@basou/cli 0.15.0 → 0.17.0

package/dist/program.js

@@ -1804,13 +1804,15 @@ async function assertWorkspaceInitialized4(basouRoot) {
 import { createReadStream } from "fs";
 import { readdir, readFile as readFile2, rm, stat as stat2 } from "fs/promises";
 import { homedir as homedir4 } from "os";
-import { basename as basename2, join as join4, resolve as resolve4 } from "path";
+import { basename as basename2, dirname, join as join4, resolve as resolve4 } from "path";
 import { createInterface } from "readline";
 import {
+  AGENT_INFRA_DIRS,
   assertBasouRootSafe as assertBasouRootSafe6,
   basouPaths as basouPaths7,
   CLAUDE_IMPORT_SOURCE,
   CODEX_IMPORT_SOURCE,
+  classifyFilesBySourceRoot,
   claudeTranscriptToImportPayload,
   codexRolloutToImportPayload,
   enumerateSessionDirs,
@@ -1908,7 +1910,15 @@ async function doRunImportClaudeCode(options, ctx) {
       }
     };
   });
-  await importDerivedSessions(paths, manifest, options, CLAUDE_IMPORT_SOURCE, candidates);
+  await importDerivedSessions(
+    paths,
+    manifest,
+    options,
+    CLAUDE_IMPORT_SOURCE,
+    candidates,
+    projectPaths,
+    hasDeclaredBoundary(options, manifest)
+  );
 }
 async function doRunImportCodex(options, ctx) {
   assertSelector(options);
@@ -1933,7 +1943,18 @@ async function doRunImportCodex(options, ctx) {
       });
     }
   }));
-  await importDerivedSessions(paths, manifest, options, CODEX_IMPORT_SOURCE, candidates);
+  await importDerivedSessions(
+    paths,
+    manifest,
+    options,
+    CODEX_IMPORT_SOURCE,
+    candidates,
+    projectPaths,
+    hasDeclaredBoundary(options, manifest)
+  );
+}
+function hasDeclaredBoundary(options, manifest) {
+  return (options.project?.length ?? 0) > 0 || (manifest.import?.source_roots?.length ?? 0) > 0;
 }
 function assertSelector(options) {
   if (options.session !== void 0 && options.all === true) {
@@ -1951,9 +1972,25 @@ async function resolveImportTarget(ctx) {
   const manifest = await readManifest4(paths);
   return { repositoryRoot, paths, manifest };
 }
-async function importDerivedSessions(paths, manifest, options, sourceKind, candidates) {
+async function importDerivedSessions(paths, manifest, options, sourceKind, candidates, projectPaths, boundaryDeclared) {
   const existingByExternalId = await loadExistingByExternalId(paths, sourceKind);
   const seenThisRun = /* @__PURE__ */ new Set();
+  const crossProjectCheck = boundaryDeclared;
+  const crossProject = [];
+  const noteCrossProject = async (externalId, payload) => {
+    if (!crossProjectCheck) return;
+    try {
+      const scope = await classifyFilesBySourceRoot({
+        files: payload.session.related_files ?? [],
+        workingDirectory: payload.session.working_directory,
+        sourceRoots: projectPaths,
+        masterRoot: dirname(paths.root),
+        extraInRoot: AGENT_INFRA_DIRS
+      });
+      if (scope.outOfRoot.length > 0) crossProject.push({ externalId, outOfRoot: scope.outOfRoot });
+    } catch {
+    }
+  };
   const results = [];
   const counts = {
     skippedNoAction: 0,
@@ -2010,6 +2047,7 @@ async function importDerivedSessions(paths, manifest, options, sourceKind, candi
       }
       counts.reimported++;
       seenThisRun.add(externalId);
+      await noteCrossProject(externalId, payload2);
       continue;
     }
     const payload = validate(await toPayload());
@@ -2031,10 +2069,21 @@ async function importDerivedSessions(paths, manifest, options, sourceKind, candi
     results.push(result);
     seenThisRun.add(externalId);
     sanitizedPaths += result.pathSanitizeReport.relatedFiles + (result.pathSanitizeReport.workingDirectoryRewritten ? 1 : 0);
+    await noteCrossProject(externalId, payload);
   }
   if (sanitizedPaths > 0) {
     console.error(`Imported sessions: ${sanitizedPaths} path(s) sanitized`);
   }
+  if (crossProject.length > 0) {
+    const PATH_SAMPLE = 5;
+    for (const { externalId, outOfRoot } of crossProject) {
+      const sample = outOfRoot.slice(0, PATH_SAMPLE).join(", ");
+      const more = outOfRoot.length > PATH_SAMPLE ? ` (... +${outOfRoot.length - PATH_SAMPLE} more)` : "";
+      console.error(
+        `basou: session ${externalId} edited ${outOfRoot.length} file(s) outside this project's source_roots: ${sample}${more} \u2014 they may belong to another project.`
+      );
+    }
+  }
   printImportResult(options, results, counts);
 }
 async function classifyReimport(priors, sourcePath, externalId, counts) {
@@ -2620,6 +2669,62 @@ import {
   writeMarkdownFile as writeMarkdownFile4
 } from "@basou/core";
 
+// src/lib/hosts-config.ts
+import { homedir as homedir5 } from "os";
+import { isAbsolute as isAbsolute2, join as join5, resolve as resolve6 } from "path";
+import { readYamlFile as readYamlFile4 } from "@basou/core";
+var DEFAULT_HOSTS_CONFIG_PATH = join5(homedir5(), ".basou", "hosts.yaml");
+function expandTilde2(p) {
+  if (p === "~") return homedir5();
+  if (p.startsWith("~/")) return join5(homedir5(), p.slice(2));
+  return p;
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function loadHostsConfig(configPath = DEFAULT_HOSTS_CONFIG_PATH) {
+  let raw;
+  try {
+    raw = await readYamlFile4(configPath);
+  } catch (error) {
+    if (error instanceof Error && error.message === "YAML file not found") {
+      return null;
+    }
+    if (error instanceof Error && error.message === "Failed to parse YAML content") {
+      throw new Error("~/.basou/hosts.yaml is not valid YAML.");
+    }
+    throw error;
+  }
+  if (!isRecord2(raw) || !Array.isArray(raw.hosts)) {
+    throw new Error("~/.basou/hosts.yaml must contain a 'hosts:' list.");
+  }
+  const seenPaths = /* @__PURE__ */ new Set();
+  const seenLabels = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const entry of raw.hosts) {
+    if (!isRecord2(entry) || typeof entry.label !== "string" || entry.label.trim().length === 0) {
+      throw new Error("Each host needs a non-empty string 'label'.");
+    }
+    const label = entry.label.trim();
+    if (typeof entry.path !== "string" || entry.path.trim().length === 0) {
+      throw new Error("Each host needs a non-empty string 'path'.");
+    }
+    const expanded = expandTilde2(entry.path.trim());
+    if (!isAbsolute2(expanded)) {
+      throw new Error("Host paths must be absolute (or start with '~').");
+    }
+    const abs = resolve6(expanded);
+    if (seenPaths.has(abs)) continue;
+    if (seenLabels.has(label)) {
+      throw new Error(`Duplicate host label '${label}'; each host needs a distinct label.`);
+    }
+    seenPaths.add(abs);
+    seenLabels.add(label);
+    result.push({ label, path: abs });
+  }
+  return result;
+}
+
 // src/lib/provenance-actions.ts
 import {
   readMarkdownFile as readMarkdownFile3,
@@ -2826,14 +2931,29 @@ async function doRunOrient(options, ctx) {
   if (ctx.claudeProjectsDir !== void 0) probeCtx.claudeProjectsDir = ctx.claudeProjectsDir;
   if (ctx.codexSessionsDir !== void 0) probeCtx.codexSessionsDir = ctx.codexSessionsDir;
   const staleness = await probeStaleness({ ctx: probeCtx, paths, nowIso });
+  let federatedRoots = [];
+  try {
+    const hosts = await loadHostsConfig(ctx.hostsConfigPath);
+    if (hosts !== null) {
+      federatedRoots = hosts.map((h) => ({ paths: basouPaths9(h.path), host: h.label }));
+    }
+  } catch (error) {
+    console.error(
+      `basou: ignoring ~/.basou/hosts.yaml (${error instanceof Error ? error.message : String(error)}); showing local sessions only.`
+    );
+  }
   const result = await renderOrientation2({
     paths,
     nowIso,
     staleness,
     verbose: options.verbose === true,
+    federatedRoots,
     onWarning: (w, sid) => printReplayWarning(w, sid),
     onSessionSkip: (sid, reason) => printSessionSkip(sid, reason),
-    onTaskSkip: (taskId, reason) => printTaskSkip(taskId, reason)
+    onTaskSkip: (taskId, reason) => printTaskSkip(taskId, reason),
+    onHostUnavailable: (host, error) => console.error(
+      `basou: host '${host}' mirror unreadable (${error instanceof Error ? error.message : String(error)}); skipping it.`
+    )
   });
   await writeMarkdownFile4(paths.files.orientation, `${result.body}
 `);
@@ -2870,7 +2990,7 @@ import {
   unlinkSync,
   writeFileSync
 } from "fs";
-import { basename as basename4, dirname, isAbsolute as isAbsolute2, join as join5, relative as relative2, resolve as resolve6 } from "path";
+import { basename as basename4, dirname as dirname2, isAbsolute as isAbsolute3, join as join6, relative as relative2, resolve as resolve7 } from "path";
 import {
   basouPaths as basouPaths10,
   GENERATED_END,
@@ -3122,14 +3242,14 @@ async function runProjectAdopt(options, ctx = {}) {
   }
 }
 function classifySourceRoot(repositoryRoot, declaredPath) {
-  const absolute = resolve6(repositoryRoot, declaredPath);
+  const absolute = resolve7(repositoryRoot, declaredPath);
   let real;
   try {
     real = realpathSync(absolute);
   } catch {
     return { path: declaredPath, kind: "unresolved" };
   }
-  return { path: declaredPath, kind: existsSync(join5(real, ".git")) ? "repo" : "non-repo" };
+  return { path: declaredPath, kind: existsSync(join6(real, ".git")) ? "repo" : "non-repo" };
 }
 async function doRunProjectAdopt(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
@@ -3224,11 +3344,11 @@ async function gatherRepoWiring(repositoryRoot, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve6(repositoryRoot, entry.path));
+    real = realpathSync(resolve7(repositoryRoot, entry.path));
   } catch {
     return { ...base, reachable: false, instructionFiles: [] };
   }
-  if (!existsSync(join5(real, ".git"))) {
+  if (!existsSync(join6(real, ".git"))) {
     return { ...base, reachable: false, instructionFiles: [] };
   }
   try {
@@ -3236,7 +3356,7 @@ async function gatherRepoWiring(repositoryRoot, entry) {
     for (const name of INSTRUCTION_FILES) {
       let present = true;
       try {
-        lstatSync(join5(real, name));
+        lstatSync(join6(real, name));
       } catch {
         present = false;
       }
@@ -3329,14 +3449,14 @@ function gatherRepoGitignore(repositoryRoot, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve6(repositoryRoot, entry.path));
+    real = realpathSync(resolve7(repositoryRoot, entry.path));
   } catch {
     return { ...base, reachable: false, currentLines: [] };
   }
-  if (!existsSync(join5(real, ".git"))) {
+  if (!existsSync(join6(real, ".git"))) {
     return { ...base, reachable: false, currentLines: [] };
   }
-  return { ...base, reachable: true, currentLines: readGitignoreLines(join5(real, ".gitignore")) };
+  return { ...base, reachable: true, currentLines: readGitignoreLines(join6(real, ".gitignore")) };
 }
 function hasErrorCode(error) {
   return error instanceof Error && typeof error.code === "string";
@@ -3350,7 +3470,7 @@ function readGitignoreLines(file) {
   }
 }
 function applyGitignorePlan(repositoryRoot, plan) {
-  const file = join5(realpathSync(resolve6(repositoryRoot, plan.path)), ".gitignore");
+  const file = join6(realpathSync(resolve7(repositoryRoot, plan.path)), ".gitignore");
   let existing = "";
   try {
     existing = readFileSync(file, "utf8");
@@ -3462,23 +3582,23 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
   const base = { path: entry.path };
   let real;
   try {
-    real = realpathSync(resolve6(repositoryRoot, entry.path));
+    real = realpathSync(resolve7(repositoryRoot, entry.path));
   } catch {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
   if (real === anchorReal) {
     return { ...base, isAnchor: true, reachable: true, canonicalPresent: false, files: [] };
   }
-  if (!existsSync(join5(real, ".git"))) {
+  if (!existsSync(join6(real, ".git"))) {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
-  const canonicalFile = join5(anchorReal, "agents", basename4(real), CANONICAL_FILE);
+  const canonicalFile = join6(anchorReal, "agents", basename4(real), CANONICAL_FILE);
   if (!existsSync(canonicalFile)) {
     return { ...base, isAnchor: false, reachable: true, canonicalPresent: false, files: [] };
   }
   const files = expectedSymlinkTargets(real, canonicalFile).map(
     (spec) => {
-      const { state, actualTarget } = inspectSymlink(join5(real, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join6(real, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -3499,7 +3619,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
 function applySymlinkPlan(repositoryRoot, plan) {
   let real;
   try {
-    real = realpathSync(resolve6(repositoryRoot, plan.path));
+    real = realpathSync(resolve7(repositoryRoot, plan.path));
   } catch (error) {
     const message = failureReason(error);
     return { created: [], failed: plan.toCreate.map((c) => ({ file: c.name, message })) };
@@ -3507,9 +3627,9 @@ function applySymlinkPlan(repositoryRoot, plan) {
   const created = [];
   const failed = [];
   for (const { name, target } of plan.toCreate) {
-    const filePath = join5(real, name);
+    const filePath = join6(real, name);
     try {
-      mkdirSync(dirname(filePath), { recursive: true });
+      mkdirSync(dirname2(filePath), { recursive: true });
       symlinkSync(target, filePath);
       created.push(name);
     } catch (error) {
@@ -3644,12 +3764,12 @@ async function runProjectWorkspace(options, ctx = {}) {
   }
 }
 function resolveViewDir(repositoryRoot, viewPath) {
-  const abs = resolve6(repositoryRoot, viewPath);
+  const abs = resolve7(repositoryRoot, viewPath);
   try {
     return realpathSync(abs);
   } catch {
     try {
-      return join5(realpathSync(dirname(abs)), basename4(abs));
+      return join6(realpathSync(dirname2(abs)), basename4(abs));
     } catch {
       return abs;
     }
@@ -3658,7 +3778,7 @@ function resolveViewDir(repositoryRoot, viewPath) {
 function gatherViewRepo(repositoryRoot, viewDir, entry) {
   let repoReal;
   try {
-    repoReal = realpathSync(resolve6(repositoryRoot, entry.path));
+    repoReal = realpathSync(resolve7(repositoryRoot, entry.path));
   } catch {
     return { path: entry.path, reachable: false };
   }
@@ -3667,7 +3787,7 @@ function gatherViewRepo(repositoryRoot, viewDir, entry) {
     return { path: entry.path, reachable: false };
   }
   const linkName = basename4(repoReal);
-  const { state, actualTarget } = inspectSymlink(join5(viewDir, linkName), expectedTarget);
+  const { state, actualTarget } = inspectSymlink(join6(viewDir, linkName), expectedTarget);
   return {
     path: entry.path,
     reachable: true,
@@ -3681,9 +3801,9 @@ function applyViewPlan(viewDir, toCreate) {
   const created = [];
   const failed = [];
   for (const { name, target } of toCreate) {
-    const filePath = join5(viewDir, name);
+    const filePath = join6(viewDir, name);
     try {
-      mkdirSync(dirname(filePath), { recursive: true });
+      mkdirSync(dirname2(filePath), { recursive: true });
       symlinkSync(target, filePath);
       created.push(name);
     } catch (error) {
@@ -3696,7 +3816,7 @@ var TOP_LEVEL_INSTRUCTION_FILES_LOWER = new Set(
   INSTRUCTION_FILES.filter((f) => !f.includes("/")).map((f) => f.toLowerCase())
 );
 function classifyViewLink(viewDir, name, rosterRealpaths) {
-  const filePath = join5(viewDir, name);
+  const filePath = join6(viewDir, name);
   let isLink;
   try {
     isLink = lstatSync(filePath).isSymbolicLink();
@@ -3710,12 +3830,12 @@ function classifyViewLink(viewDir, name, rosterRealpaths) {
   } catch {
     return null;
   }
-  const resolved = isAbsolute2(target) ? target : resolve6(viewDir, target);
+  const resolved = isAbsolute3(target) ? target : resolve7(viewDir, target);
   try {
     if (rosterRealpaths.has(realpathSync(resolved))) return null;
   } catch {
   }
-  if (isAbsolute2(target)) return { target, kind: "absolute" };
+  if (isAbsolute3(target)) return { target, kind: "absolute" };
   let isDir = false;
   try {
     isDir = statSync(resolved).isDirectory();
@@ -3725,7 +3845,7 @@ function classifyViewLink(viewDir, name, rosterRealpaths) {
   if (!isDir) {
     return { target, kind: existsSync(resolved) ? "non-repo" : "broken" };
   }
-  return { target, kind: existsSync(join5(resolved, ".git")) ? "repo" : "non-repo" };
+  return { target, kind: existsSync(join6(resolved, ".git")) ? "repo" : "non-repo" };
 }
 function gatherExistingViewLinks(viewDir, rosterRealpaths) {
   let names;
@@ -3750,7 +3870,7 @@ function pruneViewLinks(viewDir, toPrune, rosterRealpaths) {
   const pruned = [];
   const failed = [];
   for (const { name } of toPrune) {
-    const filePath = join5(viewDir, name);
+    const filePath = join6(viewDir, name);
     const c = classifyViewLink(viewDir, name, rosterRealpaths);
     if (c === null || c.kind !== "repo") {
       failed.push({
@@ -3796,11 +3916,11 @@ async function doRunProjectWorkspace(options, ctx) {
   } else {
     const viewDir = resolveViewDir(repositoryRoot, viewPath);
     const facts = roster.map((entry) => gatherViewRepo(repositoryRoot, viewDir, entry));
-    const rosterNames = roster.map((entry) => basename4(resolve6(repositoryRoot, entry.path)));
+    const rosterNames = roster.map((entry) => basename4(resolve7(repositoryRoot, entry.path)));
     const rosterRealpaths = /* @__PURE__ */ new Set();
     for (const entry of roster) {
       try {
-        rosterRealpaths.add(realpathSync(resolve6(repositoryRoot, entry.path)));
+        rosterRealpaths.add(realpathSync(resolve7(repositoryRoot, entry.path)));
       } catch {
       }
     }
@@ -3961,10 +4081,10 @@ async function runProjectPreset(options, ctx = {}) {
   }
 }
 function canonicalFileFor(anchorReal, canonicalName) {
-  return join5(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  return join6(anchorReal, "agents", canonicalName, CANONICAL_FILE);
 }
 function canonicalLabelFor(canonicalName) {
-  return join5("agents", canonicalName, CANONICAL_FILE);
+  return join6("agents", canonicalName, CANONICAL_FILE);
 }
 async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   const declared = {
@@ -3975,14 +4095,14 @@ async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve6(repositoryRoot, entry.path));
+    real = realpathSync(resolve7(repositoryRoot, entry.path));
   } catch {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
   if (real === anchorReal) {
     return { ...declared, isAnchor: true, reachable: true, canonicalPresent: false };
   }
-  if (!existsSync(join5(real, ".git"))) {
+  if (!existsSync(join6(real, ".git"))) {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
   const canonicalName = basename4(real);
@@ -4030,7 +4150,7 @@ async function applyPresetPlan(anchorReal, plan) {
     isLink = false;
   }
   if (isLink) throw new Error(`Canonical is a symlink in ${label}`);
-  if (plan.action === "create") mkdirSync(dirname(file), { recursive: true });
+  if (plan.action === "create") mkdirSync(dirname2(file), { recursive: true });
   const existing = await readMarkdownFile4(file);
   await writeMarkdownFile5(file, renderWithMarkers4(existing, plan.desiredBlock, label));
 }
@@ -4204,7 +4324,7 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   };
   let real;
   try {
-    real = realpathSync(resolve6(repositoryRoot, target));
+    real = realpathSync(resolve7(repositoryRoot, target));
   } catch {
     return empty;
   }
@@ -4213,24 +4333,24 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   const instructionFiles = [];
   for (const name of INSTRUCTION_FILES) {
     try {
-      lstatSync(join5(real, name));
+      lstatSync(join6(real, name));
       instructionFiles.push(name);
     } catch {
     }
   }
   let ignored;
   try {
-    ignored = new Set(readGitignoreLines(join5(real, ".gitignore")).map((l) => l.trim()));
+    ignored = new Set(readGitignoreLines(join6(real, ".gitignore")).map((l) => l.trim()));
   } catch {
     ignored = /* @__PURE__ */ new Set();
   }
   const gitignorePatterns = INSTRUCTION_FILES.filter((p) => ignored.has(p) || ignored.has(`/${p}`));
-  const canonical2 = existsSync(join5(anchorReal, "agents", canonicalName, CANONICAL_FILE));
+  const canonical2 = existsSync(join6(anchorReal, "agents", canonicalName, CANONICAL_FILE));
   let viewLink = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join5(resolveViewDir(repositoryRoot, viewPath), canonicalName));
+      lstatSync(join6(resolveViewDir(repositoryRoot, viewPath), canonicalName));
       viewLink = true;
     } catch {
     }
@@ -4272,7 +4392,7 @@ async function doRunProjectArchive(target, options, ctx) {
   const roster = manifest.repos ?? [];
   let targetIsAnchor = false;
   try {
-    targetIsAnchor = realpathSync(resolve6(repositoryRoot, target)) === realpathSync(repositoryRoot);
+    targetIsAnchor = realpathSync(resolve7(repositoryRoot, target)) === realpathSync(repositoryRoot);
   } catch {
     targetIsAnchor = false;
   }
@@ -4392,12 +4512,12 @@ function gatherRenameWiring(repositoryRoot, manifest, oldBasename) {
   } catch {
     return { canonicalDirOld: false, viewLinkOld: false };
   }
-  const canonicalDirOld = existsSync(join5(anchorReal, "agents", oldBasename));
+  const canonicalDirOld = existsSync(join6(anchorReal, "agents", oldBasename));
   let viewLinkOld = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join5(resolveViewDir(repositoryRoot, viewPath), oldBasename));
+      lstatSync(join6(resolveViewDir(repositoryRoot, viewPath), oldBasename));
       viewLinkOld = true;
     } catch {
     }
@@ -4423,7 +4543,7 @@ async function doRunProjectRename(oldPath, newPath, options, ctx) {
   const roster = manifest.repos ?? [];
   let oldIsAnchor = false;
   try {
-    oldIsAnchor = realpathSync(resolve6(repositoryRoot, oldPath)) === realpathSync(repositoryRoot);
+    oldIsAnchor = realpathSync(resolve7(repositoryRoot, oldPath)) === realpathSync(repositoryRoot);
   } catch {
     oldIsAnchor = false;
   }
@@ -4546,7 +4666,7 @@ import {
 // src/lib/durable-write.ts
 import { randomUUID } from "crypto";
 import { lstat, open, rename, stat as stat3, unlink as unlink2 } from "fs/promises";
-import { basename as basename5, dirname as dirname2, join as join6 } from "path";
+import { basename as basename5, dirname as dirname3, join as join7 } from "path";
 async function assertNotSymlink(targetPath) {
   try {
     const st = await lstat(targetPath);
@@ -4561,8 +4681,8 @@ async function assertNotSymlink(targetPath) {
   }
 }
 async function writeFileDurable(targetPath, content) {
-  const dir = dirname2(targetPath);
-  const tmpPath = join6(dir, `.${basename5(targetPath)}.tmp.${randomUUID()}`);
+  const dir = dirname3(targetPath);
+  const tmpPath = join7(dir, `.${basename5(targetPath)}.tmp.${randomUUID()}`);
   let mode = 420;
   try {
     mode = (await stat3(targetPath)).mode & 511;
@@ -4597,25 +4717,25 @@ async function writeFileDurable(targetPath, content) {
 }
 
 // src/lib/protocols-config.ts
-import { homedir as homedir5 } from "os";
-import { isAbsolute as isAbsolute3, join as join7, resolve as resolve7 } from "path";
-import { readYamlFile as readYamlFile4 } from "@basou/core";
-var DEFAULT_PROTOCOLS_CONFIG_PATH = join7(homedir5(), ".basou", "protocols.yaml");
-var DEFAULT_TARGET_PATH = join7(homedir5(), ".claude", "CLAUDE.md");
+import { homedir as homedir6 } from "os";
+import { isAbsolute as isAbsolute4, join as join8, resolve as resolve8 } from "path";
+import { readYamlFile as readYamlFile5 } from "@basou/core";
+var DEFAULT_PROTOCOLS_CONFIG_PATH = join8(homedir6(), ".basou", "protocols.yaml");
+var DEFAULT_TARGET_PATH = join8(homedir6(), ".claude", "CLAUDE.md");
 var ALLOWED_TOP_KEYS = /* @__PURE__ */ new Set(["version", "protocols"]);
 var ALLOWED_ENTRY_KEYS = /* @__PURE__ */ new Set(["source", "title"]);
-function expandTilde2(p) {
-  if (p === "~") return homedir5();
-  if (p.startsWith("~/")) return join7(homedir5(), p.slice(2));
+function expandTilde3(p) {
+  if (p === "~") return homedir6();
+  if (p.startsWith("~/")) return join8(homedir6(), p.slice(2));
   return p;
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function loadProtocolsConfig(configPath = DEFAULT_PROTOCOLS_CONFIG_PATH) {
   let raw;
   try {
-    raw = await readYamlFile4(configPath);
+    raw = await readYamlFile5(configPath);
   } catch (error) {
     if (error instanceof Error && error.message === "YAML file not found") {
       throw new Error(
@@ -4627,7 +4747,7 @@ async function loadProtocolsConfig(configPath = DEFAULT_PROTOCOLS_CONFIG_PATH) {
     }
     throw error;
   }
-  if (!isRecord2(raw) || !Array.isArray(raw.protocols)) {
+  if (!isRecord3(raw) || !Array.isArray(raw.protocols)) {
     throw new Error("~/.basou/protocols.yaml must contain a 'protocols:' list.");
   }
   for (const key of Object.keys(raw)) {
@@ -4640,7 +4760,7 @@ async function loadProtocolsConfig(configPath = DEFAULT_PROTOCOLS_CONFIG_PATH) {
   const seen = /* @__PURE__ */ new Set();
   const result = [];
   for (const entry of raw.protocols) {
-    if (!isRecord2(entry)) {
+    if (!isRecord3(entry)) {
       throw new Error("Each protocol entry must be a mapping with a 'source' key.");
     }
     for (const key of Object.keys(entry)) {
@@ -4654,11 +4774,11 @@ async function loadProtocolsConfig(configPath = DEFAULT_PROTOCOLS_CONFIG_PATH) {
     if (entry.title !== void 0 && (typeof entry.title !== "string" || entry.title.trim().length === 0)) {
       throw new Error("A protocol entry 'title' must be a non-empty string when present.");
     }
-    const expanded = expandTilde2(entry.source.trim());
-    if (!isAbsolute3(expanded)) {
+    const expanded = expandTilde3(entry.source.trim());
+    if (!isAbsolute4(expanded)) {
       throw new Error("Protocol 'source' paths must be absolute (or start with '~').");
     }
-    const abs = resolve7(expanded);
+    const abs = resolve8(expanded);
     if (seen.has(abs)) {
       throw new Error("Duplicate protocol source (each source path may appear only once).");
     }
@@ -4858,16 +4978,16 @@ import { InvalidArgumentError as InvalidArgumentError3 } from "commander";
 
 // src/commands/refresh-watch.ts
 import { readdir as readdir2, stat as stat4 } from "fs/promises";
-import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
+import { homedir as homedir7 } from "os";
+import { join as join9 } from "path";
 import { findErrorCode as findErrorCode8 } from "@basou/core";
 var DEFAULT_WATCH_INTERVAL_SEC = 30;
 var MIN_WATCH_INTERVAL_SEC = 5;
 var MAX_WATCH_INTERVAL_SEC = 86400;
 function watchedRoots(ctx) {
   return [
-    ctx.codexSessionsDir ?? join8(homedir6(), ".codex", "sessions"),
-    ctx.claudeProjectsDir ?? join8(homedir6(), ".claude", "projects")
+    ctx.codexSessionsDir ?? join9(homedir7(), ".codex", "sessions"),
+    ctx.claudeProjectsDir ?? join9(homedir7(), ".claude", "projects")
   ];
 }
 async function scanSourceLogs(roots) {
@@ -4881,7 +5001,7 @@ async function scanSourceLogs(roots) {
       throw new Error("Failed to read a source log directory", { cause: error });
     }
     for (const entry of entries) {
-      const full = join8(dir, entry.name);
+      const full = join9(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
       } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
@@ -4988,19 +5108,19 @@ function parseInterval(value) {
   return seconds;
 }
 function abortableSleep(ms, signal) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     if (signal.aborted) {
-      resolve11();
+      resolve12();
       return;
     }
     let timer;
     const onAbort = () => {
       clearTimeout(timer);
-      resolve11();
+      resolve12();
     };
     timer = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve11();
+      resolve12();
     }, ms);
     signal.addEventListener("abort", onAbort, { once: true });
   });
@@ -5199,7 +5319,7 @@ async function assertWorkspaceInitialized8(basouRoot) {
 }
 
 // src/commands/report.ts
-import { isAbsolute as isAbsolute4, resolve as resolve8 } from "path";
+import { isAbsolute as isAbsolute5, resolve as resolve9 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe10,
   basouPaths as basouPaths12,
@@ -5239,7 +5359,7 @@ async function doRunReportGenerate(options, ctx) {
     onTaskSkip: (taskId, reason) => printTaskSkip(taskId, reason)
   });
   if (options.out !== void 0) {
-    const outPath = isAbsolute4(options.out) ? options.out : resolve8(cwd, options.out);
+    const outPath = isAbsolute5(options.out) ? options.out : resolve9(cwd, options.out);
     await writeMarkdownFile6(outPath, result.body);
     const { sessions, decisions, tasks } = result.data;
     console.error(
@@ -5402,8 +5522,8 @@ function renderReviewGaps(summary) {
 
 // src/commands/run.ts
 import { mkdir as mkdir2 } from "fs/promises";
-import { homedir as homedir7 } from "os";
-import { join as join9 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join10 } from "path";
 import {
   acquireLock as acquireLock5,
   assertBasouRootSafe as assertBasouRootSafe11,
@@ -5417,7 +5537,7 @@ import {
   overwriteYamlFile as overwriteYamlFile2,
   prefixedUlid as prefixedUlid4,
   readManifest as readManifest7,
-  readYamlFile as readYamlFile5,
+  readYamlFile as readYamlFile6,
   resolveClaudeCodeCommand,
   resolveRepositoryRoot as resolveRepositoryRoot9,
   SessionSchema as SessionSchema2,
@@ -5456,13 +5576,13 @@ async function runClaudeCode(args, options, ctx = {}) {
   await assertBasouRootSafe11(paths.root);
   const manifest = await readManifest7(paths);
   const sessionId = prefixedUlid4("ses");
-  const sessionDir = join9(paths.sessions, sessionId);
+  const sessionDir = join10(paths.sessions, sessionId);
   await mkdir2(sessionDir, { recursive: true });
   const appendEvent = ctx.appendEvent ?? (async (_sessionDir, event) => {
     await coreAppendChainedEvent2(paths, sessionId, event);
   });
   const startedAt = now().toISOString();
-  const sessionYamlPath = join9(sessionDir, "session.yaml");
+  const sessionYamlPath = join10(sessionDir, "session.yaml");
   const session = buildInitialSession2({
     id: sessionId,
     command,
@@ -5588,7 +5708,7 @@ async function runClaudeCode(args, options, ctx = {}) {
   const rawRelated = computeRelatedFiles(preSnapshot, postSnapshot, diff);
   const relatedFiles = sanitizeRelatedFiles(rawRelated, {
     workingDirectory: repoRoot,
-    homedir: homedir7()
+    homedir: homedir8()
   }).sanitized;
   const finalStatus = decideFinalStatus2(result, signalReceived);
   await appendEvent(sessionDir, {
@@ -5732,7 +5852,7 @@ function buildInitialSession2(input) {
       source: { ...claudeCodeAdapterMetadata },
       started_at: input.startedAt,
       status: "initialized",
-      working_directory: sanitizeWorkingDirectory2(input.cwd, { homedir: homedir7() }),
+      working_directory: sanitizeWorkingDirectory2(input.cwd, { homedir: homedir8() }),
       invocation: {
         command: input.command,
         args: [...input.args],
@@ -5744,7 +5864,7 @@ function buildInitialSession2(input) {
   };
 }
 async function mutateSessionYaml2(filePath, mutator) {
-  const raw = await readYamlFile5(filePath);
+  const raw = await readYamlFile6(filePath);
   const parsed = SessionSchema2.parse(raw);
   mutator(parsed);
   const validated = SessionSchema2.parse(parsed);
@@ -5805,7 +5925,7 @@ async function resolveRepositoryRootForRun(cwd) {
 
 // src/commands/session.ts
 import { readFile as readFile4 } from "fs/promises";
-import { basename as basename6, isAbsolute as isAbsolute5, join as join10, relative as relative3 } from "path";
+import { basename as basename6, isAbsolute as isAbsolute6, join as join11, relative as relative3 } from "path";
 import {
   acquireLock as acquireLock6,
   appendEventToExistingSession as appendEventToExistingSession3,
@@ -5817,7 +5937,7 @@ import {
   loadSessionEntries,
   readAllEvents,
   readManifest as readManifest8,
-  readYamlFile as readYamlFile6,
+  readYamlFile as readYamlFile7,
   rechainSessionInPlace,
   resolveSessionId as resolveSessionId3,
   resolveTaskId,
@@ -5930,11 +6050,11 @@ async function doRunSessionShow(idInput, options, ctx) {
   const paths = basouPaths15(repositoryRoot);
   await assertWorkspaceInitialized10(paths.root);
   const sessionId = await resolveSessionId3(paths, idInput);
-  const sessionDir = join10(paths.sessions, sessionId);
-  const sessionYamlPath = join10(sessionDir, "session.yaml");
+  const sessionDir = join11(paths.sessions, sessionId);
+  const sessionYamlPath = join11(sessionDir, "session.yaml");
   let session;
   try {
-    const raw = await readYamlFile6(sessionYamlPath);
+    const raw = await readYamlFile7(sessionYamlPath);
     session = SessionSchema3.parse(raw);
   } catch (error) {
     if (findErrorCode11(error, "ENOENT")) {
@@ -6052,7 +6172,7 @@ function formatSessionWork(session, events, now) {
 }
 function formatWorkingDir(workingDir, repositoryRoot, options) {
   if (options.fullPath === true) return workingDir;
-  if (!isAbsolute5(workingDir)) {
+  if (!isAbsolute6(workingDir)) {
     if (workingDir === ".") return "<repository_root>";
     return workingDir;
   }
@@ -6669,7 +6789,7 @@ async function resolveRepositoryRootForStatus(cwd) {
 
 // src/commands/task.ts
 import { readFile as readFile5 } from "fs/promises";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import {
   archiveTask,
   assertBasouRootSafe as assertBasouRootSafe15,
@@ -6996,7 +7116,7 @@ async function doRunTaskShow(idInput, options, ctx) {
   const events = [];
   const linkedSessionIds = new Set(doc.task.task.linked_sessions);
   for (const s of sessions) {
-    const sessionDir = join11(paths.sessions, s.sessionId);
+    const sessionDir = join12(paths.sessions, s.sessionId);
     try {
       for await (const ev of replayEvents2(sessionDir, {
         onWarning: (w) => printReplayWarning(w, s.sessionId)
@@ -7899,7 +8019,7 @@ async function assertWorkspaceInitialized13(basouRoot) {
 // src/commands/view.ts
 import { spawn } from "child_process";
 import { createHash } from "crypto";
-import { basename as basename7, resolve as resolve10 } from "path";
+import { basename as basename7, resolve as resolve11 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe17,
   basouPaths as basouPaths20,
@@ -7912,7 +8032,7 @@ import { InvalidArgumentError as InvalidArgumentError7 } from "commander";
 // src/lib/portfolio-safety.ts
 import { execFile } from "child_process";
 import { lstat as lstat2, realpath as realpath2 } from "fs/promises";
-import { isAbsolute as isAbsolute6, join as join12, relative as relative4, resolve as resolve9 } from "path";
+import { isAbsolute as isAbsolute7, join as join13, relative as relative4, resolve as resolve10 } from "path";
 import { promisify } from "util";
 import { readManifest as readManifest11 } from "@basou/core";
 var execFileAsync = promisify(execFile);
@@ -7923,12 +8043,12 @@ async function canonical(p) {
   try {
     return await realpath2(p);
   } catch {
-    return resolve9(p);
+    return resolve10(p);
   }
 }
 function isInside(child, parent) {
   const rel = relative4(parent, child);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
 }
 function isBasouPath(p) {
   return p === ".basou" || p.startsWith(".basou/") || p.includes("/.basou/") || p.endsWith("/.basou");
@@ -7936,7 +8056,7 @@ function isBasouPath(p) {
 async function inspectRepo(repoPath) {
   let hasEntry = false;
   try {
-    await lstat2(join12(repoPath, ".basou"));
+    await lstat2(join13(repoPath, ".basou"));
     hasEntry = true;
   } catch (error) {
     if (errorCode(error) !== "ENOENT") {
@@ -7985,7 +8105,7 @@ async function checkPortfolioSafety(workspaces) {
     }
     const monitored = /* @__PURE__ */ new Map();
     for (const root of sourceRoots) {
-      const display = resolve9(ws.repoRoot, root);
+      const display = resolve10(ws.repoRoot, root);
       const real = await canonical(display);
       if (real !== wsReal) monitored.set(real, display);
     }
@@ -8037,7 +8157,7 @@ function formatSafetyReport(result) {
 
 // src/lib/view-server.ts
 import { createServer } from "http";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 import {
   computeWorkStats as computeWorkStats2,
   enumerateApprovals as enumerateApprovals2,
@@ -8694,7 +8814,7 @@ function startViewServer(opts) {
   };
   let boundPort = port;
   const getPort = () => boundPort;
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const server = createServer((req, res) => {
       handleRequest(req, res, deps, getPort, runExclusive).catch((error) => {
         sendError(res, error instanceof HttpError ? error.status : 500, pathlessMessage(error));
@@ -8705,7 +8825,7 @@ function startViewServer(opts) {
       const address = server.address();
       boundPort = isAddressInfo(address) ? address.port : port;
       server.off("error", reject);
-      resolve11({
+      resolve12({
         url: `http://${host}:${boundPort}`,
         port: boundPort,
         close: () => closeServer(server)
@@ -8717,8 +8837,8 @@ function isAddressInfo(value) {
   return value !== null && typeof value === "object";
 }
 function closeServer(server) {
-  return new Promise((resolve11) => {
-    server.close(() => resolve11());
+  return new Promise((resolve12) => {
+    server.close(() => resolve12());
     server.closeAllConnections();
   });
 }
@@ -8992,7 +9112,7 @@ async function sessionDetail(ws, sessionId) {
     throw error;
   }
   try {
-    const events = await readAllEvents2(join13(ws.paths.sessions, sessionId));
+    const events = await readAllEvents2(join14(ws.paths.sessions, sessionId));
     return { session, events };
   } catch {
     return { session, events: [], degraded: true };
@@ -9212,12 +9332,12 @@ async function buildSingleDeps(ctx, cwd) {
   return { workspaces: [entry], mode: "single", nowProvider: nowProviderOf(ctx) };
 }
 async function buildPortfolioDeps(workspaceFlags, ctx, cwd) {
-  const specs = workspaceFlags.length > 0 ? workspaceFlags.map((p) => ({ path: resolve10(cwd, p) })) : await loadPortfolioConfig(ctx.portfolioConfigPath);
+  const specs = workspaceFlags.length > 0 ? workspaceFlags.map((p) => ({ path: resolve11(cwd, p) })) : await loadPortfolioConfig(ctx.portfolioConfigPath);
   const entries = [];
   const seenPath = /* @__PURE__ */ new Set();
   const seenKey = /* @__PURE__ */ new Set();
   for (const spec of specs) {
-    const repoRoot = resolve10(spec.path);
+    const repoRoot = resolve11(spec.path);
     if (seenPath.has(repoRoot)) continue;
     seenPath.add(repoRoot);
     const entry = await buildWorkspaceEntry(repoRoot, ctx, spec.label);
@@ -9289,7 +9409,7 @@ function openInBrowser(url, override) {
   }
 }
 function waitForShutdown(signal) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const cleanup = () => {
       process.off("SIGINT", onSignal);
       process.off("SIGTERM", onSignal);
@@ -9297,18 +9417,18 @@ function waitForShutdown(signal) {
     };
     const onSignal = () => {
       cleanup();
-      resolve11();
+      resolve12();
     };
     const onAbort = () => {
       cleanup();
-      resolve11();
+      resolve12();
     };
     process.on("SIGINT", onSignal);
     process.on("SIGTERM", onSignal);
     if (signal !== void 0) {
       if (signal.aborted) {
         cleanup();
-        resolve11();
+        resolve12();
         return;
       }
       signal.addEventListener("abort", onAbort);