debug({ status }, "tunnel.start: after startTunnel");
+    log76.debug({ status }, "tunnel.start: after startTunnel");
     if (status.url) {
       return { ok: true, url: status.url };
     }
-    log77.debug("tunnel.start: no URL available");
+    log76.debug("tunnel.start: no URL available");
     return { ok: true, url: null };
   }),
   stop: publicProcedure.mutation(async () => {
@@ -119806,8 +119782,8 @@ function verifyWorktreePreviewGrant(worktreeId4, grant, filePath, now = Date.now
 init_src2();
 init_src();
 init_resolver();
-import { join as join55, resolve as resolve12, sep as sep8 } from "node:path";
-var log78 = createLogger("diff-service");
+import { join as join54, resolve as resolve12, sep as sep8 } from "node:path";
+var log77 = createLogger("diff-service");
 var EMPTY_TREE_ARGS = ["hash-object", "-t", "tree", "/dev/null"];
 var DEFAULT_BRANCH_LIMIT = 50;
 var STAGING_BRANCH_PRIORITY = [
@@ -119903,7 +119879,7 @@ function parseFileStatuses(nameStatusOutput) {
   return fileStatuses;
 }
 function assertWorktreeRelative(cwd, filePath) {
-  const target = resolve12(join55(cwd, filePath));
+  const target = resolve12(join54(cwd, filePath));
   if (target !== cwd && !target.startsWith(cwd + sep8)) {
     throw new Error("Invalid path");
   }
@@ -119918,7 +119894,7 @@ function assertWorktreeRelative(cwd, filePath) {
 }
 async function readUntrackedFileLines(host, cwd, file3) {
   try {
-    const content = new TextDecoder().decode(await host.fs.readFile(join55(cwd, file3)));
+    const content = new TextDecoder().decode(await host.fs.readFile(join54(cwd, file3)));
     const lines = content.split("\n");
     if (lines.length > 0 && lines[lines.length - 1] === "") {
       lines.pop();
@@ -120154,7 +120130,7 @@ var DiffService = class {
       );
       refs = output2.split("\n").map((line2) => parseBranchRef(line2.trim())).filter((ref) => ref !== null);
     } catch (err) {
-      log78.error(
+      log77.error(
         `listBranches: for-each-ref failed for ${cwd}: ${err instanceof Error ? err.message : err}`
       );
     }
@@ -120265,7 +120241,7 @@ var DiffService = class {
     const compareBranch = options.compareBranch ?? defaultBranch;
     const cwd = worktree.worktree.path;
     const execGit2 = gitRunner(worktree.host);
-    const hasGit = await worktree.host.fs.stat(join55(cwd, ".git")).then(
+    const hasGit = await worktree.host.fs.stat(join54(cwd, ".git")).then(
       () => true,
       (err) => {
         if (err instanceof HostOfflineError || err instanceof HostTimeoutError) throw err;
@@ -120303,7 +120279,7 @@ var DiffService = class {
     applyLineCounts(status.staged, parseNumstat(stagedNumstat));
     await Promise.all(
       status.untracked.map(async (entry) => {
-        const lines = await countUntrackedLines(worktree.host, join55(cwd, entry.path));
+        const lines = await countUntrackedLines(worktree.host, join54(cwd, entry.path));
         if (lines !== null) {
           entry.additions = lines;
           entry.deletions = 0;
@@ -120460,7 +120436,7 @@ init_src();
 init_errors6();
 init_local_host_policy();
 init_worktree_service();
-var log79 = createLogger("direct-access");
+var log78 = createLogger("direct-access");
 var DEFAULT_TOKEN_TTL_MS2 = 10 * 6e4;
 function tokenTtlMs() {
   const ms = Number(process.env.BAND_DIRECT_TOKEN_TTL_MS);
@@ -120495,7 +120471,7 @@ var DirectAccessService = class {
       );
       return { hostId: hostId2, ...grant };
     } catch (err) {
-      log79.debug(
+      log78.debug(
         { hostId: hostId2, worktreeId: worktreeId4, message: err instanceof Error ? err.message : String(err) },
         "no direct path to the worker"
       );
@@ -120507,7 +120483,7 @@ var directAccessService = new DirectAccessService();
 
 // ../../packages/worktree-ops/src/files.ts
 init_resolver();
-import { dirname as dirname16, extname as extname3, join as join56, resolve as resolve13, sep as sep9 } from "node:path";
+import { dirname as dirname16, extname as extname3, join as join55, resolve as resolve13, sep as sep9 } from "node:path";
 var MAX_FILE_SIZE2 = 1024 * 1024;
 var LANG_MAP2 = {
   ".js": "javascript",
@@ -120574,7 +120550,7 @@ var FilesService = class {
       throw new WorktreeNotFoundError(worktreeId4);
     }
     const root = worktree.worktree.path;
-    const target = resolve13(join56(root, relative2));
+    const target = resolve13(join55(root, relative2));
     const insideRoot = target === root || target.startsWith(root + sep9);
     if (!insideRoot) {
       throw new Error("Invalid path");
@@ -120755,7 +120731,7 @@ var filesService = new FilesService({
 
 // src/server/services/git-graph-service.ts
 init_src2();
-import { createHash as createHash14 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 init_errors6();
 init_worktree_service();
 var FS = "";
@@ -120827,7 +120803,7 @@ var GitGraphService = class {
     } catch {
       return "";
     }
-    return createHash14("sha1").update(out).digest("hex");
+    return createHash13("sha1").update(out).digest("hex");
   }
   /**
    * One page of HEAD's history, newest first in topological order, so every
@@ -122871,7 +122847,7 @@ async function readBody2(req, max3) {
 // src/server/api/mcp-proxy/stdio.ts
 init_src();
 init_mcp_stdio_service();
-var log80 = createLogger("mcp-proxy-stdio");
+var log79 = createLogger("mcp-proxy-stdio");
 var MAX_REQUEST_BYTES = 4 * 1024 * 1024;
 var sessionHeader = (req) => {
   const value = req.headers["mcp-session-id"];
@@ -123002,7 +122978,7 @@ data: ${JSON.stringify(message)}
     if (gone) {
       return sendJson3(res, 404, { error: "The stdio MCP server's session ended" });
     }
-    log80.warn(
+    log79.warn(
       { server: server.name, err: err instanceof Error ? err.name : "unknown" },
       "no answer"
     );
@@ -123027,7 +123003,7 @@ data: ${JSON.stringify(message)}
 }
 
 // src/server/api/mcp-proxy/handler.ts
-var log81 = createLogger("mcp-proxy");
+var log80 = createLogger("mcp-proxy");
 var MCP_PROXY_PREFIX = "/mcp-proxy/";
 var ROUTE = /^\/mcp-proxy\/([^/]+)\/?$/;
 var MAX_REQUEST_BYTES2 = 4 * 1024 * 1024;
@@ -123189,13 +123165,13 @@ async function handleMcpProxy(req, res) {
   try {
     upstream = await sendUpstream(server, { method, headers, body, signal: abort.signal });
   } catch (err) {
-    log81.warn({ server: name5, err: errorCode2(err) }, "upstream failed");
+    log80.warn({ server: name5, err: errorCode2(err) }, "upstream failed");
     auditUnanswered(server, auth2.sessionId, plan, "upstream-unreachable");
     return sendJson3(res, 502, { error: "The upstream MCP server did not answer" });
   }
   if (upstream.status === 401 || upstream.status >= 300 && upstream.status < 400) {
     await upstream.body?.cancel().catch(() => void 0);
-    log81.warn({ server: name5, status: upstream.status }, "upstream refused the stored credential");
+    log80.warn({ server: name5, status: upstream.status }, "upstream refused the stored credential");
     auditUnanswered(server, auth2.sessionId, plan, `upstream-${upstream.status}`);
     return sendJson3(res, 502, {
       error: upstream.status === 401 ? "The upstream MCP server rejected the stored credential" : "The upstream MCP server redirected, which the proxy does not follow"
@@ -123263,7 +123239,7 @@ async function handleMcpProxy(req, res) {
   } catch (err) {
     auditUnanswered(server, auth2.sessionId, plan, "stream-failed");
     if (!abort.signal.aborted) {
-      log81.warn(
+      log80.warn(
         { server: name5, err: errorCode2(err) },
         err instanceof SseEventTooLargeError ? "event too large to inspect" : "proxy stream failed"
       );
@@ -123298,7 +123274,7 @@ function getScalarHtml(specUrl) {
 // src/server/api/pairing/handler.ts
 init_src();
 init_token_service();
-var log82 = createLogger("pairing");
+var log81 = createLogger("pairing");
 var PAIR_EXCHANGE_PATH = "/api/pair/exchange";
 var MAX_BODY_BYTES2 = 4096;
 var PAIR_REFUSED_MESSAGE = "This link was already used or has expired. Ask for a new one in Settings > Devices.";
@@ -123390,7 +123366,7 @@ async function handlePairExchange(req, res) {
     send3(200, out, { "Set-Cookie": buildCookieHeader(out.token, isSecure(req)) });
   } catch (err) {
     if (!(err instanceof PairingExchangeError)) throw err;
-    log82.debug(`pairing exchange refused: ${err.reason}`);
+    log81.debug(`pairing exchange refused: ${err.reason}`);
     send3(401, { error: PAIR_REFUSED_MESSAGE });
   }
 }
@@ -123398,7 +123374,7 @@ async function handlePairExchange(req, res) {
 // src/server/api/provisioning/handler.ts
 init_src();
 import { pipeline } from "node:stream";
-var log83 = createLogger("provisioning");
+var log82 = createLogger("provisioning");
 var PROVISION_PREFIX = "/api/provision/";
 var MAX_EXCHANGE_BODY_BYTES2 = 4096;
 var MAX_LOG_BODY_BYTES = 128 * 1024;
@@ -123455,7 +123431,7 @@ async function handleProvision(req, res) {
       send3(200, provisioningService.exchange(code2), "text/plain; charset=utf-8");
     } catch (err) {
       if (!(err instanceof ProvisionExchangeError)) throw err;
-      log83.debug(`provisioning exchange refused: ${err.reason}`);
+      log82.debug(`provisioning exchange refused: ${err.reason}`);
       refused();
     }
     return;
@@ -123591,7 +123567,7 @@ var OutputFlow = class {
 };
 
 // ../../packages/worktree-ops/src/terminal-socket.ts
-var log84 = createLogger("terminal-ws");
+var log83 = createLogger("terminal-ws");
 var MAX_CLOSE_REASON_BYTES = 123;
 var HEARTBEAT_INTERVAL_MS2 = 3e4;
 function clampCloseReason(reason) {
@@ -123659,7 +123635,7 @@ function createInbox(ws) {
   };
 }
 function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendingMessage) {
-  log84.debug(
+  log83.debug(
     "Terminal %s: %s (worktree %s)",
     isNew ? "connected" : "reconnected",
     terminalId,
@@ -123679,7 +123655,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
   });
   const unsubscribeExit = backend.onExit(terminalId, (event) => {
     unsubscribeTitle();
-    log84.debug("PTY exited with code %d for terminal %s", event.exitCode, terminalId);
+    log83.debug("PTY exited with code %d for terminal %s", event.exitCode, terminalId);
     if (ws.readyState === ws.OPEN) {
       ws.close(1e3, "Terminal exited");
     }
@@ -123707,7 +123683,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
     try {
       attached = await backend.attach(terminalId, dims);
     } catch (err) {
-      log84.error("Failed to attach terminal %s: %s", terminalId, err);
+      log83.error("Failed to attach terminal %s: %s", terminalId, err);
       safeClose(ws, 1011, "Terminal attach failed");
       return;
     }
@@ -123749,7 +123725,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
           const cols = Number.isFinite(parsed.cols) && parsed.cols > 0 ? parsed.cols : void 0;
           const rows = Number.isFinite(parsed.rows) && parsed.rows > 0 ? parsed.rows : void 0;
           void startReplay(cols, rows, parsed.flow === true).catch((err) => {
-            log84.error("Failed to replay terminal %s: %s", terminalId, err);
+            log83.error("Failed to replay terminal %s: %s", terminalId, err);
           });
           return;
         }
@@ -123769,7 +123745,7 @@ function attachSession(backend, ws, inbox, terminalId, worktreeId4, isNew, pendi
     flow?.dispose();
     attachment?.detach();
     unsubscribeExit();
-    log84.debug("Terminal disconnected: %s (PTY kept alive)", terminalId);
+    log83.debug("Terminal disconnected: %s (PTY kept alive)", terminalId);
   });
   if (pendingMessage) {
     processMessage(pendingMessage);
@@ -123792,7 +123768,7 @@ function handleMessage(backend, ws, terminalId, message) {
       }
       if (parsed.type === "close") {
         void backend.kill(terminalId).catch((err) => {
-          log84.error("Failed to kill terminal %s: %s", terminalId, err);
+          log83.error("Failed to kill terminal %s: %s", terminalId, err);
         });
         ws.close(1e3, "Terminal closed by client");
         return;
@@ -123808,7 +123784,7 @@ function handleMessage(backend, ws, terminalId, message) {
 
 // src/server/api/terminals/ws.ts
 init_terminal_service();
-var log85 = createLogger("terminal-ws");
+var log84 = createLogger("terminal-ws");
 async function handleTerminalConnection(ws, req) {
   if (!req.url) {
     safeClose(ws, 4e3, "Missing request URL");
@@ -123827,7 +123803,7 @@ async function handleTerminalConnection(ws, req) {
     existing = await terminalService.info(terminalId) !== null;
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    log85.error("Failed to look up terminal %s: %s", terminalId, msg);
+    log84.error("Failed to look up terminal %s: %s", terminalId, msg);
     safeClose(ws, 1011, msg);
     return;
   }
@@ -123875,7 +123851,7 @@ async function handleTerminalConnection(ws, req) {
     await terminalService.spawn(worktreeId4, terminalId, spawnOpts);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    log85.error("Failed to spawn terminal %s for worktree %s: %s", terminalId, worktreeId4, msg);
+    log84.error("Failed to spawn terminal %s for worktree %s: %s", terminalId, worktreeId4, msg);
     safeClose(ws, 4001, msg);
     return;
   }
@@ -123975,14 +123951,14 @@ async function handleVoiceTranscribe(req, res) {
 
 // src/server/api/web-app-manifest.ts
 import { createReadStream as createReadStream5, statSync as statSync15 } from "node:fs";
-import { join as join57 } from "node:path";
+import { join as join56 } from "node:path";
 var WEB_APP_MANIFEST_PATH = "/manifest.webmanifest";
 var ICON_FILES = ["band-192.png", "band-512.png", "apple-touch-icon.png"];
 function handleWebAppManifest(req, res, publicDir) {
   if (req.method !== "GET" && req.method !== "HEAD") return false;
   const pathname = req.url?.split("?")[0];
   if (pathname === WEB_APP_MANIFEST_PATH) {
-    sendFile(req, res, join57(publicDir, "manifest.webmanifest"), {
+    sendFile(req, res, join56(publicDir, "manifest.webmanifest"), {
       "Content-Type": "application/manifest+json",
       "Cache-Control": "no-cache"
     });
@@ -123990,7 +123966,7 @@ function handleWebAppManifest(req, res, publicDir) {
   }
   const icon = ICON_FILES.find((name5) => pathname === `/icons/${name5}`);
   if (!icon) return false;
-  sendFile(req, res, join57(publicDir, "icons", icon), {
+  sendFile(req, res, join56(publicDir, "icons", icon), {
     "Content-Type": "image/png",
     "Cache-Control": "public, max-age=86400"
   });
@@ -124014,7 +123990,7 @@ init_src();
 init_wrapper();
 init_browser_lookup();
 init_remote_cdp();
-var log86 = createLogger("cdp-proxy");
+var log85 = createLogger("cdp-proxy");
 async function handleCdpConnection(ws, req) {
   const url3 = new URL(req.url ?? "", `http://${req.headers.host}`);
   const bandTabId = url3.searchParams.get("bandTabId");
@@ -124057,17 +124033,17 @@ async function handleCdpConnection(ws, req) {
     cdpTargetId = await ensureCdpTargetId(bandTabId);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log86.debug("ensureCdpTargetId failed for %s: %s", bandTabId, message);
+    log85.debug("ensureCdpTargetId failed for %s: %s", bandTabId, message);
     if (ws.readyState === ws.OPEN) {
       ws.close(4001, message.slice(0, 123));
     }
     return;
   }
   const upstreamUrl = `ws://${DESKTOP_CDP_HOST}:${DESKTOP_CDP_PORT}/devtools/page/${encodeURIComponent(cdpTargetId)}`;
-  log86.info("CDP proxy connecting bandTabId=%s upstream=%s", bandTabId, upstreamUrl);
+  log85.info("CDP proxy connecting bandTabId=%s upstream=%s", bandTabId, upstreamUrl);
   upstream = new wrapper_default(upstreamUrl);
   upstream.on("open", () => {
-    log86.info("CDP upstream open bandTabId=%s pending=%d", bandTabId, pending2.length);
+    log85.info("CDP upstream open bandTabId=%s pending=%d", bandTabId, pending2.length);
     for (const msg of pending2) {
       upstream?.send(msg);
     }
@@ -124079,20 +124055,20 @@ async function handleCdpConnection(ws, req) {
     }
   });
   upstream.on("error", (err) => {
-    log86.warn("CDP upstream error bandTabId=%s: %s", bandTabId, err.message);
+    log85.warn("CDP upstream error bandTabId=%s: %s", bandTabId, err.message);
     markTargetDestroyed(bandTabId);
     if (ws.readyState === ws.OPEN) {
       ws.close(4001, `Desktop CDP error: ${err.message}`.slice(0, 123));
     }
   });
   upstream.on("close", (code) => {
-    log86.info("CDP upstream closed bandTabId=%s code=%d", bandTabId, code);
+    log85.info("CDP upstream closed bandTabId=%s code=%d", bandTabId, code);
     if (ws.readyState === ws.OPEN) {
       ws.close(1e3, "Upstream closed");
     }
   });
   ws.on("close", () => {
-    log86.debug("CDP client closed bandTabId=%s", bandTabId);
+    log85.debug("CDP client closed bandTabId=%s", bandTabId);
     if (upstream && (upstream.readyState === wrapper_default.OPEN || upstream.readyState === wrapper_default.CONNECTING)) {
       try {
         upstream.close();
@@ -124101,7 +124077,7 @@ async function handleCdpConnection(ws, req) {
     }
   });
   ws.on("error", (err) => {
-    log86.debug("CDP client error bandTabId=%s: %s", bandTabId, err.message);
+    log85.debug("CDP client error bandTabId=%s: %s", bandTabId, err.message);
     try {
       upstream?.close();
     } catch {
@@ -124131,7 +124107,7 @@ async function bridgeRemote(ws, worktreeId4) {
     cdp = await openRemoteCdp(worktreeId4);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log86.warn("remote CDP failed for worktree %s: %s", worktreeId4, message);
+    log85.warn("remote CDP failed for worktree %s: %s", worktreeId4, message);
     if (ws.readyState === ws.OPEN)
       ws.close(4001, closeReason(`Remote browser unavailable: ${message}`));
     return true;
@@ -124155,7 +124131,7 @@ async function bridgeRemote(ws, worktreeId4) {
         if (ws.readyState === ws.OPEN) ws.send(message);
       }
     } catch (err) {
-      log86.debug("remote CDP stream ended for worktree %s: %s", worktreeId4, String(err));
+      log85.debug("remote CDP stream ended for worktree %s: %s", worktreeId4, String(err));
     }
     if (ws.readyState === ws.OPEN) ws.close(1e3, "Upstream closed");
   })();
@@ -124165,7 +124141,7 @@ async function bridgeRemote(ws, worktreeId4) {
 // src/server/infra/browser-host/cdp-targets.ts
 init_src();
 init_wrapper();
-var log87 = createLogger("cdp-targets");
+var log86 = createLogger("cdp-targets");
 var CdpUnreachableError = class extends Error {
   constructor(message) {
     super(message);
@@ -124221,7 +124197,7 @@ async function captureSnapshot(bandTabId) {
     });
     ws.on("error", (err) => {
       clearTimeout(timeout);
-      log87.debug("captureSnapshot ws error for tab %s: %s", bandTabId, err.message);
+      log86.debug("captureSnapshot ws error for tab %s: %s", bandTabId, err.message);
       markTargetDestroyed(bandTabId);
       settle2(new CdpUnreachableError(err.message));
     });
@@ -124348,7 +124324,7 @@ var RfbClientFilter = class {
 };
 
 // src/server/infra/host/desktop-proxy.ts
-var log88 = createLogger("desktop-proxy");
+var log87 = createLogger("desktop-proxy");
 var DESKTOP_PATH = /^\/api\/hosts\/([^/]+)\/desktop$/;
 function desktopHostId(pathname) {
   const match = DESKTOP_PATH.exec(pathname);
@@ -124397,7 +124373,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
       );
       if (enabled !== null) {
         filter.viewOnly = !enabled;
-        log88.debug("desktop of host %s is now %s", hostId2, enabled ? "controlled" : "view-only");
+        log87.debug("desktop of host %s is now %s", hostId2, enabled ? "controlled" : "view-only");
       }
       return;
     }
@@ -124432,7 +124408,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
     opened = true;
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log88.warn("desktop of host %s is unavailable: %s", hostId2, message);
+    log87.warn("desktop of host %s is unavailable: %s", hostId2, message);
     release();
     ws.close(4001, message.slice(0, 120));
     return;
@@ -124442,7 +124418,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
     release();
     return;
   }
-  log88.debug("desktop viewer connected: %s (%s)", hostId2, req.socket.remoteAddress ?? "unknown");
+  log87.debug("desktop viewer connected: %s (%s)", hostId2, req.socket.remoteAddress ?? "unknown");
   for (const chunk of pending2.splice(0)) desktop.write(chunk);
   try {
     for await (const bytes of desktop.output) {
@@ -124450,7 +124426,7 @@ async function handleDesktopConnection(ws, req, hostId2) {
       await new Promise((resolve15) => ws.send(bytes, { binary: true }, () => resolve15()));
     }
   } catch (err) {
-    log88.warn("desktop stream of host %s failed: %s", hostId2, err.message);
+    log87.warn("desktop stream of host %s failed: %s", hostId2, err.message);
   } finally {
     if (opened) {
       desktop.close();
@@ -124468,7 +124444,7 @@ init_src();
 init_worktrees();
 init_registry();
 var worktreeQueries2 = new WorktreeQueries();
-var log89 = createLogger("lsp-proxy");
+var log88 = createLogger("lsp-proxy");
 function frameMessage(json3) {
   const body = Buffer.from(json3, "utf-8");
   const header = `Content-Length: ${body.byteLength}\r
@@ -124486,7 +124462,7 @@ function createFrameParser(onMessage) {
       const headerStr = buffer.subarray(0, separatorIdx).toString("ascii");
       const match = headerStr.match(/Content-Length:\s*(\d+)/i);
       if (!match) {
-        log89.warn("Malformed LSP header: %s", headerStr);
+        log88.warn("Malformed LSP header: %s", headerStr);
         buffer = buffer.subarray(separatorIdx + 4);
         continue;
       }
@@ -124531,7 +124507,7 @@ async function handleLspConnection(ws, req) {
     connection = await hostRegistry.hostFor(worktreeId4).lsp.connect({ worktreeId: worktreeId4, lang, root: worktree.worktreePath });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log89.error("Failed to spawn %s language server for worktree %s: %s", lang, worktreeId4, message);
+    log88.error("Failed to spawn %s language server for worktree %s: %s", lang, worktreeId4, message);
     ws.close(4001, message);
     return;
   }
@@ -124539,7 +124515,7 @@ async function handleLspConnection(ws, req) {
     connection.close();
     return;
   }
-  log89.debug("LSP client connected: %s/%s", worktreeId4, lang);
+  log88.debug("LSP client connected: %s/%s", worktreeId4, lang);
   const pendingRequests = /* @__PURE__ */ new Map();
   const openDocuments = /* @__PURE__ */ new Set();
   const serverId = `${worktreeId4}:${lang}`;
@@ -124575,7 +124551,7 @@ async function handleLspConnection(ws, req) {
   const retriedIds = /* @__PURE__ */ new Set();
   const RETRY_DELAY_MS = 2e3;
   const parseFrame = createFrameParser((json3) => {
-    log89.debug(
+    log88.debug(
       "LSP stdout [%s/%s]: %s",
       worktreeId4,
       lang,
@@ -124587,7 +124563,7 @@ async function handleLspConnection(ws, req) {
         const originalRequest = pendingRequests.get(msg.id);
         retriedIds.add(msg.id);
         pendingRequests.delete(msg.id);
-        log89.debug(
+        log88.debug(
           "LSP retrying request %d after 'No Project' error [%s/%s]",
           msg.id,
           worktreeId4,
@@ -124618,16 +124594,16 @@ async function handleLspConnection(ws, req) {
       for await (const chunk of connection.output)
         parseFrame(Buffer.from(chunk.buffer, chunk.byteOffset, chunk.byteLength));
     } catch (err) {
-      log89.warn("LSP output stream failed [%s/%s]: %s", worktreeId4, lang, String(err));
+      log88.warn("LSP output stream failed [%s/%s]: %s", worktreeId4, lang, String(err));
     }
     release();
     if (ws.readyState === ws.OPEN) {
-      log89.debug("LSP server exited, closing WebSocket");
+      log88.debug("LSP server exited, closing WebSocket");
       ws.close(1e3, "Language server exited");
     }
   })();
   function forwardToStdin(json3) {
-    log89.debug(
+    log88.debug(
       "LSP stdin [%s/%s]: %s",
       worktreeId4,
       lang,
@@ -124659,7 +124635,7 @@ async function handleLspConnection(ws, req) {
   ws.on("close", () => {
     release();
     connection.close();
-    log89.debug("LSP client disconnected: %s/%s (server kept alive)", worktreeId4, lang);
+    log88.debug("LSP client disconnected: %s/%s (server kept alive)", worktreeId4, lang);
   });
 }
 
@@ -124668,7 +124644,7 @@ init_webhook();
 
 // src/server/services/_utils/hosted-file.ts
 init_registry();
-import { basename as basename6, dirname as dirname17, join as join58 } from "node:path";
+import { basename as basename6, dirname as dirname17, join as join57 } from "node:path";
 async function openHostedFile(kind, worktreeId4, rawName, chatId) {
   const host = hostRegistry.hostFor(worktreeId4);
   if (host.id === hostRegistry.local.id) return null;
@@ -124682,7 +124658,7 @@ async function openHostedFile(kind, worktreeId4, rawName, chatId) {
   try {
     const dirs = (await host.info()).dirs;
     if (!dirs) return null;
-    const path2 = chatId ? join58(dirs[kind], worktreeId4, chatId, name5) : join58(dirs[kind], worktreeId4, name5);
+    const path2 = chatId ? join57(dirs[kind], worktreeId4, chatId, name5) : join57(dirs[kind], worktreeId4, name5);
     const dir = await host.fs.realpath(dirname17(path2));
     if (!(await host.fs.realpath(path2)).startsWith(`${dir}/`)) return null;
     const stat7 = await host.fs.stat(path2, { followSymlinks: true });
@@ -132824,15 +132800,15 @@ init_src();
 init_registry();
 async function installSkills2(opts = {}) {
   const result = await hostRegistry.local.agentEnv.installSkills({ home: opts.home });
-  const log91 = opts.log;
-  if (log91) {
-    for (const warning of result.warnings) log91.warn(warning);
-    for (const path2 of result.written) log91.info("Installed skill at %s", path2);
+  const log90 = opts.log;
+  if (log90) {
+    for (const warning of result.warnings) log90.warn(warning);
+    for (const path2 of result.written) log90.info("Installed skill at %s", path2);
     for (const path2 of result.updated) {
-      log91.info("Updated skill at %s (content differed \u2014 shipped version reinstalled)", path2);
+      log90.info("Updated skill at %s (content differed \u2014 shipped version reinstalled)", path2);
     }
     for (const conflict of result.conflicts) {
-      log91.warn("Skill symlink conflict \u2014 %s (left as-is; remove it manually to re-link)", conflict);
+      log90.warn("Skill symlink conflict \u2014 %s (left as-is; remove it manually to re-link)", conflict);
     }
   }
   return result;
@@ -132845,7 +132821,7 @@ init_state();
 init_sync_service();
 init_worktree_group_service();
 init_worktree_service();
-var log90 = createLogger("setup");
+var log89 = createLogger("setup");
 async function runFirstTimeSetup() {
   forgetLocalWorktrees();
   convertLegacyLabels();
@@ -132858,7 +132834,7 @@ async function runFirstTimeSetup() {
   ]);
   for (const r of results) {
     if (r.status === "rejected") {
-      log90.warn(
+      log89.warn(
         "Setup step failed: %s",
         r.reason instanceof Error ? r.reason.message : String(r.reason)
       );
@@ -132872,7 +132848,7 @@ async function refreshAgentModelsInBackground() {
     const ok2 = results.filter((r) => !r.error).length;
     const failed = results.length - ok2;
     if (results.length > 0) {
-      log90.info(
+      log89.info(
         "Background model refresh: %d/%d agents updated (%d failed)",
         ok2,
         results.length,
@@ -132880,7 +132856,7 @@ async function refreshAgentModelsInBackground() {
       );
     }
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Background model refresh failed: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132895,7 +132871,7 @@ async function ensureRepoRemotes() {
   try {
     await repoService.backfillRemotes();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to record repo remotes at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132905,7 +132881,7 @@ function migrateRepoCronjobs() {
   try {
     cronjobService.migrateRepoJobs();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to move repo-scoped cronjobs to worktrees at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132915,7 +132891,7 @@ function convertLegacyLabels() {
   try {
     worktreeGroupService.convertLegacyLabels();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to convert repo labels to groups at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132925,7 +132901,7 @@ function forgetLocalWorktrees() {
   try {
     worktreeService.forgetLocalWorktrees();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to forget local worktrees at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132935,7 +132911,7 @@ async function ensureRepoStateInSync() {
   try {
     await syncService.syncWorktrees();
   } catch (err) {
-    log90.warn(
+    log89.warn(
       "Failed to sync repo state at boot: %s",
       err instanceof Error ? err.message : String(err)
     );
@@ -132946,22 +132922,22 @@ async function ensureCliInstalled() {
   try {
     cliStatus = await checkCli();
   } catch (err) {
-    log90.warn("Could not check CLI status: %s", err instanceof Error ? err.message : String(err));
+    log89.warn("Could not check CLI status: %s", err instanceof Error ? err.message : String(err));
     return;
   }
   if (cliStatus === "Installed") {
     return;
   }
   if (cliStatus !== "NotInstalled") {
-    log90.warn("CLI not auto-installed (status: %s)", cliStatus);
+    log89.warn("CLI not auto-installed (status: %s)", cliStatus);
     return;
   }
-  log90.info("Installing band CLI...");
+  log89.info("Installing band CLI...");
   try {
     await installCli();
-    log90.info("CLI installed to %s", SYMLINK_PATH);
+    log89.info("CLI installed to %s", SYMLINK_PATH);
   } catch (err) {
-    log90.warn("CLI installation failed: %s", err instanceof Error ? err.message : String(err));
+    log89.warn("CLI installation failed: %s", err instanceof Error ? err.message : String(err));
   }
 }
 async function ensureDefaultCodingAgents() {
@@ -132970,17 +132946,17 @@ async function ensureDefaultCodingAgents() {
   if (Array.isArray(existing) && existing.length > 0) {
     return;
   }
-  log90.info("Detecting installed coding agents...");
+  log89.info("Detecting installed coding agents...");
   const detected = [];
   for (const check3 of AGENT_CHECKS) {
     const path2 = await systemService.whichBinary(check3.binary);
     if (path2) {
-      log90.info("Detected coding agent: %s (%s)", check3.id, path2);
+      log89.info("Detected coding agent: %s (%s)", check3.id, path2);
       detected.push({ id: check3.id, type: check3.type, label: check3.label });
     }
   }
   if (detected.length === 0) {
-    log90.info("No coding agent CLIs detected on PATH");
+    log89.info("No coding agent CLIs detected on PATH");
     return;
   }
   const current3 = loadSettings();
@@ -132989,7 +132965,7 @@ async function ensureDefaultCodingAgents() {
     current3.defaultCodingAgent = detected[0].id;
   }
   saveSettings(current3);
-  log90.info("Enabled %d coding agent(s); default = %s", detected.length, current3.defaultCodingAgent);
+  log89.info("Enabled %d coding agent(s); default = %s", detected.length, current3.defaultCodingAgent);
 }
 function ensureNotificationDefaults() {
   const settings3 = loadSettings();
@@ -133001,7 +132977,7 @@ function ensureNotificationDefaults() {
     ...settings3,
     notifications: { ...notifications, soundOnNeedsAttention: true }
   });
-  log90.info("Set default notifications.soundOnNeedsAttention = true");
+  log89.info("Set default notifications.soundOnNeedsAttention = true");
 }
 function migrateAgentDefaultMode() {
   const settings3 = loadSettings();
@@ -133009,15 +132985,15 @@ function migrateAgentDefaultMode() {
   const mode = agentModeFromVia(settings3.cli?.defaultVia);
   if (!mode) return;
   saveSettings({ ...settings3, agents: { ...settings3.agents, defaultMode: mode } });
-  log90.info("Migrated cli.defaultVia to agents.defaultMode = %s", mode);
+  log89.info("Migrated cli.defaultVia to agents.defaultMode = %s", mode);
 }
 async function ensureSkillsInstalled() {
   try {
-    const result = await installSkills2({ log: log90 });
+    const result = await installSkills2({ log: log89 });
     const wrote = result.written.length + result.updated.length;
     const linkChange = result.linked.length;
     if (wrote > 0 || linkChange > 0 || result.conflicts.length > 0) {
-      log90.info(
+      log89.info(
         "Synced CLI skills (shared: %d written, %d updated, %d unchanged; symlinks: %d created, %d already-linked, %d conflicts, %d skipped)",
         result.written.length,
         result.updated.length,
@@ -133029,7 +133005,7 @@ async function ensureSkillsInstalled() {
       );
     }
   } catch (err) {
-    log90.warn("Failed to sync CLI skills: %s", err instanceof Error ? err.message : String(err));
+    log89.warn("Failed to sync CLI skills: %s", err instanceof Error ? err.message : String(err));
   }
 }
 var SetupService = class {
@@ -133050,7 +133026,7 @@ init_worktree_service();
 function logCrash(message) {
   try {
     mkdirSync11(bandHome(), { recursive: true });
-    appendFileSync2(join59(bandHome(), "server.log"), message, "utf-8");
+    appendFileSync2(join58(bandHome(), "server.log"), message, "utf-8");
   } catch {
   }
 }
@@ -133090,9 +133066,9 @@ function resolveUiDir() {
   if (explicit) return resolve14(explicit);
   const candidates = [
     resolve14(SERVER_ROOT, "..", "..", "web", "dist", "client"),
-    join59(SERVER_ROOT, "client")
+    join58(SERVER_ROOT, "client")
   ];
-  return candidates.find((dir) => existsSync18(join59(dir, "_shell.html"))) ?? candidates[1];
+  return candidates.find((dir) => existsSync18(join58(dir, "_shell.html"))) ?? candidates[1];
 }
 var clientDir = resolveUiDir();
 var uiRoot = process.env.BAND_UI_ROOT ? resolve14(process.env.BAND_UI_ROOT) : resolve14(SERVER_ROOT, "..", "web");
@@ -133143,7 +133119,7 @@ function getOpenApiSpec() {
     if (isDev) {
       const { generateOpenAPIDocument } = await import("@trpc/openapi");
       const doc = await generateOpenAPIDocument(
-        join59(SERVER_ROOT, "src", "server", "api", "router.ts"),
+        join58(SERVER_ROOT, "src", "server", "api", "router.ts"),
         {
           title: "Band API",
           version: "1.0.0"
@@ -133152,7 +133128,7 @@ function getOpenApiSpec() {
       doc.servers = [{ url: "/trpc" }];
       return JSON.stringify(doc, null, 2);
     }
-    const openApiDoc = JSON.parse(readFileSync12(join59(SERVER_ROOT, "openapi.json"), "utf-8"));
+    const openApiDoc = JSON.parse(readFileSync12(join58(SERVER_ROOT, "openapi.json"), "utf-8"));
     openApiDoc.servers = [{ url: "/trpc" }];
     return JSON.stringify(openApiDoc, null, 2);
   })().catch((err) => {
@@ -133182,9 +133158,9 @@ function serveStaticFile(res, root, subdir, rawFilename) {
     res.end("Bad request");
     return;
   }
-  const filePath = join59(root, subdir, filename);
+  const filePath = join58(root, subdir, filename);
   try {
-    const dir = realpathSync7(join59(root, subdir));
+    const dir = realpathSync7(join58(root, subdir));
     if (!realpathSync7(filePath).startsWith(dir + sep10)) {
       res.writeHead(404);
       res.end("Not found");
@@ -133235,7 +133211,7 @@ async function serveWorktreeFile(res, worktreeId4, rawPath, extraHeaders = {}, v
     return;
   }
   const root = worktree.worktree.path;
-  const target = resolve14(join59(root, rawPath));
+  const target = resolve14(join58(root, rawPath));
   if (!target.startsWith(root + sep10) && target !== root) {
     res.writeHead(400);
     res.end("Bad request");
@@ -133546,7 +133522,7 @@ async function main() {
       res.end(JSON.stringify({ status: "ok", app: "band-web-server" }));
       return;
     }
-    if (handleWebAppManifest(req, res, isDev ? join59(uiRoot, "public") : clientDir)) return;
+    if (handleWebAppManifest(req, res, isDev ? join58(uiRoot, "public") : clientDir)) return;
     if (req.url?.split("?")[0] === WORKER_EXCHANGE_PATH) {
       await workerLinkService.handleExchange(req, res);
       return;
@@ -133654,7 +133630,7 @@ async function main() {
       const encodedName = encodeURIComponent(parsed.name);
       if (await serveHostedFile(res, "shared", parsed.worktreeId, encodedName, parsed.chatId))
         return;
-      const subdir = parsed.chatId ? join59("shared", parsed.worktreeId, parsed.chatId) : join59("shared", parsed.worktreeId);
+      const subdir = parsed.chatId ? join58("shared", parsed.worktreeId, parsed.chatId) : join58("shared", parsed.worktreeId);
       serveStaticFile(res, bandHome(), subdir, encodedName);
       return;
     }
@@ -133875,7 +133851,7 @@ async function main() {
         if (pathname.startsWith("/_shell")) res.setHeader("Cache-Control", "no-cache");
       }
     });
-    const shellPath2 = join59(clientDir, "_shell.html");
+    const shellPath2 = join58(clientDir, "_shell.html");
     if (!existsSync18(shellPath2)) {
       throw new Error(
         `UI build not found at ${clientDir} (no _shell.html). Run \`pnpm build\` or pass --ui-dir <path>.`