@basou/cli 0.14.1 → 0.15.0

package/dist/index.js

@@ -634,18 +634,18 @@ function printNoApprovals(options) {
 
 // src/commands/decision.ts
 import { readFile } from "fs/promises";
-import { homedir } from "os";
-import { resolve } from "path";
+import { homedir as homedir2 } from "os";
+import { resolve as resolve3 } from "path";
 import {
   acquireLock as acquireLock2,
   appendEventToExistingSession,
   assertBasouRootSafe as assertBasouRootSafe2,
-  basouPaths as basouPaths2,
+  basouPaths as basouPaths3,
   createAdHocSessionWithEvent,
   findErrorCode as findErrorCode2,
   isValidPrefixedId,
   prefixedUlid as prefixedUlid2,
-  readManifest,
+  readManifest as readManifest2,
   resolveRepositoryRoot as resolveRepositoryRoot2,
   resolveSessionId,
   sanitizePath
@@ -653,11 +653,73 @@ import {
 import { InvalidArgumentError } from "commander";
 
 // src/lib/repo-root.ts
-import { resolveBasouRepositoryRoot } from "@basou/core";
-async function resolveBasouRootForCommand(cwd, commandName) {
+import { realpath, stat } from "fs/promises";
+import { basename, resolve as resolve2 } from "path";
+import { basouPaths as basouPaths2, readManifest, resolveBasouRepositoryRoot } from "@basou/core";
+
+// src/lib/portfolio-config.ts
+import { homedir } from "os";
+import { isAbsolute, join as join2, resolve } from "path";
+import { readYamlFile as readYamlFile2 } from "@basou/core";
+var DEFAULT_PORTFOLIO_CONFIG_PATH = join2(homedir(), ".basou", "portfolio.yaml");
+function expandTilde(p) {
+  if (p === "~") return homedir();
+  if (p.startsWith("~/")) return join2(homedir(), p.slice(2));
+  return p;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function loadPortfolioConfig(configPath = DEFAULT_PORTFOLIO_CONFIG_PATH) {
+  let raw;
   try {
-    return await resolveBasouRepositoryRoot(cwd, {
-      onRedirect: ({ via, root }) => console.error(`Resolved workspace view to ${root} (via ${via}).`)
+    raw = await readYamlFile2(configPath);
+  } catch (error) {
+    if (error instanceof Error && error.message === "YAML file not found") {
+      throw new Error(
+        "No portfolio config at ~/.basou/portfolio.yaml. Create one (a 'workspaces:' list of repo paths) or pass --workspace <path>."
+      );
+    }
+    if (error instanceof Error && error.message === "Failed to parse YAML content") {
+      throw new Error("~/.basou/portfolio.yaml is not valid YAML.");
+    }
+    throw error;
+  }
+  if (!isRecord(raw) || !Array.isArray(raw.workspaces)) {
+    throw new Error("~/.basou/portfolio.yaml must contain a 'workspaces:' list.");
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const entry of raw.workspaces) {
+    if (!isRecord(entry) || typeof entry.path !== "string" || entry.path.trim().length === 0) {
+      throw new Error("Each portfolio workspace needs a non-empty string 'path'.");
+    }
+    if (entry.label !== void 0 && typeof entry.label !== "string") {
+      throw new Error("A portfolio workspace 'label' must be a string when present.");
+    }
+    const expanded = expandTilde(entry.path.trim());
+    if (!isAbsolute(expanded)) {
+      throw new Error(
+        "Portfolio workspace paths must be absolute (or start with '~'); use --workspace for relative ad-hoc paths."
+      );
+    }
+    const abs = resolve(expanded);
+    if (seen.has(abs)) continue;
+    seen.add(abs);
+    result.push(entry.label !== void 0 ? { path: abs, label: entry.label } : { path: abs });
+  }
+  if (result.length === 0) {
+    throw new Error("~/.basou/portfolio.yaml has no workspaces.");
+  }
+  return result;
+}
+
+// src/lib/repo-root.ts
+async function resolveBasouRootForCommand(cwd, commandName, opts = {}) {
+  let root;
+  try {
+    root = await resolveBasouRepositoryRoot(cwd, {
+      onRedirect: ({ via, root: root2 }) => console.error(`Resolved workspace view to ${root2} (via ${via}).`)
     });
   } catch (error) {
     if (error instanceof Error && error.message === "Not a git repository") {
@@ -668,6 +730,84 @@ async function resolveBasouRootForCommand(cwd, commandName) {
     }
     throw error;
   }
+  if (!await hasBasouStore(root)) {
+    const master = await resolveMemberToMaster(
+      root,
+      opts.portfolioConfigPath ?? DEFAULT_PORTFOLIO_CONFIG_PATH
+    );
+    if (master !== void 0) {
+      console.error(
+        `Resolved portfolio member to ${master.root} (via portfolio: ${master.label}).`
+      );
+      return master.root;
+    }
+  }
+  return root;
+}
+async function hasBasouStore(root) {
+  try {
+    return (await stat(basouPaths2(root).root)).isDirectory();
+  } catch {
+    return false;
+  }
+}
+async function resolveMemberToMaster(repoRoot, configPath) {
+  let workspaces;
+  try {
+    workspaces = await loadPortfolioConfig(configPath);
+  } catch (error) {
+    if (!(error instanceof Error) || !error.message.startsWith("No portfolio config at")) {
+      const detail = error instanceof Error ? error.message : String(error);
+      console.error(`Ignoring ~/.basou/portfolio.yaml: ${detail}`);
+    }
+    return void 0;
+  }
+  const memberReal = await realpathOrNull(repoRoot);
+  if (memberReal === null) return void 0;
+  const claimants = /* @__PURE__ */ new Map();
+  const seenMaster = /* @__PURE__ */ new Set();
+  for (const ws of workspaces) {
+    const masterReal = await realpathOrNull(ws.path);
+    if (masterReal === null) continue;
+    if (masterReal === memberReal) continue;
+    if (seenMaster.has(masterReal)) continue;
+    seenMaster.add(masterReal);
+    let manifest;
+    try {
+      manifest = await readManifest(basouPaths2(masterReal));
+    } catch (error) {
+      if (error instanceof Error && error.message !== "YAML file not found") {
+        console.error(
+          `Skipping portfolio workspace '${ws.label ?? basename(masterReal)}': could not read its manifest (${error.message}).`
+        );
+      }
+      continue;
+    }
+    const sourceRoots = manifest.import?.source_roots ?? ["."];
+    for (const sr of sourceRoots) {
+      const real = await realpathOrNull(resolve2(masterReal, sr));
+      if (real !== null && real === memberReal) {
+        claimants.set(masterReal, { root: masterReal, label: ws.label ?? basename(masterReal) });
+        break;
+      }
+    }
+  }
+  const matched = [...claimants.values()];
+  if (matched.length === 1) return matched[0];
+  if (matched.length > 1) {
+    const names = matched.map((c) => c.label).join(", ");
+    throw new Error(
+      `This repository is declared as a source root by ${matched.length} portfolio workspaces (${names}). Disambiguate in ~/.basou/portfolio.yaml so only one aggregates it.`
+    );
+  }
+  return void 0;
+}
+async function realpathOrNull(p) {
+  try {
+    return await realpath(p);
+  } catch {
+    return null;
+  }
 }
 
 // src/commands/decision.ts
@@ -742,7 +882,7 @@ async function runDecisionRecord(options, ctx = {}) {
 async function doRunDecisionRecord(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForDecision(cwd);
-  const paths = basouPaths2(repositoryRoot);
+  const paths = basouPaths3(repositoryRoot);
   await assertWorkspaceInitialized2(paths.root);
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
   const occurredAt = now.toISOString();
@@ -780,7 +920,7 @@ async function doRunDecisionRecord(options, ctx) {
     });
     return;
   }
-  const manifest = await readManifest(paths);
+  const manifest = await readManifest2(paths);
   const adHoc = await createAdHocSessionWithEvent({
     paths,
     manifest,
@@ -827,7 +967,7 @@ async function runDecisionCapture(options, ctx = {}) {
 async function doRunDecisionCapture(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "decision capture");
-  const paths = basouPaths2(repositoryRoot);
+  const paths = basouPaths3(repositoryRoot);
   await assertWorkspaceInitialized2(paths.root);
   const raw = await readCaptureInput(options, ctx);
   const decisions = parseCaptureInput(raw);
@@ -838,12 +978,12 @@ async function doRunDecisionCapture(options, ctx) {
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
   const occurredAt = now.toISOString();
   const decisionIds = decisions.map(() => prefixedUlid2("decision"));
-  const manifest = await readManifest(paths);
+  const manifest = await readManifest2(paths);
   const invocationArgs = options.file !== void 0 ? [
     "--file",
-    sanitizePath(resolve(cwd, options.file), {
+    sanitizePath(resolve3(cwd, options.file), {
       workingDirectory: repositoryRoot,
-      homedir: homedir()
+      homedir: homedir2()
     })
   ] : [];
   const adHoc = await createAdHocSessionWithEvent({
@@ -1201,7 +1341,7 @@ async function assertWorkspaceInitialized2(basouRoot) {
 // src/commands/decisions.ts
 import {
   assertBasouRootSafe as assertBasouRootSafe3,
-  basouPaths as basouPaths3,
+  basouPaths as basouPaths4,
   findErrorCode as findErrorCode3,
   readMarkdownFile,
   renderDecisions,
@@ -1227,7 +1367,7 @@ async function doRunDecisionsGenerate(options, ctx) {
   void options;
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForDecisions(cwd);
-  const paths = basouPaths3(repositoryRoot);
+  const paths = basouPaths4(repositoryRoot);
   await assertWorkspaceInitialized3(paths.root);
   const nowIso = (ctx.nowProvider?.() ?? /* @__PURE__ */ new Date()).toISOString();
   const result = await renderDecisions({
@@ -1267,12 +1407,12 @@ async function assertWorkspaceInitialized3(basouRoot) {
 
 // src/commands/exec.ts
 import { mkdir } from "fs/promises";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
 import {
   acquireLock as acquireLock3,
   assertBasouRootSafe as assertBasouRootSafe4,
-  basouPaths as basouPaths4,
+  basouPaths as basouPaths5,
   ChildProcessRunner,
   appendChainedEvent as coreAppendChainedEvent,
   finalizeSessionYaml,
@@ -1280,8 +1420,8 @@ import {
   overwriteYamlFile,
   parseDuration,
   prefixedUlid as prefixedUlid3,
-  readManifest as readManifest2,
-  readYamlFile as readYamlFile2,
+  readManifest as readManifest3,
+  readYamlFile as readYamlFile3,
   resolveRepositoryRoot as resolveRepositoryRoot4,
   SessionSchema,
   sanitizeWorkingDirectory,
@@ -1304,17 +1444,17 @@ async function runExec(command, args, options, ctx = {}) {
   const cwd = options.cwd ?? process.cwd();
   const timeout_ms = options.timeout !== void 0 ? parseDuration(options.timeout) : void 0;
   const repoRoot = await resolveRepositoryRootForExec(cwd);
-  const paths = basouPaths4(repoRoot);
+  const paths = basouPaths5(repoRoot);
   await assertBasouRootSafe4(paths.root);
-  const manifest = await readManifest2(paths);
+  const manifest = await readManifest3(paths);
   const sessionId = prefixedUlid3("ses");
-  const sessionDir = join2(paths.sessions, sessionId);
+  const sessionDir = join3(paths.sessions, sessionId);
   await mkdir(sessionDir, { recursive: true });
   const appendEvent = ctx.appendEvent ?? (async (_sessionDir, event) => {
     await coreAppendChainedEvent(paths, sessionId, event);
   });
   const startedAt = now().toISOString();
-  const sessionYamlPath = join2(sessionDir, "session.yaml");
+  const sessionYamlPath = join3(sessionDir, "session.yaml");
   const session = buildInitialSession({
     id: sessionId,
     command,
@@ -1519,7 +1659,7 @@ function buildInitialSession(input) {
       source: { kind: "terminal", version: "0.1.0" },
       started_at: input.startedAt,
       status: "initialized",
-      working_directory: sanitizeWorkingDirectory(input.cwd, { homedir: homedir2() }),
+      working_directory: sanitizeWorkingDirectory(input.cwd, { homedir: homedir3() }),
       invocation: {
         command: input.command,
         args: [...input.args],
@@ -1531,7 +1671,7 @@ function buildInitialSession(input) {
   };
 }
 async function mutateSessionYaml(filePath, mutator) {
-  const raw = await readYamlFile2(filePath);
+  const raw = await readYamlFile3(filePath);
   const parsed = SessionSchema.parse(raw);
   mutator(parsed);
   const validated = SessionSchema.parse(parsed);
@@ -1593,7 +1733,7 @@ async function resolveRepositoryRootForExec(cwd) {
 // src/commands/handoff.ts
 import {
   assertBasouRootSafe as assertBasouRootSafe5,
-  basouPaths as basouPaths5,
+  basouPaths as basouPaths6,
   findErrorCode as findErrorCode4,
   readMarkdownFile as readMarkdownFile2,
   renderHandoff,
@@ -1619,7 +1759,7 @@ async function doRunHandoffGenerate(options, ctx) {
   void options;
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForHandoff(cwd);
-  const paths = basouPaths5(repositoryRoot);
+  const paths = basouPaths6(repositoryRoot);
   await assertWorkspaceInitialized4(paths.root);
   const nowIso = (ctx.nowProvider?.() ?? /* @__PURE__ */ new Date()).toISOString();
   const result = await renderHandoff({
@@ -1662,13 +1802,13 @@ async function assertWorkspaceInitialized4(basouRoot) {
 
 // src/commands/import.ts
 import { createReadStream } from "fs";
-import { readdir, readFile as readFile2, rm, stat } from "fs/promises";
-import { homedir as homedir3 } from "os";
-import { basename, join as join3, resolve as resolve2 } from "path";
+import { readdir, readFile as readFile2, rm, stat as stat2 } from "fs/promises";
+import { homedir as homedir4 } from "os";
+import { basename as basename2, join as join4, resolve as resolve4 } from "path";
 import { createInterface } from "readline";
 import {
   assertBasouRootSafe as assertBasouRootSafe6,
-  basouPaths as basouPaths6,
+  basouPaths as basouPaths7,
   CLAUDE_IMPORT_SOURCE,
   CODEX_IMPORT_SOURCE,
   claudeTranscriptToImportPayload,
@@ -1676,7 +1816,7 @@ import {
   enumerateSessionDirs,
   findErrorCode as findErrorCode5,
   importSessionFromJson,
-  readManifest as readManifest3,
+  readManifest as readManifest4,
   readSessionYaml as readSessionYaml2,
   reimportPreservingId,
   resolveRepositoryRoot as resolveRepositoryRoot6,
@@ -1732,10 +1872,10 @@ function resolveSourceRoots(args) {
   const { projectFlags, manifest, repoRoot, cwd } = args;
   let resolved;
   if (projectFlags.length > 0) {
-    resolved = projectFlags.map((p) => resolve2(cwd, p));
+    resolved = projectFlags.map((p) => resolve4(cwd, p));
   } else {
     const roots = manifest.import?.source_roots;
-    resolved = roots !== void 0 && roots.length > 0 ? roots.map((r) => resolve2(repoRoot, r)) : [repoRoot];
+    resolved = roots !== void 0 && roots.length > 0 ? roots.map((r) => resolve4(repoRoot, r)) : [repoRoot];
   }
   return [...new Set(resolved)];
 }
@@ -1748,11 +1888,11 @@ async function doRunImportClaudeCode(options, ctx) {
     repoRoot: repositoryRoot,
     cwd: ctx.cwd ?? process.cwd()
   });
-  const projectsRoot = ctx.claudeProjectsDir ?? join3(homedir3(), ".claude", "projects");
+  const projectsRoot = ctx.claudeProjectsDir ?? join4(homedir4(), ".claude", "projects");
   const files = await selectTranscriptFiles(projectsRoot, projectPaths, options);
   const projectSet = new Set(projectPaths);
   const candidates = files.map((file) => {
-    const externalId = basename(file, ".jsonl");
+    const externalId = basename2(file, ".jsonl");
     return {
       externalId,
       sourcePath: file,
@@ -1779,7 +1919,7 @@ async function doRunImportCodex(options, ctx) {
     repoRoot: repositoryRoot,
     cwd: ctx.cwd ?? process.cwd()
   });
-  const sessionsRoot = ctx.codexSessionsDir ?? join3(homedir3(), ".codex", "sessions");
+  const sessionsRoot = ctx.codexSessionsDir ?? join4(homedir4(), ".codex", "sessions");
   const rollouts = await discoverCodexRollouts(sessionsRoot, projectPaths, options);
   const candidates = rollouts.map(({ file, externalId }) => ({
     externalId,
@@ -1806,9 +1946,9 @@ function assertSelector(options) {
 async function resolveImportTarget(ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForImport(cwd);
-  const paths = basouPaths6(repositoryRoot);
+  const paths = basouPaths7(repositoryRoot);
   await assertWorkspaceInitialized5(paths.root);
-  const manifest = await readManifest3(paths);
+  const manifest = await readManifest4(paths);
   return { repositoryRoot, paths, manifest };
 }
 async function importDerivedSessions(paths, manifest, options, sourceKind, candidates) {
@@ -1880,7 +2020,7 @@ async function importDerivedSessions(paths, manifest, options, sourceKind, candi
     if (priors.length > 0 && options.force === true) {
       if (options.dryRun !== true) {
         for (const { sessionId } of priors) {
-          await rm(join3(paths.sessions, sessionId), { recursive: true, force: true });
+          await rm(join4(paths.sessions, sessionId), { recursive: true, force: true });
         }
       }
       counts.replaced++;
@@ -1980,7 +2120,7 @@ async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
   if (options.session !== void 0) {
     const matches = [];
     for (const projectPath of projectPaths) {
-      const file = join3(projectsRoot, encodeProjectDir(projectPath), `${options.session}.jsonl`);
+      const file = join4(projectsRoot, encodeProjectDir(projectPath), `${options.session}.jsonl`);
       if (await pathExists(file)) matches.push(file);
     }
     if (matches.length === 0) {
@@ -1991,7 +2131,7 @@ async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
   const files = [];
   let anyDirFound = false;
   for (const projectPath of projectPaths) {
-    const transcriptDir = join3(projectsRoot, encodeProjectDir(projectPath));
+    const transcriptDir = join4(projectsRoot, encodeProjectDir(projectPath));
     let entries;
     try {
       entries = await readdir(transcriptDir);
@@ -2001,7 +2141,7 @@ async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
     }
     anyDirFound = true;
     for (const name of entries) {
-      if (name.endsWith(".jsonl")) files.push(join3(transcriptDir, name));
+      if (name.endsWith(".jsonl")) files.push(join4(transcriptDir, name));
     }
   }
   if (!anyDirFound) {
@@ -2011,7 +2151,7 @@ async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
 }
 async function pathExists(file) {
   try {
-    await stat(file);
+    await stat2(file);
     return true;
   } catch (error) {
     if (findErrorCode5(error, "ENOENT")) return false;
@@ -2020,7 +2160,7 @@ async function pathExists(file) {
 }
 async function statSize(file) {
   try {
-    return (await stat(file)).size;
+    return (await stat2(file)).size;
   } catch (error) {
     if (findErrorCode5(error, "ENOENT")) return void 0;
     throw error;
@@ -2058,7 +2198,7 @@ async function findRolloutFiles(sessionsRoot) {
       throw new Error("Failed to read Codex sessions directory", { cause: error });
     }
     for (const entry of entries) {
-      const full = join3(dir, entry.name);
+      const full = join4(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(full, false);
       } else if (entry.isFile() && entry.name.startsWith("rollout-") && entry.name.endsWith(".jsonl")) {
@@ -2236,7 +2376,7 @@ async function assertWorkspaceInitialized5(basouRoot) {
 }
 
 // src/commands/init.ts
-import { basename as basename2, relative, resolve as resolve3 } from "path";
+import { basename as basename3, relative, resolve as resolve5 } from "path";
 import {
   appendBasouGitignore,
   createManifest,
@@ -2275,7 +2415,7 @@ async function runInit(options, ctx = {}) {
 async function doRunInit(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForInit(cwd);
-  const workspaceName = options.name ?? basename2(repositoryRoot);
+  const workspaceName = options.name ?? basename3(repositoryRoot);
   let repositoryUrl;
   if (options.repoUrl !== void 0) {
     repositoryUrl = options.repoUrl === "" ? null : options.repoUrl;
@@ -2283,7 +2423,7 @@ async function doRunInit(options, ctx) {
     repositoryUrl = await tryRemoteUrl(repositoryRoot);
   }
   const sourceRoots = (options.sourceRoot ?? []).map((p) => {
-    const rel = relative(repositoryRoot, resolve3(cwd, p));
+    const rel = relative(repositoryRoot, resolve5(cwd, p));
     return rel === "" ? "." : rel;
   });
   const paths = await ensureBasouDirectory(repositoryRoot);
@@ -2330,10 +2470,10 @@ import {
   acquireLock as acquireLock4,
   appendEventToExistingSession as appendEventToExistingSession2,
   assertBasouRootSafe as assertBasouRootSafe7,
-  basouPaths as basouPaths7,
+  basouPaths as basouPaths8,
   createAdHocSessionWithEvent as createAdHocSessionWithEvent2,
   findErrorCode as findErrorCode6,
-  readManifest as readManifest4,
+  readManifest as readManifest5,
   resolveSessionId as resolveSessionId2
 } from "@basou/core";
 import { InvalidArgumentError as InvalidArgumentError2 } from "commander";
@@ -2364,7 +2504,7 @@ async function doRunNote(body, options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "note");
-  const paths = basouPaths7(repositoryRoot);
+  const paths = basouPaths8(repositoryRoot);
   await assertWorkspaceInitialized6(paths.root);
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
   const occurredAt = now.toISOString();
@@ -2391,7 +2531,7 @@ async function doRunNote(body, options, ctx) {
     });
     return;
   }
-  const manifest = await readManifest4(paths);
+  const manifest = await readManifest5(paths);
   const adHoc = await createAdHocSessionWithEvent2({
     paths,
     manifest,
@@ -2474,7 +2614,7 @@ async function assertWorkspaceInitialized6(basouRoot) {
 // src/commands/orient.ts
 import {
   assertBasouRootSafe as assertBasouRootSafe8,
-  basouPaths as basouPaths8,
+  basouPaths as basouPaths9,
   findErrorCode as findErrorCode7,
   renderOrientation as renderOrientation2,
   writeMarkdownFile as writeMarkdownFile4
@@ -2679,7 +2819,7 @@ async function runOrient(options, ctx = {}) {
 async function doRunOrient(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "orient");
-  const paths = basouPaths8(repositoryRoot);
+  const paths = basouPaths9(repositoryRoot);
   await assertWorkspaceInitialized7(paths.root);
   const nowIso = (ctx.nowProvider?.() ?? /* @__PURE__ */ new Date()).toISOString();
   const probeCtx = { cwd: repositoryRoot };
@@ -2730,9 +2870,9 @@ import {
   unlinkSync,
   writeFileSync
 } from "fs";
-import { basename as basename3, dirname, isAbsolute, join as join4, relative as relative2, resolve as resolve4 } from "path";
+import { basename as basename4, dirname, isAbsolute as isAbsolute2, join as join5, relative as relative2, resolve as resolve6 } from "path";
 import {
-  basouPaths as basouPaths9,
+  basouPaths as basouPaths10,
   GENERATED_END,
   GENERATED_START,
   isGitNotFound,
@@ -2743,7 +2883,7 @@ import {
   planRename,
   planRosterAdoption,
   planWorkspaceView,
-  readManifest as readManifest5,
+  readManifest as readManifest6,
   readMarkdownFile as readMarkdownFile4,
   reconcileSourceRoots,
   renderWithMarkers as renderWithMarkers4,
@@ -2850,8 +2990,8 @@ function preservedUnknownLines(fields) {
 async function doRunProjectCheck(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project check");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const summary = summarizeRosterDrift({
     ...manifest.repos !== void 0 ? { repos: manifest.repos } : {},
     sourceRoots: effectiveSourceRoots(manifest)
@@ -2912,8 +3052,8 @@ async function runProjectSync(options, ctx = {}) {
 async function doRunProjectSync(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project sync");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const hasRoster = manifest.repos !== void 0 && manifest.repos.length > 0;
   const reconcile = reconcileSourceRoots({
     ...manifest.repos !== void 0 ? { repos: manifest.repos } : {},
@@ -2982,20 +3122,20 @@ async function runProjectAdopt(options, ctx = {}) {
   }
 }
 function classifySourceRoot(repositoryRoot, declaredPath) {
-  const absolute = resolve4(repositoryRoot, declaredPath);
+  const absolute = resolve6(repositoryRoot, declaredPath);
   let real;
   try {
     real = realpathSync(absolute);
   } catch {
     return { path: declaredPath, kind: "unresolved" };
   }
-  return { path: declaredPath, kind: existsSync(join4(real, ".git")) ? "repo" : "non-repo" };
+  return { path: declaredPath, kind: existsSync(join5(real, ".git")) ? "repo" : "non-repo" };
 }
 async function doRunProjectAdopt(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project adopt");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const alreadyDeclared = manifest.repos !== void 0 && manifest.repos.length > 0;
   const candidates = effectiveSourceRoots(manifest).map(
     (r) => classifySourceRoot(repositoryRoot, r)
@@ -3084,11 +3224,11 @@ async function gatherRepoWiring(repositoryRoot, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve4(repositoryRoot, entry.path));
+    real = realpathSync(resolve6(repositoryRoot, entry.path));
   } catch {
     return { ...base, reachable: false, instructionFiles: [] };
   }
-  if (!existsSync(join4(real, ".git"))) {
+  if (!existsSync(join5(real, ".git"))) {
     return { ...base, reachable: false, instructionFiles: [] };
   }
   try {
@@ -3096,7 +3236,7 @@ async function gatherRepoWiring(repositoryRoot, entry) {
     for (const name of INSTRUCTION_FILES) {
       let present = true;
       try {
-        lstatSync(join4(real, name));
+        lstatSync(join5(real, name));
       } catch {
         present = false;
       }
@@ -3111,8 +3251,8 @@ async function gatherRepoWiring(repositoryRoot, entry) {
 async function doRunProjectWiring(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project wiring");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const roster = manifest.repos ?? [];
   const facts = [];
   for (const entry of roster) facts.push(await gatherRepoWiring(repositoryRoot, entry));
@@ -3189,14 +3329,14 @@ function gatherRepoGitignore(repositoryRoot, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve4(repositoryRoot, entry.path));
+    real = realpathSync(resolve6(repositoryRoot, entry.path));
   } catch {
     return { ...base, reachable: false, currentLines: [] };
   }
-  if (!existsSync(join4(real, ".git"))) {
+  if (!existsSync(join5(real, ".git"))) {
     return { ...base, reachable: false, currentLines: [] };
   }
-  return { ...base, reachable: true, currentLines: readGitignoreLines(join4(real, ".gitignore")) };
+  return { ...base, reachable: true, currentLines: readGitignoreLines(join5(real, ".gitignore")) };
 }
 function hasErrorCode(error) {
   return error instanceof Error && typeof error.code === "string";
@@ -3210,7 +3350,7 @@ function readGitignoreLines(file) {
   }
 }
 function applyGitignorePlan(repositoryRoot, plan) {
-  const file = join4(realpathSync(resolve4(repositoryRoot, plan.path)), ".gitignore");
+  const file = join5(realpathSync(resolve6(repositoryRoot, plan.path)), ".gitignore");
   let existing = "";
   try {
     existing = readFileSync(file, "utf8");
@@ -3230,8 +3370,8 @@ function applyGitignorePlan(repositoryRoot, plan) {
 async function doRunProjectGitignore(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project gitignore");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const roster = manifest.repos ?? [];
   const facts = roster.map((entry) => gatherRepoGitignore(repositoryRoot, entry));
   const summary = planGitignore({ repos: facts, required: [...INSTRUCTION_FILES] });
@@ -3322,23 +3462,23 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
   const base = { path: entry.path };
   let real;
   try {
-    real = realpathSync(resolve4(repositoryRoot, entry.path));
+    real = realpathSync(resolve6(repositoryRoot, entry.path));
   } catch {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
   if (real === anchorReal) {
     return { ...base, isAnchor: true, reachable: true, canonicalPresent: false, files: [] };
   }
-  if (!existsSync(join4(real, ".git"))) {
+  if (!existsSync(join5(real, ".git"))) {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
-  const canonicalFile = join4(anchorReal, "agents", basename3(real), CANONICAL_FILE);
+  const canonicalFile = join5(anchorReal, "agents", basename4(real), CANONICAL_FILE);
   if (!existsSync(canonicalFile)) {
     return { ...base, isAnchor: false, reachable: true, canonicalPresent: false, files: [] };
   }
   const files = expectedSymlinkTargets(real, canonicalFile).map(
     (spec) => {
-      const { state, actualTarget } = inspectSymlink(join4(real, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join5(real, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -3352,14 +3492,14 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
     isAnchor: false,
     reachable: true,
     canonicalPresent: true,
-    canonicalName: basename3(real),
+    canonicalName: basename4(real),
     files
   };
 }
 function applySymlinkPlan(repositoryRoot, plan) {
   let real;
   try {
-    real = realpathSync(resolve4(repositoryRoot, plan.path));
+    real = realpathSync(resolve6(repositoryRoot, plan.path));
   } catch (error) {
     const message = failureReason(error);
     return { created: [], failed: plan.toCreate.map((c) => ({ file: c.name, message })) };
@@ -3367,7 +3507,7 @@ function applySymlinkPlan(repositoryRoot, plan) {
   const created = [];
   const failed = [];
   for (const { name, target } of plan.toCreate) {
-    const filePath = join4(real, name);
+    const filePath = join5(real, name);
     try {
       mkdirSync(dirname(filePath), { recursive: true });
       symlinkSync(target, filePath);
@@ -3384,8 +3524,8 @@ function failureReason(error) {
 async function doRunProjectSymlinks(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project symlinks");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const roster = manifest.repos ?? [];
   const anchorReal = realpathSync(repositoryRoot);
   const facts = roster.map((entry) => gatherRepoSymlinks(repositoryRoot, anchorReal, entry));
@@ -3504,12 +3644,12 @@ async function runProjectWorkspace(options, ctx = {}) {
   }
 }
 function resolveViewDir(repositoryRoot, viewPath) {
-  const abs = resolve4(repositoryRoot, viewPath);
+  const abs = resolve6(repositoryRoot, viewPath);
   try {
     return realpathSync(abs);
   } catch {
     try {
-      return join4(realpathSync(dirname(abs)), basename3(abs));
+      return join5(realpathSync(dirname(abs)), basename4(abs));
     } catch {
       return abs;
     }
@@ -3518,7 +3658,7 @@ function resolveViewDir(repositoryRoot, viewPath) {
 function gatherViewRepo(repositoryRoot, viewDir, entry) {
   let repoReal;
   try {
-    repoReal = realpathSync(resolve4(repositoryRoot, entry.path));
+    repoReal = realpathSync(resolve6(repositoryRoot, entry.path));
   } catch {
     return { path: entry.path, reachable: false };
   }
@@ -3526,8 +3666,8 @@ function gatherViewRepo(repositoryRoot, viewDir, entry) {
   if (expectedTarget === "" || expectedTarget === ".") {
     return { path: entry.path, reachable: false };
   }
-  const linkName = basename3(repoReal);
-  const { state, actualTarget } = inspectSymlink(join4(viewDir, linkName), expectedTarget);
+  const linkName = basename4(repoReal);
+  const { state, actualTarget } = inspectSymlink(join5(viewDir, linkName), expectedTarget);
   return {
     path: entry.path,
     reachable: true,
@@ -3541,7 +3681,7 @@ function applyViewPlan(viewDir, toCreate) {
   const created = [];
   const failed = [];
   for (const { name, target } of toCreate) {
-    const filePath = join4(viewDir, name);
+    const filePath = join5(viewDir, name);
     try {
       mkdirSync(dirname(filePath), { recursive: true });
       symlinkSync(target, filePath);
@@ -3556,7 +3696,7 @@ var TOP_LEVEL_INSTRUCTION_FILES_LOWER = new Set(
   INSTRUCTION_FILES.filter((f) => !f.includes("/")).map((f) => f.toLowerCase())
 );
 function classifyViewLink(viewDir, name, rosterRealpaths) {
-  const filePath = join4(viewDir, name);
+  const filePath = join5(viewDir, name);
   let isLink;
   try {
     isLink = lstatSync(filePath).isSymbolicLink();
@@ -3570,12 +3710,12 @@ function classifyViewLink(viewDir, name, rosterRealpaths) {
   } catch {
     return null;
   }
-  const resolved = isAbsolute(target) ? target : resolve4(viewDir, target);
+  const resolved = isAbsolute2(target) ? target : resolve6(viewDir, target);
   try {
     if (rosterRealpaths.has(realpathSync(resolved))) return null;
   } catch {
   }
-  if (isAbsolute(target)) return { target, kind: "absolute" };
+  if (isAbsolute2(target)) return { target, kind: "absolute" };
   let isDir = false;
   try {
     isDir = statSync(resolved).isDirectory();
@@ -3585,7 +3725,7 @@ function classifyViewLink(viewDir, name, rosterRealpaths) {
   if (!isDir) {
     return { target, kind: existsSync(resolved) ? "non-repo" : "broken" };
   }
-  return { target, kind: existsSync(join4(resolved, ".git")) ? "repo" : "non-repo" };
+  return { target, kind: existsSync(join5(resolved, ".git")) ? "repo" : "non-repo" };
 }
 function gatherExistingViewLinks(viewDir, rosterRealpaths) {
   let names;
@@ -3610,7 +3750,7 @@ function pruneViewLinks(viewDir, toPrune, rosterRealpaths) {
   const pruned = [];
   const failed = [];
   for (const { name } of toPrune) {
-    const filePath = join4(viewDir, name);
+    const filePath = join5(viewDir, name);
     const c = classifyViewLink(viewDir, name, rosterRealpaths);
     if (c === null || c.kind !== "repo") {
       failed.push({
@@ -3631,8 +3771,8 @@ function pruneViewLinks(viewDir, toPrune, rosterRealpaths) {
 async function doRunProjectWorkspace(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project workspace");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const viewPath = manifest.workspace.view;
   const roster = manifest.repos ?? [];
   let result;
@@ -3656,11 +3796,11 @@ async function doRunProjectWorkspace(options, ctx) {
   } else {
     const viewDir = resolveViewDir(repositoryRoot, viewPath);
     const facts = roster.map((entry) => gatherViewRepo(repositoryRoot, viewDir, entry));
-    const rosterNames = roster.map((entry) => basename3(resolve4(repositoryRoot, entry.path)));
+    const rosterNames = roster.map((entry) => basename4(resolve6(repositoryRoot, entry.path)));
     const rosterRealpaths = /* @__PURE__ */ new Set();
     for (const entry of roster) {
       try {
-        rosterRealpaths.add(realpathSync(resolve4(repositoryRoot, entry.path)));
+        rosterRealpaths.add(realpathSync(resolve6(repositoryRoot, entry.path)));
       } catch {
       }
     }
@@ -3821,10 +3961,10 @@ async function runProjectPreset(options, ctx = {}) {
   }
 }
 function canonicalFileFor(anchorReal, canonicalName) {
-  return join4(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  return join5(anchorReal, "agents", canonicalName, CANONICAL_FILE);
 }
 function canonicalLabelFor(canonicalName) {
-  return join4("agents", canonicalName, CANONICAL_FILE);
+  return join5("agents", canonicalName, CANONICAL_FILE);
 }
 async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   const declared = {
@@ -3835,17 +3975,17 @@ async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve4(repositoryRoot, entry.path));
+    real = realpathSync(resolve6(repositoryRoot, entry.path));
   } catch {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
   if (real === anchorReal) {
     return { ...declared, isAnchor: true, reachable: true, canonicalPresent: false };
   }
-  if (!existsSync(join4(real, ".git"))) {
+  if (!existsSync(join5(real, ".git"))) {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
-  const canonicalName = basename3(real);
+  const canonicalName = basename4(real);
   let content;
   try {
     content = await readMarkdownFile4(canonicalFileFor(anchorReal, canonicalName));
@@ -3906,8 +4046,8 @@ function presetFailureReason(error) {
 async function doRunProjectPreset(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project preset");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const roster = manifest.repos ?? [];
   const anchorReal = realpathSync(repositoryRoot);
   const facts = [];
@@ -4064,33 +4204,33 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   };
   let real;
   try {
-    real = realpathSync(resolve4(repositoryRoot, target));
+    real = realpathSync(resolve6(repositoryRoot, target));
   } catch {
     return empty;
   }
   const anchorReal = realpathSync(repositoryRoot);
-  const canonicalName = basename3(real);
+  const canonicalName = basename4(real);
   const instructionFiles = [];
   for (const name of INSTRUCTION_FILES) {
     try {
-      lstatSync(join4(real, name));
+      lstatSync(join5(real, name));
       instructionFiles.push(name);
     } catch {
     }
   }
   let ignored;
   try {
-    ignored = new Set(readGitignoreLines(join4(real, ".gitignore")).map((l) => l.trim()));
+    ignored = new Set(readGitignoreLines(join5(real, ".gitignore")).map((l) => l.trim()));
   } catch {
     ignored = /* @__PURE__ */ new Set();
   }
   const gitignorePatterns = INSTRUCTION_FILES.filter((p) => ignored.has(p) || ignored.has(`/${p}`));
-  const canonical2 = existsSync(join4(anchorReal, "agents", canonicalName, CANONICAL_FILE));
+  const canonical2 = existsSync(join5(anchorReal, "agents", canonicalName, CANONICAL_FILE));
   let viewLink = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join4(resolveViewDir(repositoryRoot, viewPath), canonicalName));
+      lstatSync(join5(resolveViewDir(repositoryRoot, viewPath), canonicalName));
       viewLink = true;
     } catch {
     }
@@ -4127,12 +4267,12 @@ function buildArchivedManifest(manifest, plan, updatedAt) {
 async function doRunProjectArchive(target, options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project archive");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const roster = manifest.repos ?? [];
   let targetIsAnchor = false;
   try {
-    targetIsAnchor = realpathSync(resolve4(repositoryRoot, target)) === realpathSync(repositoryRoot);
+    targetIsAnchor = realpathSync(resolve6(repositoryRoot, target)) === realpathSync(repositoryRoot);
   } catch {
     targetIsAnchor = false;
   }
@@ -4217,7 +4357,7 @@ function renderProjectArchive(result) {
   if (t.instructionFiles.length > 0) items.push(`\u6307\u793A\u66F8(${t.instructionFiles.join(", ")})`);
   if (t.gitignorePatterns.length > 0)
     items.push(`.gitignore \u306E\u6307\u793A\u66F8\u30D1\u30BF\u30FC\u30F3(${t.gitignorePatterns.join(", ")})`);
-  if (t.canonical) items.push(`anchor \u306E canonical(agents/${basename3(result.target)}/AGENTS.md)`);
+  if (t.canonical) items.push(`anchor \u306E canonical(agents/${basename4(result.target)}/AGENTS.md)`);
   if (!t.inspected) {
     lines.push("## \u624B\u52D5 teardown(repo \u304C\u30C7\u30A3\u30B9\u30AF\u4E0A\u306B\u89E3\u6C7A\u3067\u304D\u306A\u3044\u305F\u3081\u672A\u691C\u67FB)");
     lines.push(
@@ -4252,12 +4392,12 @@ function gatherRenameWiring(repositoryRoot, manifest, oldBasename) {
   } catch {
     return { canonicalDirOld: false, viewLinkOld: false };
   }
-  const canonicalDirOld = existsSync(join4(anchorReal, "agents", oldBasename));
+  const canonicalDirOld = existsSync(join5(anchorReal, "agents", oldBasename));
   let viewLinkOld = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join4(resolveViewDir(repositoryRoot, viewPath), oldBasename));
+      lstatSync(join5(resolveViewDir(repositoryRoot, viewPath), oldBasename));
       viewLinkOld = true;
     } catch {
     }
@@ -4278,12 +4418,12 @@ function buildRenamedManifest(manifest, plan, updatedAt) {
 async function doRunProjectRename(oldPath, newPath, options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "project rename");
-  const paths = basouPaths9(repositoryRoot);
-  const manifest = await readManifest5(paths);
+  const paths = basouPaths10(repositoryRoot);
+  const manifest = await readManifest6(paths);
   const roster = manifest.repos ?? [];
   let oldIsAnchor = false;
   try {
-    oldIsAnchor = realpathSync(resolve4(repositoryRoot, oldPath)) === realpathSync(repositoryRoot);
+    oldIsAnchor = realpathSync(resolve6(repositoryRoot, oldPath)) === realpathSync(repositoryRoot);
   } catch {
     oldIsAnchor = false;
   }
@@ -4393,79 +4533,341 @@ function renderProjectRename(result) {
   return lines.join("\n");
 }
 
-// src/commands/refresh.ts
-import { assertBasouRootSafe as assertBasouRootSafe9, basouPaths as basouPaths10, findErrorCode as findErrorCode9 } from "@basou/core";
-import { InvalidArgumentError as InvalidArgumentError3 } from "commander";
+// src/commands/protocol.ts
+import { readFile as readFile3 } from "fs/promises";
+import {
+  PROTOCOL_END,
+  PROTOCOL_START,
+  parseMarkers as parseMarkers2,
+  readMarkdownFile as readMarkdownFile5,
+  removeMarkerSection
+} from "@basou/core";
 
-// src/lib/portfolio-config.ts
-import { homedir as homedir4 } from "os";
-import { isAbsolute as isAbsolute2, join as join5, resolve as resolve5 } from "path";
-import { readYamlFile as readYamlFile3 } from "@basou/core";
-var DEFAULT_PORTFOLIO_CONFIG_PATH = join5(homedir4(), ".basou", "portfolio.yaml");
-function expandTilde(p) {
-  if (p === "~") return homedir4();
-  if (p.startsWith("~/")) return join5(homedir4(), p.slice(2));
+// src/lib/durable-write.ts
+import { randomUUID } from "crypto";
+import { lstat, open, rename, stat as stat3, unlink as unlink2 } from "fs/promises";
+import { basename as basename5, dirname as dirname2, join as join6 } from "path";
+async function assertNotSymlink(targetPath) {
+  try {
+    const st = await lstat(targetPath);
+    if (st.isSymbolicLink()) {
+      throw new Error(
+        "Refusing to write through a symlink. Replace the symlinked target with a regular file (or remove it) and retry."
+      );
+    }
+  } catch (error) {
+    if (error instanceof Error && error.code === "ENOENT") return;
+    throw error;
+  }
+}
+async function writeFileDurable(targetPath, content) {
+  const dir = dirname2(targetPath);
+  const tmpPath = join6(dir, `.${basename5(targetPath)}.tmp.${randomUUID()}`);
+  let mode = 420;
+  try {
+    mode = (await stat3(targetPath)).mode & 511;
+  } catch (error) {
+    if (!(error instanceof Error && error.code === "ENOENT")) {
+      throw error;
+    }
+  }
+  let handle;
+  try {
+    handle = await open(tmpPath, "wx", mode);
+    await handle.writeFile(content, "utf8");
+    await handle.chmod(mode);
+    await handle.sync();
+    await handle.close();
+    handle = void 0;
+    await rename(tmpPath, targetPath);
+  } catch (error) {
+    if (handle) await handle.close().catch(() => void 0);
+    await unlink2(tmpPath).catch(() => void 0);
+    throw error;
+  }
+  try {
+    const dirHandle = await open(dir, "r");
+    try {
+      await dirHandle.sync();
+    } finally {
+      await dirHandle.close();
+    }
+  } catch {
+  }
+}
+
+// src/lib/protocols-config.ts
+import { homedir as homedir5 } from "os";
+import { isAbsolute as isAbsolute3, join as join7, resolve as resolve7 } from "path";
+import { readYamlFile as readYamlFile4 } from "@basou/core";
+var DEFAULT_PROTOCOLS_CONFIG_PATH = join7(homedir5(), ".basou", "protocols.yaml");
+var DEFAULT_TARGET_PATH = join7(homedir5(), ".claude", "CLAUDE.md");
+var ALLOWED_TOP_KEYS = /* @__PURE__ */ new Set(["version", "protocols"]);
+var ALLOWED_ENTRY_KEYS = /* @__PURE__ */ new Set(["source", "title"]);
+function expandTilde2(p) {
+  if (p === "~") return homedir5();
+  if (p.startsWith("~/")) return join7(homedir5(), p.slice(2));
   return p;
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-async function loadPortfolioConfig(configPath = DEFAULT_PORTFOLIO_CONFIG_PATH) {
+async function loadProtocolsConfig(configPath = DEFAULT_PROTOCOLS_CONFIG_PATH) {
   let raw;
   try {
-    raw = await readYamlFile3(configPath);
+    raw = await readYamlFile4(configPath);
   } catch (error) {
     if (error instanceof Error && error.message === "YAML file not found") {
       throw new Error(
-        "No portfolio config at ~/.basou/portfolio.yaml. Create one (a 'workspaces:' list of repo paths) or pass --workspace <path>."
+        "No protocols config at ~/.basou/protocols.yaml. Create one (a 'protocols:' list of source markdown paths) before running 'basou protocol sync'."
       );
     }
     if (error instanceof Error && error.message === "Failed to parse YAML content") {
-      throw new Error("~/.basou/portfolio.yaml is not valid YAML.");
+      throw new Error("~/.basou/protocols.yaml is not valid YAML.");
     }
     throw error;
   }
-  if (!isRecord(raw) || !Array.isArray(raw.workspaces)) {
-    throw new Error("~/.basou/portfolio.yaml must contain a 'workspaces:' list.");
+  if (!isRecord2(raw) || !Array.isArray(raw.protocols)) {
+    throw new Error("~/.basou/protocols.yaml must contain a 'protocols:' list.");
+  }
+  for (const key of Object.keys(raw)) {
+    if (!ALLOWED_TOP_KEYS.has(key)) {
+      throw new Error(
+        `~/.basou/protocols.yaml has an unknown key '${key}' (allowed: version, protocols).`
+      );
+    }
   }
   const seen = /* @__PURE__ */ new Set();
   const result = [];
-  for (const entry of raw.workspaces) {
-    if (!isRecord(entry) || typeof entry.path !== "string" || entry.path.trim().length === 0) {
-      throw new Error("Each portfolio workspace needs a non-empty string 'path'.");
+  for (const entry of raw.protocols) {
+    if (!isRecord2(entry)) {
+      throw new Error("Each protocol entry must be a mapping with a 'source' key.");
     }
-    if (entry.label !== void 0 && typeof entry.label !== "string") {
-      throw new Error("A portfolio workspace 'label' must be a string when present.");
+    for (const key of Object.keys(entry)) {
+      if (!ALLOWED_ENTRY_KEYS.has(key)) {
+        throw new Error(`A protocol entry has an unknown key '${key}' (allowed: source, title).`);
+      }
     }
-    const expanded = expandTilde(entry.path.trim());
-    if (!isAbsolute2(expanded)) {
-      throw new Error(
-        "Portfolio workspace paths must be absolute (or start with '~'); use --workspace for relative ad-hoc paths."
-      );
+    if (typeof entry.source !== "string" || entry.source.trim().length === 0) {
+      throw new Error("Each protocol entry needs a non-empty string 'source'.");
+    }
+    if (entry.title !== void 0 && (typeof entry.title !== "string" || entry.title.trim().length === 0)) {
+      throw new Error("A protocol entry 'title' must be a non-empty string when present.");
+    }
+    const expanded = expandTilde2(entry.source.trim());
+    if (!isAbsolute3(expanded)) {
+      throw new Error("Protocol 'source' paths must be absolute (or start with '~').");
+    }
+    const abs = resolve7(expanded);
+    if (seen.has(abs)) {
+      throw new Error("Duplicate protocol source (each source path may appear only once).");
     }
-    const abs = resolve5(expanded);
-    if (seen.has(abs)) continue;
     seen.add(abs);
-    result.push(entry.label !== void 0 ? { path: abs, label: entry.label } : { path: abs });
+    result.push(
+      entry.title !== void 0 ? { source: abs, title: entry.title.trim() } : { source: abs }
+    );
   }
   if (result.length === 0) {
-    throw new Error("~/.basou/portfolio.yaml has no workspaces.");
+    throw new Error("~/.basou/protocols.yaml has no protocols.");
   }
   return result;
 }
 
+// src/commands/protocol.ts
+var PROTOCOL_MARKERS = { start: PROTOCOL_START, end: PROTOCOL_END };
+var MANAGED_NOTE = "<!-- Managed by basou: 'basou protocol sync' regenerates everything between the BASOU:PROTOCOLS markers from ~/.basou/protocols.yaml. Manual edits inside the block are overwritten; edit the source files instead. -->";
+function registerProtocolCommand(program2) {
+  const protocol = program2.command("protocol").description("Manage the basou-managed standing-protocol block in the global CLAUDE.md");
+  protocol.command("sync").description("Render declared protocols into the global CLAUDE.md (creates/updates the block)").option("--config <path>", "Path to protocols.yaml (default ~/.basou/protocols.yaml)").option("--target <path>", "Override the target file (intended for tests)").option("--dry-run", "Print what would change without writing").option("-v, --verbose", "Show error causes").action(async (opts) => {
+    await runProtocolSync(opts);
+  });
+  protocol.command("list").description("List declared protocols and whether the block is installed").option("--config <path>", "Path to protocols.yaml (default ~/.basou/protocols.yaml)").option("--target <path>", "Override the target file (intended for tests)").option("-v, --verbose", "Show error causes").action(async (opts) => {
+    await runProtocolList(opts);
+  });
+  protocol.command("unsync").description("Remove the basou-managed protocol block from the global CLAUDE.md").option("--target <path>", "Override the target file (intended for tests)").option("--dry-run", "Print what would change without writing").option("-v, --verbose", "Show error causes").action(async (opts) => {
+    await runProtocolUnsync(opts);
+  });
+}
+async function runProtocolSync(options) {
+  try {
+    await doRunProtocolSync(options);
+  } catch (error) {
+    renderCliError(error, { verbose: isVerbose(options) });
+    process.exitCode = 1;
+  }
+}
+async function runProtocolList(options) {
+  try {
+    await doRunProtocolList(options);
+  } catch (error) {
+    renderCliError(error, { verbose: isVerbose(options) });
+    process.exitCode = 1;
+  }
+}
+async function runProtocolUnsync(options) {
+  try {
+    await doRunProtocolUnsync(options);
+  } catch (error) {
+    renderCliError(error, { verbose: isVerbose(options) });
+    process.exitCode = 1;
+  }
+}
+async function readProtocolSources(entries) {
+  const out = [];
+  for (const entry of entries) {
+    let content;
+    try {
+      content = await readFile3(entry.source, "utf8");
+    } catch (error) {
+      if (error instanceof Error && error.code === "ENOENT") {
+        throw new Error(
+          "A protocol source file does not exist. Check the 'source' paths in ~/.basou/protocols.yaml.",
+          { cause: error }
+        );
+      }
+      throw new Error("Failed to read a protocol source file.", { cause: error });
+    }
+    for (const line of content.split(/\r?\n/)) {
+      if (line === PROTOCOL_START || line === PROTOCOL_END) {
+        throw new Error(
+          "A protocol source contains a BASOU:PROTOCOLS marker line, which would corrupt the managed block. Remove that line from the source."
+        );
+      }
+    }
+    out.push({ entry, content });
+  }
+  return out;
+}
+function buildBlock(sources) {
+  const sections = sources.map(({ entry, content }) => {
+    const body = content.replace(/\s+$/, "");
+    return entry.title !== void 0 ? `## ${entry.title}
+
+${body}` : body;
+  });
+  return `${MANAGED_NOTE}
+
+${sections.join("\n\n")}
+`;
+}
+function buildTargetBody(existing, block) {
+  const wrapped = `${PROTOCOL_START}
+${block}${PROTOCOL_END}
+`;
+  if (existing === null || existing === "") return wrapped;
+  const section = parseMarkers2(existing, PROTOCOL_MARKERS);
+  switch (section.kind) {
+    case "ok":
+      return `${section.before}${PROTOCOL_START}
+${block}${PROTOCOL_END}${section.after}`;
+    case "no_markers": {
+      const sep = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
+      return `${existing}${sep}${wrapped}`;
+    }
+    default:
+      throw new Error(
+        "The BASOU:PROTOCOLS markers in the target are malformed (a marker is missing, duplicated, or out of order). Fix or remove them, then retry."
+      );
+  }
+}
+async function backupOnce(target, existing) {
+  if (existing === null) return;
+  const bak = `${target}.basou-bak`;
+  const already = await readMarkdownFile5(bak);
+  if (already !== null) return;
+  await writeFileDurable(bak, existing);
+}
+async function doRunProtocolSync(options) {
+  const configPath = options.config ?? DEFAULT_PROTOCOLS_CONFIG_PATH;
+  const target = options.target ?? DEFAULT_TARGET_PATH;
+  const entries = await loadProtocolsConfig(configPath);
+  const sources = await readProtocolSources(entries);
+  const block = buildBlock(sources);
+  await assertNotSymlink(target);
+  const existing = await readMarkdownFile5(target);
+  const newBody = buildTargetBody(existing, block);
+  if (newBody === existing) {
+    console.log(`The basou:protocols block is already up to date (${entries.length} protocol(s)).`);
+    return;
+  }
+  const hadBlock = existing !== null && parseMarkers2(existing, PROTOCOL_MARKERS).kind === "ok";
+  if (options.dryRun === true) {
+    console.log(
+      `[dry-run] Would ${hadBlock ? "update" : "install"} the basou:protocols block (${entries.length} protocol(s)).`
+    );
+    for (const { entry } of sources) {
+      console.log(`  - ${entry.title ?? entry.source}`);
+    }
+    return;
+  }
+  const recheck = await readMarkdownFile5(target);
+  if (recheck !== existing) {
+    throw new Error(
+      "The target changed during sync; aborting so a concurrent edit is not overwritten. Re-run 'basou protocol sync'."
+    );
+  }
+  await backupOnce(target, existing);
+  await writeFileDurable(target, newBody);
+  console.log(
+    `${hadBlock ? "Updated" : "Installed"} the basou:protocols block in the global CLAUDE.md (${entries.length} protocol(s)).`
+  );
+}
+async function doRunProtocolList(options) {
+  const configPath = options.config ?? DEFAULT_PROTOCOLS_CONFIG_PATH;
+  const target = options.target ?? DEFAULT_TARGET_PATH;
+  const entries = await loadProtocolsConfig(configPath);
+  const existing = await readMarkdownFile5(target);
+  const installed = existing !== null && parseMarkers2(existing, PROTOCOL_MARKERS).kind === "ok";
+  console.log(`Declared protocols (${entries.length}):`);
+  for (const entry of entries) {
+    console.log(`  - ${entry.title ?? entry.source}`);
+  }
+  console.log(installed ? "Block: installed in the global CLAUDE.md." : "Block: not installed.");
+}
+async function doRunProtocolUnsync(options) {
+  const target = options.target ?? DEFAULT_TARGET_PATH;
+  await assertNotSymlink(target);
+  const existing = await readMarkdownFile5(target);
+  if (existing === null) {
+    console.log("No target file; nothing to remove.");
+    return;
+  }
+  const newBody = removeMarkerSection(existing, "CLAUDE.md", PROTOCOL_MARKERS);
+  if (newBody === existing) {
+    console.log("No basou:protocols block found; nothing removed.");
+    return;
+  }
+  if (options.dryRun === true) {
+    console.log("[dry-run] Would remove the basou:protocols block from the global CLAUDE.md.");
+    return;
+  }
+  const recheck = await readMarkdownFile5(target);
+  if (recheck !== existing) {
+    throw new Error(
+      "The target changed during unsync; aborting so a concurrent edit is not overwritten. Re-run 'basou protocol unsync'."
+    );
+  }
+  await backupOnce(target, existing);
+  await writeFileDurable(target, newBody);
+  console.log("Removed the basou:protocols block from the global CLAUDE.md.");
+}
+
+// src/commands/refresh.ts
+import { assertBasouRootSafe as assertBasouRootSafe9, basouPaths as basouPaths11, findErrorCode as findErrorCode9 } from "@basou/core";
+import { InvalidArgumentError as InvalidArgumentError3 } from "commander";
+
 // src/commands/refresh-watch.ts
-import { readdir as readdir2, stat as stat2 } from "fs/promises";
-import { homedir as homedir5 } from "os";
-import { join as join6 } from "path";
+import { readdir as readdir2, stat as stat4 } from "fs/promises";
+import { homedir as homedir6 } from "os";
+import { join as join8 } from "path";
 import { findErrorCode as findErrorCode8 } from "@basou/core";
 var DEFAULT_WATCH_INTERVAL_SEC = 30;
 var MIN_WATCH_INTERVAL_SEC = 5;
 var MAX_WATCH_INTERVAL_SEC = 86400;
 function watchedRoots(ctx) {
   return [
-    ctx.codexSessionsDir ?? join6(homedir5(), ".codex", "sessions"),
-    ctx.claudeProjectsDir ?? join6(homedir5(), ".claude", "projects")
+    ctx.codexSessionsDir ?? join8(homedir6(), ".codex", "sessions"),
+    ctx.claudeProjectsDir ?? join8(homedir6(), ".claude", "projects")
   ];
 }
 async function scanSourceLogs(roots) {
@@ -4479,12 +4881,12 @@ async function scanSourceLogs(roots) {
       throw new Error("Failed to read a source log directory", { cause: error });
     }
     for (const entry of entries) {
-      const full = join6(dir, entry.name);
+      const full = join8(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
         try {
-          const info = await stat2(full);
+          const info = await stat4(full);
           out.set(full, { mtimeMs: info.mtimeMs, size: info.size });
         } catch (error) {
           if (findErrorCode8(error, "ENOENT")) continue;
@@ -4586,19 +4988,19 @@ function parseInterval(value) {
   return seconds;
 }
 function abortableSleep(ms, signal) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve11) => {
     if (signal.aborted) {
-      resolve9();
+      resolve11();
       return;
     }
     let timer;
     const onAbort = () => {
       clearTimeout(timer);
-      resolve9();
+      resolve11();
     };
     timer = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve9();
+      resolve11();
     }, ms);
     signal.addEventListener("abort", onAbort, { once: true });
   });
@@ -4689,7 +5091,7 @@ async function doRunRefreshWatch(options, ctx) {
   if (options.force === true) throw new Error("--watch cannot be combined with --force.");
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "refresh");
-  const paths = basouPaths10(repositoryRoot);
+  const paths = basouPaths11(repositoryRoot);
   await assertWorkspaceInitialized8(paths.root);
   const intervalMs = (options.interval ?? DEFAULT_WATCH_INTERVAL_SEC) * 1e3;
   const controller = new AbortController();
@@ -4717,7 +5119,7 @@ async function doRunRefreshWatch(options, ctx) {
 async function computeRefresh(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "refresh");
-  const paths = basouPaths10(repositoryRoot);
+  const paths = basouPaths11(repositoryRoot);
   await assertWorkspaceInitialized8(paths.root);
   const nowIso = (ctx.nowProvider?.() ?? /* @__PURE__ */ new Date()).toISOString();
   return refreshAll({
@@ -4797,10 +5199,10 @@ async function assertWorkspaceInitialized8(basouRoot) {
 }
 
 // src/commands/report.ts
-import { isAbsolute as isAbsolute3, resolve as resolve6 } from "path";
+import { isAbsolute as isAbsolute4, resolve as resolve8 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe10,
-  basouPaths as basouPaths11,
+  basouPaths as basouPaths12,
   findErrorCode as findErrorCode10,
   renderReport,
   resolveRepositoryRoot as resolveRepositoryRoot8,
@@ -4825,7 +5227,7 @@ async function runReportGenerate(options, ctx = {}) {
 async function doRunReportGenerate(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForReport(cwd);
-  const paths = basouPaths11(repositoryRoot);
+  const paths = basouPaths12(repositoryRoot);
   await assertWorkspaceInitialized9(paths.root);
   const nowIso = (ctx.nowProvider?.() ?? /* @__PURE__ */ new Date()).toISOString();
   const result = await renderReport({
@@ -4837,7 +5239,7 @@ async function doRunReportGenerate(options, ctx) {
     onTaskSkip: (taskId, reason) => printTaskSkip(taskId, reason)
   });
   if (options.out !== void 0) {
-    const outPath = isAbsolute3(options.out) ? options.out : resolve6(cwd, options.out);
+    const outPath = isAbsolute4(options.out) ? options.out : resolve8(cwd, options.out);
     await writeMarkdownFile6(outPath, result.body);
     const { sessions, decisions, tasks } = result.data;
     console.error(
@@ -4876,7 +5278,7 @@ async function assertWorkspaceInitialized9(basouRoot) {
 
 // src/commands/review-gaps.ts
 import {
-  basouPaths as basouPaths12,
+  basouPaths as basouPaths13,
   findReviewGaps
 } from "@basou/core";
 import { InvalidArgumentError as InvalidArgumentError4 } from "commander";
@@ -4917,7 +5319,7 @@ async function runReviewGaps(options, ctx = {}) {
 async function doRunReviewGaps(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "review-gaps");
-  const paths = basouPaths12(repositoryRoot);
+  const paths = basouPaths13(repositoryRoot);
   const nowIso = (ctx.nowProvider?.() ?? /* @__PURE__ */ new Date()).toISOString();
   const summary = await findReviewGaps({
     paths,
@@ -5000,12 +5402,12 @@ function renderReviewGaps(summary) {
 
 // src/commands/run.ts
 import { mkdir as mkdir2 } from "fs/promises";
-import { homedir as homedir6 } from "os";
-import { join as join7 } from "path";
+import { homedir as homedir7 } from "os";
+import { join as join9 } from "path";
 import {
   acquireLock as acquireLock5,
   assertBasouRootSafe as assertBasouRootSafe11,
-  basouPaths as basouPaths13,
+  basouPaths as basouPaths14,
   ChildProcessRunner as ChildProcessRunner2,
   claudeCodeAdapterMetadata,
   appendChainedEvent as coreAppendChainedEvent2,
@@ -5014,8 +5416,8 @@ import {
   getSnapshot as getSnapshot2,
   overwriteYamlFile as overwriteYamlFile2,
   prefixedUlid as prefixedUlid4,
-  readManifest as readManifest6,
-  readYamlFile as readYamlFile4,
+  readManifest as readManifest7,
+  readYamlFile as readYamlFile5,
   resolveClaudeCodeCommand,
   resolveRepositoryRoot as resolveRepositoryRoot9,
   SessionSchema as SessionSchema2,
@@ -5050,17 +5452,17 @@ async function runClaudeCode(args, options, ctx = {}) {
   const { command } = await resolveCommand();
   const cwd = options.cwd ?? process.cwd();
   const repoRoot = await resolveRepositoryRootForRun(cwd);
-  const paths = basouPaths13(repoRoot);
+  const paths = basouPaths14(repoRoot);
   await assertBasouRootSafe11(paths.root);
-  const manifest = await readManifest6(paths);
+  const manifest = await readManifest7(paths);
   const sessionId = prefixedUlid4("ses");
-  const sessionDir = join7(paths.sessions, sessionId);
+  const sessionDir = join9(paths.sessions, sessionId);
   await mkdir2(sessionDir, { recursive: true });
   const appendEvent = ctx.appendEvent ?? (async (_sessionDir, event) => {
     await coreAppendChainedEvent2(paths, sessionId, event);
   });
   const startedAt = now().toISOString();
-  const sessionYamlPath = join7(sessionDir, "session.yaml");
+  const sessionYamlPath = join9(sessionDir, "session.yaml");
   const session = buildInitialSession2({
     id: sessionId,
     command,
@@ -5186,7 +5588,7 @@ async function runClaudeCode(args, options, ctx = {}) {
   const rawRelated = computeRelatedFiles(preSnapshot, postSnapshot, diff);
   const relatedFiles = sanitizeRelatedFiles(rawRelated, {
     workingDirectory: repoRoot,
-    homedir: homedir6()
+    homedir: homedir7()
   }).sanitized;
   const finalStatus = decideFinalStatus2(result, signalReceived);
   await appendEvent(sessionDir, {
@@ -5330,7 +5732,7 @@ function buildInitialSession2(input) {
       source: { ...claudeCodeAdapterMetadata },
       started_at: input.startedAt,
       status: "initialized",
-      working_directory: sanitizeWorkingDirectory2(input.cwd, { homedir: homedir6() }),
+      working_directory: sanitizeWorkingDirectory2(input.cwd, { homedir: homedir7() }),
       invocation: {
         command: input.command,
         args: [...input.args],
@@ -5342,7 +5744,7 @@ function buildInitialSession2(input) {
   };
 }
 async function mutateSessionYaml2(filePath, mutator) {
-  const raw = await readYamlFile4(filePath);
+  const raw = await readYamlFile5(filePath);
   const parsed = SessionSchema2.parse(raw);
   mutator(parsed);
   const validated = SessionSchema2.parse(parsed);
@@ -5402,20 +5804,20 @@ async function resolveRepositoryRootForRun(cwd) {
 }
 
 // src/commands/session.ts
-import { readFile as readFile3 } from "fs/promises";
-import { basename as basename4, isAbsolute as isAbsolute4, join as join8, relative as relative3 } from "path";
+import { readFile as readFile4 } from "fs/promises";
+import { basename as basename6, isAbsolute as isAbsolute5, join as join10, relative as relative3 } from "path";
 import {
   acquireLock as acquireLock6,
   appendEventToExistingSession as appendEventToExistingSession3,
   assertBasouRootSafe as assertBasouRootSafe12,
-  basouPaths as basouPaths14,
+  basouPaths as basouPaths15,
   enumerateSessionDirs as enumerateSessionDirs2,
   findErrorCode as findErrorCode11,
   importSessionFromJson as importSessionFromJson2,
   loadSessionEntries,
   readAllEvents,
-  readManifest as readManifest7,
-  readYamlFile as readYamlFile5,
+  readManifest as readManifest8,
+  readYamlFile as readYamlFile6,
   rechainSessionInPlace,
   resolveSessionId as resolveSessionId3,
   resolveTaskId,
@@ -5473,7 +5875,7 @@ async function runSessionList(options, ctx = {}) {
 async function doRunSessionList(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "list");
-  const paths = basouPaths14(repositoryRoot);
+  const paths = basouPaths15(repositoryRoot);
   await assertWorkspaceInitialized10(paths.root);
   const now = /* @__PURE__ */ new Date();
   const records = (await loadSessionEntries(paths, {
@@ -5525,14 +5927,14 @@ async function runSessionShow(idInput, options, ctx = {}) {
 async function doRunSessionShow(idInput, options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "show");
-  const paths = basouPaths14(repositoryRoot);
+  const paths = basouPaths15(repositoryRoot);
   await assertWorkspaceInitialized10(paths.root);
   const sessionId = await resolveSessionId3(paths, idInput);
-  const sessionDir = join8(paths.sessions, sessionId);
-  const sessionYamlPath = join8(sessionDir, "session.yaml");
+  const sessionDir = join10(paths.sessions, sessionId);
+  const sessionYamlPath = join10(sessionDir, "session.yaml");
   let session;
   try {
-    const raw = await readYamlFile5(sessionYamlPath);
+    const raw = await readYamlFile6(sessionYamlPath);
     session = SessionSchema3.parse(raw);
   } catch (error) {
     if (findErrorCode11(error, "ENOENT")) {
@@ -5650,7 +6052,7 @@ function formatSessionWork(session, events, now) {
 }
 function formatWorkingDir(workingDir, repositoryRoot, options) {
   if (options.fullPath === true) return workingDir;
-  if (!isAbsolute4(workingDir)) {
+  if (!isAbsolute5(workingDir)) {
     if (workingDir === ".") return "<repository_root>";
     return workingDir;
   }
@@ -5813,9 +6215,9 @@ async function runSessionImport(options, ctx = {}) {
 async function doRunSessionImport(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "import");
-  const paths = basouPaths14(repositoryRoot);
+  const paths = basouPaths15(repositoryRoot);
   await assertWorkspaceInitialized10(paths.root);
-  const manifest = await readManifest7(paths);
+  const manifest = await readManifest8(paths);
   const rawBody = await readInputFile(options.from);
   const json = parseJsonStrict(rawBody);
   const parsed = SessionImportPayloadSchema2.safeParse(json);
@@ -5842,7 +6244,7 @@ async function doRunSessionImport(options, ctx) {
 }
 async function readInputFile(path) {
   try {
-    return await readFile3(path, "utf8");
+    return await readFile4(path, "utf8");
   } catch (error) {
     if (findErrorCode11(error, "ENOENT")) {
       throw new Error("Import source not found", { cause: error });
@@ -5900,7 +6302,7 @@ function printSessionImportResult(options, result) {
     return;
   }
   console.log(
-    `Imported session ${sid} (${result.eventCount} events) from ${basename4(options.from)}`
+    `Imported session ${sid} (${result.eventCount} events) from ${basename6(options.from)}`
   );
 }
 var NOTE_BODY_PREVIEW_LIMIT = 80;
@@ -5927,7 +6329,7 @@ async function doRunSessionNote(sessionIdInput, options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "note");
-  const paths = basouPaths14(repositoryRoot);
+  const paths = basouPaths15(repositoryRoot);
   await assertWorkspaceInitialized10(paths.root);
   const sessionId = await resolveSessionId3(paths, sessionIdInput);
   const body = hasBody ? options.body : await readNoteFile(options.fromFile);
@@ -5959,7 +6361,7 @@ async function doRunSessionNote(sessionIdInput, options, ctx) {
 }
 async function readNoteFile(path) {
   try {
-    return await readFile3(path, "utf8");
+    return await readFile4(path, "utf8");
   } catch (error) {
     if (findErrorCode11(error, "ENOENT")) {
       throw new Error("Note source not found", { cause: error });
@@ -6009,7 +6411,7 @@ async function doRunSessionRechain(options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "rechain");
-  const paths = basouPaths14(repositoryRoot);
+  const paths = basouPaths15(repositoryRoot);
   await assertWorkspaceInitialized10(paths.root);
   const sessionIds = options.session !== void 0 ? [await resolveSessionId3(paths, options.session)] : await enumerateSessionDirs2(paths);
   const dryRun = options.dryRun === true;
@@ -6064,7 +6466,7 @@ function renderRechainRow(row, dryRun) {
 // src/commands/stats.ts
 import {
   assertBasouRootSafe as assertBasouRootSafe13,
-  basouPaths as basouPaths15,
+  basouPaths as basouPaths16,
   computeWorkStats,
   findErrorCode as findErrorCode12,
   resolveRepositoryRoot as resolveRepositoryRoot10
@@ -6085,7 +6487,7 @@ async function runStats(options, ctx = {}) {
 async function doRunStats(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForStats(cwd);
-  const paths = basouPaths15(repositoryRoot);
+  const paths = basouPaths16(repositoryRoot);
   await assertWorkspaceInitialized11(paths.root);
   const now = ctx.nowProvider?.() ?? /* @__PURE__ */ new Date();
   const result = await computeWorkStats({
@@ -6194,10 +6596,10 @@ async function assertWorkspaceInitialized11(basouRoot) {
 // src/commands/status.ts
 import {
   assertBasouRootSafe as assertBasouRootSafe14,
-  basouPaths as basouPaths16,
+  basouPaths as basouPaths17,
   buildStatusSnapshot,
   findErrorCode as findErrorCode13,
-  readManifest as readManifest8,
+  readManifest as readManifest9,
   resolveRepositoryRoot as resolveRepositoryRoot11,
   writeStatus
 } from "@basou/core";
@@ -6217,7 +6619,7 @@ async function runStatus(options, ctx = {}) {
 async function doRunStatus(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForStatus(cwd);
-  const paths = basouPaths16(repositoryRoot);
+  const paths = basouPaths17(repositoryRoot);
   try {
     await assertBasouRootSafe14(paths.root);
   } catch (error) {
@@ -6228,7 +6630,7 @@ async function doRunStatus(options, ctx) {
   }
   let manifest;
   try {
-    manifest = await readManifest8(paths);
+    manifest = await readManifest9(paths);
   } catch (error) {
     if (findErrorCode13(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
@@ -6266,12 +6668,12 @@ async function resolveRepositoryRootForStatus(cwd) {
 }
 
 // src/commands/task.ts
-import { readFile as readFile4 } from "fs/promises";
-import { join as join9 } from "path";
+import { readFile as readFile5 } from "fs/promises";
+import { join as join11 } from "path";
 import {
   archiveTask,
   assertBasouRootSafe as assertBasouRootSafe15,
-  basouPaths as basouPaths17,
+  basouPaths as basouPaths18,
   createTaskWithEvent,
   deleteTask,
   editTask,
@@ -6280,7 +6682,7 @@ import {
   loadSessionEntries as loadSessionEntries2,
   loadTaskEntries,
   prefixedUlid as prefixedUlid5,
-  readManifest as readManifest9,
+  readManifest as readManifest10,
   readTaskFile,
   readTaskFileWithArchiveFallback,
   reconcileAllTasks,
@@ -6373,7 +6775,7 @@ async function doRunTaskNew(options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "new");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
   const description = options.description !== void 0 ? options.description : options.fromFile !== void 0 ? await readDescriptionFile(options.fromFile) : "";
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
@@ -6408,7 +6810,7 @@ async function doRunTaskNew(options, ctx) {
     });
     return;
   }
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const result = await createTaskWithEvent({
     mode: "ad-hoc",
     paths,
@@ -6482,7 +6884,7 @@ async function runTaskList(options, ctx = {}) {
 async function doRunTaskList(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "list");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
   const entries = await loadTaskEntries(paths, {
     onSkip: (id, reason) => printTaskSkip(id, reason)
@@ -6586,7 +6988,7 @@ async function runTaskShow(idInput, options, ctx = {}) {
 async function doRunTaskShow(idInput, options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "show");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
   const taskId = await resolveTaskId2(paths, idInput, { includeArchived: true });
   const { doc, archived } = await readTaskFileWithArchiveFallback(paths, taskId);
@@ -6594,7 +6996,7 @@ async function doRunTaskShow(idInput, options, ctx) {
   const events = [];
   const linkedSessionIds = new Set(doc.task.task.linked_sessions);
   for (const s of sessions) {
-    const sessionDir = join9(paths.sessions, s.sessionId);
+    const sessionDir = join11(paths.sessions, s.sessionId);
     try {
       for await (const ev of replayEvents2(sessionDir, {
         onWarning: (w) => printReplayWarning(w, s.sessionId)
@@ -6730,7 +7132,7 @@ async function doRunTaskStatus(taskIdInput, newStatusInput, options, ctx) {
   const newStatus = parseTaskStatusPositional(newStatusInput);
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "status");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
@@ -6756,7 +7158,7 @@ async function doRunTaskStatus(taskIdInput, newStatusInput, options, ctx) {
     });
     return;
   }
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const result = await updateTaskStatusWithEvent({
     mode: "ad-hoc",
     paths,
@@ -6807,9 +7209,9 @@ async function runTaskReconcile(options, ctx = {}) {
 async function doRunTaskReconcile(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "reconcile");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const nowProvider = ctx.nowProvider ?? (() => /* @__PURE__ */ new Date());
   const write = options.write === true;
   const verbose = isVerbose(options);
@@ -6987,9 +7389,9 @@ async function doRunTaskRefreshLinkage(taskIdInput, options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "refresh-linkage");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   const nowProvider = ctx.nowProvider ?? (() => /* @__PURE__ */ new Date());
   const write = options.write === true;
@@ -7067,9 +7469,9 @@ async function doRunTaskEdit(taskIdInput, options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "edit");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
   const occurredAt = now.toISOString();
@@ -7123,9 +7525,9 @@ async function doRunTaskDelete(taskIdInput, options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "delete");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   if (options.yes !== true) {
     await confirmDestructiveAction("delete", taskId);
@@ -7168,9 +7570,9 @@ async function doRunTaskArchive(taskIdInput, options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "archive");
-  const paths = basouPaths17(repositoryRoot);
+  const paths = basouPaths18(repositoryRoot);
   await assertWorkspaceInitialized12(paths.root);
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   if (options.yes !== true) {
     await confirmDestructiveAction("archive", taskId);
@@ -7282,7 +7684,7 @@ function parsePositiveInt2(raw) {
 }
 async function readDescriptionFile(path) {
   try {
-    return await readFile4(path, "utf8");
+    return await readFile5(path, "utf8");
   } catch (error) {
     if (findErrorCode14(error, "ENOENT")) {
       throw new Error("Description source not found", { cause: error });
@@ -7399,7 +7801,7 @@ function maxLen3(values, floor) {
 // src/commands/verify.ts
 import {
   assertBasouRootSafe as assertBasouRootSafe16,
-  basouPaths as basouPaths18,
+  basouPaths as basouPaths19,
   enumerateSessionDirs as enumerateSessionDirs3,
   findErrorCode as findErrorCode15,
   resolveRepositoryRoot as resolveRepositoryRoot13,
@@ -7425,7 +7827,7 @@ async function doRunVerify(options, ctx) {
   }
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForVerify(cwd);
-  const paths = basouPaths18(repositoryRoot);
+  const paths = basouPaths19(repositoryRoot);
   await assertWorkspaceInitialized13(paths.root);
   const sessionIds = options.session !== void 0 ? [await resolveSessionId5(paths, options.session)] : await enumerateSessionDirs3(paths);
   const rows = [];
@@ -7497,36 +7899,36 @@ async function assertWorkspaceInitialized13(basouRoot) {
 // src/commands/view.ts
 import { spawn } from "child_process";
 import { createHash } from "crypto";
-import { basename as basename5, resolve as resolve8 } from "path";
+import { basename as basename7, resolve as resolve10 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe17,
-  basouPaths as basouPaths19,
+  basouPaths as basouPaths20,
   findErrorCode as findErrorCode17,
-  readManifest as readManifest12,
+  readManifest as readManifest13,
   resolveRepositoryRoot as resolveRepositoryRoot14
 } from "@basou/core";
 import { InvalidArgumentError as InvalidArgumentError7 } from "commander";
 
 // src/lib/portfolio-safety.ts
 import { execFile } from "child_process";
-import { lstat, realpath } from "fs/promises";
-import { isAbsolute as isAbsolute5, join as join10, relative as relative4, resolve as resolve7 } from "path";
+import { lstat as lstat2, realpath as realpath2 } from "fs/promises";
+import { isAbsolute as isAbsolute6, join as join12, relative as relative4, resolve as resolve9 } from "path";
 import { promisify } from "util";
-import { readManifest as readManifest10 } from "@basou/core";
+import { readManifest as readManifest11 } from "@basou/core";
 var execFileAsync = promisify(execFile);
 function errorCode(error) {
   return error instanceof Error ? error.code : void 0;
 }
 async function canonical(p) {
   try {
-    return await realpath(p);
+    return await realpath2(p);
   } catch {
-    return resolve7(p);
+    return resolve9(p);
   }
 }
 function isInside(child, parent) {
   const rel = relative4(parent, child);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute5(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
 }
 function isBasouPath(p) {
   return p === ".basou" || p.startsWith(".basou/") || p.includes("/.basou/") || p.endsWith("/.basou");
@@ -7534,7 +7936,7 @@ function isBasouPath(p) {
 async function inspectRepo(repoPath) {
   let hasEntry = false;
   try {
-    await lstat(join10(repoPath, ".basou"));
+    await lstat2(join12(repoPath, ".basou"));
     hasEntry = true;
   } catch (error) {
     if (errorCode(error) !== "ENOENT") {
@@ -7565,7 +7967,7 @@ async function checkPortfolioSafety(workspaces) {
     const wsReal = await canonical(ws.repoRoot);
     let sourceRoots = [];
     try {
-      const manifest = await readManifest10(ws.paths);
+      const manifest = await readManifest11(ws.paths);
       sourceRoots = manifest.import?.source_roots ?? [];
     } catch (error) {
       if (error instanceof Error && error.message === "YAML file not found") {
@@ -7583,7 +7985,7 @@ async function checkPortfolioSafety(workspaces) {
     }
     const monitored = /* @__PURE__ */ new Map();
     for (const root of sourceRoots) {
-      const display = resolve7(ws.repoRoot, root);
+      const display = resolve9(ws.repoRoot, root);
       const real = await canonical(display);
       if (real !== wsReal) monitored.set(real, display);
     }
@@ -7635,7 +8037,7 @@ function formatSafetyReport(result) {
 
 // src/lib/view-server.ts
 import { createServer } from "http";
-import { join as join11 } from "path";
+import { join as join13 } from "path";
 import {
   computeWorkStats as computeWorkStats2,
   enumerateApprovals as enumerateApprovals2,
@@ -7645,8 +8047,8 @@ import {
   loadSessionEntries as loadSessionEntries3,
   loadTaskEntries as loadTaskEntries2,
   readAllEvents as readAllEvents2,
-  readManifest as readManifest11,
-  readMarkdownFile as readMarkdownFile5,
+  readManifest as readManifest12,
+  readMarkdownFile as readMarkdownFile6,
   readSessionYaml as readSessionYaml3,
   readTaskFile as readTaskFile2,
   renderDecisions as renderDecisions3,
@@ -8292,7 +8694,7 @@ function startViewServer(opts) {
   };
   let boundPort = port;
   const getPort = () => boundPort;
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve11, reject) => {
     const server = createServer((req, res) => {
       handleRequest(req, res, deps, getPort, runExclusive).catch((error) => {
         sendError(res, error instanceof HttpError ? error.status : 500, pathlessMessage(error));
@@ -8303,7 +8705,7 @@ function startViewServer(opts) {
       const address = server.address();
       boundPort = isAddressInfo(address) ? address.port : port;
       server.off("error", reject);
-      resolve9({
+      resolve11({
         url: `http://${host}:${boundPort}`,
         port: boundPort,
         close: () => closeServer(server)
@@ -8315,8 +8717,8 @@ function isAddressInfo(value) {
   return value !== null && typeof value === "object";
 }
 function closeServer(server) {
-  return new Promise((resolve9) => {
-    server.close(() => resolve9());
+  return new Promise((resolve11) => {
+    server.close(() => resolve11());
     server.closeAllConnections();
   });
 }
@@ -8533,7 +8935,7 @@ async function captureStaleness(ws, nowIso) {
 async function overview(ws, nowProvider) {
   let manifest;
   try {
-    manifest = await readManifest11(ws.paths);
+    manifest = await readManifest12(ws.paths);
   } catch (error) {
     if (findErrorCode16(error, "ENOENT")) {
       return { initialized: false, repoRoot: ws.repoRoot };
@@ -8590,7 +8992,7 @@ async function sessionDetail(ws, sessionId) {
     throw error;
   }
   try {
-    const events = await readAllEvents2(join11(ws.paths.sessions, sessionId));
+    const events = await readAllEvents2(join13(ws.paths.sessions, sessionId));
     return { session, events };
   } catch {
     return { session, events: [], degraded: true };
@@ -8612,7 +9014,7 @@ async function taskDetail(ws, taskId) {
   }
 }
 async function decisionsView(ws, nowProvider) {
-  const fromDisk = await readMarkdownFile5(ws.paths.files.decisions);
+  const fromDisk = await readMarkdownFile6(ws.paths.files.decisions);
   if (fromDisk !== null) {
     return { body: fromDisk, fromDisk: true };
   }
@@ -8635,7 +9037,7 @@ async function approvalsView(ws, nowProvider) {
   return { pending: await toViews(ids.pending), resolved: await toViews(ids.resolved) };
 }
 async function handoffView(ws, nowProvider) {
-  const fromDisk = await readMarkdownFile5(ws.paths.files.handoff);
+  const fromDisk = await readMarkdownFile6(ws.paths.files.handoff);
   if (fromDisk !== null) {
     return { body: fromDisk, fromDisk: true };
   }
@@ -8804,18 +9206,18 @@ async function doRunView(options, ctx) {
 }
 async function buildSingleDeps(ctx, cwd) {
   const repositoryRoot = await resolveRepositoryRootForView(cwd);
-  const paths = basouPaths19(repositoryRoot);
+  const paths = basouPaths20(repositoryRoot);
   await assertWorkspaceInitialized14(paths.root);
   const entry = await buildWorkspaceEntry(repositoryRoot, ctx);
   return { workspaces: [entry], mode: "single", nowProvider: nowProviderOf(ctx) };
 }
 async function buildPortfolioDeps(workspaceFlags, ctx, cwd) {
-  const specs = workspaceFlags.length > 0 ? workspaceFlags.map((p) => ({ path: resolve8(cwd, p) })) : await loadPortfolioConfig(ctx.portfolioConfigPath);
+  const specs = workspaceFlags.length > 0 ? workspaceFlags.map((p) => ({ path: resolve10(cwd, p) })) : await loadPortfolioConfig(ctx.portfolioConfigPath);
   const entries = [];
   const seenPath = /* @__PURE__ */ new Set();
   const seenKey = /* @__PURE__ */ new Set();
   for (const spec of specs) {
-    const repoRoot = resolve8(spec.path);
+    const repoRoot = resolve10(spec.path);
     if (seenPath.has(repoRoot)) continue;
     seenPath.add(repoRoot);
     const entry = await buildWorkspaceEntry(repoRoot, ctx, spec.label);
@@ -8828,14 +9230,14 @@ async function buildPortfolioDeps(workspaceFlags, ctx, cwd) {
   return { workspaces: entries, mode: "portfolio", nowProvider: nowProviderOf(ctx) };
 }
 async function buildWorkspaceEntry(repoRoot, ctx, labelOverride) {
-  const paths = basouPaths19(repoRoot);
+  const paths = basouPaths20(repoRoot);
   const importCtx = {
     cwd: repoRoot,
     ...ctx.claudeProjectsDir !== void 0 ? { claudeProjectsDir: ctx.claudeProjectsDir } : {},
     ...ctx.codexSessionsDir !== void 0 ? { codexSessionsDir: ctx.codexSessionsDir } : {}
   };
   try {
-    const manifest = await readManifest12(paths);
+    const manifest = await readManifest13(paths);
     return {
       key: manifest.workspace.id,
       label: labelOverride ?? manifest.workspace.name,
@@ -8848,7 +9250,7 @@ async function buildWorkspaceEntry(repoRoot, ctx, labelOverride) {
     const notFound = error instanceof Error && error.message === "YAML file not found";
     return {
       key: `ws-${createHash("sha1").update(repoRoot).digest("hex").slice(0, 12)}`,
-      label: labelOverride ?? basename5(repoRoot),
+      label: labelOverride ?? basename7(repoRoot),
       paths,
       repoRoot,
       importCtx,
@@ -8887,7 +9289,7 @@ function openInBrowser(url, override) {
   }
 }
 function waitForShutdown(signal) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve11) => {
     const cleanup = () => {
       process.off("SIGINT", onSignal);
       process.off("SIGTERM", onSignal);
@@ -8895,18 +9297,18 @@ function waitForShutdown(signal) {
     };
     const onSignal = () => {
       cleanup();
-      resolve9();
+      resolve11();
     };
     const onAbort = () => {
       cleanup();
-      resolve9();
+      resolve11();
     };
     process.on("SIGINT", onSignal);
     process.on("SIGTERM", onSignal);
     if (signal !== void 0) {
       if (signal.aborted) {
         cleanup();
-        resolve9();
+        resolve11();
         return;
       }
       signal.addEventListener("abort", onAbort);
@@ -8963,6 +9365,7 @@ function buildProgram() {
   registerOrientCommand(program2);
   registerReviewGapsCommand(program2);
   registerProjectCommand(program2);
+  registerProtocolCommand(program2);
   return program2;
 }